Cisco Systems Dial NMS manual POP #1

Models: Dial NMS

1 132
Download 132 pages 47.44 Kb
Page 34
Image 34
POP #1

Network Design for a Dial NMS Case Study

Configuration Design Parameters

Table 7

IP Subnetting Plan for POP #1 and POP #2

 

 

 

 

Network Name

Assigned IP Subnet

Description

 

 

 

 

 

POP #1

 

172.21.0.0/16

Class B IP subnet assigned to POP #1.

 

 

 

 

 

POP #2

 

172.22.0.0/16

Class B IP subnet assigned to POP #2.

 

 

 

 

 

NOC

 

172.23.10.0/24

Class C IP subnet assigned to the NOC.

 

 

 

 

 

Access

 

172.21.101.0/24

Primary and secondary class C access Ethernet subnets.

 

 

172.21.102.0/24

All the access devices in each POP are directly connected

 

 

172.22.101.0/24

to these subnets.

 

 

 

 

 

172.22.102.0/24

 

 

 

 

 

 

DeviceID

 

172.21.10.0/24

Identifies each Cisco IOS device with a unique, fixed, and

 

 

172.22.10.0/24

stable loopback IP address for network management

 

 

 

 

purposes.

 

 

 

 

One IP address is assigned to the loopback 0 interface of

 

 

 

 

each Cisco IOS device.

 

 

 

 

One IP address block is used to simplify IP-security

 

 

 

 

filtering at the NOC. This technique protects the NOC

 

 

 

 

from devices that should not access management

 

 

 

 

services, such as TACACS+, RADIUS, syslog, and

 

 

 

 

SNMP.

 

 

 

 

 

IP pool

 

172.21.103.0/24

Hosts a pool of IP addresses for the dial access clients

 

 

172.21.104.0/22

with modems.

 

 

172.22.103.0/24

This IP assignment provides 1280 IP addresses to each

 

 

172.22.104.0/22

POP. The access servers create the IP routes to support

 

 

 

 

the IP pools.

 

 

 

 

Few IP routes are summarized to the backbone instead of

 

 

 

 

advertising 1280 host routes.

 

 

 

 

 

Table 8

SNMP Community Strings Used at THEnet

 

 

 

 

Community Strings

 

Purpose

 

 

 

 

 

5urf5h0p

 

 

Assigns a read-only (RO) community string to enable SNMP polling and

 

 

 

SNMP get requests.

 

 

 

 

5crapmeta1

 

 

Assigns a read-write (RW) community string to enable router configuration

 

 

 

changes.

 

 

 

 

 

 

Caution Do not use “public” or “private” strings, which are well known in the industry, are common hardware defaults, and invite attacks from hackers—regardless if you use filters. To maximize security, choose community strings that are not associated with your personal life or company.

Basic Dial NMS Implementation Guide

!"

Page 34
Image 34
Cisco Systems Dial NMS manual POP #1