Cisco 1604 - 1604 Bridge/router Servisní příručka

About This Guide ixAbout This GuideThis chapter discusses the objectives, audience, organization, and conventions of the Dial SolutionsQuick Configura

xviii Dial Solutions Quick Configuration GuideGetting HelpRouter(config-controller)# cas-group 1 timeslots 1-24 type e&m-fgb ?dtmf DTMF tone signa

Step 3—Configuring the Site Profile hq-sanjoseDial Solutions Quick Configuration Guide4-8VerifyTo verify the configuration:• Enter the show security co

Cisco 766 Configuration 4-9Step 4—Testing Connections to the Cisco AS5300 Ringback Number CLI Validate Number CLICallback O

Step 4—Testing Connections to the Cisco AS5300Dial Solutions Quick Configuration Guide4-10Step 2 Change to the hq-sanjose profile. Enter the show conne

Cisco 766 Configuration 4-11Step 5—Confirming the Final Running ConfigurationTroubleshooting and Debugging Tips• Sometimes calls fail because the pub

Step 5—Confirming the Final Running ConfigurationDial Solutions Quick Configuration Guide4-12set ip netmask 255.255.0.0set ip pat offset ip rip update

Cisco 766 Configuration 4-13Step 5—Confirming the Final Running ConfigurationTIMEOUT 2 THRESHOLD 48TIMEOUT 1 DURATION 0TIMEOUT 2 DURATION 0TIMEOUT 1

Step 5—Confirming the Final Running ConfigurationDial Solutions Quick Configuration Guide4-14SET IP FRAMING ETHERNET_IISET USER StandardSET PROFILE ID

CHAPTER IP, IPX, and AppleTalk Dial-Up Environments 5-15IP, IPX, and AppleTalk Dial-UpEnvironmentsRemote node users are telecommuters and mobile users

5-2 Dial Solutions Quick Configuration GuideConfiguring Point-to-Point Protocol (PPP) AccessFigure 5-1 Remote Macintosh as a Node on the Local Network

IP, IPX, and AppleTalk Dial-Up Environments 5-3Configuring Point-to-Point Protocol (PPP) AccessFigure 5-2 PC Dialing In to Access IP Network Resource

xixUnderstanding Command ModesUnderstanding Command ModesThe Cisco IOS user interface is divided into many different modes. The commands available to

5-4 Dial Solutions Quick Configuration GuideConfiguring Point-to-Point Protocol (PPP) AccessStep 5 Configure an OSPF network type of point-to-multipoin

IP, IPX, and AppleTalk Dial-Up Environments 5-5Configuring Point-to-Point Protocol (PPP) AccessAssigning IP Addresses to Dial-In ClientsThis section

5-6 Dial Solutions Quick Configuration GuideConfiguring Point-to-Point Protocol (PPP) AccessYou also must configure the client software on client PCs t

IP, IPX, and AppleTalk Dial-Up Environments 5-7Configuring Point-to-Point Protocol (PPP) AccessConfiguring NetBIOS over TCPTo enable clients running N

5-8 Dial Solutions Quick Configuration GuideConfiguring Point-to-Point Protocol (PPP) AccessAccessing IPX ResourcesThis section describes how to config

IP, IPX, and AppleTalk Dial-Up Environments 5-9Configuring Point-to-Point Protocol (PPP) AccessStep 3 Set the IPX network number and encapsulation to

5-10 Dial Solutions Quick Configuration GuideConfiguring Point-to-Point Protocol (PPP) AccessConfiguring the Asynchronous InterfacesThis section assume

IP, IPX, and AppleTalk Dial-Up Environments 5-11Configuring Point-to-Point Protocol (PPP) AccessThis configuration procedure is intended only as a sta

5-12 Dial Solutions Quick Configuration GuideConfiguring Point-to-Point Protocol (PPP) AccessThe ServerTypes dialog box appears, as shown in Figure 5-

IP, IPX, and AppleTalk Dial-Up Environments 5-13Configuring AppleTalk Remote Access (ARA) for Macintosh AccessConfiguring AppleTalk Remote Access (ARA

xx Dial Solutions Quick Configuration GuideUsing the No and Default Forms of CommandsFor more information regarding command modes, refer to the “Using

5-14 Dial Solutions Quick Configuration GuideConfiguring AppleTalk Remote Access (ARA) for Macintosh AccessStep 3 Bring up the interface Ethernet 0, a

IP, IPX, and AppleTalk Dial-Up Environments 5-15Dial-In Configuration ExamplesDial-In Configuration ExamplesThe configuration examples in this section

5-16 Dial Solutions Quick Configuration GuideDial-In Configuration Examplesusername hansolo password 7 095E470B1110username leiaorga password 7 021505

IP, IPX, and AppleTalk Dial-Up Environments 5-17Dial-In Configuration ExamplesIPX Dial-in ExampleThe following configuration example enables a PC clie

5-18 Dial Solutions Quick Configuration GuideDial-In Configuration ExamplesProtocol ConfigurationThe following sample configuration enables an IPX clien

IP, IPX, and AppleTalk Dial-Up Environments 5-19Dial-In Configuration ExamplesSecurity ConfigurationThe following example uses a TACACS+ security data

5-20 Dial Solutions Quick Configuration GuideDial-In Configuration Examplesmodem. If it cannot find a string that automatically initializes the Practic

IP, IPX, and AppleTalk Dial-Up Environments 5-21Dial-In Configuration ExamplesSecurity ConfigurationThis sample configuration uses a RADIUS security se

5-22 Dial Solutions Quick Configuration GuideDial-In Configuration ExamplesARA has also been enabled on all lines. Macintosh clients can also dial in

CHAPTER Routing across Modem Lines 6-16Routing across Modem LinesPrevious chapters in this guide have focused on configuring an access server to allow

CHAPTER Dial Case Study Overview 1-11Dial Case Study OverviewThis case study builds a dial-up network environment using one Cisco AS5300. The access s

6-2 Dial Solutions Quick Configuration GuideConfiguring the Answering Access ServerNote Names are case sensitive, so be sure that both the dialing and

Routing across Modem Lines 6-3Configuring the Answering Access ServerStep 4 Configure a second static route, because the asynchronous interface is unn

6-4 Dial Solutions Quick Configuration GuideConfiguring the Answering Access ServerStep 7 Set the number of seconds the connection remains open if no

Routing across Modem Lines 6-5Configuring the Dialing Access ServerStep 4 Require login authentication on VTY lines 0 through 4. The login authentica

6-6 Dial Solutions Quick Configuration GuideConfiguring the Dialing Access ServerDefining Modem Parameters on the Dialing Access ServerPerform the foll

Routing across Modem Lines 6-7Configuring the Dialing Access ServerStep 2 Associate a network to the RIP routing process:Woodstock(config-router)# ne

6-8 Dial Solutions Quick Configuration GuideConfiguring the Dialing Access ServerStep 5 Configure the asynchronous interface as dedicated to PPP mode,

Routing across Modem Lines 6-9Configuring the Dialing Access ServerConfiguring Security for the Dialing Access ServerPerform the following steps to co

6-10 Dial Solutions Quick Configuration GuideSample Configurations for Routing Across Modem LinesStep 7 Reference the filter defined by access list 100.

Routing across Modem Lines 6-11Sample Configurations for Routing Across Modem Linespeer default ip address 172.16.20.1async dynamic routingasync mode

Scenario DescriptionDial Solutions Quick Configuration Guide1-2Figure 1-2 shows some of the physical elements present at layer 1 of the Open SystemInt

6-12 Dial Solutions Quick Configuration GuideSample Configurations for Routing Across Modem Linesppp authentication chappulse-time 3!router ripnetwork

CHAPTER Security Configuration 7-17Security ConfigurationThe access service security paradigm presented in this guide uses the authentication, authori

7-2 Dial Solutions Quick Configuration GuideLocal Versus Remote Server AuthenticationLocal Versus Remote Server AuthenticationThis section describes t

Security Configuration 7-3Configuring AuthenticationFor specific information about the interaction between the security server and the access server,

7-4 Dial Solutions Quick Configuration GuideConfiguring Authentication3 Enabling AAA Globally on the Access Server4 Defining Authentication Method List

Security Configuration 7-5Configuring AuthenticationTo enter an encryption type with the enable secret command, perform the following steps:Step 1 Fr

7-6 Dial Solutions Quick Configuration GuideConfiguring AuthenticationCommunicating with a TACACS+ ServerTo enable communication between the TACACS+ s

Security Configuration 7-7Configuring AuthenticationYou can use any of the following optional commands to interact with the RADIUS server host:• radi

7-8 Dial Solutions Quick Configuration GuideConfiguring AuthenticationOn the access server, you configure authentication on all lines including the VTY

Security Configuration 7-9Configuring AuthenticationDefining Authentication Method ListsAfter you enable AAA globally on the access server, you need t

Dial Case Study Overview 1-3Scenario DescriptionFigure 1-3 OSI Layer 2 and Layer 3 ElementsTable 1-1 summarizes the types of services provided by the

7-10 Dial Solutions Quick Configuration GuideConfiguring Authentication3. Identify a List NameA list name identifies each authentication list. You can

Security Configuration 7-11Configuring AuthenticationTimesaver If you are not sure whether you should use TACACS+ or RADIUS, here are some comparison

7-12 Dial Solutions Quick Configuration GuideConfiguring AuthenticationHowever, if authentication fails using the first method listed, the Cisco IOS so

Security Configuration 7-13Configuring AuthenticationAuthentication List Examples for Dial-In Users Using ARA to Access Network ResourcesThe followin

7-14 Dial Solutions Quick Configuration GuideConfiguring AuthenticationYou can create more than one authentication list or profile for login and protoc

Security Configuration 7-15Configuring AuthorizationConfiguring AuthorizationYou can configure the access server to restrict user access to the network

7-16 Dial Solutions Quick Configuration GuideConfiguring Authorization6—If no mandatory match exists, look for an exact attribute, value pair match am

Security Configuration 7-17Configuring AuthorizationAuthorization ExamplesThe following example uses a TACACS+ server to authorize the use of network

7-18 Dial Solutions Quick Configuration GuideSecurity Configuration ExamplesSecurity Configuration ExamplesThis series of examples shows complete secur

Security Configuration 7-19Security Configuration ExamplesTACACS+ Security Example for Login, PPP, and ARAThe following example shows how to create a

Design ArchitectureDial Solutions Quick Configuration Guide1-4Design ArchitectureThe following sections provide the framework for this case study:• Se

7-20 Dial Solutions Quick Configuration GuideSecurity Configuration Examplesprivilege exec level 14 reloadprivilege exec level 8 arapprivilege exec le

Dial Case Study Overview 1-5Layer 3 IP DesignLayer 3 IP DesignThis case study uses PPP to transport IP packets across the PSTN and into the end-user

Design ArchitectureDial Solutions Quick Configuration Guide1-6Using the subnetting plan and topologies shown in the previous tables and figures, a rout

Dial Case Study Overview 1-7Call Processing ComponentsDialer Cloud SubnetIP subnet 10.1.254.0/24 is assigned to the PSTN/ISDN. The static IP addresse

x Dial Solutions Quick Configuration GuideAudienceAudienceThis guide is intended primarily for the following audiences:• System administrators who are

Design ArchitectureDial Solutions Quick Configuration Guide1-8Figure 1-5 Call Processing ComponentsRouting andswitching engineInterfacegroup-asyncClon

Dial Case Study Overview 1-9Overview of TasksOverview of TasksThe network devices in this case study are manually configured using Cisco IOS software.

Related Documents and Web ToolsDial Solutions Quick Configuration Guide1-10— Confirming the Final Running Configuration— Saving the ConfigurationStep 5 C

Dial Case Study Overview 1-11Related Documents and Web Tools• Troubleshooting Engine—Helps you solve common problems involving hardware,configuration,

Related Documents and Web ToolsDial Solutions Quick Configuration Guide1-12

CHAPTER Cisco AS5300 Configuration 2-12Cisco AS5300 ConfigurationThis chapter describes how to configure the Cisco AS5300 to receive calls from the Cis

Site Profile CharacteristicsDial Solutions Quick Configuration Guide2-2Table 2-1 provides detailed information about each end of the connection. This

Cisco AS5300 Configuration 2-3Site Profile CharacteristicsCisco Internetwork Operating System SoftwareIOS (tm) 5300 Software (C5300-JS-M), Version 12

Overview of TasksDial Solutions Quick Configuration Guide2-4Overview of TasksPerform the following steps to configure the access server:• Set up asynch

Cisco AS5300 Configuration 2-5Step 1—Configuring the Host Name, Password, and Time StampsStep 1—Configuring the Host Name, Password, and Time StampsAs

About This Guide xiDocument ConventionsExamples use the following conventions:The following conventions are used to attract the reader’s attention:Ca

Step 2—Configuring Local AAA SecurityDial Solutions Quick Configuration Guide2-6• Enter the show running command:hq-sanjose# show runningBuilding conf

Cisco AS5300 Configuration 2-7ConfigureConfigureTo configure local AAA security, use the following commands beginning in global configurationmode:Verify

Step 3—Configuring the Fast Ethernet 100BaseT InterfaceDial Solutions Quick Configuration Guide2-8!aaa new-modelaaa authentication login default local

Cisco AS5300 Configuration 2-9Verify• Try pinging a device in your network, such as a backhaul router or the backbone gateway:hq-sanjose# ping 10.1.1

Step 4—Commissioning the T1 ControllersDial Solutions Quick Configuration Guide2-10Step 4—Commissioning the T1 ControllersConfigure the T1 controllers

Cisco AS5300 Configuration 2-11VerifyVerifyTo verify the configuration:• Use the show controller t1 command. The output from this command enables you

Step 4—Commissioning the T1 ControllersDial Solutions Quick Configuration Guide2-12 EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x42, Board Hard

Cisco AS5300 Configuration 2-13Verify• Enter the show running command:hq-sanjose# show runningBuilding configuration...Current configuration:!----- s

Step 5—Configuring the Serial Channels to Let Modem Calls Come inDial Solutions Quick Configuration Guide2-14Step 5—Configuring the Serial Channels to

Cisco AS5300 Configuration 2-15VerifyVerifyTo verify the configuration:• Launch a voice call into the access server using a standard POTS telephone. I

xii Dial Solutions Quick Configuration GuideCommand Syntax ConventionsCommand Syntax ConventionsCommand descriptions use the following conventions:Whe

Step 5—Configuring the Serial Channels to Let Modem Calls Come inDial Solutions Quick Configuration Guide2-16• Enter the show isdn status command to v

Cisco AS5300 Configuration 2-17Verify Activated dsl 0 State (0=Idle 1=Propose 2=Busy 3=Reserved 4=Restart 5=Maint)0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

Step 6—Configuring the Modems and LinesDial Solutions Quick Configuration Guide2-18!interface Serial1:23no ip address no ip directed-broadcast isdn in

Cisco AS5300 Configuration 2-19VerifyVerifyEnter the show running command to verify the configuration:hq-sanjose# show runningBuilding configuration..

Step 7—Testing Async Shell ConnectionsDial Solutions Quick Configuration Guide2-20Figure 2-3 Test Lab EnvironmentStep 1Enter the following debug comma

Cisco AS5300 Configuration 2-21Step 7—Testing Async Shell ConnectionsNote The modem attached to the test PC sends out “CONNECT 24000/REL - MNP”The Ci

Step 7—Testing Async Shell ConnectionsDial Solutions Quick Configuration Guide2-22Every Q.931 message indicates whether the message was transmitted by

Cisco AS5300 Configuration 2-23Step 7—Testing Async Shell ConnectionsStep 4 To determine the status of the modem call connected to the Cisco AS5300,

Step 7—Testing Async Shell ConnectionsDial Solutions Quick Configuration Guide2-24• Enter the show modem log 1/1 command to view the information logge

Cisco AS5300 Configuration 2-25Step 7—Testing Async Shell Connections• Enter the show controller t1 0 call-counters command, which shows you the DS0t

About This Guide xiiiWhere to Go for More Information• Modem: From North America, 408 526-8070; from Europe, 33 1 64 46 40 82. Use thefollowing termi

Step 7—Testing Async Shell ConnectionsDial Solutions Quick Configuration Guide2-26• To further troubleshoot modem problems, connect to a modem’s out-o

Cisco AS5300 Configuration 2-27Step 8—Setting Up IP Address PoolsStep 8—Setting Up IP Address PoolsCreate a pool of IP address to support remote node

Step 9—Configuring the Group-Async InterfaceDial Solutions Quick Configuration Guide2-28Step 9—Configuring the Group-Async InterfaceThe group-async int

Cisco AS5300 Configuration 2-29Verifyaaa authentication ppp default if-needed localenable secret 5 $1$.voA$9/8.Zoil3jeWJMP6hEE6U0!username joe-admin

Step 9—Configuring the Group-Async InterfaceDial Solutions Quick Configuration Guide2-30!interface Serial3:23no ip address no ip directed-broadcastisd

Cisco AS5300 Configuration 2-31Step 10—Testing Async PPP ConnectionsStep 10—Testing Async PPP ConnectionsNow you are ready to send the first async PPP

Step 10—Testing Async PPP ConnectionsDial Solutions Quick Configuration Guide2-32Step 2 From a terminal emulation program running on the test PC, ente

Cisco AS5300 Configuration 2-33Step 10—Testing Async PPP Connections(j) See 21:35:03.978.After LCP negotiates, authentication starts. Authentication

Step 10—Testing Async PPP ConnectionsDial Solutions Quick Configuration Guide2-34Note To enhance readability of debug output messages, significant disp

Cisco AS5300 Configuration 2-35Step 10—Testing Async PPP Connections*Mar 1 21:35:04.162: As4 CHAP: I RESPONSE id 1 len 26 from "joe-admin"

xiv Dial Solutions Quick Configuration GuideWhere to Go for More InformationDocumentation SetThe Cisco IOS software documentation set is shown in the

Step 11—Configuring DDRDial Solutions Quick Configuration Guide2-36Step 11—Configuring DDRDial-on-demand routing (DDR) provides a mechanism to establis

Cisco AS5300 Configuration 2-37VerifyVerifyTo verify the configuration:• Enter the show dialer command. This command shows you the state associated wi

Step 11—Configuring DDRDial Solutions Quick Configuration Guide2-38no ip address no ip directed-broadcastdialer rotary-group 1 isdn incoming-voice mod

Cisco AS5300 Configuration 2-39Step 12—Configuring Definitions for Remote LAN SitesStep 12—Configuring Definitions for Remote LAN SitesYou must configur

Step 12—Configuring Definitions for Remote LAN SitesDial Solutions Quick Configuration Guide2-40VerifyEnter the show running command:hq-sanjose# show

Cisco AS5300 Configuration 2-41Step 13—Configuring a Backhaul Routing ProtocolStep 13—Configuring a Backhaul Routing ProtocolAssign a routing protocol

Step 14—Confirming the Final Running ConfigurationDial Solutions Quick Configuration Guide2-42Step 14—Confirming the Final Running ConfigurationHere is

Cisco AS5300 Configuration 2-43Step 14—Confirming the Final Running Configuration!interface Serial0:23no ip address no ip directed-broadcastdialer ro

Step 15—Saving the ConfigurationDial Solutions Quick Configuration Guide2-44!ip local pool dialin_pool 10.1.2.2 10.1.2.97ip route 10.1.3.0 255.255.255

Cisco AS5300 Configuration 2-45Step 17—Adding More Remote LAN Sites as NeededTable 2-5 Required Commands for Each Additional SiteCommand Purposediale

xvUsing Cisco IOS SoftwareThis chapter provides helpful tips for understanding and configuring Cisco IOS software using thecommand-line interface (CLI)

Step 17—Adding More Remote LAN Sites as NeededDial Solutions Quick Configuration Guide2-46

CHAPTER Cisco 1604 Configuration 3-13Cisco 1604 ConfigurationThis chapter describes how to configure the Cisco 1604 to dial out to the Cisco AS5300.Sit

Site Profile CharacteristicsDial Solutions Quick Configuration Guide3-2Cisco IOS Release 12.0 is running inside the router. If the startup configuratio

Cisco 1604 Configuration 3-3Overview of Tasks --- System Configuration Dialog ---Would you like to enter the initial configuration dialog? [y

Step 1—Configuring the Host Name, Password, and Time StampsDial Solutions Quick Configuration Guide3-4Step 1—Configuring the Host Name, Password, and T

Cisco 1604 Configuration 3-5Step 2—Configuring Local AAA Security shutdown!interface Serial0 no ip address shutdown!interface BRI0 no ip address shut

Step 2—Configuring Local AAA SecurityDial Solutions Quick Configuration Guide3-6ConfigureTo configure local AAA security, use the following commands beg

Cisco 1604 Configuration 3-7Step 3—Configuring the Ethernet Interface!username joe-admin password 7 <removed>!interface Ethernet0 no ip address

Step 3—Configuring the Ethernet InterfaceDial Solutions Quick Configuration Guide3-8Ethernet0 10.1.4.1 YES manual up upSerial0 unassign

Cisco 1604 Configuration 3-9Step 4—Configuring BRI Received 2 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 ov

xvi Dial Solutions Quick Configuration GuideGetting HelpFinding Command OptionsThis section provides an example of how to find and display the syntax f

Step 4—Configuring BRIDial Solutions Quick Configuration Guide3-10Verify•You should see the following output messages after you enter the no shutdown

Cisco 1604 Configuration 3-11Step 5—Configuring DDRNote Notice that the status and protocol for BRI 0 and Ethernet 0 are both up/up, which is whatwe

Step 5—Configuring DDRDial Solutions Quick Configuration Guide3-12VerifyTo verify the configuration:• Enter the show ip route command to confirm that th

Cisco 1604 Configuration 3-13Verify0 incoming call(s) rejected for callback.BRI0:1 - dialer type = ISDNIdle timer (120 secs), Fast idle timer (20 sec

Step 6—Testing Connections to the Cisco AS5300Dial Solutions Quick Configuration Guide3-14!dialer-list 2 protocol ip permit!line con 0line vty 0 4!end

Cisco 1604 Configuration 3-15Step 6—Testing Connections to the Cisco AS5300Figure 3-2 shows the actual test lab environment used in this test case.Fi

Step 6—Testing Connections to the Cisco AS5300Dial Solutions Quick Configuration Guide3-16Step 3 Verify that the correct dialer map exists:robo-austin

Cisco 1604 Configuration 3-17Step 6—Testing Connections to the Cisco AS5300scenario.(BR0:1 CHAP: I CHALLENGE id 5 len 31 from "hq-sanjose")

Step 6—Testing Connections to the Cisco AS5300Dial Solutions Quick Configuration Guide3-1808:03:55: BR0:1 LCP: EndpointDisc 1 Local(0x130E01726F626

Cisco 1604 Configuration 3-19Step 6—Testing Connections to the Cisco AS5300Sending 5, 100-byte ICMP Echos to 10.2.2.3, timeout is 2 seconds:!!!!!Succ

xviiGetting HelpRouter(config-controller)# cas-group ?<0-23> Channel numberRouter(config-controller)# cas-groupEnter the command that you want t

Step 6—Testing Connections to the Cisco AS5300Dial Solutions Quick Configuration Guide3-20 0 output buffer failures, 0 output buffers swapped out

Cisco 1604 Configuration 3-21Step 7—Confirming the Final Running ConfigurationStep 7—Confirming the Final Running ConfigurationHere is the final running

Step 8—Saving the ConfigurationDial Solutions Quick Configuration Guide3-22

CHAPTER Cisco 766 Configuration 4-14Cisco 766 ConfigurationThis chapter describes how to configure the Cisco 766 to dial out to the Cisco AS5300.Site P

Overview of TasksDial Solutions Quick Configuration Guide4-2Note To enhance readability throughout this chapter, the most important output fields arehi

Cisco 766 Configuration 4-3VerifyVerifyTo verify the configuration:• Enter the show configuration command to display a subset of the current configurati

Step 1—Configuring System Level SettingsDial Solutions Quick Configuration Guide4-4 CLI Validate Number CLICallback OFF CLIAut

Cisco 766 Configuration 4-5Step 2—Configuring the LAN ProfileStep 2—Configuring the LAN ProfileThe LAN profile contains the Cisco 766’s Ethernet IP addr

Step 2—Configuring the LAN ProfileDial Solutions Quick Configuration Guide4-6soho-tahoe> cd hq-sanjosesoho-tahoe:hq-sanjose> show securityProfil

Cisco 766 Configuration 4-7Step 3—Configuring the Site Profile hq-sanjose Ringback Number CLI Validate Number CLICallback O