Manuels d'utilisation pour Ulterius Technologies LLC FDN40

Table des matières

• INTRODUCTION

  21
• 1.1 PURPOSE AND SCOPE

  21
• 1.2 ACRONYMS

  21
• 1.3 REFERENCES

  23
• 1.4 DOCUMENT CONVENTIONS

  23
• 1.5 GENERAL CONFIGURATIONS

  24
• 1.5.1 CLI Modes

  24
• 1.5.2 SNMP Configurations

  24
• SYSTEM FEATURES

  27
• 2.1 TOPOLOGIES

  27
• 2.2 SYSTEM FEATURES / CONFIGURATIONS

  28
• 2.2.1 Configuring the Default IP Address

  28
• 2.2.1.1 CLI Configuration

  28
• 2.2.1.2 WEB Configuration

  29
• 2.2.2 Configuring IP address for an Interface

  30
• 2.2.2.1 CLI Configuration

  30
• 2.2.2.2 WEB Configuration

  31
• 2.2.3 Configuring the Base MAC Address

  32
• 2.2.3.1 CLI Configuration

  32
• 2.2.3.2 WEB Configuration

  33
• 2.2.4 Configuring the Login Authentication Method

  33
• 2.2.4.1 CLI Configuration

  33
• 2.2.4.2 Web Configuration

  33
• 2.2.5 Configuring the Restoration File Name

  34
• 2.2.5.1 CLI Configuration

  34
• 2.2.5.2 Web Configuration

  35
• 2.2.6 Saving the Current Configurations for Restoration

  36
• 2.2.7 Erasing a Saved Configuration File

  37
• 2.2.8 Copying System Logs into Remote Location

  38
• 2.2.8.1 Web Configuration

  38
• 2.2.9 Copying a File from Remote Site/Flash to Remote Site/Flash

  39
• 2.2.9.1 Web Configuration

  39
• 2.2.10 Configuring the Default VLAN Identifier

  40
• 2.2.10.1 CLI Configuration

  40
• 2.2.10.2 WEB Configuration

  41
• 2.2.11 Configuring Switch Clock

  41
• 2.2.11.1 CLI Configuration

  41
• 2.2.11.2 Web Configuration

  41
• 2.2.12 Enabling/Disabling Console CLI through Serial Port

  41
• 2.2.12.1 CLI Configuration

  41
• 2.2.12.2 WEB Configuration

  42
• 2.2.13 Enabling/Disabling HTTP

  42
• 2.2.14 Configuring HTTP Port Number

  42
• 2.2.14.1 CLI Configuration

  42
• 2.2.14.2 Web Configuration

  43
• 2.2.15 Configuring HTTP Authentication scheme

  43
• 2.2.15.1 CLI Configuration

  43
• 2.2.15.2 WEB Configuration

  45
• 2.2.16 Enabling/Disabling Trap Generation on an Interface

  45
• 2.2.16.1 CLI Configuration

  45
• 2.2.16.2 WEB Configuration

  46
• 2.2.17 Configuring an Interface as Switch Port/ Router Port

  47
• 2.2.17.1 CLI Configuration

  47
• 2.2.17.2 Web Configuration

  47
• 2.2.18 Configuring Debug Logging

  48
• 2.2.18.1 CLI Configuration

  48
• 2.2.18.2 Web Configuration

  48
• 2.2.19 Configuring ACL Filters

  49
• 2.2.19.1 CLI Configuration

  49
• 2.2.19.2 WEB Configuration

  51
• 2.2.19.2.1 IP Standard Access List

  51
• 2.2.19.2.2 MAC Access List

  52
• 2.2.20 Software image upgradation

  53
• 2.2.20.1 Software image upgrade through CLI

  53
• 2.2.20.1.1 Upgrade from R1_1_2 image to R1_1_3

  53
• 2.2.20.1.2 Upgrade from R1_1_3 image to > R1_1_3

  55
• 2.2.20.2 Software image upgrade through WEB

  55
• 2.2.21 Setting default OOB IP for system(first time in a new board)

  57
• 2.2.21.1 CLI Configuration

  57
• 2.2.21.2 WEB Configuration

  58
• DHCP SERVER

  59
• 3.1 PROTOCOL DESCRIPTION

  59
• 3.2 TOPOLOGY

  59
• 3.3 CONFIGURATION GUIDELINES

  59
• 3.4 DEFAULT CONFIGURATIONS

  60
• 3.5 DHCP CONFIGURATIONS

  60
• 3.5.1 Enabling DHCP server

  60
• 3.5.1.1 CLI Configuration

  60
• 3.5.1.2 WEB Configuration

  61
• 3.5.2 Configuring Offer Reuse Time Out

  61
• 3.5.2.1 CLI Configuration

  61
• 3.5.2.2 WEB Configuration

  62
• 3.5.3 Configuring DHCP Address Pools

  62
• 3.5.3.1 Creating a DHCP Address Pool

  62
• 3.5.3.2 Configuring End IP for the Pool

  63
• 3.5.3.3 Configuring Lease Time

  63
• 3.5.3.4 Configuring Utilization Threshold

  64
• 3.5.3.5 WEB Configuration for DHCP Address Pool

  65
• 3.5.4 Creating an Excluded Address in the Pool

  65
• 3.5.4.1 CLI Configuration

  65
• 3.5.4.2 WEB Configuration

  66
• 3.5.5 Configuring DHCP Pool Options

  66
• 3.5.5.1 Configuring a Domain Name Option

  66
• 3.5.5.2 Configuring DNS Option with Single IP Address

  67
• 3.5.5.3 Configuring NTP Option with Two IP Addresses

  68
• 3.5.5.4 Configuring Default Router

  69
• 3.5.5.5 Configuring Options Specific to Address Pools

  70
• 3.5.5.6 WEB Configuration for DHCP Pool Options

  71
• 3.5.6 Configuring Host Specific Options

  71
• 3.5.6.1 CLI Configuration

  71
• RIP

  73
• 4.1 PROTOCOL DESCRIPTION

  73
• 4.2 TOPOLOGY

  74
• 4.3 CONFIGURATION GUIDELINES

  74
• 4.3.1 Configuration in FDN40-1

  74
• 4.3.2 Configuration in FDN40-2

  75
• 4.3.3 Configuration in FDN40-3

  76
• 4.4 DEFAULT CONFIGURATIONS

  76
• 4.5 RIP CONFIGURATIONS

  76
• 4.5.1 Enabling and Disabling RIP

  76
• 4.5.1.1 Enabling RIP

  76
• 4.5.1.2 Disabling RIP

  77
• 4.5.1.3 WEB Configuration

  77
• 4.5.2 Enabling RIP on an IP Network

  77
• 4.5.2.1 CLI Configuration

  78
• 4.5.2.2 WEB Configuration

  78
• 4.5.3 Configuring RIP Security

  79
• 4.5.3.1 CLI Configuration

  79
• 4.5.3.2 WEB Configuration

  80
• 4.5.4.1 CLI Configuration

  80
• 4.5.4.2 WEB Configuration

  82
• 4.5.5 Configuring RIP Neighbor

  82
• 4.5.5.1 CLI Configuration

  82
• 4.5.5.2 WEB Configuration

  83
• 4.5.6 Configuring RIP Passive Interface

  83
• 4.5.6.1 CLI Configuration

  83
• 4.5.6.2 WEB Configuration

  85
• 4.5.7 Configuring Output-delay

  85
• 4.5.7.1 CLI Configuration

  85
• 4.5.7.2 WEB Configuration

  87
• 4.5.8 Configuring Redistribution

  87
• 4.5.8.1 CLI Configuration

  87
• 4.5.8.2 WEB Configuration

  88
• 4.5.8.3 Sample Configuration to Test Redistribution

  88
• 4.5.9 Configuring Default-metric

  91
• 4.5.9.1 CLI Configuration

  91
• 4.5.9.2 WEB Configuration

  91
• 4.5.9.3 Sample Configuration to Test Default-metric

  91
• 4.5.10 Configuring Auto-summary

  94
• 4.5.10.1 CLI Configuration

  94
• 4.5.10.2 WEB Configuration

  96
• 4.5.11 Configuring Interface Specific RIP Parameters

  96
• 4.5.11.1 Configuring RIP Default Route Propagation

  96
• 4.5.11.2 Configuring to Install Default Route

  97
• Installation

  97
• 4.5.11.3 Configuring Version for Receiving RIP Advertisement

  100
• 4.5.11.4 Configuring Version for Transmitting RIP Advertisement

  101
• 4.5.11.5 Configuring Timer Basic

  102
• 4.5.11.6 Configuring RIP Split Horizon

  103
• 4.5.11.7 WEB Configuration for RIP Interface Paramters

  104
• 4.5.12 Configuring RIP Summary-address

  105
• 4.5.12.1 CLI Configuration

  105
• 4.5.12.2 WEB Configuration

  105
• 4.5.12.3 Sample Configuration to configure RIP summary-address

  106
• 4.5.13 Configuring Interface Specific Authentication

  107
• 4.5.13.1 CLI Configuration

  107
• 4.5.13.2 WEB Configuration

  108
• 4.5.13.3 Sample Configuration for Enabling Authentication

  108
• 4.5.13.4 Sample Configuration for Enabling Crypto Authentication

  110
• 4.5.14 Configuring Debug Level for RIP

  113
• 4.5.15 Configuring Route Map – RIP

  113
• 4.5.15.1 Configuring Route Map

  114
• 4.5.15.1.1 CLI Configuration

  114
• 4.5.15.1.2 WEB Configuration

  114
• 4.5.15.2 Configuring Route Map Match Criteria

  114
• 4.5.15.2.1 CLI Configuration

  114
• 4.5.15.2.2 WEB Configuration

  116
• 4.5.15.3 Configuring RIP Distance

  116
• 4.5.15.3.1 CLI Configuration

  116
• 4.5.15.3.2 WEB Configuration

  117
• 4.5.15.4 Configuring Redistribution with Route Map

  117
• 4.5.15.4.1 CLI Configuration

  117
• 4.5.15.5 WEB Configuration

  118
• VLAN

  119
• 5.1 PROTOCOL DESCRIPTION

  119
• 5.2 TOPOLOGY

  120
• 5.3 CONFIGURATION GUIDELINES

  120
• 5.4 DEFAULT CONFIGURATIONS

  121
• 5.5 VLAN CONFIGURATIONS

  121
• 5.5.1 Configuring Static VLAN

  121
• 5.5.1.1 CLI Configuration

  121
• 5.5.1.2 WEB Configuration

  123
• 5.5.2 Deleting a VLAN

  124
• 5.5.2.1 CLI Configuration

  124
• 5.5.2.2 Web Configuration

  124
• 5.5.3 Enabling VLANs

  124
• 5.5.4 Classifying Frames to a VLAN

  124
• 5.5.4.1 Port Based Classification

  124
• 5.5.4.2 WEB Configuration

  125
• 5.5.5 Configuring Port Filtering

  126
• 5.5.5.1 Configuring Acceptable Frametype

  126
• NAT

  129
• 6.1 TOPOLOGY

  129
• 6.2 CONFIGURATION GUIDELINES

  130
• 6.3 DEFAULT CONFIGURATIONS

  130
• 6.4 NAT CONFIGURATIONS

  130
• 6.4.1 Enabling and Disabling NAT on an Interface

  130
• 6.4.1.1 CLI Configuration

  130
• 6.4.1.2 WEB Configuration

  131
• 6.4.2 Enabling and Disabling NAPT

  132
• 6.4.2.1 CLI Configuration

  132
• 6.4.2.2 WEB Configuration

  133
• 6.4.3 Configuring Static NAT and NAPT

  134
• 6.4.3.1 CLI Configuration

  134
• 6.4.3.2 WEB Configuration

  135
• 6.4.4 Configuring Dynamic NAT

  136
• 6.4.4.1 CLI Configuration

  137
• 6.4.4.2 WEB Configuration

  138
• 6.4.5 Configuring Virtual Server

  138
• 6.4.5.1 CLI Configuration

  138
• 6.4.5.2 WEB Configuration

  139
• IPSEC

  141
• 7.1 PROTOCOL DESCRIPTION

  141
• 7.2 TOPOLOGY

  142
• 7.3 IPSEC CONFIGURATIONS

  142
• 7.3.1 Enabling VPN Module

  142
• 7.3.1.1 CLI Configuration

  142
• 7.3.1.2 WEB Configuration

  143
• 7.3.2 Configuring VPN IPSec Policy

  143
• 7.3.2.1 Creating VPN Policy

  143
• 7.3.2.2 Configuring VPN Policy Type

  144
• 7.3.2.3 Configuring IPSec mode

  145
• 7.3.2.4 Configuring Peer Identity

  147
• 7.3.2.5 Configuring IPSec Session Keys

  148
• 7.3.2.6 Configuring Access List

  149
• 7.3.2.7 Binding of Policy

  150
• 7.3.2.8 Removing Policy from Interface

  151
• 7.3.2.9 Deleting Policy

  152
• 7.3.2.10 WEB Configuration for IPSec VPN Policy Parameters

  152
• 7.3.3 Sample Configuration

  154
• IKE

  157
• 8.1 PROTOCOL DESCRIPTION

  157
• 8.1.1 IKEv1

  157
• 8.1.1.1 Phase 1 – Main/Aggressive

  157
• 8.1.1.1.1 Main Mode

  157
• 8.1.1.1.2 Aggressive Mode

  158
• 8.1.1.2 Phase 2 - Quick Mode

  158
• 8.1.2 IKEv2

  158
• 8.2 IKE CONFIGURATIONS

  159
• 8.2.1 Importing and Deleting RSA Key

  159
• 8.2.1.1 Importing a RSA Key

  159
• 8.2.1.2 Deleting a RSA Key Pair

  159
• 8.2.2 Configuring Certificates

  159
• 8.2.2.1 Importing a Certificate

  159
• 8.2.2.2 Deleting a Certificate

  161
• 8.2.2.3 Importing a CA Certificate

  161
• 8.2.2.4 Deleting a CA Certificate

  163
• 8.2.2.5 Importing a Peer Certificate

  164
• 8.2.2.6 Deleting Peer Certificate

  165
• 8.2.3 Configuring Remote Identity and Authentication Method

  166
• 8.2.3.1 Authentication Method Preshered-Key

  166
• 8.2.3.2 Authentication Method RSA Certificate

  166
• 8.2.3.3 Deleting a Configured Remote Identity

  167
• 8.2.3.4 WEB Configuration

  167
• 8.2.4 Creating VPN Policy

  168
• 8.2.4.1 CLI Configuration

  168
• 8.2.4.2 WEB Configuration

  169
• 8.2.5 Configuring VPN IKE Policy Parameters

  170
• 8.2.5.1 Configuring IKE Version

  170
• 8.2.5.2 Configuring Key Mode

  170
• 8.2.5.2.1 Certificate Mode

  170
• 8.2.5.2.2 Preshared Key Mode

  171
• 8.2.5.3 Configuring Peer IP

  171
• 8.2.5.4 Configuring IPSec Mode

  172
• 8.2.5.4.1 Tunnel Mode

  172
• 8.2.5.5 Configuring Remote Identity

  172
• 8.2.5.6 Configuring Local Identity

  173
• 8.2.5.7 Configuring Phase 1 Parameters

  174
• 8.2.5.7.1 For IKEv1

  175
• 8.2.5.7.2 For IKEv2

  176
• 8.2.5.8 Configuring Phase 2 Parameters

  177
• ESP Protocol with Integrity

  177
• 8.2.5.9 Configuring Access-list

  178
• Access-list for Tunnel Policy

  178
• 8.2.5.10 Attaching the Policy to the Interface

  179
• 8.2.5.11 Removing the Policy from the Interface

  179
• 8.2.5.12 Deleting the Policy

  180
• 8.2.5.13 Web Configuration for VPN IKE Policy

  180
• 8.2.6 Displaying the VPN Statistics

  182
• 8.2.6.1 CLI Configuration

  182
• 8.2.6.2 WEB Configuration

  182
• 8.3 IKE EXAMPLES

  183
• 8.3.1 General Configuration

  183
• 8.3.2 Configuring IKEv1 - Tunnel Mode - Preshared key

  183
• 8.3.2.1 DUT1 Configuration

  184
• 8.3.2.2 DUT2 Configuration

  186
• FIREWALL

  189
• 9.1 TOPOLOGY

  189
• 9.2 DEFAULT CONFIGURATIONS

  189
• 9.3 FIREWALL CONFIGURATIONS

  189
• 9.3.1 Enabling and Disabling Firewall Module

  190
• 9.3.1.1 CLI Configuration

  190
• 9.3.1.2 WEB Configuration

  190
• 9.3.2 Configuring Firewall Filters for IPv4

  191
• 9.3.2.1 CLI Configuration

  191
• 9.3.2.2 WEB Configuration

  194
• 9.3.3 Configuring Firewall Access List

  196
• 9.3.3.1 CLI Configuration

  196
• 9.3.3.2 WEB Configuration

  204
• 9.3.4 Configuring Zones

  206
• 9.3.4.1 CLI Configuration

  206
• 9.3.4.2 WEB Configuration

  207
• IPS-IDS

  209
• 10.2 TOPOLOGY

  209
• 10.3 DEFAULT CONFIGURATIONS

  209
• 10.4 IPS-IDS CONFIGURATIONS

  210
• 10.4.1 Enabling and Disabling IPS-IDS Module

  210
• 10.4.1.1 CLI Configuration

  210
• 10.4.1.2 WEB Configuration

  210
• 10.4.2 Enabling and Disabling IDS Logging

  211
• 10.4.2.1 CLI Configuration

  211
• 10.4.2.2 WEB Configuration

  212
• 10.4.3 Configuring IDS Logging Size and Log Size Threshold

  213
• 10.4.3.1 CLI Configuration

  213
• 10.4.3.2 WEB Configuration

  214
• 10.4.4 Configuring IPS status in firewall access-list

  214
• 10.4.4.1 CLI Configuration

  214
• 10.4.4.2 WEB Configuration

  218
• 10.4.5 Displaying IPS Categories and IPS Rules

  220
• 10.4.5.1 CLI Configuration

  220
• 10.4.5.2 WEB Configuration

  222
• POE

  223
• 11.1 PROTOCOL DESCRIPTION

  223
• 11.2 TOPOLOGY

  223
• 11.3 POE CONFIGURATIONS

  224
• 11.3.1 Enabling POE Module

  224
• 11.3.1.1 CLI Configuration

  224
• 11.3.1.2 WEB Configuration

  225
• 11.3.2 Enabling POE on port

  225
• 11.3.2.1 CLI Configuration

  225
• 11.3.2.2 WEB Configuration

  226
• 11.3.3 To apply power to a POE device

  227
• 11.3.3.1 CLI Configuration

  227
• 11.3.3.2 WEB Configuration

  228
• 11.3.4 To view the PSE status

  228
• 11.3.4.1 CLI Configuration

  228
• 11.3.4.2 WEB Configuration

  229
• WI-FI

  231
• 12.1 TOPOLOGY

  231
• 12.2 CONFIGURATION GUIDELINES

  232
• 12.3 W I-FI CONFIGURATIONS

  232
• 12.3.1 Enabling WiFi interfaces

  232
• 12.3.1.1 CLI Configuration

  232
• 12.3.1.2 WEB Configuration

  233
• 12.3.2 Disabling Wi-Fi interface

  233
• 12.3.2.1 CLI Configuration

  233
• 12.3.2.2 WEB Configuration

  234
• 12.3.3 VAP creation and VLAN association

  235
• 12.3.3.1 CLI Configuration

  235
• 12.3.3.2 WEB Configuration

  236
• 12.3.3.2.1 VAP (SSID) Creation

  236
• 12.3.3.2.2 VLAN Association with VAP

  237
• 12.3.3.2.3 SSID Summary

  237
• 12.3.4 VAP deletion

  237
• 12.3.4.1 CLI Configuration

  237
• 12.3.4.2 WEB Configuration

  238
• 12.3.5 Rate-limit Configurations

  238
• 12.3.5.1 CLI Configurations

  238
• 12.3.5.2 WEB Configuration

  239
• 12.3.6 Configuring Mac-Filtering for VAP

  240
• 12.3.6.1 CLI Configuration

  240
• 12.3.6.2 WEB Configuration

  241
• 12.3.7 Configuring Authentication Algorithms for VAP

  241
• 12.3.7.1 CLI Configuration

  241
• 12.3.7.1.1 Open Authentication

  241
• 12.3.7.1.2 WEP Authentication

  242
• 12.3.7.1.3 WPA2 PSK AUTHENTICATION

  243
• 12.3.7.2 WEB Configuration

  243
• 12.4 DISPLAYING THE CONFIGURATIONS

  244
• 12.5 W I-FI CLIENT ASSOCIATION

  246
• 12.5.1 CLI Configuration

  246
• 12.5.2 WEB Configuration

  247
• NTP

  249
• 13.1 PROTOCOL DESCRIPTION

  249
• 13.2 TOPOLOGY

  250
• 13.3 CONFIGURATION GUIDELINES

  250
• 13.4 DEFAULT CONFIGURATIONS

  250
• 13.5 NTP CONFIGURATIONS

  251
• 13.5.1 Configuring NTP system

  251
• 13.5.1.1 Enabling the NTP system

  251
• 13.5.1.2 Disabling the NTP system

  251
• 13.5.1.3 Configuring the NTP Client Mode

  252
• 13.5.1.4 2.WEB Configuration

  252
• 13.5.1.4.1 Enabling/ Disabling NTP

  252
• 13.5.1.4.2 Configuring NTP Client Mode

  253
• 13.5.2 Configuring NTP Server

  253
• 13.5.2.1 CLI Configuration

  253
• 13.5.2.2 Web Configuration

  254
• QOS

  257
• 14.1 PROTOCOL DESCRIPTION

  257
• 14.2 TOPOLOGY

  257
• 14.3 CONFIGURATION GUIDELINES

  258
• 14.4 DEFAULT CONFIGURATIONS

  258
• 14.5 QOS CONFIGURATIONS

  258
• 14.5.1 Configuring QoS Subsystem

  258
• 14.5.1.1 Enabling the QoS Subsystem

  258
• 14.5.1.2 Disabling the QoS Subsystem

  259
• 14.5.1.3 Making the QoS Subsystem Up

  259
• 14.5.1.4 WEB Configuration

  260
• 14.5.2 Configuring Rate-Limiting at Port level (Ingress port-rate limiting)

  260
• 14.5.2.1 CLI Configuration

  260
• 14.5.2.2 WEB Configuration

  260
• 14.5.3.1 CLI Configuration

  261
• 14.5.3.2 WEB Configuration

  261
• 14.5.4.1 CLI Configuration

  262
• 14.5.4.2 WEB Configuration

  263
• 14.5.4.2.1 Shape Template

  263
• 14.5.4.2.2 Queue Table

  264
• 14.5.5 Configuring Queue Template

  264
• 14.5.5.1 CLI Configuration

  264
• 14.5.5.2 WEB Configuration

  265
• 14.5.5.2.1 QueueTemplate

  265
• 14.5.5.2.2 Queue Table

  266
• 14.5.6 Configuring Queue Map

  266
• 14.5.6.1 CLI Configuration

  266
• 14.5.6.2 WEB Configuration

  267
• 14.5.6.2.1 QueueTemplate

  267
• 14.5.7 Configuring Scheduler

  267
• 14.5.7.1 CLI Configuration

  267
• 14.5.7.2 WEB Configuration

  268
• OSPF

  269
• 15.1 PROTOCOL DESCRIPTION

  269
• 15.2 TOPOLOGY

  270
• 15.3 CONFIGURATION GUIDELINES

  271
• 15.3.1 Configuration in FDN40-1

  271
• 15.3.2 Configuration in FDN40-2

  271
• 15.3.3 Configuration in FDN40-3

  272
• 15.3.4 Configuration in FDN40-4

  273
• 15.3.5 Configuration in FDN40-5

  273
• 15.3.6 Configuration in FDN40-6

  274
• 15.3.7 Configuration in FDN40-7

  275
• 15.3.8 Configuration in FDN40-6

  275
• 15.3.9 Configuration in FDN40-9

  276
• 15.4 DEFAULT CONFIGURATIONS

  276
• 15.5 OSPF CONFIGURATIONS

  279
• 15.5.1 Enabling and Disabling OSPF

  279
• 15.5.1.1 CLI Configuration

  279
• 15.5.1.2 WEB Configuration

  279
• 15.5.2 Configuring Router-id

  280
• 15.5.2.1 CLI Configuration

  280
• 15.5.2.2 WEB Configuration

  280
• 15.5.3 Configuring OSPF Interface

  281
• 15.5.3.1 CLI Configuration

  281
• 15.5.3.2 WEB Configuration

  283
• 15.5.4 Configuring OSPF Interface Parameters

  284
• 15.5.4.1 CLI Configuration

  284
• 15.5.4.2 WEB Configuration

  284
• 15.5.5 Configuring OSPF Interface Priority

  284
• 15.5.5.1 CLI Configuration

  284
• 15.5.5.2 WEB Configuration

  285
• 15.5.6 Configuring LSA Retransmission Level

  285
• 15.5.6.1 CLI Configuration

  285
• 15.5.6.2 WEB Configuration

  286
• 15.5.7 Configuring Hello Interval

  286
• 15.5.7.1 CLI Configuration

  286
• 15.5.7.2 WEB Configuration

  286
• 15.5.8 Configuring Dead Interval

  286
• 15.5.8.1 CLI Configuration

  287
• 15.5.8.1 WEB Configuration

  287
• 15.5.9 Configuring Network Type

  287
• 15.5.10 Configuring Interface Cost

  287
• 15.5.10.1 CLI Configuration

  287
• 15.5.10.2 WEB Configuration

  288
• 15.5.11 Configuring OSPF Authentication

  288
• 15.5.11.1 Configuring Simple Password Authentication

  289
• 15.5.11.1.1 CLI Configuration

  289
• 15.5.11.1.2 WEB Configuration

  291
• 15.5.11.2 Configuring Message-Digest Authentication

  292
• 15.5.11.2.1 CLI Configuration

  292
• 15.5.11.2.2 WEB Configuration

  293
• 15.5.11.3 Configuring Message-Digest with key constants

  294
• 15.5.11.3.1 CLI Configuration

  294
• 15.5.11.3.2 WEB Configuration

  295
• 15.5.11.4 Configuring NULL Authentication

  295
• 15.5.11.4.1 CLI Configuration

  295
• 15.5.11.4.2 WEB Configuration

  296
• 15.5.12 Configuring Passive Interface

  296
• 15.5.12.1 CLI Configuration

  296
• 15.5.12.2 WEB Configuration

  298
• 15.5.13 Configuring OSPF Area Parameters

  298
• 15.5.13.1 Configuring Stub Area

  298
• 15.5.13.1.1 CLI Configuration

  299
• 15.5.13.1.2 WEB Configuration

  299
• 15.5.13.2 Configuring ASBR Router

  300
• 15.5.13.2.1 CLI Configuration

  300
• 15.5.13.2.2 WEB Configuration

  300
• 15.5.13.3 Configuring Redistribution

  300
• 15.5.13.3.1 CLI Configuration

  300
• 15.5.13.3.2 WEB Configuration

  307
• 15.5.13.4 Configuring NSSA Area

  307
• 15.5.13.4.1 CLI Configuration

  307
• 15.5.13.4.2 WEB Configuration

  307
• 15.5.13.5 Configuring Summary Address

  307
• 15.5.13.5.1 CLI Configuration

  307
• 15.5.13.5.2 WEB Configuration

  308
• 15.5.13.6 Configuring Area-default Cost

  309
• 15.5.13.6.1 CLI Configuration

  309
• 15.5.13.6.2 WEB Configuration

  317
• 15.5.13.7 Configuring NSSA asbr-default-route translator

  318
• 15.5.13.7.1 CLI Configuration

  318
• 15.5.13.7.2 WEB Configuration

  318
• 15.5.13.8 Configuring NSSA Area Translation Role

  318
• 15.5.13.8.1 CLI Configuration

  318
• 15.5.13.8.2 WEB Configuration

  319
• 15.5.13.9 Configuring Stability Interval for NSSA

  319
• 15.5.13.9.1 CLI Configuration

  319
• 15.5.13.9.2 WEB Configuration

  320
• 15.5.13.10 Configuring ABR-Type

  320
• 15.5.13.10.1 CLI Configuration

  320
• 15.5.13.10.2 WEB Configuration

  321
• 15.5.13.11 Configuring RFC 1583 Compatibility

  321
• 15.5.13.11.1 CLI Configuration

  321
• 15.5.13.11.2 WEB Configuration

  321
• 15.5.13.12 Configuring Default-information Originate Always

  322
• 15.5.13.12.1 CLI Configuration

  322
• 15.5.13.12.2 WEB Configuration

  322
• 15.5.13.13 Configuring Redist-Config

  322
• 15.5.13.13.1 CLI Configuration

  322
• 15.5.13.13.2 WEB Configuration

  328
• 15.5.13.14 Configuring Neighbor

  329
• 15.5.13.14.1 CLI Configuration

  329
• 15.5.13.14.2 WEB Configuration

  330
• 15.5.13.15 Configuring Virtual link

  330
• 15.5.13.15.1 CLI Configuration

  330
• 15.5.13.15.2 WEB Configuration

  331
• 15.5.13.16 Configuring Area-range

  331
• 15.5.13.16.1 CLI Configuration

  331
• 15.5.13.16.2 WEB Configuration

  336
• 15.5.14 Configuring Route Map - OSPF

  336
• 15.5.14.1 Configuring Route Map

  336
• 15.5.14.1.1 CLI Configuration

  336
• 15.5.14.1.2 WEB Configuration

  337
• 15.5.14.2 Configuring Route Map Match Criteria

  337
• 15.5.14.2.1 CLI Configuration

  337
• 15.5.14.2.2 WEB Configuration

  338
• 15.5.14.3 Configuring OSPF Distance

  338
• 15.5.14.3.1 CLI Configuration

  338
• 15.5.14.3.2 WEB Configuration

  339
• 15.5.14.4 Configuring Redistribution with Route Map

  339
• 15.5.14.4.1 CLI Configuration

  339
• 15.5.14.4.2 WEB Configuration

  340
• 15.5.14.5 Topology Configuration for OSPF Testing

  340
• 15.5.14.6 Redistribution Topology

  344
• 15.5.14.6.1 Redistribution Interface Configuration

  345
• 15.5.14.6.2 Redistribution Protocol Configuration

  345
• 15.5.14.7 OSPF Inbound Filtering with Route Map

  349
• 15.5.14.7.1 Interface Configuration

  349
• 15.5.14.7.2 Protocol Configuration

  350
• DHCP RELAY AGENT

  355
• 16.1 PROTOCOL DESCRIPTION

  355
• 16.2 TOPOLOGY

  356
• 16.3 CONFIGURATION GUIDELINES

  356
• 16.4 DEFAULT CONFIGURATIONS

  356
• 16.5 ENABLING DHCP RELAY

  357
• 16.5.1.1 CLI Configuration

  357
• 16.5.1.2 WEB Configuration

  358
• 16.6 CONFIGURING A DHCP SERVER ADDRESS

  358
• 16.6.1.1 CLI Configuration

  358
• 16.6.1.2 WEB Configuration

  359
• 16.7 ENABLING RELAY AGENT INFORMATION

  359
• 16.7.1.1 CLI Configuration

  359
• 16.7.1.2 WEB Configuration

  360
• 16.8 CONFIGURING RELAY AGENT SUB-OPTIONS

  360
• 16.8.1.1 CLI Configuration

  360
• 16.8.1.2 WEB Configuration

  361
• 16.9 ENABLING TRACES FOR DHCP RELAY

  361
• RAVPN

  369
• 17.1 PROTOCOL DESCRIPTION

  369
• 17.2 TOPOLOGY

  370
• 17.3 RAVPN CONFIGURATIONS

  370
• 17.3.1 Enabling VPN Module

  370
• 17.3.1.1 CLI Configuration

  370
• 17.3.1.2 WEB Configuration

  371
• 17.3.2 Configuring pool IP address

  371
• 17.3.2.1 CLI Configuration

  371
• 17.3.2.2 WEB Configuration

  372
• 17.3.3 Configuring RAVPN Policy Type

  372
• 17.3.3.1 CLI Configuration

  372
• 17.3.3.2 WEB Configuration

  373
• 17.3.4 Configuring IPSec mode

  374
• 17.3.4.1 CLI Configuration

  374
• 17.3.5 Configuring Peer Identity

  375
• 17.3.5.1 CLI Configuration

  375
• 17.3.5.2 WEB Configuration

  376
• 17.3.6 Configuring IPSec Session Keys

  377
• 17.3.6.1 CLI Configuration

  377
• 17.3.6.2 WEB Configuration

  378
• 17.3.7 Configuring Access List

  379
• 17.3.7.1 CLI Configuration

  379
• 17.3.7.2 WEB Configuration

  380
• 17.3.8 Binding of Policy

  380
• 17.3.8.1 CLI Configuration

  380
• 17.3.8.2 WEB Configuration

  381
• 17.3.9 Removing Policy from Interface

  382
• 17.3.9.1 CLI Configuration

  382
• 17.3.9.2 WEB Configuration

  383
• 17.3.10 Deleting Policy

  383
• 17.3.10.1 CLI Configuration

  383
• 17.3.10.2 WEB Configuration

  383
• 17.3.11 Sample Configuration

  385
• 17.3.11.1 RAVPN Server Configuration

  386
• Figure 6-1: Configuration for Basic System Features

  27
• Figure 6-2: Configuration for Advanced System Features

  27
• Figure 7-1: DHCP - Topology 1

  59
• Figure 13-1: RIP Topology 1

  74
• Figure 13-2: RIP Topology 2

  74
• Figure 16-1: Topology for VLAN Configuration

  120
• Figure 17-1 - NAT Topology

  129
• Screen 17-3: Static NAT and NAPT

  136
• Figure 18-1: IPSec Topology

  142
• Figure 18-2: Topology Diagram for Sample IPSec Configuration

  154
• Figure 19-1: IKE Topology

  183
• Figure 20-1: Firewall Topology

  189
• Figure 20-5: IPS Topology

  209
• Screen 20-7: IPS Basic Settings - Disabling IPS-IDS global status

  211
• Screen 20-14: Firewall Access List – View IPS status

  220
• Figure 21-1: Wi-Fi Topology

  231
• Figure 22-1: NTP Topology

  250
• Figure 23-1: QOS Topology

  257
• Figure 24-1: OSPF Topology

  270
• Screen 24-2: OSPF Basic Settings

  281
• Figure 24-2: Topology For Testing Authentication

  289
• Figure 24-3: Topology For Configuration of stub area, ASBR and route redistribution

  301
• Figure 24-4: Topology For NSSA, summary address and area-default Cost Configuration

  310
• Figure 24-5: Topology For testing default-information originate always and redist-config

  323
• Figure 24-6: Topology For testing virtual link and route summarization

  332
• Figure 24-7: Topology Configuration for OSPF Testing

  340
• Figure 24-8: Redistribution Topology Configuration

  345
• Figure 24-9: Distribute-list In Topology Configurations

  349
• Figure 29-1: DHCP – Topology

  356
• Figure 30-1: RAVPN - Topology

  370
• Screen 30-1: VPN Policy - VPN Module Status

  371
• Screen 30-2: RAVPN Pool IP Address configuration

  372
• Screen 30-3: RAVPN Policy Type Configuration

  374
• Screen 30-4: Peer Identity Configuration

  377
• Screen 30-5: IPSec Session Keys Configuration

  379
• Screen 30-6: Access List Configuration

  380
• Screen 30-7: Binding of Policy

  382
• Screen 30-8: Removal of Policy from Interface

  383
• Screen 30-9: Deleting Policy

  384
• Figure 30-2: RAVPN Topology – Sample Configuration

  385
• Screen 2-1: Factory Default Settings

  30
• Screen 2-2: IPv4 Interface Setings

  31
• Screen 2-3: System Information- Login Authentication

  34
• Screen 2-4: Restore Configuration

  36
• Screen 2-5: Log Transfer

  39
• Screen 2-6: Log Transfer

  39
• Screen 2-7: HTTP Configuration

  45
• Screen 2-8: Port Basic Settings

  47
• Screen 2-9: IP Standard ACL Configuration

  52
• Screen 2-10: MAC ACL Configuration

  52
• Screen 2-11: Image Upgradation using normal

  56
• Screen 2-12: Image Upgradation using FallBack

  57
• Screen 2-13: IP Erase configuration

  58
• Screen 3-1: DHCP Basic Settings

  61
• Screen 3-2: DHCP Pool Settings

  65
• Screen 3-3: DHCP Server IP Exclude Setings

  66
• Screen 3-4: DHCP Pool Options Settings

  71
• Screen 4-1: RIP VRF Creation

  77
• Screen 4-2: RIP Interface

  79
• Screen 4-3: RIP Basic Settings

  80
• Screen 4-4: RIP Neighbour List

  83
• Screen 4-5: RIP Interface - Passive

  85
• Screen 4-6: RRD RIP Configuration

  88
• Screen 4-7: RIP Interface - Parameters

  105
• Screen 4-8: RIP Interface Specific Address Summarization

  106
• Screen 4-9: RIP Security Settings

  108
• Screen 4-10: RouteMap Creation

  114
• Screen 4-11: RouteMap Match

  116
• Screen 5-1: Static VLAN Configuration

  124
• Screen 5-2: VLAN Port Settings

  126
• Screen 6-1: Interface NAT Settings screen - NAT Status

  132
• Screen 6-2: Interface NAT Settings screen - NAPT Status

  134
• Screen 6-4: Address Pool screen

  138
• Screen 6-5: Virtual Server Configuration

  139
• Screen 7-1: VPN Policy - VPN Module Status

  143
• Screen 7-2: VPN IPSec

  153
• Screen 8-1: VPN Global Setings

  167
• Screen 8-2: VPN Policy

  169
• Screen 8-3: VPN IKE

  181
• Screen 8-4: VPN Statistics

  182
• Firewall Configurations

  189
• Screen 9-1: Firewall Basic Settings

  191
• Screen 9-2: Firewall Filter Configuration

  195
• Screen 9-3: Firewall - ACL Configuration

  205
• Screen 9-4: Firewall Interface Configuration

  208
• Screen 10-1: IPS Basic Settings - Enabling IPS-IDS global status

  211
• Screen 10-2: IPS Basic Settings - Disabling IPS-IDS global status

  211
• Screen 10-3: IPS Basic Settings - Enabling IDS logging status

  212
• Screen 10-4: IPS Basic Settings - Disabling IDS logging status

  213
• Screen 10-5: IPS Basic Settings - Configure IDS logging file size

  214
• Screen 10-6: IPS Basic Settings - Disabling IDS logging status

  214
• Screen 10-7: Firewall Access List - Configure IPS status as enabled

  219
• Screen 10-8: Firewall Access List - Configure IPS status as disabled

  219
• To view IPS status in the firewall access-list

  219
• Screen 10-9: Firewall Access List – View IPS status

  220
• Screen 10-10: IPS Signature – Display signatures for not-suspicious category

  222
• Screen 11-1: POE Basic Settings

  225
• Screen 11-2: POE Port Configuration

  227
• Screen 11-3: POE Port Configuration

  228
• Screen 11-4: PSE Configuration

  229
• Screen 12-1: AP RadioSettings - Enabling Radio Interfaces

  233
• Screen 12-2: AP RadioSettings - Disabling Wi-Fi Interface

  234
• Screen 12-3: AP RadioSettings - Creating VAP (SSID)

  236
• Screen 12-4: VAP

  237
• Screen 12-5: SSID Summary

  237
• Screen 12-6: AP RadioSettings - Deleting VAP (SSID)

  238
• Screen 12-7: Rate Limit

  239
• Screen 12-8: VAP - MAC Filtering

  241
• Screen 12-9: VAP – Authentication with WEP

  244
• Screen 12-10: AP Radio Statistics

  247
• Screen 13-1: NTP Basic Settings

  253
• Screen 13-2: NTP Client Mode

  253
• Screen 13-3: NTP Server Configurations

  255
• Screen 14-1: QoS Basic Settings

  260
• Screen 14-2: Ingress Rate Limiting

  261
• Screen 14-3: Storm-Control

  262
• Screen 14-4: Shape Template Configurations

  264
• Screen 14-5: Queue Configurations

  264
• Screen 14-10: QueueTemplate Configurations

  266
• Screen 14-11: Queue Configurations

  266
• Screen 14-12: Queue Map Configurations

  267
• Screen 14-6: Scheduler Configurations

  268
• Screen 15-1: OSPF VRF Creation

  279
• Screen 15-3: OSPF Interface Configuration

  283
• Screen 15-4: OSPF Area Configuration

  299
• Screen 15-5: OSPF Area Aggregation

  309
• Screen 15-6: OSPF RRD Route Configuration

  329
• Screen 15-7: OSPF Virtual Interface Configuration

  331
• Screen 16-1: DHCP Relay Configuration

  358
• Screen 16-2: DHCP Relay Interface Configuration

  361
• Table 1-1- Acronyms used in the Document

  21
• Table 1-2: Document Conventions

  23
• Table 1-3: General Configurations

  24
• Table 7-1: Default Configurations

  60
• Table 16-1: Default Configurations

  121
• Table 20-1: IPv4 Addresses of Interfaces and Hosts

  189
• Table 20-1: IPv4 Addresses of Interfaces and Hosts

  209
• Table 21-1: Wi-Fi Topology Description

  231
• Table 22-2: Default Configurations

  250
• Table 23-1: QOS Topology Description

  257
• Table 23-2: Default Configurations

  258
• Table 24-1: Default Configurations

  276
• Table 24-2 IPv4 Addresses of Interfaces in the Routers Topology – OSPF Testing

  341
• Table 24-3: IPv4 Addresses of Interfaces in the Routers – Redistribution Topology

  345
• Table 24-4: IPv4 Addresses of Interfaces in the Routers – OSPF Inbound Filtering

  349
• Table 29-1: Default Configurations

  356