Cisco Systems 520 series CONTENTS

iii

Cisco Secure Router 520 Series Software Configuration Guide

OL-14210-01

CONTENTS

Preface ix

Objective ix

Audience ix

Organization x

Conventions xi

Related Documentation xvi

Obtaining Documentation and Submitting a Service Request xvii

PART

1Getting Started

CHAPTER

1Basic Router Configuration 1-1

Viewing the Default Configuration 1-2

Information Needed for Customizing the Default Parameters 1-2

Interface Port Labels 1-3

Configuring Basic Parameters 1-3

Configure Global Parameters 1-4

Configure Fast Ethernet LAN Interfaces 1-4

Configure WAN Interfaces 1-4

Configure the Fast Ethernet WAN Interface 1-5

Configure the ATM WAN Interface 1-5

Configure the Wireless Interface 1-6

Configuring a Loopback Interface 1-6

Configuration Example 1-7

Verifying Your Configuration 1-7

Configuring Command-Line Access to the Router 1-8

Configuration Example 1-9

Configuring Static Routes 1-10

Configuration Example 1-10

Verifying Your Configuration 1-10

Configuring Dynamic Routes 1-11

Configuring RIP 1-11

Configuration Example 1-12

Verifying Your Configuration 1-12

Contents

Main Page CONTENTS Page Page Page Page Page Preface Objective Audience Organization Conventions xii xiii xiv Page Related Documentation Obtaining Documentation and Submitting a Service Request Page Page Page Basic Router Configuration Viewing the Default Configuration Information Needed for Customizing the Default Parameters Interface Port Labels Configuring Basic Parameters Configure Global Parameters Configure Fast Ethernet LAN Interfaces Configure WAN Interfaces Configure the Fast Ethernet WAN Interface Configure the ATM WAN Interface Configure the Wireless Interface Configuring a Loopback Interface Verifying Your Configuration Configuring Command-Line Access to the Router Page Configuring Static Routes Configuration Example Configuring Dynamic Routes Configuring RIP Verifying Your Configuration Page Page Sample Network Deployments Page Configuring PPP over Ethernet with NAT Configure the Virtual Private Dialup Network Group Number Configure the Fast Ethernet WAN Interfaces Configure the Dialer Interface Configure Network Address Translation Page Page 3-8 command. 3-9 Page Configuring PPP over ATM with NAT Configure the Dialer Interface Page Page Configure the ATM WAN Interface Configure DSL Signaling Protocol Configuring ADSL Verify the Configuration Configure Network Address Translation Page Page 4-10 Configuring a LAN with DHCP and VLANs Configure DHCP Page 5-4 Configuration Example Verify Your DHCP Configuration Use the following commands to view your DHCP configuration. pools, bindings, and so forth. Configure VLANs Assign a Switch Port to a VLAN Verify Your VLAN Configuration 5-7 5-8 Configuring a VPN Using Easy VPN and an IPsec Tunnel Page Configure the IKE Policy Configure Group Policy Information Apply Mode Configuration to the Crypto Map Enable Policy Lookup Configure IPsec Transforms and Protocols Configure the IPsec Crypto Method and Parameters Apply the Crypto Map to the Physical Interface Create an Easy VPN Remote Configuration Verifying Your Easy VPN Configuration 6-11 Page Configuring VPNs Using an IPsec Tunnel and Generic Routing Encapsulation Configure a VPN Configure the IKE Policy Configure Group Policy Information Enable Policy Lookup Configure IPsec Transforms and Protocols Configure the IPsec Crypto Method and Parameters Apply the Crypto Map to the Physical Interface Configure a GRE Tunnel Page 7-10 7-11 Page Configuring a Simple Firewall 7 5 6 Configure Access Lists Configure Inspection Rules Apply Access Lists and Inspection Rules to Interfaces Page 8-6 Configuring a Wireless LAN Connection Configure the Root Radio Station Page Configure Bridging on VLANs Configure Radio Station Subinterfaces Page 9-7 9-8 Page Page Additional Configuration Options Page Configuring Security Features Authentication, Authorization, and Accounting Configuring AutoSecure Configuring Access Lists Access Groups Guidelines for Creating Access Groups Configuring a CBAC Firewall Configuring Cisco IOS Firewall IDS Configuring VPNs Troubleshooting Getting Started Before Contacting Cisco or Your Reseller ADSL Troubleshooting ATM Troubleshooting Commands ping atm interface Command 12-3 This command sends end-to-end OAM F5 packets, which are echoed back by the aggregator. show interface Command Example 12-2 Viewing Status of Selected Interfaces Page show atm interface Command debug atm Commands Guidelines for Using Debug Commands debug atm errors Command debug atm events Command debug atm packet Command Software Upgrade Methods Recovering a Lost Password Change the Configuration Register Reset the Router Reset the Password and Save Your Changes Reset the Configuration Register Value Page Page Page A Cisco IOS Software Basic Skills Configuring the Router from a PC Understanding Command Modes Page Getting Help Enable Secret Passwords and Enable Passwords Entering Global Configuration Mode Using Commands Abbreviating Commands Undoing Commands Command-Line Error Messages Saving Configuration Changes Summary Where to Go Next Page B Concepts ADSL Network Protocols IP Routing Protocol Options RIP PPP Authentication Protocols PAP CHAP TACACS+ Network Interfaces Ethernet ATM for DSL PVC NAT Easy IP (Phase 1) Easy IP (Phase 2) QoS IP Precedence PPP Fragmentation and Interleaving CBWFQ RSVP Low Latency Queuing Access Lists Page C ROM Monitor Entering the ROM Monitor ROM Monitor Commands Command Descriptions Disaster Recovery with TFTP Download TFTP Download Command Variables Required Variables Optional Variables Using the TFTP Download Command Configuration Register Changing the Configuration Register Manually Changing the Configuration Register Using Prompts Console Download Command Description Error Reporting Debug Commands Exiting the ROM Monitor Page D Common Port Assignments Page INDEX Symbols A B Page D E F G H I M N O P Q R S T U V W X