Download Print this page

Cisco AS5300 - Universal Access Server Configuration Manual

Network access server
Hide thumbs Also See for AS5300 - Universal Access Server:

Advertisement

Quick Links

Configuring the Cisco AS5300 Network Access
Server
This chapter describes how to configure the Cisco AS5300 network access server (NAS) to receive calls
from the Cisco 1604, Cisco 766, and remote modem users as presented in Chapter 1, "Dial Case Study
Overview".
Network Topology, Hardware, and Software Parameters
In the network topology shown in Figure 2-1, the PRI telephone number assigned to the Cisco AS5300
at the central headquarters site (hq-sanjose) is 4085551234. This number is often called the hunt group
number, which distributes calls among the available B channels. All four PRI trunks on the Cisco
AS5300 are assigned to this number by the PRI provider. The directory numbers for the remote devices
are configured on the Cisco AS5300 and then, subsequently configured on the remote devices
themselves.
The subnet 10.1.2.0 255.255.255.0 is configured on the Cisco AS5300 and is used for the loopback
interface and the local IP address pools as described in Chapter 1, "Dial Case Study Overview".
Figure 2-1
IP network
Table 2-1 provides detailed information about each end of the connection. This is the network
administrator's top-level design table and is used in conjunction with the network topology diagram
shown in Figure 2-1 for planning and organizing the network.
Case Study Scenario Network Topology from the Perspective of the Cisco AS5300
10.1.1.10
DNS
255.255.255.0
server
10.2.2.3
Cisco
AS5300
Backhaul
router
C H A P T E R
Four T1 PRI lines
PSTN
Interface dialer
10.1.254.1
255.255.255.0
Cisco IOS Dial Services Quick Configuration Guide
2
Cisco 766
remote LAN
Cisco 1604
remote LAN
Modem
client
2-1

Advertisement

loading

Summary of Contents for Cisco AS5300 - Universal Access Server

  • Page 1 Server This chapter describes how to configure the Cisco AS5300 network access server (NAS) to receive calls from the Cisco 1604, Cisco 766, and remote modem users as presented in Chapter 1, “Dial Case Study Overview”. Network Topology, Hardware, and Software Parameters In the network topology shown in Figure 2-1, the PRI telephone number assigned to the Cisco AS5300 at the central headquarters site (hq-sanjose) is 4085551234.
  • Page 2: Overview Of Tasks

    Be sure to use your own host names and passwords. For example, hq-sanjose, soho-tahoe, and tahoe-pw are for this case study only. Overview of Tasks Do the following tasks to configure the Cisco AS5300 network access server (NAS): Task 1—Setting Up Basic Configuration Parameters: Step 1—Verifying the Startup Configuration Step 2—Configuring the Host Name, Password, and Time Stamps...
  • Page 3 Task 1—Setting Up Basic Configuration Parameters When you first power up the Cisco AS5300, it will have to be configured to your particular needs. Verify that you have a blank startup configuration, and configure it to your particular site needs by doing the following steps: Step 1—Verifying the Startup Configuration...
  • Page 4 Press RETURN to get started! Router> In this case study, the Cisco AS5300 is manually configured by using the Cisco IOS software. The automatic setup script is not used. Enter the show version command to see if the access server is recognizing all its modem Note cards.
  • Page 5 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 1—Setting Up Basic Configuration Parameters Enter global configuration mode. If the logging output generated by the access server interferes with Step 2 your terminal screen, redisplay your current command line by using the Tab key.
  • Page 6 IP RSVP related information <cr> Step 3—Configuring Local AAA Security The Cisco IOS security model to use on all Cisco devices is authentication, authorization, and accounting (AAA). AAA provides the primary framework through which you set up access control on the access server.
  • Page 7 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 1—Setting Up Basic Configuration Parameters To configure local AAA security, enter the following commands beginning in global configuration mode: Make sure to change “joe-admin” to your own username and “joe-password” to your own Note password.
  • Page 8 When you have configured the preliminary parameters such as your host name, password, timestamps and local AAA security on the Cisco AS5300, you can then move on to setting up the asynchronous shell services, which provide access through the Cisco IOS CLI EXEC shell to terminal services (no...
  • Page 9 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 2—Setting Up Asynchronous Shell Services Configure the IP address and subnet mask on the Fast Ethernet interface. Step 1 hq-sanjose(config)# interface fastethernet 0 hq-sanjose(config-if)# ip address 10.1.1.10 255.255.255.0 Step 2 Set autonegotiation for the line speed based on the peer routers, hubs, and switch media.
  • Page 10 Step 2—Configuring the T1 Controllers Configure the Cisco AS5300’s T1 controllers to allow calls to come into the NAS from the public switched telephone network (PSTN) cloud. You must specify the following information for each...
  • Page 11 Configure the second controller, controller T1 1. Set the clocking to secondary 1. If the line clocking Step 8 from controller T1 0 fails, the Cisco AS5300 will receive its clocking from controller T1 1. hq-sanjose(config#) controller t1 1 hq-sanjose(config-controller)# framing esf...
  • Page 12 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 2—Setting Up Asynchronous Shell Services Verifying the T1 Controller Configuration Enter the show controller t1 command. The output from this command enables you to determine when Step 1 and where errors occur.
  • Page 13 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 2—Setting Up Asynchronous Shell Services Receiver has loss of signal. Version info of slot 0: HW: 2, Firmware: 16, PLD Rev: 0 Manufacture Cookie Info: EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x42, Board Hardware Version 1.0, Item Number 73-2217-4,...
  • Page 14 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 2—Setting Up Asynchronous Shell Services Enter the show running command to see the current configuration of all of the Cisco AS5300 T1 Step 3 controllers: hq-sanjose# show running Building configuration...
  • Page 15 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 2—Setting Up Asynchronous Shell Services To configure the serial channels, enter the following commands beginning in global configuration mode: Access the configuration mode for the D-channel serial interface that corresponds to controller T1 0.
  • Page 16 Timeslot(s) Used:24, Transmitter delay is 0 flags The term “spoofing” means that the interface is presenting itself to the Cisco IOS software as up and operational. This interface can now receive routes. There are 23 more channels behind this interface that you do not see (for example, S0:0, S0:1, and so on).
  • Page 17 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 2—Setting Up Asynchronous Shell Services Layer 2 Status should be “Multiple_Frame_Established.” (It might take several seconds for Layer 2 • status to appear.) • Layer 3 Status should be “No Active Layer 3 Call(s).”...
  • Page 18 Make sure the show controller t1 command’s current output shows no errors. Step 4—Configuring the Modems and Lines Configure the Cisco AS5300 internal modems and asynchronous lines after the ISDN channels are operational. Each modem is directly mapped to a dedicated async line in the access server. After this configuration is set up, the Cisco AS5300 is ready to take modem calls.
  • Page 19 Task 2—Setting Up Asynchronous Shell Services To configure the Cisco AS5300’s modems and asynchronous lines, enter the following commands beginning in global configuration mode: Enter the range of modem lines to configure. In this example, the Cisco AS5300 has 96 integrated Step 1 modems.
  • Page 20 Step 5—Testing Async Shell Connections Now you are ready to send the first modem call into the Cisco AS5300. This step shows you how to do the test and track the asynchronous data path taken by a single modem call.
  • Page 21 PC RS-232 console Enter the following debug commands on the Cisco AS5300 to debug calls coming in to the integrated Step 1 modems. These commands capture the call-switching module and ISDN connection messages: hq-sanjose# debug modem csm...
  • Page 22 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 2—Setting Up Asynchronous Shell Services If the modem successfully connects, a connect message followed by the terminal service EXEC login prompt appears on the test PC. atdt5551234 CONNECT 24000/REL - MNP...
  • Page 23 *Mar 1 20:43:36.806: CSM_PROC_IC4_WAIT_FOR_CARRIER: CSM_EVENT_ISDN_CONNECTED at slot 1, port 1 Every Q.931 message indicates whether the message was transmitted by the Cisco AS5300 NAS ( TX -> or received by the NAS ( ). Table 2-2 shows the most common message types used for opening and RX <-...
  • Page 24 Identifies the called phone number that is used to reach another device. Called Party Number In this case study, 5551234 is the directory number assigned to the Cisco AS5300. The test PC dialed this number to make a modem connection.
  • Page 25 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 2—Setting Up Asynchronous Shell Services Enter the show modem log 1/1 command to view the information logged for modem 1/1. The time stamps show when the event occurred. The most current events begin at the bottom of the output:...
  • Page 26 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 2—Setting Up Asynchronous Shell Services Enter the show controller t1 0 call-counters command, which shows you the DS0 timeslot used to carry the modem call. This example shows that timeslot 1 has accepted one call for a total...
  • Page 27 • Step 1—Setting Up IP Address Pools To support remote nodes dialing in, create a pool of IP addresses on the Cisco AS5300. As remote node devices connect, they request an IP address from this central site. Determine how your Internet/intranet backbone will route packets to the addresses in this IP address pool.
  • Page 28 IP addresses already assigned. Loopback interfaces are very stable—they do not go up and down as LAN interfaces can. To set up an IP address pool, enter the following commands in the Cisco AS5300 CLI beginning in global configuration mode: Create loopback interface 0.
  • Page 29 PPP session on that line. hq-sanjose(config-if)# async mode interactive Enable CHAP and PAP authentication on the interface during LCP negotiation. The Cisco AS5300 NAS Step 5 first requests authentication with CHAP. If CHAP is rejected by the remote client, then PAP authentication is requested.
  • Page 30 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 3—Setting Up Asynchronous PPP Services username joe-admin password 7 <removed> async-bootp dns-server 10.2.2.3 10.2.3.1 isdn switch-type primary-ni controller T1 0 framing esf clock source line primary linecode b8zs pri-group timeslots 1-24...
  • Page 31 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 3—Setting Up Asynchronous PPP Services no ip directed-broadcast isdn incoming-voice modem no fair-queue no cdp enable interface FastEthernet0 ip address 10.1.1.10 255.255.255.0 no ip directed-broadcast no ip route-cache no ip mroute-cache...
  • Page 32 Step 3—Testing Async PPP Connections Now you are ready to send the first async PPP modem call into the Cisco AS5300. Figure 2-4 shows a test PC making a PPP modem-to-modem connection with the Cisco AS5300 over the PSTN network.
  • Page 33 The PC asks the Cisco AS5300 to support the callback option. See 21:35:02.738. Outgoing config reject (O CONFREJ). The Cisco AS5300 rejects this option because the NAS is not configured to support Microsoft Callback in this case study. Cisco IOS Dial Services Quick Configuration Guide...
  • Page 34 After LCP negotiates, authentication starts. Authentication must happen before any network protocols, such as IP, are delivered. Both sides authenticate with the method negotiated during LCP. The Cisco AS5300 is authenticating the test PC by using CHAP. The test PC is not authenticating the Cisco AS5300 in this test case.
  • Page 35 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 3—Setting Up Asynchronous PPP Services *Mar 1 21:34:59.790: ip_get_pool: As4: returning address = 10.1.2.2 *Mar 1 21:34:59.794: TTY4: destroy timer type 1 (OK) *Mar 1 21:34:59.794: TTY4: destroy timer type 0 *Mar 1 21:35:01.798: %LINK-3-UPDOWN: Interface Async4, changed state to up...
  • Page 36 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 4—Setting Up Synchronous PPP Services *Mar 1 21:35:04.318: As4 CCP: Stacker history 1 check mode EXTENDED (0x11050 00104) *Mar 1 21:35:04.322: As4 LCP: O PROTREJ [Open] id 3 len 21 protocol CCP *Mar 1 21:35:04.326: As4 LCP:...
  • Page 37 • Supports remote LANs by maintaining IP routes to the remote sites when they are not connected. To configure the Cisco AS5300’s dialer interfaces, enter the following commands beginning in global configuration mode: Create interface dialer 1 and enable IP routing.
  • Page 38 Step 12 hq-sanjose(config-if)# ppp authentication chap pap Disable fair queuing. Step 13 hq-sanjose(config-if)# no fair-queue Disable the Cisco discovery protocol—unless you are using it for a specific purpose. Step 14 hq-sanjose(config-if)# no cdp enable Turn off multicast route caching. Step 15 hq-sanjose(config-if)# no ip mroute-cache Return to global configuration mode.
  • Page 39 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 4—Setting Up Synchronous PPP Services Serial0:2 - dialer type = ISDN Idle timer (1800 secs), Fast idle timer (20 secs) Wait for carrier (30 secs), Re-enable (15 secs) Dialer state is idle...
  • Page 40 6 and 7 below and in the output of the show running command, is used to map the remote site’s name to the IP address. To enable the remote LANs to dial in to the Cisco AS5300, enter the following commands beginning in global configuration mode: Be sure to use your own usernames and passwords for the remote sites.
  • Page 41 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 4—Setting Up Synchronous PPP Services Specify the soho-tahoe username and password. Step 3 hq-sanjose(config)# username soho-tahoe password tahoe-pw Enable IP routing for the soho-tahoe subnet. Step 4 hq-sanjose(config)# ip route 10.1.3.0 255.255.255.0 10.1.254.3 permanent Enter interface dialer 1.
  • Page 42 To display the static and dynamic dialer maps, enter the show dialer map command on the • Cisco AS5300. If you want the Cisco AS5300 to initiate calls to the remote sites, you must define a dialer Note map phone number. This case study does not cover this option. See the Cisco IOS Dial Services Configuration Guides for more information.
  • Page 43 Verifying the Default Gateway (Backhaul) Routing Protocol Configuration To verify the configuration of the default gateway (backhaul) parameters: Enter the show ip eigrp topology command on the Cisco AS5300 CLI to see the IP-EIGRP topology table parameters: hq-sanjose# show ip eigrp topology...
  • Page 44 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 4—Setting Up Synchronous PPP Services aaa new-model aaa authentication login default local aaa authentication ppp default if-needed local enable secret 5 $1$.voA$9/8.Zoil3jeWJMP6hEE6U0 username joe-admin password 7 <removed> username robo-austin password 7 <removed>...
  • Page 45 Chapter 2 Configuring the Cisco AS5300 Network Access Server Task 4—Setting Up Synchronous PPP Services dialer rotary-group 1 isdn incoming-voice modem interface Serial3:23 no ip address no ip directed-broadcast dialer rotary-group 1 isdn incoming-voice modem interface FastEthernet0 ip address 10.1.1.10 255.255.255.0 no ip directed-broadcast ip summary-address eigrp 10 10.1.2.0 255.255.255.0...
  • Page 46: Step 5-Saving The Configuration

    Step 7—Adding More Remote LAN Sites as Needed After you bring up your remote LANs and remote nodes, and if you decide to expand the solution to a larger dial implementation, configure the following key items on the Cisco AS5300 to support each additional remote LAN router: One dialer map •...