background image

User manual XC-32 XC-320 XC-4200

As well, the 

192.168.1.12

 machine will not be able to send (

smtp

) or receive (

pop

) e-mails.

Other services can be used. The 

192.168.1.13

 machine cannot issue a telnet session, nor

a FTP transfert.
The last rule allows all 

192.168.0.0

 subnetwork's machines to connect to Internet.

XI.1.4.2 - Input Firewall

For security reasons, we can expected that an Internet host could not issue a Telnet
session or access to a Rawtty port on Xcell. Only the LAN machines will be authorized to
administrate Xcell or to connect to a Rawtty port. To do this, make this 

Input Firewall

chain.

XI.1.4.3 - Output Firewall

If you want that a terminal connected to Xcell cannot issue a Telnet session on any
Internet machines, make this 

Output Firewall

 chain.

-80-

Summary of Contents for XC-32

Page 1: ...20 XC 4200 User MANUAL Version 1 2 DECISION Europe 3 rue de Lattre de Tassigny BP14 85170 ST DENIS LA CHEVASSE FRANCE Tel 33 02 51 41 41 89 Fax 33 02 51 41 41 90 Web http www xcell com E mail support...

Page 2: ...note 15 IV Configuration 16 IV 1 Introduction 16 IV 2 Entering IP address 16 IV 2 1 Entering IP address from Xcell administrator 16 IV 2 2 Entering IP address from a terminal 17 IV 3 HTTP Configuratio...

Page 3: ...tty and RemoteCOM 37 VI 1 Introduction 37 VI 2 RemoteCOM 37 VI 2 1 RemoteCOM under Windows 95 98 37 VI 2 1 1 Setting up the Xcell 37 VI 2 1 2 Installation of RemoteCOM driver 38 VI 2 2 RemoteCOM under...

Page 4: ...s side Xcell 57 VII 7 4 Configuration of server s side XC 58 VIII Printer Mode LPD 59 IX Rtelnet Mode 60 IX 1 Definition 60 IX 2 Configuration 60 IX 3 Rtelnet Pool 61 X Asynchronous PPP Mode 62 X 1 I...

Page 5: ...1 4 Examples 78 XI 1 4 1 Forward Firewall 79 XI 1 4 2 Input Firewall 81 XI 1 4 3 Output Firewall 81 XI 2 Radius 82 XI 2 1 Introduction 82 XI 2 2 Xcell hold Radius attributes 82 XI 2 3 Radius requests...

Page 6: ...on a remote Xcell Remote access server s family is composed by the following products p XC 32 provides 2 asynchronous ports RS232C and one Ethernet port p XC 320 provides 4 or 8 asynchronous ports RS...

Page 7: ...4200 WAN Link Printer Ethernet Network Modem Lan link Aquisition de donn es Work Portable computer Serial port server function Raw Mode Gateway Terminal server function Remote access router function...

Page 8: ...server the rawtty application to redirect the in and out data flow of the specified communication port dev ttyx to one of XC 320 port RemoteCOM is provides the same function for Windows 95 98 NT syst...

Page 9: ...User manual XC 32 XC 320 XC 4200 Figure 1 Using of XC as a terminal server Figure 2 Using of XC as remote access server 9...

Page 10: ...User manual XC 32 XC 320 XC 4200 Figure 3 Using of XC to connect serial equipments 10...

Page 11: ...XC is composed by a line of five LEDS XC 32 Designation Color State Meaning Setup Locate Red On Setup mode activated Off Normal mode Clignotemen t Locate function activated Link Red On No presence of...

Page 12: ...EDS Designatio n Color State Meaning Setup Red On Setup mode activated Off Normal mode Blinking Locate function activated LAN Link Red On No presence of the network Off Presence of the network LAN Tx...

Page 13: ...ault Isdn Fan fault Green On One isdn interface activated at least Off No isdn interface activated Blinking Fan fault Link Red On No presence of the network Off Presence of the network Tx Orange Data...

Page 14: ...port 10baseT p p p p 1 on off button The front face of XC 4200 displays the following elements p p p p 4 8 12 or 16 asynchronous ports RS232C V24 or RS422 485A p 1 asynchronous port noted Serial 1 Co...

Page 15: ...warning Xcell Technology reserves itself the right to revise this publication without having to provide notification for such revisions Aslong as reasonable precautions have been taken Xcell Technolog...

Page 16: ...r Before using Telnet or HTTP protocols you just need to fix Xcell IP address This can be made with Xcell administrator or with a terminal IV 2 Entering IP address IV 2 1 Entering IP address from Xcel...

Page 17: ...d with the following commands IFCONFIG IP interface IP_address ROUTE ADD NET interface destination gateway netmask Example ROOT ifconfig ip eth0 192 168 1 11 Ok ROOT route add net eth0 192 168 1 0 0 0...

Page 18: ...User manual XC 32 XC 320 XC 4200 Click on GO and open a session under the name root Default password is root Now you can configure your Xcell 18...

Page 19: ...adcast address By default this address is the one of the system with 255 in place of the machine address For a network address 192 168 2 0 broadcast address will be 192 168 2 255 By default network ma...

Page 20: ...m Xcell that these frames run through the 192 168 2 1 router There are three manners for this The first consists in informing Xcell that all IP frames intended for the 192 168 1 2 server have to be se...

Page 21: ...s interfaces IV 5 1 Software settings Configuration of a serial port can be done with serial command You must enter individually each parameter ROOT serial speed 9600 4 ROOT serial csize 8 4 ROOT seri...

Page 22: ...xample to program the first five Xcell ports in each of these modes commands would respectively be ROOT serial mode term 1 Ok ROOT serial mode printer 2 Ok ROOT serial mode raw 3 Ok ROOT serial mode p...

Page 23: ...3 Ok ROOT serial flowctrl none 4 Ok IV 5 5 Automatic disconnection of a Modem If there is no data traffic during a determined deplay on port where the modem is connected Xcell can decide to disconnect...

Page 24: ...nds that are dealt with in this chapter IV 6 Saving and restoring Xcell configuration IV 6 1 Saving in FLASH memory All parameters are conserved by Xcell in RAM up to the next Xcell boot If you want t...

Page 25: ...user account The opening of a user account can be made through the user commands Thanks to these commands you can create or modify a user form To create a new form use the user add command You have t...

Page 26: ...cell can be configurated so that it calls dial in user back Thus phone number dialed by Xcell can be predefined static callback or provided by the user dynamic callback In case of a static callback Xc...

Page 27: ...tate and interrupts the connection if it falls One simple solution to this problem is to make the modem DCD always active p Configuration panel p Modems p Your modem s properties p Connection tab p Ad...

Page 28: ...net session on another port other than port 23 you just have to enter the following command ROOT user telnetport paul 1 25 IV 8 Management of a modem connection A Terminal can be connected directly on...

Page 29: ...it Audits generate some usefull information to control Xcell s activity or to analyse configuration errors These information are displayed in real time or redirected a file Audit commands enable you t...

Page 30: ...ferents types are auth Messages about authentication printer Messages about lpd daemon isdn Messages about isdn connections system Messages about system parameters DHCP RADIUS save ppp Messages about...

Page 31: ...you will show the ten last lines of the audit file IV 9 4 List of created audits The audit show command enables you to display the list of declared audits Example ROOT audit show buffer 0 0 0 0 debug...

Page 32: ...User manual XC 32 XC 320 XC 4200 ROOT audit start Ok To stop a console audit use the audit stop command ROOT audit stop Ok 32...

Page 33: ...with a limited choice of commands Moreover up to 3 different sessions can be open on any server Use the command XCELL telnet myserver Connection login can be immediately displayed on the terminal scre...

Page 34: ...ample type the following command XCELL telnet myserver 1301 V 3 Multi sessions Up to three Telnet sessions may be issued on one same terminal A terminal with an emulation that can bear a change of scr...

Page 35: ...port 7 wants to close his first session he will have to enter XCELL close session 1 If the same user wants to close all his sessions he will enter XCELL close session all V 4 Automatic Telnet It is p...

Page 36: ...User manual XC 32 XC 320 XC 4200 36...

Page 37: ...95 98 VI 2 1 1 Setting up the Xcell Only flow control parameter must be set on the Xcell Configuration example with Telnet console First display current ports configuration ROOT serial show all Port...

Page 38: ...sk No to Windows s automatic detection p Click on Others p Then click on Have disk and find the way to the path in which you have make a copy of RemoteCOM driver remcom inf p Restart Windows after the...

Page 39: ...port number p Example Xcell 192 168 4 23 port 7 4 Using RemoteCom You can audit RemoteCOM activity using the RemoteCOM application icon in the task bar p Click on RemoteCOM icon p Click on Status p D...

Page 40: ...M port number 6 Troubleshooting p Check if Xcell is visible on the network using ping or telnet p Check configuration and state of Xcell s port p Read the log file VI 2 2 RemoteCOM under Windows NT sy...

Page 41: ...nd recepts states of DCD and DSR signals VI 2 2 2 Installation of RemoteCOM driver RemoteCOM for WINNT is composed of p A service module RemoteCOM service p A driver RemoteCOM driver p A program for s...

Page 42: ...data transmitted EV_TXEMPTY in WaitCommEvent label is right only when transmitted data have really been send by the remote port The COMSTAT cbOutQue field in ClearCommError is updated in the same way...

Page 43: ...tallation RemoteCOM service is disable The first time you will restart your system RemoteCOM will warn you and then you will be able to choose the activation mode of RemoteCOM service You can change s...

Page 44: ...TY device driver on UNIX SCO Open Server install sh Xcell rawTTY installation Xcell IP address 192 168 1 42 192 168 1 42 Ok RET O Non N DEL exit O PORTS in RAW mode ex 1 2 7 enter 5 6 5 6 Ok RET O Non...

Page 45: ...e delay v1 d u username c device xcell_IP port_num Keepalive helps to regularly check Xcell s physical presence on the network A request is carried out every delay second s to check if the connection...

Page 46: ...ual XC 32 XC 320 XC 4200 rawtty dev raw4 192 168 1 12 5 The rawclose command enables to force to close port declared in rawtty Syntax rawclose server_IP_address port_number Example rawclose 192 168 1...

Page 47: ...e end of the network to the other we must change this data flow in a characters flow mixed with codes which match with signal s states Packaging of data and forwarding of an IP network can generate de...

Page 48: ...OOT mux port 1 1 Ok ROOT mux dsrredirect none 1 Ok ROOT mux ctsredirect none 1 Ok ROOT mux show 1 Port Mode Sync Flush KAlive Remote IP port DCD DSR CTS debug 1 mux No Yes 0 192 168 2 1 1 none none no...

Page 49: ...port DCD DSR CTS debug 1 raw No Yes 0 0 0 0 0 0 none none none No ROOT serial show 1 Port Mode Speed FlowCtrl LineC Cs Par Stop ModemName RtelnetTimeO 1 raw 9600 soft local 8 none 1 2001 0 VII 5 Examp...

Page 50: ...t power off his terminal to permit the other technician to manage the PLC When a terminal is powered there is at least one signal activated RTS for a terminal or DTR for a terminal emulator You just h...

Page 51: ...te IP port DCD DSR CTS debug 1 mux No Yes 0 192 168 2 1 1 none none none No ROOT serial show 1 Port Mode Speed FlowCtrl LineC Cs Par Stop ModemName RtelnetTimeO 1 mux 9600 soft modem 8 none 1 2001 0 V...

Page 52: ...on is to automatically break the unused connection after a specified timeout Connection will be automatically relaunched when the technician will type any character on his keyboard On client s side Xc...

Page 53: ...top redirection of DSR signal mux dsrredirect none 1 p Receive a character thanks to the serial quick no command Xcell will wait for a character on its serial port before establishing the connection V...

Page 54: ...al mode raw 1 Ok ROOT mux dsrredirect none 1 Ok ROOT mux ctsredirect none 1 Ok ROOT mux show 1 Port Mode Sync Flush KAlive Remote IP port DCD DSR CTS debug 1 raw No Yes 0 0 0 0 0 0 none none none No R...

Page 55: ...the PLC will be accessible to the second technician after 3 minutes On client s side Xcell p Link DTR or RTS signal of the terminal to DSR signal of serial port n 1 make a cable p Enable redirection...

Page 56: ...be established State of DTR or RTS signal on the terminal will be applied to DCD on client Xcell This Xcell will be able to establish or break the connection matching with terminal state on or off Oth...

Page 57: ...tion of server s side XC ROOT serial mode raw 1 Ok ROOT mux ctsredirect none 1 Ok ROOT mux defaultdtr yes 1 Ok ROOT mux show 1 Port Mode Sync Flush KAlive Remote IP port DCD DSR CTS debug 1 raw No Yes...

Page 58: ...nnected on Xcell port 4 The remote printer name is printern where n is Xcell port number on which the printer is connected to If a printer is found on the port 4 the configuration will be the followin...

Page 59: ...he user connects to this equipment when he executes a Telnet session from a TCP IP machine Figure 6 The TCP IP workstation connects to the no TCP IP server through a Telnet session on Xcell Under UNIX...

Page 60: ...1 In our example port number 2004 is associated to Xcell port 1 To know what TCP port numbers are assigned to Xcell ports enter ROOT serial show all IX 3 Rtelnet Pool If you assign the same TCP port n...

Page 61: ...ntication this is a generated random chain of characters sent with its host name The client has to use the name to find the corresponding code to combine it with the chain and to encrypt the chain The...

Page 62: ...To display PPP forms list or all parameters of a form use the ppp show command Example ROOT ppp show Ppp Comment internet ROOT ppp show internet To delete a form use the following command ROOT ppp del...

Page 63: ...user account name that will be used by Xcell to authenticate itself to the remote host Example ROOT ppp authname internet paul Enter the user account password thanks to the ppp password command Examp...

Page 64: ...ernet yes X 5 8 Mask It is the network mask of the created ppp interface ROOT ppp mask internet 255 255 255 255 X 5 9 Routing induce modifications Xcell has to carry out on its routing table after a P...

Page 65: ...um size of IP packets in reception ROOT ppp mru internet 1500 X 5 12 MTU Maximum size of IP packets in transmission ROOT ppp mtu internet 1500 X 6 PPP connection establishment The establishment of an...

Page 66: ...ve negotiation the 2 IP address have to be defined by one machine or the other If the first or the second IP address is not defined negotiation will fail If one of both IP addresses is defined by each...

Page 67: ...to insure that IP addresses susceptible to be provided by Xcell are not used by other machines X 7 Compression Xcell bears BSD compression over a PPP link In case of PPP connection through modems betw...

Page 68: ...psulates C assigned IP frame in a Xcell assigned Ethernet frame p Xcell receives the Ethernet frame and extracts the IP frame p As the IP frame is not assigned for it Xcell consults its routing table...

Page 69: ...Ok ROOT route add net eth0 192 168 1 0 0 0 0 0 255 255 255 0 Ok p Specify your DNS address It will be transmitted to the client when the PPP link will be established ROOT domain server1 DNS_IP_Address...

Page 70: ...user callback paul static Ok ROOT user callbacnb paul 1 0251809000 Ok Define a modem form if none of those predefined corresponds to your modem ROOT modem add sporster Ok ROOT modem comment sporster...

Page 71: ...done Ok ROOT reset port 1 Ok X 9 2 Configuration of Windows 95 Dial Up PPP Client In the Dial Up Networking window right click on a connection icon and then click on Properties Create a remote access...

Page 72: ...ted in IP frames To do this you must use a WINS server or edit lmhosts files on each LAN machines X 10 Access Server function without Proxy ARP The situation is almost the same as previous However mod...

Page 73: ...hosts an IP address belonging to a sub network different from that used by the server For example if you initiated Remote IP with the value 192 168 2 1 all machines connected on Xcell will be respect...

Page 74: ...d advising the sender Reject p Refusing the operation without warning the sender Deny A frame type is characterized by p The transmitter p The receiver p The protocol UDP TCP ICMP p Eventually the por...

Page 75: ...1 Examples Chain activated every week from Monday to Friday Just select Start Day of the Week Monday and End Day of the Week Friday Chain activated every month from the 1st to 15th Just fill these tw...

Page 76: ...adopted Premise Conclusion sender AND target AND protocol AND port accept OR reject OR deny AND logical and OR logical or Xcell looks for the first rule that characterizes the IP frame to be analyzed...

Page 77: ...e first rule as source and source value of the first rule as target WARNING This option is valide only in a Forward Firewall chain XI 1 3 2 Type Of Service TOS There are five Type of Service p Minimum...

Page 78: ...connections to Internet or forbid a machine to use some services FTP mail web To forbid these connections just say to Xcell not to route frames coming from the machine to the selected services It can...

Page 79: ...nal box unchecked and TOS to standard In this example all frames Protocol all coming from the 192 168 2 11 machine Source 192 168 2 11 and targeting an Internet host Destination 0 0 0 0 will be reject...

Page 80: ...nes to connect to Internet XI 1 4 2 Input Firewall For security reasons we can expected that an Internet host could not issue a Telnet session or access to a Rawtty port on Xcell Only the LAN machines...

Page 81: ...ed cause of the end of session The working process of Xcell integrated Radius client is the following A user authentication request login PAP CHAP is first locally analysed If Xcell contains a suitabl...

Page 82: ...chronous ports Acct Status Type Session starting or ending informations START or STOP Acct Input Octets Number of bytes received during a session Acct Output Octets Number of bytes transmitted during...

Page 83: ...f Service Type Login or Callback Login Login TCP Port 0 1 0 1 0 1 if Service Type Login or Callback Login Login Service 1 if Service Type Login or Callback Login Acct Input Octets 0 0 1 Acct Output Oc...

Page 84: ...of the Time Out it repeats its request three times You can modify this number with the following command SYSTEM RADIUS AUTHRETRIES authentic server request retries SYSTEM RADIUS ACCTRETRIES accounting...

Page 85: ...DHCP server IP address It broadcast is request on the LAN to join the DHCP server If you want to specify a particular DHCP server IP address just use the system dhcp server command Example ROOT syste...

Page 86: ...ate XC s DHCP relay ROOT dhcp relay server 1 192 168 1 1 Note that you can enter IP address of a second DHCP server In this case Xcell will retransmit DHCP requests to both servers and will take care...

Page 87: ...R DSR DCD Speed 440 kbd Cabling RJ45 Option DB25M DB9 ROUTING Static routing Yes Yes Yes SECURITY PAP CHAP Yes Yes Yes Radius Client Yes Yes Yes Users database Yes Yes Yes Automatic callback Yes Yes Y...

Page 88: ...PP Yes LPD Yes Yes Yes RemoteCOM Option 1 1 Mux mode yes GENERAL M moiry 8 Mo 16 Mo Timer WatchDog Yes Yes Yes CPU 32 bits 40 Mhz 32 bits 133 Mhz Size 69 135 27 mm 220 166 31 mm 446 187 44 mm Power su...

Page 89: ...al XC 32 XC 320 XC 4200 XIII Cabling XIII 1 RJ45 connector PIN Circuit 1 CTS 2 TxD 3 Ground 4 RxD 5 DCD 6 DTR 7 RTS 8 DSR Figure 8 RJ45 Front view XIII 2 Xcell DTE to DTE equipment With RTS CTS flow c...

Page 90: ...User manual XC 32 XC 320 XC 4200 XIII 3 Xcell DTE to asynchronous terminal DTE With DTR DSR flow control XIII 4 Xcell DTE to DCE equipment RS232C Modem 90...

Page 91: ...C 4200 RJ45 DB25 Male Comx 232 Reference F00132 Update B 19 08 98 RJ45 DB9 Male Comx 232 Reference F00142 Update B 19 08 98 XIII 5 Xcell DTE to DCE equipment RS422A RJ45 DB25 Male Comx 422 Reference F...

Page 92: ...User manual XC 32 XC 320 XC 4200 RJ45 DB9 Male Comx 422 Reference F00162 Update C 28 06 99 XIII 6 Xcell DTE to DCE equipment RS485 RJ45 DB9 Male Comx 485 Reference F00181 Update A 02 07 99 92...

Reviews: