Manuals / Foundry Networks / Computer Equipment / Network Router

Foundry Networks AR1208, AR3202-CL manual Foundry AR-Series Router User Guide Foundry Networks, Inc

Models: AR1208 AR1216 AR3202-CL AR3202 AR3201-CL AR3201 AR1204

1 293

Download 293 pages 53.56 Kb

Security Protocol Defaults Warranty BGP4 Configure Commands Show policy ipaccesslist Chapter Command Line Interface Packet Reassembly Security Features

Page 181

Foundry AR-Series Router User Guide

10 - 28

© 2004 Foundry Networks, Inc.

June 2004

Page 180 Page 182

Image 181

Foundry Networks AR1208, AR3202-CL, AR3201-CL, AR1204, AR1216 manual Foundry AR-Series Router User Guide Foundry Networks, Inc

Page 180 Page 182

Related pages Specifications for Pioneer DEH-P3150 Speaker Damage & HOW to Avoid IT for MK Sound MP-150

Contents

Foundry AR-Series Router User Guide Page Contents BGP4 C Lear C Ommands BGP4 Configure Commands Ospf C Onfigure C Ommands 10-1 RIP Show C Ommands Security Features Introduction Chapter Getting StartedAudience Nomenclature Related Publications List of FeaturesWAN Protocols Layer 2 Features Feature Supported in AccessIron DevicesLayer 3 Features CLI Snmp Warranty Coverage How to Get HelpWeb Access Email Access Telephone Access Foundry AR-Series Router User Guide Foundry Networks, Inc Command Types Chapter Command Line InterfaceContext-Sensitive Commands Foundry-AR1208#configure terminal Syntax Conventions Command ConventionsFor Syntaxes What it means Example Conventions Abbreviated CommandsFor Examples What it means CLI Navigation Command HelpNavigation Keys Help Question Mark Help Screen Tree Description Commands Global Commands Global show Command Foundry AR-Series Router User Guide Foundry Networks, Inc Configure policy Chapter Policy CommandsRelated commands Parameter Description Configure policy aspathSyntax Example Configure policy communitylist Configure policy communitylist extendedcommunity Configure policy communitylist standardcommunity Configure policy ipaccesslist This example restricts the prefixes to 10.0.0.0/8 only Foundry-AR1208/configure#policy routemap Block100 1 permit Configure policy routemap Related commands Configure policy routemap match Configure policy routemap match aspath Configure policy routemap match community Configure policy routemap match ip ipaddress Configure policy routemap set Configure policy routemap set aspath Parameter Descriptiongenerate Configure policy routemap set community Configure policy routemap set distance Configure policy routemap set localpreference Configure policy routemap set metric Configure policy routemap set metrictype Configure policy routemap set origin Foundry AR-Series Router User Guide Foundry Networks, Inc BGP4 Chapter Protocols Overview BGP RFC Compliance RFC ComplianceDescription RIP RFC Compliance Ospf RFC Compliance Multicasting Securing Remote Access Using IPSec VPNProtocol Independent Multicast PIM Clear ip bgp Chapter BGP4 Clear Commands Clear ip bgp all Foundry-AR1208#clear ip bgp group north Clear ip bgp group Foundry-AR1208#clear ip bgp neighbor 10.1.1.1 Clear ip bgp neighbor Configure router Chapter Generic Routing Commands Foundry-AR1208/configure#router routerid Configure router routerid Parameter Definitions Show ip routesTerm Definition To display all routes, issue the show ip routes command Configure router bgp Chapter BGP4 Configure Commands Configure router bgp aggregateaddress Applicable systems Configure router bgp alwayscomparemed Configure router bgp defaultmetric Preferenc Configure router bgp distance Configure router bgp group Configure router bgp group distributelist Configure router bgp group filterlist Configure router bgp group nexthopself Configure router bgp group password Configure router bgp group removeprivateAS Configure router bgp group routemap Configure router bgp neighbor BGP4 Configure Commands Configure router bgp redistribute Configure router bgp neighbor advertisementinterval Configure router bgp neighbor allowbadid Configure router bgp neighbor defaultoriginate Configure router bgp neighbor description Configure router bgp neighbor distributelist Configure router bgp neighbor ebgpmultihop Configure router bgp neighbor filterlist Configure router bgp neighbor keep Configure router bgp neighbor logupdown Configure router bgp neighbor maximumprefix Configure router bgp neighbor neighborgroup Configure router bgp neighbor nexthopself Configure router bgp neighbor password Configure router bgp neighbor routemap Configure router bgp neighbor timers Configure router bgp neighbor updatesource Configure router bgp redistribute Configure router bgp redistribute connected Configure router bgp redistribute ospf Configure router bgp redistribute rip Configure router bgp redistribute static Show ip bgp Chapter BGP4 show Commands Show ip bgp aggregateaddress Foundry-AR1208#show ip bgp community aann Show ip bgp community Status codes Status and Origin Codes Foundry-AR1208#show ip bgp groups north Show ip bgp groups Foundry-AR1208#show ip bgp neighbors Show ip bgp neighbors Other BGP show Descriptions Applicable systems Foundry-AR1208#show ip bgp paths Show ip bgp paths Foundry-AR1208#show ip bgp regexp Show ip bgp regexp Foundry-AR1208#show ip bgp summary Show ip bgp summaryHeader Definitions Foundry-AR1208#show ip bgp table Status and Origin Codes Show ip bgp table Show policy Foundry-AR1208#show policy aspath Show policy aspath Foundry-AR1208#show policy communitylist Show policy communitylist Foundry-1450/show#policy ipaccesslist Show policy ipaccesslist Foundry-AR1208#show policy routemap Show policy routemap Foundry AR-Series Router User Guide Foundry Networks, Inc Chapter Ospf Configure Commands Configure router ospf Configure router ospf 1583 Compatibility Configure router ospf area Configure router ospf area areatype Configure router ospf area areatype normal Configure router ospf area areatype nssa Configure router ospf area areatype nssa nosummary Configure router ospf area areatype stub Configure router ospf area areatype stub nosummary Configure router ospf area defaultcost Configure router ospf area range Configure router ospf area virtuallink Configure router ospf area virtuallink authentication Configure router ospf area virtuallink deadinterval Configure router ospf area virtuallink hellointerval Configure router ospf area virtuallink retransmitinterval Configure router ospf area virtuallink transmitdelay Configure router ospf distance Configure router ospf distance ospf Configure router ospf distance ospf external Configure router ospf distance ospf nonexternal Configure router ospf interface Configure router ospf interface authentication Configure router ospf interface cost Configure router ospf interface deadinterval Configure router ospf interface hellointerval Configure router ospf interface neighbor Configure router ospf interface network Applicable systems Configure router ospf interface pollinterval Configure router ospf interface priority Configure router ospf interface retransmitinterval Configure router ospf interface transmitdelay Configure router ospf redistribute Configure router ospf redistribute bgp Configure router ospf redistribute connected Configure router ospf redistribute rip Configure router ospf redistribute static Configure router ospf refbw Configure router ospf timers Foundry AR-Series Router User Guide Foundry Networks, Inc Show ip ospf area Chapter Ospf Show CommandsFoundry-AR1208#show ip ospf area Related commands Foundry-AR1208#show ip ospf database Show ip ospf database Foundry-AR1208#show ip ospf database all Show ip ospf database all Foundry-AR1208#show ip ospf database asbrsummary Show ip ospf database asbrsummary Foundry-AR1208#show ip ospf database databasesummary Show ip ospf database databasesummary Foundry-AR1208#show ip ospf database external Show ip ospf database external Foundry-AR1208#show ip ospf database network Show ip ospf database network Foundry-AR1208#show ip ospf database nssaexternal Show ip ospf database nssaexternal Foundry-AR1208#show ip ospf database router Show ip ospf database router Foundry-AR1208#show ip ospf database selforiginate Show ip ospf database selforiginate Foundry-AR1208#show ip ospf database summary Show ip ospf database summary Foundry-AR1208#show ip ospf global Show ip ospf global Foundry-AR1208#show ip ospf interface Show ip ospf interface Foundry-AR1208#show ip ospf interface all Show ip ospf interface all Foundry-AR1208#show ip ospf interface bundle Boise Show ip ospf interface bundle Foundry-AR1208#show ip ospf interface ethernet Show ip ospf interface ethernet Foundry-AR1208#show ip ospf neighbor Show ip ospf neighbor Foundry-AR1208#show ip ospf neighbor detail Show ip ospf neighbor detail Foundry-AR1208#show ip ospf neighbor id Show ip ospf neighbor id Foundry-AR1208#show ip ospf neighbor interface ethernet Show ip ospf neighbor interface Foundry-AR1208#show ip ospf neighbor interface bundle Boise Show ip ospf neighbor interface bundle Show ip ospf neighbor interface ethernet Foundry-AR1208#show ip ospf neighbor list Show ip ospf neighbor list Foundry-AR1208#show ip ospf requestlist Show ip ospf requestlist Foundry-AR1208#show ip ospf retransmissionlist Show ip ospf retransmissionlist Foundry-AR1208#show ip ospf virtuallinks Show ip ospf virtuallinks Foundry AR-Series Router User Guide Foundry Networks, Inc Chapter RIP Configure Commands Configure router rip Configure router rip defaultmetric Configure router rip distance Configure router rip interface Configure router rip interface authentication Configure router rip interface distributelist Configure router rip interface metric Configure router rip interface mode Configure router rip interface neighbor Configure router rip interface passive Configure router rip interface splithorizon Configure router rip mode Configure router rip pacing Configure router rip passive Configure router rip redistribute Configure router rip redistribute bgp Configure router rip redistribute connected Configure router rip redistribute ospf Configure router rip redistribute static Configure router rip timers Configure router rip timers flush Configure router rip timers holddown Configure router rip timers update Chapter RIP show Commands Show ip rip Foundry-AR1208#show ip rip global Show ip rip global Show ip rip interface Foundry-AR1208#show ip rip interface all Show ip rip interface all Foundry-AR1208#show ip rip interface bundle Dallas Show ip rip interface bundle Foundry-AR1208#show ip rip interface ethernet0 Show ip rip interface ethernet Foundry-AR1208#show ip rip interface statistics Show ip rip interface statistics Foundry-AR1208#show ip rip statistics Show ip rip statistics Foundry AR-Series Router User Guide Foundry Networks, Inc Matching AS Paths Chapter AS Path Regular ExpressionsAS Path Regular Expressions regex AS Path Terms = n means at least m and at most n repetitions Chapter Multicasting PIM CommandsMulticasting Overview Global parameters BSR Multicasting Internet Group Management Protocol Igmp Igmp Commands Traceroute Facility for IP Multicast Multicast Multipath Multipath Commands Generic Routing Encapsulation GRE Enabling Security Features Chapter Security FeaturesIntroduction to Security Remote Access User Group Access MethodsRemote Access Mode Configuration Configure a WAN bundle of network type untrusted Configure IKE to the peer gateway Configure the Ethernet interface with trusted network typeDisplay the crypto interfaces Add the route to the peer LAN Display the IKE policies Configure the IPSec tunnel to the remote hostDisplay the IKE policies in detail Display IPSec policies in detail Display the IPSec policies Permit SE Router1# show firewall policy internet detail Display Snmp communities Enable Snmp on the Router1 router Router1# show crypto ipsec sa all detail Add route to peer LAN Configure IKE to the peer gateway Display IPSec policies Configure IPSec tunnel to the remote host Display IPSec policies detail Permit Foundry AR-Series Router User Guide Security Features Samature Security Features Configure a WAN bundle of network type untrusted Configure IKE to the peer gateway Configure IPSec tunnel to the remote host Security Features Permit Security Features Foundry AR-Series Router User Guide Samature Example 4 Supporting Remote User Access IPSec Tunneling Using User Group Method Display dynamic IKE policies Configure dynamic IKE policy for a group of mobile users Display dynamic IKE policies in detail Configure dynamic IPSec policy for a group of mobile usersDisplay dynamic IPSec policies Display dynamic IPSec policies in detail Security Features Foundry AR-Series Router User Guide Security Features Foundry AR-Series Router User Guide Security Features IPSec Tunneling Using Mode Configuration Method Display the crypto interfaces Display dynamic IKE policies in detail Display dynamic IPSec policies in detail Permit E Security Features Samature Configuring GRE Configuring Site to Site Tunnel GRE Configuration Examples For more information enter Configuring GRE Site to Site with IPSec Foundry# show crypto ike policy all Configuring GRE Site to Site with IPSec and Ospf Basic Firewall Configuration Firewall Configuration ExamplesFirewalls Create policies for Security Zone Corp that Create the security zones Corp and DMZ and attach interfaces Create policies for Security Zone DMZ that Verify the firewall policy for Security Zone Corp Verify the firewall policy for Security Zone DMZ Create a default route out of the WAN Foundry AR-Series Router User Guide Security Features Stopping DoS Attacks NAT Configurations Packet Reassembly Dynamic NAT many to many NAT Configuration Examples Port Address Translation Many to one Static NAT one to one Method2 Attaching nat pool to the policy Method1 Specifying NAT address with the policy command IPSec Supported Protocols and Algorithms Security Protocol DefaultsIPSec Protocols Support IKE Defaults Foundry IKE and IPSec DefaultsDiffie-Hellman Groups for Key Size Authentication Bits HMAC-MD5-96 Bits IPSec Defaults Firewall Default ValuesFirewall per policy defaults Policy Parameter Default Value Firewall per policy defaults 10 DoS Protection Defaults Configured DoS Attacks Tunneling Default Values11 Tunnel Interface Defaults Parameter Default Value Foundry AR-Series Router User Guide Foundry Networks, Inc Index June

Top Page Image Contents