|
|
Configure the IPeXchange Gateway Software
This chapter describes how to configure the Cisco Internetwork Operating System (Cisco IOS) software on the IPeXchange internet gateway hardware. This chapter contains the following sections:
The IPeXchange internet gateway normally boots the Cisco IOS software from Flash memory. The gateway can also boot the software from a TFTP server on your network.
The IPeXchange internet gateway normally boots the Cisco IOS software from Flash memory. The Cisco IOS software is already installed on the Flash memory card that is shipped with the gateway. The gateway can boot from the Cisco IOS software on the Flash memory card.
The IPeXchange internet gateway can also load the Cisco IOS software from a TFTP server if one is present on your local IPX network or on the network at the remote end of the WAN connection.
You can set up a TFTP server using TFTP software (not included) on most operating systems (including DOS, Macintosh, and UNIX). Refer to your TFTP software instructions for more information.
If a TFTP server is present on your network, install the Cisco IOS software in the appropriate directory (/tftpboot on UNIX systems).
Before loading the Cisco IOS software from a TFTP server, take the following steps to make sure the server is ready:
Preparing your TFTP server before attempting to boot the gateway will significantly reduce the time and effort required to begin using your IPeXchange gateway.
Each time you power on the IPeXchange gateway hardware by plugging in the power cord, the gateway executes the following boot sequence in an attempt to start the Cisco IOS software and execute the commands in a configuration file in order to configure the gateway:
ClickStart is a Cisco IOS software feature that allows you to configure the IPeXchange internet gateway software using a web browser, such as Netscape.
To use ClickStart to configure the gateway software, follow these steps:
The AutoInstall process configures the IPeXchange gateway router automatically if it is not already configured and if the router is connected to a WAN on which there is an existing preconfigured router. When you power on the IPeXchange gateway router, it downloads a configuration file from a TFTP server that is also connected to the WAN.
For the AutoInstall procedure to work, your system must meet the following requirements:
AutoInstall over Frame Relay and over other WAN encapsulations can download configuration files from UNIX-based and DOS-based TFTP servers. Other booting mechanisms such as RARP and SLARP also support UNIX-based and DOS-based TFTP servers.
The DOS name of the UNIX network-confg file on the server must be eight characters or less, with a three-letter extension. Therefore, when an attempt to load network-confg fails, AutoInstall automatically attempts to download cisconet.cfg from the TFTP server.
If cisconet.cfg exists and downloading succeeds, the server is assumed to be a DOS system. The AutoInstall program then attempts to resolve the host name for the router through host commands in cisconet.cfg.
If cisconet.cfg does not exist or cannot be downloaded, or AutoInstall cannot to resolve a host name, DNS attempts to resolve the host name. If DNS cannot resolve the host name, the router attempts to download ciscortr.cfg. If the host name is longer than eight characters, it is truncated to eight characters. For example, a router with a host name "australia" will be treated as "australi" and an attempt will be made to download australi.cfg.
The format of cisconet.cfg and ciscortr.cfg are to be the same as those described for network-confg and hostname-confg.
If neither network-confg nor cisconet.cfg exists and DNS is unable to resolve the host name, the program will attempt to load router-confg, and then ciscortr.cfg if router-confg does not exist or cannot be downloaded. The cycle is repeated three times.
The complete AutoInstall process is performed by two people. A system administrator at a regional or central site performs Step 1 through Step 6. A user at a remote site performs Step 7 through Step 9. For complete details about performing the AutoInstall process, see the Cisco IOS router products configuration guide.
To perform the AutoInstall process, follow these steps:
If your IPeXchange gateway cannot locate a configuration file as described in the section "Boot the IPeXchange Gateway"and you have not configured the gateway from a web browser using the Cisco IOS ClickStart feature, the gateway starts the setup command facility automatically. The setup command starts an interactive dialog on the console screen called the system configuration dialog. The dialog prompts you for the information necessary to configure the IPeXchange internet gateway.
This section gives a sample configuration using the system configuration dialog. When you are configuring your gateway, you should respond as appropriate for your network.
Many prompts in the system configuration dialog include default answers enclosed in square brackets following the question. To accept a default answer, press Return; otherwise, enter your response.
At any time during the system configuration dialog, you can request help by typing a question mark (?) at a prompt.
Before proceeding with the system configuration dialog, obtain the node addresses and the number of bits in the subnet field (if applicable) of the Ethernet and synchronous serial ports from your system administrator. For more information about IP addresses and subnets, refer to the Cisco IOS configuration guides.
To configure the IPeXchange gateway using the system configuration dialog, follow these steps:
The system configuration dialog then prompts you to configure the global parameters for the IPeXchange gateway:
Table 2-1 : ISDN Switch Types
The system configuration dialog then prompts you to configure the Ethernet interface in the IPeXchange gateway:
If your IPeXchange gateway has a serial interface, the system configuration dialog then prompts you to configure it:
If your IPeXchange gateway has an ISDN BRI interface, the system configuration dialog then prompts you to configure it:
When you have completed the configuration, the system configuration dialog displays the values you entered, and you are prompted to use the displayed configuration or change the configuration.
Enter yes to save the configuration in the configuration database and store it in NVRAM. Enter no to begin the configuration again and make the changes you want.
After you have completed the initial IPeXchange gateway software configuration, configure the Ethernet port on the gateway for IPX:
After you have completed the initial IPeXchange gateway software configuration on a Model 1003 or Model 1004, configure the BRI port for ISDN. This section explains typical ISDN configurations for a single B channel or two B channels. In the examples that follow, the BRI port is configured for IP routing, Challenge Handshake Authentication Protocol (CHAP), and point-to-point protocol (PPP) encapsulation.
Configure the router for a basic ISDN PPP connection on a single B channel or two B channels by following the steps below, substituting the correct addresses and host names in the appropriate locations:
You can enter multiple boot commands in the configuration in NVRAM to provide backup methods for loading the Cisco IOS software image onto the IPeXchange gateway. The gateway boots using the first boot command that succeeds. If you enter multiple boot commands, the gateway executes them in the order they are entered. There are two ways to load the Cisco IOS software image---from Flash memory or from a TFTP server on the network:
For more information about the configure terminal command, refer to the Cisco IOS command references.
To check the software version (third line from the top in the following display) and configuration register setting (at the end of the following display), enter the show version command:
To display the contents of the currently running configuration file, use the show running-config command. To display the contents of the configuration file currently stored in NVRAM, use the show startup-config command. Both commands should display output similar to this for an IPeXchange internet gateway Model 1003 or Model 1004:
To check the status of the IPeXchange gateway, use the following command:
To display the entries in the services files, which defines the mapping between services and their port numbers, use the following command:
For more information about IPeXchange gateway software configuration, refer to the following publications:
These publications are available on the Cisco Connection CD, Cisco's online library of product information. To order the Cisco Connection CD or paper documentation, refer to Ordering Cisco Documentation, which is included in the warranty pack that accompanied your IPeXchange gateway.
Copyright 1988-1996 © Cisco Systems Inc.
Boot the IPeXchange Gateway
Cisco IPeXchange autoconfiguration will begin in 90 seconds.
Press any key to abort.
To configure the gateway from a web browser using ClickStart, wait for approximately 2 to 5 minutes and continue with the procedure described in the section "Configure the Gateway Using ClickStart." During this time, we recommend that you power up and install the IPeXchange client software, as described in the chapter "Configure the IPeXchange Client Software."
To configure the gateway using the setup command facility, answer
yes
to the setup prompt and continue with the procedure described in the section "Configure the Gateway Using the System Configuration Dialog."
Configure the Gateway Using ClickStart
http://new-router.cisco.com
The router home page is located on the IPeXchange internet gateway.
Configure the Gateway Using the AutoInstall Process
AutoInstall Requirements
ip helper 171.69.2.75
frame-relay map ip 172.21.177.100 100 dlci
Using a DOS-Based TFTP Server
Perform the AutoInstall Process
ip host
new-router-name
new-router-address
The following is a sample entry:
ip host router1 60.0.0.2
If the new router does not receive the network-confg or the cisconet.cfg file, or if the IP address-to-host name mapping does not match the newly acquired IP address, the new router sends a DNS broadcast. If DNS is configured and has an entry that maps the new router's SLARP or BOOTP/RARP acquired IP address to its name, the new router resolves its name successfully.
enable-password boojum
!
line vty0
password boojum
!
end
Telnet into the existing router on the network.
Router> enable
Password: enable-password
Router# configure terminal
Router (config)# interface serial
interface#
Router (config)# ip address
existing-router-address
Router (config)# ip helperaddress
server-address
Router (config)# Ctrl-Z
Router# exit
Router>
Connect the synchronous serial DTE cable to the new router if you have not already done so.
Router> enable
Password: enable-password
Router# copy running-config startup-config
Building configuration...
[OK]
Router# exit
Router>
After the configuration file has been saved to NVRAM, the new router will load the configuration file from NVRAM whenever it is rebooted.
Configure the Gateway Using the System Configuration Dialog
System Bootstrap, Version X.X(17033) [enf 110], SOFTWARE
Copyright (c) 1994-1996 by Cisco Systems, Inc.
C1000 processor with 4096 Kbytes of main memory
program load complete, entry point: 0x18060, size: 0xd950c
Notice: NVRAM invalid, possibly due to write erase.
entry point: 0x2004000, size: 0x78c
Uncompressing file: ################################################################
################################################################
###################################################################
###################################################################
###################################################################
########################################################
program load complete, entry point: 0x2004000, size: 0x29466c
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco Internetwork Operating System (Cisco IOS [tm]) Software
1000 Software (C1005-H-M), Version 11.0(6) [enf 105]
Copyright (c) 1986-1996 by Cisco Systems, Inc.
Compiled Wed 06-Mar-96 13:13 by enf
Image text-base: 0x02004000, data-base: 0x0228CA48
Cisco 1000 (68360) processor (revision 0x00) with 3584K/512K bytes of memory.
Processor board serial number 01335546
Bridging software.
X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
1 Ethernet/IEEE 802.3 interface.
1 Serial network interface.
8K bytes of non-volatile configuration memory.
2048K bytes of processor board PCMCIA flash (Read/Write)
Notice: NVRAM invalid, possibly due to write erase.
Cisco IPeXchange autoconfiguration will begin in 90 seconds.
Press any key to abort.
--- System Configuration Dialog ---
At any point you may enter a question mark `?' for help.
Use ctrl-c to abort configuration dialog at any prompt.
Default settings are in square brackets `[]'.
Continue with configuration dialog? [yes]:
To begin the configuration process, press Return or enter yes.
First, would you like to see the current interface summary? [yes]: yes
Any interface listed with OK? value "NO" does not have a valid configuration
Interface IP-Address OK? Method Status Protocol
Ethernet0 unassigned NO not set up up
Serial0 unassigned NO not set down down
Configure Global Parameters
Configuring global parameters:
Enter host name [Router]: IPeX-gateway
Enter privileged-level passwords for the IPeXchange gateway. There are two types of privileged-level passwords:
The enable secret is a one-way cryptographic secret used
instead of the enable password when it exists.
Enter enable secret: mygate
The enable password is used when there is no enable secret
and when using older software and some boot images.
Enter enable password: boojum
Enter virtual terminal password: snark
IP is enabled by default on the IPeXchange gateway. Enable IPX.
Configure SNMP Network Management? [yes]: no
Configure IPX? [no] yes
If you have an ISDN IPeXchange gateway, enter the ISDN BRI switch type:
Enter ISDN BRI Switch Type [none]: basic-NI1
The ISDN switch type appropriate for your router depends on the ISDN provider's equipment. Table 2-1 lists the ISDN switch types.
ISDN Switch Type
Description
none
Switch type not defined
Australia
basic-ts013
Australian TS013 switches
Europe
basic-1tr6
German 1TR6 ISDN switches
basic-nwnet3
Norway NET3 ISDN switches (phase 1)
basic-net3
NET3 ISDN switches (UK and others)
vn2
French VN2 ISDN switches
vn3
French VN3 ISDN switches
Japan
ntt
Japanese NTT ISDN switches
North America
basic-5ess
AT&T basic rate switches
basic-dms100
NT DMS-100 basic rate switches
basic-ni1
National ISDN-1 switches
New Zealand
basic-nznet3
New Zealand NET3 switches
Configure the Ethernet Interface
Configuring interface parameters:
Configuring interface Ethernet0:
Is this interface in use? [yes]: yes
Configure IP and IPX on the Ethernet interface:
Configure IP on this interface? [yes]: yes
IP address for this interface [172.16.72.2]: 172.16.72.2
Number of bits in subnet field [8]: 8
Class B network is 172.16.0.0, 8 subnet bits; mask is /24
Configure IPX on this interface? [no]: yes
IPX network number [1]: 1
Configure the Serial Interface
Configuring interface Serial0:
Is this interface in use? [yes]: yes
Configure only IP on the serial interface:
Configure IP on this interface? [yes]: yes
IP address for this interface [172.16.72.2]: 172.16.72.2
Number of bits in subnet field [8]: 8
Class B network is 172.16.0.0, 8 subnet bits; mask is /24
Configure the BRI Interface
Configuring interface BRI0:
Is this interface in use? [yes]: yes
Configure IP on this interface? [yes]: yes
IP address for this interface [172.16.72.2]: 172.16.72.2
Number of bits in subnet field [8]: 8
Class B network is 172.16.0.0, 8 subnet bits; mask is /24
Save the Configuration
The following configuration command script was created:
hostname IPeX-gateway
enable secret 5 $1$7gA0$sLxUbQPZMKXe6oxU.le7M0
enable password boojum
line vty 0 4
password snark
snmp-server community public
!
ipx routing
ip routing
!
interface Ethernet0
ip address 172.16.20.11 255.255.255.0
!
!
interface Serial0
ip address 131.108.97.67 255.0.0.0
!
end
Use this configuration? [yes/no]: yes
####
Use the enabled mode `configure' command to modify this configuration.
You have now completed the initial configuration.
Configure Novell IPX
router> enable
password: enable-password
Start the configure terminal program. Then enter the host name and password the router will use for CHAP caller identification.
router# configure terminal
router (config)# username target-router password abc
router# ipx internal-network number
If your IPX network does not already have an internal network number, it is common to use the lower 4 bytes of the gateway's MAC address. You can find this address on the printed label attached to the outside of the gateway's shipping container.
router# ipx ip-gateway interface
interface is the interface name and number of the interface on the gateway that is connected to the Internet or other TCP/IP-based network.
router (config)# access-list 1001 deny ffffffff
router (config)# interface ethernet 0
router (config-if)# ipx input-sap-filter
1001
Optionally, you can add new TCP or UDP services to the services file on the IPeXchange gateway:
router (config-if)# ip services [tcp | udp] service-name port-number
The services files is similar to the /etc/services file commonly found on a UNIX workstation. This file defines the TCP or UDP services that the IPeXchange gateway provides and the port on which that service is provided. This file is required so that the IPeXchange gateway can respond to requests for services from clients on the TCP/IP network to which the gateway is connected. The services file on the IPeXchange gateway contains default mappings of well-known services to their port numbers.
Configure ISDN
router> enable
password: enable-password
Start the configure terminal program. Then enter the host name and password the router will use for CHAP caller identification.
router# configure terminal
router (config)# username target-router password abc
router (config)# isdn switch-type switch-type
Refer to the section "Configure the Gateway Using the System Configuration Dialog" earlier in this publication for a complete list of ISDN switch types.
router (config)# interface bri 0
router (config-if)# encapsulation ppp
router (config-if)# ppp authentication chap
router (config-if)# dialer map ip target-router-ip-address name target-router phone-number
router (config-if)# dialer-group group-number
router (config-if)# isdn spid1 spid_no phone-number
router (config-if)# isdn spid2 spid_no phone-number
To set up a second B channel for bandwidth-on-demand, set the ISDN load threshold using the load-threshold command. The load threshold determines the percentage of network loading at which the second ISDN B channel is triggered. The value ranges from 1 to 255 (100 percent).
router (config-if)# dialer load-threshold 128
In this example, a value of 128 has been chosen. This means that when the first B channel reaches 50 percent of its bandwidth capacity (128 equals 50 percent of 255), the second B channel will be activated to assist with the bandwidth load.
router (config-if)# access-list access-list-number permit ip source-router-ip-network
source-router-subnet-mask target-router-ip-network target-router-subnet-mask
router (config)# dialer-list group-number list access-list-number
router (config)# ip route target-router-ip-network subnet-mask target-BRI-port-ip-address
Enter the exit command to exit configuration mode.
Specify the Boot Method
Router> enable
Password: enable-password
Router# configure terminal
Router (config)# boot system flash filename
Router (config)# Ctrl-Z
Router# copy running-config startup-config
Building configuration ...
[OK]
Router# exit
Router>
Router> enable
Password: enable-password
Router# configure terminal
Router (config)# boot system tftp filename ip-address
Router (config)# Ctrl-Z
Router# copy running-config startup-config
Building configuration ...
[OK]
Router# exit
Router>
Check the Configuration Settings
Router> show version
Cisco Internetwork Operating System (Cisco IOS [tm]) Software
1000 Software (C1005-H-M), Version 11.0(6) [dcoli 105]
Copyright (c) 1986-1996 by Cisco Systems, Inc.
Compiled Wed 07-Jun-96 13:13 by dcoli
Image text-base: 0x02004000, data-base: 0x0228CA48
ROM: System Bootstrap, Version X.X(17033) [enf 110], SOFTWARE
ROM: 1000 Bootstrap Software (C1000-RBOOT-R), Version 10.3(6) [enf 101]
Router uptime is 12 minutes
System restarted by reload
System image file is "flash:dirt/tftpboot/dcoli/c1005-h5-m.103.Z", booted
via flash
Cisco 1000 (68360) processor (revision 0x00) with 3584K/512K bytes of
memory.
Processor board serial number 01335546
Bridging software.
X.25 software, Version 2.0, NET2, BFE and GOSIP compliant.
1 Ethernet/IEEE 802.3 interface.
1 Serial network interface.
8K bytes of non-volatile configuration memory.
2048K bytes of processor board PCMCIA flash (Read/Write)
Configuration register is 0x2102
version 11.0
no service pad
service udp-small-servers
service tcp-small-servers
!
hostname ipex-isdn-2
!
enable password ijuser1
!
username iprouter password 7 095E5B1918
username rupa password 7 06141A314D
ipx routing 0000.0c32.c6ec
ipx internal-network C32C6EC
isdn switch-type basic-5ess
!
interface Ethernet0
ip address 171.69.236.45 255.255.255.224
ipx input-sap-filter 1001
ipx network AB45EC20
!
interface BRI0
ip unnumbered Ethernet0
encapsulation ppp
isdn spid1 0192228300
dialer idle-timeout 600
dialer map ip 171.69.236.24 name iprouter broadcast 14089222830
dialer hold-queue 10
dialer-group 1
ppp authentication chap
!
ip host ipex-isdn-2 171.69.236.45
ip host ijs11 171.69.236.16
ip domain-name cisco.com
ip name-server 171.69.2.132
ip name-server 198.92.30.32
ip route 0.0.0.0 0.0.0.0 171.69.236.33
ip route 171.69.0.0 255.255.0.0 171.69.236.33
ip route 171.69.236.0 255.255.255.0 171.69.236.24
ip route 171.69.236.24 255.255.255.255 BRI0
access-list 1001 permit FFFFFFFF 840
access-list 1001 deny 0
!
dialer-list 1 protocol ip permit
!
line con 0
line vty 0 4
password no
login local
!
end
Check the Status of the IPeXchange Gateway
For More Information
![]()
![]()
![]()
![]()
![]()
![]()
![]()