Cisco - Access-Dial Technical Tips Access-Dial Technical Tips ● Asynchronous Connectivity ● Modems ● ISDN ● Dial on Demand Routing (DDR) ● Point-to-Point Protocol (PPP) ● Authentication, Authorization, and Accounting (AAA) ● T1/E1 ● VPDN ● General ● Access Products Access Related Links ● Access DSL ● Access VPN and Cisco Secure ● Broadband Cable ● Access Dial Top Issues ● Technology Support Page ● Product Support Page Asynchronous Connectivity This section includes terminals, async interfaces, comm/terminal servers, and aux/console port connections. ● Sample Configurations ❍ Configuring a Comm/Terminal Server for Router Console Access ❍ Setting up a Comm/Terminal Server for Sun Console Access http://www.cisco.com/warp/public/471/index.shtml (1 of 13) [5/6/2001 7:30:58 PM] Cisco - Access-Dial Technical Tips ❍ Printing to a Comm Server on IBM AIX ❍ How to Tunnel Async Data ❍ AUX Back-to-Back ❍ Sample Configuration - DDR Auxport Dial Backup ❍ Configuring EXEC Callback ❍ Async-PPP Callback Between an Access Server and a PC ❍ DNIS and Modem Pooling With a PRI Line ❍ WINS/DHCP on an AS5200 ❍ VTY Async Sample Configuration ❍ Cisco Access Dial Configuration Cookbook ● Tech Notes ❍ Modem-Router Connection Guide ❍ Attaching a US Robotics Modem to the Console Port of a Cisco Router ❍ Cabling Guide for RJ-45 Console and AUX Ports ❍ Console Port Problem on Cisco 2500 ❍ How Async Lines are Numbered in Cisco 3600 Series Routers ❍ Using service tcp-keepalives to Clear Hung Telnet Sessions ❍ TN3270 on an AS5200 ❍ Characters Supported in Dialer String (V.25bis) ● Troubleshooting ❍ Dialup Technology: Troubleshooting Techniques ● FAQs ❍ RTS and DTR: Why They Might Toggle ❍ Interfacing TAs and V.25bis Return to Top of Page Modems This section includes information on using external modems, and internal modems, such as Microcom, MICA, and Nextport. ● Sample Configurations ❍ Configuring Modem Connectivity with a Cisco 3640 BRI ❍ Async Backup with Dialer Profiles ❍ Configuring DDR to Backup an Async Connection ❍ DNIS and Modem Pooling With a PRI Line ❍ DNIS and Modem Pooling Using a CAS T1 Line ❍ Modem-Pooling With DNIS http://www.cisco.com/warp/public/471/index.shtml (2 of 13) [5/6/2001 7:30:58 PM] Cisco - Access-Dial Technical Tips ❍ Router-to-Router Async Multilink PPP ❍ Async Multilink PPP Dialup from Microsoft Windows® Clients ❍ Configuring EXEC Callback ❍ Async-PPP Callback Between an Access Server and a PC ❍ Cisco Access Dial Configuration Cookbook ● Tech Notes ❍ Modem-Router Connection Guide ❍ Attaching a US Robotics Modem to the Console Port of a Cisco Router ❍ Configuring Modem Recovery ❍ Overview of General Modem and NAS Line Quality ❍ Configuring Client Modems to Work with Cisco Access Servers ❍ Client Modem Firmware Overview ❍ MICA Modem States and Disconnect Reasons ❍ Comparing NextPort SPE Commands to MICA Modem Commands ❍ Dialup Technology: Overviews and Explanations ❍ Windows 95 with CHAP Authentication ● Troubleshooting ❍ Dialup Technology: Troubleshooting Techniques ❍ Using Customer Dial-in Lab to test your connection ❍ Testing Async DDR into the San Jose Dial-in Lab ● FAQs ❍ Dialout Utility Frequently Asked Questions Return to Top of Page ISDN This section covers Integrated Services Digital Network (ISDN) technologies such as Basic Rate Interface (BRI) and Primary Rate Interface (PRI) ● Sample Configurations ❍ Configuring ISDN DDR with Dialer Profiles ❍ Sample Configuration - BRI Rotary Group ❍ Configuring ISDN BRI using the ip unnumbered Command ❍ Static Routes over Unnumbered BRI Interfaces ❍ Dial-on-demand Routing (DDR) with Easy IP ❍ Configuring Easy IP ❍ BRI-to-BRI Connection using Data Over Voice http://www.cisco.com/warp/public/471/index.shtml (3 of 13) [5/6/2001 7:30:58 PM] Cisco - Access-Dial Technical Tips ❍ Configuring ISDN BRI to PRI using Multilink PPP to Aggregate Physical Interfaces ❍ Snapshot Routing over ISDN ❍ Basic AS5200 with Two PRIs ❍ Basic AS5300 with Four PRIs ❍ AS5300 Supporting ISDN v.120 Calls ❍ AS5300 Supporting ISDN v.120 Calls with a Virtual Template ❍ Configuring NFAS with Four T1s ❍ DDR Backup using BRIs and the backup interface Command ❍ Configuring BRI Backup Interface with Dialer Profiles ❍ Configuring BRI-to-BRI Dialup with DDR Dialer Maps ❍ Configuring DDR Backup using BRIs and Dialer Watch ❍ Configuring ISDN Backup for Frame Relay ❍ Configuring Frame Relay Backup ❍ Scalable ISDN Backup Strategy for Large OSPF Networks ❍ Backup Bridging over ISDN ❍ Time-Based ISDN/Async (Legacy) DDR ❍ PPP Callback Over ISDN ❍ ISDN Authentication and Callback with Caller ID ❍ Bridging Across ISDN ❍ ISDN Sample Configuration -Bridging ❍ PPP Half-Bridging ❍ Cisco IOS™ Router to Ascend Access Server ❍ Sample Configuration- AppleTalk ❍ AppleTalk over ISDN with DDR ❍ Cisco Access Dial Configuration Cookbook ● Tech Notes ❍ Dialup Technology: Overviews and Explanations ❍ ISDN Debug Information ❍ Configuring the Basic Rate Interface (BRI) for ISDN in Germany ❍ Configuring ISDN for Australia ❍ Configuring the Basic Rate Interface (BRI) for ISDN Leased Lines in Spain (NOVACOM) ❍ Capabilities of Typical ISDN Switches ❍ ISDN Glossary ● Troubleshooting ❍ Dialup Technology: Troubleshooting Techniques ❍ Using the show isdn status Command for BRI Troubleshooting ❍ Troubleshooting ISDN BRI Layer 1 ❍ Troubleshooting ISDN BRI Layer 2 ❍ Troubleshooting ISDN BRI SPIDs ❍ Understanding debug isdn q931 Disconnect Cause Codes http://www.cisco.com/warp/public/471/index.shtml (4 of 13) [5/6/2001 7:30:58 PM] Cisco - Access-Dial Technical Tips ❍ T1 Troubleshooting Flowcharts ❍ T1 PRI Troubleshooting ❍ Troubleshooting ISDN and DDR ❍ Troubleshooting ISDN Connections ● FAQs ❍ What is the Difference Between ISDN Point-to-Point and ISDN Multipoint on an AT&T 5ESS Switch? ❍ Why Doesn't OSPF Form Adjacency on a PRI, BRI or Dialer Interface? ❍ SETUP_ACK Workaround Return to Top of Page Dial on Demand Routing (DDR) Articles found here cover using DDR for on-demand dial connectivity, backup to a WAN link and callback. ● Sample Configurations ❍ Configuring ISDN DDR with Dialer Profiles ❍ AS5300 Dialing out with ISDN/Async (Outbound DDR) ❍ Dial-on-demand Routing (DDR) with Easy IP ❍ Easy IP ❍ ISDN DDR Using HDLC Encapsulation ❍ Async Backup with Dialer Profiles ❍ Configuring BRI Backup Interface with Dialer Profiles ❍ Configuring DDR Backup using BRIs and Dialer Watch ❍ DDR Backup using BRIs and the backup interface Command ❍ Configuring BRI-to-BRI Dialup with DDR Dialer Maps ❍ Configuring ISDN DDR Backup for Frame Relay ❍ Configuring Frame Relay Backup ❍ Configuring DDR to Backup an Async Connection ❍ DDR Auxport Dial Backup ❍ Backup Bridging over ISDN ❍ Configuring Dialer Profiles to Bridge using ISDN ❍ Bridging with Dialer Profiles ❍ Configuring EXEC Callback ❍ AUX Back-to-Back ❍ Snapshot Routing http://www.cisco.com/warp/public/471/index.shtml (5 of 13) [5/6/2001 7:30:58 PM] Cisco - Access-Dial Technical Tips ❍ Using Floating Static Routes and Dial-on-Demand Routing ❍ Time-Based ISDN/Async (Legacy) DDR ❍ AppleTalk over ISDN with DDR ❍ Cisco Access Dial Configuration Cookbook ● Tech Notes ❍ Dialup Technology: Overviews and Explanations ❍ Multilink PPP for DDR - Basic Configuration and Verification ❍ Restrictions for the dialer max-link 1Command and MPPP ❍ Evaluating Backup Interfaces, Floating Static Routes, and Dialer Watch for DDR Backup ❍ Deciding and Preparing to Configure DDR ❍ Dialer Profiles Operation ● Troubleshooting ❍ Dialup Technology: Troubleshooting Techniques ❍ Troubleshooting ISDN and DDR ❍ Using Customer Dial-in Lab to test your connection ❍ Testing Async DDR into the San Jose Dial-in Lab ● FAQs ❍ Snapshot Routing: Frequently Asked Questions Return to Top of Page Point-to-Point Protocol (PPP) This section covers normal PPP dialup, Multlink PPP, Multichassis MPPP, and PPP Callback. ● Sample Configurations ❍ Configuring PPP Dial-up ❍ Cisco CHAP/PAP Call-in ❍ AS5300 Configured for MLP on Async and ISDN ❍ Async Multilink PPP Dialup from Microsoft Windows® Clients ❍ Router-to-Router Async Multilink PPP ❍ Multilink PPP on Back-to-back Routers with Multiple Serial Interfaces ❍ Inverse MUX Application using Multilink PPP ❍ Multilink Via Virtual-Template on Two Serial Interfaces ❍ Multilink PPP Across Two Serial Physical-layer Async Interfaces ❍ Multichassis Multilink PPP with AS5300s ❍ Multichassis Multilink PPP with Cisco AS5300s and an Offload Server ❍ Configuring L2TP Multihop to Perform MMPPP in the LNS ❍ Sample Configuration - APPN over PPP Multilink http://www.cisco.com/warp/public/471/index.shtml (6 of 13) [5/6/2001 7:30:58 PM] Cisco - Access-Dial Technical Tips ❍ Async-PPP Callback Between an Access Server and a PC ❍ PPP Callback with Local Authentication ❍ PPP Callback Over ISDN ❍ PPP Callback with RADIUS ❍ PPP Callback with TACACS+ ❍ PPP Half-Bridging ❍ How to Setup PPP Idle Timeout For Async Using RADIUS ❍ Access Server Dial-In IP/PPP Configuration With Dedicated V.120 PPP ❍ Cisco Access Dial Configuration Cookbook ● Tech Notes ❍ Dialup Technology: Overviews and Explanations ❍ PPP Authentication Using the ppp chap hostname and ppp authentication chap callin Commands ❍ Common Problems in Debugging RADIUS, PAP and CHAP ❍ CHAP or ARAP With TACACS+:Interoperability Problems With One-Time Password Systems ❍ Multilink PPP for DDR - Basic Configuration and Verification ❍ How to Speed Up the Addition of ISDN B Channels to a Multilink PPP Bundle ❍ Criteria for Naming Multilink PPP Bundles ❍ Restrictions for the dialer max-link 1Command with Multilink PPP ❍ Microsoft Windows 2000 PCs with MPPP Connections Experience Low Throughput ❍ Multichassis Multilink PPP (MMP) ❍ Access Server Dial-In IP/PPP Configuration With Dedicated V.120 PPP ❍ Connecting 3Com to Cisco via PPP ❍ Stampede for PC Dialin Access ❍ PPP Per-User Timeouts ❍ Virtual Access PPP Features in Cisco IOS ● Troubleshooting ❍ Dialup Technology: Troubleshooting Techniques ❍ Troubleshooting Async Multilink PPP Operations ❍ Using Customer Dial-in Lab to test your connection ❍ Testing Async DDR into the San Jose Dial-in Lab ● FAQs ❍ Return to Top of Page Authentication, Authorization, and Accounting (AAA) This section covers configuring the Access Servers (NAS) for router-based(local) AAA and Server-based AAA http://www.cisco.com/warp/public/471/index.shtml (7 of 13) [5/6/2001 7:30:58 PM] Cisco - Access-Dial Technical Tips (Radius and Tacacs+). However it does not cover specific Radius and Tacacs+ server configuration issues. ● Sample Configurations ❍ Implementing Local AAA ❍ Implementing Server-Based AAA ❍ Basic RADIUS ❍ Advanced RADIUS ❍ Radius Dial-Up Sample Config ❍ Basic TACACS+ ❍ Advanced TACACS+ ❍ TACACS+ Dial-Up Sample Config ❍ Configuring Large Scale Dialout Using TACACS+ ❍ Implementing Server-Based AAA Accounting ❍ AAA Device Configuration Samples ❍ How To Apply Access Lists to Dial Interfaces with a RADIUS Server ❍ How to Setup PPP Idle Timeout For Async Using RADIUS ● Tech Notes ❍ PPP Per-User Timeouts ❍ Using AAA Server to Manage IP Pools in a Network Access Server ❍ TACACS+ and RADIUS Comparison ❍ Double Authentication Design and Implementation Guide ❍ RADIUS/TACACS+ Technical Tips ● Troubleshooting ❍ Diagnosing and Troubleshooting AAA Operations ❍ Common Problems in Debugging RADIUS, PAP and CHAP ● FAQs ❍ Return to Top of Page T1/E1 This section covers configuring and troubleshooting T1s and E1s ● Sample Configurations ❍ Configuring ISDN BRI to PRI using Multilink PPP to Aggregate Physical Interfaces ❍ ISDN NFAS Primary and Backup D Channel ❍ Configuring NFAS with Four T1s ❍ DNIS and Modem Pooling With a PRI Line ❍ Cisco Access Dial Configuration Cookbook http://www.cisco.com/warp/public/471/index.shtml (8 of 13) [5/6/2001 7:30:58 PM] Cisco - Access-Dial Technical Tips ● Tech Notes ❍ Dialup Technology: Overviews and Explanations ❍ E1 R2 Signaling Theory ❍ E1 R2 Customization with the cas-custom Command ❍ Understanding the show controller e1 Command ❍ Configuring Cisco Integrated Data Service Unit/Channel Service Unit (DSU/CSU) Modules and WAN Interface Cards ● Troubleshooting ❍ T1 Troubleshooting Flowcharts ❍ T1 Layer 1 Troubleshooting ❍ T1 Alarm Troubleshooting ❍ T1 Error Events Troubleshooting ❍ T1 PRI Troubleshooting ❍ Loopback Tests for T1/56K Lines ❍ E1 Troubleshooting Flowcharts ❍ E1 Layer 1 Troubleshooting ❍ E1 Alarm Troubleshooting ❍ E1 Error Events Troubleshooting ❍ E1 PRI Troubleshooting ❍ E1 R2 Signaling Configuration and Troubleshooting ❍ Hard Plug Loopback Tests for E1 Lines ❍ Dialup Technology: Troubleshooting Techniques ● FAQs ❍ Line Coding Information Return to Top of Page Virtual Private Dialup Networks (VPDN) This section covers configuring L2TP and L2F VPDN using Radius, Tacacs+ and router-based authentication. ● Sample Configurations ❍ Configuring a Basic Virtual Private Dialup Network (VPDN) ❍ Advanced Virtual Private Dialup Network ❍ Advanced Virtual Private Dialup Network Configuration ❍ Detailed Scenario for Access VPDN Dial-in Using L2TP ❍ Configuring Virtual Private Dialup Networks ❍ How-To Configure RADIUS Authentication for VPDNs ❍ How-To Configure TACACS+ Authentication for VPDNs http://www.cisco.com/warp/public/471/index.shtml (9 of 13) [5/6/2001 7:30:58 PM] Cisco - Access-Dial Technical Tips ❍ How-To Configure Layer 2 Tunnel Protocol Authentication with RADIUS ❍ How-To Configure Layer 2 Tunnel Protocol Authentication with TACACS+ ❍ Basic Dial-in VPDN Configuration Using VPDN Groups ❍ Dial-in VPDN Configuration Using VPDN Groups and TACACS+ ❍ Configuring L2TP Multihop to Perform MMPPP in the LNS ❍ Configuring L2TP Multihop to Perform Several Hops from the NAS to the LNS ❍ Cisco Access Dial Configuration Cookbook ● Tech Notes ❍ Adding Multiple Cisco AV-Pairs to a User Profile ❍ Understanding Virtual Private Dialup Network (VPDNs) ❍ Domain Stripping Hack ❍ Layer 2 Tunnel Protocol ❍ Security Technical Tips: Internetworking ● Troubleshooting ❍ ● FAQs ❍ Return to Top of Page General ● Changing the IP Address on the Media Gateway Access Controller ● The cisco-nas@external.cisco.com Alias ● Floating Static Route to a Null Interface ● Using service tcp-keepalives to Clear Hung Telnet Sessions ● Troubleshooting Access Lists on Dial Interfaces ● Connecting a Windows 95 Client to a Windows NT Server through a Cisco Router ● WINS/DHCP on an AS5200 ● PPP Half-Bridging ● Suppressing Messages on Async Lines ● Dialout Utility Frequently Asked Questions ● TN3270 on an AS5200 Return to Top of Page Access Products http://www.cisco.com/warp/public/471/index.shtml (10 of 13) [5/6/2001 7:30:58 PM] [...]... - Access-Dial Technical Tips q WAN Interface Cards for the Cisco 1600 Series Return to Top of Page All contents are Copyright © 1992 2001 Cisco Systems Inc All rights reserved Important Notices and Privacy Statement http://www.cisco.com/warp/public/471/index.shtml (13 of 13) [5/6/2001 7:30:58 PM] Cisco - Security Technical Tips Security Technical Tips This page provides tips directly from Cisco's Technical. ..Cisco - Access-Dial Technical Tips For general information not specific to access-dial technologies concerning these and other Cisco Routers, refer to the Router Issues main index page q q 700 Series 2600 Series q q q q Network Modules 1000 Series... Wan Interface Cards 1700 Series q 2500 Series q Cisco 2509-2512 Cab-Octal Pinouts http://www.cisco.com/warp/public/471/index.shtml (11 of 13) [5/6/2001 7:30:58 PM] q Password Recovery Cisco - Access-Dial Technical Tips q q Console Port Problem on Cisco 2500 Configuring Integrated Data Service Unit/Channel Service Unit (DSU/CSU) Modules and WAN Interface Cards 2600 Series q Wan Interface Cards (WICs) 3600... http://www.cisco.com/warp/public/707/index.shtml (11 of 13) [5/6/2001 7:31:37 PM] Cisco - Security Technical Tips Security FAQs q q q q Cisco Centri Firewall Frequently Asked Questions, Part 1 Cisco PIX Firewall Manager: Frequently Asked Questions Cisco Secure PIX Firewall Frequently Asked Questions Cisco VPN 3000 Concentrator FAQs Related Links q q q q q Access Lists Tips on increasing security on IP networks; blocking a Telnet session... Files Using the Cisco Secure IDS Sensor COM Port for Console Access Cisco Secure IDS Documentation http://www.cisco.com/warp/public/707/index.shtml (2 of 13) [5/6/2001 7:31:36 PM] Cisco - Security Technical Tips q Cisco Secure Intrusion Detection product literature Cisco Secure PIX Firewall q Cisco Secure PIX Firewall Series Support Pages PIX Top Issues Troubleshoot the PIX Firewall using Troubleshooting... (White Paper) Sample Configuration: Cisco Secure PIX Firewall and VPN Clients Using PPTP, MPPE and http://www.cisco.com/warp/public/707/index.shtml (3 of 13) [5/6/2001 7:31:37 PM] Cisco - Security Technical Tips IPSec q Sample Configuration: PIX to PIX and VPN Client 1.1 q Sample Configuration: PIX to PIX to PIX IPSec (Hub and Spoke) Sample Configuration: PIX to PIX to PIX IPSec (Fully Meshed) Sample... Tunneling IP Multicast Packets through a PIX Firewall Sample Configuration: Using the Cisco PIX Firewall http://www.cisco.com/warp/public/707/index.shtml (4 of 13) [5/6/2001 7:31:37 PM] Cisco - Security Technical Tips Cisco Secure Policy Manager (formerly Cisco Security Manager) q q q q Cisco Secure Policy Manager Product Support Pages Archiving and Rollback Procedures for Cisco Secure Policy Manager 2.x Cisco... Concentrator from the Public Network Sample Configuration: Cisco VPN 3000 Concentrator to Cisco IOS http://www.cisco.com/warp/public/707/index.shtml (5 of 13) [5/6/2001 7:31:37 PM] Cisco - Security Technical Tips q q q q q q q q q q q q q q q Sample Configuration: Cisco VPN 3000 Concentrator to PIX Firewall Using a Microsoft Windows 2000 Client to Connect to the Cisco VPN 3000 Concentrator Monitoring... Up the Cisco VPN 5000 Concentrator Initially and for IPSec Main-Mode LAN-to-LAN VPN Connectivity http://www.cisco.com/warp/public/707/index.shtml (6 of 13) [5/6/2001 7:31:37 PM] Cisco - Security Technical Tips q q q Setting Up the Cisco VPN 5000 Concentrator Initially and for Remote Client Access Sample Configuration: Router-to-VPN 500x Concentrator LAN-to-LAN Tunnel Virtual Private Networks and Internet... PPP Idle Timeout For Async Using RADIUS Configuring CSU for UNIX (Solaris) CiscoSecure UNIX & SDI http://www.cisco.com/warp/public/707/index.shtml (7 of 13) [5/6/2001 7:31:37 PM] Cisco - Security Technical Tips q q q q q q q q q q q CiscoSecure Compatibility AAA privilege-level 15 Command Authorization CiscoSecure 1.x for First-time Users CiscoSecure 2.x for First-time Users (TACACS+) Configuring TACACS+ . Cisco - Access-Dial Technical Tips Access-Dial Technical Tips ● Asynchronous Connectivity ● Modems ● ISDN ●. 7:30:58 PM] Cisco - Security Technical Tips Security Technical Tips This page provides tips directly from Cisco's Technical Assistance Center (TAC)