Enterasys-networks XSR-3020 Instrukcja Użytkownika Strona 75
- Strona / 110
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
VPN Sample Configuration with Network Extension Mode
XSR Getting Started Guide 3-31
Configure AAA authentication by assigning a virtual subnet to the DEFAULT AAA group,
associate it with DNS and WINs servers, and add two AAA users with passwords.
When a remote XSR tunnels into the local XSR, it will be assigned these DNS, WINS and PPTP
values and be assigned dynamically to the IP pool virtual_subnet. Be aware that users not added to
a specified group will automatically be assigned to the DEFAULT group and groups must be
created before users can be added to them. Remember to create the same users and passwords on
the remote XSRs.
XSR(ip-local-pool)#aaa group DEFAULT
XSR(aaa-group)#ip pool virtual_subnet
Configure DNS and WINS parameters:
XSR(aaa-group)#dns server primary 172.16.10.10
XSR(aaa-group)#dns server secondary 172.16.10.11
XSR(aaa-group)#wins server primary 172.16.10.10
XSR(aaa-group)#wins server secondary 172.16.10.11
Create user(s), specify an IP from virtual subnet, and assign a password:
XSR(config)#aaa user nem-test
XSR(config)#password welcome
XSR(config)#aaa user jeffb
XSR(config)#password welcome
Check to make sure the transforms and proposals were created properly:
Router#show crypto ipsec transform-set
Name PFS ESP ESP-AH AH IPCOMP
---- --- --- ------ -- ------
*ez-esp-3des-sha-pfs Modp768 3DES HMAC-SHA None None
*ez-esp-3des-sha-no-pfs Disabled 3DES HMAC-SHA None None
*ez-esp-3des-md5-pfs Modp768 3DES HMAC-MD5 None None
*ez-esp-3des-md5-no-pfs Disabled 3DES HMAC-MD5 None None
*ez-esp-aes-sha-pfs Modp768 AES HMAC-SHA None None
*ez-esp-aes-sha-no-pfs Disabled AES HMAC-SHA None None
*ez-esp-aes-md5-pfs Modp768 AES HMAC-MD5 None None
*ez-esp-aes-md5-no-pfs Disabled AES HMAC-MD5 None None
XSR#show crypto isakmp proposal
Name Authentication Encrypt Integrity Group Lifetime
---- -------------- ------- --------- ----- --------
*ez-ike-3des-sha-psk PreSharedKeys 3DES HMAC-SHA Modp1024 28800
*ez-ike-3des-md5-psk PreSharedKeys 3DES HMAC-MD5 Modp1024 28800
*ez-ike-3des-sha-rsa RSASignature 3DES HMAC-SHA Modp1024 28800
*ez-ike-3des-md5-rsa RSASignature 3DES HMAC-MD5 Modp1024 28800
Create the ISAKMP IKE global peer:
XSR(config)#crypto isakmp peer 0.0.0.0 0.0.0.0
XSR#config)#config-mode gateway
XSR(config)#exchange-mode aggressive
XSR(config)#proposal ez-ike-3des-sha-psk ez-ike-3des-md5-psk
Create the ACL for trusted subnet of the XSR and virtual subnet of XSR:
XSR(config)#access-list 101 permit ip any 10.11.11.0 0.0.0.255
XSR(config)#access-list 102 permit ip any 10.12.12.0 0.0.0.255
- X-Pedition 1
- Security Router 1
- Industry Canada Notices 5
- Class A ITE Notice 5
- Clase A. Aviso de ITE 5
- Klasse A ITE Anmerkung 5
- orcontact 6
- (Circuit Modules) 7
- (Circuit Breakers) 7
- VCCI Notice 8
- BSMI EMC Statement — Taiwan 8
- Declaration of Conformity 8
- Australian Telecom 9
- Contents 13
- Appendix A: Specifications 15
- About This Guide 17
- Getting Help 19
- Overview 21
- PSTN (for PPP) 22
- ETH2ETH1 23
- Operating System 24
- Industry-common CLI 24
- IP Protocol 24
- IP Routing 25
- SNMP and Statistics Gathering 25
- Security 26
- Frame Relay 26
- System Description 27
- XSR Getting Started Guide 1-7 27
- Quality of Service (QoS) 28
- Virtual Private Network (VPN) 28
- GRE over IPSec 29
- Dial Service 30
- Dial Backup 30
- Installation Overview 31
- 1-12 Overview 32
- Hardware Installation 33
- 2-2 Hardware Installation 34
- XSR Getting Started Guide 2-3 35
- 2-4 Hardware Installation 36
- XSR Getting Started Guide 2-5 37
- 2-6 Hardware Installation 38
- Connecting Cables 39
- SECURITY ROUTERS 40
- XSR Getting Started Guide 2-9 41
- Figure 2-16 42
- Figure 2-18, respectively 43
- Software Configuration 44
- Initializing XSR Software 46
- 3-2 Software Configuration 46
- XSR Getting Started Guide 3-3 47
- Setting the Clock 51
- Configuring the LAN Ports 52
- Configuring the WAN Ports 52
- BRI Leased Line 53
- BRI Leased Frame Relay 53
- BRI Switched Line 54
- Firewall Sample Configuration 56
- Setting Up RIP Routing 58
- Configure OSPF Routing 59
- 3-16 Software Configuration 60
- Viewing Your Configuration 61
- 3-18 Software Configuration 62
- Site regional router 64
- Configure Users and Passwords 66
- Configure LAN Interface 66
- Configure Quality of Service 66
- Apply QoS 68
- Configure More Access Lists 68
- Configure DHCP/BOOTP Relay 69
- Configure SNMP 70
- Set Up IKE Phase I Security 71
- Create a Transform Set 72
- Configure Crypto Maps 72
- 3-30 Software Configuration 74
- XSR Rebooting Characteristics 76
- Reboot Triggers 77
- Cause Boot Type 77
- 3-34 Software Configuration 78
- Bootrom Monitor Mode Commands 79
- 3-36 Software Configuration 80
- 3-38 Software Configuration 82
- 3-40 Software Configuration 84
- 3-42 Software Configuration 86
- Specifications 87
- Short-haul MTRJ 88
- Pin 1 Pin 5 90
- Pin 6 Pin 9 90
- Pins not shown are unused 96
- RX In TX Out 99
- G.703 Balun 99
- Model 460 MC 99
- Regulatory/Safety Compliance 101
- ALARM LOS 101
- ENABLE LOF 101
- Port 0 Activation LED 102
- Port 1 Activation LED 102
- Pin 8Pin 1 102
- Transmit Pair Termination 103
- Port 0 Port 1 103
- Port 1Port 0 103
- Receive Pair Termination 103
- NIM1 NIM2 107
- LED State Function 108
- Index-2 110
Powiązane produkty i podręczniki dla Sprzęt komputerowy Enterasys-networks XSR-3020
(276 strony)LG L2000CN-SF manuels
Manuels d'utilisation et guides de l'utilisateur pour Téléviseurs et moniteurs LG L2000CN-SF.
Nous fournissons des manuels en pdf 5 LG L2000CN-SF à télécharger gratuitement par type de document : Manuel de l'utilisateur
Komentarze do niniejszej Instrukcji