Пример начальной конфигурации модуля служб CSM и SSL
|
|
|
- Scarlett Carpenter
- 7 years ago
- Views:
Transcription
1 Пример начальной конфигурации модуля служб CSM и SSL Содержание Введение Предварительные условия Требования Используемые компоненты Условные обозначения Настройка Схема сети Конфигурации Проверка Устранение неполадок Дополнительные сведения Введение Этот документ предоставляет пример конфигурации для настройки Модуля коммутации контента (CSM) с Протоколом SSL. Предварительные условия Требования Для этого документа отсутствуют особые требования. Используемые компоненты Сведения, содержащиеся в данном документе, касаются следующих версий программного обеспечения и оборудования: Маршрутизатор Cisco 7202 рабочий Cisco IOSà  ½ 12.1 Cisco Catalyst 6509 рабочих IOS 12.1 CSM с набором функций Модуля оконечного устройства SSL (STE) рабочий IOS 12.2 (11) и SSL (0.86) Маршрутизатор Cisco 7606 рабочий IOS 12.1 Сборка CSM 3.1 (0.119) Сведения, представленные в этом документе, были получены от устройств, работающих в специальной лабораторной среде. Все устройства, описанные в этом документе, были запущены с чистой (стандартной) конфигурацией. В рабочей сети необходимо изучить потенциальное воздействие всех команд до их использования. Условные обозначения Дополнительные сведения об условных обозначениях см. в документе Технические рекомендации Cisco. Условные обозначения. Настройка В этом разделе содержатся сведения о настройке функций, описанных в этом документе. Примечание: Поиск дополнительной информации о командах в данном документе можно выполнить с помощью средства "Command Lookup" (Поиск команд) (только для зарегистрированных клиентов). Схема сети В настоящем документе используется следующая схема сети:
2 В этой топологии Протокол HSRP работает на основе Функциональной Карты Многоуровневого Коммутатора (MSFC) 1 (MSFC1) и Функциональной Карты Многоуровневого Коммутатора (MSFC) 2 (MSFC2). Существует две группы HSRP, один в клиентской стороне и другом в стороне CSM. CSM настроен как режим координации между MSFC и Модулем оконечного устройства SSL (STE) и адресным режимом между STE и Реальными серверами. CSM балансирует нагрузку подключений SSL между двумя STEs. Конфигурации Эти конфигурации используются в данном документе: 7202 маршрутизатора 6509 коммутаторов STE коммутаторов STE-2 Это контрольные примеры: Репликация подключения SSL в CSM Сложная репликация SSL в CSM Аварийное переключение CSM с подключением SSL оставило открытым Аварийное переключение активного MSFC с открытым подключением SSL Аварийное переключение шасси с подключениями SSL оставило открытым Повторное согласование соединения SSL в том же соединении и возобновление с новым подключением SSL (новая характеристика) Закрепленные функциональные возможности CSM с несколько подключеними SSL с возобновлением Reg#show run Building configuration... Current configuration : 1042 bytes version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption hostname 7202-Reg boot system flash disk0:c7200-jk2o3s-mz b.e enable ip subnet-zero
3 no ip domain-lookup ip host defib ip cef ip audit notify log ip audit po max-events 100 ip ssh time-out 120 ip ssh authentication-retries 3 controller ISA 1/1 controller ISA 2/1 interface Loopback0 ip address interface FastEthernet0/0 ip address duplex auto speed auto interface FastEthernet0/1 ip address duplex auto speed auto interface GigabitEthernet5/0 ip address negotiation auto ip classless ip route ip route ip route no ip http server no ip http secure-server line con 0 line aux 0 line vty 0 4 line vty 5 15 end #show run Building configuration... Current configuration : 7932 bytes version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption service internal hostname boot system flash slot0: logging buffered debugging enable --- Configures the VLANs allowed over the trunk to the SSL services module. --- The admin VLAN is included. The SSL module is located in slot 9. ssl-proxy module 9 allowed-vlan 4,15 diagnostic level complete ip subnet-zero no ip domain-lookup mls flow ip destination
4 mls flow ipx destination spanning-tree extend system-id no spanning-tree vlan The CSM is located in slot 7. The module is running as Active. module ContentSwitchingModule 7 vlan 3 client ip address gateway vlan 4 server ip address vlan 5 server ip address alias probe ICMP icmp interval 5 failed These are the server farm HTTP and real server members. serverfarm HTTP nat server no nat client real real real real real real These are the server farm HTTPS and real server members. serverfarm HTTPS no nat server no nat client real real probe ICMP sticky 1 ssl timeout 5 sticky 2 netmask timeout Virtual server HTTP. vserver HTTP --- The virtual server IP address is specified with TCP port www. virtual tcp www --- The VLAN from where the CSM accepts traffic for a specified virtual server. vlan Destination server farm.
5 serverfarm HTTP sticky 5 group Enables connection redundancy. --- Replicates the sticky database to the backup CSM. replicate csrp sticky --- Replicates connections to the backup CSM. replicate csrp connection persistent rebalance --- Virtual server HTTPS. vserver HTTPS --- The virtual server IP address is specified with TCP port HTTP over SSL. virtual tcp https --- The VLAN from where the CSM accepts traffic for a specified virtual server. vlan Destination server farm. serverfarm HTTPS ssl-sticky offset 20 length 6 sticky 5 group Enables connection redundancy. --- Replicates the sticky database to the backup CSM. replicate csrp sticky --- Replicates connections to the backup CSM. replicate csrp connection --- Disables HTTP 1.1 persistence for connections in the virtual server. no persistent rebalance ft group 1 vlan 2 redundancy mode rpr-plus main-cpu auto-sync running-config auto-sync standard power redundancy-mode combined interface Loopback0 ip address interface GigabitEthernet1/1 trunk encapsulation dot1q trunk allowed vlan 1-5, mode trunk
6 interface GigabitEthernet1/2 shutdown interface FastEthernet4/13 ip address no ip redirects standby 2 ip standby 2 priority 101 standby 2 preempt standby 2 name Client-Side interface FastEthernet4/14 shutdown interface FastEthernet4/48 access vlan 15 mode access interface GigabitEthernet5/1 access vlan 5 mode access interface GigabitEthernet5/2 access vlan 5 mode access interface GigabitEthernet5/3 access vlan 5 mode access interface Vlan1 shutdown interface Vlan3 ip address no ip redirects standby 1 ip standby 1 priority 101 standby 1 preempt standby 1 name CSM-Side standby 1 track FastEthernet4/13 interface Vlan15 ip address ip classless ip route no ip http server alias exec sc show module csm 7 line con 0 line vty 0 4 transport input lat pad mop telnet r udptn nasi scheduler runtime netinput 300 end STE-1 ssl-proxy-9#show run brief Building configuration... Current configuration : 1437 bytes version 12.2 no service pad service timestamps debug datetime msec
7 service timestamps log datetime msec no service password-encryption hostname ssl-proxy-9 enable username braghu secret 5 $1$7Pdr$7dNm7l71.BJzELfi.QUzp/ ip subnet-zero ip tftp source-interface Ethernet0/0.15 no ip domain lookup ip ssh rsa keypair-name ssh-key --- Adds a proxy service HTTPS that identifies a virtual IP address --- and a server IP address for each proxy. ssl-proxy service https virtual ipaddr protocol tcp port 443 secondary server ipaddr protocol tcp port 80 certificate rsa general-purpose trustpoint TP-2048-pkcs Configures this VLAN as administrative. ssl-proxy vlan 15 ipaddr gateway admin --- Adds an interface to VLAN 4 on the SSL services module. ssl-proxy vlan 4 ipaddr gateway ssl-proxy mac address 00e0.b0ff.f0c4 --- Declares the trustpoint that the module is to use. crypto ca trustpoint TP-2048-pkcs Specifies the key pair to associate with the certificate. rsakeypair TP-2048-pkcs Declares the trustpoint that the module is to use. crypto ca trustpoint TP-1024-pkcs Specifies the key pair to associate with the certificate. rsakeypair TP-1024-pkcs Specifies the certificate and key to be associated. crypto ca certificate chain TP-2048-pkcs12 certificate ca 313AD6510D25ABAE4626E AC4 certificate 3C2DF2E DC crypto ca certificate chain TP-1024-pkcs12 certificate 3C2CD DB certificate ca 313AD6510D25ABAE4626E AC4 ip classless ip route
8 ip http server no cdp run line con 0 line 1 3 no exec transport input all flowcontrol software line vty 0 1 line vty 2 4 no exec flowcontrol software end #show run Building configuration... Current configuration : 7375 bytes version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption hostname boot system flash slot0: enable --- Configures the VLANs allowed over the trunk to the SSL services module. --- The admin VLAN is included. The SSL module is located in slot 3. ssl-proxy module 3 allowed-vlan 4,15 ip subnet-zero no ip domain-lookup ip host mat ip host defib mls flow ip destination mls flow ipx destination spanning-tree extend system-id no spanning-tree vlan 2, The CSM is located in slot 5. The module running as Active. module ContentSwitchingModule 5 vlan 3 client ip address gateway vlan 4 server ip address vlan 5 server ip address alias probe ICMP icmp interval 5 failed These are the server farm HTTP and real server members.
9 serverfarm HTTP nat server no nat client real real real real real real These are the server farm HTTPS and real server members. serverfarm HTTPS no nat server no nat client real real probe ICMP sticky 1 ssl timeout 5 sticky 2 netmask timeout Virtual server HTTP. vserver HTTP --- The virtual server IP address is specified with TCP port www. virtual tcp www --- This is the VLAN from where the CSM accepts traffic for a specified --- virtual server. vlan This is the destination server farm. serverfarm HTTP sticky 5 group Enables connection redundancy. --- Replicates the sticky database to the backup CSM. replicate csrp sticky --- Replicates connections to the backup CSM. replicate csrp connection persistent rebalance --- This is the virtual server HTTPS. vserver HTTPS --- The virtual server IP address is specified with TCP port HTTP over SSL.
10 virtual tcp https --- This is the VLAN from where the CSM accepts traffic for a specified --- virtual server. vlan Destination server farm. serverfarm HTTPS --- The CSM load balances an incoming SSL connection to the SSL --- termination engine that generated that SSL ID. ssl-sticky offset 20 length 6 sticky 5 group Enables connection redundancy. --- Replicates the sticky database to the backup CSM. replicate csrp sticky --- Replicates connections to the backup CSM. replicate csrp connection no persistent rebalance ft group 1 vlan 2 redundancy mode rpr-plus main-cpu auto-sync running-config auto-sync standard interface Loopback0 ip address interface GigabitEthernet1/1 trunk encapsulation dot1q trunk allowed vlan 1-5, mode trunk interface GigabitEthernet1/2 shutdown interface FastEthernet2/1 access vlan 5 mode access interface FastEthernet2/2 access vlan 5 mode access interface FastEthernet2/3 access vlan 5 mode access
11 interface FastEthernet2/13 ip address no ip redirects standby 2 ip standby 2 preempt standby 2 name Client-Side interface FastEthernet2/48 access vlan 15 mode access interface Vlan1 shutdown interface Vlan3 ip address no ip redirects standby 1 ip standby 1 preempt standby 1 name CSM-Side standby 1 track FastEthernet2/13 interface Vlan15 ip address ip classless ip route no ip http server no cdp run alias exec sc show module csm 5 line con 0 line vty 0 4 transport input lat pad mop telnet r udptn nasi end STE-2 ssl-proxy-3#show run br Building configuration... Current configuration : 1216 bytes version 12.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption hostname ssl-proxy-3 enable ip subnet-zero ip tftp source-interface Ethernet0/0.15 no ip domain lookup ip host defib ip host mat Adds a proxy service HTTPS that identifies a virtual IP address --- and a server IP address for each proxy. ssl-proxy service https virtual ipaddr protocol tcp port 443 secondary server ipaddr protocol tcp port 80 certificate rsa general-purpose trustpoint TP-2048-pkcs12
12 --- Configures this VLAN as administrative. ssl-proxy vlan 15 ipaddr gateway admin --- Adds an interface to VLAN 4 on the SSL services module. ssl-proxy vlan 4 ipaddr gateway ssl-proxy mac address a1c0 --- Declares the trustpoint that the module is to use. crypto ca trustpoint TP-2048-pkcs Specifies key pair to associate with the certificate. rsakeypair TP-2048-pkcs Specifies the certificate and key to be associated. crypto ca certificate chain TP-2048-pkcs12 certificate 3C2DF2E DC certificate ca 313AD6510D25ABAE4626E AC4 ip classless ip route ip http server no cdp run line con 0 line 1 3 no exec transport input all flowcontrol software line vty 0 1 line vty 2 4 no exec flowcontrol software end Проверка Используйте эту информацию для проверки конфигурации: Router# sh module contentswitchingmodule all vservers покажите сервер/клиента сервиса ssl-proxy Эта команда показывает, как отобразить статус сервиса proxy SSL - сервера. покажите mod Эта команда показывает статус VLAN между сервисным модулем SSL и Supervisor Engine. покажите stats hdr ssl-proxy Эта команда показывает, как отобразить данные вставки заголовка. покажите stats ssl-proxy ssl Эта команда показывает, как отобразить статистику SSL.
13 покажите сервис stats ssl-proxy и show standby Эти команды показывают, как отобразить статистику, чтобы показать, что распределение нагрузки происходит в двух сервисных модулях SSL. покажите con ssl-proxy Эта команда показывает, как отобразить статистику, когда соединения активны. Устранение неполадок См. Testing SSL Proxy Services для советов по устранению проблем. Дополнительные сведения Примеры конфигурации и технические примечания Cisco Systems, Inc. Все права защищены. Дата генерации PDF файла: 20 октября
Configuring Redundancy
7 CHAPTER This chapter describes how to configure redundancy and contains these sections: Configuring Fault Tolerance, page 7-1 Configuring HSRP, page 7-5 Configuring Interface and Device Tracking, page
CCNA Exploration 4.0: ESwitching Basic Switching / Wireless PT Practice SBA. Switch S1 S1#sh ru Building configuration...
CCNA Exploration 4.0: ESwitching Basic Switching / Wireless PT Practice SBA Switch S1 S1#sh ru Building configuration... Current configuration : 1639 bytes version 12.2 no service timestamps log datetime
Ejemplo de configuración de punta a punta SBC en un Cisco 7600 Series Router
Ejemplo de configuración de punta a punta SBC en un Cisco 7600 Series Router Descargue este capítulo Ejemplo de configuración de punta a punta SBC en un Cisco 7600 Series Router Descargue el libro completo
Table of Contents. Cisco Using the Cisco IOS Firewall to Allow Java Applets From Known Sites while Denying Others
Cisco IOS Firewall to Allow Java Applets From Known Sites w Table of Contents Using the Cisco IOS Firewall to Allow Java Applets From Known Sites while Denying Others...1 Introduction...1 To Deny Java
login timeout 30 access list ALL line 20 extended permit ip any any port 9053 interval 15 passdetect interval 30
logging enable logging console 4 logging timestamp logging trap 5 logging buffered 4 logging device id hostname logging host 10.0.128.240 udp/514 format emblem logging host 10.0.143.24 udp/514 login timeout
ICND1-100-101 IOS CLI Study Guide (CCENT)
ICND1-100-101 IOS CLI Study Guide (CCENT) Hostname: 2. hostname SW1 SWITCH CONFIGURATION Mgmt IP: 2. interface vlan 1 3. ip address 10.0.0.2 4. no shut Gateway: 2. ip default-gateway 10.0.0.1 Local User/Pwd:
Juniper Networks WX Series Large. Integration on Cisco
APPLICATION NOTE Juniper Networks WX Series Large Deployment with WCCP Off-Path Integration on Cisco Integrating Multiple Juniper Networks WX Series Application Acceleration Platforms into a Cisco Infrastructure
Lab Configuring Syslog and NTP (Instructor Version)
(Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only. Topology Addressing Table Objectives Device Interface IP Address Subnet Mask
Firewall Load Balancing
CHAPTER 6 This chapter describes the (FWLB) feature. It includes the following sections: FWLB Overview, page 6-1 FWLB Features, page 6-2 FWLB Configuration Tasks, page 6-3 Monitoring and Maintaining FWLB,
Table of Contents. Cisco Configuring IPSec Cisco Secure VPN Client to Central Router Controlling Access
Table of Contents Configuring IPSec Cisco Secure VPN Client to Central Router Controlling Access...1 Introduction...1 Prerequisites...1 Requirements...1 Components Used...1 Conventions...1 Configure...2
Brest. Backup : copy flash:ppe_brest1 running-config
Brest Backup : copy flash:ppe_brest1 running-config Cisco SF300-08 Mise en place des services : - Serveurs : 10.3.50.0/24 VLAN 2 (port 1) - DSI : 10.3.51.0/24 VLAN 3 (port 2) - Direction : 10.3.52.0/24
How To Configure A Cisco Router With A Cio Router
CHAPTER 1 This chapter provides procedures for configuring the basic parameters of your Cisco router, including global parameter settings, routing protocols, interfaces, and command-line access. It also
Lab 4.1.4 Creating a Network Map using CDP Instructor Version 2500
Lab 4.1.4 Creating a Network Map using CDP Instructor Version 2500 Objective Use Cisco Discovery Protocol (CDP) commands to get information about neighboring network devices. Background/Preparation CDP
Felix Rohrer. PT Activity 7.5.3: Troubleshooting Wireless WRT300N. Topology Diagram
Felix Rohrer PT Activity 7.5.3: Troubleshooting Wireless WRT300N Topology Diagram All contents are Copyright 1992 2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Configuring a Cisco 2509-RJ Terminal Router
created by: Rainer Bemsel Version 1.0 Dated: Dec/08/2012 For my Cisco LAB, I ve purchased a used Cisco 2509-RJ with RJ45-RJ45 roll-over cables. This TechTip shows my configuration setup, so you can easily
Network Diagram Scalability Testbed and Configuration Files
APPENDIX A Network Diagram Scalability Testbed and Configuration Files This appendix contains configurations that were used during a V 3 PN performance and scalability evaluation based on the network illustrated
Document ID: 45741. Introduction
Products & Services 6bone Connection Using 6to4 Tunnels for IPv6 Document ID: 45741 Contents Introduction Prerequisites Requirements Components Used Conventions How 6to4 Tunnels Work Limitations of 6to4
Configuring the Cisco Secure PIX Firewall with a Single Intern
Configuring the Cisco Secure PIX Firewall with a Single Intern Table of Contents Configuring the Cisco Secure PIX Firewall with a Single Internal Network...1 Interactive: This document offers customized
Configuring a Leased Line
CHAPTER 4 Configuring a Leased Line The configuration in this chapter describes how to configure a Cisco 1700 router for IP and IPX over a synchronous serial line. Before You Begin The configuration in
Cisco 2621 Gateway-PBX Interoperability: Lucent/Avaya Definity G3si V7 PBX with Cisco CallManager Using T1 PRI NI-2 for an H.
Application Note Cisco 2621 Gateway-PBX Interoperability: Lucent/Avaya Definity G3si V7 PBX with Cisco CallManager Using T1 PRI NI-2 for an H.323 Gateway Introduction This document describes the interoperability
Configuration Professional: Site to Site IPsec VPN Between Two IOS Routers Configuration Example
Configuration Professional: Site to Site IPsec VPN Between Two IOS Routers Configuration Example Document ID: 113337 Contents Introduction Prerequisites Requirements Components Used Conventions Configuration
BRI to PRI Connection Using Data Over Voice
BRI to PRI Connection Using Data Over Voice Document ID: 14962 Contents Introduction Prerequisites Requirements Conventions Background Information Configure Network Diagram Configurations Verify Troubleshoot
Data Center Infrastructure Configuration. March, 2004
Data Center Infrastructure Configuration March, 2004 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387)
Lab 8: Confi guring QoS
Lab 8: Objective Implement QoS, mark traffi c, and display and interpret QoS output. Lab Topology For this lab, your network design will include two pods of devices. You will be responsible for confi guring
Proposal for implementation of VoIP at XYZ hospital.
Proposal for implementation of VoIP at XYZ hospital. Introduction Management committee of XYZ hospital wants to implement an internal voice communication system for their hospital. At present they are
LAN-Cell to Cisco Tunneling
LAN-Cell to Cisco Tunneling Page 1 of 13 LAN-Cell to Cisco Tunneling This Tech Note guides you through setting up a VPN connection between a LAN-Cell and a Cisco router. As the figure below shows, the
Basic Router Configuration Using Cisco Configuration Professional
Basic Router Configuration Using Cisco Configuration Professional Document ID: 111999 Contents Introduction Prerequisites Components Used Install Cisco Configuration Professional Router Configuration to
Simple MPLS network topology for Dynamips/Olive
Simple MPLS network topology for Dynamips/Olive R1 version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption hostname R1 boot-start-marker
Lab 5.3.9b Managing Router Configuration Files Using TFTP
Lab 5.3.9b Managing Router Configuration Files Using TFTP Device Host Name Interface IP Address Subnet Mask R1 R1 Fast Ethernet 0/0 172.17.0.1 255.255.0.0 Objectives Download and install TFTP server software.
Configuring the MNLB Forwarding Agent
CHAPTER 3 Configuring the MNLB Forwarding Agent This chapter describes how to configure a Cisco router as an MNLB Forwarding Agent to operate in conjunction with a Cisco LocalDirector serving as Services
Configuring Health Monitoring
CHAPTER 6 This chapter describes how to configure the health monitoring on the CSM and contains these sections: Configuring Probes for Health Monitoring, page 6-1 Configuring Route Health Injection, page
Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and Catalyst Switches Running CatOS
Configuring EtherChannel and 802.1Q Trunking Between Catalyst L2 Fixed Configuration Switches and Catalyst Switches Running CatOS Document ID: 23408 Contents Introduction Prerequisites Requirements Components
CCT vs. CCENT Skill Set Comparison
Operation of IP Data Networks Recognize the purpose and functions of various network devices such as Routers, Switches, Bridges and Hubs Select the components required to meet a given network specification
CS3695/M6-109 Lab 8-NPS02 VOIP Sniffing Ver. 8 Rev. 0
Background For this lab, we will be analyzing some Wireshark capture files that were captured using the ARP Poisoning technique on Cisco VIOP (Voice Over IP) phones As this lab took special equipment (i.e.
ICND1 Lab Guide. 100-101 Interconnecting Cisco Networking Devices Part 1 Version 2.0. Labs powered by
ICND1 Lab Guide 100-101 Interconnecting Cisco Networking Devices Part 1 Version 2.0 ii Interconnecting Cisco Networking Devices Part 1 100-101 Lab Guide LM20130929/BV2.01 iii 25 Century Blvd. Ste. 500
Virtual Fragmentation Reassembly
Virtual Fragmentation Reassembly Currently, the Cisco IOS Firewall specifically context-based access control (CBAC) and the intrusion detection system (IDS) cannot identify the contents of the IP fragments
Lab 6.1.3 Configure Local AAA on Cisco Router
Lab 6.1.3 Configure Local AAA on Cisco Router Objective Scenario Topology In this lab, the students will complete the following tasks: Securing and testing access to the privileged EXEC, VTY, and console
Configuring Server Load Balancing
CHAPTER 6 This chapter describes how to configure server load balancing (SLB) on the Cisco Application Control Engine (ACE) module. This chapter contains the following sections: Information About Server
Using a Sierra Wireless AirLink Raven X or Raven-E with a Cisco Router Application Note
Using a Sierra Wireless AirLink Raven X or Raven-E with a Application Note Cisco routers deliver the performance, availability, and reliability required for scaling mission-critical business applications
FWSM introduction Intro 5/1
Intro 5/0 Content: FWSM introduction Requirements for FWSM 3.2 How the Firewall Services Module Works with the Switch Using the MSFC Firewall Mode Overview Stateful Inspection Overview Security Context
ASA 8.3 and Later: Mail (SMTP) Server Access on Inside Network Configuration Example
ASA 8.3 and Later: Mail (SMTP) Server Access on Inside Network Configuration Example Document ID: 113336 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram
Remote Access VPN Business Scenarios
CHAPTER 4 This chapter explains the basic tasks for configuring an IP-based, remote access Virtual Private Network (VPN) on a Cisco 7200 series router. In the remote access VPN business scenario, a remote
Configuring Advanced Server Load Balancing
CHAPTER 5 This chapter describes how to configure advanced server load balancing (SLB) on the CSM and contains these sections: Configuring URL Hashing, page 5-1 Configuring Firewall Load Balancing, page
Lab 7-1 Configuring Switches for IP Telephony Support
Lab 7-1 Configuring Switches for IP Telephony Support Learning Objectives Configure auto QoS to support IP phones Configure CoS override for data frames Configure the distribution layer to trust access
Basic Wireless Configuration
Basic Wireless Configuration Topology Diagram Learning Objectives Configure options in the Linksys Setup tab. Configure options in the Linksys Wireless tab. Configure options in the Linksys Administration
CCNP Switch 642-813 Questions/Answers Implementing High Availability and Redundancy
Which Catalyst 6500 switch component integrates on individual line modules as well as on the supervisor engine? A. CPU B. Flash C. ASIC D. NVRAM Answer: C Cisco Catalyst 6500 Series with Cisco IOS Software
Chapter 7 Lab 7-1, Configuring Switches for IP Telephony Support
Chapter 7 Lab 7-1, Configuring Switches for IP Telephony Support Topology Objectives Background Configure auto QoS to support IP phones. Configure CoS override for data frames. Configure the distribution
The Cisco IOS Firewall feature set is supported on the following platforms: Cisco 2600 series Cisco 3600 series
Cisco IOS Firewall Feature Set Feature Summary The Cisco IOS Firewall feature set is available in Cisco IOS Release 12.0. This document includes information that is new in Cisco IOS Release 12.0(1)T, including
PIX/ASA 7.x and above : Mail (SMTP) Server Access on Inside Network Configuration Example
PIX/ASA 7.x and above : Mail (SMTP) Server Access on Inside Network Configuration Example Document ID: 70031 Contents Introduction Prerequisites Requirements Components Used Conventions Related Products
Configuring Static and Dynamic NAT Simultaneously
Configuring Static and Dynamic NAT Simultaneously Document ID: 13778 Contents Introduction Prerequisites Requirements Components Used Conventions Configuring NAT Related Information Introduction In some
- Advanced IOS Functions -
1 The Configuration Register - Advanced IOS Functions - The configuration register (config-register) is a hexadecimal value that controls various aspects of how a router boots, including: Baud Rate Boot
Enabling NetFlow and NetFlow Data Export (NDE) on Cisco Catalyst Switches
Enabling NetFlow and NetFlow Data Export (NDE) on Cisco Catalyst Switches Revised 2/1/2007 Introduction...2 Requirements...2 Catalyst 4500 Series...2 Enabling NetFlow...2 Configuring a NetFlow Destination...3
Case Study 1: Registering IP Phones with a remote Call
Case Study 1: Registering IP Phones with a remote Call Manager Objectives Place calls from IP Phones under R1 to IP Phones under R2 Place calls from any IP Phone (under R1 and under R2) to the regular
Troubleshooting the Firewall Services Module
25 CHAPTER This chapter describes how to troubleshoot the FWSM, and includes the following sections: Testing Your Configuration, page 25-1 Reloading the FWSM, page 25-6 Performing Password Recovery, page
APNIC Members Training Course Security workshop. 2-4 July, 2008. Port Vila Vanuatu. In conjunction with PACNOG 4
APNIC Members Training Course Security workshop 2-4 July, 2008 Port Vila Vanuatu In conjunction with PACNOG 4 Router device security lab 1. APNIC s remote lab In these exercises you will be remotely accessing
OBJECTIVES This paper examines how NetFlow is implemented on logical interfaces. Logical interfaces can be divided into two groups:
Configuration Guide NetFlow on Logical Interfaces: Frame Relay, Asynchronous Transfer Mode, Inter-Switch Link, 802.1q, Multilink Point to Point Protocol, General Routing Encapsulation, Layer 2 Tunneling
Configuring Stickiness
CHAPTER5 This chapter describes how to configure stickiness (sometimes referred to as session persistence) on an ACE module. It contains the following major sections: Stickiness Overview Configuration
Configurazione Rete VoIP
Configurazione Rete VoIP 1x CISCO 7940G 1x CISCO 3725 with cme-full-7.0.0.1.tar 1x CISCO IP Communicator Startup Config router CISCO 3725 Procedura Operativa: Topologia di rete Operazioni preliminary sul
Cisco Networking Academy CCNP Multilayer Switching
CCNP3 v5 - Chapter 5 Cisco Networking Academy CCNP Multilayer Switching Implementing High Availability in a Campus Environment Routing issues Hosts rely on a router to find the best path Issues with established
P and FTP Proxy caching Using a Cisco Cache Engine 550 an
P and FTP Proxy caching Using a Cisco Cache Engine 550 an Table of Contents HTTP and FTP Proxy caching Using a Cisco Cache Engine 550 and a PIX Firewall...1 Introduction...1 Before You Begin...1 Conventions...1
Reverse Proxy Caching
CHAPTER 7 This chapter explains reverse proxy caching and shows configuration examples relevant to the Content Engine. This chapter contains the following sections: Overview, page 7-1 Configuring Reverse
Configurazione Rete VoIP
Configurazione Rete VoIP 1x CISCO 7940G 1x CISCO 3725 with cme-full-7.0.0.1.tar 1x CISCO IP Communicator Startup Config router CISCO 3725 Procedura Operativa: Topologia di rete Operazioni preliminary sul
Configuring Server Load Balancing
Configuring Server Load Balancing This chapter describes how to configure the IOS Server Load Balancing (SLB) feature. For a complete description of the SLB commands in this chapter, refer to the Server
Objectives Understand Cisco IOS system architecture components. Work with the Cisco IOS Command Line Interface (CLI) and common commands.
Objectives Understand Cisco IOS system architecture components. Work with the Cisco IOS Command Line Interface (CLI) and common commands. Learn about Cisco IOS troubleshooting techniques. Understand upgrading
Lab 3.5.1: Basic VLAN Configuration (Instructor Version)
(Instructor Version) Topology Diagram Addressing Table Device (Hostname) Interface IP Address Subnet Mask Default Gateway S1 VLAN 99 172.17.99.11 255.255.255.0 N/A S2 VLAN 99 172.17.99.12 255.255.255.0
Lab 1.4.1 Introductory Lab 1 - Getting Started and Building Start.txt
Lab 1.4.1 Introductory Lab 1 - Getting Started and Building Start.txt Objective This lab may introduce new CCNP lab equipment and certain IOS features. This introductory activity also describes how to
Skills Assessment Student Training (Answer Key)
CCNA: Connecting Networks Skills Assessment Student Training (Answer Key) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only. Topology Assessment
Firewall Stateful Inspection of ICMP
The feature addresses the limitation of qualifying Internet Control Management Protocol (ICMP) messages into either a malicious or benign category by allowing the Cisco IOS firewall to use stateful inspection
Configuring InterVLAN Routing and ISL/802.1Q Trunking on Catalyst 2900XL/3500XL/2940/2950/2970 Series Switches Using an External Router
Configuring InterVLAN Routing and ISL/802.1Q Trunking on Catalyst 2900XL/3500XL/2940/2950/2970 Series Switches Using an External Router Document ID: 14976 Introduction Before You Begin Conventions Prerequisites
IOS Server Load Balancing
IOS Server Load Balancing This feature module describes the Cisco IOS Server Load Balancing (SLB) feature. It includes the following sections: Feature Overview, page 1 Supported Platforms, page 5 Supported
CT5760 Controller and Catalyst 3850 Switch Configuration Example
CT5760 Controller and Catalyst 3850 Switch Configuration Example Document ID: 116342 Contributed by Antoine KMEID and Serge Yasmine, Cisco TAC Engineers. Aug 13, 2013 Contents Introduction Prerequisites
GLBP - Gateway Load Balancing Protocol
GLBP - Gateway Load Balancing Protocol Gateway Load Balancing Protocol (GLBP) protects data traffic from a failed router or circuit, like Hot Standby Router Protocol (HSRP) and Virtual Router Redundancy
Content Switching Module for the Catalyst 6500 and Cisco 7600 Internet Router
Content Switching Module for the Catalyst 6500 and Cisco 7600 Internet Router Product Overview The Cisco Content Switching Module (CSM) is a Catalyst 6500 line card that balances client traffic to farms
Configuring Network Address Translation
CHAPTER5 Configuring Network Address Translation The information in this chapter applies to both the ACE module and the ACE appliance unless otherwise noted. This chapter contains the following major sections
- Basic Router Security -
1 Enable Passwords - Basic Router Security - The enable password protects a router s Privileged mode. This password can be set or changed from Global Configuration mode: Router(config)# enable password
Lab 11.5.6.1 Configure Syslog on AP
Lab 11.5.6.1 Configure Syslog on AP Estimated Time: 25 minutes Number of Team Members: Students will work in teams of two. Objective In this lab, students will configure and use syslog logging to monitor
Lab 7.2.9 Load Balancing Across Multiple Paths Instructor Version 2500
Lab 7.2.9 Load Balancing Across Multiple Paths Instructor Version 2500 Objective onfigure Load balance across multiple paths. Observe the load balancing process. Background/Preparation able a network similar
Lab 8.3.1.2 Configure Basic AP Security through IOS CLI
Lab 8.3.1.2 Configure Basic AP Security through IOS CLI Estimated Time: 30 minutes Number of Team Members: Students will work in teams of two. Objective In this lab, the student will learn the following
Troubleshooting the Firewall Services Module
CHAPTER 25 This chapter describes how to troubleshoot the FWSM, and includes the following sections: Testing Your Configuration, page 25-1 Reloading the FWSM, page 25-6 Performing Password Recovery, page
Apache CloudStack 4.x (incubating) Network Setup: excerpt from Installation Guide. Revised February 28, 2013 2:32 pm Pacific
Apache CloudStack 4.x (incubating) Network Setup: excerpt from Installation Guide Revised February 28, 2013 2:32 pm Pacific Apache CloudStack 4.x (incubating) Network Setup: excerpt from Installation Guide
Configuring Secure Socket Layer HTTP
Finding Feature Information, page 1 Prerequisites for Configuring the Switch for Secure Sockets Layer HTTP, page 1 Restrictions for Configuring the Switch for Secure Sockets Layer HTTP, page 2 Information
Chapter 2 Lab 2-2, Configuring EtherChannel Instructor Version
Chapter 2 Lab 2-2, Configuring EtherChannel Instructor Version Topology Objective Background Configure EtherChannel. Four switches have just been installed. The distribution layer switches are Catalyst
Configuring Modem Transport Support for VoIP
Configuring Modem Transport Support for VoIP This chapter explains how to configure modem transport support for Voice over IP (VoIP) and contains the following sections: Modem Transport Support Overview,
Cisco CCNA Optional Semester 4 Labs Wide Area Networking LAB 1 T1 TSU WAN LINK OVERVIEW - Instructor Guide (Estimated time: 30 minutes)
CNAP @ VCC 1 of 8 LAB 1 T1 TSU WAN LINK OVERVIEW - Instructor Guide (Estimated time: 30 minutes) Objectives: Understand the function of a T1 Service Unit (TSU) in network telecommunications Connect routers
Configuring the Switch for the Firewall Services Module
CHAPTER 2 Configuring the Switch for the Firewall Services Module This chapter describes how to configure the Catalyst 6500 series switch or the Cisco 7600 series router for use with the FWSM. Before completing
Task 20.1: Configure ASBR1 Serial 0/2 to prevent DoS attacks to ASBR1 from SP1.
Task 20.1: Configure ASBR1 Serial 0/2 to prevent DoS attacks to ASBR1 from SP1. Task 20.2: Configure an access-list to block all networks addresses that is commonly used to hack SP networks. Task 20.3:
Configuring Basic Broadband Internet Access
CHAPTER 4 This chapter describes the parameters of configuring and maintaining basic broadband Internet access. The chapter contains these sections: Overview of Basic Broadband Internet Access section
Configuring Role-Based Access Control
5 CHAPTER This chapter describes how to configure role-based access control (RBAC) on the Cisco Application Control Engine (ACE) module. This chapter contains the following sections: Information About
ICND1 Lab Guide. 640-822 Interconnecting Cisco Networking Devices Part 1 Version: Beta. Labs powered by
ICND1 Lab Guide 640-822 Interconnecting Cisco Networking Devices Part 1 Version: Beta Labs powered by Interconnecting Cisco Networking Devices Part 1 640-822 Lab Guide 25 Century Blvd. Ste. 500 Nashville,
Configuring Fax Pass-Through
Configuring Fax Pass-Through This chapter describes the configuration of fax pass-through. With fax pass-through, modulated fax information from the PSTN is passed in-band over a voice speech path in an
642 523 Securing Networks with PIX and ASA
642 523 Securing Networks with PIX and ASA Course Number: 642 523 Length: 1 Day(s) Course Overview This course is part of the training for the Cisco Certified Security Professional and the Cisco Firewall
LAB Configuring NAT. Objective. Background/Preparation
LAB Configuring NAT Objective Configure a router to use network address translation (NAT) to convert internal IP addresses, typically private addresses, into outside public addresses. Configure static
SolarWinds Technical Reference
SolarWinds Technical Reference Enabling NetFlow and NetFlow Data Export (NDE) on Cisco Catalyst Switches Introduction... 3 Requirements... 3 Catalyst 4500 Series... 3 Enabling NetFlow... 3 Configuring
Track 2: Operations: Data Center Architectures and Technologies
Track 2: Operations: Data Center Architectures and Technologies SANOG 2006 Tutorials: 1st August 2006 Zeeshan Naseh Asim Khan Bilal Khawaja 1 Day Agenda Part I - Data Center Designs and Services (Zeeshan
- The PIX OS Command-Line Interface -
1 PIX OS Versions - The PIX OS Command-Line Interface - The operating system for Cisco PIX/ASA firewalls is known as the PIX OS. Because the PIX product line was acquired and not originally developed by
Cisco IOS Switch Security Configuration Guide
Report Number: I33-010R-2004 Cisco IOS Switch Security Configuration Guide Switch Security Guidance Activity of the Systems and Network Attack Center (SNAC) Authors: Date: 21 June 2004 A. Borza Version:
Sample Configuration Using the ip nat outside source static
Sample Configuration Using the ip nat outside source static Table of Contents Sample Configuration Using the ip nat outside source static Command...1 Introduction...1 Before You Begin...1 Conventions...1
IOS Server Load Balancing
IOS Server Load Balancing This feature module describes the Cisco IOS Server Load Balancing (SLB) feature. It includes the following sections: Feature Overview, page 1 Supported Platforms, page 5 Supported
TotalCloud Phone System
TotalCloud Phone System Cisco SF 302-08P PoE VLAN Configuration Guide Note: The below information and configuration is for deployment of the Cbeyond managed switch solution using the Cisco 302 8 port Power
Note: This case study utilizes Packet Tracer. Please see the Chapter 5 Packet Tracer file located in Supplemental Materials.
Note: This case study utilizes Packet Tracer. Please see the Chapter 5 Packet Tracer file located in Supplemental Materials. CHAPTER 5 OBJECTIVES Configure a router with an initial configuration. Use the