Allied Telesis AR720 User Manual

AR720 ROUTER

QUICK START GUIDE

Simply connecting the world

Software Release 2.3.1

AR720 Router Quick Start Guide. Document Number C613-04012-00 REV C.

Allied Telesyn International, Corp. reserves the right to make changes in specifications and other information contained in this document without prior written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesyn be liable for any incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this manual or the information contained herein, even if Allied Telesyn has been advised of, known, or should have known, the possibility of such damages.

All trademarks are the property of their respective owners.

This software product contains an implementation of IPsec certified and tested to meet ICSA Labs IPsec security standards. For more information see http://www.icsa.net.

AR720 ROUTER QUICK START GUIDE 3

Introducing the AR720 Router ......................... 4

Connectivity Options .................................................................... 4

What can the AR720 Do For You? .............................................4

The AR720 Feature Set................................................................. 5

About this Guide ............................................................................ 5

Where to Find Statutory and Safety Information ..................5

Getting Connected ............................................ 6

Using Windows Terminal or Windows HyperTerminal

as the Console ......................................................................... 6

Connecting to an Ethernet LAN ................................................ 8

Connecting to a Leased Line Circuit.........................................8

Ordering ISDN in the USA and Canada .................................. 9

Connecting to a Basic Rate S/T ISDN Service ........................ 9

Connecting to a Basic Rate U ISDN Service ........................... 9

Connecting to a Primary Rate ISDN Service ....................... 10

Connecting a Terminal or Modem .......................................... 10

Documentation and Tools CD-ROM .............. 12

Using the CD-ROM .................................................................... 12

Using AT-TFTP Server ................................................................ 12

Configuring ISDN ............................................ 13

Configuring Basic Rate ISDN ................................................... 13

Configuring Primary Rate ISDN .............................................. 14

Configuring ISDN Dial on Demand ........................................ 16

Configuring ISDN Bandwidth on Demand ........................... 16

Configuring an IP Network ............................. 17

Before You Start ........................................................................... 17

Configuring IP .............................................................................. 18

Troubleshooting IP Configurations ......................................... 19

Configuring a Novell IPX Network ................ 20

Before You Start ........................................................................... 20

Configuring IPX ........................................................................... 21

Troubleshooting IPX Configurations ...................................... 22

Configuring IPX Dial on Demand ........................................... 23

4 AR720 ROUTER QUICK START GUIDE

Introducing the AR720 Router

Congratulations on purchasing an AR720 Modular Network Access Router—the optimal solution for larger branch and corporate sites with demanding network requirements.

This guide will introduce you to the AR720 router and guide you through the most common uses and applications. Getting started will not take long—many applications can be set up in just a few minutes. If you have any questions about the AR720 router, contact your local distributor or reseller.

CONNECTIVITY OPTIONS

The AR720 supports a wide range of network interfaces so you can choose the network service that is right for you. The base unit has one 10/100 Fast Ethernet port and two RJ45 asynchronous ports. Additional interfaces can be added by installing any of the following PICs (Port Interface Cards) in the two expansion bays:

noitpOCIP

020RA

)S(120RA

)U(120RA

220RA

320RA

420RA

520RA

noitpircseD

ecafretni1T/1ENDSIetaRyramirP1

ecafretniT/SNDSIetaRcisaB1

ecafretniUNDSIetaRcisaB1

ecafretniTESAB01/IUAtenrehtE1

ecafretnilasrevinu)spbM2(suonorhcnyS1

secafretni)spbK511(suonorhcnysA4

ecafretni1E307.G/NDSIetaRyramirP1

WHAT CAN THE AR720 DO FOR YOU?

Connect You to the Internet

The AR720 router provides you with high speed, unrestricted access to the Internet. Advanced compression techniques together with ISDN channel bundling mean that graphic downloads simply speed along. An intelligent traffic sensor automatically disconnects the ISDN call if there is no data to be sent or received, so call charges are minimised. The AR720 supports advanced features that make it easy for your Internet Service Provider to dynamically assign your Internet address every time you surf the net.

Connect Regional and Branch Offices to the Corporate Network

Many small offices and home offices require fast and efficient access to a central office, to check email, access a database or download a file. The AR720 supports Windows

Apple

Macintosh® systems. The intelligent bandwidth management facility automatically opens more ISDN channels when extra capacity is required, and closes them when traffic levels reduce. Powerful firewall features protect against unauthorised access, and break-in attempts can be logged for later analysis. If your office LAN utilises private IP addresses not registered on the Internet, the AR720 can translate these private addresses to a single registered IP address for communication across the Internet, saving you the time and expense of assigning registered IP addresses to each device on your LAN.

Connect You to Other Trading Partners

The AR720 allows companies to communicate with other trading partners using ISDN, leased line, Frame Relay or X.25 services. Information such as reports, quotes and orders can be transferred between the two offices. The AR720 does not place any limits on the number of network users, so it will continue to support you as your business grows.

Connect Teleworkers and Dial-in Users

The AR720 supports dial-in connections via external modems. Teleworkers and mobile users can dial into an AR720 router at their local office and access information, read email, download files and connect to the Internet. Combine dial-in services with AT-VPNet to provide teleworkers and mobile users with secure access to the corporate network. External modems can be used to provide network connections for extra bandwidth at peak times or to backup ISDN, Frame Relay or leased lines.

Protect Your Network from Unauthorised Access

When you connect to the Internet you have unrestricted access to the World-Wide Web. Likewise, it has access to you! To ensure that only authorised users can access your local network, the AR720 has an extensive range of security measures, including:

• A fully featured stateful inspection firewall which dynamically

filters traffic flows based on manager-defined rules. All firewall events are logged to the router’s Logging Facility, and significant events generate notifications via SNMP traps,

, Novell® and

AR720 ROUTER QUICK START GUIDE 5

email or triggers. The firewall automatically detects and combats a range of denial of service attacks including SYN and FIN flooding, Ping of death, Smurf attacks and port scans.

• IPsec-compliant security services.

• Calling Line Identification (CLI), which uses the ISDN

address of the incoming call to verify that the caller is calling from an authentic location.

• ISDN callback, which verifies the caller using CLI, disconnects the incoming call, then calls the destination back to establish the link. This allows a remote site to reverse the call charges to a central office, for central billing of ISDN calls.

• PAP and CHAP to authenticate remote access using passwords and user names.

• TACACS and RADIUS for authenticating users. The AR720 can query TACACS or RADIUS servers running on a network host to authenticate users. A centralised database simplifies management of a large user population.

Protect Your Data with Powerful DES Encryption

If you are transmitting sensitive information, such as cost estimates, product plans, and investment opportunities across the Internet you want to secure this data so that it is indecipherable to all but the intended recipients. AT-VPNet provides powerful DES or 3DES encryption. Your data is scrambled before it is transmitted across the Internet, making the data meaningless if intercepted. Only the data portion of the IP packet is encrypted; the address information required for routing the packet to its destination is unchanged. AT-VPNet uses a separate daughter card that fits inside the AR720 to offload the processor-intensive task of data encryption, so routing performance is not affected.

Note: The export of strong DES-based cryptography such as AT-VPNet is subject to export controls in most countries. Contact your distributor or reseller for details.

THE AR720 FEATURE SET

The following are just some of the features provided by the AR720:

• Wide-area networking via Frame Relay, Point-to-Point Protocol, and X.25.

• Basic Rate and Primary Rate access to Integrated Services Digital Network (ISDN) services, with dial on demand, bandwidth on demand and channel aggregation facilities.

• Multiprotocol routing, including TCP/IP, Novell® IPX, DECnet™, AppleTalk® and GRE (Generic Routing

Encapsulation) protocols. Supported routing protocols include RIP and RIP v2, EGP, OSPF, and Novell® RIP and SAP.

• Terminal server.

• Bridging.

• Backup server for leased line, PSTN and ISDN.

• LPD and Streams print server for network-wide printing.

• Advanced packet filtering for IP, Novell® IPX and DECnet™.

• Frame Relay over synchronous and ISDN links, with logical

interfaces, congestion control and a slowstart mechanism.

• Bandwidth management, multilink PPP channel aggregation, network on demand and bandwidth on demand.

• Hardware-based data encryption and compression.

• Traffic shaping and Quality of Service (QoS) with the

Resource Reservation Protocol (RSVP) and Bandwidth Allocation Control Protocol (BACP).

• X.25 communications server.

• TDM (Time Division Multiplexing).

• Automated network monitoring and control with a

sophisticated, configurable event logging facility.

• Triggers for automatic and timed execution of commands, and scripting for automated configuration and centralised management of configurations.

• Support for the Simple Network Management Protocol (SNMP) allows the router to be managed by a separate network management station.

ABOUT THIS GUIDE

Before you use your AR720 router in a live network, please read this guide. This guide contains the following:

• Instructions for connecting the router to different physical networks and network services.

• Instructions for installing the AR Series Router Documentation and Tools CD-ROM and using the online documentation.

• Simple ‘get-you-running’ instructions for the most popular IP and Novell

IPX applications, using the router’s command

line interface.

WHERE TO FIND STATUTORY AND SAFETY

INFORMATION

Safety and statutory information can be found in the AR700 Series Router Safety and Statutory Information booklet. This booklet can be found on the CD-ROM bundled with your router, or at www.alliedtelesyn.co.nz.

6 AR720 ROUTER QUICK START GUIDE

Getting Connected

This section describes how to connect the AR720 router to different physical devices and networks. Before you start, you should be aware that the AR720 router refers to its physical interfaces as ports and these are numbered, starting at 0. Ports on the base unit are numbered first, followed by ports on PICs (Port Interface Cards) in Bay 0 and Bay 1. For example, eth0 is the first Ethernet port and syn1 is the second synchronous port.

USING WINDOWS TERMINAL OR WINDOWS

HYPERTERMINAL AS THE CONSOLE

You can use a PC running terminal emulation software as the manager console, instead of a terminal. There are many terminal emulation applications available for the PC, but the most readily available are the Terminal and HyperTerminal applications included in Microsoft respectively. In a normal Windows™ installation Terminal is located in the Accessories group. In Windows 95 HyperTerminal is located in the Start > Programs > Accessories menu.

The key to using terminal emulation software successfully with the AR720 router is to configure the communications parameters in the terminal emulation software to match the default settings of the console port on the router. The following procedures describe how to configure Windows™ Terminal and HyperTerminal for the default console port settings on the AR720 router, but the same principles apply to other terminal emulation programs.

To configure Windows™ Terminal, follow these steps:

1 In Windows 3.1, double-click the Terminal icon in the Accessories group in Program manager.

2 Select “Communications” from the Settings menu. The Communications dialog box is displayed.

Set “Baud Rate” to 9600, “Data Bits” to 8, “Stop Bits” to 1, “Parity” to None, “Flow Control” to Hardware and “Connector” to the COM port on the PC used to connect to the router. Uncheck the “Parity Check” and “Carrier Detect” checkboxes. Click “OK” to accept the new settings and close the dialog box.

Windows™ 3.1 and Windows 95,

3 Select “Terminal Emulation” from the Settings menu. In the Terminal Emulation dialog box check “DEC VT-100 (ANSI)” and click “OK”.

4 Select “Terminal Preferences” from the Settings menu. In the Terminal Preferences dialog box uncheck “Local Echo”, “CR -> CR/LF”, and “Use Function, Arrow, and Ctrl Keys for Windows”. Set other parameters as required, then click “OK”.

AR720 ROUTER QUICK START GUIDE 7

5 To save the configuration, select “Save As” from the File

menu, then type a file name and press [Enter]. To reuse the configuration in a future session, select “Open” from the File menu, select the file name from the list and click “OK”.

6 You can customise Windows™ Terminal further by assigning commonly used router commands to function keys. Select “Function Keys” from the Settings menu, or select “Contents” from the Help menu and click on the topic “Assign Tasks to Function Keys”. To save the function key assignments, follow step 5 above.

To configure Windows 95 HyperTerminal, follow these steps:

1 In Windows 95, from the Start Menu, select Programs > Accessories > HyperTerminal to display the HyperTerminal group. Double-click the Hypertrm.exe icon.

2 In the Connection Description dialog box, enter a name for the connection (e.g. AR720) and select an icon from the scrolling list. Click “OK”.

3 In the Phone Number dialog box, from the “Connect using:” dropdown list select the “Direct to Com n” to match the COM port on the PC used to connect to the router. Click “OK”.

5 Select “Properties” from the File menu. In the Connection Properties dialog box, click the Settings tab and set “Function, arrow, and ctrl keys act as” to “Terminal keys” and “Emulation” to VT100.

4 In the COMn Properties dialog box set “Bits per second” to 9600, “Data bits” to 8, “Parity” to None, “Stop bits” to 1 and “Flow control” to Hardware. Click “OK”.

6 Click “ASCII Setup” to display the ASCII Setup dialog box. Uncheck the “Echo typed characters locally” and “Append line feeds to incoming line ends” checkboxes. Set other parameters as required, then click “OK” twice to dismiss all dialog boxes.

+ 16 hidden pages