ADTRAN L768 User Manual

Express L768 and Express L1.5
61202192L1-1B June 1998
HDSL Router/Bridge
USER MANUAL
Express L768 1202192L1 Express L1.5 1202192L2
Trademark:
DMS-100 is a trademark of Northern Telecom, Inc. Ethernet is a trademark of Digital Equipment Corporation, Intel Corporation, and Xe­rox Corporation. ExpertISDN (patent number 5,715,241) is a trademark of ADTRAN, Inc. Macintosh is a registered trademark of Apple Computer, Inc. Novell, NetWare, and Internetwork Packet Exchange (IPX) are registered trademarks of Novell, Inc. Windows is a registered trademark of Microsoft Corporation. 5ESS is a registered trademark of AT&T.
901 Explorer Boulevard
P.O. Box 140000
Huntsville, AL 35814-4000
Phone: (256) 963-8000 © 1998 ADTRAN, Inc.
All rights reserved.
Printed in USA.
FCC regulations require that the following information be provided in this manual:
1. If this equipment causes harm to the telephone network, the telephone company may temporarily discontinue service. If possible, advance notification is given; oth­erwise, notification is given as soon as possible. The telephone company will advise the customer of the right to file a complaint with the FCC.
2. The telephone company may make changes in its facilities, equipment, operations, or procedures that could affect the proper operation of this equipment; advance no­tification and the opportunity to maintain uninterrupted service are given.
3. If experiencing difficulty with this equipment, please contact ADTRAN (see inside back cover) for repair and warranty information. The telephone company may re­quire this equipment to be disconnected from the network until the problem is cor­rected, or it is certain the equipment is not malfunctioning.
4. This unit contains no user serviceable parts.
To ADTRAN service personnel: For continued protection against risk of fire, replace F1 with the same type and rating of fuse only: .2A, 250 V.
FEDERAL COMMUNICATIONS COMMISSION
RADIO FREQUENCY INTERFERENCE STATEMENT
This equipment has been tested and found to comply with the limits for a Class A dig­ital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio or TV reception, which can be determined by turning the equipment off and on. The user is encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
Changes or modifications to this unit not expressly approved by ADTRAN will void the user's authority to operate the equipment.
CANADIAN EMISSIONS REQUIREMENTS
This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus as set out in the interference-causing equipment standard enti­tled "Digital Apparatus," ICES-003 of the Department of Communications.
Cet appareil nuerique respecte les limites de bruits radioelectriques applicables aux appareils numeriques de Class A prescrites dans la norme sur le materiel brouilleur: "Appareils Numeriques," NMB-003 edictee par le ministre des Communications.
CANADIAN EQUIPMENT LIMITATIONS
Notice: The Canadian Industry and Science Canada label identifies certified equip­ment. This certification means that the equipment meets certain telecommunications network protective, operational, and safety requirements. The Department does not guarantee the equipment will operate to the user’s satisfaction.
Before installing this equipment, ensure that it is permissible to be connected to the fa­cilities of the local telecommunications company. The equipment must also be in­stalled using an acceptable method of connection. In some cases, the company’s inside wiring associated with a single-line individual service may be extended by means of a certified connector assembly (telephone extension cord). Compliance with the above conditions may not prevent degradation of service in some situations.
Repairs to certified equipment should be made by an authorized Canadian mainte­nance facility designated by the supplier. Any repairs or alterations made by the user to this equipment, or equipment malfunctions, may give the telecommunications com­pany cause to request the user to disconnect the equipment.
Users should ensure for their own protection that the electrical ground connections of the power utility, telephone lines, and internal metallic water pipe system, if present, are connected together. This precaution may be particularly important in rural areas.
Users should not attempt to make such connections themselves, but should contact the appropriate electric inspection authority, or an electrician, as appropriate.
The Load Number (LN) assigned to each terminal device denotes the percentage of the total load to be connected to a telephone loop which is used by the device, to prevent overloading. The termination on a loop may consist of any combination of devices subject only to the requirement that the total of the Load Numbers of all devices does not exceed 100.
Table of Contents
Quick Startup Guide ........................................................................................................ 1
Setting up the HDSL Line ................................................................................................. 1
Chapter 1. Understanding HDSL and the Express L768/L1.5 ................................... 3
HDSL Overview ................................................................................................................. 3
The Express L768/L1.5...................................................................................................... 4
Applications ................................................................................................................. 5
Single User to Corporate LAN .................................................................... 5
Frame Relay Connectivity to ADTRAN Frame Port 768......................... 6
Small Office - Home Office (SOHO) to Corporate LAN.......................... 7
Routing and Bridging with the Express L768/L1.5................................................ 8
Factory Default..................................................................................................... 8
Bridging................................................................................................................. 8
IP Routing ............................................................................................................. 9
IPX Routing........................................................................................................... 9
Concurrent Routing And Bridging ........................................................................... 9
Network Address Translation Mode........................................................................ 9
Front Panel.................................................................................................................... 10
Indicators............................................................................................................... 10
Rear Panel..................................................................................................................... 11
Configuration............................................................................................................... 11
Security.......................................................................................................................... 12
Chapter 2. Installation...................................................................................................... 13
HDSL Network Connection.............................................................................................. 13
T1 Overview................................................................................................................. 13
HDSL Overview........................................................................................................... 13
Local Area Network Connection ..................................................................................... 14
Chapter 3. Terminal Menu Operation and Structure................................................. 15
Terminal Menu Structure.................................................................................................. 15
Configuration............................................................................................................... 15
Status ............................................................................................................................. 17
Test................................................................................................................................. 17
Logs................................................................................................................................ 17
Utilities.......................................................................................................................... 17
Navigating the Terminal Menus...................................................................................... 18
General Layout............................................................................................................. 18
Menu Path..................................................................................................................... 18
Moving Around........................................................................................................... 18
Submenus [+] or [DATA]............................................................................. 18
Activation Field <+>..................................................................................... 18
Editable Data Field........................................................................................ 18
61202192L1-1 Express L768/L1.5 User Manual
i
ii
Table of Contents
Read-Only Field............................................................................................. 18
Navigation with the Keyboard.................................................................... 19
Security Levels ............................................................................................................. 21
Configuration Menu .......................................................................................................... 22
Configuration/System Info........................................................................................ 22
System Name........................................................................................................ 22
System Location ................................................................................................... 22
System Contact..................................................................................................... 23
Firmware Revision............................................................................................... 23
System Uptime ..................................................................................................... 23
Date/Time............................................................................................................. 23
Configuration/WAN .................................................................................................. 24
WAN/HDSL......................................................................................................... 24
HDSL/Mode .................................................................................................. 24
HDSL/Channel Rate..................................................................................... 24
HDSL/NEBEs ................................................................................................ 25
HDSL/FEBEs ................................................................................................. 25
WAN/L2 Protocol ............................................................................................... 25
Configuration/IP......................................................................................................... 26
IP/IP Address....................................................................................................... 26
IP/Subnet Mask ................................................................................................... 26
IP/Default Gateway ............................................................................................ 26
IP/Static Routes ................................................................................................... 27
Static Routes/Active ..................................................................................... 27
Static Routes/IP Address............................................................................. 27
Static Routes/Subnet Mask.......................................................................... 27
Static Routes/Gateway................................................................................. 27
Static Routes/Hops....................................................................................... 27
Static Routes/Private.................................................................................... 27
IP/IP Router ......................................................................................................... 28
IP Router/Mode ............................................................................................ 28
IP/RIP ............................................................................................................. 28
RIP/Mode ................................................................................................ 28
RIP/Protocol............................................................................................ 28
RIP/Method............................................................................................. 28
RIP/Direction .......................................................................................... 29
RIP/V2 Secret .......................................................................................... 29
IP/NAT ................................................................................................................. 29
NAT/DHCP Mode........................................................................................ 29
NAT/DHCP Renewal Time......................................................................... 29
NAT/Web Server .......................................................................................... 29
NAT/Default IP............................................................................................. 30
IP/DNS.................................................................................................................. 30
DNS/Domain Name..................................................................................... 30
DNS/Server 1................................................................................................. 30
DNS/Server 2................................................................................................. 30
IP/UDP Relay....................................................................................................... 31
UDP Relay/Mode.......................................................................................... 31
Express L768/L1.5 User Manual 61202192L1-1
UDP Relay/UDP Relay List......................................................................... 31
UDP Relay List/Relay Address............................................................ 31
UDP Relay List/UDP Port Type........................................................... 31
UDP Relay List/UDP Port 1, UDP Port 2, UDP Port 3 ..................... 31
IP/Proxy ARP ...................................................................................................... 32
Configuration/IPX ...................................................................................................... 33
IPX/Mode ............................................................................................................. 33
IPX/Network........................................................................................................ 33
IPX/Frame Type .................................................................................................. 34
IPX/Seed Status ................................................................................................... 34
IPX/RIP Timer ..................................................................................................... 34
IPX/SAP Timer .................................................................................................... 35
Configuration/Bridge................................................................................................. 36
Bridge/Mode........................................................................................................ 36
Bridge/WAN IP Bridge ...................................................................................... 36
WAN IP Bridge/Network ........................................................................... 37
WAN IP Bridge/Netmask ........................................................................... 37
WAN IP Bridge/Triggered.......................................................................... 37
WAN IP Bridge/Proxy ARP........................................................................ 37
Bridge/WAN IPX Bridge ................................................................................... 37
WAN IPX Bridge/Network......................................................................... 38
WAN IPX Bridge/Frame Type ................................................................... 38
WAN IPX Bridge/Seed Status .................................................................... 38
WAN IPX Bridge/Triggered ....................................................................... 38
Bridge/Spanning Tree ........................................................................................ 38
Spanning Tree/Mode ................................................................................... 38
Spanning Tree/Priority................................................................................ 39
Spanning Tree/Maximum Age................................................................... 39
Spanning Tree/Hello Time.......................................................................... 39
Spanning Tree/Forward Delay................................................................... 39
Spanning Tree/LAN Port ............................................................................ 39
LAN Port/Active ................................................................................... 39
LAN Port/Path Cost .............................................................................. 40
LAN Port/Priority.................................................................................. 40
Spanning Tree/Bridge Group 1 .................................................................. 40
Bridge Group 1/Active.......................................................................... 40
Bridge Group 1/Path Cost..................................................................... 40
Bridge Group 1/Priority........................................................................ 40
Spanning Tree/Bridge Group 2 .................................................................. 40
Bridge Group 2/Active.......................................................................... 40
Bridge Group 2/Path Cost..................................................................... 41
Bridge Group 1/Priority........................................................................ 41
Bridge/Address Table ........................................................................................ 41
Address Table/Aging................................................................................... 41
Address Table/Forward Policy .................................................................. 41
Configuration/Security.............................................................................................. 42
Security/Authentication..................................................................................... 42
Security/Radius Server....................................................................................... 43
Radius Server/Primary Server.................................................................... 43
61202192L1-1 Express L768/L1.5 User Manual
Table of Contents
iii
iv
Table of Contents
Radius Server/Secondary Server................................................................ 43
Radius Server/UDP Port.............................................................................. 43
Radius Server/Secret .................................................................................... 43
Radius Server/Retry Count......................................................................... 43
Security/PPP ........................................................................................................ 44
Security/Filter Defines........................................................................................ 44
Filter Defines /MAC Filter Defines ............................................................ 45
Filter Defines /Pattern Filter Defines......................................................... 45
Filter Defines /IP Filter Defines .................................................................. 46
Filter Defines /IPX Filter Defines................................................................ 47
Configuration/Frame Relay....................................................................................... 48
Frame Relay/Maintenance Protocol ................................................................. 49
Frame Relay/Polling Frequency........................................................................ 49
Frame Relay/DLCI Mapping............................................................................. 49
DLCI Mapping/Active................................................................................. 50
DLCI Mapping/DLCI................................................................................... 50
DLCI Mapping/IP Map................................................................................ 50
Map/Active ............................................................................................. 50
Map/IARP ............................................................................................... 51
Map/Far-End IP Address...................................................................... 51
Map/IP Netmask .................................................................................... 51
Map/Link IP Address ............................................................................ 51
Map/RIP Protocol................................................................................... 51
Map/RIP Method.................................................................................... 52
Map/RIP Direction................................................................................. 52
IP Map/NAT ........................................................................................... 52
DLCI Mapping/IPX Map............................................................................. 52
IPX Map/Active...................................................................................... 52
IPX Map/IARP........................................................................................ 53
IPX Map/Link Network......................................................................... 53
DLCI Mapping/Bridge Map........................................................................ 53
Bridge Map/Active................................................................................. 53
Bridge Map/Bridge Group.................................................................... 53
DLCI Mapping/Filters ................................................................................. 54
Filters/In from PVC................................................................................ 54
Filters/In Exceptions .............................................................................. 54
Filters/Out to PVC.................................................................................. 55
Filters/Out Exceptions........................................................................... 55
Configuration/PPP Profile......................................................................................... 56
PPP Profile/Authentication ............................................................................... 56
Authentication/Tx Method ......................................................................... 57
Authentication/Tx Username ..................................................................... 57
Authentication/Tx Password...................................................................... 57
Authentication/Rx Username..................................................................... 57
Authentication/Rx Password...................................................................... 57
PPP Profile/IP ...................................................................................................... 58
IP/Mode ......................................................................................................... 58
IP/NAT........................................................................................................... 58
Express L768/L1.5 User Manual 61202192L1-1
Table of Contents
IP/Route......................................................................................................... 58
Route/IP/Net.......................................................................................... 58
Route/Netmask ...................................................................................... 58
Route/Force IP........................................................................................ 59
IP/RIP ............................................................................................................. 59
RIP/Mode ................................................................................................ 59
RIP/Protocol............................................................................................ 59
RIP/Method............................................................................................. 59
RIP/Direction.......................................................................................... 59
RIP/Triggered......................................................................................... 60
PPP Profile/IPX ................................................................................................... 60
IPX/Mode....................................................................................................... 60
IPX/Remote Network .................................................................................. 60
IPX/Triggered ............................................................................................... 60
IPX/Type 20 Packets..................................................................................... 60
PPP Profile/Bridge .............................................................................................. 61
Bridge/Mode ................................................................................................. 61
PPP Profile/PPP................................................................................................... 61
PPP/VJ Compression ................................................................................... 61
PPP/Max Config ........................................................................................... 62
PPP/Max Timer............................................................................................. 62
PPP/Max Failure........................................................................................... 62
PPP Profile/Filters............................................................................................... 62
Filters/WAN-to-LAN (In) ........................................................................... 62
Filters/In Exceptions .................................................................................... 63
Filters/LAN-to-WAN (Out) ........................................................................ 64
Filters/Out Exceptions ................................................................................. 64
Configuration/Management ..................................................................................... 65
Management/Telnet ........................................................................................... 65
Telnet/Server Access.................................................................................... 65
Telnet/User List ............................................................................................ 66
User List/Name ...................................................................................... 66
User List/Authen Method..................................................................... 66
User List/Password................................................................................ 66
User List/Idle Time ................................................................................ 66
User List/Level ....................................................................................... 66
Management/SNMP........................................................................................... 67
SNMP Access ................................................................................................. 67
SNMP/Communities.................................................................................... 67
Communities/Name ............................................................................. 67
Communities/Privilege ......................................................................... 67
Communities/Manager IP .................................................................... 67
SNMP/Traps.................................................................................................. 68
Traps/Manager Name ........................................................................... 68
Traps/Manager IP .................................................................................. 68
Management/Maint Port ................................................................................... 68
Maint Port/Password Protect ..................................................................... 68
Maint Port/Password................................................................................... 68
61202192L1-1 Express L768/L1.5 User Manual
v
vi
Table of Contents
Maint Port/Baud Rate .................................................................................. 68
Maint Port/Data Bits .................................................................................... 69
Maint Port/Parity.......................................................................................... 69
Maint Port/Stop Bits..................................................................................... 69
Configuration/Terminal Mode ................................................................................. 69
Status Menu......................................................................................................................... 70
Status/Sessions ............................................................................................................ 71
Sessions/PPP Session.......................................................................................... 71
Sessions/DLCI Table........................................................................................... 72
Sessions/Spanning Tree...................................................................................... 73
Status/ARP Cache....................................................................................................... 73
Status/Bridge Table .................................................................................................... 74
Status/IP Routes.......................................................................................................... 74
Status/IPX Routes ....................................................................................................... 75
Status/IPX Servers....................................................................................................... 75
Status/WAN Stats ....................................................................................................... 76
Status/LAN Stats......................................................................................................... 76
Status/IP Stats.............................................................................................................. 77
Test Menu ............................................................................................................................ 78
Test Menu/Echo Request ........................................................................................... 78
Test Menu/2047 Loopback......................................................................................... 78
Logs Menu........................................................................................................................... 79
Logs/Sys log Host ....................................................................................................... 79
Logs/PPP Log .............................................................................................................. 79
PPP Log/Active ................................................................................................... 80
PPP Log/Wrap..................................................................................................... 80
PPP Log/Level ..................................................................................................... 80
PPP Log/View...................................................................................................... 80
PPP Log/Clear ..................................................................................................... 80
Logs/Connection Log................................................................................................. 80
Connection Log/Active ...................................................................................... 80
Connection Log/Wrap........................................................................................ 81
Connection Log/Level ........................................................................................ 81
Connection Log/View......................................................................................... 81
Connection Log/Clear ........................................................................................ 81
Logs/Network Log...................................................................................................... 81
Network Log/Active........................................................................................... 81
Network Log/Wrap ............................................................................................ 81
Network Log/Level............................................................................................. 82
Network Log/View............................................................................................. 82
Network Log/Clear............................................................................................. 82
Utilities Menu ..................................................................................................................... 83
Utilities/Ping................................................................................................................ 83
Utilities/Telnet Client................................................................................................. 84
Utilities/Upgrade Menu............................................................................................. 84
Upgrade/Transfer Method................................................................................. 84
Upgrade/TFTP Host ........................................................................................... 84
Upgrade/Filename .............................................................................................. 84
Express L768/L1.5 User Manual 61202192L1-1
Table of Contents
Upgrade/Status ................................................................................................... 84
Upgrade/Start Transfer...................................................................................... 85
Upgrade/Abort Transfer.................................................................................... 85
Upgrade/TFTP Server ........................................................................................ 85
Utilities/Exit................................................................................................................. 85
Chapter 4. Specification ................................................................................................... 87
Specifications and Features............................................................................................... 87
Network Interface ......................................................................................... 87
Ethernet Interface (LAN).............................................................................. 87
Display............................................................................................................ 87
Environmental ............................................................................................... 87
Physical........................................................................................................... 87
Power .............................................................................................................. 87
Appendix A. Loop Status Messages .............................................................................. 89
Appendix B. Log Messages ............................................................................................. 91
Appendix C. SNMP .......................................................................................................... 99
Appendix D. Connector Pinouts .................................................................................... 103
Appendix E. Terminal Mode Commands..................................................................... 105
Glossary .............................................................................................................................. 109
Acronyms ............................................................................................................................ 119
Index .................................................................................................................................... 121
61202192L1-1 Express L768/L1.5 User Manual
vii
Table of Contents
viii
Express L768/L1.5 User Manual 61202192L1-1
List of Figures
Figure 1-1: Express L768/L1.5................................................................................. 4
Figure 1-2: Single User to Corporate LAN ............................................................ 5
Figure 1-3: Frame Relay Connectivity to ADTRAN Frame Port 768................. 6
Figure 1-4: SOHO to Corporate LAN..................................................................... 7
Figure 1-5: Express L768/L1.5 Front Panels.......................................................... 10
Figure 1-6: Express L768/L1.5 Rear Panel............................................................. 11
Figure 3-1: Top Level Terminal Menu.................................................................... 16
Figure 3-2: Configuration/System Info Screen..................................................... 22
Figure 3-3: Configuration/WAN Screen ............................................................... 24
Figure 3-4: Configuration/IP Screen ...................................................................... 26
Figure 3-5: Configuration/IPX Screen ................................................................... 33
Figure 3-6: Configuration/Bridge Screen .............................................................. 36
Figure 3-7: Configuration/Security Screen ........................................................... 42
Figure 3-8: Configuration/Frame Relay Screen.................................................... 48
Figure 3-9: Configuration/PPP Profile Screen...................................................... 56
Figure 3-10: Configuration/Management Screen................................................... 65
Figure 3-11: Status Screen........................................................................................... 70
Figure 3-12: Test Screen.............................................................................................. 78
Figure 3-13: Logs Screen............................................................................................. 79
Figure 3-14: Utilities Screen ....................................................................................... 83
61202192L1-1 Express L768/L1.5 User Manual
ix
List of Figures
x
Express L768/L1.5 User Manual 61202192L1-1
List of Tables
Table D-A: IBM/AT Style EIA-232 Interface...................................................... 103
Table D-B: RJ-45 HDSL BRI U .............................................................................. 103
Table D-C: 10BaseT Ethernet ................................................................................ 104
61202192L1-1 Express L768/L1.5 User Manual
xi
List of Tables
xii
Express L768/L1.5 User Manual 61202192L1-1
SETTING UP THE HDSL LINE
Quick Startup Guide
The Express L768/L1.5 works over leased or “dry” copper provided by the lo­cal telephone company. See Chapter 4 on page 87 for specifications on maxi­mum distance. If the Express L768/L1.5 is to be used in a back-to-back configuration, the line mode must be different for each unit.
1. Connect a VT 100 async terminal, or personal computer with a terminal emulator running 9600 N-8-1, to the
2. Hold down the Control key and press R ; then press Enter to display the top menu.
3. Using the arrow keys and Enter key to navigate the menu, go to the Con-
figuration/WAN/HDSL menu. Enter the line mode as HTU-C or HTU-R.
Each end of an HDSL circuit must be of opposite modes.
4. Set the rate of transfer that will be used. Both devices must be set at the same rate.
5. Use the left arrow key or the Escape key to go back up the menu tree. When asked to save HDSL parameters, type y .
6. Connect the HDSL line to the RJ-45 jack labeled HDSL on the rear panel. See Appendix D on page 103 for connector pinouts.
7. When the Loop LED(s) remain solid, the Express L768/L1.5 is in synchro­nization.
8. On the Express L768, the Link LED will illuminate to indicate that PPP has successfully negotiated.
MAINTENANCE port.
61202192L1-1 Express L768/L1.5 User Manual
1
Quick Startup Guide
2
Express L768/L1.5 User Manual 61202192L1-1
HDSL OVERVIEW
High Bit Rate Digital Subscriber Line (HDSL) is rapidly becoming the service providers’ technology of choice for the deployment of T1 services: according to recent estimates, over 60% of today’s T1 installations use HDSL technology. Instead of traditional methods requiring multiple T1 repeaters, HDSL allows the telephone companies to quickly deploy a T1 circuit over Carrier Serving Area (CSA) loops (9,000 feet on 26 AWG wire or 12,000 feet on 24 AWG wire) without the need for loop conditioning or repeater installation. The benefits HDSL offers over traditional T1 span lines represent large cost savings for the service provider because
Chapter 1
Understanding HDSL and
the Express L768/L1.5
HDSL circuits can be deployed in days as opposed to weeks
HDSL circuits can be deployed without the need for
- line repeaters on CSA loops
- binder group separation
- bridge tap removal for bridge taps totaling less than 2,500 feet (no single bridge tap greater than 2,000 feet)
HDSL circuits virtually eliminate cross talk and loop impairment prob­lems
Safer class A3 voltages eliminate need for special training or procedures.
Adtran provides a full line of HDSL products that are the price/performance leaders in the industry.
61202192L1-1 Express L768/L1.5 User Manual
3
4
Chapter 1: Understanding HDSL and the Express L768/L1.5
THE EXPRESS L768/L1.5
The Express L768/L1.5 is a standalone device that links two Local Area Net­works (LANs) using a high-speed DSL two-wire or four-wire line. The Express L768 has a two-wire interface and operates up to 768 kbits per second. The Ex­press L1.5 has a four-wire interface and operates up to 1.536 Mbits per second. The Express L1.5 is compatible with the Express L768 in a two-wire mode if the rate is 768K and below.
See Figure 1-1 for an illustration of the Express L768/L1.5. The 10BaseT con­nector operates at 10 Mbits per second half duplex and accepts standard eth­ernet packets encapsulated using IEEE 802.3 or Ethernet II (DIX). Because the 10BaseT is a four-wire interface, a crossover switch permits the user to connect to either a hub-concentrator or network interface card without the need for special cabling. The maintenance port can connect to any asynchronous termi­nal emulating a VT 100 terminal for configuration.
TX/RX LOOP LINK PWR
EXPRESS L768
LI
TEST
LINE
L768
TX/RX LOOP1 LOOP2 PWR
EXPRESS L1.5
LI
TEST
LINE
L1.5
Figure 1-1
Express L768/L1.5
Express L768/L1.5 User Manual 61202192L1-1
Applications
Single User to Corporate LAN
Telecommuter/Home Office Access to the corporate LAN
Single device access
User Datagram Protocol (UDP) broadcasts are “relayed” to corporate LAN.
Client device can obtain the Internet Protocol (IP) address dynamically us­ing Dynamic Host Configuration Protocol (DHCP).
Compatible with popular central site LAN access devices
Chapter 1: Understanding HDSL and the Express L768/L1.5
Up to 8 kft
TO
HUBTONIC
1
O
EIA23210 BASE TPOWER
SDSL
OFF
ON
1234
RD B1 B2 PWR
TD
EXPRESS L1.5
LINE
TEST
Express L768/L1.5
10 BT
10 BT
Single User to Corporate LAN
61202192L1-1 Express L768/L1.5 User Manual
Server
Figure 1-2
5
Chapter 1: Understanding HDSL and the Express L768/L1.5
Frame Relay Connectivity to ADTRAN Frame Port 768
Telecommuter/Home Office Access to the corporate LAN
Access to any other router within the Frame Relay Network
User Datagram Protocol (UDP) broadcasts are “relayed” to corporate LAN
FramePort 768 (part no. 1100048L1) provides concentration of up to 24 SDSL interfaces into a single DS-1
LAN
6
FRAME
RELAY
Frame Relay Connectivity to ADTRAN Frame Port 768
PCPC
Figure 1-3
Express L768/L1.5 User Manual 61202192L1-1
Chapter 1: Understanding HDSL and the Express L768/L1.5
Small Office - Home Office (SOHO) to Corporate LAN
Connects the small office or home office to the corporate LAN
Routes IP and Internet Packet Exchange (IPX) traffic from multiple devices to the corporate LAN
Bridges all non-routed traffic (e.g., AppleTalk)
Low cost alternative to buying a high-end router
Compatible with popular central site LAN access devices
Up to 8 kft
1
O
10 BT
TO HUBTONIC
Hub
OFF
ON
EIA23210 BASE TPOWER
SDSL
1 2 3 4
EXPRESS L1.5
RD B1 B2 PWR
TD
TEST
L768/L1.5
Server
Figure 1-4
SOHO to Corporate LAN
The Express L768/L1.5 provides the following basic functions:
1.
LAN Bridge: Bridging provides a point-to-point connection between two
LANs. The bridge learning function scans the source and destination me­dia access control (MAC) addresses of all packets on its local LAN and de­termines which packets should be transmitted over the HDSL link. Applications include connectivity between single user or small offices to corporate LANs. The Express L768/L1.5 uses the Spanning Tree Algo­rithm (IEEE 802.1d-ISO/IEC10038), which provides a loop-free topology and redundancy.
LINE
61202192L1-1 Express L768/L1.5 User Manual
7
Chapter 1: Understanding HDSL and the Express L768/L1.5
2. IP Router: The Express L768/L1.5 can function as an IP router using the Routing Information Protocol (RIP) for advertising and learning routes among other routers. Static routes may also be entered into the routing ta­ble.
3. IPX Router: IPX routers and services can be exchanged between the Ex­press L768/L1.5 and other devices using RIP and Service Advertising Pro­tocol (SAP). Watch dog serialization filtering and spoofing can permit the ISDN to be idle during no application traffic periods.
Network Address Translation (NAT): Single networks can connect to the
4. Internet with this function. The Express L768/L1.5 translates outgoing IP packets over the HDSL to the IP router at the Internet Service Provider. Many popular Internet applications are supported.
8
5. PPP or Frame Relay: The layer two protocol used to transfer packets can
be PPP or Frame Relay (RFC 1490). PPP allows a point-to-point connec­tion, whereas Frame Relay can provide up to ten permanent virtual cir­cuits.
Routing and Bridging with the Express L768/L1.5
The Express L768/L1.5 is a Router and Transparent Learning Bridge. Its fea­tures can be easily configured and used once several basic concepts are under­stood.
Factory Default
The Express L768/L1.5 comes from the factory configured for MAC Bridging, IP routing and IPX routing with no filters or connection information defined. An IP address of 10.0.0.1 with a network mask of 255.255.255.0 is preloaded. The factory default layer two configuration is PPP, which provides the least amount of reconfiguration due to its negotiation-oriented nature.
Bridging
In Bridge Mode, the Express L768/L1.5 can be used to connect two LAN seg­ments. In this mode, all protocols are supported because they are transported across the HDSL link at the MAC layer. The Spanning Tree Algorithm can be used to guarantee a loop-free topology. MAC addresses are “learned” by each Express L768/L1.5 to prevent non-WAN packets from being bridged.
Express L768/L1.5 User Manual 61202192L1-1
IP Routing
Chapter 1: Understanding HDSL and the Express L768/L1.5
The Express L768/L1.5 operates as an IP router when the
Router/Mode option is configured to On . In PPP mode, the Express L768/L1.5
uses an IP unnumbered WAN interface; the IP address and mask assigned to the unit’s LAN interface apply to all routing and IP operations for the unit. In Frame Relay mode, each PVC can be specified as numbered or unnumbered links. If a default gateway is specified on the network of the Ethernet interface, the unit attempts to reach the gateway through that interface. If no default gateway is specified (i.e., 0.0.0.0) the WAN interface becomes the default gate­way (recommended for remote applications when there are no other routers on the remote LAN).
IPX Routing
Network routes and services are learned and advertised using Novell’s RIP and SAP.
Concurrent Routing And Bridging
The Express L768/L1.5 can route IP and IPX as well as bridge non-IP/IPX packets simultaneously. The PPP profile will by default negotiate PPP net­work protocols to support the transmission and reception of IP, IPX, and Bridge packets. If the PPP peer does not accept a protocol, the Express L768/ L1.5 will fall back to any combination of routing and bridging.
Network Address Translation Mode
Configuration/IP/IP
NAT is a special mode of operation in which the Express L768/L1.5 obtains a dynamically assigned IP address from the peer router (typically an Internet Service Provider). This allows a network of computers to appear as a single IP address.
NAT is enabled if the layer two protocol is PPP and the PPP profile has the IP parameter
NAT set to Yes , or the layer two protocol is Frame Relay and a
DLCI mapping has the IP Map/Nat parameter set to Yes . The network com­puter’s IP stack may use DHCP to request an IP address, default gateway ad­dress, and domain name server addresses from the Express L768/L1.5.
61202192L1-1 Express L768/L1.5 User Manual
9
Chapter 1: Understanding HDSL and the Express L768/L1.5
Front Panel
Figure 1-5 shows the front panel of the Express L768/L1.5. The indicators are divided into LAN functions, WAN functions, and Test functions.
Indicators
TX/RX Flashes when transmitting and receiving data on the
10BaseT connector.
LI Link integrity. Illuminates when there is a good
connection between the Express L768/L1.5 and the Hub/NIC card.
LOOP/LOOP1 Flashes when loop 1 (pins 1 and 2 on RJ-45) is not
in sync. Solid when loop 1 is in sync.
LINK/LOOP2 On Express L768: Illuminates when either PPP or
Frame Relay has an active connection. On Express L1.5: Flashes when loop 2 (pins 4 and 5 on RJ-45) is not in sync. Solid when loop 2 is in sync.
10
TX/RX LOOP LINK PWR
EXPRESS L768
LI
TEST
LINE
L768
TX/RX LOOP1 LOOP2 PWR
EXPRESS L1.5
LI
TEST
LINE
L1.5
Figure 1-5
Express L768/L1.5 Front Panels
Express L768/L1.5 User Manual 61202192L1-1
Rear Panel
The Express L768/L1.5 has one RJ-45 jack, labeled HDSL, on the rear panel for network connection (see Figure 1-6). There are two sets of switches on the back panel. The TO HUB/TO NIC switch allows the Express L768/L1.5 to connect directly to a Network Interface Card (NIC) or a HUB without the need for spe­cial cabling. The OFF/ON switch block is for factory default and firmware downloading. With switch 1 in the up or OFF position, the Express L768/L1.5 will immediately go into a download mode when power is enabled. Switch 1 must be in the down or ON position in order to boot up normally. Switch 2 in the up or OFF position will force the entire configuration to be factory default­ed.
The Express L768 transfers data up to 768 kbps over a two-wire facility. The Express L1.5 transfers data up to 1.536 Mbps over a four-wire facility. This type of service is a permanent connection between endpoints or between the unit and the Frame Relay cloud. It is sometimes referred to as a leased connec­tion, a dedicated connection, a nailed-up connection, or a private circuit. Leased connection or leased line is used in this manual to represent these types of services.
Chapter 1: Understanding HDSL and the Express L768/L1.5
1202192L1/1202192L2
TO
1
O
HUBTONIC
OFF
ON
EIA23210 BASE TPOWER
1234
Express L768/L1.5 Rear Panel
HDSL
Figure 1-6
Configuration
The Express L768/L1.5 is configured using a menu-based interface. This in­terface can be accessed via the maintenance port using any asynchronous VT 100 terminal or personal computer running a terminal emulation program, or via the LAN using a Telnet client program. To use the Telnet interface, the Express L768/L1.5 must first have an IP address programmed into it via the maintenance port. The factory default is 10.0.0.1.
61202192L1-1 Express L768/L1.5 User Manual 11
Chapter 1: Understanding HDSL and the Express L768/L1.5
Security
Security on network devices is a major concern for almost anyone with a net­work. The Express L768/L1.5 provides many tools for securing the local net­work from hostile users. Connections can be authenticated using passwords. A RADIUS client can also be used.
The Telnet configuration can also be protected using the same authentication methods. Each menu item in the Express L768/L1.5 has a security level asso­ciated with it. A telnet session is assigned a privilege level which determines which menu items are accessible to the telnet client. See Security Levels on page 21 (in Chapter 3) for more information on menu security levels.
Filters can be defined to prevent certain addresses or protocols from being transferred from LAN-to-WAN, WAN-to-LAN, or WAN-to-WAN.
12 Express L768/L1.5 User Manual 61202192L1-1
After unpacking the unit, immediately inspect it for possible shipping dam­age. If damage is discovered, file a claim immediately with the shipping car­rier; then contact the ADTRAN Customer and Product Service (CAPS) department (see inside back cover for information).
HDSL NETWORK CONNECTION T1 Overview
The T1 digital communications link has been used by telephone companies (telcos) for transmitting voice since the early sixties. The D4 channel bank is a T1 digital carrier system that was introduced in the mid-seventies and is still widely used by telcos. Communication demands of businesses continued to grow to the point that the telcos began offering T1 service directly to the pub­lic. D4 channel banks began to be used for T1 in corporate network topogra­phies for voice. The advances in computer development also created a demand for T1 data communication which now is a large part of the T1 traffic.
Chapter 2
Installation
T1 is a digital service that is delivered to the user over two pairs of wires from the service provider. The signal operates at 1.544 Mbps and is usually extend­ed by repeaters that are installed about every mile after the first 6000 feet. The T1 signal is divided into 24 time slots (DS0s) which operate at 64 kbps. Each time slot is occupied by digitized voice or by data.
HDSL Overview
T1 service traditionally has been delivered from the service provider with an office repeater over metallic facilities with an alternate mark inversion (AMI) scheme. If the customer is beyond 3000 feet, a T1 loop repeater is used with ad­ditional repeaters spaced at 6000 feet.
61202192L1-1 Express L768/L1.5 User Manual 13
Chapter 2: Installation
A new technology has been developed for the telcos for delivery of T1 service. The technology is known as high-bit-rate digital subscriber line (HDSL). HDSL employs a 2B1Q modulation technique across the same types of pairs traditionally encountered with metallic T1 delivery systems. HDSL satisfies the telco distance requirements without the use of repeaters.
LOCAL AREA NETWORK CONNECTION
The Express L768/L1.5 has a 10BaseT connector that provides half-duplex 10 Mbps operation over a four-wire twisted pair. Place the switch in the TO HUB position when connecting to a 10BaseT concentrator or Hub. Place the switch in the TO NIC position when connecting directly to a computer’s 10BaseT net­work interface card.
Other types of ethernet interfaces (i.e., AUI, 10Base2, etc.) can be accommodat­ed by obtaining an appropriate converter.
14 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3
Terminal Menu Operation and Structure
TERMINAL MENU STRUCTURE
The Express L768/L1.5 uses a multilevel menu structure containing both menu items and data fields. All menu operations and data display in the ter­minal menu window. The Express L768/L1.5 is shipped in the Factory Default configuration. Connect any VT 100 or VT 220 type terminal emulator to the maintenance port. The default rate is 9600 baud 8-N-1. The terminal emulator can flow the Express L768/L1.5 off using software flow control. Hardware flow control is not used.
The opening menu (the Main menu, or top-level menu) is the access point to all other operations. Each Main menu item has several functions and sub­menus to identify and access specific parameters. Figure 3-1 on page 16 shows the top-level terminal menu.
In order to edit items in the terminal menus, you must have the appropriate security level. Each menu description in this section indicates the required security level re­quired for write access. The maintenance port is always at security level 0, giving full access to all configuration items.
The Main menu contains the following options.
Configuration
The Configuration menu provides options to set up the operational configura­tion for the Express L768/L1.5. See the section Configuration Menu on page 22 for detailed information on the available options.
61202192L1-1 Express L768/L1.5 User Manual 15
16 Express L768/L1.5 User Manual 61202192L1-1
Left Pane
Lists available menus.
Mode
Describes current operating mode.
Top Level Terminal Menu
Menu Path
Describes the current position in the terminal menu structure.
Chapter 3: Terminal Menu Operation and Structure
Right Pane
Lists available submenus. Additional submenus available through this pane are indicated by the [+] and [DATA] symbols.
Figure 3-1
Loop Status
Displays current status of HDSL line.
Rate Status
Displays current rate of connection.
Navigation Help
Displays list of characters you can use to navigate the terminal menus. Press Control-Z.
System Time
Displays the cur­rent time. See Date/ Time on page 23 for details on setting the time.
Status
The Status menu provides options to review and monitor the status of the Ex­press L768/L1.5 system. See the section Status Menu on page 70 for detailed in­formation on the available options.
Test
The Test menu can be used for performing diagnostic testing of the Express L768/L1.5. See the section Test Menu on page 78 for detailed information on the tests available.
Logs
The Logs menu can be used for viewing the operational logs for the Express L768/L1.5. See the section Logs Menu on page 79 for detailed information on the available options.
Utilities
The Utilities menu provides tools for system diagnostics and upgrading the Express L768/L1.5. See the section Utilities Menu on page 83 for detailed infor­mation on the available options.
Chapter 3: Terminal Menu Operation and Structure
61202192L1-1 Express L768/L1.5 User Manual 17
Chapter 3: Terminal Menu Operation and Structure
NAVIGATING THE TERMINAL MENUS
The following sections provide information on how to navigate through the terminal menus.
General Layout
When you first start a terminal mode session, the screen shown in Figure 3-1 on page 16 displays. The screen is divided into left and right panes. The left pane shows the current list of submenus, while the right pane shows the con­tents of a selected submenu.
Menu Path
The top line of the display shows this session’s current position (path) in the menu tree. Figure 3-1 on page 16 shows the top menu level with the cursor on the Configuration submenu, so the path display shows Express XLT/Config- uration.
Moving Around
Press Tab or the right arrow key to move the cursor from the left pane to the right pane. Press Tab or the left arrow key to move the cursor from the right pane back to the left pane. Use the up and down arrows to move around with­in each pane. Press Enter to activate a menu. Press the left arrow key or the Es­cape key to go back up the menu. The following options display throughout the menus.
Submenus [+] or [DATA]
Menus that display [+] or [DATA] indicate that more items are available when selected.
Activation Field <+>
Menus that display <+> indicate that an action is to be taken, such as activat­ing a test.
Editable Data Field
A highlighted menu item indicates that you can enter data in that field.
Read-Only Field
An underlined field is a display field that contains read-only information.
18 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Navigation with the Keyboard
You can use different keystrokes to navigate through the terminal menu. Press Control-Z to activate a pop-up screen with the available keystrokes. The fol­lowing section provides a list of the available keystrokes and the results:
General Navigation
H Returns to the home screen. J Jumps between two menu items. Press J while on a menu
item of interest, and you will jump back to the main screen. Go to another menu item of interest, Press J, and you will jump back to the screen that was displayed the first time you pressed J. Press J anytime you want to jump between these items.
Arrow Keys Selects items and moves between the left and right
panes. The left arrow key allows you to go back up the menu.
Enter Activates an item or moves into submenu. Escape Cancels an edit. Allows you to go back up the menu.
Also will dismiss the pop-up help screens.
Ta b Moves between the left and right panes. A Moves to the top of a screen. Z Moves to the bottom of a screen. Backspace Ascends one menu level.
Session Management
Control-L Logs out of the session. Control-S Invalidates the password entry and returns to the login
screen. The Password prompt will display.
Control-R Refreshes the screen. To save time, only the portion of
the screen that has changed is refreshed. This option should be necessary only if the display picks up incorrect characters.
61202192L1-1 Express L768/L1.5 User Manual 19
Chapter 3: Terminal Menu Operation and Structure
ConÞguration
F Restores factory default settings. This setting restores the
factory defaults based on the location of the cursor. Entire submenus can be factory defaulted.
C Copies selected items to the clipboard. The amount of
information you can copy depends on the cursor location when you press C. For example, if the cursor is over an editable field, only that item is copied. If the cursor is over the index number of a list, then all of the items in the row of the list are copied. For example, if the cursor is over the Num field in the Frame Relay Mapping screen, all of the information associated with the Map entry is copied.
P Pastes the item stored in the clipboard, if the information
in compatible. You must confirm all pastes except those to a single editable field.
> For certain types of fields, when you paste information
into the field, the value increments by 1.
< For certain types of fields, when you paste information
into the field, the value decrements by 1.
I Inserts a new item in a list. For example, add a new item
to the Connection List by pressing I while the cursor is over the index number.
D Deletes a list item. For example, delete an item from the
Connection List by pressing D while the index number is active.
20 Express L768/L1.5 User Manual 61202192L1-1
Security Levels
Each menu item on the configuration screens has an associated security level. The security level ranges from 0 (highest security level) to 5 (lowest security level). This level determines whether a Telnet session can access that menu item. The Telnet session is assigned a security level set by the user. Passwords can only be accessed as security level 0. The maintenance port is always at se­curity level 0.
The security levels are assigned as follows:
Level
0 Access all parameters including passwords 1 Access all parameters except passwords 2 Access all parameters except passwords and
3 Access all parameters except passwords,
4 Access only test and status menus 5 Access status menus only
Chapter 3: Terminal Menu Operation and Structure
authentication methods
authentication methods, and ISDN parameters
61202192L1-1 Express L768/L1.5 User Manual 21
Chapter 3: Terminal Menu Operation and Structure
CONFIGURATION MENU Configuration/System Info
The System Info menu provides basic information about the unit and displays data fields for editing information. Figure 3-2 displays the submenus avail­able under this menu item.
Figure 3-2
Configuration/System Info Screen
System Name
Write security: 3; Read security: 5 Provides a user-configurable text string for the name of the Express L768/L1.5. This name can help distinguish between different installations. You can enter up to 31 alpha-numeric characters in this field, including spaces and special characters (such as an under bar). The system name is also used for PPP au­thentication and IPX service name.
System Location
Write security: 3; Read security: 5 Provides a user configurable text string for the location of the Express L768/ L1.5. This helps to keep track of the physical location of the unit. You can enter
22 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
up to 31 alpha-numeric characters in this field, including spaces and special characters (such as an under bar).
System Contact
Write security: 3; Read security: 5 Provides a user-configurable text string for the contact name. This field can contain a name, phone number, or e-mail address of a person responsible for the Express L768/L1.5. You can enter up to 31 alpha-numeric characters in this field, including spaces and special characters (such as an under bar).
Firmware Revision
Read security: 5 Displays the current firmware revision level of the Express L768/L1.5. This field is a read-only field.
System Uptime
Read security: 5 Displays the length of time the Express L768/L1.5 has been running since power up or reset. This field is a read-only field.
Date/Time
Write security: 3; Read security: 5 Displays the current date and time as programmed in the real-time clock. This field can be edited. Enter the time in 24-hour format (such as 23:00:00 to rep­resent 11:00 PM). Enter the date in mm-dd-yyyy format (for example, 09-30-
1997).
61202192L1-1 Express L768/L1.5 User Manual 23
Chapter 3: Terminal Menu Operation and Structure
Configuration/WAN
The WAN menu is used to set up the ISDN parameters for the Express L768/ L1.5. Figure 3-3 shows the WAN menu.
WAN/HDSL
Figure 3-3
Configuration/WAN Screen
Write security: 2; Read security: 5 Selects the mode the HDSL line is in.
HDSL/Mode
Write security: 2; Read security: 5 The Express L768/L1.5 can be in two modes: HDSL Terminal Unit-Central (HTU-C) or HDSL Terminal Unit-Remote (HTU-R) (def). For HDSL synchro­nization, one unit must be HTU-C and one must HTU-R.
HDSL/Channel Rate
Write security: 2; Read security: 5 Determines the rate at which data is transferred over the HDSL link. Possible rates are 128K, 192K, 256K, 320K, 384K, 448K, 512K, 576K, 640K, 704K, 768K, and 1.536M (available with Express L1.5 only).
24 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
HDSL/NEBEs
Read security: 5 This contains the number of Near-End-Block-Errors (NEBEs) that have been detected by the Express L768/L1.5’s HDSL circuitry. Continuous errors can indicate a line problem, but a burst at one time is normal.
HDSL/FEBEs
Read security: 5 This contains the number of Far-End-Block-Errors (FEBEs) that have been de­tected by the HDSL circuitry on the other end of the link. Continuous errors can indicate a line problem, but a burst at one time is normal.
WAN/L2 Protocol
Write security: 3, Read security: 5 This parameter specifies the layer 2 data link layer transport used. When se­lected as PPP (def), the Express L768/L1.5 will negotiate PPP over the HDSL interface. This would be used mainly for campus wiring applications. Param­eters for controlling the PPP negotiation are in the Configuration/PPP Profile menu. Frame Relay should be selected when the Express L768/L1.5 is con­nected to a Frame Relay switch. The Configuration/WAN/Frame Relay menu is used for controlling the Frame Relay parameters.
61202192L1-1 Express L768/L1.5 User Manual 25
Chapter 3: Terminal Menu Operation and Structure
Configuration/IP
The IP menu is used to set up the IP parameters for the Express L768/L1.5. Any general IP-related configuration item is under this menu. Figure 3-4 shows the IP menu.
Figure 3-4
Configuration/IP Screen
IP/IP Address
Write security: 2; Read security: 5 The IP address assigned to the Express L768/L1.5’s Ethernet port is set here. This address must be unique within the network. Factory default is 10.0.0.1.
IP/Subnet Mask
Write security: 2; Read security: 5 The IP network mask to be applied to the Express L768/L1.5’s Ethernet port is set here. Factory default is 255.255.255.0.
IP/Default Gateway
Write security: 3; Read security: 5 The default gateway is used by the Express L768/L1.5 for sending IP packets
26 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
whose destination address is not found in the route table. If this address is all zeros, then the first WAN connection becomes the default gateway.
IP/Static Routes
Static Routes can be inserted under this menu.
Static Routes/Active
Write security: 4; Read security: 5 Adds this static route entry to the IP routing table when set to Yes (def) and removes it (if it was previously added) if set to No.
Static Routes/IP Address
Write security: 4; Read security: 5 This is the IP address of the host or network address of the device being routed to.
Static Routes/Subnet Mask
Write security: 4; Read security: 5 This mask determines the bits in the previous IP address that are used. If this is to be a host route, it must be set to all ones (255.255.255.255).
Static Routes/Gateway
Write security: 4; Read security: 5 This is the IP address of the router to receive the forwarded IP packet.
Static Routes/Hops
Write security: 4; Read security: 5 This is the number of router hops required to get to the network or host. Max­imum distance is 15 hops.
Static Routes/Private
Write security: 4; Read security: 5 When set to No, the Express L768/L1.5 will advertise this static route using RIP. Otherwise, setting to Yes means that the route is kept private.
61202192L1-1 Express L768/L1.5 User Manual 27
Chapter 3: Terminal Menu Operation and Structure
IP/IP Router
The IP router is configured under this menu as follows.
IP Router/Mode
Write security: 3; Read security: 5 When this option is set to On (def), the Express L768/L1.5 will advertise and listen to routes from other IP routers. If Off, the route table is still used but only static routes are used for routing IP packets and only the Ethernet port is used. IP packets can be sent over the WAN, but only when bridged.
IP/RIP
Write security: 3; Read security: 5 The Routing Information Protocol (RIP) is supported by the Express L768/ L1.5. The following parameters are required for setting up the mode on the Ethernet port:
RIP/Mode
Write security: 3; Read security: 5 This option turns RIP On (def) or Off
RIP/Protocol
Write security: 3; Read security: 5 Version can be V1 (def) or V2
RIP/Method
Write security: 3; Read security: 5
Split Horizon - Only routes not learned on the Ethernet port are advertised.
Poison Reverse (def) - All routes are advertised, including routes learned from the Ethernet port. These routes are poisoned.
None - All routes are advertised, including routes learned from the Ethernet port. No attempt is made to poison these routes.
28 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
RIP/Direction
Write security: 3; Read security: 5
Tx and Rx (def)- RIP advertisements are transmitted and listened to on the Ethernet port.
Tx only - RIP advertisements are transmitted and not listened to.
Rx only - RIP advertisements are listened to but not transmitted.
RIP/V2 Secret
Write security: 0; Read security: 0 This is a text string used for authenticating advertised routes.
IP/NAT
The Network Address Translation general parameters are set up under this menu.
NAT/DHCP Mode
Write security: 3; Read security: 5 When this option is set to On, the Express L768/L1.5 acts as a DHCP server and will dynamically assign IP, network mask, default gateway, and DNS ad­dresses to any device which transmits a broadcast DHCP request. The ad­dresses assigned are based on the Express L768/L1.5’s own IP address and will be within the same network. This mode is most commonly used with the NAT functionality. The default is Off.
NAT/DHCP Renewal Time
Write security: 3; Read security: 5 This is the number of hours that the DHCP server should allow the device be­fore it is required to send a new DHCP request. The default is 15 hours, and 0 represents an infinite lease.
NAT/Web Server
Write security: 3; Read security: 5 This is the IP address of a web server on the Ethernet network. When an active NAT connection is made to the Internet, any HTTP, FTP, or SMTP server re­quests from the WAN are translated and sent to this web server. Normally,
61202192L1-1 Express L768/L1.5 User Manual 29
Chapter 3: Terminal Menu Operation and Structure
communication across NAT must be initiated from the LAN side of the Ex­press L768/L1.5. Web Server allows a single machine on the NAT side to be accessed from the Internet side of NAT. This provides outside access to a web­server, mail, or ftp server.
NAT/Default IP
This is the IP address used by the Express L768/L1.5 for Network Address Translation when nothing is assigned during the PPP negotiation when PPP mode is active or when nothing is specified in the DLCI Mapping’s Link IP Address.
IP/DNS
The Domain Name Server parameters used by the Express L768/L1.5 are spec­ified here. The DNS server addresses can be exchanged between PPP peers. When a connection occurs and IPCP is negotiated, the Express L768/L1.5 will get the DNS server addresses from the PPP peer. If the configured DNS server addresses (Server 1 and Server 2) are all zeros, the addresses from the PPP peer are used. In NAT mode, the PPP peer’s DNS addresses are always used. The DNS addresses set in Server 1 and Server 2 are offered to a PPP peer if so requested.
DNS/Domain Name
Write security: 3; Read security: 5 This is a text string used to represent the domain name used by the Express L768/L1.5.
DNS/Server 1
Write security: 3; Read security: 5 This is the IP address for the primary DNS device. It is the first server that do­main name requests are sent.
DNS/Server 2
Write security: 3; Read security: 5 This is the IP address for the secondary DNS device. It is used as a back-up in case the primary address does not respond to the request.
30 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
IP/UDP Relay
The Express L768/L1.5 can be configured as a relay agent for UDP broadcast packets. Normally, a router will not forward UDP broadcast packets. How­ever, many network applications use UDP broadcasts to configure addresses, host names, and other information. If hosts using these protocols are not on the same network segment as the servers providing the information, the client programs will not receive a response without enabling the UDP relay agent.
UDP Relay/Mode
Write security: 3; Read security: 5 When this option is set to On (def), the Express L768/L1.5 will act as a relay agent.
UDP Relay/UDP Relay List
Up to four relay destination servers can be specified in this list.
UDP Relay List/Relay Address
Write security: 3; Read security: 5 This is the IP address of the server that will receive the relay packet.
UDP Relay List/UDP Port Type
Write security: 3; Read security: 5
Standard (def) - The following standard UDP protocols are relayed when set: DHCP, TFTP, DNS, NTP (Network Time Protocol, port 123). NBNS (NetBIOS Name Server, port 137), NBDG (NetBIOS Datagram, port 138), and BootP.
Specified - When set, the UDP port (1 to 65535) can be specified in the UDP Port columns. (up to a maximum of three per server)
UDP Relay List/UDP Port 1, UDP Port 2, UDP Port 3
Write security: 3; Read security: 5 UDP Port 1, UDP Port 2, and UDP Port 3 are used for specifying UDP ports to be relayed. These fields only apply when UDP Port Type is set to Specified.
61202192L1-1 Express L768/L1.5 User Manual 31
Chapter 3: Terminal Menu Operation and Structure
IP/Proxy ARP
Write security: 4; Read security: 5 This feature allows the network portion of a group of addresses to be shared among several physical network segments. The ARP protocol itself provides a way for devices to create a mapping between physical (i.e., Ethernet) address­es and logical IP addresses. Proxy ARP makes use of this mapping feature by instructing a router to answer ARP requests as a “proxy” for the IP addresses behind one of its ports. The device which sent the ARP request will then cor­rectly assume that it can reach the requested IP address by sending packets to the physical address that was returned to it. This technique effectively hides the fact that a network has been (further) subnetted. If this option is set to Yes (def), when an ARP request is received on the Ethernet port the address is looked up in the IP routing table. If the forwarding port is not on the Ethernet port and the route is not the default route, the Express L768/L1.5 will answer the request with its own hardware address. If set to No, the Express L768/L1.5 will only respond to ARP requests received for its own IP address.
32 Express L768/L1.5 User Manual 61202192L1-1
Configuration/IPX
The IPX menu is used to set up the IPX parameters for the Express L768/L1.5. Any general IPX-related configuration item can be found under this menu. Figure 3-5 shows the IPX menu.
Chapter 3: Terminal Menu Operation and Structure
Figure 3-5
Configuration/IPX Screen
IPX/Mode
Write security: 2; Read security: 5 When this option is set to On (def), the Express L768/L1.5 will route IPX. Set­ting it to Off will disable all IPX functionality.
IPX/Network
Write security: 2; Read security: 5 The IPX network address for the Ethernet port is set here. This is an eight-digit hexadecimal value that uniquely identifies the network segment of the Ether­net port. Accidental selection of an IPX network which is already in use on an­other network segment may cause hard-to-diagnose problems. IPX network numbers should be carefully tracked.
61202192L1-1 Express L768/L1.5 User Manual 33
Chapter 3: Terminal Menu Operation and Structure
IPX/Frame Type
Write security: 2; Read security: 5 The Express L768/L1.5 supports all four defined IPX frame types. The possi­ble frame types are: Ether Type II (def), Ether 802.3 (Raw), Ether 802.2, or Ether SNAP (802.2 SNAP). Only one frame type can be used at one time.
IPX/Seed Status
Write security: 2; Read security: 5 The seed status defines what the Express L768/L1.5 is to do with the network information on the selected frame type during startup. There are three possi­ble seeding selections specified:
Seed - The Express L768/L1.5 will listen for an IPX network number being sent by another router (including Novell software routers residing on servers) on the Ethernet segment connected to this port and use this number if it exists. If it does not discover a number in use, the Express L768/L1.5 will use the configured IPX network number for the Ethernet segment.
Non-Seed (def) - The Express L768/L1.5 will listen for an IPX network number being sent by another router (including Novell software routers residing on servers) on the Ethernet segment connected to this port and use this number if it exists. If it does not discover a number in use, the Express L768/L1.5 will wait indefinitely until a number is sent by another router on the Ethernet segment.
Auto-Seed - The Express L768/L1.5 will listen for an IPX network number being sent by another router (including Novell software routers residing on servers) on the Ethernet segment connected to this port and use this number if it exists. If it does not discover a number in use, the Express L768/L1.5 will auto-generate a valid number using its routing tables.
IPX/RIP Timer
Write security: 3; Read security: 5 This value specifies how often the Express L768/L1.5 sends out IPX RIP pack­ets on the network segment attached to the Ethernet port. The RIP packets sent contain routing information about the networks for which this Express L768/ L1.5 is responsible. The default value is 60 seconds.
34 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
IPX/SAP Timer
Write security: 3; Read security: 5 This value specifies how often the Express L768/L1.5 sends out IPX SAP (Ser­vice Access Protocol) packets on the network segment attached to the Ethernet port. The SAP packets sent contain information about the services (such as servers, printers, etc.) for which this Express L768/L1.5 is responsible. The de­fault value is 60 seconds.
61202192L1-1 Express L768/L1.5 User Manual 35
Chapter 3: Terminal Menu Operation and Structure
Configuration/Bridge
The Bridge menu is used to set up the bridge parameters for the Express L768/ L1.5. The bridging function runs at the Media Access Control (MAC) level which allows any protocol packets that run over Ethernet to be forwarded. Bridging can run concurrently with the IP and IPX routing. However, certain rules apply for when packets are bridged across a WAN connection. When IP routing is active, IP packets (which include ARP packets) are not bridged. When IPX routing is active, IPX packets are not bridged. Also, the WAN IP Bridge and WAN IPX Bridge menus allow the WAN connection to bridge packets to the Express L768/L1.5 but get routed as soon as they arrive at the unit. Figure 3-6 shows the Bridge menu.
Figure 3-6
Configuration/Bridge Screen
Bridge/Mode
Write security: 2; Read security: 5 When this option is set to On (def), the Express L768/L1.5 bridge function will be enabled. Setting it to Off will disable all bridge functionality.
Bridge/WAN IP Bridge
When IP routing is active, the Express L768/L1.5 will allow another WAN de­vice to bridge IP packets to it using PPP BCP. Normally, two IP routers would
36 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
negotiate PPP IPCP to exchange IP packets. However, if a device can only sup­port PPP BCP, IP packets are encapsulated by the device as bridge packets. The Express L768/L1.5 can treat the WAN IP Bridge as a virtual Ethernet port connected only to a WAN device which has negotiated PPP BCP. This menu allows the IP parameters for this virtual Ethernet to be set up.
WAN IP Bridge/Network
Write security: 2; Read security: 5 This is the IP address of the virtual Ethernet port.
WAN IP Bridge/Netmask
Write security: 2; Read security: 5 This is the network mask to be applied to the virtual Ethernet port.
WAN IP Bridge/Triggered
Write security: 2; Read security: 5 When set to Yes, only IP RIP updates are sent when the routing table has changed. When set to No (def), updates are sent periodically.
RIP version, method, and direction are determined by the Ethernet parameters set in the Configuration/IP/IP Router/RIP menu.
WAN IP Bridge/Proxy ARP
If this option is set to Yes (def), the Express L768/L1.5 will proxy ARP on the bridge IP port. See the section IP/Proxy ARP on page 32 for an explanation of the proxy ARP function.
Bridge/WAN IPX Bridge
When IPX routing is active, the Express L768/L1.5 will allow another WAN device to bridge IPX packets to it using PPP BCP. Normally, two IPX routers would negotiate PPP IPXCP to exchange IPX packets. However, if a device can only support PPP BCP, IPX packets are encapsulated by the device as bridge packets. The Express L768/L1.5 can treat the WAN IPX Bridge as a vir­tual Ethernet port connected only to a WAN device which has negotiated PPP BCP. This menu allows the IPX parameters for this virtual Ethernet to be set up.
61202192L1-1 Express L768/L1.5 User Manual 37
Chapter 3: Terminal Menu Operation and Structure
WAN IPX Bridge/Network
Write security: 2; Read security: 5 This is the network address of the virtual Ethernet port. See IPX/Network on page 33 for an explanation of the IPX network number.
WAN IPX Bridge/Frame Type
Write security: 2; Read security: 5 This is the frame type used for the virtual Ethernet port. See IPX/Frame Type on page 34 for an explanation of the IPX frame type.
WAN IPX Bridge/Seed Status
Write security: 2; Read security: 5 This is the seed status used for the virtual Ethernet port. See IPX/Seed Status on page 34 menu for an explanation of the IPX seed status.
WAN IPX Bridge/Triggered
Write security: 2; Read security: 5 When set to Yes, only IPX RIP and SAP updates are sent when the routing or service table has changed. When set to No (def), updates are sent periodically.
RIP and SAP periodic rates set for the Ethernet port (see IPX/RIP Timer on page 34 and IPX/SAP Timer on page 35) are used for the WAN IPX bridge port.
Bridge/Spanning Tree
The Spanning Tree Algorithm and Protocol ensures a loop-free topology and provides redundancy. The protocol parameters can be specifically tuned from their defaults, though most applications require no adjustment.
Spanning Tree/Mode
Write security: 2; Read security: 5 When the mode is set to On, the Express L768/L1.5 will participate in the Spanning Tree protocol between other bridges. When Off (def), all bridge ports remain permanently open for forwarding.
38 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Spanning Tree/Priority
Write security: 2; Read security: 5 This assigns a priority to the Express L768/L1.5 that permits the relative pri­ority of multiple bridges to be managed. The range is 0 to 65535 with a default of 32768.
Spanning Tree/Maximum Age
Write security: 2; Read security: 5 This is the timeout value used by the Express L768/L1.5 to test against the root device. The value is in one-tenth seconds with a range between 60 (6.0 sec­onds) and 400 (40.0 seconds). The default is 200 (20.0 seconds).
Spanning Tree/Hello Time
Write security: 2; Read security: 5 This is the time between the generation of configuration BPDUs (Bridging Pro­tocol Data Units) by the root bridge. The value is in one-tenth seconds with a range between 10 (1.0 second) and 100 (10.0 seconds). The default is 20 (2.0 seconds).
Spanning Tree/Forward Delay
Write security: 2; Read security: 5 This is the time spent in the listening and learning state while moving from the blocking state to the forwarding state. The value is in one-tenth seconds with a range between 40 (4.0 seconds) and 300 (30.0 seconds). The default is 150 (15.0 seconds).
Spanning Tree/LAN Port
The path cost and priority parameters for the Ethernet port are specified under this menu.
LAN Port/Active
Write security: 2; Read security: 5 The Ethernet port can be disabled when set to No. In this mode, no bridge traf­fic will be forwarded in or out. Setting to Yes (def) allows the port to partici­pate in the spanning tree topology.
61202192L1-1 Express L768/L1.5 User Manual 39
Chapter 3: Terminal Menu Operation and Structure
LAN Port/Path Cost
Write security: 2; Read security: 5 This is the cost of using the Ethernet port in the total cost of the path. The range is from 1 to 65535 with a default of 100 (for 10 Mbits/second).
LAN Port/Priority
Write security: 2; Read security: 5 The priority adjusts the relative priority of the Ethernet port among the multi­ple bridge ports. The range is 0 to 255 with a default of 128.
Spanning Tree/Bridge Group 1
The Bridge Group 1 is either the first PPP BCP connection or part of multiple DLCI destinations when running Bridge (RFC 1490) over Frame Relay.
Bridge Group 1/Active
Write security: 2; Read security: 5 The Bridge Group 1 port can be disabled when set to No. In this mode, no bridge traffic will be forwarded in or out. Setting to Yes (def) allows the port to participate in the Spanning Tree topology.
Bridge Group 1/Path Cost
Write security: 2; Read security: 5 This is the cost of using the Bridge Group 1 in the total cost of the path. The range is from 1 to 65535 with a default of 1302 (for 768 kbits/second).
Bridge Group 1/Priority
Write security: 2; Read security: 5 The priority adjusts the relative priority of the Bridge Group 1 among the mul­tiple bridge ports. The range is 0 to 255 with a default of 128.
Spanning Tree/Bridge Group 2
Bridge Group 2 is part of multiple DLCI destinations when running Bridge (RFC 1490) over Frame Relay.
Bridge Group 2/Active
Write security: 2; Read security: 5 This setup is exactly like Bridge Group 1 above.
40 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Bridge Group 2/Path Cost
Write security: 2; Read security: 5 This setup is exactly like Bridge Group 1 above.
Bridge Group 1/Priority
Write security: 2; Read security: 5 This setup is exactly like Bridge Group 1 above.
Bridge/Address Table
The Express L768/L1.5 automatically maintains a table of MAC addresses de­tected and associates those addresses with the LAN, WAN0, or WAN1 port from which they were received. WAN 0 represents Bridge Group 1, and WAN1 represents Bridge Group 2. This menu permits the user to adjust the parameters or rules for the table as addresses are learned.
Address Table/Aging
Write security: 3; Read security: 5 This is the maximum time an idle MAC address remains in the table before be­ing removed. The value is in minutes and can range from 0 (which means nev­er age) to 65535. The default is 5.
Address Table/Forward Policy
Write security: 3; Read security: 5 When this parameter is set to Unknown (def), any bridge packet with a desti­nation MAC address that is not in the bridge table is forwarded to all other ports. When set to Known, the packet with the unknown destination MAC address is dropped and is not forwarded.
61202192L1-1 Express L768/L1.5 User Manual 41
Chapter 3: Terminal Menu Operation and Structure
Configuration/Security
The Security menu is used to set up the authentication parameters needed to authenticate PPP connection. Also, the filter defines are placed under this menu. Figure 3-7 shows the Security menu.
Figure 3-7
Configuration/Security Screen
Security/Authentication
Write security: 1; Read security: 2 The method used for authenticating the PPP peer is selected here. The possi­ble values are:
None (def) - No attempt is made to authenticate the PPP peer.
Radius - The Express L768/L1.5 will act as a RADIUS client and
authenticate the PPP peer using the RADIUS server. The Radius server parameters must be set up properly for this to work.
PPP Profile - The PPP profile is used to authenticate the PPP peer.
See Configuration/PPP Profile on page 56 for more information on authenticating.
42 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Security/Radius Server
The parameters for the radius server are configured in this menu. The RADI­US server can be used for authenticating a PPP peer (if defined under Security/ Authentication) and for Telnet server sessions.
Radius Server/Primary Server
Write security: 1; Read security: 2 This is the IP address of the first RADIUS server that the Express L768/L1.5 should attempt to communicate with when authenticating a PPP peer.
Radius Server/Secondary Server
Write security: 1; Read security: 2 This is the IP address of the back-up RADIUS server that the Express L768/ L1.5 should attempt to communicate with when the primary server does not respond.
Radius Server/UDP Port
Write security: 1; Read security: 2 This is the UDP port that the Express L768/L1.5 should use when communi­cating with the RADIUS server. The default is 1645, which is the commonly used port.
Radius Server/Secret
Write security: 0; Read security: 1 The RADIUS server and Express L768/L1.5 share this text string, which is used by the RADIUS sever to authenticate the Express L768/L1.5 that is the RADIUS client. The factory default is not to use a secret.
Radius Server/Retry Count
Write security: 1; Read security: 2 This is the number of times the Express L768/L1.5 should send a request pack­et to the RADIUS server without a response before giving up. If the number of attempts to communicate with the primary server is equal to the retry count, the secondary server (if defined) is tried. If the secondary server does not
61202192L1-1 Express L768/L1.5 User Manual 43
Chapter 3: Terminal Menu Operation and Structure
respond within the retry count, the PPP peer (or Telnet session) is not authen­ticated and is dropped. The default is 5.
Security/PPP
Write security: 1; Read security: 2 The PPP peer can be authenticated using three standard methods: PAP (Pass­word Authentication Protocol), CHAP (Challenge Handshake Protocol) and EAP (Extensible Authentication Protocol). The strength of the authentication is determined in the order EAP, CHAP, followed by PAP, where EAP is the strongest and PAP is the weakest. PAP is a clear-text protocol, which means it is sent over the PPP link in a readable format. Care must be taken not to al­low highly sensitive passwords to become compromised using this method. CHAP and EAP use a one-way hashing algorithm which makes it virtually im­possible to determine the password. EAP has other capabilities which allow more flexibility than CHAP.
The following selections are possible:
PAP, CHAP or EAP (def) - The Express L768/L1.5 will ask for EAP during the first PPP LCP negotiation and allow the PPP peer to negotiate down to CHAP or PAP.
CHAP or EAP - The Express L768/L1.5 will ask for EAP during the first PPP LCP negotiation and allow the PPP peer to negotiate down to CHAP but not PAP.
EAP - The Express L768/L1.5 will only allow EAP to be negotiated. If the PPP peer is not capable of doing EAP, then the connection will not succeed.
Security/Filter Defines
The Express L768/L1.5 can filter packets based on certain parameters within the packet. The method used by the Express L768/L1.5 allows the highest flexibility for defining filters and assigning them to a profile. The filters are set up in two steps: (1) defining the packet types, and (2) adding them to a list un­der the PPP profile or DLCI map. See the section DLCI Mapping/Filters on page 54 for examples of how to set up filter profiles. This menu is used to de­fine the individual filter defines based on packet type.
44 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Filter Defines /MAC Filter Defines
Write security: 2; Read security: 3 The MAC filter is applied to bridge packets only. Bridge packets which are for­warded by the bridge functionality of the Express L768/L1.5 are defined here. Up to 32 MAC defines can be specified.
Name Identifies the filter entry Src Addr 48-bit MAC source address used for comparison.
(hexadecimal format)
Src Mask Bits in the MAC source address which
are compared. (hexadecimal format)
Dest Addr 48-bit MAC destination address used
for comparison. (hexadecimal format)
Dest Mask Bits in the MAC destination address used
for comparison. (hexadecimal format)
MAC Type 16-bit MAC type field used for comparison.
(hexadecimal format)
Type Msk Bits in the MAC type field used for comparison.
(hexadecimal format)
Filter Defines /Pattern Filter Defines
Write security: 2; Read security: 3 The pattern filter is applied to bridge packets only. That is any packet which is forwarded by the bridge functionality of the Express L768/L1.5. Up to 32 pattern defines can be specified.
Name Identifies the filter entry Offset Offset from beginning of packet of where to start
the pattern comparison
Pattern 64 bits used for comparison.
(hexadecimal format)
Mask Bits in the pattern to be compared.
(hexadecimal format)
61202192L1-1 Express L768/L1.5 User Manual 45
Chapter 3: Terminal Menu Operation and Structure
Filter Defines /IP Filter Defines
Write security: 2; Read security: 3 The IP filter defines apply to any IP packet, whether it is routed or bridged. Up to 32 IP defines can be specified.
Name Identifies the filter entry IP Src IP address compared to the source address.
(dotted decimal format)
Src Mask Bits which are used in the source comparison.
(dotted decimal format)
IP Dest IP address compared to the destination address.
(dotted decimal format)
Dest Mask Bits which are used in the destination
comparison. (dotted decimal format)
Src Port IP source port number used for comparison
Range: 0 to 65535. (decimal format)
Src Port Cmpr Type of comparison that is performed
= - means ports equal to not = - means port not equal to > - means port greater than < - means port less than None - means the source port is not compared
Dst Port IP destination port number used for
comparison Range: 0 to 65535. (decimal format)
Dst Port Cmpr Type of comparison that is performed
= - means ports equal to not = - means port not equal to > - means port greater than < - means port less than None - means the destination port is not
compared
Proto Protocol used for comparison. Range: 0 to 255.
(decimal format)
Proto Cmpr Type of comparison that is performed
= - means protocols equal to not = - means protocols not equal to > - means protocols greater than < - means protocols less than None - means the protocol is not compared
TCP Est Yes - only when TCP established
No - only when TCP not established Ignore - ignore TCP flags
46 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Filter Defines /IPX Filter Defines
Write security: 2; Read security: 3 The IPX filter defines apply to any IPX packet whether it is routed or bridged. Also, any IPX encapsulation type will be accounted for. Up to 32 IPX defines can be specified.
Name Identifies the filter entry (15 characters max) Src Net 32-bit source network address Src Mask Bits in the source network address which are
compared. (hexadecimal format)
Dest Net 32-bit destination network address Dest Mask Bits in the destination network address which
are compared. (hexadecimal format)
Src Socket 16-bit value which is the source socket.
Range: 0-65535.
Src Socket Comp Type of comparison that is performed:
= - means socket equal to Not = - means socket not equal to > - means socket greater than < - means socket less than None - no comparison is done on source
socket
Dest Socket 16-bit value which is the destination socket.
Range: 0-65535.
Dest Socket Comp Type of comparison that is performed:
= - means socket equal to Not = - means socket not equal to > - means socket greater than < - means socket less than None - no comparison is done on destination
socket
Type 8-bit value which is the IPX type Type Comp Type of comparison that is performed:
= - means type equal to Not = - means type not equal to > - means type greater than < - means type less than None - no comparison is done on IPX type
61202192L1-1 Express L768/L1.5 User Manual 47
Chapter 3: Terminal Menu Operation and Structure
Configuration/Frame Relay
Frame Relay is a connection-oriented service requiring circuits to be config­ured by your carrier to establish a physical link between two or more locations. Multiple virtual circuits (which appear as virtual point-to-point links) can be run through the same physical connection.
There are two types of virtual circuits supported in Frame Relay: Permanent Virtual Circuits (PVC) and Switched Virtual Circuit (SVC). PVCs are like ded­icated point-to-point private lines. Since the physical connection is always there in the form of a leased line, call setup and tear down is done by a carrier via a network management system. SVCs require setup and tear down and are generally not available from Frame Relay carriers. Virtually all Frame Relay communications is done using PVCs. The Express L768/L1.5 supports PVCs only.
A number called the Data Link Connection Identifier (DLCI) identifies each virtual circuit within a shared physical channel.
Figure 3-8 shows the Frame Relay menu.
Figure 3-8
Configuration/Frame Relay Screen
48 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Frame Relay/Maintenance Protocol
Write security: 3, Read security: 5 The Frame Relay maintenance protocol is used on the WAN port. The main­tenance protocol is used to send link status and virtual circuit information be­tween Frame Relay switches and other devices (such as routers) that communicate with them. Possible choices are listed below.
Annex D (def) - This is an ANSI standard and is the most commonly used standard in the US.
Annex A - This is the CCITT European standard.
LMI - This was developed by a vendor consortium and is also known
as the “consortium” management interface specification. It is still used by some carriers in the U.S.
Static - This should be selected when there is no Frame Relay switch in the circuit. The DLCIs are assigned in the DLCI Mapping and must be the same for the device it will communicate with.
Frame Relay/Polling Frequency
Write security: 3, Read security: 5 This parameter is the interval that the Express L768/L1.5 polls the Frame Re­lay switch using the maintenance protocol selected above. The Express L768/ L1.5 is required to poll the Frame Relay switch periodically to determine whether the link is active. The value is in seconds and ranges from 5 to 30 sec­onds with a default of 15 seconds.
Frame Relay/DLCI Mapping
This menu allows each DLCI to be mapped to a particular Frame Relay main­tenance protocol. Each protocol parameter can be individually configured for each DLCI. By factory default, the DLCI map is empty.
When empty and a maintenance protocol other than static is used, the Express L768/L1.5 will poll the switch to determine which DLCIs are active. These ac­tive DLCIs will attempt to determine the IP and IPX addresses on the other end of the virtual circuit using Inverse ARP (IARP). If there is a response, the net­work learned will be added to the router tables and the virtual circuit will be treated as an unnumbered interface. Bridge mode is not attemped in this case.
61202192L1-1 Express L768/L1.5 User Manual 49
Chapter 3: Terminal Menu Operation and Structure
When more than one DLCI mapping is listed, the Express L768/L1.5 will try to match the DLCIs learned from the Frame Relay switch with the DLCI values in the map. If there is a match, the protocols specified in the map are used. However, if an active DLCI is not in the list it looks for an entry that has 0 in the DLCI field. This entry is considered the default entry to use when no match occurs. If this default entry is not present, the Express L768/L1.5 falls back to using IARP as in the previous paragraph to determine the protocols to use with that particular virtual circuit. If a static maintenance protocol is used, at least one DLCI mapping must be specified.
To insert a new profile, press the I key when over the Num column. A new inserted profile will always be set up with the default parameters. To copy parameters from an old profile to this newly inserted profile, use the copy (C) and paste (P) keys. Entire configuration trees can be copied with this method.
To delete an unused profile, use the D key when the cursor is over the number in the Num column. Once deleted, the profile is gone permanently as soon as the DLCI Map­ping is saved. Items may be deleted when DEL appears below the status bar.
DLCI Mapping/Active
Write security: 3, Read security: 5 When this parameter is set to Yes (def), the mapping is used to determine the protocols used. If set to No, the Express L768/L1.5 will ignore the virtual cir­cuit with this DLCI.
DLCI Mapping/DLCI
Write security: 3, Read security: 5 This is the DLCI associated with this virtual circuit. This value can range from 16 to 1007.
DLCI Mapping/IP Map
Write security: 3, Read security: 5 This menu represents the IP protocol mapping that is to take place for this DL­CI.
IP Map/Active
Write security: 3, Read security: 5 When this is set to Yes (def), the Express L768/L1.5 will attempt to transport IP packets for this DLCI. A setting of No means that no IP traffic or route will be exchanged.
50 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
IP Map/IARP
Write security: 3, Read security: 5 When this is set to Yes (def), the Express L768/L1.5 will send Inverse ARP packets in order to determine the IP address on the other end of the virtual cir­cuit. If the IARP is responded to, a route is placed in the IP route table. A set­ting of No means that the route address is to be assigned statically using the IP Map/Far-End IP Address parameter. The Express L768/L1.5 will always respond to Inverse ARP requests.
IP Map/Far-End IP Address
Write security: 3, Read security: 5 This is the IP address of the device on the other end of the virtual circuit. When this DLCI becomes active, the Express L768/L1.5 will add a route in the IP routing table.
IP Map/IP Netmask
Write security: 3, Read security: 5 The IP network mask to apply to the Far-End IP Address and Link IP Address is specified here.
IP Map/Link IP Address
Write security: 3, Read security: 5 The virtual circuit may require an IP address to be specified at this DLCI inter­face. This is called a numbered interface. This address is used by the Express L768/L1.5 to respond to Inverse ARP requests. If this IP address is left as
0.0.0.0, the link is treated as unnumbered and the Express L768/L1.5 responds to the Inverse ARP with its Ethernet IP address.
IP Map/RIP Protocol
Write security: 3, Read security: 5 The RIP protocol can be specified per DLCI. The possible selections are Off (meaning no RIP packets are listened to or sent), V1 (def) (which is RIP version
1) or V2 (which is RIP version 2).
61202192L1-1 Express L768/L1.5 User Manual 51
Chapter 3: Terminal Menu Operation and Structure
IP Map/RIP Method
Write security: 3, Read security: 5 The way the RIP protocol sends out its advertisements is specified here:
None - All routes in the router table are advertised out this virtual circuit with no modification of the metrics.
Split Horizon (def) - Only routes not learned from this particular virtual circuit are advertised.
Poison Reverse - All routes are advertised, but the routes learned from this port are “poisoned” with an infinite metric.
IP Map/RIP Direction
Write security: 3, Read security: 5 This parameter allows the direction at which RIP advertisements are sent and listened to be specified.
Tx and Rx (def) - RIP advertisements are periodically transmitted and are listened to on this virtual circuit.
Tx Only - RIP advertisements are periodically transmitted but are not listened to on this virtual circuit.
Rx Only - RIP is not transmitted on this virtual circuit but they are listened to.
IP Map/NAT
The Express L768/L1.5 can perform Network Address Translation over a PVC. Setting this option to On will cause the Express L768/L1.5 to translate between the Ethernet addresses and the configured Link IP Address. Only one PVC may be used for translation at one time. If more than one IP Map is configured for NAT, the first PVC which is activated becomes the NAT port.
DLCI Mapping/IPX Map
This menu represents the IPX protocol mapping that is to take place for this DLCI.
IPX Map/Active
Write security: 3, Read security: 5 When this is set to Yes (def), the Express L768/L1.5 will attempt to transport IPX packets for this DLCI. A setting of No means that no IPX traffic or route will be exchanged.
52 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
IPX Map/IARP
Write security: 3, Read security: 5 When this is set to Yes (def), the Express L768/L1.5 will send Inverse ARP packets to determine the IPX network on the other end of the virtual circuit. If the IARP is responded to, a route is placed in the IPX route table. A setting of No means that the IPX network is to be assigned to the link statically using the IPX Map/Link Network parameter. The Express L768/L1.5 will always re­spond to Inverse ARP requests.
IPX Map/Link Network
Write security: 3, Read security: 5 This is the IPX network of the link or of the other device’s LAN. When this DLCI becomes active, the Express L768/L1.5 will add a route to this network in the IPX routing table. This address is also used by the Express L768/L1.5 to respond to Inverse ARP requests. If this IPX address is left as 0, the link is treated as unnumbered and the Express L768/L1.5 responds to the Inverse ARP with its Ethernet IPX address.
DLCI Mapping/Bridge Map
This menu is used to permit bridging of packets over this DLCI. Each DLCI or virtual circuit must be assigned a bridge group. The bridge group treats all virtual circuits as one circuit. Bridge packets destined to be transmitted out a particular bridge group are copied and transmitted individually out each DLCI in the bridge group. However, incoming bridge packets received from one DLCI are not retransmitted out the other DLCIs in the same bridge group. Any device in the bridge group must transmit to each DLCI. This requires a fully meshed circuit, meaning each device has a virtual circuit to each other.
Bridge Map/Active
Write security: 3, Read security: 5 When this is set to Yes (def), the Express L768/L1.5 will bridge packets to and from this DLCI. Bridge packets are any packets that are not IP or IPX packets except when the router is turned off, in which case that particular router’s pro­tocol packets are bridged. A setting of No means that no bridging will occur.
Bridge Map/Bridge Group
Write security: 3, Read security: 5 The bridge group that this DLCI is part of is specified here as Group 1 or Group 2. These groups correspond to the spanning tree protocols Bridge Group 1 and Bridge Group 2.
61202192L1-1 Express L768/L1.5 User Manual 53
Chapter 3: Terminal Menu Operation and Structure
DLCI Mapping/Filters
The Express L768/L1.5 can block packets in and out of a PVC port by use of the filters. They are set up in two steps: 1) define the types of packets that would be of interest in the Configuration/Security/Filter Defines menu, and
2) set up the filter type and combination of defines that will cause a packet
block.
Filters/In from PVC
Write security: 2; Read security: 5 The packets which come into the Express L768/L1.5 via this PVC can be fil­tered in three ways:
Disabled (def) - Turns off packet input filtering. No incoming packets from this PVC are blocked.
Block All - All incoming packets from this PVC are blocked except as defined in the Filters/In Exceptions list.
Forward All - All incoming packets from this PVC are not blocked except as defined in the Filters/In Exceptions list.
Filters/In Exceptions
Write security: 2; Read security: 5 This is a list of up to 32 filter entries which can be combined using the opera­tions field. The operations are performed in the order they appear on the list.
Active - Turns this entry active when set to On.
Type - Selects the filter define list to reference:
MAC - from the Configuration/Security/Filter
Defines/MAC Filter Defines list.
Pattern - from the Configuration/Security/Filter
Defines/Pattern Filter Defines list.
IP - from the Configuration/Security/Filter
Defines/IP Filter Defines list.
IPX - from the Configuration/Security/Filter
Defines/IPX Filter Defines list.
Filter List Name - Selects between filters defined in the list.
54 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Next Oper - The next operation to use to combine with the next filter in the list:
END - the last filter to combination. AND - logically AND this filter with the next filter
in the list.
OR - logically OR this filter with the next filter in
the list.
Filters/Out to PVC
Write security: 2; Read security: 5 The packets which transmit out this PVC from the Express L768/L1.5 can be filtered in three ways:
Disabled (def) - Turns off packet output filtering. No outgoing packets to this PVC are blocked.
Block All - All outgoing packets to this PVC are blocked except as defined in the Filters/Out Exceptions list.
Forward All - All outgoing packets to this PVC are not blocked except as defined in the Filters/Out Exceptions list.
Filters/Out Exceptions
Write security: 2; Read security: 5 This is a list of up to 32 filter entries. The setup is exactly the same as the Filter/ In Exceptions list.
61202192L1-1 Express L768/L1.5 User Manual 55
Chapter 3: Terminal Menu Operation and Structure
Configuration/PPP Profile
The Express L768/L1.5 uses the PPP profile to specify the profile used when connected using PPP.
Figure 3-9 shows the PPP profile menu.
Figure 3-9
Configuration/PPP Profile Screen
PPP Profile/Authentication
The authentication menu contains the required parameters for the authentica­tion of the PPP peer and for being authenticated by the PPP peer.
Authentication is applied between the Express L768/L1.5 and the PPP peer as follows:
56 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Authentication/Tx Method
Write security: 2; Read security: 3 This parameter specifies how the Express L768/L1.5 is to be authenticated by the PPP peer. There are four possible selections. See Security/PPP on page 44 for an explanation of the three PPP standard authentication types.
None (def) - The connection will not allow the PPP peer to authenticate it.
PAP, CHAP or EAP - The connection can be authenticated using PAP, CHAP or EAP.
CHAP or EAP - The connection can be authenticated using CHAP or EAP only.
EAP - The connection will only allow authentication by the peer using EAP.
Authentication/Tx Username
Write security: 1; Read security: 3 This is the username that is used when being authenticated by the PPP peer.
Authentication/Tx Password
Write security: 0; Read security: 1 This is the password or secret that is used when being authenticated by the PPP peer.
Authentication/Rx Username
Write security: 1; Read security: 3 This is the username used to authenticate the PPP peer.
Authentication/Rx Password
Write security: 0; Read security: 1 This is the password or secret that is used to authenticate the PPP peer.
61202192L1-1 Express L768/L1.5 User Manual 57
Chapter 3: Terminal Menu Operation and Structure
PPP Profile/IP
The IP menu contains the parameters for exchanging IP data with the PPP peer.
IP/Mode
Write security: 3; Read security: 5 Setting to On (def) will permit this connection profile to negotiate PPP IPCP with the PPP peer for exchanging of IP packets.
IP/NAT
Write security: 3; Read security: 5 The Express L768/L1.5 can perform Network Address Translation. This fea­ture is most widely used when connecting to the Internet. The Ethernet net­work can consist of private network numbers. When this profile is connected, all IP addresses on the Ethernet side are translated into the one real IP address negotiated with the PPP peer (ISP). Multiple stations on the Ethernet side can access the Internet simultaneously. See the section IP/NAT on page 29 for more global options. Setting this option to On will cause the Express L768/ L1.5 to perform NAT. In the Off (def) position, the unit will route across the connection normally.
IP/Route
The IP parameters are configured in this menu. Usually the Express L768/L1.5 will automatically discover the PPP peer’s networks using PPP IPCP and/or RIP.
Route/IP/Net
Write security: 3; Read security: 5 The PPP peer’s IP address or network can be set here, if known. Leaving this at 0.0.0.0 means that the Express L768/L1.5 will determine the PPP peer’s IP and network using the PPP IPCP.
Route/Netmask
Write security: 3; Read security: 5 This network mask is applied to the IP/NET address for determining the PPP peer’s network. If left as 0.0.0.0, a standard network mask is used.
58 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Route/Force IP
Write security: 3; Read security: 5 When set to Yes, the Express L768/L1.5 will force the PPP peer to use the IP address in the IP/Net for this profile as its WAN IP address. Normally this is set in the No (def) position.
IP/RIP
The RIP parameters can be adjusted from their defaults under this menu.
RIP/Mode
Write security: 3; Read security: 5 The Express L768/L1.5 will perform RIP over the WAN connection when this is set to On (def).
RIP/Protocol
Write security: 3; Read security: 5 The Express L768/L1.5 can perform version 1, V1 (def), or version 2, V2, of RIP on this WAN connection.
RIP/Method
Write security: 3; Read security: 5
Split Horizon - Only routes not learned on the WAN connection are advertised.
Poison Reverse (def) - All routes are advertised, including routes learned from the WAN connection. These routes are poisoned.
None - All routes are advertised, including routes learned from the WAN connection. No attempt is made to poison these routes.
RIP/Direction
Write security: 3; Read security: 5
Tx and Rx (def)- RIP advertisements are transmitted and listened to on the WAN connection.
Tx only - RIP advertisements are transmitted and not listened to.
Rx only - RIP advertisements are listened to but not transmitted.
61202192L1-1 Express L768/L1.5 User Manual 59
Chapter 3: Terminal Menu Operation and Structure
RIP/Triggered
Write security: 3; Read security: 5 When set to Yes, only IP RIP updates are sent when the routing table has changed and learned routes are not “aged.” When set to No (def), updates are sent periodically.
PPP Profile/IPX
The IPX menu contains the parameters for exchanging IPX data with the PPP peer.
IPX/Mode
Write security: 3; Read security: 5 Setting to On (def) will permit this connection profile to negotiate PPP IPXCP with the PPP peer for exchanging of IPX packets.
IPX/Remote Network
Write security: 3; Read security: 5 A non-zero value in this remote network number will allow the Express L768/ L1.5 to add a route to the PPP peer’s network to the routing table. The Express L768/L1.5 normally will treat the WAN network as an unnum­bered link. This is usually referred to as being a “half-router.” However, a PPP peer which wants to assign a network address to the WAN link can do so, in which case the Express L768/L1.5 will go into “full-router” mode.
IPX/Triggered
Write security: 3; Read security: 5 When set to Yes, only IPX RIP and SAP updates are sent when the routing or service table has changed and learned routes are not “aged.” When set to No (def), updates are sent periodically based on the RIP and SAP timers set in Configuration/IPX/RIP Timer and Configuration/IPX/SAP Timer.
IPX/Type 20 Packets
Write security: 3; Read security: 5 In order for certain protocol implementations, like NetBIOS, to function in the NetWare environment, routes must allow a broadcast packet to be propagated throughout the IPX networks. The Type 20 IPX packet is used specifically for
60 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
this purpose. This causes special handling of this packet by the Express L768/ L1.5. When a router receives this type of packet, it rebroadcasts it across all interfaces except the one it is received on and includes the network number of that interface in the data portion of the packet. The IPX Router Specification from Novell notes that Type 20 packets should not be propagated across slow­er links with bandwidths of less than 1Mbps (like ISDN). However, when set to Pass (def), the Express L768/L1.5 will allow these packets to propagate over the WAN connection. This facilitates dial-on-demand applications. When set to Block, all Type 20 packets are not propagated across the WAN connection.
PPP Profile/Bridge
The Bridge menu contains the parameters needed for exchanging bridged packets with the PPP peer.
Bridge/Mode
Write security: 3; Read security: 5 When set to On (def), the Express L768/L1.5 will attempt to negotiate PPP BCP with the PPP peer. Bridging can be used even in route mode only if the PPP peer cannot support certain PPP protocols for that particular routing pro­tocol. See Bridge/WAN IP Bridge on page 36 and Bridge/WAN IPX Bridge on page 37 for further details.
PPP Profile/PPP
The Express L768/L1.5 supports the IETF standards for the Point-to-Point Pro­tocol. The PPP state machine running in the Express L768/L1.5 can be fine­tuned to support many applications that can be employed. The configurable items under this menu can be changed from their default values for special cases.
PPP/VJ Compression
Write security: 3; Read security: 5 When this item is set to On, the Express L768/L1.5 will perform TCP/IP head­er compression known as Van Jacobson compression to the PPP peer. Normal­ly, this is not necessary over ISDN connections and can be set to Off (def) to disable it.
61202192L1-1 Express L768/L1.5 User Manual 61
Chapter 3: Terminal Menu Operation and Structure
PPP/Max Config
Write security: 3; Read security: 5 This value is the number of unanswered configuration-requests that should be transmitted before giving up on a call. The possible values are 5, 10 (def), 15 and 20.
PPP/Max Timer
Write security: 3; Read security: 5 This value is the number of seconds to wait between unanswered configura­tion-requests. The possible values are 1 sec, 2 secs (def), 3 secs, 5 secs and 10 secs.
PPP/Max Failure
Write security: 3; Read security: 5 Due to the nature of PPP, configuration options may not be agreed upon be­tween two PPP peers. This value is the number of configuration-naks that should occur before an option is configuration-rejected. This allows a connec­tion to succeed that might otherwise fail. The possible values are 5 (def), 10, 15 and 20.
PPP Profile/Filters
The Express L768/L1.5 can block packets in and out of a WAN port by use of the filters. They are set up in two steps: 1) define the types of packets that would be of interest in the Configuration/Security/Filter Defines menu, and
2) set up the filter type and combination of defines that will cause a packet
block.
Filters/WAN-to-LAN (In)
Write security: 2; Read security: 5 The packets which come into the Express L768/L1.5 can be filtered in three ways:
Disabled (def) - Turns off packet input filtering. No incoming packets are blocked.
Block All - All incoming packets from the WAN are blocked except as defined in the Filters/In Exceptions list.
62 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Forward All - All incoming packets from the WAN are not blocked except as defined in the Filters/In Exceptions list.
Filters/In Exceptions
Write security: 2; Read security: 5 This is a list of up to 32 filter entries which can be combined using the opera­tions field. The operations are performed in the order they appear on the list.
Active - Turns this entry active when set to On.
Type - Selects the filter define list to reference:
MAC - from the Configuration/Security/Filter
Defines/MAC Filter Defines list.
Pattern - from the Configuration/Security/Filter
Defines/Pattern Filter Defines list.
IP - from the Configuration/Security/Filter
Defines/IP Filter Defines list.
IPX - from the Configuration/Security/Filter
Defines/IPX Filter Defines list.
Filter List Name - Selects between filters defined in the list.
Next Oper - The next operation to use to combine with the next
filter in the list:
END - the last filter to combination. AND - logically AND this filter with the next filter
in the list.
OR - logically OR this filter with the next filter in
the list.
61202192L1-1 Express L768/L1.5 User Manual 63
Chapter 3: Terminal Menu Operation and Structure
Filters/LAN-to-WAN (Out)
Write security: 2; Read security: 5 The packets which come out toward the WAN from the Express L768/L1.5 can be filtered in three ways:
Disabled (def) - Turns off packet output filtering. No outgoing packets are blocked.
Block All - All outgoing packets to the WAN are blocked except as defined in the Filters/Out Exceptions list.
Forward All - All outgoing packets to the WAN are not blocked except as defined in the Filters/Out Exceptions list.
Filters/Out Exceptions
Write security: 2; Read security: 5 This is a list of up to 32 filter entries. The setup is exactly the same as the Filter/ In Exceptions list.
64 Express L768/L1.5 User Manual 61202192L1-1
Configuration/Management
The Express L768/L1.5 can be managed using Telnet, Simple Network Man­agement Protocol (SNMP), or the maintenance port. See Appendix C on page 99 for a description of the MIBs supported by the Express L768/L1.5. Each of the three methods can be protected using authentication. Figure 3-10 shows the Configuration/Management menu.
Chapter 3: Terminal Menu Operation and Structure
Figure 3-10
Configuration/Management Screen
Management/Telnet
Any Telnet client application can bring up a session to the Express L768/L1.5’s Telnet server using the standard Telnet TCP port. Only one session is support­ed at a time. All sessions require a user name and password.
Telnet/Server Access
Write security: 2; Read security: 5 This option must be set to On (def) to access the Express L768/L1.5 via Telnet. Turning it Off means that access is denied.
61202192L1-1 Express L768/L1.5 User Manual 65
Chapter 3: Terminal Menu Operation and Structure
Telnet/User List
Up to four users can be configured for access to the Express L768/L1.5. Each user can be assigned a privilege and time out.
User List/Name
Write security: 1; Read security: 3 A text string of the user name for this session.
User List/Authen Method
Write security: 1; Read security: 3 The user can be authenticated in two ways:
Password - The Password field is used to authenticate the user.
Radius - The Radius client is used for authenticating the user.
User List/Password
Write security: 0; Read security: 3 When the authenticating method is password, this text string is used for the password.
User List/Idle Time
Write security: 1; Read security: 3 When set to non-zero, the session is automatically logged out when no activity occurs for this amount of time. The range is 0 to 255 and is in minutes. The default is 10 minutes, and a setting of 0 will never time-out the session. When a timeout occurs during an edit session, all changes are saved.
User List/Level
Write security: 0; Read security: 1 This is the security level privilege that is assigned for this user. See Security Levels on page 21 for an explanation of what those levels imply. Level 0 is the default.
66 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Management/SNMP
The Express L768/L1.5 is an SNMP agent. It can respond to Get-Requests, Set­Requests, and generate traps. These two lists set up the manager, communi­ties, and levels. See Appendix C on page 99 for more information on SNMP.
SNMP Access
Write security: 3; Read security: 5 When set to No, SNMP access is denied. When set to On (def), the Express L768/L1.5 will respond to SNMP managers based on the following lists.
SNMP/Communities
This list is used to set up to eight SNMP communities’ names that the Express L768/L1.5 will allow. Factory default sets the community “public” with “Get” privileges.
Communities/Name
Write security: 1; Read security: 3 This is a text string for the community name.
Communities/Privilege
Write security: 1; Read security: 3 The access for this manager can be assigned three levels.
None - No access is allowed for this community or manager.
Get - Manager can only read items.
Get/Set - Manager can read and set items.
Communities/Manager IP
Write security: 1; Read security: 3 This is the IP address of SNMP manager. If set to 0.0.0.0, any SNMP manager can access the Express L768/L1.5 for this community.
61202192L1-1 Express L768/L1.5 User Manual 67
Chapter 3: Terminal Menu Operation and Structure
SNMP/Traps
The Express L768/L1.5 can generate SNMP traps. See Appendix C on page 99 for trap types supported. This list allows up to four managers to be listed to receive traps.
Traps/Manager Name
Write security: 2; Read security: 4 This is the text string describing the name of the entry. It is intended for easy reference and has no bearing on the SNMP trap function.
Traps/Manager IP
Write security: 2; Read security: 4 This is the IP address of the manager that is to receive the traps.
Management/Maint Port
The Express L768/L1.5 has an EIA-232 connector on the back of the unit. The setup for that port is under this menu.
Maint Port/Password Protect
Write security: 0; Read security: 1 When set to No, the maintenance port is not password protected. When On (def), the Express L768/L1.5 will prompt for a password upon startup.
Maint Port/Password
Write security: 0; Read security: 1 This is the text string that is used for comparison when password protecting the maintenance port. By default, no password is entered.
The security level for the maintenance port is always set to 0. This gives full access to all menus.
Maint Port/Baud Rate
Write security: 5; Read security: 5 This is the asynchronous rate that the maintenance port will run. The possible values are 300, 1200, 2400, 4800, 9600 (def), 19200, 38400, 57600, 115200.
68 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Maint Port/Data Bits
Write security: 5; Read security: 5 This is the asynchronous bit rate that the maintenance port will run. The pos­sible values are 7 or 8 (def) bits.
Maint Port/Parity
Write security: 5; Read security: 5 This is the asynchronous parity that the maintenance port will run. The possi­ble values are None (def), Odd, or Even.
Maint Port/Stop Bits
Write security:5; Read security:5 This is the stop bit used for the maintenance port. The possible values are 1 (def), 1.5 or 2.
Configuration/Terminal Mode
This is an activator which places the Express L768/L1.5 terminal session into a command prompt mode. All menu options are accessible during this mode. See Appendix E on page 105 for the command structure and command list. Type exit to leave the terminal mode and return to the menus.
61202192L1-1 Express L768/L1.5 User Manual 69
Chapter 3: Terminal Menu Operation and Structure
STATUS MENU
The Express L768/L1.5’s Status menu contains comprehensive status and di­agnostic information used in verifying configuration and identifying prob­lems. The menus are divided into protocol types and sessions. Figure 3-11 shows the Status menu.
Figure 3-11
Status Screen
70 Express L768/L1.5 User Manual 61202192L1-1
Status/Sessions
This menu contains the current status of all sessions and spanning tree ports.
Sessions/PPP Session
Read security: 5 This menu reflects the results of PPP negotiations, user name, time connected, and data rates for the session.
PPP Links - Reflects LCP layer active
BCP - Shows UP if PPP Bridge Control Protocol has negotiated
successfully
IPCP - Shows UP if PPP IP Control Protocol has negotiated successfully
IPXCP - Shows UP if PPP IPX Control Protocol has negotiated successfully
Up Time - Displays how long the call has been connected
Tx Pkts - Number of packets transmitted
Chapter 3: Terminal Menu Operation and Structure
Rx Pkts - Number of packets received
Tx Bytes - Number of bytes transmitted
Rx Bytes - Number of bytes received
Tx Rate - Current application data transmission rate
Rx Rate - Current application data reception rate
61202192L1-1 Express L768/L1.5 User Manual 71
Chapter 3: Terminal Menu Operation and Structure
Sessions/DLCI Table
The status of all virtual circuits is displayed here.
DLCI - The DLCI that is associated with this virtual circuit.
State - The state of the virtual circuit:
Inactive - means the circuit exists but has been deactivated by
the Frame Relay switch. Exists - means the circuit exists at this point and should be activated soon.
Active - means the circuit is fully active. Off - means the circuit has been turned of by the DLCI mapping
active selection.
Tx Frames - Number of Frame Relay packets that have been transmitted via this DLCI.
Rx Frames - Number of Frame Relay packets that have been received via this DLCI.
Tx Bytes - Number of Frame Relay bytes that have been transmitted via this DLCI.
Rx Bytes - Number of Frame Relay bytes that have been received via this DLCI.
IP SubIfc - The IP router port assigned for this DLCI. Possible ports are fr0, fr1, … , fr9. None means that this DLCI not used for routing IP.
IPX SubIfc - The IPX router port assigned for this DLCI. Possible ports are fr0, fr1, … , fr9. None means that this DLCI not used for routing IPX.
Bridge Group - The bridge group that this DLCI belongs to (Group 1 or Group 2). None means that this DLCI is not used for bridging.
72 Express L768/L1.5 User Manual 61202192L1-1
Sessions/Spanning Tree
Read security: 5 When Bridge mode and Spanning Tree mode are active, this reflects the cur­rent state of the LAN and WAN ports. The following can appear:
Off - Appears when Spanning Tree mode is disabled
Disabled - Port is not connected (for WAN) or disabled in
configuration
Listening - Port is in the listening state
Learning - Port is in the learning state
Forwarding - Port is in the forwarding state with the following
possible properties:
root - is the root port designated - is designated port
Blocking - Port is in the blocked state
Status/ARP Cache
Read security: 5 This lists the contents of the Express L768/L1.5’s ARP table. All resolved cache entries time out after 20 minutes. Unresolved entries time out in 3 min­utes.
Chapter 3: Terminal Menu Operation and Structure
ARP Cache/IP Address - IP address used for resolving MAC address
ARP Cache /MAC Address - Ethernet address resolved
(0=no resolution)
ARP Cache/Time - Minutes since entry was first entered
61202192L1-1 Express L768/L1.5 User Manual 73
Chapter 3: Terminal Menu Operation and Structure
Status/Bridge Table
Read security: 5 This lists the contents of the Express L768/L1.5’s bridge table.
Bridge Cache/MAC Address - Ethernet address for device learned
Bridge Cache/Port - Port device learned from: LAN, WAN0, or WAN1
Bridge Cache/TTL - Seconds until address is removed from table
Status/IP Routes
Read security: 5 This lists the contents of the Express L768/L1.5’s IP router table.
IP Routes /IP Address - Network or host destination address
IP Routes /Netmask - Network mask applied to the destination
address
IP Routes /Gateway - Host or router to receive this packet
IP Routes /Port - Port gateway is located on:
local - sent directly to the Express L768/L1.5 router eth0 - Express L768/L1.5’s ethernet port wan0 - Express L768/L1.5’s first PPP bundle fr 0 . . . fr 9 - Express L768/L1.5 is connected up to 10 DLCIs
IP Routes /Use - Number of times the Express L768/L1.5 has
referenced the route
IP Routes/Flags - Important tags associated with this route entry
H - route is a host route G - route is a gateway route D - route learned dynamically from RIP I - route learned from an ICMP redirect P - route is private and is not advertised with RIP T - route is to a triggered port (updates only when table changes)
IP Routes/Hops - Number of routers that must go through to get
to destination. Ranges from 0-15 or 16 for infinite (can’t get there from here).
IP Routes/TTL - Seconds until address is removed from table or “zombied.” Value of 999 means route is static.
74 Express L768/L1.5 User Manual 61202192L1-1
Status/IPX Routes
Read security: 5 This lists the contents of the Express L768/L1.5’s IPX router table.
IPX Routes /Network - Network destination address
IPX Routes /Gateway - Node or Ethernet address of gateway to
receive this packet
IPX Routes /Port - Port gateway is located on:
local - sent directly to the Express L768/L1.5 router eth0 - Express L768/L1.5’s ethernet port wan0 - Express L768/L1.5’s first PPP bundle fr 0 . . . fr 9 - Express L768/L1.5 is connected up to 10 DLCIs
IPX Routes /Use - Number of times the Express L768/L1.5 has
referenced the route
IPX Routes/Hops - Number of routers that must go through to get to destination. Ranges from 0-15 or 16 for infinite (can’t get there from here).
IPX Routes/Ticks - Router determined value for representing time packets take to reach the network destination. One tick is equivalent to one-eighteenth of a second.
Chapter 3: Terminal Menu Operation and Structure
IPX Routes/TTL - Seconds until address is removed from table. Value of 999 means route is static.
Status/IPX Servers
Read security: 5 This lists the contents of the Express L768/L1.5’s IPX server table.
IPX Servers/Type - The server type
IPX Servers/Name - The server name
IPX Servers/Network - The server network address
IPX Servers /Address - The servers node address
IPX Servers/Socket - The servers socket address
61202192L1-1 Express L768/L1.5 User Manual 75
Chapter 3: Terminal Menu Operation and Structure
IPX Servers/Hops - Number of routers that must go through to get to server. Ranges from 0-15 or 16 for infinite.
IPX Servers/TTL - Seconds until address is removed from table. Value of 999 means server is static.
Status/WAN Stats
Read security: 5 This menu contains generic WAN statistics on HDLC hardware port.
HDLC Port
Tx Bytes - total number of raw bytes sent out HDLC port 1 Rx Bytes - total number of raw bytes received in HDLC port 1 Rx CRCs - total number of CRC errors detected on HDLC port 1
Clear Counts - When activated, clears all WAN stat counts
Status/LAN Stats
Read security: 5 This menu contains statistics for the Ethernet port.
Tx Packets - Packets transmitted out the Ethernet port
Rx Packets - Packets received from the Ethernet port
Tx Errors - Total transmit errors encountered on Ethernet port
Single Collisions - total single collisions before successful
transmission Multiple Collisions - total multiple collisions before successful transmission Excessive Collisions - total collisions that resulted in packet being
dropped
Deferred Transmissions - total packets deferred due to collisions Carrier Sense Errors - total carrier sense errors encountered (no
link integrity)
Rx Errors - Total packets received in error and dropped
CRCs - total packets detected with CRC errors Giants - total packets received that were greater than 1518 bytes Runts - total packets received that were less than 64 bytes Rx Collisions - total collision occurred during reception
Clear Counts - When activated, clears all LAN Stat counts.
76 Express L768/L1.5 User Manual 61202192L1-1
Status/IP Stats
Read security: 5 This menu contains IP statistics that can be useful when diagnosing problems. All are taken from the SNMP MIB-2 variables.
TCP failed attempts TCP passive connections TCP current connections TCP segments sent TCP segments received Total TCP resets Active TCP connections Total TCP retransmits UDP datagrams sent No application at dest. port UDP datagrams received UDP bad packets ICMP redirected messages ICMP packet errors ICMP timeouts received ICMP messages sent ICMP messages received ICMP specif if errors IP datagrams reassembled IP datagrams sent IP datagrams received Total forwarded datagrams IP reassembly timeout Discarded routing entries Total IP fragments Failed fragments IP reassembly failures Disassembled fragments Errorfree discards Routeless discards Default TTL Bad IP addresses Successful fragments Bad header packets Sent datagrams to upper layers Datagrams discarded Bad protocol discards
Chapter 3: Terminal Menu Operation and Structure
Clear Counts - clears all IP stats
61202192L1-1 Express L768/L1.5 User Manual 77
Chapter 3: Terminal Menu Operation and Structure
TEST MENU
The Express L768/L1.5’s Test menu contains built-in tests that can be used to diagnose problems. Figure 3-12 shows the Test menu screen.
Figure 3-12
Test Screen
The following tests can be run:
Test Menu/Echo Request
Write security: 4, Read security: 5 When activated, the echo request test will begin sending continuous PPP echo request packets to any open LCP ports. Results are displayed on the screen. This is not used in the Frame Relay mode.
Test Menu/2047 Loopback
Write security: 4, Read security: 5 When activated, a loopback command is sent to the far-end HDSL device and an internal 2047 pattern is continually transmitted towards the HDSL circuit. Loopbacked data is checked and an error count is maintained.
78 Express L768/L1.5 User Manual 61202192L1-1
LOGS MENU
The Logs menu contain logs displaying important information about the run­ning condition of the Express L768/L1.5. The logs can be set to capture diag­nostics of error conditions only by way of a log level. The levels are divided up as follows:
Figure 3-13 shows the Logs menu. The three logs available are listed after the figure.
Chapter 3: Terminal Menu Operation and Structure
level 0 - Fatal event (causes reset) level 1 - Critical event level 2 - Error event level 3 - Warning event level 4 - Notify event level 5 - Informational event level 6 - Debugging event
Figure 3-13
Logs Screen
Logs/Sys log Host
Set this to the IP address or domain name (if DNS configured) of the sys log host device. All log events are sent to this device.
Logs/PPP Log
Information pertaining to the PPP negotiation and authentication will be logged here.
61202192L1-1 Express L768/L1.5 User Manual 79
Chapter 3: Terminal Menu Operation and Structure
PPP Log/Active
When set to Yes (def), PPP events below or equal the log level are logged into the log.
PPP Log/Wrap
When set to Yes (def), new PPP events will overwrite old PPP events when the log is full. All logging will stop when the log is full and set to No.
PPP Log/Level
In order to log events, they must be at or below this level. Range is 0 to 6. The default is 3.
PPP Log/View
This menu displays the log list. The fields are as follows:
Date/Time - Date and time event occurred.
Level - Level associated with this event (0-6).
Message - Text message for this event. If message is too long to fit
on the line, another event appears below it continuing the message.
PPP Log/Clear
This clears the log when activated.
Logs/Connection Log
Information pertaining to the connection over the HDSL link.
Connection Log/Active
When set to Yes (def), connection events below or equal the log level are logged into the log.
80 Express L768/L1.5 User Manual 61202192L1-1
Chapter 3: Terminal Menu Operation and Structure
Connection Log/Wrap
When set to Yes (def), new connection events will overwrite old connection events when the log is full. All logging will stop when the log is full and set to No.
Connection Log/Level
In order to log events, they must be at or below this level. Range is 0 to 6. The default is 3.
Connection Log/View
This menu displays the log list. The fields are as follows:
Date/Time - Date and time event occurred.
Level - Level associated with this event (0-6).
Message - Text message for this event. If message is too long to fit
on the line, another event appears below it continuing the message.
Connection Log/Clear
This clears the log when activated.
Logs/Network Log
Information pertaining to the routing protocols is placed in this log.
Network Log/Active
When set to Yes (def), call events below or equal the log level are logged into the log.
Network Log/Wrap
When set to Yes (def), new Network events will overwrite old Network events when the log is full. All logging will stop when the log is full and set to No.
61202192L1-1 Express L768/L1.5 User Manual 81
Chapter 3: Terminal Menu Operation and Structure
Network Log/Level
In order to log events, they must be at or below this level. Range is 0 to 6. The default is 3.
Network Log/View
This menu displays the log list. The fields are as follows:
Date/Time - Date and time event occurred.
Level - Level associated with this event (0-6).
Message - Text message for this event. If message is too long to fit
on the line, another event appears below it continuing the message.
Network Log/Clear
This clears the log when activated.
82 Express L768/L1.5 User Manual 61202192L1-1
UTILITIES MENU
The Express L768/L1.5 has utilities embedded in it to help in managing and testing the network and to facilitate software upgrades. Figure 3-14 shows the Utilities menu.
Utilities/Ping
Chapter 3: Terminal Menu Operation and Structure
Figure 3-14
Utilities Screen
Write security: 4; Read security: 5 The ping menu is used to send ICMP ping messages to hosts. The following items are under this menu:
Start/Stop - Activator to start and cancel a ping test.
Host Address - IP address or domain name (if DNS is configured)
of device to receive the ping
Size - Total size of ping to send. Range is 40 (def) to 1500 bytes.
# of Packets - Total packets to send every two seconds
# of Transmits - Total packets sent (read only)
# of Receives - Total packets received (read only)
% Loss - Percentage loss based on ping returned form host (read only)
61202192L1-1 Express L768/L1.5 User Manual 83
Chapter 3: Terminal Menu Operation and Structure
Utilities/Telnet Client
Write security: 4; Read security: 5 The Telnet menu can be used to activate the Telnet client function in the Ex­press L768/L1.5.
Host - IP address or domain name (if DNS is configured) of Telnet server. By default, the standard TCP server port is used. However, a nonstandard port can be specified here with the IP address or domain name separated by a colon (:).
Activate - Starts Telnet client function. The key combination Control ] cancels the session.
Utilities/Upgrade Menu
Write security: 2; Read security: 3 The Express L768/L1.5’s firmware can be upgraded using this menu.
Upgrade/Transfer Method
The two methods for upgrading are TFTP and XMODEM. TFTP requires a TFTP server running somewhere on the network. The Express L768/L1.5 starts a TFTP client function which gets the upgrade code from the TFTP serv­er. Selecting XMODEM will load the upgrade code through the maintenance port using any PC terminal emulator with xmodem capability.
Upgrade/TFTP Host
This is required when the transfer method is TFTP. It is the IP address or do­main name (if DNS is configured) of the TFTP server.
Upgrade/Filename
This is required when the transfer method is TFTP. It is the case-sensitive file name which is the upgrade code.
Upgrade/Status
This appears when TFTP is used. It displays the status of the transfer as it hap­pens. Any error or success message will be displayed here.
84 Express L768/L1.5 User Manual 61202192L1-1
Loading...