DCR 1700系列路由器配置手册

Transcription

1 HDLC...8 SLIP...9 PPP...11 X Frame Relay...16 ISDN...19 PSTN RIP...24 OSPF...25 DEIGRP CISCO EIGRP...26 BGP NAT...34 VPN(IPSec)...35 VPN(GRE)...38 QoS...40 AAA RADIUS TACACS VoIP...43 VLAN...45 Internet...46 PSTN Internet...46 ISDN Internet...47 DDN Internet...48 FR Internet VoIP...54 RAS CE1...58

2 DCR 2600 DCR-2630 DCR-2650 Console AUX 10/100M RJ45 DCR DCR DCR Slot1 Slot2 MR-WIC-1ETH 1 10Base-T MR-WIC-2ETH 2 10Base-T MR-WIC-1E1T 1 10Base-T1/ MR-WIC-1T 1 / MR-WIC-2T 2 / MR-WIC-1CE1 1 E1 MR-WIC-1B-S/T 1 ISDN BRI S/T MR-EIC-8ASY 8 MR-VIC-2FXS 2 FXS / MR-VIC-2FXO 2 FXO / MR-VIC-2E&M* 2 E&M / DCR Slot1 Slot2 Slot3 MR-FIC-1FE-TX 1 10/100Base-T LAN MR-FIC-1FE-FX 1 100Base-FX LAN MR-WIC-1ETH 1 10Base-T MR-WIC-2ETH 2 10Base-T MR-WIC-1E1T 1 10Base-T1/ MR-WIC-1T 1 / MR-WIC-2T 2 / MR-EIC-8ASY 8 MR-VIC-2FXS 2 FXS / MR-VIC-2FXO 2 FXO / MR-VIC-2E&M* 2 E&M / 2600 / MR-NM-1FE-TX 1 10/100Base-TX LAN MR-NM-1FE-FX 1 10/100Base-FX LAN MR-NM-1E2T 1 +2 MR-NM-1E1T1B-S/T ISDN BRI S/T

3 MR-NM-4T MR-NM-2T1B-S/T MR-NM-8A/S MR-NM-1CE1 MR-NM-2CE1 MR-NM-4CE1 MR-NM-4B-S/T MR-NM-8ASY MR-NM-16ASY MR-VIM-2FXS MR-VIM-4FXS MR-VIM-2FXO MR-VIM-4FXO MR-VIM-2FXS&2FXO MR-VIM-2E&M* MR-VIM-4E&M* 4 2M / 2 +1 ISDN BRI S/T 8 128K / 1 E1 PRI 2 E1 PRI 4 E1 PRI 4 ISDN BRI S/T FXS / 4 FXS / 2 FXO / 4 FXO / 2 FXS+2 FXO / 2 E&M / 4 E&M / 5 DCR 2600 Console Telnet Telnet Modem HTTP console 1. Console Console PC 1-1 DCR-2650 RS232 console console 1-1 Console Win95 Win : 1 Press RETURN to get started DCR 2600 enable 2. Telnet IP Telnet

4 PC IP IP DCR-2650 IP: /24 GATEWAY: Telnet RJ / telnet HUB 1-2 -> ->telnet Telnet IP Telnet 3 Telnet Telnet 1-3 DCR DCR DDNFR X.25 ping DCR telnet DCR Telnet IP Telnet w1: /30 DCR DSU/CSU DDN FR/X.25 DSU/CSU w1: /30 DCR PSTN PSTN 1-4 DCR-2650 Modem aux TEL: PSTN Modem TEL: w1 f0/0: / (1)

5 Router# interface Async 0/0 no ip address no ip directed-broadcast line dial async mode interactive (2)MODEM AUX MODEM 3, MODEM Windows HyperTerminal-> test-> Modem U.S. robotics 56K FAX EXT-> Windows Telnet 5HTTP IP HTTP IP HTTP 8080 HTTP // DCR 2600 TFTP Zmodem TFTP 1TFTP TFTP Server DCR-2650 IP: /24 GATEWAY: RJ / (1) Console PC PC (2) PC TFTP DCR 2600 TFTP (3) PC TCP/IP 1-5 IP:

6 (4) DCR-2650 PC IP 1-5 IP: (5) Router# copy tftp flash Source file name[ ]? Destination file name[abc.bin]? 6 IOS Router_config#boot system flash? WORD -- filename 1 # 2 2Zmodem WINDOWS 9XNT4.0WIN2000 (Hyper Terminal) (1) monitor#download c0 router.bin flash speed[9600]? ( ) main.bin Zmodem

7 ZMODEM:successfully receive 36 blocks,18370 bytes DCR IOS 2 CTRL+Z CTRL+P EXIT 3 Chinese/english show version show running-config show config show interface [intf type][slot number]/ [port number] show [protocol type][] IP show ip route show users 4 ping [address] traceroute [address] debug [protocol type][] 5 IP config interface [intf type][slot num]/[port num] encapsulation [protocol type] ip address [network address][network mask]

8 HDLC ISO HDLCIBM SDLCISO HDLC SDLC ISO HDLCLLC Cisco HDLCLLCCisco HDLC DCR 2600 HDLCCISCO HDLC HDLCPPP InternetHDLC 1 HDLC HDLC HDLC encapsulation hdlc debug hdlc [error/packet] show hdlc [queue/version] 2 Router#sh int s1/0 Serial1/0 is up, line protocol is up Hardware is SCC Mode=Sync DTE DTR=UP,DSR=UP,RTS=UP,CTS=UP,DCD=UP Interface address is /30 MTU 1500 bytes, BW 64 kbit, DLY 2000 usec Encapsulation HDLC, loopback not set Keepalive set(10 sec) 1 minute input rate 15 bits/sec, 0 packets/sec 1 minute output rate 17 bits/sec, 0 packets/sec 569 packets input, bytes, 3 unused_rx, 0 no buffer 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 667 packets output, bytes, 8 unused_tx, 0 underruns PowerQUICC SCC specific errors: 0 recv allocb mblk fail 0 recv no buffer 0 transmitter queue full 0 transmitter hwqueue_full 3: 2M DDN 2-1

9 s1/0: /30 s1/0: /30 DCR DSU/CSU DDN DSU/CSU 2-1 DCR DCR Router1# ip address encapsulation hdlc ip address ip route serial 1/0 DCR Router2# ip address encapsulation hdlc ip address ip route default serial 1/0 SLIP SLIP DCR 2600 SLIP CISCO SLIP 1 SLIP SLIP SLIP encapsulation slip debug slip [error/event/packet] show slip 2

10 Router#sh int s1/0 Serial1/0 is up, line protocol is up Hardware is SCC Mode=Async DTE DTR=UP,DSR=UP,RTS=UP,CTS=UP,DCD=UP Interface address is /30 MTU 1500 bytes, BW 64 kbit, DLY 2000 usec Encapsulation SLIP, loopback not set Keepalive set(10 sec) 1 minute input rate 15 bits/sec, 0 packets/sec 1 minute output rate 17 bits/sec, 0 packets/sec 569 packets input, bytes, 3 unused_rx, 0 no buffer 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 667 packets output, bytes, 8 unused_tx, 0 underruns PowerQUICC SCC specific errors: 3 : 0 recv allocb mblk fail 0 recv no buffer 0 transmitter queue full 0 transmitter hwqueue_full SLIP 2-2 s1/0: /30 DCR DSU/CSU DDN DSU/CSU 2-2 s1/0: /30 DCR DCR Router1: ip address encapsulation slip ip address physical-layer mode async ip route serial 1/0 DCR Router2: ip address

11 encapsulation slip ip address physical-layer mode async ip route default serial 1/0 PPP PPP(Point-to-Point Protocol)SLIP(Serial Line IP protocol) (router-to-router) (host-to-network) CHAP(Challenge Handshake Authentication Protocol)PAP(Password Authentication Protocol) PPP 1 PPP encapsulation ppp ppp multilink ppp multilink ppp authentication [pap/chap/ms-chap] chap ppp chap hostname [hostname] pap ppp pap sent-username [usename]password[password] username [username] password [password] IP peer default ip address [a.b.c.d/pool] ppp callback [accept/initiate/request] IPCP ppp ipcp rfc-default LCP ppp lcp [rfc-default/close/echo/listen/open] IP show ip local pool ppp show ppp [multilink\queue\status\version] ppp debug ppp [authentication\cbcp\error\packet\ Multilink\ negotiation\raw] IP ip local pool [name\default] / shutdown/no shutdown show interface [int type][slot num][port num] 2 CHAP/PAP, PPP line dial DCR DCR PPP CHAP CHAP prompt CHAP password 2-3

12 s1/0: /30 s1/0: /30 DCR DSU/CSU PPP DSU/CSU DCR DCR : Router1# 2-3 username digitalchina1 password legend interface Serial1/0 ip address no ip directed-broadcast encapsulation ppp ppp authentication chap ppp chap hostname digitalchina2 DCR : Router2# username digitalchina2 password legend interface Serial1/0 ip address no ip directed-broadcast encapsulation ppp ppp authentication chap ppp chap hostname digitalchina1 PPP Router#sh int s1/0 Serial1/0 is up, line protocol is up Hardware is SCC Mode=Sync DTE DTR=UP,DSR=UP,RTS=UP,CTS=UP,DCD=UP Interface address is /16 MTU 1500 bytes, BW 64 kbit, DLY 2000 usec Encapsulation PPP, loopback not set Keepalive set(10 sec) LCP Opened CHAP Opened, Message: 'none' IPCP Opened local IP address: remote IP address:

13 X.25 1 minute input rate 47 bits/sec, 0 packets/sec 1 minute output rate 31 bits/sec, 0 packets/sec 90 packets input, 1856 bytes, 7 unused_rx, 0 no buffer 1 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 1 abort 476 packets output, 9651 bytes, 8 unused_tx, 0 underruns PowerQUICC SCC specific errors: 0 recv allocb mblk fail 0 recv no buffer 0 transmitter queue full 0 transmitter hwqueue_full X.25 OSI X.25 X.25 LAPBLink Access Procedure, Balanced DTE/DCE X.25 X.25 DTE DCE DTE X.25 DTE DCE MODEMX.25 DCR 2600 DTE V.35 RS232DCEMODEM DTE DCR 2600 PVC SVC PVC SVC PVC DDN SVC x.25 x.121 x.25 SVCx.121 x.25 x.121 DTE x.121 htc x.25 X.25x.25 x.25 PVCSVC x.25 X.25 SVC, SVC X.2564K DDN 1: X.25 encapsulation x25 x25 interface [dte/dce] X.25 x25 address [address] x25 map [ip address] svc [svc num] x25 htc [VC number] / shutdown/no shutdown x25 debug x25 [event/normal] x25 show x25 2X25 Serial1/0 is up, line protocol is up Hardware is SCC Mode=Sync DTE

14 DTR=UP,DSR=UP,RTS=UP,CTS=UP,DCD=UP Interface address is /16 MTU 1500 bytes, BW 64 kbit, DLY 2000 usec Encapsulation X25, loopback not set, LAPB DCE, module 8, k 7, N1 1500, N2 16, T1 3 state EST, VS 4, VR 7, Remote VR 4 Keepalive not set IFRAMEs 8/12, RRs 7/7, RNRs 0/0, REJs 0/0 FRMRs 0/0, SABMs 1/100, SABMEs 0/0 UAs 1/1, DMs 0/0, DISCs 0/0 X25 DCE, address , module 8, window size 2, packet size 128 Virtual Circuits: htc 16, pvc 0, svc 16 Timers: T20 180s, T23 180s, idle VC timeout 100s Data 5/5, RR 0/5, RNR 0/0 Call_request 0/1, Call_confirm 1/0 Clear_request 0/0, Clear_confirm 0/0 Reset_request 0/0, Reset_confirm 0/0 Restart_request 1/1, Restart_confirm 0/0 Interrupt_request 0/0, Interrupt_confirm 0/0 1 minute input rate 14 bits/sec, 0 packets/sec 1 minute output rate 8 bits/sec, 0 packets/sec 373 packets input, 7339 bytes, 6 unused_rx, 0 no buffer 1 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 1 abort 806 packets output, bytes, 8 unused_tx, 0 underruns PowerQUICC SCC specific errors: 0 recv allocb mblk fail 0 recv no buffer 0 transmitter queue full 0 transmitter hwqueue_full 3 svc 2-4 DCR-2650 DCR s1/0: /26 address: f0/0: /24 X.25 address: s1/0: /26 f0/0: /24 DCR address: s1/0: /26 f0/0: /24 DCR-2650 : Router# 2-4

15 ip address interface Serial1/0 ip address no ip directed-broadcast encapsulation x25 x25 address x25 interface dte x25 map x25 map ip route ip route DCR : Router1# ip address ip address no ip directed-broadcast encapsulation x25 x25 address x25 interface dte x25 map ip route DCR : Router2# ip address ip address no ip directed-broadcast encapsulation x25 x25 address x25 interface dte x25 map

16 ip route Frame Relay Frame Relay WAN OSI X.25 X.25 X.25 DLCIDLCI LMI DCE DTEDCR 2600 DTEV.35 RS-232CSU/DSU DCEDCE PVC 1 Frame Relay encapsulation frame-relay Frame Relay frame-relay intf-type [dte/dce/nni] Frame Relay LMI frame-realy lmi-type [q933a/ansi/dcisco] Frame Relay DLCI frame-relay local dlci [dlci num] cir [digital] frame-relay map [ip address] pvc [dlci number] broadcast frswitch in-port in-dlci out-port out-dlci ARP frame-relay inverse-arp FR debug frame-relay [event/lmi/packet/raw] FR show frame-relay/frswitch broadcast 1. : 2-5-1

17 DCR-2650 DCR s1/0:1: /30 s1/0:2: /30 DLCI:50 f0/0: /24 DLCI:60 Frame Relay DLCI:70 s1/0: /30 f0/0: /24 DCR DLCI:80 s1/0: /30 f0/0: /24 DCR-2650 : Router1# ip address interface Serial1/0 no ip directed-broadcast encapsulation frame-relay frame-relay lmi-type q933a frame-relay intf-type dte.1 ip address frame-relay local-dlci 50 cir 64k frame-relay map pvc 50 broadcast.2 ip address frame-relay local-dlci 60 cir 64k frame-relay map pvc 60 broadcast ip route ip route DCR : Router2# ip address

18 ip address incapsulation frame-relay frame-relay intf-type dte frame-relay lmi-type q933a frame-relay local-dlci 70 cir 64k frame-relay map pvc 70 broadcast ip route DCR : Router2# ip address ip address encapsulation frame-relay frame-relay intf-type dte frame-relay lmi-type q933a frame-relay local-dlci 80 cir 64k frame-relay map pvc 80 broadcast ip route V.28 CR-232FC-232FC V.35 CR-V35MT CR-V35FC s1/0: /30 s1/0: /30 DCR DTE DCE DCR DCR : Router1: encapsulation frame-relay ip address frame-relay lmi-type ansi

19 frame-relay intf-type dte frame-relay map broadcast DCR : Router2: frswitch encapsulation frame-relay ip address frame-relay lmi-type ansi frame-relay intf-type dce frame-relay map broadcast physical-layer speed 9600 ISDN 1ISDN ISDN ISDN BRI 2 B 1 D 2B+D BRI B 64Kbps, D 16Kbps ISDN PRI 23 B 1 D 1.544Mbps D 64Kbps ISDN PRI 30 B 1 64Kbps D 2.048Mbps ISDN PRI 30B+DDCR 2600 (BRI) 2 PPP S/T U encapsulation ppp ppp multilink ppp multilink dialer map next-hop-address [ name hostname ] [ broadcast ] [ dialer-string] ppp authentication [chap/pap/ms-chap] username [username] password [password] dialer string [dialer string] / shutdown/no shutdown isdn show isdn [status/timers] ISDN Isdn switch-type [basic-5ess/basic-1tr6/basic-dms100/ basic-net3/basic-ni/kdd/ntt/vn2/vn3]

20 isdn call interface [intf type][slot num]/[port num][dialer string] isdn disconnect interface [intf type][slot num]/[port num][all/b1/b2] ISDN DCR DCR DCR CHAP DCR s1/0: /24 s1/0: /24 TEL: TEL: DCR NT1 DCR Router1# ISDN isdn switch-type basic-5ess ip route NT1 2-6 username DIGITALCHINA password DIGITALCHINA ip address interface bri 2/0 ip address encapsulation ppp ppp authentication chap line dial dialer string DCR-2650 : Router2# isdn switch-type basic-5ess username DIGITALCHINA password DIGITALCHINA ip route ip address interface bri 2/0 ip address encapsulation ppp ppp chap hostname DIGITALCHINA line dial DCR

21 PSTN dialer string (PSTN) (DDR) ISP 1. physical-layer mode async line dial dialer string [phone number] dialer idle-timeout [seconds] dialer map next-hop-address [ name hostname ] [ broadcast ] [ dialer-string] dialer fast-idle [seconds] dialer enable-timeout [seconds] dialer wait-for-carrier-time [seconds] show dialer interface [type] [number] ppp callback [request\accept\initiate] username[name]password[word]callback-dialstring[number] chat-script [script name] 2. DDRdial-on-demand routing W1 W2 DDR DCR DCR DCR CHAP DCR s1/0: /24 TEL: DCR DCR : Router1# Modem PSTN ip route Modem 2-7 username DIGITALCHINA password DIGITALCHINA ip address physical-layer mode async encapsulation ppp s1/0: /24 TEL: DCR

22 ip address ppp authentication cha p line dial dialer string DCR : Router2# username DIGITALCHINA password DIGITALCHINA ip route ip address physical-layer mode async encapsulation ppp ip address ppp chap hostname DIGITALCHINA line dial dialer string

23 1 ip route [destination network][network mask] [gateway /interface] [metic] no ip route [destination network][network mask][gateway/interface] [metic] ip route default [gateway /interface] no ip route default [gateway /interface] DCR s1/0: /30 f0/0: /24 DDN FR/X.25 DCR s1/0: /30 f0/0: /24 DCR Router1# 3-1 ip route ip address encapsulation hdlc ip address DCR : Router2# ip route ip address encapsulation hdlc ip addrss

24 RIP RIPRouting Information Protocol Interior Gateway Protocol IGP distance-vector RIP (UDP) RIP 0 16 RIP 1 rip router rip RIP network [network number] [network mask] RIP neighbor [network address] RIP version [1/2] redistribute [bgp/deigrp/rip/ospf/static/connect] ip rip [receiver/send] verison [1/2] summary auto-summary/no auto-summary RIP ip rip authentication [message-digest/simple] md5 ip rip message-digest-key [key-id] md5 [key] Ip rip password [string] ip rip passive ip rip split-horizon timers [holddown/expire] 2 RIP 3-2 s1/0: /30 f0/0: /24 DCR DSU/CSU DCR Router1# ip address router rip encapsulation hdlc DDN FR/X.25 ip address DSU/CSU 3-2 s1/0: /30 f0/0: /24 DCR

25 network redistribute connect version 2 DCR Router2# ip address router rip encapsulation hdlc ip address network redistribute connect version 2 OSPF OSPF Open Shortest Path First (Interior Gateway Protocol IGP)(autonomous syste AS) RIP() OSPF OSPF RIP OSPF OSPF OSPF 1 OSPF router ospf [Process ID] ID network [Network number][ network mask] area [area number] ospf ip ospf cost [cost] ospf ip ospf authentication-key [key] ospf MD5 ip ospf message-digest-key [key-id] md5 [key] ospf area [area-id] authentication [simple/message-digest] hello ip ospf hello-interval < > dead ip ospf dead-interval < > cost ip ospf cost < > OSPF ip ospf network [broadcast /non-broadcast /point-to-point /point-to-multipoint] ip ospf passive redistribute [rip/ospf/bgp/deigrp/connect/static] neighbor [ip address] area [area-id] range [address] [mask] summary-address prefix mask [not advertise] ospf ip ospf priority <0-255>

26 2 OSPF 3-3 DCR s1/0: /30 f0/0: /24 DDN FR/X.25 DCR s1/0: /30 f0/0: /24 DCR Router1# router ospf network area 0 redistribute connect ip address encapsulation hdlc ip address DCR Router2# router ospf 1 network area 0 redistribute connect ip address encapsulation hdlc ip addrss DEIGRP CISCO EIGRP DEIGRPDigitalChina Enhanced Interior Gateway Routing Protocol

27 DEIGRP DEIGRP DEIGRP DEIGRP DUALDiffused Update Algorithm DEIGRP DEIGRP DEIGRP IP DEIGRP Hello DEIGRP 1 DEIGRP router deigrp [as-number] network [network-number][ network-mask] DEIGRP DEIGRP ip deigrp bandwidth-percent [percent] DEIGRP metric weights [k1][ k2 ][k3] [k4] [k5] no auto-summary hello ip deigrp hello-interval [seconds] ip deigrp hold-time [seconds] ip deigrp summary-address [address] [mask] offset-list {type number *} {in out} access-list-name offset 2 DEIGRP 3-4 DCR s1/0: /30 f0/0: /24 DDN FR/X.25 DCR s1/0: /30 f0/0: /24 DCR Router1# router deigrp 1 3-4

28 network redistribute connect ip address encapsulation hdlc ip address DCR Router2# router deigrp 1 network redistribute connect ip address encapsulation hdlc ip addrss BGP BGP RFC (EGP) BGP as-path) DCR 2600 RFC1771 BGP 4BGP BGP AS AS AS AS BGP 4 CIDR CIDR BGP IP CIDR OSPF, IGRP, ISIS-IP RIP2 BGP access-listaspath-listprefix-list access-listprefix-list Nexthop route-map MEDLocal Preference Weight BGP ospfrip redistribute BGP network aggregate

29 BGP BGP route-map BGP distance BGP 1 BGP router bgp [autonomous-system number] BGP network [network-number/masklen] [route-map route-map-name] BGP neighbor {ip-address peer-group-name} remote-as [number] BGP neighbor {ip-address peer-group-name} soft-reconfiguration [inbound] BGP clear ip bgp [address] neighbor [ip address/peer-group-name] weight [weight] BGP clear ip bgp * BGP IGP no synchronization 2 BGP 3-5 DCR s1/0: /30 f0/0: /24 DDN FR/X.25 DCR s1/0: /30 f0/0: / DCR Router1# router bgp 1 network redistribute connect ip address encapsulation hdlc ip address DCR Router2# router bgp 1 network redistribute connect

30 ip address iinterface serial 1/0 encapsulation hdlc ip addrss IP 3-6 f0/0: /24 Router1 s1/0: /30 OSPF WAN s1/0: /30 Router2 f0/0: /24 rip2 f0/0: /24 f0/0: /24 static Router3 Router4 e1/0: / OSPF RIP Router1 w1 Router2 w1 OSPF Router1 Ethernet 0 RIP 2 Router3 RIP2 Router2 Router /24 Router4 Router1 Router3 OSPF RIP Router2 Router1 Router1# ip address encapsulation hdlc ip address router rip network

31 version 2 redistribute ospf router ospf 1 network area 0 redistribute rip Router2 Router2# ip address ip address encapsulation hdlc ip route router ospf 1 network area 0 redistribute static Router3 Router3# ip address router rip network version 2 Router4 Router4# interface fastehternet 0/0 ip address interface ethernet 1/0 ip address ip route default

32 1 ospf. 2VISMrip rip2 ospf 3ospfRIP X.25 SVC

33 IP IP IOS 1 ip access-list standard [name] deny/permit [any/[source] [mask] ] [log] ip access-list extended [name] deny/permit[protocol][source][source-mask][destination] [destination-mask]precedence[precedence]tos[tos] [established] [log] deny/ permit [ protocol] any any ip access-group [name] in/ out 2 IP FTP 4-1 DCR s1/0: /30 f0/0: / /24 DDN FR/X.25 DCR s1/0: /30 f0/0: /24 DCR Router1#

34 ip address ip access-group aaa in encapsulation hdlc ip address ip access-list extended aaa deny tcp any eq 23 NAT Internet IP (NAT) IP IP NAT RFC ip nat inside source static [local-ip] [global-ip] overload ip nat inside ip nat outside ip nat pool [name] [start-ip] [end-ip] [netmask] ip access-list standard [access-list-name] permit [source] [source-mask] ip nat inside source list [access-list-name] pool [name] ip nat outside source static [global-ip] [local-ip] ip nat translation timeout [seconds] udp/tcp/dns/finrst ip nat translation udp/tcp/dns/finrst-timeout [seconds] show ip nat statistics show ip nat translations [verbose] NAT clear ip nat translation * clear ip nat translation inside/outside [local-ip] [global-ip] 2 1 IP Internet, 4-2 DCR-2650 e1 s1/0 DDN Internet f0/0: /24 DSU/CSU

35 DCR-2650 Router# ip address ip nat inside encapsulation ppp ip address ppp pap sent-username ip nat outside ip access-list standard test1 permit any 4-2 ip nat inside source list test1 interface serial 1/1 ip route default serial 1/0 VPN(IPSec) IPSec IP AHESPIKE IPSec DES3DES MD5SHA PFS IPSec IPSec IKE IKE 1 ip access-list extend [name] permit/deny [protocol][source][source -mask][destination][destination -mask] Crypto ipsec transform-set [name] Transform-type [parameter]

36 Crypto map [name] [seq-num] ipsec-manual IKE Crypto map [name] [seq-num] ipsec-isakmp AH ESP Mode tunnel/transport Match address [name] Set peer [ip-address] Set transform-set [name] set security-association inbound/outbound ah [spi][hex-key-data] set security-association inbound/outbound esp[spi] [cipher key] [authenticator key] set security-association lifetime seconds [seconds] PFS ipsec ipsec set pfs group1/group2 debug crypto ipsec show crypto ipsec sa crypto map [map-name] IKE crypto isakmp policy [priority] encryption des/3des hash sha/md5 Diffre-Hellman group 1/2 IKE lifetime [seconds] IKE IKE authentication pre-share/rsa-sig/rsa-encr show crypto isakmp policy crypto isakmp key [keystring][peer-address] show crypto isakmp sa clear crypto isakmp map [map-name] peer [ip-address] debug crypto isakmp DCR e1 f0/0: /2 4 s1/0: /24 s1/0: /24 DCR f0/0: / / /24 DCR

37 Router1# ip address encapsulation hdlc ip address crypto map guize ip access-list extended vpn1 permit ip deny ip any crypto ipsec transform-set one // one transform-type esp-des esp-sha-hmac crypto map guize 100 ipsec-isakmp match address vpn1 set trasform-set one set peer crypto isakmp policy 10 encryption des hash md5 authentication pre-share group 2 lifetime 5000 crypto isakmp policy 20 authentication pre-share lifetime crypto isakmp key aaaaaa // wuz // // // IKE 10 // IKE 20 ip route DCR Router2#

38 ip address encapsulation hdlc ip address crypto map guize ip access-list extended vpn1 permit ip deny ip any crypto ipsec transform-set one // one transform-type esp-des esp-sha-hmac crypto map guize 100 ipsec-isakmp match address vpn1 set trasform-set one set peer crypto isakmp policy 10 encryption des hash md5 authentication pre-share group 2 lifetime 5000 crypto isakmp policy 20 authentication pre-share lifetime crypto isakmp key aaaaaa // wuz // // // IKE 10 // IKE 20 ip route VPN(GRE) GRE GRE Tunnul Tunnul IP Tunnul IP

39 Tunnul Tunnul 1 tunnul Interface tunnul id tunnul IP Ip address address netmask Tunnul source/destination address nemask Tunnul key key DCR e1 f0/0: /24 s1/0: /24 s1/0: /24 DCR f0/0: / / /24 DCR Router1# Interface fastethernet 0/0 Ip address Interface serial 1/0 Encapsulation hdlc Ip address Interface tunnul 1 Ip address tunnul source tunnul destination tunnul key 1234 Ip route tunnul 1 DCR Router2# Interface fastethernet 0/0

40 Ip address Interface serial 1/0 encapsulation hdlc ip address interface tunnul 1 ip address tunnul source tunnul destination tunnul key 1234 ip route tunnul 1 QoS QoS 1 fair-queue service policy [policy-name] policy-map [policy-name] class [class-name] bandwidth [bandwidth] queue-limit [packet-number] class-map [class-name] match protocol [protocol-type] class-map [class-name] match interface [interface-type] class-map [class-name] match access-group [list-name] random-detect CQ list-number custom-queue-list [list-number] 1-16 queue-list [number] queue [queue-number] limit [limit-number] queue-list [number] queue [queue-number] byte-count [number] queue-list [number] protocol [protocol-type] [queue-num] [keyword key-value] queue-list [number] interface [interface-type][interface-number][queue-number] queue-list [number] default [queue-number] 1 PQ list-number priority-group [list-number] 1-16 priority-list [list-num] queue-limit [high-num][mid-num][normal-num][low-num] priority-list [list-num] protocol [protocol-type] high/middle/normal/low

41 priority-list [list-num] interface [int-type][int-num] high/middle/normal/low priority-list [list-num] default [queue-number] normal show queue [int-type][int-num] CRTP CRTP CRTP CRTP CTCP CRTP CRTP CRTP show queueing [custom] show queueing [priority] show class-map [class-name] show policy-map [policy-name] ip rtp header-compression [cisco-format/iphc-format/passive] ip rtp compression-connection [num] show ip rtp header-compression [type-num][detail] debug ip rtp header- compression ip tcp header-compression [cisco-format/iphc-format/passive ip tcp compression-connection [num] show ip tcp header-compression [type-num][detail] debug ip tcp header- compression FTP1( ) DCR e1 f0/0: /24 s1/0: /24 s1/0: /24 DCR f0/0: / / / /24 DCR Router1# ip address interface Serial1/0 ip address encapsulation hdlc service-policy ftp bandwidth 64 class-map ftp1 match access-group 1 class-map ftp2 match access-group 2 4-5

42 policy-map ftp class ftp1 Bandwidth 44 class ftp2 Bandwidth 20 ip access-list extended 1 permit ip deny ip any any ip access-list extended 2 permit ip deny ip any any AAA RADIUS TACACS+ NAS Authentication AuthorizationAccounting RADIUS / RADIUS RADIUS AAA RADIUS TACACS+ TACACS+ 1 aaa authentication login default/[list-name][method1][method2] line aux/vty/tty/console [line-num][end-line-num] login authentication default/[list-name] PPP aaa authentication ppp default/[list-name][method1][method2].. PPP ppp authentication chap/pap/chap pap/pap chap default [list-name] aaa authentication enable default [method1 method2 ] aaa authentication password-prompt [text-string] username [name] password [word] IP radius server [ip address] auth-port [port-num] acct-port [port-num] radius key [string] Radius radius restransmit [num] radius radius timeout [seconds] Radius radius dead-time [minutes] radius vsa send [accounting authentication] Tacacs+ IP tacacs server [ip address] single-connection/multi-connection [port integer] [timeout integer][key string]

43 Tacacs+ integer] [timeout integer][key string] tacacs key [key string] Radius DCR-2650 f0/0: / /24 DCR-2650 Router1# ip address Radius aaa authentication login radius-login radius radius server radius key abcd line vty 1 4 login authentication radius-login VoIP 4-6 VoIP 1 dial-peer [num] pots Pots destination-pattern [string] port [slot]/[port] trim_prefix [num] VoIP dial-peer [num] voip IP session [destination address] codec [g729r8/g729-compatible/g723r53/g723r63/ ]

44 require-qos DCR e1 s1/0: /24 s1/0: /24 DCR DCR Router1# encapsulation hdlc ip address dial-peer 1 pots destination-parttern 1234 port 3/0 dial-peer 2 voip destination-parttern 5678 session codec g729-compatible DCR Router1# encapsulation hdlc ip address dial-peer 1 pots destination-parttern 5678 port 3/0 dial-peer 2 voip destination-parttern 1234 session codec g729-compatible 4-7

45 VLAN VLAN VLAN 802.1Q 1 interface Ethernet/fastethernet [slot][port]. [sub-num] 802.1q Vlan ID encapsulation dot1q [id] IP ip address [address][netmask] VLAN DCR-2650 f0/0.2: /24 f0/0.1: /24 switch VLAN /24 VLAN /24 DCR-2650 Router#.1 encapsulation dot1q 1 ip address encapsulation dot1q 2 ip address

46 Internet PSTN Internet 1 2 DDN, OFFICE ISDN DDN DCR-2650 s1/0:noip e1 Modem f0/0: /24 Internet DCR-2650 Router# ip address ip nat inside interface async 0/0 encapsulation ppp ppp pap sent-username ip address negotiated line dialer dialer string 169 physical-layer speed ip nat outside ip access-list standard test1 permit any ip nat inside source list test1 interface serial 1/1 ip route default async 1/0 5

47 1 Internet 2 chat-script DNS ( DNS DNS) ISDN Internet 1 1 ISDN BRI MR-WIC-1B-S/T 2 RJ45 NT1 S/T S/T Internet 64K Internet, ISDN DCR-2630 ISDN S/T NT1 e1 f0/0: /24 Internet DCR-2630 Router# ip address ip nat inside encapsulation ppp ppp pap sent-username ip address negotiated line dialer physical-layer mode async dialer string 169 ip nat outside ip access-list standard test1 permit any ip nat inside source list test1 interface serial 1/1

48 ip route default serial 1/0 isdn switch-type basic-5ess 5 PC DNS: PC IP ~ DDN Internet 1 1 MR-WIC-1T 2 DDN, Internet (NAT) IP IP WEB : DCR-2650 s1/0 e1 f0/0: /24 DSU/CSU DDN Internet IP DCR-2650 Router# ip address ip nat inside encapsulation ppp ip address ppp pap sent-username ip nat outside ip access-list standard test1 permit any ip nat inside source list test1 interface serial 1/1

49 ip route default serial 1/0 IP DCR-2650 Router# ip address ip nat inside encapsulation ppp ip address ppp pap sent-username ip nat outside ip access-list standard test1 permit any ip nat pool ippool ip nat inside source list test1 pool ippool overload ip nat inside source static //WEB IP ip route default serial 1/ PC DNS: PC IP ~ FR Internet 1 MR-WIC-1T 2 FR, Internet IP 5-4 3

50 DCR-2650 s1/0 e1 f0/0: /24 DSU/CSU FR Internet DCR-2650 Router# ip address ip nat inside encapsulation frame-relay ip address frame-relay lmi-type q933a frame-relay intf-type dte frame-relay map ip nat outside ip access-list standard test1 permit any ip nat inside source list test1 interface serial 1/1 ip route default serial 1/0 5 PC DNS: PC IP ~

51 1 1 MR-WIC-2T 1 MR-WIC-1T 1 ISDN MR-WIC-1B-S/T 2 Router1 DDN Internet Router2 ISDN Internet DDN f0/0: /24 s1/0: /24 DSU/CSU DCR-2650 DDN s2/0: /30 DSU/CSU FR Internet f0/0: /24 s1/0: /24 DSU/CSU DCR DCR-2650 Router1# 6-1 ip address ip nat inside interface serial 2/0 ip address encapsulation hdlc ip nat outside ip address encapsulation frame-relay frame-relay lmi-type q933a frame-relay intf-type dte frame-relay map pvc 100 ip nat inside source list test1 interface serial 2/0 ISDN

52 ip route ip route default serial 2/0 ip access-list standard test1 permit any DCR-2630 Router2# ip address ip nat inside ip address encapsulation frame-relay frame-relay intf-type dte frame-relay lmi-type q933a frame-relay map pvc 100 interface bri 2/0 encapsulation ppp ip address negotiated ppp pap sent-username line dial dialer string 169 ip nat outside isdn switch-type basic-5ess// ip route ip route default bri 2/0 ip nat inside source list test1 interface bri 2/0 ip access-list standard test1 permit any 1 : 1 MR-WIC-1ETH1 MR-WIC-2T 2

53 DCR WEB 1 1 RIP f0/0: /24 s1/0: /24 DCR-1750 s1/0: /24 s1/1: /24 DDN f0/0: /24 DCR-2650 DDN e0: /24 s1/0: /24 CISCO DCR-2650 Router# ip address // ip address encapsulation hdlc interface serial 1/1 encapsulation hdlc ip address router rip network network network version 2 // // 1 1 MR-WIC-1T 2 DDN

54 PSTN DDN PSTN DDN /24 DDN/FR /24 s1/0 f0/0 AUX DCR DCR PSTN 4 DCR Router1# 6-3 ip address encapsulation hdlc ip address interface async 0/0 encapsulation ppp ip address negotiated ppp pap sent-username abc abc line dial dialer string ip route serial 1/0 1 ip route async 0/0 190 VoIP 1 1 MR-WIC-1T1 MR-VIC-2FXS

55 2 HDLC TCP/IP MR-VIC-2FXS 2 PSTN Telephone Telephone s1/0: /24 DCR DDN s1/0: /24 DCR DCR Router1# encapsulation hdlc 6-4 ip address dial-peer 1 pots destination-pattern 1234 port 3/0 port 3/1 dial-peer 2 voip destination-pattern 5678 session codec g729-compatible // // // IP RAS MR-EIC-8ASY

56 3 Modem f0/0: / PSTN Modem... DCR-2650 Modem DCR-2650 Router# ip address username abc password abc // interface async 1/0 encapsulation ppp ip address unnumbered fastethernet 0/0 ppp authentication chap async mode dedicated line dial peer default ip address interface async 1/1 encapsulation ppp ip address unnumbered fastethernet 0/0 ppp authentication chap async mode dedicated line dial peer default ip address interface async 1/2 encapsulation ppp ip address unnumbered fastethernet 0/0 ppp authentication chap async mode dedicated line dial

57 peer default ip address interface async 1/3 encapsulation ppp ip address unnumbered fastethernet 0/0 ppp authentication chap async mode dedicated line dial peer default ip address interface async 1/4 encapsulation ppp ip address unnumbered fastethernet 0/0 ppp authentication chap async mode dedicated line dial peer default ip address interface async 1/5 encapsulation ppp ip address unnumbered fastethernet 0/0 ppp authentication chap async mode dedicated line dial peer default ip address interface async 1/6 encapsulation ppp ip address unnumbered fastethernet 0/0 ppp authentication chap async mode dedicated line dial peer default ip address interface async 1/7 encapsulation ppp ip address unnumbered fastethernet 0/0 ppp authentication chap async mode dedicated line dial peer default ip address

58 1 1 MR-WIC-1T 2 HTTP f0/0: /24 s1/0: /30 Internet DCR DCR-2650 Router# 6-6 ip address encapsulation hdlc ip address ip route serial 1/0 ip access-list abc // deny tcp eq 80 any //80 Internert CE1 1 1 CE1 MR-WIC-1CE11 MR-WIC-1ETH 2 CE

59 DCR /24 1 FR DCR /24 E1 DCR /24 DCR Router# ip addresss interface ethernet 1/0 ip address controller E1 2/0 channel 1 timeslots 1-6 channel 2 timeslots 7-12 channel 3 timeslots channel 4 timeslots channel 5 timeslots interface serial 2/0:1 encapsulation frame-relay ip address frame-relay intf-type dte frame-relay lmi-type ansi frame-relay map interface serial 2/0:2 encapsulation frame-relay ip address frame-relay intf-type dte frame-relay lmi-type ansi frame-relay map

60 interface serial 2/0:3 encapsulation frame-relay ip address frame-relay intf-type dte frame-relay lmi-type ansi frame-relay map interface serial 2/0:4 encapsulation frame-relay ip address frame-relay intf-type dte frame-relay lmi-type ansi frame-relay map interface serial 2/0:5 encapsulation frame-relay ip address frame-relay intf-type dte frame-relay lmi-type ansi frame-relay map