Manuals / Cisco Systems / Power Tools / Saw

Cisco Systems OL-6426-02 manual 10-4

Models: OL-6426-02

1 196

Download 196 pages 47.1 Kb

Page 114

Chapter 10 Sample Configuration

BETA DRAFT - CISCO CONFIDENTIAL

station-role root

!

interface Dot11Radio0.1 description Cisco Open encapsulation dot1Q 1 native no cdp enable bridge-group 1

bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

!

interface Dot11Radio0.2 encapsulation dot1Q 2 bridge-group 2

bridge-group 2 subscriber-loop-control bridge-group 2 spanning-disabled bridge-group 2 block-unknown-source no bridge-group 2 source-learning

no bridge-group 2 unicast-flooding

!

interface Dot11Radio0.3 encapsulation dot1Q 3

bridge-group 3
bridge-group 3		subscriber-loop-control
bridge-group	3	spanning-disabled
bridge-group	3	block-unknown-source

no bridge-group 3 source-learning no bridge-group 3 unicast-flooding

!

interface Vlan1

ip address 192.168.1.1 255.255.255.0 no ip directed-broadcast (default)

crypto ipsec client ezvpn ezvpnclient inside ip inspect firewall in

no cdp enable bridge-group 1

bridge-group 1 spanning-disabled

!

interface Vlan2 no ip address bridge-group 2

bridge-group 2 spanning-disabled

!

interface Vlan3 no ip address bridge-group 3

bridge-group 3 spanning-disabled

!

interface BVI1

ip address 10.0.1.1 255.255.255.0 ip nat inside

!

interface BVI2

ip address 10.0.2.1 255.255.255.0

!

interface BVI3

ip address 10.0.3.1 255.255.255.0

!

ip classless

!

ip http server

Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide

10-4	OL-6426-02

Image 114

Cisco Systems OL-6426-02 manual 10-4

Contents

Cisco Systems, Inc Page N T E N T S Configuring Your Router for Ethernet and DSL Access 802.1x Authentication Configure the IPSec Crypto Method and Parameters Configuring Backup Interfaces Chap Configuration Register C-6 OL-6426-02 Preface AudienceOrganization Chapter Title DescriptionVPN Convention Description Command ConventionsConventions BoldfaceRelated Documents Obtaining DocumentationCisco.com Documentation DVD Documentation FeedbackCisco Product Security Overview Ordering DocumentationCisco Technical Support Website Reporting Security Problems in Cisco ProductsObtaining Technical Assistance An emergency, you can also reach Psirt by telephone 877 408Submitting a Service Request Definitions of Service Request SeverityObtaining Additional Publications and Information Getting Started Page Basic Router Configuration Interface Port LabelsRouter Interface Port Label ATM WAN Shdsl Viewing the Default ConfigurationADSLoISDN USB ModemExample 1-1 Cisco 1812 Default Configuration on Startup Information Needed for Configuration Configuring Basic Parameters To configure the router, perform one or more of these tasksCommand Purpose Configure Global ParametersConfigure Fast Ethernet LAN Interfaces ExampleConfigure WAN Interfaces Configure the Fast Ethernet WAN InterfaceController dsl Configure the ATM WAN InterfaceMode atm Exit No shutdownConfigure the Wireless Interface Configuring a Loopback InterfaceConfiguration Example Password password Configuring Command-Line Access to the RouterVerifying Your Configuration Line aux console tty vty line-numberLogin Exec-timeout minutes secondsEnd Privileged Exec mode Configuring Static RoutesExits router configuration mode, and enters Parameters that can be set, see the Cisco IOS IPConfiguring Dynamic Routes Configuration ExampleVerifying Your Configuration Router rip Configuring RIPCommand Task Version 1Eigrp on the router. The autonomous-system Configuring Enhanced IgrpEnters router configuration mode, and enables Number identifies the route to other Eigrp routersBe applied, using the IP address of the network Routerconfig# networkSpecifies a list of networks on which Eigrp is to Configuring Your Router for Ethernet and DSL Access Page Sample Network Deployments For Ethernet-Based Network DeploymentsFor DSL-Based Network Deployments OL-6426-02 Configuring PPP over Ethernet with NAT Vpdn enable Configuration TasksCommand or Action Purpose PPPoEInitiate to ip ip-address Configure the Fast Ethernet WAN InterfacesRequest-dialin Protocol l2f l2tp pppoe anyConfigures the PPPoE client and specifies Cisco 1800 integrated services routers haveThese steps to configure one or both of them Enables the Fast Ethernet interfaceConfigure the Dialer Interface Assigns the dialer interface to a dialer group Using a dialer group controls access toExits the dialer 0 interface configuration Your routerConfigure Network Address Translation Access-list access-list-number deny permit Ip nat inside outsideSource source-wildcard Configuration Example Router# show ip nat statistics Configuring PPP over ATM with NAT PPP over ATM with NATPPPoA Specifies that the IP address for the dialer Sets the PPP authentication methodAuthentication Protocol Chap Interface is obtained through PPP/IPCP IPCommand Reference, Volume 1 of 4 Routing Configure the ATM WAN Interface Configure DSL Signaling Protocol Configuring AdslAttribute Description Default Value Configuring Shdsl Verify the ConfigurationDsl lom integer Dsl enable-training-log Line-mode 4-wire enhanced 4-wire standard WireIgnore-error-duration number Configure Network Address Translation FE2-FE9 reside to be the inside interface Enables the configuration changes just made toAbout enabling static translation, see the Cisco For NATDefines a standard access list permitting addresses Static translation, see the Cisco IOS IP CommandExits configuration mode for the ATM interface Identifies the specified WAN interface as the NATATM0 Configuring a LAN with Dhcp and VLANs VlanVLANs Configure Dhcp Dns-server address address2 ...address8 Default-router address address2 ...address8Import all Domain-name domainVerify Your Dhcp Configuration Router# show ip dhcp importIp dhcp pool Vlan ? Configure VLANsVerify Your Vlan Configuration ExampleRouter# show vlan-switch VlanSwitch Port Configurations 802.1x Authentication Vlan Trunking Protocol VTPIP Multicast Switching Maximum Switched Virtual Interfaces SVIsSwitched Port Analyzer Span Layer 2 InterfacesSeparate Voice and Data Subnets Per-Port Storm ControlFallback Bridging Igmp SnoopingConfiguring a VPN Using Easy VPN and an IPSec Tunnel InternetCisco Easy VPN Configure the IKE Policy Group-name default Configure Group Policy InformationCrypto isakmp client configuration group Key nameApply Mode Configuration to the Crypto Map Ip local pool default poolnameEnable Policy Lookup Configure IPSec Transforms and ProtocolsConfigure the IPSec Crypto Method and Parameters Crypto map map-name seq-num ipsec-isakmp Apply the Crypto Map to the Physical InterfaceReverse-route Dynamic dynamic-map-name discoverCreate an Easy VPN Remote Configuration Crypto map map-nameVerifying Your Easy VPN Configuration Crypto ipsec client ezvpn name outside insideCrypto ipsec client ezvpn ezvpnclient connect auto Beta Draft Cisco Confidential Site-to-Site VPN Using an IPSec Tunnel and GRE GRE Tunnels VPNsAlso enters Internet Security Association Key Configure a VPNConfigure the IKE Policy Example uses 168-bit Data EncryptionConfigure Group Policy Information Group 1 2Lifetime seconds Enters global configuration mode Enable Policy LookupExits IKE group policy configuration mode, Specifies group domain membershipSpecifies global lifetime values used when Configure IPSec Transforms and ProtocolsMethod used to do so Negotiating IPSec security associationsCreates source proxy information for the crypto Configure the IPSec Crypto Method and ParametersCreates a dynamic crypto map entry, and enters Map entryMap Configure a GRE TunnelApply the Crypto Map to the Physical Interface Applies the crypto map to the interfaceEnters ACL configuration mode for the named Tunnel interface must be configured toExits interface configuration mode, and returns to Access-list-name ACL that is used by the crypto mapConfiguration Example Ip nat outside no cdp enable Beta Draft Cisco Confidential Configuring a Simple Firewall Router with Firewall ConfiguredProtected network Series integrated services router, respectivelyFast Ethernet LAN interface the inside interface for NAT Unprotected networkCreates an access list which prevents Internet Configure Access ListsConfigure Inspection Rules Details about this commandApply Access Lists and Inspection Rules to Interfaces Assigns the set of firewall inspection rules toInside interface on the router Configuring a Simple Firewall Configuration Example Beta Draft Cisco Confidential Configuring a Wireless LAN Connection 1shows a wireless network deploymentConfiguring a Wireless LAN Connection Configure the Root Radio Station Exits Ssid configuration mode, and enters Sets the permitted authentication methods for aUser attempting access to the wireless LAN Interface configuration mode for the wirelessBridge number crb irb mac-address-table Configure Bridging on VLANsStation-role repeater root Bridge-group numberConfigure Radio Station Subinterfaces Enables Ieee 802.1q encapsulation onSpecified subinterface Exits subinterface configuration mode, Assigns a bridge group to the subinterfaceNo bridge-group 3 unicast-flooding Interface Vlan1 Sample Configuration Router# show running-config10-1 10-2 Ip dhcp pool vlan310-3 10-4 10-5 10-6 Additional Configuration Options 11-111-2 Configuring Additional Features and Troubleshooting Page Configuring Security Features Authentication, Authorization, and Accounting12-1 Configuration Commands Configuring AutoSecureConfiguring Access Lists ACL TypeGuidelines for Creating Access Groups Configuring a Cbac FirewallAccess Groups Ip access-group number name in outConfiguring Cisco IOS Firewall IDS Configuring VPNs12-4 Backup Interfaces Configuring Dial Backup and Remote ManagementDial Backup Feature Activation Methods 13-1Configuring Backup Interfaces Floating Static Routes13-2 Configuring Floating Static Routes Enables RIP routing13-3 Specifies the group number for the watch list Configuring Dialer WatchDialer Watch 13-4Dial Backup Feature Limitations Dial Backup Type Possible? Dial Backup Method Limitations13-5 13-6 13-7 Example 13-3 Configuring Dial Backup Using Dialer Watch 13-8Configure Isdn Settings 13-913-10 Dialer pool number Access-groupIp address negotiated Dialer-group group-numberConfigure the Aggregator and Isdn Peer Router For your Cisco router during the ATM network downtime13-12 Asynchronous Interface Configuration 13-1313-14 Line Configuration 13-1513-16 Before Contacting Cisco or Your Reseller TroubleshootingGetting Started 14-1PortFast Troubleshooting Adsl TroubleshootingShdsl Troubleshooting 14-2Show interface Command ATM Troubleshooting CommandsPing atm interface Command 14-3Shutdown command Output Cause14-4 Show atm interface Command 14-5Router# show atm interface atm Debug atm errors Command Debug atm CommandsGuidelines for Using Debug Commands Field Description14-7 Debug atm events CommandRouter# debug atm errors ATM errors debugging is on Router# Router# debug atm events Router#Optional ATM interface or subinterface number Debug atm packet CommandWhere the keywords are defined as follows Example 14-7shows a sample outputATM0 Software Upgrade MethodsRecovering a Lost Password 14-9Change the Configuration Register 14-10Router# show version Press Return. The following prompt appears Reset the RouterRouter# show startup-config Prompt changes to the privileged Exec promptReset the Password and Save Your Changes Reset the Configuration Register Value14-12 Managing Your Router with SDM 14-1314-14 Reference Information Page Cisco IOS Software Basic Skills Configuring the Router from a PCOne of the configuration topic chapters in this guide PC Operating System SoftwareUnderstanding Command Modes Exec As interface atmCtrl-Z Router Enter one of the router Configuration mode Routing protocol AppropriateGetting Help Router rip, fromEnable Secret Passwords and Enable Passwords Entering Global Configuration ModeYou can now make changes to your router configuration Undoing Commands Using CommandsAbbreviating Commands Command-Line Error MessagesSaving Configuration Changes Where to Go NextSummary OL-6426-02 Concepts AdslNetwork Protocols Routing Protocol OptionsEnhanced Igrp PPP Authentication ProtocolsProtocol Ideal Topology Metric Routing Updates RIPPAP Network Interfaces EthernetDial Backup Backup InterfaceDialer Interface NAT Easy IP Phase QoS IP PrecedencePPP Fragmentation and Interleaving Cbwfq Low Latency QueuingAccess Lists OL-6426-02 Resets the configuration register EnableConfig-reg ROM MonitorReload ROM Monitor CommandsExits global configuration mode Descriptions section in this appendixTftp Download Command Variables Command DescriptionsDisaster Recovery with Tftp Download Command DescriptionVariable Command Required VariablesOptional Variables TFTPCHECKSUM= setting Using the Tftp Download CommandTFTPTIMEOUT= time RetrytimesChanging the Configuration Register Using Prompts Configuration RegisterChanging the Configuration Register Manually Rommon 1 confregCommand Description Console DownloadContext-Displays processor context for example Debug CommandsError Reporting Frame-Displays an individual stack frameExiting the ROM Monitor OL-6426-02 Common Port Assignments Port Keyword DescriptionNETBIOS-SSN NETBIOS-NSNETBIOS-DGM FingerSee ATM See ARPSee AAL IN-1See Chap See CARIN-2 Dhcp IN-3Ethernet B-5 Events, ATM, displaying Experience, user Extended access list Overview B-11See also examples GRESee LCP See NCPIN-5 See PPP See PAPSee PVC See IpcpSee RIP See NATIN-7 Upgrading software, methods for 14-9User Datagram Protocol See UDPIN-8