Allied Telesis AR300 User Manual

AR300 SERIES ROUTER

QUICK START GUIDE

Simply connecting the world

AR300 Series Router Quick Start Guide. Document Number C613-04011-00 REV C.

Allied Telesyn International, Corp. reserves the right to make changes in specifications and other information contained in this document without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesyn be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesyn has been advised of, known, or should have known, the possibility of such damages.

All trademarks are the property of their respective owners.

AR300 ROUTER QUICK START GUIDE 3

Introducing the AR300 Series Router .............. 4

Models in the AR300 Series ........................................................ 4

What Can the AR300 Do For You? ...........................................4

About this Guide ............................................................................5

Where to Find Safety and Statutory Information ..................5

Getting Connected ............................................ 6

Using Windows Terminal or Windows HyperTerminal

as the Console ......................................................................... 6

Connecting to an Ethernet Hub or PC ....................................8

Connecting Telephones and Facsimile Machines .................... 8

Ordering ISDN in the USA and Canada .................................. 9

Connecting to a Basic Rate ISDN Service ...............................9

Connecting to a Primary Rate ISDN Service ..........................9

Connecting to a Leased Line Circuit...................................... 10

Connecting a Terminal or Modem .......................................... 10

Documentation and Tools CD-ROM .............. 12

Using the CD-ROM .................................................................... 12

Using AT-TFTP Server ................................................................ 12

Configuring ISDN ............................................ 13

Configuring Basic Rate ISDN ................................................... 13

Configuring Primary Rate ISDN .............................................. 14

Configuring ISDN Dial on Demand ........................................ 16

Configuring ISDN Bandwidth on Demand ........................... 16

Configuring an IP Network ............................. 17

Before You Start ........................................................................... 17

Configuring IP .............................................................................. 18

Troubleshooting IP Configurations ......................................... 19

Configuring a Novell IPX Network ................ 20

Before You Start ........................................................................... 20

Configuring IPX ........................................................................... 21

Troubleshooting IPX Configurations ...................................... 22

Configuring IPX Dial on Demand ........................................... 23

Configuring Telephone Services ..................... 24

Before You Start ........................................................................... 25

Configuring Telephony Ser vices ............................................... 25

Troubleshooting PBX Configurations .................................... 27

4 AR300 ROUTER QUICK START GUIDE

Introducing the AR300 Series Router

Congratulations on purchasing an AR300 Series router—the intelligent choice! No other solution will provide you with more networking capabilities or more cost saving features.

This guide will introduce you to the AR300 router and guide you through the most common uses and applications. Getting started will not take long—most applications can be set up in just a few minutes. If you have any questions about the AR300 router, contact your local distributor or reseller.

MODELS IN THE AR300 SERIES

The AR300 Series supports a wide range of network interfaces so you can choose the network service that is right for you.

secafretnIfoepyTdnarebmuN

ledoMNDSI

)S(L003RA T/SIRB - )elameF9BD(1 - 1

)S(003RAT/SIRB- )elameF9BD(121

)S(013RA T/SIRB - )elameF9BD(1 4 1

023RA-- )elaM9BD(2-2

033RA - 1 )elaM9BD(2 - 2

053RA-1 )elaM9BD(2-1

)S(073RA T/SIRB 1 )elaM9BD(2 - 1

)U(073RAUIRB1 )elaM9BD(2-1

093RA 307.G

593RAIRP

1. U interface in USA and Canada, S/T bus in other countries.

2. Universal connector supports RS-232/V.28 DTE, RS-232 DCE, V.35 and X.21 interface standards.

3. 2048kbps unchannelised or 1 n × 64 kbps channel.

4. 30 B channels plus 1 D channel.

suonorhcnyS

- )elaM9BD(2 - 1

-)elaM9BD(2-1

suonorhcnysAecioVnaL

WHAT CAN THE AR300 DO FOR YOU?

Connect You to the Internet

The AR300 router provides you with high speed, unrestricted access to the Internet. Advanced compression techniques together with ISDN channel bundling mean that graphic downloads simply speed along. An intelligent traffic sensor automatically disconnects the ISDN call if there is no data to be sent or received, so call charges are minimised. The AR300

supports advanced features that make it easy for your Internet Service Provider to dynamically assign your Internet address every time you surf the net.

Connect You to the Office

Many small offices and home offices require fast and efficient access to a central office, to check email, access a database or download a file. The AR300 supports Windows

Apple

Macintosh® systems. The intelligent bandwidth

, Novell® and

management facility automatically opens more ISDN channels when extra capacity is required, and closes them when traffic levels reduce. Powerful firewall features protect against unauthorised access, and break-in attempts can be logged for later analysis. If your office LAN utilises private IP addresses not registered on the Internet, the AR300 can translate these private addresses to a single registered IP address for communication across the Internet, saving you the time and expense of assigning registered IP addresses to each device on your LAN.

Connect You to Other Trading Partners

The AR300 allows small offices to communicate with other trading partners using ISDN, leased line, Frame Relay or X.25 services. Information such as reports, quotes and orders can be transferred between the two offices. The AR300 does not place any limits on the number of network users, so it will continue to support you as your business grows.

Make Phone and Facsimile Calls Anywhere in the World

The AT-AR300(S) and AT-AR300(U) support one or two voice connections, and the AT-AR310(S) and AT-AR310(U) support four voice connections. Any combination of telephones, facsimile machines, answering machines or modems can be connected. Once connected, they behave as if connected to a standard telephone network. Local, national and international voice and facsimile calls can be sent and received as normal. There is no need for a separate line for voice, facsimile and data—one ISDN connection does it all. The two ISDN channels are shared between data and voice as required. When both channels are being used for data, the AR300 can be configured to ‘bump’ one of these channels if a voice call is required, for example when an emergency number is dialled.

AR300 ROUTER QUICK START GUIDE 5

Create Your Own Mini-PBX

A unique feature of the AR300 is its extensive range of PBX facilities including call divert, divert on busy and divert on no reply, call barring, call pickup, speed (shortcode) dialling for often-used numbers and emergency override. So, if you answer a call and it is for someone at the end of the office you simply transfer it to them. If you are on the phone and a call comes in it will automatically transfer to a free extension. It couldn’t be easier. A powerful feature of the PBX support is call barring. Call barring can be set up to prevent calls to specific numbers or ranges of numbers, such as 0900 or international numbers, allowing costs to be closely controlled.

Connect Teleworkers and Dial-in Users

The AR300 supports dial-in connections via external modems. Teleworkers and mobile users can dial into an AR300 router at their local office and access information, read email, download files and connect to the Internet. Combine the dial-in services with AT-VPNet to provide teleworkers and mobile users with secure access to the corporate network. External modems can also be used to provide network connections, for extra bandwidth at peak times or to provide backup for ISDN, Frame Relay or leased line connections.

Protect Your Network from Unauthorised Access

When you connect to the Internet you have unrestricted access to the World-Wide Web. Likewise, it has access to you! This is not normally a problem as you are just one of many millions of subscribers. However, if you want to ensure that only authorised users can access your local network, the AR300 has an extensive range of security measures, including:

• A fully featured stateful inspection firewall which dynamically filters traffic flows based on manager-defined rules. All firewall events are logged to the router’s Logging Facility, and significant events generate notifications via SNMP traps, email or triggers. The firewall automatically detects and combats a range of denial of service attacks including SYN and FIN flooding, Ping of death, Smurf attacks and port scans.

• IPsec-compliant security services.

• Calling Line Identification (CLI), which uses the ISDN address of the incoming call to verify that the caller is calling from an authentic location.

• ISDN callback, which verifies the caller using CLI, disconnects the incoming call, then calls the destination back to establish the link. This allows a remote site to reverse the call charges to a central office, for central billing of ISDN calls.

• PAP and CHAP to authenticate remote access using passwords and user names.

• TACACS and RADIUS for authenticating users. The AR300 can query TACACS or RADIUS servers running on a network host to authenticate users. A centralised database simplifies management of a large user population.

You can also use the trigger facility to automatically disable your Internet connection overnight or when the office is closed, to provide ultimate security, yet still allow voice and facsimile calls.

Protect Your Data with Powerful DES Encryption

If you are transmitting sensitive information, such as cost estimates, product plans, and investment opportunities across the Internet you want to secure this data so that it is indecipherable to all but the intended recipients. AT-VPNet provides powerful 56-bit DES encryption. Your data is scrambled using a 56-bit key before it is transmitted across the Internet, making the data meaningless if intercepted. Only the data portion of the IP packet is encrypted; the address information required for routing the packet to its destination is unchanged. AT-VPNet uses a separate daughter card that fits inside the AR300 to offload the processor-intensive task of data encryption, so routing performance is not affected.

Note: The export of strong DES-based cryptography such as AT-VPNet is subject to export controls in most countries. Contact your distributor or reseller for details.

ABOUT THIS GUIDE

Before you use your AR300 router in a live network, please read this guide. This guide contains the following:

• Instructions for connecting the router to different physical networks and network services.

• Instructions for installing the AR Series Router Documentation and Tools CD-ROM and using the online documentation.

• Simple ‘get-you-running’ instructions for the most popular applications, using the router’s command line interface.

WHERE TO FIND SAFETY AND STATUTORY

INFORMATION

Safety and statutory information can be found in the AR300 Series Router Safety and Statutory Information booklet. This booklet can be found on the CD-ROM bundled with your router, or at www.alliedtelesyn.co.nz.

6 AR300 ROUTER QUICK START GUIDE

Getting Connected

This section describes how to connect the AR300 router to different physical devices and networks. Before you start, you should be aware that the AR300 Series router refers to its physical interfaces as ports and these are numbered, starting at

0. For example, eth0 is the first Ethernet port and voice2 is the third voice port.

USING WINDOWS TERMINAL OR WINDOWS

HYPERTERMINAL AS THE CONSOLE

You can use a PC running terminal emulation software as the manager console, instead of a terminal. There are many terminal emulation applications available for the PC, but the most readily available are the Terminal and HyperTerminal applications included in Microsoft respectively. In a normal Windows™ installation Terminal is located in the Accessories group. In Windows 95 HyperTerminal is located in the Start > Programs > Accessories menu.

The key to using terminal emulation software successfully with the AR300 router is to configure the communications parameters in the terminal emulation software to match the default settings of the console port on the router. The following procedures describe how to configure Windows™ Terminal and HyperTerminal for the default console port settings on the AR300 router, but the same principles apply to other terminal emulation programs.

To configure Windows™ Terminal, follow these steps:

1 In Windows 3.1, double-click the Terminal icon in the Accessories group in Program manager.

2 Select “Communications” from the Settings menu. The Communications dialog box is displayed.

Set “Baud Rate” to 9600, “Data Bits” to 8, “Stop Bits” to 1, “Parity” to None, “Flow Control” to Hardware and “Connector” to the COM port on the PC used to connect to the router. Uncheck the “Parity Check” and “Carrier Detect” checkboxes. Click “OK” to accept the new settings and close the dialog box.

Windows™ 3.1 and Windows 95,

3 Select “Terminal Emulation” from the Settings menu. In the Terminal Emulation dialog box check “DEC VT-100 (ANSI)” and click “OK”.

4 Select “Terminal Preferences” from the Settings menu. In the Terminal Preferences dialog box uncheck “Local Echo”, “CR -> CR/LF”, and “Use Function, Arrow, and Ctrl Keys for Windows”. Set other parameters as required, then click “OK”.

AR300 ROUTER QUICK START GUIDE 7

5 To save the configuration, select “Save As” from the File

menu, then type a file name and press [Enter]. To reuse the configuration in a future session, select “Open” from the File menu, select the file name from the list and click “OK”.

6 You can customise Windows™ Terminal further by assigning commonly used router commands to function keys. Select “Function Keys” from the Settings menu, or select “Contents” from the Help menu and click on the topic “Assign Tasks to Function Keys”. To save the function key assignments, follow step 5 above.

To configure Windows 95 HyperTerminal, follow these steps:

1 In Windows 95, from the Start Menu, select Programs > Accessories > HyperTerminal to display the HyperTerminal group. Double-click the Hypertrm.exe icon.

2 In the Connection Description dialog box, enter a name for the connection (e.g. AR300) and select an icon from the scrolling list. Click “OK”.

3 In the Phone Number dialog box, from the “Connect using:” dropdown list select the “Direct to Com n” to match the COM port on the PC used to connect to the router. Click “OK”.

5 Select “Properties” from the File menu. In the Connection Properties dialog box, click the Settings tab and set “Function, arrow, and ctrl keys act as” to “Terminal keys” and “Emulation” to VT100.

4 In the COMn Properties dialog box set “Bits per second” to 9600, “Data bits” to 8, “Parity” to None, “Stop bits” to 1 and “Flow control” to Hardware. Click “OK”.

6 Click “ASCII Setup” to display the ASCII Setup dialog box. Uncheck the “Echo typed characters locally” and “Append line feeds to incoming line ends” checkboxes. Set other parameters as required, then click “OK” twice to dismiss all dialog boxes.

8 AR300 ROUTER QUICK START GUIDE

3 Check the operation by observing the state of the LEDs on

the front panel of the router. The Txd and Rxd LEDs will be lit as data packets are transmitted and received via the interface. The Link LED should be lit when a hub or personal computer is connected to the Ethernet port.

CONNECTING TELEPHONES AND FACSIMILE

MACHINES

To connect a telephone, facsimile machine, answering machine or modem to an AT-AR300(S), AT-AR300(U), AT-AR310(S) or AT-AR310(U) router with voice ports, follow these steps:

1 Connect the cable from the telephone, facsimile machine, answering machine or modem to one of the voice ports on the rear panel of the router. If necessary, use one of the stub cables

7 Select “Save” from the File menu to save the current session. This creates an connection icon with the name you

supplied with the router to convert from the router’s RJ11 connector to the national variant.

assigned in the HyperTerminal group. To use the configuration, double-click the connection icon in the HyperTerminal group. When the HyperTerminal window appears, press [Enter] a couple of times. The router’s login prompt will appear.

Note: Connect only approved apparatus to the voice ports. If you experience difficulties with the attached apparatus please contact your distributor or reseller in the first instance and not the network provider.

CONNECTING TO AN ETHERNET HUB OR PC

To connect any AR300 Series router to an Ethernet hub or

VOICE 3

VOICE 2

personal computer, follow these steps:

1 Connect the Ethernet port on the rear panel of the router to either an Ethernet hub or the Ethernet port on a LAN card in a personal computer, using the supplied CAT 5

HUB

MDX

Ethernet cable.

2 Set the MDX switch on the rear panel of the router to “HUB” if the router is connected to an Ethernet hub, or “PC” if

VOICE 1

VOICE 0

the router is connected to a personal computer.

Connect the cable from the telephone, facsimile, answering machine or modem to

one of the voice ports on the rear panel of the AR300 Series router. Use one of the

PORT 1 (RS232)

supplied stub cables if necessary.

ETHERNET 0

MDX

HUB PC

Connect the supplied CAT 5 Ethernet cable to the Ethernet 0 port on the rear

panel of the AR300 Series router and set the MDX switch to “HUB” or “PC”

as appropriate.

PORT 0 (RS232)

2 Check the operation by lifting the handset on the telephone. A dial tone appropriate for the default territory should be heard. If two or more telephones or telephones and facsimile machines are connected, try making an internal call from one telephone to another telephone or facsimile machine by dialling “4” followed by the number of the voice port to which the other telephone or facsimile machine is connected.

AR300 ROUTER QUICK START GUIDE 9

ORDERING ISDN IN THE USA AND CANADA

In the United States and Canada, Basic Rate ISDN is provided using National ISDN-1, 5ESS or DMS-100 formats, all of which are supported by the AR300 router. If National ISDN-1 is available, you can select from a list of “Capability Packages”, each providing different features. Contact your ISDN service provider for more information. The AR300 router will accept either one or two Service Profile Identifiers (SPIDs).

Note: Some ISDN service providers have lower tariffs for data-only applications. If you do not require voice capabilities, order an ISDN line that supports data only.

CONNECTING TO A BASIC RATE ISDN SERVICE

Warning: The factory default hardware settings described here are correct for European Union (EU) countries. For other countries, contact your distributor or reseller for details of local requirements.

To connect an AT-AR300L(S), AT-AR370(S), AT-AR370(U), AT-AR300(S), AT-AR300(U), AT-AR310(S) or AT-AR310(U) router with a Basic Rate ISDN interface to a Basic Rate ISDN service, follow these steps:

1 Check that the BRI hardware interface has the correct termination for the local conditions. The AR300 router can only operate in TE mode and is shipped with the standard 100Ω termination jumpers removed. This is appropriate for most situations, where the local building wiring provides the ISDN termination. Your distributor or reseller can advise you whether or not termination jumpers are required.

2 Connect the supplied CAT 5 ISDN cable from the BRI interface on the rear panel of the router to the ISDN service provider’s termination point. In the USA and Canada this is an ISDN line wall jack. In other countries it is an NT1.

PORT 1 (RS232)

PORT 0 (RS232)

Connect the supplied CAT 5 ISDN cable from the BRI 0 port on the rear panel of the

AR300 router to the ISDN service provider’s termination point.

CONFIG

BRI 0

4321

Note: If you wish to make your own ISDN cable, see the AR Router Hardware Reference for a detailed description of how to wire an

ISDN interface cable.

3 Check the operation by observing the state of the LEDs on the front panel of the router.

In some territories (e.g. New Zealand and the European Union) the Active LED will be lit if the link to the NT1 is operational. In other territories (e.g. Australia) the Active LED will only be lit when the router attempts a call. In this case, a simple way to make a call is to connect a telephone to one of the voice ports, lift the telephone handset and dial the external call prefix number (9). A dial tone appropriate for the default territory should be heard, and the Active LED should be lit.

The B1 and B2 LEDs will be lit as data packets are sent and received on the B1 and B2 channels, respectively. To test this you will need to configure a routing protocol such as IP or IPX to use ISDN, using the router’s command line interface. See

Configuring ISDN, Configuring an IP Network and Configuring a Novell IPX Network later in this guide for more information.

CONNECTING TO A PRIMARY RATE ISDN

SERVICE

To connect an AT-AR390 or AT-AR395 router to a Primary Rate ISDN service, follow these steps:

1 Check that the PRI hardware interface has the correct termination for the local conditions. The AT-AR390 and AT-AR395 are shipped with PRI hardware pre-configured for normal TE mode operation and with the standard termination jumpers removed. This is appropriate for most situations. If the PRI hardware is to be operated in a non-standard mode, contact your distributor or reseller for assistance. The commands:

SHOW PRI STATE SHOW PRI CONFIGURATION

display the state of the PRI interface and the modules that have configured to use the PRI interface. In particular, check the output of the SHOW PRI STATE command that “ISDN Interface type” is set to “TE”. If not, contact your distributor or reseller for assistance, or see the AR Series Router Software Reference for more information.

+ 18 hidden pages