installation & configuration guide

33
Installation & Configuration Guide Step by step Installation & Configuration Guide Version 1.0 18 th November 2005 Created by VPN Support Page 1

Upload: wbccie

Post on 08-Mar-2015

170 views

Category:

Documents


2 download

TRANSCRIPT

Page 1: Installation & Configuration Guide

Installation & Configuration Guide

Step by step Installation &

Configuration Guide

Version 1.018th November 2005

Created by VPN SupportPage 1

Page 2: Installation & Configuration Guide

Installation & Configuration Guide

Table of Contents

1. Introduction...................................................................................................3

2. Step by step checks Cisco 837....................................................................3

3. Configuration Overview Cisco 837..............................................................6 4. Step by step checks Cisco 1721..................................................................9

5. Configuration Overview Cisco 1721..........................................................12

6. Installation Process ....................................................................................17

Created by VPN SupportPage 2

Page 3: Installation & Configuration Guide

Installation & Configuration Guide

1 Introduction

The purpose of this document is to provide an introduction to Cisco 837 & 1721 and explains router configurations.

2 Step by step checks Cisco 837

Creating the Physical ConnectionThe Cisco 837 Series broadband router is ideal for providing Internet or VPN connectivity to small remote offices and to teleworkers. There are several methods of connecting to the router so that you can either view its current configuration (or status) or configure the router. If the router is already connected to your network, then the best method is to telnet to the IP address of its Ethernet interface. Alternatively, the router's console port can be connected to a serial port on a PC. Using communications software such as Hyperterminal for Windows would then be used to talk to the router through the connection.

2.1 Shows the back panel of the Cisco 837 router.

1 Ethernet port 4 connects to PC or network device

5 Console port may be empty.

2 Ethernet port 3 connects to PC or network device

6 ADSL port connects to external wall jack

3 Ethernet port 2 connects to PC or network device

7 Input jack connects to power supply

Created by VPN SupportPage 3

Page 4: Installation & Configuration Guide

Installation & Configuration Guide

4 Ethernet port 1 connects to PC or network device

8 Power on/off button

2.2 Summarizes the functions of the LEDs on the Cisco 837 router

LED Color FunctionPWR_OK Green On when DC power is being supplied to the router. The light blinks if

an error occurs during boot-up.ADSL_CD Green Green On when the ADSL carrier detects status and connects to BT

DSLAM successfully.ADSL_RxD Green Green Blinks when the ADSL receives data.ADSL_TxD Green Green Blinks when the ADSL transmits data. Off when no data is

being uploaded.E1 Status Green Green On when Ethernet 1 connects to the Ethernet interface

successfully. Blinks when Ethernet 1 receives or sends data, or when data passes through Ethernet 1.

E2 Status Green Green On when Ethernet 2 connects to the Ethernet interface successfully. Blinks when Ethernet 2 receives or sends data, or when data passes through Ethernet 2.

E3 Status Green On when Ethernet 3 connects to the Ethernet interface successfully. Blinks when Ethernet 3 receives or sends data, or when data passes through Ethernet 3.

E4 Status Green On when Ethernet 4 connects to the Ethernet interface successfully. Blinks when Ethernet 4 receives or sends data, or when data passes through Ethernet 4.

LAN_RxD Green Blinks when the LAN port receives data from the ADSL port.LAN_TxD Green Blinks when the LAN port transmits data to the ADSL port.

2.3 Checking Power Supply

Created by VPN SupportPage 4

Page 5: Installation & Configuration Guide

Installation & Configuration Guide

It is very Important to check if router is powered ON. Please keep router powered ON when you report fault to Tiscali. Once power is being supplied to the router PWR_OK LED should be Green.

2.4 Checking ADSL Connection

Make sure ADSL Line is connected to the Router as well as to ADSL filter. Also make sure Filter should be connected to the wall jack. Once ADSL link is up ADSL_CD LCD should be green and if it’s not green then possible fault with BT.

Created by VPN SupportPage 5

Page 6: Installation & Configuration Guide

Installation & Configuration Guide

2.5 Checking Network Connection

Please check Ethernet cable should be connected to PC or any other network device (HUB/Switch).

Created by VPN SupportPage 6

Page 7: Installation & Configuration Guide

Installation & Configuration Guide

3 Configuration Overview Cisco 837

Host#sh runBuilding configuration...

Current configuration : 2065 bytes!version 12.2service nagleno service padservice timestamps debug datetime msec localtime show-timezoneservice timestamps log datetime msec localtime show-timezoneservice password-encryptionservice pt-vty-logging!hostname host!logging queue-limit 100logging buffered 4096 informationalenable secret 5 $1AO!clock timezone GMT 0ip subnet-zerono ip source-routeno ip domain lookup!!ip audit notify logip audit po max-events 100no ftp-server write-enable!interface Ethernet0 ip address 10.10.1.1 255.255.255.0 ip helper-address 10.1.1.2 ip helper-address 10.1.1.5 no ip proxy-arp hold-queue 100 out!interface ATM0 no ip address no atm ilmi-keepalive pvc 0/38 encapsulation aal5mux ppp dialer dialer pool-member 1 ! dsl operating-mode auto hold-queue 224 in!interface Dialer0 ip address negotiated encapsulation ppp

Created by VPN SupportPage 7

Page 8: Installation & Configuration Guide

Installation & Configuration Guide

dialer pool 1 dialer idle-timeout 0 dialer persistent dialer-group 1 no cdp enable ppp authentication chap callin ppp chap hostname [email protected] ppp chap password 7 045ACVET0F55 ppp timeout idle 2147483!ip classlessip route 0.0.0.0 0.0.0.0 dialer0no ip http serverno ip http secure-server!access-list 96 permit access-list 96 permit 0.0.0.15access-list 97 permit access-list 97 permit 0.0.0.15dialer-list 1 protocol ip permitsnmp-server community 85uw RO 96snmp-server community d53 RW 97snmp-server ifindex persistsnmp-server trap-source Dialer0snmp-server enable traps snmp authentication warmstartsnmp-server enable traps atm pvc!line con 0 exec-timeout 120 0 password 7 045ACVET login no modem enable stopbits 1line aux 0 stopbits 1line vty 0 4 exec-timeout 120 0 password 7 045ACVET0F login!scheduler max-task-time 5000!end

Host#

Line Configuration Description1 enable secret 5 To specify an additional layer of security 2 interface Ethernet0 Selects the appropriate interface 3 ip address 10.10.1.1 255.255.255.0 Specifies ip address and subnet mask 4 ip helper-address 10.1.1.2 Forwards local broadcast requests as unicasts

Created by VPN SupportPage 8

Page 9: Installation & Configuration Guide

Installation & Configuration Guide

ip helper-address 10.1.1.5 across the ip network or there may be many DHCP servers available on this VPN; each needs to be specified

5 interface ATM0 Selects the appropriate interface6 pvc 0/38 configure an ATM PVC with VPI 0 and VCI 387 encapsulation aal5mux ppp dialer Specifies the encapsulation type for the PVC and

points back to the dialer interface.8 dialer pool-member 1 Make the interface a member of the dialing pool

that the dialer interface will use.9 dsl operating-mode auto Specifies an operating mode of the DSL ATM

interface.10 interface Dialer0 Specifies the Dialer interface to be used.11 ip address negotiated Enables IP processing on the interface without

assigning an explicit IP address.12 encapsulation ppp Specify encapsulation13 dialer pool 1 Specify the dialing pool to use for calls to this

destination. i.e. pool 1.14 dialer idle-timeout 0 specifies the duration of time before an idle

connection is disconnected.15 dialer persistent To force a dialer interface to be connected at all

times16 dialer-group 1 Controls access by configuring an interface to

belong to a specific dialing group i.e. group 1.17 no cdp enable Disable Cisco Discovery protocol18 ppp authentication chap callin Specifies the user name to use during the CHAP

authentication process.19 ppp chap hostname hostname

[email protected] the user name to use during the CHAP authentication process.

20 ppp chap password 7 045ACVE Specifies the password to use during the CHAP authentication process.

21 ip route 0.0.0.0 0.0.0.0 dialer0 Default route is to the dialer0 interface22 access-list 96 permit

access-list 96 permit 0.0.0.15Create an access list to allow read only access.

23 access-list 97 permit access-list 97 permit 0.0.0.15

Create an access list to allow read and write access.

24 dialer-list 1 protocol ip permit Creates dialer access group 1 and permit IP traffic to classify packets as interesting.

25 snmp-server community 85u RO 96 Sets up the community access string to permit read only access to the SNMP protocol.

26 snmp-server community d53RW 97 Sets up the community access string to permit read and write access to the SNMP protocol.

27 snmp-server enable traps snmp linkdown linkup coldstart warmstart

Enable SNMP traps for SNMP, Linkdown, Linkup, Coldstart & Warmstart.

28 snmp-server enable traps atm pvc Enable SNMP traps for ATM PVC.29 snmp-server ifindex persist Globally enables SNMP ifIndex persistence.30 snmp-server trap-source Dialer0 SNMP trap source is Dialer0 interface.31 sntp server Configures the system clock to be synchronised by

a Simple Network Time Protocol (SNTP) servers.32 line con 0 Configure console33 line vty 0 4 Configure remote login through vty port34 exec-timeout 120 0 Sets the interval in minutes (120) and seconds (0)

Created by VPN SupportPage 9

Page 10: Installation & Configuration Guide

Installation & Configuration Guide

that the EXEC command interpreter waits until user input is detected.

35 password 7 045ACVET0 password used to permit router logon.36 login To enable password checking at login

4 Step by step checks Cisco 1721

The Cisco 1721 is a modular router provides high reliability and flexibility to deliver Intranet access & VPN connectivity to small remote offices. The router offers a wide array of WAN access options and Quality of Service.

4.1 Shows the back panel & Summarizes the functions of the LEDs of the Cisco 1721 router.

Table 1 Cisco 1721 Rear Panel LEDs and Descriptions 

Created by VPN SupportPage 10

Page 11: Installation & Configuration Guide

Installation & Configuration Guide

LED Indication Description

WIC 0 OK Green A WIC is correctly inserted in the card slot

Off No WIC present / WIC incorrectly inserted in the card slot

WIC 1 OK Green A WIC is correctly inserted in the card slot

Off No WIC present / WIC incorrectly inserted in the card slot

FDX Green The interface is transmitting data in full-duplex mode

Off When off, the interface is transmitting data in half-duplex mode

100 Mbps Green The speed of the interface is 100 Mbps

Off The speed of the interface is 10 Mbps or no link is established

LINK Green An Ethernet link has been established

Off No Ethernet link established

MOD OK Green VPN hardware encryption module is installed and recognized by Cisco IOS

Off VPN hardware encryption module not installed / not recognized by Cisco IOS

4.2 Shows the front panel & Summarizes the functions of the LEDs of the Cisco 1721 router.

Created by VPN SupportPage 11

Page 12: Installation & Configuration Guide

Installation & Configuration Guide

Table 2 Cisco 1721 Front Panel LEDs and Descriptions 

LED Indication Description

PWR Green Power is supplied to the router

Off The router is not powered on

OK Green The router has successfully booted up and the software is functional. This LED blinks during the power-on self-test (POST)

Off The router has not successfully booted up

WIC 0 ACT/CH0

Green Serial and DSU/CSU cards—Blinks when data is being sent to or received from the port on the card in the WIC0 slot

ISDN cards—On solid when the first ISDN B channel is up for the card in the WIC0 slot

2-port serial cards—Blinks when data is being sent to or received from the first port on the 2-port card in the WIC0 slot

WIC 0 ACT/CH1

Green Serial and CSU/DSU cards—Remains off

ISDN cards—On solid when the second ISDN B channel is up for the card in the WIC0 slot

2-port serial cards—Blinks when data is being sent to or received from the second port on the 2-port card in the WIC0 slot

WIC 1 ACT/CH0

Green Serial and DSU/CSU cards—Blinks when data is being sent to or received from the port on the card in the WIC1 slot

ISDN cards—On solid when the first ISDN B channel is up for the card in the WIC1 slot

Created by VPN SupportPage 12

Page 13: Installation & Configuration Guide

Installation & Configuration Guide

2-port serial cards—Blinks when data is being sent to or received from the first port on the 2-port card in the WIC1 slot

WIC 1 ACT/CH1

Green Serial and CSU/DSU cards—Remains off

ISDN cards—On solid when the second ISDN B channel is up for the card in the WIC1 slot

2-port serial cards—Blinks when data is being sent to or received from the second port on the 2-port card in the WIC1 slot

ETH ACT Green Blinks when there is network activity on the Ethernet port

ETH COL Yellow Blinks when there are packet collisions on the local Ethernet network

4.3 Checking Power Supply

As per section 2.3

4.4 Checking ADSL & ISDN backup Connection

Make sure ADSL Line is connected to the Router as well as to ADSL filter. Also make sure Filter should be connected to the wall jack. Once ADSL link is up ADSL_CD LCD should be green and if it’s not green then possible fault with BT. Also check ISDN cable should be plugged in to the router (for backup solution).

Created by VPN SupportPage 13

Page 14: Installation & Configuration Guide

Installation & Configuration Guide

4.5 Checking Network Connection

As per section 2.5

5 Configuration Overview Cisco 1721

Host#sh runBuilding configuration...

Current configuration : 4068 bytes!! No configuration change since last restart!version 12.2service nagleno service padservice timestamps debug datetime msec localtime show-timezoneservice timestamps log datetime msec localtime show-timezoneservice password-encryptionservice pt-vty-logging!hostname host!logging queue-limit 100logging buffered 4096 informationalenable secret 5 $1$7I3/$!clock timezone GMT 0clock summer-time BST recurringip subnet-zerono ip source-route! !no ip domain lookup!isdn switch-type basic-net3!interface ATM0 no ip address no atm ilmi-keepalive pvc 0/38 encapsulation aal5mux ppp dialer dialer pool-member 1 ! dsl operating-mode auto hold-queue 224 in!interface BRI0

Created by VPN SupportPage 14

Page 15: Installation & Configuration Guide

Installation & Configuration Guide

no ip address encapsulation ppp dialer pool-member 2 isdn switch-type basic-net3 no fair-queue no cdp enable!interface FastEthernet0 ip address 10.10.1.1 255.255.255.0 ip helper-address 10.1.1.2 ip helper-address 10.1.1.5 no ip proxy-arp speed auto hold-queue 100 out!interface Dialer0 ip address negotiated encapsulation ppp dialer pool 1 dialer idle-timeout 0 dialer persistent dialer-group 1 no cdp enable ppp authentication chap callin ppp chap hostname host-1_abc@ connect.co.uk ppp chap password 7 020780 ppp timeout idle 2147483!interface Dialer2 description backup-isdn bandwidth 64 ip address negotiated encapsulation ppp no ip split-horizon dialer pool 2 dialer idle-timeout 60 dialer string 084 dialer hold-queue 10 dialer load-threshold 100 either dialer-group 1 no peer default ip address no cdp enable ppp authentication chap pap callin ppp chap hostname [email protected] ppp chap password 7 045A0F1 ppp pap sent-username [email protected] password 7 121801 ppp multilink!ip classlessip route 0.0.0.0 0.0.0.0 Dialer0 ip route 0.0.0.0 0.0.0.0 Dialer2 200no ip http server

Created by VPN SupportPage 15

Page 16: Installation & Configuration Guide

Installation & Configuration Guide

!access-list 96 permit access-list 96 permit access-list 97 permit access-list 97 permit dialer-list 1 protocol ip permitsnmp-server community 85uwu0 RO 96snmp-server community d5330b RW 97snmp-server ifindex persistsnmp-server trap-source Dialer0snmp-server enable traps snmp authentication warmstartsnmp-server enable traps atm pvc

!line con 0 exec-timeout 120 0 password 7 13031 login stopbits 1line aux 0line vty 0 4 exec-timeout 120 0 password 7 094 login!scheduler max-task-time 5000end

host#

Line Configuration Description1 enable secret 5 $ To specify an additional layer of security 2 interface FastEthernet0 Selects the appropriate Fast Ethernet interface 3 ip address 10.10.1.1 255.255.255.0 Specifies ip address and subnet mask 4 ip helper-address 10.1.1.2

ip helper-address 10.1.1.5Forwards local broadcast requests as unicasts across the ip network or there may be many DHCP servers available on this VPN; each needs to be specified

5 interface ATM0 Selects the appropriate ATM interface6 pvc 0/38 configure an ATM PVC with VPI 0 and VCI 387 encapsulation aal5mux ppp dialer Specifies the encapsulation type for the PVC and

points back to the dialer interface.8 dialer pool-member 1 Make the interface a member of the dialing pool

that the dialer interface will use.9 dsl operating-mode auto Specifies an operating mode of the DSL ATM

interface.10 interface BRI0 Selects the appropriate BRI interface11 no ip address Don’t specify IP address 12 encapsulation ppp Specifies the encapsulation type 13 dialer pool-member 2 Make the interface a member of the dialing pool

that the dialer interface will use.

Created by VPN SupportPage 16

Page 17: Installation & Configuration Guide

Installation & Configuration Guide

14 isdn switch-type basic-net3 Specifies ISDN switch type15 interface Dialer0 Specifies the Dialer interface to be used.16 ip address negotiated Enables IP processing on the interface without

assigning an explicit IP address.17 encapsulation ppp Specify encapsulation18 dialer pool 1 Specify the dialing pool to use for calls to this

destination. i.e. pool 1.19 dialer idle-timeout 0 specifies the duration of time before an idle

connection is disconnected.20 dialer persistent To force a dialer interface to be connected at all

times21 dialer-group 1 Controls access by configuring an interface to

belong to a specific dialing group i.e. group 1.22 no cdp enable Disable Cisco Discovery protocol23 ppp authentication chap callin Specifies the user name to use during the CHAP

authentication process.24 ppp chap hostname hostname

host1_xyz@ connect.co.ukSpecifies the user name to use during the CHAP authentication process.

25 ppp chap password 7 045ACVET0F550

Specifies the password to use during the CHAP authentication process.

26 interface Dialer2 Specifies the Dialer interface to be used.27 ip address negotiated Enables IP processing on the interface without

assigning an explicit IP address.28 encapsulation ppp Specify encapsulation29 dialer pool 2 Specify the dialing pool to use for calls to this

destination. i.e. pool 2.30 dialer idle-timeout 60 specifies the duration of time before an idle

connection is disconnected.31 dialer string 5 To specify the destination string (telephone

number) to be called32 dialer load-threshold 100 either To configure bandwidth on demand by setting the

maximum load before the dialer places another call to a destination

33 dialer hold-queue 10 To allow interesting outgoing packets to be queued until a modem connection is established

34 dialer-group 1 Controls access by configuring an interface to belong to a specific dialing group i.e. group 1.

35 no cdp enable Disable Cisco Discovery protocol36 ppp authentication chap callin Specifies the user name to use during the CHAP

authentication process.37 ppp chap hostname hostname

host1_xyz@ connect.co.ukSpecifies the user name to use during the CHAP authentication process.

38 ppp chap password 7 045ACVET0FC

Specifies the password to use during the CHAP authentication process.

39 ppp pap sent-username host-1_abc@ connect.co.uk password 7 121801

Specifies the username & password to use during the PAP authentication process.

40 ip route 0.0.0.0 0.0.0.0 dialer0 Default route is to the dialer0 interface41 ip route 0.0.0.0 0.0.0.0 Dialer2 200 Backup default route is to the dialer2 interface42 access-list 96 permit

access-list 96 permit 0.0.0.15Create an access list to allow read only access.

Created by VPN SupportPage 17

Page 18: Installation & Configuration Guide

Installation & Configuration Guide

43 access-list 97 permit access-list 97 permit 0.0.0.15

Create an access list to allow read and write access.

44 dialer-list 1 protocol ip permit Creates dialer access group 1 and permit IP traffic to classify packets as interesting.

45 snmp-server community 85uwu0 RO 96

Sets up the community access string to permit read only access to the SNMP protocol.

46 snmp-server community d5330b RW 97

Sets up the community access string to permit read and write access to the SNMP protocol.

47 snmp-server enable traps snmp linkdown linkup coldstart warmstart

Enable SNMP traps for SNMP, Linkdown, Linkup, Coldstart & Warmstart.

48 snmp-server enable traps atm pvc Enable SNMP traps for ATM PVC.49 snmp-server ifindex persist Globally enables SNMP ifIndex persistence.50 snmp-server trap-source Dialer0 SNMP trap source is Dialer0 interface.51 sntp server Configures the system clock to be synchronised by

a Simple Network Time Protocol (SNTP) servers.52 line con 0 Configure console53 line vty 0 4 Configure remote login through vty port54 exec-timeout 120 0 Sets the interval in minutes (120) and seconds (0)

that the EXEC command interpreter waits until user input is detected.

55 password 7 045AC password used to permit router logon.56 login To enable password checking at login

6 Installation Process

6.1 Initial Checks

Get the as much of following from the engineer on site: Partner name Engineer name Engineer contact number Customer Name Site name Site number Site CLI Host name WAN IP Address

6.2 Connectivity Testing

Using information given by installation engineer telnet to the WAN IP address. If you can’t telnet then go to C4 and find out correct WAN IP and try again. Once you established telnet connectivity issue following commands;

host#show ip interface briefInterface IP-Address OK? Method Status ProtocolCreated by VPN Support

Page 18

Page 19: Installation & Configuration Guide

Installation & Configuration Guide

FastEthernet0 10.1.1.1 YES NVRAM up up <<<< LAN IP Virtual-Access1 unassigned YES unset up up Virtual-Access2 unassigned YES unset up up Virtual-Access3 unassigned YES unset up up BRI0 unassigned YES NVRAM up up BRI0:1 unassigned YES unset down down BRI0:2 unassigned YES unset down down Dialer0 YES IPCP up up <<< ADSL IP Dialer2 YES IPCP up up <<< ISDN IP ATM0 unassigned YES NVRAM up up host#

Wnsure that the relevant interfaces are all Up Up(ADSL/ISDN/Serial; Ethernet/FastEthernet; Dialer1/Dialer2; VirtualTemplate1/VirtualTemplate2)

Perform ping test using following command

host#ping ip <IP Address> source <Source Interface>

OR

host#pingProtocol [ip]:Target IP address: <HQ Ethernet IP Address>Repeat count [5]:Datagram size [100]:Timeout in seconds [2]:Extended commands [n]: ySource address or interface: <Source Ethernet Interface eg. FastEthernet0>Type of service [0]:Set DF bit in IP header? [no]:Validate reply data? [no]:Data pattern [0xABCD]:Loose, Strict, Record, Timestamp, Verbose[none]:Sweep range of sizes [n]:Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to <HQ Ethernet IP Address>, timeout is 2 seconds:Packet sent with a source address of <HQ Ethernet IP Address>!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 32/37/44 ms

Try ping something on the LAN. If the site is currently unused, get the engineer to plug in their laptop. The laptop should then pick up an internal IP through DHCP (if IP helper is enabled for the customer); which can be confirmed by:

host# show arpProtocol Address Age (min) Hardware Addr Type InterfaceInternet 10.1.1.2 77 0001.e62c.829a ARPA FastEthernet0Internet 10.1.1.1 - 000c.ce6c.fa35 ARPA FastEthernet0host#

Created by VPN SupportPage 19

Page 20: Installation & Configuration Guide

Installation & Configuration Guide

If the laptop did not pick up an IP address, check IP Helper Address:

host#show ip helper-address Interface Helper-Address VPN VRG Name VRG StateFastEthernet0 10.2.1.2 0 None None 10.2.1.5 0 None None host#

If the above entries are missing, check the running configuration on another customer’s router. To then add them to this router do:

host#configure terminalinterface Ethernet0ip helper-address <IP Address 1>ip helper-address <IP Address 2>

6.3 Customer Acceptance

If Connectivity Testing is successful, then you must call the customer to ensure that they confirm connectivity to the remote site.

6.4 Final Configuration Changes

You need to check configurations on some of the new routers, which might have following lines if so then remove this configuration:

banner loginusername cisco …ip domain name …ip dchp exclude-address …ip http secure serverip http authentication localip dhcp pool sdm-poolpriilege level 15 (under line vty)

For managed DSL customers configure SNMP:

logging source-interface Dialer0access-list 96 permit access-list 96 permit 0.0.0.15access-list 97 permit access-list 97 permit 0.0.0.15dialer-list 1 protocol ip permitsnmp-server community 85u RO 96snmp-server community d5 RW 97snmp-server ifindex persistsnmp-server trap-source Dialer0snmp-server enable traps snmp authentication warmstartsnmp-server enable traps atm pvcsntp server exit

Created by VPN SupportPage 20

Page 21: Installation & Configuration Guide

Installation & Configuration Guide

Change password (Please remember that every customer has got the unique passwords!):

line vty 0 4password <vty password>exitline con 0password <vty password>exitenable secret <Enable Secret>end

Once all the changes done successfully save the configuration:

copy running-config startup-config

6.5 Adding into Netcool

Once configuration is saved please add the site that you have installed into ism 4.

You will be asked for a username and password, these are still at the default:

Username: Password:

Once logged onto the ISM select appropriate customer profile

Created by VPN SupportPage 21

Page 22: Installation & Configuration Guide

Installation & Configuration Guide

Click on ICMP

To add ADSL site for ICMP monitoring click on Add

You will then be presented with a further pop-up window, set the values to the following:

Host to Test Enter the IP address of the box being pinged Packet Size (bytes) Size of the ICMP packet – default 32 Poll Interval (s) Interval between polls – default 120 (2 mins) Description Site name

Created by VPN SupportPage 22

Page 23: Installation & Configuration Guide

Installation & Configuration Guide

6.6 Adding into Infovista

In order to access the Infovista web portal, go to the following url:

You can use the following details to gain access:

Username: noc Password: nocuser

Once logged in you will be presented with the following screen:

The best way to prepare the file is:

Download the example text file (sample.txt).

Open the file and change the settings to match the new router.Be careful about interface names, these must be correct e.g. FastEthernet0/1

Save the txt file.

When the file is ready, in the portal, click the Browse button and find the tab-separated file, then click Upload.

You will then have to wait a minute or so (depending on the number of sites), for the script to return.

Next make sure router is SNMP configuration is done correctly on the router. IN this stage this stage infovista does a basic check of the router SNMP set-up, making sure that all the interfaces are named correctly, you will then be presented with a confirmation screen:

As you can see there are 3 return states:

(RED) This means that no SNMP information could be retrieved from the router, the first thing to check will be access lists, and then routing.(YELLOW) This means that SNMP is configured, but one of the interfaces isn’t named correctly, please remember to type in the full interface name e.g. FastEthernet0/1(GREEN) This means that SNMP access, and configuration is ok, and the box can be check and moved onto the next stage – this is the only type of box that can be checked.

Created by VPN SupportPage 23

Page 24: Installation & Configuration Guide

Installation & Configuration Guide

Once Green box is checked this will then start to populate the InfoVista database, please note, that this can take a long time and don’t close your browser. When completed, you will be presented with a screen:

Once again, there are 3 return states:

(RED) The database couldn’t be accessed.(YELLOW) The objects already exist in the database(GREEN) The new site and reports has been set-up and everything exited correctly.

6.7 Confirmation Email

Once all the above is completed send a email to & release Engineer.

Customer: <Customer Name> XYZSite: <Host Name> host-1Site Connection Type: ADSL / ADSL with ISDN Backup Username: <PPP chaphostname>host-1_xyz@ -connect.co.ukEquipment: <Router Make & Model> 837/1721WAN IP: ADSL - 1 / ISDN - Daate: 18/11/05  Partner Company: CC/TFM/IntactPartner Engineer: Mark  Time on Site: 11:00Time of Connection: 11:10Tests Completed: Yes/No 1. ADSL Site connectivityReachable from Tiscali PE: Yes/NoReachable from Head Office: Yes/NoCorrect IOS on CE: Yes/NoCorrect Config : Yes/NoUser able to login back in: Yes/No 2. ISDN Backup DSL disconnected, ISDN takes over: Yes/NoReachable from Tiscali PE: Yes/NoReachable fromHead Office: Yes/NoUSer able to log back in: Yes/NoDSL reconnected and traffic does back via DSL: Yes/NoISDN line drops after 60 seconds: Yes/No Faults Found: None

Created by VPN SupportPage 24

Page 25: Installation & Configuration Guide

Installation & Configuration Guide

Time of handover to Customer: 11:45Time of Customer Acceptance: 11:45Name of Customer Accepting: Steve, CCTime of Partner Release: 11:50 Monitoring Netcool: Yes/NOInfovista: Yes/NO

Installation Success/Failure: Success / Failure Notes:

Created by VPN SupportPage 25