IP Services

A static IP route consists of the following information:

• Interface—Interface that leads to the destination IP address

• Destination—Destination IP address

• Gateway—Next IP addressed equipment downstream

• Netmask—Subnet mask to apply to the destination address

To assign a static route from the Cisco IAD1101 to Host A, over Ethernet, enter the following information:

Network Route:

• Interface—IP over Ethernet

• Destination—10.0.0.0

• Gateway—150.150.150.2

• Netmask—255.0.0.0

Default Route:

• Gateway—150.150.150.2

Host Route:

• Destination—10.10.10.2

• Gateway—150.150.150.2

Step 3   Set the following parameters in the data link route configuration window:

• Interface—Select the outgoing interface for the route. You must identify the interface type, card, slot, and line number. To use the Ethernet port, select Ethernet.

• Destination IP Address—The destination address for the route. To configure a default route, leave this field at the default (0.0.0.0).

• Gateway IP Address—The next IP addressed equipment downstream.

• Netmask—The netmask for the destination IP address. To configure a default route, leave blank.

• Route Type—Select one of the following route types:

  • Default—This route is always used, unless another static route (Host or Network) is created.

  • Host—This route points to a specific host.

  • Network—This route points to a specific network of hosts.

Step 4   Click Add when finished.

Step 5   Click the Exit button (on the function bar) to return to the NodeView.

Note   You can add as many routes as needed, but only one route can be the default route.

Access lists allow the Cisco IAD1101 to filter incoming or outgoing IP packets based on the following criteria:

• Interface

• Direction of traffic (incoming or outgoing)

• Source IP address, subnet mask, and port

• Destination IP address, subnet mask, and port

• Layer 4 protocol (TCP, UDP, ICMP)

• ICMP message type

Note   UDP ports 161 and 162 are used for management and alarm traffic, respectively.

Step 2   Set the following fields to configure the access list:

• Action—Select Accept or Reject.

• IP Interface—Select an individual PPP link, or select Ethernet.

• Direction—Select In or Out.

• Protocols—Select the protocols to be filtered (All, TCP, UDP, or ICMP).

  • ICMP Type—Select the ICMP protocol type to be filtered.

  • ICMP Code—Select the code for the ICMP protocol type.

• Source IP Address—Select the source IP address to filter.

• Source Netmask Width—Select the netmask for the IP address.

• Source Ports—Select the ports to be filtered.

  • Include or Exclude—Select the action to be applied to the ports.

• Destination IP Address—Select the destination IP address to filter.

• Destination Netmask Width—Select the netmask for the IP address.

• Destination Ports—Select the ports to be filtered.

Step 3   Click Add when finished.

Step 4   Repeat Step 2 and Step 3 to configure additional access lists. You can configure as many as 32 access lists.

Step 5   Click Enable/Disable Access Lists.

Caution   EMS rejects traffic on every interface that does not have an access list definition. Before you proceed, you must create at least one entry per interface to accept traffic, or the NE will reject all traffic on the unprovisioned interface, including management traffic. Be sure to enable the SNMP protocol in the access list, and provision an accept statement to allow packets in and out of the interface on UDP port 161.

Step 6   Click Apply NE Enable to activate access lists.

Caution   Enabling access lists might prevent user traffic from entering or exiting the NE, including management traffic.

sun1 ------------------

r1 ------------------ 1101 ------------------ r2 ------------------ sun2

r

r

To accept only SNMP traffic to the Cisco IAD1101 from subnet 10.0.0./8, provision the access list as follows:

NAT enables private IP internetworks that use nonregistered IP addresses to connect to the Internet. NAT is configured on the router at the border of a stub domain (referred to as the inside network) and a public network such as the Internet (referred to as the outside network). NAT translates the internal local addresses to globally unique IP addresses before sending packets to the outside network.

Step 2   Set the following fields to configure the network address translation:

• IP Interface—Select an individual IP data link, or select Ethernet to configure the Ethernet port.

• NAT Class—Select the type of NAT for this interface:

  • Static—A one-to-one translation of IP addresses.

  • Dynamic—A scalable translation of IP addresses.

• Inside IP Address—Enter the inside IP addresses to translate.

• Inside Netmask Width—Enter the netmask for the inside IP addresses to translate.

• Inside Ports—Enter the range of ports for the inside IP addresses.

• Outside IP Address—Enter the outside IP addresses used for translation.

• Outside Netmask Width—Enter the netmask for the outside IP address.

• Outside Ports—Enter the range of ports for the outside IP addresses.

• Protocols—Select the protocols to be filtered (All, TCP, UDP, TCP/UDP, or ICMP).

• Timeout—For dynamic NAT, enter the time in seconds for a NAT table entry to expire.

Step 3   Click Add when finished.

Step 4   Repeat Step 2 and Step 3 to configure additional NAT entries. You can configure as many as 8 NAT entries.

Step 5   Click Enable/Disable NAT to activate NAT.

Caution   Enabling NAT might prevent user traffic from entering or exiting the Cisco IAD1101, including management traffic.

Step 2   Click Enable RIP for NE.

Step 3   In the IP Interfaces list, select the interfaces to be provisioned for RIP.

Step 4   Click Enable RIP.

Step 5   Select the Rx RIP Version—1, 2, or 1 or 2.

Step 6   Select the Tx RIP Version—None, 1, RIP1Compatible, or 2.

Step 7   Select the Authentication—None or Password.

Step 8   If password authentication is selected (RIPv2 only), enter the password in the Authentication Key field.

Step 9   Click Apply to provision RIP for the selected interfaces.

Note   When you activate RIP on a Cisco IAD1101 interface, RIP advertises all directly-connected nodes over the interface.

Note   RIP1Compatible is a version of RIPv2 that can be processed by a node using RIPv1.

Step 2   Under Available IP Statistics, click the icon for the desired display. Statistic information appears in the a new frame on the right side of the window. Statistic information and descriptions can be found in RFC1213 (Management Information Base for Network Management of TCP/IP-based internets: MIB-II).

Step 3   Use the following buttons to alter the display:

• Refresh—Updates the table with the latest information

• Flip—Changes the orientation of the table, from horizontal to vertical

Step 4   Click Close to close the display.