manualshive.com logo in svg

Develcon Electronics DI-1135, Reference Manual

Share
Download
Develcon Electronics DI-1135 Reference Manual Download Page 69

Programmable Filtering

B-12 — Orbitor 3000 Reference Manual

Mask Combinations

Mask combinations may be required to ensure that a frame is sufficiently qualified before the decision to filter is
made.  The qualification a frame must go through before a filter decision is made depends on the reason for the
filter.  Nonetheless, a few examples below have been provided that should aid in the creation of a mask that may
require that extra little bit of qualification.

Example

To prevent a specific Ethernet station from accessing any TCP/IP host on the other segment.  Assume the
Ethernet address is 01-02-03-04-05-06.

The mask would be:

6-010203040506&12-0800&23-06

Example

To prevent a specific protocol type from accessing a specific Ethernet Address.  Assume the Ethernet address is
01-02-03-04-05-06, and the protocol type is Appletalk

®

.  The filter mask would be:

0-010203040506&12-

809B

Example

To prevent any Ethernet address with the 10th bit set to a 0 from accessing a LAT host or an IP host with an
Internet address of 128.001.001.128.

This particular mask, although not particularly useful, might be best served by creating two masks instead of one
long mask.  The decision is up to the Bridge Manager, but a longer mask is always more difficult to understand
later.  Both methods are presented below:

Combined Filters

4-X’XX0X’&(12-6004|(12-0800&30-80010180))

Separate Filters 4-X’XX0X’&12-6004

4-X’XX0X’&12-0800&30-80010180

Summary of Contents for DI-1135

Page 1: ...Orbitor 3000 Ethernet Bridge Router Reference Manual Issue 2 All Software Versions copyright 1996 by Develcon Electronics Ltd 7 96 Part 168 18806 ...

Page 2: ...REMOTE BRIDGE ROUTER 1 7 IPX Addressing 1 7 Network Layer Addressing vs MAC Addressing 1 7 IPX Address Format 1 7 Network Addresses 1 7 Node Addresses 1 8 Socket Addresses 1 8 Other IPX Header Information 1 8 Establishing an IPX Connection 1 9 Service Advertisement Protocol 1 9 SAP Broadcasts 1 9 SAP Requests 1 10 Server Types 1 10 Routing Information Protocol 1 10 RIP X Operation 1 10 RIP X Broad...

Page 3: ...l 2 3 Combination 2 4 Connection Process 2 4 Protocol Awareness 2 5 Suspension Process 2 5 Interesting Traffic 2 5 Idle Timer 2 6 Orbitor Session Participation Spoofing 2 6 Termination Process 2 7 IP Specifics 2 7 IP Address Connect 2 7 Suspension of TCP IP Sessions 2 7 RIP Routing Information Protocol 2 7 IPX Specifics 2 8 RIP IPX and SAP IPX 2 8 Suspension of IPX Sessions 2 8 Server IPX Watchdog...

Page 4: ...er only TCP IP B 9 Filter all IP without TCP traffic B 9 Filter all except TCP IP B 9 Local Area Transport LAT B 9 Filter all LAT B 9 Filter all but LAT B 9 DEC B 10 Filter all DEC B 10 Bandwidth Conservation B 10 Ethernet Broadcasting B 10 Ethernet Multicasting B 10 General Restrictions B 11 Internet Addresses B 11 Ethernet Station Addresses B 11 Mask Combinations B 12 IP ROUTER PATTERN FILTERING...

Page 5: ...ommunication resources The Orbitor Ethernet bridge router can be thought of as a group of discrete functions combined in a single box The first functional module is the LAN interface which receives all LAN traffic and then decides where individual frames should be sent to the IP router to the IPX router to the bridge to the management system or discarded altogether After the LAN interface there ar...

Page 6: ...iginating station does not know the MAC address of a destination station the originating station sends out an ARP request Now if the destination station is on a different network the router connected to the originating network will see the frame and look at the IP address being requested The router will look in its routing table and see if it has an entry for that IP network address If the router ...

Page 7: ... of the router to send the IP frame to next The destination router will see that the destination IP address is on a locally connected network Destination router will look in its ARP cache to see if it has a MAC address for the destination IP address If it does not have an entry the destination router will generate an ARP request The destination station will send an ARP reply Destination router wil...

Page 8: ...ines where the fragment fits into the original IP frame The Orbitor Ethernet bridge router will accept fragmented frames directed to itself and reassemble them but it will not fragment frames Options There are various options that may be set for any IP frame Source Routing Source routing is used to predetermine the path that the IP frame must travel through the network There are two types of sourc...

Page 9: ...determine whether it is the best router to use for network traffic Once a station receives a redirect all future IP frames destined for the particular destination network will be sent to the new router Quench The quench message is sent to the originating station when the path to the destination network has become congested The originating station will slow down the rate of transmission of frames f...

Page 10: ...lection of the best route path is based solely on the number of hops to the destination network Update Mechanism In order to ensure that the routing tables of all routers in the network are kept up to date each router will broadcast its routing table onto each of its locally connected networks The broadcast of the routing tables occurs every 30 seconds The process of updating a routing table with ...

Page 11: ...are contained in the MAC header The MAC addresses are essentially physical port addresses and are globally unique Hardware vendors encode the port MAC address as part of the manufacturing process All Ethernet devices have the same MAC address format The MAC address is used to communicate frames between LAN ports regardless of protocol The Network layer addressing is assigned by the network adminis...

Page 12: ...munications with File Servers use Socket Number 0451 When a software vendor uses IPX to communicate across a Netware network the vendor will apply to Novell to receive a Socket Number for the application As an example if Acme Schedule Company made a groupware scheduling program for Netware they would get a Socket assigned for their use No other communications on the LAN would use the Acme Schedule...

Page 13: ...t into the server Access privileges within the server are also assigned to the individual users This prevents a Client logged into the General server from accessing files which are the private property of another user on the same General server Service Advertisement Protocol The SAPs are broadcast by Servers at regular intervals and collected by Clients so that they can keep track of what Servers ...

Page 14: ...f RIP X is for all intents and purposes identical to the operation of IP RIP Routers send out broadcasts every 30 seconds containing the contents of that router s route table the list of best routes to known remote networks When a router comes on line the extent of its route tables will be its explicit route In the case of a local router it will be a route between the two networks to which the rou...

Page 15: ...ute goes through 6 routers the hop count for that route will be 6 The maximum number of hops RIP X supports is 15 but this is a very large number considering the size of most internetworks When two or more routes to the same network have the same tick count the router will use the route with the smallest hop count Bridging and the Orbitor Ethernet Remote Bridge Router The bridge portion of the Orb...

Page 16: ...ely begin forwarding frames between LAN segments Instead it will listen to local LAN activity in order to learn the location of each station address on each side of the bridge The bridge router captures each frame and looks at the source address contained within the Ethernet frame Since the bridge router knows which LAN segment the frame was received from it can determine that this station must be...

Page 17: ...ion bridge port or LAN segment of known Ethernet addresses The table would become quite large eventually reducing performance if stations were added removed or moved without the old information being purged periodically Performance is affected since the larger the table the more time it will take to process an incoming frame This purging process called aging is an integral part of the learning fun...

Page 18: ...ons of a partner Orbitor Ethernet bridge router Filled Address Table Sometimes filter address table may become full The filter table can hold 2048 address entries A procedure is automatically followed in this event This procedure defines that the address if it does not exist in the table will not be added and will be treated as any other unknown address In this case the frame will be passed to the...

Page 19: ...r more information on adding names to the bridge router If a bridge router does not have an IP address Telnet connections cannot be initiated or received If a Telnet connected bridge router receives a second connection attempt from another bridge router the connection attempt will be ignored Connecting to a bridge router while the remote bridge router menu system is operating with a different term...

Page 20: ...n effective throughput range from 112 128 Kbps when transferring binary files to 364 384 Kbps when transferring graphic files This increased throughput significantly reduces the bandwidth required between the LANs to achieve a given performance level and also allows the use of lower cost transmission facilities 0 50 100 150 200 250 300 350 400 Binary Mixture Graphic File Type Throughput in Kbps Un...

Page 21: ... Bandwidth On Demand Each Orbitor Ethernet bridge router has the ability to automatically enable or disable a second link based on traffic activity time of day or main link failure The Bandwidth on Demand feature allows you to use a second link only when required thus saving the cost of having the second link up and connected all of the time The second link could be connected to an inexpensive dia...

Page 22: ...ore dropping the stand by link The Down Stability Timer parameter in the Link Activation Conditions Menu is used to define how long in minutes from 1 to 60 the combined links throughput must remain below the down threshold level before the stand by link is stopped Disaster Recovery To enable the disaster recovery mode you simply set the Link Recovery parameter in the Link Activation Conditions Men...

Page 23: ...m 8 am to 6 pm each day of the week the Orbitor Ethernet bridge router will establish the link and keep it active during those hours only Disaster Recovery Backup Link Each Single Active Link Orbitor Ethernet bridge router has the ability to activate a secondary RS 232 link when the main link fails This secondary link may be connected to a dial up modem so it can be used if something should happen...

Page 24: ...onnections and maintains them while the ISDN call is deactivated When the LAN devices require the connection to exchange more data the ISDN call is reactivated so that the LAN data may be transferred During the periods of ISDN call disconnection suspension each end of the LAN connection must believe that the complete connection still exists The generation of the regular status inquiries and respon...

Page 25: ... restart An Auto Call connection would be used for a static WAN configuration that needs to be maintained at all times between sites Figure 2 1 Auto Call WAN Topology The semi permanent connection that results from an Auto Call configuration means that the Orbitor will attempt to maintain a connection to the partner Orbitor during the times specified in the Time of Day Schedule When Connection Man...

Page 26: ... can determine the route to the destination network address the frame is passed along to one of the currently connected partner Orbitor Routers If the destination network is not located on a currently connected partner Orbitor the local Orbitor will then look in the Address Connect table to determine which partner Orbitor to call The Address Connect tables are used by the Orbitor to determine whic...

Page 27: ...connection request must be sent to that remote LAN before the server can process the session connection request and reply to it Any of the call establishment processes may be used to establish the ISDN call between the Orbitors in order to establish a LAN session between the local and remote LANs Once the client server session has been established keepalive or status packets are generated by eithe...

Page 28: ...erved on the ISDN call for a period of time greater than the defined Idle Timer value the ISDN call is suspended and disconnected While the ISDN call is suspended the Orbitor will monitor the LAN sessions for interesting traffic and re establish the ISDN call when required A suspended ISDN call may only be re established by the Orbitor initiating the suspension or by the partner Orbitor that was c...

Page 29: ...essions the Orbitor will not activate the ISDN call and will not pass the keepalive packet to the remote LAN The Orbitor will generate a response to the keepalive packet and send it to the originator of the packet In this way the Orbitor will keep the ISDN call suspended and will also keep the local side of the session active The Orbitor at the remote site will also be participating in the keepali...

Page 30: ... may be used for IP Address Connect use The combination of Auto Call and Address Connect allows part of the WAN environment to be established statically and still allow dynamic connections to other networks depending upon destination IP addresses Suspension of TCP IP Sessions When Connection Management is enabled TCP sessions that are established across the ISDN calls are monitored and maintained ...

Page 31: ...hile an ISDN call is suspended if the Orbitor on the server side of the IPX session observes that the server has stopped generating IPX watchdog packets the Orbitor will assume that the server has gone away and alert the Orbitor on the client side of the IPX session The Orbitor on the client side of the IPX session will stop generating IPX watchdog packets for that IPX session Client IPX Watchdog ...

Page 32: ...DCE interface This clock is then received by the Orbitor link interface By using this method the Orbitor may be in control of the link speed The link speed may also be controlled by the Orbitor when a null modem cable is used to connect two Orbitors in a back to back configuration Changing the link speed within the menu system of the Orbitor changes the clock output speed that is generated on the ...

Page 33: ...mber CCITT Circuit Number Circuit Circuit Name Direction To From DCE DCE 1 101 AA Protective Ground NA 2 103 BA Transmitted Data X 3 104 BB Received Data X 5 106 CB Clear to Send X 6 107 CC Data Set Ready X 7 102 AB Signal Ground NA 8 109 CF Received Line Signal Detector CD X 20 108 2 CD Data Terminal Ready X 22 125 CE Ring Indicator X Figure 3 2 Console Pinouts The connecting cable must be a shie...

Page 34: ...ignal Ground NA 8 109 CF Received Line Signal Detector CD X 9 10 11 12 13 14 15 114 DB Transmit Signal Element Timing DCE Source X 16 17 115 DD Receive Signal Element Timing DCE Source X 18 141 Local Loopback X 19 20 108 2 CD Data Terminal Ready X 21 22 125 CE Ring Indicator X 23 24 113 DA Transmit Signal Element Timing DTE Source X 25 Figure 3 4 RS232 Link Pinouts The connecting cable must be a s...

Page 35: ...ound NA 9 T B Transmitted Data B X 10 C B Control B X 11 R B Received Data B X 12 I B Indication B X 13 S B Signal Element Timing B X 14 15 Figure 3 5 V 11 Link Pinouts The connecting cable must be a shielded cable Circuits which are paired contain an A and B reference should be connected to twisted pairs within the connecting cable NOTE For U K Approval The connecting cable should be manufactured...

Page 36: ...ing DCE Source X 10 CF B Received Line Signal Detector X 11 DA B Transmit Signal Element Timing DTE Source X 12 DB B Transmit Signal Element Timing DCE Source X 13 CB B Clear to Send X 14 BA B Transmitted Data X 15 DB A Transmit Signal Element Timing DCE Source X 16 BB B Received Data X 17 DD A Receive Signal Element Timing DCE Source X 18 LL Local Loopback X 19 CA B Request to Send X 20 CD A Data...

Page 37: ...r Signal Element Timing B X 17 18 U 113 Transmitter Signal Element Timing A DTE X 19 W 113 Transmitter Signal Element Timing B DTE X 20 H 108 2 Data Terminal Ready X 21 141 Local Loopback X 22 J 125 Calling Indicator X 23 Y 114 Transmitter Signal Element Timing A X 24 25 a 114 Transmitter Signal Element Timing B X Figure 3 7 V 35 Link Pin Outs The connecting cable must be a shielded cable Circuits...

Page 38: ...necting cable must be a shielded cable This cable is needed when it is necessary to connect two units back to back and a set of modems is not available Note that this cable specifies DB25 connectors on each end to allow direct connection to the link interface connector on each unit The link speed must be defined for each of the two units ...

Page 39: ...ata A Received Data A Transmitted Data B Received Data B Receiver Signal Element Timing A Receiver Signal Element Timing B Transmitter Signal Element Timing B Transmitter Signal Element Timing A Transmitter Signal Element Timing B Data Channel Received Line Signal Detector CD Data Terminal Ready Signal Ground Data Set Ready Request to Send Protective GND Figure 3 9 V 35 Null Modem Cable The connec...

Page 40: ...ed Data A Received Data A Transmitted Data B Received Data B DCE Ready A DCE Ready B Clear To Send B Request To Send A Request To Send B Received Line Signal Detector A Received Line Signal Detector B DTE Ready A DTE Ready B Signal Ground Transmit Timing A DTE Source Transmit Timing B DTE Source Local Loopback Remote Loopback Receiver Timing A DCE Source Transmit Timing A DCE Source Transmit Timin...

Page 41: ...ansmit Signal Element Timing DTE Source A Data Set Ready B Transmit Signal Element Timing DTE Source B Request to Send A Signal Ground Request to Send B Shield Clear to Send A Clear to Send B DB25 MALE 2 20 14 23 3 17 16 9 8 15 10 12 6 24 22 11 4 7 19 1 5 13 DB37 MALE FEMALE 4 12 22 30 6 8 24 26 13 5 31 23 11 17 29 35 7 19 25 1 9 27 Figure 3 11 RS530 to RS449 Conversion Cable The connecting cable ...

Page 42: ...TR toggle polling is continuous when the link is inactive When DTR is low and RI is subsequently asserted then the bridge router immediately drives DTR and RTS high and again waits for the duration of CD Wait Time for CD to be asserted NOTE If the level 2 process times out DTR toggle will be started 3 When incoming CD and DSR signals both go high then it indicates that the local modem etc has esta...

Page 43: ...usy during reset disconnecting Generated when either the directory number or the SPID has been changed for an ISDN call and the call is being re initialized but the call is currently in progress Call X state X Generated when the ISDN call changes states The states are as follows Null Proceeding Active and Disconnecting Capture off Generated when link trace capture is turned off Completed IPCP nego...

Page 44: ...ress is specified Error executing XXXXXX Generated when an error is detected loading back a configuration The invalid command is specified Incorrect password from X Generated when an incorrect password is given for a Telnet connection The connecting bridge router s name or IP address is specified IPCP must be enabled on remote site remote site id Generated when the Internet Protocol Control Protoc...

Page 45: ...SU DSU initialized Generated when the CSU DSU link module has completed initialization and has established communications with the Orbitor Link X CSU DSU line out of service Generated when the CSU DSU is in communication with the local telco but is not connected to the remote partner CSU DSU Link X CSU DSU no signal Generated when the CSU DSU link module cannot establish communications with the lo...

Page 46: ...erated just prior to a link going down The link has gone down due to no replies to the echo request messages sent Link X peer authenticating with PAP Generated when the peer remote device is using PAP to authenticate this device Link X peer authenticating with CHAP Generated when the peer remote device is using CHAP to authenticate this device Link X received Protocol Reject for protocol Generated...

Page 47: ...ved exceeded the number of clear frames in the last time interval PVC X transmit limit increased to xxxxx Generated when congestion conditions on the WAN are alleviated because the number of FECN frames received was exceeded by the number of clear frames in the last measurement interval PVC X transmit limit set to CIR BECN Generated when a BECN has been received PVC X transmit decreased to xxxxx i...

Page 48: ...unning Generated when SNMP is activated by defining an IP address for the bridge router Starting IPCP negotiation with remote site alias Generated when the Internet Protocol Control Protocol negotiation has been initiated with the remote site device associated with the stated remote site profile Starting IPXCP negotiation with remote site alias Generated when the Internet Packet Exchange Control P...

Page 49: ...router has sent the final packet of a file filename that a LAN device with IP address WWW XXX YYY ZZZ was getting from the bridge router TFTP WWW XXX YYY ZZZ finished putting filename The bridge router has ACK ed the last packet of a file filename that a LAN device with IP address WWW XXX YYY ZZZ was putting onto the bridge router TFTP WWW XXX YYY ZZZ getting filename A LAN device with IP address ...

Page 50: ...will be one of the causes as specified in the CCITT Recommendation Q 931 Causes of normal call clearing User busy and Number changed are printed in words all other are numeric Code Description 001 Unallocated unassigned number 002 003 004 006 007 008 009 010 011 016 No route to specified transit network No route to destination Channel unacceptable Channel unacceptable Call awarded and being delive...

Page 51: ...ted 067 068 069 Transit network selection not implemented Message not implemented Requested facility not implemented 070 079 081 Only restricted digital information bearer capability is available Service or option not implemented unspecified Invalid call reference value 082 Identified channel does not exist 083 084 085 A suspended call exists but this call identity does not Call identity in use No...

Page 52: ... non volatile RAM Connection to LAN X failed trying Generated when failure of the LAN interface external loopback test is detected Detected Phantom Power Generated when the ISDN WAN interface module has properly detected the phantom power signal from the ISDN switch Device DEVXXXXXX connected Generated when a connection to the specified bridge router is established Device DEVXXXXXX disconnected Ge...

Page 53: ...address as itself This may be caused by three situations the network has a loop another device on this network has the same IP address as this bridge router or another device on this network is spoofing IP using the same IP address as this bridge router IP network or subnet addresses not unique Generated when the bridge router detects the same IP network or subnet addresses on another WAN connecte...

Page 54: ...hen the device receives an invalid SAP packet ISDN interface deactivated Generated when the ISDN link module has lost a physical connection to the NT 1 ISDN interface activated Generated when the ISDN link module has established a physical connection to the NT 1 LAN connection established Generated on startup when integrity of the LAN interface has been successfully verified by the external loopba...

Page 55: ...Link X down to AA Generated when a PPP ISDN call to a remote site is dropped Link X unable to compress Generated when one bridge router has compression enabled and the peer bridge router does not i e the peer bridge router does not have compression hardware or has compression disabled Link X up at X baud Generated when a WAN link is established Mixture of IP network and subnet addresses on WAN Gen...

Page 56: ...acket within the TFTP T1 times N2 interval TFTP Abort ACK timeout Aborted a TFTP session because the bridge router did not receive an ACK for the last data packet it sent within the TFTP T1 times N2 interval TFTP Abort Error received Aborted a TFTP session because of the reception of a TFTP error message from the connected device The errors are 0 not defined 1 file not found 2 access violation 3 d...

Page 57: ... Orbitor sent a response and the remote site router refused the connection The remote site name A and ISDN number Y are displayed if know Link X PAP failed for A Y Generated when the remote site PPP router failed a PAP authentication request from this Orbitor The remote site name A and ISDN number Y are displayed if know Link X PAP failed to complete Y Generated when the remote site PPP router sen...

Page 58: ...rity of resources by preventing unauthorized user access The Orbitor Ethernet bridge router provides three built in functions in addition to defined programmable masks to control the access to resources The first function is Filter if Source the second is Filter if Destination The third function allows you to change the filter operation from positive to negative Positive filter operation causes th...

Page 59: ...u at the MAC ADDRESS FILTERS MENU where access to the MAC Address filters is obtained 4 From the MAC ADDRESS FILTERS MENU make sure that Filter Operation is currently set to positive This will cause the MAC Address Filters specified to be used for filtering frames with the specified MAC addresses 5 From the MAC ADDRESS FILTERS MENU enter a 1 This will place you at the first EDIT MAC ADDRESS FILTER...

Page 60: ...nu is obtained 2 From the CONFIGURATION MENU enter an 8 This will place you at the FILTER SET UP MENU where access to the individual filtering menus is obtained 3 From the FILTER SET UP MENU enter a 1 This will place you at the MAC ADDRESS FILTERS MENU where access to the MAC Address filters is obtained 4 From the MAC ADDRESS FILTERS MENU make sure that the Filter Operation is currently set to pos...

Page 61: ...on is a function that allows you to forward an Ethernet frame based on the destination of its address and filter all other frames If the destination address equals the address that the Forward if Destination function has been applied to the frame is forwarded Example Assume that a host Computer is located on LAN segment 2 located on a partner bridge router with an Ethernet address of 00 00 01 02 0...

Page 62: ...ld of the frame the bridge router will forward it All other frames seen on the local LAN that are destined for the remote LAN will be filtered Security Forward if Source Forward if Source is a function that allows you to forward an Ethernet frame if the source address of the frame equals the address that the Forward if Source function has been applied to Example Assume that a Personal Computer is ...

Page 63: ...any information about it Therefore you will have to tell the bridge router a little bit more about the station 7 Enter a 2 to enter the location of the station 8 The bridge router will prompt you for the LAN that the station is located on enter the name of this bridge router s LAN LAN456789 for example Note that the Status of the address is marked as present the location is updated to LAN456789 an...

Page 64: ... th octet does not equal the 80 of the filter pattern brackets Used in pattern filters to separate portions of filter patterns for specific operators Example 12 80 14 24 14 32 This filter pattern will be checked in two operations First the section in brackets will be checked and then the results of the first check will be used in the second check using the first portion of the filter patter If the...

Page 65: ...sents this protocol type The IP protocol type is 0800H Since the protocol field starts at octet location 12 the necessary filter mask to prevent IP traffic from traversing the bridged network is as follows 12 0800 The 12 is the offset into the Ethernet frame the is the argument separator and the 0800 represents the protocol type of IP In this example whenever a frame is seen on the LAN port for wh...

Page 66: ...e would be equal to 6 The location of this field remembering that the start of the Ethernet frame is always the base reference is octet 23 Filter only TCP IP To filter only those packets that are TCP IP the mask would therefore be 12 0800 23 06 The 12 0800 is the IP expression and the 23 06 will represent TCP in an IP frame The is the logical AND operator so the expression requires that the frame ...

Page 67: ... stations in the network To prevent this information from being seen across the link on the other LAN segment a filter mask can be used To prevent broadcast information from being passed across the link use the following filter mask 0 FFFFFFFFFFFF This prevents any frame with a destination address field set to the broadcast address from being passed to the second LAN segment across the link Ethern...

Page 68: ...0 80010203 This will filter IP packets that contain the Internet address of 128 001 002 003 As another example assume that this Internet address should also be filtered if it originates any data In addition to the mask above an OR condition will have to be added to look at the IP source address The new mask would be as follows 12 0800 26 80010203 30 80010203 This would filter any frame that is bot...

Page 69: ... 05 06 The mask would be 6 010203040506 12 0800 23 06 Example To prevent a specific protocol type from accessing a specific Ethernet Address Assume the Ethernet address is 01 02 03 04 05 06 and the protocol type is Appletalk The filter mask would be 0 010203040506 12 809B Example To prevent any Ethernet address with the 10th bit set to a 0 from accessing a LAT host or an IP host with an Internet a...

Page 70: ...f the routed LAN facilities the Orbitor Ethernet remote bridge router provides programmable filter masks that may be defined to act on any part of the IP frame The IP Router Filter Patterns menu is located under the Filter Set Up Menu Within the IP Router Filter Patterns Menu there exists a Help function that can be used as a reference during IP Router Filter Pattern creation This Help function in...

Page 71: ...nces in the TCP IP and Novell frames when bridging and when routing When routing the TCP IP and Novell frames are examined after the Level 2 Ethernet portion of the frame has been stripped from the whole data frame This means that the offset numbers now start from 0 at the beginning of the routed frame and not the bridged frame Some of the common Ethernet type codes are also shown here The Etherne...

Page 72: ...1 DEC MOP Dump Load 6002 DEC MOP Remote Console 6003 DEC DECNET Phase IV Route 6004 DEC LAT 6005 DEC Diagnostic Protocol 6006 DEC Customer Protocol 6007 DEC LAVC SCA 8035 Reverse ARP 803D DEC Ethernet Encryption 803F DEC LAN Traffic Monitor 809B Appletalk 80D5 IBM SNA Service on Ether 80F3 AppleTalk AARP Kinetics 8137 8138 Novell Inc 814C SNMP Octet Locations on an IP Routed TCP IP Frame ...

Page 73: ...Frame Formats Orbitor 3000 Reference Manual C 3 Octet Locations on an IPX Routed Novell Netware Frame Octet Locations on a Bridged XNS Frame ...

Page 74: ...t Link Clocking Information 3 1 Link Interfaces Reference 3 1 Link Pin Out Information 3 1 Local Area Transport B 9 M MAC Address Filtering B 1 Mask Combinations B 12 N Negative Filtering B 1 NOT B 8 Null Modem Cable 3 1 P Positive Filtering B 1 PPP Security Logs A 13 Programmable Filtering B 1 Protocol Awareness 2 5 Protocol Discrimination B 7 Protocol Type Field B 8 R RS232 Null Modem Cable Conf...

Reviews:

No comments

Brands by name

Popular brands

Load more brands