发信人: ghover(肥猫)
整理人: firphoenix(2001-11-06 11:45:22), 站内信件
|
gateway
GW配置
GW-GZ#show run
Building configuration...
Current configuration:
!
! Last configuration change at 14:53:31 UTC Sat Jan 1 2000 by cisco
! NVRAM config last updated at 14:42:05 UTC Sat Jan 1 2000 by cisco
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname GW-GZ
!
aaa new-model
aaa authentication login h323 group radius
aaa authentication login no_rad local
aaa authorization exec h323 group radius
aaa accounting connection h323 start-stop group radius
enable secret 5 $1$Do8I$JbsgS2.d//KmrBHcAJqy2.
enable password cisco
!
username cisco password 0 cisco
!
resource-pool disable
!
!
clock calendar-valid
ip subnet-zero
no ip domain-lookup
!
mta receive maximum-recipients 0
!
!
controller E1 0
framing NO-CRC4
ds0-group 0 timeslots 1-15,17-31 type r2-digital r2-compelled ani
cas-custom 0
unused-abcd 0 1 1 1
country china
answer-signal group-b 1
dnis-digits min 1 max 18
!
controller E1 1
clock source line secondary 1
!
controller E1 2
clock source line secondary 2
!
controller E1 3
clock source line secondary 3
!
!
voice-port 0:0
echo-cancel coverage 32
cptone CN
timeouts call-disconnect 0
!
gw-accounting h323 vsa
dial-peer voice 797 pots
application clid_authen_npw
destination-pattern 0797T
direct-inward-dial
port 0:0
prefix 0797
!
dial-peer voice 80797 voip
destination-pattern 079T
session target ras
!
process-max-time 200
gateway
!
interface Ethernet0
no ip address
no ip redirects
no ip directed-broadcast
!
interface Serial0
no ip address
no ip directed-broadcast
no ip mroute-cache
shutdown
no fair-queue
clockrate 2015232
!
interface Serial1
no ip address
no ip directed-broadcast
shutdown
no fair-queue
clockrate 2015232
!
interface Serial2
no ip address
no ip directed-broadcast
shutdown
no fair-queue
clockrate 2015232
!
interface Serial3
no ip address
no ip directed-broadcast
shutdown
no fair-queue
clockrate 2015232
!
interface FastEthernet0
ip address 10.123.15.60 255.255.255.0
no ip directed-broadcast
duplex auto
speed auto
h323-gateway voip interface
h323-gateway voip id ganzhou ipaddr 10.123.15.69 1719
h323-gateway voip h323-id GZ.jx.cpn
h323-gateway voip tech-prefix 1#
!
no ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 10.123.15.254
!
radius-server host 10.123.15.139 auth-port 1812 acct-port 1813
radius-server retransmit 2
radius-server timeout 4
radius-server key voip
radius-server vsa send accounting
radius-server vsa send authentication
!
line con 0
exec-timeout 0 0
transport input none
login authentication no_rad
line aux 0
line vty 0 4
exec-timeout 120 0
password cisco
login authentication no_rad
!
end
Active GK配置举例
GK-NC1#show run
Building configuration...
Current configuration:
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname GK-NC1
enable secret 5 $1$Do8I$JbsgS2.d//KmrBHcAJqy2
enable password cisco
!
!
memory-size iomem 25
ip subnet-zero
no ip domain-lookup
!
!
interface FastEthernet0/0
ip address 10.123.15.61 255.255.255.0
no ip redirects
duplex auto
speed auto
standby 1 priority 105 preempt
standby 1 ip 10.123.15.69
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.123.15.254
no ip http server
!
!
!
gatekeeper
zone local nanchang jx.cpn 10.123.15.69
zone local ganzhou jx.cpn
zone prefix nangchang 0791*
zone prefix ganzhou 0797*
gw-type-prefix 1#* default-technology
arq reject-unknown-prefix
lrq reject-unknown-prefix
no shutdown
!
!
line con 0
exec-timeout 0 0
login
transport input none
line aux 0
line vty 0 4
exec-timeout 120 0
password cisco
login
!
end
debug信息
5300#debug h225 asn1
gw1#value RasMessage ::= registrationRequest :
02:34:08: {
02:34:08: requestSeqNum 0209,
02:34:08: protocolIdentifier { 0 0 8 2250 0 2 },
02:34:08: discoveryComplete FALSE,
02:34:08: callSignalAddress
02:34:08: {
02:34:08: },
02:34:08: rasAddress
02:34:08: {
02:34:08: },
02:34:08: terminalType
02:34:08: {
02:34:08: mc FALSE,
02:34:08: undefinedNode FALSE
02:34:08: },
02:34:08: gatekeeperIdentifier "nanchang",
02:34:08: endpointVendor
02:34:08: {
02:34:08: vendor
02:34:08: {
02:34:08: t35CountryCode 0181,
02:34:08: t35Extension 00,
02:34:08: manufacturerCode 018
02:34:08: }
02:34:08: },
02:34:08: timeToLive 060,
02:34:08: keepAlive TRUE,
02:34:08: endpointIdentifier "614F7EB800000008",
02:34:08: willSupplyUUIEs FALSE
02:34:08: }
02:34:08: 0E4000D0 06000891 4A000200 00000007 006E0061 006E0063 00680061 006E006
7
00B50000 120E8E02 003B0180 211E0036 00310034 00460037 00450042 00380030
00300030 00300030 00300030 00380100
124000D0 06000891 4A000200 0E006E00 61006E00 63006800 61006E00 671E0036
00310034 00460037 00450042 00380030 00300030 00300030 00300030 00380C88
02003B01 00
value RasMessage ::= registrationConfirm :
02:34:08: {
02:34:08: requestSeqNum 0209,
02:34:08: protocolIdentifier { 0 0 8 2250 0 2 },
02:34:08: callSignalAddress
02:34:08: {
02:34:08: },
02:34:08: gatekeeperIdentifier "nanchang",
02:34:08: endpointIdentifier "614F7EB800000008",
02:34:08: timeToLive 060,
02:34:08: willRespondToIRR FALSE
02:34:08: }
5. debug radius
6. debug voip aaa
7. debug aaa authentication
8. debug aaa accounting
----
|
|