Manuals
/
Nokia
/
Cell Phone
/
Cell Phone
Nokia
IPSO 4.0
manual
266
Models:
IPSO 4.0
1
266
510
510
Download
510 pages
5.58 Kb
263
264
265
266
267
268
269
270
<
>
Troubleshooting
Install
Error codes
Password
Preference Default
Configuring RIP Timers
Interface Status Indicators
Cluster Administrator Users
Configuring System Functions
Managing Security and Access
Page 266
Image 266
6
266
Nokia Network Voyager for IPSO 4.0 Reference Guide
Page 265
Page 267
Page 266
Image 266
Page 265
Page 267
Contents
Nokia Network Voyager For Ipso Reference Guide
Nokia Network Voyager for Ipso 4.0 Reference Guide
Restricted Rights Legend
Https//support.nokia.com Tac.support@nokia.com
Nokia Network Voyager for Ipso 4.0 Reference Guide
Contents
Nokia Network Voyager Ipso 4.0 Reference Guide
Configuring System Functions
Nokia Network Voyager Ipso 4.0 Reference Guide
Configuring Clustering
Virtual Router Redundancy Protocol Vrrp
Nokia Network Voyager Ipso 4.0 Reference Guide
Configuring Snmp
Configuring IPv6
Managing Security and Access
Configuring Routing
Nokia Network Voyager Ipso 4.0 Reference Guide
Nokia Network Voyager Ipso 4.0 Reference Guide
Configuring Traffic Management
Configuring Router Services
Monitoring System Configuration and Hardware
Index
About the Nokia Network Voyager Reference Guide
About the Nokia Network Voyager Reference Guide
Text Conventions
Conventions This Guide Uses
Text Conventions
Convention Description
Related Documentation
Menu Items
Software Overview
Nokia Network Voyager for Ipso 4.0 Reference Guide
To open Nokia Network Voyager
Logging In to Network Voyager
Logging Off
To log in without exclusive configuration lock
Obtaining a Configuration Lock
To log in with exclusive configuration lock
To override a configuration lock
Reloading Pages
Accessing Documentation and Help
Navigating in Network Voyager
To clear the memory and disk cache
„ Nokia support site https//support.nokia.com
To open a new window to view help
Viewing Hardware and Software Information for Your System
To view the asset management summary
Configuring Interfaces
Interface Overview
Type Prefix
Configuring Network Devices
IP2250 Management Ports
Configuring IP Addresses
Physical Interface Logical Interface
Interface Status
Indicator Description
Configuring Tunnel Interfaces
Interface Status Indicators
Ethernet Interfaces
Configuring Ethernet Interfaces
Physical Interface Configuration Parameters
Parameter Description
To configure an Ethernet interface
Link Aggregation
Managing Link Aggregation Using Snmp
Configuring Switches for Link Aggregation
Firewall Synchronization Traffic
Static Link Aggregation
Link Aggregation on the IP2250
Configuring the Remaining Management Ports
Production Traffic ADP I/O Ports Only
To set up link aggregation in Network Voyager
Configuring Link Aggregation
Physical Interface Configuration
To physically configure the interfaces you will aggregate
Group Configuration
To configure link aggregation groups
Deleting Aggregation Groups
Logical Configuration
Gigabit Ethernet Interfaces
Gigabit Ethernet Interface Parameters
To configure a Gigabit Ethernet interface
MTU
Point-to-Point Over Ethernet
Configuring PPPoE
To configure PPPoE
Nokia Network Voyager for Ipso 4.0 Reference Guide
To create PPPoE logical interfaces
To change configuration profiles
To delete configuration profiles
To delete PPPoE logical interfaces
Configuring MSS Clamping
Virtual LAN Interfaces
To configure a Vlan Interface
To delete a Vlan Interface
Vlan Example Topology
To define the maximum number of VLANs
To configure an Fddi Interface
Fddi Interfaces
To change the duplex setting of an Fddi interface
To change the IP address of an Fddi interface
To configure an Isdn physical interface
Isdn Interfaces
To configure an Isdn logical interface to place calls
Nokia Network Voyager for Ipso 4.0 Reference Guide
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure an Isdn interface to receive calls
Configuring Calling Line-Identification Screening
To add an incoming number
To configure an interface to place and receive calls
To remove an incoming number
Dial-on-Demand Routing DDR Lists
To add a new rule to a DDR list
To create a DDR list
To delete a DDR list
To apply or remove a DDR list to/from an interface
Example DDR List
To modify a rule
Isdn Network Configuration Example
To configure the IP330 to place an outgoing call
To configure the IP650 to handle an incoming call
Sample Call Traces
Trace for connecting a call from the Nokia IP330 is
To set level of messages logged
Isdn Troubleshooting
Logging
To view the message log
Tracing
Troubleshooting Cause Codes
To trace Isdn traffic using tcpdump
Isdn Cause Code Fields
Cause Values
Cause Cause Description Diagnostics
Isdn Cause Values
See Isdn Cause Values table
Information-element identifiers is missing
Isdn Bearer-Capable Values
Value Description
To configure a Token Ring interface
Token Ring Interfaces
To deactivate a Token Ring interface
To change a Token Ring interface
Token Ring Example
Fddi
To configure an ATM interface
Point-to-Point Link over ATM
To change the VPI/VCI of an ATM interface
To change the IP Address of an ATM interface
To change the IP MTU of an ATM interface
ATM Example
Fddi
IP over ATM IPoA
To configure the ATM interface on Nokia Platform a
To configure an ATM logical IP subnet LIS interface
To change the VPI/VCIs of an ATM LIS Interface
To change the IP Address of an ATM LIS interface
IPoA Example
ATM
To configure a serial interface for Cisco Hdlc
Serial V.35 and X.21 Interfaces
To configure a Serial Interface for PPP
To configure a serial interface for frame relay
Nokia Network Voyager for Ipso 4.0 Reference Guide
Serial Interface Example
T1with Built-In CSU/DSU Interfaces
To configure the serial interface on Nokia Platform a
To configure a T1 Interface for Cisco Hdlc
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure a T1 Interface for PPP
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure a T1 interface for frame relay
Nokia Network Voyager for Ipso 4.0 Reference Guide
T1 Interface Example
To configure the serial interface on Nokia Platform a
To configure an E1 interface for Cisco Hdlc
E1 with Built-In CSU/DSU Interfaces
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure an E1 interface for PPP
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure an E1 interface for frame relay
100
Nokia Network Voyager for Ipso 4.0 Reference Guide 101
102
Nokia Network Voyager for Ipso 4.0 Reference Guide 103
To configure an Hssi interface for Cisco Hdlc
Hssi Interfaces
To configure an Hssi interface for PPP
104
To configure an Hssi interface for frame relay
Nokia Network Voyager for Ipso 4.0 Reference Guide 105
106
Unnumbered Interfaces
Configuring Unnumbered Interfaces
To configure an unnumbered interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 107
To change an unnumbered interface to a numbered interface
108
To configure a static route over an unnumbered interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 109
110
Configuring Ospf over Unnumbered Interface
Ospf over Unnumbered Interfaces Using Virtual Links
Nokia Network Voyager for Ipso 4.0 Reference Guide 111
Cisco Hdlc Protocol
To change the keepalive interval for Cisco Hdlc
To change the keepalive interval in PPP
Point-to-Point Protocol
To change the IP address in Cisco Hdlc
112
Nokia Network Voyager for Ipso 4.0 Reference Guide 113
To change the keepalive maximum failures in PPP
To change the IP address in PPP
To change the Dlci in frame relay
Frame Relay Protocol
To change the keepalive interval in frame relay
114
Nokia Network Voyager for Ipso 4.0 Reference Guide 115
To change the LMI parameters in frame relay
To change the interface type in frame relay
To remove a frame relay interface
To change the active status monitor setting in frame relay
To change the IP address in frame relay
116
To change the IP Address of a loopback interface
Loopback Interfaces
To add an IP Address to a Loopback Interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 117
To create a GRE tunnel
Configuring GRE Tunnels
GRE Tunnels
118
Nokia Network Voyager for Ipso 4.0 Reference Guide 119
To change IP TOS value of a GRE tunnel
120
GRE Tunnel Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 121
122
High Availability GRE Tunnels
HA GRE Tunnel Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 123
124
Nokia Network Voyager for Ipso 4.0 Reference Guide 125
Dvmrp Tunnels
To create a Dvmrp tunnel
126
Dvmrp Tunnel Example
To change the local or remote addresses of a Dvmrp tunnel
Nokia Network Voyager for Ipso 4.0 Reference Guide 127
128
ARP Table Entries
To change ARP global parameters
Nokia Network Voyager for Ipso 4.0 Reference Guide 129
To add a static ARP entry
To add a proxy ARP entry
Configuring ARP for ATM Interfaces
To view and delete dynamic ATM ARP entries
To add a static ATM ARP entry
To delete a static ATM ARP entry
Nokia Network Voyager for Ipso 4.0 Reference Guide 131
132
Transparent Mode
Limitations
Transparent Mode Processing Details
Nokia Network Voyager for Ipso 4.0 Reference Guide 133
Configuring Transparent Mode in VPN Environments
134
Example of Transparent Mode
Nokia Network Voyager for Ipso 4.0 Reference Guide 135
Configuring Transparent Mode
136
To delete a transparent mode group
Creating and Deleting Transparent Mode Groups
To create a transparent mode group
Nokia Network Voyager for Ipso 4.0 Reference Guide 137
138
Enabling or Disabling a Transparent Mode Group
To enable or disable a transparent mode group
Enabling or Disabling Vrrp for a Transparent Mode Group
Monitoring Transparent Mode Groups
Transparent Mode and Check Point NGX
Configuring Antispoofing
Routing Traffic through the VTI
Virtual Tunnel Interfaces Fwvpn for Route-Based VPN
Unnumbered VTIs
140
Nokia Network Voyager for Ipso 4.0 Reference Guide 141
To create a virtual tunnel interface
Creating Virtual Tunnel Interfaces
Vrrp Support
To create the VPN community
Nokia Network Voyager for Ipso 4.0 Reference Guide 143
To create the virtual tunnel interface
144
Configuring Dhcp
Nokia Network Voyager for Ipso 4.0 Reference Guide 145
To configure the Dhcp client interface
Configuring Dhcp Client Interfaces
Dhcp Client Configuration
To enable the Dhcp client process
Nokia Network Voyager for Ipso 4.0 Reference Guide 147
Configuring the Dhcp Server
To configure the Dhcp server process
148
Dhcp Server Configuration
To enable the Dhcp server process
To change the Dhcp service
Changing Dhcp Service
To disable the Dhcp server process
Adding Dhcp Address Pools
Assigning a Fixed-IP Address to a Client
To enable and existing IP address pool
Enabling or Disabling Dhcp Address Pools
To assign a fixed-IP address to a client
Creating Dhcp Client Templates
Nokia Network Voyager for Ipso 4.0 Reference Guide 151
152
To configure Dynamic Domain Name System Ddns
Configuring Dynamic Domain Name System Service
Configuring Dynamic Domain Name System Zones
Nokia Network Voyager for Ipso 4.0 Reference Guide 153
To configure DNS
Configuring the Domain Name Service
Configuring Disk Mirroring
To create a mirror set
Nokia Network Voyager for Ipso 4.0 Reference Guide 155
Using an Optional Disk Flash-Based Systems Only
To delete a mirror set
Mail Relay
To install and configure PC card flash memory
To configure the system to store log files on the PC card
To remove an optional disk
To configure mail relay for your firewall
Configuring Mail Relay
To configure failure notification
System Failure Notification
To send mail from the firewall
Setting the System Time
Sending Mail
158
To add a static host entry
Configuring Host Addresses
To set system time once
Nokia Network Voyager for Ipso 4.0 Reference Guide 159
Accepting Log Messages
Configuring System Logging
Configuring Logging on Disk-Based Systems
Logging to a Remote System
Nokia Network Voyager for Ipso 4.0 Reference Guide 161
Configuring Logging on Flash-Based Systems
To send syslog messages to a remote system
Configuring Logging to Remote Log Servers
162
Nokia Network Voyager for Ipso 4.0 Reference Guide 163
Configuring Audit Logs
Configuring Logging to an Optional Disk
To set the system configuration audit log
164
Remote Core Dump Server on Flash-Based Systems
Nokia Network Voyager for Ipso 4.0 Reference Guide 165
To change the hostname
Managing Configuration Sets
Changing the Hostname
166
To delete unwanted configuration database files
To create a factory default configuration file
To switch a currently active database
Scheduling Jobs
168
Backing Up and Restoring Files
To delete scheduled jobs
To delete local backup files
Creating Backup Files
To create a backup file manually
Nokia Network Voyager for Ipso 4.0 Reference Guide 169
To configure scheduled backups
Transferring Backup Files
Configuring Automatic Transfers
To cancel a regularly scheduled backup
Nokia Network Voyager for Ipso 4.0 Reference Guide 171
Transferring Backup Files Manually
To manually transfer archive files to a remote server
172
Restoring Files from Locally Stored Backup Files
To restore files
Deleting Images
Managing Nokia Ipso Images
Changing Current Image
To select a new current image
174
Installing New Images
To delete an Nokia Ipso image
Nokia Network Voyager for Ipso 4.0 Reference Guide 175
Testing a New Image
To test an image before activating it
Downgrading Nokia Ipso Images
Rebooting a Cluster
Upgrading Nokia Ipso Images for a Cluster
176
Configuring Monitor Reports
Nokia Network Voyager for Ipso 4.0 Reference Guide 177
Restrictions for Flash-Based Platforms
Installing and Enabling Packages
Managing Packages
Monitor Report Parameters
To install a package
Nokia Network Voyager for Ipso 4.0 Reference Guide 179
To enable or disable a package
Advanced System Tuning
Tuning the TCP/IP Stack
To delete a package
Nokia Network Voyager for Ipso 4.0 Reference Guide 181
Router Alert IP Option
To set the TCP MSS
182
Nokia Network Voyager for Ipso 4.0 Reference Guide 183
Vrrp Overview
How Vrrp Works
Simple Vrrp Configuration
184
Vrrp Configuration with Internal and External VRIDs
Vrrp Configuration with Simultaneous Backup
186
Configuring Vrrp
Understanding Monitored-Circuit Vrrp
Nokia Network Voyager for Ipso 4.0 Reference Guide 187
Selecting Configuration Parameters
Priority
188
Authentication
Hello Interval
Nokia Network Voyager for Ipso 4.0 Reference Guide 189
Backup Address
Priority Delta
Vmac Mode
190
Before you Begin
Global Vrrp Settings
Vrrp Configuration Parameters
Nokia Network Voyager for Ipso 4.0 Reference Guide 191
Configuring Monitored-Circuit Vrrp
192
To add a virtual router
Nokia Network Voyager for Ipso 4.0 Reference Guide 193
To delete a virtual router
Configuring Monitored-Circuit Vrrp using the Full Method
To change the configuration of an existing virtual router
194
Additional Vrrp Parameters Used in Full Method
Nokia Network Voyager for Ipso 4.0 Reference Guide 195
196
Configuring VRRPv2
To add or back up a virtual router using VRRPv2
Configuring Check Point NGX for Vrrp
Nokia Network Voyager for Ipso 4.0 Reference Guide 197
Configure settings under the 3rd party configuration tab
198
Nokia Network Voyager for Ipso 4.0 Reference Guide 199
Configuring Vrrp Rules for Check Point NGX
Configuration Rule for Check Point NGX FP1
Source Destination Service Action
Configuration Rules for Check Point NGX FP2 and Later
Configuring Rules if You Are Using Ospf or Dvmrp
200
Link Aggregation IP2250 Systems Only
CLI commands for Vrrp
Monitoring Vrrp
State
202
Location
Stats
To enable or disable Monitor Firewall state
Troubleshooting Vrrp
General Configuration Considerations
To enable traces for Vrrp
204
Access Control Lists
Firewall Policies
VRRPv2 in Switched Environments
Switched Environments
Monitored-Circuit Vrrp in Switched Environments
Nokia Network Voyager for Ipso 4.0 Reference Guide 205
206
Nokia Network Voyager for Ipso 4.0 Reference Guide 207
Using Flash-Based Platforms
IP Clustering Description
Example Cluster
208
Cluster Management
Nokia Network Voyager for Ipso 4.0 Reference Guide 209
Cluster Terminology
210
Cluster member a cluster node that is not the master
Nokia Network Voyager for Ipso 4.0 Reference Guide 211
Clustering Modes
212
Nokia Network Voyager for Ipso 4.0 Reference Guide 213
214
Considerations for Clustering
Network Environment
Other Considerations
Nokia Network Voyager for Ipso 4.0 Reference Guide 215
Clustering IP2250 Platforms
216
Upgrading Ipso in a Cluster
Nokia Network Voyager for Ipso 4.0 Reference Guide 217
Upgrading from Ipso
For All Upgrades
Upgrading from Ipso 3.7 or Later
218
Enabling Cluster Management
Nokia Network Voyager for Ipso 4.0 Reference Guide 219
To create and configure a cluster
Creating and Configuring a Cluster
Configuration Overview
Creating a Cluster
Nokia Network Voyager for Ipso 4.0 Reference Guide 221
Selecting the Cluster Mode
Configuring the Work Assignment Method
222
Configuring an Interface
To include an interface in the cluster
Nokia Network Voyager for Ipso 4.0 Reference Guide 223
Configuring Firewall Monitoring
Supporting Non-Check Point Gateways and Clients
224
Configuring VPN Tunnels
Using IP Pools
Using IP Pools When Only Check Point Gateways Are Involved
Nokia Network Voyager for Ipso 4.0 Reference Guide 225
226
Configuring Join-Time Shared Features
Configuring IP pools in Cluster Voyager
Nokia Network Voyager for Ipso 4.0 Reference Guide 227
What is Sharable?
What if Settings Conflict?
Configuring Features for Sharing
228
After You Create a Cluster
Adding a Node to a Cluster
Making the Cluster Active
Nokia Network Voyager for Ipso 4.0 Reference Guide 229
Recommended Procedure
230
Nokia Network Voyager for Ipso 4.0 Reference Guide 231
Managing a Cluster
Joining a System to a Cluster
232
Using Cluster Voyager
To start Cluster Voyager
Nokia Network Voyager for Ipso 4.0 Reference Guide 233
If You Forget the cadmin Password
Cluster Administrator Users
Monitoring a Cluster
Configuring the Failure Interval
Configuring the Performance Rating
234
Managing Join-Time Shared Features
Nokia Network Voyager for Ipso 4.0 Reference Guide 235
Installing Ipso Images
236
Nokia Network Voyager for Ipso 4.0 Reference Guide 237
Removing a Node from a Cluster
238
Synchronizing the Time on Cluster Nodes
Changing Cluster Interface Configurations
Deleting a Cluster Configuration
Assigning the Time Zone
240
Configuring NTP
NTP Server Outside the Cluster
Nokia Network Voyager for Ipso 4.0 Reference Guide 241
Configuring NGX for Clustering
Using the Master Node as the NTP Server
242
Clustering Example Three Nodes
Nokia Network Voyager for Ipso 4.0 Reference Guide 243
Configuring the Cluster in Voyager
244
Configuring the Internal and External Routers
Nokia Network Voyager for Ipso 4.0 Reference Guide 245
Clustering Example With Non-Check Point VPN
246
Nokia Network Voyager for Ipso 4.0 Reference Guide 247
248
Snmp Overview
Nokia Network Voyager for Ipso 4.0 Reference Guide 249
250
Source Function
Nokia Network Voyager for Ipso 4.0 Reference Guide 251
UDP-MIB
Snmp Proxy Support for Check Point MIB
252
Nokia Network Voyager for Ipso 4.0 Reference Guide 253
Using the Check Point MIB
Using cpsnmpstart
254
To enable or disable Snmp
Enabling Snmp and Selecting the Version
To set an Snmp agent address
Configuring the System for Snmp
Setting an Agent Address
Nokia Network Voyager for Ipso 4.0 Reference Guide 255
256
Configuring Traps
Types of Snmp Traps
Type of Trap Description
Nokia Network Voyager for Ipso 4.0 Reference Guide 257
258
Enabling or Disabling Trap Types
Configuring Trap Receivers
Setting the Trap PDU Agent Address
To configure location and contact information
Interpreting Error Messages
Configuring Location and Contact Information
Error status code Meaning
Variable-bindings Element Description
GetRequest
Nokia Network Voyager for Ipso 4.0 Reference Guide 261
Value Field Set Description
GetBulkRequest
Configuring SNMPv3
GetNextRequest
262
Security Related Options Used in Request Messages
Request Messages
Managing Snmp Users
Nokia Network Voyager for Ipso 4.0 Reference Guide 263
To add an Snmp user
264
To delete a USM user
Nokia Network Voyager for Ipso 4.0 Reference Guide 265
266
IPv6 Overview
Nokia Network Voyager for Ipso 4.0 Reference Guide 267
268
To configure IPv6 logical interfaces
Interfaces
To delete an IPv6 address
To disable IPv6 on an interface
To configure neighbor discovery
Nokia Network Voyager for Ipso 4.0 Reference Guide 269
IPv6 and IPv4 Compatibility
Configuring IPv6 in IPv4 Tunnels
To configure IPv6 in IPv4 tunnels
270
To configure IPv6 to IPv4
Configuring IPv6 to IPv4
Configuring IPv6 over IPv4
To configure IPv6 over IPv4
To configure IPv4 in IPv6 tunnels
Configuring IPv4 in IPv6 Tunnels
Configuring an IPv6 Default or Static Route
To configure an IPv6 default or static route
Configuring RIPng
Routing Configuration
Configuring OSPFv3
Creating IPv6 Aggregate Routes
Redistributing Aggregate Routes in RIPng
Creating Redistributed Routes
Redistributing Static Routes into RIPng
274
Redistributing Interface Routes into RIPng
Configuring ICMPv6 Router Discovery
Router Discovery
Nokia Network Voyager for Ipso 4.0 Reference Guide 275
276
Nokia Network Voyager for Ipso 4.0 Reference Guide 277
Configuring Vrrp for IPv6
Vrrp for IPv6
Creating a Virtual Router for an IPv6 Interface Using VRRPv3
278
Nokia Network Voyager for Ipso 4.0 Reference Guide 279
280
Setting a Virtual MAC Address for a Virtual Router
To set the virtual MAC address
Nokia Network Voyager for Ipso 4.0 Reference Guide 281
Changing the IP Address List of a Virtual Router in VRRPv3
Removing a Virtual Router in VRRPv3
Creating a Virtual Router in Monitored Circuit Mode for IPv6
282
Nokia Network Voyager for Ipso 4.0 Reference Guide 283
Traffic Management
284
Nokia Network Voyager for Ipso 4.0 Reference Guide 285
Security and Access Configuration
To enable FTP, TFTP, or Telnet access
286
Nokia Network Voyager for Ipso 4.0 Reference Guide 287
Managing Passwords
To change the current user’s password
288
To change another user’s password
Managing User Accounts
Nokia Network Voyager for Ipso 4.0 Reference Guide 289
Adding and Deleting Users
User Account Attributes
Attribute Description
To remove a user
Managing and Using S/Key
To add a user
290
To use the S/Key
Using S/Key
To configure S/Key
Nokia Network Voyager for Ipso 4.0 Reference Guide 291
Disabling S/Key
To disable S/Key
Managing Groups
292
Nokia Network Voyager for Ipso 4.0 Reference Guide 293
Role-Based Administration
To add or edit a group
294
Managing Roles
To add or edit a role
To delete a role
Assigning Roles and Access Mechanisms to Users
To assign roles and access mechanisms to users
Nokia Network Voyager for Ipso 4.0 Reference Guide 295
Creating Cluster Administrator Users
296
Network Services
Configuring Network Access and Services
Network Access Configuration Options
Service Description
Modem Configuration Parameters
Configuring a Modem on COM2, COM3, or COM4
To enable network access options and services
298
To configure a modem on COM2, COM3, or COM4
Nokia Network Voyager for Ipso 4.0 Reference Guide 299
Country Codes for Ositech Five of Clubs Card II
Configuring Nokia Network Voyager Access
Country Codes for Ositech Five of Clubs Card
300
Nokia Network Voyager for Ipso 4.0 Reference Guide 301
Configuring Basic Nokia Network Voyager Options
To configure Web access for Nokia Network Voyager
To generate a certificate and its associated private key
Generating and Installing SSL/TLS Certificates
Generating an SSL/TLS Certificate and Keys
302
Nokia Network Voyager for Ipso 4.0 Reference Guide 303
Installing the SSL/TLS Certificate
To install the certificate and its associated private key
304
Troubleshooting SSL/TLS Configuration
Secure Shell SSH
Nokia Network Voyager for Ipso 4.0 Reference Guide 305
Initial SSH Configuration
To configure SSH
306
Configuring Advanced Options for SSH
To configure advanced options
Nokia Network Voyager for Ipso 4.0 Reference Guide 307
Configuring Secure Shell Authorized Keys
308
Changing Secure Shell Key Pairs
To configure authorized keys
To configure key pairs
Nokia Network Voyager for Ipso 4.0 Reference Guide 309
310
Managing User RSA and DSA Identities
To manage user identities
To tunnel Http over SSH
Network Voyager Session Management
Tunneling Http Over SSH
Nokia Network Voyager for Ipso 4.0 Reference Guide 311
To set the session timeout interval
Configuring Session Timeouts
To enable or disable session management
Enabling Enabling or Disabling Session Management
To create an AAA configuration
Authentication, Authorization, and Accounting AAA
Creating an AAA Configuration
Nokia Network Voyager for Ipso 4.0 Reference Guide 313
Creating an Authentication Profile
Creating a Service Module Entry
Creating a Service Profile
Type Module Description
Authentication Profile Types
Nokia Network Voyager for Ipso 4.0 Reference Guide 315
316
Creating an Accounting Profile
To create an account profile
317
318
Creating a Service Module Example
Profile Controls
Control Description
Nokia Network Voyager for Ipso 4.0 Reference Guide 319
Configuring Radius
Service Auth. Mgmt Acct. Mgmt Session Mgmt
320
Configuring TACACS+
Nokia Network Voyager for Ipso 4.0 Reference Guide 321
322
Deleting an AAA Authentication Server Configuration
To delete an authentication server
To change an AAA configuration
Changing an AAA Configuration
Changing the Service Profile
To add an authentication profile
324
Creating a Stacked Service Module
Service Authentication Management
To add an accounting profile
Changing a Service Module Configuration
Changing an Authentication Profile Configuration
To add a session profile
326
Changing an Accounting Profile Configuration
Changing a Session Profile Configuration
To delete an AAA configuration
Deleting an AAA Configuration
Deleting an Item in a Service Profile Entry
Encryption Acceleration
Enabling Encryption Accelerator Cards
To enable the card for a Check Point VPN
IPSec Tunnels Ipso Implementation
Monitoring Cryptographic Acceleration
Transport and Tunnel Modes
Nokia Network Voyager for Ipso 4.0 Reference Guide 329
330
Building VPN on ESP
Protocol Negotiation and Key Management
Nokia Network Voyager for Ipso 4.0 Reference Guide 331
IPSec RFCs
Using PKI
IPSec Implementation in Ipso
332
Miscellaneous Tunnel Requirements
Nokia Network Voyager for Ipso 4.0 Reference Guide 333
Platform Support
Phase 1 Configuration
IPSec Parameters
334
Creating an IPSec Policy
Choosing IPv4 or IPv6 General Configuration
To chose IPv4 or IPv6 general configuration pages
Nokia Network Voyager for Ipso 4.0 Reference Guide 335
To select a trusted CA certificate
Proposal and Filters
Trusted CA Certificates
336
Device Certificates
Nokia Network Voyager for Ipso 4.0 Reference Guide 337
To enroll and install a device certificate
338
Advanced IPSec
Nokia Network Voyager for Ipso 4.0 Reference Guide 339
340
Putting It All Together
To complete creating an IPSec policy
Nokia Network Voyager for Ipso 4.0 Reference Guide 341
Creating an IPSec Tunnel Rule
To create an IPSec tunnel rule
342
Transport Rule
To create a transport rule
Nokia Network Voyager for Ipso 4.0 Reference Guide 343
344
To configure Nokia Platform
IPSec Tunnel Rule Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 345
IPSec Transport Rule Example
Configure Nokia Platform
To configure Nokia Platform 1 Ipso
346
Nokia Network Voyager for Ipso 4.0 Reference Guide 347
To remove an IPSec tunnel
Configure PC1
Removing an IPSec Tunnel
348
Nokia Network Voyager for Ipso 4.0 Reference Guide 349
Miscellaneous Security Settings
To set TCP flag combinations
350
Nokia Network Voyager for Ipso 4.0 Reference Guide 351
Routing Overview
Routing Protocols
RIP
352
Route Maps
Nokia Network Voyager for Ipso 4.0 Reference Guide 353
Types of Areas
354
Nokia Network Voyager for Ipso 4.0 Reference Guide 355
Area Border Routers
High Availability Support for Ospf
356
Configuring Ospf
Clustering
Stub Area Parameters
Configuring Ospf Areas and Global Settings
Ospf Area Configuration Parameters
Nokia Network Voyager for Ipso 4.0 Reference Guide 357
Nssa Not So Stubby Area Parameters
358
To configure a virtual link
Configuring Virtual Links
To configure Ospf
Nokia Network Voyager for Ipso 4.0 Reference Guide 359
Configuring Global Settings
360
Global Settings for Ospf
Nokia Network Voyager for Ipso 4.0 Reference Guide 361
362
Configuring Ospf Interfaces
Configuration Parameters for Ospf Interfaces
To configure an Ospf interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 363
Configuring Ospf Example
364
Network Mask
Nokia Network Voyager for Ipso 4.0 Reference Guide 365
366
Virtual IP Address Support for Vrrp
Auto Summarization
RIP 1 Configuration Options Available from Network Voyager
Configuring RIP
To configure RIP
Nokia Network Voyager for Ipso 4.0 Reference Guide 367
Configuring RIP Timers
368
Enabling RIP 1 on an Interface
Configuring Auto-Summarization
RIP Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 369
Enabling RIP 2 on an Interface
370
PIM Dense-Mode
Configuring Virtual IP Support for Vrrp
PIM Support for IP Clustering
Nokia Network Voyager for Ipso 4.0 Reference Guide 371
PIM Sparse-Mode
372
PIM and Check Point SecureXL
Configuring Dense-Mode PIM
Configuring Check Point VPN-1 Pro/Express
Nokia Network Voyager for Ipso 4.0 Reference Guide 373
Disabling PIM
374
Setting Advanced Options for Dense-Mode PIM Optional
Nokia Network Voyager for Ipso 4.0 Reference Guide 375
Configuring Sparse-Mode PIM
376
Configuring High-Availability Mode
Nokia Network Voyager for Ipso 4.0 Reference Guide 377
378
Nokia Network Voyager for Ipso 4.0 Reference Guide 379
Configuring a PIM-SM Static Rendezvous Point
380
Setting Advanced Options for Sparse-Mode PIM Optional
Nokia Network Voyager for Ipso 4.0 Reference Guide 381
382
Nokia Network Voyager for Ipso 4.0 Reference Guide 383
Command Shows
Debugging PIM
To log information about errors and events
384
Igrp
Nokia Network Voyager for Ipso 4.0 Reference Guide 385
386
Generation of Exterior Routes
Nokia Network Voyager for Ipso 4.0 Reference Guide 387
Igrp Aggregation
Configuring Igrp
Aliased Interfaces
388
Nokia Network Voyager for Ipso 4.0 Reference Guide 389
To enable Igrp on an interface
Igrp Example
Dvmrp
390
Nokia Network Voyager for Ipso 4.0 Reference Guide 391
Configuring Dvmrp
Configuring Dvmrp Timers
Igmp
392
Configuring Igmp
Nokia Network Voyager for Ipso 4.0 Reference Guide 393
Static Routes
394
Nokia Network Voyager for Ipso 4.0 Reference Guide 395
To configure a default or static route
To setting the rank for static routes
To add and configure many static routes at the same time
396
Adding and Managing Static Routes Example
To create a static default route
To create a static route non-default
Creating/Removing Static Routes
To create a backup static route
Backup Static Routes
To disable a static route
Route Aggregation
Nokia Network Voyager for Ipso 4.0 Reference Guide 399
To create aggregate routes
To remove aggregate routes
Route Aggregation Example
400
Rank Assignments
Preference Default
Route Rank
Nokia Network Voyager for Ipso 4.0 Reference Guide 401
402
Routing Protocol Rank Example
To set route rank
Nokia Network Voyager for Ipso 4.0 Reference Guide 403
To configure the routing preferences
Support for BGP-4++
404
BGP Sessions Internal and External
BGP Path Attributes
Nokia Network Voyager for Ipso 4.0 Reference Guide 405
Path Attribute Definition
406
BGP Multi-Exit Discriminator
BGP Interactions with IGPs
Communities
Inbound BGP Route Filters
Redistributing Routes to BGP
Nokia Network Voyager for Ipso 4.0 Reference Guide 407
Community attribute Description
Route Reflection
408
Confederations
Nokia Network Voyager for Ipso 4.0 Reference Guide 409
Ebgp Multihop Support
410
Nokia Network Voyager for Ipso 4.0 Reference Guide 411
TCP MD5 Authentication
Route Dampening
BGP Support for Virtual IP for Vrrp
412
Tables
BGP Support for IP Clustering
BGP Memory Requirements
Nokia Network Voyager for Ipso 4.0 Reference Guide 413
414
Memory Size
Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 415
To configure Ibgp on Nokia Platform a
BGP Neighbors Example
416
To configure Ibgp on Nokia Platform B
To configure Ibgp on Nokia Platform C
To configure Ebgp on Nokia Platform D
To configure Ebgp on Nokia Platform a
To configure Ebgp on Nokia Platform C
Nokia Network Voyager for Ipso 4.0 Reference Guide 417
Verification
To configuring Ebgp on Nokia Platform E
Path Filtering Based on Communities Example
418
Nokia Network Voyager for Ipso 4.0 Reference Guide 419
To configure Default MED for Nokia Platform D
BGP Multi Exit Discriminator Example
To configure MED Values for all peers of AS200
420
Changing the Local Preference Value Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 421
To set the local preference value for an Ibgp peer
To configure an Ibgp peer for Nokia Platform B
To configure the static routes required for an Ibgp session
422
Nokia Network Voyager for Ipso 4.0 Reference Guide 423
Configuring Nokia Platform C
BGP Confederation Example
Configuring Platform B
424
Nokia Network Voyager for Ipso 4.0 Reference Guide 425
426
Configuring Platform B as Route Reflector
Route Reflector Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 427
Configuring Platform C as Ibgp Peer of Platform B
Configuring Platform D as Ibgp Peer of Platform B
BGP Community Example
Configuring BGP Route Inbound Policy on Platform B
Configuring Redistribution of BGP Routes on Platform B
428
Follow the steps in the Redistributing Ospf to BGP Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 429
Configuring a Static Route on Platform a
Configuring a Loopback Address on Platform a
Configuring a Loopback Address on Platform B
Ebgp Load Balancing Example Scenario #1
Configuring an Ebgp Peer on Platform B
Configuring a Static Route on Platform B
Configuring an Ebgp Peer on Platform a
Nokia Network Voyager for Ipso 4.0 Reference Guide 431
Ebgp Load Balancing Example Scenario #2
Configuring Ospf on Platform a
Configuring Ospf on Platform B
432
Adjusting BGP Timers Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 433
Configuring BGP Route Redistribution on Nokia Platform B
TCP MD5 Authentication Example
Configuring TCP MD5 Authentication on Nokia Platform a
434
Nokia Network Voyager for Ipso 4.0 Reference Guide 435
Field Default value Units of measurement
BGP Route Dampening Example
436
BGP Path Selection
BGP-4++ Example
To configure configure a BGP4 session over IPv6 transport
Nokia Network Voyager for Ipso 4.0 Reference Guide 437
Route Redistribution
438
Nokia Network Voyager for Ipso 4.0 Reference Guide 439
BGP Route Redistribution Example
To configure BGP route redistribution on Nokia Platform D
Redistributing Routes to RIP and Igrp
To redistribute a single route
Redistributing RIP to Ospf Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 441
442
Redistributing Ospf to BGP Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 443
444
Redistributing Routes with Ospf
To redistribute Ospf to BGP through Nokia Platform a
Nokia Network Voyager for Ipso 4.0 Reference Guide 445
To configure IGP inbound filters
Inbound Route Filters
BGP Route Inbound Policy Example
446
Nokia Network Voyager for Ipso 4.0 Reference Guide 447
448
BGP AS Path Filtering Example
Aspath Regular Expressions
Traffic Shaping Description
Traffic Management Overview
Packet Filtering Description
Nokia Network Voyager for Ipso 4.0 Reference Guide 449
450
Configuring Access Control Lists
Traffic Queuing Description
Nokia Network Voyager for Ipso 4.0 Reference Guide 451
To create or delete an ACL
To apply or remove an ACL to or from an interface
Configuring ACL Rules
452
Nokia Network Voyager for Ipso 4.0 Reference Guide 453
Modifying a Rule
To add a new rule to an ACL
ACL Rule Attributes
454
Configuring Aggregation Classes
Nokia Network Voyager for Ipso 4.0 Reference Guide 455
456
To create an Aggregation Class
To associate an aggregation class with a rule
Configuring Queue Classes
Nokia Network Voyager for Ipso 4.0 Reference Guide 457
458
To set or modify queue class configuration values
To create or delete a queue class
Create a QoS descriptor
Configuring ATM QoS
To associate a queue class with an interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 459
460
To delete an ATM QoS descriptor
To dissociate an ATM QoS Descriptor from an existing PVC
Configuring Common Open Policy Server
Nokia Network Voyager for Ipso 4.0 Reference Guide 461
462
Configuring a Cops Client ID and Policy Decision Point
Configuring Security Parameters for a Cops Client ID
Assigning Roles to Specific Interfaces
Nokia Network Voyager for Ipso 4.0 Reference Guide 463
Deleting a Client ID
To disable and delete a Client ID
Activating and Deactivating the Cops Client
464
Example Rate Shaping
Nokia Network Voyager for Ipso 4.0 Reference Guide 465
Example Expedited Forwarding
466
Nokia Network Voyager for Ipso 4.0 Reference Guide 467
To test the configuration
468
BOOTP/DHCP Relay
Nokia Network Voyager for Ipso 4.0 Reference Guide 469
Bootp configuration parameters
Configuring BOOTP/DHCP Relay
To enable Bootp relay on an Interface
470
IP Broadcast Helper
To disable Bootp relay on an interface
IP Broadcast helper configuration parameters
Nokia Network Voyager for Ipso 4.0 Reference Guide 471
To configure IP broadcast helper
472
Nokia Network Voyager for Ipso 4.0 Reference Guide 473
Configuring Router Discovery
Router Discovery Overview
474
To enable router discovery services
Router discover configuration parameters
Nokia Network Voyager for Ipso 4.0 Reference Guide 475
To disable router discovery services
Network Time Protocol NTP
476
Configuring NTP
To configure NTP
Nokia Network Voyager for Ipso 4.0 Reference Guide 477
478
Nokia Network Voyager for Ipso 4.0 Reference Guide 479
Viewing System Utilization Statistics
CPU-Memory Live Utilization
480
Disk and Swap Space
Monitoring Process Utilization
Process Description
Ipso Process Management
Nokia Network Voyager for Ipso 4.0 Reference Guide 481
482
Generating Monitor Reports
Reports
Report Description
Nokia Network Voyager for Ipso 4.0 Reference Guide 483
Monitoring System Health
To display reports
Monitoring System Logs
484
Viewing Cluster Status and Members
Nokia Network Voyager for Ipso 4.0 Reference Guide 485
Displaying the Kernel Forwarding Table
Displaying Route Settings
Viewing Routing Protocol Information
486
Nokia Network Voyager for Ipso 4.0 Reference Guide 487
Displaying Interface Settings
Hardware Monitoring
To display routing daemon status using iclid
Using the iclid Tool
Iclid Commands
488
Nokia Network Voyager for Ipso 4.0 Reference Guide 489
490
Nokia Network Voyager for Ipso 4.0 Reference Guide 491
492
Nokia Network Voyager for Ipso 4.0 Reference Guide 493
Preventing Full Log Buffers and Related Console Messages
494
Nokia Network Voyager for Ipso 4.0 Reference Guide 495
If you are using FireWall-1
If you are using FireWall-1 NG
496
Index
Nokia Network Voyager for Ipso 4.0 Reference Guide Index
Bios
CPU
DSA
Http
Httpd
Managing
NGX
Nssa
RIP
RSA
TACACS+
Deleting virtual router
Index
