Enterasys Networks Security Router X-PeditionTM - Manual (Page 252)

Configuring DoD/BoD
10-30 Configuring Dialer Services
XSR(config-if)#no shutdown
XSR(config-if)#dialer remote-name XSR-Boston
The following commands add a dialer pool member and set the Central Office switch type on BRI
port 1/0:
XSR(config)#interface bri 1/0
XSR(config-if)#isdn switch-type basic-net3
XSR(config-if)#dialer pool-member 1
XSR(config-if)#no shutdown
The following command sets remote user authentication:
XSR(config)#username XSR-toronto password secret 0 code
MLPPP Point-to-Multipoint Configuration
The following configuration, as illustrated in Figure 10-12 on page 10-27, sets up a switched
MLPPP group (bundle) when Access List-defined data traffic is generated to a remote site.
Node A (Calling Node) Configuration
The following commands add a dialer pool member with the Central Office switch type to BRI
interface 1/0:
XSR(config)#interface bri 1/0
XSR(config-if)#isdn switch-type basic-net3
XSR(config-if)#dialer pool-member 25
XSR(config-if)#no shutdown
The following commands define a dialer group, add a dialer pool, enable MLPPP, set a 20-second
idle timeout, and map BRI interface 1/0 to Dialer interface 1. The
min-links command directs
the XSR to maintain a minimum of two links over the switched line. The dialer map command
directs Node A to call Node B, specifying Node B’s IP address and phone number, as well as
enables spoofing.
XSR(config)#interface dialer 1
XSR(config-if)#no shutdown
XSR(config-if)#dialer pool 25
XSR(config-if)#encapsulation ppp
XSR(config-if)#dialer idle-timeout 20
XSR(config-if)#dialer-group 3
XSR(config-if)#dialer map ip 10.10.10.2 2400
XSR(config-if)#ip address 10.10.10.1 255.255.255.0
XSR(config-if)#ppp multilink
XSR(config-if)#multilink min-links 2
The following command defines interesting packets for the dial out trigger by configuring ACL 101
to permit all Type 8 source and destination ICMP traffic:
XSR(config)#access-list 101 permit icmp any any 8
The following command maps ACL 101 to dialer group 3:
XSR(config)#dialer-list 3 protocol ip list 101
Note: Only peer Node A can initiate the MLPPP group setup.