Patton electronics SmartNode Series

To Next Page

To Previous Page

Sample configurations 378

SmartWare Software Configuration Guide 32 • VPN configuration

...

For the remainder of the conﬁguration (see above), just change the name of the IPsec policy proﬁle in the ACL

proﬁle VPN_Out.

Main Page

Default Chapter3
- Summary Table of Contents3
- Table of Contents5
- List of Figures27
- List of Tables29
- About this Guide30
Chapter 1 System Overview39
- Introduction39
- Smartware Embedded Software40
- Basic System (Abstract) Model40
  - Applications41
    - Carrier Networks41
- Typical Carrier Network Application with a Smartnode41
  - Enterprise Networks42
- Typical Enterprise Network with Smartnode42
  - LAN Telephony43
- Typical LAN Telephony System with a Smartnode Gateway43
- Configuration Concepts45
Chapter 2 Configuration Concepts45
- Introduction45
- Contexts and Gateways46
  - Context46
  - Gateway46
- Interfaces, Ports, and Bindings47
- Profiles and Use Commands48
  - Profiles48
  - Use Commands48
- Command Line Interface (CLI)49
Chapter 4 Accessing the CLI54
- Introduction54
- Accessing the Smartware CLI Task List54
- Login Display57
  - Password Encryption58
- System Image Handling64
Chapter 5 System Image Handling65
- Introduction65
- Memory Regions in Smartware66
- System Image Handling Task List67
- Auto Provisioning of Firmware and Configuration71
- Boot Procedure73
- Factory Configuration74
  - Default Startup Configuration74
  - IP Addresses in the Factory Configuration74
- Configuration File Handling75
Chapter 6 Configuration File Handling76
- Introduction76
  - Understanding Configuration Files76
- Factory Configuration78
- Configuration File Handling Task List78
  - Copying Configurations Within the Local Memory79
- Local Memory Regions79
  - Replacing the Startup Configuration with a Configuration from Flash Memory80
  - Copying Configurations to and from a Remote Storage Location81
- Remote Memory Regions for Smartware81
- Basic System Management89
Chapter 7 Basic System Management90
- Introduction90
- Basic System Management Configuration Task List90
- System Banner with Message to Operators93
- RADIUS Client Configuration101
Chapter 8 RADIUS Client Configuration102
- Introduction102
- The AAA Component102
  - General AAA Configuration103
- Authentication Procedure with a RADIUS Server103
  - RADIUS Configuration105
  - Configuring the Local Database Accounts110
- IP Context Overview112
Chapter 9 IP Context Overview113
- Introduction113
- IP Context and Related Elements113
- IP Interface Configuration118
Chapter 10 IP Interface Configuration119
- Introduction119
- IP Interface Configuration Task List119
- Configuring the IGMP Proxy129
- NAT/NAPT Configuration130
Chapter 11 NAT/NAPT Configuration131
- Introduction131
- Dynamic NAPT132
  - Static NAT133
  - NAPT Traversal133
- Dynamic NAT133
  - NAT/NAPT Configuration Task List134
- Ethernet Port Configuration139
Chapter 12 Ethernet Port Configuration140
- Introduction140
- Ethernet Port Configuration Task List140
- Binding of an Ethernet Port to an IP Interface142
- Link Scheduler Configuration149
Chapter 13 Link Scheduler Configuration150
- Introduction150
- Packet Routing in Smartware151
- Example of Hierarchical Scheduling153
  - Command Cross Reference154
  - Link Scheduler Configuration Task List154
- Scenario with Web Server Regarded as a Single Source Host156
  - Creating a Service Policy Profile157
  - Specifying the Handling of Traffic-Classes159
- TOS Values and Their Meaning161
- Serial Port Configuration168
Chapter 14 Serial Port Configuration169
- Introduction169
- Serial Port Configuration Task List169
- Frame Relay Configuration175
Chapter 15 Frame Relay Configuration176
- Introduction176
- Frame Relay Configuration Task List176
- IP Interface Wan Is Bound to PVC 1 on Port Serial 0 0181
- Typical Integrated Service Access Scenario with Dedicated Pvcs185
- IP Context with Logical IP Interfaces Bound to Ethernet Port, Serial Port PVC 1 and PVC 2186
  - Example 1: Frame Relay on E1T1 Without a Channel-Group187
- PRI Port Configuration189
Chapter 16 PRI Port Configuration190
- Introduction190
- PRI Port Configuration Task List190
- BRI Port Configuration203
Chapter 17 BRI Port Configuration204
- Introduction204
- BRI Port Configuration Task List204
- ISDN Overview210
Chapter 18 ISDN Overview211
- Introduction211
- ISDN Signaling Side212
- Integration of ISDN Access Lines213
  - ISDN Configuration Concept214
    - ISDN Layering214
- ISDN Layering Model214
- ISDN Configuration215
Chapter 19 ISDN Configuration216
- Introduction216
- ISDN Configuration Task List216
- PBX Connected to ISDN Port 1/0222
- RBS Configuration223
Chapter 21 DSL Port Configuration229
- Introduction229
- Line Setup229
- Configuring Pppoe229
- Configuration Summary230
- Setting up Permanent Virtual Circuits (PVC)231
  - Using PVC Channels in Bridged Ethernet Mode231
  - Using PVC Channels with Pppoe231
- PVC Commands231
- PVC Channels in Bridged Ethernet Mode231
- PVC Channels in Pppoe Mode231
  - Pvc231
    - Diagnostics232
  - Troubleshooting DSL Connections232
- Diagnostics Commans232
- Basic IP Routing Configuration233
Chapter 22 Basic IP Routing Configuration234
- Introduction234
- Basic IP Routing Configuration Task List234
- Examples238
  - Basic Static IP Routing Example238
- Internetwork with Three Routers and Four Networks238
  - Changing the Default UDP Port Range for RTP and RTCP239
- RIP Configuration240
Chapter 23 RIP Configuration241
- Introduction241
- Routing Protocol241
- RIP Configuration Task List242
- Access Control List Configuration251
Chapter 24 Access Control List Configuration252
- Introduction252
- About Access Control Lists252
- Access Control List Configuration Task List254
- Examples264
  - Denying a Specific Subnet264
- SNMP Configuration265
Chapter 25 SNMP Configuration266
- Introduction266
- Simple Network Management Protocol (SNMP)266
- Identification of a Smartnode Via SNMP267
- SNMP Tools268
- SNMP Configuration Task List268
- Setting Basic System Information268
- Setting Access Community Information270
- Adventnet Mibbrowser Displaying some of the System Group Objects270
- Adventnet Mibbrowser Settings Button on the Toolbar274
  - Using the Trapviewer275
- Adventnet Trapviewer Displaying Received Traps275
- Adventnet Trap Details Window of Trapviewer276
- Details Available in the Trap Details Window276
  - Standard SNMP Version 1 Traps277
  - SNMP Interface Traps278
- SNTP Client Configuration280
Chapter 26 SNTP Client Configuration281
- Introduction281
- SNTP Client Configuration Task List281
- Recommended Public SNTP Time Servers288
  - NIST Internet Time Service288
- Time Servers Operated by NIST288
  - Additional Information on NTP and a List of Other NTP Servers289
- DHCP Configuration290
Chapter 27 DHCP Configuration291
- Introduction291
- DHCP-Client Configuration Tasks292
  - Enable DHCP-Client on an IP Interface292
- DHCP-Client and DHCP-Server292
- DNS Configuration302
Chapter 29 Dyndns Configuration307
- Introduction307
- Dyndns Configuration Task List307
- PPP Configuration311
Chapter 30 PPP Configuration312
- Introduction312
- PPP Configuration Task List313
- Sample Configurations327
- PPP Dial-Up over ISDN329
  - PPP Dialer329
  - Dial-Up335
- CS Context Overview337
Chapter 31 CS Context Overview338
- Introduction338
- CS Context Configuration Task List339
- Planning the CS Configuration339
- Configuring General CS Settings341
- Configuring Call Routing343
- Creating and Configuring CS Interfaces344
  - Specify Call Routing344
- Direct Call Routing from One Smartnode to Another344
- Smartnode in an Enterprise Network349
- VPN Configuration360
Chapter 32 VPN Configuration361
- Introduction361
  - Authentication361
  - Encryption361
  - Transport and Tunnel Modes362
    - Permanent IKE Tunnels362
  - Key Management362
- VPN Configuration Task List363
  - Creating an Ipsec Transformation Profile363
  - Creating an Ipsec Policy Profile363
  - Creating/Modifying an Outgoing ACL Profile for Ipsec365
  - Configuration of an IP Interface and the IP Router for Ipsec366
  - Displaying Ipsec Configuration Information366
  - Debugging Ipsec367
- Key Management (IKE)368
  - Main Differences between Manual & IKE IPSEC Configurations368
  - Creating an ISAKMP Transform Profile369
  - Creating an ISAKMP IPSEC Policy Profile370
  - Creating/Modifying an Outgoing ACL Profile for IPSEC371
  - Configuration of an IP Interface and the IP Router for IPSEC371
  - Policy Matching371
  - Sample Configuration Snippet371
  - Troubleshooting372
- Encrypted Voice - Performance Considerations373
  - Performance Considerations373
- Enabling RTP Encryption Support373
- Using an Alternate Source IP Address for Specific Destinations374
- Sample Configurations375
  - Ipsec Tunnel, des Encryption375
    - Smartnode Configuration375
    - Cisco Router Configuration376
  - Ipsec Tunnel, AES Encryption at 256 Bit Key Length, AH Authentication with HMAC-SHA1-96376
    - Smartnode Configuration376
  - Ipsec Tunnel, 3DES Encryption at 192 Bit Key Length, ESP Authentication with HMAC-MD5-96377
    - Cisco Router Configuration377
    - Smartnode Configuration377
- CS Interface Configuration379
  - Configuring Call Routing379
  - CS Interface Configuration Task List380
  - CS Interfaces on the CS Context380
  - Introduction380
  - Incoming Call Passing an Interface Mapping Table385
    - Configuring the Precall Service Tables386
  - Call Passing an Input and an Output Mapping Table386
- ISDN Interface Configuration388
  - Introduction389
  - ISDN Interface Configuration Task List389
  - ISDN Interfaces on the CS Context389
- FXS Interface Configuration402
  - Configuring an Alternate PSTN Profile (Optional)402
  - Introduction403
  - FXS Interface Configuration Task List403
    - Configuring a Subscriber Number (Recommended)403
  - FXS Interfaces on the CS Context403
  - FXS Services with Permanent Patterns405
- FXO Interface Configuration409
  - Configuring an Alternate PSTN Profile (Optional)409
  - Introduction410
  - FXO Interfaces on the CS Context410
  - CS Configuration419
    - FXO Interface Examples420
- RBS Interface Configuration421
  - Introduction422
  - RBS Interface Configuration Task List422
  - Creating/Deleting a RBS Interface422
- Interface Configuration426
  - Introduction427
  - H.323 Interfaces on the CS Context427
- SIP Interface Configuration436
  - Introduction437
  - SIP Interface Configuration Task List437
  - SIP Interfaces on the CS Context437
- Call Router Configuration451
  - Introduction453
  - Direct Call Routing Vs. Advanced Call Routing454
    - Call Router Configuration Task List455
    - Map out the Goals for the Call Router455
    - Configure Address Completion Timeout456
    - Configure General Call Router Behavior456
    - Enable Advanced Call Routing on Circuit Interfaces456
    - Configure Default Digit Collection Timeout and Terminating Character457
    - Configure Number Prefix for ISDN Number Types458
  - ISDN Number Types458
    - Configure Call Routing Tables459
    - Create a Routing Table459
  - Routing Table Outline459
  - Routing Table Types459
    - Called Party Number Routing Table461
    - Regular Expressions461
  - Wildcard Symbols Used as Keys in E.164 Tables (Calling-E164, Called-E164)462
    - Digit Collection463
  - Wildcard Symbols Used as Keys in E.164 Tables (Calling-E164, Called-E164)463
    - Digit Collection Variants464
    - Calling Party Number Routing Table467
    - Number Type Routing Table467
  - Numbering Plan Routing Table468
  - Name Routing Table469
  - IP Address Routing Table469
  - URI Routing Table470
  - Presentation Indicator Routing Table470
  - Screening Indicator Routing Table471
  - Information Transfer Capability Routing Table472
  - Call-Router Support for Redirecting Number and Redirect Reason473
  - Time of Day Routing Table474
  - Day of Week Routing Table474
  - Date Routing Table474
  - Deleting Routing Tables475
  - Configure Mapping Tables476
  - Mapping Table Outline476
  - Mapping Table Types477
  - Mapping Table Examples479
  - E.164 to E.164 Mapping Tables480
  - Custom SIP Uris from Called-/Calling-E164 Properties483
  - Other Mapping Tables483
  - Deleting Mapping Tables484
  - Creating Complex Functions485
  - Deleting Complex Functions486
  - Digit Collection & Sending-Complete Behavior487
    - Ingress Interface487
    - Sending-Complete487
    - Call-Router488
    - Egress Interface490
  - Creating Call Services492
  - Creating a Hunt Group Service492
  - Hunt Group Service493
  - Hunt Group Drop Causes495
  - Creating a Distribution Group Service501
  - Distribution Group Service501
  - Distribution Group Service Examples502
  - Distribution-Group Min-Concurrent Setting503
  - Call-Router 'Limiter' Service503
  - Priority Service504
  - Limiter' Service Diagram504
  - Priority Service Diagram505
  - CS Bridge Service-'Voip Leased Line506
  - CS Bridge Service-'Voip Leased Line' Diagram506
  - Bridge Services Diagram507
  - Configuring the Service Second-Dialtone508
  - Deleting Call Services509
  - Activate the Call Router Configuration509
  - Test the Call Router Configuration510
  - Call Routing Example Network512
  - CS Context and Call Router Elements514
  - Configure Partial Rerouting516
    - Allow Push-Back517
    - Call Reroute517
    - Enable Acceptation of Rerouting Requests on ISDN517
    - Enable Emission of Rerouting Requests on ISDN517
    - Enable Push-Back - Aaa Service517
    - Enable Sending of "302 Moved Temporary" Message on SIP517
    - Enable Push-Back - Bridge Service518
    - Enable Push-Back - Distribution-Group Service518
    - Enable Push-Back - Hunt Group Service518
    - Enable Push-Back - Limiter Service518
    - Enable Push-Back - Priority Service518
- SIP Call-Router Services519
  - Introduction520
  - SIP Conference-Service520
  - "Location Service521
  - Registration and Lookup522
- Tone Configuration524
  - Introduction525
  - Tone-Set Profiles525
  - Tone Configuration Task List526
    - Configuring Call-Progress-Tone Profiles526
  - Assign Tone-Sets to a PSTN Interfaces526
- FXS Port Configuration533
  - Introduction533
  - Shutdown and Enable FXS Ports533
  - Bind FXS Ports to Higher Layer Applications534
  - Configure Country-Specific FXS Port Parameters534
  - Example535
    - FXO Port Configuration537
  - Other FXS Port Parameters535
  - Bind FXO Ports to Higher Layer Applications538
- FXO Port Configuration538
  - Introduction538
  - Shutdown and Enable FXO Ports538
  - Configure Country Specific FXO Port Parameters539
  - Other FXO Port Parameters539
- 323 Gateway Configuration541
  - Gateway between IP and CS Contexts542
- H.323 Gateway Configuration542
  - Introduction542
- Context SIP Gateway Overview554
  - Introduction555
  - Routing Architecture555
- Voip Profile Configuration568
  - Introduction569
  - Voip Profile Configuration Task List570
  - DTMF Relay574
  - Jitter and Dejitter Buffer576
  - Adaptive Versus Static Dejitter Buffer577
    - Enabling/Disabling Filters (Advanced)578
    - Configuring Fax Transmission579
  - Fax Relay and Fax Bypass580
- PSTN Profile Configuration592
  - Introduction593
  - PSTN Profile Configuration Task List593
  - Applying Output Gain594
  - Echo Cancellation594
- SIP Profile Configuration596
  - Introduction597
  - SIP Profile Configuration Task List597
- Authentication Service599
  - Introduction600
  - Authentication Service Configuration Task List600
  - Configuration Examples601
- Location Service602
  - Introduction603
  - Location Service Configuration Task List603
  - Configuration Examples614
- Voip Debugging615
  - Introduction616
  - Debugging Strategy616
  - Filtering Debug Monitor Output617
  - Verifying IP Connectivity617
  - Debugging Call Signaling618
  - Debugging Voice Data631
    - Check System Logs633
    - How to Submit Trouble Reports to Patton633
- A Terms and Definitions635
  - Introduction636
  - Smartware Architecture Terms and Definitions636
- Mode Summary641
  - Mode Overview, 1 of 3642
    - Introduction642
  - Mode Overview, 2 of 3643
  - Mode Overview, 3 of 3644
- Command Summary645
  - Introduction646
  - EBNF Syntax646
- Internetworking Terms & Acronyms648
  - Abbreviations649
- Used IP Ports & Available Voice Codecs653
  - Used IP Ports654
  - Available Voice Codecs655

Patton electronics SmartNode Series - Page 378

Table of Contents