Sarian Systems 2000 Series Reference Manual
  1. Manuals
  2. Brands
  3. Sarian Systems Manuals
  4. Network Router
  5. 2000 Series
  6. Reference manual

Sarian Systems 2000 Series Reference Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Sarian Systems
2000 Series
Reference Guide
© 2002-2003 Sarian Systems Limited. All rights reserved. No part of this document covered by copyright may be
reproduced or copied in any form or by any means graphic, electronic, or mechanical, including photocopying, recording,
taping, or information and retrieval systems without written permission of Sarian Systems Ltd.
Sarian Systems reserve the right to modify or revise all or part of this document, its contents, and any products described
herein at any time without prior notification and shall not be responsible for any loss, cost, or damage, including
consequential damage, caused by reliance on these materials.
th
Issue 1.7, 9
June 2003. Part # 6222-0001

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 2000 Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Sarian Systems 2000 Series

Summary of Contents for Sarian Systems 2000 Series

  • Page 1 Sarian Systems Ltd. Sarian Systems reserve the right to modify or revise all or part of this document, its contents, and any products described herein at any time without prior notification and shall not be responsible for any loss, cost, or damage, including consequential damage, caused by reliance on these materials.

  • Page 3: Table Of Contents

    CONTENTS PREFACE 1 INTRODUCTION 1.1 Unpacking The Unit 1.2 Front Panel Features 1.3 Rear Panel Features 1.4 GPRS SIM Card Installation 2 USING THE WEB INTERFACE 2.1 Installing The Driver File 2.2 Creating A New Connection 2.3 Configuring A New Connection 2.4 Initiating A Connection 3 THE COMMAND LINE INTERFACE 3.1 The “AT”...
  • Page 4 2000 Series Reference guide 4.20 Configure IP Routes 4.21 Configure IPSEC 4.22 Configure IPSec Eroutes 4.23 Configure IPSec Default Eroute 4.24 Configure NUI Mappings 4.25 Configure 4.26 Configure Protocol Bindings 4.27 Configure SMS Edit 4.28 Configure SMTP 4.29 Configure SNTP 4.30 Configure...
  • Page 5 6.10 Status Web Server 6.11 Status X.25 Sessions 7 THE FILING SYSTEM 7.1 System Files 7.2 Filing System Commands 8 USING V.120 8.1 Initial Set Up 8.2 Initiating A V.120 Call 8.3 Answering V.120 Calls 9 X.25 PACKET SWITCHING 9.1 Introduction. 9.2 X.28 Commands 10 PPP OVER ETHERNET 11 IPSEC AND VPN’S.
  • Page 6 2000 Series Reference guide 15.8 &Y Set Default Profile 15.9 &Z Store phone number 15.10 \LS Lock Speed 15.11 \PORT Set Active Port 15.12 \at Ignore invalid AT commands 16 “S” REGISTERS 16.1 S0 V.120 Answer Enable 16.2 S2 Escape Character 16.3 S23 Parity...

  • Page 7: Preface

    Any attempt to service or repair the unit by the user will void the product warranty. Sarian 2000 series products are designed for indoor use only and should be used in an environment that is suitable for computers and other electronic equipment.

  • Page 8: Introduction

    2000 Series Reference guide Introduction Thank you for purchasing a Sarian 2000 series product. There are number of models in the 2000 series which at the time of writing include: Model Description IR2140 ISDN router, 4 serial ports IM2040 ISDN multiplexer, 4 serial ports...

  • Page 9: Front Panel Features

    The precise number and function of the LED’s will depend upon the model you have purchased. The illustration below is of the IR2140. The following descriptions cover all the different types of indicator that are used on 2000 series products: ON (all models) The ON indicator will illuminate steady red when power is applied.

  • Page 10: Rear Panel Features

    “user” switch that is normally used to reset the unit. The following illustration shows the rear panel of the IR2140. The following descriptions cover all the different types of connector that are used on 2000 series products. 1.3.1 The power connector Sockets marked 12V DC or DC IN are use to connect the mains power adapter.

  • Page 11: Gprs Sim Card Installation

    If, when you ordered the router, you also took out a subscription to a mobile GPRS service through Sarian Systems, the SIM card required to activate the service will already be installed in your unit. In this case the installation procedure described below will not apply.
  • Page 12 2000 Series Reference guide Place the unit the correct way up and carefully lift the lid free noting that it will only fit correctly one way round. Locate the SIM-card holder. Your unit may contain one of two alternative GPRS modules (Motorola G.18 or Siemens MC45).
  • Page 13 2000 Series Reference Guide note: The signal strength is shown in “negative dB”, which means that the stronger the signal, the lower the number. As a guide -30dB would be a very strong signal, only normally obtained very close to a cell site.

  • Page 14: Using The Web Interface

    2000 Series Reference guide Using The Web Interface To access the built-in web pages using a web browser (e.g. Internet Explorer), you will need to install the sarian2k.inf driver file and create a PPP Dial-up Networking connection (DUN) for the unit as described below.
  • Page 15 2000 Series Reference Guide Check the Don’t detect my modem, I will select it from a list option before clicking Next > to display the following dialog screen: This screen lists the manufacturers and models of modem currently available on your system.

  • Page 16: Creating A New Connection

    2000 Series Reference guide Click Next > and you will be asked to select which COM port the unit is to be connected to. Select an appropriate port, click Next > and Windows will install the driver. Once installation is complete click Finish to return to the Phone and Modem Options dialog: Click on the OK button if you are satisfied with the installation.
  • Page 17 2000 Series Reference Guide Select the Connect to the network at my workplace radio-button then click on Next >: Select the Dial-up connection radio-button then click on Next >: From the Select a Device dialog, select the Sarian device you have just installed and make sure that any other devices in the list are unchecked.

  • Page 18: Configuring A New Connection

    2000 Series Reference guide The next dialog allows you to fill in the phone number for the connection. If the connection is being created for direct local access using a COM port, you should set the phone number to 123. This number will be intercepted by the unit and recognised as an attempt to connect locally.
  • Page 19 2000 Series Reference Guide Click on the Properties button to display the properties dialog for the connection: On the General tab, click Configure to display the Modem Configuration dialog: Make sure that the Maximum speed (bps) is set to 115200 and that the Enable hardware flow control box is checked.

  • Page 20: Initiating A Connection

    2000 Series Reference guide Make sure that the Type of dial-up server I am calling is set to PPP: Windows 95/98/NT/2000, Internet and click on Settings: Make sure that all three options are unchecked before clicking OK to return to the Networking tab.
  • Page 21 2000 Series Reference Guide note: When you type the password it will appear as a series of dots to ensure privacy. Once you have entered these, initiate a connection to your unit by clicking the Dial button. During the dialling and connection process, you may see a series of status dialogs and, if the connection is successful, the final dialog will indicate that the PPP login has been authenticated: After a short delay, this dialog will minimise to a “linked computers icon in the Windows taskbar:...

  • Page 22: The Command Line Interface

    Sarian Systems application commands Application commands are specific to Sarian Systems products and are used to control most features of the unit when not using the Web interface. X.3 commands These are standard X.3 commands which are used only in X.25 PAD mode...

  • Page 23: The Escape Sequence

    2000 Series Reference Guide The at command prefix and the commands that follow it can be entered in upper or lower case. After the prefix, you may enter one or more commands on the same line of up to 40 characters.

  • Page 24: Application Commands

    2000 Series Reference guide Application Commands The unit also supports numerous text-based “application” commands that are specific to Sarian Systems products and do not require the at prefix. Some of these are generic i.e. they are related to the general operation of the unit; others are application or protocol specific.

  • Page 25: Establishing A Remote Connection

    2000 Series Reference Guide physically connected but you may, if necessary, set the active port to another port of your choice using the at\port=n command where n is 0-3. Establishing A Remote Connection Once you have finished configuring the unit, there are several ways of establishing a link to a remote system: ♦...

  • Page 26: Configuring Your Unit

    2000 Series Reference guide Configuring Your Unit This section describes the various configuration parameters for the unit and how to set or change them using the built-in web pages or the text commands. Generally, configuration using the Web pages is achieved by entering the required values into text boxes or tables on the page, or by turning features on or off using checkboxes.

  • Page 27: The Configuration

    2000 Series Reference Guide In the main frame there is a representation of the front panel of your unit that will be updated every few seconds to show the actual status of the LED indicators. The model number of your unit will be shown at the top of the screen.

  • Page 28: Adapt

    2000 Series Reference guide Configure ADAPT The unit incorporates two Adapt (rate adaptation protocol) instances. Each instance allows you to select and configure a protocol that is to be used for providing rate adaptation over ISDN B channel. The supported protocols are V.110, V.120 and X.75. Depending on which protocol is selected, there may be an associated LAPB instance (distinct from the two general purpose LAPB instances).
  • Page 29 2000 Series Reference Guide by some ISDN terminal adapters. V110 user rate: The V110 user rate parameter allows you to specify the data rate to be used on ISDN when operating in V.110 mode. V110 fixed rate: Setting this parameter to Yes prevents the V.110 protocol from changing the data rate.

  • Page 30: Configure Analyser

    2000 Series Reference guide 9=2400, 10=1200, 11=600 V Mode: 0=V120 mode, 1=V110 mode, vmode 0,1,2,3,4 2=V110/V120 detect, 3=X75 Transparent, 4=X75 T.70 NL To change the values of the LAPB parameters for rate adaptation, use the lapb command. LAPB2 is used for adapt 0 and LAPB3 is used for adapt 1.
  • Page 31 2000 Series Reference Guide Analyser: To turn the analyser on, select the On option from the selection box labelled Analyser at the top of the page. Selecting Off will turn the analyser off again. Protocol layers: The check boxes shown under this heading are used to specify which protocol layers are included in the trace.
  • Page 32 2000 Series Reference guide IP sources: The group of checkboxes shown under this heading may be used to select the IP sources to be included in the trace. These sources include the PPP and ETH instances. IP filters: This text box is used to prevent the tracing of packets to or from specific TCP or UDP ports.
  • Page 33 2000 Series Reference Guide IP or PPP sources: Value PPP 4 PPP 3 PPP 2 PPP 1 PPP 0 Page 31...
  • Page 34 2000 Series Reference guide To include ETH as an IP source add 128 to the values from the above table. For example, to turn on tracing for ETH0 and PPP0 only, enter the command: ipon 129 LAPB sources: Value LAPB 1...

  • Page 35: Configure Asy Ports

    2000 Series Reference Guide Configure ASY Ports Each ASY port can be independently configured for interface speed, parity setting, character echo etc. These parameters can be set via the appropriate Configure ASY Port web page or from the command line using AT commands and S registers.
  • Page 36 2000 Series Reference guide set to trigger on loss of DTR. Increasing or decreasing this value makes the unit less or more sensitive to “bouncing” of the DTR signal respectively. Echo: This parameter can be used to turn character echo On or Off when using the text command interface.

  • Page 37: Configure Backup Ip Addresses

    2000 Series Reference Guide Using text commands: ASY ports are configured from the command line using AT commands and S- registers: Cmd/S-reg. Description Echo Verbose mode Load profile &C DCD control &D DTR response &K Flow control &W Store profile &Y...

  • Page 38: Configure Calling Numbers

    2000 Series Reference guide For example, in the following table, address 10.1.2.17 is used as the first backup address for 10.1.2.16. If the unit fails to open a connection to 10.1.2.16 it will then try to open 10.1.2.17. If this also fails the unit will then try 133.16.16.2.

  • Page 39: Configure Command Mappings

    2000 Series Reference Guide For example: rejlst 0 NUM 1234567 rejlst 0 ANS OFF rejlst 0 CODE 42 Configure Command Mappings It is possible to specify a small number of command “aliases” on your unit. This allows you to specify substitute strings for text commands entered at the command line.
  • Page 40 2000 Series Reference guide Using the web-page: The Configure DHCP Server page allows you to set up the parameters for the DHCP server. The parameters are as follows. Minimum assigned IP address: This parameter specifies the lowest IP address that the DHCP server will assign to a client.

  • Page 41: Configure Dns Update

    Configure DNS Update Sarian 2000 series routers support “Dynamic DNS” in accordance with RFC2136 and RFC2485. This allows them to update specified DNS servers with their IP addresses when they first connect to the Internet and at regular intervals thereafter. The Configure DNS Update page allows you to configure the dynamic DNS Update feature to operate as required.
  • Page 42 2000 Series Reference guide password is issued to you as a hexadecimal string instead of text, you must prefix the parameter with 0x. Interface: This parameter defines which interface type is configured for Internet connections (usually PPP). Interface #: This parameter defines which Interface instance is configured for Internet connections.

  • Page 43: Configure Ethernet

    2000 Series Reference Guide upd_int number Update interval (s) username text Username zone text Zone to update For example, to set the username to “david24” you would enter the command: dnsupd 0 username david24 4.11 Configure Ethernet The Configure Ethernet folder opens to list configuration pages for each of the available ETH ports on the unit.
  • Page 44 2000 Series Reference guide Gateway: This parameter specifies the IP address of a gateway to be used by the unit. IP packets whose destination IP addresses are not on the LAN to which the unit is connected will be forwarded to this gateway.
  • Page 45 ETH interface will be designated as being out of service after the above parameter has been effected. note: The 2000 series routers currently only transmit RIP packets; they do not act upon any received RIP packets. Using text commands: From the command line, use the eth command to configure or display the Ethernet interface settings.

  • Page 46: Configure Event Handler

    2000 Series Reference guide pingint number PING request interval (s) pingip IP address PING IP address pingoos number No PING response out of service delay (s) RIP version ripip IP address RIP destination IP speed auto, 10, 100 Speed For example, to set the unit’s IP Address to 1.2.3.4, enter: eth 0 ipaddr 1.2.3.4...
  • Page 47 2000 Series Reference Guide Email To: This parameter is used to specify the email address for the recipient of email messages generated by the event logger. Email From: This parameter is used to specify the email address for the unit. You will need to set up an email account with your Internet Service Provider.
  • Page 48 Scripts”. If you intend to implement a firewall you should refer to that section first. On the 2000 series, the rules governing the operation of the firewall are contained in a pseudo-file called fw.txt. This file can be created either by using the controls on the Configure...
  • Page 49 2000 Series Reference Guide Using the web page: If you have not yet created a file called fw.txt on the unit, the Configure Firewall page will initially contain a blank script with a button labelled Insert to the right. If you have created the file it will be displayed in the top section of the screen with line numbers at the left and a series of buttons at the right that allow you to delete, edit or insert lines.

  • Page 50: Configure Firewall Timers

    2000 Series Reference guide 4.14 Configure Firewall Timers This page contains the timer parameters that are used by the Firewall stateful inspection module. This module establishes temporary firewall rules that last for the duration of a single connection only. Typically, the first packet of a TCP connection (a SYN packet), is used to create a stateful inspection rule that only allows subsequent packets for that TCP connection through the firewall.

  • Page 51: Configure Ftp Relay Agents

    2000 Series Reference Guide where <instance> is 0. At present there is only one firewall instance i.e. 0, but the instance parameter has been included to allow for future expansion. To change the value of a parameter use the command in the format: fwall 0 <parameter>...
  • Page 52 2000 Series Reference guide Remote directory: This is the full name of the directory on the FTP host to which the file is to be saved. Client timeout (s): This parameter is specifies the length of time in seconds that the unit will maintain a connection to an FTP host after transferring a file.

  • Page 53: Configure General

    2000 Series Reference Guide frelay <instance> ? where <instance> is the instance number of the agent .To change the value of a parameter use the command in the format: frelay 0 <parameter> <value> The parameters and values are: Parameter Values...
  • Page 54 2000 Series Reference guide another ASY port then the command line interface must be used. For example, to issue a command to ASY port 3 you would use: cmd 3 autocmd <command> where <command> is the command to be issued to ASY 3 on power-up.
  • Page 55 2000 Series Reference Guide ASY <port> name: These parameters allow a name to be associated with each of the physical and logical ASY ports. Once you have allocated a name it will appear in the heading of the Config port page for that port. It will also be displayed when using the at\port= command.
  • Page 56 2000 Series Reference guide SNMP trap destination address: This is the IP address (or host name) of the destination for SNMP trap messages. GP sockets use IP from interface: This parameter allows general-purpose TCP sockets to use a source IP address other than that of the interface on which the socket connection is created.
  • Page 57 2000 Series Reference Guide unit will automatically bring the route back up. This parameter is used to set the delay in seconds between the service becoming available again and the unit starting to use it. User task filename: This specifies the name of a file containing a “user task” file. A user task is a software module that may be loaded into the unit to provide support for a new protocol or application.

  • Page 58: Configure Gprs Module

    2000 Series Reference guide number RIP interval (s) route_dly number Alternative route delay (s) route_dwn number IP Route out of service time (s) routeup_dly number ‘Always-on’ route return-to-service delay (s) sec_hostname text Secondary hostname sec_ip text Secondary IP address sock_connto...
  • Page 59 2000 Series Reference Guide Retry APN time (mins): If the Use backup APN parameter is enabled, this parameter is used to define how long the unit will use the backup APN before attempting to revert to the primary APN. PIN: Some SIM cards are locked with a Personal Identification Number (PIN) code to prevent misuse if they are lost or stolen.
  • Page 60 2000 Series Reference guide SMS command separator: This parameter specifies the character to be used to separate multiple command lines when a remote SMS sender is controlling the unit. The default separator is <CR><LF> but some SMS capable devices are not equipped with <CR> and <LF> keys so an additional means of separating multiple lines is required.

  • Page 61: Configure Isdn Lapb

    2000 Series Reference Guide For example, to set the first initialisation string, enter: modemcc 0 init_str +cgdcont=1,"ip","isp.vodafone.ie",,0,0 note: If your initialisation strings contains blanks, then you must enclose the entire string with double quotation marks. 4.17.1 Additional configuration for GPRS If you are intending to use your GPRS router to connect a local PC or laptop to remote services via GPRS, you will need to ensure that both the PC and the router share a common TCP/IP subnet.
  • Page 62 2000 Series Reference guide the ISND BRI physical interface. By selecting PORT, LABP data can be routed to either ASY 0 or ASY 1 (operating in synchronous mode), as selected by the Sync Port parameter below. To configure ASY 0 or ASY 1 for synchronous operation see Configure Sync Ports.
  • Page 63 2000 Series Reference Guide N400 counter: This is the standard LAPB/LAPD re-try counter. The default value is 3 and it should not normally be necessary to change this. Window size: This parameter is used to set the X.25 window size. The value range is from 1 to 7 with the default being 7.

  • Page 64: Configure Isdn Lapd

    2000 Series Reference guide tinact number Inactivity timer (s) tnoact number Activity timer (ms) window Window size For example, to enable answering on LAPB 0 you would enter the command: lapb 0 ans on 4.19 Configure ISDN LAPD Link Access Protocol D (LAPD) is the protocol used for ISDN D-channel signalling and call set up.
  • Page 65 2000 Series Reference Guide T1 timer (ms): This is the standard LAPB/LAPD timer. The default value is 1000 milliseconds (1 second) and it should not normally be necessary to change this. T200 timer (ms): This is the standard LAPB/LAPD re-transmit timer in milliseconds. The default value is 1000 milliseconds (1 second) and it should not normally be necessary to change this.

  • Page 66: Ip Routes

    2000 Series Reference guide First D64 B-channel: When using D64S mode there is no dialling protocol to negotiate which B-channel to use. This must therefore be specified using this parameter. To use B1 set the parameter to 1, or select 2 to use B2 (if another channel is requested from an application then it will use the other unused B-channel).
  • Page 67 2000 Series Reference Guide Using the web pages: 4.20.1 IP Route parameters IP address / Mask: These parameters are used in conjunction with each other to specify the destination subnet, network or IP address for packets that will match this route i.e. if the unit receives a packet...
  • Page 68 2000 Series Reference guide 4.20.2 Default Route Parameters Source address / Source mask: Default routes are used to route all packets that do not match one of the defined static routes. If these parameters are specified, the source address of the packet being routed must match these parameters before the packet will be routed through the specified default interface.

  • Page 69: Ipsec

    IPSEC refers to a group of protocols and standards that may be used to protect data during transmission over the Internet (which is not inherently secure). Various levels of support for IPSEC can be provided on 2000 series products depending upon which model you have purchased. The web pages located under the heading Configure IPSEC are used to set the various parameters and options that are available.
  • Page 70 2000 Series Reference guide Using the Web pages: The Configure IKE page lists the various IKE parameters: Encryption algorithm: This parameter selects the encryption algorithm to be used for IKE exchanges over the IP connection. You can select DES, 3DES or leave the option blank (in which case key exchanges will not be encrypted).
  • Page 71 2000 Series Reference Guide With No PFS (Perfect Forwarding Security) selected, the data transferred during phase 1 can be re-used to generate the keys for the phase 2 SA’s (hence speeding up connections). However, in doing this it is possible (though very unlikely), that if the phase 1 keys were compromised (i.e.

  • Page 72: Ipsec Eroutes

    2000 Series Reference guide To display current settings for IKE instance enter the command: ike <instance> ? where <instance> is 0. To change the value of a parameter use the command in the format: ike <instance> <parameter> <value> where <instance> is 0.
  • Page 73 2000 Series Reference Guide The parameters listed on each Eroute page are as follows: Peer IP/hostname: This is the IP address of the remote unit to which you wish to connect. Peer ID: In normal mode (i.e. when Aggressive mode is Off) this must be the IP address of the peer.
  • Page 74 2000 Series Reference guide ESP authentication algorithm: This parameter selects the algorithm used to verify that packet contents have not been changed. You may select None, MD5 or SHA-1. ESP encryption algorithm: This parameter specifies the cryptographic algorithm to be used when securing the packet payload.
  • Page 75 Certificates” for more information). To configure users and their passwords or pre-shared secrets on the 2000 Series, you must populate the User table with details of the remote system’s ID (IP address in Normal mode and ID string when Aggressive mode is On), and the password to use (see Configure Users).

  • Page 76: Ipsec Default Eroute

    2000 Series Reference guide ike <eroute> <parameter> <value> where <eroute> is the number of the Eroute. The parameters and values are: Parameter Values Equivalent web parameter ahauth none, md5, sha1 AH authentication algorithm authmeth preshared, rsa Authentication method autosa yes, no Create SA’s automatically...

  • Page 77: Nui Mappings

    2000 Series Reference Guide No outbound SA action: This parameter determines how the router will respond if a packet is transmitted when there is no SA. If Drop Packet is selected then only packets that match a specified Eroute will be routed, all other data will be discarded.
  • Page 78 2000 Series Reference guide <NUA> is the X.25 NUA value <NUI> is the X.25 NUI value. For example: nuimap 0 NUI my_host01 nuimap 0 NUA 23421234567890 4.25 Configure PPP is a standard protocol for transporting data from IP networks across point-to-point links and is essential for dial-up Internet access.
  • Page 79 2000 Series Reference Guide Short sequence numbers: MLPPP data packet sequence numbers are usually stored in 16 bits. This parameter may be set to On to select 12-bit sequence numbers if necessary. Username: This is the user name for logging on to the remote system when multi-link PPP is used.
  • Page 80 2000 Series Reference guide Using text commands: From the command line use the mlppp command to set or display MLPPP parameter settings. To display current settings for MLPPP enter the following command: mlppp <instance> ? where <instance> is currently always 0.
  • Page 81 DSCP value, the router will assign the packet to a priority queue. There are currently four such queues for each PPP instance within Sarian 2000 series routers and each queue can be configured to behave in a particular way so that packets in that queue are prioritised for routing according to predefined rules.
  • Page 82 2000 Series Reference guide Basic operation. In Sarian 2000 series routers the classification of incoming IP packets for the purposes of QOS takes place within the firewall. The firewall allows the system administrator to assign a DSCP value to a packet with any combination of source/destination IP address/port and protocol. Details on how this is done are given below in the chapter on Firewall scripts.
  • Page 83 2000 Series Reference Guide Using the web page: Each of the Queue Profile pages lists the following parameters: Minimum Kbps: This parameter is used to set the minimum data transfer rate in kilobits/sec that the unit will try to attain for this queue.
  • Page 84 2000 Series Reference guide weighting factor), it may result in dropped packets if the transmit rate rises quickly, but will also recover quickly after the transmit rate dies off. If a weighted queue length moves too slowly (large weighting factor), it will allow a burst of traffic through without dropping packets, but may result in dropped packets for some time after the actual transmit rate drops off.
  • Page 85 2000 Series Reference Guide Queue priorities Below this heading is a list of the queues from 0 to 9 alongside each of which are drop down selection lists for assigning profile numbers (from 0 to 11) and queue priorities. The priority may be set to Very High, High, Medium, Low or Very Low.
  • Page 86 2000 Series Reference guide parameter changes from an existing ppp instance are required. (This saves on memory usage in the unit.) If the normal route for a particular sub-net is down, the alternate route (with a higher metric) may specify that the same ppp instance is used but with a different sub configuration. The sub configuration may contain an alternative phone number for example.
  • Page 87 2000 Series Reference Guide This parameter provides the filter for the ISDN Multiple Subscriber Numbering facility. It is blank by default but when set to an appropriate value with PPP Answering On it will cause the unit to answer incoming calls to only telephone numbers where the trailing digits match the value selected.
  • Page 88 2000 Series Reference guide Always on mode: This parameter is used to configure the PPP instance so that in the event that it is disconnected the unit will try to re-connect again after approximately 10 seconds. It should be set to On when using AODI or when using GPRS.
  • Page 89 2000 Series Reference Guide RIP destination IP: RIP packets are normally sent out on a broadcast basis or to a multi-cast address. This parameter may be used to force RIP packets to be sent to a specified IP address. It is particularly useful if you need to route the packets via a VPN tunnel.
  • Page 90 2000 Series Reference guide Using text commands: From the command line, use the PPP command to set or display PPP parameter settings. To display current settings for a PPP instance enter the following command: ppp <instance> ? To set the value for a parameter enter the command in the format: ppp <instance>...
  • Page 91 2000 Series Reference Guide Parameter Default value Desired Local ACCM 0x00000000 Desired Local MRU 1500 Desired Remote ACCM 0xFFFFFFFF Desired Remote MRU 1500 Request Local ACFC Request Local Compression Request Local PFC Request Remote ACFC Request Remote Compression Request Remote PFC...
  • Page 92 2000 Series Reference guide Request remote ACFC: Setting this parameter to On causes the unit to get the remote to request Address Control Field Compression. When negotiated, the address/control fields are removed from the start of the PPP header. Request IPCP remote address option: Set this parameter if it is required that the remote system have an address supplied.
  • Page 93 2000 Series Reference Guide Heartbeat interval (s): If this parameter is set to a non-zero value, the unit will transmit “heartbeat” packets at the interval specified. Heartbeat packets are UDP packets that contain status information about the unit that may be used for diagnostic purposes.
  • Page 94 PPP n PPP/IP over X.25 The Sarian 2000 series can optionally support transmission of TCP/IP packets encapsulated in X.25. This feature allows the ISDN D-channel to be used as an “always on” connection providing a permanent, low speed Internet Protocol pipe between two Local Area Networks.
  • Page 95 2000 Series Reference Guide LCN direction: This parameter determines whether the LCN used for outgoing X.25 calls is incremented or decremented from the starting value when multiple X.25 instances share one layer 2 (LAPB or LAPD), connection. The default is Down and LCNs are decremented i.e. if the first CALL uses 1024, the next will use 1023 etc.

  • Page 96: Protocol Bindings

    4.26 Configure Protocol Bindings Sarian 2000 series products are soft configurable to allow different protocols to be used on different ports. The process of selecting which protocol will be used on which port is referred to as “binding”. Using the web page:...

  • Page 97: Sms Edit

    1 asy 2 4.27 Configure SMS Edit Sarian 2000 series models with GPRS capability such as the GR2130, are capable of sending SMS alarms and messages. The SMS related parameters on the Configure Event Handler and Configure GPRS module pages are used to configure the unit to send such alarms but the SMS Edit page allows you to edit and send an SMS message manually.
  • Page 98 2000 Series Reference guide Interface: The Interface field is used to specify the type of interface to use. Either PPP or Ethernet may be selected. Interface #: The Interface # field is used to specify which instance of PPP to use for SMTP (normally PPP1).

  • Page 99: Sntp

    2000 Series Reference Guide smtp 0 server smtp.myisp.net.uk 4.29 Configure SNTP The unit supports the Simple Network Time Protocol (SNTP). This protocol is used to synchronise the unit’s internal clock with the time and date information provided by a remote computer. The remote computer must be running an SNTP server in order to obtain this information.

  • Page 100: Static Nat Mappings

    2000 Series Reference guide 4.30 Configure Static NAT Mappings The unit supports Network Address Translation (NAT), which may be enabled on a particular interface such as a PPP instance. When operating with NAT enabled, this interface has a single externally visible IP address. When sending IP packets, the local IP addresses (for example on a local area network) are replaced by the single IP address of the interface.

  • Page 101: Sync Ports

    2000 Series Reference Guide 4.31 Configure SYNC Ports The DTE ports on your unit will usually be configured for asynchronous operation. This is the most common mode of serial communication. However, some applications will require synchronous serial communications using a protocol such as HDLC. This section describes the various parameters that may require setting up correctly for such an application.

  • Page 102: Time

    Configure Time Bands 2000 series routers support “time bands” which are used to determine periods of time during which routing is allowed or prevented. For example, an office router could be configured so routing is only allowed on weekdays. At present, time bands may only be applied to PPP instances.
  • Page 103 2000 Series Reference Guide Using the web page: There are four Time Band instances and each page contains a table that allows you to enter up to ten “transition” times. Days of the week are entered in the format “Mon”, “Tue”, “Wed”, “Thu”, “Fri”, “Sat” and “Sun”. To specify multiple days, separate them by a comma.

  • Page 104: Tpad

    2000 Series Reference guide H:MM HH:M HH:MM For example, to set up the router to allow PPP routing only on weekdays between 9:00am and 5:30pm you would enter the following commands: tband 0 days0 mf tband 0 time0 9 tband 0 state0 on...
  • Page 105 2000 Series Reference Guide NUI: This specifies the X.25 Network User Identifier to be used for outgoing X.25 calls if no NUI is specified in the call string. Call user data: This specifies a text string that will be placed in the Call User Data field of an outgoing X.25 call request packet.
  • Page 106 2000 Series Reference guide Delimiter char: This parameter specifies the character used to separate a main NUA from a backup NUA, and a main NUI from a backup NUI in an atd call string. The default value is the ASCII “!”...
  • Page 107 2000 Series Reference Guide IP length header: When making a TCP socket connection (i.e. the Layer 2 interface has been set to TCP), this parameter must be used to specify the TCP port number to use), this parameter may be used to specify the length of transaction data in a header packet.
  • Page 108 2000 Series Reference guide Include LRC: The LRC (Longitudinal Redundancy Check) is a form of error checking that may be required by some TPAD terminals. When the Include LRC option is set to YES the unit will check the LRC.
  • Page 109 2000 Series Reference Guide Transaction delay (ms): Setting this parameter will cause the unit to pause for the specified number of milliseconds in between successfully connecting to the remote X.25 host and transmitting the APACS 30 string. Data trigger: This parameter can be used to generate a “Data Trigger” event (code 47) when the reply from the X.25 host contains the string specified in this parameter.
  • Page 110 2000 Series Reference guide bnumber 0, 1 B-channel # cingnua text Calling NUA clear_dirtime number Clearing time (direct mode) (ms) constr text Connect string text Call user data defpak number Default packet size delimchar decimal ASCII Delimiter character delstx on, off...

  • Page 111: Users

    2000 Series Reference Guide 4.35 Configure Users The unit allows you to define up to 40 authorised users (numbered 0 to 39). Each user has a password and an access level that determines what facilities the user has access to.

  • Page 112: X.25 Macros

    2000 Series Reference guide This lists the user name, password, the encrypted form of the password and the user access level. To change the value of a parameter use the command in the format: user <number> <parameter> <value> where <number> is 0-9. The parameters and values are:...
  • Page 113 2000 Series Reference Guide To display the current values for a particular macro use the macro command in the following format: macro <n> ? Page 111...

  • Page 114: X.25 Pads

    2000 Series Reference guide 4.37 Configure X.25 PADS There are two main elements to the configuration procedure for accessing X.25 networks: General and service related parameters PAD parameters (X.3) Each PAD configuration page also includes a sub-page detailing the X.3 PAD parameters.
  • Page 115 LCN direction: This parameter determines whether the LCN used for outgoing X.25 calls is incremented or decremented from the starting value when multiple X.25 instances share one layer 2 (LAPB or LAPD), connection. The default is Down and LCNs are decremented i.e. if the first CALL uses 1024, the next will use 1023 etc.
  • Page 116 2000 Series Reference guide In Prompt Always On mode the ASY port attached to the PAD behaves as if it were permanently connected at layer 2 i.e. it always displays a PAD> prompt. AT commands may still be entered but the normal result codes are suppressed.

  • Page 117: X.25 Pads Parameters

    dorest on, off Restarts inacttim number Inactivity timer (s) l2iface lapb, lapd Layer 2 interface l2nb 0,1,2 Layer 2 interface number number lcnup on, off LCN direction nocalltim number No Layer 2 call timeout (s) nuaimode 0,1,2 NUA or NUI only mode padmode PAD mode profile...
  • Page 118 2000 Series Reference guide Echo off Echo on Data forwarding characters This parameter defines which characters cause data to be assembled into a packet and forwarded to the network. Option Description No data forwarding character Alphanumeric characters (A-Z, a-z, 0-9)
  • Page 119 Action on break (from DTE) This parameter determines the action taken by the PAD on receipt of a break signal from the DTE. Option Description No action Send an X.25 interrupt packet Send an X.25 reset packet to the remote system Send an X.29 indication of break Escape to PAD command state Set PAD parameter 8 to 1 to discard output...
  • Page 120 2000 Series Reference guide Option Description 19,200 bps 9,600 bps 2,400 bps 1,200 bps Flow control of PAD by DTE Determines the flow control setting of the PAD by the DTE in the on-line data state. Option Description No flow control XON/XOFF flow control RTS flow control (not a standard X.3 parameter)
  • Page 121 Line redisplay character Specifies the character that re-displays the current input field when in editing mode (ASCII 0-127). The factory default is CTRL-R (ASCII 18). Editing PAD service signals Specifies the type of service signal sent to the DTE when editing input fields. Option Description No editing PAD service signals...

  • Page 122: X.25 Switch

    2000 Series Reference guide Using text commands: The X.3 PAD parameters can be edited from the command line using the SET command described under the X.28 Commands section. Loading and Saving PAD profiles. To create your own profiles, edit the appropriate parameters and then select user profile 1, 2, 3 or 4 as required from the list and click the Save Profile button.
  • Page 123 Backup from XOT to: This parameter may be used to specify a backup interface in the case where an X.25 call originating from XOT cannot be switched to the interface chosen under the Switch from XOT to parameter (above). LAPD, LAPB 0, LAPB 1 or none may be chosen. If none is chosen, then no backup call will be attempted.
  • Page 124 2000 Series Reference guide D-channel LCN: This is the value of the first LCN that will be assigned for outgoing X25 calls on LAPD. D-channel LCN direction: This parameter determines whether the LCN used for outgoing X.25 calls on LAPD is incremented or decremented from the starting value.
  • Page 125 match the XOT source address (i.e. the address of the PPP interface associated with to the GPRS network). By setting this parameter to Ethernet the unit will use the IP address of the Ethernet port instead of that of the PPP interface so that you need only set up on Eroute. XOT source IP address interface #: This is the number of the interface selected by the XOT source IP address interface parameter.
  • Page 126 2000 Series Reference guide 7 (128), 8 (256), 9 lapdppar LAPD default packet size (512), 10 (1024) lapdwpar LAPD default window size srcipadd Auto, Eth XOT remote IP address interface srcipent 0, 1 XOT remote IP address interface # swfrlapb0...
  • Page 127 4.39.2 X.25 Switch NUA to XOT IP address Using the Web page: This page displays a table with two columns in which you may specify up to 10 XOT NUA’s and the IP addresses to which they should be switched. Text commands: To configure the NUA to XOT IP address mappings via the command line use the nuaip command.
  • Page 128 2000 Series Reference guide For each ASY port, the profile to be loaded at reboot or power-up is specified in the Power-up Profile setting on the relevant Configure ASY port web page (or by using at&y command). A profile for a particular ASY port may also be loaded to take immediate effect by using the Load Profile button on the ASY port’s web page, or by using the atz text command.

  • Page 129: Adapt

    Statistics Pages Your 2000 series product maintains a wide range of statistics relating to each of the different protocol instances that may be used. These statistics are collected and maintained in non-volatile memory and may be displayed via the Statistics web pages.

  • Page 130: Dns Update

    2000 Series Reference guide Tx Underruns The number of transmit underrun errors Statistics DNS Update Abbreviation Description Bad Key Number of replies indicating that the Username is unknown or incorrect for the specified zone. Bad Signatures Number of replies indicating that the signature supplied in the update message was invalid (may indicate that the password field is incorrect).

  • Page 131: Ipsec Dynamic Eroutes

    No Route The number of packets received for which no route to the destination could be found. Filtered Packets The number of routed packets that have been filtered out. Tx Multicast The number of multicast packets transmitted. Rx Multicast The number of multicast packets received. Statistics IPSec Dynamic Eroutes...

  • Page 132: Sync Channels

    2000 Series Reference guide Index). For all but IPComp SAs this value will be a random number between 0x100 and 0xFFFFFFFF. IPComp SAs use an SPI that indicates the algorithm being used. The remote IP address to which the SA applies.

  • Page 133: Tpad

    Rx Giants Received frames exceeding maximum frame length Rx Runts Received frames shorter than the minimum frame length Rx CRC Errors Received Cyclic Redundancy Check errors Rx Overruns Receive FIFO overflows Rx Aborts Received abort sequences detected Buf Short Frames discarded due to lack of system buffer space Msg Short Frames discarded due to lack of system message buffers Tx Frames...

  • Page 134: X.25 Pad

    2000 Series Reference guide Abbreviation Description Rx Giants Received frames exceeding maximum frame length Rx Runts Received frames shorter than minimum frame length Rx Frames Received HDLC frames Rx Bytes Successfully received data bytes Rx Crcerr Received Cyclic Redundancy Check errors...
  • Page 135 Layer 1 D Sync Stats Abbreviation Description Rx Giants Received frames exceeding maximum frame length Rx Runts Received frames shorter than minimum frame length Rx Frames Received HDLC frames Rx Bytes Successfully received data bytes Rx Crcerr Received Cyclic Redundancy Check errors Rx Overrun Receive FIFO overflows Rx Abort...

  • Page 136: Analyser Trace

    2000 Series Reference guide Status Pages The next sub-heading on the directory tree is Status. Clicking on the “+” symbol at the left of the Status folder expands the sub-tree to list a number of pages which contain various status...

  • Page 137: Event Log

    Entry: IP [10.1.2.17], hostname [Robin], expiry 49 (mins) Entry: IP [10.1.2.14], hostname [Alistair], expiry 59 (mins) Status Event Log The Status Event Log page allows you to display the contents of the eventlog.txt pseudo-file with the most recent events listed at the top of the log. Each event log entry consists of the time and date of the event followed by a brief description.

  • Page 138: Igmp Groups

    2000 Series Reference guide GPRS Attachment Status: This field displays the current status of the module with respect to the GPRS service. It may be one of the following: Not attached – the unit has not connected to a GRPS service.

  • Page 139: Status Web Server

    6.10 Status Web Server The Status Web Server page displays memory usage statistics for the built-in Web server. 6.11 Status X.25 Sessions The Status X.25 Sessions page lists the available pool of X.25 sessions (8 in total). For each session it lists the current state (FREE or ENGAGED) and for each busy session it also shows the User, Link, Mode and NUA.

  • Page 140: The Filing System

    2000 Series Reference guide The Filing System The unit has its own FLASH memory filing system that uses DOS-like filenames of up to 12 characters long (8 characters followed by the “.” separator and a 3-character extension). The filing system is used to store the system software, Web pages, configuration information and statistics in a single root directory.
  • Page 141 7.2.3 List file directory The dir command is used to display the file directory. For example: direct 3360 ro 07:25:07, 03 Jan 2000 sbios 65536 ro 07:25:07, 03 Jan 2000 image 257508 rw 09:53:46, 20 Jan 2000 sregs.dat 400 rw 09:56:05, 20 Jan 2000 config.da0 76 rw...
  • Page 142 2000 Series Reference guide type <filename> For example: type config.da0 bind PAD 0 ASY 0 pad 0 l2iface LAPB cmd 0 username sarian cmd 0 epassword Oz57X0kd cmd 0 hostname ss.2000r 7.2.8 XMODEM File transfer The xmodem command is used to initiate an XMODEM file upload from the port at which the command is entered.

  • Page 143: Using V.120

    Using V.120 V.120 is a protocol designed to provide high-speed point-to-point communication over ISDN. It provides rate adaptation and can optionally provide error control. Both the calling and called units must be configured to use V.120 before data can be transferred. Similarly, if one unit is configured to use the error control facility, the other must be configured in the same way.
  • Page 144 2000 Series Reference guide Finally, you must ensure that there are no conflicts with other protocols configured to answer on other ASY ports. This can be done by disabling answering for the other ports/protocols or by using the MSN and/or Sub-address parameters to selectively answer calls to different telephone numbers using different protocols.

  • Page 145: X.25 Packet Switching

    X.25 Packet switching Introduction. X.25 is a data communications protocol that is used throughout the world for wide area networking across Packet Switched Data Networks (PSDNs). The X.25 standard defines the way in which terminal equipment establishes, maintains and clears “switched virtual circuits” (SVC’s), across X.25 networks to other devices operating in packet mode on these networks.
  • Page 146 2000 Series Reference guide CALL Make an X.25 call Clear an X.25 call ICLR Invitation to CLR Send Interrupt packet Logoff and disconnect PAR? List local X.3 parameters PROF Load or save PAD profile RESET Send reset packet RPAR? List remote X.3 parameters RSET Set remote X.3 parameters...
  • Page 147 would cause an X.25 CALL packet to be sent using the Fast select facility including the message “This DATA sent with call packet” (the Carriage Return used to enter the command is not transmitted). Without the inclusion of the Fast select facility code, only the first 12 characters would be sent.
  • Page 148 2000 Series Reference guide Calling user data The calling user data field for a normal call may contain up to 12 bytes of user data. If the first character is an exclamation mark (!), the PAD omits the four byte protocol identifier and allows the full 16 bytes as user data.
  • Page 149 Channel type not implemented Requested facility not implemented Only restricted digital information bearer Service or option not implemented, unspecified Invalid call reference value Identified channel does not exist A suspended call exists, but this call identity does not Call identity in use No call suspended Call having the requested call identity has been cleared Incompatible destination...
  • Page 150 2000 Series Reference guide cannot be routed as requested reverse charging not allowed incompatible destination fast select not allowed ship cannot be contacted If an unknown reason code is received, the text field is blank. 9.2.3 ICLR Invitation To CLR The ICLR command “invites”...
  • Page 151 As with configuration profiles, stored X.25 PAD profiles are held in non-volatile memory and will not be lost when the unit is switched off. When used in the format: prof nn the PROF command loads the stored profile specified by nn. 9.2.8 RESET Send Reset Packet...

  • Page 152: Ppp Over Ethernet

    PPP over Ethernet (PPPoE) is a means of establishing a PPP connection over the top of an Ethernet connection. The implementation provided on the 2000 series is compliant with RFC 2516, A Method for Transmitting PPP Over Ethernet. A typical application would be to allow non-PPPoE enabled devices to access Internet services where the connection to the Internet is provided by an ADSL bridge device.

  • Page 153: Ipsec And Vpn's

    11 IPSec and VPN’s. 11.1 What is IPSec ? One inherent problem with the TCP protocol used to carry data over the vast majority of LAN’s and the Internet is that it provides virtually no security features. This lack of security, and recent publicity about “hackers”...
  • Page 154 128-bit encryption. note: Data rates are the maximum that could be achieved on the Sarian 2000 series platform and may be lower if other applications are running at the same time or small IP packet sizes are used. What is a VPN? VPNs (Virtual Private Networks) are networks that use the IPSec protocols to provide one or more secure routes or “tunnels”...
  • Page 155 “.PEM” certificate files to “.CER”, it is possible to view their makeup under Windows. The 2000 series maintains two lists of certificate files. The first is a list of “Certificate Authorities” or CA’s. Files in this list are used to validate public certificates sent by remote users. Public certificates must be signed by one of the certificates in the CA list before the unit can validate them.
  • Page 156 2000 Series Reference guide Our ID should be set to “info@sarian.co.uk”. This is the same as the subject Altname in certificate cert01.pem which makes it possible for the router to locate the correct certificate to send to the host. Authentication Method should be set to RSA Signatures. This indicates to IKE that RSA signatures (certificates) are to be used for authentication.

  • Page 157: Firewall Scripts

    12 FIREWALL SCRIPTS A “firewall” is a protection system designed to prevent access to your local area network by unauthorised “external” parties i.e. other users of the internet or other wide area network. It may also limit the degree of access local users have to external network resources. A firewall does not provide a complete security solution;...
  • Page 158 2000 Series Reference guide The various fields of a script rule are described below: [action] The [action] field may be specified as block, pass, pass-ifup or debug. These operate as follows: block: The block action prevents a packet from being allowed through the firewall. When block is specified an optional field can be included that will cause an ICMP packet to be returned to the interface from which that packet was received.
  • Page 159 This rule would cause the unit to return an ICMP Unreachable packet in response to all packets received on ppp 0. Instead of using the return-icmp option to return an ICMP packet, return-rst can be used to return a TCP reset packet instead. This would only be applicable for a TCP packet. For example: block return-rst in on eth 0 proto tcp from any to 10.1.2.0/24 This would return a TCP reset packet when the firewall receives a TCP packet on the...
  • Page 160 2000 Series Reference guide Example: Say your local network is on subnet 192.168.*.* and you want to block any packets received on ppp 0 that were “pretending” to be on the local network and log the receipt of any such packets to the fwlog.txt file and to a syslog server.
  • Page 161 The [proto] field is also important when “stateful” inspection is enabled for a rule (using the [inspect-state] field), as it describes the protocol to inspect (see [inspect-state] below). [ip-range] The [ip-range] field is used to describe the range of IP addresses and ports to match upon and may be specified in one of several ways.

  • Page 162: Filtering On Port Numbers

    2000 Series Reference guide ♦ items in square brackets are optional ♦ items in curly braces are optional and can be repeated ♦ the vertical bar symbol (“|”) means “or” An ip-object therefore consists of an IP address and an IP port specification, preceded by the keyword from or to to define whether it is the source or destination address.

  • Page 163: Filtering On Tcp Flags

    To simplify references to ports, some commonly used port numbers are associated with the pre- defined strings listed in the table below. For instance, in the example above we could substitute the number 23 with the string telnet. This would make the rule: pass break end from any to 10.1.2.63 port=telnet The other port keywords that are defined are: Keyword...

  • Page 164: Filtering On Icmp Codes

    2000 Series Reference guide response packets. Because this is an outbound Telnet service we can make use of the fact that all incoming packets will have their ACK bits set. Only the first packet establishing the connection will have the ACK bit off. The filter rules to do this would look like this: pass out break end from 10.1.2.33 port>1023 to any port=telnet...

  • Page 165: Stateful Inspection

    Example: Suppose we wish to allow only echo replies and ICMP unreachable type ICMP packets from interface PPP 0. Then the rules would look something like this: pass in break end on ppp 0 proto icmp from any to 10.1.2.0/24 icmp-type echorep code 0 pass in break end on ppp 0 proto icmp from any to 10.1.2.0/24 icmp-type unreach code 0...
  • Page 166 2000 Series Reference guide block in break end on ppp 0 The first rule matches only the first outgoing packet because it checks the status of the s (SYN) flag and will only pass the packet if the SYN flag is set. At first glance however, it appears that the second rule blocks all inbound packets on PPP 0.
  • Page 167 the SYN flag on and the ACK flag off and so we only match on that combination. The stateful inspection engine will take care of matching the rest of the packets for this connection. 12.5.2 Using [inspect-state] with ICMP. The [inspect-state] option can be also used with ICMP codes. To allow the use of echo request and to allow echo replies you would have just the one rule: pass out break end on ppp 0 proto icmp icmp-type echo inspect-state The advantage of using inspect-state, other than just needing one rule, is that it leads to a...

  • Page 168: The Fwlog.txt File

    2000 Series Reference guide The third rule is more complex. What it does is to configure the stateful inspection engine to watch for UDP packets (with any source address) being routed via the PPP 1 interface to any address that begins with 156.15 on port 1234. If a hit occurs on this rule but the unit does not detect a reply within 10 seconds (as specified by the t= parameter), it will increment an internal counter.
  • Page 169 Hits The number of matches for the rule that caused this packet to be logged. Iface The Interface the packet was to be transmitted/received on. Source IP The source IP address in the IP packet. Dest. IP The destination IP address in the IP packet. The value of the ID field in the IP packet.

  • Page 170: Debugging A Firewall

    2000 Series Reference guide 64 64 64 32 Dst IP: 100.100.100.50 ICMP: Type: ECHO REQ Code: 04 5C Checksum: 1116 ---------- Example: Text included in the eventlog.txt pseudo-file when the event sub-option is specified: 16:26:32, 15 Aug 2002,Firewall Log Event: Line: 10, Hits: 3...
  • Page 171 If placed at the top of the rule set, any packet received on interface PPP 2 to destination port 80 will generate a debug entry in the log file for each subsequent rule that it matches. In the example rule set above, a packet that matched the second rule would also match the first rule, and would therefore create two log entries.

  • Page 172: Remote Management

    2000 Series Reference guide 13 Remote Management Your 2000 series unit can be accessed and controlled remotely via the ISDN network by using: ♦ a V.120 connection to access the text command interface ♦ PPP to access the Web Interface ♦...

  • Page 173: Remote Management Using X.25

    13.3.1 FTP under Windows Once the connection has been established, enter the Web address for the unit. By default this will 1.2.3.4 ss.2000r If you are using a browser, as opposed to a specific FTP program, you will need to precede the address with “ftp://”.

  • Page 174: The Event Log

    14.1 What Is The Event Log? The 2000 series automatically maintain a log of certain types of event in a pseudo file called eventlog.txt. The contents of the log can be viewed via the Status Event Log web page or using by using the type command.

  • Page 175: The Logcodes.txt File

    FTP session closed X.25 CALL request Rx’d X.25 Called address X.25 connection made X.25 X.25 CALL cleared X.25 X.25 CLEAR request Rx’d X.25 X.25 incoming call Rx’d X.25 Calling address LAPB call request sent ISDN call control Called party number LAPD call request sent ISDN call control Called party number...
  • Page 176 2000 Series Reference guide For example, the [EVENT] block entry: 31,3,%e B%a ISDN call req #: %c would generate an entry in the eventlog.txt file that would appear similar to: LAPB B1 ISDN call req #: 01234567890 where the %e expands to “LAPB”, %a expands to “1” and the %c gives the called party telephone number.

  • Page 177: At Commands

    15 AT Commands 15.1 Dial The atd command causes the unit to initiate an ISDN call. The format of the command depends on the mode of operation. When using the unit to make data calls on one of the B-channels, enter the atd command followed by the telephone number.
  • Page 178 2000 Series Reference guide &c0 DCD is always On &c1 DCD is On only when an ISDN connection has been established &c2 DCD is normally On but goes Off for the length of time set by S10 after a disconnect.
  • Page 179 15.9 &Z Store phone number The at&z command is used to store “default” telephone numbers within the unit that may subsequently dialled when DTR dialling is enabled or by using the s= modifier in the atd dial command. One telephone number may be stored for each ASY port. For example to store the phone number 0800 123456 as the default number to be associated with ASY 2, use the command: at&z2=0800123456...
  • Page 180 2000 Series Reference guide ASY0 Here, ASY2 is the active port and ASY0 is the port at which the command was entered. If the default port and the port to which you are connected are the same, only one entry will be listed.

  • Page 181: S" Registers

    16 “S” Registers In addition to the at commands there are a number of Special (“S”) registers. These registers contain numeric values that may represent time intervals, ASCII characters or operational flags. To display the contents of a particular “S” register, the ats command is used in the form atsn? where n is the number of the register whose contents are to be shown.
  • Page 182 2000 Series Reference guide 16.3 Parity Units Default Range The value stored in s23 determines whether the parity used for the ASY port is set to None (0), Odd (1) or Even (2). 16.4 Data forwarding timer Units 10ms Default...
  • Page 183 then change the speed of your terminal to 38,400bps before entering any more AT commands. The data format used when the ats31=n command is entered is selected as the data format for all further commands. The auto-detect option is only available for ASY0 and ASY1. 16.6 DTR dialling Default...

  • Page 184: General System Commands

    2000 Series Reference guide 17 General System Commands The application commands described in this section are basic configuration commands that do not relate to specific types of application or network. 17.1 CONFIG Show/Save Configuration The config command is used for the following purposes to to show current or stored configuration settings, to save the current configuration or to specify which configuration is to be used when the unit is powered up or rebooted.

  • Page 185: Asy Port Connectors

    18 ASY port connectors Depending upon the model, the asynchronous serial ports on 2000 series routers may be presented as a 25-way D sockets, 9-way D sockets or 8-pin RJ45 sockets. On some models, a combination of the above may be used. The following table lists the pin...

  • Page 186: Logcodes.txt

    2000 Series Reference guide 19 Logcodes.txt The following is a listing of a typical logcodes.txt file. You can edit this file with a text editor to change the events that generate automatic e-mails. Once you have finished editing, save the changes and copy the file onto your unit using FTP.
  • Page 187 3,,Telnet 4,,v120 5,,IKE [EVENTS] 09,6,Time set/changed %c 14,2,%e %a Start %c 15,1,PPP %a async-sync 17,1,SMTP req by %e email %c 18,0,SMTP success 21,0,Telnet session closed 22,0,New logcodes.txt file 23,0,Config req by %e 24,0,Anonymous FTP by %c 25,0,FTP session closed 26,0,%e %a X25 Call req #: %c 27,0,%e %a Call req connect 29,0,%e %a Clearing X25 call 30,0,%e %a Inc X25 call #: %c...
  • Page 188 2000 Series Reference guide [EVENTS] 75,7,%e alarm, machine %s, %c [REASONS] 01,7, Failed 02,7,Error detected 03,7, Empty 04,7, Critical 05,7, Soap empty, FAIL 06,7, Errors during cycle, FAIL [EVENTS] 77,0,%e %a Connection Opened %c 78,0,%e %a Connection Closed 85,0,%e %a Orderly Shutdown...
  • Page 189 16,0,Event delay [REASONS] 01,,Logger busy [EVENTS] 19,2,SMTP reject %e [REASONS] 01,,SMTP busy 02,,NULL template 03,,Recd unexpected data 04,,No Destination Address [EVENTS] 20,2,SMTP err [REASONS] 01,,No connection 02,,Socket err 03,,Link err [EVENTS] 28,0,%e %a X25 call cleared [REASONS] 01,,Busy 09,,Out of order 17,,Rem proc err 19,,Local proc err 25,,Rev charg not acc...
  • Page 190 2000 Series Reference guide 90,,Dest incomplete [EVENTS] 54,0,SNTP Client [REASONS] 01,0,Time Set Request 02,1,Retries Exceeded [EVENTS] 76,0,%e %a Resetting Modem [REASONS] 01,,Requested by user 02,,No response to commands 03,,CTRL-E heartbeat stopped 04,,Modem enabled or disabled [EVENTS] 79,0,%e %a Open Failed...
  • Page 191 8,,Rx Nonce Failed 9,,Rx ID Failed 10,,Authorisation Failed 11,,No IKE Available 12,,Rx SA Failed [EVENTS] 92,,IKE Keys Negotiated 93,,IKE Request Received From IPSec 94,,IKE SA Deleted 95,,GPRS link failed -> power cycle [END] Page 189...

  • Page 192: Email Templates

    2000 Series Reference guide 20 Email Templates One of the principal features provided by the event log function is the ability to configure the unit to automatically generate and send an email each time an event of a specified priority, or higher, occurs.
  • Page 193 Body Section The body section may include any text. This text is parsed for any function calls that may be present. Function calls must be enclosed between “<%” and “%>”. These sequences are substituted by text resulting from the function call. The following functions may be used: Function Description TimeSmtp();...
  • Page 194 2000 Series Reference guide INDEX command mappings config command 125, 182 access level 52, 109, 173 power up Access Point Name See GPRS: APN saving changes active port 22, 176, 177, 179 config files activity timer power-up LAPB 27, 62...
  • Page 195 trigger priority HDLC 59, 99 Eroute High Level Data Link Control See HDLC text commands Eroutes escape IGMP character 21, 34, 179, 180 status delay escape sequence ESP protocol debug eth command text commands IKE protocol Ethernet inactivity timeout statistics Ethernet interface inactivity timer address...
  • Page 196 2000 Series Reference guide Logical Channel Number See LCN protocol bindings pseudo-file 28, 29, 44, 134, 135 pseudo-port MD5 protocol MLPPP 76, 86 parameters rate adaptation text commands text commands 26, 60, 84, 85, 142 rear panel Multi-link PPP See MLPPP...
  • Page 197 parameters 45, 57 terminal ID 103, 105 template text commands SMTP transaction delay text commands Transaction PAD See TPAD SNMP community string destination address enterprise name unit ID 25, 51, 170 enterprise number user name 18, 19, 24, 109, 110, 145 traps X.25 SNTP...
  • Page 198 2000 Series Reference guide default packet size statistics fast select status inactivity timeout STX/ETX framing layer 2 interface switch 92, 112 switch mappings load PAD profile text commands macros X.25 over TCP/IP See XOT Network User Identity X.28 104, 113 X.28 commands...

This manual is also suitable for:

Gr2410Im2040Ir2140Gr2130Ir2420

Table of Contents