ELTEX ESR-10 User manual


ESR service routers
ESR-10, ESR-12V, ESR-12VF, ESR-14VF, ESR-20,
ESR-21, ESR-100, ESR-200, ESR-1000, ESR-1200,
ESR-1500, ESR-1700
User manual, Functionality description (29.10.2020)
Firmware version1.12.0

ESR service routers.ESR-Series. Functionality description. Version 1.12.0
 2
Contents
1 Introduction ........................................................................................................................... 10
1.1 Abstract ................................................................................................................................. 10
1.2 Target Audience.................................................................................................................... 10
1.3 Notes and warnings.............................................................................................................. 10
2 Interface management ......................................................................................................... 11
2.1 VLAN Configuration.............................................................................................................. 11
2.1.1 Configuration algorithm .................................................................................................12
2.1.2 Configuration example 1. VLAN removal from the interface.......................................13
2.1.3 Configuration example 2. Enabling VLAN processing in tagged mode ......................14
2.1.4 Configuration example 3. Enabling VLAN processing in tagged and untagged
modes..............................................................................................................................14
2.2 LLDP configuration ............................................................................................................... 15
2.2.1 Configuration algorithm .................................................................................................15
2.2.2 Configuration example ...................................................................................................16
2.3 LLDP MED configuration ...................................................................................................... 17
2.3.1 Configuration algorithm .................................................................................................17
2.3.2 Voice VLAN configuration example...............................................................................18
2.4 Sub-interface termination configuration ............................................................................. 19
2.5 Configuration algorithm ....................................................................................................... 20
2.5.1 Sub-interface configuration example ............................................................................21
2.6 Q-in-Q termination configuration ......................................................................................... 22
2.6.1 Configuration algorithm .................................................................................................22
2.6.2 Q-in-Q configuration example ........................................................................................25
2.7 USB modems configuration ................................................................................................. 25
2.7.1 USB modems configuration algorithm ..........................................................................25
2.7.2 Configuration example ...................................................................................................28
2.8 PPP through E1 configuration.............................................................................................. 29
2.8.1 Configuration algorithm ................................................................................................29
2.8.2 Configuration example ...................................................................................................31
2.9 MLPPP Configuration ........................................................................................................... 32
2.9.1 Configuration algorithm .................................................................................................32
2.9.2 Configuration example ...................................................................................................34
2.10 Bridge configuration ............................................................................................................. 35
2.10.1 Configuration algorithm .................................................................................................36
2.10.2 Example of bridge configuration for VLAN and L2TPv3 tunnel...................................39

ESR service routers.ESR-Series. Functionality description. Version 1.12.0
 3
2.10.3 Example of bridge configuration for VLAN ...................................................................40
2.10.4 Configuration example of the second VLAN tag adding/removing ............................41
2.11 Dual-Homing configuration .................................................................................................. 42
2.11.1 Configuration algorithm .................................................................................................42
2.11.2 Configuration example ...................................................................................................42
2.12 Mirroring configuration (SPAN/RSPAN).............................................................................. 43
2.12.1 Configuration algorithm .................................................................................................44
2.12.2 Configuration example ...................................................................................................44
2.13 LACP configuration............................................................................................................... 45
2.13.1 Configuration algorithm .................................................................................................45
2.13.2 Configuration example ...................................................................................................48
2.14 AUX configuration................................................................................................................. 48
2.14.1 Configuration algorithm .................................................................................................48
2.14.2 Configuration examples .................................................................................................50
2.14.3 Adapter soldering schemes ...........................................................................................56
3 Tunneling management........................................................................................................ 57
3.1 GRE tunnel configuration...................................................................................................... 57
3.1.1 Configuration algorithm .................................................................................................57
3.1.2 IP-GRE tunnel configuration example............................................................................61
3.2 DMVPN configuration........................................................................................................... 63
3.2.1 Configuration algorithm .................................................................................................63
3.2.2 Configuration example ...................................................................................................65
3.3 L2TPv3 tunnel configuration................................................................................................ 70
3.3.1 Configuration algorithm .................................................................................................70
3.3.2 L2TPv3 tunnel configuration example...........................................................................72
3.4 IPsec VPN configuration ...................................................................................................... 74
3.4.1 Route-based IPsec VPN configuration algorithm.........................................................74
3.4.2 Route-based IPsec VPN configuration example...........................................................79
3.4.3 Policy-based IPsec VPN configuration algorithm.........................................................84
3.4.4 Policy-based IPsec VPN configuration example ..........................................................89
3.4.5 Remote Access IPsec VPN configuration algorithm....................................................92
3.4.6 Remote Access IPsec VPN configuration example......................................................99
3.5 LT tunnels configuration .................................................................................................... 104
3.5.1 Configuration algorithm .............................................................................................. 104
3.5.2 Configuration example ................................................................................................ 105
4 QoS management ............................................................................................................... 107
4.1 Basic QoS ............................................................................................................................ 107

ESR service routers.ESR-Series. Functionality description. Version 1.12.0
 4
4.1.1 Configuration algorithm .............................................................................................. 107
4.1.2 Configuration example ................................................................................................ 110
4.2 Advanced QoS..................................................................................................................... 111
4.2.1 Configuration algorithm .............................................................................................. 111
4.2.2 Configuration example ................................................................................................ 115
5 Routing management ......................................................................................................... 118
5.1 Static routes configuration................................................................................................. 118
5.1.1 Configuration algorithm .............................................................................................. 118
5.1.2 Static routes configuration example .......................................................................... 119
5.2 RIP Configuration................................................................................................................ 121
5.2.1 Configuration algorithm .............................................................................................. 121
5.2.2 RIP configuration example .......................................................................................... 125
5.3 OSFP configuration............................................................................................................. 126
5.3.1 Configuration algorithm .............................................................................................. 126
5.3.2 OSPF configuration example ...................................................................................... 136
5.3.3 OSPF stub area configuration example...................................................................... 137
5.3.4 Virtual link configuration example .............................................................................. 138
5.4 BGP configuration............................................................................................................... 139
5.4.1 Configuration algorithm .............................................................................................. 139
5.4.2 Configuration example ................................................................................................ 149
5.5 BFD configuration ............................................................................................................... 151
5.5.1 Configuration algorithm .............................................................................................. 151
5.5.2 Configuration example of BFD with BGP.................................................................... 154
5.6 PBR routing policy configuration ....................................................................................... 156
5.6.1 Configuration algorithm of Route-map for BGP......................................................... 156
5.6.2 Configuration example 1. Route-map for BGP........................................................... 160
5.6.3 Configuration example 2. Route-map for BGP........................................................... 161
5.6.4 Route-map based on access control lists (Policy-based routing) configuration
algorithm ...................................................................................................................... 162
5.6.5 Route-map based on access control lists (Policy-based routing) configuration
example ........................................................................................................................ 163
5.7 VRF Lite configuration ........................................................................................................ 165
5.7.1 Configuration algorithm .............................................................................................. 165
5.7.2 Configuration example ................................................................................................ 166
5.8 MultiWAN configuration ..................................................................................................... 168
5.8.1 Configuration algorithm .............................................................................................. 168
5.8.2 Configuration example ................................................................................................ 170
5.9 IS-IS configuration .............................................................................................................. 172

ESR service routers.ESR-Series. Functionality description. Version 1.12.0
 5
5.9.1 Configuration algorithm .............................................................................................. 173
5.9.2 Configuration example ................................................................................................ 182
6 MPLS technology management......................................................................................... 184
6.1 LDP configuration ............................................................................................................... 184
6.1.1 Configuration algorithm .............................................................................................. 185
6.1.2 Configuration example ................................................................................................ 186
6.2 Configuring session parameters in LDP............................................................................ 189
6.2.1 Algorithm for setting Hello holdtime and Hello interval in the global LDP
configuration ................................................................................................................ 191
6.2.2 Algorithm for setting Hello holdtime and Hello interval for address family............. 191
6.2.3 Algorithm for setting Keepalive holdtime parameter in the global LDP
configuration ................................................................................................................ 191
6.2.4 Algorithm for setting Keepalive holdtime parameter for the specific neighbor ...... 192
6.2.5 Configuration example ................................................................................................ 192
6.3 Configuring session parameters in targeted-LDP............................................................. 193
6.3.1 Algorithm for setting Hello holdtime, Hello interval and Keepalive holdtime for the
LDP process ................................................................................................................. 195
6.3.2 Algorithm for setting Hello holdtime, Hello interval and Keepalive holdtime for the
specific neighbor ......................................................................................................... 195
6.3.3 Configuration example ................................................................................................ 196
6.4 LDP tag filtering configuration........................................................................................... 197
6.4.1 Configuration algorithm .............................................................................................. 197
6.4.2 Configuration example ................................................................................................ 198
6.5 L2VPN Martini mode configuration................................................................................... 199
6.5.1 L2VPN VPWS configuration algorithm....................................................................... 199
6.5.2 L2VPN VPWS configuration example......................................................................... 201
6.5.3 L2VPN VPLS configuration algorithm ........................................................................ 204
6.5.4 L2VPN VPLS configuration example .......................................................................... 205
6.6 L2VPN Kompella mode configuration............................................................................... 209
6.6.1 L2VPN VPLS configuration algorithm ........................................................................ 209
6.6.2 L2VPN VPLS configuration example .......................................................................... 212
6.7 L3VPN configuration .......................................................................................................... 227
6.7.1 Configuration algorithm .............................................................................................. 227
6.7.2 Configuration example ................................................................................................ 229
6.8 MPLS traffic balancing ....................................................................................................... 242
6.8.1 Configuration example ................................................................................................ 243
6.9 Operation with the bridge domain within MPLS ............................................................... 243
6.10 Assignment of MTU when operating with MPLS.............................................................. 246
7 Security management......................................................................................................... 252

ESR service routers.ESR-Series. Functionality description. Version 1.12.0
 6
7.1 AAA configuration............................................................................................................... 252
7.2 Local authentication configuration algorithm................................................................... 253
7.2.1 AAA configuration algorithm via RADIUS................................................................... 256
7.2.2 AAA configuration algorithm via TACACS ................................................................. 259
7.2.3 AAA configuration algorithm via LDAP ...................................................................... 262
7.2.4 Example of authentication configuration using telnet via RADIUS server ............... 266
7.3 Command privilege configuration ..................................................................................... 266
7.3.1 Configuration algorithm .............................................................................................. 266
7.3.2 Example of command privilege configuration........................................................... 267
7.4 Configuration of logging and protection against network attacks.................................. 267
7.4.1 Configuration algorithm .............................................................................................. 267
7.4.2 Description of attack protection mechanisms........................................................... 270
7.4.3 Configuration example of logging and protection against network attacks............ 273
7.5 Firewall configuration......................................................................................................... 274
7.5.1 Configuration algorithm .............................................................................................. 275
7.5.2 Firewall configuration example................................................................................... 281
7.5.3 Configuration example of application filtering (DPI)................................................. 283
7.6 Access list (ACL) configuration ......................................................................................... 285
7.6.1 Configuration algorithm .............................................................................................. 285
7.6.2 Access list configuration example ............................................................................. 287
7.7 IPS/IDS configuration ......................................................................................................... 288
7.7.1 Base configuration algorithm...................................................................................... 288
7.7.2 Configuration algorithm for IPS/IDS rules autoupdate from external sources ....... 289
7.7.3 Recommended open rule update source ................................................................... 290
7.7.4 IPS/IDS configuration example with auto-update rules ............................................ 293
7.7.5 Basic user rules configuration algorithm ................................................................... 294
7.7.6 Basic user rules configuration example..................................................................... 303
7.7.7 Extended user rules configuration algorithm............................................................. 305
7.7.8 Extended user rules configuration example............................................................... 305
7.8 Eltex Distribution Manager interaction configuration....................................................... 306
7.8.1 Base configuration algorithm...................................................................................... 307
7.8.2 Configuration example: ............................................................................................... 310
8 Redundancy management ................................................................................................. 314
8.1 VRRP configuration............................................................................................................. 314
8.1.1 Configuration algorithm .............................................................................................. 314
8.1.2 Configuration example 1 ............................................................................................. 317
8.1.3 Configuration example 2 ............................................................................................. 318

ESR service routers.ESR-Series. Functionality description. Version 1.12.0
 7
8.2 VRRP tracking configuration.............................................................................................. 320
8.2.1 Configuration algorithm .............................................................................................. 320
8.2.2 Configuration example ................................................................................................ 322
9 Remote access configuration ............................................................................................ 325
9.1 Configuring server for remote access to corporate network via PPTP protocol............ 325
9.1.1 Configuration algorithm .............................................................................................. 325
9.1.2 Configuration example ................................................................................................ 328
9.2 Configuring server for remote access to corporate network via L2TP protocol ............ 330
9.2.1 Configuration algorithm .............................................................................................. 330
9.2.2 Configuration example ................................................................................................ 333
9.3 Configuring server for remote access to corporate network via OpenVPN protocol..... 335
9.3.1 Configuration algorithm .............................................................................................. 335
9.3.2 Configuration example ................................................................................................ 339
9.4 Configuring remote access client via PPPoE.................................................................... 341
9.4.1 Configuration algorithm .............................................................................................. 341
9.4.2 Configuration example ................................................................................................ 343
9.5 Configuring remote access client via PPTP...................................................................... 344
9.5.1 Configuration algorithm .............................................................................................. 344
9.5.2 Configuration example ................................................................................................ 346
9.6 Configuring remote access client via L2TP ...................................................................... 347
9.6.1 Configuration algorithm .............................................................................................. 347
9.6.2 Configuration example ................................................................................................ 349
10 Service management.......................................................................................................... 352
10.1 DHCP server configuration................................................................................................. 352
10.1.1 Configuration algorithm .............................................................................................. 352
10.1.2 Configuration example ................................................................................................ 356
10.2 Destination NAT configuration .......................................................................................... 357
10.2.1 Configuration algorithm .............................................................................................. 358
10.2.2 Destination NAT configuration example .................................................................... 360
10.3 Source NAT configuration.................................................................................................. 362
10.3.1 Configuration algorithm .............................................................................................. 362
10.3.2 Configuration example 1 ............................................................................................. 364
10.3.3 Configuration example 2 ............................................................................................. 367
10.4 Static NAT configuration.................................................................................................... 368
10.4.1 Configuration algorithm .............................................................................................. 368
10.4.2 Static NAT configuration example.............................................................................. 368
10.5 HTTP/HTTPS traffic proxying............................................................................................ 370

ESR service routers.ESR-Series. Functionality description. Version 1.12.0
 8
10.5.1 Configuration algorithm .............................................................................................. 370
10.5.2 HTTP proxy configuration example............................................................................ 373
10.6 NTP configuration............................................................................................................... 374
10.6.1 Configuration algorithm .............................................................................................. 374
10.6.2 Configuration example ................................................................................................ 376
11 Monitoring ........................................................................................................................... 379
11.1 Netflow configuration......................................................................................................... 379
11.1.1 Configuration algorithm .............................................................................................. 379
11.1.2 Configuration example ................................................................................................ 380
11.2 sFlow configuration ............................................................................................................ 381
11.2.1 Configuration algorithm .............................................................................................. 381
11.2.2 Configuration example ................................................................................................ 382
11.3 SNMP configuration ........................................................................................................... 383
11.3.1 Configuration algorithm .............................................................................................. 383
11.3.2 Configuration example ................................................................................................ 387
11.4 Zabbix-agent/proxy configuration ..................................................................................... 388
11.4.1 Configuration algorithm .............................................................................................. 388
11.4.2 Zabbix-agent configuration example.......................................................................... 390
11.4.3 Zabbix-agent configuration example.......................................................................... 391
11.5 Syslog configuration........................................................................................................... 394
11.5.1 Configuration algorithm .............................................................................................. 395
11.5.2 Configuration example ................................................................................................ 397
11.6 Integrity check..................................................................................................................... 398
11.6.1 Configuration process ................................................................................................. 398
11.6.2 Configuration example ................................................................................................ 398
11.7 Router configuration file archiving..................................................................................... 398
11.7.1 Configuration process ................................................................................................. 399
11.7.2 Configuration example ................................................................................................ 399
12 BRAS (Broadband Remote Access Server) management................................................ 401
12.1 Configuration algorithm ..................................................................................................... 401
12.2 Example of configuration with SoftWLC ........................................................................... 406
12.3 Example of configuration without SoftWLC...................................................................... 412
12.3.1 Step 1:........................................................................................................................... 412
12.3.2 Step 2:........................................................................................................................... 413
13 VoIP management .............................................................................................................. 419
13.1 SIP profile configuration algorithm.................................................................................... 419
13.2 FXS/FXO ports configuration algorithm............................................................................ 420

ESR service routers.ESR-Series. Functionality description. Version 1.12.0
 9
13.3 Dial plan configuration algorithm ...................................................................................... 422
13.4 PBX server configuration algorithm................................................................................... 422
13.5 Registration trunk creation algorithm................................................................................ 424
13.6 VoIP configuration example............................................................................................... 424
13.7 Dial plan configuration example ........................................................................................ 427
13.8 FXO port configuration ....................................................................................................... 429
14 Safe configuration recommendations............................................................................... 431
14.1 General recommendations................................................................................................. 431
14.2 Event logging system configuration .................................................................................. 431
14.2.1 Recommendations....................................................................................................... 432
14.2.2 Warnings....................................................................................................................... 432
14.2.3 Configuration example ................................................................................................ 432
14.3 Password usage policy configuration ............................................................................... 432
14.3.1 Recommendations....................................................................................................... 433
14.3.2 Configuration example ................................................................................................ 433
14.4 AAA policy configuration.................................................................................................... 433
14.4.1 Recommendations....................................................................................................... 434
14.4.2 Warnings....................................................................................................................... 434
14.4.3 Configuration example ................................................................................................ 434
14.5 Remote management configuration................................................................................. 435
14.5.1 Recommendations....................................................................................................... 435
14.5.2 Configuration example ................................................................................................ 436
14.6 Configuration of protection against network attacks mechanisms................................ 436
14.6.1 Recommendations....................................................................................................... 436
14.6.2 Configuration example ................................................................................................ 437
15 FREQUENTLY ASKED QUESTIONS .................................................................................... 438
16 ESR technical support......................................................................................................... 440

ESR service routers.ESR-Series. Functionality description. Version 1.12.0
10
1 Introduction
1.1 Abstract
Today, large-scale communication network development projects are becoming increasingly common. One of
the main tasks in implementation of large multiservice networks is the creation of reliable high-performance
transport network that will serve as a backbone in multilayer architecture of next-generation networks.
ESR series firewalls could be used in large enterprise networks, SMB networks and operator's networks.
Devices provide high performance and bandwidth, and feature protection of transmitted data.
This manual provides descriptions, algorithms, and examples of how to configure the ESR series service router
functionality (hereafter referred to as the router or device).
1.2 Target Audience
This user manual is intended for technical personnel that performs device installation, configuration and
monitoring via command line interface (CLI) as well as the system maintenance and firmware update
procedures. Qualified technical personnel should be familiar with the operation basics of TCP/IP protocol
stacks and Ethernet networks design concepts.
1.3 Notes and warnings
Notes contain important information, tips or recommendations on device operation and setup.

Warnings inform users about hazardous conditions which may cause injuries or device damage and
may lead to the device malfunctioning or data loss.
