Cisco Router Configuration Handbook Second Edition Dave Hucaby, CCIE No. 4594 Steve McQuerry, CCIE No. 6108 Andrew Whitaker Cisco Press 800 East 96th Street Indianapolis, IN 46240
IX Contents Introduction xxi Part I: Configuration Fundamentals Chapter 1 Configuration Basics 1 1-1: User Interfaces 1 Configuration 2 Navigating File Systems 19 1-2: File Management 19 Deleting Files from Flash 22 Moving System Files 23 Configuration Rollback 25 Related File Management Commands 26 Alias Commands 27 1-3: Cisco Discovery Protocol (CDP) 28 Configuration 28 Example 29 1-4: System Time 30 Configuration 30 Example 33 1-5: Logging 34 Configuration 34 Verifying Logging 37 Example 37 1-6: System Monitoring 38 Configuration 39 Example 47 1-7: Service Assurance Agent (SAA) 47 Configuration 48 Example 56 1-8: Buffer Management 56 Configuration 57 Example 61 1-9: Some Troubleshooting Tools 61 IP Connectivity Tools: Extended ping 62 IP Connectivity Tools: ping 62 IP Connectivity Tools: traceroute 63 Debugging Output from the Router 65 IP Connectivity Tools: Telnet 65
x Cisco Router Configuration Handbook Poor Man's Sniffer 67 Troubleshooting Router Crashes 69 Monitoring Router Activity 70 Getting Assistance from Cisco 71 Information for the Cisco Technical Assistance Center (TAC) 71 Chapter 2 Interface Configuration 73 2-1: Ethernet Interfaces 73 Configuration 74 Example 75 2-2: FDDI Interfaces 76 Configuration 76 Example 76 2-3: Loopback and Null Interfaces 77 Configuration 77 Example 77 2-4: VLAN Interfaces 78 Configuration 78 Example 79 2-5: Tunnel Interfaces 79 Configuration 80 Example 81 2-6: Synchronous Serial Interfaces 82 Configuration 82 Configuring Channelized Tl/El Serial Interfaces 84 Configuring Synchronous Serial Interfaces 85 Example 91 2-7: Packet-Over-SONET Interfaces 91 Configuration 92 Configuring APS on POS Interfaces 93 Example 94 2-8: Frame Relay Interfaces 95 Configuration 96 Example 104 2-9: Frame Relay Switching 105 Configuration 105 Example 109 2-10: ATM Interfaces 110 Configuration 111 Example 117
xi Further Reading 118 Ethernet 118 Fast Ethernet 118 Gigabit Ethernet 118 Frame Relay 119 ATM 119 Chapter 3 Dial Solutions 121 3-1: Modems 122 Configuration 122 3-2: ISDN 128 PRI Configuration 129 PRI Example 131 BRI Configuration 131 BRI Example 133 3-3: Dial-on-Demand Routing (DDR) 133 Configuration 134 Example 139 3-4: Dial Backup 141 Dial Backup Configuration 141 Dial Backup Example 142 Dialer Watch Configuration 143 Dialer Watch Example 143 3-5: Routing Over Dialup Networks 144 Snapshot Routing Configuration 145 Snapshot Routing Example 146 ODR Configuration 146 3-6: Point-to-Point Protocol (PPP) 148 Configuration 148 Part II: Network Protocols Example 152 Further Reading 152 Chapter 4 IPv4 Addressing and Services 153 4-1: IP Addressing and Resolution 154 Configuration 154 Example 157 4-2: IP Broadcast Handling 158 Configuration 158 Example 160
xii Cisco Router Configuration Handbook 4-3: Hot Standby Router Protocol (HSRP) 160 Configuration 161 Example 164 4-4: Virtual Router Redundancy Protocol 165 Configuration 166 Example 166 4-5: Dynamic Host Configuration Protocol (DHCP) 167 Configuration 167 Example 171 4-6: Mobile IP 172 Configuration 173 Example 176 4-7: Network Address Translation (NAT) 178 Configuration 179 Examples 183 4-8: Server Load Balancing (SLB) 185 Configuration 186 Example 190 Chapter 5 IPv6 Addressing and Services 195 5-1: IPv6 Addressing 196 Configuration 198 Example 198 5-2: Dynamic Host Configuration Protocol (DHCP) Version 6 199 Example 201 5-3: Gateway Load Balancing Protocol Version 6 (GLBPv6) 202 Configuration 203 Example 206 5-4: Hot Standby Router Protocol for IPv6 208 Configuration 208 Example 210 5-5: Mobile IPv6 211 Configuration 212 Example 214 5-6: Network Address Translation-Protocol Translation 215 Configuration 216 Example 220
xiii 5-7: Tunneling 221 Configuration 221 Example 223 Chapter 6 IP Routing Protocols 227 6-1: Routing Information Protocol (RIP) 227 Configuration 228 RIP-2-Specific Commands 230 Example 232 6-2: Routing Information Protocol (RIP) for IPv6 233 Example 233 Configuration 233 4 6-3: Enhanced Interior Gateway Routing Protocol (EIGRP) 234 Configuration 235 Example 238 6-4: Enhanced Interior Gateway Routing Protocol (EIGRP) for IPv6 239 Configuration 239 Example 242 6-5: Open Shortest Path First (OSPF) 242 Configuration 243 Example 249 6-6: Open Shortest Path First (OSPF) Version 3 (IPv6) 250 Configuration 251 Example 252 6-7: Integrated ISIS 252 Configuration 253 Example 255 6-8: Integrated IS-IS for IPv6 257 Configuration 257 6-9: Border Gateway Protocol (BGP) 257 Configuration 259 Example 268 6-10: Multiprotocol Border Gateway Protocol (BGP) for IPv6 270 Configuration 270 Example 271 Chapter 7 IP Multicast Routing 275 7-1: Protocol Independent Multicast (PIM) 275 Configuration 277 Example 279
xiv Cisco Router Configuration Handbook 7-2: Internet Group Management Protocol (IGMP) 280 Configuration 281 Example 283 7-3: Multiprotocol BGP (MBGP) 284 Configuration 285 Example 286 7-4: Multicast Source Discovery Protocol (MSDP) 287 Configuration 288 Example 289 7-5: IPv6 Multicast 290 Configuration 290 Example 291 Chapter 8 IP Route Processing 293 8-1: Manually Configuring Routes 293 Configuration 294 Example 295 8-2: Policy Routing 296 Configuration 296 Example 298 8-3: Redistributing Routing Information 298 Configuration 298 Example 304 8-4: Filtering Routing Information 305 Configuration 306 Example 308 8-5: Load Balancing 308 Configuration 308 Example 309 Part III: Packet Processing Chapter 9 Quality of Service 311 9-1: Modular QoS Command-Line Interface (MQC) 314 Configuration 315 MQC Example 321 9-2: Network-Based Application Recognition (NBAR) 322 Configuration 323 NBAR Example 327 9-3: Policy-Based Routing (PBR) 327 Configuration 328 PBR Example 329
9-4: Quality of Service for VPNs 329 Configuration 329 QoS for VPNs Example 330 9-5: QoS Policy Propagation via BGP 330 Configuration 330 QoS Policy Propagation via BGP Example 331 9-6: Priority Queuing (PQ) 332 Configuration 332 Priority Queuing Example 333 9-7: Custom Queuing (CQ) 333 Configuration 334 Custom Queuing Example 336 9-8: Weighted Fair Queuing (WFQ) 337 Configuration 337 Weighted Fair Queuing Example 339 9-9: Weighted Random Early Detection (WRED) 340 Configuration 340 Weighted Random Early Detection Example 341 9-10: Committed Access Rate (CAR) 342 Configuration 342 Committed Access Rate Example 343 9-11: Generic Traffic Shaping (GTS) 344 Configuration 344 Generic Traffic Shaping Example 345 9-12: Frame Relay Traffic Shaping (FRTS) 345 Configuration 346 Frame Relay Traffic Shaping Example 347 9-13: Use RSVP for QoS Signaling 348 Configuration 348 Using RSVP for QoS Signaling Example 351 9-14: Link Efficiency Mechanisms 351 Configuration 352 Link Efficiency Mechanism Example 353 9-15: AutoQoS for the Enterprise 353 Configuration 354 Example 356 XV
xvi Cisco Router Configuration Handbook Chapter 10 Multiprotocol Label Switching 359 10-1: Configuring Basic MPLS 359 Configuration 360 Example 362 10-2: MPLS Traffic Engineering 364 Configuration 365 Example 368 10-3: MPLS Virtual Private Networks (VPN) 369 Configuration 369 Example 371 Part IV: Voice & Telephony Chapter 11 Voice and Telephony 375 11-1: Quality of Service for Voice 376 11-2: Voice Ports 381 Part V: Security Configuration 382 11-3: Dialing 395 Configuration 396 11-4: H.323 Gateways 405 Configuration 406 11-5: H.323 Gatekeepers 408 Configuration 408 Example 414 11-6: Interactive Voice Response (IVR) 415 Configuration 415 11-7: Survivable Remote Site (SRS) Telephony 417 Configuration 417 Example 420 Chapter 12 Router Security 423 12-1: Suggested Ways to Secure a Router 424 User Authentication on the Router 424 Control Access to the Router Lines 424 Configure Login Timing Options 425 Use Warning Banners to Inform Users 426 Router Management 426 Implement Logging on the Router 427 Control Spoofed Information 427 Control Unnecessary Router Services 428
xvii 12-2: Authentication, Authorization, and Accounting (AAA) 429 Configuration 430 Example 437 12-3: Dynamically Authenticate and Authorize Users with Authentication Proxy 438 Configuration 439 Example 442 12-4: Controlling Access with Lock and Key Security 442 Configuration 442 Example 445 12-5: Filtering IP Sessions with Reflexive Access Lists 446 Configuration 446 Example 448 12-6: Prevent DoS Attacks with TCP Intercept 448 Configuration 449 Example 451 12-7: Intelligent Filtering with Context-Based Access Control (CBAC) 451 Configuration 451 Example 456 12-8: Detect Attacks and Threats with the IOS Intrusion Prevention System 458 Configuration 458 Example 471 12-9: Control Plane Security 471 Configuration 472 Example 472 12-10: AutoSecure 473 Configuration 473 Example 474 Chapter 13 Virtual Private Networks 475 13-1: Using Internet Key Exchange (IKE) for VPNs 476 Configuration 476 Example 482 13-2: IPSec VPN Tunnels 483 Configuration 484 Example 490 13-3: High Availability Features 493 Configuration 494 Example 497
xviii Cisco Router Configuration Handbook 13-4: Dynamic Multipoint VPN (DMVPN) 504 Configuration 505 Example 511 13-5: Secure Socket Layer VPNs 514 Configuration 515 Example 517 Further Reading 517 Chapter 14 Access Lists and Regular Expressions 519 14-1: IP Access Lists 521 Configuration 521 Examples 530 14-2: MAC Address and Protocol Type Code Access Lists 532 Configuration 532 Examples 533 14-3: IPv6 Access Lists 533 Configuration 534 Examples 538 14-4: Regular Expressions 539 Configuration 539 Examples 540 Appendixes Appendix A Cisco IOS Software Release and Filename Conventions 543 Appendix В Cabling Quick Reference 551 Appendix С SNMP MIB Structure 557 Appendix D Password Recovery 561 Appendix E Configuration Register Settings 569 Appendix F Weil-Known IP Protocol Numbers 577 Appendix G Well-Known IP Port Numbers 587 Appendix H ICMP Type and Code Numbers 601 Appendix I Well-known IP Multicast Addresses 605 Appendix J Tool Command Language (TCL) Reference 619 Appendix К Ethernet Type Codes 623 Index 631