Lucent Technologies, Inc. further reserves the right to revise this manual and to make changes to its content at any time, without obligation to notify any person or entity of such revisions or changes.
Page 9
10. Configuring T1, E1, and ISDN PRI PortMaster 4 Quick Setup Guide for ISDN PRI ......10-2 Configuring the Ethernet Interface .
Page 10
Contents Configuring NFAS with D Channel Backup ......10-17 Displaying Information about NFAS Configurations ..... . . 10-19 Troubleshooting NFAS .
Page 11
Contents Configuring Global and Ethernet Settings ....... 12-5 Configuring the Synchronous WAN Port ....... . 12-6 Troubleshooting a Frame Relay Configuration.
About This Guide The PortMaster 4 Configuration Guide provides configuration instructions and examples ® and software troubleshooting instructions for the PortMaster 4 Integrated Access Concentrator from the Remote Access Business Unit of Lucent Technologies, Inc. This configuration guide is one of three manuals that make up the comprehensive PortMaster 4 User Manual: •...
RFC 1634, Novell IPX Over Various WAN Media (IPXWAN) RFC 1661, The Point-to-Point Protocol (PPP) RFC 1700, Assigned Numbers RFC 1723, RIP Version 2 RFC 1771, A Border Gateway Protocol 4 (BGP-4) RFC 1812, Requirements for IP Version 4 Routers PortMaster 4 Configuration Guide...
Additional References RFC 1814, Unique Addresses are Good RFC 1818, Best Current Practices RFC 1824, Requirements for IP Version 4 Routers RFC 1825, Security Architecture for the Internet Protocol RFC 1826, IP Authentication Header RFC 1827, IP Encapsulating Payload RFC 1828, IP Authentication Using Keyed MD5 RFC 1829, The ESP DES-CBC Transform RFC 1877, PPP Internet Protocol Control Protocol Extensions for Name Server Addresses RFC 1878, Variable Length Subnet Table for IPv4...
Document Advisories Note – means take note. Notes contain information of importance or special interest. Caution – means be careful. You might do something—or fail to do something—that results in equipment failure or loss of data. PortMaster 4 Configuration Guide...
Contacting Lucent Remote Access Technical Support Warning – means danger. You might do something—or fail to do something—that results in personal injury or equipment damage. Contacting Lucent Remote Access Technical Support The PortMaster comes with a 1-year hardware warranty. For all technical support requests, record your PortMaster ComOS version number and report it to the technical support staff or your authorized sales channel partner.
To subscribe, send email to majordomo@livingston.com with subscribe portmaster-announce in the body of the message. All announcements to this list also go to the portmaster-users list. You do not need to subscribe to both lists. xviii PortMaster 4 Configuration Guide...
Introduction This chapter discusses the following topics: • “PortMaster Software” on page 1-1 • “Preconfiguration Planning” on page 1-2 • “Setting the View” on page 1-3 • “Configuration Tips” on page 1-3 • “Basic Configuration Steps” on page 1-4 PortMaster Software All PortMaster products are shipped with the following software: •...
PortMaster 4 Installation Guide. This configuration guide is designed to introduce the most common configuration options available for the PortMaster 4. Review this material before you configure your PortMaster and, if possible, answer the following questions: •...
Setting the View The PortMaster 4 operates via the modules and boards installed in its slots. The system manager module installed in slot 4 provides overall (global) management for the entire chassis.
PortMaster products: 1. Install the PortMaster hardware and assign an IP address and a password as described in the PortMaster 4 Installation Guide. 2. Boot the system and log in with the administrative password.
Page 23
12. Configure the Layer 2 Tunneling Protocol (L2TP) if you are setting up an L2TP tunnel to an L2TP-compatible router. See the PortMaster 4 Command Line Reference for information on the L2TP commands. 13. Configure OSPF, if you are using this protocol.
Configuring Global Settings This chapter describes how to configure settings that the PortMaster 4 uses across all its ports and interfaces. This chapter discusses the following topics: • “Setting the View” on page 2-2 • “Configuring Name Resolution” on page 2-2 •...
View changed form 3 to 4 Command> Configuring Name Resolution You can use either a network name service or the host table on the PortMaster 4 to map hostnames to IP addresses. Using the Host Table Each host attached to an IP network is assigned a unique IP address. Every PortMaster supports a local host table to map hostnames to IP addresses.
Setting the Telnet Port Setting the Name Server The PortMaster supports RFC 1877, which allows remote hosts also supporting RFC 1877 to learn a name server through PPP negotiation. You must provide the IP address of the name server if you use a name service. You must set a name service before you set a name server.
(auth) facility on the loghost. You can disable logging of one or more types of events and change the facility and/or priority of log messages. To disable logging of a type of event, use the following command: Command> set syslog Logtype disabled PortMaster 4 Configuration Guide...
Page 29
Setting System Logging Use the Logtype keyword described in Table 2-1 to identify the type of event you want to disable—or enable again. Table 2-1 Logtype Keywords Logtype Keyword Description admin-logins !root and administrative logins. user-logins Nonadministrative logins; you might want to disable this logtype if you are using RADIUS accounting.
(bottom) DIP switch to the left (on) position. Setting the Chassis When you use the PortMaster 4 as an AnyMedia™ MultiService Module (MSM), you must specify the chassis type for PMVision to be able to display it. Use the following command to set the PortMaster 4 as an MSM: Command>...
Ether0 address as the first local IP address. IPCP Negotiation During PPP negotiations for the IP Control Protocol (IPCP), the PortMaster 4 uses the following order of precedence when choosing an IP address to identify itself: 1. The Local IP address configured in the user profile, if set 2.
The global local IP address settings can be displayed with the show global and show routes commands. Setting the Local IP Address To assign the PortMaster 4 IP addresses that are not limited by network interfaces, use the following command: Command> set local-ip-address [1|2|3|4] Ipaddress For example, to set the local IP address to 10.112.34.17, enter the following command:...
Setting the Reported IP Address To limit the size of the IP address pool, use the following command: Command> set pool Number Note – If you decrease the number of addresses in the pool, you must reboot the PortMaster for the change to take effect. Setting the Reported IP Address Some sites require a number of different PortMaster devices to appear as a single IP address to other networks.
An IP pool name can contain up to 31 characters. There is no limit to the number of IP pool entries you can configure. When you add a named IP pool to the pool table on the PortMaster, you must also add the IP-Pool-Name attribute to the RADIUS user profile. 2-10 PortMaster 4 Configuration Guide...
Configuring Named IP Pools (See “Setting Named IP Pools in RADIUS” on page 2-13.) If you do not want to configure a RADIUS user profile, you can create a default IP pool. (See “Creating a Default IP Pool.”) Creating a Default IP Pool When you configure a named IP pool, you must also add the IP-Pool-Name attribute to the RADIUS user profile.
Always reset the pool when you make changes to the named IP pool. Command> reset ippool The default gateway functions as a crossbar IP address. See the PortMaster 4 Command Line Reference for details about how to configure crossbar IP address for an interface, user, or location.
IP address is used and the PortMaster consults the forwarding table. The default gateway functions as a crossbar IP address. See the PortMaster 4 Command Line Reference for details about how to configure crossbar IP for an interface, user, or location.
PortMaster 2Ei or a PortMaster ISDN Office Router (OR-U) used for dial-up. How the Cable Modem Telephone Return System Works After you set the IP address of the DHCP server on the PortMaster 4, the cable modem dynamically configures itself so that all subsequent data travels upstream via the telephone interface, and downstream on the coaxial cable.
Page 39
2. Using the telephone interface, the cable modem broadcasts a DHCP request. The destination of the request is 255.255.255.255 and the source is 192.168.33.10. 3. The PortMaster 4 forwards the request to the DHCP server by substituting the IP address of the DHCP server (10.66.98.96) for the broadcast destination address.
To display the IPX routing table entries, enter the following command: Command> show ipxroutes Note – The PortMaster 4 supports the IPX protocol when running ComOS 4.1 or later. IPX is not supported in ComOS 4.0. The routes appear in the following order: 1.
Setting Static Routes Setting Static Routes Static routes provide routing information unavailable from the Routing Information Protocol (RIP), Open Shortest Path First (OSPF) protocol, or Border Gateway Protocol (BGP). RIP, OSPF, or BGP might not be running for one of the following two reasons. •...
Note – You can delete only static routes. Modifying the Static Netmask Table Note – ComOS 4.1 and later releases support both RIP-1 and RIP-2 on the PortMaster 4. Earlier releases of ComOS support only RIP-1. 2-18 PortMaster 4 Configuration Guide...
Page 43
Setting Static Routes The netmask table is provided to allow routes advertised by RIP-1 to remain uncollapsed on network boundaries in cases where you want to break a network into noncontiguous subnets. The PortMaster normally collapses routes on network boundaries as described in RFC 1058.
Page 44
If you are using an IRX running ComOS 3.2R or later as your gateway, you can configure the netmask table on the router also. This allows your PortMaster to listen to RIP messages from the other PortMaster routers and route directly to each of them. 2-20 PortMaster 4 Configuration Guide...
Setting Authentication for Dial-In Users Setting Authentication for Dial-In Users You can configure the PortMaster for three authentication methods, PAP, CHAP, and username/password login. By default, PAP and CHAP are set to on. Dial-in users are asked to authenticate with PAP when PPP is detected.
PortMaster Login Service has been selected for the user but the selected host does not have the in.pmd PortMaster daemon installed. Access is denied with the “Host Is Currently Unavailable” message if the host is down or otherwise not responding to the login request. 2-22 PortMaster 4 Configuration Guide...
Page 47
PortMaster Security Management If an access filter is configured on the port and the login host for the user is not permitted by the access filter, the PortMaster refuses service with an “Access Denied” message. If the access override parameter is set on the port, the PortMaster instructs the user to authenticate himself, even though the default access filter is set to deny access.
Configuring SNMP This chapter describes how to configure SNMP on the PortMaster 4 and includes the following topics: • “Understanding SNMP” on page 3-1 • “Livingston Extensions” on page 3-5 • “Configuring SNMP” on page 3-12 If you want to configure SNMP and are already familiar with SNMP concepts and the Livingston extensions, go to the “Configuring SNMP”...
Understanding SNMP MIB Specification Overview The PortMaster 4 MIB conforms to the first version of the Structure of Management Information (SMIv1) (RFCs 1212 and 1213). The private MIB for the product describes the data for configuration, fault, performance, security, and accounting management.
Page 51
Understanding SNMP OIDs provide compact representations of object names. An OID shows the position of an object in the MIB hierarchy. As shown in Figure 3-1, the OID for the Livingston MIB is 1.3.6.1.4.1.307. Figure 3-1 Management Information Base (MIB) Hierarchy unnamed joint CCITT...
Page 52
C0, and the OID 307.3.2.1.1.1.2.1 returns the port name for port C1 (see Table 3-1). Table 3-1 Partial View of the Livingston Serial Interfaces Table Interface (C0 and C1) ...307.3.2.1.1.1.1 Index ...307.3.2.1.1.1.2 PortName ...307.3.2.1.1.1.3 PhysType ...307.3.2.1.1.1.4 User PortMaster 4 Configuration Guide...
Livingston Extensions Table 3-1 Partial View of the Livingston Serial Interfaces Table (Continued) Interface (C0 and C1) ...307.3.2.1.1.1.5 SessionId ...307.3.2.1.1.1.6 Type ...307.3.2.1.1.1.7 Direction Livingston Extensions This section lists the following tables from the Livingston Extensions section of the MIB: • “PortMaster Serial Interfaces”...
Page 54
Error-correcting protocol being used in the modem or by the serial interface. livingstonSerialModemRetrains Number of retrains attempted by the modem attached to the serial interface. livingstonSerialModemRenegotiates Number of renegotiations attempted by the modem attached to the serial interface. PortMaster 4 Configuration Guide...
Livingston Extensions PortMaster T1 and E1 Interfaces The PortMaster T1 and E1 Interface table (Table 3-3) in the Livingston Extensions section of the MIB provides configuration and statistics for the T1 and E1 interfaces that connect directly to the telephone company. Table 3-3 PortMaster T1 and E1 Interfaces MIB Table Object...
Number of renegotiations attempted by the modem. livingstonModemCalls Number of times a call was received by the modem. livingstonModemDetects Number of analog calls received by the modem. livingstonModemConnects Number of successful calls received by the modem. PortMaster 4 Configuration Guide...
Livingston Extensions PortMaster Billing and Accounting Information Table The PortMaster Billing and Accounting Information table (Table 3-5) in the Livingston Extensions section of the MIB lists call events that can be used for billing. Table 3-5 PortMaster Billing and Accounting Information MIB Table Object Definition livingstonAMCEIndex...
MIB contains a summary of calls on a per board basis. The rows in the table correspond to the slots in the PortMaster 4, and the columns specify the type of calls as V.90, V.34, ISDN, and so on. This object is not accessible.
SNMP agent’s information. Every device allowed to access or read the MIB information must know the read community string. The default read community string is public. Before information can be set on the SNMP agent, the write community 3-12 PortMaster 4 Configuration Guide...
Configuring SNMP string must be known by the device. The default write community string is private. Community strings must be set on SNMP agents so that configuration information is not changed by unauthorized users. To use this feature, you must set both a read community string and a write community string for your network.
For details about a specific alarm, enter the following command: Command> show alarm [alarm-id] To clear alarms from the SNMP alarm table, enter the following command: Command> clear alarm alarm-id|all Refer to the PortMaster 4 Command Line Reference for more information. 3-14 PortMaster 4 Configuration Guide...
Ether0 operates at 10Mbps and is physically on the manager board. Use Ether0 for netboots and SNMP. Ether0 supports subinterfaces (see “Configuring Ethernet Subinterfaces” on page 4-7). Whenever you make changes to the Ether0 interface, you must reboot the PortMaster 4 for the changes to take effect.
7. The IP address of Ether1 8. The IP address of Ether0 Note – RADIUS packets leaving the PortMaster 4 have the source IP address of Ether1, even if the packet exits through Ether0. Understanding the Interfaces on the Standalone Ethernet Boards...
Command> set Ether0 rip on|off|broadcast|listen|v2 {broadcast|multicast|on|v1-compatibility} Refer to the PortMaster 4 Command Line Reference for a description of the keywords in this command. Refer to the PortMaster Routing Guide for a discussion of routing with RIP, and for OSPF and BGP routing configuration instructions.
You can define the IP address used as the local broadcast address. The RIP routing protocol uses this address to send information to other hosts on the local Ethernet network. The actual broadcast address is constructed from the IP address of the Ethernet PortMaster 4 Configuration Guide...
Note – This command is currently available only on the Ether0 port. Setting Ethernet IPX Parameters Note – The PortMaster 4 supports the IPX protocol if it is running ComOS 4.1 or later. IPX is not supported in ComOS 4.0.
Contact your IPX network administrator for information about the frame type used on your network. To set the IPX frame type, use the following command—entered on one line: Command> set Ether0 ipxframe ethernet_802.2|ethernet_802.2_ii|ethernet_802.3|ethernet_ii PortMaster 4 Configuration Guide...
With the subinterface feature of ComOS, you can create up to 512 subinterfaces (the total number of interfaces available on a PortMaster) on the Ether0 interface on the PortMaster 4. Because you have the bandwidth of only a single Ethernet interface, however, efficiency begins to degrade significantly when you add more than eight subinterfaces.
Configure Ether1 (or Ether0—see “Overview of PortMaster 4 Ethernet Interfaces” on page 4-1) with an IP address and reset the slot of the Ethernet board to make configuration changes take effect. Because Ether1 is in logical slot 10, use the following command to reset the Ether1: Command>...
Configuring Standalone Ethernet Boards Note – Ether0 or Ether1 must be configured for the PortMaster 4 to function normally. IPCP Negotiation During PPP negotiations for the IP Control Protocol (IPCP), the PortMaster 4 uses the following order of precedence when choosing an IP address to identify itself: 1.
You specify the IP address that BGP uses with the set bgp peer command. See the PortMaster 4 Command Line Reference for details. The source address you set with this command is the interface address BGP uses when forming its packets.
Configuring Dial-In Users This chapter describes how to configure the PortMaster 4 user table to support dial-in connections. The user table settings define how each dial-in user is authenticated and how dial-in connections are made. To configure network dial-in connections from other routers, you must define each remote router as a user on the PortMaster.
To delete a user from the user table, use the following command: Command> delete user Username User Types User settings define the nature and behavior of dial-in users. The user table contains entries for each defined dial-in user along with the characteristics for the user. PortMaster 4 Configuration Guide...
Configuring Settings for Network and Login Users The user table provides login security for users to establish login sessions or network dial-in connections. If you want to allow a network dial-in connection from another router, the router must have an entry in the user table or in RADIUS. PortMaster products allow you to configure two types of users, network users and login users.
This method for assigning IP addresses to users is most commonly used when a large number of users are authorized to dial in. negotiated This option is used only for PPP sessions. Here, the PortMaster learns the IP address of the remote host using IPCP negotiation. PortMaster 4 Configuration Guide...
Command> set user Username netmask Ipmask Setting the IPX Network Number Note – The PortMaster 4 supports the IPX protocol if it is running ComOS 4.1 or later. IPX is not supported in ComOS 4.0. If you are using the IPX protocol for this user, you must assign a unique IPX number to the network connection between the remote user device and the PortMaster.
Command> set user Username rip on|off|broadcast|listen|v2 {broadcast|on|v1-compatibility|multicast} Refer to the PortMaster 4 Command Line Reference for a description of the keywords in this command. Refer to the PortMaster Routing Guide for a discussion of routing with RIP, and for OSPF and BGP routing configuration instructions.
Configuring Network Users Setting Compression Compression of TCP/IP headers can increase the performance of interactive TCP sessions over network hardwired asynchronous lines. Lucent implements Van Jacobson TCP/IP header compression and Stac LZS data compression. Compression is on by default. Compression cannot be used with multiline load balancing, but can be used with Multilink PPP.
PortMaster. You can specify the default host with the set host command. For more information see the PortMaster 4 Command Line Reference. prompt This option allows the user to log in to a host by IP address or name at the time the login session is established.
Configuring Login Users Table 5-3 Login Host Options (Continued) Host Option Description Ipaddress This option allows the user to connect only to the host specifically named. A valid 39-character hostname or IP address must be entered. This configuration is used when you want to allow a user to access a specific host.
To enter the callback telephone number for a login user, use the following command: Command> set user Username dialback String|none To disable callback connections for the user, use the none keyword. 5-10 PortMaster 4 Configuration Guide...
Frame Relay connections, switched 56Kbps lines, or ISDN lines. Connection rates can range from 9600bps to 2.048Mbps (E1). The PortMaster 4 supports any of these connection types using one or more synchronous ports.
The default setting is off. To enable or disable extended information for a port, use the following command: Command> set W1 extended on|off Note – This command affects only the display of port information. It does not affect port behavior. PortMaster 4 Configuration Guide...
Page 85
Configuring WAN Port Settings Setting the Port Type and Connection Type Use the following command to set the port and connection type: Command> set W1 network dialin|dialout|twoway|hardwired The port type for synchronous ports is always network, but you must explicitly set it. You also must specify the kind of connection to use on the synchronous port.
Page 86
Frame Relay connections, but you can use it if the channel service unit/digital service unit (CSU/DSU) is configured accordingly. To set modem control, use the following command: Command> set W1 cd on|off PortMaster 4 Configuration Guide...
Configuring WAN Port Settings Assigning a Port to a Dial Group You can create modem pools for dial-out connections by associating ports and dial-out locations with dial groups. Dial groups can be used to reserve ports for dial-out to specific locations, or to differentiate among different types of modems that are compatible with the remote location.
Page 88
IP subnet of which the IP address is a member. This setting is used on network hardwired ports only. To set the subnet mask, use the following command: Command> set W1 netmask Ipmask See Appendix A, “Networking Concepts,” for more information about using subnet masks. PortMaster 4 Configuration Guide...
Page 89
Configuring WAN Port Settings Setting the IPX Network Address Note – The PortMaster 4 supports the IPX protocol if it is running ComOS 4.1 or later. IPX is not supported in ComOS 4.0. When using IPX, you must identify an IPX network number of the serial link that is unique from every other IPX number on the network.
Page 90
To set compression, use the following command: Command> set compression on|off|stac|vj Van Jacobson TCP/IP header compression and Stac LZS data compression improve performance on asynchronous lines but can degrade performance on high-speed synchronous lines. PortMaster 4 Configuration Guide...
“Setting Filters” on page 7-10 • “Testing Your Location Configuration” on page 7-11 See the PortMaster 4 Command Line Reference for more detailed command descriptions and instructions. You can also configure the PortMaster 4 using the PMVision application for Microsoft Windows, UNIX, and other platforms supporting the Java Virtual Machine (JVM).
PortMaster to manually dial out to a location. You can change the connection type as shown in Table 7-1. If you are changing an existing location’s connection type, verify that the connection is not active. PortMaster 4 Configuration Guide...
Page 93
Configuring the Location Table Table 7-1 Dial-Out Connection Types Connection Type Description on_demand This type of connection is automatically started when packets for the remote location are queued by the PortMaster. automatic This type of connection is always active. If the telephone connection is dropped, the PortMaster initiates a new connection with the location after a 30-second waiting period.
To set the protocol for a location, use the following command: Command> set location Locname protocol slip|ppp|x75-sync For more information about setting the location protocol to a Frame Relay subinterface, see “Frame Relay Subinterfaces” on page 12-8. PortMaster 4 Configuration Guide...
Command> set location Locname netmask Ipmask Setting the IPX Network Number Note – The PortMaster 4 supports the IPX protocol if it is running ComOS 4.1 or later. IPX is not supported in ComOS 4.0. If you use the IPX protocol, you must assign a unique IPX network number to the network connection between the remote host and the PortMaster.
Command> set location Locname rip on|off|broadcast|listen|v2 {broadcast|multicast|on|v1-compatibility} Refer to the PortMaster 4 Command Line Reference for a description of the keywords in this command. Refer to the PortMaster Routing Guide for a discussion of routing with RIP, and for OSPF and BGP routing configuration instructions.
Configuring the Location Table To set the MTU for a location, use the following command: Command> set location Locname mtu MTU Configuring Compression Compression of TCP/IP headers can increase the performance of interactive TCP sessions over network hardwired asynchronous lines. Lucent implements Van Jacobson TCP/IP header compression and Stac LZS data compression.
ASCII character NUL, and so on. Most environments must set the asynchronous map to 0 (zero) to achieve maximum throughput. To set the PPP asynchronous map for a location, use the following command: Command> set location Locname map Hex PortMaster 4 Configuration Guide...
Setting Multiline Load Balancing Setting Multiline Load Balancing You can set several ports to connect to a single location to distribute heavy traffic loads. This capability is called multiline load balancing. You can define a threshold—known as a high-water mark—for a location. The high-water mark triggers the PortMaster to bring up an additional connection to the location when the amount of data specified by the high-water mark is queued.
Output filters cause all packets going out to the interface to be evaluated against the filter rule set. Only packets allowed by the filter are passed out to the interface. To set an output filter for a location, use the following command: Command> set location Locname ofilter Filtername 7-10 PortMaster 4 Configuration Guide...
Testing Your Location Configuration Testing Your Location Configuration When you are configuring a location, you can set a manual connection for the location so that you can test the configuration before resetting the connection to on-demand or automatic. To test the configuration, you must initiate a connection with the remote location by using the dial command from the command line.
Each topic in this chapter includes examples of filters used to accomplish the goal described. See the PortMaster 4 Command Line Reference for more detailed command descriptions and instructions. You can also configure the PortMaster 4 using the PMVision application for Microsoft Windows, UNIX, and other platforms supporting the Java Virtual Machine (JVM).
A maximum of 256 filter rules per filter is allowed for the PortMaster 4. The PortMaster generates an error message when the number of filter rules exceeds the limit.
Overview of PortMaster Filtering Table 8-1 Filter Options (Continued) Option Description Restricting access based You can create filters that use the status of TCP on TCP status connections as part of the rule set. This feature can allow network users to open connections to external networks without allowing external users access to the local network.
You construct a filter by creating the filter and then adding rules that permit or deny certain types of packets. A maximum of 256 filter rules per filter is allowed for the PortMaster 4. The PortMaster generates an error message when the number of filter rules exceeds the limit.
Creating Filters To create an IP filter rule that filters by address, use the following command—entered on one line: Command> set filter Filtername RuleNumber permit|deny [Ipaddress/NM Ipaddress(dest)/NM] [protocol Number] [log] [notify] You can replace protocol Number with one of the following keywords: •...
IPX network number • IPX node address • IPX socket number To create a SAP filter rule, use the following command—entered on one line: Command> set sapfilter Filtername RuleNumber permit|deny [server String][network Ipxnetwork] [host Ipxnode] [socket eg|gt|lt Ipxsock] PortMaster 4 Configuration Guide...
Displaying Filters Displaying Filters To display the filter table, use the following command: Command> show table filter To display a particular filter, use the following command: Command> show filter Filtername Deleting Filters To delete a filter, use the following command: Command>...
Permits Hypertext Transfer Protocol (HTTP) access to host 192.168.0.5. Permits an FTP data channel. Permits DNS. Permits DNS zone transfers. (You can write this rule to allow only connections to your name servers.) Permits ICMP packets. PortMaster 4 Configuration Guide...
Example Filters Input and Output Filters for FTP Packets Filters can be used to either permit or deny File Transfer Protocol (FTP) packets. You must understand how this protocol works before you develop FTP filters. FTP uses TCP port 21 as a control channel, but it transfers data on another channel initiated by the FTP server from TCP port 20 (FTP-data).
This example filter allows any kind of outgoing connection from the server, but blocks all incoming traffic to any host but your designated Internet server. This filter also limits incoming traffic on your Internet server to SMTP, Network News Transfer Protocol (NNTP), DNS, FTP, and ICMP services. 8-10 PortMaster 4 Configuration Guide...
Page 113
Example Filters Note – Even if you have the latest versions of the daemons ftpd, httpd, and sendmail you might be vulnerable to attacks through these services. Check the latest CERT Coordination Center advisories, available on ftp.cert.org, for the vulnerabilities of these services.
4. The access filter defined for this user is used to determine if the user has permission to access the specified host. To enable users to override a port access filter with their own filter, use the following command: Command> set S0 access on 8-12 PortMaster 4 Configuration Guide...
If you are running ComOS 4.0 or ComOS 4.1 on the PortMaster 4, you cannot use the commands in this chapter to configure external modems on asynchronous ports C0 and C1. Instead, you can attach a previously configured modem to the C0 or C1 ports.
To display the external modems currently configured in your modem table, use the following command: Command> show table modem A modem table display looks like the following: Short Name Long Name Type -------------- ------------- ------ cardinal Cardinal MVP288XF System mega Massive MegaFast User supra-288 Supra V.34 System PortMaster 4 Configuration Guide...
Using Automatic Modem Configuration The modem type is either system or user. System indicates that the configuration settings are the factory default settings. User indicates that the user has configured the modem table settings for that modem. To display the settings for a particular modem, use the following command: Command>...
The parity setting must be configured to match the parity setting on the attached modem. The parity default value is none and must be used for ports configured for network dial-in or dial-out operation. Table 9-2 describes the parity options. PortMaster 4 Configuration Guide...
Configuring Ports for Modem Use Table 9-2 Parity Options Option Description none Assumes 8 data bits, 1 stop bit, and no parity bit. This is the default. even Assumes 7 data bits, 1 stop bit, and even parity. Assumes 7 data bits, 1 stop bit, and odd parity. strip Assumes 8 data bits and 1 stop bit.
Page 122
Configuring Ports for Modem Use PortMaster 4 Configuration Guide...
Configuring T1, E1, and ISDN PRI This chapter describes how to configure T1 or E1 lines on the PortMaster 4 for the following kinds of service: T1 Line0 through Line3 E1 Line0 through Line2 Full T1 Full E1 Fractional T1...
Command> set ether0 broadcast high. 5. (Optional) Set Ether0 to listen for and broadcast RIP-1 packets. Command> set ether0 rip on Refer to the PortMaster 4 Command Line Reference for additional RIP-1 options, or for configuring RIP-2. 6. Save the settings and reboot.
Proceed to global configuration. Configuring Global Parameters You can now connect to the PortMaster 4 via Telnet or PMVision to continue the configuration process. You can perform the following command line configuration via the console or by using Telnet. Substitute your own information for variables.
PortMaster 4 Quick Setup Guide for ISDN PRI 9. Set the RADIUS password. Command> set secret String 10. Set the IP address of the RADIUS accounting server. Command> set accounting 192.168.120.10 11. Use RADIUS-provided netmasks. Command> set user-netmask on 12. Set the ChoiceNet server address.
You must change the view to the appropriate slot. Configuring General Settings Configure the following general settings for T1, E1, or ISDN PRI lines on PortMaster 4. Setting the View To configure a T1, E1, or ISDN PRI line, you must first set the view. Enter the show boards command to determine the identification number of the line board you want to configure.
The isdn-fractional keyword refers to PRI only. Configuring Fractional Settings The PortMaster 4 supports fractional service on T1, E1, or ISDN PRI lines. To configure a line for fractional use, you must create channel groups and assign channel numbers.
64Kbps, used for framing types other than D4. This is the default. Configuring ISDN PRI Settings Use the following settings to configure ISDN PRI on the PortMaster 4. Setting the ISDN PRI Switch The switch type information is available from your ISDN PRI service provider. To set the switch type for ISDN connections to the PortMaster ISDN PRI virtual ports, use the following command—entered on one line.
Description Line0 Line0 through Line3 (T1), Line0 through Line2 (E1). b8zs Bipolar 8-zero substitution. This is the default for T1 lines. Alternate mark inversion. hdb3 High-density bipolar 3. This is the default for E1 lines. 10-8 PortMaster 4 Configuration Guide...
Configuring ISDN PRI Settings Setting the Pulse Code Modulation You need to set the pulse code modulation only if you are using digital modems and your PRI service provider instructs you to change the setting to something other than the default. This command sets the method for “companding”—compressing and expanding—the amplitude of analog signals.
Similarly, the Tri E1 board with internal modems has 98 modems per board, with 90 active modems and 8 hot spares. You can install up to nine Quad T1 or Tri E1 boards into the PortMaster 4 chassis, for a total of 882 modems—864 active modems plus 18 hot standby modems for Quad T1 boards, or 810 active modems plus 72 hot standby modems for Tri E1 boards.
Troubleshooting Digital Modems The debug command is useful for troubleshooting the digital modems and Multichassis PPP events on the PortMaster 4. Output is sent to the system console set by the set console command. After completing the debugging process, disable the debug commands by using the correct set debug off command, and reset the console with the reset console command.
Page 134
Foreign exchange station (FXS) loop start protocol used with T1 lines. Configuring the PortMaster 4 for Channelized T1 Follow these steps to configure a Quad T1 board on the PortMaster 4 to use channelized T1 service: 1. Set the view Command>...
Page 135
Configuring Channelized T1 or E1 3. Set the signaling protocol and the line provisioning. Command Slotnumber> set Line0 signaling wink|immediate|fxs 4. Set the framing format for the line. Command Slotnumber> set Line0 framing esf|d4 5. Set the encoding method for the line. Command Slotnumber>...
Mexico. Profile 4 is a subset of profile 1 and is used with switches that do not support caller ID. This profile can be used in Mexico whenever profile 1 is used, but the reverse is not true. 10-14 PortMaster 4 Configuration Guide...
Using NFAS for ISDN PRI Configuring the PortMaster 4 for Channelized E1 Follow these steps to configure a Tri E1 board on the PortMaster 4 for channelized E1 service: 1. Set the view Command> set view Slotnumber 2. Set the line for in-band signaling.
NFAS group. When you reset the slot of a PortMaster 4 configured for NFAS with backup, the D channels on the primary and secondary interfaces initialize in “out of service” mode.
Line0 in slot 0 for NFAS group 5. The secondary interface is set on Line0 in slot 1. All other T1 interfaces on these two boards on the PortMaster 4 are set as slave interfaces for this group.
Page 140
20—as slave interfaces, save the configurations, and reset slots as appropriate. Note – When you configure a line board for NFAS, all interfaces on the board must use NFAS. You cannot configure some of the interfaces for standard PRI. 10-18 PortMaster 4 Configuration Guide...
Using NFAS for ISDN PRI Displaying Information about NFAS Configurations Use the show Line0 command to display NFAS settings on an interface. For example, to display NFAS settings on a line board in slot 3, enter the following commands: Command> set view 3 Command 3>...
SS7, you identify an SS7 gateway to the signaling network that does call management for user traffic on IMTs. Because modem pools are managed on a slot-by-slot basis, each slot in the PortMaster 4 configured for IMTs is an SS7 client and sets up an independent session with the SS7 gateway.
To configure the PortMaster 4 to communicate with an SS7 gateway using the default IMT switch type, you set only the IP address and port number of the gateway, and the PortMaster 4 base port number. You do not need to set the switch type—if it is not specified, the default is assumed.
Configuring SS7 Using the Optional 1A Switch Type for T1 To configure the PortMaster 4 to communicate with an SS7 gateway using the 1A IMT switch type, you must specify the switch type when you set the IP address and port number of the gateway, and the PortMaster 4 base port number.
Command 0> show Line0 Troubleshooting SS7 Configurations This section provides information on checking activity between the slot on the PortMaster 4 and the SS7 gateway. To troubleshoot modems, see “Troubleshooting Digital Modems” on page 10-11. Checking SS7 Gateway Initialization Caution – Because debug commands can significantly slow throughput on line boards, Lucent recommends that you do not perform debugging operations on production lines.
1A switch type. Each example shows how to configure slot 0 and slot 1. The SS7 gateway is at address 192.168.10.10 and is listening for SS7 signaling on port 10000. Port 7000 on the PortMaster 4 is the IMT base port for both slot 0 and slot 1.
Page 148
Configuring SS7 Set line signaling on all lines you want to use for SS7 in slot 1. set line0 imt set line0 signaling rbs . . . save all reset slot1 10-26 PortMaster 4 Configuration Guide...
Quad T1 boards to the 28 DS-1 channels of the T3 line. To fully demultiplex a T3 line, you must have seven Quad T1 boards installed in the PortMaster 4. The T3 Mux board supports the M13 framing format and converts bipolar 3-zero substitution (B3ZS) line encoding to nonreturn to zero (NRZ) DS-3 signaling.
Enabling Clocking on the Backplane When you configure a T3 Mux board to provide clocking to the PortMaster 4 backplane, other boards can derive their clocking from the backplane. To set the T3 Mux board to provide clocking to the backplane, you must first set the view to the slot with the installed T3 Mux board.
You can now use the following command to set T3 Mux clocking: Command 1> set mux line-clock external|internal Performing Diagnostics This section describes how to enable a PortMaster 4 to conduct loopback tests on a single DS-1 channel and on a T3 line. Looping an Individual DS-1 Channel...
PortMaster routers support Frame Relay over synchronous ports. This chapter uses an example to demonstrate how to configure the PortMaster 4 to connect to a synchronous line using Frame Relay. This chapter also explains how to configure Frame Relay subinterfaces.
PVC, regardless of bandwidth availability. Discarding Frames The PortMaster 4 transmits as much data on the serial port as it can for any PVC that has traffic, regardless of CIR. The Frame Relay switch passes on as much of the data as possible to the next link.
Frame Relay Configuration on the PortMaster performance for your application. In most cases, ordering according to these criteria provides service that is close to your port speed. The CIR is a guaranteed minimum throughput, not a maximum limit. Port speed is the maximum limit. LMI Types The following Frame Relay terms relate to network management.
12-8. Configuring a T1 or E1 Line for Frame Relay You configure Frame Relay on the PortMaster 4 by configuring a T1 line on the Quad T1 board or an E1 line on the Tri E1 board. This section describes how to configure one end of a Frame Relay connection. Because configuration for both ends of the connection is the same, you can use the procedure in this section as a guide for configuring both ends of your Frame Relay connection.
Before you configure a line for Frame Relay, you must configure global settings on the PortMaster 4, set the gateway routers, and configure the Ethernet interface. Follow the procedures in this section to configure a T1 or E1 line for Frame Relay service.
Configuring a T1 or E1 Line for Frame Relay Configuring the Synchronous WAN Port Follow this procedure to configure the synchronous WAN port on the PortMaster 4: 1. Enter the show boards command to determine the identification number of the line board you want to configure.
Troubleshooting a Frame Relay Configuration 11. Reset the slot. Command Slotnumber> reset W1 12. Save the configuration. Command Slotnumber> save all If LMI or Annex-D is set, the PortMaster receives DLCI information in the full status update messages from the Frame Relay switch. The PortMaster then attempts to discover IP addresses of other routers using Inverse ARP.
Entries can be followed with an optional IP address or hostname. The keyword ipxdlci is available for IPX networks. Note – The PortMaster 4 supports the IPX protocol if its running ComOS 4.1 or later. ComOS 4.0 does not support the IPX protocol.
Frame Relay Subinterfaces Displaying DLCI Entries DLCI entries that are added or deleted are linked to the location table. Use the show location Locname command to display the DLCI entries. Troubleshooting Subinterfaces Packets received on a subinterface can be identified as belonging to that subinterface only if the DLCI is properly entered in the DLCI table for that location.
Using Synchronous Leased Lines This chapter describes how to set up a synchronous leased line between a PortMaster 4 and another PortMaster product. The chapter provides guidelines for configuring both ends of the connection and includes the following topics: •...
Configuring a Leased Line Connection Note – The PortMaster 4 also supports numbered IP interfaces on leased lines, but Lucent does not recommended this method because it wastes IP address space. Configuring a Leased Line Connection Before you configure a synchronous serial port for a network hardwired leased line, you must configure global settings on the PortMaster 4, and you must configure the Ethernet interface.
6. Reset the slot. Command> reset slot10 Configuring the Synchronous WAN Port Follow this procedure to configure the synchronous WAN port on the PortMaster 4 for leased line service: 1. Enter the show boards command to determine the identification number of the line board you want to configure.
Command Slotnumber> set W1 cd off 11. Turn on RIP routing. Command Slotnumber> set W1 rip on See the PortMaster 4 Command Line Reference for information about RIP-2. 12. Set the maximum transmission unit size. Command Slotnumber> set W1 mtu MTU 13.
Page 167
Troubleshooting a Leased Line Connection • If you have a Cisco router on the other end of your connection, make sure that it is running Cisco’s software release 9.14(5) or later and is using PPP encapsulation, not High-Level Data Link Control (HDLC). •...
Page 168
Troubleshooting a Leased Line Connection 13-6 PortMaster 4 Configuration Guide...
PC-based networks. IPX uses Novell’s proprietary Service Advertising Protocol (SAP) to advertise special services such as print and file servers. The PortMaster 4 supports the IPX protocol if it is running ComOS 4.1 or later. IPX is not supported on ComOS 4.0.
126 class A networks can exist (0 is reserved, and 127 is used for loopback networks), but each class A network can have almost 17 million hosts. No new class A networks can be assigned at this time. PortMaster 4 Configuration Guide...
Page 171
Network Addressing For example: 10.100.232.1 Host address Network address Class B Addresses The class B IP address format allocates the highest 16 bits to the network field and sets the two highest-order bits to 1 and 0, providing a range from 128 through 191, inclusive.
If the bits in the host portion of an address are all 0, that address refers to the network specified in the network portion of the address. For example, the class C address 192.31.7.0 refers to a particular network. Historically, this address was used as a broadcast. PortMaster 4 Configuration Guide...
Network Addressing The standard for broadcast is high, which uses all 1s in the host portion (for example, 192.168.1.255); however, many networks still use all 0s. The PortMaster can be configured either way and should be set to match the other systems on your network. Note –...
Page 174
255.255.255.255. To use VLSMs and have ComOS accept the value in Framed-IP-Netmask, enter the following commands: Command> set user-netmask on Command> save all Caution – The VLSM feature affects both routing and proxy ARP on the PortMaster and must be used with caution. PortMaster 4 Configuration Guide...
Using Naming Services and the Host Table Using Naming Services and the Host Table Naming services are used to associate IP addresses with hostnames. Many networks use the Domain Name System (DNS) or the Network Information Service (NIS) for mapping hostnames to IP addresses.
ChoiceNet can use filter names specified by the RADIUS user record. For more information about ChoiceNet, refer to the ChoiceNet Administrator’s Guide. PortAuthority RADIUS Lucent’s PortAuthority RADIUS software provides enhanced RADIUS functionality and must be purchased separately. PortMaster 4 Configuration Guide...
TCP and UDP Ports and Services Table B-1 lists common port numbers—well-known ports—assigned to TCP and UDP services—well-known services—by the Internet Assigned Network Numbers Authority (IANA). A more complete list is available in RFC 1700, Assigned Numbers. Note – If you are configuring a filter on a PortMaster from the command line interface, you must use the port number.
Command Index add dlci (synchronous port) 12-4 save all 6-8 10-13 10-15 add dlci W1 12-6 save route 2-18 add filter 8-4 set 2-2 add Ippool 2-10 2-11 set accounting 10-4 add ipxdlci (synchronous port) 12-4 set all modem 9-5 add location 7-2 set all speed 9-6 add location sub1 12-8...
Page 180
S0 access 8-12 set Line0 t1 10-6 set S0 cd 9-6 set Line0 t1|e1 13-3 set S0 directory 10-9 set line1 isdn 10-4 set S0 hangup 9-7 set line1 nfas slave 10-18 set S0 parity 9-7 Command Index-2 PortMaster 4 Configuration Guide...
Page 181
Command Index set S0 rts/cts 9-7 set W1 lmi 12-3 12-4 set S0 speed 9-6 set W1 mtu 13-4 set S0 xon/xoff 9-7 set W1 netmask 6-6 12-6 13-4 set sapfilter 8-6 set W1 network 6-3 12-6 set secret 10-4 set W1 network hardwired 13-3 set serial-admin 2-6 set W1 ofilter 6-7...
Page 182
Command Index Command Index-4 PortMaster 4 Configuration Guide...
Page 186
PRI line 10-8 setting 10-21 provisioning 10-17 using 1A switch type 10-22 pulse code modulation for PRI line 10-9 using default switch type 10-21 in.pmd 1-1 2-22 in-band signaling E1 10-12 Subject Index-4 PortMaster 4 Configuration Guide...
Page 187
Subject Index login host 5-8 login users keepalive timer adding to the user table 5-2 Annex-D 12-4 description of 5-3 LMI 12-3 See also user table loopback, enabling on T1 or E1 lines 10-9 T3 line 11-3 leased line connections Ethernet 13-2 global settings 13-2 overview 13-1...
Page 188
5-4 console 2-3 See user table dial groups 6-5 NFAS port 1643 2-4 configuring 10-17 speed 9-6 12-2 D channel backup 10-17 synchronizing speed 9-6 debugging 10-19 synchronous port speed 6-4 12-2 described 10-15 Subject Index-6 PortMaster 4 Configuration Guide...
Page 189
Subject Index telephone number 10-9 1877 2-3 Telnet 2-3 2003 8-5 well-known B-1 2139 A-8 See also asynchronous ports, synchronous 988 A-3 ports, WAN ports PPP address negotiation 7-5 network users 5-6 on Ethernet 4-3 setting in-band signaling for E1 10-14 routing, setting 7-6 setting in-band signaling for T1 10-12 synchronous ports 6-7...
Page 190
Frame Relay 12-7 transport protocol 6-5 Frame Relay subinterfaces 12-9 See also WAN ports leased line connections 13-4 syslog 12-5 13-2 locations 7-11 syslog messages 2-4 NFAS 10-19 system logging disabling 2-4 messages 2-4 setting 2-4 Subject Index-8 PortMaster 4 Configuration Guide...
Page 191
Subject Index for NFAS 10-17 packets, filtering 8-6 services and ports B-1 username, setting for dial-out 7-4 users deleting 5-2 displaying configuration information 5-2 restricting access to hosts 5-9 session limit 5-4 user table access filters 5-9 adding users 5-2 compression 5-7 displaying 5-1 IP address 5-4...
Need help?
Do you have a question about the PortMaster 4 and is the answer not in the manual?
Questions and answers