Home » Cisco Manuals » Networking » Cisco AS5300 » Manual Viewer

Cisco AS5300 Software Configuration Guide - Page 97

Saving Configuration Changes, Comprehensive Configuration Examples - lab

Add to My Manuals
Save this manual to your list of manuals

Page 97 highlights

Saving Configuration Changes Saving Configuration Changes To prevent the loss of the access server configuration, save it to NVRAM. Configure Table 3-31 Saving Configuration Changes Step Command 1 5300> enable Password: 5300# 2 5300# copy running-config startup-config 3 5300(config-if)# Ctrl-Z 5300# %SYS-5-CONFIG_I: Configured from console by console Purpose Enter enable mode (also called privileged EXEC mode). Enter the password. You have entered enable mode when the prompt changes to 5300#. Save the configuration changes to NVRAM so that they are not lost during resets, power cycles, or power outages. Return to enable mode. This message is normal and does not indicate an error. Comprehensive Configuration Examples This section includes three sample outputs of the show config command. If you are experienced with the Cisco IOS software, you might find this a useful reference for configuration. Octal E1/PRI Card with Four Serial Interfaces 5300# show config Building configuration... Current configuration: ! version 12.0 service timestamps debug datetime msec localtime service timestamps log datetime localtime show-timezone no service password-encryption service udp-small-servers service tcp-small-servers ! hostname elnino_uut ! no logging buffered logging monitor notifications enable password lab ! bert profile default pattern 220-O.151QRSS threshold 10^-6 error-injection none duration 10 ip subnet-zero ip ftp source-interface Ethernet0 ip ftp username melai no ip domain-lookup ip domain-name cisco.com ! isdn switch-type primary-net5 chat-script dial "" "ATDT\T" TIMEOUT 120 CONNECT \p Basic Configuration 3-63

Section	Page
Cisco AS5300 Universal Access Server Software Configuration Guide	1
Prefacexi	5
Chapter 1	5
First-Time Configuration1-1	5
Chapter 2	5
Using CiscoIOS Software2-1	5
Chapter 3	5
Basic Configuration3-1	5
Chapter 4	7
Access Service Security4-1	7
Appendix A	8
Managing ModemsA-1	8
Appendix B	8
ROM MonitorB-1	8
Appendix C	8
Using Setup on CiscoIOSReleases11.2 or 11.3(2)TC-1	8
Appendix D	9
Upgrade VoIP Software D-1	9
Index	9
Index	9
Preface	11
Document Objectives	11
Changes to This Guide	11
Document Organization	12
Where to Get the Latest Version of This Guide	12
Conventions	13
Tips Means the following information might help you solve a problem.	13
Related Documentation	15
Cisco Connection Online	15
First-Time Configuration	17
Using the Setup Script	17
Getting Started	17
Step1 Power ON the access server. The power switch is on the rear panel, at the upper right corn...	18
Figure1-1 Power Switch Location	18
Step2 When the following message appears, enter yes to continue:	19
Step3 When the following message appears, enter No to configure all interfaces. Note that if you...	19
Step4 When the following message appears, press Enter to see the current interface summary:	19
Step5 Enter a host name for the access server:	20
Step6 Enter an enable secret password. This password is encrypted (more secure) and cannot be se...	20
Step7 Enter an enable password. This password is not encrypted (less secure) and can be seen whe...	20
Step8 Enter the virtual terminal password, which is used for remote console access:	20
Step9 Enter yes to the system management prompt if you want the access server to be managed by t...	20
Step10 Respond to the following prompts as appropriate for your network:	20
Step11 Configure the asynchronous serial lines for the integrated modems on the modules installe...	21
Step12 Enter the letter corresponding to the ISDN switch type that matches your telco switch typ...	22
Step13 Press Enter to allow users to dial in via ISDN or analog modems:	22
Step14 Enter the number of controllers you will be using for the PRI configuration or press Ente...	22
Step15 Set the CAS configuration options for the first controller you are configuring. First, pr...	22
Step16 Enter your telco framing type:	22
Step17 Enter your telco line code type:	22
Step18 Enter the letter corresponding to the signaling type to support modem pooling over the T1...	23
Step19 Enter the tone signaling type:	23
Step20 Press Enter to configure digital number identification service (DNIS) over T1 lines:	23
Step21 Repeat Step15 to Step20 to configure the remaining controllers.	23
Step22 Enter yes to configure the Ethernet 0 interface (this is the Ethernet 10BaseT port) if yo...	23
Step23 Press Enter or enter yes to configure the Fast Ethernet0 interface (this is the Ethernet...	23
Step24 Configure your serial intefaces by responding to the following prompts:	24
Step25 Repeat Step24 to configure the other three serial interfaces, if necessary.	24
Step26 Configure the PRI D-channel (signaling channel):	24
Step27 Repeat Step 26 for each D-channel.	24
Step28 Enter 0, 1, or 2 when the following prompt is displayed:	27
Step29 When the messages stop displaying on your screen, press Enter to get the following prompt:	27
Step30 The 5300> prompt indicates that you are now at the command-line interface (CLI) and you h...	28
Where to Go Next	28
Using CiscoIOS Software	29
Getting Help	29
Understanding Command Modes	30
How to Find Command Options	30
Table2-1 How to Find Command Options	30
Undoing a Command or Feature	32
Saving Configuration Changes	32
Where to Go Next	32
Basic Configuration	35
Configuring the Host Name and Password	36
Configure	36
Table3-1 Configuring the Host Name and Passwords	36
Verify	36
Configuring Alarms	37
Configure	37
Table3-2 Configuring Ethernet 10BaseT	37
Verify	38
Configuring Ethernet 10BaseT	38
Configure	39
Table3-3 Configuring Ethernet 10BaseT	39
Verify	39
Configuring Ethernet 100BaseT	39
Configure	40
Table3-4 Configuring Ethernet 100BaseT	40
Table3-5 Using Different Duplex and Speed Options	40
Verify	41
Configuring Synchronous Serial Interfaces for WAN Support	42
Configure	42
Table3-6 Configuring Serial Interfaces	42
Verify	43
Configuring Channelized T1 or E1	44
Configure	44
Table3-7 Configuring Channelized T1 or E1	44
Verify	44
Configuring ISDN PRI	45
Configure	46
Table3-8 Configuring ISDN PRI	46
Table3-9 ISDN Switch Types for BRI and PRI Interfaces	46
Verify	47
Configuring E1 R2 Signaling	50
Configure	50
Table3-10 Configuring R2 Signaling	50
Country Codes for R2 Signaling	52
Table3-11 Country Codes for R2 Signaling	52
Verify	53
Configuring the Asynchronous Group Interface	55
Configure	55
Table3-12 Configuring the Asynchronous Group Interface	55
Verify	56
Configuring the D Channels for Modem Signaling	58
Configure	58
Table3-13 Configuring the D Channels for Modem Signaling	58
Verify	59
Table3-14 Debug Dialer Messages	60
Table3-15 Debug ISDN Messages	60
Configuring the Modems	62
Configure	62
Table3-16 Configuring the Modems	62
Country Code Tables	63
Table3-17 Microcom Modem Codes	63
Table3-18 MICA Modem Codes	63
Resetting to Default Values for Country Codes	64
Verify	64
Configuring Modem Pooling	67
Table3-19 Configuring Modem Pooling	67
Verify	68
Configuring Resource Pooling and Session Counting	69
Configure	69
Table3-20 Setting up DNIS and Resource Groups	69
Table3-21 Creating Customer Profiles	71
Verify	72
Configuring Voice Network Data	73
Configure	73
Table3-22 Configuring Voice Network Data	73
Verify	73
Configuring T1 CAS for VoIP	75
Configure	75
Table3-23 Configuring Service Provider T1 CAS	75
1	75
2	75
3	75
4	75
5	75
6	75
7	76
8	76
9	76
10	76
11	76
12	76
Verify	76
Configuring IP Networks for Real-Time Voice Traffic	78
Configure	78
Table3-24 Configuring IP Networks for Real-Time Voice Traffic	78
Verify	79
Configuring RLM	80
Configure	80
Table3-25 Configuring RLM	80
Verify	81
Configuring ISL for VLAN Routing	82
Configure	82
Table3-26 Configuring VLAN Routing	82
Verify	83
Configuring IPX Networks	84
Configure	84
Table3-27 Configuring IPX Networks	84
Verify	85
Configuring AppleTalk	86
Configure	86
Table3-28 Accessing AppleTalk Networks	86
Verify	86
Configuring MMP	89
Configure	89
Table3-29 Configuring MMP	89
Verify	90
Creating Authentication Accounts	91
Configuring VPDN	92
Configure	92
Table3-30 Configuring VPDN	92
Verify	92
Creating Authentication Accounts	94
Using Continuity Test (COT)	94
Configure	94
Verify	94
Saving Configuration Changes	97
Configure	97
Table3-31 Saving Configuration Changes	97
Comprehensive Configuration Examples	97
Where to Go Next	106
Access Service Security	107
Assumptions	108
Local Versus Remote Server Authentication	108
Local Security Database	108
Figure4-1 Local Security Database Authentication	108
Remote Security Database	109
Figure4-2 Remote Security Database	109
Configuring Authentication	110
1 Securing Access to Privileged EXEC and Configuration Mode	110
2 Communicating Between the Access Server and the Security Server	110
3 Configuring Authentication on a TACACS+ Server	110
4 Enabling AAA Globally on the Access Server	110
5 Defining Authentication Method Lists	110
6 Applying Authentication Method Lists	110
Securing Access to Privileged EXEC and Configuration Mode	110
Table4-1 Privileged EXEC Mode Commands	110
Table4-2 Entering an Encryption Type	111
Communicating Between the Access Server and the Security Server	112
Communicating with a TACACS+ Server	113
Table4-3 Enabling Communication with a TACACS+ Server	113
Communicating with a RADIUS Server	114
Table4-4 Establishing Communication with a RADIUS Security Server	114
Configuring Authentication on a TACACS+ Server	115
Enabling AAA Globally on the Access Server	115
Defining Authentication Method Lists	116
Step1 Enter the aaa authentication command.	116
Step2 Specify protocol (ARAP or PPP) or login authentication.	116
Step3 Identify a list name or default. A list name is any alphanumeric string you choose. You as...	116
Step4 Specify the authentication method. You can specify multiple methods, such as tacacs+, foll...	116
Step5 Populate the local username database if you specified local as the authentication method (...	116
Enter the aaa authentication Command	117
Specify Protocol or Login Authentication	117
Identify a List Name	117
Specify the Authentication Method	118
Table4-5 Authentication Methods for PPP	118
Table4-6 Authentication Methods for ARA	118
Populate the Local Username Database if Necessary	119
Authentication Method List Examples	120
Authentication Method List Examples for Users Logging in to the Access Server	120
Authentication List Examples for Dial-In Users Using ARA to Access Network Resources	120
Authentication Method List Examples for Users Dialing In Using PPP	120
Applying Authentication Method Lists	121
Table4-7 Applying Authentication Method Lists	121
Login Authentication Examples	121
ARA Authentication Examples	122
PPP Authentication Examples	122
Configuring Authorization	123
1 To override the default denial or authorization from a non-existent user, specify authorization...	123
2 At the user level, inside the braces of the user declaration, the default for a user who does n...	123
3 At the service authorization level, arguments are processed according to the following algorith...	123
(a) If the AV pair from the access server is mandatory, look for an exact match in the daemon’s m...	123
(b) If an exact match does not exist, look in the daemon’s optional list for the first attribute ...	123
(c) If no attribute match exists, deny the command if the default is to deny, or if the default i...	123
(d) If the AV pair from the access server is optional, look for an exact AV match in the mandator...	123
(e) If not found, look for the first attribute match in the mandatory list. If found, add the dae...	123
(f) If no mandatory match exists, look for an exact AV pair match among the daemon’s optional AV ...	123
(g) If no exact match exists, locate the first attribute match among the daemon’s optional AV pai...	123
(h) If no match is found, delete the AV pair if the default is to deny, or if the default is perm...	123
(i) If there is no attribute match already in the output list after all AV pairs have been proces...	123
Configuring Authorization on the Access Server	123
Specifying the Authorization Method	124
Table4-8 AAA Authorization Method	124
Specifying Authorization Parameters on a TACACS+ Server	124
Authorization Examples	124
Security Examples	125
Simple Local Security Example	125
TACACS+ Security Example for Login, PPP, and ARA	125
Managing Modems	127
Monitoring Modems	128
Configuring Microcom Modems for Monitoring	128
TableA-1 Entering AT Command Mode for Microcom Modems	128
Configuring MICA Modems for Monitoring	129
TableA-2 Entering AT Command Mode for MICA Modems	129
Modem Performance Statistics Commands	130
Managing Modems	131
Check Modem Type	131
Set Modem Event Buffer	131
Remove Inoperable Modems from Service	132
Polling Modems	132
Set Polling Attempts	132
Set Time Interval between Polls	132
Poll for Modem Statistics	132
Troubleshooting Modems	133
Perform a Modem Startup Test	133
Test Two Modems Back-to-Back	133
Hold and Reset a Modem	134
Disable a Modem from Dial-Up Services	134
Debug a Modem	134
Upgrading Modem Code	135
1 Understanding the modem code scenarios possible for your access server.	135
2 Choosing an upgrade strategy.	135
3 Finding out the modem code version installed on your access server.	135
4 Upgrading the modem code.	135
How to Obtain Modem Code	135
Important Modem Upgrade Commands	136
Choosing an Update Strategy	136
Figure A-1 Release Timeline for Cisco IOS Software and Modem Code	137
Modem Code Scenarios	137
TableA-3 Modem Code Scenarios—Cisco IOS Software or Modem Code Upgrades	137
Figure A-2 Release Timeline for Cisco IOS Software and Modem Code	138
TableA-4 Resulting Versions of Cisco IOS Software and Modem Code	138
TableA-5 Modem Code Terminology	139
Displaying Modem Code Versions	139
Upgrading Modem Code from the Cisco CCO TFTP Server	140
Download Modem Code from the Cisco CCO TFTP Server to a Local TFTP Server	140
Using an Internet Browser	141
Step1 Launch an Internet browser.	141
Step2 Bring up Cisco’s Software Center home page at following URL (this is subject to change wit...	141
Step3 Click Access Products (under Cisco Software Products) to open the Access Products window.	141
Step4 Click Cisco AS5300 Series Software.	141
Step5 Click the modem code you want and download it to your workstation or PC. For example, to d...	141
Step6 Click the modem code file you want to download, and then follow the remaining download ins...	141
Step7 When the modem code is downloaded to your workstation, transfer the file to a TFTP server ...	141
Step8 When the modem code is downloaded to your workstation, transfer the file to a TFTP server ...	141
Using an FTP Application	141
Step1 Log in to the Cisco CCO FTP server, called cco.cisco.com:	141
Step2 Enter your CCO registered username and password (for example, harry and letmein):	142
Step3 Specify the directory path that holds the modem firmware you want to download. For example...	143
Step4 View the contents of the directory with the ls command:	143
Step5 Specify a binary image transfer:	143
Step6 Copy the modem firmware files from the access server to your local environment with the ge...	143
Step7 Quit your terminal session:	143
Step8 Verify you successfully transferred the files to your local directory:	143
Step9 Transfer these files to a local TFTP or RCP server that your access server or router can a...	143
Copy the Modem Code File from Local TFTP Server to Modems	144
Upgrading MICA Modem Code	144
Step1 Establish an xterm session to the access server if using a UNIX workstation, or a HyperTer...	144
Step2 Enter the access server enable mode (the prompt is displayed as 5300#):	144
Step3 Check the files in the access server system Flash memory:	144
Step4 Download the modem code file from TFTP server into the access server Flash memory using th...	144
Step5 Verify the file has been copied into the access server system Flash memory:	145
Step6 Copy the modem code file from the access server system Flash memory to the modems by enter...	145
Upgrading Microcom Modem Code	146
Step1 Enter the access server enable mode (the prompt is displayed as 5300#):	146
Step2 Check the image in the access server system Flash memory:	146
Step3 Download the modem code file from the TFTP server into the access server system Flash memo...	146
Step4 Verify the file has been copied into the access server Flash memory:	146
Step5 Copy the modem code file from the access server system Flash memory to the modems by enter...	147
Upgrading Modem Code from Diskettes	147
Copy the Modem Code to Your PC Hard Disk	147
Step1 Insert the modem code diskette into the diskette drive.	147
Step2 Use Microsoft Windows 95 Explorer to create a folder named tftpboot at your hard disk root...	147
Step3 Use the Microsoft Windows 95 Explorer to copy the modem code file into the c:/tftpboot fol...	147
Copy the Modem Code from Your PC to the Modems	147
Set Up a TFTP Application on the PC	148
Step1 Install the TFTP application on the PC.	148
Step2 Launch the TFTP application. You commonly do this by double-clicking the application icon ...	148
Step3 Set your TFTP server root directory:	148
Connect your PC and the Access Server	148
Step1 Use straight-through cables to connect the PC and access server via a 10BaseT hub, as show...	148
FigureA-3 Connecting a PC and an Access Server	148
Step2 Connect your PC COM port to the CiscoAS5300 console port, as shown in FigureA-3.	148
Step3 Make sure your PC and access server are powered ON.	149
Establish a HyperTerminal Session	149
Step1 In Microsoft Windows 95 on your PC, choose Start/Programs/Accessories/HyperTerminal.	149
Step2 Double-click Hypertrm.exe to display the Connection Description dialog box.	149
Step3 Enter a name for your connection, for example, Console and then click OK. HyperTerminal di...	149
Step4 Choose the COM port connecting the PC and the access server in the Connect Using list box....	149
Step5 Click OK. HyperTerminal displays the COM Properties dialog box.	149
Step6 Choose these options in the COM Properties dialog box:	149
Step7 Click OK. The HyperTerminal dialog box appears.	149
Step8 Press Enter to display the 5300# prompt.	149
Ping the PC and Access Server	149
Step1 Choose the correct Ethernet adapter connecting to the access server and note the PC’s IP a...	149
(a) Choose Start/Run to display the Run dialog.	149
(b) Enter winipcfg and click OK to display the IP Configuration dialog box.	149
(c) Choose the PC Ethernet adapter connector used for the connection to the access server if you ...	149
(d) Make a note of the PC IP address, and then click OK.	149
Step2 In the HyperTerminal dialog box (see the previous section “Establish a HyperTerminal Sessi...	150
Step3 Enter the ping command with your PC’s IP address.	150
Upload Modem Code to the Access Server	150
Step1 Check the image in the access server Flash memory:	150
Step2 Enter the copy tftp flash command to download the code file from the TFTP server into the ...	150
Step3 Verify the file has been copied into the access server Flash memory:	151
Step4 Copy the modem code file from the access server Flash memory to the modems by entering the...	151
Using the Modem Code Bundled with Cisco IOS Software	151
Step1 Enter the access server enable mode (the prompt is displayed as 5300#):	152
Step2 Enter the copy system:/ucode/filename modem command (or, for CiscoIOS releases earlier th...	152
ROM Monitor	153
Entering the ROM Monitor Program	153
ROM Monitor Command Conventions	153
Command Aliasing	154
ROM Monitor Commands	154
Using Setup on CiscoIOSReleases11.2 or 11.3(2)T	161
Getting Started	161
Step1 Power ON the access server. The power switch is on the rear panel of the access server, at...	161
FigureC-1 Power Switch Location	161
Step2 Continue with one of the following sections:	162
Running Setup for Cisco IOS Release 11.2	162
The messages look similar to the following:	162
Step3 When the following message appears, press Enter to accept the default entry (yes) in squar...	163
Step4 When the following message appears, press Enter to see the current interface summary:	163
Step5 Enter a host name for the access server (this example uses 5300):	163
Step6 Enter an enable secret password. This password is encrypted (more secure) and cannot be se...	163
Step7 Enter an enable password that is different from the enable secret password. This password ...	163
Step8 Enter the virtual terminal password, which prevents unauthenticated access to the router t...	163
Step9 Respond to the following prompts as appropriate for your network:	163
Step10 Configure the asynchronous serial lines for the integrated modems on the modules installe...	164
Step11 Configure the Ethernet0 LAN interface:	165
The next prompts ask about the number of bits in the host portion of the subnet mask.	165
Step12 Configure the Fast Ethernet0 interface:	165
The next prompts ask about the number of bits in the host portion of the subnet mask.	165
Step13 Configure the ISDN switch type:	165
Step14 If you want users to be able to dial in via ISDN or analog modems, configure the controll...	166
When you have completed the initial configuration script, messages similar to the following appear:	166
Step15 The next prompt asks if you want to save this configuration. If you answer no, nothing yo...	169
Step16 When the messages stop displaying on your screen, press Enter to get the prompt:	169
Step17 Continue the configuration. The 5300> prompt indicates that you are now at the command-li...	169
Running Setup for Cisco IOS Release 11.3(2)T	170
The messages look similar to the following:	170
Step18 When the following message appears, press Enter to accept the default entry [yes] in squa...	171
Step19 When the following message appears, press Enter to see the current interface summary:	171
Step20 Enter a host name for the access server:	171
Step21 Enter an enable secret password. This password is encrypted (more secure) and cannot be s...	171
Step22 Enter an enable password. This password is not encrypted (less secure) and can be seen wh...	171
Step23 Enter the virtual terminal password, which is used for remote console access:	171
Step24 Respond to the following prompts as appropriate for your network:	171
Step25 Configure the asynchronous serial lines for the integrated modems on the modules installe...	172
Step26 Configure the Ethernet 0 LAN interface:	173
The next prompts ask about the number of bits in the host portion of the subnet mask.	173
Step27 Configure the Fast Ethernet0 interface:	173
The next prompts ask about the number of bits in the host portion of the subnet mask.	173
Continuing the Setup Script for T1/PRI Cards	174
Step1 Enter the letter corresponding to the ISDN switch type that matches your telco switch type:	174
Step2 Press Enter to allow users to dial in via ISDN or analog modems:	174
Step3 Enter the number of controllers you will be using for the PRI configuration:	174
Step4 Set the CAS configuration options for the first controller you are configuring. First, ent...	174
Step5 Enter your telco framing type:	174
Step6 Enter your telco line code type:	175
Step7 Enter the letter corresponding to the signaling type to support modem pooling over the T1 ...	175
Step8 Enter the tone signaling type:	175
Step9 Press Enter to configure digital number identification service (DNIS) over T1 lines:	175
Step10 Set the CAS configuration options for the next controller you are configuring.	175
After you complete the configuration script, messages similar to the following appear:	175
Step11 Enter yes to save the configuration, or enter no to erase it:	177
Step12 When the messages stop displaying on your screen, press Enter to get the following prompt:	177
The 5300> prompt indicates that you are now at the command-line interface (CLI) and you have just...	177
Continuing the Setup Script for E1/PRI Cards	177
Step1 Enter the letter corresponding to the ISDN switch type that matches your telco switch type:	177
Step2 Press Enter to allow users to dial in via ISDN or analog modems:	177
Step3 Enter the number of controllers you will be using for the PRI configuration:	178
Step4 Set the CAS configuration options for the first controller you are configuring. First, ent...	178
Step5 Enter your telco’s framing type.	178
Step6 Enter your telco line code type:	178
Step7 Enter the letter corresponding to the signaling type to support modem pooling over the E1 ...	178
Step8 Enter the letter corresponding to the tone signaling type:	179
Step9 Press Enter to provision ANI address information over E1 lines:	179
Step10 Enter the number corresponding to the country for which you are configuring R2 signaling:	179
Step11 Set the CAS configuration options for the next controller you are configuring. Repeat Ste...	179
After you complete the configuration script, messages similar to the following appear.	181
Step12 Enter yes to save the configuration, or enter no to erase it:	183
Step13 When the messages stop displaying on your screen, press Enter to get the following prompt:	183
Step14 The 5300> prompt indicates that you are now at the command-line interface (CLI) and you h...	183
Where to Go Next	183
Upgrade VoIP Software	185
Upgrading VoIP Feature Card Firmware	186
Determine the number of VFC cards	186
Identify the VFC ROM Monitor Version	186
Identify the VFC/ROM Monitor Mode	187
Download Software in VCWare Mode	187
Configure	187
Verify	188
Tips	189
Download Software in ROM Monitor Mode	189
Configure	189
Verify	190
Tips	191
New Hardware Features	191
A	193
B	193
C	193
D	194
E	194
F	194
G	194
H	195
I	195
K	195
L	195
M	195
N	196
O	196
P	196
R	196
S	197
T	197
U	197
V	198
W	198