Cisco Router 800 Series Software Configuration Guide
Have a look at the manual Cisco Router 800 Series Software Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 53 Cisco manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
2-13 Cisco 800 Series Software Configuratio Guide 78-5372-06 Chapter 2 Configuring Basic Networks Connecting a Public IP Network to the Internet Figure 2-2 Connecting a Public IP Network to the Internet Callout Number Description 1DHCP server at Site 1 2National ISDN-1 switch type, with B1 SPID 40855511110101 and B2 SPID 40855522220101 3Private IP network 4DHCP client 5PPP link 6ISDN phone number, 4085551111 7Internet service provider 8CHAP or PAP 9Domain Name System (DNS) server 10.0.0.0 255.0.0.0 192.168.1.100 74930 26 17 8 9 5 4 3
Chapter 2 Configuring Basic Networks Connecting a Public IP Network to the Internet 2-14 Cisco 800 Series Software Configuratio Guide 78-5372-06 Features Used This network uses the following features on the LAN: IP routing DHCP server (optional) When your router is acting as a DHCP server, workstations configured as DHCP clients are automatically assigned IP addresses and subnet masks. This network uses the following features on the WAN: IP routing PPP IPCP (optional) CHAP or PAP over PPP DDR Static routes If the ISP does not assign an IP address and subnet mask for your WAN interface, you can use IPCP to automatically negotiate its IP address from the router to which it is attempting to connect. You can use either CHAP or PAP as the PPP authentication protocol. Cisco recommends using CHAP because it is the more secure of the two protocols. In addition, the ISDN line is activated only when needed (DDR), using one route that has been manually configured (static route). DDR using static routes suits small networking environments that do not have complex routing topologies. Configuration To configure the features for this network example, perform the following steps on the PC, starting in the global configuration mode. Step 1Specify a name for the router. For example, specify SanJose as the router name: router(config)# hostname SanJose
2-15 Cisco 800 Series Software Configuratio Guide 78-5372-06 Chapter 2 Configuring Basic Networks Connecting a Public IP Network to the Internet Step 2Specify an encrypted password containing from 1 to 25 uppercase or lowercase alphanumeric characters. Spaces are valid password characters. Leading spaces are ignored but trailing spaces are recognized. For example: SanJose(config)# enable secret abra cadabra Step 3Configure the router to recognize the zero subnet range as a valid range of addresses: SanJose(config)# ip subnet-zero Step 4Disable the router from translating unfamiliar words entered during a console session into IP addresses: SanJose(config)# no ip domain-lookup Step 5Optional. Configure your router as a DHCP server. a.Define the DHCP relay pool name. For example: router(config)# ip dhcp pool DHCPpoolLAN_0 b.Set the DHCP pool of addresses. For example: router(dhcp-config)# network 10.0.0.0 255.255.255.0 c.Set the IP addresses of the DNS servers. For example: router(dhcp-config)# dns-server 192.168.1.100 d.Set the NetBIOS servers. For example: router(dhcp-config)# netbios-name-server 10.1.1.2 10.1.1.3 e.Set the Ethernet 0 IP address as the default gateway. For example: router(dhcp-config)# default-router 10.1.1.1 f.Exit to global configuration mode. router(dhcp-config)# exit Step 6Configure the LAN interface by performing the following steps: a.Specify parameters for the LAN interface: SanJose(config)# interface ethernet0
Chapter 2 Configuring Basic Networks Connecting a Public IP Network to the Internet 2-16 Cisco 800 Series Software Configuratio Guide 78-5372-06 b.Set an IP address and subnet mask for the LAN interface. For example, set the IP address and subnet mask to 10.1.1.1 and 255.0.0.0, respectively: SanJose(config-if)# ip address 10.1.1.1 255.0.0.0 Step 7Configure the WAN interface by performing the following steps: a.Change to global configuration mode: SanJose(config-if)# exit SanJose(config)# b.Specify parameters for the WAN interface: SanJose(config)# interface bri0 SanJose(config-if)# c.Enable PPP: SanJose(config-if)# encapsulation ppp d.Enable multilink PPP: SanJose(config-if)# ppp multilink e.Create a dialer rotary group, specifying a number between 0 and 255. Dialer rotary groups are useful in environments that require multiple calling destinations. For example: SanJose(config-if)# dialer rotary-group 0 f.North America only. Associate the ISDN local directory numbers (LDNs) provided by your telephone service provider to the first and second SPIDs. You can specify the SPID number or you can have it automatically detected by entering a 0. In the following example, the SPID number is represented by a 0 so that it will be automatically detected. The primary LDN is followed by the secondary LDN for each SPID. SanJose(config-if)# isdn spid1 0 4085551111 4085552222 SanJose(config-if)# isdn spid2 0 4085553333 4085554444 NoteFind out from your telephone service provider whether or not you need to specify an area code for the LDN.
2-17 Cisco 800 Series Software Configuratio Guide 78-5372-06 Chapter 2 Configuring Basic Networks Connecting a Public IP Network to the Internet g.North America only. If you had manually entered the SPID number, enable the BRI0 interface. SanJose(config-if)# no shutdown h.North America only. If you had specified the automatic detection of SPID numbers, enable the automatic detection of ISDN SPID numbers and switch type: SanJose(config-if)# isdn autodetect i.Outside of North America only. Specify the ISDN switch type. To see a listing of supported switches, enter the isdn switch-type ? command. The following example specifies the NET3 switch: SanJose(config-if)# isdn switch-type basic-net3 j.Disable Cisco Discovery Protocol (CDP). SanJose(config-if)# no cdp enable Step 8Follow these steps to specify characteristics of the dialer rotary group that you created earlier: a.Change to global configuration mode: SanJose(config-if)# exit SanJose(config)# b.Create a dialer rotary group leader and specify a number between 0 to 255 to represent your dialer rotary group. For example: SanJose(config)# interface dialer 0 c.Set the IP address and subnet mask for the WAN interface provided by the ISP. For example: SanJose(config-if)# ip address 192.168.1.2 255.255.255.0 d.Optional. If the ISP did not provide an IP address and subnet mask for the WAN interface, set up IPCP to obtain them from the router to which it is connecting: SanJose(config-if)# ip address negotiated e.Enable PPP: SanJose(config-if)# encapsulation ppp
Chapter 2 Configuring Basic Networks Connecting a Public IP Network to the Internet 2-18 Cisco 800 Series Software Configuratio Guide 78-5372-06 f.Enable DDR: SanJose(config-if)# dialer in-band g.Specify the amount of time (in seconds) that the line can be idle before it is disconnected. For example: SanJose(config-if)# dialer idle-timeout 300 h.Specify a telephone number of the interface to be called if you are calling a single site. Enter the number 1 plus the telephone number if it is a long distance call. For example: SanJose(config-if)# dialer string 14085553333 i.Set the number of packets to be held in the outgoing queue to 10. If an ISDN connection does not exist yet, the hold-queue holds up to 10 packets before dropping them. For example: SanJose(config-if)# dialer hold-queue 10 j.Define the load level that must be exceeded on the first ISDN B channel before the second B channel is brought up. The load-threshold variable represents a utilization percentage and is a number between 1 and 255, where 255 equals 100 percent. SanJose(config-if)# dialer load-threshold 10 outbound NoteEnter outbound to calculate the load using outbound data only, inbound to calculate the load using inbound data only, and either to set the maximum calculated load as the larger of the outbound and inbound loads. k.Assign this interface to dialer access group 1: SanJose(config-if)# dialer-group 1 l.Enable CHAP and configure the CHAP hostname and password. To configure PAP, skip this step, and go on to the next step. This command enables CHAP and specifies authentication on incoming calls only. Unidirectional authentication is used because non-Cisco routers that do not support bidirectional authentication are potentially in use at the ISP. In
2-19 Cisco 800 Series Software Configuratio Guide 78-5372-06 Chapter 2 Configuring Basic Networks Connecting a Public IP Network to the Internet these cases, when SanJose calls the ISP, SanJose does not authenticate. However, the ISP authenticates SanJose before allowing the connection. For example: SanJose(config-if)# ppp authentication chap callin SanJose(config-if)# ppp chap hostname SanJose SanJose(config-if)# ppp chap password gocisco1 m.Configure PAP. To configure CHAP, skip this step, and follow the previous step. SanJose(config-if)# ppp authentication pap callin This command enables PAP and specifies authentication on incoming calls only. Unidirectional authentication is used because non-Cisco routers that do not support bidirectional authentication are potentially in use at the ISP. In these cases, when the SanJose router calls the ISP, the SanJose router does not authenticate the ISP router. However, the ISP authenticates the SanJose router before allowing the connection. n.Enable remote PAP support for an interface. In the following example, the username and password (SanJose and gocisco1, respectively) are sent in the PAP authentication request packet. The password must contain from 1 to 25 uppercase and lowercase alphanumeric characters and cannot contain spaces or underscores. SanJose(config-if)# ppp pap sent-username SanJose password gocisco1 o.Enable multilink PPP: SanJose(config-if)# ppp multilink Step 9Follow these steps to configure how the IP routing protocol learns the routes: a.Change to global configuration mode: SanJose(config-if)# exit SanJose(config)# b.Configure all IP addresses to be treated as classless: SanJose(config)# ip classless
Chapter 2 Configuring Basic Networks Connecting a Public IP Network to the Internet 2-20 Cisco 800 Series Software Configuratio Guide 78-5372-06 c.Set up static routes by entering the destination network, destination subnet mask, and the next hop address. In the following example, the IP address of the ISP router ISDN interface is 192.168.1.1. Typically, the ISPs do not provide IP addresses and subnet masks of their networks, but they do provide the IP addresses of the ISDN interfaces to which your router connects. The following example specifies 0.0.0.0 and 0.0.0.0 as the IP address and subnet mask of the ISP network, because you would not know these addresses. SanJose(config)# ip route 0.0.0.0 0.0.0.0 dialer0 Step 10Specify that dialer-list 1 permits dialing by the IP routing protocol: SanJose(config)# dialer-list 1 protocol ip permit Step 11Perform this step only if ISDN calls at 64 kbps are not supported. Follow these steps to specify the characteristics of outgoing calls from an ISDN interface. The unique identifier for the class is 56k. a.Define a class of shared configuration parameters for outgoing calls from an ISDN interface: SanJose(config)# interface dialer 0 SanJose(config-if)# dialer string 5551212 class 56k SanJose(config-if)# exit SanJose(config)# map-class dialer 56k b.Specify 56 kbps as the B channel speed: SanJose(config-map-class)# dialer isdn speed 56 c.Change to global configuration mode: SanJose(config-map-class)# exit SanJose(config)# Step 12If you have a Cisco 800 series router that is connected to a telephone, fax machine, or modem, configure the telephone interfaces by performing the following steps: a.Specify the country where your router is located. For example: SanJose(config)# pots country us
2-21 Cisco 800 Series Software Configuratio Guide 78-5372-06 Chapter 2 Configuring Basic Networks Connecting a Public IP Network to the Internet This command determines the physical characteristics of the telephone interfaces. By specifying a country, you are configuring your telephone to use country-specific default settings for each of the physical characteristics. To get a list of supported countries and the code, enter the pots country ? command. b.Create dial peers to determine how incoming calls are routed to the telephone ports. In the following example, the dial-peer tag is 1, the ISDN local directory number (LDN) is 5551111, the telephone port is 1, and call waiting is disabled: SanJose(config)# dial-peer voice 1 pots SanJose(config-dial-peer)# destination-pattern 5551111 SanJose(config-dial-peer)# port 1 SanJose(config-dial-peer)# no call-waiting SanJose(config-dial-peer)# exit NoteEnter a number between 1 and 6 for the dial-peer tag variable. Find out from your telephone service provider whether or not you need to specify an area code for the LDN. c.Specify parameters for the WAN interface: SanJose(config)# interface bri0 d.Specify that incoming voice calls are forwarded to the devices connected to the telephone ports: SanJose(config-if)# isdn incoming-voice modem e.Change to user mode and save your configuration: SanJose(config-if)# end SanJose# copy running-config startup-config
Chapter 2 Configuring Basic Networks Connecting a Remote Office to a Corporate Office 2-22 Cisco 800 Series Software Configuratio Guide 78-5372-06 Connecting a Remote Office to a Corporate Office In the network example shown in Figure 2-3 and Ta b l e 2 - 3, the Cisco 800 series router and another router, such as a Cisco 3600 router, connect the networks of a remote office and a corporate office by using a dial-on-demand ISDN line. The routes between the two routers are static IP routes that you configure. Figure 2-3 Remote Office to Corporate Office Callout Number Description 1Site 1 2National ISDN-1 switch type, with B1 SPID 40855511110101 and B2 SPID 40855522220101 3IP network at Site 1 4File server on Site 1 network 5PPP link 6ISDN phone number, 4085551111 7Internet service provider 8CHAP or PAP 9Domain Name System (DNS) server 10.1.0.010.2.0.0 74931 1 267 94 5 38