Planet IRT-1001, IRT-1002 User Manual

Page 1
Copyright Statement
Copyright ©1997 PLANET Corporation No part of this publication may be reproduced in any form or by any
means or used to make any derivative such as translation, transformation, or adaptation without permission from PLANET Technology Corporation.
Trademarks
This guide and the accompanying product are each provided “as is,” without warranty as to their performance, merchantability or fitness for any particular purpose. PLANET Technical Corporation reserve the right to revise this publication and to make changes to its contents at any time, without obligation to notify any person or entity of such revisions or changes.
Reversion
This guide is used for PLANET ISDN Router, IRT-1000 sreies:
Model: IRT-1001ST, IRT-1002ST,
IRT-1001U, IRT-1002U Reversion: 1.0 (April, 1998) Part No.: EMIRT1000
Page 2
Page 3
Table of Contents
INTRODUCTION.........................................................................................1
FEATURES.....................................................................................................1
Ease of Installation................................................................................... 2
ISDN Basic Rate Interface (BRI)...............................................................2
ISDN Leased Line.....................................................................................2
Multiple Networking Protocol Support......................................................3
Dial On Demand.......................................................................................3
Bandwidth On Demand .............................................................................3
Full Network Management........................................................................ 3
RADIUS (Remote Authentication Dial In User Service).............................4
PPP Security ............................................................................................. 4
MS (Microsoft) CHAP...............................................................................4
RIP-1/RIP-2..............................................................................................4
DHCP Support (Dynamic Host Configuration Protocol) ...........................5
Call Control.............................................................................................. 5
Data Compression.....................................................................................5
Networking Compatibility ......................................................................... 5
APPLICATIONS FOR YOUR IRT-1001 OR IRT-1002.........................................5
Internet Access..........................................................................................5
Internet Single User Account (SUA).......................................................... 6
Multiprotocol LAN-to-LAN Connection.....................................................6
Telecommuting Server...............................................................................6
WHAT THIS MANUAL COVERS ....................................................................... 6
WHAT THIS MANUAL DOESNT COVER...........................................................7
OTHER RESOURCES ....................................................................................... 7
PACKING LIST ...............................................................................................8
ADDITIONAL INSTALLATION REQUIREMENTS..................................................8
BEFORE YOU BEGIN.................................................................................9
ROAD MAP AND FLOW...................................................................................9
COMPLETING THE WORKSHEET....................................................................10
Ordering Your ISDN Line .......................................................................11
Collecting General Setup Information ..................................................... 11
Collecting ISDN Phone Line Information................................................12
Page 4
Collecting Ethernet Setup Information.................................................... 13
INSTALLATION........................................................................................19
A WARNING ON CONNECTION CABLES ........................................................ 19
CONNECTING YOUR COMPUTER AND YOUR IRT-1001 OR IRT-1002 ............. 20
Connecting the RS-232 Cable to the Router............................................20
Connecting an ISDN Line to the Router .................................................. 20
Connecting an Ethernet Cable to the Router........................................... 21
Connecting a Power Adapter to the Router ............................................. 21
THE YOUR IRT-1001 OR IRT-1002’S FRONT PANEL.....................................21
POWERING UP YOUR IRT-1001 OR IRT-1002............................................... 22
NAVIGATING THROUGH THE SYSTEM MANAGEMENT TERMINAL (SMT)
INTERFACE.................................................................................................. 23
SYSTEM MANAGEMENT TERMINAL INTERFACE SUMMARY.............................25
GENERAL SETUP.......................................................................................... 25
ISDN SETUP............................................................................................... 27
North American ISDN............................................................................. 27
DSS1 & 1TR6 ISDN ................................................................................ 28
ETHERNET SETUP........................................................................................30
General Ethernet Setup...........................................................................30
TCP/IP Ethernet Setup and DHCP..........................................................31
Novell IPX Ethernet Setup ......................................................................34
Bridge Ethernet Setup............................................................................. 34
CONFIGURING FOR INTERNET ACCESS ............................................ 35
iv
IP ADDRESSES AND THE INTERNET............................................................... 35
INTERNET ACCESS CONFIGURATION.............................................................37
SINGLE USER ACCOUNT............................................................................... 39
CONFIGURATION FOR SINGLE USER ACCOUNT ..............................................41
CONFIGURING BACKUP ISP ACCOUNTS ........................................................42
REMOTE NODE CONFIGURATION......................................................43
BANDWIDTH ON DEMAND............................................................................48
EDITING PPP OPTIONS ................................................................................ 50
DIAL-IN CONFIGURATION .................................................................... 53
TELECOMMUTING........................................................................................ 54
DIAL-IN SERVER APPLICATION.....................................................................54
PLANET ISDN Router
Page 5
DEFAULT DIAL-IN SETUP.............................................................................55
DIAL-IN USERS SETUP ................................................................................. 59
More on CLID.........................................................................................61
TCP/IP CONFIGURATION.......................................................................63
IP SUBNET MASK........................................................................................ 63
LAN-TO-LAN APPLICATION....................................................................... 64
Remote Node Setup................................................................................. 64
Static Route Setup...................................................................................67
NOVELL IPX CONFIGURATION............................................................ 71
IPX NETWORK ENVIRONMENT ....................................................................71
Frame Type............................................................................................. 71
Network Numbers.................................................................................... 71
IRT-1002 ON LAN WITH SERVER................................................................ 72
IRT-1002 ON LAN WITHOUT SERVER..........................................................72
IPX SPOOFING ............................................................................................72
IPX ETHERNET SETUP.................................................................................73
LAN-TO-LAN APPLICATION....................................................................... 74
Remote Node Setup................................................................................. 75
STATIC ROUTE SETUP..................................................................................77
BRIDGING CONFIGURATION................................................................81
IPX SPOOFING ............................................................................................81
BRIDGE ETHERNET SETUP............................................................................81
LAN-TO-LAN APPLICATION....................................................................... 83
Remote Node Setup................................................................................. 83
Default Dial-In Setup for Bridge............................................................. 84
Bridge Static Route Setup .......................................................................85
FILTER CONFIGURATION.....................................................................87
ABOUT FILTERING....................................................................................... 87
IRT-1000’S FILTER STRUCTURE ..................................................................88
CONFIGURING A FILTER SET ........................................................................88
CONFIGURING A FILTER RULE...................................................................... 91
TCP/IP Filter Rule..................................................................................91
Generic Filter Rule................................................................................. 95
Novell IPX Filter Rule ............................................................................97
IRT-1000 series User's Guide
v
Page 6
SNMP...........................................................................................................99
ABOUT SNMP ............................................................................................99
CONFIGURING YOUR IRT-1002 FOR SNMP SUPPORT...................................99
SYSTEM SECURITY............................................................................... 103
CONFIGURING THE SMT PASSWORD .......................................................... 104
USING RADIUS AUTHENTICATION............................................................ 105
Installing a RADIUS Server .................................................................. 105
Configuring the IRT-1002 for RADIUS Authentication.......................... 106
Adding Users to the RADIUS Database................................................. 107
Using RADIUS Authentication for CLID............................................... 108
TELNET CONFIGURATION AND CAPABILITIES................................109
ABOUT TELNET CONFIGURATION............................................................... 109
TELNET CAPABILITIES ............................................................................... 110
Single Administrator............................................................................. 110
System Timeout..................................................................................... 110
SYSTEM MAINTENANCE......................................................................111
SYSTEM STATUS........................................................................................ 111
TERMINAL BAUD RATE.............................................................................. 114
LOG AND TRACE........................................................................................ 115
View Error Log ..................................................................................... 116
Syslog And Accounting.......................................................................... 116
DIAGNOSTIC ............................................................................................. 117
BACKUP CONFIGURATION.......................................................................... 120
RESTORE CONFIGURATION......................................................................... 121
SOFTWARE UPDATE...................................................................................121
COMMAND INTERPRETER MODE................................................................. 122
CALL CONTROL......................................................................................... 122
Call Control Parameters....................................................................... 123
Blacklist................................................................................................ 124
Budget Management ............................................................................. 124
Call History.......................................................................................... 125
vi
TROUBLESHOOTING............................................................................127
PROBLEMS STARTING UP THE YOUR IRT-1001 OR IRT-1002...................... 127
None of the LEDs are on when you power up the router........................ 127
PLANET ISDN Router
Page 7
Connecting the RS-232 cable, cannot access the SMT ........................... 127
PROBLEMS WITH THE ISDN LINE .............................................................. 128
The ISDN initialization failed................................................................ 128
The ISDN loopback test failed ............................................................... 128
PROBLEMS WITH THE LAN INTERFACE....................................................... 129
Can’t PING any station on the LAN...................................................... 129
PROBLEMS CONNECTING TO A REMOTE NODE OR ISP ................................. 129
PROBLEMS CONNECTING TO A REMOTE USER ............................................. 130
ISDN SWITCH TYPES ............................................................................131
PROVISIONING FOR U.S. SWITCHES............................................................ 131
Provisioning For the AT&T 5ESS Switches ........................................... 131
Provisioning For the Northern Telecom Switch..................................... 133
GLOSSARY .............................................................................................. 135
IRT-1000 series User's Guide
vii
Page 8
Page 9
Introduction
Congratulations on your purchase of a PLANET IRT-1000 series Remote Access Router. In a modem-sized box, your router offers inexpensive yet complete telecommunications and Internetworking solutions for your home or branch office. It is ideal for everything from Internet browsing to receiving calls from Remote Dial-in Users and making LAN-to-LAN connections to Remote Nodes.
Distinguishing features of the IRT-1000 series include support for a full range of networking protocols such as TCP/IP (Transmission Control Protocol/Internet Protocol, also known as IP), Novell IPX (Internet Packet Exchange), and Transparent Bridging.
IRT-1001ST: ISDN S/T interface, IP routing IRT-1001U : ISDN U interface, IP routing IRT-1002ST: ISDN S/T interface, IP/IPX routing, bridging IRT-1002U : ISDN U interface, IP/IPX routing, bridging
This complete solution also includes Remote Dial-in User support, an Internet Single User Account (Network Address Translation) option, extensive Network Management, and solid security features.
NOTE: Throughout the remainder of this manual, the term “IRT-
1001” refers to any IRT-1001ST or IRT-1001U, and the term “IRT-1002” refers to any IRT-1002ST or IRT-1002U.
Features
Each IRT-1000 series router is packed with features that give it the flexibility to provide a complete networking solution for almost any user.
IRT-1000 series User's Guide
1
Page 10
Ease of Installation
Your IRT-1001 or IRT-1002 is a self-contained unit that is quick and easy to install. Physically, it resembles an external modem except for the fact that it is a router and uses an Ethernet cable to connect to the host network.
ISDN Basic Rate Interface (BRI)
Using a standard S/T or U Interface (the IRT-1001ST and IRT-1002ST use the S/T interface, while the IRT-1001U and IRT-1002U use the U interface) the IRT-1001ST and IRT-1002ST support a full range of switch types. The switch type depends on the CO (Central Office) switch your ISDN line is connected to. See the ISDN Switch Types chapter for more information on North American, European, and Asian ISDN firmware and switch types supported by these routers.
The two B-channels can be used independently for two destinations. Or they can be bundled for one connection to support bandwidth-on­demand.
ISDN Leased Line
If the router is set up for an ISDN leased line (that is, if any option but "Switch/Switch" or "Switch/Unused" is selected for the B Channel [Usage control] in setup menu 2, [ISDN Setup], and the [Transfer Type control] is set to Leased in either setup menu 4, [Internet Access Setup], or setup menu 11.1, [Remote Node Profile]), the router will automatically initialize the leased-line connection each time it is powered up or setup menu 2, 4, or 11.1 is saved.
The IRT-1001ST and IRT-1002ST implement the PPP echo mechanism for verifying ISDN leased line status. The setting of the Idle Timeout control in setup menu 11.1 will be used as the interval between two LCP_Echo_Req messages. It is supposed that there exists an echo reply corresponding to an echo request. Whenever an echo request is sent, the counter will be incremented by one.
2
PLANET ISDN Router
Page 11
The send counter will be reset to zero after an echo response is received. The leased-line error recovery mechanism will be triggered after the send counter reaches 4. If the Idle Timeout control is set to zero, the PPP echo mechanism will not be used.
Multiple Networking Protocol Support
The IRT-1002 is a multi-protocol router. It supports TCP/IP, Novell IPX, and Transparent Bridging.
Dial On Demand
The Dial On Demand feature allows a IRT-1001 or IRT-1002 to automatically place a call to a Remote Node whenever there is traffic coming from any workstation on the LAN to that remote site.
Bandwidth On Demand
Your IRT-1001 or IRT-1002 supports bandwidth up to 128 Kbps over a single ISDN BRI line. It incorporates PPP/MP (Point-to-Point Protocol/Multilink Protocol) to bundle two B channels over a BRI line. In addition, the router dynamically allocates bandwidth between the two B channels, increasing or decreasing bandwidth as needed to allow for greater efficiency in data transfer. It supports BAP (Bandwidth Allocation Protocol) and BACP (Bandwidth Allocation Control Protocol) to manage the number of links in multilink bundle.
Full Network Management
The IRT-1002ST incorporates SNMP (Simple Network Management Protocol) support and menu-driven network management via an RS-232 or Telnet connection. In addition, both the IRT-1001ST and the IRT­1002ST offer the Call Detail Record (CDR) function to help you analyze and manage your telephone bill.
IRT-1000 series User's Guide
3
Page 12
RADIUS (Remote Authentication Dial In User Service)
The RADIUS feature allows you to use a central external Unix-based server to support thousands of users (IRT-1002ST only).
PPP Security
The IRT-1001 and IRT-1002 support PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol).
MS (Microsoft) CHAP
Your IRT-1001 or IRT-1002 and a Microsoft Windows 95 or Windows NT server can authenticate each other using Microsoft’ s proprietary CHAP algorithm. No special setup is needed to support MS CHAP. Everything is done through PPP negotiation between the router and the server.
RIP-1/RIP-2
Your IRT-1001 or IRT-1002 supports both RIP-1 and RIP-2 (Routing Information Protocol versions 1 and 2) exchanges with other routers. RIP version controls in setup menus 3.2 (TCP/IP and DHCP Ethernet Setup) and 11.3 (Remote Node Network Layer Options) let you control RIP use, and offer the following version options: RIP-1 (accept and send RIP-1 messages only), RIP-2B (accept RIP-1 and RIP-2 messages, both broadcast and multicast, and send RIP-2 messages in broadcast format), and RIP-2M (accept RIP-1 and RIP-2 messages, both broadcast and multicast, and send RIP-2 messages in multicast format).
(The suggested choice in both menus is RIP-2B, except in environments where there are routers that do not understand RIP-2 packets at all. “Broadcast,” above, means a destination MAC or IP host address consisting of all binary ones; “multicast” means a MAC address of 01:00:5E:00:00:09 hex or an IP destination address of 224.0.0.9.)
4
PLANET ISDN Router
Page 13
DHCP Support (Dynamic Host Configuration Protocol)
DHCP (Dynamic Host Configuration Protocol) allows you to dynamically and automatically assign IP address settings to hosts on your network.
Call Control
Your IRT-1001 or IRT-1002 provides budget management for outgoing calls and maintains a “blacklist” of unreachable phone numbers in order to save you the expense of unnecessary charges.
Data Compression
The IRT-1001 and IRT-1002 incorporate Stac data compression and CCP (Compression Control Protocol).
Networking Compatibility
The IRT-1001 and IRT-1002 are compatible with remote access products from other companies such as Ascend, Cisco, and 3Com. Furthermore, they support Microsoft Windows 95 and Windows NT remote access capability.
Applications For Your IRT-1001 or IRT-1002
Some applications for the IRT-1001 and IRT-1002 include:
Internet Access
Your IRT-1001 or IRT-1002 supports the TCP/IP protocol, which is the language used for the Internet. It is also compatible with access servers manufactured by major vendors such as Cisco and Ascend.
IRT-1000 series User's Guide
5
Page 14
Internet Single User Account (SUA)
For small office environments, the IRT-1001 and IRT-1002 offer a Single User Internet Account (also known as a Network Address Translator, or NAT) from an ISP (Internet Service Provider). This allows multiple users on the LAN (Local Area Network) to access the Internet concurrently for the cost of a single user.
Single User Account address mapping can also be used for LAN to LAN connections.
Multiprotocol LAN-to-LAN Connection
The IRT-1001 and IRT-1002 can dial to or answer calls from another remote access router connected to a different network. The IRT-1002 supports TCP/IP and Novell IPX, and has the capability to bridge any Ethernet protocol.
Telecommuting Server
The IRT-1001 and IRT-1002 allow Remote Dial-in Users to dial in and gain access to your LAN. This feature enables users that have workstations with remote access capabilities, e.g., Windows 95, to dial in using an ISDN terminal adapter (TA) to access the network resources without physically being in the office.
What This Manual Covers
This manual is divided into five parts.
1. Part One—Getting Started—is structured as a step-by-step guide
to help you connect, install, and set up your IRT-1001 or IRT-1002 to operate on your LAN.
6
PLANET ISDN Router
Page 15
2. Part Two — The Internet—describes how to configure the router
to connect to the Internet.
3. Part Three — Setting Up Advanced Applications—describes
how to use the router for more advanced applications, such as TCP/IP routing and Bridging.
4. Part Four — Advanced Management —provides information on
advanced management features for network managers.
5. Part Five — System Maintenance —describes maintenance
features for checking system status and logging errors.
Regardless of the application, it is important that you follow the steps outlined in Part One to correctly connect your IRT-1001 or IRT-1002 to your LAN. You can then refer to other chapters of the manual depending on which applications you wish to use.
What This Manual Doesn’ t Cover
This manual assumes that you know how to use your computer and are familiar with your communications software. If you have questions about using either one, refer to the manual for the product.
Other Resources
For more information about your IRT-1001 or IRT-1002 check the following sources:
Quick Start Guide. Support disk.
IRT-1000 series User's Guide
7
Page 16
Packing List
Before you proceed further, check all items you received with your IRT­1001 or IRT-1002 against this list to make sure nothing is missing. The complete package should include:
One IRT-1001 or IRT-1002 ISDN router. One power adapter. One RS-232 cable. One LAN straight cable. One Support Disk. This User’ s Guide.
Additional Installation Requirements
In addition to the contents of your package, there are other hardware and software requirements you need before you can install and use your router. These requirements include:
An ISDN telephone line. An Ethernet connection to your computer. A computer equipped with an RS-232 port and communications
software configured to the following parameters:
VT100 terminal emulation. 9600 Baud rate. No parity, 8 Data bits, 1 Stop bit.
After the router has been successfully connected to your network, you can make future changes to the configuration using a Telnet client application.
8
PLANET ISDN Router
Page 17
Before You Begin
To ensure successful installation of your IRT-1001 or IRT-1002, we strongly recommend that you carefully follow the steps outlined in the next two chapters. These chapters are designed as a guide for you
to collect the necessary information about your ISDN phone line and the LAN that you will be connected to. Once this information has been collected, it will be used to configure your router.
After you have successfully configured your IRT-1001 or IRT-1002, see the appropriate chapters to set up your applications. For Internet Access, see the Configuring for Internet Access chapter starting on page
35.
Road Map and Flow
The chart below is provided as a step by step guide to successfully installing your IRT-1001 or IRT-1002.
IRT-1000 series User's Guide
9
Page 18
Completing the Worksheet
Before you continue, locate the worksheet at the end of this chapter. This information worksheet has been provided to help you get through setup and installation of your IRT-1001 or IRT-1002 as easily as possible.
10
PLANET ISDN Router
Page 19
Ordering Your ISDN Line
If you do not have the ISDN line installed already, we suggest that you order it from your telephone company as soon as possible to avoid the long waiting period common when ordering a new line. Use the information in this section to place the order (see the ISDN Switch Types chapter for information on provisioning your ISDN line). If you have already installed your ISDN line, you can check the following section to make sure that you can use all the features of your IRT-1001 or IRT-1002.
1. Contact your local telephone company’ s ISDN Ordering Center.
2. Find out what type of ISDN service is available. Refer to the ISDN
Switch Types chapter to find out the provisioning information for the appropriate switch type and ISDN service. For the U.S., the IRT-1001U and IRT-1002U (U Interface) have been approved by Bellcore and have IOC (ISDN Ordering Code) “S” Capability, EZ­ISDN 1.
3. Provide your telephone company with the proper provisioning
information.
4. When the telephone company installs your ISDN line, be sure to
obtain the following information:
ISDN switch type. ISDN telephone number(s). ISDN Service Profile Identifier (SPID) number(s) (only for
North America).
Collecting General Setup Information
Your IRT-1001 or IRT-1002 requires the following system information. You can obtain all the pertinent information from your network administrator. Record this information into the worksheet as it becomes available. This worksheet will later be referred to as you configure your router.
IRT-1000 series User's Guide
11
Page 20
System Name—This is the name given to the router for
identification purposes. This name should be no more than 8 alphanumeric characters. Spaces are not allowed, but “-” and “_” are accepted. This name can be obtained remotely via the SNMP management protocol and will be displayed as the prompt when the user enters Command Interpreter Mode.
Route IP Field—For Internet access, you will need to enable the
Route IP Field. See the Configuring for Internet Access chapter starting on page 35 for more details on configuring your router for Internet access. To support Novell IPX, or Bridging, enable the appropriate protocol and reference the related chapters for detailed information.
You have now collected all of the general setup information you need. Make sure that you have entered all the values onto the worksheet before proceeding to the next section.
Collecting ISDN Phone Line Information
After you have successfully installed the ISDN phone line or if you already have one installed, you need to use the ISDN line information to complete the worksheet and configure your router. Your telephone company can give you the following information to configure the Your IRT-1001 or IRT-1002:
12
Switch Type Geography No. of Phone #s No. of SPIDs
AT&T 5ESS NI-1 North America 2 2 AT&T 5ESS Point to Point North America 1 0 AT&T 5ESS Multipoint North America 2 2 Northern Telecom NI-1 North America 2 2 Northern Telecom Custom North America 2 2 DSS1 Europe, Asia 2 N/A 1TR6 Germany 2 N/A
Switch Type—This is the type of switch used by your telephone
company. Check with your telephone company and choose the appropriate option on the worksheet. For North America, select your ISDN switch type. For DSS1 and 1TR6, verify this field to make sure that you have the proper firmware loaded.
PLANET ISDN Router
Page 21
B Channel Usage—Determine which connection is appropriate
for your B channel and check the corresponding option on the worksheet.
If your IRT-1001 or IRT-1002 is the only device using the ISDN line,
configure B Channel Usage to Switch/Switch so the router device will use both B channels to communicate. If the router is sharing the ISDN line with other devices, configure B Channel Usage to Switch/Unused. If your IRT-1001 or IRT-1002 is on a leased line, configure B channel usage to Leased/Leased or Leased/Switch, depending on the setting of the line.
Telephone Number(s)—Record on the worksheet the telephone
number(s) given to you by your ISDN provider. Some switch types only have one telephone number. These phone numbers should be in a standard digit format (for example, 5551212). Note that these fields will only accept digits, so dash "—" and spaces will not be accepted.
SPID Number(s)—(For North America only) The SPID (Service
Profile Identifier) is a number used by a central office switch for identification purposes. With the switch information, see the previous table for the number of SPIDs you must enter.
You have now collected all of the necessary information about your ISDN phone line. Make sure that these values are entered into your worksheet before you continue to the next section. For DSS1 and 1TR6 ISDN, refer to the install chapter starting on page 18.
Collecting Ethernet Setup Information
This section assumes that you are setting up your router for a TCP/IP connection. If you want to configure the system for other protocols (e.g., IPX), refer to the appropriate chapters.
Ethernet Interface—Your IRT-1001 or IRT-1002 is equipped with
an NWay auto-sensing 10/100-Mbps port. Just plug in the cable, and the router will automatically determine the network speed (10 Mbps or 100 Mbps) and mode (full or half duplex) based on the capability and configuration of the attached device.
IRT-1000 series User's Guide
13
Page 22
IP Address—An IP Address is required for TCP/IP protocol. The
IP Address is a unique 32-bit number assigned to your router. It is written in dotted decimal notation (four 8-bit numbers, between 0 and 255, separated by periods), e.g., 192.68.203.5.
Record the IP Address into the worksheet as assigned by your
network administrator. Note that every machine on a TCP/IP network (the global Internet, for example) must have a unique IP address; do not assign an arbitrary address to any machine.
IP Sub-net Mask—This field is required for TCP/IP protocol. An
IP address consists of two parts, the network ID and the host ID. The IP Subnet Mask is used to specify the network ID portion of the address, expressed in dotted decimal notation. Your IRT-1001 or IRT-1002 will automatically calculate this mask based on the IP address that you assign. Unless you have special need for subnetting, use the default mask as calculated by the router.
The table below lists some examples of IP subnet masks and the number of hosts that are allowed. Consult your network administrator if you are unsure of this value.
IP Subnet Mask Number of Host IDs Number of Bits
255.255.255.0 254 24
255.255.255.128 126 25
255.255.255.192 62 26
255.255.255.224 30 27
255.255.255.255 1 32
14
PLANET ISDN Router
Page 23
IRT-1001/IRT-1002 Setup and Installation Worksheet
General Setup Information
System Name (for identification purposes):
_______________________________________ Protocol(s): ___TCP/IP ___IPX (IRT-1002ST only) ___Bridging (IRT-1002ST only)
ISDN Setup Information
Switch Type (check one): ___AT&T 5ESS NI-1 ___AT&T Point to Point ___AT&T 5ESS Multipoint ___Northern Telecom NI-1 ___Northern Telecom Custom ___DSS1 ___1TR6 B-Channel Usage (check one): ___Switch/Switch ___Switch/Leased ___Leased/Switch ___Leased/Unused ___Unused/Leased ___Leased/Leased ___Leased128
IRT-1000 series User's Guide
15
Page 24
___Switch/Unused
North American ISDN
1st Telephone Number:
_______________________________________ 1st SPID Number:
_______________________________________ 2nd Telephone Number:
_______________________________________ 2nd SPID Number:
_______________________________________
DSS1 ISDN
ISDN Data Number & Subaddress:
_______________________________________ Outside Line Prefix Number:
_______________________________________ PBX Number (S/T Bus Number):
_______________________________________ Incoming Number Matching:
16
___MSN ___Calling Party Subaddress ___Don’ t Care
1TR6 ISDN:
ISDN Data Number:
_______________________________________ Outside Line Prefix Number:
_______________________________________ PBX Number (S/T Bus Number):
_______________________________________ Incoming Number Matching:
PLANET ISDN Router
Page 25
___EAZ ___Don’ t Care
Ethernet Setup Information
IP Address: _______._______._______._______ IP Subnet Mask: _______._______._______._______
Notes:
IRT-1000 series User's Guide
17
Page 26
This Page was deliberately left blank.
18
PLANET ISDN Router
Page 27
Installation
This chapter outlines how to connect your IRT-1001 or IRT-1002 to your LAN and ISDN line. Refer to the diagram below to identify all of the ports on your device when you make connections.
A Warning On Connection Cables
The RS-232, ISDN line, and Ethernet cable, are very similar to each other. It is important that you use the correct cable for each connection; otherwise, your router could be damaged.
IRT-1000 series User's Guide
19
Page 28
Connecting Your Computer and Your IRT-1001 or IRT­1002
For the initial setup of your IRT-1001 or IRT-1002, you must use RS-232 and communications software.
After the router has been successfully installed, you can modify the configuration through a remote Telnet connection. See the Telnet Configuration and Capabilities chapter for detailed instructions on using Telnet to configure your IRT-1001 or IRT-1002.
Connecting the RS-232 Cable to the Router
An RS-232 cable is included in your package. To connect this cable, connect the 9-pin end of the cable to the DCE port on the router’ s back panel. Connect the other end to the RS-232 cable connected to the serial port (COM1, COM2, or any other COM port) of your computer.
Connecting an ISDN Line to the Router
Plug one end of your ISDN phone line into the socket on the rear panel of the router labeled ISDN and the other end into the ISDN wall jack.
20
S/T interface—This can only connect to your NT-1 (Network
Termination) device.
NOTE: Do not under any circumstances connect directly to the
ISDN wall jack.
U interface—This allows you to connect directly to your ISDN
wall jack.
PLANET ISDN Router
Page 29
NOTE: The ISDN jack is for ISDN line connection only.
Connection of a phone line may result in damage to your IRT-1000 product.
Connecting an Ethernet Cable to the Router
Your IRT-1001 or IRT-1002 is equipped with an RJ-45 jack for connection to a 10BASE-T Ethernet or 100BASE-TX Fast Ethernet hub or switch via a standard straight-through twisted-pair cable.
Connecting a Power Adapter to the Router
Plug a 12V DC, 500 mA power adapter into the jack on the router’ s side panel labeled POWER
At this point, you should have connected the RS-232 cable, the ISDN phone line, the Ethernet cable, and the power supply. You can now power up your IRT-1001 or IRT-1002.
The Your IRT-1001 or IRT-1002’ s Front Panel
Names and descriptions of your router’ s front panel LEDs are given below:
POWER—Comes on as soon as you connect the router to the power supply.
STATUS—Should be blinking if the router is functioning properly.
IRT-1000 series User's Guide
21
Page 30
ISDN: LINK—Indicates that the router has an ISDN line connected to the WAN interface and it has been successfully initialized.
ISDN: B1 and B2—On if there is an active WAN session on that channel or if that channel is making or receiving a call.
LAN: 10/100—When you connect a network cable to the Your IRT-1001 or IRT-1002, the router will automatically detect the network speed. The 10/100 LED will light up if the LAN is operating at 100 Mbps.
LAN: Link/Act—When the LAN connection is ready but idle, the Link/Act LED will shine steadily. When data are being transmitted or received, this LED will blink off and on.
LAN: FDX/COL—The FDX/COL LED will shine green when the LAN connection uses full-duplex signaling. It will flash yellow when the router and another device on the LAN transmit at the same time. Occasional collisions are normal. If collisions are too frequent, the LAN must be reconfigured to reduce traffic loads.
Powering Up Your IRT-1001 or IRT-1002
When you power up your IRT-1001 or IRT-1002, the router will perform several internal tests and do an ISDN line initialization. After ISDN line initialization, the router will ask you to press ENTER to continue.
22
When you press ENTER, the router will display a login screen and ask you to enter the password, as shown below:
PLANET ISDN Router
Page 31
Enter the default password, 1234, to get into the Main Menu of the System Management Terminal (SMT). Note that once you are in the SMT and if there is no activity for more than 5 minutes, the router will automatically log you out and display a blank screen. If you see a blank screen, press ENTER to bring up the password screen.
Navigating Through the System Management Terminal (SMT) Interface
The SMT is the interface that you use to configure your IRT-1001 or IRT-1002. Several operations that you should be familiar with before you attempt to modify the configuration of your router are listed below:
Moving Forward to Another Menu. To move forward to a sub-
menu below the current one, type in the number of the sub-menu
and press ENTER. Moving Backward to a Previous Menu. Press the Escape key
to move back to the previous menu. Moving the Cursor. Within a menu, press ENTER (carriage
return) to move to the next field. You can also use the Up and
IRT-1000 series User's Guide
23
Page 32
Down keys to move to the previous and the next field,
PLANET Technology Corp.
respectively. Entering Information. There are two types of fields that you will
need to fill in. The first requires you to type in the appropriate
information. The second gives you choices to choose from. In the
second case, press the space bar to cycle through the available
choices. Required Fields. Some of the fields in the SMT are essential in
order to configure the Your IRT-1001 or IRT-1002. These fields
will initially show question marks, indicating that the information
must be filled in before that menu can be saved. N/A Fields. Some of the fields in the SMT will show a N/A. This
symbol refers to an option that is not available or not applicable. Saving Your Configuration. You can save your configuration by
pressing ENTER at the message ‘ Press ENTER to confirm or
ESC to cancel’ . Saving the data on the screen will take you in
most cases to the previous menu. The SMT main menu is shown below:
IRT-1002 Main Menu Getting Started Advanced Management
1. General Setup 21. Filter Set Configuration
2. ISDN Setup 22. SNMP Configuration
3. Ethernet Setup 23. System Security
4. Internet Access Setup 24. System Maintenance Advanced Applications
11. Remote Node Setup
12. Static Routing Setup
13. Default Dial-in Setup
14. Dial-in User Setup 99. Exit
24
PLANET ISDN Router
Page 33
System Management Terminal Interface Summary
This section summarizes all major SMT Menus:
#
Menu Title Description
1 General Setup Set up general information and enable routing or bridging
2 ISDN Setup Set up ISDN configuration 3 Ethernet Setup Set up Ethernet configuration 4 Internet Access Setup A quick and easy way to setup Internet connection 11 Remote Node Setup Set up Remote Node for LAN-to-LAN connection
12 Static Routing Setup Set up static routes for different protocols. Up to four static
13 Default Dial-in Setup Set up default dial-in parameters such that your IRT-1001
14 Dial-in User Setup Set up Remote Dial-in User. Your IRT-1001 or IRT-1002
21 Filter Set Configuration Set up filters to be used in Menu 3 and Menu 11 to provide
22 SNMP Configuration Set up SNMP-related parameters (IRT-1002ST only) 23 System Security Set up security related parameters 24 System Maintenance Provide system status, diagnostics, firmware upload, etc. 99 Exit To exit from SMT and return to the blank screen
of specific protocols
including Internet connection. A Your IRT-1001 or IRT­1002 can have up to four Remote Nodes.
routes can be set for each protocol.
or IRT-1002 can be a dial-in server for the Remote Node and Remote Dial-in User.
can directly support up to eight Remote Dial-in Users.
security, call control, etc.
General Setup
This menu contains administrative and system-related information. Enter 1 in the main menu to go to Menu 1—General Setup.
IRT-1000 series User's Guide
25
Page 34
1. System Name—Give the router a descriptive name for
identification purposes, e.g., ABCD. This name should be no
more than 8 alphanumeric characters. Spaces are not allowed,
but “-” and “_” are accepted. This name can be retrieved
remotely via SNMP, used for CHAP authentication, and will be
displayed as the prompt in command interpreter mode. See the
Dial-In Configuration chapter starting on page 53 for more
information on CHAP; see the System Maintenance chapter
starting on page 111 for more information on command
interpreter mode.
2. Location—Enter the geographic location (up to 31 characters) of
your IRT-1001 or IRT-1002, e.g., San Jose.
3. Contact Person’ s Name—Enter the name (up to 8 characters) of
the person in charge of the router. The Location and the Contact
Person fields are optional.
4. Protocols—Turn on or off the individual protocols for your
particular application. Unsupported protocols will have a N/A in
their fields.
26
PLANET ISDN Router
Page 35
ISDN Setup
Menu 2 is for entering information about your ISDN line. Different telephone companies deploy different types of switches for ISDN service. Depending on the switch for your particular installation, you will have a different number of telephone numbers, and if you are in North America, you may also have SPIDs. Make sure that you have correct and complete telephone numbers and SPIDs. You need to pass the ISDN setup before your system can make an outgoing call or answer an incoming call.
North American ISDN
1. Switch Type—Verify the switch type information with your
telephone company. For North America, select the type of switch
used by your telephone company. If your switch type is not
currently shown, press the space bar to change to the next
switch; repeat until you see the correct switch type. The router will
not be able to place or to receive calls if the wrong switch type is
specified. If you are not sure, contact your telephone company to
confirm the exact switch type.
IRT-1000 series User's Guide
27
Page 36
2. B Channel Usage—If you are using one B channel of your router
with another device on the S/T bus, then select Switch/Unused.
If not choose Switch/Switch. The following table shows the
relationship between the B Channel Usage setting and ISDN B
channels.
B Channel Usage B1 B2
Switch/Switch Switch Switch Switch/Leased Switch Leased Leased/Switch Leased Switch Leased/Unused Leased N/A Unused/Leased N/A Leased Leased/Leased* Leased Leased Leased128** Leased Leased Switch/Unused Switch N/A
*Leased/Leased = B1 and B2 channels connect to different remote nodes. **Leased128 = B1 and B2 channels connect to the same remote node.
3. SPID Number(s)—SPIDs are numbers used by a switch for
identification purposes. Depending on your switch type, you may
have zero, one, or two SPIDs assigned to your line. For example,
if your switch type is Northern Telecom Custom, you will have to
enter two SPID numbers.
DSS1 & 1TR6 ISDN
28
PLANET ISDN Router
Page 37
1. Switch Type—This field is fixed as DSS1 or 1TR6.
2. B Channel Usage—This field is fixed as Switch/Switch.
3. ISDN Data & Subaddress—Enter the telephone number and
subaddress assigned to the ISDN data call for the router. It will be
used as the outgoing CGPN(Calling Party Number) setting for
ISDN data calls. Note that the router only accepts digits; do not
include—and spaces in this field. This field should be no longer
than 19 digits for the number and 5 digits for the Subaddress. The
Subaddress is only available for DSS1.
4. Dial Prefix to Access Outside Line—Enter the prefix number if
the router is connected to an ISDN PBX. This number will be
added to all outgoing calls and should be no longer than 3 digits.
Otherwise, leave this field blank.
5. PBX Number (with S/T Bus Number)—Enter the S/T bus
number if the router is connected to an ISDN PBX. If this field is
left as blank then the loopback test will be skipped. When you are finished, press ENTER at the message ‘ Press ENTER to
Confirm...’ to save your selections, or press ESC to cancel. When you press ENTER, the router will use the information that you entered to initialize the ISDN link to the telephone company switch. It should be noted that whenever the switch type is changed, the ISDN initialization
IRT-1000 series User's Guide
29
Page 38
will take slightly longer. In addition, if you are using the U-interface, the system will also take slightly longer to initialize.
At this point, you will be asked if you wish to check if your ISDN line has been successfully connected to your router. If you select Yes, the router will perform a loop-back test to check the ISDN line. If the loop-back test fails, note the error message that you receive and take the appropriate troubleshooting action.
Ethernet Setup
30
Menu 3 is used to enter Ethernet related information. Depending on the protocols (TCP/IP or IPX) on your LAN, you will need to configure each protocol separately.
General Ethernet Setup
This menu determines the type of Ethernet interface you are using as well as the filter sets you wish to implement to monitor your Ethernet traffic. From Menu 3—Ethernet Setup, enter 1 to go to menu 3.1 ­General Ethernet Setup.
PLANET ISDN Router
Page 39
Input and Output Filter Sets—Filter sets are used to block certain packets to reduce traffic and to prevent a security breach. Filtering is a very involved subject, so leave these fields blank for the time being. After you have studied the Filter Configuration chapter starting on page 87, come back and define the filter sets.
TCP/IP Ethernet Setup and DHCP
If you are setting up your network for the first time, read the Configuring for Internet Access chapter before proceeding. The chapter contains important information on how to assign IP addresses for your network.
From Menu 3—Ethernet Setup, enter 2 to go to Menu 3.2—TCP/IP Ethernet Setup.
IRT-1000 series User's Guide
31
Page 40
1. DHCP—This field determines whether the router will act as a
DHCP (Dynamic Host Configuration Protocol) server. If this
control is set to None, DHCP will not be used. If it is set to Server,
the router will act as a DHCP server, capable of automatically
assigning IP addresses to Windows 95, Windows NT, and other
systems that support the DHCP client. When DHCP is used, the
following four items need to be set. Do not set this field to Server if there is already a DHCP server on
your network.
2. Client IP Pool Starting Address—DHCP can assign IP
addresses to hosts dynamically instead of requiring that each
system have a fixed IP address. IP addresses are allocated from
a block of addresses, usually assigned by your Internet provider.
The Client IP Pool Starting Address gives the first address in the
reserved block, which is also used as the LAN network address of
the router itself. This address will also serve as the default
gateway for DHCP clients.
3. Size of Client IP Pool—Gives the size of the block of addresses
reserved for DHCP address assignment. The default is 6
addresses; the maximum is 32. The router itself uses the first
address in the block, and the remaining addresses in the pool are
assigned to clients.
32
PLANET ISDN Router
Page 41
4. Primary DNS Server/Secondary DNS Server—These two fields
are used by DHCP clients (such as Windows 95 and Windows NT
systems) for Domain Name Servers. Usually your Internet
provider will provide one or more name service hosts.
5. IP Address—Enter the IP address of the Your IRT-1001 or IRT-
1002 in dotted decimal notation (four 8-bit numbers, between 0
and 255, separated by periods), e.g., 192.68.135.5. Note that
every machine on the TCP/IP network must have a unique IP
address.
6. IP Subnet Mask—An IP address consists of two parts, the
network ID and the host ID. The IP Subnet Mask is used to
specify the network ID portion of the address, expressed in dotted
decimal notation. Your IRT-1001 or IRT-1002 will automatically
calculate this mask based on the IP address that you assign.
Unless you have special need for subnetting, use the default
subnet mask calculated by the router.
7. RIP Direction—This parameter determines how the Your IRT-
1001 or IRT-1002 handles RIP (Routing Information Protocol). If
set to Both (default), the router will broadcast its routing table on
the LAN, and incorporate RIP broadcasts by other routers into its
routing table. If set to In Only, the router will not broadcast its
routing table on the LAN, if set to Out Only, the router will
broadcast its routing table but ignore any RIP broadcast packets
that it receives. If set to None, the router will not participate in any
RIP exchange with other routers. Usually, you should leave this parameter at its default of Both and let
RIP propagate the routing information automatically.
8. RIP Version—Determines what versions of the RIP Routing
Information Protocol the router accepts. Choices are:
RIP-1 The router will accept and send RIP version 1
messages only.
RIP-2B The router will accept RIP-1 and RIP-2 messages
(both broadcast and multicast), and sends RIP-2 messages in broadcast format.
IRT-1000 series User's Guide
33
Page 42
RIP-2M The router will accept RIP-1 and RIP-2 messages
(both broadcast and multicast), and sends RIP-2 messages in multicast format.
Unless there are routers in your environment that do not understand
RIP-2 packets, you should probably set this field to RIP-2B. When you are finished, press ENTER at the message ‘ Press ENTER to
Confirm...’ to save your selections, or press ESC at any time to cancel them.
Novell IPX Ethernet Setup
Refer to the chapter on Novell IPX configuration.
Bridge Ethernet Setup
Refer to the chapter on Bridging configuration.
34
PLANET ISDN Router
Page 43
Configuring for Internet Access
Menu 4 of the SMT allows you to configure Internet access on one screen. Before you configure your IRT-1001 or IRT-1002 for Internet access, you need to collect the following information from your ISP (Internet Service Provider).
IP address of the ISP’ s gateway (optional). Telephone number(s) of your ISP. Login name. Password for ISP authentication
For your Workstation: Domain Name Server (DNS)
IP Addresses and the Internet
Conventionally, the Internet (with a capital I) refers the large-scale interconnected networks across the world that was originally developed by the US Department of Defense. The Internet uses exclusively the TCP/IP suite of protocols. The term “Internet” (lower case i), however,
IRT-1000 series User's Guide
35
Page 44
refers to any interconnected networks using any protocol. An Internet can be as simple as two hosts on a LAN, or it can be as complex as the Internet itself.
Every machine on the Internet must have a unique address within that Internet. If your networks are isolated from the Internet, e.g., only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks:
10.0.0.0 — 10.255.255.255
172.16.0.0 — 172.31.255.255
192.168.0.0 — 192.168.255.255
For this reason, it is recommended that you choose your network number from the above list.
You can obtain your IP address from the IANA, from an ISP, or assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses.
36
NOTE: Regardless of your particular situation, do not create an
arbitrary IP address; always follow the guidelines above. For more information on address assignment, refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space.
Once you have determined the IP address range for your local network, you may want to use DHCP (Dynamic Host Configuration Protocol) to assign addresses to individual hosts on the network, as an alternative to manually configuring each host’ s IP settings. See the TCP/IP Ethernet Setup and DHCP section on page 31 for more information about DHCP.
PLANET ISDN Router
Page 45
Internet Access Configuration
The following steps describe the set-up procedure to configure your IRT­1001 or IRT-1002 for Internet access. The information you will need to provide will be indicated in bold type.
1. From the Main Menu, enter 4 to go to Menu 4 - Internet Access
Setup, as seen above.
2. ISP’ s Name—Enter the name of your Internet Service Provider,
e.g., myisp. This information is for identification purposes only.
3. ISP IP Addr—Enter the IP Address of the remote gateway at the
ISP’ s site. If you do not have this data, just leave it blank.
4. Pri(mary) Phone # and Sec(ondary) Phone Number—Both the
Primary and the Secondary Phone number refer to the number
that your IRT-1001 or IRT-1002 will dial to connect to the ISP.
The router will always call your ISP using the Primary Phone
number first. If the Primary Phone number is busy or does not
answer, the router will call the Secondary Phone number if
available. Once connected, the router will use the BACP
(Bandwidth Allocation Control Protocol) to establish the second B-
IRT-1000 series User's Guide
37
Page 46
channel if PPP/MP is enabled, and the ISP also supports MP and
BACP.
5. My Login Name—Enter the login name given to you by your ISP.
6. My Password—Enter the password associated with the login
name above. Note that this login name/password pair is only for
the router to connect to the ISP’ s gateway. When you use TCP/IP
applications, e.g., FTP, to access the Internet from your
workstation, you will need a separate login name and password
for each server.
7. Single User Account—See the following section for a more
detailed discussion on the Single User Account feature. The
default is No.
8. Telco Options: Transfer Rate—This field (which only applies to
outgoing calls) controls the rate at which the data is transferred
between your router and the Internet. The options for this field
are:
64K—The router will place 64Kbps (bits per second) digital
data calls.
56K—(For the North America only) The router will place
56Kbps digital data calls.
Lease—The router will place leased-line calls.
38
9. Multilink—Determines whether or not Multilink PPP should be
used. Available options are:
Off—The base transfer rate and maximum transfer rate will be
64Kbps.
BOD (Bandwidth On Demand)—The base transfer rate will be
64Kbps, and the maximum transfer rate will be 128 Kbps.
Always—Multilink will always be on; both the base transfer
rate and maximum transfer rate will be 128 Kbps.
10. Press ENTER at the message ‘ Press ENTER to Confirm...’ to
confirm your selections, or press ESC at any time to cancel your
selections.
PLANET ISDN Router
Page 47
11. At this point, the SMT will ask if you wish to test the Internet
connection. If you select Yes, the router will call the ISP to test
the Internet connection. If the test fails, note the error message
that you receive and take the appropriate troubleshooting steps.
Single User Account
Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, they will have to subscribe to multiple IP addresses or a Class C subnetwork from the ISP. In either case, these two approaches will cost more than a single user account.
The Single User Account (SUA) feature allows customers to have the same benefits as having a Class C address, but still only pay for one IP address, thus saving significantly on subscription fees. (Check with your ISP before you enable this feature).
This feature may also be used to connect to TCP/IP remote nodes other than Internet Service Providers. For example this feature can be used to simplify the allocation of IP addresses when connecting branch offices to the corporate network.
The IP address for the Single User Account can be either fixed or dynamically assigned by the ISP (or other remote node). In addition, you can also configure a server, e.g., a Web server, on your local network and make it accessible by outside users.
If you do not set a server IP address, SUA offers the additional benefit of firewall protection. This is because if no server is defined, all incoming inquiries will be filtered out by the router even if you do have a server on your network. This can prevent intruders from probing your system.
The router accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is globally unique on the Internet. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT).
IRT-1000 series User's Guide
39
Page 48
In summary:
1. SUA is an ideal, cost-effective solution for small offices with less
than 20 hosts using a LAN to concurrently access the Internet or
other remote TCP/IP network.
2. SUA can provide one server address to be accessed by Remote
Dial-in Users, thus controlling the incoming packets.
3. SUA can provide firewall protection if you do not configure a
server IP address. All incoming inquiries will be filtered out by the
Your IRT-1001 or IRT-1002. Therefore, servers on your network
are protected.
4. UDP and TCP datagrams can be routed. In addition, ICMP echo
can also be routed. The figure below shows an example of a small office connected to the
Internet via a Single User Account using a Your IRT-1001 or IRT-1002. Note that if you enable the Single User Account feature, your local IP address MUST be selected from the list of IP addresses for private networks as defined by the IANA.
40
PLANET ISDN Router
Page 49
Configuration for Single User Account
The steps for configuring your IRT-1001 or IRT-1002 for Single User Internet Access are identical to conventional Internet Access, with the exception that you need to fill in three extra fields.
Note that enabling the Single User Account feature will automatically create a new entry in the Remote Node Setup menu (menu 11). Before enabling the Single User Account feature, check the Remote Node Setup menu to make sure there is space for a new entry (there must be no more than three entries before you enable the Single User Account feature).
Follow steps 1-4 from the previous section, Internet Access Configuration.
1. Single User Account—Enter Yes to enable the Single User
Account feature. Use the space bar to toggle between Yes and
No.
2. Single User Account: IP Addr—If your ISP assigns you a
dynamic IP address, enter 0.0.0.0 here. If your ISP assigns you a
static IP address enter that IP address here.
3. Single User Account: Server IP Addr—If you want to make a
single server, e.g., a Web server, accessible to outside users,
enter that server’ s IP address here. Press ENTER at the message ‘ Press ENTER to Confirm...’ to
confirm your selections or press ESC at any time to cancel your
selections. At this point, the router will ask if you wish to test the Internet
connection. If you select Yes, the router will call the ISP to test the
Internet connection. If the test fails, note the error message that you
receive and take the appropriate troubleshooting steps.
IRT-1000 series User's Guide
41
Page 50
Configuring Backup ISP Accounts
Sometimes it may be desirable to configure more than one ISP account for backup purposes. The Single User Account feature can be enabled for all of these accounts, making it convenient to switch Internet Service Providers in the event of a failure.
To configure a backup ISP,
1. Configure your primary ISP using Menu 4, as described earlier in
this chapter.
2. Enter Menu 11, then select the number of an unused remote
node.
3. In Menu 11.1, choose a name for your backup ISP account, set
the Active field to No, and enter your outgoing login name,
password, and phone number(s). The Remote IP Address field
should be set to 1.1.1.1.
4. In Menu 11.3, set the remote node’ s subnet mask to 0.0.0.0, and
set RIP to None.
5. Save the new configuration.
42
Once you have done this, if you need to change from your primary ISP to a backup ISP follow the steps below:
1. Enter Menu 11 and select your Primary ISP.
2. In Menu 11.1, set the Active field to No.
3. Enter Menu 11 again and select your backup ISP.
4. In Menu 11.1, set the Active field to Yes.
You will now be able to access the Internet through the backup ISP Remote Node.
PLANET ISDN Router
Page 51
Remote Node Configuration
A Remote Node represents both a remote gateway and the Internet behind it, across an ISDN connection. A Remote Node is required for placing calls to or answering calls from a remote network. Note that when you use Menu 4 to configure the Internet, your IRT-1001 or IRT­1002 will automatically add a Remote Node for you. Once a Remote Node is configured properly, traffic to the remote LAN will trigger the router to make a call automatically (i.e., Dial-On-Demand). Similarly, calls from the remote LAN will be answered automatically and security will be checked.
In this chapter, we will discuss the parameters that are protocol independent. The protocol dependent configuration will be covered in subsequent chapters. For TCP/IP, see the TCP/IP Configuration chapter on page 62. For IPX, see the Novell IPX Configuration chapter on page
71. For bridging, see the Bridging Configuration chapter on page 80. From the Main Menu, enter 11 to go to Menu 11—Remote Node Setup.
When in menu 11, enter the number of the Remote Nodes (1 to 4) that you wish to configure as shown below:
IRT-1000 series User's Guide
43
Page 52
Enter the Remote Node number to edit and you will go to the next submenu: 11.1 - Remote Node Profile, as shown below:
1. Rem Node Name—This is a required field. Enter a descriptive
name for the Remote Node, e.g., SJHQ. The name can be up to
eight characters long, and must be different from any other
Remote Node name or Remote Dial-in User name.
2. Active—Press the space bar to toggle between Yes and No.
When a Remote Node is deactivated, it has no effect on the
operation of the router, even though it is still kept in the database,
and can be activated in the future. Deactivated nodes are
displayed with a minus sign [-] at the beginning of the name in
Menu 11.
44
3. Call Direction—If this parameter is set to Both, your IRT-1001 or
IRT-1002 can both place and receive calls to/from this Remote
Node. If set to Incoming, the router will not place a call to this
Remote Node. If set to Outgoing, the router will drop any call from
this Remote Node. Several other fields in this menu depend on this parameter. For
example, in order to enable Call Back, the Call Direction must be
Both.
PLANET ISDN Router
Page 53
4. Incoming: Rem Node Login Name—Enter the login name that
this Remote Node will use when it calls into the router. The login
name in this field combined with the Rem Node Password will be
used to authenticate the incoming calls from this node.
5. Incoming: Rem Node Password—Enter the password used
when this Remote Node calls into the router.
6. Incoming: Rem CLID—This field is active only if Call Direction is
either Both or Incoming. Otherwise, an N/A appears in the field.
This is the Calling Line ID (the telephone number of the calling
party) of this Remote Node. If you enable the CLID Authen field in
Menu 13—Default Dial In, the router will check this number
against the CLID in the incoming call. If they do not match and the
CLID Authen is Required, then the router will reject the call.
7. Incoming: Call Back—This field will be valid only if Call
Direction is Both. Otherwise, an N/A appears in the field. This
field determines whether or not you wish the router to call back
after receiving a call from this Remote Node. If this option is
enabled, the router will disconnect the initial call from this node
and call it back at the Outgoing Primary Phone Number (see
below).
8. Outgoing: My Login Name—This is a required field if Call
Direction is either Both or Out. Enter the login name for the router
when it calls this Remote Node. If the login name is longer than
24 characters, only the first 23 will be displayed, with a +
displayed at the end.
9. Outgoing: My Password—This is a required field if Call
Direction is either Both or Out. Enter the password for the router
when it calls this Remote Node. If the password is longer than 20
characters then a + will be displayed at the end.
10. Outgoing: Authen—This field sets the authentication protocol
used for outgoing calls. Your IRT-1001 or IRT-1002 supports two authentication protocols:
PAP (Password Authentication Protocol) and CHAP (Challenge
Handshake Authentication Protocol).
IRT-1000 series User's Guide
45
Page 54
PAP sends the user name and password in plain text.
CHAP scrambles the password before it is sent over the wire.
Generally speaking, CHAP is more secure than PAP; however, PAP
is readily available on more platforms. The recommendation is to use
CHAP whenever possible. Turning off the authentication is
STRONGLY discouraged. Options for this field are:
CHAP/PAP—The router will try CHAP when CHAP is
requested by the Remote Node or PAP when PAP is requested by the Remote Node.
CHAP—use CHAP only.
PAP—use PAP only.
11. Outgoing: Pri(mary) Phone Sec(ondary) Phone Number—
Both the Primary Phone number and the Secondary Phone
number refer to the number that the router will dial to connect to
the Remote Node. The router will always call the Remote Node
using the Primary Phone number first. If the Primary Phone
number is busy or does not answer, the router will call the
Secondary Phone number if available. Once connected, the
router will use the BACP (Bandwidth Allocation Control Protocol)
to establish the second B-channel if Multilink PPP is enabled, and
the Remote Node supports MP and BACP.
46
Some areas require dialing # before the phone number for local calls.
A # symbol may be included at the beginning of the Primary Phone
number or Secondary Phone number.
12. Route—This field determines the protocols that your IRT-1001 or
IRT-1002 will route. The choices of this field are determined by
the features enabled on your router.
13. Bridge—Bridging is used (on the IRT-1002ST only) for protocols
that are not supported or not turned on in the previous Route field,
e.g., SNA. When bridging is enabled, the IRT-1002ST will forward
any packet that it does not recognize to this Remote Node;
otherwise, the unrecognized packets are discarded. The
PLANET ISDN Router
Page 55
disadvantage of bridging is that it usually generates large
amounts of traffic. Press the space bar to select either Yes or No.
14. Edit PPP Options—To edit the PPP options for this Remote
Node, move the cursor to this field, use the space bar to select
Yes and press ENTER. This will bring you to Menu 11.2—Remote
Node PPP Options For more information on configuring PPP
options, see the section Editing PPP Options.
15. IP Addr—This is a required field if Route is set to IP. Enter the IP
address of this Remote Node.
16. Edit IP/IPX/Bridge Options—To edit the parameters of the
protocols, go to this field, select Yes and press ENTER. This will
bring you to Menu 11.3—Remote Node Network Layer Options.
For more information on filling out this screen, refer to the chapter
pertaining to your specific protocol.
17. Telco Options: Transfer Rate—This field (which only applies to
outgoing calls) controls the rate at which the data is transferred
between your router and the Remote Node. The options for this
field are:
64K—The router will place 64Kbps (bits per second) digital
data calls.
56K—(For North America only) The router will place 56Kbps
digital data calls.
Lease—The router will place leased-line calls.
18. Telco Options: Allocated Budget (min)—This field will set a
budget outgoing call time for the Remote Node. The default for
this field is 0 for no budget control.
19. Telco Options: Period (hr)—This field will set the time interval
to reset the above outgoing call budget control.
20. Session Option: Input Filter Sets, Output Filter Sets and Call
Filter Sets—In these fields, select which filter set(s) you would
like to implement to filter the incoming and outgoing traffic
between this Remote Node and the router. You can choose from
12 different filter sets. In addition, you can link up to 4 filter sets
IRT-1000 series User's Guide
47
Page 56
together for further customization (e.g., 1, 5, 9, 12). Note that
spaces and commas are accepted in this field. For more information on customizing your filter sets, see the Filter
Configuration chapter starting on page 87. The default is blank, i.e.,
no filters defined.
21. Session Option: Idle Timeout (sec)—This value specifies the
number of idle seconds that elapses before the Remote Node is
automatically disconnected. Idle seconds is the period of time
where no data is passed between the Remote Node and your IRT-
1001 or IRT-1002. Administrative packets such as RIP are not
counted as data. The default is 300 seconds (5 minutes). Once you have completed filling in Menu 11.1—Remote Node Profile,
press ENTER at the message ‘ Press ENTER to Confirm...’ to confirm your selections, or press ESC at any time to cancel your selections.
Bandwidth on Demand
The Bandwidth on Demand (BOD) feature allows you to bundle both B channels in one connection. The second channel is added and subtracted dynamically according to traffic demand. The router uses the Bandwidth Allocation Control Protocol (BACP) and the Multilink Protocol (MP) to implement bandwidth on demand.
48
The configuration of bandwidth on demand focuses on the Base Transmission Rate (BTR) and the Maximum Transmission Rate (MTR). The relationship between BTR and MTR are shown below:
BTR & MTR Setting No. of channel(s)
used to initiate call
BTR = 64, MTR = 64 1 1 Off BTR = 64, MTR = 128 1 2 On BTR = 128, MTR = 128 2 2 Off
Max No. of channel(s) used
Bandwidth on demand
When bandwidth on demand is enabled, a second channel will be brought up if traffic on the initial channel is higher than the high Target
PLANET ISDN Router
Page 57
Utility number for longer than the specified Add Persist value. Similarly, the second channel will be dropped if the traffic level falls below the low Target Utility number for longer than the Subtract Persist value.
The Target Utility specifies the line utilization range at which you want your IRT-1001 or IRT-1002 to add or subtract bandwidth. The range is 30 to 64 kbps (kilobits per second). The parameters are separated by a ­. For example, 30-60 means the add threshold is 60 kbps and subtract threshold is 30 kbps. The router will perform bandwidth on demand only if it initiates the call. Addition and subtraction are based on the value set in the BOD Calculation field. If this field is set to Transmit or Receive, then traffic in either direction will be calculated to determine if a link should be added or dropped. Transmit will only use outgoing traffic to make this determination, and Receive will only use incoming traffic to make this determination.
If, after making the call to bring up a second channel, the second channel does not succeed in joining the Multilink Protocol bundle (because the remote device does not recognize the second call as coming from the same device), the router will hang up the second channel and continue with the first channel alone.
IRT-1000 series User's Guide
49
Page 58
Editing PPP Options
1. Encapsulation—Select CCP (Compression Control Protocol) for
the PPP or MP link. There are two options in this field.
Standard PPP—Standard PPP options will be used.
CISCO PPP—Cisco PPP options will be used.
50
2. Compression—Turn on the Stac Compression. The default for
this field is Off.
3. Multiple Link Options: BOD Calculation—Select the direction
of the traffic you wish to calculate in order to determine when to
add or subtract a link. The default for this field is Transmit or
Receive.
4. Multiple Link Options: Base Trans Rate—Select the base data
transfer rate for this Remote Node. This parameter is in kilobits
per second (Kbps). There are two options for this field:
64—Only one channel will be used.
128—Two channels will be used when a packet triggers a call.
PLANET ISDN Router
Page 59
5. Multiple Link Options: Max Trans Rate—Enter the maximum
data transfer rate allowed for this Remote Node. This parameter is
in kilobits per second. There are two options for this field:
64—At most one channel can be used.
128—A maximum of two channels can be used.
6. Multiple Link Options: Target Utility—Enter the two thresholds
separated by a—for subtracting and adding the second channel.
The default is 32-48.
7. Multiple Link Options: Add Persist—This parameter specifies
the number of seconds where traffic is above the adding threshold
before the router will bring up the second channel. The default is 5
seconds.
8. Multiple Link Options: Subtract Persist—This parameter
specifies the number of seconds where traffic is below the
subtraction threshold before the router drops the second channel.
The default is 5 seconds. Once you have completed Menu 11.2—Remote Node PPP Options,
press ENTER at the message ‘ Press ENTER to Confirm...’ to confirm your selections, or press ESC to cancel your selections.
IRT-1000 series User's Guide
51
Page 60
Page 61
Dial-In Configuration
You can configure your IRT-1001 or IRT-1002 to receive calls from Remote Dial-in Users (e.g., telecommuters) and Remote Nodes. There are several differences between Remote Dial-in Users and Remote Nodes:
1. The router can make calls to or answer calls from a Remote
Node. However, it will only answer calls from Remote Dial-in
Users.
2. Each Remote Node can have its own set of parameters such as
Bandwidth On Demand, Protocol, Security, etc., while all Remote
Dial-in Users share one common set, as defined in the Default
Dial In Setup (Menu 13).
3. Generally, Remote Dial-in Users are individual users who dial in
to the Your IRT-1001 or IRT-1002 directly from their workstations,
while Remote Nodes represent networks and are used for LAN-to-
LAN connections. This chapter discusses how to set up Default Dial-in parameters for both
Remote Node and Remote Dial-in Users. The following sections give two examples of how a Your IRT-1001 or IRT-1002 can be configured as a dial-in server for either or both.
By default, your IRT-1001 or IRT-1002 allows information for up to eight users to be kept. To let more than eight remote dial-in users access a IRT-1002, you can use a separate RADIUS server to provide remote authentication services. For details on using a separate RADIUS server, see the Using RADIUS Authentication section on page 108.
IRT-1000 series User's Guide
53
Page 62
Telecommuting
Telecommuting enables people to work at remote sites and still have
access to the resources in the business office. Typically, a
telecommuter will use a client workstation with TCP/IP or IPX and
dial-out capabilities, e.g., a Windows 95 PC or a Macintosh and an
ISDN Terminal Adapter (TA). For telecommuters to call in to your
LAN, you need to configure a Dial-In User Profile for each
telecommuter. Additionally, you need to configure the Default Dial-In
Setup to set the operational parameters for all dial-in users. You can
configure up to eight Remote Dial-in Users for your IRT-1001 or IRT-
1002.
An example of Remote Dial-in User application, telecommuting, is
shown below:
54
Dial-In Server Application
As Your IRT-1001 or IRT-1002 can also be used as a dial-in server.
This application allows the router to provide services for workstations
on a remote network. For the router to be set up as a dial-in server,
you need to configure the Default Dial-In Setup to set the operational
parameters for incoming call. Additionally, you will have to create a
Remote Node for the router on the remote network (see the Remote
Node Configuration chapter starting on page 43). An example of a
PLANET ISDN Router
Page 63
Your IRT-1001 or IRT-1002 being used as a dial-in server is shown
below:
Default Dial-In Setup
This section covers the default dial-in parameters. The parameters in
Menu 13 affect incoming calls from all Remote Dial-in Users and
Remote Nodes before authentication is completed. Once
authentication is completed, and if it matches a Remote Node, the
router will use parameters from that particular Remote Node.
IRT-1000 series User's Guide
55
Page 64
From the Main Menu, enter 13 to go to Menu 13 - Default Dial-in Setup. This section will describe how to configure the protocol-independent fields in this menu. For the protocol-dependent fields, refer to the appropriate chapters.
1. Telco Options: CLID Authen.—This field sets the CLID
authentication parameter for all incoming calls. There are three
options for this field:
None—No CLID is required.
Required—Must provide CLID, or call is disconnected.
Preferred—If the CLID is available then CLID will be used to
do authentication. If the CLID is not available the call will continue.
2. PPP Options: Recv. Authen.—This field sets the authentication
protocol used for incoming calls. User names and passwords are
configured in the next section (Remote users/Dial-in Users
Setup). Options for this field are:
CHAP/PAP—The router will try CHAP first, but PAP will be
used if CHAP is not available.
CHAP—Use CHAP only.
None—No authentication required.
56
3. PPP Options: Compression—The setting in this field
determines if Stac compression will be used. The default setting is
Yes.
4. PPP Options: Mutual Authen.—Some vendors, e.g. Cisco,
implement a type of mutual authentication. That is, the node that
initiates the call will request a user name and password from the
far end that they are dialing to. If the Remote Node that is dialing
in implements this type of authentication, set this field to Yes.
5. PAP Login—This field will only be enabled if the Mutual Authen.
field is set to Yes. Enter in the login name to be used to respond
to the far end’ s PAP authentication request. This field does not
apply to CHAP authentication.
PLANET ISDN Router
Page 65
6. PAP Password—This field will only be enabled if the Mutual
Authen. field is set to Yes. Enter in the PAP password to be used
to respond to the far end’ s authentication request. This field does
not apply to CHAP authentication.
7. Multiple Link Options: Max Trans Rate—Enter the maximum
data transfer rate between your router and the Remote Dial-in
User. The unit is in bits per second. There are two options for this
field:
64—At most, one B channel will be used.
128—A maximum of two channels can be used.
When the Your IRT-1001 or IRT-1002 calls back to the Remote
Dial-in User the maximum data transfer rate is always 64.
8. Callback Budget Management: Allocated Budget (min)—This
field will set a budget callback time for all the Remote Dial-in
Users. The default for this field is 0 for no budget control.
9. Callback Budget Management: Period (hr)—This field will set
the time interval to reset the above callback budget control.
10. Dial-In IP Address Supplied By: Dial-in User—If set to Yes, it
tells the Your IRT-1001 or IRT-1002 to allow a remote host to
specify its own IP address. This is to prevent the remote host from
using an invalid IP address and potentially disrupting the whole
network. If set to No, the remote host must use the IP address
assigned by the Your IRT-1001 or IRT-1002 from the IP pool,
configured below. The default is Yes.
11. Dial-In IP Address Supplied By: IP Pool—This field tells your
IRT-1001 or IRT-1002 to provide the remote host with an IP
address from the pool. This field is required if Dial-In IP Address
Supplied By: Dial-in User is set to No. You can configure this field
even if Dial-in User is set to Yes, in which case the Your IRT-1001
or IRT-1002 will accept the IP address if the remote peer specifies
one; otherwise, an IP address is assigned from the pool. If Dial-in
User is Yes and this field is No, the remote peer must supply its
own IP address, or communication will not be possible. The
default is No.
IRT-1000 series User's Guide
57
Page 66
12. IP Pool: IP Start Addr—This field is active only if you selected
Yes in the Dial-In IP Address Supplied By: IP Pool field. The IP
pool contains contiguous IP addresses and this field specifies the
first one in the pool.
13. IP Count (1,2)—In this field, enter the number (1 or 2) of the
addresses in the IP Pool. For example, if the starting address is
192.168.135.5 and the count is 2, then the pool will have
192.68.135.5 and 192.68.135.6
14. Dial-In IPX Net. Num. Supplied By: IPX Pool—This field tells
the IRT-1002 to provide the remote host with an IPX network
number from the pool. Otherwise, the router will generate a
random IPX network number. The default is No.
15. IPX Start Net. Num.—This field is active only if you selected Yes
in the Dial-In IPX Net. Num. Supplied By: IPX Pool field. The IPX
pool contains contiguous IPX network numbers and this field
specifies the first one in the pool.
16. IPX Count (1,16)—In this field, enter the number (1—16) of
network numbers in the IPX Pool. For example, if the starting
number is 12345678, and the count is 2, then the pool will have
12345678 and 12345679.
17. Session Options: Input Filter Sets and Session Options:
Output Filter Sets—In these fields, you need to select the filter
set(s) to filter the incoming and outgoing traffic between your IRT-
1001 or IRT-1002 and the Remote Dial-in User. Keep in mind that
these filter set(s) will only apply to all Remote Dial-in Users but
not the Remote Nodes.
58
You can choose from 12 different filter sets. In addition, you can link
up to 4 filter sets together for further customization (e.g., 1, 5, 9, 12).
Note that spaces and commas are accepted in this field. For more
information on customizing your filter sets, see the
PLANET ISDN Router
Page 67
Filter Configuration chapter on page 87. The default is blank, i.e., no
filters.
18. Session Options: Idle Timeout—This value is the number of
idle seconds that elapses before the dial-in user is automatically
disconnected. Idle Timeout is the period of time when there is no
data traffic between the dial-in user or Remote Node and the
router. This field will only be used if Recv. Authen is set to None
and the call is not mapped to any Remote Node or Remote Dial-in
User, or the router calls back to the Remote Dial-in User. Once you have completed filling in Menu 13—Default Dial-in Setup,
press ENTER at the message ‘ Press ENTER to Confirm...’ to save your selections, or press ESC at any time to cancel your selections.
Dial-In Users Setup
The following steps describe the setup procedure for adding a Remote Dial-in User. From the Main Menu, enter 14 to go to 14. Dial-in User Setup is shown below:
Select one of eight users by number, this will bring you to the next screen, Menu 14.1 - Edit Dial-in User.
IRT-1000 series User's Guide
59
Page 68
1. User Name—This is a required field. This will be used as the
login name for authentication. Choose a descriptive word for
login, e.g., kathyg.
2. Active—You can disallow dial-in access to this user by setting this
field to Inactive. When set to inactive, the user record is still kept
in the database for later activation. Deactivated users are
displayed with a—(minus sign) at the beginning of the name in
Menu 14.
3. Password—Enter the password for the Remote Dial-in User.
4. Callback—This field determines if the Your IRT-1001 or IRT-1002
will allow callback to the Remote Dial-in User upon dial-in. If this
control is set to Optional, the router will be able to call back to the
Remote Dial-in User if so requested by that user’ s system; if the
control is set to Mandatory, the router will attempt callback in all
cases. Callback entails disconnecting the call and dialing the
specified callback number (see below). The default setting of this
control is No.
5. Phone # Supplied by Caller—This control allows the Remote
Dial-in User to specify the callback telephone number on a call-
by-call basis. This is useful for when the Your IRT-1001 or IRT-
1002 returns a callback to a mobile user at different numbers,
60
PLANET ISDN Router
Page 69
e.g., a sales rep in a hotel. Note that the default is No, i.e., the
router always calls back to the fixed callback number.
6. Callback Phone #—If Callback is Yes, then this is a required
field. Otherwise, N/A will appear in the field. Enter the telephone
number to which the router will call back.
7. Rem CLID—If you have enabled the CLID Authen field in Menu
13, you need to specify the telephone number from which this
Remote Dial-in User calls. Your IRT-1001 or IRT-1002 will check
this number against the CLID in the incoming call. If they do not
match and the CLID Authen is Required, the router will reject the
call.
8. Idle Time-out—Enter the idle time (in seconds). This time-out
determines how long the dial-in user can be idle before the Your
IRT-1001 or IRT-1002 disconnects the call. Idle time is defined as
the period of time where there is no data traffic between the dial-
in user and the router. The default is 300 seconds (5 minutes).
More on CLID
CLID allows your IRT-1001 or IRT-1002 to authenticate the caller before a call is answered, thus saving the cost of a connection. The router uses the caller ID in the ISDN call setup message to match against the CLID in the database.
However, CLID may not be available due to your switch configuration. Besides authentication, another application of CLID is to combine it with
callback. For instance, your company pays for the connection charges for telecommuting employees, and you are using the Your IRT-1001 or IRT-1002 as the dial-in server. You can turn on both the CLID authentication and callback options for the dial-in users. By doing so, all usage are charged to the company instead of the employees, and your accounting department can avoid the hassles of accountability and reimbursement.
IRT-1000 series User's Guide
61
Page 70
Once you have completed filling in Menu 14.1—Edit Dial-in User, press ENTER at the message ‘ Press ENTER to Confirm...’ to save your selections, or press ESC at any time to cancel your selections.
This Page was deliberately left blank.
62
PLANET ISDN Router
Page 71
TCP/IP Configuration
This chapter shows you how to configure your IRT-1001 or IRT-1002
for TCP/IP. Depending on your particular applications, you will need
to configure different menus. For instance, Internet access is the
most common application of TCP/IP. For this application, you should
configure Menu 4. We will illustrate the configuration for other
applications in the following sections.
IP Subnet Mask
A subnet mask is a 32-bit quantity that, when logically ANDed with an IP address, yields the network number. For instance, the subnet masks for class A, B and C networks without subnetting are 255.0.0.0, 255.255.0.0 and 255.255.255.0, respectively.
To create more network numbers, you shift some bits from the host ID to the network ID. For instance, to partition a class C network number
192.68.135.0 into two, you shift 1 bit from the host ID to the network ID. Thus the new subnet mask will be 255.255.255.128; the first subnet will have network number 192.68.135.0 with hosts 192.68.135.1 to
129.68.135.126 and the second subnet will have network number
192.68.135.128 with hosts 192.68.135.129 to 192.68.135.254. It is recommended that you use the same subnet mask for all physical
networks that share an IP network number. The table below lists the additional subnet mask bits in dot decimal notations. To use to following table, write down the original subnet mask and substitute the higher order 0s with the dot decimal of the additional subnet bits. For instance, to partition your class C network 204.247.203.0 with subnet mask
255.255.255.0 into 16 subnets (4 bits), the new subnet mask becomes
255.255.255.240.
Number of Bits Dot Decimal
IRT-1000 series User's Guide
1 128
63
Page 72
Number of Bits Dot Decimal
2 192 3 224 4 240 5 248 6 252 7 254 8 255
LAN-to-LAN Application
A typical LAN-to-LAN application is to use the Your IRT-1001 or IRT­1002 to call from a branch office to the headquarters, as depicted in the following diagram.
64
For the branch office, you need to configure a Remote Node in order to dial out to the headquarters. Additionally, you may also need to configure Static Routes if some services reside beyond the immediate remote LAN.
Remote Node Setup
Follow the procedure in the Remote Node Configuration chapter
starting on page 43 to fill the protocol-independent parameters in
Menu 11, Remote Node Profile. For the protocol-dependent
parameters, follow the instructions below. If you are configuring the
PLANET ISDN Router
Page 73
router to receive an incoming call, you also need to set the default
dial-in parameters in menu 13 (see the Dial-In Configuration chapter
starting on page 53).
1. Route—Make sure IP is among the protocols in the Route field.
2. IP Address—Enter the IP address of the gateway at the remote
site (in this case, headquarters). If the remote router is using a
different IP address than the one entered here, your IRT-1001 or
IRT-1002 will drop the call.
3. Edit IP/IPX/Bridge—Press the space bar to change it to Yes and
press Enter to go to the Menu 11.3—Remote Node Network Layer
Options menu shown below:
1. Rem IP Address—This will show the IP address you entered for
this Remote Node in the previous menu.
2. Rem IP Subnet Mask—Enter the subnet mask for the remote
network.
3. My WAN Addr—Some implementations, especially the UNIX
derivatives, require hosts on both ends of the ISDN link to have
separate addresses from the LAN, and that the addresses must
have the same network number. If this is the case, enter the IP
address assigned to the WAN port of your IRT-1001 or IRT-1002.
IRT-1000 series User's Guide
65
Page 74
Note that this is the address assigned to the local Your IRT-1001
or IRT-1002, not the remote router.
1. Single User Account—This field should be set to yes to enable
the Single User Account (Network Address Translator) feature for
this site. Use the space bar to toggle between yes and no. See
page 39 for more information on the Single User Account feature.
2. Server IP address—If you are using the Single User Account
feature and you want to make a server accessible on your LAN,
e.g., a web server, accessible to outside users, enter that servers
IP address here.
3. Metric—The metric represents the “cost” of transmission for
routing purpose. IP routing uses hop count as the measurement of
cost, with a minimum of 1 for directly connected networks. Enter a
number that approximates the cost for this link. The number need
not be precise, but it must be between 1 and 16. In practice, 2 or
3 is usually a good number.
66
4. Private—This parameter determines if your IRT-1001 or IRT-
1002 will include the route to this Remote Node in its RIP
broadcasts. If set to yes, this route is kept private and not included
in RIP broadcasts. If no, the route to this Remote Node will be
propagated to other hosts through RIP broadcasts.
5. RIP—This parameter determines how your IRT-1001 or IRT-1002
handles RIP (Routing Information Protocol), and the default is
Both. If set to Both, your router will broadcast its routing table on
PLANET ISDN Router
Page 75
the WAN and incorporate RIP broadcasts from the other router
into its routing table. If set to In Only, your router will not
broadcast its routing table on the WAN; if set to Out Only, it will
broadcast its routing table but ignore any RIP broadcast packets
that it receives. If set to None, your IRT-1001 or IRT-1002 will not
participate in any RIP exchange with other routers. Usually, you
should leave this parameter at its default of Both and let RIP
propagate the routing information automatically. Once you have completed filling in the Network Layer Options Menu,
press ENTER to return to Menu 11. Press ENTER at the message ‘ Press ENTER to Confirm...’ to save your selections, or press ESC at any time to cancel your selections.
Static Route Setup
On a directly connected to the Internet, RIP usually handles the routing automatically. However, RIP cannot propagate across isolated networks, as in the case before a connection is made between the two subnetworks using one Class C IP address. Without a route, no packets can be forwarded to their destinations. A static route is used to resolve this problem by providing the Your IRT-1001 or IRT-1002 with some static routing information. As a matter of fact, when you configure the Internet Access or a Remote Node, a static route is implicitly created. An example is given below. In the example, stations on the 204.5.1.0/24 subnetwork can access the remote stations using the static route. The route will have a destination of 204.5.1.64/26 with the gateway address being that of the Remote Node (204.5.1.150).
IRT-1000 series User's Guide
67
Page 76
Note that in normal circumstances, your IRT-1001 or IRT-1002 will have adequate routing information after you configure it for Internet access and Remote Nodes; you do not need to configure additional static routes. You will need to configure static routes only for unusual cases, e.g., subnetting. To create additional static routes for IP, use Menu 12, Static Route Setup, as shown below:
68
PLANET ISDN Router
Page 77
1. Route Name—Enter a descriptive name for this route. This is for
identification purpose only.
2. Active—This field allows you to activate/deactivate this static
route.
3. Destination IP Address—This parameter specifies the IP
network address of the final destination. Routing is always based
on network number. If you need to specify a route to a single host,
use a subnet mask of 255.255.255.255 in the subnet mask field to
force the network number to be identical to the host ID.
4. IP Subnet Mask—Enter the subnet mask for this destination.
Follow the discussion on IP subnet mask in this chapter.
5. Gateway IP Address—Enter the IP address of the gateway. The
gateway is an immediate neighbor of the Your IRT-1001 or IRT-
1002 that will forward packets to the destination. On the LAN, the
gateway must be a router on the same segment as your IRT-1001
or IRT-1002; over ISDN, the gateway must be the IP address of
one of the Remote Nodes.
6. The Metric and the Private parameters have the same meaning
as those in the Remote Node Setup.
IRT-1000 series User's Guide
69
Page 78
Once you have completed filling in the menu, press ENTER at the message ‘ Press ENTER to Confirm...’ to save your selections, or press ESC at any time to cancel your selections.
70
PLANET ISDN Router
Page 79
Novell IPX Configuration
This chapter shows you how to configure the IRT-1002 for IPX.
Depending on your particular applications, you will need to configure
different menus. We will illustrate the configuration for some
applications in the following sections.
IPX Network Environment
Frame Type
The stations on an IPX network (both clients and servers) can run on four different frame types existing on one physical Ethernet cable. These frame types are 802.2, 802.3, Ethernet II (DIX), and SNAP.
Network Numbers
Whenever you are setting up an IPX routing environment, it is important to correctly configure the network numbers on the LAN. On any IPX network, there is an external network number, that is, the number associated with the frame type on the Ethernet cable to which the stations on the network are joined. In addition to this external network number, each NetWare server has its own internal network number. It is important to remember that every network number has to be unique for that entire Internetwork. So if a server station has an internal network number of 00000011, there must be no other network number (internal or external) of 00000011 anywhere on the entire network.
There are two different scenarios in which you would connect your IRT­1002 to a LAN: one with a server (server side), and one without a server (client side).
IRT-1000 series User's Guide
71
Page 80
IRT-1002 on LAN with Server
If the IRT-1002 will be connected to a LAN with an existing NetWare
server, you will not need to configure the IRT-1002 as a seed router,
and hence there will be no need for a network number parameter in
the Ethernet Setup Menu for the IRT-1002. Rather, the IRT-1002 will
learn the network number of the network it is attached to through the
regular RIP broadcasts sent by the server, and it will add this route to
its routing table.
IRT-1002 on LAN without Server
If the IRT-1002 is connected to a LAN without an existing NetWare
server station, then it needs to create a unique external network
number to apply to that frame on the LAN. This IRT-1002 must then
be configured as a Seed Router, and the network number can be
configured in the Ethernet Setup Menu. The network number must be
unique and not used anywhere else on the entire Internetwork.
IPX Spoofing
72
The IRT-1002 comes with several pre-defined call filters designed to
prevent certain IPX packets from triggering a call to a Remote Node.
PLANET ISDN Router
Page 81
These filters should inform your IRT-1002 which packets should be
ignored as traffic. When you are routing IPX packets, the default call filters are defined
as follows:
Block periodical SAP and RIP response messages. Block NetWare serialization packets. Allow SAP and RIP inquiry packets.
These call filters prevent the IRT-1002 from making a call to the Remote Node, thus preventing the expense of an unnecessary phone call.
IPX Ethernet Setup
The first step is to set up the IRT-1002 on the LAN. From menu 3,
select option 3 to go to Menu 3.3—Novell IPX Ethernet Setup, shown
below:
1. Seed Router—Determine if the IRT-1002 is to act as a seed
router. This value depends on the existing network. If there is a
NetWare server providing the network number, select No. If there
is no NetWare server providing the network number, select Yes.
IRT-1000 series User's Guide
73
Page 82
2. Frame Type—For every frame type that the IRT-1002 needs to
support, you need to set the corresponding field to Yes. The
frame type(s) selected here must be the same frame type(s) as
the server or client stations on that network. Otherwise, the
devices will not be able to communicate. You can select one or
more of these four frame types:
802.2
802.3
Ethernet II
SNAP
3. IPX Network #—If you selected the IRT-1002 to act as a seed
router, you need to provide a unique network number to be
associated with the network that the IRT-1002 has joined. Keep in
mind that this number must not be used anywhere else on the
entire Internetwork. Once you have completed filling in the Menu 3.3, press ENTER at the
save message to save your selections, or press ESC at any time to cancel your selections.
LAN-to-LAN Application
74
A typical LAN-to-LAN application is to use the IRT-1002 to call from a branch office to headquarters such that all of the stations on the branch office network have access to the server at the headquarters, as depicted in the following diagram:
PLANET ISDN Router
Page 83
For the branch office, you need to configure a Remote Node in order to dial out to headquarters.
Remote Node Setup
Follow the procedures in the Remote Node Configuration chapter starting on page 43 to fill the protocol-independent parameters in Menu 11, Remote Node Profile. For the protocol-dependent parameters, follow the ensuing instructions. If the IRT-1002 is configured to receive an incoming call, you can configure the default dial-in parameters in menu 13 (see the Dial-In Configuration chapter starting on page 53).
1. Route—Make sure IPX is among the protocols in the Route field.
2. Edit IP/IPX/Bridge—Press the space bar to change it to Yes and
press Enter to go to the network layer options menu.
IRT-1000 series User's Guide
75
Page 84
1. Dial-On-Query—This field is necessary for the IRT-1002 on the
client side LAN. When set to Yes, any Get Service SAP or RIP
broadcasts coming from the LAN will trigger the IRT-1002 to
make a call to that Remote Node. If it is set to No, the IRT-1002
will not make the outgoing call.
2. Rem LAN Net #—In this field, enter the internal network number
of the NetWare server on the remote side LAN. The router will
create a route to access this server.
3. My WAN Net #—In this field, you can enter in the WAN network
number of the device that you are connecting to. This number will
be used for negotiation between the router and the remote device.
If you leave this field as 00000000, the router will select the
greater WAN network number between the two devices.
4. Hop Count—This field indicates the number of intermediate
networks that must be passed through to reach the Remote Node.
The default is one (1).
5. Tick Count—This field indicates the time-ticks required to reach
the Remote Node. The default is two (2).
6. W/D Spoofing (min)—This field is used for the router when it is
on the server side LAN. The router can spoof a response to a
server’ s watchdog request after the connection is dropped. In this
76
PLANET ISDN Router
Page 85
field, enter in the time (number of minutes) that you want the
router to spoof the watchdog response.
7. SAP/RIP Timeout (min)—This field indicates the amount of time
that you want the router to maintain the SAP and RIP entries
learned from this Remote Node in its internal tables after the
connection has been dropped. If this information is retained, then
the router will not have to get the SAP information when the line is
brought back up. Enter the time (number of minutes) in this field. Once you have completed filling in the Network Layer Options Menu,
press ENTER to return to Menu 11.1. Press ENTER at the message ‘ Press ENTER to Confirm...’ to save your selections, or press ESC at any time to cancel your selections.
Static Route Setup
If your LAN-to-LAN application has NetWare servers on both sides of the link, then all NetWare client stations will have access to a server on their LAN as shown below:
This may present a problem if you desire your client station to access a server at a remote site. For example, in the above diagram, suppose that a client station on the network on the left wishes to access the NetWare server on the right (internal network number = 111). However, the SAP broadcasts will receive a response from the server on the left
IRT-1000 series User's Guide
77
Page 86
(internal network number = 444). A static route is used to resolve this problem by providing the router with some static routing information to access the remote server.
From Menu 12, select one of the four possible IPX Static Routes as shown below:
1. Server Name—In this field, enter in the name that has been
configured for the server. This name must be the exact name
configured in the NetWare server.
78
2. Network #—This field contains the internal network number of the
remote server which you wish to access. Do not use 00000000 or
FFFFFFFF for this field.
3. Node #—This field contains the address of the node on which the
server resides. If you are using a Novell IPX implementation, this
value is 000000000001.
4. Socket #—This field contains the socket number on which the
server will receive service requests. The default for this field is
hex 0451.
5. Type #—This field identifies the type of service the server
provides. The default for this field is hex 0004.
PLANET ISDN Router
Page 87
6. Gateway Node—In this field, enter the number (1-4) of the
Remote Node that is linked to this static route. That is, the
Remote Node that you wish to route the packet to. The Hop Count and Tick Count fields have the same meaning as those
in the Remote Node Setup. Once you have completed filling in the menu, press ENTER at the
message ‘ Press ENTER to Confirm...’ to save your selections, or press ESC at any time to cancel your selections.
IRT-1000 series User's Guide
79
Page 88
This Page was deliberately left blank.
80
PLANET ISDN Router
Page 89
Bridging Configuration
This chapter shows you how to configure the Bridging options for the IRT-1002. Depending on your particular applications, you will need to configure different menus. We will illustrate the configuration for some applications in the following sections.
IPX Spoofing
The IRT-1002 comes with several pre-defined call filters designed to prevent certain IPX packets from triggering a call to a Remote Node. These filters should inform your IRT-1002 which packets should be ignored as traffic.
When you are bridging IPX packets, the default call filters are defined as follows:
Block periodical SAP and RIP response messages. Block SAP and RIP inquiry packets if set to Handle IPX as Server. Allow SAP and RIP inquiry packets if set to Handle IPX as Client
or None. These call filters prevent the IRT-1002 from making a call to the Remote
Node, thus preventing the expense of an unnecessary phone call.
Bridge Ethernet Setup
Bridging is used to forward packets of unsupported protocols whose destination is not on the local Ethernet to the WAN.
IRT-1000 series User's Guide
81
Page 90
Basically, all non-local packets are bridged to the WAN; however, the IRT-1002 applies special handling for certain IPX packets to reduce the number of calls, depending on the setting of the “Handle IPX” field.
If this field is set to None, nothing is done to IPX traffic. If it is set to Client, all RIP and SAP (Service Advertising
Protocol) periodical response packets will not trigger the call. If it is set to Server, no RIP or SAP packets will trigger the call. In
addition, during the time when the ISDN line is down, the IRT-
1002 will reply to the server’ s watchdog messages on behalf of
remote clients. The period of time that the IRT-1002 will do this is
linked to the Ethernet Address Timeout parameter in each
Remote Node (see the Remote Node Configuration chapter
starting on page 43). When a remote Ethernet address is aged
out, there is no need to maintain its connection to the IPX server. From Menu 3—Ethernet Setup, enter “4” to go to Menu 3.4—Bridge
Ethernet Setup shown below:
82
Handle IPX—Set this parameter to None if there is no IPX traffic
on the LAN or if you do not want to apply any special handling for
IPX. Set it to Client if there are only client workstations on the
LAN. Set to Server if there are only IPX servers on the LAN.
PLANET ISDN Router
Page 91
If there are both clients and servers on the LAN, then the setting
depends on if the local clients will access the remote servers. If they
do, set to Client and set Dial-On-Broadcast in menu 11.2 to Yes to
allow the client queries to trigger the call. If they do not, set it to
Server. When you are finished, press ENTER at the message ‘ Press ENTER to
Confirm...’ to save your selections, or press ESC at any time to cancel them.
LAN-to-LAN Application
A typical LAN-to-LAN application is to use the IRT-1002 to call from one office to another office such that stations on one network have access to stations on the remote side and vice versa. You will need to configure a Remote Node in order to dial out to another office.
Remote Node Setup
Follow the procedure in the Remote Node Configuration chapter starting on page 43 to fill the protocol-independent parameters in Menu 11, Remote Node Profile. For the protocol-dependent parameters, follow the ensuing instructions:
1. Bridge—Make sure this field is set to Yes.
2. Edit IP/IPX/Bridge—Press the space bar to change it to Yes and
press Enter to go to the network layer options menu as seen
below:
IRT-1000 series User's Guide
83
Page 92
1. Dial-On-Broadcast—This field is necessary for the IRT-1002 on
the caller side LAN. When set to Yes, any broadcasts coming
from the LAN will trigger the IRT-1002 to make a call to that
Remote Node. If it is set to No, the IRT-1002 will not make the
outgoing call.
2. Ethernet Addr Timeout (min)—In this field, enter the time
(number of minutes) that you wish the IRT-1002 to retain the
Ethernet Addr information in its internal tables while the line is
down. If this information is retained, the IRT-1002 will not have to
re-negotiate the protocol and recompile the tables when the line is
brought back up. Once you have completed filling in the Network Layer Options Menu,
press ENTER to return to Menu 11. Press ENTER at the message ‘ Press ENTER to Confirm...’ to save your selections, or press ESC at any time to cancel your selections.
Default Dial-In Setup for Bridge
There is only one parameter you need to fill out for Bridging applications.
84
PLANET ISDN Router
Page 93
PPP Options: Recv. Authen.—verify that this field is not set to
None. Bridging applications must have some sort of
authentication turned on in order to match to a Remote Node. Once you have completed filling in the menu, press ENTER at the
message ‘ Press ENTER to Confirm...’ to save your selections, or press
ESC at any time to cancel your selections.
Bridge Static Route Setup
You can configure Bridge static routes for your Bridging applications.
1. Route Name—For identification purposes enter a name for the
bridge static route.
2. Active—Indicates whether the static route is active or not.
3. Ether Address -Enter the MAC address of the destination device
that you wish to bridge your packets to.
4. IP Address—If available, enter the IP address of the destination
device that you wish to bridge your packets to.
IRT-1000 series User's Guide
85
Page 94
5. Gateway Node—Enter the number (1-4) of the Remote Node that
is linked to this static route. When an incoming packet’ s
destination Ether (MAC) address matches the value entered
above, then it will trigger a call to this Remote Node. Once you have completed filling in the menu, press ENTER at the
message ‘ Press ENTER to Confirm...’ to save your selections, or press ESC at any time to cancel your selections.
86
PLANET ISDN Router
Page 95
Filter Configuration
About Filtering
Your IRT-1001 or IRT-1002 uses filters to decide whether or not to allow passage of a data packet and/or to make a call over the ISDN line. There are three types of filters involved: incoming data filters, outgoing data filters, and call filters. Data filters screen the data to determine if the packet should be allowed to pass. Call filters are used to determine if a call should be placed.
Outgoing packets must pass through the data filters before they encounter the call filters. Call filters are divided into two groups: default call filters and user-defined call filters. The router has default call filters that filter out administrative packets, e.g., RIP and SAP packets. The router applies the default filters first, and then the user-defined call filters if applicable, as shown below:
For incoming packets, your IRT-1001 or IRT-1002 applies data filters only. Packets are processed depending upon whether a match is made.
IRT-1000 series User's Guide
87
Page 96
The router allows you to customize the filter sets that you wish to use. This following sections describe how to configure the router’ s filter sets.
IRT-1000’ s Filter Structure
You can configure up to twelve filter sets with six rules in each set. Therefore, your IRT-1001 or IRT-1002 allows you to customize up to 72 filter rules (12 × 6).
When implementing these filter sets, you can link up to four of the filter sets together to screen the data packet. Therefore, with each filter set having up to six rules, you can have a maximum of 24 rules active for a single filtering application.
Configuring a Filter Set
In order to distinguish between the 12 filter sets, each filter set should have a name or some comments. You can edit these comments in the following way.
1. From the Main Menu, select option 21. This will take you to Menu
21—Filter Set Configuration.
88
2. This menu lets you choose from twelve filter sets. Select the filter
set you wish to configure (1-12). This will take you to the Edit Comments field. You can edit the
comments you wish to use to identify that filter set. The comments for any given filter set can contain up to 15 characters.
Once you have completed filling in Edit Comments field, press ENTER at the message ‘ Press ENTER to Confirm...’ to confirm your selections, or press ESC at any time to cancel your selections. The new information will now be displayed in the read-only section of Menu 21—Filter Set Configuration as shown below:
PLANET ISDN Router
Page 97
After you press ENTER, you will be taken to Menu—21.1—Filter Rules Summary as seen below. The information displayed in this menu is read-only. From here, you can examine the parameters of each rule that you have configured for that set. Following are brief descriptions of the column headings in this menu.
#—Refers to the filter rule number (1-6).A—Refers to Active. Y means the filter rule is active and N
means the filter rule is inactive. Type—Refers to the type of filter rule. This can display GEN for
generic, IP for TCP/IP, or IPX for Novell IPX. Filter Rules—The filter rule parameters will be displayed here
(see below). M—Refers to More. Y means there are more rules to check, N
means there aren’ t. m—Refers to Action Matched. F means to forward the packet, D
means to drop the packet, and N means check the next rule. The
Action Matched control has no effect when the More control (see
preceding) is set to Y.
IRT-1000 series User's Guide
89
Page 98
n—Refers to Action Not Matched. F means to forward the packet,
D means to drop the packet, and N means check the next rule.
The Action Not Matched control has no effect when the More
control is set to Y.
If the filter type is IP (TCP/IP), the following abbreviations will be used:
Pr—Protocol.
SA—Source Address.
90
SP—Source Port number.
DA—Destination Address.
DP—Destination Port number.
If the filter type is GEN (generic), the following abbreviations will be used:
Off—Offset.
Len—Length.
If the filter type is IPX (Novell IPX), the following abbreviations will be used:
PLANET ISDN Router
Page 99
PT—IPX Packet Type.
SS—Source Socket.
DS—Destination Socket.
For more information on configuring the filter rule parameters, refer to the next section.
To configure a specific filter rule, simply select the number of the filter rule (1-6) you wish to configure and press ENTER. This will take you to Menu 21.1.1—TCP/IP Filter Rule (next section).
Configuring a Filter Rule
There are four types of filter rules that you can configure. Some of the parameters will differ depending on the type of rule. When you first enter the filter rule menu, you will be presented with Menu 21.1.1—TCP/IP Filter Rule. If you wish to configure another type of filter rule, you need to select the appropriate type (by pressing SPACE bar) under the Filter Type field and press ENTER. This will bring you to the corresponding menu.
TCP/IP Filter Rule
This section will show you how to configure a TCP/IP filter rule for your outer. The fields in the menu are indicated in bold type.
IRT-1000 series User's Guide
91
Page 100
1. Active—In this field, you can make the filter rule active or
inactive. There are two options:
Yes.
No.
2. IP Protocol—Protocol refers to the IP specific number of the
protocol. The range for this value should be between 0 and 255.
For example, 6 refers to the TCP protocol.
3. IP Source Route—Determine, Yes or No, whether to check the
source route.
4. Destination: IP Addr—In this field, enter the destination IP
Address of the packet you wish to filter. The address is usually
written in dotted decimal notation such as a.b.c.d where a, b, c,
and d are numbers between 0 and 255.
5. Destination: IP Mask—In this field, enter the IP mask that will be
used to mask the bits of the IP Address given in Destination: IP
Addr.
6. Destination: Port #—Enter the destination port of the packets
that you wish to filter. The range of this field is 0 to 65535.
92
PLANET ISDN Router
Loading...