Cisco 10000-2P2-2DC

To Next Page

To Previous Page

12-9

Cisco 10000 Series Router Software Configuration Guide

OL-2226-23

Chapter 12 Configuring Traffic Filtering

Time-Based ACLs

The following configuration example permits UDP traffic on Saturday and Sunday from 8:00 a.m. on

January 1, 1999 to 6:00 p.m. on December 31, 2001:

time-range udp

absolute start 8:00 1 January 1999 end 18:00 31 December 2001

periodic weekends 00:00 to 23:59

ip access-list extended boothbay

permit udp any any time-range udp

Main Page

Default Chapter3
- Table of Contents3
About this Guide25
Guide Revision History29
Chapter 2 Scalability and Performance30
- C H a P T E R 6 Configuring Pppoe over Ethernet and IEEE 802.1Q VLAN30
Chapter 3 Configuring Remote Acces to MPL VPN30
Audience30
Document Organization30
- C H a P T E R 11 Configuring Local AAA Server, User Database—Domain to VRF31
Chapter 10 Configuring Addres Pool31
Document Conventions32
Related Documentation33
Obtaining Documentation, Obtaining Support, and Security Guidelines34
CHAPTER 1 Broadband Aggregation and Leased-Line Overview35
- Hardware Requirements35
  - Checking Hardware and Software Compatibility35
  - C H a P T E R 1 Broadband Aggregation and Leased-Line Overview36
- Broadband Architecture Models36
- Leased-Line Architecture Models44
- Load Balancing Architecture Models47
- New Features, Enhancements, and Changes49
- Line Card VC Limitations63
Line Card VC Limitations64
Limitations and Restrictions65
Scaling Enhancements in Cisco IOS Release 12.2(33)XNE66
Scaling Enhancements in Cisco IOS Release 12.2(33)SB67
- Layer 4 Redirect Scaling67
Scaling Enhancements in Cisco IOS Release 12.3(7)XI168
- FIB Scaling68
- Policy-Map Scaling68
- Queue Scaling69
Scaling Enhancements in Cisco IOS Release 12.2(28)SB69
- VC Scaling70
- Configuring the Cisco 10000 Series Router for High Scalability70
- Scaling Enhancements in Cisco IOS Release 12.2(28)SB70
- Using Full Virtual Access Interfaces82
- Using the RADIUS Attribute Cisco-Avpair="Lcp:interface-Config82
- Preventing Full Virtual Access Interfaces83
Scaling Enhancements in Cisco IOS Release 12.3(7)XI269
MPLS VPN Architecture86
Access Technologies87
- PPP over ATM to MPLS VPN88
- PPP over Ethernet to MPLS VPN89
- RBE over ATM to MPLS VPN91
- Mpls Vpn ID91
- DHCP Relay Agent Information Option-Option 8293
- DHCP Relay Support for MPLS VPN Suboptions93
Feature History for RA to MPLS VPN94
Restrictions for RA to MPLS VPN94
Prerequisites for RA to MPLS VPN95
Configuration Tasks for RA to MPLS VPN96
- Configuring the MPLS Core Network96
- Configuring Access Protocols and Connections100
- Configuring and Associating Virtual Private Networks112
  - Configuring Virtual Private Networks112
  - Associating Vpns with a Virtual Template Interface112
- Configuring RADIUS User Profiles for RADIUS-Based AAA114
- Configuration Examples for RA to MPLS VPN114
- Verifying VPN Operation114
- Monitoring and Maintaining an MPLS Configuration123
- Monitoring and Maintaining the MPLS VPN127
- Monitoring and Maintaining Pppox to MPLS VPN131
- Monitoring and Maintaining RBE to MPLS VPN132
- BGP Multipath Load Sharing for Ebgp and Ibgp in an MPLS VPN135
Chapter 4 Configuring Multiprotocol Label Switching135
- Ipv6 VPN over MPLS141
- Session Limit Per VRF149
- Application of VPDN Parameters to VPDN Groups150
- VPDN Template Configuration151
- Feature History for Session Limit Per VRF151
- Restrictions for Session Limit Per VRF151
- Prerequisites for Session Limit Per VRF151
- Configuring Session Limit Per VRF152
- Verifying a Session Limit Per VRF Configuration153
  - Half-Duplex VRF155
    - Upstream and Downstream Vrfs156
    - Reverse Path Forwarding Check Support157
- Configuration Examples for Session Limit Per VRF153
- Monitoring and Maintaining Session Limit Per VRF155
- Feature History for Half-Duplex VRF157
- Restrictions for Half-Duplex VRF157
- Prerequisites for Half-Duplex VRF157
- Configuration Tasks for Half-Duplex VRF158
- Configuration Examples for Half-Duplex VRF160
  - Hub and Spoke Sample Configuration with Half-Duplex Vrfs161
  - RADIUS Sample Configuration162
- Monitoring and Maintaining Half-Duplex VRF163
Configuring the Layer 2 Tunnel Protocol Access Concentrator and Network Server167
- IP Reassembly167
  - Feature History for IP Reassembly168
- Layer 2 Access Concentrator168
- L2TP Network Server188
CHAPTER 6 Configuring Pppoe over Ethernet and IEEE 802.1Q VLAN219
- Pppoe over Ethernet219
- Static MAC Address for Pppoe223
  - Feature History for Static MAC Address for Pppoe224
- Pppoe over IEEE 802.1Q Vlans225
- TCP MSS Adjust230
- VLAN Range233
Chapter 7 Configuring IP Unnumbered on IEEE 802.1Q Vlans237
- Benefits for IP Unnumbered on Vlans238
- Feature History for IP Unnumbered on Vlans238
- Configuration Tasks for IP Unnumbered on Vlans239
  - Configuring IP Unnumbered for an Ethernet VLAN Subinterface239
  - Configuring IP Unnumbered for a Range of Ethernet VLAN Subinterfaces240
- Restrictions for IP Unnumbered on Vlans239
- Configuration Examples for IP Unnumbered on Vlans240
- Monitoring and Maintaining IP Unnumbered Ethernet VLAN Subinterfaces241
- ATM PVC Autoprovisioning243
CHAPTER 8 Configuring ATM Permanent Virtual Circuit Autoprovisioning243
- Variable Bit Rate Non-Real Time Oversubscription256
Chapter 9 Configuring Multihop261
- Feature History for Multihop262
- Required Configuration Tasks for Multihop263
- Restrictions for Multihop263
- Optional Configuration Tasks for Multihop265
  - Specifying VPDN Tunnel Authorization Searches by Ingress Tunnel Name265
  - Preserving the Type of Service Field of Encapsulated IP Packets265
    - Configuring an Accept-Dialin VPDN Group to Preserve IP TOS266
    - Configuring a Request-Dialout VPDN Group to Preserve IP TOS267
- Configuration Examples for Multihop268
- Monitoring and Maintaining Multihop Configurations269
- Address Assignment Mechanisms273
- On-Demand Address Pool Manager276
- Overlapping IP Address Pools288
Configuring Local AAA Server, User Database-Domain to VRF294
- Feature History for Local AAA Server, User Database-Domain to VRF294
- Prerequisites for Local AAA Server, User Database-Domain to VRF294
- Establishing a PPP Connection294
- AAA Attribute Lists296
  - Converting from RADIUS Format to Cisco IOS AAA Format296
  - Defining AAA Attribute Lists297
- Subscriber Profiles297
- AAA Method Lists298
- Attributes298
- Verifying Local AAA Server, User Database-Domain to VRF Using Local Attributes301
- Configuration Example for Local AAA Server, User Database-Domain to VRF301
  - Example-VRF with DBS303
  - Example-VRF with ACL304
- Monitoring and Maintaining Local AAA Server, User Database-Domain to VRF304
Chapter 12 Configuring Traffic Filtering305
- IP Receive Acls305
- Time-Based Acls308
Chapter 13 Unicast Reverse Path Forwarding315
- Feature History for Urpf316
- Prerequisites for Urpf316
- Restrictions for Urpf316
- Configuring Unicast RPF317
- Monitoring and Maintaining Urpf318
- Configuration Examples of Urpf320
Chapter 14 Configuring Automatic Protection Switching323
- Multirouter Automatic Protection Switching323
- Single-Router Automatic Protection Switching331
Chapter 15 Configuring IP Multicast337
- Configuration Tasks for IP Multicast Routing338
- Feature History for IP Multicast338
- Restrictions for IP Multicast338
Chapter 16 Configuring RADIUS Features343
- RADIUS Attribute Screening343
- RADIUS Transmit Retries346
- Extended NAS-Port-Type and NAS-Port Support348
- RADIUS Attribute 31: Pppox Calling Station ID355
- RADIUS Packet of Disconnect359
Chapter 17 Cisco 10000 Series Router PXF Stall Monitor365
- Feature History of Cisco 10000 Series Router PXF Stall Monitor365
- Information about Cisco 10000 Series Router PXF Stall Monitor365
  - Recovery Actions367
- Restrictions for Cisco 10000 Series Router PXF Stall Monitor367
- Configuring Cisco 10000 Series Router PXF Stall Monitor368
- Configuration Example of Cisco 10000 Series Router PXF Stall Monitor369
Chapter 18 SSO-BFD373
- Feature History of SSO-BFD373
- Information about SSO-BFD373
- Restrictions of SSO-BFD375
- Configuration Examples of SSO-BFD376
- Monitoring and Maintaining SSO-BFD376
- About Link Noise Monitoring393
Chapter 19 Configuring Link Noise Monitoring393
Chapter 20 Configuring L2 Virtual Private Networks399
- Feature History for L2VPN401
- Supported L2VPN Transport Types401
- Prerequisites for L2VPN: Atom402
  - Supported Line Cards402
- Restrictions for L2VPN403
- Standards and Rfcs403
Mibs404
- NSF and SSO-L2VPN404
- L2VPN Local Switching-HDLC/PPP408
- Configuration Tasks for L2VPN410
- Monitoring and Maintaining L2VPN441
- Configuration Example-Frame Relay over MPLS442
- Any Transport over MPLS-Tunnel Selection445
  - Configuration Example-Any Transport over MPLS: Tunnel Selection445
- Bridged Interworking449
  - Ethernet to VLAN-Bridged Interworking450
Chapter 21 Configuring L2VPN Interworking449
- Routed Interworking452
  - Restrictions for Routed Interworking453
- Ethernet/Vlan to ATM AAL5 Interworking453
- Ethernet/Vlan to Frame Relay Interworking465
- ATM to Frame Relay-Routed Interworking475
  - Configuration Tasks and Examples476
    - Local Switching476
    - Atom477
- Verifying L2VPN Interworking478
Chapter 22 Configuring Multilink Point-To-Point Protocol Connections479
- Multilink Point-To-Point Protocol479
  - Feature History for Multilink PPP480
- MLP Bundles481
- Types of MLP Bundle Interfaces482
- MLP Groups483
  - MLP Group Interfaces and Virtual Template Interfaces484
- How MLP Determines the Link a Bundle Joins484
- IP Addresses on MLP-Enabled Links485
- Valid Ranges for MLP Interfaces486
- Configuration Commands for MLP487
- MLP Overhead487
- MLP over Serial Interfaces491
  - Performance and Scalability for MLP over Serial Interfaces492
  - Restrictions and Limitations for MLP over Serial Interfaces492
- Single-VC MLP over ATM Virtual Circuits493
  - Performance and Scalability for Single-VC MLP over ATM493
  - Restrictions and Limitations for Single-VC MLP over ATM493
- Multi-VC MLP over ATM Virtual Circuits494
  - Performance and Scalability for Multi-VC MLP over ATM Vcs495
  - Restrictions and Limitations for Multi-VC MLP over ATM Vcs495
MLP on LNS496
- About MLP on LNS497
- PPP Multilink Links Max Command499
  - Performance and Scalability of MLP on LNS499
- PXF Memory and Performance Impact for MLP on LNS499
  - Scenario 1500
  - Scenario 2500
- Restrictions and Limitations for MLP on LNS501
- Configuring MLP on LNS502
- Mlpoe LAC Switching502
  - Restrictions for Mlpoe LAC Switching502
- Mlpoe at PTA503
- Configuring MLP Bundles and Member Links505
- MLP-Based Link Fragmentation and Interleaving505
- Configuration Examples for Configuring MLP516
- Verifying and Monitoring MLP Connections521
  - Bundle Counters and Link Counters522
  - Verification Examples for MLP Connections522
- Related Documentation524
Chapter 23 Configuring Gigabit Etherchannel Features527
- Feature History for Gigabit Etherchannel528
- Configuring Qos Service Policies on GEC Interfaces529
  - Restrictions for Qos Service Policies on GEC Bundles531
  - Configuration Examples531
    - Configuration Example for Using the VLAN Group Feature to Apply Qos on Member Links531
    - Configuration Example for Applying Qos on GEC Bundle Subinterfaces531
- Prerequisites for Gigabit Etherchannel Configuration529
- Restrictions for Gigabit Etherchannel Configuration529
- Configuring IEEE 802.1Q and Qinq Support on GEC Bundle533
- Configuring Policy Based Routing Support on a GEC Bundle533
  - Restriction for Configuring PBR Support on a GEC Bundle533
- Configuring MVPN Support on GEC Bundle535
  - Configuration Tasks and Examples535
- Configuring Pppox Support on a GEC Bundle535
- Configuring 8 Member Links Per GEC Bundle537
  - Configuration Tasks537
- Configuring High Availability Support on GEC Bundle537
- Configuring VLAN-Based Load Balancing538
Chapter 24 Configuring IP Version545
- Feature History for Ipv6545
- Supported Features545
- Limitations for Ipv6547
- Ipv6 Extended Acls548
Chapter 25 Configuring Template Acls553
- Feature History for Template Acls554
- Configuration Tasks for Template Acls555
- Configuration Examples for Template Acls557
  - Access-List Template Command557
  - Show Access-List Template Command558
- Monitoring and Maintaining the Template ACL Configuration557
Chapter 26 Protecting the Router from Dos Attacks563
- IP Options Selective Drop563
  - Chapter 26 Protecting the Router from Do Attack564
  - Feature History for IP Options Selective Drop564
- How to Configure IP Options Selective Drop564
  - Dropping Packets with IP Options564
  - Verifying IP Options Packets565
- Restrictions for IP Options Selective Drop564
- Configuration Examples for IP Options Selective Drop565
  - Dropping IP Options Packets: Example565
  - Verifying IP Options Handling: Example566
- Related Documentation566
Chapter 27 IP Tunneling567
- GRE Tunnel IP Source and Destination VRF Membership567
  - Tunnel VRF567
  - VRF-Aware VPDN Tunnels568
- Feature History for GRE Tunnel IP Source and Destination VRF Membership568
- How to Configure GRE Tunnel IP Source and Destination VRF Membership569
  - Configuring Tunnel VRF569
  - Configuring VRF-Aware VPDN Tunnels570
- Restrictions for GRE Tunnel IP Source and Destination VRF Membership569
- Configuration Examples570
  - Configuration Example for Tunnel VRF570
  - Configuration Examples for VRF-Aware VPDN Tunnels571
Appendix573
RADIUS Attributes573
- RADIUS IETF Attributes573
- Vendor-Proprietary RADIUS Attributes576
- Vendor-Specific RADIUS IETF Attributes580
G L O S S a R y585
I N D E X597

Cisco 10000-2P2-2DC - Page 313

Table of Contents

Related product manuals