Enterasys Networks XSR-3150 Configuring the XSR Name and User Information, Setting the Clock

Page 51

Configuring the XSR Name and User Information

Phase 3 - ADSL - trying to connect on 0/35 with snap PPPoE

+PVC 0/35 is found, SNAP PPPoE encapsulation is applied and authentication tried if required.

Phase 3 - ADSL - waiting for IP to connect (54 sec)

+The XSR waits one minute for the PPPoE connection to come up.

Phase 4 - ADSL - IP is connected on 0/35, prepare to load startup config

+The XSR starts downloading the startup-file.

Phase 6 - ATM/ADSL - retrieving file 0000019876543210-confg from tftp server 25 5.255.255.255

+The startup-config name is the serial number of the XSR.

Phase 7 - preparing node to execute startup-config

Configuring the XSR Name and User Information

1.At the CLI prompt, enter enable to acquire Privileged EXEC mode.

2.Enter configure to acquire Global mode.

3.Enter hostname <your XSR designation>.

4.Enter username <name> <privilege level> password <cleartext secret> <0 5> <password>.

5.Enter banner login <your welcome text> to add a user login banner. Remember to save your configuration after all edits.

Setting User Name, Privilege and Password

The value <name> is the user’s designation - for sake of clarity, often set as the name of the facility or site the XSR connects to. The value <privilege level> (0-15) prioritizes this user in terms of configuration rights with 15 as the highest and 0 the lowest (default). When you create a new user you can decide which privilege that user will have (if you are admin). For example, a user with privilege 7 will be allowed to execute only commands with privilege levels between 0 and 7.

Default privilege levels are defined for all commands and the admin user and are listed in the XSR CLI Reference Guide under the privilege command. You can change a command’s default privilege by entering: privilege <configuration_mode> level <0-15> <command command_group>.

The value <cleartext secret> can be sent in the clear or encrypted with a 0 (the input password is not expected to be unencrypted so the XSR will encrypt it) or 5 (the input password is expected to already be encrypted so it will not be encrypted again). The value <pass> is the password associated with the specified name. The MD5 algorithm is encrypts the password.

Note: Newly created users are stored in the startup config file. You can also delete admin but only if you first create another level 15 user.

Setting the Clock

XSR 1800 and 3000 Series routers have an on-board Real Time Clock (RTC) chip with which to keep accurate time across the network. As an alternative to accessing a public time server, you can utilize the RTC as a time reference and propagate it by configuring XSRs as Simple Network Time Protocol (SNTP) servers or clients. XSR 1200 Series routers do not carry an RTC chip, however, and if your topology includes these devices you must synchronize them from an external source.

XSR Getting Started Guide 3-7

Image 51
Contents Version PeditionSecurity RouterPage Enterasys Networks, Inc Minuteman Road Andover, MA Regulatory Compliance Information Industry Canada Notices Product Safety Supplement to Product Instructions Vcci Notice N826 Enterasys Networks, Inc. Firmware License Agreement Page Page Contents BRI Leased Line BRI Leased Frame Relay BRI Switched Line Index Appendix a SpecificationsXiv About This Guide Contents of the GuideBold/En negrilla FTP Getting HelpXviii System Description OverviewTypical XSR-3150 Topology Hardware FeaturesXSR-3150 IP Protocol Software FeaturesOperating System Industry-common CLISnmp and Statistics Gathering IP RoutingFrame Relay SecurityIntegrated Services Digital Network Isdn BRI/PRI Dynamic Host Configuration Protocol DhcpVirtual Private Network VPN Quality of Service QoSGRE over IPSec Dial-on-Demand/Bandwidth-on-Demand DoD/BoD Dial ServiceDial Backup Asynchronous Digital Subscriber Line AdslUnpack the XSR from the shipping box. Remove accessories Installation OverviewInstallation Overview Installation Site Suggestions IntroductionVerifying Your Shipment Removing XSR Cover Installing NIM Cards and Rack MountingXSR Fastening Rack Brackets CompactFlash Card Installation Installing a CompactFlash Memory CardFormatting the CompactFlash Card CompactFlash Card for the Adsl NIM3150 Connecting Cables11 Connecting High Speed Serial Connector 13 Connecting Adsl Connector 15 Attaching GigabitEthernet Connector 17 Attaching Ethernet LAN NIM Connector 19 Connecting Dual Internal Power Supply Cords Initializing XSR Software Software ConfigurationInitializing XSR Software Optional Configuring Remote Auto Install Configuring RAI for Frame RelayOpening a COM Console Session Remote Auto Install Attempting Forever Configuring RAI over Adsl Configuring RAI for Dhcp over LANPppoe limit max-sessions Configuring the XSR Name and User Information Setting the ClockSetting User Name, Privilege and Password Configuring the LAN Ports Configuring the WAN PortsPRI Configuration BRI Leased Line BRI ConfigurationBRI Leased Frame Relay BRI Switched LineAdsl Configuration PPPoEPPPoA IPoA Firewall Sample ConfigurationXSR Complete LAN and WAN interface configuration Setting Up RIP RoutingConfiguring Frame Relay Point to Point Networks Configure Ospf RoutingSetting Up an Snmp Community String, Traps and V3 Values Configuring Message Logging and Severity Level Connecting Remotely via the Web Viewing Your ConfigurationWeb Product Version Window Pstn LAN-PPP Services Sample ConfigurationXSRconfig-controllerT1-1/0#no shutdown Configure Quality of Service Frame Relay WAN Link with PPP Backup Sample ConfigurationConfigure Users and Passwords Configure LAN InterfaceXSRconfig-pmap-cpriority-policy#priority high 30 Configure WAN/Frame Relay PortApply QoS XSRconfig#interface serial 1/0.2 multipointConfigure the Dial Backup Connection Configure Ospf RoutingConfigure More Access Lists Configure DHCP/BOOTP RelayConfigure Snmp VPN Site-to-Site Sample Configuration Configure Access Control ListsGenerate Master Encryption Key Create a Transform Set Set Up IKE Phase I SecurityConfigure IKE Policy for Remote Peer Configure Crypto MapsConfiguring VPN at Interface Mode and Setting Up RIP Configuring Authentication AAA VPN Sample Configuration with Network Extension ModeEnable Network Address Translation Create the Isakmp IKE global peer Initialization Output XSR Rebooting CharacteristicsPower-Up Reboot Reboot TriggersPower-up Error Conditions Bootrom Monitor Mode CommandsXSR-3150 bu btXSR300012.fls Verifying btXSR300012.fls file Copy Dir DelFfc Rename RemoveFTP Bootrom Monitor Mode Commands System Specifications SpecificationsWAN Cable, CompactFlash and Accessory SpecificationsXSR Getting Started Guide A-3 COM COM Console PortMini-GBIC Fiber, Copper Port GigabitEthernet PortsCopper/Fiber-optic Ethernet NIMs Regulatory/Safety Compliance21 DTE Port Serial NIM Card PortFigure A-8 EIA-232/530 DTE Pin Assignments Figure A-9 EIA-449 DTE Pin Assignments Figure A-10 Combined V.35/EIA-232/530 DTE Pin Assignments Figure A-11 DTE Pin Assignments T1/E1/ISDN PRI T1/E1/ISDN PRI NIM Card PortsFigure A-14 Balun for E1 or PRI Connection Balun for E1 or PRI NIM CardsGrounding Shunt for E1 NIM Cards Installing Shunt/Terminal StripFigure A-17 1-Port T3/E3 NIM Card T3/E3 NIM CardTermination Shunt for the Isdn BRI-S/T NIM Card Port BRI-S/T Isdb NIM Card PortsXSR Getting Started Guide A-17 Figure A-21 Isdn BRI-U NIM Card RJ-49C ports shown Port BRI-U NIM Card PortsFigure A-23 Adsl NIM Card Port Adsl NIM Card PortFigure A-25 T1/E1 D&I NIM Card T1/E1 Drop & Insert D&I NIMLED Behavior CompactFlash Memory CardTX LED Index Index-2