Netopia pn series router reference guide (301 pages)
Summary of Contents for Netopia 435
Page 1
Netopia ISDN Router Reference Guide Farallon Communications, Inc.
Page 2
Alameda, CA 94501-1010 U.S.A. Patents EtherWave technology contained in the Netopia ISDN Router is covered by U.S. Patent Number 5,414,708. PhoneNET technology contained in the Netopia Internet Router is covered by U.S. Patent Numbers 4,901,342 and 5,003,579. Other U.S. and international patents are pending.
Contents Chapter 1 — Introduction...1-1 How to use this guide... 1-2 Netopia models... 1-3 Connecting to the Advanced Configuration screens ... 1-4 Connecting a modem to the PC Card port ... 1-4 Navigating through the Advanced Configuration screens ... 1-6 Keyboard navigation ...
Page 4
Netopia ISDN Router Reference Guide Chapter 4 — IP Setup ...4-1 Key Features of IP Network Address Translation (NAT)... 4-2 Using NAT... 4-2 Associating port numbers to nodes ... 4-4 NAT guidelines ... 4-5 IP setup... 4-6 Static routes... 4-13 IP address serving ...
Page 5
Chapter 7 — Security ...7-1 Suggested security measures ... 7-2 User accounts... 7-2 Telnet access... 7-5 Calling number authentication (CNA)... 7-6 Enabling CNA ... 7-7 Configuring a connection profile for CNA... 7-7 About filters and filter sets ... 7-9 What’s a filter and what’s a filter set?... 7-9 How filter sets work...
Page 7
Appendix B — Date and Time Formats...B-1 Appendix C — Understanding IP Addressing ...C-1 What is IP? ... C-1 About IP addressing ... C-2 Subnets and subnet masks ... C-3 Example: Using subnets on a Class C IP internet... C-5 Example: Working with a Class C subnet ...
This Reference Guide should be used as a companion to the Easy Setup configuration instructions in the Netopia ISDN Router Getting Started guide. You should read the Getting Started guide before reading this Reference Guide .
How to use this guide 400 Netopia series models This guide is organized into chapters describing each of the Netopia ISDN Router’s advanced features. You may want to read each chapter’s introductory section to familiarize yourself with the various features available.
The AppleTalk models are PC and Mac compatible. However the 600 series models are for PCs only. The Netopia ISDN Router’s model number is on the label on the unit’s bottom side. See the Netopia ISDN Router’s Release Notes for more information, or call Farallon Customer Service.
“SNMP” on page Connecting a modem to the PC Card port The Netopia ISDN Router has a PC Card port (also known as a PCMCIA card port) for attaching a PC Card Type II modem. The port has two Type II slots and is located on the router’s left side behind a pull-down cover.
Page 12
Introduction You may want to attach a PC Card modem to the Netopia ISDN Router to remotely configure it or to upgrade its firmware (see “To update Netopia’s firmware” on page 10-17.) Follow the manufacturer’s instructions when unpacking and preparing to use the PC Card modem.
Main Menu Config. To attach the modem to the Netopia ISDN Router, pull down the door that covers its PC Card slots and insert the modem. You can use either slot. Inserting a PC Card (PCMCIA) modem into the exposed PC Card slot.
Page 14
Select the WAN Setup item in the Advanced Configuration screen and press Return. Select the ISDN Line Configuration, Connection Profiles, or Answer Profile item in the WAN Setup screen and press Return. To go back in this sequence of screens, use the Escape key. Introduction...
Netopia ISDN Router Reference Guide Keyboard navigation Use your keyboard to navigate the Netopia ISDN Router’s configuration screens, enter and edit information, and make choices. The following table lists the navigation keys. To... Move through selectable items in a screen or pop-up menu...
Page 16
Chapter 2 Configuring ISDN Connections This chapter shows you how to configure the Netopia ISDN Router to make and receive network connections over its ISDN line, and how to control those connections. There are five main sections: “WAN setup,” beginning on page 2-2 configure your ISDN line and set up profiles for outgoing and...
Page 17
Netopia ISDN Router Reference Guide WAN setup Advanced Main Menu Config. Setup The WAN Setup screen has three subscreens, each involving a different aspect of using the ISDN line to control connections to remote IP or IPX networks. Note: If you have completed Easy Setup (see the Getting Started guide), you will see the information you have already entered appear in some of the WAN Setup subscreens.
Note: If your ISDN Line Configuration screen contains items that are not discussed in this section, such as SPIDs, see “ISDN Configuration Guide.” North American models Configuring ISDN Connections ISDN Line Configuration Switch Type... SPID 1: SPID 2: Directory Number 1: Directory Number 2: Select the Switch Type pop-up menu.
Page 19
Note: In order for the changes that you have entered in the ISDN Line Configuration screen to take effect, you must reset the Netopia ISDN Router. Press the escape key to return to the Main Menu. Select Statistics, Utilities, Tests and then select...
(or region) and an associated switch protocol. If the default selection corresponds to the country in which the Netopia ISDN router is being installed, do not change it. Otherwise, choose the type of switch protocol your telephone company uses.
Page 21
Netopia ISDN Router Reference Guide ISDN Line Configuration Switch Type... Directory Number 1: Directory Number 2: Use up or down arrow keys to move among items. Use < or > keys to page. Select Directory Number 1, enter the primary directory number, and press the Return key.
Connection profiles A connection profile is a set of parameters that tells the Netopia ISDN Router how to connect to a remote destination. Connection profiles are also used to make out-bound calls and optionally to help answer calls. Small Office Models The Netopia ISDN Router Small Office models support up to 4...
Page 23
Netopia ISDN Router Reference Guide Displaying connection profiles To display a view-only table of connection profiles, select Display Connection Profiles in the Connection Profiles screen. Connection Profiles +-Profile Name---------------------IP Address----IPX Network-+ +------------------------------------------------------------+ | Easy Setup Profile +------------------------------------------------------------+ To Dismiss list, hit Return/Enter.
Page 24
Adding a connection profile To add a new connection profile, select Add Connection Profile in the Connection Profiles screen. Initial naming and Select Profile Name. Enter a name for the profile. For example, activation of the if this profile is for connecting to an Internet Service Provider connection profile (ISP), you may want to enter the ISP’s name here.
Page 25
Note: You may leave the address zero if you do not yet know the address of the other network. The address should either be provided by them or you can configure the Netopia ISDN Router to provide the address from the IP Address Serving pool (see “WAN IP Address Serving,”...
Page 26
If you do not wish to enable IPX , skip to Dial,” beginning on page Corporate Models Select Transmit RIP and toggle to Yes, if you want the Netopia ISDN Router to send RIP information to remote routers that are connected to your local area network (LAN) IPX configuration...
Page 27
2-12 Netopia ISDN Router Reference Guide Add Connection Profile Profile Name: Profile Enabled: IP Enabled: IP Profile Parameters... IPX Enabled: IPX Profile Parameters.. Number to Dial: Optional 2nd Number to Dial: PPP/MP Options... Telco Options... Calling Number: ADD PROFILE NOW Return/Enter goes to new screen.
Page 28
IPX network being called. Do not use an address already in use by another connection profile. If this value is set to zero and the Netopia is answering a call, the remote address will be learned when the profile is active.
Page 29
Select Number to Dial and enter the directory number (the number of the ISDN line) of the network being called. Select PPP/MP Options and go to the PPP/MP Options screen. Point-to-Point Protocol (PPP) and Multilink Point-to-Point Protocol (MP) allow the Netopia ISDN Router to make adaptable and...
Page 30
PAP or CHAP). If you choose PAP or CHAP, two (2) “send” and two (2) “receive” items appear below the Send Authentication pop-up menu. On the Netopia ISDN Router the default authentication is set for PAP, as this is usually the most popular security parameter that ISP’s (Internet...
Page 31
Send Password. If you choose PAP, and you want the remote network to use this connection profile when it calls the Netopia ISDN Router, select Receive Name and enter a name. Select Receive Password and enter a password.
Page 32
Send Authentication... Send User Name: Send Password: Receive User Name: Receive Password: B-Channel Usage... Data Compression... 1 or 2 B-Channels will be used, depending on traffic volume. Other PPP/MP options Select B-Channel Usage and choose how this connection profile will use the ISDN line’s B channels. Choose: Dynamic ( default setting), to allow calls to use the two B channels in a dynamic manner.
Page 33
2-18 Netopia ISDN Router Reference Guide line. This will also depend on certain geographic locations in North America. The standard ISDN data rate outisde of North America is 64K. ) 2 B-Channels to force a call to use both B channels.
Page 34
ISDN line’s throughput, resulting in noticeably improved performance for desktop communications applications. However, if the remote network does not or cannot enable LZS compression, the Netopia ISDN Router will not be able to use Stac compression either, regardless of the Data Compression parameter’s setting.
Page 35
The default for Dial On Demand is Yes, which is correct for most uses. When Dial On Demand is set to Yes, it allows the Netopia ISDN Router to automatically make calls as the need arises, such as when a request to connect to a host on the Internet is made by a computer on the local network.
Page 36
In addition, Netopia ISDN Router calls are data-only; speech will not allow the Netopia to dial an analog device. Select Callback and toggle to Yes to drop incoming calls (calls that the Netopia ISDN Router answers) and use this connection profile to call the remote network back.
Page 37
The default for Callback is No. Select Idle Timeout and set the time the Netopia ISDN Router will wait before dropping a call if there is no activity on the line.
You are now done configuring the dialing and call options. Select ADD PROFILE NOW to save the current connection profile, and press return to go to the Connection Profiles screen. You also have the option to select CANCEL to exit the Add Connection Profile screen without saving the new profile.
Page 39
2-24 Netopia ISDN Router Reference Guide Deleting a connection profile To delete a connection profile, select Delete Connection Profile in the Connection Profiles screen to display a table of connection profiles. Select a connection profile from the table and press the Return key to delete it.
Page 40
Once the established ISDN call connects to the remote network or Internet Service Provider, a message appears indicating what rate the connection is communicating. The diagram below indicates the Netopia ISDN Router is able to connect to the Alameda CA remote LAN on 2B channels. Profile Name -- Alameda CA Connection State -- Connected.
Netopia ISDN Router Reference Guide Answering calls Netopia can answer calls as well as initiate them. To answer calls, Netopia uses an answer profile, just as it uses a connection profile to make calls. Netopia’s answer profile controls how incoming calls are set up, authenticated, filtered, and more.
Page 42
Customizing the default answer profile You can customize the Netopia ISDN Router’s default answer profile in the Default Answer Profile screen. To go to the Default Answer Profile screen, select Default Answer Profile in the WAN Setup screen. ISDN Line Configuration...
Page 43
Required: Authentication is attempted if the calling number is available. If authentication fails, or the calling number is not available, the Netopia ISDN Router disconnects the caller. Use this setting if you require all calls to be CNA-authenticated. Default Answer Profile Calling Number Authentication...
Page 44
ISDN service provider to find out if your ISDN line is provisioned for caller ID. CNA works by checking the calling number that the Netopia ISDN Router receives during the initial setup phase of an incoming call against the stored Calling Number defined in each connection...
2-30 Netopia ISDN Router Reference Guide If the answer profile must match... If the answer profile doesn’t have to match... Configuring profiles for incoming calls. To force incoming calls to match connection profiles, select Must Match a Defined Profile and toggle it to Yes. Incoming calls that cannot be matched to a connection profile are dropped.
If a remote network has a non-standard mask (that is, it uses subnetting), the only way for it to successfully connect to the Netopia ISDN Router is by matching a connection profile. In other words, you will have to set up a connection profile for that network.
Page 47
IPand/or IPX address: Toggle Must Match a Defined Profile to Yes, and set Authentication to None. To not allow any incoming calls to connect to the Netopia ISDN Router: Toggle Must Match a Defined Profile to Yes, and Set the Dial option in the Telco Options screen of every con-...
Small Office models only IP Address Serving A new feature has been added to the Netopia ISDN Router which is called WAN IP Address Serving. The following definition applies: WAN IP Address Serving is utilized when the Netopia ISDN Router serves an IP address to an incoming call from a remote site.
WAN IP Address Serving. Scheduled Connections You can set the Netopia ISDN Router to make scheduled connections using designated connection profiles. This is useful for creating and controlling regularly scheduled periods when the router can be used by hosts on your network.
Page 50
Whether it’s a recurring Weekly connection or used Once Only Which connection profile (Conn. Prof.) is used to connect Whether the scheduled connection is currently Enabled You should make sure that the Netopia ISDN Router’s system date and time are correct (see “Setting the system date and time” on page 10-1).
Page 51
2-36 Netopia ISDN Router Reference Guide Setting days, times, and duration with the weekly schedule Adding a scheduled connection To add a new scheduled connection, select Add Scheduled Connection in the Scheduled Connections screen and go to the Add Scheduled Connection screen.
Page 52
Return accepts * Tab toggles * ESC cancels. Select Place Call at and enter the time to initiate the scheduled connection. Depending on the Switch Type setting, the Netopia ISDN Router may be using the 12- or 24-hour clock (see B, “Date and Time...
Page 53
Place Call On (Date): Place Call At (Time): AM or PM... Call Duration: Depending on the Switch Type setting, the Netopia ISDN Router may be using one of several date and time format combinations (see Appendix B, “Date and Time Select Place Call On (Date) and enter a date in the format MM/DD/YY or MM/DD/YYYY (month, day, year).
Page 54
Select Call Duration (Hours:Minutes) and enter the maximum duration allowed for this scheduled connection. Use the same format restrictions noted above. You are done configuring the once-only options. Return to the Add Scheduled Connection screen to continue. In the Add Scheduled Connection screen, select Use Connection Profile and choose from the list of connection profiles you have already created.
2-40 Netopia ISDN Router Reference Guide Manually establishing connections Main Statistics, Utilities, Tests Menu Manually initiating a connection To manually establish a connection, select Establish Connection in the Connection Profiles screen to display a table of connection profiles. Select a connection profile, then press the Return key to initiate that profile.
Manually disconnecting connections Main Statistics, Utilities, Tests Menu In the Disconnect screen, you can force the Netopia ISDN Router to hang up a current ISDN or console connection. To go to the Disconnect screen, select Disconnect in the Statistics, Utilities, Tests screen.
Page 57
% Use: The percentage of bandwidth used out of the total bandwidth available Disconnecting console sessions Any time there is a console connection to the Netopia ISDN Router, the item CONSOLE CONNECTION can appear below the WAN CONNECTIONS table. This item allows you to end the active console session.
Overview You can connect the Netopia ISDN Router to an IP or IPX network that uses Ethernet. If you have a PC LAN using IP over Ethernet, you can connect it to the Netopia ISDN Router’s Ethernet port. You can also connect the Router to an AppleTalk network that uses either Ethernet or LocalTalk.
Internet protocols. TCP/IP stacks must be configured with some of the same information you used to configure the Netopia ISDN Router. There are a number of TCP/IP stacks available for PC computers. Windows 95 includes a built-in TCP/IP stack.
Internet or other remote IP networks. Connecting to a LocalTalk network—for 400 series models Connect one end of the LocalTalk cable to the Netopia ISDN Router’s LocalTalk port. Connect the other end of the cable to your LocalTalk network.
You can connect several types of Ethernet networks you can connect to the Netopia ISDN Router. Most are distinguished by the type of cable they use. The table below displays some important attributes of four types of Ethernet.
EtherWave EtherWave AAUI Transceiver Printer Adapter Macintosh LaserWriter 10Base-T EtherWave AAUI Transceiver The Netopia ISDN Router in the middle of an EtherWave daisy chain that’s part Connecting Your Local Network EtherWave Macintosh Netopia EtherWave EtherWave NuBus Card ISA Card The Netopia ISDN Router in the middle of an EtherWave daisy chain.
Page 63
You may use either or both of the EtherWave ports to connect the Netopia ISDN Router, as needed. No termination is necessary, even when the router is at the end of your EtherWave network. EtherWave Netopia EtherWave The Netopia ISDN Router at the end of an EtherWave daisy chain.
EtherWave EtherWave ISA Card Printer Adapter 10Base-T You can connect a 10Base-T Ethernet network to the Netopia ISDN Router either through one of its EtherWave ports or through its AUI port. EtherWave 10Base-T The Netopia ISDN Router in a 10Base-T network.
Netopia ISDN Router Reference Guide To connect your 10Base-T network to the Netopia ISDN Router’s AUI port, you must use a standard Ethernet 10Base-T-to-AUI transceiver and cable. Thick and Thin Ethernet You can connect a 10Base-5 (Thick Ethernet) or 10Base-2 (Thin Ethernet) network to the Netopia ISDN Router’s AUI port.
Router to serve IP addresses to hosts on your local network. Small Office models of the Netopia ISDN Router also include a special IP feature called Network Address Translation (NAT). NAT is a powerful feature that allows the user to represent an entire LAN to the outside world as a single IP address.
Netopia ISDN Router and LAN to the Internet. The single proxy address is acquired at connection time from the answering side. The address can be assigned by the remote router from either a dynamic pool of addresses or a fixed, static address.
Page 68
Profile Parameters screen, toggle Address Translation Enabled to Yes, to turn on NAT for this profile. When your Netopia ISDN Router calls the ISP, the remote router that answers the call assigns your Netopia ISDN Router an IP address that external users use to communicate with your net- work.
FTP servers use port number 21. Telnet uses port number 23. SNMP uses port number 161. The Netopia ISDN Router lets you associate these and other port numbers to nodes on your internal LAN. See numbers to nodes,” beginning on page 4-4 accomplish this.
Only one node per internal network can supply a specific service. In our example, if there is more than one web server on the 10.0.0.0 network, the Netopia ISDN Router would not be able to differentiate incoming web traffic destined for each web server.
Protocols Setup The IP Setup options screen is where you configure the Ethernet side of the Netopia ISDN Router. The information you enter here controls how the Router routes IP traffic. Consult your network administrator or Internet Service Provider to...
Page 72
This can be the address of any major router accessible to the Netopia ISDN Router. A default gateway should be able to successfully route packets when the Netopia ISDN Router cannot recognize the intended recipient’s IP address. A typical example of a default gateway is the ISP’s router.
Page 73
If a secondary DNS server is available, select Secondary DNS Server and enter its IP address. The secondary DNS server is used by the Netopia ISDN Router when the primary DNS server is inaccessible. Entering a secondary DNS is useful but it is not necessary.
Page 74
NAT models only Select Exported Services. The Exported Services screen appears with three main headings, Show/Change Exports, Add Export, and Delete Export. Select Add Export. The Add Exported Services screen appears. Exported Services (Local Port to IP Address Remapping) Show/Change Exports... Add Export...
Page 75
4-10 Netopia ISDN Router Reference Guide Select Service. A pop-up menu of services and ports appears. Add Exported Service Service... Local Server's IP Address: ADD EXPORT NOW Select any of the services/ports and associate them with a computer on your network. Press the Escape key when you are finished configuring Exported Services to go back to the IP...
Page 76
Corporate models: Enter an IP address in decimal and dot form (xxx.xxx.xxx.xxx). Set up the basic IP attributes of your Netopia in this screen. Follow these steps to configure IP Setup for your Corporate Netopia ISDN Router:...
Page 77
(for example, farallon.com). Entering a Domain Name is strongly recommended. If there are IP routers on your Ethernet network that the Netopia ISDN Router needs to recognize, select Receive RIP and toggle it to On. With Receive RIP on, the Netopia ISDN Router’s Ethernet port will accept routing information provided by Routing Information Protocol (RIP) packets.
Static routes Static routes are IP routes that are maintained manually. Each static route acts as a pointer that tells the Netopia ISDN Router how to reach a particular network. However, static routes are used only if they appear in the IP routing table, which contains all of the routes...
Page 79
Next Gateway: The IP address of the router that will be used to reach the destination network. Priority: Shows whether the Netopia ISDN Router will use the static route when it conflicts with information received from RIP packets. Enabled: Shows whether or not the static route can be installed in the IP routing table.
Page 80
Select Next Gateway IP Address and enter the IP address for the router that the Netopia ISDN Router will use to reach the destination network. This router does not necessarily have to be part of the destination network, but it must at least know where to forward packets destined for that network.
Page 81
If the static route conflicts with a connection profile, the connection profile will always take precedence. To make sure that the static route is known only to the Netopia ISDN Router, select Advertise Route Via RIP and toggle it to No.
Page 82
IP routing table if any of the following conditions are true: The static route’s Next Gateway IP Address matches the IP address used by a connection profile or the Netopia ISDN Router’s Ethernet port. The static route’s Next Gateway IP Address matches an IP address in the range of IP addresses being distributed by MacIP or DHCP.
Menu Config. Address Serving In addition to being a router, the Netopia ISDN Router is also an IP address server. There are four protocols it can use to distribute IP addresses. The first, called Dynamic Host Configuration Protocol (DHCP), is...
Page 84
IP addresses with MacIP. Since no two hosts can use the same IP address at the same time, make sure that the addresses distributed by the Netopia ISDN Router, and those that are manually configured are not the same. Each method of distribution must have its own exclusive range of addresses to draw from.
Page 85
IP addresses that you will be serving addresses from via DHCP, BOOTP and or MacIP. Example: Your ISP has given your Netopia ISDN Router the IP address 192.168.6.137, with a subnet mask of 255.255.255.248.
Page 86
Select Serve Domain Name, toggle to Yes, and press Return. By toggling this item to Yes, once the domain name is entered the Netopia ISDN Router will send this information to client machines requesting it. (Note that you will need to configure each client machine for the Netopia ISDN Router and clients to communicate with each other).
Page 87
Yes, once the DNS Server’s IP address or addresses (Primary and Secondary DNS Server IP Address) are entered the Netopia ISDN Router will automatically broadcast this information to the client machine. (Note that you will need to...
Page 88
DNS. If the secondary DNS is available and the IP address is resolved than the Netopia will be able to connect to the ISP or remote network.) You are now finished setting up DHCP Options. To return to the IP Address Serving screen press the Escape key once.
Page 89
4-24 Netopia ISDN Router Reference Guide Select Serve NetBIOS Options and press Return. The DHCP NetBIOS Options screen will appear. DHCP NetBios Options Serve NetBios Type: NetBios Type... Serve NetBios Scope: NetBios Scope: Serve NetBios Name Server: NetBios Name Server IP Addr: DHCP allows you to allocate IP Addresses dynamically.
IP network (usually an ethernet), they must use a MacIP (AppleTalk-IP) gateway. Such a service is provided by AppleTalk models of the Netopia ISDN Routers. A MacIP gateway converts network traffic into the correct format for AppleTalk or IP, depending on the traffic’s destination.
Page 91
IP range will also be listed for your referral in this screen. MacIP (KIP) Forwarding Setup This screen tells the Netopia how many static addresses to allocate for MacIP/KIP clients. The addresses must fall within the address pool from the previous screen -- 163.176.56.90 to 163.176.56.94.
Internetwork Packet Exchange (IPX) is the network protocol used by Novell NetWare networks. This chapter shows you how to configure the Netopia ISDN Router for routing data using IPX. You also learn how to configure the router to serve IPX network addresses.
Page 93
Netopia ISDN Router Reference Guide Internetwork Packet Exchange (IPX) IPX is a datagram, connectionless protocol that Novell adapted from Xerox Network System’s (XNS) Internet Datagram Protocol (IDP). IPX is dynamically routed, and the routing architecture works by “learning” network addressing automatically.
Page 94
Routing Information Protocol (RIP) RIP, which was also derived from XNS, is a protocol that allows for the bidirectional transfer of routing tables and provides timing information (ticks), so that the fastest route to a destination can be determined. IPX routers use RIP to create and dynamically maintain which are databases of internetwork routing information.
IPX traffic. Consult your network administrator to obtain the information you will need, before changing any of the settings. Changes made in this screen will only take effect after the Netopia ISDN Router is reset. Setup...
To enable IPX routing, select IPX Enabled and toggle it to Yes. Select Ethernet Network Address and enter the network address of the IPX network connected to the Netopia ISDN Router’s Ethernet port. Note: If the Ethernet network address is set to zero, the Router will attempt to learn the address from any configured IPX device...
Page 97
SAP filter on the Ethernet, you can restrict the number of SAP entries learned on a large IPX network to only those required by remote users connecting to the Netopia ISDN Router via the ISDN. An Ethernet SAP filter must be used with networks that...
IPX in connection profiles IPX can be used with connection profiles to connect to remote IPX networks. You can configure IPX in a new connection profile when you first create it in the Add Connection Profile screen. Add Connection Profile Profile Name: Profile Enabled: IP Enabled:...
Page 99
IPX network being called. Don’t use an address already in use by another connection profile. If this value is set to zero and the Netopia ISDN Router is answering a call, the remote address will be learned when the profile is active. Note that, unlike IP, the IPX network address is never used in matching a profile when answering a non-authenticated call.
Page 100
To attach a filter set for filtering incoming Service Advertising Protocol (SAP) packet entries, select Incoming SAP Filter Set and choose a filter set from the list. To attach a filter set for filtering outgoing SAP packets, select Outgoing SAP Filter Set and choose a filter set from the list. 10.
5-10 Netopia ISDN Router Reference Guide IPX in the answer profile The answer profile can be configured to accept calls from remote IPX networks. To configure the answer profile to accept calls from remote IPX networks, go to the Default Answer Profile screen.
IPX filters Advanced Main Menu Config. IPX Parameters (Default Answer Profile) NetBios Packet Forwarding: Incoming Packet Filter Set... Outgoing Packet Filter Set... Incoming SAP Filter Set... Outgoing SAP Filter Set... Detach Filter Sets... Periodic RIP Timer: Periodic SAP Timer: Return accepts * Tab toggles * ESC cancels. Configure IPX values to use when no matching Profile can be found.
Page 103
5-12 Netopia ISDN Router Reference Guide Setting up and using IPX filter sets is a four-step process: Create the filters to use. Create the filter sets to use. Add filters to the filter sets. Attach the filter sets to the answer profile or to connection profiles.
The items in the IPX Filters and Filter Sets screen are grouped into four areas: IPX packet filters IPX packet filter sets IPX SAP filters IPX SAP filter sets The following sections explain the items in each of these areas. IPX packet filters For each IPX packet filter, you can configure a set of parameters to match on the source or destination attributes of IPX data packets...
Select ADD FILTER NOW to save the current filter. Select CANCEL to exit the Add Packet Filter screen without saving the new filter. Deleting a packet filter To delete a packet filter, select Delete IPX Packet Filter in the IPX Filters and Filter Sets screen to display a table of filters.
Page 107
5-16 Netopia ISDN Router Reference Guide Add Packet Filter Set Filter Set Name: Show Filters/Change Action on Match... Append Filter... Detach Filter... ADD FILTER SET NOW Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes. Modify an IPX Packet Filter here. Changes are immediate.
To add a filter to the filter set, select Append Filter to display a table of filters. Select a filter from the table and press Return to add it to the filter set. The default action of newly added filters is to not forward packets that match their criteria.
Page 109
5-18 Netopia ISDN Router Reference Guide Viewing and modifying SAP filters To display a table of IPX SAP filters, select Show/Change IPX SAP Filters in the IPX Filters and Filter Sets screen. To modify any of the filters in the table, select the desired filter and press Return to go to the Change SAP Filter screen.
To specify a server name for the filter to match on, select Server Name and enter the name of an IPX server. You can use the wildcard characters * (asterisk) and ? (question mark). Use * to match any string, including a null string (no characters), and ? to match any single character in the server’s name.
Page 111
5-20 Netopia ISDN Router Reference Guide To modify any of the filter sets in the list, select the desired filter set and go to the Change SAP Filter Set screen. The parameters in this screen are the same as the ones in the Add SAP Filter Set screen (see the previous section).
Page 112
Show Filters/Change Actions on Match Filter Name---------------------Forward Filter 1 Filter 2 <<NO MATCH>> Return accepts * Tab toggles * ESC cancels. Set whether filters forward or drop matching packets here. Select a filter and toggle the entry forwarding action to Yes (pass) or No (discard).
5-22 Netopia ISDN Router Reference Guide IPX routing tables Main Statistics, Utilities, Tests Menu Note: Deleting a filter set does not delete the filters in that set. However, the filters in the deleted set are no longer in effect (unless they are part of another set).
Page 114
AppleTalk capability. AppleTalk is available on the Netopia ISDN Router’s 400 series which includes both the Small Office and Corporate models. This chapter will discuss both versions. Skip this chapter if this information does not apply to your particular Netopia model. AppleTalk Networks...
Page 115
AppleTalk needs to send a packet from one computer to another. However, networks can be connected together through routers, such as the Netopia ISDN Router, into an internetwork (often shortened to internet). Because devices on different networks can have duplicate node numbers, AppleTalk tells them apart according...
Netopia ISDN Router’s current connections to other AppleTalk routers. To go to the AT Routing Table screen from the Netopia ISDN Router’s console, select Statistics, Utilities, Tests from the Main Menu and then select Routing Tables and AppleTalk Routing Table.
Page 117
AppleTalk protocols. The distinction between routers and bridges is an important one: A true bridge, like a router, is used to join two cable segments and filter traffic between them. The result is still one expanded network rather than an internet. Bridges do not assign network numbers or zone names, nor do they maintain network maps.
For specific information on how to configure AppleTalk setup on the Netopia ISDN Router’s Small Office or Corporate models see “AppleTalk Setup for Small Office Models” on page 6-5 “AppleTalk Setup for Corporate Models” on page 6-9.
Page 119
Netopia ISDN Router Reference Guide Small Office models AppleTalk Setup AppleTalk Routing: AppleTalk Zone Name: EtherTalk Net Number (0..65279): LocalTalk Net Number (0..65279): AURP Partner Address or Name: Accept AURP Connections from... Tickle Interval (HH:MM:SS): Return accepts * Tab toggles * ESC cancels.
Page 120
Note: Whenever you have two or more AppleTalk networks connected by routers such as the Netopia ISDN Router, the combined networks are called an AppleTalk internet. In an AppleTalk internet, each network is identified by one or more network numbers.
Page 121
Netopia ISDN Router Reference Guide Small Office models AppleTalk Setup AppleTalk Routing: AppleTalk Zone Name: EtherTalk Net Number (0..65279): LocalTalk Net Number (0..65279): AURP Partner Address or Name: Initiate Connection: Accept AURP Connections from... Tickle Interval (HH:MM:SS): Return accepts * Tab toggles * ESC cancels.
In the AppleTalk Setup screen, select EtherTalk Phase ll Setup and press Return. If you are using EtherTalk Phase ll on the Ethernet network connected to Netopia ISDN Router, select EtherTalk Phase ll Enabled and toggle it to On. AppleTalk Setup AppleTalk Setup EtherTalk Phase II Setup...
Page 123
Select Set Default Zone to choose a different default zone. This is the zone where Netopia’s EtherTalk Phase II port appears to other AppleTalk nodes. The default zone is also where new AppleTalk nodes will appear. If you do not set the default zone name, it will be called Unnamed, the factory default.
You have finished configuring EtherTalk Phase II. LocalTalk The Netopia ISDN Router can function as a LocalTalk to EtherTalk router. This means that a LocalTalk network can be connected to the Netopia’s LocalTalk port. You can enable this feature by configuring the Netopia’s LocalTalk port.
Page 125
If another router is already present on the LocalTalk network that you will be connecting to Netopia ISDN Router, use the zone name and network number used by that router for that LocalTalk network. Otherwise, your LocalTalk network may experience routing conflicts.
When two networks using AppleTalk communicate with each other through a network based on the Internet Protocol, they are said to be tunneling through the IP network. The Netopia ISDN Router uses AURP to allow your AppleTalk network to tunnel to designated AppleTalk partner networks, as well as to accept connections from remote AppleTalk networks tunneling to your AppleTalk LAN.
Page 127
Viewing AURP partners To see a table of existing AURP partners, select Show Partners and press Return. Note: The Netopia ISDN Router can define a total of 32 AURP partners. Adding an AURP partner To add a new AURP partner, select Add Partner and press Return to go to the Add AURP Partner screen.
Page 128
AppleTalk Setup 6-15 163.7.8.202). To initiate a connection with an AURP partner, select Initiate Connection and toggle it to Yes. This will open a connection to the remote AppleTalk network.
Page 129
6-16 Netopia ISDN Router Reference Guide To add the new AURP partner, select ADD PARTNER NOW. To discard the new AURP partner, select CANCEL. Modifying an AURP partner To modify an AURP partner, select Change Partner in the AURP Setup screen and press Return to display a table of existing partners.
Page 130
0 and 100 hours. This parameter tells the AURP partners when to send out an AURP tickle packet. If this value is set to 0, the Netopia ISDN Router will never send out a tickle packet. To enable network number remapping, select Enable Network...
Page 131
Number Remapping and toggle it to Yes. It is strongly recommended that you enable network number remapping if you plan on using AURP. With remapping, Netopia will substitute network numbers not used by your network for the numbers of other remote networks. Theses safe numbers will only be used by local routers on your network;...
AppleTalk Setup 6-19 You have finished configuring AURP Setup. MacIP Setup When Macintosh computers encapsulate TCP/IP packets in AppleTalk, either because they are on LocalTalk or because, for administrative reasons, they must use the services of a MacIP gateway. This gateway converts network traffic into the correct format for AppleTalk or IP, depending on the traffic’s destination.
Chapter 7 Security The Netopia ISDN Router provides a number of security features to help protect its configuration screens and your local network from unauthorized access. Although these features are optional, it is strongly recommended that you use them, as appropriate for your particular situation.
In addition to setting up user accounts, Telnet access, CNA, and filters (all of which are covered later in this chapter), there are other actions you can take to make the Netopia ISDN Router and your network more secure: If you will be using a PC Card modem for dial-up access through a telephone line, keep the phone number secure and be sure to set passwords to protect the configuration screens.
Page 136
Caution! You are strongly encouraged to add protection to the configuration screens. Unprotected screens could allow an unauthorized user to seriously damage the operation of your entire network. The following screens can be protected with a name/password combination: Main Menu Easy Setup Advanced Configuration Quick Menus...
Page 137
Netopia ISDN Router Reference Guide Protecting the Security Options screen The first screen you should protect is the Security Options screen, because it controls access to the configuration screens. Access to the Security Options screen can be protected with a password.
Options screen and toggle it to Yes. Telnet is a TCP/IP service that allows remote terminals to access hosts on an IP network. The Netopia ISDN Router supports Telnet access to its configuration screens. You should consider restricting Telnet access to the Netopia ISDN Router if you suspect there is a chance of tampering.
CHAP information, but also that they are calling from a particular physical location. CNA works by checking the calling number that the Netopia ISDN Router receives during the initial setup phase of an incoming call against a set of stored numbers. Each number in the stored set is defined in a specific connection profile.
Number to Dial item. If you are unsure of the correct calling number to use, follow these steps to find it: Select Calling Number Authentication in the Default Answer Profile screen and choose Required. Request a call to the Netopia ISDN Router from the site whose calling number is needed. Security...
Page 141
Netopia ISDN Router Reference Guide After the call fails, find the CNA failure message in the WAN event history and note the calling party number in the CNA failure message detail. If none appears, then no calling number was supplied and CNA cannot be used for this caller. Consult with your ISDN service provider to ensure that your ISDN line is provisioned for caller ID.
Internet. Using packet filters to control network communications can greatly improve your network’s security. The Netopia ISDN Router’s packet filters are designed to provide security for the Internet connections made to and from your network. You can customize the router’s filter sets for a variety of packet filtering applications.
Page 143
7-10 Netopia ISDN Router Reference Guide Each inspector has a specific task. One inspector’s task may be to examine the destination address of all outgoing packages. That inspector looks for a certain destination—which could be as specific as a street address or as broad as an entire country—and checks each package’s destination address to see if it matches that...
Page 144
packet first filter match? send to next filter pass or discard? discard (delete) pass to network For example, let’s say the first inspector’s orders are to send along all packages that come from Rome, and the second inspector’s orders are to reject all packages that come from France. If a package arrives from Rome, the first inspector sends it along without allowing the second inspector to see it.
7-12 Netopia ISDN Router Reference Guide How individual filters work As described above, a filter applies criteria to an IP packet and then takes one of three actions: A filter’s actions Passes the packet to the local or remote network...
Page 146
Internet service Telnet SMTP (mail) Gopher Finger Parts of a filter A filter consists of criteria based on packet attributes. A typical filter can match a packet on any one of the following attributes: The source IP address (where the packet was sent from) The destination IP address (where the packet is going) The type of higher-layer Internet protocol the packet is carrying, such as TCP or UDP...
Page 147
7-14 Netopia ISDN Router Reference Guide Internet service World Wide Web News rlogin TCP port AppleTalk Name Binding (at-nbp) AURP (AppleTalk) Port number comparisons A filter can also use a comparison option to evaluate a packet’s source or destination port number. The comparison options are: No Compare: No comparison of the port number specified in the...
Page 148
Other filter attributes There are three other attributes to each filter: The filter’s priority in the filter set Whether the filter is currently active Whether the filter is set to pass (forward) packets or to block (discard) packets Putting the parts together When you display a filter set, its filters are displayed as rows in a table: +-#--Source IP Addr--Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd...
Page 149
7-16 Netopia ISDN Router Reference Guide Protocol Number to use Src. Port: The source port to match. This is the port on the sending host that originated the packet. D. Port: The destination port to match. This is the port on the receiving host for which the packet is intended.
Page 150
Destination IP address mask = 0.0.0.0 Note: To learn about IP addresses and masks, see “Understanding IP Addressing.” Using the tables on page protocol numbers (the local Telnet port): Proto = TCP (or 6) D. Port = 23 The filter should be enabled and instructed to block the Telnet packets containing the source address shown in step 2: On? = Yes Fwd = No...
7-18 Netopia ISDN Router Reference Guide Note: The protocol attribute for this filter is 0 by default. This tells the filter to ignore the IP protocol or type of IP packet. Design guidelines Careful thought should go into designing a new filter set. You should consider the following guidelines: Be sure the filter set’s overall purpose is clear from the...
Working with IP filters and filter sets Advanced Main Menu Config. to go through many checkpoints. Too much reliance on packet filters can cause too little reliance on other security methods. Filter sets are not a substitute for password protection, effective safeguarding of passwords, caller ID, the “must match”...
7-20 Netopia ISDN Router Reference Guide To go to the Filter Sets screen, select Filter Sets (Firewalls) in the Advanced Configuration screen. Filter Sets Display Filter Sets... Add Filter Set... Change Filter Set... Delete Filter Set... Set Up Filter Sets (Firewalls) from this and the following Menus.
Page 154
Add Filter Set Filter Set Name: Display Input Filters... Add Input Filter... Change Input Filter... Delete Input Filter... Display Output Filters... Add Output Filter... Change Output Filter... Delete Output Filter... ADD FILTER SET Configure the Filter Set name and its associated Filters. Naming a new filter set All new filter sets have a default name.
Page 155
filter The Netopia ISDN Router Packets in the Netopia ISDN Router pass through an input filter if they originate in the WAN and through an output filter if they’re being sent out to the WAN. The process for adding input and output filters is exactly the same.
Page 156
Adding filters to a filter set In this section you’ll learn how to add an input filter to a filter set. Adding an output filter works exactly the same way, providing you keep the different source and destination perspectives in mind. To add an input filter, select Add Input Filter in the Add Filter Set screen and go to the Add Filter screen.
Page 157
7-24 Netopia ISDN Router Reference Guide Select Source IP Address and enter the source IP address this filter will match on. You can enter a subnet or a host address. Select Source IP Address Mask and enter a mask for the source IP address.
Page 158
Modifying filters To modify a filter, select Change Input Filter (Change Output Filter) in the Add Filter Set screen to display a table of filters. Select a filter from the table and press Return to go to the Change Filter screen. The parameters in this screen are the same as the ones in the Add Filter screen (see page 7-23).
7-26 Netopia ISDN Router Reference Guide Viewing filter sets To display a view-only list of filter sets, select Display Filter Sets in the Filter Sets screen. Modifying filter sets To modify a filter set, select Change Filter Set in the Filter Sets screen to display a list of filter sets.
A sample IP filter set This section contains the settings for a filter set, called Basic Firewall, which is part of the Netopia ISDN Router’s factory configuration. You can add Basic Firewall to your connection profiles or the answer profile (see “Connection profiles”...
Page 161
7-28 Netopia ISDN Router Reference Guide Input filter Setting Enabled Forward Source IP 0.0.0.0 address Source IP 0.0.0.0 address mask Dest. IP 0.0.0.0 address Dest. IP 0.0.0.0 address mask Protocol type Source port comparison Compare Source port ID Dest. port...
Page 162
Security 7-29 Basic Firewall’s filters play the following roles. Input filters 1 and 2: These block WAN-originated OpenWindows and X-Windows sessions. Service origination requests for these protocols use ports 2000 and 6000, respectively. Since these are greater than 1023, OpenWindows and X-Windows traffic would otherwise be allowed by input filter 4.
Page 163
7-30 Netopia ISDN Router Reference Guide The results of combining filter set modifications can be difficult to predict. It is recommended that you take special care if making more than one modification to the sample filter set. Trusted host. To allow unlimited access by a trusted remote host with the IP address a.b.c.d (corresponding to a numbered IP address such...
Page 164
FTP sessions. To allow WAN-originated FTP sessions to a LAN-based FTP server with the IP address a.b.c.d (corresponding to a numbered IP address such as 163.176.8.243), insert the following input filter ahead of the current input filter 1: Enabled: Yes Forward: Yes Source IP Address: 0.0.0.0 Source IP Address Mask: 0.0.0.0...
Page 165
AURP tunnel. To allow an AURP tunnel between a remote AURP router with the IP address a.b.c.d (corresponding to a numbered IP address such as 163.176.8.243) and a local AURP router (including the Netopia ISDN Router itself), insert the following input filter ahead of the current input filter 1: Enabled: Yes Forward: Yes Source IP Address: a.b.c.d...
North American Small Office models with POTS capability only You can use the Netopia ISDN Router to carry Plain Old Telephone Service (POTS) connections over the ISDN line. This chapter describes how to configure the Netopia ISDN Router for Telephone Services.
The Inbound portion of the Telephone Connections screen specifies how an incoming speech call is to be directed through the Router. An incoming call may enter the Router by way of one of the two directory numbers. (For information on configuring the directory numbers refer to Chapter 2, ISDN Line Configuration.
Page 168
Select Reject as Busy to block the call, issuing a busy tone to the party trying to dial in. Select Phone 1 to direct calls out the Router’s Phone 1 jack, thereby ringing the phone or device plugged into that jack.
Page 169
Netopia ISDN Router Reference Guide Inbound: Directory Number 1 Connection: Directory Number 2 Connection: Outbound: Phone 1 Connection: Phone 1 Service Grade: Phone 2 Connection: Phone 2 Service Grade: Select Outbound Phone 1 Connection, and press Return. A pop-up menu displays a list of options.
Inbound: Directory Number 1 Connection: Directory Number 2 Connection: Outbound: Phone 1 Connection: Phone 1 Service Grade: Phone 2 Connection: Phone 2 Service Grade: Select Outbound Phone 1 Service Grade, and press Return. A pop-up menu displays a list of options. Select Speech for the typical speech grade service that is used in telephone conversations.
Page 171
Netopia ISDN Router Reference Guide Set up Priority Ringing: Telephone Setup Telephone Connection... Priority Ringing... Return/Enter to configure telephone connections. From here you will configure telephone information. Priority Ringing allows a distinctive ring to be attached to up to ten incoming caller IDs.
Page 172
Other characters are invalid and will result in the rejection of the entire entry. The ? character represents a single-digit wildcard. While matching the incoming caller ID with the Priority Ringing caller IDs, any digit will be considered to be a match with the ?. For example, if the caller ID was entered as 415-555-111?, both incoming numbers 415-555-1112 and 415-555-1113 would be matches for Priority Ringing.
You can get a useful, overall status report from the Netopia ISDN Router in the Quick View screen. To go to the Quick View screen, select Quick View in the Main Menu.
Ethernet Address: The Netopia ISDN Router’s hardware address. Firmware Version: The version of the software that controls the Netopia ISDN Router. This number is useful if you call Farallon technical support and are asked for the firmware version running on the router.
Page 176
Monitoring Tools IP Address: The Netopia ISDN Router’s IP address, entered in the IP Setup screen. IPX Network Address: The Netopia ISDN Router’s IPX address, entered in the IPX Setup screen. AppleTalk ET Address: The Netopia ISDN Router’s AppleTalk address on its EtherTalk Phase II interface, entered in the AppleTalk Setup screen.
Statistics, Utilities, Tests Menu LED Status This section shows the current real-time status of the Netopia ISDN Router’s LEDs. It is useful for remotely monitoring the router’s status. The Quick View screen’s arrangement of LEDs corresponds to the physical arrangement of LEDs on the router.
Ch.---Bytes Rx----Bytes Tx--Packets Rx--Packets Tx--Remote Network----- -------------------------------------------------------------------------------- LAN Statistics LAN Statistics also displays information about data traffic on the Netopia ISDN Router’s LocalTalk and Ethernet ports. This information is useful for monitoring and troubleshooting your LAN. Monitoring Tools | EN Rx Packets...
Page 179
The number of bytes and packets transmitted through the channel The IP address of the remote network to which the Netopia ISDN Router is connected through the channel If a B-channel is not currently connected to a remote network, the...
Event Histories The Netopia ISDN Router records certain relevant occurrences in event histories. Event histories are useful for diagnosing problems because they may contain a log of what happened before, during, and after a problem occurs. You can view two different event histories: one for the router’s system and one for the ISDN line.
Page 181
Netopia ISDN Router Reference Guide Device Event History Time-----Date-----Event----------------------------------------------- ---------------------------------SCROLL UP---------------------------- 18:05:49 10/02/95 A brief description of an event ---------------------------------SCROLL DOWN-------------------------- If the event history exceeds the size of the screen, you can scroll through it by using the SCROLL UP and SCROLL DOWN items.
Event Histories screen. Routing Tables You can view all of the IP, IPX and AppleTalk routes in the Netopia ISDN Router’s IP, IPX and AppleTalk routing tables, respectively. To go to the Routing Tables screen, select Routing Tables in the Statistics, Utilities, Tests screen.
Page 184
Routing table screen. AppleTalk routing table The AppleTalk routing table displays information about the current state of AppleTalk networks connected to the Netopia ISDN Router, including remote AppleTalk networks connected with AURP. This information is gathered from other active AppleTalk routers.
Page 185
Netopia ISDN Router Reference Guide You can use the information in the AppleTalk routing table to observe and diagnose the Netopia ISDN Router’s current connections to other AppleTalk routers. A working knowledge of AppleTalk routing is recommended for utilizing the information in the table.
Page 186
AppleTalk network (e.g.: LocalTalk or EtherTalk Phase II). An IP address is displayed if the Netopia ISDN Router is connected to the router shown using AURP. IP address means a connection transports over AURP...
AppleTalk MIB-I (RFC 1243) Farallon Netopia MIB These MIBs are found on the Netopia ISDN Router Utilities diskette included with the Netopia ISDN Router. You should load these MIBs into your SNMP management software in the order they are listed here.
Page 188
Netopia Model no. The value returned by the Netopia SNMP agent for sysDescr is Netopia PN yyy , where yyy is your particular Netopia ISDN Router model number. Non-North American For Non-North American Netopia ISDN Routers , the sysDescr value models will be followed by a two character model suffix encoding a country...
System Name, System Location, and System Contact set the values returned by the Netopia ISDN Router SNMP agent for the SysName, SysLocation, and SysContact objects, respectively, in the MIB-II system group. Although optional, the information you enter in these items can help a system administrator manage the network more efficiently.
SNMP traps An SNMP trap is an informational message sent from an SNMP agent (in this case, the Netopia ISDN Router) to a manager. When a manager receives a trap, it may log the trap as well as generate an alert message of its own.
Setting the IP trap receivers You can specify which SNMP managers are sent the IP traps generated by the Netopia ISDN Router. Up to eight receivers can be set. To go to the IP Trap Receivers screen, select IP Trap Receivers in the SNMP Setup screen.
Chapter 10 Utilities and Tests Setting the system date and time Statistics, Main . U tilities, Menu Tests A number of utilities and tests are available for system diagnostic and control purposes: Setting system date and time Software system reset ISDN loopback test Ping test Console configuration...
Note: The format in which date and time are displayed is dependent on the current ISDN switch protocol. The switch protocol can be set in the Netopia ISDN Router’s ISDN Line Configuration screen. Changing the switch protocol may change the date and time format, as well as the appearance of the Set Date and Time screen.
ISDN line and the proper configuration of certain Netopia ISDN Router parameters. Using the first B-channel, the test calls the Netopia ISDN Router on the second B-channel, creating a call loop back to the unit. To run the ISDN loopback test, select ISDN Switch Loopback Test in the Statistics, Utilities, Tests screen and press Return to the ISDN Switch Loopback Test screen.
Page 197
10-4 Netopia ISDN Router Reference Guide Loopback Test PASSED. The loopback test was successful. The line is working properly, and the directory numbers (the ISDN phone numbers associated with each B-channel) are correct. If a SPID is associated with the first B-channel, its correctness is also confirmed.
Check that your line is not provisioned for voice only (Circuit Switched Voice). Ping The Netopia ISDN Router now includes a standard Ping test utility. A Ping test generates IP packets destined for a particular (Ping-capable) IP host. Each time the target host receives a Ping packet, it returns a packet to the original sender.
Page 199
10-6 Netopia ISDN Router Reference Guide Ping Host Name: Packets to Send: Data Size: Delay (seconds): START PING Status: Packets Out: Packets In: Packets Lost: Round Trip Time (Min/Max/Avg): 0.000 / 0.000 / 0.000 secs Send ICMP Echo Requests to a network host To configure and initiate a Ping test, follow these steps:...
Page 200
Ping test is in progress Ping test was completed Ping test was cancelled manually Ping test was able to reach the router with IP address w.x.y.z, which reported that the test could not reach the final destination Couldn’t proceed with Ping test; try again or reset system Couldn’t proceed with Ping test;...
Page 201
Ping packets. Note that the second return Ping packet is considered to be late because it is not received by the Netopia ISDN Router before the third Ping packet is sent. The first and third return Ping packets are on time.
Main Configuration Menu The time-to-live (TTL) value for each Ping packet sent by the Netopia ISDN Router is 255, the maximum allowed. The TTL value defines the number of IP routers that the packet can traverse. Ping packets that reach their TTL value are dropped, and a “destination unreachable”...
Console Configuration screen. XMODEM You can transfer configuration and firmware files with XMODEM through the Netopia ISDN Router’s console or PC Card (PCMCIA) port. To go to the PC Card Config/Firmware Transfer screen, select PC Card Config/Firmware Transfer in the Advanced Configuration screen.
Page 204
PC Card Modem Init String: The transfer you initiate will occur through the port from which you initiate it. If you are connected to the Netopia ISDN Router through its console port, the transfer will occur through that port. If you are connected through the PC Card port, the transfer will occur through that port.
Page 205
The terminal emulation program should be configured as specified in the Getting Started guide. Once you connect to the Netopia ISDN Router’s modem, you should see the configuration screens. Press Ctrl-L if you connect but are unable to see the screens.
+--------------------------------------------------------------------+ +--------------------------------------------------------------------+ Are you sure you want to send a firmware file to your Netopia? | If so, when you hit Return/Enter on the CONTINUE button, you will| have 10 seconds to begin the transfer from your terminal program.|...
+--------------------------------------------------------------------+ +--------------------------------------------------------------------+ | Do you want to send a saved configuration to your Netopia? | If so, when you hit Return/Enter on the CONTINUE button, you will| | have 10 seconds to begin the transfer from your terminal program.|...
Page 208
+--------------------------------------------------------------------+ +--------------------------------------------------------------------+ Are you sure you want to save your current Netopia configuration? | If so, when you hit Return/Enter on the CONTINUE button, you will | have 10 seconds to begin the transfer from your terminal program. |...
Trivial File Transfer Protocol (TFTP) is a method of transferring data over an IP network. TFTP is a client-server application, with the Router as the client. To use the Router as a TFTP client, a TFTP server must be available.
To update Netopia’s firmware Firmware updates may be available periodically from Farallon or from a site maintained by your organization’s network administrator. To update the Router’s firmware, follow these steps: Select TFTP Server Name and enter the DNS name or IP address of the TFTP server you will use.
10-18 Netopia ISDN Router Reference Guide bytes transferred. To download a configuration file The Router can be configured by downloading a configuration file using TFTP. Once downloaded, the file reconfigures all of the Router’s parameters as if someone had manually done so through the console port.
Using TFTP, you can send a file containing a snapshot of the Router’s current configuration to a TFTP server. The file can then be downloaded by a different Netopia ISDN Router unit to configure its parameters (see “To download a configuration file” on page This is useful for configuring a number of Routers with identical...
Troubleshooting This appendix is intended to help you troubleshoot problems you may encounter while using the Netopia ISDN Router. It also includes information on how to contact Farallon Technical Support. Important information on these problems may be found in the event histories kept by the Netopia ISDN Router.
ISDN problems The Ready LED is blinking orange This is an indication that the Netopia ISDN Router cannot detect the ISDN switch at your ISDN service provider’s central office. Check that the cable you are using for ISDN is not a 10Base-T cable, which can look similar to an ISDN cable.
Page 215
Calls do not go through If the Ready LED is glowing solid green and the ISDN loopback test is successful, calls you make with the Netopia ISDN Router should go through. There may be several reasons why a particular call does not go through: The number being dialed is wrong.
If you suspect that power was restored after a power outage, and the Netopia ISDN Router is connected to a remote site, you may need to switch the Netopia ISDN Router off and then back on again. After temporary power outages, a connection that still seems to be up may actually be disconnected.
If you reconfigure the Netopia ISDN Router and the reconfigured settings do not seem to be taking effect, reset (restart) the system. You can reset the system by switching the Netopia ISDN Router off and back on. Resetting the system will cause new configuration settings to take effect.
Switch in on position The Netopia ISDN Router’s opening for accessing the internal termination switch. Use a pointed object, such as a pen, to carefully reach inside the correct ventilation hole and slide the switch to the left. This is the on position, with termination in effect.
Environment profile Locate the Netopia ISDN Router’s model number, product serial number, and firmware version. The serial number is on the bottom side of the Router, along with the model number (which is also printed on the front of this user’s guide). The firmware version appears in the Netopia ISDN Router’s Main Menu...
Page 220
Phone: 1 510-814-5000 Fax: 1 510-814-5023 Farallon Communications, Inc. Customer Service 2470 Mariner Square Loop Alameda, California 94501 Farallon Bulletin Board Service: 1 510-865-1321 Online product information Product information can be found in the following: Farallon World Wide Web server via http://www.farallon.com Internet via anonymous FTP to ftp.farallon.com/pub AppleLink (Third Parties A-G) FAX-Back...
12 PM (noon) to 11:59 PM (just before midnight). The 24-hour clock runs from 00:00 (midnight) to 23:59 (just before midnight). The format combination used by the Netopia ISDN Router is determined solely by the setting on the Switch Type item. This item, which is found in the ISDN Line Configuration screen, is a pop-up...
Page 222
Netopia ISDN Router Reference Guide Country/region North America (Canada and United States) Australia Austria Belgium Denmark Finland France Generic Germany Ireland Italy Japan Luxembourg Netherlands Norway Portugal Spain Sweden Switzerland United Kingdom Date format Time format MM/DD/YY 12 hour DD/MM/YY...
What is IP? This appendix is a brief general introduction to IP addressing. A basic understanding of IP will help you in configuring the Netopia ISDN Router and using some of its powerful features, such as static routes and packet filtering.
Netopia ISDN Router Reference Guide About IP addressing Every networking protocol uses some form of addressing in order to ensure that packets are delivered correctly. In IP, individual network devices that are initial sources and final destinations of packets are usually called hosts, instead of nodes, but the two terms are inter- changeable.
Number of networks Class First byte possible per class 1-127 128-191 16,384 192-223 2,097,152 Class A networks have a small number of possible network numbers, but a large number of possible host numbers. Conversely, Class C networks have a small number of possible host numbers, but a large number of possible network numbers.
Page 226
To know whether subnets are being used or not, you must know what subnet mask is being used—you cannot determine this information simply from an IP address. Subnet mask information is configured as part of the process of setting up IP routers and gateways such as the Netopia ISDN Router.
Understanding IP Addressing Note: If you receive an IP address from an ISP, there must be a mask associated with that IP address. By using the IP address with the mask you can discover exactly how many IP host addresses you actually have.
Page 228
Netopia ISDN Router Reference Guide Subnetting options for a Class C IP network Subnet mask chosen 11111111.11111111.11111111.10000000 or 255.255.255.128 11111111.11111111.11111111.11000000 or 255.255.255.192 11111111.11111111.11111111.11100000 or 255.255.255.224 11111111.11111111.11111111.11110000 or 255.255.255.240 11111111.11111111.11111111.11111000 or 255.255.255.248 11111111.11111111.11111111.11111100 or 255.255.255.252 11111111.11111111.11111111.11111110 or 255.255.255.254 11111111.11111111.11111111.11111111 or 255.255.255.255...
Page 229
that allocates five bits to the host address and three to the subnet address. This gives you a potential of six subnets of 30 machines each. Determine the subnet mask You can find the subnet mask associated with your subnetting choice in the table above.
Netopia ISDN Router Reference Guide Smallest Subnet Subnet host location number number 3rd floor 4th floor 5th floor Determine the host addresses Finally, combine your subnet numbers with your host numbers to determine the actual IP addresses you may use for your 25 hosts.
Netopia ISDN Router. Using the Router in this way allows it to function as an address server. One reason to use the Netopia ISDN Router as an address server is that it takes less time than manually distributing the addresses.
Using address serving The Netopia ISDN Router provides two ways to serve IP addresses to computers on a network. The first, Dynamic Host Configuration Protocol (DHCP), is supported by PCs with Microsoft Windows and a TCP/IP stack.
DHCP and MacIP. Avoid fragmenting your block of IP addresses. For example, try to use a continuous range for the static addresses you choose. C-11 Distributed to the Netopia ISDN Router (Ethernet IP address) Manually distributed (static) Distributed by DHCP...
C-12 Netopia ISDN Router Reference Guide Nested IP subnets The example follows these rules: An IP address must not be used as a static address if it is also in a range of addresses being distributed by DHCP or MacIP.
Page 235
Router B Router C a.b.c.128 a.b.c.129 ISDN Routers) serve the two remote networks that are subnets of a.b.c.0. The subnetting is accomplished by configuring the Netopia Understanding IP Addressing For example, suppose that you obtain the Class C network address a.b.c.0 to be distributed...
Page 236
255.255.255.192 a.b.c.248 255.255.255.248 The Netopia ISDN Router’s connection profiles for Routers B and C create entries in its IP routing table. One entry points to the subnet a.b.c.128, while a second entry points to the subnet a.b.c.248. The IP routing table might look similar to the following:...
Page 237
The Netopia ISDN Router compares the packet’s destination IP address with the routes in its IP routing table. It begins with the route at the bottom of the list and works up until there’s a match or the route to the default gateway is reached.
first signals in the sequence of electrical signals that make up an IP packet travelling over Ethernet. When you install and configure the Netopia ISDN Router to be an AppleTalk–IP gateway, you must specify whether it should use Ethernet or 802.3.
SPID. It’s usually 1 or 01 for the first SPID and 2 or 02 for the second SPID, but it can vary in form. You may need to add a TID to each SPID you use when you configure the Netopia ISDN Router. If you encounter other unfamiliar terms, check the glossary.
The table below displays the general SPID formats for the types of North American ISDN switch protocols supported by the Netopia ISDN Router. The formats shown are a subset of possible SPID formats, but in most cases they should work.
If the remote network has an ISDN line with a DMS-100 switch, it should have one directory number for each B-channel. Both directory numbers are required by the Netopia ISDN Router to make a connection to that network using two B-channels. In this case, enter the second directory number in the Optional Second Number item.
For example, if calling the primary number returns a busy signal, the Netopia ISDN Router will attempt to use the secondary number stored in Optional Second Number. If a connection cannot be made using the secondary number, the Netopia ISDN Router will retry the primary number.
ISDN Configuration Guide The table below shows which supported switch types can allow an incoming call when ACO for data is on. If ACO is on . . . AT&T 5ESS AT&T 5ESS DMS-100 DMS-100 Type of switch: custom National ISDN-1 custom National ISDN-1 Incoming call allowed?
ISDN Events This is a complete list of the ISDN events that can appear in the Netopia ISDN Router’s ISDN event histories. The text that actually appears in a history is shown in bold, followed by a brief explanation and the parameters associated with the event.
Page 245
Netopia ISDN Router Reference Guide Disconnect Indication Received: Received Disconnect Indication from switch. Associated parameter: called directory number. Secondary associated parameter: cause code. Setup Indication Received: Received Call Indication from switch. Associated parameter: called directory number. Setup Request Issued: Call Request was sent to switch.
For example, if you select the Disconnect Requested event that occurred at 19:43:01 and press Return, the following screen will appear: +------------------------EVENT DETAILS----------------------+ +-----------------------------------------------------------+ | 19:40:04 on Friday, July 23, 1999 | Disconnect Requested | Called #: 914152270188; Cause: 16 +-----------------------------------------------------------+ ISDN event cause codes These codes appear as associated (secondary) parameters in some...
Page 247
Netopia ISDN Router Reference Guide This cause is supported on a network-dependent basis. Cause No. 6: channel unacceptable. This cause indicates that the channel most recently identified is not acceptable to the sending entity for use in this call. Cause No.7: call awarded and being delivered in an established channel.
Page 248
ISDN Events Cause No. 22: number changed. This cause is returned to a calling user when the called party number indicated by the calling user is no longer assigned. The new called party number may optionally be included in the diagnostic field. If a network does not support this capability, cause No.
Page 249
Netopia ISDN Router Reference Guide Cause No. 41: temporary failure. This cause indicates that the network is not functioning correctly and that the condition is not likely to last a long period of time: e.g., the user may wish to try another call attempt almost immediately.
Page 250
ISDN Events Cause No. 58: bearer capability not presently available. This cause indicates that the user has requested a bearer capability implemented by the equipment that generated this cause which is not available at this time. Cause No 63: service or option not available, unspecified. This cause is used to report a service or option not available event only when no other cause in the service or option not available class applies.
Page 251
Netopia ISDN Router Reference Guide Cause No. 82: identified channel does not exist. This cause indicates that the equipment sending this cause has received a request to use a channel not activated on the interface for a call. For example, if a user has subscribed to those channels on a...
Page 252
ISDN Events Cause No. 95: invalid message, unspecified. This cause is used to report an invalid message event only when no other cause in the invalid message class applies. Cause No. 96: mandatory information element is missing. This cause indicates that the equipment sending this cause has received a message that is missing an information element that must be present in the message before that message can be processed.
Page 253
E-10 Netopia ISDN Router Reference Guide Cause No. 102: recovery on timer expiry. This cause indicates that a procedure has been initiated by the expiry of a timer in association with Q.931 error handling procedures. Cause No. 111: protocol error, unspecified. This cause is used to report a protocol error event only when no other cause in the protocol error class applies.
Appendix F Further Reading Angell, David. ISDN for Dummies , Foster City, CA: IDG Books Worldwide, 1995. Thorough introduction to ISDN for beginners. Chapman, D. Brent and Elizabeth D. Zwicky. Building Internet Firewalls , Sebastopol, CA: O’Reilly & Associates, 1995. Dense and technical, but Chapter 6 provides a basic introduction to packet filtering.
AppleTalk networks are connected together by routers. AUI (Attachment Unit Interface): Usually refers to 15-pin D connectors associated with Ethernet transceivers. AURP (Apple Update-based Router Protocol): An enhanced AppleTalk routing protocol. AURP provides improved support for AppleTalk over wide area networks (WANs) and tunneling through non-AppleTalk (IP) networks.
Page 257
CNA (Calling Number Authentication): A security feature that will reject an incoming call if it does not match the Calling Number field in one of the Netopia ISDN Router’s Connection Profiles. CND (Calling Number Delivery): Also known as caller ID, a feature that allows the Called Customer Premises Equipment (CPE) to receive a calling party’s directory number during the call...
Page 258
GL-3 DDP (Datagram Delivery Protocol): Defines socket-to-socket delivery of datagrams over an AppleTalk internet. default zone: When a Phase II EtherTalk network includes more than one zone, all routers on that network must be configured to assign one of these zones as a default zone. The default zone is temporarily assigned to any Phase II EtherTalk node that hasn’t chosen a zone.
Page 259
The maximum allowable hop count is usually 15. hop count reduction: A feature of AURP supported by the Netopia ISDN Router. Tunnels and point-to-point links over WANs can often exceed the maximum allowable hop count of 15 routers.
Page 260
GL-5 internet address, IP address: Any computing device that uses the Internet Protocol (IP) must be assigned an internet or IP address. This is a 32-bit number assigned by the system administrator, usually written in the form of 4 decimal fields separated by periods, e.g., 192.9.200.1.
Page 261
NAT (Network Address Translation): A feature that allows communication between the LAN connected to the Netopia ISDN Router and the Internet using a single IP address, instead of having a separate IP address for each computer on the network.
Page 262
fit into a PC Card slot. Formerly called a PCMCIA card. See PC Card slot . PC Card slot: The slot designed to hold PC Cards. Formerly called a PCMCIA slot. The Netopia ISDN Router has a PC Card port with two PC Card slots. PCMCIA: See PC Card .
Page 263
LocalTalk-to-Ethernet. However—unless a gateway is available—a common protocol, such as AppleTalk, must be used over both networks. The Netopia ISDN Router is a router, but also includes an AppleTalk-IP gateway. See also gateway . router port: A physical or logical connection between a router and a network.
Page 264
SNMP (Simple Network Management Protocol): A protocol used for communication between management consoles and network devices. The Netopia ISDN Router can be managed through SNMP. soft seeding: A router setting. In soft seeding, if a router that has just been reset detects a network number or zone name conflict between its configured information for a particular port and the...
Page 265
WANs can span a state, a country, or even the world. WAN IP: In addition to being a router, the Netopia ISDN Router is also an IP address server. There are four protocols it can use to distribute IP addresses over the WAN which include: DHCP, BOOTP, IPCP and MacIP.
Page 266
GL-11 zone: An arbitrary subset of nodes within an AppleTalk internet. Creating multiple zones makes it easier for users to locate network services. The network administrator defines zones when he or she configures routers. Isolated networks have no zones. LocalTalk and EtherTalk Phase I networks may have no more than one zone each.
Page 270
IN-4 Netopia ISDN Router Reference Guide IPX SAP filters 5-17 IPX Setup 5-1 IPX Spoofing 5-4 ISDN bandwidth (56 or 64 Kbps) 2-21 configuration 2-2 event history 9-8 loopback test 10-3 SPID D-1 statistics 9-5 TID D-1 ISDN Configuration Guide D-1...
Page 271
Resetting the system 10-2 resetting the system 10-2 restricting telnet access 7-5 Ringing Tone 8-7 RIP 4-12 router to serve IP addresses to hosts 4-1 Routing Information Protocol (RIP) 5-3 routing tables AppleTalk 9-11 IP 4-13, 9-10 rules of static route installation 4-17...
Page 272
IN-6 Netopia ISDN Router Reference Guide traps 9-17 SNMP agent 9-15 SNMP Setup screen 9-16 SNMP traps 9-17 Socket 5-2 Speech 2-21 SPID correct format D-2 defined D-1 example D-3 SPIDs D-2 Src. Port 7-16 Stac data compression 2-18 State 9-13...
Page 273
XMODEM 10-10 XMODEM file transfers downloading configuration files 10-14 through console port 10-11 through PC Card port 10-12 updating firmware 10-13 uploading configuration files 10-15 Zone Name 9-13 Index IN-7...
Limited Warranty and Limitation of Remedies Farallon warrants to you, the end user, that the Netopia™ ISDN Router (the “Product”) will be free from defects in materials and workmanship under normal use for a period of one (1) year from date of purchase.
Page 275
THE ABOVE WARRANTIES ARE MADE BY FARALLON ALONE, AND THEY ARE THE ONLY WARRANTIES MADE BY ANYONE REGARDING THE ENCLOSED PRODUCT. FARALLON AND ITS LICENSOR(S) MAKE NO OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, REGARDING THE ENCLOSED PRODUCT.