manualshive.com logo in svg

Cabletron Systems SMALL OFFICE CyberSwitch 150, Manual, Page: 19 / 106

Share
Download
Cabletron Systems SMALL OFFICE CyberSwitch 150 Manual Download Page 19

Small Office Remote Access Switch      19

R

EMOTE

 B

RIDGING

 N

ETWORK

 

WITH

 S

ECURITY

Initial Installation Steps

System Name:  

  Remote Bridge      

     PAP Password:_______________   CHAP Secret:___________________

R

ESOURCES

L

INES

BRI Lines

* Hunt Group Number: 13135551111

Type

Slot 

Switch type

Synchronization type

BRI

1

NI-1

Ethernet_1

2 

Name

Slot

Port

Line type

Call 

screen

TEI

SPID

Directory 

number

Line1

1

1

PPP

Auto

3135551111

13135551111*

3135551112

13135551112*

 S

YSTEM

 D

ETAILS

Summary of Contents for SMALL OFFICE CyberSwitch 150

Page 1: ...SMALL OFFICE REMOTE ACCESS SWITCH EXAMPLE NETWORKS Release 7 2 Cabletron Systems 603 332 9400 phone 603 337 3075 fax support ctron com...

Page 2: ...LATED TO THIS MANUAL OR THE INFORMATION CONTAINED IN IT EVEN IF CABLETRON SYSTEMS HAS BEEN ADVISED OF KNOWN OR SHOULD HAVE KNOWN THE POSSIBILITY OF SUCH DAMAGES Copyright 1998 by Cabletron Systems Inc...

Page 3: ...ics 1993 including one or more U S Patents No 4701745 5016009 5126739 and 5146221 and other pending patents Telenetworks Copyright 1991 92 93 by Telenetworks All rights reserved FCC NOTICE This device...

Page 4: ...Control Council for Interference by Information Technology Equipment VCCI If this equipment is used in a domestic environment radio disturbance may arise When such trouble occurs the user may be requ...

Page 5: ...Resources 19 Lines 19 Device Information 20 Bridging and Routing Information 22 Bridging 22 IP Routing 22 Configure the CyberSWITCH 23 Configuring the Options 23 Configuring the Security 24 Save Conf...

Page 6: ...n Steps 58 System Details 60 Resources 60 Lines 60 Bridging and Routing Information 61 Bridging 61 IP Routing 61 Bridging and Routing Information 62 Bridging 62 IP Routing 62 Device Information 63 Con...

Page 7: ...e the Remote Devices 92 Verify the Installation 92 AppleTalk Routing Network 93 Overview 93 Initial Installation Steps 93 Resources 95 Lines 95 AppleTalk Routing 96 Configure the CyberSWITCH 98 Config...

Page 8: ...word and one device will not This network uses BRI lines IP Routing Network An IP routing network with devices accessing the network from their homes IP Routing Network with Remote Bridge Devices A sm...

Page 9: ...matter how complicated the network These steps are completing the requirement worksheets ordering ISDN service powering on the system accessing Release Notes connecting an administration console sett...

Page 10: ...LINES BRI Lines PRI Lines V 35 and RS232 Lines Type Slot Switch type Synchronization type BRI 1 5ESS Ethernet_1 2 Name Slot Port Line type Call screen TEI SPID Directory number Line1 1 1 PPP Auto Name...

Page 11: ...Bridge Filters Bridge Dial Out Known Connect List IP Routing X enabled disabled Mode of Operation router X IP host LAN Name IP address Mask Unnumbered WAN need don t need Remote LAN Name IP address Ma...

Page 12: ...will next add the line information Press 2 at the Physical Resources Menu and press 1 to add a line First you will be prompted for the line name You will then be asked to select which slot and port y...

Page 13: ...uting enabled Under the Option Menu select the bridging option and follow the instructions to enable bridging This network is a bridged network but we are going to configure an IP option the IP host o...

Page 14: ...IP applications The steps below describe the configuration steps needed for the above example To enable the IP Host Operating Mode 1 Select IP Operating Mode from the IP configuration menu 2 Select I...

Page 15: ...RIP v2 authentication key required only if the IP RIP v2 authentication control has been configured with a value other than No Authentication For more detailed information on the IP host operating mo...

Page 16: ...uted On the CyberSWITCH Verify resources are operational Issue dr command Look for BRI line messages Look for LAN initialized messages Look for Bridge initialized messages Verify WAN Lines Available C...

Page 17: ...ll four phone numbers If the first line is busy the next line is automatically used and so on until a free line is found A Hunt Group number can be arranged through your Service Provider INITIAL INSTA...

Page 18: ...C 13135551212 13135552121 Bridge Ethernet Address 000123456789 Password JXF30 User Name Mike Mann BRI Hunt Group Number 13135551111 13135551111 13135551112 ISDN BRI PC 13135556789 13135559876 Bridge E...

Page 19: ...PAP Password _______________ CHAP Secret ___________________ RESOURCES LINES BRI Lines Hunt Group Number 13135551111 Type Slot Switch type Synchronization type BRI 1 NI 1 Ethernet_1 2 Name Slot Port...

Page 20: ...idge Password JXF30 CLID s 13135551212 13135552121 Bridging enabled enabled disabled IP enabled enabled disabled Make calls for bridged data enabled disabled IP Address on WAN link For IP RLAN IP Sub...

Page 21: ...e Ethernet Address 003456789000 Bridge Password CLID s 13135556789 13135559876 Bridging enabled enabled disabled IP enabled enabled disabled Make calls for bridged data enabled disabled IP Address on...

Page 22: ...Dial Out Known Connect List IP Routing X enabled disabled Mode of Operation router IP host LAN Name IP address Mask Unnumbered WAN need don t need Remote LAN Name IP address Mask Traditional WAN Name...

Page 23: ...ta links are handled differently on a NI 1 switch Some BRI lines have only one phone number for the Data Link but can handle two calls one for each bearer channel For NI 1 switches the BRI line has tw...

Page 24: ...all security options enabled which is acceptable for this network No System Information or Administration Sessions are required Therefore no changes are necessary CONFIGURING THE DEVICE LEVEL DATABAS...

Page 25: ...ration Menu will then be displayed with the preconfigured default values We do not want to use the default ISDN Line Protocol of PPP Press 1 to configure this device s ISDN line protocol The device Mi...

Page 26: ...his device is also an HDLC bridge and is configured using the same type of authentication as device Mike Mann except we will configure no password for device Pat Smith Enter 003456789000 for the bridg...

Page 27: ...guration files press RET to exit the CFGEDIT program Reboot the system to activate your changes VERIFY THE INSTALLATION Steps on how to verify the installation are detailed in the System Verification...

Page 28: ...e steps are completing the requirement worksheets ordering ISDN service powering on the system accessing Release Notes connecting an administration console setting up Telnet access upgrading system so...

Page 29: ...lation Steps File Server BRI PC BRI 128 1 1 1 192 1 1 2 Rick Bear ISDN LAN 131 1 0 0 Router 1 131 1 1 16 128 1 1 16 WAN Interface 192 1 1 1 Host SITE San Fran BRI 128 1 1 3 Todd Jones Host BRI 192 1 1...

Page 30: ...work PAP Password _______________ CHAP Secret ___________________ RESOURCES LINES BRI Lines Type Slot Switch type Synchronization type BRI 1 NTT Ethernet_1 3 Name Slot Port Line type Call screen TEI S...

Page 31: ...Ethernet Address Bridge Password CLID s Bridging enabled enabled disabled IP enabled X enabled disabled Make calls for bridged data enabled disabled IP Address on WAN link 192 1 1 2 For IP RLAN IP Su...

Page 32: ...dge Password CLID s Bridging enabled enabled disabled IP enabled X enabled disabled Make calls for bridged data enabled disabled IP Address on WAN link 128 1 1 2 For IP RLAN IP Sub network number 0 0...

Page 33: ...e Ethernet Address Bridge Password CLID s Bridging enabled enabled disabled IP enabled X enabled disabled Make calls for bridged data enabled disabled IP Address on WAN link 192 1 1 23 For IP RLAN IP...

Page 34: ...dge Password CLID s Bridging enabled enabled disabled IP enabled X enabled disabled Make calls for bridged data enabled disabled IP Address on WAN link 128 1 1 3 For IP RLAN IP Sub network number 0 0...

Page 35: ...al Out Known Connect List IP Routing X enabled disabled Mode of Operation X router IP host LAN Name SanFran IP address 128 1 1 1 Mask Unnumbered WAN need don t need Remote LAN Name IP address Mask Tra...

Page 36: ...Link The following sections provide instructions for completing the remaining configuration steps CONFIGURING THE CYBERSWITCH OPTIONS To begin the configuration of the system options press 2 at the Ma...

Page 37: ...ue you should enter is 128 1 1 1 You will then be asked for the IP Subnet mask information In our example we are using a Class B address without any subnetwork addressing that requires 16 bits of the...

Page 38: ...255 2 128 1 0 0 3 255 255 255 255 4 0 0 0 0 5 Specify Explicitly Enter a Transmit Broadcast Address from the above menu default 1 RET RIP Send Control 1 Do Not Send 2 RIP Version 1 3 RIP Version 1 Co...

Page 39: ...ng or disabling host routes propagation The RIP host routes propagation scheme determines how the WAN local route will be propagated via RIP The default value is Host Routes Propagation is currently D...

Page 40: ...in Menu CONFIGURING THE SECURITY This example has remote devices and the device information for each of those devices must be configured Device security is used and the remote devices are configured i...

Page 41: ...mation for our first device Rick Bear After the new device name has been specified a screen similar to the following is displayed Select 1 ISDN The ISDN Configuration Menu then displays preconfigured...

Page 42: ...the displayed screen Configuration is now complete for device Rick Bear Following this example complete the entry of information for all remaining devices Device ISDN Line Protocol Menu Device Rick B...

Page 43: ...RING THE NETWORK LOGIN INFORMATION This network doesn t require the use of a user level database so network login information configuration is not necessary SAVE CONFIGURATION FILES We have now config...

Page 44: ...tional Issue dr command Look for BRI line messages Look for LAN initialized messages Check for IP routing initialized message in log Verify WAN Lines Available Connect WAN lines Issue dr command Look...

Page 45: ...ers at Carmel or Monterey sites Uses the On node Device Database for authentication database Uses PAP to authenticate remotes CHAP on central site Carmel and Monterey dial into Corporate Office Corpor...

Page 46: ...Office ISDN Host File Server CSX150 128 1 1 1 RLAN Interface 198 12 10 1 BRI BRI BRI HDLC Bridge HDLC Bridge Host Host Carmel Monterey IP Sub Network Number 198 12 10 0 Remote Satellite Offices 198 1...

Page 47: ...Resources System Name Corp PAP Password ______________ CHAP Secret _______________ RESOURCES LINES BRI Lines Type Slot Switch type Synchronization type BRI 1 NTT Ethernet_1 2 Name Slot Port Line type...

Page 48: ...Bridge Password q3bay CLID s Bridging enabled X enabled disabled IP enabled enabled X disabled Make calls for bridged data enabled X disabled IP Address on WAN link For IP RLAN IP Sub network number 1...

Page 49: ...dge Ethernet Address 222222222222 Bridge Password dharry CLID s Bridging enabled X enabled disabled IP enabled enabled X disabled Make calls for bridged data enabled X disabled IP Address on WAN link...

Page 50: ...ng X enabled disabled Mode of Operation X router IP host LAN Name CorpOffice IP address 128 1 1 1 Mask 255 255 0 0 Unnumbered WAN need don t need Remote LAN Name Satellites IP address 198 12 10 1 Mask...

Page 51: ...ximum Number of Digits to Verify Repeat Add Data Links for second Data Link The following sections provide instructions for completing the remaining configuration steps CONFIGURING THE CYBERSWITCH OPT...

Page 52: ...128 1 1 1 You will then be asked for the IP subnet mask information In our example we are using a Class B address without any subnetwork addressing that requires 16 bits of the address to define the n...

Page 53: ...lt 16 RET Enter the packet encapsulation type 1 for ETHERNET 2 for SNAP default ETHERNET RET Enter the MTU size in bytes default 1500 RET Transmit Broadcast Address 1 128 1 255 255 2 128 1 0 0 3 255 2...

Page 54: ...e configured in the on node authentication database Device security using an on node authentication database are the default values Before beginning note the following This is a system configuration u...

Page 55: ...s press 2 On node Device entries Press 1 to configure the information for our first device Monterey You will be prompted for the device name followed by the Device Table Menu Select 1 ISDN The ISDN Me...

Page 56: ...plicable for this example Return to the On node Device Entries Menu Configuration is now complete for the device Monterey Enter the device Carmel in the same way providing its Bridge Ethernet address...

Page 57: ...the old NODE NEI file will be called NODE BAK After you save the configuration files press RET to exit the CFGEDIT program Reboot the system to activate your changes VERIFY THE INSTALLATION Steps on h...

Page 58: ...sheet This chapter discusses the configuration process for SITE1 and SITE2 Note that the Network Topology and the System Details worksheets are identical for both systems Each system has unique Routin...

Page 59: ...Steps NETWORK TOPOLOGY Host 1 File Server Internet Router LAN 1 128 1 1 8 128 1 1 3 128 1 1 7 LAN Interface 128 1 1 1 CSX150 Phone Number 918105551234 IP UnNumbered Interface for SITE1 and SITE2 Host...

Page 60: ...____________ CHAP Secret _____df8sfds33_________ ___Site2____ _____ikcd98s_____ RESOURCES LINES BRI Lines Type Slot Switch type Synchronization type BRI 1 5ESS Ethernet_1 2 Name Slot Port Line type Ca...

Page 61: ...ted Bridge Filters Bridge Dial Out Known Connect List IP Routing X enabled disabled Mode of Operation X router IP host LAN Name LAN1 IP address 128 1 1 1 Mask Unnumbered WAN X need don t need Remote L...

Page 62: ...wn Connect List IP Routing X enabled disabled Mode of Operation X router IP host LAN Name LAN2 IP address 128 3 3 1 Mask Unnumbered WAN X need don t need Remote LAN Name IP address Mask Traditional WA...

Page 63: ...Secret ikcd98s IP Host ID Bridge Ethernet Address Bridge Password CLID s Bridging enabled enabled disabled IP enabled X enabled disabled Make calls for bridged data enabled disabled IP Address on WAN...

Page 64: ...idge Ethernet Address Bridge Password CLID s Bridging enabled enabled disabled IP enabled X enabled disabled Make calls for bridged data enabled disabled IP Address on WAN link unnumbered For IP RLAN...

Page 65: ...tion press 2 at the Main Menu The options menu will then be displayed For this example we only need IP routing enabled The first thing to do disable bridging After that we will need to enable IP routi...

Page 66: ...work numbers for the WAN connections do not have to be created and therefore saving IP sub network numbers First we will add the LAN interface Press 2 to edit the IP Interface Information Press 1 to a...

Page 67: ...Enter the packet encapsulation type 1 for ETHERNET 2 for SNAP default ETHERNET RET Enter the MTU size in bytes default 1500 RET Transmit Broadcast Address 1 128 1 255 255 2 128 1 0 0 3 255 255 255 255...

Page 68: ...ce you need to enter SITE2 s device name for the next hop device To do this you must already have configured device SITE2 Return to the Main Menu to begin the device configuration ADDING DEVICE SITE2...

Page 69: ...logical connection This sets an upper boundary for line and capacity utilization This upper boundary allows you to keep one remote device from crowding out other devices and using an unfair share of...

Page 70: ...e configuring CHAP security we opt to configure a CHAP secret ikcd98s After the secret has been entered the Device Authentication Configuration Menu will appear as follows Again return to the Device T...

Page 71: ...ess N when asked if this is the default route Next enter the destination IP address of the network to which you want to connect You should enter SITE2 s LAN Interface IP address 128 3 0 0 After you en...

Page 72: ...e must be taken when assigning the metric value of 0 because it is interpreted that the destination is reachable directly and therefore no intermediate router will be used Press return to accept the d...

Page 73: ...he remote devices are configured in the on node authentication database We enabled device security using an on node authentication database when we configured the SITE2 device To complete the security...

Page 74: ...titled Configure SITE1 page 65 CONFIGURING SITE2 OPTIONS For this example we only need IP routing enabled Unlike the SITE1 we do not need to enable IP routing for the SITE2 IP routing is enabled as a...

Page 75: ...tion for SITE2 Return to the Main Menu save your configuration files and exit Restart the SITE2 to activate the changes VERIFY THE INSTALLATION Steps on how to verify the installation are detailed in...

Page 76: ...Check connectivity to local devices IP PING 128 3 3 4 host Check connectivity to SITE1 CALL DEVICE SITE1 Check connectivity to remote devices IP PING 128 1 1 8 host IP PING 128 1 1 3 server IP PING 1...

Page 77: ...entication database Uses PAP to authenticate remotes CHAP on central site Assumes Dallas Network supports Triggered RIP SAP i e compatible with central site Central site dials out only to Dallas Tampa...

Page 78: ...PAP Password dnpswd File Server Remote Bridge PAP Password obpswd CSX150 CSX1200 POWER SERVICE TX RX 10BASE T LAN B CHANNELS E1 ONLY B2 B4 B6 B8 B26 B28 B22 B24 B18 B20 B14 B16 B10 B12 B30 L1 B1 B3 B...

Page 79: ...ternet PAP Password _______________ CHAP Secret df8sds33 RESOURCES LINES BRI Lines Type Slot Switch type Synchronization type BRI 1 5ESS Ethernet 1 3 Name Slot Port Line type Call screen TEI SPID Dire...

Page 80: ...ridge Ethernet Address Bridge Password CLID s Bridging enabled enabled X disabled IP enabled enabled disabled Make calls for bridged data enabled disabled IP Address on WAN link For IP RLAN IP Sub net...

Page 81: ...IP Host ID Bridge Ethernet Address Bridge Password CLID s Bridging enabled X enabled disabled IP enabled enabled disabled Make calls for bridged data enabled X disabled IP Address on WAN link For IP...

Page 82: ...hernet Address Bridge Password CLID s Bridging enabled X enabled disabled IP enabled enabled disabled Make calls for bridged data enabled X disabled IP Address on WAN link For IP RLAN IP Sub network n...

Page 83: ...Bridge Dial Out Known Connect List IP Routing enabled disabled Mode of Operation router IP host LAN Name IP address Mask Unnumbered WAN need don t need Remote LAN Name IP address Mask Traditional WAN...

Page 84: ...ic Services IPX routing X enabled disabled Internal network number 111abc LAN name External network number Remote LAN name External network number detroitlan 0100 remotelan 0128 Destination network nu...

Page 85: ...we need to configure Remote LAN devices for the Tampa and Orlando sites ADD IPX WAN DEVICE Press 3 at the Security Menu and the Device Level Database Menu will be displayed To enable the On node Devic...

Page 86: ...ation From the Device Table Menu select IPX From this configuration menu insure that IPX routing and Make calls for IPX data are enabled You may then enable IPXWAN protocol Next select Routing Protoco...

Page 87: ...l configure for the Remote LAN interface For more details refer to the Configuring IPX chapter Network Interface Background Information The bridging options for tampabr should now look like the follow...

Page 88: ...for connecting to the router at Dallas CyberSWITCH systems do not require you to configure traditional WAN interfaces for IPX routing so no additional interface configuration is needed for the Dallas...

Page 89: ...protocols In the event that the remote peer does understand these protocols we suggest the following configuration do not send receive and respond This will allow the remote peer to see NetWare servic...

Page 90: ...Current Configuration for INTERFACE remotelan Interface Type WAN Remote LAN IPX Network Number 0128 MTU bytes 1497 Encapsulation Ethernet 802 2 RIP Configuration Send Control Do Not Send Send Frequen...

Page 91: ...Disable Based upon the display insure that both RIP processing and SAP processing are enabled Follow the on screen instructions to make any necessary changes Note that you may also specify the size o...

Page 92: ...resources are operational Issue dr command Look for WAN board initialized messages Look for BRI line messages Look for LAN initialization messages Look for Bridge initialization messages Verify WAN L...

Page 93: ...ions would be similar we do not describe SITE2 s configuration For further network layout clarification refer to the AppleTalk Routing Topology Worksheet INITIAL INSTALLATION STEPS The initial steps i...

Page 94: ...GY SITE1 AppleTalk Configuration Network Range 10 13 Zones SITE1 Engineering default SITE1 Marketing SITE2 AppleTalk Configuration Network Range 45 50 Zones SITE2 Engineering default SITE2 Marketing I...

Page 95: ...Password _______________ CHAP Secret RESOURCES LINES BRI Lines Hunt Group Number 13135551111 Type Slot Switch type Synchronization type BRI 1 NI 1 N A Ethernet 1 2 N A N A Name Slot Port Line type Ca...

Page 96: ...ame Network type extended nonextended extended nonextended extended nonextended Netwk range number AppleTalk address Zone name s Unnumbered WAN X need don t need MAC Dial In WAN Network type extended...

Page 97: ...Secret hcaz IP Host ID Bridge Ethernet Address Bridge Password CLID s Bridging enabled enabled disabled IP enabled enabled disabled Make calls for bridged data enabled disabled IP Address on WAN link...

Page 98: ...the Data Link but can handle two calls one for each bearer channel For NI 1 switches the BRI line has two phone numbers one for each bearer channel and each phone number has its own SPID You must ente...

Page 99: ...evice defined string that will identify the LAN port to the system administrator Enter lanport1 for the port name port number Enter 1 for the port number of the AppleTalk LAN port This is the port num...

Page 100: ...mes you can logically group nodes on an internet Each name can be configured to represent a logical group within that respective internet As indicated on the topology worksheet SITE1 uses two zones En...

Page 101: ...ollowing sections will help you configure each of these three areas for device SITE2 CONFIGURING DEVICE SITE2 S ISDN INFORMATION We will begin by specifying the type of device This device is an ISDN d...

Page 102: ...of eight calls connections running in parallel to open up bandwidth quickly 512 000 64 000 8 The value need not be a multiple of the base data rate For this example enter 384 000 for the maximum data...

Page 103: ...preconfigured default values as shown below To complete the AppleTalk configuration for device SITE2 Select AppleTalk Address Because this device is over an unnumbered link enter 0 0 for the Ap pleTa...

Page 104: ...y worksheet SITE2 s network range is 45 50 next hop s AppleTalk address The next hop is the device that provides access to the network across the WAN In this case SITE2 will provide access to the netw...

Page 105: ...Save Changes from the main CFGEDIT menu Follow the on screen instructions to save any configuration changes made The old configuration files will be stored in the CONFIG directory with a file extensi...

Page 106: ...with PPP devices 77 remote bridging with security 17 simple bridging 9 F FCC notice 3 I IP operating mode example configuration 13 23 IPX configure users 85 Interface Information 88 triggered RIP SAP...

Reviews:

No comments