Enterasys Networks Security Router X-PeditionTM - Manual (Page 247)

Configuring DoD/BoD
XSR User’s Guide 10-25
! XSR(config-if<D2>)#dialer map ip 20.20.20.2 2401
! XSR(config-if<D2>)#ip address 20.20.20.1 255.255.255.0
The following command defines interesting packets for the dial out trigger by configuring access
list 101 to pass all Type 8 source and destination ICMP traffic up to 20 idle seconds:
XSR(config)#access-list 101 permit icmp any any 8
The following command maps ACL 101 to dialer group 3:
XSR(config)#dialer-list 3 protocol ip list 101
Node B (Called Node) Configuration
The following commands add a dialer pool member and set the Central Office switch type on BRI
port 1/0:
XSR(config)#interface bri 1/0
XSR(config-if<BRI-1/0>)#isdn switch-type basic-net3
XSR(config-if<BRI-1/0>)#dialer pool-member 22
XSR(config-if<BRI-1/0>)#no shutdown
The following commands add a dial pool and map BRI interface 1/0 to Dialer interface 1.
Optionally, you can employ the dialer called method to map incoming Node A calls to Node B’s
phone number and add a second Dialer interface with similar mappings.
XSR(config)#interface dialer 1
XSR(config-if<D1>)#no shutdown
XSR(config-if<D1>)#dialer pool 22
XSR(config-if<D1>)#encapsulation ppp
! dialer called 2400
XSR(config-if<D1>)#ip address 10.10.10.2 255.255.255.0
! XSR(config)#interface dialer 2
! XSR(config-if<D2>)#no shutdown
! XSR(config-if<D2>)#dialer pool 22
! XSR(config-if<D2>)#encapsulation ppp
! XSR(config-if<D2>)#dialer called 2401
! XSR(config-if<D2>)#ip address 20.20.20.2 255.255.255.0
PPP Multipoint-to-Multipoint Configuration
The following configuration sets both peer nodes to initiate the setup of a switched link when
access list-defined data traffic is sent to the remote peer. The configuration of the two nodes is
symmetrical, that is, both nodes can make and receive calls.
Node A Configuration
The following commands add a dialer pool member and set the Central Office switch type on BRI
port 1/0:
XSR(config)#interface bri 1/0
XSR(config-if<BRI-1/0>)#isdn switch-type basic-net3
XSR(config-if<BRI-1/0>)#dialer pool-member 25
XSR(config-if<BRI-1/0>)#no shutdown
The following commands define a dial group, add a dial pool, configure Dialer interface 1 with
spoofing enabled on XSR-Andover network, and set calls out to XSR-Toronto to terminate if the line
is idle for 35 seconds: