Black Box AR-P, AR-5 User Manual

Order toll-free in the U.S.: Call 877-877-BBOX (outside U.S. call 724-746-5500) FREE technical support 24 hours a day, 7 days a week: Call 724-746-5500 or fax 724-746-0746 Mailing address: Black Box Corporation, 1000 Park Drive, Lawrence, PA 15055-1018 Web site: www.blackbox.com • E-mail: info@blackbox.com

CUSTOMER

SUPPORT

INFORMATION

MARCH 1996

LRA001A-R2 LRA005A-R2 LRS002A-R2

Async Router AR-P

Async Router AR-5

Sync Router

Async Router

AR-5

Modem

PWR LNK DCD DCD DCD DCD DCD

1 2 3 4 5

ERR NET

Tx/Rx Tx/Rx Tx/Rx Tx/Rx Tx/Rx

ync

outer

PWR LNK NET DTR DCD TX RX ERR

ETHERNET MODEM

sync

outer

AR-P

PWR LNK NET DTR DCD TX RX ERR

ETHERNET MODEM

FEDERAL COMMUNICATIONS COMMISSION AND

CANADIAN DEPARTMENT OF COMMUNICATIONs RADIO FREQUENCY INTERFERENCE STATEMENTS

This equipment generates, uses, and can radiate radio frequency energy and if not installed and used properly, that is, in strict accordance with the manufacturer’s instructions, may cause interference to radio communication. It has been tested and found to comply with the limits for a Class A computing device in accordance with the specifications in Subpart J of Part 15 of FCC rules, which are designed to provide reasonable protection against such interference when the equipment is operated in a commercial environment. Operation of this equipment in a residential area is likely to cause interference, in which case the user at his own expense will be required to take whatever measures may be necessary to correct the interference.

Changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment.

This digital apparatus does not exceed the Class A limits for radio noise emission from digital apparatus set out in the Radio Interference Regulation of the Canadian Department of Communications.

Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de classe A prescrites dans le Règlement sur le brouillage radioélectrique publié par le ministère des Communications du Canada.

INSTRUCCIONES DE SEGURIDAD (Normas Oficiales Mexicanas Electrical Safety Statement)

1.Todas las instrucciones de seguridad y operación deberán ser leídas antes de que el aparato eléctrico sea operado.

2. Las instrucciones de seguridad y operación deberán ser guardadas para referencia futura.

3. Todas las advertencias en el aparato eléctrico y en sus instrucciones de operación deben ser respetadas.

4. Todas las instrucciones de operación y uso deben ser seguidas.

5. El aparato eléctrico no deberá ser usado cerca del agua—por ejemplo, cerca de la tina de baño, lavabo, sótano mojado o cerca de una alberca, etc..

6. El aparato eléctrico debe ser usado únicamente con carritos o pedestales que sean recomendados por el fabricante.

7. El aparato eléctrico debe ser montado a la pared o al techo sólo como sea recomendado por el fabricante.

8. Servicio—El usuario no debe intentar dar servicio al equipo eléctrico más allá a lo descrito en las instrucciones de operación. Todo otro servicio deberá ser referido a personal de servicio calificado.

9. El aparato eléctrico debe ser situado de tal manera que su posición no interfiera su uso. La colocación del aparato eléctrico sobre una cama, sofá, alfombra o superficie similar puede bloquea la ventilación, no se debe colocar en libreros o gabinetes que impidan el flujo de aire por los orificios de ventilación.

10. El equipo eléctrico deber ser situado fuera del alcance de fuentes de calor como radiadores, registros de calor, estufas u otros aparatos (incluyendo amplificadores) que producen calor.

11. El aparato eléctrico deberá ser connectado a una fuente de poder sólo del tipo descrito en el instructivo de operación, o como se indique en el aparato.

12. Precaución debe ser tomada de tal manera que la tierra fisica y la polarización del equipo no sea eliminada.

13. Los cables de la fuente de poder deben ser guiados de tal manera que no sean pisados ni pellizcados por objetos colocados sobre o contra ellos, poniendo particular atención a los contactos y receptáculos donde salen del aparato.

14. El equipo eléctrico debe ser limpiado únicamente de acuerdo a las recomendaciones del fabricante.

15. En caso de existir, una antena externa deberá ser localizada lejos de las lineas de energia.

16. El cable de corriente deberá ser desconectado del cuando el equipo no sea usado por un largo periodo de tiempo.

17. Cuidado debe ser tomado de tal manera que objectos liquidos no sean derramados sobre la cubierta u orificios de ventilación.

18. Servicio por personal calificado deberá ser provisto cuando:

A: El cable de poder o el contacto ha sido dañado;

B: Objectos han caído o líquido ha sido

derramado dentro del aparato; o

C: El aparato ha sido expuesto a la lluvia; o

D: El aparato parece no operar normalmente o

muestra un cambio en su desempeño; o

E: El aparato ha sido tirado o su cubierta ha sido

dañada.

This manual consists of two documents: a User’s Guide and a Reference Guide. The User’s Guide begins on page 5 and the Reference Guide begins on page 137.

TRADEMARKS

Cheyenne

is a registered trademark of Cheyenne Software, Inc.

Lotus

is a registered trademark of Lotus Development Corporation.

Macintosh

is a registered trademark of Apple Computer, Inc.

Merit

is a registered trademark of Merit Technologies Ltd.

Motorola

is a registered trademark of Motorola.

Novell

and NetWare®are registered trademarks, and IPX is a trademark, of Novell Incorporated.

Stacker™ is a trademark of Stat Electronics.

Telebit

and NetBlazer®are registered trademarks of Telebit Corporation.

UNIX

is a registered trademark of UNIX System Laboratories, Inc.

Wellfleet

is a registered trademark of Wellfleet Communications, Inc.

Windows

is a registered trademark of Microsoft Corporation.

All applied-for and registered trademarks are the property of their respective owners.

MARCH 1996

LRA001A-R2 LRA005A-R2 LRS002A-R2

Async Router AR-P

Async Router AR-5

Sync Router

USER’S GUIDE

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

CONTENTS

1. Specifications...........................................................................................................................9

1.1 General .............................................................................................................................9

1.2 Connector Specifications.................................................................................................9

2. Introduction ............................................................................................................................11

2.1 Applications ......................................................................................................................11

2.1.1 Transparent LAN-to-LAN Routing ........................................................................11

2.1.2 Transparent Remote Client Access........................................................................11

2.1.3 Remote Clients and LANs with Dual-Stack Functionality....................................11

2.2 Shared Router Features ...................................................................................................12

2.2.1 Easy to Install and Configure.................................................................................12

2.2.2 Reduces Operating Costs .......................................................................................12

2.2.3 Dial Suppression.....................................................................................................12

2.2.4 Prevents Unauthorized Network Access ...............................................................13

2.2.5 Interoperable with RADIUS and SecurID Servers ...............................................13

2.2.6 PPP Link-Level Security .........................................................................................13

2.2.7 IP and IPX Packet Filtering ...................................................................................13

2.2.8 Predefined IP and IPX Packet Filtering................................................................13

2.2.9 Predefined IPX Packet Filters................................................................................13

2.2.10 Passwords for FTP and Telnet Servers..................................................................14

2.2.11 Console Login........................................................................................................14

2.2.12 Passwords for RouterVu Logins (IPX) .................................................................14

2.2.13 Security Callback to Remote Users.......................................................................14

2.2.14 Client Passwords ...................................................................................................14

2.2.15 Compression for Synchronous Interfaces...........................................................14

2.3 Async Router AR-5 (LRA005A-R2) Features...................................................................15

2.4 Sync Router (LRS002A-R2) Features ..............................................................................15

2.4.1 Automatic Fallback.................................................................................................15

2.4.2 Synchronous Router Interface ..............................................................................16

2.5 Async Client Kit ................................................................................................................16

2.6 Operating Requirements .................................................................................................16

3. Connect Cables .......................................................................................................................18

3.1 Inventory...........................................................................................................................18

3.2 Async Router AR-P Connections .....................................................................................19

3.3 Async Router AR-5 Connections .....................................................................................21

3.4 Sync Router Connections ................................................................................................23

4. Connect Host ..........................................................................................................................25

4.1 If you have a previously configured boot diskette..........................................................26

4.2 Select Host Connection Method .....................................................................................27

4.2.1 PC/Workstation Using Telnet Utility ....................................................................28

4.2.2 PC Using RouterVu Utility.....................................................................................30

4.2.3 PC Using Serial Terminal Utility ...........................................................................33

4.2.4 Serial Terminal .......................................................................................................35

5. Install Software........................................................................................................................37

5.1 Installation Summary .......................................................................................................37

5.2 Installation Procedure .....................................................................................................37

5.3 Installation Examples.......................................................................................................39

5.3.1 Async Router AR-P, Async Router AR-5 Examples................................................39

5.3.2 Sync Router Example .............................................................................................45

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

5.4 Parameters ........................................................................................................................47

5.4.1 LAN Parameters .....................................................................................................48

5.4.2 Choose Method of Client Authentication ............................................................49

5.4.3 Modem Parameters ................................................................................................50

5.4.4 Sync Router Parameters .........................................................................................52

5.4.5 IP Firewall Parameters............................................................................................53

5.4.6 Client Parameters ...................................................................................................53

6. Configure and Test..................................................................................................................55

6.1 Configure Hosts on TCP/IP Network.............................................................................55

6.2 Test TCP/IP Networks Using ping..................................................................................56

6.2.1 Ping from the Local Ethernet................................................................................57

6.2.2 Ping from the Remote Ethernet............................................................................58

6.3 Test IPX Networks Using RouterVu ................................................................................61

Appendix A: Networking Examples...........................................................................................65

A.1 Dialup LAN-to-LAN .........................................................................................................65

A.1.1 Using Names and Passwords .................................................................................65

A.1.2 Home/Branch Office Designation .......................................................................69

A.2 Synchronous LAN-to-LAN...............................................................................................71

Appendix B: Line Use.................................................................................................................73

B.1 How to Monitor Line Use ...............................................................................................73

B.1.1 Determine Sources of Last 5 Dials ........................................................................73

B.1.2 Listen to the Modem’s Speaker.............................................................................73

B.1.3 Turn on Syslog (IP and IPX Networks) ................................................................74

B.1.4 Set Up an Excessive-Use Warning (IP Networks Only) .......................................75

B.2 How to Limit Line Use ....................................................................................................75

B.2.1 Set a Dialup Time Quota for that Interface .........................................................75

B.2.2 How to Temporarily Increase the Time Quota....................................................76

B.2.3 Use the Router’s Predefined IP Filters .................................................................76

B.2.4 Use the Router’s Predefined IPX Filters ..............................................................79

B.2.5 Write Your Own IP and IPX Filters .......................................................................79

Appendix C: Troubleshooting....................................................................................................82

C.1 LED Descriptions.............................................................................................................83

C.1.1 Async Router AR-P LEDs .......................................................................................83

C.1.2 Async Router AR-5 LEDs .......................................................................................84

C.1.3 Sync Router LEDs ..................................................................................................85

C.2 Router Commands...........................................................................................................86

C.2.1 For Any One Type of Network (TCP/IP and IPX)..............................................86

C.2.2 For IPX (NetWare) Networks Only ......................................................................87

C.2.3 For TCP/IP Networks Only...................................................................................87

C.2.4 RouterVu “Remote Console” for NetWare Networks ..........................................88

C.3 Initial Configuration/Start-up Problems .......................................................................89

C.3.1 Router Cannot Start—LEDs Stay Dark.................................................................89

C.3.2 Router Cannot Start—LEDs Stay Lit ....................................................................91

C.3.3 Prompt Does Not Display ......................................................................................91

C.3.4 Root Password Does Not Work..............................................................................91

C.3.5 IP Hosts on Ethernet Cannot Telnet to the Router.............................................92

C.3.6 Cannot Save Configuration...................................................................................93

C.3.7 Why Don’t the Modems Connect?........................................................................93

C.3.8 Modem Will Not Connect to Remote Modem.....................................................94

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

C.4 Operating Problems ........................................................................................................95

C.4.1 Cannot Communicate with Remote Host (IP Only) ...........................................95

C.4.2 Connection Drops After a Few Seconds...............................................................100

C.4.3 Connection Drops After a Few Hours ..................................................................100

C.4.4 Constant Remote Dialup .......................................................................................100

C.4.5 Unable to Attach to a Remote NetWare Server (Modems Only) .......................101

C.4.6 Remote Server Not Found (IPX)..........................................................................101

C.4.7 No Connection Slots Available (IPX)...................................................................102

C.4.8 Misconfigured Networks (IPX).............................................................................102

C.5 Client Problems ...............................................................................................................103

C.5.1 Router Does Not Answer When Client Calls........................................................103

C.5.2 Router Answers Client Call But Connection Fails ...............................................103

C.5.3 Client Logged In, But Can’t Access Servers on Network ....................................103

C.6 Returning Your Router for Repair..................................................................................104

Appendix D: Interoperability.....................................................................................................105

D.1 RADIUS Servers...............................................................................................................105

D.2 SecurID Servers ...............................................................................................................106

D.3 Cisco Router Interoperability .........................................................................................108

D.3.1 About the Cisco Command Language .................................................................109

D.3.2 Types of Connections Available ............................................................................110

D.4 IPX Synchronous Routers...............................................................................................115

D.5 TCP/IP Synchronous Routers ........................................................................................115

D.5.1 Configure Router to Use PPP ...............................................................................115

D.5.2 Configure Router to Use RIP................................................................................115

D.5.3 Assign Subnet to PPP Connection if Necessary ...................................................115

D.5.4 Telebit NetBlazer and PN......................................................................................116

D.6 Interoperability with CSU/DSUs....................................................................................116

D.6.1 Black Box CSU/DSU MS, EAZY CSU/DSU MS, Adtran DSU III AR ................116

D.6.2 Adtran ISU 128 ......................................................................................................117

D.6.3 CM-1056E, Larse S5600, Racal-Milgo 4556 ..........................................................118

D.6.4 Motorola TA220/TA220k......................................................................................118

D.6.5 Other CSU/DSUs ..................................................................................................119

Appendix E: Glossary..................................................................................................................120

Appendix F: Installation Reference ...........................................................................................127

CHAPTER 1: Specifications

1. Specifications

1.1 General

Standards—Ethernet: IEEE 802.3 AUI, 10BASE-T; V.32 bis/V.42 bis

Speed—10-Mbps Ethernet; 28.8-Kbps integrated modem

Protocols—IP, IPX™

Integrated Modem—V.34 bis with V.42 bis

Diagnostics—Via LEDs or management code (supports Telnet login), SNMP

Connectors—All models: (1) DB9 male, (1) DB15 AUI female, (1) RJ-45 female, (1) 5-pin DIN;

LRA001A-R2: (1) RJ-11; LRA005A-R2: (5) RJ-11; LRS002A-R2: (1) RJ-11, (1) DB25 female

Humidity—20-80% (non-condensing)

Operating Temperature—32° F to 122° F (0° C to 50° C)

Power—100-200 VAC, 60/50 Hz, external power supply (autoswitching), 0.6 A max.

Size—All models: 2.3"H x 9.8"W x 8.3"D (5.8 x 25 x 21 cm)

Weight—LRA001A-R2: 3.6 lb. (1.6 kg), LRA005A-R2: 4.3 lb. (1.9 kg), LRS002A-R2: 4.1 lb. (1.8 kg)

1.2 Connector Specifications

Table 1-1. IEEE 802.3 AUI, DB15 Connector.

Pin Number Signal

Pin 1 Gnd Pin 2 COL+ Pin 3 TXD+ Pin 4 Gnd Pin 5 RXD+ Pin 6 Gnd Pin 7 NC (not connected) Pin 8 Gnd Pin 9 COLPin 10 TXDPin 11 Gnd Pin 12 RXDPin 13 +12V Pin 14 Gnd Pin 15 NC

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

NOTE

The maximum length of the transceiver cable cannot exceed 164 feet (50 meters).

Table 1-2. 10BASE-T, RJ-45 (8-Pin) Connector.

Pin Number Signal

Pin 1 TPO+ Pin 2 TPO Pin 3 TP1+ Pin 4 NC Pin 5 NC Pin 6 TP1Pin 7 NC Pin 8 NC

Table 1-3. DB9 Connector.

Pin Number Signal

Pin 1 DCD Pin 2 RXD Pin 3 TXD Pin 4 DTR Pin 5 Gnd Pin 6 DSR Pin 7 DTR Pin 8 CTS Pin 9 RI

Table 1-4. Power Input Connector.

Pin Number Signal

Pin 1 COM Pin 2 Case Pin 3 +5V Pin 4 -12V Pin 5 +12V

Table 1-5. RJ-11 Connector.

Pin Number Signal

Pin 3 Tip Pin 4 Ring

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

2. Introduction

This chapter introduces Router technology, features, and applications. Installation instructions begin in Chapter 3.

If you are upgrading a previous version of the Router, make sure you read Appendix C in the Reference

Manual.

The Routers are remote access servers that route TCP/IP and IPX (NetWare®) traffic. Routers connect remote local area networks (LANs) and clients to Ethernet-based LANs, using standard V.34 modems, or synchronous lines (leased or switched). Personal computers can access Router servers using the Async Client software. Macintosh

and other non-PC clients can dial into a Router using the standard point-to

point protocol (PPP).

Three models are available:

Table 2-1. Router Models.

Model WAN Capabilities

Async Router AR-P (LRA001A-R2) 1 V.34 modem

Async Router AR-5 (LRA005A-R2) 5 V.34 modems

Sync Router (LRS002A-R2) 1 sync interface, 1 V.34 modem

2.1 Applications

All Router models provide autosensing Ethernet interfaces (10BASE-T, AUI), and support multiple protocols for both LAN-to-LAN and user-to-LAN (remote-client access) routing. All Routers have an internal V.34 modem (the AR-5 model has five internal modems).

2.1.1 T

RANSPARENT LAN-TO-LAN ROUTING

For transparent routing between separate Ethernet-based LANs, pair two Routers together or use compatible devices. Use any Router model to provide inexpensive networking solutions for remote of fices. For maximum throughput, use the Sync Router for synchronous connections.

2.1.2 T

RANSPARENT REMOTE CLIENT ACCESS

For remote client access, the Router acts as a remote node server, allowing IPX- and TCP/lP-based PCs and laptop computers to become remote nodes on an Ethernet-based network attached to the Router. Remote client workstations can then dial into the Router to access services on the LAN as if they were local nodes. The Router supports transparent access for a maximum of 100 remote clients, and accepts calls from any client on any dial-up modem line configured for client access.

2.1.3 R

EMOTE CLIENTS AND LANSWITHDUAL-STACK FUNCTIONALITY

Router supports dual-stack functionality in both remote LAN-to-LAN and remote client operations. IP and IPX protocols are supported, so that any DOS or Windows®based PC, Macintosh, or UNIX

workstation can access the Router. The Router uses the standard PPP protocol, which allows third-party client applications to access the Router.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

2.2 Shared Router Features

All Router models share the following features:

• Included or optional internal 28.8K modems (V.34)

• IP and IPX routing, separately or simultaneously

• PPP, IPCP, IPXCP, PAP, and CHAP protocols

• Remote client access (supports a maximum of 100 clients):

- time filter

- connect quota

- idle timeout

- security callback

• Extensive IP and IPX packet filtering on all interfaces

• Simple configuration for all supported interfaces: Ethernet, modem, and synchronous interfaces

• Superior handling of IP RIP updates

• Extensive dial-up monitoring capabilities

• Automatic recognition of network topology and services

• Support for primary and secondary phone numbers (used for each modem interface)

2.2.1 E

ASY TO INSTALL AND CONFIGURE

Routers are shipped ready for installation and configuration. Installation is described in Chapters 3, 4, and 5. You configure the Router with a dialogue that prompts you to enter the desired LAN, WAN and client parameters. To configure the Router, you can use either a PC with a terminal emulator like Windows Terminal or a serial terminal connected to the Router’s console port, or use a host computer with telnet on the local Ethernet (TCP/IP), or use a host PC with RouterVu (included with the Router) on the local Ethernet (IPX).

2.2.2 R

EDUCES OPERATING COSTS

The Router supports idle timeouts and time quotas to reduce operating costs. Finally, the Router can restrict a client’s access to the network, using the concept of a configurable client access shift. A client account can be restricted to client access during shift hours (IN), after hours (OUT), or 24 hours of the day.

2.2.3 D

IAL SUPPRESSION

Router link optimization (RLO) recognizes and minimizes unnecessary traffic. RLO has IPX and SPX filters to prevent dialing for and forwarding of, network traffic that doesn’t originate from end-users. Although it is enabled by default, RLO can be manually enabled and disabled. See Appendix B, Line use.

Standard IP and IPX filters can also be used to suppress unnecessary dialing activities.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

2.2.4 PREVENTS UNAUTHORIZED NETWORK ACCESS

The Router offers comprehensive security mechanisms to prevent unauthorized network access. The Router security operates at several levels:

• PPP link-level security (over the WAN link)

• IP, IPX, and SPX packet filtering

• passwords for ftp and telnet servers (IP)

• console login and password

• passwords for RouterVu logins (IPX)

• security callback to remote users (clients)

• client logins and passwords

2.2.5 I

NTEROPERABLE WITH RADIUS AND SECURID SERVERS

The Router interoperates with RADIUS and SecurID authentication servers. RADIUS allows administrators to centrally store and manage names and passwords for IP sites with many dial-in routers and remote clients. SecurID requires remote clients to physically possess a SecurID metal card, in order to gain network access.

NOTE

SecurID and RADIUS technologies cannot be used at the same time on a Router.

2.2.6 PPP LINK-LEVEL SECURITY

For PPP link-level security, the Router supports the Challenge Handshake Authentication Protocol (CHAP) and the Password Authentication Protocol (PAP). Both PAP and CHAP require password and node names for linking to prevent unauthorized users from gaining access through the Router. We strongly recommend using CHAP to provide security.

Along with PAP and CHAP, a new security CHAP (SCHAP) for Router clients supports security callback. A modem configured for client access attempts to negotiate CHAP, PAP, then SCHAP authentication.

2.2.7 IP

AND IPX PACKET FILTERING

The Router’s extensive IP and IPX filtering allows specific hosts, networks, and services—mail, terminal, print, and file services—to be excluded from, or allowed access to, your network.

2.2.8 PREDEFINED IP PACKET FILTERS

If you will be using the Router to provide Internet access to your users, you have the option of installing a list of IP filters that are commonly used to protect networks from unauthorized access by Internet users. Refer to Appendix B.

2.2.9 P

REDEFINED IPX PACKET FILTERS

You also have the option of installing a list of IPX filters that are commonly used to suppress dialing caused by unnecessary network traffic such as:

• Pings from NetWare servers

• SPX idle traffic

• NetBIOS name broadcasts between servers

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

• Any other IPX broadcasts.

Also refer to Appendix B.

2.2.10 P

ASSWORDS FOR FTP AND TELNET SERVERS

Passwords must be used to log in and transfer files to prevent unauthorized access.

2.2.11 C

ONSOLE LOGIN

When a serial terminal (console) is in use, a login and password are required.

2.2.12 P

ASSWORDS FOR ROUTERVU LOGINS (IPX)

Passwords must be used to log in to a Router with RouterVu.

2.2.13 S

ECURITY CALLBACK TO REMOTE USERS

A security callback feature can be enabled for any Async Router client. The client must be located at a specific phone number to access the Router. Security callback only works with Async Router clients.

Once a physical link is established, and before packet routing commences, the calling workstation presents a user name and password for authenticity. If the password is authentic, Router directs the client to end the phone session and enter into auto-answer mode, anticipating a response from the Router. Once the Router responds to the client, the process to determine authenticity ends. If a client attempts to establish a connection to a modem designated as a LAN-to-LAN line, the connection fails.

2.2.14 C

LIENT PASSWORDS

The Router maintains a database supporting a maximum of 100 remote clients. Each record in this client database is associated with a single client. Each record of the database stores a client’s name, password, connect quota (length of time each day a client is allowed to access the Router), idle timeout (length of time network inactivity is allowed to keep up the connection), security callback phone number, and shift access choice (access based on time of day).

2.2.15 C

OMPRESSION FOR SYNCHRONOUS INTERFACES

The Router provides compression for synchronous interfaces on the Sync Router, in both TCP/IP and IPX networks. For the sync0 interface, compression is enabled by default, but can be disabled using the ppp command. The Router implements compression using Stacker™ algorithms from Stat Electronics.

A synchronous PPP link can have two different compression methods on the same link, one in each direction. “No compression” counts as a compression method. Although theoretically multiple compression methods can be active across each direction of a PPP link, the Router supports only one method of compression per direction on a link.

Example:

For example, suppose your Router is linked to a remote router. There are two connections on the same links: one from your Router to the remote router, and one from the remote router to your Router.

When the Router establishes a link, it negotiates with the Router at the other end to select what type of compression will be used. During the negotiation, the Router will indicate a preference for the Stacker compression method.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

2.3 Async Router AR-5 (LRA005A-R2) Features

The Async Router AR-5 has five internal V.34 modems. It connects LANs and clients at up to 28.Kbps over normal telephone lines.

2.4 Sync Router (LRS002A-R2) Features

The Sync Router works the same way as the Async Routers, except that it connects LANs over a variety of synchronous serial line types:

• Leased digital data service at 56 Kbps (North America) or 64 Kbps (Europe), i.e., a fixed line from one location to another, using an external Channel Service Unit/Data Service Unit (CSU/DSU).

• Switched 56 Kbps service, available in North America from either the local or the long-distance telephone companies, using an external CSU/DSU with dialing capability.

• ISDN basic rate service at 56 Kbps (referred to as voice, or 56 Kbps data), 64 Kbps (referred to as transparent data), or 128 Kbps (with bonding), using an external synchronous terminal adapter. If you want to use ISDN circuits, we recommend using the ISDN models that will be released in the future.

• Switched circuits, using synchronous V.34 modems (such as ZyXEL U1496+) over normal telephone lines. This type of circuit is not generally useful, since the standard compressing asynchronous modems used with the Router generally provide superior performance.

2.4.1 A

UTOMATIC FALLBACK

If a leased synchronous line fails, the Router’s built-in modem automatically supports fallback to the modem, for both IP and IPX routing.

2.4.2 SYNCHRONOUS ROUTER INTERFACE

The Sync Router operates as an interface between synchronous routers from:

• Cisco

• Novell (MPR = Multi-Protocol Router)

• XYPLEX

• Wellfleet

Supported CSU/DSUs include (but are not limited to):

For digital data service:

• Our CSU/DSU MS (part number MT132A-R2)

• LarsE M5600 Multi-rate CSU A CSU/DSU with dual interface mode (V.35/EIA-232).

• Motorola/UDS DSS/MR (the Router works with the V.35 version only, of this CSU/DSU).

• Motorola/UDS DSS/V.32 A CSU/DSU which can use a dial-up V.32 connection as backup to a leased 56-Kbps line without using the modem port of the Router.

For switched-56 data service:

• Our CSU/DSU MS/DBU (SW56) (part number MT134A-R2): A CSU/DSU for 4-wire switched-56 service with AT-command or V.25 bis dialing support to RS-232 or V.35 DTE. This CSU/DSU can also be used for digital data service (DDS).

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

• Motorola/UDS SW56 II A CSU/DSU that can be used for DTR dialing on a Switched-56 network, or used for DDS.

For ISDN service:

• Black Box/EAZY part number IS280A.

• Adtran ISU 128: An ISDN/BRT TA (terminal adapter) that can create one 112 Kbps channel out of the two B channels on an ISDN BRI line.

• Motorola/UDS TA-220 and TA-220K: An ISDN/BRI TA that allows two different terminals to be active on different calls simultaneously. It also allows the two channels to be “bonded” into one 112 Kbps channel.

The Sync Router performs identically to the Async Router AR-P, unless specifically noted inn this document.

2.5 Async Client Kit

Each Async Router AR-5 is shipped with Async Client kits (also called RemoteOffice), and SmartRoute™ software that supports up to 100 clients. Each Async Client kit includes:

• Remote Office client software diskette (for PCs with DOS 3.3+ and Windows 3.1+)

• VLM software diskette (used by remote client software)

The remote client software package enables remote PCs, laptop computers and workstations to dial into a Router and access services on accessible LANs. Unlike LAN-to-LAN connections, which require a dedicated phone line between them, a remote client calls into any modem line on the Router (if it is configured for client operation). Remote client services can be offered inexpensively to many users, using the multiple built-in modem lines offered in the Async Router AR-5.

Remote client access requires a remote user to have an account on the Router. This client account is created by the system administrator. It has a user name, user password, and an optional security call-back number.

Refer to the Reference Guide, which begins on page 137, for more detailed information about managing client databases.

2.6 Operating Requirements

To configure or manage Routers, you need:

• a PC with a serial terminal emulator (such as Windows Terminal), or a serial terminal, or a PC on Ethernet (IPX), or a workstation with telnet on local Ethernet (IP)

• After initial configuration, remote management of Routers requires a PC with RouterVu (IPX networks) or a workstation with telnet (IP networks)

At an Async Router AR-P or AR-5 site, you need':

• a local Ethernet-based IP or IPX network

• a maximum of 5 phone lines

• one power outlet 110VAC to 250VAC

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

At a Sync Router site, you need:

• a local Ethernet-based IP or IPX network

• a leased line or switched digital line

• a CSU/DSU with a V.35 interface

• two power outlets (110 VAC to 250 VAC: one outlet for the Router and one for the CSU/DSU)

At the opposite end of the synchronous line, you need either:

• a second Router with synchronous interface, or

• another router with synchronous PPP support. Most router vendors offer synchronous PPP options that are compatible with Router’s synchronous interface, but older models may use proprietary synchronous protocols that are not compatible.

For each remote client, you need:

• a PC or lap-top with DOS 3.3+ or Windows 3.1+

• a modem (and Async Client software)

• if TCP/IP remote client operation is required, a third-party package, such as Super-TCP, FTP Software PC/TCP, or others, is also required

• a phone line for the modem

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

3. Connect Cables

This chapter is the first of the installation chapters. It describes how to install Router cables.

Cabling varies depending upon your Router model. For cabling instructions, refer to the appropriate

section:

• Async Router AR-P (LRA001A-R2): Section 3.2

• Async Router AR-5 (LRA005A-R2): Section 3.3

• Sync Router (LRS002A-R2): Section 3.4

After connecting cables, proceed to Chapter 4 to install a PC, workstation, or serial terminal for

configuring the Router.

3.1 Inventory

Included in the Router kit are the following:

• Router

• Power supply

• Power-supply cable

• V.35 cable, DB25, for Sync Router (LRS002A-R2) only

• Console cable (9-pin to 9-pin)

• Adapter cable (9-pin to 25-pin)

• Modem cable(s)

• This manual

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

3.2 Async Router AR-P Connections

Figure 3-1. Async Router AR-P Connections.

POWER

SERIAL

CONSOLE

10 BaseT

AUI

Modem 0

Ethernet Hub

10BASE-T, AUI

LINE

Power

Supply

Async

Router

AR-P

Power

10BASE-T

AUI

Telephone

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Place the Router on a shelf or tabletop and follow these steps. The step numbers coincide with the

cables in the illustration.

1. Using either a 10BASE-T or AUI cable, connect your Ethernet LAN to the appropriate connector.

2. Connect the LINE port (modem0) to the desired telephone line. This telephone line must be dedicated and cannot be used for any other purpose.

3. Connect the power supply with a power cord. Do not start the Router at this time.

4. Proceed to Chapter 4.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

3.3 Async Router AR-5 Connections

Figure 3-2. Async Router AR-5 Connections.

POWER

SERIAL

CONSOLE

10 BaseT

AUI

Modem 0

Ethernet Hub

10BASE-T, AUI

Power Supply

modem4

modem3

modem2

modem1

modem0

line 5

line 4

line 3

line 2

line 1

Async

Router

AR-5

Power

10BASE-T

AUI

Cables to phone lines

1 through 5

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Place the Async Router AR-5 on a sturdy surface or in a rack, and follow these steps. The steps coincide

with cables in the illustrations:

1. Using either a 10BASE-T or AUI cable, connect your Ethernet LAN to the appropriate

(10BASE-T or AUI) connector.

2. Connect the available modem ports (modem0-modem4) to the desired telephone lines.

These telephone lines must be dedicated and cannot be used for any other purpose

3. Connect the power supply with the power cord. Do not start the Router at this time.

4. Proceed to Chapter 4.

3.3 Sync Router Connections

Figure 3-3. Sync Router Connections.

AUI

POWER

SERIAL

CONSOLE

10 BaseT

Modem 0

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Ethernet Hub

10BASE-T, AUI

CSU/DSU

Synchronous

line

Sync

Router

Power

Supply

LINE

sync

Power

10BASE-T

AUI

Sync

Telephone

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Place the Sync Router on a shelf or tabletop and follow the steps. The step numbers coincide with

cables in the illustration.

1. Using either a 10BASE-T or AUI cable, connect your Ethernet LAN to the appropriate ( I 0BASE-T or AUI) connector.

2. Locate the CSU/DSU you will be using. Use the cable provided (gray, 34-pin to 25-pin) to connect the Router’s synchronous port to the V.35 port on the CSU/DSU. If you are using a CSU/DSU with a non-V.35 interface, you must use an adapter (V.35 to non-V.35). Connect the synchronous port of the CSU/DSU to the synchronous (digital) service line (RJ-45) provided by your telephone company.

3. Connect the modem0 (LINE) port to the desired telephone line. The modem can be used for fallback, or to connect to a modem at a site that is not at the same site as the synchronous link.

4. Connect the power supply with the power cord. Do not start the Router at this time.

5. Proceed to Chapter 4.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

4. Connect Host

Once you connect Router cables as described in Chapter 3, either:

• connect a host (PC workstation or serial terminal) to install and configure software as described in Chapters 4, 5, and 6, or

• insert the previously configured boot diskette provided by your system administrator into the Router’s diskette drive and proceed to Chapter 6.

Figure 4-1. Five Methods to Configure the Router Software.

Ethernet Hub

10BASE-T, AUI

telnet

Host

RouterVu

IPX

Router

CONSOLE

Previously

configured boot

diskette

Serial terminal utility

(terminal emulation)

Host

Serial terminal

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

4.1 If you have a previously configured boot diskette...

Figure 4-2. If you have a previously configured boot diskette...

If the Router boot diskette has not been previously configured, proceed to Section 4.2.

If your network administrator has prepared a previously configured boot diskette for you, simply insert the diskette into the Router’s diskette drive and start the unit. The Router starts and uploads its configuration parameters from the boot diskette. Your Router is now fully operational. Do not perform the instructions in Chapters 4 and 5, and proceed directly to Chapter 6 to test your installation.

Store the backup boot diskette for the Router in a secure place. The backup boot diskette also contains your Router’s configuration, as configured by your network administrator.

NOTE

If you are the network administrator, you can preconfigure boot diskettes for the remote Router sites in advance, test them, and then mail them to the remote sites. This may be the easiest method to install and configure Routers. Make sure that you also create a backup boot diskette.

Ethernet Hub

10BASE-T, AUI

Router

Previously configured

boot diskette

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

4.2 Select Host Connection Method

If you do not have a previously configured boot diskette, select a method to connect the host or serial terminal before installing the Router software as described in Chapter 5.

Table 4-1. Host Connection Methods.

Host Required Host Required Host Location Required Network Protocols

Applications

PC or workstation telnet utility

Must be on the same IP

(2 of Figure 4-1) Ethernet as Router

PC (3 of Figure 4-1) RouterVu utility

Must be on the same IPX Ethernet as Router

PC (4 of Figure 4-1) Serial terminal utility Must be connected to

or terminal emulation Router’s console port

Serial terminal None Must be connected to (5 of Figure 4-1) Router’s console port

After the Router is initially installed, the system administrator can manage it remotely over the dialup

link or from the local Ethernet LAN, using either:

• telnet for IP networks, or

• RouterVu for IPX networks.

The telnet utility allows you to access and configure Routers remotely over an IP network.

The RouterVu utility allows you to access and configure Routers remotely over an IPX network.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

4.2.1 PC/WORKSTATION USING TELNET UTILITY

Figure 4-3. PC/Workstation Using Telnet Utility.

NOTE

This configuration requires the TCP/IP protocol on your LAN.

Before configuring the Router with a PC or workstation using a third-party vendor’s telnet utility, you must use the setaddr utility to set an IP address on the Router’s boot diskette.

setaddr requires a PC/workstation that can read and write 3.5-inch, 1.44-MB DOS diskettes; telnet does not require this capability.

When using telnet to install Router software, the computer using telnet must be a node on the same Ethernet LAN as the Router. You cannot use telnet to configure a Router until an IP address has been assigned, using setaddr.

POWER

SERIAL

CONSOLE

10 BaseT

AUI

Modem 0

Ethernet Hub

Host

10BASE-T,

AUI

10BASE-T

AUI

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Procedure

1. Start your DOS-based PC (one that can read and write 3.5-inch, 1.44-MB DOS diskettes).

2. Insert the Router boot diskette into the PC’s diskette drive. We assume you’re using the a: drive. If you’re using the b: drive, substitute b: for a:.

3. Enter:

a:\stacker a:

a:setaddr <RETURN>

4. The setaddr program asks you whether you will be using IPX or IP addresses for telnet.

The Router must have an IP or IPX address before you can access it. This program will set up the initial addresses for your Router.

For IPX addresses on a NetWare network enter 1 For IP addresses on a TCP/IP network enter 2 What kind of addresses will you use (1) or (2)?

Enter 2, and press the RETURN key.

5. The setaddr program asks you for the IP address to be assigned to the Router:

The IP address of the Router must be set before you can telnet in to the box. This program will set up the initial IP address for your Router. Use d.d.d.d notation, (0 <= d <= 255 (decimal)). Enter your IP address:

Enter the Router’s designated IP address, and press the RETURN key. Use dotted quad notation for your IP address: d.d.d.d where d is a decimal number greater than or equal to zero, and less than or equal to 255.

6. Now exit the Stacker utility and unmount the a: drive:

Initial configuration for your Router is now complete. You must now take the boot disk, insert it into your Router and power on the unit. After the Router boots, you can complete the configuration of the Router by using Telnet (IP) or RouterVu (IPX) to access the box.

STACKER doubles your disk capacity!! (type “EXIT” to unmount drive a:)

Enter

exit <RETURN>

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

7. Remove the Router boot diskette from the PC’s diskette drive.

8. Using a 10BASE-T or AUI cable, connect the Router’s Ethernet port to the local Ethernet LAN.

9. Insert the Router boot diskette into the Router’s diskette drive.

10. Start the Router. Typically, it takes 2-3 minutes for the Router to start. This is normal. After the Router finishes starting, the diskette drive LED will turn off. Do not proceed until this LED turns off.

11. From another TCP/IP host on the network, telnet to the Router’s IP address.

12. When you see a login prompt, type root and press the RETURN key. When prompted for the password, press the RETURN key.

13. Proceed to Chapter 5, and begin to install the software.

4.2.2 PC

USING ROUTERVU UTILITY

Figure 4-4. PC Using RouterVu Utility.

POWER

SERIAL

CONSOLE

10 BaseT

AUI

Modem 0

Ethernet Hub

10BASE-T

AUI

10BASE-T,

AUI

IPX

Async Router

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

NOTE

This configuration requires NetWare IPX protocol on your LAN.

Before you can configure the Router with an IBM-compatible personal computer using the RouterVu

utility (provided by us), you must use the setaddr utility to set an IPX network number and Ethernet frame type on the Router’s boot diskette.

To use setaddr or RouterVu, your PC must read and write 3.5-inch, 1.44-MB DOS diskettes. When using

RouterVu to configure the Router, your PC must reside on the same Ethernet LAN as the Router.

The PC operating with RouterVu should only be used by the system administrator when installing,

maintaining or debugging the Router or its network connections.

The PC operating with RouterVu should not be used by users to gain access to local or remote

networks. This method of access is illegal.

Procedure

1. Start your DOS-based PC.

2. Insert the Router boot diskette into the PC’s diskette drive. We assume you’re using the a: drive. If you’re using the b: drive, substitute b: for a:.

3. Enter, for example:

a:\stacker a: <RETURN> a:setaddr <RETURN>

4. The setaddr utility asks you whether you will be using IPX or IP addresses for telnet.

The Router must have an IP or IPX address before you can access it. This program will set up the

initial addresses for your Router.

For IPX addresses on a NetWare network enter 1 For IP addresses on a TCP/IP network enter 2 What kind of addresses will you use (1) or (2) ?

Enter 1, and press the RETURN key.

5. Setaddr prompts you for the Router IPX network number.

The IPX network number is the number assigned to the Ethernet segment attached to a NetWare server. This information is in the AUTOEXEC.NCF file on the NetWare server that will be on the same Ethernet segment as the Router.

The number is in hexadecimal format.

What is the network number of the ethernet segment to which the Router will be attached ?

Enter your designated IPX network number in hexadecimal format, and press the RETURN key.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

6. Setaddr next prompts you for the frame type, used on the Ethernet to be connected to the Router.

For Frame Type 802.3 enter 1 For Frame Type Ethernet_II enter 2 For Frame Type 802.2 enter 3 For Frame Type SNAP enter 9

What is the Frame Type you are using ?

Enter the number designated for the desired frame type, and press the RETURN key.

7. Setaddr prompts you for the desired name of the Router.

A unique name is a name that is not used by any NetWare file servers, print servers or Routers. Enter a unique name for the Router:

Enter the desired name of the Router, and press the RETURN key.

8. Now exit the Stacker utility and unmount the a: drive:

STACKER doubles your disk capacity!! (type ‘EXIT’ to unmount drive a:)

Enter

exit <RETURN>

9. Remove the Router boot diskette from the PC’s diskette drive.

10. Using a 10BASE-T or AUI cable, connect the Router’s Ethernet port to the local Ethernet LAN.

11. Insert the Router boot diskette into the Router’s diskette drive.

12. Start the Router. Typically it takes 2-3 minutes to load the contents of the boot diskette. This is normal. After the Router finishes starting, the diskette drive LED will turn off. Do not proceed until this LED turns off.

13. From a PC on the Ethernet, insert the RouterVu diskette into the PC, and enter:

a: \ routervu name

where the name is associated with the Router that you want to configure, and the floppy drive is the a: drive. Previously in step 7, you specified name using setaddr.

14. When you see a login prompt, type root and press the RETURN key. When prompted for the password, press the RETURN key again.

15. Proceed to Chapter 5, and begin installing the software.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

4.2.3 PC USING SERIAL TERMINAL UTILITY

Figure 4-5. PC Using Serial Terminal Utility.

You can configure the Router by using a PC operating with a serial terminal emulator such as Windows Terminal.

The PC emulating the terminal should only be used by the system administrator when installing,

maintaining or debugging the Router or its network connections.

The PC emulating the terminal should not be used by users to gain access to local or remote networks.

This method of access is illegal.

POWER

SERIAL

CONSOLE

10 BaseT

AUI

dem

Ethernet Hub

10BASE-T, AUI

Router

CONSOLE

PC/Terminal

serial cable

serial port

Host

Serial terminal

utility (terminal

emulation)

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

1. Using the serial cable provided, connect a PC’s serial port to the console port of the Router. Set the serial terminal utility to 9600 bps, no parity, 8 data bits, and 1 stop bit.

2. Insert the Router boot diskette in the Router diskette drive.

3. Start the Router.

Typically it takes 2-3 minutes to load the contents of the boot diskette. This is normal. After the Router finishes starting, the diskette-drive LED will turn off. Do not proceed until this LED turns off.

4. When you see a login prompt, type root and press the RETURN key. When prompted for the password. press the RETURN key.

5. Proceed to Chapter 5, and begin the software installation process.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

4.2.4 SERIAL TERMINAL

Figure 4-6. Serial Terminal.

You can configure the Router by a serial terminal, connected to the Router console port.

The serial terminal should only be used by the system administrator when installing, maintaining,

or debugging the Router or its network connections.

POWER

SERIAL

CONSOLE

10 BaseT

AUI

Modem 0

Ethernet Hub

10BASE-T, AUI

Router

CONSOLE

PC/Terminal

serial cable

9-to-25 pin

adapter

Serial

terminal

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

The serial terminal should not be used by users to gain access to local or remote networks. This

method of access is illegal.

1. Using the serial cable provided, connect a serial terminal to the console port of the Router. If necessary, use the adapter provided with the console cable. Set the serial terminal to 9600 bps, no parity, 8 data bits, and 1 stop bit.

2. Insert the boot diskette into Router’s diskette drive.

3. Start the Router. Typically it takes 2-3 minutes to load the contents of the boot diskette. This is normal. After the Router finishes starting, the diskette drive LED will turn off. Do not proceed until this LED turns off.

4. When you see a login prompt, type root and press the RETURN key. When prompted for the password, press the RETURN key.

5. Proceed to Chapter 5 to install the software.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

5. Install Software

Once you have installed the unit with its cables (Chapter 3) and implemented a means for installing the software (Chapter 4), your Router is ready to be configured to operate on a TCP/IP and/or IPX network.

The software installation essentially prompts you to define the LAN, WAN, and client parameters

desired for your Router’s configuration.

• LAN parameters—define the LAN parameters for the Router you are installing (the local Router).

• WAN parameters—define the parameters for the modem/sync interfaces of the local Router.

• Client parameters—define the client parameters for the remote clients.

Before configuring your Router, complete the Installation Reference in Appendix F. You will need much of this information to successfully install the Router, and after installation, you will have a record of what you have done. Before installing the Router, we also recommend that you read Appendix A.

5.1 Installation Summary

• Working with your network administrator, complete the Installation Reference in Appendix F.

• Preview one of the software installation examples.

• Start the software installation process.

• As prompted by the Router, enter the LAN, WAN (modem, sync) and client parameters as recorded

in your Installation Reference in Appendix F. Also refer to parameter explanations and examples at the end of this chapter, organized by parameter type.

• After finishing the installation process and saving the configuration, proceed to Chapter 6.

5.2 Installation Procedure

1. Select and preview the installation example (screen listing) based upon your Router model: Async Router AR-P or AR-5, or Sync Router. The installation examples include both TCP/IP and IPX (NetWare) protocols. If your installation requires only one of these protocols, some prompts will not appear.

2. Start the installation from your serial port terminal, PC emulator program, telnet, or RouterVu session.

Note that a previously configured Router will not automatically display configuration parameters for you to select. To change a previously configured Router, issue the config modify command from the prompt. You will now be prompted through the entire configuration process.

3. Refer to the parameter descriptions at the end of this chapter when you have questions regarding any of the parameters.

4. Any time during configuration, press the ESC key to stop the process. As a result, the Router returns to the beginning of the configuration process and will do so until you explicitly save the configuration.

5. Proceed to Chapter 6 to test your Router installation.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

NOTE

For LAN-to-LAN operation, configure your local and remote NetWare LANs with unique network numbers before configuring and operating the Router. This includes all network numbers for all frame types. These numbers are set in the AUTOEXECNCF files of your NetWare file servers, with the “BIND IPX TO lan_driver NET= net_number” statements. Before proceeding with your Router software installation, make sure that your local and remote IPX LANs have unique network numbers.

For User-to-LAN operation, each remote user (client) must also have a unique NetWare network number. By default, the Router automatically assigns a unique network number to each client. If you want the client to define the IPX network number used, set the IPX network number of the Router’s modem to zero using the “ifconfig” command. If the client and the Router have different assigned IPX network numbers, then the Router will use the higher network number of the two.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

5.3 Installation Examples

5.3.1 ASYNC ROUTER AR-P, ASYNC ROUTER AR-5

Figure 5-1. Async Router AR-P, Async Router AR-5.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Define LAN Parameters:

Password:

Welcome root to the Router (4.0)

The following configuration information must be supplied before the Router can become operational. Default values for each parameter are shown in parentheses.

Press <Esc> at any prompt to cancel this script and delete the configuration.

This system: Name (Router): paris Root password (): Retype password: Link password: Retype password: Date/time in yymmddhhmm[.ss] format (9408291604.01):

Enable IPX routing (y): y Enable IP routing (y): y

Define LAN parameters for local Router:

Ethernet: IPX: Ethernet_802.3: Network (): 1 Ethernet_II: Network (): 2

802.2: Network (): 3 SNAP: Network (): 4

IP: address (): 131.143.19.72 subnet mask (255.255.0.0): 255.255.252.0

Syslog IP address (): 131.143.19.72 Do you have domain name servers? (n): y Domain name servers: IP address (): 131.143.16.1 IP address (): Domain suffix (com): rns.com

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Define Modem Parameters:

Do you want to configure and use modem0 now (y): y

What type of system are you connecting this modem to?

1) Async Router AR-P, AR-5, or Sync Router

2) Async Client or other client

3) Livingston Portmaster

4) Telebit NetBlazer or PN

5) Other LAN to LAN

Please enter the number of your choice (1): 1

Define modem0 parameters:

Remote site information: Phone # ( ): 805-555-1212 Maximum minutes of phone usage per day (1440): Name (remote0): ventura Link password ( ): Retype password: IP address ( ): 131.143.23.25 IP subnet mask (255.255.0.0): 255.255.252.0 Branch offices usually have a default route pointing to the home office You have no default route Add a default route to modem0 (y): y

Define modem1 (if present)

Do you want to configure and use modem1 now (y): y

What type of system are you connecting this modem to?

1) Async Router AR-P, AR-5, or Sync Router

2) Async Client or other client

3) Livingston Portmaster

4) Telebit NetBlazer or PN

5) Other LAN to LAN

Please enter the number of your choice (1): 2

Remote site information:

Remote Client IP address, optional ( ): 143.143.33.33

Do you want to configure and use modem2 now (y): y

What type of system are you connecting this modem to?

1) Async Router AR-P, AR-5, or Sync Router

2) Async Client or other client

3) Livingston Portmaster

4) Telebit NetBlazer or PN

5) Other LAN to LAN

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Please enter the number of your choice (1): 3

Define modem2 (if present)

Remote site information:

Phone # ( ): 213-555-1212 Maximum minutes of phone usage per day (1440): Name (remote2): LAoffice Authentication (N)one, (P)AP, or (C)HAP (C): P Link password ( ): Retype password: IP address ( ): 132.222.23.12 IP subnet mask (255.255.0.0): Branch offices usually have a default route pointing to the home office You have no default route Add a default route to modem0 (y): n Login name ( ): frank Login password ( ): Retype password:

Do you want to configure and use modem3 now (y): y

What type of system are you connecting this modem to?

1) Async Router AR-P, AR-5, or Sync Router

2) Async Client or other client

3) Livingston Portmaster

4) Telebit NetBlazer or PN

5) Other LAN to LAN

Define modem3 (if present)

Please enter the number of your choice (1): 4

Remote site information:

Phone # ( ): 714-555-1212 Maximum minutes of phone usage per day (1440): Name (remote3): orange Authentication (N)one, (P)AP, or (C)HAP (C): c Link password ( ): Retype password: IP address ( ): 132.132.12.80 IP subnet mask (255.255.0.0): Branch offices usually have a default route pointing to the home office You have no default route Add a default route to modem0 (y): n Login name ( ): linda Login password ( ): Retype password:

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Define modem4 (if present)

Do you want to configure and use modem4 now (y): y

What type of system are you connecting this modem to?

1) Async Router AR-P, AR-5, or Sync Router

2) Async Client or other client

3) Livingston Portmaster

4) Telebit NetBlazer or PN

5) Other LAN to LAN

Please enter the number of your choice (1): 5

Remote site information:

Phone # ( ): 213-345-2498 Maximum minutes of phone usage per day (1440): Name (remote4): marina Authentication (N)one, (P)AP, or (C)HAP (C): n IP address ( ): 205.322 200.76.30 IP subnet mask (255.255.255.0): Branch offices usually have a default route pointing to the home office You have no default route Add a default route to modem0 (y): n Login name ( ): bobby Login password ( ): Retype password: Script name (\other.dcf): mroutr.dcf

Define client access shift for this Router

Enter the client access shift time in hhmmhhmmMTWRFSU format (00002400MTWRFSU): 070019002300400mtwrfs

Do you want to save this configuration: y

wait.....

saving.....

Add clients to remote client database? (y): y Use express setup? Express setup assumes default values for the time, and quota and sets the callback number to <none>. (y): n Client name ( ): jones Client password ( ): Reenter password: Enable client (y): y Access time (0000 2400 MTWRFSU) - In, Out, Both (B): Time quota (1440 minutes)L Idle time (240 seconds): Callback phone number ( ): 19-1-210-555-2333

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Define clients

Add another client? (y): y Client name ( ): johnson Client password ( ): Reenter password: Enable client (y): n Access time (0000 2400 MTWRFSU) - In, Out, Both (B): Time quota (1440 minutes): Idle time (240 seconds): Callback phone number ( ): 19-1-210-555-1333

Add another client? (y): n

saving... (tcp/ip)paris>

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

5.3.2 SYNC ROUTER

Figure 5-2. Sync Router.

Define LAN parameters

Welcome root to the Router (4.0)

The following configuration information must be supplied before the Router can become operational. Default values for each parameter are shown in parentheses.

Press <ESC> at any prompt to cancel this script and delete the configuration.

This system: Name (Router): kansas Root password ( ): Retype password: Link password ( ): Date/time in yymmddhhmm[.ss] format (940910942.36):

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Enable IPX routing (y): y Enable IP routing (y): y

Define LAN parameters for local Router:

Ethernet:

IPX: Ethernet_802.3: Network ( ): 1 Ethernet_II: Network ( ): 2

802.2: Network ( ): 3 SNAP: Network ( ): 4

IP:

address ( ): 128.129.100.1 subnet mask (255.255.0.0): 255.255.255.0

Syslog IP address ( ): Do you have domain name servers? (n): y Domain name servers: IP address ( ): 128.129.100.50 IP address ( ): Domain suffix (com): widgets.com

Define Sync/Modem Parameters:

Do you want to configure and use sync0 now (y): y Is this a leased line (y): y

Remote site information:

Name (sremote0): malibu Authentication (N)one, (P)AP, or (C)HAP (N): P Link password ( ): Retype password: IP address ( ): 128.129.90.90 IP subnet mask (255.255.0.0) Branch offices usually have a default route pointing to the home office You have no default route Add a default route to sync0 (y): y

Do you want to configure and use modem0 now (y): y

Is modem0 a fallback line for sync0 (y): n

What type of system are you connecting this modem to?

1) Sync Router

2) Async Client or other client

3) Livingston Portmaster

4) Telebit NetBlazer or PN

5) Other LAN to LAN

Please enter the number of your choice (1): 1

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Remote site information:

Phone # ( ): 1-210-555-1212 Name (remote0): georgia Link password ( ): Retype password: IP address ( ): 128.129.13.1 IP subnet mask (255.255.0.0): Branch offices usually have a default route pointing to the home office You have no default route Add a default route to modem0 (y): n

Do you want to save this configuration: y

wait... saving...

Add clients to remote client database? (y): y

Use express setup? Express setup assumes default values for the time, and quota and sets the callback number to <none>. (y): y Client name ( ): jones Client password ( ): Reenter password: Enable client (y): n

Add another client? (y): n

saving... (tcp/ip)kansas>

5.4 Parameters

Name and Password Syntaxes

All types of names

• have 1 to 31 alphanumeric characters

• do not contain periods “.”

• start with a letter

• are case-sensitive

All types of passwords are 6 to 15 alphanumeric characters, and are case-sensitive.

During initial configuration, current values of parameters are shown in parentheses ( ) on the console

display.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

5.4.1 LAN PARAMETERS

Record all parameters in the Installation Reference (see Appendix F), and store the it in a secure place.

• Name—Enter the system name of the Router you are configuring. The system name may contain a 1 to 31 characters, but must not contain periods. Do not use the default name of “Router.” Each Router must have a unique system name. When referencing this Router on other systems, use the system name exactly as entered on your Router, for their remote system name.

Commonly the system name is a location or description that distinguishes the Router from other nodes in your network.The Router uses its system name when establishing a WAN connection. The system name is used by all other systems that are connected to this Router.

• Root password—Enter the password required to log in to the Router as a root user. A unique password is required. Null passwords are not secure, and are not accepted. The root password must have 6 to 15 alphanumeric characters, and is case-sensitive.

The system administrator uses the root password to log into this Router through a telnet or RouterVu session, or by pp, or from a serial terminal.

• Link password—Enter the password that remote Routers (or other systems) must use to access this Router. The link password must be entered twice and will not be displayed on the screen. The link password must be identical to the remote system’s link password on all other Routers (or other systems).

• Date/time—Enter the date and time in the format yymmddhhmm[.ss], where yy is the last two digits of the year, mm is the month number, dd is the day (with leading zero), hh is the hour (24 hour format), and mm is the minute. The seconds parameter .ss is optional. The default shown is the system clock, which is preset at the factory.

• Enable IPX routing?—Enter yes, if you are using Novell

NetWare on your LANs.

• Enable IP routing?—Enter yes, if you are using TCP/IP on your LANs.

• IPX: network numbers ()—(If IPX protocol is used) Enter the IPX (NetWare) network numbers (in hexadecimal) for each Ethernet frame type activated on the local Ethernet. You must enter an IPX network number for at least one frame type, although it is not necessary to enter an IPX network number for each frame type. Only enter network numbers for the frame types that you are using on your local Ethernet. If you are not using a frame type, enter a “0” for the network number for that frame type.

These IPX network numbers are the same as the network numbers configured on your NetWare servers.

Before configuring and operating the Router, configure your local and remote NetWare LANs with unique (different) IPX network numbers. This includes all IPX network numbers for all frame types. These numbers are set in the AUTOEXEC.NCF files of your NetWare file servers, with the “BIND IPX TO lan_driver NET= net number” statements.

• IP address (If TCP/IP protocol is used...)—Enter the IP address for the local Router. Use dotted-quad notation for your IP address: d.d.d.d, where d is a decimal number. A 32-bit IP address consists of four 8-bit decimal numbers separated by periods, for example, 128.66.16.100. Do not use any other format for your IP address.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

• IP subnet mask—Enter the subnet mask desired, in decimal dotted-quad notation. The subnet mask defaults to all ones for the network portion and all zeroes for the host portion, which corresponds to the class of IP address entered. Typical subnet masks are specified in Table 5-1, in decimal dotted- quad notation and bits notation.

Bits notation represents the number of contiguous high-order bits with a value of one that define the subnet portion of an IP address.

Table 5-1. IP Subnet Mask Default Values by Class.

IP Address Class Subnet Mask Bits

10.0.0.1 A 255.0.0.0 8

128.66.2.1 B 255.255.0.0 16

192.0.2.1 C 255.255.255.0 24

• Syslog IP address—Enter the IP address of a remote host capable of logging syslog messages. The Syslog IP address is optional. For more information, refer to the syslog command in the Reference Guide, which starts on page 137, and the system administration manual for your syslog host.

• Domain name server (DNS) IP addresses—Enter the IP addresses of the preferred domain name servers on your network. Use dotted-quad notation: d.d.d.d, where d is a decimal number.

Domain name servers allow users to specify network nodes by name, instead of by IP address. If you configure the Router to use a domain name server on your network, you can use a host name instead of the IP address in many of the Router commands.

Do not specify the address of a domain name server that can only be reached using a WAN interface (modem or sync). If you do, it will cause the Router to dial the phone on all name lookups, and will increase your phone costs unnecessarily.

• Domain suffix—Enter the domain name suffix desired. The domain name suffix is the last group of letters separated by a period (for example, ms.com). Do not include a leading period in the domain suffix you enter. This domain suffix is automatically appended to a hostname entered with a Router command.

To terminate the list of servers press RETURN at the IP address (): prompt. If you do not use a domain suffix, just press RETURN.

Domain names of similar types of organizations on the Internet usually use a common suffix. Typical suffices and organization types are shown in Table 5-2.

5.4.2 C

HOOSE METHOD OF CLIENT AUTHENTICATION

How do you want to authenticate users connecting to a Router?

Enter the client authentication method desired. The client authentication method only applies to dialin clients (client to router), and does not apply to LAN-to-LAN services (router to router). If you already have a configured SecurID or RADIUS server on your network, you can choose either to use it (choose 2 or 3), or to use the Router (to store names and passwords; choose 1).

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

NOTE

To use a SecurID or RADIUS server, your network must use the TCP/IP protocols.

Table 5-2. Domain Name Suffix Types.

Suffix Organization Type

com Commercial organizations

edu Educational institutions

gov Government facilities

mil Military groups

net Major network support centers

org Other organizations

(country code) Country other than USA

If you want to use a SecurID server...

You must have a SecurID card that is configured with a username on the SecurID server. At the end of the Router’s configuration script, you will be prompted through a process where you will be validated by the SecurID server for the first time. You will need your SecurID card and its associated username at that time. During normal operations, a SecurID user must provide a valid username (defined on the SecurID server), a numeric code shown on the card’s LCD display, and an optional PIN number defined by the user.

If you want to use a RADIUS server...

You must have the username(s) and IP address(es) of the RADIUS server(s) that you wish to use. The Router will prompt you to provide the name(s) and password(s) configured on those server(s).

5.4.3 M

ODEM PARAMETERS

• modem0—The first modem interface.

• modem1—The second modem interface (Async Router AR-5 only).

• modem2—The third modem interface (Async Router AR-5 only).

• modem3—The fourth modem interface (Async Router AR-5 only).

• modem4—The fifth modem interface (Async Router AR-5 only).

• type of system—Select the type of remote system to be connected to the Router via the modem port. Typically, this remote system is a Router or a remote client, but can also be a Livingston Portmaster, Telebit

NetBlazer®, or other similar system.

• Phone #—Enter the telephone number of the remote system. The telephone number must begin with a numeral and may contain special characters, such as commas, to indicate a pause. For more information, refer to the Reference Guide.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

• Maximum number of minutes—For dialup interfaces only, this parameter limits the time allowed per day for a dialup interface. Also known as the dialup quota.

• Name—Enter name of the remote system. This name must be identical to the system name configured on the remote system.

• Authentication—Specify either PAP, CHAP, or none, whichever is appropriate for the remote site. If the remote system does not support CHAP, then disable this encryption function by entering N, or by using the ppp command later. The Router supports PAP and CHAP, and defaults to CHAP.

• Link password—For PAP and CHAP Only. Enter the password required to access the remote system. A link password is required for PAP or CHAP authentication on the WAN interface. The link password is used by a remote Router (or other remote system) to access the local Router using the WAN port. This link password must be identical to the link password configured on the remote Router (or system).

• IP address—Enter the IP address for the remote system, using dotted-quad notation: d d.d.d, where d is a decimal number, and 0<d<255.

• IP subnet mask—Enter the subnet mask for the remote system, in decimal dotted-quad notation. The subnet mask defaults to all ones for the network portion and all zeroes for the host portion, which corresponds to the class of the IP address entered. Refer to Table 5-1.

• Login name—Enter the name required to log into the remote system. The login name for the remote system is not necessarily the name used during PAP/CHAP authentication. The Livingston Portmaster and the Telebit NetBlazer can be configured to present a login and password prompt to systems attempting to connect. The Router sends the login name in response to the “login:” prompt from the remote system.

• Login password—Enter the password required to log into the remote system. The login password is not necessarily the link password used during PAP/CHAP authentication. The Router sends the login password in response to the “password:” prompt from the remote system.

• Script name—The name of the file that contains the dialer script used when the Router connects to the remote system. If you choose a Livingston Portmaster or Telebit NetBlazer as the remote system, a dialer script is provided on the Router diskette. If you specify “Other,” you must provide a dialerscript filename.

• Default route—To ensure that traffic with unknown addresses is handled properly (typically passed to the Internet), you can choose to set a default route through any interface. The interface for the default route must be selected by your network administrator, because the entire network must be considered.

When configuring a Router link between two sites, one site is designated as the home office and the other site designated as a branch office. If the system at the other end of the line on this interface is the home office, then the default route will be set through that interface so that all traffic to destinations not on your local network is sent to the home office.

If you are configuring a Router with more than one WAN interface, this question is asked for each WAN interface until a default route is chosen. Indicate the default route through the interface that connects to the home office by answering yes for that interface. Once you have set the default route, the question is not asked again. If neither site is the home office, answer no to the question each time.

NOTE

It is possible to set the default route to point to a node on the Router’s Ethernet.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

• Remote Client IP address—Enter an optional IP address a remote client uses to access the Router using that modem port. You or your network administrator must decide whether to assign an IP address to a remote client modem. The default is no IP address assigned to a remote client when they dial in.

If you assign an IP address to a modem line that is configured for client access (on the Router), then that IP address is automatically assigned to the remote client, during the remote-client login process. Any remote client application (operating on the remote user’s PC) must be configured with the same IP address (assigned to the line used for the client to dial in). The IP address assigned by the Router (to the Router modem) always overrides any IP address set by the remote client application.

If you choose not to assign an IP address to a modem, then the remote client application must supply the IP address to be assigned to the remote client at login time. To configure a client’s IP address in the Remote Office software, click on the More button for your phonebook record, and then click on the Protocol button.

NOTE

The IP address assigned to the remote client must always be a valid IP address on the subnet to which the Router is attached.

Client access is not supported over the sync0 interface (Sync Router).

• client access shift—Enter the client access shift, which is valid for all modems configured for client access. The Router uses the client access shift to restrict remote client access to a specific time period: either inside of (during) the client access shift, outside of (not during) the client access shift, or both insid e and outside of the client access shift.

The client access shift is designated by a starting time and an ending time, in standard 24-hour format (0800 corresponds to 8:00 AM, 1700 corresponds to 5:00 PM, etc.). A sequence of letters corresponds to the days of the week for which the client access shift applies:

• M for Monday,

• T for Tuesday

• W for Wednesday

• R for Thursday

• F for Friday

• S for Saturday

• U for Sunday

Enter the starting time, the ending time, and the days of the week, on the same line, separated by single spaces. For example, “0800 1700 MTWRF” defines a typical 8-a.m. to 5-p.m. workweek.

5.4.4 S

YNC ROUTER PARAMETERS

Parameters specific to the Sync Router are listed here. Refer to the Modem parameters section for parameters not listed here.

• sync0—The synchronous interface (Sync Router only).

• Is this a leased line?—Enter yes or no. You can use the sync0 port to connect to another Sync Router (or other similar system) either via a leased line (dedicated) or via a non-leased line (switched circuit).

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

A leased line is a type of phone service that offers a continuous connection between two sites, typically at data rates of 56 Kbps (USA) or 64 Kbps (Europe). Leased lines are often referred to as DDS lines (digital data service).

A non-leased line (switched), such as Switched-56, offers a high-speed dialup connection (typically 56 Kbps).

• Use as a backup?—For leased lines only, the analog modem (modem0) on the Sync Router can be used to establish a second dialup connection to the same remote site. This second line would not be used unless the sync0 port ceased to work correctly.

The analog modem can be used as a backup connection for leased lines, but not for non-leased (switched) lines.

5.4.5 IP F

IREWALL PARAMETERS

Parameters specific to the IP firewall feature on Routers are listed here.

Do you want the firewall described in the documentation?

Answer yes if you want to install a list of IP filters designed to protect your network when the Router is used to provide Internet access.

Public server IP address

Enter the IP address of the public server on the LAN connected to the Router.

Do you allow TELNET to the server (n):

If you want to allow telnet activities to your public server from outside of your network, enter “y” to this question.

5.4.6 C

LIENT PARAMETERS

NOTE

If you have chosen to use a SecurID or RADIUS server, you do not have to configure clients on the Router.

Client parameters are configured for each remote client. The Router gives you the option of using Express Setup, to choose the following default values for access time, time quota, idle time, and no callback:

• access time both inside and outside of the client access shift

• 1440 minutes time quota

• 240 seconds idle time

• no callback phone number (disabled)

To add many remote clients easily, with the default values above, use this faster method.

Express Setup assumes default values, so you enter only for each client: client name, client password, and if the client is enabled. After you completely enter the data for one client, the Router prompts you for another client. If you do not want to add more clients, enter n, and press RETURN. The Router saves all remote client information on the diskette.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

• client access shift—Refer to Section 5.4.3.

• client name—Enter the name of the remote client. The client name must be 8 characters or less and

is not case-sensitive. The remote client application for the client must be configured with the same client name.

• client password—Enter the password for the remote client. The client password must be 8 characters or

less and is not case-sensitive. The remote client software for the client must be configured with the same client password.

• enable client—Enter y to enable the client, or n to disable the client. If a remote client is enabled, then

the client can access the network via the Router, during the time interval determined by the client’s access time and the client access shift of the Router. If a remote client is disabled, then the client cannot access the network via the Router at any time.

• access time—Enter the access time code for the client. Enter 1 for access during the client access shift,

0 for access at any time not during the client access shift, or B for access at all times. The access time for a remote client is defined in terms of the client access shift for the Router. Access time is either inside of (during) the client access shift, outside of (not during) the client access shift, or both inside and outside of the client access shift (24 hour access).

• time quota—Enter the time quota for the client, in minutes per day, from 0 to 1440. The default time

quota is 1440 minutes (24 hours). The time quota limits the amount of Router connection time allowed each day, for each remote client (with callback enabled). Time accrues against the time quota only when the Router initiates a callback during the authentication process. When a remote client (without callback enabled) initiates a call, that time is not accrued against the time quota.

• idle time—Enter the idle time desired, in seconds (0 to 86400). The idle time default is 240 seconds (4

minutes). The idle time is the time allowed before the Router drops the telephone line, when there is no network traffic over that line. After the telephone line is dropped, the remote client must reinitiate the login and authentication process, in order to connect. To log back into the Router after the idle timer has expired, choose “Login to a Router” from the Connection menu of the DOS or Windows interface. Note that the Router and remote client must go through authentication each time that a client dials in.

• callback phone number—Enter the telephone number where the client can be reached. The telephone

number must begin with a numeral, and may contain special characters. The default for each client is no callback number.

If callback is enabled, after normal client authentication, the Router puts the client into auto-answer mode, disconnects the telephone line, and calls the client back at the callback number. This ensures that the remote client is accessing the network from a predetermined location and telephone number. Note that there is no method for changing the callback number from the remote client side, which is what makes it secure.

The callback number is a security feature that is only available if the remote client is using the Async Client remote access software (called Remote Office).

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

6. Configure and Test

This chapter illustrates how to:

• Configure hosts on your TCP/IP network to interoperate with the Router

• Test Router TCP/IP installations using ping

• Test Router IPX installations using ping

If you are not running TCP/IP on your network, proceed to Section 6.3 and test your network.

If you are running TCP on your network, configure your hosts and then proceed to Section 6.2.

6.1 Configure Hosts on TCP/IP Network

You might need to reconfigure some of the hosts on a TCP/IP network (LAN) to interoperate with a Router.

1. Add the name and IP address of your Router to each host that accesses it.

For Sun 4.x/BSD UNIX systems, add this line to the /etclhosts or domain name data file (if you are using DNS) for each host you want to identify:

Router_lP_address Router_name

For example:

192.1.1.1 salesoffcel

2. For BSD-based UNIX systems, reconfigure applications (that can time out) to allow 30 to 60 seconds for the worst-case dialup connection time.

Note that the Router can take up to 30 seconds (or much less for sync) to establish the connection.

To reconfigure the sendmail daemon for connection time, use one of the following two methods:

Method 1

Disable the periodic queue rescan from the sendmail daemon, and write a custom mini-daemon to execute from a root crontab entry to take two back-to-back passes at the sendmail queue each hour. Add these lines to cron fi1e:

/usr/lib/sendmail -q #once to bring up the link /usr/lib/sendmail -q #once to deliver the mail

Method 2

Implement a set-UID root script to rescan the queue and invoke sendmail when the connection is brought up. Several IP service providers use this method for incoming-only lines. The sendmail -R string works.

3. If you are not using RIP on your network, add a route to the Router for each host on your network that accesses nodes on the remote network.

On a Sun 4.x/BSD UNIX system, either add a default route to the Router by adding a /etc/ defaultrouter file containing the entry:

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Router_name or IP_address

or add the following route command to the /etc/rc.local file:

route add remote_lP_addresslocal_Router_IP addressl

4. Proceed to the next section, and test your network using ping.

6.2 Test TCP/lP Networks Using Ping

To systematically verify connectivity, power up the Router and observe the messages on the console. Establish a PPP connection on your WAN interface, using the update now command. If CHAP or PAP hasn’t failed, then perform the “ping” tests. The ping tests provide a minimal set of results that can be used to help verify network connectivity and resolve problems.

To perform all of the ping tests, you will require the help of an associate at the remote site. If an

associate is not available, then you can perform the first four ping tests.

On the diagram, circle the test numbers if the ping is successful, and record the IP addresses and

subnet masks used. If desired, fax these two completed diagrams to your technical-support person.

For more information, refer to ping in Section 4.10 of the Reference Guide, which begins on page 137.

If you perform all of the steps here and still have problems, refer to Appendix C of this manual.

Figure 6-1. Ping from the Local Ethernet.

system name

subnet (IP)

IP address

system name

subnet (IP)

IP address

system name

subnet (IP)

IP address

system name

subnet (IP)

IP address

You

ping

You

ping

Your associate

Async

Router

Async

Router

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

6.2.1 PING FROM THE LOCAL ETHERNET

Refer to Figure 6- l.

1. From the local Router, ping a workstation on the local Ethernet.

Enter ping IP_address (of local workstation) and wait for the result. This test passes if you see a round-trip time displayed in milliseconds. This test fails if you see a response similar to “Target does not respond.”

If this test fails, then

• Make sure that the local workstation and local Router are physically attached to the same Ethernet, by checking the cables.

• Verify that the local host and local Router are configured with the same network number and subnet mask. Display the IP address and subnet mask for the Ethernet interface eth0 on the Router using the if config command. Consult the system administration manual for the local host to determine how to display the IP address and subnet mask for its Ethernet interface.

2. From the local Router, ping the remote Router.

• Establish a dialup connection from your Router to the remote Router. Use the -s option to continuously transmit the ping.

On the local Router, enter:

ping -s IP_address_of_remote_Router

You should hear the modem dial, the remote system answer, and a series of tones. A Sync Router will not emit any sounds. When the speaker turns off the connection is made. This process can take up to 30 seconds (or much shorter, when using the sync0 interface). During this time the displayed response from the ping command is:

Target did not respond

Once the speaker turns off, the test is successful if a round-trip time to the remote system is displayed, similar to:

Round trip time: 180

3. From a workstation on the local Ethernet, ping the remote Router. You should only do this test if you want the ability to configure the remote Router from this workstation on the local Ethernet.

Enter syslog on. Next enter ping -s [IP_address] (of remote Router) and wait for the result. This test passes if you see a round-trip time displayed in milliseconds. This test fails if you see a response similar to “Target does not respond.”

If this test fails, then:

• Determine if a WAN connection has been established between two Routers. Use the dialup interface status command for dialup connections (look for called out or serving call), or use the ppp sync0 command for leased lines (look for IPCP opened).

• If the WAN link does not come up, try using trace [interface] to see what kind of traffic is traveling the link.

4. From a workstation on the local Ethernet, ping a workstation on the remote Ethernet. Wait up to 60 seconds for the result.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Enter ping -s [IP_address] (of remote workstation) and wait for the result. This test passes if you see a round trip time displayed in milliseconds. This test fails if you see a response similar to “Target does not respond.”

If this test fails, then

• Have an associate perform tests 5-8 on the following pages.

• From a workstation on the local Ethernet, telnet to the remote Router, log in as root, and issue the route command.

6.2.2 P

ING FROM THE REMOTE ETHERNET

Now have an associate at the remote site perform similar tests. Refer to Figure 6-2.

5. From the remote Router, ping a workstation on the remote Ethernet.

On a remote Router, have an associate enter syslog on. Next have him enter ping -s [IP_address] (of remote workstation) and wait for the result. This test passes if you see a round trip time displayed in milliseconds. This test fails if you see a response similar to “Target does not respond.”

If this test fails, then

• Make sure that the remote workstation and remote Router are physically attached to the same Ethernet, by checking the cables.

• Issue a ping to another host on the remote network. From the Router enter:

ping IP_address_of_a_remote_node

If the ping command displays the message:

Target did not respond

refer to Appendix C.

6. From the remote Router, ping the local Router. Wait up to 60 seconds, or less (for sync transmission) for the result.

On a remote Router, have an associate enter syslog on. Next have your associate enter ping -s [IP_address] (of local Router) and wait for the result. This test passes if you see a round-trip time displayed in milliseconds. This test fails if you see a response similar to “Target does not respond.”

If this test fails, then

• Enter syslog on.

• Establish a dialup connection from the remote Router to the local Router. Use the -s option to continuously transmit the ping.

On the remote Router, have your associate enter:

ping -s IP address of local_Router

Your associate should hear the modem dial, the local system answer, and a series of tones. When the speaker turns off the connection is made. This process can take up to 30 seconds (or much shorter, when using the sync0 interface). During this time the displayed response from the ping command is:

Target did not respond

aASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUALCHAPTER

Once the speaker turns off, the test is successful if a round-trip time to the local system is displayed, similar to:

Round trip time: 180

aASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Figure 6-2. Ping from the Remote Ethernet.

7. From a workstation on the remote Ethernet, ping the local Router. You should only do this test if you want the ability to configure the local Router from this workstation on the remote Ethernet.

On a remote workstation, have an associate enter syslog on. Next have your associate enter ping -s IP_address (of local Router) and wait for the result. This test passes if you see a round-trip time displayed in milliseconds. This test fails if you see a response similar to “Target does not respond.”

If this test fails, then

• Determine if a WAN connection has been established between the two Routers. Use the dialup

interface status command for dialup connections (look for called out or serving call), or use the ppp sync0 command for leased lines (look for IPCP opened).

• If the WAN link does not come up, try using trace [interface] to see what kind of traffic is traveling the link.

8. From a workstation on the remote Ethernet, ping a workstation on the local Ethernet.

Have your associate enter ping -s IP address (of local workstation) and wait for the result. This test passes if your associate sees a round-trip time displayed in milliseconds. This test fails if he sees a response similar to “Target does not respond.”

If this test fails, then

• From a workstation on the remote Ethernet, telnet to the local Router, log in as root, and issue the route command.

system name

subnet (IP)

IP address

system name

subnet (IP)

IP address

system name

subnet (IP)

IP address

system name

subnet (IP)

IP address

You

ping

Your associate

Async

Router

Async

Router

Your associate

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

6.3 Test IPX Networks Using RouterVu

To systematically verify connectivity, power up the Router and observe the messages on the console. Establish a PPP connection on your WAN interface using the update now command.

If CHAP or PAP hasn’t failed, then perform the “ping” tests. The ping tests provide a minimal set of

results that can be used to help verify network connectivity and resolve problems.

On the diagram, circle the test numbers if the ping is successful, and record the node names and

network addresses used. If desired, fax these two completed diagrams to your technical-support person.

For more information, refer to “ping” in Section 3.10 of the Reference Manual.

IPX RouterVu tests:

You must use a PC with RouterVu to run the following tests. You must have a NetWare File Server on your remote Ethernet, that is reachable through the Routers.

NOTE

For the ping tests to work, in your local SAP table you must be able to see the host that you want to ping. Otherwise the ping will not work.

1. Determine the IPX network numbers of the local and remote Ethernets.

2. Run RouterVu on your local PC and issue the following

routervu - a

The display should look similar to:

anole 00000020.02CFlF80060A (Router) archer 00000040.02CFlF80060B (Router) DAFFY 00DAFF11.00801B027521 (IPX File Server) DAFFYII 00000043.00801B027520 (IPX File Server)

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Figure 6-3. Ping from the Local Ethernet.

3. Find the local Router in the output from step 2 above. If the local Router is named anole, then it should look similar to:

anole 00000020.02CFlF80060A (Router)

This entry shows that anole is on IPX network number 20 (in hexadecimal) and has an Ethernet address of 02CFIF80060A.

4. From the local PC running RouterVu, ping the local Router using the following command:

routervu -p local_Router_name

If you don’t see a response, check your cabling.

5. Find the remote Router in the output from step 2 above. If the remote Router is named archer, it should look similar to:

archer 00000040.02CFlF800608 (Router)

This entry shows that archer is on IPX network number 40 (in hexadecimal) and has an Ethernet address of 02CFlF80060B.

system name

network.node_address (IPX)

You

hoppervu

Your associate

Async

Router

Async Router

NetWare server

system name

network.node_address (IPX)

system name

network.node_address (IPX)

system name

network.node_address (IPX)

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

6. From the local PC running RouterVu, ping the remote Router using the following command:

routervu -p remote_Router_name

If the ping is not successful, wait approximately 45 seconds (if you’re using modems) for the call between the local and remote Routers and try the ping again. If the ping is successful, continue to step 7.

If a ping response is not displayed, then log in to the local Router and do the following:

routervu local_Router_name

For dialup interfaces (modems, sw56), enter:

dialup interface status

look for called out or serving call.

For leased-line interfaces (sync0), enter:

ppp sync 0

Look for IPXCP Opened.

7. Find the remote NetWare fileserver in the output from step 2 above. If the remote fileserver is named DAFFYII, the it should look similar to:

DAFFYII 00000043.00801B027520 (IPX File Server)

This entry shows that “server_name” has an internal IPX network number of 43 (in hexadecimal) and has an Ethernet address of 000000000001.

If you find an entry for the remote NetWare file server, continue with step 8.

If you do not see an entry for the remote NetWare fileserver, ask your associate at the other end of the link to see if a SAP entry is present for it on the remote Router.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

8. From the local PC running RouterVu, ping the remote NetWare fileserver using the following command:

routervu -p server_name

If the ping is successful, you have successfully completed initial IPX connectivity testing.

If the ping is not successful, wait approximately 45 seconds (if using modems) for the call between the local and remote Routers, and try the ping again.

If the ping is not successful, ask your associate to run ping from the remote Router to the remote NetWare fileserver.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Appendix A: Networking Examples

This appendix describes two typical Router installations:

• dialup LAN-to-LAN,

• synchronous LAN-to-LAN.

A.1 Dialup LAN-to-LAN

A.1.1 USING NAMES AND PASSWORDS

To provide basic security for your network, each Router is configured with a name, a root password and a link password. The Router name and link password are required when connecting to or from a remote router. The root password is additionally required to establish a telnet or ftp session (TCP/IP only) to the Router, or to establish a RouterVu session (IPX only) to the Router, or when logging in on the system console.

For security on the WAN interface, the Router can use either the Password Authentication Protocol (PAP) or Challenge Handshake Authentication Protocol (CHAP). The Router is configured to enable CHAP by default. The CHAP and PAP “handshake” requires a name and link password pair from each router. For example, when router A connects with router B, router A must present router A’s name and link password to router B. Conversely, when router B connects with router A, router B must present router B’s name and link password to router A. The name and link password for both ends of the link are maintained in the password file on the Router diskette. If the PAP or CHAP handshake does not complete successfully, the two devices are not allowed to communicate.

Name and password security is further illustrated by the following example. Consider the network connections made by Routers with the following system names, link passwords, and password file entries:

Table A-1. Connection Example: Async Router AR-5 to Async Router AR-Ps.

System Name Link Password password file entries

name/password

Async Router AR-5 paris all2paris hamburg/ham2paris

london/lon2paris northridge/nor2paris

Async Router AR-P hamburg ham2paris paris/all2paris

Async Router AR-P london lon2paris paris/all2paris

Async Router AR-P northridge nor2paris paris/all2paris

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Figure A-1. Connection Example: Async Router AR-5 to Async Router AR-Ps.

Configured for dialup clients

Async Router

AR-5

Paris

link password: all2paris

passwd file: paris / all2paris

Async Router

Hamburg

Async Router

London

Async Router

Northridge

passwd file: paris / all2paris

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

When the Async Router AR-5 calls any of the Async Router AR-Ps, the name (paris) and password (all2paris) are sent on the modem links in figure A- 1. Each Async Router AR-P’s password file contains an entry for the host paris with the link password all2paris. Figure A-2 illustrates the handshake when any of the Async Router AR-Ps call the Async Router AR-5.

Figure A-2. Connection Example: Async Router AR-5 to Async Router AR-P.

Async Router

AR-5

Paris

hamburg / ham2paris

london / lon2paris

northridge / nor2paris

Async Router

Hamburg

Async Router

London

Async Router

Northridge

link password: ham2paris

link password: lon2paris

link password: nor2paris

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

NOTE

If the name or link password of a Router (or other router) changes, all remote system password files that it logs into must be changed, or the authentication handshake will fail.

Names and link passwords are specified during the initial configuration of the Router. To change the name or link password later, use the config modify or the password commands . The names and link passwords at local and remote sites must correspond exactly, in order to successfully connect the two sites.

Figure A-3 shows the name and link password relationships between local and remote sites, as they would be specified during the initial configuration of those sites.

Figure A-3. Entering Names and Passwords During Initial Configuration.

This system:

Name ( Async Router ) : paris

Link Password ( ) : all2paris

Remote site information:

Name ( Async Router ) : hamburg

Link password ( ) : ham2paris

Paris

This system:

Name ( Async Router ) : hamburg

Link Password ( ) : ham2paris

Remote site information:

Name ( Async Router) : paris

Link password ( ) : all2parts

Hamburg

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

A.1.2 HOME/BRANCH OFFICE DESIGNATION

For each Router WAN link, one site is designated the home office and the other site is designated the branch office. The home office is usually a central site that may be attached to the Internet, and to connecting branch offices.

When a remote site is designated as a branch of fice (with IP routing enabled), a default route for the modem interface is added. When the remote router doesn’t know how to reach an address, it sends the traffic for that address to the home office, using the default route.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Figure A-4. Typical Configurations with Home and Branch Offices.

LAN-to-LAN

home

Async Router

AR-P

Async Router

AR-P

Async Router

AR-P

Async Router

AR-P

Async Router

AR-P

Async Router

AR-P

Async Router

AR-5

Async Router

AR-5

Async Router

AR-5

Async Router

AR-5

Async Router

AR-P

Async Router

AR-5

Async Router

AR-5

Async Router

AR-5

branch

LAN-to-LAN

(cascaded)

Async Client

Other Client

Async Client

Other Client

Rotary

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

A.2 Synchronous LAN-to-LAN

This example illustrates how the Sync Router uses its integrated modem as a backup for a synchronous connection. Consider the network and the routing tables given for the systems in Figure A-5.

Figure A-5. Modem as a Backup for a Synchronous Connection.

host1

host2

128.66.1.1

Sync Router A

10.4.0.106

sync0

Internet

home office

128.66.1.2

Sync Router B

sync0

modem0

Public Switched

Telephone

Network

modem0

128.66.14.1

Sync Router C

sync0

branch office

host3 host4

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

The routing table entries are:

• Sync Router A

Destination /Bits Interface Router/Next Hop Metric

128.66.0.0 /16 eth0 0

128.66.14.0 /24 eth0 128.66.1.2 2

default /0 sync0 10.4.0.106 1

• Sync Router B

Destination /Bits Interface Router/Next Hop Metric

128.66.14.0 /24 sync0 128.66.14.1 1

128.66.14.0 /24 modem0 128.66.14.1 3 redundant

128.66.0.0 /16 eth0 0

default /0 eth0 128.66.1.1 1

• Sync Router C

Destination /Bits Interface Router/Next Hop Metric

128.66.14.0 /24 eth0 0

default /0 sync0 128.66.1.2 1

default /0 modem0 128.66.1.2 3 redundant

Router B has redundant routes to the 128.66.14.0 subnetwork. Similarly, Router C has redundant default routes. As long as the synchronous link is operational, Router B will use it to reach subnetwork

128.66.14.0, because the route through the sync0 interface has a lower hop count (metric=l) than the route through modem0 (metric=3):

Similarly, Router C uses the synchronous link to reach any other location, because the route through the sync0 interface has a lower hop count (metric=l) than the route through modem0 (metric=3).

If the synchronous link fails, Router B and Router C maintain connections by automatically transferring traffic to their integrated modems.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Appendix B: Line Use

Use the procedures in this appendix to minimize telephone costs associated with dialup connections: over modem interfaces or switched synchronous (SW-56) lines.

This appendix describes:

• How to monitor line use

• How to limit line use

B.1 How to Monitor Line Use

While the Router is operating, monitor it for excessive line usage. Because of unforeseen sources of traffic, an incompletely configured network with a properly configured Router, can still produce excessive phone usage and costs.

Generally, the Router dialup line is most efficient when it is connected for less than 4-5 hours a day over a long distance carrier. To monitor the Router’s telephone line usage:

• Determine sources of last 5 dials

• Listen to the modem’s speaker (if the Router has a modem)

• Review syslog connection reports (IP networks only)

• Install usage warning process

NOTE

The Router never dials a client unless the client has dialed in, is acknowledged, is verified using a login name and associated password, and has security callback enabled.

B.1.1 D

ETERMINE SOURCES OF LAST 5 DIALS

Use the dialup modemX dial_log command to view the type of packets that caused the last five dials, for any of the WAN interfaces (modem, sync). For example, to examine what is going on with modem0, from tcp/ip mode enter

dialup modem0 dial_log

From ipx mode, enter

tcp dialup modem0 dial_log

B.1.2 L

ISTEN TO THE MODEM’S SPEAKER

If the modem speaker is enabled, it is activated whenever the Router places an outgoing call or answers an incoming call. During the first few days of operation, listen for frequent incoming or outgoing calls. Verify that any frequent calling is justified, by correlating it to the actual activities of your network users.

During an outgoing call, you will first hear the dial tone, then the modem dialing the number (using standard telephone touch tones), and then a series of tones while the modems make the connection. During an incoming call, you will not hear the dial tone or the dialing touch tones; you will only hear the modem-connection tones.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

The Router modem should only operate when someone is attempting to communicate with a remote host, as when logging in or sending mail to a remote host. If the Router modem dials for no apparent reason, restrict use of the phone line until the source of the traffic is determined.

Use the dialup volume command to control the Router’s internal modem speaker.

dialup modemX volume [off | low | medium | high]

B.1.3 T

URN ON SYSLOG (IP AND IPX NETWORKS)

To determine which host is initiating the majority of calls in an IPX network, turn syslog on. From ipx mode, enter the command:

tcp syslog on

Syslog messages will be displayed on the Router console, but are not saved (in a file).

To determine which host is initiating the majority of calls in an IP network, check your syslog host’s syslog file. Each night at approximately midnight, the Router sends a connection report to the syslog host, if both the Router and host are configured correctly. Refer to the system administrator manual for your syslog host and the syslog command in the Reference Manual.

To create a useful syslog file, configure the Router with your syslog host IP address, and configure your syslog host to save Router syslog messages to a file. The syslog host address may be configured at any time using:

syslog address host_address

Whenever an outgoing call is made, a syslog message similar to the following will be sent to your syslog host (and/or the console):

routerl modem0 Dialing for 128.66.32.120:4466->10.0.0.1:25

In this example, the host with IP address 128.66.32.120 is attempting to contact the host with IP address 10.0.0.1. The Router senses that the modem connection is down and begins dialing this host. The numbers following the colon (:) are the TCP or UDP port numbers. Host 128.66.32.120 is sending a mail datagram to the mail daemon on port 25 of host 10.0.0.1. The port number of the destination host usually indicates the type of data being sent. Use all of this information to investigate the reason for the numerous calls.

The syslog details the amount of time spent on the phone for the current day. For example:

Jan 1 00:00:00 routerl modem0 Connections: in 2 (0:00:04:11)

out S (0:03:58:50)

This report shows that the Router named “router1” made 5 outgoing calls, for a billable total of 3 hours, 58 minutes, and 50 seconds and accepted 2 incoming calls. If there are many outgoing calls, you may want to restrict the Router’s use of the telephone line. If there are many incoming calls from a system on a remote network belonging to your company, you may want to restrict the remote Router’s phone use.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

B.1.4 SET UPANEXCESSIVE-USE WARNING (IP NETWORKS ONLY)

You can configure the Router to send warnings during the day when more than a specified amount of time is used for outgoing calls on a given interface. First turn syslog on. From tcp/ip mode, enter

syslog on

Next enter the dialup warning command:

dialup interface warning mins

Whenever you have used more than mins minutes of time for outgoing calls in one day, a syslog message like this is sent to the syslog host and to the console:

router1 modem0 High usage, more than 240 minutes used today

In the example, the display indicates that the Router named router1 has placed more than 4 hours (240 minutes) of calls using the modem0 interface.

You can display the current warning setting by entering:

dialup interface warning

The default dialup quota for a WAN interface (modem, sync) is 24 hours per day, or 1140 minutes. Refer to the dialup command in Section 2.9 of the Reference Manual, which starts on page 137.

B.2 How to Limit Line Use

If the Router’s line use is excessive for an interface, you may want to limit it until you can determine the cause. Three methods are available:

• Set a dialup-time quota for that interface

• Use IP and IPX dial filters on that interface

• Use the Router link optimization suite of filters (NLO)

B.2.1 S

ET A DIALUP TIME QUOTA FOR THAT INTERFACE

To restrict the outgoing dialup-line use by all hosts to a time quota limit, use the dialup quota command. This command limits the amount of outgoing calls to mins minutes per day. Enter:

dialup interface quota mins

Because incoming calls are not listed on your phone bill, they are not monitored. At midnight each night the quota is reset back to mins minutes for another 24-hour period. By default, the quota is set to 1440 minutes (24 hours)—in other words, no quota at all. If you desire a smaller dialup quota, create one using the dialup quota command.

When the quota on an interface interface is reached, any current connection is dropped and cannot be renewed until the quota is reset, either automatically at midnight or by issuing another dialup quota command. In addition, the following syslog message is sent to the syslog host and to the console:

router1 modem0 Dropping link, time quota of 480 minutes exceeded

After this time, data packets received at this interface are discarded, and the following syslog message is sent to the syslog host and to the Router’s console:

router1 modem0 Can’t dial, time quota of 480 minutes exceeded

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

You can display the current-time quota setting and the balance of outgoing connect time by entering either:

dialup interface status

dialup interface quota

A typical status display is:

(tcp/ip)croy> dialup modem0 status

modem0: (14400/V1.500-CP39F)

DTR On RTS On CTS On DSR On RI Off DCD Off demand listening Timeout: 65535 Idle: 0:02:29:16 Remote phone: 14 Total time con: 0:01:36:13 Time since last boot: 5:03:59:32 Average daily connected time: 0:00:18:37 Daily quota: 1:00:00:00 Used: 0:00:14:09 Left: 0:23:45:51 Usage warning currently set at: 0:04:00:00

(tcp/ip)croy>

For more information, refer to the dialup command in Section 2.9 of the Reference Manual.

Use dialup status to determine the amount of dialup quota available on a particular interface. Typically, if you are averaging 1 hour of outgoing connect time per day, set your quota to 2 or 3 hours.

NOTE

Set your quota time slightly higher than the amount of time you expect to use, to ensure that legitimate connections are not disrupted.

B.2.2 H

OW TO TEMPORARILY INCREASE THE TIME QUOTA

You want to set the dialup-time quota higher than normal for a day, issue the dialup quota command to reset the time quota for the current day only. For example, if you have reached your normal limit of four hours (240 minutes), and want a few more hours to complete your work, then enter the command:

dialup modem0 quota 120

This command will reset the time quota to two more hours for today, for the modem0 interface. This command also sets the limit to a total of two hours on subsequent days. After using the increased time, remember to reset the time quota back to your normal limit tomorrow.

B.2.3 U

SE THE ROUTER’S PREDEFINED IP FILTERS

Typically, the Router can be configured to be the Internet entry point to the corporate network. All services that are defined to be reachable from the Internet are running on one public server. Other hosts (internal servers) cannot be reached from the Internet, but all local users are allowed to access servers on the Internet. When a Router is being used to provide Internet access for a corporate network, consider using the predefined IP filters to limit activities by Internet users who are ouside of your network. This list of IP filters is sometimes called an IP firewall.

There are two ways to install the predefined IP filters: during initial configuration or when executing config modify.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

At the end of initial configuration, if the default route for an interface points to a serial point-to-point interface (synchronous or modem), you will be offered a standard firewall configuration. For the question “Install standard Internet access firewall on iface?” answer Y to install the suite of predefined IP filters.

When executing config modify, answer Y to the same question in the previous paragraph, to install the IP filters. If there are filters already present with reserved names, and you request the standard firewall, all filters with names that begin with “$” are deleted, before the standard firewall is generated.

List of predefined IP filters

The predefined IP filter statements are:

1 filter add $OUTOK -f outbound -t allow

2 filter add $TCPOK -p tcpestab -t allow

3 filter add $FAKE25 -i iface -p tcpnew -s 25 -t deny

4 filter add $NOLOOP -s 127.0.0.0/8 -t deny

5 filter add $NORCMD -p tcp -d 512-515 -t deny

5a filter add $NOTN -p tcp -d 23 -t deny

6 filter add $SRVOK -p tcp -d server/32 -t allow

7 filter add $MAIL1 -i iface -p tcp -d 25 -t allow

8 filter add $MAIL2 -i iface -p tcp -s 25 -t allow

9 filter add $FTP1 -i iface -f inbound -p tcp -s 20 -t allow

10 filter add $DNS1 -i iface -p tcp -s 53 -t allow

11 filter add $DNS2 -i iface -p tcp -d 53 -t allow

12 filter add $DNS3 -i iface -p udp -s 53 -t allow

13 filter add $DNS4 -i iface -p udp -d 53 -t allow

14 filter add $RIP1 -i iface -p udp -s 520 -t allow

15 filter add $RIP2 -i iface -p udp -d 520 -t allow

Your customized filters are inserted here.

16 filter add $NOUDP -i iface -p udp -t deny

17 filter add $NOSRV -i iface -p tcpnew -f inbound -t deny

18 filter enable

Filter statements 1–15 are placed before any user-defined filter statements. Items 16–17 are placed after any user-defined filter statements.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Individual entries in the filter list accomplish the following:

1 filter add $OUTOK -f outbound -t allow

No outgoing packets need to be filtered. (Saves processing time).

2 filter add $TCPOK -p tcpestab -t allow

Packets on established TCP connections do not need to be filtered. (So any mention of TCP beyond this point in the list pertains only to NEW connections.)

3 filter add $FAKE25 -i iface -p tcpnew -s 25 -t deny

Prevents people from sneaking in with a remote client, that is pretending to be a remote mail server.

4 filter add $NOLOOP -s 127.0.0.0/8 -t deny

Block packets resulting from misconfigured DNS resolver.

5 filter add $NORCMD -p tcp -d 512-515 -t deny

Do not allow R-series commands across the link.

5a filter add $NOTN -p tcp -d 23 -t deny

If telnet is not allowed, block it.

6 filter add $SRVOK -p tcp -d server/32 -t allow

Allow connections to the local server host.

7 filter add $MAIL1 -i iface -p tcp -d 25 -t allow

8 filter add $MAIL2 -i iface -p tcp -s 25 -t allow

Allow all of your users to send and receive email.

9 filter add $FTP1 -i iface -f inbound -p tcp -s 20 -t allow

Allow inbound connections to the local FTP client data port.

10 filter add $DNS1 -i iface -p tcp -s 53 -t allow

11 filter add $DNS2 -i iface -p tcp -d 53 -t allow

12 filter add $DNS3 -i iface -p udp -s 53 -t allow

13 filter add $DNS4 -i iface -p udp -d 53 -t allow

Allow local machines full use of DNS.

14 filter add $RIP1 -i iface -p udp -s 520 -t allow

15 filter add $RIP2 -i iface -p udp -d 520 -t allow

Allow RIP packets across the link.

Your customized filters are inserted here.

16 filter add $NOUDP -i iface -p udp -t deny

17 filter add $NOSRV -i iface -p tcpnew -f inbound -t deny

Deny all services not mentioned above, for UDP and TCP.

18 filter enable

Enable all filter statements.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

B.2.4 USE THE ROUTER’S PREDEFINED IPX/SPX FILTERS

Idle and unnecessary IPX and SPX packet transmission can be selectively restricted by Router’s dial suppression feature (called RLO). RLO is essentially a predefined group of IPX and SPX filters, that filter unnecessary calling (calling not initiated by the user).

Using NLO, you can separately enable the Router to suppress dialing due to:

• Pings from NetWare servers

• SPX idle traffic

• NetBIOS name broadcasts between servers

• Any other IPX broadcasts

RLO reduces line use due to applications like Lotus

Notes, Windows®for Workgroups, Novell

NetWare Management System, and Cheyenne

ArcServe.

How to enable all RLO filters

Enter the following command to start the RLO filters:

ipx optimization on enable all NLO filters

When NLO is enabled, the Router is automatically configured to minimize unnecessary dialing.

How to disable the NLO filters

Enter the following command to disable the NLO filters:

ipx optimization off disable all NLO filters

B.2.5 W

RITE YOUR OWN IP AND IPX FILTERS

To prevent certain hosts or networks from making connections with your Router, employ an IP or IPX dial filter. Using dial filters does not restrict all hosts on your own network, as the dialup-quota method does.

Dial filters are best used to restrict the access of specified hosts, networks and applications.

Use the -t nodial parameter of the filter command to create IP dial filters.

Use the filter, ripfilter, or sapfilter command to create IPX dial filters.

Simple IP filter example

A branch-office LAN is connected to its home office through a Router, and the home office is connected to the Internet. To prevent hosts on the Internet from routing through your home office over the dialup connection to your remote office, install an IP dial filter. For example, domain-name packets entering the system with a destination port number 53 cannot be sent to the remote office on the modem0 port when the following command is entered to the home-office Router:

filter add dnsfilter -d any 53 -t nodial -i modem0 -f outbound

filter enable

Also refer to the filter command in Section 3.6 of the Reference Manual, which begins on page 137.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

NOTE

If a dialup connection has already been established between offices, the filter does not prevent the packets from transitioning the link. The filter only prevents packets from causing the Router to initiate the connection by dialing out.

Long IP filter example

These filters can be entered from the Router command prompt. Do not use the IP addresses below. They are for EXAMPLE ONLY! Comments are preceded by “#”. The filters are executed in order, and the overall filtering depends upon the interplay of all of the filters.

#These filters will allow your network users to ping to hosts in the

outside world.

filter add f0 -s 199.98.122.1/32 -p 1 -t allow

filter add f00 -d 199.98.122.1/32 -p 1 -t allow

filter add f1 -s 199.98.122.3/32 -p 1 -t allow

filter add f2 -d 199.98.122.3/32 -p 1 -t allow

#These filters will allow FTP activities to and from the host

with IP address 199.98.122.3.

filter add f3 -s 199.98.122.3/32 -d any 20 -p 6 -t allow

filter add f4 -s any 20 -d 199.98.122.3/32 -p 6 -t allow

filter add f5 -s 199.98.122.3/32 20 -p 6 -t allow

filter add f6 -d 199.98.122.3/32 20 -p 6 -t allow

filter add f7 -s 199.98.122.3/32 -d any 21 -p 6 -t allow

filter add f8 -s any 21 -d 199.98.122.3/32 -p 6 -t allow

filter add f9 -s 199.98.122.3/32 -p 6 -t allow

filter add f10 -d 199.98.122.3/32 21 -p 6 -t allow

#These filters will block telnet activities originating from the

outside world, but will allow your network users to telnet to the

outside world.

filter add f11 -d any 23 -p 6 -t deny -i modem0 -f inbound

filter add f12 -s 199.98.122.3/32 -d any 23 -p 6 -t allow

filter add f13 -s any 23 -d 199.98.122.3/32 -p 6 -t allow

#These filters will allow mail to and from the host 199.98.122.3.

filter add f14 -s 199.98.122.3/32 -d any 25 -p 6 -t allow

filter add f15 -s any 25 -d 199.98.122.3/32 -p 6 -t allow

filter add f16 -s 199.98.122.3/32 25 -p 6 -t allow

filter add f17 -d 199.98.122.3/32 25 -p 6 -t allow

#These filters will allow udp and tcp transfers.

filter add f18 -s 199.98.122.3/32 -d any 53 -p 6 -t allow

filter add f19 -s any 53 -d 199.98.122.3/32 -p 6 -t allow

filter add f20 -s 199.98.122.3/32 53 -p 6 -t allow

filter add f21 -d 199.98.122.3/32 53 -p 6 -t allow

filter add f22 -s 199.98.122.3/32 -d any 53 -p 17 -t allow

filter add f23 -s any 53 -d 199.98.122.3/32 -p 17 -t allow

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

filter add f24 -s 199.98.122.3/32 53 -p 17 -t allow

filter add f25 -d 199.98.122.3/32 53 -p 17 -t allow

#This filter will deny all inbound traffic EXCEPT for the traffic

allowed by previous filters.

filter add modemok -s any -d any -t deny -i modem0 -f inbound

#This command will enable all the filters listed previously.

filter enable

After filtering, reestablish dialup time quotas

Once sources of excessive dialing activities have been identified and filtered, you may want to increase the dialup time quota to allow for normal demand. Enter the following command for the new dialup quota:

dialup interface quota mins

This will set the quota to mins for the rest of the current day and for subsequent days.

NOTE

When the time quota is reached, phone connections are immediately dropped. For uninterrupted service, issue the above command before the quota limit is reached.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Appendix C: Troubleshooting

Use this appendix to resolve network problems during Router installation or operation.

We strongly recommend that you perform the ping tests described in Chapter 6.

There are several ways to use the information in this appendix:

• Use the LED descriptions to quickly determine which interface that the problem is occurring on.

• Use Router commands to discover more about your particular problem. Review the brief list of Router commands that are generally useful for solving network problems. Also refer to the complete descriptions in Chapters 2, 3, and 4 of the Reference Manual, which starts on page 137.

• Using a description of your problem or an error message, look for a match in this appendix:

- Initial configuration/start-up problems

- Operating problems

- Client problems

If you determine that the Router requires repair, refer to Section C.6.

Here is a list of common problems with the section numbers to look up for solutions:

• Initial configuration/start-up problems (Section C.3)

- Router cannot start—LEDs stay dark (Section C.3.1)

- Router cannot start—LEDs stay lit (Section C.3.2)

- Prompt is not displayed (Section C.3.3)

- Root password does not work (Section C.3.3)

- IP hosts on Ethernet cannot telnet to the Router (Section C.3.5)

- Cannot save configuration (Section C.3.6)

- Modem will not connect to remote modem (Section C.3.8)

• Operating problems (Section C.4)

- Cannot communicate with remote host (IP only) (Section C.4.1)

- Connection drops after a few seconds (Section C.4.2)

- Connection drops after a few hours (Section C.4.3)

- Constant remote dialup (Section C.4.4)

- NetWare servers are not displayed on remote host

- Unable to attach to a remote NetWare server (Section C.4.5)

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

- Remote server not found (IPX) (Section C.4.6)

- No connection slots available (IPX) (Section C.4.7)

- Misconfigured networks (IPX) (Section C.4.8)

• Client operating problems (Section C.5)

- Router does not answer when client calls (Section C.5.1)

- Router answers client call but connection fails (Section C.5.2)

C.1 LED descriptions

C.1.1 ASYNC ROUTER AR-P LEDS

Figure C-1. LEDs on the Async Router AR-P.

Table C-1. Descriptions of the LEDs on the Async Router AR-P.

Label Indicates If the LED is on

PWR Power Router is receiving power

ERR Error System error is detected

LNK Link status Ethernet connection is functional

NWK or NET Network activity Router is receiving or transmitting data over Ethernet

connection

DTR Data terminal ready Modem0 is ready to transmit

DCD Data carrier detect Modem0 is receiving carrier signal from remote modem

TX Transmit Modem0 is transmitting

RX Receive Modem0 is receiving

All LED lamps light as they are tested when the Router starts. They remain lit for 10 seconds before

resuming normal operation.

ASYNC ROUTER AR-P

PWR

LNK

NET

DTR

DCD

ERR

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

C.1.2 ASYNC ROUTER AR-5 LEDS

Figure C-2. Descriptions of the LEDs on the Async Router AR-5.

Table C-2. Descriptions of the LEDs on the Async Router AR-5.

Label Indicates If the LED is on

PWR Power Router is receiving power

ERR Error System error is detected

LNK Link status Ethernet connection is functional

NWK or NET Network activity Router is receiving or transmitting data over Ethernet

connection

0-4 DCD Data carrier detect Modem (0-4) is receiving carrier signal from remote modem

0-4 TX/RX Transmit/receive Modem (0-4) is transmitting or receiving

All LED lamps light as they are tested when the Router starts. They remain lit for 10 seconds before

resuming normal operations.

ASYNC ROUTER AR-5

PWR

LNK

DCD

Modems

ERR

NET

Tx/Rx

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

C.1.3 SYNC ROUTER LEDS

Figure C-3. LEDs on the Sync Router.

Table C-3. Descriptions of the LEDs on the Sync Router.

Label Indicates If the LED is on

PWR Power Router is receiving power

ERR Error System error is detected

LNK Link status Ethernet connection is functional

NET Network activity Router is receiving or transmitting data over Ethernet connection

DCD Data carrier detect Modem0 is receiving carrier signal from remote modem

DTR Data terminal ready Modem0 is ready to transmit

TX Transmit Modem0 is transmitting

RX Receive Modem0 is receiving

All LED lamps light as they are tested when the Router starts. They remain lit for 10 seconds before

resuming normal operation.

SYNC ROUTER

PWR

LNK

NET

DTR

DCD

ERR

Ethernet

Modem

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

C.2 Router Commands

Use the following commands to investigate problems with your Router. Use the prompt of the Router (tcp/ip> or ipx>) to remind you of which mode you are in (TCP/IP mode or IPX mode). Be aware that some commands can be used across modes, and others can only be used while in one of the modes. Note that some commands have the same name (ifconfig), but are mode-specific in their use.

C.2.1 F

OR ANY TYPE OF NETWORK (TCP/IP AND IPX)

• access—display or change primary shift time for clients

• asystat—display interface statistics for Router

• client—display or change remote client data on Router

• config—display or change Router system configuration

• date—display or change date

• default_mode—display or set default protocol mode (ipx or tcp/ip)

• dialup—display or change dialup parameters

• help—display commands available

• history—display last 25 Router commands issued

• hostname—display or change name of Router

• logout—terminate session with Router

• password—change user or link password for Router

• reboot—drop all connections and restart Router

• performance—display network performance statistics

• ppp—display or configure PPP protocol parameters

• ps—display status of active Router processes

• reboot—drop all connections and restart Router

• start—start a server (ftp, rip, snmp, telnet)

• stop—stop a server (ftp, rip, snmp, telnet)

• tip—send modem commands to a remote modem

• trace—display packet types sent or received on a interface

• tux—display status of TUX protocol connections

• update—update routing tables using RIP and SAP

• version—display software release level of Router

• who—display who is logged in to Router

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

C.2.2 FOR IPX (NETWARE) NETWORKS ONLY

• filter—display or change IPX filters

• if config—display or change IPX network parameters

• ipx—display or change IPX protocol parameters

• netstat—display IPX network statistics

• ping—send an ICMP packet to remote host

• ripfilter—display or change RIP protocol filters

• route—display and change IPX routing tables

• sap—display and change SAP routing tables

• sapfilter—display or change SAP protocol filters

• spoof—enable or disable protocol spoofing

• tcp/ip—change to TCP/IP mode

C.2.3 F

OR TCP/IP NETWORKS ONLY

• arp—display or change ARP protocol parameters

• domain—configure for Internet domain name service (DNS)

• filter—display or change TCP/IP filters

• icmp—display ICMP protocol status

• ifconfig—display or change TCP/IP network parameters

• ip—display or change TCP/IP protocol parameters

• ipx—change to IPX mode

• netstat—display TCP/IP network statistics

• ping—send an ICMP packet to remote host

• rip—display or change RIP protocol parameters

• route—display or change IP routing table

• snmp—display or change SNMP protocol parameters

• syslog—display or configure system log

• tcp—display or configure TCP protocol parameters

• traceroute—trace the route to a host

• udp—display UDP protocol status

For detailed information about the use of these commands, refer to Chapters 2, 3, and 4 in the Reference

Manual, which begins on page 137.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

C.2.4 ROUTERVU “REMOTE CONSOLE” FOR NETWARE NETWORKS

In IPX-only networks, use RouterVu on a PC to

• configure local Routers using a PC on the local Ethernet

• configure remote Routers

• troubleshoot network problems from both ends (Routers)

You can select a specific Router by name or IPX address (network number)

RouterVu enables users on IPX-only networks to log into and configure the Router remotely. RouterVu is a client/server application, with the client code running in DOS on a PC, and the server code running on the Router.

Syntax

routervu [option] [argument]

routervu—display RouterVu command syntax

routervu target—connect to the Router called target, or at the IPX network number target, and establish

an interactive session

routervu -n—show names of all connected Routers

routervu -a—show names of all connected Routers and NetWare file servers

routervu -p—ping once to the remote Router

routervu -s—ping continuously to the remote Router

routervu -i filename—use the input file filename to generate commands for the Router

routervu -o filename—copy all output to the file filename

Examples

• Display command syntax of routervu command.

routervu

• Connect to a remote Router named Kansas.

routervu kansas

• List to screen all connected Routers.

routervu -n

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Building list...

anole 00001111.02CFlF80060A (Router)

archer 00001111.02CFlF800197 (Router)

arnie 00001111.02CFlF8006C8 (Router)

dinosaur 99990001.02CFlF80010F (Router)

dragon 12340001.02CFlF8001FC (Router)

hqs 00001111.02CFlF8004E7 (Router)

kato 12340001.02CFlF8005D7 (Router)

NDNLLl 00000011.02CFlF8001B7 (Router)

• List to screen all connected Routers and servers.

routervu -a

Building list...

anole 00001111.02CFlF80060A (Router)

archer 00001111.02CFlF800197 (Router)

arnie 00001111.02CFlF8006C8 (Router)

DAFFY 00DAFF00.000000000001 (IPX File Server)

DAFFYII 00004321.000000000001 (IPX File Server)

dinosaur 99990001.02CFlF80010F (Router)

dragon 12340001.02CFlF8001FC (Router)

hqs 00001111.02CFlF8004E7 (Router)

• Copy all screen output to the file named session.now. This is useful to when trying to document the

configuration of a remote Router.

routervu -o session.now

• Connect to a Router (iowa) and use the input file (fix_iowa) to generate Router commands (that are

subsequently executed on that Router)

routervu iowa -i fix_iowa

• Connect to a Router (boston), capture all screen displays and put them into a file (bstscms). routervu boston -o bstscrns

routervu boston -o bstscrns

• Connect to a Router (paris), execute the commands in the input file (forparis), and capture the resulting output to another file (parisxx).

routervu paris -i forparis -o parisxx

C.3 Initial Configuration/Start-up Problems

C.3.1 ROUTER CANNOT START—LEDS STAY DARK

• Power source problem

• Cannot read the boot diskette

• Unable to resolve an IP address

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Possible cause #1—Power-source problem. LEDs on front panel are not illuminated.

Suggestion—Verify that the power cable is connected and well seated. Plug something else into the power

source to verify that the wall outlet or power strip is active.

Possible cause #2—The Router cannot read the boot diskette or the boot diskette may be damaged.

Suggestion—Verify that the Router boot diskette is properly loaded into the floppy drive. As the Router

attempts to start, check the LED on the front of the floppy-disk drive to see if the disk is being accessed. During the normal boot procedure, the disk access LED illuminates briefly during the system power-on self-test and again for 45 to 60 seconds while the Router system loads.

Upon successful start-up, the Router login prompt displays on the console, and a telnet or RouterVu

session may be established.

NOTE

To telnet (IP only) or routervu (IPX only) to a Router, first run the setaddr program or complete a successful configuration from the Router console.

If the boot diskette appears to be accessed for the period described above, yet no login prompt displays on a configured console, or if you are unable to connect with telnet or RouterVu to the Router, try inserting the backup boot diskette and following the same start-up procedure.

If the disk does not appear to be accessed correctly or the problem is not resolved when using the backup diskette, call Technical Support.

If the problem is resolved by using the backup boot diskette, your boot diskette is probably damaged.

If the backup boot diskette appears to be accessed for the period described above, and you do not see a login prompt on an attached console, verify that the console terminal is connected correctly and is functional.

Possible cause #3 (IP only)—The Router is unable to resolve an IP address or the configured domain name server is unavailable.

Suggestion—While starting, check the disk access LED to see if the boot diskette is being accessed. During the normal start-up procedure, the disk access LED illuminates briefly during the system power-on selftest and again for 45 to 60 seconds while the Router system loads.

If the LED stays lit and you are using the domain name service to resolve hostnames to IP addresses, there may be a hostname in one of your start-up files that cannot be resolved, and is causing the start-up script to hang.

Router software stores IP addresses in dotted-quad notation in start-up scripts stored on the boot diskette. The only way a hostname can be found in a start-up script is if someone edits the Router boot diskette by hand. If your boot diskette has been modified this way, use a machine that can read and write DOS-formatted disks to edit the confg.net file on the boot diskette and change any hostnames to dottedquad notation.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

C.3.2 ROUTER CANNOT START—LEDS STAY LIT

Although the boot diskette seems to boot properly and the Router LEDs stay lit, it will not start and will not give a prompt.

Possible cause—You may have infected the boot diskette with a virus.

If you have inserted the Router boot diskette into a PC on your network, it is possible that a computer virus was transferred to it.

Suggestion—Try using the backup boot diskette. Make sure you boot the diskette directly from the RouterVu or the Router. If you’ve corrupted your backup boot diskette, then call for technical support and order a new diskette. If you have virus-detection software, run it on the boot diskettes.

C.3.3 PROMPT IS NOT DISPLAYED

No prompt is displayed on the console after the boot diskette appears to have been successfully read at system start.

Possible cause—The console terminal may not be connected or configured correctly.

Suggestion—See if the console works by connecting the console terminal to another machine. Verify that

the null-modem cable is connected from the Router’s console port to a terminal configured with a 9600 baud rate, no parity, 8 data bits, and 1 stop bit.

C.3.4 R

OOT PASSWORD DOES NOT WORK

Possible cause—The root password may have been changed, or you may have forgotten the password. Follow the instructions below to recover the password.

You can recover the system using the following procedure. These steps must be completed using a serial-port console. This procedure will not work from a remote telnet or RouterVu session.

1. Eject the boot diskette.

2. Write-protect the boot diskette, as shown in Figure C-4.

Figure C-4. To write-protect the disk, turn it over and open the window at the top left-hand corner.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

3. Re-insert the boot diskette into the diskette drive.

4. Restart the Router.

5. Once the “Login:” prompt appears on the front panel, enter the user name root. Do not enter a

password; just press RETURN.

NOTE

Step 5 can only works on the first login attempt after a reboot. If you make a mistake, reboot the Router as in step 4.

6. Eject the boot diskette and write-enable it (close the window).

7. Re-insert the diskette into the diskette drive.

8. Set the root password using the passwor

d command. The -p option of the password command allows

the root password to be set without having to provide the previous password. The new password will be saved onto the diskette. Enter:

password -pnew_password

Make sure that there is no space between the -p and the new_password.

C.3.5 IP H

OSTS ON ETHERNET CANNOT TELNET TO THE ROUTER

There are 2 possible causes:

• The Ethernet cable is not fully functional.

• The Router may be configured with the wrong IP address.

Possible cause #1—The Ethernet cable is not fully functional. The cable may not be connected correctly or it may be damaged.

Suggestions—Check the appropriate Ethernet cable to ensure that it is seated correctly.

Issue the trace eth0 command on the Router to determine if the Router is receiving the telnet traffic. The trace command is used to display incoming and outgoing traffic on a given interface.

Watch the network activity LEDs while trying to access the Router over the Ethernet.

If possible, try attaching the Ethernet cable to another node on the same network that supports TCP/IP and telnet into it, to verify whether the cable is good.

If possible, use a network analyzer to determine if packets are being sent to the Router.

Possible cause #2—The Router may be configured with the wrong IP address.

Suggestions—If you have a machine available that supports DOS formatted disks, use an editor to read the config.net file on the boot diskette (or use the ifconfig command to display the IP address) and verify that

the correct IP address is found in the file.

Before editing the boot diskette, uncompress it by entering:

a: \stacker a: < RETURN>

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

After making your changes, enter

exit <RETURN>

A line of the format “ip address xxx.xxx.xxx.xxx” will be found near the top of the file. If the address is incorrect, run setaddr again or edit the file directly to set the desired IP address for the Router. For more information about the setaddr utility, refer to Chapter 3.

Also—If the remote hosts support ping, use the ping command to verify connectivity. Issue the ping command on the machine from which you are trying to telnet. The destination address used when issuing the ping command should be the Router IP address. If you are able to successfully receive a response from the Router when using the ping command and are unable to telnet to the Router, call for technical support.

If possible, display the contents of the ARP table on the machine from which you issued the telnet command. See if there is a complete entry for the Router Ethernet/IP address mapping.

C.3.6 C

ANNOT SAVE CONFIGURATION

The following message displays during configuration:

Cannot create configuration file config.tmp

Make sure the floppy disk is write enabled

Possible cause—The Router boot diskette is write-protected.

Suggestions—Remove the Router boot diskette and make sure that it is not write-protected (hole is not

open). Complete the configuration procedure again and save it.

C.3.7 W

HY DON’T THE MODEMS CONNECT?

If you are having problems connecting over the WAN interface, you can enable additional error messages by using the command:

tcp syslog on

This will send all of the syslog messages to the console. When a dialup connection is made, you shoudl see messages such as:

iface dialup link appears to be up

iface CHAP peer says: Welcome

If you see a message like:

iface call failed: NO DIALTONE

then you may have a problem with your phone line. If you see a message like:

iface CHAP failed to verify: remote name

then the names and link passwords between the two systems may not be set up correctly. Refer to the password example and worksheet in the Installation Reference, which begins on page 137.

When you are done, disable the syslog messages by issuing the command:

tcp syslog off

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

C.3.8 MODEM WILL NOT CONNECT TO REMOTE MODEM

Possible causes—There are a variety of possible causes. Use this procedure to determine the most likely cause:

• the telephone circuit is overloaded

• the remote telephone number is not correct

• the local telephone circuit is faulty

• the remote modem is not compatible with Router’s modem

Suggestions—Sometimes it is useful to go through the connection procedure manually and study the modem’s output.

We strongly suggest that the Router always be used on a dedicated telephone line. If you are using the Router to make only outgoing calls to a network service provider (who will never call you), we recommend not sharing the line with other equipment, such as a fax-modem or a telephone. In order to reliably maintain the high data rates of the Router’s built-in modem, other such equipment should only put a minimal electrical load on the telephone circuit. When having a problem with the modem connection, remove all other equipment from the line and make all telephone cords as short as possible. Sometimes a long telephone cord can act like an antenna and pick up noise.

To make sure that the remote number is being called correctly, turn the modem’s speaker on with the command:

dialup modemX volume high

and listen as you type the command:

update modemX now

which should force the Router to make a call. If the remote number is good, you will hear the remote end ring, get answered, a whistle, and finally the rushing noise of the modem training sequence. If you don’t hear these sounds, contact the remote site to make sure that you have the right telephone number, and that their equipment is ready to accept calls.

If all of these preliminary checks pass, but the modem still will not connect, try operating the modem manually.

1. Stop the dialer process. Enter:

dialup modem0 inactive

2. Connect to the modem. Enter:

tip modem0 <RETURN>

3. Make sure that the modem responds to commands. Enter:

AT <RETURN>

This should generate the “OK” response.

4. Turn the modem speaker on. Enter:

ATM1L3 <RETURN>

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

5. Request detailed connection status messages. Enter:

ATW1 <RETURN>

6. Dial the destination telephone number xxx-xxxx. Enter:

ATDTxxx-xxxx <RETURN>

You should see the responses:

CARRIER 28800 PROTOCOL: LAP-M CONNECT 57600

7. While holding the connection, get back into command mode with

(pause) + + + (pause)

8. This should generate an “OK.”

9. Enter:

AT%L

10. This should return a number between 15 and 30. If the number returned is higher than 30, the telephone line is a poor connection. To determine which end has the problem, contact Technical Support. We can arrange for a test against our dial-in ports.

If the dialing command gives one of the following responses at inappropriate times, contact Technical Support:

NO DIALTONE (if there IS a dialtone)

BUSY (when you hear ringing at the other end)

C.4 Operating Problems

C.4.1 CANNOT COMMUNICATE WITH REMOTE HOST (IP ONLY)

Possible cause—This problem could be caused for a variety of reasons.

Suggestions—The suggestions offered next refer to particular nodes as:

• local node—the network node from which you are originating communication.

• local Router—the Router on the same Ethernet as the local node.

• remote Router—the Router located on the other side of the dialup link, usually at a remote site.

• remote node—the network node to which you are attempting to establish communication.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Ethernet Testing

Verify that the local node can communicate with the local Router using the ping command.

On the local Router, issue the ping command by entering:

ping ip_address_of_local_node

If the ping command completes and displays a round-trip time, proceed to the Dial Test section.

If the ping command displays the message

Target did not respond

perform the following steps:

1. Verify that the Ethernet cables on both the local node and the local Router are securely connected.

2. Make sure that the subnet masks on the local node and the local Router match. Also verify that the (sub)network number of the local node and the local Router match. Display this information using the ifconfig command.

3. Issue the icmp status command. Note the count of icmplnEchoReps and icmpOutEchos packets displayed.

4. Try the ping command again using the -s option:

ping -s ip_address_of local_node

5. This ping command continuously sends inquiries to reach the local_node. While the ping command is executing, watch the network activity LEDs to verify that the Router is sending datagrams out the Ethernet interface. Stop the ping -s command by entering <Ctrl-c> or by pressing <RETURN>.

6. Issue the icmp status command again. Determine if the count for icmplnEchoReps and icmpOutEchos increased. If the count for icmpOutEchos increased, and the icmplnEchoReps count did not increase, it implies that the Router is sending the reachability messages to the local node and not receiving a response from the local node.

7. Issue the arp command to display the contents of the Router Address Resolution Protocol table. This table contains IP to Ethernet Address mappings. Determine if a mapping exists for the local node. The mapping should contain the IP address of the local node and the Ethernet address of the local node.

8. If there is not a valid ARP entry for local node, try issuing the ping command to another host on the (sub)network that supports TCP/IP. If this works, try issuing the ping command between the other host and the local node, if ping is available. Enter the ping command from the other host to the local node. If this works, it indicates that the local node is capable of responding to ICMP Echo Requests, but for some reason will not do so for the local Router. If possible, use a network analyzer to trace datagrams traveling between the local node and the local Router. If you continue to experience the problem, Call Technical Support for additional help.

Dialup Communication T

esting

Approach 1

Once you have verified that the local node can communicate with the local Router, try establishing a dialup connection from the local Router to the remote Router.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Issue the following command from the local Router:

ping ip_address of remote_Router

The response is:

Target did not respond

This occurs because the amount of time to required to establish the connection is longer than the timeout of the ping command. After issuing the ping command, you should hear the modem dial and connect with the modem at the remote site. If you hear the modem dial, skip to Approach 2, otherwise continue immediately below.

1. Verify that the phone cable is attached to the appropriate modem interface on the local Router.

2. Check the routing table on the local Router using the route command. The routing table should contain an entry with the Destination field specified as the (sub)network on which the remote Router resides. Make sure that the Bits field in the routing table entry matches the number of significant contiguous bits to be used as a subnet mask for the remote site.

Make sure that the Interface field in the routing table is specified as modemX, where X is the appropriate modem designation number. Make sure that the phone cable is connected to the modem port, shown in the Interface field of the route entry.

3. Issue the dialup status command. Verify that the correct phone number for the remote site is displayed. To determine if the dialer is configured as required, refer to Section 2.9, dialup, in the Reference Manual, which begins on page 137, for a description of possible dialer modes: demand, demand backoff, inactive, incoming, once, or keepup.

Determine the connection status: idle, dialing, listening, serving call, called out. For possible modem states, refer also to Section B.5 in the Reference Manual, which begins on page 137.

4. To display PPP information, issue the ppp modemX command, where X is the appropriate modem designation number. Determine if any PPP packets have been sent on the link.

5. Issue the asystat command to see transmit and receive statistics for the appropriate modem interface. Also, refer to Section 2.3, asystat, in the Reference Manual, which begins on page 137.

6. Issue the tip command to use the appropriate modem interface manually. Refer to Section B.4.1 in the Reference Manual.

7. If you have taken the steps above and are still unable to determine why the modem is not dialing, call Technical Support.

Approach 2

If in Approach 1 above, you heard the modem dial, wait approximately 45 to 60 seconds and try the ping command again.

If the ping command displays a round-trip time, this implies that you are able to make a dialup connection between the local and remote Routers but the communication between the local and remote nodes is failing. To determine the reason for the failure, skip to Approach 3.

If you are unable to establish a dialup connection between the local and remote Routers, continue with the procedures immediately below.

1. Try the ping command again, listening carefully to the modem as it dials. If you hear a busy signal when the other end connects, try dialing the phone number of the remote site by hand using a standard telephone. If you receive a busy signal, there is a problem at the remote site that must be addressed.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

2. Issue the dialup status command. Verify that the correct phone number for the other site is displayed. To determine if the dialer is configured as required, refer to Section 2.9, dialup, in the Reference Manual, which begins on page 137, for a description of possible dialer modes: demand, demand backoff, inactive, incoming, once, or keepup.

Determine the connection status: idle, dialing, listening, serving call, or called out. For possible modem states, also refer to the Modem Control Signals discussion in the Modem Dialing chapter of the Reference Manual, which begins on page 137.

3. If you don’t hear a busy signal, it may be necessary to check the configuration of the remote Router. If possible, log in to the remote Router over the Ethernet or on the console and enter the route command to check the routing table. The routing table on the remote Router should contain an entry with the Destination field specified as the (sub)network on which the local Router resides.

Verify that the Bits field in the routing table entry matches the number of significant contiguous bits to be used as a subnet mask for the local site. Make sure that the Interface field in the routing table is specified as modemX, where X is the appropriate modem designation number. Make sure that the phone cable is connected to the modem shown in the Interface field of the route entry.

4. If possible, execute the procedures described in Approach 1 above on both the local and remote Router.

5. To display PPP information, issue the ppp modemX command, where X is the appropriate modem designation number. Make sure that the first line displayed after this command is:

Network Protocol Phase (open for XX:XX:XX:XX)

This means that the system names and link passwords are correct on both systems. If you see anything else, make sure that both systems are configured in each other’s name and password (using the config modify command).

Determine if any PPP packets have been sent on the link. For more information, refer to Section 2.18, ppp, in the Reference Manual, which begins on page 137.

6. Issue the asystat command to see transmit and receive statistics for the appropriate modem interface. Refer to Section 2.3, asystat, in the Reference Manual.

7. Issue the tip command to manually use the appropriate modem interface. Refer to Section B.4.1 in the Reference Manual.

8. If you have taken the steps above and are still unable to determine why the connection is not being established, call Technical Support.

Approach 3

If in Approach 2 you were able to establish a dialup connection between the local and remote Routers, but are unable to send data between the local node and the remote node, continue immediately with the following steps:

1. Make sure that the subnetmask and the (sub)network number on the local node and the local Router match. Also verify that the subnetmask and the (sub)network number on the remote node and the remote Router match. Display this information using the ifconfig command.

2. Verify that both the local node and remote node contain appropriate routing information. The local node must contain a route that is used to determine how to reach the remote node. Similarly, the remote node must contain a route that is used to determine how to reach the local node. Different TCP/IP implementations have differing methods for managing routes. Most UNIX machines implement the route command to add routes and the netstat command to display routes. Check in the system administration guide for your TCMP implementation to determine how to manage routes.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

3. Determine if you are running RIP on the local and remote Routers. Use the config show command on each Router to see if the start rip and ifconfig iface rip active commands are present in the configuration, or issue the rip status command to determine if any RIP packets have been transmitted or received by the Routers. If RIP is enabled in either or both Routers, temporarily disable RIP by entering the stop rip and ifconfig iface rip off commands.

Enter the route -f command to flush the routing table of all routes learned by RIP. Do this on both Routers if necessary. If you changed any RIP configuration try issuing the ping command again. Wait approximately 45 to 60 seconds and try it a second time. If the remote and local nodes are now able to communicate, there is a routing problem caused by RIP. If you are unsure of how RIP should be configured, call Technical Support. If the local and remote nodes are still unable to communicate, continue below.

4. Determine if RIP is running on the local and remote nodes. If so, try disabling it and flushing the routing tables on the local and remote nodes of all routing table entries learned by RIP. See the system administration manual for your system to determine how this should be done. After disabling RIP and flushing the routing tables, try issuing the ping command again. Wait approximately 45 to 60 seconds and try it a second time. lf the remote and local nodes are now able to communicate, there is a routing problem caused by RIP. lf you are unsure of how RIP should be configured, call Technical Support.

To configure routing on the local node, add one of these three types of routes to the local node’s routing table:

• host route to the remote node

• subnetwork route to the remote (sub)network to which the remote node belongs

• default route

For a host route, the destination address should be designated as the IP address of the remote node. The next hop or gateway should be specified as the IP address of the local Router. The subnet mask, if supported, should be specified as 255.255.255.255 or 32 bits.

For a (sub)network route, the destination address should be specified as the (sub)network number of the remote node. The next hop or gateway should be specified as the IP address of the local Router. The subnet mask, if supported, should be specified as the subnet mask or corresponding number of significant contiguous bits of the remote (sub)network.

For a default route, the next hop or gateway should be specified as the IP address of the local Router.

To configure routing on the remote node, add one of the following three types of routes to the remote node’s routing table:

• host route to the local node

• subnetwork route to the remote (sub)network to which the local node belongs

• default route

For a host route, the destination address should be designated as the IP address of the local node. The next hop or gateway should be specified as the IP address of the remote Router. The subnet mask, if supported, should be specified as 255.255.255.255 or 32 bits.

For a (sub)network route, the destination address should be specified as the (sub)network number of the local node. The next hop or gateway should be specified as the IP address of the remote Router. The subnet mask, if supported, should be specified as the mask or corresponding number of significant contiguous bits of the local (sub)network.

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

For a default route, the next hop or gateway should be specified as the IP address of the remote Router.

5. After all of the routing information has been configured, try pinging the remote node again. lf you hear the modem dial, wait approximately 45 to 60 seconds and try the ping command one more time. If you are still unable to establish communications between the local and remote nodes, contact Technical Support.

C.4.2 C

ONNECTION DROPS AFTER A FEW SECONDS

The Router connects properly then drops the line after a few seconds.

Possible cause—CHAP failure

Suggestion—Turn syslog on and try to connect. Normally the syslog messages will give a good indication

of the problem.

For example, the names of Routers (Router1 and Router2) are just as important as the passwords. Look at the password files from both Routers to determine if the names or passwords are correct. Refer to the examples in Section A.1.1.

C.4.3 C

ONNECTION DROPS AFTER A FEW HOURS

The Router continually drops the modem link after a few hours of operating properly.

Possible causes—The quota is set too low and forces the line down, or the Router is not in keepup mode.

Suggestion—Check the settings by entering the command:

dialup modem0 status

For example,

(tcp/ip) Router> dialup modem0 status

modem0: (28800/Vl.lOOA-V34_DP)

DTR On RTS On CTS On DSR On RI Off DCD Off

keepup Called out Timeout: 240 Idle: 0:00:00:08

Remote phone: 1918055623180

Dailyquota:l:00:00:00 Used:00:00:00:00 Left:1:00:00:00

Usage warning currently set at: 0:02:00:00

Also refer to dialup in Appendix A of the Reference Manual.

C.4.4 C

ONSTANT REMOTE DIALUP

The modem link dials up a remote location all the time.

Possible causes—Some network process is causing the Router to dial remotely.

Suggestion—Check the dialup modem0 dial_log to see which address on the network is causing the

dialing.

time: interfaceDialing from: address to: address (protocol)

This indicates the source of the traffic that is causing the dial. Also refer to Appendix B.

C.4.5 U

NABLE TO ATTACH TO A REMOTE NETWARE SERVER (MODEMS ONLY)

Possible cause #1—The network cabling is not configured correctly.

Suggestions—Verify that the phone line is connected correctly in the Router. Make sure that the phone

line on each of the Routers is connected to the jack labeled LINE.

100

Black Box AR-P, AR-5 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual