manualshive.com logo in svg

Applied Innovation AISwitch AI2524, User Manual, Page: 252 / 418

Share
Download
Applied Innovation AISwitch AI2524 User Manual Download Page 252

AI2524 Router Card User’s Manual

Page 11-26

August 1997

2524UM

Configure Virtual 
Private Dial-up 
Networks

Virtual private dial-up networks (VDPN) allow separate and autono-
mous protocol domains to share common access infrastructure includ-
ing modems, access servers, and ISDN routers. VPDN uses the Level 
2 Forwarding protocol (L2F) which permits the tunneling of link level 
frames.

Using L2F tunneling, an Internet Service Provider (ISP) or other ac
cess service can create a virtual tunnel to link a customer's remote sites 
or remote users with corporate home networks. In particular, a net-
work access server at the ISP's Point of Presence (POP) exchanges 
PPP messages with the remote users and communicates by L2F re-
quests and responses with the customer's home gateway to set up tun-
nels.

L2F passes protocol-level packets through the virtual tunnel between 
endpoints of a point-to-point connection.

Frames from the remote users are accepted by the ISP POP, stripped 
of any linked framing or transparency bytes, encapsulated in L2F, and 
forwarded over the appropriate tunnel. The customer's home gateway 
accepts these L2F frames, strips the L2F encapsulation, and processes 
the incoming frames for the appropriate interface.

Note:

This implementation of VPDN supports PPP dial-up only.

To configure virtual private dial-up networks, complete these tasks:

z

Understand VPDNs

z

Beginning in global configuration mode, configure a virtual tem-
plate for interfaces on a home gateway access server:

z

Configure Incoming VPDN Connections on the Home Gateway

z

Configure Outgoing VPDN Connections on the Network Access 
Server

Understand Virtual Private Dial-up Networks

VPDN enables users to configure secure networks that take advantag
of internet service providers that tunnel the company's remote access 
traffic through the ISP cloud.

Remote offices or mobile users can connect to their home network 
using local dial-up services of third parties. The dial-up service pro-
vider agrees to forward the company's traffic from the ISP POP to a 
company-run home gateway. Network configuration and security re-
main in the control of the client. The dial-up service provider provides 
a virtual pipe between the company's sites.

Summary of Contents for AISwitch AI2524

Page 1: ...AISwitchTM AI2524 Router User s Manual Applied Innovation Inc August 1997 ...

Page 2: ...AI2524 Router User s Manual AISwitchTM ...

Page 3: ...Applied Innovation Inc AI2524 Router User s Manual August 1997 Reference 2524UM ...

Page 4: ... the user to take whatever steps are nec essary to correct the interference Information is available from the FCC describing possible corrective actions For lower EMI levels we suggest using only metal connectors and shielded cables grounded to the frame Electrostatic Discharge Warning Warning The AISwitch and its peripherals contain electrostatic sensitive components Proper handling shipping and ...

Page 5: ... 5 Supported Media 2 5 Supported Network Protocols 2 5 Connections 2 7 External Connection Requirements 2 7 Chapter 3 Configuration Overview 3 1 Introduction 3 1 Boot Router for First Time 3 1 Configure the Router 3 2 Using Configuration Mod 3 2 Show Configuration 3 3 Save the Configuration 3 4 Configuration Overviews 3 4 Use Configuration Builder 3 4 Use the Command Interpreter 3 4 Use the Web Br...

Page 6: ...at Wra 4 26 Web Browser Interfac 4 27 Web Browser Interface Task List 4 27 Enable the Web Browser Interface 4 27 Use Compatible Hardware and Software 4 27 Access Your Router s Home Pag 4 28 Issue Commands Using the Web Browser Interfac 4 29 Enter Commands Using Hypertext Links 4 29 Enter Commands Using the Command Field 4 30 Enter Commands Using the URL Window 4 30 Chapter 5 Using AutoInstall 5 1 ...

Page 7: ...and Select a Configuration Source 7 12 Modify the Configuration Register Boot Field 7 15 Specify the Startup Configuration Fil 7 18 Store System Images and Configuration Files 7 21 Store System Images and Configuration Files Task List 7 21 Copy System Images from Flash Memory to a Network Server 7 21 Copy Configuration Files from the Router to a Network Server 7 23 Perform Startup Tasks 7 24 Start...

Page 8: ...rk Diamete 8 14 Validate Source IP Addresses 8 15 Network Illustration 8 15 AI2524 RIP TCP IP Configuration 8 16 RIP Configuration Task List 8 16 Enable RIP 8 16 Allow Point to Point Updates for RI 8 16 Specify a RIP Version 8 17 Enable RIP Authentication 8 18 Disable Route Summarization 8 18 Run IGRP and RIP Concurrently 8 19 Disable the Validation of Source IP Addresses 8 19 Chapter 9 AI2524 OSI...

Page 9: ...ver ISO CLNS Addresses 9 44 Create Packet Forwarding Filters and Establish Adjacencies 9 44 Examples CLNS Filter 9 45 Redistribute Routing Information 9 45 Examples Route Map 9 48 Specify Preferred Routes 9 49 Configure ES IS Hello Packet Parameters 9 49 Configure CLNS over WANs 9 51 Example ISO CLNS over X 25 9 51 Enhance ISO CLNS Performance 9 53 Specify the MTU Size 9 54 Disable Checksums 9 54 ...

Page 10: ...ck 11 13 Configure a Router as a Callback Client 11 14 Example PPP Callback Client 11 14 Configure a Router as a Callback Serve 11 15 Example PPP Callback Server 11 16 Disable or Reenable Peer Neighbor Routes 11 17 Configure PPP Half Bridging 11 17 Configure Multilink PPP 11 19 Configure Multilink PPP on Asynchronous Interfaces 11 19 Configure Multilink PPP on a Single ISDN BRI Interface 11 20 Exa...

Page 11: ...tablish an Encapsulation PVC 12 20 Example PVC Used to Exchange IP Traffic 12 21 Set X 25 TCP IP Header Compression 12 22 Configure X 25 Bridging 12 22 Configure Additional X 25 Datagram Transport Features 12 23 Configure X 25 Payload Compression 12 23 Configure the Encapsulation Virtual Circuit Idle Time 12 24 Increase the Number of Virtual Circuits Allowed 12 25 Configure the Ignore Destination ...

Page 12: ...e Transparent Bridging for Multiprotocol LAPB Encapsulation 12 54 Example X 25 Configured to Allow Ping Support over Multiple Lines 12 54 Example Booting from a Network Server over X 25 12 56 Chapter 13 AI2524 Frame Relay Configuration Steps 13 1 Introduction 13 1 Frame Relay Hardware Configuration 13 1 Frame Relay Configuration Task List 13 2 Enable Frame Relay Encapsulation on an Interface 13 2 ...

Page 13: ...13 31 Example Hybrid DTE DCE PVC Switching 13 34 Example Switching over an IP Tunnel 13 36 Disable or Reenable Frame Relay Inverse ARP 13 38 Create a Broadcast Queue for an Interface 13 38 Configure Payload Compression 13 39 Configure TCP IP Header Compression 13 39 Example IP Map with Inherited TCP IP Header Compression 13 42 Example Using an IP Map to Override TCP IP Header Compression 13 42 Exa...

Page 14: ...g the Router for the First Time 16 2 Configuring the Router 16 2 Using Configuration Mod 16 3 Using AutoInstall 16 4 Using the System Configuration Dialog 16 5 Configuring the Ethernet or Token Ring Interfaces 16 10 Configuring the Synchronous Serial Interfaces 16 11 Configuring ISDN 16 12 Configuring Switched 56 16 14 Configuring DDS 16 16 Configuring the Fractional T1 T1 DSU CSU WAN Module 16 17...

Page 15: ...booting the router for the first time and provides over views of configuration methods Chapter 4 Understanding the User Interfac This chapter introduces Cisco IOS softwar interface and includes instructions for ac cessing command modes context sensitiv help and command history and editing fea tures Chapter 5 Using AutoInstall This chapter describes how use AutoInstall for automatic and dynamic con...

Page 16: ...ks Chapter 12 AI2524 X 25 Configuration Steps This chapter describes how to configure th X 25 interface and includes datagram trans port routing and X 29 access lists and profile scripts Chapter 13 AI2524 Frame Relay Configuration Steps This chapter describes how to enable frame relay encapsulation and perform a variety of Frame Relay configuration tasks Chapter 14 T1 Interface Configuration Steps...

Page 17: ...includes To order these or any other AISwitch manuals contact your sales rep resentative at 800 247 9482 AI120 Contact Alarm Monitor User s Manual AI120UM AISwitch 130 Hardware Manual HM130 0194 AI192 X User s Manual 192UM AI193 ES User s Manual UM193ES AI193 TX User s Manual 193TXUM AI194 User s Manual AI94U AI196 I User s Manual 196IUM AI196 IEGB User s Manual 196TUM AI196 X User s Manual 196XUM...

Page 18: ...onal email contacts are also available Applied Innovation Inc Publications Dept 5800 Innovation Dr Dublin OH 43216 3271 Phone 614 798 2000 800 247 9482 FAX 614 798 1770 Email aidoc aiinet com National Sales Department sales aiinet com Customer Service Department cssupport aiinet com Marketing Department info aiinet com Human Resources Department hr aiinet com Technical Support Department techsupp ...

Page 19: ... text that appears in this style exactly as shown avdumpdb BNC OFF Press the Return or Enter key after all commands Variable Arguments Variable arguments are text that you specify They are shown in italics For example avaccess switch_name In this case switch_name is variable text To enter the command type avaccess and then the actual name of the switch Ellipses signify that the preceding argu ment...

Page 20: ...er a comma and optionally the word DEFAULT without brackets argument argument Arguments between braces are grouped into one unit The vertical bar signifies that either the first or second argument can be used The braces and vertical bar are not entered For example ls file directory means that you would type ls followed by either a file or a directory name Keys Keyboard controls are shown in this s...

Page 21: ...d text The bar separates the main menu from submenus For example File Exit indicates that you should select the File menu and then select the Exit menu item Screen output Screen shots system prompts and error messages displayed on the screen are shown in this style CONFIG PORT LPORT 40 HPORT 47 BITS 8 CONFIG PORT LPORT 48 HPORT 49 BITS 7 CONFIG PORT LPORT 50 BITS 8 0778 Warning Warning messages in...

Page 22: ...AI2524 Router Card User s Manual Page 1 8 August 1997 2524UM ...

Page 23: ... port and a 10BaseT port on the front panel The backplane port provides connections to a large number of interfaces and protocols through a variety of AISwitch interface modules The base module accepts two serial interface modules in any combi nation The three available modules are T1 CSU DSU The AI2524 T1 module is an integrated CSU DSU that supports full or fractional T1 leased line services It ...

Page 24: ...tion smart broadcasts and helper address ser vices combine to create a flexible scalable infrastructure that can keep pace with evolving network requirements Reliable Adaptive Routing The AI2524 Cisco IOS software identifies the best network paths and routes traffic around network failures Policy based features such as route filtering and route redistribution save network resources by pre venting ...

Page 25: ...r and access server connections to X 25 machines using X 25 Packet Assem bler Disassembler PAD The Cisco IOS software supports three types of server operation Remote Node Ser vices Connect devices over a telephone network Serial Line Internet Protocol SLIP com pressed SLIP CSLIP Point to Point Protocol PPP and X Windows terminal protocol See Figure 2 Terminal Service Connect asynchronous devices t...

Page 26: ... by the telecommuter s re mote PC connection running SLIP PPP CSLIP or XRemote z Terminal service is shown between the terminals and hosts run ning the same protocol LAT to LAT or TCP to TCP z Protocol translation is shown between the terminals and hosts run ning unlike protocols LAT to TCP or TCP to LAT z Asynchronous IP routing is shown by the PC running SLIP or PPP and between the two access se...

Page 27: ...s a diverse tool kit for partitioning re sources and prohibiting access to sensitive or confidential information and processes Multidimensional filters prevent users from knowing that other users or resources are on the network Encrypted passwords dial in authentication multilevel configuration permissions network data encryption and accounting and logging features provide protec tion from and inf...

Page 28: ...oftware supports IP routing protocols including inte rior gateway protocols and exterior gateway protocols Interior Gateway Protocols z Internet Gateway Routing Protocol IGRP z Enhanced IGRP z Open Shortest Path First OSPF z Routing Information Protocol RIP and RIP Version 2 z Intermediate System to Intermediate System IS IS Exterior Gateway Protocols z Exterior Gateway Protocol EGP z Router Disco...

Page 29: ...dates two synchronous serial modules The synchronous serial WAN modules include these external connec tors z Four wire 56 64 kbps DSU CSU WAN module with an RJ 48S connector z Fractional T1 T1 DSU CSU WAN module with an RJ 48C con nector z Five in one synchronous serial WAN module with a DB 60 serial connector The five in one synchronous serial interface supports the following signaling standards ...

Page 30: ...AI2524 Router Card User s Manual Page 2 8 August 1997 AI2524UM ...

Page 31: ... through power on self test diagnostics to verify basic operation of the CPU memory and interfaces 2 The system bootstrap software boot image executes and searches for a valid Cisco IOS image router operating system software The source of the Cisco IOS image Flash memory or a Trivial File Transfer Protocol TFTP server is determined by the configura tion register setting The factory default setting...

Page 32: ...matic installation if another router running Cisco IOS software is installed on the network This configuration method must be set up by someone with expe rience using Cisco IOS software Refer to the Use AutoInstall chapter z System Configuration Dialog Recommended if you are not famil iar with Cisco IOS commands Refer to th Using the System Con figuration Dialog chapter Use the procedure that best...

Page 33: ... now enter any changes you want to the configuration Refer to the appropriate sections of this manual for help with specific con figurations 5 Press Ctrl Z to exit configuration mode Show Configuration To see the current operating configuration enter the show run ning config command at the enable prompt Router show running config To see the configuration in NVRAM enter th show startup config comma...

Page 34: ...ration Builder allows you to create configuration files for multiple routers or access servers without knowing the command line language or syntax It is a Microsoft Windows based application that runs on an IBM PC or compatible computer If you do not have the platform required to run Configuration Builder configure your device using the command interpreter Use the Command Interpreter You can build...

Page 35: ... command line parser to configure interfaces terminal sessions and asynchronous communications lines Interfaces are connections to network media such as Ethernet Token Ring and serial media You configure them to run routing and networking protocols You configure terminal ses sions and modems connected to the router or access server so that other network users can log in to the network over asynchr...

Page 36: ...red in Menu 4 18 for the port associated with the AI2524 card When the AI2524 card boots it uses the BOOTP protocol to obtain its IP ad dress The AI2524 card then uses TFTP to transfer its configuration in formation from the AI198 card to the AI2524 card Any changes made to the AI2524 card s configuration must be stored back to the AI198 card to maintain full hot swap capability Here are two optio...

Page 37: ...This feature is described in Web Browser Interface For security purposes the Cisco IOS software provides two levels of access to commands user and privileged The unprivileged user mod is called user EXEC mode The privileged mode is called privileged EXEC mode and requires a password The commands available in user EXEC mode are a subset of the commands available in privileged EXEC mode If your rout...

Page 38: ...cribes the command editing and command history features that enable you to recall and easily edit command entries End a Session After using the setup command or other configuration commands exit the user interface and quit the session To end a session type quit User Interface Task List You can perform these tasks to familiarize yourself with the AI2524 user interface z Access Each Command Mode z G...

Page 39: ...ds z Router Configuration Mode z IPX Router Configuration Mode z Route Map Configuration Mode z Key Chain Configuration Mode z Key Chain Key Configuration Mode z Response Time Reporter Configuration Mod z Access List Configuration Mode The following table lists the command modes how to access each mode the prompt while in each mode and how to exit each mode The prompts listed assume that the defau...

Page 40: ...configuration command The following table does not include all o the possible ways to access or exit each command mode For all command modes typing a question mark at the prompt will list the commands available Refer to Context Sensitive Help for more information ...

Page 41: ...onfiguration mode specify a subinterface with the interface com mand Subinterface configuration From global configuration mode type interface type number encap sulation frame relay interface type number sub interface numbe Router config subif To exit to global configuration mode type exit To enter priv ileged EXEC mode type end or press Ctrl Z Router configu ration From global configuration mode t...

Page 42: ...mode type key num ber Router config keychain key To exit to key chain configura tion mode type exit To exit to global configuration mode type exit command To exit to priv ileged EXEC mode type end or press Ctrl Z Response time reporter config uration From global configuration mode type rtr probe Router config rtr To exit to global configuration mode type exit To exit to privileged EXEC mode type e...

Page 43: ...connection terminal Set terminal line parameters tn3270 Open a tn3270 connection trace Trace route to destination where List active telnet connections x3 Set X 3 parameters on PAD xremote Enter XRemote mode Privileged EXEC Mode Commands Because many of the privileged commands set operating parameters privileged access should be password protected to prevent unautho rized use If the system administ...

Page 44: ...existing telnet connection ping Send echo messages reload Halt and perform a cold restart resume Resume an active telnet connection send Send a message to other tty lines setup Run the SETUP command facility show Show running system information systat Display information about terminal lines telnet Open a telnet connection terminal Set terminal line parameters test Test subsystems memory and inter...

Page 45: ...ze S with modifier M G address Begin execution H Help for commands I Initialize K Stack trace L filename TFTP Server IP address TFTP Server Name Load system image from ROM or from TFTP server but do not begin execution O Show configuration register option settings P Set the break point S Single step next instruction T function Test device for help Deposit and Examine sizes may be B byte L long or ...

Page 46: ...bal configuration mode When you enter this command the system EXEC prompts you for the source of the configuration com mands Configuring from terminal memory or network terminal You can specify either the terminal nonvolatile random access mem ory NVRAM or a file stored on a network server as the source of configuration commands The default is to enter commands from th terminal console Pressing En...

Page 47: ...t from configure mode frame relay Global frame relay configuration commands help Description of the interactive help system hostname Set system s network name interface Select an interface to configure ip Global IP configuration subcommands ipx Novell IPX global configuration commands line Configure a terminal lin lnm IBM Lan Manager locaddr priority list Establish queueing priorities based on LU ...

Page 48: ...on Mode Commands Many features are enabled on a per interface basis Interface configu ration commands modify the operation of an interface such as an Ethernet Fiber Distributed Data Interface FDDI or serial port Inter face configuration commands always follow an interface global configuration command which defines the interface type This example shows how to access interface configuration commands...

Page 49: ...ration mode frame relay Set frame relay parameters hdh Set HDH mode help Description of the interactive help system hold queue Set hold queue depth ip Interface Internet Protocol config commands ipx Novell interface subcommands isis IS IS commands iso igrp ISO IGRP interface subcommands keepalive Enable keepalive lapb X 25 Level 2 parameters Link Access Procedure Balanced llc2 LLC2 Interface Subco...

Page 50: ...virtual circuits PVCs PVCs can be grouped under separate subinterfaces that in turn are configured on a single physical interface From a bridging spanning tree viewpoint each subinterface is a separate bridge port and a frame arriving on one subinterface can be sent out on another subinterface Subinterfaces also allow multiple encapsulations for a protocol on a single interface For example a route...

Page 51: ...ay description Interface specific description exit Exit from interface configuration mode frame relay Set frame relay parameters ip Interface Internet Protocol config commands ipx Novell interface subcommands isis IS IS commands iso igrp ISO IGRP interface subcommands no Negate a command or set its defaults ntp Configure NTP shutdown Shutdown the selected interface Router Configuration Mode Router...

Page 52: ... an IP network no Negate or set default values of a command offset list Add or subtract offset from IGRP RIP or HELLO metrics passive interface Suppress routing updates on an interface redistribute Redistribute information from another routing protocol timers Adjust routing timers IPX Router Configuration Mode Internet Packet Exchange IPX is a Novell network layer protocol In this example IPX RIP ...

Page 53: ...y Chain configuration commands you must first enable RIP au thentication For more information about enabling RIP refer to Enable RIP Key Chain Key Configuration Mode Once you define a key chain use the key chain key configuration mode to configure the keys on the key chain Response Time Reporter Configuration Mode Use the response time reporter feature to monitor network perfor mance network resou...

Page 54: ... list of commands available for each command mode You can also get a list of any command s associated keywords and arguments with the context sensitive help feature To get help specific to a command mode a command a keyword or arguments perform one of these tasks Help Command Command Format Obtain a brief description of the help sys tem in any command mode help Receive help for the full set of use...

Page 55: ...s to the number of charac ters that allow a unique abbreviation For example you can abbreviat the show command to sh Examples Enter the help command which is available in any command mode for a brief description of the help system Router help Help may be requested at any point in a command by entering a question mark If nothing matches the help list will be empty and you must back up until enterin...

Page 56: ...figure terminal Enter configuration commands one per line End with CNTL Z Router config z Enter the access list command followed by a space and question mark to list the command s keywords Router config access list 1 99 IP standard access list 100 199 IP extended access list 1000 1099 IPX SAP access list 1100 1199 Extended 48 bit MAC address access list 200 299 Protocol type code access list 300 3...

Page 57: ...z Enter the wildcard mask followed by a question mark to list further options Router config access list 99 deny 131 108 134 0 0 0 0 255 cr Router config access list 99 deny 131 108 134 0 0 0 0 255 Check Command Syntax The user interface provides error isolation by using a caret symbol as an indicator The symbol appears at the point in the command string where you have entered an incorrect command ...

Page 58: ...y repeat the previous command entry Then add a space and question mark to reveal the additional arguments Router clock set 13 32 00 1 31 Day of the month January Month of the year February March April May June July August September October November December Now you can complete the command entry Router clock set 13 32 00 23 February 93 Invalid input detected at marker The caret symbol and help res...

Page 59: ...rrow keys function only on ANSI compatible termi nals such as VT100s History Commands Command Format Set the number of command lines the system will record during the current terminal session terminal history size number of lines Reset the number of lines saved in th history buffer to the default of 10 lines terminal no his tory size Recall commands in the history buffer beginning with the most re...

Page 60: ...g if you have prebuilt scripts such as scripts that do not interact well when enhanced editing is enabled You can reenable enhanced editing mode with the terminal editing command Editing Commands Command Format In user EXEC mode reenable the enhanced editing mode for the current terminal session terminal editing Move the cursor back one character Press Ctrl B or press the left arrow key Move the c...

Page 61: ...line Press Ctrl U or Ctrl X Delete the word to the left of the cur sor Press Ctrl W Scroll down one line Press Enter Scroll down one screen Press the Space bar Redisplay the current command line Press Ctrl L or Ctrl R Transpose mistyped characters The character to the left of the cursor will be transposed with the characte located at the cursor Press Ctrl T Capitalize at the cursor Press Esc then ...

Page 62: ... list command entry extends beyond one line When the cursor first reaches the end of the line the line is shifted 10 spaces to the left and is redisplayed The dollar sign in dicates that the line has been scrolled to the left Each time the cursor reaches the end of the line the line is again shifted 10 spaces to the left Router config access list 101 permit tcp 131 108 2 5 255 255 255 0 131 108 Ro...

Page 63: ...are z Access Your Router s Home Pag z Issue Commands Using the Web Browser Interfac z Enter Commands Using Hypertext Links z Enter Commands Using the Command Field z Enter Commands Using the URL Window Enable the Web Browser Interface To enable your router to be configured from a browser using the Web Browser interface type this command in global configuration mode ip http server Once the Web Brow...

Page 64: ...r The browser prompts you for the password for the router or access server 2 Enter the password Warning The name and password for your router and access server are designated as part of the configuration process Con tact your network administrator if you do not have this in formation The browser should display the home page for your router or access server The router s home page looks something li...

Page 65: ...sing Hypertext Links To enter a command using hypertext links scroll through the com mands listed at the bottom of the screen and click the one you want to execute If the link is a complete command it is executed If the com mand has more parameters another list of command hypertext links is displayed Scroll through this second list and click the one you want to execute If the command is a request ...

Page 66: ... the parameter in the command field Enter Commands Using the URL Window You can issue a command using the Universal Resource Locator URL window for the Web browser For example to execute a show configuration command on a router named example you would enter this in the URL window http example exec show configuration The Web browser then displays the configuration for the exampl router To save effo...

Page 67: ... router 2 Turn ON power to the router The router will load the operating system image from Flash mem ory If the remote end of the WAN connection is connected and properly configured the AutoInstall process will begin If AutoInstall successfully completes you can write the configu ration data to the router s NVRAM Perform the following step to complete this task 3 Enter the copy running config star...

Page 68: ...addition your system must meet these requirements z Routers must be physically attached to the network using one o more of the following interface types Ethernet Token Ring Fiber Distributed Data Interface FDDI serial with High Level Dat Link Control HDLC encapsulation or serial with Frame Relay encapsulation HDLC is the default serial encapsulation If the Au toInstall process fails over HDLC the ...

Page 69: ...ted serial interface that interface must be configured with An IP helper address pointing to the TFTP server In this example 171 69 2 75 is the address of the TFTP server ip helper 171 69 2 75 A Frame Relay map pointing back to the new router In this exam ple 172 21 177 100 is the IP address of the new router s serial in terface and 100 is the PVC identifier frame relay map ip 172 21 177 100 100 d...

Page 70: ...e AutoInstall program then attempts to resolve the host name for the router through host commands in cisconet cfg If cisconet cfg does not exist or cannot be downloaded or if the pro gram is unable to resolve a host name DNS attempts to resolve the host name If DNS cannot resolve the host name the router attempts to download ciscortr cfg If the host name is longer than eight charac ters it is trun...

Page 71: ...y an HDLC encapsulated serial line to the existing router existing newrouter sends a SLARP request to existing z If newrouter is connected by an Ethernet Token Ring or FDDI in terface it broadcasts BOOTP and RARP requests z If newrouter is connected by a Frame Relay encapsulated serial interface it first attempts the HDLC automatic installation process and then attempts the BOOTP or RARP process o...

Page 72: ...TP or RARP server to newrouter A BOOTP or RARP server must have already been set up to map newrouter s MAC address to its IP address If the BOOTP server does not reside on the directly attached network segment routers between newrouter and the BOOTP server can be configured with the ip helper address command to allow the request and response to be forwarded between segments as shown in Figur 5 2 ...

Page 73: ... Relay map need to be set up No MAC to IP address map is needed on the existing router The AI2524 routers can be configured to act as a RARP server Because the router attempts to resolve its host name as soon as one in terface resolves its IP address only one IP address needs to be set up with SLARP BOOTP or RARP Resolve the IP Address to the Host Name The new router resolves its IP address to hos...

Page 74: ...AI2524 Router Card User s Manual Page 5 8 August 1997 2524UM Figure 5 3 Dynamically Resolve the New Router s IP Ad dress to Host Name Mapping ...

Page 75: ...pping does not match the newly ac quired IP address newrouter sends a DNS broadcast If DNS is con figured and has an entry that maps newrouter s SLARP BOOTP or RARP acquired IP address to its name newrouter successfully re solves its name If DNS does not have an entry that maps the new router s SLARP BOOTP or RARP acquired address to its name the new router cannot resolve its host name The new rou...

Page 76: ...e Setup for Configuration Changes for specific information about the setup command If the host configuration file is complete newrouter should be fully op erational You can enter the enable command with the system ad ministrator password at the system prompt on newrouter Then enter the copy running config startup config command to save the information in the recently obtained configuration file in...

Page 77: ... the network Modify the Existing Router s Configuration You can use any of these interfaces z An HDLC encapsulated serial line the default configuration for serial line z An Ethernet Token Ring FDDI interface z A Frame Relay encapsulated serial line Use an HDLC Encapsulated Serial Interface Connection To set up AutoInstall via a serial line with HDLC encapsulation the default you must configure th...

Page 78: ...al interface serial 0 ip address 172 31 10 1 255 255 255 0 ip helper address 172 31 20 5 Ctrl Z Router config copy running config startup config Use an Ethernet Token Ring or FDDI Interface Connection To set up AutoInstall using an Ethernet Token Ring or FDDI inter face you must modify the configuration of the existing router Per form these steps beginning in global configuration mode 1 Configure ...

Page 79: ...20 5 Ctrl Z Router config copy running config startup config Use a Frame Relay Encapsulated Serial Interface Connection To set up AutoInstall via a serial line with Frame Relay encapsulation you must configure the existing router Perform these tasks beginning in global configuration mode 1 Configure the serial interface that connects to the new router and enter interface configuration mode interfa...

Page 80: ...outer s configuration file contains the commands needed to configure the router for Frame Relay AutoInstall on a serial line Router configure terminal interface serial 0 ip address 172 31 20 20 255 255 255 0 encapsulation frame relay frame relay map ip 172 31 10 1 255 255 255 0 48 ip helper address 172 31 20 5 Set Up the TFTP Server For AutoInstall to work correctly the new router must resolve its...

Page 81: ... Enter configuration commands for the new router into this file The name confg or the name cfg file can contain either the new router s full configuration or a minimal configuration The minimal configuration file is a virtual terminal password and an enable password It allows an administrator to gain access via Telnet into the new router to configure it If you are using BOOTP or RARP to resolve th...

Page 82: ...n in the mini mal configuration This example minimal network configuration file maps the new router s IP address 131 108 10 2 to the host name newrouter The new router s address was learned via SLARP and is based on the exist ing router s IP address of 131 108 10 1 ip host newrouter 131 108 10 2 Set Up the BOOTP or RARP Server If the new router is connected to the existing router using an Ethernet...

Page 83: ...k Connect the new router to the network using either an HDLC encap sulated or Frame Relay encapsulated serial interface or an Ethernet Token Ring or FDDI interface After the router successfully resolves its host name newrouter sends a TFTP broadcast requesting the file name confg or name cfg The router name must be in all lowercase even if the true host name is not The file is downloaded to the ne...

Page 84: ...w router will load NVRAM configuration information before it can enter AutoInstall mode If the configuration file is a minimal configuration file the new router comes up but with only one interface operational Complete the fol lowing steps to connect to the new router and configure it 1 Establish a Telnet connection to the existing router telnet existing 2 From the existing router establish a Teln...

Page 85: ... facility be sure that you know z Router interfaces z Router protocols z Bridging setting z Network addresses for the protocols being configured z Password strategy for your environment Setup Command Facility Task List You can perform these tasks to make configuration changes using the setup command facility Both tasks are optional z Use Setup after First Time Startup z Use the Streamlined Setup F...

Page 86: ...ialog guides you through the configuration process It prompts you first for global parameters and then for interface parameters The values shown in brackets next to each prompt are the default values last set using either the setup command facility or the configure command Note The prompts and the order in which they appear on the screen vary depending on the platform and the interfaces installed ...

Page 87: ...s Continue with configuration dialog yes First would you like to see the current interface summary yes Interface IP Address OK Method Status Protocol Ethernet0 172 16 72 2 YES manual up up Serial0 unassigned YES not set down down Serial1 172 16 72 2 YES not set up up Configuring global parameters Enter host name Router The enable secret is a one way cryptographic secret used instead of the enable ...

Page 88: ...network is 172 16 0 0 8 subnet bits mask is 24 Configure AppleTalk on this interface yes Extended AppleTalk network yes AppleTalk starting cable range 1 AppleTalk ending cable range 1 AppleTalk zone name Sales AppleTalk additional zone name Configure IPX on this interface yes IPX network number 1 Configuring interface Serial0 Is this interface in use no yes Configure IP on this interface no yes Co...

Page 89: ... this interface 172 16 72 9 Configuring interface Async7 IPX network number A Default client IP address for this interface 172 16 72 10 Configuring interface Async8 IPX network number B Default client IP address for this interface 172 16 72 11 Configuring interface Async9 IPX network number C Default client IP address for this interface 172 16 72 12 Configuring interface Async10 IPX network number...

Page 90: ...57600 flowcontrol hardware modem inout arap network 20 ARA Dialins line 1 16 arap enable autoselect Turn off IPX to prevent network conflicts interface Ethernet0 no ipx network interface Serial0 no ipx network interface Serial1 no ipx network interface Ethernet0 ip address 172 16 72 2 255 255 255 0 appletalk cable range 1 1 1 204 appletalk zone Sales ipx network 1 no mop enabled interface Serial0 ...

Page 91: ...p address 172 16 72 6 async mode interactive Interface Async4 ipx network 7 ip unnumbered Ethernet0 async default ip address 172 16 72 7 async mode interactive async dynamic address Interface Async5 ipx network 8 ip unnumbered Ethernet0 async default ip address 172 16 72 8 async mode interactive Interface Async6 ipx network 9 ip unnumbered Ethernet0 async default ip address 172 16 72 9 async mode ...

Page 92: ...ace Async12 ipx network F ip unnumbered Ethernet0 async default ip address 172 16 72 15 async mode interactive Interface Async13 ipx network 10 ip unnumbered Ethernet0 async default ip address 172 16 72 16 async mode interactive Interface Async14 ipx network 11 ip unnumbered Ethernet0 async default ip address 172 16 72 17 async mode interactive Interface Async15 ipx network 12 ip unnumbered Ethern...

Page 93: ...rver after z You issued an erase startup config command thereby deleting the startup configuration file z You have bit 6 ignore NVRAM configuration set in the config uration register z Your startup configuration has been corrupted z You configured the router to boot from a network server the last four bits of the configuration register are not equal to 0 or 1 and there is no Flash or no valid imag...

Page 94: ...face parameters and Serial0 interface parameters Configuring interface Ethernet0 Is this interface in use yes Configure IP on this interface yes IP address for this interface 192 195 78 50 Number of bits in subnet field 0 5 Class C network is 192 195 78 0 5 subnet bits mask is 255 255 255 248 Configuring interface Serial0 Is this interface in use yes Configure IP on this interface yes IP address f...

Page 95: ...set up to a remote TCP IP host If your router does not have a configuration setup file and you are not using AutoInstall the router will automatically start the setup com mand facility An interactive dialog called the System Configuration Dialog appears on the console screen This dialog helps you navigat through the configuration process by prompting you for the configura tion information necessar...

Page 96: ...ce NVRAM invalid possibly due to write erase F3 5797928 162396 258800 at 0x3000060 Restricted Rights Legend Use duplication or disclosure by the Government is subject to restrictions as set forth in subparagraph c of the Commercial Computer Software Restricted Rights clause at FAR sec 52 227 19 and subparagraph c 1 ii of the Right in Technical Data and Computer Software clause at DFARS sec 252 227...

Page 97: ... valid configuration Interface IP Address OK Method Status Protocol Ethernet0 unassigned NO not set up down BRI0 unassigned NO not set up up Serial0 unassigned NO not set down down Serial1 unassigned NO not set down down 5 Configure the global parameters Choose which protocols to sup port on the Ethernet interface For IP installations you can press Enter to accept the default values in brackets fo...

Page 98: ...Enter to accept Simple Network Management Protocol SNMP management or type no to refuse it Configure SNMP Network Management yes no 9 9 9 Configure the appropriate protocols for your router Configure Vines no Configure LAT no Configure AppleTalk no yes Multizone networks no yes Configure DECnet no Configure IP yes Configure IGRP routing yes Your IGRP autonomous system number 1 15 Configure CLNS no...

Page 99: ...pe basic 1tr6 German 1TR6 ISDN switches basic nwnet3 Norwegian NET3 ISDN switches phase 1 basic net3 NET3 ISDN switches UK and others vn2 French VN2 ISDN switches vn3 French VN3 ISDN switches Japan ntt Japanese NTT ISDN switches North America basic 5ess AT T basic rate switches basic dms100 NT DMS 100 basic rate switches basic ni1 National ISDN 1 switches New Zealand basic nznet3 New Zealand NET3 ...

Page 100: ...AI2524 Router Card User s Manual Page 6 6 August 1997 2524UM ...

Page 101: ... from ROM monitor so you can successfully boot the router when typical startup processes malfunction z System images contain the system software z Microcode images contain microcode to be downloaded to various hardware devices z Configuration files contain commands entered to customize th function of the Cisco IOS software To benefit most from these instructions your router must contain minimal co...

Page 102: ...ext section Note The organization of tasks assumes you have a minimal configuration that you want to modify The tasks in the first three sections are typical for all routers Perform the remaining tasks as needed for your routing environment z Retrieve System Images and Configuration Files z Perform General Startup Tasks z Store System Images and Configuration Files z Perform Startup Tasks z Manual...

Page 103: ...Copy Configuration Files from a Network Server to the Router z Change the Buffer Size for Loading Configuration Files z Verify the Image in Flash Memory z Display System Image and Configuration Information z Reexecute the Configuration Commands in Startup Configuration z Clear the Configuration Information Copy System Images from a Network Server to Flash Memory You can copy system images from a T...

Page 104: ... existing Flash memory before writing to it when there is space available to do so If there is no free Flash memory available or if the Flash memory has never been written to you must run the erase routine before copying new files The system will inform you of these conditions and prompt you for a response The file id argument of the copy tftp file id command specifies a device and filename as the...

Page 105: ...rm Erasing flash EPROMs bank 0 Zeroing bank zzzzzzzzzzzzzzzz Verify zeroed vvvvvvvvvvvvvvvv Erasing bank eeeeeeeeeeeeeeee Erasing flash EPROMs bank 1 Zeroing bank zzzzzzzzzzzzzzzz Verify zeroed vvvvvvvvvvvvvvvv Erasing bank eeeeeeeeeeeeeeee Erasing flash EPROMs bank 2 Zeroing bank zzzzzzzzzzzzzzzz Verify zeroed vvvvvvvvvvvvvvvv Erasing bank eeeeeeeeeeeeeeee Erasing flash EPROMs bank 3 Zeroing bank...

Page 106: ...08 1 111 OK 1906676 2287500 bytes Verifying via checksum vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv vvvvvvvvvvvvvvvvvvvvvvvvvvvvvv Flash verification successful Length 1902192 checksum 0x12AD The exclamation point indicates that the copy process is taking place Each exclamatio...

Page 107: ... Flash verification successful Length 1204637 checksum 0x95D The series of pound signs indicates that each Flash device is being cleared and initialized one per device Different platforms use differ ent methods to indicate that Flash is clearing The exclamation point indicates that the copy process is taking place Each exclamation point indicates that ten packets have been transferred successfully...

Page 108: ... router com plete these tasks from EXEC mode 1 Copy a file from a TFTP server to the router copy tftp running config startup config 2 When prompted enter the server IP address or domain name ip address name 3 If prompted enter the filename of the server system image filename Change the Buffer Size for Loading Configuration Files The buffer that holds the configuration commands is generally the siz...

Page 109: ...n stall the system software image on the server Note If the checksum value does not match the value in the README file do not reboot the router Instead issue the copy command and compare the checksums again If the checksum is repeatedly wrong copy the original system software image back into Flash memory before you reboot the router from Flash memory If you have a corrupted image in Flash memory a...

Page 110: ...up config 6 List the system software release version configuration register setting and so on show version You can also use th o command in ROM monitor mode to list th configuration register settings on some models The Flash memory content listing does not include the checksum of in dividual files To recompute and verify the image checksum after th image is copied into Flash memory type the follow...

Page 111: ... EXEC mode configure memory Clear the Configuration Information To clear the contents of your startup configuration type this command in EXEC mode erase startup config If you try to erase or delete the configuration file specified by the CONFIG_FILE or BOOTLDR environment variable the system prompts you to confirm the deletion Also if you try to erase or delete the last valid system image specifie...

Page 112: ...oftware responds with this prompt by asking you to specify the terminal or memory or a file stored on a network server network as the source of configuration commands Configuring from terminal memory or network terminal These methods are described in these sections z Configure the Cisco IOS software from the Terminal z Configure the Cisco IOS software from Memory z Configure the Cisco IOS software...

Page 113: ...The hostname command changes the router name from router1 to router2 By pressing Ctrl Z the user quits configuration mode Fi nally the copy running config startup config com mand saves the current configuration to the startup configuration Router1 configure terminal Router1 config The following command provides the router host name Router1 config hostname router2 Z Router2 copy running config star...

Page 114: ... and modifying a config uration file stored on one of your network servers 1 Enter configuration mode with the network option copy tftp running config 2 At the system prompt select a network or host configuration file The network configuration file contains commands that apply to all network servers and terminal servers on the network The host configuration file contains commands that apply to one...

Page 115: ...uration type this command in EXEC mode copy tftp startup config Modify the Configuration Register Boot Field The configuration register boot field determines whether the router loads an operating system image and if so where it obtains this sys tem image The next sections describe the process for using the con figuration register boot field your process for setting this field and the tasks you mus...

Page 116: ... the configuration register and default filename Setting the Boot Field You must correctly set the configuration register boot field to ensure that your router loads the operating system image as you intend To set the boot field 1 Obtain the current configuration register setting This setting is hexadecimal value 2 Modify the current configuration register setting to reflect the way you want to lo...

Page 117: ...e selecting the terminal option configure terminal 3 Modify the existing configuration register setting to reflect the way in which you want to load a system image config register value 4 To exit configuration mode press Ctrl Z 5 Reboot the router to make your changes take effect reload Use the show version EXEC command to display the current con figuration register setting In ROM monitor mode use...

Page 118: ...r1 config config register 0xF Z Router1 reload Specify the Startup Configuration File Configuration files can be stored on network servers You can config ure the router to automatically request and receive two configuration files from the network server at startup z Network configuration fil z Host configuration file The server first attempts to load the network configuration file This file contai...

Page 119: ...le to your startup configuration On most platforms this step saves the configuration to NVRAM copy running config startup config For Step 2 if you do not specify a network configuration filename th Cisco IOS software uses the default filename network confg If you omit the tftp keyword the software assumes that you are using TFTP to transfer the file and that the server whose IP address you specify...

Page 120: ...the configuration file to your startup configuration This step saves the configuration to NVRAM copy running config startup config 6 Reset the router with the new configuration information reload You can specify more than one host configuration file The Cisco IOS software tries them in order until it loads one successfully This proce dure can be useful for keeping files with different configuratio...

Page 121: ...twork server You can use these network server copies of system images and configuration files as backup copies Store System Images and Configuration Files Task List To store system images and configuration files z Copy System Images from Flash Memory to a Network Server z Copy Configuration Files from the Router to a Network Server Copy System Images from Flash Memory to a Network Server You can c...

Page 122: ...42 89BD 0x40000 INTEL 28F020 1 U44 89BD 0x40000 INTEL 28F020 2 U46 89BD 0x40000 INTEL 28F020 3 U48 89BD 0x40000 INTEL 28F020 4 U41 89BD 0x40000 INTEL 28F020 5 U43 89BD 0x40000 INTEL 28F020 6 U45 89BD 0x40000 INTEL 28F020 7 U47 89BD 0x40000 INTEL 28F020 security jumper 12V is installed flash memory is programmable file offset length name 0 0x40 1204637 xk09140z 903848 2097152 bytes free Router copy...

Page 123: ...wing you to later restore the original Usually the configuration file that you copy to must already exist on the TFTP server and be globally writable before the TFTP server al lows you to write to it To store configuration information on a TFTP network server com plete these tasks in the EXEC mode 1 Specify that the running or startup configuration file be stored on a network server copy running c...

Page 124: ... Flash bank is supported on low end systems that have at least two banks of Flash memory including systems that support a single SIMM that has two banks of Flash memory Benefits Partitioning Flash memory provides these benefits z For any system partitioning rather than having one logical Flash memory device provides a cleaner way of managing different files in Flash memory especially if the Flash ...

Page 125: ...A relocatable imageis an image that contains special relocation information that allows z The image to relocate itself whenever it is loaded into RAM fo execution z A download program with appropriate support to relocate the im age before it is stored in Flash memory so the image can run in place in Flash memory regardless of where in Flash memory it is stored Run from Flash systems formerly ran n...

Page 126: ...stributed on floppy diskettes might have different naming conventions For backward compatibility the relocatable images are linked to exe cute as the first file in the first Flash memory bank This makes the im ages similar to previous Flash memory images Thus if you download a relocatable image into a nonrelocatable image system the image runs correctly from Flash memory Dual Flash Bank Configurat...

Page 127: ... you execute these tasks indicate the method by which the file can be downloaded into each partition The possible methods are If the image can be downloaded into more than one partition you ar prompted for the partition number Enter any of these commands at th partition number prompt to obtain help None No known way to copy into the parti tion RXBOOT Manual You must manually reload to the rxboot i...

Page 128: ...ous ways an image might be downloaded and the corresponding results of booting from Flash memory Method of Downloading Result of Booting from Flash The image was downloaded as the first file by a nonrelocat able image The image will execute in place from Flash memory like a run from Flash image The image was downloaded not as the first file by a nonre locatable image The nonrelocatable image will ...

Page 129: ...ame The result of booting a relocatable image from Flash memory depends on where and how the image was downloaded into Flash memory Configure a Flash Partition as a TFTP Serve To configure a Flash partition as a TFTP server perform one of these tasks in global configuration mode z Specify a file tftp server flash filename z Specify a file in the first partition of Flash tftp server flash filename ...

Page 130: ...om the Flash EPROM rather than from RAM This method re duces memory cost A run from Flash system requires enough Flash EPROM to hold the image and enough main system RAM to hold the routing tables and data structures The system does not need the same amount of main system RAM as a run from RAM system because the full image does not reside in RAM The AI2524 is a Run from Flash system Flash load hel...

Page 131: ...s executing an image For information about how to partition multiple banks of Flash mem ory so your system can hold two different images refer to Partition Flash Memory Using Dual Flash Bank Flash Load Helper Configuration Task List Perform these tasks to use and monitor Flash load helper z Download a File Using Flash Load Helper z Monitor Flash Load Helper Download a File Using Flash Load Helper ...

Page 132: ... and then terminate the current system image to use the ROM based image for the copy Router functionality will not be available during that time If you are logged in via telnet this connection will terminate Users with console access can see the results of the copy operation If terminals other than the one on which this command is executed are active this message appears There are active users log...

Page 133: ...e confirm y If the file is not a valid image for the system a warning appears and the system requests a separate confirmation Copy abc igs kf 914 from TFTP server as abc igs kf 914 into Flash WITH erase y SYS 5 RELOAD Reload requested FLH rxboot igs kf 914r from 131 108 1 111 to flash If you do not erase Flash memory and there is no file duplication th dialog continues Erase flash device before wr...

Page 134: ...en to Flash memory the retry does not erase Flash memory unless you specified an erase operation Th partly written file is marked as deleted and a new file is opened with the same name If Flash memory runs out of free space in this process the copy operation terminates After Flash load helper finishes copying whether or not the copy op eration is successful it automatically attempts an automatic o...

Page 135: ...he download and is particularly useful if the download fails Manually Load a System Image from ROM Monitor If your router does not find a valid system image or if its configuration file is corrupted at startup and if the configuration register is set to enter ROM monitor mode the system enters ROM monitor mode From this mode you can manually load a system image from Flash memory from a network ser...

Page 136: ...his example the boot flash command is used with the filename gs7 k the name of the file that is loaded boot flash gs7 k F3 1858656 45204 166896 at 0x1000 Booting gs7 k from flash memory RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR OK 1903912 13765...

Page 137: ...from ROM To manually boot the router from ROM complete these steps in EXEC mode 1 Restart the router reload 2 Press Break during the first 60 seconds of system startup 3 Manually boot the router from ROM boot In this example a router is manually booted from ROM boot Use the System Image Instead of Reloading To return to EXEC mode from the ROM monitor to use the system image instead of reloading ty...

Page 138: ...AI2524 Router Card User s Manual Page 7 38 August 1997 2524UM ...

Page 139: ... OSPF based routers or access servers can be configured with all default parameter values no authentication and interfaces assigned to areas If you plan to custom ize your environment ensure coordinated configurations of all routers To configure OSPF complete these tasks You must enable OSPF the other tasks are optional but might be required for your application z Enable OSPF z Configure OSPF Inte...

Page 140: ...change these parameters for con sistency If you do configure any of these parameters be sure the con figurations for all routers on your network have compatible values In interface configuration mode specify any of these interface param eters as needed for your network 1 Explicitly specify the cost of sending a packet on an OSPF inter face ip ospf cost cost 2 Specify the number of seconds between ...

Page 141: ...f authentication key key 8 Enable OSPF MD5 authentication ip ospf message digest key key id md5 key Configure OSPF over Different Physical Networks OSPF classifies different media into three types of networks by de fault z Broadcast networks Ethernet Token Ring FDDI z Nonbroadcast multi access networks SMDS Frame Relay X 25 z Point to point networks HDLC PPP Configure your network as either a broa...

Page 142: ...igure OSPF Area Parameters OSPF software allows you to configure several area parameters Thes area parameters shown in the following list include enabling authen tication defining stub areas and assigning specific costs to the default summary route Authentication allows password based protection against unauthorized access to an area Stub areas are areas into which information on external routes i...

Page 143: ...dministration if you are an Internet service provider ISP or a network administrator that must connect a central site using OSPF to a remote site that is using a different routing proto col Prior to NSSA the connection between the corporate siteborder router and the remote router could not be run as OSPF stub area because routes for the remote site could not be redistributed into stub area A simpl...

Page 144: ...In OSPF an ABR will advertise networks in one area into another area If the network numbers in an area are assigned sequentially you can configure the ABR to advertise a summary route that covers all the individual networks within the area that fall into the specified range To specify an address range type this command in router configura tion mode area area id range address mask Configure Route S...

Page 145: ...autonomous system boundary router to generate a default route into an OSPF routing domain Whenever you specifically configure redistribution of routes into an OSPF routing domain th router automatically becomes an autonomous system boundary router However an autonomous system boundary router does not by default generate a default route into the OSPF routing domain To force the autonomous system bo...

Page 146: ...guration mode 1 Create a loopback interface which places you in interface config uration mode interface loopback 0 2 Assign an IP address to this interface ip address address mask Disable Default OSPF Metric Calculation Based on Bandwidth OSPF calculates the OSPF metric for an interface according to the bandwidth of the interface To disable this feature type this command in router configuration mo...

Page 147: ...re supports RFC 1793 ex tending OSPF to Support Demand Circuits With this feature periodic hellos are suppressed and the periodic re freshes of LSAs are not flooded over the demand circuit To configure OSPF for on demand circuits perform these tasks 1 Enable OSPF operation router ospf process id 2 Configure OSPF on an on demand circuit ip ospf demand circuit If the router is part of a point to poi...

Page 148: ...means that OSPF can import routes learned via IGRP RIP and IS IS OSPF routes can also be exported into IGRP RIP and IS IS At the interdomain level OSPF can import routes learned via EGP and BGP OSPF routes can be exported into EGP and BGP Authentication Simple and MD5 authentication among neighboring routers within an area is sup ported Routing Interface parameters Configurable parameters supporte...

Page 149: ...oute from the routing table IGRP uses flash update and poison reverse updates to speed up th convergence of the routing algorithm Flash updates are sent soone than the standard periodic update for notifying other routers of a metric change Poison reverse updates are intended to defeat larger routing loops caused by increases in routing metrics The poison reverse up dates are sent to remove a route...

Page 150: ... routing updates to reach point to point or nonbroadcast networks you must configure the Cisco IOS software to permit this exchange of rout ing information To permit information exchange define a neighboring router by typ ing this command in router configuration mode neighbor ip address To control the set of interfaces with which to exchange routing up dates you can disable the sending of routing ...

Page 151: ...s disallowed by defining the variance associated with a particular path variance multiplier Note By using the variance feature the Cisco IOS software can balance traffic across all feasible paths and can immediately converge to a new path if one of the paths fails Control Traffic Distribution By default if IGRP or Enhanced IGRP have multiple routes of un equal cost to the same destination the Cisc...

Page 152: ...ost desirable path to destination Disable Holddown When the Cisco IOS software learns that a network is at a greater dis tance than was previously known or it learns the network is down th route to that network is placed in holddown During the holddown pe riod the route is advertised but incoming advertisements about that network from any router other than the one that originally advertised the ne...

Page 153: ...utes are routes to networks within an autonomous system The Cisco IOS software derives system routes from directly connected network interfaces and system route information provided by other IGRP speaking routers or access servers System routes do not include subnet information Exterior routes are routes to networks outside the autonomous system that are considered when identifying a gateway of la...

Page 154: ...it will not be advertised in any RIP update RIP Configuration Task List To configure RIP complete the tasks outlined in the nest sections You must enable RIP The remaining tasks are optional z Enable RIP z Allow Point to Point Updates for RI z Specify a RIP Version z Enable RIP Authentication z Disable Route Summarization z Run IGRP and RIP Concurrently z Disable the Validation of Source IP Addres...

Page 155: ...P Version 2 packets type this command in router configuration mode version 1 2 The preceding task controls the default behavior of RIP You can over ride that behavior by configuring a particular interface to behave dif ferently To control which RIP version an interface sends perform one of these tasks in interface configuration mode z Configure an interface to send only RIP Ver sion1 packets ip ri...

Page 156: ...ckets because the unencrypted authentication key is sent in every RIP Versio n2 packet Use plain text authentication when security is not an issue for example to ensure that misconfigured hosts do not participate in routing To configure RIP authentication perform these tasks in interface con figuration mode 1 Enable RIP authentication ip rip authentication key chain name of chain 2 Configure the i...

Page 157: ...are discards the routing update Consider disabling this feature if you have a router that is off network and you want to receive its updates Disabling this feature is not rec ommended under normal circumstances To disable the default func tion that validates the source IP addresses of incoming routing updates perform this task in router configuration mode z Disable the validation of the source IP ...

Page 158: ...is command in global configuration mode route map map tag permit deny sequence number z By default the redistribution of default information between IP Enhanced IGRP processes is enabled To disable the redistribu tion type this command in router configuration mode no default information in out ...

Page 159: ...ng processes associate addresses with the routing processes and customize the rout ing processes for your particular network You must perform some combination of the tasks listed here to config ure the ISO CLNS protocol z Understand Addresses z Understand Routing Processes z Configure ISO IGRP Dynamic Routing z Configure IS IS Dynamic Routing z Configure CLNS Static Routing z Configure Miscellaneo...

Page 160: ...to the address constraints defined in the ISO standard for IS IS ISO 10589 An NSAP address consists of these two major fields as shown inFig ure 9 1 z The initial domain p art IDP is made up of 1 byte authority and format identifier AFI and a variable length initial domai nidentifier IDI The length of the IDI and the encoding format for the domai nspecific part DSP are based on the value of the AF...

Page 161: ...IGRP NSAP address includes three separate fields for routing the domain area and system ID An IS IS address includes two fields a single contin uous area field comprising the doma inand area fields and the system ID ISO IGRP NSAP Address The ISO IGRP NSAP address is divided into three parts a domai npart an area address and a system ID D omainrouting is per formed on the doma inpart of the address...

Page 162: ...lustrates the ISO IGRP NSAP addressing structure The maximum address size is 20 bytes Figure 9 3 ISO IGRP NSAP Addressing Structure IS IS NSAP Address An IS IS NSAP address is divided into two parts an area address and a system ID Level 2 routing routing between areas uses the area ad dress Leve l1 routing routing within an area uses the system ID ad dress The NSAP address is laid out as z The are...

Page 163: ...l but the N selector S field in the DSP z No two nodes residing within the same area can have addresses in which the system ID fields are the same z ISO IGRP requires at least 10 bytes of length 1 byte for domain 2 bytes for area 6 bytes for system ID and 1 byte for N selector z ISO IGRP and IS IS should not be configured for the same area Do not specify an NSAP address where all bytes up to but n...

Page 164: ...nnection Profile GO SIP Draft Version 2 0 April 1989 for more information Domain Area System ID S 47 0005 80 ffff00 0000 ffff 0004 0000 0c00 62e6 00 AFI IDI DFI AAI Resv RD Routing Table Example You enter static routes by specifying NSAP prefix and next hop NET pairs by using the clns route command The NSAP prefix can be any portion of the NSAP address NETs are similar in function to NSAP addresse...

Page 165: ... be used for the internal boundaries of NSAP ad dresses and NETs Entry NSAP Address Prefix Next Hop NET 1 47 0005 000c 0001 47 0005 000c 0001 0000 1234 00 2 47 0004 47 0005 000c 0002 0000 0231 00 3 47 0005 0003 47 0005 000c 0001 0000 1234 00 4 47 0005 000c 47 0005 000c 0004 0000 0011 00 5 47 0005 47 0005 000c 0002 0000 0231 00 Datagram Destination NSAP Address Table Entry Number Used 47 0005 000c ...

Page 166: ...on You can route ISO CLNS on some interfaces and transparently bridge it on other interfaces simultaneously To do this you must enable con current routing and bridging by using th bridge crb command Dynamic Routing Cisco supports these two dynamic routing protocols for ISO CLNP networks z ISO IGRP z IS IS When dynamically routing you can choose either ISO IGRP or IS IS or you can enable both routi...

Page 167: ...ut you are not running an interd o mainrouting protocol you must use static routes z If you must interoperate with another vendor s equipment that does not support any of the dynamic routing protocols that Cisco supports you must use static routing z For operation over X 25 Frame Relay or SMDS networks static routing is generally preferable Warning An interface that is configured for static routin...

Page 168: ...Redistribute routing information from one routing process to an other refer to Redistribute Routing Information z Configure administrative distances refer to Specify Preferred Routes Enable ISO IGRP To configure ISO IGRP dynamic routing you must enable the ISO IGRP routing process identify the address for the router and specify the interfaces that are to route ISO IGRP Optionally you can set a lev...

Page 169: ...only L evel2 routing updates on certain interfaces Level 1 information is not passed on the interfaces for which the Level 2 option is set In interface configuration mode enable ISO IGRP on specified inter faces and set the level type for routing updates clns router iso igrp tag level 2 Example Dynamic Routing within the Same Area Figure 9 5 and the example configuration illustrate how to configur...

Page 170: ...outer iso igrp castor 4 Specify iso igrp routing using the previously specified tag castor interface ethernet 1 clns router iso igrp castor 5 Specify iso igrp routing using the previously specified tag castor interface serial 0 clns router iso igrp castor Example Dynamic Routing in More Than One Area Figure 9 6 and the example configuration illustrate how to configure router named Router A that ex...

Page 171: ... ethernet 0 clns router iso igrp orion 4 Specify iso igrp routing using the previously specified tag orion interface ethernet 1 clns router iso igrp orion Example Dynamic Routing in Overlapping Areas This example illustrates how to configure a router with overlapping ar eas 1 Define a tag capricorn for the routing process router iso igrp capricorn 2 Configure the NET for the process in area 3 doma...

Page 172: ...ng on interface ethernet 0 using the tag cap ricorn interface ethernet 0 clns router iso igrp capricorn 6 Specify iso igrp routing on interface ethernet 1 using the tags cap ricorn and cancer interface ethernet 1 clns router iso igrp capricorn clns router iso igrp cancer 7 Specify iso igrp routing on interface ethernet 2 using the tag can cer interface ethernet 2 clns router iso igrp cancer ...

Page 173: ...ently connected Figure 9 7 CLNS Dynamic Interdomain R outing Router Chicago This configuration shows how to configure Router Chicago for dy namic interdomai nrouting 1 Define a tag A for the routing process router iso igrp A 2 Configure the NET for the process in area 2 domai n47 0007 0200 net 47 0007 0200 0002 0102 0104 0506 00 3 Redistribute iso igrp routing information througho u t domainA redi...

Page 174: ...or the process in area 3 domai n47 0006 0200 net 47 0006 0200 0003 0102 0104 0506 00 6 Redistribute iso igrp routing information througho u t domainB redistribute iso igrp A 7 Specify iso igrp routing with the tag A interface ethernet 0 clns router iso igrp A 8 Specify iso igrp routing with the tag B interface serial 0 clns router iso igrp B ...

Page 175: ...e for domain A into domai nB Domai nB injects this prefix route and a prefix route for doma inB into do mainC You also can configure a border router between d o mainA and domai nC Configure ISO IGRP Parameters Cisco s ISO IGRP implementation allows you to customize certain ISO IGRP parameters z Adjust ISO IGRP Metrics z Adjust ISO IGRP Timers z Enable or Disable Split Horizon Adjust ISO IGRP Metri...

Page 176: ...th and delay commands to change the values of the ISO IGRP metrics also changes the val ues of IP IGRP metrics Adjust ISO IGRP Timers The basic timing parameters for ISO IGRP are adjustable Because the ISO IGRP routing protocol executes a distributed asynchronous rout ing algorithm it is important that these timers be the same for all rout ers in the network In router configuration mode adjust ISO...

Page 177: ... IS z Assign Multiple Area Addresses to IS IS Areas z Configure IS IS Parameters z Configure IS IS Interface Parameters In addition you can also configure these miscellaneous features z Filter routing information refer to Create Packet Forwarding Fil ters and Establish Adjacencies z Redistribute routing information from one routing process to an other refer to Redistribute Routing Information z Co...

Page 178: ...IS IS multiple NETs per router are allowed with a maximum of three However only one ISIS process is al lowed whether you run it in integrated mode ISO CLNS only or IP only Examples IS IS Routing Configuration These examples illustrate the basic syntax and configuration command sequence for IS IS routing Level1 and Level2 Routing This example illustrates using the IS IS protocol to configure a sing...

Page 179: ... only Most comment lines have been eliminated from this example to avoid redundancy router isis net 47 0004 004d 0001 0000 0c00 1111 00 interface ethernet 0 clns router isis interface ethernet 1 clns router isis interface serial 0 clns router isis 1 Configure a level 2 adjacency only for interface serial 0 isis circuit type level 2 only OSI Configuration This example illustrates an OSI configurati...

Page 180: ...l 1 adjacency isis circuit type level 1 interface ethernet 1 clns router isis area1 isis metric 2 level 2 isis circuit type level 2 only interface serial 0 clns router isis area1 isis circuit type level 1 2 6 Set the priority for serial 0 to 3 for a level 1 adjacency isis priority 3 level isis priority 1 level ISO CLNS Dynamic Route Redistribution This example illustrates route redistribution betw...

Page 181: ...es on the same router This concept is referred to as multihoming Multi homing provides a mechanism for smoothly migrating network ad dresses as z Splitting up an area Nodes within a given area can accumulate to a point that they are difficult to manage cause excessive traffic or threaten to exceed the usable address space for an area Multiple area addresses can be assigned so that you can smoothly...

Page 182: ...ea address the set of area addresses of the two routers are merged The merged set cannot contain more than three addresses If there are more than three the three addresses with the lowest numerical values are kept and all others are dropped Beginning in global configuration mode configure multiple area ad dresses in IS IS areas 1 Enable IS IS routing and enter router configuration mode router isis...

Page 183: ... 39 0001 0000 0c00 1111 00 router isis net NAME IS IS Multihoming This example illustrates the assignment of three separate area ad dresses for a single router using net commands Traffic received that includes an area address of 47 0004 004d 0001 47 0004 004d 0002 or 47 0004 004d 0003 and that has the same system ID is forwarded to this router router isis eng area1 IS IS Area System ID S net 47 00...

Page 184: ...nfiguration Figure 9 8 ISO IGRP Configuration router iso igrp test proc1 001F in this example net is the hex value for area 31 net 49 0001 001F aaaa aaaa aaaa 00 router iso igrp test proc2 0028 in this example net is the hex value for area 40 net 49 0001 0028 aaaa aaaa aaaa 00 interface ethernet 1 clns router iso igrp test proc1 interface serial 2 clns router iso igrp test proc1 interface ethernet...

Page 185: ...so igrp test proc1 interface ethernet 2 clns router IS IS test proc2 To allow CLNS packets only to blindly pass through an interface with out routing updates you could use a simple configuration This exam ple shows such a configuration clns routing interface serial 2 This permits serial 2 to pass CLNS packets without having CLNS rout ing turned on clns enable Configure IS IS Parameters Cisco s IS ...

Page 186: ...area router LSP CSNP and PSNP In router configuration mode configure area or domain passwords 1 Configure the area authentication password area password password 2 Configure the routin g domainauthentication password domain password password Ignore IS IS Link State Packet LSP Errors You can configure the router to ignore IS IS LSPs that are received with internal checksum errors rather than purgin...

Page 187: ...imum transmission unit MTU size should be sufficient However if the MTU of a link is low ered to less than 1500 bytes the LSP MTU must be lowered accord ingly on each router in the network If this is not done routing will become unpredictable The MTU size must be less than or equal to the smallest MTU of any link in the network The default size is 1497 bytes Caution The CLNS MTU of a link which is...

Page 188: ...Link State Metrics You can configure a cost for a specified interface The default metric is used as a value for the IS IS metric This is the value assigned when there is no quality of service QOS routing performed The only met ric that is supported by the Cisco IOS software and that you can con figure is the default metric which you can configure for L evel1 or Level 2 routing or both In interface...

Page 189: ...ecause there is only a single type of hello packet sent on serial links the hello packet is independent of Lev el1 or Lev el2 Specify an optional level for X 25 SMDS and Frame Relay multiaccess networks Use the isis hello multiplier command in circumstances where hello packets are lost frequently and IS IS adjacencies are fail ing unnecessarily You can raise the hello multiplier and lower th hello...

Page 190: ...gy database In interface configuration mode configure the priority to use for des ignated router election isis priority value level 1 level 2 Specify the Interface Circuit Type It is normally not necessary to configure this feature because the IS IS protocol automatically determines area boundaries and keeps L evel1 and Leve l2 routing separate However you can specify the adjacency levels on a spe...

Page 191: ... dy namic routing To configure a static route complete the tasks in the following sec tions Only enabling static routes is required the remaining tasks may be necessary for certain applications but are otherwise optional z Enable Static Routes z Configure Variations of the Static Route z Map NSAP Addresses to Media Addresses Enable Static Routes To configure static routing you must enable CLNS on ...

Page 192: ...ddresses on each interface This is useful if you are doing static routing and need to control the source NET used by the router on each interface In interface configuration mode configure CLNS on an interface 1 Enable ISO CLNS for each interface clns enable 2 Optionally assign an NSAP address to a specific interface clns net nsap address name Examples Basic Static Routing Configuring FDDI Ethernet...

Page 193: ... route 47 0004 004d 0099 serial 0 clns route 47 0005 serial 0 Example 2 This is a more complete example of CLNS static routing on a system with two Ethernet interfaces After configuring routing you define NET and enable CLNS on the Ethernet 0 and Ethernet 1 interfaces You must then define an ES neighbor and define a staticroute with the clns route global configuration command as shown In this situ...

Page 194: ...ass ISO CLNS packet traffic to end systems without routing them interface ethernet 1 clns enable 5 Specify end system for static routing clns es neighbor bar 0000 0C00 62e7 6 Create an interface static route to bar for packets with the this NSAP address clns route 47 0004 000c bar Example Static Intradomain Routing Figure 9 10 and the configurations demonstrate how to use static rout ing inside of...

Page 195: ... in place of this NSAP clns host chicago 47 0004 0050 0001 0000 0c00 243b 00 2 Define the name detroit to be used in place of this NSAP clns host detroit 47 0004 0050 0002 0000 0c00 1e12 00 3 Enable ISO IGRP routing of CLNS packets router iso igrp sales 4 Configure net chicago as shown in steps 1 3 net chicago 5 Specify iso igrp routing using the specified tag sales interface ethernet 0 clns route...

Page 196: ...outer in Detroit Routing updates will be sent across this link This implies that the virtual circuit could be up contin uously If the Chicago office should grow to contain multiple routers it would be appropriate for each of those routers to know how to get to Detroit Add the following command to redistribute information between rout ers in Chicago router iso igrp sales redistribute static Example...

Page 197: ...ting 1 Define tag orion for net 47 0006 0200 0100 0102 0304 0506 00 router iso igrp orion 2 Configure this network entity title for the routing process net 47 0006 0200 0100 0102 0304 0506 00 3 Define the tag bar to be used in place of Router B s NSAP clns host bar 47 0007 0200 0200 1112 1314 1516 00 4 Specify iso igrp routing using the specified tag orion interface ethernet 0 clns router iso igrp...

Page 198: ...B for static interdomainrouting router iso igrp pleiades 1 Configure the network entity title for the routing process net 47 0007 0200 0200 1112 1314 1516 00 2 Define the name sid to be used in place of Router A s NSAP clns host sid 47 0006 0200 0100 0001 0102 0304 0506 00 3 Specify iso igrp routing using the specified tag pleiades interface ethernet 0 clns router iso igrp pleiades 4 Pass ISO CLNS...

Page 199: ...lns route default nsap prefix type number Map NSAP Addresses to Media Addresses Conceptually each ES lives in one area It discovers the nearest IS by listening to ES IS packets Each ES must be able to communicate di rectly with an IS in its area When an ES wants to communicate with another ES it sends the packet to any IS on the same medium The IS looks up the destination NSAP address and forwards...

Page 200: ...ISO IGRP or IS IS the ES IS routing software automatically turns on ES IS for those interfaces In interface configuration mode enter static mapping information be tween the NSAP protocol addresses and the subnetwork point of at tachment SNPA addresses media for ESs or ISs as needed z Configure all end systems that will be used when you manually specify the NSAP to SNPA mapping clns es neighbor nsa...

Page 201: ...ddress map ping clns host name nsap The assigned NSAP name is displayed where applicable inshow and debug EXEC commands However some effects and requirements are associated with using names to represent NETs and NSAP ad dresses The clns host global configuration command is generated after all other CLNS commands when the configuration file is parsed As a re sult you cannot edit the nonvolatile ran...

Page 202: ...the forwarding of frames through route interfaces or the establishment of adjacencies with or the application of filters to any combination of ES or IS neighbors ISO IGRP neigh bors or IS IS neighbors CLNS filter expressions are complex logical combinations of CLNS filter sets CLNS filter sets are lists of address templates against which CLNS addresses are matched Address templates are CLNS addres...

Page 203: ... 0005 clns filter set US OR NORDUNET permit 47 0023 Redistribute Routing Information In addition to running multiple routing protocols simultaneously the Cisco IOS software can redistribute information from one routing pro cess to another You can also configure the Cisco IOS software to do interdomain d ynamic routing by configuring two routing processes and two NETs thereby putting the router int...

Page 204: ... protocol and tag if applicable you want to redistribute redistribute isis tag route map map tag Warning By default static routes are redistributed into IS IS You can conditionally control the redistribution of routes between routing domains by defining route maps between the two domains Route maps allow you to use tags in routes to influence route redistri bution 3 In global configuration mode co...

Page 205: ...ccess list filter set or expression match clns address name name name z Match routes that have a next hop address matching one or more of the specified names the names can be a standard access list fil ter set or expression match clns next hop name name name z Match routes that have been advertised by routers matching one or more of the specified names the names can be a standard access list filte...

Page 206: ... into level 2 IS IS LSPs with a metric of 5 The second routes are ISO IGRP de rived CLNS prefix routes that match CLNS filter expression osifilter These are redistributed into IS IS as level 2 LSPs with a metric of 30 router isis redistribute ospf 109 route map ipmap redistribute iso igrp nsfnet route map osimap route map ipmap permit match route type external match tag 5 set metric 5 set level le...

Page 207: ... routing protocol has the lowest administrative distance The lower the value of the distance the more preferred the route By default these administrative distances are assigned z Static routes 10 z ISO IGRP routes 100 z IS IS routes 110 In router configuration mode change an administrative distance for a route distance value clns If you want an ISO IGRP prefix route to override a static route you ...

Page 208: ...times out and the adjacent node is considered unreachable A default rate has been set for hello packets and packet validity but it can be changed In global configuration mode change the defaults z Specify the rate at which ES hello and IS hello packets are sent clns configuration time seconds z Allow the sender of an ES hello or IS hello packet to specify the length of time you consider the inform...

Page 209: ...With X 25 the SNPAs are the X 25 network addresses or the X 121 addresses These are usually assigned by the X 25 network provider If you use static routing you must configure the NSAP to X 121 address mapping with th x25 map command Configuring a serial line to use CLNS over X 25 requires configuring the general X 25 information and the CLNS specific information First configure the general X 25 in...

Page 210: ...iso igrp test proc net 49 0001 aaaa aaaa aaaa 00 interface serial 1 clns router iso igrp test proc 1 Assume the host is a DTE and encapsulates x 25 encapsulation x25 2 Define the X 121 address of 31101 for serial 1 X25 address 31101 3 Set up an entry for the other side of the X 25 link Router B x25 map clns 31101 broadcast ...

Page 211: ...01 broadcast accept reverse Enhance ISO CLNS Performance Generally you do not need to change the router s default settings for CLNS packet switching but there are some modifications you can make when you decide to make changes in your network s perfor mance The following sections describe ISO CLNS parameters that you can change z Specify the MTU Size z Disable Checksums z Disable Fast Switching Th...

Page 212: ... switching of frames larger than 4472 bytes Interoperability problems might occur if CTR cards are intermixed with other Token Ring cards on the same network These problems can be mini mized by lowering the CLNS MTU sizes to be the same on all routers on the network Disable Checksums When the ISO CLNS routing software originates a CLNS packet by default it generates checksums In interface configur...

Page 213: ...the minimum interval between ERPDUs the Cisco IOS software does not send ERPDUs more frequently than one per interface per ten milliseconds In interface configuration mode transmit ERPDUs 1 Send an ERPDU when the routing software detects an error in data PDU this is enabled by default clns send erpdu 2 Set the minimum interval in milliseconds between ERPDUs clns erpdu interval milliseconds Control...

Page 214: ... clns want erpdu global configuration command has no effect on routing packets ES IS ISO IGRP and ISIS originated by the router it applies to pings and trac eroute packets Example Performance Parameters This example shows how to set ES hello packet and IS hello packet pa rameters in a simple ISO IGRP configuration as well as the MTU for a serial interface router iso igrp xavier net 49 0001 004d 00...

Page 215: ...clns neighbors z Remove dynamically derived CLNS routing information clear clns route z Invoke a diagnostic tool for testing connectivity ping clns host address z Display information about the CLNS network show clns z Display the entries in the CLNS routing cache show clns cache z Display ES neighbor entries including the associated areas show clns es neighbors type number detail z Display filter ...

Page 216: ...on about the CLNS packets this router has seen show clns traffic z Display the IS IS link state database show isis database level 1 level 2 l1 l2 detail lspid z Display the IS IS Leve l1 routing table show isis routes z Display a history of the SPF calculations for IS IS show isis spf log z Display all route maps configured or only the one specified show route map map name z Discover the paths tak...

Page 217: ...ypes of TARP PDUs z Type 1 Sent when a device has a TID for which it has no match ing NSAP Type 1 PDUs are sent to all Le vel1 IS IS and ES IS neighbors If no response is received within the specified time lim it a Type 2 PDU is sent To prevent packet looping a loop detec tion buffer is maintained on the router A Type 1 PDU is sent when you use the tarp resolve command z Type 2 Sent when a device ...

Page 218: ... Enable TARP and Configure a TARP TID TARP must be explicitly enabled before the TARP functionality be comes available and the router must have a TID assigned Also before TARP packets can be sent out on an interface each interface must have TARP enabled and the interface must be able to propagate TARP PDUs The router will use the CLNS capability to send and receive TARP PDUs If the router is confi...

Page 219: ...obal configuration mode disable origination of TARP PDUs no tarp originate z In global configuration mode disable global propagation of TARP PDUs no tarp global propagate z In interface configuration mode disable propagation of TARP PDUs on a specific interface no tarp propagate Configure Multiple NSAP Addresses A router may have more than one NSAP address When a request for an NSAP is sent Type 1...

Page 220: ...cific TID tarp resolve tid 1 2 To determine the TID the router first checks the local TID cache I there is a TID entry in the local TID cache the requested information is displayed If there is no TID entry in the local TID cache a TARP Type 5 PDU is sent out to the specified NSAP address To determine the NSAP address the router first checks the local TID cache If there is an NSAP entry in the loca...

Page 221: ...es remain in cache 1 Configure the number of seconds that the router will wait for a re sponse from a TARP Type 1 PDU tarp t1 response timer seconds 2 Configure the number of seconds that the router will wait for a re sponse from a TARP Type 2 PDU tarp t2 response timer seconds 3 Configure the number of seconds that the router will wait for a re sponse from a TARP Type 2 PDU after the default time...

Page 222: ...ote cache bit in all subsequent outgoing TARP PDUs so that the remote router does or does not update the cache tarp urc 0 1 3 Specify the N selector used to identify TARP PDUs tarp selector hex digit 4 Specify the protocol type used in outgoing TARP PDUs Only FE to indicate CLNP is supported tarp protocol hex digit Monitor and Maintain the TARP Protocol Use these EXEC commands to monitor and maint...

Page 223: ...ontents of the loop detection buffer table show tarp ldb z List all the static entries in the TID cache show tarp map z List all static TARP adjacencies show tarp static adjacencies z Display information about the entries in the TID cache show tarp tid cache z Display statistics about TARP PDUs show tarp traffic Examples TARP Configuration This section provides both basic and complex examples of T...

Page 224: ...Router D 49 0004 1234 1234 1234 00 so that Router D can receive TARP PDUs because Router C in not TARP capable A blacklist adjacency isalso created on Router A for Router B 49 0001 7777 7777 7777 00 so that Router A does not send any TARP PDUs to Router B Figure 9 13 Sample TARP Configuration clns routing tarp run tarp cache timer 300 tarp route static 49 0004 1234 1234 1234 00 tarp blacklist adja...

Page 225: ...s to configure serial port 0 Configuring interface Serial0 Is this interface in use yes 2 Determine which protocols you want on the synchronous serial interface and enter the appropriate responses Configure IP on this interface yes Configure IP unnumbered on this interface no IP address for this interface 172 16 73 1 Number of bits in subnet field 8 Class B network is 172 16 0 0 8 subnet bits mask...

Page 226: ... starting cable range 3 5 AppleTalk ending cable range 4 5 AppleTalk zone name myzone ZZ Serial AppleTalk additional zone name Configure IPX on this interface no yes IPX network number 3 B003 4 The configuration you entered now displays and you are asked if you want to use the displayed configuration If you enter no you will lose the configuration information you just entered and you can begin the...

Page 227: ...uthentication Protocol PAP on serial interfaces running PPP encapsulation By enabling PPP encapsulation on physical inter faces PPP can also be used on calls placed by dialer interfaces that use physical interfaces The current implementation of PPP supports option 3 authentication using CHAP or PAP option 4 Link Quality Monitoring and option 5 Magic Number configuration options The software always...

Page 228: ...nd net works z Enable CHAP or PAP Authentication z Enable Link Quality Monitoring LQM z Configure Automatic Detection of Encapsulation Type z Configure Compression of PPP Dat z Configure IP Address Pooling z Configure PPP Callback z Disable or Reenable Peer Neighbor Routes z Configure PPP Half Bridging z Configure Multilink PPP z Configure Virtual Private Dial up Networks z Enable PPP on VTY Lines...

Page 229: ...al interfaces When using CHAP or PAP authentication each router or access server iden tifies itself by a name This identification process prevents a route from placing another call to a router to which it is already connected and prevents unauthorized access Access control using CHAP or PAP is available on all serial interfaces that use PPP encapsulation The authentication feature reduces the risk...

Page 230: ...on re quest are accepted the Cisco IOS software sends an authentication acknowledgment After you have enabled CHAP or PAP the local router or access server requires authentication from remotedevices If theremote device does not support the enabled protocol no traffic will be passed to that de vice 1 In interface configuration mode enable PPP encapsulation encapsulation ppp 2 In interface configura...

Page 231: ... tended TACACS Use the aaa authentication ppp com mand with Authentication Authorization and Accounting AAA TACACS Example CHAP with an Encrypted Password These configuration examples enable CHAP on interface serial 0 of three devices 1 Configure Router yyy hostname yyy interface serial 0 encapsulation ppp ppp authentication chap username xxx password secretxy username zzz password secretzy 2 Conf...

Page 232: ... are calculated for both the incoming and outgoing di rections The outgoing quality is calculated by comparing the total number of packets and bytes sent to the total number of packets and bytes received by the destination node The incoming quality is calcu lated by comparing the total number of packets and bytes received to the total number of packets and bytes sent by the destination peer When L...

Page 233: ...he link which ever is first In interface configuration mode enable automatic detection of encap sulation type autodetect encapsulation encapsulation type You can specify one or more encapsulations to detect Cisco IOS soft ware currently supports automatic detection of PPP and V 120 encap sulations Configure Compression of PPP Data You can configure point to point software compression on serial int...

Page 234: ... configuration of the mechanism and per interface configuration of a specific address or pool name Peer Address Allocation A peer IP address can be allocated to an interface through several methods z Dialer map lookup This method is used only if the peer requests an IP address if no other peer IP address has been assigned and if the interface is a member of a dialer group z PPP or SLIP EXEC comman...

Page 235: ...ed in two queues The free queue contains addresses available to be as signed The used queue contains addresses that are in use Ad dresses are stored in the free queue in First In First Out FIFO order to minimize the chance the address will be reused and to al low a peer to reconnect using the same address that it used in the last connection If the address is available it is assigned if not an othe...

Page 236: ... mechanism used on router interfaces by completing these actions z Define the Global Default Mechanism z Configure Per Interface IP Address Assignment Define the Global Default Mechanism The Global Default Mechanism applies to all point to point interfaces asynchronous synchronous ISDN BRI ISDN PRI and dialer inter faces that support PPP encapsulation and that have not otherwise been configured fo...

Page 237: ... DHCP as the global default mechanism 1 Specify DHCP client proxy as the global default mechanism ip address pool dhcp proxy client 2 Optional Specify the IP address of a DHCP server for the proxy client to use ip dhcp server ip address name You can provide up to ten DHCP servers for the proxy client the router or access server to use DHCP servers provide temporary IP ad dresses Define Local Addre...

Page 238: ...olname 2 In global configuration mode define DHCP as the IP address mechanism for an interface z Specify the interface and enter interface configuration mode interface type number z Specify DHCP as the IP address mechanism on this interface peer default ip address pool dhcp 3 Beginning in global configuration mode define a specific IP ad dress to be assigned to all dial in peers on an interface z ...

Page 239: ... information to determine whether to place a re turn call If the authentication is successful the callback server discon nects and then places a return call The remote username of the return call is used to associate it with the initial call so that packets can b transmitted Both routers on a point to point link must be configured for PPP call back one must function as a callback client and one mu...

Page 240: ...ss to the host name and phone number dialer map protocol next hop address name hostname dial string 6 Enable the interface to request PPP callback for this callback map class ppp callback request 7 Optional Configure a dialer hold queue to store packets for this callback map class dialer hold queue packets timeout seconds Example PPP Callback Client The PPP callback client is configured on an ISDN...

Page 241: ...ap 5 Map the next hop address to the host name and phone number using the name of the map class established for PPP callback on this interface dialer map protocol address name hostname class classname dial string 6 Optional Configure a dialer hold queue to store packets to be transferred when the callback connection is established dialer hold queue number timeout seconds 7 Optional Configure a tim...

Page 242: ...e On the PPP callback server the dialer enable timeout functions as the timer for returning calls to the callback client Example PPP Callback Server The PPP callback server is configured on an ISDN BRI interface in router in Atlanta The callback server requires an enable timeout and map class to be defined interface BRI0 ip address 7 1 1 7 255 255 255 0 encapsulation ppp dialer callback secure dia...

Page 243: ...onnectivity to a re mote bridged Ethernet network a serial or ISDN interface can be con figured to function as a PPP half bridge The line to the remote bridge functions as a virtual Ethernet interface The router s serial or ISDN in terface functions as a node on the same Ethernet subnetwork as the re mote network The bridge sends bridge packets to the PPP half bridge which con verts them to routed...

Page 244: ...e to function as a half bridge 1 Specify the interface and enter interface configuration mode interface serial number 2 Enable PPP half bridging for one or more routed protocols ppp bridge ip ppp bridge ipx novell ether arpa sap snap 3 Provide a protocol address on the same subnetwork as the remote network ip address n n n n ipx network network Note You must enter the ppp bridge command either whe...

Page 245: ...d to work over single or multiple interfaces that are configured to support both dial on demand rotary groups and PPP encapsulation z Asynchronous serial interfaces z Basic Rate Interfaces BRIs z Primary Rate Interfaces PRIs Configure Multilink PPP on Asynchronous Interfaces Beginning in global configuration mode configure an asynchronous interface to support DDR and PPP encapsulation 1 Specify an...

Page 246: ...e bandwidth on demand by specifying the maximum load before the dialer places another call to a destination dialer load threshold load inbound outbound either 6 Enable Multilink PPP ppp multilink Configure Multilink PPP on a Single ISDN BRI Interface To enable Multilink PPP on a single Integrated Services Digital Net work ISDN BRI interface you are not required to define a dialer ro tary group sep...

Page 247: ...group group number 8 Optional Enable PPP authentication ppp authentication pap 9 Enable Multilink PPP on the dialer rotary group ppp multilink If you do not use PPP authentication procedures your telephone ser vice must pass caller ID information The load threshold number is re quired When Multilink PPP is configured and you want a multilink bundle to be connected indefinitely use the dialer idle ...

Page 248: ... pap ppp multilink Configure Multilink PPP on Multiple ISDN BRI Interfaces To enable Multilink PPP on multiple ISDN BRI interfaces set up a di aler rotary interface and configure it for Multilink PPP and then con figure the BRIs separately and add them each to the same rotary group Beginning in global configuration mode set up the dialer rotary inter face for the BRI interfaces 1 Specify the diale...

Page 249: ...ptional Enable PPP CHAP authentication ppp authentication chap 10 Enable Multilink PPP ppp multilink If you do not use PPP authentication procedures your telephone ser vice must pass caller ID information Beginning in global configuration mode configure each of the BRIs to belong to the same rotary group 1 Specify one of the BRI interfaces interface bri number 2 Specify that it does not have an in...

Page 250: ... belong to the same dialer rotary group When Multilink PPP is configured and you want a multilink bundle to be connected indefinitely use the dialer idle timeout com mand to set a very high idle timer The dialer load threshold 1 command does not keep a mul tilink bundle of n links connected indefinitely and the dialer load threshold 2 command does not keep a multilink bundle of two links connected...

Page 251: ... idle timeout 500 dialer rotary group 0 dialer load threshold 255 balanced interface BRI1 no ip address encapsulation ppp dialer idle timeout 500 dialer rotary group 0 dialer load threshold 255 balanced interface BRI2 no ip address encapsulation ppp dialer idle timeout 500 dialer rotary group 0 dialer load threshold 255 balanced interface Dialer0 ip address 99 0 0 2 255 0 0 0 encapsulation ppp dia...

Page 252: ...bytes encapsulated in L2F and forwarded over the appropriate tunnel The customer s home gateway accepts these L2F frames strips the L2F encapsulation and processes the incoming frames for the appropriate interface Note This implementation of VPDN supports PPP dial up only To configure virtual private dial up networks complete these tasks z Understand VPDNs z Beginning in global configuration mode ...

Page 253: ...nt If the user is not a VPDN client the client accesses the Internet or other contacted service 4 The tunnel endpoints the network access server and the home gateway authenticate each other before any sessions are at tempted within a tunnel 5 If no L2F tunnel exists between the network access server and the remote user s home gateway a tunnel is created Once the tunnel exists an unused slot within...

Page 254: ...way access server 1 Specify a default local IP address pool ip local pool default ip address 2 Create a virtual template interface and enter interface configura tion mode interface virtual template number 3 Identify the virtual template interface type and number on the LAN ip unnumbered ethernet 0 4 Enable PPP encapsulation on the virtual template interface encapsulation ppp 5 Enable PPP authentic...

Page 255: ... server to make outgoing L2F connections to a home gateway for VPDN 1 Enable virtual private networking vpdn enable 2 Specify the remote host that is to accept L2F connections vpdn outgoing domain name local name ip ip address Example Network Access Server Servicing Multiple Domains This example provides VDPN configurations for a single NAS and two different gateways The two gateways are presumabl...

Page 256: ...way This example provides configurations for one NAS and one Gateway that might have two parallel tunnels between them Two different do main names are associated with two different virtual interface config urations Users dialing in with domain name domain1 com will be forwarded to the home gateway and be given a virtual access interface based on vir tual template 1 Users dialing in with the domain...

Page 257: ... domain2 pool ppp authentication chap Example Using TACACS for Forwarding from the NAS This example provides configurations for an NAS and a public domain TACACS server On the NAS it is only necessary to enable AAA and to use the vpdn enable command Users with structured logins user domain com will have their do main authorized on the TACACS server and will be forwarded if there is a VPDN entry th...

Page 258: ... to a VTY session on the router In global configuration mode enable asynchronous protocol features on all the router s VTY lines vty async This task enables PPP on VTY lines on a global basis on the router To configure PPP on a per VTY basis use th translate command Monitor and Maintain MLP MMP and VPDN Virtual Interfaces To monitor and maintain virtual interfaces you can perform any of these task...

Page 259: ...r your net work The interface datagram transport and routing tasks are divided into sections based generally on how common the feature is and how often it is used z Configure Interfac z Configure Additional X 25 Interface Parameters z Configure an X 25 Datagram Transport z Configure Additional X 25 Datagram Transport Features z Configure X 25 Routing z Configure Additional X 25 Routing Features z ...

Page 260: ...or The first task is required The others might be required or op tional depending on what the router is expected to do and on the X 25 network Set the X 25 Mode A router using X 25 Level 3 encapsulation can z Act as a DTE or DCE protocol device according to the needs of your X 25 service supplier z Use the Internet Engineering Task Force IETF standard encap sulation as specified by RFC 1356 Becaus...

Page 261: ...oing only ranges define the VCNs over which a Switched Virtual Circuit SVC can be established by the placement of an X 25 call much like a telephone network es tablishes a switched voice circuit when a call is placed The rules about DCE and DTE devices initiating calls are z Only the DCE device can initiate a call in the incoming only range z Only the DTE device can initiate a call in the outgoing...

Page 262: ...t number default is 0 x25 hic circuit number 3 Set the lowest two way circuit number default is 1 x25 ltc circuit number 4 Set the highest two way circuit number default is1024 for X 25 and 4095 for CMNS x25 htc circuit number 5 Set the lowest outgoing only circuit number default is 0 x25 loc circuit number 6 Set the highest outgoing only circuit number default is 0 x25 hoc circuit number Each of ...

Page 263: ...ulo and the LAPB modulo are distinct and serve differ ent purposes LAPB modulo 128 or extended mode can be used to achieve higher throughput across the DTE or DCE interface it affects only the local point of attachment X 25 Packet Level Protocol PLP modulo 128 can be used to achieve higher end to end throughput for virtual circuits by allowing more data packets to be in transit through the X 25 ne...

Page 264: ...ntil the X 25 pro tocol restarts the packet service Set Default Window Sizes X 25 networks have a default input and output window size the preset value is 2 that is defined by your network administrator You must set the Cisco IOS software default input and output window sizes to match those of the network These defaults are the values that an SVC uses if it is set up without explicitly negotiating...

Page 265: ...However the router will negotiate lower maximum packet sizes for all SVCs so the agreed on sizes can be carried The Cisco IOS software will also refuse a PVC configuration if the resulting maximum packet sizes cannot be sup ported by the lower layer Example Typical X 25 Configuration This example shows the complete configuration for a serial interface connected to a commercial X 25 PDN for routing...

Page 266: ...s not generally available most X 25 in terfaces that are being used with IGRP in a real environment will have bandwidth settings This is a 9 6 Kbaud line bandwidth 10 These Level 3 parameters are default flow control values they need to match the PDN defaults The values used by an SVC are negotiable on a per call basis x25 win 7 x25 wout 7 x25 ips 512 x25 ops 512 You must specify an X 121 address ...

Page 267: ...25 applications have less common or special needs Several X 25 parameters are available to modify the X 25 protocol behavior for these applications To configure less common X 25 interface parameters for these special needs perform these tasks as needed z Configure the X 25 Level 3 Timers z Configure X 25 Addresses z Establish a Default Virtual Circuit Protocoll z Disable Packet Level Protocol PLP ...

Page 268: ...ero to 15 digits Because of the importance of addressing to call setup several interface addressing features are available for X 25 To configure X 25 addresses perform these tasks z Understand Normal X 25 Addressing z Understand X 25 Subaddresses z Configure an Interface Alias Address z Suppress or Replace the Calling Address z Suppress the Called Address Understand Normal X 25 Addressing An X 25 ...

Page 269: ...es A subaddress is an X 121 address that matches the digits defined for the interface s X 121 address but has additional digit s after the base address X 25 acts as the destination host for an incoming Packet As sembler Disassembler PAD call with a destination that is a subad dress of the interface s address the trailing digits specify which line a PAD connection is requesting Other calls that use...

Page 270: ...calling source X 121 address in switched calls x25 use source address Suppress the Called Address Some attachments require that no called destination address be pre sented in outgoing calls this requirement is called suppressing the called address In interface configuration mode suppress the called address x25 suppress called address Establish a Default Virtual Circuit Protocol The Call Request pa...

Page 271: ...ly configured as a transport for data grams across an X 25 network Datagram transport or encapsulation is a cooperative effort between two hosts communicating across an X 25 network You configure datagram transport by establishing a mapping on the encapsulating interface between the far host s protocol address for example IP and its X 121 address Because the call iden tifies the protocol that the ...

Page 272: ...nment using connection oriented inter faces like X 25 and Frame Relay other routers reached by the same physical interface might not have received the routing update Rathe than forcing you to connect routers by separate physical interfaces the AI2524 provides subinterfaces that are treated as separate interfaces You can separate hosts into subinterfaces on a physical interface Sep aration does not...

Page 273: ...l fail Note Because of the complex operations dependent on a sub interface and its type the router will not allow a subinter face type to be changed nor can a subinterface with the same number be re established once it has been deleted After a subinterface has been deleted you must reload the Cisco IOS software by using the reload command to remove all internal references However you can easily re...

Page 274: ...protocol Virtual Circuits The AI2524 supports encapsulation of a number of datagram protocols across X 25 using a standard method when available or a proprietary method when necessary These traditional methods assign a protocol to each virtual circuit If more than one protocol is carried between th router and a given host each active protocol will have at least one vir tual circuit dedicated to ca...

Page 275: ...col the protocol is identified in the call packet by the CUD When a virtual circuit is established to carry more than one pro tocol only available using the RFC 1356 methodology a protocol identification field precedes the datagram encapsulated in the X 25 data packet every datagram exchanged over that virtual circuit has its protocol identified This table summarizes the values used in the CUD fie...

Page 276: ... is used b default although the SNAP encoding can be configured Map Datagram Addresses to X 25 Hosts Encapsulation is a cooperative process between the router and anothe X 25 host Because X 25 hosts are reached with an X 121 address an X 121 address has up to15 decimal digits the router must have means to map a host s protocols and addresses to its X 121 address Each encapsulating X 25 interface m...

Page 277: ...dging z clns OSI Connectionless Network Servic z compressedtcp TCP IP header compression z ip IP z ipx Novell IPX z pad Packet Assembler Disassemble z qllc IBM s QLLC Each mapped protocol except bridging and CLNS takes a datagram address All bridged datagrams are sent to all bridge maps on an inter face CLNS uses the mapped X 121 address as the SNPA which is ref erenced by a clns neighbor command ...

Page 278: ...osts 1 Restrict PAD access x25 pad access 2 Configure a host for PAD access x25 map pad x121 address option You can configure outgoing PAD access using the optional features of the x25 map pad command without restricting incoming PAD con nections to the configured hosts Establish an Encapsulation PVC Permanent Virtual Circuits PVCs are the X 25 equivalent of leased lines they are never disconnecte...

Page 279: ...rial 2 ip address 172 20 1 3 255 255 255 0 x25 map ip 172 20 1 4 0 x25 pvc 4 ip 172 20 1 4 Configuration for Router Y interface serial 3 ip address 172 20 1 4 255 255 255 0 x25 map ip 172 20 1 3 0 x25 pvc 3 ip 172 20 1 3 In this example the PDN has established a PVC through its network connecting PVC number 3 of access point A to PVC number 4 of ac cess point B On Router X a connection is establis...

Page 280: ...ified separately in a multiprotocol virtual circuit Note If you specify both ip and compressedtcp in the same x25 map compressedtcp command they must both specify the same IP address In interface configuration mode set up a separate virtual circuit for X 25 TCP IP header compression x25 map compressedtcp ip address protocol2 address2 protocol9 address9 x121 address option Configure X 25 Bridging T...

Page 281: ...wed z Configure the Ignore Destination Time z Establish the Packet Acknowledgment Policy z Configure X 25 User Facilities z Define the Virtual Circuit Packet Hold Queue Size z Restrict Map Usage Configure X 25 Payload Compression For increased efficiency on relatively slow networks the Cisco IOS software supports X 25 payload compression of outgoing encapsula tion traffic Several restrictions appl...

Page 282: ...on In interface configuration mode enable payload compression over X 25 x25 map protocol address protocol2 address2 protocol9 address9 x121 address compress This command specifies that X 25 compression is to be used between the two hosts Because each virtual circuit established for compressed traffic uses significant amounts of memory compression should be used with careful consideration of its im...

Page 283: ...e traffic to send This action can overrun some X 25 switches To define the number of minutes the Cisco IOS software will prevent calls from going to a previously failed destination type this command in interface configuration mode Incoming calls will still be accepted x25 hold vc timer minutes Establish the Packet Acknowledgment Policy You can instruct the Cisco IOS software to send an acknowledgm...

Page 284: ... affected by the facilities specified for the outgoing interface To set the supported X 25 user facilities perform one or more of these tasks in interface configuration mode z Select the closed user group x25 facility cug group number or x25 map protocol address protocol2 address2 protocol9 address9 x121 address cug number z Set flow control parameter negotiation values to request on outgo ing cal...

Page 285: ...ay milliseconds z Set the Recognized Private Operation Agency RPOA to use x25 facility rpoa name or x25 map protocol address protocol2 address2 protocol9 address9 x121 address rpoa name z Set the AI2524 standard network user identification x25 map protocol address protocol2 address2 protocol9 address9 x121 address nuid username password z Set a user defined network user identification allowing the...

Page 286: ...m number of packets that can be held whil virtual circuit is unable to send data type in interface configuration mode x25 hold queue queue size An encapsulation virtual circuit s hold queue size is determined when it is created the x25 hold queue command does not affect ex isting virtual circuits This command also defines the hold queue siz of encapsulation PVCs Restrict Map Usage An X 25 map can ...

Page 287: ... coming call a TCP connection is established to the router that is acting as the switch for the destination All X 25 packets are sent and received over this reliable data stream Flow control is main tained end to end This is known as X 25 over TCP or XOT XOT was previously called remote switching or tunneling It does not matter whether the interfaces are configured as DTE or DCE because the softwa...

Page 288: ...onfigure XOT Remote X 25 Rout z Configure a Locally Switched PVC z Configure an XOT Remote PVC You may also need to configure additional X 25 routing features as re quired for your network Enable X 25 Routing In global configuration mode enable X 25 routing to use local switch ing or XOT by typing x25 routing use tcp if defs The use tcp if defs keyword is used by some routers that re ceive remote ...

Page 289: ... the address The fifth sixth ninth and tenth digits are deleted and the thirteenth and fourteenth are moved before the eleventh and twelfth Configure a Local X 25 Route When an incoming call needs to be forwarded two fields in the X 25 routing table are consulted to determine a local X 25 route z Destination X 121 address z X 25 packet s CUD field optional When the destination address and the CUD ...

Page 290: ...onto serial 2 All X 121 addresses that do not match the first 3 routes are checked for a DNIC of 3306 as the first 4 digits If they do match they are forwarded over serial 3 All other X 121 addresses will match the fifth entry which is a match all pattern and will have a TCP connection established to the IP address 10 2 0 2 The router at 10 2 0 2 will then route the call according to its X 25 rout...

Page 291: ...ously called remote routes or tunneled routes When an incoming call needs to be forwarded two fields in the X 25 routing table are consulted to determine a remote X 25 route z Destination X 121 address z X 25 packet s Call User Data CUD field optional When the destination address and the CUD of the incoming packet fit the X 121 and CUD patterns in the routing table the call is forwarded You can al...

Page 292: ...l values to be defined if they differ from the interface defaults Example PVC Switching on the Same Router In this example a PVC is connected between two serial interfaces on the same router In this type of interconnection configuration the des tination interface must be specified along with the PVC number on that interface To make a working PVC connection two commands must be specified each point...

Page 293: ... the configuration Figure 12 4 X 25 Tunneling Connection Configuration for Router X service tcp keepalives in service tcp keepalives out interface serial 0 x25 pvc 1 tunnel 172 20 1 2 interface serial 1 pvc 2 Configuration for Router Y service tcp keepalives in service tcp keepalives out interface serial 1 x25 pvc 2 tunnel 172 20 1 1 interface serial 0 pvc 1 Configure an XOT Remote PVC A PVC can b...

Page 294: ...a TCP IP LAN type in interface configuration mode x25 pvc number1 tunnel address interface serial string pvc number2 option The command options ar packetsize in out and window size in out they allow a PVC s flow control values to be defined if they differ from the interface defaults Each XOT connection relies on a TCP session to carry traffic If you do not enable TCP keepalives XOT PVCs might enco...

Page 295: ...ng and Remote Tunneling PVCs Configuration for Router X service tcp keepalives in service tcp keepalives out interface ethernet 0 ip address 172 20 1 1 255 255 255 0 interface serial 0 x25 ltc 5 x25 pvc 1 interface serial 1 pvc 1 x25 pvc 2 tunnel 172 20 1 2 interface serial 0 pvc 1 interface serial 1 x25 ltc 5 x25 pvc 1 interface serial 0 pvc 1 x25 pvc 2 tunnel 172 20 1 2 interface serial 0 pvc 2 ...

Page 296: ...s and maximum packet sizes in the X 25 Call packet The far host s XOT implementa tion can then correctly negotiate the flow control values at the destina tion interface and if needed indicate the final values in the X 25 Call Confirm packet The versions of XOT prior to Release 9 1 4 1 software will not how ever ensure that these flow control values are encoded in the X 25 Call packet When XOT rece...

Page 297: ...dding the option use tcp if defs when enabling X 25 routing in global configuration mode x25 routing use tcp if defs Substitute Addresses in a Local X 25 Route When interconnecting two separate X 25 networks you must some times provide for address translation for local routes Your X 25 switch supports translation of X 25 source and destination addresses for local switching To translate addresses p...

Page 298: ...25 switching can be extended to nonserial media through the use of OSI based NSAP addresses This implemen tation runs packet level X 25 over frame level LLC2 The AI2524 CMNS implementation allows LAN based OSI re sources such as a DTE host and a Sun workstation to be intercon nected to each other via the router s LAN interfaces and to a remot OSI based DTE through a WAN interface using for example...

Page 299: ...ng To map the NSAP addresses to either a MAC address or X 121 ad dress perform one of these tasks in interface configuration mode z Statically map an NSAP address to a nonserial MAC layer ad dress x25 map cmns nsap mac address z Statically map an NSAP address to X 25 with an optional X 121 destination address x25 map cmns nsap x121 address Example CMNS Configured for X 121 and MAC Addresses This e...

Page 300: ... a Token Ring with a PDN providing the connection Figure 12 6 Example Network Topology for Switching CMNS over a PDN This configuration listing allows resources on either side of the PD to call Host A or Host B This configuration allows traffic intended for the remote NSAP address specified in the x25 map cmns com mands for the serial ports to be switched through the serial interface for which CMN...

Page 301: ...terface intended for any NSAP address with NSAP 38 8261 18 will be switched to MAC address 0800 4e02 2abc through Ethernet 0 interface ethernet 0 cmns enable x25 map cmns 38 8261 18 0800 4e02 2abc This configuration specifies that traffic from any other interface on Cisco Router C1 that is intended for any NSAP address with NSAP prefix 38 8261 17 will be switched to X 121 address 4085551234 throug...

Page 302: ... which CMNS is configured Figure 12 7 Example Network Topology for Switching CMNS over a Leased Line A key difference for this configuration compared with the previous ex ample is that with no PDN the specification ofan X 121 address in the x25 map cmns command is not necessary The specification of an X 25 address also is not needed but is included for symmetry with the previous example Configurat...

Page 303: ...ic from any other interface on Router C3 that is intended for any NSAP address with NSAP prefix 38 8261 21 will be switched through Serial 1 interface serial 1 encapsulation x25 x25 address 00001 x25 map cmns 38 8261 21 Create X 29 Access Lists Protocol translation software supports access lists which make it pos sible to limit access to the access server from X 25 hosts Access lists take advantag...

Page 304: ...ot match any of the entries in the access list access is denied Example X 29 Access List This example illustrates an X 29 access list Incoming permit condi tions are set for all IP hosts that have specific characters in their names All X 25 connections to a printer are denied Outgoing connections are list restricted Permit all IP hosts beginning with VMS Deny X 25 connections to th printer on line...

Page 305: ... restrictions only on one of the protocols create an access list that per mits all addresses for the other protocols Create an X 29 Profile Script You can create an X 29 profile script for th translate command When an X 25 connection is established the protocol translator acts as if an X 29 Set Parameter packet had been sent containing the parame ters and values set by this command In global confi...

Page 306: ...g for the higher layers to recover the lost information This behavior is good only if the host tim ers are relatively slow In the case of quickly expiring host timers however you will discover that LAPB is spending much of its tim transmitting host retransmissions If the line is not noisy the lower overhead of HDLC encapsulation is more efficient than LAPB When you are using long delay satellite l...

Page 307: ...idging or TCP IP header com pression but does support transparent bridging Only protocols sup ported by a single protocol encapsulation are supported by multiprotocol LAPB encapsulation Example Typical LAPB Configuration In this example the frame size N1 window size k and maximum retransmission N2 parameters retain their default values The en capsulation interface configuration command sets DCE op...

Page 308: ...nd Values or Ranges Default Set the modulo lapb modulo modulus 8 or 128 8 Set the window size K lapb k window size 1 mod ulo minus 1 frames 7 Set the maxi mum bits per frame N1 lapb n1 bits Bits must be a mul tiple of 8 Based on hardware MTU and protocol overhead Set the count for sending frames N2 lapb n2 tries 1 255 tries 20 Set the retrans mission timer T1 lapb t1 milli seconds 1 64000 millisec...

Page 309: ...Maximum Transmission Unit MTU size plus any protocol over head The LAPB N1 range is dynamically calculated by the Cisco IOS software whenever an MTU change an L2 L3 modulo change o a compression change occurs on a LAPB interface Caution The LAPB N1 parameter provides little benefit beyond the interface MTU and can easily cause link failures if misconfigured This parameter should be left at its def...

Page 310: ...on on the link Priority queuing is a mechanism that classifies packets based on cer tain criteria and then assigns the packets to 1of 4 output queues with high medium normal or low priority Custom queuing similarly clas sifies packets assigns them to 1 of 10 output queues and controls the percentage of an interface s available bandwidth that is used for a queue For example you can use priority que...

Page 311: ... encapsulation encapsulation lapb multi 4 Assign the interface to a bridge group bridge group bridge group 5 Define the type of spanning tree protocol bridge bridge group protocol ieee dec Note This feature requires use of theencapsulation lapb multi command You cannot use theencapsulation lapb protocol command with a bridge keyword to configure this feature Monitor and Maintain LAPB and X 25 To m...

Page 312: ... enabled bridge group 1 interface serial 0 no ip address encapsulation lapb multi bridge group 1 bridge 1 protocol ieee Example X 25 Configured to Allow Ping Support over Multiple Lines For ping commands to work in an X 25 environment when load sharing over multiple serial lines you must include entries for all ad jacent interface IP addresses in the x25 map command for each serial interface This ...

Page 313: ... configuration example must be assigned to the same IP subnet address space In this case the subnet is 172 20 170 0 Configuration for Router A interface serial 1 ip 172 20 170 1 255 255 255 0 x25 address 31370054068 x25 map ip 172 20 170 3 31370054065 x25 map ip 172 20 170 4 31370054065 interface serial 2 ip 172 20 170 2 255 255 255 0 x25 address 31370054069 x25 map ip 172 20 170 4 31370054067 x25...

Page 314: ...you cannot boot the router from a network server via a broadcast Instead you must boot from a specific host Also anx25 map command must exist for the host that you boot from The x25 map command is used to map an IP address into an X 121 address There must be an x25 map command that matches the IP address given on the boot system command line boot system gs3 k 100 172 18 126 111 interface Serial 1 ...

Page 315: ...Chapter 12 AI2524 X 25 Configuration Steps August 1997 Page 12 57 2524UM This entry allows the remote router to return a boot image from the host to the router booting over X 25 ...

Page 316: ...AI2524 Router Card User s Manual Page 12 58 August 1997 2524UM ...

Page 317: ...ts to a remote Frame Relay switch A Frame Relay network is not required to support only routers that are connected directly or only routers connected via CSU DSUs Within network some routers can connect to a Frame Relay switch through direct connection and others through connections via CSU DSUs However a single router interface configured for Frame Relay can be only one or the other The CSU DSU c...

Page 318: ...ess Mapping z Configure the LMI z Configure Frame Relay Switched Virtual Circuits z Configure Frame Relay Traffic Shaping z Customize Frame Relay for Your Network z Monitor the Frame Relay Connections Enable Frame Relay Encapsulation on an Interface Beginning in global configuration mode set Frame Relay encapsula tion at the interface level 1 Specify the serial interface and enter interface config...

Page 319: ...s Mapping Dynamic address mapping uses Frame Relay Inverse ARP to request the next hop protocol address for a specific connection given its known DLCI Inverse ARP is enabled by default for all protocols it supports but can be disabled for specific protocol DLCI pairs As a re sult you can use dynamic mapping for some protocols and static map ping for other protocols on the same DLCI Configure Dynam...

Page 320: ...Connectionless Network Service CLNS frames frame relay map clns dlci broadcast z Define a DLCI used to connect to a bridge frame relay map bridge dlci broadcast ietf Use these keywords to specify the protocols z ip IP z ipx Novell IPX z clns ISO CLNS Examples Static Address Mapping These sections provide examples of static address mapping for the IP and IPX protocols Two Routers in Static Mode Exa...

Page 321: ...e relay frame relay map ipx 200 0000 0c00 7b21 102 broadcast Configure the LMI Local Management Interface LMI autosense enables the interface to determine the LMI type supported by the switch and eliminates the need to configure the Local Management Interface LMI explicitly Allow LMI Autosense to Operate LMI autosense is active in these situations z The router is powered up or the interface change...

Page 322: ...off LMI au tosense by explicitly configuring an LMI type When the LMI type is written into NVRAM the next time the router powers up LMI au tosense is inactive Explicitly Configure the LMI If you want to configure the LMI and thus deactivate LMI autosense complete the tasks The tasks in the first two sections are required if you choose to configure the LMI z Set the LMI Typ z Set the LMI Keepalive ...

Page 323: ... counters intervals and thresholds to fine tune the operation of your LMI DTE and DCE devices Set these attributes by performing one or more of these tasks in interface config uration mode z Set the DCE and Network to Network Interface NNI error threshold frame relay lmi n392dce threshold z Set the DCE and NNI monitored events count frame relay lmi n393dce events z Set the polling verification tim...

Page 324: ...nable SVC operation at the interface level Once it is en abled at the interface level it is enabled on any subinterface on that in terface One signaling channel DLCI 0 is set up for the interface and all SVCs are controlled from the physical interface To enable Frame Relay SVC service and set up SVCs complete these tasks The subinterface tasks are not required but offer additional flex ibility for...

Page 325: ... 8 6 encapsulation frame relay map group bermuda frame relay lmi type q933a frame relay svc map list bermuda source addr E164 123456 dest addr E164 654321 ip 131 108 177 100 class hawaii appletalk 1000 2 class rainbow map class frame relay rainbow frame relay idle timer 60 map class frame relay hawaii frame relay cir in 64000 frame relay cir out 64000 Configure SVCs on a Subinterface optional To c...

Page 326: ...alling and that SVC operation has been enabled on th main interface int s 0 1 point point Define the map group details are specified under the map list holiday command map group holiday Associate the map group with a specific source and destination map list holiday local addr X121 X121 addr dest addr E164 E164 addr Specify destination protocol addresses for a map class ip 131 108 177 100 class haw...

Page 327: ... 3 Assign a priority queue to virtual circuits associated with the map class frame relay priority group list number 4 Enable BECN feedback to throttle the frame transmission rate frame relay becn response enable 5 Specify the inbound committed information rate CIR frame relay cir in bps 6 Specify the outbound committed information rate CIR frame relay cir out bps 7 Set the minimum acceptable incom...

Page 328: ...ss Maps To define the protocol addresses under a map list command and associate each protocol address with a specified map class use the class command for each protocol address In map class configura tion mode associate a map class with a protocol address protocol protocol address class class name ietf broadcast trigger The ietf keyword specifies RFC 1490 encapsulation th broad cast keyword specif...

Page 329: ...201 frame relay lapf n201 number z Set the LAPF retransmission timer value T200 frame relay lapf t200 tenths of a second z Set the LAPF link idle timer value T203 of DLCI 0 frame relay lapf t203 seconds Configure Frame Relay Traffic Shaping Beginning with Release 11 2 AI2524 supports Frame Relay traffic shaping which provides z Rate enforcement on a per virtual circuit basis The peak rate for outb...

Page 330: ...affic Shaping Map Class for the Interfac z Define a Map Class with Queuing and Traffic Shaping Parameters z Define Access Lists z Define Priority Queue Lists for the Map Class z Define Custom Queue Lists for the Map Class Enable Frame Relay Traffic Shaping on the Interface In interface configuration mode enable Frame Relay traffic shaping on an interface to enable both traffic shaping and per virt...

Page 331: ...ue list frame relay priority group number Define Access Lists You can specify access lists and associate them with the custom queue list defined for any map class The list number specified in th access list and the custom queue list tie them together See the appropriate protocol chapters for information about defining access lists for the protocols you want to transmit on the Frame Relay network D...

Page 332: ...ping This example illustrates a Frame Relay interface with three point to point subinterfaces In this example the virtual circuits on subinterfaces Serial0 1 a Serial0 2 inherit class parameters from the main interface namely those defined in slow_vcs However the virtual circuit defined on sub interface Serial0 2 DLCI 102 is specifically configured to use map class fast_vcs Map class slow_vcs uses...

Page 333: ...0 3 point to point ip address 10 128 30 17 255 255 255 248 ip ospf cost 200 bandwidth 10 frame relay interface dlci 103 map class frame relay slow_vcs frame relay traffic rate 4800 9600 frame relay custom queue list 1 map class frame relay fast_vcs frame relay traffic rate 16000 64000 frame relay priority group 2 access list 100 permit tcp any any eq 2065 access list 115 permit tcp any any eq 256 ...

Page 334: ...leted you can also perform these optional tasks z Configure Transparent Bridging for Frame Relay z Configure a Backup Interface for a Subinterface Understand Frame Relay Subinterfaces Frame Relay subinterfaces provide a mechanism for supporting par tially meshed Frame Relay networks Most protocols assume transitiv ity on a logical network that is if station A can talk to station B and station B ca...

Page 335: ...that is partially meshed Network A If the entire net work is viewed as a single subnetwork with a single network number assigned most protocols assume that node A can transmit a packet di rectly to node E when in fact it must be relayed through nodes C and D This network can be made to work with certain protocols for ex ample IP but will not work at all with other protocols because nodes C and D w...

Page 336: ...terfaces Configure subinterfaces on a Frame Relay network 1 Specify a serial interface interface serial number 2 Configure Frame Relay encapsulation on the serial interface encapsulation frame relay 3 Specify a subinterface interface serial number subinterface number multipoint point to point Subinterfaces can be configured for multipoint or point to point com munication There is no default ...

Page 337: ...nt communication without first rebooting the router or access server Instead you can simply avoid using that subinterface numbe and use a different subinterface number instead Examples Basic Subinterface In this example subinterface 1 models apoint to point subnet and sub interface 2 models a broadcast subnet For emphasis the multipoint keyword is used for serial subinterface 2 even though a subin...

Page 338: ...te a specific multipoint sub interface with a specific DLCI frame relay interface dlci dlci Inverse ARP is enabled by default for all protocols it supports but can be disabled for specific protocol DLCI pairs As a result you can use dynamic mapping for some protocols and static mapping for other pro tocols on the same DLCI You can explicitly disable Inverse ARP for a protocol DLCI pair if you know...

Page 339: ... automatically disabled for the specified protocol on the specified DLCI You must use static mapping if the router at the other end either does not support Inverse ARP at all or does not support Inverse ARP for a specific protocol that you want to use over Frame Relay To establish static mapping according to your network needs perform one of these tasks in interface configuration mode z Define the...

Page 340: ...lation frame relay interface serial 0 1 multipoint ipx network 1 frame relay map ipx 1 000 0c07 d530 200 broadcast ipx network 2 frame relay map ipx 2 000 0c07 d530 300 broadcast For subinterface serial 0 1 the router at the other end might be config ured as ipx routing interface serial 2 multipoint ipx network 1 frame relay map ipx 1 000 0c02 5f4f 200 broadcast Configure Transparent Bridging for ...

Page 341: ...lay interface dlci dlci option 5 Associate the subinterface with a bridge group bridge group bridge group Example Unnumbered IP over a Point to Point Subinterface This example sets up unnumbered IP over subinterfaces at both ends of a point to point connection In this example Router A functions as the DTE and Router B functions as the DCE Routers A and B are both attached to Token Ring networks Co...

Page 342: ... relay interface dlci 20 Point to Multipoint Interfaces In interface configuration mode configure transparent bridging for point to multipoint subinterfaces 1 Specify a serial interface interface serial number 2 Configure Frame Relay encapsulation on the serial interface encapsulation frame relay 3 Specify a subinterface interface serial number subinterface number multipoint 4 Define the mapping b...

Page 343: ...t to point and multipoint Frame Relay subinterfaces can be configured with a backup interface This approach allows individual PVCs to be backed up in case of failure rather than depending on th entire Frame Relay connection to fail before the backup takes over You can configure a subinterface for backup on failure only not for backup based on loading of the line If the serial interface has a backu...

Page 344: ...and disable delay backup delay enable delay disable delay Configure Frame Relay Switching Frame Relay switching is a means of switching packets based upon the DLCI which can be looked upon as the Frame Relay equivalent of a MAC address You perform the switching by configuring your router or access server as a Frame Relay network There are two parts to a Frame Relay network a Frame Relay DTE the ro...

Page 345: ...h or NNI Sup port z Specify the Static Rout Enable Frame Relay Switching In global configuration mode enable packet switching before config uring it on a Frame Relay DTE or DCE or with Network to Network Interface NNI support frame relay switching Configure a Frame Relay DTE Device DCE Switch or NNI Support In interface configuration mode configure an interface as a DTE de vice or a DCE switch or ...

Page 346: ...ce serial 1 and 2 Frames with DLCI 100 received on serial 1 will be transmitted with DLCI 200 on serial 2 see Figure 13 4 Figure 13 4 PVC Switching Configuration Configuration for Router A frame relay switching interface Ethernet0 ip address 131 108 160 58 255 255 255 0 interface Serial1 no ip address encapsulation frame relay keepalive 15 frame relay lmi type ansi frame relay intf type dce frame ...

Page 347: ...eature it is possible to buildan entire Frame Relay network using our routers In this example Router A and Router C act as Frame Relay switches implementing a two node network Th standard Network to Network Interface NNI signaling protocol is used between Router A and Router C see Figure 13 5 Figure 13 5 Frame Relay DCE Configuration ...

Page 348: ...3 no ip address shutdown interface serial 0 ip address 131 108 178 48 255 255 255 0 shutdown interface serial 1 no ip address encapsulation frame relay frame relay intf type dce frame relay lmi type ansi frame relay route 100 interface serial 2 200 interface serial 2 no ip address encapsulation frame relay frame relay intf type nni frame relay lmi type q933a frame relay route 200 interface serial ...

Page 349: ...s shutdown interface ethernet 3 no ip address shutdown interface serial 0 ip address 131 108 187 84 255 255 255 0 shutdown interface serial 1 no ip address encapsulation frame relay frame relay intf type dce frame relay route 300 interface serial 2 200 interface serial 2 no ip address encapsulation frame relay frame relay intf type nni frame relay lmi type q933a frame relay route 200 interface ser...

Page 350: ...s a hybrid DTE DCE Frame Relay switch It can switch frames between the two DCE ports and between a DCE port and a DTE port Traffic from the Frame Relay network can also be terminated locally In the example three PVCs are defined as z Serial 1 DLCI 102 to serial 2 DLCI 201 DCE switching z Serial 1 DLCI 103 to serial 3 DLCI 301 DCE DTE switching z Serial 2 DLCI 203 to serial 3 DLCI 302 DCE DTE switc...

Page 351: ...n frame relay frame relay intf type dce frame relay route 102 interface serial 2 201 frame relay route 103 interface serial 3 301 interface serial 2 no ip address encapsulation frame relay frame relay intf type dce frame relay route 201 interface serial 1 102 frame relay route 203 interface serial 3 302 interface serial 3 ip address 131 108 111 231 encapsulation frame relay frame relay lmi type an...

Page 352: ...Tunnel You can switch over an IP tunnel by creating a point to point tunnel across the internetwork over which PVC switching can take place se Figure 13 7 Figure 13 7 Frame Relay Switch over IP Tunnel The following configurations illustrate how to create the IP network depicted in Figure 13 7 ...

Page 353: ... 400 broadcast frame relay route 100 interface Tunnel1 200 interface Tunnel1 tunnel source Ethernet0 tunnel destination 150 150 150 123 Configuration for Router D frame relay switching interface Ethernet0 ip address 131 108 231 123 255 255 255 0 interface Ethernet1 ip address 131 108 6 123 255 255 255 0 interface Serial0 ip address 150 150 150 123 255 255 255 0 encapsulation ppp interface Tunnel1 ...

Page 354: ...hen supported on the oth er end of the connection Note If you change from a point to point subinterface to a multipoint subinterface then change the subinterface number Frame Relay Inverse ARP will be on by default and no further action is required You do not need to enable or disable Inverse ARP if you have a point to point interface because there is only a single destination and dis covery is no...

Page 355: ...ny second is the first of the two rate limits that is reached In interface configuration mode create a broadcast queue frame relay broadcast queue size byte rate packet rate Configure Payload Compression You can configure payload compression on point to point or multi point interfaces or subinterfaces Payload compression uses the stac method to predict what the next character in the frame will be ...

Page 356: ... for TCP IP Header Compression Note If you configure an interface with Cisco encapsulation and TCP IP header compression Frame Relay IP maps inherit the compression characteristics of the interface However if you configure the interface with IETF encapsulation the interface cannot be configured for compression Frame Relay maps will have to b configured individually to support TCP IP header compres...

Page 357: ...going TCP IP packets to header compression Passive compression subjects an outgoing packet to header compression only if the packet had a compressed TCP IP header when it was received on that interface In interface configuration mode apply TCP IP header compression to an interface 1 Configure Cisco encapsulation on the interface encapsulation frame relay 2 Enable TCP IP header compression on the i...

Page 358: ...map has in herited passive TCP IP header compression Router show frame relay map Serial 1 administratively down ip 131 108 177 177 dlci 177 0xB1 0x2C10 static broadcast CISCO TCP IP Header Compression inherited passive inherited Example Using an IP Map to Override TCP IP Header Compression This example shows the use of a Frame Relay IP map to override the compression set on the interface interface...

Page 359: ...se tasks in interface configuration mode z Disable TCP IP header compression on all Frame Relay IP maps that are not explicitly configured for TCP header compression no frame relay ip tcp header compression frame relay map ip ip address dlci z Disable TCP IP header compression on a specified Frame Relay IP map nocompress tcp header compression Example Disabling Inherited TCP IP Header Compression ...

Page 360: ...ample Disabling Explicit TCP IP Header Compression In this second example the initial configuration is the same as the pre vious example but you enter these commands serial interface 1 no frame relay ip tcp header compression frame relay map ip 131 108 177 178 178 nocompress Use the show frame relay map command display the resulting compression and encapsulation characteristics Router show frame r...

Page 361: ... eligible for discarding and you can also specify DE groups to iden tify the DLCI that is affected z In global configuration mode define a DE list specifying which packets can be dropped when the Frame Relay switch is congest ed frame relay de list list number protocol protocol interface type number characteristic You can specify DE lists based on the protocol or the interface and on characteristi...

Page 362: ...priority levels do not assign priority queues within the router or access server in fact they are independent of the device s priority queues However if you enable queuing and use the same DLCIs for queuing then high priority DLCIs can be put into high priority queues In interface configuration mode configure DLCI priority levels by en abling multiple parallel DLCIs for different types of Frame Re...

Page 363: ... show frame relay pvc type number dlci z Display configured static routes show frame relay route z Display Frame Relay traffic statistics show frame relay traffic z Display information about the status of LAPF show frame relay lapf z Display all the SVCs under a specified map list show frame relay svc maplist Example Configuration Providing Backward Compatibility This example configuration provide...

Page 364: ... specific TFTP host Also frame relay map command must exist for the host that you will boot from For example if file gs3 bfx is to be booted from a host with IP address 131 108 126 2 these commands would need to be in the configuration boot system gs3 bfx 131 108 126 2 interface Serial 0 encapsulation frame relay frame relay map IP 131 108 126 2 100 broadcast The frame relay map command is used to...

Page 365: ... that can get to host 131 108 126 111 The remote router must have this frame relay map entry frame relay map ip 131 108 126 200 101 broadcast This entry allows the remote router to return a boot image from the network server to the router booting over Frame Relay Here 101 is a DLCI of the router being booted ...

Page 366: ...AI2524 Router Card User s Manual Page 13 50 August 1997 2524UM ...

Page 367: ...Before Transmission z Specify the Frame Type of a FT T1 Line z Specify the CSU Line Build Out z Specify FT1 T1 Line Code Type z Enable Remote Alarms z Enable Loopcodes that Initiate Remote Loopbacks z Specify Timeslots Specify the Clock Source To specify the clock source for the FT1 T1 CSU DSU internal clock or the line clock type this in interface configuration mode service module t1 clock source...

Page 368: ...enable normal data transmission on a FT1 T1 network type this in interface configuration mode service module tx1 data coding normal or no service module t1 data coding inverted Specify the Frame Type of a FT T1 Line To specify the frame type for a line using the FT1 T1 CSU DSU mod ule type this in interface configuration mode service module t1 framing sf esf Note Choose either D4 Super Frame sf or...

Page 369: ...s configured for AMI you must guarantee the T1s density requirement in your router configuration using the service mod ule t1 data coding inverted command or the service module t1 timeslots speed 56 command In most cases your T1 service provider determines which line cod type either ami or b8zs is required for your T1 circuit Enable Remote Alarms To generate remote alarms yellow alarms at the loca...

Page 370: ...d without specifying any keywords you enable the standard loopup codes which use a 1 in 5 pattern for loopup and a 1 in 3 pattern for loopdown You can simultaneously configure thefull and payload loopback points However only one loopback payload code can be configured at a time For example if you configure the service module t1 remote loopback payload alternate command a pay load v 54 request whic...

Page 371: ...nge specifies the DS0 timeslots that constitute the FT1 T1 chan nel The range is from 1 to 24 where the first timeslot is numbered 1 and the last timeslot is numbered 24 Specify this field by using a series of subranges separated by commas The timeslot range must match the timeslots assigned to the channel group In most cases the service pro vider defines the timeslots that comprise a channel grou...

Page 372: ...AI2524 Router Card User s Manual Page 14 6 August 1997 2524UM ...

Page 373: ...hange Between DDS and Switched Dial Up Modes z Enable Acceptance of a Remote Loopback Request z Select a Service Provider Set the Clock Source In most applications the CSU DSU should be configured with the service module 56k clock source line command Fo back to back configurations use the internal keyword to config ure one CSU DSU and use the line keyword to configure the othe CSU DSU Configure th...

Page 374: ... DSU The auto linespeed setting enables the CSU DSU to decipher current line speed from the sealing current running on the network Becaus back to back DDS lines do not have sealing current use the auto set ting only when transmitting over telco DDS lines and using the line clock as the clock source Do not use any form of this command to enable a network line speed of 56 kbps which is the default W...

Page 375: ...s In interface configuration mode transmit packets in switched dial up mode or DDS mode using the 4 wire 56 64 kbps CSU DSU module service module 56k network type dds or service module 56k network type switched Do not use any form of these commands to transmit from a dedicated leased line in DDS mode DDS is enabled by default for the 4 wir CSU DSU Switched mode is enabled by default for the 2 wire...

Page 376: ...rier att other sprint The att keyword specifies AT T or another digital network service provider as the line carrier which is the default for the 4 wire 56 64 kbps CSU DSU module Th sprint keyword specifies Sprint or an other service provider whose network carries mixed voice and data as the line carrier which is the default for the 2 wire switched 56 kbps CSU DSU module In a Sprint network echo c...

Page 377: ...8S cable to connect the RJ 48S port to an RJ48S jack z If you have a FT1 T1 DSU CSU module use a straight through RJ 48C to RJ48C cable to connect the RJ 48C port to an RJ48C jack z If you have a synchronous serial module use a transition cable to connect the synchronous serial port to a modem or DSU CSU Configuring This chapter describes how to configure the AI2524 router and de scribes the follo...

Page 378: ...age is found then the router searches for a valid configuration file 5 If a valid configuration file is not found in NVRAM the router runs the System Configuration Dialog so you can configure it manually For normal router operation there must be a valid Cisco IOS image in Flash memory and a configuration file in NVRAM The first time you boot your router you will need to configure the router interf...

Page 379: ...ter and then power ON the router 2 When you are prompted to enter the initial dialog enter no to go into the normal operating mode of the router Would you like to enter the initial dialog yes no 3 After a few seconds you will see the user EXEC prompt Router Enter the enable command to enter enable mode You can only make configuration changes in enable mode Router enable The prompt changes to the p...

Page 380: ... cally after connection to your WAN For AutoInstall to work properly a Transmission Control Protocol Internet Protocol TCP IP host on your network must be reconfigured to provide the required configura tion files The TCP IP host may exist anywhere on the network as long as these conditions are maintained 1 The host must be on the remote side of the router s synchronous serial connection to the WAN...

Page 381: ...stall make sure all the WAN cables are disconnected from the router This will prevent the router from at tempting to the run the AutoInstall process The router will attempt to run AutoInstall whenever you power it on if there is a WAN connec tion on both ends and the router does not have a configuration fil stored in NVRAM It can take several minutes for the router to deter mine that AutoInstall i...

Page 382: ...rial ports Take these steps to configure the router using the System Configura tion Dialog 1 Connect a console terminal to the console connector on the rear panel of your router and turn ON power to the router For mor information refer to the section Connecting the Console Terminal and Modem in the chapter Installing the Cisco 2524 Routers The default parameters for the console port are 9600 baud ...

Page 383: ...sco Systems Inc Compiled Fri 20 Oct 95 16 02 by XXXXX Image text base 0x03030FC0 data base 0x00001000 Cisco 252X 68030 processor revision A with 4092K 2048K bytes of memory Processor board ID 00000000 Bridging software SuperLAT software copyright 1990 by Meridian Technology Corp X 25 software Version X X NET2 8FE and GOSIP compliant TN3270 Emulation software copyright 1994 by TGV Inc Basic Rate IS...

Page 384: ...ackets for most of the questions A typical configuration is Configuring global parameters Enter host name Router Next you are prompted to enter an enable secret password There are two types of privileged level passwords Enable secret password a very secure encrypted password Enable password a less secure nonencrypted password The enable password is used when the enable secret password does not exi...

Page 385: ...s Multizone networks no yes Configure DECnet no Configure IP yes Configure IGRP routing yes Your IGRP autonomous system number l 15 Configure CLNS No Configure bridging no Configure IPX no yes Configure XNS no Configure Apollo no 10 Enter the ISDN BRI switch type for the router The ISDN switch type appropriate for the router depends on the ISDN provider s equipment This table lists the ISDN switch...

Page 386: ...mber of bits in subset field 8 8 Class s network is 172 16 0 0 8 subnet bits mask i 255 255 255 0 2 Enter yes if you will be using AppleTalk on the interface Enter yes to configure the router for extended AppleTalk networks and then enter the cable range Enter the zone name and any other ad ditional zones that will be associated with your local zone Configure AppleTalk on this interface no yes Ext...

Page 387: ...rial port 0 Configuring interface SerialO Is this interface in use yes 2 Determine which protocols you want on the synchronous serial in terface and enter the appropriate responses In this example th system is being configured for IP AppleTalk and IPX Configure IP on this interface yes Configure IP unnumbered on this interface Loo IP address for this interface 172 16 73 1 Number of bits in sunned ...

Page 388: ...you want to use the displayed configuration If you enter no you will lose the configuration information you just entered and you can begin the configuration again If you enter yes the configura tion will be entered and saved in the startup configuration Use this configuration yes no yes Building configuration Use the enabled mode configure command to modify this configuration Press RETURN to get s...

Page 389: ...on chap Router config if dial map ip targetrouter_ipaddress targetrouter_phonenumber Router config if dialer group groupnumber Do not use periods or hyphens when you are entering dialing num bers Note The ISDN BRI interface provides dial backup for the AI2524 card When a connection is requested the system checks the username presented for validity then dials back the number associated with the use...

Page 390: ...etwork targetrouter subnetmask Router config dialer list groupnumber list access list number 8 Configure a static route to allow connectivity to the target router s local network Enter the network number of the target router s local IP network and subnet mask and the IP address of the target router s BRI port Router config 3 ip route targetrouter_ipnetwork subnetmask targetBRIport_ipaddress 9 Ente...

Page 391: ...epalive 4 Set the network type to switched Router config if service module 56k network type switched 5 Set the carrier type where carrier can be ttt sprint or other Router config if service module 56k switched carrier carrier 6 Enter the dialer information Router config if dialer in band Router config if dialer string targetrouter_phonenumber Router config if dialer group groupnumber Router config...

Page 392: ...n Configuring Switched 56 Take these steps to configure the 4 wire 56 64 kbps DSU CSU mod ule for DDS substituting the correct addresses and host names as ap propriate for your network 1 Enter enable mode Router enable password enablepassword 2 Enter configuration mode Router config term Router config 3 Assign an IP address to the serial port on the module Router config interface serial port _numb...

Page 393: ...ode Router enable password enablepassword 2 Enter configuration mode Router config term Router config 3 Assign an IP address to the serial port on the module Router config interface serial port_number Router config if ip address ipaddress suLnetmask Router config if no keepalive 4 Enter the framing type and line code type substituting framing_type with sf Superframe o esf Extended Super frame and ...

Page 394: ...oot commands the router executes them in the order they are entered There are two ways to load the Cisco IOS image from Flash memory or from a TFTP server on the network 1 Flash memory Information stored in Flash memory is not vulnerable to network failures that might occur when you load system software from servers In this example replace filename with the filename of the Cisco IOS image Router e...

Page 395: ...TFTP server on your network as a backup boot method for the router In this example replace filename with the filename of the Cisco IOS image and replace IP address with the IP address of the TFTP server Router enable Password enablepassword Router configure terminal Router config boot system tftp filename ipaddress Router config Ctrl Z Router copy running config startup config Building configurati...

Page 396: ...E SOFTWARE ROM XX00 Bootstrap Software XXX BOOT X Version XX X XXXXX XXXXX Router uptime is 4 minutes System restarted by power on System image file is Rflash XXX XXX X X Novl4 booted via flash Cisco XXXX 68030 processor revision X with 4092K 2048K bytes of memory Processor board ID 00000000 Bridging software SuperLAT software copyright l99X by Meridian Technology Cord X 25 software Version X X NE...

Page 397: ...tation Command References Refer to the Cisco Command Reference chapters on the AI2524 Cisco IOS v 11 2 documentation CD z Security Command Referenc z Wide Area Networking Command Reference z Network Protocols Command Reference Part 1 z Network Protocols Command Reference Part 2 z Network Protocols Command Reference Part 3 z Bridging and IBM Networking Command Reference ...

Page 398: ...AI2524 Router Card User s Manual Page 17 2 August 1997 2524UM ...

Page 399: ...e 18 1 2524UM Chapter 18 System Error Messages Introduction This chapter contains a link to the AI2524 Cisco IOS v 11 2 documen tation System Error Messages Refer to the Cisco Command Reference chapters on the AI2524 Cisco IOS v 11 2 documentation CD ...

Page 400: ...AI2524 Router Card User s Manual Page 18 2 August 1997 2524UM ...

Page 401: ... 19 1 2524UM Chapter 19 Debug Command Reference Introduction This chapter contains a link to the AI2524 Cisco IOS v 11 2 documen tation Debug Command Reference Refer to the Cisco Command Reference chapters on the AI2524 Cisco IOS v 11 2 documentation CD ...

Page 402: ...AI2524 Router Card User s Manual Page 19 2 August 1997 2524UM ...

Page 403: ...Appendix A Release Notes August 1997 Page A 1 2524UM Appendix A Release Notes ...

Page 404: ...AI2524 Router Card User s Manual Page A 2 August 1997 2524UM ...

Page 405: ...RN194 Page 1 AISwitch Release Notes AI2524 Version 1 00 Router Card August 1997 Applied Innovation Inc 5800 Innovation Drive Dublin Ohio 43016 3271 614 798 2000 800 247 9482 FAX 614 798 1770 ...

Page 406: ...ke whatever steps are necessary to correct the interference Information is available from the FCC describing possible correc tive actions To maintain low EMI levels we suggest that you use only metal connectors and shielded cable grounded to the frame Electrostatic Discharge Warning The AISwitch and its peripherals contain electrostatic sensitive components Proper handling shipping and storage pre...

Page 407: ...ion 1 00 Router Card August 1997 New Features These release notes document new or enhanced features and com mands upgrade instructions and problem resolutions for the AI2524 Router card z ISDN BRI Inferface Instructions for use of this product are detailed in the AI2524 Router Manual document number 2524UM ...

Page 408: ...e NT1 LED is on the router detects the ISDN link integrity signal at the U interface and the internal S T interface indicating that an ISDN connection has been established If the NT1 LED blinks once per second the ISDN connection at the U interface is up and the internal S T interface is coming up If this condition persists th ISDN port is either not configured o configured incorrectly If the NT1 ...

Page 409: ...mmand Router config term 3 If you have not already done so enter the isdn switch type command to configure the ISDN switch type router config ISDN switth type switch type 4 Enter the BRI interface encapsulation method PPP authentica tion type target router s IP address and ISDN number to dial and the dialer group number Router config interface bri 0 Router config if encapsulation ppp Router config...

Page 410: ...that when the first B chan nel reaches 50 percent of its bandwidth capacity 128 equals 50 percent of 255 the second B channel will be activated to assist with the bandwidth load 7 Enter the access list command to configure the ISDN line to come up whenever IP packets are to be sent Router config if access list access list number permit ip sourcerouter ipnetwork sourcerouter subnetmask targetrouter...

Page 411: ...tion Protocol ARPA Advanced Research Projects Agency ATM Asynchronous Transfer Mode AURP Appletalk Update based Routing Protocol Bc Committed Burst Size Be Excess Burst Size BECN Backward Explicit Congestion Notification BERT Bit Error Rate Tester BFE Blacker Front End BGP Border Gateway Protocol BRI Basic Rate Interface BSC Binary Synchronous Communications BSTUN Block Serial Tunnel CCITT Consult...

Page 412: ...ssed Serial Line Internet Protocol CSNP Complete Sequence Numer PDU CSU Channel Service Unit CUD Call User Packet D bit Data Bit DCA Defense Communications Agency DCE Data Circuit Terminating Equipment DDN Defense Data Network DDN Defense Data Network DDR Dial on Demand Routing DDS Digital Data Service DE Discard Eligibility DHCP Dynamic Host Configuration Protocol DLCI Data Link Connection Identi...

Page 413: ...h Speed Serial Interface ICMP Internal Control Message Protocol IETF Internet EngineeringTask Force IGRP Internet Gateway Routing Protocol IP Internet Protocol IPCP IP Control Protocol IPX Internet Packet Exchange IRDP ICMP Router Discovery Protocol ISDN Integrated Services Digital Network IS IS Intermediate System to Intermediate System ISO International Organization for Standardization ISP Inter...

Page 414: ...vel Level2 Area Router Level LLC2 Logical Link Control type 2 LMI Local Management Interface LQM Link Quality Monitoring LQR Link Quality Reports LSP Link State PDU LU Logical Unit MAC Media Access Control M bit More Data Bit MBRI Multiport BRI MIP MultiChannel Interface Processor MLP Multilink PPP MMP Multichasis Multilink PPP MOP Maintenance Operation Protocol MTU Maximum Transmission Limit NAS ...

Page 415: ...ory OSI Open System Interconnection OSPF Open Shortest Path First PAD Packet Assembler Disassembler PAP Password Authentication Protocol PDN Public Data Network PDU Protocol Data Unit PLP Packet Level Protocol POP Point of Presence POP Point of Presence PPP Point to point Protocol PRI Primary Rate Interface PSN Packet Switched Network PSNP Partial Sequence Number PDU PU Physical Unit PVC Permanent...

Page 416: ...rial Line Internet Protocol SMDS Switched Multimegabit Data Service SMTP Simple Mail Transfer Protocol SNA Systems Network Architecture SNAP Subnetwork Access Protocol SNMP Simple Network Management Protocol SR TLB Source Route Translational Bridge SRB Source Route Bridging SRT Source Route Transport SVC Switched Virtual Circuit TAC Terminal Access Controller TACACS Terminal Access Controller Acce...

Page 417: ...B 7 2524UM UDP User Datagram Protocol UP Usage Parameter URL Universal Resource Locator VCN Virtual Circuit Nember VPDN Virtual Private Dial up Network VTY Virtual Terminal WAN Wide Area Network XNS Xerox Network Systems XOT X 25 Over TCP ...

Page 418: ...AI2524 Router Card User s Manual Page B 8 August 1997 2524UM ...

Reviews:

No comments