Page 1 Cisco AS5300 Universal Access Server Software Configuration Guide Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number: DOC-AS5300-SCG= Text Part Number: 78-4534-05...
Page 2 You can determine whether your equipment is causing interference by turning it off. If the interference stops, it was probably caused by the Cisco equipment or one of its peripheral devices. If the equipment causes interference to radio or television reception, try to correct the interference by using one or more of the following measures: •...
Page 3 Scorecard, MGX, the Networkers logo, Packet, RateMUX, ScriptBuilder, ScriptShare, SlideCast, SMARTnet, TransPath, Unity, Voice LAN, Wavelength Router, and WebViewer are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, Discover All That’s Possible, and Empowering the Internet Generation, are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, Cisco, the Cisco...
Page 5: Table Of Contents
First-Time Configuration Using the Setup Script Getting Started Where to Go Next 1-12 Chapter 2 Using Cisco IOS Software Getting Help Understanding Command Modes How to Find Command Options Undoing a Command or Feature Saving Configuration Changes Where to Go Next...
Page 6 Configuring ISDN PRI 3-11 Configure 3-12 Verify 3-13 Configuring E1 R2 Signaling 3-16 Configure 3-16 Country Codes for R2 Signaling 3-18 Verify 3-19 Configuring the Asynchronous Group Interface 3-21 Configure 3-21 Verify 3-22 Configuring the D Channels for Modem Signaling 3-24 Configure 3-24...
Page 7 Configuring MMP 3-55 Configure 3-55 Verify 3-56 Creating Authentication Accounts 3-57 Configuring VPDN 3-58 Configure 3-58 Verify 3-58 Creating Authentication Accounts 3-60 Using Continuity Test (COT) 3-60 Configure 3-60 Verify 3-60 Saving Configuration Changes 3-63 Configure 3-63 Comprehensive Configuration Examples 3-63 Where to Go Next 3-72...
Page 8 Displaying Modem Code Versions A-13 Upgrading Modem Code from the Cisco CCO TFTP Server A-14 Download Modem Code from the Cisco CCO TFTP Server to a Local TFTP Server A-14 Copy the Modem Code File from Local TFTP Server to Modems A-18...
Page 9 Appendix D Upgrade VoIP Software Upgrading VoIP Feature Card Firmware Determine the number of VFC cards Identify the VFC ROM Monitor Version Identify the VFC/ROM Monitor Mode Download Software in VCWare Mode Download Software in ROM Monitor Mode New Hardware Features Index Index Contents ix...
Page 10 Book Title...
Page 11: Preface
Cisco documentation on the World Wide Web at http://www.cisco.com, http://www-china.cisco.com, or http://www-europe.cisco.com. If you are reading Cisco product documentation on the World Wide Web, you can submit comments electronically. Click Feedback on the toolbar and select Documentation. After you complete the form, click Submit to send it to Cisco.
Page 12: Document Organization
Chapter 1, “First-Time Configuration,” describes how to run the setup script to do a basic configuration. • Chapter 2, “Using Cisco IOS Software,” is a brief overview of how to use the command-line interface (CLI) to configure the access server. •...
Page 13: Conventions
The online copy of this guide is always up-to-date and integrates the latest enhancements to the product. You can access the current online copy of this guide on the World Wide Web at http://www.cisco.com, http://www-china.cisco.com, or http://www-europe.cisco.com. Conventions This publication uses the following conventions: •...
Page 14 Este símbolo de aviso significa peligro. Existe riesgo para su integridad física. Antes de manipular cualquier equipo, considerar los riesgos que entraña la corriente eléctrica y familiarizarse con los procedimientos estándar de prevención de accidentes. Para ver una traducción Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 15: Related Documentation
Cisco IOS software configuration guide, feature modules, and command reference publications These publications are available on the documentation CD that came with your access server, on the World Wide Web from Cisco’s home page, or in orderable printed format. Cisco Connection Online Cisco Connection Online (CCO) is Cisco Systems’...
Page 16 For a copy of CCO’s Frequently Asked Questions (FAQ), contact cco-help@cisco.com. For additional information, contact cco-team@cisco.com. If you are a network administrator and need personal technical assistance with a Cisco Note product that is under warranty or covered by a maintenance contract, contact Cisco’s Technical Assistance Center (TAC) at 800 553-2447, 408 526-7209, or tac@cisco.com.
Page 17: First-Time Configuration
• Where to Go Next If you prefer to configure the access server manually, proceed to the next chapter “Using Cisco IOS Software” to familiarize yourself with the command-line interface (CLI) and then proceed to the following chapter “Basic Configuration” for step-by-step instructions.
Page 18 It will take a few minutes for the messages to stop. The messages look similar to the following: The displayed messages depend on the Cisco IOS software release and feature set Note you selected. The screen displays in this section are for reference only and might not exactly reflect the messages on your console.
Page 19 Copyright (c) 1986-1998 by cisco Systems, Inc. Compiled Thu 01-Oct-98 15:13 by ayeh Image text-base: 0x600088E8, data-base: 0x609F6000 cisco AS5300 (R4K) processor (revision A.14) with 32768K/16384K bytes of memory. Processor board ID 05433592 R4700 processor, Implementation 33, Revision 1.0 (512KB Level 2 Cache) Bridging software.
Page 20 Configure SNMP Network Management? [no]: yes Community string [public]: Configure LAT? [yes]: Configure AppleTalk? [no]: yes Multizone networks? [no]: yes Configure DECnet? [no]: Configure IP? [no]: Configure IGRP routing? [yes]: Your IGRP autonomous system number [1]: 15 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 21 Getting Started If you answer no to IGRP, you will be prompted to configure RIP. Note Configure CLNS? [no]: Configure IPX? [no]: yes Configure Vines? [no]: Configure XNS? [no]: Configure Apollo? [no]: Configure the asynchronous serial lines for the integrated modems on the modules Step 11 installed in the access server.
Page 22 The following framing types are available: esf | sf Enter the framing type [esf]: Enter your telco line code type: Step 17 The following linecode types are available: ami | b8zs Enter the line code type [b8zs]: Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 23 Getting Started Enter the letter corresponding to the signaling type to support modem pooling over the Step 18 T1 lines or press Enter to accept the default: The following line signaling types are available: [a] e&m-fgb [b] e&m-fgd [c] e&m-immediate-start [d] fxs-ground-start [e] fxs-loop-start [f] sas-ground-start...
Page 24 1 120 speed 115200 flowcontrol hardware login local autoselect during-login autoselect ppp Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 25 Getting Started modem dialin ip local pool setup_pool 172.20.30.40 172.20.30.88 username user password passwd arap network 1 ARA Dialins line 1 120 arap enable autoselect arap ! Turn off IPX to prevent network conflicts. interface Ethernet0 no ipx network interface FastEthernet0 no ipx network interface Serial0 no ipx network...
Page 26 Serial0:23 no shutdown no ip address no lat enabled no mop enabled interface Serial1:23 no shutdown ip address 173.20.30.40 255.255.0.0 no lat enabled no mop enabled interface Serial2:23 no shutdown 1-10 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 27 Getting Started no ip address no lat enabled no mop enabled no shutdown no ip address no lat enabled no mop enabled Interface Group-Async1 group-range 1 120 ip unnumbered FastEthernet0 encapsulation ppp ppp authentication chap pap peer default ip address pool setup_pool ip tcp header-compression passive async mode interactive dialer-list 1 protocol ip permit...
Page 28: Where To Go Next
Where to Go Next At this point you can proceed to: • The next chapter “Using Cisco IOS Software” to learn how to use the CLI to configure additional features. • The chapter “Access Service Security” to configure security on the access server.
Page 29: Using Cisco Ios Software
C H A P T E R Using Cisco IOS Software This chapter describes what you need to know about the Cisco IOS software (the software that runs the access server) before you configure the access server using the command-line interface (CLI).
Page 30: Understanding Command Modes
CNTL/Z. 5300(config)#. 5300(config)# Specify the T1 controller that you 5300(config)# controller t1 ? <0-3> Controller unit number want to configure using the 5300(config)# controller t1 1 controller T1 number global configuration command. Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 31 Display the two commands (service 5300(config-controller)# cas-group 1 timeslots 1-24 and type) available for the service Specify the type of service timeslots. type Specify the type of signaling Using Cisco IOS Software 2-3...
Page 32: Undoing A Command Or Feature
[OK] 5300# Where to Go Next Now that you have learned some Cisco IOS software basics, you can begin to configure the access server using the CLI. Remember that: • You can use the question mark (?) and arrow keys to help you enter commands.
Page 33 You need to save your configuration changes to NVRAM so that they will not be lost if there is a system reload or power outage. Proceed to the next chapter “Basic Configuration” to begin configuring the access server. Using Cisco IOS Software 2-5...
Page 34 Where to Go Next Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 35: Basic Configuration
If you skipped the previous chapter, “Using Cisco IOS Software,” and you have never configured a Cisco access server, go back to that chapter and read it now. This chapter provides important information you will need to succeed with the configuration.
Page 36: Configuring The Host Name And Password
One of the first configuration tasks you might want to do is configure the host name and set an encrypted password. Configuring a host name allows you to distinguish multiple Cisco access servers from each other. Setting an encrypted password allows you to prevent unauthorized configuration changes.
Page 37: Configuring Alarms
Configuring Alarms version XX.X hostname 5300 enable secret 5 $1$60L4$X2JYOwoDc0.kqa1loO/w8/ Check the host name and encrypted password displayed near the top of the command output. • Exit global configuration mode and attempt to reenter it using the new enable password: 5300# exit 5300 con0 is now available Press RETURN to get started.
Page 38: Verify
Make sure your alarm is operational. Configuring Ethernet 10BaseT Assign an IP address to the Ethernet 10BaseT interface of your access server so that it can be recognized as a device on the Ethernet LAN. Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 39: Configure
Configure Configure Table 3-3 Configuring Ethernet 10BaseT Step Command Purpose Enter enable mode (also called 5300> enable Password: <password> privileged EXEC mode). 5300# Enter the password. You have entered enable mode when the prompt changes to 5300# Enter global configuration mode. You 5300# configure terminal Enter configuration commands, one per line.
Page 40: Configure
Speed Mode Action auto auto Auto negotiates speed and duplex modes. auto 100/10 Auto negotiates duplex mode. half/full auto Auto negotiates speed mode. half Sets 10 Mbps for speed and half-duplex for duplex. Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 41: Verify
Verify Table 3-5 Using Different Duplex and Speed Options Duplex Mode Speed Mode Action full Sets 10 Mbps for speed and full-duplex for duplex. half Sets 100 Mbps for speed and half-duplex for duplex. full Sets 100 Mbps for speed and full-duplex for duplex. Verify To verify the IP address, configured and actual speed, and configured and actual duplex operations: •...
Page 42: Configuring Synchronous Serial Interfaces For Wan Support
Change the shutdown state to up and 5300(config-int)# no shutdown enable the interface. Return to enable mode. 5300(config-controller)# Ctrl-Z 5300# %SYS-5-CONFIG_I: Configured from console by This message is normal and does not console indicate an error. Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 43: Verify
Verify Verify To verify you have configured the interfaces correctly: • Specify one of the new serial interfaces with the show interfaces serial port command and verify that the first line of the display specifies the interface with the correct slot number. Also verify that the interface and line protocol are in the correct state: up or down.
Page 44: Configuring Channelized T1 Or E1
Version info of slot 2: HW: 2, Firmware: 14, NEAT PLD: 13, NR Bus PLD: 19 Data in current interval (476 seconds elapsed): 0 Line Code Violations, 0 Path Code Violations 3-10 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 45: Configuring Isdn Pri
The TDM subsystem troubleshooting commands are not used during normal system operation. Instead, the Cisco IOS commands show the current status and settings of the TDM backplane, enable debug output for display to the user when TDM programming occurs, and provide a set of test commands to test the functionality of the TDM path.
Page 46: Configure
NT DMS-100 basic rate switches basic-net3 NET3 ISDN, Norway NET3, and New Zealand NET3 switches (covers the Euro-ISDN E-DSS1 signaling system and is ETSI-compliant) basic-ni National ISDN switches basic-ts013 Australian TS013 switches 3-12 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 47: Verify
Verify Table 3-9 ISDN Switch Types for BRI and PRI Interfaces (Continued) Keyword Switch Type Japanese NTT ISDN switches French VN3 and VN4 ISDN BRI switches ISDN PRI primary-4ess AT&T 4ESS switch type for the U.S. primary-5ess AT&T 5ESS switch type for the U.S. primary-dms100 NT DMS-100 switch type for the U.S.
Page 48 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 0 3 3 3 3 3 3 3 3 Channel (1-31) Service (0=Inservice 1=Maint 2=Outofservice) 3-14 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 49 Verify 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 2 2 2 2 2 2 2 ISDN Se2:23, Channel (1-31) Activated dsl 2 State (0=Idle 1=Propose 2=Busy 3=Reserved 4=Restart 5=Maint) 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 0 0 0 0 3 3 3 3 3 3 3 3 Channel (1-31) Service (0=Inservice 1=Maint 2=Outofservice) 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 2 2 2 2 2 2 2...
Page 50: Configuring E1 R2 Signaling
Note that this feature is only available for MICA modems. Note Cisco's implementation of R2 signaling has DNIS support turned on by default. If you enable the ANI option, the collection of DNIS information is still performed. Specifying the ANI option does not disable DNIS collection.
Page 51 ITU default by the Cisco AS5300. After you configure a country with controller E1 0 default settings, the Cisco AS5300 clock source line primary displays a write term, similar to the one cas-group 0 timeslots 1-15,17-31 type r2-analog displayed here.
Page 52: Country Codes For R2 Signaling
Saudi Arabia saudiarabia Singapore singapore South Africa Panafte southafrica-panaftel l Telmex (a telephone telmex corporation in Mexico) Telnor (a telephone corporation telnor in Norway) Thailand thailand Uruguay uruguay Venezuela venezuela Vietnam vietnam 3-18 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 53: Verify
Verify Verify To verify your R2 signaling configuration: • Enter the show controller e1 command to view the status for all controllers, or enter the show controller e1 # to view the status for a particular controller. Make sure the status indicates the controller is up (line 2 in the following example) and no alarms (line 4 in the following example) or errors (lines 9 and 10 in the following example) have been reported.
Page 54 %DSX0-5-RBSLINEUP: RBS of controller 1 timeslot 5 is up %DSX0-5-RBSLINEUP: RBS of controller 1 timeslot 6 is up %DSX0-5-RBSLINEUP: RBS of controller 1 timeslot 7 is up %DSX0-5-RBSLINEUP: RBS of controller 1 timeslot 8 is up 3-20 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 55: Configuring The Asynchronous Group Interface
Configuring the Asynchronous Group Interface Configuring the Asynchronous Group Interface You can assign the asynchronous interfaces to a group so that you can configure them as a group, instead of individually. Timesaver Because there are so many asynchronous interfaces on the access server, configuring them as a group will save you time.
Page 56: Verify
0 1500 15.0.0.60 100.2.3.1 0 1500 15.0.0.60 100.2.5.1 0 1500 15.0.0.60 100.2.6.1 0 1500 * 10 15.0.0.60 100.2.8.1 0 1500 * 11 15.0.0.60 30.2.6.1 0 1500 * 12 15.0.0.60 30.3.5.1 0 1500 3-22 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 57 Verify • You can also view debug messages for PPP negotiation and authentication using the debug ppp negotiation and debug ppp authentication commands. When you finish viewing the messages, turn off the messages by entering no debug ppp negotiation and no debug ppp authentication commands.
Page 58: Configuring The D Channels For Modem Signaling
This message is normal and does not %SYS-5-CONFIG_I: Configured from console by indicate an error. console 1. PPP = Point-to-Point Protocol. 2. CHAP = Challenge Handshake Authentication Protocol. 3. PAP = Password Authentication Protocol. 3-24 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 59: Verify
Verify Verify To verify your D-channel configuration: • Enter the show interface command and make sure the line protocol is up and you are using the correct IP interface. Also, make sure that excessive errors are not being reported. 5300# show interface 1:23 Serial1:23 is up, line protocol is up Hardware is DSX1 Interface is unnumbered.
Page 60 Displayed if the phone call could not be placed. This can be due to a PRI0: Unable to dial xxxxxxxxxx lack of memory, full output queues, or other problems. Displayed when the Cisco AS5300 attempts to hang up a call. PRI0: disconnecting call One of these three messages is displayed when their corresponding PRI0: idle timeout dialer timer expires.
Page 61 Verify Table 3-15 Debug ISDN Messages (Continued) Message Description Indicates the call reference number in hexadecimal. The field value indicates the number of callref calls made from the router (outgoing calls) or the network (incoming calls). Note that the originator of the SETUP message sets the high-order bit of the call reference number to 0. The destination of the connection sets the high-order bit to 1 in subsequent call control messages, such as the CONNECT message.
Page 62: Configuring The Modems
Enable incoming and outgoing calls. 5300(config-line)# modem inout 5300(config-line)# Ctrl-Z Return to enable mode. 5300# %SYS-5-CONFIG_I: Configured from console by This message is normal and does not console indicate an error. 3-28 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 63: Country Code Tables
Country Code Tables Country Code Tables Table 3-17 lists the current Microcom modem codes. Table 3-17 Microcom Modem Codes Country Code Country Code Argentina Italy argentina italy Australia Japan australia japan Austria Korea austria korea Belgium Malaysia belgium malaysia Brazil Mexico brazil mexico...
Page 64: Resetting To Default Values For Country Codes
Line 1, Location: "", Type: "" Length: 24 lines, Width: 80 columns Baud rate (TX/RX) is 115200/115200, no parity, 1 stopbits, 8 databits Status: none Capabilities: Hardware Flowcontrol In, Hardware Flowcontrol Out 3-30 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 65 Verify Modem Callout, Modem RI is CD, Line usable as async interface Modem state: Idle Special Chars: Escape Hold Stop Start Disconnect Activation none none Timeouts: Idle EXEC Idle Session Modem Answer Session Dispatch 00:10:00 never none not set Idle Session Disconnect Warning never Modem type is unknown.
Page 66 CSM_PROC_IC1_RING: CSM_EVENT_MODEM_OFFHOOK at slot 2, port 2 ISDN Se0:23: TX -> CONNECT pd = 8 callref = 0x8065 ISDN Se0:23: RX <- CONNECT_ACK pd = 8 callref = 0x0065 EVENT_FROM_ISDN::dchan_idb=0x60DD2D74, call_id=0x3, ces=0x1 bchan=0x0, event=0x4, cause=0x0 3-32 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 67: Configuring Modem Pooling
Configuring Modem Pooling • Enter the debug modem ? command for list of additional modem debugging commands: 5300# debug modem ? Modem Special B2B CSM activity maintenance Modem maintenance activity mica MICA Async driver debugging Modem out of band activity B2B Modem/PRI TDM trace Call Trace Upload...
Page 68: Verify
If you are having trouble: • Make sure you have not configured the same called party number for multiple pools. • Make sure you have not placed modems in multiple pools. 3-34 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 69: Configuring Resource Pooling And Session Counting
Configuring Resource Pooling and Session Counting Configuring Resource Pooling and Session Counting The Cisco resource pooling and session counting feature allows you to do the following: • Construct unique customer profiles that specify the types and amounts of system resources to be used by a customer’s dial service plan.
Page 70 A customer profile can contain a selection of physical resources (such as a range of HDLC framers and modems), a group of DNIS numbers, and a defined limit of simultaneous connections. 3-36 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 71 Configure Table 3-21 Creating Customer Profiles Step Command Purpose Enter global configuration mode. You 5300# configure terminal Enter configuration commands, one per line. End have entered global configuration mode with CNTL/Z. when the prompt changes to 5300(config)# 5300(config)#. Create a profile for a specific customer. 5300(config)# resource-manager profile customer name Within this profile, you can set...
Page 72: Verify
Int Chn State Resource Name Customer Profile Name --- --- ----- ------------- --------------------- Conn modempool1 acmeprofile ---------------------------------- Total number of active calls = 1 3-38 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 73: Configuring Voice Network Data
Configuring Voice Network Data Configuring Voice Network Data Use the procedures in this section only if you have a VoIP feature card installed in your access server. Configure the voice network data by creating a number expansion table to map (or associate) individual extensions with their full E.164 telephone numbers.
Page 74 If you are having trouble: • Enter the show num-exp command to verify that you have mapped the telephone numbers correctly. 5300# sh num-exp Dest Digit Pattern = '6..' Translation = '310766..' 3-40 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 75: Configuring T1 Cas For Voip
Configuring T1 CAS for VoIP This section describes how to configure T1 Channel Associated Signaling (CAS) and E1 R2 signaling with the Voice over IP (VoIP). Cisco IOS Release 12.0(3)T and later releases require VCWare level 2.5 code. Note Configure This configuration is an example of how to configure the voice ports as a cas-group for the channelized T1 lines.
Page 76: Verify
5300# sh dial-peer voice 4 VoiceEncapPeer4 tag = 4, destination-pattern = `+4..', answer-address = `', group = 4, Admin state is up, Operation state is up incoming called-number = `', connections/maximum = 0/unlimited 3-42 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 77 — Ping the associated IP address to confirm connectivity. If you cannot successfully ping your destination, refer to the “Configuring IP” chapter in the Cisco IOS Release 12.0 Network Protocols Configuration Guide, Part 1, available online at http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/np1_c/...
Page 78: Configuring Ip Networks For Real-Time Voice Traffic
For a detailed discussion of voice over technology, configuration examples, and commands, see the Voice Over IP Software Configuration Guide, which includes the following chapters: • Chapter 1: Voice Over IP for the Cisco AS5300 Configuration Overview • Chapter 2: Voice Over IP for the Cisco AS5300 Configuration Examples •...
Page 79: Verify
Verify Table 3-24 Configuring IP Networks for Real-Time Voice Traffic (Continued) Step Command Purpose Enable RTP header compression. Enter 5300(config-if)# ip rtp header-compression passive passive to compress outgoing RTP packets only if incoming RTP packets on the same interface are compressed. If you do not enter passive, all RTP traffic is compressed.
Page 80: Configuring Rlm
The goal of Redundant Link Manager (RLM) is to primarily provide a virtual link management over multiple IP networks so that the Q.931 signaling protocol and other proprietary protocols can be transported on top of multiple redundant links between the Cisco signaling controller and the access server.
Page 81: Verify
Verify Verify To verify you have configured the interfaces correctly: • Enter the show rlm group status command and specify the group number: 5300# show rlm group 1 status RLM Group 1 Status User/Port: RLM_MGR/3000 Link State: Up Last Link Status Reported: Up Next tx TID: 1 Last rx TID: 0 Server Link Group[r1-server]:...
Page 82: Configuring Isl For Vlan Routing
Set ISL encapsulation to the VLAN 5300(config-subif)# encapsulation isl n identifier (n is a value between 1 and 1000). Set the virtual IPX network number for 5300(config-subif)# ipx network 1-fffffffd the VLAN ID. 3-48 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 83: Verify
Verify Table 3-26 Configuring VLAN Routing (Continued) Step Command Purpose Return to enable mode. 5300(config-subif)# Ctrl-Z 5300# %SYS-5-CONFIG_I: Configured from console by This message is normal and does not console indicate an error. 1. IPX = Internetwork Packet Exchange. Verify To verify the VLAN setup (VLAN ID, network address, protocol, and packets received and transmitted): •...
Page 84: Configuring Ipx Networks
This completes the configuration for IPX. Save 5300# copy running-config startup-config #########[OK] the running configuration to the start-up configuration. The access server will boot with your configuration at the next power up. 3-50 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 85: Verify
Verify Verify To verify the IPX routing is enabled: • Enter the show ipx interface serial command: 5300# configure terminal 5300(config)# show ipx interface serial 1:23 Serial1:23 is up, line protocol is up IPX address is 2A.00e0.1e6b.2f6e [up] Delay of this IPX network, in ticks is 6 throughput 0 link delay 0 IPXWAN processing not enabled on this interface.
Page 86: Configuring Appletalk
AppleTalk address is 10.1, Valid AppleTalk zone is "dolzone" AppleTalk discarded 37 packets due to output errors AppleTalk address gleaning is not supported by hardware AppleTalk route cache is disabled, Dial on Demand specified 3-52 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 87 Verify Tips If you are having trouble, you can troubleshoot the AppleTalk protocol by using its debug commands to view information for the errors, events, and packets and check the Gateway name, NAS name, and if the virtual access interface is up. •...
Page 88 MacIP functions Name Binding Protocol (NBP) functions packet Per-packet debugging redistribution Route Redistribution remap AppleTalk Remap function responder AppleTalk responder debugging routing (RTMP&EIGRP) functions rtmp (RTMP) functions Zone Information Protocol functions 3-54 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 89: Configuring Mmp
Configuring MMP Configuring MMP If you have multiple access servers stacked together to provide a frontend for receiving access calls, you can configure Multichassis Multilink Point-to-Point Protocol (MMP) so that Multilink PPP (MP) call processing can be offloaded to other access servers. MMP support on a group of access servers requires that each access server be configured to support: •...
Page 90: Verify
Enter the debug sgbp ? command to view a list of available debugging commands: 5300# debug sgbp ? errors SGBP errors events SGBP events hellos SGBP connection hellos messages SGBP messages queries SGBP mastership queries 3-56 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 91: Creating Authentication Accounts
You can create authentication accounts for other routers in an MMP stack. If your stack name is STACK1, you need to create a user account called STACK1 on each router with the same password. username STACK1 password cisco sgbp group STACK1...
Page 92: Configuring Vpdn
To verify your VPDN configuration: • Enter the show vpdn command to make sure the tunnels are active (see line 2 in the following example): 5300# show vpdn Active L2F tunnels = 2 3-58 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 93 Verify NAS Name Gateway Name NAS CLID Gateway CLID State test-mmp test-gateway open 192.168.1.99 192.168.1.119 L2F MIDs = 10 Name NAS Name Interface State rw56 test-mmp Vi238 open rw55 test-mmp Vi240 open rw54 test-mmp Vi242 open rw57 test-mmp Vi246 open rw57 test-mmp Vi248...
Page 94: Creating Authentication Accounts
00:19:29:COT Request@ 0x61064A20, CDB@ 0x60EBB48C, Params@0x61123DBC 00:19:29: request type = COT_CHECK_TONE_ON 00:19:29: shelf 0 slot 0 appl_no 1 ds0 1 00:19:29: duration 100000 key FFF1 freqTx 1780 freqRx 2010 00:19:29: state COT_WAIT_TD_ON_CT 00:19:29: event_proc(0x6093B55C) 3-60 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 95 Verify • Display information about the COT activity by entering the show cot summary command: 5300# show cot summary router# 08:23:24: COT Subsystem - Request Statistics 08:23:24: COT Request Type = COT_DS0_LOOPBACK_ON 08:23:24: # of request(s) # of restart requests(s) 08:23:24: # of successful request(s): 4 # of invalid request(s) 08:23:24: # of cot timeout(s)
Page 96 00:11:26:COT(0x60EBB48C):Adding new request (0x61123DBC) to In Progress Q 00:11:26:COT(0x60EBB48C):Adding COT(0x61123DBC) to the Q head 00:11:27:In cot_callback 00:11:27: returned key 0xFFF1, status = 0 • Use the clear cot summary command to reset the counters. 3-62 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 97: Saving Configuration Changes
Comprehensive Configuration Examples This section includes three sample outputs of the show config command. If you are experienced with the Cisco IOS software, you might find this a useful reference for configuration. Octal E1/PRI Card with Four Serial Interfaces 5300# show config Building configuration...
Page 98 Serial2 ip address 12.1.1.1 255.255.255.0 no ip directed-broadcast encapsulation frame-relay no ip mroute-cache no keepalive no fair-queue frame-relay map ip 12.1.1.2 100 broadcast 3-64 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 99 Comprehensive Configuration Examples interface Serial3 ip address 13.1.1.1 255.255.255.0 no ip directed-broadcast no ip mroute-cache no keepalive no fair-queue no cdp enable interface Serial0:15 ip address 20.0.0.1 255.0.0.0 no ip directed-broadcast encapsulation ppp no keepalive dialer idle-timeout 4000 dialer load-threshold 5 either dialer-group 1 isdn switch-type primary-net5 isdn incoming-voice modem...
Page 100 75 in interface FastEthernet0 ip address 15.0.0.1 255.0.0.0 no ip directed-broadcast ip route-cache same-interface no ip mroute-cache 3-66 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 101 Comprehensive Configuration Examples no keepalive duplex full no cdp enable interface Group-Async1 ip unnumbered FastEthernet0 no ip directed-broadcast encapsulation ppp no ip mroute-cache async default routing async mode interactive no peer default ip address no fair-queue no cdp enable ppp authentication chap group-range 1 30 hold-queue 10 in interface Group-Async2...
Page 102 212.1.1.0 255.255.255.0 12.1.1.2 ip route 213.1.1.0 255.255.255.0 13.1.1.2 access-list 101 deny igrp any any access-list 101 permit ip any any dialer-list 1 protocol ip list 101 no cdp run line con 0 3-68 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 103 Comprehensive Configuration Examples exec-timeout 0 0 logging synchronous transport input none line 1 240 no exec autoselect ppp modem InOut modem autoconfigure discovery transport input all line aux 0 exec-timeout 0 0 logging synchronous line vty 0 4 no exec login scheduler interval 1000 Octal T1/PRI Card With Four Serial Interfaces...
Page 104 Serial3 ip address 192.5.3.1 255.255.255.0 no ip directed-broadcast no ip mroute-cache no fair-queue clockrate 2015232 Octal T1/PRI Card With CAS and Four Serial Interfaces 5300# show config Building configuration... Current configuration: 3-70 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 105 Comprehensive Configuration Examples version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption hostname 5300_copan no logging console enable secret 5 $1$baqI$5qjqlk1fd/gP9SR5jBTZ50 enable password lab bert profile default pattern 220-O.151QRSS threshold 10^-6 error-injection none duration 10 ip subnet-zero no ip domain-lookup ip host Elnino_copan 45.0.0.4 controller T1 0...
Page 106: Where To Go Next
CD that came with your access server, on the World Wide Web from Cisco’s home page, or you can order printed copies. Check out the topic Configuring Cisco IOS Features on this url on Cisco’s home page: http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/5300/index.htm...
Page 107: Chapter 4 Access Service Security
TACACS, Extended TACACS, Kerberos, or access lists. It presents the most commonly used security mechanisms to prevent unauthenticated and unauthorized access to network resources through Cisco access servers. For a comprehensive overview of Cisco security tools, refer to the Security Configuration Guide, available online at http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/secur_c/...
Page 108: Assumptions
Local Security Database If you have one or two access servers providing access to your network, you should store username and password security information on the Cisco access server. This is referred to as local authentication. (See Figure 4-1.) Figure 4-1...
Page 109: Remote Security Database
CiscoSecure uses a central database that stores user and group profiles with authentication and authorization information. The Cisco AS5300 exchanges user authentication information with a TACACS+ or RADIUS database on the security server by transmitting encrypted TACACS+ or RADIUS packets across the network.
Page 110: Configuring Authentication
Whether you maintain a local or remote security database, or use TACACS+ or RADIUS authentication and authorization, the process of configuring the access server for these different databases and protocols is similar. The basic process of configuring the Cisco IOS software for authentication requires the following tasks:...
Page 111 Securing Access to Privileged EXEC and Configuration Mode If you use the enable secret command and specify an encryption type, you must enter the Caution encrypted version of a specific password. Do not enter the cleartext version of the password after specifying an encryption type.
Page 112: Communicating Between The Access Server And The Security Server
Communicating Between the Access Server and the Security Server This section describes the Cisco IOS software commands that enable the access server to communicate with a security server. This process is similar for communicating with TACACS+ and RADIUS servers.
Page 113: Communicating With A Tacacs+ Server
Save the configuration changes to 5300# copy running-config startup-config NVRAM so that they are not lost during resets, power cycles, or power outages. For more information about these commands, refer to the Security Command Reference, available online at http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/secur_c/ Access Service Security 4-7...
Page 114: Communicating With A Radius Server
RADIUS server’s response is slow (because of support for a large number of users or large network latency), increase the timeout value. For more information about these commands, refer to the Security Command Reference, available online at http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/secur_c/ Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 115: Configuring Authentication On A Tacacs+ Server
Enabling AAA Globally on the Access Server To use the AAA security facility in the Cisco IOS software, you must enter the aaa new-model command from global configuration mode. When you enter the aaa new-model command, all lines on the access server receive the implicit login authentication default method list, and all interfaces with PPP enabled have an implicit ppp authentication pap default method list applied.
Page 116: Defining Authentication Method Lists
PAP passwords are cleartext when they cross the network. The Cisco IOS software selects PAP as the default, so you must manually select CHAP. The process for specifying CHAP is described in the “Applying Authentication Method Lists”...
Page 117 Defining Authentication Method Lists Enter the aaa authentication Command To define an authentication method list, start by entering the aaa authentication global configuration command, as shown in the following example: 5300# configure terminal 5300(config)# aaa authentication Specify Protocol or Login Authentication After you enter aaa authentication, you must specify one of the following dial-in protocols as applicable for your network: •...
Page 118 Uses the local username database in the access server for authentication. This database is defined with the username global configuration command. tacacs+ Use TACACS+ authentication as defined on a TACACS+ security server. 4-12 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 119 However, if authentication fails using the first method listed, the Cisco IOS software does not permit access. It does not attempt to authenticate using the subsequent security methods if the user entered the incorrect password.
Page 120: Authentication Method List Examples
PPP. The name of the list is marketing. This example specifies that a remote TACACS+ daemon be used as the security database. If this security database is not available, the Cisco IOS software then polls the RADIUS daemon. Users are not authenticated if they are already authenticated on a tty line.
Page 121: Applying Authentication Method Lists
1. If you entered the ppp authentication command, you must specify either CHAP or PAP authentication. PAP is enabled by default, but Cisco recommends that you use CHAP because CHAP is more secure. For more information, refer to the Security Configuration Guide.
Page 122 For example, if you want to specify the aaa authorization network tacacs+ (or radius) command, you must first specify the aaa authentication {ppp | arap} default if-needed tacacs+ (or radius) command. 4-16 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 123: Configuring Authorization
5300(config)# aaa authorization exec Note You can also require authorization before a user can enter specific commands by using the aaa authorization command. For more information, refer to the Security Configuration Guide, available online at http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/secur_c/ Access Service Security 4-17...
Page 124: Specifying The Authorization Method
5300(config)# aaa authorization network tacacs+ none The following example permits the user to run the EXEC process if the user is already authenticated. If the user is not already authenticated, the Cisco IOS software defers to a RADIUS server for authorization information: 5300(config)# aaa authorization exec if-authenticated radius The following example configures network authorization.
Page 125: Security Examples
Security Examples Security Examples This series of examples shows complete security configuration components of a configuration file on an access server. Each of these examples shows authentication and authorization. Simple Local Security Example This sample configuration uses AAA to configure default authentication using a local security database on an access server.
Page 126 1 54 login authentication fly interface group-async658 ppp authentication chap maaaa group-range 1 48 4-20 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 127: Appendix A Managing Modems
The Cisco AS5300 universal access servers support MICA or Microcom modem carrier cards. For details on the carrier cards, refer to the Cisco AS5300 Universal Access Server Chassis Installation Guide and Cisco AS5300 Universal Access Server Module Installation Guide, available online at http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/5300/hw_inst/index.htm...
Page 128: Monitoring Modems
Configure a Microcom modem to permit 5300(config-line)# modem at-mode-permit a direct-connect session. Return to enable mode. 5300(config-if)# end 5300# %SYS-5-CONFIG_I: Configured from console by This message is normal and does not console indicate an error. Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 129: Configuring Mica Modems For Monitoring
To send AT commands to a MICA modem involves a reverse Telnet procedure. Table A-2 shows how to enter AT command mode from enable mode (also called privileged EXEC) using reverse Telnet. MICA modems do not support the modem at-mode commands available in Cisco IOS line Note configuration mode.
Page 130: Modem Performance Statistics Commands
Modem Performance Statistics Commands You can view modem statistics and configure modem events using the Cisco IOS software with the Cisco AS5300 access server. To view performance statistics for the Microcom and MICA modems, enter one or more of the following commands in enable mode (the prompt is displayed as 5300# •...
Page 131: Managing Modems
Managing Modems • show modem mica all—Show information for all installed modems including the pseudo channels. Note The first three channels displayed for each board are the DC session (#60), status polling (#61), and the control (#62) channel. Managing Modems This section describes how to manage modems by checking the type of modem connected to the access server, removing inoperable modems from service, and disabling a modem from dial-up service.
Page 132: Remove Inoperable Modems From Service
[the prompt is displayed as 5300(config-line)# • modem status-poll—Poll for a modem’s status and statistics. The no modem status-poll command disables status polling through the out-of-band port for a specified modem. Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 133: Troubleshooting Modems
Troubleshooting Modems Troubleshooting Modems This section describes how to perform diagnostic testing on installed modems, test two modems back-to-back, disable modems from service, reset a modem, and debug a modem. Perform a Modem Startup Test To perform diagnostic testing on all the installed modems during the system’s initial startup or rebooting process, enter the following command in global configuration mode [the prompt is displayed as 5300(config)#...
Page 134: Hold And Reset A Modem
[normal | abnormal | all] [slot/modem-port | group group-number]—Debug the call trace, which determines why calls are terminated. Use this keyword only with manageable modems. Upload the call trace on normal, abnormal, or all call terminations. Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 135: Upgrading Modem Code
If you choose to use the modem code bundled with your installed Cisco IOS software, you could be reverting to a previous version of modem code. Also note that once you map the bundled modem code (using the copy system:/ucode/filename modem command or, for Cisco IOS releases earlier than 11.3A or 12.0, the copy ios-bundled modem command) to your modems, each time you...
Page 136: Important Modem Upgrade Commands
If you choose to use the modem code bundled with your installed Cisco IOS software, you could be reverting to a previous version of modem code. Also note that once you map the bundled modem code (using the copy system:/ucode command or, for releases earlier than Cisco IOS release 11.3AA or 12.0, the copy ios-bundled modem command) to your modems, each time you...
Page 137: Modem Code Scenarios
1. To find out the version of modem in your system, use the show modem mapping command. This command displays the versions bundled with Cisco IOS software (copied into Flash memory) and running on the modems.
Page 138 • If last copy command was copy flash modem and Modem Code Version 1 was specified. Modem Code Version 1 You upgrade Cisco IOS software to Release C. (Cisco IOS software uses mapping from last copy Cisco IOS Release C command at Time 1).
Page 139: Displaying Modem Code Versions
Use the show modem mapping command to list the versions of modem code running on the modem modules, residing in system Flash memory, and bundled with Cisco IOS software. This will help you decide if you need to change the version running on the modems.
Page 140: Upgrading Modem Code From The Cisco Cco Tftp Server
Note You must be a registered Cisco user to log in to Cisco’s Software Center. You can download software from the Cisco Systems CCO TFTP server using an Internet browser or using an FTP application. Both procedures are described. A-14...
Page 141 The directory path leading to the modem code files on cco.cisco.com is subject to change Note without notice. If you cannot access the files using an FTP application, try the Cisco Systems URL http://www.cisco.com/kobayashi/sw-center/. Log in to the Cisco CCO FTP server, called cco.cisco.com: Step 1 terminal>...
Page 142 Name (cco.cisco.com:harry): harry 331 Password required for harry. Password: letmein 230-############################################################# 230-# Welcome to the Cisco Systems CCO FTP server. 230-# This server has a number of restrictions. If you are not familiar 230-# with these, please first get and read the /README or /README.TXT file.
Page 143 Upgrading Modem Code from the Cisco CCO TFTP Server Specify the directory path that holds the modem firmware you want to download. For Step 3 example, the directory path for the Cisco AS5300 modem code is /cisco/access/5300: ftp> cd /cisco/access/5300 250-Please read the file README...
Page 144: Copy The Modem Code File From Local Tftp Server To Modems
Because the modem code runs from the modems themselves, the Cisco IOS software automatically copies the modem code to each modem each time the access server power cycles.
Page 145 For additional information about downloading modem code to modems, refer to the following publications: • Installing 56K 12-Port Modem Modules in Cisco AS5300 Universal Access Servers, available online at http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/5300/hw_inst/spares/index.h • Installing 6-Port Modem Modules and Carrier Cards in Cisco AS5300 Universal Access Servers, available online at http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/5300/hw_inst/spares/index.h Managing Modems A-19...
Page 146: System Software
Verify the file has been copied into the access server Flash memory: Step 4 5300# show flash System flash directory: File Length Name/status 5826036 c5300-js-mz 377112 mcom-modem-code-3.1.30.bin [6203276 bytes used, 10573940 available, 16777216 total] 16384K bytes of processor board System flash (Read/Write) A-20 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 147: Upgrading Modem Code From Diskettes
Microsoft Windows 95. Run the TFTP server program from the directory where you installed the RSL program. Remember to set the root directory to the directory where the Cisco AS5300 modem code is located. The RSL and the TFTP applications are also available on CCO in the software library in the Access Products section.
Page 148 You can also connect your PC Ethernet port to the Cisco AS5300 Ethernet port using the 10BaseT crossover cable provided. Step 2 Connect your PC COM port to the Cisco AS5300 console port, as shown in Figure A-3. A-22 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 149 Establish a HyperTerminal Session Use the steps in this section to establish a HyperTerminal session from your local PC to the Cisco AS5300. You will use the HyperTerminal session to talk to the access server. In Microsoft Windows 95 on your PC, choose Step 1 Start/Programs/Accessories/HyperTerminal.
Page 150 Because the code runs from modem RAM, the Cisco IOS software must automatically copy the modem code to each modem each time the access server power cycles.
Page 151: Using The Modem Code Bundled With Cisco Ios Software
If you choose to use the modem code bundled with your installed Cisco IOS software, you could be reverting to a previous version of modem code. Also note that once you map the bundled modem code (using the copy system:/ucode/filename modem command—or, for Cisco IOS releases earlier than 11.3AA or 12.0, the copy ios-bundled modem command) to your modems,...
Page 152 Flash memory will be deleted, therefore save and restore any important files (for example, the Cisco IOS software image). If the new Cisco IOS image contains the same modem code as the old one, no new code will Note be downloaded to the modems.
Page 153: Entering The Rom Monitor Program
A P P E N D I X ROM Monitor This appendix describes the Cisco AS5300 ROM monitor, the first software to run when the access server is powered-up or reset. The ROM Monitor can help you isolate or rule out hardware problems encountered when installing your access server.
Page 154: Command Aliasing
NVRAM Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 155 Flash memory. b device:—Boots the first file found in the Flash memory device. The Flash memory device specified can be either flash:, to boot the Cisco IOS software, or bootflash:, to boot the boot image in Flash memory.
Page 156 ROM Monitor Commands The configuration register resides in NVRAM. The configuration register is identical in operation to other Cisco access servers. Enter confreg for the menu-driven system, or enter the new value of the register in hexadecimal. Note The value is always interpreted as hex. The confreg utility will print a before and after view of the configuration register when used in menu-driven mode.
Page 157 ROM Monitor Commands For example: rommon 6 > context CPU Context: d0 - 0x00000028 a0 - 0x0ff00420 d1 - 0x00000007 a1 - 0x0ff00000 d2 - 0x00000007 a2 - 0x02004088 d3 - 0x00000000 a3 - 0x020039e6 d4 - 0x00000000 a4 - 0x02002a70 d5 - 0x02003e8a a5 - 0x02003f17 d6 - 0x00000000...
Page 158 In the case of the match string, the most recent command to begin with the specified string will be re-executed. If the string includes spaces, you must define it using quotes. The count option allows you to repeat the command more than once. Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 159 ROM Monitor Commands • reset or i—Resets and initializes the system, similar to power-on. • set—Displays all the monitor variables and their values. • stack [num]—Produces a stack trace of the num frames. The default is 5. The command dumps from the kernel stack and the process stack (if one is available) of a booted image.
Page 160 ROM Monitor Commands Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 161: Appendix C Using Setup On Cisco Ios Releases 11.2 Or 11.3(2)T
A P P E N D I X Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T This appendix contains instructions for running the setup script for systems containing Cisco IOS Release 11.2 or 11.3 software. Getting Started Before you turn on the access server and begin to use the setup script in the System Configuration dialog, make sure you have: •...
Page 162: Running Setup For Cisco Ios Release 11.2
Running Setup for Cisco IOS Release 11.2 The messages look similar to the following: The messages vary, depending on the Cisco IOS software release and feature set Note you selected. The screen displays in this section are for reference only and might not exactly reflect the messages on your console.
Page 163 Enter virtual terminal password: guessagain Respond to the following prompts as appropriate for your network: Step 9 Configure SNMP Network Management? [yes]: Community string [public]: Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-3...
Page 164 IP address pool that you set up later in the next prompt. Configure for Dynamic IP addresses? [no]: Configure for TCP header compression? [yes]: Configure for routing updates on async links? [no]: Enter the starting address of IP local pool? [X.X.X.X]: 172.20.30.40 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 165 IPX network number [2]: Configure the ISDN switch type: Step 13 Do you want to configure ISDN switch type? [yes]: The following ISDN switch types are available: [a] primary-4ess [b] primary-5ess Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-5...
Page 166 When you have completed the initial configuration script, messages similar to the following appear: The following configuration command script was created: hostname 5300 enable secret 5 $1$zxxT$YZMzUP1/wQvyLn5cWeyPu. enable password guessme line vty 0 4 password guessagain snmp-server community public Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 167 T1 0 framing esf clock source line primary linecode b8zs Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-7...
Page 168 Ethernet0 encapsulation ppp ppp authentication chap pap ppp multilink peer default ip address pool setup_pool dialer-group 1 access-list 101 permit ip any any Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 169 Run the setup script in the System Configuration dialog again and create another configuration. Enter the following: 5300> enable Password: <password> 5300# setup • Modify the existing configuration or configure additional features with the CLI as described in the chapter “Basic Configuration.” Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-9...
Page 170: Running Setup For Cisco Ios Release 11.3(2)T
Running Setup for Cisco IOS Release 11.3(2)T Running Setup for Cisco IOS Release 11.3(2)T Cisco IOS Release 11.3(2)T includes CAS options and includes the capability of configuring Note controllers by group for the Integrated Services (ISDN) Primary Rate Interface (PRI).
Page 171 Respond to the following prompts as appropriate for your network: Step 24 Configure SNMP Network Management? [yes]: Community string [public]: Configure LAT? [no]: Configure AppleTalk? [no]: yes Multizone networks? [no]: yes Configure DECnet? [no]: Configure IP? [yes]: Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-11...
Page 172 IP address pool that you set up later in the next prompt. Configure for Dynamic IP addresses? [no]: Configure for TCP header compression? [yes]: Configure for routing updates on async links? [no]: C-12 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 173 Class B network is 172.22.0.0, 0 subnet bits; mask is /16 Configure AppleTalk on this interface? [no]: yes Extended AppleTalk network? [no]: yes AppleTalk starting cable range [0]: Configure IPX on this interface? [no]: yes IPX network number [2]: Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-13...
Page 174: Continuing The Setup Script For T1/Pri Cards
Will you be using CT1 (robbed bit signaling) on this controller? [yes]: Enter your telco framing type: Step 5 The following framing types are available: esf | sf Enter the framing type [esf]: C-14 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 175 Current configuration: version 11.3 no service password-encryption hostname Router enable secret 5 $1$BzCj$3WnJoC.GO0SmB2U7Bd.Kb1 enable password b no ip routing isdn switch-type primary-5ess controller T1 0 framing esf clock source line primary Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-15...
Page 176 101 permit ip any any dialer-list 1 protocol ip list 101 line con 0 logging synchronous line 1 48 line aux 0 line vty 0 4 password b login scheduler interval 1000 C-16 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 177: Continuing The Setup Script For E1/Pri Cards
Modify the existing configuration or configure additional features with the CLI as described in the earlier chapters in this guide, the Dial Solutions Configuration Guide, the Dial Solutions Command Reference Guide, the Cisco IOS software configuration guide, and the command reference publications.
Page 178 The following line signaling types are available: [a] e&m-fgb [b] e&m-fgd [c] e&m-immediate-start [d] fxs-ground-start [e] fxs-loop-start [f] sas-ground-start [g] sas-loop-start [h] r2-analog [i] r2-digital [j] r2-pulse [k] p7 Enter the line signaling type [i]: C-18 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 179 Enter the framing type [crc4]: The following linecode types are available: ami | hdb3 Enter the line code type [hdb3]: The following line signaling types are available: [a] e&m-fgb [b] e&m-fgd [c] e&m-immediate-start Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-19...
Page 180 Enter the framing type [crc4]: The following linecode types are available: ami | hdb3 Enter the line code type [hdb3]: The following line signaling types are available: [a] e&m-fgb [b] e&m-fgd C-20 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 181 Enter the country name [0]: 16 After you complete the configuration script, messages similar to the following appear. 5300# wr t Building configuration... Current configuration: version 11.3 no service password-encryption hostname Router Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T C-21...
Page 182 101 permit ip any any dialer-list 1 protocol ip list 101 line con 0 logging synchronous line 1 96 line aux 0 line vty 0 4 password b login scheduler interval 1000 C-22 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 183: Where To Go Next
Where to Go Next At this point you can proceed to: • The chapter “Using Cisco IOS Software” to learn how to use the CLI to configure additional features. • The chapter “Access Service Security” to configure security on the access server.
Page 184 Where to Go Next C-24 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 185: Appendix D Upgrade Voip Software
A P P E N D I X Upgrade VoIP Software As Cisco revises its Voice feature card software, you can download these upgrades from Cisco. Use the steps in this section to upgrade your Voice feature card software. Before downloading a new version of VCware, be sure to verify that the version of VCware is compatible with the specific release of Cisco IOS software already running on the access server.
Page 186: Upgrading Voip Feature Card Firmware
Cisco IOS image. VFC ROM version 1.2 requires Cisco IOS image 0.14.1 (1.6 NA1) or later. VFC ROM Monitor version 1.2 can be made to work with Cisco IOS image 0.13 (or later) by appending the suffix “.VCW” to the VCWare image stored in VFC Flash memory.
Page 187: Identify The Vfc/Rom Monitor Mode
Identify the VFC/ROM Monitor Mode Identify the VFC/ROM Monitor Mode To identify the VFC/ROM Monitor software version, perform the following task in privileged EXEC (enable) mode: Step Command Purpose Enter enable mode. 5300> enable Password: <password> Enter the password. 5300# You have entered enable mode when the prompt changes to 5300#...
Page 188 Verify that the capability list has been 5300# show vfc slot_number cap-list 5300# populated. After you have completed the preceding tasks, reboot the Cisco AS5300 for these changes to take effect. Verify To check that you have successfully downloaded the software: •...
Page 189: Download Software In Rom Monitor Mode
• Determine if the VFC ROM version you are running is 1.1 or version1.2. After you have completed the preceding tasks, reboot the Cisco AS5300 for these changes to take effect. Download Software in ROM Monitor Mode Use the steps in the following table to download new voice software if your voice card is running in ROM Monitor mode from a floppy diskette.
Page 190 Verify that the capability list has been 5300# show vfc slot_number cap-list 5300# populated. After you have completed the preceding tasks, reboot the Cisco AS5300 for these changes to take effect. Verify To check that you have successfully downloaded the software: •...
Page 191: New Hardware Features
VFC board in slot 1 with 18 dsps 5300# • Determine if the VFC ROM version you are running is 1.1 or version1.2. New Hardware Features Hardware features available after the release of this document can be found at the following URL: http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/5300/5300cfg/index.htm Upgrade VoIP Software D-7...
Page 192 New Hardware Features Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 193 3-10 ARA examples 4-16 telco line code type 3-10 configuration mode verifying 3-10 configuring CHAP authentication, enable 3-24 definition Cisco Connection Online dial-in protocols 4-11 Cisco IOS software list examples 4-14 about list name 4-11 command modes lists 4-10 enable mode...
Page 194 3-59 debug vpm spi command 3-43 G711 Alaw, VoIP 3-41 dev command getting help dialer interface, IPX networks 3-50 group-range command 3-21 dialer map 3-50 dialer-list command 3-24 Index 2 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 195 ISDN PRI channel service states, displaying 3-14 configuring 3-11 help command NFAS groups, monitoring 3-14 help, Cisco IOS software show controller e1 command 3-13 help, technical support show controller t1 command 3-13 history command show isdn status command 3-14 host name...
Page 196 3-20 configuring 3-44 no debug ppp authentiation command 3-23 tips 3-45 no debug ppp negotiation command 3-23 verifying 3-45 no debug sgbp errors command 3-57 related publications Index 4 Cisco AS5300 Universal Access Server Software Configuration Guide...
Page 197 3-25 show ip command 3-45 show ip rtp header-compression command 3-45 show ipx interface serial command 3-51 unalias command show isdn nfas group command 3-14 undo feature, Cisco IOS software show isdn service command 3-14 Index 5...
Page 198 RTP header compression connections 3-45 show dialplan number command 3-39 show ip command 3-45 show ip rtp header-compression command 3-45 show num-exp command 3-40 voice network data 3-39 voice ports 3-41 Index 6 Cisco AS5300 Universal Access Server Software Configuration Guide...

This manual is also suitable for:

As5300

Cisco AS5300-96VOIP-A Software Configuration Manual

Preface

Chapter 1 First-Time Configuration

Chapter 2 Using Cisco IOS Software

Chapter 3 Basic Configuration

Chapter 4 Access Service Security

Appendix A Managing Modems

Appendix B ROM Monitor B-1

Appendix C Using Setup on Cisco IOS Releases 11.2 or 11.3(2)T

Appendix D Upgrade Voip Software

Quick Links

Related Manuals for Cisco AS5300-96VOIP-A

Summary of Contents for Cisco AS5300-96VOIP-A

This manual is also suitable for:

Table of Contents