Page 1 MAX™ 6000/3000 Network Configuration Guide Part Number: 7820-0629-003 For software version 9.0 January 2001...
Page 2 Lucent Technologies Inc. Advantage Pak, Advantage Services, AnyMedia, ...Beyond Compare, End to End Solutions, Inter.NetWorking, MAXENT, and NetWork Knowledge Solutions are service marks of Lucent Technologies Inc. Other trademarks, service marks, and trade names mentioned in this publication belong to their respective owners.
Page 3: Customer Service
The eSight™ Service Center at http://www.esight.com provides access to technical support. You can obtain technical assistance through email or the Internet, or by telephone. If you need to contact Lucent Technologies for assistance, make sure that you have the following information available: •...
Page 5 Where to go next ........................2-9 Chapter 3 Configuring WAN Access............... 3-1 Introduction to WAN configuration..................3-2 How the VT100 menus relate to slots and ports on the MAX 6000....... 3-2 System slot....................... 3-2 T1 or E1 slots......................3-2 MAX 6000/3000 Network Configuration Guide...
Page 6 Setting triggers for call-completed information............3-23 Using MAXDAX ......................3-24 Configuring channels ....................3-24 Associating a channel with a slot/port in the MAX unit ........3-25 Assigning nailed channels to groups ..............3-25 Assigning channels to hunt groups ................ 3-25 MAX 6000/3000 Network Configuration Guide...
Page 7 Configuring Host/AIM6 and Host/Dual ports ..............3-48 Configuring the inverse-multiplexing port ..............3-49 Configuring a Port Config profile ................. 3-50 Port diagnostics...................... 3-51 Configuring the interface to the codec................3-51 Pairing ports for dual-port calls ................3-52 Enabling dual-port calls..................3-52 MAX 6000/3000 Network Configuration Guide...
Page 8 Routing calls on the basis of the channel on which MAX 2 receives the call..3-86 Chapter 4 Configuring Individual WAN Connections........4-1 Introduction to WAN links ....................4-2 The Answer profile ........................ 4-3 Encaps Options ....................... 4-4 IP Options ........................4-6 IPX Options ........................4-6 viii MAX 6000/3000 Network Configuration Guide...
Page 9 Client parameters ....................4-32 IPX Options ........................4-32 IPX parameters ...................... 4-33 AppleTalk Options......................4-34 Session Options......................4-35 Timing parameters ....................4-35 Miscellaneous Session Options parameters............4-35 Frame Relay parameters ..................4-36 Framed Only ......................4-36 MAX 6000/3000 Network Configuration Guide...
Page 10 Setting up bidirectional CHAP on the MAX unit for all incoming calls ....4-64 Setting up bidirectional CHAP on the MAX unit for selected incoming calls..4-65 Setting up bidirectional CHAP on the MAX unit for outgoing calls ....4-66 MAX 6000/3000 Network Configuration Guide...
Page 11 Specifying the hardware address of the remote Combinet bridge......4-92 Enabling bridging ....................4-92 Requiring a password from the remote bridge ............4-92 Specifying passwords to exchange with the remote bridge........4-92 Configuring line-integrity monitoring ..............4-92 MAX 6000/3000 Network Configuration Guide...
Page 12 Setting up a DHCP server..................4-99 Setting up Plug and Play support................4-99 Setting up DHCP spoofing ..................4-99 Configuring POTS capability on the MAX 6000 and MAX 3000 ........4-100 FXS line profiles ......................4-101 Configuring an FXS line profile ................4-101 Saving alternative configurations ................
Page 13 Sample RADIUS Frame Relay Data Link profile ..........5-38 Sample RADIUS user profile ................5-38 Chapter 6 Configuring X.25 ................6-1 Introduction to Lucent X.25 implementation................. 6-2 Configuring the logical link to an X.25 network ..............6-2 MAX 6000/3000 Network Configuration Guide xiii...
Page 14 Displaying AO/DI operation..................6-39 Displaying whether or not the MAX supports AO/DI .......... 6-39 Displaying active AO/DI calls................6-40 Displaying packet processing for a specific session..........6-41 RADIUS support for Always On/Dynamic ISDN (AO/DI) ......... 6-41 MAX 6000/3000 Network Configuration Guide...
Page 15 Syslog support for IP fax operation ................7-12 Redialer support on MultiDSP card for store-and-forward fax ........7-12 Atlas redialer and DID support on MAX 6000 units ............7-12 Specifying the type of redialer..................7-13 DID on inbound IP fax calls ..................7-13 Chapter 8 Configuring OSPF Routing ............
Page 16 Configuring RIP on a WAN interface ..............9-33 IP Direct configuration ..................9-33 Settings in RADIUS profiles ..................9-34 Remote host requirements for WAN connections ............9-35 UNIX software ...................... 9-36 Windows or OS/2 software..................9-36 MAX 6000/3000 Network Configuration Guide...
Page 17 Forwarding from an MBONE router on Ethernet............10-5 Forwarding from an MBONE router on a WAN link........... 10-6 Configuring the MAX to respond to multicast clients .......... 10-7 Configuring the MBONE interface ............... 10-7 Configuring multicasting on WAN interfaces............10-7 MAX 6000/3000 Network Configuration Guide xvii...
Page 18 Example of connection-based tunnel authentication ........... 11-39 Creating parallel L2TP tunnels to the same end point......... 11-41 Configuration of the MAX as an LNS................ 11-43 Using DNS list attempts for L2F and L2TP ............... 11-44 xviii MAX 6000/3000 Network Configuration Guide...
Page 19 Example of static-route configuration ................ 12-21 Creating and applying IPX SAP filters ................12-22 Input SAP filters and output SAP filters..............12-23 Applying IPX SAP filters ................... 12-24 Example of IPX SAP filter configuration..............12-24 MAX 6000/3000 Network Configuration Guide...
Page 20 Filter overview ........................15-1 Basic types of filters ..................... 15-1 Data and call filters ....................... 15-2 How filters work ......................15-3 Generic filters ......................15-3 IP filters ......................... 15-3 Type of Service filters ................... 15-4 MAX 6000/3000 Network Configuration Guide...
Page 21 Examples of applying a call filter to a WAN interface..........15-28 Examples of applying a TOS filter to a WAN interface..........15-28 Example of applying a filter to a LAN interface ............15-29 Index..................Index-1 MAX 6000/3000 Network Configuration Guide...
Page 23 Figure 2-1 Using the MAX as an ISP hub ................2-2 Figure 2-2 Using the MAX as a telecommuting hub ............2-3 Figure 3-1 Slot and port numbering in the MAX 6000 ............3-2 Figure 3-2 Slot and port numbering in the MAX 3000 T1 ..........3-3 Figure 3-3 IDSL connection with repeaters ..............
Page 24 Figure 14-4 An example of an IPX client bridged connection ......... 14-14 Figure 14-5 An example of an IPX server bridged connection ........14-15 Figure 15-1 Data filters drop or forward certain packets ........... 15-2 xxiv MAX 6000/3000 Network Configuration Guide...
Page 25 Figures Figure 15-2 Call filters prevent certain packets from resetting the timer ......15-2 MAX 6000/3000 Network Configuration Guide...
Page 27 Table 11-5 Tunnels created based on profile settings for incoming callers..... 11-43 Table 11-6 L2TP MIB variables and supported counters ..........11-46 Table 14-1 Bridging attributes ................... 14-8 Table 14-2 Ascend-Bridge-Address arguments ..............14-9 MAX 6000/3000 Network Configuration Guide xxvii...
Page 29: Chapter 1 Introduction
Read the overview sections if you are not sure about which information applies to your installation. Note: This guide describes the full set of features for MAX 6000 and MAX 3000 units. Some earlier versions or specialty loads of the software.
Page 30 Warns that a failure to take appropriate safety precautions could result in physical injury. Warning: Warns of danger of electric shock. Warning: MAX 6000/3000 Series documentation set The MAX 6000/3000 documentation set consists of the following manuals: • MAX Administration Guide • MAX 3000 Installation and Basic Configuration Guide •...
Page 31 About This Guide MAX 6000/3000 Series documentation set The MAX 6000/3000 documentation set is available on the Documentation Library CD-ROM included with your MAX unit, and on either CD-ROM or paper from the online bookstore (http://www.lucent.com/ins/bookstore). MAX 6000/3000 Network Configuration Guide...
Page 32 Although the MAX has a large number of features, you might only have to configure a few of them, depending on what you want the MAX to do. Almost all applications require configuration of IP routing. You might want to use the IP functionality to receive and send MAX 6000/3000 Network Configuration Guide...
Page 33 MAX to provide rudimentary security. You can also define filters to prevent unnecessary connections and to clear idle connections. MAX 6000/3000 Network Configuration Guide...
Page 34: Chapter 2 Configuration Concepts And Profiles
ISDN V.120 Terminal Adapter, or an ISDN router such as a Lucent Pipeline. If you use the MAX as an ISP hub, configure it as an IP router, because it establishes the dial-in WAN connection with subscribers and routes their data streams to other Internet routers. MAX 6000/3000 Network Configuration Guide...
Page 35: Using The Max As A Telecommuting Hub
The backbone might be a NetWare LAN, an IP network, or a multiprotocol network. Figure 2-2 shows an example in which home users, remote offices, and customer sites can access the backbone network. MAX 6000/3000 Network Configuration Guide...
Page 36: Overview Of Max Configuration
Configuring Wide Area Network (WAN) connections and security • Configuring the MAX as a Frame Relay or X.25 concentrator • Configuring routing and bridging across the WAN • Configuring Internet services, such as multicast, OSPF, and Virtual Private Networks (VPNs) MAX 6000/3000 Network Configuration Guide...
Page 37: Creating A Network Diagram
Callback security You can have the MAX call back any user dialing in to it, thus ensuring that the connection is made with a known location. MAX 6000/3000 Network Configuration Guide...
Page 38: Concentrating Frame Relay Connections
WAN connection (and vice versa) on the basis of the destination hardware address in each packet. Unlike a router, a bridge does not examine packets at the network layer. It simply forwards packets to another network segment if the address does not reside on the local segment. MAX 6000/3000 Network Configuration Guide...
Page 39: Using Ipx Routing (Netware 3.11 Or Later)
ATMP enables the MAX unit to create and tear down a tunnel to another unit. In effect, the tunnel collapses the Internet cloud and provides direct access to a home network. Packets received through the tunnel must be routed, so ATMP currently applies only to IP or IPX networks. MAX 6000/3000 Network Configuration Guide...
Page 40: Max Profiles
When you have full privileges, you can make a profile active. Proceed as follows: Open the profile that you want to make current. Press Ctrl-D. The profile’s DO menu appears. Select L (Load). The Load Profile..menu appears. MAX 6000/3000 Network Configuration Guide...
Page 41: Saving A Profile
(If a Reply-Item is not indented, it is interpreted as the User-Name of a new entry.) Reply-Items includes zero or more attribute-value pairs that are returned in Access-Accept messages to authorize services for the user. MAX 6000/3000 Network Configuration Guide...
Page 42: Using Session Accounting
Set up Virtual Private Networks Chapter 11, “Setting Up Virtual Private Networks” Work with status windows MAX Reference Write configuration scripts MAX Administration Guide Set up security MAX Security Supplement Set up RADIUS TAOS RADIUS Guide and Reference MAX 6000/3000 Network Configuration Guide...
Page 43: Chapter 3 Configuring Wan Access
Multiplexing (AIM). If your unit connects only to ISDN lines and supports only digital-modem cards, call routing is preconfigured. You must configure it, however, if you have a mixture of cards or if the WAN lines do not support ISDN signaling. MAX 6000/3000 Network Configuration Guide...
Page 44: Introduction To Wan Configuration
How the VT100 menus relate to slots and ports on the MAX 6000 The menus in the VT100 interface are numbered to correspond to slots in the MAX 6000 unit. A slot can be an actual expansion slot or virtual slot on the unit’s motherboard. Virtual slots include the System slot, two T1 or E1 slots, the Ethernet slot, the Etherdata slot, and the Serial WAN slot.
Page 45: Expansion Slots
Slot #1 Figure 3-2 shows how ports are assigned to slots on a MAX 3000. Not shown are slots 0 and 5, which are exceptions in that they do not correspond to any physical port. MAX 6000/3000 Network Configuration Guide...
Page 46: System Slot
The serial port is slot 6 (menu 60-000). It is used for the serial WAN connection or a nailed-up T1/E1 connection. V.90 S56 III modem slot The on-board modems are assigned to slot 7 (menu 70-000). MAX 6000/3000 Network Configuration Guide...
Page 47: Assigning Telephone Numbers
If you have, for example, two PRI lines from different service providers, you might set the ChN Trnk Grp parameters for the first line to 9 and for the second line to 8. For more information about trunk groups, see “Enabling trunk groups” on page 3-69. MAX 6000/3000 Network Configuration Guide...
Page 48: Hunt Groups
When a digital modem, AIM port, or a host on the local Ethernet port originates a dial-out connection, the unit routes that call internally to an available WAN channel to place the call. The channel configuration of a WAN line determines how the MAX 6000/3000 Network Configuration Guide...
Page 49: Configuring T1 Lines
3-59 and “Configuring outbound calls” on page 3-69. Configuring T1 lines A MAX 6000 unit that supports T1 lines has two T1 slots, each of which supports two T1 lines. Configure a Line Config profile for each of the two slots. You can also configure additional Line Config profiles, but only one can be active for a given slot at a given time.
Page 50: Connecting To The Central Office Switch
You must configure the signaling type (Sig Mode) for each T1 line. If you set Sig Mode to ISDN_NFAS, you can also establish an interface ID or NFAS ID number for this type of signaling. You must specify a different interface ID for each NFAS line. MAX 6000/3000 Network Configuration Guide...
Page 51: Switch-Specific Settings
Supporting PBX connections In a MAX 3000 unit’s T1 slot, or in either T1 slot of a MAX 6000, you can connect line 2 to a PBX. The unit can act as a switch, moving an incoming call from line 1 to line 2. You can assign the PBX a number for dialing out through the MAX unit.
Page 52: Configuring Carrier-Specific Services
MAX unit receives incoming calls. In the Net2Net ChanGroup ID profile, you define parameters used in configuring channels for outbound calls. For complete information about MAXDAX, see “Configuring MAXDAX” on page 3-74. Or, for detailed information about each parameter, see the MAX Reference. 3-10 MAX 6000/3000 Network Configuration Guide...
Page 53: Configuring Channels
For nailed channels, the group number of the nailed channels used for the connection. Ch N Trnk/Grp Trunk group to which a nailed channel is assigned to make it available for outbound calls. MAX 6000/3000 Network Configuration Guide 3-11...
Page 54: Associating A Channel With A Slot/Port In The Max Unit
Typical T1 configurations, with examples Typical T1-line configurations for MAX units include configurations for ISDN PRI services, robbed-bit signaling, NFAS signaling, PRI-to-T1 conversion for a T1 PBX, and assigning bandwidth to a nailed link. 3-12 MAX 6000/3000 Network Configuration Guide...
Page 55: Configuring A Line For Isdn Pri Service
The network switch sets its T310 timer as it awaits further messages from the MAX unit. The switch tears down the call if the T310 timer expires. In this event, the switch reports ISDN code 16 (Normal call clearing) to the calling device. MAX 6000/3000 Network Configuration Guide 3-13...
Page 56 Following is an example of T1 configuration for ISDN PRI service. (Only the relevant parameters are shown.) Net/T1 Line Config Line Config profile Name= 1st Line=Trunk 2nd Line=Disabled Line 1... Sig Mode=ISDN Framing Mode=D4 Encoding=AMI Send Disc=0 Overlap Receiving=Yes 3-14 MAX 6000/3000 Network Configuration Guide...
Page 57: Configuring Robbed-Bit Signaling
Using NFAS signaling When you configure two T1 lines for NFAS signaling, they share a D channel. Configure one line with a primary D channel and the other with a secondary D channel. The secondary D MAX 6000/3000 Network Configuration Guide 3-15...
Page 58 D channel. Note: On a MAX 6000 unit, both lines must be connected to the same slot. Also note that if you were to configure both slots for NFAS signaling, you would have to assign different ID numbers to the lines in the second slot.
Page 59: Enabling A Robbed-Bit Pbx With Pri Access Lines (Pri-To-T1 Conversion)
Dialed Number Identification Service (DNIS) or a called number information element. On a MAX 6000 unit, T1 PBX must connect to line 2 of the unit’s second slot. That is, you must configure line 2 in a profile in the 20-000 Net/T1 > Line Config menu. To configure the Line Config profile that will support the PBX, set the 2nd Line parameter to Trunk.
Page 60: Assigning Bandwidth To A Nailed Link
2nd Line must be set to Trunk). Then open the subprofile (Line 1 or Line 2) for that line, and configure the nailed channels. For each channel that is to be nailed, set the Ch N parameter to 3-18 MAX 6000/3000 Network Configuration Guide...
Page 61: Performing T1 Line Diagnostics
MAX Reference. Configuring E1 lines A MAX 6000 unit that supports E1 lines has two E1 slots, each of which supports two E1 lines. Configure a Line Config profile for each of the two slots. You can also configure additional Line Config profiles, but only one can be active for a given slot at a given time.
Page 62: Setting The General Parameters
You can set 1st Line and 2nd Line to Trunk (indicating a standard E1 interface with signaling information), Quiesced, or Disabled. For the second line connected to a MAX 6000 E1 slot, you can also specify D&I (Drop-and-Insert) service. (A MAX 3000 unit has no D&I setting for the 2nd Line parameter.
Page 63: Switch-Specific Settings
Number of milliseconds the unit waits before answering an incoming R2 call. Caller ID Whether or not the unit requests the Calling Line ID (CLID) and/or Caller ID from the switch. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 3-21...
Page 64: Defining Settings For Dpnss Signaling On Dass 2 Switches
Most E1 DPNSS providers in the U.K. require 2DS, which is a variant of G.703. If you select G.703, the unit provides CRC-4 checking. If you select 2DS, it does not. Make sure that the following parameters are set to their default values, as shown: 3-22 MAX 6000/3000 Network Configuration Guide...
Page 65: Enabling A Line For Clock Source Use
T302 timer. The MAX stops the timer when it receives a message that includes the Sending Complete Information element. The MAX assumes there are no more trailing digit digits to collect when the T302 timer stops or expires. MAX 6000/3000 Network Configuration Guide 3-23...
Page 66: Using Maxdax
Each E1 line supports 32 channels, of which one is used for framing. Also, you can use one of the channels for a PRI signalling. The Ch N parameters are repeated for each channel in the line 3-24 MAX 6000/3000 Network Configuration Guide...
Page 67: Associating A Channel With A Slot/Port In The Max Unit
You can assign a hunt-group number (a telephone number) associated with the E1 line in a specific Line N profile. Assign this value to the Hunt-N # parameter. Typical E1 configurations, with examples Typical E1-line configurations for MAX units include configurations for ISDN signaling, DPNSS signaling, and nailed connections. MAX 6000/3000 Network Configuration Guide 3-25...
Page 68: Using Isdn Signaling
Make sure that the following parameters are set to their default values, as shown: L3 End=x-side L2 End=b-side NL Value=64 LoopAvoidance=7 Exit the profile and, at the exit prompt, select the exit and accept option. 3-26 MAX 6000/3000 Network Configuration Guide...
Page 69: Setting Up A Nailed Connection
Exit the profile and, at the exit prompt, select the exit and accept option. If the profile you have configured is not the active profile, activate it as described in “Activating a profile” on page 2-7. MAX 6000/3000 Network Configuration Guide 3-27...
Page 70: Performing E1 Line Diagnostics
Ascend Enterprise MIB events group (10). An SNMP manager can then read this object to determine the cost of the call. The eventCallCharge object is a read-only integer and is applicable only if eventType is callCleared (3). Otherwise, 0 is returned. 3-28 MAX 6000/3000 Network Configuration Guide...
Page 71: Configuring The Serial Wan Port
Configure a Frame Relay profile and specify the Nailed Grp number assigned to this port. For more information about Frame Relay, see Chapter 5, “Configuring Frame Relay.” Example of a serial WAN connection Net/T1 Line Config Line 1... Ch N Prt/Grp=3 MAX 6000/3000 Network Configuration Guide 3-29...
Page 72: Configuring Digital Modems
Modems in the 8-MOD modem card are numbered 0, 1, 2, 3, 6, 7, 10, 11. For example, if you have an 8-MOD modem card in slot 8 in a MAX 6000 and all eight modems are idle, the terminal-server Show Modems command displays the following output:...
Page 73: Mod Modem Numbering
Modems in the 12-MOD K56Flex modem card are numbered 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 12, 13. For example, if you have a 12-MOD K56Flex modem card in slot 8 in a MAX 6000 and all...
Page 74: Quiescing Digital Modems And Returning Them To Service
Specify the unique digits of the telephone numbers to be routed to digital modems. For example: V.90 S56 III Modem-30 Mod Config Ans 1#=12 Ans 2#=13 Ans 3#=14 Ans 4#=15 Exit the profile and, at the exit prompt, select the exit and accept option. 3-32 MAX 6000/3000 Network Configuration Guide...
Page 75: Configuring V.110 Modems
Configuring V.110 modems Configuring V.110 modems A V.110 card, on a MAX 6000 or a MAX 3000 provides eight V.110 modems that each enable the MAX unit to communicate with an asynchronous device over synchronous digital lines. An asynchronous device such as an ISDN modem encapsulates its data in a V.110 protocol. A V.110 modem removes the V.110 encapsulation and enables an asynchronous session (a...
Page 76: Configuring Personal Handyphone System (Phs)
That card appears as PIAFS-16 in the Main Edit Menu. Note: MAX 6000 units support PIAFS protocol version 2.1 for PHS service. This PIAFS version has an enhanced link-level protocol that supports dynamic switching of data transmission rates.
Page 77: Specifying A Name And Other Settings For The Profile
SPIDS. All international switch types except DBP Telecom, and all U.S. switch types except AT&T 5ESS, operate in multipoint mode. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 3-35...
Page 78: Configuring The B Channels
You can set the BN Trnk Grp parameter to configure trunk-group dialing for outgoing calls on BRI lines supported by the ISDN BRI card. You can assign trunk-group numbers 4–9 to channels to make them available for outbound calls. You cannot combine PRI channels with 3-36 MAX 6000/3000 Network Configuration Guide...
Page 79: Configuring Add-On Numbers And Spids
Set the Link Type parameter to specify multipoint mode. Configure the B channels for switched usage and for routing to the local network. Specify the primary and secondary add-on numbers and their associated SPIDs. MAX 6000/3000 Network Configuration Guide 3-37...
Page 80: Configuring The Net/Bri Line For Outbound Calls
Trunk Grp to specify that the digits following the first digit constitute an ordinary telephone number. By setting Dial Plan to Trunk Grp, you direct the MAX unit to use lines configured with trunk groups for outbound calls. 3-38 MAX 6000/3000 Network Configuration Guide...
Page 81: Displaying Information About Bri Calls
5108888888 888888 99999 The Call ID column contains an index number specific to the call. Called Party ID and Calling Party ID show the telephone number of the answering device and calling device, respectively. MAX 6000/3000 Network Configuration Guide 3-39...
Page 82: Configuring Host/Bri Lines
No, the line is not available for use. Dial Plan Whether the module uses trunk groups or the extended dial plan to send and receive calls. (For details about dial plans, see “Configuring outbound calls” on page 3-69.) 3-40 MAX 6000/3000 Network Configuration Guide...
Page 83: Typical Host/Bri Configurations, With Examples
Host/BRI line. That device does not make outbound calls to the WAN. The inbound caller dials 555-1212, and the MAX unit connects the caller to the equipment that terminates BRI line 1. Host/BRI Line Config local Name=local Line 1... Enabled=Yes Dial Plan=Trunk Grp Ans 1#=1212 MAX 6000/3000 Network Configuration Guide 3-41...
Page 84: Enabling The Device To Make Outbound Calls
408-555-1212 (trunk group 5, dial plan 2). System Sys Config Use Trunk Grps=Yes System Dial Plan Boston Name=Boston Call-by-Call=6 Data Svc=Inherit PRI # Type=Inherit Host/BRI Line Config local Name=local Line 1... Enabled=Yes Dial Plan=Extended Ans 1#=1212 Ans 2#= 3-42 MAX 6000/3000 Network Configuration Guide...
Page 85: Configuring Local Bri-To-Bri Calls
Typically, you should configure only one profile. If you do configure multiple profiles, however, you should give each a descriptive name. Leaving the Name field blank does not affect the functionality of any IDSL lines. MAX 6000/3000 Network Configuration Guide 3-43...
Page 86: Bn Slot And Bn Prt/Grp Parameters
With the BN Slot and BN Prt/Grp parameters, you can assign a channel to a slot or slot/port combination for a digital modem, AIM port, or the Ethernet port. The slot/port combination configuration affects both inbound call routing and outbound calls. In effect, it reserves the 3-44 MAX 6000/3000 Network Configuration Guide...
Page 87: Example Of Idsl Configuration
Terminal Equipment (TE) must send digits to the MAX unit by means of Q.931 en-bloc dialing, that is, it sends all dialed digits to the unit in one block, the ISDN Call Setup message, rather than one digit at a time. MAX 6000/3000 Network Configuration Guide 3-45...
Page 88: Configuring The Max Idsl Card For Outgoing Voice Calls
PSTN and route them to devices connected to an IDSL card. You can instruct the unit to route calls to an IDSL card on the basis of either the called number or the T1 channel on which the unit receives calls. 3-46 MAX 6000/3000 Network Configuration Guide...
Page 89: Performing Loopback Diagnostics For Idsl
Address of the device that is the terminating point for the loopback test: – 0—The remote TE or MAX unit. – 1—The repeater nearest the MAX unit. – 2–6—Subsequent repeaters. The next repeater after 1 is 2, and so on. – 7—All devices. MAX 6000/3000 Network Configuration Guide 3-47...
Page 90: Configuring Host/Aim6 And Host/Dual Ports
Both cards support of the same dialing protocols: AIM/Bonding, RS-366, V.25 bis, and X.21. Note: When you install a Host/AIM6 or Host/Dual card on the MAX unit, the card’s ports become the default route for inbound data calls, taking precedence over the bridge/router 3-48 MAX 6000/3000 Network Configuration Guide...
Page 91: Configuring The Inverse-Multiplexing Port
Terminal Timing is a clock signal specified for the V.35, X.21, and RS-449 serial interfaces. It compensates for the phase difference between Send Data and Send Timing. MAX 6000/3000 Network Configuration Guide 3-49...
Page 92: Configuring A Port Config Profile
Exit the profile and, at the exit prompt, select the exit and accept option. Example of a Port Config profile Host/AIM6 Port1 Menu Directory Port1 Port Name=Port1 Dial Plan=Trunk Grp 3-50 MAX 6000/3000 Network Configuration Guide...
Page 93: Port Diagnostics
If your MAX unit has a Host/Dual card, open the Host/Dual > Mod Config profile and set the following parameters: Parameter Specifies Module Name Descriptive name for the expansion card. Dual Ports Whether the MAX pairs ports 1 and 2 for dual-port or FT1-B&O calls on a Host/Dual module. MAX 6000/3000 Network Configuration Guide 3-51...
Page 94: Pairing Ports For Dual-Port Calls
Port 1/2 Dual=Yes Palmtop=Full Palmtop Port #=No Palmtop Menus=Standard Exit the profile and, at the exit prompt, select the exit and accept option. For more information, see “Configuring a dual-port call” on page 3-58. 3-52 MAX 6000/3000 Network Configuration Guide...
Page 95: Configuring Inverse-Multiplexed Wan Connections
Whether the MAX uses only the 56-Kbps portion of a channel, even when all 64-Kbps appear to be available. If you receive calls from Europe or the Pacific Rim, use this parameter when the complete path cannot distinguish between the Switched-56 and Switched-64 data services. MAX 6000/3000 Network Configuration Guide 3-53...
Page 96: Configuring Bandwidth Wan Connections
Number of channels the MAX units closes as a bundle when bandwidth changes either manually or automatically during a call. The unit removes one bundle at a time. You cannot clear a call by decrementing channels. 3-54 MAX 6000/3000 Network Configuration Guide...
Page 97: Configuring An Aim Call
To configure an AIM call that uses dynamic bandwidth allocation to manage the call dynamically: Open a Host/AIM6 (Host/Dual) > PortN Menu > Directory > call profile. Set the Dial # to specify the remote device, and set Call Type to AIM. Set Call Mgm to Dynamic. MAX 6000/3000 Network Configuration Guide 3-55...
Page 98: Example Of An Aim Call Configuration
Open the call’s profile in the Host/AIM6 > PortN Menu > Directory menu. Set the call type to FT1-B&O. Set call management to Dynamic. This setting is required in the device that initiates the FT1-B&O call. 3-56 MAX 6000/3000 Network Configuration Guide...
Page 99: Example Of A Ft1-B&O Call
(For more information, see “Configuring outbound calls” on page 3-69.) Set the Call Type parameter to specify a single-channel call type. Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 3-57...
Page 100: Example Of Configuring A Single-Channel Call
Set the Dial # parameter to specify the dial number of the remote codec. For example: Host/Dual Port1 Menu Directory hunt-groups Name=hunt-groups Dial #=6-201-555-7878 If the dual-port call requires two dial numbers, specify both numbers. Separate them with an exclamation mark. For example: Dial #=6-201-555-7878!6-201-555-7879 3-58 MAX 6000/3000 Network Configuration Guide...
Page 101: Configuring Inbound Calls
4. To reach the V.110 card, the user must enter 5105551212,4 which is the telephone number of the MAX with the subaddress. (The subaddress (4) follows the dialed number and is separated by a comma). MAX 6000/3000 Network Configuration Guide 3-59...
Page 102: Specifying Answer Numbers For Destination Host Ports
Line N... Ans 1#=1230 Ans 2#=1231 BRI/LT Line Config Line N... Ans 1#=1240 Ans 2#=1241 PortN Menu Port Config Ans 1#=1232 Ans 2#=1233 Ans 3#=1234 Ans 4#=1235 Ethernet Mod Config WAN Options... Ans 1#=1236 3-60 MAX 6000/3000 Network Configuration Guide...
Page 103: Specifying Host Ports' Slot And Port Numbers In Wan Channel Configurations
When a MAX unit receives an inbound call and no subaddress is in use or no matching answer number is found, it evaluates the slot and port specifications and routes the call to the specified destination. For example, for the MAX 6000 shown in Figure 3-1 on page 3-2: •...
Page 104: Exclusive Port Routing
When you set Ethernet > Mod Config > DNIS Options > DNIS Limitation to Yes, and the MAX unit receives a call that provides a DNIS number specified by Ethernet > Mod Config > DNIS Options > DNIS #N, the unit routes the call as follows: 3-62 MAX 6000/3000 Network Configuration Guide...
Page 105: Limiting Calls To Specific Dialed Numbers
A match occurs if all the digits specified by DNIS #N match the digits at the end of the called number. For example, if you set DNIS #N to 1235, the called number 8761235 matches, but 8762235 does not match. MAX 6000/3000 Network Configuration Guide 3-63...
Page 106: Limiting Calls To Unspecified Dialed Numbers
Limiting all modem calls that do not specify a DNIS number To specify that the MAX unit accepts ten simultaneous modem calls that do not specify a DNIS number, set the following parameters as shown: • Unspecified Max Calls=10 • Unspecified Max Modem=10 3-64 MAX 6000/3000 Network Configuration Guide...
Page 107 • DNIS #1 Max Calls=15 • DNIS #1 Modem=0 • DNIS #1 HDLC=0 • DNIS #1 V110=15 • Unspecified Max Calls=100 • Unspecified Modem Calls=100 • Unspecified HDLC Calls=0 • Unspecified V110 Calls=0 MAX 6000/3000 Network Configuration Guide 3-65...
Page 108: Incoming Call Routing State Diagram
Incoming call routing state diagram The following pages show detailed state information about inbound call routing in the MAX unit. To understand these charts, you should be familiar with the parameters referenced in many of the steps. 3-66 MAX 6000/3000 Network Configuration Guide...
Page 109 B1 Prt/Grp, B2 Prt/Grp) parameters point to a call to it. Other- serial-host port? wise, reject call. Is a serial-host (invs-mux) port Reject call. available? Route call to it. Continue next page: “A” Continue next page: “B” MAX 6000/3000 Network Configuration Guide 3-67...
Page 110 Is call answered on a channel whose slot Route call to any available parameter (Ch N Slot, B1 Slot, B2 Slot) points to V.110 module. a V.110 module, and is a V.110 module available? Continue next page 3-68 MAX 6000/3000 Network Configuration Guide...
Page 111: Configuring Outbound Calls
The following setting enables trunk groups: System Sys Config Use Trunk Grps=Yes Note: Trunk-group numbers 2 and 3 have special meaning, as described in the next two sections. Only trunk groups 4–9 are available for assignment to channels. MAX 6000/3000 Network Configuration Guide 3-69...
Page 112: Dialing Through Trunk Group 2 (Local Port-To-Port Calls)
Dial #=312 With Dial # set to 312 in a call profile or Connection profile, the unit reads Destination profile 12. (The examples in this manual do not show profile numbers, because different MAX models 3-70 MAX 6000/3000 Network Configuration Guide...
Page 113: Dialing Through Trunk Groups 4–9
Ch N TrnkGrp=4 Net/E1 Line Config Line Config profile Line N... Ch N=Switched Ch N TrnkGrp=4 Net/BRI Line Config Line Config profile Line N... BN Usage=Switched BN TrnkGrp=5 Ethernet Mod Config WAN Options... Dial Plan=Trunk Grp MAX 6000/3000 Network Configuration Guide 3-71...
Page 114: Dialing Through The Extended Dial Plan
Line Config Line Config profile Line N... Dial Plan=Extended The following example shows how to specify the extended dial plan from an AIM port or the Ethernet network: Host/AIM6 (or Host/Dual) PortN Menu Port Config 3-72 MAX 6000/3000 Network Configuration Guide...
Page 115: Matching Slot And Port Specifications (Reserved Channels)
If the outbound call originates from a device connected to an inverse multiplexing port, the call profile associated with that port dials the call. This type of call originates from the slot and port of the inverse multiplexing card. MAX 6000/3000 Network Configuration Guide 3-73...
Page 116: Configuring Maxdax
Configuring MAXDAX With MAXDAX enabled, on a MAX 6000 unit or a MAX 3000, you can route incoming switched calls from inband T1, T1 PRI, or E1 PRI lines to specific outgoing channels on the same or different inband T1, T1 PRI or E1 PRI lines.
Page 117: Maxdax Call-Routing Flowchart
MAXDAX does not route the call, the unit routes the call according to call routing as discussed in “Configuring inbound calls” on page 3-59. Note: Figure 3-4 does not include any greater than symbols. An angle bracket (>) points to the next menu item in the path to a parameter. MAX 6000/3000 Network Configuration Guide 3-75...
Page 118: Configuring Channels On Which The Max Unit Sends Outgoing Calls
A channel group can consist of a single channel or multiple channels. To configure channels to be available for outbound calls, open the Net/T1 (Net/E1) > Line Config > Line Config profile > Line N > Net2Net ChanGroup ID profile. For each outgoing 3-76 MAX 6000/3000 Network Configuration Guide...
Page 119: Configuring Channels On Which The Max Unit Receives Calls
Specifies the number of leading digits the unit strips from the called number. The unit uses stripped digits to determine the Dial Plan profile to use for the received call. You set additional parameters if you configure an Answer Plan profile. MAX 6000/3000 Network Configuration Guide 3-77...
Page 120: Configuring The Max Unit To Directly Map Channels
Call-by-Call does not apply to outbound calls on inband T1 lines. Set the Data Svc parameter to the data service to use for the outgoing call. Data Svc does not apply to outbound calls on inband T1 lines. 3-78 MAX 6000/3000 Network Configuration Guide...
Page 121: Configuring The Max Unit To Use A Caller-Defined Dial Plan Profile
“Configuring channels on which the MAX unit sends outgoing calls” on page 3-76. – Set the Ch N Dial Plan # parameter to 0 (zero). The zero disables static channel assignment of a Dial Plan profile on the unit. MAX 6000/3000 Network Configuration Guide 3-79...
Page 122 Dial Plan profile to use for the outgoing call. For example, if you set #DialPlanSelDigits to 2 and a caller dials 234155551212, the unit uses Dial Plan profile 23 for the outgoing call. 3-80 MAX 6000/3000 Network Configuration Guide...
Page 123: Configuring The Max Unit To Use Answer Plan Profiles
Ctrl-D. When the unit is displaying the Net/T1 (E1) > Line Config profile, or any subprofile under Net/T1 > Line Config, and you press Ctrl-D, the unit displays the following command listing: DO... 0=Esc P=Password S=Save C=Close TELNET MAX 6000/3000 Network Configuration Guide 3-81...
Page 124: Examples Of Maxdax Configuration (T1)
333 | In the channel-group display: • S indicates the slot number. For a MAX 6000 unit, the slot number can be either 1 or 2. For a MAX 3000 unit, the slot number is always 1. • P indicates the T1/E1 lines in the slot. The unit supports two T1/E1 lines per slot.
Page 125: Routing Calls On The Basis Of Called Number
To reach Video System C, a user dials the number (617) 555-1212. MAX 2 should only redirect to the PRI line any calls received with a called number of 6175551212. The system administrator configures the Answer Plan profile as follows: MAX 6000/3000 Network Configuration Guide 3-83...
Page 126 PRI # Type=National NumPlanID=ISDN Transit #= Bill #= Dest #= PrependDigits= Because the system administrator leaves Dest # and PrependDigits blank, MAX 2 makes the outbound call by using the called number from the incoming call. 3-84 MAX 6000/3000 Network Configuration Guide...
Page 127: Routing Calls On The Basis Of The Channel On Which Max 2 Receives The Call
Ch 1=Switched Ch 1 ChanGroup=1 Ch 2=Switched Ch 2 ChanGroup=1 The system administrator can assign more channels to channel group 1 if users connected to the PBX require outbound dialing on the PRI line. MAX 6000/3000 Network Configuration Guide 3-85...
Page 128: Example Of Maxdax Configuration (E1)
MAX 1. Figure 3-6 shows an example of a MAXDAX installation. Figure 3-6. Sample MAXDAX (E1) installation Video System A Video System C Serial line PSTN Serial line Pipeline 75 Video System B 3-86 MAX 6000/3000 Network Configuration Guide...
Page 129 Users specify which Dial Plan profile MAX 2 uses for their calls. In this example, the system administrator configures two Dial Plan profiles, 31 and 32, and tells the users which profile to use for specific destinations. Dial Plan profile 31 has the following configuration: System Dial Plan PRI plan MAX 6000/3000 Network Configuration Guide 3-87...
Page 130 Configuring WAN Access Configuring MAXDAX Name=PRI plan Bill #= Dest #=14155551212 PrependDigits= Because the system administrator specifies a Dest # value of 14155551212, the MAX 2 dials that number to make the outbound call. 3-88 MAX 6000/3000 Network Configuration Guide...
Page 131: Chapter 4 Configuring Individual Wan Connections
Configuring DHCP services..........4-96 Configuring POTS capability on the MAX 6000 and MAX 3000 ....4-100 Most of the parameters for configuring WAN connections are in the Answer profile and Connection or Names/Passwords profiles.
Page 132: Introduction To Wan Links
EU-UI and EU-RAW encapsulation do not support an authentication protocol. Use CLID authentication to match incoming calls to the proper Connection profile when, for example, you apply special filters to certain callers, or some callers route IP and others bridge. MAX 6000/3000 Network Configuration Guide...
Page 133: The Answer Profile
Yes specifies that terminal- server users connecting through this profile only have access to the PPP, SLIP, CSLIP, and Quit terminal-server commands. MAX 6000/3000 Network Configuration Guide...
Page 134: Encaps Options
MP+ connections, which use PPP encapsulation with Lucent extensions. MP+ enables the unit to establish a multiple-channel connection to another unit, and to add or remove channels as traffic dictates. Both sides of the connection must support MP+. MAX 6000/3000 Network Configuration Guide...
Page 135 Packet switching is a mode of data transfer in which packets are transmitted from a specific source to a specific destination over any available circuit. Packets can take different paths and might not arrive in the order in which they were sent. MAX 6000/3000 Network Configuration Guide...
Page 136: Ip Options
AppleTalk routers or AppleTalk clients. If there is no Connection profile for the caller, the MAX unit needs to treat the caller as a router (the default) or as a dialin client. MAX 6000/3000 Network Configuration Guide...
Page 137: Ppp Options
How the unit responds to caller requests to support Callback Control Protocol (CBCP). Microsoft’s CBCP is a Link Control Protocol (LCP) option negotiated at the beginning of PPP sessions. CBCP authenticates a caller by means of a user name and password. MAX 6000/3000 Network Configuration Guide...
Page 138: Numeric Parameters
Idle Pct Percentage of bandwidth utilization below which the MAX unit clears an MP+ call. Bandwidth utilization must fall below this percentage on both sides of the connection before the unit clears the call. MAX 6000/3000 Network Configuration Guide...
Page 139: Graceful Shutdown And Ipx Header Compression
The X.75 Options parameters apply to incoming calls that use X.75 encapsulation. Following are the Answer > X.75 Options parameters: Parameter Specifies K Window Size Maximum number of data packets that can be outstanding in an X.75 connection before acknowledgment is required. MAX 6000/3000 Network Configuration Guide...
Page 140: Pad Options
Set of Recognized Private Operating Agency (RPOA) user facilities to use in the next call request. The RPOA facilities provide the data network identification code for the requested initial RPOA transit network in the form of four decimal digits. 4-10 MAX 6000/3000 Network Configuration Guide...
Page 141: T3Pos Options
The following parameters in Answer > T3POS Options subprofile define timing limits in the communication between the DTE and the PAD: Parameter Specifies T3POS T1 Maximum amount of time permitted between characters sent from the DTE to the PAD. Also called the Char-to-Char timer. MAX 6000/3000 Network Configuration Guide 4-11...
Page 142: For Dte-Initiated Calls
Which Protocol Identifier (PID) the PAD includes in the call request packet it sends to the host. ACK Suppression Whether the PAD sends an acknowledgment when it receives an opening frame from the DTE and when it establishes a virtual call with the host. 4-12 MAX 6000/3000 Network Configuration Guide...
Page 143: Miscellaneous
In the Answer > Session Options subprofile, the RIP parameter specifies whether the MAX unit sends and/or receives RIP update packets on the interface. The Session Options subprofile also includes filter-related parameters, timing parameters, and a few miscellaneous parameters. MAX 6000/3000 Network Configuration Guide 4-13...
Page 144: Filter-Related Parameters
(usually less than a minute longer) than the actual time you set. Preempt Number of idle seconds the MAX unit waits before using one of the channels of an idle link for a new call. 4-14 MAX 6000/3000 Network Configuration Guide...
Page 145: Dhcp Options
TCP. Note that the data is written before a match occurs if the specified timeout (Packet Flush Time) or maximum packet length (Packet Flush Length) is exceeded. MAX 6000/3000 Network Configuration Guide 4-15...
Page 146: Configuring An Answer Profile
Exit the profile and, at the exit prompt, select the exit and accept option. Example of a configured Answer profile Ethernet Answer Profile Reqd=Yes Id Auth=None Assign Adrs=No Encaps MPP=Yes MP=Yes PPP=Yes COMB=Yes FR=Yes X25/PAD=Yes EU-RAW=Yes EU-UI=Yes V.120=Yes X.75=Yes TCP-Clear=Yes ARA=Yes PPP Options Route IP=Yes 4-16 MAX 6000/3000 Network Configuration Guide...
Page 147: The Connection Profile
TypeOfNumber field in the called party’s information element. PRI # Type is used for outbound calls made by the MAX unit on PRI lines so that the switch can properly interpret the telephone number dialed. Ask your PRI provider for details. MAX 6000/3000 Network Configuration Guide 4-17...
Page 148: Telephone Numbers
IPX network address and frame type in the Ethernet profile. Note that the unit routes and spoofs only one IPX frame type. Other frame types will be bridged if bridging is enabled. 4-18 MAX 6000/3000 Network Configuration Guide...
Page 149: Overview Of The Options Subprofiles
MAX unit to act as a DHCP server for a local Pipeline unit for connections that use RADIUS (if you enable Use Answer as Default) or Names/Passwords profiles. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 4-19...
Page 150: Encaps Options
How the unit monitors the traffic over an MP+ connection. Only the initiating side of the call can add or subtract bandwidth. If both sides of the link have DBA Monitor set to None, DBA is disabled. 4-20 MAX 6000/3000 Network Configuration Guide...
Page 151 VJ Comp applies only to packets in TCP applications, such as Telnet. Turning on header compression is most effective in reducing overhead when the data portion of the packet is small. MAX 6000/3000 Network Configuration Guide 4-21...
Page 152 If the CHAP field cannot accommodate the full PIN+CODE.USER, you can enable this feature. The unit splits the passcode into two pieces with the information following the period becoming the CHAP Name, overriding the name of the router. 4-22 MAX 6000/3000 Network Configuration Guide...
Page 153: Encaps=Mp
When Connections > Connection profile > Encaps=PPP, the following parameters appear in the interface for Ethernet > Connections > Connection profile > Encaps Options: Ethernet Connections Connection profile Send Auth Send Name Send PW Recv PW LQM Min LQM Max Link Comp VJ Comp MAX 6000/3000 Network Configuration Guide 4-23...
Page 154: Encaps=Comb
Frame Relay switch. The switch uses the DLCI to route frames through the network, and the DLCI may change as frames are passed through multiple switches. 4-24 MAX 6000/3000 Network Configuration Guide...
Page 155: Encaps=X25/Pad
CUG. In general, members of a specific CUG can communicate among themselves, but not with users outside the group. In some cases, however, specific CUG members can originate calls to destinations outside the group, or receive calls from outside the group.) MAX 6000/3000 Network Configuration Guide 4-25...
Page 156: Encaps=X25/T3Pos
Ethernet > Connection > Connection profile > Encaps Options: Ethernet Connections Connection profile x.25 Prof Recv PW Host init. mode DTE init. mode ENQ handling Max. Block Size T3POS T1 T3POS T2 T3POS T3 T3POS T4 T3POS T5 T3POS T6 4-26 MAX 6000/3000 Network Configuration Guide...
Page 157: Encaps=X25/Ip
The Encaps Type parameter specifies which encapsulation to use when calling the remote IP network across X.25. Max Unsucc. Calls The Max Unsucc. Calls parameter specifies the maximum number of unsuccessful X.25 calls the unit tries to place before dropping the modem connection. MAX 6000/3000 Network Configuration Guide 4-27...
Page 158: Encaps=X.32
Recv PW The Recv PW parameter specifies the password that the MAX unit expects to receive from the far end while the connection is being authenticated. If this password is not sent by the far-end 4-28 MAX 6000/3000 Network Configuration Guide...
Page 159 If the specified number of milliseconds elapses before the buffered data matches the End of Packet Pattern value, the MAX unit flushes the buffer by writing the data into TCP packets. MAX 6000/3000 Network Configuration Guide 4-29...
Page 160: Encaps=Ara
The value you enter is a number between 1 and 15. The default setting is 7. The higher the number you specify, the less likely that the unit brings the link or route online. 4-30 MAX 6000/3000 Network Configuration Guide...
Page 161: Sourceip Check, Rip And Pool Parameters
An IP address pool from which the caller will be assigned an IP address. If the Pool parameter is null but all other configuration settings enable dynamic assignment, the unit gets IP addresses from the first defined address pool. MAX 6000/3000 Network Configuration Guide 4-31...
Page 162: Multicast Parameters
Connection-specific, so it is not added to the routing table. IPX Options The Ethernet > Connections > Connection profile > IPX Options subprofile includes the following parameters that define whether the remote IPX caller is a router or dialin client, how 4-32 MAX 6000/3000 Network Configuration Guide...
Page 163: Ipx Parameters
It does not apply if you are routing from one unit to another, or to a router that does not use a numbered interface. Handle IPX IPX server bridging or IPX client bridging. MAX 6000/3000 Network Configuration Guide 4-33...
Page 164: Appletalk Options
Zone Name #N Name of the AppleTalk zone to which the unit belongs. If the local Ethernet network supports an AppleTalk router with configured zones, you can place the unit in one of those zones. 4-34 MAX 6000/3000 Network Configuration Guide...
Page 165: Session Options
(usually less than a minute longer) than the actual time you set. Preempt Number of idle seconds the MAX unit waits before using one of the channels of an idle link for a new call. MAX 6000/3000 Network Configuration Guide 4-35...
Page 166: Frame Relay Parameters
The default setting of No specifies that terminal-server users connecting through this profile have unlimited access to the terminal-server commands. Yes specifies that terminal- server users connecting through this profile have access only to the PPP, SLIP, CSLIP, and Quit terminal-server commands. 4-36 MAX 6000/3000 Network Configuration Guide...
Page 167: Ospf Options
An authentication key (a password) used to allow OSPF routing. KeyID is a number from 0 to 255 inserted into the OSPF packet header. OSPF routers use KeyId to allow or exclude packets from an area. The default value is 0. MAX 6000/3000 Network Configuration Guide 4-37...
Page 168: More Ospf Parameters
Connection profile. The unit then calls back the device at the remote end of the link using the Dial # specified in the Connection profile. 4-38 MAX 6000/3000 Network Configuration Guide...
Page 169: Group, Ft1 Caller, Data Svc, Force 56 Parameters
MAX unit to the network, a transit number to transmit long-distance calls, whether the Connection profile can be used to dial out, and what kinds of calls can be received: MAX 6000/3000 Network Configuration Guide 4-39...
Page 170: Accounting Options
RADIUS or TACACS+ shared secret. A shared secret acts like a password between the unit and the accounting server. This parameter applies in a Connection profile only if the Acct Type parameter specifies that connection-specific accounting information will be used. 4-40 MAX 6000/3000 Network Configuration Guide...
Page 171: Dhcp Options
Set the TS Idle parameter to specify the number of seconds that a terminal-server connection must be idle before the unit disconnects the session. MAX 6000/3000 Network Configuration Guide 4-41...
Page 172: Example Of Setting Time Limits
Note: To set up a dial-in AppleTalk PPP connection using a Names/Passwords profile, you also need to set the Peer parameter in the AppleTalk Options profile to Dialin. Example of a Names/Passwords profile configuration Ethernet Names/Passwords Claire Name=Claire Active=Yes Recv PW=brianpw Template Connection #=0 4-42 MAX 6000/3000 Network Configuration Guide...
Page 173: Configuring Ppp Connections
This section describes how to set the parameters used for establishing a single-channel PPP call. Following are the related parameters (shown with sample settings): Ethernet Answer Encaps PPP=Yes PPP Options Route IP=Yes Route IPX=Yes Route AppleTalk=Yes Bridge=Yes Recv Auth=Either MRU=1524 LQM=No LQM Min=600 LQM Max=600 Link Comp=Stac MAX 6000/3000 Network Configuration Guide 4-43...
Page 174: Settings In A Radius Profile
PPP framing or dial in unframed and then change to PPP framing. Maximum number of bytes the MAX TNT can send in a single Framed-MTU (12) packet (from 1 to 1524, default 1524). Ascend-Link-Compressio Link-compression method to use. n (233) 4-44 MAX 6000/3000 Network Configuration Guide...
Page 175: Example Of A Ppp Connection
Exit the profile and, at the exit prompt, select the exit and accept option. Following is a comparable RADIUS profile: tommy Password = "localpw" Service-Type = Framed-User, MAX 6000/3000 Network Configuration Guide 4-45...
Page 176: Enabling Ppp Dial-Out For V.110 Modems
Following are the additional parameters required for MP without BACP: Ethernet Answer Encaps MP=Yes PPP=Yes PPP Options Min Ch Count=1 Max Ch Count=1 Ethernet Connections Connection profile Encaps=MP 4-46 MAX 6000/3000 Network Configuration Guide...
Page 177: The Mp And Bacp Parameters
MP without BACP For MP connections without BACP, you can specify the base channel count, which must be greater than or equal to the minimum count and less than or equal to the maximum count MAX 6000/3000 Network Configuration Guide 4-47...
Page 178: Enabling Bacp For Mp Connections
Constant gives equal weight to all samples taken during the specified period. Time period for calculating average line utilization Sec History specifies a number of seconds to use as the basis for calculating ALU. 4-48 MAX 6000/3000 Network Configuration Guide...
Page 179: Target Utilization
Ascend-Minimum-Chann Minimum number of channels available to a multilink PPP els (173) connection. In this release, MP does not make use of this value. However, it’s value can apply to MP+ connections. MAX 6000/3000 Network Configuration Guide 4-49...
Page 180: Example Of A Mp Connection Without Bacp
Base Ch Count=2 Max Ch Count=2 Note: Both sides of the connection should specify the same number of channels. Exit the profile and, at the exit prompt, select the exit and accept option. 4-50 MAX 6000/3000 Network Configuration Guide...
Page 181: Example Of A Mp Connection With Bacp
Enable BACP to monitor bandwidth requirements for packets transmitted on this connection, and configure the Lucent criteria for bandwidth management. For example: BACP=Yes Base Ch Count=1 Min Ch Count=1 Max Ch Count=2 Inc Ch Count=1 MAX 6000/3000 Network Configuration Guide 4-51...
Page 182: Configuring Lucent Mp+ Connections
Connections Connection profile Encaps=MPP Encaps Options Aux Send PW=aux-passwd DBA Monitor=Transmit Base Ch Count=1 Min Ch Count=1 Max Ch Count=2 Inc Ch Count=1 Dec Ch Count=1 Dyn Alg=Quadratic Sec History=15 Add Pers=5 Sub Pers=10 4-52 MAX 6000/3000 Network Configuration Guide...
Page 183: The Mp+ Parameters
Number of seconds to use as the basis for calculating average line ory (238) utilization (ALU). Number of seconds for which ALU must persist beyond the Ascend-Add-Seconds Target-Utilization threshold before the MAX adds bandwidth. (240) MAX 6000/3000 Network Configuration Guide 4-53...
Page 184: Example Of Mp+ Configuration
Exit the profile and, at the exit prompt, select the exit and accept option. Open a Connection profile, specify the name of the remote device, and activate the profile. For example: Ethernet Connections fiona Station=fiona Active=Yes Select MP+ encapsulation and set the MP+ authentication options. For example: 4-54 MAX 6000/3000 Network Configuration Guide...
Page 185: Configuring A Nailed/Mp+ Connection
If both the nailed and switched channels in a nailed/MP+ connection are down, the connection does not reestablish itself until the nailed channels are brought back up or you dial the switched channels. MAX 6000/3000 Network Configuration Guide 4-55...
Page 186: Configuring A Connection Profile
Group numbers of the dedicated channels for the connection. You can specify multiple groups by separating the numbers with commas, in which case the bandwidth of the connection is an aggregate of all specified groups. Nailed bandwidth cannot be shared by other connections. 4-56 MAX 6000/3000 Network Configuration Guide...
Page 187: Spanning Multichannel Calls Across A Stack Of Units
The unit that answers the first call in the MP/MP+ bundle is the bundle owner. If a bundle spans more than one unit in a stack, an exchange of information flows between the units in the bundle. MAX 6000/3000 Network Configuration Guide 4-57...
Page 188 MAX #2, as shown in Figure 4-6. MAX #1 forwards some of the packets across the WAN through a real channel. MAX #2 sends the rest of them through a stacked channel. 4-58 MAX 6000/3000 Network Configuration Guide...
Page 189: Performance Considerations For Max Stacking
There is no limit to the number of stacked channels in single call or in a stack of MAX units, other than the limit for each individual unit. The MAX 6000 and the MAX 3000 units support up to 40 stacked channels. A unit that can handle n real channels can handle n/3 stacked channels.
Page 190 555-1212, one third dial 555-1213, and one third dial 555-1214. You can leave the Ch N # parameters at their default setting (null) if you do not have a global hunt group. 4-60 MAX 6000/3000 Network Configuration Guide...
Page 191 Figure 4-8. In this case, however, you set up the global hunt group differently than explained in “MP+ and MP-with-BACP calls.” You set up the global hunt group to help prevent MP-without-BACP calls from being split across multiple MAX 6000/3000 Network Configuration Guide 4-61...
Page 192: The Stacking Parameters
To configure a MAX stack, proceed as follows for each MAX in the stack: Open the Ethernet > Mod Config menu and select Stack Options. For example: Ethernet Mod Config RADIUS Server ATMP Modem Ringback=Yes AppleTalk SNTP Server 4-62 MAX 6000/3000 Network Configuration Guide...
Page 193: Disabling A Max Stack
You can set up bidirectional CHAP authentication between the calling PPP device and the called PPP device. The bidirectional CHAP feature increases compliance with the RFC 1994 standard for PPP CHAP authentication. Note that the feature is not implemented for PAP-based authentication (PAP, PAP-TOKEN, or PAP-TOKEN-CHAP). MAX 6000/3000 Network Configuration Guide 4-63...
Page 194: Configuring Bidirectional Chap On The Max Unit
Note: When you set the Recv-Auth parameter to Any, the MAX unit can accept both PAP and CHAP authentication. The Bi-Dir Auth setting will be used only if a form of CHAP authentication has been negotiated during LCP negotiation. If any form of PAP authentication 4-64 MAX 6000/3000 Network Configuration Guide...
Page 195: Setting Up Bidirectional Chap On The Max Unit For Selected Incoming Calls
15 Set Recv PW to any text string. The password you specify is the one sent by the calling unit during the authentication initiated by the MAX unit. MAX 6000/3000 Network Configuration Guide 4-65...
Page 196: Setting Up Bidirectional Chap On The Max Unit For Outgoing Calls
Setting up bidirectional CHAP in RADIUS for incoming calls You can configure selective bidirectional authentication by using CLID or DNIS pre-authentication in a pseudo-user profile, and then specifying two passwords in the user profile. 4-66 MAX 6000/3000 Network Configuration Guide...
Page 197: Setting Up Bidirectional Chap In Radius For Outgoing Calls
Set the Ascend-Receive Secret parameter to the text of the secret received from the called device. Set the Ascend-Bi-Directional-Auth parameter to Bi-Directional-Auth-Allowed or Bi-Directional-Auth-Required. Set the Ascend-Recv-Name parameter to the name of the called party. For example: MAX 6000/3000 Network Configuration Guide 4-67...
Page 198: Setting Up Selective Bidirectional Chap With Callback
DNIS pre-authentication, and the system performs bidirectional authentication for both incoming and outgoing calls. The second-tier user profile is configured for bidirectional CHAP with callback. 8940 User-Password="Ascend-DNIS", Service-Type=Outbound-User Ascend-Require-Auth=Require-Auth, Ascend-Auth-Type=Auth-CHAP, Ascend-Send-Auth=Send-Auth-CHAP, Ascend-Bi-Directional-Auth=Bi-Directional-Auth-Required Mike1_cb User-Password="passin", Service-Type=Framed-User, Ascend-Send-Secret="pass", Framed-Protocol=MP, 4-68 MAX 6000/3000 Network Configuration Guide...
Page 199: Setting Up An Outgoing Call With Double Radius Lookups
RADIUS server of an ISP. Typically, an ISP requires that all of its users be authenticated by its own RADIUS server, and not by the network provider’s equipment. MAX 6000/3000 Network Configuration Guide 4-69...
Page 200 The dialout profile contains all dialout parameters needed to establish the outgoing call, and the user profile contains information for authenticating the called device. Consider the following first-tier dialout profile, configured for bidirectional CHAP authentication: pipe-pat-outUser-Password="ascend" Service-Type=Outbound-User, Framed-Protocol=PPP, Framed-IP-Address=10.4.8.8, 4-70 MAX 6000/3000 Network Configuration Guide...
Page 201 The called party sends a challenge request to the MAX unit. The MAX unit responds with a challenge response. The called party informs the MAX unit about whether the first level of authentication has been successful. MAX 6000/3000 Network Configuration Guide 4-71...
Page 202: Enhanced Support For Ms-Chap
AppleTalk router to support dial-in PPP to AppleTalk. You can set up a unit to enable an AppleTalk client to dial in using PPP in two ways: • With a Connection profile • With a Names/Passwords profile 4-72 MAX 6000/3000 Network Configuration Guide...
Page 203: Configuring An Appletalk Ppp Connection With A Connection Profile
AppleTalk Options menu. If you selected Peer=Router in step 7 of the preceding procedure: Configure the AppleTalk zone name for the MAX unit in the AppleTalk Options subprofile of the Ethernet profile. MAX 6000/3000 Network Configuration Guide 4-73...
Page 204: Configuring Appletalk Connections From Radius
Configuring AppleTalk connections from RADIUS You can set up an AppleTalk connection in a RADIUS user profile and configure static AppleTalk routes in a RADIUS pseudo-user file. For detailed information, see the TAOS RADIUS Guide and Reference. 4-74 MAX 6000/3000 Network Configuration Guide...
Page 205: Configuring Ara Connections
MAX unit by means of ARA Client software and communicate with an IP host on the Ethernet. A connection that does not require IP access would be a subset of this example. Figure 4-12 shows the sample network. MAX 6000/3000 Network Configuration Guide 4-75...
Page 206 Open the Ethernet > Mod Config profile and set the AppleTalk parameter to Yes. If applicable, specify the AppleTalk zone in which the unit resides. Ethernet Mod Config Appletalk=Yes AppleTalk Zone Name=Engineering Exit the profile and, at the exit prompt, select the exit and accept option. 4-76 MAX 6000/3000 Network Configuration Guide...
Page 207: Configuring Terminal-Server Connections
RADIUS. Note: Like PPP connections, terminal-server connections rely on the Answer profile for default settings and enabling of the encapsulation type. For information about the Telco MAX 6000/3000 Network Configuration Guide 4-77...
Page 208: Connection Authentication Issues
If the Connection profile requires PAP or CHAP authentication, the connection fails. Modem connections This section shows sample Connection profiles for a terminal-server connections established via analog modem. The following example uses only the required parameters for authenticating a terminal-server modem connection: 4-78 MAX 6000/3000 Network Configuration Guide...
Page 209: V.120 Terminal-Adapter Connections
The V.120 device must be correctly configured to place calls to the unit. The settings required for compatible operation of a V.120 device and the unit are listed below. For information about entering these settings, see the V.120 manual. • V.120 maximum transmit frame size=260 bytes. MAX 6000/3000 Network Configuration Guide 4-79...
Page 210: Tcp-Clear Connections
Figure 4-14. A TCP-Clear connection User with ISDN modem installed Note: A TCP-Clear connection is host-to-host. As soon as the MAX unit authenticates the connection, the host establishes a TCP connection as specified in the Connection profile. 4-80 MAX 6000/3000 Network Configuration Guide...
Page 211: Settings In A Radius Profile
IP address of a TCP login host. Login-TCP-Port (16) Destination TCP port on the specified login host (an integer from 1 to 65535). The default is 23. Service-Type (6) Specifies whether the link can use framed or unframed services. MAX 6000/3000 Network Configuration Guide 4-81...
Page 212: Tcp-Modem Connections (Dnis Login)
In terminal mode, users have access to the command line and can see information about your network by using administrative terminal-server commands. You can also enable them to initiate their own Telnet, Rlogin, or TCP connections to hosts. 4-82 MAX 6000/3000 Network Configuration Guide...
Page 213: Menu Mode
The modem parameters Calls from analog modems are directed first to the MAX digital modems, where the connections must be negotiated before being directed to the terminal-server software. MAX 6000/3000 Network Configuration Guide 4-83...
Page 214: Example Of A Modem Configuration
Open Ethernet > Mod Config > TServ Options. Set the maximum negotiable baud rate to 26400: Ethernet Mod Config TServ Options Max Baud=26400 Exit the profile and, at the exit prompt, select the exit and accept option. 4-84 MAX 6000/3000 Network Configuration Guide...
Page 215: Configuring Terminal Mode
Whether or not the third prompt appears before or after the regular 3rd Prompt Seq terminal-server login prompts. User’s address with the terminal-server displaying Your IP address is, IP Addr Msg followed by the assigned address. You can change this default message. MAX 6000/3000 Network Configuration Guide 4-85...
Page 216: Example Of Terminal-Mode Configuration
Set the Immed Service parameter to Telnet. Specify the name or IP address of the Telnet host. If appropriate, specify the TCP port to use on the Telnet host. Set the Telnet Host Auth parameter to Yes. 4-86 MAX 6000/3000 Network Configuration Guide...
Page 217: Configuring Menu Mode
Specify the IP addresses and hostnames of up to four hosts to appear in the menu. Ethernet Mod Config TServ Options Host #1 Addr=10.2.3.4 Host #1 Text=host1.abc.com Host #2 Addr=10.2.3.57 Host #2 Text=host2.abc.com Host #3 Addr=10.2.3.121 Host #3 Text=host3.abc.com MAX 6000/3000 Network Configuration Guide 4-87...
Page 218: Configuring Ppp Mode
If you enable SLIP mode in the terminal server, users can initiate a SLIP session and then run an application, such as FTP, in that session. SLIP mode configuration uses the following parameters in Ethernet > Mod Config > TServ Options: Parameter Specifies SLIP SLIP sessions. 4-88 MAX 6000/3000 Network Configuration Guide...
Page 219: Example Of Slip Configuration
If you enable dial-out (not immediate modem), users can access a modem after connecting to the MAX unit from a workstation by means of Telnet. For example: Telnet max01 Once you establish the Telnet session, the user proceeds as follows: MAX 6000/3000 Network Configuration Guide 4-89...
Page 220: Example Of Dial-Out Configuration
Open the Ethernet > Mod Config > TServ Options profile. Enable the use of the modem dial-out and direct-access (immediate-modem) features. For example: Ethernet Mod Config TServ Options Modem dialout=Yes Immediate Modem=Yes 4-90 MAX 6000/3000 Network Configuration Guide...
Page 221: Configuring A Combinet Connection
Combinet configuration involves the following parameters (shown with sample settings): Ethernet Mod Config Bridging=Yes Ethernet Answer Encaps COMB=Yes COMB Options Password Reqd=Yes Interval=10 Compression=Yes Ethernet Connections 000145CFCF01 Station=000145CFCF01 Encaps=COMB Bridge=Yes Encaps Options Password Reqd=Yes Send PW=remotepw Recv PW=localpw Interval=10 Base Ch Count=2 Compression=Yes MAX 6000/3000 Network Configuration Guide 4-91...
Page 222: The Combinet Bridging Parameters
It can be set to 1 (for 64 Kbps) or 2 (for 128 Kbps). Compression The (Connection profile) Compression parameter enables or disables STACKER LZS compression/decompression. Both sides of the link must enable compression or it is not used. 4-92 MAX 6000/3000 Network Configuration Guide...
Page 223: Example Of Combinet Configuration
ISDN. For details, see the MAX Security Supplement. EU configuration involves the following parameters (shown with sample settings): Ethernet Answer Id Auth=Called Reqd Encaps EU-UI=Yes EU-RAW=Yes Ethernet Connections Connection profile Calling #=555-7878 MAX 6000/3000 Network Configuration Guide 4-93...
Page 224: The Eu Parameters
DTE address (DTE Addr) The DTE Addr parameter specifies a value for the called unit in the EU-UI header. The caller must use the same value for the called unit. 4-94 MAX 6000/3000 Network Configuration Guide...
Page 225: Example Of An Eu Connection
Exit the profile and, at the exit prompt, select the exit and accept option. Example of an EU-UI connection To configure a connection using EU-UI encapsulation: Open the Answer profile and make sure that EU-UI encapsulation is enabled. Set Id Auth to Calling Reqd (CLID authentication): MAX 6000/3000 Network Configuration Guide 4-95...
Page 226: Configuring Dhcp Services
IP address can be retrieved from a remote DHCP or BOOTP server. The ability to retrieve an IP address, together with Network Address Translation (NAT), enables a single computer to connect to a remote network that assigns IP addresses dynamically. 4-96 MAX 6000/3000 Network Configuration Guide...
Page 227: How The Max Assigns Ip Addresses
DHCP Spoofing, it contains parameters for all DHCP services, including DHCP Spoofing, DHCP Server, and Plug and Play: Ethernet Mod Config DHCP Spoofing DHCP Spoofing=Yes DHCP PNP Enabled=Yes Renewal Time=10 Become Def. Router=No Dial If link down=No Always Spoof=Yes Validate IP=Yes MAX 6000/3000 Network Configuration Guide 4-97...
Page 228 To assign IP addresses dynamically, set the IP Group 1 parameter to the first address for the IP address pool. 10 Set the Group 1 Count parameter to the number of addresses in the pool. The pool can contain up to 20 addresses. 4-98 MAX 6000/3000 Network Configuration Guide...
Page 229: Setting Up A Dhcp Server
To set up Plug and Play, you must set the following parameters: DHCP Spoofing DHCP Spoofing=Yes DHCP PNP Enabled=Yes Setting up DHCP spoofing To set up DHCP spoofing, you must set the following parameters: MAX 6000/3000 Network Configuration Guide 4-99...
Page 230: Configuring Pots Capability On The Max 6000 And Max 3000
E1 trunks (PRI or R2), or between two POTS ports. Up to four MAXPOTS FXS slot cards can be installed in a MAX 6000-T1 or a MAX 6000-E1. The MAXPOTS FXS card is also available on the MAX 3000 T1, E1 and BRI.
Page 231: Fxs Line Profiles
Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 FXS line profiles There are five possible slot profiles for each MAXPOTS slot card. The first profile (default) is always the active profile. You can save alternative configurations in the other four profiles.
Page 232: Call Routes Profile
Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 The alternative profile appears. Press Ctrl-D to access the DO menu. The DO menu appears. Select L (Load). Note: The Load option does not appear when you are in the active profile.
Page 233 Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 For example, with MAXDAX and Trunk Groups enabled and the following call routes defined: System > Call Routes 901-> Active=Yes Phone= Src Slot=0 Src Port=0 Call Rte Type=Trunk-Any...
Page 234: Internal Sorting Of Call Routes
Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Viewing the call routes with the DO command displays the following screen:. The columns on the Call Routes screen are: Call route profile number in System > Call Routes.
Page 235 Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Parameter Sort order within the parameter Dst Port From the most specific to the least specific. You can configure the most specific slot and port by setting values other than zero. You can configure the least specific slot and port by setting zero values.
Page 236 Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Table 4-2. Example of sorting order (continued) Phone Src Slot/ Call Rte Dst Slot/ Number Src Port Type Dst Port 5551 ““ Fair Share routing You can set the Call Distrib Type parameter to Fair Share so that a call is routed to the available port that has been idle the longest.
Page 237: Numbering Plan Profile
Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 combination is busy, the other gets the call. If both are busy, the longest idle among all ports in Slots 6 and 5 gets the call and so on.
Page 238 Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Automatically prepend trunk digit If you configure the MAX to use trunk groups and the callers do not enter a trunk digit when dialing, you must configure a Call Routes profile to direct the unit to prepend a trunk digit.
Page 239 Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Route by area code To route MAXPOTS calls on the basis of area codes, configure Call Routes profiles with Dial Prefix Filter and New Trunk Group settings. Also make sure that the MAX unit is using trunk groups and that the trunk groups are defined.
Page 240 Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Phone Number= Src Slot=0 Src Port=0 Call Rte Type=Trunk-Voice Dst Chan Grp=N/A or 0 Dst Trnk Grp=8 Dst Slot=0 Dst Port=0 Dial Plan=0 Rewrt Pattn= Rewrt Replce=...
Page 241 Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Port-to-port routing This routing allows the routing of calls from one POTS port on a MAX to another POTS port on the same MAX. The ports do not need to be on the same MAXPOTS slot card, and no other trunks are necessary.
Page 242: Examples Of Rollover Configurations
Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Dst Slot=3 Dst Port=4 Examples of Rollover configurations With MAXPOTS, if a port is busy, the MAX can roll over a call to another port or send the far-end a busy signal.
Page 243 Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Active=Yes Phone Number=^5551212$ Dst Slot=3 Dst Port=1 System Call Routes Call Routes profile 2 Active=Yes Phone Number=^5551212$ Dst Slot=3 Dst Port=2 If Call Distrib Type were set to Fair Share, in this example the MAX would route 5551212 calls to port 1 or port 2, whichever had been idle the longest.
Page 244: Example Of A Numbering Plan Profile
Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Example of a Numbering Plan profile With the following configuration, the MAX expects eleven digits for all phone numbers beginning with a 1, and seven digits otherwise. Callers do not need to press the # key after entering the phone number.
Page 245: Routing Inbound Calls
Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Active=Yes Dst Chan Grp=4 For more information about MAXDAX functions, see the MAX Reference. Routing inbound calls When the MAX receives a call on a WAN line, it performs CLID or DNIS authentication (if configured), answers the call, and routes the call to the MAXPOTS card.
Page 246: Line Status
Configuring Individual WAN Connections Configuring POTS capability on the MAX 6000 and MAX 3000 Phone Number=5556602 Dst Slot=3 Dst Port=2 Line Status From Main Status Menu > Analog FXS > Line Status, you can monitor the activity of each port. Each port can be represented by one of the following characters.
Page 247: Chapter 5 Configuring Frame Relay
Frame Relay switch. A CPE is the source or destination of data traversing the Frame Relay service. For example, the MAX labeled MAX-02 in Figure 5-1 terminates the data stream to its PPP callers. When it is MAX 6000/3000 Network Configuration Guide...
Page 248: Frame Relay Link Management
Using the MAX as a Frame Relay concentrator As a Frame Relay concentrator, the MAX forwards many lower-speed PPP connections onto one or more high-speed Frame Relay interfaces, as shown in Figure 5-2: Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 249: Using The Max As A Frame Relay Switch
MAX and defines the operations and link management functions the MAX performs on the interface. The administrator specifies these settings in a Frame Relay profile or RADIUS frdlink pseudo-user profile. MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001...
Page 250: Configuring Nailed Bandwidth For Frame Relay
Note: Link management settings are optional. It is possible to set up a Frame Relay interface and pass data across it without setting these parameters. However, link management parameters provide a mechanism for retrieving information about the status of the interface and its DLCIs. Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 251: Dialing, Billing And Signaling Parameters
For robbed-bit lines, the MAX uses the billing-number as a suffix that is appended to each phone number it dials for the call. MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001...
Page 252: Link Parameters
DCE monitored event count (from 1 to 10). It is N/A when FR Type is DTE. T391 Link Integrity Verification polling timer (from 5 to 30 seconds). The value should be less than that of T392. T391 is N/A when FR Type is DCE. Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 253: Settings In A Frame Relay Profile
N. If there is a gap in the sequence of numbers, the MAX stops retrieving the profiles when it encounters the gap in sequence. MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001...
Page 254 1 to 10). The default value is 3. Does not apply when Ascend-FR-Type is Ascend-FR-DCE. Ascend-FR-DTE-N393 DTE monitored event count (from 1 to 10). The default is 4. Does (165) not apply when Ascend-FR-Type is Ascend-FR-DCE. Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 255: Examples Of A Uni-Dte Link Interface
Relay profile to define the timing of its Status Enquiries to the DCE and its link integrity parameters. (These correspond to the Ascend-FR-N391, Ascend-FR-DTE-N392, Ascend-FR- DTE-N393, and Ascend-FR-T391 attributes in a RADIUS profile.) Figure 5-4 shows an example of the MAX with a UNI-DTE interface. MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001...
Page 256: Examples Of A Uni-Dce Link Interface
The UNI-DCE uses the values of the T392, DCE N392, and DCE N393 parameters in the Frame Relay profile to define the parameters of the Status Enquiries expected from the DTE. (These correspond to the Ascend-FR-T392, Ascend-FR-DCE-N392, and Ascend-FR-DCE- N393 attributes in a RADIUS profile.) 5-10 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 257 DTE when the segment is confirmed to be active or inactive. Following is a comparable RADIUS profile: frdlink-max-2 Password="ascend", User-Service=Dialout-Framed-User Ascend-FR-Profile-Name="fr-dce", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-DCE, Ascend-FR-Nailed-Grp=36, Ascend-FR-Link-Mgt=Ascend-FR-Q-933A, Ascend-Data-Svc=Nailed-64K, Ascend-FR-T392=15 MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-11...
Page 258: Examples Of An Nni Link Interface
With these link management settings, the MAX uses the ANSI Annex D link management protocol to communicate with Switch-3. It sends a Status Enquiry for Link Integrity Verification to Switch-3 every 10 seconds, and requests a Full status report every sixth enquiry 5-12 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 259: Configuring A Dlci Logical Interface
MAX and the Frame Relay network. Forwarded or routed connections over the Frame Relay link use the following sets of parameters (shown with sample settings): Ethernet Answer Encaps... PPP=Yes FR=Yes PPP Options... Route IP=Yes MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-13...
Page 260: The Frame Relay Connection Parameters
(PVC). The MAX does not allow you to enter duplicate DLCIs, except when they are carried by separate physical links specified in different Frame Relay profiles. 5-14 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 261: Settings In A Radius Profile
A DLCI for this PVC endpoint.The DLCI must be obtained from a Frame Relay provider. The MAX does not allow you to enter duplicate DLCIs, except when they are carried by separate physical links specified in different Frame-Relay profiles. MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-15...
Page 262: Examples Of A Dlci Interface Configuration
Administrators can choose to add static routes to other subnets or to enable RIP updates to or from the router across Frame Relay. The usual considerations for IP routing connections apply (see Chapter 9, “Configuring IP Routing.”) 5-16 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 263: Examples Of Backup Interfaces For Nailed Frame Relay Links
Ethernet Connections Name=pvc Active=Yes Encaps=FR IP options LAN Adrs=10.168.7.11/24 Encaps options FR Prof=frt1-7 DLCI=16 Telco options Call Type=Nailed Following are comparable RADIUS profiles: permconn-max1-1 Password="ascend", User-Service=Dialout-Framed-User User-Name="fp7", Framed-Protocol=FR, Framed-Address=10.168.7.9, Framed-Netmask=255.255.255.0, MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-17...
Page 264 When the primary PVC comes up again, the data flow is directed to that interface again. At that point, the Ifmgr command output again shows both interfaces as up. 5-18 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 265: Concentrating Incoming Calls Onto Frame Relay
Frame Relay gateway. LAN Adrs Destination IP address, which lies at the end of a PVC whose first hop is known by the specified DLCI. MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-19...
Page 266: Routing Parameters In Radius
The following set of parameters configures an MP+ Connection profile for the dial-in client in Figure 5-8: Ethernet Connections mpp-client Name=mpp-client Active=Yes Encaps=MPP Encaps options Recv PW=clientpw IP options LAN Adrs=10.1.2.3/29 Following is a comparable RADIUS profile: mpp-client Password="clientpw", User-Service=Dialout-Framed-User Framed-Protocol=MPP, Framed-Address=10.10.1.3, Framed-Netmask=255.255.255.248 5-20 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 267: Configuring Frame Relay Direct
5-13. Settings in a Connection profile Following are the relevant FR-Direct parameters, shown with sample settings: Ethernet Connections Connection profile Active=Yes Encaps=PPP Route IP=Yes Encaps options Recv PW=clientpw IP options MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-21...
Page 268: Settings In A Radius Profile
Enables/disables IP routing for this connection. (IP is enabled by default. If this attribute is present, it must be set to Route-IP-Yes to enable the MAX to send data back to the appropriate PPP caller. 5-22 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 269: Examples Of Fr Direct Connections
Connections frswitch-1 Name=frswitch-1 Active=Yes Encaps=FR IP options LAN Adrs=10.10.10.10/24 Encaps options FR Prof=fr-dte DLCI=72 Following is a comparable RADIUS profile: permconn-max-3 Password="ascend", User-Service=Dialout-Framed-User User-Name="frswitch-1", Framed-Protocol=FR, Framed-Address=10.10.10.10, Framed-Netmask=255.255.255.0, Ascend-Route-IP=Route-IP-Yes, Ascend-FR-DLCI=72, Ascend-FR-Profile-Name="fr-dte" MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-23...
Page 270 Session options FR Direct=Yes FR Prof=fr-dte FR Dlci=72 Following are comparable RADIUS profiles: caller-1 Password="caller1*3", User-Service=Framed-User Framed-Protocol=PPP, Framed-Address=10.5.6.7, Framed-Netmask=255.255.255.255 Ascend-FR-Direct=FR-Direct-Yes, Ascend-FR-Direct-Profile="fr-dte", Ascend-FR-Direct-DLCI=72 caller-2 Password="caller2!!8", User-Service=Framed-User Framed-Protocol=PPP, Framed-Address=10.7.8.9, Framed-Netmask=255.255.255.255 Ascend-FR-Direct=FR-Direct-Yes, Ascend-FR-Direct-Profile="fr-dte", Ascend-FR-Direct-DLCI=72 5-24 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 271: Configuring The Max As A Frame Relay Switch
A DLCI for this PVC endpoint.The DLCI must be obtained from a Frame Relay provider. The MAX does not allow you to enter duplicate DLCIs, except when they are carried by separate physical links specified in different Frame Relay profiles. MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-25...
Page 272: Settings In A Radius Profile
DLCI 200 Using local profiles The following parameters on the MAX define the datalinks to the MAX and to the Pipeline 130 (P130-East): Ethernet Frame Relay Name=max Active=Yes FR Type=DCE 5-26 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 273: Using Radius Profiles
The following RADIUS frdlink pseudo-user profiles define the datalinks to the MAX and to the Pipeline 130 (P130-East): frdlink-max-21 Password="ascend", User-Service=Dialout-Framed-User Ascend-FR-Profile-Name="max", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-DCE, Ascend-FR-Nailed-Grp=111 frdlink-max-22 Password="ascend", User-Service=Dialout-Framed-User Ascend-FR-Profile-Name="p130east", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-DCE, Ascend-FR-Nailed-Grp=222 MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-27...
Page 274: Examples Of A Circuit Between Nni Interfaces
Name=fr-asnd-a Active=Yes FR Type=NNI Nailed Grp=333 Ethernet Frame Relay fr-asnd-b Name=fr-asnd-b Active=Yes FR Type=NNI Nailed Grp=444 The next set of parameters specifies the circuit between the two Frame Relay interfaces: 5-28 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 275: Using Radius Profiles
Ascend-FR-Type=Ascend-FR-NNI, Ascend-FR-Nailed-Grp=444 The next set of profiles specifies the circuit between the two Frame Relay interfaces: permconn-max-12 Password="ascend", User-Service=Dialout-Framed-User User-Name="asnd-a", Framed-Protocol=FR-CIR, Ascend-Route-IP=Route-IP-No, Ascend-FR-DLCI=100, Ascend-FR-Profile-Name="fr-asnd-a", Ascend-FR-Circuit-Name="pvc-pipe" permconn-max-13 Password="ascend", User-Service=Dialout-Framed-User User-Name="asnd-b", Framed-Protocol=FR-CIR, MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-29...
Page 276: Examples Of Circuits That Use Uni And Nni Interfaces
The following parameters on MAX-42 define the datalinks to the MAX and MAX-39: Ethernet Frame Relay dce-max Name=dce-max Active=Yes FR Type=DCE Nailed Grp=555 Ethernet Frame Relay nni-39 Name=nni-39 Active=Yes FR Type=NNI Nailed Grp=999 5-30 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 277 The following parameters on MAX-39 define the datalinks to MAX-42 and to the Pipeline 130: Ethernet Frame Relay nni-42 Name=nni-42 Active=Yes FR Type=NNI Nailed Grp=777 Ethernet Frame Relay dce-p130 Name=dce-p130 Active=Yes FR Type=dce Nailed Grp=888 MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-31...
Page 278: Using Radius Profiles
Ascend-FR-Profile-Name="dce-max", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-DCE, Ascend-FR-Nailed-Grp=555 frdlink-max-26 Password="ascend", User-Service=Dialout-Framed-User Ascend-FR-Profile-Name="nni-39", Ascend-Call-Type=Nailed, Ascend-FR-Type=Ascend-FR-NNI, Ascend-FR-Nailed-Grp=999 The next set of profiles specifies the circuit on MAX-42: permconn-max-14 Password="ascend", User-Service=Dialout-Framed-User User-Name="max" Framed-Protocol=FR-CIR, Ascend-Route-IP=Route-IP-No, Ascend-FR-DLCI=100, Ascend-FR-Profile-Name="dce-max", Ascend-FR-Circuit-Name="cir-42" 5-32 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 279: Configuring Switched Frame Relay Connections
CLID or DNIS of an incoming call. Once the session is established, it behaves just like a nailed Frame Relay connection with an access MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001...
Page 280: Configuring A Switched Frame Relay Connection
To configure a Frame relay profile for a Frame Relay switched connection, proceed as in the following example: Open Ethernet > Frame Relay> any profile Specify a Name. For example: Station=fr-sw-fr Set Active to Yes. Set Call Type to Switched. 5-34 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 281: Configuring A Connection Profile
Set Profile Reqd=Yes. If necessary, set the Id Auth parameter as follows: – Require (for CLID) – Called Require (for DNIS) Open the Encaps Options submenu. Set FR to Yes. MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-35...
Page 282: Establishing The Connection
Ascend-FR-Profile-Name attribute of the DNIS or CLID profile. Sample RADIUS DNIS profile Following is a sample RADIUS DNIS profile: 3762 Password=“Ascend-DNIS” Ascend-Require-Auth=Not-Require-Auth User-Service=Framed-User, Framed-Protocol=FR, Framed-Address=10.10.10.212, Framed-Netmask=255.255.255.0, Ascend-Route-IP=Route-IP-Yes, 5-36 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 283: Sample Radius Clid Profile
The MAX retrieves the following example RADIUS Route profile when it powers up or when you update routes by executing the Sys > Sys Diag > Upd Rem Cfg command: route-My-MAX4000-1 Password="ascend",User-Service=Dialout-Framed-User Framed-Route="10.10.10.0/24 10.10.10.212 1 n switched-dte1-out" MAX 6000/3000 Network Configuration Guide Preliminary January 4, 2001 5-37...
Page 284: Sample Radius Frame Relay Data Link Profile
The value in User-Name matches the name specified in the associated Route profile. • The value in Ascend-FR-Profile-Name matches the name of the associated Frame Relay Data Link profile. • You set Ascend-Call-Type to Switched. 5-38 Preliminary January 4, 2001 MAX 6000/3000 Network Configuration Guide...
Page 285: Chapter 6 Configuring X.25
For example, Always On/Dynamic ISDN (AO/DI) can send low-bandwidth transmissions over the D channel and add switched B channels as bandwidth requirements increase. (For example, the D channel is usually sufficient for email transmissions, but not for MAX 6000/3000 Network Configuration Guide...
Page 286: Introduction To Lucent X.25 Implementation
WAN connection, the data service type for the link: Parameter Specifies Name The profile’s name. The name must be unique and cannot exceed 15 characters. Active That the profile is available for use. MAX 6000/3000 Network Configuration Guide...
Page 287: Dialing, Billing And Signaling Parameters
Link Access Procedure (LAP) is a protocol containing a subset of High-Level Data Link Protocol (HDLC) features. In order to maintain compatibility with HDLC, LAP was changed to create Link Access Procedure, Balanced (LAPB) which is a protocol for B channels that use packet-switching mode. MAX 6000/3000 Network Configuration Guide...
Page 288: X.25 Profile Parameters
Equipment (DCE) is a device that connects the DTE to a communications channel. X.25 window size The default for maximum number of outstanding data packets that can accumulate before the MAX requires an acknowledgment. The default is 2. MAX 6000/3000 Network Configuration Guide...
Page 289 The duration of the Clear-Request timer (the number of one-second ticks the MAX waits before retransmitting a Clear-Request packet). X.25 R23 The number of Clear-Request retransmits the MAX sends before waiting indefinitely for a response. MAX 6000/3000 Network Configuration Guide...
Page 290: X.121 And Vce Timer Val Parameters
Is the X.25 node a DTE or DCE? X.25 Node Type=DTE Is the link SVC or PVC? X.25 Link Setup Mode=Active X.25 Lowest PVC=1 X.25 Highest PVC=8 Maximum packet size 1024 X.25 Max Pkt Size=1024 MAX 6000/3000 Network Configuration Guide...
Page 291 X.25 Min pkt size=64 X.25 Max pkt size=1024 Specify the X.121 source address to use on this link: X.121 src addr=031344159782738 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide...
Page 292: Configuring X.25 Ip Connections
You can specify the NUI, consisting of up to six digits, to use in the next call request. The default is null. MAX 6000/3000 Network Configuration Guide...
Page 293: Max Unsucc. Calls, Inactivity Timer, And Mru Parameters
* which indicates that the MAX should accept any value, requiring a match only on the trailing digits that you specify after the wildcard character. For outgoing calls, the MAX dials only the trailing digits specified, ignoring the beginning wildcard character. MAX 6000/3000 Network Configuration Guide...
Page 294: Route Ip And Lan Adrs
Enable IP routing and specify the IP address of the answering unit: Route IP=Yes Ip options... LAN Adrs=10.65.212.226/24 Enable X.25/IP encapsulation and then open the Encaps Options subprofile. Specify the name of the X.25 profile that carries this connection: 6-10 MAX 6000/3000 Network Configuration Guide...
Page 295: Configuring X.25 Pad Connections
This section lists the parameters related to configuring X.25 PAD connections located in both the Ethernet > Answer > PAD Options and Ethernet > Connections > Connection profile > Encaps Options. (These parameters are described on page 6-8 and following the list below.) MAX 6000/3000 Network Configuration Guide 6-11...
Page 296: X.3 Param Prof
The banner message that the user or a calling device sees when starting an X.25 PAD (Triple-X) session on the MAX. The PAD user can be either a user or a calling device running a script. You can specify up to 32 characters. The default is null. 6-12 MAX 6000/3000 Network Configuration Guide...
Page 297: Configuring An X.25 Pad Connection
Figure 6-2. Example of a X.25 PAD connection 311021755555 To configure this sample X.25 PAD connection. Open the Answer profile and enable X.25/PAD encapsulation. Open a Connection profile, name it, and activate the profile. Enable X.25/PAD encapsulation. MAX 6000/3000 Network Configuration Guide 6-13...
Page 298: Example Of X.25 Pad
PAD. Table 6-2 lists the X.3 parameters, numbered 1–22. Table 6-2. X.3 parameters Parameter Description Possible values PAD recall 0—Escape not allowed 1—Escape allowed (the default) Echo 0—No echo 1—Echo (the default) 6-14 MAX 6000/3000 Network Configuration Guide...
Page 299 Line folding 0—No line folding (the default) 1–255—Number of characters per line Terminal-server 10—50 bps access speed 5—75 bps 9—100 bps 0—110 bps 1—134.5 bps 6—150 bps 8—200 bps 2—300 bps MAX 6000/3000 Network Configuration Guide 6-15...
Page 300 0–127 (a character from International Alphabet #5) Line delete 0–127 (a character from International Alphabet #5) Line display 0–127 (a character from International Alphabet #5) Editing PAD 0—No editing PAD service signals service signals 1—Editing PAD service signals 6-16 MAX 6000/3000 Network Configuration Guide...
Page 301 1:1, 2:1, 3:2, 4:0, 5:2, 6:5, 7:2, 8:0, 9:0, 10:0, 12:1, 13:4, 14:0, 15:1, 16:8, 17:24, 18:18, 19:2, 20:0, 21:3, 22:0 SHARK 1:0, 2:0, 3:2, 4:0, 5:0, 6:0, 7:2, 8:0, 9:0, 10:0, 12:0, 13:0, 14:0, 15:0, 16:0, 17:0, 18:0, 19:0, 20:0, 21:0, 22:0 MAX 6000/3000 Network Configuration Guide 6-17...
Page 302: X.25 Pad Commands
EXP to 0 and LCL to the number of columns to which your terminal expands tabs. The settings enable the PAD to perform correct line folding, line deletion, and character deletion. The keywords function as follows: 6-18 MAX 6000/3000 Network Configuration Guide...
Page 303: X.25 Pad Commands For Managing Calls
If you specify *P, the screen does not echo the data as you enter it, even if you set X.3 parameter number 2 to Echo. This specification is useful for entering passwords. If you specify *D, the screen echoes the data as you enter it. MAX 6000/3000 Network Configuration Guide 6-19...
Page 304 1 to 32 bytes of data to the remote DTE without being subject to flow control. The exchange of Interrupt packets does not affect the exchange of data packets or flow-control packets. • listen [addr=<address> | data=data] 6-20 MAX 6000/3000 Network Configuration Guide...
Page 305: Pad Service Signals
In response to the Status command, this signal indicates that a virtual call has been cleared. PAR with X.3 This string is a response to the Set? command. parameter reference numbers and their current values MAX 6000/3000 Network Configuration Guide 6-21...
Page 306: X.25 Clear Cause Codes
Ship absent Gateway-detected procedure error Gateway congestion X.25 diagnostic field values Table 6-6 shows the meanings of the X.25 diagnostic codes. Table 6-6. X.25 diagnostic field values Diagnostic value value No additional information Invalid P(S) 6-22 MAX 6000/3000 Network Configuration Guide...
Page 307 Unidentifiable packet Call on one-way LC Invalid packet type on a PVC Reject not subscribed to Packet too short Packet too long Restart packet with nonzero LC Unauthorized interrupt confirmation Unauthorized interrupt Unauthorized reject MAX 6000/3000 Network Configuration Guide 6-23...
Page 308: Configuring X.25 Pad Users From Radius
Ascend-X25-Pad-X3-Profile to Custom and use the Ascend-X25-Pad-Parameters attribute to configure the PAD X.3 parameters on a per-user basis. However, when the PAD users are configured from RADIUS, the ability to store a 6-24 MAX 6000/3000 Network Configuration Guide...
Page 309: Customizing Script Support For X.25 Pad
To access the PAD, enter the X28 command at the terminal-server prompt: % X28 Alternatively, you can enter the PAD command, which is identical to the X.28 command. X.25 PAD commands The two X.25 PAD commands are Storeprof and Call. MAX 6000/3000 Network Configuration Guide 6-25...
Page 310: Accessing The Pad By Using The Pad Script Support Feature
(Note that the user at the calling end could be an application running a PAD script.) % atd1234567 CONNECTED THIS IS A BANNER MESSAGE ENTER NUI: % 123456 123456 ENTER NUI PASSWORD: % 654321 6-26 MAX 6000/3000 Network Configuration Guide...
Page 311: Configuring X.32 Profiles For Incoming Switched X.25 Connections
Configuring X.32 profiles for incoming switched X.25 connections For MAX 6000 units, X.32 profiles include a parameter called Appl Mode (Ethernet > Connections > Connection profile > X.32 > Encaps Options > Appl Mode), which has two settings. The first setting, Net2Net (the default), enables you to route incoming calls to the nailed X.25 connection.
Page 312: Net2Net Circuit Mode
Client But a MAX 6000 unit can enable several X.25 clients to share a single connection to an X.25 network. In Figure 6-4, the X.25 switch connects to the MAX 6000. The X.25 switch sees the MAX 6000 as a terminating device—Data Terminal Equipment (DTE). The clients see the MAX 6000 as an X.25 switch—Data Communications Equipment (DCE).
Page 313: Isdn Packet Mode (On-Demand X.25)
X.25 switch and the MAX unit. MAX units also support packet-mode X.25 connections. Figure 6-5 shows a client dialing in to a MAX 6000 unit over a switched X.25 connection. This client also has an always on/dynamic ISDN (AO/DI) connection to the MAX unit.
Page 314: Setting Up Isdn D Channel X.25 Support
A typical use of T3POS is performing credit card authorization over the D channel while using the B channels to transmit inventory control data and other traffic. Figure 6-7 shows an example of a T3POS setup. 6-30 MAX 6000/3000 Network Configuration Guide...
Page 315: Protocol Summary
X.25 network or the T3POS DTE. T3POS essentially uses a data format of 8 bits, no parity. The format is actually 7 bits, 1 parity, but the MAX ignores the parity bit. MAX 6000/3000 Network Configuration Guide 6-31...
Page 316 XRC is the checksum. For all modes except Binary-Local, the checksum is a one character Longitudinal Redundancy Check (LRC) checksum. For Binary-Local mode, the checksum is a two character Cyclic Redundancy Check (CRC) checksum. T3POS Timers The T3POS protocol defines six timers: • T1: Char-to-Char timer 6-32 MAX 6000/3000 Network Configuration Guide...
Page 317: Flow Control
T3POS,” Applied Digital Design, version 2.1, March 1994. Specifies error recovery mechanisms between a T3POS DTE and a T3POS PAD on one side and a T3POS PAD and the T3POS host on the other side. MAX 6000/3000 Network Configuration Guide 6-33...
Page 318: Configuring A T3Pos Connection
Via a TCP/IP client to the default TCP modem port 6150 (or to the TCP modem port configured on the unit). • Via a TCP/IP client to port 23 (for Telnet access) or to 513 (for Rlogin access). 6-34 MAX 6000/3000 Network Configuration Guide...
Page 319: Always On/Dynamic Isdn (Ao/Di)
AO/DI enables you to send and receive data through a nailed X.25 connection (supported by way of an ISDN D-channel or other forms of nailed connection), using switched ISDN B-channels only when required on the basis of increased bandwidth utilization. MAX 6000/3000 Network Configuration Guide 6-35...
Page 320: Introduction
B Ch #, the MAX dials the first active, available B-channel for which you specify the: • Net/T1 > Line Config > Line profile > Line m > Ch n # parameter • Net/E1 > Line Config > Line profile > Line m > Ch n # parameter 6-36 MAX 6000/3000 Network Configuration Guide...
Page 321: Configuring An Ao/Di Connection
Contact your carrier for the correct value. Set any remaining X.25 parameters as your carrier specifies. 10 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 6-37...
Page 322: Configuring The Answer Profile
From the Connection profile menu, open the Encaps options submenu. Set BACP to Yes. Set both Base Ch Cnt and Max Ch Cnt parameters to the maximum number of channels allowed for the connection. Set InterfaceType to X.25. 6-38 MAX 6000/3000 Network Configuration Guide...
Page 323: Displaying Ao/Di Operation
Displaying whether or not the MAX supports AO/DI The System > Sys Options window provides a read-only list that identifies the MAX and names each of the features (including AO/DI) which it has been equipped. Press the tab key to MAX 6000/3000 Network Configuration Guide 6-39...
Page 324: Displaying Active Ao/Di Calls
For example, when the MAX adds a second B-channel on the basis of bandwidth utilization, the following window appears: |-------------------| |AODI1 |Qual Good 05:07:00 | |112k 3 channels | |CLU 64% | |-------------------| The 112k indicates that data flows through the two B-channels only. 6-40 MAX 6000/3000 Network Configuration Guide...
Page 325: Displaying Packet Processing For A Specific Session
MP calls. The following example shows the details of a RADIUS accounting Start record for an X.25 SVC session of an active AO/DI call: Sun Jan 17 12:40:24 1999 User-Name="aodi1" NAS-Identifier=12.12.6.212 NAS-Port=12508 NAS-Port-Type=Sync Acct-Status-Type=Start Acct-Delay-Time=0 Acct-Session-Id="285427838" Acct-Authentic=RADIUS Ascend-Multilink-ID=2 Ascend-Num-In-Multilink=1 Ascend-Modem-PortNo=3 Ascend-Modem-SlotNo=9 Framed-Protocol=MP Framed-Address=13.13.1.201 MAX 6000/3000 Network Configuration Guide 6-41...
Page 326 Sun Jan 17 12:42:44 1999 User-Name="aodi1" NAS-Identifier=12.12.6.212 NAS-Port=12501 NAS-Port-Type=Sync Acct-Status-Type=Stop Acct-Delay-Time=0 Acct-Session-Id="285427838" Acct-Authentic=RADIUS Acct-Session-Time=140 Acct-Input-Octets=2398 Acct-Output-Octets=12072 Acct-Input-Packets=55 Acct-Output-Packets=176 Ascend-Disconnect-Cause=1 Ascend-Connect-Progress=83 Ascend-Xmit-Rate=9600 Ascend-Data-Rate=9600 Ascend-PreSession-Time=1 Ascend-Pre-Input-Octets=194 Ascend-Pre-Output-Octets=157 Ascend-Pre-Input-Packets=9 Ascend-Pre-Output-Packets=9 Ascend-First-Dest=14.14.1.212 Ascend-Multilink-ID=2 Ascend-Num-In-Multilink=0 Ascend-Modem-PortNo=3 Ascend-Modem-SlotNo=9 Framed-Protocol=MP Framed-Address=13.13.1.201 6-42 MAX 6000/3000 Network Configuration Guide...
Page 327 A second B channel from line 1, channel 2, is added by the AO/DI client at IP address 1.2.3.4. The session number for this second B-channel call is 212345678. The following Start record is generated: MAX 6000/3000 Network Configuration Guide 6-43...
Page 328 Ascend-Multilink-ID=1 Ascend-Num-In-Multilink=2 Ascend-Modem-PortNo=5 Ascend-Modem-SlotNo=9 Framed-Protocol=MP Framed-Address=1.2.3.4 The AO/DI client drops the other B channel from line 1, channel 1. The following Stop record is generated: Wed Dec 23 16:28:48 1998 User-Name="aodi" NAS-Identifier=12.126.212 NAS-Port=10101 NAS-Port-Type=Sync 6-44 MAX 6000/3000 Network Configuration Guide...
Page 329 The AO/DI client drops the X.25 call. The following Stop record is generated: Wed Dec 23 16:32:48 1998 User-Name="aodi1" NAS-Identifier=12.126.212 NAS-Port=12501 NAS-Port-Type=Sync Acct-Status-Type=Stop Acct-Delay-Time=0 Acct-Session-Id="012345678" Acct-Authentic=RADIUS Acct-Session-Time=60 Acct-Input-Octets=321 Acct-Output-Octets=166 Acct-Input-Packets=11 Acct-Output-Packets=6 Ascend-Disconnect-Cause=1 Ascend-Connect-Progress=83 Ascend-Xmit-Rate=9600 Ascend-Data-Rate=9600 Ascend-PreSession-Time=1 Ascend-Pre-Input-Octets=194 Ascend-Pre-Output-Octets=157 Ascend-Pre-Input-Packets=9 Ascend-Pre-Output-Packets=9 Ascend-Multilink-ID=1 Ascend-Num-In-Multilink=0 Ascend-Modem-PortNo=3 MAX 6000/3000 Network Configuration Guide 6-45...
Page 330: Radius Dial-In Ao/Di Profile For Pap/Chap With A Fixed Ip Address
# link is a nailed channel on the X.25 network interface. Ascend-Call-Type= AO/DI, # Ascend-Dial-Number specifies the B-channel number to dial when the # unit needs to initiate the call for adding bandwidth. Ascend-Dial-Number=953762, 6-46 MAX 6000/3000 Network Configuration Guide...
Page 331: Changes To Show Users Command
(as shown by the User Name field), the caller’s IP address (as shown by the Host Address field), or the mpID. ascend% sh users I Session Line: Slot: Tx Service Host User MAX 6000/3000 Network Configuration Guide 6-47...
Page 332 13.13.1.201 aodi1 I 285427860 1:22 MP[2] 13.13.1.201 aodi1 ascend% Note that the X.25 channel reports N/A for the Line: Chan field, and reports 9.6k for both the Tx Data and the Rx Data fields. 6-48 MAX 6000/3000 Network Configuration Guide...
Page 333: Chapter 7 Configuring Ip Fax
Configuring IP fax options..........7-5 Atlas redialer and DID support on MAX 6000 units ......7-12 Your MAX unit’s store-and-forward IP fax capability enables your corporate hub to use the...
Page 334: Outgoing Ip Faxes
7-5, the following parameters in the System profile affect the resources available for outgoing fax calls. (The settings shown are the defaults.) System Sys Config Use Trunk Grps=No Num Trunk Digits=1 Parallel Dial=2 Net/T1 Line Config any profile Ch 1 TrnkGrp=9 MAX 6000/3000 Network Configuration Guide...
Page 335: Assigning Bandwidth For Typical Ip Fax Usage
If the fax server configuration also specifies 2-digit trunk groups and trunk group 5, the following channels are available for IP fax usage. System Sys Config Use Trunk Grps Num Trunk Digits Net/T1 Line Config any profile MAX 6000/3000 Network Configuration Guide...
Page 336: Configuring A Typical Call Route Profile
The Parallel Dial parameter limits the number of dial-out calls that the system can place at one time. If the maximum number of dial-out calls is being processed and a dial-out request is made, the system queues the request and processes it at the earliest possible opportunity. MAX 6000/3000 Network Configuration Guide...
Page 337: Configuring Ip Fax Options
The MAX unit compares the values to the Server-Login and Server-Password settings. TCP port on which the fax server listens for incoming fax Incoming Port data. (Incoming fax data is received from a fax machine redialer.) The default is zero. MAX 6000/3000 Network Configuration Guide...
Page 338: Example Of An Ip Fax Configuration For Incoming Faxes
TCP session and the MAX unit regains control of its modem. Figure 7-3. Receiving and forwarding incoming IP faxes Fax is Fax is received sent... Redialer PSTN PSTN 456-555-2222 123-555-1111 Internet Fax server Fax server Fax server RADIUS 10.1.2.34 10.1.2.56 MAX 6000/3000 Network Configuration Guide...
Page 339: Example Of An Ip Fax Configuration For Outgoing Faxes
The fax server logs in to the unit, entering the specified Login and Password parameters, and initiates a modem dial-out session to forward the fax over the PSTN. When the fax transmission is completed, the fax server terminates the TCP session and the MAX unit gains control of its modem. MAX 6000/3000 Network Configuration Guide...
Page 340: Fax Hangup Codes And Disconnect Cause Codes
Note: For fax accounting, a fax session starts when a modem resource is allocated and stops when a session is terminated. Fax hangup codes and disconnect cause codes Conexant supplies two fax hangup codes: • +FHNG 1—when fax tones are recognized but the handshake fails MAX 6000/3000 Network Configuration Guide...
Page 341: Ip Fax Call Accounting
Line at which the call originated. This information is available when the event type is callCleared(3). eventSlotChannelNumber Channel at which the call originated. This information is avail- able when the event type is callCleared(3). MAX 6000/3000 Network Configuration Guide...
Page 342: Radius Support For Ip Fax Operation
IP fax call. ipFax(19) RADIUS support for IP fax operation The following RADIUS attributes, which appear in Accounting Stop packets, provide outgoing and incoming call values for IP fax calls: 7-10 MAX 6000/3000 Network Configuration Guide...
Page 343 Assigns the callback or outgoing IP fax call to a MAX trunk (115) group. The value of Ascend-CBCP-Trunk-Group is prepended to the number that the MAX unit dials for callback or an outgoing fax call. Specify a trunk-group number from 1 to 9 . MAX 6000/3000 Network Configuration Guide 7-11...
Page 344: Syslog Support For Ip Fax Operation
Configuring IP Fax Atlas redialer and DID support on MAX 6000 units Attribute Value Ascend-CBCP-Trunk-Group applies only if one or both of the following conditions are true: • Calback Control Protocol (CBCP) is negotiated for a connection. • The call is an outgoing IP fax call and trunk groups are enabled in the System profile.
Page 345: Specifying The Type Of Redialer
Configuring IP Fax Atlas redialer and DID support on MAX 6000 units Specifying the type of redialer You can select the type of redialer for incoming fax calls by setting the Dialer Type parameter, in the IP Fax Options profile to specify Mitel or Atlas. In previous software releases, MAX units supported only the Mitel redialer.
Page 346: Chapter 8 Configuring Ospf Routing
7.5 minutes. In addition, a large table can require multiple broad- casts for each update, which consumes a lot of bandwidth. OSPF uses a topological database of the network and propagates only changes to the database, which results in more efficient pro- pogation. MAX 6000/3000 Network Configuration Guide...
Page 347: Taos Implementation Of Ospf
OSPF enables the flexible configuration of IP subnets. Each route distributed by OSPF has a destination and mask. Two different subnets of the same IP network number can have different sizes (different masks). This capability is commonly referred to as Variable Length Subnet MAX 6000/3000 Network Configuration Guide...
Page 348: Exchange Of Routing Information
Designated and Backup Designated Routers In OSPF terminology, a broadcast network is any network that has more than two OSPF routers attached and that supports the capability to address a single physical message to all of the attached routers. MAX 6000/3000 Network Configuration Guide...
Page 349: Configurable Metrics
Figure 8-3 shows how costs direct traffic over high-speed links. For example, if Router-2 in Figure 8-3 receives packets destined for Host B, it routes them through Router-1, across two T1 links (Cost=20), rather than across one 56Kbps B-channel to Router-3 (Cost=240). MAX 6000/3000 Network Configuration Guide...
Page 350: Hierarchical Routing (Areas)
These routers are Area Border Routers (ABRs). In Figure 8-4, all of the routers are ABRs. If you set up the ABRs and area boundaries correctly, link-state databases are unique to an area. MAX 6000/3000 Network Configuration Guide...
Page 351: Stub Areas
NSSAs can originate and import Type-7 LSAs. Like stub areas, NSSAs cannot originate or import Type-5 LSAs. • Type-7 LSAs can only be advertised within a single NSSA. They are not flooded throughout the AS as are Type-5 LSAs. MAX 6000/3000 Network Configuration Guide...
Page 352: The Link-State Routing Algorithm
Actual routing tables also contain externally derived routing data, which is advertised throughout the AS but kept separate from the link-state data. Also, each external route can be tagged by the advertising MAX 6000/3000 Network Configuration Guide...
Page 353 Table 8-3. Shortest-path tree and resulting routing table for Router-2 Destination Next Hop Metric Network-1 Router-1 Network-2 Direct Network-3 Direct Network-4 Router-2 Table 8-4. Shortest-path tree and resulting routing table for Router-3 Destination Next Hop Metric Network-1 Router-2 Network-2 Router-2 Network-3 Direct Network-4 Direct MAX 6000/3000 Network Configuration Guide...
Page 354: Configuring Ospf Routing In The Max
Ethernet profile, as an OSPF router in the backbone area. To configure MAX-1 as an OSPF router on Ethernet, you need to make sure that the MAX is configured as an IP host and then configure OSPF features. MAX 6000/3000 Network Configuration Guide...
Page 355: Make Sure The Max Is Configured As An Ip Host
A setting of 0 excludes the MAX from becoming a DR/BDR. The higher the priority value of the MAX relative to other OSPF routers on the network, the better the chances that it will become a BDR/DR. 8-10 MAX 6000/3000 Network Configuration Guide...
Page 356 If access to the backbone area requires authentication, set the AuthType parameter to specify the authentication method and depending on which authentication method you select, set either the AuthKey or KeyID parameter to specify the password. For example: AuthType=Simple AuthKey=lucent0 MAX 6000/3000 Network Configuration Guide 8-11...
Page 357: Configuring Ospf Across The Wan
Open the Connection profile for the remote MAX unit, enable the Route IP parameter, and configure the IP routing connection. For example: Ethernet Connections 90-101 Cprofile1 IP options... LAN Adrs=10.2.3.4/24 WAN Alias=0.0.0.0 IF Adrs=0.0.0.0 Metric=7 Preference=N/A Private=No 8-12 MAX 6000/3000 Network Configuration Guide...
Page 358: Configuring A Wan Link That Does Not Support Ospf
To enable OSPF to add the RIP-v2 routes to its routing table, configure RIP-v2 normally in this Connection profile. OSPF imports all RIP routes as Type-2 ASEs. In this example, RIP is turned off on the link and ASE information is configured explicitly. MAX 6000/3000 Network Configuration Guide 8-13...
Page 359 T1 link: Cost=240 Set the ASE-type parameter to specify the ASE type for this route. ASE-type=Type 2 This parameter specifies the type of metric to be advertised for an external route. 8-14 MAX 6000/3000 Network Configuration Guide...
Page 360: Configuring The Max As An Nssa Internal Router
Note: Set the NSSA-ASE7 parameter to Advertise, or to DoNotAdvertise, to specify whether you want to advertise this route outside the NSSA. The settings for the remaining parameters depend on your environment. Metric= Preference= Private= Ospf-Cost= LSA-type= ..ASE-tag= Third-Party= MAX 6000/3000 Network Configuration Guide 8-15...
Page 361 Configuring OSPF Routing Configuring OSPF routing in the MAX Exit the profile and, at the exit prompt, select the exit and accept option. Reset the MAX. 8-16 MAX 6000/3000 Network Configuration Guide...
Page 362: Chapter 9 Configuring Ip Routing
Table 9-1 lists the number of network bits in the default subnet mask for each class. Table 9-1. IP address classes and number of network bits Class Address range Network bits Class A 0.0.0.0—127.255.255.255 MAX 6000/3000 Network Configuration Guide...
Page 363: Subnet Mask Format
In Figure 9-2, three available bits present eight possible bit combinations. Of the eight possible host addresses, two are reserved, as follows: 000 — Reserved for the network (base address) 111—Reserved for the broadcast address of the subnet MAX 6000/3000 Network Configuration Guide...
Page 364: Zero Subnetworks
You should decide whether to support and configure zero subnetworks for your environment. If you configure them in some cases and treat them as unsupported in other cases, you will encounter routing problems. MAX 6000/3000 Network Configuration Guide...
Page 365: Ip Routing Table
IP routing, but for which no static routes or Connection profiles have been defined. The unit’s Ethernet interface has the IP address 10.10.10.2 with a subnet mask of 255.255.0.0. MAX 6000/3000 Network Configuration Guide...
Page 366: Wan Ip Interfaces
WAN IP address can be a local address assigned dynamically when the caller logs in, an address on a subnet of the local network, or a unique IP network address for a remote device. Assignment of interface addresses depends on whether you use system-based routing or interface-based routing. MAX 6000/3000 Network Configuration Guide...
Page 367 The unit accepts IP packets addressed to a numbered interface, considering them to be destined for the unit itself. (The packet can actually arrive over any interface, and the numbered interface corresponding to the packet’s destination address need not be active.) MAX 6000/3000 Network Configuration Guide...
Page 368: Configuring Lan Interfaces
13.6.7.8. The host 12.1.1.2 and the host assigned 13.1.2.3 share a physical cable segment, but do not communicate directly. The MAX unit must route traffic between the two networks. Figure 9-5. Sample dual IP network Address=12.1.1.2 Address=13.1.2.3 Address=12.1.1.3 Address=13.6.7.8 IP Adrs =12.1.1.1 2nd Adrs =13.9.7.5 MAX 6000/3000 Network Configuration Guide...
Page 369: Configuring Routing Table Updates
On a large corporate backbone, many sites configure subnets to increase the network address space, segment a complex network, and control routing in the local environment. For example, Figure 9-6 shows the main backbone IP network (10.0.0.0) supporting a Lucent GRF router (10.0.0.17). MAX 6000/3000 Network Configuration Guide...
Page 370 For more information about IP Route profiles, see “Configuring IP routes” on page 9-55. To verify that the unit is connected to the local network, invoke the terminal-server interface and Ping a local IP address or hostname. For example: ascend% ping 10.1.2.3 MAX 6000/3000 Network Configuration Guide...
Page 371: Configuring System-Level Routing Policies
IP addresses on a separate IP network or subnet, make sure you inform other IP routers about the route to that network or subnet, either by statically configuring those routes or by configuring the unit to dynamically send updates. 9-10 MAX 6000/3000 Network Configuration Guide...
Page 372: Forcing Callers Configured For A Pool Address To Accept Dynamic Assignment
This example shows how to set up network-aligned address pools and use route summarization. It also shows how to enter a static route for the pool subnet and make the Connection profile route private, both of which are requirements when using route summarization. MAX 6000/3000 Network Configuration Guide 9-11...
Page 373 Note: The MAX unit creates a host route for every address assigned from the pools, and host routes override subnet routes. Therefore, packets whose destination matches an assigned IP address from the pool are properly routed and not discarded or bounced. Because the unit 9-12 MAX 6000/3000 Network Configuration Guide...
Page 374: Boot Protocol (Bootp) Requests To Other Networks
To configure the unit to enable BOOTP relay, you must set the Boot Relay Enable parameter to Yes. In addition, you must disable Ethernet > Mod Config > TServ Options > SLIP BOOTP. MAX 6000/3000 Network Configuration Guide 9-13...
Page 375: Name Resolution Service (Dns Or Wins)
WAN connection torn down when a connection fails. List Size The maximum number of DNS addresses presented in the DNS host list for a terminal server session in response to a DNS query. 9-14 MAX 6000/3000 Network Configuration Guide...
Page 376: Dns Lists
Configuring the MAX unit for DNS or WINS address resolution enables the unit to use local DNS or WINS servers to translate between hostnames and IP addresses. The following examples illustrate procedures for configuring address resolution and managing the DNS table. MAX 6000/3000 Network Configuration Guide 9-15...
Page 377 Valid hostnames must adhere to the following rules. Each name in the local DNS table: • Must be unique in the table. • Must start with an alphabetic character, which can be either uppercase or lowercase. • Must be less than 256 characters. 9-16 MAX 6000/3000 Network Configuration Guide...
Page 378 While the editor is in use, the system cannot look up addresses in the table or perform automatic updates. A table entry is one of the eight table indexes. It includes the hostname, IP address (or addresses), and information fields. MAX 6000/3000 Network Configuration Guide 9-17...
Page 379 Either type a new IP address and press Enter, or leave the current address and press Enter. – To change the IP address, type the new IP address. – If you are changing the name of the entry but not the IP address, just press Enter. 9-18 MAX 6000/3000 Network Configuration Guide...
Page 380: Configuring Dhcp Services
Default Gateway and Domain Name Server. Plug and Play works with Microsoft Windows 95 (and possibly with other IP stacks) to assign an IP address and other Wide Area Networking settings to a requesting device automatically. With Plug and Play you MAX 6000/3000 Network Configuration Guide 9-19...
Page 381: Examples Of Dhcp Service Configuration
To enable Plug and Play, set the DHCP PNP Enabled parameter to Yes. Setting this parameter to Yes with DHCP Spoofing set to Yes is all that is required to enable Plug and Play support. 9-20 MAX 6000/3000 Network Configuration Guide...
Page 382 Set the Group 2 Count parameter to the number of addresses in the pool. The second pool, which can also contain up to 20 addresses, is used only if there are no addresses available in the first pool. MAX 6000/3000 Network Configuration Guide 9-21...
Page 383 IP group 1=192.0.2.1/24 Group 1 count=n The following parameters are optional: Renewal Time=10 Become Def. Router=No IP group 2=0.0.0.0/0 Group 2 count=0 Host 1 IP=192.0.2.2/24 Host 1 Enet=0080c75Be95e Host 2 IP=0.0.0.0/0 Host 2 Enet=000000000000 9-22 MAX 6000/3000 Network Configuration Guide...
Page 384: Translating Network Addresses For A Lan
IP address from the remote network during PPP negotiation. Any number of hosts on the local network can make any number of simultaneous connections to hosts on the remote network. The number is limited only to the size of the translation table. MAX 6000/3000 Network Configuration Guide 9-23...
Page 385: Multiple-Address Nat
When translating addresses for more than one host on the local network, the MAX can perform multiple-address NAT by borrowing an official IP address for each host from a DHCP server on the remote network or accessible from the remote network. 9-24 MAX 6000/3000 Network Configuration Guide...
Page 386 DHCP requests. In this situation, if the ordinary DHCP clients are connecting to the server over a nonbridged connection, you must have a separate DHCP server to handle the ordinary DHCP requests. The NAT DHCP server only handles NAT DHCP requests. MAX 6000/3000 Network Configuration Guide 9-25...
Page 387: Configuring Single- Or Multiple-Address Nat
Routing parameter in the NAT profile to enable NAT, set the Lan parameter to Single IP Addr, and set FR Address to a valid, official IP address. For example: 50-C00 NAT 50-C01 NAT... Routing=Yes Profile=max4 Lan=Single IP addr FR address=10.10.10.10 Static Mapping... Def Server=181.81.8.1 9-26 MAX 6000/3000 Network Configuration Guide...
Page 388: Configuring Nat Port Routing (Static Mapping Subprofiles)
The MAX performs NAT whenever a connection is made with this Connection profile. The connection can be initiated either by the MAX or by the remote network. Set the Lan parameter to Single IP Addr. MAX 6000/3000 Network Configuration Guide 9-27...
Page 389 Loc Port #. 12 Exit and save the profile. Repeat step 6 through step 12 for any additional ports whose packets you want to route to a specific server and port on the local network. 9-28 MAX 6000/3000 Network Configuration Guide...
Page 390: Support For Quicktime Audio/Video Streaming
Setting and maintaining system time The MAX unit can use Simple Network Time Protocol (SNTP—RFC 1305) to set and maintain its system time by communicating with an SNTP server. For the unit to use SNTP to MAX 6000/3000 Network Configuration Guide 9-29...
Page 391: Telnet Password
IP routes that use dial services if its trunks experience an alarm condition. Unless you specify otherwise, the unit continues to advertise its dial-out routes, which prevents the redundant unit from taking over the routing responsibility. 9-30 MAX 6000/3000 Network Configuration Guide...
Page 392: Udp Checksums For Ensuring Data Integrity
Connection profile. When you enable IP routing, IP packets are always routed, never bridged. Configuring routes for WAN connections To configure routes for WAN connections, you need to specify addresses, and, if desired, enable and configure dynamic IP addressing in Connection and/or Answer profiles. MAX 6000/3000 Network Configuration Guide 9-31...
Page 393: Specify The Remote Ip Address
IP address. If the Pool parameter is null but all other configuration settings enable dynamic assignment, the unit gets IP addresses from the first defined address pool. 9-32 MAX 6000/3000 Network Configuration Guide...
Page 394: Assigning Metrics And Preferences
Direct configuration with RIP set to receive, the MAX unit forwards all RIP updates to the specified address. Typically, this is not desirable, because RIP updates are designed to be stored locally by the IP router (in this case, the MAX). MAX 6000/3000 Network Configuration Guide 9-33...
Page 395: Settings In Radius Profiles
If Framed-IP-Netmask specifies a 32-bit mask, only packets from a single host are accepted. Packets sent from an address that does not match are discarded. Ascend-Multicast-Client Multicast forwarding option. (155) 9-34 MAX 6000/3000 Network Configuration Guide...
Page 396: Remote Host Requirements For Wan Connections
Remote host requirements for WAN connections IP hosts, such as UNIX systems, Windows or OS/2 PCs, or Macintosh systems, must have correctly configured TCP/IP software. A remote host calling into the local IP network must also have PPP software. MAX 6000/3000 Network Configuration Guide 9-35...
Page 397: Unix Software
In this example, Site A is a backbone network and Site B is a single dial-in host with a modem, TCP/IP stack, and PPP software. The PPP software running on the PC at Site B must be 9-36 MAX 6000/3000 Network Configuration Guide...
Page 398 Open a Connection profile for the dial-in user. Set the Station parameter to specify the user’s name, set the Active parameter to activate the profile, and specify the desired encapsulation options. For example: Ethernet Connections Connection profile Station=victor Active=Yes Encaps=PPP MAX 6000/3000 Network Configuration Guide 9-37...
Page 399: Configuring A Host Connection With A Static Address
PC. This example shows how to configure a host connection with a static address. (For details about the /32 subnet mask, see “IP address and subnet mask usage in MAX units” on page 9-1.) 9-38 MAX 6000/3000 Network Configuration Guide...
Page 400 Set the Route IP parameter to enable IP routing, and set the LAN Adrs parameter to specify the IP address and subnet of the PC at Site B: Route IP=Yes IP options… LAN Adrs=10.8.9.10/32 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 9-39...
Page 401: Configuring An Ip Direct Connection
Note: IP Direct connections typically turn off RIP. If the connection is configured to receive RIP, all RIP packets from the far side are kept locally and forwarded to the IP address you specify for IP Direct. 9-40 MAX 6000/3000 Network Configuration Guide...
Page 402: Configuring A Router-To-Router Connection
Set the Route IP parameter to enable IP routing, and set the LAN Adrs parameter to the IP address of the Pipeline at Site B: Route IP=Yes IP options… LAN Adrs=10.9.8.10/22 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 9-41...
Page 403: Configuring A Router-To-Router Connection On A Subnet
In the sample network illustrated in Figure 9-13, the MAX unit connects telecommuters with their own Ethernet networks to the corporate backbone. The unit is on a subnet, and assigns subnet addresses to the telecommuters’ networks. 9-42 MAX 6000/3000 Network Configuration Guide...
Page 404 Open the Default profile in the Static Rtes menu. Set the Gateway parameter to specify the GRF router’s address as the gateway address: Ethernet Static Rtes Default Name=Default Active=Yes Dest=0.0.0.0/0 Gateway=10.4.4.133 Metric=1 Preference=10 Private=Yes MAX 6000/3000 Network Configuration Guide 9-43...
Page 405: Configuring A Numbered Interface
In the following example, the MAX unit is a system-based router but supports a numbered interface for one of its connections. (If you are not familiar with numbered interfaces, see “Interface-based routing” on page 9-6.) The double-headed arrow in Figure 9-14 indicates the numbered interface for this connection. 9-44 MAX 6000/3000 Network Configuration Guide...
Page 406 Exit the profile and, at the exit prompt, select the exit and accept option. Following is a comparable RADIUS profile: numbered Password = "localpw" Service-Type = Framed-User, Framed-Protocol = PPP, Ascend-Route-IP = Route-IP-Yes, Framed-IP-Address = 10.5.6.8, Framed-IP-Netmask = 255.255.255.0, MAX 6000/3000 Network Configuration Guide 9-45...
Page 407: Type Of Service (Tos) Support For Selecting Quality Of Service
Following are the relevant Connection profile parameters, located in Ethernet > Connections > any Connection profile > IP Options: Parameter Specifies Enables/disables Type of Service (TOS) for this connection. If you set TOS Enabled TOS Enabled to No, none of the other TOS options apply. 9-46 MAX 6000/3000 Network Configuration Guide...
Page 408 Input, the MAX sets TOS bits in packets received on the interface. If you set Apply To to Output, the MAX sets TOS bits in outbound packets. If you set Apply To to Both, the MAX set TOS bits for incoming and outgoing packets. MAX 6000/3000 Network Configuration Guide 9-47...
Page 409 (2048), the MAX sets bits in outbound packets. If you set the attribute to IP-TOS-Apply-To-Both (3072), the MAX sets bits in both incoming and outgoing packets. A string-format filter, which can include an IP TOS filter specification. Ascend-Filter (91) Ascend-Filter will replace binary-based filters. 9-48 MAX 6000/3000 Network Configuration Guide...
Page 410: Defining Tos Filters
Ethernet Connections Connection profile 1 IP options LAN Adrs=10.168.6.120/24 TOS Enabled=Yes Precedence=110 TOS=Throughput Following is a comparable RADIUS profile: sampleProf Password="mypasswd", User-Service=Framed-User Framed-Protocol=PPP, Framed-IP-Address=10.168.6.120 Framed-IP-Netmask=255.255.255.0 Framed-Routing=3 Ascend-IP-TOS=IP-TOS-Throughput Ascend-IP-TOS-Precedence=IP-TOS-Precedence-Pri-Six Ascend-IP-TOS-Apply-To=IP-TOS-Apply-To-Incoming MAX 6000/3000 Network Configuration Guide 9-49...
Page 411 MAX makes no comparison. You can specify that the filter matches the packet if the packet’s destination port number is Less (less than), Eql (equal to), Gtr (greater than), or Neq (not equal to) the Dest-Port value. 9-50 MAX 6000/3000 Network Configuration Guide...
Page 412 [ dstip n.n.n.n/nn ] [ srcip n.n.n.n/nn ][ proto ] [ destport cmp value ] [ srcport cmp value ][ precedence value ] [ type-of-service value ] MAX 6000/3000 Network Configuration Guide 9-51...
Page 413 (21), telnet (23), smtp (25), nameserver (42), domain (53), tftp (69), gopher (70), finger (79), www (80), kerberos (88), hostname (101), nntp (119), ntp (123), exec (512), login (513), cmd (514), or talk (517). 9-52 MAX 6000/3000 Network Configuration Guide...
Page 414: Example Of Defining A Tos Filter
Ethernet Filters TOS Filter profile 4 Name=sampleTOS Input Filters... In filter 01 Valid=Yes Type=IPTos IPTos... Src Mask=0.0.0.0 MAX 6000/3000 Network Configuration Guide 9-53...
Page 415: Example Of Applying Tos Filters To Wan Connections
10.168.6.24, as shown in “Example of defining a TOS filter” on page 9-53, the TOS settings in the filter are set in those packets. Ethernet Connections Connection profile 1 IP options... TOS Filter=01 9-54 MAX 6000/3000 Network Configuration Guide...
Page 416: Configuring Ip Routes
Each IP-routing Connection profile specifies a static route that states, in effect, “to reach system X, send packets out this interface to system Y,” where system Y is another router. MAX 6000/3000 Network Configuration Guide 9-55...
Page 417: Dynamic Routes
9-31. Each of the configurations shown in that section results in a static route. For an example of the Ethernet > Mod Config profile configuration of the MAX unit’s local IP interface, see “Configuring routing table updates” on page 9-8. 9-56 MAX 6000/3000 Network Configuration Guide...
Page 418 Metric. You can specify a number from 0 to 255. The default value is 100. Zero is the default for connected routes (such as the Ethernet network). The value of 255 means do not use this route. MAX 6000/3000 Network Configuration Guide 9-57...
Page 419: Settings In A Radius Route Profiles
IP address for the router. This setting is useful when the MAX assigns an IP address from an address pool and RADIUS cannot know the IP address of the caller. 9-58 MAX 6000/3000 Network Configuration Guide...
Page 420: Connection-Specific Private Static Routes (Radius Only)
Exit the profile and, at the exit prompt, select the exit and accept option. Following is a comparable RADIUS default route: route-max-1 Password = "ascend", Service-Type = Outbound-User Framed-Route = "0.0.0.0 10.9.8.10 1 y 100" MAX 6000/3000 Network Configuration Guide 9-59...
Page 421: Defining A Static Route To A Remote Subnet
Open Ethernet > Mod Config > Route Pref. Set Rip Preference to 150: Ethernet Mod Config Route Pref… Rip Preference=150 Exit the profile and, at the exit prompt, select the exit and accept option. 9-60 MAX 6000/3000 Network Configuration Guide...
Page 422: Dynamic Route Configuration
MAX does not summarize information, it advertises each route in its routing table as is. For the subnet in the preceding example, the MAX would advertise a route only to 200.5.8.13. This parameter has no affect on RIP-v2. MAX 6000/3000 Network Configuration Guide 9-61...
Page 423: Example Of Rip And Icmp Configuration
However, the MAX does not receive information about networks that are reachable through the remote router. Exit the profile and, at the exit prompt, select the exit and accept option. 9-62 MAX 6000/3000 Network Configuration Guide...
Page 424: Chapter 10 Setting Up Ip Multicast Forwarding
IGMP packets. The MAX appears to multicast clients to be an MBONE router, because it forwards IGMP queries to those clients, receives their responses, and forwards multicast traffic. MAX 6000/3000 Network Configuration Guide 10-1...
Page 425: Configuring Multicast Forwarding
Connection profile to Yes). With this setting, the MAX begins handling IGMP requests and responses on the interface. It does not begin forwarding multicast traffic until you set the Ethernet > Mod Config > Multicast > Rate Limit parameter. 10-2 MAX 6000/3000 Network Configuration Guide...
Page 426: Specifying The Rate Which Multicast Clients Accept Packets
224.0.0.6/32. Multicast address for all OSPF Designated Routers on the net- work. The MAX does not forward packets sent to this address. If you disable OSPF routing, this route changes from local to a black-hole interface. MAX 6000/3000 Network Configuration Guide 10-3...
Page 427: Implicit Priority Setting For Dropping Multicast Packets
MAX polls for multicast traffic, waits for the duration of the interval, then polls again. HeartBeat Slot Count specifies how many times to poll before comparing the number of heartbeat packets received to the Alarm Threshold. 10-4 MAX 6000/3000 Network Configuration Guide...
Page 428: Examples Of Multicast Forwarding Configuration
Mod Config Multicast... Forwarding=Yes Membership Timeout=60 Mbone Profile= Client=No Rate Limit=5 Set the HeartBeat Addr and Heartbeat UDP parameters to specify a heartbeat group address and UDP port for monitoring heartbeat packets. For example: MAX 6000/3000 Network Configuration Guide 10-5...
Page 429: Forwarding From An Mbone Router On A Wan Link
Win95 ISDN modem Note: This example does not use heartbeat monitoring. If you want to configure the MAX for heartbeat monitoring, see the sample settings in “Examples of multicast forwarding configuration” on page 10-5. 10-6 MAX 6000/3000 Network Configuration Guide...
Page 430: Configuring The Max To Respond To Multicast Clients
Multicast Rate Limit parameter to a number lower than the default of 100: Ethernet Connections 90-106 Cprofile6 Ip options... Multicast Client=Yes Multicast Rate Limit=5 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 10-7...
Page 431: Chapter 11 Setting Up Virtual Private Networks
L2TP tunnel between itself and the private network. Note: Any MAX unit supporting PPTP or L2TP does not display a terminal-server prompt to dial-in users, because all dial-in calls are immediately transferred to PPTP or L2TP servers. MAX 6000/3000 Network Configuration Guide 11-1...
Page 432: Configuring Atmp Tunnels
The Foreign Agent dials the Home Agent, and authenticates and establishes an IP connection in the usual way. The Foreign Agent informs the Home Agent that the mobile client is connected, and requests a tunnel. The Foreign Agent sends up to 10 RegisterRequest messages at 11-2 MAX 6000/3000 Network Configuration Guide...
Page 433: Setting The Udp Port
MTU of at least smaller than 1528 bytes (unless the packets are compressed). You can push fragmentation and reassembly tasks to connection end-points (a mobile client and a device on the home network) by setting an MTU limit. Client software then MAX 6000/3000 Network Configuration Guide 11-3...
Page 434: How Link Compression Affects The Mtu
To discover the path MTU, some clients normally send packets that are larger than the negotiated Maximum Receive Unit (MRU) and that have the Don’t Fragment (DF) bit set. Such packets are returned to the client with an ICMP message informing the client that the host 11-4 MAX 6000/3000 Network Configuration Guide...
Page 435: Router And Gateway Mode
Idle limit=N/A ATMP SNMP Traps=No Following are the parameters (shown with sample settings) for the IP routing connection to the Home Agent: Ethernet Mod Config Ether options... IP Adrs=10.65.212.226/24 Ethernet Connections 90-101 Connection profile 1 MAX 6000/3000 Network Configuration Guide 11-5...
Page 436 Framed-IP-Address=200.1.1.2, Framed-IP-Netmask=255.255.255.0, Ascend-Primary-Home-Agent=10.1.2.3, Ascend-Home-Agent-Password="private" Ascend-Home-Agent-UDP-Port=5150 Tunnel-Type=ATMP, Tunnel-Server-Endpoint="atmp-ha1.example.com", Tunnel-Password="tunnel-password" Following are the parameters (shown with sample settings) for creating RADIUS user profiles for mobile clients running NetWare: node2 Password="ipx-unit" User-Service=Framed-User, Ascend-Route-IPX=Route-IPX-Yes, Framed-Protocol=PPP, Ascend-IPX-Peer-Mode=IPX-Peer-Dialin, Framed-IPX-Network=40000000, Ascend-IPX-Node-Addr=123456789012, 11-6 MAX 6000/3000 Network Configuration Guide...
Page 437: Understanding The Foreign Agent Parameters And Attributes
IPX. Descriptions of the attributes follow the tables. Table 11-1.Required RADIUS attributes to reach an IP home network Home Agent in router mode Home Agent in gateway mode Ascend-Primary-Home-Agent Ascend-Primary-Home-Agent Ascend-Home-Agent-Password Ascend-Home-Agent-Password MAX 6000/3000 Network Configuration Guide 11-7...
Page 438 “Configuring a Home Agent in gateway mode” on page 11-15. Ascend-IPX-Peer-Mode Dial-in NetWare clients must specify IPX-Peer-Dialin. This setting enables the Foreign Agent to handle RIP and SAP advertisements and assign the mobile client a virtual IPX network number. 11-8 MAX 6000/3000 Network Configuration Guide...
Page 439: Example Of Configuring A Foreign Agent (Ip)
Auth Timeout=1 Auth Key-=[] Auth Pool=No Auth Req=Yes Password Server=No Password Port=N/A Local Profile First=No Sess Timer=0 Auth Src Port=0 Auth Send Attr 6,7=Yes For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 11-9...
Page 440: Example Of Configuring A Foreign Agent (Ipx)
The procedure for configuring a Foreign Agent to support IPX connections that use ATMP is very similar to one for IP. The only difference is in the mobile client’s user profile, as shown in the following example: node2 Password="ipx-unit" User-Service=Framed-User, Ascend-Route-IPX=Route-IPX-Yes, Framed-Protocol=PPP, Ascend-IPX-Peer-Mode=IPX-Peer-Dialin, Framed-IPX-Network=40000000, Ascend-IPX-Node-Addr=123456789012, 11-10 MAX 6000/3000 Network Configuration Guide...
Page 441: Configuring A Home Agent
The MAX requires settings for the IPX routing parameters in the Ethernet profile only if the MAX is routing IPX. Following are the parameters (shown with sample settings) used for configuring a Home Agent in router mode: Ethernet Mod Config IPX Routing=Yes Ether options... MAX 6000/3000 Network Configuration Guide 11-11...
Page 442 Password Used to authenticate the ATMP tunnel itself. Must match the password specified in the Ascend-Home-Agent-Password attribute of each mobile client’s RADIUS profile. (All mobile clients use the same password for that attribute.) 11-12 MAX 6000/3000 Network Configuration Guide...
Page 443 Open Ethernet > Mod Config > Ether Options and verify that the LAN interface has an IP address. You can also set routing options. For example: Ethernet Mod Config Ether options... IP Adrs=10.1.2.3/24 RIP=On Open the ATMP Options subprofile, set ATMP Mode to Home, and set Type to Router. MAX 6000/3000 Network Configuration Guide 11-13...
Page 444 For details, see Chapter 12, “Configuring IPX Routing.” Open the ATMP Options subprofile, set ATMP Mode to Home, and set Type to Router. ATMP options... ATMP Mode=Home Type=Router Specify the password used to authenticate the tunnel (Ascend-Home-Agent-Password). 11-14 MAX 6000/3000 Network Configuration Guide...
Page 445: Configuring A Home Agent In Gateway Mode
(not in the Home Agent). The static route must specify the Home Agent as the route to the mobile client. That is, the route’s destination address specifies the Framed-Address of the mobile client, and its gateway address specifies the IP address of the Home Agent. MAX 6000/3000 Network Configuration Guide 11-15...
Page 446 Gateway-mode parameters Configuring a Home Agent in gateway mode involves the following parameters (shown with sample settings): Ethernet Mod Config IPX Routing=Yes Ether options... IP Adrs=10.1.2.3/24 IPX Frame=802.2 IPX Enet #=00000000 ATMP options... ATMP Mode=Home 11-16 MAX 6000/3000 Network Configuration Guide...
Page 447 The nailed connection to the home network uses the following parameters (shown with sample settings): Ethernet Connections any Connection profile Station=homenet Active=Yes Encaps=MPP Dial #=N/A Calling #=N/A Route IP=Yes Route IPX=Yes IP options... LAN Adrs=5.9.8.2/24 MAX 6000/3000 Network Configuration Guide 11-17...
Page 448 IP configuration and Connection profile The cross-Internet connection to the Foreign Agent is an IP routing connection that the MAX authenticates and establishes in the usual way. For details, see Chapter 9, “Configuring IP Routing.” 11-18 MAX 6000/3000 Network Configuration Guide...
Page 449 Exit the profile and, at the exit prompt, select the exit and accept option. Open a Connection profile and configure an IP routing connection to the Foreign Agent. For example: Ethernet Connections any Connection profile Station=foreign-agent Active=Yes MAX 6000/3000 Network Configuration Guide 11-19...
Page 450 Open Ethernet > Mod Config > Ether Options and verify that the LAN interface has an IP address (required for communication with the Foreign Agent) and can route IPX. For example: Ethernet Mod Config IPX Routing=Yes Ether options… IP Adrs=10.1.2.3/24 11-20 MAX 6000/3000 Network Configuration Guide...
Page 451 Open a Connection profile and configure a nailed WAN link that routes IPX to the home network. For example: Ethernet Connections any Connection profile Station=homenet Active=Yes Encaps=MPP PRI # Type=National (for ISDN PRI lines only) Dial #=555-1212 Route IPX=Yes Encaps options... Send Auth=CHAP Recv PW=homenet-pw Send PW=my-pw MAX 6000/3000 Network Configuration Guide 11-21...
Page 452: Specifying The Tunnel Password
You can configure the MAX to act as both a Home Agent and Foreign Agent on a tunnel-by-tunnel basis. Figure 11-5 shows a sample network topology that has a MAX acting as a Home Agent for Network B and a Foreign Agent for Network A. 11-22 MAX 6000/3000 Network Configuration Guide...
Page 453 Then set the Foreign Agent aspect of the multimode configuration: Open the Auth subprofile and configure RADIUS authentication. For example: Auth... Auth=RADIUS Auth Host #1=10.23.45.11/24 Auth Host #2=0.0.0.0/0 Auth Host #3=0.0.0.0/0 Auth Port=1645 Auth Timeout=1 Auth Key-=[] MAX 6000/3000 Network Configuration Guide 11-23...
Page 454 Finally, set the Home Agent aspect of the multimode configuration: Open a Connection profile and configure an IP routing connection to the Network B Foreign Agent. For example: Ethernet Connections any Connection profile Station=foreign-agent Active=Yes Encaps=MPP 11-24 MAX 6000/3000 Network Configuration Guide...
Page 455: Supporting Mobile Client Routers (Ip Only)
For example, to connect to a home network whose router has the following address: 10.1.2.3/28 The Foreign Agent’s RADIUS entry for the remote router would contain lines such as the following: node1 Password="top-secret" Ascend-Metric=2, Framed-Protocol=PPP, Ascend-IP-Route=Route-IP-Yes, Framed-Address=10.168.6.21, Framed-Netmask=255.255.255.240, Ascend-Primary-Home-Agent=10.1.2.3, Ascend-Home-Agent-Password="private" MAX 6000/3000 Network Configuration Guide 11-25...
Page 456: Home Agent In Router Mode
For example, the following RADIUS entry authenticates a mobile NetWare client that connects directly to the Home Agent. In this example, the Home Agent is in the gateway mode (it forwards packets from the mobile client across a nailed WAN link to the home IPX network): 11-26 MAX 6000/3000 Network Configuration Guide...
Page 457: Configuring Pptp Tunnels For Dial-In Clients
Answer profile is not consulted. The calls are routed through the PPTP tunnel solely on the basis of the phone number dialed. Following are the PPTP PAC configuration parameters (shown with sample settings): MAX 6000/3000 Network Configuration Guide 11-27...
Page 458: Understanding The Pptp Pac Parameters
Internet to the corporate server. In this example, the MAX unit’s fourth WAN line is dedicated to PPTP connections to that server. Figure 11-6. PPTP tunnel Modem Windows NT server (PNS) Win95 Pipeline ISDN Win95 10.65.212.11 modem PPTP tunnel Win95 11-28 MAX 6000/3000 Network Configuration Guide...
Page 459: Example Of A Pptp Tunnel Across Multiple Pops
Turn on PPTP, and specify the PNS IP address for Route Line 2. Ethernet Mod Config L2 Tunneling Options... PPTP Enabled=Yes Line 1 tunnel type=None Route line 1=0.0.0.0 Line 2 tunnel type=PPTP Route line 2=10.65.212.11 Line 3 tunnel type=None Route line 3=0.0.0.0 MAX 6000/3000 Network Configuration Guide 11-29...
Page 460: Routing A Terminal-Server Session To A Pptp Server
Enter the command at the terminal-server prompt as follows: pptp pptp_server where pptp_server is the IP address or hostname of the PPTP server. When you enter the command, the system displays the following text: PPTP: Starting session PPTP Server pptp_server 11-30 MAX 6000/3000 Network Configuration Guide...
Page 461: Configuring L2Tp Tunnels For Dial-In Clients
Note: By supporting hidden attributes, the MAX is in conformance with MAX Draft 16 of the L2TP RFC. The MAX 6000 and MAX 3000 units parse and decrypt hidden attributes as well as the random vector AVP. The SCCRQ command does not support a suppressed tunnel ID AVP.
Page 462: How The Max Creates L2Tp Tunnels
LCP, instead of an empty LCP Config Request, the LAC sends the LNS the following information: • The first LCP Config Request packet received from the client. • The last LCP Config Request packet received from the client. 11-32 MAX 6000/3000 Network Configuration Guide...
Page 463: Lac And Lns Mode
If you use RADIUS to configure L2TP on a per-user basis, and you specify the Client-Port-DNIS attribute, the LAC does not perform PAP or CHAP authentication. If you specify Client-Port-DNIS, the tunnel is created as soon as the LAC receives a DNIS number MAX 6000/3000 Network Configuration Guide 11-33...
Page 464: Flow Control
The two PPP clients shown in Figure 11-9 are configured to use different tunnels to the L2TP network server (LNS) on the basis of their tunnel assignment IDs. The same clients could be configured to use the same multiplexed tunnel by setting their tunnel assignment IDs to the same string. 11-34 MAX 6000/3000 Network Configuration Guide...
Page 465 NAS-Identifier = 2.2.2.2 NAS-Port = 11313 NAS-Port-Type = Async Acct-Status-Type = Stop Acct-Delay-Time = 0 Acct-Session-Id = "317658341" Acct-Authentic = Local Acct-Session-Time = 112 Acct-Input-Octets = 2155 Acct-Output-Octets = 513 Acct-Input-Packets = 23 Acct-Output-Packets = 14 MAX 6000/3000 Network Configuration Guide 11-35...
Page 466: Configuration Of The Max As An Lac
WAN line to tunneling with the Line N Tunnel Type parameter. If you want the MAX to establish tunnels on a connection-by-connection basis, leave Route Line N blank for all lines. 11-36 MAX 6000/3000 Network Configuration Guide...
Page 467: Configuring The Max
Specifies the protocol type, or Currently, the only supported medium, used for this connection. value is IP. You must set this Currently, the MAX supports IP attribute to IP. only. Future software releases will support additional medium types. MAX 6000/3000 Network Configuration Guide 11-37...
Page 468: Using Multiple L2Tp System Names
RFC 2868. Each tag value (from 1 to 31) defines an independent tunnel attempt description. The Tunnel-Client-Auth-ID and Tunnel-Server-Auth-ID attributes can be specified in Access-Response packets and are generated in Accounting-Request packets. Following are the relevant attributes: 11-38 MAX 6000/3000 Network Configuration Guide...
Page 469: Example Of Tunnel Authentication
1.1.1.2 2.2.2.2 2.2.2.3 Example of connection-based tunnel authentication The following settings configure a Connection profile for the PPP client and specify a Client ID name: Ethernet Connections maxprofile Tunnel options... Profile type=Mobile-client Tunnel protocol=L2TP MAX 6000/3000 Network Configuration Guide 11-39...
Page 470 LNS if a tunnel does not already exists to that end-point address. If tunnel authentication is enabled and no tunnel password is specified in the Connection profile, the unit looks for a Tunnel Options profile before requesting the tunnel. If it finds a Tunnel Options profile for the 11-40 MAX 6000/3000 Network Configuration Guide...
Page 471: Creating Parallel L2Tp Tunnels To The Same End Point
IP address (and hostname, if specified). If it finds a match on the basis of those values, it uses the tunnel. If the MAX unit does not find a matching tunnel entry, it initiates a new tunnel request. MAX 6000/3000 Network Configuration Guide 11-41...
Page 472 1.1.1.1 address. Table 11-4 shows existing tunnels to the LNS, which were authenticated with different Client ID strings. Table 11-4.Existing tunnels to the same LNS Address Client ID Pri. Tunnel Server Tunnel-ID 1.1.1.1 a.example.com 1.1.1.1 a.example.com 11-42 MAX 6000/3000 Network Configuration Guide...
Page 473: Configuration Of The Max As An Lns
The default is 7. Set the parameter to 0 (zero) to disable flow control in the receiving direction. The MAX continues to perform flow control for the sending direction regardless of the value of L2TP RX Window. MAX 6000/3000 Network Configuration Guide 11-43...
Page 474: Using Dns List Attempts For L2F And L2Tp
Layer-2 Tunneling Protocol (L2TP) • Point-to-Point Tunneling Protocol (PPTP) The Tunnel Options subprofile provides you with 11 parameters, as shown in the following example: Ethernet Connections maxprofile Tunnel options... Profile type=Mobile-client Tunnel protocol=L2TP Max tunnels=N/A 11-44 MAX 6000/3000 Network Configuration Guide...
Page 475: Snmp Mib For L2Tp Added
Note: Due to internal constraints, several minor changes had to be made to the MIB, and several variables are not available at this time. This includes the TunnelIfIndex, which has no related interface in the interface MIB, and some counters, which for the time being are returning zero. MAX 6000/3000 Network Configuration Guide 11-45...
Page 476 Table 11-6. L2TP MIB variables and supported counters Variable Supported counters l2tpConfig l2pAdminState l2tpStats l2tpProtocolVersion l2tpVendorName l2tpFirmwareRevision l2tpDomainStatsTable l2tpDomainStatsIdentifier l2tpDomainStatsTotalTunnels l2tpDomainStatsFailedTunnels l2tpDomainStatsFailedAuthentications l2tpDomainStatsActiveTunnels l2tpDomainStatsTotalSessions l2tpDomainStatsFailedSessions l2tpDomainStatsActiveSessions l2tpTunnelStatsIfIndex l2tpTunnelStatsTable l2tpTunnelStatsLocalTID l2tpTunnelStatsRemoteTID l2tpTunnelStatsState l2tpTunnelStatsInitiated l2tpTunnelStatsRemoteHostName l2tpTunnelStatsRemoteVendorName l2tpTunnelStatsRemoteFirmwareRevision l2tpTunnelStatsRemoteProtocolVersion l2tpTunnelStatsInitialRemoteRWS l2tpTunnelStatsBearerCapabilities l2tpTunnelStatsFramingCapabilities l2tpTunnelStatsTotalSessions l2tpTunnelStatsActiveSessions 11-46 MAX 6000/3000 Network Configuration Guide...
Page 477: Configuring Virtual Routers
ARP table, route cache, and address pools. In addition, each VRouter maintains its own routing and packet statistics. If you do not configure any VRouters, the MAX unit supports its main router only. When you configure one or more VRouters, the main router MAX 6000/3000 Network Configuration Guide 11-47...
Page 478: Current Limitations
Corporation A Virtual Private Network Before Lucent Technologies introduced VRouters, the MAX unit maintained a single IP routing table that enabled the router to reach any interface. In that context, each interface known to the system required a unique address.
Page 479: Creating A Virtual Router Profile
To enable inter-Vrouters, you must set the Dest parameter, the Dest VRouter parameter, and the Virtual Router parameter in the Static Rtes profile. In the same profile, you must also verify that the Gateway parameter’s default setting, 0.0.0.0, is specified. The MAX unit sends packets MAX 6000/3000 Network Configuration Guide 11-49...
Page 480: Disabling A Virtual Router Profile
VRouter feature for the IP networks. The IP vRouter feature logically groups the interfaces to provide secure, private IP networks. Each of these private networks maintains its own • IP routing table • ARP entries table • IP route cache • IP address pools 11-50 MAX 6000/3000 Network Configuration Guide...
Page 481: Enabling The Vrouter Feature On Ipx
Connection profile belongs. The IPX static route on the RADIUS server specifies the Connection profile to be used to reach the specified server. Thus, the static route belongs to the VRouter specified in the Connection profile. MAX 6000/3000 Network Configuration Guide 11-51...
Page 482: Chapter 12 Configuring Ipx Routing
Chapter 14, “Configuring Packet Bridging.”) Unlike an IP routing configuration, in which the MAX uniquely identifies the calling device by its IP address, a MAX IPX routing configuration does not include a built-in way to uniquely MAX 6000/3000 Network Configuration Guide 12-1...
Page 483: Ipx Service Advertising Protocol (Sap) Tables
For example, if the unit receives an IPX packet destined for network 77777777, and it does not have a RIP-table entry for that destination, it forwards the packet toward network number FFFFFFFE, if available, instead of simply dropping the 12-2 MAX 6000/3000 Network Configuration Guide...
Page 484: Ipx And Ppp Link Compression
However, static routes help prevent timeouts when a client takes a long time to locate a server across a remote WAN link. (For more information, see “Configuring static IPX routes” on page 12-19, or see the Configurator Online Help for information about parameters in a profile.) MAX 6000/3000 Network Configuration Guide 12-3...
Page 485: Ipx Sap Filters
If UNIX clients access NetWare servers through TCP/IP (rather than UNIXWare), the MAX unit must be configured as either a bridge or an IP router. Otherwise, TCP/IP packets do not make it across the connection. 12-4 MAX 6000/3000 Network Configuration Guide...
Page 486: Enabling Ipx Routing In The Max
MAX. If the client does not have a unique node address, the MAX assigns the node address as well. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 12-5...
Page 487: Examples Of Ipx Routing Configuration
The Frame type line specifies the 802.3 frame type, and the LAN protocol line indicates the IPX network number. The LAN protocol line describes an external interface for the NetWare server. The server's internal network number will be shown in a protocol entry like this: IPX internal network number:02500000 12-6 MAX 6000/3000 Network Configuration Guide...
Page 488: Verifying The Router Configuration
Enter the IPXping command with the advertised name of a NetWare server. For example: ascend% ipxping server-1 The command’s output indicates whether or not the IPXping packets are reaching the server and being returned. Terminate IPXping at any time by pressing Ctrl-C. MAX 6000/3000 Network Configuration Guide 12-7...
Page 489: Configuring Ipx Routing Connections
Following are the relevant parameters in a Connection profile (shown with sample settings): Ethernet Connections Connection profile 1 Station=device-name Route IPX=Yes Encaps options... Recv PW=localpw IPX Header Compression=Yes IPX options... Peer=Router IPX RIP=None IPX SAP=Send 12-8 MAX 6000/3000 Network Configuration Guide...
Page 490 MAX creates a static IPX route. Handle IPX The handling of bridged connections. When you enable IPX routing for a connection, Handle IPX=N/A. (For more information, see Chapter 14, “Configuring Packet Bridging.”) MAX 6000/3000 Network Configuration Guide 12-9...
Page 491: Settings In Radius Profiles
MAX broadcasts its entire SAP table to the remote network and listens for SAP table updates from that network. Eventually, both networks have a full table of all services on the WAN. To control which services are advertised and where, you can disable the exchange of SAP 12-10 MAX 6000/3000 Network Configuration Guide...
Page 492: Dial Query For Bringing Up A Connection On The Basis Of Service Queries
Instead the MAX forwards the response to the specified IPX network, and relies on a response from a router on that network.The MAX takes the first SAP reply received to be the nearest server, and attaches your PC to that server. MAX 6000/3000 Network Configuration Guide 12-11...
Page 493: Examples Of Ipx Routing Connections
Mod Config Ether options... IPX Pool #=CCCC1234 Exit the profile and, at the exit prompt, select the exit and accept option. Open Answer > PPP Options. Enable IPX routing and PAP/CHAP authentication: Ethernet Answer 12-12 MAX 6000/3000 Network Configuration Guide...
Page 494: Configuring A Connection Between Two Lans
In this example, the MAX unit connects to an IPX network that supports both servers and clients and connects with a remote site that also supports both servers and clients, as shown in Figure 12-2. MAX 6000/3000 Network Configuration Guide 12-13...
Page 495 “Enabling IPX routing in the MAX” on page 12-5). In Answer > PPP Options, enable IPX routing and PAP/CHAP authentication, and then close the Answer profile. Ethernet Answer PPP options... Route IPX=Yes Recv Auth=Either 12-14 MAX 6000/3000 Network Configuration Guide...
Page 496 Set IPX RIP to None in the Connection profile, and configure a static route to the remote server. Set up a route to the remote NetWare server (SERVER-2). Use the following settings: Ethernet IPX Routes IPX Routes profile Server Name=SERVER-2 Active=Yes Network=013DE888 Node=000000000001 Socket=0451 MAX 6000/3000 Network Configuration Guide 12-15...
Page 497 IPX options... IPX RIP=None IPX SAP=Both NetWare t/o=30 SAP HS Proxy=N/A SAP HS Proxy Net#1=N/A SAP HS Proxy Net#2=N/A SAP HS Proxy Net#3=N/A SAP HS Proxy Net#4=N/A SAP HS Proxy Net#5=N/A SAP HS Proxy Net#6=N/A 12-16 MAX 6000/3000 Network Configuration Guide...
Page 498: Configuring A Connection With Local Servers Only
In this example, Site A supports NetWare 3.12 servers, NetWare clients, and a MAX unit. The NetWare server at Site A has the following configuration settings: Name=SERVER-1 internal net CFC12345 Load 3c509 name=ipx-card frame=ETHERNET_8023 Bind ipx ipx-card net=1234ABCD MAX 6000/3000 Network Configuration Guide 12-17...
Page 499 Assign the Pipeline unit a system name in the System > Sys Config profile. This example uses the name SITEBGW. Open the Connection profile for Site A, and set up the profile as follows: 12-18 MAX 6000/3000 Network Configuration Guide...
Page 500: Configuring Static Ipx Routes
Note: Remember that you manually configure static IPX routes, so you must update them if there is a change to the remote server. Settings in local Static route profiles To configure a static route, set the following parameters (shown with sample settings): Ethernet IPX Routes server-name Server Name=server-name MAX 6000/3000 Network Configuration Guide 12-19...
Page 501: Settings In Radius Profiles
Connection profile by the unique part of its number in the Connections menu. Settings in RADIUS profiles An ipxroute profile is a pseudo-user profile in which the first line has this format: ipxroute-name-N Password="ascend", Service-Type = Outbound-User 12-20 MAX 6000/3000 Network Configuration Guide...
Page 502: Example Of Static-Route Configuration
To configure an IPX Routes profile: Open an Ethernet > IPX Routes profile. Set the Server Name parameter to specify the name of the remote NetWare server, and set the Active parameter to activate the route. For example: MAX 6000/3000 Network Configuration Guide 12-21...
Page 503: Creating And Applying Ipx Sap Filters
To configure IPX SAP filters, you set the following parameters (shown with sample settings): Ethernet IPX SAP Filters optional Name=optional Input SAP filters... In SAP filter 01-08 Valid=Yes Type=Exclude Server Type=0004 Server Name=SERVER-1 Output SAP filters... Out SAP filter 01-8 Valid=Yes Type=Exclude Server Type=0004 Server Name=SERVER-1 12-22 MAX 6000/3000 Network Configuration Guide...
Page 504: Input Sap Filters And Output Sap Filters
Type parameter specifies whether or not to include this server in the MAX unit’s SAP table. For detailed information about each parameter, see the MAX Reference. MAX 6000/3000 Network Configuration Guide 12-23...
Page 505: Applying Ipx Sap Filters
To apply the IPX SAP filter in the Answer profile and in a Connection profile: Open Answer > Session Options. Set the IPX SAP Filter parameter to specify profile #1, then close the Answer profile: 12-24 MAX 6000/3000 Network Configuration Guide...
Page 506 Repeat the same assignment in Connections > Connection profile > Session Options. Ethernet Connections Connection profile Session options... IPX SAP Filter=1 Exit the profile and, at the exit prompt, select the exit and accept option. MAX 6000/3000 Network Configuration Guide 12-25...
Page 507: Chapter 13 Appletalk Routing
For example, when a user on a network without a router selects a device in the Chooser, the MAC OS computer sends out a Name Binding Protocol (NBP) Lookup as a broadcast packet. Because a bridge forwards all broadcast traffic, all devices on the network receive the Lookup MAX 6000/3000 Network Configuration Guide 13-1...
Page 508: Providing Dynamic Startup Information To Local Devices
AppleTalk subnetworks are either nonextended or extended. Nonextended networks theoretically allow up to 254 nodes. A nonextended network has one network number (not a range) and one zone. Examples of nonextended networks are LocalTalk and AppleTalk Remote Access (ARA) dial-up networks. 13-2 MAX 6000/3000 Network Configuration Guide...
Page 509 AppleTalk network can use network numbers 300, 301, 302, and so on in their ranges. As an example, network number 310 is available to a new network segment Zones can be shared among network segments. In Figure 13-1, network 100-109 supports zone SALES. So does network 300-309. MAX 6000/3000 Network Configuration Guide 13-3...
Page 510: Max Units And Appletalk Nodes
The user sends the print job to the printer. When the print job is complete and no data packets are passing through the connection, the MAX units continue to pass routing information. 13-4 MAX 6000/3000 Network Configuration Guide...
Page 511: Configuring Appletalk Routing
Note: You should configure the MAX as a nonseed router provided there is at least one seed router on the local network. Having only one seed router on a local network MAX 6000/3000 Network Configuration Guide 13-5...
Page 512: Answer Profile Parameters
(You cannot set the Route AppleTalk parameter if AppleTalk is set to No in the Ethernet > Mod Config > AppleTalk Options profile or if AppleTalk Router is set to Off in that profile’s AppleTalk Options submenu.) 13-6 MAX 6000/3000 Network Configuration Guide...
Page 513: Per-Connection Appletalk Routing Parameters
Configuring an AppleTalk connection with RADIUS You can configure an AppleTalk-routed connection in a RADIUS user profile and configure static AppleTalk routes in a RADIUS pseudo-user file. For more information, see the TAOS RADIUS Guide and Reference. MAX 6000/3000 Network Configuration Guide 13-7...
Page 514: Chapter 14 Configuring Packet Bridging
Provide nonrouted protocol connectivity with another site. • Link two sites so that their nodes appear to be on the same LAN. • Support protocols, such as BOOTP, that depend on broadcasts to function. MAX 6000/3000 Network Configuration Guide 14-1...
Page 515: Disadvantages Of Bridging
MAX as a router only. When you configure the MAX as a bridge, it forwards packets with the broadcast destination address across all active sessions that have bridging enabled. 14-2 MAX 6000/3000 Network Configuration Guide...
Page 516: Establishing A Bridged Connection
In promiscuous mode, the Ethernet driver accepts all packets, regardless of address or packet type, and passes them up the protocol stack for a higher-layer decision on whether to route, bridge, or reject the packets. (Even if no packets are actually bridged, running MAX 6000/3000 Network Configuration Guide 14-3...
Page 517: How The Max Supports Bridging
0000D801CFF2 SITEA 080045CFA123 SITEA 08002B25CC11 SITEA 08009FA2A3CA SITEB Entries in the unit’s bridge table must be relearned within a fixed aging limit, or they are removed from the table. 14-4 MAX 6000/3000 Network Configuration Guide...
Page 518: Configuring Bridged Connections
In order for the MAX to accept inbound bridged connections, the Bridge parameter must be enabled and the Recv Auth parameter must specify a form of password authentication must be enabled. The Bridge and Recv Auth parameters are located in Ethernet > Answer > PPP Options. MAX 6000/3000 Network Configuration Guide 14-5...
Page 519: Station
Names/Passwords profile, the name can consist of up to 31 characters. The name you specify must be unique within the list of profiles of the same type. In addition, Lucent strongly recommends that you do not use the same name for a Names/Passwords profile and a Connection profile. 14-6 MAX 6000/3000 Network Configuration Guide...
Page 520: Bridge Adrs Parameters
To specify a Connection profile, note its menu-item number in the Connections menu, then enter the unique portion of that number as the value for the Connection # parameter. MAX 6000/3000 Network Configuration Guide 14-7...
Page 521: Radius Bridging Attributes
You create a pseudo-user profile to store information that the MAX can query—in this case, in order to store bridging information. For a unit-specific bridge profile, specify the first line of a pseudo-user profile in this format: 14-8 MAX 6000/3000 Network Configuration Guide...
Page 522: Bridge Profile Configuration Examples
RADIUS loads the data to create the bridging tables. Bridge profile configuration examples The following profile specifies two bridging table entries. Bridge-Ascend-1 Password="Ascend", User-Service=Dialout-Framed-User Ascend-Bridge-Address="2:2:3:10:11:12 Prof1 1.2.3.4 1", Ascend-Bridge-Address="2:2:3:13:14:15 Prof2 5.6.7.8 2" MAX 6000/3000 Network Configuration Guide 14-9...
Page 523: Example Of A Bridged Connection
Open a Connection profile (in this example profile #5), and set the following parameters: Ethernet Connections SITEBGW... Station=SITEBGW Active=Yes Encaps=PPP Bridge=Yes Dial Brdcast=No Note: Dial Brdcast is not needed because of the Bridge Adrs profile configured next. Configure password authentication. For example: 14-10 MAX 6000/3000 Network Configuration Guide...
Page 524 Exit the profile and, at the exit prompt, select the exit and accept option. Open an Ethernet > Bridge Adrs profile. Specify a node’s Ethernet address and the IP address (if known) on the remote network: MAX 6000/3000 Network Configuration Guide 14-11...
Page 525: Ipx Bridged Configurations
IPX bridging connection. Following are the related parameters (shown with sample settings): Ethernet Mod Config Ether options... IPX Frame=802.2 Ethernet Connections Connection profile Route IPX=No IPX options... Handle IPX=Client Netware t/o=N/A 14-12 MAX 6000/3000 Network Configuration Guide...
Page 526 In an IPX server bridging configuration, you want the MAX unit to respond to NCP watchdog requests on behalf of remote clients, but to bring down inactive connections whenever MAX 6000/3000 Network Configuration Guide 14-13...
Page 527: Example Of An Ipx Client Bridge (Local Clients)
Enable bridging and specify an authentication protocol in the Answer > PPP Options profile. For example: Ethernet Answer PPP options... Bridge=Yes Recv Auth=Either Open a Connection profile and set the following parameters: Ethernet Connections Connection profile Station=SITEBGW Active=Yes 14-14 MAX 6000/3000 Network Configuration Guide...
Page 528: Example Of An Ipx Server Bridge (Local Servers)
Specify the IPX frame type in the Ethernet > Mod Config > Ether Options profile. For example: Ethernet Mod Config Ether options... IPX Frame=802.3 Enable bridging and specify an authentication protocol in the Answer profile. For example: Ethernet Answer PPP options... MAX 6000/3000 Network Configuration Guide 14-15...
Page 529: Configuring Proxy Mode On The Max
ARP request with the Ethernet (physical) address specified in the Bridge Adrs profile, and brings up the specified connection. In effect, the unit acts as a proxy for the node that actually has that address. 14-16 MAX 6000/3000 Network Configuration Guide...
Page 530: Chapter 15 Defining Static Filters
To use generic filters effectively, you need to know the contents of certain bytes in the packets you wish to filter. Protocol specifications are usually the best source of such information. MAX 6000/3000 Network Configuration Guide 15-1...
Page 531: Data And Call Filters
When you apply a call filter, its forwarding action (forward or drop) does not affect which packets are sent across an active connection. The forwarding action of a call filter determines which packets can either initiate a connection or reset a session’s timer. When a session’s idle 15-2 MAX 6000/3000 Network Configuration Guide...
Page 532: How Filters Work
If the Src Port Cmp parameter is not set to None, compare the Src Port # number to the source port number of the packet. If they do not match as specified by the Src Port Cmp parameter, the comparison fails. MAX 6000/3000 Network Configuration Guide 15-3...
Page 533: Type Of Service Filters
If the Src Socket Cmp parameter is not set to None, compare the Src Socket # to the source socket number of the packet. If they do not match as specified by the Src Socket Cmp parameter, the comparison fails. 15-4 MAX 6000/3000 Network Configuration Guide...
Page 534: Specifying A Filter's Direction
In a RADIUS filter definition, you specify the direction in which to monitor the data stream as in or out. This specification provides the same function as the Input Filters and Output Filters parameters in a local profile. The following example shows an input-filter definition in RADIUS. MAX 6000/3000 Network Configuration Guide 15-5...
Page 535: Specifying A Filter's Forwarding Action
Forward parameter in a local profile. The following example shows an input filter whose forwarding action is to drop matching packets. test-user Password="test-pw" Ascend-Data Filter="ip in drop tcp dstport > 1023" 15-6 MAX 6000/3000 Network Configuration Guide...
Page 536: Defining Generic Filters
Type of comparison to perform. If Compare is set to Yes, the comparison succeeds (the filter matches) if the contents do not equal the specified value. For a filter that requires the packet contents to equal the specified value, leave Compare set to No. MAX 6000/3000 Network Configuration Guide 15-7...
Page 537: Settings In A Radius Profile
The direction and forwarding action of the next filter must be the same as the current filter, or the MAX unit ignores this flag. 15-8 MAX 6000/3000 Network Configuration Guide...
Page 538: Specifying The Offset To The Bytes To Be Examined
Mask=0f:ff:ff:ff:00:00:00:f0:00:00:00:00 Value=07:fe:45:70:00:00:00:90:00:00:00:00 Compare=no More=no and the following packet contents: 2A 31 97 FE 45 70 12 22 33 99 B4 80 75 the filter test the value of bytes three (97) through ten (99). MAX 6000/3000 Network Configuration Guide 15-9...
Page 539: Masking The Value Before Comparison
In the sixth byte, 7 and 0 match the sixth byte specified by the Value parameter. • The seventh (12), eighth (22), and ninth (33) bytes are ignored because the mask has zeroes in those places. 15-10 MAX 6000/3000 Network Configuration Guide...
Page 540: Examples Of A Generic Call Filter
The IP Filter subprofile contains the following parameters (shown with their default values): Input Filters In Filter NN Type=Generic IP... Src Mask=0.0.0.0 Src Adrs=0.0.0.0 Dst Mask=0.0.0.0 Dst Adrs=0.0.0.0 Protocol= Src Port Cmp=None Src Port #=0 Dst Port Cmp=None MAX 6000/3000 Network Configuration Guide 15-11...
Page 541 For more details, see “Filtering by port numbers” on page 15-14. TCP Estab Enable/disable application of the filter only to packets in an established TCP session. Applicable only if the protocol number has been set to 6 (TCP). 15-12 MAX 6000/3000 Network Configuration Guide...
Page 542: Settings In A Radius Profile
(69), gopher (70), finger (79), www (80), kerberos (88), hostname (101), nntp (119), ntp (123), exec (512), login (513), cmd (514), or talk (517). For more details, see “Filtering by port numbers” on page 15-14. MAX 6000/3000 Network Configuration Guide 15-13...
Page 543: Filtering By Source Or Destination Address
You can specify that the filter matches the packet if the packet’s port number is Less (<), Eql (=), Gtr (>), or Neq (!=) the port number specified in the filter. 15-14 MAX 6000/3000 Network Configuration Guide...
Page 544: Examples Of An Ip Filter To Prevent Local Address Spoofing
Forward=Yes, the third filter uses all default values. Because Forward is set to Yes, the MAX unit forwards all remaining packets (those with nonlocal source addresses) to the Ethernet. Input filters... In filter=03 Type=IP Valid=Yes IP..Forward=Yes MAX 6000/3000 Network Configuration Guide 15-15...
Page 545: Examples Of An Ip Filter For More Complex Security Issues
Web server’s destination address at a destination TCP port that can be used for Telnet or FTP: Input filters... In filter=01 Type=IP Valid=Yes IP..Forward=Yes Protocol=6 Dst Mask=255.255.255.255 Dst Adrs=10.9.250.5 Dst Port Comp=Eql Dst Port #=80 15-16 MAX 6000/3000 Network Configuration Guide...
Page 546 Following are comparable RADIUS filter definitions: Ascend-Data Filter="ip in forward dstip 10.9.250.5/32 dstport=80 proto 6" Ascend-Data Filter="ip in forward dstport > 1023 proto 6" Ascend-Data Filter="ip in forward dstport > 1023 proto 6" Ascend-Data Filter="ip in forward" MAX 6000/3000 Network Configuration Guide 15-17...
Page 547: Defining Type Of Service Filters
You can specify that the filter matches the packet if the packet’s source port number is Less (less than), Eql (equal to), Gtr (greater than), or Neq (not equal to) the Src Port # value. 15-18 MAX 6000/3000 Network Configuration Guide...
Page 548 When TOS is enabled and the packet matches the filter, one of the following values can be set in the packet: Normal—Normal service Cost—Minimize monetary cost Reliability—Maximize reliability Throughput—Maximize throughput Latency—Minimize delay. MAX 6000/3000 Network Configuration Guide 15-19...
Page 549: Settings In A Radius Profile
(42), domain (53), tftp (69), gopher (70), finger (79), www (80), kerberos (88), hostname (101), nntp (119), ntp (123), exec (512), login (513), cmd (514), or talk (517). For more details, see “Filtering by port numbers” on page 15-14. 15-20 MAX 6000/3000 Network Configuration Guide...
Page 550: Examples Of Defining A Tos Filter
The parameters also set TOS to prefer a low latency connection which means that the upstream router will choose a fast connection if one is available, even if it is higher cost, lower bandwidth, or less reliable than another available link. MAX 6000/3000 Network Configuration Guide 15-21...
Page 551: Defining Ipx Filters
IPX Filter subprofile contains the following parameters (shown with their default values): Input filters... In filter NN Valid=Yes IPX... Src Network Adrs=0.0.0.0 Dst Network Adrs=0.0.0.0 Src Node Adrs=0.0.0.0 Dst Node Adrs=0.0.0.0 Src Socket #=None Src Socket Cmp=0 Dst Socket #=None Dst Socket Cmp=0 15-22 MAX 6000/3000 Network Configuration Guide...
Page 552: Filtering By Source Or Destination Address
A node number of all 1s (FF:FF:FF:FF:FF:FF) matches all nodes on a LAN. Filtering by socket number NetWare servers use a particular socket number for each service. For example, NetWare file service typically uses socket 0451 (04:51). Some services use dynamic socket numbers, which MAX 6000/3000 Network Configuration Guide 15-23...
Page 553: Example Of An Outbound Ipx Filter
MAX unit to drop packets from source IPX network address 00000005:00abcde12345 and source socket number 4002. All other packets are forwarded. Input filters... In filter Type=IPX Valid=Yes IPX... Forward=Yes Src Network Adrs=00000005 Src Node Adrs=00abcde12345 Src Socket #=4002 Src Socket Cmp=Eql 15-24 MAX 6000/3000 Network Configuration Guide...
Page 554: Applying A Filter To An Interface
Name of a Filter profile. For details, see “Examples of applying a TOS filter to a WAN interface” on page 15-28. Name Name of a Filter profile. For details, see “Example of applying a filter to a LAN interface” on page 15-29. MAX 6000/3000 Network Configuration Guide 15-25...
Page 555: Settings In Radius Profiles
Attributes that are not specified in the caller’s profile take their value from the Answer profile settings. So if the caller’s RADIUS profile does not apply a data filter or call filter, and the Use 15-26 MAX 6000/3000 Network Configuration Guide...
Page 556: Examples Of Applying A Data Filter To A Wan Interface
Following is an example of defining an antispoofing filter within the user’s RADIUS profile: tlynch Password="secret" Service-Type=Framed-User, Framed-Protocol=MPP, Framed-IP-Address=10.10.10.64, Framed-IP-Netmask=255.255.255.0, Ascend-Data Filter="ip in drop srcip 10.100.50.128/26" Ascend-Data Filter="ip in drop srcip 127.0.0.0/8" Ascend-Data Filter="ip in forward" Ascend-Data Filter="ip out forward srcip 10.100.50.128/26" MAX 6000/3000 Network Configuration Guide 15-27...
Page 557: Examples Of Applying A Call Filter To A Wan Interface
Ethernet Connections Connection profile IP Options... TOS Filter= Following is a comparable RADIUS profile in which the TOS filter is specified by the Filter-ID attribute: jfan-pc Password="johnfan" Service-Type=Framed-User, Framed-Protocol=PPP, Framed-IP-Address=10.168.6.120 Framed-IP-Netmask=255.255.255.0 Filter-ID="jfans-tos-filter" 15-28 MAX 6000/3000 Network Configuration Guide...
Page 558: Example Of Applying A Filter To A Lan Interface
Note: Use caution when applying a filter to the Ethernet interface. You could inadvertently render the MAX unit inaccessible from the local LAN. The following parameters apply to a filter in a local network interface: Ethernet Mod Config Ether Options Filter MAX 6000/3000 Network Configuration Guide 15-29...
Page 559 13-2 calculating 4-22 4-48 using 13-1 defined 4-22 ZIP Query 13-4 Always Spoof parameter 4-98 zone multicasting 13-2 Analog modems 4-78 zones 13-2 13-4 13-6 Answer Data Svc parameter 3-81 AppleTalk Router parameter 4-74 MAX 6000/3000 Network Configuration Guide Index-1...
Page 560 PPP or multipoint mode, establishing 3-35 ATMP tunnels 11-22 BRI calls callback security information, displaying 3-39 Caller-ID outbound, configuring 3-38 CHAP 4-45 4-78 4-79 Bridge Adrs profile 14-5 14-7 14-16 LCP negotiation 4-78 OSPF Bridge parameter 4-92 14-6 Index-2 MAX 6000/3000 Network Configuration Guide...
Page 561 CIDR (Classless Inter-Domain Routing) defined 3-12 circuits call routing NNI-NNI 5-28 dial out number 3-53 UNI-NNI 5-30 Call Type parameter UNI-UNI 5-26 callback security Clear Call parameter 4-85 Call-by-Call parameter 4-40 client DNS, RADIUS attributes 9-15 MAX 6000/3000 Network Configuration Guide Index-3...
Page 562 DeadInterval parameter 8-10 Connection authentication Dec Ch Count parameter 4-48 4-49 LCP negotiation 4-78 Def Server parameter 9-26 modem settings 4-78 Def Telnet parameter 4-85 PPP packet 4-78 terminal adapter settings 4-78 Default Gateway 4-97 Index-4 MAX 6000/3000 Network Configuration Guide...
Page 563 Dyn Alg parameter 4-48 Dialout options dynamic IP addressing 9-10 configuring 4-89 address assignment 9-10 digital modems address pools, specifying 9-10 56k modem numbering 3-30 address, overriding 9-11 configuring 3-30 configuring 9-36 quiescing 3-33 enabling 9-32 MAX 6000/3000 Network Configuration Guide Index-5...
Page 564 RADIUS, NetWare 11-6 expansion slots RADIUS, TCP/IP 11-6 slot and menu item correspondence (MAX 3000) FR Address parameter 9-26 slot and menu item correspondence (MAX 6000) FR Circuit parameter 5-26 extended dial plan 3-72 FR Direct connections exterior protocols RADIUS...
Page 565 11-11 Framed-Route, maximum number per profile 9-58 Home Router 11-16 FT1-B&O calls Hop Count parameter 12-20 configuring 3-56 host Full Access (profile) privileges addresses per class C subnet Full command 6-20 ports 3-60 MAX 6000/3000 Network Configuration Guide Index-7...
Page 566 Index Host BRI interfaces, continued BRI-to-BRI local call, configuring 3-43 menu item, corresponding (MAX 6000) configuring 3-40 3-41 interfaces, IP routing table inbound calls routing 3-41 Internet services outbound calls, making 3-42 configuring Host interface IP router, MAX functioning as...
Page 567 9-14 tables 12-2 preferences 9-33 TCP/IP 12-2 private routes 9-33 IPX RIP broadcasts Route IP parameter 4-18 sending and receiving 12-10 routes, poisoning 9-30 UDP checksums 9-31 IPX RIP parameter 12-9 MAX 6000/3000 Network Configuration Guide Index-9...
Page 568 Link Mgmt parameter diagnostics 3-47 Link Status Dlci parameter voice call support, configuring 3-45 Link-State Advertisements (LSAs) link-state routing algorithm List Attempt parameter 9-14 List Size parameter 9-14 KeyID parameter 8-11 Listen command 6-20 Index-10 MAX 6000/3000 Network Configuration Guide...
Page 569 MDM Modulation parameter 4-84 add-on numbers, specifying MDM Trn Level parameter 4-84 fail to connect Membership Timeout parameter 10-2 MAX units, spanning stack of 4-57 Menu mode 4-83 multiple POPs configuring 4-87 configuring 11-29 MAX 6000/3000 Network Configuration Guide Index-11...
Page 570 Net End parameter 4-74 13-6 13-7 IPX RIP Net Start parameter 4-74 13-6 13-7 link-state routing algorithm NetWare 12-3 LSA Type-5 link compression 12-3 NSSAs Stac compression 12-3 OPSF Options subprofile 4-37 Index-12 MAX 6000/3000 Network Configuration Guide...
Page 571 9-38 concept 3-14 RADIUS, defined in 9-38 parameter 3-14 3-23 pools, RADIUS 9-38 port and slot numbering (MAX 3000) and slot numbering (MAX 6000) and slot specifications 3-61 3-73 PAC (PPTP Access Controller) 11-27 diagnostics 3-51 configuring 11-28 host 3-60...
Page 572 14-6 RADIUS routes 9-58 RADIUS, client DNS 9-15 Reloading RADIUS profiles 4-57 promiscuous mode 14-3 Remote X.121 Addr parameter Prompt Format parameter 4-85 reserved IP addresses 4-96 9-20 Prompt parameter 4-85 Reset command 6-21 Index-14 MAX 6000/3000 Network Configuration Guide...
Page 573 12-7 RADIUS servers mode (ATMP) 11-5 TACACS servers routers terminal server backup designated (BDRs) designated (DRs) Security parameter 4-83 router-to-router connection Security profile configuring IP address for 9-41 Full Access MAX 6000/3000 Network Configuration Guide Index-15...
Page 574 4-88 9-27 slot Static Mappings profile 9-27 and port numbering (MAX 3000) static route 9-55 9-59 and port numbering (MAX 6000) ATMP mobile clients 11-16 and port specifications 3-61 3-73 configuring 9-56 12-14 12-21 SNMP (Simple Network Management Protocol)
Page 575 4-40 Telnet PW parameter 9-30 T1/PRI model Term Type parameter 4-85 slot and menu correspondence (MAX 3000) terminal adapters slot and menu correspondence (MAX 6000) connections 4-79 T302 Timer parameter 3-23 Terminal mode 4-82 T391 parameter configuring 4-85...
Page 576 L2TP tunnels, configuring 11-31 Type-5 LSAs PPTP (Point-to-Point Tunneling Protocol) Type-7 LSAs PPTP tunnels, configuring 11-27 Type-of-Service (TOS) VT100 menu priority levels 9-35 slots and ports (MAX 3000) settings 9-35 slots and ports (MAX 6000) Index-18 MAX 6000/3000 Network Configuration Guide...
Page 577 RFC 1356 X.25 PAD 6-13 commands 6-18 6-21 – configuring 6-13 sessions, setting up 6-14 X.25 parameters X.25 profile AO/DI, supported 6-37 X.25 profile parameters – X.25 protocol clear cause codes 6-22 connections diagnostics 6-22 MAX 6000/3000 Network Configuration Guide Index-19...

This manual is also suitable for:

Max 3000

Lucent Technologies MAX 6000 Network Configuration Manual

Chapter 1 Introduction

Chapter 2 Configuration Concepts and Profiles

Chapter 3 Configuring WAN Access

Chapter 4 Configuring Individual WAN Connections

Chapter 5 Configuring Frame Relay

Chapter 6 Configuring X.25

Chapter 7 Configuring IP Fax

Chapter 8 Configuring OSPF Routing

Chapter 9 Configuring IP Routing

Quick Links

Related Manuals for Lucent Technologies MAX 6000

Summary of Contents for Lucent Technologies MAX 6000