Enterasys Networks XSR-3020 Configuring the XSR Name and User Information, Setting the Clock

Page 51

Configuring the XSR Name and User Information

+The XSR waits one minute for the PPPoE connection to come up.

Phase 4 - ADSL - IP is connected on 0/35, prepare to load startup config

+The XSR starts downloading the startup-file.

Phase 6 - ATM/ADSL - retrieving file 0000019876543210-confg from tftp server 25 5.255.255.255

+The startup-config name is the serial number of the XSR.

Phase 7 - preparing node to execute startup-config

Configuring the XSR Name and User Information

1.At the CLI prompt, enter enable to acquire Privileged EXEC mode.

2.Enter configure to acquire Global mode.

3.Enter hostname <your XSR designation>.

4.Enter username <name> <privilege level> password <cleartext secret> <0 5> <password>.

5.Enter banner login <your welcome text> to add a user login banner. Remember to save your configuration after all edits.

Setting User Name, Privilege and Password

The value <name> is the user’s designation - for sake of clarity, often set as the name of the facility or site the XSR connects to. The value <privilege level> (0-15) prioritizes this user in terms of configuration rights with 15 as the highest and 0 the lowest (default). When you create a new user you can decide which privilege that user will have (if you are admin). For example, a user with privilege 7 will be allowed to execute only commands with privilege levels between 0 and 7.

Default privilege levels are defined for all commands and the admin user and are listed in the XSR CLI Reference Guide under the privilege command. You can change a command’s default privilege by entering: privilege <configuration_mode> level <0-15> <command command_group>.

The value <cleartext secret> can be sent in the clear or encrypted with a 0 (the input password is not expected to be unencrypted so the XSR will encrypt it) or 5 (the input password is expected to already be encrypted so it will not be encrypted again). The value <pass> is the password associated with the specified name. The MD5 algorithm is encrypts the password.

Note: Newly created users are stored in the startup config file. You can also delete admin but only if you first create another level 15 user.

Setting the Clock

XSR 1800 and 3000 Series routers have an on-board Real Time Clock (RTC) chip with which to keep accurate time across the network. As an alternative to accessing a public time server, you can utilize the RTC as a time reference and propagate it by configuring XSRs as Simple Network Time Protocol (SNTP) servers or clients. XSR 1200 Series routers do not carry an RTC chip, however, and if your topology includes these devices you must synchronize them from an external source.

Enter the following command to configure the XSR as an SNTP client:

XSR(config)#sntp-client server [primary A.B.C.D.][alternate A.B.C.D.]

Enter the following command to configure the XSR as an SNTP server:

XSR Getting Started Guide 3-7

Image 51
Contents Version PeditionSecurity RouterPage Enterasys Networks, Inc Minuteman Road Andover, MA Regulatory Compliance Information Industry Canada Notices Product Safety Supplement to Product Instructions Vcci Notice N826 Enterasys Networks, Inc. Firmware License Agreement Page Page Contents BRI Leased Line BRI Leased Frame Relay BRI Switched Line Index Appendix a SpecificationsXiv About This Guide Contents of the GuideBold/En negrilla FTP Getting HelpXviii System Description OverviewPstn Hardware FeaturesXSR-3020 IP Protocol Software FeaturesOperating System Industry-common CLISnmp and Statistics Gathering IP RoutingFrame Relay SecurityIntegrated Services Digital Network Isdn BRI/PRI Dynamic Host Configuration Protocol DhcpVirtual Private Network VPN Quality of Service QoSGRE over IPSec Dial-on-Demand/Bandwidth-on-Demand DoD/BoD Dial ServiceDial Backup Asynchronous Digital Subscriber Line AdslInstallation Overview Installation Overview Installation Site Suggestions IntroductionVerifying Your Shipment Removing XSR Cover Installing NIM Cards and Rack MountingRemoving NIM Slot Cover Fastening Rack Brackets CompactFlash Card Installation Installing a CompactFlash Memory CardFormatting the CompactFlash Card CompactFlash Card for the Adsl NIMConnecting Serial COM Console Cable Connecting Cables11 Connecting High Speed Serial Connector 3020 15 Attaching Ethernet Connector 17 Attaching Ethernet LAN NIM Connector 19 Connecting Power Supply Cord Initializing XSR Software Software ConfigurationInitializing XSR Software Optional Configuring Remote Auto Install Configuring RAI for Frame RelayOpening a COM Console Session Remote Auto Install Attempting Forever Configuring RAI over Adsl Configuring RAI for Dhcp over LANVirtual-template 1 pppoe limit per-mac Configuring the XSR Name and User Information Setting the ClockSetting User Name, Privilege and Password Configuring the LAN Ports Configuring the WAN PortsPRI Configuration BRI Configuration BRI Leased LineBRI Leased Frame Relay BRI Switched Line Adsl Configuration PPPoEPPPoA IPoA Firewall Sample ConfigurationXSR with Firewall Topology Complete LAN and WAN interface configuration Setting Up RIP RoutingConfiguring Frame Relay Point to Point Networks Configure Ospf RoutingSetting Up an Snmp Community String, Traps and V3 Values Viewing Your Configuration Configuring Message Logging and Severity LevelProduct Version Connecting Remotely via the WebWeb Product Version Window Backup Site Hostname branch2 LAN-PPP Services Sample ConfigurationFrame Relay WAN Link with PPP Backup Sample Configuration Configure Users and Passwords Configure LAN InterfaceConfigure Quality of Service XSRconfig-pmap-cpriority-server#priority medium 20 Configure WAN/Frame Relay PortConfigure Ospf Routing Configure More Access ListsApply QoS Configure the Dial Backup Connection Configure DHCP/BOOTP RelayConfigure Snmp VPN Site-to-Site Sample ConfigurationGenerate Master Encryption Key Configure Access Control ListsSet Up IKE Phase I Security Configure IKE Policy for Remote PeerConfigure Crypto Maps Configuring VPN at Interface Mode and Setting Up RIPCreate a Transform Set Configuring Authentication AAA VPN Sample Configuration with Network Extension ModeVPN Topology with NEM, EZ-IPSec and Internet Access Create the Isakmp IKE global peer Initialization Output XSR Rebooting CharacteristicsReboot Triggers Reboot TriggersPower-up Error Conditions Bootrom Monitor Mode Commands Bootrom Monitor Mode Commands Copy DelDir Ffc Rename RemoveFTP Bootrom Monitor Mode Commands Bootrom Monitor Mode Commands Software Configuration System Specifications SpecificationsNIM WAN Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-3 COM COM Console PortMini-GBIC Fiber, Copper Port GigabitEthernet PortsCopper/Fiber-optic Ethernet NIMs Regulatory/Safety Compliance21 DTE Port Serial NIM Card PortFigure A-8 EIA-232/530 DTE Pin Assignments Figure A-9 EIA-449 DTE Pin Assignments Figure A-10 Combined V.35/EIA-232/530 DTE Pin Assignments Figure A-11 DTE Pin Assignments T1/E1/ISDN PRI T1/E1/ISDN PRI NIM Card PortsGrounding Shunt for E1 NIM Cards Balun for E1 or PRI NIM CardsFigure A-16 Installing a Grounding Shunt on the E1 NIM Card Installing Shunt/Terminal StripFigure A-17 1-Port T3/E3 NIM Card T3/E3 NIM CardBRI-S/T Port BRI-S/T NIM Card PortsTermination Shunt for the Isdn BRI-S/T NIM Card Figure A-21 Isdn BRI-U NIM Card RJ-49C ports shown Port BRI-U NIM Card PortsFigure A-23 Adsl NIM Card Port Adsl NIM Card PortFigure A-25 T1/E1 D&I NIM Card T1/E1 Drop & Insert D&I NIMLED Behavior CompactFlash Memory CardPWR Index Index-2

XSR-3020 specifications

Enterasys Networks XSR-3020 is a sophisticated Layer 2 and Layer 3 switch designed to meet the demands of modern networking environments. Known for its robust performance and versatility, the XSR-3020 is an ideal solution for enterprises that require high efficiency, comprehensive security, and network reliability.

This switch supports a variety of advanced technologies, making it suitable for both data center and edge deployments. One of its standout features is its scalability. The XSR-3020 can accommodate growing network demands by allowing for easy integration of additional modules. This capacity for expansion ensures that organizations can adapt their networks without the need for complete hardware replacements.

The XSR-3020 offers high-speed connectivity through its multiple gigabit Ethernet ports, providing up to 48 10/100/1000BASE-T ports in a single chassis. This high-density design optimizes the physical space and ensures that organizations can connect numerous devices simultaneously without sacrificing performance. Additionally, it supports Power over Ethernet (PoE), allowing users to power network devices, such as IP cameras and access points, directly through the switch. This feature streamlines installations and reduces the clutter of electrical wiring.

Security is a critical consideration in today’s network landscape, and the XSR-3020 addresses this need with robust security features. It incorporates advanced access control capabilities, enabling administrators to segment traffic and enforce policies effectively. The switch also supports 802.1X authentication, ensuring that only authorized devices can connect to the network.

In terms of management, the XSR-3020 is designed to simplify operations through its user-friendly interface and extensive support for management protocols. It offers native support for Simple Network Management Protocol (SNMP) and can be easily integrated with various network management systems, allowing for efficient monitoring and troubleshooting.

Another key characteristic of the XSR-3020 is its reliability. With features such as redundant power supplies and fans, the switch ensures high availability, minimizing downtime for critical applications. It is also built to withstand harsh conditions, making it suitable for diverse environments.

Overall, the Enterasys Networks XSR-3020 combines high performance, scalability, and security, making it an excellent choice for organizations looking to enhance their network infrastructure. Its comprehensive set of features positions it as a reliable backbone for any modern enterprise network, ensuring that businesses can operate efficiently and securely.