DSS1 | Patton electronic SmartNode 4110 Series guide

SmartWare Software Configuration GuideD • Internetworking terms & acronyms

Abbreviation	Meaning

E-DSS1	ETSI Euro ISDN Standard

EFS	Embedded File System

ET	Exchange Termination

ETH	Ethernet

F

FAQ	Frequently Asked Questions

FCC	Federal Communication Commission

FR	Frame Relay

G

G.711	ITU-T Voice encoding standard

G.723	ITU-T Voice compression standard

GUI	Graphic User Interface

GW	Gateway

H

H.323	ITU-T Voice over IP Standard

HFC	Hybrid Fiber Coax

HTTP	HyperText Transport Protocol

HW	Hardware

I

IAD	Integrated Access Device

ICMP	Internet Control Message Protocol

ILEC	Incumbent Local Exchange Carriers

IP	Internet Protocol

ISDN	Integrated Services Digital Network

ISDN NT	ISDN Network Termination

ISDN S	ISDN S(ubscriber Line) Interface

ISDN T	ISDN T(runk Line) Interface

ISDN TE	ISDN Network Terminal Mode

ITC	Information Transfer Bearer Capability

L

L2TP	Layer Two Tunneling Protocol

LAN	Local Area Network

LCR	Least Cost Routing

LDAP	Lightweight Directory Access Protocol

LE	Local Exchange

LED	Light Emitting Diode

LT	Line Termination

M

MIB II	Management Information Base II

Abbreviations

659

Image 659

Patton electronic SmartNode 4110 Series manual DSS1

Contents

SmartWare Release Patton Electronics Company, Inc Summary Table of Contents SmartWare Software Configuration Guide Table of Contents Command line interface CLI Copying configurations to and from a remote storage location IP context overview 11 NAT/NAPT configuration Serial port configuration PRI port configuration Isdn Overview Basic IP routing configuration Snmp configuration Dhcp configuration CS context overview VPN configuration CS interface configuration FXO interface configuration SIP interface configuration Table of Contents 524 45 H.323 gateway configuration Pstn profile configuration Location Service Terms and definitions List of Figures SmartWare Software Configuration Guide List of Tables Audience How to read this guideAbout this guide Structure About this guide About this guide Garamond bold type PrecautionsTypographical conventions used in this document General conventions SmartWare Software Configuration GuideAbout this guide Fax +1 253 Service and supportMouse conventions Patton support headquarters in the USA Patton Electronics Company Warranty coverageRMA numbers System overview Chapter contents Introduction IP Router Circuit SwitchSmartWare embedded software VoIP Gateway Carrier networks Applications WAN Enterprise networks Typical LAN telephony system with a SmartNode gateway LAN telephony Conﬁguration concepts Conﬁguration concept overview Gateway Contexts and GatewaysContext Example Bindings Interfaces, Ports, and BindingsInterfaces Ports and circuits Proﬁles Proﬁles and Use commandsUse Commands Command line interface CLI Operator exec mode, the system prompt is displayed as Command modesCLI prompt Navigating the CLI Command editingCommand help Command completion Command Editing Shortcuts Command history Accessing the CLI If desired Accessing the SmartWare CLI task list Ending a Telnet or console port session see Accessing via the console portConsole port procedure Disabling the Telnet server Accessing via a Telnet sessionTelnet Procedure Using an alternate TCP listening port for the Telnet server Login display Selecting a secure password Creating an operator account Password encryptionFactory preset administrator account Conﬁguring operators and administrators Nodecfg#copy running-conﬁg startup-conﬁg Creating an administrator accountName and password password Opening a secure conﬁguration session over SSH Displaying account information Mode EnableDisplaying the CLI version Node who Switching to another accountChecking identity and connected users Node# who Command index numbers Used in operator execution mode Accessing the CLI Ending a Telnet or console port session Showing command default values System image handling System image handling Memory regions in SmartWare Local Persistent Volatile Flash System image handling task list Show version Displaying system image informationCopying system images from a network server to Flash memory Step Command Purpose Upgrading the software directly Here’s an example for conﬁguration provisioning Auto provisioning of ﬁrmware and conﬁgurationExplanation To use and debug provisioning Boot procedure Boot procedure IP Addresses in the Factory Conﬁguration Default Startup ConﬁgurationFactory conﬁguration Conﬁguration ﬁle handling Understanding conﬁguration ﬁles Configuration file handling Sample conﬁguration ﬁle Conﬁguration ﬁle handling task list Local Memory Regions Copying conﬁgurations within the local memory Name into the local memory Node# copy nvram backup startup-conﬁgBackup already present in ﬂash memory Name nvramtarget-name Remote memory regions for SmartWare Copying conﬁgurations to and from a remote storage location New-startupnvramstartup-conﬁg Displaying conﬁguration ﬁle informationNodecfg# copy tftp//ip-addressport Modifying the running conﬁguration at the CLI Node#reload Modifying the running conﬁguration ofﬂineNode#copy running-conﬁg tftp//node-ip Delete the conﬁguration named minimal explicitly Example Modifying the running conﬁguration ofﬂineDeleting a speciﬁed conﬁguration Example Deleting a speciﬁed conﬁguration Auto provisioning CLI copy command copy tftp//host/path conﬁg-ﬁleEncrypted ﬁle download Encrypted Conﬁguration Download Use Cases Install a custom encryption key optional Upload an encrypted conﬁguration ﬁle Encrypt a conﬁguration ﬁleDownload an encrypted conﬁguration ﬁle Basic system management Basic system management conﬁguration task list Name licenses Licenses Managing feature license keysDownloads the license key ﬁle and install Node cfg#copy tftp//tftp-server/path/ﬁle Setting system information System banner with message to operators Setting the system banner Display clock information Setting time and date De en Display time since last restartConﬁguring the Web server Determining and deﬁning the active CLI version Displaying the system logs Restarting the system Unit Controlling command executionDisplaying reports Bring job 0 to foreground Ctrl-zsuspend active commandShow the currently running commands Ctrl-cterminate current command Displaying the checksum of a conﬁguration Timed execution of CLI commandMode System Some examples Name sys#no terminal idle-time Radius Client Conﬁguration AAA component General AAA Conﬁguration Authentication procedure with a Radius server Nodecfg#show proﬁle authentication Nodecfg#proﬁle authentication nameNodepf-authname#server-timeout Authentication proﬁle-name Radius conﬁguration Example Conﬁgure the Radius clients as shown in ﬁgure Conﬁguring Radius clients Vendor Conﬁguring Radius accounting 109 Attributes in the Radius request message Conﬁguring the Radius server Attributes in the Radius accept message Conﬁguring the local database accounts Base. The no form removes an existing account Example Create an administrator and an operator accountWord password Password Storing call logs with quality information IP context overview IP context and related elements IP context overview conﬁguration task list IP interface related information Planning your IP conﬁgurationConﬁguring physical ports Creating and conﬁguring IP interfaces Conﬁguring RIP Conﬁguring NaptConﬁguring static IP routing Conﬁguring quality of service QoS Conﬁguring access control lists IP interface conﬁguration Nodeif-ip name# IP interface conﬁguration task listCreating an IP interface Nodectx-iprouter#interface name Deleting an IP interface Inside Setting the IP address and netmaskConﬁguring a Napt DMZ interface Name if-ip if-name# no napt Router advertisement broadcast message Icmp message processingIcmp redirect messages MTU packet size value must be in the range from Nodeif-ipname#tcp adjust-mssDeﬁning the MTU and MSS of the interface Example Deﬁning the MTU of the interface Displaying IP interface information Conﬁguring an interface as a point-to-point link Processing gratuitous ARP requests Testing connections with the ping commandDisplaying dynamic ARP entries Flushing dynamic ARP entries Node#ping address num Mode Either operator or administrator executionBer timeout seconds IP link supervision Debug ARP Check connectivity of an IP linkShow IP link status Debug connectivity Example Debug ARP output Traceroute Example Display the ARP information Conﬁguring the Igmp Proxy NAT/NAPT conﬁguration Dynamic Napt Dynamic NAT Tftp because the SmartNode might become inaccessibleStatic Napt Napt traversal Static NAT Optional NAT/NAPT conﬁguration task listCreating a Napt proﬁle Node cfg#proﬁle napt name AH, ESP, GRE, or IPv6 respectively directed to Conﬁguring a Napt DMZ hostDeﬁning Napt port ranges Optional Ahespgreipv6 localip Name pf-napt pf-name# udp-handling symmetricaddress Preserving TCP/UDP port numbers in NaptDeﬁning the UDP Napt type Node cfg#show proﬁle napt Activate NAT/NAPTDisplaying NAT/NAPT conﬁguration information Node cfg#context ip router Conﬁguring NAT static protocol entries Mode proﬁle napt pf-naptExample Display NAT/NAPT conﬁguration information Ethernet port conﬁguration Conﬁguring medium for an Ethernet port Entering the Ethernet port conﬁguration modeEthernet port conﬁguration task list Conﬁgures the encapsulation type to IP Conﬁguring Ethernet encapsulation type for an Ethernet portBinding an Ethernet port to an IP interface Nodeprt-eth slot/port#encapsulation ip Nodeprt-eth slot/port#bind interface name router Multiple IP addresses on Ethernet ports Conﬁguring a Vlan Nodevlanid#bind interface name router Nodeconﬁg#port ethernet slot portNodeprt-ethslot/port#vlan id Nodevlanid#encapsulation ippppoemulti Nodeprt-eth slot/port#cos rx-map layer Adding a receive mapping table entryExample Adding a receive mapping table entry Closing an Ethernet port Adding a transmit mapping table entry Using the built-in Ethernet sniffer Nvramethernet-0-0-1.cap Following is an example of how the sniffer is normally usedNvramethernet-0-slot-port.cap Link scheduler conﬁguration Applying scheduling at the bottleneck Using trafﬁc classes Shaping Weighted fair queuing WFQIntroduction to Scheduling Priority Hierarchy Burst tolerant shaping or wfq Quick references Setting the modem rate Source trafﬁc-class class Command cross referencePolicy-map policy-map Proﬁle service-policy Link scheduler conﬁguration task list Packet classiﬁcation Enable statistics gathering seeDeﬁning the access control list proﬁle Scenario with Web server regarded as a single source host Creating an access control list Nodepf-acl name#permit ip any any Creating a service policy proﬁleNodecfg#proﬁle acl name Nodepf-acl name#permit ip host ip-address any trafﬁc-class Structure of a Service-Policy Proﬁle Specifying the handling of trafﬁc-classes Deﬁning fair queuing weight Deﬁning absolute priority Mode SourceSpecifying the type-of-service TOS ﬁeld Deﬁning the bit-rate Nodesrc name#set ip precedence value Specifying differentiated services codepoint Dscp markingSpecifying the precedence ﬁeld Nodesrc name#set ip tos value Value is from 0 to Deﬁnes the Class-Of-Service value applied to packets of forSpecifying layer 2 marking Nodesrc name#set ip dscp value Nodesrc name#random-detect burst-tolerance Quality of Service for routed RTP streamsDeﬁning random early detection Discarding Excess Load Mode proﬁle service-policy/proﬁle Policy name in out Devoting the service policy proﬁle to an interfaceNodeif-ip if-name#use proﬁle service Displaying link scheduling proﬁle information Enable statistics gatheringDisplaying link arbitration status Optional Value Implication on Command Output Serial port conﬁguration Disabling an interface Serial port conﬁguration task list Enabling an interface Port Conﬁguring the serial encapsulation typeConﬁguring the hardware port protocol Conﬁguring the active clock edge Baudrate Conﬁguring the baudrate 176 Frame Relay conﬁguration Conﬁguring Frame Relay encapsulation Frame Relay conﬁguration task list Conﬁguring the keep-alive interval Conﬁguring the LMI type For this PVC only FRF.12 end-to-end fragmentation Enabling fragmentationBer to be used on the speciﬁed virtual circuit Nodepvc dlci#fragment size Entering Frame Relay PVC conﬁguration mode Binding the Frame Relay PVC to IP interface Conﬁguring the PVC encapsulation type IP interface wan is bound to PVC 1 on port serial 0 Mode PVC Disabling a Frame Relay PVC Enabling a Frame Relay PVC Debugging Frame Relay Displaying Frame Relay information Integrated service access 188 Check that the Frame Relay settings are correct Conﬁgure the serial interface settings Example 2 Frame Relay on e1t1 with a channel-group PRI port conﬁguration PRI port conﬁguration task list Terminology Conﬁguring PRI clock-mode Enable/Disable PRI portPRI Debugging Conﬁguring PRI port-type Name prt-e1t1 slot/port# framing Conﬁguring PRI framingName prt-e1t1 slot/port# linecode Ami b8zs hdb3 Conﬁguring PRI application mode E1T1 only Conﬁguring PRI line-build-out E1T1 in T1 mode onlyConﬁguring PRI used-connector E1T1 in E1 mode only Conﬁguring PRI Loopback detection E1T1 only Conﬁguring PRI LOS threshold E1T1 only Conﬁguring PRI encapsulation Default disabled Conﬁguring Channel-Group Encapsulation Mode channel-group group-nameCreate a Channel-Group Conﬁguring Channel-Group Timeslots Conﬁguring Hdlc CRC-Type Entering Hdlc Conﬁguration ModeMode channel-group group Mode hdlc PRI Debugging Default no encapsulationConﬁguring Hdlc Encapsulation PRI Conﬁguration Examples Example 3 RBS with a channel-group Example 1 IsdnExample 2 RBS without a channel-group Example 4 Frame Relay without a channel-group Example 7 PPP with a channel-group Example 5 Framerelay with a channel-groupExample 6 PPP without a channel-group BRI port conﬁguration Conﬁguring BRI clock-mode Enable/Disable BRI portBRI port conﬁguration task list Creating a channel group Conﬁguring BRI Power-FeedFeed Default disabled Conﬁguring BRI encapsulation Timeslots timeslots Default no timeslotsName ch-grp group-name#no Selects the timeslot to be used Name#show port bri BRI DebuggingName#no debug bri BRI Conﬁguration Examples Example 1 Isdn with auto clock/uni-side settingsExample 2 Isdn with manual clock/uni-side settings Example 3 Multi-Link PPP over two B-Channels Isdn Overview Isdn reference points Isdn reference points Possible SmartNode port conﬁgurations Isdn UNI Signaling 215 Isdn Layering Isdn Conﬁguration Concept Isdn conﬁguration Conﬁguring Q.921 parameters Enter Q.921 conﬁguration modeMode base-mode Isdn conﬁguration task list Conﬁguring Q.921 encapsulation Mode q921Enter Q.931 conﬁguration mode Conﬁguring Q.931 parameters Mode q931 Pss1old Nodeq931slot/port#signalling-ruleNodeq931slot/port#no signalling-rule Etsi Control interface Conﬁguring Q.931 encapsulationDebugging Isdn Face if-name Node#show port isdn slot port detail level Isdn Conﬁguration ExamplesExample being clock slave on uni network interface Example PRI Example QsigAssume the scenario as illustrated in ﬁgure RBS conﬁguration Conﬁguring RBS protocol Enter RBS conﬁguration modeRBS conﬁguration task list Noderbs#no encapsulation cc-rbs Mode rbsConﬁguring RBS encapsulation Debugging RBS Example Conﬁguring RBS Ground Start on a E1T1 port RBS Conﬁguration Examples 229 DSL Port Conﬁguration Conﬁguring PPPoE Line Setup Profile napt WAN Conﬁguration Summary Using PVC channels with PPPoE Setting up permanent virtual circuits PVCUsing PVC channels in bridged Ethernet mode Link State Troubleshooting DSL ConnectionsDiagnostics PPPoE access Basic IP routing conﬁguration Policy routing Basic IP routing conﬁguration task listRouting tables Static routing Adds a static route Displaying IP route information seeConﬁguring static IP routes Nodecfg#context ip router Enters the IP router Context Displaying IP route information Deleting static IP routes 0.0/0 172.16.32.2 Static Conﬁguring policy routing Basic static IP routing example Examples Changing the default UDP port range for RTP and Rtcp RIP conﬁguration Routing protocol Enabling send RIP RIP conﬁguration task list Specifying the send RIP version Enabling an interface to receive RIP Enabling RIP learning Example Enabling RIP learn host and defaultSpecifying the receive RIP version Enabling RIP announcing Enabling RIP auto summarization Specifying the default route metric Enabling the poison reverse algorithm Enabling RIP split-horizon processing Nodeif-ipname#rip route-expiry Setting the RIP route expiry3600 Default 180 seconds Enabling holding down aged routes Displaying global RIP information Displaying RIP conﬁguration of an IP interface 252 Access control list conﬁguration Why you should conﬁgure access lists About access control listsWhat access lists do Features of access control lists When to conﬁgure access lists Mapping out the goals of the access control list Access control list conﬁguration task list Nodepf-acl name#permit ip src src-wildcard any Where the syntax is Any host src dest dest-wildcard any host dest Nodepf-acl name#permit icmp src src-wildcard anyType type type type code code cos group Nodepf-acl name#deny icmp src src-wildcard Code code Where the syntax is as followingMsg name Type type Nodepf-acl name#deny tcp udp sctp src src Nodepf-acl name#permit tcp udp sctp src src-wildCard any host src eq port gt port lt port range Port lt port range from to cos group cos-rtp group Range from to Eq portLt port Gt port Where the syntax is Debugging an access control list proﬁle Unbind an access control list proﬁle from an interfaceDisplaying an access control list proﬁle Control list profile shall be debugged Denying a speciﬁc subnet Commands that have to be entered are listed below Snmp conﬁguration Snmp basic components Snmp basic commandsSimple Network Management Protocol Snmp Network management framework Identiﬁcation of a SmartNode via SnmpSnmp management information base MIB Snmp conﬁguration task list Setting basic system informationSnmp tools 271 Example Setting the system group objects Setting access community information Ro rw Or read/write access Nodecfg#snmp target IP-address-of-SN Setting allowed host informationSpecifying the default Snmp trap target Nodecfg#snmp host IP-address-of-SN security Displaying Snmp related information Using the AdventNet Snmp utilities AdventNet MibBrowser Settings Button on the Toolbar Using the MibBrowser AdventNet TrapViewer displaying received traps Using the TrapViewer Speciﬁc Type TimeStampEnterprise Generic Type Standard Snmp version 1 traps Snmp interface traps 281 Sntp client conﬁguration Sntp client conﬁguration task list Unicast anycast multicast Deﬁning Sntp client operating modeSelecting Sntp time servers Deﬁning Sntp local UDP port Deﬁning Sntp client poll interval Enabling and disabling the Sntp clientExample Enabling the Sntp client operation Example Disabling the Sntp client operation Displays the local time, UTC and the offset of the local Deﬁning Sntp client constant offset to GMTDeﬁning the Sntp client anycast address Name #show clock local Nodecfg#sntp-client anycast-address ip Example Enabling the Sntp client root delay compensationEnabling and disabling local clock offset compensation Debugging Sntp client operation Example Disabling the Sntp client root delay compensationShowing Sntp client related information Example Showing Sntp client related information Recommended public Sntp time servers Nist Internet time service 291 Dhcp conﬁguration Dhcp configuration DHCP-server and DHCP-client are illustrated in ﬁgure Enable DHCP-client on an IP interfaceDHCP-client conﬁguration tasks ‘conﬁgure’ conﬁguration mode Example Enable DHCP-client on an IP interface Get debug output from DHCP-client Mode AnyExample Enable Dhcp debug monitor Release or renew a Dhcp lease manually advanced Conﬁgure DHCP-server proﬁles DHCP-server conﬁguration tasks Nodepf-dhcpsname#network ip Nodepf-dhcpsname#no defaultNodepf-dhcpsname#no netbios Nodecfg#proﬁle dhcp-server name All ip-address Use DHCP-server proﬁles and enable the DHCP-serverNodepf-dhcpsname#no bootﬁle boot Nodepf-dhcpsname#no next-server Check DHCP-server conﬁguration and status Deﬁne the bootﬁle Option 67 for the DHCP-serverDeﬁne the Tftp server Option 66 for the DHCP-server Get debug output from the DHCP-server Create/Modify DHCP-Relay proﬁle Conﬁgure DHCP-relay Enable/Disable DHCP-Relay Agent DNS conﬁguration Server-ip-address DNS conﬁguration task listEnabling the DNS resolver Enabling the DNS relay DNS relay diagram 307 DynDNS conﬁguration Creating a DynDNS account Conﬁguring the DNS resolver DynDNS conﬁguration task list Word Conﬁguring basic DynDNS settingsConﬁguring the DynDNS server Deﬁning a mail exchanger for your hostname Conﬁguring advanced DynDNS settings optionalMode DynDNS Troubleshooting 312 PPP conﬁguration 314 Nodeif-ipname#point-to-point PPP conﬁguration task listCreating an IP interface for PPP Nodeif-ipname# ipaddress ip-address Nodeif-ipname# no tcp adjust-mssNodeif-ipname#ipaddress Nodeif-ipname#ipaddress dhcp Nodecfg # subscriber ppp name Disable interface IP address auto-conﬁguration from PPPCreating a PPP subscriber Nodeif-ipname#use proﬁle napt name Nodesubscrname# no identiﬁcation Optional outboundinbound user passwordNodesubscrname# dial inout Chap pap chappap Conﬁguring a PPPoE session Trigger forced reconnect of PPP sessions using a timer Tor AC-Name Optional ﬁle Case authentication is requiredConﬁguring PPP over a Hdlc Link Creating a PPP proﬁle Nodepf-pppname#mru min min max DefaultNodecfg #no proﬁle ppp name Nodepf-pppname#mtu min min max Name pf-ppp proﬁle# mrru min Min max max defaultDefault Conﬁguring the local and remote PPP Mrru Example Display PPP subscriber conﬁguration information Displaying PPP conﬁguration information Debugging PPP Example Display a PPP proﬁle Nodecfg #show port interface name Nodecfg #show ppp links levelNodecfg #show ppp networks level Nodecfg #show pppoe name LCP Example Display PPP link information Example Display PPPoE information Example Display PPP network protocol information PPP over Ethernet PPPoE Without authentication, encapsulation multi, with NaptWith authentication, encapsulation PPPoE Sample conﬁgurations PPP over a Hdlc Link E1T1 Port Without authentication, numbered interfaceWith authentication, unnumbered interface PPP over a Hdlc Link Serial Port PPP Dialer PPP Dial-up over Isdn Create outbound destinations Following command creates a new PPP dialer Mode context csDial-up and login information for a certain Create a dialer Conﬁgure recovery strategy Case Create inbound destinations Name inboundprovider#remote-e164 Name if-dialerdialer#inboundName inboundprovider#local-e164 E164 Debug dialer functionality Example Dial-on demand feature Dial-up on demand Dial-up Dial-up nailed Dial if possible, and never drop Mode context ip/interfaceDial-up on monitor CS context overview CS context conﬁguration components Planning the CS conﬁguration CS context conﬁguration task list Remote ofﬁce in an Enterprise network Conﬁguring the clock source Conﬁguring general CS settings Debugging the clock source Mode Operator execution Reference clock Conﬁguring call routingSelecting PCM law compression Node sys#clock-sourceslot-number port-number Specify call routing Creating and conﬁguring CS interfaces Conﬁguring voice over IP parameters Conﬁguring dial tones Conﬁguring a SIP VoIP connection Conﬁguring Isdn portsConﬁguring FXS ports Conﬁguring an H.323 VoIP connection Activating CS context conﬁguration Level Nodectx-csswitch#show call-router config detailNode ctx-csswitch#debug call-router detail level Nodectx-csswitch#show call-router status detail SmartNode in an Enterprise network CS Conﬁguration Planning the CS context Conﬁguring call routing Conﬁguring general CS settingsFirst we set clock-source to Isdn port 2/3 354 Conﬁguring BRI ports Conﬁguring VoIP settingsBecause we need G.723 as codec we enable Dtmf relay We want to use this proﬁle on our H.323 interfaces Activating the CS context conﬁguration Next we conﬁgure call signalingConﬁguring an H.323 VoIP connection TAB-CALLED-NUMBER Finally, activate the gateway and CS context Conﬁguration script for our application looks as follows Showing the running conﬁguration 359 360 361 VPN conﬁguration Encryption Authentication Key management Transport and tunnel modesPermanent IKE Tunnels Creating an IPsec policy proﬁle VPN conﬁguration task listCreating an IPsec transformation proﬁle Example Create an IPsec transformation proﬁle Procedure To create an IPsec policy proﬁle Mode Conﬁgure Creating/modifying an outgoing ACL proﬁle for IPsec Displaying IPsec conﬁguration information Conﬁguration of an IP interface and the IP router for IPsec Example IPsec Debug Output Example Display IPsec transformation proﬁlesExample Display IPsec policy proﬁles Debugging IPsec Creating an Ipsec transform proﬁle Key management IKEMain differences between manual & IKE Ipsec conﬁgurations Creating an Isakmp transform proﬁle Mode. The peer can either be an IP address or a Creating an Isakmp Ipsec policy proﬁleShould be used. Do not specify a peer, if this pol Icy shall be used for multiple peers in transport Sample conﬁguration snippet Creating/modifying an outgoing ACL proﬁle for IpsecConﬁguration of an IP interface and the IP router for Ipsec Policy matching Debug ike event Debug ike errorUse proﬁle acl WANOut out Performance considerations Encrypted Voice Performance considerationsEnabling RTP encryption support Mode Context ip /interface if-name SmartNode conﬁguration IPsec tunnel, DES encryption Cisco router conﬁguration 379 380 CS interface conﬁguration CS interfaces on the CS context CS interface conﬁguration task list Nodeif-typeif-name#exit Examples Create CS interfaces and delete anotherNodeif-typeif-name#… 384 Table table-name Service service-name Nodeif- typeif-name #exitConﬁguring the interface mapping tables Speciﬁed direction Table in table-nameThat shall be applied to all call properties And/or Incoming call passing an interface mapping table Call passing an input and an output mapping table Conﬁguring the precall service tables Repeat to add other special number map Supplementary service invocation commandsNumber to command Supplementary service invocation command Isdn interface conﬁguration Isdn interfaces on the CS context Isdn interface conﬁguration task list Deﬁnes an alternate Pstn proﬁle to be used for Conﬁguring Dtmf dialing optionalConﬁguring an alternate Pstn proﬁle optional Nodeif-isdn if-name#no use proﬁle Disabling call-waiting on Isdn DSS1 network interfaces Name if-isdn if-name# no call-waiting Disable call-waitingConﬁguring ringback tone on Isdn user-side interfaces Conﬁguring call waiting optional Conﬁguring date/time publishing to terminals optional Conﬁguring Call-Hold on Isdn interfacesEnabling Display Information Elements on Isdn Ports Deﬁning the ‘network-type’ in Isdn interfaces Sending the connected party number Colp optional Home Office Isdn Advice of Charge support 398 If there is not charge information from the network If there is no tariff information from the network forAll calls Nodeif-isdnif- name# aoc-d automatic NoChargeAvailable Isdn User Interface Connected to a PBX switch etcFollowing table shows an overview of the AOC variants Isdn Network Interface connected to phones Receive Direction Mode interface isdn interfaceIsdn DivertingLegInformation2 Facility Transmit Direction 500 Nodeif-isdn#caller-nameNodeif-isdn#caller-name early-alerting Absence Outgoing Isdn call. This feature is disabledBy default Nodeif-isdn#caller-name ignore FXS interface conﬁguration Conﬁguring a subscriber number recommended FXS interface conﬁguration task list Nameif-fxsname#no subscriber Mode Interface FXSConﬁguring caller-ID presentation optional Conﬁguring ﬂash hook processing optional Conﬁguring ringing-cadence optional Ing-indication stutter-dial-tone Through Stuttered Dial Tone Conﬁguring the Message Waiting Indication feature for FXS Mat bell Frequency-shift keyingMat etsi Call hold Call transfer FXS supplementary services description Tern Default enabledCall hold Call waiting Call toggle Call waiting reminder ringDrop passive call Drop active call Pattern ConferencingCall park Nameif-fxsname#no drop-passive FXO interface conﬁguration FXO interfaces on the CS context Creating an FXO interface FXO services description Nodeif-fxo name # Nodectx-csswitch#interface fxo nameDeleting an FXO interface FXO off-hook on caller ID FXO interface conﬁguration task list Nodeif-fxo if-name# Conﬁguring when the digits are dialed optionalNodectx-csswitch#interface fxo if-name Nodeif-fxoif-name# Nodeif-fxoif-name#dial-after dial-tone timeout seconds Figuration mode Nodeif-fxo if-name #ring-number count Nodeif-fxo if-name# Min min-time max max-time Conﬁguring how to detect a call has disconnected optional Battery-reversal tax-pulse Nodeif-fxo if-name#no connect-signal FXO Mute dialing Conﬁguring the destination of the call FXO interface examples RBS interface conﬁguration Name Face, the ‘no’ form deletes an existing one RBS interface conﬁguration task listCreating/Deleting a RBS interface Conﬁguring an alternate Pstn proﬁle Conﬁguring B-Channel allocation strategy Mode Interface RBSConﬁguring additional disconnect signals Conﬁguring an alternate Tone-Set proﬁle Conﬁguring ready to dial strategy Nodeif-rbsif-name#no dial-after dial- tone timeout secondsNode#no debug ccrbs datapath error signaling Conﬁguring number of Rings before Off-Hook Node#show ccrbs interface if-name detail Node#show ccrbs call if-name detail levelPrints information about ongoing calls on Selected interface Interface conﬁguration Interface conﬁguration task list Examples Deﬁne the IP address of the remote H.323 entity Binding the interface to an H.323 gateway Conﬁguring an alternate VoIP proﬁle optional Node if- h323 if-name #itc tx 3k1 Conﬁguring CLIP/CLIR support optionalNode if- h323 if-name #itc rx 3k1 Speciﬁes the information transfer capability to Nameif-h323name#early-connect Enabling ‘early-proceeding’ on H.323 interfacesEnabling the early call connect optional Nameif-h323if-name#early-proceeding Enabling the via address support optional Enabling the early call disconnect optional Ing connection should be established Conﬁguring status inquiry settings optionalNodeif-h323if-name# remoteport port AOC-D Support for H.323 Nodeif-h323if-name# no aoc-d emit Mode context cs/interfce h.323 interface-nameNodeif-h323if-name# no aoc-d SIP interface conﬁguration SIP interface conﬁguration task list SIP Sip-gateway gw-name Binding the interface to a SIP gatewayConﬁgure a remote host Nodeif-sipif-name# no bind context Nodeif-sipif-name# no local host Using an alternate VoIP proﬁle OptionalConﬁguring a local host Optional Nodeif-sipif-name# no remote host Nodeif-sipif-name#use proﬁle sip pro Using an alternate SIP proﬁle OptionalUsing an alternate Tone-Set proﬁle Optional Nodeif-sipif-name#use proﬁle voip Mapping call-control properties in SIP headers Conﬁguring early call connect / disconnect OptionalConﬁguring address translation Optional Header Mapping SIP headers to call-control propertiesConﬁguring Isdn Redirecting Number Tunneling Over SIP Updating caller address parameters SIP Diversion Header 450 SIP Refer Transmission & Isdn Explicit Call Transfer support 452 Name if-sip interface#no aoc-d emit AOC Over SIP OptionalName if-sip interface#no aoc-d Accept Enabling the SIP penalty-box feature Optional Enabling the session timer Optional Conﬁgure the SIP hold method Optional Default zero-ip Call router conﬁguration Call router configuration 458 Direct call routing vs. advanced call routing Map out the goals for the call router Call router conﬁguration task list Conﬁgure general call router behavior Enable advanced call routing on circuit interfacesConﬁgure address completion timeout Digit-collection terminating-char char Example Conﬁgure address completion timeoutAddress-completion timeout timeout Digit-collection timeout timeout National-preﬁx preﬁx Procedure To conﬁgure number preﬁx Mode Context CSConﬁgure number preﬁx for Isdn number types Example Conﬁgure number preﬁx Create a routing table Conﬁgure call routing tables Calling-e164 Regular Expressions Example Called party number routing tableCalled party number routing table Symbol Description Digit Collection Digit Collection Variants Example Digit collection of any number Dialed Selected Description Number Entry Number type routing table Calling party number routing table Numbering plan routing table IP address routing table Name routing table Dot . means ‘any character’ in a regular expression Presentation Indicator Routing TableURI routing table Smith must be escaped with a backslash \, because Screening Indicator Routing Table Information transfer capability routing table 478 Example Day of week routing table Default Any other unhandled case Mode context csTime of day routing table Day of Week Routing Table Resulting running-conﬁg is Procedure To delete an entire routing tableNode ctx-cs switch #routing-table Deleting routing tables Delete the routing table table-name Node ctx-cs switch #no routing-tableExample Remove an entire routing table Conﬁgure mapping tables Type Description Input-Type Description Output-Type Sets the display name of the called Mapping table examples Away the input-type and output-type Example Called and calling party manipulation mapping tableTo E.164 Mapping Tables Input-type to output-type table-name 486 487 Other mapping tables Custom SIP URIs from called-/calling-e164 properties Enter the mapping table from which you want to remove an Node ctx-cs switch #mapping-tableDeleting mapping tables Creating complex functions Procedure To delete an entire mapping table Mode Context CSExample Remove an entire mapping table Deleting complex functions Example Create a complex function Ingress interface Example Remove an entire complex functionDigit collection & sending-complete behavior Sending-Complete 323 Call-Router 123# YesTrue Egress Interface Complete-indication clear Mode context cs / interface sip Creating a hunt group service Creating call services Hunt group service Call dest-interface interface-name Node ctx-cs switch #service huntCall dest-service service-name Cause cause Normal Event Default Behavior Class Cause Hunt Description Group Service No-user-responding Drop original call Option Not Service orResource Unavailable Invalid Message Implemented Protocol Error Interworking Distribution group service Creating a distribution group service With the ﬁrst conﬁgured destinations Node ctx-cs switch #service distribuNodesvc-huntservice-name# route call Dest-service service-name Call-router ‘limiter’ service Distribution-Group Min-Concurrent setting ‘Limiter’ service diagram Priority service Priority service diagram Bridge CS Bridge service-‘VoIP Leased Line’ Bridge services diagram Conﬁguration Example Conﬁguring the service second-dialtone Activate the call router conﬁguration Deleting call services Example Create and test a routing table Test the call router conﬁguration 516 Call routing example network 518 CS context and call router elements 520 Conﬁgure partial rerouting Call reroute Mode context cs/interface sipEnable push-back aaa service Mode context cs/service aaa Enable push-back limiter service Enable push-back bridge serviceEnable push-back distribution-group service Enable push-back hunt group service SIP call-router services Name ctx-csswitch#no service sip SIP conference-serviceSIP conference-service conﬁguration task list Entering conference-service conﬁguration mode Ference-server host-name port SIP location-serviceMode Service SIP conference Conﬁguring the conference server Entering SIP location-service conﬁguration mode SIP location-service conﬁguration task list Seconds Binding a location serviceConﬁguring the hunt timeout Conﬁguring multi-contact behavior Tone conﬁguration Tone-set proﬁles Conﬁguring call-progress-tone proﬁles Tone conﬁguration task list Conﬁgure tone-set proﬁles Procedure To conﬁgure a tone-set proﬁle Mode Conﬁgure For which a tone indication can be provided Enable tone-set proﬁleProcedure To assign a tone-set proﬁle to a Pstn interface Name Ciﬁc with name name Show call-progress-tone and tone-set proﬁlesExample Show tone-set proﬁle Node#show proﬁle call-progress-tone Following example shows how to display the tone-set proﬁle 536 FXS port conﬁguration Shutdown and enable FXS ports Netherlands Bind FXS ports to higher layer applicationsConﬁgure country-speciﬁc FXS port parameters Nodeconﬁg#port fxs slot port Mode IC voice in systemEnter FXS port conﬁguration mode Other FXS port parameters Example FXO port conﬁguration Bind FXO ports to higher layer applications Shutdown and enable FXO ports Nodeprt-fxo slot/ port#use Conﬁgure country speciﬁc FXO port parametersOther FXO port parameters Nodeconﬁg#port fxo slot port Enter FXO port conﬁguration mode Gateway conﬁguration Gateway between IP and CS contexts Binding the gateway to an IP interface Mode Gateway H.323Enable the gateway Gateway conﬁguration task list Conﬁgure registration authentication service RAS Optional Ery auto gkid Conﬁgure H.235 Security optionalNode gw-h323h323#gatekeeper-discov 235 conﬁguration Procedure To enable H.235 security on H.323 gateway Node gw-h323h323#h235security pass \getcryptopassword h235-password masWord h235-password encrypted Node gw-h323h323#h235security master Detail debug-level Default setting isCommand show h235-securityshows the current setting Signaling message Enabling H.245 Tunneling Advanced conﬁguration options optional Nodegw-h323h323#faststart Enables the fastconnect procedure Enabling the fastconnect procedureEnabling the early H.245 procedure Nodegw-h323h323#h245-tunneling Enables H.245 tunneling Port Naling connections Conﬁguring the trafﬁc class for H.323 signalingSetting the response timeout Nodegw-h323h323#call-signaling-port Istration Setting the connect timeoutNal gateway Nodecfg#debug gateway h323 tpktchan Nodecfg#debug gateway h323 errorNodecfg#debug gateway h323 signaling H323 status detail level Context SIP gateway overview Routing Architecture Creating a context SIP gateway Enter conﬁguration modeContext SIP Gateway conﬁguration task list From-URI-Host equal Remote Request-URI-Host equal Local Conﬁguring the IP binding Mode Context SIP GatewayMode Transport Interface Creating a transport interface Enabling/disabling the context SIP gateway Binding location servicesConﬁguring a spoofed contact address Node#show context sip-gateway gw TroubleshootingDebug commands Show status information Example Conﬁguration Examples Outbound Authentication Inbound Authentication Outbound Registration 569 Inbound Registration B2B User Agent with Registered Clients 572 VoIP proﬁle conﬁguration VoIP profile configuration Nodepf-voip name# VoIP proﬁle conﬁguration task listCreating a VoIP proﬁle Nodecfg#profile voip name Conﬁgure codecs Procedure Insert a codec at a speciﬁc position in the list Mode Proﬁle VoIPProcedure Remove a codec from the list Mode Proﬁle VoIP Conﬁguring the Cisco versions of the G.726 codecs Mode VoIP nameConﬁguring the transparent-clearmode codec Nodepf-voip pf-name#dtmf-relay DefaultrtpsignalingConﬁguring Dtmf relay Conﬁguring RTP payload types Nodepf-voip name#rtp payload-type nse Conﬁguring RTP payload type for transparent-clearmodeConﬁguring RTP payload type for Cisco NSE Conﬁguring Cisco NSE for Fax Jitter and dejitter buffer Conﬁguring the dejitter buffer advanced Adaptive Procedure Conﬁgure the dejitter buffer Is valid for all modes Max-delayDejitter buffer is allowed to introduce. This setting Enabling/disabling ﬁlters advanced Illustrates the difference between Fax relay and Fax bypass Conﬁguring Fax transmission Fax relay and Fax bypass Nodepf-voipname# fax transmis Nodepf-voipname#fax transmisSion bypass g711alaw64k Nodepf-voipname#fax dejitter Retransmission number Mode proﬁle voip proﬁle-nameVolume CED retransmission Fax bypass method No-Signal RetransmissionMode proﬁle voip pf-name Method default v150-vbdnse Default default Mission bypass g711alaw64k Modem bypass methodConﬁguring modem transmission Nodepf-voip name#modem trans Conﬁguring IP-IP codec negotiation Conﬁguring the trafﬁc class for Voice and Fax data Home ofﬁce in an enterprise network Home ofﬁce in an enterprise network Description Home ofﬁce with fax Show the conﬁgured proﬁle Soft phone client gateway 595 Disable Dtmf relay Show the conﬁgured proﬁle Pstn proﬁle conﬁguration Creating a Pstn proﬁle Pstn proﬁle conﬁguration task list Conﬁguring output gain Conﬁguring the echo cancellerProcedure Disable echo cancellation Mode Proﬁle Pstn Procedure Conﬁgure voice output gain 600 SIP proﬁle conﬁguration Namecfg#no profile name name Entering the conﬁguration mode for a SIP proﬁleSIP proﬁle conﬁguration task list Mapping from a SIP disconnect cause Q931-cause to sip-cause Mapping to a SIP causeMapping from a SIP redirection reason Mapping to a SIP redirection code Authentication Service Creating an Authentication Service Authentication Service conﬁguration task list Creating credentials Conﬁguring the authentication protocolConﬁguring a Realm Location Service Domain Examples Location Service conﬁguration task listCreating a Location Service Adding a domain Creating an identity Mode Identity Bound Authentication outbound faceAlias Nodeauthout#authenticate index Mode Authentication outboundAuthentication inbound face Nodeauthout#authenticate authentica Nodeauthin#no authenticate index Mode Authentication inboundNodeauthin#authenticate authentica Nodeauthin#authenticate index Registration outbound face Mode Registration outbound Noderegout#proxy index down posi Noderegout#proxy host portStrict-route Port strict-route Inbound Noderegin# no lifetime default secRegistration inbound face Nodeidentityname# no registration Nodecallout#proxy index host Mode Call outboundCall outbound face Nodecallout#proxy host port Call inbound face Mode Call outboundMode Call inbound Inheriting from an identity group to an identity Creating an identity group Subscription Conﬁguring the Message Waiting Indication feature for SIP Notiﬁcation Mode Message inbound Mode Message inbound Message Waiting Indication through Call-Control This conﬁguration example, inheritance is used VoIP debugging Debugging strategy Example Verify IP connectivity Following command will disable the ﬁlter completelyFiltering debug monitor output Verifying IP connectivity Overview Isdn debug monitors Debugging call signalingDebugging Isdn signaling Unit#debug ccisdn signaling Verify an incoming call Verify an outgoing call Line 630 Debug isdn event slot port all layer2 layer3 Isdn layer 2 and 3 can be veriﬁed using a show commandVerify Isdn layer 2 and 3 status For most verbose output Debugging FXS SignalingOverview FXS debug monitors Stops State to RINGING, that means it has accepted the call Overview H.323 debug monitors Debugging H.323 Signaling 635 636 637 Debugging SIP signaling Using SmartWare’s internal call generator Way control detail level Debugging voice dataNo debug media-gate Way dejitter Way dsp Way switchWay error Way rtp Check system logs How to submit trouble reports to Patton 643 Appendix a Terms and deﬁnitions Also release SmartWare architecture terms and deﬁnitions Pression Buffer Ory Pots Tftp Appendix B Mode summary Mode overview, 1 Mode Overview, 2 Mode Overview, 3 Appendix C Command summary Ebnf syntax Show help New Conﬁguration CommandsShow command history Other Appendix D Internetworking terms & acronyms Numeric Abbreviations DSS1 MSN SAR Appendix E Used IP ports & available voice Codecs Webserver Used IP portsTelnet Available voice codecs