Summary of Contents for 3Com OFFICE CONNECT CABLE/DSL SECURE GATEWAY 3CR856-95
Page 2
LICENSE.TXT or products. !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be Ensuring that all products can be recycled, reused and disposed of safely.
ONTENTS Contents Setting Up Your Computers Obtaining an IP Address Automatically About This Guide Windows 2000, XP Naming Convention Windows 95, 98, ME Conventions Macintosh OS 8.5, 9.x Disabling PPPoE and PPTP Client Software Introducing the OfficeConnect Cable/DSL Secure Gateway OfficeConnect Cable/DSL Secure Gateway Running the Setup Wizard Cable/DSL Secure Gateway Advantages...
Page 4
LAN Settings Forgotten Password LAN IP Settings Alert LED DHCP Clients List Recovering from Corrupted Software Internet Settings Frequently Asked Questions Connection to ISP Using Discovery Setting up NAT Running the Discovery Application Configuring the Firewall Windows Installation (95/98/2000/Me/NT) The Virtual Servers Menu PC Privileges IP Addressing Special Applications...
Page 5
Cable Specifications Safety Information Important Safety Information Wichtige Sicherheitshinweise Consignes importantes de sécurité End User Software Licence Agreement 3Com Corporation END USER SOFTWARE LICENSE AGREEMENT ISP Information Information Regarding Popular ISPs Glossary Index Regulatory Notices...
Information that alerts you to potential Most user guides and release notes are available in Adobe Acro- loss of data or potential damage to an bat Reader Portable Document Format (PDF) on the 3Com World application, system, or device Wide Web site:...
Your suggestions are very important to us. They will help make You can now register your OfficeConnect Cable/DSL Secure our documentation more useful to you. Please e-mail comments Gateway on the 3Com web site and receive up-to-date about this document to 3Com at: information on your product: pddtechpubs_comments@3com.com...
ABLE ECURE ATEWAY ® Welcome to the world of networking with 3Com . In the Figure 1 Example Network Without a Cable/DSL Secure Gateway modern business environment, communication and sharing information is crucial. Computer networks have proved to be one...
Figure 2 Example Network Using a Cable/DSL Secure Gateway Cable/DSL Secure Gateway Advantages The advantages of using a Gateway include: Your existing Internet Cable/DSL Shared Internet connection. Modem No need for a dedicated, “always on” computer serving as your Internet connection. Cross-platform operation for compatibility with Windows, Unix and Macintosh computers.
Package Contents Minimum System and Component Requirements The OfficeConnect Cable/DSL Secure Gateway kit includes the Your OfficeConnect Cable/DSL Secure Gateway requires that the following items: computer(s) and components in your network be configured with at least the following: One OfficeConnect Cable/DSL Secure Gateway A computer with an operating system that supports TCP/IP One power adapter for use with the Gateway networking protocols (for example Windows...
normal operation. See “Recovering from Corrupted Software” Front Panel page The front panel of the Gateway contains a series of indicator On for 2 seconds, and then off The Gateway has lights (LEDs) that help describe the state of various networking detected and prevented a hacker from attacking your network and connection operations.
the connected device is switched off Rear Panel there is a problem with the connection. “Troubleshooting” page The rear panel (Figure 4) of the Gateway contains four LAN ports, one Ethernet Cable/DSL port, and a power adapter socket. 4 Cable/DSL Status LED Figure 4 Cable/DSL Secure Gateway - Rear Panel Green (100 Mbps link) / Yellow (10 Mbps link) Indicates a number of different conditions, as described below.
NSTALLING THE ATEWAY When positioning your Gateway, ensure: Introduction It is out of direct sunlight and away from sources of heat. This chapter will guide you through a basic installation of the Cabling is away from power lines, fluorescent lighting fixtures, OfficeConnect Cable/DSL Secure Gateway, including: and sources of electrical noise such as radios, transmitters and Connecting the Gateway to the Internet.
PPPoE DHCP If your ISP allocates IP information dynamically using DHCP they If your ISP allocates IP information dynamically over PPPoE, you may require you to use keep a fixed MAC Address and Host need a User Name and Password: Name for security purposes.
To use your Cable/DSL Secure Gateway to connect to the Internet Powering Up the Gateway through an external cable or DSL modem (Figure Plug the power adapter into the power adapter socket located Use the supplied cable to connect the Gateway's Ethernet on the back panel of the Gateway (refer to “Power Adapter Cable/DSL port to your Cable/DSL modem.
ETTING OMPUTERS The OfficeConnect Cable/DSL Secure Gateway has the ability to A screen similar to Figure 6 should be displayed. Select Internet dynamically allocate network addresses to the computers on your Protocol (TCP/IP) and click on Properties. network, using DHCP. However, your computers need to be Figure 6 Local Area Connection Properties configured correctly for this to take place.
Figure 7 Internet Protocol Properties In the TCP/IP control panel, set Configure: to “Using DHCP Server.” Close the TCP/IP dialog box, and save your changes. Restart your computer. Disabling PPPoE and PPTP Client Software If you have PPPoE or PPTP client software installed on your computer, you will need to disable it.
Figure 8 Internet Properties You may wish to remove the PPPoE client software from your computer to free resources, as it is not required for use with the Gateway. Disabling Web Proxy Ensure that you do not have a web proxy enabled on your computer.
UNNING THE ETUP IZARD If the Gateway needs to be configured, for example if it has not The Login screen, as shown in Figure 10, should appear in your yet been used or has been reset, it will run the Setup Wizard browser.
New Password and Confirm Password fields. The default password for the Gateway is ‘admin’. It is case sensitive and must be entered as the Old Password the first time you configure the Gateway. 3Com recommends that you change the password from its default value.
Figure 13 Change Administration Password Screen To set the Gateway to World Time (UTC): Select (GMT) Greenwich Mean Time from the drop-down menu. Ensure that the Enable Daylight Saving box is cleared. Click Next to continue. Figure 14 Time Zone Screen Choose a password that you can remember but that others are unlikely to guess.
Auto-Configuration Settings Internet Settings If the Gateway is able to detect a PPPoE or DHCP server on its The Internet Settings window allows you to set up the Gateway Ethernet Cable/DSL port then it will offer you the option of for the type of Internet connection you have.
Page 27
Static IP Mode Dynamic IP Address Mode To setup the Gateway for use with a static IP address connection, To setup the Gateway for use with a dynamic IP address use the following procedure: connection: Figure 17 Static IP Mode Screen Figure 18 Hostname Screen Enter your IP Address in the IP Address text box.
Page 28
Figure 19 Clone MAC Address Screen PPPoE Mode To setup the gateway for use with a PPP over Ethernet (PPPoE) connection, use the following procedure: Figure 20 PPPoE Screen If your ISP requires an assigned MAC address, select the appropriate radio button: Yes, please clone the MAC address from the PC I’m currently using if the computer you are using now is the one that was Enter your PPP over Ethernet user name in the PPPoE User Name...
Page 29
If your ISP requires the addresses of a Primary and Secondary Enter your PPTP user name in the PPTP User Name text box. DNS Server then enter them in the fields labelled Primary DNS Enter your PPTP password in the PPTP Password text box. Address and Secondary DNS Address.
This should be a private network so that it does not conflict with IP addresses on the Internet. See “Private IP Addresses” page 3Com recommends that you use the default IP address and subnet mask unless you already have a network that uses different values.
Gateway and click Finish to save your settings and restart the Gateway. Figure 25 Configuration Summary Screen 3Com recommends that you activate the DHCP server and leave it at the default values unless you already have a DHCP Server on your network.
Page 32
If want to make changes, click the Back button until you reach the screen which contains the settings you want to change and follow the instructions from that point. Your Gateway is now configured. You can start using your Gateway straight away or further configure your Gateway (see “Gateway Configuration”...
ATEWAY ONFIGURATION This chapter describes all the options available through the LAN Settings — allows you to configure IP address and Gateway configuration pages, and is provided as a reference. subnet mask information, set up DHCP server parameters, and display the DHCP client list. Internet Settings —...
Changing the Administration Password Welcome Screen You should change the password to prevent unauthorized access to the Administration System. The Welcome section allows you to view the Notice board and to change your Password. You can also gain access to the Figure 28 Password Screen Configuration Wizard.
Setup Wizard LAN IP Settings The Unit Configuration screen allows you to change the TCP/IP Figure 29 Wizard Screen settings of your Gateway and its DHCP server. Figure 30 Unit Configuration Screen Click the WIZARD... button to launch the configuration wizard. Refer to “Running the Setup Wizard”...
Page 36
Windows PCs that obtain an address from its DHCP server. your network can have a maximum of 254 addresses from If you have a 3Com NBX Call Processor on your network enter its 192.168.1.1 to 192.168.1.254 (192.168.1.0 and 192.168.1.255 IP address in the 3Com NBX Call Processor box.
DHCP Clients List Expired leases are only reused when there are no free leases available. When an expired lease is re-issued the oldest lease that The DHCP Clients screen provides details of the devices that have is not a fixed association is used. been given IP addresses by the Gateway’s DHCP server.
Figure 32 Fixed DHCP Mapping Screen ISP Gateway DNS address(es) Dynamic IP Address (DSL or Cable) Dynamic IP addressing (or DHCP) automatically assigns the Gateway IP information. This method is popular with Cable providers. This method is also used if your modem has a built in DHCP server.
Connection to ISP Select the addressing method that your ISP uses to allocate your Gateway’s Internet IP address. Choose from the options in the IP This option, shown in Figure 33, allows you to change the Allocation Mode drop-down box and the screen will refresh with method your Gateway uses to connect to your ISP.
Page 40
Configuring a Static IP Address Subnet Mask — The subnet mask supplied by your ISP for this connection. If your ISP has allocated you one or more static addresses you ISP Gateway Address — The Gateway address from your ISP will have selected Static IP address (to be specified manually) as your IP Allocation Mode.
Page 41
Configuring a Dynamic IP Address Subnet Mask — The subnet for the address is automatically configured but is not displayed. If your ISP has allocated you a dynamic address using DHCP you ISP Gateway Address — The gateway address from your ISP will have selected Dynamic IP address (automatically allocated) as your IP Allocation Mode.
Page 42
Configuring a PPPoE connection PPPoE User Name — The user name you use to access your ISP. If your ISP has allocated you a dynamic address using PPPoE you PPPoE Password — The password you use to access your ISP. will have selected PPPoE (PPP over Ethernet) as your IP Allocation Mode.
Configuring a PPTP connection PPTP User Name - The user name you use to access your ISP. PPTP Password - The password you use to access your ISP. If your ISP has allocated you a dynamic address using PPTP you will have selected PPTP (used by some European providers) as Primary DNS Address - The address of your ISP’s Domain your IP Allocation Mode.
Page 44
Figure 38 One-to-Many and One-to-One NAT Figure 39 Network Address Translation Screen One-to-Many NAT 172.16.57.52 192.168.1.100 192.168.1.101 192.168.1.102 One-to-One NAT 172.16.57.52 Setting up One-to-Many NAT 172.16.57.53 This is very easy to set up and the Gateway’s default mode. It 172.16.57.54 works with any IP Allocation Mode and will map all the addresses on your LAN to the Internet address of your Gateway.
You must have selected Static IP Address as your IP Allocation 3Com recommends that you set your DHCP pool to the same as Mode and have given your Gateway the first of the Internet the range of LAN addresses used as your LAN pool.
Page 46
Figure 41 Virtual Servers Screen To configure one of your computers as a DMZ host, select Redirect Request to Virtual DMZ Host and enter the IP address of the computer in the IP Address of DMZ Host text box, and then click SAVE.
PC Privileges Figure 42 Virtual Servers Settings Screen Select PC Privileges to display the PC Privileges setup screen. This is shown in Figure 44 below. The Gateway’s DHCP server has been enhanced to support PC Privileges. If you want to use DHCP and control access to the Internet on a user by user basis then you must either use the Gateway’s DHCP server or static addressing.
Page 48
PC Privileges allows you to assign different access rights for Enter the services that you wish to deny in the except (specify different computers on your network, restricting this access and ports) box and set the drop down box to Deny. controlling your users’...
Either: VPN connections to other networks are unaffected by settings in PC Privileges. To allow or deny VPN connections to other Enter the additional services that you wish to allow in the networks see “Configuring VPNs” page except (specify ports) box and set the drop down box to Allow.
Page 50
So that these special applications can work properly and are not Adding and Editing Special Applications blocked, the firewall needs to be told about them. In each Click on the New button to create a new special application or instance there will be an outgoing trigger which tells the on the name of a special application to edit the settings for that Gateway’s firewall that the application has started and to allow application.
Page 51
Figure 49 Custom Special Applications Setup Screen CAUTION: Selecting Multiple Hosts Allowed weakens the security that your Gateway’s firewall is able to provide and should only be used if the special application requires it. Timeout — Enter the number of seconds the Gateway should wait for the first reply from the special application server before it abandons the connection.
This feature is enabled by clicking on the check box so that a tick can be seen and then selecting Apply. 3Com recommends that you leave Allow PING from the Internet disabled as this provides greater security. Disable Firewall — The Gateway contains a firewall that detects attack patterns used by hackers on the Internet and once detected will block their access to your network.
PPTP Server Enabled — PPTP (Point-to-Point Tunnelling Configuring VPNs Protocol) is an encrypted VPN protocol like IPSec. It is not as secure as IPSec but is easy to administrate. PPTP does not A Virtual Private Network (VPN) is a secure tunnel between support Gateway to Gateway connections and is only suitable networks or between a network and a user.
Page 54
The IPSec Shared Key. This is the key for the connection and is a combination of letters, numbers and punctuation and can be up to 64 characters in length. 3Com recommends that the key and password are not the same. The user will need to know the IPSec Shared Key to enable connection.
PPTP Configuration Viewing VPN Connections To set up the Gateway for PPTP you must allocate IP addresses The VPN Connections Screen shows information about the IPSec, from the Gateway’s LAN for use with PPTP. The connections L2TP over IPSec, and PPTP connections made by the Gateway. It made by PPTP will appear to come from these addresses.
Page 56
Name — Identifies the tunnel. Clicking the name of a Connection Name/User Name — the ID of the remote connection displays the Edit VPN Connection screen. See gateway (the value entered in This Gateway’s ID on the “Adding and Editing VPN Connections” below.
Page 57
57 international restrictions on encryption. If your country permits its “L2TP over IPSec Connections” page 59 use it can be downloaded from the 3Com web site at http://www.3com.com/ “PPTP Connections” page 60 Exchange keys using — choose the encryption method used PSec Connections using Remote User Access to exchange shared keys.
Page 58
3DES is not shipped with the Gateway as standard due to international restrictions on encryption. If your country permits its use it can be downloaded from the 3Com web site at http://www.3com.com/ Hash Algorithm — choose either SHA-1 or MD5 from the drop-down list.
Page 59
Gateway Two is located at the sales office and is configured with The Remote Subnet Mask is a default setting of 255.255.255.0. the following settings: Enter a password in the Tunnel Shared Key field in both Gateways. The example uses TYP0249//23b as the shared key. Internet IP address: 174.27.34.202 Choose DES as the Encryption Type.
Click Apply to save your changes or Close to return without Editing IPSec Routes saving. When you have created a user account the user will need This screen allows you to add and replace networks in the to know in order to enable connection. existing IPSec Route.
Figure 57 IPSec Routes Accessing the System Tools The System Tools menu includes four administration items: Restart, Time Zone, Configuration, and Upgrade. See Figure Restart Pressing the Restart the Gateway button has the same effect as power cycling the unit. No configuration information will be lost but the log files will be erased.
Any network users who are currently accessing the Internet will The Gateway reads the correct time from NTP servers on the have their access interrupted whilst the restart takes place, and Internet and sets its system clock accordingly. The Daylight they may need to reboot their computers when the restart has Savings option automatically adjusts the clock to daylight savings completed and the Gateway is operational again.
If your country Once you have downloaded the software, use the Browse button permits its use it can be downloaded from the 3Com web site at to locate the file on your computer, and then click on Apply.
The upgrade procedure can take a few minutes, and is complete Figure 63 Status Screen when the Alert LED has stopped flashing and is permanently off. Make sure that you do not interrupt power to the Gateway during the upgrade procedure; if you do, the software may be corrupted and the Gateway may not start up properly afterwards.
Figure 64 Log Settings Screen Obtaining Support and Feedback for your Gateway Selecting Support/Feedback on the main menu generates both: The support links screen, which contains a list of Internet links that provide information and support concerning the Gateway. (Figure Figure 65 Support Screen...
Page 66
The feedback links screen, which contains an Internet link to the 3Com website so that you can provide feedback on the product. (Figure Figure 66 Feedback Screen...
ROUBLESHOOTING Ensure that you have configured your computer as described Basic Connection Checks “Setting Up Your Computers” page 19. Restart your computer while it is connected to the Gateway to ensure that Check that the Gateway is connected to your computers and your computer receives an IP address.
Connecting to the Internet Forgotten Password If you can browse to the Gateway configuration screens but If you can browse to the Gateway configuration screen but cannot access sites on the Internet, check the following: cannot log on because you do not know or have forgotten the password, follow the steps below to reset the Gateway to it’s Confirm that the physical connection between the Gateway factory default configuration.
Re-apply power to the Gateway, and when the start-up sequence are happening frequently in which case you may wish to has completed, browse to: discuss this with your ISP. The Gateway logs such attacks, and this information is available through the configuration screens. http://192.168.1.1 and run the configuration wizard.
Contact your supplier for advice. Gateway? Upgrades to the Cable/DSL Secure Gateway software are posted Frequently Asked Questions on the 3Com support web site, accessible by visiting: How many computers on the LAN does the Cable/DSL http://www.3com.com Secure Gateway support? What other online resources are there? A maximum of 253 computers on the LAN are supported.
When the Welcome screen is displayed click on Next and wait Running the Discovery Application until the application discovers the Gateways connected to your LAN. 3Com provides a user-friendly Discovery application for detecting the OfficeConnect Cable/DSL Secure Gateway on the network. Figure 68 Discovered Gateway Windows Installation (95/98/2000/Me/NT) Insert the Gateway CD-ROM in the CD-ROM drive on your computer.
Page 72
Figure 68 shows an example Discovered Devices screen. Highlight the Cable/DSL Secure Gateway by clicking on it, and press Next. Figure 69 Discovery Finish Screen Click on Finish to launch a web browser and display the login page for the Gateway.
IP A DDRESSING The only value that will be different is the specific host device The Internet Protocol Suite number. This value must always be unique. The Internet protocol suite consists of a well-defined set of An example IP address is ‘192.168.100.8’. However, the size of communications protocols and several standard application the network determines the structure of this IP Address.
Type Two How does a Device Obtain an IP Address and In larger networks, where there are more devices, the IP address Subnet Mask? of ‘192.168.100.8’ is, again, split into two parts but is structured differently: There are three different ways to obtain an IP address and the subnet mask.
192.168.0.0 – 192.168.255.255 The Gateway has a default subnet of 192.168.1.0 – 192.168.1.255. 3Com recommends that you use this subnet for the LAN addresses of your first Gateway and subsequent ranges (192.168.2.0 – 192.168.2.255) for the LAN range of other...
ECHNICAL PECIFICATIONS This section lists the technical specifications for the OfficeConnect Standards Cable/DSL Secure Gateway. Interfaces Functional:ISO 8802/3 IEEE 802.3 Cable or DSL modem connection - one 10/100 Mbps Ethernet port (10BASE-T/100BASE-TX) with auto-MDIX. Safety:UL 60950, EN 60950 CSA 22.2 #60950 LAN connection - four 10/100 Mbps Ethernet ports IEC 60950 (10BASE-T/100BASE-TX) with auto-MDIX.
System Requirements Operating Systems The Cable/DSL Secure Gateway will support the following Operating Systems: Windows 95, 98, Me Windows NT 4.0 Windows 2000 Windows XP Mac OS 8.5 or higher Unix Ethernet Performance The Cable/DSL Secure Gateway complies to the IEEE 802.3i, u and x specifications.
AFETY NFORMATION problem solving actions in this guide, contact your Important Safety Information supplier. WARNING: Warnings contain directions that you must WARNING: Disconnect the power adapter before moving follow for your personal safety. Follow all directions the unit. carefully. You must read the following safety information carefully WARNING: RJ-45 ports.
VORSICHT: Die Netzsteckdose muß in der Nähe des Consignes importantes de sécurité Geräts und leicht zugänglich sein. Die Stromversorgung des Geräts kann nur durch Herausziehen des AVERTISSEMENT: Les avertissements présentent des Gerätenetzkabels aus der Netzsteckdose unterbrochen consignes que vous devez respecter pour garantir votre werden.
Page 81
si l'équipement auquel il est raccordé fonctionne dans les mêmes conditions. AVERTISSEMENT: Il n’y a pas de parties remplaceables par les utilisateurs ou entretenues par les utilisateurs à l’intérieur du moyeu. Si vous avez un problème physique avec le moyeu qui ne peut pas être résolu avec les actions de la résolution des problèmes dans ce guide, contacter votre fournisseur.
TRADE SECRETS; TITLE: You acknowledge and agree that the structure, sequence and Software or Documentation. organization of the Software are the valuable trade secrets of 3Com and its suppliers. You Subject to the restrictions set forth herein, the Software is licensed to be used on any agree to hold such trade secrets in confidence.
Page 84
Should you have any questions concerning this Agreement or if you desire to contact 3Com for any reason, please contact the 3Com subsidiary serving your country, or write: 3Com Corporation, 5400 Bayfront Plaza, P.O. Box 58145, Santa Clara, CA 95052-8145 (408) 326-5000 This product contains encryption and may require U.S.
ISP I NFORMATION Information Regarding Popular ISPs Internet Characteristics Popular ISPs Internet Characteristics Popular ISPs Connection Connection Types Types Dynamic IP Cable modem ISP, MediaOne, PPTP Cable or DSL, always on. KPN (Netherlands), non-hostname based. Need RoadRunner, Optimum Some European ISPs require Austria Telecom (Clone MAC) to clone MAC in the DHCP...
LOSSARY 10BASE-T Category 3 Cables The IEEE specification for 10 Mbps Ethernet over Category 3, 4 One of five grades of Twisted Pair (TP) cabling defined by the or 5 twisted pair cable. EIA/TIA-586 standard. Category 3 is voice grade cable and can only be used in Ethernet networks (10BASE-T) to transmit data at 100BASE-TX speeds of up to 10 Mbps.
Page 88
Domain Name System. DNS allows Internet host computers to A system that allows packets to be transmitted and received at have a domain name (such as 3com.com) and one or more IP the same time and, in effect, doubles the potential throughput of addresses (such as 192.34.45.8).
Page 89
IETF Internet Engineering Task Force. An organization responsible Local Area Network. A network of end stations (such as PCs, for providing engineering solutions for TCP/IP networks. In the printers, servers) and network devices (hubs and switches) that network management area, this group is responsible for the cover a relatively small geographic area (usually not larger than a development of the SNMP protocol.
Page 90
Network Server A Network is a collection of computers and other computer A computer in a network that is shared by multiple end stations. equipment that are connected for the purpose of exchanging Servers provide end stations with access to shared network information or sharing resources.
Page 91
TCP/IP is now supported on almost all platforms, and is the protocol of the Internet. TCP relates to the content of the data travelling through a network — ensuring that the information sent arrives in one piece when it reaches its destination. IP relates to the address of the end station to which data is being sent, as well as the address of the destination network.
digital subscriber line 88 upgrading 63 disabling IPSec 56 front panel diagram 12 disabling PPPoE client software 20 full duplex 88 disabling the firewall 52 disabling web proxies 21 discovery application 71 Gateway virtual 46 changing the password 34 DNS 88 connecting the cable/DSL modem 17 domain name system 88 defined 88...
Page 95
Internet settings logs blocking access 48 viewing 64 configuring 38 DHCP 41 PPPoE 42 static address 40 MAC address 89 wizard 26 Macintosh OS 8.5/9.x inventory 11 setting up 20 IP address 73 main menu IP defined 89 accessing 33 IPSec media access control 89 defined 89...
Page 97
adding 50 custom 50 static address VCCI statement 99 recording settings 16 viewing status and logs 64 static Internet settings 40 virtual DMZ 46 status virtual private network 91 viewing 64 virtual servers 45 status LED creating 46 cable/DSL 13 LAN 12 configuring 53 subnet mask 36, 90...
Page 99
EGULATORY OTICES FCC Statement CE Statement (Europe) This equipment has been tested and found to comply with the limits for a Class B digital This product complies with the European Low Voltage Directive 73/23/EEC and EMC device, pursuant to Part 15 of the FCC Rules, and the Canadian Department of Directive 89/336/EEC as amended by European Directive 93/68/EEC.
Page 102
DUA08569-5AAA02 Published November 2002...
Need help?
Do you have a question about the OFFICE CONNECT CABLE/DSL SECURE GATEWAY 3CR856-95 and is the answer not in the manual?
Questions and answers