Cisco AS5300-96VOIP-A, AS5300 Software Configuration Manual

Download

170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com

Cisco Systems, Inc.

Corporate Headquarters

Tel:

800 553-NETS (6387)

408 526-4000

Fax: 408 526-4100

Cisco AS5300 Universal Access Server Software Configuration Guide

Customer Order Number: DOC-AS5300-SCG= Text Part Number: 78-4534-05

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The following information is for FCC compliance of Class A devices: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio-frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case users will be required to correct the interference at their own expense.

The following information is for FCC compliance of Class B devices: The equipment described in this manual generates and may radiate radio-frequency energy. If it is not installed in accordance with Cisco’s installation instructions, it may cause interference with radio and television reception. This equipment has been tested and found to comply with the limits for a Class B digital device in accordance with the specifications in part 15 of the FCC rules. These specifications are designed to provide reasonable protection against such interference in a residential installation. However, there is no guarantee that interference will not occur in a particular installation.

You can determine whether your equipment is causing interference by turning it off. If the interference stops, it was probably caused by the Cisco equipment or one of its peripheral devices. If the equipment causes interference to radio or television reception, try to correct t he interference by using one or more of the following measures:

• Turn the television or radio antenna until the interference stops.

• Move the equipment to one side or the other of the television or radio.

• Move the equipment farther away from the television or radio.

• Plug the equipment into an outlet that is on a different circuit from the television or radio. (That is, make certain the equipment and the television or radio are on circuits controlled by different circuit breakers or fuses.)

Modifications to this product not authorized by Cisco Systems, Inc. could void the FCC approval and negate your authority to operate the product. The following third-party software may be included with your produ ct and will be subject to the sof tware lice ns e agree ment: CiscoWorks software and documentation are based in part on HP OpenView under license from the Hewlett-Packard Company. HP OpenView is a

trademark of the Hewlett-Packard Company. Copyright © 1992, 1993 Hewlett-Packard Company. The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of

UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California. Network Time Protocol (NTP). Copyright © 1992, David L. Mills. The University of Delaware makes no representations about the suitability of this

promote products derived from this software without s pe cific prior written permission. The Cisco implementation of TN3270 is an adaptation of the TN3270, curses, and termcap programs developed by the University of California, Berkeley

Cisco incorporates Fastmac and TrueView software and the RingRunner chip in some Token Ring products. Fastmac software is licensed to Cisco by Madge Networks Limited, and the RingRunner chip is licensed to Cisco by Madge NV. Fastmac, Ring Ru nner, and TrueView are trademarks and in some jurisdictions registered trademarks of Madge Networks Limited. Copyright © 1995, Madge Networks Limited. All rights reserved.

XRemote is a trademark of Network Computing Devices, Inc. Copyright © 1989, Network Computing Devices, Inc., Mountain View, California. NCD makes no representations about the suitability of this software for any purpose.

PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

AccessPath, AtmDirector, Browse with Me, CCDA, CCDE, CCDP, CCIE, CCNA, CCNP, CCSI, CD-PAC, CiscoLink, the Cisco NetWorks logo, the Cisco Powered Network logo, Cisco Systems Networking Academy, the Cisco Systems Networking Academy logo, Fast Step, Follow Me Browsing, FormShare, FrameShare, GigaStack, IGX, Internet Quotient, IP/VC, iQ Breakthrough, iQ Expertise, iQ FastTrack, the iQ Logo, iQ Net Readiness Scorecard, MGX, the Networkers logo, Packet, RateMUX, ScriptBuilder, ScriptShare, SlideCast, SMARTnet, TransPath, Unity, Voice LAN, Wavelength Router, and WebViewer are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, Discover All That’s Possible, and Empowering the Internet Generation, are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, Cisco, the Cisco Certified Internetwork Ex pert logo , Cisco IOS , the Cis co IOS lo go, Cis co Sy stems, C isco Sy stems Capi tal, the C isco Systems logo, Enterprise/Solver, Ether Chann el, EtherS witch, FastH ub, FastS witch, IOS, IP/ TV, LightS tream, MICA, Netw or k Registr ar, PIX, Post- R o uti ng, Pre-Routing, Registrar, StrataView Plus, Stratm, SwitchProbe, TeleRouter, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries .

All other brands, names, or trademarks menti oned in thi s docume nt or Web site ar e the property of thei r respectiv e owners . The use of the word partner does not imply a partnership relat ionship bet ween Cisco and any other com pany. (010 4R)

Cisco AS5300 Universal Access Server Software Configuration Guide

Contents v

Preface xi

Document Objectives xi Changes to This Guide xi Document Organization xii Where to Get the Latest Version of This Guide xii Conventions xiii Related Documentation xv Cisco Connection Online xv

Chapter 1 First-Time Configuration 1-1

Using the Setup Script 1-1

Getting Started 1-1

Where to Go Next 1-12

Chapter 2 Using Cisco IOS Software 2-1

Getting Help 2-1 Understanding Command Modes 2-2 How to Find Command Options 2-2 Undoing a C ommand or Feature 2-4 Saving Configuration Changes 2-4 Where to Go Next 2-4

Chapter 3 Basic Configuration 3-1

Configuring the Host Name and Password 3-2

Configure 3-2 Verify 3-2

Configuring Alarms 3-3

Configure 3-3 Verify 3-4

Configuring Ethernet 10BaseT 3-4

Configure 3-5 Verify 3-5

Configuring Ethernet 100BaseT 3-5

Configure 3-6 Verify 3-7

Configuring Synchronous Serial Interfaces for WAN Support 3-8

Configure 3-8 Verify 3-9

Configuring Channelized T1 or E1 3-10

Configure 3-10 Verify 3-10

CONTENTS

Book Title

Configuring ISDN PRI 3-11

Configure 3-12 Verify 3-13

Configuring E1 R2 Signaling 3-16

Configure 3-16 Country Codes for R2 Signaling 3-18 Verify 3-19

Configuring the Asynchronou s Group Inter face 3-21

Configure 3-21 Verify 3-22

Configuring the D Channels for Modem Signaling 3-24

Configure 3-24 Verify 3-25

Configuring the Modems 3-28

Configure 3-28 Country Code Tables 3-29 Resetting to Default Values for Country Codes 3-30 Verify 3-30

Configuring Modem Pooling 3-33

Verify 3-34

Configuring Resource Pooling and Session Counting 3-35

Configure 3-35 Verify 3-38

Configuring Voice Network Data 3-39

Configure 3-39 Verify 3-39

Configuring T1 CAS for VoIP 3-41

Configure 3-41 Verify 3-42

Configuring IP Networks for Real-Time Voice Traffic 3-44

Configure 3-44 Verify 3-45

Configuring RLM 3-46

Configure 3-46 Verify 3-47

Configuring ISL for VLAN Routing 3-48

Configure 3-48 Verify 3-49

Configuring IPX Networks 3-50

Configure 3-50 Verify 3-51

Configuring AppleTalk 3-52

Configure 3-52 Verify 3-52

Contents vii

Configuring MMP 3-55

Configure 3-55 Verify 3-56 Creating Authentication Accoun ts 3-57

Configuring VPDN 3-58

Configure 3-58 Verify 3-58 Creating Authentication Accoun ts 3-60

Using Continuity Test (COT) 3 -60

Configure 3-60 Verify 3-60

Saving Configuration Changes 3-63

Configure 3-63 Comprehensive Configuration Examples 3-63 Where to Go Next 3-72

Chapter 4 Access Service Security 4-1

Assumptions 4-2 Local Versus Remote Server Authentication 4-2

Local Security Database 4-2

Remote Security Database 4-3 Configuring Authentication 4-4

Securing Access to Privileged EXEC and Configuration Mode 4-4

Communicating Between the Access Server and the Security Server 4-6

Communicating with a TACACS+ Server 4-7

Communicating with a RADIUS Server 4-8 Configuring Authentication on a TACACS+ Server 4-9 Enabling AAA Globally on the Access Server 4-9 Defining Authentication Method Lists 4-10 Authentication Method List Examples 4-14 Applying Authentication Method Lists 4-15

Configuring Authorization 4-17

Configuring Authorization on the Access Server 4-17 Specifying the Authorization Method 4-18 Specifying Authorization Parameters on a TACACS+ Server 4-18 Authorization Examples 4-18

Security Examples 4-19

Simple Local Security Example 4-19 TACACS+ Security Example for Login, PPP, and ARA 4-19

viii

Book Title

Appendix A Managing Modems A-1

Monitoring Modems A-2

Configuring Microcom Modems for Monitoring A-2 Configuring MICA Modems for Monitoring A-3 Modem Performance Statistics Commands A-4

Managing Modems A-5

Check Modem Type A-5 Set Modem Event Buffer A-5 Remove Inoperable Modems from Service A-6

Polling Modems A-6

Set Polling Attempts A-6 Set Time Interval between Polls A-6 Poll for Modem Statistics A-6

Troubleshooting Modems A-7

Perform a Modem Startup Test A-7 Test Two Modems Back-to-Back A-7 Hold and Reset a Modem A-8 Disable a Modem from Dial-Up Services A-8 Debug a Modem A-8

Upgrading Modem Code A-9

How to Obtain Modem Code A-9 Important Modem Upgrade Commands A-10 Choosing an Update Strategy A-10 Modem Code Scenarios A-11 Displaying Modem Code Versions A-13 Upgrading Modem Code from the Cisco CCO TFTP Server A-14

Download Modem Code from the Cisco CCO TFTP Server to a Local TFTP Server A-14

Copy the Modem Code File from Local TFTP Server to Modems A-18 Upgrading Modem Code from Diskettes A-21

Copy the Modem Code to Your PC Hard Disk A-21

Copy the Modem Code from Your PC to the Modems A-21 Using the Modem Code Bundled with Cisco IOS Software A-25

Appendix B ROM Monitor B-1

Entering the ROM Monitor Program B-1 ROM Monitor Command Conventions B-1 Command Aliasing B-2 ROM Monitor Commands B-2

Appendix C Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-1

Getting Started C-1 Running Setup for Cisco IOS Release 11.2 C-2 Running Setup for Cisco IOS Release 11.3(2)T C-10

Continuing the Setup Script for T1/PRI Cards C-14 Continuing the Setup Script for E1/PRI Cards C-17

Where to Go Next C-23

Contents ix

Appendix D Upgrade VoIP Software D-1

Upgrading VoIP Feature Card Firmware D-2

Determine the number of VFC cards D-2 Identify the VFC ROM Monitor Version D-2 Identify the VFC/ROM Monitor Mode D-3 Download Software in VCWare Mode D-3 Download Software in ROM Monitor Mode D-5

New Hardware Features D-7

Index

Book Title

Preface ix

Preface

This chapter discusses the revisions made to this publication, describes how to get the latest version of this publication, the conventions used in this guide, and related documentation.

Cisco documentation and additional literature are available on a CD-ROM, which ships with your product. The Documentation CD-ROM, a member of the Cisco Connection Family, is updated monthly; therefore, it might be more up to date than printed documentation. To order additional copies of the Documentation CD-ROM, contact your local sales representative or call customer service. The CD-ROM is av ailable as a single item or as an annual subscription. You can also access Cisco documentation on the World Wide Web at http://www.cisco.com, http://www-china.cisco.com, or http://www-europe.cisco.com.

If you are reading Cisco product document ation on the World Wide W e b, you can submit comments electronically . Click Feedback on the toolbar and select Documentation. After you complete the form, click Submit to send it to Cisco. We appreciate your comments.

Document Objectives

This configuration guide explains the initial and basic software configuration procedures for the Cisco AS5300 Universal Access Server. The guide contains pr ocedures for runn ing the se tup scri pt for various Cisco IOS software versions, manually configuring the access server, setting up basic security, managing modems, and how to use the ROM monitor.

After completing the basic configuration procedures covered in this guide, you can then use the appropriate companion publications to mo re completely conf igu re your system. F or info rmation on other publications available, s ee the section “Related Documentation.”

Changes to This Guide

New/Changed Feature Description

Setup script for Cisco IOS Release 12.02(XD) The setup script has bee n updated to reflect th e changes

for the Cisco IOS Release 12.02(XD).

Serial interfaces for WAN support Procedures include how to enable the serial interface,

specify IP routing, and set up external clock timing on a DCE or DTE interface.

BERT Briefly describes the Bit Error Rate Tester (BERT)

feature used to test T1 or E1 links.

Document Organization

Cisco AS5300 Universal Access Server Software Configuration Guide

Document Organization

This configuration guide is organized into the following chapters and appendixes:

• Chapter 1, “First-Time Configuration,” describes how to run the setup script to do a basic

configuration.

• Chapter 2, “Using Cisco IOS Software,” is a brief overview of how to use the command-line

interface (CLI) to configure the access server.

• Chapter 3, “Basic Configuration,” provides instructions for configuring the various features of

the access server using the CLI.

• Chapter 4, “Access Service Security,” describes the basic access server authentication,

authorization, and accounting (AAA) security facility.

• Appendix A, “Managing Modems,” describes how to manage your modems using moni toring,

polling, and troubleshooting commands.

• Appendix B, “ROM Monitor,” describes how to use the Cisco AS5300 ROM monitor to isolate

or rule out hardware problems encoun tered when installing your access server.

• Appendix C, “Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T,” describes the setup script

for Cisco IOS releases 11.2 and 11.3(2)T.

Where to Get the Latest Version of This Guide

The hard copy of this guid e is up dated at m ajor releases only and does not al ways contain the latest material for enhancements occurring between major releases. You are shipped separate release no tes or configuration notes for spares, hardware, and software enhancements occurring between major releases.

ISDN PRI Provides an updated list of the switches and also two new

commands used to monitor Non-Facility Associated Signaling (NFAS) groups and ISDN service and channels.

Resource pooling and session co unt ing Describes how to construct unique customer profiles,

groups of DNIS numbers, and tabulate the number of active connections, calls accepted, calls rejec ted for each customer profile, and system resour ces over specific time.

T1 CAS and E1 R2 signaling. Describes how to configure T1 CAS and E1 R2 signaling

with Voice over IP (VoIP).

COT Describes how use to use Continuity Test (COT) required

by the SS7 network to conduct loop back and tone check testing on the path before a circuit is established. It is required for North American SS7 compliance.

RLM Describes how to use Redun dant Link Manager (RLM),

which provides a virtual link management over multiple IP networks so that the Q.931 signaling protocol and other proprietary protocols can be transported on top of multiple redundant links between the Cisco signaling controller and the access server.

New/Changed Feature Description

Preface xi

Conventions

The online copy of this guide is always up-to-date and integrates the latest enhancements to the product. You can access the current online copy of this guide on the World Wide Web at http://www.cisco.com, http://www-china.cisco.com, or http://www-europe.cisco.com.

Conventions

This publication uses the following conventions:

• The symbol ^ represents the key labeled Control. For example, the key combination ^z means

hold down the Control key while you press the z key.

Command descriptions use these conventions:

• Examples that contain system prompts deno te interactiv e sessions, indicating the commands that

you should enter at the prompt. The system prompt indicates the current level of the EXEC command interpreter . For example, the prompt

router> indicates that you should be at the user

level, and the prompt

router# indicates that you should be at the privileged level. Access to the

privileged level usuall y requires a password.

• Commands and keywords are in boldface font.

• Arguments for which you supply values are in italic font.

• Elements in square brackets ([ ]) are optional.

• Alternative but required keywords are grouped in braces ({ }) and separated by vertical bars (|).

Examples use these conventions:

• Terminal sessions and sample console screen displays are in screen font.

• Information you enter is in boldface screen font.

• Nonprinting characters, such as passwords, are in angle brackets (< >).

• Default responses to system prompts are in square brackets ([ ]).

• Exclamation points (!) at the beginning of a line indicate a comment line.

Caution Means reader be careful. You are capable of doing something that might result in

equipment damage or loss of data.

Note Means reader take note. Notes contain helpful suggestions or references to materials not

contained in this manual.

Timesaver Means the described action saves time. You can save time by per forming the action

described in the paragraph.

Tips Means the following information might help you solve a problem.

Warning This warning sy mbol means danger. Y ou ar e in a situation th at could cause bod ily injury.

Before you work on any equipment, be aware of the hazards invo lved with electrical circuitry and be familiar with standard practices for preventing accidents. To see translations of the warnings that appear in this publication, refer to the Regulatory Compliance and Safety Information document that accompanied this device.

Conventions

xii

Cisco AS5300 Universal Access Server Software Configuration Guide

Waarschuwing Dit waarschuwingssymbool betekent gevaar. U verkeert in een situatie die

lichamelijk letsel kan veroorzaken. Voordat u aan enige apparatuu r gaat werken, dient u zich be wust te zijn van de bij elektrische schakelingen betrokken risico's en dient u op de hoogte te zijn van standaard maatregelen om ongelukken te voorkomen. Voor vertalingen van de waarschuwingen die in deze publicatie verschijnen, kunt u het doc ument Re gula tory Compliance and Safety Informat ion (Informatie over naleving van veiligheids- en andere voorschriften) raadplegen dat bij dit toestel is ingesloten.

Varoitus Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa

ruumiinvammaan. Ennen kuin työskentelet minkään laitteiston parissa, ota selvää sähkökytkentöihin liittyvistä vaaroista ja tavanomaisista onnettomuuksien ehkäisykeinoista. Tässä julkaisussa esiintyvien varoitusten käännökset löydät laitteen mukana olevasta Regulatory Compliance and Safety Information -kirjasesta (määräysten noudattaminen ja tietoa turvallisuudesta).

Attention Ce symbole d'avertissement indique un danger. Vous vous trouvez dans une situation

pouvant causer des blessures ou des dommages corporels. Avant de travailler sur un équipement, soyez conscient des dangers posés par les circuits électriques et familiarisez-vous avec les procédures couramment utilisées pour éviter les accidents. Pour prendre connaissance des traductions d’avertissements figurant dans cette publication, consultez le document Regulatory Compliance and Safety Information (Conformité aux règlements et consignes de sécurité) qui accompagne cet appareil.

Warnung Dieses Warnsymbol bedeutet Gefahr. Sie befinden sich in einer Situation, die zu einer

Körperverletzung führ en könnte. Be v or Sie mit der Arbeit an ir gendeinem G erät beginn en, seien Sie sich der mit elektrischen Stromkreisen verbundenen Gefahren und der Standardpraktiken zur Vermeidung von Unfällen bewußt. Übersetzungen der in dieser Veröffentlichung enthaltenen Warnhinweise finden Sie im Dokument Regulatory C ompliance and Safety Information (Informationen zu behördlichen Vorschriften und Sicherheit), das zusammen mit diesem Gerät geliefert wurde.

Avvertenza Questo simbolo di avvertenza indica un pericolo. La situazione potrebbe causare

infortuni alle persone. Prima di lavorare su qualsiasi apparecchiatura, occorre conoscere i pericoli relativi ai circuiti elettrici ed essere al corrente delle pratiche standard per la pre venzione di incidenti. La traduzione delle avvertenze riporta te in questa pubblicazione si tro v a nel documento Re gulatory Compliance and Safety Information (Conformità alle norme e informazioni sulla sicurezza) che accompagna questo dispositivo.

Advarsel Dette varselsymbolet betyr fare. Du befinner deg i en situasjon som kan føre til

personskade. Før du utfører arbeid på utstyr, må du vare oppmerksom på de faremomentene som elektriske kretser i nnebærer , samt gjøre d eg kjent med v anlig praks is når det gjelde r å unngå ulykk er . Hvis du vil se oversettelser av de advarslene som finnes i denne publikasjonen, kan du se i dokumentet Regulatory Compliance and Safety Information (Overholdelse av forskrifter og sikkerhetsinformasjon) som ble levert med denne enheten.

Aviso Este símbolo de aviso indica perigo. Encontra-se numa situação que lhe poderá causar danos

físicos. Antes de começar a trabalhar com qualquer equipamento, familiarize-se com os perigos relacionados com circuitos eléctricos, e com quaisquer práticas comuns que possam prevenir possíveis acidentes. Para ver as traduções dos avisos que constam desta publicação, consulte o documento Regulatory C ompliance and Safety Information (Informação de Segurança e Disposições Reguladoras) que acompanha este dispositivo.

¡Advertencia! Este símbolo de aviso significa peligro. Existe riesgo para su integridad física. Antes

de manipular cualquier equipo, considerar los riesgos que entraña la corriente eléctrica y familiarizarse con los procedimientos estándar d e prev ención de accidentes. Para ver una traducció n

Preface xiii

Related Documentation

Refer to the following publications for additional information, available online:

• Cisco AS5300 Universal Access Server Chassis Installation Guide

• Cisco AS5300 Universal Access Server Module Installation Guide

• Voice Over IP for Cisco AS5300 Software Configuration Guide

• System Error Messages and Debug Com mand Reference publications

• Dial Solutions Configuration Guide

• Dial Case Study

• Cisco SS7/CCS7 Dial Access Solution System Integration

• Cisco IOS software configuration guide, feature modules, and command reference publications

These publications are av ailable on the d ocumentation CD that came with your access server, on the World Wide Web from Cisco’s home page, or in orderable printed format.

Cisco Connection Online

Cisco Connection Online (CCO) is Cisco Systems’ primary , real-time support chann el. Maintenance customers and partners can self-register on CCO to obtain additional information and services.

Available 24 hours a day, 7 days a week, CCO provides a wealth of standard and value-added services to Cisco’s customers and business partners. CCO services include product information, product documentation, software updates, release notes, technical tips, the Bug Navigator, configuration notes, brochures, des criptions of service off erings, and do wnload access to public and authorized files.

CCO serves a wide variety of users through two interfaces that are updated and enhanced simultaneously: a character-based version and a multimedia version that resides on the World Wide Web (WWW). The character-based CCO supports Zmodem, Kermit, Xmodem, FTP, and Internet e-mail, and it is excellent for quick access to information over lower bandwidths. The WWW version of CCO provides r ichly formatted docu ments with photog raphs, figures , graphics, and vide o, as well as hyperlinks to related information.

You can access CCO in the following ways:

• Online at http://www.cisco.com

• Online at http://www-europe.cisco.com

• Online at http://www-china.cisco.com

• Telnet to cco.cisco.com

Cisco Connection Online

xiv

Cisco AS5300 Universal Access Server Software Configuration Guide

• Modem: From North America, 408 526-8070; from Europe, 33 1 64 46 40 82. Use the

following terminal settings: VT100 emulation; databits: 8; parity: none; stop bits: 1; and connection rates up to 28.8 kbps.

For a copy of CCO’s Frequently Asked Questions (FAQ), contact cco-help@cisco.com. For additional information, contact cco-team@cisco.com.

Note If you are a network administrator and need personal technical assistance with a Cisco

product that is under warranty or covered by a maintenance contract, contact Cisco’s Technical Assistance Center (TAC) at 800 553-2447, 408 526-7209, or tac@cisco.com. To obtain general information about Cisco Systems, Cisco products, or upgrades, contact 800 553-6387, 408 526-7208, or cs-rep@cisco.com.

CHAPTER

First-Time Configuration 1-1

First-Time Configuration

This chapter describes ho w to po wer ON the Cisco AS530 0 uni v ersal access s erv er and configure it using the prompt-driven setup script (also called the System Configuration dialog). The following sections are included:

• Using the Setup Script

• Where to Go Next

If you prefer to configure the access server manually, proceed to the next chapter “Using Cisco IOS Software” to familiarize yourself with the command-line interface (CLI) and then proceed to the following chapter “Basic Configurat ion” for step-by-step instructions.

Using the Setup Script

The setup script in this section uses the latest release version of Cisco IOS software.

Note If your system is running Cisco IO S Release 11.2 or 1 1.3(2)T, see the appendix “Using Setup

on Cisco IOS Releases 11.2 or 11.3(2)T” for intructions and screen disp lays.

Getting Started

Before you power on the access serv er and be gin to use th e setup script in th e System Conf iguration dialog, make sure you have already connected the cables to the access server and configured your PC terminal emulation program for 9600 baud, 8 data bits, no parity, and 2 stop bits. All configuration will be performed from your PC terminal emulation program window.

The prompts and resulting messages vary depending on your responses. For most configurations, you can press Enter to accept the default entries displayed in square ([]) brackets.

Note Information that you enter is in this boldface font. Also note that if you make a mistake

during the configu ration, exit and run the Sy stem Configu ration dialog again by pressing Ctrl-c, and then type setup at the enable prompt (5300#).

Using the Setup Script

Cisco AS5300 Universal Access Server Software Configuration Guide

1-2

To use the setup script take the following steps:

Step 1 Power ON the access server. The power switch is on the rear panel, at the upper right

corner near the power cord , as shown in Figure 1-1.

Figure 1-1 Power Switch Location

Messages will begin to appear in your terminal emulation program window.

Caution Do not press any keys on the keyboard until the messages stop. Any keys p res sed during this time

will be interpreted as the first command typed when the messages stop, which might cause you to power cycle the access server and start over. It will take a few minutes for the messages to stop.

The messages look similar to the following:

Note The displayed messages depend on the Cisco IOS software release and feature set

you selected. The screen displays in this section are for reference only and might not exactly reflect the messages on your console.

rommon 3 > b flash:2: program load complete, entry point: 0x80008000, size: 0x5d7b5c Self decompressing the image : ################################################################################# ###################]

Restricted Rights Legend

Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc. 170 West Tasman Drive

H10690

Power switch

Universal access

server

First-Time Configuration 1-3

Getting Started

San Jose, California 95134-1706

Cisco Internetwork Operating System Software IOS (tm) 5300 Software (C5300-JS-M), Released Version 12.0(19981001:221340) [ayeh-wk_0_6_0 100] Copyright (c) 1986-1998 by cisco Systems, Inc. Compiled Thu 01-Oct-98 15:13 by ayeh Image text-base: 0x600088E8, data-base: 0x609F6000 cisco AS5300 (R4K) processor (revision A.14) with 32768K/16384K bytes of memory. Processor board ID 05433592 R4700 processor, Implementation 33, Revision 1.0 (512KB Level 2 Cache) Bridging software. X.25 software, Version 3.0.0. SuperLAT software copyright 1990 by Meridian Technology Corp). TN3270 Emulation software. Primary Rate ISDN software, Version 1.1. Backplane revision 2 Manufacture Cookie Info: EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x30, Board Hardware Version 1.0, Item Number 73-2414-2, Board Revision 3, Serial Number 05433592, PLD/ISP Version 255.255, Invalid Date code. 1 Ethernet/IEEE 802.3 interface(s) 1 FastEthernet/IEEE 802.3 interface(s) 4 Serial network interface(s) 120 terminal line(s) 4 Channelized T1/PRI port(s) 128K bytes of non-volatile configuration memory. 8192K bytes of processor board System flash partition 1 (Read/Write) 8192K bytes of processor board System flash partition 2 (Read/Write) 4096K bytes of processor board Boot flash (Read/Write)

--- System Configuration Dialog ---

Step 2 When the following message appears, enter yes to continue:

Continue with configuration dialog? [yes/no]: yes

At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'.

Step 3 When the following message appears, enter No to configure all interfaces. Note that if

you enter Yes, your system will not be configured correctly:

Basic management setup configures only enough connectivity for management of the system, extended setup will ask you to configure each interface on the system

Would you like to enter basic management setup? [yes/no]: no

Step 4 When the following message appears, press Enter to see the current interface summary:

First, would you like to see the current interface summary? [yes]:

Any interface listed with OK? value "NO" does not have a valid configuration

Interface IP-Address OK? Method Status Protocol Ethernet0 171.69.90.18 YES NVRAM up down FastEthernet0 unassigned YES unset administratively down down Group-Async1 171.69.90.18 YES unset down down Serial0 unassigned YES unset administratively down down Serial1 unassigned YES unset administratively down down Serial2 unassigned YES unset administratively down down Serial3 unassigned YES unset administratively down down

Using the Setup Script

Cisco AS5300 Universal Access Server Software Configuration Guide

1-4

Serial0:0 unassigned YES unset down down Serial0:1 unassigned YES unset down down . . . Serial3:21 unassigned YES unset down down Serial3:22 unassigned YES unset down down Serial3:23 171.69.90.18 YES unset down down

Step 5 Enter a host name for the access server:

Configuring global parameters:

Enter host name [Router]: 5300

The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration.

Step 6 Enter an enable secret password. This password is encrypted (more secure) and canno t be

seen when viewing the configuration:

Enter enable secret: lab

The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot images.

Step 7 Enter an enable password. This password is not encrypted (less secure) and can be seen

when viewing the configuration:

Enter enable password: guessme

The virtual terminal password is used to protect access to the router over a network interface.

Step 8 Enter the virtual terminal password, which is used for remote console access:

Enter virtual terminal password: guessagain

Step 9 Enter yes to the system management p rompt if you w ant the access serv er to be manag ed

by the system controller. If you enter yes, you need to also enter the shelf ID and the system controller’ s IP addr esss and passwor d. The system contr oller uses the shelf-id to identify an access server or dial shelf. The shelf ID is a number from 1 to 999 and must be unique in the POP management domain. The system controller password is used to authenticate messages between the system controller and managed shelves.

Configure System Management? [yes/no]: yes Shelf-id [0]: System Controller IP address: 172.87.98.01 System Controller password: sctest

Step 10 Respond to the following prompts as appropriate for your network:

Configure SNMP Network Management? [no]: yes Community string [public]: Configure LAT? [yes]: Configure AppleTalk? [no]: yes Multizone networks? [no]: yes Configure DECnet? [no]: Configure IP? [no]:

Configure IGRP routing? [yes]: Your IGRP autonomous system number [1]: 15

First-Time Configuration 1-5

Getting Started

Note If you answer no to IGRP, you will be prompt ed to configure RIP.

Configure CLNS? [no]: Configure IPX? [no]: yes Configure Vines? [no]: Configure XNS? [no]: Configure Apollo? [no]:

Step 11 Configure the asynchronous serial lines for the integrated modems on the modules

installed in the access server. (If you want to allow users to dial in through the integrated modems, you must configure the async lines.)

Async lines accept incoming modems calls. If you will have users dialing in via modems, configure these lines.

Configure Async lines? [yes]:

Note We recommend that you do not change the async line speed for modems.

Howev er , for V.110 terminal ad apters, we recommend that the speed not go abov e 1920 0.

Async line speed [115200]:

Will you be using the modems for inbound dialing? [yes]:

Note If your asynchronous interfaces will be using the same basic configuration

parameters, we recommend that you group them so that they can be configured as a group. Otherwise, you will need to configure each interface separately.

Would you like to put all async interfaces in a group and configure them all at one time ? [yes]

Note Dynamic IP addresses permit dial-in users to choose a static IP address when the y

dial in. If you do not allow dynamic IP addresses, the access server will provide IP addresses from an IP address pool that you set up later in the next prompt.

Allow dial-in users to choose a static IP address? [no]: Configure for TCP header compression? [yes]: Configure for routing updates on async links? [no]:

Note Make sure the starting and ending addresses of the IP p ool ar e in the same subnet.

Enter the starting address of IP local pool? [X.X.X.X]: 172.20.30.40 Enter the ending address of IP local pool? [X.X.X.X]: 172.20.30.88

You can configure a test user to verify that your dial-up service is working properly.

Using the Setup Script

Cisco AS5300 Universal Access Server Software Configuration Guide

1-6

What is the username of the test user? [user]: What is the password of the test user? [passwd]:

Will you be using the modems for outbound dialing? [no]: Configure for Async IPX? [yes]: no Configure for Appletalk Remote Access (ARA)? [no]: yes AppleTalk Network for ARAP clients [1]: Zone name for ARAP clients [ARA Dialins]: Allow ARAP "Guest" logins? [yes/no]: yes

Step 12 Enter the letter corresponding to the ISDN switch type that matches your telco switch

type or press Enter to accept the default:

Do you want to configure ISDN switch type? [yes]: The following ISDN switch types are available: [a] primary-4ess [b] primary-5ess [c] primary-dms100 [d] primary-net5 [e] primary-ntt [f] primary-ts014 Enter the switch type [b]:

Step 13 Press Enter to allow users to dial in via ISDN or analog modems:

Next, you will be prompted to configure controllers. These controllers enable users to dial in via ISDN or analog modems.

Do you intend to allow users to dial in? [yes]:

There are 8 controllers on this access server. If you want to use the full capacity of the access server configure all controllers.

Controller T1 0,1,..etc in software corresponds to Port 0,1,..etc on the back of the access server.

PRI configuration can be configured to controllers all at once based on your PRI controllers selection. Where as CAS configuration will be configured individually for each controller.

Step 14 Enter the number of controllers you will be using for the PRI configuration or press Enter

to configure all controllers:

Enter # of controllers, you will be using for PRI configuration [8]:

Configuring controller parameters:

Step 15 Set the CAS configuration options for the first controller you are configuring. First, press

Enter to set robbed-bit signaling on the controller:

Configuring controller T1 2: Will you be using CT1 (robbed bit signaling) on this controller? [yes]:

Step 16 Enter your telco framing type:

The following framing types are available: esf | sf Enter the framing type [esf]:

Step 17 Enter your telco line code type:

The following linecode types are available: ami | b8zs Enter the line code type [b8zs]:

First-Time Configuration 1-7

Getting Started

Step 18 Enter the letter corresponding to the signaling type to support modem pooling over the

T1 lines or press Enter to accept the default:

The following line signaling types are available: [a] e&m-fgb [b] e&m-fgd [c] e&m-immediate-start [d] fxs-ground-start [e] fxs-loop-start [f] sas-ground-start [g] sas-loop-start Enter the line signaling type [a]:

Step 19 Enter the tone signaling type:

The following tone signaling types are available: dtmf | mf Enter the tone signal type [dtmf]:

Step 20 Press Enter to configure digital number identification service (DNIS) over T1 lines:

Do you want to provision DNIS address information? [yes]:

Step 21 Repeat Step 15 to Step 20 to configure the remaining controllers. Step 22 Enter yes to configure the Ethernet 0 interface (this is the Ethernet 10BaseT port) if you

plan to use this interface to manage and monitor the access server:

Configuring interface parameters:

Do you want to configure Ethernet0 interface? [no]: yes Configure IP on this interface? [no]: yes IP address for this interface: 172.21.40.10 Subnet mask for this interface [255.0.0.0] : Class B network is 172.21.0.0, 16 subnet bits; mask is /16 Configure LAT on this interface? [no]: Configure AppleTalk on this interface? [no]: Configure IPX on this interface? [no]:

Step 23 Press Enter or enter yes to configure the Fast Ethernet 0 interface (this is the Ethernet

100BaseT port) to connect the access server to a LAN:

Do you want to configure FastEthernet0 interface? [yes]: yes

Note Full duplex mode enables simultaneous data transfer between a sending and a

receiving stati on.

Operate in full-duplex mode? [no]: yes Operate at 100 Mbps speed? [yes]: Configure IP on this interface? [yes]: IP address for this interface [X.X.X.X]: 172.22.50.10 Subnet mask for this interface [255.255.0.0] : Class B network is 172.22.0.0, 16 subnet bits; mask is /16 Configure LAT on this interface? [no]: Configure AppleTalk on this interface? [no]: Configure IPX on this interface? [no]:

Using the Setup Script

Cisco AS5300 Universal Access Server Software Configuration Guide

1-8

Step 24 Configure your serial intefaces by responding to the fo llowing prompts:

Do you want to configure Serial0 interface? [no]: yes

Note If using the serial interfaces to route data from the T1/PRI or E1/PRI ports to a

WAN, you need to configure IP on th e interfa ce. Enter th e IP addr ess of the WAN de v ice to which the data will be routed.

Configure IP on this interface? [no]: yes Configure IP unnumbered on this interface? [no]: IP address for this interface: 173.20.30.40 Subnet mask for this interface [255.255.0.0] : Class B network is 173.20.0.0, 16 subnet bits; mask is /16 Configure LAT on this interface? [no]: Configure AppleTalk on this interface? [no]: Configure IPX on this interface? [no]:

Step 25 Repeat Step 24 to configure the other three serial interfaces, if necessary. Step 26 Configure the PRI D-channel (signaling channel):

Do you want to configure Serial0:23 (PRI D-channel) interface? [no]: yes Configure IP on this interface? [no]: yes Configure IP unnumbered on this interface? [no]: IP address for this interface: 173.20.30.40 Subnet mask for this interface [255.255.0.0] : Class B network is 173.20.0.0, 16 subnet bits; mask is /16 Configure LAT on this interface? [no]: Configure AppleTalk on this interface? [no]: Configure IPX on this interface? [no]:

Step 27 Repeat Step 26 for each D-channel.

After you complete the configuration script, messages similar to the following appear.

The following configuration command script was created:

hostname 5300 enable secret 5 $1$WVLB$YD0zbQsu3nqZh/bnN2fwX0 enable password guessme line vty 0 4 password guessagain syscon shelf-id 0 syscon address 172.87.98.1 sctest snmp-server community public ! appletalk routing no decnet routing no ip routing no clns routing ipx routing no vines routing no xns routing no apollo routing ! line 1 120 speed 115200 flowcontrol hardware login local autoselect during-login autoselect ppp

First-Time Configuration 1-9

Getting Started

modem dialin ip local pool setup_pool 172.20.30.40 172.20.30.88 ! username user password passwd ! arap network 1 ARA Dialins line 1 120 arap enable autoselect arap ! ! Turn off IPX to prevent network conflicts. interface Ethernet0 no ipx network interface FastEthernet0 no ipx network interface Serial0 no ipx network interface Serial1 no ipx network interface Serial2 no ipx network interface Serial3 no ipx network interface Serial0:23 no ipx network interface Serial1:23 no ipx network interface Serial2:23 no ipx network interface Serial3:23 no ipx network ! isdn switch-type primary-5ess ! controller T1 0 no shutdown framing esf linecode b8zs cas-group 0 timeslots 1-24 type e&m-fgb dtmf dnis ! controller T1 1 no shutdown framing esf linecode b8zs cas-group 0 timeslots 1-24 type e&m-fgb dtmf dnis ! controller T1 2 no shutdown framing esf linecode b8zs cas-group 0 timeslots 1-24 type e&m-fgb dtmf dnis ! controller T1 3 no shutdown framing esf linecode b8zs cas-group 0 timeslots 1-24 type e&m-fgb dtmf dnis ! controller T1 4 no shutdown framing esf linecode b8zs cas-group 0 timeslots 1-24 type e&m-fgb dtmf dnis ! controller T1 5

Using the Setup Script

Cisco AS5300 Universal Access Server Software Configuration Guide

1-10

no shutdown framing esf linecode b8zs cas-group 0 timeslots 1-24 type e&m-fgb dtmf dnis ! controller T1 6 no shutdown framing esf linecode b8zs cas-group 0 timeslots 1-24 type e&m-fgb dtmf dnis ! controller T1 7 no shutdown framing esf linecode b8zs cas-group 0 timeslots 1-24 type e&m-fgb dtmf dnis scheduler interval 1000 line console 0 logging synchronous ! interface Ethernet0 no shutdown ip address 172.21.40.10 255.255.0.0 no lat enabled no mop enabled ! interface FastEthernet0 duplex full speed 100 ip address 172.22.50.10 255.255.0.0 no lat enabled no mop enabled ! interface Serial0 no shutdown ip address 173.20.30.40 255.255.0.0 no lat enabled no mop enabled ! interface Serial1 shutdown no ip address ! interface Serial2 shutdown no ip address ! interface Serial3 shutdown no ip address ! interface Serial0:23 no shutdown no ip address no lat enabled no mop enabled ! interface Serial1:23 no shutdown ip address 173.20.30.40 255.255.0.0 no lat enabled no mop enabled ! interface Serial2:23 no shutdown

First-Time Configuration 1-11

Getting Started

no ip address no lat enabled no mop enabled no shutdown no ip address no lat enabled no mop enabled ! Interface Group-Async1 group-range 1 120 ip unnumbered FastEthernet0 encapsulation ppp ppp authentication chap pap peer default ip address pool setup_pool ip tcp header-compression passive async mode interactive dialer-list 1 protocol ip permit dialer-list 1 protocol ipx permit ! end end

Step 28 Enter 0, 1, or 2 when the f ollowing prompt is displaye d:

[0] Go to the IOS command prompt without saving this config. [1] Return back to the setup without saving this config. [2] Save this configuration to nvram and exit.

Enter your selection [2]:

Use this configuration? [yes/no]: yes Building configuration... Use the enabled mode 'configure' command to modify this configuration.

Press RETURN to get started!

%LINK-3-UPDOWN: Interface Ethernet0, changed state to up %LINK-3-UPDOWN: Interface Serial0, changed state to down %LINK-3-UPDOWN: Interface Serial1, changed state to down

Step 29 When the messages stop displaying on your screen, press Enter to get the following

prompt:

5300> %AT-6-ONLYROUTER: Ethernet0: AppleTalk port enabled; no neighbors found

Note If you see this message, it means that no ot h er routers were found on the network

attached to the port.

Where to Go Next

Cisco AS5300 Universal Access Server Software Configuration Guide

1-12

Step 30 The 5300> prompt indicates that you are now at the command-line interface (CLI) and

you have just completed the basic access server configuration. However, this is not a complete configuration. At this point you have two options:

• Run the setup script in the System Configuration dialog again and create another

configuration. Enter the following commands to repeat the setup script:

5300> enable Password: <password> 5300# setup

• Modify the existing configuration or configure additional features with the CLI as

described in the Dial Solutions Configuration Guide, the Dial Solutions Co mmand Reference Guide the Cisco IOS software configuration guide, and command reference publications.

Where to Go Next

At this point you can proceed to:

• The next chapter “Using Cisco IOS Software” to learn how to use the C LI to configure additional

features.

• The chapter “Access Service Security” to configure security on the access server.

• The chapter “Basic Configuration” fo r step-by-step instructions to configure the access server

manually. You can also refer to the Cisco IOS software configuration guide and command reference publications for more adv anced con figuration topics. These publications are available on the Documentation CD-ROM that arrived with your acces s server, on the World Wide Web from Cisco’s home page, or you can order printed copies. If using Cisco’s home page, refer to the topic Configuring Selected (feature) Cisco IOS Features, available online at http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/5300/sw_conf/index.htm

CHAPTER

Using Cisco IOS Software 2-1

Using Cisco IOS Software

This chapter describes what you need to kno w about the Cisco IOS sof tware ( the software that run s the access server) before you configure the access server using the command-line interface (CLI). This chapter includes:

• Getting Help

• Understanding Command Modes

• How to Find Command Options

• Undoing a Command or Feature

• Saving Configuration Changes

• Where to Go Next

Understanding these concepts will save you time later. If you have ne ver used the Cisco IOS software or need a refresher, take a few minutes to read this chapter now.

If you are already familiar with the Cisco IOS software, proceed to the next chapter, “Basic Configuration.”

Getting Help

Use the question mark (?) and arrow keys to help you enter commands:

• For a list of available commands, enter a question mark:

5300> ?

• To complete a command, enter a few known characters followed by a question mark (with no

space):

5300> s?

• For a list of command variables, enter the command followed by a space and a question mark:

5300> show ?

• To redisplay a command you previously entered, press the up arrow key. You can continue to

press the up arrow key for more commands.

Understanding Command Modes

Cisco AS5300 Universal Access Server Software Configuration Guide

2-2

Understanding Command Modes

You will need to use many different command modes to use to configure the access server. Each command mode restricts you to a subset of commands. If you are having trouble entering a command, check the prompt, and then enter the question mark (?) for a list of a v ailable command s. You might be in the wrong command mode or using the wrong syntax.

In the following example, notice how the prompt changes after each command to indicate a new command mode:

5300> enable 5300> password 5300# configure terminal 5300(config)# interface ethernet 0 5300(config-if)# line 0 5300(config-line)# controller t1 0 5300(config-controller)# exit 5300(config)# exit 5300# %SYS-5-CONFIG_I: Configured from console by console

The last message is normal and does not indicate an error. Press Return to get the 530 0> prompt.

Note You can press Ctrl-Z at any time to immediately return to enable mode (5300#), instead of

entering exit, which returns you to the previous mode.

How to Find Command Options

This section explains how to display options for a command. To display options for a command, enter a ? at the configuration pr omp t, or after entering part of a command followed by a space. The configuration parser displays options available with the command. For example, if you were in global configuration mode, typed the command arap, and wanted to see all the keywords and arguments for that command, you would type arap ?.

Table 2-1 shows examples of this function.

Table 2-1 How to Find Command Options Step Command Purpose

1 5300> enable

Password: <password> 5300#

Enter enable mode. Enter the password. You have entered enable mode

when the prompt changes to

5300#.

2 5300# config terminal

Enter configuration commands, one per line. End with CNTL/Z. 5300(config)#

Enter global configuration mode and the prompt chan ges to

5300(config)#.

3 5300(config)# controller t1 ?

<0-3> Controller unit number 5300(config)# controller t1 1

Specify the T1 controller that you want to configure using the controller T1 number global configuration command.

+ 168 hidden pages

Cisco AS5300-96VOIP-A, AS5300 Software Configuration Manual

Specifications and Main Features

Frequently Asked Questions

User Manual