Nortel BayStack 820 Скачать руководство пользователя страница 144 | Manualshive

Страница: 144 / 258

background image

Installation and Reference for the BayStack 820 ISDN Router

9-12

206901-A

IP Packet Filtering

Packet filtering allows each IP packet exiting the BayStack 820 ISDN Router to
be examined for a match to a configured set of rules. If none of the conditions in
any rule match the contents of the packet, the packet is either forwarded or
discarded, depending upon the default filter configuration for that interface.
Otherwise, the exception action is taken; the packet is discarded or forwarded (the
opposite of the default action).

The BayStack 820 ISDN Router supports many features that ensure the security of
the data on your local network. For example, the concept of a single IP address
and private networking means devices on your network can access the Internet,
but not vice versa.

If you require additional security, you can configure packet filter rules that
selectively allow or deny data traffic between your local LAN and the WAN (for
example, the Internet). Specifically, it allows you to define each and every IP
packet to be inspected to determine if it should be allowed or denied transmission
over a WAN interface.

Due to the conflicting nature of allow and deny rules, you can choose only one
action for each WAN interface. After you choose the action, you can define rules
to select which packets will be allowed or denied.

Each selection rule is comprised of a set of local and remote IP addresses and
ports. IP addresses can be a single IP address, a range of IP addresses, a network
address, or any IP address. Port numbers can be a single port number, a range of
port numbers, or any port number.

Caution:

Packet filtering is a sophisticated feature that can substantially

impact your router operation. Be sure that you fully understand the concepts
described in this section before you use this feature.

«
...
142
143
144
145
146
...
»

Содержание BayStack 820

Страница 1: ...Part No 206901 A November 1999 4401 Great America Parkway Santa Clara CA 95054 Installation and Reference for the BayStack 820 ISDN Router ...

Страница 2: ...ter software the rights of the United States Government regarding its use reproduction and disclosure are as set forth in the Commercial Computer Software Restricted Rights clause at FAR 52 227 19 Statement of Conditions In the interest of improving internal design operational function and or reliability Nortel Networks NA Inc reserves the right to make changes to the products described in this do...

Страница 3: ...n Requirements Only EN 55 022 Statement This is to certify that the Nortel Networks BayStack 820 ISDN Router is shielded against the generation of radio interference in accordance with the application of Council Directive 89 336 EEC Article 4a Conformity is declared by the application of EN 55 022 Class A CISPR 22 Warning This is a Class A product In a domestic environment this product may cause r...

Страница 4: ...ot attempt to make such connections themselves but should contact the appropriate electric inspection authority or electrician as appropriate Notice For equipment using loopstart lines please note that the Ringer Equivalence Number REN assigned to each terminal device provides an indication of the maximum number of terminals allowed to be connected to a telephone interface The termination on an in...

Страница 5: ...you must provide the telephone company with The Facility Interface Code 02IS5 The Service Order Code s SOC 6 0F The required Universal Service Order Code USOC jack RJ49C When you request ISDN S T Interface Service you must provide the telephone company with The Service Order Code s SOC 6 0P The make model number and FCC Registration number of the NT1 Note ISDN S T cannot be directly connected to t...

Страница 6: ...gn performance or implementation of the Software and user manuals that is confidential to Nortel Networks and its licensors however Licensee may grant permission to its consultants subcontractors and agents to use the Software at Licensee s facility provided they have agreed to use the Software only in accordance with the terms of this license 3 Limited warranty Nortel Networks warrants each item ...

Страница 7: ...use and disclosure of Nortel Networks confidential information shall continue in effect Licensee may terminate this license at any time The license will automatically terminate if Licensee fails to comply with any of the terms and conditions of the license Upon termination for any reason Licensee will immediately destroy or return to Nortel Networks the Software user manuals and all copies Nortel ...

Страница 8: ...viii 206901 A ...

Страница 9: ...ectivity Features 1 4 Branch to Branch Access 1 5 Conventional Telephone Calls Over ISDN 1 5 Remote Dial In Access 1 6 Internet Access 1 7 Virtual Private Network 1 7 Network Address Translation 1 10 Security Features 1 10 Understanding the Installation Environment 1 11 Understanding IP Addressing 1 11 Understanding Static IP Addresses 1 12 Understanding DHCP Servers 1 12 Understanding Gateways an...

Страница 10: ...Started Using the BayStack 820 ISDN Router Manager Software 3 1 Connecting to the BayStack 820 ISDN Router 3 2 Customizing the BayStack 820 ISDN Router Manager Interface 3 3 Overview of the BayStack 820 ISDN Router Manager Software 3 5 Current Status Dialog Box 3 6 Creating a Connection Profile 3 8 Configuring ISDN Port Settings 3 9 Configuring Basic ISDN Port Settings 3 9 Setting the System Time ...

Страница 11: ...guring ISDN Port Settings 6 2 Configuring Basic ISDN Port Settings 6 3 Configuring Advanced ISDN Port Settings 6 5 Creating an Internet Access Connection Profile 6 6 Creating a Quick Internet Access Connection Profile 6 8 Configuring an Additional Internet Access Connection Profile 6 10 Deleting an Internet Access Connection Profile 6 11 Setting Internet Access Time Restrictions 6 11 Chapter 7 Usi...

Страница 12: ...resses 9 1 Viewing the IP Routing Table 9 4 Changing the Default Route or a Static Route 9 5 Deleting a Static Route 9 6 Configuring Network Address Translation 9 6 Configuring a Static DHCP IP Address Assignment 9 10 IP Packet Filtering 9 12 IP Packet Filtering Requirements Examples 9 13 Adding a Packet Rule 9 13 TCP IP Port Assignments 9 16 Configuring Advanced IPX Settings 9 16 Enabling Bridgin...

Страница 13: ...ry _name 10 11 add dns primary secondary IPaddr 10 11 delete dhcp entry entry_name 10 12 delete dns primary secondary 10 12 disable dhcp 10 12 enable dhcp 10 12 set dhcp 10 13 show dhcp 10 13 show dhcp table 10 13 Diagnostic Commands 10 14 connect profile profile_name 10 14 disconnect profile profile_name 10 14 enable disable trace 10 14 ipxping remote_network_ remote_MACaddr repeat_count 10 15 pi...

Страница 14: ...ip route IPaddr netmask 10 26 delete ip interface_name 10 26 delete pat entry public _port_ 10 26 delete pat entry default 10 26 enable disable spoofing interface_name iprip 1 60 10 26 ping IPaddr n_times n_size 10 27 set ip default route gateway_IPaddr 10 27 set ip default route profile_name 10 27 set ip lan IPaddr netmask 10 27 set ip private IPaddr netmask 10 28 set ip rip interface_name disabl...

Страница 15: ...le spoofing profile_name ipxwatchdog 1 60 10 38 ipxping remote_network_ remote_MACaddr repeat_count 10 39 set ipx default route interface_name 10 39 set ipx default route lan MACaddr 10 39 set ipx rip interface_name disabled enabled 10 39 set ipx profile_name 10 39 set ipx profile_name network_ 10 39 set ipx lan 10 40 set ipx lan local_network_ 10 40 set ipx lan local_network_ 802 2 802 3 Ethernet...

Страница 16: ...ble profile profile_name 10 51 disconnect profile profile_name 10 51 enable profile profile_name 10 51 show profile 10 52 show profile profile_name 10 52 show profile statistics 10 52 show profile statistics profile_name 10 53 Security Commands 10 53 disable encryption profile_name 10 54 enable encryption profile_name key_hexnumber 10 54 SNMP Commands 10 54 clear trap manager 1 5 10 55 enable disa...

Страница 17: ...ole timeout 1 60 10 63 set date mm dd yy 10 63 set internet access time 10 64 set log level 1 10 10 64 set prompt prompt 10 64 set system contact name 10 65 set system feature string 10 65 set system location location_information 10 65 set system name system_name 10 66 set time hh mm ss 10 66 set timezone 12 12 10 66 show config 10 66 show connection log 10 67 show interface list 10 67 show intern...

Страница 18: ..._number 10 73 show speeddial table 10 73 show voice port 10 73 VPN Tunnel Commands 10 74 add tunnel tunnel_name 10 75 clear tunnel statistics 10 75 clear tunnel statistics tunnel_name 10 75 delete tunnel tunnel_name 10 75 show tunnel 10 75 show tunnel tunnel_name 10 76 show tunnel statistics 10 76 show tunnel statistics tunnel_name 10 76 Appendix A Technical Specifications Appendix B System Messag...

Страница 19: ...ure 2 5 Connecting a Workstation 2 9 Figure 2 6 Turning the Router On 2 10 Figure 2 7 Connecting Devices to the POTS Port 2 11 Figure 2 8 Connecting to a Hub 2 11 Figure 2 9 Setting the Uplink Port 2 12 Figure 2 10 Windows Network Icon 2 13 Figure 2 11 Network Dialog Box Configuration Tab 2 13 Figure 2 12 TCP IP Properties Dialog Box Properties Tab 2 14 Figure 2 13 Windows Network Icon 2 15 Figure...

Страница 20: ...ialog Box 4 15 Figure 4 10 Interface Configuration Dialog Box 4 15 Figure 4 11 Connection Profile Configuration Remote Office Access by VPN Dialog Box 4 16 Figure 4 12 Connection Profile Configuration Remote Office Access by VPN Advanced Dialog Box 4 18 Figure 5 1 Connection Profile Summary Dialog Box 5 2 Figure 5 2 Interface Configuration Dialog Box 5 3 Figure 5 3 Connection Profile Configuration...

Страница 21: ...ole Port 8 7 Figure 8 7 Password Configuration Dialog Box 8 8 Figure 8 8 System Information Dialog Box 8 9 Figure 9 1 System IP Configuration Dialog Box 9 2 Figure 9 2 Sample IP Routing Table Dialog Box 9 4 Figure 9 3 IP Routing Table Add Dialog Box 9 5 Figure 9 4 IP Address Translation Configuration Static Address Translation Table Dialog Box 9 8 Figure 9 5 IP Address Translation Configuration Ad...

Страница 22: ...xxii 206901 A ...

Страница 23: ...ware Main Page 3 6 Table 3 3 Current Status Statistics Fields 3 7 Table 3 4 Port Configuration ISDN Dialog Box Fields 3 10 Table 4 1 Connection Profile Configuration Remote Office Access by ISDN Fields 4 4 Table 4 2 Connection Profile Configuration Remote Office Access by ISDN Advanced Fields 4 6 Table 4 3 Connection Profile Configuration Remote Access by ISDN Multilink Fields 4 10 Table 4 4 VPN T...

Страница 24: ...try Configuration SpeedDial Telephone Access Fields 7 6 Table 8 1 Password Configuration Fields 8 8 Table 8 2 System Information Fields 8 9 Table 9 1 System IP Configuration Dialog Box Fields 9 3 Table 9 2 IP Routing Table Fields 9 6 Table 9 3 IP Address Translation Configuration Add A Static Entry Dialog Box 9 9 Table 9 4 DHCP Configuration Add A Static Entry Fields 9 11 Table 9 5 IP Filter Confi...

Страница 25: ...mmands 10 45 Table 10 16 Connection Profile Commands 10 49 Table 10 17 Security Commands 10 54 Table 10 18 SNMP Commands 10 55 Table 10 19 Statistics Commands 10 57 Table 10 20 System Commands 10 58 Table 10 21 Voice Adapter Commands 10 70 Table 10 22 VPN Tunnel Commands 10 74 Table A 1 BayStack 820 ISDN Router Technical Specifications A 1 Table B 1 System Messages B 1 Table B 2 Connection Log Mes...

Страница 26: ...xxvi 206901 A ...

Страница 27: ... describes the features of the BayStack 820 ISDN Router and provides installation and configuration instructions Audience To configure and install the BayStack 820 ISDN Router you should have the following background and experience Working knowledge of basic network management concepts and terminology Working knowledge of tools and procedures for installing and operating sensitive electronic equip...

Страница 28: ...ou need to enter Example Enter set voice port A B Example Use the enable dhcp command braces Indicate required elements in syntax descriptions where there is more than one option You must choose only one of the options Do not type the braces when entering the command Example If the command syntax is set voice port A B you must enter either set voice port A or set voice port B but not both brackets...

Страница 29: ...descriptions Where a variable is two or more words the words are connected by an underscore Example If the command syntax is show profile profile_name profile_name is one variable and you substitute one value for it screen text Indicates system output for example prompts and system messages Example BayStack separator Shows menu paths Example Protocols IP identifies the IP option on the Protocols m...

Страница 30: ... need and print them on most standard printers You can download Acrobat Reader free from the Adobe Systems Web site www adobe com How to Get Help If you purchased a service contract for your Nortel Networks product from a distributor or authorized reseller contact the technical support staff for that distributor or reseller for assistance If you purchased a Nortel Networks service program contact ...

Страница 31: ...Europe ISDN connector cable RS 232 serial cable null modem cable for the console port 10BASE T LAN cable AC power adapter BayStack 820 ISDN Router documentation including BayStack 820 ISDN Router Installation Instructions Installation and Reference for the BayStack 820 ISDN Router Nortel Networks Two Year Limited Hardware Warranty Safety Information for the BayStack Routers Call the Nortel Network...

Страница 32: ...built in BayStack 820 ISDN Router Manager software Use the built in DB 9 console port to connect the router as a serial device to your workstation s serial port and configure the router using the command line interface CLI commands For details refer to Chapter 10 Using the Command Line Interface Use a Telnet application to access the router and configure the router using the command line interface...

Страница 33: ...Protocol DHCP capability Auto detect SPID and switch type features Ten status LEDs Security and Compression Encryption optional feature Password protection Call back Industry standard compression Flexible Ports Four 10BASE T Ethernet ports one of which can be set to Uplink to support a hub One ISDN port available with either a U interface for use in North America or an S T interface for use in Eur...

Страница 34: ...o For example when a user on one network tries to access another network on your private WAN or tries to access the Internet the router establishes a B channel connection to the remote network As traffic to the remote network increases and bandwidth demand increases the router establishes another connection to the Internet through the second B channel and routes traffic through that connection as ...

Страница 35: ...ou can connect telephone or fax devices to the two voice ports on the router and place a conventional voice call over a Public Switched Telephone Network PSTN by dialing a regular telephone number The call is established over a single ISDN B channel and if applicable incurs the same kind of charges as a regular phone call You can also configure convenient speeddial shortcuts to place phone calls i...

Страница 36: ...or on the road Using the call back feature you can configure the router to allow dial in access for remote users while protecting your network against unauthorized users After a user dials in and is authenticated the router disconnects the line and then calls the user back at a preconfigured telephone number Figure 1 3 illustrates how the BayStack 820 ISDN Router supports dial in access by remote ...

Страница 37: ...s how the BayStack 820 ISDN Router supports Internet access Figure 1 4 Internet Access Virtual Private Network The BayStack 820 ISDN Router supports virtual private networks VPNs a special type of connection that permits remote LANs to communicate with another LAN over a public network such as the Internet When users connect this way you incur only local toll charges to your ISP As a security meas...

Страница 38: ...for the connection profile that is used for the user data session flowing through the tunnel After the tunnel is established one or more user data sessions can flow through the tunnel When a workstation on the LAN sends data to a resource reachable through a VPN connection profile a tunnel to the remote site is established and the VPN user data session starts beginning with a PPP authentication ex...

Страница 39: ...only in the local LAN environment these devices naturally form a private network with default network IP addresses of 192 168 168 xxx and cannot be accessed from the Internet For a server to be accessible from the Internet it must be mapped to a TCP UDP port in the BayStack 820 ISDN Router Manager software using Network Address Translation To enable LAN to LAN communications you need to change the...

Страница 40: ...ions and port mapped publicly accessible applications Figure 1 7 illustrates how the router supports NAT Figure 1 7 Network Address Translation Support Security Features The BayStack 820 ISDN Router provides several security features to help make your network and data secure Point to Point Protocol PPP and Password Authentication Protocol Challenge Handshake Authentication Protocol PAP CHAP authen...

Страница 41: ...ecisions Understanding IP Addressing An IP Internet Protocol address is a numeric identifier for a workstation or device on a Transmission Control Protocol Internet Protocol TCP IP network IP addresses follow the format nnn nnn nnn nnn where nnn is a number between 0 and 255 for example 192 168 168 230 or 10 1 1 1 IP addresses enable devices to talk to each other and both servers and workstations ...

Страница 42: ...is the gateway to remote networks Change from static IP addresses to dynamic IP addresses by setting up the router as a DHCP server This is the recommended configuration If you do this you must inform the workstations that they will be getting their IP addresses assigned by the router Understanding DHCP Servers The IP address server that manages the IP addresses is called a Dynamic Host Configurat...

Страница 43: ...domain name is translated into an IP address the workstations on your network can communicate with the Web site As a DHCP server the BayStack 820 ISDN Router automatically assigns DNS addresses to the workstations Understanding How the BayStack 820 ISDN Router Works with Your Existing DHCP Server You can have only one IP address server on the network either an existing DHCP server or the BayStack ...

Страница 44: ......

Страница 45: ...the BayStack 820 ISDN Router For details refer to Appendix A Technical Specifications Getting to Know the BayStack 820 ISDN Router The BayStack 820 ISDN Router does not require a keyboard or monitor for operation You can configure the router from the network using a Web browser and the built in BayStack 820 ISDN Router Manager software You can also Telnet to the router or attach the router to a wo...

Страница 46: ...d Phone Fax A and Phone Fax B connect regular telephones answering machines or fax devices to the router 4 10BASE T Ethernet Ports These Ethernet ports connect individual network devices to the router You can also set port 4 Uplink to Uplink and connect the router to a 10BASE T Ethernet hub using a straight through cable When this port is set to Normal you can connect a device to the port This swi...

Страница 47: ...l on the B1 channel B2 Solid Green An ISDN call is active on the B2 channel Flashing Green Router is passing data on the B2 channel Off There is no call on the B2 channel A Solid Green A POTS call is active on phone fax line A Flashing Green A POTS call is ringing phone fax line A Off There is no activity on phone fax line A B Solid Green A POTS call is active on phone fax line B Flashing Green A ...

Страница 48: ...he BayStack 820 ISDN Router Table 2 3 Back Panel Components of the BayStack 820 ISDN Router Component Description DB 9 Auxiliary Connector This connector port connects the router directly to a workstation using a null modem cable for router configuration Power Receptacle The power receptacle connects to the router s AC power adapter On Off Switch This switch turns the router on and off AUX ON 9406...

Страница 49: ...n ISDN U connection on the wall outlet Order the appropriate Internet access service from your Internet service provider ISP if you require Internet service Know the type of switch at your Telco The router auto detects the type of switch Knowing the switch type at your Telco can help you verify that the router detected the correct switch Know the configuration mode of your ISDN line You can config...

Страница 50: ...you order the CLI option from your local carrier Caution S T Interface Only This product is not intended for direct connection to the public switched network or to other exposed plant networks Always connect this product to such switched or exposed plant networks through a certified by the local regional or national safety agency and telecommunications authority isolating type network terminating ...

Страница 51: ...all an ISDN line Switch Type ____________________________________________ The switch type is provided by your telephone company when you install an ISDN line Directory Number _______________________________________ Directory Number _______________________________________ Directory Number _______________________________________ Directory Numbers are the phone numbers assigned to the B channels Depe...

Страница 52: ...re 2 3 Figure 2 3 Connecting the Power Cord Note Before you begin make sure that the workstation you use to set up the router is not connected to your network If you do not have a standalone workstation temporarily disconnect a workstation from the network The workstation you use to configure the router must have TCP IP loaded and be configured to obtain and IP address automatically DHCP option Fo...

Страница 53: ...he router and connect the other end to the ISDN wall outlet Figure 2 4 Figure 2 4 Connecting the ISDN Cable 5 Connect one end of the included 10BASE T LAN cable to the Ethernet port labeled 1 on the front of the router and the other end to the Ethernet port on the workstation Figure 2 5 Figure 2 5 Connecting a Workstation 9626FA 9628FA ...

Страница 54: ...e network forming a mini network between the router and the workstation 8 Connect up to four devices to the router a Connect one end of the 10BASE T LAN cable to an Ethernet port on the front of the router b If necessary disconnect the workstation from the network c Connect the other end of the 10BASE T LAN cable to the Ethernet port on the workstation If you want to connect more than four devices...

Страница 55: ... port By default all four of the Ethernet ports on the router are set as Normal ports However you can set the 4 Uplink port to Uplink and connect a the router to a hub When you use a straight through cable and set port 4 Uplink to Uplink you eliminate the need for a crossover cable To connect the router to a hub 1 Connect one end of the 10BASE T LAN cable to the 4 Uplink port on the front of the r...

Страница 56: ...820 ISDN Router either to configure the router or to use the router for network access must Have an Ethernet interface properly installed Be connected to the router either directly or through an external hub Have TCP IP installed Be configured to obtain an IP address from a DHCP server or be configured with a static IP address Note You can use any workstation configured with TCP IP to communicate ...

Страница 57: ...tart menu choose Settings Control Panel The Control Panel window opens 2 Double click the Network icon Figure 2 10 Figure 2 10 Windows Network Icon The Network dialog box Figure 2 11 opens and displays the Configuration tab that shows a list of installed network components Figure 2 11 Network Dialog Box Configuration Tab ...

Страница 58: ...TCP IP Properties dialog box confirm each setting as described in Table 2 4 and then click OK 5 With the router connected to the LAN and turned on reboot the workstation Table 2 4 TCP IP Properties Settings TCP IP Properties Tab Setting IP Address Select the Obtain IP address automatically option Bindings Select the Client for Microsoft Networks check box and File and printer sharing for Microsoft...

Страница 59: ...stem documentation You may need your Microsoft Windows 95 Windows 98 or Windows NT CD to complete the installation To install TCP IP on a workstation 1 From the Windows Start menu choose Settings Control Panel The Control Panel window opens 2 Double click the Network icon Figure 2 13 Figure 2 13 Windows Network Icon Note New Windows 98 workstation installations are already configured with TCP IP T...

Страница 60: ...ialog box Figure 2 14 opens and displays the Configuration tab that shows a list of installed network components Figure 2 14 Network Dialog Box Configuration Tab 3 Click Add The Select Network Component Type dialog box Figure 2 15 opens Figure 2 15 Select Network Component Type Dialog Box ...

Страница 61: ...igure 2 16 opens Figure 2 16 Select Network Protocol Dialog Box 5 In the Manufacturers area select Microsoft 6 In the Network Protocols area select TCP IP 7 Click OK and follow the prompts on your screen After you install TCP IP on a workstation follow the procedures in Configuring a Workstation to Use the Router on page 2 12 ...

Страница 62: ......

Страница 63: ...xplorer version 4 01 SP1 or later or use a null modem cable or a Telnet application to issue commands with the command line interface CLI The router comes with a basic feature set installed If you purchased additional features from your distributor you are provided a feature key You can use the feature key to update your system with the new features For details refer to Upgrading the Firmware and ...

Страница 64: ...Box 2 Enter your password If you are logging on for the first time enter the factory default password which is password For security purposes the password is displayed as a string of asterisks The default password is always entered in the password field even if you set a new one 3 Click Log On If you are logging in for the first time the BayStack 820 ISDN Router Manager customization dialog box op...

Страница 65: ...d buttons displayed in the software For example if you select only the Basic Internet Access check box the BayStack 820 ISDN Router Manager displays only buttons and dialog boxes related to basic Internet access You can select multiple check boxes to configure multiple router settings The interface options remain in effect until you change them You can change the user interface at any time To cust...

Страница 66: ... dial in and access resources on your network For details on configuring dial in access options refer to Chapter 5 Configuring Dial In User Access Share Netware IPX Resource Select this check box if you use Novell servers on your network and want to allow remote LANs or offices to share those resources IPX resources are configured as needed for individual connection profiles Basic Internet Access ...

Страница 67: ...ISDN Router Manager Software Before you begin configuring the BayStack 820 ISDN Router take a moment to familiarize yourself with the BayStack 820 ISDN Router Manager software main page Figure 3 3 Figure 3 3 BayStack 820 ISDN Router Manager Software Main Page ...

Страница 68: ...r main page times out after a period of inactivity this page does not It remains operational providing feedback on the router as long as the window is active If you close this page you can reopen it Table 3 2 Parts of the BayStack 820 ISDN Router Manager Software Main Page Part Description Main Menu Click a menu item to display configuration dialog boxes in the Configuration window You can configu...

Страница 69: ...fices and active VPN sessions Status Displays the current state of the interface For the LAN Up indicates that the interface is connected and functioning Down indicates that the interface is not connected For ISDN Up indicates that the line is functioning For ISDN B channels if the interface is active the profile name or voice call is displayed NoCall indicates that an ISDN B channel is idle For V...

Страница 70: ... refer to Chapter 4 Configuring Remote Office Access Dial in user connection profile to support remote users dialing in to your network For details refer to Chapter 5 Configuring Dial In User Access Internet access connection profile to support basic Internet access For details refer to Chapter 6 Configuring Internet Access VPN access connection profile to support a virtual private network optiona...

Страница 71: ...connected to this type of switch all of the required information is automatically detected when the ISDN line is initialized If the router cannot detect a Directory Number you must enter it manually If you select Auto Detect as the ISDN switch type you must enter the ISDN Directory Numbers Configuring Basic ISDN Port Settings To configure the ISDN interface for remote communications 1 Choose Confi...

Страница 72: ...mbers are provided but sometimes one and even none is provided In many cases both SPID numbers are required if you want to connect using two B channels A SPID number is typically 14 digits long and consists of the 10 digit telephone number area code plus phone number followed by the digits 0101 Other variations of this number are possible and your telephone company can provide you with the correct...

Страница 73: ...u must connect to the router to reset the clock The time zone and daylight savings time indicator are saved across power cycles Directory Phone Number 2 Enter the second Directory Number This field is displayed when you select 2 or 3 as the number of directory phone numbers Directory Phone Number 3 Enter the third Directory Number This field is displayed when you select 3 as the number of director...

Страница 74: ...tem Time The System Time Setting dialog box Figure 3 6 opens Figure 3 6 System Time Setting Dialog Box 2 Select the router s Time Zone from the list 3 To have the router automatically change its time according to daylight saving time select the Daylight Saving Time check box 4 Click Apply The Current Router Time and Time Zone are updated and displayed ...

Страница 75: ...he remote site does not need to have a BayStack 820 ISDN Router and may not be configurable by the local administrator In either case make sure that you configure the router to match the requirements of the remote site To configure remote office access you must select the Access to from Remote Site check box in the BayStack 820 ISDN Router Manager customization dialog box If you want to configure ...

Страница 76: ...ummary dialog box Figure 4 1 opens Proceed with Step 2 If you are configuring a connection profile for the first time the Interface Configuration dialog box Figure 4 2 opens Proceed with Step 3 Figure 4 1 Connection Profile Summary Dialog Box 2 Do one of the following To create a new connection profile select New from the list and then click NEXT To edit an existing connection profile select it in...

Страница 77: ...e Configuration Remote Office Access by ISDN dialog box Figure 4 3 opens Figure 4 3 Connection Profile Configuration Remote Office Access by ISDN Dialog Box 5 Use the information in Table 4 1 to configure the settings and then do one of the following If you set the Call Direction to Incoming click APPLY If you set the Call Direction to Outgoing or Both click APPLY and TEST or click ADVANCED for mo...

Страница 78: ... Call Back Select whether to enable the call back security feature When you enable call back the router answers an incoming call authenticates the dial in user s remote system name and remote password disconnects the call and then dials the remote user s call back number to reconnect NOTE If you set Caller ID Authen to Yes in the Connection Profile Configuration Remote Office Access advanced dialo...

Страница 79: ...x Figure 4 4 opens Figure 4 4 Connection Profile Configuration Remote Office Access by ISDN Advanced Dialog Box Remote System Name Enter the system name of the remote network that is dialing in This field is case sensitive so nortel is not the same as Nortel or NORTEL Remote System Password Enter the password the router uses to authenticate the remote system This field is case sensitive so nortel ...

Страница 80: ...er verifies the incoming caller ID before accepting the call This option may require a special service from your ISDN service provider Caller ID Number Enter the caller ID phone number to authenticate This field is displayed when you set Caller ID Authen to Yes STAC Compression Select whether to use STAC compression STAC compression allows outgoing data to be compressed to achieve higher throughpu...

Страница 81: ...g Protocol SAP When you enable IPX RIP SAP the router receives RIP and SAP broadcast data from other routers and broadcasts the routing table and routing table updates as necessary This field is displayed when you set Enable IPX to Yes Set as IPX Default Route Select whether to set this connection profile as the IPX default route When you enable this profile as the IPX default route the router use...

Страница 82: ...yption the router encrypts all data before it is sent out to the WAN and decrypts data when it is received from the WAN This field is displayed when the workstation is connected to the router over a local LAN Encryption Key Enter the DES encryption key to be used by other systems to establish a connection with your system You need to enter a must be a hexadecimal number with either 56 bits 14 digi...

Страница 83: ...on Remote Office Access by ISDN Advanced dialog box Figure 4 4 click Multilink The Connection Profile Configuration Remote Office Access by ISDN Multilink dialog box Figure 4 5 opens Figure 4 5 Connection Profile Configuration Remote Access by ISDN Multilink Dialog Box 2 Use the information in Table 4 3 to configure the Multilink settings and then click OK ...

Страница 84: ... utilization threshold Enter the percentage of bandwidth that must be in use before the router initiates the second B channel call We recommend that you use the default value of 85 This field is displayed when you set ISDN Link Usage to Two B Channels Only When Needed Lower utilization threshold Enter the percentage of bandwidth below which the router disconnects the second B channel call We recom...

Страница 85: ...vate network VPN review the information in Virtual Private Network on page 1 7 When you set up your VPN keep in mind that the VPN connection the tunnel emulates a hardware WAN port After you set up your VPN tunnel you can create a VPN connection profile to allow access to and from a remote site After you configure the VPN options a connection is established automatically as a result of a reference...

Страница 86: ...terfaces VPN Tunnel 2 Do one of the following If you configured at least one VPN tunnel the VPN Tunnel Summary dialog box Figure 4 7 opens Proceed with Step 3 If you are configuring the first VPN Tunnel the VPN Tunnel Configuration dialog box Figure 4 8 opens Proceed with Step 4 Figure 4 7 VPN Tunnel Summary Dialog Box Note When communicating with a remote office the private IP addresses must be d...

Страница 87: ...ect New from the list and then click NEXT To edit an existing VPN tunnel select it in the list and then click NEXT The VPN Tunnel Configuration dialog box Figure 4 8 opens Figure 4 8 VPN Tunnel Configuration Dialog Box 4 Use the information in Table 4 4 to configure the VPN settings and then click APPLY ...

Страница 88: ...et Call Direction to Outgoing Only or Both My System Name Enter the name that the remote system uses to recognize your network This field is case sensitive so nortel is not the same as Nortel or NORTEL My System Password Enter the password the remote system uses to authenticate your system If the remote site does not require tunnel authentication leave this field blank This field is case sensitive...

Страница 89: ...opens Proceed with Step 2 If you are configuring a Connection Profile for the first time the Interface Configuration dialog box Figure 4 10 opens Proceed with Step 3 Figure 4 9 Connection Profile Summary Dialog Box 2 Do one of the following To create a new Connection Profile select New from the list and then click NEXT To edit an existing Connection Profile select it in the list and then click NEX...

Страница 90: ...nection Profile Configuration Remote Office Access by VPN dialog box Figure 4 11 opens Figure 4 11 Connection Profile Configuration Remote Office Access by VPN Dialog Box 5 Use the information in Table 4 5 to configure the VPN settings and then do one of the following If you set the Call Direction to Incoming click APPLY If you set the Call Direction to Outgoing or Both click APPLY and TEST or cli...

Страница 91: ...l out The default direction is Both NOTE If you set the Call Direction to Incoming Only the My System Name and My System Password fields are not displayed If you set Call Direction to Outgoing Only the Remote System Name and Remote System Password fields are not displayed If only incoming calls are allowed with this profile the APPLY and TEST button is not displayed My System Name Enter the name t...

Страница 92: ...ration Remote Office Access by VPN dialog box Figure 4 11 click Advanced The Connection Profile Configuration Remote Office Access by VPN advanced dialog box Figure 4 12 opens Figure 4 12 Connection Profile Configuration Remote Office Access by VPN Advanced Dialog Box 2 Use the information in Table 4 6 to configure advanced VPN profile settings and then click OK ...

Страница 93: ...data from other routers and broadcasts the routing table and routing table updates as necessary This field is displayed if you selected Share NetWare IPX Resource in the BayStack 820 ISDN Router Manager customization dialog box Set as IPX Default Route Select whether to set this profile as the default route When you enable this profile as the default route the router uses this connection if no oth...

Страница 94: ...nd encryption is enabled DES Encryption key Enter the DES encryption key to be used by other systems to establish a connection with your system You need to enter a must be a hexadecimal number with either 40 or 56 bits 10 or 14 digits This field is displayed when Enable Encryption is set to Yes Confirm Encryption key Reenter the DES encryption key to confirm that you entered it correctly This fiel...

Страница 95: ...base for a match with the received name and password If an appropriate profile is not found the call is rejected If a profile is found other information in the entry is used to configure the connection To allow dial in access from remote users you must select Dial in Access for Off Site Users in the BayStack 820 ISDN Router Manager customization dialog box If you want to configure NetWare resource...

Страница 96: ... box Figure 5 1 opens Proceed with Step 2 If you are configuring a connection profile for the first time the Interface Configuration dialog box Figure 5 2 opens Proceed with Step 3 The Connection Profile Summary dialog box Figure 5 1 opens Figure 5 1 Connection Profile Summary Dialog Box 2 Do one of the following To create a new connection profile select New from the list and then click NEXT To ed...

Страница 97: ...tions you made in the BayStack 820 ISDN Router Manager Configuration dialog box For details refer to Customizing the BayStack 820 ISDN Router Manager Interface on page 3 3 The Connection Profile Configuration Single User Dial in by ISDN dialog box Figure 5 3 opens Figure 5 3 Connection Profile Configuration Single User Dial in by ISDN Dialog Box 5 Use the information in Table 5 1 to configure the ...

Страница 98: ...Select whether to enable the call back security feature When you enable call back the router answers an incoming call authenticates the dial in user s user name and password disconnects the call and then dials the remote user s call back number to reconnect Call Back Phone Number Enter the remote user s call back phone number This field is displayed when you set Call Back to Yes Incoming Authentic...

Страница 99: ...compression depends on the capabilities of your ISP Idle Timeout Enter the number of seconds of inactivity for the connection before the router disconnects the call You can set the idle timeout from 0 to 3600 seconds The default setting is 120 seconds If you set the timeout to 0 the connection never times out Enable IP Select whether to enable IP routing over a connection using this profile When y...

Страница 100: ...n by ISDN Screen Advanced dialog box Figure 5 4 click Multilink The Connection Profile Configuration Single User Dial in by ISDN Multilink dialog box Figure 5 5 opens Figure 5 5 Connection Profile Configuration Single User Dial in by ISDN Multilink Dialog Box Note The use of multiple B channels depends on the device and capabilities of the dial in user s ISDN subscription Using an additional B cha...

Страница 101: ...reases beyond the utilization threshold Always two B Channels Select this option to have the router always use both B channels regardless of the traffic Upper utilization threshold Enter the percentage of bandwidth of the first B channel that must be in use before the router initiates the second B channel call This field is displayed if you set Multilink Usage to Two B Channels Only When Needed Lo...

Страница 102: ...ting a Dial In Connection Profile To delete a dial in connection profile 1 Choose Configuration Connection Profiles The Connection Profile Summary dialog box Figure 5 6 opens Figure 5 6 Connection Profile Summary Dialog Box 2 Select the profile in the list and then click DELETE ...

Страница 103: ...ple an e mail server an FTP server or a Web server to be accessible to remote users via the Internet For details refer to Configuring Advanced IP Settings on page 9 1 When you applied for an Internet account with an Internet service provider ISP the ISP supplied you with the ISP s access phone number as well as a user name and password that the ISP uses to authenticate your connection This informa...

Страница 104: ...e communications you need to configure the router s ISDN settings To configure the ISDN settings you must have the information in the Installation Worksheet on page 2 7 The ISDN interface supports a Basic Rate 2B 1D Interface and a variety of worldwide switch types Some carriers offer permanent B channel subscriptions over either a single 64K B channel 1B 0D or two B channels combined 2B 0D offeri...

Страница 105: ...igure the ISDN interface for remote communications 1 Choose Configuration WAN Interfaces ISDN The Port Configuration ISDN dialog box Figure 6 1 opens Figure 6 1 Port Configuration ISDN Dialog Box 2 Use the information in Table 6 1 to configure the ISDN port settings and then click APPLY ...

Страница 106: ...ong and consists of the 10 digit telephone number area code plus phone number followed by the digits 0101 Other variations of this number are possible and your telephone company can provide you with the correct information for your ISDN line The SPID numbers may be automatically detected and entered if you select Auto Detect as the ISDN Switch Type This field is displayed when you select NT DMS 10...

Страница 107: ...ess associated with that call For such a call to be distinguished from a normal inbound voice call you can use one of the Directory Numbers a special subaddress or a combination of the two to determine whether or not an inbound voice call is a DOV call To configure advanced ISDN port settings 1 In the Port Configuration ISDN dialog box Figure 6 1 click Advanced The Port Configuration ISDN advanced...

Страница 108: ... Incoming Call Sub Address for Data Calls Select whether to require an incoming data call to contain the called party s sub address or extension number to accept an incoming data call If you select Require the configured sub address is required for a data call to be accepted NOTE For sub address authentication to work properly you must also configure all connection profiles for sub address authent...

Страница 109: ...know why the connection is not successful If the test is successful users on your LAN can now start to access the Internet However you must configure the workstations to obtain IP addresses automatically or through a DHCP server depending on the device you are using For details refer to Configuring a Workstation to Use the Router on page 2 12 Table 6 3 Connection Profile Configuration Internet Acc...

Страница 110: ...on dialog box For details refer to Customizing the BayStack 820 ISDN Router Manager Interface on page 3 3 When you select only this check box all Internet access configuration fields are displayed in a single dialog box To create an quick Internet access connection profile 1 Choose Configuration WAN Interfaces ISDN The Internet Access Configuration ISDN dialog box Figure 6 4 opens Figure 6 4 Inter...

Страница 111: ... numbers are required if you want to connect using two B channels A SPID number is typically 14 digits long and consists of the 10 digit telephone number area code plus phone number followed by the digits 0101 Other variations of this number are possible and your telephone company can provide you with the correct information for your ISDN line The SPID numbers may be automatically detected and ent...

Страница 112: ...edit an existing connection profile select it in the list and then click NEXT 3 Proceed with the instructions for Creating an Internet Access Connection Profile on page 6 6 or Creating a Quick Internet Access Connection Profile on page 6 8 Directory Phone Number 3 Enter the third Directory Number This field is displayed when you select 3 as the number of directory phone numbers Remote Phone Number...

Страница 113: ... security and employee productivity you can adjust the times when the router can be triggered to connect to the Internet You can enter the days of the week and the hours of the day during which Internet access is allowed The router will not connect to the Internet other than during the configured times To use this feature effectively you must set the router to the current local time For details re...

Страница 114: ...very day select All 7 days To specify a range of days select Day Range and then select the From and To days 3 Specify the time during which Internet access is allowed To permit Internet from midnight to midnight on the specified days of the week select All 24 hrs To specify a time range select Time Range and then enter the From and To times The time is based on a 24 hour clock To specify 8 30 am f...

Страница 115: ... ISDN Switch Type Considerations ISDN switch types differ in their ability to support voice phone calls The router automatically defaults to the most common configurations for ISDN voice call support depending upon the router s ISDN interface type U or S T and the configured or detected switch type You must adjust the ISDN switch type configuration only if you require something other than the defa...

Страница 116: ...busy signal after dialing All Other Switch Type Defaults You can configure up to three Directory Numbers for all other switch types Japan INS Net Europe ETSI Taiwan By default DN1 is associated with both voice ports An outbound call placed from either of these voice ports attempts to use DN1 Inbound calls ring both ports by default The first phone to answer is connected Configuring the Router for ...

Страница 117: ... is routed directly to the corresponding extension For example if a remote caller with an ISDN phone dials your ISDN number followed by a and the extension number for port A only the phone that is connected to port A rings To configure direct calling options 1 Choose Configuration WAN Interfaces Voice Adapter The Port Configuration Voice Adapter dialog box Figure 7 1 opens Figure 7 1 Port Configur...

Страница 118: ...cannot enter an extension number that begins with zero Associate This Port with This Directory Number Select the Directory Number that rings this voice port Ring This Port When A Call Is Received On Select which Directory Number a voice call rings on the selected port If you want the device to ring regardless of which Directory Number is called select the Any check box The Any option overrides all...

Страница 119: ...ring a speed dial number for the first time the SpeedDial Table Entry Configuration dialog box Figure 7 3 opens Proceed with Step 3 Figure 7 2 SpeedDial Table Summary Dialog Box 2 Do one of the following To create a new speed dial number select New in the list and then click NEXT To edit an existing speed dial number select it in the list and then click NEXT The SpeedDial Table Entry Configuration...

Страница 120: ...t should begin dialing the number If you do not press the router begins dialing after three seconds To place a voice call through the router 1 Pick up the handset and wait for the dial tone 2 Dial the number followed by the key Table 7 2 SpeedDial Table Entry Configuration SpeedDial Telephone Access Fields Field Description SpeedDial Number Enter a 1 to 8 digit number You cannot enter a speed dial...

Страница 121: ...on the fax machine Receiving a Voice Call Depending on how you configured the router s voice ports an inbound call can ring one or both voice ports If you configured the router to ring both voice ports the first extension to answer the phone receives the call You can also connect answering machine or fax machine to the voice port and they operate in a similar manner ...

Страница 122: ......

Страница 123: ...ernet Access with Advanced IP Configuration in the BayStack 820 ISDN Router Manager Configuration dialog box If you want to configure NetWare resources for remote access or remote office connections select Share NetWare IPX Resource For details refer to Customizing the BayStack 820 ISDN Router Manager Interface on page 3 3 Viewing the Connection Log The BayStack 820 ISDN Router provides a connecti...

Страница 124: ...messages show the date time channel and details of an event that triggers a connection Trigger messages are useful in determining which applications and tasks trigger a connection To view the connection log Choose Monitoring Connection Log The Connection Log window Figure 8 1 opens Figure 8 1 Connection Log Window Note The BayStack 820 ISDN Router retrieves the time of day only after connecting to...

Страница 125: ...s releases a new firmware the software that controls the router s operations version with new features or fixes Before you update the BayStack 820 ISDN Router firmware you must download the firmware from the Bay Networks Web site and copy it to a local directory Upgrading a Software Feature To upgrade a feature 1 Choose System Tools System Upgrade The System Upgrade dialog box Figure 8 2 opens Fig...

Страница 126: ... network After the operation is complete be sure to reset the system to have the new firmware take effect For details refer to Resetting the Router on page 8 5 Saving and Clearing Configuration Changes The router automatically saves unsaved configuration changes every 30 minutes You can use the configuration options to save changes immediately for example when you need to turn the router off or cl...

Страница 127: ... the Router You can reset the router from the main menu or by unplugging and then plugging in the power connector to the BayStack 820 ISDN Router Note Resetting the router disconnects any active calls and disrupts current user operations You may also lose recent configuration changes those that have been made within the last 30 minutes unless you manually save the configuration see Saving and Clea...

Страница 128: ...restoring the default password use the null modem cable connect directly to the router to When you reset the router to factory default conditions you clear all system configurations and must reenter all of your configuration data Backing up your unit configuration on a regular basis can help make reconfiguration easier For details refer to Chapter 10 Using the Command Line Interface Caution Anyone...

Страница 129: ...p bit 19200 8 N 1 and disable hardware flow control If the Telnet application does not allow you to set flow control options set it in the Device Manager area of the Windows System settings accessible from the Control Panel After configuring these settings some applications require that you close and then restart the session 4 Turn the router off and then back on In the console window the message ...

Страница 130: ... Configuration Dialog Box 2 Using the information in Table 8 1 configure the password settings and then click SUBMIT Table 8 1 Password Configuration Fields Field Description Current Password Enter the current password for the router The factory default password is password If you are changing the password for the first time enter password without the quotation marks in the Current Password box Ne...

Страница 131: ...on Dialog Box 2 Using the information in Table 8 2 configure the system settings and then click APPLY Table 8 2 System Information Fields Field Description System Uptime Displays the elapsed time since the router was turned on You cannot change this value System Name Enter a unique name for the router System Contact Enter the name and phone number of the administrator responsible for maintaining t...

Страница 132: ......

Страница 133: ... the router modify DNS addresses and enable or disable the router as a DHCP server Private IP Addresses Every BayStack 820 ISDN Router is shipped with the same default private IP address 192 168 168 230 If you want to use two or more routers to create a private WAN among your remote offices without using public IP addresses you must assign a unique private IP address to each router After you chang...

Страница 134: ...2 206901 A To configure advanced IP settings 1 Choose Configuration Advanced IP The System IP Configuration dialog box Figure 9 1 opens Figure 9 1 System IP Configuration Dialog Box 2 Use the information in Table 9 1 to configure the settings and then click APPLY ...

Страница 135: ...condary DNS DHCP Select whether to enable the router as a Dynamic Host Configuration Protocol DHCP server default When you enable DHCP the router assigns an IP address network mask gateway address the router s private IP address and DNS addresses to any devices on the local area network that are configured as a DHCP client Devices on your network that are configured with public or static IP addres...

Страница 136: ...n IP packet arrives the router determines if the destination IP address contained in the packet is within the network defined by the Dest IP address and the Netmask address pair of an entry in the routing table If a match is found the packet is forwarded to the specified IP address or IfName interface If no match is found with a destination network a special entry called the Default IP Route is us...

Страница 137: ...s the LAN You can manually add an entry for a specific host or network A static route is indicated by an S in the Flags field Other flag field entries include H for host and G for gateway Changing the Default Route or a Static Route You can add or change the default route or a static route To edit a route 1 In the IP Routing Table dialog box Figure 9 2 click Add The IP Routing Table add dialog box...

Страница 138: ...e the default route or a static route You can configure only one default route CAUTION Misconfiguring the default route can result in abnormal system behavior or unnecessary telephone charges Remote IP Address Enter the remote IP address of the route This field is displayed if you set Add IP to static route Remote IP Netmask Enter the remote IP netmask address of the route This field is displayed ...

Страница 139: ...hey access any other services or applications running on the server with which they are communicating In this manner a server application is mapped to a port on the router When you map port 80 HTTP or port 23 Telnet to a private IP address special consideration must given for remote administration of the BayStack 820 ISDN Router because those ports are normally used for the Web based BayStack 820 ...

Страница 140: ...ss Translation 1 In the System IP Configuration dialog box Figure 9 1 on page 9 2 click Address Translation The IP Address Translation Configuration Static Address Translation Table dialog box Figure 9 4 opens Figure 9 4 IP Address Translation Configuration Static Address Translation Table Dialog Box ...

Страница 141: ...outer Select Default Entry to specify where Internet requests are sent if no other match is found in the Address Translation Table Select Static Entry to specify which device which receives the request when its target port number is specified in the Public Port Number field Public Port Number Enter TCP or UDP port specified in an IP packet received from the Internet that is translated into the por...

Страница 142: ... its DHCP lease you can configure a static DHCP IP address assignment for the workstation You can configure up to 20 static assignment To configure a static DHCP IP address assignment 1 In the System IP Configuration dialog box Figure 9 1 on page 9 2 click Static DHCP The DHCP Configuration Static Assignment Table dialog box Figure 9 6 opens Figure 9 6 DHCP Configuration Static Assignment Table Di...

Страница 143: ... Figure 9 7 DHCP Configuration Add A Static Entry Dialog Box 3 Use the information in to configure the static assignment and then click APPLY Table 9 4 DHCP Configuration Add A Static Entry Fields Field Description Name Enter a name for this static assignment IP Address Enter the IP address from the pool of IP addresses to be assigned to the device MAC Address Enter the MAC address associated with...

Страница 144: ...ional security you can configure packet filter rules that selectively allow or deny data traffic between your local LAN and the WAN for example the Internet Specifically it allows you to define each and every IP packet to be inspected to determine if it should be allowed or denied transmission over a WAN interface Due to the conflicting nature of allow and deny rules you can choose only one action...

Страница 145: ...nt to block Internet access for all employees in the sales department you specify that local devices with the range of IP addresses in the Sales department and any port number are not allowed to communicate with any IP address or port number over the Internet connection Adding a Packet Rule To add or edit a packet rule 1 Choose Configuration Advanced IP Filter The Filtering Configuration dialog bo...

Страница 146: ...ed 4 Do one of the following To configure a new rule click Add To configure an existing rule select it in the Select to Edit column and then click Edit The IP Filter Configuration Add a New Rule dialog box Figure 9 9 opens Figure 9 9 IP Filter Configuration Add a New Rule Dialog Box 5 Using the information in Table 9 5 configure the IP filter settings and then click APPLY ...

Страница 147: ...arting IP address From and the ending IP address To Local Port Specify the port number s of the local devices to which this rule applies Fields in the dialog box change depending on the method you select Refer to Table 9 2 for some examples of TCP IP port assignments Remote IP Address Specify the IP address es of the remote devices to which the rule applies You can select a single IP address a ran...

Страница 148: ...rtising Protocol SAP You can view and modify the IPX and SAP routing tables using the command line interface CLI commands For details refer to Chapter 10 Using the Command Line Interface To configure advanced IPX settings select Share NetWare IPX Resource For details refer to Customizing the BayStack 820 ISDN Router Manager Interface on page 3 3 Table 9 6 TCP IP Port Assignments TCP IP Service Typ...

Страница 149: ...connections Enabling learning does not enable bridging for a connection profile You must enable bridging individually for the specific WAN connection Table 9 7 System IPX Configuration Fields Field Description Ethernet Frame Type Select the Ethernet frame type on the LAN Normally the router automatically detects the frame type Select from Ethernet_802 3 Ethernet_802 2 Ethernet_II and Ethernet_SNAP...

Страница 150: ...nable the bridging learning protocol 1 Choose Configuration Advanced Features Bridging The System Bridging Configuration dialog box Figure 9 11 opens Figure 9 11 System Bridging Configuration Dialog Box 2 Select whether to enable or disable bridging learning and then click APPLY ...

Страница 151: ...GUI of the BayStack 820 ISDN Router Manager software you can configure the BayStack 820 ISDN Router using a command line interface CLI and remote access commands You need to use the CLI to configure some features of the router such as IPX and SAP routing table entries and saving and restoring the router configuration There are two ways to connect to the BayStack 820 ISDN Router s CLI through a Tel...

Страница 152: ...alog Box 2 Enter telnet followed by the router s IP address The Telnet dialog box opens and the following prompt is displayed BayStack 820 Manager Console Version rev number build date and time Please enter your password 3 Enter the password you use to connect to the router and then press Enter This password is the same one you use to connect to the BayStack 820 ISDN Router Manager through a Web b...

Страница 153: ...sole Port 2 Connect to the CLI using terminal emulation software such as AniTa 3 Set the console speed to a baud rate of 19200 b s eight data bits no parity one stop bit 19200 8 N 1 and disable hardware flow control If the Telnet application does not allow you to set flow control options set it in the Device Manager area of the Windows System settings accessible from the Control Panel After config...

Страница 154: ...e command If the command requires a keyword all valid keywords are displayed and then the command typed so far is re displayed Type Ctrl P to repeat the previous command if one was issued or Ctrl N to display the next command if one was issued When you display a command you can either enter a carriage return to accept the command or enter backspaces to edit the command from the end You can issue u...

Страница 155: ...ween Express Mode and Advanced Mode by typing Ctrl E and the system prompt changes The characters is appended to the command prompt BayStack to indicate that you are working in Advanced Mode Conventions In addition to the conventions described in Text Conventions on page xxviii the following conventions are used in this chapter lan means the LAN port interface_name or ifName represents a profile i...

Страница 156: ...of the command is followed by examples where appropriate Examples are given in the following format Example BayStack command with parameters Output Table 10 1 CLI Command Categories Command Type Page Number Bridging Commands 10 7 Compression Commands 10 9 DHCP Commands 10 10 Diagnostic Commands 10 14 Dial In User Commands 10 16 Filter Commands 10 19 IP Commands 10 22 IPX Commands 10 35 Multicast C...

Страница 157: ...iltering decisions for each packet it receives whether the packet is from the LAN side or from one of the WAN connections Table 10 2 lists the bridging commands enable disable bridging interface_name Enables or disables bridging over the specified interface If the interface already has IP IPX routing enabled then routing will take precedence For example if both bridging and IP routing are enabled ...

Страница 158: ...ble learning all addresses learned to date are no longer aged out show bridging Displays the bridging configuration for all configured interfaces Example BayStack show bridging IfName IP IPX Other ppp2 disabled disabled enabled isp1 enabled disabled disabled lan enabled enabled enabled show learning Displays MAC addresses learned from all bridging enabled interfaces Example BayStack show learning ...

Страница 159: ... bandwidth is used more efficiently The BayStack 820 ISDN Router supports STAC based compression Table 10 3 lists the compression commands clear compression statistics profile_name Resets the statistics counters associated with compression over the specified interface disable compression profile_name Disables compression for the specified interface Table 10 3 Compression Commands Command Page clea...

Страница 160: ...P server is automatically enabled The DHCP function is disabled if the router discovers another DHCP server at initialization time or if you have explicitly disabled this function DHCP clients on LAN resident devices such as those running Windows 95 or Windows 98 may then request a lease on an IP address from a DHCP server As the term implies the assignment of the address is temporary The default ...

Страница 161: ...ied 00 40 05 35 db 4f add dns primary secondary IPaddr Allows the specific assignment of Domain Name Server DNS IP addresses that are subsequently assigned to requesting DHCP clients These addresses also can be automatically obtained using protocol negotiation when connecting to a remote IP network for example a connection to an ISP You can assign both a primary DNS server address and a secondary ...

Страница 162: ...nable DHCP the router services client requests for IP address and netmask assignments as well as assignments of default gateway DNS server addresses WINS server addresses and NetBIOS node type The pool of addresses from which the router assigns an IP address is on its default network 192 168 xxx 1 and 192 168 xxx 229 inclusive The default value of xxx is 168 unless you reconfigured this value usin...

Страница 163: ...us of the DHCP server Example BayStack show dhcp Admin Status Enable Default Lease 10 hours Network address 192 168 168 0 Netmask 255 255 255 0 Default gateway 192 168 168 207 Primary DNS 199 191 129 139 Secondary DNS 199 191 144 75 Primary WINS 63 221 98 5 Secondary WINS 63 221 98 7 Node Type h node IP Address Mac Addr Lease Expires Entry Type 192 168 167 134 00400535db4f 06 15 99 14 24 5 Static ...

Страница 164: ...tes the connection of an active switched profile as if an idle timeout occurred This command has no effect on leased line profiles enable disable trace Enables or disables debug trace messages When you enable trace all log messages entered into the system log appear in the console session from which this command is issued Table 10 5 Diagnostic Commands Command Page connect profile profile_name 10 ...

Страница 165: ...6 bytes The maximum value for n_times is 100 The maximum value for n_size is 1932 If you specify a larger value for either parameter it is reset to the appropriate default Example BayStack ping 10 0 0 2 100 1000 repeating times 100 data length 1000 Ping packets total 100 sent 100 received 100 BayStack ping 10 0 0 2 repeating times 1 data length 56 Ping packets total 1 sent 1 received 1 set log lev...

Страница 166: ...and configure the connection Table 10 6 lists the dial in user commands add user user_name Configures an entry in the local profile database The users you add with this command might be single workstations dialing in through a modem or terminal adapter You can specify a user name of up to 30 characters The following examples illustrate the information prompts you must respond to for these profiles...

Страница 167: ...Press Ctrl E to switch between Express Mode and Advanced Mode BayStack add user u2 Add new user u2 user password Unspecified password confirm allowable interfaces Either ISDN VPN Either enable call back No yes no y call back number Unspecified 5554444 enable caller ID authentication No yes no yes caller ID Unspecified 5556666 multilink option No no balanced overflow over second caller ID Unspecifi...

Страница 168: ...igned automatically by the router to dial in users and may be used for manual configuration of a LAN device unless used by another router elsewhere on the LAN Example BayStack set user enter upper bound address 192 168 168 254 enter lower bound address 192 168 168 231 show user user_name This command displays the current local profile database Example 1 If you enter a user name the current local p...

Страница 169: ...If all of the conditions in any rule do not match the contents of the packet the packet is either forwarded or discarded depending upon the filter default for that interface Otherwise the exception action is taken the packet is discarded or forwarded the opposite of the default action You set the default action for an interface with the set filter default command page 10 21 For more information on...

Страница 170: ...et Conditions Source IP Address Any value wildcard Individual IP address xxx xxx xxx xxx Range of consecutive IP addresses xxx xxx xxx xxx yyy yyy yyy yyy A network of IP addresses and its associated subnet mask xxx xxx xxx xxx sss sss sss sss Destination IP Address Any value wildcard Individual IP Address xxx xxx xxx xxx Range of consecutive IP addresses xxx xxx xxx xxx yyy yyy yyy yyy A network ...

Страница 171: ...etmask Unspecified endif network enter Destination IP Address any a ny s ingle r ange n etwork enter Source TCP UDP Port any a ny s ingle r ange enter Destination TCP UDP Port any a ny s ingle r ange delete filter 1 8 Deletes the specified filter Example BayStack delete filter 1 set filter default Sets the default action to be taken when an IP packet does not match any rule on the specified interf...

Страница 172: ...p2 Src IP 212 54 104 1 Src Port 136 Dest IP any Dest Port any Filter 2 Filter Name Rule2 Interface Name lan Src IP 204 122 6 240 255 255 255 240 Src Port any Dest IP any Dest Port any show filter 1 8 Displays the definition of the specified rule Example BayStack show filter 1 Filter 1 Filter Name Rule1 Interface Name ppp2 Src IP 212 54 104 1 Src Port 136 Dest IP any Dest Port any IP Commands These...

Страница 173: ...ntry public _port_ 10 26 delete pat entry default 10 26 enable disable spoofing interface_name iprip 1 60 10 26 ping IPaddr n_times n_size 10 27 set ip default route gateway_IPaddr 10 27 set ip default route profile_name 10 27 set ip lan IPaddr netmask 10 27 set ip private IPaddr netmask 10 28 set ip rip interface_name disabled passive active rip1 rip2 10 28 set ip profile_name 10 29 set ip profil...

Страница 174: ... dest_IPaddr netmask profile_name hop_count 1 15 Adds a static route to the IP routing table Example 1 In this example any packets sent to the destination IP address 204 71 220 153 should be forwarded to 204 23 0 1 first and the target is 4 hops away BayStack add ip route 204 71 220 153 255 255 255 0 204 23 0 1 4 Example 2 In this example any packets sent to the destination IP address 204 71 220 1...

Страница 175: ...ined the packet is forwarded to the specified device Example 1 In this example IP packets received with a destination port number of 123 are translated to port 234 with a destination private IP address of 192 168 168 120 BayStack add pat entry 123 Enter Private IP Address 192 168 168 120 Enter Private Port Number 234 Example 2 In this example IP packets received with a destination port number not ...

Страница 176: ...ntry for this IP address is also deleted delete pat entry public _port_ Deletes the specified port mapping from the Network Address Translation table delete pat entry default Deletes the default port mapping from the Network Address Translation table enable disable spoofing interface_name iprip 1 60 Enables or disables IP spoofing over switched connection profiles Because ISDN charges are based on...

Страница 177: ...age 15 set ip default route gateway_IPaddr set ip default route profile_name Sets the IP default route The default route is used when an IP packet s destination IP address cannot be found in the IP routing table If the default route is not defined such a packet is discarded Example BayStack set ip default route 204 71 220 153 BayStack set ip default route billerica set ip lan IPaddr netmask Assign...

Страница 178: ...he range of 192 168 168 1 to 192 168 168 254 Private IP addresses can be any Class C address with the range 192 168 xxx 0 where xxx is a number between 0 and 255 Note that the router may also communicate with devices in a public IP network as defined in the command set ip lan IPaddr netmask on page page 27 Example BayStack set ip private 192 168 168 168 255 255 255 0 set ip rip interface_name disa...

Страница 179: ... routing algorithm to the packet If no route is found the packet is passed on to the central site for resolution The central site has the complete routing table and should know how to route the packet With that assumption the branch router is relieved of the burden of having to receive routing table updates from the central site which in case of a large network could contain hundreds or thousands ...

Страница 180: ...Stack set ip ppp2 23 204 71 220 153 255 255 255 0 204 71 220 151 Example 2 This example activates IP routing over the ISDN connection profile isdnprofile1 When a connection is set up using profile isdnprofile1 unnumbered IP routing is turned on BayStack set ip isdnprofile1 show arp table Displays the Address Resolution Protocol ARP cache table which contains up to 16 of the most recent MAC to IP a...

Страница 181: ...ct 0 0 Echo Request 0 0 Echo Reply 0 0 Timestamp Request 0 0 Timestamp Reply 0 0 Address Mask Request 0 0 Address Mask Reply 0 0 Calls to icmp error 0 Messages Reflected 0 show ip Displays all interfaces for which IP routing is enabled Example BayStack show ip Admin Oper Destination IfName State State IP Address Netmask Broadcast Addr ppp2 Enabled Up 20 0 0 1 255 0 0 0 20 0 0 2 lan Enabled Up 110 ...

Страница 182: ...e IP routing table Each entry in the routing table corresponds to a network or a host and contains information that is required for routing data packets to that network or host Table 10 11 shows the meanings of the each IP routing table flag Example In this example entry 8 specifies that to send a packet to 110 0 0 1 the packet should be sent to the next hop router gateway whose IP address is 40 0...

Страница 183: ...0 255 255 255 0 0 lan C 10 0 0 1 0 lo H 10 0 0 2 0 isnd1 H 20 0 0 1 0 lo H 20 0 0 2 0 ppp2 H 70 0 0 1 0 lo H 110 0 0 0 255 0 0 0 40 0 0 5 5 lan G S 120 0 0 0 255 0 0 0 40 0 0 5 1 lan G S show ip statistics Displays IP routing related statistics Example BayStack show ip statistics Received Transmitted Packets received 17418 Datagrams generated Locally 123 Packets Forwarded 15768 Datagrams Delivered...

Страница 184: ... 192 168 168 121 123 192 168 168 120 234 26 192 168 168 120 26 show tcp statistics Displays statistics for the TCP port BayStack show tcp statistics Received Sent Total Packets 0 0 show udp statistics Displays statistics for the UDP port BayStack show udp statistics Received Delivered Total datagrams 19368 5424 Datagrams with checksum error 0 Datagrams with incorrect length 0 Datagrams dropped due...

Страница 185: ...38 delete ipx interface_name 10 38 disable spoofing profile_name ipxrip ipxwatchdog 10 38 enable spoofing profile_name ipxrip 10 38 enable spoofing profile_name ipxwatchdog 1 60 10 38 ipxping remote_network_ remote_MACaddr repeat_count 10 39 set ipx default route interface_name 10 39 set ipx default route lan MACaddr 10 39 set ipx rip interface_name disabled enabled 10 39 set ipx profile_name 10 3...

Страница 186: ...X address of the next hop router is the network number for the LAN port concatenated with 00 60 20 fe 3b 30 and it is four hops away BayStack add ipx route 10882244 lan 00 60 20 fe 3b 30 4 Example 2 In this example the destination network can be reached only through a LAN and you need to specify the MAC address of the gateway on the LAN If the destination can be reached through a serial interface ...

Страница 187: ...guration the router responds with the corresponding IPX address for the server Having this address the workstation can now directly issue a login request to the server When the router receives the connection request it consults the routing table Because the server s IPX address is the same as the remote network number of the connection profile for the remote server the router sets up a connection ...

Страница 188: ...spoofing profile_name ipxrip enable spoofing profile_name ipxwatchdog 1 60 Disables or enables IP spoofing for the specified interface When you enable or disable spoofing for IPX Watchdog you must specify an argument in minutes When the router disconnects from a remote site the router responds to IPX Watchdog requests for the specified amount of time This parameter applies only to switched connect...

Страница 189: ...oute an IPX packet whose destination information cannot be found in the IPX routing tables A LAN resident device requires the entry of its MAC address set ipx rip interface_name disabled enabled Enables or disables the IPX RIP SAP protocol for the specified interface When the protocol is disabled all learned entries in the routing table are removed If you do not specify an interface name the comma...

Страница 190: ...pe configuration which defaults to 802 2 If you do not specify network number and frame type in the command the router attempts to automatically detect these parameters from responses to queries to any locally attached IPX RIP enabled devices Automatic detection is attempted when the router is initialized Example BayStack set ipx lan 10882244 802 2 show ipx interface_name Displays all interfaces f...

Страница 191: ...on the LAN whose MAC address is 00 40 33 3D D5 DB A static route to a network whose network number is 327BAA48 and is 1 hop away And there is an IPX network number 222 that can be reached through ppp2 and is 1 hop away BayStack show ipx routing table Net Gateway Gateway Number Hops Ifname Mac Addr Flags 222 1 ppp2 327BAA48 1 lan 00 40 33 3D D5 DB S 111 0 lan 333 2 ppp2 562B7EFC1 lan 00 40 33 3D D5...

Страница 192: ...ver Name Address Type Hops Ifname Flags Nortel 327BAA48 000000000001 4006 2781 lan Nortel1 327BAA48 000000000001 0005 26B 1 lan S SERVER 327BAA48 000000000001 0451 4 1 lan Table 10 13 Server Type Associations Server Type Server Code Unknown 0000h Print Queue 0003h File Server 0004h Job Server 0005h Print Server 0007h Archive Server 0009h Remote Bridge Server 0024h Advertising Print Server 0047h Re...

Страница 193: ...e destinations Without multicasting multiple copies of the same data must be sent from the source With multicasting only one copy of the data originates from the source As data is traveling through the wide area network multicast capable routers along the path may decide to make additional copies of the data as necessary so that each copy can be sent out over a different interface to one or more c...

Страница 194: ...orwarding support for the specified interface profile Example BayStack enable multicast ppp2 show multicast statistics Displays multicast statistics Example BayStack show multicast statistics IGMP Relay Total IGMP packets from WAN to LAN 0 Total IGMP packets from LAN to WAN 0 Multicast packets Total forwarded multicast packets 0 Table 10 14 Multicast Commands Command Page clear multicast statistic...

Страница 195: ...re all parameters The Express Mode assumes default values for most parameters and therefore displays a minimal number of prompts The router defaults to the Express Mode Press Ctrl E to switch between Express Mode and Advanced Mode Table 10 15 lists the port commands clear port statistics port_ Clears port statistics If you do not specify a port the statistics counters on all ports are cleared enab...

Страница 196: ...r is connected to this type of switch all of the required information is automatically detected when the ISDN line is initialized If the router cannot detect a Directory Number you must enter it manually If you use the auto detect feature you must enter the Directory Numbers for the ISDN line Example BayStack set port 1 enter switch 1 Japan INS Net 2 Europe ETSI 3 NT DMS 100 4 NI 1 5 ATT5ESS MP 6 ...

Страница 197: ...s received matching this type of configuration a DOV call is assumed The prompts to configure this are displayed in Advanced Mode at set port time In this example any call received on Directory Number 1 DN1 with a sub address of 00 is assumed to be a Data over Voice call Outbound calls using DOV are configured with the add profile profile_name command page 10 50 Enable incoming Data Over Voice Ser...

Страница 198: ...te Down Switch Type Auto Directory 1 5551111 Directory 2 5552222 Sub addr Req No DOV Directory 5551111 DOV Sub Address 00 show port statistics port_ Displays statistics for the specified port Example In this example port 1 is configured for ISDN BayStack show port statistics 1 Received Transmitted D Channel Total Octets 0 0 Total Packets 0 0 Total Error 0 0 B1 Channel Total Octets 0 0 Total Packet...

Страница 199: ... a static routing entry to be added to one or more of the routing tables if routing is defined over that profile You can edit existing profiles using the add profile profile_name command page 10 50 In this case the defaults shown are the existing configured values Table 10 16 lists the connection profile commands Table 10 16 Connection Profile Commands Command Page add profile profile_name 10 50 c...

Страница 200: ...efer yes enter caller ID Unspecified 4085556753 enable callback No yes no enter MRU 1524 512 4500 enter user account name Unspecified toremote enter user account password Unspecified enter remote account name Unspecified fromremote enter remote account password Unspecified enable TCP IP VJ compression No yes no enter idle timeout seconds 120 0 3600 enable Multilink PPP Yes yes no no enable compres...

Страница 201: ...urred This command has no effect on leased line profiles delete profile profile_name Deletes the specified profile disable profile profile_name Disables the administrative state of the specified profile To use a profile you must enable it For details refer to enable profile profile_name below disconnect profile profile_name Terminates the connection of an active switched profile as if an idle time...

Страница 202: ...Profile type ISDN Admin State Enabled Call Action Dial Answer Remote DN 4085556759 Data Service Autodetect Caller ID 4085556753 Call Back No Call Back PPP Oper State Down Max Receive Unit 1524 User Account Name toremote Remote System Name fromremote Send Auth Type Either Recv Auth Type Either TCP IP VJ Compression Disabled Inactivity Timeout 120 Multilink Type Disabled show profile statistics Disp...

Страница 203: ...ets too longs 0 Security Commands Security considerations in the BayStack 820 ISDN Router include several areas such as private IP addressing callback for switched connectionconnection profile profiles caller ID authentication for ISDN and encryption Security commands configure encryption You can encrypt user data when used within standalone PPP sessions or within virtual private networking VPN se...

Страница 204: ...d interface The key can be up to 16 hexadecimal digits SNMP Commands Remote SNMP management consoles can access the set of MIBs implemented in the router MIB information is transferred from the router s SNMP agent to the SNMP management console via SNMP get and trap commands set commands are not supported Trap commands are unsolicited status messages sent from the router to report management event...

Страница 205: ...SNMP trap messages are generated When you enable it any SNMP traps will be sent to each defined trap manager set community string read string Sets the community string up to 30 characters used for authenticating SNMP get and getnext requests The community string is case sensitive The default for the read community string is public set trap manager 1 5 IPaddr Sets the IP address of the nth trap man...

Страница 206: ... Requests 0 GETNEXT Requests 0 GET RESPONSEs 0 0 Errors Bad Versions 0 Bad Community Uses 0 ASN1 Parse Errors 0 Packet Too Long 0 NO SUCH NAME Errors 0 BAD VALUE Errors 0 READ ONLY Errors 0 GENERAL ERR Errors 0 show trap manager 1 5 Displays all defined trap managers If you specify a trap number information for only that trap manager is displayed Example BayStack show trap manager No Trap Manager ...

Страница 207: ...tistics 10 44 clear port statistics port_ 10 45 clear profile statistics 10 51 clear profile statistics profile_name 10 51 clear tunnel statistics 10 75 clear tunnel statistics tunnel_name 10 75 show compression statistics profile_name 10 10 show icmp statistics 10 31 show ip statistics 10 33 show ipx statistics 10 43 show multicast statistics 10 44 show port statistics port_ 10 48 show profile st...

Страница 208: ...atistics Rcv Discards 3 Rcv Alignment Errors 0 Rcv FCS Errors 0 Xmt Single Collision 20 Xmt Multiple Collision 17 Xmt Excess Deferral 0 System Commands These commands configure and manage the router Table 10 20 lists the system commands Table 10 20 System Commands Command Page change password 10 60 clear config 10 60 clear system feature 10 60 disable enable remote_mgt 10 60 disconnect telnet sess...

Страница 209: ...10 65 set system feature string 10 65 set system location location_information 10 65 set system name system_name 10 66 set time hh mm ss 10 66 set timezone 12 12 10 66 show config 10 66 show connection log 10 67 show interface list 10 67 show internet access time 10 67 show system 10 68 show system log 10 68 show telnet session 10 69 show time 10 69 upload config filename to IPaddr 10 70 Table 10 ...

Страница 210: ...tions on page 8 6 Example BayStack change password Please enter the old password Please enter the new password Please re enter the new password clear config Clears the configuration data in flash memory When you execute this command the router reboots The configuration returns to the factory default settings including the password and all user configured data is reset If you forget the password yo...

Страница 211: ...nd then select open the firmware to begin downloading download config filename from IPaddr Downloads the specified configuration file to the router from a TFTP server with the specified IP address Use this command to restore a backed up system configuration Example BayStack download config p1900 cfg from 205 51 23 12 Note To use this command you must connect directly to a console You cannot use th...

Страница 212: ...ridging ifName disable learning enable bridging ifName enable learning show bridging show learning show learning ifName Please enter a selection number 1 14 for more detail information logout This command logs you out of the current console session reset system Resets the router When you execute this command you are prompted to confirm the command save config Saves any configuration changes to fla...

Страница 213: ...peeds include 115 2K 57 6K 38 4K 28 8K 19 2K 14 4K 9 6K 4 8K 2 4K and 1 2K Example BayStack set console baud 19200 set console timeout 1 60 Sets the console time out value in minutes The default value is 10 minutes If you do not type anything on the console for the specified length of time the configuration management session including a Telnet session is automatically terminated Example BayStack ...

Страница 214: ...ay of the week all a ll d ay range d enter dd1 dd2 Unspecified mon sat enter Time of day all a ll t ime range t enter hh1 mm1 hh2 mm2 Unspecified 07 00 18 00 If the system loses its time setting allow Internet Access Yes Yes No set log level 1 10 Changes the system log level causing different events to be logged into the system log table This command is often used for troubleshooting the router Th...

Страница 215: ...strings that enable optional functionality for the BayStack 820 ISDN Router Feature keys are normally generated and distributed by Nortel Networks or its distributors and are unique to a particular router A feature key generated for a particular router will not enable equivalent features on another Example BayStack set system feature W4B4S52 set system location location_information Sets the router...

Страница 216: ... through the BayStack 820 ISDN Router Manager software Example BayStack set time 20 33 00 set timezone 12 12 Specifies the time zone for the router location as an offset from Greenwich Mean Time GMT The time zone is set automatically when you connect to the router through the BayStack 820 ISDN Router Manager software Example BayStack set timezone 8 Time Zone is set to GMT 8 hours show config Displ...

Страница 217: ... the router including their encryption status BayStack show interface list Oper IP IPX BRG Encryp IfName Type State MTU Status Status Status Status lo LOOPBACK Up 1536 Enable Disable Disable Disable lan ETHERNET Up 1500 Enable Enable Enable Disable isdn1 PPP Down 1500 Enable Disable Disable Disable isdn2 PPP Down 1500 Enable Disable Disable Disable show internet access time Displays the current se...

Страница 218: ... 802 2 IP RIP Mode Active Ver 1 IPX RIP SAP State Enabled IP Multicast State Disabled IP address 0 0 0 0 network mask 0 0 0 0 Private IP address 192 168 168 207 network mask 255 255 255 0 Enabling Key 3W2ED6R Enabled features HTTP Compression Multicast SNMP Filter NAS CLI L2L IPX Bridging VPN Encryption show system log Displays the system log for the router The system log contains logs of various ...

Страница 219: ...9917 27 40 ISDN ACTV REQ 6 Sep 03 9917 27 50 ISDN ACTV REQ 7 Sep 03 9917 27 52 ISDN T3 Expire State F4 8 Sep 03 9917 27 52 ISDN Line De activated show telnet session Displays all existing Telnet sessions Example BayStack show telnet session Session Id Remote IP Remote Port 1 204 71 212 38 2052 2 204 71 212 39 2564 show time Displays the current time zone daylight savings time setting date and time...

Страница 220: ...d ISDN line in the standard manner These commands configure the voice adapter ports You can connect a telephone or a fax machine to the BayStack 820 ISDN Router using the voice adapter ports labeled A or B You can configure incoming calls on either of the ISDN numbers to ring one or both of these devices You can also configure speed dial shortcuts to place a conventional call through either the IS...

Страница 221: ...specified 22 delete speeddial number speeddial_number Deletes the specified speed dial number Example BayStack delete speeddial number 3125 set voice adapter Allows modification of the feature key code associated with the call supplementary services including Call Conferencing Call Transfer and Call Drop These codes should match those provided by your ISDN service provider Example BayStack set voi...

Страница 222: ...vice attached to this voice port BayStack set voice port A Enter extension number of this port 11 Associate this port with dn1 dn1 dn2 Withhold Caller ID no yes no Disable call waiting no yes no Example 2 This example configures a voice port for any other switch type Because simultaneous calls are permitted for this switch type the selected Directory Number is always used for outbound calls unless...

Страница 223: ... speeddial table ISDN Phone List SpeedDial Remote Ph Sub adr Number Name Number Ext 3125 Julie 12105557890 22 1004 Abigail 12105551004 84 show voice port Displays the configuration for all voice ports The ring cadence is not displayed for North American switch types Example BayStack show voice port Ring cadence Pattern 1 Voice Port A Extension Number 11 Ring phone for any incoming call Caller ID o...

Страница 224: ...lar to a telephone line It is not necessary to require authentication when creating a tunnel because no sensitive data is transmitted until a user connection is established Authentication information is normally associated with the connection profile for the user data session using the tunnel see the add profile profile_name on page page 10 50 You use the Layer Two Tunneling Protocol L2TP to imple...

Страница 225: ...rd clear tunnel statistics Clears tunnel statistics for all tunnels clear tunnel statistics tunnel_name Clears tunnel statistics for the specified tunnel Example BayStack clear tunnel statistics tunnel1 delete tunnel tunnel_name Deletes the specified tunnel Example BayStack delete tunnel tunnel1 show tunnel Displays a list of all configured VPN tunnels Example BayStack show tunnel Elapsed Name Rem...

Страница 226: ...tatistics for all configured VPN tunnels BayStack show tunnel statistics Tunnel Received Transmitted Total Octets tunnel1 0 0 Total Packets tunnel1 0 0 Total Error tunnel1 0 0 Total Lost Drop tunnel1 0 0 Total Octets tunnel2 0 0 Total Packets tunnel2 0 0 Total Error tunnel2 0 0 Total Lost Drop tunnel2 0 0 show tunnel statistics tunnel_name Displays statistics for the specified VPN tunnel Example B...

Страница 227: ...ts 1 RJ 45 ISDN U or S T BRI interface 2 telephone adapter ports 1 DB 9 RS 232 asynchronous auxiliary port LEDs to show the status of power Ethernet ISDN B channels and telephone adapter ports Bridging Support Transparent bridging IP and IPX Support IP RFC 791 UDP RFC 768 TCP RFC 793 IPX Novell RIP RFC 1058 RIP2 RFC 1722 IPX RIP IPX SAP Point to Point Protocol Support PPP RFC 1144 1332 1334 1471 1...

Страница 228: ...ns Voice subaddressing at the S T interface Operating Environment Operating Temperature 0 50 C Storage Temperature 20 70 C Operating Humidity 20 80 Relative Humidity Storage Humidity 20 80 Relative Humidity Electrical Specifications External power supply Line Frequency 50 Hz 60 Hz Input Power 12V 1 5A 18W Input Voltage 100 250 VAC Input Current 0 5 A Weight U interface router 4 07 lbs 1844 g S T i...

Страница 229: ...Configuration not applied Duplicate remote IP address entered The IP address entered in the Optional Remote IP Address field is either invalid or a duplicate of an existing entry in the IP routing table Advanced Configuration not applied Duplicate remote IPX network number entered The IPX network number entered in the Optional Remote IPX Network Number field is either invalid or a duplicate of an ...

Страница 230: ... transient error occurred during the communication between the Web browser workstation and the router Repeat the operation Call operation in progress Request ignored You clicked Apply and Test or Connect when a call is already connected Cannot perform operation Port or profile is currently disabled An outgoing call was attempted on a port or profile that is disabled Can t disconnect LAN You tried ...

Страница 231: ...onfigured Either the phone line is not operational the destination is busy or doesn t answer or the remote profile is configured for call back and has disconnected the call Detecting IPX network number The router is attempting to automatically detect the IPX network number This occurs when a zero or a blank is entered as the IPX network number DHCP static assignment table is full no more actions a...

Страница 232: ... eight digits within the range of 0 9 An invalid extension number or sub address has been entered Reenter this value using the correct format Extension number Sub address unspecified An extension number or sub address has not been entered even though Require is selected for Incoming Call Sub Address for Data Calls in the advanced configuration dialog box Return to the advanced dialog box and enter...

Страница 233: ...IP Address field This field appears only for dedicated ISDN lines e g 64K permanent or IDSL perm 128K Invalid DHCP static IP address The configured IP address either conflicts with an IP address of an existing entry or is not in the valid IP address range Invalid entry index Current DHCP entry cannot be accessed Invalid Filter IP Address An IP address with a syntax error has been entered An IP add...

Страница 234: ...ed by dashes Invalid near end IP address An invalid IP address has been entered in the Near End IP Address field This field appears only for dedicated ISDN lines e g 64K permanent or IDSL perm 128K Invalid profile name please use another The selected profile name is reserved by the system Enter another name Invalid remote extension number The remote extension number entered in the speed dial table...

Страница 235: ... t be found Please try again An internal error has occurred Try this operation again NAT fails to do translation The protocol of the packet isn t supported A Network Address Translation operation failed because the packet protocol type was unknown or is not supported NAT fails to do translation NATT not found for an outgoing ICMP error message An attempt to perform a Network Address Translation op...

Страница 236: ...a filter to this interface first before setting the forwarded or discarded A filtering rule must be configured before the default rule forward or discard can be set Please select an access type The type of connection profile to be configured must be selected from the Access Type list The Port number should be 1 65535 The port number entered in a filter rule should be in the range of 1 to 65535 The...

Страница 237: ... for a complete display To view the complete IP routing table use the show IP routing table CLI command Save configuration failed Please try again The system failed to save the configuration Try again Save configuration succeeded The configuration was successfully saved to flash memory Searched entry exists The IP route being added already exists Search fail An internal error has occurred Sorry th...

Страница 238: ...w monitoring the system status on xxx xxx xxx xxx A system status monitoring window is opened on the workstation with the indicated IP address xxx xxx xxx xxx Only one system status monitoring window is allowed at a given time This operation will cause a system reset upon completion All unsaved configuration changes will be lost Do you want to continue Y N A firmware download operation through a d...

Страница 239: ...ernet users of the CLI In order to access the CLI remotely through the Internet you must re assign the router s Telnet port e g to 8023 LAN users may continue to access the CLI or the Web browser configuration tool as usual You assigned port 23 to another LAN device Because port 23 is the default Telnet port for remote Internet CLI configuration the CLI is no longer accessible over the Internet un...

Страница 240: ...r Table B 2 Connection Log Messages Message Meaning mm dd yy hh mm ss n Connected Disconnected Displays the time and date associated with an ISDN connect or disconnect event Table B 3 Web Browser Messages Message Meaning HTTP 1 0 404 File Not Found The server has not found anything matching the Request URL No indication is given about whether the condition is temporary or permanent HTTP 1 0 500 In...

Страница 241: ...l be dropped B channel Bearer channel Part of an ISDN interface able to carry voice or data over an ISDN network at 64 Kb s bandwidth Bandwidth is a measure of the capacity of a network connection or device to carry data The amount of data that is transmitted in a fixed amount of time depends on the bandwidth capacity of the connection BootP Boot Protocol A protocol that allows a diskless workstat...

Страница 242: ...n an ISDN network It operates on transmission speeds of 16 Kb s or 64 Kb s depending on the interface used default IP route An IP route defined in the IP routing table such that when a packet is received for routing if the router cannot find the destination network in its routing table the packet will be forwarded to the default IP router for routing Such a router often has a more complete routing...

Страница 243: ...irmware upgrade becomes an easy process FTP File Transfer Protocol Protocol that allows a user on one host to access and transfer files to and from another host over a network On the Internet a tool for accessing linked files See also TFTP GMT Greenwich Mean Time hop An intermediate connection in a series of connections linking two network devices for example routers Each time a packet is forwarde...

Страница 244: ... servers and FTP and Web servers maintained on behalf of clients LAN Local Area Network A communications network serving users within a limited geographical area such as one floor of a building controlled by a network operating system and using a transport protocol User devices attached to a LAN include workstations servers and printers Most local area networks employ the Ethernet token ring or FD...

Страница 245: ... Old Telephone Service Refers to analog phone lines capable of making and receiving telephone calls PPP Point to Point Protocol Protocol between the terminal and the router A communications protocol that provides dial up access to the Internet PPP encapsulates common network layer protocols in specialized Network Control Protocol packets for example IP over PPP IPCP and IPX over PPP IPXCP protocol...

Страница 246: ...rk address of the next hop router the hop count to the destination and again count among other information The aging count is for information aging purposes the routing table is periodically exchanged and kept up to date If a router fails any of the networks reachable only through this router will become unreachable The routing table will reflect such failure by either a a router detecting the fai...

Страница 247: ...tatic route A route in the routing table that is manually configured rather than learned through routing table exchanges TCP Transmission Control Protocol The major transport protocol in the Internet suite of protocols providing reliable connection oriented full duplex streams TCP IP Transmission Control Protocol Internet Protocol A set of networking protocols designed to link computers from multi...

Страница 248: ...r that offers the appearance functionality and usefulness of a dedicated private network but actually it shares backbone trunks among all customers as in a public network It allows a private network to be configured within a public network such as the Internet WAN Wide Area Network A long distance link used to extend or connect remotely located local area networks LANs ...

Страница 249: ... 4 bandwidth on demand 1 4 Basic Rate Interface 6 2 BayStack 820 ISDN Router about 2 1 back panel 2 4 branch to branch access 1 5 connectivity features 1 4 DHCP server 2 8 front panel 2 2 Internet access 1 7 ISDN support 1 4 key features 1 3 overview 1 2 remote dial in access 1 6 security features 1 10 virtual private network 1 7 BayStack 820 ISDN Router Manager customization dialog box 3 3 BaySta...

Страница 250: ...etting 8 3 trigger message 8 2 viewing 8 1 Connection Log window 8 2 connection profile about 3 8 branch to branch 3 8 dial in user 3 8 5 1 Internet access 3 8 6 1 remote office access by ISDN 4 1 remote office access by VPN 4 11 remote office access deleting 4 11 VPN 4 11 VPN access 3 8 Connection Profile Configuration Internet Access by ISDN dialog box 6 6 Connection Profile Configuration Remote...

Страница 251: ...og box BayStack 820 ISDN Router Manager customization 3 3 Configuration Data Options 8 4 Connection Profile Configuration Internet Access by ISDN 6 6 Connection Profile Configuration Remote Office Access by ISDN 4 3 Connection Profile Configuration Remote Office Access by ISDN advanced 4 5 Connection Profile Configuration Remote Office Access by ISDN Multilink 4 9 Connection Profile Configuration ...

Страница 252: ...52 disable remote_mgt command 10 61 disable spoofing command 10 27 10 39 disable trace command 10 14 disable trap command 10 56 disconnect profile command 10 14 10 52 disconnect telnet session command 10 62 DN1 7 2 DN2 7 2 DNS server about 1 13 DOV 6 5 download config command 10 62 download firmware command 10 62 DSU 2 6 E e mail server 6 1 9 6 enable bridging command 10 7 enable compression comma...

Страница 253: ...dd a New Rule dialog box 9 14 IP packet filtering example 9 13 rule 9 13 IP routing table viewing 9 4 IP Routing Table add dialog box 9 5 IP Routing Table dialog box 9 4 IP routing about 9 4 IP settings advanced 9 1 9 2 private IP address 9 1 IPX commands 10 36 SAP 9 16 settings advanced 9 16 ipxping command 10 15 10 40 ISDN Directory Number 6 2 switch type 7 1 ISDN connection European requirement...

Страница 254: ...g box Port Configuration ISDN 3 9 Port Configuration Voice Adapter dialog box 7 3 POTS port 7 1 private server access e mail server 6 1 FTP server 6 1 Web server 6 1 product support xxviii protocol L2TP 10 75 Layer Two Tunneling Protocol 10 75 publications hard copy xxviii related xxvii R remote office access by ISDN 4 1 by VPN 4 11 remote office access connection profile advanced options 4 5 conf...

Страница 255: ...mmand 10 40 set ipx default route lan command 10 40 set ipx lan command 10 41 set ipx rip command 10 40 set log level command 10 15 10 65 set port command 10 47 set prompt command 10 65 set system contact command 10 66 set system feature command 10 66 set system location command 10 66 set system name command 10 67 set time command 10 67 set timezone command 10 67 set trap manager command 10 56 set...

Страница 256: ...dards ETSI 2 6 EURO ISDN 2 6 static address assigning to a device 9 10 static route changing 9 5 deleting 9 6 statistics commands 10 58 straight through cable 2 11 support Nortel Networks xxviii switch all others 7 2 North American 6 2 7 2 switch type 7 1 switched call 5 1 System Bridging Configuration dialog box 9 18 system commands 10 59 system contact configuring 8 9 System Information dialog b...

Страница 257: ... voice port extension number 7 3 VPN connection profile advanced options 4 17 configuring 4 15 VPN tunnel commands 10 75 configuring 4 12 VPN Tunnel Configuration dialog box 4 13 VPN Tunnel Summary dialog box 4 12 W Web browser messages B 12 Web server 6 1 9 6 workstation configuring to use the router 2 12 ...

Страница 258: ......

Отзывы:

Нет отзывов

Похожие инструкции для BayStack 820

Бренд: ZETR Страницы: 2

Бренд: CallDirect Страницы: 33

Бренд: D-Link Страницы: 83

Бренд: Ruckus Wireless Страницы: 56

Бренд: Edgewater Networks Страницы: 7

Бренд: IBM Страницы: 72

Бренд: Zhone Страницы: 2

Бренд: National Instruments Страницы: 26

Бренд: PairGain Страницы: 80

Бренд: RTS Страницы: 3

DynaGST/2402G GEP-33224T-1

Бренд: UNICOM Страницы: 17

WebShare 141 WN

Бренд: Atlantis Страницы: 78

Бренд: LevelOne Страницы: 83

Бренд: DPS Telecom Страницы: 80

SecPath F50X0 Series

Бренд: H3C Страницы: 41

Modular Fast Fiber Switch Converter MT-RJ

Бренд: Lindy Страницы: 3

Бренд: H3C Страницы: 51

Бренд: NETGEAR Страницы: 120

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды