Ngx | Nokia IPSO 4.0 guide

overview 354

M

MAC address VRRP 190

mail relay configuring 157 description 156 features 156 sending mail 158

management ports 30, 216 master state, VRRP 202 MD5 authentication 264 MED 406

memory viewing 28

memory cache, clearing 26 memory utilization report 482

configuring 177 menu items, Voyager 22 message log 484 MIBs

list of 249 mirror set 154 modem

configuring 298 dialback 298 inactivity timeout 298 status 298

status poll interval 298 types 299

Monitor Firewall State option 191 monitor interface parameter 195 monitor reports 482

configuring 177 monitord process 481 monitored-circuit VRRP

configuring 192 monitoring

fan sensors 487 hardware 487 monitor role 294 monitor user 288 power supply 487 routing protocols 486 slots 487

system logs 484 system resources 479 voltage sensors 487 watchdog timer 487

monitoring cryptographic accelerator 487 MSS clamping 46

MTU

setting for GigE Interfaces 42 MULTI_EXIT_DISC path attribute 405 multicast mode 213, 214, 215 multicast routers 392

multicast routing protocol 352 multicast tunnels

changing endpoint address 119 configuring addresses 391

multi-exit discriminator (MED) 406 autonomous system (AS) 404 BGP 404

multihop feature, EBGP 410 multiple routing instances

assigning access to 293

N

neighbor discovery configuring for IPv6 269

network access configuring 297 enabling 298

network devices, configuring 30 network interface card (NIC) 30 network management station 256 network services

chargen 297 daytime 298 discard 297 echo 297 enabling 298 time 298

network throughput report 482 Network Voyager

described navigating in 26 opening 24 overview 23

setting session timeout 312 troubleshooting access problems 301 Web access options 301

new password field 289 NEXT_HOP path attribute 405

NGX

configuring for clustering 241 NMS 256

notification configuring failure 157

Index - 504

Nokia Network Voyager for IPSO 4.0 Reference Guide

Image 504

Nokia IPSO 4.0 manual Ngx

Contents

Nokia Network Voyager For Ipso Reference Guide Nokia Network Voyager for Ipso 4.0 Reference Guide Restricted Rights Legend Https//support.nokia.com Tac.support@nokia.com Nokia Network Voyager for Ipso 4.0 Reference Guide Contents Nokia Network Voyager Ipso 4.0 Reference Guide Configuring System Functions Nokia Network Voyager Ipso 4.0 Reference Guide Configuring Clustering Virtual Router Redundancy Protocol Vrrp Nokia Network Voyager Ipso 4.0 Reference Guide Configuring Snmp Configuring IPv6 Managing Security and Access Configuring Routing Nokia Network Voyager Ipso 4.0 Reference Guide Nokia Network Voyager Ipso 4.0 Reference Guide Configuring Traffic Management Configuring Router Services Monitoring System Configuration and Hardware Index About the Nokia Network Voyager Reference Guide About the Nokia Network Voyager Reference Guide Conventions This Guide Uses Text ConventionsText Conventions Convention Description Related Documentation Menu Items Software Overview Nokia Network Voyager for Ipso 4.0 Reference Guide Logging In to Network Voyager Logging OffTo open Nokia Network Voyager Obtaining a Configuration Lock To log in with exclusive configuration lockTo log in without exclusive configuration lock To override a configuration lock Accessing Documentation and Help Navigating in Network VoyagerReloading Pages To clear the memory and disk cache „ Nokia support site https//support.nokia.com To open a new window to view help Viewing Hardware and Software Information for Your System To view the asset management summary Configuring Interfaces Interface Overview Configuring Network Devices IP2250 Management PortsType Prefix Configuring IP Addresses Physical Interface Logical Interface Interface Status Configuring Tunnel Interfaces Interface Status IndicatorsIndicator Description Configuring Ethernet Interfaces Physical Interface Configuration ParametersEthernet Interfaces Parameter Description To configure an Ethernet interface Link Aggregation Managing Link Aggregation Using Snmp Configuring Switches for Link Aggregation Static Link Aggregation Link Aggregation on the IP2250Firewall Synchronization Traffic Configuring the Remaining Management Ports Production Traffic ADP I/O Ports Only Configuring Link Aggregation Physical Interface ConfigurationTo set up link aggregation in Network Voyager To physically configure the interfaces you will aggregate Group Configuration To configure link aggregation groups Logical Configuration Gigabit Ethernet InterfacesDeleting Aggregation Groups Gigabit Ethernet Interface Parameters To configure a Gigabit Ethernet interface MTU Configuring PPPoE To configure PPPoEPoint-to-Point Over Ethernet Nokia Network Voyager for Ipso 4.0 Reference Guide To change configuration profiles To delete configuration profilesTo create PPPoE logical interfaces To delete PPPoE logical interfaces Configuring MSS Clamping Virtual LAN Interfaces To configure a Vlan Interface To delete a Vlan Interface Vlan Example Topology To define the maximum number of VLANs To configure an Fddi Interface Fddi Interfaces To change the duplex setting of an Fddi interface To change the IP address of an Fddi interface To configure an Isdn physical interface Isdn Interfaces To configure an Isdn logical interface to place calls Nokia Network Voyager for Ipso 4.0 Reference Guide Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an Isdn interface to receive calls Configuring Calling Line-Identification Screening To add an incoming number To configure an interface to place and receive calls To remove an incoming number Dial-on-Demand Routing DDR Lists To create a DDR list To delete a DDR listTo add a new rule to a DDR list Example DDR List To modify a ruleTo apply or remove a DDR list to/from an interface Isdn Network Configuration Example To configure the IP330 to place an outgoing call To configure the IP650 to handle an incoming call Sample Call Traces Trace for connecting a call from the Nokia IP330 is Isdn Troubleshooting LoggingTo set level of messages logged To view the message log Troubleshooting Cause Codes To trace Isdn traffic using tcpdumpTracing Isdn Cause Code Fields Cause Cause Description Diagnostics Isdn Cause ValuesCause Values See Isdn Cause Values table Information-element identifiers is missing Isdn Bearer-Capable Values Value Description To configure a Token Ring interface Token Ring Interfaces To deactivate a Token Ring interface To change a Token Ring interface Token Ring Example Fddi To configure an ATM interface Point-to-Point Link over ATM To change the VPI/VCI of an ATM interface To change the IP Address of an ATM interface To change the IP MTU of an ATM interface ATM Example Fddi To configure the ATM interface on Nokia Platform a To configure an ATM logical IP subnet LIS interfaceIP over ATM IPoA To change the VPI/VCIs of an ATM LIS Interface To change the IP Address of an ATM LIS interface IPoA Example ATM To configure a serial interface for Cisco Hdlc Serial V.35 and X.21 Interfaces To configure a Serial Interface for PPP To configure a serial interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide Serial Interface Example To configure the serial interface on Nokia Platform a To configure a T1 Interface for Cisco HdlcT1with Built-In CSU/DSU Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 Interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide To configure a T1 interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide T1 Interface Example To configure the serial interface on Nokia Platform a To configure an E1 interface for Cisco Hdlc E1 with Built-In CSU/DSU Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an E1 interface for PPP Nokia Network Voyager for Ipso 4.0 Reference Guide To configure an E1 interface for frame relay 100 Nokia Network Voyager for Ipso 4.0 Reference Guide 101 102 To configure an Hssi interface for Cisco Hdlc Hssi InterfacesNokia Network Voyager for Ipso 4.0 Reference Guide 103 To configure an Hssi interface for PPP 104 To configure an Hssi interface for frame relay Nokia Network Voyager for Ipso 4.0 Reference Guide 105 106 Configuring Unnumbered Interfaces To configure an unnumbered interfaceUnnumbered Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide 107 To change an unnumbered interface to a numbered interface 108 To configure a static route over an unnumbered interface Nokia Network Voyager for Ipso 4.0 Reference Guide 109 Configuring Ospf over Unnumbered Interface Ospf over Unnumbered Interfaces Using Virtual Links110 Cisco Hdlc Protocol To change the keepalive interval for Cisco HdlcNokia Network Voyager for Ipso 4.0 Reference Guide 111 Point-to-Point Protocol To change the IP address in Cisco HdlcTo change the keepalive interval in PPP 112 To change the keepalive maximum failures in PPP To change the IP address in PPPNokia Network Voyager for Ipso 4.0 Reference Guide 113 Frame Relay Protocol To change the keepalive interval in frame relayTo change the Dlci in frame relay 114 To change the LMI parameters in frame relay To change the interface type in frame relayNokia Network Voyager for Ipso 4.0 Reference Guide 115 To change the active status monitor setting in frame relay To change the IP address in frame relayTo remove a frame relay interface 116 Loopback Interfaces To add an IP Address to a Loopback InterfaceTo change the IP Address of a loopback interface Nokia Network Voyager for Ipso 4.0 Reference Guide 117 Configuring GRE Tunnels GRE TunnelsTo create a GRE tunnel 118 Nokia Network Voyager for Ipso 4.0 Reference Guide 119 To change IP TOS value of a GRE tunnel 120 GRE Tunnel Example Nokia Network Voyager for Ipso 4.0 Reference Guide 121 High Availability GRE Tunnels HA GRE Tunnel Example122 Nokia Network Voyager for Ipso 4.0 Reference Guide 123 124 Dvmrp Tunnels To create a Dvmrp tunnelNokia Network Voyager for Ipso 4.0 Reference Guide 125 Dvmrp Tunnel Example To change the local or remote addresses of a Dvmrp tunnel126 Nokia Network Voyager for Ipso 4.0 Reference Guide 127 ARP Table Entries To change ARP global parameters128 To add a static ARP entry To add a proxy ARP entryNokia Network Voyager for Ipso 4.0 Reference Guide 129 Configuring ARP for ATM Interfaces To add a static ATM ARP entry To delete a static ATM ARP entryTo view and delete dynamic ATM ARP entries Nokia Network Voyager for Ipso 4.0 Reference Guide 131 Transparent Mode Limitations132 Transparent Mode Processing Details Nokia Network Voyager for Ipso 4.0 Reference Guide 133 Configuring Transparent Mode in VPN Environments 134 Example of Transparent Mode Nokia Network Voyager for Ipso 4.0 Reference Guide 135 Configuring Transparent Mode 136 Creating and Deleting Transparent Mode Groups To create a transparent mode groupTo delete a transparent mode group Nokia Network Voyager for Ipso 4.0 Reference Guide 137 Enabling or Disabling a Transparent Mode Group To enable or disable a transparent mode group138 Monitoring Transparent Mode Groups Transparent Mode and Check Point NGXEnabling or Disabling Vrrp for a Transparent Mode Group Configuring Antispoofing Virtual Tunnel Interfaces Fwvpn for Route-Based VPN Unnumbered VTIsRouting Traffic through the VTI 140 Nokia Network Voyager for Ipso 4.0 Reference Guide 141 Creating Virtual Tunnel Interfaces Vrrp SupportTo create a virtual tunnel interface To create the VPN community Nokia Network Voyager for Ipso 4.0 Reference Guide 143 To create the virtual tunnel interface 144 Configuring Dhcp Nokia Network Voyager for Ipso 4.0 Reference Guide 145 Configuring Dhcp Client Interfaces Dhcp Client ConfigurationTo configure the Dhcp client interface To enable the Dhcp client process Configuring the Dhcp Server To configure the Dhcp server processNokia Network Voyager for Ipso 4.0 Reference Guide 147 Dhcp Server Configuration To enable the Dhcp server process148 Changing Dhcp Service To disable the Dhcp server processTo change the Dhcp service Adding Dhcp Address Pools To enable and existing IP address pool Enabling or Disabling Dhcp Address PoolsAssigning a Fixed-IP Address to a Client To assign a fixed-IP address to a client Creating Dhcp Client Templates Nokia Network Voyager for Ipso 4.0 Reference Guide 151 152 Configuring Dynamic Domain Name System Service Configuring Dynamic Domain Name System ZonesTo configure Dynamic Domain Name System Ddns Nokia Network Voyager for Ipso 4.0 Reference Guide 153 Configuring the Domain Name Service Configuring Disk MirroringTo configure DNS To create a mirror set Using an Optional Disk Flash-Based Systems Only To delete a mirror setNokia Network Voyager for Ipso 4.0 Reference Guide 155 To install and configure PC card flash memory To configure the system to store log files on the PC cardMail Relay To remove an optional disk Configuring Mail Relay To configure failure notificationTo configure mail relay for your firewall System Failure Notification Setting the System Time Sending MailTo send mail from the firewall 158 Configuring Host Addresses To set system time onceTo add a static host entry Nokia Network Voyager for Ipso 4.0 Reference Guide 159 Configuring System Logging Configuring Logging on Disk-Based SystemsAccepting Log Messages Logging to a Remote System Configuring Logging on Flash-Based Systems To send syslog messages to a remote systemNokia Network Voyager for Ipso 4.0 Reference Guide 161 Configuring Logging to Remote Log Servers 162 Configuring Audit Logs Configuring Logging to an Optional DiskNokia Network Voyager for Ipso 4.0 Reference Guide 163 To set the system configuration audit log 164 Remote Core Dump Server on Flash-Based Systems Nokia Network Voyager for Ipso 4.0 Reference Guide 165 Managing Configuration Sets Changing the HostnameTo change the hostname 166 To create a factory default configuration file To switch a currently active databaseTo delete unwanted configuration database files Scheduling Jobs Backing Up and Restoring Files To delete scheduled jobs168 Creating Backup Files To create a backup file manuallyTo delete local backup files Nokia Network Voyager for Ipso 4.0 Reference Guide 169 Transferring Backup Files Configuring Automatic TransfersTo configure scheduled backups To cancel a regularly scheduled backup Transferring Backup Files Manually To manually transfer archive files to a remote serverNokia Network Voyager for Ipso 4.0 Reference Guide 171 Restoring Files from Locally Stored Backup Files To restore files172 Managing Nokia Ipso Images Changing Current ImageDeleting Images To select a new current image Installing New Images To delete an Nokia Ipso image174 Testing a New Image To test an image before activating itNokia Network Voyager for Ipso 4.0 Reference Guide 175 Rebooting a Cluster Upgrading Nokia Ipso Images for a ClusterDowngrading Nokia Ipso Images 176 Configuring Monitor Reports Nokia Network Voyager for Ipso 4.0 Reference Guide 177 Installing and Enabling Packages Managing PackagesRestrictions for Flash-Based Platforms Monitor Report Parameters To install a package Nokia Network Voyager for Ipso 4.0 Reference Guide 179 Advanced System Tuning Tuning the TCP/IP StackTo enable or disable a package To delete a package Router Alert IP Option To set the TCP MSSNokia Network Voyager for Ipso 4.0 Reference Guide 181 182 Vrrp Overview How Vrrp WorksNokia Network Voyager for Ipso 4.0 Reference Guide 183 Simple Vrrp Configuration 184 Vrrp Configuration with Internal and External VRIDs Vrrp Configuration with Simultaneous Backup Configuring Vrrp Understanding Monitored-Circuit Vrrp186 Selecting Configuration Parameters PriorityNokia Network Voyager for Ipso 4.0 Reference Guide 187 Authentication Hello Interval188 Backup Address Priority DeltaNokia Network Voyager for Ipso 4.0 Reference Guide 189 Vmac Mode 190 Global Vrrp Settings Vrrp Configuration ParametersBefore you Begin Nokia Network Voyager for Ipso 4.0 Reference Guide 191 Configuring Monitored-Circuit Vrrp 192 To add a virtual router Nokia Network Voyager for Ipso 4.0 Reference Guide 193 Configuring Monitored-Circuit Vrrp using the Full Method To change the configuration of an existing virtual routerTo delete a virtual router 194 Additional Vrrp Parameters Used in Full Method Nokia Network Voyager for Ipso 4.0 Reference Guide 195 Configuring VRRPv2 To add or back up a virtual router using VRRPv2196 Configuring Check Point NGX for Vrrp Nokia Network Voyager for Ipso 4.0 Reference Guide 197 Configure settings under the 3rd party configuration tab 198 Configuring Vrrp Rules for Check Point NGX Configuration Rule for Check Point NGX FP1Nokia Network Voyager for Ipso 4.0 Reference Guide 199 Configuration Rules for Check Point NGX FP2 and Later Configuring Rules if You Are Using Ospf or DvmrpSource Destination Service Action 200 CLI commands for Vrrp Monitoring VrrpLink Aggregation IP2250 Systems Only State Location Stats202 Troubleshooting Vrrp General Configuration ConsiderationsTo enable or disable Monitor Firewall state To enable traces for Vrrp Access Control Lists Firewall Policies204 Switched Environments Monitored-Circuit Vrrp in Switched EnvironmentsVRRPv2 in Switched Environments Nokia Network Voyager for Ipso 4.0 Reference Guide 205 206 Using Flash-Based Platforms IP Clustering DescriptionNokia Network Voyager for Ipso 4.0 Reference Guide 207 Example Cluster 208 Cluster Management Nokia Network Voyager for Ipso 4.0 Reference Guide 209 Cluster Terminology 210 Cluster member a cluster node that is not the master Nokia Network Voyager for Ipso 4.0 Reference Guide 211 Clustering Modes 212 Nokia Network Voyager for Ipso 4.0 Reference Guide 213 Considerations for Clustering Network Environment214 Other Considerations Nokia Network Voyager for Ipso 4.0 Reference Guide 215 Clustering IP2250 Platforms 216 Upgrading Ipso in a Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 217 For All Upgrades Upgrading from Ipso 3.7 or LaterUpgrading from Ipso 218 Enabling Cluster Management Nokia Network Voyager for Ipso 4.0 Reference Guide 219 Creating and Configuring a Cluster Configuration OverviewTo create and configure a cluster Creating a Cluster Selecting the Cluster Mode Configuring the Work Assignment MethodNokia Network Voyager for Ipso 4.0 Reference Guide 221 Configuring an Interface To include an interface in the cluster222 Configuring Firewall Monitoring Supporting Non-Check Point Gateways and ClientsNokia Network Voyager for Ipso 4.0 Reference Guide 223 Configuring VPN Tunnels Using IP Pools224 Using IP Pools When Only Check Point Gateways Are Involved Nokia Network Voyager for Ipso 4.0 Reference Guide 225 Configuring Join-Time Shared Features Configuring IP pools in Cluster Voyager226 What is Sharable? What if Settings Conflict?Nokia Network Voyager for Ipso 4.0 Reference Guide 227 Configuring Features for Sharing 228 Adding a Node to a Cluster Making the Cluster ActiveAfter You Create a Cluster Nokia Network Voyager for Ipso 4.0 Reference Guide 229 Recommended Procedure 230 Managing a Cluster Joining a System to a ClusterNokia Network Voyager for Ipso 4.0 Reference Guide 231 Using Cluster Voyager To start Cluster Voyager232 If You Forget the cadmin Password Cluster Administrator UsersNokia Network Voyager for Ipso 4.0 Reference Guide 233 Configuring the Failure Interval Configuring the Performance RatingMonitoring a Cluster 234 Managing Join-Time Shared Features Nokia Network Voyager for Ipso 4.0 Reference Guide 235 Installing Ipso Images 236 Nokia Network Voyager for Ipso 4.0 Reference Guide 237 Removing a Node from a Cluster 238 Changing Cluster Interface Configurations Deleting a Cluster ConfigurationSynchronizing the Time on Cluster Nodes Assigning the Time Zone Configuring NTP NTP Server Outside the Cluster240 Configuring NGX for Clustering Using the Master Node as the NTP ServerNokia Network Voyager for Ipso 4.0 Reference Guide 241 242 Clustering Example Three Nodes Nokia Network Voyager for Ipso 4.0 Reference Guide 243 Configuring the Cluster in Voyager 244 Configuring the Internal and External Routers Nokia Network Voyager for Ipso 4.0 Reference Guide 245 Clustering Example With Non-Check Point VPN 246 Nokia Network Voyager for Ipso 4.0 Reference Guide 247 248 Snmp Overview Nokia Network Voyager for Ipso 4.0 Reference Guide 249 250 Source Function Nokia Network Voyager for Ipso 4.0 Reference Guide 251 UDP-MIB Snmp Proxy Support for Check Point MIB 252 Using the Check Point MIB Using cpsnmpstartNokia Network Voyager for Ipso 4.0 Reference Guide 253 To enable or disable Snmp Enabling Snmp and Selecting the Version254 Configuring the System for Snmp Setting an Agent AddressTo set an Snmp agent address Nokia Network Voyager for Ipso 4.0 Reference Guide 255 Configuring Traps Types of Snmp Traps256 Type of Trap Description Nokia Network Voyager for Ipso 4.0 Reference Guide 257 258 Configuring Trap Receivers Setting the Trap PDU Agent AddressEnabling or Disabling Trap Types Interpreting Error Messages Configuring Location and Contact InformationTo configure location and contact information Error status code Meaning GetRequest Nokia Network Voyager for Ipso 4.0 Reference Guide 261Variable-bindings Element Description Value Field Set Description Configuring SNMPv3 GetNextRequestGetBulkRequest 262 Request Messages Managing Snmp UsersSecurity Related Options Used in Request Messages Nokia Network Voyager for Ipso 4.0 Reference Guide 263 To add an Snmp user 264 To delete a USM user Nokia Network Voyager for Ipso 4.0 Reference Guide 265 266 IPv6 Overview Nokia Network Voyager for Ipso 4.0 Reference Guide 267 To configure IPv6 logical interfaces Interfaces268 To disable IPv6 on an interface To configure neighbor discoveryTo delete an IPv6 address Nokia Network Voyager for Ipso 4.0 Reference Guide 269 Configuring IPv6 in IPv4 Tunnels To configure IPv6 in IPv4 tunnelsIPv6 and IPv4 Compatibility 270 Configuring IPv6 to IPv4 Configuring IPv6 over IPv4To configure IPv6 to IPv4 To configure IPv6 over IPv4 Configuring IPv4 in IPv6 Tunnels Configuring an IPv6 Default or Static RouteTo configure IPv4 in IPv6 tunnels To configure an IPv6 default or static route Routing Configuration Configuring OSPFv3Configuring RIPng Creating IPv6 Aggregate Routes Creating Redistributed Routes Redistributing Static Routes into RIPngRedistributing Aggregate Routes in RIPng 274 Configuring ICMPv6 Router Discovery Router DiscoveryRedistributing Interface Routes into RIPng Nokia Network Voyager for Ipso 4.0 Reference Guide 275 276 Configuring Vrrp for IPv6 Vrrp for IPv6Nokia Network Voyager for Ipso 4.0 Reference Guide 277 Creating a Virtual Router for an IPv6 Interface Using VRRPv3 278 Nokia Network Voyager for Ipso 4.0 Reference Guide 279 Setting a Virtual MAC Address for a Virtual Router To set the virtual MAC address280 Changing the IP Address List of a Virtual Router in VRRPv3 Removing a Virtual Router in VRRPv3Nokia Network Voyager for Ipso 4.0 Reference Guide 281 Creating a Virtual Router in Monitored Circuit Mode for IPv6 282 Nokia Network Voyager for Ipso 4.0 Reference Guide 283 Traffic Management 284 Security and Access Configuration To enable FTP, TFTP, or Telnet accessNokia Network Voyager for Ipso 4.0 Reference Guide 285 286 Managing Passwords To change the current user’s passwordNokia Network Voyager for Ipso 4.0 Reference Guide 287 To change another user’s password Managing User Accounts288 Adding and Deleting Users User Account AttributesNokia Network Voyager for Ipso 4.0 Reference Guide 289 Attribute Description Managing and Using S/Key To add a userTo remove a user 290 Using S/Key To configure S/KeyTo use the S/Key Nokia Network Voyager for Ipso 4.0 Reference Guide 291 To disable S/Key Managing GroupsDisabling S/Key 292 Role-Based Administration To add or edit a groupNokia Network Voyager for Ipso 4.0 Reference Guide 293 Managing Roles To add or edit a role294 Assigning Roles and Access Mechanisms to Users To assign roles and access mechanisms to usersTo delete a role Nokia Network Voyager for Ipso 4.0 Reference Guide 295 Creating Cluster Administrator Users 296 Configuring Network Access and Services Network Access Configuration OptionsNetwork Services Service Description Configuring a Modem on COM2, COM3, or COM4 To enable network access options and servicesModem Configuration Parameters 298 To configure a modem on COM2, COM3, or COM4 Nokia Network Voyager for Ipso 4.0 Reference Guide 299 Configuring Nokia Network Voyager Access Country Codes for Ositech Five of Clubs CardCountry Codes for Ositech Five of Clubs Card II 300 Configuring Basic Nokia Network Voyager Options To configure Web access for Nokia Network VoyagerNokia Network Voyager for Ipso 4.0 Reference Guide 301 Generating and Installing SSL/TLS Certificates Generating an SSL/TLS Certificate and KeysTo generate a certificate and its associated private key 302 Installing the SSL/TLS Certificate To install the certificate and its associated private keyNokia Network Voyager for Ipso 4.0 Reference Guide 303 Troubleshooting SSL/TLS Configuration Secure Shell SSH304 Initial SSH Configuration To configure SSHNokia Network Voyager for Ipso 4.0 Reference Guide 305 Configuring Advanced Options for SSH To configure advanced options306 Nokia Network Voyager for Ipso 4.0 Reference Guide 307 Configuring Secure Shell Authorized Keys 308 To configure authorized keys To configure key pairsChanging Secure Shell Key Pairs Nokia Network Voyager for Ipso 4.0 Reference Guide 309 Managing User RSA and DSA Identities To manage user identities310 Network Voyager Session Management Tunneling Http Over SSHTo tunnel Http over SSH Nokia Network Voyager for Ipso 4.0 Reference Guide 311 Configuring Session Timeouts To enable or disable session managementTo set the session timeout interval Enabling Enabling or Disabling Session Management Authentication, Authorization, and Accounting AAA Creating an AAA ConfigurationTo create an AAA configuration Nokia Network Voyager for Ipso 4.0 Reference Guide 313 Creating a Service Module Entry Creating a Service ProfileCreating an Authentication Profile Authentication Profile Types Nokia Network Voyager for Ipso 4.0 Reference Guide 315Type Module Description Creating an Accounting Profile To create an account profile316 317 Creating a Service Module Example Profile Controls318 Control Description Configuring Radius Service Auth. Mgmt Acct. Mgmt Session MgmtNokia Network Voyager for Ipso 4.0 Reference Guide 319 320 Configuring TACACS+ Nokia Network Voyager for Ipso 4.0 Reference Guide 321 Deleting an AAA Authentication Server Configuration To delete an authentication server322 Changing an AAA Configuration Changing the Service ProfileTo change an AAA configuration To add an authentication profile Creating a Stacked Service Module Service Authentication Management324 Changing a Service Module Configuration Changing an Authentication Profile ConfigurationTo add an accounting profile To add a session profile Changing an Accounting Profile Configuration Changing a Session Profile Configuration326 Deleting an AAA Configuration Deleting an Item in a Service Profile EntryTo delete an AAA configuration Encryption Acceleration To enable the card for a Check Point VPN IPSec Tunnels Ipso ImplementationEnabling Encryption Accelerator Cards Monitoring Cryptographic Acceleration Transport and Tunnel Modes Nokia Network Voyager for Ipso 4.0 Reference Guide 329 Building VPN on ESP Protocol Negotiation and Key Management330 Nokia Network Voyager for Ipso 4.0 Reference Guide 331 Using PKI IPSec Implementation in IpsoIPSec RFCs 332 Miscellaneous Tunnel Requirements Nokia Network Voyager for Ipso 4.0 Reference Guide 333 Phase 1 Configuration IPSec ParametersPlatform Support 334 Choosing IPv4 or IPv6 General Configuration To chose IPv4 or IPv6 general configuration pagesCreating an IPSec Policy Nokia Network Voyager for Ipso 4.0 Reference Guide 335 Proposal and Filters Trusted CA CertificatesTo select a trusted CA certificate 336 Device Certificates Nokia Network Voyager for Ipso 4.0 Reference Guide 337 To enroll and install a device certificate 338 Advanced IPSec Nokia Network Voyager for Ipso 4.0 Reference Guide 339 Putting It All Together To complete creating an IPSec policy340 Creating an IPSec Tunnel Rule To create an IPSec tunnel ruleNokia Network Voyager for Ipso 4.0 Reference Guide 341 Transport Rule To create a transport rule342 Nokia Network Voyager for Ipso 4.0 Reference Guide 343 To configure Nokia Platform IPSec Tunnel Rule Example344 Nokia Network Voyager for Ipso 4.0 Reference Guide 345 Configure Nokia Platform To configure Nokia Platform 1 IpsoIPSec Transport Rule Example 346 Nokia Network Voyager for Ipso 4.0 Reference Guide 347 Configure PC1 Removing an IPSec TunnelTo remove an IPSec tunnel 348 Miscellaneous Security Settings To set TCP flag combinationsNokia Network Voyager for Ipso 4.0 Reference Guide 349 350 Routing Overview Routing ProtocolsNokia Network Voyager for Ipso 4.0 Reference Guide 351 RIP 352 Route Maps Nokia Network Voyager for Ipso 4.0 Reference Guide 353 Types of Areas 354 Area Border Routers High Availability Support for OspfNokia Network Voyager for Ipso 4.0 Reference Guide 355 Configuring Ospf Clustering356 Configuring Ospf Areas and Global Settings Ospf Area Configuration ParametersStub Area Parameters Nokia Network Voyager for Ipso 4.0 Reference Guide 357 Nssa Not So Stubby Area Parameters 358 Configuring Virtual Links To configure OspfTo configure a virtual link Nokia Network Voyager for Ipso 4.0 Reference Guide 359 Configuring Global Settings 360 Global Settings for Ospf Nokia Network Voyager for Ipso 4.0 Reference Guide 361 Configuring Ospf Interfaces Configuration Parameters for Ospf Interfaces362 To configure an Ospf interface Nokia Network Voyager for Ipso 4.0 Reference Guide 363 Configuring Ospf Example 364 Network Mask Nokia Network Voyager for Ipso 4.0 Reference Guide 365 Virtual IP Address Support for Vrrp Auto Summarization366 Configuring RIP To configure RIPRIP 1 Configuration Options Available from Network Voyager Nokia Network Voyager for Ipso 4.0 Reference Guide 367 Configuring RIP Timers 368 Configuring Auto-Summarization RIP ExampleEnabling RIP 1 on an Interface Nokia Network Voyager for Ipso 4.0 Reference Guide 369 Enabling RIP 2 on an Interface 370 Configuring Virtual IP Support for Vrrp PIM Support for IP ClusteringPIM Dense-Mode Nokia Network Voyager for Ipso 4.0 Reference Guide 371 PIM Sparse-Mode 372 Configuring Dense-Mode PIM Configuring Check Point VPN-1 Pro/ExpressPIM and Check Point SecureXL Nokia Network Voyager for Ipso 4.0 Reference Guide 373 Disabling PIM 374 Setting Advanced Options for Dense-Mode PIM Optional Nokia Network Voyager for Ipso 4.0 Reference Guide 375 Configuring Sparse-Mode PIM 376 Configuring High-Availability Mode Nokia Network Voyager for Ipso 4.0 Reference Guide 377 378 Nokia Network Voyager for Ipso 4.0 Reference Guide 379 Configuring a PIM-SM Static Rendezvous Point 380 Setting Advanced Options for Sparse-Mode PIM Optional Nokia Network Voyager for Ipso 4.0 Reference Guide 381 382 Command Shows Debugging PIMNokia Network Voyager for Ipso 4.0 Reference Guide 383 To log information about errors and events 384 Igrp Nokia Network Voyager for Ipso 4.0 Reference Guide 385 386 Generation of Exterior Routes Nokia Network Voyager for Ipso 4.0 Reference Guide 387 Configuring Igrp Aliased InterfacesIgrp Aggregation 388 To enable Igrp on an interface Igrp ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 389 Dvmrp 390 Configuring Dvmrp Configuring Dvmrp TimersNokia Network Voyager for Ipso 4.0 Reference Guide 391 Igmp 392 Configuring Igmp Nokia Network Voyager for Ipso 4.0 Reference Guide 393 Static Routes 394 To configure a default or static route To setting the rank for static routesNokia Network Voyager for Ipso 4.0 Reference Guide 395 To add and configure many static routes at the same time 396 To create a static default route To create a static route non-defaultAdding and Managing Static Routes Example Creating/Removing Static Routes Backup Static Routes To disable a static routeTo create a backup static route Route Aggregation To create aggregate routes To remove aggregate routesNokia Network Voyager for Ipso 4.0 Reference Guide 399 Route Aggregation Example 400 Preference Default Route RankRank Assignments Nokia Network Voyager for Ipso 4.0 Reference Guide 401 Routing Protocol Rank Example To set route rank402 To configure the routing preferences Support for BGP-4++Nokia Network Voyager for Ipso 4.0 Reference Guide 403 BGP Sessions Internal and External BGP Path Attributes404 Nokia Network Voyager for Ipso 4.0 Reference Guide 405 Path Attribute Definition BGP Multi-Exit Discriminator BGP Interactions with IGPs406 Inbound BGP Route Filters Redistributing Routes to BGPCommunities Nokia Network Voyager for Ipso 4.0 Reference Guide 407 Route Reflection 408Community attribute Description Confederations Nokia Network Voyager for Ipso 4.0 Reference Guide 409 Ebgp Multihop Support 410 TCP MD5 Authentication Route DampeningNokia Network Voyager for Ipso 4.0 Reference Guide 411 BGP Support for Virtual IP for Vrrp 412 BGP Support for IP Clustering BGP Memory RequirementsTables Nokia Network Voyager for Ipso 4.0 Reference Guide 413 Memory Size Example414 To configure Ibgp on Nokia Platform a BGP Neighbors ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 415 To configure Ibgp on Nokia Platform B To configure Ibgp on Nokia Platform C416 To configure Ebgp on Nokia Platform a To configure Ebgp on Nokia Platform CTo configure Ebgp on Nokia Platform D Nokia Network Voyager for Ipso 4.0 Reference Guide 417 To configuring Ebgp on Nokia Platform E Path Filtering Based on Communities ExampleVerification 418 To configure Default MED for Nokia Platform D BGP Multi Exit Discriminator ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 419 To configure MED Values for all peers of AS200 420 Changing the Local Preference Value Example Nokia Network Voyager for Ipso 4.0 Reference Guide 421 To configure an Ibgp peer for Nokia Platform B To configure the static routes required for an Ibgp sessionTo set the local preference value for an Ibgp peer 422 Configuring Nokia Platform C BGP Confederation ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 423 Configuring Platform B 424 Nokia Network Voyager for Ipso 4.0 Reference Guide 425 Configuring Platform B as Route Reflector Route Reflector Example426 Configuring Platform C as Ibgp Peer of Platform B Configuring Platform D as Ibgp Peer of Platform BNokia Network Voyager for Ipso 4.0 Reference Guide 427 Configuring BGP Route Inbound Policy on Platform B Configuring Redistribution of BGP Routes on Platform BBGP Community Example 428 Follow the steps in the Redistributing Ospf to BGP Example Nokia Network Voyager for Ipso 4.0 Reference Guide 429 Configuring a Loopback Address on Platform a Configuring a Loopback Address on Platform BConfiguring a Static Route on Platform a Ebgp Load Balancing Example Scenario #1 Configuring a Static Route on Platform B Configuring an Ebgp Peer on Platform aConfiguring an Ebgp Peer on Platform B Nokia Network Voyager for Ipso 4.0 Reference Guide 431 Configuring Ospf on Platform a Configuring Ospf on Platform BEbgp Load Balancing Example Scenario #2 432 Adjusting BGP Timers Example Nokia Network Voyager for Ipso 4.0 Reference Guide 433 TCP MD5 Authentication Example Configuring TCP MD5 Authentication on Nokia Platform aConfiguring BGP Route Redistribution on Nokia Platform B 434 Field Default value Units of measurement BGP Route Dampening ExampleNokia Network Voyager for Ipso 4.0 Reference Guide 435 BGP Path Selection BGP-4++ Example436 To configure configure a BGP4 session over IPv6 transport Nokia Network Voyager for Ipso 4.0 Reference Guide 437 Route Redistribution 438 Nokia Network Voyager for Ipso 4.0 Reference Guide 439 To configure BGP route redistribution on Nokia Platform D Redistributing Routes to RIP and IgrpBGP Route Redistribution Example To redistribute a single route Redistributing RIP to Ospf Example Nokia Network Voyager for Ipso 4.0 Reference Guide 441 442 Redistributing Ospf to BGP Example Nokia Network Voyager for Ipso 4.0 Reference Guide 443 Redistributing Routes with Ospf To redistribute Ospf to BGP through Nokia Platform a444 To configure IGP inbound filters Inbound Route FiltersNokia Network Voyager for Ipso 4.0 Reference Guide 445 BGP Route Inbound Policy Example 446 Nokia Network Voyager for Ipso 4.0 Reference Guide 447 BGP AS Path Filtering Example Aspath Regular Expressions448 Traffic Management Overview Packet Filtering DescriptionTraffic Shaping Description Nokia Network Voyager for Ipso 4.0 Reference Guide 449 Configuring Access Control Lists Traffic Queuing Description450 To create or delete an ACL To apply or remove an ACL to or from an interfaceNokia Network Voyager for Ipso 4.0 Reference Guide 451 Configuring ACL Rules 452 Modifying a Rule To add a new rule to an ACLNokia Network Voyager for Ipso 4.0 Reference Guide 453 ACL Rule Attributes 454 Configuring Aggregation Classes Nokia Network Voyager for Ipso 4.0 Reference Guide 455 To create an Aggregation Class To associate an aggregation class with a rule456 Configuring Queue Classes Nokia Network Voyager for Ipso 4.0 Reference Guide 457 To set or modify queue class configuration values To create or delete a queue class458 Configuring ATM QoS To associate a queue class with an interfaceCreate a QoS descriptor Nokia Network Voyager for Ipso 4.0 Reference Guide 459 To delete an ATM QoS descriptor To dissociate an ATM QoS Descriptor from an existing PVC460 Configuring Common Open Policy Server Nokia Network Voyager for Ipso 4.0 Reference Guide 461 Configuring a Cops Client ID and Policy Decision Point Configuring Security Parameters for a Cops Client ID462 Assigning Roles to Specific Interfaces Nokia Network Voyager for Ipso 4.0 Reference Guide 463 To disable and delete a Client ID Activating and Deactivating the Cops ClientDeleting a Client ID 464 Example Rate Shaping Nokia Network Voyager for Ipso 4.0 Reference Guide 465 Example Expedited Forwarding 466 Nokia Network Voyager for Ipso 4.0 Reference Guide 467 To test the configuration 468 BOOTP/DHCP Relay Nokia Network Voyager for Ipso 4.0 Reference Guide 469 Configuring BOOTP/DHCP Relay To enable Bootp relay on an InterfaceBootp configuration parameters 470 To disable Bootp relay on an interface IP Broadcast helper configuration parametersIP Broadcast Helper Nokia Network Voyager for Ipso 4.0 Reference Guide 471 To configure IP broadcast helper 472 Configuring Router Discovery Router Discovery OverviewNokia Network Voyager for Ipso 4.0 Reference Guide 473 To enable router discovery services Router discover configuration parameters474 To disable router discovery services Network Time Protocol NTPNokia Network Voyager for Ipso 4.0 Reference Guide 475 Configuring NTP To configure NTP476 Nokia Network Voyager for Ipso 4.0 Reference Guide 477 478 Viewing System Utilization Statistics CPU-Memory Live UtilizationNokia Network Voyager for Ipso 4.0 Reference Guide 479 Disk and Swap Space Monitoring Process Utilization480 Ipso Process Management Nokia Network Voyager for Ipso 4.0 Reference Guide 481Process Description Generating Monitor Reports Reports482 Report Description Monitoring System Health To display reportsNokia Network Voyager for Ipso 4.0 Reference Guide 483 Monitoring System Logs 484 Viewing Cluster Status and Members Nokia Network Voyager for Ipso 4.0 Reference Guide 485 Displaying Route Settings Viewing Routing Protocol InformationDisplaying the Kernel Forwarding Table 486 Displaying Interface Settings Hardware MonitoringNokia Network Voyager for Ipso 4.0 Reference Guide 487 Using the iclid Tool Iclid CommandsTo display routing daemon status using iclid 488 Nokia Network Voyager for Ipso 4.0 Reference Guide 489 490 Nokia Network Voyager for Ipso 4.0 Reference Guide 491 492 Nokia Network Voyager for Ipso 4.0 Reference Guide 493 Preventing Full Log Buffers and Related Console Messages 494 If you are using FireWall-1 If you are using FireWall-1 NGNokia Network Voyager for Ipso 4.0 Reference Guide 495 496 Index Nokia Network Voyager for Ipso 4.0 Reference Guide Index Bios CPU DSA Http Httpd Managing NGX Nssa RIP RSA TACACS+ Deleting virtual router Index