Cyclades-PR1000Installation Manual
Version 1.2 – May 2002
Copyright (C) Cyclades Corporation, 1998 - 2002
We believe the information in this manual is accurate and reliable. However , we assume no responsibility , financial
or otherwise, for any consequences of the use of this product or Installation Manual.
This manual is published by Cyclades Corporation, which reserves the right to make improvements or changes in
the products described in this manual as well as to revise this publication at any time and without notice to any
person of such revision or change. The menu options described in this manual correspond to version 1.9.4 of the
CyROS operating system. This manual is printed horizontally in order to match the electronic (PDF) format of the
Installation Manual, page per page.
All brand and product names mentioned in this publication are trademarks or registered trademarks of their
respective holders.
FCC Warning Statement:
The Cyclades-PR1000 has been tested and found to comply with the limits for Class A digital devices, pursuant
to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference
when the equipment is operated in a commercial environment. This equipment generates, uses and can radiate
radio frequency energy and, if not installed and used in accordance with the Installation Manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause
harmful interference in which case the user is required to correct the problem at his or her own expense.
Canadian DOC Notice:
The Cyclades-PR1000 does not exceed the Class A limits for radio noise emissions from digital apparatus set out
in the Radio Interference Regulations of the Canadian Department of Communications.
Le Cyclades-PR1000 n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils
numériques de la classe A prescrites dans le règlement sur le brouillage radioélectrique edicté par le Ministère
des Communications du Canada.
Cyclades-PR1000
Table of Contents
CHAPTER 1 HOW TO USE THIS MANUAL ......................................................................................................7
Text Conventions.............................................................................................................................................. 8
Cyclades Technical Support and Contact Information...................................................................................10
CHAPTER 2 WHAT IS IN THE BOX ................................................................................................................12
The V.35/RS-232 Model .......................................................................................................... .......................13
The X.21 Model..............................................................................................................................................14
CHAPTER 3 USING CYROS MENUS .............................................................................................................19
Connection Using the Console Cable and a Computer or Terminal..............................................................19
Special Keys...............................................................................................................................................21
The CyROS Management Utility....................................................................................................................22
CHAPTER 4 STEP-BY-STEP INSTRUCTIONS FOR COMMON APPLICATIONS.........................................24
Example 1 Connection to an Internet Access Provider via Modem..............................................................24
Example 2 A LAN-to-LAN Example Using Frame Relay ..............................................................................33
CHAPTER 5 CONFIGURATION OF THE ETHERNET INTERFACE ..............................................................41
The IP Network Protocol ................................................................................................................................41
IP Bridge.....................................................................................................................................................43
Table of Contents
Cyclades-PR1000
Other Parameters........................................................................................................................................... 44
CHAPTER 6 THE SWAN INTERFACE ............................................................................................................45
The IP Protocol...............................................................................................................................................49
The Transparent Bridge Protocol...................................................................................................................51
OSPF Configuration on the Interface .........................................................................................................70
Table of Contents
Cyclades-PR1000
OSPF Global Configurations ......................................................................................................................72
CHAPTER 10 CYROS, THE OPERATING SYSTEM.......................................................................................77
Creation of the host table............................................................................................................................... 77
Creation of user accounts and passwords..................................................................................................... 77
IP Accounting .................................................................................................................................................79
Types of Address Translation ..................................................................................................................... 82
CHAPTER 12 RULES AND FILTERS .................................................................................................. ............ 86
Configuration of IP Filters...............................................................................................................................86
Configuring the Ethernet Interface ...............................................................................................................101
Configuring Other Interfaces........................................................................................................................101
APPENDIX A TROUBLESHOOTING.............................................................................................................109
What to Do if the Login Screen Does Not Appear When Using a Console. ................................................ 109
What to Do if the Router Does Not Work or Stops Working. ....................................................................... 110
Testing the Ethernet Interface ...................................................................................................................... 111
Testing the WAN Interface ........................................................................................................................... 112
APPENDIX B HARDWARE SPECIFICATIONS .............................................................................................114
General Specifications ................................................................................................................................. 114
The WAN Interface ................................................................................................................................... 115
The LAN Interface .................................................................................................................................... 115
The Console Interface .............................................................................................................................. 116
INDEX ..............................................................................................................................................................122
Table of Contents
Cyclades-PR1000
CHAPTER 1 HOW TO USE THIS MANUAL
Three Cyclades manuals are related to the PR1000.
1 The Quick Installation Manual -- provided with the router ,
2 The Installation Manual -- available electronically on the Cyclades web site,
3 The CyROS Reference Guide -- also available electronically on the Cyclades web site.
CyROS stands for the Cyclades Routing Operating System. It is the operating system for all Cyclades Power
Routers (PR1000, PR2000, PR3000, and PR4000). The CyROS Reference Guide contains complete information
about the features and configuration of all products in the PR line.
CyROS is constantly evolving, and the menus in this manual might be slightly different from the menus in the
router . The latest version of all three manuals (and the latest version of CyROS) can be downloaded from Cyclades’
web site. All manuals indicate on the second page the manual version and the corresponding version of CyROS.
This manual should be read in the order written, with exceptions given in the text.
Chapter 2 - What is in the Box
Chapter 3 -Using Menus
-
explains how the router should be connected.
-
describes CyROS menu navigation.
Chapter 4 -Step-by-Step Instructions for Common Applications - guide to configuration with detailed examples.
Chapters 5 to 9- Basic router configuration information for applications that do not fit any of the examples in
chapter 4.
Chapter 10 - CyROS - shows how to set router specific parameters and create lists of hosts and users.
Chapter 11 - Network Address Translation - describes CyROS’ NA T implementation.
Chapter 1 - How To Use This Manual
7
Cyclades-PR1000
Chapter 12 - Filters and Rules - demonstrates how to protect your router from undesired traffic.
Chapter 13 - IPX - presents the hidden menus available only in routers with IPX activated.
Chapter 14 - Virtual Private Network - describes CyROS’ VPN implementation.
Appendix A - Troubleshooting - provides solutions and tests for typical problems.
Appendix B - Hardware Specifications.
Appendix C - Configuration Without a Console.
Installation Assumptions
This Installation Manual assumes that the reader understands networking basics and is familiar with the terms and
concepts used in Local Area and Wide Area Networking.
Text Conventions
Common text conventions are used. A summary is presented below:
ConventionDescription
CONFIG=>INTERFACE=>LA combination of menu items, with the last being either a menu item, a
parameter, or a command. In this example, L lists the interface configuration.
<INTERFACE>
A variable menu item that depends on hardware options or a choice of
hardware or software options.
IP Address
Screen Text
A parameter or menu item referenced in text, without path prepended.
Screen Text
<ESC>, <Enter>Simbols representing special keyboard keys.
Chapter 1 - How To Use This Manual
8
Cyclades-PR1000
Icons
Icons are used to draw attention to important text.
IconMeaningWhy
What is Wrong?When an error is common, text with this icon will mention the symptoms and
how to resolve the problem.
Where Can I Find
More Information?
CyROS contains many features, and sometimes related material must be
broken up into digestible pieces. Text with this icon will indicate the relevant
section.
Caution!Not following instructions can result in damage to the hardware. Text with
this icon will warn when damage is possible.
Reminder.Certain instructions must be followed in order. Text with this icon will explain
the proper steps.
Chapter 1 - How To Use This Manual
9
Cyclades-PR1000
Cyclades Technical Support and Contact Information
All Cyclades products include limited free technical support, software upgrades and manual updates.
These updates and the latest product information are available at:
The Cyclades-PR1000 comes in two varieties, described below. Both models are accompanied by the following
accessories:
• Quick Installation Manual
• Documentation CD containing the complete Installation Manual and the CyROS Reference Guide
• Console Cable and Power Source
• Mounting Kit containing Velcro® Strips and screws.
The Documentation CD also contains a back-up copy of the op Code, in case the preinstalled copy is corrupted
in some way.
Chapter 2 - What is in the Box12
Cyclades-PR1000
The V.35/RS-232 Model
Power Source
To Wall Outlet
Back Panel of PR1000
Ethernet
Console
1
On/Off
WAN
0
or
DB-25
Male
Straight-
Through
Cable
DB-25
Male
DB-25
Male
M.34
Adaptor
Straight-
Through
Cable
Console Cable
Labeled “Conf”
or “Console”
To COM Port
of Computer
RS-232 Modem
with DB-25
Interface
V.35 DSU/CSU
with M.34
Interface
FIGURE 2.1 V .35/RS-232 MODEL
Figure 2.1 shows which cables (purchased separately) should be used for each type of modem and how everything
should be connected. The pinout diagrams of these cables are provided in Appendix B of the Installation Manual.
Chapter 2 - What is in the Box13
Cyclades-PR1000
The X.21 Model
Back Panel of PR1000
ff
n/O
O
0
1
WAN
Ethernet
C
onsole
To COM Port
of Computer
Power Source
DB-25
Console Cable
Labeled “Conf”
or “Console”
Male
X.21 Modem
Cable
DB-15
To Wall Outlet
Male
X.21 DSU/CSU
with DB-15
Interface
FIGURE 2.2 X.21 MODEL
Figure 2.2 shows which cable (purchased separately) should be used for an X.21 modem and how everything should
be connected. The pinout diagram of this cable appears in Appendix B of the Installation Manual.
Cyclades recommends the use of Category 5, shielded twisted-pair cables for Fast Ethernet connections.
The Cyclades-PR1000 comes with rubber pads to prevent it from slipping on a horizontal surface. It may be
necessary to affix the router more securely to either a horizontal or vertical surface. To this end, Velcro® strips
and screws have been provided.
Chapter 2 - What is in the Box14
Cyclades-PR1000
Horizontal Surfaces
The Velcro® strips should be used to attach the PR1000 more firmly to a horizontal surface. Remove the
backing from the prickly Velcros® and attach them to the router as shown in the figure. Remove the backing
from the fuzzy Velcros® and place them on the horizontal surface so they are aligned with the Velcros® on the
router .
Cyclades-PR1000
Prickly
Velcro
®
Fuzzy
Velcro
®
Horizontal Surface Where the PR1000 Will be Secured
FIGURE 2.3 HOW TO ATT ACH THE VELCRO® STRIPS
Prickly
Velcro
®
Chapter 2 - What is in the Box15
Cyclades-PR1000
Next, place the PR1000 on the horizontal surface, aligning the fuzzy and prickly Velcros® as shown in Figure 2.4.
Cyclades-PR1000
Horizontal Surface Where the PR1000 Will be Secured
FIGURE 2.4 HOW TO ATT ACH THE PR1000 T O A HORIZONTAL SURF ACE
Vertical Surfaces
There are two slots in the base of the PR1000 to allow it to be affixed to a vertical surface. Screws and nylon
fixings (for cement walls) are provided for this purpose.
Make holes 184,8mm (7.27 in) apart on the vertical surface. If using a drill, a 5mm bit should be used. Four
millimeters (or a little more than 1/8 in) of the screw should be exposed (not counting the head).
Chapter 2 - What is in the Box16
Cyclades-PR1000
Cyclades-PR1000
184,8 mm or 7.27 in
FIGURE 2.5 POSITIONING OF SCREWS
Two 5mm Ø Screws
with Nylon Fixings
Screw Slot
Vertical Surface Where
the PR1000 Will be Secured
Chapter 2 - What is in the Box17
Cyclades-PR1000
Place the center of the screw slots over the screws and slide the router down so the screws hold the router in place as
shown in Figure 2.6.
12
Cyclades-PR1000
Vertical Surface Where
the PR1000 Will be Secured
FIGURE 2.6 HOW TO ATTACH THE PR1000 TO A VERTICAL SURF ACE
Note that the PR1000 can be hung with the LEDs facing up or facing down, whichever is more convenient.
Chapter 2 - What is in the Box18
Cyclades-PR1000
Chapter 3 Using CyROS Menus
This chapter explains CyROS menu navigation and special keys. There are three ways to interact with CyROS:
• Traditional menu interface using a console or Telnet session,
• CyROS Management Utility based on interactive HTML pages,
• SNMP (explained in the CyROS Reference Manual).
Connection Using the Console Cable and a Computer or Terminal
The first step is to connect a computer or terminal to the router using the console cable. If using a computer,
HyperTerminal can be used in the Windows operating system or Kermit in the Unix operating system. The
terminal parameters should be set as follows:
Once the console connection is correctly established, a Cyclades banner and login prompt should appear on the
terminal screen. Pressing <ESC> during the boot process will temporarily halt initialization and present several options:
IP address of the router , IP address of the boot server, boot from network, MAC address, etc. If the login prompt does
not appear, see the first section of the troubleshooting appendix for help. Next, log in. The preset super-user user ID
is “super” and the corresponding preset password is “surt”. The password should be changed as soon as possible, as
described in chapter 10 of the installation manual and at the end of every example in chapter 4. The login prompts and
main menu are shown in Figure 3.1.
All menus have the following elements:
• Title – In the example in Figure 3.1: “Main Menu”.
• Prompt – The text: “Select Option ==>”.
• Options –The menu options, which are selected by number.
• Router Name – The default is the name of the product. Each router can be renamed by the super user for
easier identification.
Menus can also be navigated using a short-cut method. This method must be activated first by choosing a
shortcut character (“+” in the example that follows) in the CONFIG =>SYSTEM =>ROUTER DESCRIPTION
menu. Typing 4+1+1 at the main-menu prompt, for example, is equivalent to choosing option 4 in the main
menu (Debug), then choosing option 1 in the debug menu (Trace), then choosing option 1 in the trace menu
(Driver Trace). In addition to menus, some screens have questions with letter choices. In the line below, several
elements may be identified:
lmi-type((A)NSI, (G)roup of four, (N)one )[A]:
• Parameter description – The name of the parameter to be configured, in this case “lmi-type”.
• Options – Legal choices. The letter in parentheses is the letter that selects the corresponding option.
• Current value – The option in square brackets is the current value.
Pressing <Enter> without typing a new value leaves the item unchanged.
Chapter 3 - Using CyROS Menus20
Cyclades-PR1000
Special Keys
<Enter>
<ESC>
<Backspace>
L
or
or
<Ctrl+I>
<Ctrl+M>
or
<Ctrl+H
These keys are used to end the input of a value.
These keys are used to cancel a selection or return to the previous menu. In
some isolated cases, this key forwards you to the next menu in a series of
menus at the same level.
>
These keys have the expected effect of erasing previously typed characters.
When availabl e, this option displa ys the curre nt configuration. For example, i n
the Ethernet Interface Menu, “L” displays the Ethernet configurations.
On leaving a menu where a change in configuration was made, CyROS will ask whether or not the change is to
be saved:
(D)iscard, save to (F)lash, or save to (R)un configuration:
Selecting
Discard
will undo all changes made since the last time the question was asked. Saving to
Flash
memory makes all changes permanent. The changes are immediately effective and are saved to the
configuration vector in flash memory. In this case, the configuration is maintained even after a router reboot.
Saving only to the
Run
configuration makes all changes effective immediately, but nothing is saved permanently
until explicitly saved to flash (which can be done with the option ADMIN =>WRITE CONFIGURATION=>TO
FLASH).
The menus and parameter lists are represented in this manual by tables. The first column contains the menu
item or the parameter, and the second column contains its description.
This menu interface is also available via Telnet if one of the interfaces has been connected and configured. The
menu interface is the same as that described earlier in this section. Using Telnet instead of a console for the
initial Ethernet configuration is discussed in Appendix C of the Installation Manual.
Chapter 3 - Using CyROS Menus21
Cyclades-PR1000
The CyROS Management Utility
After one of the interfaces has been connected and configured, there is another way to interact with CyROS. Type the
IP address in the location field in an HTML browser of a PC connected locally or remotely through the configured
interface. A super-user ID and password will be requested (these are the same ID and password used with the lineterminal interface). A clickable image of the router back panel will apear, as shown in Figure 3.2.
Cyros Management Utility
Firmware version: Cyclades-PR1000: CyROS V_1.9.5
On/Off
0
1
Configuration Menu Interface (Text Mode)
End HTTP session
WAN
Ethernet
Console
FIGURE 3.2 CYROS MANAGEMENT UTILITY HOME PAGE
Chapter 3 - Using CyROS Menus22
Cyclades-PR1000
The link
Configuration Menu Interface
will present an HTML version of the CyROS Main Menu, described
previously. Clicking on an interface will show its current status and some additional information. Clicking on
HTTP Session
will terminate the connection.
End
Chapter 3 - Using CyROS Menus23
Cyclades-PR1000
CHAPTER 4 STEP-BY-STEP INSTRUCTIONS FOR COMMON APPLICATIONS
This chapter provides detailed examples that can be used as models for similar applications. Turn to the example
that is closest to your application, read the explanations, and fill in the blank spaces with parameters appropriate
to your system. At the end of the section, you should have listed all the parameters needed to configure the
router . At that point, read chapter 3 if you have not already , and configure your router with help from later chapters
of the Installation Manual, when needed.
Example 1 Connection to an Internet Access Provider via Modem
This section will guide you through a complete router installation for the connection of a LAN to an Internet access
provider via PPP. The configuration of NAT (Network Address Translation) will also be shown. Figure 4.1 shows
the example system used in this section. Note that this example assumes that the IP address to which the
network IP addresses will be translated is assigned dynamically by the Internet Service Provider . For configuration
of a known IP address, see the chapter on NAT configuration in the complete Installation Manual. Spaces have
been provided next to the parameters needed for the configuration where you can fill in the parameters for your
system. Do this now before continuing.
RS-232 Modem
Network IP:
192.168.0.0
Network Mask:
255.255.255.0
________
Speed: 38.4k
_______
_______
SWAN
PR1000
ETH0
Host
PC
Host
192.168.0.30
_______
192.168.0.11
192.168.0.10 _______
192.168.0.1_______
FIGURE 4.1 CONNECTION TO ACCESS PROVIDER USING A SWAN INTERFACE AND A MODEM
24Chapter 4 - Step-by-Step Instructions
Cyclades-PR1000
Please read the entire example and follow the instructions before turning the router on. The router is
programmed to log the super user off after 10 minutes of inactivity. All data not explicitly saved to
memory is then lost. Collecting the data
while
configuring the router will likely cause delays and
frustration.
STEP ONE
The first step is to determine the parameters needed to configure the Ethernet interface (ETH0). The parameters
in the Network Protocol Menu (IP) are shown in Figure 4.2. Fill in the blanks for your application in the right-most
column. These parameters will be entered into the router later, after all parameters have been chosen. Each
parameter in this menu is explained in more detail in chapter 5 of the Installation Manual.
Menu
CONFIG=>INTERFACE=>ETHERNET=>NETWORK PROTOCOL=>IP
ParameterExampleYour Application
Active or InactiveActive enables IP communication (IPX
and Transparent Bridge are not used in
this example).
Interface Numbered
Numbered
/Unnumbered
Primary IP Address192.168.0.1
Subnet Mask255.255.255.0
Secondary IP
0.0.0.0 for none.
Address
IP MTUUse the preset value, 1500. This
determines whether or not a given IP
datagram is fragmented.
this table continued
FIGURE 4.2 ETHERNET NETWORK PROTOCOL MENU PARAMETERS
25Chapter 4 - Step-by-Step Instructions
Cyclades-PR1000
ParameterExampleYour Application
IP fragmentation -
Yes
Ignore Bit DF
NATLocal
ICMP PortInactive
Incoming Rule ListNone, filters are not included in this
example.
Outgoing Rule List
Name
None, filters are not included in this
example.
Proxy ARPInactive
IP BridgeInactive
FIGURE 4.2 ETHERNET NETWORK PROTOCOL MENU PARAMETERS (CONTINUED)
STEP TWO
No more parameters are necessary for the Ethernet interface. The other interface to be configured is the SWAN.
The SWAN physical media parameters are shown in Figure 4.3. Fill in the values for your application. The SW AN
configuration is described in more detail in chapter 6 of the Installation Manual.
Menu
CONFIG=>INTERFACE=>SWAN=>PHYSICAL
ParameterExampleYour Application
ModeAsynchronous
Speed38.4k
FIGURE 4.3 SWAN PHYSICAL MENU PARAMETERS
26Chapter 4 - Step-by-Step Instructions
Cyclades-PR1000
STEP THREE
The network protocol parameters, shown in Figure 4.4, are similar to those for the Ethernet interface. Fill in the
parameters for your network in the right-most column.
Menu
CONFIG=>INTERFACE=>SWAN=>NETWORK PROTOCOL=>IP
ParameterExampleYour Application
Active or InactiveActive enables IP communication (IPX and
Transparent Bridge are not used in this
example).
Interface Unnumbered/
Numbered
Numbered
Primary IP Address0.0.0.0 (This number will be assigned by the
Access Provider dynamically.)
Subnet Mask255.0.0.0
Secondary IP Address0.0.0.0 for none
IP MTUUse the preset value, 1500. This determines
whether or not a given IP datagram is
fragmented.
NAT
Global Assigned
because the IP address of
the SWAN interface will be assigned
dynamically.
Enable Dynamic Local IP
Address
Yes, because the IP address of the SWAN
interface will be assigned dynamically.
Remote IP Address TypeAny
Remote IP Address0.0.0.0
ICMP PortInactive
Incoming Rule List NameNone, filters are not included in this example.
Outgoing Rule List NameNone, filters are not included in this example.
Routing of Broadcast
Inactive
Messages
FIGURE 4.4 SWAN NETWORK PROTOCOL (IP) MENU PARAMETERS
27Chapter 4 - Step-by-Step Instructions
Cyclades-PR1000
STEP FOUR
The Encapsulation parameters for PPP are less straight-forward. Many of them are based on decisions that
cannot be shown in a diagram. Fortunately, the choices made here will mostly affect the performance of the link,
rather than whether it works or not. Fill in the parameters appropriate for your system, consulting chapter 8 of the
Installation Manual for more information if necessary.
Menu
CONFIG=>INTERFACE=>SWAN=>ENCAPSULATION=>PPP
ParameterExampleYour Application
MLPPP
PPP Inactivity
Timeout
Enable Van Jacobson
No
None
so that the connection is never
broken.
No
IP Header
Compression
Disable LCP Echo
No
Requests
Edit ACCMNo Value. This will depend on the
modem used.
Time Interval to Sen d
Use the preset value, one.
Config Requests
Enable Predictor
No
Compression
Connection TypeDial-Out
FIGURE 4.5 PPP ENCAPSULATION MENU PARAMETERS
28Chapter 4 - Step-by-Step Instructions
Cyclades-PR1000
STEP FIVE
Since a modem is used in the example, the dial-out table must be configured. This is done as shown in Figure 4.6.
Menu
CONFIG=>SYSTEM=>MODEMS=>DIAL OUT TABLE=>ADD
ParameterExampleYour Application
IP AddressType in any valid IP address not on
the local network.
Init Stringat
Dial Stringatdt+phone number of access
provider.
Authentication MethodPAP/CHAP/BOTH—depends on the
service provider.
Login NameLogin name device receiving call is
expecting.
PasswordPassword device receiving call is
expecting.
FIGURE 4.6 MODEM DIAL-OUT TABLE PARAMETERS
29Chapter 4 - Step-by-Step Instructions
Cyclades-PR1000
STEP SIX
T wo static routes must be added to tell the router that all traffic not intended for the local LAN should be sent to the
Access Provider . Chapter 9 of the Installation Manual explains static routes and other routing methods available
in CyROS. Fill in the spaces in Figures 4.7 and 4.8 with the values for your application.
Menu
CONFIG=>STATIC ROUTES=>IP=>ADD ROUTE
ParameterExampleYour Application
Destination IP AddressThis IP address must match
address
given in figure 4.6
the IP
(CONFIG=>SYSTEM=>MODEMS=>
DIAL OUT TABLE=>ADD=>IP
ADDRESS)
Subnet MaskThe subnet mask for
IP Address
.
the Destination
255.255.255.255
Gateway or InterfaceInterface
InterfaceSWAN
Is This a Backup Route?No
OSPF Advertises This
No
Static Route
FIGURE 4.7 STATIC ROUTE MENU PARAMETERS FOR INTERFACE ROUTE
30Chapter 4 - Step-by-Step Instructions
Loading...
+ 94 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.