RADIUS Attribute 66 Tunnel-Client-Endpoint Enhancements
|
|
|
- Kerry Howard
- 5 years ago
- Views:
Transcription
1 RADIUS Attribute 66 Tunnel-Client-Endpoint The RADIUS Attribute 66 (Tunnel-Client-Endpoint) feature allows the hostname of the network access server (NAS) to be specified--rather than the IP address of the NAS--in RADIUS attribute 66 (Tunnel-Client-Endpoint). This feature makes it easier for users to remember a hostname instead of a numerical IP address, and helps disguise the numerical IP address of the NAS. Finding Feature Information, page 1 Prerequisites for RADIUS Attribute 66 Tunnel-Client-Endpoint, page 2 Restrictions for RADIUS Attribute 66 Tunnel-Client-Endpoint, page 2 Information About RADIUS Attribute 66 Tunnel-Client-Endpoint, page 2 How to Configure RADIUS Attribute 66 Tunnel-Client-Endpoint, page 2 Configuration Examples for RADIUS Attribute 66 Tunnel-Client-Endpoint, page 3 Additional References, page 3 Feature Information for RADIUS Attribute 66 Tunnel-Client-Endpoint, page 4 Glossary, page 5 Finding Feature Information Your software release may not support all the features documented in this module. For the latest caveats and feature information, see Bug Search Tool and the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to An account on Cisco.com is not required. 1
2 Prerequisites for RADIUS Attribute 66 Tunnel-Client-Endpoint RADIUS Attribute 66 Tunnel-Client-Endpoint Prerequisites for RADIUS Attribute 66 Tunnel-Client-Endpoint A Cisco platform that supports VPDN is required. See the Glossary, on page 5 for more information about VPDN. Restrictions for RADIUS Attribute 66 Tunnel-Client-Endpoint Your Cisco device must be running a Cisco software image that supports virtual private dialup networks (VPDNs). Information About RADIUS Attribute 66 Tunnel-Client-Endpoint How the RADIUS Attribute 66 Tunnel-Client-Endpoint are Used Virtual Private Networks (VPNs) use Layer 2 Forwarding (L2F) or Layer 2 Tunnel Protocol (L2TP) tunnels to tunnel the link layer of high-level protocols (for example, PPP or asynchronous High-Level Data Link Control (HDLC)). Internet service providers (ISPs) configure their NASs to receive calls from users and forward the calls to the customer tunnel server. Usually, the ISP maintains only information about the tunnel server--the tunnel endpoint. The customer maintains the IP addresses, routing, and other user database functions of the tunnel server users. RADIUS attribute 66 provides the customer with the ability to specify the hostname of the NAS instead of the IP address of the NAS. Note L2F is not supported on the Cisco ASR 1000 Series Aggregation Services Routers. How to Configure RADIUS Attribute 66 Tunnel-Client-Endpoint There are no configuration tasks associated with support for the RADIUS Attribute 66 (Tunnel-Client-Endpoint). 2
3 RADIUS Attribute 66 Tunnel-Client-Endpoint Configuration Examples for RADIUS Attribute 66 Tunnel-Client-Endpoint Configuration Examples for RADIUS Attribute 66 Tunnel-Client-Endpoint Setting Up the RADIUS Profile for RADIUS Attribute 66 Tunnel-Client-Endpoint Example The following example shows a configuration that allows the user to specify the hostname of the NAS using RADIUS attribute 66 (Tunnel-Client-Endpoint) in the RADIUS profile: cisco-avpair = vpdn:l2tp-cm-local-window-size=1024 cisco-avpair = vpdn:l2tp-nosession-timeout=30 cisco-avpair = vpdn:l2tp-cm-retransmit-retries=10 cisco-avpair = vpdn:l2tp-cm-min-timeout=2 cisco-avpair = vpdn:l2tp-hello-interval=60 Service-Type = outbound Tunnel-Assignment-Id_tag1 = ISP1 Tunnel-Client-Auth-Id_tag1 = LAC1 Tunnel-Client-Endpoint_tag1 = Tunnel-Medium-Type_tag1 = IPv4 Tunnel-Password_tag1 = tunnel1 Tunnel-Server-Auth-Id_tag1 = LNS1 Tunnel-Server-Endpoint_tag1 = Tunnel-Type_tag1 = l2tp Additional References The following sections provide references related to the RADIUS Attribute 66 (Tunnel-Client-Endpoint) feature. Related Documents Related Topic RADIUS attribute 66 Security commands Document Title Cisco IOS XE Security Configuration Guide: Configuring User Services, Release 2 Cisco IOS Security Command Reference Standards Standard No new or modified standards are supported by this feature, and support for existing standards has not been modified by this feature. Title -- 3
4 Feature Information for RADIUS Attribute 66 Tunnel-Client-Endpoint RADIUS Attribute 66 Tunnel-Client-Endpoint MIBs MIB No new or modified MIBs are supported by this feature, and support for existing MIBs has not been modified by this feature. MIBs Link To locate and download MIBs for selected platforms, Cisco IOS XE software releases, and feature sets, use Cisco MIB Locator found at the following URL: RFCs RFC No new or modified RFCs are supported by this feature, and support for existing RFCs has not been modified by this feature. Title -- Technical Assistance Description The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password. Link Feature Information for RADIUS Attribute 66 Tunnel-Client-Endpoint The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to An account on Cisco.com is not required. 4
5 RADIUS Attribute 66 Tunnel-Client-Endpoint Glossary Table 1: Feature Information for RADIUS Attribute 66 (Tunnel-Client-Endpoint) Feature Name RADIUS Attribute 66 (Tunnel-Client-Endpoint) Releases Cisco IOS XE Release 2.1 Cisco IOS XE Release 2.3 Cisco IOS XE Release 3.9S Feature Information The RADIUS Attribute 66 (Tunnel-Client-Endpoint) feature allows the hostname of the network access server (NAS) to be specified rather than the IP address of the NAS in RADIUS attribute 66 (Tunnel-Client-Endpoint). This feature makes it easier for users to remember a hostname instead of a numerical IP address, and helps disguise the numerical IP address of the NAS. In Cisco IOS XE Release 2.3, this feature was introduced on the Cisco ASR 1000 Series Aggregation Services Routers. Glossary L2F--Layer 2 Forwarding Protocol. Protocol that supports the creation of secure virtual private dialup networks over the Internet. L2TP--Layer 2 Tunnel Protocol. Protocol that is one of the key building blocks for virtual private networks in the dial access space and is endorsed by Cisco and other internetworking industry leaders. This protocol combines the best of Cisco's Layer 2 Forwarding (L2F) protocol and Microsoft's Point-to-Point Tunneling Protocol (PPTP). Layer 2 Forwarding Protocol--See L2F. Layer 2 Tunnel Protocol--See L2TP. Point-to-Point Protocol--See PPP. PPP--Point-to-Point Protocol. Successor to SLIP that provides router-to-router and host-to-network connections over synchronous and asynchronous circuits. Whereas SLIP was designed to work with IP, PPP was designed to work with several network layer protocols, such as IP, IPX, and ARA. PPP also has built-in security mechanisms, such as CHAP and PAP. PPP relies on two protocols: LCP and NCP. RADIUS--Remote Authentication Dial-In User Service. Database for authenticating modem and ISDN connections and for tracking connection time. Remote Authentication Dial-In User Service--See RADIUS. virtual private dialup network--see VPDN. VPDN--virtual private dialup network. A system that permits dial-in networks to exist remotely to home networks, while giving the appearance of being directly connected. VPDNs use L2TP and L2F to terminate 5
6 Glossary RADIUS Attribute 66 Tunnel-Client-Endpoint the Layer 2 and higher parts of the network connection at the L2TP network server (LNS), instead of the L2TP access concentrator (LAC). 6
RADIUS Tunnel Attribute Extensions
The feature allows a name to be specified (other than the default) for the tunnel initiator and the tunnel terminator in order to establish a higher level of security when setting up VPN tunneling. Finding
RADIUS Route Download
The feature allows users to configure their network access server (NAS) to direct RADIUS authorization. Finding Feature Information, page 1 Prerequisites for, page 1 Information About, page 1 How to Configure,
Configuring the Physical Subscriber Line for RADIUS Access and Accounting
Configuring the Physical Subscriber Line for RADIUS Access and Accounting Configuring a physical subscriber line for RADIUS Access and Accounting enables an L2TP access concentrator (LAC) and an L2TP network
Encrypted Vendor-Specific Attributes
The feature provides users with a way to centrally manage filters at a RADIUS server and supports the following types of string vendor-specific attributes (VSAs): Tagged String VSA, on page 2 (similar
RADIUS Logical Line ID
The feature, also known as the Logical Line Identification (LLID) Blocking feature enables administrators to track their customers on the basis of the physical lines on which customer calls originate.
Configuring the Physical Subscriber Line for RADIUS Access and Accounting
Configuring the Physical Subscriber Line for RADIUS Access and Accounting Last Updated: December 5, 2011 Configuring a physical subscriber line for RADIUS Access and Accounting enables an L2TP access concentrator
IP Overlapping Address Pools
The feature improves flexibility in assigning IP addresses dynamically. This feature allows you to configure overlapping IP address pool groups to create different address spaces and concurrently use the
RADIUS Vendor-Specific Attributes (VSA) and RADIUS Disconnect-Cause Attribute Values
RADIUS Vendor-Specific Attributes (VSA) and RADIUS Disconnect-Cause Attribute Values First Published: September 23, 2005 Last Updated: August 18, 2010 The Internet Engineering Task Force (IETF) draft standard
AAA Dead-Server Detection
The feature allows you to configure the criteria to be used to mark a RADIUS server as dead. If no criteria are explicitly configured, the criteria are computed dynamically on the basis of the number of
Encrypted Vendor-Specific Attributes
Encrypted Vendor-Specific Attributes Last Updated: January 15, 2012 The Encrypted Vendor-Specific Attributes feature provides users with a way to centrally manage filters at a RADIUS server and supports
Universal Port Resource Pooling for Voice and Data Services
Universal Port Resource Pooling for Voice and Data Services Feature History Release 12.2(2)XA 12.2(2)XB1 12.2(11)T Description This feature was introduced on the Cisco AS5350 and AS5400. This feature was
RADIUS Tunnel Preference for Load Balancing
RADIUS Tunnel Preference for Load Balancing and Fail-Over Finding Feature Information RADIUS Tunnel Preference for Load Balancing and Fail-Over Last Updated: July 18, 2011 The RADIUS Tunnel Preference
RADIUS Vendor-Specific Attributes and RADIUS Disconnect-Cause Attribute Values
RADIUS s and RADIUS Disconnect-Cause Values The Internet Engineering Task Force (IETF) draft standard specifies a method for communicating vendor-specific information between the network access server
Configuring RADIUS. Finding Feature Information. Prerequisites for RADIUS. Last Updated: November 2, 2012
Configuring RADIUS Last Updated: November 2, 2012 The RADIUS security system is a distributed client/server system that secures networks against unauthorized access. In the Cisco implementation, RADIUS
DHCP Client on WAN Interfaces
DHCP Client on WAN Interfaces First Published: February 25, 2002 Last Updated: September 12, 2008 The DHCP Client on WAN Interfaces feature extends the Dynamic Host Configuration Protocol (DHCP) to allow
PPPoE on ATM. Finding Feature Information. Prerequisites for PPPoE on ATM. Restrictions for PPPoE on ATM
This feature module describes the PPP over Ethernet (PPPoE) on ATM feature. The feature provides the ability to connect a network of hosts over a simple bridging-access device to a remote access concentrator.
802.1P CoS Bit Set for PPP and PPPoE Control Frames
802.1P CoS Bit Set for PPP and PPPoE Control The 802.1P CoS Bit Set for PPP and PPPoE Control feature provides the ability to set user priority bits in the IEEE 802.1Q tagged frame to allow traffic prioritization.
Password Strength and Management for Common Criteria
Password Strength and Management for Common Criteria The Password Strength and Management for Common Criteria feature is used to specify password policies and security mechanisms for storing, retrieving,
Configuring TACACS. Finding Feature Information. Prerequisites for Configuring TACACS
TACACS+ is a security application that provides centralized validation of users attempting to gain access to a router or network access server. TACACS+ provides detailed accounting information and flexible
The MSCHAP Version 2 feature (introduced in Cisco IOS Release 12.2(2)XB5) allows Cisco routers to
The feature (introduced in Cisco IOS Release 12.2(2)XB5) allows Cisco routers to utilize Microsoft Challenge Handshake Authentication Protocol Version 2 (MSCHAP V2) authentication for PPP connections between
RADIUS Configuration Guide, Cisco IOS XE Release 3S (Cisco ASR 920 Series)
RADIUS Configuration Guide, Cisco IOS XE Release 3S (Cisco ASR 920 Series) Configuring RADIUS 2 Finding Feature Information 2 Prerequisites for RADIUS 2 Information About RADIUS 2 How to Configure RADIUS
Configuring RADIUS. Finding Feature Information. Prerequisites for RADIUS
The RADIUS security system is a distributed client/server system that secures networks against unauthorized access. In the Cisco implementation, RADIUS clients run on Cisco devices and send authentication
thus, the newly created attribute is accepted if the user accepts attribute 26.
Remote Authentication Dial-In User Service (RADIUS) attributes are used to define specific authentication, authorization, and accounting (AAA) elements in a user profile, which is stored on the RADIUS
Configuring Authorization
The AAA authorization feature is used to determine what a user can and cannot do. When AAA authorization is enabled, the network access server uses information retrieved from the user s profile, which
Configuring NAS-Initiated Dial-In VPDN Tunneling
Configuring NAS-Initiated Dial-In VPDN Tunneling Network access server (NAS)-initiated dial-in tunneling provides secure tunneling of a PPP session from a NAS to a tunnel server without any special knowledge
RADIUS Attributes. RADIUS IETF Attributes
Remote Authentication Dial-In User Service (RADIUS) attributes are used to define specific authentication, authorization, and accounting (AAA) elements in a user profile, which is stored on the RADIUS
Configuring DHCP Option 60 and Option 82 with VPN-ID Support for Transparent Automatic Logon
Configuring DHCP Option 60 and Option 82 with VPN-ID Support for Transparent Automatic Logon Intelligent Services Gateway (ISG) is a Cisco software feature set that provides a structured framework in which
VPDN Tunnel Management
VPDN Tunnel Management Finding Feature Information VPDN Tunnel Management Last Updated: July 22, 2011 This module contains information about managing virtual private dialup network (VPDN) tunnels and monitoring
Configuring Client-Initiated Dial-In VPDN Tunneling
Configuring Client-Initiated Dial-In VPDN Tunneling Client-initiated dial-in virtual private dialup networking (VPDN) tunneling deployments allow remote users to access a private network over a shared
Configuring Embedded Resource Manager-MIB
The Embedded Resource Manager (ERM)-MIB feature introduces MIB support for the ERM feature. The ERM feature tracks resource usage information for every registered resource owner and resource user. The
DHCP Server RADIUS Proxy
The Dynamic Host Configuration Protocol (DHCP) Server RADIUS Proxy is a RADIUS-based address assignment mechanism in which a DHCP server authorizes remote clients and allocates addresses based on replies
Monitoring PPPoE Sessions with SNMP
The PPPoE Session Count Management Information Base feature provides the ability to use Simple Network Management Protocol (SNMP) to monitor in real time the number of PPP over Ethernet (PPPoE) sessions
NBAR2 HTTP-Based Visibility Dashboard
The NBAR2 HTTP-based Visibility Dashboard provides a web interface displaying network traffic data and related information. The information is presented in an intuitive, interactive graphical format. Finding
AAA Server Groups. Finding Feature Information. Information About AAA Server Groups. AAA Server Groups
Configuring a device to use authentication, authorization, and accounting (AAA) server groups provides a way to group existing server hosts. Grouping existing server hosts allows you to select a subset
PPPoE Agent Remote-ID and DSL Line Characteristics Enhancement
PPPoE Agent Remote-ID and DSL Line Characteristics Enhancement The PPPoE Agent Remote-ID and DSL Line Characteristics Enhancement feature provides a method by which the digital subscriber line access multiplexer
Autosense for ATM PVCs and MUX SNAP Encapsulation
Autosense for ATM PVCs and MUX SNAP Encapsulation The PPPoA/PPPoE Autosense for ATM PVCs feature enables a router to distinguish between incoming PPP over ATM (PPPoA) and PPP over Ethernet (PPPoE) over
Troubleshooting ISG with Session Monitoring and Distributed Conditional Debugging
Troubleshooting ISG with Session Monitoring and Distributed Conditional Debugging Intelligent Services Gateway (ISG) is a software feature set that provides a structured framework in which edge devices
Broadband Scalability and Performance
The infrastructure of a service provider must be capable of supporting the services that an enterprise customer or Internet service provider (ISP) wants to offer its subscribers. The service provider must
Configuring ISG Policies for Automatic Subscriber Logon
Configuring ISG Policies for Automatic Subscriber Logon Intelligent Services Gateway (ISG) is a software feature set that provides a structured framework in which edge devices can deliver flexible and
Configuring Secure Shell (SSH)
Starting with Cisco IOS XE Denali 16.3.1, Secure Shell Version 1 (SSHv1) is deprecated. Finding Feature Information, on page 1 Prerequisites for Configuring Secure Shell, on page 1 Restrictions for Configuring
Clock Recovery System
The recovers the service clock using Adaptive Clock Recovery (ACR) and Differential Clock Recovery (DCR). Finding Feature Information, page 1 Information About Clock Recovery, page 1 Prerequisites for
thus, the newly created attribute is accepted if the user accepts attribute 26.
Remote Authentication Dial-In User Service (RADIUS) attributes are used to define specific authentication, authorization, and accounting (AAA) elements in a user profile, which is stored on the RADIUS
Predownloading an Image to Access Points
Finding Feature Information, page 1 Predownloading an Image to an Access Point, page 1 Restrictions for Predownloading an Image to an Access Point, page 2 How to Predownload an Image to an Access Point,
PPP over Frame Relay
The feature allows a router to establish end-to-end Point-to-Point Protocol (PPP) sessions over Frame Relay. Finding Feature Information, page 1 Prerequisites for, page 1 Restrictions for, page 2 Information
Clock Recovery System
The recovers the service clock using Adaptive Clock Recovery (ACR) and Differential Clock Recovery (DCR). Finding Feature Information, on page 1 Information About Clock Recovery, on page 1 Prerequisites
Configuring Local Authentication and Authorization
Configuring Local Authentication and Authorization Finding Feature Information, page 1 How to Configure Local Authentication and Authorization, page 1 Monitoring Local Authentication and Authorization,
RADIUS Tunnel Preference for Load Balancing and Fail-Over
RADIUS Tunnel Preference for Load Balancing and Fail-Over Feature History for RADIUS Tunnel Preference for Load Balancing and Fail-Over Release Modification 12.2(4)T This feature was introduced. 12.2(11)T
Configuring Secure Shell (SSH)
Finding Feature Information, on page 1 Prerequisites for Configuring Secure Shell, on page 1 Restrictions for Configuring Secure Shell, on page 2 Information About Configuring Secure Shell, on page 2 How
PPPoE Smart Server Selection
The feature allows service providers to determine which Broadband Remote Access Server (BRAS) a PPP call will terminate on. The feature allows you to configure a specific PPP over Ethernet (PPPoE) Active
IP Tunneling. GRE Tunnel IP Source and Destination VRF Membership. Tunnel VRF CHAPTER
CHAPTER 27 This chapter describes IP tunneling features implemented on the Cisco 10000 series routers and includes the following topics: GRE Tunnel IP Source and Destination VRF Membership, page 27-1 Restrictions
QoS: Per-Session Shaping and Queuing on LNS
QoS: Per-Session Shaping and Queuing on LNS First Published: February 28, 2006 The QoS: Per-Session Shaping and Queuing on LNS feature provides the ability to shape (for example, transmit or drop) or queue
PPPoE Smart Server Selection
The feature allows service providers to determine which Broadband Remote Access Server (BRAS) a PPP call will terminate on. The feature allows you to configure a specific PPP over Ethernet (PPPoE) Active
Configuring Secure Shell (SSH)
Finding Feature Information, page 1 Prerequisites for Configuring the Switch for Secure Shell (SSH) and Secure Copy Protocol (SCP), page 1 Restrictions for Configuring the ControllerDevice for SSH, page
TACACS+ Configuration Guide, Cisco IOS XE Release 3S
Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 THE SPECIFICATIONS AND INFORMATION
Bulk Logging and Port Block Allocation
The feature allocates a block of ports for translation instead of allocating individual ports. This feature is supported only in carrier-grade Network Address Translation (CGN) mode. This module provides
Contextual Configuration Diff Utility
The feature provides the ability to perform a line-by-line comparison of any two configuration files (accessible through the Cisco IOS XE Integrated File System [IFS]) and generate a list of the differences
VPDN LNS Address Checking
First Published: Sept. 30, 2007 Last Updated: Aug. 28, 2008 The feature allows a Layer 2 Tunnel Protocol (L2TP) Access Concentrator (LAC), that is receiving data from an L2TP Network Server (LNS) to check
Configuring DNS. Finding Feature Information. Prerequisites for Configuring DNS
The Domain Name System (DNS) is a distributed database in which you can map host names to IP addresses through the DNS protocol from a DNS server. Each unique IP address can have an associated host name.
This feature was introduced. This feature was integrated into Cisco IOS Release 12.2(27)SBA.
PPPoE Relay The PPPoE Relay feature enables an L2TP access concentrator (LAC) to relay active discovery and service selection functionality for PPP over Ethernet (PPPoE), over a Layer 2 Tunneling Protocol
Broadband Access Aggregation and DSL Configuration Guide, Cisco IOS XE Release 3S
Broadband Access Aggregation and DSL Configuration Guide, Cisco IOS XE Release 3S Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408
Enabling ALGs and AICs in Zone-Based Policy Firewalls
Enabling ALGs and AICs in Zone-Based Policy Firewalls Zone-based policy firewalls support Layer 7 application protocol inspection along with application-level gateways (ALGs) and application inspection
Configuring Secure Shell (SSH)
Finding Feature Information, page 1 Prerequisites for Configuring the Switch for Secure Shell (SSH) and Secure Copy Protocol (SCP), page 1 Restrictions for Configuring the Switch for SSH, page 2 Information
Configuring PPP Callback
Configuring PPP Callback This chapter describes how to configure PPP callback for dial-on-demand routing (DDR). It includes the following main sections: PPP Callback for DDR Overview How to Configure PPP
Enabling ALGs and AICs in Zone-Based Policy Firewalls
Enabling ALGs and AICs in Zone-Based Policy Firewalls Zone-based policy firewalls support Layer 7 application protocol inspection along with application-level gateways (ALGs) and application inspection
MPLS VPN--Show Running VRF
MPLS VPN--Show Running VRF Last Updated: December 15, 2011 The MPLS VPN--Show Running VRF feature provides a Cisco IOS command-line interface (CLI) option to display a subset of the running configuration
RADIUS Attributes Overview and RADIUS IETF Attributes
RADIUS Attributes Overview and RADIUS IETF Attributes First Published: March 19, 2001 Last Updated: September 23, 2009 Remote Authentication Dial-In User Service (RADIUS) attributes are used to define
Configuring Secure Shell (SSH)
Finding Feature Information, page 1 Prerequisites for Configuring Secure Shell, page 1 Restrictions for Configuring Secure Shell, page 2 Information about SSH, page 2 How to Configure SSH, page 5 Monitoring
Dynamic Bandwidth Sharing
The Cisco cbr series router enables dynamic bandwidth sharing (DBS) on integrated cable (IC) and wideband (WB) cable interfaces. Finding Feature Information Your software release may not support all the
To use DNS, you must have a DNS name server on your network.
Configuring DNS Last Updated: December 15, 2011 The Domain Name System (DNS) is a distributed database in which you can map host names to IP addresses through the DNS protocol from a DNS server. Each unique
Configuring Secure Shell (SSH)
Finding Feature Information, page 1 Prerequisites for Configuring Secure Shell, page 1 Restrictions for Configuring Secure Shell, page 2 Information about SSH, page 3 How to Configure SSH, page 5 Monitoring
Restrictions for DMVPN Dynamic Tunnels Between Spokes. Behind a NAT Device. Finding Feature Information
DMVPN Dynamic Tunnels Between Spokes Behind a NAT Device The DMVPN: Dynamic Tunnels Between Spokes Behind a NAT Device feature allows Next Hop Resolution Protocol (NHRP) spoke-to-spoke tunnels to be built
Configuring DHCP Services for Accounting and Security
Configuring DHCP Services for Accounting and Security Cisco IOS XE software supports several capabilities that enhance DHCP security, reliability, and accounting in Public Wireless LANs (PWLANs). This
Per VRF AAA. Finding Feature Information. Last Updated: January 18, 2012
Per VRF AAA Last Updated: January 18, 2012 The Per VRF AAA feature allows ISPs to partition authentication, authorization, and accounting (AAA) services on the basis of Virtual Private Network (VPN) routing
Flow-Based per Port-Channel Load Balancing
The feature allows different flows of traffic over a Gigabit EtherChannel (GEC) interface to be identified based on the packet header and then mapped to the different member links of the port channel.
Configuring DNS. Finding Feature Information
The Domain Name System (DNS) is a distributed database in which you can map hostnames to IP addresses through the DNS protocol from a DNS server. Each unique IP address can have an associated hostname.
PPPoE Service Selection
The feature uses service tags to enable a PPP over Ethernet (PPPoE) server to offer PPPoE clients a selection of services during call setup. You choose one of the services offered, and the service is provided
QoS: Classification, Policing, and Marking on LAC Configuration Guide, Cisco IOS Release 12.4T
QoS: Classification, Policing, and Marking on LAC Configuration Guide, Cisco IOS Release 12.4T Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com
Carrier Grade Network Address Translation
(CGN) is a large-scale NAT that translates private IPv4 addresses into public IPv4 addresses. CGN employs Network Address and Port Translation methods to aggregate multiple private IPv4 addresses into
RADIUS Configuration Guide, Cisco IOS XE Everest (Cisco ASR 900 Series)
RADIUS Configuration Guide, Cisco IOS XE Everest 16.5.1 (Cisco ASR 900 Series) Configuring RADIUS 2 Finding Feature Information 2 Prerequisites for RADIUS 2 Information About RADIUS 2 How to Configure
HTTP 1.1 Web Server and Client
HTTP 1.1 Web Server and Client Finding Feature Information HTTP 1.1 Web Server and Client Last Updated: June 01, 2011 The HTTP 1.1 Web Server and Client feature provides a consistent interface for users
BGP Link Bandwidth. Finding Feature Information. Prerequisites for BGP Link Bandwidth
The Border Gateway Protocol (BGP) Link Bandwidth feature is used to advertise the bandwidth of an autonomous system exit link as an extended community. This feature is configured for links between directly
Firewall Authentication Proxy for FTP and Telnet Sessions
Firewall Authentication Proxy for FTP and Telnet Sessions Last Updated: January 18, 2012 Before the introduction of the Firewall Authentication Proxy for FTP and Telnet Sessions feature, users could enable
Configuring L2TP HA Session SSO ISSU on a
Configuring L2TP HA Session SSO ISSU on a LAC LNS Finding Feature Information Configuring L2TP HA Session SSO ISSU on a LAC LNS Last Updated: July 22, 2011 The L2TP HA Session SSO/ISSU on a LAC/LNS feature
Configuring System MTU
Restrictions for System MTU, on page 1 Information About the MTU, on page 1 How to Configure MTU, on page 2 Configuration Examples for System MTU, on page 4 Additional References for System MTU, on page
Remote Access MPLS-VPNs
First Published: August 12, 2002 Last Updated: May 4, 2009 The feature allows the service provider to offer a scalable end-to-end Virtual Private Network (VPN) service to remote users. This feature integrates
Configuring Scalable Hub-and-Spoke MPLS VPNs
Configuring Scalable Hub-and-Spoke MPLS VPNs Last Updated: December 15, 2011 This module explains how to ensure that virtual private network (VPN) clients that connect to the same provider edge (PE) router
Memory Threshold Notifications
The feature allows you to reserve memory for critical notifications and to configure a router to issue notifications when available memory falls below a specified threshold. Finding Feature Information,
Cisco Discovery Protocol Version 2
Cisco Discovery Protocol (formerly known as CDP) is a Layer 2, media-independent, and network-independent protocol that runs on Cisco devices and enables networking applications to learn about directly
virtual-template virtual-template template-number no virtual-template Syntax Description
VPDN Commands virtual-template virtual-template To specify which virtual template will be used to clone virtual access interfaces (VAI), use the virtual-template command in BBA group configuration mode
Autoroute Announce and Forwarding Adjacencies For OSPFv3
Autoroute Announce and Forwarding The Autoroute Announce and Forwarding Adjacencies for OSPFv3 feature advertises IPv6 routes over MPLS/TE IPv4 tunnels. This module describes how to configure the Autoroute
PPPoE Session Limit per NAS Port
PPPoE Session Limit per NAS Port First Published: March 17, 2003 Last Updated: February 28, 2006 The PPPoE Session Limit per NAS Port feature enables you to limit the number of PPP over Ethernet (PPPoE)
Autoroute Announce and Forwarding Adjacencies For OSPFv3
Autoroute Announce and Forwarding The Autoroute Announce and Forwarding Adjacencies for OSPFv3 feature advertises IPv6 routes over MPLS/TE IPv4 tunnels. This module describes how to configure the Autoroute
Cisco UBE Out-of-dialog OPTIONS Ping
The Cisco Unified Border Element Out-of-dialog (OOD) Options Ping feature provides a keepalive mechanism at the SIP level between any number of destinations. Finding Feature Information, page 1 Prerequisites
This feature was introduced. This feature was integrated into Cisco IOS Release 12.2(27)SBA.
The feature allows an L2TP network server (LNS) participating in Stack Group Bidding Protocol (SGBP) to send a redirect message to the L2TP access concentrator (LAC) if another LNS wins the bid. The LAC
Cisco Discovery Protocol Version 2
Cisco Discovery Protocol (formerly known as CDP) is a Layer 2, media-independent, and network-independent protocol that runs on Cisco devices and enables networking applications to learn about directly
Configurable Number of Simultaneous Packets per Flow
Configurable Number of Simultaneous Packets per Flow In zone-based policy firewalls, the number of simultaneous packets per flow is restricted to 25 and packets that exceed the limit are dropped. The dropping
RADIUS for Multiple UDP Ports
RADIUS security servers are identified on the basis of their hostname or IP address, hostname and specific UDP port numbers, or IP address and specific UDP port numbers. The combination of the IP address
IPsec Dead Peer Detection PeriodicMessage Option
IPsec Dead Peer Detection PeriodicMessage Option The IPsec Dead Peer Detection Periodic Message Option feature allows you to configure your router to query the liveliness of its Internet Key Exchange (IKE)
L2TP Configuration. L2TP Overview. Introduction. Typical L2TP Networking Application
Table of Contents L2TP Configuration 1 L2TP Overview 1 Introduction 1 Typical L2TP Networking Application 1 Basic Concepts of L2TP 2 L2TP Tunneling Modes and Tunnel Establishment Process 4 L2TP Features
Configuring Virtual Private Networks
Configuring Virtual Private Networks This chapter describes how to configure, verify, maintain, and troubleshoot a Virtual Private Network (VPN). It includes the following main sections: VPN Technology