Enterasys Networks Security Router X Peditiontm Users Manual UserGuide

2015-02-04

• X-Pedition™ Security Router XSR User's Guide
• Preface
  • Contents of the Guide
  • Conventions Used in This Guide
  • Getting Help
• Overview
• Managing the XSR
  • Utilizing the Command Line Interface
    • Connecting via the Console Port on XSR Series
      • Using the Console Port for Dial Backup on the XSR 1800 Series
      • Using the Console Port to Remotely Control the XSR
      • Connecting a Serial Interface to a Modem
      • Terminal Commands
    • Connecting via Telnet
    • Connecting via SSH
    • Accessing the Initial Prompt
    • Synchronizing the Clock
    • Managing the Session
    • Remote Auto Install
      • RAI Features and Requirements
      • RAI Requirements on the XSR
      • How RAI Components Work
    • CLI Editing Rules
    • Setting CLI Configuration Modes
      • User EXEC Mode
      • Privileged EXEC Mode
    • Global Configuration Mode
    • Exiting From the Current Mode
    • Mode Examples
    • Observing Command Syntax and Conventions
      • CLI Command Limits
    • Describing Ports and Interfaces
      • Supported Physical Interfaces
      • Supported Virtual Interfaces
      • Supported Ports
    • Numbering XSR Slots, Cards, and Ports
      • Setting Port Configuration Mode
    • Setting Interface Type and Numbering
      • Configuration Examples
    • Entering Commands that Control Tables
      • Adding Table Entries
      • Deleting Table Entries
      • Modifying Table Entries
      • Displaying Table Entries
    • Managing XSR Interfaces
      • Enabling an Interface
      • Disabling an Interface
      • Configuring an Interface
      • Displaying Interface Attributes
    • Managing Message Logs
      • Logging Commands
    • Performing Fault Management
      • Fault Report Commands
      • Capturing Fault Report Data
    • Using the Real-Time Clock
      • RTC/Network Clock Options
      • RTC Commands
    • Managing the System Configuration
    • Resetting the Configuration to Factory Default
      • Using the Default Button (XSR 1800/1200 Series Only)
    • Configuration Save Options
      • Using File System Commands
    • Bulk Configuration Management
      • Downloading the Configuration
      • Uploading the Configuration/Crash Report
      • Creating Alternate Configuration Files
    • Managing the Software Image
      • Creating Alternate Software Image Files
      • BootRom Upgrade Choices
      • Loading Software Images
      • Using EOS Fallback to Upgrade the Image
      • Downloading with FIPS Security
      • Software Image Commands
      • Configuration Change Hashing
    • Displaying System Status and Statistics
  • Memory Management
    • Creating Resources
  • Network Management through SNMP
    • SNMP Informs
    • Shaping Trap Traffic
    • Statistics
    • Alarm Management (Traps)
    • Network Monitoring via Service Level Agreement Agent
      • Measuring Performance Metrics
      • Configuration Examples
      • Using the SLA Agent in SNMP
    • Full Configuration Backup/Restore
      • Cabletron CTdownload MIB
      • Enterasys Configuration Management MIB
    • Software Image Download using NetSight
      • CLI Translator
    • Appending CLI Commands to Configuration Files via SNMP
  • Accessing the XSR Through the Web
  • Network Management Tools
    • NetSight Atlas Router Services Manager v2.0
    • Firmware Upgrade Procedures
      • Using the CLI for Downloads
      • Using SNMP for Downloads
    • Fault Reporting
    • Auto-discovery
• Managing LAN/WAN Interfaces
  • Overview of LAN Interfaces
  • LAN Features
  • Configuring the LAN
  • MIB Statistics
  • Overview of WAN Interfaces
  • WAN Features
  • Configuring the WAN
• Configuring T1/E1 & T3/E3 Interfaces
  • Overview
    • T1/E1 Functionality
    • T3/E3 Functionality
  • Features
    • T1/E1 Mode
    • T3 Mode
    • E3 Mode
    • T1/E1 Subsystem Configuration
    • T3/E3 Subsystem Configuration
    • T1 Drop & Insert One-to-One DS0 Bypassing
      • Drop and Insert Features
  • Configuring Channelized T1/E1 Interfaces
  • Configuring Un-channelized T3/E3 Interfaces
  • Troubleshooting T1/E1 & T3/E3 Links
    • T1/E1 & T3/E3 Physical Layer Troubleshooting
    • T1/E1 & T3/E3 Alarm Analysis
      • Receive Alarm Indication Signal (AIS - Blue Alarm)
      • Receive Remote Alarm Indication (RAI - Yellow Alarm)
      • Transmit Remote Alarm Indication (RAI - Yellow Alarm)
      • Transmit Sending Remote Alarm (Red Alarm)
      • Transmit Alarm Indication Signal (AIS - Blue Alarm)
    • T1/E1 & T3/E3 Error Events Analysis
      • Slip Seconds Counter Increasing
      • Framing Loss Seconds Increasing
      • Line Code Violations Increasing
    • Configuring the D&I NIM
• Configuring IP
  • Overview
  • General IP Features
    • ARP and Proxy ARP
    • Proxy DNS
    • BOOTP/DHCP Relay
    • Broadcast
      • Directed Broadcast
      • Local Broadcast
    • ICMP
    • TCP
    • UDP
    • Telnet
    • SSH
    • Trivial File Transfer Protocol (TFTP)
    • IP Interface
    • Secondary IP
      • Interface & Secondary IP
      • ARP & Secondary IP
      • ICMP & Secondary IP
      • Routing Table Manager & Secondary IP
      • OSPF & Secondary IP
      • RIP & Secondary IP
      • Unnumbered Interface & Secondary IP
      • NAT & Secondary IP
      • DHCP & Secondary IP
      • VPN & Secondary IP
      • VRRP & Secondary IP
      • PPPoE & Secondary IP
    • Maximum Transmission Unit (MTU)
    • Ping
    • Traceroute
  • IP Routing Protocols
    • RIPv1 and v2
    • Triggered-on-Demand RIP
      • How Triggered-on-Demand RIP Works
    • OSPF
      • LSA Type 3 and 5 Summarization
      • OSPF Database Overflow
      • OSPF Passive Interfaces
    • OSPF Troubleshooting
    • Null Interface
    • Route Preference
    • Static Routes
    • VLAN Routing
      • Forwarding VLAN, PPPoE over VLAN
      • VLAN Processing Over the XSR’s Ethernet Interfaces
      • VLAN Processing: VLAN-enabled Ethernet to Standard LAN Interfaces
      • VLAN Processing: VLAN-enabled Ethernet to WAN Interfaces
      • VLAN Processing: WAN Interface to a VLAN-enabled Ethernet Interface
      • QoS with VLAN
    • Policy Based Routing
      • Accessing the Global Routing Policy Table
      • Match Clauses
      • Set Clauses
      • PBR Cache
    • Default Network
    • Classless Inter-Domain Routing (CIDR)
    • Router ID
    • Real Time Protocol (RTP) Header Compression
    • Network Address Translation
      • Features
    • Virtual Router Redundancy Protocol
      • VRRP Definitions
      • How the VRRP Works
      • Different States of a VRRP Router
    • VRRP Features
      • Multiple Virtual IP Addresses per VR
      • Multiple VRs Per Router
      • Authentication
      • Load Balancing
      • ARP Process on a VRRP Router
      • Host ARP
      • Proxy ARP
      • Gratuitous ARP
      • Traffic Process on a VRRP Router
      • ICMP Ping
      • Interface Monitoring
      • Watch Group Monitoring
      • Physical Interface and Physical IP Address Change on a VRRP Router
    • Equal-Cost Multi-Path (ECMP)
      • Configuration Considerations
  • Configuring RIP Examples
  • Configuring Unnumbered IP Serial Interface Example
  • Configuring OSPF Example
  • Configuring NAT Examples
    • Basic One-to-One Static NAT
      • Configuring Static Translation
    • Dynamic Pool Configuration
      • Configuring Dynamic Pool Translation
    • Network Address and Port Translation
      • Configuring NAPT
      • Configuring NAPT
    • Multiple NAT Pools within an Interface
    • Static NAT within an Interface
    • NAT Port Forwarding
  • Configuring Policy Based Routing Example
  • Configuring VRRP Example
    • Router XSRa
    • Router XSRb
  • Configuring VLAN Examples
• Configuring the Border Gateway Protocol
  • Features
  • Overview
    • Describing BGP Messages
      • Open
      • Update
      • Keepalive
      • Notification
    • Defining BGP Path Attributes
      • AS Path
      • Origin
      • Next Hop
      • Local Preference
      • Weight
      • Atomic Aggregate
      • Aggregator
      • Multi-Exit Discriminator
      • Community
    • BGP Path Selection Process
    • BGP Routing Policy
      • Access Control Lists
      • Filter Lists
      • Community Lists
      • Route Maps
      • Regular Expressions
      • Regular Expression Characters
      • Regular Expression Examples
      • Peer Groups
    • Initial BGP Configuration
    • Adding BGP Neighbors
    • Resetting BGP Connections
    • Synchronization
    • Address Aggregation
    • Route Flap Dampening
      • Recommendations for Route Flap Dampening
    • Capability Advertisement
    • Route Refresh
    • Scaling BGP
      • Route Reflectors
      • Confederations
    • Displaying System and Network Statistics
  • Configuring BGP Route Maps
    • Configuring BGP Neighbors
    • BGP Path Filtering by Neighbor Example
    • BGP Aggregate Route Examples
    • Configuring BGP Confederations
    • TCP MD5 Authentication for BGP Example
  • Configuring BGP Peer Groups
    • IBGP Peer Group Example
    • EBGP Peer Group Example
    • BGP Community with Route Maps Examples
• Configuring PIM-SM and IGMP
  • Features
    • Differences with Industry-Standard Approach
  • IP Multicast Overview
    • Defining Multicast Group Addressing
    • Outlining IGMP Versions
    • Comparing Multicast Distribution Trees
    • Forwarding Multicast Traffic
  • Describing the XSR’s IP Multicast Features
    • Group Membership Actions
    • Sending and Receiving Queries and Reports
      • Sending a Query
      • Receiving a Query
      • Receiving a Report
      • Source-Specific Forwarding Rules
    • Interoperating with Older IGMP Versions
      • Query Version Distinctions
      • Behavior of Group Members Among Older Version Queriers
      • Behavior of Group Members Among Older Version Group Members
      • Behavior of Multicast Routers Among Older Version Queriers
      • Behavior of Multicast Routers Among Older Version Group Members
  • Describing the XSR’s PIM-SM v2 Features
    • Phase 1: Building a Shared Tree
    • Phase 2: Building Shortest Path Tree Between Sender & RP
    • Phase 3: Building Shortest Path Tree Between Sender & Receiver
    • Neighbor Discovery and DR Election
    • PIM Register Message
    • PIM Join/Prune Message
    • Bootstrap & Rendezvous Point
    • Assert Processing
    • Source-Specific Multicast
    • PIM SM over Frame Relay
  • PIM Configuration Examples
• Configuring PPP
  • Overview
  • PPP Features
    • Link Control Protocol (LCP)
    • Network Control Protocol (NCP)
    • Authentication
      • Password Authentication Protocol (PAP)
      • Challenge Handshake Authentication Protocol (CHAP)
      • Microsoft Challenge Handshake Protocol (MS-CHAP)
    • Link Quality Monitoring (LQM)
    • Multilink PPP (MLPPP)
    • Multi-Class MLPPP
      • MLPPP Packet Fragmentation and Serialization Transmission Latency
      • Fragment Interleaving Over the Link
      • Multilink Head Format Negotiation
      • Events and Alarms
    • IP Control Protocol (IPCP)
      • IP Address Assignment
    • PPP Bandwidth Allocation/Control Protocols (BAP/BAPC)
  • Configuring PPP with a Dialed Backup Line
  • Configuring a Synchronous Serial Interface
  • Configuring a Dialed Backup Line
    • Configuring the Dialer Interface
    • Configuring the Physical Interface for the Dialer Interface
    • Configuring the Interface as the Backup Dialer Interface
  • Configuring MLPPP on a Multilink/Dialer interface
    • Multilink Example
    • Dialer Example
  • Configuring BAP
    • Dual XSRs: One Router Using DoD with Call Request
      • XSR1 Configuration
      • XSR2 Configuration
    • Dual XSRs: BAP Using Call/Callback Request
      • XSR1 Configuration
      • XSR2 Configuration
• Configuring Frame Relay
  • Overview
    • Virtual Circuits
    • DLCIs
    • DTEs
    • DCEs
  • Frame Relay Features
    • Multi-Protocol Encapsulation
    • Address Resolution
    • Dynamic Resolution Using Inverse ARP
  • Controlling Congestion in Frame Relay Networks
    • Rate Enforcement (CIR) - Generic Traffic Shaping
    • Discard Eligibility (DE) Bit
    • Forward Explicit Congestion Notification (FECN)
    • Backward Explicit Congestion Notification (BECN)
  • Link Management Information (LMI)
  • Sub-interfaces
  • FRF.12 Fragmentation
    • End-to-End Fragmentation
    • User Configuration Commands
      • Map-Class Configuration
      • Show Running Configuration
      • Displaying Statistics
    • Reports and Alarms
    • Clear Statistics
  • Interconnecting via Frame Relay Network
  • Configuring Frame Relay
    • Multi-point to Point-to-Point Example
• Configuring Dialer Services
  • Overview of Dial Services
    • Dial Services Features
  • Asynchronous and Synchronous Support
    • AT Commands on Asynchronous Ports
    • V.25bis over Synchronous Interfaces
    • DTR Dialing for Synchronous Interfaces
    • Time of Day feature
    • Typical Use for Dial Services
    • Ethernet Backup
  • Implementing Dial Services
    • Dialer Profiles
    • Dialer Interface
    • Dialer Strings
    • Dialer Pool
    • Addressing Dialer Resources
    • Configuring Encapsulation
    • ISDN Callback
    • Configuring the Dialer Interface
      • Creating and Configuring the Dialer Interface
      • Configuring the Map Class
      • Configuring the Physical Interface for the Dialer Interface
    • Sample Dialer Configuration
    • Configuring ISDN Callback
      • Point-to-Point with Matched Calling/Called Numbers
      • Point-to-Point with Different Calling/Called Numbers
      • Point-to-Multipoint with One Neighbor
      • Point-to-Multipoint with Multiple Neighbors
  • Overview of Dial Backup
    • Dial Backup Features
  • Sequence of Backup Events
  • Link Failure Backup Example
  • Configuring a Dialed Backup Line
    • Configuring the Dialer Interface
    • Configuring the Physical Interface for the Dialer Interface
    • Configuring Interface as the Backup Dialer Interface
    • Sample Configuration
  • Overview of Dial on Demand/Bandwidth on Demand
  • Dialer Interface Spoofing
  • Dialer Watch
    • Dialer Watch Behavior
    • Caveat
  • Answering Incoming ISDN Calls
    • Incoming Call Mapping Example
      • Node A (Calling Node) Configuration
      • Node B (Called Node) Configuration
      • Node D (Calling Node) Configuration
  • Configuring DoD/BoD
    • PPP Point-to-Multipoint Configuration
      • Node A (Calling Node) Configuration
      • Node B (Called Node) Configuration
    • PPP Multipoint-to-Multipoint Configuration
      • Node A Configuration
      • Node B Configuration
    • PPP Point-to-Point Configurations
      • Dial-in Routing for Dial on Demand Example
      • Dial-out Routing for Dial on Demand Example
    • PPP Point-to-Multipoint Configurations
      • Dial-out Router Example
      • Dial-in Router Example
    • MLPPP Point-to-Multipoint Configuration
      • Node A (Calling Node) Configuration
      • Node B (Called Node) Configuration
    • MLPPP Point-to-Point Configurations
      • Dial-in Router Example
      • Dial-out Router Example
    • MLPPP Point-to-Multipoint Configurations
      • Dial-out Router Example
      • Dial-in Router Example
    • MLPPP Multipoint-to-Multipoint Configuration
      • Node A Configuration
      • Node B Configuration
  • Switched PPP Multilink Configuration
    • Bandwidth-on-Demand
      • Node A (Calling Node) Configuration
      • Node C (Called Node) Configuration
  • Backup Configuration
    • Backup Using ISDN
      • Node A (Backed-up Node) Configuration
      • Node C (Called Node) Configuration
    • Configuration for Backup with MLPPP Bundle
      • Node A (Backed-up Node) Configuration
      • Node C (Called Node) Configuration
    • Configuration for Ethernet Failover
    • Configuration for Frame Relay Encapsulation
• Configuring Integrated Services Digital Network
  • ISDN Features
  • Understanding ISDN
    • Trace Decoding
    • Q921 Decoding
    • Q931 Decoding
    • Decoded IEs
    • BRI NI-1, DMS100 & 5ESS SPID Registration
    • Terminal Endpoint Identifier (TEI) Management Procedures
  • ISDN Configuration
  • More Configuration Examples
  • ISDN (ITU Standard Q.931) Call Status Cause Codes
• Configuring Quality of Service
  • Overview
  • Mechanisms Providing QoS
    • Traffic Classification
      • Describing the Class Map
      • Describing the Policy Map
    • Queuing and Services
      • Describing Class-Based Weight Fair Queuing
      • Configuring CBWFQ
      • Measuring Bandwidth Utilization
      • Describing Priority Queues
      • Configuring Priority Queues
    • Describing Traffic Policing
      • Configuring Traffic Policing
    • Class-based Traffic Shaping
    • Traffic Shaping per Policy-Map
    • Differences Between Traffic Policing and Traffic Shaping
    • Traffic Shaping and Queue Limit
    • Congestion Control & Avoidance
      • Describing Queue Size Control (Drop Tail)
      • Describing Random Early Detection
      • Describing Weighted Random Early Detection
    • Configuration per Interface
    • Suggestions for Using QoS on the XSR
  • QoS and Link Fragmentation and Interleaving (LFI)
    • Configuring QoS with MLPPP Multi-Class
    • Configuring QoS with FRF.12
  • QoS with VLAN
    • Traffic Classification
    • Describing VLAN QoS Packet Flow
      • VLAN Packet with Priority Routed out a Fast/GigabitEthernet Interface
      • VLAN Packet with Priority Routed out a Serial Interface
      • Non-VLAN IP Packet Routed Out a Fast/GigabitEthernet Interface
    • QoS with VLAN Configuration Process
  • QoS on Input
  • QoS on VPN
    • QoS over VPN Features
    • Configuring QoS on a Physical Interface
    • Configuring QoS on a Virtual Tunnel Interface
      • QoS on a Virtual Interface Example
    • QoS and VPN Interaction
      • Configuring the Shaper on the VPN Interface
  • QoS Policy Configuration Examples
    • Simple QoS on Physical Interface Policy
    • QoS for Frame Relay Policy
    • QoS with MLPPP Multi-Class Policy
    • QoS with FRF.12 Policy
    • QoS with VLAN Policy
    • Input and Output QoS Policy
    • Input QoS on Ingress to the Diffserv Domain Policy
• Configuring ADSL
  • Overview
  • Features
    • PDU Encapsulation Choices
      • PPP over ATM
      • PPP over Ethernet over ATM (Routed)
      • Routed IP over ATM
    • ADSL Limitations
    • ADSL Hardware
      • NIM Card
      • ADSL on the Motherboard
      • DSP Firmware
    • ADSL Data Framing
    • ATM Support
      • Virtual Circuits
      • OAM Cells
      • Performance Monitoring
      • Class of Service
    • DSLAM Compatibility
    • Access Concentrator Restrictions
    • Inverse ARP
    • QoS
    • SNMP
  • Configuration Examples
    • PPPoE
    • PPPoA
    • IPoA
• Configuring the Virtual Private Network
  • VPN Overview
    • Internet Security Issues
    • How a Virtual Private Network Works
  • Ensuring VPN Security with IPSec/IKE/GRE
    • GRE over IPSec
    • Defining VPN Encryption
  • Describing Public-Key Infrastructure (PKI)
    • Digital Signatures
    • Certificates
    • Machine Certificates for the XSR
    • CA Hierarchies
    • Certificate Chains
    • RA Mode
    • Pending Mode
    • Enroll Password
    • CRL Retrieval
    • Renewing and Revoking Certificates
  • DF Bit Functionality
  • VPN Applications
    • Site-to-Site Networks
    • Site-to-Central-Site Networks
      • NAT Traversal
      • Client Mode
      • Network Extension Mode (NEM)
    • Remote Access Networks
    • Using OSPF Over a VPN Network
      • OSPF Commands
      • Configuring OSPF Over Site-to-Central Site in Client Mode
      • Configuring OSPF over Site-to-Central Site in Network Extension Mode
      • Server
      • Client
      • Configuring OSPF with Fail Over (Redundancy)
      • Server 1
      • Server 2
      • Client
      • Limitations
  • XSR VPN Features
  • VPN Configuration Overview
    • Master Encryption Key Generation
    • ACL Configuration Rules
      • Configuring ACLs
    • Selecting Policies: IKE/IPSec Transform-Sets
      • Security Policy Considerations
      • Configuring Policy
    • Creating Crypto Maps
      • Configuring Crypto Maps
    • Authentication, Authorization and Accounting Configuration
      • AAA Commands
      • Configuring AAA
    • PKI Configuration Options
      • Configuring PKI
    • PKI Certificate Enrollment Example
    • Interface VPN Options
      • VPN Interface Sub-Commands
  • Configuring a Simple VPN Site-to-Site Application
  • Configuring the VPN Using EZ-IPSec
    • EZ-IPSec Configuration
  • Configuration Examples
    • XSR with VPN - Central Gateway
    • GRE Tunnel for OSPF
      • Tunnel A: XSR-3250 VPN GRE Site-to-Site Tunnel
      • Tunnel B: XSR-1805 VPN GRE Site-to-Site Tunnel
    • XSR/Cisco Site-to-Site Example
      • Cisco Configuration
      • XSR Configuration
  • Interoperability Profile for the XSR
    • Scenario 1: Gateway-to-Gateway with Pre-Shared Secrets
    • Scenario 2: Gateway-to-Gateway with Certificates
• Configuring DHCP
  • Overview of DHCP
  • Features
    • DHCP Server Standards
  • How DHCP Works
  • DHCP Services
    • Persistent Storage of Network Parameters for Clients
    • Temporary or Permanent Network Address Allocation
      • Lease
    • Assigned Network Configuration Values to Clients: Options
    • Provisioning Differentiated Network Values by Client Class
    • BOOTP Legacy Support
    • Nested Scopes: IP Pool Subsets
    • Scope Caveat
    • Manual Bindings
  • DHCP Client Services
    • Router Option
    • Parameter Request List Option
    • DHCP Client Interaction
      • Secondary Address Caveats
      • Interaction with Remote Auto Install (RAI)
    • DHCP Client Timeouts
  • DHCP CLI Commands
  • DHCP Set Up Overview
    • Configuring DHCP Address Pools
    • Configuring DHCP - Network Configuration Parameters
  • Configuration Steps
    • Create an IP Local Client Pool
    • Create a Corresponding DHCP Pool
    • Configure DHCP Network Parameters
    • Enable the DHCP Server
    • Optional: Set Up a DHCP Nested Scope
    • Optional: Configure a DHCP Manual Binding
  • DHCP Server Configuration Examples
    • Pool with Hybrid Servers Example
    • Manual Binding Example
    • Manual Binding with Class Example
    • BOOTP Client Support Example
    • DHCP Option Examples
• Configuring Security on the XSR
  • Features
    • Access Control Lists
      • ACL Violations Alarm Example
    • Packet Filtering
    • LANd Attack
    • Smurf Attack
    • Fraggle Attack
    • IP Packet with Multicast/Broadcast Source Address
    • Spoofed Address Check
    • SYN Flood Attack Mitigation
    • Fragmented and Large ICMP Packets
      • Fragmented ICMP Traffic
      • Large ICMP Packets
      • Ping of Death Attack
    • Spurious State Transition
  • General Security Precautions
  • AAA Services
    • Connecting Remotely via SSH or Telnet with AAA Service
  • Firewall Feature Set Overview
    • Reasons for Installing a Firewall
    • Types of Firewalls
      • ACL and Packet Filter Firewalls
      • ALG and Proxy Firewalls
      • Stateful Inspection Firewalls
  • XSR Firewall Feature Set Functionality
    • Stateful Firewall Inspection (SFI)
    • Filtering non-TCP/UDP Packets
    • Application Level Commands
    • Application Level Gateway
    • On Board URL Filtering
    • Denial of Service (DoS) Attack Protection
    • Alarm Logging
    • Alarms
    • Authentication
    • Firewall and NAT
    • Firewall and VPN
    • ACLs and Firewall
    • Dynamic Reconfiguration
  • Firewall CLI Commands
  • Firewall Limitations
  • Pre-configuring the Firewall
  • Steps to Configure the Firewall
  • Configuration Examples
    • XSR with Firewall
    • XSR with Firewall, PPPoE and DHCP
    • XSR with Firewall and VPN
    • Firewall Configuration for VRRP
    • Firewall Configuration for RADIUS Authentication and Accounting
    • Configuring Simple Security
    • RPC Policy Configuration
• Alarms/Events, System Limits, and Standard ASCII Table
  • Recommended System Limits
  • System Alarms and Events
  • Firewall and NAT Alarms and Reports
  • Standard ASCII Character Table
• XSR SNMP Proprietary and Associated Standard MIBs
  • Service Level Reporting MIB Tables
    • etsysSrvcLvlMetricTable
    • etsysSrvcLvlOwnerTable
    • etsysSrvcLvlHistoryTable
    • etsysSrvcLvlNetMeasureTable
    • etsysSrvcLvlAggrMeasureTable
  • BGP v4 MIB Tables
    • General Variables Table
    • BGP v4 Peer Table
    • BGP-4 Received Path Attribute Table
    • BGP-4 Traps
  • Firewall MIB Tables
    • Global Interface Operations
    • Monitoring Objects
      • Policy Rule Table Totals Counters
      • Policy Rule True Table
      • Session Totals Counters
      • Session Totals Table
      • IP Session Counters
      • IP Session Table
      • Authenticated Address Counters
      • Authenticated Addresses Table
      • DOS Attacks Blocked Counters
      • DOS Attacks Blocked Table
  • VPN MIB Tables
    • etsysVpnIkePeer Table
    • etsysVpnIkePeerProposals Table
    • etsysVpnIkeProposal Table
    • etsysVpnIpsecPolicy Table
    • etsysVpnIntfPolicy Table
    • etsysVpnIpsecPolicyRule Table
    • etsysVpnIpsecPolProposals Table
    • etsysVpnIpsecProposal Table
    • etsysVpnIpsecPropTransforms Table
    • etsysVpnAhTransform Table
    • etsysVpnEspTransform Table
    • etsysVpnIpcompTransform Table
  • ipCidrRouteTable for Static Routes
  • Host Resources MIB Objects
  • Enterasys Configuration Management MIB
  • Enterasys Configuration Change MIB
  • Enterasys SNMP Persistence MIB
  • Enterasys Syslog Client MIB