CISCO technology set 4

V. ISDN
　
1. Integrated digital service network (ISDN)
The integrated digital service network (ISDN) consists of two parts: digital telephone and data transmission services, which are generally provided by the telephone Bureau. The Basic Rate Interface (BRI) service of ISDN provides two B channels and one D channel (2B + D ). The B-channel speed of BRI is 64 Kbps, which is used to transmit user data. The speed of the D-channel is 16 Kbps, which mainly transmits control signals. In North America and Japan, the Primary Rate Interface (PRI) of ISDN provides 23 B channels and 1 D channel. The total rate can reach 1.544 Mbps, and the D channel rate is 64 Kbps. In Europe, Australia and other countries, the isdn pri provides 30 B channels and 1 64 Kbps D channel, with a total rate of 2.048 Mbps. The isdn pri provided by China's telephone Bureau is 30B + D.
2. Basic commands
Task commands
Set ISDN switching type isdn switch-type switch-type1
Interface bri 0
Set encapsulation PPP for ppp encapsulation
Set the diing between protocol address and phone number dialer map protocol next-hop-address [name hostname] [broadcast] [dial-string]
Start PPP multi-connection ppp multilink
Set the dialer load-threshold load threshold for starting another B channel
Show ISDN information show isdn {active | history | memory | services | status [dsl | interface-type number] | timers}
Note: 1. The following table of switch types, domestic switches are generally basic-net3.
By region keyword Switch Type
Australia
Basic-ts013 Australian TS013 switches
Europe
Basic-1tr6 German 1TR6 ISDN switches
Basic-nwnet3 Norway NET3 switches (phase 1)
Basic-net3 NET3 ISDN switches (UK, Denmark, and other nations); covers the Euro-ISDN E-DSS1 signalling system
Primary-net5 NET5 switches (UK and Europe)
Vn2 French VN2 ISDN switches
Vn3 French VN3 ISDN switches
Japan
Ntt Japanese ntt isdn switches
Primary-ntt Japanese isdn pri switches
North America
Basic-5ess AT&T basic rate switches.
Basic-dms100 NT DMS-100 basic rate switches
Basic-ni1 National ISDN-1 switches
Primary-4ess AT&T 4ESS switch type for the U. S. (isdn pri only)
Primary-5ess AT&T 5ESS switch type for the U. S. (isdn pri only)
Primary-dms100 NT DMS-100 switch type for the U. S. (isdn pri only)
New Zealand
Basic-nznet3 New Zealand Net3 switches
3. DDR (dial-on-demand routing) instances implemented by ISDN:
The settings are as follows:
Router1:
Hostname router1
User router2 password cisco
!
Isdn switch-type basic-net3
!
Interface bri 0
Ip address 192.200.10.1 255.255.255.0
Encapsulation ppp
Dialer map ip 192.200.10.2 name router2 572
Dialer load-threshold 80
Ppp multilink
Dialer-group 1
Ppp authentication chap
!
Dialer-list 1 protocol ip permit
!
Router2:
Hostname router2
User router1 password cisco
!
Isdn switch-type basic-net3
!
Interface bri 0
Ip address 192.200.10.2 255.255.255.0
Encapsulation ppp
Dialer map ip 192.200.10.1 name router1 571
Dialer load-threshold 80
Ppp multilink
Dialer-group 1
Ppp authentication chap
!
Dialer-list 1 protocol ip permit
!
The Cisco router also supports the Callback function. We use Router1 as the Callback Server and Router2 as the Callback Client.
Commands related to callback:
Task commands
Map the Protocol address and phone number, and use the PPP ing category of the PPP callback defined in global mode on the interface. Dialer map protocol address name hostname class classname dial-string
The setting interface supports PPP callback ppp callback accept
In global mode, set the ing class map-class dialer classname for the PPP callback.
The callback is determined by finding the host name registered in the dialer map. dialer callback-server [username]
The setting interface requires PPP callback ppp callback request
The settings are as follows:
Router1:
Hostname router1
User router2 password cisco
!
Isdn switch-type basic-net3
!
Interface bri 0
Ip address 192.200.10.1 255.255.255.0
Encapsulation ppp
Dialer map ip 192.200.10.2 name router2 class s3 572
Dialer load-threshold 80
Ppp callback accept
Ppp multilink
Dialer-group 1
Ppp authentication chap
!
Map-class dialer s3
Dialer callback-server username
Dialer-list 1 protocol ip permit
!
Router2:
Hostname router2
User router1 password cisco
!
Isdn switch-type basic-net3
!
Interface bri 0
Ip address 192.200.10.2 255.255.255.0
Encapsulation ppp
Dialer map ip 192.200.10.1 name router1 571
Dialer load-threshold 80
Ppp callback request
Ppp multilink
Dialer-group 1
Ppp authentication chap
!
Dialer-list 1 protocol ip permit
!
Related Debugging commands:
Debug dialer
Debug isdn event
Debug isdn q921
Debug isdn q931
Debug ppp authentication
Debug ppp error
Debug ppp negotiation
Debug ppp packet
Show dialer
Show isdn status
Example: Execute the debug dialer command to observe the process of router2 calling router1 and router1 calling router2.
Router1 # debug dialer
Router2 # ping 192.200.10.1
Router1 #
00: 03: 50: % LINK-3-UPDOWN: Interface BRI0: 1, changed state to up
00: 03: 50: BRI0: 1PP callback Callback server starting to router2 572
00: 03: 50: BRI0: 1: disconnecting call
00: 03: 50: % LINK-3-UPDOWN: Interface BRI0: 1, changed state to down
00: 03: 50: BRI0: 1: disconnecting call
00: 03: 50: BRI0: 1: disconnecting call
00: 03: 51: % LINK-3-UPDOWN: Interface BRI0: 2, changed state to up
00: 03: 52: callback to router2 already started
00: 03: 52: BRI0: 2: disconnecting call
00: 03: 52: % LINK-3-UPDOWN: Interface BRI0: 2, changed state to down
00: 03: 52: BRI0: 2: disconnecting call
00: 03: 52: BRI0: 2: disconnecting call
00: 04: 05: Callback timer expired
00: 04: 05: BRI0: beginning callback to router2 572
00: 04: 05: BRI0: Attempting to dial 572.
00: 04: 05: Freeing callback to router2 572
00: 04: 05: % LINK-3-UPDOWN: Interface BRI0: 1, changed state to up
00: 04: 05: BRI0: 1: No callback negotiated
00: 04: 05: % LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up
00: 04: 05: dialer Protocol up for Vi1
00: 04: 06: % LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0: 1, changed state
To up
00: 04: 06: % LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, chang
Ed state to up
00: 04: 11: % ISDN-6-CONNECT: Interface BRI0: 1 is now connected to 572
# Router1
4. Access the capital online 263 network instance through ISDN:
The local network address is 10.0.0.0/24, which is a reserved address. Through the NAT address translation function, LAN users can access the Internet through the ISDN 263 network. The following table lists the commands for the 263 ISDN phone number, 2633 user, and 263 password:
Task commands
The specified interface obtains the ip address negotiated through PPP/IPCP address negotiation.
Specify internal and external port ip address nat {inside | outside}
Use ppp/pap for authentication ppp authentication pap callin
The specified interface belongs to dialing group 1 dialer-group 1.
Define Dial-Up Group 1 allow all ip protocol dialer-list 1 protocol ip permit
Set the dialing number to 2633 dialer string 2633
Set the username and password for logon to 263. ppp pap sent-username 263 password 263
Set the default route ip route 0.0.0.0 0.0.0.0 bri 0
Set all source addresses meeting access list 2 to ip addresses owned by bri 0 nat inside source list 2 interface bri 0 overload
Set access list 2 to allow all protocols access-list 2 permit any
The specific configuration is as follows:
Hostname Cisco2503
!
Isdn switch-type basic-net3
!
Ip subnet-zero
No ip domain-lookup
Ip routing
!
Interface Ethernet 0
Ip address 10.0.0.1 255.255.255.0
Ip nat inside
No shutdown
!
Interface Serial 0
Shutdown
No description
No ip address
!
Interface Serial 1
Shutdown
No description
No ip address
!
Interface bri 0
Ip address negotiated
Ip nat outside
Encapsulation ppp
Ppp authentication pap callin
Ppp multilink
Dialer-group 1
Dialer hold-queue 10
Dialer string 2633
Dialer idle-timeout 120
Ppp pap sent-username 263 password 263
No cdp enable
No ip split-horizon
No shutdown
!
Ip classless
!
! Static Routes
!
Ip route 0.0.0.0 0.0.0.0 bri 0
!
! Access Control List 2
!
Access-list 2 permit any
!
Dialer-list 1 protocol ip permit
!
! Dynamic NAT
!
Ip nat inside source list 2 interface bri 0 overload
Snmp-server community public ro
!
Line console 0
Exec-timeout 0 0
!
Line vty 0 4
!
End
5. Cisco765M dialing through ISDN: 263
Since the configuration command of Cisco765 is different from the command of common Cisco routers, the following lists the specific command line Setting steps for accessing the Internet through 263 on Cisco765.
> Set system c765
C765> set multidestination on
C765> set switch net3
C765> set ppp multilink on
C765> cd lan
C765: LAN> set ip routing on
C765: LAN> set ip address 10.0.0.1
C765: LAN> set ip netmask 255.0.0.0
C765: LAN> set briding off
C765: LAN> cd
C765> set user remotenet
New user remotenet being created
C765: remotenet> set ip routing on
C765: remotenet> set bridging off
C765: remotenet> set ip framing none
C765: remotenet> set ppp clientname 263
C765: remotenet> set ppp password client
Enter new Password: 263
Re-Type new Password: 263
C765: remotenet> set ppp authentication out none
C765: remotenet> set ip address 0.0.0.0
C765: remotenet> set ip netmask 0.0.0.0
C765: remotenet> set ppp address negotiation local on
C765: remotenet> set ip pat on
C765: remotenet> set ip route destination 0.0.0.0/0 gateway 0.0.0.0
C765: remotenet> set number 2633.
C765: remotenet> set active
Command description:
Task commands
Set vro system name set system c765
Allow the router to call multiple destinations set multidestination on
Set the ISDN switch type to NET3 set switch net3
Allow point-to-point connections to multiple channels for Load Balancing set ppp multilink on
Disable bridging set briding off
Create user premade files to set dial-up connection parameters-multiple user premade files can be set to use the same physical port corresponding to different connections. Set user remotenet
Use PPP/IPCP set ip framing none
Set ppp clientname 263
Set the internet password set ppp Password client Enter new Password: 263 Re-Type new password: 263
Allow address negotiation set ppp address negotiation local on
Set ip pat on
Set the default route set ip route destination 0.0.0.0/0 gateway 0.0.0.0
Set ISP phone number set number 2633
Activate user premade file set active
　
Returned directory
　
6. PSTN
The Telephone Network (PSTN) is a public communication network with the highest popularity and lowest cost. It is also widely used in network interconnection. Telephone network applications can be divided into two types. One is to achieve interconnection between institutions of the same level through on-demand dial-up (DDR, one is the remote access service provided by the ISP for dial-up Internet access.
1. Remote Access
1.1.Access Server Basic settings:
Cisco2511 is used as the access server and the IP address pool is used for Dynamic Address allocation. The remote workstation uses the WIN95 Dial-Up Network for connection.
Global settings:
Task commands
Set username and password username password
Set the user's ip address pool ip address local pool {default | pool-name low-ip-address [high-ip-address]}
Ip address-pool [dhcp-proxy-client | local]
Basic interface setting command:
Task commands
Set the encapsulation form to PPP encapsulation ppp
Enable the routing function async default routing of the asynchronous Port
Set async mode {dedicated | interactive}
Set the user's ip address peer default ip address {ip-address | dhcp | pool [pool-name]}
Set the same ip address as Ethernet0: unnumbered ethernet0
Line dialing line settings:
Task commands
Set the working mode of the modem. modem {inout | dialin}
Automatic modem autoconfig discovery Configuration
Set the speed of the dial-up line.
Flowcontrol {none | software [lock] [in | out] | hardware [in | out]}
Automatically execute the command autocommand command after connection
The access server settings are as follows:
Router:
Hostname Router
Enable secret 5 $1 $ EFqU $ tYLJLrynNUKzE4bx6fmH //
!
Interface Ethernet0
Ip address 10.111.4.20 255.255.255.0
!
Interface Async1
Ip unnumbered Ethernet0
Encapsulation ppp
Keepalive 10
Async mode interactive
Peer default ip address pool Cisco2511-Group-142
!
The ip local pool Cisco2511-Group-142 10.111.4.21 10.111.4.36
!
Line con 0
Exec-timeout 0 0
Password cisco
!
Line 1 16
Modem InOut
Modem autoconfigure discovery
Flowcontrol hardware
!
Line aux 0
Transport input all
Line vty 0 4
Password cisco
!
End
Related Debugging commands:
Show interface
Show line
1.2. Access Server Security Authentication through the Tacacs Server:
Use a windows nt Server as the Tacacs server with the address 10.111.4.2 and run the Easy ACS 1.0 software with the Cisco2511 random band to implement user authentication.
Related settings:
Task commands
Activate AAA Access Control aaa new-model
When a user logs on, Tacacs + is used for AAA authentication by default. aaa authentication login default tacacs +
List name: no_tacacs use the ENABLE password for aaa authentication login no_tacacs enable
Use Tacacs + for aaa authentication PPP default tacacs +
Execute EXEC aaa authorization exec TACACS + authorized by tacacs + server
Authorize network-related service requests by TACACS + server. Aaa authorization network tacacs +
The account is run for the EXEC session. When the process starts and ends, it is advertised to the TACACS + server. Aaa accounting exec start-stop tacacs +
Billing for network-related service requirements includes SLIP, PPP, PPP NCPs, and ARAP. It is issued to the TACACS + server at the beginning and end of the process. Aaa accounting network start-stop tacacs +
Specify the Tacacs server address tacacs-server host 10.111.4.2
Set the shared keyword on the Tacacs + server and the Access Server. The access server and the Tacacs + server use this keyword to encrypt the password and response information. Here, tac is used as the keyword. Tacacs-server key tac
The access server settings are as follows:
Hostname router
!
Aaa new-model
Aaa authentication login default tacacs +
Aaa authentication login no_tacacs enable
Aaa authentication ppp default tacacs +
Aaa authorization exec tacacs +
Aaa authorization network tacacs +
Aaa accounting exec start-stop tacacs +
Aaa accounting network start-stop tacacs +
Enable secret 5 $1 $ kN4g $ CvS4d2. g0zwncnn/0hvE0
!
Interface Ethernet0
Ip address 10.111.4.20 255.255.255.0
!
Interface Serial0
No ip address
Shutdown
Interface Serial1
No ip address
Shutdown
!
Interface Group-Async1
Ip unnumbered Ethernet0
Encapsulation ppp
Async mode interactive
Peer default ip address pool Cisco2511-Group-142
No cdp enable
Group-range 1 16
!
The ip local pool Cisco2511-Group-142 10.111.4.21 10.111.4.36
Tacacs-server host 10.111.4.2
Tacacs-server key tac
!
Line con 0
Exec-timeout 0 0
Password cisco
Login authentication no_tacacs
Line 1 16
Login authentication tacacs
Modem InOut
Modem autoconfigure type usr_courier
Autocommand ppp
Transport input all
Stopbits 1
Rxspeed 115200
Txspeed 115200
Flowcontrol hardware
Line aux 0
Transport input all
Line vty 0 4
Password cisco
!
End
2. DDR (dial-on-demand routing) instance
In this example, an asynchronous dialing DDR connection is implemented through the aux port of the Cisco 2500 series router. Router1 connects to router2. PPP/CHAP is used for security authentication. In Router1, a user should be created with the peer vro host name as the user name, that is, the user name should be Router2. At the same time, a user should be created in Router2, with the peer router host name as the user name, that is, the user name should be Router1. The password of the user must be the same.
The related commands are as follows:
Task commands
Set the interface command chat-script-name router ct send receive ct send (etc.) For the router and modem .)
Set the waiting time before the port is hung up (dialer idle-timeout seconds)
Set the diing between protocol address and phone number dialer map protocol next-hop-address [name hostname] [broadcast] [modem-script modem-regexp] [system-script system-regexp] [dial-string]
Set the telephone number dialer string dial-string
Specifies the default chat-script {dialer | reset} script-name used by the router under a specific line
Router1:
Hostname Router1
!
Enable secret 5 $1 $ QKI7 $ wXjpFqC74vDAyKBUMallw/
!
Username Router2 password cisco
Chat-script cisco-default "" AT "TIMEOUT 30 OK" ATDT \ T "TIMEOUT 30 CONNECT \ c
!
Interface Ethernet0
Ip address 10.0.0.1 255.255.255.0
!
Interface Async1
Ip address 192.200.10.1 255.255.255.0
Encapsulation ppp
Async default routing
Async mode dedicated
Dialer in-band
Dialer idle-timeout 60
Dialer map ip 192.200.10.2 name Router2 modem-script cisco-default 573
Dialer-group 1
Ppp authentication chap
!
Ip route 10.0.1.0 255.255.255.0 192.200.10.2
Dialer-list 1 protocol ip permit
!
Line con 0
Line aux 0
Modem InOut
Modem autoconfigure discovery
Flowcontrol hardware
Router2:
Hostname Router2
!
Enable secret 5 $1 $ F6EV $5U8puzNt2/o9g. t56PXHo.
!
Username Router1 password cisco
!
Interface Ethernet0
Ip address 10.0.1.1 255.255.255.0
!
Interface Async1
Ip address 192.200.10.2 255.255.255.0
Encapsulation ppp
Async default routing
Async mode dedicated
Dialer in-band
Dialer idle-timeout 60
Dialer map ip 192.200.10.1 name Router1
Dialer-group 1
Ppp authentication chap
!
Ip route 10.0.0.0 255.255.0 192.200.10.1
Dialer-list 1 protocol ip permit
!
Line con 0
Line aux 0
Modem InOut
Modem autoconfigure discovery
Flowcontrol hardware
!
Related Debugging commands:
Debug dialer
Debug ppp authentication
Debug ppp error
Debug ppp negotiation
Debug ppp packet
Show dialer
Article entry: csh responsible editor: csh