IP context overview | Patton electronic SmartNode 4110 Series

SmartWare Software Configuration Guide	Table of Contents

General AAA Configuration	104
RADIUS configuration	106
Configuring RADIUS clients	107
Configuring RADIUS accounting	108
Configuring the RADIUS server	110
Attributes in the RADIUS request message	110
Attributes in the RADIUS accept message	111
Configuring the local database accounts	111
Storing call logs with quality information	113
9 IP context overview	114
Introduction	115
IP context overview configuration task list	116
Planning your IP configuration	117
IP interface related information	117
QoS related information	117
Configuring physical ports	117
Creating and configuring IP interfaces	117
Configuring NAPT	118
Configuring static IP routing	118
Configuring RIP	118
Configuring access control lists	119
Configuring quality of service (QoS)	119
10 IP interface configuration	120
Introduction	121
IP interface configuration task list	121
Creating an IP interface	121
Deleting an IP interface	122
Setting the IP address and netmask	123
Configuring a NAPT DMZ interface	123
ICMP message processing	124
ICMP redirect messages	124
Router advertisement broadcast message	124
Defining the MTU and MSS of the interface	125
Configuring an interface as a point-to-point link	126
Displaying IP interface information	126
Displaying dynamic ARP entries	127
Flushing dynamic ARP entries	127
Processing gratuitous ARP requests	127
Testing connections with the ping command	127
IP link supervision	128
Check connectivity of an IP link	129
Show IP link status	129
Debug connectivity	129
	8

Image 8

Patton electronic SmartNode 4110 Series manual IP context overview

Contents

SmartWare Release Patton Electronics Company, Inc Summary Table of Contents SmartWare Software Configuration Guide Table of Contents Command line interface CLI Copying configurations to and from a remote storage location IP context overview 11 NAT/NAPT configuration Serial port configuration PRI port configuration Isdn Overview Basic IP routing configuration Snmp configuration Dhcp configuration CS context overview VPN configuration CS interface configuration FXO interface configuration SIP interface configuration Table of Contents 524 45 H.323 gateway configuration Pstn profile configuration Location Service Terms and definitions List of Figures SmartWare Software Configuration Guide List of Tables Audience How to read this guideAbout this guide Structure About this guide About this guide Precautions Typographical conventions used in this documentGeneral conventions Garamond bold type SmartWare Software Configuration GuideAbout this guide Service and support Mouse conventionsPatton support headquarters in the USA Fax +1 253 Patton Electronics Company Warranty coverageRMA numbers Chapter contents System overview Introduction Circuit Switch SmartWare embedded softwareVoIP Gateway IP Router Applications Carrier networks Enterprise networks WAN LAN telephony Typical LAN telephony system with a SmartNode gateway Conﬁguration concepts Conﬁguration concept overview Contexts and Gateways ContextExample Gateway Interfaces, Ports, and Bindings InterfacesPorts and circuits Bindings Proﬁles Proﬁles and Use commandsUse Commands Command line interface CLI Operator exec mode, the system prompt is displayed as Command modesCLI prompt Command editing Command helpCommand completion Navigating the CLI Command history Command Editing Shortcuts Accessing the CLI Accessing the SmartWare CLI task list If desired Ending a Telnet or console port session see Accessing via the console portConsole port procedure Accessing via a Telnet session Telnet ProcedureUsing an alternate TCP listening port for the Telnet server Disabling the Telnet server Selecting a secure password Login display Password encryption Factory preset administrator accountConﬁguring operators and administrators Creating an operator account Creating an administrator account Name and password passwordOpening a secure conﬁguration session over SSH Nodecfg#copy running-conﬁg startup-conﬁg Displaying account information Mode EnableDisplaying the CLI version Switching to another account Checking identity and connected usersNode# who Node who Used in operator execution mode Command index numbers Accessing the CLI Showing command default values Ending a Telnet or console port session System image handling System image handling Memory regions in SmartWare System image handling task list Local Persistent Volatile Flash Show version Displaying system image informationCopying system images from a network server to Flash memory Step Command Purpose Upgrading the software directly Here’s an example for conﬁguration provisioning Auto provisioning of ﬁrmware and conﬁgurationExplanation To use and debug provisioning Boot procedure Boot procedure IP Addresses in the Factory Conﬁguration Default Startup ConﬁgurationFactory conﬁguration Conﬁguration ﬁle handling Understanding conﬁguration ﬁles Configuration file handling Conﬁguration ﬁle handling task list Sample conﬁguration ﬁle Copying conﬁgurations within the local memory Local Memory Regions Node# copy nvram backup startup-conﬁg Backup already present in ﬂash memoryName nvramtarget-name Name into the local memory Copying conﬁgurations to and from a remote storage location Remote memory regions for SmartWare New-startupnvramstartup-conﬁg Displaying conﬁguration ﬁle informationNodecfg# copy tftp//ip-addressport Modifying the running conﬁguration at the CLI Node#reload Modifying the running conﬁguration ofﬂineNode#copy running-conﬁg tftp//node-ip Example Modifying the running conﬁguration ofﬂine Deleting a speciﬁed conﬁgurationExample Deleting a speciﬁed conﬁguration Delete the conﬁguration named minimal explicitly CLI copy command copy tftp//host/path conﬁg-ﬁle Encrypted ﬁle downloadEncrypted Conﬁguration Download Auto provisioning Install a custom encryption key optional Use Cases Upload an encrypted conﬁguration ﬁle Encrypt a conﬁguration ﬁleDownload an encrypted conﬁguration ﬁle Basic system management Basic system management conﬁguration task list Managing feature license keys Downloads the license key ﬁle and installNode cfg#copy tftp//tftp-server/path/ﬁle Name licenses Licenses Setting system information Setting the system banner System banner with message to operators Setting time and date Display clock information Display time since last restart Conﬁguring the Web serverDetermining and deﬁning the active CLI version De en Restarting the system Displaying the system logs Unit Controlling command executionDisplaying reports Ctrl-zsuspend active command Show the currently running commandsCtrl-cterminate current command Bring job 0 to foreground Timed execution of CLI command Mode SystemSome examples Displaying the checksum of a conﬁguration Name sys#no terminal idle-time Radius Client Conﬁguration AAA component Authentication procedure with a Radius server General AAA Conﬁguration Nodecfg#proﬁle authentication name Nodepf-authname#server-timeoutAuthentication proﬁle-name Nodecfg#show proﬁle authentication Radius conﬁguration Conﬁguring Radius clients Example Conﬁgure the Radius clients as shown in ﬁgure Conﬁguring Radius accounting Vendor 109 Conﬁguring the Radius server Attributes in the Radius request message Conﬁguring the local database accounts Attributes in the Radius accept message Example Create an administrator and an operator account Word passwordPassword Base. The no form removes an existing account Storing call logs with quality information IP context overview IP context and related elements IP context overview conﬁguration task list Planning your IP conﬁguration Conﬁguring physical portsCreating and conﬁguring IP interfaces IP interface related information Conﬁguring RIP Conﬁguring NaptConﬁguring static IP routing Conﬁguring access control lists Conﬁguring quality of service QoS IP interface conﬁguration IP interface conﬁguration task list Creating an IP interfaceNodectx-iprouter#interface name Nodeif-ip name# Deleting an IP interface Setting the IP address and netmask Conﬁguring a Napt DMZ interfaceName if-ip if-name# no napt Inside Router advertisement broadcast message Icmp message processingIcmp redirect messages Nodeif-ipname#tcp adjust-mss Deﬁning the MTU and MSS of the interfaceExample Deﬁning the MTU of the interface MTU packet size value must be in the range from Conﬁguring an interface as a point-to-point link Displaying IP interface information Testing connections with the ping command Displaying dynamic ARP entriesFlushing dynamic ARP entries Processing gratuitous ARP requests Mode Either operator or administrator execution Ber timeout secondsIP link supervision Node#ping address num Check connectivity of an IP link Show IP link statusDebug connectivity Debug ARP Traceroute Example Debug ARP output Conﬁguring the Igmp Proxy Example Display the ARP information NAT/NAPT conﬁguration Dynamic Napt Dynamic NAT Tftp because the SmartNode might become inaccessibleStatic Napt Static NAT Napt traversal NAT/NAPT conﬁguration task list Creating a Napt proﬁleNode cfg#proﬁle napt name Optional Conﬁguring a Napt DMZ host Deﬁning Napt port rangesOptional Ahespgreipv6 localip AH, ESP, GRE, or IPv6 respectively directed to Name pf-napt pf-name# udp-handling symmetricaddress Preserving TCP/UDP port numbers in NaptDeﬁning the UDP Napt type Activate NAT/NAPT Displaying NAT/NAPT conﬁguration informationNode cfg#context ip router Node cfg#show proﬁle napt Conﬁguring NAT static protocol entries Mode proﬁle napt pf-naptExample Display NAT/NAPT conﬁguration information Ethernet port conﬁguration Conﬁguring medium for an Ethernet port Entering the Ethernet port conﬁguration modeEthernet port conﬁguration task list Conﬁguring Ethernet encapsulation type for an Ethernet port Binding an Ethernet port to an IP interfaceNodeprt-eth slot/port#encapsulation ip Conﬁgures the encapsulation type to IP Multiple IP addresses on Ethernet ports Nodeprt-eth slot/port#bind interface name router Conﬁguring a Vlan Nodeconﬁg#port ethernet slot port Nodeprt-ethslot/port#vlan idNodevlanid#encapsulation ippppoemulti Nodevlanid#bind interface name router Nodeprt-eth slot/port#cos rx-map layer Adding a receive mapping table entryExample Adding a receive mapping table entry Adding a transmit mapping table entry Closing an Ethernet port Using the built-in Ethernet sniffer Nvramethernet-0-0-1.cap Following is an example of how the sniffer is normally usedNvramethernet-0-slot-port.cap Link scheduler conﬁguration Using trafﬁc classes Applying scheduling at the bottleneck Weighted fair queuing WFQ Introduction to SchedulingPriority Shaping Burst tolerant shaping or wfq Hierarchy Setting the modem rate Quick references Command cross reference Policy-map policy-map Proﬁle service-policyLink scheduler conﬁguration task list Source trafﬁc-class class Packet classiﬁcation Enable statistics gathering seeDeﬁning the access control list proﬁle Creating an access control list Scenario with Web server regarded as a single source host Creating a service policy proﬁle Nodecfg#proﬁle acl nameNodepf-acl name#permit ip host ip-address any trafﬁc-class Nodepf-acl name#permit ip any any Structure of a Service-Policy Proﬁle Deﬁning fair queuing weight Specifying the handling of trafﬁc-classes Mode Source Specifying the type-of-service TOS ﬁeldDeﬁning the bit-rate Deﬁning absolute priority Specifying differentiated services codepoint Dscp marking Specifying the precedence ﬁeldNodesrc name#set ip tos value Nodesrc name#set ip precedence value Deﬁnes the Class-Of-Service value applied to packets of for Specifying layer 2 markingNodesrc name#set ip dscp value Value is from 0 to Quality of Service for routed RTP streams Deﬁning random early detectionDiscarding Excess Load Nodesrc name#random-detect burst-tolerance Mode proﬁle service-policy/proﬁle Policy name in out Devoting the service policy proﬁle to an interfaceNodeif-ip if-name#use proﬁle service Displaying link scheduling proﬁle information Enable statistics gatheringDisplaying link arbitration status Optional Value Implication on Command Output Serial port conﬁguration Serial port conﬁguration task list Disabling an interface Enabling an interface Port Conﬁguring the serial encapsulation typeConﬁguring the hardware port protocol Conﬁguring the active clock edge Conﬁguring the baudrate Baudrate 176 Frame Relay conﬁguration Frame Relay conﬁguration task list Conﬁguring Frame Relay encapsulation Conﬁguring the LMI type Conﬁguring the keep-alive interval Enabling fragmentation Ber to be used on the speciﬁed virtual circuitNodepvc dlci#fragment size For this PVC only FRF.12 end-to-end fragmentation Entering Frame Relay PVC conﬁguration mode Conﬁguring the PVC encapsulation type Binding the Frame Relay PVC to IP interface Mode PVC IP interface wan is bound to PVC 1 on port serial 0 Enabling a Frame Relay PVC Disabling a Frame Relay PVC Debugging Frame Relay Displaying Frame Relay information Integrated service access 188 Conﬁgure the serial interface settings Check that the Frame Relay settings are correct Example 2 Frame Relay on e1t1 with a channel-group PRI port conﬁguration Terminology PRI port conﬁguration task list Enable/Disable PRI port PRI DebuggingConﬁguring PRI port-type Conﬁguring PRI clock-mode Conﬁguring PRI framing Name prt-e1t1 slot/port# linecodeAmi b8zs hdb3 Name prt-e1t1 slot/port# framing Conﬁguring PRI application mode E1T1 only Conﬁguring PRI line-build-out E1T1 in T1 mode onlyConﬁguring PRI used-connector E1T1 in E1 mode only Conﬁguring PRI LOS threshold E1T1 only Conﬁguring PRI Loopback detection E1T1 only Default disabled Conﬁguring PRI encapsulation Mode channel-group group-name Create a Channel-GroupConﬁguring Channel-Group Timeslots Conﬁguring Channel-Group Encapsulation Entering Hdlc Conﬁguration Mode Mode channel-group groupMode hdlc Conﬁguring Hdlc CRC-Type PRI Debugging Default no encapsulationConﬁguring Hdlc Encapsulation PRI Conﬁguration Examples Example 3 RBS with a channel-group Example 1 IsdnExample 2 RBS without a channel-group Example 4 Frame Relay without a channel-group Example 7 PPP with a channel-group Example 5 Framerelay with a channel-groupExample 6 PPP without a channel-group BRI port conﬁguration Conﬁguring BRI clock-mode Enable/Disable BRI portBRI port conﬁguration task list Conﬁguring BRI Power-Feed Feed Default disabledConﬁguring BRI encapsulation Creating a channel group Timeslots timeslots Default no timeslotsName ch-grp group-name#no Selects the timeslot to be used Name#show port bri BRI DebuggingName#no debug bri BRI Conﬁguration Examples Example 1 Isdn with auto clock/uni-side settingsExample 2 Isdn with manual clock/uni-side settings Example 3 Multi-Link PPP over two B-Channels Isdn Overview Isdn reference points Isdn reference points Isdn UNI Signaling Possible SmartNode port conﬁgurations 215 Isdn Conﬁguration Concept Isdn Layering Isdn conﬁguration Enter Q.921 conﬁguration mode Mode base-modeIsdn conﬁguration task list Conﬁguring Q.921 parameters Conﬁguring Q.921 encapsulation Mode q921Enter Q.931 conﬁguration mode Mode q931 Conﬁguring Q.931 parameters Nodeq931slot/port#signalling-rule Nodeq931slot/port#no signalling-ruleEtsi Pss1old Conﬁguring Q.931 encapsulation Debugging IsdnFace if-name Control interface Node#show port isdn slot port detail level Isdn Conﬁguration ExamplesExample being clock slave on uni network interface Example PRI Example QsigAssume the scenario as illustrated in ﬁgure RBS conﬁguration Conﬁguring RBS protocol Enter RBS conﬁguration modeRBS conﬁguration task list Mode rbs Conﬁguring RBS encapsulationDebugging RBS Noderbs#no encapsulation cc-rbs RBS Conﬁguration Examples Example Conﬁguring RBS Ground Start on a E1T1 port 229 DSL Port Conﬁguration Line Setup Conﬁguring PPPoE Conﬁguration Summary Profile napt WAN Using PVC channels with PPPoE Setting up permanent virtual circuits PVCUsing PVC channels in bridged Ethernet mode Troubleshooting DSL Connections DiagnosticsPPPoE access Link State Basic IP routing conﬁguration Basic IP routing conﬁguration task list Routing tablesStatic routing Policy routing Displaying IP route information see Conﬁguring static IP routesNodecfg#context ip router Enters the IP router Context Adds a static route Deleting static IP routes Displaying IP route information Conﬁguring policy routing 0.0/0 172.16.32.2 Static Examples Basic static IP routing example Changing the default UDP port range for RTP and Rtcp RIP conﬁguration Routing protocol RIP conﬁguration task list Enabling send RIP Enabling an interface to receive RIP Specifying the send RIP version Enabling RIP learning Example Enabling RIP learn host and defaultSpecifying the receive RIP version Enabling RIP announcing Specifying the default route metric Enabling RIP auto summarization Enabling RIP split-horizon processing Enabling the poison reverse algorithm Setting the RIP route expiry 3600 Default 180 secondsEnabling holding down aged routes Nodeif-ipname#rip route-expiry Displaying RIP conﬁguration of an IP interface Displaying global RIP information 252 Access control list conﬁguration Why you should conﬁgure access lists About access control listsWhat access lists do When to conﬁgure access lists Features of access control lists Access control list conﬁguration task list Mapping out the goals of the access control list Nodepf-acl name#permit ip src src-wildcard any Where the syntax is Nodepf-acl name#permit icmp src src-wildcard any Type type type type code code cos groupNodepf-acl name#deny icmp src src-wildcard Any host src dest dest-wildcard any host dest Where the syntax is as following Msg nameType type Code code Nodepf-acl name#permit tcp udp sctp src src-wild Card any host src eq port gt port lt port rangePort lt port range from to cos group cos-rtp group Nodepf-acl name#deny tcp udp sctp src src Eq port Lt portGt port Range from to Where the syntax is Debugging an access control list proﬁle Unbind an access control list proﬁle from an interfaceDisplaying an access control list proﬁle Control list profile shall be debugged Commands that have to be entered are listed below Denying a speciﬁc subnet Snmp conﬁguration Snmp basic components Snmp basic commandsSimple Network Management Protocol Snmp Network management framework Identiﬁcation of a SmartNode via SnmpSnmp management information base MIB Snmp conﬁguration task list Setting basic system informationSnmp tools 271 Setting access community information Example Setting the system group objects Ro rw Or read/write access Setting allowed host information Specifying the default Snmp trap targetNodecfg#snmp host IP-address-of-SN security Nodecfg#snmp target IP-address-of-SN Using the AdventNet Snmp utilities Displaying Snmp related information Using the MibBrowser AdventNet MibBrowser Settings Button on the Toolbar Using the TrapViewer AdventNet TrapViewer displaying received traps TimeStamp EnterpriseGeneric Type Speciﬁc Type Standard Snmp version 1 traps Snmp interface traps 281 Sntp client conﬁguration Sntp client conﬁguration task list Unicast anycast multicast Deﬁning Sntp client operating modeSelecting Sntp time servers Deﬁning Sntp local UDP port Enabling and disabling the Sntp client Example Enabling the Sntp client operationExample Disabling the Sntp client operation Deﬁning Sntp client poll interval Deﬁning Sntp client constant offset to GMT Deﬁning the Sntp client anycast addressName #show clock local Displays the local time, UTC and the offset of the local Nodecfg#sntp-client anycast-address ip Example Enabling the Sntp client root delay compensationEnabling and disabling local clock offset compensation Example Disabling the Sntp client root delay compensation Showing Sntp client related informationExample Showing Sntp client related information Debugging Sntp client operation Nist Internet time service Recommended public Sntp time servers 291 Dhcp conﬁguration Dhcp configuration DHCP-server and DHCP-client are illustrated in ﬁgure Enable DHCP-client on an IP interfaceDHCP-client conﬁguration tasks Example Enable DHCP-client on an IP interface ‘conﬁgure’ conﬁguration mode Mode Any Example Enable Dhcp debug monitorRelease or renew a Dhcp lease manually advanced Get debug output from DHCP-client DHCP-server conﬁguration tasks Conﬁgure DHCP-server proﬁles Nodepf-dhcpsname#no default Nodepf-dhcpsname#no netbiosNodecfg#proﬁle dhcp-server name Nodepf-dhcpsname#network ip Use DHCP-server proﬁles and enable the DHCP-server Nodepf-dhcpsname#no bootﬁle bootNodepf-dhcpsname#no next-server All ip-address Check DHCP-server conﬁguration and status Deﬁne the bootﬁle Option 67 for the DHCP-serverDeﬁne the Tftp server Option 66 for the DHCP-server Get debug output from the DHCP-server Conﬁgure DHCP-relay Create/Modify DHCP-Relay proﬁle Enable/Disable DHCP-Relay Agent DNS conﬁguration Server-ip-address DNS conﬁguration task listEnabling the DNS resolver DNS relay diagram Enabling the DNS relay 307 DynDNS conﬁguration DynDNS conﬁguration task list Creating a DynDNS account Conﬁguring the DNS resolver Word Conﬁguring basic DynDNS settingsConﬁguring the DynDNS server Conﬁguring advanced DynDNS settings optional Mode DynDNSTroubleshooting Deﬁning a mail exchanger for your hostname 312 PPP conﬁguration 314 Nodeif-ipname#point-to-point PPP conﬁguration task listCreating an IP interface for PPP Nodeif-ipname# no tcp adjust-mss Nodeif-ipname#ipaddressNodeif-ipname#ipaddress dhcp Nodeif-ipname# ipaddress ip-address Disable interface IP address auto-conﬁguration from PPP Creating a PPP subscriberNodeif-ipname#use proﬁle napt name Nodecfg # subscriber ppp name Optional outboundinbound user password Nodesubscrname# dial inoutChap pap chappap Nodesubscrname# no identiﬁcation Trigger forced reconnect of PPP sessions using a timer Conﬁguring a PPPoE session Tor AC-Name Case authentication is required Conﬁguring PPP over a Hdlc LinkCreating a PPP proﬁle Optional ﬁle Default Nodecfg #no proﬁle ppp nameNodepf-pppname#mtu min min max Nodepf-pppname#mru min min max Min max max default DefaultConﬁguring the local and remote PPP Mrru Name pf-ppp proﬁle# mrru min Displaying PPP conﬁguration information Example Display PPP subscriber conﬁguration information Example Display a PPP proﬁle Debugging PPP Nodecfg #show ppp links level Nodecfg #show ppp networks levelNodecfg #show pppoe name Nodecfg #show port interface name Example Display PPP link information LCP Example Display PPP network protocol information Example Display PPPoE information Without authentication, encapsulation multi, with Napt With authentication, encapsulation PPPoESample conﬁgurations PPP over Ethernet PPPoE Without authentication, numbered interface With authentication, unnumbered interfacePPP over a Hdlc Link Serial Port PPP over a Hdlc Link E1T1 Port PPP Dial-up over Isdn PPP Dialer Following command creates a new PPP dialer Mode context cs Dial-up and login information for a certainCreate a dialer Create outbound destinations Conﬁgure recovery strategy Create inbound destinations Case Name if-dialerdialer#inbound Name inboundprovider#local-e164E164 Name inboundprovider#remote-e164 Example Dial-on demand feature Debug dialer functionality Dial-up Dial-up on demand Dial-up nailed Dial if possible, and never drop Mode context ip/interfaceDial-up on monitor CS context overview CS context conﬁguration components CS context conﬁguration task list Planning the CS conﬁguration Remote ofﬁce in an Enterprise network Conﬁguring general CS settings Conﬁguring the clock source Mode Operator execution Debugging the clock source Conﬁguring call routing Selecting PCM law compressionNode sys#clock-sourceslot-number port-number Reference clock Creating and conﬁguring CS interfaces Specify call routing Conﬁguring dial tones Conﬁguring voice over IP parameters Conﬁguring Isdn ports Conﬁguring FXS portsConﬁguring an H.323 VoIP connection Conﬁguring a SIP VoIP connection Activating CS context conﬁguration Nodectx-csswitch#show call-router config detail Node ctx-csswitch#debug call-router detail levelNodectx-csswitch#show call-router status detail Level SmartNode in an Enterprise network Planning the CS context CS Conﬁguration Conﬁguring call routing Conﬁguring general CS settingsFirst we set clock-source to Isdn port 2/3 354 Conﬁguring VoIP settings Because we need G.723 as codec we enable Dtmf relayWe want to use this proﬁle on our H.323 interfaces Conﬁguring BRI ports Activating the CS context conﬁguration Next we conﬁgure call signalingConﬁguring an H.323 VoIP connection Finally, activate the gateway and CS context TAB-CALLED-NUMBER Showing the running conﬁguration Conﬁguration script for our application looks as follows 359 360 361 VPN conﬁguration Authentication Encryption Key management Transport and tunnel modesPermanent IKE Tunnels VPN conﬁguration task list Creating an IPsec transformation proﬁleExample Create an IPsec transformation proﬁle Creating an IPsec policy proﬁle Procedure To create an IPsec policy proﬁle Mode Conﬁgure Creating/modifying an outgoing ACL proﬁle for IPsec Conﬁguration of an IP interface and the IP router for IPsec Displaying IPsec conﬁguration information Example Display IPsec transformation proﬁles Example Display IPsec policy proﬁlesDebugging IPsec Example IPsec Debug Output Creating an Ipsec transform proﬁle Key management IKEMain differences between manual & IKE Ipsec conﬁgurations Creating an Isakmp transform proﬁle Creating an Isakmp Ipsec policy proﬁle Should be used. Do not specify a peer, if this polIcy shall be used for multiple peers in transport Mode. The peer can either be an IP address or a Creating/modifying an outgoing ACL proﬁle for Ipsec Conﬁguration of an IP interface and the IP router for IpsecPolicy matching Sample conﬁguration snippet Debug ike event Debug ike errorUse proﬁle acl WANOut out Performance considerations Encrypted Voice Performance considerationsEnabling RTP encryption support Mode Context ip /interface if-name IPsec tunnel, DES encryption SmartNode conﬁguration Cisco router conﬁguration 379 380 CS interface conﬁguration CS interface conﬁguration task list CS interfaces on the CS context Nodeif-typeif-name#exit Examples Create CS interfaces and delete anotherNodeif-typeif-name#… 384 Table table-name Service service-name Nodeif- typeif-name #exitConﬁguring the interface mapping tables Table in table-name That shall be applied to all call propertiesAnd/or Speciﬁed direction Incoming call passing an interface mapping table Conﬁguring the precall service tables Call passing an input and an output mapping table Supplementary service invocation commands Number to commandSupplementary service invocation command Repeat to add other special number map Isdn interface conﬁguration Isdn interface conﬁguration task list Isdn interfaces on the CS context Conﬁguring Dtmf dialing optional Conﬁguring an alternate Pstn proﬁle optionalNodeif-isdn if-name#no use proﬁle Deﬁnes an alternate Pstn proﬁle to be used for Name if-isdn if-name# no call-waiting Disable call-waiting Conﬁguring ringback tone on Isdn user-side interfacesConﬁguring call waiting optional Disabling call-waiting on Isdn DSS1 network interfaces Conﬁguring date/time publishing to terminals optional Conﬁguring Call-Hold on Isdn interfacesEnabling Display Information Elements on Isdn Ports Sending the connected party number Colp optional Deﬁning the ‘network-type’ in Isdn interfaces Home Office Isdn Advice of Charge support 398 If there is no tariff information from the network for All callsNodeif-isdnif- name# aoc-d automatic If there is not charge information from the network Isdn User Interface Connected to a PBX switch etc Following table shows an overview of the AOC variantsIsdn Network Interface connected to phones NoChargeAvailable Mode interface isdn interface Isdn DivertingLegInformation2 FacilityTransmit Direction Receive Direction 500 Nodeif-isdn#caller-nameNodeif-isdn#caller-name early-alerting Outgoing Isdn call. This feature is disabled By defaultNodeif-isdn#caller-name ignore Absence FXS interface conﬁguration FXS interface conﬁguration task list Conﬁguring a subscriber number recommended Mode Interface FXS Conﬁguring caller-ID presentation optionalConﬁguring ﬂash hook processing optional Nameif-fxsname#no subscriber Conﬁguring ringing-cadence optional Conﬁguring the Message Waiting Indication feature for FXS Ing-indication stutter-dial-tone Through Stuttered Dial Tone Mat bell Frequency-shift keyingMat etsi FXS supplementary services description Call hold Call transfer Default enabled Call holdCall waiting Tern Call waiting reminder ring Drop passive callDrop active call Call toggle Conferencing Call parkNameif-fxsname#no drop-passive Pattern FXO interface conﬁguration FXO interfaces on the CS context FXO services description Creating an FXO interface Nodeif-fxo name # Nodectx-csswitch#interface fxo nameDeleting an FXO interface FXO interface conﬁguration task list FXO off-hook on caller ID Conﬁguring when the digits are dialed optional Nodectx-csswitch#interface fxo if-nameNodeif-fxoif-name# Nodeif-fxo if-name# Figuration mode Nodeif-fxoif-name#dial-after dial-tone timeout seconds Nodeif-fxo if-name# Nodeif-fxo if-name #ring-number count Conﬁguring how to detect a call has disconnected optional Min min-time max max-time Nodeif-fxo if-name#no connect-signal Battery-reversal tax-pulse Conﬁguring the destination of the call FXO Mute dialing FXO interface examples RBS interface conﬁguration RBS interface conﬁguration task list Creating/Deleting a RBS interfaceConﬁguring an alternate Pstn proﬁle Name Face, the ‘no’ form deletes an existing one Mode Interface RBS Conﬁguring additional disconnect signalsConﬁguring an alternate Tone-Set proﬁle Conﬁguring B-Channel allocation strategy Nodeif-rbsif-name#no dial-after dial- tone timeout seconds Node#no debug ccrbs datapath error signalingConﬁguring number of Rings before Off-Hook Conﬁguring ready to dial strategy Node#show ccrbs call if-name detail level Prints information about ongoing calls onSelected interface Node#show ccrbs interface if-name detail Interface conﬁguration Interface conﬁguration task list Binding the interface to an H.323 gateway Examples Deﬁne the IP address of the remote H.323 entity Conﬁguring an alternate VoIP proﬁle optional Conﬁguring CLIP/CLIR support optional Node if- h323 if-name #itc rx 3k1Speciﬁes the information transfer capability to Node if- h323 if-name #itc tx 3k1 Enabling ‘early-proceeding’ on H.323 interfaces Enabling the early call connect optionalNameif-h323if-name#early-proceeding Nameif-h323name#early-connect Enabling the early call disconnect optional Enabling the via address support optional Ing connection should be established Conﬁguring status inquiry settings optionalNodeif-h323if-name# remoteport port AOC-D Support for H.323 Nodeif-h323if-name# no aoc-d emit Mode context cs/interfce h.323 interface-nameNodeif-h323if-name# no aoc-d SIP interface conﬁguration SIP SIP interface conﬁguration task list Binding the interface to a SIP gateway Conﬁgure a remote hostNodeif-sipif-name# no bind context Sip-gateway gw-name Using an alternate VoIP proﬁle Optional Conﬁguring a local host OptionalNodeif-sipif-name# no remote host Nodeif-sipif-name# no local host Using an alternate SIP proﬁle Optional Using an alternate Tone-Set proﬁle OptionalNodeif-sipif-name#use proﬁle voip Nodeif-sipif-name#use proﬁle sip pro Mapping call-control properties in SIP headers Conﬁguring early call connect / disconnect OptionalConﬁguring address translation Optional Header Mapping SIP headers to call-control propertiesConﬁguring Isdn Redirecting Number Tunneling Over SIP Updating caller address parameters SIP Diversion Header 450 SIP Refer Transmission & Isdn Explicit Call Transfer support 452 AOC Over SIP Optional Name if-sip interface#no aoc-dAccept Name if-sip interface#no aoc-d emit Enabling the session timer Optional Enabling the SIP penalty-box feature Optional Default zero-ip Conﬁgure the SIP hold method Optional Call router conﬁguration Call router configuration 458 Direct call routing vs. advanced call routing Call router conﬁguration task list Map out the goals for the call router Conﬁgure general call router behavior Enable advanced call routing on circuit interfacesConﬁgure address completion timeout Example Conﬁgure address completion timeout Address-completion timeout timeoutDigit-collection timeout timeout Digit-collection terminating-char char Procedure To conﬁgure number preﬁx Mode Context CS Conﬁgure number preﬁx for Isdn number typesExample Conﬁgure number preﬁx National-preﬁx preﬁx Conﬁgure call routing tables Create a routing table Calling-e164 Regular Expressions Example Called party number routing tableCalled party number routing table Symbol Description Digit Collection Digit Collection Variants Example Digit collection of any number Dialed Selected Description Number Entry Calling party number routing table Number type routing table Numbering plan routing table Name routing table IP address routing table Presentation Indicator Routing Table URI routing tableSmith must be escaped with a backslash \, because Dot . means ‘any character’ in a regular expression Screening Indicator Routing Table Information transfer capability routing table 478 Default Any other unhandled case Mode context cs Time of day routing tableDay of Week Routing Table Example Day of week routing table Procedure To delete an entire routing table Node ctx-cs switch #routing-tableDeleting routing tables Resulting running-conﬁg is Node ctx-cs switch #no routing-table Example Remove an entire routing tableConﬁgure mapping tables Delete the routing table table-name Type Description Input-Type Description Output-Type Sets the display name of the called Mapping table examples Example Called and calling party manipulation mapping table To E.164 Mapping TablesInput-type to output-type table-name Away the input-type and output-type 486 487 Custom SIP URIs from called-/calling-e164 properties Other mapping tables Enter the mapping table from which you want to remove an Node ctx-cs switch #mapping-tableDeleting mapping tables Creating complex functions Procedure To delete an entire mapping table Mode Context CSExample Remove an entire mapping table Example Create a complex function Deleting complex functions Example Remove an entire complex function Digit collection & sending-complete behaviorSending-Complete Ingress interface Call-Router 323 123# YesTrue Egress Interface Mode context cs / interface sip Complete-indication clear Creating call services Creating a hunt group service Hunt group service Node ctx-cs switch #service hunt Call dest-service service-nameCause cause Call dest-interface interface-name Default Behavior Class Cause Hunt Description Group Service Normal Event No-user-responding Drop original call Service or ResourceUnavailable Option Not Implemented Invalid Message Protocol Error Interworking Creating a distribution group service Distribution group service Node ctx-cs switch #service distribu Nodesvc-huntservice-name# route callDest-service service-name With the ﬁrst conﬁgured destinations Distribution-Group Min-Concurrent setting Call-router ‘limiter’ service Priority service ‘Limiter’ service diagram Priority service diagram CS Bridge service-‘VoIP Leased Line’ Bridge Bridge services diagram Conﬁguring the service second-dialtone Conﬁguration Example Deleting call services Activate the call router conﬁguration Test the call router conﬁguration Example Create and test a routing table 516 Call routing example network 518 CS context and call router elements 520 Conﬁgure partial rerouting Mode context cs/interface sip Enable push-back aaa serviceMode context cs/service aaa Call reroute Enable push-back bridge service Enable push-back distribution-group serviceEnable push-back hunt group service Enable push-back limiter service SIP call-router services SIP conference-service SIP conference-service conﬁguration task listEntering conference-service conﬁguration mode Name ctx-csswitch#no service sip SIP location-service Mode Service SIP conferenceConﬁguring the conference server Ference-server host-name port SIP location-service conﬁguration task list Entering SIP location-service conﬁguration mode Binding a location service Conﬁguring the hunt timeoutConﬁguring multi-contact behavior Seconds Tone conﬁguration Tone-set proﬁles Tone conﬁguration task list Conﬁguring call-progress-tone proﬁles Procedure To conﬁgure a tone-set proﬁle Mode Conﬁgure Conﬁgure tone-set proﬁles For which a tone indication can be provided Enable tone-set proﬁleProcedure To assign a tone-set proﬁle to a Pstn interface Show call-progress-tone and tone-set proﬁles Example Show tone-set proﬁleNode#show proﬁle call-progress-tone Name Ciﬁc with name name Following example shows how to display the tone-set proﬁle 536 FXS port conﬁguration Shutdown and enable FXS ports Netherlands Bind FXS ports to higher layer applicationsConﬁgure country-speciﬁc FXS port parameters Mode IC voice in system Enter FXS port conﬁguration modeOther FXS port parameters Nodeconﬁg#port fxs slot port Example FXO port conﬁguration Shutdown and enable FXO ports Bind FXO ports to higher layer applications Conﬁgure country speciﬁc FXO port parameters Other FXO port parametersNodeconﬁg#port fxo slot port Nodeprt-fxo slot/ port#use Enter FXO port conﬁguration mode Gateway conﬁguration Gateway between IP and CS contexts Mode Gateway H.323 Enable the gatewayGateway conﬁguration task list Binding the gateway to an IP interface Conﬁgure registration authentication service RAS Optional Ery auto gkid Conﬁgure H.235 Security optionalNode gw-h323h323#gatekeeper-discov Procedure To enable H.235 security on H.323 gateway 235 conﬁguration \getcryptopassword h235-password mas Word h235-password encryptedNode gw-h323h323#h235security master Node gw-h323h323#h235security pass Default setting is Command show h235-securityshows the current settingSignaling message Detail debug-level Advanced conﬁguration options optional Enabling H.245 Tunneling Enabling the fastconnect procedure Enabling the early H.245 procedureNodegw-h323h323#h245-tunneling Enables H.245 tunneling Nodegw-h323h323#faststart Enables the fastconnect procedure Conﬁguring the trafﬁc class for H.323 signaling Setting the response timeoutNodegw-h323h323#call-signaling-port Port Naling connections Istration Setting the connect timeoutNal gateway Nodecfg#debug gateway h323 error Nodecfg#debug gateway h323 signalingH323 status detail level Nodecfg#debug gateway h323 tpktchan Context SIP gateway overview Routing Architecture Enter conﬁguration mode Context SIP Gateway conﬁguration task listFrom-URI-Host equal Remote Request-URI-Host equal Local Creating a context SIP gateway Mode Context SIP Gateway Mode Transport InterfaceCreating a transport interface Conﬁguring the IP binding Enabling/disabling the context SIP gateway Binding location servicesConﬁguring a spoofed contact address Troubleshooting Debug commandsShow status information Node#show context sip-gateway gw Conﬁguration Examples Example Outbound Authentication Inbound Authentication Outbound Registration 569 Inbound Registration B2B User Agent with Registered Clients 572 VoIP proﬁle conﬁguration VoIP profile configuration VoIP proﬁle conﬁguration task list Creating a VoIP proﬁleNodecfg#profile voip name Nodepf-voip name# Conﬁgure codecs Procedure Insert a codec at a speciﬁc position in the list Mode Proﬁle VoIPProcedure Remove a codec from the list Mode Proﬁle VoIP Conﬁguring the Cisco versions of the G.726 codecs Mode VoIP nameConﬁguring the transparent-clearmode codec Defaultrtpsignaling Conﬁguring Dtmf relayConﬁguring RTP payload types Nodepf-voip pf-name#dtmf-relay Conﬁguring RTP payload type for transparent-clearmode Conﬁguring RTP payload type for Cisco NSEConﬁguring Cisco NSE for Fax Nodepf-voip name#rtp payload-type nse Conﬁguring the dejitter buffer advanced Jitter and dejitter buffer Procedure Conﬁgure the dejitter buffer Adaptive Max-delay Dejitter buffer is allowed to introduce. This settingEnabling/disabling ﬁlters advanced Is valid for all modes Conﬁguring Fax transmission Illustrates the difference between Fax relay and Fax bypass Fax relay and Fax bypass Nodepf-voipname#fax transmis Sion bypass g711alaw64kNodepf-voipname#fax dejitter Nodepf-voipname# fax transmis Mode proﬁle voip proﬁle-name VolumeCED retransmission Retransmission number No-Signal Retransmission Mode proﬁle voip pf-nameMethod default v150-vbdnse Default default Fax bypass method Modem bypass method Conﬁguring modem transmissionNodepf-voip name#modem trans Mission bypass g711alaw64k Conﬁguring the trafﬁc class for Voice and Fax data Conﬁguring IP-IP codec negotiation Home ofﬁce in an enterprise network Home ofﬁce in an enterprise network Description Show the conﬁgured proﬁle Home ofﬁce with fax Soft phone client gateway 595 Disable Dtmf relay Show the conﬁgured proﬁle Pstn proﬁle conﬁguration Pstn proﬁle conﬁguration task list Creating a Pstn proﬁle Conﬁguring the echo canceller Procedure Disable echo cancellation Mode Proﬁle PstnProcedure Conﬁgure voice output gain Conﬁguring output gain 600 SIP proﬁle conﬁguration Entering the conﬁguration mode for a SIP proﬁle SIP proﬁle conﬁguration task listMapping from a SIP disconnect cause Namecfg#no profile name name Mapping to a SIP cause Mapping from a SIP redirection reasonMapping to a SIP redirection code Q931-cause to sip-cause Authentication Service Authentication Service conﬁguration task list Creating an Authentication Service Creating credentials Conﬁguring the authentication protocolConﬁguring a Realm Location Service Location Service conﬁguration task list Creating a Location ServiceAdding a domain Domain Examples Mode Identity Creating an identity Bound Authentication outbound faceAlias Mode Authentication outbound Authentication inbound faceNodeauthout#authenticate authentica Nodeauthout#authenticate index Mode Authentication inbound Nodeauthin#authenticate authenticaNodeauthin#authenticate index Nodeauthin#no authenticate index Mode Registration outbound Registration outbound face Noderegout#proxy host port Strict-routePort strict-route Noderegout#proxy index down posi Noderegin# no lifetime default sec Registration inbound faceNodeidentityname# no registration Inbound Mode Call outbound Call outbound faceNodecallout#proxy host port Nodecallout#proxy index host Call inbound face Mode Call outboundMode Call inbound Creating an identity group Inheriting from an identity group to an identity Conﬁguring the Message Waiting Indication feature for SIP Subscription Mode Message inbound Notiﬁcation Mode Message inbound Message Waiting Indication through Call-Control This conﬁguration example, inheritance is used VoIP debugging Debugging strategy Following command will disable the ﬁlter completely Filtering debug monitor outputVerifying IP connectivity Example Verify IP connectivity Debugging call signaling Debugging Isdn signalingUnit#debug ccisdn signaling Overview Isdn debug monitors Verify an incoming call Line Verify an outgoing call 630 Debug isdn event slot port all layer2 layer3 Isdn layer 2 and 3 can be veriﬁed using a show commandVerify Isdn layer 2 and 3 status Debugging FXS Signaling Overview FXS debug monitorsStops For most verbose output State to RINGING, that means it has accepted the call Debugging H.323 Signaling Overview H.323 debug monitors 635 636 637 Debugging SIP signaling Using SmartWare’s internal call generator Debugging voice data No debug media-gateWay dejitter Way control detail level Way switch Way errorWay rtp Way dsp How to submit trouble reports to Patton Check system logs 643 Appendix a Terms and deﬁnitions SmartWare architecture terms and deﬁnitions Also release Pression Ory Buffer Pots Tftp Appendix B Mode summary Mode overview, 1 Mode Overview, 2 Mode Overview, 3 Appendix C Command summary Ebnf syntax New Conﬁguration Commands Show command historyOther Show help Appendix D Internetworking terms & acronyms Abbreviations Numeric DSS1 MSN SAR Appendix E Used IP ports & available voice Codecs Webserver Used IP portsTelnet Available voice codecs