Specifications

VPN Site-to-Site Sample Configuration
XSR Getting Started Guide 3-49
XSR(config-if<D1>)#di pool 1
Sets the dial pool from which calls originate
XSR(config-if<D1>)#no shutdown
Enables the dial interface
Configure SNMP
The previously configured ACL will be applied to all SNMP requests. Stricter ACLs can be written
if tighter security controls are required.
XSR(config)#snmp-server community toMonitor1 ro 26
Adds an SNMP community with read-only privileges attached to ACL 26
XSR(config)#snmp-server community toConfigure1 rw 26
Adds another SNMP community with read-write privileges attached to ACL 26
XSR(config)#snmp-server enable traps
Enables traps to be transmitted
XSR(config)#snmp-server contact [e-mail]
Specifies contact information for the management server
XSR(config)#snmp-server location “HQ 2nd floor”
Specifies the location of the management server
XSR(config)#snmp-server host 192.168.2.101 traps trapCommunity
Specifies management station to send traps to
XSR(config)#snmp-server host 192.168.2.102 traps trapCommunity
Specifies another management station to send traps to
VPN Site-to-Site Sample Configuration
The following VPN topology, shown in Figure 3-5, configures a central site XSR to connect over
IPSec tunnels with a remote ANG-1105 and two XSRs.
Figure 3-5 VPN Site-to-Site Topology
The following script configures the VPN topology shown in Figure 3-5.
112.16.244.10
Gateway IP address
for all remote sites
112.16.1.221
Central Site
Branch Sites
XSR-1805
ANG-1105
XSR-1805
Firewall
112.16.244.9
112.16.244.7
112.16.244.5
112.16.72.2
112.16.80.2
XSR-1805
112.16.76.2