Bay Networks 5393 Скачать руководство пользователя страница 36

119346-A Rev. A

    Release 5.1 Supplement for Remote Annexes

18

IP Static Route Configuration

When IP is running over the link, you can configure static routes for that
link with the Framed-Route (22) attribute. Note that the Remote Annex
will accept the nonstandard format for this attribute used by the Nautica
RADIUS server as well as the standard format.

Filtering Services

The Remote Annex supports filtering of IP, TCP, and UDP packets.

The Annex-IP-Filter (VSA Bay Networks 28) attribute allows the
RADIUS server to specify a packet filter in the Remote Annex packet
filter format, because RADIUS does not define a specific filter format.
You can then configure the RADIUS server to upload specific packet
filters based on the user’s profile.

The Remote Annex also supports the Filter-Id (11) attribute in
conjunction with the Annex-Filter (VSA Bay Networks 28) attribute.
Upon receiving a Filter-Id (11) attribute, the Remote Annex initiates
another Access-Request. The Remote Annex then waits for an Access-
Accept {2}
 with the list of the actual filters supplied in Annex-Filter
(VSA Bay Networks 28)
 attributes. This method requires a
corresponding “pseudo-user” in the RADIUS server. Nested Filter-Id
(11) 
attributes are not permitted.

The algorithm for applying filters is: the Access-Accept {2} packet is
parsed. If an Annex-Filter (VSA Bay Networks 28) attribute is present,
the filter is applied to the user’s session. If a Filter-Id (11) attribute is
present, then the Remote Annex makes a “pseudo-user” request as
described earlier. The response to the “pseudo-user” request MUST
contain only Annex-Filter (VSA Bay Networks 28) attributes; other
attributes are ignored by the Remote Annex. Note that the order of
processing the filter attributes is not important, because the order of the
Remote Annex filters is not important.

Содержание 5393

Страница 1: ...Part No 119346 A Rev A October 1997 Marketing Release 5 1 Release 5 1 Supplement for Remote Annexes ...

Страница 2: ...rnment is subject to restrictions as set forth in subparagraph c 1 ii of the Rights in Technical Data and Computer Software clause at DFARS 252 227 7013 Notwithstanding any other license agreement that may pertain to or accompany the delivery of this computer software the rights of the United States Government regarding its use reproduction and disclosure are as set forth in the Commercial Compute...

Страница 3: ...IMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE In addition the program and information contained herein are licensed only pursuant to a license agreement that contains restrictions on use and disclosure that may incorporate by reference certain limitations and notices imposed by third parties ...

Страница 4: ...l title and ownership in both the Software and user manuals including any revisions made by Bay Networks or its licensors The copyright notice must be reproduced and included with any copy of any portion of the Software or user manuals Licensee may not modify translate decompile disassemble use for any competitive analysis reverse engineer distribute or create derivative works from the Software or...

Страница 5: ...that the functions contained in the software will meet the Licensee s requirements b that the Software will operate in the hardware or software combinations that the Licensee may select c that the operation of the Software will be uninterrupted or error free or d that all defects in the operation of the Software will be corrected Bay Networks is not obligated to remedy any Software defect that can...

Страница 6: ... and the limitations set out in this license for civilian agencies and subparagraph c 1 ii of the Rights in Technical Data and Computer Software clause of DFARS 252 227 7013 for agencies of the Department of Defense or their successors whichever is applicable 6 Use of Software in the European Community This provision applies to all Software acquired for use within the European Community If License...

Страница 7: ...h restricted or embargoed countries or ii provide the Software or related technical data or information to any military end user or for any military end use including the design development or production of any chemical nuclear or biological weapons 9 General If any provision of this Agreement is held to be invalid or unenforceable by a court of competent jurisdiction the remainder of the provisio...

Страница 8: ... ENTIRE AND EXCLUSIVE AGREEMENT BETWEEN BAY NETWORKS AND LICENSEE WHICH SUPERSEDES ALL PRIOR ORAL AND WRITTEN AGREEMENTS AND COMMUNICATIONS BETWEEN THE PARTIES PERTAINING TO THE SUBJECT MATTER OF THIS AGREEMENT NO DIFFERENT OR ADDITIONAL TERMS WILL BE ENFORCEABLE AGAINST BAY NETWORKS UNLESS BAY NETWORKS GIVES ITS EXPRESS WRITTEN CONSENT INCLUDING AN EXPRESS WAIVER OF THE TERMS OF THIS AGREEMENT ...

Страница 9: ...xes Configuring RADIUS Security 1 Using erpcd As a Proxy RADIUS Client 2 Using the Remote Annex s Native RADIUS Client 2 RADIUS Parameters 3 RADIUS Attributes 4 The RADIUS Dictionary File 8 Configuring Remote Annex Functions Using RADIUS 11 CLI Scripting 15 5393 and 6300 Functions 36 Using the Default Call Configuration 36 Configuring Session Parameter Blocks 37 Automated Firmware Download AFD 45 ...

Страница 10: ...119346 A Rev A Contents viii ...

Страница 11: ...ix 119346 A Rev A Tables Table 1 Remote Annex Automatic Services 12 Table 2 Remote Annex Port Mode Service Restrictions 14 Table 3 SPB Field Definitions 40 ...

Страница 12: ...119346 A Rev A Tables x ...

Страница 13: ...ninthisguidediscussesnew or revised features supported in Release 5 1 Before You Begin When administering a Remote Annex be sure to refer to this supplement for features supported in Release 5 1 If you want to Go to Configure RADIUS security page 1 Learn about Release 5 1 features for the Model 5393 and Model 6300 Remote Annex page 36 ...

Страница 14: ...f commands and command syntax lowercase italics indicate variables for which the user supplies a value In command dialog square brackets indicate default values Pressing selects this value Square brackets appearing in command syntax indicate optional arguments In command syntax braces indicate that one and only one of the enclosed value must be entered In command syntax this character separates th...

Страница 15: ...ta Link Control IP Internet Protocol IPCP Internet Protocol Control Protocol IPXCP IPX Control Protocol ISDN Integrated Services Digital Network L2TP Layer 2 Tunneling Protocol MMP Multi system Multilink PPP NAS Network Access Server PAP Password Authentication Protocol SPB Session Parameter Block PPP Point to Point Protocol PRI Primary Rate Interface SLIP Serial Line Internet Protocol TCP Transmi...

Страница 16: ... Bay Networks Customer Service You can purchase a support contract from your Bay Networks distributor or authorized reseller or directly from Bay Networks Services For information about or to purchase a Bay Networks service contract either call your local Bay Networks field sales office or one of the following numbers Information about customer service is also available on the World Wide Web at su...

Страница 17: ...r or reseller for assistance If you purchased a Bay Networks service program call one of the following Bay Networks Technical Solutions Centers Technical Solutions Center Telephone number Fax number Billerica MA 800 2LANWAN 978 916 3514 Santa Clara CA 800 2LANWAN 408 495 1188 Valbonne France 33 4 92 96 69 68 33 4 92 96 69 98 Sydney Australia 61 2 9927 8800 61 2 9927 8811 Tokyo Japan 81 3 5402 0180...

Страница 18: ...119346 A Rev A About This Guide xvi ...

Страница 19: ...nex in this case and a host based communication server RADIUS operates in three modes RADIUS Authentication includes authentication of the dial up user to the RADIUS server as well as authentication of the RADIUS server to the NAS RADIUS supports the authentication modes PAP Password Authentication Protocol CHAP Challenge Handshake Authentication Protocol and user name password validation Authoriz...

Страница 20: ...lient and ACP also take place when the security regime is RADIUS Using erpcd As a Proxy RADIUS Client To configure security using erpcd as a proxy RADIUS client 1 Set enable_security to Y and set auth_protocol to acp 2 Configure the erpcd conf file on the pref_secure1_host This causes the Remote Annex to send ACP authentication and authorization requests to erpcd erpcd converts these requests to R...

Страница 21: ...e_security This parameter must be set to Y for any security regime to work The parameter s default value is N pref_secure1_host This parameter must be set to the IP address of the primary RADIUS and RADIUS accounting server pref_secure2_host This parameter must be set to the IP address of the secondary RADIUS and RADIUS accounting server radius_acct_level This parameter indicates the level of RADI...

Страница 22: ...fault value is 10 radius_secret This string defines the RADIUS shared secret for the Remote Annex By default the shared secret is unset radius_timeout This parameter specifies the retransmission timer for RADIUS access request accounting request packets The default value is 4 RADIUS Attributes RADIUS tracks various pieces of data using attributes The Remote Annex supports a number of standard RADI...

Страница 23: ...ddress 4 NAS Port 5 Service Type 6 Framed Protocol 7 Framed IP Address 8 Framed IP Netmask 9 Framed Routing 10 Filter Id 11 Framed MTU 12 Framed Compression 13 Login IP Host 14 Login Service 15 Login TCP Port 16 Unassigned 17 Reply Message 18 Callback Number 19 Callback Id 20 Unassigned 21 Framed Route 22 Framed IPX Network 23 State 24 Class 25 Vendor Specific 26 Session Timeout 27 ...

Страница 24: ...Action 29 Called Station Id 30 Calling Station Id 31 NAS Identifier 32 Proxy State 33 Login LAT Service 34 Login LAT Node 35 Login LAT Group 36 Framed AppleTalk Link 37 Framed Apple Talk Network 38 Framed AppleTalk Zone 39 CHAP Challenge 60 NAS Port Type 61 Port Limit 62 Login LAT Port 63 ...

Страница 25: ...utes The RADIUS accounting attributes are Acct Status Type 40 Acct Delay Time 41 Acct Input Octets 42 Acct Output Octets 43 Acct Session Id 44 Acct Authentic 45 Acct Session Time 46 Acct Input Packets 47 Acct Output Packets 48 Acct Terminate Cause 49 Acct Multi Session Id 50 Acct Link Count 51 ...

Страница 26: ... Bay Networks 37 Annex Tunnel Client Endpoint VSA Bay Networks 38 Annex Tunnel Server Endpoint VSA Bay Networks 39 Annex Tunnel Id VSA Bay Networks 40 Annex Tunnel Connection Id VSA Bay Networks 41 Annex Callback Port List VSA Bay Networks 42 The RADIUS Dictionary File A reference RADIUS dictionary file is included in the distribution kit and is placed in the security files area The dictionary fil...

Страница 27: ...nce when adding or changing existing RADIUS dictionaries as needed Because this file is in the format of some of the popular RADIUS servers in some cases it can be used as a direct replacement However you should review the dependencies and make a decision on how to apply the differences A partial listing of the dictionary contents is shown below continued on next page ATTRIBUTE User Name 1 string ...

Страница 28: ...vice Type Callback Framed User 4 VALUE Service Type Outbound User 5 VALUE Service Type Administrative User 6 VALUE Service Type NAS Prompt 7 VALUE Service Type Authenticate Only 8 VALUE Service Type Callback NAS Prompt 9 Framed Protocols VALUE Framed Protocol PPP 1 VALUE Framed Protocol SLIP 2 VALUE Framed Protocol ARAP 3 VALUE Framed Protocol Gandalf SL MLP 4 VALUE Framed Protocol IPX SLIP 5 ...

Страница 29: ...s appear in braces 1 numbers for attributes appear in parentheses 1 and numbers for enumerations appear in brackets 1 End User and Session Identification The Remote Annex provides identification information to the RADIUS serverviaattributesincludedinAccess Requestpackets Access Request packets includes the following RADIUS attributes User Name 1 User Password 2 CHAP Password 3 NAS IP Address 4 NAS...

Страница 30: ...net rlogin The Login IP Host 14 attribute specifies the Internet address to be connected to via telnet or rlogin If Login IP Host 14 is set to 0xff the user is prompted for a host If Login IP Host 14 is set to 0 the user is connected to the address stored in the Remote Annex port parameter dedicated_arguments Ifthelattermethodisused the Login TCP Port 16 attribute is ignored Service Type 6 Framed ...

Страница 31: ... to connect to on the remote node or service The Login LAT Group 36 attribute is a bit mask of the LAT groups the user can access Service Hint and Restriction If the Remote Annex port is not in CLI mode whether the Remote Annex port auto detected a framing protocol slave or the port was configured for framing slave then the user is restricted to the profile returned by RADIUS If the RADIUS server ...

Страница 32: ...RADIUSserver theuserisprompted for the number Specifying the callback number in the RADIUS server is more secure than having the user provide it at the prompt The Remote Annex dials back the user on the same channel on which he or she dialed in Dialback calls are reauthenticated and reauthorized as if they were new calls Service Type 6 Framed Protocol 7 Required Port Mode Service Login 1 Callback ...

Страница 33: ...er of seconds the session can be idle before the Remote Annex unilaterally terminates thesession ThisfeatureisidenticaltothatprovidedbytheRemoteAnnex port parameter inactivity_timer CLI Scripting You can configure the user through RADIUS to execute a CLI script upon gaining access This feature uses the Annex CLI Command VSA Bay Networks 29 attribute to specify a list of CLI commands to run with ea...

Страница 34: ...osite string value The first four bytes contain in networkorder theIPaddressthattheusershouldbespecificallyrestricted from using or allowed to use Trailing bytes that are zero are interpreted to match all values of that byte Thus 132 245 0 0 means everything on the 132 245 0 0 subnet while 0 0 0 0 means every host on the entire WAN The remainder of the string is a printable comma delimited list or...

Страница 35: ...rotocol user can disable routing packets across the link with the Framed Routing 10 attribute The default behavior is to send and listen for routing packets across a link to a different subnet but not a link to the same subnet Note that because this attribute does not specify a network layer protocol or framing protocol the Remote Annex assumes that the attribute applies to all framing protocols P...

Страница 36: ...n conjunction with the Annex Filter VSA Bay Networks 28 attribute Upon receiving a Filter Id 11 attribute the Remote Annex initiates another Access Request The Remote Annex then waits for an Access Accept 2 with the list of the actual filters supplied in Annex Filter VSA Bay Networks 28 attributes This method requires a corresponding pseudo user in the RADIUS server Nested Filter Id 11 attributes ...

Страница 37: ...fic Network Layer Compression Protocols Network layer compression protocols can be configured using the Framed Compression 13 attribute OnlyVan JacobsonTCP IPheader compression is supported by the Remote Annex PAP PAP works as described in RFC 2058 CHAP CHAP works as described in RFC 2058 Note that the Remote Annex sends the CHAP challenge in both the CHAP Challenge 60 attribute and the authentica...

Страница 38: ...e of the CHAP challenge Thus RADIUS can be used to authenticate L2TP tunnels using its existing CHAP mechanism The L2TP Access Request contains the following attributes User Name 1 CHAP Password 3 NAS IP Address 4 NAS Port 5 VPN 5000 index Service Type 6 Acct Delay Time 41 CHAP Challenge 60 Annex Product Name VSA Bay Networks 33 Annex SW Version VSA Bay Networks 34 Annex Tunnel Type VSA Bay Networ...

Страница 39: ...l port IP address using the Annex Local IP Address VSA Bay Networks 35 attribute if the admin address_origin port parameter is set to acp or auth_server If an address is returned by the RADIUS server then the Remote Annex insists on using that address or it does not allow IPCP to come up If however 255 255 255 255 is specified then the Remote Annex allows the peer to set the address If 255 255 255...

Страница 40: ...ed by the RADIUS server then the Remote Annex uses that address If however 255 255 255 254 is specified then the Remote Annex gets the address using DHCP If the attribute is not specified then the Remote Annex falls back to the local_address admin port parameter Challenge Response Mechanisms The Remote Annex supports the standard RADIUS Challenge Response Mechanisms through the use of the Access C...

Страница 41: ...unting Request 4 packetwhenAcct Status Type 40 IPCP Start VSEBayNetworks3 becausetheactualnegotiated address is not known at authentication time Events This section describes the events that trigger RADIUS Accounting from the Remote Annex Each RADIUS Accounting log is queued for transmission andoncetransmitted requeuedforacknowledgment When the Remote Annex receives the corresponding Accounting Re...

Страница 42: ...in this log User Name 1 NAS IP Address 4 NAS Port 5 Service Type 6 Framed Protocol 7 Login IP Host 14 Login Service 15 Login TCP Port 16 Callback Number 19 Only if this starts a dialback session Class 25 Called Station Id 30 Calling Station Id 31 Login LAT Service 34 Login LAT Node 35 Login LAT Group 36 Acct Delay Time 41 Acct Session Id 44 Acct Authentic 45 Acct Multi Session Id 50 Acct Link Coun...

Страница 43: ...cable in this log User Name 1 NAS IP Address 4 NAS Port 5 Service Type 6 Use Callback type if the user will be called back next otherwise normal Framed Protocol 7 Callback Number 19 Only if the user will be called back next Class 25 Acct Delay Time 41 Acct Input Octets 42 Acct Output Octets 43 Acct Session Id 44 Acct Session Time 46 Acct Input Packets 47 Acct Output Packets 48 Acct Terminate Cause...

Страница 44: ...ble in this log NAS IP Address 4 Acct Delay Time 41 Annex Product Name VSA Bay Networks 33 Annex SW Version VSA Bay Networks 34 NAS Reboot Down The Remote Annex creates a log entry whenever the Remote Annex is about to go down and reboot In this case Acct Status Type 40 Accounting Off 8 The Remote Annex includes the following attributes when applicable in this log NAS IP Address 4 Acct Delay Time ...

Страница 45: ...licable in this log NAS IP Address 4 Acct Delay Time 41 Annex Product Name VSA Bay Networks 33 Annex SW Version VSA Bay Networks 34 NAS Accounting Stop The Remote Annex creates a log entry whenever the Remote Annex stops RADIUS Accounting This occurs when security is turned off and reset after initially being on In these cases Acct Status Type 40 Accounting Shutoff VSE Bay Networks 7 The Remote An...

Страница 46: ...this case Acct Status Type 40 User Reject VSE Bay Networks 1 The Remote Annex also includes the following attributes in this log User Name 1 NAS IP Address 4 NAS Port 5 Service Type 6 Framed Protocol 7 Class 25 Called Station Id 30 Calling Station Id 31 Acct Delay Time 41 Acct Authentic 45 NAS Port Type 61 Annex Product Name VSA Bay Networks 33 Annex SW Version VSA Bay Networks 34 ...

Страница 47: ...g NAS IP Address 4 NAS Port 5 Called Station Id 30 Calling Station Id 31 Acct Delay Time 41 NAS Port Type 61 Call Reject The Remote Annex creates a log entry whenever it rejects an incoming call before user authentication In this case Acct Status Type 40 Call Reject VSE Bay Networks 2 The Remote Annex also includes the following attributes when applicable in this log NAS IP Address 4 NAS Port 5 Ca...

Страница 48: ...ng Station Id 31 Acct Delay Time 41 NAS Port Type 61 IPCP Start The Remote Annex creates a log entry whenever a PPP session starts IPCP The log contains the negotiated IP address In this case Acct Status Type 40 IPCP Start VSE Bay Networks 3 The Remote Annex also includes the following attributes when applicable in this log NAS IP Address 4 NAS Port 5 Service Type 6 Framed Protocol 7 Framed IP Add...

Страница 49: ...hen applicable in this log NAS IP Address 4 NAS Port 5 Framed IPX Network 23 Class 25 Acct Delay Time 41 Acct Session Id 44 Acct Multi Session Id 50 NAS Port Type 61 ATCP Start The Remote Annex creates a log entry whenever a PPP session starts ATCP In this case Acct Status Type 40 ATCP Start VSE Bay Networks 5 The Remote Annex also includes the following attributes when applicable in this log NAS ...

Страница 50: ...works 37 Annex Tunnel Client Endpoint VSA Bay Networks 38 Annex Tunnel Server Endpoint VSA Bay Networks 39 Annex Tunnel Id VSA Bay Networks 40 Tunnel Stop The Remote Annex creates a log entry whenever an L2TP tunnel is destroyed When an L2TP tunnel is destroyed the log contains Acct Status Type 40 Tunnel Stop VSE Bay Networks 9 The Remote Annex also includes the following attributes when applicabl...

Страница 51: ...ex Tunnel Type VSA Bay Networks 36 Annex Tunnel Medium Type VSA Bay Networks 37 Annex Tunnel Client Endpoint VSA Bay Networks 38 Annex Tunnel Server Endpoint VSA Bay Networks 39 Annex Tunnel Id VSA Bay Networks 40 MP Start The Remote Annex creates a log entry whenever an MP bundle is created For MMP this will be logged only on the LNS In this case Acct Status Type 40 MP Start VSE Bay Networks 13 T...

Страница 52: ...t occurred Whenever a RADIUS Accounting Request is issued by the Remote Annex the Remote Annex records the difference in time now occurrence and places the result in the Acct Delay Time 41 attribute Each session in the Remote Annex retains a timestamp of the start of the session When the session ends the Remote Annex records the difference in time finish start and places the result in the Acct Ses...

Страница 53: ...nique MP Bundle Identifier equal to the Session Identifier of the first link of the bundle This identifier is placed in the Acct Multi Session Id 50 attribute MultiSession Link Count Each MP session records the number of links it has used in the Acct Link Count 51 attribute Authentication Method RADIUS Accounting logs only users that are authenticated via RADIUS This means that Acct Authentic 45 R...

Страница 54: ...ccess 5393 and 6300 Functions The following functions have been implemented for the Model 5393 and Model 6300 Remote Annexes Default Call Configuration Session Parameter Blocks SPBs Automated Firmware Download AFD Multi System Multilink PPP Using the Default Call Configuration When delivered to you the Remote Annex is configured to detect automatically the type of call TA V 120 V 110 or X 75 synch...

Страница 55: ...e operational with this default configuration the only requirements are that you set the switch type and any other interface parameter whose factory defaults do not match the service options provided by the telco for your ISDN PRI lines Configuring Session Parameter Blocks You define SPBs in the pri section of the configuration file on the host you use to download Remote Annex software By default ...

Страница 56: ...on you can omit this section of the SPB How SPBs Are Scanned When it receives a call the Remote Annex tries to match the SETUP information elements of the call with setup criteria values defined in the SPBs The Remote Annex searches SPBs in the order that they appear in the configuration file so the sequence in which you specify SPBs is important You should order your SPBs from the most specific t...

Страница 57: ...mat when entering an SPB into the configuration file Table 3 describes all possible SPB fields Unless otherwise noted each field is optional this is a comment line begin_session session_name calling_no phone number called_no phone number called_subaddress number bearer voice or data detected detection keyword call_action action max_number_of_calls integer acp_log yes or no rate56k yes or no set pa...

Страница 58: ...ne number that identifies the origin of the ISDN call Specify the entire number including the area code even if it would not normally be required to make the call Separate the area code from the rest of the phone number with a dash or enclose the area code in parentheses No wild card symbols are permitted and white space is ignored If this field is omitted any calling number is permitted Sometimes...

Страница 59: ...he phone number with a dash or enclose the area code in parentheses No wild cards are permitted White space is ignored Note The ACP log file shows the called number delivered by the switch for PRI protocols The log file may contain only the final digits of the number If this field is omitted any called number matches this SPB called_subaddress This field is appropriate only for end to end calls us...

Страница 60: ...ected sync_ppp which matches when synchronous PPP calls PPP LCP Configure Request over HDLC are detected 56 which matches all calls when the line speed is 56 Kb s 64 which matches when the line speed is 64 Kb s any which matches any call whether or not a call_action field is set to detect in another SPB This is the default You can combine keywords to produce a less restrictive SPB than one contain...

Страница 61: ... detected frame type and indicates how to handle the call Do not use the rate56k or set fields see below in an SPB containing a call_action of detect reject which rejects the call modem which handles the call as a modem call v120 which handles the call as a V 120 call sync which handles the call as a synchronous PPP call The default is detect which means that all calls are accepted it is impossibl...

Страница 62: ...e or Australia and are having problems receiving calls from the U S In this situation the telco sometimes fails to specify the correct data rate In all other situations specify no set Specifies a port parameter setting that is applied to the session The syntax is set parameter parameter_value You can specify multiple set commands These settings override the values in nonvolatile memory while the s...

Страница 63: ...f operation normal download and never download When normal download is enabled AFD attempts to download if the current revision of the firmware is outdated or if it is inappropriate for the switch type in use Also AFD attempts to download firmware if a Remote Annex module is marked as failed by diagnostics regardless of what mode is specified AFD does not attempt any download in never download mod...

Страница 64: ...downloading firmware You can use the following entry to disable AFD Note that download pri never and download wan never perform the same function download pri never has been retained to ensure backward compatibility with earlier releases of the software gateway download pri never prevent download of pri module Console Port Status Messages Various status messages may be displayed in the console win...

Страница 65: ...d in progress AFD executing view syslog for status version strings or error s download in progress AFD executing LOADING internal pri module firmware view syslog for status version strings or error s afd done with no download attempted AFD completed view syslog for status version strings or error s afd done with download completed AFD completed ABORTED loading internal pri module firmware or SUCCE...

Страница 66: ...receive no information about which Remote Annex terminates a given MP link The location of the MP bundle head is determined by the bundle discovery protocol The Layer 2 Tunneling Protocol L2TP is used to tunnel MP links to remote MP bundle heads ensuring that successive links on one Remote Annex in an MMP group are combined into the same bundle as the primary link on another Remote Annex MMP is di...

Страница 67: ...he port parameters mp_endpoint_class and mp_endpoint_address All the Remote Annexes in an MMP group must have the same mp_endpoint_class and the same mp_endpoint_address WhenMMPisenabledandmp_endpoint_class is set to loc or psndn the mp_endpoint_address parameter indicates an endpoint discriminator address which is the number of the hunt group or the name of the rotary served by the MMP group Refe...

Страница 68: ...urrent Remote Annex becomes the MP bundle head If the Bundle Discovery Protocol locates an existing MP bundle for the remote user the current MPlinkbecomesasecondaryMPlink IftheMPbundleheadisadifferent Remote Annex the current link is tunnelled to that MP bundle head via L2TPandbecomesavirtuallink virtuallinksarealwayssecondarylinks Secondary MP links are combined with the primary MP link to form ...

Страница 69: ...oint_class parameter 49 Multi system Multilink PPP connections 49 groups 49 Multi system Multilink PPP MMP 36 48 P pref_secure1_host parameter 3 pref_secure2_host parameter 3 printing conventions xii publications ordering xiv R RADIUS 1 configuring 1 configuring RAC functions 11 dictionary file 8 modes 1 native client 2 overview 1 parameters 3 supported attributes 4 radius_acct_level parameter 3 r...

Страница 70: ...Index 119346 A Rev A Index 2 ...

Отзывы: