206 | Nokia IPSO 4.0 instruction

4

206	Nokia Network Voyager for IPSO 4.0 Reference Guide

Image 206

Nokia IPSO 4.0 manual 206

Contents

Nokia Network Voyager For Ipso Reference Guide Nokia Network Voyager for Ipso 4.0 Reference Guide Restricted Rights Legend Https//support.nokia.com Tac.support@nokia.com Nokia Network Voyager for Ipso 4.0 Reference Guide Contents Nokia Network Voyager Ipso 4.0 Reference Guide Configuring System Functions Nokia Network Voyager Ipso 4.0 Reference Guide Configuring Clustering Virtual Router Redundancy Protocol Vrrp Nokia Network Voyager Ipso 4.0 Reference Guide Configuring Snmp Configuring IPv6 Managing Security and Access Configuring Routing Nokia Network Voyager Ipso 4.0 Reference Guide Nokia Network Voyager Ipso 4.0 Reference Guide Configuring Traffic Management Configuring Router Services Monitoring System Configuration and Hardware Index About the Nokia Network Voyager Reference Guide About the Nokia Network Voyager Reference Guide Text Conventions Conventions This Guide UsesText Conventions Convention Description Related Documentation Menu Items Software Overview Nokia Network Voyager for Ipso 4.0 Reference Guide To open Nokia Network Voyager Logging In to Network VoyagerLogging Off To log in without exclusive configuration lock Obtaining a Configuration LockTo log in with exclusive configuration lock To override a configuration lock Reloading Pages Accessing Documentation and HelpNavigating in Network Voyager To clear the memory and disk cache „ Nokia support site https//support.nokia.com To open a new window to view help Viewing Hardware and Software Information for Your System To view the asset management summary Configuring Interfaces Interface Overview Type Prefix Configuring Network DevicesIP2250 Management Ports Configuring IP Addresses Physical Interface Logical Interface Interface Status Indicator Description Configuring Tunnel InterfacesInterface Status Indicators Ethernet Interfaces Configuring Ethernet InterfacesPhysical Interface Configuration Parameters Parameter Description To configure an Ethernet interface Link Aggregation Managing Link Aggregation Using Snmp Configuring Switches for Link Aggregation Firewall Synchronization Traffic Static Link AggregationLink Aggregation on the IP2250 Configuring the Remaining Management Ports Production Traffic ADP I/O Ports Only To set up link aggregation in Network Voyager Configuring Link AggregationPhysical Interface Configuration To physically configure the interfaces you will aggregate Group Configuration To configure link aggregation groups Deleting Aggregation Groups Logical ConfigurationGigabit Ethernet Interfaces Gigabit Ethernet Interface Parameters To configure a Gigabit Ethernet interface MTU Point-to-Point Over Ethernet Configuring PPPoETo configure PPPoE Nokia Network Voyager for Ipso 4.0 Reference Guide To create PPPoE logical interfaces To change configuration profilesTo delete configuration profiles To delete PPPoE logical interfaces Configuring MSS Clamping Virtual LAN Interfaces To configure a Vlan Interface To delete a Vlan Interface Vlan Example Topology To define the maximum number of VLANs To configure an Fddi Interface Fddi Interfaces To change the duplex setting of an Fddi interface To change the IP address of an Fddi interface To configure an Isdn physical interface Isdn Interfaces To configure an Isdn logical interface to place calls Nokia Network Voyager for Ipso 4.0 Reference Guide Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an Isdn interface to receive calls Configuring Calling Line-Identification Screening To add an incoming number To configure an interface to place and receive calls To remove an incoming number Dial-on-Demand Routing DDR Lists To add a new rule to a DDR list To create a DDR listTo delete a DDR list To apply or remove a DDR list to/from an interface Example DDR ListTo modify a rule Isdn Network Configuration Example To configure the IP330 to place an outgoing call To configure the IP650 to handle an incoming call Sample Call Traces Trace for connecting a call from the Nokia IP330 is To set level of messages logged Isdn TroubleshootingLogging To view the message log Tracing Troubleshooting Cause CodesTo trace Isdn traffic using tcpdump Isdn Cause Code Fields Cause Values Cause Cause Description DiagnosticsIsdn Cause Values See Isdn Cause Values table Information-element identifiers is missing Isdn Bearer-Capable Values Value Description To configure a Token Ring interface Token Ring Interfaces To deactivate a Token Ring interface To change a Token Ring interface Token Ring Example Fddi To configure an ATM interface Point-to-Point Link over ATM To change the VPI/VCI of an ATM interface To change the IP Address of an ATM interface To change the IP MTU of an ATM interface ATM Example Fddi IP over ATM IPoA To configure the ATM interface on Nokia Platform aTo configure an ATM logical IP subnet LIS interface To change the VPI/VCIs of an ATM LIS Interface To change the IP Address of an ATM LIS interface IPoA Example ATM To configure a serial interface for Cisco Hdlc Serial V.35 and X.21 Interfaces To configure a Serial Interface for PPP To configure a serial interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide Serial Interface Example T1with Built-In CSU/DSU Interfaces To configure the serial interface on Nokia Platform aTo configure a T1 Interface for Cisco Hdlc Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 Interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide T1 Interface Example To configure the serial interface on Nokia Platform a To configure an E1 interface for Cisco Hdlc E1 with Built-In CSU/DSU Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an E1 interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an E1 interface for frame relay 100 Nokia Network Voyager for Ipso 4.0 Reference Guide 101 102 Nokia Network Voyager for Ipso 4.0 Reference Guide 103 To configure an Hssi interface for Cisco HdlcHssi Interfaces To configure an Hssi interface for PPP 104 To configure an Hssi interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide 105 106 Unnumbered Interfaces Configuring Unnumbered InterfacesTo configure an unnumbered interface Nokia Network Voyager for Ipso 4.0 Reference Guide 107 To change an unnumbered interface to a numbered interface 108 To configure a static route over an unnumbered interface Nokia Network Voyager for Ipso 4.0 Reference Guide 109 110 Configuring Ospf over Unnumbered InterfaceOspf over Unnumbered Interfaces Using Virtual Links Nokia Network Voyager for Ipso 4.0 Reference Guide 111 Cisco Hdlc ProtocolTo change the keepalive interval for Cisco Hdlc To change the keepalive interval in PPP Point-to-Point ProtocolTo change the IP address in Cisco Hdlc 112 Nokia Network Voyager for Ipso 4.0 Reference Guide 113 To change the keepalive maximum failures in PPPTo change the IP address in PPP To change the Dlci in frame relay Frame Relay ProtocolTo change the keepalive interval in frame relay 114 Nokia Network Voyager for Ipso 4.0 Reference Guide 115 To change the LMI parameters in frame relayTo change the interface type in frame relay To remove a frame relay interface To change the active status monitor setting in frame relayTo change the IP address in frame relay 116 To change the IP Address of a loopback interface Loopback InterfacesTo add an IP Address to a Loopback Interface Nokia Network Voyager for Ipso 4.0 Reference Guide 117 To create a GRE tunnel Configuring GRE TunnelsGRE Tunnels 118 Nokia Network Voyager for Ipso 4.0 Reference Guide 119 To change IP TOS value of a GRE tunnel 120 GRE Tunnel Example Nokia Network Voyager for Ipso 4.0 Reference Guide 121 122 High Availability GRE TunnelsHA GRE Tunnel Example Nokia Network Voyager for Ipso 4.0 Reference Guide 123 124 Nokia Network Voyager for Ipso 4.0 Reference Guide 125 Dvmrp TunnelsTo create a Dvmrp tunnel 126 Dvmrp Tunnel ExampleTo change the local or remote addresses of a Dvmrp tunnel Nokia Network Voyager for Ipso 4.0 Reference Guide 127 128 ARP Table EntriesTo change ARP global parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 129 To add a static ARP entryTo add a proxy ARP entry Configuring ARP for ATM Interfaces To view and delete dynamic ATM ARP entries To add a static ATM ARP entryTo delete a static ATM ARP entry Nokia Network Voyager for Ipso 4.0 Reference Guide 131 132 Transparent ModeLimitations Transparent Mode Processing Details Nokia Network Voyager for Ipso 4.0 Reference Guide 133 Configuring Transparent Mode in VPN Environments 134 Example of Transparent Mode Nokia Network Voyager for Ipso 4.0 Reference Guide 135 Configuring Transparent Mode 136 To delete a transparent mode group Creating and Deleting Transparent Mode GroupsTo create a transparent mode group Nokia Network Voyager for Ipso 4.0 Reference Guide 137 138 Enabling or Disabling a Transparent Mode GroupTo enable or disable a transparent mode group Enabling or Disabling Vrrp for a Transparent Mode Group Monitoring Transparent Mode GroupsTransparent Mode and Check Point NGX Configuring Antispoofing Routing Traffic through the VTI Virtual Tunnel Interfaces Fwvpn for Route-Based VPNUnnumbered VTIs 140 Nokia Network Voyager for Ipso 4.0 Reference Guide 141 To create a virtual tunnel interface Creating Virtual Tunnel InterfacesVrrp Support To create the VPN community Nokia Network Voyager for Ipso 4.0 Reference Guide 143 To create the virtual tunnel interface 144 Configuring Dhcp Nokia Network Voyager for Ipso 4.0 Reference Guide 145 To configure the Dhcp client interface Configuring Dhcp Client InterfacesDhcp Client Configuration To enable the Dhcp client process Nokia Network Voyager for Ipso 4.0 Reference Guide 147 Configuring the Dhcp ServerTo configure the Dhcp server process 148 Dhcp Server ConfigurationTo enable the Dhcp server process To change the Dhcp service Changing Dhcp ServiceTo disable the Dhcp server process Adding Dhcp Address Pools Assigning a Fixed-IP Address to a Client To enable and existing IP address poolEnabling or Disabling Dhcp Address Pools To assign a fixed-IP address to a client Creating Dhcp Client Templates Nokia Network Voyager for Ipso 4.0 Reference Guide 151 152 To configure Dynamic Domain Name System Ddns Configuring Dynamic Domain Name System ServiceConfiguring Dynamic Domain Name System Zones Nokia Network Voyager for Ipso 4.0 Reference Guide 153 To configure DNS Configuring the Domain Name ServiceConfiguring Disk Mirroring To create a mirror set Nokia Network Voyager for Ipso 4.0 Reference Guide 155 Using an Optional Disk Flash-Based Systems OnlyTo delete a mirror set Mail Relay To install and configure PC card flash memoryTo configure the system to store log files on the PC card To remove an optional disk To configure mail relay for your firewall Configuring Mail RelayTo configure failure notification System Failure Notification To send mail from the firewall Setting the System TimeSending Mail 158 To add a static host entry Configuring Host AddressesTo set system time once Nokia Network Voyager for Ipso 4.0 Reference Guide 159 Accepting Log Messages Configuring System LoggingConfiguring Logging on Disk-Based Systems Logging to a Remote System Nokia Network Voyager for Ipso 4.0 Reference Guide 161 Configuring Logging on Flash-Based SystemsTo send syslog messages to a remote system Configuring Logging to Remote Log Servers 162 Nokia Network Voyager for Ipso 4.0 Reference Guide 163 Configuring Audit LogsConfiguring Logging to an Optional Disk To set the system configuration audit log 164 Remote Core Dump Server on Flash-Based Systems Nokia Network Voyager for Ipso 4.0 Reference Guide 165 To change the hostname Managing Configuration SetsChanging the Hostname 166 To delete unwanted configuration database files To create a factory default configuration fileTo switch a currently active database Scheduling Jobs 168 Backing Up and Restoring FilesTo delete scheduled jobs To delete local backup files Creating Backup FilesTo create a backup file manually Nokia Network Voyager for Ipso 4.0 Reference Guide 169 To configure scheduled backups Transferring Backup FilesConfiguring Automatic Transfers To cancel a regularly scheduled backup Nokia Network Voyager for Ipso 4.0 Reference Guide 171 Transferring Backup Files ManuallyTo manually transfer archive files to a remote server 172 Restoring Files from Locally Stored Backup FilesTo restore files Deleting Images Managing Nokia Ipso ImagesChanging Current Image To select a new current image 174 Installing New ImagesTo delete an Nokia Ipso image Nokia Network Voyager for Ipso 4.0 Reference Guide 175 Testing a New ImageTo test an image before activating it Downgrading Nokia Ipso Images Rebooting a ClusterUpgrading Nokia Ipso Images for a Cluster 176 Configuring Monitor Reports Nokia Network Voyager for Ipso 4.0 Reference Guide 177 Restrictions for Flash-Based Platforms Installing and Enabling PackagesManaging Packages Monitor Report Parameters To install a package Nokia Network Voyager for Ipso 4.0 Reference Guide 179 To enable or disable a package Advanced System TuningTuning the TCP/IP Stack To delete a package Nokia Network Voyager for Ipso 4.0 Reference Guide 181 Router Alert IP OptionTo set the TCP MSS 182 Nokia Network Voyager for Ipso 4.0 Reference Guide 183 Vrrp OverviewHow Vrrp Works Simple Vrrp Configuration 184 Vrrp Configuration with Internal and External VRIDs Vrrp Configuration with Simultaneous Backup 186 Configuring VrrpUnderstanding Monitored-Circuit Vrrp Nokia Network Voyager for Ipso 4.0 Reference Guide 187 Selecting Configuration ParametersPriority 188 AuthenticationHello Interval Nokia Network Voyager for Ipso 4.0 Reference Guide 189 Backup AddressPriority Delta Vmac Mode 190 Before you Begin Global Vrrp SettingsVrrp Configuration Parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 191 Configuring Monitored-Circuit Vrrp 192 To add a virtual router Nokia Network Voyager for Ipso 4.0 Reference Guide 193 To delete a virtual router Configuring Monitored-Circuit Vrrp using the Full MethodTo change the configuration of an existing virtual router 194 Additional Vrrp Parameters Used in Full Method Nokia Network Voyager for Ipso 4.0 Reference Guide 195 196 Configuring VRRPv2To add or back up a virtual router using VRRPv2 Configuring Check Point NGX for Vrrp Nokia Network Voyager for Ipso 4.0 Reference Guide 197 Configure settings under the 3rd party configuration tab 198 Nokia Network Voyager for Ipso 4.0 Reference Guide 199 Configuring Vrrp Rules for Check Point NGXConfiguration Rule for Check Point NGX FP1 Source Destination Service Action Configuration Rules for Check Point NGX FP2 and LaterConfiguring Rules if You Are Using Ospf or Dvmrp 200 Link Aggregation IP2250 Systems Only CLI commands for VrrpMonitoring Vrrp State 202 LocationStats To enable or disable Monitor Firewall state Troubleshooting VrrpGeneral Configuration Considerations To enable traces for Vrrp 204 Access Control ListsFirewall Policies VRRPv2 in Switched Environments Switched EnvironmentsMonitored-Circuit Vrrp in Switched Environments Nokia Network Voyager for Ipso 4.0 Reference Guide 205 206 Nokia Network Voyager for Ipso 4.0 Reference Guide 207 Using Flash-Based PlatformsIP Clustering Description Example Cluster 208 Cluster Management Nokia Network Voyager for Ipso 4.0 Reference Guide 209 Cluster Terminology 210 Cluster member a cluster node that is not the master Nokia Network Voyager for Ipso 4.0 Reference Guide 211 Clustering Modes 212 Nokia Network Voyager for Ipso 4.0 Reference Guide 213 214 Considerations for ClusteringNetwork Environment Other Considerations Nokia Network Voyager for Ipso 4.0 Reference Guide 215 Clustering IP2250 Platforms 216 Upgrading Ipso in a Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 217 Upgrading from Ipso For All UpgradesUpgrading from Ipso 3.7 or Later 218 Enabling Cluster Management Nokia Network Voyager for Ipso 4.0 Reference Guide 219 To create and configure a cluster Creating and Configuring a ClusterConfiguration Overview Creating a Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 221 Selecting the Cluster ModeConfiguring the Work Assignment Method 222 Configuring an InterfaceTo include an interface in the cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 223 Configuring Firewall MonitoringSupporting Non-Check Point Gateways and Clients 224 Configuring VPN TunnelsUsing IP Pools Using IP Pools When Only Check Point Gateways Are Involved Nokia Network Voyager for Ipso 4.0 Reference Guide 225 226 Configuring Join-Time Shared FeaturesConfiguring IP pools in Cluster Voyager Nokia Network Voyager for Ipso 4.0 Reference Guide 227 What is Sharable?What if Settings Conflict? Configuring Features for Sharing 228 After You Create a Cluster Adding a Node to a ClusterMaking the Cluster Active Nokia Network Voyager for Ipso 4.0 Reference Guide 229 Recommended Procedure 230 Nokia Network Voyager for Ipso 4.0 Reference Guide 231 Managing a ClusterJoining a System to a Cluster 232 Using Cluster VoyagerTo start Cluster Voyager Nokia Network Voyager for Ipso 4.0 Reference Guide 233 If You Forget the cadmin PasswordCluster Administrator Users Monitoring a Cluster Configuring the Failure IntervalConfiguring the Performance Rating 234 Managing Join-Time Shared Features Nokia Network Voyager for Ipso 4.0 Reference Guide 235 Installing Ipso Images 236 Nokia Network Voyager for Ipso 4.0 Reference Guide 237 Removing a Node from a Cluster 238 Synchronizing the Time on Cluster Nodes Changing Cluster Interface ConfigurationsDeleting a Cluster Configuration Assigning the Time Zone 240 Configuring NTPNTP Server Outside the Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 241 Configuring NGX for ClusteringUsing the Master Node as the NTP Server 242 Clustering Example Three Nodes Nokia Network Voyager for Ipso 4.0 Reference Guide 243 Configuring the Cluster in Voyager 244 Configuring the Internal and External Routers Nokia Network Voyager for Ipso 4.0 Reference Guide 245 Clustering Example With Non-Check Point VPN 246 Nokia Network Voyager for Ipso 4.0 Reference Guide 247 248 Snmp Overview Nokia Network Voyager for Ipso 4.0 Reference Guide 249 250 Source Function Nokia Network Voyager for Ipso 4.0 Reference Guide 251 UDP-MIB Snmp Proxy Support for Check Point MIB 252 Nokia Network Voyager for Ipso 4.0 Reference Guide 253 Using the Check Point MIBUsing cpsnmpstart 254 To enable or disable SnmpEnabling Snmp and Selecting the Version To set an Snmp agent address Configuring the System for SnmpSetting an Agent Address Nokia Network Voyager for Ipso 4.0 Reference Guide 255 256 Configuring TrapsTypes of Snmp Traps Type of Trap Description Nokia Network Voyager for Ipso 4.0 Reference Guide 257 258 Enabling or Disabling Trap Types Configuring Trap ReceiversSetting the Trap PDU Agent Address To configure location and contact information Interpreting Error MessagesConfiguring Location and Contact Information Error status code Meaning Variable-bindings Element Description GetRequestNokia Network Voyager for Ipso 4.0 Reference Guide 261 Value Field Set Description GetBulkRequest Configuring SNMPv3GetNextRequest 262 Security Related Options Used in Request Messages Request MessagesManaging Snmp Users Nokia Network Voyager for Ipso 4.0 Reference Guide 263 To add an Snmp user 264 To delete a USM user Nokia Network Voyager for Ipso 4.0 Reference Guide 265 266 IPv6 Overview Nokia Network Voyager for Ipso 4.0 Reference Guide 267 268 To configure IPv6 logical interfacesInterfaces To delete an IPv6 address To disable IPv6 on an interfaceTo configure neighbor discovery Nokia Network Voyager for Ipso 4.0 Reference Guide 269 IPv6 and IPv4 Compatibility Configuring IPv6 in IPv4 TunnelsTo configure IPv6 in IPv4 tunnels 270 To configure IPv6 to IPv4 Configuring IPv6 to IPv4Configuring IPv6 over IPv4 To configure IPv6 over IPv4 To configure IPv4 in IPv6 tunnels Configuring IPv4 in IPv6 TunnelsConfiguring an IPv6 Default or Static Route To configure an IPv6 default or static route Configuring RIPng Routing ConfigurationConfiguring OSPFv3 Creating IPv6 Aggregate Routes Redistributing Aggregate Routes in RIPng Creating Redistributed RoutesRedistributing Static Routes into RIPng 274 Redistributing Interface Routes into RIPng Configuring ICMPv6 Router DiscoveryRouter Discovery Nokia Network Voyager for Ipso 4.0 Reference Guide 275 276 Nokia Network Voyager for Ipso 4.0 Reference Guide 277 Configuring Vrrp for IPv6Vrrp for IPv6 Creating a Virtual Router for an IPv6 Interface Using VRRPv3 278 Nokia Network Voyager for Ipso 4.0 Reference Guide 279 280 Setting a Virtual MAC Address for a Virtual RouterTo set the virtual MAC address Nokia Network Voyager for Ipso 4.0 Reference Guide 281 Changing the IP Address List of a Virtual Router in VRRPv3Removing a Virtual Router in VRRPv3 Creating a Virtual Router in Monitored Circuit Mode for IPv6 282 Nokia Network Voyager for Ipso 4.0 Reference Guide 283 Traffic Management 284 Nokia Network Voyager for Ipso 4.0 Reference Guide 285 Security and Access ConfigurationTo enable FTP, TFTP, or Telnet access 286 Nokia Network Voyager for Ipso 4.0 Reference Guide 287 Managing PasswordsTo change the current user’s password 288 To change another user’s passwordManaging User Accounts Nokia Network Voyager for Ipso 4.0 Reference Guide 289 Adding and Deleting UsersUser Account Attributes Attribute Description To remove a user Managing and Using S/KeyTo add a user 290 To use the S/Key Using S/KeyTo configure S/Key Nokia Network Voyager for Ipso 4.0 Reference Guide 291 Disabling S/Key To disable S/KeyManaging Groups 292 Nokia Network Voyager for Ipso 4.0 Reference Guide 293 Role-Based AdministrationTo add or edit a group 294 Managing RolesTo add or edit a role To delete a role Assigning Roles and Access Mechanisms to UsersTo assign roles and access mechanisms to users Nokia Network Voyager for Ipso 4.0 Reference Guide 295 Creating Cluster Administrator Users 296 Network Services Configuring Network Access and ServicesNetwork Access Configuration Options Service Description Modem Configuration Parameters Configuring a Modem on COM2, COM3, or COM4To enable network access options and services 298 To configure a modem on COM2, COM3, or COM4 Nokia Network Voyager for Ipso 4.0 Reference Guide 299 Country Codes for Ositech Five of Clubs Card II Configuring Nokia Network Voyager AccessCountry Codes for Ositech Five of Clubs Card 300 Nokia Network Voyager for Ipso 4.0 Reference Guide 301 Configuring Basic Nokia Network Voyager OptionsTo configure Web access for Nokia Network Voyager To generate a certificate and its associated private key Generating and Installing SSL/TLS CertificatesGenerating an SSL/TLS Certificate and Keys 302 Nokia Network Voyager for Ipso 4.0 Reference Guide 303 Installing the SSL/TLS CertificateTo install the certificate and its associated private key 304 Troubleshooting SSL/TLS ConfigurationSecure Shell SSH Nokia Network Voyager for Ipso 4.0 Reference Guide 305 Initial SSH ConfigurationTo configure SSH 306 Configuring Advanced Options for SSHTo configure advanced options Nokia Network Voyager for Ipso 4.0 Reference Guide 307 Configuring Secure Shell Authorized Keys 308 Changing Secure Shell Key Pairs To configure authorized keysTo configure key pairs Nokia Network Voyager for Ipso 4.0 Reference Guide 309 310 Managing User RSA and DSA IdentitiesTo manage user identities To tunnel Http over SSH Network Voyager Session ManagementTunneling Http Over SSH Nokia Network Voyager for Ipso 4.0 Reference Guide 311 To set the session timeout interval Configuring Session TimeoutsTo enable or disable session management Enabling Enabling or Disabling Session Management To create an AAA configuration Authentication, Authorization, and Accounting AAACreating an AAA Configuration Nokia Network Voyager for Ipso 4.0 Reference Guide 313 Creating an Authentication Profile Creating a Service Module EntryCreating a Service Profile Type Module Description Authentication Profile TypesNokia Network Voyager for Ipso 4.0 Reference Guide 315 316 Creating an Accounting ProfileTo create an account profile 317 318 Creating a Service Module ExampleProfile Controls Control Description Nokia Network Voyager for Ipso 4.0 Reference Guide 319 Configuring RadiusService Auth. Mgmt Acct. Mgmt Session Mgmt 320 Configuring TACACS+ Nokia Network Voyager for Ipso 4.0 Reference Guide 321 322 Deleting an AAA Authentication Server ConfigurationTo delete an authentication server To change an AAA configuration Changing an AAA ConfigurationChanging the Service Profile To add an authentication profile 324 Creating a Stacked Service ModuleService Authentication Management To add an accounting profile Changing a Service Module ConfigurationChanging an Authentication Profile Configuration To add a session profile 326 Changing an Accounting Profile ConfigurationChanging a Session Profile Configuration To delete an AAA configuration Deleting an AAA ConfigurationDeleting an Item in a Service Profile Entry Encryption Acceleration Enabling Encryption Accelerator Cards To enable the card for a Check Point VPNIPSec Tunnels Ipso Implementation Monitoring Cryptographic Acceleration Transport and Tunnel Modes Nokia Network Voyager for Ipso 4.0 Reference Guide 329 330 Building VPN on ESPProtocol Negotiation and Key Management Nokia Network Voyager for Ipso 4.0 Reference Guide 331 IPSec RFCs Using PKIIPSec Implementation in Ipso 332 Miscellaneous Tunnel Requirements Nokia Network Voyager for Ipso 4.0 Reference Guide 333 Platform Support Phase 1 ConfigurationIPSec Parameters 334 Creating an IPSec Policy Choosing IPv4 or IPv6 General ConfigurationTo chose IPv4 or IPv6 general configuration pages Nokia Network Voyager for Ipso 4.0 Reference Guide 335 To select a trusted CA certificate Proposal and FiltersTrusted CA Certificates 336 Device Certificates Nokia Network Voyager for Ipso 4.0 Reference Guide 337 To enroll and install a device certificate 338 Advanced IPSec Nokia Network Voyager for Ipso 4.0 Reference Guide 339 340 Putting It All TogetherTo complete creating an IPSec policy Nokia Network Voyager for Ipso 4.0 Reference Guide 341 Creating an IPSec Tunnel RuleTo create an IPSec tunnel rule 342 Transport RuleTo create a transport rule Nokia Network Voyager for Ipso 4.0 Reference Guide 343 344 To configure Nokia PlatformIPSec Tunnel Rule Example Nokia Network Voyager for Ipso 4.0 Reference Guide 345 IPSec Transport Rule Example Configure Nokia PlatformTo configure Nokia Platform 1 Ipso 346 Nokia Network Voyager for Ipso 4.0 Reference Guide 347 To remove an IPSec tunnel Configure PC1Removing an IPSec Tunnel 348 Nokia Network Voyager for Ipso 4.0 Reference Guide 349 Miscellaneous Security SettingsTo set TCP flag combinations 350 Nokia Network Voyager for Ipso 4.0 Reference Guide 351 Routing OverviewRouting Protocols RIP 352 Route Maps Nokia Network Voyager for Ipso 4.0 Reference Guide 353 Types of Areas 354 Nokia Network Voyager for Ipso 4.0 Reference Guide 355 Area Border RoutersHigh Availability Support for Ospf 356 Configuring OspfClustering Stub Area Parameters Configuring Ospf Areas and Global SettingsOspf Area Configuration Parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 357 Nssa Not So Stubby Area Parameters 358 To configure a virtual link Configuring Virtual LinksTo configure Ospf Nokia Network Voyager for Ipso 4.0 Reference Guide 359 Configuring Global Settings 360 Global Settings for Ospf Nokia Network Voyager for Ipso 4.0 Reference Guide 361 362 Configuring Ospf InterfacesConfiguration Parameters for Ospf Interfaces To configure an Ospf interface Nokia Network Voyager for Ipso 4.0 Reference Guide 363 Configuring Ospf Example 364 Network Mask Nokia Network Voyager for Ipso 4.0 Reference Guide 365 366 Virtual IP Address Support for VrrpAuto Summarization RIP 1 Configuration Options Available from Network Voyager Configuring RIPTo configure RIP Nokia Network Voyager for Ipso 4.0 Reference Guide 367 Configuring RIP Timers 368 Enabling RIP 1 on an Interface Configuring Auto-SummarizationRIP Example Nokia Network Voyager for Ipso 4.0 Reference Guide 369 Enabling RIP 2 on an Interface 370 PIM Dense-Mode Configuring Virtual IP Support for VrrpPIM Support for IP Clustering Nokia Network Voyager for Ipso 4.0 Reference Guide 371 PIM Sparse-Mode 372 PIM and Check Point SecureXL Configuring Dense-Mode PIMConfiguring Check Point VPN-1 Pro/Express Nokia Network Voyager for Ipso 4.0 Reference Guide 373 Disabling PIM 374 Setting Advanced Options for Dense-Mode PIM Optional Nokia Network Voyager for Ipso 4.0 Reference Guide 375 Configuring Sparse-Mode PIM 376 Configuring High-Availability Mode Nokia Network Voyager for Ipso 4.0 Reference Guide 377 378 Nokia Network Voyager for Ipso 4.0 Reference Guide 379 Configuring a PIM-SM Static Rendezvous Point 380 Setting Advanced Options for Sparse-Mode PIM Optional Nokia Network Voyager for Ipso 4.0 Reference Guide 381 382 Nokia Network Voyager for Ipso 4.0 Reference Guide 383 Command ShowsDebugging PIM To log information about errors and events 384 Igrp Nokia Network Voyager for Ipso 4.0 Reference Guide 385 386 Generation of Exterior Routes Nokia Network Voyager for Ipso 4.0 Reference Guide 387 Igrp Aggregation Configuring IgrpAliased Interfaces 388 Nokia Network Voyager for Ipso 4.0 Reference Guide 389 To enable Igrp on an interfaceIgrp Example Dvmrp 390 Nokia Network Voyager for Ipso 4.0 Reference Guide 391 Configuring DvmrpConfiguring Dvmrp Timers Igmp 392 Configuring Igmp Nokia Network Voyager for Ipso 4.0 Reference Guide 393 Static Routes 394 Nokia Network Voyager for Ipso 4.0 Reference Guide 395 To configure a default or static routeTo setting the rank for static routes To add and configure many static routes at the same time 396 Adding and Managing Static Routes Example To create a static default routeTo create a static route non-default Creating/Removing Static Routes To create a backup static route Backup Static RoutesTo disable a static route Route Aggregation Nokia Network Voyager for Ipso 4.0 Reference Guide 399 To create aggregate routesTo remove aggregate routes Route Aggregation Example 400 Rank Assignments Preference DefaultRoute Rank Nokia Network Voyager for Ipso 4.0 Reference Guide 401 402 Routing Protocol Rank ExampleTo set route rank Nokia Network Voyager for Ipso 4.0 Reference Guide 403 To configure the routing preferencesSupport for BGP-4++ 404 BGP Sessions Internal and ExternalBGP Path Attributes Nokia Network Voyager for Ipso 4.0 Reference Guide 405 Path Attribute Definition 406 BGP Multi-Exit DiscriminatorBGP Interactions with IGPs Communities Inbound BGP Route FiltersRedistributing Routes to BGP Nokia Network Voyager for Ipso 4.0 Reference Guide 407 Community attribute Description Route Reflection408 Confederations Nokia Network Voyager for Ipso 4.0 Reference Guide 409 Ebgp Multihop Support 410 Nokia Network Voyager for Ipso 4.0 Reference Guide 411 TCP MD5 AuthenticationRoute Dampening BGP Support for Virtual IP for Vrrp 412 Tables BGP Support for IP ClusteringBGP Memory Requirements Nokia Network Voyager for Ipso 4.0 Reference Guide 413 414 Memory SizeExample Nokia Network Voyager for Ipso 4.0 Reference Guide 415 To configure Ibgp on Nokia Platform aBGP Neighbors Example 416 To configure Ibgp on Nokia Platform BTo configure Ibgp on Nokia Platform C To configure Ebgp on Nokia Platform D To configure Ebgp on Nokia Platform aTo configure Ebgp on Nokia Platform C Nokia Network Voyager for Ipso 4.0 Reference Guide 417 Verification To configuring Ebgp on Nokia Platform EPath Filtering Based on Communities Example 418 Nokia Network Voyager for Ipso 4.0 Reference Guide 419 To configure Default MED for Nokia Platform DBGP Multi Exit Discriminator Example To configure MED Values for all peers of AS200 420 Changing the Local Preference Value Example Nokia Network Voyager for Ipso 4.0 Reference Guide 421 To set the local preference value for an Ibgp peer To configure an Ibgp peer for Nokia Platform BTo configure the static routes required for an Ibgp session 422 Nokia Network Voyager for Ipso 4.0 Reference Guide 423 Configuring Nokia Platform CBGP Confederation Example Configuring Platform B 424 Nokia Network Voyager for Ipso 4.0 Reference Guide 425 426 Configuring Platform B as Route ReflectorRoute Reflector Example Nokia Network Voyager for Ipso 4.0 Reference Guide 427 Configuring Platform C as Ibgp Peer of Platform BConfiguring Platform D as Ibgp Peer of Platform B BGP Community Example Configuring BGP Route Inbound Policy on Platform BConfiguring Redistribution of BGP Routes on Platform B 428 Follow the steps in the Redistributing Ospf to BGP Example Nokia Network Voyager for Ipso 4.0 Reference Guide 429 Configuring a Static Route on Platform a Configuring a Loopback Address on Platform aConfiguring a Loopback Address on Platform B Ebgp Load Balancing Example Scenario #1 Configuring an Ebgp Peer on Platform B Configuring a Static Route on Platform BConfiguring an Ebgp Peer on Platform a Nokia Network Voyager for Ipso 4.0 Reference Guide 431 Ebgp Load Balancing Example Scenario #2 Configuring Ospf on Platform aConfiguring Ospf on Platform B 432 Adjusting BGP Timers Example Nokia Network Voyager for Ipso 4.0 Reference Guide 433 Configuring BGP Route Redistribution on Nokia Platform B TCP MD5 Authentication ExampleConfiguring TCP MD5 Authentication on Nokia Platform a 434 Nokia Network Voyager for Ipso 4.0 Reference Guide 435 Field Default value Units of measurementBGP Route Dampening Example 436 BGP Path SelectionBGP-4++ Example To configure configure a BGP4 session over IPv6 transport Nokia Network Voyager for Ipso 4.0 Reference Guide 437 Route Redistribution 438 Nokia Network Voyager for Ipso 4.0 Reference Guide 439 BGP Route Redistribution Example To configure BGP route redistribution on Nokia Platform DRedistributing Routes to RIP and Igrp To redistribute a single route Redistributing RIP to Ospf Example Nokia Network Voyager for Ipso 4.0 Reference Guide 441 442 Redistributing Ospf to BGP Example Nokia Network Voyager for Ipso 4.0 Reference Guide 443 444 Redistributing Routes with OspfTo redistribute Ospf to BGP through Nokia Platform a Nokia Network Voyager for Ipso 4.0 Reference Guide 445 To configure IGP inbound filtersInbound Route Filters BGP Route Inbound Policy Example 446 Nokia Network Voyager for Ipso 4.0 Reference Guide 447 448 BGP AS Path Filtering ExampleAspath Regular Expressions Traffic Shaping Description Traffic Management OverviewPacket Filtering Description Nokia Network Voyager for Ipso 4.0 Reference Guide 449 450 Configuring Access Control ListsTraffic Queuing Description Nokia Network Voyager for Ipso 4.0 Reference Guide 451 To create or delete an ACLTo apply or remove an ACL to or from an interface Configuring ACL Rules 452 Nokia Network Voyager for Ipso 4.0 Reference Guide 453 Modifying a RuleTo add a new rule to an ACL ACL Rule Attributes 454 Configuring Aggregation Classes Nokia Network Voyager for Ipso 4.0 Reference Guide 455 456 To create an Aggregation ClassTo associate an aggregation class with a rule Configuring Queue Classes Nokia Network Voyager for Ipso 4.0 Reference Guide 457 458 To set or modify queue class configuration valuesTo create or delete a queue class Create a QoS descriptor Configuring ATM QoSTo associate a queue class with an interface Nokia Network Voyager for Ipso 4.0 Reference Guide 459 460 To delete an ATM QoS descriptorTo dissociate an ATM QoS Descriptor from an existing PVC Configuring Common Open Policy Server Nokia Network Voyager for Ipso 4.0 Reference Guide 461 462 Configuring a Cops Client ID and Policy Decision PointConfiguring Security Parameters for a Cops Client ID Assigning Roles to Specific Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide 463 Deleting a Client ID To disable and delete a Client IDActivating and Deactivating the Cops Client 464 Example Rate Shaping Nokia Network Voyager for Ipso 4.0 Reference Guide 465 Example Expedited Forwarding 466 Nokia Network Voyager for Ipso 4.0 Reference Guide 467 To test the configuration 468 BOOTP/DHCP Relay Nokia Network Voyager for Ipso 4.0 Reference Guide 469 Bootp configuration parameters Configuring BOOTP/DHCP RelayTo enable Bootp relay on an Interface 470 IP Broadcast Helper To disable Bootp relay on an interfaceIP Broadcast helper configuration parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 471 To configure IP broadcast helper 472 Nokia Network Voyager for Ipso 4.0 Reference Guide 473 Configuring Router DiscoveryRouter Discovery Overview 474 To enable router discovery servicesRouter discover configuration parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 475 To disable router discovery servicesNetwork Time Protocol NTP 476 Configuring NTPTo configure NTP Nokia Network Voyager for Ipso 4.0 Reference Guide 477 478 Nokia Network Voyager for Ipso 4.0 Reference Guide 479 Viewing System Utilization StatisticsCPU-Memory Live Utilization 480 Disk and Swap SpaceMonitoring Process Utilization Process Description Ipso Process ManagementNokia Network Voyager for Ipso 4.0 Reference Guide 481 482 Generating Monitor ReportsReports Report Description Nokia Network Voyager for Ipso 4.0 Reference Guide 483 Monitoring System HealthTo display reports Monitoring System Logs 484 Viewing Cluster Status and Members Nokia Network Voyager for Ipso 4.0 Reference Guide 485 Displaying the Kernel Forwarding Table Displaying Route SettingsViewing Routing Protocol Information 486 Nokia Network Voyager for Ipso 4.0 Reference Guide 487 Displaying Interface SettingsHardware Monitoring To display routing daemon status using iclid Using the iclid ToolIclid Commands 488 Nokia Network Voyager for Ipso 4.0 Reference Guide 489 490 Nokia Network Voyager for Ipso 4.0 Reference Guide 491 492 Nokia Network Voyager for Ipso 4.0 Reference Guide 493 Preventing Full Log Buffers and Related Console Messages 494 Nokia Network Voyager for Ipso 4.0 Reference Guide 495 If you are using FireWall-1If you are using FireWall-1 NG 496 Index Nokia Network Voyager for Ipso 4.0 Reference Guide Index Bios CPU DSA Http Httpd Managing NGX Nssa RIP RSA TACACS+ Deleting virtual router Index