Cabletron Systems Cabletron CyberSWITCH CSX5500 User Manual
  1. Manuals
  2. Brands
  3. Cabletron Systems Manuals
  4. Switch
  5. Cabletron CyberSWITCH CSX5500
  6. User manual

Cabletron Systems Cabletron CyberSWITCH CSX5500 User Manual

Central site remote access switch
Hide thumbs Also See for Cabletron CyberSWITCH CSX5500:
1
2
3
4
Table Of Contents
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
Table of Contents

Advertisement

Quick Links

Download this manual
C
S
ENTRAL
ITE
R
A
S
EMOTE
CCESS
WITCH
U
'
G
SER
S
UIDE
Release 7.4
Cabletron Systems
(603) 332-9400 phone
(603) 337-3075 fax
support@ctron.com

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Cabletron CyberSWITCH CSX5500 and is the answer not in the manual?

Questions and answers

Related Manuals for Cabletron Systems Cabletron CyberSWITCH CSX5500

Summary of Contents for Cabletron Systems Cabletron CyberSWITCH CSX5500

  • Page 1 ENTRAL EMOTE CCESS WITCH ’ UIDE Release 7.4 Cabletron Systems (603) 332-9400 phone (603) 337-3075 fax support@ctron.com...
  • Page 2 USER’S GUIDE Only qualified personnel should perform installation procedures. CAUTION NOTICE You may post this document on a network server for public use as long as no modifications are made to the document. Cabletron Systems reserves the right to make changes in specifications and other information contained in this document without prior notice.

  • Page 3: Fcc Notice

    TRADEMARKS Cabletron Systems, CyberSWITCH, MMAC-Plus, SmartSWITCH, SPECTRUM, and SecureFast Virtual Remote Access Manager are trademarks of Cabletron Systems, Inc. All other product names mentioned in this manual are trademarks or registered trademarks of their respective companies. COPYRIGHTS All of the code for this product is copyrighted by Cabletron Systems, Inc. ©...

  • Page 4: Doc Notice

    USER’S GUIDE WARNING: Changes or modifications made to this device which are not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment. DOC NOTICE This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications.

  • Page 5: Table Of Contents

    CONTENTS SING THIS UIDE Documentation Set 26 Guide Conventions 27 YSTEM VERVIEW The CyberSWITCH 30 Unique System Features 31 Interoperability Overview 34 Interoperability Protocols 34 Interoperability Devices 35 Encryption Overview 36 Network Layer 36 Link Layer 36 Security Overview 37 Network Interface Overview 37 System Components 38 Remote ISDN Devices 39...
  • Page 6 USER’S GUIDE System Adapters 58 Ethernet Adapters 58 Ethernet-2 Adapter 58 Ethernet-1 Adapter 58 Hardware Characteristics 59 LAN Connection 59 Basic Rate Adapters 59 BRI-4 Basic Rate Adapter 59 BRI-1 Basic Rate Adapter 60 BRI Connection 60 Primary Rate Adapters 61 The PRI-8 61 The PRI-23 61 The PRI-23/30 62...
  • Page 7 Hardware Installation 83 Overview 83 Pre-Installation Requirements 83 Selecting Slots for the Adapters 84 Adapter Settings 85 Adapter Interrupt and I/O Address Settings 86 WAN Adapters 86 DM-8 Adapter I/O Address Settings 86 DM-24 Adapter Interrupt and I/O Address Settings 87 DM-24+ and the DM-30+ Adapter Address Settings 88 Encryption Adapter Settings 89 MVIP Settings 89...
  • Page 8 USER’S GUIDE ASIC ONFIGURATION Configuration Tools 111 Overview 111 CFGEDIT 111 Executing CFGEDIT 112 Saving CFGEDIT Changes 112 Dynamic Management 112 Executing Dynamic Management 112 Utility Dynamic Management Commands 113 Saving Dynamic Management Changes 113 Using the Network Worksheets 114 Using the Configuration Chapters 114 Configuring Resources and Lines 115 Overview 115...
  • Page 9 IP Network Interfaces 133 Configuring Interfaces 133 Network Interface Configuration Elements 135 IP Network Interface Background Information 140 IP RIP and the IP Network Interfaces 145 IP RIP over Dedicated Connections 148 IP Host Operating Mode and the IP Network Interfaces 150 Using Multiple IP Addresses 150 Static Routes 152 Configuring Static Routes 152...
  • Page 10 USER’S GUIDE Configuring System Options and Information 174 Overview 174 System Options 174 Configuring System Options 174 System Options Configuration Elements 175 System Options Background Information 177 System Information 178 Configuring System Information 178 System Information Configuration Elements 178 System Information Background Information 179 Administrative Session 179 Configuring Administrative Sessions 179 Administrative Session Configuration Elements 180...
  • Page 11 Configuring Off-node Server Information 207 Overview 207 Multiple Administration Login Names 207 CSM Authentication Server 208 Configuring CSM Authentication Server 208 CSM Authentication Server Configuration Elements 209 CSM Authentication Server Background Information 209 RADIUS Server 209 Configuring a RADIUS Authentication Server 209 RADIUS Authentication Server Configuration Elements 211 RADIUS Authentication Server Background Information 211 Configuring a RADIUS Accounting Server 212...
  • Page 12 USER’S GUIDE Configuring Encryption 231 Configuration 231 Configuring an Encryption adapter 231 Configuring Security Associations and Authentication (IP Security Only) 232 Configuring Link Layer Encryption (PPP Encryption Only) 233 Encryption Configuration Elements 234 Encryption Background Information 236 IP Network Layer Encryption 236 ESP Implementation 236 IP Encryption Example 237 Authentication Headers 237...
  • Page 13 Configuring Advanced Bridging 264 Overview 264 Bridge Dial Out 264 Configuring the Device List for Bridge Dial Out 265 Spanning Tree Protocol 266 Configuring Spanning Tree Protocol 266 Spanning Tree Protocol Configuration Elements 267 Spanning Tree Protocol Background Information 267 Bridge Mode of Operation 268 Configuring the Bridge Mode of Operation 268 Bridge Mode of Operation Configuration Elements 268...
  • Page 14 USER’S GUIDE IP Filters 291 Initiating the IP Filter Configuration 292 Configuring Packet Types 292 Configuring the Common IP Portion 293 Configuring TCP 294 Configuring UDP 294 Configuring ICMP 295 Configuring Forwarding Filters 296 Configuring Connection Filters 297 Configuring Exception Filter 298 Modifying the Final Condition for a Filter 299 Applying Filters 299 Applying Filters to Network Interfaces 299...
  • Page 15 IPX Network Interfaces 325 Configuring IPX Network Interfaces 325 IPX Network Interface Configuration Elements 327 General IPX Network Interface Configuration Elements 327 RIP IPX Network Interface Configuration Elements 327 SAP IPX Network Interface Configuration Elements 328 IPX Network Interface Background Information 329 IPX Routing Protocols 330 Configuring IPX Routing Protocols 330 IPX Routing Protocol Configuration Elements 330...
  • Page 16 USER’S GUIDE Configuring SNMP 350 Overview 350 Configuring SNMP 350 SNMP Configuration Elements 352 SNMP Background Information 353 Using Cabletron NMS Systems 356 Configuring AppleTalk Routing 357 Overview 357 AppleTalk Routing Option 357 Enabling AppleTalk Routing 357 AppleTalk Routing Option Configuration Element 358 AppleTalk Routing Background Information 358 AppleTalk Ports 358 Configuring AppleTalk Ports 358...
  • Page 17 Call Restrictions 372 Configuring Call Restrictions 372 Call Restriction Configuration Elements 373 Call Restrictions Background Information 376 Bandwidth Reservation 376 Configuring Bandwidth Reservation 376 Bandwidth Reservation Configuration Elements 378 Bandwidth Reservation Background Information 379 Semipermanent Connections 379 Configuring Semipermanent Connections 379 Semipermanent Connections Configuration Elements 381 Semipermanent Connections Background Information 381 Interactions with Other Features 381...
  • Page 18 USER’S GUIDE Default Line Protocol 399 Configuring Default Line Protocol 399 Default Line Protocol Configuration Elements 400 Default Line Protocol Background Information 400 Log Options 400 Configuring Log Options 400 Log Options Configuration Elements 401 Log Options Background Information 402 Local Log File Overview 402 Syslog Server Overview 402 System Messages 404...
  • Page 19 Alternate Accesses 429 Dedicated Connections 429 Frame Relay Connections 430 PPP Link Failure Detection 430 X.25 Connections 431 X.25 and a Terminal Server Menu 432 Verifying Routing Protocols 433 Overview 433 IP Routing Operational? 433 IP Routing Over a LAN Interface 433 IP Routing Over a WAN Interface 434 IP Routing Over a WAN (Direct Host) Interface 436 IP Routing Over a WAN Remote LAN Interface 438...
  • Page 20 USER’S GUIDE Modem Callback 470 Verifying a Semipermanent Connection 471 Proxy ARP 472 ROUBLESHOOTING LCD Messages 475 Overview 475 LCD Message Groups 475 Initialization LCD Message 475 Normal Operation LCD Messages 475 Error LCD Messages 476 System Messages 480 Overview 480 Informational Messages 481 Initialization Messages 481 Normal Operation Messages 481...
  • Page 21 TFTP 568 Installation and Configuration 568 Usage Instructions 569 Carbon Copy 570 Installation and Configuration 570 Changing CARBON COPY Configuration Parameters 570 CARBON COPY Configuration Parameters for Modem Usage 571 Usage Instructions 572 Establishing a Remote Administration Session 572 Terminating a Remote Administration Session 573 Running without Carbon Copy 574 Removing Carbon Copy 575 Null Modem Connection 575...
  • Page 22 USER’S GUIDE Telnet Commands 618 Terminal Commands 620 TFTP Commands 621 Trace Commands 622 UDP Commands 623 User Level Security Commands 623 WAN Commands 624 X.25 Commands 625 System Statistics 627 Overview 627 Connectivity Statistics 627 Call Restriction Statistics 628 Call Statistics 628 Throughput Monitoring Statistics 628 AppleTalk Statistics 629...
  • Page 23 RIP Statistics 651 RIP Global Statistics 651 RIP Interface Statistics 651 Serial Interface Statistics 652 SNMP Statistics 652 TCP Statistics 655 TFTP Statistics 656 Statistics for Server or Remote initiated TFTP Activity 656 Statistics for Local or Client Initiated TFTP Activity 656 Statistics for all TFTP Activity 657 UDP Statistics 658 WAN FR_IETF Statistics 658...
  • Page 24 USER’S GUIDE System Worksheets 683 Network Topology 684 System Details 685 Resources 685 Lines 685 Accesses 686 Device Information 687 Bridging and Routing Information 688 Bridging 688 IP Routing 688 IPX Routing 689 AppleTalk Routing 690 CFGEDIT Map 691 Overview 691 Main Menu 691 Physical Resources Menu 692 Options Menu 693...

  • Page 25: Using This Guide

    SING THIS UIDE The User’s Guide is divided into the following parts: YSTEM VERVIEW We begin with an overview of bridging, routing, and specific CyberSWITCH features. Next, we provide an overview for both the system software and hardware. YSTEM NSTALLATION In this segment of the User’s Guide we provide guidelines for ordering ISDN service in the US, and a step-by-step description of installing hardware and upgrading software.

  • Page 26: Documentation Set

    USER’S GUIDE PPENDICES The User’s Guide provides the following appendices: ETWORK ORKSHEETS These worksheets are provided to help you gather pertinent information for configuring your system. We recommend that you print copies of these blank forms and fill in the appropriate information before you begin configuring your system.

  • Page 27: Guide Conventions

    The Quick Start provides abbreviated installation and configuration instructions for experienced users. Specific instructions for setting up various types of remote devices are also included. The RADIUS Authentication User’s Guide describes the setup of the RADIUS server software on a UNIX-based system.
  • Page 28 USER’S GUIDE OCUMENTATION ITLES All references to CyberSWITCH documentation titles will use the same font as normal text, but will be italicized. For example, all references to the User’s Guide will appear as: User’s Guide CyberSWITCH...

  • Page 29: System Overview

    YSTEM VERVIEW We include the following chapters in the System Overview segment of the User’s Guide. • The CyberSWITCH Provides the “big picture” view of a CyberSWITCH network. We include an overview of unique system features, interoperability, security, interfaces, system components, remote devices, and switches supported.

  • Page 30: The Cyberswitch

    SWITCH YBER The CyberSWITCH family of products represents the latest in high-speed remote access hardware and software tools. These products allow customers to implement the connectivity solution ideally suited to the needs of their business - with support over a wide range of technologies covering both permanent and on-demand connections using ISDN, analog modem, Frame Relay, dedicated lines, and X.25.

  • Page 31: Unique System Features

    NIQUE YSTEM EATURES The CyberSWITCH combines unique features that improve cost-effectiveness, reliability, and performance for wide area network connections to remote devices. These features include: • Bandwidth Agility The CyberSWITCH dynamically controls the bandwidth in use between itself and other PPP devices.
  • Page 32 USER’S GUIDE • Data Encryption The CyberSWITCH encryption option provides data encryption through the Data Encryption Standard (DES) algorithm. DES provides data security for transmissions over the WAN between encryption devices. Options are available for encrypting communications over point- to-point, frame relay, or Internet-based WANs. For more information, refer to the Overview IP Security To activate the data encryption option on the CyberSWITCH, you will need to properly install...
  • Page 33 • IP Security The CyberSWITCH encryption option implements Encapsulating Security Payload (ESP) protocol. ESP allows you to use CyberSWITCH nodes to implement a Secure Wide Area Network using the Internet as a backbone. ESP provides confidentiality of data transmissions using encryption to assure that packets intercepted during transit through the internet cannot be interpreted.

  • Page 34: Interoperability Overview

    USER’S GUIDE • User name and password • Calling Line ID (CLID) • Ethernet Address • User Authentication • Device Authentication • Connection Services Manager (CSM) • TACACS Client with Radius Server • RADIUS • Security Dynamic’s ACE/SecurID • Server Support The CyberSWITCH supports both Authentication and Accounting Servers.

  • Page 35: Interoperability Devices

    • Authentication Protocols Challenge Handshake Authentication Protocol (CHAP) Password Authentication Protocol (PAP) • Network Control Protocols (NCP) Internet Protocol Control Protocol for TCP/IP (IPCP) Internetwork Packet Exchange Control Protocol for IPX (IPXCP) Bridge Control Protocol for bridges (BCP) • Compression Control Protocol (CCP) •...

  • Page 36: Encryption Overview

    USER’S GUIDE NCRYPTION VERVIEW Cabletron’s encryption options provide two popular approaches for encrypting WAN communications, each with distinct advantages in certain applications. These options are: Network Layer Encryption and Link Layer Encryption. ETWORK AYER Cabletron’s Network Layer Encryption is an IP Security-based form of encryption. IP Security (IPSec) can potentially reside in many devices within the network.

  • Page 37: Security Overview

    Link layer encryption is independent of any network layer protocols. Since PPP provides transport of IP, IPX, AppleTalk, and other protocols, link layer encryption based on ECP provides multi- protocol encryption by default. Devices implementing it can act as routers or bridges, as long as the underlying WAN protocol is PPP.

  • Page 38: System Components

    USER’S GUIDE • WAN IP Network Interface • WAN (Direct Host) IP Network Interface • WAN RLAN IP Network Interface • WAN RLAN IPX Network Interface • WAN (UnNumbered) Network Interface The variety of network interfaces allows the installation of a wide range of devices at remote sites. As illustrated below, you can simultaneously choose bridges, routers, or host devices based on the specific remote site requirements.

  • Page 39: Remote Isdn Devices

    More detailed descriptions of system software and hardware are included in the next two chapters. The following section describes remote ISDN devices. ISDN D EMOTE EVICES The CyberSWITCH provides a centralized concentrator function for remote ISDN devices. The devices can be separated into the following categories: •...

  • Page 40: Switches Supported

    USER’S GUIDE WITCHES UPPORTED Switch types supported by the CyberSWITCH’s basic rate and primary rate ISDN adapters: Type of Switch AT&T # 4ESS AT&T # 5ESS AT&T Definity AT&T Legend NET3 NET5 NT DMS 100 NT DMS 250 NT DMS 500 NT SL-100 NI-1 TS013...

  • Page 41: Hardware Overview

    ARDWARE VERVIEW The product you have purchased is integrated on the following platforms: the CSX5500, CSX6000, and CSX7000. Through the use of adapters, these platforms support remote routing and bridging of local area networks using ISDN BRI or PRI services. Options also include V.35, RS232, encryption adapters, and Digital Modem connections.

  • Page 42: The Csx5500

    USER’S GUIDE CSX5500 Air Intake Grill 5500 Keyboard Connector (auxillary) 5500 Power & Activity Indicators LATFORM ESCRIPTION The CSX5500 is a high capacity, central site communications platform. This platform is a LAN/ WAN bridge/router built to accommodate multiple WAN technologies. It supports up to 16 ISDN BRI ports or 4 PRI ports, 2 digital modem cards, V.35, Frame Relay and Dedicated Lines services.

  • Page 43: Central Site Remote Access Switch

    The CSX5500 is a rack-mountable platform. The front panel has an air-intake grill, an auxiliary keyboard jack, and a peripheral access door, which may be latched. The activity indicators for power-on and disk activity, diskette drive, and control buttons are located behind the access door. The back of the chassis has mountings for a RS-232 serial port, and connectors for a keyboard and monitor.

  • Page 44: Platform Characteristics

    USER’S GUIDE To clean the air filter: Power down the system and disconnect the system’s power cord from the power source. Open the door located on the right side of the front chassis. Once the door is opened, you can slide the air filter out from the left side of the chassis. Once removed, clean the filter by washing it in warm water and a mild detergent.

  • Page 45: Caution For Dc-Powered Csx5500S

    DC-P CSX5500 AUTION FOR OWERED To reduce the risk of electrical shock or energy hazards: CAUTION • Connect to a reliably-grounded SELV source. • Use branch circuit overcurrent protection rated at 15A only. • Use 12 or 14 AWG conductors only. •...

  • Page 46: The Csx6000

    USER’S GUIDE CSX6000 LATFORM ESCRIPTION The CSX6000 is a high density, modular, central-site communications platform. It utilizes a built in CPU with 90 MHz Pentium processing. The CSX6000 is a rack-mountable platform. The front panel has the activity indicators for power- on and disk activity, an air-intake grill, and a peripheral access door, which may be latched or locked closed.

  • Page 47: Cleaning The Csx6000 Air Filter

    CSX6000 A LEANING THE ILTER The CSX6000 has a removable air filter. This filter is provided to ensure system cleanliness and stability in dusty operating environments. The filter is located just behind the chassis’ front panel. For best performance (and as an alternative to replacement) regularly wash the filter in warm water and a mild detergent.

  • Page 48: Caution For Dc-Powered Csx6000S

    USER’S GUIDE Environmental Characteristics Operating Temp: Operating Humidity: Operating Altitude: Non-operating Shock: Storage Temperature: Electrical AC Power Input Voltage: Voltage: Frequency: Regulatory Compliance Meets or exceeds the following: Safety: EMI: DC-P CSX6000 AUTION FOR OWERED To reduce the risk of electrical shock or energy hazards: CAUTION •...

  • Page 49: The Csx7000

    CSX7000 7000 LATFORM ESCRIPTION The CSX7000 is designed for large, central sites and Internet Service Providers. It is a high availability, remote access switch that offers modularity and flexibility for these large sites. The CSX7000 consists of a platform, processor modules, and an Environmental Management System Module, and includes environmental management of one or more platforms.

  • Page 50: Caution For Dc-Powered Csx7000S

    USER’S GUIDE Physical Characteristics Height: Width: Depth: Weight: Power Supply Specifications 350 Watt power supply; two versions with different input AC voltages: • Version 1 AC Input Voltage: AC Input Current: AC Input Frequency: • Version 2 AC Input Voltage: AC Input Current: AC Input Frequency: Regulatory Compliance...

  • Page 51: The Ne 2000-Ii (A Network Express Platform)

    NE 2000-II (A N ETWORK Front View Network Express Power & Activity Indicators Back View Line Voltage Selector Switch LATFORM ESCRIPTION The NE 2000-II platform has three slots for adapters. This platform is small enough in size to be suitable for an office environment or to fit into a communications rack. The front has a diskette drive, control buttons and an LCD display.

  • Page 52: Platform Characteristics

    USER’S GUIDE LATFORM HARACTERISTICS Physical Characteristics Height: Width: Depth: Weight: Environmental Characteristics Operating Temp: Operating Humidity: Operating Altitude: Non-operating Shock: Storage Temperature: Electrical AC Power Input Voltage: Voltage: Frequency: Regulatory Compliance Meets or exceeds the following: Safety: EMI: CyberSWITCH 107 mm (4.2 in) 437 mm (17.2 in) 411 mm (16.2 in) 9 kg (20 lb)

  • Page 53: The Ne 4000 (A Network Express Platform)

    NE 4000 (A N ETWORK Front View Front Panel Lock Network Express Back View WARNING LATFORM ESCRIPTION The NE 4000 platform has six slots for adapters. You can place the platform either on its feet or standing on a side. The front has a diskette drive, control buttons and an LCD display. The display presents continuous status and error information.
  • Page 54 USER’S GUIDE Environmental Characteristics Operating Temp: Operating Humidity: Operating Altitude: Non-operating Shock: Storage Temperature: Electrical AC Power Input Voltage: Voltage: Frequency: Regulatory Compliance Meets or exceeds the following: Meets or exceeds the following: Safety: EMI: CyberSWITCH 10 to 35 C (50 to 95 F) 80% non-condensing 3,048 m maximum (10,000 ft maximum) 30 G, 11 ms, 1/2 sinewave...

  • Page 55: The Ne 5000 Platform (A Network Express Platform)

    NE 5000 P (A N LATFORM Chassis Handle Front Panel Door Open LATFORM ESCRIPTION The NE 5000 is a rack-mountable platform which provides eight slots for adapters. The front panel has the activity indicators for power-on and disk activity, an air-intake grill, and a peripheral access door, which may be latched or locked closed.

  • Page 56: Cleaning The Ne 5000 Air Filter

    USER’S GUIDE Back Panel A/C Power In/Out NE 5000 A LEANING THE ILTER The NE 5000 has a removable air filter. This filter is provided to ensure system cleanliness and stability in dusty operating environments. The filter is located just behind the chassis’ front panel. For best performance (and as an alternative to replacement) regularly wash the filter in warm water and a mild detergent.

  • Page 57: Platform Characteristics

    Insert the clean and dry air filter back into its slot behind the chassis front. Tilt the filter forward into place until it is flush against the chassis front panel. Reinstall the two retaining screws along the top lip of the chassis. Replace the system’s top cover.

  • Page 58: System Adapters

    USER’S GUIDE YSTEM DAPTERS This section describes the following adapters which are supported by Central Site CyberSWITCH platforms: • Ethernet • Basic Rate • Primary Rate • Expander • V.35 • RS232 • Digital Modem • Encryption For adapter illustrations, refer to the to the Hardware Installation THERNET...

  • Page 59: Hardware Characteristics

    The Ethernet-1 incorporates an Intel i960 RISC processor executing at 16Mhz. When coupled with the integrated, high-performance Ethernet controller, the adapter can operate at the maximum speed of the LAN (10Mbps). This is equivalent to a packet rate of 14,800 packets per second (pps). The adapter has 2MB of DRAM, which allows it to execute sophisticated filtering and forwarding functions.

  • Page 60: Basic Rate Adapter

    USER’S GUIDE Hardware Characteristics Processor: Intel 80C186 Speed: 16 Mhz Number of Ports: Connector: RJ-45 Interface: Point-to-Point, Point-Multipoint for single device MTBF: 75000hours MTTR: 0.25hour BRI-1 B ASIC DAPTER The BRI-1 provides a single basic rate port with a standard S/T interface for attachment to an ISDN basic rate line.

  • Page 61: Primary Rate Adapters

    RIMARY DAPTERS Primary Rate is a communications service that provides up to 23 B channels for data and a 64Kbps signaling D channel (for North America and Japan), or up to 30 B channels for data and a 64 Kbps signaling D channel.

  • Page 62: The Pri-23/30

    USER’S GUIDE The PRI-23 adapter is fully compatible with our other WAN adapters and the digital modem. It has both a TDM and an MVIP bus connector to accommodate connection to these adapters. Note: The PRI-23 adapter was formerly called PRI-23/30 in releases prior to 7.0. In release 7.0 and beyond, the name PRI-23 refers to the adapter which supports up to 23 T1 channels only.

  • Page 63: Pri-8, Pri-23, And Pri-23/30 Connection

    Hardware Characteristics Processor: Intel 80C186 Speed: 16 Mhz Number of Ports: Connector: RJ-45 Interface: Point-to-Point PRI-8, PRI-23, PRI-23/30 C ONNECTION The Primary Rate adapters use four wire S/T ISDN interface. Each primary rate line will connect to a RJ-45 connector at the back of the system. Refer to the following chart for pin and signal assignments.

  • Page 64: Adapter

    USER’S GUIDE V.35 A DAPTER The V.35 adapter provides two V.35 ports. The card contains two female DB26 connectors. A V.35 adapter cable converts the DB26 connection to a standard V.35 connection. You can configure each port for DTE (external clocking) or DCE (internal clocking), and each port supports data rates from 56 Kbps to 2,048 Kbps.

  • Page 65: Rs232 Adapter

    Pin and Signal Assignments for the V.35 Connection V.35 Pin Signal Chass RS232 A DAPTER The RS232 adapter provides four RS232 ports. The card contains two female DB26 connectors. An RS232 adapter cable converts the DB26 connection to two standard RS232 connections. Using the RS232 adapter cable, DB26 port # 1 becomes RS232 port # 1A and port # 1B.

  • Page 66: Hardware Characteristics

    USER’S GUIDE ARDWARE HARACTERISTICS Number of Ports: 4 (using RS232 adapter cable) Connectors: DB26 Interface: RS232 DTE/DCE (using RS232 adapter cable) MTBF: 75000hours MTTR: 0.25hour RS232 C ONNECTION The RS232 interface is provided by an adapter cable which converts the DB26 connection on a RS232 adapter to two standard 25-pin RS232 connections.

  • Page 67: Digital Modems

    IGITAL ODEMS The CyberSWITCH supports the DM-8, DM-24, DM-24+ and DM-30+ Digital Modem adapters. These adapters allow the CyberSWITCH to receive calls from asynchronous PPP connected by modem. They also provide a vehicle for Available Digital Modem adapters include the following type and quantity of modems on a single adapter card: DM-8 DM-24...

  • Page 68: The

    USER’S GUIDE DM-8 Hardware Characteristics Processor: LSI LOGIC - LR33000RISC Speed: 25 Mhz Number of Ports: Connector: MVIP MTBF: 100,000 hours MTTR: 0.25 hours DM-24 The DM-24 adapter consists of a mother board/daughter board combination. The user- configurable switches on the adapter are located on the back side of the mother board. Note: “ON”...

  • Page 69: Encryption Adapter

    NCRYPTION DAPTER The CyberSWITCH supports the DES/RSA Encryption adapter. This adapter is available in the United States and Canada only. The DES/RSA adapter includes a high-speed encryption processor that provides data encryption capabilities to the CyberSWITCH. This processor has been implemented in a hardware LSI chip and designed into an ISA bus board and a PCMCIA card.

  • Page 70: Software Overview

    OFTWARE VERVIEW VERVIEW The system software fits into one of three categories: • system software for the System, adapter modules and administration functions • administration software that provides configuration, diagnostics and maintenance on the CyberSWITCH • system files containing configuration and operational information This chapter provides an overview for each of the above software categories.

  • Page 71: System Files

    YSTEM ILES The system files consist of the required configuration files, as well as the operational files that the CyberSWITCH maintains. All of these files may be accessed by using available administrative commands. (Refer to the Below is a brief description of the configuration and operational files. ONFIGURATION ILES The configuration files store the configuration data.

  • Page 72: Operational Files

    USER’S GUIDE atalk.nei This file contains configuration information used when AppleTalk Routing is enabled. This file also contains information regarding ports and static routes. Information from this file is configured and used only when the AppleTalk routing is enabled. platform.nei This is a text file that contains a list of platform names and the currently selected platform.

  • Page 73: User Level Security Files

    OFTWARE VERVIEW System Files EVEL ECURITY ILES As administrator, you may create a welcome banner file as well as a message-of-the-day file to display at login with user level security. Neither file should exceed the limits of 80 characters in width and 21 lines in length, and must reside in the \config directory.

  • Page 74: System Installation

    YSTEM NSTALLATION We include the following chapters in this segment of the User’s Guide: • Ordering ISDN Service Provides guidelines for ordering ISDN service in the United States. • Hardware Installation Step-by-step instructions for installing hardware components. • Accessing the CyberSWITCH Provides a description of the possible ways to access the CyberSWITCH (for diagnostic purposes or for software upgrades).

  • Page 75: Ordering Isdn Service (Us Only)

    ISDN S RDERING VERVIEW This chapter was designed to be a guideline for ordering ISDN service in the United States. For BRI ISDN Service: If you are using NI-1 lines, try using does not support EZ-ISDN Codes, try using the If your service providers does not support either types of codes, or, if you are using a non-NI-1 line, refer to Ordering BRI ISDN Lines using Provisioning...

  • Page 76: Provisioning Settings For At&T 5Ess Switches

    USER’S GUIDE If the AT&T 5ESS switch type is available, the ISDN services available will be one of the following: • NI-1 • Custom Point-to-Point If Northern Telecom DMS-100 switch type is available, the ISDN services available will be one of the following: •...

  • Page 77: At&T 5Ess Ni-1 Service

    AT&T 5ESS NI-1 S ERVICE Note that some of the elements below are set per directory number. With NI-1 Service, you will typically have two directory numbers. Provisioning Element Ordering BRI ISDN Lines using Provisioning Settings AT&T # 5ESS NI-1 Service Setting Term Type CSV ACO...

  • Page 78: At&T 5Ess Custom Point-To-Point Service

    USER’S GUIDE AT&T 5ESS C USTOM OINT Note that some of the elements below are set per directory number. With Custom Point-to-Point Service, you will have two directory numbers. Provisioning Element ROVISION ETTINGS FOR ORTHERN The ISDN services supported by Northern Telecom DMS-100 switches are as follows (in order of preference of usage): NI-1 Custom Service...

  • Page 79: Northern Telecom Dms100 Ni-1 Service

    DMS100 NI-1 S ORTHERN ELECOM Note that you must set either EKTS or ACO to yes. You may not set both of them to yes. Provisioning Element signaling TEI assignment maxkeys release key ringing indicator number of call appearances notification busy limit Ordering BRI ISDN Lines using Provisioning Settings ERVICE Northern Telecom DMS100 NI-1 Service...

  • Page 80: Northern Telecom Dms100 Custom Service

    USER’S GUIDE DMS100 C ORTHERN ELECOM USTOM Note that you must set either EKTS or ACO to yes. You may not set both of them to yes. Northern Telecom DMS100 Custom Service Provisioning Element signaling TEI assignment maxkeys release key ringing indicator number of call appearances...
  • Page 81 is ordered, the customer may be asked for the FCC registration number for the type of CSU that is being used. The CSU should support ESF framing and B8ZS line encoding. CSX5500 US Only The cabling between the CSU and the CyberSWITCH is very important, and is also where most problems occur.
  • Page 82 USER’S GUIDE What type of switch is the line connected to? For # 4ESS, what release of software is running on the switch? When the phone company installs the line, they assign it certain characteristics (sometimes called translations). These are different depending on the type of ISDN switch to which the line is attached.

  • Page 83: Cyberswitch

    ARDWARE NSTALLATION VERVIEW This chapter provides a description of the hardware installation process. It includes: • pre-installation requirements • selecting slots for adapters • setting switches • inserting adapters into backplane • connecting inter-board cables Your distributor may have already completed this adapter installation. If not, follow this chapter’s specific instructions.

  • Page 84: Selecting Slots For The Adapters

    USER’S GUIDE • Verify administration console requirements You will need an administration console to install your system. (We do not provide this.) The system supports two administration console options: a local administration console in which a keyboard and monitor are directly connected to the system, or a remote administration console in which an IBM Compatible PC is remotely connected to the system.

  • Page 85: Adapter Settings

    If you are installing WAN adapters and an Encryption adapter: Select slots for all WAN adapters as described in step a, then select the next available slot for the Encryption adapter. If you are installing WAN and DM adapters, and an Encryption adapter: Select slots for all WAN and DM adapters as described in step b, then select the next available slot for the Encryption adapter.

  • Page 86: Adapter Interrupt And I/O Address Settings

    USER’S GUIDE I/O A DAPTER NTERRUPT AND WAN A DAPTERS The WAN adapters (except for the RS-232 and V.35) use jumpers to set the interrupt and switches to set the I/O address. The following chart contains the WAN adapter’s interrupt jumper and I/O address switch settings required for each configured slot number.

  • Page 87: Adapter Interrupt And I/O Address Settings

    first DM-8 installed, 388 for the second, 390 for the third, and 398 for the fourth. Refer to the Adapter Appendix for jumper locations; refer to the following chart for the required jumper settings. DM-8 Adapter (Address) 1st adapter (address 380) 2nd adapter (address 388) 3rd adapter...

  • Page 88: And The Dm-30+ Adapter Address Settings

    USER’S GUIDE DM-24+ DM-30+ A AND THE DAPTER The DM-24+ and the DM-30+ adapters both use switches to set the interrupt, I/O address, and MVIP clock termination. Switch blocks SW1 and SW3 determine I/O address, SW2 and SW4 determine interrupts, and SW5 determines MVIP clock termination. Note: Refer to the System Adapter Appendix...

  • Page 89: Encryption Adapter Settings

    NCRYPTION DAPTER ETTINGS DES/RSA Adapter The DES/RSA adapter is available in the United States and Canada only. The adapter has a set of eight dip switches in a switch block labelled SW1. Set these dip switches to map the encryption adapter memory at D800: SW1 Memory Mapped Address D800...

  • Page 90: Additional Adapter Settings

    USER’S GUIDE DDITIONAL DAPTER ETTINGS On certain adapters, there are specific jumper settings which are independent of slot configuration. These adapters include the: • PRI-8 • PRI-23 • PRI-23/30 Refer to the System Adapters Appendix PRI-8 Line Type Settings In addition to the interrupt jumper and I/O address settings, the PRI-8 has settings specific to the PRI line type in use.
  • Page 91 PRI-23 Clock Settings In addition to the interrupt jumper and I/O address settings, the PRI-23 requires clock settings (JP4 through JP7). Refer to the following table for the correct settings. Place the jumper on the pins identified to enable the function. Jumper Jumper Setting North American...

  • Page 92: Pri-23/30

    USER’S GUIDE PRI-23/30 In addition to the interrupt jumper and I/O address settings, the PRI-23/30 requires settings for: • channel selection (T1 or E1) • MVIP bus termination • Robbed Bit Signaling (RBS) • E1/R2 signaling Refer to the following chart for correct settings. Place the jumper on the pins identified to enable the function, unless specified otherwise.

  • Page 93: Inserting The Adapters Into The Cyberswitch

    NSERTING THE DAPTERS INTO THE Now that you’ve selected the slots and set all switches and jumpers, insert the cards in this way: Remove any existing board hold-down bars/brackets to obtain clear access to the backplane ISA bus connectors. Remove the adapter hold-down screw located on the bracket of the appropriate slot, and remove the bracket.

  • Page 94: Connecting Adapter Inter-Board Cables

    USER’S GUIDE ONNECTING DAPTER NTER There are three possible cables used to connect adapters: flat, crossover, and LCD. Flat cables connect adapters with like connectors, and crossover cables connect the flat cables of adapters with differing connectors. LCD cables apply to former Network Express products (NE2000-II, 4000, 5000) only.
  • Page 95 If you have PRI-23/30 cards: Use an MVIP bus connection between cards whenever possible to achieve the best results. This applies to both: • multiple PRI-23/30 configurations • PRI-23/30 cards in combination with DM cards If you have only PRI-23 cards: Use a TDM bus between WAN cards and an MVIP bus to connect to the DM.

  • Page 96: Connecting A Wan Adapter To The Lcd

    USER’S GUIDE The following graphic illustrates a crossover cable application. The adapter with the TDM connector can be one of the following: BRI-4, PRI-8 or Expander. Pin1 Digital Modem Adapter For crossover cable applications, make absolutely sure that pin 1 (on all six connectors) is aligned so that it is closest to the front panel.

  • Page 97: Summary Of Guidelines

    CAUTION: Failure to line up triangles on LCD cable and WAN adapter’s “1” label may result in damage to the LCD. UMMARY OF UIDELINES ABLING UIDELINES Now that you have attached all the inter-board cables, refer to the that: On BRI-4, PRI-8, PRI-23 and Expander adapters, all TDM bus connectors are connected by a flat bus cable.

  • Page 98: Accessing The Cyberswitch

    CCESSING THE VERVIEW This chapter describes accessing your CyberSWITCH, which includes: • making proper connections • establishing an administration session • accessing Release Notes AKING ONNECTIONS There are a number of ways to make a connection to the system, which include: •...

  • Page 99: Null-Modem Connection To A Pc

    Turn on the CyberSWITCH by pressing the POWER-ON button. Turn on the monitor. After a few seconds, power-on initialization will begin. Proceed to Administrative Session. ODEM ONNECTION TO A If you wish to use an IBM-compatible PC to locally administer your system, you will need to establish a null-modem connection between PC and CyberSWITCH.

  • Page 100: Remote Connection Using Telnet

    USER’S GUIDE Ensure that the administration console is properly connected to the administration port on the CyberSWITCH. Plug the power cord into a grounded electrical outlet. Power on the CyberSWITCH by pressing the POWER-ON button. Power on the administration console PC. After a few seconds, power-on initialization will begin.

  • Page 101: Remote Connections (Modem To Modem)

    After you make a Telnet connection, you will be presented with a login prompt. Proceed to Establishing an Administrative For more information on Telnet, refer to the EMOTE ONNECTIONS ODEM TO To make modem-to-modem connections, you will need a remote PC and one of the following: Carbon Copy software (analog modem to analog modem connection) PPP Dial--Up Networking...

  • Page 102: Digital Modem On The Cyberswitch

    USER’S GUIDE Initiating a Call: Execute Carbon Copy’s cchelp program which invokes Carbon Copy for guest operation. Select Call CC Device <F1> from displayed menu. Supply the telephone number to the modem connected to the CyberSWITCH. Press <ENTER>. Supply password when prompted. The CyberSWITCH recognizes the default password of CC. (You may change this password through ccinstal if you so choose).

  • Page 103: Establishing An Administration Session

    STABLISHING AN DMINISTRATION If a login prompt is displayed after the power-on initialization, the system software was preinstalled. Complete the login: The login controls which class of commands the user can access. Each access level (guest or administrator) is protected by a unique login password. This allows managers to assign different responsibility levels to their system users.

  • Page 104: Accessing The Release Notes

    USER’S GUIDE CCESSING THE ELEASE The Release Notes provide release highlights and important information related to this release that should be reviewed before you begin the system’s installation and configuration. Access these notes via your Web browser: http://www.cabletron.com/support/relnotes. In addition, an abbreviated form of the release notes are in a file called REL_NOTE.TXT. To display the release notes from the CSX system, enter the following command at the system prompt: [product name]>...

  • Page 105: Upgrading System Software

    PGRADING YSTEM VERVIEW This chapter describes how to install system software onto the CyberSWITCH. Instructions are included for the following actions: • installing system software • upgrading system software • accessing Release Notes The following sections provide instructions to help you complete each of these actions. NSTALLING OFTWARE There is a possibility that your distributor has already completed software installation.
  • Page 106 USER’S GUIDE machine being installed. If you cannot determine the platform being used, temporarily configure the platform type as “CSX Series,” then call Technical Support to help you identify the platform type. If one of the following messages is displayed: Couldn’t open the file C:\SYSTEM\PLATFORM.NEI Error reading C:\SYSTEM\PLATFORM.NEI Error reading platform type: there was no “n”...

  • Page 107: Upgrading System Software

    PGRADING YSTEM OFTWARE OCAL PGRADE The system upgrade package consists of a set of 3.5" diskettes that contain the necessary upgrade software. These upgrade diskettes may be used on more than one CyberSWITCH. Once a system is upgraded, you may then upgrade any Manager diskettes purchased for the upgraded system.

  • Page 108: Handling Upgrade Warnings And Errors

    USER’S GUIDE Error reading platform type: type was not converted to an int Error reading platform type: there is no “plat name” field The diskettes you have are corrupted. Call your distributor or Technical Support for a new set of diskettes. Follow the on screen prompts for inserting diskettes # 2, # 3, and # 4.

  • Page 109: Accessing The Release Notes

    • TFTP feature is enabled • TFTP server is enabled • TFTP server is assigned ADMIN file access rights • Using the MANAGE MODE command fileattr , verify that: • ADMIN has READ/WRITE access to CONFIG files • ADMIN has READ/WRITE access to OTHER files •...

  • Page 110: Basic Configuration

    ASIC ONFIGURATION We define basic configuration as the configuration needed by most users. Basic configuration will get your system up and running. Note that not all configuration steps in this part are required. For example, if you are only using bridging, you will have no need to complete the configuration steps included in Configuring Basic IP Routing.

  • Page 111: Configuration Tools

    ONFIGURATION VERVIEW We provide the following configuration tools to set up and/or alter your configuration: • CFGEDIT, the configuration utility • Manage Mode, the dynamic management utility CFGEDIT is the comprehensive utility you use to initially set up your system; you may use it later to make configuration changes as well.

  • Page 112: Executing Cfgedit

    USER’S GUIDE CFGEDIT XECUTING After the system software has been loaded, you can start CFGEDIT by entering the following command at the system prompt as shown below: [product name]> cfgedit As long as there is no other “change” session active (CFGEDIT or Manage Mode), access is granted, and the following menu is displayed: Main Menu: 1) Physical Resources...

  • Page 113: Utility Dynamic Management Commands

    Before using Dynamic Management commands, you must first enter the special Manage Mode by typing the following command at the system prompt: >manage Once Manage Mode is entered, the prompt changes from [system name]> to [system name]: MANAGE>. While operating in Manage Mode, only Dynamic Management commands are available. All other system commands are ignored until you exit Manage Mode.

  • Page 114: Using The Network Worksheets

    USER’S GUIDE SING THE ETWORK ORKSHEETS Please take the time to fill out the requirements worksheets located in requirements worksheets are: • Network Topology Worksheet • System Details Worksheet • System Device List Worksheet(s) • Bridging/Routing Worksheets These worksheets will be helpful in configuring and managing your system. They capture important network information.

  • Page 115: Configuring Resources And Lines

    ONFIGURING ESOURCES AND VERVIEW This chapter describes the configuration of physical resources, lines and subaddresses. Resources refer to the hardware adapters that plug into the CyberSWITCH. For example, a WAN resource is the physical component (i.e., interface) for the attachment of lines (or connections) to your system.

  • Page 116: Resource Configuration Elements

    USER’S GUIDE For BRI and PRI resource types: select the proper BRI/PRI switch type for the lines you will be using. The table in the Overview identifies which switch types are available; your carrier will identify which particular switch is used in your area. If you select the NET3 or NET5 international switch, you will be prompted for the region of operation: DEFAULT AFRICA...

  • Page 117: Central Site Remote Access Switch

    EGION For NET3 and NET5 switchtypes. When configuring switches, first identify the region of operation, and then the country. OUNTRY For the NET3 and NET5 switchtypes. The country in which the system is operating. ENERIC UMBER For PRI_4ESS primary rate switch type only. The software load (generic # ) the switch is running. YNCHRONIZATION For Primary adapters only.
  • Page 118 USER’S GUIDE • 1TR6 • TS0-14 The expander resource provides additional connections to the PRI resource. It supports eight additional connections. The V.35 resource provides two standard V.35 connections when used with the V.35 adapter cable. The RS232 resource provides four standard RS232 connections when used with the RS232 adapter cable.

  • Page 119: Lines

    a three card maximum for DM-24s or DM-30s. These cards may also be combined (for example, a DM-8 along with two DM-24s), as long as you adhere to the lower card maximum per system. INES ONFIGURING INES Note: There is a preconfigured serial line named serial resource (COMMPORT).

  • Page 120: Configuring A Line For V.35 And Rs232 Resources

    USER’S GUIDE Select following line characteristics: • framing type • line coding type • T1 signaling method If you are unsure of your line's characteristics, try the following defaults: Characteristic Framing type Line coding type Signaling Method Select the correct T1 line build out value (US only). If you are using an external CSU, specify a short haul build out (line length in meters).

  • Page 121: Configuring Changes For Acommport Resource

    care that the idle character is set to a value that the receiving device will understand. For example, CISCO devices require the flag data line idle character. COMMPORT R ONFIGURING HANGES FOR A Select Change from the Data Lines menu of Physical Resources. Select ASYNCDMPORT.

  • Page 122: Line Configuration Elements

    USER’S GUIDE datalink delete Deletes an existing data link. ONFIGURATION LEMENTS A 1 to 16 user-defined character string (using all non-blank characters) that identifies the line. Each line must have a unique name. The slot number assigned to the resource that will terminate this line. The port number of the resource that will terminate this line.
  • Page 123 NI-1 and DMS100 switch types, contact your Service Provider for the number of data links required. The table below summarizes the number of data links and SPIDs that are required for each switch type. Switch Type Number of Data Links DMS100 custom NI-1 1 or 2...

  • Page 124: Directory Numbers

    USER’S GUIDE The SPID format for Northern Telecom DMS-100 NI-1 Service is: aaannnnnnnss where aaa is the 3 digit area code of the BRI line nnnnnnn is the 7 digit phone number of the BRI line ss is the SPID suffix (optional, 01 can be used for one number, 02 for the other) The SPID format for Northern Telecom DMS-100 Custom Service is: aaannnnnnnsstt where aaa is the 3 digit area code of the BRI line...
  • Page 125 NCODING For Primary Rate lines only. Line encoding specifies the nature of the signals that are used to represent binary one and zero at the physical layer. Two encoding methods are Alternate Mark Inversion (AMI) and Bipolar 8 Zero Substitution (B8ZS). AMI as the encoding scheme implies that the applications using the transmission line must guarantee a certain number of 1s in the signal to help prevent a loss of synchronization in the network.

  • Page 126: Line Background Information

    USER’S GUIDE decibel value of 0.0 (meaning no attenuation). If the distance is much closer (for example, 1000 ft.), the decibel value may be -15.0 (i.e., the signal is strong enough that it needs a certain amount of attenuation). For V.35 and RS232 lines only. This parameter differentiates the network connections from connections to local computing devices.

  • Page 127: R2 Signaling

    R2 S IGNALING R2 Signaling is a particular framing type commonly found in Korea and other locations outside of North America. With 7.3 software, this feature will be available for Korean markets only. This feature allows the CyberSWITCH to accept incoming calls and create outgoing calls over E1 lines provisioned for R2 signaling.

  • Page 128: Configuring Basic Bridging

    ONFIGURING ASIC VERVIEW This chapter provides information for configuring basic bridging features. Basic bridging configuration includes: • enabling/disabling bridging A separate chapter, Configuring Advanced bridging features. Advanced bridging features include: • bridge dial out • Spanning Tree Protocol • mode of operation •...

  • Page 129: Mac Layer Bridging Background Information

    MAC L AYER RIDGING ACKGROUND You are given the option of either enabling or disabling the MAC layer bridging feature. When bridging is enabled, the system bridges data packets to the proper destination, regardless of the network protocols being used. The default configuration is bridging enabled. Note: If the bridge and the IP options are both enabled, the system will act as a “brouter.”...

  • Page 130: Configuring Basic Ip Routing

    ONFIGURING ASIC VERVIEW This chapter provides information for configuring basic IP routing features. Basic IP routing configuration includes: • enabling/disabling the Internet Protocol (IP) When you enable this option, the system operates as an IP Router. If you also enable bridging, it will route IP packets and bridge all other packet types.

  • Page 131: Ip Option Configuration Elements

    IP Configuration Menu: IP Routing (Enable/Disable) IP Operating Mode IP Interfaces Static Routes RIP (Enable/Disable) IP Static ARP Table Entries. Isolated mode (Enable/Disable) Static Route Lookup via RADIUS (Enable/Disable) Change IP Address Pool 10) IP filters 11) DHCP 12) Security Associations Select function from above or <RET>...

  • Page 132: Ip Operating Mode Configuration Elements

    USER’S GUIDE IP Configuration Menu: IP Routing (Enable/Disable) IP Operating Mode IP Interfaces Static Routes RIP (Enable/Disable) IP Static ARP Table Entries Isolated Mode (Enable/Disable) Static Route Lookup via RADIUS (Enable/Disable) IP Address Pool 10) IP Filter Information 11) DHCP 12) Security Associations Select function from above or <RET>...

  • Page 133: Ip Network Interfaces

    internally, while all other traffic is bridged. With IP host mode, AppleTALK and/or IPX routing may also be enabled. Off-node authentication servers are available when IP is enabled regardless of the operating mode. With IP host mode, all traffic is considered bridge traffic, so no IP-specific off-node server lookups are performed.
  • Page 134 USER’S GUIDE IP RIP receive control m. IP RIP v2 authentication control n. IP RIP v2 authentication key (required only if the IP RIP v2 authentication control has been configured with a value other than “No Authentication” Note: With the Secondary IP Addressing feature, you may add more than one LAN network interface.

  • Page 135: Network Interface Configuration Elements

    If IP RIP is enabled, enter the following additional information: h. IP RIP send control IP RIP respond control IP RIP receive control k. IP RIP v2 authentication control IP RIP v2 authentication key (required only if the IP RIP v2 authentication control has been configured with a value other than “No Authentication”...

  • Page 136: Subnet Mask

    USER’S GUIDE UBNET The Subnet Mask value (the number of significant bits for the subnet mask) associated with the IP address specified for this interface. The Subnet mask is specified by entering the number of contiguous bits that are set for the mask. The mask bits start at the most significant bit of the IP address field and proceed to the least significant bit.
  • Page 137 entered for the interface. For example, if the IP address of the interface is 199.120.211.98, the portion of the menu displaying the available transmit broadcast addresses would appear as: Transmit Broadcast Address: 1) 199.120.211.255 2) 199.120.211.0 3) 255.255.255.255 4) 0.0.0.0 5) Specify Explicitly Enter Transmit Broadcast Address [default = 1]? 1 In almost all cases, the default transmit address is used (1).
  • Page 138 USER’S GUIDE IP RIP S ONTROL If IP RIP is enabled for a specific interface (LAN, WAN RLAN, and/or numbered WAN interfaces), an IP RIP send control must be selected. This element controls how IP RIP update messages are sent on an IP RIP interface.
  • Page 139 The following table provides the possible choices for IP RIP respond control. Switch Meaning Do Not Respond This switch indicates responding to no IP RIP requests at all. IP RIP v1 Only This switch indicates responding only to IP RIP requests compliant with RFC 1058.

  • Page 140: Ip Network Interface Background Information

    USER’S GUIDE The following table provides the possible choices for IP RIP v2 authentication control Type No Authentication * Simple Password * This is the default switch. IP RIP UTHENTICATION If IP RIP is enabled for a specific interface, this key is required if the following condition has been met: the “IP RIP v2 Authentication Control”...
  • Page 141 An IP Host device has only one network interface that it uses for data transfer. This network interface is assigned an IP address and belongs to one subnet. A remote IP host typically uses an ISDN line for this network interface. All data is sent through this network interface. An IP router device can have multiple network interfaces.
  • Page 142 USER’S GUIDE The WAN IP Network Interface is used to define remote IP devices (hosts or routers) that require access to the central network. This network interface represents a different subnet than that connected to a LAN network interface. The WAN IP Network Interface is used for both IP Host and PPP remote devices.

  • Page 143: Basic Ip Routing

    File Server Host 128.1.1.8 128.1.1.3 128.1.1.1 Subnet 192.2.2.0 Needed for WAN Interface Router Example 1: LAN, WAN and WAN Direct Host Interfaces In example 1, we show three different types of network interfaces and the IP subnets that are used. It should be noted that even though the CyberSWITCH only has one physical connection to the WAN, it has more than one logical connection.
  • Page 144 USER’S GUIDE Host 128.1.1.8 128.1.1.1 Host Bridge 131.3.3.2 Subnet 131.3.3.0 (Uses RLAN Interface) Example 2: LAN, WAN UnNumbered, WAN Remote LAN Interfaces In example 2, the WAN UnNumbered interface is used to eliminate an unnecessary IP Subnet. The RLAN interface is unique in that it extends the IP network over the WAN to remote devices which access the network using a bridge device.

  • Page 145: Ip Rip And The Ip Network Interfaces

    IP RIP IP N AND THE ETWORK NTERFACES Routing Information Protocol (RIP) is a protocol used to exchange routing information among IP devices. Using IP RIP can automate the maintenance of routing tables on IP devices and relieve you of having to keep the routing tables up to date manually. IP RIP determines the shortest path between two points on a network in terms of the number of “hops”...
  • Page 146 USER’S GUIDE See illustration, Example 1. Because SITE1 is the only CyberSWITCH that is connected to the logical network, it is reasonable for SITE1 to advertise the IP RIP information on Network 3 as subnetwork routes, meaning that SITE1 will always advertise the remote IP devices’ IP RIP information. Network 1 Network 2 Suppose there is a second CyberSWITCH that belongs to the logical Network 3, as shown in...
  • Page 147 i/f 1 1.0.0.1 i/f 2 2.0.0.1 i/f 1 2.0.0.2 CSX5500 i/f 2 3.0.0.2 "SITE1" 3.0.0.11 WAN RIP Interfaces: Example 2 For the WAN interface to function properly with IP RIP, additional WAN interface information is configured. The additional information required involves selecting one of the following: disabling host routes propagation (needed for Example 1), or enabling host routes propagation (needed for Example 2).

  • Page 148: Ip Rip Over Dedicated Connections

    USER’S GUIDE Currently, IP RIP is not supported across an UnNumbered WAN interface. For example, in the following network setup, SITE1 could not advertise IP RIP information across the UnNumbered WAN IP Interface to Router 2 (R2). Therefore, SITE1 would know about Networks 1 and 2, but would not learn anything about Network 3.
  • Page 149 CSX5500 1.1.1.2 1.1.1.1 Because each IP WAN network interface on the CyberSWITCH is configured for a logical IP network, various types of physical interfaces (such as V.35 and ISDN BRI) may belong to the same IP network interface. To avoid sending broadcast packets to all remote devices on an IP network, you explicitly specify with which device (only one) the system should exchange RIP packets.

  • Page 150: Ip Host Operating Mode And The Ip Network Interfaces

    USER’S GUIDE IP H PERATING ODE AND THE Only one network interface can be configured when the IP operating mode is host. The network interface configuration is not much different from the others available in router mode except that the following configuration items will not be asked: •...
  • Page 151 with a remote device on a different subnet, the local device will ARP for the remote host’s MAC address. Since routers do not forward ARP requests across subnets, ARPs sent for hosts which are not on the same physical network segment will go unanswered. The proxy ARP feature will potentially generate an ARP reply for remote hosts.

  • Page 152: Static Routes

    USER’S GUIDE When a local host ARPs for a remote host, the CyberSWITCH (with Proxy ARP enabled) determines if it provides the best route to the destination. If it does, it will reply to the ARP request with its own MAC address. •...
  • Page 153 SING ANAGE OMMANDS iproute Displays the current IP static routing configuration data. The meaning of each displayed field for a route entry is: ESTINATION IP address for the destination network or host. UBNET Subnet mask value for the destination network or host. A value of 255.255.255.255 indicates that this entry is for a specific IP host.

  • Page 154: Static Route Configuration Elements

    USER’S GUIDE IP RIP P ROPAGATION The IP RIP propagation control determines how a static route is propagated via IP RIP. The following table provides an explanation of how a IP RIP propagation control flag is assigned to a static route. Flag Propagate Always Propagate only...
  • Page 155 reachable directly and therefore no intermediate router will be used. The default metric value is 2. The range of metric values for static routes is from 0 to 15. You may manipulate the metric value to promote a certain default route, or to impede a default route from being used.

  • Page 156: Static Route Background Information

    USER’S GUIDE TATIC OUTE ACKGROUND You only need to configure Static Routing entries if you need to access a WAN network that is not directly connected to the system, or if you need to access a LAN network through a router that does not support IP RIP.

  • Page 157: Default Routes

    EFAULT OUTES ONFIGURING EFAULT OUTES The default route is a form of static route that is useful when there are a large number of networks that can be accessed through a gateway. However, care must be taken when specifying a default route.

  • Page 158: Routing Information Protocol (Rip) Option

    USER’S GUIDE connection is over a WAN. You may want to assign this route a high number of hops to limit toll charges, in case there is a local route that could be used. IP RIP P ROPAGATION ONTROL This controls how a default route is propagated via IP RIP. The following table provides an explanation of how a IP RIP propagation control flag can be assigned to a default route.

  • Page 159: Ip Rip Configuration Elements

    SING ANAGE OMMANDS iprip This command tells you if IP RIP is currently enabled or disabled. iprip off If IP RIP is enabled, this command allows you to disable IP RIP. iprip on If IP RIP is disabled, this command allows you to enable IP RIP. IP RIP C ONFIGURATION LEMENTS...

  • Page 160: Security And Encryption Options

    ECURITY AND NCRYPTION The CyberSWITCH product allows you to decide the extent and type of security for your network. This security may consist of standard security options, or it could include data encryption through the purchase of the CyberSWITCH encryption option. The CyberSWITCH supports standard security options which are independent of the encryption process.

  • Page 161: Security Overview

    ECURITY VERVIEW VERVIEW Security is an important issue to consider when you are setting up a network. The CyberSWITCH provides several security options, and this chapter describes the “Big Picture” of how these options work and interoperate. This information will better equip you to proceed with the following phases of security configuration: configuring the level of security configuring system options and information...

  • Page 162: System Options And Information

    USER’S GUIDE Multilevel security provides both user level security and device level security for local (on-node) database, Radius, and CSM. This provides added protection; first, a device will be authenticated, and then a particular user (on the device) will be authenticated. The feature also allows the configuration of an on-node device database at the same time as an off- node device database.

  • Page 163: User Level Databases

    These environments include an on-node database and a variety of off-node, central authentication databases. The on-node database contains a list of valid devices that can access the network resources connected to the CyberSWITCH. This list of valid devices is configured and stored locally.

  • Page 164: Configuring Security Level

    ONFIGURING ECURITY VERVIEW The CyberSWITCH offers the following levels of network security: no security, device level security, user level security, or device and user level security. The network security level determines the type of security you want activated on your network. As the name implies, no security is used if you configure your network security level as “no security.”...
  • Page 165 CSX5500 ISDN Plan what level(s) of security you will use, and configure them now. You will later assign and configure authentication databases to the network security level you configure and to administration sessions. The table below identifies the types of authentication databases that are applicable (specified by yes) for each type of network security and for administration sessions.

  • Page 166: No Security

    USER’S GUIDE ECURITY ONFIGURING ECURITY CFGEDIT SING To begin the configuration of an on-node database or any of the Security Database options, start at the main menu and progress through the screens as shown below: Main Menu: 1) Physical Resources 2) Options 3) Security 4) Save Changes...

  • Page 167: Device Level Security

    EVICE EVEL ECURITY ONFIGURING EVICE EVEL CFGEDIT SING Select Device Level Security from the Security Level Menu. If you need guidance to find this menu, refer to the instructions provided in the Refer to the chapter Configuring Device Level Databases device level database.

  • Page 168: Overview Of Device Authentication Process

    USER’S GUIDE VERVIEW OF EVICE UTHENTICATION When a remote device connects, the CyberSWITCH negotiates the required authentication. It then collects the information which is used to identify and authenticate the remote device. The system compares this collected information against information maintained in a device database. If the information collected from the remote device matches the information found in the database, the connection is valid and the device is allowed access to network resources.

  • Page 169: Authentication Using A Security Token Card

    The following sections provide information regarding authentication via SecurId cards, system requirements for user level security, and the authentication process with user level security. UTHENTICATION SING A ECURITY The CyberSWITCH supports interactive, user level security through the TACACS or ACE server programmed for use with security token cards.

  • Page 170: System Requirements

    USER’S GUIDE CSX5500 YSTEM EQUIREMENTS When providing user level security for the CyberSWITCH, you must establish Remote User-to- LAN Connectivity (like terminal servers). You may not establish LAN-to-LAN Connectivity as routers usually do. There are two different ways of establishing Remote User-to-LAN Connectivity: •...

  • Page 171: Authentication Process With User Level Security

    UTHENTICATION ROCESS WITH Making a Telnet Connection In order to access user level security, you must first establish a Telnet connection to the CyberSWITCH. Depending upon your application, the prompts or procedures may vary; however, the information you need to provide is as follows: •...

  • Page 172: Device And User Level Security

    USER’S GUIDE TACACS: with PINPAD SecureID Card Enter login Id (remote machine). Enter password onto SecurID card, which generates a dynamic password. Enter dynamic password onto remote machine’s password prompt. Press <RET> key when prompted for dynamic password. with non-PINPAD SecureID Card Enter login Id (remote machine).

  • Page 173: Device And User Level Background Information

    EVICE AND EVEL ACKGROUND Multi-level security (device and user level) provides you with increased security options for your network. This feature supports device level security for all remote devices. User-level authentication can be performed on top of device level authentication for IP, IPX, AppleTalk and bridge users.

  • Page 174: Configuring System Options And Information

    ONFIGURING YSTEM VERVIEW System options include security options for remote devices. The security required for the authentication of each device will depend on the information you have entered for that device. System information includes a system name, system password, and a system secret. These values are required only if there are remote devices on the network that require this information for system validation.

  • Page 175: System Options Configuration Elements

    System Options Menu: PPP Link: 1) PAP Password Security 2) CHAP Challenge Security HDLC Bridge Link: 3) Bridge MAC Address Security IP Host (RFC 1294) Link: 4) IP Host Id Security ISDN: 5) Calling Line Id Security Id of the Option to change or <RET> for previous menu: Note: It is not necessary to disable a security option, even if you are not using the option.
  • Page 176 USER’S GUIDE Authentication Authentication Note: If a system is brought on line with a device that has a required Calling Line Id that is a duplicate of another device’s Calling Line Id, and no other type of authentication is used, a warning message is logged at initialization.

  • Page 177: System Options Background Information

    The above process applies to the system’s authentication of the remote device. It is also possible that the remote device may wish to authenticate the system itself, a desire that is also negotiated during the LCP initialization of the link. Enabling CHAP via configuration also permits the system to agree to be authenticated via CHAP during LCP negotiation.

  • Page 178: System Information

    USER’S GUIDE The following table summarizes the identifying and authenticating information used by each remote device type to connect to the system: Device Type HDLC Bridge (MAC Layer Bridge) IP Host (with RFC 1294 encapsulation) YSTEM NFORMATION ONFIGURING YSTEM NFORMATION CFGEDIT SING Select option (2), System Information from the System Options and Information menu.

  • Page 179: System Password

    YSTEM ASSWORD The System Password is a user-defined password that is only required if there are remote devices on the network that require this information for system validation. This is passed in the password field during PAP negotiation. This password can be from 1 to 17 ASCII characters in length. YSTEM ECRET The System Secret is a user-defined shared secret that only needs to be configured if there are...

  • Page 180: Administrative Session Configuration Elements

    USER’S GUIDE You may specify an authentication database location for administrative sessions that is different from the user authentication database location. Note: If you select RADIUS, TACACS, or ACE, you must be sure that the selected server is active before you initiate an administrative session. From the Administrative Session menu select (2) Session Inactivity Timeout.

  • Page 181: Administrative Session Background Information

    IMEOUT ALUE Allows you to terminate login sessions after the configured “time-out value” length in time. If “0” is entered, the value will be disabled. The time-out will be enabled by entering a number greater than 0. The range is from 0 to 1,440 minutes. UMBER OF ESSIONS This value disables, or limits the number of Telnet administrative sessions allowed.

  • Page 182: Emergency Telnet Server Port Number Background Information

    USER’S GUIDE MERGENCY ELNET ERVER There are some Telnet client programs that do not clear Telnet connections when terminating Telnet sessions. Since they do not clear the Telnet connections, those connections stay alive and soon all Telnet sessions are used up. Once this happens, no more Telnet sessions can be established until the inactivity timer of one of the sessions expires.

  • Page 183: Configuring Device Level Databases

    ONFIGURING EVICE VERVIEW Device level security is an authentication process between internetworking devices, in which authentication takes place automatically. Both bridges and routers support this form of security.Device level security is available to the network locally through the On-node Device Database or remotely through the Connection Services Manager (CSM) or RADIUS Server.

  • Page 184: On-Node Device Entries

    USER’S GUIDE Device Level Databases Menu: 1) On-node Device Database (Enable/Disable) 2) On-node Device Entries 3) Off-node Device Location Select function from above or <RET> for previous menu: 1 Select option (1) On-node Device Database from the Device level Databases menu. The following screen will be displayed.

  • Page 185: Configuring Device Level Databases

    The Device Table menu will then be displayed similar to the example screen shown below: Device Table Menu: (Device = "DAN") ISDN Frame Relay X.25 Digital Modem Authentication AppleTalk Bridge 10) Compression 11) Encryption Select function from above or <RET> for previous menu: 1 We suggest that you first enter the information pertaining to the device’s access type(s).
  • Page 186 USER’S GUIDE For Frame Relay devices: Note: You must first configure the Frame Relay Access. Instructions for configuring the access is found in the chapter. Begin by selecting Frame Relay from the Device Table Menu. A screen similar to the following is displayed: Device Frame Relay Menu: (Device = "DAN") 1) PVC Information...
  • Page 187 If you select PVC, the list of available PVCs are displayed. The LCN of the selected PVC and the X.25 Access Name are stored in the Device Table to bind the device to a particular virtual circuit configuration: Select the type of the Virtual Circuit 1) Permanent Virtual Circuit (PVC) 2) Switched Virtual Circuit (SVC) Current Permanent Virtual Circuits defined for X.25 Access #1, ’VMAX25’:...
  • Page 188 USER’S GUIDE Enter the authentication information needed. To begin entering the information, select Authentication from the Device Table Menu. The following menu will then be displayed: Device Authentication Menu: (device = "DAN") PPP: 1) PAP Password 2) CHAP Secret 3) Outbound Authentication 4) User Level Authentication IP Host (RFC 1294): 5) IP Host Id...
  • Page 189 If your device requires an IP address, enter it now. Options are: • none for Direct Host or WAN links that plan to use dynamic address allocation • 0.0.0.0 for unnumbered WAN links • IP address # for traditional numbered WAN links Enable or disable IP routing for this device.
  • Page 190 USER’S GUIDE b. Press 2 at the above menu to enter the device’s AppleTalk address. If the device is over an unnumbered link, enter 0.0. If the device is over a MAC dial-in port, you may either enter an address, or leave the value at “none”. Press 3 at the above menu, then follow the on-screen instructions to configure whether or not dial out to this device is allowed for this device.

  • Page 191: On-Node Device Database Configuration Elements

    SING ANAGE OMMANDS device Displays the current Device Table. Included in this display is each device’s ID and name. After the list has been displayed, you may enter a specific device Id to display detailed information for that device. device add Allows you to add a device entry to the Device Table.
  • Page 192 USER’S GUIDE • IP Host (RFC 1294) RFC 1294 provides a simple security exchange at connection time, along with an encapsulation method for IP datagrams. Only used for Dial-Out. This value represents the throughput on a B-channel or pre-ISDN link connecting the CyberSWITCH to a device.

  • Page 193: Profile Name

    HONE UMBER This configuration element is required when the Dial-Out feature is used. The dial-out capability allows the CyberSWITCH to initiate connections to PPP or HDLC devices located at remote sites. A phone number must be defined for each remote device that will be dialed. This number includes any prefix digits, area codes, or extensions as required to dial the destination device.

  • Page 194: Digital Modem Configuration Elements

    USER’S GUIDE X.121 ADDRESS If you choose an SVC for your virtual circuit, you must provide the X.121 address of the remote device you are currently adding to the Device Table. (The X.121 addresses for both local and remote devices are provided by your X.25 provider.) IGITAL ODEM ONFIGURATION...
  • Page 195 UTBOUND UTHENTICATION This parameter allows you to enable or disable PPP outbound authentication procedures. When PPP outbound authentication is enabled, PPP (CHAP or PAP) authentication is required at both ends of the connection. When PPP outbound authentication is disabled, the CyberSWITCH does not authenticate the remote device when dialing out.

  • Page 196: Ip Information Configuration Elements

    USER’S GUIDE compare the incoming CLID with the value configured in the On-node Device Table. If the numbers are identical the connection will be established. Otherwise, the system will reject the incoming call. When two remote devices share the same line (a single point-multipoint ISDN line), they can also configure the same CLIDs if they both also have some other type of authentication configured (for example, PAP, CHAP, or Bridge MAC Address Authentication).

  • Page 197: Appletalk Information Configuration Elements

    IPX E WAN N XTERNAL ETWORK Specifies a user-configurable IPX external network number on the WAN (necessary with CSX200 and CSX400 platforms only). This parameter can be a hexadecimal value from 1 to 4 bytes in length.The default value is none. WAN P Specifies an active WAN peer (receives and sends information at all times) or a passive WAN peer (receives/sends information only when a connection is up).

  • Page 198: Bridge Information Configuration Elements

    USER’S GUIDE RIDGE NFORMATION ONFIGURATION IP (S ETWORK UMBER If the CyberSWITCH uses an IP RLAN interface to connect to a remote bridge, you must provide this information. This address associates the bridge with the IP network to which it connects. Enter this address using dotted decimal notation.

  • Page 199: Compression Configuration Elements

    OMPRESSION ONFIGURATION LEMENTS EVICE OMPRESSION TATUS Allows you to enable or disable compression for the individual device. If this option is enabled, then the CyberSWITCH will negotiate compression with this device. Otherwise, the system will not negotiate compression with this device, leaving the compression resources available for other devices.
  • Page 200 USER’S GUIDE The following table identifies the configuration requirements for possible security options for remote bridge devices. Security Mode Configuration Calling Line Id Bridge Ethernet Address Enabled Disabled Disabled Enabled Enabled Enabled *Conditionally Required means you must specify at least one of either the Calling Line Id or the Ethernet Address.
  • Page 201 IP Routing with IP Host Devices (RFC1294) To allow an IP Host device to connect to the CyberSWITCH, you must have IP Routing and IP Host Security enabled. For each IP Host device using this type of connection, you may need to enter the device’s IP address, IP Host Id, and Calling Line Id.
  • Page 202 USER’S GUIDE Bridging with PPP Bridge Devices (Using BCP) To allow a PPP Bridge device to connect to the CyberSWITCH, you must have Bridging enabled. For each PPP Bridge device using this type of connection, you may need to enter a PAP Password or a CHAP Secret, and a Calling Line Id.

  • Page 203: Off-Node Device Database Location

    The following table identifies the configuration requirements for possible security options for IP Routing with PPP Bridge Devices. Security Mode Configuration Calling Line Id PAP or CHAP Security Disabled Enabled Enabled Enabled Enabled Disabled Note: If CHAP Security is enabled, and Outbound Authentication has not been disabled, a CHAP Secret must be entered for both the remote device and for the CyberSWITCH.

  • Page 204: Off-Node Device Database Location Configuration Elements

    USER’S GUIDE NODE EVICE ATABASE ATABASE OCATION The database location for device level security. The choices for the off-node database location are None (Use on-node), CSM, or RADIUS. Choosing an off-node database location enables the particular database. Note: Enabling CSM as the off-node device database location automatically enables CSM as a Call Control Manager.

  • Page 205: Configuring User Level Databases

    ONFIGURING VERVIEW User level security is an authentication process between a specific user and a device. The authentication process is interactive; users connect to a terminal server and need to interact with it in order to communicate with other devices beyond the server. The CyberSWITCH supports user level security through the RADIUS, TACACS, or ACE Server.

  • Page 206: User Level Authentication Database Location Configuration Elements

    USER’S GUIDE EVEL UTHENTICATION ATABASE OCATION The database location for user level security. Choices are: RADIUS Server, TACACS Server, or ACE Server. ATABASE ELNET You must also specify the Telnet port number to be used for authentication with the selected server. This port number is a unique number that identifies the server.

  • Page 207: Configuring Off-Node Server Information

    ONFIGURING VERVIEW This chapter provides information on configuring the CyberSWITCH so that it will be able to communicate with an off-node server. This communication may be for Authentication or Accounting purposes. The off-node servers supported are: • Connection Services Manager (CSM) •...

  • Page 208: Csm Authentication Server

    USER’S GUIDE CSM A UTHENTICATION CSM A ONFIGURING UTHENTICATION Notes: In order for the CyberSWITCH to reference CSM for device authentication, the following configuration steps must first be completed: • IP Routing must be enabled. If you try to enable CSM before IP routing has been enabled, an error message will be displayed.

  • Page 209: Csm Authentication Server Configuration Elements

    CSM A UTHENTICATION ERVER TCP P UMBER The TCP port number used by CSM. Note that you can assign a device-defined port number, but that the CSM TCP port number must be entered identically on both the CyberSWITCH and CSM. CSM A UTHENTICATION ERVER...
  • Page 210 USER’S GUIDE For Device Level Security: • Specify Device Level Security (from Main Menu, Security, Security Level) • Select RADIUS from Off-Node Device Database Location (Main Menu, Security, Device Level Databases) For User Level Security: • Select User Level Security (from Main Menu, Security, Security Level) •...

  • Page 211: Radius Authentication Server Configuration Elements

    SING ANAGE OMMANDS radius Displays the current RADIUS server configuration data. radius change Allows you to change the current RADIUS server configuration data. After entering the radius change command, you will be prompted for the configuration elements you want to change.

  • Page 212: Configuring Aradius Accounting Server

    USER’S GUIDE The Remote Authentication Dial-In User Service (RADIUS) is a central database supported by the CyberSWITCH. RADIUS operates using two components: an authentication server and client protocols. The RADIUS Server software is typically installed on a UNIX-based or NT-based system that is local to the network.

  • Page 213: Configuring Off - Node Server Information

    RADIUS ACCOUNTING Menu: Primary (Master) Server IP Address Shared Secret UDP Port Number Secondary (Slave) Server Access Request Retry Number of Access Retries Time between Retries RADIUS Accounting Server Options: 1) Primary (Master) Server 2) Secondary (Slave) Server 3) Miscellaneous Information Select function from above or <RET>...

  • Page 214: Radius Accounting Server Configuration Elements

    USER’S GUIDE radius Displays the current RADIUS server configuration data. radacc Allows you to change the current RADIUS Accounting Server configuration data. After entering the radacc command, you will be presented with a RADIUS Accounting Menu similar to that in CFGEDIT. RADIUS A CCOUNTING ERVER...

  • Page 215: Verification And Diagnosis

    ERIFICATION AND IAGNOSIS After configuring the RADIUS Accounting Server, connect via a dial-in client, and then disconnect. On the RADIUS Accounting Server, verify that it has received the Accounting Start and Stop message. If it has not, check the CyberSWITCH system log. If there is a message that no response was received from the Accounting Server, then verify your configuration.

  • Page 216: Radius Type Configuration Elements

    USER’S GUIDE SING ANAGE offnode Allows you to change current settings for off-node server options. You may use this command to enable the RFC2138 compliance feature. RADIUS T ONFIGURATION RADIUS T Specify the type of RADIUS implementation: Cabletron implementation or RFC2138 implementation.

  • Page 217: Dynamic Device Configuration Elements

    SING ANAGE offnode Allows you to change current settings for off-node server options. You may use this command to enable and configure the dynamic device option. YNAMIC EVICE ONFIGURATION EVICE A 1 to 17-character, user-specified name. Any name may be entered. For dynamic devices, this name will not be used, but it must be entered to allow for creation of a device.

  • Page 218: Tacacs Authentication Server

    USER’S GUIDE If a specific set of parameters is required for a particular device, configure the specific device independently, either locally (through the on-node device list) or in CSM. The CyberSWITCH will look at the configured device table first before proceeding to the dynamic device default configuration.

  • Page 219: Tacacs Authentication Server Configuration Elements

    SING ANAGE OMMANDS tacacs Displays the current TACACS off-node server configuration data. tacacs change Allows you to change the current TACACS off-node server configuration data. After entering the tacacs change command, you will be prompted for the configuration elements you want to change.

  • Page 220: Ace Authentication Server

    USER’S GUIDE ACE A UTHENTICATION ACE A ONFIGURING AN UTHENTICATION Note: In order for the CyberSWITCH to reference an ACE server, the following configuration steps must first be completed: • basic IP routing information must be configured for ACE • a LAN Network interface must be configured appropriately for the IP network connected to each LAN port on the system •...

  • Page 221: Alternate Method Of Configuration

    b. Specify the time between retries. Choose between the DES or SDI Encryption Method. The algorithm you select must be compatible with the ACE Server setup. d. You will also be prompted for a source IP address. This source IP address should be a valid address for the CyberSWITCH.

  • Page 222: Ace Authentication Server Background Information

    USER’S GUIDE IME BETWEEN CCESS EQUEST The time between Access Request Retries sent from the system. The initial default value is 1 second. The acceptable range is from 1 to 10,000. NCRYPTION ETHOD This option should always indicate SDI, and is not currently configurable. If the ACE Server is not also configured to use SDI encryption, then any authentication attempts via the system will fail.

  • Page 223: Configuring Network Login Information

    ONFIGURING ETWORK VERVIEW The CyberSWITCH offers a number of configurable options to control the login process for this system and for off-node authentication servers. These options include: • general network login configuration • network login banners • login configuration specific to RADIUS •...

  • Page 224: Authentication Timeout

    USER’S GUIDE Telnet session for authentication. Item (11), of security for this special connection. See following description. UTHENTICATION IMEOUT Note: If using the Security Dynamics Ace Server, modify the timeout value to be greater than the change frequency value of the SecurID cards. Refer to the Security Dynamics documentation for more information on this change frequency value.

  • Page 225: Network Login General Configuration Background Information

    ETWORK OGIN ENERAL Allows you to change the network login prompts. These include the prompts for: • login ID • dynamic password • user password • old password, new password • passcode You may also specify the number of login attempts, password change attempts and the amount of time in seconds before an authentication timeout.

  • Page 226: Network Login Banners Background Information

    USER’S GUIDE netlogin change Allows you to change the current network login configuration data. After entering the netlogin change command, you will be prompted for the type of login configuration information you want to change. The prompt will resemble the CFGEDIT screen in which this information was originally configured.

  • Page 227: Login Configuration Specific To Radius Server Background Information

    RADIUS Device Login Prompt Order Menu: Current Prompt Order is: ----------------------------------------------------------------- First Prompt is LOGIN ID PROMPT (fixed) Second Prompt is USER PASSWORD PROMPT 1) Prompt Order Select function from above or <RET> for previous menu: 1 Prompts available for Second Prompt 1) USER PASSWORD 2) DYNAMIC PASSWORD Select function from above or <RET>...

  • Page 228: Login Configuration Specific To Tacacs Server

    USER’S GUIDE The password control character is a key sequence you specify to switch between the login mode and the change password mode. In order to enable this feature for the general user, you need to configure this password control character. OGIN ONFIGURATION TACACS S...

  • Page 229: Login Configuration Specific To Tacacs Server Background Information

    TACACS Return Code Messages Menu: RESPONSE REASON ----------------------------------------------------------------- 1) ACCEPTED(1) NONE(0) 2) ACCEPTED(1) EXPIRING(1) "**** Password about to expire ****" 3) ACCEPTED(1) PASSWORD(2) "**** Password expiration imminent ****" 4) REJECTED(2) NONE(0) 5) REJECTED(2) EXPIRING(1) "**** Please change PIN ****" 6) REJECTED(2) PASSWORD(2) "**** Device/Password invalid ****" 7) REJECTED(2) DENIED(3) Select function from above or <RET>...
  • Page 230 USER’S GUIDE TACACS may provide return code messages upon user login. You may customize these messages through CFGEDIT. The default messages are as follows: If the login process was successful, but the user password is about to expire, one of the following messages is displayed: •...

  • Page 231: Configuring Encryption

    ONFIGURING NCRYPTION VERVIEW The CyberSWITCH encryption option provides 56-bit data encryption through two different implementations: • IP (or Network Layer) Security • PPP (or Link Layer) Encryption These implementations use the Data Encryption Standard (DES) algorithm. DES provides data security for transmissions over the WAN between encryption devices, either through PPP or frame relay connections, or over unprotected media, such as the Internet.

  • Page 232: Configuring Security Associations And Authentication (Ip Security Only)

    USER’S GUIDE ONFIGURING ECURITY SSOCIATIONS AND IP Security encryption configuration consists of the following elements: • setting up security associations for Encapsulating Security Payload (ESP) • optionally specifying keys for Authentication Headers (AH) Security Associations are necessary for IP networks that plan to use an untrusted/unprotected media, such as the Internet.

  • Page 233: Configuring Link Layer Encryption (Ppp Encryption Only)

    Note: For the Final Destination and Source IP addresses, you may enter the entire address (i.e., 197.1.2.2 vs. 197.1.0.0); however, the subnet mask will determine how many significant bits the system will actually consider. The next series of questions pertain to the Authentication Header. To implement an Authentication Header, select Authentication using MD5, and provide a shared secret authentication key.

  • Page 234: Encryption Configuration Elements

    USER’S GUIDE Device PPP Encryption Menu 1) Decryption/Encryption 2) Proprietary Key Exchange 3) Decryption key 4) Encryption key Id of parameter to change or <RET> to cancel: Enable the Decryption/Encryption feature. (This selection is a toggle switch). Configure encryption key implementation: •...
  • Page 235 associations for incoming and outgoing packets. The incoming packet security association on site “A” must match the outgoing packet security association on site “B” and vice versa. IP A INAL ESTINATION DDRESS IP address using dotted decimal notation that specifies the remote (“destination”) trusted network or host.

  • Page 236: Encryption Background Information

    USER’S GUIDE ECURITY ARAMETER NDEX A 32-bit number (eight hexadecimal digits) used to identify the security associations between CyberSWITCH nodes. The SPI must be greater than or equal to 00000100hex. The SPI is transmitted in the Encapsulating Security Payload (ESP) header and used by the peer CyberSWITCH node to identify the necessary information to decrypt the ESP payload.

  • Page 237: Ip Encryption Example

    The peer must also have corresponding Security Associations. (Note that the gateway address and the source/destination subnet addresses are switched to reflect the peer subnet.) Security Associations between peer CyberSWITCH nodes are identified by a Security Parameter Index (SPI). The SPI is transmitted in the ESP header and is used by the peer node to identify the necessary information to decrypt the ESP payload.

  • Page 238: Link Layer Encryption

    USER’S GUIDE On the CyberSWITCH, AH is added to a packet after ESP application. When a remote node receives the encrypted packet, it first processes the authentication information in the AH. If the AH information is valid, the node proceeds to decrypt the packet. If authentication fails, the packet is dropped.

  • Page 239: Automated Key Exchange

    UTOMATED XCHANGE The CyberSWITCH’s automated key exchange uses a proprietary protocol defined for use with Cabletron remote access products. This proprietary protocol exchanges information during ECP (Encryption Control Protocol) negotiation to produce proper keys. To use automated key exchange, the feature must be enabled for each device, and the DES/RSA resource must be properly configured and installed on the CyberSWITCH.

  • Page 240: Multiple Mac/Ip Addresses

    USER’S GUIDE MAC/IP A ULTIPLE DDRESSES For backup purposes, you may want to consider using the multiple MAC or feature to set up redundant configurations to use in conjunction with encryption. In such configurations, you must be sure that all CyberSWITCH nodes have the same or comparable Security Associations.

  • Page 241: Advanced Configuration

    DVANCED ONFIGURATION We define advanced configuration as the configuration you may use to fine tune your system, or to configure options that are not necessarily needed by the majority of users. For example, to configure an alternate access (an alternate to ISDN access), this would be considered advanced configuration.

  • Page 242: Configuring Alternate Accesses

    ONFIGURING LTERNATE VERVIEW An access defines the connection details the CyberSWITCH uses to reach the network. The default access is ISDN access, a switched-network access. Configurable accesses are required for network connections, and for packet-switched network connections including connections. Refer to the following information for the alternate access you wish to add. EDICATED CCESSES ONFIGURING A...

  • Page 243: Dedicated Access Configuration Elements

    EDICATED CCESS ONFIGURATION INES The line that will be used for the dedicated access. A dedicated access can be defined on either a BRI, a PRI, a network V.35, or a network RS232 line. EARER HANNELS For BRI and PRI lines only. Also referred to as B channels. B channels can carry voice or data in either direction.

  • Page 244: Accesses

    USER’S GUIDE To define a Dedicated Access, you must select a previously defined line. Then, input the details required to use the line. Notes: To achieve maximum bandwidth, you could theoretically dedicate two T1s to one remote device (3072 Kbps). Any configuration above this maximum bandwidth is not supported. Keep in mind that you can aggregate a maximum of 32 connections.

  • Page 245: Lapb Configuration Information

    Enter the X.121 address of the local DTE (the CyberSWITCH). Select the data rate for the line. Enter a list of bearers (a channel map). For PRI lines, the range of channels is from 1 to 24. For BRI lines, the range of channels is from 1 to 2. Separate bearer channels by commas, and/or list a range by using a dash (-).
  • Page 246 USER’S GUIDE Configure the X.25 Reliability, Windows, and Acknowledgment Facilities. Select the type of sequence numbers to be used for X.25: regular or extended. Extended sequence numbering allows for packets to be assigned sequence numbers from 0-127 (modulo 128), as opposed to 0-7 (modulo 8). b.

  • Page 247: Permanent Virtual Circuit Information

    ERMANENT IRTUAL IRCUIT NFORMATION Note: SVCs and PVCs are specified in the X.25 Logical Channel Assignments section of the configuration. However, PVCs require additional configuration, which is done in this section. Follow the onscreen instructions to begin the configuration of a virtual circuit. Note: Default values are configured for each PVC when an access is newly created.

  • Page 248: Lapb Configuration Elements

    USER’S GUIDE EARER HANNELS A list of bearers (a channel map) that will be used on the line associated with this X.25 access. For PRI lines, the range of channels is from 1 to 24.For BRI lines, the range of channels is from 1 to 2. Separate bearer channels by commas, and/or list a range by using a dash (-).

  • Page 249: Access Configuration Elements

    X.25 A CCESS ONFIGURATION LEMENTS The X.25 Access configuration elements are divided into seven different categories: • X.25 Logical Channel Assignments • X.25 Timer Configuration • X.25 Reliability, Windows, and Acknowledgment Facilities • X.25 Quality-of-Service Facilities • X-25 Charging -Related Facilities •...
  • Page 250 USER’S GUIDE X.25 R ELIABILITY INDOWS X.25 S EQUENCE The type of sequence numbers to be used for X.25; regular or extended. Extended sequence numbering allows for packets to be assigned sequence numbers from 0-127 (modulo 128), as opposed to 0-7 (modulo 8). The default value is modulo 8. AXIMUM INDOW This is the largest possible window size to be supported on any virtual circuit.
  • Page 251 ONSTANDARD EFAULT The number of frames that a DTE can send without receiving an acknowledgment. Using modulo 128, the DTEs can send up to 127 frames without receiving an acknowledgment. Using modulo 8, the DTEs can send up to 7 frames without receiving an acknowledgment. The default value for both modulo 8 and modulo 128 is 2.

  • Page 252: Pvc Configuration Elements

    USER’S GUIDE X.25 R ESTRICTION ACILITIES These facilities are used to place restrictions upon incoming and outgoing X.25 calls. ARRING NCOMING Allows to you bar X.25 calls coming in to the system. The default configuration is to not bar incoming X.25 calls. ARRING UTGOING Allows you to bar X.25 calls going out of the system.

  • Page 253: Access Background Information

    ONSTANDARD EFAULT The number of frames that a DTE can receive without receiving an acknowledgment. Using modulo 128, the DTEs can send up to 127 frames without receiving an acknowledgment. Using modulo 8, the DTEs can send up to 7 frames without receiving an acknowledgment. The default value for both modulo 8 and modulo 128 is 2.
  • Page 254 USER’S GUIDE a virtual path, although it appears that a real circuit exits, in reality, the network routes the device’s information packets to the designated designation. Any given path may be shared by several devices. When the virtual circuit is established, a logical channel number is assigned to it at the originating end.

  • Page 255: Current X.25 Restrictions

    X.25 R URRENT ESTRICTIONS • X.25 virtual circuits must be two-way logical channels; one-way incoming and one-way out- going channels are not currently supported. • Each system can have only one X.25 access. The X.25 access can use only one line. •...

  • Page 256: Configuring Apvc

    USER’S GUIDE Enter a list of bearers (a channel map). For T1 or PRI lines, the range of channels is from 1 to 24.For BRI lines, the range of channels is from 1 to 2. Separate bearer channels by commas, and/ or list a range by using a dash (-).

  • Page 257: Frame Relay General Configuration Elements

    Indicate whether or not Congestion Control should be enabled. Enter the Rate Measurement Interval in msecs. Note: You must restart the CyberSWITCH in order to associate the PVC with a device. After all of the above PVC information is entered, an index number will be assigned to the associated DLCI.

  • Page 258: Frame Relay Pvc Configuration Elements

    USER’S GUIDE have a per packet charge, therefore, the administrator should be cautious when enabling this feature. Indicates whether or not this frame relay access will support the Local Management Interface (LMI). If this frame relay access supports LMI, LMI information can be displayed by entering the fr lmi command at the system console prompt.

  • Page 259: Committed Information Rate

    network, the one to which the access line is directly connected, routes the packet to the intended destination based on the DLCI therein. Hence, each packet is routed independently through the network based on the addressing information provided by this identifier. PVC L ROTOCOL The PVC line protocol determines which type of data encapsulation will be used on the PVC.

  • Page 260: Frame Relay Access Background Information

    USER’S GUIDE RAME ELAY CCESS ACKGROUND Frame Relay is a frame mode service in which data is switched on a per frame basis, as opposed to a circuit mode service that delivers packets on a call-by-call basis. This feature will allow the system to efficiently handle high-speed, bursty data over wide area networks.

  • Page 261: The Local Management Interface Overview

    configured in the device table. It will find the PVC and the line protocol that corresponds to the PVC name and change its PVC name to match the corresponding device name. Notes: Connection Services Manager (CSM) is currently the only off-node device database supported by the CyberSWITCH for Frame Relay.

  • Page 262: Congestion Control Overview

    USER’S GUIDE -- the rate at which data frames may be sent into the network without incurring congestion. This is generally accepted as the end-to-end available bandwidth at which frame relay service devices may enjoy sustained frame transmission. By definition this must be less than the throughput that the actual physical access link can support.
  • Page 263 However, under the above stated conditions, the network configuration shown below would not be allowed: CSX5500 "SITE1" NOT ALLOWED Switched connections can only be used as a backup to frame relay. As such, a switched connection would be made to a given node connected by a frame relay access only after that frame relay access had failed.

  • Page 264: Configuring Advanced Bridging

    ONFIGURING DVANCED VERVIEW When bridging is enabled, optional advanced features are available. Optional bridging features include: • bridge dial out • Spanning Tree Protocol • mode of operation • bridging filters • known connect lists This chapter includes a section for each advanced bridging feature. RIDGE With bridging enabled, bridge dial out is supported.

  • Page 265: Configuring The Device List For Bridge Dial Out

    ONFIGURING THE EVICE IST FOR Note: Configuring Device Level Databases completely configure an on-node device entry. The following section provides instructions for entering on-node device information specific to the bridge dial out feature. CFGEDIT SING Select Security from the main menu. Select Device Level Databases from the security menu.

  • Page 266: Spanning Tree Protocol

    USER’S GUIDE Device Bridging: (Device = "DAN") 1) IP (sub)network number 2) Bridging 3) Make Calls for bridge data 4) IPX Network Number 5) IPX Spoofing Options Id of option to change or press <RET> for previous menu? 3 Enable Bridging. 10.

  • Page 267: Spanning Tree Protocol Configuration Elements

    PANNING ROTOCOL Only the Ethernet-2 adapter supports the Spanning Tree Protocol in its entirety. Outlined below are the Spanning Tree configuration elements that the User can define. These elements are available when the system is running the local bridging option. PANNING ROTOCOL You can enable or disable the Spanning Tree protocol for CyberSWITCHes with Ethernet-2...

  • Page 268: Bridge Mode Of Operation

    USER’S GUIDE RIDGE ODE OF PERATION ONFIGURING THE RIDGE CFGEDIT SING Select Mode of Operation from the Bridging menu. Select the bridge mode of operation. The unrestricted bridge mode is the default. RIDGE ODE OF PERATION RIDGE The forwarding method that the bridge will use to distribute LAN packets to the remote sites and to the LAN ports of the CyberSWITCH.

  • Page 269: Restricted Bridge Mode

    ESTRICTED RIDGE If the Restricted Bridge Mode is selected, packets will be discarded unless overridden by a user- defined bridge filter. The bridge filters, therefore, allow you to transfer only the packets that you specify. If the Restricted Bridge Mode is selected, the following packet forwarding possibilities exist: •...
  • Page 270 USER’S GUIDE Configure protocol filters. Select to add a protocol filter. b. Select a protocol definition Id. Select a distribution list. Configure packet data filters. Select to add a packet data filter. b. Enter the off set value. Enter the mask in hex. d.
  • Page 271 Destination MAC Filter Commands destfilt Displays the current destination address filter configuration data. destfilt add Allows a destination address filter to be added to the current configuration. Refer to the Using CFGEDIT section for required configuration elements destfilt change Allows the current destination address filter configuration data to be changed. destfilt delete Allows a destination address filter to be deleted from the current configuration.

  • Page 272: Bridge Filter Configuration Elements

    USER’S GUIDE RIDGE ILTER ONFIGURATION ROTOCOL EFINITION ONFIGURATION ROTOCOL A user-defined name for the protocol to be filtered. It can be from 1 to 17 alphanumeric characters in length. THERNET YPE IN A four digit hexadecimal number (from 0600 to FFFF) that checks the protocol Id of a MAC frame. LSAP A four digit hexadecimal number (from 0000 to FFFF) that checks the protocol Id of a MAC frame.

  • Page 273: Bridge Filters Background Information

    RIDGE ILTERS ACKGROUND User-defined bridge filters allow you to filter unwanted traffic out of the network. The following table lists the four different types of bridge filters and the maximum number of filters that can be configured for each type: source MAC address destination MAC address filter...

  • Page 274: Bridge Filter Definitions

    USER’S GUIDE Two of the more common protocols used today are: • The IP Protocol Id, which identifies DOD Internet Protocol packets with Ethernet type equal to hexadecimal 800, or 802.3 LSAP equal to hexadecimal 6060. • The IPX Protocol Id, which identifies Novell (old) NetWare IPX packets with Ethernet type equal to hexadecimal 8137, or 802.3 LSAP equal to hexadecimal E0E0.
  • Page 275 DESTINATION MAC-address DISCARD < distribution list > This filter allows you to discard MAC frames addressed to the specified MAC address. When the specified MAC address appears in the destination address field of the MAC frame, the frame will NOT be forwarded as specified in the distribution list. If no distribution list is specified, the frame will not be forwarded.
  • Page 276 USER’S GUIDE The following charts summarize the filter actions available for Unrestricted Bridging: Filter Action Distribution DISCARD DISCARD DISCARD DISCARD Device List* CONNECT Device List* CyberSWITCH List A packet matching this filter will not be forwarded on any LAN port. The packet will be sent to remote sites connected over the WAN according to the normal learning bridge methods.
  • Page 277 For Unrestricted Bridging, the following additional filter actions are available only on a system with an Ethernet-2 adapter executing the local bridge option. Filter Action Distribution List DISCARD LAN PORT 1 DISCARD LAN PORT 2 DISCARD LAN PORT 1 and WAN DISCARD LAN PORT 2 and WAN...
  • Page 278 USER’S GUIDE Restricted Mode Bridge Filters Restricted Mode Type of Filter available DESTINATION DESTINATION SOURCE unicast-address FORWARD <distribution list> This filter allows you to stipulate access privileges of a given device. When the specified unicast address appears in the source address field of a MAC frame, the frame will be forwarded as specified in the distribution list.
  • Page 279 PROTOCOL protocol-Id FORWARD < distribution list > This filter allows you to restrict packets based on the Ethernet protocol Id field or the corresponding 802.3 LSAP field. You can specify the protocol Id that is to be forwarded. The filtering mechanism will determine if the packet is Ethernet format or 802.3 format. The Ethernet type or LSAP field will be checked based on packet format.
  • Page 280 USER’S GUIDE The following chart summarizes the forward and connect filter actions available for Restricted Bridging: Filter Distribution Action FORWARD FORWARD FORWARD FORWARD Device List* CONNECT Device List* CyberSWITCH List A packet matching this filter will only be forward- ed on the LAN ports. The packet will not be sent to any remote sites connected over the WAN.
  • Page 281 For Restricted Bridging, the following additional filter actions are available only on a system with an Ethernet-2 adapter executing the local bridge option: Filter Distribution Action List FORWARD LAN PORT 1 FORWARD LAN PORT 2 FORWARD LAN PORT 1 and WAN FORWARD LAN PORT 2 and WAN...
  • Page 282 USER’S GUIDE Filter Distribution Action DISCARD DISCARD DISCARD DISCARD Device List* * Device List may be the on-node device database, or it may be located on an off-node authentication server. For Restricted Bridging, the following additional discard filter actions are available only on a system with an Ethernet-2 adapter executing the local bridge option: Filter Distribution...

  • Page 283: Dial Out Using Bridge Filters

    SING RIDGE ILTERS Each type of bridge filter for each operating mode supports a different set of “forwarding actions.” Your particular set up and device configuration will determine which type of filter and forwarding arrangement will be the most useful. For our purposes, we will illustrate what we feel to be the most commonly used filter arrangement: the Destination MAC Address Filter used in Unrestricted Mode.
  • Page 284 USER’S GUIDE From the Bridging Menu, select Bridge Filters. The menus similar to the following will then be displayed. Follow the item selection process shown in the screens (the selections are in bold). Bridge Filter Menu: 1) Protocol Definition 2) Source MAC Address Filter 3) Destination MAC Address Filter 4) Protocol Filter 5) Packet Data Filter...

  • Page 285: Known Connect List

    Current Destination Address Filter Configuration: DEST ADDRESS ACTION -------------------------------------------------------- 112233445566 CONNECT (1) Add, (2) Change, (3) Delete a Destination Address Filter or <RET> to return to the previous menu? Your filter is now configured for this example. Remember, each type of filter for each operating mode supports a different set of “forwarding actions.”...

  • Page 286: Known Connect List Configuration Elements

    USER’S GUIDE NOWN ONNECT ONFIGURATION EVICE The name of a bridge device that has been preconfigured in the the Configuring Device Level Databases chapter. This is a device to which you want the system to connect and forward bridged unicast packets. NOWN ONNECT ACKGROUND...

  • Page 287: Configuring Advanced Ip Routing

    ONFIGURING DVANCED VERVIEW By default, IP routing is disabled when you first install your system software. After IP routing is enabled, there are optional advanced features available. Optional advanced IP routing features include: • Static ARP Table Entries ARP (Address Resolution Protocol) is used to translate IP addresses to Ethernet addresses. As a rule, this translation is handled dynamically.

  • Page 288: Static Arp Table Entries

    USER’S GUIDE ARP T TATIC ABLE NTRIES ARP T ONFIGURING TATIC CFGEDIT SING Once IP has been enabled, the full IP Configuration menu will be displayed as shown below: IP Routing Menu: P Routing (Enable/Disable) IP Operating Mode IP Interfaces IP Static Routes RIP (Enable/Disable) IP Static ARP Table Entries...

  • Page 289: The Isolated Mode

    SOLATED ONFIGURING THE SOLATED CFGEDIT SING Select Isolated Mode (Enable/Disable) from the IP menu. Follow the onscreen instructions to either enable or disable the isolated mode. SOLATED ONFIGURATION SOLATED TATUS You may enable or disable the Isolated Mode option. SOLATED ACKGROUND When operating with isolated mode enabled, the CyberSWITCH does not relay IP datagrams received from the WAN to other IP routers/hosts located on the WAN.

  • Page 290: Static Route Via Radius Configuration Elements

    USER’S GUIDE RADIUS C TATIC OUTE VIA RADIUS S TATIC OUTE VIA You may enable or disable this option. RADIUS B TATIC OUTE OOKUP VIA The Static Routes Lookup via RADIUS option allows you to maintain static routes for devices on the RADIUS Server.

  • Page 291: Ip Address Pool Background Information

    IP A DDRESS ACKGROUND The IP Address Pool feature allows you to configure a list of IP addresses that can be dynamically assigned to remote IP devices as they connect to the system. This would occur if a remote IP device calls in to the system and has no IP address, and requests to have one assigned.

  • Page 292: Initiating The Ip Filter Configuration

    USER’S GUIDE IP F NITIATING THE ILTER ONFIGURATION CFGEDIT SING To begin the configuration process, IP must be enabled. Access IP Filter configuration through the extended IP Routing Menu: IP Routing Menu: IP Routing (Enable/Disable) IP Operating Mode IP Interfaces IP Static Routes RIP (Enable/Disable) IP Static ARP Table Entries...

  • Page 293: Configuring The Common Ip Portion

    Current Configuration for PACKET TYPE "Type_One" 1) IP Source Address 2) IP Destination Address 3) IP Protocol Select function from above or <RET> for previous menu: The screen identifies the common portion of the packet type, which includes the IP addresses and protocol information.

  • Page 294: Configuring Tcp

    USER’S GUIDE Select IP protocol. If you choose an upper-level protocol, refer to the three following configuration sections: Configuring TCP, Configuring UDP, and Configuring ICMP. ONFIGURING If you have selected TCP as your IP protocol, a screen similar to the following is displayed. Note that the following TCP defaults constitute a wild card match for any TCP packet: PACKET TYPE "Type_One": 1) IP Source Address...

  • Page 295: Advanced Ip Routing

    Select UDP Source Port. Note that the ports are specified in terms of an operator. Select a comparison operator. If you have chosen the comparison operator of “RANGE”, you will be prompted for upper-range and lower-range values. If you have chosen a comparison operator other than “RANGE”, you will be prompted for a specific UDP port number.

  • Page 296: Using Cfgedit

    USER’S GUIDE ONFIGURING ORWARDING The configuration of Forwarding Filters is a two-part process. First you must name the filter, and then you must create a list of conditions for the filter. To add a condition, you must name a previously-created packet type, and then name the action to perform on the specified packet type (i.e., forward or discard).

  • Page 297: Configuring Connection Filters

    ONFIGURING ONNECTION The IP Connection Filter is used at the point when an IP packet attempts to establish an outbound connection in order to continue the forwarding process. Its configuration parallels that of forwarding filters. CFGEDIT SING Select Connection Filter from the IP Filter menu. Enable the Connection Filter.

  • Page 298: Configuring Exception Filter

    USER’S GUIDE ONFIGURING XCEPTION ILTER The IP Exception Filter is intended for temporary, special conditions within an existing forwarding filter. When enabled, it is logically appended to the beginning of each forwarding filter in effect. CFGEDIT SING Select Exception Filter from the IP Filter menu. Enable the Exception Filter.

  • Page 299: Modifying The Final Condition For A Filter

    ODIFYING THE INAL ONDITION FOR A To change the final condition for a filter, select Change Default Condition (currently selection (5) on the Conditions for Filter menu. PPLYING ILTERS Once you have defined your forwarding filters, you must apply them to selected points in the IP routing process.

  • Page 300: Udp Ports

    USER’S GUIDE Select IP Information. Select either IP Input Filter or IP Output filter. Provide the filter name. IP F ILTERS ONFIGURATION The following elements are described in terms of the individual comparisons which make up the packet types. When an IP packet is subjected to a filter, the following comparisons are executed. The final result of the comparisons is a “match”...

  • Page 301: Ip Filters Background Information

    equal to <port> not equal to <port> less than <port> greater than <port> RANGE inclusive range <port1> <= packet port value> = <port2> Examples: EQ 23: TCP port for the Telnet protocol. RANGE 0 65535:Any TCP port (wild card and default). TCP C ONTROL This element accesses the control bits of the TCP header, which are utilized to initiate and maintain...

  • Page 302: Filter Composition

    USER’S GUIDE IP Packet Packet Types: Type 1: www,www,www Type 2: xxx,xxx,xxx Type 3: yyy,yyy Type 4: zzz,zzz ILTER OMPOSITION The IP filtering mechanism is composed of three fundamental building blocks: • Packet Types The criteria for describing an IP datagram’s contents: IP Source and Destination Addresses, Protocol (TCP, UDP, etc.), Protocol-specific fields (TCP port, etc.).

  • Page 303: Role Of Filters In The Ip Processing Flow

    attached network. • through the Output Network Interface: applies the filter only to packets which are transmitted on a specific attached network (i.e. after the Routing process has determined the next-hop net- work for the datagram). • on a per-Device basis: applies a device-specific filter in addition to any Input or Output filters. This type of filtering is applicable only to WAN Network Interfaces.

  • Page 304: Packet Types

    USER’S GUIDE Because the Packet Types within the conditions specify both source and destination address information, Global application may often be sufficient to filter IP traffic across the entire system. However, the Input, Output and User-Based application points are defined in case the administrator needs to apply a finer level of filtering which cannot be obtained on a Global basis.

  • Page 305: Limitations

    Common Portion: IP Source Address IP Destination Address Protocol Field Protocol-Specific Portion TCP: Source Port Destination Port Control Protocol-Specific Portion, UDP: Source Port Destination Port Protocol-Specific Portion, ICMP: Type Code IMITATIONS System performance will be affected by the number of packets, conditions and filters configured. The more elements you have configured, the slower system performance.

  • Page 306: Example Of An Ip Filter Configuration

    USER’S GUIDE IP F XAMPLE OF AN ILTER ONFIGURATION This example provides a simple filtering scenario in which a corporate LAN utilizes a CyberSWITCH to provide WAN access to both dial-in devices as well as the global Internet. A Netserver resides on the LAN to provide configuration support for the CyberSWITCH. Also on the LAN are an anonymous FTP server and a WWW server.
  • Page 307 FORWARD IP Src 0.0.0.0, 0.0.0.0 IP Dst: 255.255.255.255, 128.131.25.10 IP Prot: ANY FORWARD IP Src 0.0.0.0, 0.0.0.0 IP Dst: 255.255.255.255, 128.131.25.12 IP Prot: ANY FORWARD IP Src 0.0.0.0, 0.0.0.0 IP Dst: 0.0.0.0., 0.0.0.0 IP Prot: TCP TCP Src Port: RANGE 0 65535 TCP Dst Port: RANGE 0 65535 TCP Control: ESTABLISHED FORWARD...

  • Page 308: Dhcp Relay Agent

    USER’S GUIDE FORWARD IP Src 255.255.255.255, 201.55.89.100 IP Dst: 255.255.255.255, 128.131.25.11 IP Prot: ANY FORWARD All other packet types Once the offsite maintenance is completed, the Exception filter would be disabled. Configuration control over the Exception filter is available both through CFGEDIT and Manage Mode (with Manage Mode being the most practical method due to its dynamic nature).

  • Page 309: Dhcp Configuration Elements

    DHCP C ONFIGURATION LEMENTS DHCP/BOOTP R ELAY A global flag that indicates whether the system is relaying the DHCP/BOOTP BOOTREQUEST messages or not. The relay agent is disabled by default. IP A ELAY ESTINATION These are the IP addresses to which the system will relay BOOTREQUEST messages. For relay destinations which are broadcast/multicast IP addresses, the network interface to which the messages should be relayed also needs to be configured.
  • Page 310 USER’S GUIDE Bridge to Bridge Environment CSX1200 Remote Bridge WORKGROUP REMOTE ACCESS SWITCH POWER DHCP Client As shown in the picture above, when a remote LAN is connected with bridge devices, the DHCP server and clients communicate with each other as if they were on the same LAN. This is one example configuration of how DHCP can be used to accomplish the dynamic IP address assignment to the remote IP devices.

  • Page 311: Example Dhcp Configurations

    CSX1200 Remote Bridge WORKGROUP REMOTE ACCESS SWITCH POWER SERVICE DHCP Client DHCP C XAMPLE ONFIGURATIONS Below we have included two of the more common DHCP scenarios. These may help you configure your own DHCP feature. IP Router to IP Router (with Relay Agents on both) This configuration is useful when the “next hop”...
  • Page 312 USER’S GUIDE Routers shown in the diagram above. Sample configurations for the objects in the above network diagram are as follows: Configuration for IP Router "Alex" System Information: System Name = Alex System Password = stone Security Level = Device Level (On-node Device Database, PAP security) Bridging disabled IP enabled (router mode)
  • Page 313 Remote Bridge to IP Router (w/Relay Agent) This configuration is useful when requests by a DHCP Client must be “bridged” to an IP Router that is also a DHCP/BOOTP Relay Agent. Our equipment is shown in this example, but any remote bridge device should work.
  • Page 314 USER’S GUIDE Configuration for IP Router "Alex" System Information: System Name = Alex System Password = stone Security Level = Device Level (On-node Device Database, PAP security) Bridging disabled IP enabled (router mode) I/F = LAN (192.168.1.168) I/F = WAN RLAN (204.157.42.190) DHCP enabled Relay Destination # 1 = 192.168.1.5...

  • Page 315: Dhcp Proxy Client

    DHCP P ROXY LIENT DHCP P ONFIGURING THE ROXY In order to configure the DHCP Proxy Client, you must first enable the client, and then configure client information for a WAN or a WAN (Direct Host) type interface. CFGEDIT SING Select DHCP Configuration from the IP menu.

  • Page 316: Dhcp Configuration Elements

    USER’S GUIDE DHCP C ONFIGURATION LEMENTS DHCP P ROXY LIENT NABLE A global flag that indicates whether the DHCP Proxy Client feature is enabled or not. The proxy client is disabled by default. IP A AXIMUM UMBER OF Refers to the maximum number of IP addresses obtained from DHCP servers for this network interface.

  • Page 317: Sample Configuration: Ip Router With Dhcp Proxy Client

    The DHCP Proxy Client feature is not applicable for the CyberSWITCH running in IP HOST mode. DHCP servers must support use of the broadcast bit in order to obtain IP addresses for WAN (Direct Host) interfaces. : IP R AMPLE ONFIGURATION OUTER WITH The following illustrates a typical use of the DHCP Proxy Client.

  • Page 318: Security Associations

    USER’S GUIDE System Information: System Name = Chloe System Password =pets Security Level = Device Level (On-node Device Database, PAP security) Bridging disabled IP enabled (router mode) DHCP configuration: Device = “Summer” ECURITY SSOCIATIONS The steps to configure security associations are merely listed here. For more detailed information, refer to Configuring Encryption.

  • Page 319: Dns And Netbios Addresses

    BIOS A DDRESSES ONFIGURING CFGEDIT SING From the CFGEDIT Main Menu, select Options. Select IP Routing. If IP routing is disabled, enable this now. Select NBNS and DNS name server addresses. A menu similar to the following will display: Name Servers Menu: 1) Primary Domain Name System server is not configured.

  • Page 320: Dns/Nbns Configuration Elements

    USER’S GUIDE Name Servers Menu: 1) Primary Domain Name System server is 1.2.33.44 2) Primary NetBIOS Name Server is 2.22.222.2 3) Secondary Domain Name System server is not configured. 4) Secondary NetBIOS Name Server is not configured. Select name server to change or <RET> for previous menu: SING ANAGE ipnamesv...

  • Page 321: Configuring Ipx

    ONFIGURING VERVIEW IPX protocol accepts data from remote devices and formats the data for transmission onto the network, and conversely, accepts data from the LAN and formats it so it can be understood by remote devices. In short, IPX allows remote devices and their servers to communicate. The CyberSWITCH supports the standard method of routing datagrams over a network.

  • Page 322: Configuring Ipx Information

    USER’S GUIDE IPX I ONFIGURING NFORMATION Note: IPX is available only if you have purchased the additional software module for our IPX feature. To help you configure your IPX information, we have included an illustration of a sample network. As we explain the steps, we provide sample CFGEDIT screens. The screens include information from the sample network.

  • Page 323: Central Site Remote Access Switch

    IPX R OUTING PTION NABLING ISABLING Note: The CyberSWITCH does not currently provide IPX data transfer over X.25 links. CFGEDIT SING Select Options from the main menu. Select IPX Routing from the Options menu. The following menu will be displayed: IPX Menu: 1) IPX Routing (Enable/Disable) Select function from above or <RET>...

  • Page 324: Ipx Option Background Information

    USER’S GUIDE IPX O PTION ACKGROUND NFORMATION The Internetwork Packet Exchange (IPX) protocol is a datagram, connectionless protocol in the NetWare environment analogous to the Internet Protocol (IP) in the TCP/IP environment. With the help of Routing Information Protocol (RIP) and Service Advertising Protocol (SAP), the IPX router performs the network layer tasks of addressing, routing and switching information packets, to move packets from one location to another in a complex network.

  • Page 325: Ipx Network Number Background Information

    IPX N ETWORK UMBER ACKGROUND Novell NetWare networks use IPX external and internal network numbers. An IPX internal network number is a unique identification number assigned to a network server or router at the time of installation. Servers and routers periodically broadcast their numbers across the network to advertise their presence.
  • Page 326 USER’S GUIDE If IPX RIP has been enabled for the system, enter the following: RIP send control (do not respond or respond) b. frequency (in seconds) of sending RIP updates RIP receive control (do not respond or respond) d. time (in seconds) to age RIP entries RIP respond control (do not respond or respond) 10.

  • Page 327: Ipx Network Interface Configuration Elements

    IPX N ETWORK NTERFACE ONFIGURATION IPX N ENERAL ETWORK NTERFACE NTERFACE When configuring an IPX Network interface, this parameter specifies the type of network segment to which the network interface connects. The network Interface type of LAN indicates that the system is physically connected to an Ethernet LAN segment.

  • Page 328: Sap Ipx Network Interface Configuration Elements

    USER’S GUIDE REQUENCY Specifies the frequency at which the system will transmit RIP packets, if the Send control parameter is set to send for this interface. This parameter is a decimal value specified in seconds from 1 to 300. The default value is 60 seconds. ECEIVE ONTROL Specifies how the system will process RIP packets received on this network interface.

  • Page 329: Ipx Network Interface Background Information

    IPX N ETWORK NTERFACE ACKGROUND Traditional routing products ask you to define the network interfaces to which the router is directly connected: LAN I NTERFACES LAN network interfaces are fixed broadcast media type interfaces. These interfaces are assigned a specific network number and all devices on that LAN must agree on the IPX network number used on the LAN segment.

  • Page 330: Ipx Routing Protocols

    USER’S GUIDE IPX R OUTING ROTOCOLS IPX R ONFIGURING OUTING CFGEDIT SING Select Routing Protocols from the IPX menu. The following will be displayed: IPX Routing Protocol Menu: IPX RIP Processing is currently ENABLED IPX RIP Table maximum is 282 IPX SAP Processing is currently ENABLED IPX SAP Table maximum number of entries is 282 Select function from above or <RET>...

  • Page 331: Ipx Routing Protocol Background Information

    RIP/SAP N UMBER OF ABLE Specifies the maximum number of routing entries which can be stored in the route or service table. You may select a number between 20 and 3072. The default value is 282 (141 routes + 141 services). IPX R OUTING ROTOCOL...

  • Page 332: Special Considerations - Remote Lan Interface

    USER’S GUIDE Static services are configured locally on the system. SAP entries are learned from incoming SAP packets. All services are stored, used internally and advertised to other routers. The same factors that affect the maximum number of routes stored also affect the maximum number of services stored.

  • Page 333: Ipx Static Routes

    IPX S TATIC OUTES Note: With the availability of Triggered RIP/SAP no longer necessary but still supported. Situations may arise in which a remote router does not support our implementation of Triggered RIP/SAP. In this case, it would be necessary to configure a static route to that particular router.

  • Page 334: Ipx Static Routes Configuration Elements

    USER’S GUIDE SING ANAGE OMMANDS ipxroute Displays the current IPX routes (both statically entered and "learned"). ipxroute [add/change/delete] Allows you to add/change/delete an IPX route. IPX S TATIC OUTES ONFIGURATION ESTINATION ETWORK The IPX network number reachable through this static route entry. This parameter is a hexadecimal value from 1 to 4 bytes in length.

  • Page 335: Ipx Netware Static Services

    IPX N TATIC Note: With the availability of Triggered RIP/SAP is no longer necessary but still supported. Situations may arise in which a remote router does not support our implementation of Triggered RIP/SAP. In this case, it would be necessary to configure a static service for that particular router. IPX N ONFIGURING CFGEDIT...

  • Page 336: Ipx Netware Static Services Configuration Elements

    USER’S GUIDE IPX N TATIC ERVICES ERVICE Specifies the NetWare service name that is the target of this static service definition. This parameter is a 48 character NetWare service name. ERVICE Indicates the type of NetWare service that is the target of this static service definition. You may enter the hexadecimal service type value, or request a list of common service types.

  • Page 337: Ipx Netware Static Services Background Information

    IPX N TATIC ERVICES This IPX feature allows you to configure service servers that are on networks across the WAN. The IPX NetWare Static Services configuration tells the system which servers are available for access. The static route configuration tells the system how to get to the network on which the servers are located.

  • Page 338: Ipx Spoofing Configuration Elements

    USER’S GUIDE b. Press 2 to select the system serialization packet handling level. The default values for all parameters will be displayed. Enter the Id of any parameters you need to change. Follow the onscreen instructions for changing the default values. Return to the IPX spoofing menu. Press 4 to configure the message packet handling.

  • Page 339: Watchdog Protocol

    ATCHDOG ROTOCOL Watchdog Protocol is used by NetWare Servers to detect “dead” clients. If no traffic has been seen by a server from an attached client for a configurable amount of time, the server sends a watchdog packet to the client to determine if the client is still alive or merely inactive. If, after a few minutes, a watchdog reply is not received by a server, it is assumed that the client is no longer alive and the connection to the server is terminated.

  • Page 340: Ipx Type 20 Packet Handling

    USER’S GUIDE Some of these <SYS> packets are overloaded in that they are not just keep-alive packets but are control packets needed for the application to run successfully and hence have to be routed like regular SPX data packets. If any NetWare application does not seem to work across WANs, it may be because of the mishandling of these <SYS>...

  • Page 341: Ipx Type 20 Packet Handling Device Configuration Elements

    IPX T 20 P ACKET ANDLING Once you enable the feature, you can then enter devices to use the feature. The following configuration elements are entered for each device. IPX T 20 P ACKET EVICES The device name of the previously configured device. IPX T 20 P ACKET...

  • Page 342: Ipx Triggered Rip/Sap

    USER’S GUIDE IPX T RIP/SAP RIGGERED IPX Triggered RIP/SAP is a type of broadcast protocol used over WAN circuits for router-to-router exchange of route and service information. Its broadcasts are “triggered” by events such as updates or changes to route and service tables. Triggered RIP/SAP offers an alternative to running periodic broadcasts over the WAN, and is especially useful when you consider the costs of periodic broadcasts over WAN links.

  • Page 343: Configuration Elements

    ONFIGURATION LEMENTS IMER This timer starts when an update response is received. While this timer is running, the routes learned from this router are still considered reachable, and advertised as such on other interfaces. When this timer expires, the routes are considered unreachable and advertised as such until the hold-down timer expires.

  • Page 344: Ipx-Specific Information For Devices

    USER’S GUIDE Specifically, triggered RIP and SAP updates are only transmitted on the WAN: • when a specific request for a routing/service update has been received; • when the routing or service databases are modified by new information from another interface (in which case, only the latest changes are sent);...
  • Page 345 Enable IPX routing. Select IPX Routing and follow on-screen instructions. Enable make calls feature. Select Make calls for IPX data and follow on-screen instructions only if the CyberSWITCH is to dial-out to remote1. Although IPXWAN Protocol appears on the menu, the feature is not yet completely functional. 10.

  • Page 346: Remote Lan Devices

    USER’S GUIDE Press <RET> to return to the IPX Device Spoofing menu. Press 2 to configure SPX Watchdog Spoofing. The following menu will be displayed: Device Level SPX Watchdog Spoofing Menu: 1) Default Handling 2) Handling while the connection is up 3) Handling for the special period after disconnecting is Spoof 4) Special period of time after disconnecting Select function from above or <RET>...

  • Page 347: Ipx Configuration Elements For Devices

    Select On-node Device Entries from the device level databases menu. Press 1 to add a device. Enter the device’s name and press <RET>. You should provide information first. Select Bridging from the Device Table Menu. A menu similar to the following will be displayed: Device Bridging: (Device = "remote2") IP (Sub)Network Number Bridging...
  • Page 348 USER’S GUIDE Otherwise, a WAN connection is not established. With triggered RIP/SAP, this field must also be enabled for an active WAN peer type IPXWAN PROTOCOL The IPXWAN protocol option is not yet completely functional. In the future, it will provide interoperability with Novell products.

  • Page 349: Ipx Background Information For Devices

    This parameter is only necessary for IPX over Frame Relay when at least one of the CyberSWITCHes in the Frame Relay connection is a CSX200 or CSX400. (CSX200 and CSX400 platforms do not support unnumbered connections). In this instance, you must specify the same number on both CyberSWITCHes supporting the Frame Relay access.

  • Page 350: Configuring Snmp

    SNMP ONFIGURING VERVIEW A Network Management Station (NMS) is a device that contains SNMP-specific software, giving it the ability to query SNMPAgents using various SNMP commands. If you have purchased an NMS (such as Cabletron’s SPECTRUM® Management Platform), you should enable and configure the CyberSWITCH to be an SNMP Agent.
  • Page 351 Enable IP routing if you have not already done so. Select SNMP from the Options menu. Follow the onscreen instructions to enable SNMP. The following SNMP menu will then be displayed: SNMP Menu: SNMP (Enable/Disable) SNMP Community Name SNMP Trap Information MIB-2 System Group Objects Select function from above or <RET>...

  • Page 352: Snmp Configuration Elements

    USER’S GUIDE SING ANAGE OMMANDS Currently you cannot configure SNMP using the Manage Mode, but the following command is available: snmp This Manage Mode command displays the current SNMP configuration data. An example output screen is shown below: MANAGE> SNMP The SNMP feature is enabled.

  • Page 353: Snmp Background Information

    IP A DDRESS The IP address assigned to the management station that should receive Trap PDUs. OMMUNITY A list of configured Community Names will be displayed. Select the Community Name that should be inserted in the Trap PDUs to be sent to the NMS with the corresponding IP address. UTHENTICATION AILURE You may enable or disable the generation of SNMP Authentication Failure Traps.
  • Page 354 USER’S GUIDE ASN. 1 File MIB Formatter The SNMP Agent will process all SNMP Protocol Data Units (PDUs) which are received at a LAN port or which are received at a WAN port. (A PDU contains both data and control (protocol) information that allows the two processes to coordinate their interactions.
  • Page 355 Protocol (ICMP) group, the User Datagram Protocol (UDP) group, the Transmission Control Protocol (TCP) group, and the Simple Network Management Protocol (SNMP) group. Currently, each object in the above MIB-2 groups can be retrieved via an SNMP GetRequest or GetNextRequest PDU. However, only the snmpEnableAuthenTraps object in the SNMP group can be changed via the SNMP SetRequest PDU.

  • Page 356: Using Cabletron Nms Systems

    USER’S GUIDE • isdnUsageNormal Trap An SNMP Agent will generate an isdnUsageNormal Trap PDU when the Agent detects that the number of B-Channels in use has returned to a value below the configured threshold value. • authTimeout Trap An SNMP Agent will generate an authTimeout Trap PDU anytime an off-node server times out.

  • Page 357: Configuring Appletalk Routing

    ONFIGURING PPLE VERVIEW The AppleTalk routing feature allows the CyberSWITCH to efficiently route AppleTalk data as opposed to bridging all data relating to the protocol. With the addition of the AppleTalk Remote LAN feature, the CyberSWITCH can be configured to be a router, bridge or a mix of both when handling AppleTalk traffic.

  • Page 358: Appletalk Routing Option Configuration Element

    USER’S GUIDE PPLE OUTING PTION PPLE PERATIONAL You can enable or disable the AppleTalk Routing option. When AppleTalk Routing is enabled, the CyberSWITCH acts as an AppleTalk Router, routing AppleTalk datagrams based on AppleTalk address information. When AppleTalk Routing is disabled, the CyberSWITCH will simply bridge AppleTalk protocol network traffic.

  • Page 359: Appletalk Ports Configuration Elements

    If you are configuring your system in the nondiscovery mode (you entered numbers other than 0 or 0-0 for the network range/number), complete the following: Enter either the suggested AppleTalk address or the suggested AppleTalk node Id (depending on AppleTalk network type configured). •...

  • Page 360: Appletalk Ports Background Information

    USER’S GUIDE PPLE ETWORK ANGE The AppleTalk network range (for Extended network) or the AppleTalk network number (for NonExtended network) of the LAN segment that the port is connected to. Specifying 0.0 (for Extended) or 0 (for NonExtended) places the port in discovery mode (a.k.a., non-seed router), in which the system learns its configuration information from the seed router.

  • Page 361: The Zone Concept

    ONCEPT A zone is a logical group of nodes on an internet, much like the concept of subnetting with the world of IP. Within the framework of Phase 2 the logical assignment of zones is limited to 255 zone names for a network. Each name can be configured to represent a logical group within that respective internet.

  • Page 362: Appletalk Static Routes

    USER’S GUIDE number/range configured for the Remote LAN port differs from the network number/range that is being broadcasted in RTMP packets by other remote routers, the port becomes unusable. Configuration In order to properly set up an AppleTalk Remote LAN, you must: •...

  • Page 363: Appletalk Routing Static Routes Configuration Elements

    PPLE OUTING TATIC PPLE ETWORK The AppleTalk network type used by the destination network of this static route. Type can be either Extended Network or NonExtended Network. ESTINATION ETWORK The remote AppleTalk network range (for Extended network) or network number (for NonExtended network) reachable through this static route entry.

  • Page 364: Appletalk Capacities Background Information

    USER’S GUIDE PPLE APACITIES ACKGROUND This option allows you to control the maximum number of table entries (routing and zone tables) for your network. PPLE SOLATED ONFIGURING THE PPLE CFGEDIT SING Select Isolated Mode (Enable/Disable) from the AppleTalk Routing Menu. Follow the onscreen instructions to either enable or disable the isolated mode.

  • Page 365: Configuring Call Control

    ONFIGURING VERVIEW The CyberSWITCH offers a number of configurable options to control how the system will make and accept calls. These options, each of which are described in this chapter, include: • configuring throughput monitor parameters • configuring call interval parameters •...

  • Page 366: Throughput Monitor

    USER’S GUIDE HROUGHPUT ONITOR ONFIGURING THE HROUGHPUT Notes: Throughput Monitoring parameters do not apply to Digital Modems. Refer to the Modem Inactivity Timeout Certain restrictions apply to the use of the to the Background Information. CFGEDIT SING Select Throughput Monitor from the Call Control Options menu. The current throughput monitor configuration will be displayed.

  • Page 367: Throughput Monitor Configuration Elements

    HROUGHPUT ONITOR ONFIGURATION AMPLE A Sample Rate identifies the number of seconds for each sample period. The default setting for the sample rate is 5 seconds. During this period, the system keeps track of the total number of bytes that is transferred in both directions between two systems. The utilization percentage is determined by comparing this total with the realistic maximum for the current aggregate amount of bandwidth.

  • Page 368: Overload Condition Monitoring

    USER’S GUIDE The default Throughput Monitor configuration will work for initial installation. These parameters can be changed to better match the bandwidth needs of your location. Correctly tuning these parameters is important in order to eliminate unnecessary data calls. The default value for the sample rate is a 5 second sample period.

  • Page 369: Underload Condition Monitoring

    NDERLOAD ONDITION ONITORING The underload condition is monitored by comparing the samples with a lower threshold. The sample is marked as a true condition if both the transmit and the receive byte count fall below the threshold. When the number of true samples in the window reaches the configured limit, the underload condition has occurred.
  • Page 370 USER’S GUIDE Sample rate 5 Window 3 Trigger 2 Utilization 50% Time After 5 seconds the sample is checked and the average utilization for the 5 seconds was 40 percent. This is less than the configured utilization percentage of 50%, so no action is taken. For the second sample rate period, the average throughput is 60%.

  • Page 371: Call Interval Parameters

    NTERVAL ARAMETERS ONFIGURING THE NTERVAL CFGEDIT SING Select Call Intervals from the Call Control Options menu. Enter the minimum time interval between call attempts. NTERVAL ONFIGURATION INIMUM NTERVAL The configured call interval is the minimum time between call attempts. The system will not make a call attempt in less than the configured call attempt value.

  • Page 372: Monthly Call Charge Configuration Elements

    USER’S GUIDE ONTHLY HARGE ONFIGURATION TATUS Allows you to enable or disable the monthly call charge option. AXIMUM ONTHLY HARGE The maximum monthly charge value. The legal values are from 1 to 10,000,000. This value is specified according to the country’s currency. CTION Select the action to be taken if the maximum monthly call charge is exceeded.

  • Page 373: Call Restriction Configuration Elements

    SING ANAGE OMMANDS alarm Displays the current status of the audible alarm. It is displayed as either enabled or disabled. If enabled, the audible alarm will sound when a call restriction condition has been met. alarm off Disables the audible alarm that sounds when a call restriction condition has been met. alarm on Enables the audible alarm that sounds when a Call Restriction condition has been met.
  • Page 374 USER’S GUIDE The following chart provides example entries for hours calls are allowed: Hours Calls Allowed 10am to 6pm, 8pm, 11pm 8am to 5pm, 7pm to 9pm AXIMUM ALLS PER Allows you to limit the number of calls made per day by configuring a maximum number of calls. The default value is 300 calls per day.
  • Page 375 Two actions are available if this limit is exceeded. These actions are: The call will not be allowed; a message will be displayed on the LCD, and written to the report log. The call will be allowed; however, a warning will be displayed on the LCD, and written to the report log.

  • Page 376: Call Restrictions Background Information

    USER’S GUIDE ESTRICTIONS ACKGROUND The Call Restriction feature provides the ability to place limits on the toll costs of operating the CyberSWITCH. Call Restriction consists of a variety of features that can restrict the number of switched calls made to remote sites, and also limit the amount of call minutes accumulated for remote site access.
  • Page 377 Note that there are four lines in the default profile: (1,1), (1,2), (1,3), and (1,4). The leading “1” in the pair of numbers represents the slot number. The second number in the pair represents the port number. This example shows that there is only one BRI adapter, and it is installed in slot number one, and has four ports.

  • Page 378: Bandwidth Reservation Configuration Elements

    USER’S GUIDE Under ISDN information, enter the profile information. This is a profile name you configured in the previous section. Remember from the previous section that each configured profile reserves specific lines. By assigning this profile to the device, you are reserving specific lines for this device.

  • Page 379: Bandwidth Reservation Background Information

    ANDWIDTH ESERVATION This feature allows a portion of the possible connections to always be available to specific devices for both inbound and outbound calls. To increase flexibility, this feature may be configured to either allow or prevent bandwidth overlap. Bandwidth overlap will allow normal devices to use a certain number of lines, while a special class of super devices would be allowed access to both the normal bandwidth (designated in the default profile) as well as special super device bandwidth (designated in the configured device profile).
  • Page 380 USER’S GUIDE Determine if the CyberSWITCH should always retry a call. If yes, then configuration for the device is done, the device is entered into the semipermanent device list, and appears as shown below. If no, continue to step 7. Semipermanent Connections Menu: Device Name ------------------------------- ------------- --------------- ------------------...

  • Page 381: Semipermanent Connections Configuration Elements

    EMIPERMANENT ONNECTIONS EVICE Specify the device name (from the Device List) that you wish to make a semipermanent connection. Once specified, the semipermanent feature will (at least) keep the Initial Data Rate active to the specified device, as long as it is not prohibited by call restrictions or a physical or configuration problem.
  • Page 382 USER’S GUIDE Call Restrictions You may wish to disable call restrictions when using semipermanent connections. Call restrictions are mainly intended for use in areas where “per minute” ISDN tariffs are in place. Typically, this in not the case if semipermanent connections are in use. If you decide not to disable Call Restrictions, we recommend that you make the following Call Restriction parameter alterations: •...

  • Page 383: Csm As A Call Control Manager

    AS A ONTROL This feature allows you to use the CSM for call control management only. This feature allows you to continue to use other authentication servers (e.g., RADIUS, ACE) yet still gain the benefits of CSM call control management. ONFIGURING CFGEDIT SING...

  • Page 384: Background Information

    USER’S GUIDE UTHENTICATION IMEOUT This timer represents the amount of time the CyberSWITCH will wait for the Authentication Agent to handle a login attempt before timing out. If CSM is enabled as Call Control Manager, this time- out value must then represent the amount of time for both: •...

  • Page 385: Limitations/Considerations

    If you use user level security for authentication: configure devices on CSM as well. This will provide access to the following CSM call control management features: call restrictions, maximum bandwidth, and grouping (in addition to the call logging feature). User level security and CSM call control management work together as follows: CSM allows a device to connect under an alias name until the user can be verified by its authentication server.

  • Page 386: D Channel Callback Configuration Elements

    USER’S GUIDE The current status D Channel Callback will be displayed. Select 1 to toggle from disabled to enabled (as shown by the following screen). D Channel Callback Menu: D Channel Callback (Enable/Disable) Select function from above or <RET> for previous menu: Note: In addition to the CFGEDIT configuration changes, you must also do some configuration through CSM for callback to work.

  • Page 387: Digital Modem Inactivity Timeout

    IGITAL ODEM NACTIVITY This feature allows the CyberSWITCH to disconnect inactive modem connections based on lack of activity for a specified amount of time. This feature does not affect digital HDLC connections. ONFIGURING THE IGITAL CFGEDIT SING From CFGEDIT’s Options Menu, select Call Control Options. Select Digital Modem Inactivity Timeout.

  • Page 388: Modem Inactivity Timeout Background Information

    USER’S GUIDE ODEM NACTIVITY IMEOUT The Modem Inactivity Timeout feature allows the CyberSWITCH to terminate connections to digital modem devices based on a lack of data transfer for a specified amount of time. This feature applies to both incoming and outbound calls. The Modem Inactivity Timeout feature supports DM-24, DM-24+ and DM-30+ modem adapters only, on CyberSWITCH systems running UAA software release 7.3 or beyond.

  • Page 389: Configuring Other Advanced Options

    ONFIGURING THER VERVIEW This chapter provides information for configuring advanced system options that are not covered in the previous chapters. These options include: • configuring for a Digital Modem • configuring default async protocol • configuring PPP • configuring default line protocol •...

  • Page 390: Digital Modem Background Information

    USER’S GUIDE Routing chapter). Note that Digital Modem does not support WAN RLAN or WAN unNumbered interfaces. For IPX routing: Make sure IPX routing is enabled. b. Configure the LAN interface to represent local IPX Network that may receive and send datagrams (Configuring IPX Configure the WAN interface to represent remote networks that may receive and/or...

  • Page 391: Supported Modes Of Connection

    The Digital Modem software identifies, directs, and converts the data stream appropriately. For example, if an incoming call to the system is identified as coming from an analog modem, the associated ISDN B-channel is routed to the Digital Modem adapter. Software assigns it to one of the digital modem modules, and all of the operations of a V.34+ or K56Flex modem are performed just as if the call had gone to an analog modem through an analog phone line.

  • Page 392: Relationships Between Digital Modem And Other Features

    USER’S GUIDE ELATIONSHIPS BETWEEN IGITAL Note the following: • RADIUS Authentication: Authentication is performed before the call is routed to the Digital Modem Adapter. Once the call is validated, the call is routed to the Digital Modem Adapter to establish a modem link. •...

  • Page 393: Terminal Mode

    ERMINAL CFGEDIT SING From Options, select Default Async Protocol. Select Action on Data Timeout. Select Use Terminal Mode. Next, select Data Timeout Value. Change value, in seconds, as desired (minimum: 1; maximum: 60). Return to Main Menu and select Security. Select Network Login Information.

  • Page 394: Terminal Server Security

    USER’S GUIDE If no data is received within the data timeout duration, the following events will occur: • If Disconnect is configured, the CyberSWITCH will disconnect the call. • If Use PPP Protocol is configured, the CyberSWITCH will assign the call to a PPP subsystem. •...

  • Page 395: Autosense Feature

    Note: If the CyberSWITCH is configured for PPP Mode, the caller at the remote device can override this through manual intervention. The caller must initiate four carriage returns upon call connection to notify the system that the caller requests console access. (These CRs must take place within the time specified in the data timeout value).

  • Page 396: Ppp Configuration

    USER’S GUIDE PPP C ONFIGURATION ONFIGURING Note: A thorough understanding of PPP protocol is required before you attempt to change the PPP configuration. By changing the PPP configuration, you are changing the PPP protocol negotiation parameters. These parameters only need to be changed when you are attempting to interoperate with devices that do not provide a standard PPP implementation.
  • Page 397 ESTART IMER Times transmissions of Configure-Request and Terminate-Request packets. Expiration of the Restart timer causes a Timeout event, and retransmission of the corresponding Configure-Request or Terminate-Request packet. LCP P ROTOCOL IELD OMPRESSION Provides a way to negotiate the compression of the Data Link Layer Protocol field. LCP A DDRESS ONTROL...

  • Page 398: Ppp Background Information

    USER’S GUIDE PPP B ACKGROUND NFORMATION Point-to-Point Protocol (PPP) can provide standard interoperability for remote devices. Interoperability will allow remote devices made by different manufacturers to operate and exchange information on the same network. PPP consists of three main parts: A method of encapsulating datagrams so that they can be more easily transmitted over point- to-point links.

  • Page 399: Ppp Reference Documents

    PPP Link Failure Detection can be enabled or disabled within the PPP Options configuration menu. When enabled, two other configurable parameters then control the mechanism. Upon entrance of a PPP link into Network Phase (the point at which device data transfer is allowed), Echo-Requests will be sent at a configured frequency.

  • Page 400: Default Line Protocol Configuration Elements

    USER’S GUIDE SING ANAGE lineprot Displays the current default line protocol configuration. lineprot change Allows you to change the default line protocol configuration. For the configuration steps, refer to the previous CFGEDIT section. EFAULT ROTOCOL ONFIGURATION CTION ON RAME IMEOUT The action to be taken if no frame is received before the configured frame timeout value has expired.

  • Page 401: Log Options Configuration Elements

    Log Options Menu: 1) Log Servers 2) Call Detail Recording 3) System Message (DR) log 4) Authentication Message (DA) log Select function from above or <RET> for previous menu: Configure a Syslog Server: Select Log Servers. (Note that upon selection, no configuration is needed for a local log file. The local log file name is preconfigured.) b.

  • Page 402: Log Options Background Information

    USER’S GUIDE UDP P The default port number is “514”, which should work for most installations. Consult your UNIX documentation if you are unsure of the UDP port number. UNIX P ECIMAL RIORITY The default priority value is “38”, which should work for most installations. (Refer to description, or consult your Server documentation if there are any problems).
  • Page 403 • the ease of data retrieval • the management of a multi-node site; all nodes can send their log messages to a central log serv- Offnode log servers must be accessible via the system’s LAN port; they cannot be accessed via the WAN.

  • Page 404: System Messages

    USER’S GUIDE YSTEM ESSAGES The CyberSWITCH reports three different types of system messages: informational, warning, and error messages. These messages are always available on-node via the dr command. To send system message reports to an off-node server, however, you will need to properly configure the setup.
  • Page 405 must configure IP Routing, a LAN IP interface and an IP route to the log server. Then you must enable the CDR feature: • define and configure at least one log device for CDR • connect the Syslog Server • select an associated UNIX priority tag (default = 38) CDR Log Report This option allows you to select the storage destination of your CDR log reports.
  • Page 406 USER’S GUIDE Call Detail Recording Events For switched ISDN services: There are five ISDN CDR events: connect, disconnect, reject, system up, and verify. A connect event occurs when the system authenticates the remote device of an ISDN connection. The time stamp for the connect event marks the time the ISDN connection was established. A disconnect event occurs when the system disconnects a connected device.
  • Page 407 When multiple systems are logging to a shared, central log server, the combination of NAS name, Event and Connection Id allows all the records of a report to be processed without ambiguity. (It is crucial, in this case, that each system Name be set to a unique value; otherwise, it will be impossible to distinguish the NAS which originated a CDR report).

  • Page 408: Event Type

    USER’S GUIDE VENT This field indicates what type of event the associated message is reporting. The possible values are ‘CONNECT’, ‘DISCONNECT’, ‘REJECT’,’TERM CONN’,’TERM DISC’,’TERM SUCC’,’TERM FAIL’, ‘SYSTEM UP’ and ‘CDR VERIFY’. NAS N NAS Name (Network Access Server Name) contains the System Name of the system logging the message.
  • Page 409 The duration is calculated by subtracting the connect event time from the disconnect time. Example: Chicago-Schaumburg 00000001 DISCONNECT 1 OF 4 MonroeCounty PORT 1/1/1 Chicago-Schaumburg 00000001 DISCONNECT 2 OF 4 IN FROM 3135551212 Chicago-Schaumburg 00000001 DISCONNECT 3 OF 4 64Kb 08/28/97 23:11:55 Chicago-Schaumburg 00000001 DISCONNECT 4 OF 4 DURATION 01:11:55 Reject Event Report Contents On a reject event, records 1 through 4 are used.

  • Page 410: Compression Options

    USER’S GUIDE Example: Chicago-Schaumburg SYSTEM UP 1 OF 1 Verify Event Report Contents On a Verify event, only record 1 is used. The event type is CDR VERIFY. No data is filled in for the Remote Device Name field or the Port field. Example: Chicago-Schaumburg CDR VERIFY 1 OF 1 OMPRESSION...

  • Page 411: Compression Options Configuration Elements

    ONFIGURING THER DVANCED PTIONS Compression Options OMPRESSION PTIONS ONFIGURATION LEMENTS OMPRESSION UBSYSTEM TATUS You may enable or disable the compression subsystem status. This option provides enable/disable control over the entire compression subsystem within the system. If this option is enabled, the system will negotiate compression with remote devices per their individual device compression configuration.

  • Page 412: Compression Options Background Information

    USER’S GUIDE OMPRESSION PTIONS ACKGROUND The system data compression capability allows the system to negotiate compression algorithms with a remote device. This compression can be done using some proprietary bridging protocols and also the PPP CCP protocol. After successfully negotiating compression, data is compressed by a peer and transmitted to the system.
  • Page 413 When using Sequence Number check mode and a non-zero number of histories, the STAC-LZS algorithm requires that incoming data packets be decompressed in the order they were compressed. The sequence numbers are used to assure proper ordering and that no packets have been lost.

  • Page 414: Tftp

    USER’S GUIDE TFTP TFTP ONFIGURING Note: You cannot configure TFTP through CFGEDIT. The configuration can only be done through Manage Mode commands. SING ANAGE OMMANDS tftp This command displays the current TFTP configuration. The TFTP configuration information includes the following items: •...

  • Page 415: File Attributes

    Access to files on an system will be controlled by configuration through Manage Mode. File access attributes are associated with the existing system device id’s (GUEST and ADMIN) to allow configuration of file access rights. Configuration of the TFTP feature through Manage Mode allows the administrator to restrict upload and download access for each particular file type.

  • Page 416: File Attributes Background Information

    USER’S GUIDE TTRIBUTES ACKGROUND The tftp change Manage Mode command allows you to assign the file access rights for the TFTP server (see TFTP). Using the fileattr change Manage Mode command, you can change the access rights for each access level, depending on file type. The default file access for the GUEST device is “read”...

  • Page 417: Verification And Diagnosis

    ERIFICATION AND After configuring your CyberSWITCH and before proceeding with normal system operations, we suggest you verify that the system is functional. This segment of the User’s Guide provides instructions for verifying system hardware and system configuration, and then diagnosing potential problems encountered during the verification process.

  • Page 418: Verifying The Base System

    ERIFYING THE VERVIEW This chapter describes the verification process for the base system. It includes the verification process for: • hardware resources • WAN lines • LAN connections • bridge initialization • routing initialization • remote device connectivity • multi-level security •...

  • Page 419: Lan Adapter Initialized

    Error mapping WAN adapter # into Host memory map Type mismatch of configured & installed adapter # Error initializing WAN card: # Failure during static RAM test on adapter # Error downloading operational software to adapter # Error downloading bootstrap program to adapter # To correct the problem, try the following: Verify the resource type and adapter configuration settings as described in the Installation...

  • Page 420: Wan Lines Available For Use

    USER’S GUIDE To correct the problem, try the following: Verify the resource type and adapter configuration settings as described in the Overview Hardware Installation b. Check the configuration for the LAN Adapter resource. The configuration must match the resource and its given slot number. Refer to the If actions a or b fail to correct this problem, check to see if the LAN adapter is properly installed in the CyberSWITCH.

  • Page 421: Dedicated Serial Connections

    If the system has been operational for longer than 2 minutes, verify that the line is correctly attached to the proper system resource and port. If not, wait for 2 minutes and check again for the WAN line availability messages. b.

  • Page 422: Lan Connection Operational

    USER’S GUIDE To correct the problem, try the following: Error mapping adapter # into Host memory map Type mismatch of configured & installed adapter # Terminate the system software: Type: quit <return> Check the configuration for the Serial Adapter resource. The configuration must match the resource type and hardware settings.

  • Page 423: Bridge Initialized

    This command will display a message similar to the following: LAN port 1 Transmit was successful If the system displays this message, then the test packet was transmitted correctly. If you receive the message: LAN port 1 Transmit was not successful Try the following to correct the problem: Check to see if the Ethernet LAN is properly connected to the CyberSWITCH.

  • Page 424: Remote Device Connectivity

    USER’S GUIDE If you do NOT see the initialization message, check the configuration to verify that IP routing is enabled. If IP routing is enabled, and you still do NOT receive a successful initialization message, it may be that you have either not configured a needed interface or have incorrectly configured an interface.
  • Page 425 fix> ConnId=<connect Id> In - CONNECT Call Id=<call Id> Slot=<slot#> Port=<port #> Chans=<bearer channel map> Ces=<communication endpoint suf- fix> ConnId=<connect Id> If the system reports these messages, then continue with the next step. If the system does NOT report these messages, the remote device is not correctly connect- ing to the system.

  • Page 426: Multi-Level Security

    USER’S GUIDE ULTI EVEL ECURITY To verify device and user level security to the CyberSWITCH, the WAN lines that are connected to the system must be available for use, and IP, AppleTalk, or bridging options must be properly initialized. The remote devices must be operational and available to initiate ISDN WAN connections.

  • Page 427: Ip Host Mode

    Telnet from the client PC into the central site. For example, telnet to 100.0.0.1, port 7003. Follow the normal user level authentication process. Once again, determine if the client PC can ping the Service Server. On the Client PC, type: ping 100.0.0.2 <return>...

  • Page 428: Verification Over Alan Connection

    USER’S GUIDE Each section below uses example entries to verify IP Host mode operation. IP addresses are specific to the examples. Substitute the IP addresses of your network when you perform the IP Host mode feature verification steps. Each section also uses the ip ping command. The ip ping command sends a packet to a specified host, waits for a response, and reports success or failure.

  • Page 429: Verification Over A Wan Connection

    ERIFICATION OVER A CONNECTION Determine if a remote IP Host (Host B) can access the system. On the remote IP host type: ping 100.0.0.1 If a message similar to the following is displayed, the IP host mode feature over the specified WAN connection is operational.

  • Page 430: Frame Relay Connections

    USER’S GUIDE RAME ELAY ONNECTIONS To verify a frame relay connection to the CyberSWITCH, the WAN lines that are connected to the System must be available for use, and the routing option must be properly initialized. To verify a frame relay connection, perform the following: Enter the frame relay stats command at the administration console.

  • Page 431: Base System

    Display the system log ( dr command). If the feature is operational, some frames similar to the following will be displayed: (I) 16:28:49.71 #C021: Conn=001 OUT-PPP:LCP (I) 16:28:49.71 #0000: (I) 16:28:49.76 #C021: Conn=001 IN -PPP:LCP (I) 16:28:49.76 #0000: (I) 16:28:59.82 #C021: Conn=001 OUT-PPP:LCP (I) 16:28:59.82 #0000: (I) 16:28:59.82 #C021: Conn=001 IN -PPP:LCP (I) 16:28:59.82 #0000:...

  • Page 432: And A Terminal Server Menu

    USER’S GUIDE Wait 20 seconds, then enter the dr command to display the report log. The status log should display a sequence of the following messages: (I) 17:33:35.38 #1067: Out - LAPB RR, Rx Sequence = 1 (I) 17:33:35.38 #0000: 01 31 00 2A (I) 17:33:35.38 #1067: IN - LAPB RR, Rx Sequence = 1 (I) 17:33:35.38 #0000: 01 31 A2 00 d.

  • Page 433: Verifying Routing Protocols

    ERIFYING OUTING VERVIEW This chapter describes the verification process for the following CyberSWITCH routing protocols: • IP Routing • IPX Routing • AppleTalk Routing To perform the verification procedures, WAN lines must be available and ready to use. LAN attachment components must also be available and ready to use. During some of the procedures, we ask you to enter an administration console command.

  • Page 434: Ip Routing Over Awan Interface

    USER’S GUIDE You should receive a response similar to the following: 100.000.000.002 is alive If the system displays this message, then IP routing over that LAN port is operational. Repeat this step for each LAN port on your Ethernet resource. If this message IS NOT displayed, then IP routing over the LAN connection is not operational.
  • Page 435 Below is an example of a configuration used to verify IP routing over a WAN interface. It uses IP addresses specific to the example. Substitute the IP addresses of your network when you perform the verification steps. It also uses the “ping” command. The “ping” command sends a packet to a specified host, waits for a response, and reports success or failure.

  • Page 436: Ip Routing Over A Wan (Direct Host) Interface

    USER’S GUIDE If the remote IP host CANNOT ping to the CyberSWITCH, try the following: Verify that the LAN interface is properly configured by using the ipnetif command (a Manage Mode command). If the proper LAN interface does not exist, use CFGEDIT to make corrections. b.
  • Page 437 CSX5500 100.0.0.1 100.0.0.0 Host A 100.0.0.2 Determine if a remote IP host can access the CyberSWITCH over the WAN connection. On the remote IP host type: ping 100.0.0.1 <return> If the remote IP host successfully pings to the CyberSWITCH, continue with the step 3. If the remote IP host CANNOT ping to the CyberSWITCH, try the following: Verify that the WAN connection is up.

  • Page 438: Ip Routing Over A Wan Remote Lan Interface

    USER’S GUIDE IP R WAN R OUTING VER A To verify that IP routing is properly operational over a WAN Remote LAN interface, a remote IP Host must be operational and connected to the remote LAN. The remote bridge device must be operational and available to initiate connections.

  • Page 439: Ip Routing Over A Wan Unnumbered Interface

    Determine if a remote IP host can access the LAN interface of the CyberSWITCH over the WAN connection. On the remote IP host type: ping 100.0.0.1 <return> If the remote IP host successfully pings to the CyberSWITCH, then continue with step 5. If the remote IP host CANNOT ping to the CyberSWITCH, try the following: Verify that the remote IP Host can access the WAN RLAN interface of the CyberSWITCH.

  • Page 440: Ip Filters

    USER’S GUIDE CSX5500 "SITE1" 100.0.0.1 Determine if SITE1 can access SITE2 over the WAN connection. On system A type: ip ping 192.1.0.2 <return> Determine if system B can access system A over the WAN connection. On system B type: ip ping 100.0.0.1 <return> If the systems CANNOT ping each other, try the following: Have the remote router ping itself using its LAN IP address.

  • Page 441: Ip Rip Initialized

    If no packets have been discarded, check to see if the filters are properly configured. Try the following: From Manage Mode, issue the ipfilt command. Check the configured packet types, as well as the configured filters: • For packet types, it is important to verify that the contents of the packet in question are indeed correctly specified (IP Addresses, Protocol, TCP Ports, etc.).

  • Page 442: Ip Rip Output Processing On Alan Interface

    USER’S GUIDE If you see this IP RIP initialization message, the IP RIP has initialized successfully. If the CyberSWITCH does not display the correct IP RIP Initialization message, and instead, displays one or more of the following messages: [IP RIP] Initialization failed, unable to allocate buffers [IP RIP] Unable to open RIP/UDP port 512 There may be an a problem within the software.

  • Page 443: Ip Rip Input Processing On Alan Interface

    Determine if a local IP Host A has learned the route to 192.1.1.0 from System A. On IP Host A type: netstat -r <return> If the route to 192.1.10 is displayed, the IP RIP output processing is operational. If the route is NOT displayed, try the following: Using the ipnetif Manage Mode command, verify that the IP RIP Send Control is set to a RIP version that the IP Host can understand.

  • Page 444: Ip Rip Output Processing On A Wan Interface

    USER’S GUIDE CSX5500 Determine if the CyberSWITCH has learned the route to 131.1.0.0 from Router 1. On the administration console type: ip route <return> If the following route entry is displayed among other route entries, the IP RIP input processing is operational.

  • Page 445: Ip Rip Input Processing Operational On A Wan Interface

    perform the verification steps. It also uses the show ip route command. The show ip route command is used by a specific router to display the IP routing table. Substitute the equivalent command for your IP router. CSX5500 192.1.1.1 Make sure that a dedicated connection between system and Router is up and operational. On the system’s administration console: Type: cs <return>...

  • Page 446: Ipx

    USER’S GUIDE The same example that is used in the previous section is used to verify IP RIP input processing on a WAN interface. Make sure that a dedicated connection between system and Router is up and operational. On the CyberSWITCH administration console: Type: cs <return>...

  • Page 447: Ipx Routing Operational

    IPX R OUTING PERATIONAL To verify that IPX routing feature is properly operational, a local NetWare client, a local NetWare server and a remote NetWare server must be operational. The following graphic illustrates an example network we will use to describe how to verify that IPX routing is operational.

  • Page 448: Ipx Remote Lan Connection

    USER’S GUIDE RIP. The output of an ipx route command contains a protocol (P) field for each route en- try, which indicate if it is static (L- locally configured) or dynamically learned via RIP (R). If it is learned via RIP, then basic communication between the CyberSWITCH and the local NetWare server is operational, and it is uncertain why the NetWare server does not re- spond to the ping request.
  • Page 449 From the remote bridge (SITE2), attempt to access the IPX router by issuing the following administration console command: ipx diag xxxx:yyyyyyyyyyyy where: xxxx is the IPX Network Number yyyyyyyyyyyy is the router’s MAC address If connection is up, host sends a message in response to this packet to confirm receipt. Note: The ipx diag and the ipx ping commands both test device connectivity (although both send back different types of responses).

  • Page 450: Ipx Routing Over Awan Connection

    USER’S GUIDE IPX R WAN C OUTING OVER A Determine if NetWare Client A can see the remote NetWare Server “remote.” To do this, activate NetWare Client A’s desktop network neighborhood feature. Then check to see if “remote” is included in Client A’s network neighborhood. If “remote”...
  • Page 451 Create a change in the route (for example, shut down a server). Again examine statistics ( ipx trigrip stats) to verify the change is propagated to other side. If statistics do not reflect change, try the following: Verify triggered RIP/SAP has successfully started for peers. Issue the dr console command and look for the “starting”...

  • Page 452: Appletalk Routing

    USER’S GUIDE constraints. We recommend this value be at least 10% more than what you predict to be needed (more than 10% with larger network topologies). To predict need, use the following formula: (# configured static services) + (# SAP services) Determine number of needed entries in service table: •...

  • Page 453: Appletalk Routing Over The Lan Connection

    Below is an example of a configuration used to verify AppleTalk Routing operation. It uses AppleTalk addresses, zones and resource names specific to the example. Substitute those of your network when you perform the AppleTalk Routing feature verification steps. CSX5500 "Site1"...
  • Page 454 USER’S GUIDE Verify that the AppleTalk LAN port that Local Mac is attached to is in up state by entering the following console command: atalk port b. If the command shows the port is not in up state, wait for a couple of minutes and repeat this step.

  • Page 455: Appletalk Routing Over A Wan Connection

    If the Network Range is correct and the AppleTalk address is not within that range, then try to close the AppleTalk control panel once, and then reopen it. If the AppleTalk address is still invalid, then try to assign a valid address manually by marking User defined box. If you start seeing zones, then you can take out the User defined tag.
  • Page 456 USER’S GUIDE If Remote Mac appears in Select a file server: box, then AppleTalk Routing over the WAN connection is operational. If Remote Mac IS NOT displayed, then AppleTalk Routing feature over the WAN connection is not operational, try the following: Verify that AppleTalk Routing is operational on both the local and the remote LAN.

  • Page 457: Verifying System Options

    ERIFYING YSTEM VERVIEW This chapter describes the verification process for various system options. It includes the verification process for: • SNMP • Dial Out • Call Detail Recording • Compression • Reserved Bandwidth • DHCP Relay Agent • Semipermanent connections •...
  • Page 458 USER’S GUIDE However, if one of the following messages appears, there is an unexpected condition present within the CyberSWITCH software. Contact Customer Support. [SNMP] SNMP initialization failure - unable to allocate necessary memory [SNMP] SNMP initialization failure - unable to open UDP port Verify that the MIB objects can be retrieved via the SNMP get command.

  • Page 459: Dial Out

    Enter dr at the administrative console to display the current system messages. If one of the following messages appears, the SNMP agent does not have enough memory to generate all of the Trap PDUs that need to be generated. If the “snmpOutTraps” counter is not increasing while these reports are being logged, there is an unexpected condition present within the CyberSWITCH System software.
  • Page 460 USER’S GUIDE A message will be displayed indicating whether or not the call was made successfully. If the Dial Out call was not completed successfully, try the following: If you issued the call device <device name> console command to initiate the call, check to see that you entered the device name correctly.

  • Page 461: Call Detail Recording

    • If there are no problems, check for the following system messages: For BRI resource: In - proceeding <#,#> In - disconnect <#,#> - <disconnect cause> For PRI resource: In - accept <#,#> In - disconnect <#,#> - <disconnect cause> If the system reports these messages, then the network disconnected the call attempt.

  • Page 462: Compression

    USER’S GUIDE If syslogd is running but does not receive any log messages, make sure CDR is configured for the UDP port that syslogd is using. The typical port is 514, but some versions of syslogd may use a different port. Check that the priority value that you assigned in the CFGEDIT Call Detail Recording menu (default of 38) matches the priority setting on your syslog server (default of auth.info).

  • Page 463: Reserved Bandwidth

    (I) 15:35:09.98 #80FD: Conn=001 OUT-PPP:CCP (I) 15:35:09.98 #9999: -Alg: 0x11 (STAC-LZS) Len: 5 (I) 15:35:09.98 #9999: (I) 15:35:09.98 #80FD: Conn=001 IN -PPP:CCP (I) 15:35:09.98 #9999: -Alg: 0x11 (STAC-LZS) Len: 5 (I) 15:35:09.98 #9999: (I) 15:35:09.99 #80FD: Conn=001 OUT-PPP:CCP (I) 15:35:09.99 #9999: -Alg: 0x11 (STAC-LZS) Len: 5 (I) 15:35:09.99 #9999: (I) 15:35:09.99 #80FD: Conn=001 IN -PPP:CCP (I) 15:35:09.99 #9999: -Alg: 0x11 (STAC-LZS) Len: 5...

  • Page 464: Dhcp Relay Agent

    USER’S GUIDE DHCP R ELAY GENT The following sections provide instructions to verify that the DHCP/BOOTP Relay Agent is working properly. DHCP R ERIFYING ELAY GENT Regardless of whether or not the Relay Agent has been enabled via configuration, some initialization processing is always performed.

  • Page 465: Verifying The Relay Agent Is Operational

    If an error occurred while trying to enable the Relay Agent, the following message may be displayed in the report log: [DHCP-R] Failed to open UDP port (67), erc=<error return code> This indicates that an internal error occurred while trying to open a UDP port for use by the DHCP/BOOTP Relay Agent.
  • Page 466 USER’S GUIDE In this configuration, the DHCP Client is able to obtain its IP address from the DHCP Server, using the Relay Agent contained in the IP Router on the client’s LAN (“Ruby”). Shortly after a DHCP Client is powered on, it will attempt to get its IP address from a DHCP Server. If it is successful, its IP-related features (e.g., ping, telnet, etc.) will become operational.

  • Page 467: Dhcp: Proxy Client

    DHCP: P ROXY LIENT The following sections provide instructions to verify that the DHCP Proxy Client is working properly. DHCP P ERIFYING ROXY LIENT Regardless of whether or not the Proxy Client has been enabled via configuration, some initialization processing is always performed. If this initialization is successful, there should not be any warnings/errors written to the report log by the DHCP Proxy Client.

  • Page 468: Verifying The Proxy Client Is Operational

    USER’S GUIDE If desired, enter MANAGE mode, and use the dhcp change command to enable the Proxy Client. (Note: CFGEDIT can also be used to change the Proxy Client configuration; but the changes will not take effect until the system is restarted.) d.

  • Page 469: Central Site Remote Access Switch

    IP A ERIFICATION OF DDRESS As IP addresses are obtained from DHCP servers, they are placed into the system’s IP Address Pool. To verify the presence of these DHCP-obtained IP addresses, perform the following: Examine the address pool. Type: ip addrpool <return> Look for addresses with an origin of DHCP.

  • Page 470: Modem Callback

    USER’S GUIDE Configure a calling line ID for the number the device will be using when calling into the CyberSWITCH (under the device’s Telephone tab). d. Enable callback (under the device’s Access/Other tab). Enable outbound authentication if you want to make sure the device you are calling back to is the correct device (under the device’s Access/Authentication tab).

  • Page 471: Verifying A Semipermanent Connection

    On the CyberSWITCH: Enable the call trace message option by issuing the trace on console command. b. Erase the current system messages (issue the er console command). Initiate a call from the remote device to the CyberSWITCH. d. The remote device should indicate it is waiting for a callback. Display the system messages (issue the dr console command).

  • Page 472: Proxy Arp

    USER’S GUIDE ROXY Use the following graphic to help you in verifying that Proxy ARP is operational. When following the verification steps, substitute your addresses for the addresses used in the example. CSX5500 "Site1" 128.168.1.x Host A: 128.168.1.2 Create two Ethernet LANs connected across the WAN with a CyberSWITCH and a second Cabletron platform (for example, another CyberSWITCH product) properly configured.
  • Page 473 On both platforms, issue the iproute manage mode command to make sure that each system knows about the IP subnet at the other Ethernet segment. d. If the two IP host devices still can not communicate with each other, contact your Distributor or Customer Support.

  • Page 474: Troubleshooting

    ROUBLESHOOTING We include the following chapters in the Troubleshooting segment of the User’s Guide: • LCD Messages Provides an explanation of the LCD messages. These messages can provide valuable information for troubleshooting. • System Messages Provides a listing of all system messages, their meanings, and when applicable, possible actions you should take.

  • Page 475: Lcd Messages

    LCD M ESSAGES VERVIEW The CyberSWITCH has an LCD display on its front panel, which displays information in a two-line format. The first line displays initialization and current status information (which includes any errors that have been detected). The second line displays current connection information. These messages can also be displayed on the monitor by issuing the status command.

  • Page 476: Error Lcd Messages

    USER’S GUIDE LCD M RROR ESSAGES The system keeps track of all active errors and displays/records them in a cycle. When the system detects an error, it displays the error on the first line of the LCD. (The “s” indicates slot, “p” indicates port, and “c”...
  • Page 477 System unable to access file. Check for one of the following log error messages: Error opening file <file name> Error reading file <file name>, section = <section name> Error opening file <file name>, slot <slot #> Read 0 bytes from file <file name> for WAN card in slot <slot #> Failure during read of file <file name>...
  • Page 478 USER’S GUIDE Out Svc # (s,p) ISDN line failure. The line connected to slot “s” port “p” is out of service for the reason indicated by # . No layer 1 sync for 5 seconds This problem normally occurs due to WAN cabling problems. Check your cables to make sure they are connected correctly.
  • Page 479 Over Max Charge Monthly call charges exceeded. Monthly call charge tracking is enabled and the configured maximum has been exceeded. Semiperm Error There is an problem with the semipermanent connection. A more detailed error message is displayed in the log messages. Display the log messages (enter dr command) and look for “Semipermanent...”...

  • Page 480: System Messages

    YSTEM ESSAGES VERVIEW System Messages provide useful system information. They are listed in the system’s report log, a memory resident table. To manipulate the report log, use the following commands at the administrative console: dr or ds er or es wr or ws When the CyberSWITCH writes system messages to disk, it stores them in the following locations: Directory:...

  • Page 481: Informational Messages

    NFORMATIONAL ESSAGES The system records informational messages. These are normal events that provide you with current system status. Informational messages include the following categories of messages: • initialization messages • normal operation messages • Spanning Tree messages NITIALIZATION ESSAGES The system reports a variety of messages during a successful system initialization. These messages may include: status of bridge, status of LAN ports and adapters, data link, SNMP, and TFTP information.

  • Page 482: System Message Summary

    USER’S GUIDE YSTEM ESSAGE UMMARY The following pages list all the informational, warning and error messages alphabetically. The text describes the messages, and includes suggestions for problem resolution (if applicable). Note that the trace messages have been isolated for your convenience, and are summarized in the next chapter.
  • Page 483 YSTEM ESSAGES System Message Summary [ACCT] Warning code: Timeout This message is logged when there is no communication with the server. Either the accounting server is not up and running, or it cannot access the IP address. Verify the configuration of the server.
  • Page 484 USER’S GUIDE AppleTalk successfully initialized on WAN port with address <AppleTalk address>. This message is posted when the specified AppleTalk WAN port has initialized successfully. Attempted to start timer for inactive Signaling Session. Attempted to stop timer for inactive Signaling Session. Attempted to use session with no event handler.
  • Page 485 [AUTH] ACE Error receiving server log message acknowledgment. A client syntax error occurred during an authentication attempt via ACE. The server did not respond to the logging of the message. Make sure the ACE server configuration is accurate. [AUTH] ACE LOGIN rejected user: <user name> The remote Authentication server rejected the named user.
  • Page 486 USER’S GUIDE [AUTH] RADIUS IP HOST rejected IP Host id: <IP host Id> The remote Authentication server rejected the IP Host id. This indicates that one of the following has occurred: The <IP Host Id> is not in the remote Authentication server’s database. The <IP Host Id>...
  • Page 487 [AUTH] TACACS LOGIN rejected user: <user name> The remote Authentication server rejected the named user. This indicates that one of the following has occurred: The <user name> is not in the remote Authentication server’s database. The <user name> is entered incorrectly in the remote Authentication server’s database. [AUTH] TACACS No server configured for designated database location.
  • Page 488 USER’S GUIDE [AUTH] Warning code: 0010 Received unexpected authentication response code from server A message was received from an authentication server that contained an invalid response message identifier. [AUTH] Warning code: 0011 An unexpected server responded to the access request An access response message was received from an authentication server that is not configured in the System.
  • Page 489 YSTEM ESSAGES System Message Summary Bridge is operating in RESTRICTED mode Bridge is operating in UNRESTRICTED mode One of the above messages will be displayed to indicate the configured Bridge mode of operation. Calculating CRC’s... An X-Modem transfer has been completed and the received data is being checked for integrity. Callback type <call back type ID>...
  • Page 490 USER’S GUIDE Call Restrictions have been enabled by user command The user has enabled Call Restrictions via the callrest on Dynamic Management command. Call Restriction statistics reset for new day Call Restriction device information. Call Restriction statistics reset for new month Call Restriction device information.
  • Page 491 Calls Active xxx to <sitename> Bandwidth to each site. Capability description processing error - <caperror>. System is in minimal configuration mode. A problem has occurred during system installation. The <caperror> will further identify the problem: • File not found • Could not open file •...
  • Page 492 USER’S GUIDE Cause <cause code> received for DLCI <dlci index> A CLLM message was received indicating that the PVC associated with the indicated DLCI is subject to the event denoted by the indicated cause code. These events are listed below with their corresponding cause code: Cause Code CB disconnect:(1) Password Incorrect...
  • Page 493 CHANNEL in use in HOST_CALL_REQUEST An error has been detected in the R2 or RBS signaling procedure, and will typically result in a failed call. If problem persists, contact your Distributor or Customer Support. [CHAP] Authentication Failure of remote device <device name> - <error message> On-node or off-node (for example, through the RADIUS Server) CHAP authentication has failed.
  • Page 494 USER’S GUIDE Configured adapter # ’x’ type does not exist The interface adapter indicated does not match the resource configuration in the system. Correct the configuration on the system. Connection disconnected for license violation A connection was disconnected because there were more connections in place than allowed with your version of the system software.
  • Page 495 YSTEM ESSAGES System Message Summary Data link test successful: DSL <port # >, CES 1 This message applies for 1TR6 BRI only. If Layer 1 is established, a test will be done to determine if the data link can be established. This message indicates successful test results. Data link up: Slot=<slot # >...
  • Page 496 USER’S GUIDE [DHCP-P] Ignoring offers from DHCP server x.x.x.x; the server MUST be on a primary LAN interface, or IP addresses will not be obtained In order for the DHCP proxy client to successfully obtain IP addresses for multiple interfaces, the DHCP server must reside on a primary LAN interface.
  • Page 497 YSTEM ESSAGES System Message Summary [DHCP-R] Failed to close UDP port (67), erc = <x> An error occurred while the device was trying to disable the DHCP Relay Agent from Manage Mode. Contact your Distributor or Customer Support. [DHCP-R] Failed to open UDP port (67), erc = <x> An error occurred while attempting to enable the DHCP Relay Agent.
  • Page 498 USER’S GUIDE DM card failed FLASH download bad xx SREC The Digital Modem card has failed the firmware update due to a corrupt file. Contact your Distributor or Customer Support. DM card in slot <slot # > has bad FLASH The FLASH memory on the Digital Modem card has been identified as bad during an attempt to update or access it.
  • Page 499 YSTEM ESSAGES System Message Summary CFGEDIT. If the board is configured properly, and the message still appears, contact your Distributor or Customer Support. DM card in slot <slot # > will not come out of reset There are problems initializing the board. Contact your Distributor or Customer Support. DM upgrade timeout.
  • Page 500 USER’S GUIDE Duplicate Calling Line ID <Calling line Id> detected for devices <device name> and <device name> This message is logged at system initialization if any devices are found to share duplicate Calling line Ids, and have no other authentication method. This problem should be corrected by adding additional authentication method(s) to the necessary device(s).
  • Page 501 YSTEM ESSAGES System Message Summary Error during channel initialization Access <access index> An error has occurred during the initialization of the indicated Frame Relay Access, or port. Likely cause of this entry is that the system has run out of memory. Contact your Distributor or Customer Support.
  • Page 502 USER’S GUIDE (Direct Host) interface. Afterwards, configure a LAN interface and then read the WAN (Direct Host) interface. Error parsing WAN (Direct Host) interface: no LAN interface for specified name <name> The LAN network interface associated with this WAN (Direct Host) interface is not present. Use CFGEDIT to delete the problematic WAN (Direct Host).
  • Page 503 YSTEM ESSAGES System Message Summary Facility not subscribed - Slot=<slot # > Port=<port # > This probably indicates a SPID configuration error on the indicated line. The configuration should be corrected on the system or the switch. Failed to allocate enough memory for XILINX load file The WAN card initialization subsystem failed to allocate a buffer for use in downloading files.
  • Page 504 USER’S GUIDE Failure during read of file <file name> for WAN card in slot <slot # > If seen repeatedly, the above message indicates a problem with your hard drive. Contact your Distributor or Customer Support. Failure during read of file ’s’ The WAN card initialization subsystem encountered an error reading the file indicated.
  • Page 505 YSTEM ESSAGES System Message Summary B, D The Network sent a DM(F=1) or a UA and will not allow establishment of the data link at this time. An attempt will be made to re-establish the data link after a switchtype dependent delay.
  • Page 506 USER’S GUIDE File Access Err System unable to access file. Check for one of the following log error messages: Error opening file <file name> Error reading file <file name>, section = <section name> Error opening file <file name>, slot <slot #> Read 0 bytes from file <file name>...
  • Page 507 YSTEM ESSAGES System Message Summary IePvcStatus: Received Status Report for unknown PVC # <dlci index> The indicated unknown DLCI was indicated in a STATUS message received from the network. This DLCI number is entered in the “unknown DLCI” list and can be displayed via the FR LMI system console command.
  • Page 508 USER’S GUIDE Invalid return code from SIG_get_rsc_inbound Invalid return code from SIG_get_rsc_outbound An error has been detected in the R2 signaling procedure, and will typically result in a failed call. The error was due to unrecognizable or incorrect information. If problem persists, contact your Distributor or Customer Support.
  • Page 509 YSTEM ESSAGES System Message Summary [IP] Cannot process incoming remote IP device <IP address>, no rsc avail The IP software was unable to accept the incoming IP device to a WAN (Direct Host) interface because it could not obtain necessary resource. The WAN connection may remain for a while, but the remote IP device will not be able to communicate with any IP devices over WAN.
  • Page 510 USER’S GUIDE [IP] Invalid Peer IP Address <IP address>, WAN IP Stream Closed A PPP or RFC 1294 (IP Host) connection came up, and the IP address of the peer device (pre- configured or negotiated) belongs to a WAN (RLAN) Interface. If the IP address is preconfigured, try changing the peer’s IP address (at the peer device and possibly on the device entry for the peer) that belongs to one of the WAN, WAN (Direct Host), or WAN (UnNumbered) interfaces.
  • Page 511 YSTEM ESSAGES System Message Summary [IP] WAN (Direct Host) Interface for network <network # > on LAN port <port # > initialized successfully This message is posted when WAN (Direct Host) interface for the indicated network is initialized successfully. [IPCP] Invalid pre-configured IP address <IP address> for <device name>, ignored There is a configured IP address for the remote device in the Device Table, but the IP address does not belong to any configured WAN interfaces.
  • Page 512 USER’S GUIDE [IP RIP] All network interfaces used All RIP interface data structures are in use. No RIP information will be sent to any additional interfaces. Contact your Distributor or Customer Support. [IP RIP] Buffers allocated The RIP successfully allocated the UDP buffers needed to transmit RIP packets. [IP RIP] Initialization failed, unable to allocate buffers The RIP initialization was not completed.
  • Page 513 YSTEM ESSAGES System Message Summary [IP RIP] Unable to register with Network Interface Maintenance The IP RIP protocol was unable to register with the IP network interface notification system. Any dynamic changes of the network interface configuration will not be reflected in the RIP interface control.
  • Page 514 USER’S GUIDE [IPX SAP] Buffers allocated The IPX SAP successfully allocated the buffers needed to transmit IPX SAP packets. [IPX SAP] SAP Protocol Initialization successful The IPX SAP protocol was successfully initialized. [IPX SAP] Shutdown complete The IPX SAP protocol was successfully shutdown via Dynamic Management. No IPX SAP service information will be transmitted or received.
  • Page 515 YSTEM ESSAGES System Message Summary LAN Adapter Command Timeout The system expected a command from the LAN adapter or subsystem that it did not receive. Check for proper LAN adapter configuration and hardware installation. If it persists, report the event using the problem reporting form included in Getting Assistance.
  • Page 516 USER’S GUIDE LAN Adapter Reset This is an initialization message. The Ethernet adapter has been reset as part of the adapter initialization sequence. LAN Adapter Response Timeout The system expected a command response from the adapter that it did not receive. Check for proper hardware installation.
  • Page 517 YSTEM ESSAGES System Message Summary LAN Port is now in the Listening state The bridge LAN port is entering the specified state. LAN Port <port # > is now in the <new state> state The bridge LAN port indicated is entering the specified new state. LAN Xmit Error LAN connection failure.
  • Page 518 USER’S GUIDE Manual restart initiated on DM board in slot <slot # > There was an attempt to restart the specified Digital Modem with the modem restart command. Check subsequent log messages to verify the command was successful. Max ATI3 retries exceeded on modem <modem # > of slot <slot # > Modem <modem # >...
  • Page 519 YSTEM ESSAGES System Message Summary Missing BEARER_CAPABILITY in HOST_CALL_REQUEST Missing CALLED_NUMBER_IE in HOST_CALL_REQUEST Missing CHANNEL in HOST_CALL_REQUEST Missing CHANNEL_ID_IE in HOST_CALL_REQUEST Missing TN in HOST_CALL_REQUEST An error has been detected in the R2 or RBS signaling procedure, and will typically result in a failed call.
  • Page 520 USER’S GUIDE Network sent Cause - SPID not supported - <slot # , port # > The indicated line does not support SPIDs; however, a SPID is configured for use on the line. Is the SPID configured incorrectly? Do you have the right switch type? Check the configuration. If the message persists, contact your BRI provider to determine corrective action.
  • Page 521 YSTEM ESSAGES System Message Summary No Sites Connected Currently, no sites are connected to the system. Not enough memory for Security module Not enough system memory available to operate security module. Contact your Distributor or Customer Support. No UA seen in response to SABMEs - Slot=<slot # > Port=<port # > Ces=<communication endpoint suffix> Layer 2 cannot be established between the system and the switch.
  • Page 522 USER’S GUIDE Out Svc # <slot # , port # > ISDN line failure. The line connected to the indicated slot and port is out of service for the reason indicated by # . 1 = No layer 1 sync for 5 seconds This problem normally occurs due to WAN cabling problems.
  • Page 523 YSTEM ESSAGES System Message Summary not be working properly. Check the configuration of the remote device and reboot. If the problem recurs, contact your Distributor or Customer Support. [PAP] Remote device rejected System Information <error message> The system received the PAP Authenticate-Nak packet with the error message <error message> against the previous PAP Authenticate-Request sent by the system.
  • Page 524 USER’S GUIDE PVC for DLCI <dlci index> not ACTIVE A frame was received on the PVC associated with the indicated DLCI which was not active. This is a temporary condition, and results from an asynchronous operation between the network and customer-premise equipment regarding the state of the individual PVCs.
  • Page 525 YSTEM ESSAGES System Message Summary RBS: Encountered unknown source ID. RBS_out_SM<channel # >: NO Dial Digits supplied. RBS: Received unknown primitive from CC. RBS: Received unknown primitive from L1. RBS: Received unknown primitive from ME. RBS: Received unknown primitive from RBS. The above Robbed Bit Signaling messages indicate that the system software sent a message to the RBS state machine that the state machine was unable to recognize or the information was incorrect.
  • Page 526 USER’S GUIDE Received charge amount - <charge amount> The system has received an advice of charge from the network for the call just disconnected. The charge for this call is indicated in the charge amount parameter. Received CLLM while PVC for DLCI <dlci index> in unexpected state <state> A CLLM message was received indicating that a network condition should be expected for the PVC associated with the indicated DLCI.
  • Page 527 YSTEM ESSAGES System Message Summary Security Rejection - Bridge Address Security cannot use Authentication Server Both options (Bridge Address Security and off-node User Authentication) are not supported simultaneously. Security Rejection - Caller did not negotiate security Bridge Security is configured. A caller attempted to send device data before (or without) negotiating the Bridge Address security.
  • Page 528 USER’S GUIDE Semipermanent. Device "x" disconnected by admin The administrator has issued a disc device <device name> command. Therefore, the system will not attempt to call the indicated device again. Issuing the call device <device name> command will make device “x” semipermanent again. Semipermanent.
  • Page 529 [SNMP] Authentication failure, improper access rights There are two possible causes for this message: • The SNMP Agent received a SetRequest PDU that contained a Community Name with an MIB access level of MIB GUEST or MIB USER. The MIB access level must be MIB ADMIN to per- form a SetRequest.
  • Page 530 USER’S GUIDE SSB: i960 I/O memory copy differs from flash image at <address> After loading the i960 POST tests into the I/O memory, a value unexpectedly changed at the address given. SSB: i960 Memory read error at <address>, expected <value>, read <value> While testing the shared memory area (I/O memory and the peripheral buffer memory), an error was detected.
  • Page 531 YSTEM ESSAGES System Message Summary SSB: Post 32 i960hdlc_1 FAILURE The i960 failed its 80532 test using the first HDLC controller. The boot process should continue; however, make note of the error message in the event of a future problem. SSB: Post 33 i960hdlc_2 FAILURE The i960 failed its 80532 test using the second HDLC controller.
  • Page 532 USER’S GUIDE Successfully Loaded Release <X.Y> Issue <Z> The specified release of System software was successfully loaded into memory. Switch could not recognize phone number nnnnnnn The switch did not accept the phone number dialed as a complete number. Check the correctness of the phone number (including any leading digits such as 8 or 9).
  • Page 533 YSTEM ESSAGES System Message Summary [TFTP] Local error # 2: Feature not initialized The TFTP feature was not initialized properly. No file transfer will be attempted. Check the configuration, and then contact your Distributor or Customer Support. [TFTP] Local error # 3: Server not initialized The TFTP Server was not initialized.
  • Page 534 USER’S GUIDE [TFTP] Local error # 14: Bad file name The local file (as defined from a remote host) was not recognized as a valid file name. No file transfer will be attempted. [TFTP] Local error # 15: Bad mode string The TFTP mode string was not NETASCII nor OCTET.
  • Page 535 YSTEM ESSAGES System Message Summary [TFTP] Remote error # 1: (Text from Remote Host) The REMOTE HOST could not find the file specified on its system. No file transfer will be attempted. [TFTP] Remote error # 2: (Text from Remote Host) The REMOTE HOST is reporting an access violation of the specified file.
  • Page 536 USER’S GUIDE The conformance selection is prior to CCITT 1988 Verify that the facilities provided by the service provider are CCITT 1988. The RADIAC Feature is no longer supported. The RADIAC feature has been replaced by the TACACS Feature. The TACACS Feature configuration must be completed before usage. With the addition of User Level Security, the need for the RADIAC GATEWAY is gone.
  • Page 537 YSTEM ESSAGES System Message Summary Too many digits in TN in HOST_CALL_REQUEST (R2 Signaling) This illegal event typically results in a failed call. Contact your Distributor or Customer Support. Tried to free unallocated buffer <sub name>, size=<size> Internal error that should be reported to Customer Support. Transmit rate increased to <transmit rate>: Access <access index>, DLCI <dlci index>...
  • Page 538 USER’S GUIDE Unable to get Digital Modem resource to place call A Digital Modem dial-out call was attempted, and the system was unable to open a resource to place the call. Using the modem status command, check to ensure that there are usable modems available.
  • Page 539 YSTEM ESSAGES System Message Summary Unable to send device information request to CSM after a terminal authentication. Unable to send information to CSM. Verify proper configuration of CSM and Call Control options. Unable to send DL Config Request Unable to send DSL Config Request Unable to send Terminate DSL Request The above three messages indicate that an attempt has been made to dynamically update the Data Link configuration, but the system is unable to send an update message down to a Basic Rate...
  • Page 540 USER’S GUIDE User Level Authentication flag is enabled for Terminal User xxx. Setting flag to disabled. The device definition for xxx should have User Level Authentication disabled. These two messages are displayed together. In device entries for terminal server connections, user- level authentication should not be enabled.
  • Page 541 YSTEM ESSAGES System Message Summary X25 facilities error, bad facility length The facilities length is missing. Contact your Distributor or Customer Support. X25 facilities error, invalid facilities length The length of the facilities packet is invalid. Contact your Distributor or Customer Support. X25 facilities error, invalid DTE address The supplied address in a X.25 call packet was invalid.
  • Page 542 USER’S GUIDE X25 facilities error, facility not available A facility was requested which is not enabled. Verify that the specific facility is enabled by both DTE’s and the service provider. X25 facilities error, packet length negotiation not allowed The DTE packet length does not match the packet length available at either the DCE or the remote DTE, and packet length negotiation is not enabled.
  • Page 543 YSTEM ESSAGES System Message Summary Zone allocation failed, maximum capacity already configured The maximum number of AppleTalk zones have been surpassed. Contact your Distributor or Customer Support. Central Site Remote Access Switch...

  • Page 544: Trace Messages

    RACE ESSAGES VERVIEW Trace messages include the following categories of messages: Call Trace Messages IP Filter Trace Messages PPP Packet Trace Messages WAN FR_IETF Trace Messages X.25 Trace Messages X.25 (LAPB) Trace Messages Before trace messages can be logged to the system report log, you must first enable the type of trace you would like to use.

  • Page 545: Call Trace Messages

    RACE ESSAGES A feature of the CyberSWITCH console is the ability to save and display a record of the high level ISDN calls between the system and the local telephone switch. If calls are unable to be completed, this is normally the first area to look. Call Trace puts messages into the Report log that can be read by using the dr command.

  • Page 546: Call Trace Message Summary

    USER’S GUIDE RACE ESSAGE UMMARY Access information discarded cause Call trace message. This message is used to indicate additional details on the <cause value> received in the “call progress” information message. Alerting off Informational call trace message. The alerting signal information element is off. This indicates additional details on the <signal value>...
  • Page 547 RACE ESSAGES Call Trace Messages In - ABNORMAL RPT Call Id=<call Id> Slot=<slot # > Port=<port # > ConnId=<connect Id> Ces=<communication endpoint suffix> The system has detected an internal error condition. The <parameters> are included for your Distributor or Cabletron Customer Support. An error message describing the problem should be reported following this trace message.
  • Page 548 USER’S GUIDE In - DISCONNECT Call Id=<call Id> Slot=<slot # > Port=<port # > Loc=<location> Cause=<cause value> Ces=<communication endpoint suffix> ConnId=<connect Id> The system has received a disconnect message from the network. The Call Id and Ces values are for your Distributor or Cabletron Customer Support.
  • Page 549 RACE ESSAGES Call Trace Messages In - PROGRESS Call Id=<call Id> Slot=<slot # > Port=<port # > Chans=<bearer channel map> CauseLoc=<cause location> Cause=<cause value> Signal=<signal value> ProgLoc=<progress location> Prog=<progress value> Ces=<communication endpoint suffix> ConnId=<connect Id> The system has received a call progress message from the network. This is usually received in response to sending a call request.
  • Page 550 USER’S GUIDE Out - DL CFG Slot=<slot # > Port=<port # > Ces=<communication endpoint suffix> The system is initializing the indicated data link. Out - DSL CFG Slot=<slot # > Port=<port # > The system is initializing the indicated line. Out - init data link <slot # , port # , ces>...

  • Page 551: Ip Filters Trace Messages

    IP F ILTERS RACE ESSAGES You can trace packets that are discarded as a result of IP Filters. Enable this feature by using the ip filter trace discard command, and disable it with ip filter trace off . Note that when you enable this feature, the report log has the potential of filling quickly.

  • Page 552: Ppp Packet Trace Messages

    USER’S GUIDE PPP P ACKET RACE ESSAGES PPP Packet Trace allows you to display the PPP protocol negotiation that takes place when a link is established. This information is useful when diagnosing mismatches in configuration between two systems. PPP Packet Trace puts PPP packet information into the Report log, which can be accessed by using the dr command.
  • Page 553 • Configure Request The Configure Request is used to indicate the options that are supported by this sending device. The Request contains an option list and the desired values if they are different from the default value. • Configure ACK The Configure ACK is transmitted in response to a Configure Request.

  • Page 554: Wan Fr_Ietf Trace Messages

    USER’S GUIDE • Echo Reply The Echo Reply is transmitted in response to an Echo Request. The Echo Reply packet contains the magic number of the sending device. Until the magic number option has been negotiated the value must be set to zero. •...
  • Page 555 RACE ESSAGES X.25 Trace Messages In - X25 CONNECTION CONFIRMATION ConnId=<connection Id> Access=<access index> RemDteAddr=<x121 address or protocol/route id> The system has received a connect message from the network. This indicates that a new call is now established. In - X25 CONNECTION INDICATION ConnId=<connection Id> Access=<access index > RemDteAddr=<x121 address or protocol/route id>...
  • Page 556 USER’S GUIDE Out - X25 Call Accept LCN <logical channel number>, <number of bytes> bytes The DTE is accepting an SVC call. Out - X25 Call Request LCN <logical channel number>, <number of bytes> bytes The DTE is attempting to place an SVC call. Out - X25 Clear Ind LCN <logical channel number>, <number of bytes>...

  • Page 557: Lapb) Trace Messages

    Out - X25 DTE RR LCN <logical channel number>, <number of bytes> bytes The DTE is acknowledging 1 or more data packets received from the DCE. Out - X25 Reset Ind LCN <logical channel number>, <number of bytes> bytes The DCE is resetting a virtual circuit. Out - X25 Reset Request LCN <logical channel number>, <number of bytes>...
  • Page 558 USER’S GUIDE In - LAPB SABME The DCE is resetting the link layer. In - LAPB UA The DCE is acknowledging a SABM or SABME from the DTE. Out - LAPB DISC The DTE link layer is going off-line. Out - LAPB DM The DTE is going off-line.

  • Page 559: System Maintenance

    YSTEM AINTENANCE This grouping of information provides information to help you maintain your CyberSWITCH once it is operating. Note that the included system statistics information may also prove valuable in troubleshooting. We include the following chapters in the System Maintenance segment of the User’s Guide: •...

  • Page 560: Remote Management

    EMOTE ANAGEMENT VERVIEW Once your system is initially configured (and thus assigned an IP address), you may use a variety of methods to remotely access and manage your system. This chapter describes many of these methods. For information on first-time access (either local or remote), refer to The CyberSWITCH has various tools to manage the system remotely.

  • Page 561: Snmp

    EMOTE ANAGEMENT SNMP SNMP SITE.HQ Network Management Station ISDN SITE.2 SNMP: The NMS gathers information (including problem reports) from any CyberSWITCH SNMP (Simple Network Management Protocol) is a standard way of monitoring communication devices in IP networks. With SNMP, you purchase and then set up a Network Management Station (such as SPECTRUM®...

  • Page 562: Installation And Configuration

    USER’S GUIDE NSTALLATION AND ONFIGURATION SNMP has two basic components: the SNMP Agent, which is executed on the CyberSWITCH, and the Network Management Station (NMS), which you purchase separately for the environment. This section will describe how to install and configure the SNMP Agent. Refer to the specific NMS documentation for its installation instructions.

  • Page 563: Telnet

    ELNET IN_A> LAN TEST Telnet Client LAN Test Passed IN_A> LAN TEST LAN Test Passed Remote 1 Telnet is the standard way of providing remote login service. With Telnet, any user on the LAN or WAN executing a standard Telnet client program can remotely login to the CyberSWITCH and get an CyberSWITCH console session.

  • Page 564: Installation And Configuration

    USER’S GUIDE on the same subnetwork as the Telnet client on System 1’s LAN, a static route is needed to allow System 2 to communicate with devices on Network 1. Because the CyberSWITCH had no Telnet client capabilities in previous releases, the only way to fix the problem was to physically go to the remote site and add a static route.
  • Page 565 IP address of the CyberSWITCH. You will then be presented with the “Enter Login id:” prompt. Now enter commands as if directly connected to the CyberSWITCH. When finished with the session, enter the exit command at the system prompt to end the session with the CyberSWITCH.

  • Page 566: Win95 Dial-Up Networking

    USER’S GUIDE WIN95 D ETWORKING Many dial-up client software packages support a terminal type of connection. One such popular package is Win95 Dial-Up Networking. The CyberSWITCH can handle these terminal-type connections through its digital modem feature, thus providing yet another means of remote management.

  • Page 567: Dialing Out

    IALING Double click on your new dialing icon to bring up the Connect To screen. Enter your user name and password. You may change options by clicking the box labelled Dialing Properties, but this isn’t necessary. Double click on Connect. This should place the call. EMOTE ANAGEMENT WIN95 Dial-Up Networking...
  • Page 568 USER’S GUIDE TFTP TFTP Client PC Remote 1 Remote 1 TFTP (Trivial File Transfer Protocol) is the standard way of providing file transfers between devices. With TFTP any WAN or LAN user executing a standard TFTP client program can transfer files to and from the CyberSWITCH.
  • Page 569 The default file access for the GUEST user is “read” access to all files. The default file access for the ADMIN user is “read” access to the report and statistics files, and “read and write” access to all other files. The default for the TFTP server is ADMIN file access rights. The possible file types and possible accesses for each user are: Users Report Files...

  • Page 570: Carbon Copy

    USER’S GUIDE ARBON Modem CSX5500 The Carbon Copy feature gives you complete remote management. Any command that you can issue on a local console session can be issued with Carbon Copy. Files can also be transferred between the Manager PC and the CyberSWITCH. The disadvantage of using Carbon Copy is that a separate telephone line must be connected to each CyberSWITCH being managed.
  • Page 571 Enter the following command to start up the CCINSTAL program: C:\admin>ccinstal The Carbon Copy System Parameters screen will appear. Follow the directions on the screen to change parameter settings. Comm Port Address COM1 Baud Rate 9600 Modem Type Direct Connect Keyboard Handling USA Keyboard Display Type...
  • Page 572 USER’S GUIDE Baud Rate If you wish to enter a new baud rate, enter a menu selection of “B “(for Baud Rate). Continue to press B until the baud rate you desire is displayed. When you have finished making Carbon Copy configuration parameter changes, enter a menu selection of “X”...
  • Page 573 The system will prompt you for a password. The default password set on each CyberSWITCH is “CC”. We recommend that you change this password on each CyberSWITCH using the CCINSTAL program. Type: cc<return> (or <your password><return> if the password has been changed) If connection with the CyberSWITCH is successful, then the system will remove the Carbon Copy screen.
  • Page 574 USER’S GUIDE [F1] Terminate Link [F2] Switch Voice to Data Mode [F3] Capture Screen/Session [F4] Review/Replay Captured Image [F5] File Transfer Program [F6] Printer/LOG/DOS Control [F7] Terminal Emulation [F8] Data Link Maintenance [F10] Return to Application To initiate the File Transfer Program, press the function key <F5>. The file transfer facility will display a one page tutorial.
  • Page 575 1536Kb 1152Kb 768Kb 1384Kb 1024Kb Legend: nnKb nnKb nnKb Note: The above graph represents the guaranteed throughput without CRC errors. The actual throughput may be higher. EMOVING ARBON To remove Carbon Copy from your system: QUIT from the CyberSWITCH. At the DOS prompt, type “dropcc”. Reboot your CyberSWITCH.

  • Page 576: System Commands

    YSTEM OMMANDS VERVIEW Two classes of system administration commands are available on the CyberSWITCH: guest commands and administrator commands. Guest commands provide current operational information only, and are available to all security levels. Administrator commands allows access to the complete system command set. The log-in to the system controls command access.
  • Page 577 exit Terminates the administration session by logging-out the current administrator. You can start another session by using one of the two log-in commands outlined above. logout Terminates the administration session by logging-out the current administrator. You can start another session by using one of the two log-in commands outlined above. pswd Changes the password for the current access level (administrator or guest).
  • Page 578 USER’S GUIDE IEWING PERATIONAL NFORMATION The following commands are used to view system operational information: Displays a help screen outlining all of the commands that are available. br stats Displays the current system packet statistics. Refer to statistics and their definitions. Clears the administration screen.
  • Page 579 system prompt after the entire file has been displayed. If you are viewing the Release Notes, press the <escape> key to exit the release notes and continue with the installation. If the file name is incorrect, the following message will be displayed: Cannot find file "file name"...
  • Page 580 USER’S GUIDE Primary Rate (D-Channel) Each Primary Rate line which contains at least one data link is considered a Primary Rate (D-Channel) interface. A Primary Rate (D-Channel) interface is “up” if at least one data link associated with the interface is “up.” A Primary Rate interface is “down” if none of the data links associated with the interface is “up.”...
  • Page 581 RYING The system is attempting to call the device. Some connections may be up, but not at the initial data rate. status Displays initialization, current status, and connection information, as well as any errors that have been detected. For details on these messages, refer to the section titled Groups found in the LCD Messages chapter.
  • Page 582 USER’S GUIDE If there was enough memory for all connections, the connection table would reflect both potential and actual connections as the same number. wan stats Displays the current system WAN connection statistics. Refer to available statistics and their definitions. From the “Connection Monitor”...
  • Page 583 Throughput Monitor Wide Area Network Bandwidth Utilization to site = UNDERLOAD BANDWIDTH % of current bandwidth Sample Rate (seconds): Overload: Underload: Idle: < Press F to Freeze data capture, Note: If data compression is being used, an extra line will be displayed on the Connection Monitor screen that will provide the compression and decompression ratios, and the estimated throughput.
  • Page 584 USER’S GUIDE # 4. Example of three samples where actual bandwidth utilization was around 70% and underload was being monitored at around 25% utilization of current bandwidth. In this example, overload is occurring on all three samples. # 5. Example of three samples where actual bandwidth utilization was around 10% and underload was being monitored at around 25% utilization of current bandwidth.
  • Page 585 ONFIGURATION ELATED OMMANDS The following commands provide configuration file information, and restore backup configuration files: Provides information on the status of system configuration changes. With Manage Mode and/ or CFGEDIT, you can make changes to the system configuration. (This, in turn, changes the .nei files.) If you do not commit these changes (Manage Mode) or restart your system (CFGEDIT), these changes do not become current.
  • Page 586 USER’S GUIDE effect, you would need to issue the restart command from the Telnet session of your remote terminal. Note: If you lose your Telnet connection within 10 seconds of entering the restart command, the command will not be executed. ETTING THE ATE AND The following commands are used to set the date and the time on the system:...
  • Page 587 Sess-Id The session Id number associated with the session. Date/Time The date and time the session was initiated Idle (sec) The number of seconds the connection has been idle. Command How the administration session was initiated. Initiation methods include: manage - the user is in the Manage Mode session - the user is using a Telnet session Type (from) The type of session.
  • Page 588 USER’S GUIDE dnet Required parameter. The destination network number. dnode Required parameter. The destination node Id. timeout Optional parameter. The number of seconds to wait for a reply message. The valid range is from 1 to 60 seconds. The default value is 10 seconds. nnnn Optional parameter.
  • Page 589 get_info - The port is verifying network information and obtaining the default zone. get_zones - The port s obtaining a complete zone list for the network. get_routes - The port is requesting routes from another router on the network (if another router is present).
  • Page 590 USER’S GUIDE atalk port stats [clear] This command will display or clear current AppleTalk port statistics. Refer to Statistics, for a list of available atalk port statistics and their definitions. atalk route This command will display AppleTalk static route information. A sample output screen is shown below: network range distance...
  • Page 591 atalk stats rtmp Displays the AppleTalk Routing Table Maintenance Protocol (RTMP) statistics. atalk stats zip Displays the AppleTalk Zone Information Protocol (ZIP) statistics. atalk stats nbp Displays the AppleTalk Name Binding Protocol (NBP) statistics. atalk stats atp Displays the AppleTalk Transaction Protocol (ATP) statistics. atalk zone This command will display AppleTalk zone information.
  • Page 592 USER’S GUIDE DEST SOURCE 90409A000000 00409A001023-L 00409A001324 00409A001023-L 90409A000000 00409A002345-L 00409A003217 00409A002345-L In the above example, the DEST field is the destination MAC address field of the LAN frame. The SOURCE field is the source MAC address of the LAN frame. Next to the source MAC address field is the location of that source address.
  • Page 593 To use this command for troubleshooting, you must use the System Call Trace feature to capture any connect and disconnect messages that are generated by issuing the call device command. To do this: Erase the current report log by entering er at the system prompt. Enable the Call Trace feature by entering trace on at the system prompt.
  • Page 594 USER’S GUIDE Unable to prompt for device name at this time Indicates that the call command would prompt you for a device name, but the necessary resources are not available. The recommended actions are as follows: If possible, enter the device name on the command line. If the device name cannot be entered from the command line (for example, the device name contains command line delimiters of a space, a comma, a colon, or a tab), the user can wait for a few minutes and see if any resources become available.
  • Page 595 Calling <phone number> at <data rate>, device PPP The phone number will show what is sent to the switch. Any imbedded dashes will have been removed. The data rate that is used is displayed. If an invalid data rate is entered, the default of 56 Kbps will use used.
  • Page 596 USER’S GUIDE Unable to prompt for device name at this time Indicates that the call command would prompt you for a device name, but the necessary resources are not available. The recommended actions are as follows: If possible, enter the device name on the command line. If the device name cannot be entered from the command line (for example, the device name contains command line delimiters of a space, a comma, a colon, or a tab), the device can wait for a few minutes and see if any resources become available.

  • Page 597: Dhcp Commands

    OMPRESSION NFORMATION Compression statistics are only available for connections that are using a compression protocol. The following commands are used to display current compression information: cmp stats Displays the compression statistics for all active connections. Refer to a list of available compression statistics and their definitions. cmp stats <device name>...
  • Page 598 USER’S GUIDE DHCP stats clear Clears the DHCP statistics. ip addrpool Displays the current IP address pool. Refer to the ip addrpool command description under IP Routing Commands. IGITAL ODEM OMMANDS These commands allow you to display active connections, display or erase digital modem statistics, add or delete individual modems and upgrade modem firmware when necessary.
  • Page 599 Slot number refers to the slot in which the digital modem card resides, and all refers to all modems on the card. Example: modem upgrade 2 all upgrades all modems on the DM card in slot We recommend you monitor the upgrade process by using the dr console command. The upgrade process should take approximately one minute.
  • Page 600 USER’S GUIDE fr clear Clears the statistics counters associated with the fr stat command for the currently selected access and DLCI. fr clearall Clears all statistics associated with the fr stat command. fr lmi Displays information relating to the LMI link on the currently-selected frame relay access, if that access has the layer Management Interface enabled.

  • Page 601: Ip Routing Commands

    Access. In particular, the DLCI list is maintained within the code to identify all DLCIs for which the network has knowledge, but which are not currently configured. This list is updated when unknown DLCIs are noted through the LMI FULL REPORT STATUS messages, or through CLLM messages.
  • Page 602 USER’S GUIDE The first line indicates: • the number of the condition within that filter which matched the packet and consequently caused a discard action, • the point at which the filter was applied, or a designation of global. For an IP network in- terface, this will be the configured name of the interface.
  • Page 603 [System Name]> ip rip interface Status: Active I/F Type: IP Address: 192.168.1.1 Subnet Mask: 255.255.255.0 Broadcast Address: 192.168.1.255 Transmission: Version 1 Reception: Version 1 or Version 2 Query Response: Version 1 Version 2 Authentication: Password Status: Inactive I/F Type: WAN - UNNUMBERED IP Address: 0.0.0.0 (left.CSX) Subnet Mask:...
  • Page 604 USER’S GUIDE The propagation flag, where A = Always propagate N = Do not propagate H = Propagate when Next Hop Device Connected RIP Version 1/Version 2 visibility flags determine whether or not this route is visible when send the route using RIP 1 or RIP 2, where 0 = Invisible 1 = Visible The type of route, where...

  • Page 605: Ipx Routing

    T/P (Type/Protocol) Type The destination type is “R” for a remote network or host, and “L” for a locally connected network or host. Protocol The mechanism used to determine the route. “L” is for local, “I” is icmp, and “R” is for RIP. Time to Live for this route entry in seconds.
  • Page 606 USER’S GUIDE Displays Negotiation Parameters when device name specified and connected: WAN Statistics for device “xxxx” Negotiation Parameters: IPX Network Address = Telebit Compression = WAN Link Delay = ipx diag <host ipx address> [timeout] Tests device connectivity to specified IPX host by sending out a diag packet. If connection is up, host sends a message in response to this packet to confirm receipt.
  • Page 607 ipx route Displays the current routing table for the system, including static and learned routes. ipx route stats Displays routing table statistics, including maximum number of routes configured, and number of currently-available routes. Refer to ipx service Displays the current routes to IPX services for the system, including static and learned routes. ipx service stats Displays the current service table statistics, including the maximum number of services this router is configured to handle, and the number of currently-available services.

  • Page 608: Lan Commands

    USER’S GUIDE This information can help you determine if additional lines and/or systems are necessary. For example, the high water mark could be compared to the number of ISDN B channels available, taking into consideration the elapsed time. An example output from this command follows: [System Name]>...
  • Page 609 ACKET APTURE OMMANDS In many applications, it is often desirable to monitor incoming LAN data. The pkt commands will allow you to capture, display, save, and load bridged or routed data packets. You must configure the terminal setting the same for Telnet and the terminal emulation package. To do this, use the term set command.

  • Page 610: Novell Netware

    USER’S GUIDE pkt display Displays captured packets that have been collected via pkt on or via pkt load . Note that this command is not supported for a Telnet session. The following is an example pkt display screen: Time(mSEC) Len 0001 0000000000 0064 00004440259C 0002 0000000000 0064 00004440259C 0003 0000000000 0064 00AA00302D25...
  • Page 611 Banyan Vines Packet Detail Screen Packet Number Received at Time 0021 0000022190 mSEC Destination Address FFFFFFFFFFFF EtherNet Type is 0BAD, VINES IP Check Sum Packet Length D75D 0x001A Transport Control Hop Count Dest Network Dest SubNet FFFFFFFF FFFF Packet Type Network Number Query 126697007...

  • Page 612: Radius Commands

    USER’S GUIDE RADIUS C OMMANDS The following console commands may be used to diagnose problems with: • connections to the off-node RADIUS authentication server • CyberSWITCH configuration • authentication server device database entries radius chap Attempts an authentication session using CHAP. The following is an example display of the screen.
  • Page 613 radius ipres Attempts an authentication session using the IP resolution. The following is an example display of the screen. [System Name]>radius ipres IP Address of the Host logging in (<RET> to abort)? 19.63.4.5 Send Radius Authentication Request... Please wait [AUTH] Warning code: 0001 Timeout. radius macres Attempts an authentication session using the MAC resolution.

  • Page 614: Serial Interface Commands

    USER’S GUIDE ERIAL NTERFACE OMMANDS These commands are available only when you have a serial interface card (V.35 or RS232) properly installed: ser <#> stats Displays the current serial interface statistics for each line (V.35 or RS232) attached to the card in the specified slot # .

  • Page 615: Spanning Tree Bridge Information

    YSTEM OMMANDS Spanning Tree Commands State The current state of the port. Possible values are; DISABLED, BLOCKING, LISTENING, LEARNING, and FORWARDING. Path Cost The configured path cost for this port. Designated Cost The path cost to the root bridge for this port. Desig Root Addr The MAC address for the root bridge.
  • Page 616 USER’S GUIDE Root Priority The bridge priority of the root bridge. Root Path Cost The path cost to the root bridge. Root Port Num The port number on the CyberSWITCH that offers the lowest cost path to the root bridge. This is set to 0 if the system is the root bridge.

  • Page 617: Tcp Commands

    STP Enabled A flag that is set to “1” if the Spanning Tree protocol is enabled. TCP C OMMANDS TCP (Transmit Control Protocol) provides a connection-oriented reliable communication for delivery of packets to a remote or on-node device. When the IP feature is enabled, the following TCP commands are available: tcp conns Display the current TCP connection status with the following format:...

  • Page 618: Telnet Commands

    USER’S GUIDE ELNET OMMANDS These commands are Telnet client console commands. These commands provide tools for you when you are using the system as a Telnet client. As a Telnet client, the CyberSWITCH can then be used to Telnet into another CyberSWITCH to perform system maintenance, for example, updating configuration information.
  • Page 619 [System Name]> send Available send commands: - Send "Are You There?" request to server break - Send "Break" request to server. escape - Send current "escape" character to server. synch - Send "Synch" signal to server. - Display this help information. The possible send parameters are defined as follows: send ayt The send ayt command sends the Telnet command function for “Are You There?”...
  • Page 620 USER’S GUIDE The set escape command can be used to change the “escape” character for the current Telnet session. This command may be useful when a device is connected to a target host, using several different Telnet connections. By changing the escape character to a value other than the default (<CTRL>), the user can return to Telnet “command”...

  • Page 621: Tftp Commands

    The following commands are used to display the terminal type currently in use or to set the terminal type. term Displays the terminal type name. term set <terminal type> Allows you to set the terminal type. You may set the terminal type to either vt100 or ANSI. TFTP C OMMANDS The TFTP feature and its commands are only available when IP routing is enabled.
  • Page 622 USER’S GUIDE > TFTP PUT >IP Address of the Host to receive the file (<RET> to abort)? 19.233.45.33 >Enter the name of the local file to send (including the full path) (<RET> to abort)? \config\config.nei >Enter the name for the remote file (including the full path) (<RET>...

  • Page 623: Udp Commands

    trace ipxwan [on/off] Enables or disables the IPXWAN tracing option, which tracks all packets which are received or sent out using IPXWAN protocol, and places this information in the system log. To display the log file, issue the dr command. This option is initially disabled. trace lapb [on/off] Enables or disables the LAPB data link information packet tracing option.

  • Page 624: Wan Commands

    USER’S GUIDE sentry log This command acts as a toggle switch, enabling or disabling user authentication rejection messages. If enabled, authentication rejection messages (identifying users who generated the messages) are written to the log file. To display the log file, issue the dr console command. This option is initially disabled.
  • Page 625 Alarm Type Loss of Signal (Red) Loss of Frame (Red) AIS (Blue) RAI (Yellow) wan l1p error [display or clear] <slot #> When display is used, this command displays the PRI layer 1 error counters. Refer to PRI Error Statistics for a list of available statistics and their definitions.
  • Page 626 USER’S GUIDE trace x25 [on/off] Enables or disables the X.25 packet tracing option. This feature displays up to 15 octets of the packet. To display the log file, issue the dr console command. This option is initially disabled. x25 clear Clears the statistics counters associated with the x25 stat command for the currently selected access and LCN.

  • Page 627: System Statistics

    YSTEM TATISTICS VERVIEW Statistics can either be generated by issuing the ds command to display the set of statistics known as the System Statistics, or by issuing a specific command to display statistics in a specific category. In addition to using the ds command to display the system statistics, they are also automatically written to a statistics log every 30 minutes.

  • Page 628: Call Statistics

    USER’S GUIDE ESTRICTION TATISTICS The system keeps a tally of the following Call Restriction statistics. These statistics can be compared to the limits you have configured. These statistics can be displayed by issuing the cr stats or the ds command at the administration console. call minutes (day) The total call minutes that have been logged for the day.

  • Page 629: Apple Talk Statistics

    PPLE TATISTICS You may display AppleTalk protocol statistics (subdivided into six subgroups) and AppleTalk port statistics. You can display all six subgroups of the AppleTalk protocol statistics by issuing the atalk stats command, or you can display the individual subgroups by adding an extra variable to the atalk stats command.
  • Page 630 USER’S GUIDE ddpTooShortErrors The total number of input DDP datagrams dropped because the received data length was less than the data length specified in the DDP header or the received data length was less than the length of the expected DDP header. ddpTooLongErrors The total number of input DDP datagrams dropped because they exceeded the maximum DDP datagram size.
  • Page 631 atechoInReplies The count of AppleTalk Echo replies received. PPLE OUTING ABLE AINTENANCE You can display this subgroup of AppleTalk statistics by issuing the atalk stats rtmp console command. rtmpInDataPkts A count of the number of good RTMP data packets received by this system. rtmpOutDataPkts A count of the number of RTMP packets sent by this system.
  • Page 632 USER’S GUIDE zip ZoneConflctErrors The number of times a conflict has been detected between this entity’s zone information and another system’s zone information. zipInObsoletes The number of ZIP Takedown or ZIP Bringup packets received by this system. Note that as the ZIP Takedown and ZIP Bringup packets have been obsoleted, the receipt of one of these packets indicates that a node sent it in error.
  • Page 633 YSTEM TATISTICS AppleTalk Statistics atpRetryCntExceeds The number of times the retry count was exceeded, and an error was returned to the client of ATP. PPLE TATISTICS You can display the AppleTalk port statistics by issuing the atalk port stats console command.

  • Page 634: Bridge Statistics

    USER’S GUIDE RIDGE TATISTICS The system collects bridge statistics for each LAN port and for WAN connections. These bridge statistics include information on the number of frames received, forwarded, discarded or transmitted. If the system is configured for two LAN ports, there is a line of counters for each LAN port.

  • Page 635: Compression Statistics

    OMPRESSION TATISTICS The system collects the following compression statistics for each active compression connection. These statistics can be displayed by issuing the cmp stats or the cmp stats <device name> command at the administration console. The cmp stats command will display the compression statistics for all active connections.

  • Page 636: Dhcp Statistics

    USER’S GUIDE peer sent resets The number of decompression resets sent from peer devices. system sent resets The number of decompression resets sent from the System. dropped pkts The number of dropped packets that could not be queued. fcs errors The number of frame checksum errors.
  • Page 637 YSTEM TATISTICS DHCP Statistics DHCP R ELAY GENT TATISTICS BOOTREQUEST msgs rcvd Incremented whenever the system identifies a UDP datagram as a DHCP/BOOTP BOOTREQUEST message. This datagram has passed the initial consistency checks. BOOTREQUEST msgs rlyd Incremented whenever the system has successfully “relayed” a BOOTREQUEST message to a configured destination (i.e., another Relay Agent, or a DHCP/BOOTP server).
  • Page 638 USER’S GUIDE BOOTREPLY bad ’giaddr’: Number of DHCP/BOOTP BOOTREPLY messages that were discarded by the DHCP Relay Agent because the ’giaddr’ (gateway IP address) field could not be mapped to one of the system’s IP network interfaces. BOOTREPLY arp_add0 fail Number of times that the DHCP/BOOTP Relay Agent failed to add a client’s IP address/hardware address pair to the ARP table.

  • Page 639: Frame Relay Statistics

    DHCPNAKs rcvd Incremented whenever the DHCP Proxy Client has received a DHCPNAK message from a DHCP server. Invalid DHCP pkts rcvd Incremented whenever the DHCP Proxy Client encounters a DHCP message that is invalid due to either of the following: •...
  • Page 640 USER’S GUIDE INIT The access state entered when the access is first initialized. The access has entered the LMI dialogue phase, but has not yet received an appropriate LMI STATUS message response. The access state entered when the access either has no LMI, or the LMI message exchange is confirmed.
  • Page 641 # Lost Rx Frame Related to the “# Lost Rx Seq” counter in that it represents the number of actual lost frames, not just the number of times a frame (or frames) was lost. # Invalid Frame Size The number of times a frame is discarded because it exceeded the maximum frame size supported by the frame relay network.

  • Page 642: Lan Statistics

    USER’S GUIDE NOT READY The PVC state entered when the PVC has been marked unavailable by the network via a STATUS message, an alarm condition, or failure of the LMI link. NETWORK OUTAGE The PVC state entered when the PVC has been marked unavailable. This follows the receipt of a CLLM message indicating a network failure has occurred.
  • Page 643 crc errors The number of aligned frames discarded because of a CRC error. align errors The number of frames that are both misaligned and contain a CRC error. resource errors The number of good frames discarded because there were no resources available. pkts xmit The number of packets transmitted on the LAN port.
  • Page 644 USER’S GUIDE ipInUnknownProtos The number of locally addressed datagrams received successfully but discarded because of an unknown or unsupported protocol. ipInDiscards The number of input IP datagrams for which no problems were encountered that would prevent their continued processing, but which were discarded (e.g., for lack of buffer space). Note that this counter does not include any datagrams discarded while awaiting re-assembly.
  • Page 645 YSTEM TATISTICS IP Statistics ipFragCreates The number of IP datagram fragments that have been generated as a result of fragmentation at this system. ICMP G ROUP TATISTICS icmpInMsgs The total number of ICMP messages that the system received. Note that this counter includes all those counted by icmpInErrors.

  • Page 646: Ipx Statistics

    USER’S GUIDE icmpOutErrors The number of ICMP messages that this system did not send due to problems discovered within ICMP, such as a lack of buffers. This value should not include errors discovered outside the ICMP layer such as the inability of IP to route the resultant datagram. In some implementations there may be no error types that contribute to this counter’s value.
  • Page 647 YSTEM TATISTICS IPX Statistics IPX B ASIC YSTEM ABLE TATISTICS ipxBasicSysExistState The validity of this entry in the IPX system table. Setting this field to off indicates that this entry may be deleted from the system table at the IPX implementation’s discretion. ipxBasicSysNetNumber The network number portion of the IPX address of this system.
  • Page 648 USER’S GUIDE ipxBasicSysOpenSocketFails The number of IPX socket open calls which failed. IPX A DVANCED YSTEM ABLE TATISTICS ipxAdvSysMaxPathSplits The maximum number of paths with equal routing metric value which this instance of the IPX may split between when forwarding packets. ipxAdvSysMaxHops The maximum number of hops a packet may take.

  • Page 649: Ipx Route Statistics

    ripIncorrectPackets The number of times incorrect RIP packets were received. ripState Represents the status of the IPX RIP feature: 1 = disabled, 2 = enabled. IPX T RIP S RIGGERED TATISTICS You can access IPX triggered RIP statistics by using the ipx trigrip stats command. trigRipUpdateRequestsSent Number of triggered RIP update requests sent.

  • Page 650: Ipx Sap Statistics

    USER’S GUIDE Available Routes Number of routes currently available on this router. High Water Mark Peak number of routes this router has used. IPX SAP S TATISTICS You can access IPX SAP statistics by using the ipx sap stats console command. sapInstance With the CyberSWITCH, the value of this statistic is always 1.

  • Page 651: Rip Global Statistics

    IPX S ERVICE TATISTICS You can access IPX Service statistics by using the ipx service stats console command. Static Services Number of static services configured on this router. Sap Services Number of services learned through SAP from other routers. Total Services Total number of services.

  • Page 652: Snmp Statistics

    USER’S GUIDE IfStatRcvBadRoutes The number of routes, in valid RIP packets, which were ignored for any reason. Example reasons include: an unknown address family, or an invalid metric. IfStatRcvRequests The number of RIP messages with ‘request’ command code received on this interface. IfStatRcvResponses The number of RIP messages with ‘response’...
  • Page 653 YSTEM TATISTICS SNMP Statistics snmpInBadVersions The total number of SNMP messages that were delivered to the SNMP Agent and were for an unsupported SNMP version. snmpInBadCommunityNames The total number of SNMP messages delivered to the SNMP Agent that used an SNMP community name not known to said system.
  • Page 654 USER’S GUIDE snmpInGetNexts The total number of SNMP Get-Next PDUs that have been accepted and processed by the SNMP Agent. snmpInSetRequests The total number of SNMP Set-Request PDUs that have been accepted and processed by the SNMP Agent. snmpInGetResponses The total number of SNMP Get-Response PDUs that have been accepted and processed by the SNMP Agent.

  • Page 655: Tcp Statistics

    YSTEM TATISTICS TCP Statistics TCP S TATISTICS You can access these statistics by issuing the tcp stats console command. tcpRtoAlgorithm The algorithm used to determine the timeout value used for retransmitting unacknowledged octets. This value is always equal to 4 for the Van Jacobson’s algorithm. tcpRtoMin The minimum value permitted by a TCP implementation for the retransmission timeout, measured in milliseconds.
  • Page 656 USER’S GUIDE tcpInErrs The total number of segments received in error (for example, bad TCP checksums). tcpOutRsts The number of TCP segments sent containing the RST flag. TFTP S TATISTICS You can access these statistics by issuing the tftp stats console command. TATISTICS FOR ERVER OR Successful file puts...
  • Page 657 YSTEM TATISTICS TFTP Statistics Failed file gets Displays the count of failed gets. (Local system failed to download a file from a remote host.) Total bytes put Displays the total number of bytes successfully put. (Number of bytes uploaded from the local system to remote hosts.) Total bytes get Displays the total number of bytes successfully gotten.

  • Page 658: Udp Statistics

    USER’S GUIDE UDP S TATISTICS If the IP operating mode is enabled, you can access the following UDP statistics by using the udp stats command: udpInDatagrams The total number of UDP datagrams delivered to UDP devices. udpInErrors The number of received UDP datagrams that could not be delivered for reasons other than the lack of an application at the destination port.
  • Page 659 WAN L1P S TATISTICS You can access WAN L1P statistics by issuing the wan l1p stats display <slot #> console command. These statistics are divided into the following groups of statistics: PRI S/T (T1/E1) interface statistics, error statistics, and layer 1 general statistics. These groups are defined below.

  • Page 660: Wan Statistics

    USER’S GUIDE Recv Positive Slips The number of PRI frames lost due to timing problems in the positive direction. Recv Parity Errors The number of receive parity errors. Xmit Slips The number of times an error has occurred in the host clock system. If the wander of the transmit route clock is too great, data transmission errors will occur.
  • Page 661 switched call completed A counter that is incremented each time a switched call successfully completes and passes identification. switched call retry A counter that is incremented for each retry of an original switched call attempt. switched call not possible A counter that is incremented each time a switched call needs to be made to a site and it is not possible.
  • Page 662 USER’S GUIDE # Max Connections The maximum number of active VCs allowed at any time. # Active Conn The number of currently active VCs. # Max Conn Active The maximum number of VCs that can be active at any time. # Conn Failed The number of VCs that have failed.
  • Page 663 YSTEM TATISTICS X.25 Statistics # Restarts Received The number of times the X.25 network has been restarted by a remote DTE or the network. # Diag Pkt Sent The number of diagnostic packets sent. # Diag Pkt Received The number of diagnostic packets received. # Bytes Sent count The total number of data bytes sent.
  • Page 664 USER’S GUIDE # RNR Sent count The number of receive not ready packets sent. # RNR Received The number of receive not ready packets received. # Bytes Sent Count The total number of data bytes sent since the last reset or restart. # Bytes Received The total number of bytes received since the last reset or restart.

  • Page 665: Routine Maintenance

    OUTINE AINTENANCE VERVIEW The information in this chapter provides instructions for performing routing maintenance on the CyberSWITCH. The information falls into the following categories: • installing/upgrading system software • executing configuration changes • performing a configuration backup and restore • obtaining system custom information NSTALLING PGRADING...
  • Page 666 USER’S GUIDE changes are NOT dynamic. The changes are saved in a temporary copy of configuration data, and will not affect the current run-time operation of the system in any way. To terminate the session, return to the main CFGEDIT menu. Select the save changes option. Then press <RET>...
  • Page 667 PPENDICES The User’s Guide includes the following appendices: • System Worksheets We have designed a set of worksheets you can fill out before you begin your CyberSWITCH configuration. Once filled out, they will contain information you will need for the configuration process.

  • Page 668: System Adapters

    YSTEM DAPTERS This appendix includes the following illustrations of available CyberSWITCH adapters: • Ethernet • Basic Rate • Primary Rate: PRI-8 PRI-23 PRI-23/30 • Expander • V.35 • RS232 • Digital Modem DM-8 DM-24 DM-24+/DM-30+ • Encryption: DES (USA) Generally, adapter switch settings are preset and adapters are preinstalled prior to shipment. However, in the event you need to do any part of this installation on-site, you must determine the correct switch settings for the adapters in question.

  • Page 669: Central Site Remote Access Switch

    THERNET DAPTER Connectors i960 RISC DRAM (2 SIMMS) YSTEM Front View I/O Address (JP2) Interrupt Block (JP1) Ethernet Adapter Side View Central Site Remote Access Switch DAPTERS...

  • Page 670: Front View

    USER’S GUIDE ASIC DAPTER This adapter is set for slot 3: RJ-45 Connectors TDM Bus Connector Pin 1 Switch Connector CyberSWITCH Interrupt Front View BRI-4 Adapter Side View Block...

  • Page 671: Side View

    RIMARY DAPTERS PRI-8 This adapter is set for slot 5: (jumper on left) (jumper (jumper on on left) bottom) (jumper on bottom) (jumper on right) (jumper on bottom) RJ-45 Connector TDM BUS Connector Pin 1 Switch Connector Central Site Remote Access Switch YSTEM DAPTERS Front View...
  • Page 672 USER’S GUIDE PRI-23 7KLV DGDSWHU LV VHW IRU VORW  RJ-45 MVIP Bus Connector Connector MVIP End-of-Bus Termination PIN 1 I/O Switch TDM Bus Connector PIN 1 Interrupt Block PRI-23 Adapter Pin 1 Connector CyberSWITCH...
  • Page 673 PRI-23/30 MVIP Termination PRI-23/30 Adapter JP11 MVIP Bus Connector TDM Bus Connector TDM Bus Connector Central Site Remote Access Switch YSTEM DAPTERS RJ-45 Connector Interrupt Block I/O Switch...
  • Page 674 USER’S GUIDE XPANDER DAPTER This adapter is set for slot 5: Front View PRI-8 Expander Adapter Side View TDM Bus Connector Pin 1 Interrupt Switch Block CyberSWITCH...
  • Page 675 V.35 A DAPTER This adapter is set for slot 5: DB26 Connectors Connector I/O Switch Note: Switch label “OPEN” is the same as OFF on I/O switch. YSTEM Front View V.35 Adapter Side View Interrupt Block Central Site Remote Access Switch DAPTERS...
  • Page 676 USER’S GUIDE RS232 A DAPTER This adapter is set for slot 5: DB26 Connectors Connector I/O Switch Note: Switch label “OPEN” is the same as OFF on I/O switch. CyberSWITCH Front View RS232 Adapter Side View Interrupt Block...
  • Page 677 IGITAL ODEMS DM-8 This card is configured as the second DM-8 in the system as well as the last card on the MVIP bus: MVIP Termination Jumpers (both jumpers installed; bus terminated) MVIP Bus Connector Pin 1 MVIP Central Site Remote Access Switch YSTEM DAPTERS I/O Jumpers...
  • Page 678 USER’S GUIDE DM-24 The DM-24 adapter consists of a mother board/daughter board combination; daughter board sets on top of larger mother board. Front of board: MVIP Bus Connector Pin 1 CyberSWITCH DM-24 Adapter (front view)
  • Page 679 DM-24, back view (Illustration does not depict switches set for any particular slot): DM-24 Adapter (back view) I/O Address Switches Interrupt Block 1 2 3 4 5 6 1 2 3 4 5 6 MVIP End-of-Bus Termination Switches Note: In rare cases, there may be some variation with silk screening from card to card. “ON” and “1”/”2”...
  • Page 680 USER’S GUIDE DM-24+/DM-30+ The DM-24+ and the DM-30+ adapters consist of a mother board/daughter board combination. The two adapters closely resemble each other, but are distinguishable by the number of modems each supports. There are 30 modem chips on the DM-30+; and 24 modem chips on the DM-24+. MVIP Bus Connector DM-24+ Adapter...

  • Page 681: Back View

    Pertinent switches are located on the back side of the mother board. The following illustrates switch settings for a DM-24+ board in slot 6: IR10 IR10 IR11 IR11 IR12 IR12 IR14 IR14 IR15 IR15 Interrupt Switches Interrupt Switches 1 2 3 4 1 2 3 4 5 6 7 8 1 2 3 4 1 2 3 4 5 6 7 8...

  • Page 682: Encryption Adapter

    USER’S GUIDE NCRYPTION DAPTER DES A (US V DAPTER ERSION Battery RSA/DES Adapter (USA) Note: Jumper J1 must be installed for the board to be operational. CyberSWITCH PQR512 Chips on RSA Board Only...
  • Page 683 YSTEM ORKSHEETS The worksheets included in this appendix will be helpful in configuring and managing your system. They capture important network information. To see examples of completed worksheets, refer to the Example Networks Guide. Worksheets included in this appendix are: Network Topology •...

  • Page 684: Network Topology

    USER’S GUIDE ETWORK OPOLOGY CyberSWITCH...

  • Page 685: System Details

    System Name: _____________________ PAP Password:_______________ CHAP Secret:___________________ ESOURCES Type INES BRI Lines Name Slot Port PRI Lines Name Slot V.35 and RS232 Lines Name YSTEM ETAILS Slot Switch type Line type Call screen Port Framing type Line coding Slot Port Device/Network Central Site Remote Access Switch YSTEM...
  • Page 686 USER’S GUIDE CCESSES Dedicated Accesses Over ISDN: Line name 56 Kbps 56 Kbps 56 Kbps 56 Kbps Over Serial connection: Line name Internal Internal Internal Internal X.25 Accesses Over ISDN: Line name Access name Over serial connection: Line name Access name Frame Relay Accesses Over ISDN Line name...

  • Page 687: Device Information

    Device Name: _____________________________ Calling (ISDN, FR, etc.) Information Line Protocol Base Data Rate Initial Data Rate Max Data Rate Dial-Out Number(s) Authentication Information : PAP Password CHAP Secret IP Host ID Bridge Ethernet Address* Bridge Password* CLID(s) * HDLC Bridge only Protocol for this particular device? Bridge Bridging enabled?

  • Page 688: Routing Information

    USER’S GUIDE RIDGING AND RIDGING Bridging Mode of Operation Bridge Filters Bridge Dial Out/ Known Connect List IP R OUTING IP Routing Mode of Operation Network Interface Information Unnumbered WAN Remote LAN Traditional WAN Direct Host WAN IP Host Mode CyberSWITCH OUTING NFORMATION...
  • Page 689 IP R OUTING CONTINUED Static Routes Destination network address IPX R OUTING Routing Information IPX routing Internal network number Network Interface Information Name External network number Remote LAN Name External network number Static Routes Destination network number NetWare Static Services Service name Mask default?
  • Page 690 USER’S GUIDE PPLE OUTING AppleTalk Routing/Port Information AppleTalk routing Unnumbered WAN MAC Dial In WAN WAN (Remote LAN) AppleTalk Port Static Routes Network type Destination to be network accessed range extended nonextended extended nonextended CyberSWITCH enabled disabled Name Port number Network type extended nonextended...
  • Page 691 CFGEDIT M VERVIEW The following pages provide an outline of the CyberSWITCH CFGEDIT configuration utility. As you configure your system, you may find it helpful to use this outline as a map to help you navigate through CFGEDIT. Note: All options listed may not be available on your particular system. The availability of these options depends upon the platform and software you have ordered, as well as your configuration choices.
  • Page 692 USER’S GUIDE HYSICAL ESOURCES ESOURCES • COMMPORT • Basic Rate switch type • T1/E1/PRI switch type synchronization • Expander • V.35 • RS232 • Ethernet 1, 2 • Digital Modem 8, 24, 30 mu law A-law • DES-RSA INES • ASYNDMPORT •...

  • Page 693: Options Menu

    PTIONS RIDGING • Enable/Disable • Spanning Tree • Mode of Operation unrestricted, restricted • Bridge Filters protocol definition filters (source, destination, protocol, packet data) • Known Connect List IP R OUTING • Enable/Disable • IP Operating Mode (host/router) • Interfaces WAN (Direct Host) WAN (RLAN) WAN (unnumbered)
  • Page 694 USER’S GUIDE IPX R OUTING • Enable/Disable • IPX Network Number • IPX Interfaces Remote LAN • Routing Protocols IPX RIP, IPX SAP number table entries • IPX Static Routes RIP info number of ticks, hops next hop destination IPX number •...
  • Page 695 • Global options • LCP options • IPCP options • Link failure options ONTROL • Throughput Monitor • Call Interval • Monthly call charges • Call Restrictions • Device Profile • Bandwidth Reservation • Semipermanent Connection • Connection Services Manager (CSM) for Call Control enable/disable TCP port number •...

  • Page 696: Security Menu

    USER’S GUIDE ECURITY ECURITY EVEL • No Security • Device Level Security • User Level Security • Device and User Level Security YSTEM PTIONS AND NFORMATION • System Options PAP password CHAP challenge Bridge MAC address IP Host ID Calling Line ID •...
  • Page 697 Authentication PAP password CHAP secret outbound authentication user level authentication IP host ID bridge Ethernet calling line ID IP information IP address IP enable/disable make calls for IP data enable/disable calls for IPX data IPXWAN IPX routing none RIP/SAP trig RIP/SAP IPX External WAN network number IPX spoofing AppleTalk information...
  • Page 698 USER’S GUIDE NODE ERVER NFORMATION • TCP port • RADIUS Primary Server Secondary Server Miscellaneous info number of retries time between retries • TACACS Primary Server IP Address Shared Secret UDP Port Number Secondary Server Miscellaneous info number of retries time between retries packet format •...

  • Page 699: Getting Assistance

    ETTING SSISTANCE EPORTING ROBLEMS For a fast response, please take the time to fill out the System Problem Report to inform us of any difficulties you have with our products. A copy of this report can be found at the end of this chapter.
  • Page 700 DATE: ______________ TO: CUSTOMER SERVICE Cabletron Systems (603) 332-9400 PHONE (603) 337-3075 FAX _____________________________________________________________________________________________ OFTWARE Release: __________ Issue: __________ ARDWARE Platform __ CSX154 __ 9W006-200 __ CSX155 __ 9W006-400 __ CSX1200 __ 9W007-200 __ CSX5500 __ 9W007-400 __ CSX6000 __ 9W007-220 __ CSX7000 ROBLEM Type...
  • Page 701 DMINISTRATIVE The following table lists all system administration commands. Guest commands are identified in the command column. Command (GUEST) atalk arp atalk ping <dnet>.<dnode> {timeout/dnnn] example: atalk ping 1.3 30 /d200 atalk port atalk port stats [clear] atalk route atalk stats atalk stats atp atalk stats ddp atalk stats echo...
  • Page 702 USER’S GUIDE Command cdr verify (GUEST) cfgedit (GUEST) cmp stats cmp stats <device name> cmp clear <device name> cmp clearall cr stats (GUEST) date <month, day, year> dhcp stats dhcp stats clear disc device <device name> (GUEST) (GUEST) exit (GUEST) fr a <frame relay access “n”>...
  • Page 703 Command fr dbg level displays the current debug level for frame relay fr dbg level <level> sets the current debug level for frame relay fr display displays the configuration information for the selected frame relay access fr lmi displays LMI link information for the selected frame relay access fr stats displays statistics for the selected frame relay access and...
  • Page 704 USER’S GUIDE Command ipx sap stats ipx spoof stats ipx stats ipx trigreq <device> ipx trigrip stats ipx trigsap stats isdn usage isdn usage clear lan stats lan stats clear lan test led status list [file name] log cdr display (GUEST) log cdr erase (GUEST)
  • Page 705 Command modem upgrade <slot# installs new modem firmware onto specified modem modem# > modem devices <data> displays active modem connections neif displays the interface table pkt capture <connection mode> specifies which packets will be captured by the packet capture feature (all, reqd, pend, actv, idle, or none) pkt mac enables the MAC address monitor display pkt [on/off]...
  • Page 706 USER’S GUIDE Command ser <slot # > signal session session kill <session id> snmp stats start_ne status (GUEST) tcp conns tcp stats telnet telnet <ip-address>[port # ] telnet mode commands: close exit open [target host][port # ] send [send parameter] set <name><value>...
  • Page 707 Command trace lapb[on/off] enables or disables the packet tracing option for LAPB data link information trace ppp [on/off] enables or disables the tracing of ppp packets trace x25 [on/off] enables or disables the packet tracing option for X.25 connection information udp conns displays UDP connection status udp stats...
  • Page 708 ANAGE OMMANDS The following table displays the available Dynamic Management commands: Command ace change ace reinit admlogin [change] alarm alarm [off/on] bwres bwres [on/off] callrest callrest [off/on] commit commit status csm change datalink datalink [add/change/delete] dedacc destfilt destfilt [add/change/delete] device device [add/change/delete] dhcp dhcp change...
  • Page 709 Command exit exits from Manage Mode and returns to the normal system command mode fileattr displays the current user file access rights (guest or admin) fileattr change allows you to change current file access rights configuration data help displays a list of the valid Manage Mode commands ipfilt updates the IP filter configuration ipnamesv...
  • Page 710 USER’S GUIDE Command ipxsvc [add/change/delete] ipxspoof ipxt20 line lineprot lineprot change netlogin netlogin change offnode options options change pktfilt pktfilt [add/change/delete] profile protdef protdef [add/change/delete] protfilt protfilt [add/change/delete] radius radius change readme resource seclevel semiperm snmp CyberSWITCH adds/changes/deletes an IPX service allows you to configure system level spoofing data allows you to configure IPX type 20 information displays the current line configuration data...
  • Page 711 Command srcfilt [add/change/delete] adds/changes/deletes the a source address filter tacacs displays TACACS off-node server configuration tacacs change allows changes to the TACACS off-node server configuration termopt allows you to change default async protocol configuration tftp displays the current TFTP configuration tftp change allows the current TFTP configuration to be changed thruput...
  • Page 712 AUSE ODES ABLE The following table provides Q.931 cause codes and their corresponding meanings. Cause codes may appear in Call Trace Messages. Dec Value Hex Value Q.931 Cause valid cause code not yet received unallocated (unassigned number) Indicates that, although the ISDN number was presented in a valid format, it is not currently assigned to any destination equipment.
  • Page 713 Dec Value Hex Value Q.931 Cause no answer from device (device alerted) Indicates that the destination has responded to the connection request but has failed to complete the connection within the prescribed time. Problem at remote end. call rejected Indicates that the destination was capable of accepting the call (was neither busy nor incompatible) but rejected the call for some reason.
  • Page 714 USER’S GUIDE Dec Value Hex Value CyberSWITCH Q.931 Cause no circuit/channel available Indicates that the connection could not be established because there was no appropriate channel available to handle the call. destination unattainable degraded service network (WAN) out of order Indicates that the destination could not be reached because the network was not functioning correctly and that the condition is expected to last for a relatively long time.
  • Page 715 Dec Value Hex Value Q.931 Cause outgoing calls barred outgoing calls barred within CUG incoming calls barred incoming calls barred within CUG call waiting not subscribed bearer capability not authorized Indicates that the device has requested a bearer capability that the network is able to provide, but that the device is not authorized to use.
  • Page 716 USER’S GUIDE Dec Value Hex Value CyberSWITCH Q.931 Cause invalid call reference value Indicates that the remote equipment has received a call with a call reference that is not currently in use by the device-network interface. identified channel does not exist Indicates that the receiving equipment has been requested to use a channel that is not activated on the interface for calls.
  • Page 717 Dec Value Hex Value Q.931 Cause message type non-existent or not implemented Indicates that the receiving equipment received a message that was not recognized either because the message type was invalid, or because the message type was valid but not supported. This is either a problem with the remote configuration or a problem with the local D-channel.
  • Page 718 USER’S GUIDE Dec Value Hex Value UNKNOWN CyberSWITCH Q.931 Cause Indicates that an event occurrent but that the network does not provide causes for the actions that it takes, therefore the precise nature of the event cannot be ascertained. This may, or may not, indicate the occurrence of an error.
  • Page 719 NDEX 219, 221 access request retries accesses 242, 429 alternate accesses dedicated frame relay ISDN access X.25 accessing the CyberSWITCH ACE Authentication Server alternate method of configuring configuring action on data timeout active WAN peer adapter switch settings adapters 59, 670 basic rate cabling configuring adapters...
  • Page 720 USER’S GUIDE bridging bridge password configuration dial out device list configuration using bridge filters using known connect list filters operation verification overview problem diagnosis (initialization) statistics bus cable cabling adapters for multiple WAN adapters requirements call commands call control 404, 405, 634 call detail recording viewing reports call interval parameters...
  • Page 721 configuration 71, 665 files packet types restoring tools CFGEDIT dynamic management congestion control 297, 303 connection filters Connection Services Manager. See CSM. connections table connectivity statistics console connections digital modem direct null-modem remote remote analog console access using telnet Console Information Port (CIP), refers to RS232 port country code 117, 124...
  • Page 722 USER’S GUIDE dynamic device option dynamic management command summary E1/R2 signaling Encapsulating Security Payload (ESP) 136, 327 encapsulation 32, 160, 236 encryption configuration link layer network level 69, 89, 231, 682 encryption adapters encryption method (ACE) error messages error threshold count 33, 36, 239 ESP Tunnel mode 58, 669...
  • Page 723 IP filters, continued packet type configuration per-device TCP configuration trace messages UDP configuration verification IP host devices IP host mode host identifier 132, 135 interface verifying IP operating mode ip rip commands ip route commands IP routing address pool commands configuring enabling isolated mode...
  • Page 724 USER’S GUIDE LAN adapter initialization messages problem diagnosis 422, 423 verification messages lan commands LAN IP interface LAN statistics lan test LAPB LCD cables LCD messages line line build out line encoding lineprot lines background information call screening methods 119, 122 configuration for BRI resource for PRI resource...
  • Page 725 network number network security configuring device and user level security configuring device level security configuring no security configuring user level security network service provider CyberSWITCH as NSP network topology worksheet 153, 154, 157, 235 next hop NI-1 normal operation messages 213, 216, 217 offnode off-node server information...
  • Page 726 USER’S GUIDE RADIUS Server 211, 214 configuring configuring a RADIUS Accounting Server configuring login information configuring user-level security digital modem RFC2138 static route lookup rate measurement interval readme region regulatory compliance of platforms release notes remote device connectivity operation verification remote IP address 142, 325, 329, 346 remote LAN...
  • Page 727 379, 381 semipermanent connections and call device commands and call restrictions and throughput monitor commands 379, 381 configuring verification sentry commands ser commands service tables (IPX) session shared secret (RADIUS) Shared Secret Key signaling method 350, 353, 561 SNMP configuring remote management statistics verification...
  • Page 728 USER’S GUIDE 294, 300, 305 statistics tcp commands 94, 124 bus connections Teleos Simulator 100, 563 Telnet remote management telnet commands term commands term set 33, 102, 392, 393, 394 terminal mode authentication CDR information limitations terminal server menu problem diagnosis 224, 394 terminal server security termopt...

  • Page 729: Central Site Remote Access Switch

    verifying the installation, continued IP host mode IP router initialized IP routing over interfaces IPX routing multi-level security PPP link detection failure proxy ARP remote device connectivity reserved bandwidth semipermanent connections SNMP triggered RIP/SAP verifying an X.25 connection WAN direct host WAN lines 193, 253 virtual circuits...

This manual is also suitable for:

Csx6000Csx7000Cyberswitch 5500Cyberswitch 6000Cyberswitch 7000

Table of Contents