manualshive.com logo in svg

Patton electronics ipRocketLink IAD 3086, User Manual

Share
Download
Patton electronics ipRocketLink IAD 3086 User Manual Download Page 129

129

Chapter 7

NAT (Network Address Translation) 

Chapter contents

Introduction ........................................................................................................................................................130

Enabling NAT  ..............................................................................................................................................130
Global address pool and reserved map ...........................................................................................................131

Summary of Contents for ipRocketLink IAD 3086

Page 1: ...E mail support patton com WWW www patton com Part Number 07M3086 Rev E Revised February 16 2012 Important This is a Class A device and is intended for use in a light industrial environment It is not...

Page 2: ...ts and will at our option repair or replace the product should it fail within one year from the first date of the shipment This warranty is limited to defects in workmanship or materials and does not...

Page 3: ...17 Protocol support 17 PPP Support 18 ATM Protocols 18 Protocol Support 18 Management 18 Security 19 Front Panel Status LEDs Test Mode Switches and Console Port 19 Console port outlined in red 21 Rear...

Page 4: ...g the V 35 or X 21 port via DIP switches 40 Switch Bank S2 42 Switches S2 1 through S2 7 42 Switch S2 8 43 Switch Bank S3 43 Switch S3 1 CO CP selection 43 Switch S3 3 Transmit Clock Mode 44 T1 Interf...

Page 5: ...Rate 56 Actual DSL Rate 56 Intended Serial Interface Data Rate 57 DSL Rate Number of i Bit 57 Terminal Type 57 Interface Type 58 PCM Mode 58 PCM Transmit Polarity 58 PCM Receive Polarity 58 Loopback...

Page 6: ...6 PPPoA Bridged RFC 2364 Configuration 79 Routed application configurations to a DSLAM 81 RFC 1483 Routed 81 PPPoH Routed 88 PPPoA Routed RFC 2364 95 IPoA Routed RFC 1577 107 5 Specialized Configurati...

Page 7: ...ction 144 Contact information 144 Warranty Service and Returned Merchandise Authorizations RMAs 144 Warranty coverage 144 Out of warranty service 144 Returns for credit 144 Return for credit policy 14...

Page 8: ...shielded RS 232 console port EIA 561 160 Serial port 161 V 35 M 34 Connector 161 V 35 DB 25 Female Connector 161 X 21 DB 15 Connector 162 E1 T1 RJ 48C Connector 162 Power input 162 E Command Line Int...

Page 9: ...a specified group 179 Set variable attributes on a specified channel 180 Web Configuration Methods 180 FRS Overview Screen 180 Group Channel Level Configuration Screen 181 Frame Relay Network Interwor...

Page 10: ...Web Based Configuration of the Frame Relay Channel 192 Serial Interface Configuration 192 Configuration Variables Available 192 Clock Mode 192 Clock Invert Functions rxClkInv receive clock txClkInv t...

Page 11: ...features and capabilities Chapter 2 contains an overview describing IAD operation Chapter 3 provides quick start installation procedures Chapter 4 describes configuring the IAD for typical applicatio...

Page 12: ...ol and WARNING heading indicate a potential electric shock hazard Strictly follow the warning instructions to avoid injury caused by electric shock The alert symbol and WARNING heading indicate a pote...

Page 13: ...hin 10 feet 3 meters of the device shall be easily accessible and pro tected by a circuit breaker For AC powered units ensure that the power cable used meets all applica ble standards for the country...

Page 14: ...m would display them dir Bold Courier font indicates where the operator must type a response or command Table 2 Mouse conventions Convention Meaning Left mouse button This button refers to the primary...

Page 15: ...l support 17 PPP Support 18 ATM Protocols 18 Protocol Support 18 Management 18 Security 19 Front Panel Status LEDs Test Mode Switches and Console Port 19 Console port outlined in red 21 Rear panel con...

Page 16: ...The following sections describe Model 3086 features and capabilities General attributes see page 16 G SHDSL Characteristics Model 3086 see page 17 Ethernet see page 17 Protocol support see page 17 PPP...

Page 17: ...end to end management Ethernet Auto sensing Full Duplex 10Base T 100Base TX Ethernet Standard RJ 45 connector Built in MDI X cross over switch IEEE 8021 d transparent learning bridge up to 1 024 addre...

Page 18: ...networking with IP RFC 741 TCP RFC 793 UDP RFC 768 ICMP RFC 950 ARP RFC 826 IP Router with RIP RFC 1058 RIPv2 RFC 2453 Up to 64 static routes with user selectable priority over RIP OSPF routes Built i...

Page 19: ...ents and Real Time alerts Logging or SMTP on event Password protected system management with a username password for console and virtual terminal Sepa rate user selectable passwords for SNMP RO RW str...

Page 20: ...the DTE device attached to the serial port is active binary 1 T1 E1 Link Green On indicates the T1 E1 interface is connected to a live T1 E1 line LOS Red On indicates a T1 E1 loss of frame condition I...

Page 21: ...universal power supply The Model 3086 offers internal or external AC power supply options The internal power supply connects to an AC source via an IEC 320 connector 100 240 VAC 200 mA 50 60 Hz The ex...

Page 22: ...follows When in the default out position the Ethernet circuitry takes on a straight through MDI configuration and functions as a transceiver It will connect directly to a hub When in the in position t...

Page 23: ...23 Chapter 2 Product Overview Chapter contents Product Overview 24 Applications Overview 24 Internet Extranet Access 25 IP FR and TDM Access 25 IP FR and Voice over DSL 25 Metro Intranet Access 26...

Page 24: ...ables data to be bridged or routed The supported transports are PPPoA PPPoE Frame Relay RFC 1483 Multiprotocol Encapsulation over ATM AAL5 IPoA PPPoH and Ethernet Configuring an interface and transpor...

Page 25: ...der s network VCs transport data across the WAN to their final destination Additionally the Model 3086 supports PPP encapsulation FR to ATM network internetworking or FR to ATM Service internetworking...

Page 26: ...the Model 3096RC separates PCM voice and IP data traffic for transport over the WAN Metro Intranet Access Patton s Model 3086 symmetrical G SHDSL modulation scheme allows deployment in back to back co...

Page 27: ...n Chapter contents Hardware installation 28 What you will need 28 Installing the AC power cord 28 Connecting network cables 29 IP address Quick Start modification 30 Web Operation and Configuration 30...

Page 28: ...owser in preparation for configuring the modem see Web Operation and Configura tion on page 30 What you will need Model 3086 G SHDSL IAD Ethernet cable with RJ45 plugs on each end included with IAD DB...

Page 29: ...or dumb terminal Use the RJ45 RJ45 straight through cable between the adapter and the red marked RJ45 port on the 3086 IAD 2 Do NOT connect the IAD to the Ethernet LAN now 3 On the PC start a HyperTe...

Page 30: ...list interfaces enter To see if the change in IP address is correct fi system config save enter To save the new IP address in flash memory Wait for configuration saved message Saving configuration fi...

Page 31: ...1 Model 3086 G SHDSL Integrated Access Device User Guide 3 Quick Start Installation The Model 3086 home page displays see Figure 3 Figure 3 Model 3086 home page The Model 3086 menu structure is shown...

Page 32: ...3 Quick Start Installation Model 3086 G SHDSL Integrated Access Device User Guide 32 Hardware installation Figure 4 Model 3086 Menu Structure...

Page 33: ...4 T1 Interface 44 T1 Interface Connection 44 T1 Interface Configuration 45 DIP Switch Configuration 45 Switch Bank S2 45 Switches S2 1 through S2 7 46 Switch S2 8 46 Switch Bank S3 47 Switch S3 1 CO C...

Page 34: ...t 57 Terminal Type 57 Interface Type 58 PCM Mode 58 PCM Transmit Polarity 58 PCM Receive Polarity 58 Loopback 58 Annex Type 58 Line Probe 58 TDM Plus Ethernet Traffic 58 CLI configuration 59 Selecting...

Page 35: ...ernet extension HDLC PPPOH Bridged 64 Network Extension HDLC PPPoH Routed 67 DSLAM Connections with remote CPE units 73 Bridged application configurations to a DSLAM 73 RFC 1483 Bridged Configuration...

Page 36: ...vated In addition to configuring the DSL link the user must configure the routing or bridging features and must choose from HDLC or ATM encapsulation Configuration for these applications is presented...

Page 37: ...ce is pre Routed WAN Services Bridged WAN Services Web Page Parameter RFC 1483 PPPoA IPoA PPPoE HDLC RFC 1483 PPPoA HDLC Description X X X X X X X X VPI X X X X X X default 0 VCI X X X X X X default 3...

Page 38: ...Guide 38 TDM Port sented on a female DB 15 connector while the T1 E1 interface is presented on an RJ 48C jack additionally the E1 interface is presented on dual BNC Figure 5 shows the different connec...

Page 39: ...have the option for DTE configuration a tail circuit cable will be required this cable is available from most datacomm supply vendors The tail circuit cable will cross most interface signals so that...

Page 40: ...nnector DCE configuration To change to DTE configuration lift the daughter board from the connector turn it around so that the DTE label an arrows point to the X 21 connector and place it back on the...

Page 41: ...ent Implementation of DIP switch settings can be done in two ways Set up DIP switches and then cycle power On Off On Set up DIP switches and then turn the implementation switch S2 8 to the Off positio...

Page 42: ...2 8 Switch configuration On Toggle On Off On To activate DIP configuration S7 S6 S5 S4 S3 S2 S1 Data Rate kbps On On On On On On Off 64 On On On On On Off On 128 On On On On On Off Off 192 On On On On...

Page 43: ...ly When deploying the model 3086s units installed at the Customer location should be set to CP and units On On Off On Off Off Off 1472 On On Off Off On On On 1536 On On Off Off On On Off 1600 On On Of...

Page 44: ...eight position keyed modular jack configured as a RJ 48C for connection to 100 ohm twisted pair lines Figure 10 3086 T1 port pinout T1 Interface Connection The 3086 will usually connect either to a lo...

Page 45: ...ipped with all DIP switches set to the ON posi tion While in this setting the Model 3086 can be configured only via software console Telnet HTTP SNMP If you want to use the DIP switches to configure t...

Page 46: ...take effect if S2 8 isn t toggled S7 S6 S5 S4 S3 S2 S1 Data Rate kbps On On On On On On Off 64 On On On On On Off On 128 On On On On On Off Off 192 On On On On Off On On 256 On On On On Off On Off 320...

Page 47: ...t to point operation one unit must be CO while the other must be CP Switch S3 3 Transmit Clock Mode Use Switches S3 3 to configure the 3086 for internal or external net work clock mode Table 7 S3 Summ...

Page 48: ...hms Selecting T1 automatically sets the framing to Extended Super Frame and B8ZS line code Switch S3 8 Switch S3 applies to E1 applications for T1 applications this switch is ignored Web Interface Con...

Page 49: ...ig menu E1 Interface The 3086 enables T1 or E1 device located at customer locations to access a carrier s network over two wire long reach DSL links This capability allows providers to offer T1 E1 ser...

Page 50: ...f a PC for configuration Note The Model 3086 is shipped with all DIP switches set to the ON posi tion While in this setting the Model 3086 can be configured only via software console Telnet HTTP SNMP...

Page 51: ...vely When deploying the model 3086s units installed at the Customer location should be set to CP and units On On Off On On Off Off 1216 On On Off On Off On On 1280 On On Off On Off On Off 1344 On On O...

Page 52: ...7 Use S3 7 to configure the TDM interface for T1 or E1 service Note that selecting E1 automati cally sets the E1 line rate to HDB3 line impedance to 120 ohms Selecting T1 automatically sets the frami...

Page 53: ...E1 Multi Frame CAS E1 with CRC Consult with your service provider which option is required Line Code Choose from AMI or HDB3 Most E1 applications use HDB3 Line Build Out Select 120 ohm if the E1 conn...

Page 54: ...the next example DIP Switch Configuration Set switch S2 8 from On to Off wait 3 to 4 seconds set it back to On CLI configuration When using the console port or Telnet session via Ethernet port the use...

Page 55: ...figuration Note Press the Enter key at the end of each command line fi gshdsl set terminal remote fi gshdsl set dslrateTS 32 fi gshdsl set interface hdlc fi gshdsl set pcmmode Serial fi gshdsl set ghs...

Page 56: ...Counters Selecting Clear will reset the error counters displayed in the Status screen Intended DSL Data Rate This is the DSL line rate at which you wish to connect In a point to point deployment the u...

Page 57: ...placed in the upper slots of the DSL frame while Ethernet data is placed in the lower DSL frame timeslots When the serial port is not used set the Intended Serial Interface to Not used The 3086 will...

Page 58: ...possible that the clock and data arriving at the 3086 may be out of synchronization causing data errors Inverting the polarity of the receive clock at the 3086 may solve this problem Use the Normal se...

Page 59: ...d Ethernet data At the command prompt type fi gshdsl set pcmmode EthernetandSerial enter Assigning bandwidth to serial and Ethernet ports In this example half of the bandwidth 1 152 Mbps 18 TS assigne...

Page 60: ...ype Selects between HDLC and ATM transport To select HDLC for both 3086 type fi gshdsl set interface hdlc enter Annex Type Select between Annex A and Annex B To select Annex B type fi gshdsl set ghsan...

Page 61: ...yed in the Status screen Intended DSL Data Rate This is the DSL line rate at which you wish to connect In a point to point deployment the unit designated as Central will impose the line rate on the un...

Page 62: ...he upper slots of the DSL frame while Ethernet data is placed in the lower DSL frame timeslots When the serial port is not used set the Intended Serial Interface to Not used The 3086 will automat ical...

Page 63: ...y be out of synchronization causing data errors Inverting the polarity of the receive clock at the 3086 may solve this problem Use the Normal setting when using short serial cables less than 6 feet or...

Page 64: ...lled ip1 with an IP address of 192 168 1 1 Let s change the IP address so it is in the same subnet as both PCs For example to 192 168 100 2 fi ip set interface ip1 ipaddress 192 168 100 2 255 255 255...

Page 65: ...ice User Guide 4 Basic Application Configurations Verify the settings to be Interface 1 LLC header mode dialout LLC header mode off HDLC header mode on No authentication Leave User name and Password b...

Page 66: ...control port fi ip list interfaces One IP interface is called ip1 with an IP address of 192 168 1 1 Change the IP address so it is in the same subnet as both PCs For example to 192 168 100 3 fi ip set...

Page 67: ...e Configure button In the Action submenu under G SHDSL change Action to Deactivate then click on Action Return to Action select Start and click on Action Network Extension HDLC PPPoH Routed Model 3086...

Page 68: ...c If changed then click on Configure Click on Action Select deactivate for Action Click on the Action button 2 On the Menu go to Configuration then to WAN Connections Delete both default WAN services...

Page 69: ...ntegrated Access Device User Guide 4 Basic Application Configurations Click on Configure 3 Go to Configuration Menu Configuration WAN connections Edit for PPPoH Routed service Edit IP Interface Ipaddr...

Page 70: ...Menu Configuration IP Routes Click on Create new Ip V4 Route Create the gateway to the remote 3086 by entering the WAN IP address of the remote 3086 in this example enter 192 168 164 3 in the Gateway...

Page 71: ...etric values are different although the process is the same From the command line interface CLI via the RS 232 control port fi ip list interfaces fi ip clear routes fi pppoh clear transports fi ethern...

Page 72: ...ption field enter the description you wish In this example it is called PPPoH Routed Description PPPoH Routed Interface 1 WAN IP address 192 168 164 3 LLC Header Mode off HDLC Header Mode ON No authen...

Page 73: ...idged services are offered RFC 1483 Bridged PPPoA Bridged and HDLC Bridged The configurations show a desktop on one end and a laptop on the other The laptop and its Model 3086 would be replaced with a...

Page 74: ...ip set interface ip1 ipaddress 192 168 100 2 255 255 255 0 1 Now you can bring up the web page management system on your browser by entering the IP address of the 3086 2 On the Menu go to Configurati...

Page 75: ...command line interface CLI via the RS 232 control port fi ip list interfaces One IP interface is called ip1 with an IP address of 192 168 1 1 Change the IP address so it is in the same subnet as both...

Page 76: ...Return to Action select Start and click on Action PPPoH Bridged Configuration Model 3086 Remote Configuration Steps PPPoH Bridged From the command line interface CLI via the RS 232 control port fi ip...

Page 77: ...wish In this example it is called PPPoH Bridged Interface 1 LLC header mode dialout LLC header mode off HDLC header mode on No authenticaion Leave User name and Password blank Click on Apply 3 Go to...

Page 78: ...address of the 3086 2 On the Menu go to Configuration then to WAN Connections Delete the factory default WAN services already defined Click on Create a new service in the main window select PPPoH_Brid...

Page 79: ...on Steps PPPoA Bridged From the command line interface CLI via the RS 232 control port fi ip list interfaces One IP interface is called ip1 with an IP address of 192 168 1 1 Change the IP address so i...

Page 80: ...A Bridged From the command line interface CLI via the RS 232 control port fi ip list interfaces One IP interface is called ip1 with an IP address of 192 168 1 1 Change the IP address so it is in the s...

Page 81: ...WAN services are offered RFC 1483 PPPoH IPoA PPPoA and PPPoE Routed RFC 1483 Routed RFC 1483 provides the simplest method of connecting end stations over an ATM network User data in the form of Ethern...

Page 82: ...Click on G SHDSL in the Configuration Menu Configuration verify that Terminal Type is Central and Interface Type is atm If changed then click on Configure Click on Action Select deactivate for Action...

Page 83: ...FC 1483 Routed Change the configuration parameters to match the following Description RFC 1483 Routed VPI 0 VCI 35 Encapsulation Method LLC SNAP WAN IP Address 192 168 164 2 Click on Configure 3 Confi...

Page 84: ...the Configuration Menu then the submenu Status The Modem State should be deactivated If not go to the Action and change it to deactivate Then in the Action submenu under G SHDSL change Action to Star...

Page 85: ...2 229 so in this example change the IP address of the 3086 to 192 168 172 3 The default IP mask is 255 255 255 0 fi ip set interface ip1 ipaddress 192 168 100 2 255 255 255 0 1 Now you can bring up th...

Page 86: ...go to Configuration then to WAN Connections Delete both default WAN services already defined Click on Create a new service in the main window select RFC 1483 Routed and click on the Configure button I...

Page 87: ...3 Configuration Menu Configuration IP Routes Click on Create new Ip V4 Route Create the gate way to the remote 3086 by entering the WAN IP address of the remote 3086 in this example enter 192 168 164...

Page 88: ...tivated If not go to the Action and change it to deactivate Then in the Action submenu under G SHDSL change Action to Start then click on Action The modems should link up within 30 seconds or so and t...

Page 89: ...e IP address of the 3086 Click on G SHDSL in the Configuration Menu Configuration verify that Terminal Type is Central and Interface Type is hdlc If changed then click on Configure Click on Action Sel...

Page 90: ...r Guide 90 DSLAM Connections with remote CPE units Username blank Password blank Click on Configure 3 Go to Configuration Menu Configuration WAN connections Edit for PPPoH Routed service Edit IP Inter...

Page 91: ...Configuration IP Routes Click on Create new Ip V4 Route Create the gate way to the remote 3086 by entering the WAN IP address of the remote 3086 in this example enter 192 168 164 3 in the Gateway fie...

Page 92: ...on to Start then click on Action Model 3086 Central Configuration Steps PPPoH Routed From the command line interface CLI via the RS 232 control port fi ip list interfaces fi pppoh clear transports One...

Page 93: ...hen click on Configure Click on Action Select deactivate for Action Click on the Action button 2 On the Menu go to Configuration then to WAN Connections Delete both default WAN services already define...

Page 94: ...on Create new Ip V4 Route Create the gate way to the remote 3086 by entering the WAN IP address of the remote 3086 in this example enter 192 168 164 2 in the Gateway field OK The other fields should...

Page 95: ...with Remote and 3086 A may represent a home PC which is connecting to a central ized PPP server Local and 3086 B Since this is a routed application there are differences to be noted Referring to the a...

Page 96: ...ick on Action Select deactivate for Action Click on the Action button 2 On the Menu go to Configuration then to WAN Connections Delete both default WAN services already defined Click on Create a new s...

Page 97: ...rify or change the following parameters on the Edit PPP webpage Server false Create Route true Specific Route false Subnet Mask 0 0 0 0 Route Mask 0 0 0 0 Hdlc false LLC false Lcp Max Configure 10 Lcp...

Page 98: ...Give DNS to Relay true Give DNS to Client true Remote DNS 0 0 0 0 Remote Secondary 0 0 0 0 LCP Echo Every 10 Auto Connect false Idle Timeout 0 Termination true Click on Change button 4 Click on Edit A...

Page 99: ...nfor mation while setting up the PPP connection 7 Go to G SHDSL in the Configuration Menu then the submenu Status The Modem State should be deactivated If not go to the Action and change it to deactiv...

Page 100: ...6 Click on G SHDSL in the Configuration Menu Configuration verify that Terminal Type is Central and Interface Type is atm If changed then click on Configure Click on Action Select deactivate for Actio...

Page 101: ...n this example it is called PPPoA Routed Change the configuration parameters to match the following Description PPPoA Routed VPI 0 VCI 800 WAN IP Address 192 168 164 2 LLC Header Mode off HDLC Header...

Page 102: ...parameters on the Edit PPP webpage Parameters in red italics are those requiring changes from the default configuration Server true Create Route true Specific Route false Subnet Mask 0 0 0 0 Route Mas...

Page 103: ...User Guide 4 Basic Application Configurations IP Addr from IPCP true Discover Primary DNS false Discover Secondary DNS false Give DNS to Relay false Give DNS to Client false Remote DNS 0 0 0 0 Remote...

Page 104: ...4 Basic Application Configurations Model 3086 G SHDSL Integrated Access Device User Guide 104 DSLAM Connections with remote CPE units Click on Change button...

Page 105: ...asic Application Configurations 4 Click on Edit ATM Channel Verify the Options to match the following Change if necessary Tx Vci 800 Tx Vpi 0 Rx Vci 800 Rx Vpi 0 Peak Cell Rate 2000 Burst Tolerance 0...

Page 106: ...rameters Ipaddr 192 168 164 2 Mask 255 255 255 0 Dhcp false MTU 1500 Enabled true Click on the Change button if changes were made 6 Again Configuration Menu Configuration IP Routes Click on Create new...

Page 107: ...n and change it to deactivate Then in the Action submenu under G SHDSL change Action to Start then click on Action IPoA Routed RFC 1577 User data in the form of IP packets is encapsulated into AAL 5 P...

Page 108: ...entering the IP address of the 3086 2 On the Menu go to Configuration then to WAN Connections Delete the factory default WAN services already defined Click on Create a new service in the main window s...

Page 109: ...ed Access Device User Guide 4 Basic Application Configurations 3 Returning to the 3086 Configuration Menu click on Configuration then IP Routes Click on Create new Ip V4 Route Destination 0 0 0 0 Gate...

Page 110: ...110 DSLAM Connections with remote CPE units 4 Go to G SHDSL in the Configuration Menu then the submenu Configuration Change Terminal Type to Central and Interface Type to atm Click on the Configure bu...

Page 111: ...e subnet as both PCs For example to 192 168 172 3 The default IP mask is 255 255 255 0 fi ip set interface ip1 ipaddress 192 168 172 3 255 255 255 0 1 Now you can bring up the web page management syst...

Page 112: ...on Create new Ip V4 Route Destination 0 0 0 0 Gateway 192 168 164 2 Mask 0 0 0 0 Cost 1 Interface leave blank Click on OK 4 Go to G SHDSL in the Configuration Menu then the submenu Configuration Leav...

Page 113: ...113 Chapter 5 Specialized Configurations Chapter contents IP Configurations 114 Router 114 DHCP Server and Relay 114...

Page 114: ...nter the IP address of the gateway which is the WAN IP address of the device on the other end of the DSL link in the Value field of Gateway 5 Enter the appropriate netmask in the Value field of Netmas...

Page 115: ...gure on the DHCP Server web page to change the configuration for any of the DHCP param eters The three categories of configuration parameters on this web page are the Address Range of the DHCP Server...

Page 116: ...NS client provides a method for retrieving a list of IP addresses for a host name as well as acquiring the host name for a given IP address The DNS client will cache any results from the name server w...

Page 117: ...DNS Relay web page up to 10 DNS server addresses may be added to utilize the DNS servers already being used by the network 1 Select Enabled 2 Click on Configure 3 Enter the DNS server address in the f...

Page 118: ...5 Specialized Configurations Model 3086 G SHDSL Integrated Access Device User Guide 118 IP Configurations...

Page 119: ...contents Introduction 120 Configuring the IAD 120 Configuring the security interfaces 121 Deleting a Firewall Policy 122 Enabling the Firewall 123 Firewall Portfilters 123 Security Triggers 124 Intru...

Page 120: ...by using security triggers Triggers tell the security mechanism to expect these second ary sessions and how to handle them Rather than allowing a range of port numbers triggers handle the situa tion...

Page 121: ...both as 0 0 0 0 because this is the gateway default route 5 Click on Create and the route will be entered 6 The default gateway can be verified by clicking on IP Routes under Status in the menu Config...

Page 122: ...d etoi is added between the external and internal interfaces 1 Under Policies Triggers and Intrusion Devices on the Security page click on Firewall Policy Configuration 2 In the Current Firewall Polic...

Page 123: ...ge State The network is now secure All the interfaces which have been defined are protected and all traffic is blocked between different the different interface types That is all traffic is blocked be...

Page 124: ...ity Triggers Security triggers are used to allow an application to open a secondary port in order to transport data The most common example is FTP This procedure is to set up a trigger on the Firewall...

Page 125: ...el add a trigger which will open a secondary channel only when data is being passed This prevents the need to open too many ports which offer a security risk 1 From the Configuration Menu Configuratio...

Page 126: ...led Enables Victim Protection Victim Protection protects the victim from an attempted spoofing attack Web spoofing allows an attacker to create a shadow copy of the world wide web WWW All access to th...

Page 127: ...unreachable addresses and keeps resending them This creates a backlog queue of unacknowledged SYN ACK packets Once the queue is full the system will ignore all incoming SYN request and no legitimate...

Page 128: ...6 Security Model 3086 G SHDSL Integrated Access Device User Guide 128 Intrusion Detection System IDS...

Page 129: ...129 Chapter 7 NAT Network Address Translation Chapter contents Introduction 130 Enabling NAT 130 Global address pool and reserved map 131...

Page 130: ...can also be used so that different inside hosts can share a global address by mapping different ports to different hosts For example Host A is an FTP server and Host B is a web server By mapping the F...

Page 131: ...Pool The global IP addresses need to be created and put into the Global Address Pool 3 Set the parameters to the following values Interface Type internal Use Subnet Configuration Use IP Address Range...

Page 132: ...r Guide 132 Introduction 6 Set the parameters to the following values Global IP Address 100 100 100 101 Internal IP address 10 1 1 2 Transport Type all Port Number 65535 This port number means all por...

Page 133: ...133 Chapter 8 Monitoring Status Chapter contents Status LEDs 134...

Page 134: ...ive binary 1 off indicates CTS is binary 0 DTR Green ON indicates the DTR signal from the DTE device attached to the serial port is active binary 1 T1 E1 Link Green On indicates the T1 E1 interface is...

Page 135: ...l Analog Loopback LAL Serial Port Loop 137 Operating Remote Digital Loopback RDL DSL Loop 137 T1 E1 Diagnostics 138 Network Loop 138 T1 E1 Local Loop 139 QRSS BIT Error Rate Diagnostics 140 T1 E1 conn...

Page 136: ...oftware upgrades which are at no charge contact upgrades patton com for the location of the new firmware and follow these instructions 1 Get the firmware image from Patton and save on your PC It is a...

Page 137: ...data sent to the local Model 3086 in this test mode will be echoed returned to the user device i e characters typed on the key board of a terminal will appear on the terminal screen Figure 12 Local Li...

Page 138: ...modems You should then check the twisted pair line for proper connections and continuity T1 E1 Diagnostics The 3086 K offers two diagnostics loops for the T1 E1 interface Network line loopback and lo...

Page 139: ...menu click on the Activate Test Mode button 2 Perform a BER bit error rate test Replace the Local T1 E1 equipment PBX with a T1 E1 tester and initiate a BER test to verify integrity of the cable and...

Page 140: ...vice and looped to the 3086 originator the far end device i e PBX or routers s T1 E1 port must be set to line loop The local 3086 decodes the received bits using the same polynomial If the received bi...

Page 141: ...nd alarm for the following Red Alarm Yellow alarm Blue Alarm Remote Alarm carrier loss and Sync Loss Transceiver Status This section displays status for the following Search FAS Search CRC Search CAS...

Page 142: ...ern generator and detector 511 with Errors Initiates a built in 511 bit pseudo random pattern generator and detector The test pattern generator also injects intentional errors approximately once per s...

Page 143: ...ntents Introduction 144 Contact information 144 Warranty Service and Returned Merchandise Authorizations RMAs 144 Warranty coverage 144 Out of warranty service 144 Returns for credit 144 Return for cr...

Page 144: ...ore ship ment All of our products are backed by a comprehensive warranty program Note If you purchased your equipment from a Patton Electronics reseller ask your reseller how you should proceed with w...

Page 145: ...Completing a request on the RMA Request page in the Support section at www patton com By calling 1 301 975 1000 and speaking to a Technical Support Engineer By sending an e mail to returns patton com...

Page 146: ...10 Contacting Patton for assistance Model 3086 G SHDSL Integrated Access Device User Guide 146 Warranty Service and Returned Merchandise Authorizations RMAs...

Page 147: ...apter contents Compliance 148 EMC 148 Safety 148 PSTN Regulatory 148 Radio and TV Interference FCC Part 15 148 CE Declaration of Conformity 148 Authorized European Representative 149 FCC Part 68 ACTA...

Page 148: ...tallation However there is no guarantee that inter ference will not occur in a particular installation If the equipment causes interference to radio or television reception which can be determined by...

Page 149: ...to maintain uniterrupted service If trouble is experienced with this equipment for repair or warranty information please contact our company If the equipment is causing harm to the telephone network t...

Page 150: ...e supplier Any repairs or alterations made by the user to this equipment or equipment mal functions may give the telecommunications company cause to request the user to disconnect the equipment Users...

Page 151: ...53 T1 E1 Interface 3086 RIK and RIT models only 153 64K G 703 Port 3086 RIF Model 153 Protocol Support 153 PPP Support 154 ATM Protocols 154 Management 154 Security 155 Compliance Standard Requirement...

Page 152: ...nectors for Ethernet Line and Console Field Factory Default Option Standard 1 year warranty G SHDSL Characteristics Full duplex 2 3 Mbps speed over 2 wire in accordance with ETSI ITU standard G 991 2...

Page 153: ...ector AMI Line Coding Protocol Support Complete internetworking with IP RFC 741 TCP RFC 793 UDP RFC 768 ICMP RFC 950 ARP RFC 826 IP Router with RIP RFC 1058 RIPv2 RFC 2453 Up to 64 static routes with...

Page 154: ...al Link Control LLC Subnetwork Access Protocol SNAP encapsulation Default VC mux mode ATM UNI 3 0 3 1 and 4 0 signaling ATM QoS with UBR CBR nrt VBR and rt VBR and per VC queuing and shaping IISP V 1...

Page 155: ...ogging or SMTP on events POST POST errors line DSL PPP DHCP IP Compliance Standard Requirements FCC part 15 Class A US EMC CE per RTTE 99 5 EC EMC LVD FCC Part 68 US Permission to connect CTR 12 CTR 1...

Page 156: ...Device User Guide 156 Power and Power Supply Specifications Fuse rating 250 Volts 400 mA time delay Connect the equipment to a 36 60 VDC source that is electri cally isolated from the AC source The 3...

Page 157: ...157 Appendix C Cable Recommendations Chapter contents DSL Cable 158 Ethernet Cable 158 Adapter 158...

Page 158: ...Cable DSL Cable 10 foot 3 m RJ 11 RJ 11 refer to RJ 11 non shielded port on page 160 Ethernet Cable Ethernet cable P N 10 2500 refer to RJ 45 shielded 10 100 Ethernet port on page 160 Adapter EIA 561...

Page 159: ...45 shielded 10 100 Ethernet port 160 RJ 11 non shielded port 160 RJ 45 non shielded RS 232 console port EIA 561 160 Serial port 161 V 35 M 34 Connector 161 V 35 DB 25 Female Connector 161 X 21 DB 15 C...

Page 160: ...ed port Single twisted pair TP for full duplex transmission The signals are not polarity sensitive RJ 45 non shielded RS 232 console port EIA 561 Pin No Signal Direction Signal Name 1 Output TX 2 Outp...

Page 161: ...DCE Source U XTC Transmit Clock DTE Source V RC Receiver Clock DCE Source W XTC Transmit Clock DCE Source X RC Receiver Clock DCE Source Y TC Transmitter Clock DTE Source AA TC Transmitter Clock DTE...

Page 162: ...Data A DTE Source 15 TC Transmitter Clock B DCE Source 16 RD Receive Data A DCE Source 17 RC Receiver Clock A DCE Source 18 LL Local LIne Loop 19 RTS Request to Send B DTE Source 20 DTR Data Terminal...

Page 163: ...inology 164 Local VT 100 emulation 164 Remote Telnet 164 Using the Console 165 Administering user accounts 166 Adding new users 166 Setting user passwords 166 Changing user settings 167 Controlling lo...

Page 164: ...oA IP over ATM PPPoH Point to Point over HDLC Ethernet Interface bridges and routers both have interfaces A single transport is attached to a bridge or router via an interface Object an object is anyt...

Page 165: ...d on the next lines For example ethernet After typing the you will not see the add delete set show list clear ethernet Then you may enter one of the keywords on the displayed list followed by a space...

Page 166: ...r accounts Adding new users To add a new user username use the command system add user username Comment system add login user username Comment The first command creates a user who can access the syste...

Page 167: ...r example to change the set tings for user fred system set user fred access default engineer superuser system set user fred maydialin enabled disabled system set user fred mayconfigure enabled disable...

Page 168: ...teN 32 fi gshdsl set dataRateI 0 fi gshdsl set Action Start Attribute Type Value Description Version RO The version number of the DSL driver Platform RO The platform name of the unit e g 3086 or 3086...

Page 169: ...istering user accounts 169 Model 3086 G SHDSL Integrated Access Device User Guide E Command Line Interface CLI Operation Default Setting of the unit Terminal Remote Interface Hdlc DataRateN 24 DataRat...

Page 170: ...E Command Line Interface CLI Operation Model 3086 G SHDSL Integrated Access Device User Guide 170 Administering user accounts...

Page 171: ...ame Relay Service Interworking FRF 8 176 FRS Configuration Options 176 DE Mapping 176 FECN Mapping 177 Translation Mode 177 FRS Name 178 CLI Configuration Method 179 Show one of the eight groups 179 S...

Page 172: ...transport 191 List all active Frame Relay Channels 191 Set configuration variables for the specified frame relay transport 191 Show detailed configuration information on the specified channel 191 Web...

Page 173: ...ch section describes the CLI and web interface for the feature set Frame Relay Local Management Interface The Frame Relay Local Management Interface LMI is a mechanism that enables two separate frame...

Page 174: ...te Defines the current state of the DTE side LMI Possible options are as follows Mgt_Port_DOWN Currently the LMI on the DTE side is DOWN Mgt_Port_UP Currently the LMI on the DTE side is UP mgtAutoStar...

Page 175: ...erface The following options are available Show current configuration Command lmi show fi lmi show FR_Mgt Type no_maintenance FR_Mgt State Mgt_Port_DOWN Full Report Cycle 6 User Max Errors 3 Net Max E...

Page 176: ...e transport service level Frame Relay Service Interworking functions are defined by the Frame Relay Forum specification Frame Relay ATM PVC Service Interworking Implementation Agreement FRF 8 1 FRS Co...

Page 177: ...a constant value of 1 ATM All ATM cells will have the EFCI bit set to a constant value of 1 Convert Frame Relay to ATM Direction The system will convert the FECN bit received from the Frame Relay pac...

Page 178: ...RS encapsulation conversion using Translate Mode Transparent The second translation mode option is to set the protocol value to transparent Transparent is used when the Protocol being used is not one...

Page 179: ...to all eight channels within that group Each channel is configured independently and will all run over as single LMI ses sion or with no LMI running The FRS FRF 8 connections are configured using the...

Page 180: ...r with the possible options available fi frs set group 1 DEMapping convert one zero fi frs set chn1 DEMapping convert Set variable attributes on a specified channel Command frs set channel variable va...

Page 181: ...Configuration Screen By selecting the Group link in the FRS Overview screen the detailed channel level information screen is displayed as shown below This screen allows configuration of all variables...

Page 182: ...ions that are required to supply a Frame Relay Network Interworking function The Frame Relay Network Interworking functions are defined by the Frame Relay Forum specification Frame Relay ATM PVC Netwo...

Page 183: ...Priority Indication bit in the ATM cell will be mapped to the DE Discard Eligibility bit of the resulting Frame Relay packet There are two options available Fr_sscs_only The FR SSCS removed from the...

Page 184: ...ata Link Connection Identifier Frame Relay side DLCI for the associated channel FRN Channel Name Allows the user to name the FRN channel This is helpful when viewing multiple channel connections to de...

Page 185: ...DLCI Activate Mux Mode port1 main 0 100 100 disable mux_one_to_one port2 backup 10 110 110 disable mux_one_to_one port3 none 20 120 120 disable mux_one_to_one port4 none 30 130 130 disable mux_one_to...

Page 186: ...E that after the first line the was used to determine the possible configuration options available to the user Note At any point during the typing of the command selecting the will display the possibl...

Page 187: ...l variables Note that the port num ber must be specified along with the channel as described in the above chart The following screen capture shows the setting of the DLCI for port 5 channel 1 Note tha...

Page 188: ...s that are available Each Port Number in the left column is a hyperlink that will display a more detailed view of the port along with the configuration of the channel level information This screen is...

Page 189: ...nels associated with the specified port Note that in the screen show below only a single channel is avail able for configuration This is because the port shown above is set to a MuxMode of one to one...

Page 190: ...ne fragmentation of the packets based on the Frame Relay Forum IA FRF 12 If this variable is set to 0 then FRF 12 Frame Relay Fragmentation will be disabled If set to any other value it will set the f...

Page 191: ...t name number Delete a single frame relay connection using either the connection name or number name the name used when creating the transport number the ID number found when listing the transports Li...

Page 192: ...rough either the CLI or web interface on the unit Clock Mode Determines the source of timing for the unit Internal The unit will generate the appropriate clock speed defined by the speed setting of th...

Page 193: ...internal Intf Speed 2048 Tx Sample Point txclk Tx Clk Inv normal Rx Clk Inv normal Gain help about the Serial Interface Command serial help This command will request that the system provide help about...

Page 194: ...s the configuration variables as they are displayed on the web management screen Ping and Trace Route The ping and trace route features are now available from both the web and CLI of the Patton Electr...

Page 195: ...p traceroute start 192 168 50 2 fi traceroute to 192 168 50 2 192 168 50 2 30 hops max 12 byte packets 1 192 168 50 2 192 168 50 2 0 ms 0 ms 0 ms If the traceroute is unsuccessful it can be canceled u...

Page 196: ...system This feature can be found on the web under the System link The following screen capture shows the backup and restore web page Backup Configuration To backup the configuration of the unit selec...

Reviews:

No comments

Brands by name

Popular brands

Load more brands