Enterasys Networks XSR-3020 manual Apply QoS, Configure Ospf Routing, Configure More Access Lists

Page 68

Frame Relay WAN Link with PPP Backup Sample Configuration

Apply QoS

XSR(config)#map-class frame-relay CLASS-FRP

+Adds a FR map class and acquires FR Map Class mode

XSR(config-map-class<CLASS-FRP>)#frame-relay cir out 48000

+Sets this map class’ CIR rate at 48000 bits per second

XSR(config-map-class<CLASS-FRP>)#frame-relay bc out 4000

+Sets this map class’ committed burst size to 4000 bits

XSR(config-map-class<CLASS-FRP>)#frame-relay be out 3000

+Sets this map class’ excess burst size to 3000 bits

XSR(config-map-class<CLASS-FRP>)#frame-relay adaptive-shaping

+Enables BECN (traffic shaping) for this map class

XSR(config-map-class<CLASS-FRP>)#service-policy output data_policy

+Attaches this policy to the map class

XSR(config)#map-class frame-relay CLASS-SI

+Adds another FR map class and acquires Frame Relay Map Class mode

XSR(config-map-class<CLASS-SI>)#frame-relay cir out 30000

+Sets this map class’ CIR rate at 30,000 bits per second

XSR(config-map-class<CLASS-SI>)#frame-relay bc out 5000

+Sets this map class’ committed burst size to 5000 bits

XSR(config-map-class<CLASS-SI>)#frame-relay be out 3000

+Sets this map class’ excess burst size to 3000 bits

XSR(config-map-class<CLASS-SI>)#frame-relay adaptive-shaping

+Enables BECN (traffic shaping) for this map class

Router(config-map-class<CLASS-SI>)#service-policy HighOutput

+Attaches this policy to the map class

XSR(config)#map-class frame-relay CLASS-DLCI

+Adds another Frame Relay map class and acquires Frame Relay Map Class mode

XSR(config-map-class<CLASS-DLCI>)#frame-relay cir out 50000

+Sets this map class’ CIR rate at 50,000 bits per second

XSR(config-map-class<CLASS-DLCI>)#frame-relay bc out 4000

+Sets this map class’ committed burst size to 4000 bits

XSR(config-map-class<CLASS-DLCI>)#frame-relay be out 1000

+Sets this map class’ excess burst size to 1000 bits

XSR(config-map-class<CLASS-DLCI>)#frame-relay adaptive-shaping

+Enables BECN (traffic shaping) for this map class

XSR(config-map-class<CLASS-DLCI>)#service-policy output priority-policy

+Attaches this policy to the map class

Configure OSPF Routing

XSR(config)#router ospf 1

+Enables OSPF with a router ID and acquires Router mode

XSR(config-router)#network 192.168.1.0 0.0.0.255 area 0.0.0.10

+Configures the area ID for the specified network

XSR(config-router)#network 154.68.1.0 0.0.0.255 area 0.0.0.0

+Configures another area ID for the specified network

Configure More Access Lists

The following ACLs deny any packets to or from network 192.168.1.15 as they enter or leave FastEthernet 1 interface, and permit traffic to or from subnet 192.168.2.xx while denying any other traffic.

XSR(config)#access-list 125 deny ip any host 192.168.1.15

3-24 Software Configuration

Image 68
Contents PeditionSecurity Router VersionPage Enterasys Networks, Inc Minuteman Road Andover, MA Regulatory Compliance Information Industry Canada Notices Product Safety Supplement to Product Instructions Vcci Notice N826 Enterasys Networks, Inc. Firmware License Agreement Page Page Contents BRI Leased Line BRI Leased Frame Relay BRI Switched Line Appendix a Specifications IndexXiv Contents of the Guide About This GuideBold/En negrilla Getting Help FTPXviii Overview System DescriptionHardware Features PstnXSR-3020 Software Features Operating SystemIndustry-common CLI IP ProtocolIP Routing Snmp and Statistics GatheringSecurity Frame RelayDynamic Host Configuration Protocol Dhcp Integrated Services Digital Network Isdn BRI/PRIQuality of Service QoS Virtual Private Network VPNGRE over IPSec Dial Service Dial BackupAsynchronous Digital Subscriber Line Adsl Dial-on-Demand/Bandwidth-on-Demand DoD/BoDInstallation Overview Installation Overview Verifying Your Shipment Installation Site SuggestionsIntroduction Installing NIM Cards and Rack Mounting Removing XSR CoverRemoving NIM Slot Cover Fastening Rack Brackets Installing a CompactFlash Memory Card CompactFlash Card InstallationCompactFlash Card for the Adsl NIM Formatting the CompactFlash CardConnecting Cables Connecting Serial COM Console Cable11 Connecting High Speed Serial Connector 3020 15 Attaching Ethernet Connector 17 Attaching Ethernet LAN NIM Connector 19 Connecting Power Supply Cord Software Configuration Initializing XSR SoftwareInitializing XSR Software Opening a COM Console Session Optional Configuring Remote Auto InstallConfiguring RAI for Frame Relay Remote Auto Install Attempting Forever Configuring RAI for Dhcp over LAN Configuring RAI over AdslVirtual-template 1 pppoe limit per-mac Setting User Name, Privilege and Password Configuring the XSR Name and User InformationSetting the Clock PRI Configuration Configuring the LAN PortsConfiguring the WAN Ports BRI Leased Frame Relay BRI ConfigurationBRI Leased Line BRI Switched Line PPPoA Adsl ConfigurationPPPoE Firewall Sample Configuration IPoAXSR with Firewall Topology Setting Up RIP Routing Complete LAN and WAN interface configurationConfigure Ospf Routing Configuring Frame Relay Point to Point NetworksSetting Up an Snmp Community String, Traps and V3 Values Configuring Message Logging and Severity Level Viewing Your ConfigurationConnecting Remotely via the Web Product VersionWeb Product Version Window LAN-PPP Services Sample Configuration Backup Site Hostname branch2Frame Relay WAN Link with PPP Backup Sample Configuration Configure Quality of Service Configure Users and PasswordsConfigure LAN Interface Configure WAN/Frame Relay Port XSRconfig-pmap-cpriority-server#priority medium 20Apply QoS Configure Ospf RoutingConfigure More Access Lists Configure DHCP/BOOTP Relay Configure the Dial Backup ConnectionVPN Site-to-Site Sample Configuration Configure SnmpConfigure Access Control Lists Set Up IKE Phase I SecurityConfigure IKE Policy for Remote Peer Generate Master Encryption KeyCreate a Transform Set Configure Crypto MapsConfiguring VPN at Interface Mode and Setting Up RIP VPN Sample Configuration with Network Extension Mode Configuring Authentication AAAVPN Topology with NEM, EZ-IPSec and Internet Access Create the Isakmp IKE global peer XSR Rebooting Characteristics Initialization OutputReboot Triggers Reboot TriggersPower-up Error Conditions Bootrom Monitor Mode Commands Bootrom Monitor Mode Commands Dir CopyDel Ffc Remove RenameFTP Bootrom Monitor Mode Commands Bootrom Monitor Mode Commands Software Configuration Specifications System SpecificationsCable, CompactFlash and Accessory Specifications NIM WANXSR Getting Started Guide A-3 COM Console Port COMGigabitEthernet Ports Mini-GBIC Fiber, Copper PortRegulatory/Safety Compliance Copper/Fiber-optic Ethernet NIMsPort Serial NIM Card Port 21 DTEFigure A-8 EIA-232/530 DTE Pin Assignments Figure A-9 EIA-449 DTE Pin Assignments Figure A-10 Combined V.35/EIA-232/530 DTE Pin Assignments Figure A-11 DTE Pin Assignments T1/E1/ISDN PRI NIM Card Ports T1/E1/ISDN PRIBalun for E1 or PRI NIM Cards Grounding Shunt for E1 NIM CardsInstalling Shunt/Terminal Strip Figure A-16 Installing a Grounding Shunt on the E1 NIM CardT3/E3 NIM Card Figure A-17 1-Port T3/E3 NIM CardPort BRI-S/T NIM Card Ports BRI-S/TTermination Shunt for the Isdn BRI-S/T NIM Card Port BRI-U NIM Card Ports Figure A-21 Isdn BRI-U NIM Card RJ-49C ports shownPort Adsl NIM Card Port Figure A-23 Adsl NIM CardT1/E1 Drop & Insert D&I NIM Figure A-25 T1/E1 D&I NIM CardCompactFlash Memory Card LED BehaviorPWR Index Index-2

XSR-3020 specifications

Enterasys Networks XSR-3020 is a sophisticated Layer 2 and Layer 3 switch designed to meet the demands of modern networking environments. Known for its robust performance and versatility, the XSR-3020 is an ideal solution for enterprises that require high efficiency, comprehensive security, and network reliability.

This switch supports a variety of advanced technologies, making it suitable for both data center and edge deployments. One of its standout features is its scalability. The XSR-3020 can accommodate growing network demands by allowing for easy integration of additional modules. This capacity for expansion ensures that organizations can adapt their networks without the need for complete hardware replacements.

The XSR-3020 offers high-speed connectivity through its multiple gigabit Ethernet ports, providing up to 48 10/100/1000BASE-T ports in a single chassis. This high-density design optimizes the physical space and ensures that organizations can connect numerous devices simultaneously without sacrificing performance. Additionally, it supports Power over Ethernet (PoE), allowing users to power network devices, such as IP cameras and access points, directly through the switch. This feature streamlines installations and reduces the clutter of electrical wiring.

Security is a critical consideration in today’s network landscape, and the XSR-3020 addresses this need with robust security features. It incorporates advanced access control capabilities, enabling administrators to segment traffic and enforce policies effectively. The switch also supports 802.1X authentication, ensuring that only authorized devices can connect to the network.

In terms of management, the XSR-3020 is designed to simplify operations through its user-friendly interface and extensive support for management protocols. It offers native support for Simple Network Management Protocol (SNMP) and can be easily integrated with various network management systems, allowing for efficient monitoring and troubleshooting.

Another key characteristic of the XSR-3020 is its reliability. With features such as redundant power supplies and fans, the switch ensures high availability, minimizing downtime for critical applications. It is also built to withstand harsh conditions, making it suitable for diverse environments.

Overall, the Enterasys Networks XSR-3020 combines high performance, scalability, and security, making it an excellent choice for organizations looking to enhance their network infrastructure. Its comprehensive set of features positions it as a reliable backbone for any modern enterprise network, ensuring that businesses can operate efficiently and securely.