![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() |
Configuring Cisco 700 Series Routers with a Router Running Cisco IOS Software
This chapter contains configuration examples for connecting a Cisco 700 series router to a router running Cisco Internetwork Operating System (Cisco IOS) software. In these examples, the remote router is a Cisco 765, and the central site router is a Cisco 4500. However, you can replace the remote Cisco 765 with any Cisco 700 series router, and you can replace the central site Cisco 4500 with a router running Cisco IOS software.
For configuration examples for connecting a Cisco 700 series router to a CiscoPro CPA900 series router, or to another Cisco 700 series router, refer to the chapter "Configuring a Cisco 700 Series Router with a CiscoPro CPA900 or Cisco 700 Series Router."
This chapter contains the following sections:
IP Static Routing and Callback with CHAP Authentication
This section describes how to configure the the Cisco 765 and the Cisco 4500 routers for Internet Protocol (IP) static routing and callback with Challenge Handshake Authentication Protocol (CHAP).
Figure 5-1 is an illustration of the configuration used in this example.
Figure 5-1 : IP Static Routing and Callback with CHAP Authentication---Example Configuration
Central Site Cisco 4500 Command Summary
Following is the command summary for configuring the central site Cisco 4500 for IP static routing and callback with CHAP authentication:
configure terminal
hostname 4500
enable password <password>
username 4500 password 4500
username 765 password 765
isdn switch-type primary-5ess
map-class dialer s3
dialer callback-server username
controller T1 0
framing esf
linecode b8zs
pri-group timeslots 1-24
interface Ethernet0
ip address 172.18.124.2 255.255.255.0
no shutdown
interface Serial0:23
description This is pri-5ess 555-3693
ip address 172.16.125.1 255.255.255.0
encapsulation ppp
dialer idle-timeout 360
dialer wait-for-carrier-time 60
dialer map ip 172.16.125.7 name 765 class s3 5553693
dialer-group 1
ppp authentication chap
ppp callback accept
no shutdown
router eigrp 100
redistribute static
network 172.18.124.0
ip host c765 172.16.125.7
ip route 192.168.147.8 255.255.255.248 172.16.125.7
dialer-list 1 protocol ip permit
line con 0
exec-timeout 0 0
line aux 0
transport input all
line vty 0 4
password lab
login
end
Central Site Cisco 4500 Configuration Instructions
Take the following steps to configure the central site Cisco 4500 for IP static routing and callback with CHAP authentication:
Remote Cisco 765 Command Summary
Following is the command summary for configuring the remote Cisco 765 for IP static routing and callback with CHAP authentication:
Take the following steps to configure the remote Cisco 765 for IP static routing and callback with CHAP authentication:
IP Static Routing with CHAP Authentication and MLP
This section describes how to configure the central site Cisco 4500 and the remote Cisco 765 for IP static routing with Challenge Handshake Authentication Protocol (CHAP) and Multilink Protocol (MLP).
Figure 5-2 is an illustration of the configuration used in this example.
Figure 5-2 : IP Static Routing with CHAP Authentication and MLP---Example Configuration Central Site Cisco 4500 Command Summary
Following is the command summary for configuring the central site Cisco 4500 for IP static routing with CHAP and MLP:
Take the following steps to configure the central site Cisco 4500 for IP static routing with CHAP authentication and MLP:
Remote Cisco 765 Command Summary
Following is the command summary to configure the remote Cisco 765 for IP static routing with CHAP and MLP:
Take the following steps to configure the remote Cisco 765 for IP static routing with CHAP authentication and MLP:
IP Static Routing with PAP Authentication
This section describes how to configure the central site Cisco 4500 and the remote Cisco 765 for Internet Protocol (IP) static routing with Password Authentication Protocol (PAP) authentication.
Figure 5-3 is an illustration of the configuration used in this example.
Figure 5-3 : IP Static Routing with PAP Authentication---Example Configuration Central Site Cisco 4500 Command Summary
Following is the command summary for configuring the central site Cisco 4500 for IP static routing with PAP authentication:
Take the following steps to configure the central site Cisco 4500 for IP static routing with PAP:
Router# configure terminal
Use the hostname command to configure the router with a host name:
Router(config)# hostname 4500
Use the enable password command to to assign a password for the privileged command level
4500(config)# enable password <password>
Use the username password command to configure the central site Cisco 4500 and the remote Cisco 765 with a username and a password to be used during CHAP authentication:
4500(config)# username 4500 password 4500
4500(config)# username 765 password 765
Use the isdn switch-type command to configure the router with the ISDN switch being used:
4500(config)# isdn switch-type primary-5ess
Use the map-class command to define quality of service (QOS) parameters associated with a static map:
4500(config)# map-class dialer s3
Use the dialer callback-server command to configure the router to make callbacks to the remote Cisco 765:
4500(config)# dialer callback-server username
Use the controller command to configure the T1 line:
4500(config)# controller T1 0
Use the framing command to configure extended super frame packet encapsulation on the T1 line:
4500(config-if)# framing esf
Use the linecode b8zs command to select B8ZS line-code type for the T1 line:
4500(config-if)# linecode b8zs
Use the pri-group command to configure the PRI channels for the T1 line:
4500(config-if)# pri-group timeslots 1-24
Use the interface command to configure the Ethernet interface:
4500(config-if)# interface Ethernet0
Use the ip address command to configure the Ethernet interface with an IP address:
4500(config-if)# ip address 172.18.124.2 255.255.255.0
Use the no shutdown command to enable the Ethernet interface:
4500(config-if)# no shutdown
Use the interface serial command to configure the PRI B channels:
4500(config-if)# interface Serial0:23
Use the description command to add a description of the interface configuration:
4500(config-if)# description This is pri-5ess 555-3693
Use the ip address command to configure the interface with an IP address and a subnet mask:
4500(config-if)# ip address 172.16.125.1 255.255.255.0
Use the encapsulation command to configure packet framing to PPP:
4500(config-if)# encapsulation ppp
Use the dialer idle-timeout command to specify the idle time (in seconds) before the PRI line is disconnected:
4500(config-if)# dialer idle-timeout 360
Use the dialer wait-for-carrier-time command to specify how long (in seconds) to wait for the carrier to come up when a call is placed:
4500(config-if)# dialer wait-for-carrier-time 60
Use the dialer map command to configure the router to call a remote site based on specific data traffic criteria:
4500(config-if)# dialer map ip 172.16.125.7 name 765 class s3 5553693
Use the dialer-group command to configure the number of the dialer access group to which the serial interface belongs:
4500(config-if)# dialer-group 1
Use the ppp authentication command to configure the route to perform CHAP authentication:
4500(config-if)# ppp authentication chap
Use the ppp callback command to configure the router to accept Point-to-Point Protocol (PPP) callbacks:
4500(config-if)# ppp callback accept
Use the no shutdown command to enable the serial interface:
4500(config-if)# no shutdown
Use the router eigrp command to configure the router for Enhanced Interior Gateway Routing Protocol (Enhanced IGRP) routing:
4500(config-if)# router eigrp 100
Use the redistribute command to redistribute static routes from one routing domain to another:
4500(config)# redistribute static
Use the network command to specify the list of networks for IGRP routing:
4500(config)# network 172.18.124.0
Use the ip host command to define a static host name-to-address mapping in the host cache:
4500(config)# ip host c765 172.16.125.7
Use the ip route command to to configure a static route to the remote router:
4500(config)# ip route 192.168.147.8 255.255.255.248 172.16.125.7
Use the dialer-list protocol command to define a dialer list to control dialing by protocol:
4500(config)# dialer-list 1 protocol ip permit
Use the line command to configure the console terminal line:
4500(config)# line con 0
Use the exec-timeout command to set the interval that the EXEC command interpreter waits until user input is detected:
4500(config)# exec-timeout 0 0
Use the line command to configure the auxiliary EIA/TIA-232 DTE port:
4500(config)# line aux 0
Use the transport input command to define the protocols to use to connect to a specific line of the router:
4500(config)# transport input all
Use the line command to specify a virtual terminal for remote console access:
4500(config)# line vty 0 4
Use the password command to configure a password on the virtual terminal line:
4500(config)# password lab
Use the login command to enable password checking at login:
4500(config)# login
Use the end command to exit configuration mode for the router:
4500(config)# end
set system 765
set switch 5ess
set multidestination on
cd lan
set ip address 192.168.147.9
set ip netmask 255.255.255.248
set ip routing on
set ip rip update periodic
cd
set user 4500
set ip address 172.16.125.7
set ip netmask 255.255.255.0
set ip routing on
set ip framing none
set encapsulation ppp
set ppp callback request always
set ip route destination 0.0.0.0 ga 172.16.125.1 propagate on
set number 5558011
set bridging off
set timeout 360
set ppp secret host
cd
set ppp authentication incoming chap
set ppp authentication outgoing chap
set ppp secret client
reboot
Remote Cisco 765 Configuration Instructions
> set system 765
Use the set switch command to configure the ISDN BRI switch type being used:
765> set switch 5ess
Use the set multidestination command to enable the router to dial out to multiple destinations:
765> set multidestination on
Use the change user command to configure the LAN profile:
765> cd lan
Use the set ip address command to configure the local LAN interface with an IP address:
765:Lan> set ip address 192.168.147.9
Use the set ip netmask command to configure the local LAN interface with a subnet mask:
765:Lan> set ip netmask 255.255.255.248
Use the set ip routing command to enable IP routing on the local Ethernet LAN:
765:Lan> set ip routing on
Use the set ip rip update command to configure Routing Information Protocol (RIP) updates to be sent onto the local Ethernet LAN every 30 seconds:
765:Lan> set ip rip update periodic
Use the change user command to exit configuration mode for the LAN profile:
765:Lan> cd
Use the set user command to create a profile for the central site Cisco 4500:
765> set user 4500
Use the set ip address command to configure the ISDN interface to the central site Cisco 4500 with an IP address:
765:4500> set ip address 172.16.125.7
Use the set ip netmask command to configure the ISDN interface to the central site Cisco 4500 with an IP address:
765:4500> set ip netmask 255.255.255.0
Use the set ip routing command to enable IP routing to the central site Cisco 4500:
765:4500> set ip routing on
Use the set ip framing command to configure IP packets sent to the central site Cisco 4500 for Internet Protocol Control Protocol (IPCP) framing:
765:4500> set ip framing none
Use the set encapsulation command to configure PPP packet encapsulation for packets sent to the central site Cisco 4500:
765:4500> set encapsulation ppp
Use the set ppp callback request command to configure the router to request callbacks from the central site Cisco 4500:
765:4500> set ppp callback request always
Use the set ip route destination command to configure an IP static route to the central site Cisco 4500:
765:4500> set ip route destination 0.0.0.0 ga 172.16.125.1
propagate on
Use the set number command to enter the ISDN number the router calls to connect to the central site Cisco 4500:
765:4500> set number 5558011
Use the set bridging command to disable bridging to the central site Cisco 4500:
765:4500> set bridging off
Use the set timeout command to configure the ISDN line to disconnect after 360 seconds of idle time:
765:4500> set timeout 360
765:4500> set ppp secret host
Enter new Password: <secret>
Re-Type new Password: <secret>
The characters will not be echoed on your computer terminal when you enter the PPP secret.
765:4500> cd
Use the set ppp authentication command to configure CHAP authentication for both incoming and outgoing calls:
765> set ppp authentication incoming chap
765> set ppp authentication outgoing chap
765> set ppp secret client
Enter new Password: <secret>
Re-Type new Password: <secret>
The characters will not be echoed on your computer terminal when you enter the PPP secret.
765> reboot
configure terminal
hostname 4500
enable password lab
username 4500 password 4500
username 765 password 765
isdn switch-type primary-5ess
controller T1 0
framing esf
linecode b8zs
pri-group timeslots 1-24
interface Ethernet0
ip address 172.18.124.2 255.255.255.0
no shutdown
interface Serial0:23
description This is pri-5ess 555-3693
ip address 172.16.125.1 255.255.255.0
encapsulation ppp
dialer idle-timeout 360
dialer wait-for-carrier-time 60
dialer map ip 172.16.125.7 name 765 5553693
dialer-group 1
ppp authentication chap
ppp multilink
dialer load 125
no shutdown
router eigrp 100
redistribute static
network 172.18.124.0
ip host c765 172.16.125.7
ip host c7000 172.18.124.1
ip route 192.168.147.8 255.255.255.248 172.16.125.7
dialer-list 1 protocol ip permit
line con 0
exec-timeout 0 0
line aux 0
transport input all
line vty 0 4
password lab
login
end
Central Site Cisco 4500 Configuration Instructions
router# configure terminal
Use the hostname command to configure the router with a host name:
router(config)# hostname 4500
Use the enable password command to assign a password for the privileged command level:
4500(config)# enable password <password>
Use the username password command to configure the central site Cisco 4500 and the remote Cisco 765 with a username and a password to be used during CHAP authentication:
4500(config)# username 4500 password 4500
4500(config)# username 765 password 765
Use the isdn switch-type command to configure the router with the ISDN switch being used:
4500(config)# isdn switch-type primary-5ess
Use the controller command to configure the T1 line:
4500(config)# controller T1 0
Use the framing command to configure extended super frame packet encapsulation on the T1 line:
4500(config-if)# framing esf
Use the linecode b8zs command to select B8ZS line-code type for the T1 line:
4500(config-if)# linecode b8zs
Use the pri-group command to configure the PRI channels for the T1 line:
4500(config-if)# pri-group timeslots 1-24
Use the interface command to configure the Ethernet interface:
4500(config-if)# interface Ethernet0
Use the ip address command to configure the Ethernet interface with an IP address:
4500(config-if)# ip address 172.18.124.2 255.255.255.0
Use the no shutdown command to enable the Ethernet interface:
4500(config-if)# no shutdown
Use the interface serial command to configure the PRI B channels:
4500(config-if)# interface Serial0:23
Use the description command to add a description of the interface configuration:
4500(config-if)# description This is pri-5ess 555-3693
Use the ip address command to configure the interface with an IP address and a subnet mask:
4500(config-if)# ip address 172.16.125.1 255.255.255.0
Use the encapsulation command to configure packet framing to PPP:
4500(config-if)# encapsulation ppp
Use the dialer idle-timeout command to specify the idle time (in seconds) before the PRI line is disconnected:
4500(config-if)# dialer idle-timeout 360
Use the dialer wait-for-carrier-time command to specify how long (in seconds) to wait for the carrier to come up when a call is placed:
4500(config-if)# dialer wait-for-carrier-time 60
Use the dialer map command to configure the router to call a remote site based on specific data traffic criteria:
4500(config-if)# dialer map ip 172.16.125.7 name 765 5553693
Use the dialer-group command to configure the number of the dialer access group to which the serial interface belongs:
4500(config-if)# dialer-group 1
Use the ppp authentication command to configure the route to perform CHAP authentication:
4500(config-if)# ppp authentication chap
Use the ppp multilink command to configure the router to send data for the same destination over multiple B channels:
4500(config-if)# ppp multilink
Use the dialer load command to configure the maximum load before the the dialer places another call to a destination:
4500(config-if)# dialer load 125
Use the no shutdown command to enable the serial interface:
4500(config-if)# no shutdown
Use the router eigrp command to configure the router for Enhanced Interior Gateway Routing Protocol (Enhanced IGRP) routing:
4500(config)# router eigrp 100
Use the redistribute command to redistribute static routes from one routing domain to another:
4500(config)# redistribute static
Use the network command to specify the list of networks for IGRP routing:
4500(config)# network 172.18.124.0
Use the ip host command to define a static host name-to-address mapping in the host cache:
4500(config)# ip host c765 172.16.125.7
4500(config)# ip host c7000 172.18.124.1
Use the ip route command to to configure a static route to the remote router:
4500(config)# ip route 192.168.147.8 255.255.255.248 172.16.125.7
Use the dialer-list protocol command to define a dialer list to control dialing by protocol:
4500(config)# dialer-list 1 protocol ip permit
Use the line command to configure the console terminal line:
4500(config)# line con 0
Use the exec-timeout command to set the interval that the EXEC command interpreter waits until user input is detected:
4500(config)# exec-timeout 0 0
Use the line command to configure the auxiliary EIA/TIA-232 DTE port:
4500(config)# line aux 0
Use the transport input command to define the protocols to use to connect to a specific line of the router:
4500(config)# transport input all
Use the line command to specify a virtual terminal for remote console access:
4500(config)# line vty 0 4
Use the password command to configure a password on the virtual terminal line:
4500(config)# password lab
Use the login command to enable password checking at login:
4500(config)# login
Use the end command to exit configuration mode for the router:
4500(config)# end
set system 765
set switch 5ess
set multidestination on
set ppp multilink on
cd lan
set ip address 192.168.147.9
set ip netmask 255.255.255.248
set ip routing on
set ip rip update periodic
cd
set user 4500
set ip address 172.16.125.7
set ip netmask 255.255.255.0
set ip routing on
set ip framing none
set encapsulation ppp
set ip route destination 0.0.0.0 ga 172.16.125.1 propagate on
set number 5558011
set bridging off
set ppp secret host
set timeout 360
demand 2 threshold 32 duration 5
cd
set ppp authentication incoming chap
set ppp authentication outgoing chap
set ppp secret client
reboot
Remote Cisco 765 Configuration Instructions
> set system 765
Use the set switch command to configure the router for the ISDN BRI switch being used:
765> set switch 5ess
Use the set multidestination command to enable the router to dial to multiple remote destinations:
765> set multidestination on
Use the set ppp multilink command to enable data to be sent over multiple B channels:
765> set ppp multilink on
Use the change user command to configure the LAN profile:
765> cd lan
Use the set ip address command to configure the local Ethernet LAN interface with an IP address:
765:Lan> set ip address 192.168.147.9
Use the set ip netmask command to configure the local Ethernet LAN interface with a subnet mask:
765:Lan> set ip netmask 255.255.255.248
Use the set ip routing command to enable IP routing on the local Ethernet LAN:
765:Lan> set ip routing on
Use the set ip rip update command to configure RIP updates to be sent onto the local Ethernet LAN every 30 seconds:
765:Lan> set ip rip update periodic
Use the change user command to exit configuration mode for the LAN profile:
765:Lan> cd
Use the set user command to create a profile for the central site Cisco 4500:
765> set user 4500
Use the set ip address command to configure the the IP address of the ISDN interface to the central site Cisco 4500:
765:4500> set ip address 172.16.125.7
Use the set ip netmask command to configure the subnet mask of the ISDN interface to the central site Cisco 4500:
765:4500> set ip netmask 255.255.255.0
Use the set ip routing command to enable IP routing to the central site Cisco 4500:
765:4500> set ip routing on
Use the set ip framing command to configure IP packets sent to the central site Cisco 4500 for IPCP framing:
765:4500> set ip framing none
Use the set encapsulation command to configure packets sent to the central site Cisco 4500 for PPP packet encapsulation:
765:4500> set encapsulation ppp
Use the set ip route destination command to configure a static route to the central site Cisco 4500:
765:4500> set ip route destination 0.0.0.0 ga 172.16.125.1
propagate on
Use the set number command to enter the ISDN telephone number the router calls to connect to the central site Cisco 4500:
765:4500> set number 5558011
Use the set bridging command to disable bridging to the central site Cisco 4500:
765:4500> set bridging off
765:4500> set ppp secret host
Enter new Password: <secret>
Re-Type new Password: <secret>
The characters will not be echoed on your computer terminal when you enter the PPP secret.
765:4500> set timeout 360
Use the demand command to configure when an on-demand ISDN call is made:
765:4500> demand 2 threshold 32 duration 5
Use the change user command to configure the system level:
765:4500> cd
Use the set ppp authentication command to configure CHAP authentication for both incoming and outgoing calls:
765> set ppp authentication incoming chap
765> set ppp authentication outgoing chap
765> set ppp secret client
Enter new Password: <secret>
Re-Type new Password: <secret>
The characters will not be echoed on your computer terminal when you enter the PPP secret.
765> reboot
configure terminal
hostname 4500
enable password lab
username 4500 password 4500
username 765 password 765
isdn switch-type primary-5ess
controller T1 0
framing esf
linecode b8zs
pri-group timeslots 1-24
interface Ethernet0
ip address 172.18.124.2 255.255.255.0
no shutdown
interface Serial0:23
description This is pri-5ess 555-3693
ip address 172.16.125.1 255.255.255.0
encapsulation ppp
dialer idle-timeout 360
dialer wait-for-carrier-time 60
dialer map ip 172.16.125.7 name 765 5553693
dialer-group 1
ppp authentication pap
no shutdown
router eigrp 100
redistribute static
network 172.18.124.0
ip host c765 172.16.125.7
ip route 192.168.147.8 255.255.255.248 172.16.125.7
dialer-list 1 protocol ip permit
line con 0
exec-timeout 0 0
line aux 0
transport input all
line vty 0 4
password lab
login
end
Central Site Cisco 4500 Configuration Instructions
router# configure terminal
Use the hostname command to configure the router with a host name: