Cisco Systems OL-6426-02 manual

Cisco Systems, Inc. www.cisco.com Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco we bsite at www.cisco.com/go/ offices. Cisco 1 80 0 S eries Integrated S er vices Router (Fix ed) Sof tw are Installation Guide Last Revi sed: February 1 9, 20 1 4 Text Part Number: OL -6426-02[...]

THE SPECIFICATION S AND INFORMAT ION REGARDING THE PRODUCTS IN THIS MA NUAL ARE SUBJ ECT TO CHANGE WITHOUT NOT ICE. ALL STATEMENTS , INFORMATION , AND RECOMMEN DATIONS I N THIS MANUA L ARE BELIEVE D TO BE ACCURATE BUT ARE PRESENTED WI THOUT WARRANTY OF ANY KIND, EX PRESS OR IMPLIED. USERS MUST TAKE FUL L RESPONSIBILITY FOR THEIR APPLICAT ION OF ANY[...]

3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 CONTENTS Preface 11 Audience 1-11 Organization 1-12 Conventi ons 1-13 Notes, Cautions, and Timesavers 1-13 Command Convention s 1-13 Related Documents 1-14 Obtaining Documentation 1-14 Cisco.com 1-14 Documentation DVD 1-15 Ordering Documentation 1-15 Do[...]

Contents 4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Configure the Wireless Interface 1-9 Configuring a Loopback Interface 1-9 Configuration Example 1-9 Verifying Your Configuration 1-10 Configuring Command-Line Access to the Router 1-10 Configuration Example 1-12 Configuring Static Routes 1-12 Co[...]

Contents 5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Configuration Example 4-11 Verifying Your Configuration 4-12 CHAPTER 5 Configuring a LAN with DHCP and VLANs 5-1 Configure DHCP 5-2 Configuration Example 5-3 Verify Your DHCP Configuration 5-4 Configure VLANs 5-5 Verify Your VLAN Configuration [...]

Contents 6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Enable Policy Lookup 7-5 Configure IPSec Transforms and Protocols 7-6 Configure the IPSec Crypto Method an d Parameters 7-7 Apply the Crypto Map to the Physic al Interface 7-8 Configure a GRE Tunnel 7-8 Configuration Example 7-10 CHAPTER 8 Confi[...]

Contents 7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Backup Interfaces 13-1 Configuring Backup Interfaces 13-2 Floating Sta tic Routes 13-2 Configuring Floating Static Routes 13-3 Dialer Wa tch 13-4 Configuring Dialer Watch 13-4 Dial Backup Feature Limitations 13-5 Configuration Example 13-6 Conf[...]

Contents 8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 PART 3 Reference Information APPENDIX A Cisco IOS Software Basic Skills A-1 Configuring the Router from a PC A-1 Understanding Comm and Modes A-2 Getting Help A-4 Enable Secret Passwords and Ena ble Passwords A-5 Entering Global Configura tion M[...]

Contents 9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 NAT B-7 Easy IP (Phase 1) B-8 Easy IP (Phase 2) B-8 QoS B-9 IP Precedence B-9 PPP Fragmentation an d Interleaving B-9 CBWFQ B-10 RSVP B-10 Low Latency Queuing B-10 Access Lists B-11 APPENDIX C ROM Monitor C-1 Entering the ROM Monitor C-1 ROM Mo[...]

Contents 10 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02[...]

1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Preface This software conf iguration guide prov ides instru ctions for using the Cisco command-line interf ace (CLI) to conf igure features of the follo wing Cisco 1 800 series inte grated services f ix ed-conf iguratio n routers: • Cisco 1801, Cisco[...]

2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Organization See the “ Org anization ” section of this pr eface to help you decide whi ch chapters contain th e information you need to conf igure y our router . Organization Ta b l e 1 lists the topics cov ered by this gui de. T able 1 Document Orga[...]

3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Conventions Conventions This guide uses the con ventions described in the fo llo wing section s for instructions and informatio n. Notes, Cautions, and Timesavers Notes, cautions and time-sa ving tips use the follo wing conv entions and symbols: Note M[...]

4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Related Documents Related Documents Ta b l e 3 lists publications that provide related informat ion on these routers: Obtaining Documentation Cisco documentation and additi onal literature are a v ailable on Cisco.com. Cisco also pro vides se veral ways [...]

5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Documentation Feedback Documentation DVD Cisco documentation and additi onal literature are a v ailable in a Documentation D VD package, which may ha ve shipped wi th your product. The D ocument ation D VD is u pdated regu larly and may be more current[...]

6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Obtaining Technica l Assistance • Obtain assistance with secur ity incidents that in volv e Cisco products. • Register to recei ve securi ty inform ation from Cisco. A current list of security advisories and notices for Cisco products is a v ailable [...]

7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Obtaining Technical Assista nce Access to all tools on the Cisco T echnical Support W e bsit e requires a Cisco.com user ID and password. If you have a v alid service contrac t but do not hav e a user ID or password, you can register at this U RL: http[...]

8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Obtaining Additional Pub lications and Information Se verity 3 ( S3)—Operational performance of your netw ork is impaired, b ut most b usiness operat ions remain functional. Y ou and Cisco wi ll commit resources during normal b usiness hours to restore[...]

P AR T 1 Get ting Star ted[...]

[...]

CH A P T E R 1-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 1 Basic Router Configuration This chapter pro vides procedur es for conf iguring th e basic parameters of your Cisco router, including global parameter settings, routing protocols, interfaces, and c omma nd-line access. It a lso describe[...]

1-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 1 Basic Router Con figuration Viewing the Defa ult Configuration Viewing the Default Configuration When you f irst boot up your Cisco router , some basic configuration has already been performed. All of the LAN and W AN interfaces hav e been cr[...]

1-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 1 Basic Router Configuration Viewing the Default Configuration Example 1 -1 Cisco 1812 Def ault Configur ation on Start up version 12.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption[...]

1-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 1 Basic Router Con figuration Information Needed for Configuration interface FastEthernet8 no ip address shutdown ! interface FastEthernet9 no ip address shutdown ! interface Vlan1 no ip address ! ip classless ! no ip http server no ip http sec[...]

1-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 1 Basic Router Configuration Configuring Basic Parameters AAL5SN AP—This can be either routed RFC 1483 or bri dged RFC 1483. For rout ed RFC 1483, the service provider mu st provide you with a static IP addr ess. For bridged RFC 14 83, you [...]

1-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 1 Basic Router Con figuration Configuring Basic Parameters Configure Global Parameters Perform these steps to configure select ed gl obal parameters for your r outer: For complete in formation on the global parameter commands, see the Cisco IOS[...]

1-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 1 Basic Router Configuration Configuring Basic Parameters Configure WAN Interfaces The Cisco 1811 and Cisco 1812 routers each h av e two F ast Ethernet interf aces for W AN connecti on. The Cisco 1801, Cisco 1802, and Cisco 1 803 routers each[...]

1-8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 1 Basic Router Con figuration Configuring Basic Parameters Configure the ATM WAN Interface This procedure appl ies only to the Cisco 1801 , Cisco 1802, and Ci sco 1803 models. Perform these steps to conf igure the A TM interface, be ginning in [...]

1-9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 1 Basic Router Configuration Configuring Basic Parameters Configure the Wireless Interface The wireless interface enables connection to the rout er through a wireless LA N connection. For more information abou t config uring a wireless connec[...]

1-10 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 1 Basic Router Con figuration Configuring Basic Parameters Verifying Your Configuration T o v erify that yo u hav e properl y conf igured the loopback interface, enter the show interface loopback command. Y ou should see veri ficati on output [...]

1-11 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 1 Basic Router Configuration Configuring Basic Parameters For complete in formation abou t the command li ne commands, see the Cisco IOS Release 12.3 documentation set . Step 3 login Example: Router(config)# login Router(config)# Enables pas[...]

1-12 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 1 Basic Router Con figuration Configuring Static Routes Configuration Example The follo wing conf iguration sho ws the command-line access commands. Y ou do not need to input the command s marked “defaul t. ” These commands appear auto mat[...]

1-13 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 1 Basic Router Configuration Configuring Dynamic Routes Configuration Example In the follo wing conf iguratio n example, th e static route sends out all IP pack ets with a destinatio n IP address of 192.168.1.0 and a subnet mask of 255.25 5.[...]

1-14 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 1 Basic Router Con figuration Configuring Dynamic Routes Configuring RIP Perform these steps to conf igure the RIP rout ing protocol on the router , beginning in gl obal confi guration mode: For complete in formation on the dynamic ro ut ing c[...]

1-15 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 1 Basic Router Configuration Configuring Enha nced IGRP Configuration Example The follo wing conf igur ation examp le sho ws RIP ver sion 2 enabled in IP netw ork 10.0.0.0 and 192.168.1.0. Execute the show running-conf ig command f rom pri v[...]

1-16 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 1 Basic Router Con figuration Configuring Enhanc ed IGRP For complete in formation on the IP EIGRP comman ds, see the Cisco IOS Release 12.3 do cumentation set. For more general infor mation on EIGRP concepts, see Appendix B, “Concep ts. ”[...]

P AR T 2 Conf iguring Y our Router f or Ethernet and DSL A ccess[...]

[...]

CH A P T E R 2-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 2 Sample Network Deployments This part of the softw are conf iguration guide presents a v ari ety of possible Ethernet- and Dig ital Subscriber Line (DSL)-based network conf igurat ions using Cisco 1800 series router s. Each scenario is [...]

2-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 2 Sample Network De ployments[...]

CH A P T E R 3-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 3 Configuring PPP over Ethernet with NAT The Cisco 1811 and Cisco 1812 inte grated services f ix ed-conf iguration routers support Point-to- Point Protocol ov er Ethernet (PPPoE) clients and network address t ranslation (N A T). Multiple[...]

3-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 3 Configuring PPP over Ethernet with NAT Configure the Virtual Private Dialup Networ k Group Number PPPoE The PPPoE Client feature on the router pro vides PPPoE client support on Ethernet interf aces. A dialer interface must be used f or clonin[...]

3-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 3 Configuri ng PPP over Ethern et with NAT Configure the Fast Ethernet WAN Interfaces Configure the Fast Ethernet WAN Interfaces In this scenario, the PPPoE client (your Cisco router ) communicates ov er a 10/100-Mbps Ethernet interface on bo[...]

3-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 3 Configuring PPP over Ethernet with NAT Configure the Fast Ethe rnet WAN Interfaces Perform these steps to configure the F ast Ethernet W AN interfaces, starting in glob al configuration mode: Command Purpose Step 1 interface type number Examp[...]

3-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 3 Configuri ng PPP over Ethern et with NAT Configure the Dialer In terface Configure the Dialer Interface The dialer interface indicates ho w to handle traf fi c from th e clients, including, for example, d efault routing information, t he en[...]

3-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 3 Configuring PPP over Ethernet with NAT Configure the Dialer Interface Step 7 dialer -group gr oup-number Example: Router(config-if)# dialer group 1 Router(config-if)# Assigns the dialer interface to a dialer group (1–10). Ti p Using a diale[...]

3-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 3 Configuri ng PPP over Ethern et with NAT Configure Network Address Translation Configure Network Address Translation Network Address T ranslation (N A T) tr anslates packets from addresses that match a standard access list, using global add[...]

3-8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 3 Configuring PPP over Ethernet with NAT Configure Network Address Translation Note If you want to use N A T with a virtual-template interf ace, you must conf igure a loopback i nterface. See Chapter 1, “Basic Router Configuration, ” for in[...]

3-9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 3 Configuri ng PPP over Ethern et with NAT Configuration Example For complete in formation on the N A T commands, see the Cisco IOS Rel ease 12.3 documentation set. For more general in formation on N A T concepts, see Appendix B, “Co ncepts[...]

3-10 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 3 Configuring PPP over Ethernet with NAT Configuration Example Verifying Your Configuration Use the show ip nat statistics command in pri vileged EXEC mode to v erify N A T conf iguration . Y ou should see verif ication o utput similar to the [...]

CH A P T E R BET A DRAFT - CISC O C ONFIDENTIAL 4-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 121753 2 3 5 6 1 7 4 4 Configuring PPP over ATM with NAT The Cisco 1801, Cisco 1802, and Cisco 1 803 access routers support Poin t-to-Point Protocol o ver Asynchronous T ransfer Mode (PPPoA) client s an[...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 4 Con figuring PPP over ATM with NAT In this scenario, the smal l busi ness or remote user on the Fast Ethernet LAN can connect to an Internet Service Pro vider (ISP) using the fo llo wing protocols on t he W [...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 4 Configuring PPP over ATM with NAT Configure the Dialer In terface Configure the Dialer Interface The dialer interface indicates ho w to handle traf fi c from th e clients, including, for example, d efault [...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 4 Con figuring PPP over ATM with NAT Configure the Dialer Interface Repeat these steps for any ad ditional dialer interf aces or dialer pools needed. Step 7 dialer -group gr oup-number Example: Router(config-i[...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 4 Configuring PPP over ATM with NAT Configure the ATM WAN Interface Configure the ATM WAN Interface Perform these steps to conf igure the A TM interface, be ginning in global conf iguration mode. Command Pur[...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 4 Con figuring PPP over ATM with NAT Configure DSL Signaling Protocol Configure DSL Signaling Protocol DSL signaling must be conf igured on the A TM interf ace for connection to yo ur ISP . The Cisco 1801 supp[...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 4 Configuring PPP over ATM with NAT Configure DSL Signaling Protoco l If you wish to change an y of these settin gs, use on e of the follo wing comman ds in global co nfigu ration mode. • dsl operating-mod[...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 4 Con figuring PPP over ATM with NAT Configure DSL Signaling Protocol Note If you are inte grating your Ci sco router into a European n etwork, please us e one of the follo wing commands: For CO mode, use the [...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 4 Configuring PPP over ATM with NAT Configure Network Address Translation Current 15 min LOSW Defect: 0 Current 15 min ES Defect: 0 Current 15 min SES Defect: 0 Current 15 min UAS Defect: 33287 Previous 15 m[...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-10 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 4 Con figuring PPP over ATM with NAT Configure Network Address Translation Command Purpose Step 1 ip nat pool name start- ip end-ip { netmask netmask | pref ix-length pr efix-len gth } Example: Router(config)[...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-11 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 4 Configuring PPP over ATM with NAT Configuration Example Note If you want to use N A T with a virtual-template interf ace, you must conf igure a loopback i nterface. See Chapter 1, “Basic Router Configur[...]

BET A DRAFT - CISC O C ONFIDENTIAL 4-12 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 4 Con figuring PPP over ATM with NAT Configuration Example Note Commands marked by “ (defau lt) ” are generated a utomatically when you run the show running-config command. ! interface Vlan1 ip address 19[...]

CH A P T E R 5-1 Book Title OL-xxxxx-xx 5 Configuring a LAN with DHCP and VLANs The Cisco 1800 series integrated se rvices f ix ed-confi guration routers support clients on both physical LANs and virtual LAN s (VLANs). The routers can use the Dynami c Host Conf iguration Protocol (DHCP) to enable automatic assignmen t of IP c onf igurations for nod[...]

5-2 Book Title OL-xxxxx-xx Chapter 5 Con figuring a LAN w ith DHCP and VLA Ns Configure DHCP • Config ure VLANs Note The procedures in this chapter assu me you hav e already conf igured basic router features as well as PPPoE or PPPoA with N A T . If you ha ve not pe rformed these conf igurations tasks, see Chap ter 1, “Basic Router Conf igurati[...]

5-3 Book Title OL-xxxxx-xx Chapter 5 Configuring a LAN with DHCP and VLANs Configure DHCP Configuration Example The follo wing conf iguratio n example sho w s a portion of the conf iguration file for t he DCHP confi guration described in this chapt er . ip dhcp excluded-address 192.168.9.0 ! ip dhcp pool dpool1 import all network 10.10.0.0 255.255.[...]

5-4 Book Title OL-xxxxx-xx Chapter 5 Con figuring a LAN w ith DHCP and VLA Ns Configure DHCP Verify Your DHCP Configuration Use the follo wing commands to vie w your DHCP co nfiguration. • show ip dhcp import — Displays the optional parameters impor ted into the DHCP serv er database. • show ip dhcp pool —Displays i nformation abou t the DH[...]

5-5 Book Title OL-xxxxx-xx Chapter 5 Configuring a LAN with DHCP and VLANs Configure VLA Ns Configure VLANs Perform these steps to conf igure VLANs on your ro uter , be ginning in gl obal conf iguration mode: Verify Your VLAN Configuration Use the follo wing commands to vie w your VLAN conf iguration. • show —Entered from VLAN datab ase mode. D[...]

5-6 Book Title OL-xxxxx-xx Chapter 5 Con figuring a LAN w ith DHCP and VLA Ns Configure VLANs Translational Bridged VLAN: 1 Translational Bridged VLAN: 1003 VLAN ISL Id: 1003 Name: token-ring-default Media Type: Token Ring VLAN 802.10 Id: 101003 State: Operational MTU: 1500 Bridge Type: SRB Ring Number: 0 Bridge Number: 1 Parent VLAN: 1005 Maximum [...]

5-7 Book Title OL-xxxxx-xx Chapter 5 Configuring a LAN with DHCP and VLANs Switch Port Configurations Switch Port Configurations The 8 high speed Ethernet ports on the Cisco 1800 (f ixed) integ rated router supports 8 VLANs p er port. T o conf igure and verify VLANs on the switch ports see the the “Configure VLANs” section o n page 5-5 and the [...]

5-8 Book Title OL-xxxxx-xx Chapter 5 Con figuring a LAN w ith DHCP and VLA Ns Switch Port Configuratio ns • Conf iguring VLANs ( required) • Config uring VLAN T ru nking Protocol (opt ional) • Config uring 802.1x Aut hentication (required) • Config uring Spanning T ree on a VLAN (required) • Configuring Layer 2 Interfaces (required) • C[...]

5-9 Book Title OL-xxxxx-xx Chapter 5 Configuring a LAN with DHCP and VLANs Switch Port Configurations Layer 2 Interfaces The integrated switch ports suppor t Layer 2 switchin g across Ethernet ports based o n Cisco IOS Catalyst Software. The y support simultaneous, parallel co nnections between Layer 2 Eth ernet segments. Switched connections betwe[...]

5-10 Book Title OL-xxxxx-xx Chapter 5 Con figuring a LAN w ith DHCP and VLA Ns Switch Port Configuratio ns Note Per-Port enablin g and disabling of unkno wn multi cast and unicast pack ets is not support ed on the Cisco 1800 (Fix ed) confi guration router . Per-Port Storm Control Y ou c an use these per-port storm cont rol techni ques to block the [...]

CH A P T E R BET A DRAFT - CISC O C ONFIDENTIAL 6-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 6 Configuring a VPN Using Easy VPN and an IPSec Tunnel The Cisco 1800 series integrated se rvices f ixe d-confi guration routers support the creatio n of V irtual Pri vat e Networks (VPNs). Cisco router[...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 6 Config uring a VPN Using Easy VPN and an IPSec Tunnel Cisco Easy VPN The Cisco Easy VPN client feature eliminates much of the tedious co nf iguration work b y implementing the Cisco Un ity Client protocol. Th[...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 6 Configuring a VPN Using Easy VPN and an IPSec Tunnel Configure th e IKE Policy An examp le sho wing the results of these conf iguration t asks is sho wn in the section “ Conf iguration Example .” Note T[...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 6 Config uring a VPN Using Easy VPN and an IPSec Tunnel Configure Grou p Policy Information Configure Group Policy Information Perform these steps to conf igure the g roup polic y , beginning i n global conf ig[...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 6 Configuring a VPN Using Easy VPN and an IPSec Tunnel Apply Mode Con figurat ion to the Crypto Map Apply Mode Configuration to the Crypto Map Perform these steps to apply mode co nfigu ration to the crypto m[...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 6 Config uring a VPN Using Easy VPN and an IPSec Tunnel Enable Policy Lookup Enable Policy Lookup Perform these steps to enable polic y lookup thr ough AAA, be ginning in glob al conf iguration mode: Configure [...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 6 Configuring a VPN Using Easy VPN and an IPSec Tunnel Configure the IPSec Cryp to Method and Parame ters Perform these steps to speci fy th e IPSec transform set an d protocols, beginnin g in global con fig [...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 6 Config uring a VPN Using Easy VPN and an IPSec Tunnel Apply the Crypto Map to the Physical Interface Apply the Crypto Map to the Physical Interface The crypto maps must be applied to each interface through wh[...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 6 Configuring a VPN Using Easy VPN and an IPSec Tunnel Create an Easy VPN Remote Co nfiguration Create an Easy VPN Remote Configuration The router acting as the IPSec remo te router must create an Easy VPN re[...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-10 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 6 Config uring a VPN Using Easy VPN and an IPSec Tunnel Verifying Your Easy VPN Configuration Verifying Your Easy VPN Configuration Router# show crypto ipsec client ezvpn Tunnel name :ezvpnclient Inside interf[...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-11 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 6 Configuring a VPN Using Easy VPN and an IPSec Tunnel Configuration Example ! crypto isakmp policy 1 encryption 3des authentication pre-share group 2 lifetime 480 ! crypto isakmp client configuration group [...]

BET A DRAFT - CISCO C ONFIDENTIAL 6-12 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 6 Config uring a VPN Using Easy VPN and an IPSec Tunnel Configuration Example[...]

CH A P T E R BET A DRAFT - CISCO C ONFIDENTIAL 7-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation The Cisco 1800 series inte grated services f ixe d-configurat ion routers support the creation of virtual pri v ate networks (V [...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 7 Con figuring VPNs Using an I PSec Tunnel and Generic Routing Encapsulatio n GRE Tunnels GRE tunnels are typi cally used to establish a VPN be tween the Cisco router and a remo te devi ce that controls access [...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulatio n Configure a VPN Configure a VPN Perform the follo wing tasks to conf igure a VPN o ver an IPSec tu nnel: • Config ure the IKE Poli[...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 7 Con figuring VPNs Using an I PSec Tunnel and Generic Routing Encapsulatio n Configure a VPN Configure Group Policy Information Perform these steps to conf igure the g roup polic y , beginning i n global conf [...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulatio n Configure a VPN Enable Policy Lookup Perform these steps to enable polic y lookup thro ugh AAA, be ginning in glob al conf iguration[...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 7 Con figuring VPNs Using an I PSec Tunnel and Generic Routing Encapsulatio n Configure a VPN Configure IPSec Transforms and Protocols A transform set represents a certain combination of security protocol s and[...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulatio n Configure a VPN Note W ith manually est ablished security associ ations, there is no ne gotiation with th e peer , and both sid es m[...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 7 Con figuring VPNs Using an I PSec Tunnel and Generic Routing Encapsulatio n Configure a GR E Tunnel Apply the Crypto Map to the Physical Interface The crypto maps must be applied to each interface through whi[...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulatio n Configure a GRE Tunnel Step 3 tunnel sour ce interface-type number Example: Router(config-if)# tunnel source fastethernet 2 Router(c[...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-10 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 7 Con figuring VPNs Using an I PSec Tunnel and Generic Routing Encapsulatio n Configuration Example Configuration Example The follo wing conf iguratio n example sho w s a portion of the conf iguration fi le fo[...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-11 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 7 Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulatio n Configuration Example ip address 10.1.1.1 255.255.255.0 ip nat inside ip inspect firewall in ! inspection examines outbound traffic[...]

BET A DRAFT - CISCO C ONFIDENTIAL 7-12 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 7 Con figuring VPNs Using an I PSec Tunnel and Generic Routing Encapsulatio n Configuration Example[...]

CH A P T E R BET A DRAFT - CISCO C ONFIDENTIAL 8-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 8 Configuring a Simple Firewall The Cisco 1800 integ rated services routers support network traf f ic f iltering by means of access lists. The router also supports pack et inspection and dynamic tempo ra[...]

BET A DRAFT - CISCO C ONFIDENTIAL 8-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 8 Co nfiguring a Simple Firewall In the conf iguration example that foll o ws, the f irew all is applied t o the outside W AN interface (FE0) on the Cisco 1811 or Cisco 1812 and protects the Fast Et hernet LAN [...]

BET A DRAFT - CISCO C ONFIDENTIAL 8-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 8 Config ur ing a Simple Firewall Configure Access Lists Configure Access Lists Perform these steps to create access li sts for use by the fire wall, be ginning in global c onfiguration mode: Configure Inspec[...]

BET A DRAFT - CISCO C ONFIDENTIAL 8-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 8 Co nfiguring a Simple Firewall Apply Access Lists and Inspection Rules to Inte rfaces Apply Access Lists and Insp ection Rules to Interfaces Perform these steps to apply the A CLs and inspection rules to the [...]

BET A DRAFT - CISCO C ONFIDENTIAL 8-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 8 Config ur ing a Simple Firewall Configuration Example Configuration Example A telecommuter is granted secure access to a corporat e network, using IPSec t unneling. Securit y to the home network is acco mpl[...]

BET A DRAFT - CISCO C ONFIDENTIAL 8-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 8 Co nfiguring a Simple Firewall Configuration Example[...]

CH A P T E R BET A DRAFT - CISCO C ONFIDENTIAL 9-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 9 Configuring a Wireless LAN Connection The Cisco 1800 s eries integr ated services fixed-conf iguration rou ters support a secure, affordable, and easy-to-use wireless LAN solution that combines mobilit[...]

BET A DRAFT - CISCO C ONFIDENTIAL 9-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 9 Con figuring a Wireless LAN Co nnection Configuration Tasks Perform the follo wing tasks to conf igure this network scenario : • Config ure the Root Radio Station • Config ure Bridging on VLANs • Config[...]

BET A DRAFT - CISCO C ONFIDENTIAL 9-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 9 Configuring a Wireless LAN Connection Configure the Root Radio Station Configure the Root Radio Station Perform these steps to create and configure the root radio station for your w ireless LAN, beginn ing [...]

BET A DRAFT - CISCO C ONFIDENTIAL 9-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 9 Con figuring a Wireless LAN Co nnection Configure the Root Radio Station Step 5 vlan nu mber Example: Router(config-if-ssid)# vlan 1 Router(config-if-ssid)# Binds the SSID with a VLAN. Step 6 authentication t[...]

BET A DRAFT - CISCO C ONFIDENTIAL 9-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 9 Configuring a Wireless LAN Connection Configure B ridging on VLANs Configure Bridging on VLANs Perform these steps to conf igure inte grated routing and br idging on VLANs, be ginning in glo bal confi gurat[...]

BET A DRAFT - CISCO C ONFIDENTIAL 9-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 9 Con figuring a Wireless LAN Co nnection Configure Radio Station Subinterface s Repeat Step 2 through Step 6 above for each VLAN that requires a wireless interface. Configure Radio Station Subinterfaces Perfor[...]

BET A DRAFT - CISCO C ONFIDENTIAL 9-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 9 Configuring a Wireless LAN Connection Configuration Example Repeat these steps to configure more subinterfaces, as needed. Configuration Example The follo wing conf iguratio n example sho w s a portion of t[...]

BET A DRAFT - CISCO C ONFIDENTIAL 9-8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 9 Con figuring a Wireless LAN Co nnection Configuration Example bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanning-disabled bridge-group 1 block-unknown-source no bridge-group 1 sourc[...]

CH A P T E R BET A DRAFT - CISCO C ONFIDENTIAL 10-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 10 Sample Configuration This chapter collects the results of the Ethernet W A N interface, DHCP , VLAN, Easy VPN, and wireless interface conf igurations made in pre viou s chapters. This allo ws you to [...]

BET A DRAFT - CISCO C ONFIDENTIAL 10-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 10 Sample Configuration ip address negotiated ppp authentication chap dialer pool 1 dialer-group 1 ! dialer-list 1 protocol ip permit ip nat inside source list 1 interface dialer 0 overload ip classless ( defa[...]

BET A DRAFT - CISCO C ONFIDENTIAL 10-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 10 Sa mple Configuration duplex auto speed auto ! interface FastEthernet1 no ip address duplex auto speed auto ! crypto isakmp policy 1 encryption 3des authentication pre-share group 2 lifetime 480 ! crypto [...]

BET A DRAFT - CISCO C ONFIDENTIAL 10-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 10 Sample Configuration station-role root ! interface Dot11Radio0.1 description Cisco Open encapsulation dot1Q 1 native no cdp enable bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 spanni[...]

BET A DRAFT - CISCO C ONFIDENTIAL 10-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 10 Sa mple Configuration no ip http secure-server ! radius-server local nas 10.0.1.1 key 0 cisco123 group rad_eap ! user jsomeone nthash 7 0529575803696F2C492143375828267C7A760E1113734624452725707C010B065B u[...]

BET A DRAFT - CISCO C ONFIDENTIAL 10-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 10 Sample Configuration[...]

CH A P T E R 11-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 11 Additional Configuration Options This part of the softw are conf iguration guid e descri bes additional conf iguration options and troubleshooting t ips for the Cisco 1800 series in tegr ated services f ix ed conf iguration routers ([...]

11-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 11 Additional Configuration Options[...]

P AR T 3 Conf iguring Additional F e atures and T r oubleshooting[...]

[...]

CH A P T E R 12-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 12 Configuring Security Features This chapter gi ves an ov ervie w of authentication, authorization, and accoun ting (AAA), the primary Cisco frame work f or implementing select ed security features that can be conf igured on the Cisco [...]

12-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 12 Configu ring Security Features Configuring AutoSecure For info rmation about conf iguring AAA services an d supported security protocols, see the follo wing sections of the Cisco IOS Security Co nfiguration Guide : • Config uring Authenti[...]

12-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 12 Configuring Security Featur es Configuring a CBAC Firewall Access Groups A sequence of access list def ini tions bound together with a common name or number is called an access group. An access group is enabled for an interface during int[...]

12-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 12 Configu ring Security Features Configuring Cisco IOS Firewall IDS Configuring Cisco IOS Firewall IDS Cisco IOS Fire wall Intrusi on Detection System (IDS) technology en hances perimeter f ire wall protection by taking appro priate action on[...]

CH A P T E R 13-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 13 Configuring Dial Backup and Remote Management The Cisco 1800 integ rated services f ix ed-conf iguration routers support dial-in (for remote management) and dial-out (for dial backup) capabilities. By allo wi ng you to conf igure a b[...]

13-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 13 Configurin g Dial Backup and Remote Management Dial Backup Feature Activation Methods Note Even if the backup interface comes out of standby mode (is broug ht up), the router does not trigger the backup call unless it recei ves th e specif [...]

13-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 13 Configuring Dial B ackup and Remo te Management Dial Backup Feature Activa tion Methods Configuring Floating Static Routes Static and dynamic routes are the t wo components of fl oating static routes. Per form these step s to confi gure t[...]

13-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 13 Configurin g Dial Backup and Remote Management Dial Backup Feature Activation Methods Dialer Watch The dialer watch method o nly supports the Extended I nterior Gate way Routi ng Protocol (EIGRP) link-state dynamic routing p rotocols. Confi[...]

13-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 13 Configuring Dial B ackup and Remo te Management Dial Backup Fe ature Limitations Dial Backup Feature Limitations The follo wing limitatio n exists for th e dial backup feature: bridging is no t supported ov er console or auxiliary port ba[...]

13-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 13 Configurin g Dial Backup and Remote Management Dial Backup Feature Limitations Configuration Example The follo wing three e xamples sho w sample conf igurations fo r the three dial back up methods. Example 13-1 Configur i ng Dial Backup Usi[...]

13-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 13 Configuring Dial B ackup and Remo te Management Dial Backup Fe ature Limitations ! dsl operating-mode auto ! ! Dial backup interface, associated with physical BRI0 interface. Dialer pool 1 associates it with BRI0’s dialer pool member 1 [...]

13-8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 13 Configurin g Dial Backup and Remote Management Dial Backup Feature Limitations dsl operating-mode auto ! ! Dial backup interface, associated with physical BRI0 interface. Dialer pool 1 associates it with BRI0’s dialer pool member 1 interf[...]

13-9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 13 Configuring Dial B ackup and Remo te Management Configuring Dia l Backup and Remo te Managemen t Through the ISDN S/T Port dsl operating-mode auto ! ! Dial backup interface, associated with physical BRI0 interface. Dialer pool 1 associate[...]

13-10 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 13 Configurin g Dial Backup and Remote Management Configuring Dial Backup and Remote Ma nagement Through the ISDN S/T Port Perform these steps to configure you r ro uter ISDN interf ace for use as a backup interf ace, beginni ng in global con[...]

13-11 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 13 Configuring Dial B ackup and Remo te Management Configuring Dia l Backup and Remo te Managemen t Through the ISDN S/T Port Step 8 ip address negotiated Example: Router(config-if)# ip address negotiated Router(config-if)# Specif ies that [...]

13-12 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 13 Configurin g Dial Backup and Remote Management Configuring Dial Backup and Remote Ma nagement Through the ISDN S/T Port Configure the Aggregator and ISDN Peer Router The aggregator is typically a con centrator router where your Cisco route[...]

13-13 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 13 Configuring Dial B ackup and Remo te Management Configuring Dial Backup an d Remote Manag ement Through a V.92 Modem dialer string 384020 dialer-group 1 peer default ip address pool isdn ! ip local pool isdn 192.168.2.1 ip http server ip[...]

13-14 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 13 Configurin g Dial Backup and Remote Management Configuring Dial Ba ckup and Remote Ma nagement Through a V.92 Modem Step 4 dialer in-band Example: Router(config-if)# dialer in-band Router(config-if)# Specif ies support for dial-on- demand [...]

13-15 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 13 Configuring Dial B ackup and Remo te Management Configuring Dial Backup an d Remote Manag ement Through a V.92 Modem Line Configuration Perform these steps to conf igure the line on the V .92 modem, begin ning in global co nf iguration m[...]

13-16 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 13 Configurin g Dial Backup and Remote Management Configuring Dial Ba ckup and Remote Ma nagement Through a V.92 Modem[...]

CH A P T E R BET A DRAFT - CISCO C ONFIDENTIAL 14-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 14 Troubleshooting Use the information in this chapter to help isolate prob lems you might encounter or to rule ou t the router as the source of a problem. This ch apter contains the following sections:[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-2 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 14 Troublesho oting ADSL Troub leshooting • Brief description of the st eps you ha ve tak en to isolate t he problem ADSL Troubleshooting If you e xperience trouble with the ADSL connection, v erify the foll[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 14 Troubleshooting ATM Troubleshooting Commands For details, see the “PortF ast Config uration Error” section in the Spanning T r ee Pr otocol Pr obl ems and Related Design Consider ations docu ment. ATM[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-4 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 14 Troublesho oting ATM Troubleshooting Commands Hardware is PQUICC_SAR (with Alcatel ADSL Module) Internet address is 14.0.0.16/8 MTU 1500 bytes, sub MTU 1500, BW 640 Kbit, DLY 80 usec, reliability 40/255, tx[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 14 Troubleshooting ATM Troubleshooting Commands show atm interface Command T o display A TM-specific information about an A TM interface, use the show atm i nterface atm 0 command from pri vile ged EXEC mode[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-6 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 14 Troublesho oting ATM Troubleshooting Commands T able 14-2 describes some o f the fields sho wn in the comman d output. debug atm Commands Use the debug comman ds to troubleshoot co nf iguration problems tha[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 14 Troubleshooting ATM Troubleshooting Commands Example 14-4 Viewing A TM Er r ors Router# debug atm errors ATM errors debugging is on Router# 01:32:02:ATM(ATM0.2):VC(3) Bad SAP received 4500 01:32:04:ATM(AT[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-8 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 14 Troublesho oting ATM Troubleshooting Commands 00:02:57: DSL: Sent command 0x5 00:02:57: DSL: Received response: 0x26 00:02:57: DSL: Unexpected response 0x26 00:02:57: DSL: Send ADSL_OPEN command. 00:02:57: [...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 14 Troubleshooting Software Upgrade Methods T able 14-3 describes some of the f ields sho wn in the debug atm pack et command output. Software Upgrade Methods Sev eral methods are a v ailable for upgrading s[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-10 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 14 Troublesho oting Recovering a Lost Password Change the Configuration Register T o change a conf igurati on register , follo w these steps: Step 1 Connect an ASCII terminal or a PC running a termin al emula[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-11 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 14 Troubleshooting Recovering a Lost Password Reset the Router T o reset the router , follow these steps: Step 1 If break is enabled, go t o Step 2 . If break is disabled, tur n the router off (O) , wait 5 [...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-12 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 14 Troublesho oting Recovering a Lost Password Reset the Password and Save Your Changes T o reset your password and sa ve the changes, follo w these steps: Step 1 Enter the conf igur e terminal co mmand to en[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-13 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Gu ide OL-6426-02 Chapter 14 Troubleshooting Managing You r Router with SDM Managing Your Router with SDM The Cisco SDM tool is a free softw are conf iguration uti lity , supporting the Cisco 1800 series integ rated services fi xed-[...]

BET A DRAFT - CISCO C ONFIDENTIAL 14-14 Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide OL-6426-02 Chapter 14 Troublesho oting Managing Your Route r with SDM[...]

P AR T 4 Reference Inf ormation[...]

[...]

A-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 APPENDIX A Cisco IOS Software Basic Skills Understanding ho w to use Cisco IOS software can sa v e you time when y ou are config uring your router . If you need a refresher , take a fe w minutes to read t his appendix. This appendix contain s the foll[...]

A-2 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix A Cisco I OS Softwa re Basic Ski lls Understanding Command Modes Y ou can us e the terminal emulation software to change settings for the type of de vice that is connected to the PC, in this case a rout er . Configure the softw are to the fol[...]

A-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix A Cisc o IOS Software Basic Skills Understanding Command Modes T able A -2 Command Modes Summary Mode Access Method Prompt Exit and Entrance Method About This Mode User EXEC Begin a session with your router . Router> T o exit a router sess[...]

A-4 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix A Cisco I OS Softwa re Basic Ski lls Getting Help Getting Help Y ou can use the ques tion mark (?) a nd ar ro w ke ys to help you enter comman ds. For a list of a v ailable commands at th at command mode, enter a question mark: Router> ? a[...]

A-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix A Cisc o IOS Software Basic Skills Enable Secret Passw ords and Enable Passwords Enable Secret Passwords and Enable Passwords By default, the router ships with out password protection. Because ma ny pri vile ged EXEC commands are used to set [...]

A-6 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix A Cisco I OS Softwa re Basic Ski lls Using Commands Using Commands This section pro vides some tips about entering Cisco IOS commands at the command-line interface (CLI). Abbreviating Commands Y ou o nly have to enter enough ch aracters for t[...]

A-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix A Cisc o IOS Software Basic Skills Saving Config uration Chan ges Saving Configuration Changes Y ou ne ed to enter the copy running-conf ig startup-config command to sa ve your configuration changes to non v olatile RAM (NVRAM) so that the y [...]

A-8 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix A Cisco I OS Softwa re Basic Ski lls Where to Go Next[...]

B-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 APPENDIX B Concepts This appendix contains conceptual information that may be useful to In ternet service provi ders or network admin istrators when the y conf igure Cisco routers. T o re vie w some typical net work scenarios, see Chapter 2, “Sample[...]

B-2 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts SHDSL SHDSL SHDSL is a technology based on the G.SHDSL (G.9 91.2) standard that allo ws both data and v oice to be transmitted o ver the same l ine. SHDSL is a packet-based netw ork technology that allo ws high -speed transmission [...]

B-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts PPP Authentication Protocols RIP and Enhanced IGRP dif fer in se v eral ways, as sh own in Ta b l e B - 1 . RIP RIP is an associated protocol for IP , and is widely used for routing protocol traf f ic ov er the Inter net. RIP is a [...]

B-4 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts PPP Authentication Protocols (start/stop) and bit-o riented synchronous encap s ulation, netw ork protocol multi plexin g, link confi guration, link qualit y testing, error detection , and option ne gotiation for su ch capabilities[...]

B-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts TACACS+ TACACS+ Cisco 1800 fixed-configuration routers support the T erminal Access Controller Ac cess Control System Plus (T ACA CS+) protocol through T elnet. T ACA CS+ is a Cisco proprietary authentication protocol that pro vide[...]

B-6 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts Dial Backu p PVC A PVC is a connection between remote hosts and ro uters. A PVC is establi shed for each A TM end node with which the router communicate s. The characteristi cs of the PVC that are established when it is created are[...]

B-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts NAT line is up, the backup interface is placed in standb y mode. In standby mode, the backup interface is effecti vely shut do wn until it is en abled. Any rou te a ssociated with the backup interface does not appear in the rout in[...]

B-8 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts Easy IP (Phase 1) T ranslations can be static or dynamic. A static address translation establishes a one-to-one mapping between t he inside ne twork and the o utside dom ain. Dyna mic address t ranslations a re defined by describin[...]

B-9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts QoS QoS This section descri bes Quality of Service (QoS) paramet ers, including the follo wing: • IP Precedence • PPP Fragmentation and Interlea ving • CBWFQ • RSVP • Lo w Latency Queuing QoS refers to the capability of a[...]

B-10 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts QoS In general, multilink PPP wi th interlea ving is used in conjunc tion with CBWFQ and RSVP or IP Precedence to ensure voice packet deli v ery . Use mu ltilink PPP with interleaving and CBW FQ to define ho w data is managed; use[...]

B-11 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts Access Lists Access Lists W ith basic standard and static extend ed access list s, yo u can approximate session f iltering by using the established ke yword w ith the permit command. The establi shed ke yword f ilters TCP packets [...]

B-12 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix B Concepts Access Lists[...]

C-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 APPENDIX C ROM Monitor The R OM monitor f irmwa re runs when the router is po we red up or reset. The fir mware helps to initialize the processor hardware an d boot the operating sy stem sof tware. Y ou can use the R OM monitor to perform certain conf[...]

C-2 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix C ROM Monitor ROM Monitor Commands T imesaver Break (system in terrupt) is alw ays enabled for 60 second s after th e router reboot s, regardless of whet her it is set to on or of f in the co nfigu ration reg ister . During this 60-second win[...]

C-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix C ROM Monitor Command Descri ptions Command Descriptions Ta b l e C - 1 describes the most commonly used R OM moni tor commands. Disaster Recovery with TFTP Download The standard way t o load ne w software on your router is to u se the copy t[...]

C-4 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix C ROM Monitor Disaster Recovery with TFTP D ownload Note The commands described in this section are case sensiti ve and must be entered exactly as shown. Required Variables These vari ables must be set with these commands before yo u use the [...]

C-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix C ROM Monitor Disaster Recovery with TFTP Download Using the TFTP Download Command Perform these steps in R OM monitor mode to do wnload a f ile through TFTP . Step 1 Use the approp riate commands to enter all the required v ariables and any [...]

C-6 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix C ROM Monitor Configuration Register Configuration Register The virtual conf iguration r egist er is in non volatil e RAM (NVRAM) and has the same fu nctionality as other Cisco routers. Y ou can vie w or modify the virt ual config uration reg[...]

C-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix C ROM Monitor Console Download enabled are: diagnostic mode console baud: 9600 boot: the ROM Monitor do you wish to change the configuration? y/n [n]: You must reset or power cycle for new config to take effect Console Download Y ou can use c[...]

C-8 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix C ROM Monitor Debug Commands Follo w these steps to run Xmodem: Step 1 Mo ve the image f ile to the local dri ve where Xmodem will ex ecute. Step 2 Enter the xmodem command. Error Reporting Because the R OM monitor console download uses the c[...]

C-9 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix C ROM Monitor Exiting the ROM Monitor • sysret —Displays return information f rom the last bo oted system image. Th is information inclu des the reason for terminat ing the image, a stack dump of up to eight frames, an d, if an except ion[...]

C-10 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix C ROM Monitor Exiting the ROM Monitor[...]

D-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 APPENDIX D Common Port Assignments Ta b l e D - 1 lists currently assigned T ransmission Cont rol Protocol (TCP) port numbers. T o the e xtent possible, the User Datagram Protocol (UDP) uses the same numbers. T able D-1 Cur rently Assigned TCP and UDP[...]

D-2 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 Appendix D Common Po rt Assignments 77 – Any pri v ate RJE service 79 FINGER Finger 95 SUPDUP SUPDUP Protocol 101 HOST N AME Network interface card (NIC) hostname server 102 ISO-TSAP ISO-Transport Service Access Point ( TSAP) 103 X400 X400 104 X400-[...]

IN-1 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 INDEX Symbols -? command C-3 ? command A-4, C-3 Numerics 802.1x authentication 5-8 A AAL B-6 AAL3/4 B-6 AAL5 B-6 abbreviating commands A-6 access groups 12-3 access lists applying to interfaces 8-4 configuration comman ds 12-2 configuring for firewal[...]

Index IN-2 Cisco 1800 Series Integrated Services Rout ers (Fixed) Soft ware Configuration Guide OL-6426-02 configuring 1-10, 9-5 broadcast intervals, RIP B-3 C CAR B-9 caution, described 1-13 CBAC firewall configuring 12-3 CBWFQ B-9 Challenge Handshake Au th enticati on Protoc ol See CHAP CHAP B-4, B-4 Cisco IOS firewall IDS 12-4 Cisco IOS queues B[...]

Index IN-3 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 IP EIGRP 1-15 to 1-16 IPSec tunnel 6-1 loopback interface 1-9 to 1-10 NAT 4-9 PPPoE with NAT 3-1, 3-2 RIP 1-14 router from PC A-1 static routes 1-12 VLANs 5-1 VPNs 6-1, 7-3 WAN inte rfaces 1-7 your network, preparin g for 1-4 confreg command C-[...]

Index IN-4 Cisco 1800 Series Integrated Services Rout ers (Fixed) Soft ware Configuration Guide OL-6426-02 recovering 14-12 setting A-5 encapsulation B-6 See also examples Enhanced Interior Gateway Routing Protocol See EIGRP error messages, configuration A-6 error reporting, ROM monitor C-8 errors, ATM, displaying 14-6 Ethernet B-5 events, ATM, dis[...]

Index IN-5 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 interface port labels (table) 1-1 interfaces ATM displayin g status for 14-5 dialer B-6 interleaving PPP B-9 Internet connection, sett ing up 1-4 IP overview B-2 routing, set ting up 1-4 IPCP B-8 IP multicast switch ing 5-9 IP Precedence with C[...]

Index IN-6 Cisco 1800 Series Integrated Services Rout ers (Fixed) Soft ware Configuration Guide OL-6426-02 network proto cols B-2 nonvolatile RAM See NVRAM note, described 1-13 NVRAM, sav ing changes to A-7 O overloading, defined B-8 P packets, ATM, di splaying 14-8 PAP B-4 parameters global, settin g up 1-6 Password Authenticati on Protocol See PA[...]

Index IN-7 Cisco 1800 Series Integrated Services Rout ers (Fixed) Software Configuration Guide OL-6426-02 configuring 13-9, 13-13 reset command C-3 resetting configuration register value 14-12 passwords 14-12 router 14-11 RIP configuring 1-14 overview B-2 to B-3 ROM monitor commands C-2 debug comm ands C-8, C-9 entering C-1 exiting C-9 root radio s[...]

Index IN-8 Cisco 1800 Series Integrated Services Rout ers (Fixed) Soft ware Configuration Guide OL-6426-02 upgrading software, methods for 14-9 User Datagram Protocol See UDP user EXEC mode A-2, A-3 V V.92 modem for dial backup 13-13 variables, command listing A-4 VC B-6 verify DHCP server co nfiguration 5-4 Easy VPN configuration 6-10 PPPoE with N[...]