Adit 3104 ANUAL Part Number: 770-0145 BA Product Release: 1.6 September 2007...
Page 2
The information presented in this manual is subject to change without notice and does not represent a commitment on the part of Carrier Access Corporation. The hardware and software described herein are furnished under a license or non- disclosure agreement. The hardware, software, and manual may be used or copied only in accordance with the terms of this agreement.
On the rear panel of this equipment is a label that contains, among other information, a product identifier in the format US:AAAEQ##TXXXX. If requested, this number must be provided to the telephone company. FCC Registration Number: Service Center in the USA: US: 2Z6ISNAN675849 Carrier Access Corporation 5395 Pearl Parkway Boulder, CO 80301-2490 REFACE Preface...
Page 4
If you experience trouble with the Adit 3104, please first contact the distributor or dealer from which you purchased the product and then, as a second point of contact, contact Carrier Access Corporation for repair and/or warranty information.
Industry Canada ICES-003 English This class A digital apparatus complies with Canadian ICES-003. French Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada. Industry Canada CS-03 Registration Number: IC: 2638A-675849 This equipment meets the applicable Industry Canada Terminal Equipment Technical Specifications.
Preface Safety Information Safety Information CAUTION! LWAYS USE CAUTION WHEN INSTALLING TELEPHONE LINES BELOW FOR DETAILS ON SAFETY GUIDELINES TO PREVENT INJURY Never touch uninsulated telephone wires and terminals unless the telephone line has been disconnected at the Network Interface (NI) as voltage potentials as high as 300 VAC may be present across the transmit and receive pairs Only use No.
Electrostatic Discharge (ESD) Precautions ESD can damage processors, circuit cards, and other electronic components. Always observe the following precautions before installing a system component. 1. Do not remove a component from its protective packaging until ready to install. 2. Wear a wrist grounding strap and attach it to a metal part of the system unit before handling components.
Severity 2 issues are failures of the Licensed Software to comply with the Carrier Access software specifications and that result in a major degradation of the Carrier Access Product so as to impact its system or service performance, or significant impairments to network operator control or effectiveness. Should a Severity 3 warranty defect with the Licensed Software occur during the 90-day warranty period, Carrier Access will provide assistance to Buyer to determine if a solution or workaround will be provided in a subsequent software release following the reported issue.
Carrier Access Product or the system. Determination of Severity 1, 2 or 3 shall be made solely by Carrier Access following receipt of the reported problem. Refurbished material may be used to repair or replace the Product. BUYER shall bear the risk of loss for Products or Software returned to Carrier Access for repair, replacement, or service, and the same must be shipped pre-paid by BUYER.
THEREOF. No agent, BUYER, or representative is authorized to make any warranties on behalf of Carrier Access or to assume for Carrier Access any other liability in connection with any of Carrier Access's Products, software, or services. The foregoing summarizes Carrier Access' entire product and software warranties, which are subject to change without notice.
Adit 3104 Base Platform Overview Overview The Adit 3104 integrates the features of a high performance VPN capable router, stateful firewall, VoIP gateway and T1 CSU/DSU. It replaces multiple elements at the customer premises that typically provide routing, security appliances, and voice gateway functions, offering a powerful blend of speed, security and voice. This single platform offers scalability, security, and high performance for secure Internet and IP access, LAN-to-LAN connectivity over private and public networks and hosted Voice over IP (VoIP) service applications.
Application Drawings Secure Access Routing As a Secure Mobile Worker router, the Adit 3104: Integrates access router, firewall/ALG, VPN Host and Ethernet switch. Provides wire-speed performance without a hardware co-processor. Integrates with existing enterprise infrastructure. Layer 2 Tunneling Protocol (L2TP) and Point-to-Point Tunneling Protocol (PPTP) support integration with leading market solutions.
Adit 3104 Base Platform Application Drawings Converged Network Appliance As a Converged Network Appliance the Adit 3104 integrates the access router, firewall/ALG, VPN Host and Ethernet switch: The ALG including support for SIP provides secure application access. The Quality of Service (QoS) feature supports both voice and data application. Type of Service (ToS) prioritization gives voice packets priority.
Technical Specifications Components Software Features - SIP Line Side Gateway Key: Enable SIP signaling conversion for analog lines - G.729 Low Bit Rate CODEC Key: Enables G.729a support Included Accessories - Wall mount bracket Additional Accessories - Adit 3000 Battery Backup Unit - Adit 3000 Rack Mount Kit Interfaces T1 WAN port (RJ-48C connector)
IPSec tunneling DES, 3DES and AES IKE based key management Digital certificates and pre-shared key authentication Router Performance Wire-speed on Ethernet to T1 interface Quality of Service ToS marking and interpretation per IETF Std. 5 VLAN Priority Queuing Firewall Features Stateful Firewall NAT/NAPT, NAT Bypass, NAT Pin-Holes L1-L4 Flow Classification...
Adit 3104 Base Platform Technical Specifications Regulatory Approvals UL60950 FCC Part 15, Class A FCC Part 68 Canada CSA 60950-1 ICES-003, Class A CS-03 Physical Information Wall mount brackets (included) Rack mount options: 19 or 23 inch rack Dimensions: 1.75 in. (H-2 RU) x 8.25 in. (W) x 12 in. (D) 4.4 cm (H) x 21 cm (W) x 30.5 cm (D) Weight: 6.25 lbs.
Physical Installation Unpacking and Inspection Unpacking and Inspection WARNING! BSERVE PRECAUTIONS FOR HANDLING ELECTROSTATIC DEVICES 1. Inspect containers for damage during shipment. Report any damage to the freight carrier for possible insurance claims. 2. Compare packing list with office records. Report any discrepancies to the office. 3.
User Safety CAUTION! HEN USING YOUR TELEPHONE EQUIPMENT ALWAYS BE FOLLOWED TO REDUCE THE RISK OF FIRE INCLUDING THE FOLLOWING Do not use this product near water for example, near a bathtub, washbowl, kitchen sink or laundry tub, in a wet basement or near a swimming pool. Avoid using a telephone (other than a cordless type) during an electrical storm.
Page 26
Physical Installation Compliant Installation NOTE: It is important the DS1/E1 Network Interface Cables are secured separately from the power and Signal Cables. 1. Inspect the unit. 2. Mount the unit, see Wall Mounting on page 2-5, or Rack Mounting on page 2-6 for detailed instructions.
Wall Mounting Before beginning the mounting process, verify that the installation area is a stable environment, clean and free from extremes of temperature, shock, vibration and EMI. See Installation Environment on page 2-2. Mounting Bracket Front of unit Leave adequate space at the front/back for access to connectors The Adit 3000 is delivered with mounting brackets that can easily be attached for quick and easy wall...
Physical Installation Rack Mounting Rack Mounting NOTE: Rack mounting kits are available for both 19 and 23 inch racks. 1 Rack Unit (RU) of spacing is required above the Adit 3000 in the Rack Mount Unit. To rack mount the Adit 3000, follow the instructions below: 1.
Page 29
Physical Installation Rack Mounting 4. Place the Adit on the Tray Slide and attach with 4 screws removed in step 2. screws screws Tray Slide 5. Slide the assembled piece (Adit 3000 and Tray Slide) onto the installed Rack Mounting Tray. 6.
Physical Installation Adit 3104, 3200, 3300 and 3400 Battery Backup Adit 3104, 3200, 3300 and 3400 Battery Backup The Adit 3104, 3200, 3300 and 3400 Battery Backup (P/N 730-0132), is a wall-mount battery backup unit to provide up to 8 hours battery backup. Please see the Battery Backup User Manual for product information and installation instructions, which is provided with unit.
Electrical Installation & Cabling Adit 3104 Adit 3104 Adit Connections The following illustrations show all connectors on the Adit 3104. Front (4) 10/100Base-T Ethernet (LAN) Back Ground Alarm Status (1) DS1/E1 (WAN) Reset (E1-future) (1) 10/100Base-T Ethernet (WAN) Power/Battery/Status Tip & Ring Telco Connector RS-232 Management...
Interface Connectors The following are the Adit 3104 interface connectors: Front of Adit (1) DS1 WAN port (RJ-48C). Note: E1 will be in a future release. (1) 10/100Base-T WAN port (RJ-45) (4) 10/100Base-T switched LAN ports (RJ-45) Tip and Ring Analog Interface equipped with standard 25-pair Telco Connector Back of Adit RS-232 craft port connector for local management Power input connector...
Electrical Installation & Cabling Interface Connectors Power The Adit 3000 is powered by a limited -48 VDC Power source. The following options are available: AC/DC Converter Battery Backup module AC/DC Converter An AC/DC Converter generates 48VDC from any worldwide AC power source. To connect AC power: 1.
25-Pair Telco Connector Tip and Ring Analog Interface equipped with standard 25-pair Telco Connector (female) for connection to key systems, fax machines, modems, and PBXs. Circuit connections are made at the 25-pair telco connectors. A standard 25-pair telephone cable with RJ-21X wiring and a male D-type connector at the Adit 3000 end is required.
Electrical Installation & Cabling Interface Connectors RS-232 Craft Port (Female DB-9) The RS-232 craft port connector (female) is for connection to an external PC or Hayes-compatible modem for local or remote configuration, management, and performance monitoring using the Adit 3000 Command Line Interface (CLI). The RS-232 craft port connects via a female DB-9 connector on the Adit 3000.
DS1/E1 Connection Ports Each DS1/E1 connection port is equipped with a standard RJ-48C (female) on the Adit 3000 unit. Note: E1 will be available in a future release. The pinouts are as follows: DS1/E1 RJ-48C The pinouts are as follows: Name Receive Ring Receive Tip...
Electrical Installation & Cabling Interface Connectors 10/100Base-TX Ethernet The 10/100Base-TX Ethernet (female) ports provide connectivity for Router WAN and/or LAN ports and for management connection via Telnet and/or SNMP to a Network Management System. Ethernet (RJ-45) The pinouts are as follows: Note: This is a hub pinout, you will need a straight cable to connect to a PC.
Reset Button The system can be reset by pressing the reset button located on the front panel. Alarm/Status LEDs State Critical Major Minor Status Green Green Flashing Green/Yellow Yellow Yellow Flashing Adit 3104 - Release 1.6 Description No critical alarms present Critical alarms present.
After the Adit 3104 is installed (see Compliant Installation on page 2-3), the system can now be provisioned. In this Chapter PC Network Configuration Web-Based Management Setting up a CLI Connection Log in Key Enabled Software Features Basic Configuration HAPTER Configuration Setup Adit 3104 for access via Web-Browser Restore Factory Defaults...
Configuration PC Network Configuration PC Network Configuration When a PC is connected directly or indirectly to the Adit 3104 Ethernet LAN port (Eth-1), IP addresses will be acquired using the DHCP server or relay functionality of the Adit 3104. Note: For either of these cases, the PC must be configured as a DHCP Client. This configuration principle is identical but performed differently on each OS.
Linux 1. Login into the system as a super-user, by entering su at the prompt. 2. Type ifconfig to display the network devices and allocated IP’s. 3. Type pump -i dev, the dev is the network device name. 4. Type ifconfig again to view the new allocated IP address. 5.
Configuration Web-Based Management Web-Based Management The web-based management interface allows you to control various system parameters. The interface is accessed through a web browser. To access the management console NOTE: The following assumes that you have connected the PC to the LAN port of the Adit 3104.
For Adit 3104 CLI commands see the Adit 3000 CLI Reference Manual. This is a separate document and can be found on the CD that is provided with the product, or on the Carrier Access customer website. To connect with CLI, set up the connection: If connecting via the Ethernet 100Base-T connection, use a Telnet TCP/IP program to access the CLI.
Configuration Log in Log in After successful connection, via telnet or HyperTerm, the user must login. Default Logins are: Login: admin Password: admin123 After successful login the prompt will be displayed as follows: Adit 3104> Note: It is recommended that you change your password from the default. See the following to modify the Admin level password on your system.
These features are enabled via a Software Key (example: G.729). The number of keyed features may expand with the development of the product, therefore to see a list of current keyed features, or to purchase a key, contact Carrier Access Customer Service or Sales.
Configuration Basic Configuration Basic Configuration The following configuration is divided into logical sections, where each section configures an additional function. The first must be configured before the second and so forth, however, you may stop at any section and not add the following feature. NOTE: The order in which commands are entered can affect the successful provisioning of the Adit 3104.
Restore Factory Defaults If the unit is not out-of-the-box, you may want to verify that the unit is set to defaults. Note: This will reset the IP address back to the default setting of 192.168.1.1. In the web-browser: Select Advanced from the Navigation bar Select Restore Defaults Select OK to restore defaults Adit 3104 - Release 1.6...
Configuration Basic Configuration Modify Default Admin User For security purposes it is recommended that the Administrator User be changed from the default settings. Modify the Administrator User in the web-browser: Select Advanced from the Navigation bar Select Users icon Select Administrator, to open the profile. 4-10 Adit 3104 - Release 1.6...
Page 51
Configuration Basic Configuration Modify the User information, and select OK to save. It is important to note that you need to have a minimum of one user with Administrative Privileges. For users with other access levels, add a New User. Note: For security purposes, the password should be changed.
Configuration Basic Configuration Configure Ethernet WAN Interface In the web-browser: 1. Select Network Connections from the Navigation bar. 2. It is recommended that you disable/delete the Serial1 port. 3. Select (click) Ethernet 2 (WAN Ethernet) connection to configure. 4. Select the Enable button, to configure the WAN Ethernet up (or in-service). 5.
Page 53
Configuration Basic Configuration 6. Set Internet Protocol to Obtain an IP Address Automatically, from the pulldown menu. This will enable the Adit 3104 as a DHCP Client. Leave the other fields to their default settings. 7. Select Apply to apply the new settings. Adit 3104 - Release 1.6 4-13...
Configuration Basic Configuration Configure Serial1 as WAN In the web-browser: 1. Select Network Connections from the Navigation bar. 2. Select Serial1. 3. Select Settings button. 4. Set Network to WAN. 5. Select Apply to apply the new settings. 4-14 Adit 3104 - Release 1.6...
Configuration Basic Configuration Configure the Adit 3104 as a SIP Line Gateway In the web-browser: 1. Select Voice Over IP from the Navigation bar. 2. Select Use SIP Proxy. 3. Enter Softswitch IP Address, User name and Password. 4. Select applicable Codecs. 5.
Page 57
Configuration Basic Configuration 6. Select the Phone Settings tab. 7. Select the Action icon on line #1 to edit. Adit 3104 - Release 1.6 4-17...
Page 58
Configuration Basic Configuration 8. Enter a telephone number in the User ID field and select OK. 9. Repeat this step for each line you would like to have register with your Softswitch. 4-18 Adit 3104 - Release 1.6...
Automatic Mark Inversion Address Resolution Protocol B8ZS Bipolar with 8 Zero Substitution Binary Digit Bits Per Second Bipolar Violation Certificate Authority Channel Associated Signaling Common Channel Signaling CHAP Challenge Handshake Authentication Protocol Caller ID CIDR Classless Inter-Domain Routing CLASS Custom Local Area Signaling Service CLEI Common Language Equipment Identification Command Line Interface...
Page 60
Glossary DLCI DLCI Data Link Connection Identifier Demilitarized Zone Domain Naming System Digital Signal Level Zero (64 kbps) (1 voice channel) Digital Signal Level 1 (1.544 Mbps) Digital Service Unit/Data service Unit Data Terminal Equipment DTMF Dual Tone Multi-Frequency Errored Seconds Extended Superframe Facilities Data Link Foreign Exchange Station...
Page 61
Network Address Translation Network-based Call Signaling NEBS Network Equipment Building Standards Non-Return to Zero Named Service Event Network Time Protocol OSPF Open Shortest Path First Password Authentication Protocol Physical specifications Point-to-Point Protocol Primary Rate Interface Permanent Virtual Circuit Quality of Service RADIUS Remote Authentication Dial-In Service SABME...
Page 62
Glossary Wide Area Network WINS Windows Internet Naming Service Glossary-4 Adit 3104 - Release 1.6...
Page 63
10Base-T The most widely installed Ethernet local area networks (LANs) use ordinary telephone twisted-pair wire. When used on Ethernet, this carrier medium is known at 10BASE-T. 10BASE-T supports Ethernet’s 10 Mbps transmission speed. 100Base-TX Also called “Fast Ethernet”, it is a 100 Mbps version of Ethernet. 100Base-T transmits at 100 Mbps rather than 10 Mbps.
Page 64
Glossary Central Office (CO) Central Office (CO) Where telephone companies terminate customer lines and locate switching equipment to interconnect those lines with other networks. channel A generic term for a communications path on a given medium; multiplexing techniques allow providers to put multiple channels over a single medium. Channel Associated Carrying signaling information within the data channels of a T1 line (in band) rather than Signaling (CAS)
Page 65
Electro-magnetic Equipment used in high speed data systems, including ATM, that generate and transmit Interference (EMI) many signals in the radio frequency portion of the electromagnetic spectrum. Interference to other equipment or radio services may result if sufficient power from these signals escape the equipment enclosures or transmission media.
Page 66
Glossary gateway gateway An entrance and exit into a communications network Graphical User Interface GUI, pronounced “GOOEY”. A set of screen presentations and metaphors that utilize (GUI) graphic elements such as icons in an attempt to make an operating system easier to use. ground A physical connection to the earth or other reference point.
Page 67
Local Area Network A short distance data communications network (typically within a building or campus) (LAN) used to link together computers and peripheral devices under some form of standard control. Line Build Out (LBO) T1s require the last span to lose 15 - 22.5 dB, a selectable output attenuation is generally required of DTE equipment.
Page 68
Glossary Multilink PPP (MLPPP) Multilink PPP (MLPPP) MultiLink PPP. An extension to the point-to-point protocol that enables two channels to be linked together to double the throughput. It is used for ISDN transmission and channel bonding Microsoft Point-to-Point A 128-bit key or 40-bit key encryption algorithm using RSA RC4. MPPE provides for Encryption (MPPE) packet confidentiality between the remote access client and the remote access or tunnel server and is useful where IP security (IPSec) is not available.
Page 69
PHY as in physical specifications. OSI Physical Layer, which provides for transmission of cells over a physical medium connecting two ATM devices. ping Packet InterNet Grouper. PING is a program used to test whether a particular network destination on the Internet is online (i.e. working) by repeatedly bouncing a "signal" off a specified address and seeing how long that signal takes to complete the round trip.
Page 70
Glossary Router Information Protocol (RIP) Router Information RIP is based on distance vector algorithms that measure the shortest path between two Protocol (RIP) points on a network, based on the addresses of the originating and destination devices. The shortest path is determined by the number of hops between those points. Each router maintains a routing table, or routing database, of known addresses and routes;...
Page 71
ticks The distance between two networks, measured in time increments. Ticks may be used to designate primary and secondary routes to the same network. traffic The load of packets carried by a network or portion of a network. Heavy traffic slows down the response time of the individual packets.
Page 72
Glossary Virtual Local Area Network (VLAN) Glossary-14 Adit 3104 - Release 1.6...
Need help?
Do you have a question about the Network Device Adit 3104 and is the answer not in the manual?
Questions and answers