FlowPoint CyberSWITCH CSX100 User Manual

Command line interface router software release 2.0.4
Table of Contents

Advertisement

Quick Links

User's Guide :
Command
Line
Interface

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the CyberSWITCH CSX100 and is the answer not in the manual?

Questions and answers

Summary of Contents for FlowPoint CyberSWITCH CSX100

  • Page 1 User’s Guide : Command Line Interface...
  • Page 2 Third Edition (August, 1997) Copyright FlowPoint provides this publication “as is” without warranty of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability or fitness for a particular purpose. All rights reserved. No part of this book may be reproduced in any form or by any means without written permission from FlowPoint.
  • Page 3: License Agreement

    FlowPoint software programs and related documentation in this package (collectively referred to as the “Software”) on one licensed router. If the FlowPoint product that you acquired is an upgrade, then the terms and conditions of this agreement apply equally to the upgraded product. Any attempted sublicense, assignment, rental, sale or other transfer of the Software or the rights or obligations of this Agreement without the prior written consent of FlowPoint shall be null and void.
  • Page 4: Software Limitations

    Limited Warranty on Media and Damages Disclaimer FlowPoint or its distributors or resellers will repair or replace free of charge any defective recording medium on which the Software is recorded if the medium is returned to FlowPoint or its distributor or reseller within ninety (90) days after the purchase of License for the Software.
  • Page 5: How This Book Is Organized

    How This Book is Organized This user’s guide is intended to help you configure and manage the FlowPoint Router using the Command Line Interface. The guide assumes that you have read the information about the FlowPoint Router, installed the hardware using the Getting Started Guide, and reviewed the planning section in that manual.
  • Page 6: Typographic Conventions

    Contains an overview of the FlowPoint 100 Router’s software and hardware features and details on hardware installation and software configuration using the Windows-based Configuration Manager. FlowPoint 200 Getting Started Guide, P/N 222-14000 Contains an overview of the FlowPoint 200 Router’s software and hardware features and details on hardware installation and software configuration using the Windows-based Configuration Manager.
  • Page 7: Table Of Contents

    Step 2. Set Target System Settings Step 3. Set Target System ISDN Settings Step 4. Set Target System Ethernet LAN Addressing Step 5. Add Remote Routers into Remote Router Database Step 6. Configure DialUp Link Information Step 7. Configure Bandwidth Management Step 8.
  • Page 8 System Level Commands Router Configuration Commands Target Router System Configuration Commands (SYSTEM) Target Router ISDN Configuration Settings (ISDN) Target Router Ethernet LAN Bridging and Routing (ETH) Target Router Analog Services (POTS) Remote Router Access Configuration (REMOTE) Dynamic Host Configuration Protocol (DHCP)
  • Page 11: Introduction

    Introduction Basic and advanced configuration of the FlowPoint Router 100 software, Release 2.0.4, can be performed using two methods: The Command Line Interface (described in this document) The Microsoft® Windows™-based Configuration Manager (featuring an easy-to-use, point-and- click GUI interface). However, this document concerns itself solely with the Command Line Interface method and covers...
  • Page 12: Chapter 1. Advanced Topics

    (depending on the router model). The data link protocol level defines the transmission of data packets between two systems over the LAN or WAN physical link. The FlowPoint Router supports 802.3 Media Access Control layer for CSMA/CD Ethernet and ISDN Q.921 LAPD for ISDN.
  • Page 13: Bridging

    ** IPX-RIP is a different protocol from IP-RIP and includes time delays Most of the router’s operation on each protocol level is transparent to you as a user. Some functions are influenced by configuration parameters and these are described in greater detail in the following sections.
  • Page 14: Bridging And Routing Operation

    Bridging and Routing Operation The FlowPoint Router can operate as a bridge, as a router, or as both (sometimes called a brouter). The router will operate as a router for network protocols that are supported. The router will operate as a bridge for protocols that are not supported for routing.
  • Page 15 IP/IPX Routing ON Bridging To/From Remote Router ON Data Packets Carried IP/IPX routed; all other packets bridged Operational Characteristics IP/IPX routing and allows other protocols, such as NetBEUI (that can’t be routed), to be bridged. Dial-Up Link Impact* All packets will initiate dial-up and link will be maintained except for IP-RIP routing packets, ARP packets, IP-RIP, SAP, Watchdog and Serialization packets, spanning tree and NetBEUI ‘keep alive’...
  • Page 16: Point-To-Point Protocol (Ppp)

    Bridge Control Protocol (BNCP) Security Protocols including PAP and CHAP. A more detailed description of the router’s implementation of some of these protocols follows. A list of PPP protocol conformance is included in the section Protocol Conformance. 6 FlowPoint’s User’s Guide: Command Line Interface...
  • Page 17: Pap/Chap Security Authentication

    PAP provides verification of passwords between routers using a 2-way handshake. One router (peer) sends the system name and password to the other router. Then the other router (known as the authenticator) checks the peer’s password against the configured remote router’s password and returns acknowledgment.
  • Page 18: Authentication Process

    This ‘remote authentication password’ is utilized by the router to authenticate the remote site. Each remote router entered in the remote router database also has a minimum security level, known as the ‘remote authentication protocol’, that must be negotiated before the remote router gains access to...
  • Page 19 For PAP, when a PAP login request is received from the remote end, the router checks the remote router PAP security using the remote router database. If the remote router is not in the remote router database or the remote router password is invalid, the call is disconnected. If the router and password are valid, the router acknowledges the PAP login request.
  • Page 20: Bandwidth-On-Demand

    This ensures an efficient management of link resources. Bandwidth management can be applied to incoming, outgoing or both directions of traffic between the router and the remote site. 2 This configuration setting is fixed at five seconds.
  • Page 21: Protocol Conformance

    Protocol Conformance Point-to-Point Protocol Standards The implementation of PPP in the FlowPoint Router conforms to RFCs designed to address performance, authentication, and multi-protocol encapsulation. The following RFCs are supported: RFC 1661 PPP Compression Control Protocol (CCP) Not yet an RFC, March 1994...
  • Page 22: System Files

    System Files The router’s file system is a DOS-compatible file system. The following list describes the contents of the file system: • SYSTEM.CNF Configuration files containing: DOD Remote Router Database System Settings: name, message, authentication method and passwords Ethernet LAN Configuration settings POTS POTS Configuration data •...
  • Page 23 Advanced Topics...
  • Page 25: Chapter 2. Planning For Router Configuration

    ‘deny’ filter based on the MAC address and position of the address within the packet. Deny filtering mode is then enabled to initiate bridge filtering. Every packet with one of the MAC addresses would not be bridged across the router until the deny filtering mode was disabled.
  • Page 26: Unique System Passwords

    CHAP or PAP authentication password for authentication of the local site by the remote site only when the router dials out to that remote site. A common use would be to set a password assigned to you by Internet Service Providers. Similarly, the system name of the local router...
  • Page 27: Callerid Security

    If preemption is designated for inbound calls and an inbound voice call comes in while two data channels are in use to different destinations, the router will also randomly select the line to preempt.
  • Page 28: Call Management

    You must obtain from your network administrator or the remote location, details on what the remote end needs for this feature. The router can send a phone number, a phone number in E164 format, or a name. When CallBack is configured, the remote router’s call delay timer setting must allow for disconnect and call back.
  • Page 29: Network Information Tables

    Remote Router chart for each remote router to be entered into the remote router database. If you are setting up both ends of the network, you will need a mirror image of the information listed below for configuring the router on the other end of the ISDN link.
  • Page 30 PAP|CHAP|NONE minimum protocol required for remote router Remote router’s password used for authentication of target router Password used by remote router for authentication of target router Phone numbers to validate on incoming calls Disconnect and dial the remote router back ON|OFF|ONLY...
  • Page 31 Transmit/receive RIP, default routes IPX Network Number, Hop Count and Ticks for stations/nodes beyond the remote router. Hop count is number of routers to pass through and ticks is time delay (in 1/18 sec) Information defining application services available on...
  • Page 32: Sample Configuration

    Internet through an Internet Service Provider (ISP), using a password specifically for the ISP. An analog telephone and a fax machine are attached to the router and voice calls have priority over data calls. Two distinct numbers are associated with the POTS interfaces.
  • Page 33 Default (Off) Default (Off) ISDN SPID1 0555100001 ISDN SPID2 0555300001 DN1 5551000 DN2 5553000 DMS-100 Not Used Defaults Default (Both) Default (Both) Default (On) 128.1.129.1 255.255.255.0 IP Routing On Defaults Internet Firewall On IPX Routing On None Planning for Router Configuration...
  • Page 34 Default Bridging Destination (*) or Remote MAC address(es) ena/disBridge Bridging On/Off setBrOptions Spanning Tree Protocol ** PPP addressing Numbered Mode only REMOTE ROUTER: ISP (Internet Service Provider) Command Item 24 FlowPoint’s User’s Guide: Command Line Interface Setting ISDN 5552000 5554000...
  • Page 35 Default (60 seconds) Default (1/0) Default (0%) Input and Output ISPpasswd (username) f1xypst None Default (Off) Default (Off) Default (Off) 0.0.0.0 255.255.255.255 1 Defaults Not required Not required Not required Not required Not required Not required Bridging OFF Planning for Router Configuration...
  • Page 36 Configuration Commands for SOHO Target Router login admin system admin newpass system name SOHO system msg configured_mar_1996 system passwd SOHOpasswd system list save sys isdn set switch dms100 isdn set spids 0555100001 0555300001 isdn set dn 5551000 5553000 isdn list...
  • Page 37: Chapter 3. Configuring Flowpoint Router Software

    Chapter 3. Configuring FlowPoint Router Software The Command Line Interface is available to you at all times after you have installed the router hardware, connected a PC with a terminal emulation session (or ASCII terminal), and powered the unit on. This section assumes that you have successfully followed the instructions in Chapter 1.
  • Page 38 NOTE 1: Each setting you specify results in a dynamic update of the router’s configuration, but some changes will not alter the active configuration until you save and reboot the router. If you change any of the following settings, you must reboot the router for the changes to take effect:...
  • Page 39: Basic Configuration

    (The system name is a ‘word’ when exchanged with PAP/CHAP. If you type anything after system name, the characters will be taken as the new name. If you wish to present a different name to each remote router, use the command:...
  • Page 40: Step 3. Set Target System Isdn Settings

    Set a System Message You may enter an optional message which is saved in the router. The message is useful for specifying, for example, the name of the person configuring this router and the last changes made. Enter the command: system msg msg where msg is a character string.
  • Page 41 You can decide whether to allow or lock out data calls. This feature is particularly useful if your router is configured to bridge and you want to ensure that no data calls are made or received by your POTS lines. Use the command: isdn set DataCallsAllowed <option>...
  • Page 42: Step 4. Set Target System Ethernet Lan Addressing

    Ethernet LAN addressing of the LAN at the branch office. If you intend to test the router at the host site first, enter the LAN address of the host site. If you change the addresses, you must perform a Save and Reboot as shown in later steps.
  • Page 43 External network number... 00000123 Frame type... 802.3 Eth list is a useful command to verify that the router’s LAN IP address and subnet mask are set correctly. Note that firewall filtering, sending and receiving RIP packets, advertising the default route and receiving the default route are set on.
  • Page 44: Step 5. Add Remote Routers Into Remote Router Database

    CONSOLE/0 9600 b 0%/0% 0%/0% (TTY) Initialize Ethernet IPX address If you intend for the router to perform IPX routing, you need to set the Ethernet IPX address. Enter the command: eth ipx addr network# where network# is the external Network Number for the LAN segment that the router is on. No checking is performed on the network number.
  • Page 45: Step 6. Configure Dialup Link Information

    Add a New Remote Router To add an entry for a remote router into the remote router database, enter the following command: remote add routerName Once you add a router entry, you can enter all additional data about the remote router.
  • Page 46: Step 7. Configure Bandwidth Management

    1 or 2. The default for an ISDN link is to have one B-channel available for use. maxLine# If you specify 2, the router can utilize up to two channels for data traffic on one connection. Set Minimum Links The default is to assign a B-channel only when data traffic occurs (minimum links = 0).
  • Page 47: Step 8. Set Up Security

    (provided the other end supports it.) The parameter in the remote router database is used for the local side of the authentication process. It is the minimum security level used by the target router when challenging or authenticating the remote router.
  • Page 48: Step 9. Set Up Tcp/Ip Routing

    For each remote router, you enter addresses for the networks and stations that may be accessed beyond the remote router. You may set a local and/or remote WAN IP address for the WAN link. You will define a default route and set IP (RIP) protocol options. After specifying the route addressing, you then enable IP routing across the Ethernet LAN.
  • Page 49 This means that the local site will ‘learn’ all about the routes beyond the remote router and the remote router will ‘learn’ all about the local site’s routes. You may not want this to occur in some cases. For example, if you are connecting to a site outside of your company, such as the Internet, you may want to keep knowledge about your local site’s routes private.
  • Page 50 FLASH memory with the following command: save dod At this point, you can reboot the router and test the routing configuration. (Be sure Ethernet LAN IP routing is enabled.) Warning: If you do not save the configuration to FLASH, the configuration is lost upon reboot or power down of the router.
  • Page 51: Step 10. Set Up Netware Ipx Routing

    Seeding the routing table is not necessary when a target router never dials out; it will discover remote networks beyond the calling router as soon as RIP updates arrive (provided the remote router supports RIP). However, for watchdog spoofing to work, the remote IPX routes for network segments and servers should be defined.
  • Page 52 Dialing PPP Authentication IPX routing (this section) 42 FlowPoint’s User’s Guide: Command Line Interface...
  • Page 53: Command Table

    LAN. The remote side of the ISDN link has all of the file and print services. Enter the needed network information in the blank boxes of the diagram. Then match the boxes numbers with the numbers in the Command Table below to configure the target router for IPX. Enable IPX routing External Network # (Local ‘Wire’...
  • Page 54 Firewall filter enabled ... yes Process IP RIP packets received... yes Send IP RIP to the LAN... yes Advertise me as the default router. Yes Receive default route using RIP... yes IP address/subnet mask... 192.84.210.123/255.255.255.0 IP static default gateway... none IPX Routing enabled...
  • Page 55: Step 11. Set Up Bridging

    Bridging is established by entering all remote routers in the remote router database to which this router will bridge traffic. The target router can bridge traffic to/from each remote router. Bridging initially defaults to ‘off’. If you wish the router to bridge traffic to/from a remote router, you must enable bridging on.
  • Page 56: Step 12. Configure Analog Settings

    You can test the bridging configuration by using any application on a locally LAN-attached system that accesses a server or disk on the remote network beyond the remote router. When you access the remote network/station, the router will dial out to the remote router using the ISDN link.
  • Page 57 FOR preempt...incoming/outgoing state...AVAILABLE FOR preempt...incoming/outgoing Configuring FlowPoint Router Software...
  • Page 58: Step 13. Save The Configuration

    Refer to Step 15. Verify the Router Configuration. The ifs command shows the status of the ISDN channel used for the voice call.
  • Page 59: Step 15. Verify The Router Configuration

    If you cannot connect to the remote router, issue the ifs command to check ISDN channel status. If ISDN channels are not in “standby” or “opened” mode, verify: the target router’s ISDN configuration...
  • Page 60 “pconsole” or go to the login drive (usually F:) and type login. Select the printer server and verify that the server you have defined is listed. When you attempt to access the server, the router will dial out to the remote router using the ISDN line.
  • Page 61: Step 16. Logout

    After all configuration changes have been made and saved, the router has been rebooted and testing is complete, enter: logout to reinstate administrative security on the router. Note that after a reboot, you are required to log in again if you wish to make any modifications to the configuration. Configuring FlowPoint Router Software...
  • Page 62: Special Features

    Therefore, at initial configuration, you need only enable IP routing to activate the Internet Firewall Filter. If you do not wish the router to perform IP Internet Firewall Filtering while IP routing, you must turn the Firewall Filter ‘off’. Remember to save and reboot if you alter IP routing status.
  • Page 63: Configure Callerid Security

    Configure Dial-Back Dial-Back lets you force the router to reject an incoming call from another router and dial that router back. You can use this feature to cause ISDN phone charge billing to the local router. Dial-Back can be enabled, disabled or enabled such that Dial-Backs occur only if called by the remote router first. To...
  • Page 64: Configuring Dhcp (Dynamic Host Configuration Protocol)

    ON|OFF You can also cause data calls to a remote router to be sent as voice calls. Use the following command: remote setDataAsVoice ON|OFF remoteName Save the system settings and remote router database configuration. Then test call management.
  • Page 65 BootP Defining option types Other information To save the DHCP configuration or changes to FLASH in the router, be sure to use the command: dhcp save Manipulating subnetworks and explicit client leases The manipulation of subnetworks and client leases is divided into the following parts:...
  • Page 66 Examples: The following command will create a subnetwork 192.168.254.0 with a subnet mask of 255.255.255.0: dhcp add 192.168.254.0 255.255.255.0 The following command will delete the subnetwork 192.168.254.0 and will delete all client leases associated with that subnetwork: dhcp del 192.168.254.0 Adding explicit or dynamic client leases Client leases may either be created dynamically or explicitly.
  • Page 67 The information given by the DHCP server (router) to your PC is leased for a specific amount of time. The client lease has already been selected. The DHCP server will select the lease time based on the option defined for the client lease as described by this algorithm: 1) If the client lease option is a specific number or is infinite, then the server uses the specified lease time associated with this client lease.
  • Page 68 Use this command to release the client lease so it becomes available for other assignments: dhcp clear expire <ipaddr> Setting option values Administrators will want to set the values for global options, for options specific to a subnetwork, or for options specific to a client lease. Note: See RFC 1533 for the description of various options.
  • Page 69 This command lists all available options starting with the string "name". dhcp list definedoptions name To list the lease time use: dhcp list lease Example: This command lists the subnet 192.168.254.0 including any options set specifically for that subnet: dhcp list 192.168.254.0 Configuring FlowPoint Router Software...
  • Page 70 The following commands let the administrator specify the TFTP server (boot server) and boot file name. The administrator will first configure the IP address of the TFTP server and file name (kernel) from which to boot. This is particularly useful if the kernel in the router’s flash is corrupt or does not exist.
  • Page 71 A DHCP option is a code, length, or value. An option also has a "type" (byte, word, long, longint, binary, IP address, string). The subnet mask, router gateway, domain name, domain name servers, NETBIOS name servers, ... are all DHCP options. Please refer to RFC 1533.
  • Page 72: Other Information

    This file contains ALL the DHCP information including: the option definitions the subnetwork that have been added the client lease information the option values that have been set This file can be uploaded/downloaded from one router to another. 62 FlowPoint’s User’s Guide: Command Line Interface...
  • Page 73 Command Line Interface Reference...
  • Page 74: Chapter 4. Command Line Interface Reference

    · Command line length may be up to 120 characters long. · The Command Line Interface is not case-sensitive except for passwords and router names. · Items that appear in bold type must be typed exactly as they appear. However, commands can be shortened to just those characters necessary to make the command unique.
  • Page 75 The commands are organized as follows: ùSystem-level commands ùRouter configuration commands: ISDN System POTS Remote Filters Save Erase ù File system commands ipxroutes system save call Command Line Interface Reference...
  • Page 76: System Level Commands

    00206F024A4F: ETHERNET/0 00A024C6C594: ETHERNET/0 00206F200008: ETHERNET/0 0020AFC5697F: ETHERNET/0 CALL Dials a remote router. This command can be used to test the ISDN link and the remote router configuration settings. Response: FlowPoint User’s Guide: Command Line Interface bi list SD A...
  • Page 77 # Request Queued EXIT Has the same function as Logout, but will disconnect you from a Telnet session. Lists the communications interfaces installed in the router and the status of the interfaces. Response: Interface Speed Out% ETHERNET/0 10mb 0%/0% 0%/0% (Ethernet)
  • Page 78 192.84.210.192 /ffffffc0 --> 192.84.210.65 where: Network PERM Permanent (static) Initiate Link dial-up Forward Direct This Router IPXROUTES Lists the current entries in the IPX routing table. Response: # ipxroutes Network Gateway Interface 00001001: 00000456: (DIRECT) ETHERNET/0 where: STATIC Static Route...
  • Page 79 The router will try to “ping” the remote device for five consecutive times and will issue status messages. NOTE: You can only “ping” remote devices, but not your own router or PC.
  • Page 80 Lists all of the tasks (processes) running in the system and the status of the tasks. Response: # ps TID: NAME 1:IDLE 3:MSFS_SYNC 4:SYSTEM LOGGER 5:LL_PPP 6:NL_BRIDGE 7:NL_IP 8:TL_IP_UDP 9:TL_IP_TCP 10:IP_RIP 11:NL_IPX 12:TELNETD 13:ISDN_L1 14:ISDN_ME 15:ISDN_L2 16:ISDN_L3 17:ISDN_CC 18:ISDN_UL 19:POTS 20:DUM 21:SNMPD 22:CMD...
  • Page 81 REBOOT This command causes a reboot of the system. You must perform a reboot after you have configured the router the first time or when you modify the configuration. Reboot is always required when the following configuration settings are modified:...
  • Page 82 ETHERNET/0 interface started, MAC=00:20:6F:02:49:FC Filter database is empty FlowPoint/100 ISDN Access Node (ISDN v5.2) IPX v2.0 Ready NOTE: This is sample output from the FlowPoint 100 router. Output from a FlowPoint 200 router also lists AUI Ethernet and serial ports. VERS Displays the software version level, source, and amount of elapsed time the router has been running.
  • Page 83: Router Configuration Commands

    Router Configuration Commands Configuration commands are used to set configuration information for each functional capability of the router. Each functional capability has a specific prefix for its associated commands: system: target router system commands isdn: target router ISDN commands eth ip:...
  • Page 84 Overrides all the remote database entries with chap; i.e., only CHAP will be performed. Example: system authen CHAP SYSTEM BOOTPSERVER Lets the router locate the BootP or DHCP server, when using a PC to acquire an IP address using DHCP. system bootpserver <ip_addr> ipAddr IP address of the target router in the format of 4 decimals separated by periods.
  • Page 85 SYSTEM DATAASVOICE This command causes the router to receive data calls as voice calls. If you use this feature, all incoming voice calls will then be processed as data; i.e., you will not be able to use the POTS interface for incoming voice calls.
  • Page 86 Configured _on_ 3/16/96 SYSTEM NAME Sets the name for the target router that you are configuring. You are required to assign a name to the target router. This name is sent to a remote router during PAP/CHAP authentication.
  • Page 87 Router1 SYSTEM PASSWD Sets the target router system authentication password used when the router dials out to other routers or is challenged by them. This password is a default password used for all remote sites, unless a unique password is explicitly defined for dialing out to a remote router with the remote setOurPasswd command.
  • Page 88: Target Router Isdn Configuration Settings (Isdn)

    ISDN ACTIVATE Activates the ISDN line. You do not normally need to enter this command. ISDN LIST Displays the target router ISDN SPIDs, directory numbers, switch type, and the operational status of the B- and D-channels. Response: DSL 0 is Idle...
  • Page 89 You can decide whether to allow or lock out data calls. This feature is particularly useful if your router is configured to bridge and you want to ensure that no data calls are made or received by your POTS lines.
  • Page 90 North America. ISDN SET SPEED When this setting is active, the speed of all calls made and received by the router is 56 kilobits per seconds, regardless of the speed setting in the remote database. This feature should only be used where a network which operates at 56,000 bits per second actually signals calls at 64,000 bits per second.
  • Page 91 /12579a ISDN SET SWITCH Sets the target router Telco switch type your ISDN service provider is using. If a switch type is not entered in the command, the list of switch types are displayed. Note: In countries where lease line ISDN is available, HSD64 or HSD128 switches allow the router to work at 64Kb/s or 128Kb/s.
  • Page 92 National ISDN NI-1 standard HSD64 64Kb permanent connection HSD128 128Kb permanent connection Example: isdn set switch DMS100 FlowPoint User’s Guide: Command Line Interface...
  • Page 93: Target Router Ethernet Lan Bridging And Routing (Eth)

    Target Router Ethernet LAN Bridging and Routing (ETH) The following commands allow you to: Set the Ethernet LAN IP address List the current contents of the IP routing table Enable and disable IP routing List or save the current configuration settings All of these commands will require a reboot.
  • Page 94 IP routing is not enabled, in which case the system acts as an IP host (i.e. an end system, as opposed to an IP router). NOTE: this command requires a reboot; it is also an alternative to: eth IP AddRoute 0.0.0.0 255.255.255.0 <gateway>...
  • Page 95 This command allows you to set the IP address of a default LinkShare owner. The address is saved and restored on reboot. When non-zero, the router boots in LinkShare mode. In a multiple PCs environment, control of the ISDN link is returned to the default owner defined here, where a non- default owner releases the link.
  • Page 96 Transmit multicast RIP-2 packets only. txdef/ avdfr Advertise this router as the default router over the Ethernet LAN (provided it has a default route!). This default is set to ON. NOTE: Set this to OFF if another router on the local LAN is the default router.
  • Page 97 ipxNet# IPX network number represented by 8 hexadecimal characters. port# Port number of the Ethernet LAN. This number must be 0 or may be omitted. Example: eth ipx 123 ETH IPX DISABLE Disables IPX routing across the Ethernet LAN. This acts as a master switch allowing you to disable IPX Routing for testing or control purposes.
  • Page 98 LinkShare default IP Address... 0.0.0.0 Firewall filter enabled ... yes Process IP RIP packets received... yes Send IP RIP to the LAN... no Advertise me as the default router. no Receive default route using RIP... yes IP address/subnet mask...128.1.129.1/255.255.255.0 IP static default gateway... none IPX Routing enabled...
  • Page 99: Target Router Analog Services (Pots)

    POTS ADD Associates a phone number with a POTS interface on incoming calls. The router matches the least significant digits of the assigned phone number with the incoming called number. An outgoing call will select any available phone line on which to place the call. This command adds phone numbers cumulatively;...
  • Page 100 Examples: pots del 1 5551212 POTS DISABLE Disables a POTS interface. pots# 1, 2, or all for POTS interfaces 1, 2, or both interfaces, respectively. Examples: pots disable 1 pots disable all POTS ENABLE Enables a POTS interface. pots# 1, 2, or all for POTS interfaces 1, 2, or both interfaces, respectively. Examples: pots enable 1 pots enable all...
  • Page 101 POTS SET LINE Specifies the answering and/or dialing capability for the POTS interfaces. pots set line <pots#> <mode> pots# 1, 2, or all for POTS interfaces 1, 2, or both interfaces, respectively. mode answer, dial, or both. Examples: pots set line 1 answer pots set line 2 both The first example dedicates POTS interface 1 for answer mode.
  • Page 102: Remote Router Access Configuration (Remote)

    Remote Router Access Configuration (REMOTE) The following commands allow you to add, delete and modify remote routers to which the target router can connect. Remote router information that can be configured includes: phone numbers, callerID phone numbers call management bandwidth management...
  • Page 103 Adds acceptable phone numbers from which a remote router can call the local router. If the CallerID feature is enabled using the system callerID command, the caller’s phone number is verified when a call comes in from the remote router. The call is rejected if the phone number is not in the remote router database.
  • Page 104 (Setting this address is not required if a target router never dials out to the remote router and the remote router supports RIP.) NOTE: A reboot must be performed on the target router for the addition of a static route to take effect.
  • Page 105 Deletes an IP address for a network or station on the LAN network connected beyond the remote router. NOTE: A reboot must be performed on the target router for a deletion of a static route to take effect. Commands remote del <remoteName>...
  • Page 106 Deletes an IPX address for a network on the LAN network connected beyond the remote router. NOTE: A reboot must be performed on the target router for a deletion of a static route to take effect. remote delIpxRoute <ipxNet#> <remoteName>...
  • Page 107 2 HQ REMOTE DISABLE Disables communications with the remote router. This allows you to enter routers into the remote router database but set them inactive. NOTE: The routing information defined for <routerName> is still in effect when the entry is disabled until you save and reboot.
  • Page 108 Name of the remote router (character string) Example: remote disBridge HQ REMOTE ENAAUTHEN With this command, the target router will try to negotiate authentication as defined in the remote router's database. remote enaauthen <remoteName> remoteName Name of the remote router (character string)
  • Page 109 REMOTE LIST Lists the remote router entry in the remote router database or all the entries in the database. The result is a complete display of the current configuration settings for the remote router(s), except for the authentication password/secret. remoteName Name of the remote router (character string)
  • Page 110 REMOTE LISTBRIDGE Lists the bridging capability from the target router to the remote router. remote listBridge [remoteName] remoteName Name of the remote router (character string) Example: remote listBridge Response: BRIDGING INFORMATION FOR <HQ> Bridging enabled... yes Exchange spanning tree with dest... no Mac addresses bridged...
  • Page 111 Response: IPX ROUTE INFORMATION FOR <HQ> Total IPX remote routes... 1 If the remote name is not specified, a list of IPX routes is displayed for each remote router in the database. REMOTE LISTIPXSAP Lists all services defined for the LAN network connected beyond the remote router. Each service includes the server name, network number, node number, socket number, server type, and hop count.
  • Page 112 Sets the authentication protocol used when communicating with the remote router. The authentication protocol is the minimum security level that the target router must use with the remote router; this level is verified during security negotiation. The FlowPoint Router will always attempt to negotiate the highest level of security possible (CHAP).
  • Page 113 75 HQ REMOTE SETDATAASVOICE Causes the router to send data calls as voice calls. This may be used to reduce phone charges. remote setDataAsVoice [on | off] <remoteName> Data calls are sent as voice calls to the remote router...
  • Page 114 Transmit multicast RIP-2 packets only. txdef Transmit the local router’s default IP route. Set on, the local router will send the default route to the remote site. The default is off. private Keep IP routes private. Used to prevent advertisement of this route to other sites by the remote router.
  • Page 115 1 HQ REMOTE SETOURPASSWD Sets a unique CHAP or PAP authentication password for the local router used for authentication when the local router dials the specified remote router. This password overrides the password set in the system passwd command for outbound calls only. A common use would be to set a password assigned to you by Internet Service Providers.
  • Page 116 Name of the remote router (character string) Example: remote setOurSysName s1dpxl7 REMOTE SETPASSWD Sets the CHAP or PAP authentication password used when the remote router dials in to establish a connection or is challenged by the target router. remote setPasswd <password> <remoteName> password Authentication password of the remote router.
  • Page 117 NewYork HQ REMOTE SETRMTIPADDR Sets the WAN IP address for the remote router. This address is required only if the remote router does not support IP address negotiation under PPP (i.e., numbered mode is required and the remote router cannot specify a WAN IP address for use during the negotiation process).
  • Page 118 Name of the remote router (character string) Example: remote setTimer 180 HQ REMOTE STATS Shows the current status of the connection to the remote router including the bandwidth, data transfer rate, and call details. remoteName Name of the remote router (character string) Example: remote stats HQ FlowPoint User’s Guide: Command Line Interface...
  • Page 119 Bandwidth state: idle, increasing, decreasing, decreasing hold, unknown and idle. REMOTE STATSCLEAR Allows to reset the statistics counter for a given remote router. remote statsclear <remoteName> remoteName Name of the remote router (character string) Example:...
  • Page 120: Dynamic Host Configuration Protocol (Dhcp)

    Dynamic Host Configuration Protocol (DHCP) The following DHCP commands allow you to: Enable and disable subnetworks and client leases Add subnetworks and client leases Set the lease time Change client leases manually Set option values globally, for a subnetwork, or for a client lease Enable/disable BootP Use BootP to specify the boot server Define option types...
  • Page 121 DHCP BOOTP ALLOW This command allows a BootP request to be processed for a particular client or subnet. dhcp bootp allow <net>|<ipaddr> IP address of the subnetwork lease in the format of 4 decimals separated by periods ipaddr IP address of the client lease in the format of 4 decimals separated by periods Example: dhcp bootp allow 192.168.254.0 DHCP BOOTP DISALLOW...
  • Page 122 dhcp bootp tftpserver 0.0.0.0 DHCP CLEAR ADDRESSES This command is used to clear the values from a pool of addresses. IP address of the subnetwork lease in the format of 4 decimals separated by periods Example: dhcp clear addresses 192.168.254.0 DHCP CLEAR EXPIRE This command is used to release the client lease.
  • Page 123 Examples: dhcp del 192.168.254.0 (deletes this subnetwork) dhcp del 192.168.254.31 (deletes this client lease) dhcp del 128 (deletes this option with code 128) DHCP DISABLE This command is used to disable a subnetwork or a client lease. dhcp disable <net> | <ipaddr> IP address of the subnetwork lease in the format of 4 decimals separated by periods ipaddr IP address of the client lease in the format of 4 decimals separated by periods...
  • Page 124 WINSSERVER (44) ... 192.168.254.73 Subnet 192.168.254.0, Enabled Mask ... 255.255.255.0 first ip address ... 192.168.254.2 last ip address ... 192.168.254.253 lease ... Default bootp ... not allowed bootp server ... none bootp file ... GATEWAY (3) ... 192.168.254.254 client 192.168.254.2, Ena, jo-computer , Expired client 192.168.254.3, Ena, Jo, 1997/5/16 11:31:33 To list information for client 192.168.254.3, use: dhcp list 192.168.254.3 Response:...
  • Page 125 DHCP Response: code SUBNETMASK (1), 1 occurrence, type IPADDRESS-RESERVED code TIMEOFFSET (2), 1 occurrence, type LONG code GATEWAY (3), 1 to 63 occurrences, type IPADDRESS code TIMESERVER (4), 1 to 63 occurrences, type IPADDRESS code NAMESERVER (5), 1 to 63 occurrences, type IPADDRESS code DOMAINNAMESERVER (6), 1 to 63 occurrences, type IPADDRESS code LOGSERVER (7), 1 to 63 occurrences, type IPADDRESS code COOKIESERVER (8), 1 to 63 occurrences, type IPADDRESS...
  • Page 126 code MESSAGE (56), 1 to 255 characters, type STRING-RESERVED code MAXDHCPMSGSIZE (57), 1 occurrence, type WORD-RESERVED code RENEWALTIME (58), 1 occurrence, type LONGINT code REBINDTIME (59), 1 occurrence, type LONGINT code CLASSIDENTIFIER (60), 1 to 255 occurrences, type BYTE code CLIENTIDENTIFIER (61), 2 to 255 occurrences, type BYTE code NOTDEFINED62 (62), 1 to 255 occurrences, type BYTE code NOTDEFINED63 (63), 1 to 255 occurrences, type BYTE code NISDOMAIN (64), 1 to 255 characters, type STRING...
  • Page 127 DHCP SET EXPIRE This command is used to manually change a client lease expiration time to a certain value. Note: Changing a client lease time manually is rarely required. dhcp set expire <ipaddr> <hours>| default | infinite ipaddr IP address of the client lease in the format of 4 decimals separated by periods hours Lease time;...
  • Page 128 DHCP (sets the value for an option associated with a subnetwork) dhcp set valueoption domainnameserver 192.168.254.2 192.168.254.3 (sets a global value for the domain name server option) dhcp set valueoption 192.168.254.251 winserver 192.168.254.7 (sets a value for an option associated with a specific client) FlowPoint User’s Guide: Command Line Interface...
  • Page 129: Bridging Filtering Commands (Filter Br)

    Bridging Filtering Commands (FILTER BR) Bridging filtering allows you to control the packets transferred across the router. This feature can be used to enhance security or improve performance. Filtering occurs based on matched patterns within the packet at a specified offset. Two filtering modes are available: Deny mode will discard any packet matched to the deny filter database and let all other packets pass.
  • Page 130 Example: filter br list Response: Allow Filter: Deny Filter: pos:12, len=2, <80><35> FILTER BR SAVE Saves the bridging filtering database to FLASH memory. A reboot must be executed to load the database for active use. Example: filter br save FILTER BR USE Sets the mode of filtering to either deny, allow, or none.
  • Page 131: Save Configuration Commands (Save)

    Save Configuration Commands (SAVE) These commands can be used to save parts of the router’s configuration to FLASH memory. The parts of the configuration you can save include: System, Ethernet LAN ISDN settings Remote Router Database settings SAVE Saves the configuration settings for the system, Ethernet LAN, ISDN line, and remote router database into FLASH memory.
  • Page 132 SAVE POTS Saves the configuration settings into FLASH memory. Example: save pots SAVE SYS Saves the name, message, and dial authentication password system settings into FLASH memory. Example: save sys FlowPoint User’s Guide: Command Line Interface save pots save sys...
  • Page 133: Erase Configuration Commands (Erase)

    This commits the changes to FLASH memory. Example: erase ERASE DOD Erases the current state of the remote router database. All new entries and changed entries are erased from FLASH memory. Example: erase dod ERASE ETH Erases the configuration settings for the Ethernet LAN from FLASH memory.
  • Page 134 ERASE POTS Erases the configuration settings for POTS from FLASH memory. Example: erase pots ERASE SYS Erases the name, message, and dial authentication password system settings from FLASH memory. Example: erase sys FlowPoint User’s Guide: Command Line Interface erase pots erase sys...
  • Page 135: File System Commands

    The router file system is DOS-compatible and the file system commands are similar to the DOS commands of the same name. COPY Copies a file from the source to the destination. This command allows you to update the router software level or to write configuration files to a TFTP server. srcFile Filename of the source file to be copied.
  • Page 136 Erases and reformats the router file system. This command should only be used when the file system is unusable. If the router does not execute the POST test and software boot successfully, and the result of the dir command indicates the file system is corrupted, you may wish to reformat the disk, reboot the router, and recopy the router software.
  • Page 137 DELETE Removes a file from the file system. fileName Name of the file to be deleted. The filename is in the format xxxxxxxx.xxx. Example: delete kernel.fp1 Response: kernel.fp1 deleted. RENAME Renames a file in the file system to a new name. rename <oldName>...
  • Page 139: Chapter 5. Managing The Router

    TELNET Remote Access TELNET access to the router is supported. TELNET allows you to log in to the router as if you are directly connected through the Console port. In this manner you can issue commands, using the command line interface, to configure the router and perform status monitoring from any remote location.
  • Page 140: Client Tftp Facility

    When you are ready to return to automatic boot mode, set switch 2 or 6 UP and reboot by selecting 1, 2, 3, or 4. Rebooting with switch 2 in the UP position will cause the router to boot router software automatically in the order and manner you have specified.
  • Page 141: Booting From The Network

    The boot IP address is the router LAN IP address used during the boot procedure. This address may differ from the LAN IP address that the router is ultimately assigned. This is so that a system can be booted from one subnetwork and then moved to its operational network, if necessary. The boot IP address is of the form .
  • Page 142: Other Manual Boot Options

    Set Console Baud Rate Select 7 to alter the baud rate that is used by the router to communicate over the Console port with the terminal emulation program. You can override the default rate of 9600. Remember to set the identical baud rate in your terminal emulation program.
  • Page 143: Software Kernel Upgrades

    TFTP server. If the TFTP sever is not on the same network as the target router, enter the gateway in the boot menu as described in the previous section.
  • Page 144: Upgrading From The Isdn Line

    5. Enter reboot using the Command Line Interface to synchronize the file system and reboot the router. Since the kernel is no longer stored in FLASH, the router will try to boot from the network. If you have never set permanent boot parameters, the router attempts to locate a BOOTP or RARP server.
  • Page 145: Backup And Restore Configuration Files

    SYNC command or rebooted the router. Otherwise the file is not written to FLASH memory. 4. After successfully copying the kernel to the router, reboot the router from FLASH memory via the command. If a problem occurs during the upgrading, try the command again (do not reboot reboot until you have successfully copied the kernel.) If you have altered the boot procedure order in any...
  • Page 146: Flash Memory Recovery Procedures

    FLASH file system from the boot code. Remove the rear face plate covering the configuration switches (on the FlowPoint 200 only). Flip configuration switch 2 or 6 to the DOWN position and reboot the router (by powering down and up again, for example).
  • Page 147: Chapter 6. Troubleshooting Software Problems

    If you have forgotten the password, you must reset the login password. Refer to Appendix E. Changing Configuration Switches in the Getting Started Guide and perform the following procedure: 1. Unscrew the plate on the lower section of the rear panel of the router that covers the configuration switches (on the FlowPoint 200 only).
  • Page 148: Isdn Problems

    If you have changed an IP address to map to a different MAC device, and Ping or IP fails, reboot your Use the Iproutes command, to verify which router’s name is the default gateway ( this cannot be 0.0.0.0).
  • Page 149: Problems And Solutions

    The cable from the wall to the NT-1 (U-interface) uses the center two wires (as described above). The cable from the NT-1 to the router (S/T-interface) uses the center 4 wires (pins 3, 4, 5, and 6). Also make sure that: …you are using straight-through cables, not crossover cables...
  • Page 150: Bridging Problems

    Check that bridging is enabled locally (use the remote listbridge command). Verify that bridging is enabled by the remote router (use the remote list command). Check that the bridged MAC addresses are set to “all” (use the remote listbridge command).
  • Page 151: Ipx Routing Problems

    Check that IPX Routing has been enabled and the remote end is enabled for IPX routing. Validate that the IPX WAN network number matches the remote router’s WAN network number. Check that the IPX Routes (network numbers, hops and ticks) seeded into the routing table for network segments and servers beyond the remote router are correct.
  • Page 152: Remote Router Won't Dial

    7. Remote router won’t dial Verify that the remote router has a default IP router or a default bridge. Check that the remote router is not disabled or in Dial Back mode only, and that it has a phone number.
  • Page 153: How To Obtain Technical Support

    List of all FlowPoint Router models, serial numbers and the date you purchased the products. Level and success of the Power On Self Test. List of other equipment such as personal computers, modems, etc. and third party software you are using, including revision levels.
  • Page 154: System Messages

    The messages are in the following format: dd+hh:mm:ss:nn sysfunc: message where: date in xx/xx/xx format as specified during router initialization number of hours (military format) number of minutes number of seconds...
  • Page 155: Time-Stamped Messages

    Cannot agree with {remote name} on what their IP address should be Explanation: The IP address entry for the remote router in the remote router database does not match with what the local router expects. Cannot obtain an IP address from {remote router}: one is needed in single user mode...
  • Page 156 Trying to connect to the specified remote destination. Did not call remote {name} back - Security problem Explanation: The information provided by the remote router to be called back is incompatible with the actual entries in the local router’s database. Having trouble negotiating with network Explanation: System is not able to communicate with the ISDN switch.
  • Page 157 Explanation: IPX routing cannot be negotiated. IPX routing may not be enabled on the remote router, the remote router may have no route back to the local router, or the WAN network numbers have not been specified. POTS call rejected...
  • Page 158 The response to authentication did not happen within 30 seconds. Remote did not negotiate our IP address correctly Explanation: The remote router did not negotiate the IP address options as was expected by the local router. Remote on {router/user} {link/number} refuses to authenticate us...
  • Page 159 Received a call from a disabled router. User {router/user} not found in remote database [PAP|CHAP] Explanation: The remote destination was not found in the remote router database for the PAP|CHAP security authentication process. Voice call {phone number} proceeding on B {channel number} channel-call in progress Explanation: The voice call is proceeding on the specified B-channel.
  • Page 160: Isdn Q.931 Cause Values

    ISDN Q.931 Cause Values ISDN link level error messages include the Q.931 cause value. The cause value displayed is the cause number exactly or the number +128. The following table is a reference list of the Q.931 cause values. Cause No. Cause Name Unassigned (unallocated) number No route to specified transit network...
  • Page 161 Requested facility not subscribed Bearer capability not authorized Bearer capability not presently available Service or option not available, unspecified Bearer capability not implemented Channel type not implemented Requested facility not implemented Only restricted digital information bearer capability is available Service or option not implemented, unspecified Invalid call reference value Identified channel does not exist A suspended call exists, but this call identity does not...
  • Page 162: History Log

    3. Use the command system history to view the buffer contents. Other logging commands: If you wish to monitor your router activity at all time, enter the command system log start to view a continuous log. This command will not work in a Terminal Window session, but only from Telnet.
  • Page 163: Appendix A. Network Information Worksheets

    Appendix A. Network Information Worksheets TARGET ROUTER: Command Item system name Router Name (Req) Message system msg system authen Dial Authentication Protocol forced PAP/CHAP/NONE system passwd isdn Dial Authentication Password/Secret(Req) CallerID Feature ON/OFF system callerid system dataasvoice Receive Data as Voice...
  • Page 164 Default Bridging Dest (*) Remote MAC address(es) Bridging (On/Off) ena/disBridge setBrOptions Spanning Tree Prot (On|Off) **PPP addressing Numbered Mode only NOTE: One chart for each remote router in the remote router database FlowPoint User’s Guide: Command Line Interface Setting...
  • Page 166 FlowPoint Corporation 180 Knowles Dr. Suite 100 Los Gatos, CA 95030 ©Copyright 1995,1996 FlowPoint Printed in USA P/N 222-14001-03...

This manual is also suitable for:

100128200

Table of Contents