|
|
This chapter describes how to configure a Cisco 1700 router to dial into a central-site router over an Integrated Services Digital Network (ISDN) line and provides verification steps and troubleshooting tips.
This chapter contains the following sections:
The configurations in this chapter are based on the following assumptions:
Before you begin configuration, be aware of the following:
This configuration assumes that the Cisco 1700 router is dialing into a central-site router.
If you are using IP but not IPX on your network, do not enter the commands that include the ipx keyword.
These are the major tasks when configuring your router:
Figure 3-1 illustrates the example configuration used in this section.
Use this table to configure the router for some global parameters.
| Step | Task | Router Prompt | Command | ||
|---|---|---|---|---|---|
| Enter configuration mode. | Router# | |||
| Configure the router to show the date and time of all debug messages. This command is optional, but recommended if you use debug commands to troubleshoot your configuration. | Router | |||
| Configure the router to show the date and time of all log messages. This command is optional, but recommended if you use the verification steps described in this guide. This feature is enabled for all the example command output shown in this guide. | Router | |||
| Configure the type of central office switch used on the ISDN interface. Use the keyword that matches the ISDN switch type that you are using:
| Router | isdn switch-type basic-ni | ||
| (Optional) Enable IPX routing and configure the router with an IPX address. | Router | ipx routing 0060.834f.66dd |
Use this table to configure the router with some security measures.
| Step | Task | Router Prompt | Command | ||
|---|---|---|---|---|---|
| Specify a password to prevent unauthorized access to the router. | Router | enable password <1700user> | ||
| Configure the router with a host name, which is used in prompts and default configuration file names. For PPP authentication, the host name entered with this command must match the username of the central-site router. | Router | hostname 1700 | ||
| Specify the password used during caller identification and CHAP and PAP authentication. For CHAP and PAP authentication, the username entered with this command must match the host name of the central-site router. | | username HQ password <guessme> |
Use this table to configure the Fast Ethernet interface, which connects your router to the local network.
| Step | Task | Router Prompt | Command | ||
| Enter configuration mode for the Fast Ethernet interface. | | |||
| Configure this interface with an IP address and a subnet mask. | | ip address 172.16.25.42 255.255.255.224 | ||
| (Optional) Enable IPX routing on this interface and assign the interface with an IPX network address. | | ipx network ABC | ||
| Enable the interface and the configuration changes you have just made on the interface. | | |||
| Exit configuration mode for this interface. | |
You can verify your configuration by checking that the Fast Ethernet interface has the correct IP address:
Step 1 From the privileged EXEC command mode, enter the show arp command:
Step 2 You should see command output similar to the following:
Step 3 The IP address (shown in bold in the example) should be your router Fast Ethernet IP address. If it is not, then re-enter the IP address with ip address interface command.
Step 4 To continue configuration, re-enter global configuration mode.
Use this table to configure the ISDN interface, which connects the router to the central-site router over the wide-area network.
| Step | Task | Router Prompt | Command | ||
| Enter configuration mode for the ISDN interface. | | |||
| Add a description of this interface to help you remember what is attached to it. | | description ISDN connectivity | ||
| Enter the service profile identifier (SPID) number assigned by the ISDN service provider to the B1 channel. This step is required only when the service provider has assigned a SPID to your ISDN line. Not all ISDN lines have SPIDs. | | isdn spid1 555987601 | ||
| Define the SPID number assigned by the ISDN service provider to the B2 channel. This step is required only when the service provider has assigned a SPID to your ISDN line. Not all ISDN lines have SPIDs. | | isdn spid2 555987602 | ||
| Enable IP routing on this interface without assigning an IP address. | | |||
| Configure this interface to place a call to multiple sites and to authenticate calls from multiple sites based on IP address and dialer string (phone number). The name you enter after the name keyword in this command must match the name entered with the username command in the previous "Configuring Security" section. | | dialer map ip 192.168.37.40 name HQ 5552053 | ||
| (Optional) Enable IPX routing on this interface and assign an IPX network address to the interface. | | ipx network 123 | ||
| (Optional) Disable IPX fast switching on this interface. | | |||
| (Optional) Set the router to respond to local server watchdog packets on behalf of a remote client (called spoofing). | | ipx watchdog-spoof | ||
| (Optional) Configure this interface to call multiple sites based on IPX address and dialer string (phone number). | | dialer map ipx 123.0000.0003.eccb name HQ broadcast 5552053 | ||
| Configure bandwidth on demand by setting the maximum load before the router places another call to a destination. | | |||
| Assign the dialer interface to a dialer group. | | |||
| Disable weighted fair queueing on this interface. | | no fair-queue | ||
| Configure this interface for PPP encapsulation. | | |||
| Enable CHAP and PAP authentication on this interface. CHAP authentication is attempted first. If the central-site router does not support CHAP, PAP is used for authentication. | | |||
| Enable multilink PPP on this interface. | | |||
| Enable the interface and the configuration changes you have just made on the interface. | | |||
| Exit configuration mode for this interface. | |
You can verify your configuration to this point by confirming the ISDN line status:
Step 1 From the privileged EXEC command mode, enter the show isdn status command.
Step 2 You should see command output similar to the following:
Step 3 Confirm that the current ISDN switch type (shown in bold in the example) matches the actual switch type that you are using.
Step 4 Confirm that the "Layer 1 status: ACTIVE" message (shown in bold in the example) appears in the command output.
Step 5 Confirm that the "State = MULTIPLE_FRAME_ESTABLISHED" message (shown in bold in the example) appears in the command output.
Step 6 To continue configuration, re-enter global configuration mode.
If you are having problems, do the following:
Use this table to configure some parameters that control how and when the router dials the central-site router.
| Step | Task | Router Prompt | Command | ||
| Establish a static IP route to the remote network. | | ip route 0.0.0.0 0.0.0.0 192.168.37.40 | ||
| Establish a static IP route to the central-site router through this interface. | | ip route 192.168.37.40 255.255.255.255 BRI0 | ||
| Define a standard access list based on Internet Control Message Protocol (ICMP) traffic. | | access-list 101 permit icmp any any | ||
| Define a standard access list based on IP traffic. | | access-list 101 permit ip any any | ||
| Specify an dialer list by list number and protocol (IP) to define the "interesting" packets that can trigger a call to the destination. | | dialer-list 1 protocol ip list 101 | ||
| (Optional) Define a standard access list based on IPX network variables. | | access-list 900 deny any any all any 457 | ||
| (Optional) Define a standard access list based on IPX network variables. | | access-list 900 deny rip any rip any rip | ||
| (Optional) Define a standard access list based on IPX network variables. | | access-list deny sap and sap any sap | ||
| (Optional) Define a standard access list based on IPX network variables. | | access-list 900 permit any any all any all | ||
| (Optional) Specify and access list by list number and protocol (IPX) to define the packets that will trigger the router to make a call to the destination. | | dialer-list 1 protocol ipx list 900 |
You can verify your configuration to this point by:
You can verify your configuration by confirming the static IP route:
Step 1 From the privileged EXEC command mode, enter the show ip route command.
Substitute the IP address of the central-site router ISDN interface for the IP address shown in the example.
Step 2 Confirm that the "directly connected via BRI" message (shown in bold in the example) appears in the command output:
Step 3 To continue configuration, re-enter global configuration mode.
Step 1 From the privileged EXEC command mode, enter the show ipx route command:
Step 2 Confirm that the IPX network number (shown in bold in the example) matches the IPX network number that you configured with the ipx network command when you configured the Fast Ethernet interface.
Step 3 To continue configuration, re-enter global configuration mode.
You can verify your configuration by confirming connectivity to the central-site router:
Step 1 From the privileged EXEC command mode, enter the ping command followed by the IP address of the central-site router:
Step 2 Note the percentage in the "Success rate..." line (shown in bold in the example). If the success rate is 60 percent (3/5) or greater, your router is successfully transferring data to the central-site router.
Step 3 To continue configuration, re-enter global configuration mode.
Perform the two verification procedures in this section to verify that multilink PPP is configured on the ISDN B1 channel.
Take the following steps to perform the first verification step:
Step 1 From the privileged EXEC mode, confirm that the ISDN is connected to the remote site by entering the ping command followed by the IP address of the central-site router:
Step 2 Enter the show ppp multilink command.
Step 3 Confirm that the "Master link is Virtual-Access1" message (shown in bold in the example) appears in the command output.
Step 4 If you do not see the message in the output, take one or both of the following steps:
Step 5 To continue configuration, re-enter global configuration mode.
Take the following steps to perform the second verification step:
Step 1 From the privileged EXEC command mode, confirm that the ISDN line is connected to the remote site by entering the ping command followed by the IP address of the central-site router:
Step 2 Enter the show interface virtual-access 1 command.
Step 3 Confirm that the "Open: IPCP" message (shown in bold in the example) appears in the command output:
Step 4 To continue configuration, re-enter global configuration mode.
Step 1 From the privileged EXEC command mode, confirm that the ISDN line is connected to the remote site by entering the ping command followed by the IP address of the central-site router:
Step 2 Create enough network traffic so that the second ISDN B channel dials the remote site.
Step 3 Check the LEDs labeled B1 and B2.
If both LEDs are lit solid, multilink PPP is correctly configured for both ISDN B channels.
Step 4 To continue configuration, re-enter global configuration mode.
If you are having problems, do the following:
Use this table to configure some parameters that control access to the router.
| Step | Task | Router Prompt | Command | ||
| Specify the console terminal line. | | |||
| Set the interval that the EXEC command interpreter waits until user input is detected. | | |||
| Specify a virtual terminal for remote console access. | | line vty 0 4 | ||
| Specify a password on the line. | | password <lineaccess> | ||
| Enable password checking at terminal session login. | | |||
| Exit configuration mode. | |
If you are having problems or the output that you received during the verification steps is very different from what is shown, you can troubleshoot your router with the Cisco IOS debug commands. The debug commands provide extensive command output that is not included in this document.
 | Caution If you are not familiar with Cisco IOS debug commands, you should read the "Using Debug Commands" section in the "Cisco IOS Basic Skills" chapter before attempting any debugging. |
Figure 3-2 illustrates the example configuration used in this section.
These are the major tasks when configuring your router:
Use this table to configure the router for some global parameters.
| Step | Task | Router Prompt | Command | ||
|---|---|---|---|---|---|
| Enter configuration mode. | | configure terminal | ||
| Configure the router to show the date and time of all debug messages. This command is optional, but recommended if you use debug commands to troubleshoot your configuration. | | service timestamps debug datetime msec | ||
| Configure the router to show the date and time of all log messages. This command is optional, but recommended if you use the verification steps described in this guide. This feature is enabled for all the example command output shown in this guide. | | service timestamps log datetime msec | ||
| Configure the type of central office switch being used on the ISDN interface. Use the keyword that matches the ISDN switch type that you are using:
| | isdn switch-type basic-ni |
You can verify your configuration to this point by checking the ISDN line status as follows:
Step 1 From the privileged EXEC command mode, enter the show isdn status command.
Step 2 You should see command output similar to the following:
Step 3 Confirm that the current ISDN switch type (shown in bold in the example) matches the actual switch type that you are using.
Step 4 Confirm that the following messages (shown
Step 5 Confirm that the "Layer 1 status: ACTIVE" message (shown in bold in the example) appears in the command output.
Step 6 Confirm that the "State = MULTIPLE_FRAME_ESTABLISHED" message (shown in bold in the example) appears in the command output.
Step 7 To continue configuration, re-enter global configuration mode.
If you are having problems, do the following:
Use this table to configure the router with security measures.
| Step | Task | Router Prompt | Command | ||
|---|---|---|---|---|---|
| Configure the router with a host name, which is used in prompts and default configuration file names. For PPP authentication, the hostname entered with this command must match the username of the central-site router. | | hostname 1700 | ||
| Specify a password to prevent unauthorized access to the router. | | enable password <1700user> | ||
| Specify the password that will be used during CHAP caller identification and PAP. For PPP authentication, the username entered with this command must match the hostname of the central-site router. | | username HQ password <guessme> |
| Step | Task | Router Prompt | Command | ||
|---|---|---|---|---|---|
| Enter configuration mode for the Fast Ethernet interface. | | interface fastethernet0 | ||
| Configure this interface with an IP address and a subnet mask. | | ip address 172.16.25.42 255.255.255.224 | ||
| Enable IPX routing on this interface. | | ipx network ABC | ||
| Enable the interface and the configuration changes you have just made on the interface. | | no shutdown | ||
| Exit configuration mode for this interface. | | exit |
Use this table to configure the ISDN interface, which connects the router to the central-site router over the wide-area network.
| Step | Task | Router Prompt | Command | ||
| Enter configuration mode for the ISDN interface. | | interface BRI0 | ||
| Add a description of the ISDN interface to help you remember what is attached to it. | | description ISDN connectivity | ||
| Enter the service profile identifier (SPID) number that has been assigned by the ISDN service provider for the B1 channel. This step is required only when the service provider has assigned a SPID to your ISDN line. Not all ISDN lines required SPIDs. | | isdn spid1 555987601 | ||
| Define the SPID number that has been assigned by the ISDN service provider for the B2 channel. This step is required only when the service provider has assigned a SPID to your ISDN line. Not all ISDN lines required SPIDs. | | isdn spid2 555987602 | ||
| Disable IP routing on this interface. | | no ip address | ||
| Put this interface in a dialing pool. As an option, you can also assign a priority to the interface with this command. | | dialer pool-member 1 | ||
| Set the encapsulation method on this interface to PPP. | | encapsulation ppp | ||
| Enable CHAP and PAP authentication on this interface. CHAP authentication is attempted first. If the central-site router does not support CHAP, PAP is used for authentication.
| | ppp authentication chap pap | ||
| Enable multilink PPP on this interface. | | ppp multilink | ||
| Enable the interface and the configuration changes you have just made on the interface. | | no shutdown | ||
| Exit configuration mode for this interface. | | exit |
Use this table to create a dialer interface and configure it for Dial-on-Demand Routing (DDR).
| Step | Task | Router Prompt | Command | ||
| Create a dialer interface. | | interface Dialer10 | ||
| Enable IP routing on this interface without assigning an IP address. | | ip unnumbered fastethernet0 | ||
| Enable IPX routing on this interface. | | ipx network 123 | ||
| Disable IPX fast switching on this interface. | | no ipx route-cache | ||
| Set the router to respond to a local server watchdog packets on behalf of a remote client (called spoofing). | | ipx watchdog-spoof | ||
| Specify the central-site router CHAP authentication name. | | dialer remote-name HQ | ||
| Specify the string (telephone number) to be called for this interface when calling a single site. | | dialer string 5552053 | ||
| Put this interface in a dialing pool. As an option, you can also assign a priority to the interface with this command. | | dialer pool 1 | ||
| Assign the dialer interface to a dialer group. | | dialer-group 1 | ||
| Set the encapsulation method on this interface to PPP. | | encapsulation ppp | ||
| Enable CHAP and PAP authentication on this interface. CHAP authentication is attempted first. If the central-site router does not support CHAP, PAP is used for authentication. | | ppp authentication chap pap | ||
| Enable multilink PPP on this interface. | | ppp multilink | ||
| Enable the interface and the configuration changes you have just made on the interface. | | no shutdown | ||
| Exit configuration mode for this interface. | | exit |
You can verify your configuration to this point by:
Step 1 Confirm that the ISDN is up and connected to the central-site router.
Step 2 From the privileged EXEC command mode, enter the show ppp multilink command.
Step 3 Confirm that the "Master link is Virtual-Access1" message (shown in bold in the example) appears in the command output.
Step 4 To continue configuration, re-enter global configuration mode.
Step 1 Confirm that the ISDN is up and connected to the central-site router.
Step 2 From the privileged EXEC command mode, enter the show interface command.
Step 3 Confirm that the "LCP Open, multilink Open" message (shown in bold in the example) appears in the command output:
Step 4 To continue configuration, re-enter global configuration mode.
Use this table to configure some parameters that control how and when the router dials the central-site router, such as access lists and dialer lists.
| Step | Task | Router Prompt | Command | ||
| Establish a static IP route to the remote network. | | ip route 192.168.37.0 255.255.255.0 192.168.37.40 | ||
| Establish a static IP route to the remote network through the router BRI interface. | | ip route 192.168.37.40 255.255.255.255 BRI0 | ||
| Define a standard access list based on your network. | | access-list 101 permit icmp any any | ||
| Define a standard access list based on your network. | | access-list 101 deny ip any any | ||
| Define a standard access list based on your network. | | access-list 900 deny any any all any 457 | ||
| Define a standard access list based on your network. | | access-list 900 deny rip any rip any rip | ||
| Define a standard access list based on your network. | | access-list 900 deny sap any sap any sap | ||
| Define a standard access list based on your network. | | access-list 900 permit any any all any all | ||
| Specify an access list by list number and protocol (IP) to define the "interesting" packets that can trigger a call to the destination. | | dialer-list 1 protocol ip list 101 | ||
| Specify an access list by list number and protocol (IPX) to define the "interesting" packets that can trigger a call to the destination. | | dialer-list 1 protocol ipx list 900 |
You can verify your configuration to this point by:
You can verify your configuration to this point by checking the static IP route as follows:
Step 1 From the privileged EXEC command mode, enter the show ip route command.
Substitute the IP address of the central-site router ISDN interface for the IP address shown in the example.
Step 2 Confirm that the "directly connected via BRI" message (shown in bold in the following example) appears in the command output:
Step 3 To continue configuration, re-enter global configuration mode.
You can verify your configuration to this point by testing connectivity to the central-site router, as follows:
Step 1 From the privileged EXEC command mode, enter the ping command followed by the IP address of the central-site route to have the router dial the central-site router.
Step 2 Wait for the "ISDN-6-CONNECT" message (shown in bold in the example):
Step 3 Enter the ping command followed by the IP address of the central-site router again:
Step 4 If the success rate (shown in bold in the example) is 100 percent, this verification step is successful. If the success
Step 5 To continue configuration, re-enter global configuration mode.
If you are having problems, do the following:
Use this table to configure some parameters that control access to the router, such as what type of terminal line can be used with the router, how long the user has to input a command before the router times out, and the password used to start a terminal session with the router.
| Step | Task | Router Prompt | Command | ||
| Specify the console terminal line. | | line console 0 | ||
| Set the interval that the EXEC command interpreter waits until user input is detected. | | exec-timeout 5 | ||
| Specify a virtual terminal for remote console access | | line vty 0 4 | ||
| Specify a password on the line. | | password <lineaccess> | ||
| Enable password checking at terminal session login. | | login | ||
| Exit configuration mode. | | end |
If you are having problems, or the output that you received during the verification steps is very different than what is shown, you can troubleshoot your router with the Cisco IOS debug commands. The debug commands provide extensive command output that is not included in this document.
| Caution If you are not familiar with Cisco IOS debug commands, you should read the "Using Debug Commands" section in the "Cisco IOS Basic Skills" chapter before attempting any debugging. |
Following are debug commands that are helpful when troubleshooting dialer profiles with ISDN. Most of these commands require that you follow with the ping command to begin debug output:
In addition to the assumptions described in the "Before You Begin" section at the beginning of this chapter, this configuration is based on the additional assumption that both ISDN B channels are connecting to the same central-site router.
These are major tasks when configuring your router for a leased line ISDN connection:
Figure 3-3 illustrates the example configuration that is used in this section.
Use this table to configure the router for some global parameters, such as the ISDN switch type that the router is connected to through the ISDN line, and how log and debug messages are timestamped.
| Step | Task | Router Prompt | Command | ||
|---|---|---|---|---|---|
| Enter configuration mode. | Router# | |||
| Configure the router to show the date and time of all debug messages. This command is optional, but recommended if you use debug commands to troubleshoot your configuration. | Router | |||
| Configure the router to show the date and time of all log messages. This command is optional, but recommended if you use the verification steps described in this guide. This feature is enabled for all the example command output shown in this guide. | Router | |||
| Configure the type of central office switch being used on the ISDN interface. Use the keyword that matches the ISDN switch type that you are using:
| Router | isdn switch-type basic-ni |
Use this table to configure the router with some security measures.
| Step | Task | Router Prompt | Command | ||
|---|---|---|---|---|---|
| Specify a password to prevent unauthorized access to the router. | Router | enable password <1700user> | ||
| Configure the router with a host name, which is used in prompts and default configuration file names. For PPP authentication, the host name entered with this command must match the username of the central-site router. | Router | hostname 1700 | ||
| Specify the password used during caller identification and CHAP and PAP authentication. For CHAP and PAP authentication, the username entered with this command must match the host name of the central-site router. | | username HQ password <guessme> |
Use this table to enable IPX routing on the router. The default setting for the router is IPX routing disabled.
| Step | Task | Router Prompt | Command | ||
| Enable IPX routing and configure the router with an IPX address. | | ipx routing 0060.834f.66dd |
Use this table to set up the ISDN line for a leased line configuration.
| Step | Task | Router Prompt | Command | ||
| Define a virtual template from which this multilink PPP bundle interface can replicate its interface parameters. | | |||
| Configure the BRI interface to use the ISDN physical connection as a leased line service. If you want to combine both B channels into a single data pipe, enter the 128 keyword with this command. | |
Use this table to configure the Fast Ethernet interface, which connects your router to the local network.
| Step | Task | Router Prompt | Command | ||
|---|---|---|---|---|---|
| Enter configuration mode for the Fast Ethernet interface. | | |||
| Configure this interface with an IP address and a subnet mask. | | ip address 192.168.38.42 255.255.255.0 | ||
| Configure this interface with an IPX network address. | | ipx network ABC | ||
| Associate the virtual template with this interface. | | |||
| Configure the virtual template interface with an IP address and a subnet mask. | | ip address 192.168.40.40 255.255.255.0 | ||
| Configure the virtual template interface with an IPX network address. | | ipx network 123 | ||
| Set the encapsulation method on this interface to PPP. | | |||
| Enable multilink PPP on this interface. | | |||
| Enable the interface and the configuration changes you have just made on the interface. | | |||
| Exit configuration mode for this interface. | |
Use this table to clear the IP address from the ISDN interface.
| Step | Task | Router Prompt | Command | ||
| Enter configuration mode for the BRI interface. | | |||
| Disable IP routing on the BRI0 interface. | | |||
| Exit configuration mode for this interface. | |
Use this table to create and configure two ISDN subinterfaces, which connect your router to the central-site router over the wide-area network.
| Step | Task | Router Prompt | Command | ||
| Enter configuration mode for the BRI0:1 subinterface | | |||
| Enable IP routing on this interface without assigning an IP address. | | |||
| Set the encapsulation method on this interface to PPP. | | |||
| Enable multilink PPP on this interface. | | |||
| Enter configuration mode for the BRI0:2 subinterface. | | |||
| Enable IP routing on this interface without assigning an IP address. | | |||
| Set the encapsulation method on this interface to PPP. | | |||
| Enable multilink PPP on this interface. | | |||
| Exit configuration mode for this interface. | 1700(config-if) |
Use this table to configure the router for dynamic IP routing.
| Step | Task | Router Prompt | Command | ||
| Configure the router to forward packets addressed to a subnet of a network with no network default route. | | |||
| Specify dynamic routing. | | ip route 0.0.0.0 0.0.0.0 192.168.40.41 |
You can verify your configuration by confirming connectivity to the central-site router.
Step 1 From the privileged EXEC command mode, enter the ping command followed by the IP address of the central-site route to have the router dial the central-site router.
Step 2 Wait for the "ISDN-6-CONNECT" message (shown in bold in the example):
Step 3 Enter the ping command followed by the IP address of the central-site router again:
Step 4 If the success rate (shown in bold in the example) is 100 percent, this verification step is successful. If the success
Step 5 To continue configuration, re-enter global configuration mode.
Step 6 If the router is not successfully transferring data to the central-site router (if the success rate is less than 60 percent), take the following steps:
Step 7 To continue configuration, re-enter global configuration mode.
Use this table to configure some parameters that control access to the router, such as the type of terminal line used with the router, how long the router waits for a user entry before it times out, and the password used to start a terminal session with the router.
| Step | Task | Router Prompt | Command | ||
| Specify the console terminal line. | | line console 0 | ||
| Set the interval that the EXEC command interpreter waits until user input is detected. | | |||
| Specify a virtual terminal for remote console access. | | line vty 0 4 | ||
| Specify a password on the line. | | password <lineaccess> | ||
| Enable password checking at terminal session login. | | |||
| Exit configuration mode. | |
| Caution If you are not familiar with Cisco IOS debug commands, you should read the "Using Debug Commands" section in the "Cisco IOS Basic Skills" chapter before attempting any debugging. |
Following are the debug commands that are helpful when troubleshooting an ISDN leased line. Follow these commands with the ping command to begin debug output.
These are the major tasks when configuring your router for dial-in ISDN connections:
Figure 3-4 illustrates the example configuration used in this chapter.
Use this table to configure some global router parameters.
| Step | Task | Prompt | Command | ||
|---|---|---|---|---|---|
| Enter configuration mode. | Router# | configure terminal | ||
| Configure the router to show the date and time of all debug messages. This command is optional, but recommended in the event that you use debug commands to troubleshoot your configuration. | | service timestamps debug datetime msec | ||
| Configure the router to show the date and time of all log messages. This command is optional, but recommended in the event that you use the verification steps described in this guide. This feature is enabled for all the example command output shown in this guide. | | service timestamps log datetime msec | ||
| Configure the type of central office switch being used on the ISDN interface. Use the keyword that matches the ISDN switch type that you are using:
| | isdn switch-type basic-ni |
Use this table to configure some security measures.
| Step | Task | Prompt | Command | ||
| Specify a password to prevent unauthorized access to the router. | Router | enable password <1700user> | ||
| Configure the router with a host name, which is used in prompts and default configuration file names. For PPP authentication, the host name entered with this command must match the username of the central-site router. | Router | hostname 1700 | ||
| Specify the password used during caller identification and CHAP and PAP authentication. For CHAP and PAP authentication, the hostname of every remote router that dials into the Cisco 1700 router must be entered with this command, along with the password used to authenticate that router. | | username jason password <foot> |
Use this table to configure the Fast Ethernet interface, which connects your router to the local network.
| Step | Task | Prompt | Command | ||
|---|---|---|---|---|---|
| Enter configuration mode for this interface. | | interface fastethernet0 | ||
| Configure this interface with an IP address and a subnet mask. | | ip address 171.68.15.33 255.255.255.248 | ||
| Enable this interface and the configuration changes that you have just made. | | no shutdown | ||
| Exit configuration mode for this interface. | - | exit |
Use this table to configure the two ISDN interfaces that accept calls from remote routers.
| Step | Task | Prompt | Command | ||
|---|---|---|---|---|---|
| Enter configuration mode for the first ISDN interface. | | interface BRI0 | ||
| Remove any IP addresses that might be assigned to this interface. | | no ip address | ||
| Configure the interface for PPP packet encapsulation. | | |||
| Configure this interface to be included in the dialer rotary group that you will configure in the following task table. | | dialer rotary-group 100 | ||
| Disable weighted fair queueing on this interface. | | no fair queue | ||
| Enable this interface and the configuration changes you have just made. | | no shutdown | ||
| Exit configuration mode for this interface. | | exit | ||
| Enter configuration mode for the second ISDN interface. | | interface BRI1 | ||
| Remove any IP addresses that might be assigned to this interface. | | no ip address | ||
| Configure the interface for PPP packet encapsulation. | | |||
| Configure this interface to be included in the dialer rotary group that you will configure in the following task table. | | dialer rotary-group 100 | ||
| Disable weighted fair queueing on this interface. | | no fair queue | ||
| Enable this interface and the configuration changes you have just made. | | no shutdown | ||
| Exit configuration mode for this interface. | | exit |
| Step | Task | Prompt | Command | ||
|---|---|---|---|---|---|
| Create a dialer rotary group interface and enter configuration mode for that interface. The number (in this example, 100) is an integer that you select to identify the interface. | | interface dialer100 | ||
| Configure this interface with an IP address. | | ip address 172.16.12.4 255.255.255.240 | ||
| Configure this interface for PPP encapsulation. | | encapsulation ppp | ||
| Specify that dial-on-demand routing (DDR) is supported on this interface. | | |||
| Configure the ISDN line to go down after a specified number of seconds with no network traffic. | | dialer idle-timeout 300 | ||
| Configure this interface to receive and authenticate calls from multiple sites based on IP address and dialer string. You must enter this command for ever remote router that will dial into your router. The name you enter after the name keyword in this command must match the name entered with the username command in the previous "Configure Security" section. | |
| ||
| Configure bandwidth on demand by setting the maximum load before the router places another call to a destination. | | |||
| Assign the dialer interface to a dialer group. | | |||
| Disable weighted fair queueing on this interface. | | no fair-queue | ||
| Enable multilink PPP on this interface. | | |||
| Enable CHAP or PAP authentication on this interface. | | |||
| Enable the dialer interface and the configuration changes that you have just made. | | no shutdown | ||
| Exit configuration mode for this interface. | | exit |
| Step | Task | Router Prompt | Command | ||
| Configure the IP EIGRP routing process and enter router configuration mode. | | router eigrp 109 | ||
| Specify a list of networks for the EIGRP routing process by entering the IP address of the directly connected network. | | network 171.68.0.0 | ||
| Configure the router to distribute IP static routers from one routing domain to another. | | redistribute static | ||
| Exit router configuration mode. | | exit |
| Step | Task | Router Prompt | Command | ||
| Configure an IP static route used to route data received from remote routers. | | ip route 171.68.0.0 255.255.255.240 171.68.12.1 | ||
| Define a standard access list based on IP network variables. | | access-list 101 deny ip any host 255.255.255.255 | ||
| Define a standard access list based on IP network variables. | | access-list 101 permit ip any any | ||
| Specify a dialer list by list number and protocol (IP) to define the "interesting" packets that can trigger a call to the destination. | | dialer-list 1 list 101 |
Use this table to configure some parameters that control access to the router, such as the type of terminal line used with the router, how long the router waits for a user entry before it times out, and the password used to start a terminal session with the router.
| Step | Task | Router Prompt | Command | ||
| Specify the console terminal line. | | line console 0 | ||
| Set the interval that the EXEC command interpreter waits until user input is detected. | | |||
| Specify a virtual terminal for remote console access. | | line vty 0 4 | ||
| Specify a password on the line. | | password <lineaccess> | ||
| Enable password checking at terminal session login. | | |||
| Exit configuration mode. | |
|
|
