Enterasys XSR-XPEDITION Configuration Manual

Xsr-xpedition security routers
Table of Contents

Advertisement

Quick Links

Enterasys Networks
XSR-XPEDITION Security Routers
XSR-Series
IP-Function and Advanced Services
May 2004

Advertisement

Table of Contents
loading

Summary of Contents for Enterasys XSR-XPEDITION

  • Page 1 Enterasys Networks XSR-XPEDITION Security Routers XSR-Series IP-Function and Advanced Services May 2004...
  • Page 2: Table Of Contents

    Table of Contents Table of Contents Table of Contents Table of Contents p p p p age 1.0 IP-Address and Secondary Addresses configuration ..........4 1.1 IP-Static-routing..................... 4 1.2 IP-Loopback Interface.................... 4 1.3 IP-OSPF-routing ....................5 1.4 IP-RIPv1,v2-routing....................6 1.5 DHCP server, static / dynamic-pool ............... 7 1.6 DHCP/Bootp relay argent / ip-helper..............
  • Page 3 9.0r1 VPN IPSEC site-to-site tunnel via pre-shared key ..........31 9.0r2 VPN IPSEC site-to-site tunnel via pre-shared key ..........32 9.1 VPN IPSEC site-to-site tunnel certification PKI............33 9.1.1 Certification control / certificates / CRLS / CA identity ........35 9.3 VPN PPTP User termination .................
  • Page 4: Ip-Address And Secondary Addresses Configuration

    1.0 IP-Address and Secondary Addresses configuration XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary no shutdown interface FastEthernet2 description "LAN-Interface2" ip address 20.20.20.1 255.255.255.0 ip address 50.50.50.1 255.255.255.0 secondary no shutdown XSR-1805#...
  • Page 5: Ip-Ospf-Routing

    1.3 IP-OSPF-routing XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary no shutdown interface FastEthernet2 description "LAN-Interface2" ip address 20.20.20.1 255.255.255.0 ip address 50.50.50.1 255.255.255.0 secondary no shutdown interface Loopback0 ip address 192.168.222.1 255.255.255.255...
  • Page 6: Ip-Ripv1,V2-Routing

    1.4 IP-RIPv1,v2-routing XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary no shutdown interface FastEthernet2 description "LAN-Interface2" ip address 20.20.20.1 255.255.255.0 ip address 50.50.50.1 255.255.255.0 secondary no shutdown interface Loopback0 ip address 192.168.222.1 255.255.255.255...
  • Page 7: Dhcp Server, Static / Dynamic-Pool

    1.5 DHCP server, static / dynamic-pool 1.6 DHCP/Bootp relay argent / ip-helper XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary ip dhcp server no shutdown interface FastEthernet2 description "LAN-Interface2"...
  • Page 8: Sntp Simple Network Time Protocol

    1.7 SNTP Simple Network Time Protocol XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 sntp-client server 51.51.51.88 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 secondary ip dhcp server no shutdown interface FastEthernet2 description "LAN-Interface2"...
  • Page 9: Interface Description

    XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 banner login "###########################################" banner login "# #" banner login "# Welcome on Enterasys Networks #" banner login "# XPedition Security Router #" banner login "# #" banner login "# contact: #"...
  • Page 10: Access Control List Incoming Outgoing

    3.0 Access control list incoming outgoing 3.1 Access control list 1-99 (standard) 3.2 Access control list 100-199 (extended) XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 access-list 2 permit 20.20.20.0 0.0.0.255 access-list 110 deny ip 10.10.10.100 0.0.0.0 any access-list 110 deny ip 10.10.10.111 0.0.0.0 any access-list 110 permit ip any any interface FastEthernet1...
  • Page 11: Access Control List Moving Online Editing

    3.3 Access control list moving online editing XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 access-list 110 deny ip 10.10.10.100 0.0.0.0 any access-list 110 deny ip 10.10.10.111 0.0.0.0 any access-list 110 permit ip any any interface FastEthernet1 description "LAN-Interface1"...
  • Page 12: Virtual Router Redundancy Protocol (Rfc 2338)

    4.0 Virtual Router Redundancy Protocol (RFC 2338) Router-1-Master XSR-1805_1#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805_1 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 Secondary vrrp 1 ip 10.10.10.254 vrrp 1 ip 40.40.40.254 vrrp 1 priority 250 vrrp 1 master-respond-ping no shutdown...
  • Page 13: Vrrp Monitor Interface Function, Interface Tracking

    4.1 VRRP monitor interface function, interface tracking Router-1-Master XSR-1805_1#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805_1 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 ip address 40.40.40.1 255.255.255.0 Secondary vrrp 1 ip 10.10.10.254 vrrp 1 ip 40.40.40.254 vrrp 1 priority 250 vrrp 1 master-respond-ping vrrp 1 track FastEthernet2...
  • Page 14: Nat Static Bindings

    4.2 NAT static bindings XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown interface FastEthernet2 description "LAN-Interface2" ip address 134.161.208.1 255.255.255.0 no shutdown ip nat source static 10.10.10.100 134.161.208.100 ip nat source static 10.10.10.101 134.161.208.101 XSR-1805# 4.3 NAT dynamic with PAT “Port Address Translation”...
  • Page 15: Dialer Interface

    5.0 Dialer Interface XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 access-list 110 permit ip any any interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown interface Dialer0 dialer pool 1...
  • Page 16: Dialer Backup Interface Function

    5.1 Dialer Backup interface function XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 controller e1 0/2/0 clock source internal no shutdown interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 access-list 110 permit ip any any interface FastEthernet1 description "LAN-Interface1"...
  • Page 17: Pap For Authentication Ppp

    5.2 PAP for authentication PPP XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 username remote privilege 0 "password is not displayed" interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 access-list 110 permit ip any any interface FastEthernet1 description "LAN-Interface1"...
  • Page 18: Chap For Authentication Ppp

    5.3 CHAP for authentication PPP XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 username remote privilege 0 cleartext iamRemote interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 access-list 110 permit ip any any interface FastEthernet1 description "LAN-Interface1"...
  • Page 19: Vpn Via Dialer Interface Rtr1

    5.4.1 VPN via Dialer Interface rtr1 XSR-1805-1#show running-config Version 6.0.0.9, Built Dec 12 2003, 14:56:30 hostname XSR-1805-1 interface bri 0/1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 access-list 101 permit ip 20.20.20.0 0.0.0.255 10.10.10.0 0.0.0.255 access-list 101 permit ip any host 1.1.1.2 access-list 121 permit ip 20.20.20.0 0.0.0.255 10.10.10.0 0.0.0.255...
  • Page 20: Vpn Via Dialer Interface Rtr2

    5.4.2 VPN via Dialer Interface rtr2 XSR-1805-2#show running-config Version 6.0.0.9, Built Dec 12 2003, 14:56:30 hostname XSR-1805-2 interface bri 0/2/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 access-list 102 permit ip 10.10.10.0 0.0.0.255 20.20.20.0 0.0.0.255 access-list 102 permit ip any host 1.1.1.1 access-list 130 permit ip 10.10.10.0 0.0.0.255 20.20.20.0 0.0.0.255...
  • Page 21: Dialer Int. Pri To Bri With D-Channel-Callback Central-Site

    5.5.1 Dialer Int. PRI to BRI with D-channel-callback central-site XSR-central#show running-config Version 6.0.0.9, Built Dec 12 2003, 14:56:30 hostname XSR-central username remote1 privilege 0 password cleartext xsr1 username remote2 privilege 0 password cleartext xsr2 controller e1 0/1/0 pri-group isdn bchan-number-order ascending no shutdown dialer pool-member 1 priority 10 access-list 120 permit ip...
  • Page 22: Dialer Int. Pri To Bri With D-Channel-Callback Remote1-Site

    5.5.2 Dialer Int. PRI to BRI with D-channel-callback remote1-site remote1#show running-config Version 6.0.0.9, Built Dec 12 2003, 14:56:30 hostname remote1 username central privilege 0 password cleartext xsr interface bri 0/2/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 access-list 102 permit ip any any interface FastEthernet 1...
  • Page 23: Dialer Int. Pri To Bri With D-Channel-Callback Remote2-Site

    5.5.3 Dialer Int. PRI to BRI with D-channel-callback remote2-site remote1#show running-config Version 6.0.0.9, Built Dec 12 2003, 14:56:30 hostname remote2 username central privilege 0 password cleartext xsr interface bri 0/1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 10 access-list 130 permit ip any any interface FastEthernet 1...
  • Page 24: Isdn Switch Type Changing

    6.0 ISDN config for BRIx/x 6.1 ISDN switch type changing XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 access-list 110 permit ip any any interface FastEthernet1 description "LAN-Interface1"...
  • Page 25: Isdn Callback

    6.2 ISDN callback XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 access-list 110 permit ip any any interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown interface Dialer0 dialer pool 1...
  • Page 26: Isdn Multilink / Isnd Channel Bundling

    6.3 ISDN multilink / ISND channel bundling XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface bri 1/0 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 0 interface bri 1/1 isdn switch-type basic-net3 no shutdown dialer pool-member 1 priority 10 access-list 110 permit ip any any interface FastEthernet1 description "LAN-Interface1"...
  • Page 27: Pppoe On Fast Ethernet Interfaces

    7.0 PPPoE on Fast Ethernet interfaces 7.1 IP-address negotiation for PPPoE XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface FastEthernet1 ip address 10.10.10.1 255.255.255.0 no shutdown interface FastEthernet2 description "LAN-Interface2-4-PPPoE" no shutdown interface FastEthernet2.1 encapsulate ppp ip address negotiated ip mtu 1492 ip nat source assigned overload...
  • Page 28: Aaa Authentication Authorization Accounting Radius

    8.0 AAA Authentication Authorization Accounting Radius XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown aaa method radius logon default enable group DEFAULT address ip-address 10.10.10.123 key My-Radius auth-port 1645 acct-port 1646 attempts 4...
  • Page 29: Ssh / Telnet

    8.1 SSH / Telnet SSH and Telnet are enabled by default SSH and Telnet are enabled by default SSH and Telnet are enabled by default SSH and Telnet are enabled by default XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 ip ssh server disable ip telnet server disable...
  • Page 30: Snmp Configuration /Contact/Location/Parameter

    8.3 SNMP configuration /contact/location/parameter XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 logging 10.10.10.100 logging Console logging Monitor high logging Buffered debug logging SNMP medium interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown snmp-server community private rw snmp-server community public ro snmp-server enable traps snmp-server host 10.10.10.111 traps public...
  • Page 31: R1 Vpn Ipsec Site-To-Site Tunnel Via Pre-Shared Key

    9.0r1 VPN IPSEC site-to-site tunnel via pre-shared key Router-1 XSR-1805_1#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805_1 crypto isakmp proposal prop-map1 authentication pre-share group 5 lifetime 10800 access-list 101 permit ip 10.10.10.0 0.0.0.255 80.80.80.0 0.0.0.255 crypto isakmp peer 20.20.20.2 255.255.255.255 proposal prop-map1 config-mode gateway crypto ipsec transform-set VPN-3des esp-3des esp-sha-hmac...
  • Page 32: R2 Vpn Ipsec Site-To-Site Tunnel Via Pre-Shared Key

    9.0r2 VPN IPSEC site-to-site tunnel via pre-shared key Router-2 XSR-1805_2#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805_2 crypto isakmp proposal prop-map1 authentication pre-share group 5 lifetime 10800 access-list 101 permit ip 80.80.80.0 0.0.0.255 10.10.10.0 0.0.0.255 crypto isakmp peer 20.20.20.1 255.255.255.255 proposal prop-map1 config-mode gateway crypto ipsec transform-set VPN-3des esp-3des esp-sha-hmac...
  • Page 33: Vpn Ipsec Site-To-Site Tunnel Certification Pki

    9.1 VPN IPSEC site-to-site tunnel certification PKI XSR-1805_1#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805_1 crypto isakmp proposal prop-map1 authentication rsa-sig group 5 lifetime 10800 access-list 101 permit ip 10.10.10.0 0.0.0.255 any crypto isakmp peer 20.20.20.1 255.255.255.255 proposal prop-map1 config-mode gateway crypto ipsec transform-set VPN-3des esp-3des esp-sha-hmac...
  • Page 34 Issue Certificate via SCEP protocol to XSR Issue Certificate via SCEP protocol to XSR from Issue Certificate via SCEP protocol to XSR Issue Certificate via SCEP protocol to XSR from from from Win n n n dows dows dows dows 2000 2000 2000 CA 2000...
  • Page 35: Certification Control / Certificates / Crls / Ca Identity

    MAILTO=support@enterasys.com,. . . , CN=LABOR-ETS-CA Valid From: 2003 Jul 2nd, 10:21:11 GMT Valid To: 2004 Jul 2nd, 10:31:11 GMT Subject: CN=Enterasys Networks X-pedition Series - 361902300157320D Fingerprint: 30451AC4 F2626413 841522E3 2DDB98A4 Certificate Size: 1102 bytes CA Certificate - Enterasys-Networks-CA State: CA-AUTHENTICATED...
  • Page 36: Vpn Pptp User Termination

    9.3 VPN PPTP User termination XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface FastEthernet1 ip address 134.141.130.12 255.255.255.0 no shutdown interface FastEthernet2 ip address 192.168.1.1 255.255.255.0 ip nat source assigned overload no shutdown interface Vpn1 multi-point ip address 192.168.2.1 255.255.255.0 ip local pool VPN 192.168.2.0 255.255.255.0 aaa group DEFAULT...
  • Page 37: R1 Gre Encapsulated In Ipsec Site-To-Site Tunnel Via Pre-Shared Key

    9.4r1 GRE encapsulated in IPSEC site-to-site tunnel via pre-shared key Router-1 XSR-1805_1#show running-config Version 6.0.0.0, Built Sep 14 2003, 11:09:28 hostname XSR-1805_1 crypto isakmp proposal prop-map1 authentication pre-share group 5 lifetime 10800 access-list 101 permit gre any any crypto isakmp peer 20.20.20.2 255.255.255.255 proposal prop-map1 config-mode gateway crypto ipsec transform-set VPN-3des esp-3des esp-sha-hmac...
  • Page 38: R2 Gre Encapsulated In Ipsec Site-To-Site Tunnel Via Pre-Shared Key

    9.4r2 GRE encapsulated in IPSEC site-to-site tunnel via pre-shared key Router-2 XSR-1805_2#show running-config Version 6.0.0.0, Built Sep 14 2003, 11:09:28 hostname XSR-1805_2 crypto isakmp proposal prop-map1 authentication pre-share group 5 lifetime 10800 access-list 101 permit gre any any crypto isakmp peer 20.20.20.1 255.255.255.255 proposal prop-map1 config-mode gateway crypto ipsec transform-set VPN-3des esp-3des esp-sha-hmac...
  • Page 39: R1 Gre Native Site-To-Site Tunnel

    9.5r1 GRE native site-to-site tunnel Router-1 XSR-1805_1#show running-config Version 6.0.0.0, Built Sep 14 2003, 11:09:28 hostname XSR-1805_1 access-list 101 permit gre any any access-list 101 deny any any interface FastEthernet 1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown interface FastEthernet 2 description "LAN-Interface2"...
  • Page 40: R2 Gre Native Site-To-Site Tunnel

    9.5r2 GRE native site-to-site tunnel Router-2 XSR-1805_2#show running-config Version 6.0.0.0, Built Sep 14 2003, 11:09:28 hostname XSR-1805_2 access-list 101 permit gre any any access-list 101 deny any any interface FastEthernet 1 description "LAN-Interface1" ip address 80.80.80.1 255.255.255.0 no shutdown interface FastEthernet 2 description "LAN-Interface2"...
  • Page 41: Diffserv Dscp Field Addressing

    10.1 DIFFSERV DSCP field addressing XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 class-map DSCP_EF match access-group 2 match ip dscp EF policy-map DSCP_EF class DSCP_EF priority high 12000 access-list 2 permit 10.10.10.0 0.0.0.255 interface FastEthernet1 description "LAN-Interface1" ip address 10.10.10.1 255.255.255.0 no shutdown interface FastEthernet2...
  • Page 42: Firewall Configuration

    11.1 Firewall configuration XSR-1805#show running-config Version 4.0.0.0, Built Mar 26 2003, 19:47:17 hostname XSR-1805 interface FastEthernet1 description "Interal_network_Private" ip address 10.10.10.1 255.255.0.0 no shutdown interface FastEthernet2 description "External_network_Intranet" ip address 192.168.224.133 255.255.255.0 no shutdown interface Loopback0 description "internal_loopback_Private" ip address 13.13.13.1 255.255.255.0 no shutdown ip firewall network 192 192.168.224.1 192.168.224.255 external ip firewall network 13 13.13.13.1 13.13.13.255 internal...
  • Page 43: Vlan Configuration 802.1Q Tagged Routing

    12.1 Vlan configuration 802.1q tagged routing XSR-1805#show running-config Version 6.0.0.0, Built Sep 14 2003, 11:09:28 hostname XSR-1805 interface FastEthernet 1 description "UnTagged-Native-Interface" ip address 11.11.11.1 255.255.255.0 no ip proxy-arp no shutdown interface FastEthernet 1.10 description "vlan 10 tagged" vlan 10 ip address 10.10.10.1 255.255.255.0 no ip proxy-arp no shutdown...
  • Page 44: Appendix: : : : Appendix

    Important commands for using the XSR platform: A1.1 show version - Software, Bootrom, RAM, Flash, System Uptime XSR-1805#show version Enterasys Networks Operating Software Copyright 2002 by Enterasys Networks Inc. Hardware: Processor board ID: 9002854-02 REV0A Serial Number: 361903091537210L Processor: IBM PowerPC 405GP Rev. D at 200MHz...
  • Page 45: A1.3 Show Interface - Ip Address, Speed, Duplex, Statistics, Errors

    A1.3 show interface - IP address, speed, duplex, statistics, errors XSR-1805#show interface FastEthernet1 is Admin Up Description: LAN-Interface1 Internet address is 10.10.10.1, subnet mask is 255.255.255.0 The name of this device is Eth1. The physical link is currently up. The device is in polling mode, and is active. The last driver error is '(null)'.
  • Page 46: A1.5 Flash:/ Cflash:/- Dir, Rename, Copy Commands

    A1.5 flash:/ cflash:/ - dir, rename, copy commands XSR-1805#dir Listing Directory flash:/ size date time name -------- ------ ------ -------- 4000669 JUN-26-2003 11:00:12 xsr1800.fls 1777 OCT-01-2003 12:46:40 persistent-data OCT-01-2003 12:46:40 startup-config OCT-01-2003 12:46:40 private-config 2,369,536 bytes free 6,381,568 bytes total XSR-1805# XSR-1805# Change current directory...
  • Page 47: B1.0 Show Ip Route

    B1.0 show ip route XSR-1805#show ip route Codes: C-connected, S-static, R-RIP, O-OSPF, IA-OSPF interarea N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - 0SPF external type 1, E2 - 0SPF external type 2 * - candidate default, D - default route originated from default net 192.168.224.0/24 [0001] directly connected, FastEthernet2...
  • Page 48: C1.0 Show Tunnels

    C1.0 show tunnels XSR-1805_2#show tunnels Tunnel MIB: Creation Time Proto Username Peer IP Packets In/Out 40000001 12/02/03, 13:21 IPSEC (Unknown) 0.0.0.0 0000003976/0000003949 XSR-1805_2# C1.1 show crypto isakmp sa XSR-1805_2#show crypto isakmp sa Connection-ID State Source Destination Lifetime ------------ ---------- ----------- ----------- ------- QM_IDLE...
  • Page 49: C1.4 Show Tunnels / Gre Via Ipsec

    C1.4 show tunnels / GRE via IPSEC XSR-1805_2#show tunnels Tunnel MIB: Creation Time Proto Username Peer IP Packets In/Out 40000001 12/02/2003, 16:14 GRE 20.20.20.1 0000003528/0000002552 XSR-1805_2# C1.5 show interface vpn / GRE via IPSEC XSR-1805_2#show interface vpn Vpn1 is Admin Up Internet address is 192.168.1.2, subnet mask is 255.255.255.0 Multicast redirect to 192.168.1.1 is enabled.
  • Page 50: D1.1 Show Ip Interface Atm 1/0.1

    D1.1 show ip interface atm 1/0.1 XSR1805-ADSL#show ip interface atm 1/0.1 ATM 1/0.1 is Admin Up Internet address is 212.184.161.76, subnet mask is 255.255.255.255 Rcvd: 766 octets, 6 unicast packets, 0 discards, 0 errors, 0 unknown protocol. Sent: 800 octets, 8 unicast packets, 0 discards, 0 errors.
  • Page 51: D1.3 Show Controllers Atm 1/0.1

    D1.3 show controllers atm 1/0.1 XSR1805-ADSL#show controllers atm 1/0.1 ********** ATM Sub-Interface Stats ********** ATM 1/0.1 Packet Processor Tx Scheduler Stats: Output Q length is 0/40/40(5) 48 Packet Tx OK 0 Packet not Tx: drop 0 Packet not Tx: MUX END_ERR_BLOCK 0 Packet not Tx: MUX ERROR 0 Packet not Tx: Unknown Msg from MUX Statistic Counters:...
  • Page 52: D1.4 Show Interface Atm 1/0

    D1.4 show interface atm 1/0 XSR1805-ADSL #show interface atm 1/0 ********** ATM Interface Stats ********** ATM 1/0 is Admin Up / Oper Up Description: "ADSL-connection" The name of this device is adsl. Administrative State is ENABLED Operational State is UP. The upstream data rate is 192 kbit/sec.
  • Page 53: D1.5 Show Interface Atm 1/0.1

    D1.5 show interface atm 1/0.1 XSR1805-ADSL #show interface atm 1/0.1 ********** ATM Sub-Interface Stats ********** ATM 1/0.1 is Admin Up / Oper Up Internet address is 212.184.161.76, subnet mask is 255.255.255.255 State: OPENED IPCP State: OPENED PPPoE is Oper Up The logical link is currently Up The Name of the Access Concentrator is ERX1400 The Session Id is 0x0054...
  • Page 54: D1.6 Show Ppp Interface Atm 1/0.1

    D1.6 show ppp interface atm 1/0.1 XSR1805-ADSL#show ppp interface atm 1/0.1 ********** PPP Stats ********** ATM 1/0.1: PPP is Admin Up / Oper Up Current State: OPENED IPCP Current State: OPENED LCP STATS Total Rcv Pck: Total Rcv Control Pck: Total Rcv Data Pck: Total Rcv Pck Discarded: Total Tx Pck:...
  • Page 55 Getting Help Getting Help Getting Help Getting Help For additional support related to the XSR, contact Enterasys Networks using one of the following methods: World Wide Web World Wide Web World Wide Web World Wide Web http://www.enterasys.com http://www.enterasys.com http://www.enterasys.com http://www.enterasys.com...

This manual is also suitable for:

Xpedition xsr-1805Xpedition xsr series

Table of Contents