Add to the Cisco configuration above | Black Box LR1112A-T1/E1

Black Box LR11xx Series Router Configurations Guide

Blackbox/ configure > firewall internet

Blackbox/configure/firewall internet> policy 100 in proto gre self

Blackbox/configure/firewall internet/policy 100 in> exit

Blackbox/configure/firewall internet> policy 101 in service ike self

Blackbox/configure/firewall internet/policy 101 in> exit 2

Black Box configure> firewall corp

Blackbox/configure/firewall corp> policy 100 in self

Step 5: Check the status of the tunnel by entering:

Blackbox> show ip interface tunnel t0

Step 6:Validate the tunnel configuration by entering:

Blackbox> show crypto ipsec policy all

Or enter:

Blackbox> show crypto ike policy all

18.5 Configuring GRE Site to Site with IPSec and OSPF

This example extends the previous IPSec configuration example by enabling Open Shortest Path First (OSPF) protocol which provides redundant paths for the tunnel.

Step 1: To enable OSPF, add to the Black Box configuration above:

Blackbox> configure terminal

Blackbox/configure> router routerid 2.2.2.2

Blackbox/configure> router ospf

Blackbox/configure/router/ospf> interface t0 area 0

Blackbox/configure/router/ospf> exit

Step 2: Add to the Cisco configuration above

cisco > config t cisco(config)#router ospf 1

cisco(config-router)# network 103.1.1.0 0.0.0.255 area 0

Step 3: To verify the OSPF configuration, enter:

Blackbox> show ip ospf interface all

NOTE

Using the redistribute connected command adds a recursive route to the tunnel destination. This will cause the tunnel to shut down. To prevent this, add a 32-bit static route for the tunnel destination.

106

Image 104

Black Box LR1112A-T1/E1 manual Configuring GRE Site to Site with IPSec and Ospf, Add to the Cisco configuration above

Contents

Black Box LR11xx Series Router Configurations Black Box LR11xx Series Router Configurations Guide Normas Oficiales Mexicanas NOM Electrical Safety Statement Instrucciones DE Seguridad Black Box LR11xx Series Router Configurations Guide Contents Ipsec Specifications Ultipath M Ulticast C Onfigurations 101 107117 119 WAN I Nterface C Onfigurations Black Box LR11xx Series Router Configurations Guide Feature Overview Bootp Requests1DHCP Relay Functionality Using Dhcp Relay with NAT Command Line InterfaceBootp Replies Enabling Dhcp Relay Displaying Dhcp Configuration Configuring the Gateway Address field when NAT is enabledDisplaying Statistics Dhcp Relay Dhcp Limitations Displaying Ethernet Interface Statistics Configuring Internet Group Management Protocol 1IGMP Configuration Example Igmp CommandsIgmp Configuration Examples Igmp Configuration 2.10Example2.11Example 2.12Example Black Box LR11xx Series Router Configurations Guide Configure the Black Box LR1104A Blackbox configure term Blackbox/configure ipFiltering IP Traffic 1IP Packet Filter Lists Blackbox configure terminal Blackbox/configure ip Blackbox/configure/ip applyfilter WAN1 filterbBlackbox/configure/ip applyfilter WAN1 filterc Example Configuring Security 1IPSec Configurations Display the crypto interfaces Configure IKE to the peer gateway Example 1 Managing the Black Permit SE Enable Snmp on the Black Box1 router Display Snmp communities Configure IPSec tunnel to the remote host Example 2 Single Proposal Tun Using the show crypto ipsec policy all command 1022 Out Any Black Box1 Show firewall policy corp detail Policy with Example 3 Multiple IPSec Pro Message Proposal added with priority2-esp-3des-sha1-tunnel Example 4 IPSec remote access As in of Example Configure dynamic IPSec policy for a group of mobile users Display dynamic IKE policies in detail Display dynamic IPSec policies Display dynamic IPSec policies in detail Lifetime in Kilobytes Bytes In 0, Bytes Out Permit E Example 5 IPSec remote access Display dynamic IKE policies Display dynamic IKE policies in detail Permit 20.1.1.150 1022 Out Any Example 5 IPSec remote access Black Box LR11xx Series Router Configurations Guide Ipsec Specifications 1IPSec Appendix IPSec Defaults Black Box IKE and IPSec DefaultsIKE Defaults IPSec Appendix ESP Black Box LR11xx Series Router Configurations Guide Forwarding IP Traffic 1IP MultiplexingPacket Forwarding Modes Proxy ARP and Packet Forwarding Addressing in IP Multiplexing Networks Proxy ARP and Packet Forwarding IP Multiplexing Single SubnetSplit Subnet Secondary Addressing POP Only Secondary Addressing 30 Bit Routing Considerations for IP Multiplexing Secondary Addressing 29 BitPros and Cons of Different IP Addressing Schemes Black Box LR11xx Series Router Configurations Guide IP Multiplexing Hdlc Configurations 1Connecting a Black Box Router to a Router/CSU Via Hdlc Configure the Black Box LR1104A at Site Configuration Guide IP Multiplexing PPP and Mlppp Configurations 1Configuring Multiple PPP and Mlppp Bundles LR1104A Configure the Black Box LR1104A at the Main Site Configuring Multiple PPP Black Box LR11xx Series Router Configurations Guide Configuring PPP, MLPPP, 1Layer Two Configurations PPP, MLPPP,LR1114A LR1104A Mlppp Configuration PPP and Mlppp ConfigurationHdlc Configuration Configure the Black Box LR1114A System at Site Configuring Firewalls 10.1Firewalls Firewall Configuration Examples Basic Firewall Configuration Create the security zones Corp and DMZ and attach interfaces Create policies for Security Zone Corp that Verify the firewall policy for Security Zone Corp Create policies for Security Zone DMZ that Create a default route out of the WAN Verify the firewall policy for Security Zone DMZ Black Box LR11xx Series Router Configurations Guide Firewall Configuration Ex Black Box LR11xx Series Router Configurations Guide Stopping DoS Attacks Packet Reassembly NAT ConfigurationsNAT Configuration Examples NAT Configuration Examples Dynamic NAT many to many Static NAT one to one Static NAT Method2 Attaching nat pool to the policy Method1 Specifying NAT address with the policy command10.4.3Port Address Translation Many to one Black Box LR11xx Series Router Configurations Guide Multipath Multicast Configurations 11.1Multipath Multicast 11.2Multipath Commands 11.2.1Multipath Examples Configuring NAT 12.1Network Address TranslationDynamic NAT Static NAT Configuration for Figure Dynamic and Static NAT Network Address Translation 12.1.4Configuration for FigureReverse NAT Blackbox configure terminal Reverse NAT NAT Configuration Examples 13.1.1Dynamic NAT many to many 60.1.1.1 13.1.2Static NAT one to one 13.1.3Port Address Translation Many to one Remote Access Vpns Secure Remote Access Using IPSec VPNAccess Methods Remote Access User Group Configuration Examples Remote Access Mode Configuration IPSec Remote Access User Black Box #1 IPSec Remote Access Mode Configuration Group Method David@blackboxcom .com IPSec Remote Access Mode Con Mike@Blackbox.com Black Box LR11xx Series Router Configurations Guide 15.1.1Configuring RIP for Ethernet 0 and WAN 1 Interfaces 15.1.2Displaying RIP Configuration15.1.3Displaying All Configured RIP Interfaces Networking with Routing Information Protocol Show ip rip interface all Command Configuring Static Routes Static Routing Configuration Blackbox/configure ip route 0.0.0.0 0.0.0.0 10.1.1.2 16.1.1Configure the Router at Site a16.1.2Configure the Router at site B Configuring Open Shortest Path First Routing 17.1.1Configuring the host name17.1.2Configuring interface ethernet 17.1.3Configuring interface bundle Dallas 17.1.4Configuring ospf 17.1.5Configuring ospf interface parameters17.1.6Displaying neighbors 17.1.7Displaying ospf routes Installing Licenses Configuring Generic Routing EncapsulationConfiguring GRE GRE Configuration Examples 18.3.1Configuring Site to Site Tunnel GRE Configuration Examples For more information enter Configuring GRE Site to Site with IPSec Configuring GRE Site to Site with Configuring GRE Site to Site with IPSec and Ospf Add to the Cisco configuration above Configuring Ospf and Frame Relay Ospf Frame Relay 19.1.1Configuring the host name 19.1.2Configuring interface ethernet19.1.3Configuring interface bundle Dallas 19.1.4Configuring Ospf 20.1.1PIM Commands Configuring Protocol Independent Multicasting RoutingPIM Configuration Bootstrap Router related Commands PIM Configuration Show and debug PIM commands are 20.1.2PIM Configuration Examples Blackbox/configure/ip/pim register-suppress-timeout Blackbox/configure display ip pim global Blackbox/configure display ip pim neighbors Blackbox clear ip pim statistics 116 Mtrace Configuration 21.1.1mtrace CommandMulticast Traceroute Facility Restrictions Mtrace Example Blackbox mtrace 192.168.0.0 192.168.2.22 22.1.1Features Configuring Quality of Service RoutingConfiguring QoS 22.1.2Definitions 22.1.3Classification Types Configuring QoS Vlan IdentifiersCreate bundle AppTest Create traffic classes Create traffic classes and assign classifications 22.1.5Bulk StatisticsCreate bundle VLANtest Screen Display for show qos bulkstatsconfig Command Configuring bulk statistics 124 Virtual LAN Tagging Managing Traffic with Vlan Tagging Reston configuration Black Box LR1104A # The POP router is 205.1.1.1/30 DC configuration Black Box LR1114A Managing Traffic with Vlan Tag 128 Trunk Group/Failover 24.1.1Configuration DetailsManaging Redundant Connections Configure the Black Box LR1114A for Failover Operation WAN Interface Configurations 25.1 T1 Interface Configuration25.1.1Module Configuration Bundle Configuration Configure a Fractional T1 Hdlc Bundle Configure a T1 PPP BundleBlackbox/configure interface bundle demo2 Configure an N x T1 Mlppp Bundle Virtual LAN Forwarding Managing Vlan Traffic 134 Managing Vlan Traffic 26.1.1POP configuration Black Box LR1104A26.1.2Bldg1 configuration Black Box LR1114A 10 br Configure interface bundle uplinkConfigure Snmp 27.1Multilink Frame Relay FRF.15 and FRF.16 FeaturesMutlilink Frame Relay 27.1.1.1 # Configure Ethernet interface 27.1.1.2 # Configure CVC127.1.1.4 # Configure CVC3 27.1.1.5 #Configure AVC Configuring Frame Relay Multilink Frame Relay Layer Two Configurations FR and MFR FR Configuration Configure the Hssi Bundle at Site MFR Configuration Layer Two Configurations FRConfigure the Clear Channel Bundle on the LR1104A Configure the LR1104A LR1104A at Site 142 Copyright 2004. Black Box Corporation. All rights reserved