Cisco Router Configuration Handbook

Transcription

1 Cisco Router Configuration Handbook Second Edition Dave Hucaby, CCIE No Steve McQuerry, CCIE No Andrew Whitaker Cisco Press 800 East 96th Street Indianapolis, IN 46240

2 IX Contents Introduction xxi Part I: Configuration Fundamentals Chapter 1 Configuration Basics 1 1-1: User Interfaces 1 Configuration 2 Navigating File Systems : File Management 19 Deleting Files from Flash 22 Moving System Files 23 Configuration Rollback 25 Related File Management Commands 26 Alias Commands : Cisco Discovery Protocol (CDP) 28 Configuration 28 Example : System Time 30 Configuration 30 Example : Logging 34 Configuration 34 Verifying Logging 37 Example : System Monitoring 38 Configuration 39 Example : Service Assurance Agent (SAA) 47 Configuration 48 Example : Buffer Management 56 Configuration 57 Example : Some Troubleshooting Tools 61 IP Connectivity Tools: Extended ping 62 IP Connectivity Tools: ping 62 IP Connectivity Tools: traceroute 63 Debugging Output from the Router 65 IP Connectivity Tools: Telnet 65

3 x Cisco Router Configuration Handbook Poor Man's Sniffer 67 Troubleshooting Router Crashes 69 Monitoring Router Activity 70 Getting Assistance from Cisco 71 Information for the Cisco Technical Assistance Center (TAC) 71 Chapter 2 Interface Configuration : Ethernet Interfaces 73 Configuration 74 Example : FDDI Interfaces 76 Configuration 76 Example : Loopback and Null Interfaces 77 Configuration 77 Example : VLAN Interfaces 78 Configuration 78 Example : Tunnel Interfaces 79 Configuration 80 Example : Synchronous Serial Interfaces 82 Configuration 82 Configuring Channelized Tl/El Serial Interfaces 84 Configuring Synchronous Serial Interfaces 85 Example : Packet-Over-SONET Interfaces 91 Configuration 92 Configuring APS on POS Interfaces 93 Example : Frame Relay Interfaces 95 Configuration 96 Example : Frame Relay Switching 105 Configuration 105 Example : ATM Interfaces 110 Configuration 111 Example 117

4 xi Further Reading 118 Ethernet 118 Fast Ethernet 118 Gigabit Ethernet 118 Frame Relay 119 ATM 119 Chapter 3 Dial Solutions : Modems 122 Configuration : ISDN 128 PRI Configuration 129 PRI Example 131 BRI Configuration 131 BRI Example : Dial-on-Demand Routing (DDR) 133 Configuration 134 Example : Dial Backup 141 Dial Backup Configuration 141 Dial Backup Example 142 Dialer Watch Configuration 143 Dialer Watch Example : Routing Over Dialup Networks 144 Snapshot Routing Configuration 145 Snapshot Routing Example 146 ODR Configuration : Point-to-Point Protocol (PPP) 148 Configuration 148 Part II: Network Protocols Example 152 Further Reading 152 Chapter 4 IPv4 Addressing and Services : IP Addressing and Resolution 154 Configuration 154 Example : IP Broadcast Handling 158 Configuration 158 Example 160

5 xii Cisco Router Configuration Handbook 4-3: Hot Standby Router Protocol (HSRP) 160 Configuration 161 Example : Virtual Router Redundancy Protocol 165 Configuration 166 Example : Dynamic Host Configuration Protocol (DHCP) 167 Configuration 167 Example : Mobile IP 172 Configuration 173 Example : Network Address Translation (NAT) 178 Configuration 179 Examples : Server Load Balancing (SLB) 185 Configuration 186 Example 190 Chapter 5 IPv6 Addressing and Services : IPv6 Addressing 196 Configuration 198 Example : Dynamic Host Configuration Protocol (DHCP) Version Example : Gateway Load Balancing Protocol Version 6 (GLBPv6) 202 Configuration 203 Example : Hot Standby Router Protocol for IPv6 208 Configuration 208 Example : Mobile IPv6 211 Configuration 212 Example : Network Address Translation-Protocol Translation 215 Configuration 216 Example 220

6 xiii 5-7: Tunneling 221 Configuration 221 Example 223 Chapter 6 IP Routing Protocols : Routing Information Protocol (RIP) 227 Configuration 228 RIP-2-Specific Commands 230 Example : Routing Information Protocol (RIP) for IPv6 233 Example 233 Configuration : Enhanced Interior Gateway Routing Protocol (EIGRP) 234 Configuration 235 Example : Enhanced Interior Gateway Routing Protocol (EIGRP) for IPv6 239 Configuration 239 Example : Open Shortest Path First (OSPF) 242 Configuration 243 Example : Open Shortest Path First (OSPF) Version 3 (IPv6) 250 Configuration 251 Example : Integrated ISIS 252 Configuration 253 Example : Integrated IS-IS for IPv6 257 Configuration : Border Gateway Protocol (BGP) 257 Configuration 259 Example : Multiprotocol Border Gateway Protocol (BGP) for IPv6 270 Configuration 270 Example 271 Chapter 7 IP Multicast Routing : Protocol Independent Multicast (PIM) 275 Configuration 277 Example 279

7 xiv Cisco Router Configuration Handbook 7-2: Internet Group Management Protocol (IGMP) 280 Configuration 281 Example : Multiprotocol BGP (MBGP) 284 Configuration 285 Example : Multicast Source Discovery Protocol (MSDP) 287 Configuration 288 Example : IPv6 Multicast 290 Configuration 290 Example 291 Chapter 8 IP Route Processing : Manually Configuring Routes 293 Configuration 294 Example : Policy Routing 296 Configuration 296 Example : Redistributing Routing Information 298 Configuration 298 Example : Filtering Routing Information 305 Configuration 306 Example : Load Balancing 308 Configuration 308 Example 309 Part III: Packet Processing Chapter 9 Quality of Service : Modular QoS Command-Line Interface (MQC) 314 Configuration 315 MQC Example : Network-Based Application Recognition (NBAR) 322 Configuration 323 NBAR Example : Policy-Based Routing (PBR) 327 Configuration 328 PBR Example 329

8 9-4: Quality of Service for VPNs 329 Configuration 329 QoS for VPNs Example : QoS Policy Propagation via BGP 330 Configuration 330 QoS Policy Propagation via BGP Example : Priority Queuing (PQ) 332 Configuration 332 Priority Queuing Example : Custom Queuing (CQ) 333 Configuration 334 Custom Queuing Example : Weighted Fair Queuing (WFQ) 337 Configuration 337 Weighted Fair Queuing Example : Weighted Random Early Detection (WRED) 340 Configuration 340 Weighted Random Early Detection Example : Committed Access Rate (CAR) 342 Configuration 342 Committed Access Rate Example : Generic Traffic Shaping (GTS) 344 Configuration 344 Generic Traffic Shaping Example : Frame Relay Traffic Shaping (FRTS) 345 Configuration 346 Frame Relay Traffic Shaping Example : Use RSVP for QoS Signaling 348 Configuration 348 Using RSVP for QoS Signaling Example : Link Efficiency Mechanisms 351 Configuration 352 Link Efficiency Mechanism Example : AutoQoS for the Enterprise 353 Configuration 354 Example 356 XV

9 xvi Cisco Router Configuration Handbook Chapter 10 Multiprotocol Label Switching : Configuring Basic MPLS 359 Configuration 360 Example : MPLS Traffic Engineering 364 Configuration 365 Example : MPLS Virtual Private Networks (VPN) 369 Configuration 369 Example 371 Part IV: Voice & Telephony Chapter 11 Voice and Telephony : Quality of Service for Voice : Voice Ports 381 Part V: Security Configuration : Dialing 395 Configuration : H.323 Gateways 405 Configuration : H.323 Gatekeepers 408 Configuration 408 Example : Interactive Voice Response (IVR) 415 Configuration : Survivable Remote Site (SRS) Telephony 417 Configuration 417 Example 420 Chapter 12 Router Security : Suggested Ways to Secure a Router 424 User Authentication on the Router 424 Control Access to the Router Lines 424 Configure Login Timing Options 425 Use Warning Banners to Inform Users 426 Router Management 426 Implement Logging on the Router 427 Control Spoofed Information 427 Control Unnecessary Router Services 428

10 xvii 12-2: Authentication, Authorization, and Accounting (AAA) 429 Configuration 430 Example : Dynamically Authenticate and Authorize Users with Authentication Proxy 438 Configuration 439 Example : Controlling Access with Lock and Key Security 442 Configuration 442 Example : Filtering IP Sessions with Reflexive Access Lists 446 Configuration 446 Example : Prevent DoS Attacks with TCP Intercept 448 Configuration 449 Example : Intelligent Filtering with Context-Based Access Control (CBAC) 451 Configuration 451 Example : Detect Attacks and Threats with the IOS Intrusion Prevention System 458 Configuration 458 Example : Control Plane Security 471 Configuration 472 Example : AutoSecure 473 Configuration 473 Example 474 Chapter 13 Virtual Private Networks : Using Internet Key Exchange (IKE) for VPNs 476 Configuration 476 Example : IPSec VPN Tunnels 483 Configuration 484 Example : High Availability Features 493 Configuration 494 Example 497

11 xviii Cisco Router Configuration Handbook 13-4: Dynamic Multipoint VPN (DMVPN) 504 Configuration 505 Example : Secure Socket Layer VPNs 514 Configuration 515 Example 517 Further Reading 517 Chapter 14 Access Lists and Regular Expressions : IP Access Lists 521 Configuration 521 Examples : MAC Address and Protocol Type Code Access Lists 532 Configuration 532 Examples : IPv6 Access Lists 533 Configuration 534 Examples : Regular Expressions 539 Configuration 539 Examples 540 Appendixes Appendix A Cisco IOS Software Release and Filename Conventions 543 Appendix В Cabling Quick Reference 551 Appendix С SNMP MIB Structure 557 Appendix D Password Recovery 561 Appendix E Configuration Register Settings 569 Appendix F Weil-Known IP Protocol Numbers 577 Appendix G Well-Known IP Port Numbers 587 Appendix H ICMP Type and Code Numbers 601 Appendix I Well-known IP Multicast Addresses 605 Appendix J Tool Command Language (TCL) Reference 619 Appendix К Ethernet Type Codes 623 Index 631