user manual

Configuration Guide Page 3 of 55
9.0r1 VPN IPSEC site-to-site tunnel via pre-shared key..............................................31
9.0r2 VPN IPSEC site-to-site tunnel via pre-shared key..............................................32
9.1 VPN IPSEC site-to-site tunnel certification PKI......................................................33
9.1.1 Certification control / certificates / CRLS / CA identity.......................................35
9.3 VPN PPTP User termination.................................................................................36
9.4r1 GRE encapsulated in IPSEC site-to-site tunnel via pre-shared key ....................37
9.4r2 GRE encapsulated in IPSEC site-to-site tunnel via pre-shared key ....................38
9.5r1 GRE native site-to-site tunnel............................................................................39
9.5r2 GRE native site-to-site tunnel............................................................................40
10.1 DIFFSERV DSCP field addressing......................................................................41
11.1 Firewall configuration..........................................................................................42
12.1 Vlan configuration 802.1q tagged routing...........................................................43
Appendix
AppendixAppendix
Appendix:
::
:
Helpful commands for using the XSR platform:
System:
System:System:
System:
A1.1 show version - Software, Bootrom, RAM, Flash, System Uptime....................44
A1.2 ping & traceroute ...........................................................................................44
A1.3 show interface - IP address, speed, duplex, statistics, errors..........................45
A1.4 telnet to other routers.....................................................................................45
A1.5 flash:/ cflash:/- dir, rename, copy commands.................................................46
A1.6 verify the flash file checksum..........................................................................46
IP:
IP:IP:
IP:
B1.0 show ip route.................................................................................................47
B1.1 show ip arp....................................................................................................47
VPN:
VPN:VPN:
VPN:
C1.0 show tunnels .................................................................................................48
C1.1 show crypto isakmp sa..................................................................................48
C1.2 show crypto ipsec sa.....................................................................................48
C1.3 show crypto map...........................................................................................48
C1.4 show tunnels / GRE via IPSEC.......................................................................49
C1.5 show interface vpn / GRE via IPSEC..............................................................49
C1.6 show crypto ipsec sa / GRE via IPSEC...........................................................49
C1.7 show ip route / GRE via IPSEC ......................................................................49
DSL:
DSL:DSL:
DSL:
D1.1 show ip interface atm 1/0.1............................................................................50
D1.2 show controllers atm 1/0 ...............................................................................50
D1.3 show controllers atm 1/0.1 ............................................................................51
D1.4 show interface atm 1/0 ..................................................................................52
D1.5 show interface atm 1/0.1 ...............................................................................53
D1.6 show ppp interface atm 1/0.1........................................................................54