Page 1 Conﬁguring the Model 3395A Access Serving Features Bay Networks, Inc. Corporate Headquarters 4401 Great America Parkway Santa Clara, CA 95054 January 1995 *893-826-A* 8 Federal Street Billerica, MA 01821...
Page 2 © 1994 by Bay Networks, Inc. All rights reserved. Trademarks SynOptics and SynOptics Communications are registered trademarks of Bay Networks, Inc. Bay Networks, Bay Networks Press, and Lattis System 3000 are trademarks of Bay Networks, Inc. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, Bay Networks, Inc.
Page 3: Table Of Contents
Command Control Language (CCL) Scripts Chapter 2 Basic Setup Activities for Access Serving An Overview to Setting Up the Communication Server Information about Model 3395A Server Cabling Methods Selecting Protocols and Features Configuring Ports to Detect Multiple Protocols (APD) Chapter 3 Setting Up Basic Modem Applications...
Page 4 Chapter 4 Point-to-Point Protocol (PPP) Enabling Protocols on the Server Configuring a PPP Port for Modem Support Configuring PPP Enabling PPP at Specific Ports Specifying Optional PPP Port Characteristics Configuring IPCP Connections Assigning Local and Remote IP Addresses to PPP Ports...
Page 5 ARAP Planning Considerations Diagnostic Cabling Chapter 7 Model 3395A Server Support for the Xremote Protocol Starting Up the XDM Host Configuring the Communication Server for Xremote Support Chapter 8 Using CCL Scripts Types of CCL Scripts Available Communication Server Setup...
Page 6 Flow Control Software Flow Control Hardware Flow Control Setup Flow Control Operation Hardware Flow Control Operation Using the Modem Control Signal Index A-10 A-10 A-11 Lines A-12 893-826-A...
Page 7 Basic IPXCP configuration using communication servers IPXCP “LAN-to-LAN” configuration using communication servers SLIP connections to remote network, remote PC Conventional Xremote implementation An Xterminal connected to a Model 3395A server Standard AppleTalk remote access configuration AppleTalk remote access configuration using communication servers 1-15...
Page 8 viii 893-826-A...
Page 9 Tables Table 2-1. Table 2-2. Table 2-3. Table 7-1. Table 7-2. Cabling support for modem applications Modem control/flow control feature support Memory usage for features and protocols Default files Settings for port characteristics 893-826-A...
Page 10 893-826-A...
Page 11: Preface
Bay Networks, Inc. to provide access to network services from remote locations. A communication server is composed of a Model 3395A Terminal Server working in conjunction with the Multiprotocol Communication Server software. This manual is intended for network and communication server managers.
Page 12: Ordering Synoptics Publications
The server prompt for secure and nonprivileged users is this: T53395> The server prompt for privileged users is this: T53395>> This is the default communication server user interface prompt; the server manager can specify a different prompt, so the prompt in use at your site may be different. •...
Page 13: Infofacts
InfoFACTS InfoFACTS is a 24-hour automated service that sends free technical information to your fax machine. You can locate documents that provide valuable reference information for all Bay Networks-SynOptics products. To use InfoFACTS, call 1-800-786-3228. (Outside the U.S. and Canada, call 408-764-1002.) CompuServe You can use your modem to easily gain access to Bay Networks technical...
Page 14 Preface Preface-xiv 893-826-A...
Page 15: Chapter 1 Introducing The Communication Server
1 MB of memory provided with the base models. Be sure that you have the Model 3395A server with at least one set of expansion SIMMs to support the multimegabyte image. Memory expansion for the Model 3395A server is available by ordering the Model 773 SIMM Memory Option Kit.
Page 16 With a communication server, users can perform work on any computer that is connected to the network that the communication server is on.
Page 17: Point-To-Point Protocol
Protocols (IPCP) and IPX Control Protocol (IPXCP) are NCPs supported by the Model 3395A server PPP implementation. IP/PPP (IPCP) Features The Model 3395A server implementation of IPCP supports two general network conﬁgurations: the single-node conﬁguration and the network conﬁguration. In the single-node conﬁguration, a PC running PPP is attached to a communication server port over a serial line.
Page 18 Figure 1-2. The PC in subnet, as the communication server or on a remote subnet with a different Internet address. The PC can connect to the communication server port directly or through a modem, as shown in this ﬁgure. When the PC and the communication server are conﬁgured appropriately, the PC can gain access to...
Page 19 IPCP can be used in conjunction with all Model 3395A server access security methods. • Model 3395A server product support IPCP is supported on Model 3395A servers that use either the 6- or 8-wire cabling methods and can run the following enhanced or multimegabyte load image, TS3395M.SYS. 893-826-A Network Address: 140.179.80.0...
Page 20: Ipx/Ppp (Ipxcp) Features
The user dials in when he or she needs access to the services and disconnects when the services are no longer needed. Model 3000 Chassis PPP links with Model 3395A Server Modems Basic IPXCP conﬁguration using communication servers...
Page 21 File Server PC's Host Systems IPXCP “LAN-to-LAN” conﬁguration using communication servers Point-to-Point Protocol Figure 1-5, the Model 3000 Chassis with Model 3395A Server running PPP Link Model 3000 Chassis with Model 3395A Server running PPP Novell NetWare File Server 5434...
Page 22 IPX is a “keyed” software feature and requires a password to be enabled on the Model 3395A server. Contact your local sales representative or distributor for more information about obtaining a password and the documentation that describes how to conﬁgure this feature on the Model 3395A server.
Page 23: Serial Line Internet Protocol (Slip)
• Model 3395A server product support. The IPX feature can be used on Model 3395A servers that use either the 6- or 8-wire cabling methods and can run the following enhanced or multimegabyte load image, TS3395M.SYS. Serial Line Internet Protocol (SLIP)
Page 24: Figure 1-6. Slip Connections To Remote Network, Remote Pc
(dial-in) workstation or PC, direct connection of a host to the local network, and connection of a remote network. Features of the SLIP implementation include: • Support for modems. The server supports line speeds of 300 B/s to 38.4 KB/s. 1-10 Figure 1-6, a communication server passes Internet Addresses: 182.13.130.10...
Page 25: Xremote
SLIP can be used in conjunction with all Model 3395A server access security methods. • Model 3395A server product support. SLIP is supported on Model 3395A servers using either the 6- or 8-wire cabling methods. Xremote The communication server provides serial-line support for the NCD proprietary Xremote Protocol.
Page 26: Figure 1-7. Conventional Xremote Implementation
X Display Manager (XDM) hosts. • Supports Model 3395A server products The Xremote feature can be used on Model 3395A servers that use either the 6- or 8-wire cabling methods and can run the following enhanced or multimegabyte load image, TS3395M.SYS.
Page 27: Arap Features
AppleTalk network so that the remote Macintosh acts as if it were directly connected to the network. Figure 1-9 access conﬁguration and an equivalent conﬁguration using a Model 3395A server. In the standard conﬁguration (see dedicated for use as a remote access server. The remote Macintosh computer...
Page 28 Macintosh computer is equipped with a special hardware option. (Without this hardware option, V2.0 performs in the same manner as V1.X.) The Model 3395A server ARAP implementation is compatible with both V1.X and V2.0 of AppleTalk remote access software.
Page 29 ARAP-related commands are described in Model 3395/3395A Commands Reference. • Compatibility with Model 3395A server security mechanisms. ARAP can be used in conjunction with all Model 3395A server access security methods. These methods are described in Chapter 6. • Model 3395A server product support.
Page 30: Automatic Protocol Detection
Automatic Protocol Detection Communication server ports can be conﬁgured to accept connections made via different protocols, using the Automatic Protocol Detection Feature (APD). Using APD, ports will automatically determine the protocol being used to make a connection and adjust port settings appropriately.
Page 31: Ip And Ipx Routing
Communication servers perform limited IP routing. Servers collect ICMP (Internet Control Message Protocol) messages, which allow the server to “learn” IP routes in order to send packets to the appropriate destination. Servers can also be conﬁgured with a manager-speciﬁed, or “static” IP route.
Page 32: Static Routing
IPX RIP route or SAP service information. You can create import and export ﬁlters for these packets. Import ﬁlters enable you to control the information that a server adds to its IPX RIP or SAP Table. The server either accepts or discards routes and services that meet the criteria, based on the ﬁlters instructions.
Page 33: Command Control Language (Ccl) Scripts
For Model 3395A servers, CCL scripts can be used to initialize ports for all types of modem connections and protocols. One could think of a CCL as an “alternate”...
Page 34 Introducing the Communication Server 1-20 893-826-A...
Page 35: Chapter 2 Basic Setup Activities For Access Serving
For information about this task, refer to Model 3395/3395A Hardware Installation and Maintenance Guide. NOTE: The next section of this chapter covers the Model 3395A server cabling methods, which can be used with modem applications. The hardware documentation supplied with your Model 3395A server includes cabling information for other types of devices.
Page 36: Specific Activities For Configuring Access Serving Features
• Assign basic server Internet characteristics if you are using the Internet Protocol. Refer to Model 3395/3395A Software Management Guide for more information about these characteristics. The Internet characteristics you need to specify include the following: – Internet address and subnet mask for the communication server –...
Page 37: Information About Model 3395A Server Cabling Methods
Information about Model 3395A Server Cabling Methods Model 3395A servers can be connected to a variety of modems or other devices through one of two wiring schemes (with 6 or 8 wires), which support different modem control and hardware ﬂow control options.
Page 38: Six-Wire Cabling
Applications using CCITT V.42-compliant modems or other devices operating at high port speeds Figure 2-1 communication server serial port to a modem for most standard applications (i.e., those that do not require RTS/CTS hardware ﬂow control). shows the wiring for applications that require RTS/CTS ﬂow control.
Page 39: Eight-Wire Cabling
DCD/DSR enabled and cabling shown in • Applications such as SLIP and PPP using high-speed modems (RTS/CTS ﬂow control enabled and cabling shown in 893-826-A Information about Model 3395A Server Cabling Methods Straight Through Cable Male RJ-45 Female RJ-45 Connector...
Page 40: Figure 2-3. Modular Cables For Connecting A Modem (8-Wire Port)
Applications using CCITT V.42-compliant modems, or other devices operating at high port speeds (use cabling shown in • AppleTalk Remote Access (ARAP) applications (use cabling shown in Figure Standard Modem Connection Communication Server Connector Terminal Server Male RJ-45 Connector Connector CTS/RING XMTGND...
Page 41: Selecting Protocols And Features
In general, if a protocol is not needed, you should disable it to make more memory available for other uses. For more information on managing server resources and selecting the appropriate features and protocols for your site, refer to Model 3395/3395A Software Management Guide. Table 2-3 well as the amount of memory that will be used or freed up.
Page 42 -708- Requires approximately nnnnn additional bytes; Change not done. Initialize the server after you have made all changes. When a protocol is enabled, the software sets all server or port characteristics associated with that protocol, meaning those characteristics set with DEFINE/SET SERVER and DEFINE/SET PORT commands, to their default values.
Page 43: Configuring Ports To Detect Multiple Protocols (Apd)
Conﬁguring Ports to Detect Multiple Protocols (APD) To conﬁgure server ports to accept different types of connections (i.e., using more than one protocol), issue the following command and then reinitialize the server: TS3395>> define server apd enabled After you enable APD on the server, you must enable APD-related characteristics on individual ports.
Page 44 NOTE: When using APD at a port, you do not need to enable speciﬁc protocols, such as PPP, IPX, ARAP, or SLIP/CSLIP at that port (only at the server for PPP, IPX, and ARAP). APD will enable the protocol at the port when a connection is made. However, you must conﬁgure all appropriate PORT and/or SERVER characteristics (for example, addresses) that apply to that protocol.
Page 45: Chapter 3 Setting Up Basic Modem Applications
Chapter 3 Setting Up Basic Modem Applications This chapter describes how to conﬁgure the communications server to support simple modem applications using any of several different types of modems. The typical applications performed over these modems include interactive activities (such as terminal emulation, electronic mail, ﬁle transfers using Kermit, Xmodem, Microphone, TCP/IP, FTP, LAT) or PPP or SLIP connections using low-speed modems.
Page 46: Speed Or Autobaud
RETURN key a few times at initialization time. For the access server to use the autobaud feature, however, the modem must use 8-bit no parity or 7-bit even parity characters. If the characters cannot...
Page 47: Flow Control
• Using a CCL script to ascertain and set the port speed One could think of a CCL as an “alternate” method of autobauding the serial port connected to the modem, because the CCL script will determine the appropriate port speed and set it accordingly. In effect, the modem performs the autobauding.
Page 48: Setting Up Dial-In Ports
For example, this command speciﬁes that when a user logs in to port 6, the port connects directly to the dedicated service: TS3395>> define port 6 autodedicated enabled ““Information about Model 3395A Methods” in Chapter 2 for more information. 893-826-A...
Page 49: Setting Up Dial-Out Ports
TS3395>> define port 8 access dynamic After the port is set up to communicate with the modem, conﬁgure a dial-out service at the server so that the network can communicate with the dial-out modem port. Dial-out support requires a program, such as FTP or Kermit running at a host or PC, which can connect to the local service, and then direct modem-speciﬁc commands (such as dialing information) to the modem.
Page 50: Configuring A Lat Application Port At A Vms Host
TS3395>> define server internet rotary 112.132.11.1 5-8 A user at a PC whose serial port is connected to a server port can then connect to the dial-out service while running Kermit or a similar program. A user at a host that uses Internet Protocols, such as a UNIX host, would connect to the server internet-address/telnet-remote-port or domain-name/ telnet-remote-port while running Kermit, FTP and so on.
Page 51: Setting Up Dial-Back Ports
If no script ﬁle for the user is found, the user will not be able to log on. If a script ﬁle is found for the user, the server will cause the modem to dial back that user at a designated telephone number.
Page 52: Using Dial-Back Scripts On The Communication Server
ﬁles. You also specify which ports will use or require a script ﬁle for login. Follow this procedure to use dial-back scripts on the Model 3395A server: At the communication server that will use script ﬁles, deﬁne one or more script server using the privileged DEFINE SERVER SCRIPT SERVER command.
Page 53: Setting Up A Dial-Back Script Server
ﬁle and a dial-back script ﬁle, which contains the information that tells the modem which telephone number to dial when the user gjones attempts to log on to the server through a modem. For example, when a user logs on as gjones, the communication server requests the ﬁle /tftpboot/SCRIPTS/gjones/dialback from this script server (in this example, /tftpboot is the TFTP home directory for this host).
Page 54: Script File Structure And Guidelines
The name of the ﬁle is dialback. At a UNIX host, the ﬁlename must consist of all lowercase letters (dialback). When creating the ﬁle, follow the syntax rules listed in the next section. Refer to Model 3395/3395A Software Management Guide for more information about scripts.
Page 55: Directory Requirements
In a dial-back script, the pound character, when followed by the word “modem” and one or more spaces, speciﬁes a modem command that the server will pass on to a modem. The phrase “#modem” must be in lowercase letters. NOTE: If you plan to use a dial-back script for a port that is conﬁgured to use AppleTalk Remote Access Protocol (ARAP), refer to information.
Page 56: Script File Execution And Processing
UNIX system. Script File Execution and Processing The server executes script ﬁles either when the user logs on to an appropriately conﬁgured port or when the user issues the SCRIPT command. The following steps describe what happens during script ﬁle processing and execution: The user attempts to log on to a dial-back port.
Page 57 When a user named “John A. Smith” logs on to a port, the server requests the script ﬁle /usr/3395/JohnA.Smith/dialback from the script server at address 192.12.119.184. If the script is not found in the ﬁrst directory location, the TFTP process searches the directory immediately above it.
Page 58 Setting Up Basic Modem Applications 3-14 893-826-A...
Page 59: Chapter 4 Point-To-Point Protocol (Ppp)
PPP and IPX are conﬁgurable features, which are disabled by default. PPP must be enabled on the server in order to use IPCP or IPXCP. IPX must also be enabled on the server in order to use IPXCP. (When PPP is enabled, IPCP support is automatically enabled.) You must obtain a password to enable IPX.
Page 60: Configuring A Ppp Port For Modem Support
Chapter 2 provides cabling details. Chapter 3 covers how to set up a port to support dial-in, dial-out, or dial-back capabilities. Conﬁguring PPP The basic steps for setting up a server to support IPCP and IPXCP connections are: Enable PPP at speciﬁc ports, or use APD.
Page 61: Specifying Optional Ppp Port Characteristics
Specifying Optional PPP Port Characteristics Several optional PPP port characteristics are available to use, depending on the needs of your site. See Model 3395/3395A Commands Reference for a detailed description of these commands. Use the following commands to assign optional PPP port characteristics: •...
Page 62: Configuring Ipcp Connections
Point-to-Point Protocol (PPP) • DEFINE PORT port-list PPP CHARMAP [nnnnnnnn] SET PORT port-list PPP CHARMAP [nnnnnnnn] These commands specify the ASCII control characters that the port can negotiate to control how data is transferred between the two sides of the PPP connection.
Page 63: Assigning Local And Remote Ip Addresses To Ppp Ports
Specifying Optional IPCP Port Characteristics Several optional PPP port characteristics are available to use, depending on the needs of your site. See Model 3395/3395A Commands Reference for a detailed description of these commands. The optional commands include: •...
Page 64: Specifying Ip Static Routes
• A PC with no conﬁgured Internet address In the diagrams in this section, PPP is enabled on a Model 3395A server. A PC and an unspeciﬁed device are connected to asynchronous ports on the communication server. The communication server is attached to a LAN with other IP devices, such as various UNIX hosts and Internet routers.
Page 65: A Pc With An Internet Address Within The Lan Subnet
The PPP Protocol is enabled on the communication server and the appropriate asynchronous ports. The PPP port on the communication server “learns” the IP address of the PC when the PC gains access to the port. The destinations that the PC can reach through the communication server depend on whether or not the router is deﬁned as an Internet Gateway on the communication server.
Page 66: A Pc With An Internet Address Outside Of The Lan Subnet
Mask: 255.255.0.0 Figure 4-2. When the PC is not on the same subnet as the communication server, you must conﬁgure a routing entry for the PC on the communication server. You also must specify routing information on the LAN devices or on a router if one exists on the LAN.
Page 67: A Pc With No Configured Internet Address
The PC connection can be direct or through a modem, and the PC can reside in the same subnet as the communication server or in a remote subnet. A router is attached to the LAN. The PPP Protocol is enabled on the communication server and the appropriate asynchronous ports.
Page 68: Example Of An Ipcp Network Configuration
PPP connection. If the PC has an Internet address, however, you must wait for the initial connection when the communication server “learns” the Internet address of the device.
Page 69: Figure 4-4. Two Communication Servers In A Back-To-Back Gateway
You then assign routing entries on the LAN devices that either identify the communication server as the router to the remote subnet or deﬁne a default router, if one exists on the LAN.
Page 70: Configuring Ipxcp Connections
To gain access to a remote subnet, a device on the LAN must use the communication server as a router or send network trafﬁc to a router on the LAN, if one exists, which can then send the trafﬁc to the communication server.
Page 71: Defining Ipx Protocol Packet Types
Deﬁning IPX Protocol Packet Types The Model 3395A server can accept two packet types over an IPX Interface: Ethernet packets and IEEE 802.3 (MAC) packets. You can use only one of these types at a time on a server. Ethernet packets and IEEE 802.3 packets have different formats.
Page 72: Server Ipx Rip Characteristics
Valid choices for setting are: FULL, CHANGE, and NONE. FULL means that the server will broadcast the entire contents of the RIP table. CHANGE means that the server will only broadcast new or changed routing information.
Page 73: Server Ipx Sap Characteristics
Valid choices for setting are: FULL, CHANGE, and NONE. FULL means that the server will broadcast the entire contents of the SAP table. CHANGE means that the server will only broadcast new or changed SAP information.
Page 74: Port Ipx Rip Characteristics
• Individual devices within a Novell NetWare network are identiﬁed by node numbers. The server can learn the node number by which it will be identiﬁed over the PPP link, or the server manager can specify a permanent node number. The server notiﬁes its connection partner of its node number when the link is being established.
Page 75: Port Ipx Sap Characteristics
DEFINE/SET PORT port-list IPX RIP [BROADCAST] DISCARD TIMEOUT timer-multiple This command speciﬁes how long the server keeps RIP information that it receives over the serial link to the remote partner. The timer-multiple that you specify is multiplied by the value you specify in the DEFINE/SET SERVER IPX RIP [BROADCAST] TIMER time command.
Page 76: Specify Static Routes And Services
Valid values for router are hexadecimal numbers between 1 (the default) and FFFFFFFFFFFE. • DEFINE/SET SERVER IPX SAP [SERVICE] "name" TYPE type NETWORK network-number NODE node-number SOCKET socket-number [HOPS hops] This command speciﬁes a static service. Valid names can be between 1...
Page 77: Chapter 5 Serial Line Internet Protocol (Slip)
Chapter 5 Serial Line Internet Protocol (SLIP) The Multiprotocol Communication Server software enables a user to run Internet protocols over an asynchronous serial line, using the Serial Line Internet Protocol (SLIP). SLIP is deﬁned by the Internet RFC 1055. SLIP is automatically enabled when the TELNET feature is enabled.
Page 78 RFC 1144 allows a CSLIP link to use a maximum of 16 slots. (This maximum is because the compression mechanism is very memory intensive. If too many slots use compression, the server or the remote device could run out of memory resources to perform other tasks.) When compression is in use on a link, the server will allocate sufﬁcient memory to support 16 slots (the...
Page 79: Assigning Slip Addresses To Ports
When the remote device has been conﬁgured this way, it can learn its address from the server if it is capable of making a BootP request. (SLIP links cannot be established if the remote device does not have an Internet address and is incapable of requesting one.)
Page 80: Slip Sessions
To terminate a SLIP session, you disconnect the dial-up link or log out the SLIP port through another port on the communication server. SLIP processing terminates when you log out the port. If a port has a dedicated connection to the remote location, you can use the DEFINE PORT INTERNET SLIP ENABLED command to establish a permanent SLIP link.
Page 81: Dial-In Slip Connection
When the PC/workstation dials in and initiates a SLIP session, the port learns the PC/workstation's Internet address and assigns the local address and remote address to be the Internet address learned from the remote device. The server sets the SLIP network mask to be 255.255.255.255. To do this, use the command: TS3395>>...
Page 82: Network Applications
SLIP information each time. It requires that the ﬁrst connection must be initiated from the PC/workstation, not the network. The reason for this is that the server does not know the SLIP information until it receives the ﬁrst packet from the PC/workstation.
Page 83: Figure 5-3. Slip Connections To Remote Network
Systems SLIP connections to remote network Example Configurations Remote Network Internet Addresses: 182.3.130.x Mask: 255.255.255.0 Model 3000 Chassis with Model 3395A Server running PPP SLIP Port; Internet Address: 182.13.113.5 Model 3000 Chassis with Model 3395A Server running PPP Local Network Internet Addresses: 182.13.113.x...
Page 84 Serial Line Internet Protocol (SLIP) 893-826-A...
Page 85: Chapter 6 Setting Up Arap
This editing is needed only if you are using Kerberos and/or SecurID authentication and you have a CCL script that does not contain modiﬁcations to support these authentication methods. Model 3395A server software kits provide CCL scripts for many modem models that are already modiﬁed appropriately.
Page 86: Specify Server Characteristics
You must specify a number of SERVER characteristics that allow the server to operate as an AppleTalk node. The following is a summary of these SERVER characteristics. Refer to Model 3395/3395A Software Management Guide Supplement 5.x for more information about these commands.
Page 87: Specify Port Characteristics
DEFINE SERVER PACKET COUNT packet-buffers Valid values for the variable packet-buffers are whole numbers in the range of 80 to 1088; the default is 80. The server allocates 1556 bytes of memory for each additional packet buffer. You can determine the current number of packet buffers available by examining the “Packet Count”...
Page 88: Specifying Optional Arap Port Characteristics
AppleTalk zone in addition to the zone that the server is in. A zone name can be up to 32 characters in length and must be enclosed in the double-quote (") character. (You cannot use the double-quote character as part of the zone name.)
Page 89: Using Arap With Authentication And Dial-Back Features
Using ARAP with Authentication and Dial-back Features Model 3395A servers offer several security features that control access to terminal server ports and access to devices on the network. You can use these features individually or combine them to achieve different levels of network security.
Page 90 The diagram explains the entire process that the server performs in sufﬁcient detail to make these decisions. The general order in which the Model 3395A server performs authentication or security-related activities at these types of ports is as follows: •...
Page 91: Figure 6-1. Operation Of Authentication And Security Methods (Part 1)
Notify user that access was denied. Figure 6-1. 893-826-A Using ARAP with Authentication and Dial-back Features Start Hang up the port. Wait for telephone to ring. Telephone rings, modems negotiate options, and connection is established. Has a PORT User Name been defined for the port? Use the value for...
Page 92: Figure 6-2. Operation Of Authentication And Security Methods (Part 2)
Setting Up ARAP Notify user that access was denied. Figure 6-2. Is SecurID enabled for the port? the current User Name still undefined? Prompt user to specify a User Name from a Macintosh dialog window. Prompt user to specify a SecurID passcode from a Macintosh dialog window.
Page 93: Figure 6-3. Operation Of Authentication And Security Methods (Part 3)
Notify user oof current User Name unregistered user match ARAP name error. registered user? Record message in system log. Does server Notify user of bad ARAP password password error. match user-supplied Record message in password? system log. Operation of authentication and security methods (part 3)
Page 94: Figure 6-4. Operation Of Authentication And Security Methods (Part 4)
Setting Up ARAP Record message in Figure 6-4. 6-10 Notify user that required dialback DIAL BACK script not found. enabled at the port? system log. Operation of authentication and security methods (part 4) Request a dialback script for the current User Name. there a dialback script for the current User...
Page 95: Modifying Dial-Back Scripts For Arap Ports
• Within command scripts, a pound-sign character followed by a space or tab indicates a comment; the server ignores the remainder of the line. • At ports that support AppleTalk Remote Access connections, the server ignores “#modem” commands. At ports that support AppleTalk Remote Access connections, only the #ARAP_modem command is processed.
Page 96: Arap Planning Considerations
= average-modem-line-speed x average-link-utilization The formula assumes that the Model 3395A server is dedicated to making ARAP connections (i.e., no other optional features are enabled on the unit), that there is no Ethernet trafﬁc to contend with, and that the processor will not be required to perform data compression activities.
Page 97: Example
4 to 5 ports running simultaneously, using all high-speed modems (14,400 b/s) and heavily utilized links. These Model 3395A servers can comfortably handle 8 to 10 ports of interactive trafﬁc. Diagnostic Cabling Chapter 2 shows the wiring diagram of the 8-wire cabling that is needed to connect a communication server serial port to a modem for ARAP applications.
Page 98 Setting Up ARAP 6-14 893-826-A...
Page 99: Chapter 7 Model 3395A Server Support For The Xremote Protocol
Chapter 7 Model 3395A Server Support for the Xremote Protocol This chapter describes the Xremote features that the communication server supports, how to set up an XDM host and remote font servers, and how to conﬁgure a communication server for Xremote support. This information is in the following sections: •...
Page 100: Configuring The Communication Server For Xremote Support
Model 3395A Server Support for the Xremote Protocol NOTE: The ﬁlenames on your host may be different. Font ﬁles reside on the font server, which can be the XDM host or another host. The default font directory is usually /usr/lib/X11/fonts. Make sure that each font subdirectory includes a fonts.dir ﬁle and a fonts.alias ﬁle.
Page 101: Defining Remote Font Servers
The XDM host can be one of the font servers, but you still have to specify it as a font server. Each time the Xterminal requests a font ﬁle, the communication server requests the ﬁle from both the primary and the secondary font servers.
Page 102: Tftp Security On Font Servers
NCD serial line, you need to ensure that tftp has access to the font ﬁle directories on the font server. In many XWindows environments, tftp runs with the secure option disabled.
Page 103: Defining Xremote Characteristics At Server Ports
You can allow a user to specify an XDM host with the XCONNECT command from the Model 3395A command interface after the user logs in to the port. The user speciﬁes a domain name or an Internet address, and the communica-tion server software searches for that XDM host.
Page 104: Establishing An Xremote Session
Internet address 129.70.110.83. If the communication server is successful, an XDM login window appears on the screen. When users at ports 11-16 log in, the Model 3395A server prompt appears on the screen. These users must enter the XCONNECT command to establish an Xremote session.
Page 105 The maximum number of sessions on a server is either 128 or 255, depending on the type of unit you have. The value must be appropriate to the quantity of data being transferred and should be twice the size of the INTERNET TCP WINDOW SIZE.
Page 106: Logging Out Of The X Session
Example In this example, a user enters the XCONNECT command with the domain name of an XDM host from the Model 3395A command interface. This is a typical example. The messages and displays on your system may be different. TS3395> xconnect 234.179.70.155...
Page 107 Configuring the Communication Server for Xremote Support set server xremote primary font server 123.123.123.123 define server xremote secondary font server 123.123.123.124 set server xremote secondary font server 123.123.123.124 #echo This script initializes ports 1-4 for Xremote. #echo To view configuration changes, use these commands:...
Page 108: Enhancing Security For Xremote Users
The DEFINE PORT XREMOTE ENABLED command enhances security at communication server ports because it causes the port to bypass the Model 3395A command interface after a user logs in to a port. You can further enhance security on communication server ports with Xremote enabled, or add...
Page 109: Login Scripts And Dial-Back Scripts
In an Xremote implementation, for example, the script could contain the XCONNECT command. When a user logs in to the port associated with this script, the script bypasses the Model 3395A command interface and automatically begins searching for the XDM host.
Page 110: Memory Requirements For Sessions And Windows
The communication server automatically opens one login window with the initial X connection when you enable Xremote, and each of these uses one session on the Model 3395A server. After login, the login window disappears, and the session it used is terminated. The software then calls up a window manager, which uses one session.
Page 111: Notes And Restrictions
X11R5 font service The font loading server provided in Multiprotocol Communication Server Software V4.4 (and later) uses TFTP so it can work with hosts running X11R4. This font loading service is independent of the new X font server available with X11R5. 893-826-A...
Page 112 Model 3395A Server Support for the Xremote Protocol 7-14 893-826-A...
Page 113: Chapter 8 Using Ccl Scripts
For non-ARAP connections (such as PPP, SLIP, and interactive), the server manager only needs to install a CCL script at a script server. A CCL script is not typically used by the remote device for these types of connections.
Page 114: Types Of Ccl Scripts Available
Model 3395A server software kits provide CCL scripts in a UNIX tar archive and on a Macintosh formatted ﬂoppy diskette. CCL scripts supplied for the Model 3395A server are listed in the information supplied with your software kit.
Page 115: Communication Server Setup
“Install CCL Scripts.” The complete directory path name where the CCL scripts are located would be: /tftpboot/CCL. In order for this change to take effect, either reinitialize the server or use a SET SERVER command as well as the DEFINE SERVER command.
Page 116: Script Server Setup
Typically, UNIX systems require that you locate all ﬁles that TFTP will transfer on the network in the TFTP “home directory” of your UNIX system or one of its subdirectories. The Model 3395A server requires that CCL scripts be in a / CCL subdirectory of the TFTP home directory.
Page 117: Installing Ccl Scripts At Script Servers
Most modem vendors also supply a CCL script when you purchase a modem. To install the CCL scripts that are supplied by the Model 3395A server on a UNIX host, complete the following steps:...
Page 118: Installing Ccl Scripts At Macintosh Computers
The Model 3395A server software kit provides many CCL scripts for use with a variety of modems that have been modiﬁed appropriately. These are listed in the information supplied with your software kit. If you need a modiﬁed CCL script that is not included in this kit, you can create the script yourself, by following the instructions described in “Modifying a CCL Script for Macintosh...
Page 119: Modifying Ccl Scripts
ﬁle that is contained in the CCL UNIX tar archive or on the Macintosh ﬂoppy diskette. You will ﬁnd an example of the Model 3395A server extension and the text for a typical CCL script at the end of this chapter. (The typical CCL script shown does not contain the Model 3395A server extensions.) Refer to the documentation supplied by the APDA division of...
Page 120 Using CCL Scripts which is followed by a modem speciﬁc “ATDT” command to dial the telephone number. This command instructs the script to jump to the portion of the script that deals with answering an incoming call. Otherwise, the script continues by executing the command on the next line and dialing the speciﬁed telephone number.
Page 121: Modifying A Ccl Script For Macintosh Computers
NOTE: The modiﬁcations described below apply to only CCL scripts that run on a remote Macintosh computer. To modify your CCL script to include Model 3395A server authentication extensions, follow these steps: Make the CCL script an editable text ﬁle.
Page 122 Scripts at Macintosh Computers.” Change the CCL script back to a noneditable ﬁle. For example, you can use the ScriptSwitcher (supplied in the Model 3395A server software kit) or ResEdit program and change the ﬁle type to mlts. 8-10 @ORIGINATE entry point.
Page 123: Modifying A Ccl Script To Use Error Correction Or Compression
V.42 LAPM error correction (independent of MNP error correction) or V.42bis compression. Copy the CCL script to the script server or unpack the CCL tar archive (if you have not already done so). Examine the CCL script using more or a text editor.
Page 124: Example Model 3395A Server Ccl Extensions
Using CCL Scripts Example Model 3395A Server CCL Extensions ------------------------------------------------------------------------------------ ! $Id: xooba.ccl, v 1.3 1993/09/01 19:47:43 sale Exp $ ! Xooba - Model 3395 Out Of Band Authentication; Copyright (C) 1993 M3 Inc. ! Uses @LABELs 100-116 and MATCHSTRs 1-13, 16...
Page 125 “\04” note “Card requires new PIN. Contact system administrator.” 3 jump 100 ! Server attempting to supply new PIN anyway. ! This is beyond the capability of a CCL to handle. @LABEL 109 note “Unable to assign new PIN. Contact system administrator.” 3 write “\04\13”...
Page 126: Example Of A Typical Ccl Script
Using CCL Scripts Example of a Typical CCL Script Global Village Teleport without Xooba mods: ! SynOptics CCL $RCSfile: GV_TP_Serial_High_Speed,v $ $Revision: 1.1 $ $Date: 1993/10/26 19:49:32 $ !SynOptics load: y secure: n answer: n answer: n originate: n originate: n ! 08/02/92 TelePort Gold draft ! 10/23/92 CTC Switched to new script written by RBH ! 10/26/92 CTC Fix for International calling(S7=60)
Page 127 jump 59 ! If speaker on flag is true, jump to label 8. Else turn off the speaker @LABEL 6 ifstr 2 8 “1” pause 5 matchstr 1 8 “OK\13\10” write “ATM0\13” matchread 30 jump 59 ! The modem is ready so enable answering, or originate a call @LABEL 8 pause 5 ifANSWER 30...
Page 128 Using CCL Scripts note “Communicating at 12000 bps.” 2 CommunicatingAt 12000 jump 15 @LABEL 18 note “Communicating at 14400 bps.” 2 CommunicatingAt 14400 jump 15 The “success” label. @LABEL 15 HSReset 0 1 0 0 0 0 ifANSWER 16 Comment out this line. pause 30 Add “jump 100”...
Page 129 ! In order to hang up quickly, we go into command state and attempt a reliable ! connection. While we are attempting to re-establish ! the connection we hit return and cancel the attempt causing the modem to ! hang up. SBreak pause 20 ! allow time for modem to return from break...
Page 130 Using CCL Scripts matchread 20 @LABEL 65 Add Model 3395 extensions exit 0 immediately after this line. ------------------------------------------------------------------------------------ 8-18 893-826-A...
Page 131: Appendix A Modem And Flow Control Operation
Dial-in Modems that Support RNG This conﬁguration is the standard for dial-in lines that support the RNG modem control signal. The server asserts the DTR modem control signal in response to the assertion of the RNG modem control signal. states that the port enters as it observes or asserts various modem signals. In the diagram, circled items indicate port states and arrows indicate activity.
Page 132: Figure A-1. State Diagram For Dial-In Modems That Support Rng
15 seconds after you start autobauding the port or logging in, or the session will be disconnected. • Server deasserts DTR if user does not log on within 120 seconds after the modem has asserted DCD. •...
Page 133: Figure A-2. State Diagram For Dial-In Modems That Do Not Support Rng
15 seconds after you start autobauding the port or logging in, or the session will be disconnected. • Server deasserts DTR if user does not log on within 120 seconds after the modem has asserted DCD. •...
Page 134: Dial-In To Remote Access Ports That Do Not Support Rng
The following list describes the sequence of signals for this application: • Server asserts DTR. • Server deasserts DTR if DCD is not asserted within 60 seconds of the assertion of DTR. • Server permits data ﬂow after the assertion of DCD.
Page 135: Dial-In/Dial-Out Modems That Support Rng
User may now dial out. • Server deasserts DTR if DCD is not asserted within 120 seconds of the formation of the server connection. The server increments a failed call count. If the failed call count reaches the value set for the server PASSWORD LIMIT characteristic, the server logs out the port and deasserts DTR.
Page 136 DCD signal must be asserted within 15 seconds after you start autobauding the port or logging in, or the session will be disconnected. • Server deasserts DTR if user does not log on within 120 seconds on a port functioning as a dial-in line. •...
Page 137: Dial-In/Dial-Out Modems That Do Not Support Rng
The following list describes the sequence of signals for this application: • Server normally asserts DTR. • If a remote connection is formed to the server, the server assumes the port is functioning as a dial-out line; otherwise, the port is assumed to be functioning as a dial-in line. 893-826-A...
Page 138 • Server deasserts DTR if user does not log on within 120 seconds of the assertion of DCD. • Server deasserts DTR if DCD is not asserted within 120 seconds of the formation of the remote server connection.
Page 139: Software Flow Control
Similarly, a port will stop or start transmitting on request of the device to which it is attached. Model 3395A servers support two modes of ﬂow control: software ﬂow control and hardware ﬂow control.
Page 140: Hardware Flow Control
OUTPUT FLOW CONTROL • SESSION • TYPEAHEAD SIZE The DEFINE/SET PORT FLOW CONTROL characteristic deﬁnes the default ﬂow control mode of operation for the server port. The possible modes of operation are: • CTS—Hardware ﬂow control • DISABLED—No ﬂow control •...
Page 141: Flow Control Operation
This message is sent when the server empties the type ahead buffer (due to operation of the session). The frequency at which the server empties the type ahead buffer is determined by the setting of the DEFINE/SET SERVER CIRCUIT TIMER characteristic.
Page 142: Hardware Flow Control Operation Using The Modem Control Signal Lines
Without ﬂow control, the only mechanism that prevents data loss at the server port is the type ahead buffer, and the only mechanism that prevents data loss at the device is some similar type of buffer or the speed at which the device is able to absorb data.
Page 143 Automatic Protocol Detection (APD). See APD feature 1-16 buffer, type ahead A-11 893-826-A cable 6-wire 2-4 8-wire 2-5 ARAP Protocol 6-13 server methods 2-3 support for modem applications 2-3 CCL scripts compatibility 1-19 definition extensions 8-5 formatting 8-7 installing at ARAP ports 6-4...
Page 144 Macintosh computer, connecting 1-13 match strings 8-9 matchread command 8-8, 8-9 memory usage, features and protocols 2-8 MNP error correction 8-2 Model 3395A server password 7-10 selecting protocols and features 2-7 setting up tasks 2-1 Xremote Protocol support 7-2 893-826-A...
Page 145 1-18 SAP protocol 1-8 scripts, CCL 1-19 SecurID authentication 6-6, 7-10, 8-2, 8-5 Serial Line Internet Protocol. See SLIP Protocol server cabling methods 2-3 server prompt xii Service Advertising Protocol (SAP) 1-8 SLIP Protocol assigning addresses 5-3 compressed 1-11...
Page 146 7-2 starting 7-1 XDM host. See X Display Manager (XDM) XON/XOFF flow control A-12 Xremote Protocol configuration 7-2 defining at server ports 7-5 enabling on the server 7-2 enhancing security 7-10 establishing session 7-6 function 1-11 logging out 7-8...

Bay Networks 3395A Configuration Manual

Preface

Chapter 1 Introducing the Communication Server

Chapter 2 Basic Setup Activities for Access Serving

Chapter 3 Setting up Basic Modem Applications

Chapter 4 Point-To-Point Protocol (PPP)

Chapter 5 Serial Line Internet Protocol (SLIP)

Chapter 6 Setting up ARAP

Chapter 7 Model 3395A Server Support for the Xremote Protocol

Chapter 8 Using CCL Scripts

Appendix A Modem and Flow Control Operation

Quick Links

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Bay Networks 3395A

Summary of Contents for Bay Networks 3395A

Table of Contents