Cisco Systems Router 1800 Series User Manual

CH A P T E R
 
11-1
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
11
Additional Configuration Options
This part of the software configuration guide describes additional configuration options and 
troubleshooting tips for the Cisco
 1800 series integrated services fixed configuration routers 
(Cisco
 1801, Cisco 1802, Cisco 1803, Cisco 1811, and Cisco 1812).
The configuration options described in this part include:
 Chapter 12, “Configuring Security...

 
11-2
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
Chapter 11      Additional Configuration Options
   

CH A P T E R
 
12-1
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
12
Configuring Security Features
This chapter gives an overview of authentication, authorization, and accounting (AAA), the primary 
Cisco framework for implementing selected security features that can be configured on the Cisco
 1800 
integrated services fixed-configuration routers.
NoteIndividual router models may not support every feature described throughout this guide. Features not...

 
12-2
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
Chapter 12      Configuring Security Features
  Configuring AutoSecure
For information about configuring AAA services and supported security protocols, see the following 
sections of the
 Cisco IOS Security Configuration Guide:
 Configuring Authentication
 Configuring Authorization
 Configuring Accounting
 Configuring RADIUS
 Configuring TACACS+
 Configuring Kerberos
Configuring AutoSecure
The...

 
12-3
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
Chapter 12      Configuring Security Features
  Configuring a CBAC Firewall
Access Groups
A sequence of access list definitions bound together with a common name or number is called an access 
group. An access group is enabled for an interface during interface configuration with the following 
command:
ip access-group number | name [in | out]
where in | out refers to the direction of travel of the packets...

 
12-4
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
Chapter 12      Configuring Security Features
  Configuring Cisco IOS Firewall IDS
Configuring Cisco IOS Firewall IDS
Cisco IOS Firewall Intrusion Detection System (IDS) technology enhances perimeter firewall protection 
by taking appropriate action on packets and flows that violate the security policy or represent malicious 
network activity.
Cisco IOS Firewall IDS identifies 59 of the most common...

CH A P T E R
 
13-1
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
13
Configuring Dial Backup and Remote 
Management
The Cisco 1800 integrated services fixed-configuration routers support dial-in (for remote management) 
and dial-out (for dial backup) capabilities. By allowing you to configure a backup modem line 
connection, the Cisco
 1800 integrated services fixed-configuration routers provide protection against 
WAN downtime. Dial backup is inactive by...

 
13-2
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
Chapter 13      Configuring Dial Backup and Remote Management
  Dial Backup Feature Activation Methods
NoteEven if the backup interface comes out of standby mode (is brought up), the router does not trigger the 
backup call unless it receives the specif ied traffic for that backup interface.
Configuring Backup Interfaces
Perform these steps to configure your router with a backup interface, beginning in...

 
13-3
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
Chapter 13      Configuring Dial Backup and Remote Management   Dial Backup Feature Activation Methods
Configuring Floating Static Routes
Static and dynamic routes are the two components of floating static routes. Perform these steps to 
configure the static and dynamic routes on your router, beginning in global configuration mode:
CommandPurpose
Step 1ip route  prefix mask  { ip-address  |...

 
13-4
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
Chapter 13      Configuring Dial Backup and Remote Management
  Dial Backup Feature Activation Methods
Dialer Watch
The dialer watch method only supports the Extended Interior Gateway Routing Protocol (EIGRP) 
link-state dynamic routing protocols.
Configuring Dialer Watch
Perform these steps to configure a dialer watch on your router, beginning in global configuration mode:
CommandPurpose
Step 1interface...