Manuals / Black Box / Computer Equipment / Network Router

Black Box LR1112A-T1/E1, LR1114A-T1/E1, LR1104A-T1/E1, LR1102A-T1/E1 manual Permit SE

Models: LR1102A-T1/E1 LR1112A-T1/E1 LR1104A-T1/E1 LR1114A-T1/E1

1 142

Download 142 pages 53.89 Kb

Page 24

Black Box LR11xx Series Router Configurations Guide

Step 10.1: Configure firewall policies to allow IKE negotiation through untrusted interface (applicable only if firewall license is also enabled)

Black Box1/configure> firewall internet

Black Box1/configure/firewall internet> policy 1000 in service ike self Black Box1/configure/firewall internet/policy 1000 in> exit

Black Box1/configure/firewall internet> exit

Step 10.2: Configure firewall policies to allow desired services through untrusted interface to manage the router (applicable only if firewall license is also enabled)

Black Box1/configure> firewall internet
Black Box1/configure/firewall internet>	policy 1001 in		service snmp self
Black Box1/configure/firewall internet/policy 1001		in>	exit
Black Box1/configure/firewall internet>	policy 1002 in		service telnet self
Black Box1/configure/firewall internet/policy 1002		in>	exit
Black Box1/configure/firewall internet>	policy 1003 in		protocol icmp self
Black Box1/configure/firewall internet/policy 1003		in>	exit
Black Box1/configure/firewall internet>	exit

Step 10.3: Display firewall policies in the internet map (applicable only if firewall license is enabled)

Black Box1> show firewall policy internet

Advanced: S - Self Traffic, F - Ftp-Filter, H - Http-Filter,

R- Rpc-Filter, N - Nat-Ip/Nat-Pool, L - Logging, E - Policy Enabled, M - Smtp-Filter

Pri	Dir	Source Addr	Destination Addr	Sport	Dport	Proto	Action Advanced
---	---	-----------	----------------	-----------------			------ --------
1000	in	any	any	ike			PERMIT SE
1001	in	any	any	snmp			PERMIT SE
1002	in	any	any	telnet			PERMIT SE
1003	in	any	any	any	any	icmp	PERMIT SE
1024	out	any	any	any	any	any	PERMIT SE

Step 10.4: Display firewall policies in the internet map in detail (applicable only if firewall license is enabled)

26

Image 24

Black Box LR1112A-T1/E1, LR1114A-T1/E1, LR1104A-T1/E1, LR1102A-T1/E1 manual Permit SE

Contents

Black Box LR11xx Series Router Configurations Black Box LR11xx Series Router Configurations Guide Normas Oficiales Mexicanas NOM Electrical Safety Statement Instrucciones DE SeguridadBlack Box LR11xx Series Router Configurations Guide Contents Ipsec Specifications Ultipath M Ulticast C Onfigurations 101 107117 119WAN I Nterface C Onfigurations Black Box LR11xx Series Router Configurations Guide Feature Overview Bootp Requests1DHCP Relay FunctionalityUsing Dhcp Relay with NAT Command Line InterfaceBootp Replies Enabling Dhcp RelayDisplaying Dhcp Configuration Configuring the Gateway Address field when NAT is enabledDisplaying Statistics Dhcp RelayDhcp Limitations Displaying Ethernet Interface StatisticsConfiguring Internet Group Management Protocol 1IGMP ConfigurationIgmp Commands Igmp Configuration ExamplesExample Igmp Configuration 2.10Example2.11Example 2.12ExampleBlack Box LR11xx Series Router Configurations Guide Configure the Black Box LR1104A Blackbox configure term Blackbox/configure ipFiltering IP Traffic 1IP Packet Filter ListsBlackbox configure terminal Blackbox/configure ip Blackbox/configure/ip applyfilter WAN1 filterbBlackbox/configure/ip applyfilter WAN1 filterc ExampleConfiguring Security 1IPSec ConfigurationsDisplay the crypto interfaces Configure IKE to the peer gateway Example 1 Managing the BlackPermit SE Enable Snmp on the Black Box1 router Display Snmp communities Configure IPSec tunnel to the remote host Example 2 Single Proposal TunUsing the show crypto ipsec policy all command 1022 Out Any Black Box1 Show firewall policy corp detail Policy with Example 3 Multiple IPSec Pro Message Proposal added with priority2-esp-3des-sha1-tunnel Example 4 IPSec remote access As in of ExampleConfigure dynamic IPSec policy for a group of mobile users Display dynamic IKE policies in detailDisplay dynamic IPSec policies Display dynamic IPSec policies in detailLifetime in Kilobytes Bytes In 0, Bytes Out Permit E Example 5 IPSec remote access Display dynamic IKE policiesDisplay dynamic IKE policies in detail Permit 20.1.1.150 1022 Out Any Example 5 IPSec remote access Black Box LR11xx Series Router Configurations Guide Ipsec Specifications 1IPSec AppendixBlack Box IKE and IPSec Defaults IKE DefaultsIPSec Defaults IPSec Appendix ESPBlack Box LR11xx Series Router Configurations Guide Forwarding IP Traffic 1IP MultiplexingPacket Forwarding Modes Proxy ARP and Packet ForwardingAddressing in IP Multiplexing Networks Proxy ARP and Packet ForwardingSingle Subnet Split SubnetIP Multiplexing Secondary Addressing POP Only Secondary Addressing 30 BitSecondary Addressing 29 Bit Pros and Cons of Different IP Addressing SchemesRouting Considerations for IP Multiplexing Black Box LR11xx Series Router Configurations Guide IP Multiplexing Hdlc Configurations 1Connecting a Black Box Router to a Router/CSU Via HdlcConfigure the Black Box LR1104A at Site Configuration GuideIP Multiplexing PPP and Mlppp Configurations 1Configuring Multiple PPP and Mlppp BundlesLR1104A Configure the Black Box LR1104A at the Main Site Configuring Multiple PPPBlack Box LR11xx Series Router Configurations Guide Configuring PPP, MLPPP, 1Layer Two Configurations PPP, MLPPP,LR1114A LR1104AMlppp Configuration PPP and Mlppp ConfigurationHdlc Configuration Configure the Black Box LR1114A System at SiteConfiguring Firewalls 10.1FirewallsFirewall Configuration Examples Basic Firewall ConfigurationCreate the security zones Corp and DMZ and attach interfaces Create policies for Security Zone Corp thatVerify the firewall policy for Security Zone Corp Create policies for Security Zone DMZ thatCreate a default route out of the WAN Verify the firewall policy for Security Zone DMZBlack Box LR11xx Series Router Configurations Guide Firewall Configuration Ex Black Box LR11xx Series Router Configurations Guide Stopping DoS Attacks NAT Configurations NAT Configuration ExamplesPacket Reassembly NAT Configuration Examples Dynamic NAT many to manyStatic NAT one to one Static NATMethod1 Specifying NAT address with the policy command 10.4.3Port Address Translation Many to oneMethod2 Attaching nat pool to the policy Black Box LR11xx Series Router Configurations Guide Multipath Multicast Configurations 11.1Multipath Multicast11.2Multipath Commands 11.2.1Multipath ExamplesConfiguring NAT 12.1Network Address TranslationDynamic NAT Static NATConfiguration for Figure Dynamic and Static NAT12.1.4Configuration for Figure Reverse NATNetwork Address Translation Blackbox configure terminal Reverse NATNAT Configuration Examples 13.1.1Dynamic NAT many to many60.1.1.1 13.1.2Static NAT one to one 13.1.3Port Address Translation Many to one Remote Access Vpns Secure Remote Access Using IPSec VPNAccess Methods Remote Access User GroupConfiguration Examples Remote Access Mode ConfigurationIPSec Remote Access User Black Box #1IPSec Remote Access Mode Configuration Group Method David@blackboxcom .comIPSec Remote Access Mode Con Mike@Blackbox.comBlack Box LR11xx Series Router Configurations Guide 15.1.1Configuring RIP for Ethernet 0 and WAN 1 Interfaces 15.1.2Displaying RIP Configuration15.1.3Displaying All Configured RIP Interfaces Networking with Routing Information ProtocolShow ip rip interface all Command Configuring Static Routes Static Routing Configuration16.1.1Configure the Router at Site a 16.1.2Configure the Router at site BBlackbox/configure ip route 0.0.0.0 0.0.0.0 10.1.1.2 Configuring Open Shortest Path First Routing 17.1.1Configuring the host name17.1.2Configuring interface ethernet 17.1.3Configuring interface bundle Dallas17.1.4Configuring ospf 17.1.5Configuring ospf interface parameters17.1.6Displaying neighbors 17.1.7Displaying ospf routesConfiguring Generic Routing Encapsulation Configuring GREInstalling Licenses GRE Configuration Examples 18.3.1Configuring Site to Site Tunnel GRE Configuration ExamplesFor more information enter Configuring GRE Site to Site with IPSec Configuring GRE Site to Site withConfiguring GRE Site to Site with IPSec and Ospf Add to the Cisco configuration aboveConfiguring Ospf and Frame Relay Ospf Frame Relay19.1.1Configuring the host name 19.1.2Configuring interface ethernet19.1.3Configuring interface bundle Dallas 19.1.4Configuring OspfConfiguring Protocol Independent Multicasting Routing PIM Configuration20.1.1PIM Commands Bootstrap Router related Commands PIM Configuration Show and debug PIM commands are20.1.2PIM Configuration Examples Blackbox/configure/ip/pim register-suppress-timeoutBlackbox/configure display ip pim global Blackbox/configure display ip pim neighbors Blackbox clear ip pim statistics 116 Mtrace Configuration 21.1.1mtrace CommandMulticast Traceroute Facility RestrictionsMtrace Example Blackbox mtrace 192.168.0.0 192.168.2.22Configuring Quality of Service Routing Configuring QoS22.1.1Features 22.1.2Definitions 22.1.3Classification TypesConfiguring QoS Vlan IdentifiersCreate bundle AppTest Create traffic classes22.1.5Bulk Statistics Create bundle VLANtestCreate traffic classes and assign classifications Screen Display for show qos bulkstatsconfig Command Configuring bulk statistics124 Virtual LAN Tagging Managing Traffic with Vlan TaggingReston configuration Black Box LR1104A # The POP router is 205.1.1.1/30DC configuration Black Box LR1114A Managing Traffic with Vlan Tag128 24.1.1Configuration Details Managing Redundant ConnectionsTrunk Group/Failover Configure the Black Box LR1114A for Failover Operation WAN Interface Configurations 25.1 T1 Interface Configuration25.1.1Module Configuration Bundle ConfigurationConfigure a Fractional T1 Hdlc Bundle Configure a T1 PPP BundleBlackbox/configure interface bundle demo2 Configure an N x T1 Mlppp BundleVirtual LAN Forwarding Managing Vlan Traffic134 26.1.1POP configuration Black Box LR1104A 26.1.2Bldg1 configuration Black Box LR1114AManaging Vlan Traffic Configure interface bundle uplink Configure Snmp10 br Features Mutlilink Frame Relay27.1Multilink Frame Relay FRF.15 and FRF.16 27.1.1.1 # Configure Ethernet interface 27.1.1.2 # Configure CVC127.1.1.4 # Configure CVC3 27.1.1.5 #Configure AVCConfiguring Frame Relay Multilink Frame Relay Layer Two Configurations FR and MFRFR Configuration Configure the Hssi Bundle at SiteMFR Configuration Layer Two Configurations FRConfigure the Clear Channel Bundle on the LR1104A Configure the LR1104A LR1104A at Site142 Copyright 2004. Black Box Corporation. All rights reserved