Enterasys Networks XSR-3020 - Manual (Page 76)

XSR Rebooting Characteristics
3-32 Software Configuration
XSR(config)#access-list 103 permit ip any 10.10.10.0 0.0.0.255
Create crypto map statements for each ACL entry with the more protective tunnel mode set by
default. Match statements render associated ACLs bi-directional:
XSR(config)#crypto map test 101
XSR(config)#set transform-set ez-esp-3des-sha-pfs
XSR(config)#match address 101
XSR(config)#crypto map test 102
XSR(config)#set transform-set ez-esp-3des-sha-pfs
XSR(config)#match address 102
XSR(config)#crypto map test 103
XSR(config)#set transform-set ez-esp-3des-sha-pfs
XSR(config)#match address 103
Create the multi-point VPN virtual port required to terminate many clients:
XSR(config)#interface vpn1 multi-point
XSR(config)#description “VPN Virtual Interface Int0”
XSR(config)#ip address 10.10.10.1 255.255.255.0
XSR(config)#ip rip send version 2
XSR(config)#ip rip receive version 2
XSR(config)#ip multicast-redirect tunnel-endpoint
Enable RIP routing on all networks except the public interface:
XSR(config)#router rip
XSR(config)#network 172.16.10.0
XSR(config)#network 10.0.0.0
XSR(config)#passive-interface gigabitethernet2
XSR(config)#no receive-interface gigabitethernet2
XSR(config)#distribute-list 1 out vpn1
Finally, attach the crypto map statement to the public interface:
XSR(config)#interface gigabitethernet 2
XSR(config-if)#crypto map test
XSR(config-if)#end
XSR#copy running-config startup-config
XSR Rebooting Characteristics
When the XSR reboots, it conforms to the behavior described in this section. The output displayed
at the CLI describes router initialization.
Initialization Output
The XSR displays the following output when it initializes (cold reboot):
The XSR displays the following output when it initializes (cold reboot):
X-Pedition Security Router Bootrom
Copyright 2003 Enterasys Networks Inc.
HW Version: 9002914-04 REV0A Serial Number: 3646031700233215