Dhcp configuration | Patton electronic SmartNode 4110 Series

SmartWare Software Configuration Guide	Table of Contents

Recommended public SNTP time servers	290
NIST Internet time service	290
Additional information on NTP and a list of other NTP servers	291
27 DHCP configuration	292
Introduction	293
DHCP-client configuration tasks	294
Enable DHCP-client on an IP interface	294
Release or renew a DHCP lease manually (advanced)	296
Get debug output from DHCP-client	296
DHCP-server configuration tasks	297
Configure DHCP-server profiles	297
Use DHCP-server profiles and enable the DHCP-server	299
Define the bootfile (Option 67) for the DHCP-server	300
Define the TFTP server (Option 66) for the DHCP-server	300
Check DHCP-server configuration and status	300
Get debug output from the DHCP-server	301
Configure DHCP-relay	302
Create/Modify DHCP-Relay profile	302
Enable/Disable DHCP-Relay Agent	303
28 DNS configuration	304
Introduction	305
DNS configuration task list	305
Enabling the DNS resolver	305
Enabling the DNS relay	306
29 DynDNS configuration	308
Introduction	309
DynDNS configuration task list	309
Creating a DynDNS account	309
Configuring the DNS resolver	309
Configuring basic DynDNS settings	310
Configuring the DynDNS server	310
Configuring advanced DynDNS settings (optional)	311
Defining a mail exchanger for your hostname	311
Troubleshooting	311
30 PPP configuration	313
Introduction	314
PPP configuration task list	315
Creating an IP interface for PPP	315
Disable interface IP address auto-configuration from PPP	317
Creating a PPP subscriber	317
Trigger forced reconnect of PPP sessions using a timer	319
Disable interface IP address auto-configuration from PPP	319

15

Image 15

Patton electronic SmartNode 4110 Series manual Dhcp configuration

Contents

SmartWare Release Patton Electronics Company, Inc Summary Table of Contents SmartWare Software Configuration Guide Table of Contents Command line interface CLI Copying configurations to and from a remote storage location IP context overview 11 NAT/NAPT configuration Serial port configuration PRI port configuration Isdn Overview Basic IP routing configuration Snmp configuration Dhcp configuration CS context overview VPN configuration CS interface configuration FXO interface configuration SIP interface configuration Table of Contents 524 45 H.323 gateway configuration Pstn profile configuration Location Service Terms and definitions List of Figures SmartWare Software Configuration Guide List of Tables How to read this guide About this guideAudience Structure About this guide About this guide Garamond bold type PrecautionsTypographical conventions used in this document General conventions SmartWare Software Configuration GuideAbout this guide Fax +1 253 Service and supportMouse conventions Patton support headquarters in the USA Warranty coverage RMA numbersPatton Electronics Company System overview Chapter contents Introduction IP Router Circuit SwitchSmartWare embedded software VoIP Gateway Carrier networks Applications WAN Enterprise networks Typical LAN telephony system with a SmartNode gateway LAN telephony Conﬁguration concepts Conﬁguration concept overview Gateway Contexts and GatewaysContext Example Bindings Interfaces, Ports, and BindingsInterfaces Ports and circuits Proﬁles and Use commands Use CommandsProﬁles Command line interface CLI Command modes CLI promptOperator exec mode, the system prompt is displayed as Navigating the CLI Command editingCommand help Command completion Command Editing Shortcuts Command history Accessing the CLI If desired Accessing the SmartWare CLI task list Accessing via the console port Console port procedureEnding a Telnet or console port session see Disabling the Telnet server Accessing via a Telnet sessionTelnet Procedure Using an alternate TCP listening port for the Telnet server Login display Selecting a secure password Creating an operator account Password encryptionFactory preset administrator account Conﬁguring operators and administrators Nodecfg#copy running-conﬁg startup-conﬁg Creating an administrator accountName and password password Opening a secure conﬁguration session over SSH Mode Enable Displaying the CLI versionDisplaying account information Node who Switching to another accountChecking identity and connected users Node# who Command index numbers Used in operator execution mode Accessing the CLI Ending a Telnet or console port session Showing command default values System image handling System image handling Memory regions in SmartWare Local Persistent Volatile Flash System image handling task list Displaying system image information Copying system images from a network server to Flash memoryShow version Step Command Purpose Upgrading the software directly Auto provisioning of ﬁrmware and conﬁguration ExplanationHere’s an example for conﬁguration provisioning To use and debug provisioning Boot procedure Boot procedure Default Startup Conﬁguration Factory conﬁgurationIP Addresses in the Factory Conﬁguration Conﬁguration ﬁle handling Understanding conﬁguration ﬁles Configuration file handling Sample conﬁguration ﬁle Conﬁguration ﬁle handling task list Local Memory Regions Copying conﬁgurations within the local memory Name into the local memory Node# copy nvram backup startup-conﬁgBackup already present in ﬂash memory Name nvramtarget-name Remote memory regions for SmartWare Copying conﬁgurations to and from a remote storage location Displaying conﬁguration ﬁle information Nodecfg# copy tftp//ip-addressportNew-startupnvramstartup-conﬁg Modifying the running conﬁguration at the CLI Modifying the running conﬁguration ofﬂine Node#copy running-conﬁg tftp//node-ipNode#reload Delete the conﬁguration named minimal explicitly Example Modifying the running conﬁguration ofﬂineDeleting a speciﬁed conﬁguration Example Deleting a speciﬁed conﬁguration Auto provisioning CLI copy command copy tftp//host/path conﬁg-ﬁleEncrypted ﬁle download Encrypted Conﬁguration Download Use Cases Install a custom encryption key optional Encrypt a conﬁguration ﬁle Download an encrypted conﬁguration ﬁleUpload an encrypted conﬁguration ﬁle Basic system management Basic system management conﬁguration task list Name licenses Licenses Managing feature license keysDownloads the license key ﬁle and install Node cfg#copy tftp//tftp-server/path/ﬁle Setting system information System banner with message to operators Setting the system banner Display clock information Setting time and date De en Display time since last restartConﬁguring the Web server Determining and deﬁning the active CLI version Displaying the system logs Restarting the system Controlling command execution Displaying reportsUnit Bring job 0 to foreground Ctrl-zsuspend active commandShow the currently running commands Ctrl-cterminate current command Displaying the checksum of a conﬁguration Timed execution of CLI commandMode System Some examples Name sys#no terminal idle-time Radius Client Conﬁguration AAA component General AAA Conﬁguration Authentication procedure with a Radius server Nodecfg#show proﬁle authentication Nodecfg#proﬁle authentication nameNodepf-authname#server-timeout Authentication proﬁle-name Radius conﬁguration Example Conﬁgure the Radius clients as shown in ﬁgure Conﬁguring Radius clients Vendor Conﬁguring Radius accounting 109 Attributes in the Radius request message Conﬁguring the Radius server Attributes in the Radius accept message Conﬁguring the local database accounts Base. The no form removes an existing account Example Create an administrator and an operator accountWord password Password Storing call logs with quality information IP context overview IP context and related elements IP context overview conﬁguration task list IP interface related information Planning your IP conﬁgurationConﬁguring physical ports Creating and conﬁguring IP interfaces Conﬁguring Napt Conﬁguring static IP routingConﬁguring RIP Conﬁguring quality of service QoS Conﬁguring access control lists IP interface conﬁguration Nodeif-ip name# IP interface conﬁguration task listCreating an IP interface Nodectx-iprouter#interface name Deleting an IP interface Inside Setting the IP address and netmaskConﬁguring a Napt DMZ interface Name if-ip if-name# no napt Icmp message processing Icmp redirect messagesRouter advertisement broadcast message MTU packet size value must be in the range from Nodeif-ipname#tcp adjust-mssDeﬁning the MTU and MSS of the interface Example Deﬁning the MTU of the interface Displaying IP interface information Conﬁguring an interface as a point-to-point link Processing gratuitous ARP requests Testing connections with the ping commandDisplaying dynamic ARP entries Flushing dynamic ARP entries Node#ping address num Mode Either operator or administrator executionBer timeout seconds IP link supervision Debug ARP Check connectivity of an IP linkShow IP link status Debug connectivity Example Debug ARP output Traceroute Example Display the ARP information Conﬁguring the Igmp Proxy NAT/NAPT conﬁguration Dynamic Napt Tftp because the SmartNode might become inaccessible Static NaptDynamic NAT Napt traversal Static NAT Optional NAT/NAPT conﬁguration task listCreating a Napt proﬁle Node cfg#proﬁle napt name AH, ESP, GRE, or IPv6 respectively directed to Conﬁguring a Napt DMZ hostDeﬁning Napt port ranges Optional Ahespgreipv6 localip Preserving TCP/UDP port numbers in Napt Deﬁning the UDP Napt typeName pf-napt pf-name# udp-handling symmetricaddress Node cfg#show proﬁle napt Activate NAT/NAPTDisplaying NAT/NAPT conﬁguration information Node cfg#context ip router Mode proﬁle napt pf-napt Example Display NAT/NAPT conﬁguration informationConﬁguring NAT static protocol entries Ethernet port conﬁguration Entering the Ethernet port conﬁguration mode Ethernet port conﬁguration task listConﬁguring medium for an Ethernet port Conﬁgures the encapsulation type to IP Conﬁguring Ethernet encapsulation type for an Ethernet portBinding an Ethernet port to an IP interface Nodeprt-eth slot/port#encapsulation ip Nodeprt-eth slot/port#bind interface name router Multiple IP addresses on Ethernet ports Conﬁguring a Vlan Nodevlanid#bind interface name router Nodeconﬁg#port ethernet slot portNodeprt-ethslot/port#vlan id Nodevlanid#encapsulation ippppoemulti Adding a receive mapping table entry Example Adding a receive mapping table entryNodeprt-eth slot/port#cos rx-map layer Closing an Ethernet port Adding a transmit mapping table entry Using the built-in Ethernet sniffer Following is an example of how the sniffer is normally used Nvramethernet-0-slot-port.capNvramethernet-0-0-1.cap Link scheduler conﬁguration Applying scheduling at the bottleneck Using trafﬁc classes Shaping Weighted fair queuing WFQIntroduction to Scheduling Priority Hierarchy Burst tolerant shaping or wfq Quick references Setting the modem rate Source trafﬁc-class class Command cross referencePolicy-map policy-map Proﬁle service-policy Link scheduler conﬁguration task list Enable statistics gathering see Deﬁning the access control list proﬁlePacket classiﬁcation Scenario with Web server regarded as a single source host Creating an access control list Nodepf-acl name#permit ip any any Creating a service policy proﬁleNodecfg#proﬁle acl name Nodepf-acl name#permit ip host ip-address any trafﬁc-class Structure of a Service-Policy Proﬁle Specifying the handling of trafﬁc-classes Deﬁning fair queuing weight Deﬁning absolute priority Mode SourceSpecifying the type-of-service TOS ﬁeld Deﬁning the bit-rate Nodesrc name#set ip precedence value Specifying differentiated services codepoint Dscp markingSpecifying the precedence ﬁeld Nodesrc name#set ip tos value Value is from 0 to Deﬁnes the Class-Of-Service value applied to packets of forSpecifying layer 2 marking Nodesrc name#set ip dscp value Nodesrc name#random-detect burst-tolerance Quality of Service for routed RTP streamsDeﬁning random early detection Discarding Excess Load Mode proﬁle service-policy/proﬁle Devoting the service policy proﬁle to an interface Nodeif-ip if-name#use proﬁle servicePolicy name in out Enable statistics gathering Displaying link arbitration statusDisplaying link scheduling proﬁle information Optional Value Implication on Command Output Serial port conﬁguration Disabling an interface Serial port conﬁguration task list Enabling an interface Conﬁguring the serial encapsulation type Conﬁguring the hardware port protocolPort Conﬁguring the active clock edge Baudrate Conﬁguring the baudrate 176 Frame Relay conﬁguration Conﬁguring Frame Relay encapsulation Frame Relay conﬁguration task list Conﬁguring the keep-alive interval Conﬁguring the LMI type For this PVC only FRF.12 end-to-end fragmentation Enabling fragmentationBer to be used on the speciﬁed virtual circuit Nodepvc dlci#fragment size Entering Frame Relay PVC conﬁguration mode Binding the Frame Relay PVC to IP interface Conﬁguring the PVC encapsulation type IP interface wan is bound to PVC 1 on port serial 0 Mode PVC Disabling a Frame Relay PVC Enabling a Frame Relay PVC Debugging Frame Relay Displaying Frame Relay information Integrated service access 188 Check that the Frame Relay settings are correct Conﬁgure the serial interface settings Example 2 Frame Relay on e1t1 with a channel-group PRI port conﬁguration PRI port conﬁguration task list Terminology Conﬁguring PRI clock-mode Enable/Disable PRI portPRI Debugging Conﬁguring PRI port-type Name prt-e1t1 slot/port# framing Conﬁguring PRI framingName prt-e1t1 slot/port# linecode Ami b8zs hdb3 Conﬁguring PRI line-build-out E1T1 in T1 mode only Conﬁguring PRI used-connector E1T1 in E1 mode onlyConﬁguring PRI application mode E1T1 only Conﬁguring PRI Loopback detection E1T1 only Conﬁguring PRI LOS threshold E1T1 only Conﬁguring PRI encapsulation Default disabled Conﬁguring Channel-Group Encapsulation Mode channel-group group-nameCreate a Channel-Group Conﬁguring Channel-Group Timeslots Conﬁguring Hdlc CRC-Type Entering Hdlc Conﬁguration ModeMode channel-group group Mode hdlc Default no encapsulation Conﬁguring Hdlc EncapsulationPRI Debugging PRI Conﬁguration Examples Example 1 Isdn Example 2 RBS without a channel-groupExample 3 RBS with a channel-group Example 4 Frame Relay without a channel-group Example 5 Framerelay with a channel-group Example 6 PPP without a channel-groupExample 7 PPP with a channel-group BRI port conﬁguration Enable/Disable BRI port BRI port conﬁguration task listConﬁguring BRI clock-mode Creating a channel group Conﬁguring BRI Power-FeedFeed Default disabled Conﬁguring BRI encapsulation Default no timeslots Name ch-grp group-name#no Selects the timeslot to be usedTimeslots timeslots BRI Debugging Name#no debug briName#show port bri Example 1 Isdn with auto clock/uni-side settings Example 2 Isdn with manual clock/uni-side settingsBRI Conﬁguration Examples Example 3 Multi-Link PPP over two B-Channels Isdn Overview Isdn reference points Isdn reference points Possible SmartNode port conﬁgurations Isdn UNI Signaling 215 Isdn Layering Isdn Conﬁguration Concept Isdn conﬁguration Conﬁguring Q.921 parameters Enter Q.921 conﬁguration modeMode base-mode Isdn conﬁguration task list Mode q921 Enter Q.931 conﬁguration modeConﬁguring Q.921 encapsulation Conﬁguring Q.931 parameters Mode q931 Pss1old Nodeq931slot/port#signalling-ruleNodeq931slot/port#no signalling-rule Etsi Control interface Conﬁguring Q.931 encapsulationDebugging Isdn Face if-name Isdn Conﬁguration Examples Example being clock slave on uni network interfaceNode#show port isdn slot port detail level Example Qsig Assume the scenario as illustrated in ﬁgureExample PRI RBS conﬁguration Enter RBS conﬁguration mode RBS conﬁguration task listConﬁguring RBS protocol Noderbs#no encapsulation cc-rbs Mode rbsConﬁguring RBS encapsulation Debugging RBS Example Conﬁguring RBS Ground Start on a E1T1 port RBS Conﬁguration Examples 229 DSL Port Conﬁguration Conﬁguring PPPoE Line Setup Profile napt WAN Conﬁguration Summary Setting up permanent virtual circuits PVC Using PVC channels in bridged Ethernet modeUsing PVC channels with PPPoE Link State Troubleshooting DSL ConnectionsDiagnostics PPPoE access Basic IP routing conﬁguration Policy routing Basic IP routing conﬁguration task listRouting tables Static routing Adds a static route Displaying IP route information seeConﬁguring static IP routes Nodecfg#context ip router Enters the IP router Context Displaying IP route information Deleting static IP routes 0.0/0 172.16.32.2 Static Conﬁguring policy routing Basic static IP routing example Examples Changing the default UDP port range for RTP and Rtcp RIP conﬁguration Routing protocol Enabling send RIP RIP conﬁguration task list Specifying the send RIP version Enabling an interface to receive RIP Example Enabling RIP learn host and default Specifying the receive RIP versionEnabling RIP learning Enabling RIP announcing Enabling RIP auto summarization Specifying the default route metric Enabling the poison reverse algorithm Enabling RIP split-horizon processing Nodeif-ipname#rip route-expiry Setting the RIP route expiry3600 Default 180 seconds Enabling holding down aged routes Displaying global RIP information Displaying RIP conﬁguration of an IP interface 252 Access control list conﬁguration About access control lists What access lists doWhy you should conﬁgure access lists Features of access control lists When to conﬁgure access lists Mapping out the goals of the access control list Access control list conﬁguration task list Nodepf-acl name#permit ip src src-wildcard any Where the syntax is Any host src dest dest-wildcard any host dest Nodepf-acl name#permit icmp src src-wildcard anyType type type type code code cos group Nodepf-acl name#deny icmp src src-wildcard Code code Where the syntax is as followingMsg name Type type Nodepf-acl name#deny tcp udp sctp src src Nodepf-acl name#permit tcp udp sctp src src-wildCard any host src eq port gt port lt port range Port lt port range from to cos group cos-rtp group Range from to Eq portLt port Gt port Where the syntax is Unbind an access control list proﬁle from an interface Displaying an access control list proﬁleDebugging an access control list proﬁle Control list profile shall be debugged Denying a speciﬁc subnet Commands that have to be entered are listed below Snmp conﬁguration Snmp basic commands Simple Network Management Protocol SnmpSnmp basic components Identiﬁcation of a SmartNode via Snmp Snmp management information base MIBNetwork management framework Setting basic system information Snmp toolsSnmp conﬁguration task list 271 Example Setting the system group objects Setting access community information Ro rw Or read/write access Nodecfg#snmp target IP-address-of-SN Setting allowed host informationSpecifying the default Snmp trap target Nodecfg#snmp host IP-address-of-SN security Displaying Snmp related information Using the AdventNet Snmp utilities AdventNet MibBrowser Settings Button on the Toolbar Using the MibBrowser AdventNet TrapViewer displaying received traps Using the TrapViewer Speciﬁc Type TimeStampEnterprise Generic Type Standard Snmp version 1 traps Snmp interface traps 281 Sntp client conﬁguration Sntp client conﬁguration task list Deﬁning Sntp client operating mode Selecting Sntp time serversUnicast anycast multicast Deﬁning Sntp local UDP port Deﬁning Sntp client poll interval Enabling and disabling the Sntp clientExample Enabling the Sntp client operation Example Disabling the Sntp client operation Displays the local time, UTC and the offset of the local Deﬁning Sntp client constant offset to GMTDeﬁning the Sntp client anycast address Name #show clock local Example Enabling the Sntp client root delay compensation Enabling and disabling local clock offset compensationNodecfg#sntp-client anycast-address ip Debugging Sntp client operation Example Disabling the Sntp client root delay compensationShowing Sntp client related information Example Showing Sntp client related information Recommended public Sntp time servers Nist Internet time service 291 Dhcp conﬁguration Dhcp configuration Enable DHCP-client on an IP interface DHCP-client conﬁguration tasksDHCP-server and DHCP-client are illustrated in ﬁgure ‘conﬁgure’ conﬁguration mode Example Enable DHCP-client on an IP interface Get debug output from DHCP-client Mode AnyExample Enable Dhcp debug monitor Release or renew a Dhcp lease manually advanced Conﬁgure DHCP-server proﬁles DHCP-server conﬁguration tasks Nodepf-dhcpsname#network ip Nodepf-dhcpsname#no defaultNodepf-dhcpsname#no netbios Nodecfg#proﬁle dhcp-server name All ip-address Use DHCP-server proﬁles and enable the DHCP-serverNodepf-dhcpsname#no bootﬁle boot Nodepf-dhcpsname#no next-server Deﬁne the bootﬁle Option 67 for the DHCP-server Deﬁne the Tftp server Option 66 for the DHCP-serverCheck DHCP-server conﬁguration and status Get debug output from the DHCP-server Create/Modify DHCP-Relay proﬁle Conﬁgure DHCP-relay Enable/Disable DHCP-Relay Agent DNS conﬁguration DNS conﬁguration task list Enabling the DNS resolverServer-ip-address Enabling the DNS relay DNS relay diagram 307 DynDNS conﬁguration Creating a DynDNS account Conﬁguring the DNS resolver DynDNS conﬁguration task list Conﬁguring basic DynDNS settings Conﬁguring the DynDNS serverWord Deﬁning a mail exchanger for your hostname Conﬁguring advanced DynDNS settings optionalMode DynDNS Troubleshooting 312 PPP conﬁguration 314 PPP conﬁguration task list Creating an IP interface for PPPNodeif-ipname#point-to-point Nodeif-ipname# ipaddress ip-address Nodeif-ipname# no tcp adjust-mssNodeif-ipname#ipaddress Nodeif-ipname#ipaddress dhcp Nodecfg # subscriber ppp name Disable interface IP address auto-conﬁguration from PPPCreating a PPP subscriber Nodeif-ipname#use proﬁle napt name Nodesubscrname# no identiﬁcation Optional outboundinbound user passwordNodesubscrname# dial inout Chap pap chappap Conﬁguring a PPPoE session Trigger forced reconnect of PPP sessions using a timer Tor AC-Name Optional ﬁle Case authentication is requiredConﬁguring PPP over a Hdlc Link Creating a PPP proﬁle Nodepf-pppname#mru min min max DefaultNodecfg #no proﬁle ppp name Nodepf-pppname#mtu min min max Name pf-ppp proﬁle# mrru min Min max max defaultDefault Conﬁguring the local and remote PPP Mrru Example Display PPP subscriber conﬁguration information Displaying PPP conﬁguration information Debugging PPP Example Display a PPP proﬁle Nodecfg #show port interface name Nodecfg #show ppp links levelNodecfg #show ppp networks level Nodecfg #show pppoe name LCP Example Display PPP link information Example Display PPPoE information Example Display PPP network protocol information PPP over Ethernet PPPoE Without authentication, encapsulation multi, with NaptWith authentication, encapsulation PPPoE Sample conﬁgurations PPP over a Hdlc Link E1T1 Port Without authentication, numbered interfaceWith authentication, unnumbered interface PPP over a Hdlc Link Serial Port PPP Dialer PPP Dial-up over Isdn Create outbound destinations Following command creates a new PPP dialer Mode context csDial-up and login information for a certain Create a dialer Conﬁgure recovery strategy Case Create inbound destinations Name inboundprovider#remote-e164 Name if-dialerdialer#inboundName inboundprovider#local-e164 E164 Debug dialer functionality Example Dial-on demand feature Dial-up on demand Dial-up Dial if possible, and never drop Mode context ip/interface Dial-up on monitorDial-up nailed CS context overview CS context conﬁguration components Planning the CS conﬁguration CS context conﬁguration task list Remote ofﬁce in an Enterprise network Conﬁguring the clock source Conﬁguring general CS settings Debugging the clock source Mode Operator execution Reference clock Conﬁguring call routingSelecting PCM law compression Node sys#clock-sourceslot-number port-number Specify call routing Creating and conﬁguring CS interfaces Conﬁguring voice over IP parameters Conﬁguring dial tones Conﬁguring a SIP VoIP connection Conﬁguring Isdn portsConﬁguring FXS ports Conﬁguring an H.323 VoIP connection Activating CS context conﬁguration Level Nodectx-csswitch#show call-router config detailNode ctx-csswitch#debug call-router detail level Nodectx-csswitch#show call-router status detail SmartNode in an Enterprise network CS Conﬁguration Planning the CS context Conﬁguring general CS settings First we set clock-source to Isdn port 2/3Conﬁguring call routing 354 Conﬁguring BRI ports Conﬁguring VoIP settingsBecause we need G.723 as codec we enable Dtmf relay We want to use this proﬁle on our H.323 interfaces Next we conﬁgure call signaling Conﬁguring an H.323 VoIP connectionActivating the CS context conﬁguration TAB-CALLED-NUMBER Finally, activate the gateway and CS context Conﬁguration script for our application looks as follows Showing the running conﬁguration 359 360 361 VPN conﬁguration Encryption Authentication Transport and tunnel modes Permanent IKE TunnelsKey management Creating an IPsec policy proﬁle VPN conﬁguration task listCreating an IPsec transformation proﬁle Example Create an IPsec transformation proﬁle Procedure To create an IPsec policy proﬁle Mode Conﬁgure Creating/modifying an outgoing ACL proﬁle for IPsec Displaying IPsec conﬁguration information Conﬁguration of an IP interface and the IP router for IPsec Example IPsec Debug Output Example Display IPsec transformation proﬁlesExample Display IPsec policy proﬁles Debugging IPsec Key management IKE Main differences between manual & IKE Ipsec conﬁgurationsCreating an Ipsec transform proﬁle Creating an Isakmp transform proﬁle Mode. The peer can either be an IP address or a Creating an Isakmp Ipsec policy proﬁleShould be used. Do not specify a peer, if this pol Icy shall be used for multiple peers in transport Sample conﬁguration snippet Creating/modifying an outgoing ACL proﬁle for IpsecConﬁguration of an IP interface and the IP router for Ipsec Policy matching Debug ike error Use proﬁle acl WANOut outDebug ike event Encrypted Voice Performance considerations Enabling RTP encryption supportPerformance considerations Mode Context ip /interface if-name SmartNode conﬁguration IPsec tunnel, DES encryption Cisco router conﬁguration 379 380 CS interface conﬁguration CS interfaces on the CS context CS interface conﬁguration task list Examples Create CS interfaces and delete another Nodeif-typeif-name#…Nodeif-typeif-name#exit 384 Service service-name Nodeif- typeif-name #exit Conﬁguring the interface mapping tablesTable table-name Speciﬁed direction Table in table-nameThat shall be applied to all call properties And/or Incoming call passing an interface mapping table Call passing an input and an output mapping table Conﬁguring the precall service tables Repeat to add other special number map Supplementary service invocation commandsNumber to command Supplementary service invocation command Isdn interface conﬁguration Isdn interfaces on the CS context Isdn interface conﬁguration task list Deﬁnes an alternate Pstn proﬁle to be used for Conﬁguring Dtmf dialing optionalConﬁguring an alternate Pstn proﬁle optional Nodeif-isdn if-name#no use proﬁle Disabling call-waiting on Isdn DSS1 network interfaces Name if-isdn if-name# no call-waiting Disable call-waitingConﬁguring ringback tone on Isdn user-side interfaces Conﬁguring call waiting optional Conﬁguring Call-Hold on Isdn interfaces Enabling Display Information Elements on Isdn PortsConﬁguring date/time publishing to terminals optional Deﬁning the ‘network-type’ in Isdn interfaces Sending the connected party number Colp optional Home Office Isdn Advice of Charge support 398 If there is not charge information from the network If there is no tariff information from the network forAll calls Nodeif-isdnif- name# aoc-d automatic NoChargeAvailable Isdn User Interface Connected to a PBX switch etcFollowing table shows an overview of the AOC variants Isdn Network Interface connected to phones Receive Direction Mode interface isdn interfaceIsdn DivertingLegInformation2 Facility Transmit Direction Nodeif-isdn#caller-name Nodeif-isdn#caller-name early-alerting500 Absence Outgoing Isdn call. This feature is disabledBy default Nodeif-isdn#caller-name ignore FXS interface conﬁguration Conﬁguring a subscriber number recommended FXS interface conﬁguration task list Nameif-fxsname#no subscriber Mode Interface FXSConﬁguring caller-ID presentation optional Conﬁguring ﬂash hook processing optional Conﬁguring ringing-cadence optional Ing-indication stutter-dial-tone Through Stuttered Dial Tone Conﬁguring the Message Waiting Indication feature for FXS Frequency-shift keying Mat etsiMat bell Call hold Call transfer FXS supplementary services description Tern Default enabledCall hold Call waiting Call toggle Call waiting reminder ringDrop passive call Drop active call Pattern ConferencingCall park Nameif-fxsname#no drop-passive FXO interface conﬁguration FXO interfaces on the CS context Creating an FXO interface FXO services description Nodectx-csswitch#interface fxo name Deleting an FXO interfaceNodeif-fxo name # FXO off-hook on caller ID FXO interface conﬁguration task list Nodeif-fxo if-name# Conﬁguring when the digits are dialed optionalNodectx-csswitch#interface fxo if-name Nodeif-fxoif-name# Nodeif-fxoif-name#dial-after dial-tone timeout seconds Figuration mode Nodeif-fxo if-name #ring-number count Nodeif-fxo if-name# Min min-time max max-time Conﬁguring how to detect a call has disconnected optional Battery-reversal tax-pulse Nodeif-fxo if-name#no connect-signal FXO Mute dialing Conﬁguring the destination of the call FXO interface examples RBS interface conﬁguration Name Face, the ‘no’ form deletes an existing one RBS interface conﬁguration task listCreating/Deleting a RBS interface Conﬁguring an alternate Pstn proﬁle Conﬁguring B-Channel allocation strategy Mode Interface RBSConﬁguring additional disconnect signals Conﬁguring an alternate Tone-Set proﬁle Conﬁguring ready to dial strategy Nodeif-rbsif-name#no dial-after dial- tone timeout secondsNode#no debug ccrbs datapath error signaling Conﬁguring number of Rings before Off-Hook Node#show ccrbs interface if-name detail Node#show ccrbs call if-name detail levelPrints information about ongoing calls on Selected interface Interface conﬁguration Interface conﬁguration task list Examples Deﬁne the IP address of the remote H.323 entity Binding the interface to an H.323 gateway Conﬁguring an alternate VoIP proﬁle optional Node if- h323 if-name #itc tx 3k1 Conﬁguring CLIP/CLIR support optionalNode if- h323 if-name #itc rx 3k1 Speciﬁes the information transfer capability to Nameif-h323name#early-connect Enabling ‘early-proceeding’ on H.323 interfacesEnabling the early call connect optional Nameif-h323if-name#early-proceeding Enabling the via address support optional Enabling the early call disconnect optional Conﬁguring status inquiry settings optional Nodeif-h323if-name# remoteport portIng connection should be established AOC-D Support for H.323 Mode context cs/interfce h.323 interface-name Nodeif-h323if-name# no aoc-dNodeif-h323if-name# no aoc-d emit SIP interface conﬁguration SIP interface conﬁguration task list SIP Sip-gateway gw-name Binding the interface to a SIP gatewayConﬁgure a remote host Nodeif-sipif-name# no bind context Nodeif-sipif-name# no local host Using an alternate VoIP proﬁle OptionalConﬁguring a local host Optional Nodeif-sipif-name# no remote host Nodeif-sipif-name#use proﬁle sip pro Using an alternate SIP proﬁle OptionalUsing an alternate Tone-Set proﬁle Optional Nodeif-sipif-name#use proﬁle voip Conﬁguring early call connect / disconnect Optional Conﬁguring address translation OptionalMapping call-control properties in SIP headers Mapping SIP headers to call-control properties Conﬁguring Isdn Redirecting Number Tunneling Over SIPHeader Updating caller address parameters SIP Diversion Header 450 SIP Refer Transmission & Isdn Explicit Call Transfer support 452 Name if-sip interface#no aoc-d emit AOC Over SIP OptionalName if-sip interface#no aoc-d Accept Enabling the SIP penalty-box feature Optional Enabling the session timer Optional Conﬁgure the SIP hold method Optional Default zero-ip Call router conﬁguration Call router configuration 458 Direct call routing vs. advanced call routing Map out the goals for the call router Call router conﬁguration task list Enable advanced call routing on circuit interfaces Conﬁgure address completion timeoutConﬁgure general call router behavior Digit-collection terminating-char char Example Conﬁgure address completion timeoutAddress-completion timeout timeout Digit-collection timeout timeout National-preﬁx preﬁx Procedure To conﬁgure number preﬁx Mode Context CSConﬁgure number preﬁx for Isdn number types Example Conﬁgure number preﬁx Create a routing table Conﬁgure call routing tables Calling-e164 Example Called party number routing table Called party number routing tableRegular Expressions Symbol Description Digit Collection Digit Collection Variants Example Digit collection of any number Dialed Selected Description Number Entry Number type routing table Calling party number routing table Numbering plan routing table IP address routing table Name routing table Dot . means ‘any character’ in a regular expression Presentation Indicator Routing TableURI routing table Smith must be escaped with a backslash \, because Screening Indicator Routing Table Information transfer capability routing table 478 Example Day of week routing table Default Any other unhandled case Mode context csTime of day routing table Day of Week Routing Table Resulting running-conﬁg is Procedure To delete an entire routing tableNode ctx-cs switch #routing-table Deleting routing tables Delete the routing table table-name Node ctx-cs switch #no routing-tableExample Remove an entire routing table Conﬁgure mapping tables Type Description Input-Type Description Output-Type Sets the display name of the called Mapping table examples Away the input-type and output-type Example Called and calling party manipulation mapping tableTo E.164 Mapping Tables Input-type to output-type table-name 486 487 Other mapping tables Custom SIP URIs from called-/calling-e164 properties Node ctx-cs switch #mapping-table Deleting mapping tablesEnter the mapping table from which you want to remove an Procedure To delete an entire mapping table Mode Context CS Example Remove an entire mapping tableCreating complex functions Deleting complex functions Example Create a complex function Ingress interface Example Remove an entire complex functionDigit collection & sending-complete behavior Sending-Complete 323 Call-Router Yes True123# Egress Interface Complete-indication clear Mode context cs / interface sip Creating a hunt group service Creating call services Hunt group service Call dest-interface interface-name Node ctx-cs switch #service huntCall dest-service service-name Cause cause Normal Event Default Behavior Class Cause Hunt Description Group Service No-user-responding Drop original call Option Not Service orResource Unavailable Invalid Message Implemented Protocol Error Interworking Distribution group service Creating a distribution group service With the ﬁrst conﬁgured destinations Node ctx-cs switch #service distribuNodesvc-huntservice-name# route call Dest-service service-name Call-router ‘limiter’ service Distribution-Group Min-Concurrent setting ‘Limiter’ service diagram Priority service Priority service diagram Bridge CS Bridge service-‘VoIP Leased Line’ Bridge services diagram Conﬁguration Example Conﬁguring the service second-dialtone Activate the call router conﬁguration Deleting call services Example Create and test a routing table Test the call router conﬁguration 516 Call routing example network 518 CS context and call router elements 520 Conﬁgure partial rerouting Call reroute Mode context cs/interface sipEnable push-back aaa service Mode context cs/service aaa Enable push-back limiter service Enable push-back bridge serviceEnable push-back distribution-group service Enable push-back hunt group service SIP call-router services Name ctx-csswitch#no service sip SIP conference-serviceSIP conference-service conﬁguration task list Entering conference-service conﬁguration mode Ference-server host-name port SIP location-serviceMode Service SIP conference Conﬁguring the conference server Entering SIP location-service conﬁguration mode SIP location-service conﬁguration task list Seconds Binding a location serviceConﬁguring the hunt timeout Conﬁguring multi-contact behavior Tone conﬁguration Tone-set proﬁles Conﬁguring call-progress-tone proﬁles Tone conﬁguration task list Conﬁgure tone-set proﬁles Procedure To conﬁgure a tone-set proﬁle Mode Conﬁgure Enable tone-set proﬁle Procedure To assign a tone-set proﬁle to a Pstn interfaceFor which a tone indication can be provided Name Ciﬁc with name name Show call-progress-tone and tone-set proﬁlesExample Show tone-set proﬁle Node#show proﬁle call-progress-tone Following example shows how to display the tone-set proﬁle 536 FXS port conﬁguration Shutdown and enable FXS ports Bind FXS ports to higher layer applications Conﬁgure country-speciﬁc FXS port parametersNetherlands Nodeconﬁg#port fxs slot port Mode IC voice in systemEnter FXS port conﬁguration mode Other FXS port parameters Example FXO port conﬁguration Bind FXO ports to higher layer applications Shutdown and enable FXO ports Nodeprt-fxo slot/ port#use Conﬁgure country speciﬁc FXO port parametersOther FXO port parameters Nodeconﬁg#port fxo slot port Enter FXO port conﬁguration mode Gateway conﬁguration Gateway between IP and CS contexts Binding the gateway to an IP interface Mode Gateway H.323Enable the gateway Gateway conﬁguration task list Conﬁgure registration authentication service RAS Optional Conﬁgure H.235 Security optional Node gw-h323h323#gatekeeper-discovEry auto gkid 235 conﬁguration Procedure To enable H.235 security on H.323 gateway Node gw-h323h323#h235security pass \getcryptopassword h235-password masWord h235-password encrypted Node gw-h323h323#h235security master Detail debug-level Default setting isCommand show h235-securityshows the current setting Signaling message Enabling H.245 Tunneling Advanced conﬁguration options optional Nodegw-h323h323#faststart Enables the fastconnect procedure Enabling the fastconnect procedureEnabling the early H.245 procedure Nodegw-h323h323#h245-tunneling Enables H.245 tunneling Port Naling connections Conﬁguring the trafﬁc class for H.323 signalingSetting the response timeout Nodegw-h323h323#call-signaling-port Setting the connect timeout Nal gatewayIstration Nodecfg#debug gateway h323 tpktchan Nodecfg#debug gateway h323 errorNodecfg#debug gateway h323 signaling H323 status detail level Context SIP gateway overview Routing Architecture Creating a context SIP gateway Enter conﬁguration modeContext SIP Gateway conﬁguration task list From-URI-Host equal Remote Request-URI-Host equal Local Conﬁguring the IP binding Mode Context SIP GatewayMode Transport Interface Creating a transport interface Binding location services Conﬁguring a spoofed contact addressEnabling/disabling the context SIP gateway Node#show context sip-gateway gw TroubleshootingDebug commands Show status information Example Conﬁguration Examples Outbound Authentication Inbound Authentication Outbound Registration 569 Inbound Registration B2B User Agent with Registered Clients 572 VoIP proﬁle conﬁguration VoIP profile configuration Nodepf-voip name# VoIP proﬁle conﬁguration task listCreating a VoIP proﬁle Nodecfg#profile voip name Conﬁgure codecs Mode Proﬁle VoIP Procedure Remove a codec from the list Mode Proﬁle VoIPProcedure Insert a codec at a speciﬁc position in the list Mode VoIP name Conﬁguring the transparent-clearmode codecConﬁguring the Cisco versions of the G.726 codecs Nodepf-voip pf-name#dtmf-relay DefaultrtpsignalingConﬁguring Dtmf relay Conﬁguring RTP payload types Nodepf-voip name#rtp payload-type nse Conﬁguring RTP payload type for transparent-clearmodeConﬁguring RTP payload type for Cisco NSE Conﬁguring Cisco NSE for Fax Jitter and dejitter buffer Conﬁguring the dejitter buffer advanced Adaptive Procedure Conﬁgure the dejitter buffer Is valid for all modes Max-delayDejitter buffer is allowed to introduce. This setting Enabling/disabling ﬁlters advanced Illustrates the difference between Fax relay and Fax bypass Conﬁguring Fax transmission Fax relay and Fax bypass Nodepf-voipname# fax transmis Nodepf-voipname#fax transmisSion bypass g711alaw64k Nodepf-voipname#fax dejitter Retransmission number Mode proﬁle voip proﬁle-nameVolume CED retransmission Fax bypass method No-Signal RetransmissionMode proﬁle voip pf-name Method default v150-vbdnse Default default Mission bypass g711alaw64k Modem bypass methodConﬁguring modem transmission Nodepf-voip name#modem trans Conﬁguring IP-IP codec negotiation Conﬁguring the trafﬁc class for Voice and Fax data Home ofﬁce in an enterprise network Home ofﬁce in an enterprise network Description Home ofﬁce with fax Show the conﬁgured proﬁle Soft phone client gateway 595 Disable Dtmf relay Show the conﬁgured proﬁle Pstn proﬁle conﬁguration Creating a Pstn proﬁle Pstn proﬁle conﬁguration task list Conﬁguring output gain Conﬁguring the echo cancellerProcedure Disable echo cancellation Mode Proﬁle Pstn Procedure Conﬁgure voice output gain 600 SIP proﬁle conﬁguration Namecfg#no profile name name Entering the conﬁguration mode for a SIP proﬁleSIP proﬁle conﬁguration task list Mapping from a SIP disconnect cause Q931-cause to sip-cause Mapping to a SIP causeMapping from a SIP redirection reason Mapping to a SIP redirection code Authentication Service Creating an Authentication Service Authentication Service conﬁguration task list Conﬁguring the authentication protocol Conﬁguring a RealmCreating credentials Location Service Domain Examples Location Service conﬁguration task listCreating a Location Service Adding a domain Creating an identity Mode Identity Authentication outbound face AliasBound Nodeauthout#authenticate index Mode Authentication outboundAuthentication inbound face Nodeauthout#authenticate authentica Nodeauthin#no authenticate index Mode Authentication inboundNodeauthin#authenticate authentica Nodeauthin#authenticate index Registration outbound face Mode Registration outbound Noderegout#proxy index down posi Noderegout#proxy host portStrict-route Port strict-route Inbound Noderegin# no lifetime default secRegistration inbound face Nodeidentityname# no registration Nodecallout#proxy index host Mode Call outboundCall outbound face Nodecallout#proxy host port Mode Call outbound Mode Call inboundCall inbound face Inheriting from an identity group to an identity Creating an identity group Subscription Conﬁguring the Message Waiting Indication feature for SIP Notiﬁcation Mode Message inbound Mode Message inbound Message Waiting Indication through Call-Control This conﬁguration example, inheritance is used VoIP debugging Debugging strategy Example Verify IP connectivity Following command will disable the ﬁlter completelyFiltering debug monitor output Verifying IP connectivity Overview Isdn debug monitors Debugging call signalingDebugging Isdn signaling Unit#debug ccisdn signaling Verify an incoming call Verify an outgoing call Line 630 Isdn layer 2 and 3 can be veriﬁed using a show command Verify Isdn layer 2 and 3 statusDebug isdn event slot port all layer2 layer3 For most verbose output Debugging FXS SignalingOverview FXS debug monitors Stops State to RINGING, that means it has accepted the call Overview H.323 debug monitors Debugging H.323 Signaling 635 636 637 Debugging SIP signaling Using SmartWare’s internal call generator Way control detail level Debugging voice dataNo debug media-gate Way dejitter Way dsp Way switchWay error Way rtp Check system logs How to submit trouble reports to Patton 643 Appendix a Terms and deﬁnitions Also release SmartWare architecture terms and deﬁnitions Pression Buffer Ory Pots Tftp Appendix B Mode summary Mode overview, 1 Mode Overview, 2 Mode Overview, 3 Appendix C Command summary Ebnf syntax Show help New Conﬁguration CommandsShow command history Other Appendix D Internetworking terms & acronyms Numeric Abbreviations DSS1 MSN SAR Appendix E Used IP ports & available voice Codecs Used IP ports TelnetWebserver Available voice codecs