Summary of the content on the page No. 1
Configuration Guide
Enterasys Networks
XSR-XPEDITION Security Routers
XSR-Series
IP-Function and Advanced Services
May 2004
Summary of the content on the page No. 2
Tab Tablle of C e of Co ontents ntents pa page ge Tab Tablle of C e of Co ontents ntents p page age 1.0 IP-A
Summary of the content on the page No. 3
9.0r1 VPN IPSEC site-to-site tunnel via pre-shared key.............................................. 31 9.0r2 VPN IPSEC site-to-site tunnel via pre-shared key.............................................. 32 9.1 VPN IPSEC site-to-site tunnel certification PKI...................................................... 33 9.1.1 Certification control / certificates / CRLS / CA identity ....................................... 35 9.3 VPN PPTP User termination.....................................
Summary of the content on the page No. 4
1.0 IP-Address and Secondary Addresses configuration XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary no shutdown ! interface FastEthernet2 description "LAN-Interface2" ip address 20.20.20.1 255.255.255.0 ip address 50.50.50.1 255.255.255.0 secondary no shutdown ! end XSR-1805# 1.1 IP-Static-routing 1.
Summary of the content on the page No. 5
1.3 IP-OSPF-routing XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary no shutdown ! interface FastEthernet2 description "LAN-Interface2" ip address 20.20.20.1 255.255.255.0 ip address 50.50.50.1 255.255.255.0 secondary no shutdown ! interface Loopback0 ip address 192.168.222.1 255.255.255.255 no shutdown ! i
Summary of the content on the page No. 6
1.4 IP-RIPv1,v2-routing XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary no shutdown ! interface FastEthernet2 description "LAN-Interface2" ip address 20.20.20.1 255.255.255.0 ip address 50.50.50.1 255.255.255.0 secondary no shutdown ! interface Loopback0 ip address 192.168.222.1 255.255.255.255 no shutdown
Summary of the content on the page No. 7
1.5 DHCP server, static / dynamic-pool 1.6 DHCP/Bootp relay argent / ip-helper XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary ip dhcp server no shutdown ! interface FastEthernet2 description "LAN-Interface2" ip address 20.20.20.1 255.255.255.0 ip address 50.50.50.1 255.255.255.0 secondary ip helper-addre
Summary of the content on the page No. 8
1.7 SNTP Simple Network Time Protocol XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! sntp-client server 51.51.51.88 ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary ip dhcp server no shutdown ! interface FastEthernet2 description "LAN-Interface2" ip address 20.20.20.1 255.255.255.0 ip address 50.50.50.1 255.255.255.0 secondary ip helper-address 51.51.
Summary of the content on the page No. 9
2.0 Interface description 2.1 Duplex configuration on Fast Ethernet full/half 2.2 Speed configuration on Fast Ethernet 10/100MBit/s XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! interface FastEthernet1 description "LAN-Interface1" speed 100 duplex full ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary no shutdown ! interface FastEthernet2 description "LAN-Interface2" speed 10 duplex half ip address 20.2
Summary of the content on the page No. 10
3.0 Access control list incoming outgoing 3.1 Access control list 1-99 (standard) 3.2 Access control list 100-199 (extended) XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! access-list 2 permit 20.20.20.0 0.0.0.255 ! access-list 110 deny ip 10.10.10.100 0.0.0.0 any access-list 110 deny ip 10.10.10.111 0.0.0.0 any access-list 110 permit ip any any ! interface FastEthernet1 description "LAN-Interface1" ip access-group 110 in ip address 1
Summary of the content on the page No. 11
3.3 Access control list moving online editing XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! access-list 110 deny ip 10.10.10.100 0.0.0.0 any access-list 110 deny ip 10.10.10.111 0.0.0.0 any access-list 110 permit ip any any ! interface FastEthernet1 description "LAN-Interface1" ip access-group 110 in ip address 10.10.10.1 255.255.255.0 no shutdown ! end XSR-1805(config)#access-list 110 move 1 2 !! ! Version 4.0.0.0, Built Mar 26 2003, 1
Summary of the content on the page No. 12
4.0 Virtual Router Redundancy Protocol (RFC 2338) Router-1-Master XSR-1805_1#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805_1 ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 Secondary vrrp 1 ip 10.10.10.254 vrrp 1 ip 40.40.40.254 vrrp 1 priority 250 vrrp 1 master-respond-ping no shutdown ! end XSR-1805_1# Router-2-Backup XSR-1805_2#show running-config !! ! Version 4.0.0.
Summary of the content on the page No. 13
4.1 VRRP monitor interface function, interface tracking Router-1-Master XSR-1805_1#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805_1 ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 Secondary vrrp 1 ip 10.10.10.254 vrrp 1 ip 40.40.40.254 vrrp 1 priority 250 vrrp 1 master-respond-ping vrrp 1 track FastEthernet2 no shutdown ! interface FastEthernet2 description "LAN-Interfac
Summary of the content on the page No. 14
4.2 NAT static bindings XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown ! interface FastEthernet2 description "LAN-Interface2" ip address 134.161.208.1 255.255.255.0 no shutdown ! ip nat source static 10.10.10.100 134.161.208.100 ip nat source static 10.10.10.101 134.161.208.101 ! end XSR-1805# 4.3 NAT dynamic with PAT “Port Address Transl
Summary of the content on the page No. 15
5.0 Dialer Interface XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 ! access-list 110 permit ip any any ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown ! interface Dialer0 dialer pool 1 dialer string 112233 encapsulation ppp dialer idle-timeout 30 dialer-group 1 dialer map ip 11.11.11.2 112233 i
Summary of the content on the page No. 16
5.1 Dialer Backup interface function XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 ! controller e1 0/2/0 clock source internal no shutdown ! interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 ! access-list 110 permit ip any any ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown ! interface Dialer0 dialer pool 1 dialer string 112233 encapsulation ppp
Summary of the content on the page No. 17
5.2 PAP for authentication PPP XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 username remote privilege 0 "password is not displayed" ! interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 ! access-list 110 permit ip any any ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown ! interface Dialer0 dialer pool 1 dialer string 112233 encapsulation ppp diale
Summary of the content on the page No. 18
5.3 CHAP for authentication PPP XSR-1805#show running-config !! ! Version 4.0.0.0, Built Mar 26 2003, 19:47:17 ! hostname XSR-1805 username remote privilege 0 cleartext iamRemote ! interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 ! access-list 110 permit ip any any ! interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown ! interface Dialer0 dialer pool 1 dialer string 112233 encapsulation ppp dialer idle-
Summary of the content on the page No. 19
5.4.1 VPN via Dialer Interface rtr1 XSR-1805-1#show running-config !! ! Version 6.0.0.9, Built Dec 12 2003, 14:56:30 ! hostname XSR-1805-1 ! interface bri 0/1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 ! access-list 101 permit ip 20.20.20.0 0.0.0.255 10.10.10.0 0.0.0.255 access-list 101 permit ip any host 1.1.1.2 access-list 121 permit ip 20.20.20.0 0.0.0.255 10.10.10.0 0.0.0.255 ! crypto isakmp proposal ISDN authentication pre-share ! crypto isakmp peer 1.1.
Summary of the content on the page No. 20
5.4.2 VPN via Dialer Interface rtr2 XSR-1805-2#show running-config !! ! Version 6.0.0.9, Built Dec 12 2003, 14:56:30 ! hostname XSR-1805-2 ! interface bri 0/2/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 ! access-list 102 permit ip 10.10.10.0 0.0.0.255 20.20.20.0 0.0.0.255 access-list 102 permit ip any host 1.1.1.1 access-list 130 permit ip 10.10.10.0 0.0.0.255 20.20.20.0 0.0.0.255 ! crypto isakmp proposal ISDN authentication pre-share ! crypto isakmp peer 1.1.
