Firepro Router Tech .pdf 3m531s
This document was ed by and they confirmed that they have the permission to share it. If you are author or own the copyright of this book, please report to us by using this report form. Report 3i3n4
Overview 26281t
& View Firepro Router Tech .pdf as PDF for free.
More details 6y5l6z
- Words: 1,145
- Pages: 14
FPBR 1000 Note 1.1
1. Ip Addressing 1.1 CLI 1.1.1 How to assign ip address on an interface [@Firepro] > ip address [@Firepro] /ip address> print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST
<
> <
> INTERFACE
[@Firepro] /ip address> [@Firepro] /ip address> add address=192.168.1.1/24 interface=ether? Interface::= ether1 | ether2 | ether3 | ether4 | ether5
<
>
[@Firepro] /ip address> add address=192.168.1.1/24 interface=ether1 (To assign an ip address always put the CIDR/Class of IP Address like “/24,/16,/28,/8”) [@Firepro] /ip address> pr Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 192.168.1.1/24 192.168.1.0 192.168.1.255 ether1 [@Firepro] /ip address> 1.1.2 How to Change an IP Address on an Interface [@Firepro] > ip address [@Firepro] /ip address> pr Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 192.168.1.1/24 192.168.1.0 192.168.1.255 ether1 [@Firepro] /ip address> set 0 address=10.0.0.1/8 network=10.0.0.0 broadcast=10.255.255.255 [@Firepro] /ip address> pr Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 10.0.0.1/8 10.0.0.0 10.255.255.255 ether1 [@Firepro] /ip address> 1.2 GUI For using Firepro Router in GUI mode, winbox tool is required. You can the winbox configuration tool from any router webpage.
After ing Winbox Console tool, run the winbox tool and click on “…” button to see the mac-address and IP address of connected router. Enter the MAC-address or IP address in “Connect to” provide the credentials. And click connects.
Firepro TAC Team
Note: To open a firepro router via IP through winbox console. It is mandatory that the PC should be in the same network.
After a successful connection, Click on “IP Address “
Click on +, put the required ip address in Address and Select Interface. The click “applyOK”
Firepro TAC Team
1.2.1 To change the IP address Dbl-click on the selected IP Address, change the address then disable the network and broadcast by clicking arrow, in last clik applyok.
2. IP Route 2.1CLI To configure routes in Firepro Router please follow the below figure.
Here two routes 1# and 2# are automatically created whenever an ip address is assigned. We called these routes as Active dynamically connected routes. The command for adding routes are as follow. “add dst-address=y.y.y.y/y gateway=x.x.x.x” dst-address ---- Destination address should be like 71.0.0.0/8,10.0.0.0/8,0.0.0.0/0 Gateway --- next hop address
Firepro TAC Team
2.2 GUI To configure IP routes via GUI mode, click on IPRoutes.
Click on +, Add “Destination and gateway”, then click apply ok.
You can add required specific routes too in the same fashion.
3. Vlan-Interface 3.1 CLI For creating Vlan-Interface on firepro router, please go through the below commands. First decide on which interface you want to make a Vlan interface. In the given example we use ether1.
When we create a vlan interface through CLI then by default it is disabled. So for enabling it first check its Serial ID mentioned under #. And follow the command “enable <#ID>”. In this way you can configure, as many interface you required.
Firepro TAC Team
3.2GUI For creating Vlan interface using GUI mode, click on “interface then select + and select VLAN.
In the new interface window, add name, VLAN ID, select Interface. Then click apply and OK.
Note: by default the encapsulation ed by firepro for VLAN Interface is dot1q
Firepro TAC Team
4. Tunnel Tunnel
10.10.10.2/30
Firepro 11.11.11.1/30
CISCO 11.11.11.2/30
10.10.10.1/30
4.1CLI
MAIPU Cisco Configure the tunnel interface on Cisco router as mentioned below
Firepro For creating Tunnel on Firepro please follow the steps below.
Local Address --- Tunnel Source Address Remote Address --- Tunnel Destination Address IP Address--- Tunnel IP Address 5. Nat 5.1SNat SNAT or Source nat means to Masquerade the WAN ip/Interface with the LAN IP/Pool/Interface. For e.g. see the below diagram.
PC 1 FE0/1-(10.10.10.2/30) Gateway-10.10.10.1
Internet/WAN Cloud
FE0/2-(192.168.1.1/24)
192.168.1.2/24
FPBR 1000 PC 2 Firepro TAC Team
192.168.1.3/24
Cases:-SNat Wan ip--LAN ip (Src-Nat) -SNat Wan ip—LAN pool (Src-Nat) -Masquerade WAN Interface (Masquerading) Note: Only applicable, if the WAN ip is already Nated. Solution:Case 1:- SNat Wan IP – LAN IP (Src-NAT)
Case 2:- Nat Wan IP – Whole LAN Pool (Src-NAT)
Firepro TAC Team
Case 3:- Masquerading WAN Interface
5.2DNAT DNAT or Destination NAT means to transparently changing the destination IP address of an en-route packet. As per below diagram
FE0/1-(10.10.10.2/30) Gateway-10.10.10.1
Internet/WAN Cloud
192.168.1.2/24
FE0/2-(192.168.1.1/24)
FPBR 1000
Cases:-DNAT WAN IP – LAN Server -PAT port forwarding of WAN IP – one or more servers (DMZ) Solution:Case1: DNAT WAN IP – LAN IP
Firepro TAC Team
PC1
Case2: PAT – one or more servers (DMZ) FE0/1-(10.10.10.2/30) Gateway-10.10.10.1
Internet/WAN Cloud
192.168.1.3/24
FE0/2-(192.168.1.1/24)
HTTP 192.168.1.2/24
FPBR 1000
FTP
6. Queuing (Rate Limit) On an Interface. 6.1CLI For adding queuing on an interface, please follow the procedure as below.
Interface --- Interface on which you want to restrict the traffic Limit at ----- X/X(/) limit. Max-limit- -- X/X (/) limit Queue--- Queue type (default, small, ethernet, wireless—pfifo, sfq)
Firepro TAC Team
6.2GUI Click on “Queues”
7. Troubleshooting Guide 7.1Ping Ping option is available in tools option in GUI. Also you can use the ping tool via cli as below.
Firepro TAC Team
7.2Traceroute Traceroute option is available in tools menu. For terminal use the command below.
7.3 ARP Address You can check the ARP entries in IP ARP menu through winbox console. Or via terminal follow the command below.
7.4 Monitoring interface/Changing Duplex/Speed You can check or change the speed and duplex of any interface in cli by the commands as mentioned below.
Firepro TAC Team
7.5 Nat connections/Translation For checking the Nat Translations/Connections you go with the following commands
7.6 Ip address This command shows the IP address on interfaces
7.7 Ip route This command show how to check the ip routes status on Firepro Router
7.8 SNMP On firepro router, by default SNMP is disabled, So these commands enable the SNMP and also to add a new community on firepro router.
7.9 Resources If you want to check the resources of firepro router like RAM, Processor, Flash etc. Then follow the command below.
Firepro TAC Team
7.10 Logs For checking logs use the command mentioned below
7.11 Telnet You can telnet any reachable device simply by using this command.
7.12 Torch (Monitoring traffic on via CLI) You can analyze the traffic through CLI mode on any interface with this command.
8. Miscellaneous Commands Add Remove Set Print Disable Enable ? .. / ctrl+c or q
---- for adding configuration ---- for removing configuration ----for changing configuration ---- for printing configuration ----disabling configuration/interface ---- Enable configuration/interface ----- hint commands ----- changing to parent directory ----- changing root directory (global mode) -----breaking any running command
Note: All the commands in firepro router are case sensitive. So kindly use the appropriate command to do the configuration.
Firepro TAC Team
1. Ip Addressing 1.1 CLI 1.1.1 How to assign ip address on an interface [@Firepro] > ip address [@Firepro] /ip address> print Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST
<
[@Firepro] /ip address> [@Firepro] /ip address> add address=192.168.1.1/24 interface=ether? Interface::= ether1 | ether2 | ether3 | ether4 | ether5
<
[@Firepro] /ip address> add address=192.168.1.1/24 interface=ether1 (To assign an ip address always put the CIDR/Class of IP Address like “/24,/16,/28,/8”) [@Firepro] /ip address> pr Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 192.168.1.1/24 192.168.1.0 192.168.1.255 ether1 [@Firepro] /ip address> 1.1.2 How to Change an IP Address on an Interface [@Firepro] > ip address [@Firepro] /ip address> pr Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 192.168.1.1/24 192.168.1.0 192.168.1.255 ether1 [@Firepro] /ip address> set 0 address=10.0.0.1/8 network=10.0.0.0 broadcast=10.255.255.255 [@Firepro] /ip address> pr Flags: X - disabled, I - invalid, D - dynamic # ADDRESS NETWORK BROADCAST INTERFACE 0 10.0.0.1/8 10.0.0.0 10.255.255.255 ether1 [@Firepro] /ip address> 1.2 GUI For using Firepro Router in GUI mode, winbox tool is required. You can the winbox configuration tool from any router webpage.
After ing Winbox Console tool, run the winbox tool and click on “…” button to see the mac-address and IP address of connected router. Enter the MAC-address or IP address in “Connect to” provide the credentials. And click connects.
Firepro TAC Team
Note: To open a firepro router via IP through winbox console. It is mandatory that the PC should be in the same network.
After a successful connection, Click on “IP Address “
Click on +, put the required ip address in Address and Select Interface. The click “applyOK”
Firepro TAC Team
1.2.1 To change the IP address Dbl-click on the selected IP Address, change the address then disable the network and broadcast by clicking arrow, in last clik applyok.
2. IP Route 2.1CLI To configure routes in Firepro Router please follow the below figure.
Here two routes 1# and 2# are automatically created whenever an ip address is assigned. We called these routes as Active dynamically connected routes. The command for adding routes are as follow. “add dst-address=y.y.y.y/y gateway=x.x.x.x” dst-address ---- Destination address should be like 71.0.0.0/8,10.0.0.0/8,0.0.0.0/0 Gateway --- next hop address
Firepro TAC Team
2.2 GUI To configure IP routes via GUI mode, click on IPRoutes.
Click on +, Add “Destination and gateway”, then click apply ok.
You can add required specific routes too in the same fashion.
3. Vlan-Interface 3.1 CLI For creating Vlan-Interface on firepro router, please go through the below commands. First decide on which interface you want to make a Vlan interface. In the given example we use ether1.
When we create a vlan interface through CLI then by default it is disabled. So for enabling it first check its Serial ID mentioned under #. And follow the command “enable <#ID>”. In this way you can configure, as many interface you required.
Firepro TAC Team
3.2GUI For creating Vlan interface using GUI mode, click on “interface then select + and select VLAN.
In the new interface window, add name, VLAN ID, select Interface. Then click apply and OK.
Note: by default the encapsulation ed by firepro for VLAN Interface is dot1q
Firepro TAC Team
4. Tunnel Tunnel
10.10.10.2/30
Firepro 11.11.11.1/30
CISCO 11.11.11.2/30
10.10.10.1/30
4.1CLI
MAIPU Cisco Configure the tunnel interface on Cisco router as mentioned below
Firepro For creating Tunnel on Firepro please follow the steps below.
Local Address --- Tunnel Source Address Remote Address --- Tunnel Destination Address IP Address--- Tunnel IP Address 5. Nat 5.1SNat SNAT or Source nat means to Masquerade the WAN ip/Interface with the LAN IP/Pool/Interface. For e.g. see the below diagram.
PC 1 FE0/1-(10.10.10.2/30) Gateway-10.10.10.1
Internet/WAN Cloud
FE0/2-(192.168.1.1/24)
192.168.1.2/24
FPBR 1000 PC 2 Firepro TAC Team
192.168.1.3/24
Cases:-SNat Wan ip--LAN ip (Src-Nat) -SNat Wan ip—LAN pool (Src-Nat) -Masquerade WAN Interface (Masquerading) Note: Only applicable, if the WAN ip is already Nated. Solution:Case 1:- SNat Wan IP – LAN IP (Src-NAT)
Case 2:- Nat Wan IP – Whole LAN Pool (Src-NAT)
Firepro TAC Team
Case 3:- Masquerading WAN Interface
5.2DNAT DNAT or Destination NAT means to transparently changing the destination IP address of an en-route packet. As per below diagram
FE0/1-(10.10.10.2/30) Gateway-10.10.10.1
Internet/WAN Cloud
192.168.1.2/24
FE0/2-(192.168.1.1/24)
FPBR 1000
Cases:-DNAT WAN IP – LAN Server -PAT port forwarding of WAN IP – one or more servers (DMZ) Solution:Case1: DNAT WAN IP – LAN IP
Firepro TAC Team
PC1
Case2: PAT – one or more servers (DMZ) FE0/1-(10.10.10.2/30) Gateway-10.10.10.1
Internet/WAN Cloud
192.168.1.3/24
FE0/2-(192.168.1.1/24)
HTTP 192.168.1.2/24
FPBR 1000
FTP
6. Queuing (Rate Limit) On an Interface. 6.1CLI For adding queuing on an interface, please follow the procedure as below.
Interface --- Interface on which you want to restrict the traffic Limit at ----- X/X(/) limit. Max-limit- -- X/X (/) limit Queue--- Queue type (default, small, ethernet, wireless—pfifo, sfq)
Firepro TAC Team
6.2GUI Click on “Queues”
7. Troubleshooting Guide 7.1Ping Ping option is available in tools option in GUI. Also you can use the ping tool via cli as below.
Firepro TAC Team
7.2Traceroute Traceroute option is available in tools menu. For terminal use the command below.
7.3 ARP Address You can check the ARP entries in IP ARP menu through winbox console. Or via terminal follow the command below.
7.4 Monitoring interface/Changing Duplex/Speed You can check or change the speed and duplex of any interface in cli by the commands as mentioned below.
Firepro TAC Team
7.5 Nat connections/Translation For checking the Nat Translations/Connections you go with the following commands
7.6 Ip address This command shows the IP address on interfaces
7.7 Ip route This command show how to check the ip routes status on Firepro Router
7.8 SNMP On firepro router, by default SNMP is disabled, So these commands enable the SNMP and also to add a new community on firepro router.
7.9 Resources If you want to check the resources of firepro router like RAM, Processor, Flash etc. Then follow the command below.
Firepro TAC Team
7.10 Logs For checking logs use the command mentioned below
7.11 Telnet You can telnet any reachable device simply by using this command.
7.12 Torch (Monitoring traffic on via CLI) You can analyze the traffic through CLI mode on any interface with this command.
8. Miscellaneous Commands Add Remove Set Print Disable Enable ? .. / ctrl+c or q
---- for adding configuration ---- for removing configuration ----for changing configuration ---- for printing configuration ----disabling configuration/interface ---- Enable configuration/interface ----- hint commands ----- changing to parent directory ----- changing root directory (global mode) -----breaking any running command
Note: All the commands in firepro router are case sensitive. So kindly use the appropriate command to do the configuration.
Firepro TAC Team
Related Documents 3h463d
Firepro Router Tech .pdf 3m531s
December 2019 54
Router 256d5b
April 2022 0
Router 256d5b
November 2019 73
Router Wes610n_guide_ipland 3c2w1w
November 2019 45
Router Adalah i5n3w
November 2019 47
Neo Router 3h3g5
July 2022 0More Documents from "Raj" 3w3t6
Immunization Schedule In India 2017 (latest !!) 6x592z
November 2019 69
3par - Dumps Q - Sample Questions 3o1d2d
November 2019 64
Magic Quadrant For Client Management Tools 3q3j2l
November 2019 134
Firepro Router Tech .pdf 3m531s
December 2019 54
Alcohol Related Deaths In India 133i38
August 2021 0