Allied Telesis AR Router Quick guide

Helpful Configuration
Scripts for the
AR Router Series

Revision History
Author Revision Date Modifications
ST 5.8.4 5 March 2001 Ex 5.6; Correction to firewall rule 1 interface
Ex 6.3; Firewall rule 2 and 3 removed; rule 4 renumbered to 2;
rule 3 (internal ‘nonat’) added
Ex 6.4; Heading adjusted; Note adjusted; Firewall rule 3
added
Ex 6.5; Heading adjusted; Comments adjusted
Ex 6.6; Two Gateways example added
Ex 6.7; IPSec Testing notes added
ST 5.8.5 19 March 2001 Ex 6.3; Add ‘isa’ parameter to associate ipsec policy with
specific isakmp policy. Create separate isakmp policies
for remoffice and roaming VPN clients. Rename
isakmp policies on vpn client.
Added specific configuration for router B
Ex 6.6; Add ‘isa’ parameter to associate ipsec policy with
specific isakmp policy. Create separate isakmp policies
for remoffice and roaming VPN clients. Rename
isakmp policies on vpn client.
ST 5.8.6 3 April 2001 Ex 6.3; ‘sendnotify’ parameter added
Ex 6.3.1, 6.4.1, 6.7; VPN Client interface defined as ‘dialup’
Ex 6.5; Removed ppp0 on site A. Modified ADSL pinhole
details. Corrected eth0 address at site B.
Ex 6.6 becomes Ex 6.7
Ex 6.6 inserted; IPSec and Firewall through two NAT
gateways (eg: ADSL)
ST 5.8.7 5 April 2001 Ex 5.6; Firewall DMZ modified to dual policy firewall
Ex 6.2; ‘remoteip’ parameter added to firewall rule 1
Ex 6.5, 6.7; ‘sendnotify’ parameter added
Ex 6.6; Renamed IPS and ISA policy names; Use ‘isa’
parameter in IPS policy; Add Internet IPS policy
Ex 6.8; Notes extended to give basic initial debugging modes.
Ex 6.3, 6.4, 6.5; Secoff user and securedelay defined
ATI are manufacturers of the AR router and are specialists in ISDN and secure networking devices. More detailed
information on the AR products is available on ATI’s World Wide Web sites ; www.alliedtelesyn.com
www.alliedtelesyn.co.nz
Document text by Mathew Jury - ATI Technical Consultant.
and Shayle Tasker - Network Engineer, ATR Customer Services Group
Allied Telesyn offers technical assistance in partnership with our authorised distributors and resellers. For technical
assistance, please contact the authorised distributor or reseller in your area. Please refer to
http://www.alliedtelesyn.co.nz/support/support.html for a list of Authorised Distributor & Resellers
Specifications subject to change without notice.
ATR

Helpful Scripts
Helpful Scripts Page 3
Revision 5.8.7; 5 April 2001
Contents
1. Quick Command Reference ........................................................................................................ 5
1.1. Configurations...................................................................................................................... 5
1.2. Filing, Reboots, and Feature Licences................................................................................. 5
1.3. Command Actions................................................................................................................ 5
1.4. Upgrade Process .................................................................................................................6
1.5. Generating an Encryption Key ............................................................................................. 6
2. PPP over ISDN and DDS ............................................................................................................ 7
2.1. PPP over DDS for a Private network.................................................................................... 7
2.2. PPP over DDS for Internet Access ...................................................................................... 8
2.3. PPP over DDS for Internet (NAT to SMTP Server) and Private networks ............................ 9
2.4. PPP over ISDN Private network......................................................................................... 10
2.5. PPP over ISDN Internet Access......................................................................................... 11
2.5.1. Example 2.5 with 2 B channels always up.................................................................. 12
2.5.2. Example 2.5 with Cisco's at the ISP ........................................................................... 12
2.6. PPP over ISDN Internet and Private networks ................................................................... 13
3. Time Division Muliplexing (TDM) ............................................................................................... 14
4. Frame Relay.............................................................................................................................. 15
4.1. Standard Frame Relay for LMI REV 1................................................................................ 15
4.2. Standard Frame Relay ISP Access.................................................................................... 16
4.3. Standard Frame Relay for LMI AnnexD ............................................................................. 17
4.4. Logical interfacing to Frame Relay, Internet connection via ISP with Private Network ....... 18
4.4.1. OSPF on the private network, 4.4 continued .............................................................. 19
5. Firewall Configs ......................................................................................................................... 21
5.1. Simple Firewall over PPP with internal mail server............................................................. 21
5.1.1. PINGING, Email notification, accounting, and logging................................................ 22
5.1.2. Internet Access to Firewall Router.............................................................................. 22
5.2. Private Frame Relay with Firewall on ISP Internet PVC ..................................................... 22
5.3. Firewall over PPP with a Public and private IP range multi-homed on the LAN (Pseudo
DMZ) 24
5.4. Firewall over PPP with Private IP addesses only on the LAN............................................. 25
5.5. Firewall with ADSL............................................................................................................. 26
5.6. Firewall over PPP with a DMZ LAN.................................................................................... 27
5.7. Firewall over Frame Relay with (Dynamic IP) for Internet access. "Mailing bagging" ......... 28
6. VPN........................................................................................................................................... 29

Helpful Scripts
Helpful Scripts Page 4
Revision 5.8.7; 5 April 2001
6.1. GRE Tunnel (with SA Encrypt.), NAT, and Internet ............................................................29
6.2. L2TP Tunnel (with SA Encrypt.), Firewall and Internet........................................................30
6.3. IPSec (with ISAKMP), Firewall, and VPN Client..................................................................31
6.3.1. IPSec Client option for Example 6.3............................................................................32
6.4. IPSec (with Manual Key) and Firewall with NAT device (eg: ADSL), plus VPN Client.........33
6.4.1. IPSec Client option for Example 6.4............................................................................34
6.5. IPSec & ISAKMP (with L2TP) and Firewall router, behind NAT device (eg:ADSL) .............35
6.6. IPSec and Firewall through two NAT gateways (eg: ADSL)................................................37
6.7. Two Gateways; Firewall with IPSec and ISAKMP to VPN Client & Remote Office..............39
6.8. Notes on IPSec Testing and Verification ............................................................................41

Helpful Scripts
Helpful Scripts Page 5
Revision 5.8.7; 5 April 2001
1. Quick Command Reference
1.1. Configurations
Task Command
Sho the log
View the current release and patch
Sho the system Information
Save the current configuration
Change the boot configuration file
What is the current configuration file
Sho the current RAM configuration
Sho log
Sho install
Sho sys
Create config=<config>.cfg
Set conf=<config>.cfg
Sho conf
Sho conf dyn
Sho conf dyn=<sub section>
1.2. Filing, Reboots, and Feature Licences
Task Command
Sho file contents in FLASH or NVS
Sho files
To Edit a file
Warm boot the router
Quick boot (for applying new configurations)
Enable a new feature licence
Sho fi=<file.ext>
Sho fi
Edit <file.ext>
Restart reboot
Restart router
Enable feature=<feature> pass=<password>
1.3. Command Actions
To config To Remove from Configuration To view and modify
Add
Create
Activate
Enable
Delete
Destroy
Deactivate
Disable
Sho
Set
Reset
Purge

Helpful Scripts
Helpful Scripts Page 6
Revision 5.8.7; 5 April 2001
1.4. Upgrade Process
Upgrade process Commands
Make space, delete the old files
Load files
Apply a Help file
Save the config
Enable the release licence
Set the current release and patch file
Warm boot the router
Del fi=<oldfile.ext>
Load fi=<file.rez> dest=flash serv=<server ip>
Load fi=<file.paz> dest=flash serv=<server ip>
Load fi=<file.hlp> dest=flash serv=<server ip>
Set help=<help>.hlp
Create conf=<current config>
Enable rel=<release.rez> num=<release> pass=<password>
Set inst=pref rel=<release.rez> pat=<patch.paz>
Restart reboot
1.5. Generating an Encryption Key
Task Command
Add security level user
Keep security officer access for 10 Minutes
Turn on Security
Create the Manual or SA key at one end
Or
Create the ISAKMP key
View the key and
Enter the Manual/SA key at the other end
Or
Enter the ISAKMP key at the other end
Allow remote Security officer access and
Specify remote IP address ranges
Add user=secoff pass=secoff priv=security
Set user securedelay=600
Enable system security
At router 'A'>Create enco key=1 type=des random
Or
At router 'A'>Create enco key=1 type=gen random
At router 'A'>Sho enco key=1
(tip: copy and paste this key to router B)
At router 'B'>Create enco key=1 type=des val=<router ‘A’ key>
Or
At router 'B'>Create enco key=1 type=gen val=<router ‘A’ key>
Enable user rso
Add user rso ip=<remote access ip> mask=<mask>

Helpful Scripts
Helpful Scripts Page 7
Revision 5.8.7; 5 April 2001
2. PPP over ISDN and DDS
2.1. PPP over DDS for a Private network
CentreCOM AR300
Ac ce ss Ro u t er LAN WAN SYSTEM
LINK
TX
RX
Coll
Site A Site B
192.168.10.0 192.168.20.0
192.168.254.0
CentreCOM AR300
Access R outer LAN WAN SYSTEM
LINK
TX
RX
Coll
Router A Router B
#
# PPP Configuration
#
create ppp=0 over=syn0
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.10.1
add ip int=ppp0 ip=192.168.254.1
add ip route=0.0.0.0 next=0.0.0.0 int=ppp0
#
# PPP Configuration
#
create ppp=0 over=syn0
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.20.1
add ip int=ppp0 ip=192.168.254.2
add ip route=0.0.0.0 next=0.0.0.0 int=ppp0

Helpful Scripts
Helpful Scripts Page 8
Revision 5.8.7; 5 April 2001
2.2. PPP over DDS for Internet Access
CentreCOM AR300
Ac ce ss Ro u t er LAN WAN SYSTEM
LINK
TX
RX
Coll
Site A
192.168.10.0
200.200.200.0/30
Internet
Private NAT Public
Note: Be aware that with many Internet Providers it may be more suitable to turn LQR (link quality reporting) off on PPP
links, and instead use LCP Echo Request and Echo Reply messages to determine link quality (echo=on). Simply add
‘lqr=off echo=on’ to the PPP creation command.
Router A
#
# PPP Configuration
#
create ppp=0 over=syn0
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.10.1
add ip int=ppp0 ip=200.200.200.1 mask=255.255.255.252
add ip route=0.0.0.0 next=0.0.0.0 int=ppp0
enable ip nat
enable ip nat log=all
add ip nat ip=192.168.10.0 mask=255.255.255.0 gblint=ppp0

Helpful Scripts
Helpful Scripts Page 9
Revision 5.8.7; 5 April 2001
2.3. PPP over DDS for Internet (NAT to SMTP
Server) and Private networks
Cent reC OM AR300
A cces sRouter LAN W AN SYST EM
LINK
TX
RX
Coll
Site A
192.168.10.0 200.200.200.0/30
Internet
Private NAT Public
Cent reC OM AR30 0
AccessRouter LAN W AN SY STEM
LINK
TX
RX
Coll
192.168.20.0
192.168.254.0
ppp0
ppp0
Site B
ppp1
Mail Server
192.168.10.2
Note: Be aware that with many Internet Providers it may be more suitable to turn LQR (link quality reporting) off on PPP
links, and instead use LCP Echo Request and Echo Reply messages to determine link quality (echo=on). Simply add
‘lqr=off echo=on’ to the PPP creation command.
Router A Router B
#
# PPP Configuration
#
create ppp=0 over=syn0
create ppp=1 over=syn1
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.10.1
add ip int=ppp1 ip=192.168.254.1
add ip int=ppp0 ip=200.200.200.1 mask=255.255.255.252
add ip route=0.0.0.0 next=0.0.0.0 int=ppp0
add ip route=192.168.20.0 next=0.0.0.0 int=ppp1
enable ip nat
enable ip nat log=all
add ip nat ip=192.168.0.0 mask=255.255.0.0
gblip=200.200.200.1
add ip nat ip=192.168.10.2 mask=255.255.255.255 port=smtp
gblip=200.200.200.1 gblport=smtp proto=tcp
#
# PPP Configuration
#
create ppp=0 over=syn0
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.20.1
add ip int=ppp0 ip=192.168.254.2
add ip route=0.0.0.0 next=0.0.0.0 int=ppp0

Helpful Scripts
Helpful Scripts Page 10
Revision 5.8.7; 5 April 2001
2.4. PPP over ISDN Private network
CentreCOM AR300
Access R outer LAN WAN SYSTEM
LINK
TX
RX
Coll
Site A
192.168.10.0
192.168.254.0/30
ISDN
Mail Server
192.168.10.2
192.168.254.4/30
Site C
Site B
CentreCOM AR300
Access R outer LAN WAN SYSTEM
LINK
TX
RX
Coll
CentreCOM AR300
Access R outer LAN WAN SYSTEM
LINK
TX
RX
Coll
192.168.2.0
192.168.1.0
ppp1
ppp2
Router A Router B
#
# System Configuration
#
set sys territory=<countrycode>
#
# ISDN Configuration
#
add isdn call=siteb num=12345 prec=in searchsub=local
outsub=local
add isdn call=sitec num=34567 prec=in searchsub=local
outsub=local
#
# PPP Configuration
#
create ppp=1 over=isdn-siteb idle=60
create ppp=2 over=isdn-sitec idle=60
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.10.1
add ip int=ppp1 ip=192.168.254.1 mask=255.255.255.252
add ip int=ppp2 ip=192.168.254.5 mask=255.255.255.252
add ip route=192.168.1.0 next=0.0.0.0 int=ppp1
add ip route=192.168.2.0 next=0.0.0.0 int=ppp2
#
# System Configuration
#
set sys territory=<countrycode>
#
# ISDN Configuration
#
add isdn call=siteb num=54321 prec=out
searchsub=local outsub=local
#
# PPP Configuration
#
create ppp=0 over=isdn-siteb idle=60
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.1.1
add ip int=ppp0 ip=192.168.254.2
add ip route=0.0.0.0 next=0.0.0.0 int=ppp0

Helpful Scripts
Helpful Scripts Page 11
Revision 5.8.7; 5 April 2001
Router C
Same as router B with the following exceptions
1) Replace all occurances of "siteb" with
"sitec"
2) Change the ip address of ppp0 and eth0
appropriately
2.5. PPP over ISDN Internet Access
CentreCOM AR 300
AccessRo uter LAN WAN SY S TEM
LINK
TX
RX
Coll
Site A
192.168.10.0
Internet
Private NAT Public
ISDN
Dynamic IP
Note: Be aware that with many Internet Providers it may be more suitable to turn LQR (link quality reporting) off on PPP
links, and instead use LCP Echo Request and Echo Reply messages to determine link quality (echo=on). Simply add
‘lqr=off echo=on’ to the PPP creation command.
Router A
#
# System Configuration
set sys territory=<countrycode>
#
# ISDN Configuration
add isdn call=internet num=12345 prec=out
#
# PPP Configuration
# Note: 2nd B channel on demand
create ppp=0 over=isdn-internet idle=60 bap=off ipreq=on user=<username> pass=<password>
add ppp=0 over=isdn-internet type=demand
#
# IP Configuration
enable ip
enable ip rem
add ip int=eth0 ip=192.168.10.1
add ip int=ppp0 ip=0.0.0.0
add ip route=0.0.0.0 next=0.0.0.0 int=ppp0
enable ip nat
enable ip nat log=all
add ip nat ip=192.168.10.0 mask=255.255.255.0 gblint=ppp0

Helpful Scripts
Helpful Scripts Page 12
Revision 5.8.7; 5 April 2001
2.5.1. Example 2.5 with 2 B channels always up
Note: Some ISDN providers and /or ISP providers charge per minute and this option may not
be affordable. This alternative is intended where an affordable fixed monthly charge account
has been offered by ISDN and ISP providers.
Note: Be aware that with many Internet Providers it may be more suitable to turn LQR (link quality reporting) off on
PPP links, and instead use LCP Echo Request and Echo Reply messages to determine link quality (echo=on).
Simply add ‘lqr=off echo=on’ to the PPP creation command.
ISDN & PPP Configuration modifications for 2 B channels always up
#
# ISDN Configuration
#
add isdn call=internet num=12345 prec=out keepup=on
#
# PPP Configuration
# Note: No idle parameter, user and password required if going into an ISP
create ppp=0 over=isdn-internet num=2 bap=off [user=<username> password=<password>]
2.5.2. Example 2.5 with Cisco's at the ISP
PPP Configuration modifications for Cisco at the ISP
#
# PPP Configuration
# Note: 2nd B channel on demand
create ppp=0 over=isdn-internet idle=60 bap=off lqr=off echo=on user=<user name> pass=<password>
add ppp=0 over=isdn-internet type=demand

Helpful Scripts
Helpful Scripts Page 13
Revision 5.8.7; 5 April 2001
2.6. PPP over ISDN Internet and Private networks
CentreCOM AR300
A cces sRouter LAN W AN SYST EM
LINK
TX
RX
Coll
Site A
192.168.10.0
192.168.254.0/30
ISDN
Mail Server
192.168.10.2
192.168.254.4/30
Site C
Site B
CentreCOM
AR300
A cces sRouter LAN W AN SY STEM
LINK
TX
RX
Coll
CentreCOM AR300
A cces sRouter LAN W AN SY STEM
LINK
TX
RX
Coll
192.168.2.0
192.168.1.0
ISDN
200.200.200.0/30
Internet
ppp0
ppp1
ppp2
Pu blic
NAT
Private
Note: Be aware that with many Internet Providers it may be more suitable to turn LQR (link quality reporting) off on PPP
links, and instead use LCP Echo Request and Echo Reply messages to determine link quality (echo=on). Simply add
‘lqr=off echo=on’ to the PPP creation command.
Router A Router A (Continued)
#
# System Configuration
#
set sys territory=<countrycode>
#
# ISDN Configuration
#
add isdn call=internet num=666 prec=out
add isdn call=siteb num=12345 prec=in
searchsub=local outsub=local
add isdn call=sitec num=34567 prec=in
searchsub=local outsub=local
#
# PPP Configuration
#
create ppp=0 over=isdn-internet idle=60
bap=off user=<username> pass=<password>
create ppp=1 over=isdn-siteb idle=60
create ppp=2 over=isdn-sitec idle=60
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.10.1
add ip int=ppp0 ip=200.200.200.1
add ip int=ppp1 ip=192.168.254.1 mask=255.255.255.252
add ip int=ppp2 ip=192.168.254.5 mask=255.255.255.252
add ip route=192.168.1.0 next=0.0.0.0 int=ppp1
add ip route=192.168.2.0 next=0.0.0.0 int=ppp2
add ip route=0.0.0.0 next=0.0.0.0 int=ppp0
enable ip nat
enable ip nat log=all
# Note: NAT adds local subnets for all 3 sites
add ip nat ip=192.168.10.0 mask=255.255.255.0
gblip=200.200.200.1
add ip nat ip=192.168.1.0 mask=255.255.255.0
gblip=200.200.200.1
add ip nat ip=192.168.2.0 mask=255.255.255.0
gblip=200.200.200.1
add ip nat ip=192.168.10.2 mask=255.255.255.255
port=smtp gblip=200.200.200.1 gblport=smtp proto=tcp
Router B and C configured as in example 2.4

Helpful Scripts
Helpful Scripts Page 14
Revision 5.8.7; 5 April 2001
3. Time Division Muliplexing (TDM)
Router A Router A (Continued)
#
# PRI configuration
# Note:"CRC" mode may need to be set to "off" or
# "checking" for the link to become active
# depending on the Telco configuration
# Note : RJ 45 Pinouts for PRI devices aren't
# standardized, check your NTU if using RJ 45.
# termination
set pri=0 mode=tdm
set pri=0 crc=reporting
#
# TDM configuration
#
create tdm group=site_b interface=pri0 slots=1
create tdm group=site_c interface=pri0 slots=6-7
#
# PPP Configuration
#
create ppp=1 over=tdm-site_b idle=60 comp=on
create ppp=2 over=tdm-site_c idle=60 comp=on
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.10.1
add ip int=ppp1 ip=192.168.254.1
mask=255.255.255.252
add ip int=ppp2 ip=192.168.254.5
mask=255.255.255.252
add ip route=192.168.1.0 next=0.0.0.0 int=ppp1
add ip route=192.168.2.0 next=0.0.0.0 int=ppp2
Router B
#
# PPP Configuration
#
create ppp=0 over=syn0
#
# IP Configuration
# Note: Router C change eth and ppp IP address
enable ip
add ip int=eth0 ip=192.168.1.1
add ip int=ppp0 ip=192.168.254.2
add ip route=0.0.0.0 next=0.0.0.0 int=ppp0
CentreCOM AR300
Acce ss Rout er LAN WAN SYSTEM
LINK
TX
RX
Coll
Site A
AR 395
192.168.10.0
192.168.254.0/30
TDM
Mail Server
192.168.10.2
192.168.254.4/30
Site C
Site B
CentreCOM AR300
Acce ss R ou ter LAN W AN SYS TEM
LINK
TX
RX
Coll
CentreCOM AR300
Acce ss R ou ter LAN W AN SYS TEM
LINK
TX
RX
Coll
192.168.2.0
192.168.1.0
ppp1
ppp2
2M PRI

Helpful Scripts
Helpful Scripts Page 15
Revision 5.8.7; 5 April 2001
4. Frame Relay
4.1. Standard Frame Relay for LMI REV 1
(Sometimes referred to as “cisco” LMI type)
Site A
192.168.1.0
Site C
Site B
192.168.3.0
192.168.2.0
Site D
Frame
Relay
(Meshed)
CentreCO M AR300
Acce ss Rou t er LAN WAN SYSTEM
LINK
TX
RX
Coll
CentreCO M AR300
Acce ss Rou t er LAN WAN SYSTEM
LINK TX
RX
Coll
CentreCOM AR300
Acce ss Rou t er LAN W AN SYSTEM
LINK
TX
RX
Coll
CentreCOM AR300
Acce ss Rou t er LAN W AN SYSTEM
LINK
TX
RX
Coll
192.168.4.0
192.168.254.4 192.168.254.3
192.168.254.2
192.168.254.1
DLC=101
DLC=103
DLC=102
DLC=104
Router A
#
# Frame Relay Configuration
# Note: By default LMI is set to "LMIrev1" which is the same as "cisco" LMI type.
create fr=0 over=syn0
#
# IP Configuration
#
enable ip
add ip int=fr0 ip=192.168.254.1
add ip int=eth0 ip=192.168.1.1
add ip route=192.168.2.0 next=0.0.0.0 mask=255.255.255.0 int=fr0 dlc=102
add ip route=192.168.3.0 next=0.0.0.0 mask=255.255.255.0 int=fr0 dlc=103
add ip route=192.168.4.0 next=0.0.0.0 mask=255.255.255.0 int=fr0 dlc=104
Router B, C, and D must have the ip addresses and routes changed appropriately
To use RIP instead, remove the static routes and add the following lines
Add ip rip int=fr0 dlc=102
Add ip rip int=fr0 dlc=103
Add ip rip int=fr0 dlc=104
(LMI Rev 1 is default LMI for Telecom New Zealand)

Helpful Scripts
Helpful Scripts Page 16
Revision 5.8.7; 5 April 2001
4.2. Standard Frame Relay ISP Access
Site A
192.168.10.0
Frame
Relay
CentreCOMAR300
Access LAN WAN SY ST EM
LINK
TX RX Coll
DLC=102
Internet
Mail Server
192.168.10.2
200.200.200.1
Router A
#
# Frame Relay Configuration
# Note: By default LMI is set to "LMIrev1" which is the same as "cisco" LMI type.
create fr=0 over=syn0
#
# IP Configuration
#
enable ip
add ip int=fr0 ip=200.200.200.1 mask=255.255.255.252
add ip int=eth0 ip=192.168.10.1
add ip route=0.0.0.0 next=0.0.0.0 mask=0.0.0.0 int=fr0 dlc=102
enable ip nat
enable ip nat log=all
add ip nat ip=192.168.10.0 mask=255.255.255.0 gblip=200.200.200.1
add ip nat ip=192.168.10.2 mask=255.255.255.255 port=smtp gblip=200.200.200.1 gblport=smtp
proto=tcp

Helpful Scripts
Helpful Scripts Page 17
Revision 5.8.7; 5 April 2001
4.3. Standard Frame Relay for LMI AnnexD
(Sometimes referred to as “ANSI” LMI type)
Site A
192.168.1.0
Site C
Site B
192.168.3.0
192.168.2.0
Site D
Frame
Relay
(Meshed)
CentreCO M AR300
Acce ss Rou t er LAN WAN SYSTEM
LINK TX
RX
Coll
CentreCO M AR300
Acce ss Rou t er LAN WAN SYSTEM
LINK TX
RX
Coll
CentreCOM AR300
Acce ss Rou t er LAN W AN SYSTEM
LINK
TX
RX
Coll
CentreCOM AR300
Acce ss Rou t er LAN W AN SYSTEM
LINK
TX
RX
Coll
192.168.4.0
192.168.254.4 192.168.254.3
192.168.254.2
192.168.254.1
DLC=101
DLC=103
DLC=102
DLC=104
Router A
#
# Frame LMI set for annexd
create fr=0 over=syn0 lmi=annexd
#
# IP Configuration
#
enable ip
add ip int=eth0 ip=192.168.1.1
add ip int=fr0 ip=192.168.254.1
add ip route=192.168.2.0 next=192.168.254.2 mask=255.255.255.0 int=fr0 dlc=102
add ip route=192.168.3.0 next=192.168.254.3 mask=255.255.255.0 int=fr0 dlc=103
add ip route=192.168.4.0 next=192.168.254.4 mask=255.255.255.0 int=fr0 dlc=104
Router B, C, and D must have the ip addresses and routes changed appropriately

Helpful Scripts
Helpful Scripts Page 18
Revision 5.8.7; 5 April 2001
4.4. Logical interfacing to Frame Relay, Internet
connection via ISP with Private Network
DLC=102
Site A
192.168.1.0
Site C
Site B
192.168.3.0
192.168.2.0
CentreCOM AR300
Acce ss Rou ter LAN WAN SYSTEM
LINK
TX
RX
Coll
CentreCOM AR300
Acc ess Rou ter LAN WAN SYSTEM
LINK
TX
RX
Coll
CentreCOM AR300
Acc ess Rou ter LAN WAN SYSTEM
LINK
TX
RX
Coll
200.200.200.1/30 192.168.254.2
192.168.254.1
DLC=101
Internet
DLC=104
200.200.200.2/30 DLC=103
Mail Server
192.168.1.2
Router A
#
# Frame Relay Configuration
# Note: By default LMI is set to "LMIrev1" which is the same as "cisco" LMI type.
create fr=0 over=syn0
add fr=0 li=1 type=ptp
add fr=0 li=2
set fr=0 dlc=102 li=2
set fr=0 dlc=103 li=2
set fr=0 dlc=104 li=1
#
# IP Configuration
#
enable ip
add ip int=fr0.2 ip=192.168.254.1
add ip int=fr0.1 ip=200.200.200.1 mask=255.255.255.252
add ip int=eth0 ip=192.168.1.1
add ip route=0.0.0.0 next=0.0.0.0 mask=0.0.0.0 int=fr0.1 dlc=104
add ip route=192.168.2.0 next=192.168.254.2 mask=255.255.255.0 int=fr0.2 dlc=102
add ip route=192.168.3.0 next=192.168.254.3 mask=255.255.255.0 int=fr0.2 dlc=103
enable ip nat
enable ip nat log=all
add ip nat ip=192.168.0.0 mask=255.255.0.0 gblip=200.200.200.1
add ip nat ip=192.168.1.2 mask=255.255.255.255 port=smtp gblip=200.200.200.1 gblport=smtp
proto=tcp
Router B and C would remain configured as in example 4.1 (no FRLIs)

Helpful Scripts
Helpful Scripts Page 19
Revision 5.8.7; 5 April 2001
4.4.1. OSPF on the private network, 4.4 continued
Router A ( First remove the 2 static routes to the private network sites, leave default route
#
# Frame Relay Configuration
# Note: By default LMI is set to "LMIrev1" which is the same as "cisco" LMI type.
create fr=0 over=syn0
add fr=0 li=1 type=ptp
add fr=0 li=2 type=ptp
add fr=0 li=3 type=ptp
set fr=0 dlc=102 li=2
set fr=0 dlc=103 li=3
set fr=0 dlc=104 li=1
#
# IP Configuration
#
enable ip
add ip int=fr0.2 ip=192.168.254.1 mask=255.255.255.252
add ip int=fr0.3 ip=192.168.254.5 mask=255.255.255.252
add ip int=fr0.1 ip=200.200.200.1 mask=255.255.255.252
add ip int=eth0 ip=192.168.1.1
add ip route=0.0.0.0 next=0.0.0.0 mask=0.0.0.0 int=fr0.1 dlc=104
enable ip nat
enable ip nat log=all
add ip nat ip=192.168.0.0 mask=255.255.0.0 gblip=200.200.200.1
add ip nat ip=192.168.1.2 mask=255.255.255.255 port=smtp gblip=200.200.200.1 gblport=smtp proto=tcp
#
# OSPF Configuration
#
set ospf routerid=192.168.254.1 asexternal=on
add ospf area=backbone stubarea=off summary=send
add ospf range=192.168.254.0 area=backbone mask=255.255.255.0
add ospf interface=fr0.2 area=backbone
add ospf interface=fr0.3 area=backbone
enable ospf

Helpful Scripts
Helpful Scripts Page 20
Revision 5.8.7; 5 April 2001
Router B
#
# Frame Relay Configuration
# Note: By default LMI is set to "LMIrev1" which is the same as "cisco" LMI type.
create fr=0 over=syn0
add fr=0 li=1 type=ptp
set fr=0 dlc=101 li=1
#
# IP Configuration
#
enable ip
add ip int=fr0.1 ip=192.168.254.2 mask=255.255.255.252
add ip int=eth0 ip=192.168.2.1
#
# OSPF Configuration
#
set ospf routerid=192.168.254.2 asexternal=on
add ospf area=backbone stubarea=off summary=send
add ospf range=192.168.254.0 area=backbone mask=255.255.255.0
add ospf interface=fr0.1 area=backbone
enable ospf
Router C
#
# Frame Relay Configuration
# Note: By default LMI is set to "LMIrev1" which is the same as "cisco" LMI type.
create fr=0 over=syn0
add fr=0 li=1 type=ptp
set fr=0 dlc=101 li=1
#
# IP Configuration
#
enable ip
add ip int=fr0.1 ip=192.168.254.3 mask=255.255.255.252
add ip int=eth0 ip=192.168.3.1
#
# OSPF Configuration
#
set ospf routerid=192.168.254.3 asexternal=on
add ospf area=backbone stubarea=off summary=send
add ospf range=192.168.254.0 area=backbone mask=255.255.255.0
add ospf interface=fr0.1 area=backbone
enable ospf