Manuals / Nokia / Cell Phone / Cell Phone

Nokia IPSO 4.0 manual Nokia Network Voyager for Ipso 4.0 Reference Guide 143

Models: IPSO 4.0

1 510

Page 143

Note

If both domain-based VPN and route-based VPN are configured, then domain-based VPN takes priority. Configuring a VTI does not override the domain-based VPN. The only way to configure no VPN domain is to create an empty VPN domain group.

3.Create a VPN community and add both gateways to that community.

4.Create a security policy rule and install the policy on both gateways.

Nokia Network Voyager for IPSO 4.0 Reference Guide

143

Page 143

Image 143

Nokia IPSO 4.0 manual Nokia Network Voyager for Ipso 4.0 Reference Guide 143

Contents

Nokia Network Voyager For Ipso Reference Guide Restricted Rights Legend Nokia Network Voyager for Ipso 4.0 Reference GuideHttps//support.nokia.com Tac.support@nokia.com Nokia Network Voyager for Ipso 4.0 Reference Guide Contents Nokia Network Voyager Ipso 4.0 Reference Guide Configuring System Functions Nokia Network Voyager Ipso 4.0 Reference Guide Virtual Router Redundancy Protocol Vrrp Configuring ClusteringNokia Network Voyager Ipso 4.0 Reference Guide Configuring IPv6 Configuring SnmpManaging Security and Access Configuring Routing Nokia Network Voyager Ipso 4.0 Reference Guide Nokia Network Voyager Ipso 4.0 Reference Guide Configuring Traffic Management Monitoring System Configuration and Hardware Configuring Router ServicesIndex About the Nokia Network Voyager Reference Guide About the Nokia Network Voyager Reference Guide Convention Description Conventions This Guide UsesText Conventions Text ConventionsMenu Items Related DocumentationNokia Network Voyager for Ipso 4.0 Reference Guide Software OverviewTo open Nokia Network Voyager Logging In to Network VoyagerLogging Off To override a configuration lock Obtaining a Configuration LockTo log in with exclusive configuration lock To log in without exclusive configuration lockTo clear the memory and disk cache Accessing Documentation and HelpNavigating in Network Voyager Reloading PagesTo open a new window to view help „ Nokia support site https//support.nokia.comTo view the asset management summary Viewing Hardware and Software Information for Your SystemInterface Overview Configuring InterfacesType Prefix Configuring Network DevicesIP2250 Management Ports Physical Interface Logical Interface Configuring IP AddressesInterface Status Indicator Description Configuring Tunnel InterfacesInterface Status Indicators Parameter Description Configuring Ethernet InterfacesPhysical Interface Configuration Parameters Ethernet InterfacesLink Aggregation To configure an Ethernet interfaceConfiguring Switches for Link Aggregation Managing Link Aggregation Using SnmpFirewall Synchronization Traffic Static Link AggregationLink Aggregation on the IP2250 Production Traffic ADP I/O Ports Only Configuring the Remaining Management PortsTo physically configure the interfaces you will aggregate Configuring Link AggregationPhysical Interface Configuration To set up link aggregation in Network VoyagerTo configure link aggregation groups Group ConfigurationGigabit Ethernet Interface Parameters Logical ConfigurationGigabit Ethernet Interfaces Deleting Aggregation GroupsMTU To configure a Gigabit Ethernet interfacePoint-to-Point Over Ethernet Configuring PPPoETo configure PPPoE Nokia Network Voyager for Ipso 4.0 Reference Guide To delete PPPoE logical interfaces To change configuration profilesTo delete configuration profiles To create PPPoE logical interfacesVirtual LAN Interfaces Configuring MSS ClampingTo delete a Vlan Interface To configure a Vlan InterfaceTo define the maximum number of VLANs Vlan Example TopologyFddi Interfaces To configure an Fddi InterfaceTo change the IP address of an Fddi interface To change the duplex setting of an Fddi interfaceIsdn Interfaces To configure an Isdn physical interfaceTo configure an Isdn logical interface to place calls Nokia Network Voyager for Ipso 4.0 Reference Guide Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an Isdn interface to receive calls To add an incoming number Configuring Calling Line-Identification ScreeningTo remove an incoming number To configure an interface to place and receive callsDial-on-Demand Routing DDR Lists To add a new rule to a DDR list To create a DDR listTo delete a DDR list To apply or remove a DDR list to/from an interface Example DDR ListTo modify a rule Isdn Network Configuration Example To configure the IP650 to handle an incoming call To configure the IP330 to place an outgoing callSample Call Traces Trace for connecting a call from the Nokia IP330 is To view the message log Isdn TroubleshootingLogging To set level of messages loggedIsdn Cause Code Fields Troubleshooting Cause CodesTo trace Isdn traffic using tcpdump TracingCause Values Cause Cause Description DiagnosticsIsdn Cause Values See Isdn Cause Values table Information-element identifiers is missing Value Description Isdn Bearer-Capable ValuesToken Ring Interfaces To configure a Token Ring interfaceTo change a Token Ring interface To deactivate a Token Ring interfaceToken Ring Example Fddi Point-to-Point Link over ATM To configure an ATM interfaceTo change the VPI/VCI of an ATM interface To change the IP MTU of an ATM interface To change the IP Address of an ATM interfaceFddi ATM ExampleIP over ATM IPoA To configure the ATM interface on Nokia Platform aTo configure an ATM logical IP subnet LIS interface To change the VPI/VCIs of an ATM LIS Interface To change the IP Address of an ATM LIS interface ATM IPoA ExampleSerial V.35 and X.21 Interfaces To configure a serial interface for Cisco HdlcTo configure a Serial Interface for PPP To configure a serial interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide Serial Interface Example T1with Built-In CSU/DSU Interfaces To configure the serial interface on Nokia Platform aTo configure a T1 Interface for Cisco Hdlc Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 Interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide T1 Interface Example To configure the serial interface on Nokia Platform a E1 with Built-In CSU/DSU Interfaces To configure an E1 interface for Cisco HdlcNokia Network Voyager for Ipso 4.0 Reference Guide To configure an E1 interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide 100 To configure an E1 interface for frame relayNokia Network Voyager for Ipso 4.0 Reference Guide 101 102 Nokia Network Voyager for Ipso 4.0 Reference Guide 103 To configure an Hssi interface for Cisco HdlcHssi Interfaces 104 To configure an Hssi interface for PPPNokia Network Voyager for Ipso 4.0 Reference Guide 105 To configure an Hssi interface for frame relay106 Nokia Network Voyager for Ipso 4.0 Reference Guide 107 Configuring Unnumbered InterfacesTo configure an unnumbered interface Unnumbered Interfaces108 To change an unnumbered interface to a numbered interfaceNokia Network Voyager for Ipso 4.0 Reference Guide 109 To configure a static route over an unnumbered interface110 Configuring Ospf over Unnumbered InterfaceOspf over Unnumbered Interfaces Using Virtual Links Nokia Network Voyager for Ipso 4.0 Reference Guide 111 Cisco Hdlc ProtocolTo change the keepalive interval for Cisco Hdlc 112 Point-to-Point ProtocolTo change the IP address in Cisco Hdlc To change the keepalive interval in PPPNokia Network Voyager for Ipso 4.0 Reference Guide 113 To change the keepalive maximum failures in PPPTo change the IP address in PPP 114 Frame Relay ProtocolTo change the keepalive interval in frame relay To change the Dlci in frame relayNokia Network Voyager for Ipso 4.0 Reference Guide 115 To change the LMI parameters in frame relayTo change the interface type in frame relay 116 To change the active status monitor setting in frame relayTo change the IP address in frame relay To remove a frame relay interfaceNokia Network Voyager for Ipso 4.0 Reference Guide 117 Loopback InterfacesTo add an IP Address to a Loopback Interface To change the IP Address of a loopback interface118 Configuring GRE TunnelsGRE Tunnels To create a GRE tunnelNokia Network Voyager for Ipso 4.0 Reference Guide 119 120 To change IP TOS value of a GRE tunnelNokia Network Voyager for Ipso 4.0 Reference Guide 121 GRE Tunnel Example122 High Availability GRE TunnelsHA GRE Tunnel Example Nokia Network Voyager for Ipso 4.0 Reference Guide 123 124 Nokia Network Voyager for Ipso 4.0 Reference Guide 125 Dvmrp TunnelsTo create a Dvmrp tunnel 126 Dvmrp Tunnel ExampleTo change the local or remote addresses of a Dvmrp tunnel Nokia Network Voyager for Ipso 4.0 Reference Guide 127 128 ARP Table EntriesTo change ARP global parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 129 To add a static ARP entryTo add a proxy ARP entry Configuring ARP for ATM Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide 131 To add a static ATM ARP entryTo delete a static ATM ARP entry To view and delete dynamic ATM ARP entries132 Transparent ModeLimitations Nokia Network Voyager for Ipso 4.0 Reference Guide 133 Transparent Mode Processing Details134 Configuring Transparent Mode in VPN EnvironmentsNokia Network Voyager for Ipso 4.0 Reference Guide 135 Example of Transparent Mode136 Configuring Transparent ModeNokia Network Voyager for Ipso 4.0 Reference Guide 137 Creating and Deleting Transparent Mode GroupsTo create a transparent mode group To delete a transparent mode group138 Enabling or Disabling a Transparent Mode GroupTo enable or disable a transparent mode group Configuring Antispoofing Monitoring Transparent Mode GroupsTransparent Mode and Check Point NGX Enabling or Disabling Vrrp for a Transparent Mode Group140 Virtual Tunnel Interfaces Fwvpn for Route-Based VPNUnnumbered VTIs Routing Traffic through the VTINokia Network Voyager for Ipso 4.0 Reference Guide 141 To create the VPN community Creating Virtual Tunnel InterfacesVrrp Support To create a virtual tunnel interfaceNokia Network Voyager for Ipso 4.0 Reference Guide 143 144 To create the virtual tunnel interfaceNokia Network Voyager for Ipso 4.0 Reference Guide 145 Configuring DhcpTo enable the Dhcp client process Configuring Dhcp Client InterfacesDhcp Client Configuration To configure the Dhcp client interfaceNokia Network Voyager for Ipso 4.0 Reference Guide 147 Configuring the Dhcp ServerTo configure the Dhcp server process 148 Dhcp Server ConfigurationTo enable the Dhcp server process Adding Dhcp Address Pools Changing Dhcp ServiceTo disable the Dhcp server process To change the Dhcp serviceTo assign a fixed-IP address to a client To enable and existing IP address poolEnabling or Disabling Dhcp Address Pools Assigning a Fixed-IP Address to a ClientNokia Network Voyager for Ipso 4.0 Reference Guide 151 Creating Dhcp Client Templates152 Nokia Network Voyager for Ipso 4.0 Reference Guide 153 Configuring Dynamic Domain Name System ServiceConfiguring Dynamic Domain Name System Zones To configure Dynamic Domain Name System DdnsTo create a mirror set Configuring the Domain Name ServiceConfiguring Disk Mirroring To configure DNSNokia Network Voyager for Ipso 4.0 Reference Guide 155 Using an Optional Disk Flash-Based Systems OnlyTo delete a mirror set To remove an optional disk To install and configure PC card flash memoryTo configure the system to store log files on the PC card Mail RelaySystem Failure Notification Configuring Mail RelayTo configure failure notification To configure mail relay for your firewall158 Setting the System TimeSending Mail To send mail from the firewallNokia Network Voyager for Ipso 4.0 Reference Guide 159 Configuring Host AddressesTo set system time once To add a static host entryLogging to a Remote System Configuring System LoggingConfiguring Logging on Disk-Based Systems Accepting Log MessagesNokia Network Voyager for Ipso 4.0 Reference Guide 161 Configuring Logging on Flash-Based SystemsTo send syslog messages to a remote system 162 Configuring Logging to Remote Log ServersNokia Network Voyager for Ipso 4.0 Reference Guide 163 Configuring Audit LogsConfiguring Logging to an Optional Disk 164 To set the system configuration audit logNokia Network Voyager for Ipso 4.0 Reference Guide 165 Remote Core Dump Server on Flash-Based Systems166 Managing Configuration SetsChanging the Hostname To change the hostnameScheduling Jobs To create a factory default configuration fileTo switch a currently active database To delete unwanted configuration database files168 Backing Up and Restoring FilesTo delete scheduled jobs Nokia Network Voyager for Ipso 4.0 Reference Guide 169 Creating Backup FilesTo create a backup file manually To delete local backup filesTo cancel a regularly scheduled backup Transferring Backup FilesConfiguring Automatic Transfers To configure scheduled backupsNokia Network Voyager for Ipso 4.0 Reference Guide 171 Transferring Backup Files ManuallyTo manually transfer archive files to a remote server 172 Restoring Files from Locally Stored Backup FilesTo restore files To select a new current image Managing Nokia Ipso ImagesChanging Current Image Deleting Images174 Installing New ImagesTo delete an Nokia Ipso image Nokia Network Voyager for Ipso 4.0 Reference Guide 175 Testing a New ImageTo test an image before activating it 176 Rebooting a ClusterUpgrading Nokia Ipso Images for a Cluster Downgrading Nokia Ipso ImagesNokia Network Voyager for Ipso 4.0 Reference Guide 177 Configuring Monitor ReportsMonitor Report Parameters Installing and Enabling PackagesManaging Packages Restrictions for Flash-Based PlatformsNokia Network Voyager for Ipso 4.0 Reference Guide 179 To install a packageTo delete a package Advanced System TuningTuning the TCP/IP Stack To enable or disable a packageNokia Network Voyager for Ipso 4.0 Reference Guide 181 Router Alert IP OptionTo set the TCP MSS 182 Nokia Network Voyager for Ipso 4.0 Reference Guide 183 Vrrp OverviewHow Vrrp Works 184 Simple Vrrp ConfigurationVrrp Configuration with Simultaneous Backup Vrrp Configuration with Internal and External VRIDs186 Configuring VrrpUnderstanding Monitored-Circuit Vrrp Nokia Network Voyager for Ipso 4.0 Reference Guide 187 Selecting Configuration ParametersPriority 188 AuthenticationHello Interval Nokia Network Voyager for Ipso 4.0 Reference Guide 189 Backup AddressPriority Delta 190 Vmac ModeNokia Network Voyager for Ipso 4.0 Reference Guide 191 Global Vrrp SettingsVrrp Configuration Parameters Before you Begin192 Configuring Monitored-Circuit VrrpNokia Network Voyager for Ipso 4.0 Reference Guide 193 To add a virtual router194 Configuring Monitored-Circuit Vrrp using the Full MethodTo change the configuration of an existing virtual router To delete a virtual routerNokia Network Voyager for Ipso 4.0 Reference Guide 195 Additional Vrrp Parameters Used in Full Method196 Configuring VRRPv2To add or back up a virtual router using VRRPv2 Nokia Network Voyager for Ipso 4.0 Reference Guide 197 Configuring Check Point NGX for Vrrp198 Configure settings under the 3rd party configuration tabNokia Network Voyager for Ipso 4.0 Reference Guide 199 Configuring Vrrp Rules for Check Point NGXConfiguration Rule for Check Point NGX FP1 200 Configuration Rules for Check Point NGX FP2 and LaterConfiguring Rules if You Are Using Ospf or Dvmrp Source Destination Service ActionState CLI commands for VrrpMonitoring Vrrp Link Aggregation IP2250 Systems Only202 LocationStats To enable traces for Vrrp Troubleshooting VrrpGeneral Configuration Considerations To enable or disable Monitor Firewall state204 Access Control ListsFirewall Policies Nokia Network Voyager for Ipso 4.0 Reference Guide 205 Switched EnvironmentsMonitored-Circuit Vrrp in Switched Environments VRRPv2 in Switched Environments206 Nokia Network Voyager for Ipso 4.0 Reference Guide 207 Using Flash-Based PlatformsIP Clustering Description 208 Example ClusterNokia Network Voyager for Ipso 4.0 Reference Guide 209 Cluster Management210 Cluster TerminologyNokia Network Voyager for Ipso 4.0 Reference Guide 211 Cluster member a cluster node that is not the master212 Clustering ModesNokia Network Voyager for Ipso 4.0 Reference Guide 213 214 Considerations for ClusteringNetwork Environment Nokia Network Voyager for Ipso 4.0 Reference Guide 215 Other Considerations216 Clustering IP2250 PlatformsNokia Network Voyager for Ipso 4.0 Reference Guide 217 Upgrading Ipso in a Cluster218 For All UpgradesUpgrading from Ipso 3.7 or Later Upgrading from IpsoNokia Network Voyager for Ipso 4.0 Reference Guide 219 Enabling Cluster ManagementCreating a Cluster Creating and Configuring a ClusterConfiguration Overview To create and configure a clusterNokia Network Voyager for Ipso 4.0 Reference Guide 221 Selecting the Cluster ModeConfiguring the Work Assignment Method 222 Configuring an InterfaceTo include an interface in the cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 223 Configuring Firewall MonitoringSupporting Non-Check Point Gateways and Clients 224 Configuring VPN TunnelsUsing IP Pools Nokia Network Voyager for Ipso 4.0 Reference Guide 225 Using IP Pools When Only Check Point Gateways Are Involved226 Configuring Join-Time Shared FeaturesConfiguring IP pools in Cluster Voyager Nokia Network Voyager for Ipso 4.0 Reference Guide 227 What is Sharable?What if Settings Conflict? 228 Configuring Features for SharingNokia Network Voyager for Ipso 4.0 Reference Guide 229 Adding a Node to a ClusterMaking the Cluster Active After You Create a Cluster230 Recommended ProcedureNokia Network Voyager for Ipso 4.0 Reference Guide 231 Managing a ClusterJoining a System to a Cluster 232 Using Cluster VoyagerTo start Cluster Voyager Nokia Network Voyager for Ipso 4.0 Reference Guide 233 If You Forget the cadmin PasswordCluster Administrator Users 234 Configuring the Failure IntervalConfiguring the Performance Rating Monitoring a ClusterNokia Network Voyager for Ipso 4.0 Reference Guide 235 Managing Join-Time Shared Features236 Installing Ipso ImagesNokia Network Voyager for Ipso 4.0 Reference Guide 237 238 Removing a Node from a ClusterAssigning the Time Zone Changing Cluster Interface ConfigurationsDeleting a Cluster Configuration Synchronizing the Time on Cluster Nodes240 Configuring NTPNTP Server Outside the Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 241 Configuring NGX for ClusteringUsing the Master Node as the NTP Server 242 Nokia Network Voyager for Ipso 4.0 Reference Guide 243 Clustering Example Three Nodes244 Configuring the Cluster in VoyagerNokia Network Voyager for Ipso 4.0 Reference Guide 245 Configuring the Internal and External Routers246 Clustering Example With Non-Check Point VPNNokia Network Voyager for Ipso 4.0 Reference Guide 247 248 Nokia Network Voyager for Ipso 4.0 Reference Guide 249 Snmp OverviewSource Function 250UDP-MIB Nokia Network Voyager for Ipso 4.0 Reference Guide 251252 Snmp Proxy Support for Check Point MIBNokia Network Voyager for Ipso 4.0 Reference Guide 253 Using the Check Point MIBUsing cpsnmpstart 254 To enable or disable SnmpEnabling Snmp and Selecting the Version Nokia Network Voyager for Ipso 4.0 Reference Guide 255 Configuring the System for SnmpSetting an Agent Address To set an Snmp agent addressType of Trap Description Configuring TrapsTypes of Snmp Traps 256Nokia Network Voyager for Ipso 4.0 Reference Guide 257 258 Enabling or Disabling Trap Types Configuring Trap ReceiversSetting the Trap PDU Agent Address Error status code Meaning Interpreting Error MessagesConfiguring Location and Contact Information To configure location and contact informationValue Field Set Description GetRequestNokia Network Voyager for Ipso 4.0 Reference Guide 261 Variable-bindings Element Description262 Configuring SNMPv3GetNextRequest GetBulkRequestNokia Network Voyager for Ipso 4.0 Reference Guide 263 Request MessagesManaging Snmp Users Security Related Options Used in Request Messages264 To add an Snmp userNokia Network Voyager for Ipso 4.0 Reference Guide 265 To delete a USM user266 Nokia Network Voyager for Ipso 4.0 Reference Guide 267 IPv6 Overview268 To configure IPv6 logical interfacesInterfaces Nokia Network Voyager for Ipso 4.0 Reference Guide 269 To disable IPv6 on an interfaceTo configure neighbor discovery To delete an IPv6 address270 Configuring IPv6 in IPv4 TunnelsTo configure IPv6 in IPv4 tunnels IPv6 and IPv4 CompatibilityTo configure IPv6 over IPv4 Configuring IPv6 to IPv4Configuring IPv6 over IPv4 To configure IPv6 to IPv4To configure an IPv6 default or static route Configuring IPv4 in IPv6 TunnelsConfiguring an IPv6 Default or Static Route To configure IPv4 in IPv6 tunnelsCreating IPv6 Aggregate Routes Routing ConfigurationConfiguring OSPFv3 Configuring RIPng274 Creating Redistributed RoutesRedistributing Static Routes into RIPng Redistributing Aggregate Routes in RIPngNokia Network Voyager for Ipso 4.0 Reference Guide 275 Configuring ICMPv6 Router DiscoveryRouter Discovery Redistributing Interface Routes into RIPng276 Nokia Network Voyager for Ipso 4.0 Reference Guide 277 Configuring Vrrp for IPv6Vrrp for IPv6 278 Creating a Virtual Router for an IPv6 Interface Using VRRPv3Nokia Network Voyager for Ipso 4.0 Reference Guide 279 280 Setting a Virtual MAC Address for a Virtual RouterTo set the virtual MAC address Nokia Network Voyager for Ipso 4.0 Reference Guide 281 Changing the IP Address List of a Virtual Router in VRRPv3Removing a Virtual Router in VRRPv3 282 Creating a Virtual Router in Monitored Circuit Mode for IPv6Nokia Network Voyager for Ipso 4.0 Reference Guide 283 284 Traffic ManagementNokia Network Voyager for Ipso 4.0 Reference Guide 285 Security and Access ConfigurationTo enable FTP, TFTP, or Telnet access 286 Nokia Network Voyager for Ipso 4.0 Reference Guide 287 Managing PasswordsTo change the current user’s password 288 To change another user’s passwordManaging User Accounts Attribute Description Adding and Deleting UsersUser Account Attributes Nokia Network Voyager for Ipso 4.0 Reference Guide 289290 Managing and Using S/KeyTo add a user To remove a userNokia Network Voyager for Ipso 4.0 Reference Guide 291 Using S/KeyTo configure S/Key To use the S/Key292 To disable S/KeyManaging Groups Disabling S/KeyNokia Network Voyager for Ipso 4.0 Reference Guide 293 Role-Based AdministrationTo add or edit a group 294 Managing RolesTo add or edit a role Nokia Network Voyager for Ipso 4.0 Reference Guide 295 Assigning Roles and Access Mechanisms to UsersTo assign roles and access mechanisms to users To delete a role296 Creating Cluster Administrator UsersService Description Configuring Network Access and ServicesNetwork Access Configuration Options Network Services298 Configuring a Modem on COM2, COM3, or COM4To enable network access options and services Modem Configuration ParametersNokia Network Voyager for Ipso 4.0 Reference Guide 299 To configure a modem on COM2, COM3, or COM4300 Configuring Nokia Network Voyager AccessCountry Codes for Ositech Five of Clubs Card Country Codes for Ositech Five of Clubs Card IINokia Network Voyager for Ipso 4.0 Reference Guide 301 Configuring Basic Nokia Network Voyager OptionsTo configure Web access for Nokia Network Voyager 302 Generating and Installing SSL/TLS CertificatesGenerating an SSL/TLS Certificate and Keys To generate a certificate and its associated private keyNokia Network Voyager for Ipso 4.0 Reference Guide 303 Installing the SSL/TLS CertificateTo install the certificate and its associated private key 304 Troubleshooting SSL/TLS ConfigurationSecure Shell SSH Nokia Network Voyager for Ipso 4.0 Reference Guide 305 Initial SSH ConfigurationTo configure SSH 306 Configuring Advanced Options for SSHTo configure advanced options Nokia Network Voyager for Ipso 4.0 Reference Guide 307 308 Configuring Secure Shell Authorized KeysNokia Network Voyager for Ipso 4.0 Reference Guide 309 To configure authorized keysTo configure key pairs Changing Secure Shell Key Pairs310 Managing User RSA and DSA IdentitiesTo manage user identities Nokia Network Voyager for Ipso 4.0 Reference Guide 311 Network Voyager Session ManagementTunneling Http Over SSH To tunnel Http over SSHEnabling Enabling or Disabling Session Management Configuring Session TimeoutsTo enable or disable session management To set the session timeout intervalNokia Network Voyager for Ipso 4.0 Reference Guide 313 Authentication, Authorization, and Accounting AAACreating an AAA Configuration To create an AAA configurationCreating an Authentication Profile Creating a Service Module EntryCreating a Service Profile Type Module Description Authentication Profile TypesNokia Network Voyager for Ipso 4.0 Reference Guide 315 316 Creating an Accounting ProfileTo create an account profile 317 Control Description Creating a Service Module ExampleProfile Controls 318Nokia Network Voyager for Ipso 4.0 Reference Guide 319 Configuring RadiusService Auth. Mgmt Acct. Mgmt Session Mgmt 320 Nokia Network Voyager for Ipso 4.0 Reference Guide 321 Configuring TACACS+322 Deleting an AAA Authentication Server ConfigurationTo delete an authentication server To add an authentication profile Changing an AAA ConfigurationChanging the Service Profile To change an AAA configuration324 Creating a Stacked Service ModuleService Authentication Management To add a session profile Changing a Service Module ConfigurationChanging an Authentication Profile Configuration To add an accounting profile326 Changing an Accounting Profile ConfigurationChanging a Session Profile Configuration Encryption Acceleration Deleting an AAA ConfigurationDeleting an Item in a Service Profile Entry To delete an AAA configurationMonitoring Cryptographic Acceleration To enable the card for a Check Point VPNIPSec Tunnels Ipso Implementation Enabling Encryption Accelerator CardsNokia Network Voyager for Ipso 4.0 Reference Guide 329 Transport and Tunnel Modes330 Building VPN on ESPProtocol Negotiation and Key Management Nokia Network Voyager for Ipso 4.0 Reference Guide 331 332 Using PKIIPSec Implementation in Ipso IPSec RFCsNokia Network Voyager for Ipso 4.0 Reference Guide 333 Miscellaneous Tunnel Requirements334 Phase 1 ConfigurationIPSec Parameters Platform SupportNokia Network Voyager for Ipso 4.0 Reference Guide 335 Choosing IPv4 or IPv6 General ConfigurationTo chose IPv4 or IPv6 general configuration pages Creating an IPSec Policy336 Proposal and FiltersTrusted CA Certificates To select a trusted CA certificateNokia Network Voyager for Ipso 4.0 Reference Guide 337 Device Certificates338 To enroll and install a device certificateNokia Network Voyager for Ipso 4.0 Reference Guide 339 Advanced IPSec340 Putting It All TogetherTo complete creating an IPSec policy Nokia Network Voyager for Ipso 4.0 Reference Guide 341 Creating an IPSec Tunnel RuleTo create an IPSec tunnel rule 342 Transport RuleTo create a transport rule Nokia Network Voyager for Ipso 4.0 Reference Guide 343 344 To configure Nokia PlatformIPSec Tunnel Rule Example Nokia Network Voyager for Ipso 4.0 Reference Guide 345 346 Configure Nokia PlatformTo configure Nokia Platform 1 Ipso IPSec Transport Rule ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 347 348 Configure PC1Removing an IPSec Tunnel To remove an IPSec tunnelNokia Network Voyager for Ipso 4.0 Reference Guide 349 Miscellaneous Security SettingsTo set TCP flag combinations 350 Nokia Network Voyager for Ipso 4.0 Reference Guide 351 Routing OverviewRouting Protocols 352 RIPNokia Network Voyager for Ipso 4.0 Reference Guide 353 Route Maps354 Types of AreasNokia Network Voyager for Ipso 4.0 Reference Guide 355 Area Border RoutersHigh Availability Support for Ospf 356 Configuring OspfClustering Nokia Network Voyager for Ipso 4.0 Reference Guide 357 Configuring Ospf Areas and Global SettingsOspf Area Configuration Parameters Stub Area Parameters358 Nssa Not So Stubby Area ParametersNokia Network Voyager for Ipso 4.0 Reference Guide 359 Configuring Virtual LinksTo configure Ospf To configure a virtual link360 Configuring Global SettingsNokia Network Voyager for Ipso 4.0 Reference Guide 361 Global Settings for Ospf362 Configuring Ospf InterfacesConfiguration Parameters for Ospf Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide 363 To configure an Ospf interface364 Configuring Ospf ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 365 Network Mask366 Virtual IP Address Support for VrrpAuto Summarization Nokia Network Voyager for Ipso 4.0 Reference Guide 367 Configuring RIPTo configure RIP RIP 1 Configuration Options Available from Network Voyager368 Configuring RIP TimersNokia Network Voyager for Ipso 4.0 Reference Guide 369 Configuring Auto-SummarizationRIP Example Enabling RIP 1 on an Interface370 Enabling RIP 2 on an InterfaceNokia Network Voyager for Ipso 4.0 Reference Guide 371 Configuring Virtual IP Support for VrrpPIM Support for IP Clustering PIM Dense-Mode372 PIM Sparse-ModeNokia Network Voyager for Ipso 4.0 Reference Guide 373 Configuring Dense-Mode PIMConfiguring Check Point VPN-1 Pro/Express PIM and Check Point SecureXL374 Disabling PIMNokia Network Voyager for Ipso 4.0 Reference Guide 375 Setting Advanced Options for Dense-Mode PIM Optional376 Configuring Sparse-Mode PIMNokia Network Voyager for Ipso 4.0 Reference Guide 377 Configuring High-Availability Mode378 Nokia Network Voyager for Ipso 4.0 Reference Guide 379 380 Configuring a PIM-SM Static Rendezvous PointNokia Network Voyager for Ipso 4.0 Reference Guide 381 Setting Advanced Options for Sparse-Mode PIM Optional382 Nokia Network Voyager for Ipso 4.0 Reference Guide 383 Command ShowsDebugging PIM 384 To log information about errors and eventsNokia Network Voyager for Ipso 4.0 Reference Guide 385 Igrp386 Nokia Network Voyager for Ipso 4.0 Reference Guide 387 Generation of Exterior Routes388 Configuring IgrpAliased Interfaces Igrp AggregationNokia Network Voyager for Ipso 4.0 Reference Guide 389 To enable Igrp on an interfaceIgrp Example 390 DvmrpNokia Network Voyager for Ipso 4.0 Reference Guide 391 Configuring DvmrpConfiguring Dvmrp Timers 392 IgmpNokia Network Voyager for Ipso 4.0 Reference Guide 393 Configuring Igmp394 Static RoutesNokia Network Voyager for Ipso 4.0 Reference Guide 395 To configure a default or static routeTo setting the rank for static routes 396 To add and configure many static routes at the same timeCreating/Removing Static Routes To create a static default routeTo create a static route non-default Adding and Managing Static Routes ExampleRoute Aggregation Backup Static RoutesTo disable a static route To create a backup static routeNokia Network Voyager for Ipso 4.0 Reference Guide 399 To create aggregate routesTo remove aggregate routes 400 Route Aggregation ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 401 Preference DefaultRoute Rank Rank Assignments402 Routing Protocol Rank ExampleTo set route rank Nokia Network Voyager for Ipso 4.0 Reference Guide 403 To configure the routing preferencesSupport for BGP-4++ 404 BGP Sessions Internal and ExternalBGP Path Attributes Path Attribute Definition Nokia Network Voyager for Ipso 4.0 Reference Guide 405406 BGP Multi-Exit DiscriminatorBGP Interactions with IGPs Nokia Network Voyager for Ipso 4.0 Reference Guide 407 Inbound BGP Route FiltersRedistributing Routes to BGP CommunitiesCommunity attribute Description Route Reflection408 Nokia Network Voyager for Ipso 4.0 Reference Guide 409 Confederations410 Ebgp Multihop SupportNokia Network Voyager for Ipso 4.0 Reference Guide 411 TCP MD5 AuthenticationRoute Dampening 412 BGP Support for Virtual IP for VrrpNokia Network Voyager for Ipso 4.0 Reference Guide 413 BGP Support for IP ClusteringBGP Memory Requirements Tables414 Memory SizeExample Nokia Network Voyager for Ipso 4.0 Reference Guide 415 To configure Ibgp on Nokia Platform aBGP Neighbors Example 416 To configure Ibgp on Nokia Platform BTo configure Ibgp on Nokia Platform C Nokia Network Voyager for Ipso 4.0 Reference Guide 417 To configure Ebgp on Nokia Platform aTo configure Ebgp on Nokia Platform C To configure Ebgp on Nokia Platform D418 To configuring Ebgp on Nokia Platform EPath Filtering Based on Communities Example VerificationNokia Network Voyager for Ipso 4.0 Reference Guide 419 To configure Default MED for Nokia Platform DBGP Multi Exit Discriminator Example 420 To configure MED Values for all peers of AS200Nokia Network Voyager for Ipso 4.0 Reference Guide 421 Changing the Local Preference Value Example422 To configure an Ibgp peer for Nokia Platform BTo configure the static routes required for an Ibgp session To set the local preference value for an Ibgp peerNokia Network Voyager for Ipso 4.0 Reference Guide 423 Configuring Nokia Platform CBGP Confederation Example 424 Configuring Platform BNokia Network Voyager for Ipso 4.0 Reference Guide 425 426 Configuring Platform B as Route ReflectorRoute Reflector Example Nokia Network Voyager for Ipso 4.0 Reference Guide 427 Configuring Platform C as Ibgp Peer of Platform BConfiguring Platform D as Ibgp Peer of Platform B 428 Configuring BGP Route Inbound Policy on Platform BConfiguring Redistribution of BGP Routes on Platform B BGP Community ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 429 Follow the steps in the Redistributing Ospf to BGP ExampleEbgp Load Balancing Example Scenario #1 Configuring a Loopback Address on Platform aConfiguring a Loopback Address on Platform B Configuring a Static Route on Platform aNokia Network Voyager for Ipso 4.0 Reference Guide 431 Configuring a Static Route on Platform BConfiguring an Ebgp Peer on Platform a Configuring an Ebgp Peer on Platform B432 Configuring Ospf on Platform aConfiguring Ospf on Platform B Ebgp Load Balancing Example Scenario #2Nokia Network Voyager for Ipso 4.0 Reference Guide 433 Adjusting BGP Timers Example434 TCP MD5 Authentication ExampleConfiguring TCP MD5 Authentication on Nokia Platform a Configuring BGP Route Redistribution on Nokia Platform BNokia Network Voyager for Ipso 4.0 Reference Guide 435 Field Default value Units of measurementBGP Route Dampening Example 436 BGP Path SelectionBGP-4++ Example Nokia Network Voyager for Ipso 4.0 Reference Guide 437 To configure configure a BGP4 session over IPv6 transport438 Route RedistributionNokia Network Voyager for Ipso 4.0 Reference Guide 439 To redistribute a single route To configure BGP route redistribution on Nokia Platform DRedistributing Routes to RIP and Igrp BGP Route Redistribution ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 441 Redistributing RIP to Ospf Example442 Nokia Network Voyager for Ipso 4.0 Reference Guide 443 Redistributing Ospf to BGP Example444 Redistributing Routes with OspfTo redistribute Ospf to BGP through Nokia Platform a Nokia Network Voyager for Ipso 4.0 Reference Guide 445 To configure IGP inbound filtersInbound Route Filters 446 BGP Route Inbound Policy ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 447 448 BGP AS Path Filtering ExampleAspath Regular Expressions Nokia Network Voyager for Ipso 4.0 Reference Guide 449 Traffic Management OverviewPacket Filtering Description Traffic Shaping Description450 Configuring Access Control ListsTraffic Queuing Description Nokia Network Voyager for Ipso 4.0 Reference Guide 451 To create or delete an ACLTo apply or remove an ACL to or from an interface 452 Configuring ACL RulesNokia Network Voyager for Ipso 4.0 Reference Guide 453 Modifying a RuleTo add a new rule to an ACL 454 ACL Rule AttributesNokia Network Voyager for Ipso 4.0 Reference Guide 455 Configuring Aggregation Classes456 To create an Aggregation ClassTo associate an aggregation class with a rule Nokia Network Voyager for Ipso 4.0 Reference Guide 457 Configuring Queue Classes458 To set or modify queue class configuration valuesTo create or delete a queue class Nokia Network Voyager for Ipso 4.0 Reference Guide 459 Configuring ATM QoSTo associate a queue class with an interface Create a QoS descriptor460 To delete an ATM QoS descriptorTo dissociate an ATM QoS Descriptor from an existing PVC Nokia Network Voyager for Ipso 4.0 Reference Guide 461 Configuring Common Open Policy Server462 Configuring a Cops Client ID and Policy Decision PointConfiguring Security Parameters for a Cops Client ID Nokia Network Voyager for Ipso 4.0 Reference Guide 463 Assigning Roles to Specific Interfaces464 To disable and delete a Client IDActivating and Deactivating the Cops Client Deleting a Client IDNokia Network Voyager for Ipso 4.0 Reference Guide 465 Example Rate Shaping466 Example Expedited ForwardingNokia Network Voyager for Ipso 4.0 Reference Guide 467 468 To test the configurationNokia Network Voyager for Ipso 4.0 Reference Guide 469 BOOTP/DHCP Relay470 Configuring BOOTP/DHCP RelayTo enable Bootp relay on an Interface Bootp configuration parametersNokia Network Voyager for Ipso 4.0 Reference Guide 471 To disable Bootp relay on an interfaceIP Broadcast helper configuration parameters IP Broadcast Helper472 To configure IP broadcast helperNokia Network Voyager for Ipso 4.0 Reference Guide 473 Configuring Router DiscoveryRouter Discovery Overview 474 To enable router discovery servicesRouter discover configuration parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 475 To disable router discovery servicesNetwork Time Protocol NTP 476 Configuring NTPTo configure NTP Nokia Network Voyager for Ipso 4.0 Reference Guide 477 478 Nokia Network Voyager for Ipso 4.0 Reference Guide 479 Viewing System Utilization StatisticsCPU-Memory Live Utilization 480 Disk and Swap SpaceMonitoring Process Utilization Process Description Ipso Process ManagementNokia Network Voyager for Ipso 4.0 Reference Guide 481 Report Description Generating Monitor ReportsReports 482Nokia Network Voyager for Ipso 4.0 Reference Guide 483 Monitoring System HealthTo display reports 484 Monitoring System LogsNokia Network Voyager for Ipso 4.0 Reference Guide 485 Viewing Cluster Status and Members486 Displaying Route SettingsViewing Routing Protocol Information Displaying the Kernel Forwarding TableNokia Network Voyager for Ipso 4.0 Reference Guide 487 Displaying Interface SettingsHardware Monitoring 488 Using the iclid ToolIclid Commands To display routing daemon status using iclidNokia Network Voyager for Ipso 4.0 Reference Guide 489 490 Nokia Network Voyager for Ipso 4.0 Reference Guide 491 492 Nokia Network Voyager for Ipso 4.0 Reference Guide 493 494 Preventing Full Log Buffers and Related Console MessagesNokia Network Voyager for Ipso 4.0 Reference Guide 495 If you are using FireWall-1If you are using FireWall-1 NG 496 Nokia Network Voyager for Ipso 4.0 Reference Guide Index IndexBios CPU DSA Http Httpd Managing NGX Nssa RIP RSA TACACS+ Deleting virtual router Index