Enterasys X-Pedition XSR-1850, Getting Started Manual

Page: 79 / 114

XSR Rebooting Characteristics
XSR Getting Started Guide 3-33
XSR(config)#access-list 103 permit ip any 10.10.10.0 0.0.0.255
Create crypto maps for each ACL entry with the more protective tunnel mode set by default. Match
statements render associated ACLs bi-directional:
XSR(config)#crypto map test 101
XSR(config)#set transform-set ez-esp-3des-sha-pfs
XSR(config)#match address 101
XSR(config)#crypto map test 102
XSR(config)#set transform-set ez-esp-3des-sha-pfs
XSR(config)#match address 102
XSR(config)#crypto map test 103
XSR(config)#set transform-set ez-esp-3des-sha-pfs
XSR(config)#match address 103
Create the multi-point VPN virtual port required to terminate many clients:
XSR(config)#interface vpn1 multi-point
XSR(config)#description “VPN Virtual Interface Int0”
XSR(config)#ip address 10.10.10.1 255.255.255.0
XSR(config)#ip rip send version 2
XSR(config)#ip rip receive version 2
XSR(config)#ip multicast-redirect tunnel-endpoint
Enable RIP routing on all networks except the public interface:
XSR(config)#router rip
XSR(config-router)#network 172.16.10.0
XSR(config-router)#network 10.0.0.0
XSR(config-router)#passive-interface fastethernet2
XSR(config-router)#no receive-interface fastethernet2
XSR(config-router)#distribute-list 1 out vpn1
Finally, attach the crypto map statement to the public interface:
XSR(config-router)#interface fastethernet 2
XSR(config-if<F2>)#crypto map test
XSR#copy running-config startup-config
XSR Rebooting Characteristics
When the XSR reboots, it conforms to the behavior described in this section. The output displayed
at the CLI describes router initialization.
Initialization Output
The XSR displays the following output when it initializes (cold reboot):
X-Pedition Security Router Bootrom
Copyright 2002 Enterasys Networks Inc.
HW Version: 9002854-02 REV0A Serial Number: 0001F4000102
CPU: IBM PowerPC 405GP Rev. D
VxWorks version: 5.4
Bootrom version: 1.20