Setting Up RIP Routing

XSR(config)#ip firewall filter allowICMP private dmz protocol-id 1 XSR(config)#ip firewall filter allowICMP private ANY_EXTERNAL protocol-id 1 XSR(config)#ip firewall filter allowICMP ANY_EXTERNAL dmz protocol-id 1

Trial load the completed configuration into the firewall engine, and if successful, load the configuration:

XSR(config)#ip firewall load trial

XSR(config)#ip firewall load

Complete LAN and WAN interface configuration:

XSR(config)#interface gigabitethernet 1

XSR(config-if<F1>)#ip address 220.150.2.35/24

XSR(config-if<F1>)#no shutdown

XSR(config)#interface gigabitethernet 2

XSR(config-if<F2>)#ip address 220.150.2.17/24

XSR(config-if<F2>)#no shutdown

XSR(config)#interface serial 1/0:0

XSR(config-if<S1/0:0>)#ip address 206.12.44.16/24

XSR(config-if<S1/0:0>)#no shutdown

Globally enable the firewall. Even though you have configured and loaded the firewall, only invoking the following command “turns on” the firewall. Once enabled, if you are remotely connected, the firewall will close your session. Simply login again.

XSR(config)#ip firewall enable

For more Firewall configuration examples, refer to the XSR User’s Guide.

Setting Up RIP Routing

The following commands configure a GigabitEthernet and Serial interface to support RIP with additional functionality as an option:

1.Enter interface gigabitethernet <1 2 3> to acquire Interface mode and select one of the GigabitEthernet ports.

2.Enter ip address <xxx.xxx.xxx.xxx> <yyy.yyy.yyy.yyy> where x is the IP address and y is the subnet mask of this GigabitEthernet port.

3.Enter no shutdown to keep the interface enabled.

4.Enter interface serial <slot # card # port #> of the serial NIM card to re-acquire Interface mode and select slot, card and port numbers.

5.Enter ip address <xxx.xxx.xxx.xxx> <yyy.yyy.yyy.yyy> where x is the IP address and y is the subnet mask of the serial port.

6.Enter ip rip authentication mode text if you want to set clear-text authentication. If you enter this command, continue with the Step 7, otherwise, go to Step 8.

7.Enter ip rip authentication key-string<text> to specify a text string for authentication.

8.Enter no shutdown to keep the interface enabled.

9.Enter ip rip send version <1 2> to allow the RIP version of update transmissions. Version 1 is the default value.

3-14 Software Configuration

Page 58
Image 58
Enterasys Networks XSR-3150 manual Setting Up RIP Routing, Complete LAN and WAN interface configuration