Bay Networks 3395A Скачать руководство пользователя страница 92

Страница: 92 / 146

Setting Up ARAP

6-8

893-826-A

Figure 6-2.

Operation of authentication and security methods (part 2)

Is SecurID

enabled for the

port?

Prompt user to

specify a User Name

from a Macintosh

dialog window.

Prompt user to

specify a SecurID

passcode from a

Macintosh dialog

window.

the current

User Name still

undefined?

Passcode

valid?

Maximum

Retry limit

reached?

Notify user

that access

was denied.

Yes

5076

Содержание 3395A

Страница 1: ... 893 826 A January 1995 Bay Networks Inc Corporate Headquarters 4401 Great America Parkway Santa Clara CA 95054 8 Federal Street Billerica MA 01821 Configuring the Model 3395A Access Serving Features ...

Страница 2: ...ommission FCC Statement Note This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy If it is not installed...

Страница 3: ...view to Setting Up the Communication Server 2 1 Preliminary Tasks 2 1 Specific Activities for Configuring Access Serving Features 2 2 Information about Model 3395A Server Cabling Methods 2 3 Six Wire Cabling 2 4 Eight Wire Cabling 2 5 Selecting Protocols and Features 2 7 Configuring Ports to Detect Multiple Protocols APD 2 9 Chapter 3 Setting Up Basic Modem Applications Basic Modem Port Setup 3 1 ...

Страница 4: ...IP Characteristics 4 14 SERVER IPX SAP Characteristics 4 15 Specify PORT Characteristics 4 15 Basic PORT IPX Characteristics 4 15 PORT IPX RIP Characteristics 4 16 PORT IPX SAP Characteristics 4 17 Specify Static Routes and Services 4 18 Chapter 5 Serial Line Internet Protocol SLIP Configuring Ports to Use SLIP and CSLIP 5 1 Configuring Modem Support for SLIP Links 5 1 Enabling SLIP CSLIP at Speci...

Страница 5: ...ect Server Performance 7 11 Memory Requirements for Sessions and Windows 7 12 Notes and Restrictions 7 13 Chapter 8 Using CCL Scripts Types of CCL Scripts Available 8 2 Communication Server Setup 8 3 Specify SERVER Characteristics 8 3 Specify PORT Characteristics 8 3 Script Server Setup 8 4 Directory Requirements 8 4 Installing CCL Scripts at Script Servers 8 5 Installing CCL Scripts at Macintosh ...

Страница 6: ...vi 893 826 A Flow Control A 9 Software Flow Control A 9 Hardware Flow Control A 10 Setup A 10 Flow Control Operation A 11 Hardware Flow Control Operation Using the Modem Control Signal Lines A 12 Index ...

Страница 7: ...er directory structure 3 10 Figure 4 1 A PC with an Internet address within the LAN subnet 4 7 Figure 4 2 A PC with an Internet address outside of the LAN subnet 4 8 Figure 4 3 A PC with no configured Internet address 4 10 Figure 4 4 Two communication servers in a back to back gateway 4 11 Figure 5 1 Direct SLIP connection 5 5 Figure 5 2 Dial in SLIP connection 5 6 Figure 5 3 SLIP connections to r...

Страница 8: ...viii 893 826 A ...

Страница 9: ... Cabling support for modem applications 2 3 Table 2 2 Modem control flow control feature support 2 3 Table 2 3 Memory usage for features and protocols 2 8 Table 7 1 Default files 7 1 Table 7 2 Settings for port characteristics 7 7 ...

Страница 10: ...x 893 826 A ...

Страница 11: ...rations Chapter 3 Describes how to configure basic modem applications such as dial in dial back and dial out modems Chapter 4 Describes how to set up the server to support connections using the Point to Point Protocol PPP Chapter 5 Describes how to set up the server to support connections using the Serial Line Internet Protocol SLIP Chapter 6 Describes how to set up the server to support connectio...

Страница 12: ...ompt so the prompt in use at your site may be different The following default user prompts will be shown different prompt may be in use at your site VMS UNIX ULTRIX UNIX ULTRIX Superuser DOS C Ordering SynOptics Publications To purchase additional copies of this document or other publications for SynOptics products order by part number from Bay Networks Press at the following numbers You may also ...

Страница 13: ...ormation call toll free 1 800 524 3388 and ask for representative number 591 In the United Kingdom call Freephone 0800 289378 In Germany call 0130 37 32 In the rest of Europe call 44 272 760681 Outside the U S Canada and Europe call 614 529 1349 and ask for representative number 591 PhonePlus Whether you need a fast response to a technical question or a more concentrated and advanced level of tech...

Страница 14: ...Preface Preface xiv 893 826 A ...

Страница 15: ...acket Filtering CCL scripts What is a Communication Server Communication servers support connections between serial interface devices and other devices connected to the Ethernet network The serial interface devices include terminals serial printers personal computers running terminal emulation or networking software modems serial ports on other communication servers and host computer serial ports ...

Страница 16: ...ant to use With a communication server users can perform work on any computer that is connected to the network that the communication server is on Providing access from serial ports to host computer resources is referred to as terminal serving Similarly consider the example of a user who wants to print a job Without a communication server the user would need to print the job to a printer that is d...

Страница 17: ...ver directly over a serial line or through a modem PPP provides a standard method for transmitting multiprotocol datagrams over point to point links Because PPP is a datagram transmission service it is not a guaranteed delivery service To compensate flow control methods and the requirement by higher level protocols that messages be acknowledged before additional messages are sent means that most p...

Страница 18: ...C can connect to the communication server port directly or through a modem as shown in this figure When the PC and the communication server are configured appropriately the PC can gain access to Internet devices on the LAN through the communication server port 5109 Model 3000 Chassis with Model 3395A Server running PPP PC running PPP Modem Modem Internet address 140 179 78 20 Mask 255 255 255 0 Se...

Страница 19: ...d using the Van Jacobson compression algorithm refer to RFC 1144 Compression allows PPP links to operate with higher throughput actual performance depends on your application Compatibility with Model 3395A server security mechanisms IPCP can be used in conjunction with all Model 3395A server access security methods Model 3395A server product support IPCP is supported on Model 3395A servers that us...

Страница 20: ... server provides transparent access to IPX services devices or networks Specific applications include Connecting a remote dial in workstation or PC to the network This is a typical remote office or user to LAN application Figure 1 4 depicts this IPXCP configuration Figure 1 4 Basic IPXCP configuration using communication servers In this application the users at the remote IPX clients have access t...

Страница 21: ...he communication servers would typically be a null modem connection The connection will normally be a permanent link An asynchronous IPX router which has dial out capabilities could also be used in place of one of the communication servers Figure 1 5 IPXCP LAN to LAN configuration using communication servers 5434 Model 3000 Chassis with Model 3395A Server running PPP Model 3000 Chassis with Model ...

Страница 22: ...umbers identify individual nodes on a network segment Socket numbers identify the different applications within a single host The Multiprotocol software uses this standard addressing method For information about IPX addressing refer to the documentation supplied with your Novell NetWare software Setup and administration using native procedures You use the IPX client setup and administration proced...

Страница 23: ...abyte load image TS3395M SYS Serial Line Internet Protocol SLIP The Multiprotocol Communication Server software enables a user to run Internet protocols over an asynchronous serial line using the Serial Line Internet Protocol SLIP SLIP is specified by the Internet RFC 1055 The operation of SLIP over an asynchronous line hereafter referred to as a SLIP link requires that the communication server be...

Страница 24: ...C direct connection of a host to the local network and connection of a remote network Features of the SLIP implementation include Support for modems The server supports line speeds of 300 B s to 38 4 KB s 5445 Remote PC or Workstation Internet Addresses 182 13 113 4 PC or Workstation Internet Address 182 13 113 10 Remote SLIP Device Internet Addresses 182 13 130 10 Mask 255 255 255 0 SLIP Link Gat...

Страница 25: ...on with all Model 3395A server access security methods Model 3395A server product support SLIP is supported on Model 3395A servers using either the 6 or 8 wire cabling methods Xremote The communication server provides serial line support for the NCD proprietary Xremote Protocol The Xremote Protocol compresses the MIT X Windows Protocol across a serial line The Model 3395A server support for this p...

Страница 26: ...ire cabling methods and can run the following enhanced or multimegabyte load image TS3395M SYS For more information about the X Windows system and how to install the XDM manager in particular refer to X Windows System User s Guide Volume Three by Valerie Quercia and Tim O Reilly O Reilly and Associates Inc For general information about the Xremote Protocol refer to NCDware 2 3 Xremote User s Manua...

Страница 27: ...across the serial line It also decompresses Xremote traffic from the serial line and sends the X Windows Protocol across the LAN ARAP Features AppleTalk remote access ARAP allows a user to connect a remote Macintosh computer to an AppleTalk network through a point to point modem link A remote access server transfers AppleTalk packets between a remote Macintosh and an AppleTalk network so that the ...

Страница 28: ...A server ARAP implementation is compatible with both V1 X and V2 0 of AppleTalk remote access software Figure 1 9 Standard AppleTalk remote access configuration In the Model 3395A server configuration see Figure 1 10 a port on the communication server takes over the functions of the Macintosh computer remote access server and provides access to AppleTalk devices and networks Using this approach se...

Страница 29: ... documentation supplied with your AppleTalk Remote access software package from Apple Computer Inc You use Model 3395A server commands to configure the communication server The Model 3395A server ARAP related commands are described in Model 3395 3395A Commands Reference Compatibility with Model 3395A server security mechanisms ARAP can be used in conjunction with all Model 3395A server access secu...

Страница 30: ...ts can be configured to accept connections made via different protocols using the Automatic Protocol Detection Feature APD Using APD ports will automatically determine the protocol being used to make a connection and adjust port settings appropriately Alternatively by not enabling APD ports can be dedicated for use by a single access serving protocol Key features of APD include An individual port ...

Страница 31: ...ng Protocol messages which allow the server to learn IPX routes in order to send packets to the appropriate destination Servers also broadcast IPX RIP and SAP messages and can be configured with a manager specified or static IPX route Dynamic Routing The IP and IPX protocols support communication between devices on separate subnetworks through routers or gateways that are connected to two or more ...

Страница 32: ...ol packet type as well as other filter specific criteria Filtering is disabled by default The software can be configured to filter IP traffic based on the following criteria Source or destination address or network Internet address and or subnet IP packet type port number protocol setting of TCP SYN bit The software can be configured to filter IPX traffic based on the following criteria Source or ...

Страница 33: ...thod of autobauding because the CCL will determine the appropriate port speed and set it accordingly CCL scripts are required for ARAP connections but can be used to initialize the port and modem for other types of connections PPP SLIP interactive and so on CCL scripts are stored on script servers hosts that can transfer files to the communication server via TFTP Individual ports are configured to...

Страница 34: ...Introducing the Communication Server 1 20 893 826 A ...

Страница 35: ... For information about this task refer to Model 3395 3395A Hardware Installation and Maintenance Guide Install the server software at a load server You can install the software on a VAX host a UNIX host or a Model 3395A server The LattisNet Model 3395 Software Installation Guide supplied with your software kit details the procedures to do this The software kit information supplied with your softwa...

Страница 36: ...not enabled by default and you must enable them if you wish to use them Also some protocols require a password to be enabled 2 Initialize the communication server when you have enabled features and protocols This action allows all of the changes that you have made to take effect Use the INITIALIZE command or press the Reset switch again to do this 3 Configure ports to be dial in dial out dial in d...

Страница 37: ...eration Only one type of hardware flow control can be used at a given port Modem control and DCD DSR hardware flow control are mutually exclusive i e only one of these can be enabled at a given port On 8 wire interfaces modem control can be used concurrently with RTS CTS hardware flow control Table 2 2 shows the combinations that can be used Table 2 1 Cabling support for modem applications Cabling...

Страница 38: ...dems RTS CTS flow control enabled and cabling shown in Figure 2 2 Applications using CCITT V 42 compliant modems or other devices operating at high port speeds Figure 2 1 is a wiring diagram that shows the cabling needed to connect a communication server serial port to a modem for most standard applications i e those that do not require RTS CTS hardware flow control Figure 2 2 shows the wiring for...

Страница 39: ...oftware configuration you can use this pin as either CTS or RING but not both at the same time This scheme is useful with the following applications Terminal emulation and file transfer applications such as Kermit Xmodem Microphone and so on cabling shown in Figure 2 3 Applications such as SLIP and PPP using low speed modems modem control or DCD DSR enabled and cabling shown in Figure 2 3 Applicat...

Страница 40: ...nnecting a modem 8 wire port Straight Through Cable Communication Server Connector To Modem Modular Adapter 5440 Adapter Wiring Female RJ 45 to Male DB 25 1 2 3 4 5 6 7 8 22 20 2 7 3 8 4 5 RING RTS XMT GND RCV DCD RTS CTS Female RJ 45 Connector DB 25 Connector DCE Device Pin Signal Standard Modem Connection 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 CTS RING DTR XMT XMTGND RCVGND RCV DCD RTS ...

Страница 41: ...ed or freed up Table 2 3 only lists the access serving protocols that you can enable or disable There are access serving features such as interactive connections SLIP or CSLIP that do not need to be enabled Also there are protocols and features unrelated to access serving that can be enabled or disabled A complete list of these can be found in Model 3395 3395A Software Management Guide In some con...

Страница 42: ...Initialize the server after you have made all changes When a protocol is enabled the software sets all server or port characteristics associated with that protocol meaning those characteristics set with DEFINE SET SERVER and DEFINE SET PORT commands to their default values When a protocol is disabled the software changes all server or port characteristics associated with that protocol to reflect t...

Страница 43: ...pecify a port speed or use a CCL script to set the port speed when a call is made Chapter 8 covers the procedure to configure a port to use a CCL script To specify a port speed use the command DEFINE PORT port list SPEED port speed For example TS3395 define port 6 12 speed 14400 Three commands specify how APD will operate at a port DEFINE PORT port list APD protocol list This command specifies the...

Страница 44: ...is LOGOUT which means that the port will be logged off if APD is unable to determine which protocol is being used to make the connection The remaining values ARAP PPP SLIP and INTERACTIVE indicate which protocol the port should assume is being used for the connection The protocol specified for this command must be included in the list of possible protocols in the DEFINE PORT APD command For exampl...

Страница 45: ... connected to it Port characteristics are set with SET DEFINE PORT commands For most devices the default settings for nearly all of the PORT characteristics are appropriate This section highlights the changes that you will need to make If a local service is available at several ports for example a modem pool you must set the appropriate port characteristics for all the ports offering the local ser...

Страница 46: ...eristic is enabled by default on all serial ports When enabled the port automatically matches the baud rate of the modem when the user presses the RETURN key a few times at initialization time For the access server to use the autobaud feature however the modem must use 8 bit no parity or 7 bit even parity characters If the characters cannot be set to 8 bit no parity or 7 bit even parity you must d...

Страница 47: ...nections other than ARAP connections Situations where the characters from the modem cannot be set to 8 bit no parity or 7 bit even parity When a CCL script is not used at the port Typically you will set the port speed to match the modem speed The following example command would be used for this TS3395 define port 6 speed 38400 Flow Control Flow control is often used in modem connections to prevent...

Страница 48: ...ribed earlier in this chapter 2 Specify the type of access allowed to the port Use the command TS3395 define port 8 12 access local 3 Define dedicated services To ensure security many dial in ports limit connections to only one interactive host service LAT or TELNET called a dedicated service The command is DEFINE PORT port list DEDICATED SERVICE service name The following are some examples of how...

Страница 49: ...them from the modem use a command such as TS3395 define port 8 access remote If you want the port to originate and accept connections for example a modem that will be used for both dial in and dial out use a command such as TS3395 define port 8 access dynamic 3 After the port is set up to communicate with the modem configure a dial out service at the server so that the network can communicate with...

Страница 50: ... TCP IP services can also be created by assigning an internet address or domain name to one or more ports e g creating an Internet rotary Use the DEFINE SERVER INTERNET ROTARY command For example TS3395 define server internet rotary 112 132 11 1 5 8 A user at a PC whose serial port is connected to a server port can then connect to the dial out service while running Kermit or a similar program A us...

Страница 51: ...23 that the system manager created with LATCP Setting Up Dial back Ports Dial back ports combine the characteristics of a dial in port and a dial out port Like dial in ports they provide local access connections to services on the network However they provide this by having the server port instruct the modem to dial the telephone of the user who wants to log in The dial back feature uses the Netwo...

Страница 52: ...ies and the common script are located in the directory path tftpboot SCRIPTS The tftpboot directory is the TFTP home directory of the host with the domain name UNIXHOST BAYNETWORKS COM TS3395 define server script server unixhost baynetworks com tftpboot SCRIPTS TS3395 set server script server unixhost baynetworks com tftpboot SCRIPTS You can specify up to four script servers for each server unit C...

Страница 53: ...fy when logging on to the port at the Enter username prompt At a given script server all username directories must be located in the same directory For ease of management you can create a directory just for script files rather than use a directory that already contains many files such as usr bin tftpboot or etc on a UNIX host The username and the directory name cannot include space or tab characte...

Страница 54: ...itor to create the script file which contains the instructions that permit the server to dial back to another modem The name of the file is dialback At a UNIX host the filename must consist of all lowercase letters dialback When creating the file follow the syntax rules listed in the next section Refer to Model 3395 3395A Software Management Guide for more information about scripts Script File Str...

Страница 55: ... varies from system to system Follow the configuration instructions for the TFTP daemon tftpd in the system documentation such as MAN pages to determine how to locate the TFTP home directory On Sun Workstations for example the MAN page for tftpd says that the home directory is specified in the etc inetd conf file and that the factory default home directory is tftpboot Therefore you would examine t...

Страница 56: ...ements on your UNIX system Script File Execution and Processing The server executes script files either when the user logs on to an appropriately configured port or when the user issues the SCRIPT command The following steps describe what happens during script file processing and execution 1 The user attempts to log on to a dial back port The user specifies a username when the Enter Username promp...

Страница 57: ... the modem which then dials the remote modem The remote modem has only a limited time to respond the amount is set by the PORT DIALBACK TIMEOUT characteristic If the remote modem does not respond within the specified time or if the line is busy the server logs out the port and drops the connection If the remote modem does respond within the specified time the server begins the normal login sequenc...

Страница 58: ...Setting Up Basic Modem Applications 3 14 893 826 A ...

Страница 59: ...the Server PPP and IPX are configurable features which are disabled by default PPP must be enabled on the server in order to use IPCP or IPXCP IPX must also be enabled on the server in order to use IPXCP When PPP is enabled IPCP support is automatically enabled You must obtain a password to enable IPX A password is not needed to enable PPP For information about obtaining a password to enable IPX c...

Страница 60: ...r 3 covers how to set up a port to support dial in dial out or dial back capabilities Configuring PPP The basic steps for setting up a server to support IPCP and IPXCP connections are 1 Enable PPP at specific ports or use APD 2 Specify optional PPP PORT characteristics 3 Configure the NCP After the port has been configured for PPP operation you must perform additional steps that are specific to th...

Страница 61: ...evice to determine which PPP options they use during the PPP session With this characteristic disabled the communication server port waits for the remote device to initiate negotiations ENABLED is the default DEFINE PORT port list PPP DEFAULTS ENABLED This command resets port PPP characteristics back to their default values DEFINE PORT port list PPP RESTART TIMER n SET PORT port list PPP RESTART T...

Страница 62: ...lid values for time are 0 through 65535 seconds The default is 0 which means that the PPP link will not look for LCP echo reply packets The presence of other PPP traffic does not affect this time out period i e if the connection partner does not send an LCP echo reply packet the link will be terminated even if other traffic has been sent DEFINE PORT port list PPP PACKET LOGGING setting SET PORT po...

Страница 63: ...ally for dial in ports you will want to assign a REMOTE ADDRESS If you do not do this the user can configure the remote PC to have any Internet address This can pose a security risk or result in the remote PC being assigned to an incorrect subnet or duplicating an existing address Specifying Optional IPCP Port Characteristics Several optional PPP port characteristics are available to use depending...

Страница 64: ...ing IP Static Routes The Model 3395 3395A Commands Reference provides a detailed description of the DEFINE SET SERVER INTERNET ROUTE command You use this command to specify static IP routes Examples of IPCP Single Node Configuration This section includes three examples of single node configurations The differences among them depend on whether or not a PC running PPP has an assigned Internet addres...

Страница 65: ...ubnet Without a defined gateway the PC can use PPP to reach the communication server other devices directly attached to the communication server on a serial line such as device 140 179 n n and all devices on the LAN within the same IP subnet 140 179 0 0 With the router defined as a primary Internet gateway on the communication server the PC can also reach IP addresses outside of the local subnet t...

Страница 66: ...er if one exists on the LAN The communication server can then identify the address from the remote network and act as a router for the remote PC when the PC attempts to access devices on the communication server s local subnet The LAN devices can send network traffic from the local network back to the PC either through the communication server or through the router Using the Internet addresses of ...

Страница 67: ...ation server as in the previous example the PC has access to Internet addresses available through the router A PC with No Configured Internet Address Figure 4 3 shows a PC without an Internet address attached to the communication server The PC connection can be direct or through a modem and the PC can reside in the same subnet as the communication server or in a remote subnet A router is attached ...

Страница 68: ...ion when the communication server learns the Internet address of the device Example of an IPCP Network Configuration This section shows an example of a network configuration This configuration requires two communication servers connected over a serial line The two communication servers connect separate LANs through PPP Figure 4 4 shows the two LANs LAN A and LAN B connected by two communication se...

Страница 69: ...the router to the subnet where Server B resides TS3395 define server internet route 140 179 41 25 gateway 140 180 5 8 mask 255 255 255 0 The following command defines Server B as the router to the subnet where Server A resides TS3395 define server internet route 140 180 5 8 gateway 140 179 41 25 mask 255 255 0 0 5435 Model 3000 Chassis with Model 3395A Server A Model 3000 Chassis with Model 3395A ...

Страница 70: ...configuring IPXCP connections The communication server can communicate with any RFC 1552 compliant IPXCP IPX over PPP client software implementation a version of the Stampede Remote Office client software for example Using this software users at the remote IPX clients such as remote dial in workstations or PCs have access to the Novell services offered on the Novell Netware network unless the netw...

Страница 71: ...mber A communication server actually uses a minimum of three unique network numbers One network number is used for traffic that is sent or received on the Ethernet network Another network number is used for traffic that is sent over a given PPP link setting this up is covered later The third network number is an internal network number which is used inside the server for transferring information b...

Страница 72: ...ver will not broadcast any routing information The default is FULL DEFINE SET SERVER IPX RIP BROADCAST TIMER time This command specifies how frequently the communication server will broadcast RIP information on the Ethernet network Valid values for time are whole numbers between 0 and 4294967295 seconds The default interval is 60 seconds DEFINE SET SERVER IPX RIP BROADCAST DISCARD TIMEOUT timer mu...

Страница 73: ...eeps SAP information that it receives from other devices connected to the Ethernet network The timer multiple that you specify is multiplied by the value you specify in the DEFINE SET SERVER IPX SAP BROADCAST TIMER time command Valid values for timer multiple are whole numbers between 0 and 4294967295 The default is 3 DEFINE SERVER IPX SAP MAXIMUM TABLE SIZE table size This command specifies the m...

Страница 74: ...r the PPP link or the server manager can specify a permanent node number The server notifies its connection partner of its node number when the link is being established The following command configures the IPX node number for the port i e the PPP link DEFINE SET PORT port list PPP IPX REMOTE NODE node number Valid values for node number are hexadecimal numbers between 0 the default and FFFFFFFFFF...

Страница 75: ...t SAP information over the serial link to the remote partner and if the information is broadcast how much information the PORT will send Valid choices for setting include FULL CHANGE and NONE FULL means that the PORT will broadcast the entire contents of the SAP table CHANGE means that the PORT will only broadcast new or changed SAP information NONE means that the PORT will not broadcast any SAP i...

Страница 76: ...the final destination Valid values for time are between 1 and 65535 The default is 400 FORWARDING ROUTER is one through which a destination network can be reached Valid values for router are hexadecimal numbers between 1 the default and FFFFFFFFFFFE DEFINE SET SERVER IPX SAP SERVICE name TYPE type NETWORK network number NODE node number SOCKET socket number HOPS hops This command specifies a stati...

Страница 77: ...hapter 2 to make sure that you are using the correct cables The basic tasks include Configuring modem support for SLIP links This task is only necessary when using a dial in SLIP application Enabling SLIP CSLIP at specific ports Assigning SLIP addresses Not all SLIP applications require the assignment of a SLIP address Configuring Modem Support for SLIP Links You must make sure to configure the pr...

Страница 78: ...ve If too many slots use compression the server or the remote device could run out of memory resources to perform other tasks When compression is in use on a link the server will allocate sufficient memory to support 16 slots the maximum permitted regardless of the number of slots that will actually be used on the link If the remote device only supports fewer slots that number will be the actual n...

Страница 79: ...uesting one The network topology at your site determines whether you need to assign local and or remote SLIP addresses to SLIP ports The format for the commands that assign these addresses are the following DEFINE PORT port number INTERNET SLIP ADDRESS port address REMOTE remote address MASk network mask In this command the variable port address represents a local Internet address that the port wi...

Страница 80: ...and then log the port out from another port Example Configurations The Multiprotocol software supports two models for the utilization of SLIP the single node model and the network model Single Node Applications Direct Connection of a Host to a Serial Port This configuration is used to connect a host workstation or PC directly to the network through a connection to a serial port One might use this ...

Страница 81: ... When the PC workstation dials in and initiates a SLIP session the port learns the PC workstation s Internet address and assigns the local address and remote address to be the Internet address learned from the remote device The server sets the SLIP network mask to be 255 255 255 255 To do this use the command TS3395 def port 8 intern slip addr 0 0 0 0 remote 0 0 0 0 mask 0 0 0 0 5436 Workstations ...

Страница 82: ...be forwarded over the SLIP link to the remote device Network Applications The network configuration is used to connect a remote network to the local network through a serial port In this application the port functions as a gateway connecting two networks Figure 5 3 depicts this configuration To configure this connection you must assign a local Internet address a remote address and a SLIP network m...

Страница 83: ...95A Server running PPP Model 3000 Chassis with Model 3395A Server running PPP Remote Network Internet Addresses 182 3 130 x Mask 255 255 255 0 Local Network Internet Addresses 182 13 113 x Mask 255 255 255 0 Ethernet Local Area Network LAN 2 Ethernet Local Area Network LAN 1 PC s File Server Host Systems VAX VMS System UNIX System SLIP Link Gateway Application ...

Страница 84: ...Serial Line Internet Protocol SLIP 5 8 893 826 A ...

Страница 85: ...editing is needed only if you are using Kerberos and or SecurID authentication and you have a CCL script that does not contain modifications to support these authentication methods Model 3395A server software kits provide CCL scripts for many modem models that are already modified appropriately This topic is covered in Chapter 8 Each of the activities listed above is covered in this chapter or in ...

Страница 86: ...cteristics that allow the server to operate as an AppleTalk node The following is a summary of these SERVER characteristics Refer to Model 3395 3395A Software Management Guide Supplement 5 x for more information about these commands DEFINE SERVER ARAP NODE NAME node name This command specifies the AppleTalk name of the server This name will be displayed in the Remote Access Status window of the Ma...

Страница 87: ...determine the current number of packet buffers available by examining the Packet Count field on the SHOW SERVER CHARACTERISTICS display The server may use up to 12 packet buffers for each port at which ARAP is enabled Since this decreases the number of packet buffers available for other applications you will probably need to increase the number when you enable ARAP For example six ports configured...

Страница 88: ...me using this command If you specify a time in minutes the Remote Access client will be disconnected after being connected for the specified amount of time You can also specify UNLIMITED which means that the user can remain connected for an indefinite amount of time UNLIMITED is the default SET PORT port list ARAP TIME REMAINING UNLIMITED NONE time UNLIMITED means that users at the port can now re...

Страница 89: ...server performs in any given situation depend on the manner in which the remote user attempts to log on as a guest or a registered user and on the settings for a number of DEFINE SET PORT and SERVER characteristics that affect the behavior of the Model 3395A server These characteristics include DEFINE SET PORT ARAP GUEST LOGINS DEFINE SET PORT CCL NAME DEFINE SET PORT DIALBACK DEFINE SET PORT KERB...

Страница 90: ...thentication or security related activities at these types of ports is as follows Kerberos authentication SecurID authentication Remote Access login Dial back script execution To users at remote Macintosh computers the Remote Access login appears to be the first operation that is performed For the user this activity is actually under control of the CCL script During the process of establishing the...

Страница 91: ...Name been defined for the port Leave current User Name undefined Start Use the value for the PORT User Name as the current User Name Is the current User Name still undefined Prompt user to specify a User Name from a Macintosh dialog window Prompt user to specify a Kerberos password from a Macintosh dialog window Is Kerberos enabled for the port B A Password valid Maximum Retry limit reached Notify...

Страница 92: ...ed for the port Prompt user to specify a User Name from a Macintosh dialog window Prompt user to specify a SecurID passcode from a Macintosh dialog window Is the current User Name still undefined D B C A Passcode valid Maximum Retry limit reached Notify user that access was denied No No No No Yes Yes Yes Yes 5076 ...

Страница 93: ...user Notify user oof unregistered user name error Record message in system log Notify user of bad password error Record message in system log Is the current User Name still undefined Are ARAP Guest logins allowed F E E 5077 Is user trying to connect as an ARAP Guest user No No No No Yes Yes No No Yes Yes Yes Yes Set current User Name to be Guest Connection accepted Obtain AppeTalk zone list etc an...

Страница 94: ... the user Request a dialback script for the current User Name Connection accepted Obtain AppleTalk zone list etc and complete the connection Is there a dialback script for the current User Name F E Is call back successful Is DIAL BACK enabled at the port Notify user that required dialback script not found Record message in system log No No No Yes Yes Yes Yes 5078 Done ...

Страница 95: ...ARAP_modem command You can include commas or spaces in the telephone number as permitted or required by your modem Each line of a dial back script file can be up to 132 characters long Each line must contain only one command Each command must be on only one line Within command scripts a pound sign character followed by a space or tab indicates a comment the server ignores the remainder of the line...

Страница 96: ...count when planning for real world applications however The actual number of ports that can be used with ARAP is reduced by factoring in overhead associated with other normal communication server activity Unit ARAP capacity rating is approximately 50 000 bits per second b s for a Model 3395A server Average modem line speed refers to the average speed at which the modems connected to the serial por...

Страница 97: ...ire cabling that is needed to connect a communication server serial port to a modem for ARAP applications Figure 6 5 is a wiring diagram that shows the cabling needed to connect a server serial port directly to a Macintosh computer You could use this configuration for debugging the remote access configuration on the Macintosh or for familiarizing yourself with remote access operations Figure 6 5 M...

Страница 98: ...Setting Up ARAP 6 14 893 826 A ...

Страница 99: ...rc In a typical setup XDM reads a configuration file when it starts In this example the default file is this usr lib X11 xdm xdm config Table 7 1 lists the typical default files that usually reside in the default directory usr lib X11 xdm and are listed in xdm config These files can reside in any directory however Table 7 1 Default files File Purpose Xservers Contains a list of servers to start wh...

Страница 100: ...ments XWindow System User s Guide Volume Three by Valerie Quercia and Tim O Reilly O Reilly and Associates Inc MIT XWindow system release notes and other documents are available through anonymous ftp on the Internet at export lcs mit edu or 18 24 0 12 When you reach this address use anonymous as the user name and password and go to the pub R4 or pub R5 directory For general information about Xremo...

Страница 101: ...y font server The XDM host can be one of the font servers but you still have to specify it as a font server Each time the Xterminal requests a font file the communication server requests the file from both the primary and the secondary font servers It retrieves the file from the server that responds first Figure 7 1 shows a network with the XDM host defined as the primary font server and another h...

Страница 102: ...server Check the NCD Setup Menu Diagnostic Session for errors tftp Security on Font Servers Because the communication server uses tftp to transfer fonts from the font server to the communication server and then across the NCD serial line you need to ensure that tftp has access to the font file directories on the font server In many XWindows environments tftp runs with the secure option disabled If...

Страница 103: ...ork for an XDM host using the Internet Broadcast address You specify an XDM host and query type with the DEFINE PORT XDM HOST QUERY commands You can allow a user to specify an XDM host with the XCONNECT command from the Model 3395A command interface after the user logs in to the port The user specifies a domain name or an Internet address and the communica tion server software searches for that XD...

Страница 104: ... serial session window dis appears at this point The XDM establishes an initial master session and the XDM login window appears after a few seconds This procedure uses two active communication server sessions When you log in at the XDM login window the XDM runs the Xsession file which usually executes the xsession file in your home directory This usually starts up additional windows and a window m...

Страница 105: ...dem ACCESS DYNAMIC This setting allows an interactive user login followed by the posting of a passive network session which Xremote requires SESSION LIMIT 16 The value must equal or exceed the maximum number of windows to be supported Sixteen is the recommended value for the SESSION LIMIT setting when running Xremote Be sure that the session limit on the communication server is equal to or greater...

Страница 106: ...nfigure the Server for Xremote Support The following communication server script specifies server parameters and port characteristics for Xremote support This is a sample script but you can modify it for the implementation at your site It assumes that you have enabled Xremote on the communication server This script is installed on a UNIX host on the network You associate a script with a port with ...

Страница 107: ... echo show port telnet characteristics define port 1 4 modem enabled define port 1 telnet remote 6001 define port 2 telnet remote 6002 define port 3 telnet remote 6003 define port 4 telnet remote 6004 define port 1 4 typeahead size 1024 define port 1 4 internet tcp window size 512 define port 1 4 session limit 16 define port 1 4 access dynamic Customize XDM hosts for each port define port 1 2 xdm ...

Страница 108: ...ORT port list PASSWORD ENABLED DISABLED DEFINE SET SERVER LOGIN PASSWORD password The SecurID Authentication System SecurID is a system of server software client software and accompanying SecurID cards from Security Dynamics Technologies Inc The system is designed to secure a TCP IP computer network preventing unauthorized users from gaining access to resources on a TCP IP network but allowing aut...

Страница 109: ...then reenter the original username If the user enters an incorrect name the communication server breaks the connection and returns the port to an idle state Notes on Memory Requirements for Xremote Xremote is a configurable feature and uses a significant amount of free memory when you enable it If you plan to use Xremote be sure that any other configurable features that you have enabled are absolu...

Страница 110: ... XDM login window Window requirements Xremote requires at least 2 700 bytes of memory per window after you establish the initial session The communication server automatically opens one login window with the initial X connection when you enable Xremote and each of these uses one session on the Model 3395A server After login the login window disappears and the session it used is terminated The soft...

Страница 111: ...t all V2 3 1 features In particular the remote restart from the local window manager is not supported The XDM host is not informed of the restart X11R5 XWindows code Multiprotocol Communication Server Software V4 4 and later operates with MIT X11R5 windows protocol but does not support all new features X11R5 font service The font loading server provided in Multiprotocol Communication Server Softwa...

Страница 112: ...Model 3395A Server Support for the Xremote Protocol 7 14 893 826 A ...

Страница 113: ... be used to initialize the port and modem for other types of connections such as PPP SLIP interactive There are some benefits to using CCL scripts even at ports where ARAP connections will not be used First one can use CCL scripts as an easy way of programming the modems Second one could think of a CCL as an alternate method of autobauding the serial port connected to the modem because the CCL wil...

Страница 114: ..._series For non ARAP connections such as PPP SLIP and interactive you can install the generic script used with the given modem at the script server For these types of connections no special CCL instructions are needed to support Kerberos or SecurID authentication Take advantage of V 42 LAPM error correction or V 42bis data compression for non ARAP connections such as PPP SLIP and interactive at po...

Страница 115: ...or domain name with a space Enclose the directory path in quotation marks For example TS3395 define server script server 140 179 224 10 tftpboot Specify PORT Characteristics Define which ports use which CCL files with a command of the format DEFINE PORT port list CCL NAME ccl name ccl name represents the filename which usually indicates the type of the modem connected to the port The file is locat...

Страница 116: ...ost is using the default home directory or a user specified home directory You should be aware of any TFTP security mechanisms available on your UNIX system Some TFTP implementations have no method of limiting the directories that TFTP has access to which can present a security risk at some sites Other implementations do have a method of limiting TFTP to certain directories which means that you mu...

Страница 117: ...rs also supply a CCL script when you purchase a modem To install the CCL scripts that are supplied by the Model 3395A server on a UNIX host complete the following steps 1 Change to the TFTP home directory using a command of the form cd tftp home directory For example on Sun Workstations using the default TFTP home directory tftpboot use the command cd tftpboot 2 Create a CCL subdirectory Use the c...

Страница 118: ...ess this window by running the Remote Access program and selecting the Remote Access Setup choice from the Setup menu Unless you are using Kerberos or SecurID authentication you should use the CCL script provided by the modem vendor on the remote Macintosh computer If you are using an authentication method then you will need to use a CCL script that has been modified to include extensions that han...

Страница 119: ...NSWER These commands are followed by a series of modem specific commands that Configure the serial port speed bits per character parity stop bits flow control Reset the modem to factory defaults Configure modem operation for Remote Access such as normal or direct mode RTS CTS flow control or no flow control no error correction no compression echoing off DTR handling speaker on off The modem specif...

Страница 120: ...le matchread command is MATCHREAD 700 JUMP error exit label Following the matchread command there are labels and commands for each possible CONNECT response that is defined by a match string Typically these commands inform the user of the progress of the connection attempt For example when a connection is made the user may be informed that the modem is Communicating at nnnn bps If the connection i...

Страница 121: ...ript to include Model 3395A server authentication extensions follow these steps 1 Make the CCL script an editable text file For example you can use the ScriptSwitcher program supplied on the Model 3395A server software kit or standard Macintosh programs such as the ResEdit program to change the file type to text This permits you to edit the file using a program such as TeachText Mockwrite or any o...

Страница 122: ...ng additional steps a Find all EXIT 0 commands in the script that can be reached from the ORIGINATE entry point b For each occurrence replace the EXIT 0 command with a JUMP 100 or whatever is the first label for the Model 3395A server extensions command 5 Insert the extensions at the end of the script You can use the Macintosh paste function to do this 6 Configure the Remote Access program on the ...

Страница 123: ... This text is usually located near the beginning of the CCL script For example you might see text similar to the following Note When the Nn commands of the TP Serial are like those of the PP we will need to change the Nn setting to allow a V 42 connection without a fallback to MNP4 n0 disable v 42 autoreliable c0 turn off MNP5 compression LABEL 5 pause 5 matchstr 1 6 OK 13 10 write AT n0 c0 13 As ...

Страница 124: ...a new PIN matchstr 9 109 PIN matchstr 10 110 Wait for the code on your card to change matchstr 11 111 PIN rejected Please try again matchstr 12 112 Please re enter new PIN matchstr 13 113 PINs do not match Please try again matchstr 14 114 reserved1 for future use matchstr 15 115 reserved2 for future use matchstr 16 116 Xooba Done Give the server 60 seconds to generate each message matchread 600 no...

Страница 125: ...upply new PIN anyway This is beyond the capability of a CCL to handle LABEL 109 note Unable to assign new PIN Contact system administrator 3 write 04 13 jump 100 Wait for code to change log in with new PIN LABEL 110 ask 0 Wait for card code to change jump 100 PIN rejected try again LABEL 111 ask 0 PIN rejected Try again jump 100 Re enter new PIN LABEL 113 ask 0 PINs do not match Try again jump 100...

Страница 126: ... code reports modem speed q3 Use RTS CTS flow control in full duplex mode k0 Enter command state but do not send break j0 Disable port rate adjust s7 60 To allow for an international call HSReset 0 1 0 0 0 0 settries 0 matchclr LABEL 1 matchstr 1 4 OK 13 10 write AT f d0 k3 k0 j0w2 q3s7 60 13 matchread 30 inctries iftries 2 59 Modem is not responding reset and send a break SBreak jump 1 Next Set u...

Страница 127: ...hstr 11 53 BUSY 13 10 matchstr 12 54 NO ANSWER 13 10 matchread 700 jump 59 Notice that all we do for different connect speeds is issue a CommunicatingAt command Remember we locked the interface speed to 19 200 bps so we don t want to reset the serial speed after we connect CommunicatingAt tells ARA what the actual line speed is so that it can set it s timers appropriately I guess your performance ...

Страница 128: ...r 2 11 CONNECT 1200 13 10 matchstr 3 12 CONNECT 2400 13 10 matchstr 4 13 CONNECT 4800 13 10 matchstr 5 19 CONNECT 7200 13 10 matchstr 6 14 CONNECT 9600 13 10 matchstr 7 20 CONNECT 12000 13 10 matchstr 8 18 CONNECT 14400 13 10 matchstr 9 50 NO CARRIER 13 10 matchstr 10 50 ERROR 13 10 matchstr 11 52 NO DIAL TONE 13 10 matchstr 12 53 BUSY 13 10 matchstr 13 54 NO ANSWER 13 10 matchread 700 jump 31 LAB...

Страница 129: ...ection pause 2 Causes problems with LanRover L 1 0 LABEL 98 write ho 13ho 13 Dreaded Christmas Abort re connect inctries iftries 50 125 Jump 98 LABEL 125 Notice that there is a label 125 in this CCL script and a label 98 just above five lines up but labels 100 to 116 are available for use No need to edit Model 3395 extensions in this case matchread 150 to hang up the modem LABEL 62 settries 0 paus...

Страница 130: ...Using CCL Scripts 8 18 893 826 A matchread 20 LABEL 65 exit 0 Add Model 3395 extensions immediately after this line ...

Страница 131: ...t support RNG Dial in modems that do not support RNG Dial in to remote access ports that do not support RNG automated data collection applications Dial in dial out modems that support RNG Dial in dial out modems that do not support RNG Dial in Modems that Support RNG This configuration is the standard for dial in lines that support the RNG modem control signal The server asserts the DTR modem cont...

Страница 132: ...hin 120 seconds after the modem has asserted DCD Server performs the disconnect sequence if DCD is deasserted for more than the period of time specified by the DCD TIMEOUT characteristic default is 2 seconds Server deasserts DTR if the user logs out of the port Dial in Modems that Do Not Support RNG This configuration is the standard for dial in lines that do not support the RNG modem control sign...

Страница 133: ...connected Server deasserts DTR if user does not log on within 120 seconds after the modem has asserted DCD Server performs the disconnect sequence if DCD is deasserted for more than the period of time specified by the DCD TIMEOUT characteristic default is 2 seconds Server deasserts DTR if the user logs out of the port Figure A 2 State diagram for dial in modems that do not support RNG Port Charact...

Страница 134: ...D Server performs the disconnect sequence if DCD is deasserted for more than the period of time specified by the DCD TIMEOUT characteristic default is 2 seconds Server performs the disconnect sequence if the session is disrupted Dial out Modems This configuration is the standard for dial out lines The server asserts the DTR modem control signal in response to the formation of a session connection ...

Страница 135: ...or more than the period of time specified by the DCD TIMEOUT characteristic default is 2 seconds Server performs the disconnect sequence if the session is disrupted Dial in Dial out Modems that Support RNG This is the standard configuration for dial in dial out lines that support the RNG modem control signal The server asserts the DTR signal in response to the assertion of the RNG modem control si...

Страница 136: ...to select the port speed when the PORT AUTOBAUD characteristic is set to ENABLED However the DCD signal must be asserted within 15 seconds after you start autobauding the port or logging in or the session will be disconnected Server deasserts DTR if user does not log on within 120 seconds on a port functioning as a dial in line Server deasserts DTR if DCD is not asserted within 120 seconds of the ...

Страница 137: ...r normally asserts DTR If a remote connection is formed to the server the server assumes the port is functioning as a dial out line otherwise the port is assumed to be functioning as a dial in line Port Characteristic Setting DSRLOGOUT DISABLED DTRWAIT DISABLED MODEM CONTROL ENABLED ACCESS DYNAMIC DCD not observed for 120 seconds increment failed call count Make dial out connection No data no DCD ...

Страница 138: ...will be disconnected Server deasserts DTR if user does not log on within 120 seconds of the assertion of DCD Server deasserts DTR if DCD is not asserted within 120 seconds of the formation of the remote server connection The server increments a failed call count If the failed call count reaches the value set for the server PASSWORD LIMIT characteristic the server performs the disconnect sequence S...

Страница 139: ...ntrol characters Using XON XOFF flow control the receiver that wants to stop a transmitter sends the transmitter an XOFF character To start the transmitter the receiver sends an XON character The use of XON XOFF flow control can cause a problem with some data transfers such as binary files where the XON or XOFF characters may be data that needs to be passed to the connected partner on a session In...

Страница 140: ...Setup The following PORT characteristics affect the flow control capability FLOW CONTROL INPUT FLOW CONTROL OUTPUT FLOW CONTROL SESSION TYPEAHEAD SIZE The DEFINE SET PORT FLOW CONTROL characteristic defines the default flow control mode of operation for the server port The possible modes of operation are CTS Hardware flow control DISABLED No flow control DSR Hardware flow control ENABLED XON XOFF ...

Страница 141: ...tting the SESSION characteristic you can disable the recognition of special characters such as the XON and XOFF characters as well as other characters such as the forward switch character Flow Control Operation The following operation description applies when either flow control mode is used and the PORT INPUT FLOW CONTROL characteristic is set to ENABLED Each port has a buffer called the type ahe...

Страница 142: ...low control when the port is transmitting when the PORT OUTPUT FLOW CONTROL characteristic is set to ENABLED is considerably simpler than when the port is receiving Regardless of the flow control method whenever the attached device asserts flow control to tell the port to stop transmitting the port stops Whenever the attached device tells the port to start transmitting again the port starts Finall...

Страница 143: ...k features 6 5 authentication 6 5 autobaud 3 2 8 1 Automatic Protocol Detection APD See APD feature 1 16 B buffer type ahead A 11 C cable 6 wire 2 4 8 wire 2 5 ARAP Protocol 6 13 server methods 2 3 support for modem applications 2 3 CCL scripts compatibility 1 19 definition extensions 8 5 formatting 8 7 installing at ARAP ports 6 4 installing for Macintosh 8 6 types 8 2 uses of 1 19 Command Contro...

Страница 144: ...Protocol See IP Protocol IP Control Protocol See IPCP Protocol IP Protocol packet filters 1 18 routing 1 17 IP PPP Protocol See IPCP Protocol IPCP Protocol configuration 4 1 features 1 3 security compatibility 1 5 IPX Control Protocol See IPXCP Protocol IPX Protocol applications 1 6 implementation features 1 8 memory usage 2 8 network numbers 4 13 packet filters 1 18 protocol packet type 4 13 RIP ...

Страница 145: ...ol function 1 3 gateway 4 11 memory usage 2 8 port characteristics 4 3 4 5 printer serving 1 3 prompt server xii superuser xii UNIX ULTRIX xii user xii VMS xii protocols enabling disabling 2 8 selecting 2 7 R remote access login 6 6 routing capabilities full IPX support 1 17 limited IP support 1 17 dynamic 1 17 large Internet IP 1 17 Novell NetWare networks IPX 1 17 static 1 18 S SAP protocol 1 8 ...

Страница 146: ...ault files 7 1 defining font servers 7 3 installing XDM manager 1 12 more information 7 2 starting 7 1 XDM host See X Display Manager XDM XON XOFF flow control A 12 Xremote Protocol configuration 7 2 defining at server ports 7 5 enabling on the server 7 2 enhancing security 7 10 establishing session 7 6 function 1 11 logging out 7 8 memory requirements 7 11 memory usage 2 8 port settings 7 7 using...

Результаты поиска

Содержание 3395A

Отзывы:

Похожие инструкции для 3395A

Бренды по названию

Популярные бренды

Bay Networks 3395A, Руководство по настройке

Результаты поиска

Содержание 3395A

Отзывы:

Похожие инструкции для 3395A

Бренды по названию

Популярные бренды