photocopying, recording, taping or storage in an information retrieval system – without prior written permission of the
copyright owner.
The trademarks, logos and servi ce marks (“M arks”) displ ayed he rein are the pro perty of Fou ndry or othe r third p arties.
You are not permitted to use these Marks without the prior written consent of Foundry or such appropriate third party.
Foundry Networks, BigIron, FastIron, IronView, JetCore, NetIron, ServerIron, TurboIron, IronWare, EdgeIron,
IronPoint, AccessIron, the Iron family of marks and the Foundry Logo are trademarks or registered trademarks of
Foundry Networks, Inc. in the United States and other countries.
F-Secure is a trademark of F-Se cure Corporat ion. All other trademar ks mentio ned in this doc ument are the property of
ISTOF FEATURES .....................................................................................................................................1-2
OWTO GET HELP ........................................................... ....... ...... ...... ....... ....................................... .........1-5
This guide describes how to install and configure a rack-mounted AR1208-T, AR1208-E, AR1216-T, AR1216-E,
AR3201-T-CL, AR3202-T-CL, AR3201-T-CH, and AR3202-T-CH router.
Audience
This manual is desi gned f or system ad ministrat ors with a working kn owledg e of Layer 2 and Layer 3 switchin g and
routing.
If you are using a Foundry Layer 3 Switch, you should be familiar with the following protocols if applicable to your
network – IP, RIP, OSPF, BGP4, IGMP, PIM, and VRRP.
Nomenclature
This guide uses the following typographical conventions to show information:
Italichighlights the title of another publication and occasionally emphasizes a word or phrase.
Boldhighlights a CLI command.
Bold Italichighlights a term that is being defined.
Underline
Capitalshighlights field names and buttons that appear in the Web management interface.
NOTE: A note emphasizes an important fact or calls your attention to a dependency.
WARNING: A warning calls your attention to a possible hazard that can cause injury or death.
CAUTION:A caution calls your attention to a possible hazard that can damage equipment.
highlights a link on the Web management interface.
MLPPP Bundle Thresholding
LAN Interface Load Sharing with Failover
Stateful Packet Inspection Firewall with:
Layer-3 mode (router and NAT)
Policy-based NAT/PAT
Policy-based filters
URL and application content filtering
Time and rate limiting
Denial of Service protection
Network attack detection
Application Level Gateway support
Packet-level logging and syslog support
Table 1.1: Feature Supported in AccessIron Devices (Continued)
Getting Started
CategoryFeatureAR1202
AR1204
AR1208
AR1216
Timed Access List
AR3201-T-CL
AR3202-T-CL
AR3201-T-CH
AR3202-T-CH
How to Get Help
Foundry Networks technical support will ensure that the fast and easy access that you have come to expect from
your Foundry Networks products will be maintained.
Web Access
•http://www.foundrynetworks.com
Email Access
Technical requests can also be sent to the following email address:
•support@foundrynet.com
Telephone Access
•1.877.TURBOCALL (887.2622) United States
•1.408.586.1881Outside the United States
Warranty Cove rage
Contact Foundry Networks using a ny of the methods listed above for informati on about t he sta ndard and extended
warranties.
These systems a re des igned to be ins tal led in a 19 - or 2 3-inch (48.26 or 58.42 cm) rac k or on a flat, sta ble s urface
with sufficient space to accommodate a 12- x 19-inch (30.48 x 48.26 cm) footprint. The installation site should
provide ample room for connecting cables and performing maintenance, and the site should not be subject to
extreme te mperature shifts. The Foundry system sh ould be located in close proximity to all relevant
telecommunication ports and power supplies.
Ports and Connections
The following diagrams and sections id entify mod els and provide in formation about connectin g AC and DC power,
network cables, and alarm and ground wires.
The AR3202-T-CL, and AR3202-T-CH have a dial-out port on the back panel that is used to notify the network
administrator or other designated person about captured system traps. Notification procedures can be set up to
meet the needs of the customer via pager or phone message.
Console Cable
Connect the:
•DB-9 modular adapters to the supplied RJ-45 cable
•Male DB-9 modular adapter to the console port
•Female DB-9 modular adapter to a terminal or PC
Terminal or
Workstation
Female Ada pter
Console Cable
Foundry System Port
Male Adapter
Ethernet, E1, T1, CT3, Clear Channel DS3, and USSI
Connect the:
•RJ-45 connector of an Ethernet ca ble to the Ethernet 0 or 1 port
•RJ-48C connectors of the T1 cables to the T1/E1 ports (AR1208)
Connect the stripped ends of two 18-22 AWG wires to alarm terminals 6 and 7 on the back-panel terminal block.
AC Recep tacle
5 - 7 in-lbs
0.57 - 0.79 N-m
TORQUE
FUSE: T3A, 250V SLOW BLOW
SEE PRODUCT MANUAL
FOR CENTRALIZED DC POWER, INSTALL ONLY IN RESTRICTED ACCESS AREAS
1234567
40 - 60V , 3.0A
100-240V , 2.5A, 50-60Hz
1 - 48B RTN
2 - 48B
3 - 48A RTN
4 - 48A
5 -
6 - ALARM CONTACT
7 - ALARM COMMON
AUX. PORT
CAUTION: TO PROTECT AGAINST
RISK OF ELECTRICAL SHOCK,
DISCONNECT BOTH AC POWER CORD
AND DC WIRING BEFORE SERVICING.
CAUTION: TO PROTECT
AGAINST RISK OF FIRE,
REPLACE WITH THE SAME TYPE
AND RATING OF FUSE ONLY.
ESD
GND
SUMMARY
POWER
Alarm Termina ls
Power
Foundry systems opera te on AC, singl e DC, and dual DC pow er . For AC power operatio n, connect th e female end
of the supplied AC power co rd to t he AC po wer re cept acl e on t he sy stem back p anel. Conn ect th e mal e end of the
AC cord to a standard 110/120 VAC source. Refer to the figure above. Refer to the Installation Guide: Domestic Products for information about dual AC power connection.
To operate with single-source DC power, connect the stripped ends of two 18-AWG wires to either the A or B
terminals on the terminal block. Make sure to connect the +48V lead to the appropriate RTN connector.
CAUTION:To avoid equipment damage, make sure that the +48V lead is connected to the appropriate RTN
connector (either 1 or 3) on the terminal block.
To operate with dual-source DC power, connect the stripped ends of four 18-AWG wires to the both the A and B
terminals on the terminal block. Make sure to connect the +48V leads to the appropriate RTN connectors.
Management Interface
To access the command line interface (CLI) via the front-panel console port, connect a terminal or a workstation
running a terminal emulation software to the Foundry system. The software should be configured as follows:
•9600 bps
•8 data bits
•1 stop bit
•No parity
•XON/XOFF flow control
To remotely access the system, configure the modem data port as specified above for terminal emulation
software. It is also possible to telnet to the Foundry system once an IP address is assigned to an Ethernet port.
Initial Configuration
Use the following command s to log in as the sy stem admini strator, choose a host name , change t he p assword, s et
the system time, and enter an Ethernet IP address.
Passwords are case-sensitive and must be a minimum of three to a maximum of eight characters. Make a note of
the password that you use.
Setting the System Date and Time
EXAMPLE:AR1208# configure term
EXAMPLE:AR1208/configure# date - 0 0 mo 3 d 19 y 2000 h 14 mi 40 s 35
The first portion of this command, date - 0 0, establishes offset from GMT. The minus sign inputs offset direction,
and the two numb ers i nput o f fset hours and minu tes. T he se cond po rtion o f this com mand , mo 3 d 19 y 2000 h 14
mi 40 s 35, inputs the local month, day, year, hour, minute, and second.
Entering an Ethernet IP Address and Subnet Mask
EXAMPLE:AR1208# configure term
EXAMPLE:AR1208/configure# interface ethernet 0
EXAMPLE:AR1208/configure/interface/ethernet 0# ip address 10.1.100.28 255.255.255.0
Interface Configuration
The following are examples of T1, CT3, and DS3 interface configurations. To scroll through the options available
at any command prompt, press the Tab key. For descriptions of the options available at any command prompt,
type help and press Enter.
Foundry systems support PPP, MLPPP, FR, MFR, and Cisco-compatible HDLC for WAN data transmission.
NOTE: Bundle names cannot exceed eight characters.
The following are examples of bundles configured for T1/E1, fractional T1/E1, and NxT1/NxE1 transmission.
EXAMPLE:AR1208-E# configure term
EXAMPLE:AR1208-E/configure# interface bundle London
EXAMPLE:AR1208-E/configure/interface/bundle London# link e1 3:1-6
EXAMPLE:AR1208-E/configure/interface/bundle London# encapsulation hdlc
EXAMPLE:AR1208-E/configure/interface/bundle London# hdlc keepalive 20
EXAMPLE:AR1208-E/configure/interface/bundle London# ip address 192.168.2.1 255.255.255.0
EXAMPLE:AR1208-E/configure/interface/bundle London# exit 3
Saving Configurations
Use the following command to save new configurations to system memory.
EXAMPLE:AR1208# write mem
Use the following command to save new configurations to a network host for archiving and back-up purposes.
Identify the host name or IP address, the host directory the file is being transferred to, and the new name as
follows.
EXAMPLE:AR1208# save network 10.1.100.149 /maindir/config01.txt
When saving to a network host, the host directory and file name must pre-exist.
The Foundry system front-panel LEDs indicate real-time unit status. The following table provides information
about how to interpret the various LED states. For more detailed LED descriptions, refer to the Foundry
Installation Guide: Domestic Products.
LED StateDescription
OffIndicates an absence of power, a deselected function, or an out-
of-service link
GreenIndicates either an engaged or a properly functioning feature
YellowIndicates an out-of-service test or a failed DC converter (Power
LED)
Green or yellow with
blinking red
RedIndicates either an error, an alarm, or a loss of signal
Same as above co nditions for green a nd yellow, but on e or more
of the following errors have been detected on a T1 port: