Summary of Contents for Lucent Technologies MAX 6000
Page 1
MAX 6000/3000 Network Configuration Guide Part Number: 7820-0629-002 For software version 8.0.1 March 2000...
Page 2
In rare instances, unauthorized individuals make connections to the telecommunications network through the use of access features. Trademarks MAX 6000, MAX 3000 are trademarks of Lucent Technologies. Other trademarks and trade names mentioned in this publication belong to their respective owners.
Average wait times are less than 3 minutes. Advantage Services Advantage Services is a comprehensive selection of services. Installation services help get your Lucent Wide Area Network (WAN) off to the right start. Ongoing maintenance and MAX 6000/3000 Network Configuration Guide...
Page 4
Email from the Asia-Pacific region—apac.support@ascend.com • Fax—(510) 814-2312 • Customer Support BBS (by modem)—(510) 814-2302 • Write to Lucent at the following address: Attn: Customer Service Lucent Technologies 1701 Harbor Bay Parkway Alameda, CA 94502-3002 MAX 6000/3000 Network Configuration Guide...
Where to go next ........................2-9 Chapter 3 Configuring WAN Access............... 3-1 Introduction to WAN configuration..................3-2 How the VT100 menus relate to slots and ports on the MAX 6000....... 3-2 System slot....................... 3-2 T1 or E1 slots......................3-2 MAX 6000/3000 Network Configuration Guide...
Page 6
Setting triggers for call-completed information............3-23 Configuring channels ....................3-23 Associating a channel with a slot/port in the MAX unit ........3-24 Assigning nailed channels to groups ..............3-24 Assigning channels to hunt groups ................ 3-24 MAX 6000/3000 Network Configuration Guide...
Page 7
Configuring Host/AIM6 and Host/Dual ports ..............3-47 Configuring the AIM port..................... 3-48 Configuring a Port Config profile ................. 3-49 Port diagnostics...................... 3-50 Configuring the interface to the codec................3-50 Pairing ports for dual-port calls ................3-51 Enabling dual-port calls..................3-51 MAX 6000/3000 Network Configuration Guide...
Page 8
IPX Options ........................4-6 AppleTalk Options......................4-6 PPP Options ........................4-7 Foundation parameters .................... 4-7 Numeric parameters....................4-8 Graceful shutdown and IPX Header Compression..........4-9 COMB Options ....................... 4-9 V.120 Options ......................... 4-9 X.75 Options ........................4-9 viii MAX 6000/3000 Network Configuration Guide...
Page 9
More OSPF parameters ..................4-38 Telco Options........................ 4-38 Group, FT1 Caller, Data Svc, Force 56 parameters ..........4-39 Bill #, Call-by-Call, Transit #, NAS Port Type parameters ........4-39 Accounting Options ...................... 4-40 DHCP options ....................... 4-41 MAX 6000/3000 Network Configuration Guide...
Page 10
Setting up bidirectional CHAP in RADIUS for outgoing calls......4-68 Setting up selective bidirectional CHAP with callback......... 4-69 Setting up an outgoing call with double RADIUS lookups........4-70 Enhanced support for MS-CHAP ..................4-72 LAN Manager MS-CHAP support ................4-72 MAX 6000/3000 Network Configuration Guide...
Page 11
Base channel count ....................4-92 Compression ......................4-93 Example of Combinet configuration................4-93 Configuring EU connections....................4-93 The EU parameters ....................... 4-94 EU-RAW and EU-UI..................... 4-94 Maximum Receive Unit (MRU)................4-94 DCE address (DCE Addr) ..................4-94 MAX 6000/3000 Network Configuration Guide...
Page 12
Configuring the MAX as a Frame Relay switch..............5-25 Overview of circuit-switching options ................. 5-25 Settings in a Connection profile ................5-25 Settings in a RADIUS profile ................5-26 Examples of a circuit between UNI interfaces ............. 5-26 Using local profiles....................5-26 MAX 6000/3000 Network Configuration Guide...
Page 13
X.25 PAD commands ....................6-18 Commands for working with X.3 parameters and profiles ........6-18 X.25 PAD commands for managing calls ............. 6-19 PAD service signals ...................... 6-21 X.25 clear cause codes....................6-22 X.25 diagnostic field values..................6-22 MAX 6000/3000 Network Configuration Guide xiii...
Page 14
Summarizing host routes in routing table advertisements........7-11 Example of how to set up address pools with route summarization ..... 7-11 Boot Protocol (BOOTP) requests to other networks ............ 7-13 Name resolution service (DNS or WINS) ..............7-14 DNS lists........................ 7-15 MAX 6000/3000 Network Configuration Guide...
Page 15
Static routes........................7-55 Dynamic routes ......................7-56 Route preferences and metrics on a MAX unit............. 7-56 Static route configuration....................7-56 Settings in a Static Route profile ................7-56 Settings in a RADIUS route profiles ..............7-58 MAX 6000/3000 Network Configuration Guide...
Page 16
Forwarding from an MBONE router on Ethernet............9-5 Forwarding from an MBONE router on a WAN link............. 9-6 Configuring the MAX to respond to multicast clients ..........9-7 Configuring the MBONE interface ................. 9-7 Configuring multicasting on WAN interfaces............9-7 MAX 6000/3000 Network Configuration Guide...
Page 17
Specifying a tunnel server ................... 10-36 Configuring Virtual Routers ....................10-37 Background ......................... 10-37 Current limitations ...................... 10-37 Creating a Virtual Router profile................. 10-38 Required Virtual Routers profile settings ............10-38 Required Connection profile settings ..............10-39 MAX 6000/3000 Network Configuration Guide xvii...
Page 18
AppleTalk zones and network ranges ................12-2 AppleTalk zones ....................12-2 Extended and nonextended AppleTalk networks ..........12-2 MAX units and AppleTalk nodes ................. 12-4 Configuring AppleTalk routing ................... 12-5 System-level AppleTalk routing parameters ..............12-5 Answer profile parameters.................... 12-6 xviii MAX 6000/3000 Network Configuration Guide...
Page 19
Specifying the number of bytes to test................14-9 Masking the value before comparison ................ 14-10 Examples of a generic call filter ................. 14-11 Defining IP filters....................... 14-11 Settings in a local Filter profile................... 14-11 Settings in a RADIUS profile ..................14-13 MAX 6000/3000 Network Configuration Guide...
Page 20
Examples of applying a call filter to a WAN interface..........14-28 Examples of applying a TOS filter to a WAN interface..........14-28 Example of applying a filter to a LAN interface ............14-29 Index..................Index-1 MAX 6000/3000 Network Configuration Guide...
Page 21
Figure 2-1 Using the MAX as an ISP hub................2-2 Figure 2-2 Using the MAX as a telecommuting hub............2-3 Figure 3-1 Slot and port numbering in the MAX 6000 ............3-2 Figure 3-2 Slot and port numbering in the MAX 3000 T1........... 3-3 Figure 3-3 IDSL connection with repeaters...............
Page 22
Figure 13-5 An example of an IPX server bridged connection ......... 13-15 Figure 14-1 Data filters drop or forward certain packets ............ 14-2 Figure 14-2 Call filters prevent certain packets from resetting the timer......14-2 xxii MAX 6000/3000 Network Configuration Guide...
Page 23
Table 10-2 Required RADIUS attributes to reach an IPX home network ......10-8 Table 10-3 RADIUS attributes for specifying L2TP tunnels........... 10-35 Table 13-1 Bridging attributes ................... 13-7 Table 13-2 Ascend-Bridge-Address arguments ..............13-9 MAX 6000/3000 Network Configuration Guide xxiii...
Chapter 14, “Defining Static Filters,” explains how filters work and how to define filters. This guide also includes an index. Note: This manual describes the full set of features for MAX 6000 and MAX 3000 units running software version 8.0.1. Some features might not be available with earlier versions or specialty loads of the software.
Warns that a failure to follow the recommended procedure could result in loss of data or damage to equipment. Caution: Warns that a failure to take appropriate safety precautions could result in physical injury. Warning: xxvi MAX 6000/3000 Network Configuration Guide...
Page 27
Remote Access Networking Services: Technology Overview • Access Networks Safety and Compliance Guide The MAX 6000/3000 documentation set is available on the Documentation Library CD-ROM included with your MAX unit, and on either CD-ROM or paper from the online bookstore http://www.lucent.com/ins/bookstore...
Page 29
IP routing. You can use Routing Information Protocol (RIP) or the newer Open Shortest Path First (OSPF) protocol, which addresses many of RIP’s limitations. If you have Novell Netware clients and servers, you can configure the MAX for Internetwork Packet MAX 6000/3000 Network Configuration Guide...
Page 30
Ascend SecureConnect firewall, you should probably define a filter on the MAX to provide rudimentary security. You can also define filters to prevent unnecessary connections and to clear idle connections. MAX 6000/3000 Network Configuration Guide...
ISDN V.120 Terminal Adapter, or an ISDN router such as a Lucent Pipeline. If you use the MAX as an ISP hub, configure it as an IP router, because it establishes the dial-in WAN connection with subscribers and routes their data streams to other Internet routers. MAX 6000/3000 Network Configuration Guide...
The backbone might be a NetWare LAN, an IP network, or a multiprotocol network. Figure 2-2 shows an example in which home users, remote offices, and customer sites can access the backbone network. MAX 6000/3000 Network Configuration Guide...
Configuring Wide Area Network (WAN) connections and security • Configuring the MAX as a Frame Relay or X.25 concentrator • Configuring routing and bridging across the WAN • Configuring Internet services, such as multicast, OSPF, and Virtual Private Networks (VPNs) MAX 6000/3000 Network Configuration Guide...
Callback security You can have the MAX call back any user dialing in to it, thus ensuring that the connection is made with a known location. MAX 6000/3000 Network Configuration Guide...
WAN connection (and vice versa) on the basis of the destination hardware address in each packet. Unlike a router, a bridge does not examine packets at the network layer. It simply forwards packets to another network segment if the address does not reside on the local segment. MAX 6000/3000 Network Configuration Guide...
ATMP enables the MAX unit to create and tear down a tunnel to another unit. In effect, the tunnel collapses the Internet cloud and provides direct access to a home network. Packets received through the tunnel must be routed, so ATMP currently applies only to IP or IPX networks. MAX 6000/3000 Network Configuration Guide...
Open the profile that you want to make current. Press Ctrl-D. The profile’s DO menu appears. Select L (Load). The Load profile..? menu appears. Select 1 to load the profile. Profile loaded as current profile appears. MAX 6000/3000 Network Configuration Guide...
(If a Reply-Item is not indented, it is interpreted as the User-Name of a new entry.) Reply-Items includes zero or more attribute-value pairs that are returned in Access-Accept messages to authorize services for the user. MAX 6000/3000 Network Configuration Guide...
Set up Virtual Private Networks Chapter 10, “Setting Up Virtual Private Networks” Work with status windows MAX Reference Write configuration scripts MAX Administration Guide Set up security MAX Security Supplement Set up RADIUS TAOS RADIUS Guide and Reference MAX 6000/3000 Network Configuration Guide...
Page 41
Multiplexing (AIM). If your unit connects only to ISDN lines and supports only digital-modem cards, call routing is preconfigured. You must configure it, however, if you have a mixture of cards or if the WAN lines do not support ISDN signaling. MAX 6000/3000 Network Configuration Guide...
How the VT100 menus relate to slots and ports on the MAX 6000 The menus in the VT100 interface are numbered to correspond to slots in the MAX 6000 unit. A slot can be an actual expansion slot or virtual slot on the unit’s motherboard. Virtual slots include the System slot, two T1 or E1 slots, the Ethernet slot, the Etherdata slot, and the Serial WAN slot.
Slot #1 Figure 3-2 shows how ports are assigned to slots on a MAX 3000. Not shown are slots 0 and 5, which are exceptions in that they do not correspond to any physical port. MAX 6000/3000 Network Configuration Guide...
The serial port is slot 6 (menu 60-000). It is used for the serial WAN connection or a nailed-up T1/E1 connections. V.90 S56 III modem slot The on-board modems are assigned to slot 7 (menu 70-000). MAX 6000/3000 Network Configuration Guide...
If you have, for example, two PRI lines from different service providers, you might set the ChN Trnk Grp parameters for the first line to 9 and for the second line to 8. For more information about trunk groups, see “Enabling trunk groups” on page 3-68. MAX 6000/3000 Network Configuration Guide...
When a digital modem, AIM port, or a host on the local Ethernet port originates a dial-out connection, the unit routes that call internally to an available WAN channel to place the call. The channel configuration of a WAN line determines how the MAX 6000/3000 Network Configuration Guide...
3-58. Configuring T1 lines A MAX 6000 unit that supports T1 lines has two T1 slots, each of which supports two T1 lines. Configure a Line Config profile for each of the two slots. You can also configure additional Line Config profiles, but only one can be active for a given slot at a given time.
You must configure the signaling type (Sig Mode) for each T1 line. If you set Sig Mode to ISDN_NFAS, you can also establish an interface ID or NFAS ID number for this type of signaling. You must specify a different interface ID for each NFAS line. MAX 6000/3000 Network Configuration Guide...
Supporting PBX connections In a MAX 3000 unit’s T1 slot, or in either T1 slot of a MAX 6000, you can connect line 2 to a PBX. The unit can act as a switch, moving an incoming call from line 1 to line 2. You can assign the PBX a number for dialing out through the MAX unit.
For complete information about MAXDAX, see “Configuring MAXDAX” on page 3-73. Or, for detailed information about each parameter, see the MAX Reference. Following are the parameters you set in the Net/T1 > Line Config profile > Line N > Net2Net Incoming Calls profile: Parameter Specifies 3-10 MAX 6000/3000 Network Configuration Guide...
A hunt-group number (a telephone number) associated with the T1 line in a specific Line N profile. Your carrier assigns the hunt- group number. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 3-11...
17 (User busy) when the PRI switch servicing the unit triggers the T310 timer. Also, you can configure overlap receiving if you want the unit to obtain complete called-number information from the network switch. 3-12 MAX 6000/3000 Network Configuration Guide...
Page 53
To configure the Pre-T310 timer, proceed as follows: Open a Net/T1 > Line Config > Line Config profile > Line N subprofile. Set the Send Disc parameter to a value of from 0 to 60 seconds. MAX 6000/3000 Network Configuration Guide 3-13...
Page 54
Following is an example of T1 configuration for ISDN PRI service. (Only the relevant parameters are shown.) Net/T1 Line Config Line Config profile Name= 1st Line=Trunk 2nd Line=Disabled Line 1... Sig Mode=ISDN Framing Mode=D4 Encoding=AMI Send Disc=0 Overlap Receiving=Yes 3-14 MAX 6000/3000 Network Configuration Guide...
Using NFAS signaling When you configure two T1 lines for NFAS signaling, they share a D channel. Configure one line with a primary D channel and the other with a secondary D channel. The secondary D MAX 6000/3000 Network Configuration Guide 3-15...
Page 56
D channel. Note: On a MAX 6000 unit, both lines must be connected to the same slot. Also note that if you were to configure both slots for NFAS signaling, you would have to assign different ID numbers to the lines in the second slot.
Dialed Number Identification Service (DNIS) or a called number information element. On a MAX 6000 unit, T1 PBX must connect to line 2 of the unit’s second slot. That is, you must configure line 2 in a profile in the 20-000 Net/T1 > Line Config menu. To configure the Line Config profile that will support the PBX, set the 2nd Line parameter to Trunk.
2nd Line must be set to Trunk). Then open the subprofile (Line 1 or Line 2) for that line, and configure the nailed channels. For each channel that is to be nailed, set the Ch N parameter to 3-18 MAX 6000/3000 Network Configuration Guide...
MAX Reference. Configuring E1 lines A MAX 6000 unit that supports E1 lines has two E1 slots, each of which supports two E1 lines. Configure a Line Config profile for each of the two slots. You can also configure additional Line Config profiles, but only one can be active for a given slot at a given time.
You can set 1st Line and 2nd Line to Trunk (indicating a standard E1 interface with signaling information), Quiesced, or Disabled. For the second line connected to a MAX 6000 E1 slot, you can also specify D&I (Drop-and-Insert) service. (A MAX 3000 unit has no D&I setting for the 2nd Line parameter.
Number of milliseconds the unit waits before answering an incoming R2 call. Caller ID Whether or not the unit requests the Calling Line ID (CLID) and/or Caller ID from the switch. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 3-21...
Set the LoopAvoidance parameter to specify the maximum number of transit PBX devices through which a call can be routed. 3-22 MAX 6000/3000 Network Configuration Guide...
Each built-in E1 connection supports 32 channels, each of which can support one single-channel connection. Depending on the signaling mode used on the line, all 32 channels are available for user data, or 31 channels are available for data and the 32nd channel is MAX 6000/3000 Network Configuration Guide 3-23...
(For details, see “Routing outbound calls” on page 3-68.) Assigning channels to hunt groups You can assign a hunt-group number (a telephone number) associated with the E1 line in a specific Line N profile. Assign this value to the Hunt-N # parameter. 3-24 MAX 6000/3000 Network Configuration Guide...
Most E1 DPNSS providers in the U.K. require 2DS, which is a variant of G.703. If you select G.703, the unit provides CRC-4 checking. If you select 2DS, it does not. Make sure that the following parameters are set to their default values, as shown: L3 End=x-side L2 End=b-side MAX 6000/3000 Network Configuration Guide 3-25...
Exit the profile and, at the exit prompt, select the exit and accept option. If the profile you have configured is not the active profile, activate it as described in “Activating a profile” on page 2-7. 3-26 MAX 6000/3000 Network Configuration Guide...
Ascend Enterprise MIB events group (10). An SNMP manager can then read this object to determine the cost of the call. The eventCallCharge object is a read-only integer and is applicable only if eventType is callCleared (3). Otherwise, 0 is returned. MAX 6000/3000 Network Configuration Guide 3-27...
Configure a Frame Relay profile and specify the Nailed Grp number assigned to this port. For more information about Frame Relay, see Chapter 5, “Configuring Frame Relay.” Example of a serial WAN connection Net/T1 Line Config Line 1... Ch N Prt/Grp=3 3-28 MAX 6000/3000 Network Configuration Guide...
Modems in the 8-MOD modem card are numbered 0, 1, 2, 3, 6, 7, 10, 11. For example, if you have an 8-MOD modem card in slot 8 in a MAX 6000 and all eight modems are idle, the terminal-server Show Modems command displays the following output:...
Modems in the 12-MOD K56Flex modem card are numbered 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 12, 13. For example, if you have a 12-MOD K56Flex modem card in slot 8 in a MAX 6000 and all...
Specify the unique digits of the telephone numbers to be routed to digital modems. For example: V.90 S56 III Modem-30 Mod Config Ans 1#=12 Ans 2#=13 Ans 3#=14 Ans 4#=15 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 3-31...
Exit the profile and, at the exit prompt, select the exit and accept option. For detailed information about the relevant parameters, see the MAX Reference. Example of a V.110 configuration V.110 Mod Config Module Name=v110card Ans 1#=12 Ans 2#=13 Ans 3#=14 Ans 4#=15 3-32 MAX 6000/3000 Network Configuration Guide...
That card appears as PIAFS-16 in the Main Edit Menu. Note: MAX 6000 units support PIAFS protocol version 2.1 for PHS service. This PIAFS version has an enhanced link-level protocol that supports dynamic switching of data rates.
SPIDS. All international switch types except DBP Telecom, and all U.S. switch types except AT&T 5ESS, operate in multipoint mode. For detailed information about each parameter, see the MAX Reference. 3-34 MAX 6000/3000 Network Configuration Guide...
BRI lines supported by the ISDN BRI card. You can assign trunk-group numbers 4–9 to channels to make them available for outbound calls. You cannot combine PRI channels with BRI channels in the same trunk group. For details, see “Routing outbound calls” on page 3-68. MAX 6000/3000 Network Configuration Guide 3-35...
Close the Line 1 subprofile and proceed to configure the other seven lines, repeating step 5 through step 9 for each line. 10 Exit the profile and, at the exit prompt, select the exit and accept option. 3-36 MAX 6000/3000 Network Configuration Guide...
By setting Dial Plan to Trunk Grp, you direct the MAX unit to use lines configured with trunk groups for outbound calls. Exit the profile and, at the exit prompt, select the exit and accept option. Open the Net/BRI > Line Config > Line Config profile > Line 1 subprofile. MAX 6000/3000 Network Configuration Guide 3-37...
Note: When an ISDN call disconnects in Germany, the ISDN switch sends call billing information to the call originator as part of the call tear-down process. For lines that use the 3-38 MAX 6000/3000 Network Configuration Guide...
Telephone number for call routing.This number routes incoming WAN Ans N# calls to the local BRI lines connecting to the Host/BRI card. (For details, see “Routing outbound calls” on page 3-68.) For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 3-39...
Jim’s setup is similar to Ally’s, but he needs to access the Internet, so you must configure the MAX unit to enable outbound calls. Proceed as follows: Open System > Sys Config and enable trunk groups systemwide. Exit the profile and, at the exit prompt, select the exit and accept option. 3-40 MAX 6000/3000 Network Configuration Guide...
Open the Host/BRI > Line Config > Line Config profile > Line N subprofile for the line you are configuring, and set the Dial Plan parameter to Trunk Grp to specify the use of trunk groups. MAX 6000/3000 Network Configuration Guide 3-41...
D Ch Prt/Grp Ans N# Telephone number for call routing. This number routes incoming WAN calls to the local BRI lines connecting to IDSL card. (For details, see “Routing outbound calls” on page 3-68). 3-42 MAX 6000/3000 Network Configuration Guide...
BN Slot parameters to identical values. With a nailed channel, BN Prt/Grp is a Group number. To make use of this nailed connection, the Group number is referenced in a Connections or call profile. MAX 6000/3000 Network Configuration Guide 3-43...
Number Identification Service (DNIS) to route the calls to devices connected to IDSL cards. To configure IDSL voice-call support, open the System > Sys Config profile and set the following parameters in each Line N Subprofile: Parameter Specifies 3-44 MAX 6000/3000 Network Configuration Guide...
The Central Office (CO) switch must support DNIS, because the unit matches the DNIS number of the incoming call to numbers specified by Ans N# parameters. Repeat step 1and step 2 for each line that can receive calls that should be routed to the IDSL card. MAX 6000/3000 Network Configuration Guide 3-45...
WAN interface, and the data reflected back to the originator. The WAN interface is the port on the MAX unit that connects to a WAN line. For more information about loopback tests, see the MAX Administration Guide. 3-46 MAX 6000/3000 Network Configuration Guide...
Ethernet network. (For details, see “Configuring call routing” on page 3-58.) An AIM port requires three levels of configuration: • Configure the AIM port itself • Configure the interface to the codec • Configure the WAN connections on the port MAX 6000/3000 Network Configuration Guide 3-47...
0 (zero). A DS0 minute is the online usage of a single 56-Kbps or 64-Kbps switched channel for one minute. You can also set this parameter to specify that the MAX should disable the timer altogether. 3-48 MAX 6000/3000 Network Configuration Guide...
Exit the profile and, at the exit prompt, select the exit and accept option. Example of a Port Config profile Host/AIM6 Port1 Menu Directory Port1 Port Name=Port1 Dial Plan=Trunk Grp Ans 1#=1212 Ans 2#=1213 Ans 3#=1214 Ans 4#=1215 Dial=RS-366 ext1 Answer=Auto Clear=Terminal MAX 6000/3000 Network Configuration Guide 3-49...
Palmtop Whether the MAX enables or disables access to inverse multiplexing ports through the palmtop controller. Palmtop Port # Inverse multiplexing port to which a palmtop port has access if palmtop access is restricted. 3-50 MAX 6000/3000 Network Configuration Guide...
Port 1/2 Dual=Yes Port 3/4 Dual=No Port 5/6 Dual=No Exit the profile and, at the exit prompt, select the exit and accept option. For more information, see “Configuring a dual-port call” on page 3-57. MAX 6000/3000 Network Configuration Guide 3-51...
MAX unit can disconnect, reduce the bandwidth request, or establish a lower bandwidth call and retry for the additional bandwidth. PRI # Type The type of telephone number, such as National, Intl, or Local, that the MAX unit dials for the outgoing call. 3-52 MAX 6000/3000 Network Configuration Guide...
The time, in seconds, for which the ALU must exceed the value specified for the (Host/AIM6 (Host/Dual) > PortN Menu > Directory > Call profile > Target Util parameter before the unit adds bandwidth. MAX 6000/3000 Network Configuration Guide 3-53...
Ch Count to specify the number of channels to be added or subtracted, respectively, when bandwidth requirements change. Set the bandwidth parameters, as described in “Configuring bandwidth parameters” on page 3-53. Exit the profile and, at the exit prompt, select the exit and accept option. 3-54 MAX 6000/3000 Network Configuration Guide...
If the other end of the link initiates the call, set this parameter to No. Only one side of the link can initiate the call for FT1-AIM or FT1-B&O calls. Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 3-55...
(For more information, see “Routing outbound calls” on page 3-68.) Set the Call Type parameter to specify a single-channel call type. Exit the profile and, at the exit prompt, select the exit and accept option. 3-56 MAX 6000/3000 Network Configuration Guide...
Set the Dial # parameter to specify the dial number of the remote codec. For example: Host/Dual Port1 Menu Directory hunt-groups Name=hunt-groups Dial #=6-201-555-7878 If the dual-port call requires two dial numbers, specify both numbers. Separate them with an exclamation mark. For example: MAX 6000/3000 Network Configuration Guide 3-57...
With the configuration in this example, the caller would dial 510-555-1212,3 to reach the digital modems. The subaddress (3) follows the dialed number and is separated from it by a comma. System Sys Config Sub-Adr=Routing Serial=1 LAN=2 DM=3 V.110=4 3-58 MAX 6000/3000 Network Configuration Guide...
Note: When a MAX unit has more than one digital modem slot card installed, the cards and modems form a pool, and any modem can answer a call routed to any digital modem slot. MAX 6000/3000 Network Configuration Guide 3-59...
When a MAX unit receives an inbound call and no subaddress is in use or no matching answer number is found, it evaluates the slot and port specifications and routes the call to the specified destination. For example, for the MAX 6000 shown in Figure 3-1 on page 3-2: •...
If the maximum has been reached, the unit rejects the call. If the call is a V.110 call, the unit compares the value specified for the DNIS #N Max V110 parameter to the number of active V.110 calls made to the called number. MAX 6000/3000 Network Configuration Guide 3-61...
Set DNIS #N Max V110 if you want to limit the number of simultaneous V.110 calls to the called number specified by DNIS #N. Exit the profile and, at the exit prompt, select the exit and accept option. 3-62 MAX 6000/3000 Network Configuration Guide...
To specify that the MAX unit accepts twenty calls, of any type, that do not specify a DNIS number, set the following parameters as shown: • Unspecified Max Calls=20 • Unspecified Max Modem=20 • Unspecified Max HDLC=20 • Unspecified Max V110=20 MAX 6000/3000 Network Configuration Guide 3-63...
Incoming call routing state diagram The following pages show detailed state information about inbound call routing in the MAX unit. To understand these charts, you should be familiar with the parameters referenced in many of the steps. MAX 6000/3000 Network Configuration Guide 3-65...
Page 106
B1 Prt/Grp, B2 Prt/Grp) parameters point to a call to it. Other- serial-host port? wise, reject call. Is a serial-host (invs-mux) port Reject call. available? Route call to it. Continue next page: “A” Continue next page: “B” 3-66 MAX 6000/3000 Network Configuration Guide...
Page 107
Is call answered on a channel whose slot Route call to any available parameter (Ch N Slot, B1 Slot, B2 Slot) points to V.110 module. a V.110 module, and is a V.110 module available? Continue next page MAX 6000/3000 Network Configuration Guide 3-67...
The following setting enables trunk groups: System Sys Config Use Trunk Grps=Yes Note: Trunk-group numbers 2 and 3 have special meaning, as described in the next two sections. Only trunk groups 4–9 are available for assignment to channels. 3-68 MAX 6000/3000 Network Configuration Guide...
Dial #=312 With Dial # set to 312 in a call profile or Connection profile, the unit reads Destination profile 12. (The examples in this manual do not show profile numbers, because different MAX models MAX 6000/3000 Network Configuration Guide 3-69...
Line Config profile Line N ... Ch N =Switched Ch N TrnkGrp=4 Net/BRI Line Config Line Config profile Line N ... B N Usage=Switched B N TrnkGrp=5 Ethernet Mod Config WAN Options... Dial Plan=Trunk Grp 3-70 MAX 6000/3000 Network Configuration Guide...
Line N ... Dial Plan=Extended The following example shows how to specify the extended dial plan from an AIM port or the Ethernet network: Host/AIM6 (or Host/Dual) Port N Menu Port Config Dial Plan=Extended Dial #=806-212-555-1217 MAX 6000/3000 Network Configuration Guide 3-71...
If the outbound call originates from a device connected to an inverse multiplexing port, the call profile associated with that port dials the call. This type of call originates from the slot and port of the inverse multiplexing card. 3-72 MAX 6000/3000 Network Configuration Guide...
Configuring MAXDAX With MAXDAX enabled, on a MAX 6000 unit or a MAX 3000, you can route incoming switched calls from inband T1 or PRI lines to specific outgoing channels on the same or different inband T1 or PRI lines.
MAXDAX does not route the call, the unit routes the call according to call routing as discussed in “Routing inbound calls” on page 3-58. Note: Figure 3-4 does not include any greater than symbols. An angle bracket (>) points to the next menu item in the path to a parameter. 3-74 MAX 6000/3000 Network Configuration Guide...
MAX routes call according to call Checked all Answer Plan profiles? routing as discussed in “Routing inbound calls” on page 3-58. MAX compares called number and data service of the call to values in the next Answer Plan profile. MAX 6000/3000 Network Configuration Guide 3-75...
Net/T1 > Line Config > Line Config profile > Line N > Net2Net ChanGroup ID > Ch N ChanGroup parameter. Ch N Dial Plan # Specifies a Dial Plan profile the unit applies to calls received on this channel. 3-76 MAX 6000/3000 Network Configuration Guide...
Page 117
Plan profile you specify for the outgoing call. When finished configuring channels, save these changes and exit the profile. If the profile you have configured is not the active profile, activate it as described in “Activating a profile” on page 2-7. MAX 6000/3000 Network Configuration Guide 3-77...
Page 118
The unit strips either one or two digits from the called number, and uses them to determine the Dial Plan profile. To configure the unit to use a caller-defined Dial Plan profile, you must first configure a destination channel-group and then specify the Dial Plan profile. 3-78 MAX 6000/3000 Network Configuration Guide...
Page 119
Set the PrependDigits parameter to specify digits that the MAX unit prepends to the called number before making the outgoing call. Set the Dest # parameter to the telephone number to be dialed for the outgoing call. MAX 6000/3000 Network Configuration Guide 3-79...
A DO menu is a context-sensitive list of commands that appears when you press Ctrl - D. The commands in the list vary on the basis of the menu the unit is displaying when you press 3-80 MAX 6000/3000 Network Configuration Guide...
Page 121
333 | In the channel-group display: • S indicates the slot number. For a MAX 6000 unit, the slot number can be either 1 or 2. For a MAX 3000 unit, the slot number is always 1. • P indicates the T1 lines in the slot. The unit supports two T1 lines per slot.
> Line N > Net2Net Incoming Calls profile from their default settings: Net/T1 Line Config Line Config profile Line 1... Net2Net Incoming Calls Ch 1=Switched Ch 1 Dest ChanGroup=1 Ch 1 Dial Plan #=0 Ch 1 #DialPlanSelDigits=2 Ch 2=Switched 3-82 MAX 6000/3000 Network Configuration Guide...
Page 123
The Answer Plan profile also specifies that MAX 2 is to use Dial Plan profile 12 to make the outbound call. The system administrator configures Dial Plan profile 12 as follows: System Dial Plan PRI plan Name=PRI plan Call-by-Call=6 Data Svc=64K PRI # Type=National NumPlanID=ISDN Transit #= MAX 6000/3000 Network Configuration Guide 3-83...
Page 124
PRI line must belong to channel group 1. The system administrator configures the outgoing-calls profile as follows: Net/T1 Line Config Line Config profile Line 1... Net2Net ChanGroup ID 3-84 MAX 6000/3000 Network Configuration Guide...
Page 125
Data Svc=64K PRI # Type=National NumPlanID=ISDN Transit #= Bill #= Dest #=14155551212 PrependDigits= Because the system administrator specifies a Dest # value of 14155551212, the MAX 2 dials that number to make the outbound call. MAX 6000/3000 Network Configuration Guide 3-85...
Page 127
Combinet bridging links two LANs so that they appear to be a single segment. EU is a type of X.75 HDLC encapsulation commonly used in Europe. The MAX provides a number of Dynamic Host Configuration Protocol (DHCP) services, such as responses to DHCP requests from hosts that need to borrow IP addresses. MAX 6000/3000 Network Configuration Guide...
IP and others bridge. Dynamic Host DHCP is a TCP/IP protocol that enables a client to obtain a Configuration Protocol temporary IP address from a central server (known as a DHCP (DHCP) server). MAX 6000/3000 Network Configuration Guide...
Yes specifies that terminal- server users connecting through this profile only have access to the PPP, SLIP, CSLIP, and Quit terminal-server commands. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide...
MP+ connections, which use PPP encapsulation with Lucent extensions. MP+ enables the unit to establish a multiple-channel connection to another unit, and to add or remove channels as traffic dictates. Both sides of the connection must support MP+. MAX 6000/3000 Network Configuration Guide...
Page 131
Packet switching is a mode of data transfer in which packets are transmitted from a specific source to a specific destination over any available circuit. Packets can take different paths and might not arrive in the order in which they were sent. MAX 6000/3000 Network Configuration Guide...
AppleTalk routers or AppleTalk clients. If there is no Connection profile for the caller, the MAX unit needs to treat the caller as a router (the default) or as a dialin client. MAX 6000/3000 Network Configuration Guide...
How the unit responds to caller requests to support Callback Control Protocol (CBCP). Microsoft’s CBCP is a Link Control Protocol (LCP) option negotiated at the beginning of PPP sessions. CBCP authenticates a caller by means of a user name and password. MAX 6000/3000 Network Configuration Guide...
Idle Pct Percentage of bandwidth utilization below which the MAX unit clears an MP+ call. Bandwidth utilization must fall below this percentage on both sides of the connection before the unit clears the call. MAX 6000/3000 Network Configuration Guide...
The X.75 Options parameters apply to incoming calls that use X.75 encapsulation. Following are the Answer > X.75 Options parameters: Parameter Specifies K Window Size Maximum number of data packets that can be outstanding in an X.75 connection before acknowledgment is required. MAX 6000/3000 Network Configuration Guide...
Set of Recognized Private Operating Agency (RPOA) user facilities to use in the next call request. The RPOA facilities provide the data network identification code for the requested initial RPOA transit network in the form of four decimal digits. 4-10 MAX 6000/3000 Network Configuration Guide...
The following parameters in Answer > T3POS Options subprofile define timing limits in the communication between the DTE and the PAD: Parameter Specifies T3POS T1 Maximum amount of time permitted between characters sent from the DTE to the PAD. Also called the Char-to-Char timer. MAX 6000/3000 Network Configuration Guide 4-11...
Which Protocol Identifier (PID) the PAD includes in the call request packet it sends to the host. ACK Suppression Whether the PAD sends an acknowledgment when it receives an opening frame from the DTE and when it establishes a virtual call with the host. 4-12 MAX 6000/3000 Network Configuration Guide...
In the Answer > Session Options subprofile, the RIP parameter specifies whether the MAX sends and/or receives RIP update packets on the interface. The Session Options subprofile also includes filter-related parameters, timing parameters, and a few miscellaneous parameters. MAX 6000/3000 Network Configuration Guide 4-13...
(usually less than a minute longer) than the actual time you set. Preempt Number of idle seconds the MAX unit waits before using one of the channels of an idle link for a new call. 4-14 MAX 6000/3000 Network Configuration Guide...
TCP. Note that the data is written before a match occurs if the specified timeout (Packet Flush Time) or maximum packet length (Packet Flush Length) is exceeded. MAX 6000/3000 Network Configuration Guide 4-15...
Exit the profile and, at the exit prompt, select the exit and accept option. Example of a configured an Answer profile Ethernet Answer Profile Reqd=Yes Id Auth=None Assign Adrs=No Encaps MPP=Yes MP=Yes PPP=Yes COMB=Yes FR=Yes X25/PAD=Yes EU-RAW=Yes EU-UI=Yes V.120=Yes X.75=Yes TCP-Clear=Yes ARA=Yes PPP Options Route IP=Yes 4-16 MAX 6000/3000 Network Configuration Guide...
TypeOfNumber field in the called party’s information element. PRI # Type is used for outbound calls made by the MAX unit on PRI lines so that the switch can properly interpret the telephone number dialed. Ask your PRI provider for details. MAX 6000/3000 Network Configuration Guide 4-17...
IPX network address and frame type in the Ethernet profile. Note that the unit routes and spoofs only one IPX frame type. Other frame types will be bridged if bridging is enabled. 4-18 MAX 6000/3000 Network Configuration Guide...
MAX unit to act as a DHCP server for a local Pipeline unit for connections that use RADIUS (if you enable Use Answer as Default) or Names/Passwords profiles. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 4-19...
How the unit monitors the traffic over an MP+ connection. Only the initiating side of the call can add or subtract bandwidth. If both sides of the link have DBA Monitor set to None, DBA is disabled. 4-20 MAX 6000/3000 Network Configuration Guide...
Page 147
VJ Comp applies only to packets in TCP applications, such as Telnet. Turning on header compression is most effective in reducing overhead when the data portion of the packet is small. MAX 6000/3000 Network Configuration Guide 4-21...
Page 148
If the CHAP field cannot accommodate the full PIN+CODE.USER, you can enable this feature. The unit splits the passcode into two pieces with the information following the period becoming the CHAP Name, overriding the name of the router. 4-22 MAX 6000/3000 Network Configuration Guide...
When Connections > Connection profile > Encaps=PPP, the following parameters appear in the interface for Ethernet > Connections > Connection profile > Encaps Options: Ethernet Connections Connection profile Send Auth Send Name Send PW Recv PW LQM Min LQM Max Link Comp VJ Comp MAX 6000/3000 Network Configuration Guide 4-23...
> Encaps=FR_CIR, the following parameters appear in the interface for Ethernet > Connections > Connection profile > Encaps Options: Parameter Specifies FR Prof Name of the Frame Relay profile to use for forwarding this link on the Frame Relay network. 4-24 MAX 6000/3000 Network Configuration Guide...
Set of Recognized Private Operating Agency (RPOA) user facilities to use in the next call request. The RPOA facilities provide the data network identification code for the requested initial RPOA transit network. The code contains four decimal digits. MAX 6000/3000 Network Configuration Guide 4-25...
Virtual Connection (PVC) using X.25. On an X.25 connection, an LCN is a unique number assigned to each Virtual Circuit (VC). On a X.25 network, a VC is a bidirectional data path between two endpoints. MAX 6000/3000 Network Configuration Guide 4-27...
When Connections > Connection profile > Encaps=TCP-Clear, the following parameters appear in the interface for Ethernet > Connections > Connection profile > Encaps Options: Ethernet Connections Connection profile Recv PW= Login Host= Login Port=0 Detect End of Packet= 4-28 MAX 6000/3000 Network Configuration Guide...
If the specified number of milliseconds elapses before the buffered data matches the End of Packet Pattern value, the MAX unit flushes the buffer by writing the data into TCP packets. MAX 6000/3000 Network Configuration Guide 4-29...
The value you enter is a number between 1 and 15. The default setting is 7. The higher the number you specify, the less likely that the unit brings the link or route online. 4-30 MAX 6000/3000 Network Configuration Guide...
An IP address pool from which the caller will be assigned an IP address. If the Pool parameter is null but all other configuration settings enable dynamic assignment, the unit gets IP addresses from the first defined address pool. MAX 6000/3000 Network Configuration Guide 4-31...
Connection-specific, so it is not added to the routing table. IPX Options The Ethernet > Connections > Connection profile > IPX Options subprofile includes the following parameters that define whether the remote IPX caller is a router or dialin client, how 4-32 MAX 6000/3000 Network Configuration Guide...
It does not apply if you are routing from one unit to another, or to a router that does not use a numbered interface. Handle IPX IPX server bridging or IPX client bridging. MAX 6000/3000 Network Configuration Guide 4-33...
Zone Name #N Name of the AppleTalk zone to which the unit belongs. If the local Ethernet network supports an AppleTalk router with configured zones, you can place the unit in one of those zones. 4-34 MAX 6000/3000 Network Configuration Guide...
(usually less than a minute longer) than the actual time you set. Preempt Number of idle seconds the MAX unit waits before using one of the channels of an idle link for a new call. MAX 6000/3000 Network Configuration Guide 4-35...
The default setting of No specifies that terminal-server users connecting through this profile have unlimited access to the terminal-server commands. Yes specifies that terminal- server users connecting through this profile have access only to the PPP, SLIP, CSLIP, and Quit terminal-server commands. 4-36 MAX 6000/3000 Network Configuration Guide...
An authentication key (a password) used to allow OSPF routing. KeyID is a number from 0 to 255 inserted into the OSPF packet header. OSPF routers use KeyId to allow or exclude packets from an area. The default value is 0. MAX 6000/3000 Network Configuration Guide 4-37...
Connection profile. The unit then calls back the device at the remote end of the link using the Dial # specified in the Connection profile. 4-38 MAX 6000/3000 Network Configuration Guide...
The following parameters in Ethernet > Connections > Connection profile > IPX Options define the billing telephone number, the ability to route calls from a local device through the MAX to the network, a transit number to transmit long-distance calls, whether the Connection MAX 6000/3000 Network Configuration Guide 4-39...
RADIUS or TACACS+ shared secret. A shared secret acts like a password between the unit and the accounting server. This parameter applies in a Connection profile only if the Acct Type parameter specifies that connection-specific accounting information will be used. 4-40 MAX 6000/3000 Network Configuration Guide...
Set the TS Idle parameter to specify the number of seconds that a terminal-server connection must be idle before the unit disconnects the session. MAX 6000/3000 Network Configuration Guide 4-41...
Note: To set up a dial-in AppleTalk PPP connection using a Names/Passwords profile, you also need to set the Peer parameter in the AppleTalk Options profile to Dialin. Example of a Names/Passwords profile configuration Ethernet Names/Passwords Claire Name=Claire Active=Yes Recv PW=brianpw Template Connection #=0 4-42 MAX 6000/3000 Network Configuration Guide...
This section describes how to set the parameters used for establishing a single-channel PPP call. Following are the related parameters (shown with sample settings): Ethernet Answer Encaps PPP=Yes PPP Options Route IP=Yes Route IPX=Yes Route AppleTalk=Yes Bridge=Yes Recv Auth=Either MRU=1524 LQM=No LQM Min=600 LQM Max=600 Link Comp=Stac MAX 6000/3000 Network Configuration Guide 4-43...
PPP framing or dial in unframed and then change to PPP framing. Maximum number of bytes the MAX TNT can send in a single Framed-MTU (12) packet (from 1 to 1524, default 1524). Ascend-Link- Link-compression method to use. Compression (233) 4-44 MAX 6000/3000 Network Configuration Guide...
The Send Auth parameter should be set to CHAP or PAP. Both sides of the connection must support the selected authentication protocol and the selected compression methods. Exit the profile and, at the exit prompt, select the exit and accept option. Following is a comparable RADIUS profile: MAX 6000/3000 Network Configuration Guide 4-45...
BACP requires setting a few additional parameters. If you use MP with BACP, you have to set a greater number of additional parameters. Following are the additional parameters required for MP without BACP: Ethernet Answer Encaps MP=Yes PPP=Yes PPP Options Min Ch Count=1 Max Ch Count=1 Ethernet Connections 4-46 MAX 6000/3000 Network Configuration Guide...
(The settings shown for MP and PPP are required. The others are examples.) The MP and BACP parameters This section provides some background information about MP and BACP configuration. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 4-47...
Linear gives more weight to recent samples of bandwidth usage than to older samples taken during the specified period. The weighting grows at a linear rate. Constant gives equal weight to all samples taken during the specified period. 4-48 MAX 6000/3000 Network Configuration Guide...
Base number of channels to use for a multilink PPP connection. Ascend-Base-Channel- When a call is received, the MAX authenticates the first (base) Count (172) channels of the call and then determines the maximum and minimum settings. MAX 6000/3000 Network Configuration Guide 4-49...
Configure PPP authentication. For example: Encaps=MP Encaps Options Send Auth=PAP Send PW=remotepw Aux Send PW=N/A Recv PW=localpw Set the base channel count and maximum channel count. For example, to use two channels for this call: 4-50 MAX 6000/3000 Network Configuration Guide...
Open a Connection profile, specify the name of the remote device, and activate the profile. For example: Ethernet Connections chloe Station=chloe Active=Yes Select MP encapsulation and set the MP authentication options. For example: Encaps=MP Encaps Options Send Auth=PAP Send PW=remotepw Aux Send PW=N/A Recv PW=localpw MAX 6000/3000 Network Configuration Guide 4-51...
DBA-None (3). If both sides of the link have Bandwidth-Monitor- Direction set to None, DBA is disabled. Number of channels the MAX can add at one time, subject to the Ascend-Inc-Channel- setting of the Parallel-Dialing parameter in the System profile. Count (236) MAX 6000/3000 Network Configuration Guide 4-53...
Set PPP and MP+ encapsulation to Yes and specify the appropriate routing, bridging, and authentication values. For example: Ethernet Answer Encaps MPP=Yes PPP=Yes PPP Options Route IP=Yes Route IPX=No Bridge=No Recv Auth=Either Exit the profile and, at the exit prompt, select the exit and accept option. 4-54 MAX 6000/3000 Network Configuration Guide...
Page 181
Ascend-DBA-Monitor = DBA-Transmit-Recv, Ascend-Seconds-Of-History = 15, Ascend-Add-Seconds = 5, Ascend-Remove-Seconds = 10 Ascend-Target-Util = 70 Note: The RADIUS profile must specify Ascend-Maximum-Channels, or the default value of 1 prevents the client from establishing a multichannel call. MAX 6000/3000 Network Configuration Guide 4-55...
Exit the profile and, at the exit prompt, select the exit and accept option. Settings in a RADIUS profile The following RADIUS attribute-value pairs are relevant to nailed connections: Attribute Value Ascend-Dial-Number Number to dial out for this connection. (227) 4-56 MAX 6000/3000 Network Configuration Guide...
Ethernet packet to locate each other. Directed broadcast packets usually cannot cross a router, so the units in a single stack must be on the same physical LAN. MAX units running in a stack MAX 6000/3000 Network Configuration Guide 4-57...
MAX #2 forwards any traffic from the WAN to MAX #1, for distribution to the destination, as shown in Figure 4-5. Figure 4-5. Packet flow from the slave channel to the Ethernet MAX #1 (master) MAX #2 (slave) Ethernet 4-58 MAX 6000/3000 Network Configuration Guide...
There is no limit to the number of stacked channels in single call or in a stack of MAX units, other than the limit for each individual unit. The MAX 6000 and the MAX 3000 units support up to 40 stacked channels. A unit that can handle n real channels can handle n/3 stacked channels.
Page 186
MAX units. The illustration shows these three local hunt groups with telephone numbers 555-1212, 555-1213, and 555-1214. In addition, a global hunt group, 555-1215, spans all the T1s of all the MAX units in the stack. 4-60 MAX 6000/3000 Network Configuration Guide...
MAX #1, then continues to MAX #2, and so on. This arrangement tends to keep the channels of a call from being split across multiple MAX units, keeping overhead low. MAX 6000/3000 Network Configuration Guide 4-61...
Because directed-broadcast packets are unlikely to cross a router, and because of the high traffic demands created by a multilink call that spans MAX units, all members of a stack must reside on the same physical LAN. 4-62 MAX 6000/3000 Network Configuration Guide...
This is a reserved UDP port for intrastack communications. The UDP port must be identical for all members of a stack, but is not required to be unique among all stacks. Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 4-63...
CHAP. One or more clients can dial into the MAX unit. The MAX unit authenticates the calling device by means of a Connection profile, and each dial-in client authenticates the MAX unit by means of the Send PW value. 4-64 MAX 6000/3000 Network Configuration Guide...
Figure 4-10 shows a configuration in which the MAX unit authenticates the calling device by means of CLID or DNIS authentication. The MAX unit and the dial-in client then authenticate each other by means of CHAP. MAX 6000/3000 Network Configuration Guide 4-65...
Setting up bidirectional CHAP on the MAX unit for outgoing calls To set up bidirectional CHAP on the MAX unit for outgoing calls, proceed as follows: Open the dialout Connections > PPP Options subprofile. 4-66 MAX 6000/3000 Network Configuration Guide...
MAX unit, the MAX unit can still accept the call. • Bi-Directional-Auth-Required specifies that authentication must be bidirectional. In the following pseudo-user profile, bidirectional authentication is required: 111886067 User-Password="Ascend-CLID", Service-Type=Framed-User Ascend-Require-Auth=Require-Auth, Ascend-Auth-Type=Auth-CHAP, Ascend-Send-Auth=Send-Auth-CHAP, MAX 6000/3000 Network Configuration Guide 4-67...
Set the Ascend-Recv-Name parameter to the name of the called party. For example: Mike1-out User-Password="ascend" Service-Type=Outbound-User, User-Name="Mike1", Framed-Protocol=PPP, Framed-IP-Address=111.5.1.1, Framed-IP-Netmask=255.255.255.0, Ascend-Dial-Number=90492386067, Ascend-Data-Svc=Switched-64K, Ascend-Send-Auth=Send-Auth-CHAP, Ascend-Send-Secret="passout", Ascend-Receive-Secret="passin", Ascend-Bi-Directional-Auth=Bi-Directional-Auth-Required Ascend-Route-IP=1 route-tnt-pat-1 User-Password="ascend", Service-Type=Outbound-User Framed-Route="111.5.1.0/30 111.5.1.1 1 n Mike1-out" 4-68 MAX 6000/3000 Network Configuration Guide...
Consider the network in Figure 4-11: Figure 4-11. Multiprovider network Ethernet PSTN Pipeline unit MAX unit Proxy RADIUS ISP #1 RADIUS server #1 ISP #2 RADIUS server #2 ISP #3 RADIUS server #3 4-70 MAX 6000/3000 Network Configuration Guide...
Page 197
You can disable the double RADIUS lookup by naming the dialout profile with the peer’s name and by omitting the Ascend-Recv-Name attribute. Use the User-Name attribute to rename the profile (in this case to pipe-pat): pipe-pat-outUser-Password="ascend" User-Name="pipe-pat", Service-Type=Outbound-User, Framed-Protocol=PPP, Framed-IP-Address=10.4.8.8, Framed-IP-Netmask=255.255.255.0, Ascend-Dial-Number=90492386067, Ascend-Data-Svc=Switched-64K, Ascend-Send-Auth=Send-Auth-CHAP, Ascend-Send-Secret="passin", Ascend-Bi-Directional-Auth=Bi-Directional-Auth-Required, MAX 6000/3000 Network Configuration Guide 4-71...
The MAX unit provides a key for encrypting passwords by means of DES. RADIUS support for MS-CHAP RFC 2548 defines the VSA attributes necessary for supporting MS-CHAP authentication by means of RADIUS. Two new VSA attributes are supported: • MS-CHAP-Challenge • MS-CHAP-Response 4-72 MAX 6000/3000 Network Configuration Guide...
To use a Names/Passwords profile to configure an AppleTalk PPP connection: Open the Ethernet> Mod Config profile. Set the Appletalk parameter to Yes. In the Answer profile, open the PPP Options subprofile. Set the Route Appletalk parameter to Yes. MAX 6000/3000 Network Configuration Guide 4-73...
Page 200
The unit can seed up to 32 zones, and the Pipeline unit can seed up to 5. Enter up to 33 alphanumeric characters in each Zone Name #N field. Exit the profile and, at the exit prompt, select the exit and accept option. 4-74 MAX 6000/3000 Network Configuration Guide...
Example of ARA configuration that enables IP access This section shows an example of an ARA configuration that enables a Macintosh with an internal modem to dial into the MAX unit by means of ARA Client software and communicate MAX 6000/3000 Network Configuration Guide 4-75...
Open the Ethernet > Mod Config profile and set the AppleTalk parameter to Yes. If applicable, specify the AppleTalk zone in which the unit resides. Ethernet Mod Config Appletalk=Yes AppleTalk Zone Name=Engineering Exit the profile and, at the exit prompt, select the exit and accept option. 4-76 MAX 6000/3000 Network Configuration Guide...
RADIUS. Note: Like PPP connections, terminal-server connections rely on the Answer profile for default settings and enabling of the encapsulation type. For information about the Telco MAX 6000/3000 Network Configuration Guide 4-77...
If the Connection profile requires PAP or CHAP authentication, the connection fails. Modem connections This section shows sample Connection profiles for a terminal-server connections established via analog modem. The following example uses only the required parameters for authenticating a terminal-server modem connection: 4-78 MAX 6000/3000 Network Configuration Guide...
Note: If the connection uses PAP or CHAP authentication, the ISDN terminal adapter should be configured for async-to-sync conversion. In this case, V.120 encapsulation is not required in the Connection profile. For more information, see “Connection authentication issues” on page 4-78. MAX 6000/3000 Network Configuration Guide 4-79...
TCP-Clear to transport custom-encapsulated data understood by the host and the caller. For example, customers who log in from an ISDN device typically use a TCP-Clear connection to tunnel their proprietary encapsulation method in raw TCP/IP packets, as shown in Figure 4-14. 4-80 MAX 6000/3000 Network Configuration Guide...
If all connection attempts fail, the session terminates and the MAX returns a TCP connection error to the dial-in client. MAX 6000/3000 Network Configuration Guide 4-81...
Frame Relay. The remote user appears to be directly connected to the ISP MAX. MAX 1 merely passes the data through. The ISP MAX typically authenticates remote users. Figure 4-15. Sample TCP-modem connection RADIUS PSDN TCP-modem MAX 1 ISP MAX connection 4-82 MAX 6000/3000 Network Configuration Guide...
The prompt does not appear in menu mode. • With the Security parameter set to Full, a prompt for a name and password appears upon initial login, regardless of the interface. MAX 6000/3000 Network Configuration Guide 4-83...
Example of a modem configuration To set the maximum negotiable baud rate for incoming calls from analog modems: Open Ethernet > Mod Config > TServ Options. Set the maximum negotiable baud rate to 26400: 4-84 MAX 6000/3000 Network Configuration Guide...
Telnet. Whether or not the terminal-server buffers input characters for 100 Buffer Chars milliseconds before forwarding them to the host, or sends the characters as they are received. Another login prompt. 3rd Prompt MAX 6000/3000 Network Configuration Guide 4-85...
The hostname or address to which users connect in terminal-server Immed Host immediate mode. A TCP port number to use for the connections. Immed Port Whether the MAX unit bypasses terminal-server authentication and Telnet Host Auth goes right to a Telnet login prompt. 4-86 MAX 6000/3000 Network Configuration Guide...
The user does not have access to the command line. To implement the configuration: Open the Ethernet > Mod Config > TServ Options profile. Specify that the dial-in users are in menu mode initially: Ethernet Mod Config TServ Options Initial Scrn=Menu MAX 6000/3000 Network Configuration Guide 4-87...
Enable the use of the PPP command in terminal mode. Enable PPP direct negotiation: Ethernet Mod Config TServ Options PPP=Yes PPP Direct=Yes Exit the profile and, at the exit prompt, select the exit and accept option. 4-88 MAX 6000/3000 Network Configuration Guide...
To enable local dial-out, you set the following parameters in Ethernet > Mod Config TServ Options: Ethernet Mod Config TServ Options Modem dialout=Yes Immediate Modem=N/A Imm. Modem port=N/A Imm. Modem Pwd=N/A MAX 6000/3000 Network Configuration Guide 4-89...
Page 216
Use the standard Rockwell AT commands to dial out on the modem, just as if using a modem connected directly to a workstation. For example: ATDT 1V1 ^M Press Ctrl-C to terminate the connection. 4-90 MAX 6000/3000 Network Configuration Guide...
The (Connection profile) Base Ch Count parameter specifies the base number of channels to use when setting up the call. It can be set to 1 (for 64 Kbps) or 2 (for 128 Kbps). 4-92 MAX 6000/3000 Network Configuration Guide...
ISDN. For details, see the MAX Security Supplement. EU configuration involves the following parameters (shown with sample settings): Ethernet Answer Id Auth=Called Reqd Encaps MAX 6000/3000 Network Configuration Guide 4-93...
DTE address (DTE Addr) The DTE Addr parameter specifies a value for the called unit in the EU-UI header. The caller must use the same value for the called unit. 4-94 MAX 6000/3000 Network Configuration Guide...
Select the EU-RAW encapsulation type and, if necessary, configure the MRU in the Encaps Options subprofile. For example: Encaps=EU-RAW Encaps Options MRU=1524 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 4-95...
ACE or SAFEWORD server and bring up an authenticated dial-up session. Once the unit establishes the dial-up session, an official IP address can be retrieved from a remote DHCP or BOOTP server. The ability to retrieve an IP address, together with Network Address 4-96 MAX 6000/3000 Network Configuration Guide...
DHCP Spoofing, it contains parameters for all DHCP services, including DHCP Spoofing, DHCP Server, and Plug and Play: Ethernet Mod Config DHCP Spoofing DHCP Spoofing=Yes DHCP PNP Enabled=Yes Renewal Time=10 MAX 6000/3000 Network Configuration Guide 4-97...
Page 224
The maximum time it waits for a reply depends on this setting. The default is 10 seconds. To assign IP addresses dynamically, set the IP Group 1 parameter to the first address for the IP address pool. 4-98 MAX 6000/3000 Network Configuration Guide...
Host 2 Enet=000000000000 Host 3 IP=0.0.0.0/0 Host 3 Enet=000000000000 Setting up Plug and Play support To set up Plug and Play, you must set the following parameters: DHCP Spoofing DHCP Spoofing=Yes DHCP PNP Enabled=Yes MAX 6000/3000 Network Configuration Guide 4-99...
Always Spoof=No Additionally, you can set the following parameters: Renewal Time=nn Become Def. Router=Yes|No Dial If Link Down=Yes|No Validate IP=Yes Maximum no reply wait=n For detailed information about each parameter, see the MAX Reference. 4-100 MAX 6000/3000 Network Configuration Guide...
Page 227
Frame Relay switch. A CPE is the source or destination of data traversing the Frame Relay service. For example, the MAX labeled MAX-02 in Figure 5-1 terminates the data stream to its PPP callers. When it is MAX 6000/3000 Network Configuration Guide...
Using the MAX as a Frame Relay concentrator As a Frame Relay concentrator, the MAX forwards many lower-speed PPP connections onto one or more high-speed Frame Relay interfaces, as shown in Figure 5-2: Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
MAX and defines the operations and link management functions the MAX performs on the interface. The administrator specifies these settings in a Frame Relay profile or RADIUS frdlink pseudo-user profile. MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000...
Note: Link management settings are optional. It is possible to set up a Frame Relay interface and pass data across it without setting these parameters. However, link management parameters provide a mechanism for retrieving information about the status of the interface and its DLCIs. Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
For robbed-bit lines, the MAX uses the billing-number as a suffix that is appended to each phone number it dials for the call. MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000...
DCE monitored event count (from 1 to 10). It is N/A when FR Type is DTE. T391 Link Integrity Verification polling timer (from 5 to 30 seconds). The value should be less than that of T392. T391 is N/A when FR Type is DCE. Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
N. If there is a gap in the sequence of numbers, the MAX stops retrieving the profiles when it encounters the gap in sequence. MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000...
Page 234
1 to 10). The default value is 3. Does not apply when Ascend-FR-Type is Ascend-FR-DCE. Ascend-FR-DTE-N393 DTE monitored event count (from 1 to 10). The default is 4. Does (165) not apply when Ascend-FR-Type is Ascend-FR-DCE. Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
Relay profile to define the timing of its Status Enquiries to the DCE and its link integrity parameters. (These correspond to the Ascend-FR-N391, Ascend-FR-DTE-N392, Ascend-FR- DTE-N393, and Ascend-FR-T391 attributes in a RADIUS profile.) Figure 5-4 shows an example of the MAX with a UNI-DTE interface. MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000...
The UNI-DCE uses the values of the T392, DCE N392, and DCE N393 parameters in the Frame Relay profile to define the parameters of the Status Enquiries expected from the DTE. (These correspond to the Ascend-FR-T392, Ascend-FR-DCE-N392, and Ascend-FR-DCE- N393 attributes in a RADIUS profile.) 5-10 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
DTE when the segment is confirmed to be active or inactive. Following is a comparable RADIUS profile: frdlink-max-2 Password="ascend", User-Service=Dialout-Framed-User Ascend-FR-Profile-Name="fr-dce", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-DCE, Ascend-FR-Nailed-Grp=36, Ascend-FR-Link-Mgt=Ascend-FR-Q-933A, Ascend-Data-Svc=Nailed-64K, Ascend-FR-T392=15 MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-11...
With these link management settings, the MAX uses the ANSI Annex D link management protocol to communicate with Switch-3. It sends a Status Enquiry for Link Integrity Verification to Switch-3 every 10 seconds, and requests a Full status report every sixth enquiry 5-12 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
MAX and the Frame Relay network. Forwarded or routed connections over the Frame Relay link use the following sets of parameters (shown with sample settings): Ethernet Answer Encaps... PPP=Yes FR=Yes PPP Options... Route IP=Yes MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-13...
(PVC). The MAX does not allow you to enter duplicate DLCIs, except when they are carried by separate physical links specified in different Frame Relay profiles. 5-14 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
A DLCI for this PVC endpoint.The DLCI must be obtained from a Frame Relay provider. The MAX does not allow you to enter duplicate DLCIs, except when they are carried by separate physical links specified in different Frame-Relay profiles. MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-15...
Administrators can choose to add static routes to other subnets or to enable RIP updates to or from the router across Frame Relay. The usual considerations for IP routing connections apply (see Chapter 7, “Configuring IP Routing.”) 5-16 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
Ethernet Connections Name=pvc Active=Yes Encaps=FR IP options LAN Adrs=10.168.7.11/24 Encaps options FR Prof=frt1-7 DLCI=16 Telco options Call Type=Nailed Following are comparable RADIUS profiles: permconn-max1-1 Password="ascend", User-Service=Dialout-Framed-User User-Name="fp7", Framed-Protocol=FR, Framed-Address=10.168.7.9, Framed-Netmask=255.255.255.0, MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-17...
Page 244
When the primary PVC comes up again, the data flow is directed to that interface again. At that point, the Ifmgr command output again shows both interfaces as up. 5-18 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
Frame Relay gateway. LAN Adrs Destination IP address, which lies at the end of a PVC whose first hop is known by the specified DLCI. MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-19...
The following set of parameters configures an MP+ Connection profile for the dial-in client in Figure 5-8: Ethernet Connections mpp-client Name=mpp-client Active=Yes Encaps=MPP Encaps options Recv PW=clientpw IP options LAN Adrs=10.1.2.3/29 Following is a comparable RADIUS profile: mpp-client Password="clientpw", User-Service=Dialout-Framed-User Framed-Protocol=MPP, Framed-Address=10.10.1.3, Framed-Netmask=255.255.255.248 5-20 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
5-13. Settings in a Connection profile Following are the relevant FR-Direct parameters, shown with sample settings: Ethernet Connections Connection profile Active=Yes Encaps=PPP Route IP=Yes Encaps options Recv PW=clientpw IP options MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-21...
Enables/disables IP routing for this connection. (IP is enabled by default. If this attribute is present, it must be set to Route-IP-Yes to enable the MAX to send data back to the appropriate PPP caller. 5-22 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
A DLCI for this PVC endpoint.The DLCI must be obtained from a Frame Relay provider. The MAX does not allow you to enter duplicate DLCIs, except when they are carried by separate physical links specified in different Frame Relay profiles. MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-25...
DLCI 200 Using local profiles The following parameters on the MAX define the datalinks to the MAX and to the Pipeline 130 (P130-East): Ethernet Frame Relay Name=max Active=Yes FR Type=DCE 5-26 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
The following RADIUS frdlink pseudo-user profiles define the datalinks to the MAX and to the Pipeline 130 (P130-East): frdlink-max-21 Password="ascend", User-Service=Dialout-Framed-User Ascend-FR-Profile-Name="max", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-DCE, Ascend-FR-Nailed-Grp=111 frdlink-max-22 Password="ascend", User-Service=Dialout-Framed-User Ascend-FR-Profile-Name="p130east", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-DCE, Ascend-FR-Nailed-Grp=222 MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-27...
Name=fr-asnd-a Active=Yes FR Type=NNI Nailed Grp=333 Ethernet Frame Relay fr-asnd-b Name=fr-asnd-b Active=Yes FR Type=NNI Nailed Grp=444 The next set of parameters specifies the circuit between the two Frame Relay interfaces: 5-28 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
Ascend-FR-Type=Ascend-FR-NNI, Ascend-FR-Nailed-Grp=444 The next set of profiles specifies the circuit between the two Frame Relay interfaces: permconn-max-12 Password="ascend", User-Service=Dialout-Framed-User User-Name="asnd-a", Framed-Protocol=FR-CIR, Ascend-Route-IP=Route-IP-No, Ascend-FR-DLCI=100, Ascend-FR-Profile-Name="fr-asnd-a", Ascend-FR-Circuit-Name="pvc-pipe" permconn-max-13 Password="ascend", User-Service=Dialout-Framed-User User-Name="asnd-b", Framed-Protocol=FR-CIR, MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-29...
The following parameters on MAX-42 define the datalinks to the MAX and MAX-39: Ethernet Frame Relay dce-max Name=dce-max Active=Yes FR Type=DCE Nailed Grp=555 Ethernet Frame Relay nni-39 Name=nni-39 Active=Yes FR Type=NNI Nailed Grp=999 5-30 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
Page 257
The following parameters on MAX-39 define the datalinks to MAX-42 and to the Pipeline 130: Ethernet Frame Relay nni-42 Name=nni-42 Active=Yes FR Type=NNI Nailed Grp=777 Ethernet Frame Relay dce-p130 Name=dce-p130 Active=Yes FR Type=dce Nailed Grp=888 MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-31...
Ascend-FR-Profile-Name="dce-max", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-DCE, Ascend-FR-Nailed-Grp=555 frdlink-max-26 Password="ascend", User-Service=Dialout-Framed-User Ascend-FR-Profile-Name="nni-39", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-NNI, Ascend-FR-Nailed-Grp=999 The next set of profiles specifies the circuit on MAX-42: permconn-max-14 Password="ascend", User-Service=Dialout-Framed-User User-Name="max" Framed-Protocol=FR-CIR, Ascend-Route-IP=Route-IP-No, Ascend-FR-DLCI=100, Ascend-FR-Profile-Name="dce-max", Ascend-FR-Circuit-Name="cir-42" 5-32 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
CLID or DNIS of an incoming call. Once the session is established, it behaves just like a nailed Frame Relay connection with an access MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000...
To configure a Frame relay profile for a Frame Relay switched connection, proceed as in the following example: Open Ethernet > Frame Relay> any profile Specify a Name. For example: Station=fr-sw-fr Set Active to Yes. Set Call Type to Switched. 5-34 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
Set Profile Reqd=Yes. If necessary, set the Id Auth parameter as follows: – Require (for CLID) – Called Require (for DNIS) Open the Encaps Options submenu. Set FR to Yes. MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-35...
Ascend-FR-Profile-Name attribute of the DNIS or CLID profile. Sample RADIUS DNIS profile Following is a sample RADIUS DNIS profile: 3762 Password=“Ascend-DNIS” Ascend-Require-Auth=Not-Require-Auth User-Service=Framed-User, Framed-Protocol=FR, Framed-Address=10.10.10.212, Framed-Netmask=255.255.255.0, Ascend-Route-IP=Route-IP-Yes, 5-36 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
The MAX retrieves the following example RADIUS Route profile when it powers up or when you update routes by executing the Sys > Sys Diag > Upd Rem Cfg command: route-My-MAX4000-1 Password="ascend",User-Service=Dialout-Framed-User Framed-Route="10.10.10.0/24 10.10.10.212 1 n switched-dte1-out" MAX 6000/3000 Network Configuration Guide Preliminary September 29, 2000 5-37...
The value in User-Name matches the name specified in the associated Route profile. • The value in Ascend-FR-Profile-Name matches the name of the associated Frame Relay Data Link profile. • You set Ascend-Call-Type to Switched. 5-38 Preliminary September 29, 2000 MAX 6000/3000 Network Configuration Guide...
Page 265
(For example, the D channel is usually sufficient for email transmissions, but not for WWW pages with graphics, or X.25 Transaction Processing Protocol for Point of Service (T3POS) sends transaction data over the D channel.) MAX 6000/3000 Network Configuration Guide...
Type parameter to specify the type of connection between the local and remote codecs. (A codec–COder/DECoder– is a device that encodes analog data into a digital signal for transmission over a digital medium. Codecs are often used for videoconferencing.) MAX 6000/3000 Network Configuration Guide...
Link Access Procedure (LAP) is a protocol containing a subset of High-Level Data Link Protocol (HDLC) features. In order to maintain compatibility with HDLC, LAP was changed to create Link Access Procedure, Balanced (LAPB) which is a protocol for B channels that use packet-switching mode. MAX 6000/3000 Network Configuration Guide...
Equipment (DCE) is a device that connects the DTE to a communications channel. X.25 window size The default for maximum number of outstanding data packets that can accumulate before the MAX requires an acknowledgment. The default is 2. MAX 6000/3000 Network Configuration Guide...
Page 269
The duration of the Clear-Request timer (the number of one-second ticks the MAX waits before retransmitting a Clear-Request packet). X.25 R23 The number of Clear-Request retransmits the MAX sends before waiting indefinitely for a response. MAX 6000/3000 Network Configuration Guide...
Is the X.25 node a DTE or DCE? X.25 Node Type=DTE Is the link SVC or PVC? X.25 Link Setup Mode=Active X.25 Lowest PVC=1 X.25 Highest PVC=8 Maximum packet size 1024 X.25 Max Pkt Size=1024 MAX 6000/3000 Network Configuration Guide...
Page 271
X.25 Min pkt size=64 X.25 Max pkt size=1024 Specify the X.121 source address to use on this link: X.121 src addr=031344159782738 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide...
You can specify the NUI, consisting of up to six digits, to use in the next call request. The default is null. MAX 6000/3000 Network Configuration Guide...
* which indicates that the MAX should accept any value, requiring a match only on the trailing digits that you specify after the wildcard character. For outgoing calls, the MAX dials only the trailing digits specified, ignoring the beginning wildcard character. MAX 6000/3000 Network Configuration Guide...
Enable IP routing and specify the IP address of the answering unit: Route IP=Yes Ip options... LAN Adrs=10.65.212.226/24 Enable X.25/IP encapsulation and then open the Encaps Options subprofile. Specify the name of the X.25 profile that carries this connection: 6-10 MAX 6000/3000 Network Configuration Guide...
This section lists the parameters related to configuring X.25 PAD connections located in both the Ethernet > Answer > PAD Options and Ethernet > Connections > Connection profile > Encaps Options. (These parameters are described on page 6-8 and following the list below.) MAX 6000/3000 Network Configuration Guide 6-11...
The banner message that the user or a calling device sees when starting an X.25 PAD (Triple-X) session on the MAX. The PAD user can be either a user or a calling device running a script. You can specify up to 32 characters. The default is null. 6-12 MAX 6000/3000 Network Configuration Guide...
Figure 6-2. Example of a X.25 PAD connection 311021755555 To configure this sample X.25 PAD connection. Open the Answer profile and enable X.25/PAD encapsulation. Open a Connection profile, name it, and activate the profile. Enable X.25/PAD encapsulation. MAX 6000/3000 Network Configuration Guide 6-13...
PAD. Table 6-2 lists the X.3 parameters, numbered 1–22. Table 6-2. X.3 parameters Parameter Description Possible values PAD recall 0—Escape not allowed 1—Escape allowed (the default) Echo 0—No echo 1—Echo (the default) 6-14 MAX 6000/3000 Network Configuration Guide...
Page 279
Line folding 0—No line folding (the default) 1–255—Number of characters per line Terminal-server 10—50 bps access speed 5—75 bps 9—100 bps 0—110 bps 1—134.5 bps 6—150 bps 8—200 bps 2—300 bps MAX 6000/3000 Network Configuration Guide 6-15...
Page 280
0–127 (a character from International Alphabet #5) Line delete 0–127 (a character from International Alphabet #5) Line display 0–127 (a character from International Alphabet #5) Editing PAD 0—No editing PAD service signals service signals 1—Editing PAD service signals 6-16 MAX 6000/3000 Network Configuration Guide...
EXP to 0 and LCL to the number of columns to which your terminal expands tabs. The settings enable the PAD to perform correct line folding, line deletion, and character deletion. The keywords function as follows: 6-18 MAX 6000/3000 Network Configuration Guide...
If you specify *P, the screen does not echo the data as you enter it, even if you set X.3 parameter number 2 to Echo. This specification is useful for entering passwords. If you specify *D, the screen echoes the data as you enter it. MAX 6000/3000 Network Configuration Guide 6-19...
Page 284
1 to 32 bytes of data to the remote DTE without being subject to flow control. The exchange of Interrupt packets does not affect the exchange of data packets or flow-control packets. • listen [addr=< address > | data=data] 6-20 MAX 6000/3000 Network Configuration Guide...
In response to the Status command, this signal indicates that a virtual call has been cleared. PAR with X.3 This string is a response to the Set? command. parameter reference numbers and their current values MAX 6000/3000 Network Configuration Guide 6-21...
Ship absent Gateway-detected procedure error Gateway congestion X.25 diagnostic field values Table 6-6 shows the meanings of the X.25 diagnostic codes. Table 6-6. X.25 diagnostic field values Diagnostic value value No additional information Invalid P(S) 6-22 MAX 6000/3000 Network Configuration Guide...
Page 287
Unidentifiable packet Call on one-way LC Invalid packet type on a PVC Reject not subscribed to Packet too short Packet too long Restart packet with nonzero LC Unauthorized interrupt confirmation Unauthorized interrupt Unauthorized reject MAX 6000/3000 Network Configuration Guide 6-23...
PAD prompts, PAD commands, and PAD signals. You can configure the banner messages, PAD prompts, and PAD commands to meet these expectations. Also referred to as a Triple-X PAD, the MAX X.25 PAD supports the X.3, X.28, and X.29 protocols. 6-24 MAX 6000/3000 Network Configuration Guide...
To store the current settings of the PAD parameters in the X.3 profile named Custom, use the following syntax to enter the Storeprof command at the PAD prompt: storeprof custom For instructions on how to set the X.3 parameters, see “X.25 PAD commands” on page 6-18. MAX 6000/3000 Network Configuration Guide 6-25...
COM /* X.25 call connected. */ PROMPT> <ctrl-P> /* After exchanging some data with the called host, the user escapes to command mode. */ PROMPT> PROMPT> clr /* User clears the X.25 call. */ 6-26 MAX 6000/3000 Network Configuration Guide...
T3POS DTE (DTE), the T3POS PAD (PAD) and the T3POS Host (host), as shown in Figure 6-3. Figure 6-3. T3POS setup Asynchronous X.25 connection connection PSDN T3POS PAD T3POS DTE T3POS Host MAX 6000/3000 Network Configuration Guide 6-27...
X.25 packet network. The T3POS PAD (the MAX) converts data arriving from a T3POS DTE to a format that can be transmitted over a packet network. It also ensures reliability and efficiency as described in the protocol specifications. 6-28 MAX 6000/3000 Network Configuration Guide...
Page 293
XRC is the checksum. For all modes except Binary-Local, the checksum is a one character Longitudinal Redundancy Check (LRC) checksum. For Binary-Local mode, the checksum is a two character Cyclic Redundancy Check (CRC) checksum. MAX 6000/3000 Network Configuration Guide 6-29...
T3POS,” Applied Digital Design, version 2.1, March 1994. Specifies error recovery mechanisms between a T3POS DTE and a T3POS PAD on one side and a T3POS PAD and the T3POS host on the other side. 6-30 MAX 6000/3000 Network Configuration Guide...
Via a TCP/IP client to the default TCP modem port 6150 (or to the TCP modem port configured on the unit). • Via a TCP/IP client to port 23 (for Telnet access) or to 513 (for Rlogin access). MAX 6000/3000 Network Configuration Guide 6-31...
AO/DI enables you to send and receive data through a nailed X.25 connection (supported by way of an ISDN D-channel or other forms of nailed connection), using switched ISDN B-channels only when required on the basis of increased bandwidth utilization. 6-32 MAX 6000/3000 Network Configuration Guide...
B Ch #, the MAX dials the first active, available B-channel for which you specify the: • Net/T1 > Line Config > Line profile > Line m > Ch n # parameter • Net/E1 > Line Config > Line profile > Line m > Ch n # parameter MAX 6000/3000 Network Configuration Guide 6-33...
Contact your carrier for the correct value. Set any remaining X.25 parameters as your carrier specifies. 10 Exit the profile and, at the exit prompt, select the exit and accept option. 6-34 MAX 6000/3000 Network Configuration Guide...
From the Connection profile menu, open the Encaps options submenu. Set BACP to Yes. Set both Base Ch Cnt and Max Ch Cnt parameters to the maximum number of channels allowed for the connection. Set InterfaceType to X.25. MAX 6000/3000 Network Configuration Guide 6-35...
Displaying whether or not the MAX supports AO/DI The System > Sys Options window provides a read-only list that identifies the MAX and names each of the features (including AO/DI) which it has been equipped. Press the tab key to 6-36 MAX 6000/3000 Network Configuration Guide...
For example, when the MAX adds a second B-channel on the basis of bandwidth utilization, the following window appears: |-------------------| |AODI1 |Qual Good 05:07:00 | |112k 3 channels | |CLU 64% | |-------------------| The 112k indicates that data flows through the two B-channels only. MAX 6000/3000 Network Configuration Guide 6-37...
MP calls. The following example shows the details of a RADIUS accounting Start record for an X.25 SVC session of an active AO/DI call: Sun Jan 17 12:40:24 1999 User-Name="aodi1" NAS-Identifier=12.12.6.212 NAS-Port=12508 NAS-Port-Type=Sync Acct-Status-Type=Start Acct-Delay-Time=0 Acct-Session-Id="285427838" Acct-Authentic=RADIUS Ascend-Multilink-ID=2 Ascend-Num-In-Multilink=1 Ascend-Modem-PortNo=3 Ascend-Modem-SlotNo=9 Framed-Protocol=MP Framed-Address=13.13.1.201 6-38 MAX 6000/3000 Network Configuration Guide...
Page 304
A second B channel from line 1, channel 2, is added by the AO/DI client at IP address 1.2.3.4. The session number for this second B-channel call is 212345678. The following Start record is generated: 6-40 MAX 6000/3000 Network Configuration Guide...
Page 305
Ascend-Multilink-ID=1 Ascend-Num-In-Multilink=2 Ascend-Modem-PortNo=5 Ascend-Modem-SlotNo=9 Framed-Protocol=MP Framed-Address=1.2.3.4 The AO/DI client drops the other B channel from line 1, channel 1. The following Stop record is generated: Wed Dec 23 16:28:48 1998 User-Name="aodi" NAS-Identifier=12.126.212 NAS-Port=10101 NAS-Port-Type=Sync MAX 6000/3000 Network Configuration Guide 6-41...
Page 306
The AO/DI client drops the X.25 call. The following Stop record is generated: Wed Dec 23 16:32:48 1998 User-Name="aodi1" NAS-Identifier=12.126.212 NAS-Port=12501 NAS-Port-Type=Sync Acct-Status-Type=Stop Acct-Delay-Time=0 Acct-Session-Id="012345678" Acct-Authentic=RADIUS Acct-Session-Time=60 Acct-Input-Octets=321 Acct-Output-Octets=166 Acct-Input-Packets=11 Acct-Output-Packets=6 Ascend-Disconnect-Cause=1 Ascend-Connect-Progress=83 Ascend-Xmit-Rate=9600 Ascend-Data-Rate=9600 Ascend-PreSession-Time=1 Ascend-Pre-Input-Octets=194 Ascend-Pre-Output-Octets=157 Ascend-Pre-Input-Packets=9 Ascend-Pre-Output-Packets=9 Ascend-Multilink-ID=1 Ascend-Num-In-Multilink=0 Ascend-Modem-PortNo=3 6-42 MAX 6000/3000 Network Configuration Guide...
# link is a nailed channel on the X.25 network interface. Ascend-Call-Type= AO/DI, # Ascend-Dial-Number specifies the B-channel number to dial when the # unit needs to initiate the call for adding bandwidth. Ascend-Dial-Number=953762, MAX 6000/3000 Network Configuration Guide 6-43...
(as shown by the User Name field), the caller’s IP address (as shown by the Host Address field), or the mpID. ascend% sh users I Session Line: Slot: Tx Service Host User 6-44 MAX 6000/3000 Network Configuration Guide...
Page 309
13.13.1.201 aodi1 I 285427860 1:22 MP[2] 13.13.1.201 aodi1 ascend% Note that the X.25 channel reports N/A for the Line: Chan field, and reports 9.6k for both the Tx Data and the Rx Data fields. MAX 6000/3000 Network Configuration Guide 6-45...
Table 7-1 lists the number of network bits in the default subnet mask for each class. Table 7-1. IP address classes and number of network bits Class Address range Network bits Class A 0.0.0.0—127.255.255.255 MAX 6000/3000 Network Configuration Guide...
In Figure 7-2, three available bits present eight possible bit combinations. Of the eight possible host addresses, two are reserved, as follows: 000 — Reserved for the network (base address) 111—Reserved for the broadcast address of the subnet MAX 6000/3000 Network Configuration Guide...
You should decide whether to support and configure zero subnetworks for your environment. If you configure them in some cases and treat them as unsupported in other cases, you will encounter routing problems. MAX 6000/3000 Network Configuration Guide...
IP routing, but for which no static routes or Connection profiles have been defined. The unit’s Ethernet interface has the IP address 10.10.10.2 with a subnet mask of 255.255.0.0. MAX 6000/3000 Network Configuration Guide...
WAN IP address can be a local address assigned dynamically when the caller logs in, an address on a subnet of the local network, or a unique IP network address for a remote device. Assignment of interface addresses depends on whether you use system-based routing or interface-based routing. MAX 6000/3000 Network Configuration Guide...
The unit accepts IP packets addressed to a numbered interface, considering them to be destined for the unit itself. (The packet can actually arrive over any interface, and the numbered interface corresponding to the packet’s destination address need not be active.) MAX 6000/3000 Network Configuration Guide...
13.6.7.8. The host 12.1.1.2 and the host assigned 13.1.2.3 share a physical cable segment, but do not communicate directly. The MAX unit must route traffic between the two networks. Figure 7-5. Sample dual IP network Address=12.1.1.2 Address=13.1.2.3 Address=12.1.1.3 Address=13.6.7.8 IP Adrs =12.1.1.1 2nd Adrs =13.9.7.5 MAX 6000/3000 Network Configuration Guide...
On a large corporate backbone, many sites configure subnets to increase the network address space, segment a complex network, and control routing in the local environment. For example, Figure 7-6 shows the main backbone IP network (10.0.0.0) supporting a Lucent GRF router (10.0.0.17). MAX 6000/3000 Network Configuration Guide...
For more information about IP Route profiles, see “Configuring IP routes” on page 7-55. To verify that the unit is connected to the local network, invoke the terminal-server interface and Ping a local IP address or hostname. For example: ascend% ping 10.1.2.3 MAX 6000/3000 Network Configuration Guide...
IP addresses on a separate IP network or subnet, make sure you inform other IP routers about the route to that network or subnet, either by statically configuring those routes or by configuring the unit to dynamically send updates. 7-10 MAX 6000/3000 Network Configuration Guide...
This example shows how to set up network-aligned address pools and use route summarization. It also shows how to enter a static route for the pool subnet and make the Connection profile route private, both of which are requirements when using route summarization. MAX 6000/3000 Network Configuration Guide 7-11...
Note: The MAX unit creates a host route for every address assigned from the pools, and host routes override subnet routes. Therefore, packets whose destination matches an assigned IP address from the pool are properly routed and not discarded or bounced. Because the unit 7-12 MAX 6000/3000 Network Configuration Guide...
To configure the unit to enable BOOTP relay, you must set the Boot Relay Enable parameter to Yes. In addition, you must disable Ethernet > Mod Config > TServ Options > SLIP BOOTP. MAX 6000/3000 Network Configuration Guide 7-13...
WAN connection torn down when a connection fails. List Size The maximum number of DNS addresses presented in the DNS host list for a terminal server session in response to a DNS query. 7-14 MAX 6000/3000 Network Configuration Guide...
Configuring the MAX unit for DNS or WINS address resolution enables the unit to use local DNS or WINS servers to translate between hostnames and IP addresses. The following examples illustrate procedures for configuring address resolution and managing the DNS table. MAX 6000/3000 Network Configuration Guide 7-15...
Page 326
Valid hostnames must adhere to the following rules. Each name in the local DNS table: • Must be unique in the table. • Must start with an alphabetic character, which can be either uppercase or lowercase. • Must be less than 256 characters. 7-16 MAX 6000/3000 Network Configuration Guide...
While the editor is in use, the system cannot look up addresses in the table or perform automatic updates. A table entry is one of the eight table indexes. It includes the hostname, IP address (or addresses), and information fields. MAX 6000/3000 Network Configuration Guide 7-17...
Page 328
Either type a new IP address and press Enter, or leave the current address and press Enter. – To change the IP address, type the new IP address. – If you are changing the name of the entry but not the IP address, just press Enter. 7-18 MAX 6000/3000 Network Configuration Guide...
Default Gateway and Domain Name Server. Plug and Play works with Microsoft Windows 95 (and possibly with other IP stacks) to assign an IP address and other Wide Area Networking settings to a requesting device automatically. With Plug and Play you MAX 6000/3000 Network Configuration Guide 7-19...
To enable Plug and Play, set the DHCP PNP Enabled parameter to Yes. Setting this parameter to Yes with DHCP Spoofing set to Yes is all that is required to enable Plug and Play support. 7-20 MAX 6000/3000 Network Configuration Guide...
Page 331
Set the Group 2 Count parameter to the number of addresses in the pool. The second pool, which can also contain up to 20 addresses, is used only if there are no addresses available in the first pool. MAX 6000/3000 Network Configuration Guide 7-21...
Page 332
IP group 1=192.0.2.1/24 Group 1 count=n The following parameters are optional: Renewal Time=10 Become Def. Router=No IP group 2=0.0.0.0/0 Group 2 count=0 Host 1 IP=192.0.2.2/24 Host 1 Enet=0080c75Be95e Host 2 IP=0.0.0.0/0 Host 2 Enet=000000000000 7-22 MAX 6000/3000 Network Configuration Guide...
The number is limited only to the size of the translation table. The translations between the local network and the Internet or remote network are dynamic and do not need to be preconfigured. MAX 6000/3000 Network Configuration Guide 7-23...
Web or FTP service. This advantage can be realized only if the remote DHCP server is configured to assign the same address whenever a particular local host requests an address. Another reason for using 7-24 MAX 6000/3000 Network Configuration Guide...
Page 335
DHCP requests. In this situation, if the ordinary DHCP clients are connecting to the server over a nonbridged connection, you must have a separate DHCP server to handle the ordinary DHCP requests. The NAT DHCP server only handles NAT DHCP requests. MAX 6000/3000 Network Configuration Guide 7-25...
Routing parameter in the NAT profile to enable NAT, set the Lan parameter to Single IP Addr, and set FR Address to a valid, official IP address. For example: 50-C00 NAT 50-C01 NAT... Routing=Yes Profile=max4 Lan=Single IP addr FR address=10.10.10.10 Static Mapping... Def Server=181.81.8.1 7-26 MAX 6000/3000 Network Configuration Guide...
The MAX performs NAT whenever a connection is made with this Connection profile. The connection can be initiated either by the MAX or by the remote network. Set the Lan parameter to Single IP Addr. MAX 6000/3000 Network Configuration Guide 7-27...
Page 338
Loc Port #. 12 Exit and save the profile. Repeat step 6 through step 12 for any additional ports whose packets you want to route to a specific server and port on the local network. 7-28 MAX 6000/3000 Network Configuration Guide...
Newfoundland, do not have an even hour boundary, the offset includes four digits and is stated in half-hour increments. For example, in Newfoundland the time is 1.5 hours behind UTC and is represented as follows: UTC -0130 MAX 6000/3000 Network Configuration Guide 7-29...
UDP checksums to generate a checksum whenever a UDP packet is transmitted. UDP packets are transmitted for queries and responses related to ATMP, SYSLOG, DNS, ECHOSERV, RADIUS, TACACS, RIP, SNTP, and TFTP. 7-30 MAX 6000/3000 Network Configuration Guide...
Specify the remote IP address In the Connections profile’s IP Options subprofile, the LAN Adrs parameter specifies the IP address of the remote device. Before accepting a call from the far end, the MAX matches this MAX 6000/3000 Network Configuration Guide 7-31...
IP address. If the Pool parameter is null but all other configuration settings enable dynamic assignment, the unit gets IP addresses from the first defined address pool. 7-32 MAX 6000/3000 Network Configuration Guide...
Direct configuration with RIP set to receive, the MAX unit forwards all RIP updates to the specified address. Typically, this is not desirable, because RIP updates are designed to be stored locally by the IP router (in this case, the MAX). MAX 6000/3000 Network Configuration Guide 7-33...
If Framed-IP-Netmask specifies a 32-bit mask, only packets from a single host are accepted. Packets sent from an address that does not match are discarded. Ascend-Multicast-Client Multicast forwarding option. (155) 7-34 MAX 6000/3000 Network Configuration Guide...
Remote host requirements for WAN connections IP hosts, such as UNIX systems, Windows or OS/2 PCs, or Macintosh systems, must have correctly configured TCP/IP software. A remote host calling into the local IP network must also have PPP software. MAX 6000/3000 Network Configuration Guide 7-35...
In this example, Site A is a backbone network and Site B is a single dial-in host with a modem, TCP/IP stack, and PPP software. The PPP software running on the PC at Site B must be 7-36 MAX 6000/3000 Network Configuration Guide...
Page 347
Open a Connection profile for the dial-in user. Set the Station parameter to specify the user’s name, set the Active parameter to activate the profile, and specify the desired encapsulation options. For example: Ethernet Connections Connection profile Station=victor Active=Yes Encaps=PPP MAX 6000/3000 Network Configuration Guide 7-37...
ISP on another IP network, one of the connections can assign an IP address dynamically and the other can configure a host route to the PC. This example shows how to 7-38 MAX 6000/3000 Network Configuration Guide...
Set the Route IP parameter to enable IP routing, and set the LAN Adrs parameter to specify the IP address and subnet of the PC at Site B: Route IP=Yes IP options… LAN Adrs=10.8.9.10/32 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 7-39...
Note: IP Direct connections typically turn off RIP. If the connection is configured to receive RIP, all RIP packets from the far side are kept locally and forwarded to the IP address you specify for IP Direct. 7-40 MAX 6000/3000 Network Configuration Guide...
Set the Route IP parameter to enable IP routing, and set the LAN Adrs parameter to the IP address of the Pipeline at Site B: Route IP=Yes IP options… LAN Adrs=10.9.8.10/22 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 7-41...
In the sample network illustrated in Figure 7-13, the MAX unit connects telecommuters with their own Ethernet networks to the corporate backbone. The unit is on a subnet, and assigns subnet addresses to the telecommuters’ networks. 7-42 MAX 6000/3000 Network Configuration Guide...
Open the Default profile in the Static Rtes menu. Set the Gateway parameter to specify the GRF router’s address as the gateway address: Ethernet Static Rtes Default Name=Default Active=Yes Dest=0.0.0.0/0 Gateway=10.4.4.133 Metric=1 Preference=10 Private=Yes MAX 6000/3000 Network Configuration Guide 7-43...
In the following example, the MAX unit is a system-based router but supports a numbered interface for one of its connections. (If you are not familiar with numbered interfaces, see “Interface-based routing” on page 7-6.) The double-headed arrow in Figure 7-14 indicates the numbered interface for this connection. 7-44 MAX 6000/3000 Network Configuration Guide...
Exit the profile and, at the exit prompt, select the exit and accept option. Following is a comparable RADIUS profile: numbered Password = "localpw" Service-Type = Framed-User, Framed-Protocol = PPP, Ascend-Route-IP = Route-IP-Yes, Framed-IP-Address = 10.5.6.8, Framed-IP-Netmask = 255.255.255.0, MAX 6000/3000 Network Configuration Guide 7-45...
Following are the relevant Connection profile parameters, located in Ethernet > Connections > any Connection profile > IP Options: Parameter Specifies Enables/disables Type of Service (TOS) for this connection. If you set TOS Enabled TOS Enabled to No, none of the other TOS options apply. 7-46 MAX 6000/3000 Network Configuration Guide...
Page 357
Input, the MAX sets TOS bits in packets received on the interface. If you set Apply To to Output, the MAX sets TOS bits in outbound packets. If you set Apply To to Both, the MAX set TOS bits for incoming and outgoing packets. MAX 6000/3000 Network Configuration Guide 7-47...
Page 358
(2048), the MAX sets bits in outbound packets. If you set the attribute to IP-TOS-Apply-To-Both (3072), the MAX sets bits in both incoming and outgoing packets. A string-format filter, which can include an IP TOS filter specification. Ascend-Filter (91) Ascend-Filter will replace binary-based filters. 7-48 MAX 6000/3000 Network Configuration Guide...
Ethernet Connections Connection profile 1 IP options LAN Adrs=10.168.6.120/24 TOS Enabled=Yes Precedence=110 TOS=Throughput Following is a comparable RADIUS profile: sampleProf Password="mypasswd", User-Service=Framed-User Framed-Protocol=PPP, Framed-IP-Address=10.168.6.120 Framed-IP-Netmask=255.255.255.0 Framed-Routing=3 Ascend-IP-TOS=IP-TOS-Throughput Ascend-IP-TOS-Precedence=IP-TOS-Precedence-Pri-Six Ascend-IP-TOS-Apply-To=IP-TOS-Apply-To-Incoming MAX 6000/3000 Network Configuration Guide 7-49...
Page 360
MAX makes no comparison. You can specify that the filter matches the packet if the packet’s destination port number is Less (less than), Eql (equal to), Gtr (greater than), or Neq (not equal to) the Dest-Port value. 7-50 MAX 6000/3000 Network Configuration Guide...
Page 361
[ dstip n.n.n.n/nn ] [ srcip n.n.n.n/nn ][ proto ] [ destport cmp value ] [ srcport cmp value ][ precedence value ] [ type-of-service value ] MAX 6000/3000 Network Configuration Guide 7-51...
10.168.6.24, as shown in “Example of defining a TOS filter” on page 7-53, the TOS settings in the filter are set in those packets. Ethernet Connections Connection profile 1 IP options... TOS Filter=01 7-54 MAX 6000/3000 Network Configuration Guide...
Each IP-routing Connection profile specifies a static route that states, in effect, “to reach system X, send packets out this interface to system Y,” where system Y is another router. MAX 6000/3000 Network Configuration Guide 7-55...
7-31. Each of the configurations shown in that section results in a static route. For an example of the Ethernet > Mod Config profile configuration of the MAX unit’s local IP interface, see “Configuring routing table updates” on page 7-8. 7-56 MAX 6000/3000 Network Configuration Guide...
Page 367
Metric. You can specify a number from 0 to 255. The default value is 100. Zero is the default for connected routes (such as the Ethernet network). The value of 255 means do not use this route. MAX 6000/3000 Network Configuration Guide 7-57...
IP address for the router. This setting is useful when the MAX assigns an IP address from an address pool and RADIUS cannot know the IP address of the caller. 7-58 MAX 6000/3000 Network Configuration Guide...
Exit the profile and, at the exit prompt, select the exit and accept option. Following is a comparable RADIUS default route: route-max-1 Password = "ascend", Service-Type = Outbound-User Framed-Route = "0.0.0.0 10.9.8.10 1 y 100" MAX 6000/3000 Network Configuration Guide 7-59...
Open Ethernet > Mod Config > Route Pref. Set Rip Preference to 150: Ethernet Mod Config Route Pref… Rip Preference=150 Exit the profile and, at the exit prompt, select the exit and accept option. 7-60 MAX 6000/3000 Network Configuration Guide...
MAX does not summarize information, it advertises each route in its routing table as is. For the subnet in the preceding example, the MAX would advertise a route only to 200.5.8.13. This parameter has no affect on RIP-v2. MAX 6000/3000 Network Configuration Guide 7-61...
However, the MAX does not receive information about networks that are reachable through the remote router. Exit the profile and, at the exit prompt, select the exit and accept option. 7-62 MAX 6000/3000 Network Configuration Guide...
Page 373
7.5 minutes. In addition, a large table can require multiple broad- casts for each update, which consumes a lot of bandwidth. OSPF uses a topological database of the network and propagates only changes to the database, which results in more efficient pro- pogation. MAX 6000/3000 Network Configuration Guide...
OSPF enables the flexible configuration of IP subnets. Each route distributed by OSPF has a destination and mask. Two different subnets of the same IP network number can have different sizes (different masks). This capability is commonly referred to as Variable Length Subnet MAX 6000/3000 Network Configuration Guide...
Designated and Backup Designated Routers In OSPF terminology, a broadcast network is any network that has more than two OSPF routers attached and that supports the capability to address a single physical message to all of the attached routers. MAX 6000/3000 Network Configuration Guide...
Figure 8-3 shows how costs direct traffic over high-speed links. For example, if Router-2 in Figure 8-3 receives packets destined for Host B, it routes them through Router-1, across two T1 links (Cost=20), rather than across one 56Kbps B-channel to Router-3 (Cost=240). MAX 6000/3000 Network Configuration Guide...
These routers are Area Border Routers (ABRs). In Figure 8-4, all of the routers are ABRs. If you set up the ABRs and area boundaries correctly, link-state databases are unique to an area. MAX 6000/3000 Network Configuration Guide...
NSSAs can originate and import Type-7 LSAs. Like stub areas, NSSAs cannot originate or import Type-5 LSAs. • Type-7 LSAs can only be advertised within a single NSSA. They are not flooded throughout the AS as are Type-5 LSAs. MAX 6000/3000 Network Configuration Guide...
Actual routing tables also contain externally derived routing data, which is advertised throughout the AS but kept separate from the link-state data. Also, each external route can be tagged by the advertising MAX 6000/3000 Network Configuration Guide...
Table 8-3. Shortest-path tree and resulting routing table for Router-2 Destination Next Hop Metric Network-1 Router-1 Network-2 Direct Network-3 Direct Network-4 Router-2 Table 8-4. Shortest-path tree and resulting routing table for Router-3 Destination Next Hop Metric Network-1 Router-2 Network-2 Router-2 Network-3 Direct Network-4 Direct MAX 6000/3000 Network Configuration Guide...
Ethernet profile, as an OSPF router in the backbone area. To configure MAX-1 as an OSPF router on Ethernet, you need to make sure that the MAX is configured as an IP host and then configure OSPF features. MAX 6000/3000 Network Configuration Guide...
A setting of 0 excludes the MAX from becoming a DR/BDR. The higher the priority value of the MAX relative to other OSPF routers on the network, the better the chances that it will become a BDR/DR. 8-10 MAX 6000/3000 Network Configuration Guide...
Page 383
If access to the backbone area requires authentication, set the AuthType parameter to specify the authentication method and depending on which authentication method you select, set either the AuthKey or KeyID parameter to specify the password. For example: AuthType=Simple AuthKey=lucent0 MAX 6000/3000 Network Configuration Guide 8-11...
Open the Connection profile for the remote MAX unit, enable the Route IP parameter, and configure the IP routing connection. For example: Ethernet Connections 90-101 Cprofile1 IP options... LAN Adrs=10.2.3.4/24 WAN Alias=0.0.0.0 IF Adrs=0.0.0.0 Metric=7 Preference=N/A Private=No 8-12 MAX 6000/3000 Network Configuration Guide...
To enable OSPF to add the RIP-v2 routes to its routing table, configure RIP-v2 normally in this Connection profile. OSPF imports all RIP routes as Type-2 ASEs. In this example, RIP is turned off on the link and ASE information is configured explicitly. MAX 6000/3000 Network Configuration Guide 8-13...
Page 386
T1 link: Cost=240 Set the ASE-type parameter to specify the ASE type for this route. ASE-type=Type 2 This parameter specifies the type of metric to be advertised for an external route. 8-14 MAX 6000/3000 Network Configuration Guide...
Note: Set the NSSA-ASE7 parameter to Advertise, or to DoNotAdvertise, to specify whether you want to advertise this route outside the NSSA. The settings for the remaining parameters depend on your environment. Metric= Preference= Private= Ospf-Cost= LSA-type= ..ASE-tag= Third-Party= MAX 6000/3000 Network Configuration Guide 8-15...
Page 388
Configuring OSPF Routing Configuring OSPF routing in the MAX Exit the profile and, at the exit prompt, select the exit and accept option. Reset the MAX. 8-16 MAX 6000/3000 Network Configuration Guide...
Page 389
IGMP packets. The MAX appears to multicast clients to be an MBONE router, because it forwards IGMP queries to those clients, receives their responses, and forwards multicast traffic. MAX 6000/3000 Network Configuration Guide...
Connection profile to Yes). With this setting, the MAX begins handling IGMP requests and responses on the interface. It does not begin forwarding multicast traffic until you set the Ethernet > Mod Config > Multicast > Rate Limit parameter. MAX 6000/3000 Network Configuration Guide...
224.0.0.6/32. Multicast address for all OSPF Designated Routers on the net- work. The MAX does not forward packets sent to this address. If you disable OSPF routing, this route changes from local to a black-hole interface. MAX 6000/3000 Network Configuration Guide...
MAX polls for multicast traffic, waits for the duration of the interval, then polls again. HeartBeat Slot Count specifies how many times to poll before comparing the number of heartbeat packets received to the Alarm Threshold. MAX 6000/3000 Network Configuration Guide...
Ethernet Mod Config Multicast... Forwarding=Yes Membership Timeout=60 Mbone Profile= Client=No Rate Limit=5 Set the HeartBeat Addr and Heartbeat UDP parameters to specify a heartbeat group address and UDP port for monitoring heartbeat packets. For example: MAX 6000/3000 Network Configuration Guide...
Win 95 Win95 ISDN modem Note: This example does not use heartbeat monitoring. If you want to configure the MAX for heartbeat monitoring, see the sample settings in “Examples of multicast forwarding configuration” on page 9-5. MAX 6000/3000 Network Configuration Guide...
Multicast Rate Limit parameter to a number lower than the default of 100: Ethernet Connections 90-106 Cprofile6 Ip options... Multicast Client=Yes Multicast Rate Limit=5 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide...
Page 397
L2TP tunnel between itself and the private network. Note: Any MAX unit supporting PPTP or L2TP does not display a terminal-server prompt to dial-in users, because all dial-in calls are immediately transferred to PPTP or L2TP servers. MAX 6000/3000 Network Configuration Guide 10-1...
The Foreign Agent dials the Home Agent, and authenticates and establishes an IP connection in the usual way. The Foreign Agent informs the Home Agent that the mobile client is connected, and requests a tunnel. The Foreign Agent sends up to 10 RegisterRequest messages at 10-2 MAX 6000/3000 Network Configuration Guide...
MTU of at least smaller than 1528 bytes (unless the packets are compressed). You can push fragmentation and reassembly tasks to connection end-points (a mobile client and a device on the home network) by setting an MTU limit. Client software then MAX 6000/3000 Network Configuration Guide 10-3...
To discover the path MTU, some clients normally send packets that are larger than the negotiated Maximum Receive Unit (MRU) and that have the Don’t Fragment (DF) bit set. Such packets are returned to the client with an ICMP message informing the client that the host 10-4 MAX 6000/3000 Network Configuration Guide...
Idle limit=N/A ATMP SNMP Traps=No Following are the parameters (shown with sample settings) for the IP routing connection to the Home Agent: Ethernet Mod Config Ether options... IP Adrs=10.65.212.226/24 Ethernet Connections 90-101 Connection profile 1 MAX 6000/3000 Network Configuration Guide 10-5...
Page 402
Framed-IP-Address=200.1.1.2, Framed-IP-Netmask=255.255.255.0, Ascend-Primary-Home-Agent=10.1.2.3, Ascend-Home-Agent-Password="private" Ascend-Home-Agent-UDP-Port=5150 Tunnel-Type=ATMP, Tunnel-Server-Endpoint="atmp-ha1.example.com", Tunnel-Password="tunnel-password" Following are the parameters (shown with sample settings) for creating RADIUS user profiles for mobile clients running NetWare: node2 Password="ipx-unit" User-Service=Framed-User, Ascend-Route-IPX=Route-IPX-Yes, Framed-Protocol=PPP, Ascend-IPX-Peer-Mode=IPX-Peer-Dialin, Framed-IPX-Network=40000000, Ascend-IPX-Node-Addr=123456789012, 10-6 MAX 6000/3000 Network Configuration Guide...
IPX. Descriptions of the attributes follow the tables. Table 10-1. Required RADIUS attributes to reach an IP home network Home Agent in router mode Home Agent in gateway mode Ascend-Primary-Home-Agent Ascend-Primary-Home-Agent Ascend-Home-Agent-Password Ascend-Home-Agent-Password MAX 6000/3000 Network Configuration Guide 10-7...
“Configuring a Home Agent in gateway mode” on page 10-15. Ascend-IPX-Peer-Mode Dial-in NetWare clients must specify IPX-Peer-Dialin. This setting enables the Foreign Agent to handle RIP and SAP advertisements and assign the mobile client a virtual IPX network number. 10-8 MAX 6000/3000 Network Configuration Guide...
Auth Timeout=1 Auth Key-=[] Auth Pool=No Auth Req=Yes Password Server=No Password Port=N/A Local Profile First=No Sess Timer=0 Auth Src Port=0 Auth Send Attr 6,7=Yes For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 10-9...
The procedure for configuring a Foreign Agent to support IPX connections that use ATMP is very similar to one for IP. The only difference is in the mobile client’s user profile, as shown in the following example: node2 Password="ipx-unit" User-Service=Framed-User, Ascend-Route-IPX=Route-IPX-Yes, Framed-Protocol=PPP, Ascend-IPX-Peer-Mode=IPX-Peer-Dialin, Framed-IPX-Network=40000000, Ascend-IPX-Node-Addr=123456789012, 10-10 MAX 6000/3000 Network Configuration Guide...
The MAX requires settings for the IPX routing parameters in the Ethernet profile only if the MAX is routing IPX. Following are the parameters (shown with sample settings) used for configuring a Home Agent in router mode: Ethernet Mod Config IPX Routing=Yes Ether options... MAX 6000/3000 Network Configuration Guide 10-11...
Page 408
Password Used to authenticate the ATMP tunnel itself. Must match the password specified in the Ascend-Home-Agent-Password attribute of each mobile client’s RADIUS profile. (All mobile clients use the same password for that attribute.) 10-12 MAX 6000/3000 Network Configuration Guide...
Page 409
Open Ethernet > Mod Config > Ether Options and verify that the LAN interface has an IP address. You can also set routing options. For example: Ethernet Mod Config Ether options... IP Adrs=10.1.2.3/24 RIP=On Open the ATMP Options subprofile, set ATMP Mode to Home, and set Type to Router. MAX 6000/3000 Network Configuration Guide 10-13...
Page 410
For details, see Chapter 11, “Configuring IPX Routing.” Open the ATMP Options subprofile, set ATMP Mode to Home, and set Type to Router. ATMP options... ATMP Mode=Home Type=Router Specify the password used to authenticate the tunnel (Ascend-Home-Agent-Password). 10-14 MAX 6000/3000 Network Configuration Guide...
(not in the Home Agent). The static route must specify the Home Agent as the route to the mobile client. That is, the route’s destination address specifies the Framed-Address of the mobile client, and its gateway address specifies the IP address of the Home Agent. MAX 6000/3000 Network Configuration Guide 10-15...
Page 412
Gateway-mode parameters Configuring a Home Agent in gateway mode involves the following parameters (shown with sample settings): Ethernet Mod Config IPX Routing=Yes Ether options... IP Adrs=10.1.2.3/24 IPX Frame=802.2 IPX Enet #=00000000 ATMP options... ATMP Mode=Home 10-16 MAX 6000/3000 Network Configuration Guide...
Page 413
The nailed connection to the home network uses the following parameters (shown with sample settings): Ethernet Connections any Connection profile Station=homenet Active=Yes Encaps=MPP Dial #=N/A Calling #=N/A Route IP=Yes Route IPX=Yes IP options... LAN Adrs=5.9.8.2/24 MAX 6000/3000 Network Configuration Guide 10-17...
Page 414
IP configuration and Connection profile The cross-Internet connection to the Foreign Agent is an IP routing connection that the MAX authenticates and establishes in the usual way. For details, see Chapter 7, “Configuring IP Routing.” 10-18 MAX 6000/3000 Network Configuration Guide...
Page 415
Exit the profile and, at the exit prompt, select the exit and accept option. Open a Connection profile and configure an IP routing connection to the Foreign Agent. For example: Ethernet Connections any Connection profile Station=foreign-agent MAX 6000/3000 Network Configuration Guide 10-19...
Page 416
Open Ethernet > Mod Config > Ether Options and verify that the LAN interface has an IP address (required for communication with the Foreign Agent) and can route IPX. For example: Ethernet Mod Config IPX Routing=Yes Ether options… 10-20 MAX 6000/3000 Network Configuration Guide...
Page 417
Open a Connection profile and configure a nailed WAN link that routes IPX to the home network. For example: Ethernet Connections any Connection profile Station=homenet Active=Yes Encaps=MPP PRI # Type=National (for ISDN PRI lines only) Dial #=555-1212 Route IPX=Yes Encaps options... Send Auth=CHAP Recv PW=homenet-pw Send PW=my-pw MAX 6000/3000 Network Configuration Guide 10-21...
You can configure the MAX to act as both a Home Agent and Foreign Agent on a tunnel-by-tunnel basis. Figure 10-5 shows a sample network topology that has a MAX acting as a Home Agent for Network B and a Foreign Agent for Network A. 10-22 MAX 6000/3000 Network Configuration Guide...
Then set the Foreign Agent aspect of the multimode configuration: Open the Auth subprofile and configure RADIUS authentication. For example: Auth... Auth=RADIUS Auth Host #1=10.23.45.11/24 Auth Host #2=0.0.0.0/0 Auth Host #3=0.0.0.0/0 Auth Port=1645 Auth Timeout=1 Auth Key-=[] MAX 6000/3000 Network Configuration Guide 10-23...
Page 420
Finally, set the Home Agent aspect of the multimode configuration: Open a Connection profile and configure an IP routing connection to the Network B Foreign Agent. For example: Ethernet Connections any Connection profile Station=foreign-agent Active=Yes Encaps=MPP 10-24 MAX 6000/3000 Network Configuration Guide...
For example, to connect to a home network whose router has the following address: 10.1.2.3/28 The Foreign Agent’s RADIUS entry for the remote router would contain lines such as the following: node1 Password="top-secret" Ascend-Metric=2, Framed-Protocol=PPP, Ascend-IP-Route=Route-IP-Yes, Framed-Address=10.168.6.21, Framed-Netmask=255.255.255.240, Ascend-Primary-Home-Agent=10.1.2.3, Ascend-Home-Agent-Password="private" MAX 6000/3000 Network Configuration Guide 10-25...
Home Agent. In this example, the Home Agent is in the gateway mode (it forwards packets from the mobile client across a nailed WAN link to the home IPX network): mobile-ipx Password="unit" User-Service=Framed-User, Ascend-Route-IPX=Route-IPX-Yes, Framed-Protocol=PPP, Ascend-IPX-Peer-Mode=IPX-Peer-Dialin, 10-26 MAX 6000/3000 Network Configuration Guide...
PPTP tunnel solely on the basis of the phone number dialed. Following are the PPTP PAC configuration parameters (shown with sample settings): Ethernet Mod Config L2 Tunneling Options... PPTP Enabled=Yes Line 1 tunnel type=PPTP MAX 6000/3000 Network Configuration Guide 10-27...
Internet to the corporate server. In this example, the MAX unit’s fourth WAN line is dedicated to PPTP connections to that server. Figure 10-6. PPTP tunnel Modem Windows NT Win95 server (PNS) Pipeline Win95 ISDN 10.65.212.11 modem PPTP tunnel Win95 10-28 MAX 6000/3000 Network Configuration Guide...
Turn on PPTP, and specify the PNS IP address for Route Line 2. Ethernet Mod Config L2 Tunneling Options... PPTP Enabled=Yes Line 1 tunnel type=None Route line 1=0.0.0.0 Line 2 tunnel type=PPTP Route line 2=10.65.212.11 Line 3 tunnel type=None MAX 6000/3000 Network Configuration Guide 10-29...
Enter the command at the terminal-server prompt as follows: pptp pptp_server where pptp_server is the IP address or hostname of the PPTP server. When you enter the command, the system displays the following text: PPTP: Starting session PPTP Server pptp_server 10-30 MAX 6000/3000 Network Configuration Guide...
Figure 10-8 shows an ISP POP MAX, acting as an LAC, communicating across the WAN with a private network. Clients dial into the ISP POP and are forwarded across the Internet to the private network. MAX 6000/3000 Network Configuration Guide 10-31...
On the LNS, you must create a Names/Passwords profile where: • The value in the Ethernet > Names/Passwords > Name parameter matches the value of the System > Sys Config > Name parameter on the LAC. 10-32 MAX 6000/3000 Network Configuration Guide...
The LAC is responsible for requesting L2TP tunnels to the LNS. You configure the LAC to determine when a dial-in connection should be tunneled, and you can specify the LNS used for the connection. MAX 6000/3000 Network Configuration Guide 10-33...
The default is seven. Set the parameter to 0 (zero) to disable flow control in the receiving direction. The MAX continues to perform flow control for the sending direction regardless of the value of L2TP RX Window. 10-34 MAX 6000/3000 Network Configuration Guide...
LNS in dotted decimal notation (N.N.N.N, where N is a number from 0 to 255.) You must set this attribute to an accessible IP hostname or address. Tunnel-Password (69) Shared secret for authenticating L2TP tunnels. MAX 6000/3000 Network Configuration Guide 10-35...
Options. For example: L2 Tunneling Options... Line 1 tunnel = L2TP Route Line 1 = lns.example.com In the previous example, the WAN line is dedicated to an L2TP tunnel routed to the lns.example.com server. 10-36 MAX 6000/3000 Network Configuration Guide...
Corporation A Virtual Private Network Before Lucent Technologies introduced VRouters, the MAX unit maintained a single IP routing table that enabled the router to reach any interface. In that context, each interface known to the system required a unique address.
Active. To do this, you must set the Name parameter in the Virtual Routers profile.You must set the Active parameter, also in the Virtual Routers profile, to Yes. For example: Name=vr1 Active=Yes 10-38 MAX 6000/3000 Network Configuration Guide...
The VRouter name you specify must also be specified by the Ethernet > Mod Config > L2 Tunneling Options > System Name parameter. Otherwise, the tunneling connection reverts to the MAX unit’s main router. MAX 6000/3000 Network Configuration Guide 10-39...
Page 437
For that reason, use PAP and CHAP, which require password authentication, unless you configure IP routing in the same Connection profile. Note: If you have a MAX unit running Multiband Simulation, disable IPX routing. MAX 6000/3000 Network Configuration Guide 11-1...
FFFFFFFE, if available, instead of simply dropping the packet. If more than one IPX router is advertising the default route, the unit makes a routing decision based on hop and tick count. 11-2 MAX 6000/3000 Network Configuration Guide...
However, static routes help prevent timeouts when a client takes a long time to locate a server across a remote WAN link. (For more information, see “Configuring static IPX routes” on page 11-19, or see the Configurator Online Help for information about parameters in a profile.) MAX 6000/3000 Network Configuration Guide 11-3...
If UNIX clients access NetWare servers through TCP/IP (rather than UNIXWare), the MAX unit must be configured as either a bridge or an IP router. Otherwise, TCP/IP packets do not make it across the connection. 11-4 MAX 6000/3000 Network Configuration Guide...
MAX. If the client does not have a unique node address, the MAX assigns the node address as well. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 11-5...
To enter the configuration used in this example: Open Ethernet > Mod Config and set IPX Routing to Yes: Ethernet Mod Config IPX Routing=Yes Open the Ether Options subprofile. 11-6 MAX 6000/3000 Network Configuration Guide...
Connection profiles or RADIUS profiles. Answer profile and Connection profile parameters Following are the related Answer profile and Connection profile parameters (shown with sample settings): Ethernet Answer PPP options... Route IPX=Yes Recv Auth=Either Session options... IPX SAP Filter=1 MAX 6000/3000 Network Configuration Guide 11-7...
Page 444
If this password is not sent by the far-end device, authentication fails. For PPP links, the password can consist of up to 20 characters. For X.25/PAD, it can consist of 48 characters. 11-8 MAX 6000/3000 Network Configuration Guide...
Four-byte hexadecimal IPX network number for the link to the (23) client. This address is used in Access-Accept packets. Ascend-IPX-Alias (224) A second IPX network number, to be used only when connecting to non-Ascend routers that use numbered interfaces. MAX 6000/3000 Network Configuration Guide 11-9...
MAX local to IPX servers responds to NCP watchdog requests as a proxy for clients on the other side of an IPX routing or IPX bridging connection. Responding to such requests is commonly called watchdog spoofing. 11-10 MAX 6000/3000 Network Configuration Guide...
Configuring a dial-in client connection In this example, a NetWare client dials into a corporate IPX network by using PPP dial-in software. Figure 11-1 shows a corporate network supporting both NetWare servers and clients. MAX 6000/3000 Network Configuration Guide 11-11...
Encaps options... Recv PW=scottpw 10 Open the IPX Options subprofile and specify a dial-in client: IPX options... Peer=Dialin IPX RIP=None 11 Exit the profile and, at the exit prompt, select the exit and accept option. 11-12 MAX 6000/3000 Network Configuration Guide...
To establish the connection shown in Figure 11-2, you would configure the unit at Site A, enable IPX routing for its Ethernet interface, and configure a static route to the remote server. The same procedures would apply to Site B. MAX 6000/3000 Network Configuration Guide 11-13...
Page 450
SAP HS Proxy Net#4=N/A SAP HS Proxy Net#5=N/A SAP HS Proxy Net#6=N/A Following is a comparable RADIUS profile: SITEBGW Password = “hello” Service-Type = Framed-User, Framed-Protocol = MPP, Ascend-Route-IPX = Route-IPX-Yes, Ascend-IPX-Peer-Mode = IPX-Peer-Router 11-14 MAX 6000/3000 Network Configuration Guide...
Page 451
Connections menu. For example, the Connection profile defined as 90-102 is #2. Set up the Connection profile as follows: Ethernet Connections 90-102 #2... Station=SITEAGW Active=Yes Encaps=MPP PRI # Type=National Dial #=555-1213 Route IPX=Yes MAX 6000/3000 Network Configuration Guide 11-15...
In this example, the MAX unit connects to a local IPX network that supports both servers and clients, and connects to a geographically remote network that supports one or more NetWare clients. Figure 11-3 shows the setup. 11-16 MAX 6000/3000 Network Configuration Guide...
Assign the MAX a system name in the System > Sys Config profile. This example uses the name SITEAGW. Open the Connection profile for Site B, and set up the Connection profile as follows: Ethernet Connections SITEBGW Station=SITEBGW Active=Yes Encaps=MPP PRI # Type=National Dial #=555-1212 Route IPX=Yes MAX 6000/3000 Network Configuration Guide 11-17...
Page 454
SAP HS Proxy Net#2=N/A SAP HS Proxy Net#3=N/A SAP HS Proxy Net#4=N/A SAP HS Proxy Net#5=N/A SAP HS Proxy Net#6=N/A Exit the profile and, at the exit prompt, select the exit and accept option. 11-18 MAX 6000/3000 Network Configuration Guide...
The remote server’s internal network number. (If you are not familiar with internal network numbers, see the Novell documentation.) The remote server’s node number for the NetWare file servers is typically 0000000000001 (the default setting). MAX 6000/3000 Network Configuration Guide 11-19...
Name of the dialout user profile that uses the route. When the MAX receives a query for the specified server or a packet addressed to that server, it finds the referenced profile and dials the connection. 11-20 MAX 6000/3000 Network Configuration Guide...
Set the Hop Count and Tick Count parameters to specify the distance to the server in hops and IBM PC clock ticks, respectively. (The default values are appropriate unless the server is very distant.) Hop Count=2 Tick Count=12 MAX 6000/3000 Network Configuration Guide 11-21...
Out SAP filter 01-8 Valid=Yes Type=Exclude Server Type=0004 Server Name=SERVER-1 Ethernet Mod Config Ether options... IPX SAP Filter=1 Ethernet Answer Session options... IPX SAP Filter=2 Ethernet Connections Connection profile 1 Session options... IPX SAP Filter=2 11-22 MAX 6000/3000 Network Configuration Guide...
When applied in the Answer profile, a SAP filter screens service advertisements from across the WAN. When applied in a Connection profile, a SAP filter screens service advertisements to and from a specific WAN connection. MAX 6000/3000 Network Configuration Guide 11-23...
Repeat the same assignment in Connections > Connection profile > Session Options. Ethernet Connections Connection profile Session options... IPX SAP Filter=1 Exit the profile and, at the exit prompt, select the exit and accept option. 11-24 MAX 6000/3000 Network Configuration Guide...
For example, when a user on a network without a router selects a device in the Chooser, the MAC OS computer sends out a Name Binding Protocol (NBP) Lookup as a broadcast packet. Because a bridge forwards all broadcast traffic, all devices on the network receive the Lookup MAX 6000/3000 Network Configuration Guide 12-1...
AppleTalk subnetworks are either nonextended or extended. Nonextended networks theoretically allow up to 254 nodes. A nonextended network has one network number (not a range) and one zone. Examples of nonextended networks are LocalTalk and AppleTalk Remote Access (ARA) dial-up networks. 12-2 MAX 6000/3000 Network Configuration Guide...
AppleTalk network can use network numbers 300, 301, 302, and so on in their ranges. As an example, network number 310 is available to a new network segment Zones can be shared among network segments. In Figure 12-1, network 100-109 supports zone SALES. So does network 300-309. MAX 6000/3000 Network Configuration Guide 12-3...
The user sends the print job to the printer. When the print job is complete and no data packets are passing through the connection, the MAX units continue to pass routing information. 12-4 MAX 6000/3000 Network Configuration Guide...
Note: You should configure the MAX as a nonseed router provided there is at least one seed router on the local network. Having only one seed router on a local network MAX 6000/3000 Network Configuration Guide 12-5...
(You cannot set the Route AppleTalk parameter if AppleTalk is set to No in the Ethernet > Mod Config > AppleTalk Options profile or if AppleTalk Router is set to Off in that profile’s AppleTalk Options submenu.) 12-6 MAX 6000/3000 Network Configuration Guide...
Configuring an AppleTalk connection with RADIUS You can configure an AppleTalk-routed connection in a RADIUS user profile and configure static AppleTalk routes in a RADIUS pseudo-user file. For more information, see the TAOS RADIUS Guide and Reference. MAX 6000/3000 Network Configuration Guide 12-7...
Page 469
In addition, routers support multiple transmission paths to a given destination, enhancing the reliability and performance of packet delivery. Note: If you have a MAX unit running Multiband Simulation, disable bridging. MAX 6000/3000 Network Configuration Guide 13-1...
For details, see “Configuring proxy mode on the MAX” on page 13-17. (ARP is a protocol that maps an IP address to a physical hardware address, thus enabling a unit to identify hosts on an Ethernet LAN.) 13-2 MAX 6000/3000 Network Configuration Guide...
Ethernet controller.) You enable packet bridging by opening Ethernet > Mod Config and setting the Bridging parameter to Yes: MAX 6000/3000 Network Configuration Guide 13-3...
0000D801CFF2 SITEA 080045CFA123 SITEA 08002B25CC11 SITEA 08009FA2A3CA SITEB Entries in the unit’s bridge table must be relearned within a fixed aging limit, or they are removed from the table. 13-4 MAX 6000/3000 Network Configuration Guide...
In order for the MAX to accept inbound bridged connections, the Bridge parameter must be enabled and the Recv Auth parameter must specify a form of password authentication must be enabled. The Bridge and Recv Auth parameters are located in Ethernet > Answer > PPP Options. MAX 6000/3000 Network Configuration Guide 13-5...
Names/Passwords profile, the name can consist of up to 31 characters. The name you specify must be unique within the list of profiles of the same type. In addition, Lucent strongly recommends that you do not use the same name for a Names/Passwords profile and a Connection profile. 13-6 MAX 6000/3000 Network Configuration Guide...
To specify a Connection profile, note its menu-item number in the Connections menu, then enter the unique portion of that number as the value for the Connection # parameter. MAX 6000/3000 Network Configuration Guide 13-7...
You create a pseudo-user profile to store information that the MAX can query—in this case, in order to store bridging information. For a unit-specific bridge profile, specify the first line of a pseudo-user profile in this format: 13-8 MAX 6000/3000 Network Configuration Guide...
RADIUS loads the data to create the bridging tables. Bridge profile configuration examples The following profile specifies two bridging table entries. Bridge-Ascend-1 Password="Ascend", User-Service=Dialout-Framed-User Ascend-Bridge-Address="2:2:3:10:11:12 Prof1 1.2.3.4 1", Ascend-Bridge-Address="2:2:3:13:14:15 Prof2 5.6.7.8 2" MAX 6000/3000 Network Configuration Guide 13-9...
Open a Connection profile (in this example profile #5), and set the following parameters: Ethernet Connections SITEBGW... Station=SITEBGW Active=Yes Encaps=PPP Bridge=Yes Dial Brdcast=No Note: Dial Brdcast is not needed because of the Bridge Adrs profile configured next. Configure password authentication. For example: 13-10 MAX 6000/3000 Network Configuration Guide...
Page 479
Exit the profile and, at the exit prompt, select the exit and accept option. Open an Ethernet > Bridge Adrs profile. Specify a node’s Ethernet address and the IP address (if known) on the remote network: MAX 6000/3000 Network Configuration Guide 13-11...
MAX routes and spoofs. The setting is based on the type of IPX frame used by the majority of NetWare servers on Ethernet network (IEEE 802.2 by MAX 6000/3000 Network Configuration Guide 13-13...
Page 482
In this situation, you should set the Netware t/o timer by setting the Netware t/o parameter to specify the timer in minutes. The timer begins counting down as soon as the link goes down. When the timer expires, the unit stops responding to watchdog packets and the 13-14 MAX 6000/3000 Network Configuration Guide...
Enable bridging and specify an authentication protocol in the Answer > PPP Options profile. For example: Ethernet Answer PPP options... Bridge=Yes Recv Auth=Either Open a Connection profile and set the following parameters: Ethernet Connections Connection profile Station=SITEBGW Active=Yes Encaps=PPP Route IPX=No MAX 6000/3000 Network Configuration Guide 13-15...
Specify the IPX frame type in the Ethernet > Mod Config > Ether Options profile. For example: Ethernet Mod Config Ether options... IPX Frame=802.3 Enable bridging and specify an authentication protocol in the Answer profile. For example: Ethernet Answer PPP options... Bridge=Yes Recv Auth=Either 13-16 MAX 6000/3000 Network Configuration Guide...
ARP request with the Ethernet (physical) address specified in the Bridge Adrs profile, and brings up the specified connection. In effect, the unit acts as a proxy for the node that actually has that address. MAX 6000/3000 Network Configuration Guide 13-17...
To use generic filters effectively, you need to know the contents of certain bytes in the packets you wish to filter. Protocol specifications are usually the best source of such information. MAX 6000/3000 Network Configuration Guide 14-1...
When you apply a call filter, its forwarding action (forward or drop) does not affect which packets are sent across an active connection. The forwarding action of a call filter determines which packets can either initiate a connection or reset a session’s timer. When a session’s idle 14-2 MAX 6000/3000 Network Configuration Guide...
If the Src Port Cmp parameter is not set to None, compare the Src Port # number to the source port number of the packet. If they do not match as specified by the Src Port Cmp parameter, the comparison fails. MAX 6000/3000 Network Configuration Guide 14-3...
If the Src Socket Cmp parameter is not set to None, compare the Src Socket # to the source socket number of the packet. If they do not match as specified by the Src Socket Cmp parameter, the comparison fails. 14-4 MAX 6000/3000 Network Configuration Guide...
In a RADIUS filter definition, you specify the direction in which to monitor the data stream as in or out. This specification provides the same function as the Input Filters and Output Filters parameters in a local profile. The following example shows an input-filter definition in RADIUS. MAX 6000/3000 Network Configuration Guide 14-5...
Forward parameter in a local profile. The following example shows an input filter whose forwarding action is to drop matching packets. test-user Password="test-pw" Ascend-Data Filter="ip in drop tcp dstport > 1023" 14-6 MAX 6000/3000 Network Configuration Guide...
Type of comparison to perform. If Compare is set to Yes, the comparison succeeds (the filter matches) if the contents do not equal the specified value. For a filter that requires the packet contents to equal the specified value, leave Compare set to No. MAX 6000/3000 Network Configuration Guide 14-7...
The direction and forwarding action of the next filter must be the same as the current filter, or the MAX unit ignores this flag. 14-8 MAX 6000/3000 Network Configuration Guide...
Mask=0f:ff:ff:ff:00:00:00:f0:00:00:00:00 Value=07:fe:45:70:00:00:00:90:00:00:00:00 Compare=no More=no and the following packet contents: 2A 31 97 FE 45 70 12 22 33 99 B4 80 75 the filter test the value of bytes three (97) through ten (99). MAX 6000/3000 Network Configuration Guide 14-9...
In the sixth byte, 7 and 0 match the sixth byte specified by the Value parameter. • The seventh (12), eighth (22), and ninth (33) bytes are ignored because the mask has zeroes in those places. 14-10 MAX 6000/3000 Network Configuration Guide...
The IP Filter subprofile contains the following parameters (shown with their default values): Input Filters In Filter NN Type=Generic IP... Src Mask=0.0.0.0 Src Adrs=0.0.0.0 Dst Mask=0.0.0.0 Dst Adrs=0.0.0.0 Protocol= Src Port Cmp=None Src Port #=0 Dst Port Cmp=None MAX 6000/3000 Network Configuration Guide 14-11...
Page 498
For more details, see “Filtering by port numbers” on page 14-14. TCP Estab Enable/disable application of the filter only to packets in an established TCP session. Applicable only if the protocol number has been set to 6 (TCP). 14-12 MAX 6000/3000 Network Configuration Guide...
You can specify that the filter matches the packet if the packet’s port number is Less (<), Eql (=), Gtr (>), or Neq (!=) the port number specified in the filter. 14-14 MAX 6000/3000 Network Configuration Guide...
Forward=Yes, the third filter uses all default values. Because Forward is set to Yes, the MAX unit forwards all remaining packets (those with nonlocal source addresses) to the Ethernet. Input filters... In filter=03 Type=IP Valid=Yes IP..Forward=Yes MAX 6000/3000 Network Configuration Guide 14-15...
Web server’s destination address at a destination TCP port that can be used for Telnet or FTP: Input filters... In filter=01 Type=IP Valid=Yes IP..Forward=Yes Protocol=6 Dst Mask=255.255.255.255 Dst Adrs=10.9.250.5 Dst Port Comp=Eql Dst Port #=80 14-16 MAX 6000/3000 Network Configuration Guide...
Page 503
Following are comparable RADIUS filter definitions: Ascend-Data Filter="ip in forward dstip 10.9.250.5/32 dstport=80 proto 6" Ascend-Data Filter="ip in forward dstport > 1023 proto 6" Ascend-Data Filter="ip in forward dstport > 1023 proto 6" Ascend-Data Filter="ip in forward" MAX 6000/3000 Network Configuration Guide 14-17...
You can specify that the filter matches the packet if the packet’s source port number is Less (less than), Eql (equal to), Gtr (greater than), or Neq (not equal to) the Src Port # value. 14-18 MAX 6000/3000 Network Configuration Guide...
Cost—Minimize monetary cost Reliability—Maximize reliability Throughput—Maximize throughput Latency—Minimize delay. Settings in a RADIUS profile In RADIUS, a TOS filter entry is a value of the Ascend-Filter attribute. To specify TOS filter value, use the following format: MAX 6000/3000 Network Configuration Guide 14-19...
Page 506
(42), domain (53), tftp (69), gopher (70), finger (79), www (80), kerberos (88), hostname (101), nntp (119), ntp (123), exec (512), login (513), cmd (514), or talk (517). For more details, see “Filtering by port numbers” on page 14-14. 14-20 MAX 6000/3000 Network Configuration Guide...
Network Number portion of the destination IPX address. Src Node Adrs Node Number portion of the source IPX address. Dst Node Adrs Node Number portion of the destination IPX address. Src Socket # Source socket number. 14-22 MAX 6000/3000 Network Configuration Guide...
Gtr (greater than), or Neq (not equal to) the source socket number specified in the filter. The Dst Socket Cmp parameter specifies the method of comparison for the destination socket number. You can specify that the filter matches the packet if the packet’s destination socket MAX 6000/3000 Network Configuration Guide 14-23...
Packets can pass through both a data filter and call filter on a WAN interface. When both a data filter and call filter are applied to the same interface, the data filter is applied first. 14-24 MAX 6000/3000 Network Configuration Guide...
Name of a Filter profile. For details, see “Examples of applying a TOS filter to a WAN interface” on page 14-28. Name Name of a Filter profile. For details, see “Example of applying a filter to a LAN interface” on page 14-29. MAX 6000/3000 Network Configuration Guide 14-25...
Attributes that are not specified in the caller’s profile take their value from the Answer profile settings. So if the caller’s RADIUS profile does not apply a data filter or call filter, and the Use 14-26 MAX 6000/3000 Network Configuration Guide...
Following is an example of defining an antispoofing filter within the user’s RADIUS profile: tlynch Password="secret" Service-Type=Framed-User, Framed-Protocol=MPP, Framed-IP-Address=10.10.10.64, Framed-IP-Netmask=255.255.255.0, Ascend-Data Filter="ip in drop srcip 10.100.50.128/26" Ascend-Data Filter="ip in drop srcip 127.0.0.0/8" Ascend-Data Filter="ip in forward" Ascend-Data Filter="ip out forward srcip 10.100.50.128/26" MAX 6000/3000 Network Configuration Guide 14-27...
Ethernet Connections Connection profile IP Options... TOS Filter= Following is a comparable RADIUS profile in which the TOS filter is specified by the Filter-ID attribute: jfan-pc Password="johnfan" Service-Type=Framed-User, Framed-Protocol=PPP, Framed-IP-Address=10.168.6.120 Framed-IP-Netmask=255.255.255.0 Filter-ID="jfans-tos-filter" 14-28 MAX 6000/3000 Network Configuration Guide...
Note: Use caution when applying a filter to the Ethernet interface. You could inadvertently render the MAX unit inaccessible from the local LAN. The following parameters apply to a filter in a local network interface: Ethernet Mod Config Ether Options Filter MAX 6000/3000 Network Configuration Guide 14-29...
Page 517
12-2 calculating 4-22 4-49 using 12-1 defined 4-22 ZIP Query 12-4 Always Spoof parameter 4-98 zone multicasting 12-2 Analog modems 4-78 zones 12-2 12-4 12-6 Answer Data Svc parameter 3-80 AppleTalk Router parameter 4-74 MAX 6000/3000 Network Configuration Guide Index-1...
Page 529
Index port and slot numbering (MAX 3000) and slot numbering (MAX 6000) PAC (PPTP Access Controller) 10-27 and slot specifications 3-60 3-72 configuring 10-28 diagnostics 3-50 working as a MAX 10-27 host 3-59 packet bridging numbers of common ports 7-24...
Page 532
4-89 Static Mappings profile 7-27 slot static route 7-55 7-59 and port numbering (MAX 3000) ATMP mobile clients 10-16 and port numbering (MAX 6000) configuring 7-56 11-13 11-21 and port specifications 3-60 3-72 default route, configuring 7-59 SNMP (Simple Network Management Protocol)
Page 533
7-30 service type 4-40 Term Type parameter 4-85 T1/PRI model terminal adapters slot and menu correspondence (MAX 3000) connections 4-79 slot and menu correspondence (MAX 6000) Terminal mode 4-83 T302 Timer parameter 3-23 configuring 4-85 4-86 T391 parameter terminal server...
Page 534
PPTP tunnels, configuring 10-27 priority levels 7-35 settings 7-35 VT100 menu slots and ports (MAX 3000) slots and ports (MAX 6000) ATMP, port for tunnel control 10-3 Chksum 7-30 WAN (Wide Area Network) port number for ATMP connections 10-7 UDP port...
Need help?
Do you have a question about the MAX 6000 and is the answer not in the manual?
Questions and answers