background image

IP Filtering

 7-5

8000-A2-GB21-20

November 1997

Service Security Filtering Scenario

The following is an example of filtering to ensure service security:

97-15476-02

Router

155.1.2.1

155.1.3.1

NSP1

155.1.2.2

DSL Card*

155.1.3.2

RTU 1*

135.1.3.3

155.1.3.4

ES1

1) 155.1.3.4
2) 155.1.3.4
3) 155.1.3.6
4) 155.1.3.6

155.1.3.1
135.1.3.3
155.1.3.1
135.1.3.5

s1c

s1d

RTU 2*

135.1.3.5

155.1.3.6

ES2

Host/Net

Subnet Mask

255.255.255.255
255.255.255.255
255.255.255.255
255.255.255.255

8546 DSL
Card Next-Hop
Address

S/D (Source/
Destination)

src (source)
dst (destination)
src (source)
dst (destination)

DSL Routing Table

*If DSL card is an 8540 DSL card,

associated RTU will not have an IP address.

s1c

s1d

8540 DSL
Card Next-Hop
Address

The RTU forwards upstream any traffic on its LAN interface for which it does not
know the host.

Содержание 8540

Страница 1: ...HOTWIRE DSLAM FOR 8540 AND 8546 DSL CARDS NETWORK CONFIGURATION GUIDE Document No 8000 A2 GB21 20 November 1997...

Страница 2: ...rves the right to revise this publication and to make changes from time to time in the contents hereof without obligation of Paradyne Corporation to notify any person of such revision or changes Chang...

Страница 3: ...M Components 1 4 HotWire DSLAM Chassis 1 4 MCC Card 1 5 DSL Cards 1 6 What is an RTU 1 6 5170 RTU 1 6 5171 Remote PC NIC 1 7 5216 and 5246 RTUs 1 8 5446 RTU 1 10 Data Rates 1 11 Overview of the HotWir...

Страница 4: ...d Proxy ARP 4 7 5 IP Address Allocation Overview 5 1 Port Naming Convention 5 1 Assigning IP Addresses 5 2 Host Addressing 5 3 Structured Subnet Addressing 5 3 Management IP Address Allocation 5 7 Pee...

Страница 5: ...dvantages 7 3 Management Traffic Leakage 7 3 Service Security 7 4 Service Security Filtering Scenario 7 5 8 SNMP Agent Overview 8 1 MIB Compliance 8 1 Supported Traps 8 3 General SNMP Agent Configurat...

Страница 6: ...S A 14 Service Domain Configuration Worksheets A 16 TASK 1 Assign IP Addresses to the DSL Card LAN Interface e1a A 17 TASK 2 Reset the DSL Card A 19 TASK 3 Create Static Routes to End User Systems A 2...

Страница 7: ...d how to allocate Internet Protocol IP addresses Understand dynamic IP addressing NOTE The DSL Sourcebook written by Paradyne Corporation is about DSL technology and opportunities Read the DSL Sourceb...

Страница 8: ...scribes the naming convention used for the HotWire DSLAM system ports Chapter 6 IP Routing Provides information and examples of destination based routing static and dynamic routes and source based rou...

Страница 9: ...ion Unit RTU Customer Premises Installation Instructions 7700 A2 GB23 DCE Manager for HP OpenView for Windows User s Guide 7800 A2 GB26 DCE Manager User s Guide 8000 A2 GB20 HotWire DSLAM for 8540 and...

Страница 10: ...Backbone service nodes can be placed deeper into the network dramatically improving the economics of service provisioning while taking advantage of the substantial speed increases of DSL When used in...

Страница 11: ...otWire 8200 IPC Voice Interface Data Interface POTS Network Service Provider The HotWire DSLAM can be configured to work with multiple types of RTUs installed at the customer end of the local telephon...

Страница 12: ...M to multiple RTUs Stacked 8600 DSLAMs can also be used in place of an 8800 DSLAM ALARMS Major Minor Fan B A POWER TST DSL ETHERNET ALM PWR TM TM TST DSL ETHERNET ALM PWR TM TM Hub 5446 RTU 5170 RTU 1...

Страница 13: ...stacked configuration the first or base chassis is equipped with an MCC card in Slot 1 leaving Slots 2 and 3 available for up to two DSL cards or a maximum of eight DSL ports Each additional chassis h...

Страница 14: ...11 13 15 17 LAN WAN SLOT 20 LAN WAN SLOT RADSL SYSTEM OK Alm Test ETHERNET TX RX Coll DSL PORT 1 2 3 4 SLOTS 13 18 For information about the HotWire 8800 DSLAM chassis see the HotWire 8800 Digital Su...

Страница 15: ...TU resides at the customer premises The RTU connects to the local loop to provide high speed connectivity to the HotWire DSLAM In addition the RTU and your telephone can function simultaneously over t...

Страница 16: ...n Unit User s Guide 5171 Remote PC NIC The HotWire 5171 PC Network Interface Card NIC is a 16 bit ISA add on card with a 6 pin telephone modular jack connector used for the DSL network connection The...

Страница 17: ...orkstation with a LAN card POTS DSL NID From Network Access Provider 5216 or 5246 RTU NID Network Interface Device DSL 97 15455a 10BaseT End user System POTS POTS Splitter POTS Optional The HotWire 52...

Страница 18: ...2 POTS DSL NID From Network Access Provider NID Network Interface Device DSL 5246 RTU POTS POTS Splitter POTS Optional For more information about these RTUs see the HotWire 5216 Remote Termination Uni...

Страница 19: ...k Interface Device DSL 97 15455b 10BaseT End user System POTS POTS Splitter POTS Optional A 5446 RTU supports multiple service domains and can be configured with up to four IP subnets Each of the four...

Страница 20: ...to rate adaptive When the mode is set to rate adaptive the HotWire DSLAM determines the line speed during the initial handshaking session between the DSLAM and the RTU based on the local loop length t...

Страница 21: ...lementation with one or more users connected to a LAN needing high speed connectivity to an Internet Service Provider ISP A SOHO implementation with one or more users connected to a LAN needing high s...

Страница 22: ...more Network Service Providers NSPs Service Subscribers may be Residential users connected to public network services e g the Internet Work at home users connected to their corporate Intranet LAN Comm...

Страница 23: ...or more HotWire DSLAMs are connected to a Wide Area Network Concentrator WAN C via a LAN The WAN C concentrates data traffic from one or more DSLAMs into facilities providing access to the WAN The WA...

Страница 24: ...the IP address of the NSP premises router for all authorized subscriber IP source addresses See the discussion on source based routing in Chapter 6 IP Routing A different next hop router is specified...

Страница 25: ...ns Service domain s The service domain also known as the NSP domain resides in a mutually exclusive domain from that of the management domain There should be one service domain for each NSP served by...

Страница 26: ...evel Data Link Control PPP HDLC Packets transmitted over DSL links on an 8546 DSL card are encapsulated in PPP HDLC frames PPP HDLC is not supported on the 8540 DSL card MAC Packets transmitted over L...

Страница 27: ...esolution Protocol ARP request is used to dynamically bind an IP address to a MAC address Proxy ARP is a technique by which a router answers ARP requests intended for another machine by supplying its...

Страница 28: ...send a packet to WS2 This time however Router B is running proxy ARP and knows that WS2 lies on LAN B on the same logical subnetwork as Router A 135 1 0 0 Router B uses proxy ARP to maintain the illu...

Страница 29: ...u can enable filtering to selectively filter source or destination packets being routed through the MCC or DSL cards Filtering provides security advantages on LANs by restricting traffic on the networ...

Страница 30: ...environment HP OpenView MS Windows with Paradyne s DCE Manager The HotWire DSLAM and HotWire RTUs provide features for the DCE Manager to allow you to monitor and manage your network from a central po...

Страница 31: ...s an IP based application used to test reachability to a specific IP address by sending an ICMP echo request and waiting for a reply It is supported from both the DSL and MCC cards As a diagnostic too...

Страница 32: ...sfers is to upload a DSL card configuration to save archive the configuration set Then if necessary you can recover the configuration by downloading restoring the saved configuration For more informat...

Страница 33: ...onfiguration consists of the following components An end user PC or workstation or multiple users on an Ethernet LAN connected to the HotWire RTU which in turn is connected to one of the DSL card port...

Страница 34: ...nd 5216 RTU The 5171 PC NIC and 5216 RTU are for single end user system configurations only They do not support multiple end user system configurations DSL Card 10BaseT LAN DSL POTS 97 15462 01 End us...

Страница 35: ...r System 32 Router or VLAN Switch HotWire RTU 10BaseT This RTU can be a 5170 RTU 5246 RTU or 5446 RTU Additionally by setting up structured subnets behind each HotWire RTU hundreds of active end user...

Страница 36: ...S DSL Proxy ARP for ES ES 155 1 3 4 NSP Sends packet to Local Router In this illustration The local router receives the IP packet and does an ARP request for the ES The DSL card receives the broadcast...

Страница 37: ...en the MCC card s 10BaseT interface and the DCE Manager is optional The MCC card as previously noted provides consolidated management for the DSL cards and HotWire RTUs from remote network management...

Страница 38: ...scovery In the illustration on page 4 5 the IP addresses assigned for the router s interface to the MCC card are 135 1 2 1 and 135 1 3 254 The second IP address 135 1 3 254 is on the same subnetwork 1...

Страница 39: ...d Troubleshooting of the HotWire DSLAM for 8540 and 8546 DSL Cards User s Guide MCC Card Proxy ARP Proxy ARP is also supported by the MCC card In a HotWire DSLAM network configuration when an ARP requ...

Страница 40: ...RTU is downstream generally a host route The MCC card does an ARP reply for the HotWire 5446 RTU by responding with its own MAC address When the local router receives the ARP reply it forwards the pac...

Страница 41: ...vention used for the HotWire DSLAM interfaces NOTE Interfaces are sometimes referred to as ports The term ports however usually is reserved for referring to the physical layer attributes of an interfa...

Страница 42: ...eT Interface to NSP MCC Card e1a s1b 10BaseT Interface to Management Network DSLAM System System Backplane Bus Assigning IP Addresses In the HotWire DSLAM network model there are two distinct domains...

Страница 43: ...3 DSL Port 4 LAN Port 200 200 200 n 255 255 255 0 200 200 200 1 255 255 255 255 200 200 200 2 255 255 255 255 200 200 200 3 255 255 255 255 200 200 200 4 255 255 255 255 RTU1 RTU2 RTU3 RTU4 ES1 ES2 E...

Страница 44: ...C8 C8 D0 FF FF FF F0 200 200 200 192 255 255 255 240 C8 C8 C8 C0 FF FF FF F0 In the previous illustration Each of the four DSL ports is on a different subnetwork of size 16 and the subnet mask for the...

Страница 45: ...ES1 155 1 3 4 255 255 255 0 ES2 155 1 3 5 255 255 255 0 ES3 155 1 3 6 255 255 255 0 ES4 155 1 3 7 255 255 255 0 ES32 155 1 3 35 255 255 255 0 ES1 155 1 3 37 255 255 255 0 ES2 155 1 3 38 255 255 255 0...

Страница 46: ...255 255 255 0 ES1 159 1 3 4 255 255 255 0 ES2 160 1 3 4 255 255 255 0 ES3 161 1 3 4 255 255 255 0 ES4 162 1 3 4 255 255 255 0 ES32 162 1 3 11 255 255 255 0 ES1 ES2 ES3 ES4 ES32 RTU ES1 ES2 ES3 ES4 ES...

Страница 47: ...16 and 135 1 2 0 24 DSL Card Each DSL card must have one management IP address in the same subnetwork as the MCC card s system backplane IP address NOTE The backplane subnet cannot be set to the same...

Страница 48: ...e is 135 1 3 1 The IP addresses of the DSL card s s1b interfaces are all in the same subnet 135 1 3 Therefore the directly connected peer subnet is its peer IP address 135 1 3 0 NOTE For structured su...

Страница 49: ...card with four 5446 RTUs connected to its DSL ports The peer address for the four DSL card ports are s1c 135 1 3 3 s1d 135 1 3 4 s1e 135 1 3 5 s1f 135 1 3 6 97 15469 01 DSL Card DSL Port 1 s1c DSL Por...

Страница 50: ...ed by the DSL card there must be an IP address in the same domain for the DSL card 10BaseT interface e1a Therefore the total number of DSL card IP addresses required is determined by the number of NSP...

Страница 51: ...ers rather than one fixed IP address per end user system In addition an authentication feature can also be configured to confirm an end user system s access location For more information about dynamic...

Страница 52: ...static and dynamic A static route is a permanent entry into the routing table that is manually entered A dynamic route is an automatically forced assigned entry into the routing table it does not nee...

Страница 53: ...tination address not matching any entry in the routing table is dropped unless a default route is specified If a default route is specified using the conventional address 0 0 0 0 as the destination IP...

Страница 54: ...0 135 1 3 1 135 1 2 1 DSL Card s1b 135 1 3 1 Unnumbered Interface Host Net Subnet Mask 255 255 255 255 0 0 0 0 Next Hop Address S D Source Destination dst destination dst destination MCC Routing Table...

Страница 55: ...sociated RTU will not have an IP address 8540 DSL Card Next Hop Address s1c 135 1 3 1 155 1 3 1 s1c Ethernet Interface NMS PA Proxy ARP Y yes N no N no In this example The DSL card s Ethernet port is...

Страница 56: ...cknowledgement by updating the routing table automatically Local host DSLAM route injection The DSL card s routing table is used to determine the DSL port on which to forward incoming packets This is...

Страница 57: ...CP Relay Servers screen to enable this feature NOTE The DHCP server is typically maintained and operated by the NSP for its address domain The HotWire RTU routing tables and the DSLAM routing tables a...

Страница 58: ...t inserts the gateway address i e the e1a IP address associated with the domain name into the original DHCP request message Then it forwards the message to the DHCP server within the configured servic...

Страница 59: ...n to use the authentication feature In addition you must also give the administrator of the authentication server some necessary information See the following section Notes to the Authentication Serve...

Страница 60: ...een The authentication request is sent to UDP port 1812 as specified in RFC 2138 If an Access Accept message is returned the DHCP request is relayed to the DHCP server XTACACS Authentication If the au...

Страница 61: ...RTU 2 97 15472 02 Router 155 1 3 1 DSL Card s1c RTU 1 135 1 3 3 155 1 3 4 ES1 s1d RTU 2 135 1 3 4 155 1 3 5 ES2 Packet Flow Host Net 1 155 1 3 4 2 155 1 3 5 3 0 0 0 0 Subnet Mask 255 255 255 255 255 2...

Страница 62: ...ting Table If DSL card is an 8540 DSL card associated RTU will not have an IP address Upstream packets from ES1 and ES2 are sent to 155 1 3 1 where in turn the router would forward them to the NSP Dow...

Страница 63: ...1 DSL Card s1c RTU 1 135 1 3 3 155 1 3 5 ES2 s1d RTU 2 135 1 3 4 159 1 3 4 ES3 Packet Flow e1a 159 1 2 1 NSP2 159 1 2 2 Host Net 1 155 1 3 4 2 155 1 3 5 3 159 1 3 4 Subnet Mask 255 255 255 255 255 25...

Страница 64: ...provides an overview of packet filters and describes why you may want to set filters on your network What is a Filter An IP filter is a rule or set of rules that is applied to a specific interface to...

Страница 65: ...t of the network This rule type can also be used to enhance security by allowing access only to certain networks The IP address and subnet mask specified in the Destination address and Destination add...

Страница 66: ...y Advantages Filtering provides security advantages on LANs as described in the following subsections NOTE All upstream traffic from an ES is forwarded by a HotWire 5246 or 5446 RTU to the DSL card un...

Страница 67: ...affic to the service domain That is filtering would block traffic from being routed upstream by another end user system that spoofs attempts to gain access to another system by posing as an authorized...

Страница 68: ...6 155 1 3 1 135 1 3 3 155 1 3 1 135 1 3 5 s1c s1d RTU 2 135 1 3 5 155 1 3 6 ES2 Host Net Subnet Mask 255 255 255 255 255 255 255 255 255 255 255 255 255 255 255 255 8546 DSL Card Next Hop Address S D...

Страница 69: ...ource Destination src source dst destination src source dst destination DSL Routing Table If DSL card is an 8540 DSL card associated RTU will not have an IP address 155 1 3 1 s1c 155 1 3 1 s1d 8540 DS...

Страница 70: ...SNMP trap messages to the DCE Manager Note that the HotWire DSLAM SNMP agent is SNMP Version 1 V1 compliant with community based management This chapter describes what you need to know to configure t...

Страница 71: ...of Managed Objects for the Link Control Protocol of the Point to Point Protocol described in RFC 1471 MIB II Definitions of Managed Objects for the IP Network Control Protocol of the Point to Point Pr...

Страница 72: ...an be found in the Paradyne DSL Enterprise MIBs See the MIBs for a complete list of traps MIBs can be accessed through the Paradyne Power Pages www paradyne com The generation of SNMP trap messages ca...

Страница 73: ...o the HotWire DSLAM SNMP agent These configurations provide a system wide view of the SNMP agent Use the Configure SNMP Logical Entity Table screens to configure access to logical entities On an MCC c...

Страница 74: ...et Walk Through To examine how data packets flow through the service domain an example of ES1 issuing a ping to NSP1 will be used The following assumptions are made A source domain IP entry exists for...

Страница 75: ...its own MAC address proxy ARP 4 After ES1 receives the ARP reply it sends the packet to the MAC address of the 8540 DSL card 5 Upon receiving this packet the RTU forwards it to the 8540 DSL card over...

Страница 76: ...the service domain an example of ES1 issuing a ping to NSP1 will be used The following assumptions are made A host route entry has been configured in the HotWire RTU for ES1 A source domain IP entry...

Страница 77: ...to 155 1 3 4 2 By normal means the packet arrives at the router 3 Because the router has an interface with an address 155 1 3 1 on 155 1 3 subnet it ARPs for 155 1 3 4 4 Because the 8546 DSL card has...

Страница 78: ...pings the RTU 1 2 3 4 5 1 2 3 4 5 6 7 8 When WS1 pings a HotWire RTU 1 The packet addressed to 135 1 3 4 is routed to the router by normal means 2 The router then does an ARP request for the RTU becau...

Страница 79: ...to identify how to forward the reply Route 2 is used because the destination address 135 1 1 1 is the 135 1 1 subnet Therefore the next hop address is the MCC card s s1b interface 135 1 3 1 3 Similarl...

Страница 80: ...For an explanation of the network model and theories review the chapters in this guide For specific information about the user interface screens and fields see the HotWire DSLAM for 8540 and 8546 DSL...

Страница 81: ...See page A 7 HotWire MCC Configure DSL IP Addr From the HotWire MCC menu select Configuration DSL Cards Set IP Address 5 Create a default route to the upstream router in the management domain See page...

Страница 82: ...on Worksheets A 3 8000 A2 GB21 20 November 1997 TASK 1 Assign an IP Address to the MCC Card On the Who Am I screen assign an IP address to the MCC card Access the By Who Am I screen Powering on the Ho...

Страница 83: ...Return to accept the default value or enter a new value at the prompt Subnet Mask 3 Reboot the system by typing yes at the yes no prompt when the system highlights OK to restart NOTE To continue conf...

Страница 84: ...Task 1 by entering yes at the Initialize NVRAM yes no prompt NOTE An answer of yes causes the loss of all static configuration information Any changed parameters will return to default values includi...

Страница 85: ...cluded in the network Access the By IP Network screen Selecting Configuration Interfaces IP Network from the HotWire MCC menu IP Network Screen A C B Prompt Your Configuration Setting 1 Enter the inte...

Страница 86: ...ber 1997 TASK 4 Assign IP Addresses to the DSL Cards On the Configure DSL IP Addr screen assign an IP address to each DSL card in the system Access the By Configure DSL IP Addr screen Selecting Config...

Страница 87: ...ystem Select the appropriate slot number by using the arrow keys to move from one field to another Once the slot number is selected enter the IP address for that DSL card at the nnn nnn nnn nnn prompt...

Страница 88: ...ng Configuration IP Router Static Routes from the HotWire MCC menu Static Routes Screen A E A Prompt Your Configuration Setting 1 Enter 0 or press Return at the Item Number 0 to add new record prompt...

Страница 89: ...ify the preference for this route 1 has the highest preference The greater the number the lower the preference Pref 1 6 Enter dst or press Return at the Source Src Destination dst prompt S D dst 7 Ent...

Страница 90: ...tting the MCC card select a DSL card to continue with the management domain configuration To select a DSL card Press Return to display the top level menu HotWire Chassis menu Select Card Selection fro...

Страница 91: ...U s management domain IP addresses Access the By IP Network screen Selecting Configuration Interfaces IP Network from the HotWire DSL menu IP Network Screen A C B Prompt Your Configuration Setting For...

Страница 92: ...rompt Route to Peer HOST For DSL port 3 s1e 1 Enter the interface name at the Input Interface Name prompt IP Interface s1e 2 Enter the port 3 RTU s IP address at the nnn nnn nnn nnn or address pool pr...

Страница 93: ...creen create a static route to the NMS on each DSL card Use this screen to enable the management traffic from the 8540 DSL cards or the 8546 DSL cards and their downstream 5446 RTUs to be routed back...

Страница 94: ...ompt Enter 255 255 255 255 if you want to create a host route to the IP address specified in Step 2 or Enter the appropriate subnet mask if you want to enter a network or subnet route 1 Subnet Mask 2...

Страница 95: ...Card Status Card Reset Perform the following tasks only if assigning addresses statically 3 Create static routes to end user systems on each DSL card See page A 20 HotWire DSL Static Routes From the...

Страница 96: ...IP Addresses to the DSL Card LAN Interface e1a On the IP Network screen assign IP addresses to the DSL card LAN interface e1a Up to 16 ISP domains can be supported per DSL card Access the By IP Netwo...

Страница 97: ...dr 5 IP Addr 6 IP Addr 7 IP Addr 8 IP Addr 9 IP Addr 10 IP Addr 11 IP Addr 12 IP Addr 13 IP Addr 14 IP Addr 15 IP Addr 16 IP Addr 3 Enter the subnet mask at the nnn nnn nnn nnn prompt 1 Subnet Mask 2...

Страница 98: ...s A 19 8000 A2 GB21 20 November 1997 TASK 2 Reset the DSL Card After configuring the e1a interface reset the card On the Card Reset screen Configuration Card Status Card Reset reset the DSL card by en...

Страница 99: ...et for each end user system For structured subnet addressing complete up to 16 worksheets up to four worksheets for each of the DSL ports corresponding to the four domains supported on each port NOTE...

Страница 100: ...ost route to the IP address specified in Step 2 or Enter the appropriate subnet mask if you want to enter a network or subnet route For an 8540 DSL card the subnet mask must be 255 255 255 255 Subnet...

Страница 101: ...to 16 domains four domains per port Access the By Static Routes screen Selecting Configuration IP Router Static Routes from the HotWire DSL menu Static Routes Screen A E A Prompt Your Configuration Se...

Страница 102: ...Next Hop IP Address nnn nnn nnn nnn prompt or When creating a source route enter the IP address of the source route at the Next Hop IP Address nnn nnn nnn nnn prompt Next Hop 5 Enter a number at the I...

Страница 103: ...ss the By The IP Network screen Make sure that the Gateway Address used in relaying DHCP requests is configured as an e1a address on the IP Network screen Configuration Interfaces IP Network A C B fro...

Страница 104: ...Remember the number 1 16 for the specific domain name you want to configure You will need to configure the DHCP relay agent for the domain name on the appropriate Servers screen either Servers 1 8 or...

Страница 105: ...Network Configuration Worksheets A 26 8000 A2 GB21 20 November 1997...

Страница 106: ...o encrypt the RADIUS message sent to the server This field accepts up to 16 characters RADIUS Secret 4 Do one of the following to specify the authentication type Enter N None if you do not want to per...

Страница 107: ...accessing the NSP network Dynamic access control security 8 Specify the default domain by entering the number associated with the domain name on the screen or enter 0 if you do not want to specify a...

Страница 108: ...M for 8540 and 8546 DSL Cards User s Guide Summarizing How to Define a Filter To define a filter for a specific interface to indicate whether a packet can be forwarded or discarded on that interface G...

Страница 109: ...tion either to forward or discard packets For each DSL card the HotWire DSLAM provides the following default filter names lan1 bound to e1a dsl1 bound to DSL port 1 dsl2 bound to DSL port 2 dsl3 bound...

Страница 110: ...en create a filter and define its rules Complete one worksheet for each rule NOTE In this release up to 33 rules can be configured for each filter If you do not specify rules the system will forward o...

Страница 111: ...screen Entering the line number of the desired filter name on the Filters Table screen see page B 3 IP Filter Configuration A E C Prompt Your Configuration Setting 1 At the Action Add Delete Edit pro...

Страница 112: ...DSL port 2 interface enter dsl2 For the DSL port 3 interface enter dsl3 For the DSL port 4 interface enter dsl4 NOTE You cannot delete these default filter names from the system However you can specif...

Страница 113: ...in conjunction with a network address or host address rule type NOTE Host address rules have precedence over network address rules All host address rules will be invoked sequentially before the first...

Страница 114: ...ilter names you do not need to complete a worksheet The default filter names are already bound to their corresponding interfaces and no further action needs to be done However you will need to complet...

Страница 115: ...to disable filtering prompt Use an input filter to prevent packets entering the DSL card through a specified interface from being forwarded For the Output Filter field enter the desired filter name a...

Страница 116: ...MP agent configuration theory review Chapter 4 Components of the Network Model and Chapter 8 SNMP Agent For specific information about the user interface screens and fields see the HotWire DSLAM for 8...

Страница 117: ...ive traps Up to three managers can be assigned for each community Also on this screen you can enable or disable the generation of traps Access the By SNMP Communities Traps screen Selecting Configurat...

Страница 118: ...ames at the Community Name prompt if desired HotWire DSLAM provides the following default community names public RO Read Only mcc RW Read Write nms RW Read Write nms 2 RO Read Only You can also change...

Страница 119: ...Enter E to enable traps This will forward traps to the specified SNMP NMS manager Enter D to disable traps This prevents the forwarding of traps public RO or ____________________ IP address Port Forwa...

Страница 120: ...et of DSL cards that NMS s IP address should only be entered on those DSL cards in the limited set Access the By SNMP Security screen Selecting Configuration SNMP Security A F A from the HotWire MCC m...

Страница 121: ...Enable Disable prompt to disable turn off security IP Address Security 2 At the nnn nnn nnn nnn prompt enter the IP address of an SNMP NMS manager s For each manager specify the access permission NA...

Страница 122: ...col A component of the dynamic IP addressing mechanism The DSL card in the DSLAM acts as a DHCP relay agent between the end user system and the DHCP server The DHCP relay agent detects and forwards a...

Страница 123: ...s has a host component and a network component Internet Protocol Control Protocol A protocol for transporting IP traffic over a PPP connection Integrated Services Digital Network Two types of ISDN ISD...

Страница 124: ...n Old Telephone Service Restricted to less than 4000 Hz of the frequency spectrum A device that filters out the DSL signal and allows the POTS frequencies to pass through This device can be installed...

Страница 125: ...t links dissimilar computers across many kinds of networks and provides the reliable full duplex stream service on which many application protocols depend A simple remote terminal protocol that is par...

Страница 126: ...GL 5 8000 A2 GB21 20 November 1997 A wire center is usually a local serving office where the DSLs from the service subscribers are terminated on the HotWire DSLAM See Authentication Server Wire center...

Страница 127: ...IP addresses for the service domain 5 10 IP addresses to the DSL cards A 7 A 17 Asynchronous Transfer Mode ATM 1 14 audience v authentication RADIUS 6 5 6 9 XTACACS 6 5 6 9 automatic dynamic access c...

Страница 128: ...2 system backplane interface s1b 5 1 5 8 Dynamic Host Configuration Protocol DHCP 2 2 dynamic IP addressing 5 11 6 5 A 24 dynamic routes 6 1 6 5 E e1a 5 1 enabling SNMP traps C 2 F filter binding a f...

Страница 129: ...twork address rule type 7 2 network configuration worksheets A 1 Network Management System NMS 8 1 network model discovering devices on the network 4 6 domain types 1 16 management domain components 4...

Страница 130: ...scenario 7 5 service subscriber 1 13 setting the peer IP addresses 5 8 Simple Network Management Protocol SNMP 8 1 SNMP agent configuration summary C 1 defining a community C 2 enabling traps C 2 gen...

Отзывы: