Manuals / 3Com / Computer Equipment / Network Router

3Com OfficeConnect Remote 812 manual vpdn-group 1 accept-dialin protocol l2tp virtual-template

Models: OfficeConnect Remote 812

1 170

Download 170 pages 51.21 Kb

Page 48

6-12CHAPTER 6: MANUAL SETUP

vpdn-group 1 accept-dialin protocol l2tp virtual-template 25

terminate-from hostname OfficeConnect local name c7200

no l2tp tunnel authentication source-ip 192.180.3.2

3In Cisco router configuration mode, enter the following commands to configure the private network (LAN) interface:

interface Ethernet1/2

ip address 192.168.200.1 255.255.255.0 no ip mroute-cache

4Before establishing the L2TP tunnel, you must first establish an ATM link between the OCR 812 and the Cisco router. To establish an ATM link, install an ATM interface card in the router and configure the card using the commands specified in step b.

a To install an ATM interface card in your Cisco router, please refer to the instructions provided by your interface card manufacturer.

bTo configure an installed ATM interface card, enter the following commands: interface atm 2/0

atm scrambling cell-payload atm framing cbitplcp

interface ATM2/0.13148 multipoint ip address 192.180.3.1 255.255.255.0 ip mask-reply

ip rip send version 2 ip rip receive version 2 map-group cpmtn

atm pvc 648 13 148 aal5snap map-list cpmtn

ip 192.172.18.2 atm-vc 618 broadcast

5Once the L2TP tunnel has been established (and authentication has been successful), the following Virtual Template will assign an IP address for the defined L2TP pool:

interface Virtual-Template25 ip unnumbered ATM2/0.53103 ip mroute-cache

peer default ip address pool L2TP

Image 48

3Com OfficeConnect Remote 812 manual vpdn-group 1 accept-dialin protocol l2tp virtual-template, interface Ethernet1/2

Contents

Release OfficeConnect Remote ADSL Router CLI User’s GuidePart Number 10043337 AA 3Com Corporation 5400 Bayfront PlazaSanta Clara, California 95052-8145Table of Contents ACCESSING THE CONFIGURATION INTERFACECLI COMMAND CONVENTIONS AND TERMINOLOGY CONFIGURATION METHODSQUICKVC SETUP MANUAL SETUPStarting QuickVC Setup IPX Routing Network Service PPPSetting Up a Virtual Private Network VPN Tunnel Configuring IPX for Remote Site Connections Setting Date and Time Using Network Time Protocol NTPProviding TFTP Access Monitoring the DHCP RelayOFFICECONNECT REMOTE 812 SAMPLE CONFIGURATION CLI COMMAND DESCRIPTION disable securityoption snmp useraccess list access list ip addresseslist processes list services B list snmp communities or list snmp trapcommunities B set system TCP COUNTERS INPUT COUNTERSTELNET 3COM CORPORATION LIMITED WARRANTY FCC CLASS A VERIFICATION STATEMENT FCC CLASS B STATEMENT FCC DECLARATION OF CONFORMITYPOSITIONAL HELP B Command Completion B Output PauseACCESSING THE CONFIGURATION 1 INTERFACE Establishing Communications with the OfficeConnect RemoteIBM-PC Compatible Computers Macintosh ComputersUNIX-Based Computers telnet ipaddressCLI COMMAND CONVENTIONS AND 2 TERMINOLOGY Command Structureadd ip network is the command ParametersCommand Abbreviation andCompletion HelpConventions Command Language Terminology Page CONFIGURATION METHODS Quick Setup InstructionsQuickVC Setup Instructions Manual Setup Instructions 3-2 CHAPTER 3 CONFIGURATION METHODSQUICK SETUP CLI Quick Setup ScriptRestoring the OfficeConnect Remote 812 to an Unconfigured State ADSL Router Installation GuideQuick Setup Script Quick Setup Script InstructionsDo you want to continue Quick Setup? Password ProtectionQuick Setup Identification Information Quick Setup Management InformationQuick Setup IP Information TELNET information4-4 CHAPTER 4 QUICK SETUP Quick Setup IPX Information Quick Setup Bridge Information Sample Identification InformationManagement Information TELNET ManagementSample Output Display as Quick Setup Executes Page QUICKVC SETUP CLI QuickVC Setup ScriptStarting QuickVC Setup OCR-DSL quickvc Network Service PPP CLI QuickVC Setup Script Service PPP Service RFCIPX Routing Network BridgingSample Identification InformationSample Output Display as Quick Setup ExecutesPage MANUAL SETUP Configuration OverviewRemember to save your configuration using the save all command before Remote SiteManagement memoryset vc vc name networkservice ppp Configuring Network Service Informationset vc vc name networkservice pppoe set vc vc name networkservice pppoaCurrently, the SVC capability is disabled in the OCR set vc vc name dynamicipaddressing dhcpclientSetting Up a Virtual set vc vc name atm categoryofservice unspecifed pcr cell rateset vc vc name atm categoryofservice constant pcr cell rate when transmitting data to the remote siteVPN Tunneling Overview Before You Begin Initiating a VPN Tunnel On the Remote Private Network “Server” SideOn the 812 ADSL Router “Client” Side disable tunnel command VPN TunnelEnabling and Disabling a list tunnel Use this command to list the name and status of tunnels Authentication and Encryption To learn how to set up encryption using the CLI, see ConfiguringValues Configuring Windows 2000 Server to Support CHAP Authentication EncryptionMICROSOFT56BIT NONE REQUIRED Router to Support Encryption for L2TP TunnelsConfiguring a Cisco Router to Support Encryption for L2TP Tunnels aaa authentication login cisco localValue Name ProhibitIpSec peer default ip address pool L2TP vpdn-group 1 accept-dialin protocol l2tp virtual-templateterminate-from hostname OfficeConnect local name c7200 interface Ethernet1/2ppp authentication pap RIP Configuration router rip ver network IP Pool for L2TP TunnelDebug vpdn command errorIP Routing 6-14 CHAPTER 6 MANUAL SETUPenable ip forwarding enable ip RIPdisable ip RIP show ip routing settingsnegotiate addressselectionThe defaultrouteoption can only be enabled in one VC profile set vc vc nameRemote Site Configuring Static and Framed IP Routes 6-18 CHAPTER 6 MANUAL SETUPAddress Translation For a vc added using QuickVC, NAT is enabled by default continues to run until a NAT port frees upused port 80, private port 80, and the private address of the LAN Server Use the following command to configure PAT in a vc profileIntelligent PAT 6-22 CHAPTER 6 MANUAL SETUPset vc vc name intelligentpatoption Enable/Disable Please also note the followingEnabling NAT set vc vc name natoption natConfiguring NAT Static and Dynamic Mappings 6-24 CHAPTER 6 MANUAL SETUPadd nat dynamic vc vc name publicpoolstart ip address count number list nat vc vc name port portlist nat vc vc name addr AND / ORRemote Configuring the DHCP Mode DHCPset dhcp server startaddress ip address endaddress ip address set dhcp server mask ip addressset dhcp server lease seconds set dhcp server router ip addressConfiguring the DHCP set dhcp mode relayshow dhcp server counters list dhcp server leasesenable dns show dns settingstimeout set dnsAccess Lists IPX Routinglist dns servers Enabling IPX Routing Configuring IPX for the LAN Configuring IPX for Remote Site Connections6-32 CHAPTER 6 MANUAL SETUP Configuring IPX Static and Framed Routes add ipxroute vc vc name ipxnet ipx network address metric numberConfiguring IPX Static and Framed Services delete ipx service name type hex numberadd ipxservice vc vc name hops number 6-34 CHAPTER 6 MANUAL SETUPConfiguring IPX RIP and SAP Bridgingset ipx network network name set ipx network network nameConfiguring Bridging for the Remote Site Connections Bridging IP TrafficConfiguring Bridging for the LAN 6-36 CHAPTER 6 MANUAL SETUPshow ip settings set bridge forwarddelay secondsAdvanced Bridging Options set bridge agingtime secondsset vc vcname macrouting enable Simultaneous Bridging and Routingset bridge firewall discardroutedprotocols Administration Setting Date and TimeSystem set bridge firewall fwdunicastonlyNetwork Time Protocol CLI Commands set enable ntpset disable ntp For example set date 01-JAN-1998set timeout seconds set secondaryserver ipnameoraddrset pollinginterval seconds set retransmissions numberNTP Servers clock.psu.edu show system set system name name location location contact contactlist users delete user nameSetting Password Protection list tftp clientsexit cli After logging in to the CLI, you can exit the CLI with the commandOfficeConnect Remote 812 Filtering Capabilities Data Filtering Overview6-46 CHAPTER 6 MANUAL SETUP Filter Classes The OCR 812 supports three filter classes Creating Filters Using Command LineCreating Filters OverviewProtocol Rules The OR operation can be implemented by successive rules IP 1 ACCEPT src-addr=xxx 2 ACCEPT dst-addr=yyy 999 DENYLENGTH - The number of bytes in the packet to compare to the value IP Source and Destination Network Filtering Using CLI IP Source and Destination Port Filtering Using CLIIP Protocol Filtering Using CLI IP RIP Packet Filtering Using CLIIPX Source and Destination Network Filtering Using CLI IPX Source and Destination Host Filtering Using CLIIPX Source and Destination Socket Number Filtering Using CLI IPX RIP Packet Filtering Using CLI IPX SAP Packet Filtering Using CLIBridge / Generic Filtering Using CLI IPX 1 ACCEPT src-socket = 999 DENYUsing CLI Creating Filter Filesmemory Assigning Filters Applying Filters Using Interface Using CLIby entering the CLI command set interface eth1 filteraccess off VC/Remote Site FiltersUsing CLI Filter List Using CLIManaging Filters VPN Tunnelan Interface Using CLI Removing a Filter fromVC/Remote Site Profile Deleting a Packet Filter6-60 CHAPTER 6 MANUAL SETUP OFFICECONNECT REMOTE 812 SAMPLE A CONFIGURATION Sample ConfigurationOCR 812 features OverviewConfiguring the Global Configurationenable securityoption remoteuser administration add user root password !rootadd dns server * vc Internet enable dns add ipx network ipx address 10 frame ethernetii enable yesdisable bridge spanningtree add bridge network bridge set dhcp server dns1 192.168.200.254 dns2set vc Internet sendname internet-user sendpassword 1a2b3c set vc Internet defaultrouteoption enable enable vc Internetset vc Internet iprouting listen set vc corp-net ipxaddress 0 ipxrouting all enable vc corp-net set vc corp-net iprouting bothConfiguring the Sample Network A-5 Page CLI Command Description CLI Commandsadd access vcblknetbiosprimaryaddress ipaddress secondaryaddress ipaddress vcname vcname add ip defaultroute add framedroute vc nameiproute ipaddress metric number metricaddress ipxaddress interface eth1 enabled yes add ip network networknameaddress ipnetaddress frame ETHERNETII SNAP LOOPBACK interface eth1 gateway gatewayaddr metric hopcountadd ipx service servicename type servicetypeadd ipx route ipxnetaddress gateway ipxhostaddress metric metricnumber ticks ticknumberipxnet ipxaddress metric hopcount ticks ticknumber type servicetypeadd ipxservice vc name add ipxroute vc nameadd network service servicename status servertype servertype socket socketnumber enabled YES data “string”CLI Commands B-7 Add network service example add networkservice CLIaccess servertype TELNETD socketaddress ipaddress access RO RW closeactiveconnections TRUE FALSEadd snmp trapcommunity name ipnameoraddraddress ipaddress add tunneladd user name add vc namearp output outputfilename ipnameoraddr enabled yesdelete ipx route ipxnetaddress delete ipx service servicename delete pat tcp vcvcname type servicetypepublicaddress ipaddress publicpoolstart ipaddresstunnelname entriesDISABLE disable ip networkDIAL bridge forwardingdisable snmp interfacename interface settings commandauthentication traps output outputfileENABLE networksusing list network services HANGUPinterfacename interfacename interface settings commandHELP HISTORYKILL LISTmgmt - unknown, but filtering information exists If Name - eth1, DA1 or loopback Interface - eth1, DA1 or loopbackCLI Commands B-19 Prot - LOCAL or RIP trapcommunities not list access PAUSED COMMANDS More or CRContinue printing Quittimeout timeoutvalue PINGRENAME RESOLVEforwarddelay seconds set command history numerical range idle timeout minutesSAVE set bridgeenabled YES NO set dhcp relay server1set dhcp relay server2 address IPaddressset dns cachesize number numberretries number timeout seconds set dhcp serverDNS1 IPaddress DNS2 IPaddressfilteraccess ON OFF inputfilter filtername outputfilter filtername set interface interfacenameroutingprotocol NONE RIPV1 RIPV2 B-28 APPENDIX B CLI COMMAND DESCRIPTION routerid routerid CLI Commands B-29rip BOTH DISABLE LISTEN RESPONDONLY SEND ripagemultiplier number rippacketsize number ripupdateinterval numbersap BOTH DISABLE LISTEN RESPONDONLY SEND sapagemultiplier number sapupdateinterval numberset network service adminname poolmembers numberSets parameters for configured network services Sets parameters for dynamic IPX networksA VPN tunnel can only be configured for MSCHAPv1 by using the CLI Authentication OptionsFor in-depth information about CHAP and PAP, see RFC address IPaddress access RO RW NONE REQUIREDMPPE Options transmitauthenticationname name set systemname “name” location “location”password password sessiontimeout secondsset user username message “message”bridging enable disable defaultrouteoption enable disableidletimeout seconds ip enable disableCLI Commands B-37 categoryofservice Unspecified UBR Variable VBR set vc vcname atmset number pcr numberSets ATM parameters for VCs Total time since system reboot hours, minutes, seconds Errored seconds since last link downTotal errored seconds in 15 minutes Total errored seconds in previous 15 minutesBase Aging Time - time to age out a known MAC address, default FieldsHistory Depth Current Prompt OCR-DSL Local Prompt OCR-DSL settings show dns counters show dns settings show filter filtername SPECIFIC ERROR COUNTERSProblems with Name Server - internal server error ICMP COUNTERS INPUT COUNTERSOUTPUT COUNTERS show interface interfacename counters show interface DisplaysINPUT COUNTERS OUTPUT COUNTERSFragments Needing Reassembly - # of fragmented datagrams IP Dynamic Address Pool Begin - start of IP address rangeIP Dynamic Address Pool Size - size of IP address range settingsshow ipx counters show ipx network networkname counters OUTPUT COUNTERSINPUT COUNTERS show ipx rip counterssettings settingsshow ipx sap Dynamic Address Pool Begin - starting IPX addresssettings Default Gateway - default IPX router addressvcname settings name settingsvcname counters name countersSETTINGS for PPP BUNDLE SETTINGS for PPP BUNDLE 1 COMPRESSIONSETTINGS for PPP LINK 1 Operational Status - opened or not openedshow snmp counters Displays many SNMP statistics INPUT COUNTERSSystem Contact - modify using set system System Location - modify using set systemSystem Descriptor - for example OUTPUT COUNTERSTCP SETTINGS TCP COUNTERSINPUT COUNTERS OUTPUT COUNTERSCommands TELNETVERIFY verify filterCLI Exit Commands Command FeaturesComments B-58 APPENDIX B CLI COMMAND DESCRIPTIONINDEX Server Input and Output filters contrasted Static Services Passwords Page Page Page 3Com Corporation LIMITED WARRANTY STANDARD WARRANTY SERVICEHARDWARE SOFTWAREFCC CLASS B STATEMENT FCC DECLARATION OF CONFORMITYThe Interference Handbook ModelDescription