Funkwerk bintec R1200, bintec R1200w(u), bintec R3000w, bintec R3400, bintec R3000 User Manual

...
bintec R1200 / R1200w(u) / R3000 / R3000w / R3400 / R3800(wu)
User's Guide
WAN Partner
Copyright © December 12, 2006 Funkwerk Enterprise Communications GmbH
Version 2.9
ning software release 7.4.10 or later. For up-to-the-minute information and instructions concerning the latest software release, you should always read our Release Notes, especially when carrying out a software update to a later release level. The latest Release Notes can be found at www.funkwerk-
ec.com.
Liability While every effort has been made to ensure the accuracy of all information in this manual, Funkwerk
Enterprise Communications GmbH cannot assume liability to any party for any loss or damage caused by errors or omissions or by statements of any kind in this document and is only liable within the scope of its terms of sale and delivery.
The information in this manual is subject to change without notice. Additional information, changes and Release Notes for bintec gateways can be found at www.funkwerk-ec.com.
As multiprotocol gateways, bintec gateways set up WAN connections in accordance with the system configuration. To prevent unintentional charges accumulating, the operation of the product should be carefully monitored. Funkwerk Enterprise Communications GmbH accepts no liability for loss of data, unintentional connection costs and damages resulting from unsupervised operation of the product.
Trademarks bintec and the bintec logo are registered trademarks of Funkwerk Enterprise Communications GmbH.
Other product names and trademarks mentioned are usually the property of the respective companies and manufacturers.
Copyright All rights are reserved. No part of this publication may be reproduced or transmitted in any form or by
any means – graphic, electronic, or mechanical – including photocopying, recording in any medium, taping, or storage in information retrieval systems, without the prior written permission of Funkwerk En­terprise Communications GmbH. Adaptation and especially translation of the document is inadmissible without the prior consent of Funkwerk Enterprise Communications GmbH.
Guidelines and standards bintec gateways comply with the following guidelines and standards:
R&TTE Directive 1999/5/EG
CE marking for all EU countries and Switzerland
You will find detailed information in the Declarations of Conformity at www.funkwerk-ec.com.
How to reach Funkwerk
Enterprise Communications
GmbH
Funkwerk Enterprise Communications GmbH Suedwestpark 94 D-90449 Nuremberg Germany
Telephone: +49 180 300 9191 0 Fax: +49 180 300 9193 0 Internet: www.funkwerk-ec.com
Bintec France 6/8 Avenue de la Grande Lande F-33174 Gradignan France
Telephone: +33 5 57 35 63 00 Fax: +33 5 56 89 14 05 Internet: www.bintec.fr
1 WAN Partner Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
2 Submenu PPP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
3 Submenu Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
3.1 Submenu Extended Interface Settings (optional) . . . . . . . . . . . . . . . . . . . 23
4 Submenu WAN Numbers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
4.1 Submenu Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
5 Submenu IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
5.1 Submenu Basic IP-Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
5.2 Submenu More Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
5.3 Submenu Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
6 Submenu Bridge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Index: WAN Partner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
WAN Partner bintec User’s Guide
1
2
bintec User’s Guide WAN Partner
WAN Partner Menu
1 WAN Partner Menu
The fields of the WAN PARTNER menu are described below.
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN]: WAN Partners MyGateway
Current WAN Partner Configuration
Partnername Protocol State branch ppp dormant
ADD DELETE EXIT
1
To enable your gateway to set up connections to networks or hosts outside your LAN, you must configure the partners you want to connect to as so-called WAN partners on your gateway. This applies to outgoing connections (e.g. your gate way dials its WAN partner), as well as incoming connections (e.g. a WAN part­ner dials the number of your gateway) and leased lines.
If you want to access the Internet, you must set up your Internet Service Provid­er (➤➤ ISP) as a WAN partner. If you want to connect your LAN to a remote LAN, e.g. your LAN (head office) and the LAN of a branch office (corporate net­work connection), you must configure the remote LAN as a WAN partner.
If you have configured a leased line during configuration of your gateway’s ISDN S0 interface, a WAN partner is already configured automatically in the WAN PARTNER menu. Edit this entry to suit your requirements.
All the WAN partners entered are displayed in a list that contains the partner name ( state of each (
ENCAPSULATION, see table “Possible values for State field,” on page 4.
PARTNERNAME), the encapsulation used (PROTOCOL) and the current
STATE). PROTOCOL can have the possible values of
-
WAN Partner bintec User’s Guide
3
1
WAN Partner Menu
The STATE field can have the following values:
Description Meaning
up connected
dormant not connected (dialup connection); dial-up pos-
sible
blocked not connected (e.g. an error occurred on setting
up an outgoing connection, a renewed attempt is only possible after a specified number of sec onds)
down administratively set to down (deactivated); dial-
up impossible
for leased lines: not connected
-
Table 1-1: Possible values for STATE field
The WAN partner configuration is made in the WAN PARTNER ADD/EDIT menu:
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][ADD]: Configure WAN Partner MyGateway
Partner Name
Encapsulation PPP Encryption none Compression none Calling Line Identification no
PPP > Advanced Settings > WAN Numbers >
IP > Bridge >
SAVE CANCEL
4
bintec User’s Guide WAN Partner
WAN Partner Menu
The WAN PARTNER ADD/EDIT menu consists of the following fields:
Field Description
Partner Name Enter a name for uniquely identifying the WAN
partner.
In this field the first character must not be a number. Don’t use special characters or umlauts. The entry can have max. 25 charac ters.
Encapsulation ➤➤ Encapsulation. Defines how the
➤➤ data packets are packed for transfer to
the WAN partner. Possible values:
PPP (default value)
1
-
Multi-Protocol LAPB Framing
Multi-Protocol HDLC Framing
Async PPP over X.75
Async PPP over X.75/T.70/BTX
Async PPP over V.120 (HSCSD)
X.25_PPP
X.25
HDLC Framing (IP only)
LAPB Framing (IP only)
X31 B-Channel
X.25 No Signaling
X.25 PAD
X.25 No Configuration
Frame Relay
WAN Partner bintec User’s Guide
5
1
WAN Partner Menu
Field Description
Encapsulation (cont.) X.25 No Configuration, No Signaling
As not all bintec devices support all protocols, please check prior to configuration the avail­ablity of the respective protocol according to the data sheet at www.funkwerk-ec.com.
Encryption Defines the type of encryption that should be
used for data traffic to the WAN partner. Only possible if STAC resp. MS-STAC compression is not activated for the connection. Possible val ues: see table “Encryption selection options,”
on page 8.
If ENCRYPTION is set, this function must also be activated at the remote gateway, otherwise the connection cannot be established.
-
Compression Defines the type of compression that should be
used for data traffic to the WAN partner and is only active when supported by the remote gate way. Possible values:
STAC, MS-STAC, MPPC: These values are
only available if ENCAPSULATION has been set to PPP, Async PPP over X.75, Async
PPP over X.75/T.70/BTX, Async PPP over V.120 (HSCSD) or X.25_PPP.
V.42bis: For E
(only IP) and Multi-Protocol LAPB Framing only V.42bis compression is available.
NCAPSULATION LAPB Framing
-
6
bintec User’s Guide WAN Partner
Field Description
Compression (cont.) none (default value)
A combination of encryption and compression is only possible with (any) MPPE encryption and MPPC.
When ENCAPSULATION = Multi-Protocol HDLC
Framing, X.25, HDLC Framing (only IP), X31 BChannel, X.25 No Signalling, X.25 PAD, X.25 No Configuration, Frame Relay Configuration, No Signalling
played.
(As not all bintec devices support all protocols and algorithms, please check prior to configura­tion the availablity of the respective protocol according to the data sheet at www.funkwerk-
ec.com.)
WAN Partner Menu
and X.25 No
this field is not dis-
1
Calling Line Identification Indicates whether calls from this WAN partner
are identified by means of the calling party number (➤➤ CLID). The value of this field depends on DIRECTION in the WAN NUMBERS
submenu and cannot be set here.
Table 1-2: WAN PARTNER menu fields
ENCRYPTION offers the following selection options:
Description Meaning
none (default value) No encryption
MPPE 40 MPPE version 1 and 2 with 40-bit key
MPPE V2 40 MPPE version 2 with 40-bit key
MPPE V2 40 (RFC 3078) MPPE version 2 with 40-bit key as per RFC
3078: required for MS clients as of Windows 2000 (MS service packs may be necessary, too)
WAN Partner bintec User’s Guide
7
1
WAN Partner Menu
Description Meaning
MPPE V1 40 only Only MPPE version 1 with 40-bit key
MPPE 56 MPPE version 1 and 2 with 56-bit key
MPPE V2 56 MPPE version 2 with 56-bit key
MPPE V2 56 (RFC 3078) MPPE version 2 with 56-bit key as per RFC
3078: required for MS clients as of Windows 2000 (MS service packs may be necessary, too)
MPPE V1 56 only Only MPPE version 1 with 56-bit key
DES 56 DES with 56-bit key
Blowfish 56 Blowfish with 56-bit key
MPPE 128 MPPE version 1 and 2 with 128-bit key
MPPE V2 128 MPPE version 2 with 128-bit key
MPPE V2 128 (RFC
3078)
MPPE V1 128 only Only MPPE version 1 with 128-bit key
MPPE V1 128 (MS com­patible mode)
MPPE V2 128 (MS com­patible mode)
DES3 168 Triple DES with 168-bit key
Blowfish 168 Blowfish with 168-bit key
Table 1-3: ENCRYPTION selection options
These values are only available if ENCAPSULATION has been set to PPP, Async
over X.75, Async PPP over X.75/T.70/BTX, Async PPP over V.120
PPP (HSCSD)
or X.25_PPP. (As not all bintec devices support all protocols, please
MPPE version 2 with 128-bit key as per RFC 3078: required for MS clients as of Windows 2000 (MS service packs may be necessary, too)
MS compatible MPPE version 1 mode with 128-bit for MS-CHAP V1 (non-conform to RFC
3079)
MS compatible MPPE version 2 mode with 128-bit for MS-CHAP V1 (non-conform to RFC
3079)
8
bintec User’s Guide WAN Partner
WAN Partner Menu
check prior to configuration the availablity of the respective protocol according to the data sheet at www.funkwerk-ec.com.)
For all other possible values for ENCAPSULATION the field ENCRYPTION is not dis­played.
1
WAN Partner bintec User’s Guide
9
1
WAN Partner Menu
10
bintec User’s Guide WAN Partner
Submenu PPP
2 Submenu PPP
The PPP submenu is described below.
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][EDIT][PPP]: PPP Settings (branch) MyGateway
Authentication CHAP + PAP Partner PPP ID Local PPP ID r3000w PPP Password
Keepalives off Link Quality Monitoring off
OK CANCEL
2
The WAN PARTNER PPP menu contains specific ➤➤ PPP settings, e.g. AUTHENTICATION, that only refer to the WAN partner to be configured.
The variable AUTHENTICATION is only applied for outgoing calls and incoming calls that are identified via CLID.
For incoming calls without CLID the variable AUTHENTICATION from the PPP main menu is applied.
The PPP menu consists of the following fields:
Field Description
Authentication Authentication protocol. Possible values: see
table “Selection options in Authentication field,” on page 13.
Partner PPP ID ID of WAN partner.
Local PPP ID ID of your gateway.
The set value of LOCAL PPP ID in the SYSTEM menu is default value.
PPP Password Password.
WAN Partner bintec User’s Guide
11
2
Submenu PPP
Field Description
Keepalives Activates the function PPP-Keepalive for
checking the reachability of the remote PPP terminal. Possible values:
off (default value for dialup connection) -
deactivates keepalive.
on (default value for leased line) - activates
keepalive.
For the function PPP-Keepalive every three seconds a packet is sent to the remote termi nal. If the packet is unanswered five times, nor­mally the interface is set to down for leased line connections and tions.
dormant for dialup connec-
-
Link Quality Monitoring Activates PPP Link Quality Monitoring as per
RFC 1989. Possible values:
off (default value)
on
Only necessary in exceptional cases, e.g. with Nokia Communicator.
Table 2-1: PPP submenu fields
The AUTHENTICATION field contains the following selection options:
Description Meaning
PAP
CHAP
Only run ➤➤ PAP (PPP Password Authentica­tion Protocol); the password is transferred uncoded.
Only run ➤➤ CHAP (PPP Challenge Hand­shake Authentication Protocol as per RFC
1994); the password is transferred encoded.
12
bintec User’s Guide WAN Partner
Description Meaning
Submenu PPP
2
CHAP + PAP
(default value)
MS-CHAP Only run MS-CHAP version 1 (PPP-Microsoft
CHAP + PAP + MS­CHAP
MS-CHAP V2 Run MS-CHAP version 2 only.
none Run no PPP authentication protocol.
Table 2-2: Selection options in AUTHENTICATION field
Run primarily CHAP, otherwise PAP.
Challenge Handshake Authentication Protocol).
Run primarily CHAP, on denial the authentica­tion protocol required by the WAN partner. (MS-CHAP version 1 or 2 possible.)
WAN Partner bintec User’s Guide
13
2
Submenu PPP
14
bintec User’s Guide WAN Partner
Submenu Advanced Settings
3 Submenu Advanced Settings
The fields of the ADVANCED SETTINGS submenu are described below.
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][EDIT][ADVANCED]: Advanced Settings (branch) MyGateway
Callback no Static Short Hold (sec) 20 Idle for Dynamic Short Hold (%) 0 Delay after Connection Failure (sec) 300 Layer 1 Protocol ISDN 64 kbps
Channel Bundling no
Extended Interface Settings (optional) >
3
Special Interface Types none
OK CANCEL
Specific functions for ➤➤ WAN partners make it possible to define the char­acteristics for connections to WAN partners individually and are configured in
WAN PARTNER ADVANCED SETTINGS menu.
the
Callback The callback mechanism can be used for each WAN partner to obtain additional
security regarding the connection partner or to clearly allocate the costs of con­nections. A connection is not set up until the calling party has been clearly iden­tified by calling back. The gateway can answer an incoming call with a callback or wait for a callback of a WAN partner.
Identification can be based on the calling party number or PAP/CHAP/MS­CHAP authentication. Identification is made in the first case without call accep tance, as the calling party number is transferred over the ISDN D-channel, and in the second case with call acceptance.
Defining short hold ➤➤ Short hold is defined to clear an unused connection automatically, i.e.
when no more user data is sent, and thus save charges. The short hold setting can be either static or dynamic and tells the gateway the duration of the idle time, after which it is to clear down the connection.
-
WAN Partner bintec User’s Guide
15
3
Submenu Advanced Settings
Static
The static short hold setting determines how much time should pass between sending the last fixed period of time in seconds.
Dynamic (only with ISDN)
With the dynamic short hold setting, no fixed period of time is specified and the length of an ISDN charging unit is considered instead. Dynamic short hold is based on AOCD (advice of charge during the call), which depends on time, weekend/weekday.
When setting dynamic short hold, you specify how much percent of an interval of charge may be reached after the last user data has been sent before the con­nection is cleared. If you enter 50 %, for example, the IDLE FOR DYNAMIC SHORT
H 300 seconds if the preceding charging unit was 600 seconds. Only use IDLE FOR D
➤➤ user data packet and clearing the connection. Enter a
OLD equals 60 seconds if the preceding charging unit was 120 seconds, and
YNAMIC SHORT HOLD in conjunction with STATIC SHORT HOLD for safety reasons.
Delay after
connection failure
This function enables you to set the period of time the gateway is to wait for an attempt to set up an outgoing connection after an unsuccessful attempt to set up a call.
Layer 1 protocol You can define the Layer 1 protocol for outgoing connections to the WAN part-
ner.
Channel bundling The gateway supports dynamic and static ➤➤ channel bundling for dialup
connections. Only one B-channel is initially opened when a connection is estab­lished.
Dynamic
Dynamic channel bundling means that the gateway connects other ➤➤ ISDN B-channels to increase the throughput for connections to the WAN partner, if this is required, e.g. for large data rates. If the amount of data traffic drops, the additional
➤➤ B-channels are closed again.
16
bintec User’s Guide WAN Partner
Submenu Advanced Settings
Static
In static channel bundling, you specify right from the start how many B-channels the gateway uses for connections to the WAN partner, regardless of the amount of data transferred.
The ADVANCED SETTINGS menu consists of the following fields:
Field Description
Callback Activates the callback function. Possible val-
ues: see table “Callback selection options,” on
page 20.
Static Short Hold (sec) Idle time in seconds for static short hold.
Default value is 20.
e.g.
10 for FTP connections 20 for LAN to LAN connections 90 for Internet connections
3
Idle for Dynamic Short Hold (%)
Delay after Connection Failure (sec)
Layer 1 Protocol Defines which Layer 1 Protocol the gateway is
Idle time in percent of the interval of charge for dynamic short hold.
Only activate if charging pulses are transmitted during the connection (AOCD).
Block timer. Indicates the wait time in seconds before the gateway tries again after an attempt to establish a connection has failed.
to use. This setting applies to outgoing connec tions with the WAN partner and to incoming calls from the WAN partner, only if they have been identified from the calling party number. Possible values: see
Layer 1 Protocol,” on page 23.
You only need to make changes here if explic­itly required.
table “Selection options of
-
WAN Partner bintec User’s Guide
17
3
Submenu Advanced Settings
Field Description
GPRS/UMTS Interface Only for LAYER 1 PROTOCOL = GPRS/UMTS.
Defines the slot for the UMTS modem card.
Possible values:
Slot 0 Unix 8 AUX (default value): Defines
slot 0 for use with a modem.
Slot 6 Unit 0 UMTS: Defines slot 6 for use
with an UMTS modem card.
Channel Bundling Defines whether and which type of channel
bundling is to be used for ISDN connections to the WAN partner.
Possible values:
Total Number of Chan­nels
no (default value): No channel bundling,
only one B-channel is ever available for connections.
static: Static channel bundling.
dynamic: Dynamic channel bundling.
The field is not displayed when LAYER 1 P
ROTOCOL = PPP over Ethernet (PPPoE), PPP
over PPTP
For dynamic channel bundling: Defines the maximum number of B-channels that may be opened.
For static channel bundling: Defines the num­ber of B channels that are open throughout the connection.
The default value is 1.
.
18
bintec User’s Guide WAN Partner
Submenu Advanced Settings
Field Description
Special Interface Types This option defines a special application of the
interface.
Possible values:
none (default value): No special type select-
ed.
dialin only: The interface is used for incom-
ing dialup connections and for callback initi­ated from the outside.
Call-by-Call (dialin only): The interface is
defined as multi-user WAN partner, i.e. sev­eral clients dial in with the same user name and password. Only practical if WAN P
BASIC SETTINGS IP TRANSIT NETWORK is
set to dynamic server.
ARTNER IP
3
Table 3-1: ADVANCED SETTINGS menu fields
CALLBACK offers the following selection options:
Description Meaning
no (default value) The gateway does not call back.
expected (awaiting call­back)
The gateway requests the WAN partner to call back.
WAN Partner bintec User’s Guide
19
3
Submenu Advanced Settings
Description Meaning
yes (PPP negotiation) The gateway calls back after a period proposed
by the Microsoft client (NT: 10 seconds, newer versions: 12 seconds) with the number with DIRECTION outgoing or both entered for the WAN partner. If no number is entered, the required number can be reported by the caller in a PPP negotiation. This setting should be avoided if possible for security reasons. How
ever, for connecting mobile Microsoft ➤➤
clients over data transmission networks this is
currently not avoidable.
yes (delayed, CLID only) The gateway calls back after approx. four sec-
onds, if requested to by the WAN partner. Makes only sense with CLID.
-
yes (PPP negotiation, callback optional)
yes The gateway calls back immediately, if
Table 3-2: CALLBACK selection options
Like yes (PPP negotiation) with abort option.
This option should be avoided for safety rea­sons.
The Microsoft client additionally has the option of aborting callback and maintaining the initial connection to the gateway without callback. This is only valid if no fix outgoing number has been configured for the WAN partner. This is done by pressing box that appears.
requested to by the WAN partner.
CANCEL to close the dialog
20
bintec User’s Guide WAN Partner
Submenu Advanced Settings
LAYER 1 PROTOCOL contains the following selection options. As not all bintec de­vices support all protocols, please check prior to configuration the availablity of the respective protocol according to the data sheet at www.funkwerk-ec.com.
Description Meaning
3
ISDN 64 kbps
(default value)
Modem (Only available if expansion card and resource
DOVB 64 kbps
DOVB 56 kbps
V.110 (1200 ... 38400) For GSM connections to V.110 at bit rates of
Modem Profile 1 ... 8 (Only available if expansion card and resource
For 64-kbps ISDN data connections.
card with digital modems are installed)
Assigns incoming analog calls to the PPP rout­ing service. The digital modem on the resource card that accepts this call uses the settings for Modem Profile 1, which were selected in the
MODEM PROFILE CONFIGURATION PROFILE 1
menu.
Data transmission Over Voice Bearer – useful in the USA, for example, where voice connec tions are sometimes cheaper than data connec­tions.
1200
bps, 2400 bps,..., 38400 bps.
card with digital modems are installed)
Assigns incoming analog calls to the PPP rout­ing service. The digital modem on the resource card that accepts this call uses the settings for Modem Profile 1... 8, which were selected in the
MODEM PROFILE CONFIGURATION
PROFILE 1...8 menu.
-
WAN Partner bintec User’s Guide
PPP over Ethernet (PPPoE)
PPP over PPTP For connections to xDSL, e.g. in Austria
For connections to xDSL
21
3
Submenu Advanced Settings
Description Meaning
PPP over L2TP (LNS mode)
Using this option, the WAN Partner is used for accepting L2TP tunnels and terminating the encapsulated PPP data stream.
PPP over L2TP (LAC mode)
Using this option, the WAN Partner is used to encapsulate a PPP data stream into L2TP and create an L2TP tunnel to a remote LNS.
PPP over ATM (PPPoA) Using this option, the WAN Partner is used to
transfer a PPP data flow directly via an ATM network (RFC 2364).
GPRS over GSM If a GPRS-modem is connected to the
AUXILIARY port (presently only Siemens TC35i is available), you can backup your outgoing con nections via GPRS. An Access Point Name (APN) must be configured for that purpose in the modem profile (see menu
AUXILIARY
PROFILE X).
Note: The menu WAN PARTNER WAN N
UMBERS is not displayed for LAYER 1
P
ROTOCOL = GPRS over GSM. No number has
to be configured, for GPRS always sets up a data connection to the APN.
-
22
In WAN PARTNER PPP PARTNER PPP ID and
PPP PASSWORD the GPRS provider’s
access data is to be entered.
bintec User’s Guide WAN Partner
Submenu Advanced Settings
Description Meaning
GPRS/UMTS If an UMTS CardBus modem card is integrated
into the system, you can establish a connection to the Internet via UMTS.
In WAN PARTNER ADD ADVANCED
S
ETTINGS GPRS/UMTS you have to select
Slot 6 Unit 0 UMTS for use with the UMTS modem card.
As not all bintec gateways support a CardBus interface for an UMTS modem card, check the availablility of the respective interface type in the data sheet of your gateway at
www.funkwerk-ec.com.
3
Table 3-3: Selection options of LAYER 1 PROTOCOL
3.1 Submenu Extended Interface Settings (optional)
The fields of the EXTENDED INTERFACE SETTINGS submenu are described be- low.
WAN Partner bintec User’s Guide
23
3
Submenu Advanced Settings
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][EDIT][ADVANCED][EXTIF]: Extended Interface MyGateway Settings (branch)
Optional Extended Interface Settings not configured yet!
Mode Bandwidth On Demand Enabled Line Utilization Weighting equal Line Utilization Sample (sec) 5 Gear Up Threshold 90 Gear Down Threshold 80
Maximum Number of Dialup Channels 1
Encryption Key Negotiation static TX Key RX Key
SAVE CANCEL
The WAN PARTNER ADVANCED SETTINGS EXTENDED INTERFACE SETTINGS submenu displays options for the function Bandwidth in Demand (=BOD), if
CHANNEL BUNDLING is set to dynamic. If BOD is activated in MODE, additional
options are displayed (see screenshot).
Channel-Bundling The Channel-Bundling function can only be applied with ISDN connections or
leased lines in conjunction with ISDN for increasing bandwidth or as backup so­lution.
If the remote terminal uses a device of other makes, verify that dynamic channel bundling resp. BACP/BAP are supported also for leased lines in conjunction with ISDN for increase of bandwidth resp. as backup solution.
Options for
PPPoE connections
To connect different WAN partners with ADVANCED SETTINGS
AYER 1 PROTOCOL = PPP over Ethernet (PPPoE) via different Ethernet interfac-
L
es, you can enter a name for the respective service and the required PPPoE Ethernet Interface in the
EXTENDED INTERFACE SETTINGS menu.
24
bintec User’s Guide WAN Partner
Submenu Advanced Settings
The EXTENDED INTERFACE SETTINGS menu consists of the following fields:
Field Description
Mode Only for WAN PARTNER ADVANCED SETTINGS
C
HANNEL-BUNDLING = dynamic
Defines which mode is used for BOD. Possible values: see
table “Mode selection options,” on
page 33.
Line Utilization Weighting Only for MODE = Bandwidth On Demand
Enabled / BAP, Active Mode / BAP, Passive Mode / BAP, Active and Passive Mode / BAP, Client Active Mode / BAP, Dialup Server Mode
Defines how the line utilization is calculated. The load is calculated every 1 second. Possible values:
3
Line Utilization Sample (sec)
equal (default value): All the measured val-
ues of throughput in LINE UTILIZATION
AMPLE (SEC) are weighted equally for the
S
calculation.
proportional: The last measured values of
throughput are weighted more heavily for the calculation, i.e. in L
AMPLE (SEC) the calculation is most heavily
S
INE UTILIZATION
influenced by the last measured values.
Only for MODE = Bandwidth On Demand
Enabled / BAP, Active Mode / BAP, Passive Mode / BAP, Active and Passive Mode / BAP, Client Active Mode / BAP, Dialup Server Mode
Time interval in seconds. Throughput measure­ments in LINE UTILIZATION SAMPLE (SEC) are included in the calculation of the line utilization (the load is calculated every 1 second). Possi
-
ble values: 5 to 300 (default value: 5).
WAN Partner bintec User’s Guide
25
3
Submenu Advanced Settings
Field Description
Gear Up Threshold Only for MODE = Bandwidth On Demand
Enabled / BAP, Active Mode / BAP, Passive Mode / BAP, Active and Passive Mode / BAP, Client Active Mode / BAP, Dialup Server Mode
Utilization threshold in percent at which another ISDN B-channel is added for a connection.
Gear Down Threshold Only for MODE = Bandwidth On Demand
Enabled / BAP, Active Mode / BAP, Passive Mode / BAP, Active and Passive Mode / BAP, Client Active Mode / BAP, Dialup Server Mode
A B-channel is dropped as soon as the remain­ing connection has a load measured in percent that is lower than the value adjusted in this field.
The default value is 80.
D-Channel Queue Length (Only if LAYER 1 PROTOCOL = AO/DI in the WAN
PARTNER ADVANCED SETTINGS menu)
See data sheet on www.funkwerk-ec.com to check whether your gateway supports AO/DI.
Only for MODE = Bandwidth On Demand
Enabled / BAP, Active Mode / BAP, Passive Mode / BAP, Active and Passive Mode / BAP, Client Active Mode / BAP, Dialup Server Mode
Threshold value for the number of bytes accu­mulated in the buffer of the D-channel at which the system is to change to the B-Channel Mode.
Default value is 7500.
26
bintec User’s Guide WAN Partner
Field Description
Submenu Advanced Settings
3
Maximum Number of Dia­lup Channels
Encryption Key Negotia­tion
Only for MODE = Bandwidth On Demand
Enabled / BAP, Active Mode / BAP, Passive Mode / BAP, Active and Passive Mode / BAP, Client Active Mode / BAP, Dialup Server Mode
Maximum possible number of ISDN B-channels that can be opened for this WAN partner. The value is only displayed here; it is set under
TOTAL NUMBER OF CHANNELS in the WAN PARTNER ADD/EDIT ADVANCED SETTINGS
menu.
Default value is 1.
Defines whether a key for the connection to the WAN partner is generated automatically or defined statically in case an encryption has been activated in Possible values:
authentication (default value): Key is gener-
ated automatically by the gateway.
static: The key is defined statically and
must be entered under ENCRYPTION KEY
(TX) and E
WAN PARTNER ➜ ENCRYPTION.
NCRYPTION KEY (RX).
TX Key (Only for ENCRYPTION KEY NEGOTIATION = static)
Key (in hexadecimal format) for encryption of outgoing data (must be the same as the entry under
ENCRYPTION KEY (RX) at the connection
partner).
RX Key (Only for ENCRYPTION KEY NEGOTIATION = static)
Key (in hexadecimal format) for decryption of incoming data (must be the same as the entry under
ENCRYPTION KEY (TX) at the connection
partner).
WAN Partner bintec User’s Guide
27
3
Submenu Advanced Settings
Table 3-4: EXTENDED INTERFACE SETTINGS submenu fields
MODE offers the following selection options:
Field Description
PPPoE Service Name Only for WAN PARTNER ADD/EDIT
A
DVANCED SETTINGS LAYER 1 PROTOCOL =
PPP over Ethernet (PPPoE)
This function is not supported at present.
PPPoE Ethernet Interface Only for WAN PARTNER ADD/EDIT
A
DVANCED SETTINGS LAYER 1 PROTOCOL =
PPP over Ethernet (PPPoE)
Select the Ethernet interface to be used for PPPoE connections.
Description Meaning
Bandwidth On Demand
Deactivates ➤➤ BOD (default value).
Disabled
Bandwidth On Demand Enabled
(For dialup connections only)
Activates BOD, additional ISDN B-channels can be opened. The connection partner who initiated the connection opens the additional channels.
28
bintec User’s Guide WAN Partner
Description Meaning
Submenu Advanced Settings
3
BAP, Active Mode and
BAP, Passive Mode
BAP=Bandwidth Allocation Protocol
BAP, Active Mode must be set for LAYER 1 P
ROTOCOL = AO/DI (=Always On/Dynamic
ISDN). The function AO/DI depends on the type of device. See data sheet on
ec.com to check whether your gateway sup-
ports it.
The Bandwidth Allocation Protocol (BAP) has three different modes for negotiating a band width change. The two negotiating partners take opposite roles. In this scenario the remote connection partner must always be in the oppo site role or in BAP, Active and Passive Mode. The negotiating partners behave as follows:
Call Request: The partner in Active Mode
wants to add a second B-channel. He sends a Call Request. A partner in Passive Mode accepts the Call Request of the nego­tiating partner if applicable. The partner in Active Mode thus opens the B-channel.
www.funkwerk-
-
-
Callback Request: The partner in Active
Mode requests the partner in Passive Mode to add a second B-channel. He sends a Callback Request. A partner in Passive Mode accepts the Callback Request if ap­plicable and opens the channel.
Link Drop Request: The partner in Active
Mode wants to drop a B-channel. He sends a Link Drop Request. A partner in Passive Mode accepts the Link Drop Request of the negotiating partner if applicable. The part­ner in Active Mode then drops the channel.
WAN Partner bintec User’s Guide
29
3
Submenu Advanced Settings
Description Meaning
BAP, Active and Passive Mode
Choosing this option both negotiating partners can have the active or the passive role. The negotiating partners behave as follows:
Call Request: One of the two partners
wants to add a second B-channel. He sends a Call Request, the partner accepts it. Both negotiating partners can send the Call Reqest as well as accept one.
Callback Request: One of the negotiating
partners requests the other to add a second B-channel. He sends a Callback Request, the partner accepts it and opens the chan­nel. Both partners can send a Callback Re­quest as well as accept one.
Link Drop Request: One partner wants to
drop a B-channel. He sends a Link Drop Request, the partner accepts it. Both part­ners can send a Link Drop Request as well as accept it.
30
Ensure that at the remote gateway, BAP, Client
Active Mode
RFC 2125 is supported and a corresponding mode is activated.
BAP, Client Active Mode BAP behaves as follows in Client Active Mode:
The partner who initiated the call setup is in Active Mode (see partner who accepted the call is in Passive Mode (see
Ensure that at the remote gateway, BAP, Client
Active Mode
RFC 2125 is supported and a corresponding mode is activated.
bintec User’s Guide WAN Partner
or with devices of other makes
BAP, ACTIVE MODE) and the
BAP, PASSIVE MODE).
or with devices of other makes
Description Meaning
Submenu Advanced Settings
3
BAP, Dialup Client Mode
and
BAP Dialup Server Mode
(For dialup connections only)
An ISP can fulfill the channel-bundling function, even if it distributes incoming calls to several gateways: an ISDN number is transmitted to the client who dials in. This number is assigned individually to each gateway on the central side, so that the calls on several channels to this number are always terminated on the same gateway. Adding the second B-channel is car ried out via a kind of callback: the client requests a further B-channel. The central side then requests the individual number of the gateway to which the client has already been connected.
In this scenario the client takes the active part, i.e. he controls and has the responsibility (costs for channel-bundling). The central side accepts all requests of the client as long as they match the WAN partner configuration on the gateway.
-
WAN Partner bintec User’s Guide
31
3
Submenu Advanced Settings
Description Meaning
BAP, Dialup Client Mode
and
BAP Dialup Server Mode
(cont.)
settings on client-side: BAP, Dialup Client
Mode
settings on server-side: BAP, dialup Server
Mode (additionally: configuration of further
values as e.g. BAPNUMBER and BAPLKTYPE in the PPPDIALPROFILETABLE via the SNMP shell of your gateway)
Channel-Bundling must be activated on both sides (see
A
DVANCED SETTINGS CHANNEL BUNDLING set to
WAN PARTNER ADD/EDIT
dynamic or static).
If dial-in authentication is carried out via a RADIUS-Server, the bintec-specific attributes must be applied for the configuration of the RADIUS-Server. Therefore an entry must be written into the user’s file, that generates the required entries into the
Backup (For leased lines only)
The backup connection is activated if the leased line fails. The backup connection is cleared when the leased line is available again. BOD is also available for this mode, if a value >
1 is used for MAXIMUM NUMBER OF DIALUP C
HANNELS.
PPPEXTIFTABLE.
32
bintec User’s Guide WAN Partner
One additional BRI for dial-up connections must be available at least. See datasheet on
www.funkwerk-ec.com to check with how many
BRIs your gateway is equipped.
Description Meaning
Submenu Advanced Settings
3
Bandwidth On Demand Active
and
Bandwidth On Demand Passive
Table 3-5: MODE selection options
(For leased lines only)
Enables BOD.
Bandwidth On Demand Active defines the active partner. This side activates adding and dropping additional B-channels on demand. Bandwidth On Demand Passive defines the passive partner.
WAN Partner bintec User’s Guide
33
3
Submenu Advanced Settings
34
bintec User’s Guide WAN Partner
Submenu WAN Numbers
4 Submenu WAN Numbers
The fields of the WAN NUMBERS submenu are described below.
The WAN PARTNER WAN NUMBERS menu contains a list of the numbers en­tered for the WAN partner. Other numbers can be added via the ADD button. Existing entries can be edited by selecting the relevant list entry.
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][EDIT][WAN NUMBERS][ADD]: Add or Change MyGateway WAN Numbers (Filiale)
Number Direction outgoing
Advanced Settings >
4
ISDN Ports to use <X> Slot 0 Auxiliary <X> Slot 2 Unit 0 ISDN S0 <X> Slot 2 Unit 1 ISDN S0
SAVE CANCEL
R3400 Setup Tool Funkwerk Enterprise Communications GmbH [WAN][EDIT][WAN NUMBERS][ADD]: Add or Change MyGateway WAN Numbers (Filiale)
Number Direction outgoing
Advanced Settings >
ISDN Ports to use <X> Slot 0 Auxiliary <X> Slot 2 ISDN S0
SAVE CANCEL
WAN Partner bintec User’s Guide
35
4
Submenu WAN Numbers
The WAN NUMBERS ADD/EDIT menu consists of the following fields:
Field Description
Number Number of WAN partner.
Direction Defines whether NUMBER should be used for
incoming or outgoing calls or for both. Possible values:
outgoing (default value): For outgoing calls,
where you dial your WAN partner.
both (CLID): For incoming and outgoing
calls.
incoming (CLID): For incoming calls, where
your WAN partner dials in to your gateway.
Note
The Calling Party Number of the incoming call is compared with the set
The Calling Party Number can be read in
MONITORING & DEBUGGING ISDN MONITOR as REMOTE NUMBER.
ISDN Ports to Use Defines the ISDN ports to be used.
Slot 0 Auxiliary: no entry or X
Slot 2 Unit 0 ISDN S0: no entry or X.
(R3000w)
Slot 2 Unit 1 ISDN S0: no entry or X.
(R3000w)
Slot 2 ISDN S0: no entry or X. (R3400,
R3800)
Table 4-1: WAN NUMBERS menu fields
When the gateway is connected to a PABX system for which a "0" prefix is nec­essary for external line access, this "0" must be considered when entering the access number.
NUMBER.
36
bintec User’s Guide WAN Partner
Wildcard
Submenu WAN Numbers
Wildcards When entering the NUMBER, you can either enter the extension digit for digit or
you can replace single numbers or groups of numbers with wildcards. NUMBER can therefore equal various extensions.
You can use the following wildcards, which have different effects for incoming and outgoing calls:
Meaning Example
Outgoing calls, i.e. the gateway sets up a connection to the WAN partner with:
Incoming calls Outgoing calls Number
The gateway accepts incoming calls e.g. with:
4
* Matches a group
of none or more digits.
? Matches exactly
one digit.
[a-b] Defines a range
of matching dig its.
[^a-b] Defines a range
of excluded dig its.
{ab} Optional
sequence to match.
Note
-
-
Table 4-2: Wildcards for incoming and outgoing calls
If the calling party number of an incoming call matches both a WAN partner’s NUMBER with wildcards and a WAN partner’s NUMBER without wildcards, the entry without wildcards is always used.
Is ignored. 123* 123, 1234,
123789
Is replaced by 0. 123? 1234, 1238,
1231
The first digit of the specified range is used.
The first digit after the specified range is used.
Sequence is used. {00}1234 001234 and
123[5-9] 1235, 1237,
1239
123[^0-5] 1236, 1238,
1239
1234
123
1230
1235
1236
001234
WAN Partner bintec User’s Guide
37
4
Submenu WAN Numbers
4.1 Submenu Advanced Settings
The WAN NUMBERS ADVANCED SETTINGS submenu is described below.
The gateway supports the use of the “Closed User Group” service feature, which you can request for your ISDN line from your telephone company. The reachability of your ISDN S0 interface is monitored and controlled by the ex changes if this feature is selected.
If no "Closed User Group" is defined, the CLOSED USER GROUP (=CUG) field shows none. To activate a Closer User Group for a WAN partner, select specify. Enter the CUG index in the field that opens. You can obtain information about CUGs from your telephone provider.
-
38
bintec User’s Guide WAN Partner
Submenu IP
5 Submenu IP
The IP submenu is described below.
The WAN PARTNER IP submenu is used for making routing settings specifi­cally for a WAN partner.
The IP submenu consists of the following additional submenus:
BASIC IP SETTINGS
MORE ROUTING
ADVANCED SETTINGS
5
5.1 Submenu Basic IP-Settings
The fields of the BASIC IP-SETTINGS submenu are described below. When
RANSIT NETWORK is set to yes, the following screen is displayed (example
T
addresses are used here):
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][EDIT][IP][BASIC]: IP Settings (branch) MyGateway
IP Transit Network yes
Local IP Address 192.168.100.1 Partner IP Address 192.168.100.2
Default Route no
Remote IP Address 192.168.1.0 Remote Netmask 255.255.255.0
SAVE CANCEL
WAN Partner bintec User’s Guide
39
5
Submenu IP
To be able to transfer IP datagrams between two remote LANs, the gateway must know the route to the respective destination network. In this menu you can define the basic routing or generate a default route to the partner gateway.
Default route All data is sent automatically to the WAN partner on a default route, if no other
route matches.
Setting up an Internet connection, you should configure the route to your Inter­net Service Provider (ISP) as a default route.
If you configure e.g. a corporate network connection, only enter the route to the head office as a default route if you do not configure Internet access over your gateway.
If you configure both Internet access and a corporate network connection, enter a default route to the ISP and a network route to the head office.
You can configure several default routes on your gateway, but only one can be active. Make sure that you set different values for METRIC, if you configure more than one default route.
Transit network You use an additional ISDN IP address each for your gateway and the WAN
partner. This sets up a virtual IP network – called a transit network – during the connection. You do not normally need this setting, but it is necessary for some special configurations.
40
bintec User’s Guide WAN Partner
Submenu IP
If in WAN PARTNER ADD/EDIT ADVANCED SETTINGS LAYER 1 PROTOCOL other options than PPP over PPTP are set, the BASIC IP-SETTINGS menu con­sists of the following fields:
Field Description
IP Transit Network Defines whether your gateway uses a transit
network to the WAN partner. Possible values:
yes: The transit network is used.
no (default value): The transit network is not
used.
dynamic client: Your gateway receives an
IP address dynamically.
5
dynamic server: Your gateway assigns IP
addresses to the remote gateway dynami­cally.
Local IP Address Only for IP TRANSIT NETWORK = yes, no.
if yes = WAN IP address of your gateway
if no = LAN IP address of your gateway
Partner IP Address Only if yes is set for IP TRANSIT NETWORK.
WAN partner’s WAN IP address in the transit network.
Enable NAT Only if dynamic client is set for IP TRANSIT
N
ETWORK. Possible values:
yes: NAT is activated for this WAN partner.
no (default value): NAT is deactivated for
this WAN partner.
The settings in this menu correspond to NAT activation in the
T
RANSLATION EDIT menu.
IP NETWORK ADDRESS
WAN Partner bintec User’s Guide
41
5
Submenu IP
Field Description
Default Route Only if dynamic client, no or yes is set for IP
TRANSIT NETWORK. Possible values:
yes: Route to this WAN partner is defined
as default route.
no (default value): Route to this WAN part-
ner is not defined as default route.
Remote IP Address Only if yes or no is set for IP TRANSIT NETWORK.
WAN partner’s LAN IP address.
Remote Netmask Only if yes or no is set for IP TRANSIT NETWORK.
WAN partner’s LAN netmask.
Table 5-1: BASIC IP SETTINGS menu fields
For an xDSL connection via PPTP, e.g. by Telekom Austria, PPP over PPTP is
WAN PARTNER ADD/EDIT ADVANCED SETTINGS LAYER 1 PROTOCOL.
set in Then the
Field Description
PPTP VPN Partner’s IP Address
via IP Interface This field is displayed if an IP address has been
Use Gateway This field is displayed, when an ETH interface
BASIC IP-SETTINGS menu consists of the following fields:
Here you enter the IP address of the PPTP remote terminal of your Internet Service Pro vider (=ISP).
entered into the field
A
DDRESS.
Here you select the IP interface via which pack­ets from/to the PPTP remote terminal are trans­ported.
has been selected in
Defines whether the PPTP tunnel is carried out via another gateway. Default value is should only be modified in special applications.
PPTP VPN PARTNERS IP
VIA IP INTERFACE.
-
no, which
42
bintec User’s Guide WAN Partner
Field Description
Gateway IP Address Only if USE GATEWAY = yes
IP address of the gateway activated by setting USE GATEWAY to yes.
Submenu IP
5
Local PPTP VPN IP Address
Enable NAT Defines if Network Address Translation (NAT)
Default Route Defines if the route to this WAN partner is set as
Table 5-2: Fields in the BASIC IP-SETTINGS menu for LAYER1PROTOCOL = PPP over
PPTP
This field is displayed, if an ETH interface has been selected in
G
ATEWAY is set to no.
IP address of your gateway for the PPTP con­nection.
is active for this connection. Possible values:
yes: NAT is activated.
no (default value): NAT is deactivated.
default route. Possible values:
yes: Route to this WAN partner is defined
as default route.
no (default value): Route to this WAN part-
ner is not defined as default route.
VIA IP INTERFACE and if USE
WAN Partner bintec User’s Guide
5.2 Submenu More Routing
The fields of the MORE ROUTING submenu are described below.
If a route has been entered for a specific WAN partner in BASIC IP-SETTINGS, a routing entry is created automatically in your gateway’s routing table. The sub menu MORE ROUTING appears in the WAN PARTNER IP menu. In this menu you can edit the routing entries of a specific WAN partner and add other entries.
-
43
5
Submenu IP
The IP routes for a specific WAN Partner are listed in the WAN PARTNER IP
MORE ROUTING menu:
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][ADD][IP][ROUTING]: IP Routing (branch) MyGateway
The flags are: U (Up), D (Dormant), B (Blocked), G (Gateway Route), I (Interface Route), S (Subnet Route), H (Host Route), E (Extended Route)
Destination Gateway Mask Flags Met. Interface Pro
192.168.1.0 192.168.100.2 255.255.255.0 DG 1 branch loc
192.168.100.2 192.168.100.1 255.255.255.0 DH 1 branch loc
ADD ADDEXT DELETE EXIT
FLAGS shows the current status (Up, Dormant, Blocked) and the type of route (Gateway Route, Interface Route, Subnet Route, Host Route, Extended
). The protocol with which your gateway has "learned" the routing entry is
Route
displayed under
PRO, e.g. loc = local, i.e. manually entered.
More routes are added in the WAN PARTNER IP MORE ROUTING ADD menu. Existing entries can be edited by tagging the desired list entry and press­ing the Return key.
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][EDIT][IP][ROUTING][EDIT] MyGateway
Route Type Network route Network WAN with transit network
Destination IP Address 192.168.1.0 Netmask 255.255.255.0
Gateway IP-Address 192.168.100.2 Metric 0
SAVE CANCEL
44
bintec User’s Guide WAN Partner
Submenu IP
The MORE ROUTING ADD/EDIT menu consists of the following fields:
Field Description
Route Type Type of route. Possible values:
Host route (default value): Route to a single
host
Network route: Route to a network
Default route: The route is applied for all IP
addresses and if no other suitable route is available.
Network Defines the type of connection. For possible
values see
field,” on page 46.
table “Selection options in Network
5
The displayed value cannot be modified in this menu. It depends on the setting of NETWORK in WAN PARTNER ADD/EDIT IP
B
ASIC IP-SETTINGS.
Destination IP Address Only for ROUTE TYPE = Host route or Network
route
.
IP address of the destination host or network.
Netmask Only for ROUTE TYPE = Network route
Netmask for DESTINATION IP ADDRESS
If no entry is made the gateway uses a stan­dard netmask.
Gateway IP Address Only for NETWORK = WAN with transit network.
IP address of the host to which your gateway should forward the IP packets.
Partner / Interface Only for NETWORK = WAN without transit
network
Displays the WAN partner. Field cannot be modified.
IP TRANSIT
WAN Partner bintec User’s Guide
45
5
Submenu IP
Field Description
Metric The lower the value, the higher the priority of
the route (possible values
The default value is 1.
Table 5-3: MORE ROUTING menu fields
NETWORK offers the following selection options:
Description Meaning
0...15).
WAN without transit net­work
WAN with transit network Route to a destination host or LAN that can be
Table 5-4: Selection options in NETWORK field
In addition to the normal routing table, the gateway can also make routing deci­sions based on an extended routing table. Apart from the source and destina­tion address, the gateway can also include the protocol, source and destination port, type of service (TOS) and the status of the gateway interface in the deci­sion.
Entries in the Extended Routing Table are treated preferentially compared with entries in the normal routing table.
To create extended IP routing entries, press the ADDEXT button to open the rel­evant menu.
Example Extended IP Routing (XIPR) is useful, for example, if two networks are connect-
ed via ISDN with a LAN-LAN connection, but certain services (e.g. Telnet) should be routed over an X.25 link and not over an ISDN switched connection. By making entries in the Extended Routing Table, you can allow part of the IP traffic to run over the ISDN switched connection and part of the IP traffic (e.g. for Telnet) to run over an X.25 link.
Route to a destination host or LAN that can be reached via a WAN partner without including any transit network available.
reached via a WAN partner via a transit net work.
-
46
bintec User’s Guide WAN Partner
Submenu IP
Configuration is made in the Setup Tool menu WAN PARTNER IP MORE ROUTING ADDEXT.
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][ADD][IP][ROUTING]: IP Routing - Extended Route MyGateway
Route Type Host route Network WAN without transit network
Destination IP Address
Partner / Interface Mode always
Metric 1 Source Interface don’t verify Source IP Address Source Mask Type of Service (TOS) 00000000 TOS Mask 00000000 Protocol don’t verify
SAVE CANCEL
5
The menu contains the following fields:
Field Description
Route Type Type of route. Possible values:
Host route (default value): Route to a single
host
Network route: Route to a network
Default route: The Route is applied for all IP
addresses and if no other suitable route is available.
Network Defines the type of connection, see table
“Selection options in Network field,” on page 46.
The displayed value cannot be modified in this menu. It depends on the setting of
IP TRANSIT
NETWORK IN WAN PARTNER ADD/EDIT IP
B
ASIC IP-SETTINGS.
WAN Partner bintec User’s Guide
47
5
Submenu IP
Field Description
Destination IP Address Only for ROUTE TYPE = Host route or Network
route
IP address of the destination host or LAN.
Netmask Only for ROUTE TYPE = Network route
Netmask for DESTINATION IP-ADDRESS.
Partner / Interface Only for NETWORK = WAN without transit
network
Displays the WAN partner. Field cannot be modified.
Mode Only for NETWORK = WAN without transit
network
.
Defines when the WAN partner is to be used. Possible values see
options,” on page 49
Metric The lower the value, the higher the priority of
the route (possible values
Default value is 1.
Source Interface Interface over which the data packets reach the
gateway.
Default value is don’t verify.
Source IP-Address IP address of the source host or LAN.
Source Mask Netmask for SOURCE IP-ADDRESS.
Type of Service (TOS) Possible values: 0..255 as bit string.
TOS Mask Bit mask for TYPE OF SERVICE.
Protocol Defines a protocol. Possible values:
don’t verify, icmp, ggp, tcp, egp, pup, udp, hmp, xns, rdp, rsvp, gre, esp, ah, igrp, ospf, l2tp.
table “Mode selection
0...15).
48
bintec User’s Guide WAN Partner
Default value is don’t verify.
Field Description
Source Port Only for PROTOCOL = tcp or udp
Source port number or range of source port numbers.
Destination Port Only for PROTOCOL = tcp or udp
Destination port number or range of destination port numbers.
Table 5-5: ADDEXT menu fields
The MODE field includes the following selection options:
Description Meaning
Submenu IP
5
always Always use the route.
dialup wait Use the route if the interface is "up". If the inter-
face is "dormant", dial and wait until the inter­face is "up". Otherwise reroute.
dialup continue Use the route if the interface is "up". If the inter-
face is "dormant", dial but reroute until the inter­face is "up". Otherwise reroute.
up only Use the route if the interface is "up". Otherwise
reroute.
Table 5-6: MODE selection options
The SOURCE PORT and DESTINATION PORT fields contain the following selection options:
Description Meaning
any (default value) The route is valid for all ➤➤ port numbers.
specify Enables the entry of a port number.
specify range Enables the entry of a range of port numbers.
WAN Partner bintec User’s Guide
priv (0...1023) Privileged port numbers: 0 ... 1023.
49
5
Submenu IP
Description Meaning
server (5000....32767) Server port numbers: 5000 ... 32767.
clients 1 (1024....4999) Client port numbers: 1024 ... 4999.
clients 2 (32768....65535) Client port numbers: 32768 ... 65535.
unpriv (1024...65535) Unprivileged port numbers: 1024 ... 65535.
Table 5-7: Selection options of SOURCE PORT and DESTINATION PORT
5.3 Submenu Advanced Settings
The fields of the ADVANCED SETTINGS submenu are described below.
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][EDIT][IP][ADVANCED]: Advanced Settings MyGateway (branch)
RIP Send none RIP Receive none
IP Accounting off Back Route Verify off Route Announce up or dormant Proxy Arp off
Van Jacobson Header Compression off Dynamic Name Server Negotiation yes
OK CANCEL
Extended routing settings and other adjustments for the respective WAN part­ner can be made in the WAN PARTNER IP ADVANCED SETTINGS menu.
RIP The entries in the routing table can be defined statically or the routing table can
be updated constantly by a dynamic exchange of routing information between several gateways. This exchange is controlled by a Routing Protocol, e.g. RIP (Routing Information Protocol).
50
bintec User’s Guide WAN Partner
Submenu IP
Gateways use ➤➤ RIP to exchange information stored in routing tables by communicating with each other at regular intervals. The gateway supports both version 1 and version 2 of RIP, either individually or together.
RIP is configured separately for LAN and WAN.
Active and passive
Gateways can be defined as active or passive gateways: Active gateways offer their routing entries to other gateways via accept the information from the active gateways and store it, but do not pass on their own routing entries. The gateway can be either active or passive.
WAN partner
If you negotiate with a WAN partner to receive and/or send RIP packets, your gateway can exchange routing information dynamically with the gateways in the LAN of the remote gateway.
➤➤ broadcasts. Passive gateways
5
Receiving routing tables via the RIP is a possible security loophole, as external computers or gateways can change the routing functionality of the gateway.
Note
IP Accounting This option is for activating or deactivating the creation of IP accounting mes-
Back Route Verification
Route Announce This option enables you to set when routing protocols (e.g. RIP), that have been
Proxy ARP ➤➤ Proxy ARP enables the gateway to answer ➤➤ ARP requests from its
RIP packets do not set up or hold dialup connections.
sages for this WAN partner. If IP accounting is activated, a statistics message is generated (and entered in the biboAdmSyslogTable), which contains de­tailed information about the connections to this WAN partner. (Settings for stor­age of accounting messages into a file can be done in SYSTEM EXTERNAL SYSTEM LOGGING.)
This term conceals a simple but very powerful function of the gateway. If Back­route Verification is activated for a WAN partner, data packets are only accept­ed at the interface if answering packets would be routed over the same interface. You can therefore prevent packets with fake IP addresses being ac cepted – even without filters.
activated if applicable, propagate the IP routes defined for this interface.
own LAN acting for the defined WAN partner. If a host in the LAN wants to set
-
WAN Partner bintec User’s Guide
51
5
Submenu IP
up a connection to another host in the LAN or to a WAN partner, but doesn’t know its hardware address (MAC address), it sends an ARP request as a
➤➤ broadcast to the network. If Proxy ARP is activated on the gateway and
the desired target host can be reached e.g. via a host route, the gateway an­swers the ARP request with its own hardware address. The ➤➤ data packets are sent to the gateway, which then forwards them to the desired host.
Verify that Proxy ARP is activated on the LAN-side, too.
Note
The ADVANCED SETTINGS menu consists of the following fields:
Field Description
RIP Send Enables RIP packets to be sent via the inter-
face to the WAN partner. Possible values: see
table “Selection options for RIP Send and RIP Receive,” on page 54.
RIP Receive For receiving RIP packets via the interface to
the WAN partner. Possible values: see
“Selection options for RIP Send and RIP Receive,” on page 54.
IP Accounting For generating accounting messages for e.g.
➤➤ TCP, ➤➤ UDP and ICMP sessions. Pos-
sible values: on, off (default value).
Back Route Verify Activates Back Route Verification for the inter-
face to the WAN partner. Possible values: on,
off
(default value).
table
52
bintec User’s Guide WAN Partner
Submenu IP
Field Description
Route Announce Possible values:
up or dormant (default value): Routes are
propagated if the interface’s status is up or dormant.
always: Routes are always propagated in-
dependent of operational status.
up only: Routes are only propagated if the
interface status is up.
Proxy ARP Enables the gateway to answer ARP requests
from the own LAN acting for the defined WAN
partner. Possible values: see
selection options,” on page 55.
table “Proxy ARP
5
Van Jacobson Header Compression
Dynamic Name Server Negotiation
Table 5-8: ADVANCED SETTINGS menu fields
Reduces the size of the TCP/IP packet. Possi­ble values:
on: VJHC activated.
off: VJHC deactivated.
Defines whether the gateway receives IP addresses for
S
ECONDARY DOMAIN NAME SERVER, PRIMARY
WINS
and SECONDARY WINS from the WAN partner or sends them to the WAN partner. For possible values see
Server Negotiation selection options,” on page 55.
PRIMARY DOMAIN NAME SERVER,
table “Dynamic Name
WAN Partner bintec User’s Guide
53
5
Submenu IP
RIP SEND and RIP RECEIVE contain the following selection options:
Description Meaning
none (default value) Not activated.
RIP V2 multicast Only for RIP SEND
The gateway waits for version 2 RIP packets with RIP V2 multicast address 224.0.0.9.
RIP V1 triggered RIP V1 messages are sent rsp. received and
processed as per RFC 2091
(Triggered ➤➤ RIP).
RIP V2 triggered RIP V2 messages are sent rsp. received and
processed as per RFC 2091
(Triggered ➤➤ RIP).
RIP V1 For sending and receiving version 1 RIP pack-
ets.
RIP V2 For sending and receiving version 2 RIP pack-
ets.
RIP V1 + V2 For sending and receiving RIP packets of both
version 1 and 2.
Table 5-9: Selection options for RIP SEND and RIP RECEIVE
PROXY ARP offers the following selection options:
Description Meaning
off (default value) Deactivates Proxy ARP for this WAN partner.
on (up or dormant) The gateway answers an ARP request only if
the status of the connection to the WAN partner is
up (active) or dormant (idle). In the case of
dormant, the gateway only answers the ARP
request; the connection is not set up until someone actually wants to use the route.
54
bintec User’s Guide WAN Partner
Submenu IP
Description Meaning
on (up only) The gateway answers an ARP request only if
the status of the connection to the WAN partner is
up (active), i.e. a connection already exists to
the WAN partner.
Table 5-10: PROXY ARP selection options
DYNAMIC NAME SERVER NEGOTIATION contains the following selection options:
Description Meaning
off The gateway sends or answers no requests for
name server addresses.
yes The meaning depends on the settings in WAN
PARTNER EDIT IP under IP TRANSIT N
ETWORK:
5
If dynamic client has been selected, the
gateway sends Name Server Address Re­quests to the WAN partner.
If dynamic server has been selected, the
gateway answers Name Server Address Requests from the WAN partner.
If yes or no has been selected, the gateway
answers, but sends no Name Server Ad­dress Requests .
client (receive) The gateway sends Name Server Address
Requests to the WAN partner.
server (send) The gateway answers Name Server Address
Requests from the WAN partner.
Table 5-11: DYNAMIC NAME SERVER NEGOTIATION selection options
WAN Partner bintec User’s Guide
55
5
Submenu IP
56
bintec User’s Guide WAN Partner
Submenu Bridge
6 Submenu Bridge
The BRIDGE submenu is described below.
R3000w Setup Tool Funkwerk Enterprise Communications GmbH [WAN][ADD][BRIDGE]: Bridge Configuration (branch) MyGateway
Enable Bridging no
OK CANCEL
6
The gateway can be operated in Bridging Mode.
In contrast to a ➤➤ router, bridges operate at layer 2 of the ➤➤ OSI model, are independent of higher-level protocols and transmit data packets using ➤➤
MAC addresses.
Bridges are used to physically decouple networks and to reduce network data traffic. This is done by using filter functions that allow data packets to pass to certain network segments only.
To operate the gateway in Bridging Mode, the function must be activated in the
BRIDGING for the respective Ethernet interface of the LAN.
field
To include the defined WAN partner in the bridging function, the value in the ENABLE BRIDGING field is set to yes (default value is no).
WAN Partner bintec User’s Guide
57
6
Submenu Bridge
58
bintec User’s Guide WAN Partner
Index: WAN Partner
A
Advanced settings 50 Authentication 11 Authentication negotiation 11
B
Back Route Verification 51 Back Route Verify 52 Bandwidth on Demand (BoD) 23 Basic IP settings 39 Bridge 57 Bridging Mode 57
C
Callback 15, 17, 19 Calling Line Identification 7 Channel bundling 16, 18 Closed User Group 38 Compression 6, 7 CUG index 38
D
D-channel queue length 26 Default route 39, 42, 43 Delay after connection failure 16 Delay after connection failure (sec) 17 Destination IP address 45, 48 Destination port 49 Direction 36 Dynamic Name Server Negotiation 53, 55
E
Enable NAT 41, 43 Encapsulation 5, 6 Encryption 6 Encryption key negotiation 27 Extended interface settings 23 Extended IP routing 46 Extended routing 46
WAN Partner bintec User’s Guide
59
F
Flags 43
G
Gateway IP Address 43 Gateway IP address 45 Gear down threshold 26 Gear up threshold 26 GPRS/UMTS Interface 18
I
Idle for dynamic short hold (%) 17 IP 39 IP accounting 51, 52 IP transit network 41 ISDN ports to use 36
K
Keepalives 12
L
Layer 1 protocol 16, 17, 21 Line utilization sample (sec) 25 Line utilization weighting 25 Link Quality Monitoring 12 Local IP address 41 Local PPP ID 11 Local PPTP VPN IP Address 43
60
M
bintec User’s Guide WAN Partner
Maximum number of dialup channels 27 Metric 46, 48 Mode 25, 28, 48 More routing 43
N
Netmask 45, 48 Network 45, 46, 47 Number 36
P
Partner / Interface 45, 48 Partner IP address 41 Partner name 3, 5
Partner PPP ID 11 PPP password 11 PPPoE Ethernet Interface 28 PPPoE Service Name 28 PPTP VPN Partner’s IP Address 42 Pro 43 Protocol 3, 48 Proxy ARP 51, 53, 54
R
Remote IP address 42 Remote netmask 42 RIP 50 RIP receive 52, 54 RIP send 52, 54 Route 39 Route announce 51, 53 Route type 45, 47 Routing settings 39 RX Key 27
S
Short hold 15 Source interface 48 Source IP address 48 Source mask 48 Source port 49 Special interface types 19 State 3 Static short hold (sec) 17
T
TOS mask 48 Total number of channels 18 TX Key 27 Type of Service (TOS) 48
U
UMTS Interface 18 Use Gateway 42
WAN Partner bintec User’s Guide
61
V
Van Jacobson Header Compression 53 via IP Interface 42
W
WAN partner numbers 35
62
bintec User’s Guide WAN Partner
Loading...