Carrier Access 770-0015 AM User Manual

Download

Page 1

IP Router

MENU-DRIVEN USER INTERFACE

USER MANUAL

Part Number: 770-0015 AM Product Release: 1.8 May 2004

Page 2

commitment on the part of Carrier Access Corporation. The hardware and software described herein are furnished under a license or non-disclosure agreement. The hardware, software, and manual may be used or copied only in accordance with the terms of this agreement. It is against the law to reproduce, transmit, transcribe, store in a retrieval system, or translate into any medium - electronic, mechanical, magnetic, optical, chemical, manual, or otherwise - any part of this manual or software supplied with the IP Router Service card for any purpose other than the purchaser’s personal use without the express written permission of Carrier Access Corporation.

The Carrier Access logo, solve for x, and Adit are registered trademarks of Carrier Access Corporation. All other brand or product names are trademarks or registration trademarks of their respective companies or organizations.

Contact Information: Carrier Access Corporation

5395 Pearl Parkway Boulder, CO 80301-2490 Corporate Phone: (800) 495-5455 Fax: (303) 443-5908 www.carrieraccess.com

Customer Support Direct: (800) 786-9929 E-mail: tech-support@carrieraccess.com

Supporting Software Version:

Adit 600 Release 8.0 IP Router Release 1.8

Page 3

Warranty

Carrier Access warrants to BUYER that Products are free from substantial defect in material and workmanship under normal use given proper installation and maintenance for period of five (5) years from the date of shipment by Carrier Access. This warranty shall not apply to Products that have been either resold or transferred from BUYER’s customer to any other party. Any such transfer shall void the above warranty.

BUYER will promptly notify Carrier Access of any defect in the Product. Carrier Access or its agent will have the right to inspect the Product or workmanship on BUYER’s premises or BUYER’s customer’s premises. Carrier Access has the option to: (a) repair, replace, or service at its factory or on the premises the Product or workmanship found to be defective; or (b) credit BUYER for the PRODUCT in accordance with Carrier Access’s depreciation policy. Refurbished material may be used to repair or replace the Product. Products returned to Carrier Access for repair, replacement, or service will be shipped prepaid by BUYER.

Limitation of Warranty & Limitation of Remedies

Correction of defects by repair, replacement, or service will be at Carrier Access’s option and constitute fulfillment of all obligations to BUYER for breach of warranty.

Carrier Access assumes no warranty liability with respect to defects in the Product caused by:

PREFACE

Preface

a. modification, repair, installation, operation, or maintenance of the Product by

anyone other than Carrier Access or its agent, except as described in Carrier

Access’s documentation; or b. the negligent or other improper use of the Product; or c. handling or transportation after title of the Product passes to BUYER.

Other manufacturer’s equipment purchased by Carrier Access and resold to BUYER will be limited to that manufacturer’s warranty. Carrier Access assumes no warranty liability for other manufacturer’s equipment furnished by BUYER.

BUYER understands and agrees as follows: THE WARRANTIES IN THIS AGREEMENT REPLACE ALL OTHER WARRANTIES, EXPRESSED OR IMPLIED, AND ALL OTHER

Page 4

Preface

Warranty

OBLIGATIONS OR LIABILITIES OF CARRIER ACCESS, INCLUDING ANY WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. ALL OTHER WARRANTIES ARE DISCLAIMED AND EXCLUDED BY CARRIER ACCESS.

THE REMEDIES CONTAINED IN THIS AGREEMENT WILL BE THE SOLE AND EXCLUSIVE REMEDIES WHETHER IN CONTRACT, TORT, OR OTHERWISE, AND CARRIER ACCESS WILL NOT BE LIABLE FOR INJURIES OR DAMAGES TO PERSONS OR PROPERTY RESULTING FROM ANY CAUSE WHATSOEVER, WITH THE EXCEPTION OF INJURIES OR DAMAGES CAUSED BY THE GROSS NEGLIGENCE OF CARRIER ACCESS.

THIS LIMITATION APPLIES TO ALL SERVICES, SOFTWARE, AND PRODUCTS DURING AND AFTER THE WARRANTY PERIOD. IN NO EVENT WILL CARRIER ACCESS BE LIABLE FOR ANY SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OR COMMERCIAL LOSSES EVEN IF CARRIER ACCESS HAS BEEN ADVISED THEREOF.

No agent, Distributor, or representative is authorized to make any warranties on behalf of Carrier Access or to assume for Carrier Access any other liability in connection with any of Carrier Access’s Products, software, or services.

Warranty Product Returns

Before returning any equipment to Carrier Access Corporation, first contact the distributor or dealer from which you purchased the product.

A Return Material Authorization (RMA) number is required for all equipment returned to Carrier Access Corporation. Call Carrier Access Corporation Customer Support at (800) 786-9929 or (303) 442-5455 for RMA number, repair/warranty information and shipping instructions. Be prepared to provide the following information:

Carrier Access Corporation serial number(s) from the system chassis or circuit card(s)

Name of distributor or dealer from which you purchased the product

Description of defect

iv IP Router - Release 1.8

Page 5

TABLE OF CONTENTS

Preface

Warranty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii

Limitation of Warranty & Limitation of Remedies . . . . . . . . . . . . . . iii

Warranty Product Returns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iv

1 Introduction

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

Install a Router Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

Maneuvering in the System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2

Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3

Scroll Field. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3

Select Field. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3

Edit Field . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3

Help Bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4

Connecting to the Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5

Establish a Telnet Session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5

Set a New Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6

Page 6

Table of Contents

2 Management Window

3 Profile Directory: Router Card Profile

Management Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-2

System Time/Login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-3

System Date and Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4

Auto-Logout Timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-5

View Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-5

Config Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-5

Admin Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-5

Enhanced Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-6

Upload/Download. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-8

To Setup the Router for Uploads/Downloads. . . . . . . . . . . . . . . . . . .2-8

Upload/Download Setup Menu Fields . . . . . . . . . . . . . . . . . . . . . . .2-10

Load Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-12

Software Images. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-13

Choices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2-14

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2

Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-2

RIP Mode Receive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-3

RIP Mode Send. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-3

Trunk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-4

Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-7

SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-10

DNS Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-14

Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-16

Network Time Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-18

SysLog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-20

DNS Resolver. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3-22

iv IP Router - Release 1.8

Page 7

Table of Contents

4 Profile Directory: Local Profile

LAN (Local) Profile Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3

To Setup a Local Profile: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5

LAN IP: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8

LAN IPX:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8

Setup < >. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-9

Link Speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-9

Static Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-10

To Setup Static Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-12

Static Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16

Filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-19

Defining Custom Filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-22

Defining Protocol Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-23

Defining Address Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-24

Advertise Network/Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-25

IPX Server Advertising . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-28

DHCP Server/BOOTP Relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-30

LAN Collision Threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-34

Spanning Tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-37

Secondary IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-40

Link Speed. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-42

5 Profile Directory:Remote Profile

Remote (WAN) Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4

Transmission Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6

Security/Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-12

Static/VPN Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-15

VPN - > . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-21

Static NAT Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-22

NAT Bypass Subnets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-24

Static Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-26

Firewall Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-29

Filter Network/Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-35

Spanning Tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-40

Trunk Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-43

IP Router - Release 1.8 v

Page 8

Table of Contents

6 Basic Configuration

7 Verification Window

8 Statistics Window

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-2

Start Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-2

Router Identification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-4

Routing Protocol/Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-5

WAN Interface Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-7

Remote Unit Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-9

SNMP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-12

Setup Complete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6-13

Ping Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7-2

Trace Route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7-6

Port Monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7-9

Run-Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8-2

9 System Reports Window

Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9-2

To View the Event Log: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9-2

Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9-4

Networks/Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9-6

Address Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9-9

10 Exit Window

Logout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10-2

Reinitialize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10-3

vi IP Router - Release 1.8

Page 9

Table of Contents

11 Router Configuration

Basic Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-2

PPP Internet Connection and

Public IP Address Routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-3

Frame Relay Internet Connection and

Public IP Address Routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-4

Internet Connection using PPP, NAT/PAT and Firewall Filters . . . . . . 11-5

Internet Connection using NAT and Static NAT Addresses. . . . . . . . . . 11-7

Back-to-Back with PPP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-9

Back-to-Back with Frame Relay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-11

A User Events

User Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-2

Authenticate Events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-3

Triggered Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-4

Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-5

B Protocol Types

Protocol Number in Firewall Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-2

Ethernet Protocol Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . B-7

C Troubleshooting

Communication Related Issues. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-2

Excessive Triggered Update Events on the Events screen . . . . . . . . C-2

LAN Related Issues. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-2

Unable to add data filters, advertise networks or create static

route entries. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-2

Unable to access the Local (LAN) Router unit via Telnet. . . . . . . . . C-4

Unable to access a remote unit via Telnet . . . . . . . . . . . . . . . . . . . . . C-4

Diagnostics and Performance Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-5

Verification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-6

Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-6

System Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-7

IP Router - Release 1.8 vii

Page 10

Table of Contents

Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-8

Identify Alarm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-8

Clear Alarm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C-10

Glossary

Index

viii IP Router - Release 1.8

Page 11

CHAPTER

In this Chapter

n Overview n Installation n Maneuvering in the System n Fields n Help Bar

Introduction

n Connecting to the Router

Page 12

Introduction

Overview

This manual covers the Router menu-driven user interface only, all other information for the Router can be found in the Adit 600 User Manual.

The Router can be configured using CLI via telnet or through the Router Menu-driven Software.

Installation

The IP Router card can be installed into any of the service card slots (1-6) of the Adit 600 chassis. This card is hot-swappable, therefore the card can be removed and replaced without bringing down the system or with or without power to the unit.

Install a Router Card

1. Slide the Router card into a service card slot of the chassis.

2. Press firmly into slot to engage, until card is seated completely.

3. Card has completed bootup when a solid Red CRD light (an LED) is displayed.

Maneuvering in the System

[TAB] moves from one field to the next. Keyboard arrows move to the next field in the direction of the arrow. [ ] Items in brackets are scrollable options. With the Spacebar the operator can move

through the selections.

NTER] displays the window for the selected feature or to enter a alphanumeric value.

SC] Exit and return to previous window or to the Main Menu.

[E Help Bar - is displayed along the bottom of the window and lists options for the

selected feature. The Router software contains three different field types that may be used in entering

information: scroll, select and edit.

1-2 IP Router - Release 1.8

Page 13

Introduction

Fields

Scroll Field

A field enclosed in angle brackets is a scrollable option field. While the field is selected use the following keystrokes:

PACEBAR] will scroll forward through the options

NTER] will open the option’s window or accept the entered value.

Example: Terminal: <vt100>

Select Field

A field followed by –> is a selectable field, which causes an action to be performed, highlight the field and press [E the Trunk Port Setup screen.

NTER] to perform the action, for example, to enter

Example: SETUP <Trunk> –>

Some selectable fields, such as Main Menu options, are also a scrollable option field. For example, <Events>–>. Press the [S and then press [E

NTER] to perform the action.

PACEBAR] to select the desired option

Edit Field

A field value enclosed in parentheses ( ) may be modified by entering an alphanumeric character.

Example: SYSTEM NAME: (Adit)

You will note that many editable fields are displayed with a default value. To change this value, highlight the field and type over the existing entry or press

ELETE] and then enter new value. Note: these fields are case sensitive. To enter

[D this value press [E

IP Router - Release 1.8 1-3

NTER].

Page 14

Introduction

Help Bar

The IP Router provides field specific help that is displayed at the bottom of the window. The help text will indicate if the field is scrollable or editable and provide a brief description of the field. If it is a selectable field, it will state what to do to invoke the action to be performed.

1-4 IP Router - Release 1.8

Page 15

Introduction

Connecting to the Router

Establish a Telnet Session

1. Use the telnet {rtr_card-addr} CLI command to connect to the Router card. The following example is when the router is located in slot 5.

> telnet 5 Connected. Escape character is ’^]’. Attempting Carrier Access QTSR connection... QTSR [Sat Apr 10, 2004 10:51:23] (<CR> to login)

2. Select [ENTER] or <CR> to log in.

Password >

3. Enter default password (admin) and press [ENTER].

Password >***** Select a terminal type... (<space> or <back-space> to toggle, <CR> to accept)

Terminal: <VT100>

4. Select Terminal Type: scroll through options with the [SPACEBAR] and then [E

NTER] to select. Recommended <generic>.

Terminal: <generic>

IP Router - Release 1.8 1-5

Page 16

Introduction

Connecting to the Router

Set a New Password

If you have logged in with a default password, for security reasons the password should be changed, the system directs the user to do so.

> telnet 3 Connected. Escape character is ’^]’. Attempting Carrier Access QTSR connection... QTSR [Wed Apr 10, 2004 5:51:21] (<CR> to login) Password >***** Select a terminal type... (<space> or <back-space> to toggle, <CR> to accept)

Terminal: <generic> You have logged in with a default password. For security reasons the password should be changed. Complete the change request and record your new password

for future use.

Password Change Request

(Valid QTSR passwords are from 5 to 15 alpha-numeric characters)

NEW Password >****** RETYPE Password >******

After a successful login, the system prompts the user to change the password from the default.

1. Type in New Password, and press [E

2. Retype in New Password, and press [E

1-6 IP Router - Release 1.8

NTER]

Page 17

CHAPTER

Management Window

In this Chapter

n Management Overview n System Time/Login n Upload/Download n Load Defaults n Software Images

Page 18

Management Window

Management Overview

The Management Menu contains the system components of the IP Router software. This section is used to define security parameters, factory default settings, as well as providing software loading and configuration settings for the Router

Management Menu options allow the user to:

l Establish the system security features

l Install and backup system software

l Backup and install configuration settings

l Default system parameters to factory settings

NOTE: Two simultaneous sessions are allowed to access the Router software. For example, one local and one remote (one must be accessing with the VIEW level).

2-2 IP Router - Release 1.8

Page 19

Management Window

System Time/Login

1. Select Management <System Time/Login> from the Main Menu, and select [E

NTER].

IP Router - Release 1.8 2-3

Page 20

Management Window

System Time/Login

This screen provides the basic system and security options for the Router card.

The IP Router is equipped with three password levels and an enhanced security password.

Level 1 VIEW allows the user to view only, no changes are allowed. Level 2 CONFIG allows the user to view and change all screens. Level 3 ADMIN allows the user to view and change all screens, terminate

users, as well as change all three passwords.

The Enhanced Security option provides an additional level of security for the network administrator.

System Date and Time

The time and date values are used for reporting purposes. Enter the date in the following format: Mmm DD, YYYY. Immediately follow the date with the desired time entry. The appropriate time format is HH:MM:SS (hour:minute:second). Press [T

2-4 IP Router - Release 1.8

AB] to proceed to the next field.

Page 21

Management Window

System Time/Login

Auto-Logout Timer

This field defines the minutes of inactivity before the current session is terminated. The default time is 30 minutes. Type the desired auto-logout time (between 1-255).

NOTE: Any changes that have not been saved will be lost when the timer is activated.

View Password

Users assigned to this level may view only, no changes are allowed. The default

VIEW password is "public". This field must be unique from the CONFIG and ADMIN passwords. The field may be a 5-15 characters alphanumeric value.

Config Password

Users assigned to this level may view and change all screens. The default

CONFIG password is "config". This entry must be unique from the VIEW and ADMIN passwords. The field may be a 5-15 character alphanumeric value.

Admin Password

Users assigned to this level may view and change all screens, as well as change all three password levels. The default ADMIN password is "admin". This entry must be unique from the VIEW and CONFIG passwords. The field value may be a 5-15 character alphanumeric value.

NOTE: If the default login passwords are not changed, the user will be prompted, at each login, to enter new passwords at the CONFIG and ADMIN levels.

IP Router - Release 1.8 2-5

Page 22

Management Window

System Time/Login

Enhanced Security

The Enhanced Security option provides another level of password security that restricts access to the Main Menu via Telnet or the Async port. It can be used by a Network Administrator to only allow those with the Enhanced Security password to make configuration changes. When enabled, this option hides the system login prompt until the appropriate password is entered.

1. Use the [S

2. The Change Enhanced Security Password - > field will display. Select

NTER] to change password. You will be requested to enter the password

twice to confirm. Change Password of All Levels.

PACEBAR] to select Enable and [TAB] to enter this selection.

When Telneting into the Router with Enhanced Security enabled, the following will appear:

> telnet 1 Connected. Escape character is ’^]’.

2-6 IP Router - Release 1.8

Page 23

Management Window

System Time/Login

1. Type the Enhanced Security Password here.

NOTE: Note: there will be no effect to the screen here until the correct password is typed in. When the correct password is typed, no return or other keystroke is needed, the following will appear:

Password >

WARNING! IF ENHANCED SECURITY IS ENABLED, AND THE ADMINISTRATOR

DOES NOT NOTE THE PASSWORD THERE IS NO WAY TO ACCESS THE ROUTER UNTIL YOU HAVE RESET THE ROUTER BACK TO IT’S DEFAULT SETTINGS, LOSING ALL CONFIGURATION SETTINGS. SEE set [rtr_card-addr} default.

2. At this point the Router is requesting your Level 1, 2 or 3 User Password. Enter your password and select [E Router as normal.

Password >****** Select a terminal type... (<space> or <back-space> to toggle, <CR> to accept)

NTER] and continue as you would Telnet into the

Terminal: <generic>

IP Router - Release 1.8 2-7

Page 24

Management Window

Upload/Download

WARNING! BEFORE LOADING A DOWN-LEVEL OF ROUTER CODE TO AN

DIT, SAVE THE CONFIGURATION TO A FILE. CONFIGURATION MAY BE RESET TO

THE DEFAULT SETTING AND CURRENT CONFIGURATION LOST.

This window allows the network administrator management of devices and users authorized to perform:

l Installation of software l Backup of software and configuration settings (via tftp)

The IP Router management enables a network administrator to perform a Router Code Upload from a central location via the LAN or WAN connection using TFTP. A Code Download can also be performed as a backup (binary image) of the software. Config Upload and Config Download can be performed remotely via TFTP to install and

backup the IP Router’s configuration to and from a binary file. There is an additional option to upload code to the IP Router, with the CLI command

load {slot-number} tftp {ip-addr}{"file-name"}

To Setup the Router for Uploads/Downloads

1. Select Management: <Upload/Download> from the Main Menu, and [E

NTER].

2-8 IP Router - Release 1.8

Page 25

Management Window

Upload/Download

2. Select [CTRL A] to add a TFTP Upload/Download User.

NOTE: The IP Address 1. (* ) will display. The * denotes any IP Address on

the defined Client Site. The user may define a specific IP Address for Uploads/ Downloads, by replacing the *, or by Adding another Upload/Download User.

3. Select the Client Site

Selection is: <Local LAN> (default) or RemoteUnits that have been set up.

4. Press [E

SC] to save your changes and return to the Main Menu. These changes

will go into effect immediately.

IP Router - Release 1.8 2-9

Page 26

Management Window

Upload/Download

Upload/Download Setup Menu Fields

Feature and Release Key Options

Options may be available to purchase, to upgrade the IP Router. Once this option is purchased, a key code will be given to enable the feature on this product. For more information please call Customer Service.

Reboot After Load Code

Use this option to automatically reboot the IP Router after software is successfully installed. A software load verification verifies that the new software is good before the unit will accept it. If it is determined to be bad or damaged, the IP Router will reject it and continue to use the original software.

Reboot After Load Config

Use this option to automatically reboot the IP Router after a configuration file is successfully installed.

IP Address

The IP Address field is use to identify which device(s) will be allowed to perform config and/or code uploads and downloads. A “*” in this field will allow all devices at the selected Client Site to perform Uploads/Downloads.

Client Site

This field identifies the profile the Router will use to reach the IP Address entered in the previous field. If <Local LAN> is selected, it indicates the device can be reached via the LAN. If the device can be reached via a WAN connection, you should select one of the Remote (WAN) profiles.

Code Upload/Download

Use this field option to enable Code Upload/Download and authorize the IP Address to perform a Code Upload and Code Download. When new software is installed on the Router, a software load verification checks and verifies that the new software is good before the unit will accept it. If it is determined to be bad or damaged, the IP Router will reject it and continue to use the original software. Acceptable binary file extensions are .mgm or .MGM.

2-10 IP Router - Release 1.8

Page 27

Management Window

Upload/Download

Config Upload/Download

This option to enables Config Upload/Download and defines an IP Address to perform this function. Config Upload allows the device(s) in the IP Address field to transfer, or restore, a previously backed up configuration file to the IP Router via TFTP. Config Download defines an IP Address to save a backup copy of the IP Router’s configuration settings to a file. Acceptable file extensions are “.cfg” or “.CFG”.

NOTE: Code and Config uploads will require a reboot of the unit before the changes take effect.

IP Router - Release 1.8 2-11

Page 28

Management Window

Load Defaults

Use the Load Defaults option to reset the Router software to the factory defaults. This option will delete all configuration settings, including the passwords.

Use the [S

PACEBAR] to choose <Yes> and press [ENTER]. If you have a Telnet

connection to the unit, your session will be terminated.

1. Select Management <Load Defaults> from the Main Menu, and select

NTER].

2. A dialog box will display confirming that you want to load factory defaults.

3. Select <YES> with the [S

PACEBAR] and select [ENTER].

4. Defaults will be loaded.

2-12 IP Router - Release 1.8

Page 29

Management Window

Software Images

Use the Software Images option to switch the active with the backup application images stored in the Router.

1. Select Management <Software Images> from the Main Menu, and select

[Enter].

IP Router - Release 1.8 2-13

Page 30

Management Window

Software Images

Choices

Show Current Images - will display the application images stored in the Router (shown above).

Switch Appl. Images - Switch the active with the backup application images stored in the router. Note: More than one software image must be loaded (7.0 or later) for an active and a backup image to display.

2-14 IP Router - Release 1.8

Page 31

CHAPTER

Profile Directory: Router Card Profile

In this Chapter

n Overview n Configuration n RIP Mode Receive n RIP Mode Send n Trunk n Security n SNMP n DNS Proxy n Spanning Tree Protocol n Network Time Protocol n SysLog n DNS Resolver

Page 32

Profile Directory: Router Card Profile

Overview

The Router Card Profile of the Profile Directory is used to review/configure the Network Time Protocol, DNS Proxy, DNS Resolver, RIP mode, Spanning Tree Protocol, Security, SNMP, Syslog and Trunk parameters.

Configuration

1. Select Configuration: <Profile Directory> from the Main Menu, and select [E

NTER].

Main Menu

3-2 IP Router - Release 1.8

Page 33

Profile Directory: Router Card Profile

RIP Mode Receive

2. Select Router CARD <Setup -> and select [ENTER].

Profile Directory Window

Router Card Configuration Window

RIP Mode Receive

Selection is: <RIP1>, <RIP2>, or <RIP1/RIP2>.

RIP Mode Send

Selection is: <RIP1>, <RIP2>, or <RIP1/RIP2>.

IP Router - Release 1.8 3-3

Page 34

Profile Directory: Router Card Profile

Trunk

This window is used to configure the Trunk setup for the Router. Although the Router is designed to connect remote sites over dedicated connections, the unit supports a number of different encapsulation protocols simultaneously, including Frame Relay and PPP. The Router provides the flexibility to allow the user to define which slots will be used for the selected WAN protocol.

1. Select Trunk < Configure -> and select [E

NTER].

2. All WAN connections will display in this window. To select the WAN Connection Type, [T

PACEBAR] to select the Type (PPP, MLPPP, PPP in Frame Relay or Frame

Relay 1490) and select [E

AB] to the Type on the specific WAN Link #, use the

NTER]. For more information on this window, see

Trunk Port Fields Definitions on the next page.

3-4 IP Router - Release 1.8

Page 35

Profile Directory: Router Card Profile

Trunk

Trunk Setup Menu Fields WAN Link #

This field displays the WAN Link Number (1-24) for the WAN Connection and the WAN Connection Type information.

WAN Connection

The WAN Connection displays the current connection of this WAN, in the form of {slot:port:channel}.

WAN Connection Type

The value in this field determines the type of protocol encapsulation that will be used for the selected WAN.

PPP

Point-to-Point Protocol. Provides a standard means of encapsulating data packets sent over a single-

channel WAN link. It is the standard WAN encapsulation protocol for the inter- operability of bridges and routers. Note: When a Multilink Group is selected, WAN Connection Type will display <MLPPP>

MLPPP

MultiLink PPP. When PPP is selected and a Multilink group is chosen the WAN Connection Type will display MLPPP.

PPP in Frame Relay

Point-to-Point Protocol encapsulated in Frame Relay.

IP Router - Release 1.8 3-5

Page 36

Profile Directory: Router Card Profile

Trunk

Frame Relay 1490

A packet-switching protocol for connecting devices on a WAN. Frame Relay networks in the U.S. support data transfer rates at T1 (1.544 Mbps) and T3 (45 Mbps) speeds. Frame Relay service is provided for customers who want connections at 56 Kbps to T1 speeds.

PVC Management

Field Description

Disabled Disables PVC Management Annex D Frame Relay standard

Poll Interval Range is between 5-30 Poll Counter Range is between 1-255

LMI Local Management Interface

Poll Interval Range is between 5-30 Poll Counter Range is between 1-255

Multilink Group

Specifies a trunk as part of a multilink PPP group. Selection is: <None> or <1> through <24>. Available only when PPP connection type is selected. Note: When a Multilink Group is selected, WAN Connection Type will display <MLPPP>.

Data Speed

The Data Speed will specify the data speed for each DS0 in the given trunk. Selection is: <56K> or <64K>. The default is 64K.

3-6 IP Router - Release 1.8

Page 37

Profile Directory: Router Card Profile

Security

1. Select Security < Configure -> and select [ENTER].

The fields on this screen may be used to define the authentication process for the Local Unit.

Security Setup Window

IP Router - Release 1.8 3-7

Page 38

Profile Directory: Router Card Profile

Security

Authentication by Remote

Protocol: CHAP, PAP or NONE

Use this first field to identify the authentication protocol to be used by remote units when authenticating this unit.

<CHAP> Challenge Handshake Authentication Protocol

<CHAP> Secret

[ENTER] and a NEW Password dialog box will display. Enter a 1 - 15 character

Select password and select password and select

[ENTER] and a RETYPE Password dialog box will display. Retype [ENTER]. Password is now set.

<PAP> Password Authentication Protocol

<PAP> Password

Same as above <CHAP> Secret.

<NONE > No authentication protocol. <NONE> is the default.

User ID

Use this field to define the local unit’s User ID. During the authentication process, the local unit will send a name or User ID, along with the authentication protocol’s secret or password (see above). Use the [SPACEBAR] to scroll between <Local Profile Name> (the default value) and <Local Custom Name>. If set at <Local Profile Name>, the local unit will send the 11 character unit name which was defined on the Local (LAN) Profile screen. If this field is set to <Local Custom Name> you may define a 32 character maximum alphanumeric value to represent the User ID which is sent during the authentication process. Defining a custom User ID simply gives the end user more flexibility for this value.

To assign a custom User ID, set the USER ID field to <Local Custom Name> and press [ to ten (10) custom names may be configured.

3-8 IP Router - Release 1.8

TAB]. Up

Page 39

Profile Directory: Router Card Profile

Security

Authentication of Remote

Protocol: CHAP, PAP or NONE

Use this field to identify the authentication protocol to be used by this IP Router when authenticating remote devices.

Local Security Server

The router supports a configuration setting for each router card to determine how the router card logins are to be authenticated, as per one of the following choices: authenticate router logins from the router card local database (default), authenticate router logins by having the controller send a RADIUS access-request message to the controller’s RADIUS servers, or authenticate router logins identically to controller logins. The last choice will cause the router logins to be authenticated either via RADIUS or the controller’s database of users and passwords, as configured for the controller. This configuration is done with Controller CLI only (no menu support).

Type

Use the [SPACEBAR] to choose the security authentication method that you are using. <None> Use this setting if the Local unit will be used to authenticate remote devices. Please note

that you may not use the <None> setting if the Security Server field for a remote device has been set to <External Server>

protocol. RADIUS is a client/server-based authentication software system.

<TACACS+> Will set the server to use the TACACS+ (Terminal Access Controller Access

Control System) protocol. TACACS+ provides services of authentication, authorization and accounting independently.

Will set the server to use the RADIUS (Remote Authentication Dial-In Service)

Address

Enter the IP Address of the local server that will be used during the authentication process. If <None> was selected in the <Type> field, this field will be disabled.

Password

Enter the password of the local server that will be used during the authentication process. You must make sure that the password entered into the server is the same as the value entered here or the authentication process will fail. If <None> was selected in the <Type> field, this field will be disabled.

IP Router - Release 1.8 3-9

Page 40

Profile Directory: Router Card Profile

SNMP

By defining specific IP Addresses, devices may be specified to manage the Local Unit via SNMP.

NOTE: The IP Router is compatible with the Standard MIB and MIB II.

1. Select SNMP < Configure -> and select [E

NTER].

3-10 IP Router - Release 1.8

Page 41

Profile Directory: Router Card Profile

SNMP

Use the SNMP setup window to setup SNMP configurations.

SNMP Setup Window

SYS Name

Set the value of sysName. Value has a maximum of 64 ASCII characters.

SYS Contact

Set the value of sysContact. Value has a maximum of 64 ASCII characters.

SYS Location

Set the value of sysLocation. Value has a maximum of 64 ASCII characters.

SNMP Community Name(s)

Use these fields to specify the community name, address and access privileges of devices needing to communicate with the Local (LAN) Unit through SNMP. If no IP Addresses is defined on this screen, any device may access the local unit using the IP Address assigned on the Local (LAN) Profile Setup screen, regardless of the specified community name. The values entered in these fields will be used by the SNMP program as verification of entry into the IP Router.

IP Router - Release 1.8 3-11

Page 42

Profile Directory: Router Card Profile

SNMP

Name

Enter the community name(s) of the device to access the Local (LAN) Unit through SNMP. Community names entered into the SNMP program MUST match the values entered here or access for remote management will not be allowed. The default community name is public, new community names can have a maximum of 10 characters.

Address

Enter the corresponding IP Address of the device(s) that were entered in the Name field.

Access

<Read> device is allowed to view the settings, but cannot make any changes <Write> device is allowed to make changes but not view settings <Both> device is allowed to both read and write privileges

SNMP Trap Destinations

SNMP Setup Window

1. Select SNMP Trap Destination - > and select [ENTER].

3-12 IP Router - Release 1.8

Page 43

Profile Directory: Router Card Profile

SNMP

This window defines the SNMP Trap Destinations to which the Router will report alarm information.

SNMP Setup Window

Name

Enter the community name(s) of the devices to which the Router will report. The default community name is public. To enter a new community name, highlight the field and type the desired value, with a maximum of 10 characters.

Address

Enter the corresponding IP Address of the device that was entered in the Name field.

Location

Available options are the <Local LAN> and all defined Remote (WAN) Units, defined in the Profile Directory (there can be up to 24).

IP Router - Release 1.8 3-13

Page 44

Profile Directory: Router Card Profile

DNS Proxy

The DNS (Domain Name Server) Proxy specifies the IP address of DNS name servers to be used by the DHCP (Dynamic Host Configuration Protocol) clients.

1. Select DNS Proxy < Configure -> and select [E

2. Type [C

TRL A] to Add a DNS Proxy.

NTER].

3-14 IP Router - Release 1.8

Page 45

Profile Directory: Router Card Profile

DNS Proxy

3. Enter the appropriate data in the following fields.

Domain Name

Define a name for the Domain with up to 41 characters.

DNS Server

Enter the IP Address for the DNS Server.

Site

This field lists the Local LAN and all the RemoteUnit that have a profile created for them. Use the

[SPACEBAR] to scroll through the list.

4. Select [ESC] and <YES> to exit the window and save changes.

IP Router - Release 1.8 3-15

Page 46

Profile Directory: Router Card Profile

Spanning Tree Protocol

The Spanning Tree Protocol configures the global setup for using the Spanning Tree Algorithm as specified in the IEEE 802.1D specification.

1. Select Spanning Tree Protocol < Configure -> and select [E

2. To enable Spanning Tree, scroll <Disabled> to <Enabled>, with the

PACEBAR], select [ENTER].

NTER].

3-16 IP Router - Release 1.8

Page 47

Profile Directory: Router Card Profile

Spanning Tree Protocol

3. Enter the appropriate data in the following fields.

Bridge Hello Time

The Bridge Hello Time specifies the time interval between transmissions of Topology Change Notification BPDUs towards the Root when the Bridge is attempting to notify the Designated Bridge on the LAN to which its Root Port is attached of a topology change. The value can range from 1 to 10 seconds, with a default of 2 seconds.

Bridge Max Age

The Bridge Max Age value specifies the maximum age of received protocol information before it is discarded. The value can range from 6 to 40 seconds, with a default of 20 seconds.

Bridge Forward Delay

The Bridge Forward Delay is the time spent by a Port in the Listening or Learning States before transitioning to the Learning or Forwarding State, respectively. The value can range from 4 to 30 seconds, with a default of 15 seconds.

Bridge Priority

The Bridge Priority is the priority part of the bridge identifier. The value can range from 0 to 65535, with a default of 32768.

IP Router - Release 1.8 3-17

Page 48

Profile Directory: Router Card Profile

Network Time Protocol

The Network Time Protocol is a protocol which sets the network to a common time system for Internet hosts, based off of GMT (Greenwich Mean Time).

1. Select Network Time Protocol < Configure -> and select [E

2. To enable Network Time Protocol, scroll <Disabled> to <Enabled>, with the

PACEBAR], select [ENTER].

NTER].

3-18 IP Router - Release 1.8

Page 49

Profile Directory: Router Card Profile

Network Time Protocol

3. Enter the appropriate data in the following fields.

Network Time Protocol

<Disabled> to disable Network Processing. <Enabled> to enable Network Processing. The following items appear once enabled.

NTP Server Address

The NTP Server Address specifies the IP address of the NTP server. Setting the NTP server value to

0.0.0.0 will cause the router to listen to and process NTP broadcasts.

Poll Interval

The Poll Interval specifies the polling of the NTP server to a defined number of seconds. The range (in seconds) is from 16 to1024 seconds, with a default of 16.

Time Zone Offset HOURS

The hours Time Zone Offset is used to calculate gateway time from GMT (Greenwich Mean Time). Range is -12 to 12.

Time Zone Offset MINUTES

The minutes Time Zone Offset is used to calculate gateway time from GMT (Greenwich Mean Time). Range is 0 to 60.

IP Router - Release 1.8 3-19

Page 50

Profile Directory: Router Card Profile

SysLog

The Syslog client capability enables or disables sending alarm and event messages to an external Syslog server from the Router.

1. Select SysLog Configure -> and select [E

2. To enable SysLog (System Log Message Service), scroll <Disabled> to

<Enable>, with the [S

PACEBAR], select [ENTER].

NTER].

3-20 IP Router - Release 1.8

Page 51

Profile Directory: Router Card Profile

SysLog

3. Enter the appropriate data in the following fields.

SysLog

To enable the SysLog, use the [SPACEBAR] to scroll <Disabled> to <Enabled> and select [TAB] or

[ENTER]. The window will now display the optional settings for Sys Log.

Facility

The value can range from 0 to 23, with a default of 16.

Level

The value can range from 0 to 7, with a default of 3. Level 3 is Alarms and level 5 is Events.

Server IP Address

The server IP Address is a unique, dotted decimal notation entry that is used for data routing purposes. This IP address of the SysLog Server or the Host that has the SysLog Server software running.

IP Router - Release 1.8 3-21

Page 52

Profile Directory: Router Card Profile

DNS Resolver

The DNS Resolver enables the use of the Domain Name Service (DNS) resolver to convert domain names to IP addresses.

1. Select DNS Resolver Configure -> and select [E

2. To enable DNS Resolver, scroll <Disabled> to <Enable>, with the

PACEBAR], select [ENTER].

NTER].

3-22 IP Router - Release 1.8

Page 53

Profile Directory: Router Card Profile

DNS Resolver

3. Enter the appropriate data in the following fields.

DNS Resolver Setup Menu Fields

DNS Resolver

Disable/Enable use of DNS resolver to convert domain names to IP addresses.

My Domain Name

Set the default domain that the DNS resolver will add to any name queries that are not fully qualified. Identifier of up to 43 characters.

My Node Name

Set the CMG card’s host name. Identifier of up to 15 characters.

DNS Primary Server IP Address

Configure IP address of DNS server #1.

DNS Secondary Server IP Address

Configure IP address of DNS server #2.

DNS Resolver Cache Contents

<Flush> - will clear the cache contents <Display> - will display the cache contents

IP Router - Release 1.8 3-23

Page 54

Profile Directory: Router Card Profile

DNS Resolver

Static Host List: View or Modify - >

Select the Static Host List: View or Modify - > and press [ENTER]. If any changes were made the system will prompt you to save changes before leaving this window. Scroll the <No> to <Yes> to save. Note: The following fields must be entered before the Static Host List window can be opened: My Domain Name, My Node Name and 1 DNS IP Address.

4. After the configuration is saved, the DNS Static Host window displays and a Static Host can be added or modifed.

3-24 IP Router - Release 1.8

Page 55

Profile Directory: Router Card Profile

DNS Resolver

5. If any changes are made they must be saved when exiting the window.

Number of Static Hosts set up. A maximum of 33 can be entered.

IP Address

IP address of the static host.

Host Name

Enter the filter name, with a maximum of 42 characters, no spaces or numbers.

IP Router - Release 1.8 3-25

Page 56

Profile Directory: Router Card Profile

DNS Resolver

3-26 IP Router - Release 1.8

Page 57

CHAPTER

Profile Directory: Local Profile

In this Chapter

n LAN (Local) Profile Setup n Static Networks n Static Addresses n Filters n Advertise Network/Server n DHCP Server/BOOTP Relay n LAN Collision Threshold n Spanning Tree n Secondary IP Address n Link Speed

Page 58

Profile Directory: Local Profile

The Local (LAN) Profile Setup is found in Configuration <Profile Directory>/ LocalUnit LAN <Setup ->.

Main Menu

Profile Directory window

4-2 IP Router - Release 1.8

Page 59

Profile Directory: Local Profile

LAN (Local) Profile Setup

Local Profile window

LAN (Local) Profile Setup

The LAN Profile is the largest, most detailed portion of the Router software. The fields on this screen allow definition of how data transmission will occur on the Router LAN port. This includes defining the protocol(s) that it will use to send and receive data, defining security protocols, specifying which LAN servers and networks will be advertised to WAN units, and establishing specific data filtering options.

The LAN profile is used in conjunction with the WAN profiles. The WAN profiles identify which remote units the local unit can communicate with, as well as the data transmission requirements of each remote.

IP Router - Release 1.8 4-3

Page 60

Profile Directory: Local Profile

LAN (Local) Profile Setup

In addition to the fields on this screen, there are several other areas that directly relate to the communication abilities of the Router. You may use the fields at the bottom of this screen to access the following areas:

l Defining static addresses at the local unit

l Establishing static networks

l Establishing Remote (WAN) advertising

l Establishing DHCP Server/BOOTP Relay Agent parameters

l Defining data filters

The Router can accommodate a maximum of 500 filters, such as those created when establishing static routes or data filters. The following entries consume a filter:

l Configured address, custom and protocol filters

l Static IP networks and static IPX networks

l Enabling any learned items listed on the Advertise Network/Server screen or

Filter Network/Server screen

l Static IP and MAC Addresses

l Firewall filters

In a large network, it is necessary to selectively use of each of these options so that the number of configured filters is within the maximum allowed.

The Local Profile is used to define the Local (LAN) port parameters for the unit at the present location.

4-4 IP Router - Release 1.8

Page 61

Profile Directory: Local Profile

LAN (Local) Profile Setup

To Setup a Local Profile:

1. Select Configuration: <Profile Directory> from the Main Menu, and press

NTER].

Local Profile window

2. Select LAN < Setup -> and press [E

LAN Profile window

IP Router - Release 1.8 4-5

NTER].

Page 62

Profile Directory: Local Profile

LAN (Local) Profile Setup

Local Profile Setup Menu Fields

Profile Setup for (LocalUnit)

The (LocalUnit) is the default name for this unit and will be used during the authentication process to ensure this unit’s identity. This name can easily by changed by simply typing over the "LocalUnit" and saving when closing this window. This name can be up to 11 characters.

Protocol

This column includes three protocol options, IP, IPX and Other. These protocols are used to define Frame Types and LAN Network Updates to be used by this IP Router.

Frame Types

Define the frame type of the packets that are sent and received by the IP Router. If a packet is received formatted in a frame type that has not been enabled, the IP Router will not accept the data.

Note that multiple frame types may be supported simultaneously for IPX and Other protocols.

802.2

When selected (X) this IP router may send and receive packets that match the 802.2 format. The

802.2 format complies with IEEE specifications.

Eth II

When selected (X) this IP Router may send and receive packets that match the Ethernet II format. Note that the IP protocol commonly uses this format.

SNAP

When selected (X) this IP Router may send and receive packets that match the SNAP (Subnet Network Address Protocol) format.

802.3

When selected (X) this IP Router may send and receive packets that match Novell’s X802.3 format.

LAN Network Updates

Use the LAN Network Updates field to determine whether the Local (LAN) unit will learn, via RIP and SAP packets, which networks and services are attached to the local LAN, and whether

Remote (WAN) networks and services will be advertised to the LAN. If this information is learned, it may be advertised to remote devices if advertising is established. Use the

[SPACEBAR] to select from the following options: <Both>, <Neither>, <Send> and

<Receive>.

4-6 IP Router - Release 1.8

Page 63

Profile Directory: Local Profile

LAN (Local) Profile Setup

When set to <Both>, the local Unit will accept the RIPs and SAPs from the LAN and the networks and services learned from the WAN will be broadcast to the LAN.

LAN

<Both> send and receive network/service

information to/from LAN

The <Send> value will enable the local Unit to send to the LAN information regarding the networks and services that it has learned from remote devices on the WAN. However, the unit will not accept RIPs and SAPs from the LAN.

LAN

<Send> network/service

information from remote to LAN

When this field value is set to <Receive>, the local Unit will monitor the RIPs and SAPs on the LAN, learn the available networks and services and then pass this information on to the appropriate remote units on the WAN. Network information from the WAN, however, will not be broadcast to the LAN.

Local

unit

Local

unit

WAN

Remote

unit

Remote

unit

LAN

<Receive> network/service information from the LAN and send to the remotes

The <Neither> value will not allow the local Unit to send or receive information regarding networks and services on the LAN.

IP Router - Release 1.8 4-7

Local

unit

WAN

Remote

unit

Page 64

Profile Directory: Local Profile

LAN (Local) Profile Setup

LAN IP:

IP Address

This is the IP Address of this IP Router, used to uniquely identify the device on the internetwork. The default for this IP Address is 10.0.0.1

Subnet Mask

A subnet mask determines which bits in the IP address are used to identify the network number. The default for the Subnet Mask is 255.0.0.0.

Default Router

This is an optional entry depending on your network configuration. Use this field to identify a router that is physically connected to your LAN. If the IP Router receives a packet which contains a network that is not known, the packet will be sent to the router identified in this field.

If there are other routers and networks behind the Default Router add Static Network IP

information with the Default Router as the Default Gateway.

If you are communicating with different network domains, you will need to enter the IP Address of your Router as the default router on each workstation or make sure that the local router will redirect to the Router when appropriate, so that they may use the Router to reach the remote site.

LAN IPX:

These fields enable the Router to route IPX to Remote (WAN) networks, even if an IPX server does not exist on the local LAN. Typically, the Router will learn its external network number. However, if the local LAN does not have a server or if the LAN NETWORK UPDATES field (see above) is set to <Neither>, and you wish to route IPX to Remote (WAN) networks, the external network number must be defined using these fields.

If you are not using IPX on your LAN, these fields will not apply. Please note that these are all hexadecimal entries. For the following see you network administrator for the appropriate numbers. If the frame type is unsupported leave the field set to 0s.

802.2 Ext. Network

Enter the corresponding IPX external network number.

Ethernet II Ext. Network

Enter the corresponding IPX external network number.

SNAP

Enter the corresponding IPX external network number.

802.3 Ext. Network

Enter the corresponding IPX external network number.

4-8 IP Router - Release 1.8

Page 65

Profile Directory: Local Profile

LAN (Local) Profile Setup

Setup < >

The Setup field accesses additional setup screens for the Local (LAN) profile. The screen that is accessed depends on the chosen option. Listed below are the available field options:

Used to configure static network routes that can be reached locally. See Static Networks on page 410, for more information.

Configure static addresses for the local devices. See Static Addresses on page 4-16, for more information.

Define data filters for this Router. See Filters on page 4-19, for more information.

Enables the unit to advertise all networks and services to all remote units, or to advertise to no remotes. See Advertise Network/Server on page 4-25, for more information.

Establish the Router as a DHCP Server or BOOTP Relay Agent. See DHCP Server/BOOTP Relay on page 4-30, for more information.

Adjust the threshold at which excessive LAN collisions trigger an alarm. See LAN Collision Threshold on page 4-34, for more information.

Configures the global setup for using the Spanning Tree Algorithm as specified in the IEEE 802.1D specification. See Spanning Tree on page 4-37, for more information.

Add a secondary IP address and subnet to the specified LAN interface. See Secondary IP Address on page 4-40, for more information.

Link Speed

Sets the Ethernet PHY mode and speed for the Router. Note: it is highly recommended that this setting be left at auto-negotiation. Connection

of Ethernet devices with incompatible settings can lead to severe performance degradation and errors on a network. See Link Speed on page 4-42, for more information.

IP Router - Release 1.8 4-9

Page 66

Profile Directory: Local Profile

Static Networks

Static networks allow fixed, or pre-determined routes, which increases the control over routing choices within your network. Although the Router is able to dynamically learn routing information through RIP packets, you may wish to disable this feature and manually enter fixed routes. (Disable Learning by choosing the <Neither> option in the LAN Network Updates field on the Local (LAN) Profile Setup screen.) Static routing may be preferred if:

l Routers within a network are not configured to advertise, thereby escaping the

automatic learning capabilities of the Router

l Advertising is disabled so that access to certain networks may be restricted for

security purposes or, to decrease traffic on the LAN and across the WAN

l You wish to keep routing tables small in order to increase LAN/WAN

performance

Static routing may also be preferable when managing large networks. Often times it is easier to disable the learning mode and manually enter routes, rather than review each routing table entry and determine its advertising status.

As a static routing example, let’s assume that we have three networks, A, B and C. Network B, is connected to Network C via a router, and to Network A via a remote Unit. Network B may not learn of Network A’s existence if advertising was disabled on Router 1. Therefore, if you wish to establish an entry in the routing table indicating a route between Network B and Network C, you can define a static route on Network B.

Network A

Unit

Enter a static route which indicates that Network C may be reached through remote Unit B.

4-10 IP Router - Release 1.8

Network B Network C

Unit

Enter a static route which indicates that Network C may be reached through Router 1.

Router 1

Page 67

Profile Directory: Local Profile

Static Networks

To continue with this example, if Network B is not configured to advertise Network C to Network A, then Network A will not dynamically learn of Network C’s existence. If you wish to establish a route on Network A to Network C, you must define a static route on Network A that indicates that Network C may be accessed through remote Adit B.

To set up a static route, you must define the following routing information:

l The address of the network you wish to reach; l How far away from the local LAN the network is located (in terms of metric

measurement or hops, depending on the protocol)

l Whether the network can be reached on the local LAN (via the LAN port) or

through a remote unit.

If you are using the local LAN, you will also need to define the address (either IP or MAC, depending on the protocol) of the first gateway (i.e. Adit or router) you will use to reach the network you are defining.

It is important to note that if the static network is reached via a remote unit, it must be defined by choosing the SETUP <Static Networks> option on the corresponding Remote (WAN) Profile Setup screen. Static networks that are reached via the local LAN must be defined by choosing the SETUP <Static Networks> option on the Local (LAN) Profile Setup screen.

NOTE: All static routes are considered filters and will be applied toward the maximum allowable number of 500 filters.

IP Networks - An Internet Protocol Network. IPX Networks - Internet Packet Exchange Network. A Novell NetWare’s native LAN

communications protocol.

IP Router - Release 1.8 4-11

Page 68

Profile Directory: Local Profile

Static Networks

To Setup Static Networks

1. Select Configuration <Profile Directory> from the Main menu, and press

NTER].

2. Select LAN <Setup -> and press [E

Profile Directory window

NTER].

4-12 IP Router - Release 1.8

Page 69

Profile Directory: Local Profile

Static Networks

3. Select Setup: <Static Networks >. If the Secondary IP Address option is not displayed scroll to the selection with the [S

Local Profile Window

PACEBAR], and press [ENTER].

4. Select <IP Networks> or <Static IPX Networks>.

Static Networks Setup (IP)

IP Router - Release 1.8 4-13

Page 70

Profile Directory: Local Profile

Static Networks

5. Press [CTRL A] to add a Static Network.

Static Networks Setup (IPX)

Static Network Menu Fields

Network

Enter the address of the destination network for the route that you are adding. Static networks reached via a remote Unit must be configured through the corresponding Remote (WAN) Profile Setup screen. Those configured through the Local (LAN) Profile Setup screen can be reached via the local LAN. If this is an IP network, enter the value in dotted decimal notation. If this is an IPX network, enter the appropriate value in hexadecimal notation.

Subnet Mask

A subnet mask determines which bits in the IP address are used to identify the network number. It is also a method of extending the IP Network Address so that a site may use one network address for several different networks. This is accomplished by reassigning the portion of the IP Network Address that normally identifies a node, to further identify the physical network. This serves to lessen the number of available device numbers, while expanding the available number of physical networks.

Metric

Enter a numeric value indicating the distance from your local network to the destination network. Originally this measured by the number of gateways between the two networks, the number may be modified, either higher or lower, to indicate a desired priority. To ensure a route is considered primary, the value in this Metric field must be less than that of a secondary route. This field is only used on IP networks. Valid entries range from 1 to 15. (Please note that a value of 1 usually indicates a direct network.)

4-14 IP Router - Release 1.8

Page 71

Profile Directory: Local Profile

Static Networks

Hops

See Metric, above. When defining the number of hops in a given route, remember to increment the actual number by 1, since your locally attached unit is counted as “1”. This field is only used on IPX networks. Valid entries range from 1 to 15.

Ticks

Indicates the distance between two networks as measured in time increments (1/18th of a second). Only IPX Networks use this information. Like hops, ticks may be used to designate primary and secondary routes to the same network. Although both the hops and ticks values are considered when determining routing priority, for Novell networks, the tick value is considered first. To designate routing priority between two routes, manipulate the tick value so that the preferred route is given the lower value. This field value has a range of 1 to 15.

Next Gateway

Enter the IP Address of the first gateway (Adit or router) that the data will use to reach the destination network. Referring back to Example 1, Network B would enter the IP Address of Router 1, since that is the first gateway on the route to Network C. This field is only used on IP Networks.

Next IPX Router

Enter the MAC Address of the next gateway (Adit or router) on the route that the data will use to reach the destination network. Referring back to Example 1, Network B would enter the MAC Address of Router 1, since that is the next gateway on the route to Network C. This field is only used on IPX networks.

IP Router - Release 1.8 4-15

Page 72

Profile Directory: Local Profile

Static Addresses

Use this screen to define static addresses that are based on the Ethernet MAC or IP Address of a specific device on the local LAN. Typically, the Router would learn of these devices by monitoring LAN/WAN packets. By defining a static address, you are telling the Router the location of the corresponding device before the Router learns where this device resides. Static addresses are typically used in a bridging situation.

Use the Local (LAN) Profile to define static addresses for devices that are located on the LAN. If you wish to establish static addresses for devices on remote LAN’s, access this screen using the corresponding Remote Profile.

NOTE: Each static address filter will count toward the maximum number of 500 filters.

1. Select Configuration <Profile Directory> on the Main menu, and press

NTER].

2. Select LAN <Setup -> and press [E

Profile Directory Window

4-16 IP Router - Release 1.8

NTER].

Page 73

Profile Directory: Local Profile

Static Addresses

3. Select Setup: <Static Addresses >. If the Static Addresses option is not displayed scroll to the selection with the [S

Local Profile Window

PACEBAR], and press [ENTER].

4. Press

Static MAC Address Setup

IP Router - Release 1.8 4-17

[CTRL A] to add static addresses, as needed.

Page 74

Profile Directory: Local Profile

Static Addresses

Static IP Address Setup

Static IP Address Menu Fields

Setup Static

Use the [SPACEBAR] to scroll between <IP Address > and <MAC Address >. The fields on this screen will vary depending on your choice.

IP Address

A unique, 32-bit identifier for a specific TCP/IP device on a network. The address is in dotted decimal form, xxx.xxx.xxx.xxx, where xxx = 1-255.

MAC Address

The address for a device as it is identified at the Media Access Control layer in the network structure.

Device Name

Use this field to identify the user-defined name of the LAN device that is associated with this static address. The maximum number of alphanumeric characters for this field is 7.

MAC Address

Enter the MAC Address of the desired device that can be reached via the local LAN. This field is only available if the Setup Static field is set to <MAC Address >.

IP Address

Enter the IP Address of the desired device. If the static address is configured through the Local (LAN) Profile Setup screen, the device can be reached via the local LAN. This field is only available if the Setup Static field is set to <IP Address>.

4-18 IP Router - Release 1.8

Page 75

Profile Directory: Local Profile

Filters

Use this screen to review currently enabled data filters or to enable new filters. Data filters are used to determine whether data can be sent or received on the LAN/WAN based on a specific device, protocol type or defined data string. Data filters must be defined using the Custom, Protocol and Address Filter screens prior to being enabled on the current screen. Filters will not be in effect until they are added to this screen. Once enabled, they will adhere to the value set in the Forward Mode field.

1. Select Configuration <Profile Directory> on the Main menu, and press

NTER].

2. Select LAN < Setup -> and press [E

Profile Directory Window

NTER].

NOTE: Each Custom filter, even if it is not enabled, will count toward the maximum number of 500 filters.

IP Router - Release 1.8 4-19

Page 76

Profile Directory: Local Profile

Filters

3. Select Setup: <Filters >. If the Filters option is not displayed scroll to the selection with the [S

Local Profile Window

PACEBAR], and press [ENTER].

4. Press [C

TRL A] to enable filters that have been defined. See the following

sections on Defining Custom, Protocol and Address Filters.

Enabled Filter Window

4-20 IP Router - Release 1.8

Page 77

Profile Directory: Local Profile

Filters

Filters Menu Fields

Forward Mode

This field determines what data to pass/not to pass, based on this field value and the filters listed on the current window. There are two available values which determine how the Router will handle data to/from the LAN:

<All Frames NOT Matching Filters> any packets matching the filters listed will not be passed (i.e., pass all frames except those matching the enabled filters).

<ONLY Frames Matching Filters> enabled filters will have the PASS action. All packets matching the filters listed will be passed to/from the LAN. Any packets that do not match will be dropped (i.e., will not pass through the Router).

Define Filter

Use this field to choose the appropriate filter type. The filter screens are used to define the actual filter prior to enabling (adding) it on the current window.

<Custom> see Defining Custom Filters on page 4-22 <Protocol> see Defining Protocol Filters on page 4-23 <Address> see Defining Address Filters on page 4-24

Filter Type

This field value represents the type of filter <Custom>, <Protocol> or <Address>.

Source/Destination

This field is active only with an Address Filter.

<Source> Filters by Source only. <Destination> Filters by Destination only. <Both> Filter by Source and Destination.

Filter Name

This field displays the name the filter has been given.

IP Router - Release 1.8 4-21

Page 78

Profile Directory: Local Profile

Filters

Defining Custom Filters

Custom Filter Window

This screen defines filters that “search” for a matching string of characters within a packet. The defined character string can consist of up to 32 bits. The user must specify:

Custom Name - Filter name can be up to 7 characters. Packet Offset - designates where in the packet to begin looking for a matching

character string. Range is 0 to 60 bytes. 32-Bit Mask - indicates which bits are to be searched for a possible match.Within the

mask, a 1 turns a bit ON, 0 is OFF. Only the bits that are turned on (set to 1) will be searched for the match.

32-Bit Match - specifies the character string that the system is searching for. When a match is located, the packet adheres to the Forward Mode field value.

To enable a filter return to the Enabled Filter Window ([E press [C

TRL A], select filter type (Custom, Protocol or Address) filter will be added to

SC] from this window) and

the Enabled Filters window.

NOTE: Each filter, even if it is not enabled, will count toward the maximum number of 500 filters.

4-22 IP Router - Release 1.8

Page 79

Profile Directory: Local Profile

Filters

Defining Protocol Filters

Protocol Filter Window

Use this screen to define filters that are based on specific protocols being used by LAN devices. These filters, when enabled, provide security by restricting LAN/WAN access based on a specific protocol.

Protocol Name - Filter name can be up to 7 characters. Ethernet Value - Enter the assigned Ethernet value for this protocol, see Addendum B,

Ethernet Protocol Types.

IEEE Value - Enter assigned IEEE value for this protocol. The IEEE value is the same as the DSAP and SSAP values in a SNAP packet.

NOTE: Only identify either an Ethernet or IEEE value, but not both.

To enable a filter return to the Enabled Filter Window ([E press [C

TRL A], select filter type (Custom, Protocol or Address) filter will be added to

SC] from this window) and

the Enabled Filters window.

NOTE: Each filter, even if it is not enabled, will count toward the maximum number of 500 filters.

IP Router - Release 1.8 4-23

Page 80

Profile Directory: Local Profile

Filters

Defining Address Filters

Address Filter Window

Use this window to define filters that are based on the Ethernet MAC Address of a specific device. When enabled, these filters provide security by restricting LAN/WAN access based on a device’s MAC Address. Address filters are based on either source, destination or both source and destination MAC Addresses.

Device Name - Filter name can be up to 7 characters. MAC Address - Enter the MAC Address of the LAN device that you are defining as

a filter. The system will use the defined MAC Address and the value in the Forward Mode to determine whether the packet should be passed or received.

To enable a filter return to the Enabled Filter Window ([E press [C

TRL A], select filter type (Custom, Protocol or Address) filter will be added to

SC] from this window) and

the Enabled Filters window.

NOTE: Each filter, even if it is not enabled, will count toward the maximum number of 500 filters.

4-24 IP Router - Release 1.8

Page 81

Profile Directory: Local Profile

Advertise Network/Server

1. Select Configuration <Profile Directory> from the Main menu, press

NTER].

2. Select LAN <Setup -> and press [E

Profile Directory Window

3. Select Setup: <Advertise Network/Server >. If the Advertise Network/

NTER].

Server option is not displayed scroll to the selection with the [S press [E

NTER].

PACEBAR], and

Local Profile Window

IP Router - Release 1.8 4-25

Page 82

Profile Directory: Local Profile

Advertise Network/Server

Use these windows to review networks that your unit has discovered through the LAN. By sending out IPX and IP RIP (Routing Information Protocol) and IPX SAP (Service Advertising Protocol) packets and monitoring RIP and SAP packets from other devices, your unit can learn about other networks. The system constantly monitors RIP packets to ensure that the status of the network has remained unchanged. Should a RIP packet indicate a change in status, the unit will update the data in the table and exchange the updated data with all remotes.

Advertise Network/ Server Window

Once the Local Unit has learned of a network, you may choose to have the Router advertise broadcast RIP packets on behalf of the actual network. Selecting which networks you wish your Local Unit to advertise provides added security by restricting what information is passed on to the remote.

For added control in network advertising, automatic learning may be turned off and, using the Static Network windows, manually enter the network routes to be advertised.

Disable Learning: On the LAN Profile setup window set LAN Network Updates to <Neither> On the WAN Profile setup window set WAN Network Updates to <Never>

4-26 IP Router - Release 1.8

Page 83

Profile Directory: Local Profile

Advertise Network/Server

The Advertise Network/Server Window can be used in two ways, depending on which Selected Items mode is chosen:

<Do Not Advertise> Selected Items mode causes the unit to not advertise the learned network to all remotes if you place an X next to the selected item.

<Advertise> Selected Items mode causes the unit to advertise the learned network to all remotes if you place an X next to the selected item.

NOTE: Since each network that contains an X next to it consumes a filter, choose an approach that consumes the least number of filters. With 15 learned networks of which 5 need to be advertised, it uses less filters to

<Advertise> 5 networks than to select <Do Not Advertise> 10.

NOTE: Each selected network will be counted as a filter. A maximum of

500 filters can be defined on the Router.

Advertise Network/Server Menu Fields

Setup

Use this field to identify which networks or server types you wish to review. Options are: <IP Networks>, <IPX Servers> and <IPX Networks>.

Selected Items

<Advertise> With this option selected Networks will advertise to all remote units that

are listed in your Profile Directory.

<Do Not Advertise> With this option selected Networks will not be advertised.

Network

This field displays the network address of each network learned from the local LAN. If this route was added using one of the Static Network windows, “Static Fltr” will appear before the network address of this entry. If this is not a static route, and has been selected, “Config Fltr” will appear before the network address of this entry. Only static routes for the local unit will display on this window.

IP Router - Release 1.8 4-27

Page 84

Profile Directory: Local Profile

Advertise Network/Server

IPX Server Advertising

Servers are learned and maintained by the Router in the same way as network tables, by sending out IPX SAP (Service Advertising Protocol) packets and monitoring SAP packets from other devices, the unit learns about other servers. Once a server has been discovered, the information is displayed on this window.

This window may be used in two ways, depending on which Selected Items mode is chosen: <Do Not Advertise> Selected Items or <Advertise> Selected Items. The <Do Not Advertise> mode causes the unit to not advertise the learned services. To advertise under this mode, remove the X next to the server to advertise. The <Advertise> mode causes the unit to advertise all learned services to all remotes. If a specific server under this mode is not to be advertised the X must be removed next to the listed server.

Since each server that contains an X next to it consumes a filter, you should choose the approach that consumes the least number of filters. For example, if a Router has learned 15 services of which you want to advertise only 5. It would consume fewer filters to set the Selected Items field to <Advertise> and place an X next to the 5 servers to, than to choose <Do Not Advertise> and place an X next to the 10 servers.

NOTE: Each selected server will be counted as a filter. A maximum of 500 filters can be defined on the Router.

4-28 IP Router - Release 1.8

Page 85

Profile Directory: Local Profile

Advertise Network/Server

Network

This field displays the network address of each learned or configured server. If a server has been selected using the

Type

The TYPE field displays the Hex value assigned to each known server. When a server is added using

[CTRL A], a Hex value must be defined. If you wish to learn certain services that match

a particular server type, manually add an entry specifying the desired Hex value. This setting will enable the unit to learn all services that match the specified service type. This field may be used in conjunction with the NAME field, described below.

Name

This field displays the first 11 characters of the name of each known server. If the server is manually added and a server name is not defined, all servers matching the added type will be learned and the first 11 characters of their names will be displayed. If the server name is defined when the server is manually added, then only servers matching both type and name will be learned.

Selected Items

Use this field to determine whether your Router will advertise the information listed on this window to remote units. Valid field options include <Do Not Advertise> and <Advertise>. If <Advertise> is selected, checked items (with X) will advertise to all remote units in the Profile Directory. If <Do Not Advertise> is selected, checked items will not be advertised.

Use the the following prompt is displayed:

You must define a server type (see TYPE field, above), however the corresponding server name may be left blank. If a server name is not defined, all services of the specified type will be learned, regardless of the name.

If the server type and name are specified, only server types that match both values will be learned. Be aware that the NAME value is case and spacing sensitive.

Press

[CTRL A] keys to manually configure a service. When manually configuring a service,

[ESC] to save changes and return to the Local (LAN) Profile Setup window.

[X] key, “Config Fltr” will appear before the network address of this entry.

IP Router - Release 1.8 4-29

Page 86

Profile Directory: Local Profile

DHCP Server/BOOTP Relay

Use the options on this window to enable the Router to act as either a DHCP server or BOOTP relay agent. Workstations with DHCP/BOOTP (Dynamic Host Configuration Protocol) client software will generate a broadcast message requesting an IP Address from a DHCP/BOOTP server. As a BOOTP relay agent, the Router will forward these requests to the appropriate server. When the server assigns the workstation an IP Address, the Router will then send this address back to the appropriate workstation. Using this method, the DHCP/BOOTP server can reside at a Remote (WAN) location and the Router can serve as an agent between requesting workstations and the server. As a DHCP server, the Router can assign up to 254 IP Addresses to DHCP clients on the local LAN. It will not assign to clients across the WAN.

1. Select Configuration <Profile Directory> from the Main menu, select

NTER].

2. Select LAN < Setup -> and press [E

Profile Directory Window

4-30 IP Router - Release 1.8

NTER].

Page 87

Profile Directory: Local Profile

DHCP Server/BOOTP Relay

3. Select Setup: <DHCP Server/BOOTP Relay > If not displayed scroll to the

selection with the [S

Local Profile Window

PACEBAR], and press [ENTER].

DHCP Server/ BOOTP

IP Router - Release 1.8 4-31

Page 88

Profile Directory: Local Profile

DHCP Server/BOOTP Relay

DHCP Server/ BOOTP

DHCP Server/BOOTP Relay Menu Fields

DHCP Server

Use this field to enable this Router as a DHCP Server. Use the [SPACEBAR] to select <Enabled> or <Disabled>. The following fields are available when enabled.

Info: Active Leases

Displays the Active Lease Information below.

Domain Name

This option is used if the DHCP Server is enabled on the DHCP Server/BOOTP Relay screen. On a LAN network where the Router is the DHCP Server, the Domain Name will be assigned with IP addressing information to DHCP clients. This value is a maximum of 41 characters.

Start IP Address

If the Router is specified to act as a DHCP server, enter the first valid IP Address the Router may assign to a DHCP client. This field acts in conjunction with the Number field.

Number

Enter the number of IP Addresses that this Router may assign. This field acts in conjunction with the Start IP Address field by using a contiguous block of IP Addresses. Range is 1-254.

4-32 IP Router - Release 1.8

Page 89

Profile Directory: Local Profile

DHCP Server/BOOTP Relay

Lease Duration

Enter the duration, in hours and minutes, that an IP Address assigned by the Router will remain valid. If this field is left at 000.00, the IP Address will remain valid indefinitely. Range is Hours = 1-999 Minutes = 1-59.

Domain Name Servers

The Domain Name Servers option specifies the IP address of DNS name servers to be used by DHCP clients. Enter the IP address of up to 4 domain name servers.

Option Type Value

These fields add the optional DHCP server attributes that will be advertised every time a DHCP client discovery is initiated. This provisioning takes effect immediately and can only be performed when the DHCP server is enabled. Once the option number is entered the other fields become active.

Option

Range is 1-254. Options tags are unique, duplicate numbers will be rejected. 0 = off Reserved numbers = 6, 15, 44, 46, 47, 50, 51, 53, 54 and 61. The operator will be notified when exiting this window, that a Reserved or Duplicate Option number has been used, and will direct you to modify the option number.

Type

<Bool> - Boolean uses <true> <false> <1Byt> <2Byte> <3Byte> <4Byte> - sends a value in 1, 2, 3 or 4 bytes. <IP> - IP Address in the form xxx.xxx.xxx.xxx, where xxx is a number from 0 to 255. <TEXT> - String with a maximum of 50 characters, enclosed in quotes.

NetBIOS over TCP/IP

Node Type

This option allows NetBIOS over TCP/IP clients, which are configurable to be configured as described in RFC 1001/1002. The value is specified as a single octet that identifies the client type (1=B-node, 2=P-node, 4=M-node, 8=H-node).

Scope

The Scope is a DHCP option that represents a grouping of computers on a subnet using the same NetBIOS name. This name has a maximum of 41 characters.

Name Server (NBNS)

This option specifies a list of RFC 1001/1002 NBNS name servers listed in order of preference. Enter the IP address of the NBNS servers.

IP Router - Release 1.8 4-33

Page 90

Profile Directory: Local Profile

LAN Collision Threshold

Use the options on this window to define the sample interval for data collection of collisions, the Hi and Lo thresholds for raising and clearing Collision alarms. It will also display if there is a current alarm active and the number of collisions that have occurred during the defined sample interval.

1. Select Configuration <Profile Directory> from the Main menu, press

NTER].

Profile Directory Window

2. Select LAN < Setup -> and press [E

NTER].

4-34 IP Router - Release 1.8

Page 91

Profile Directory: Local Profile

LAN Collision Threshold

3. Select Setup: <LAN Collision Threshold > If the LAN Collision Threshold

PACEBAR], and press

Local Profile Window

option is not displayed scroll to the selection with the [S [E

NTER].

LAN Collision Threshold Provisioning

IP Router - Release 1.8 4-35

Page 92

Profile Directory: Local Profile

LAN Collision Threshold

LAN

Will indicate if the LAN is UP or Down (DWN).

Collisions

The number of collisions that have occurred during the defined sample interval.

Alarm

This field indicates if there is/is not an active collision alarm. There is an alarm indicator on the front of the IP Router Card, labeled COL. If a collision alarm

is active this LED will flash yellow.

Sample Interval

Use the Collision Sample Interval in second. (1-65536 seconds).

- Default is 10

- Disable is 0

Collision Hi Threshold

Use this field to set the number of collisions in Interval to raise an alarm. When the number of collisions rises above the defined number per interval, the alarm will be activated. The default is 500.

Collision Lo Threshold

Use this field to set the number of collisions in Interval to Clear Alarm. If the number of collisions drops below the defined number per interval, the alarm will clear. Default is 10.

4-36 IP Router - Release 1.8

Page 93

Profile Directory: Local Profile

Spanning Tree

NOTE: This option does not display on the Local LAN Profile Setup, until Spanning Tree is enabled on the Router CARD Profile.

The Spanning Tree configures the setup for the Spanning Tree Algorithm.

To Configure Spanning Tree:

1. Select Configuration <Profile Directory> from the Main menu, and press

NTER].

2. Select LAN < Setup -> and press [E

Profile Directory Window

NTER].

IP Router - Release 1.8 4-37

Page 94

Profile Directory: Local Profile

Spanning Tree

3. Select Setup: <Spanning Tree > and press [ENTER].

4. To enable Spanning Tree, scroll <Disabled> to <Enabled>, with the

PACEBAR], press [ENTER].

4-38 IP Router - Release 1.8

Page 95

Profile Directory: Local Profile

Spanning Tree

5. Enter the appropriate data in the following fields.

Port Priority

The Port Priority value can range from 0 to 255, with a default of 128.

Port Cost

The Port Priority value can range from 0 to 65535, with a default of 651.

IP Router - Release 1.8 4-39

Page 96

Profile Directory: Local Profile

Secondary IP Address

This option will add a secondary IP address and subnet to the specified LAN interface. The router will then be capable of routing between the various subnets on the LAN interface or between any of the LAN subnets and any WAN subnet. A maximum of 8 secondary IP addresses can be added to the LAN interface.

To Add a Secondary IP Address:

1. Select Configuration <Profile Directory> from the Main menu, and press [E

NTER].

Profile Directory Window

2. Select LAN < Setup -> and press [E

NTER].

4-40 IP Router - Release 1.8

Page 97

Profile Directory: Local Profile

Secondary IP Address

3. Select Setup: <Secondary IP Address>, by scrolling through the options with

PACEBAR] and select [ENTER]. Select [CTRL A] to enter an IP Address.

the [S

Local Profile Window

IP Address

The secondary IP Address, in the form xxx.xxx.xxx.xxx, where xxx is between 1 -255.

Subnet Mask

The Subnet Mask to the corresponding Secondary IP address listed, in the form xxx.xxx.xxx.xxx, where xxx is between 1 -255.

IP Router - Release 1.8 4-41

Page 98

Profile Directory: Local Profile

Link Speed

The Link Speed sets the Ethernet PHY mode and speed for the Router.

NOTE: It is highly recommended that this setting be left at autonegotiation. Connection Ethernet devices with incompatible settings can lead to severe performance degradation and errors on a network.

To Set the Link Speed:

1. Select Configuration <Profile Directory> from the Main menu, and press [E

NTER].

Profile Directory Window

2. Select LAN < Setup -> and press [E

NTER].

4-42 IP Router - Release 1.8

Page 99

Profile Directory: Local Profile

Link Speed

3. Select Link Speed: <Auto Negotiate > scroll to the selection with the

PACEBAR], and press [ENTER].

Local Profile Window

Auto Negotiate

This selection is the default and is highly recommended to be left at this setting. The router and the device will negotiate common features and functions.

100T Full Duplex

The selection will force the Ethernet PHY to 100 MHz full-duplex on the Router.

100T Half Duplex

The selection will force the Ethernet PHY to 100 MHz half-duplex on the Router.

10T Full Duplex

The selection will force the Ethernet PHY to 10 MHz full-duplex on the Router.

10T Half Duplex

The selection will force the Ethernet PHY to 10 MHz half-duplex on the Router.

IP Router - Release 1.8 4-43

Page 100

Profile Directory: Local Profile

Link Speed

4-44 IP Router - Release 1.8

Carrier Access 770-0015 AM User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Warranty

Limitation of Warranty & Limitation of Remedies

Preface

Warranty Product Returns

Table of Contents

Overview

Installation

Install a Router Card

Maneuvering in the System

Fields

Scroll Field

Select Field

Edit Field

Help Bar

Connecting to the Router

Establish a Telnet Session

Set a New Password

Management Overview

System Time/Login

System Date and Time

Auto-Logout Timer

View Password

Config Password

Admin Password

Enhanced Security

Upload/Download

To Setup the Router for Uploads/Downloads

Upload/Download Setup Menu Fields

Load Defaults

Software Images

Choices

Overview

Configuration

RIP Mode Receive

RIP Mode Send

Trunk

Security

SNMP

DNS Proxy

Spanning Tree Protocol

Network Time Protocol

SysLog

DNS Resolver

LAN (Local) Profile Setup

To Setup a Local Profile:

LAN IP:

LAN IPX:

Setup < >

Link Speed

Static Networks

To Setup Static Networks

Static Addresses

Filters

Defining Custom Filters

Defining Protocol Filters

Defining Address Filters

Advertise Network/Server

IPX Server Advertising

DHCP Server/BOOTP Relay

LAN Collision Threshold

Spanning Tree

Secondary IP Address

Link Speed