Chinaunix首页 | 论坛 | 博客
  • 博客访问: 19006768
  • 博文数量: 7460
  • 博客积分: 10434
  • 博客等级: 上将
  • 技术积分: 78178
  • 用 户 组: 普通用户
  • 注册时间: 2008-03-02 22:54
文章分类

全部博文(7460)

文章存档

2011年(1)

2009年(669)

2008年(6790)

分类: 系统运维

2008-05-21 09:50:35

Freebeme关于ISDN备份线路配属说明

用Dialer Watch 备份的配置任务表:
• 决定主从接口(必需)
• 决定要监视的网络或路由(必需)
• 给接口配ddr备份(必需)
• 建立一个Dialer List (必需)
• 在备份接口上设定关闭时间(可选)

 先研究一下实例先

maui−soho−01 (1600)
maui−soho−01#show running−config
Building configuration...
Current configuration : 1546 bytes
!
version 12.1
no service single−slot−reload−enable
service timestamps debug uptime
service timestamps log uptime
no service password−encryption
!
hostname maui−soho−01
!
logging rate−limit console 10 except errors
aaa new−model
aaa authentication login default local
aaa authentication login NO_AUTHEN none
aaa authentication ppp default local
!−−− 这是点对点call的基本3A配置。
enable secret 5 !
username maui−nas−05 password 0 cisco
!−−− 远程路由的用户名 (maui−nas−05) and 和共用的密码.
!−−− 共用的密码(用于 CHAP认证)两端必须相同.
Cisco − Configuring DDR Backup using BRIs and Dialer Watch
ip subnet−zero
no ip finger
!
isdn switch−type basic−ni
!
interface Loopback0
ip address 172.17.1.1 255.255.255.0
!
interface Ethernet0
ip address 172.16.1.1 255.255.255.0
!
interface Serial0
!−−− 主链路
ip address 192.168.10.2 255.255.255.252
encapsulation ppp
ppp authentication chap
!
interface BRI0
ip address 172.20.10.2 255.255.255.0
!−−− BRI口的ip 地址(备份链路)
encapsulation ppp
dialer idle−timeout 30
!−−− 备份链路的超时时间 (秒) .
!−−− Dialer watch 检查 主链路的周期超时时间。
dialer watch−disable 15
!−−− 主链路恢复15秒后挂断备份链路
dialer load−threshold 1 outbound
!−−− 多链路复用负载门限值。(1-255),超过门限就启用ppp multilink.
dialer map ip 172.20.10.1 name maui−nas−05 broadcast 5551111
!−−− BRi接口与远端路由器的拨叫映射。
dialer map ip 172.22.53.0 name maui−nas−05 broadcast 5551111
!−−− 被dialer watch−list命令监视的路由/网络的映射声明
!−−− 这个网络要和dialer watch−list命令中的一样。
!−−− 当被监视的路由消失了, 就拨起指定的连接。
dialer watch−group 8
!−−− 在备份接口开启dialer watch。
!−−− 监视由dialer watch−list 8所指定的路由。.
dialer−group 1
!−−− 应用在dialer−list 1中指定的感兴趣流量.
isdn switch−type basic−ni
isdn spid1 51255522220101 5552222
isdn spid2 51255522230101 5552223
!−−− SPID 信息,你的电信服务商会提供给你。
!−−− 有的地区不需要spid.
ppp authentication chap
!−−−用CHAP验证.
ppp multilink
!−−− 启用ppp多路并用。.
!
router ospf 5
log−adjacency−changes
network 172.16.1.0 0.0.0.255 area 0
network 172.17.1.0 0.0.0.255 area 0
network 172.20.10.0 0.0.0.255 area 0
network 192.168.10.0 0.0.0.3 area 0
!
ip classless
no ip http server
!
dialer watch−list 8 ip 172.22.53.0 255.255.255.0
!−−− 定义了要监视的路由条目.
!−−− 这条确切路由(包含子网掩码) 必须是路由表中存在的。
!−−− 用dialer watch−group 8在接口中应用。
access−list 101 remark Define Interesting Traffic
access−list 101 deny ospf any any
!−−− 标记ospf为非感兴趣流量。.
!−−− 这是为了防止ospf的keepalive拨起链路。.
access−list 101 permit ip any any
dialer−list 1 protocol ip list 101
!−−− 感兴趣流量由访问列表101定义。.
!−−− 这个用dialer−group 1应用到bri口。.
!
line con 0
login authentication NO_AUTHEN
transport input none
line vty 0 4
!
end
maui−nas−05 (3640)
maui−nas−05#show running−config
Building configuration...
Current configuration:
!
Cisco − Configuring DDR Backup using BRIs and Dialer Watch
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password−encryption
!
hostname maui−nas−05
!
aaa new−model
aaa authentication login default local
aaa authentication login NO_AUTHEN none
aaa authentication ppp default local
!−−− This is the basic AAA configuration for PPP calls.
enable secret 5 !
username maui−soho−01 password 0 cisco
!−−− Username for remote router (maui−soho−01) and shared secret.
!−−− Shared secret(used for CHAP authentication) must be the same on
!−−− both sides.
!
ip subnet−zero
!
isdn switch−type basic−ni
!
interface Loopback0
ip address 172.22.1.1 255.255.255.0
!
interface Ethernet0/0
ip address 172.22.53.105 255.255.255.0
!
interface Ethernet0/1
no ip address
shutdown
!
interface BRI1/0
!−−− Interface for backup link.
ip address 172.20.10.1 255.255.255.0
encapsulation ppp
dialer map ip 172.20.10.2 name maui−soho−01 broadcast
!−−− This is the dialer map with IP address and authenticated username
!−−− for the remote destination. The name should match the authentication
!−−− username provided by the remote side. The dialer map statement is
!−−− used even though this router is not dialing out
!−−− (that is, the phone number is not specified).
dialer−group 1
!−−− Apply interesting traffic defined in dialer−list 1.
isdn switch−type basic−ni
isdn spid1 51255511110101 5551111
isdn spid2 51255511120101 5551112
!−−− SPID information. Contact your telco for the SPID format.
!−−− In many parts of the world, SPIDs are not required.
!−−− In such cases, omit the above two commands.
ppp authentication chap
ppp multilink
Cisco − Configuring DDR Backup using BRIs and Dialer Watch
!
!−−− Output removed.
!
interface Serial2/0
!−−− Primary link.
ip address 192.168.10.1 255.255.255.252
encapsulation ppp
clockrate 64000
ppp authentication chap
!
!−−− Output removed.
!
router ospf 5
network 172.20.10.0 0.0.0.255 area 0
network 172.22.1.0 0.0.0.255 area 0
network 172.22.53.0 0.0.0.255 area 0
network 192.168.10.0 0.0.0.3 area 0
default−information originate
!
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet0/0
no ip http server
!
dialer−list 1 protocol ip permit
!−−− This defines all IP traffic as interesting. OSPF does not need
!−−− to be marked uninteresting since this link does not dial out.
!−−− Adjust the interesting traffic definition depending on your needs.
!
line con 0
login authentication NO_AUTHEN
transport input none
line 97 102
line aux 0
line vty 0 4
!
end

 

阅读(317) | 评论(0) | 转发(0) |
0

上一篇:配置Cisco PIX防火墙

下一篇:ISDN实验

给主人留下些什么吧!~~