Nokia IPSO 4.0 instruction

Nokia Network Voyager

for IPSO 4.0

Reference Guide

Part No. N451818001 Rev A

Published October 2005

Image 1

Nokia IPSO 4.0 manual Nokia Network Voyager For Ipso Reference Guide

Contents

Nokia Network Voyager For Ipso Reference Guide Restricted Rights Legend Nokia Network Voyager for Ipso 4.0 Reference Guide Https//support.nokia.com Tac.support@nokia.com Nokia Network Voyager for Ipso 4.0 Reference Guide Contents Nokia Network Voyager Ipso 4.0 Reference Guide Configuring System Functions Nokia Network Voyager Ipso 4.0 Reference Guide Virtual Router Redundancy Protocol Vrrp Configuring Clustering Nokia Network Voyager Ipso 4.0 Reference Guide Configuring IPv6 Configuring Snmp Managing Security and Access Configuring Routing Nokia Network Voyager Ipso 4.0 Reference Guide Nokia Network Voyager Ipso 4.0 Reference Guide Configuring Traffic Management Monitoring System Configuration and Hardware Configuring Router Services Index About the Nokia Network Voyager Reference Guide About the Nokia Network Voyager Reference Guide Text Conventions Conventions This Guide UsesText Conventions Convention Description Menu Items Related Documentation Nokia Network Voyager for Ipso 4.0 Reference Guide Software Overview Logging Off Logging In to Network VoyagerTo open Nokia Network Voyager To log in with exclusive configuration lock Obtaining a Configuration LockTo log in without exclusive configuration lock To override a configuration lock Navigating in Network Voyager Accessing Documentation and HelpReloading Pages To clear the memory and disk cache To open a new window to view help „ Nokia support site https//support.nokia.com To view the asset management summary Viewing Hardware and Software Information for Your System Interface Overview Configuring Interfaces IP2250 Management Ports Configuring Network DevicesType Prefix Physical Interface Logical Interface Configuring IP Addresses Interface Status Interface Status Indicators Configuring Tunnel InterfacesIndicator Description Physical Interface Configuration Parameters Configuring Ethernet InterfacesEthernet Interfaces Parameter Description Link Aggregation To configure an Ethernet interface Configuring Switches for Link Aggregation Managing Link Aggregation Using Snmp Link Aggregation on the IP2250 Static Link AggregationFirewall Synchronization Traffic Production Traffic ADP I/O Ports Only Configuring the Remaining Management Ports Physical Interface Configuration Configuring Link AggregationTo set up link aggregation in Network Voyager To physically configure the interfaces you will aggregate To configure link aggregation groups Group Configuration Gigabit Ethernet Interfaces Logical ConfigurationDeleting Aggregation Groups Gigabit Ethernet Interface Parameters MTU To configure a Gigabit Ethernet interface To configure PPPoE Configuring PPPoEPoint-to-Point Over Ethernet Nokia Network Voyager for Ipso 4.0 Reference Guide To delete configuration profiles To change configuration profilesTo create PPPoE logical interfaces To delete PPPoE logical interfaces Virtual LAN Interfaces Configuring MSS Clamping To delete a Vlan Interface To configure a Vlan Interface To define the maximum number of VLANs Vlan Example Topology Fddi Interfaces To configure an Fddi Interface To change the IP address of an Fddi interface To change the duplex setting of an Fddi interface Isdn Interfaces To configure an Isdn physical interface To configure an Isdn logical interface to place calls Nokia Network Voyager for Ipso 4.0 Reference Guide Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an Isdn interface to receive calls To add an incoming number Configuring Calling Line-Identification Screening To remove an incoming number To configure an interface to place and receive calls Dial-on-Demand Routing DDR Lists To delete a DDR list To create a DDR listTo add a new rule to a DDR list To modify a rule Example DDR ListTo apply or remove a DDR list to/from an interface Isdn Network Configuration Example To configure the IP650 to handle an incoming call To configure the IP330 to place an outgoing call Sample Call Traces Trace for connecting a call from the Nokia IP330 is Logging Isdn TroubleshootingTo set level of messages logged To view the message log To trace Isdn traffic using tcpdump Troubleshooting Cause CodesTracing Isdn Cause Code Fields Isdn Cause Values Cause Cause Description DiagnosticsCause Values See Isdn Cause Values table Information-element identifiers is missing Value Description Isdn Bearer-Capable Values Token Ring Interfaces To configure a Token Ring interface To change a Token Ring interface To deactivate a Token Ring interface Token Ring Example Fddi Point-to-Point Link over ATM To configure an ATM interface To change the VPI/VCI of an ATM interface To change the IP MTU of an ATM interface To change the IP Address of an ATM interface Fddi ATM Example To configure an ATM logical IP subnet LIS interface To configure the ATM interface on Nokia Platform aIP over ATM IPoA To change the VPI/VCIs of an ATM LIS Interface To change the IP Address of an ATM LIS interface ATM IPoA Example Serial V.35 and X.21 Interfaces To configure a serial interface for Cisco Hdlc To configure a Serial Interface for PPP To configure a serial interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide Serial Interface Example To configure a T1 Interface for Cisco Hdlc To configure the serial interface on Nokia Platform aT1with Built-In CSU/DSU Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 Interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide T1 Interface Example To configure the serial interface on Nokia Platform a E1 with Built-In CSU/DSU Interfaces To configure an E1 interface for Cisco Hdlc Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an E1 interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide 100 To configure an E1 interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide 101 102 Hssi Interfaces To configure an Hssi interface for Cisco HdlcNokia Network Voyager for Ipso 4.0 Reference Guide 103 104 To configure an Hssi interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide 105 To configure an Hssi interface for frame relay 106 To configure an unnumbered interface Configuring Unnumbered InterfacesUnnumbered Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide 107 108 To change an unnumbered interface to a numbered interface Nokia Network Voyager for Ipso 4.0 Reference Guide 109 To configure a static route over an unnumbered interface Ospf over Unnumbered Interfaces Using Virtual Links Configuring Ospf over Unnumbered Interface110 To change the keepalive interval for Cisco Hdlc Cisco Hdlc ProtocolNokia Network Voyager for Ipso 4.0 Reference Guide 111 To change the IP address in Cisco Hdlc Point-to-Point ProtocolTo change the keepalive interval in PPP 112 To change the IP address in PPP To change the keepalive maximum failures in PPPNokia Network Voyager for Ipso 4.0 Reference Guide 113 To change the keepalive interval in frame relay Frame Relay ProtocolTo change the Dlci in frame relay 114 To change the interface type in frame relay To change the LMI parameters in frame relayNokia Network Voyager for Ipso 4.0 Reference Guide 115 To change the IP address in frame relay To change the active status monitor setting in frame relayTo remove a frame relay interface 116 To add an IP Address to a Loopback Interface Loopback InterfacesTo change the IP Address of a loopback interface Nokia Network Voyager for Ipso 4.0 Reference Guide 117 GRE Tunnels Configuring GRE TunnelsTo create a GRE tunnel 118 Nokia Network Voyager for Ipso 4.0 Reference Guide 119 120 To change IP TOS value of a GRE tunnel Nokia Network Voyager for Ipso 4.0 Reference Guide 121 GRE Tunnel Example HA GRE Tunnel Example High Availability GRE Tunnels122 Nokia Network Voyager for Ipso 4.0 Reference Guide 123 124 To create a Dvmrp tunnel Dvmrp TunnelsNokia Network Voyager for Ipso 4.0 Reference Guide 125 To change the local or remote addresses of a Dvmrp tunnel Dvmrp Tunnel Example126 Nokia Network Voyager for Ipso 4.0 Reference Guide 127 To change ARP global parameters ARP Table Entries128 To add a proxy ARP entry To add a static ARP entryNokia Network Voyager for Ipso 4.0 Reference Guide 129 Configuring ARP for ATM Interfaces To delete a static ATM ARP entry To add a static ATM ARP entryTo view and delete dynamic ATM ARP entries Nokia Network Voyager for Ipso 4.0 Reference Guide 131 Limitations Transparent Mode132 Nokia Network Voyager for Ipso 4.0 Reference Guide 133 Transparent Mode Processing Details 134 Configuring Transparent Mode in VPN Environments Nokia Network Voyager for Ipso 4.0 Reference Guide 135 Example of Transparent Mode 136 Configuring Transparent Mode To create a transparent mode group Creating and Deleting Transparent Mode GroupsTo delete a transparent mode group Nokia Network Voyager for Ipso 4.0 Reference Guide 137 To enable or disable a transparent mode group Enabling or Disabling a Transparent Mode Group138 Transparent Mode and Check Point NGX Monitoring Transparent Mode GroupsEnabling or Disabling Vrrp for a Transparent Mode Group Configuring Antispoofing Unnumbered VTIs Virtual Tunnel Interfaces Fwvpn for Route-Based VPNRouting Traffic through the VTI 140 Nokia Network Voyager for Ipso 4.0 Reference Guide 141 Vrrp Support Creating Virtual Tunnel InterfacesTo create a virtual tunnel interface To create the VPN community Nokia Network Voyager for Ipso 4.0 Reference Guide 143 144 To create the virtual tunnel interface Nokia Network Voyager for Ipso 4.0 Reference Guide 145 Configuring Dhcp Dhcp Client Configuration Configuring Dhcp Client InterfacesTo configure the Dhcp client interface To enable the Dhcp client process To configure the Dhcp server process Configuring the Dhcp ServerNokia Network Voyager for Ipso 4.0 Reference Guide 147 To enable the Dhcp server process Dhcp Server Configuration148 To disable the Dhcp server process Changing Dhcp ServiceTo change the Dhcp service Adding Dhcp Address Pools Enabling or Disabling Dhcp Address Pools To enable and existing IP address poolAssigning a Fixed-IP Address to a Client To assign a fixed-IP address to a client Nokia Network Voyager for Ipso 4.0 Reference Guide 151 Creating Dhcp Client Templates 152 Configuring Dynamic Domain Name System Zones Configuring Dynamic Domain Name System ServiceTo configure Dynamic Domain Name System Ddns Nokia Network Voyager for Ipso 4.0 Reference Guide 153 Configuring Disk Mirroring Configuring the Domain Name ServiceTo configure DNS To create a mirror set To delete a mirror set Using an Optional Disk Flash-Based Systems OnlyNokia Network Voyager for Ipso 4.0 Reference Guide 155 To configure the system to store log files on the PC card To install and configure PC card flash memoryMail Relay To remove an optional disk To configure failure notification Configuring Mail RelayTo configure mail relay for your firewall System Failure Notification Sending Mail Setting the System TimeTo send mail from the firewall 158 To set system time once Configuring Host AddressesTo add a static host entry Nokia Network Voyager for Ipso 4.0 Reference Guide 159 Configuring Logging on Disk-Based Systems Configuring System LoggingAccepting Log Messages Logging to a Remote System To send syslog messages to a remote system Configuring Logging on Flash-Based SystemsNokia Network Voyager for Ipso 4.0 Reference Guide 161 162 Configuring Logging to Remote Log Servers Configuring Logging to an Optional Disk Configuring Audit LogsNokia Network Voyager for Ipso 4.0 Reference Guide 163 164 To set the system configuration audit log Nokia Network Voyager for Ipso 4.0 Reference Guide 165 Remote Core Dump Server on Flash-Based Systems Changing the Hostname Managing Configuration SetsTo change the hostname 166 To switch a currently active database To create a factory default configuration fileTo delete unwanted configuration database files Scheduling Jobs To delete scheduled jobs Backing Up and Restoring Files168 To create a backup file manually Creating Backup FilesTo delete local backup files Nokia Network Voyager for Ipso 4.0 Reference Guide 169 Configuring Automatic Transfers Transferring Backup FilesTo configure scheduled backups To cancel a regularly scheduled backup To manually transfer archive files to a remote server Transferring Backup Files ManuallyNokia Network Voyager for Ipso 4.0 Reference Guide 171 To restore files Restoring Files from Locally Stored Backup Files172 Changing Current Image Managing Nokia Ipso ImagesDeleting Images To select a new current image To delete an Nokia Ipso image Installing New Images174 To test an image before activating it Testing a New ImageNokia Network Voyager for Ipso 4.0 Reference Guide 175 Upgrading Nokia Ipso Images for a Cluster Rebooting a ClusterDowngrading Nokia Ipso Images 176 Nokia Network Voyager for Ipso 4.0 Reference Guide 177 Configuring Monitor Reports Managing Packages Installing and Enabling PackagesRestrictions for Flash-Based Platforms Monitor Report Parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 179 To install a package Tuning the TCP/IP Stack Advanced System TuningTo enable or disable a package To delete a package To set the TCP MSS Router Alert IP OptionNokia Network Voyager for Ipso 4.0 Reference Guide 181 182 How Vrrp Works Vrrp OverviewNokia Network Voyager for Ipso 4.0 Reference Guide 183 184 Simple Vrrp Configuration Vrrp Configuration with Simultaneous Backup Vrrp Configuration with Internal and External VRIDs Understanding Monitored-Circuit Vrrp Configuring Vrrp186 Priority Selecting Configuration ParametersNokia Network Voyager for Ipso 4.0 Reference Guide 187 Hello Interval Authentication188 Priority Delta Backup AddressNokia Network Voyager for Ipso 4.0 Reference Guide 189 190 Vmac Mode Vrrp Configuration Parameters Global Vrrp SettingsBefore you Begin Nokia Network Voyager for Ipso 4.0 Reference Guide 191 192 Configuring Monitored-Circuit Vrrp Nokia Network Voyager for Ipso 4.0 Reference Guide 193 To add a virtual router To change the configuration of an existing virtual router Configuring Monitored-Circuit Vrrp using the Full MethodTo delete a virtual router 194 Nokia Network Voyager for Ipso 4.0 Reference Guide 195 Additional Vrrp Parameters Used in Full Method To add or back up a virtual router using VRRPv2 Configuring VRRPv2196 Nokia Network Voyager for Ipso 4.0 Reference Guide 197 Configuring Check Point NGX for Vrrp 198 Configure settings under the 3rd party configuration tab Configuration Rule for Check Point NGX FP1 Configuring Vrrp Rules for Check Point NGXNokia Network Voyager for Ipso 4.0 Reference Guide 199 Configuring Rules if You Are Using Ospf or Dvmrp Configuration Rules for Check Point NGX FP2 and LaterSource Destination Service Action 200 Monitoring Vrrp CLI commands for VrrpLink Aggregation IP2250 Systems Only State Stats Location202 General Configuration Considerations Troubleshooting VrrpTo enable or disable Monitor Firewall state To enable traces for Vrrp Firewall Policies Access Control Lists204 Monitored-Circuit Vrrp in Switched Environments Switched EnvironmentsVRRPv2 in Switched Environments Nokia Network Voyager for Ipso 4.0 Reference Guide 205 206 IP Clustering Description Using Flash-Based PlatformsNokia Network Voyager for Ipso 4.0 Reference Guide 207 208 Example Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 209 Cluster Management 210 Cluster Terminology Nokia Network Voyager for Ipso 4.0 Reference Guide 211 Cluster member a cluster node that is not the master 212 Clustering Modes Nokia Network Voyager for Ipso 4.0 Reference Guide 213 Network Environment Considerations for Clustering214 Nokia Network Voyager for Ipso 4.0 Reference Guide 215 Other Considerations 216 Clustering IP2250 Platforms Nokia Network Voyager for Ipso 4.0 Reference Guide 217 Upgrading Ipso in a Cluster Upgrading from Ipso 3.7 or Later For All UpgradesUpgrading from Ipso 218 Nokia Network Voyager for Ipso 4.0 Reference Guide 219 Enabling Cluster Management Configuration Overview Creating and Configuring a ClusterTo create and configure a cluster Creating a Cluster Configuring the Work Assignment Method Selecting the Cluster ModeNokia Network Voyager for Ipso 4.0 Reference Guide 221 To include an interface in the cluster Configuring an Interface222 Supporting Non-Check Point Gateways and Clients Configuring Firewall MonitoringNokia Network Voyager for Ipso 4.0 Reference Guide 223 Using IP Pools Configuring VPN Tunnels224 Nokia Network Voyager for Ipso 4.0 Reference Guide 225 Using IP Pools When Only Check Point Gateways Are Involved Configuring IP pools in Cluster Voyager Configuring Join-Time Shared Features226 What if Settings Conflict? What is Sharable?Nokia Network Voyager for Ipso 4.0 Reference Guide 227 228 Configuring Features for Sharing Making the Cluster Active Adding a Node to a ClusterAfter You Create a Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 229 230 Recommended Procedure Joining a System to a Cluster Managing a ClusterNokia Network Voyager for Ipso 4.0 Reference Guide 231 To start Cluster Voyager Using Cluster Voyager232 Cluster Administrator Users If You Forget the cadmin PasswordNokia Network Voyager for Ipso 4.0 Reference Guide 233 Configuring the Performance Rating Configuring the Failure IntervalMonitoring a Cluster 234 Nokia Network Voyager for Ipso 4.0 Reference Guide 235 Managing Join-Time Shared Features 236 Installing Ipso Images Nokia Network Voyager for Ipso 4.0 Reference Guide 237 238 Removing a Node from a Cluster Deleting a Cluster Configuration Changing Cluster Interface ConfigurationsSynchronizing the Time on Cluster Nodes Assigning the Time Zone NTP Server Outside the Cluster Configuring NTP240 Using the Master Node as the NTP Server Configuring NGX for ClusteringNokia Network Voyager for Ipso 4.0 Reference Guide 241 242 Nokia Network Voyager for Ipso 4.0 Reference Guide 243 Clustering Example Three Nodes 244 Configuring the Cluster in Voyager Nokia Network Voyager for Ipso 4.0 Reference Guide 245 Configuring the Internal and External Routers 246 Clustering Example With Non-Check Point VPN Nokia Network Voyager for Ipso 4.0 Reference Guide 247 248 Nokia Network Voyager for Ipso 4.0 Reference Guide 249 Snmp Overview Source Function 250 UDP-MIB Nokia Network Voyager for Ipso 4.0 Reference Guide 251 252 Snmp Proxy Support for Check Point MIB Using cpsnmpstart Using the Check Point MIBNokia Network Voyager for Ipso 4.0 Reference Guide 253 Enabling Snmp and Selecting the Version To enable or disable Snmp254 Setting an Agent Address Configuring the System for SnmpTo set an Snmp agent address Nokia Network Voyager for Ipso 4.0 Reference Guide 255 Types of Snmp Traps Configuring Traps256 Type of Trap Description Nokia Network Voyager for Ipso 4.0 Reference Guide 257 258 Setting the Trap PDU Agent Address Configuring Trap ReceiversEnabling or Disabling Trap Types Configuring Location and Contact Information Interpreting Error MessagesTo configure location and contact information Error status code Meaning Nokia Network Voyager for Ipso 4.0 Reference Guide 261 GetRequestVariable-bindings Element Description Value Field Set Description GetNextRequest Configuring SNMPv3GetBulkRequest 262 Managing Snmp Users Request MessagesSecurity Related Options Used in Request Messages Nokia Network Voyager for Ipso 4.0 Reference Guide 263 264 To add an Snmp user Nokia Network Voyager for Ipso 4.0 Reference Guide 265 To delete a USM user 266 Nokia Network Voyager for Ipso 4.0 Reference Guide 267 IPv6 Overview Interfaces To configure IPv6 logical interfaces268 To configure neighbor discovery To disable IPv6 on an interfaceTo delete an IPv6 address Nokia Network Voyager for Ipso 4.0 Reference Guide 269 To configure IPv6 in IPv4 tunnels Configuring IPv6 in IPv4 TunnelsIPv6 and IPv4 Compatibility 270 Configuring IPv6 over IPv4 Configuring IPv6 to IPv4To configure IPv6 to IPv4 To configure IPv6 over IPv4 Configuring an IPv6 Default or Static Route Configuring IPv4 in IPv6 TunnelsTo configure IPv4 in IPv6 tunnels To configure an IPv6 default or static route Configuring OSPFv3 Routing ConfigurationConfiguring RIPng Creating IPv6 Aggregate Routes Redistributing Static Routes into RIPng Creating Redistributed RoutesRedistributing Aggregate Routes in RIPng 274 Router Discovery Configuring ICMPv6 Router DiscoveryRedistributing Interface Routes into RIPng Nokia Network Voyager for Ipso 4.0 Reference Guide 275 276 Vrrp for IPv6 Configuring Vrrp for IPv6Nokia Network Voyager for Ipso 4.0 Reference Guide 277 278 Creating a Virtual Router for an IPv6 Interface Using VRRPv3 Nokia Network Voyager for Ipso 4.0 Reference Guide 279 To set the virtual MAC address Setting a Virtual MAC Address for a Virtual Router280 Removing a Virtual Router in VRRPv3 Changing the IP Address List of a Virtual Router in VRRPv3Nokia Network Voyager for Ipso 4.0 Reference Guide 281 282 Creating a Virtual Router in Monitored Circuit Mode for IPv6 Nokia Network Voyager for Ipso 4.0 Reference Guide 283 284 Traffic Management To enable FTP, TFTP, or Telnet access Security and Access ConfigurationNokia Network Voyager for Ipso 4.0 Reference Guide 285 286 To change the current user’s password Managing PasswordsNokia Network Voyager for Ipso 4.0 Reference Guide 287 Managing User Accounts To change another user’s password288 User Account Attributes Adding and Deleting UsersNokia Network Voyager for Ipso 4.0 Reference Guide 289 Attribute Description To add a user Managing and Using S/KeyTo remove a user 290 To configure S/Key Using S/KeyTo use the S/Key Nokia Network Voyager for Ipso 4.0 Reference Guide 291 Managing Groups To disable S/KeyDisabling S/Key 292 To add or edit a group Role-Based AdministrationNokia Network Voyager for Ipso 4.0 Reference Guide 293 To add or edit a role Managing Roles294 To assign roles and access mechanisms to users Assigning Roles and Access Mechanisms to UsersTo delete a role Nokia Network Voyager for Ipso 4.0 Reference Guide 295 296 Creating Cluster Administrator Users Network Access Configuration Options Configuring Network Access and ServicesNetwork Services Service Description To enable network access options and services Configuring a Modem on COM2, COM3, or COM4Modem Configuration Parameters 298 Nokia Network Voyager for Ipso 4.0 Reference Guide 299 To configure a modem on COM2, COM3, or COM4 Country Codes for Ositech Five of Clubs Card Configuring Nokia Network Voyager AccessCountry Codes for Ositech Five of Clubs Card II 300 To configure Web access for Nokia Network Voyager Configuring Basic Nokia Network Voyager OptionsNokia Network Voyager for Ipso 4.0 Reference Guide 301 Generating an SSL/TLS Certificate and Keys Generating and Installing SSL/TLS CertificatesTo generate a certificate and its associated private key 302 To install the certificate and its associated private key Installing the SSL/TLS CertificateNokia Network Voyager for Ipso 4.0 Reference Guide 303 Secure Shell SSH Troubleshooting SSL/TLS Configuration304 To configure SSH Initial SSH ConfigurationNokia Network Voyager for Ipso 4.0 Reference Guide 305 To configure advanced options Configuring Advanced Options for SSH306 Nokia Network Voyager for Ipso 4.0 Reference Guide 307 308 Configuring Secure Shell Authorized Keys To configure key pairs To configure authorized keysChanging Secure Shell Key Pairs Nokia Network Voyager for Ipso 4.0 Reference Guide 309 To manage user identities Managing User RSA and DSA Identities310 Tunneling Http Over SSH Network Voyager Session ManagementTo tunnel Http over SSH Nokia Network Voyager for Ipso 4.0 Reference Guide 311 To enable or disable session management Configuring Session TimeoutsTo set the session timeout interval Enabling Enabling or Disabling Session Management Creating an AAA Configuration Authentication, Authorization, and Accounting AAATo create an AAA configuration Nokia Network Voyager for Ipso 4.0 Reference Guide 313 Creating a Service Profile Creating a Service Module EntryCreating an Authentication Profile Nokia Network Voyager for Ipso 4.0 Reference Guide 315 Authentication Profile TypesType Module Description To create an account profile Creating an Accounting Profile316 317 Profile Controls Creating a Service Module Example318 Control Description Service Auth. Mgmt Acct. Mgmt Session Mgmt Configuring RadiusNokia Network Voyager for Ipso 4.0 Reference Guide 319 320 Nokia Network Voyager for Ipso 4.0 Reference Guide 321 Configuring TACACS+ To delete an authentication server Deleting an AAA Authentication Server Configuration322 Changing the Service Profile Changing an AAA ConfigurationTo change an AAA configuration To add an authentication profile Service Authentication Management Creating a Stacked Service Module324 Changing an Authentication Profile Configuration Changing a Service Module ConfigurationTo add an accounting profile To add a session profile Changing a Session Profile Configuration Changing an Accounting Profile Configuration326 Deleting an Item in a Service Profile Entry Deleting an AAA ConfigurationTo delete an AAA configuration Encryption Acceleration IPSec Tunnels Ipso Implementation To enable the card for a Check Point VPNEnabling Encryption Accelerator Cards Monitoring Cryptographic Acceleration Nokia Network Voyager for Ipso 4.0 Reference Guide 329 Transport and Tunnel Modes Protocol Negotiation and Key Management Building VPN on ESP330 Nokia Network Voyager for Ipso 4.0 Reference Guide 331 IPSec Implementation in Ipso Using PKIIPSec RFCs 332 Nokia Network Voyager for Ipso 4.0 Reference Guide 333 Miscellaneous Tunnel Requirements IPSec Parameters Phase 1 ConfigurationPlatform Support 334 To chose IPv4 or IPv6 general configuration pages Choosing IPv4 or IPv6 General ConfigurationCreating an IPSec Policy Nokia Network Voyager for Ipso 4.0 Reference Guide 335 Trusted CA Certificates Proposal and FiltersTo select a trusted CA certificate 336 Nokia Network Voyager for Ipso 4.0 Reference Guide 337 Device Certificates 338 To enroll and install a device certificate Nokia Network Voyager for Ipso 4.0 Reference Guide 339 Advanced IPSec To complete creating an IPSec policy Putting It All Together340 To create an IPSec tunnel rule Creating an IPSec Tunnel RuleNokia Network Voyager for Ipso 4.0 Reference Guide 341 To create a transport rule Transport Rule342 Nokia Network Voyager for Ipso 4.0 Reference Guide 343 IPSec Tunnel Rule Example To configure Nokia Platform344 Nokia Network Voyager for Ipso 4.0 Reference Guide 345 To configure Nokia Platform 1 Ipso Configure Nokia PlatformIPSec Transport Rule Example 346 Nokia Network Voyager for Ipso 4.0 Reference Guide 347 Removing an IPSec Tunnel Configure PC1To remove an IPSec tunnel 348 To set TCP flag combinations Miscellaneous Security SettingsNokia Network Voyager for Ipso 4.0 Reference Guide 349 350 Routing Protocols Routing OverviewNokia Network Voyager for Ipso 4.0 Reference Guide 351 352 RIP Nokia Network Voyager for Ipso 4.0 Reference Guide 353 Route Maps 354 Types of Areas High Availability Support for Ospf Area Border RoutersNokia Network Voyager for Ipso 4.0 Reference Guide 355 Clustering Configuring Ospf356 Ospf Area Configuration Parameters Configuring Ospf Areas and Global SettingsStub Area Parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 357 358 Nssa Not So Stubby Area Parameters To configure Ospf Configuring Virtual LinksTo configure a virtual link Nokia Network Voyager for Ipso 4.0 Reference Guide 359 360 Configuring Global Settings Nokia Network Voyager for Ipso 4.0 Reference Guide 361 Global Settings for Ospf Configuration Parameters for Ospf Interfaces Configuring Ospf Interfaces362 Nokia Network Voyager for Ipso 4.0 Reference Guide 363 To configure an Ospf interface 364 Configuring Ospf Example Nokia Network Voyager for Ipso 4.0 Reference Guide 365 Network Mask Auto Summarization Virtual IP Address Support for Vrrp366 To configure RIP Configuring RIPRIP 1 Configuration Options Available from Network Voyager Nokia Network Voyager for Ipso 4.0 Reference Guide 367 368 Configuring RIP Timers RIP Example Configuring Auto-SummarizationEnabling RIP 1 on an Interface Nokia Network Voyager for Ipso 4.0 Reference Guide 369 370 Enabling RIP 2 on an Interface PIM Support for IP Clustering Configuring Virtual IP Support for VrrpPIM Dense-Mode Nokia Network Voyager for Ipso 4.0 Reference Guide 371 372 PIM Sparse-Mode Configuring Check Point VPN-1 Pro/Express Configuring Dense-Mode PIMPIM and Check Point SecureXL Nokia Network Voyager for Ipso 4.0 Reference Guide 373 374 Disabling PIM Nokia Network Voyager for Ipso 4.0 Reference Guide 375 Setting Advanced Options for Dense-Mode PIM Optional 376 Configuring Sparse-Mode PIM Nokia Network Voyager for Ipso 4.0 Reference Guide 377 Configuring High-Availability Mode 378 Nokia Network Voyager for Ipso 4.0 Reference Guide 379 380 Configuring a PIM-SM Static Rendezvous Point Nokia Network Voyager for Ipso 4.0 Reference Guide 381 Setting Advanced Options for Sparse-Mode PIM Optional 382 Debugging PIM Command ShowsNokia Network Voyager for Ipso 4.0 Reference Guide 383 384 To log information about errors and events Nokia Network Voyager for Ipso 4.0 Reference Guide 385 Igrp 386 Nokia Network Voyager for Ipso 4.0 Reference Guide 387 Generation of Exterior Routes Aliased Interfaces Configuring IgrpIgrp Aggregation 388 Igrp Example To enable Igrp on an interfaceNokia Network Voyager for Ipso 4.0 Reference Guide 389 390 Dvmrp Configuring Dvmrp Timers Configuring DvmrpNokia Network Voyager for Ipso 4.0 Reference Guide 391 392 Igmp Nokia Network Voyager for Ipso 4.0 Reference Guide 393 Configuring Igmp 394 Static Routes To setting the rank for static routes To configure a default or static routeNokia Network Voyager for Ipso 4.0 Reference Guide 395 396 To add and configure many static routes at the same time To create a static route non-default To create a static default routeAdding and Managing Static Routes Example Creating/Removing Static Routes To disable a static route Backup Static RoutesTo create a backup static route Route Aggregation To remove aggregate routes To create aggregate routesNokia Network Voyager for Ipso 4.0 Reference Guide 399 400 Route Aggregation Example Route Rank Preference DefaultRank Assignments Nokia Network Voyager for Ipso 4.0 Reference Guide 401 To set route rank Routing Protocol Rank Example402 Support for BGP-4++ To configure the routing preferencesNokia Network Voyager for Ipso 4.0 Reference Guide 403 BGP Path Attributes BGP Sessions Internal and External404 Path Attribute Definition Nokia Network Voyager for Ipso 4.0 Reference Guide 405 BGP Interactions with IGPs BGP Multi-Exit Discriminator406 Redistributing Routes to BGP Inbound BGP Route FiltersCommunities Nokia Network Voyager for Ipso 4.0 Reference Guide 407 408 Route ReflectionCommunity attribute Description Nokia Network Voyager for Ipso 4.0 Reference Guide 409 Confederations 410 Ebgp Multihop Support Route Dampening TCP MD5 AuthenticationNokia Network Voyager for Ipso 4.0 Reference Guide 411 412 BGP Support for Virtual IP for Vrrp BGP Memory Requirements BGP Support for IP ClusteringTables Nokia Network Voyager for Ipso 4.0 Reference Guide 413 Example Memory Size414 BGP Neighbors Example To configure Ibgp on Nokia Platform aNokia Network Voyager for Ipso 4.0 Reference Guide 415 To configure Ibgp on Nokia Platform C To configure Ibgp on Nokia Platform B416 To configure Ebgp on Nokia Platform C To configure Ebgp on Nokia Platform aTo configure Ebgp on Nokia Platform D Nokia Network Voyager for Ipso 4.0 Reference Guide 417 Path Filtering Based on Communities Example To configuring Ebgp on Nokia Platform EVerification 418 BGP Multi Exit Discriminator Example To configure Default MED for Nokia Platform DNokia Network Voyager for Ipso 4.0 Reference Guide 419 420 To configure MED Values for all peers of AS200 Nokia Network Voyager for Ipso 4.0 Reference Guide 421 Changing the Local Preference Value Example To configure the static routes required for an Ibgp session To configure an Ibgp peer for Nokia Platform BTo set the local preference value for an Ibgp peer 422 BGP Confederation Example Configuring Nokia Platform CNokia Network Voyager for Ipso 4.0 Reference Guide 423 424 Configuring Platform B Nokia Network Voyager for Ipso 4.0 Reference Guide 425 Route Reflector Example Configuring Platform B as Route Reflector426 Configuring Platform D as Ibgp Peer of Platform B Configuring Platform C as Ibgp Peer of Platform BNokia Network Voyager for Ipso 4.0 Reference Guide 427 Configuring Redistribution of BGP Routes on Platform B Configuring BGP Route Inbound Policy on Platform BBGP Community Example 428 Nokia Network Voyager for Ipso 4.0 Reference Guide 429 Follow the steps in the Redistributing Ospf to BGP Example Configuring a Loopback Address on Platform B Configuring a Loopback Address on Platform aConfiguring a Static Route on Platform a Ebgp Load Balancing Example Scenario #1 Configuring an Ebgp Peer on Platform a Configuring a Static Route on Platform BConfiguring an Ebgp Peer on Platform B Nokia Network Voyager for Ipso 4.0 Reference Guide 431 Configuring Ospf on Platform B Configuring Ospf on Platform aEbgp Load Balancing Example Scenario #2 432 Nokia Network Voyager for Ipso 4.0 Reference Guide 433 Adjusting BGP Timers Example Configuring TCP MD5 Authentication on Nokia Platform a TCP MD5 Authentication ExampleConfiguring BGP Route Redistribution on Nokia Platform B 434 BGP Route Dampening Example Field Default value Units of measurementNokia Network Voyager for Ipso 4.0 Reference Guide 435 BGP-4++ Example BGP Path Selection436 Nokia Network Voyager for Ipso 4.0 Reference Guide 437 To configure configure a BGP4 session over IPv6 transport 438 Route Redistribution Nokia Network Voyager for Ipso 4.0 Reference Guide 439 Redistributing Routes to RIP and Igrp To configure BGP route redistribution on Nokia Platform DBGP Route Redistribution Example To redistribute a single route Nokia Network Voyager for Ipso 4.0 Reference Guide 441 Redistributing RIP to Ospf Example 442 Nokia Network Voyager for Ipso 4.0 Reference Guide 443 Redistributing Ospf to BGP Example To redistribute Ospf to BGP through Nokia Platform a Redistributing Routes with Ospf444 Inbound Route Filters To configure IGP inbound filtersNokia Network Voyager for Ipso 4.0 Reference Guide 445 446 BGP Route Inbound Policy Example Nokia Network Voyager for Ipso 4.0 Reference Guide 447 Aspath Regular Expressions BGP AS Path Filtering Example448 Packet Filtering Description Traffic Management OverviewTraffic Shaping Description Nokia Network Voyager for Ipso 4.0 Reference Guide 449 Traffic Queuing Description Configuring Access Control Lists450 To apply or remove an ACL to or from an interface To create or delete an ACLNokia Network Voyager for Ipso 4.0 Reference Guide 451 452 Configuring ACL Rules To add a new rule to an ACL Modifying a RuleNokia Network Voyager for Ipso 4.0 Reference Guide 453 454 ACL Rule Attributes Nokia Network Voyager for Ipso 4.0 Reference Guide 455 Configuring Aggregation Classes To associate an aggregation class with a rule To create an Aggregation Class456 Nokia Network Voyager for Ipso 4.0 Reference Guide 457 Configuring Queue Classes To create or delete a queue class To set or modify queue class configuration values458 To associate a queue class with an interface Configuring ATM QoSCreate a QoS descriptor Nokia Network Voyager for Ipso 4.0 Reference Guide 459 To dissociate an ATM QoS Descriptor from an existing PVC To delete an ATM QoS descriptor460 Nokia Network Voyager for Ipso 4.0 Reference Guide 461 Configuring Common Open Policy Server Configuring Security Parameters for a Cops Client ID Configuring a Cops Client ID and Policy Decision Point462 Nokia Network Voyager for Ipso 4.0 Reference Guide 463 Assigning Roles to Specific Interfaces Activating and Deactivating the Cops Client To disable and delete a Client IDDeleting a Client ID 464 Nokia Network Voyager for Ipso 4.0 Reference Guide 465 Example Rate Shaping 466 Example Expedited Forwarding Nokia Network Voyager for Ipso 4.0 Reference Guide 467 468 To test the configuration Nokia Network Voyager for Ipso 4.0 Reference Guide 469 BOOTP/DHCP Relay To enable Bootp relay on an Interface Configuring BOOTP/DHCP RelayBootp configuration parameters 470 IP Broadcast helper configuration parameters To disable Bootp relay on an interfaceIP Broadcast Helper Nokia Network Voyager for Ipso 4.0 Reference Guide 471 472 To configure IP broadcast helper Router Discovery Overview Configuring Router DiscoveryNokia Network Voyager for Ipso 4.0 Reference Guide 473 Router discover configuration parameters To enable router discovery services474 Network Time Protocol NTP To disable router discovery servicesNokia Network Voyager for Ipso 4.0 Reference Guide 475 To configure NTP Configuring NTP476 Nokia Network Voyager for Ipso 4.0 Reference Guide 477 478 CPU-Memory Live Utilization Viewing System Utilization StatisticsNokia Network Voyager for Ipso 4.0 Reference Guide 479 Monitoring Process Utilization Disk and Swap Space480 Nokia Network Voyager for Ipso 4.0 Reference Guide 481 Ipso Process ManagementProcess Description Reports Generating Monitor Reports482 Report Description To display reports Monitoring System HealthNokia Network Voyager for Ipso 4.0 Reference Guide 483 484 Monitoring System Logs Nokia Network Voyager for Ipso 4.0 Reference Guide 485 Viewing Cluster Status and Members Viewing Routing Protocol Information Displaying Route SettingsDisplaying the Kernel Forwarding Table 486 Hardware Monitoring Displaying Interface SettingsNokia Network Voyager for Ipso 4.0 Reference Guide 487 Iclid Commands Using the iclid ToolTo display routing daemon status using iclid 488 Nokia Network Voyager for Ipso 4.0 Reference Guide 489 490 Nokia Network Voyager for Ipso 4.0 Reference Guide 491 492 Nokia Network Voyager for Ipso 4.0 Reference Guide 493 494 Preventing Full Log Buffers and Related Console Messages If you are using FireWall-1 NG If you are using FireWall-1Nokia Network Voyager for Ipso 4.0 Reference Guide 495 496 Nokia Network Voyager for Ipso 4.0 Reference Guide Index Index Bios CPU DSA Http Httpd Managing NGX Nssa RIP RSA TACACS+ Deleting virtual router Index