Enterasys Networks XSR-Series manual Configuration Guide

Page 10

3.0Access control list incoming outgoing

3.1Access control list 1-99 (standard)

3.2Access control list 100-199 (extended)

XSR-1805#show running-config

!!

!Version 4.0.0.0, Built Mar 26 2003, 19:47:17

hostname XSR-1805

access-list 2 permit 20.20.20.0 0.0.0.255

access-list 110 deny ip 10.10.10.100 0.0.0.0 any access-list 110 deny ip 10.10.10.111 0.0.0.0 any access-list 110 permit ip any any

interface FastEthernet1 description "LAN-Interface1" ip access-group 110 in

ip address 10.10.10.1 255.255.255.0 no shutdown

interface FastEthernet2 description "LAN-Interface2" ip access-group 2 out

ip address 20.20.20.1 255.255.255.0 no shutdown

end

XSR-1805#

XSR-1805(config)#access-list ?

<1-99>

Standard access list

<100-199>

Extended access list

XSR-1805(config)#access-list 2 ?

deny

Specify packets to reject

insert

Insert new ACL entry before existing entry

move

Move sequence of ACL entries before another entry

permit

Specify packets to forward

replace

Replace existing entry in Access List

XSR-1805(config)#access-list 110 ?

deny

Specify packets to reject

insert

Insert new ACL entry before existing entry

move

Move sequence of ACL entries before another entry

permit

Specify packets to forward

replace

Replace existing entry in Access List

XSR-1805#

Configuration Guide

Page 10 of 55

Image 10
Contents Configuration Guide Table of Contents Helpful commands for using the XSR platform AppendixIP-Address and Secondary Addresses configuration IP-Static-routing IP-Loopback InterfaceIP-OSPF-routing IP-RIPv1,v2-routing Ip local pool 10th 10.10.10.0 Sntp Simple Network Time Protocol Duplex full System login bannerDuplex half Configuration Guide Access control list moving online editing XSR-1805config#access-list 110 move 1Router-1-Master Router-2-BackupVirtual Router Redundancy Protocol RFC Hostname XSR-18051Vrrp monitor interface function, interface tracking Vrrp 1 priority Vrrp 1 master-respond-ping no shutdownNAT dynamic with PAT Port Address Translation Access-list 10 permit 10.10.10.0NAT static bindings Ip address 10.10.10.1 255.255.255.0 no shutdownDialer Interface Dialer Backup interface function Controller e1 0/2/0 clock source internal no shutdownPAP for authentication PPP Username remote privilege 0 password is not displayedUsername remote privilege 0 cleartext iamRemote Chap for authentication PPPInterface Dialer0 dialer pool VPN via Dialer Interface rtr1 XSR-1805-1config#aaa user XSR-1805-1config-aaa#password XSRDialer-list 1 protocol ip list VPN via Dialer Interface rtr2 Ppp pap sent-username central password xsr ppp multilink Dialer Int. PRI to BRI with D-channel-callbackcentral-sitePpp pap sent-username remote1 password xsr1 ppp multilink Dialer Int. PRI to BRI with D-channel-callbackremote1-sitePpp pap sent-username remote2 password xsr2 ppp multilink Dialer Int. PRI to BRI with D-channel-callbackremote2-siteIsdn config for BRIx/x Isdn switch type changing Dialer caller 112233 callback dialer remote-name XSR-Remote Isdn callbackDialer-group Isdn multilink / Isnd channel bundling PPPoE on Adsl interface with chap authentication AAA Authentication Authorization Accounting Radius Syslog function, Server local-buffer Ip ssh server disable Ip telnet server disableSSH / Telnet Logging Snmp MediumSnmp configuration /contact/location/parameter Snmp v1/v2/v3Router-1 XSR-18051config#aaa user XSR-18051config-aaa#password XSR0r1 VPN Ipsec site-to-site tunnel via pre-shared key Ip route 80.80.80.0 255.255.255.0Router-2 XSR-18052config#aaa user XSR-18052config-aaa#password XSR0r2 VPN Ipsec site-to-site tunnel via pre-shared key Ip route 10.10.10.0 255.255.255.0VPN Ipsec site-to-site tunnel certification PKI XSR-18051config#crypto ca crl request Enterasys-Networks-CA XSR-18051config#crypto ca identity Enterasys-Networks-CAPassword Re-enter password Request certificate from CA y/n ? yCertification control / certificates / Crls / CA identity ENTITY-ACTIVEVPN Pptp User termination Pptp encrypt mppe autoXSR-18051config#aaa user XSR-18051config-aaa#password XSR XSR-18052config#aaa user XSR-18052config-aaa#password XSR 5r1 GRE native site-to-site tunnel Version 6.0.0.0, Built Sep 14 20035r2 GRE native site-to-site tunnel Diffserv Dscp field addressing Description InteralnetworkPrivate ip address 10.10.10.1 Firewall configurationDescription internalloopbackPrivate ip address 13.13.13.1 Ip address 20.20.20.1 Vlan configuration 802.1q tagged routingIp address 30.30.30.1 Version 4.0.0.0, Built Mar 26 2003 A1.2 ping & tracerouteVersion 2.02, Built Feb 24 2003 XSR-1805 uptime is 0 days, 2 hours, 23 minutesPhysical link is currently up Current operational duplex mode is negotiated to fullA1.4 telnet to other routers Current operational speed is negotiated to 100 Mb/sA1.5 flash/ cflash/ dir, rename, copy commands A1.6 verify the flash file checksumB1.0 show ip route B1.1 show ip arpC1.2 show crypto ipsec sa C1.0 show tunnelsC1.1 show crypto isakmp sa C1.3 show crypto mapC1.6 show crypto ipsec sa / GRE via Ipsec C1.4 show tunnels / GRE via IpsecC1.5 show interface vpn / GRE via Ipsec C1.7 show ip route / GRE via IpsecD1.2 show controllers atm 1/0 D1.1 show ip interface atm 1/0.1MTU is 1492 bytes D1.3 show controllers atm 1/0.1 VPI/VCI 1/32D1.4 show interface atm 1/0 ATM 1/0 is Admin Up / Oper UpAdministrative State is Enabled Operational State is UP IfLastChange 001609State Opened ATM 1/0.1 is Admin Up / Oper UpD1.5 show interface atm 1/0.1 PPPoE is Oper UpD1.6 show ppp interface atm 1/0.1 ATM 1/0.1 PPP is Admin Up / Oper UpChap authentication success with Current StateGetting Help