Vrrp Overview, How Vrrp Works | Nokia IPSO 4.0 specs

4 Virtual Router Redundancy Protocol (VRRP)

This chapter describes the Nokia IPSO implementation of VRRP and how to configure it on your system.

VRRP Overview

Virtual Router Redundancy Protocol (VRRP) provides dynamic failover of IP addresses from one router to another in the event of failure. VRRP is defined in RFC 3768. The Nokia implementation of VRRP includes all of the features described in RFC 3768, plus the additional feature of monitored circuit, described below.

Nokia supports VRRP for IPv6. For more information about the Nokia implementation and how to configure VRRP for IPv6 interfaces, see “Configuring VRRP for IPv6.”

VRRP allows you to provide alternate router paths for end hosts that are configured with static default routes. Using static default routes minimizes configuration and processing overhead on end hosts. When end hosts are configured with static routes, normally the failure of the master router results in a catastrophic event, isolating all hosts that are unable to detect available alternate paths to their gateway. You can implement VRRP to provide a higher availability default path to the gateway without needing to configure dynamic routing or router discovery protocols on every end host.

How VRRP Works

VRRP uses a virtual router to allow end hosts to use an IP address that is part of the virtual router as the default first-hop router. A virtual router is defined as a unique virtual router ID (VRID) and the router IP addresses of the default route on a LAN, and is comprised of a master router and at least one backup router. If the master platform fails, VRRP specifies an election protocol that dynamically assigns responsibility to a backup platform for forwarding IP traffic sent to the IP address of the virtual router.

A virtual router, or VRID, consists of a master platform and one or more backups. The master sends periodic VRRP advertisements (also known as hello messages). To minimize network traffic, backups do not send VRRP advertisements.

Nokia Network Voyager for IPSO 4.0 Reference Guide

183

Page 183

Image 183

Nokia IPSO 4.0 manual Vrrp Overview, How Vrrp Works, Nokia Network Voyager for Ipso 4.0 Reference Guide 183

Contents

Nokia Network Voyager For Ipso Reference Guide Restricted Rights Legend Nokia Network Voyager for Ipso 4.0 Reference Guide Https//support.nokia.com Tac.support@nokia.com Nokia Network Voyager for Ipso 4.0 Reference Guide Contents Nokia Network Voyager Ipso 4.0 Reference Guide Configuring System Functions Nokia Network Voyager Ipso 4.0 Reference Guide Virtual Router Redundancy Protocol Vrrp Configuring Clustering Nokia Network Voyager Ipso 4.0 Reference Guide Configuring IPv6 Configuring Snmp Managing Security and Access Configuring Routing Nokia Network Voyager Ipso 4.0 Reference Guide Nokia Network Voyager Ipso 4.0 Reference Guide Configuring Traffic Management Monitoring System Configuration and Hardware Configuring Router Services Index About the Nokia Network Voyager Reference Guide About the Nokia Network Voyager Reference Guide Convention Description Conventions This Guide UsesText Conventions Text Conventions Menu Items Related Documentation Nokia Network Voyager for Ipso 4.0 Reference Guide Software Overview Logging In to Network Voyager Logging OffTo open Nokia Network Voyager To override a configuration lock Obtaining a Configuration LockTo log in with exclusive configuration lock To log in without exclusive configuration lock To clear the memory and disk cache Accessing Documentation and HelpNavigating in Network Voyager Reloading Pages To open a new window to view help „ Nokia support site https//support.nokia.com To view the asset management summary Viewing Hardware and Software Information for Your System Interface Overview Configuring Interfaces Configuring Network Devices IP2250 Management PortsType Prefix Physical Interface Logical Interface Configuring IP Addresses Interface Status Configuring Tunnel Interfaces Interface Status IndicatorsIndicator Description Parameter Description Configuring Ethernet InterfacesPhysical Interface Configuration Parameters Ethernet Interfaces Link Aggregation To configure an Ethernet interface Configuring Switches for Link Aggregation Managing Link Aggregation Using Snmp Static Link Aggregation Link Aggregation on the IP2250Firewall Synchronization Traffic Production Traffic ADP I/O Ports Only Configuring the Remaining Management Ports To physically configure the interfaces you will aggregate Configuring Link AggregationPhysical Interface Configuration To set up link aggregation in Network Voyager To configure link aggregation groups Group Configuration Gigabit Ethernet Interface Parameters Logical ConfigurationGigabit Ethernet Interfaces Deleting Aggregation Groups MTU To configure a Gigabit Ethernet interface Configuring PPPoE To configure PPPoEPoint-to-Point Over Ethernet Nokia Network Voyager for Ipso 4.0 Reference Guide To delete PPPoE logical interfaces To change configuration profilesTo delete configuration profiles To create PPPoE logical interfaces Virtual LAN Interfaces Configuring MSS Clamping To delete a Vlan Interface To configure a Vlan Interface To define the maximum number of VLANs Vlan Example Topology Fddi Interfaces To configure an Fddi Interface To change the IP address of an Fddi interface To change the duplex setting of an Fddi interface Isdn Interfaces To configure an Isdn physical interface To configure an Isdn logical interface to place calls Nokia Network Voyager for Ipso 4.0 Reference Guide Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an Isdn interface to receive calls To add an incoming number Configuring Calling Line-Identification Screening To remove an incoming number To configure an interface to place and receive calls Dial-on-Demand Routing DDR Lists To create a DDR list To delete a DDR listTo add a new rule to a DDR list Example DDR List To modify a ruleTo apply or remove a DDR list to/from an interface Isdn Network Configuration Example To configure the IP650 to handle an incoming call To configure the IP330 to place an outgoing call Sample Call Traces Trace for connecting a call from the Nokia IP330 is To view the message log Isdn TroubleshootingLogging To set level of messages logged Isdn Cause Code Fields Troubleshooting Cause CodesTo trace Isdn traffic using tcpdump Tracing Cause Cause Description Diagnostics Isdn Cause ValuesCause Values See Isdn Cause Values table Information-element identifiers is missing Value Description Isdn Bearer-Capable Values Token Ring Interfaces To configure a Token Ring interface To change a Token Ring interface To deactivate a Token Ring interface Token Ring Example Fddi Point-to-Point Link over ATM To configure an ATM interface To change the VPI/VCI of an ATM interface To change the IP MTU of an ATM interface To change the IP Address of an ATM interface Fddi ATM Example To configure the ATM interface on Nokia Platform a To configure an ATM logical IP subnet LIS interfaceIP over ATM IPoA To change the VPI/VCIs of an ATM LIS Interface To change the IP Address of an ATM LIS interface ATM IPoA Example Serial V.35 and X.21 Interfaces To configure a serial interface for Cisco Hdlc To configure a Serial Interface for PPP To configure a serial interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide Serial Interface Example To configure the serial interface on Nokia Platform a To configure a T1 Interface for Cisco HdlcT1with Built-In CSU/DSU Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 Interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide T1 Interface Example To configure the serial interface on Nokia Platform a E1 with Built-In CSU/DSU Interfaces To configure an E1 interface for Cisco Hdlc Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an E1 interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide 100 To configure an E1 interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide 101 102 To configure an Hssi interface for Cisco Hdlc Hssi InterfacesNokia Network Voyager for Ipso 4.0 Reference Guide 103 104 To configure an Hssi interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide 105 To configure an Hssi interface for frame relay 106 Nokia Network Voyager for Ipso 4.0 Reference Guide 107 Configuring Unnumbered InterfacesTo configure an unnumbered interface Unnumbered Interfaces 108 To change an unnumbered interface to a numbered interface Nokia Network Voyager for Ipso 4.0 Reference Guide 109 To configure a static route over an unnumbered interface Configuring Ospf over Unnumbered Interface Ospf over Unnumbered Interfaces Using Virtual Links110 Cisco Hdlc Protocol To change the keepalive interval for Cisco HdlcNokia Network Voyager for Ipso 4.0 Reference Guide 111 112 Point-to-Point ProtocolTo change the IP address in Cisco Hdlc To change the keepalive interval in PPP To change the keepalive maximum failures in PPP To change the IP address in PPPNokia Network Voyager for Ipso 4.0 Reference Guide 113 114 Frame Relay ProtocolTo change the keepalive interval in frame relay To change the Dlci in frame relay To change the LMI parameters in frame relay To change the interface type in frame relayNokia Network Voyager for Ipso 4.0 Reference Guide 115 116 To change the active status monitor setting in frame relayTo change the IP address in frame relay To remove a frame relay interface Nokia Network Voyager for Ipso 4.0 Reference Guide 117 Loopback InterfacesTo add an IP Address to a Loopback Interface To change the IP Address of a loopback interface 118 Configuring GRE TunnelsGRE Tunnels To create a GRE tunnel Nokia Network Voyager for Ipso 4.0 Reference Guide 119 120 To change IP TOS value of a GRE tunnel Nokia Network Voyager for Ipso 4.0 Reference Guide 121 GRE Tunnel Example High Availability GRE Tunnels HA GRE Tunnel Example122 Nokia Network Voyager for Ipso 4.0 Reference Guide 123 124 Dvmrp Tunnels To create a Dvmrp tunnelNokia Network Voyager for Ipso 4.0 Reference Guide 125 Dvmrp Tunnel Example To change the local or remote addresses of a Dvmrp tunnel126 Nokia Network Voyager for Ipso 4.0 Reference Guide 127 ARP Table Entries To change ARP global parameters128 To add a static ARP entry To add a proxy ARP entryNokia Network Voyager for Ipso 4.0 Reference Guide 129 Configuring ARP for ATM Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide 131 To add a static ATM ARP entryTo delete a static ATM ARP entry To view and delete dynamic ATM ARP entries Transparent Mode Limitations132 Nokia Network Voyager for Ipso 4.0 Reference Guide 133 Transparent Mode Processing Details 134 Configuring Transparent Mode in VPN Environments Nokia Network Voyager for Ipso 4.0 Reference Guide 135 Example of Transparent Mode 136 Configuring Transparent Mode Nokia Network Voyager for Ipso 4.0 Reference Guide 137 Creating and Deleting Transparent Mode GroupsTo create a transparent mode group To delete a transparent mode group Enabling or Disabling a Transparent Mode Group To enable or disable a transparent mode group138 Configuring Antispoofing Monitoring Transparent Mode GroupsTransparent Mode and Check Point NGX Enabling or Disabling Vrrp for a Transparent Mode Group 140 Virtual Tunnel Interfaces Fwvpn for Route-Based VPNUnnumbered VTIs Routing Traffic through the VTI Nokia Network Voyager for Ipso 4.0 Reference Guide 141 To create the VPN community Creating Virtual Tunnel InterfacesVrrp Support To create a virtual tunnel interface Nokia Network Voyager for Ipso 4.0 Reference Guide 143 144 To create the virtual tunnel interface Nokia Network Voyager for Ipso 4.0 Reference Guide 145 Configuring Dhcp To enable the Dhcp client process Configuring Dhcp Client InterfacesDhcp Client Configuration To configure the Dhcp client interface Configuring the Dhcp Server To configure the Dhcp server processNokia Network Voyager for Ipso 4.0 Reference Guide 147 Dhcp Server Configuration To enable the Dhcp server process148 Adding Dhcp Address Pools Changing Dhcp ServiceTo disable the Dhcp server process To change the Dhcp service To assign a fixed-IP address to a client To enable and existing IP address poolEnabling or Disabling Dhcp Address Pools Assigning a Fixed-IP Address to a Client Nokia Network Voyager for Ipso 4.0 Reference Guide 151 Creating Dhcp Client Templates 152 Nokia Network Voyager for Ipso 4.0 Reference Guide 153 Configuring Dynamic Domain Name System ServiceConfiguring Dynamic Domain Name System Zones To configure Dynamic Domain Name System Ddns To create a mirror set Configuring the Domain Name ServiceConfiguring Disk Mirroring To configure DNS Using an Optional Disk Flash-Based Systems Only To delete a mirror setNokia Network Voyager for Ipso 4.0 Reference Guide 155 To remove an optional disk To install and configure PC card flash memoryTo configure the system to store log files on the PC card Mail Relay System Failure Notification Configuring Mail RelayTo configure failure notification To configure mail relay for your firewall 158 Setting the System TimeSending Mail To send mail from the firewall Nokia Network Voyager for Ipso 4.0 Reference Guide 159 Configuring Host AddressesTo set system time once To add a static host entry Logging to a Remote System Configuring System LoggingConfiguring Logging on Disk-Based Systems Accepting Log Messages Configuring Logging on Flash-Based Systems To send syslog messages to a remote systemNokia Network Voyager for Ipso 4.0 Reference Guide 161 162 Configuring Logging to Remote Log Servers Configuring Audit Logs Configuring Logging to an Optional DiskNokia Network Voyager for Ipso 4.0 Reference Guide 163 164 To set the system configuration audit log Nokia Network Voyager for Ipso 4.0 Reference Guide 165 Remote Core Dump Server on Flash-Based Systems 166 Managing Configuration SetsChanging the Hostname To change the hostname Scheduling Jobs To create a factory default configuration fileTo switch a currently active database To delete unwanted configuration database files Backing Up and Restoring Files To delete scheduled jobs168 Nokia Network Voyager for Ipso 4.0 Reference Guide 169 Creating Backup FilesTo create a backup file manually To delete local backup files To cancel a regularly scheduled backup Transferring Backup FilesConfiguring Automatic Transfers To configure scheduled backups Transferring Backup Files Manually To manually transfer archive files to a remote serverNokia Network Voyager for Ipso 4.0 Reference Guide 171 Restoring Files from Locally Stored Backup Files To restore files172 To select a new current image Managing Nokia Ipso ImagesChanging Current Image Deleting Images Installing New Images To delete an Nokia Ipso image174 Testing a New Image To test an image before activating itNokia Network Voyager for Ipso 4.0 Reference Guide 175 176 Rebooting a ClusterUpgrading Nokia Ipso Images for a Cluster Downgrading Nokia Ipso Images Nokia Network Voyager for Ipso 4.0 Reference Guide 177 Configuring Monitor Reports Monitor Report Parameters Installing and Enabling PackagesManaging Packages Restrictions for Flash-Based Platforms Nokia Network Voyager for Ipso 4.0 Reference Guide 179 To install a package To delete a package Advanced System TuningTuning the TCP/IP Stack To enable or disable a package Router Alert IP Option To set the TCP MSSNokia Network Voyager for Ipso 4.0 Reference Guide 181 182 Vrrp Overview How Vrrp WorksNokia Network Voyager for Ipso 4.0 Reference Guide 183 184 Simple Vrrp Configuration Vrrp Configuration with Simultaneous Backup Vrrp Configuration with Internal and External VRIDs Configuring Vrrp Understanding Monitored-Circuit Vrrp186 Selecting Configuration Parameters PriorityNokia Network Voyager for Ipso 4.0 Reference Guide 187 Authentication Hello Interval188 Backup Address Priority DeltaNokia Network Voyager for Ipso 4.0 Reference Guide 189 190 Vmac Mode Nokia Network Voyager for Ipso 4.0 Reference Guide 191 Global Vrrp SettingsVrrp Configuration Parameters Before you Begin 192 Configuring Monitored-Circuit Vrrp Nokia Network Voyager for Ipso 4.0 Reference Guide 193 To add a virtual router 194 Configuring Monitored-Circuit Vrrp using the Full MethodTo change the configuration of an existing virtual router To delete a virtual router Nokia Network Voyager for Ipso 4.0 Reference Guide 195 Additional Vrrp Parameters Used in Full Method Configuring VRRPv2 To add or back up a virtual router using VRRPv2196 Nokia Network Voyager for Ipso 4.0 Reference Guide 197 Configuring Check Point NGX for Vrrp 198 Configure settings under the 3rd party configuration tab Configuring Vrrp Rules for Check Point NGX Configuration Rule for Check Point NGX FP1Nokia Network Voyager for Ipso 4.0 Reference Guide 199 200 Configuration Rules for Check Point NGX FP2 and LaterConfiguring Rules if You Are Using Ospf or Dvmrp Source Destination Service Action State CLI commands for VrrpMonitoring Vrrp Link Aggregation IP2250 Systems Only Location Stats202 To enable traces for Vrrp Troubleshooting VrrpGeneral Configuration Considerations To enable or disable Monitor Firewall state Access Control Lists Firewall Policies204 Nokia Network Voyager for Ipso 4.0 Reference Guide 205 Switched EnvironmentsMonitored-Circuit Vrrp in Switched Environments VRRPv2 in Switched Environments 206 Using Flash-Based Platforms IP Clustering DescriptionNokia Network Voyager for Ipso 4.0 Reference Guide 207 208 Example Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 209 Cluster Management 210 Cluster Terminology Nokia Network Voyager for Ipso 4.0 Reference Guide 211 Cluster member a cluster node that is not the master 212 Clustering Modes Nokia Network Voyager for Ipso 4.0 Reference Guide 213 Considerations for Clustering Network Environment214 Nokia Network Voyager for Ipso 4.0 Reference Guide 215 Other Considerations 216 Clustering IP2250 Platforms Nokia Network Voyager for Ipso 4.0 Reference Guide 217 Upgrading Ipso in a Cluster 218 For All UpgradesUpgrading from Ipso 3.7 or Later Upgrading from Ipso Nokia Network Voyager for Ipso 4.0 Reference Guide 219 Enabling Cluster Management Creating a Cluster Creating and Configuring a ClusterConfiguration Overview To create and configure a cluster Selecting the Cluster Mode Configuring the Work Assignment MethodNokia Network Voyager for Ipso 4.0 Reference Guide 221 Configuring an Interface To include an interface in the cluster222 Configuring Firewall Monitoring Supporting Non-Check Point Gateways and ClientsNokia Network Voyager for Ipso 4.0 Reference Guide 223 Configuring VPN Tunnels Using IP Pools224 Nokia Network Voyager for Ipso 4.0 Reference Guide 225 Using IP Pools When Only Check Point Gateways Are Involved Configuring Join-Time Shared Features Configuring IP pools in Cluster Voyager226 What is Sharable? What if Settings Conflict?Nokia Network Voyager for Ipso 4.0 Reference Guide 227 228 Configuring Features for Sharing Nokia Network Voyager for Ipso 4.0 Reference Guide 229 Adding a Node to a ClusterMaking the Cluster Active After You Create a Cluster 230 Recommended Procedure Managing a Cluster Joining a System to a ClusterNokia Network Voyager for Ipso 4.0 Reference Guide 231 Using Cluster Voyager To start Cluster Voyager232 If You Forget the cadmin Password Cluster Administrator UsersNokia Network Voyager for Ipso 4.0 Reference Guide 233 234 Configuring the Failure IntervalConfiguring the Performance Rating Monitoring a Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 235 Managing Join-Time Shared Features 236 Installing Ipso Images Nokia Network Voyager for Ipso 4.0 Reference Guide 237 238 Removing a Node from a Cluster Assigning the Time Zone Changing Cluster Interface ConfigurationsDeleting a Cluster Configuration Synchronizing the Time on Cluster Nodes Configuring NTP NTP Server Outside the Cluster240 Configuring NGX for Clustering Using the Master Node as the NTP ServerNokia Network Voyager for Ipso 4.0 Reference Guide 241 242 Nokia Network Voyager for Ipso 4.0 Reference Guide 243 Clustering Example Three Nodes 244 Configuring the Cluster in Voyager Nokia Network Voyager for Ipso 4.0 Reference Guide 245 Configuring the Internal and External Routers 246 Clustering Example With Non-Check Point VPN Nokia Network Voyager for Ipso 4.0 Reference Guide 247 248 Nokia Network Voyager for Ipso 4.0 Reference Guide 249 Snmp Overview Source Function 250 UDP-MIB Nokia Network Voyager for Ipso 4.0 Reference Guide 251 252 Snmp Proxy Support for Check Point MIB Using the Check Point MIB Using cpsnmpstartNokia Network Voyager for Ipso 4.0 Reference Guide 253 To enable or disable Snmp Enabling Snmp and Selecting the Version254 Nokia Network Voyager for Ipso 4.0 Reference Guide 255 Configuring the System for SnmpSetting an Agent Address To set an Snmp agent address Type of Trap Description Configuring TrapsTypes of Snmp Traps 256 Nokia Network Voyager for Ipso 4.0 Reference Guide 257 258 Configuring Trap Receivers Setting the Trap PDU Agent AddressEnabling or Disabling Trap Types Error status code Meaning Interpreting Error MessagesConfiguring Location and Contact Information To configure location and contact information Value Field Set Description GetRequestNokia Network Voyager for Ipso 4.0 Reference Guide 261 Variable-bindings Element Description 262 Configuring SNMPv3GetNextRequest GetBulkRequest Nokia Network Voyager for Ipso 4.0 Reference Guide 263 Request MessagesManaging Snmp Users Security Related Options Used in Request Messages 264 To add an Snmp user Nokia Network Voyager for Ipso 4.0 Reference Guide 265 To delete a USM user 266 Nokia Network Voyager for Ipso 4.0 Reference Guide 267 IPv6 Overview To configure IPv6 logical interfaces Interfaces268 Nokia Network Voyager for Ipso 4.0 Reference Guide 269 To disable IPv6 on an interfaceTo configure neighbor discovery To delete an IPv6 address 270 Configuring IPv6 in IPv4 TunnelsTo configure IPv6 in IPv4 tunnels IPv6 and IPv4 Compatibility To configure IPv6 over IPv4 Configuring IPv6 to IPv4Configuring IPv6 over IPv4 To configure IPv6 to IPv4 To configure an IPv6 default or static route Configuring IPv4 in IPv6 TunnelsConfiguring an IPv6 Default or Static Route To configure IPv4 in IPv6 tunnels Creating IPv6 Aggregate Routes Routing ConfigurationConfiguring OSPFv3 Configuring RIPng 274 Creating Redistributed RoutesRedistributing Static Routes into RIPng Redistributing Aggregate Routes in RIPng Nokia Network Voyager for Ipso 4.0 Reference Guide 275 Configuring ICMPv6 Router DiscoveryRouter Discovery Redistributing Interface Routes into RIPng 276 Configuring Vrrp for IPv6 Vrrp for IPv6Nokia Network Voyager for Ipso 4.0 Reference Guide 277 278 Creating a Virtual Router for an IPv6 Interface Using VRRPv3 Nokia Network Voyager for Ipso 4.0 Reference Guide 279 Setting a Virtual MAC Address for a Virtual Router To set the virtual MAC address280 Changing the IP Address List of a Virtual Router in VRRPv3 Removing a Virtual Router in VRRPv3Nokia Network Voyager for Ipso 4.0 Reference Guide 281 282 Creating a Virtual Router in Monitored Circuit Mode for IPv6 Nokia Network Voyager for Ipso 4.0 Reference Guide 283 284 Traffic Management Security and Access Configuration To enable FTP, TFTP, or Telnet accessNokia Network Voyager for Ipso 4.0 Reference Guide 285 286 Managing Passwords To change the current user’s passwordNokia Network Voyager for Ipso 4.0 Reference Guide 287 To change another user’s password Managing User Accounts288 Attribute Description Adding and Deleting UsersUser Account Attributes Nokia Network Voyager for Ipso 4.0 Reference Guide 289 290 Managing and Using S/KeyTo add a user To remove a user Nokia Network Voyager for Ipso 4.0 Reference Guide 291 Using S/KeyTo configure S/Key To use the S/Key 292 To disable S/KeyManaging Groups Disabling S/Key Role-Based Administration To add or edit a groupNokia Network Voyager for Ipso 4.0 Reference Guide 293 Managing Roles To add or edit a role294 Nokia Network Voyager for Ipso 4.0 Reference Guide 295 Assigning Roles and Access Mechanisms to UsersTo assign roles and access mechanisms to users To delete a role 296 Creating Cluster Administrator Users Service Description Configuring Network Access and ServicesNetwork Access Configuration Options Network Services 298 Configuring a Modem on COM2, COM3, or COM4To enable network access options and services Modem Configuration Parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 299 To configure a modem on COM2, COM3, or COM4 300 Configuring Nokia Network Voyager AccessCountry Codes for Ositech Five of Clubs Card Country Codes for Ositech Five of Clubs Card II Configuring Basic Nokia Network Voyager Options To configure Web access for Nokia Network VoyagerNokia Network Voyager for Ipso 4.0 Reference Guide 301 302 Generating and Installing SSL/TLS CertificatesGenerating an SSL/TLS Certificate and Keys To generate a certificate and its associated private key Installing the SSL/TLS Certificate To install the certificate and its associated private keyNokia Network Voyager for Ipso 4.0 Reference Guide 303 Troubleshooting SSL/TLS Configuration Secure Shell SSH304 Initial SSH Configuration To configure SSHNokia Network Voyager for Ipso 4.0 Reference Guide 305 Configuring Advanced Options for SSH To configure advanced options306 Nokia Network Voyager for Ipso 4.0 Reference Guide 307 308 Configuring Secure Shell Authorized Keys Nokia Network Voyager for Ipso 4.0 Reference Guide 309 To configure authorized keysTo configure key pairs Changing Secure Shell Key Pairs Managing User RSA and DSA Identities To manage user identities310 Nokia Network Voyager for Ipso 4.0 Reference Guide 311 Network Voyager Session ManagementTunneling Http Over SSH To tunnel Http over SSH Enabling Enabling or Disabling Session Management Configuring Session TimeoutsTo enable or disable session management To set the session timeout interval Nokia Network Voyager for Ipso 4.0 Reference Guide 313 Authentication, Authorization, and Accounting AAACreating an AAA Configuration To create an AAA configuration Creating a Service Module Entry Creating a Service ProfileCreating an Authentication Profile Authentication Profile Types Nokia Network Voyager for Ipso 4.0 Reference Guide 315Type Module Description Creating an Accounting Profile To create an account profile316 317 Control Description Creating a Service Module ExampleProfile Controls 318 Configuring Radius Service Auth. Mgmt Acct. Mgmt Session MgmtNokia Network Voyager for Ipso 4.0 Reference Guide 319 320 Nokia Network Voyager for Ipso 4.0 Reference Guide 321 Configuring TACACS+ Deleting an AAA Authentication Server Configuration To delete an authentication server322 To add an authentication profile Changing an AAA ConfigurationChanging the Service Profile To change an AAA configuration Creating a Stacked Service Module Service Authentication Management324 To add a session profile Changing a Service Module ConfigurationChanging an Authentication Profile Configuration To add an accounting profile Changing an Accounting Profile Configuration Changing a Session Profile Configuration326 Encryption Acceleration Deleting an AAA ConfigurationDeleting an Item in a Service Profile Entry To delete an AAA configuration Monitoring Cryptographic Acceleration To enable the card for a Check Point VPNIPSec Tunnels Ipso Implementation Enabling Encryption Accelerator Cards Nokia Network Voyager for Ipso 4.0 Reference Guide 329 Transport and Tunnel Modes Building VPN on ESP Protocol Negotiation and Key Management330 Nokia Network Voyager for Ipso 4.0 Reference Guide 331 332 Using PKIIPSec Implementation in Ipso IPSec RFCs Nokia Network Voyager for Ipso 4.0 Reference Guide 333 Miscellaneous Tunnel Requirements 334 Phase 1 ConfigurationIPSec Parameters Platform Support Nokia Network Voyager for Ipso 4.0 Reference Guide 335 Choosing IPv4 or IPv6 General ConfigurationTo chose IPv4 or IPv6 general configuration pages Creating an IPSec Policy 336 Proposal and FiltersTrusted CA Certificates To select a trusted CA certificate Nokia Network Voyager for Ipso 4.0 Reference Guide 337 Device Certificates 338 To enroll and install a device certificate Nokia Network Voyager for Ipso 4.0 Reference Guide 339 Advanced IPSec Putting It All Together To complete creating an IPSec policy340 Creating an IPSec Tunnel Rule To create an IPSec tunnel ruleNokia Network Voyager for Ipso 4.0 Reference Guide 341 Transport Rule To create a transport rule342 Nokia Network Voyager for Ipso 4.0 Reference Guide 343 To configure Nokia Platform IPSec Tunnel Rule Example344 Nokia Network Voyager for Ipso 4.0 Reference Guide 345 346 Configure Nokia PlatformTo configure Nokia Platform 1 Ipso IPSec Transport Rule Example Nokia Network Voyager for Ipso 4.0 Reference Guide 347 348 Configure PC1Removing an IPSec Tunnel To remove an IPSec tunnel Miscellaneous Security Settings To set TCP flag combinationsNokia Network Voyager for Ipso 4.0 Reference Guide 349 350 Routing Overview Routing ProtocolsNokia Network Voyager for Ipso 4.0 Reference Guide 351 352 RIP Nokia Network Voyager for Ipso 4.0 Reference Guide 353 Route Maps 354 Types of Areas Area Border Routers High Availability Support for OspfNokia Network Voyager for Ipso 4.0 Reference Guide 355 Configuring Ospf Clustering356 Nokia Network Voyager for Ipso 4.0 Reference Guide 357 Configuring Ospf Areas and Global SettingsOspf Area Configuration Parameters Stub Area Parameters 358 Nssa Not So Stubby Area Parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 359 Configuring Virtual LinksTo configure Ospf To configure a virtual link 360 Configuring Global Settings Nokia Network Voyager for Ipso 4.0 Reference Guide 361 Global Settings for Ospf Configuring Ospf Interfaces Configuration Parameters for Ospf Interfaces362 Nokia Network Voyager for Ipso 4.0 Reference Guide 363 To configure an Ospf interface 364 Configuring Ospf Example Nokia Network Voyager for Ipso 4.0 Reference Guide 365 Network Mask Virtual IP Address Support for Vrrp Auto Summarization366 Nokia Network Voyager for Ipso 4.0 Reference Guide 367 Configuring RIPTo configure RIP RIP 1 Configuration Options Available from Network Voyager 368 Configuring RIP Timers Nokia Network Voyager for Ipso 4.0 Reference Guide 369 Configuring Auto-SummarizationRIP Example Enabling RIP 1 on an Interface 370 Enabling RIP 2 on an Interface Nokia Network Voyager for Ipso 4.0 Reference Guide 371 Configuring Virtual IP Support for VrrpPIM Support for IP Clustering PIM Dense-Mode 372 PIM Sparse-Mode Nokia Network Voyager for Ipso 4.0 Reference Guide 373 Configuring Dense-Mode PIMConfiguring Check Point VPN-1 Pro/Express PIM and Check Point SecureXL 374 Disabling PIM Nokia Network Voyager for Ipso 4.0 Reference Guide 375 Setting Advanced Options for Dense-Mode PIM Optional 376 Configuring Sparse-Mode PIM Nokia Network Voyager for Ipso 4.0 Reference Guide 377 Configuring High-Availability Mode 378 Nokia Network Voyager for Ipso 4.0 Reference Guide 379 380 Configuring a PIM-SM Static Rendezvous Point Nokia Network Voyager for Ipso 4.0 Reference Guide 381 Setting Advanced Options for Sparse-Mode PIM Optional 382 Command Shows Debugging PIMNokia Network Voyager for Ipso 4.0 Reference Guide 383 384 To log information about errors and events Nokia Network Voyager for Ipso 4.0 Reference Guide 385 Igrp 386 Nokia Network Voyager for Ipso 4.0 Reference Guide 387 Generation of Exterior Routes 388 Configuring IgrpAliased Interfaces Igrp Aggregation To enable Igrp on an interface Igrp ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 389 390 Dvmrp Configuring Dvmrp Configuring Dvmrp TimersNokia Network Voyager for Ipso 4.0 Reference Guide 391 392 Igmp Nokia Network Voyager for Ipso 4.0 Reference Guide 393 Configuring Igmp 394 Static Routes To configure a default or static route To setting the rank for static routesNokia Network Voyager for Ipso 4.0 Reference Guide 395 396 To add and configure many static routes at the same time Creating/Removing Static Routes To create a static default routeTo create a static route non-default Adding and Managing Static Routes Example Route Aggregation Backup Static RoutesTo disable a static route To create a backup static route To create aggregate routes To remove aggregate routesNokia Network Voyager for Ipso 4.0 Reference Guide 399 400 Route Aggregation Example Nokia Network Voyager for Ipso 4.0 Reference Guide 401 Preference DefaultRoute Rank Rank Assignments Routing Protocol Rank Example To set route rank402 To configure the routing preferences Support for BGP-4++Nokia Network Voyager for Ipso 4.0 Reference Guide 403 BGP Sessions Internal and External BGP Path Attributes404 Path Attribute Definition Nokia Network Voyager for Ipso 4.0 Reference Guide 405 BGP Multi-Exit Discriminator BGP Interactions with IGPs406 Nokia Network Voyager for Ipso 4.0 Reference Guide 407 Inbound BGP Route FiltersRedistributing Routes to BGP Communities Route Reflection 408Community attribute Description Nokia Network Voyager for Ipso 4.0 Reference Guide 409 Confederations 410 Ebgp Multihop Support TCP MD5 Authentication Route DampeningNokia Network Voyager for Ipso 4.0 Reference Guide 411 412 BGP Support for Virtual IP for Vrrp Nokia Network Voyager for Ipso 4.0 Reference Guide 413 BGP Support for IP ClusteringBGP Memory Requirements Tables Memory Size Example414 To configure Ibgp on Nokia Platform a BGP Neighbors ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 415 To configure Ibgp on Nokia Platform B To configure Ibgp on Nokia Platform C416 Nokia Network Voyager for Ipso 4.0 Reference Guide 417 To configure Ebgp on Nokia Platform aTo configure Ebgp on Nokia Platform C To configure Ebgp on Nokia Platform D 418 To configuring Ebgp on Nokia Platform EPath Filtering Based on Communities Example Verification To configure Default MED for Nokia Platform D BGP Multi Exit Discriminator ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 419 420 To configure MED Values for all peers of AS200 Nokia Network Voyager for Ipso 4.0 Reference Guide 421 Changing the Local Preference Value Example 422 To configure an Ibgp peer for Nokia Platform BTo configure the static routes required for an Ibgp session To set the local preference value for an Ibgp peer Configuring Nokia Platform C BGP Confederation ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 423 424 Configuring Platform B Nokia Network Voyager for Ipso 4.0 Reference Guide 425 Configuring Platform B as Route Reflector Route Reflector Example426 Configuring Platform C as Ibgp Peer of Platform B Configuring Platform D as Ibgp Peer of Platform BNokia Network Voyager for Ipso 4.0 Reference Guide 427 428 Configuring BGP Route Inbound Policy on Platform BConfiguring Redistribution of BGP Routes on Platform B BGP Community Example Nokia Network Voyager for Ipso 4.0 Reference Guide 429 Follow the steps in the Redistributing Ospf to BGP Example Ebgp Load Balancing Example Scenario #1 Configuring a Loopback Address on Platform aConfiguring a Loopback Address on Platform B Configuring a Static Route on Platform a Nokia Network Voyager for Ipso 4.0 Reference Guide 431 Configuring a Static Route on Platform BConfiguring an Ebgp Peer on Platform a Configuring an Ebgp Peer on Platform B 432 Configuring Ospf on Platform aConfiguring Ospf on Platform B Ebgp Load Balancing Example Scenario #2 Nokia Network Voyager for Ipso 4.0 Reference Guide 433 Adjusting BGP Timers Example 434 TCP MD5 Authentication ExampleConfiguring TCP MD5 Authentication on Nokia Platform a Configuring BGP Route Redistribution on Nokia Platform B Field Default value Units of measurement BGP Route Dampening ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 435 BGP Path Selection BGP-4++ Example436 Nokia Network Voyager for Ipso 4.0 Reference Guide 437 To configure configure a BGP4 session over IPv6 transport 438 Route Redistribution Nokia Network Voyager for Ipso 4.0 Reference Guide 439 To redistribute a single route To configure BGP route redistribution on Nokia Platform DRedistributing Routes to RIP and Igrp BGP Route Redistribution Example Nokia Network Voyager for Ipso 4.0 Reference Guide 441 Redistributing RIP to Ospf Example 442 Nokia Network Voyager for Ipso 4.0 Reference Guide 443 Redistributing Ospf to BGP Example Redistributing Routes with Ospf To redistribute Ospf to BGP through Nokia Platform a444 To configure IGP inbound filters Inbound Route FiltersNokia Network Voyager for Ipso 4.0 Reference Guide 445 446 BGP Route Inbound Policy Example Nokia Network Voyager for Ipso 4.0 Reference Guide 447 BGP AS Path Filtering Example Aspath Regular Expressions448 Nokia Network Voyager for Ipso 4.0 Reference Guide 449 Traffic Management OverviewPacket Filtering Description Traffic Shaping Description Configuring Access Control Lists Traffic Queuing Description450 To create or delete an ACL To apply or remove an ACL to or from an interfaceNokia Network Voyager for Ipso 4.0 Reference Guide 451 452 Configuring ACL Rules Modifying a Rule To add a new rule to an ACLNokia Network Voyager for Ipso 4.0 Reference Guide 453 454 ACL Rule Attributes Nokia Network Voyager for Ipso 4.0 Reference Guide 455 Configuring Aggregation Classes To create an Aggregation Class To associate an aggregation class with a rule456 Nokia Network Voyager for Ipso 4.0 Reference Guide 457 Configuring Queue Classes To set or modify queue class configuration values To create or delete a queue class458 Nokia Network Voyager for Ipso 4.0 Reference Guide 459 Configuring ATM QoSTo associate a queue class with an interface Create a QoS descriptor To delete an ATM QoS descriptor To dissociate an ATM QoS Descriptor from an existing PVC460 Nokia Network Voyager for Ipso 4.0 Reference Guide 461 Configuring Common Open Policy Server Configuring a Cops Client ID and Policy Decision Point Configuring Security Parameters for a Cops Client ID462 Nokia Network Voyager for Ipso 4.0 Reference Guide 463 Assigning Roles to Specific Interfaces 464 To disable and delete a Client IDActivating and Deactivating the Cops Client Deleting a Client ID Nokia Network Voyager for Ipso 4.0 Reference Guide 465 Example Rate Shaping 466 Example Expedited Forwarding Nokia Network Voyager for Ipso 4.0 Reference Guide 467 468 To test the configuration Nokia Network Voyager for Ipso 4.0 Reference Guide 469 BOOTP/DHCP Relay 470 Configuring BOOTP/DHCP RelayTo enable Bootp relay on an Interface Bootp configuration parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 471 To disable Bootp relay on an interfaceIP Broadcast helper configuration parameters IP Broadcast Helper 472 To configure IP broadcast helper Configuring Router Discovery Router Discovery OverviewNokia Network Voyager for Ipso 4.0 Reference Guide 473 To enable router discovery services Router discover configuration parameters474 To disable router discovery services Network Time Protocol NTPNokia Network Voyager for Ipso 4.0 Reference Guide 475 Configuring NTP To configure NTP476 Nokia Network Voyager for Ipso 4.0 Reference Guide 477 478 Viewing System Utilization Statistics CPU-Memory Live UtilizationNokia Network Voyager for Ipso 4.0 Reference Guide 479 Disk and Swap Space Monitoring Process Utilization480 Ipso Process Management Nokia Network Voyager for Ipso 4.0 Reference Guide 481Process Description Report Description Generating Monitor ReportsReports 482 Monitoring System Health To display reportsNokia Network Voyager for Ipso 4.0 Reference Guide 483 484 Monitoring System Logs Nokia Network Voyager for Ipso 4.0 Reference Guide 485 Viewing Cluster Status and Members 486 Displaying Route SettingsViewing Routing Protocol Information Displaying the Kernel Forwarding Table Displaying Interface Settings Hardware MonitoringNokia Network Voyager for Ipso 4.0 Reference Guide 487 488 Using the iclid ToolIclid Commands To display routing daemon status using iclid Nokia Network Voyager for Ipso 4.0 Reference Guide 489 490 Nokia Network Voyager for Ipso 4.0 Reference Guide 491 492 Nokia Network Voyager for Ipso 4.0 Reference Guide 493 494 Preventing Full Log Buffers and Related Console Messages If you are using FireWall-1 If you are using FireWall-1 NGNokia Network Voyager for Ipso 4.0 Reference Guide 495 496 Nokia Network Voyager for Ipso 4.0 Reference Guide Index Index Bios CPU DSA Http Httpd Managing NGX Nssa RIP RSA TACACS+ Deleting virtual router Index