1. Manuals
  2. Brands
  3. Force 10 Manuals
  4. Network Router
  5. IP Router
  6. User manual

Force 10 IP Router User Manual

Menu-driven user interface
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
IP Router
M
-D
U
I
ENU
RIVEN
SER
NTERFACE
U
M
SER
ANUAL
Part Number: 770-0015-BL
Product Release: 2.97
August 2009

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the IP Router and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Force 10 IP Router

Summary of Contents for Force 10 IP Router

  • Page 1 IP Router RIVEN NTERFACE ANUAL Part Number: 770-0015-BL Product Release: 2.97 August 2009...
  • Page 2 Technical Assistance Center: Force10 Networks, Inc. E-mail: access-support@Force10Networks.com 350 Holger Way Phone: (US) 866-887-4638 San Jose, CA 95134-1362 Phone (International/Direct): 1-707-665-4355 Phone: +1 (866) 571-2600 or +1 (408) 571-3500 www.Force10Networks.com Supporting Software Versions: IP Router Release 2.97 Adit 600 Controller Release 10.1.1...

  • Page 3: Preface

    REFACE Preface Warranty Force10 Networks, Inc. warrants to BUYER that Product Hardware will be free from substantial defect in material and workmanship under normal use in accordance with its Documentation and given proper installation and maintenance for period of five years from the date of shipment by Force10 Networks.
  • Page 4 Force10 Networks Customer Support Center via telephone during the warranty period and during normal business hours. Normal business hours for Force10 Networks Customer Support Center are 7:00 a.m. to 6:00 p.m. Mountain Standard Time, Monday through Friday, excluding weekends and standard Force10 Networks recognized holidays. IP Router - Release 2.97...

  • Page 5: Limitation Of Warranty & Limitation Of Remedies

    PRODUCTS DURING AND AFTER THE WARRANTY PERIOD. IN NO EVENT WILL FORCE10 NETWORKS BE LIABLE FOR ANY SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, LOSS OF DATA, OR COMMERCIAL LOSSES EVEN IF FORCE10 NETWORKS HAS BEEN ADVISED THEREOF. IP Router - Release 2.97...

  • Page 6: Warranty Product Returns

    4355 (International/Direct) for RMA number, repair/warranty information and shipping instructions. Be prepared to provide the following information: Force10 Networks serial number(s) from the system chassis or circuit card(s) Name of distributor or dealer from which you purchased the product Description of defect IP Router - Release 2.97...

  • Page 7: Notices

    DAMAGE IF THE HAZARD IS NOT AVOIDED NOTE: A Note indicates information to help you understand how to perform a procedure or how the system works. Notes should be read before performing the required action. IP Router - Release 2.97...
  • Page 8 Preface viii IP Router - Release 2.97...

  • Page 9: Table Of Contents

    ABLE OF ONTENTS Table of Contents Preface Warranty ........... iii Warranty Procedure .
  • Page 10 DNS Resolver..........3-25 IP Router - Release 2.97...
  • Page 11 Static Addresses ......... . . 5-32 IP Router - Release 2.97...
  • Page 12 Reinitialize ..........10-3 IP Router - Release 2.97...
  • Page 13 Unable to access the Local (LAN) Router unit via Telnet..C-4 Unable to access a remote unit via Telnet ..... C-4 IP Router - Release 2.97...
  • Page 14 Clear Alarm ......... . . C-10 Glossary Index viii IP Router - Release 2.97...

  • Page 15: Introduction

    HAPTER Introduction In this Chapter Overview Installation Maneuvering in the System Fields Help Bar Connecting to the Router...

  • Page 16: Overview

    Router can be found in the Adit 600 User Manual. Installation The IP Router card can be installed into any of the service card slots (1-6) of the Adit 600 chassis. This card is hot-swappable, therefore the card can be removed and replaced without bringing down the system or with or without power to the unit.

  • Page 17: Fields

    You will note that many editable fields are displayed with a default value. To change this value, highlight the field and type over the existing entry or press ] and then enter new value. Note: these fields are case sensitive. To enter ELETE this value press [E NTER IP Router - Release 2.97...

  • Page 18: Help Bar

    Help Bar Help Bar The IP Router provides field specific help that is displayed at the bottom of the window. The help text will indicate if the field is scrollable or editable and provide a brief description of the field. If it is a selectable field, it will state what to do to invoke the action to be performed.

  • Page 19: Connecting To The Router

    Select a terminal type... (<space> or <back-space> to toggle, <CR> to accept) Terminal: <VT100> 4. Select Terminal Type: scroll through options with the [S ] and then PACEBAR ] to select. Recommended <generic>. NTER <generic> Terminal: IP Router - Release 2.97...

  • Page 20: Set A New Password

    RETYPE Password >****** After a successful login, the system prompts the user to change the password from the default. 1. Type in New Password, and press [E NTER 2. Retype in New Password, and press [E NTER IP Router - Release 2.97...

  • Page 21: Management Window

    HAPTER Management Window In this Chapter Management Overview System Time/Login Upload/Download Load Defaults Software Images...

  • Page 22: Management Overview

    Management Window Management Overview Management Overview The Management Menu contains the system components of the IP Router software. This section is used to define security parameters, factory default settings, as well as providing software loading and configuration settings for the Router...

  • Page 23: System Time/Login

    Management Window System Time/Login System Time/Login 1. Select Management <System Time/Login> from the Main Menu, and select NTER IP Router - Release 2.97...

  • Page 24: System Date And Time

    Management Window System Time/Login This screen provides the basic system and security options for the Router card. The IP Router is equipped with three password levels and an enhanced security password. Level 1 VIEW allows the user to view only, no changes are allowed.

  • Page 25: Daylight Savings Time Adjustment

    VIEW and CONFIG passwords. The field value may be a 5-15 character alphanumeric value. NOTE: If the default login passwords are not changed, the user will be prompted, at each login, to enter new passwords at the CONFIG and ADMIN levels. IP Router - Release 2.97...

  • Page 26: Enhanced Security

    ] to select Enable and [T ] to enter this selection. PACEBAR 2. The Change Enhanced Security Password - > field will display. Select ] to change password. You will be requested to enter the password NTER twice to confirm. IP Router - Release 2.97...
  • Page 27 2. At this point the Router is requesting your Level 1, 2 or 3 User Password. Enter your password and select [E ] and continue as you would Telnet into the NTER Router normally. Password >****** Select a terminal type... (<space> or <back-space> to toggle, <CR> to accept) Terminal: <generic> IP Router - Release 2.97...

  • Page 28: Upload/Download

    Upload and Config Download can be performed remotely via TFTP to install and backup the IP Router’s configuration to and from a binary file. There is an additional option to upload code to the IP Router, with the CLI command load {slot-number} tftp {ip-addr}{"file-name"}...

  • Page 29: Set Up The Router For Uploads/Downloads

    Management Window Upload/Download Set up the Router for Uploads/Downloads 1. Select Management: <Upload/Download> from the Main Menu, and NTER IP Router - Release 2.97...
  • Page 30 Client Site. The user may define a specific IP Address for Uploads/ Downloads, by replacing the *, or by Adding another Upload/Download User. 3. Select the Client Site <Local LAN> (default) or RemoteUnits that have been set up. Selections are: 2-10 IP Router - Release 2.97...
  • Page 31 4. For Mode, specify whether the IP Address can perform code uploads/ downloads, config file uploads/downloads, or both. 5. Press [E ] to save your changes and return to the Main Menu. These changes will go into effect immediately. IP Router - Release 2.97 2-11...

  • Page 32: Upload/Download Setup Menu Fields

    A software load verification verifies that the new software is good before the unit will accept it. If it is determined to be bad or damaged, the IP Router will reject it and continue to use the original software.
  • Page 33 Router’s configuration can be sent. Acceptable file extensions are “.cfg” or “.CFG”. Both – Authorizes the IP Address to perform code and config file uploads/ downloads. NOTE: Code and Config uploads will require a reboot of the unit before the changes take effect. IP Router - Release 2.97 2-13...

  • Page 34: Load Defaults

    1. Select Management <Load Defaults> from the Main Menu, and select NTER 2. A dialog box will display confirming that you want to load factory defaults. 3. Select <YES> with the [S ] and select [E PACEBAR NTER 4. Defaults will be loaded. 2-14 IP Router - Release 2.97...

  • Page 35: Software Images

    Software Images Software Images Use the Software Images option to switch the active with the backup application images stored in the Router. 1. Select Management <Software Images> from the Main Menu, and select [Enter]. IP Router - Release 2.97 2-15...

  • Page 36: Options

    Switch Appl. Images - Switch the active with the backup application images stored in the router. Note: More than one software image must be loaded (7.0 or later) for an active and a backup image to display. 2-16 IP Router - Release 2.97...

  • Page 37: Profile Directory: Router Card Profile

    HAPTER Profile Directory: Router Card Profile In this Chapter Overview Configuration RIP Mode Receive RIP Mode Send Trunk Security SNMP DNS Proxy Spanning Tree Protocol Network Time Protocol SysLog DNS Resolver...

  • Page 38: Overview

    Profile Directory: Router Card Profile Overview Overview The Router Card Profile of the Profile Directory is used to review/configure base router features. Configuration 1. Select Configuration: <Profile Directory> from the Main Menu, and select NTER Main Menu IP Router - Release 2.97...
  • Page 39 Profile Directory: Router Card Profile Configuration 2. Select Router CARD <Setup -> and select [E NTER Profile Directory Window Router Card Configuration Window IP Router - Release 2.97...

  • Page 40: Rip Mode Receive

    Frame Relay and PPP. The Router provides the flexibility to allow the user to define which slots will be used for the selected WAN protocol. 1. Select Trunk < Configure -> and select [E NTER IP Router - Release 2.97...

  • Page 41: Wan Connection

    Trunk Setup Menu Fields WAN Link # This field displays the WAN Link Number (1-24) for the WAN Connection. WAN Connection The WAN Connection displays the current connection of this WAN, in the form {slot:port:channel}. IP Router - Release 2.97...
  • Page 42 Disables PVC Management Annex D Frame Relay standard Poll Interval Range is between 5-30 Poll Counter Range is between 1-255 Local Management Interface Poll Interval Range is between 5-30 Poll Counter Range is between 1-255 IP Router - Release 2.97...

  • Page 43: Security

    Profile Directory: Router Card Profile Security Security 1. Select Security < Configure -> and select [E NTER IP Router - Release 2.97...
  • Page 44 Profile Directory: Router Card Profile Security The fields on this screen may be used to define the authentication process for the Local Unit. Security Setup Window IP Router - Release 2.97...
  • Page 45 Defining a custom User ID simply gives the end user more flexibility for this value. To assign a custom User ID, set the USER ID field to <Local Custom Name> and press [ AB ]. Up to ten (10) custom names may be configured. IP Router - Release 2.97...
  • Page 46 Security Authentication of Remote Protocol: CHAP, PAP or NONE Use this field to identify the authentication protocol to be used by this IP Router when authenticating remote devices. Local Security Server Use these fields to identify the local server that is used to authenticate remote devices. This field is only necessary if you are using either the <RADIUS>...

  • Page 47: Snmp

    SNMP By defining specific IP Addresses, devices may be specified to manage the Local Unit via SNMP. NOTE: The IP Router is compatible with the Standard MIB and MIB II. 1. Select SNMP < Configure -> and select [E NTER IP Router - Release 2.97...
  • Page 48 Set the value of sysName. Value has a maximum of 64 ASCII characters. SYS Contact Set the value of sysContact. Value has a maximum of 64 ASCII characters. SYS Location Set the value of sysLocation. Value has a maximum of 64 ASCII characters. 3-12 IP Router - Release 2.97...
  • Page 49 <Read> device is allowed to view the settings, but cannot make any changes <Write> device is allowed to make changes but not view settings <Both> device is allowed to both read and write privileges IP Router - Release 2.97 3-13...
  • Page 50 SNMP Trap Destinations Select SNMP Trap Destination - > and select [E NTER SNMP Setup Window This window defines the SNMP Trap Destinations to which the Router will report alarm information. SNMP Setup Window 3-14 IP Router - Release 2.97...
  • Page 51 Enter the corresponding IP Address of the device that was entered in the Name field. Location <Local LAN>, <RemoteUnit> Available options are the <Local LAN> and all defined Remote (WAN) Units, defined in the Profile Directory (there can be up to 24). IP Router - Release 2.97 3-15...

  • Page 52: Dns Proxy

    The DNS (Domain Name Server) Proxy specifies the IP address of DNS name servers to be used by the DHCP (Dynamic Host Configuration Protocol) clients. 1. Select DNS Proxy < Configure -> and select [E NTER 2. Type [C A] to Add a DNS Proxy. 3-16 IP Router - Release 2.97...
  • Page 53 Enter the IP Address for the DNS Server. Site This field lists the Local LAN and all the RemoteUnit that have a profile created for them. Use the PACEBAR to scroll through the list. IP Router - Release 2.97 3-17...

  • Page 54: Spanning Tree Protocol

    Algorithm as specified in the IEEE 802.1D specification. 1. Select Spanning Tree Protocol < Configure -> and select [E NTER 2. To enable Spanning Tree, scroll <Disabled> to <Enabled>, with the ], select [E PACEBAR NTER 3-18 IP Router - Release 2.97...

  • Page 55: Bridge Hello Time

    Learning or Forwarding State, respectively. The value can range from 4 to 30 seconds, with a default of 15 seconds. Bridge Priority The Bridge Priority is the priority part of the bridge identifier. The value can range from 0 to 65535, with a default of 32768. IP Router - Release 2.97 3-19...

  • Page 56: Network Time Protocol

    Internet hosts, based off of GMT (Greenwich Mean Time). 1. Select Network Time Protocol < Configure -> and select [E NTER 2. To enable Network Time Protocol, scroll <Disabled> to <Enabled>, with the ], select [E PACEBAR NTER 3-20 IP Router - Release 2.97...
  • Page 57 <Domain Name> Domain name of the NTP server. Maximum of 43 characters. Poll Interval The Poll Interval specifies the polling of the NTP server to a defined number of seconds. The range (in seconds) is from 16 to1024 seconds, with a default of 16. IP Router - Release 2.97 3-21...
  • Page 58 The hours Time Zone Offset is used to calculate gateway time from GMT (Greenwich Mean Time). Range is -12 to 12. Time Zone Offset MINUTES The minutes Time Zone Offset is used to calculate gateway time from GMT (Greenwich Mean Time). Range is 0 to 60. 3-22 IP Router - Release 2.97...

  • Page 59: Syslog

    Syslog server from the Router. 1. Select SysLog Configure -> and select [E NTER 2. To enable SysLog (System Log Message Service), scroll <Disabled> to <Enable>, with the [S ], select [E PACEBAR NTER IP Router - Release 2.97 3-23...

  • Page 60: Server Ip Address

    The server IP Address is a unique, dotted decimal notation entry that is used for data routing purposes. This IP address of the SysLog Server or the Host that has the SysLog Server software running. 3-24 IP Router - Release 2.97...

  • Page 61: Dns Resolver

    DNS Resolver DNS Resolver The DNS Resolver enables the use of the Domain Name Service (DNS) resolver to convert domain names to IP addresses. 1. Select DNS Resolver Configure -> and select [E NTER IP Router - Release 2.97 3-25...
  • Page 62 Profile Directory: Router Card Profile DNS Resolver 2. To enable DNS Resolver, scroll <Disabled> to <Enable>, with the ], select [E PACEBAR NTER 3-26 IP Router - Release 2.97...
  • Page 63 Configure IP address of DNS server #1. DNS Secondary Server IP Address Configure IP address of DNS server #2. DNS Resolver Cache Contents <Flush> - will clear the cache contents <Display> - will display the cache contents IP Router - Release 2.97 3-27...
  • Page 64 Static Host List: View or Modify - > Select Static Host List: View or Modify - > and press NTER . The system will confirm that you want to save this configuration. Scroll the <No> to <Yes> to save. 3-28 IP Router - Release 2.97...

  • Page 65: Host Name

    Number of Static Hosts set up. A maximum of 33 can be entered. IP Address IP address of the static host. Host Name Enter the filter name, with a maximum of 42 characters, no spaces or numbers. IP Router - Release 2.97 3-29...
  • Page 66 Profile Directory: Router Card Profile DNS Resolver 3-30 IP Router - Release 2.97...

  • Page 67: Profile Directory: Local Profile

    HAPTER Profile Directory: Local Profile In this Chapter Overview LAN (Local) Profile Setup Static Networks Static Addresses Filters Firewall Filters (Local Profile) Advertise Network/Server DHCP Server/Client/Relay LAN Collision Threshold Spanning Tree Secondary IP Address Link Speed...

  • Page 68: Overview

    Profile Directory: Local Profile Overview Overview The Local (LAN) Profile Setup is found in Configuration <Profile Directory>/ LocalUnit LAN <Setup ->. IP Router - Release 2.97...
  • Page 69 Profile Directory: Local Profile Overview Local Profile window IP Router - Release 2.97...

  • Page 70: Lan (Local) Profile Setup

    The following entries consume a filter: Configured address, custom and protocol filters Static IP networks and static IPX networks Enabling any learned items listed on the Advertise Network/Server screen or Filter Network/Server screen Static IP and MAC Addresses Firewall filters IP Router - Release 2.97...

  • Page 71: To Set Up A Local Profile

    To Set Up a Local Profile: 1. Select Configuration: <Profile Directory> from the Main Menu, and press NTER Local Profile window 2. Select LAN < Setup -> and press [E NTER Profile window IP Router - Release 2.97...
  • Page 72 Frame Types Define the frame type of the packets that are sent and received by the IP Router. If a packet is received formatted in a frame type that has not been enabled, the IP Router will not accept the data.
  • Page 73 Remote unit unit <Receive> network/service information from the LAN and send to the remotes The <Neither> value will not allow the local Unit to send or receive information regarding networks and services on the LAN. IP Router - Release 2.97...

  • Page 74: Lan Ip

    LAN (Local) Profile Setup LAN IP: IP Address This is the IP Address of this IP Router, used to uniquely identify the device on the internetwork. The default for this IP Address is 10.0.0.1 Subnet Mask A subnet mask determines which bits in the IP address are used to identify the network number.

  • Page 75: Setup

    LAN interface or between the LAN subnets and any WAN subnet. A maximum of 8 secondary IP addresses can be added to the LAN interface. See Secondary IP Address on page 4-59 for more information. IP Router - Release 2.97...

  • Page 76: Link Speed

    NOTE: It is highly recommended that this setting be left at auto-negotiation. Connection of Ethernet devices with incompatible settings can lead to severe performance degradation and errors on a network. See Link Speed on page 4-62, for more information. 4-10 IP Router - Release 2.97...

  • Page 77: Static Networks

    Unit Router 1 Enter a static route which Enter a static route which indicates that Network C indicates that Network C may be reached through may be reached through remote Unit B Router 1 IP Router - Release 2.97 4-11...
  • Page 78 NOTE: All static routes are considered filters and will be applied toward the maximum allowable number of 500 filters. IP Networks - An Internet Protocol Network. IPX Networks - Internet Packet Exchange Network. A Novell NetWare’s native LAN communications protocol. 4-12 IP Router - Release 2.97...

  • Page 79: To Set Up Static Networks

    Profile Directory: Local Profile Static Networks To Set Up Static Networks 1. Select Configuration <Profile Directory> from the Main menu, and press NTER 2. Select LAN <Setup -> and press [E NTER Profile Directory window IP Router - Release 2.97 4-13...
  • Page 80 Profile Directory: Local Profile Static Networks 3. Select Setup: <Static Networks >. If the Secondary IP Address option is not displayed scroll to the selection with the [S ], and press [E PACEBAR NTER Local Profile Window 4-14 IP Router - Release 2.97...
  • Page 81 Profile Directory: Local Profile Static Networks 4. Select <IP Networks> or <Static IPX Networks>. Press [C A] to add a Static Network. Static Networks Setup (IP) Static Networks Setup (IPX) IP Router - Release 2.97 4-15...

  • Page 82: Subnet Mask

    Referring back to Example 1, Network B would enter the IP Address of Router 1, since that is the first gateway on the route to Network C. This field is only used on IP Networks. 4-16 IP Router - Release 2.97...
  • Page 83 Referring back to Example 1, Network B would enter the MAC Address of Router 1, since that is the next gateway on the route to Network C. This field is only used on IPX networks. IP Router - Release 2.97 4-17...

  • Page 84: Static Addresses

    NOTE: Each static address filter will count toward the maximum number of 500 filters. 1. Select Configuration <Profile Directory> on the Main menu, and press NTER 2. Select LAN <Setup -> and press [E NTER Profile Directory Window 4-18 IP Router - Release 2.97...
  • Page 85 3. Select Setup: <Static Addresses >. If the Static Addresses option is not displayed scroll to the selection with the [S ], and press [E PACEBAR NTER Local Profile Window 4. Press ] to add static addresses, as needed. Static MAC Address Setup IP Router - Release 2.97 4-19...

  • Page 86: Mac Address

    MAC Address Enter the MAC Address of the desired device that can be reached via the local LAN. This field is only available if the Setup Static field is set to <MAC Address >. 4-20 IP Router - Release 2.97...
  • Page 87 Enter the IP Address of the desired device. If the static address is configured through the Local (LAN) Profile Setup screen, the device can be reached via the local LAN. This field is only available if the Setup Static field is set to <IP Address>. IP Router - Release 2.97 4-21...

  • Page 88: Filters

    1. Select Configuration <Profile Directory> on the Main menu, and press NTER 2. Select LAN < Setup -> and press [E NTER Profile Directory Window NOTE: Each filter, even if it is not enabled, will count toward the maximum number of 500 filters. 4-22 IP Router - Release 2.97...
  • Page 89 [S ], and press [E PACEBAR NTER Local Profile Window 4. Press [C A] to add filters. See the following sections on defining custom, protocol and address filters. Enabled Window Filter IP Router - Release 2.97 4-23...
  • Page 90 This field is active only with an Address Filter. <Source> Filters by Source only. <Destination> Filters by Destination only. <Both> Filter by Source and Destination. Filter Name This field displays the name the filter has been given. 4-24 IP Router - Release 2.97...

  • Page 91: Defining Custom Filters

    32-Bit Mask - indicates which bits are to be searched for a possible match.Within the mask, a 1 turns a bit ON, 0 is OFF. Only the bits that are turned on (set to 1) will be searched for the match. IP Router - Release 2.97 4-25...
  • Page 92 A], select filter type (Custom, Protocol or Address) filter will be added to the Enabled Filters window. NOTE: Each filter, even if it is not enabled, will count toward the maximum number of 500 filters. 4-26 IP Router - Release 2.97...

  • Page 93: Defining Protocol Filters

    IEEE Value - Enter assigned IEEE value for this protocol. The IEEE value is the same as the DSAP and SSAP values in a SNAP packet. NOTE: Only identify either an Ethernet or IEEE value, but not both. IP Router - Release 2.97 4-27...
  • Page 94 A], select filter type (Custom, Protocol or Address) filter will be added to the Enabled Filters window. NOTE: Each filter, even if it is not enabled, will count toward the maximum number of 500 filters. 4-28 IP Router - Release 2.97...

  • Page 95: Defining Address Filters

    MAC Address - Enter the MAC Address of the LAN device that you are defining as a filter. The system will use the defined MAC Address and the value in the Forward Mode to determine whether the packet should be passed or received. IP Router - Release 2.97 4-29...
  • Page 96 A], select filter type (Custom, Protocol or Address) filter will be added to the Enabled Filters window. NOTE: Each filter, even if it is not enabled, will count toward the maximum number of 500 filters. 4-30 IP Router - Release 2.97...

  • Page 97: Firewall Filters (Local Profile)

    (service flows). Firewall Rules Window Symbol Description Rule Number Pass (no! (blank) indicates Drop) Services(s) Lists current service defined LAN Device(s) Lists LAN defined for this rule (* indicates any) ==> Outgoing <== Incoming IP Router - Release 2.97 4-31...
  • Page 98 1. On the Main Menu, press [T ] until Configuration <Profile Directory> is highlighted, and press [E NTER 2. Select <Setup -> on the LocalUnit LAN line and press [E NTER Profile Directory Window 4-32 IP Router - Release 2.97...
  • Page 99 Profile Directory: Local Profile Firewall Filters (Local Profile) 3. Tab down to Setup: <Static Addresses> and scroll with the [S ] to PACEBAR <Firewall Filters>. Press [E NTER Local Profile Window IP Router - Release 2.97 4-33...
  • Page 100 5. Enter the parameters of the rule, select [E ] to close the window and save the configuration. See Firewall Filters Fields on page 4-35 for a description of all fields for the Firewall Setup window. 4-34 IP Router - Release 2.97...
  • Page 101 Name Description Finger Display information about users File Transfer Protocol Gopher Document search and retrieval HTTP World Wide Web IP Router - Release 2.97 4-35...

  • Page 102: Protocol Number In Firewall Filters

    All transmissions outbound from the LAN toward the local unit that match the value in the Service field will adhere to the value in the Action field. In/Out Will affect both incoming and outgoing transmissions. 4-36 IP Router - Release 2.97...
  • Page 103 Use this field to identify the number of bits, from left to right, that will be used to match the IP Address field within the data packet with the value entered into the Remote IP Address/ Network. Range is between 1 to 32. IP Router - Release 2.97 4-37...

  • Page 104: Alarms

    An event/alarm will be logged for each packet for all UDP transfers. UDP traffic should typically not be allowed across a firewall. NOTE: All firewall rules are considered filters and will be applied toward the maximum allowable number of 500 filters. 4-38 IP Router - Release 2.97...

  • Page 105: Advertise Network/Server

    Profile Directory: Local Profile Advertise Network/Server Advertise Network/Server 1. Select Configuration <Profile Directory> from the Main menu, press NTER 2. Select LAN <Setup -> and press [E NTER Profile Directory Window IP Router - Release 2.97 4-39...
  • Page 106 Should a RIP packet indicate a change in status, the unit will update the data in the table and exchange the updated data with all remotes. 4-40 IP Router - Release 2.97...
  • Page 107 Static Network windows, manually enter the network routes to be advertised. Disable Learning: On the LAN Profile setup window set LAN Network Updates to <Neither> On the WAN Profile setup window set WAN Network Updates to <Never> IP Router - Release 2.97 4-41...
  • Page 108 If this is not a static route, and has been selected, “Config Fltr” will appear before the network address of this entry. Only static routes for the local unit will display on this window. 4-42 IP Router - Release 2.97...

  • Page 109: Ipx Server Advertising

    15 services of which you want to advertise only 5. It would consume fewer filters to set the Selected Items field to <Advertise> and place an X next to the 5 servers to, than to choose <Do Not Advertise> and place an X next to the 10 servers. IP Router - Release 2.97 4-43...

  • Page 110: Selected Items

    If the server type and name are specified, only server types that match both values will be learned. Be aware that the NAME value is case and spacing sensitive. Press to save changes and return to the Local (LAN) Profile Setup window. 4-44 IP Router - Release 2.97...

  • Page 111: Dhcp Server/Client/Relay

    254 IP Addresses to DHCP clients on the local LAN. It will not assign to clients across the WAN. 1. Select Configuration <Profile Directory> from the Main menu, select NTER 2. Select LAN < Setup -> and press [E NTER Profile Directory Window IP Router - Release 2.97 4-45...
  • Page 112 Profile Directory: Local Profile DHCP Server/Client/Relay 3. Select Setup: <DHCP Server/Client/Relay >. If not displayed, scroll to the selection with the [S ], and press [E PACEBAR NTER Local Profile Window 4-46 IP Router - Release 2.97...
  • Page 113 Profile Directory: Local Profile DHCP Server/Client/Relay 4. DHCP Mode: <Disabled>, <Server>, <Client> or <Relay>. Opens the DHCP Setup window for the following: DHCP Mode: Disabled IP Router - Release 2.97 4-47...
  • Page 114 Number Enter the number of IP Addresses that this Router may assign. This field acts in conjunction with the Start IP Address field by using a contiguous block of IP Addresses. Range is 1-254. 4-48 IP Router - Release 2.97...
  • Page 115 NetBIOS name. This name has a maximum of 41 characters. Name Server (NBNS) This option specifies a list of RFC 1001/1002 NBNS name servers listed in order of preference. Enter the IP address of the NBNS servers. IP Router - Release 2.97 4-49...
  • Page 116 > field, select the remote unit (scroll through the list), and select ENTER 3. A second IP address can be entered, in the same manner on the second line. Press to save changes and return to the Local (LAN) Profile Setup window. 4-50 IP Router - Release 2.97...
  • Page 117 Set Tx Packets Broadcast Bit: Use this parameter to indicate if the broadcast bit is to be set (checked box) or clear in the bootp flags header value for all transmitted DHCP/BOOTP packets for the DHCP Client. IP Router - Release 2.97 4-51...
  • Page 118 DNS Domain Name DNS Secondary Server Description: This column will display the current Client information items. Current Lease Value: This column will display the current Lease information for the items under the Client Description list. 4-52 IP Router - Release 2.97...

  • Page 119: Lan Collision Threshold

    1. Select Configuration <Profile Directory> from the Main menu, press NTER 2. Select LAN < Setup -> and press [E NTER Profile Directory Window IP Router - Release 2.97 4-53...
  • Page 120 LAN Collision Threshold 3. Select Setup: <LAN Collision Threshold >. If this option is not displayed, scroll to the selection with the [S ], and press [E PACEBAR NTER Local Profile Window Collision Threshold Provisioning 4-54 IP Router - Release 2.97...
  • Page 121 Alarm This field indicates if there is/is not an active collision alarm. There is an alarm indicator on the front of the IP Router Card, labeled COL. If a collision alarm is active this LED will flash yellow. Sample Interval Use the Collision Sample Interval in seconds.

  • Page 122: Spanning Tree

    The Spanning Tree configures the setup for the Spanning Tree Algorithm. To Configure Spanning Tree: 1. Select Configuration <Profile Directory> from the Main menu, and press NTER 2. Select LAN < Setup -> and press [E NTER Profile Directory Window 4-56 IP Router - Release 2.97...
  • Page 123 Profile Directory: Local Profile Spanning Tree 3. Select Setup: <Spanning Tree > and press [E NTER 4. To enable Spanning Tree, scroll <Disabled> to <Enabled>, with the ], press [E PACEBAR NTER IP Router - Release 2.97 4-57...

  • Page 124: Port Priority

    Port Priority The Port Priority value can range from 0 to 255, with a default of 128. Port Cost The Port Priority value can range from 0 to 65535, with a default of 651. 4-58 IP Router - Release 2.97...

  • Page 125: Secondary Ip Address

    IP addresses can be added to the LAN interface. To Add a Secondary IP Address: 1. Select Configuration <Profile Directory> from the Main menu, and press NTER 2. Select LAN < Setup -> and press [E NTER Profile Directory Window IP Router - Release 2.97 4-59...
  • Page 126 Secondary IP Address 3. Select Setup: <Secondary IP Address>, by scrolling through the options with the [S ] and select [E PACEBAR NTER Local Profile Window 4. Select [C A] to enter an IP Address. 4-60 IP Router - Release 2.97...
  • Page 127 The secondary IP Address, in the form xxx.xxx.xxx.xxx, where xxx is between 1 -255. Subnet Mask The Subnet Mask to the corresponding Secondary IP address listed, in the form xxx.xxx.xxx.xxx, where xxx is between 1 -255. IP Router - Release 2.97 4-61...

  • Page 128: Link Speed

    To Set the Link Speed: 1. Select Configuration <Profile Directory> from the Main menu, and press NTER 2. Select LAN < Setup -> and press [E NTER Profile Directory Window 4-62 IP Router - Release 2.97...
  • Page 129 10T Full Duplex The selection will force the Ethernet PHY to 10 MHz full-duplex on the Router. 10T Half Duplex The selection will force the Ethernet PHY to 10 MHz half-duplex on the Router. IP Router - Release 2.97 4-63...
  • Page 130 Profile Directory: Local Profile Link Speed 4-64 IP Router - Release 2.97...

  • Page 131: Profile Directory:remote Profile

    HAPTER Profile Directory:Remote Profile In this Chapter Remote (WAN) Profile Overview Security/Options Static/VPN Networks Static NAT Addresses NAT Bypass Subnets Static Addresses Firewall Filters (Remote Profile) Filter Network/Server Spanning Tree Trunk Port...

  • Page 132: Remote (Wan) Profile Overview

    It is important to understand that the information contained in the remote profile determines how the local and remote units establish communication. 1. Select Configuration <Profile Directory> from the Main Menu, press NTER IP Router - Release 2.97...
  • Page 133 Profile Directory:Remote Profile Remote (WAN) Profile Overview 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window IP Router - Release 2.97...
  • Page 134 (see the following sections). Note: The Remote Profile Window will change as options are selected. The graphic below displays the window at its default settings. Remote Profile Window The graphic below displays how the window changes with the NAT Gateway enabled. IP Router - Release 2.97...
  • Page 135 All remote devices will initially have the default name "RemoteUnit". To change the name of the remote device, simply type over the existing name. This name will be used during the authentication process to ensure this unit’s identity. Please note that the system is case and spacing sensitive. IP Router - Release 2.97...

  • Page 136: Transmission Options

    <Bridge> - will not prompt the Router to initiate WAN bandwidth optimization. Note that the unit will not advertise servers and networks. <Blocked> - if you do not wish to use the corresponding protocol. <Optimize> - See <Route> above IP Router - Release 2.97...

  • Page 137: Gre Tunnel

    <By Network> Tunnel packets based on their destination address by matching GRE network entries. NOTE: If the IP protocol is set to <By Network>, establish the remote address in the Static Networks window. <Disabled> Disable GRE tunneling. IP Router - Release 2.97...
  • Page 138 Number of NAT Addresses: With a setting of NAT addresses to greater than 1 you a pool of public addresses is created from which the NAT translation will draw. Range is between 1-255. IP Router - Release 2.97...
  • Page 139 NAT Port Numbers: See previous page. NAT and Local IP Tunnel Address: Use this field to define the IP Address for the Local (LAN) tunneling or NAT Gateway device. <Configured> See previous page. <Assigned by Remote> IP Router - Release 2.97...
  • Page 140 This field displays only when GRE Tunnel is set to <All>. To open the setup window select IP Protocol VPN Setup - > and select NTER Tunnel Name Enter Tunnel name, up to 11 characters. Remote IP Tunnel Address Enter IP Tunnel Address. 5-10 IP Router - Release 2.97...
  • Page 141 Subnet Mask: A subnet mask determines which bits in the IP address are used to identify the network number. It is also a method of extending the IP Network Address so that a site may use one network address for several different networks. IP Router - Release 2.97 5-11...
  • Page 142 This field is only displayed if the IP Mode field is set to <Bridge>. 5-12 IP Router - Release 2.97...
  • Page 143 It is recommended that this field be left at Disabled since this is a security risk. <Enabled> Enables the passage of fragmented packets. <Disabled> Disables the passage of fragmented packets. (Default). IP Router - Release 2.97 5-13...
  • Page 144 Use this option to access the Static NAT Addresses window which allows the operator to configure static bi-directional NAT mappings between local server addresses and public addresses. See Static NAT Addresses on page 5-27, for more information. 5-14 IP Router - Release 2.97...

  • Page 145: Firewall Filters

    802.1D specification. See Spanning Tree on page 5-48, for more information. Note: IP Mode must be set to <Bridged> for this option to display in the scrolled list. <Trunk Port> Configures the Router Remote trunks. See Trunk Port on page 5-51 for more information. IP Router - Release 2.97 5-15...

  • Page 146: Security/Options

    LAN Profile. 1. Select Configuration <Profile Directory> from the Main Menu, and press NTER 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window 5-16 IP Router - Release 2.97...
  • Page 147 Profile Directory:Remote Profile Security/Options 3. Tab down to Setup:<Security/Options> Scroll through the list of options with the [S ] and select [E PACEBAR NTER Remote Profile Window 4. The following Security/Options setup window will display. IP Router - Release 2.97 5-17...

  • Page 148: Security Server

    This allows the data compression to be customized to the type of data on a given network. <Easy to Compress>. If typical compression ratios are greater than 2/1, then this setting should achieve the best compression. This is the default. <Hard to Compress> If compression ratios are less than 2/1. 5-18 IP Router - Release 2.97...

  • Page 149: Static/Vpn Networks

    Unit. Network B may not learn of Network A’s existence if advertising was disabled on Router 1. Therefore, if you wish to establish an entry in the routing table indicating a route between Network B and Network C, you can define a static route on Network B. IP Router - Release 2.97 5-19...
  • Page 150 SETUP: <Static Networks> option on the corresponding Remote (WAN) Profile Setup window. Static networks that are reached via the local LAN must be defined by choosing the SETUP <Static Networks> option on the Local (LAN) Profile Setup window. 5-20 IP Router - Release 2.97...

  • Page 151: Gre Tunnel Set To

    The following displays two options. GRE Tunnel set to <All> 1. Select Configuration <Profile Directory> from the Main Menu, and press NTER 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window IP Router - Release 2.97 5-21...
  • Page 152 4. Select Setup: <Static/VPN Networks>, scroll with the [S ] through PACEBAR the options and select [E NTER Remote Profile Window 5. Press [C A] to add a Static IP Network. Enter Network Address, Subnet Mask and Metric value. Static/ Networks Window 5-22 IP Router - Release 2.97...

  • Page 153: Gre Tunnel Set To

    GRE Tunnel set to <By Network> 1. Select Configuration <Profile Directory> from the Main Menu, and press NTER 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window IP Router - Release 2.97 5-23...
  • Page 154 Profile Directory:Remote Profile Static/VPN Networks 3. Set GRE Tunnel to <By Network >. 4. Select Setup: <Static/VPN Networks>, scroll with the [S ] through PACEBAR the options and select [E NTER Remote Profile Window 5-24 IP Router - Release 2.97...
  • Page 155 Enter the Subnet IP Address. Note: The host bits should all be zero. Subnet Mask Enter the Subnet Mask of the Network IP Address. Metric Enter the distance, in hops, to the network. Value must be between 1-15. IP Router - Release 2.97 5-25...
  • Page 156 <No> - Disables tunnel. Tunnel Name Enter Tunnel name, up to 11 characters. Remote IP Tunnel Address Enter the IP address of the far end of the tunnel, in the form xxx.xxx.xxx.xxx, where xxx is between 0-255. 5-26 IP Router - Release 2.97...

  • Page 157: Static Nat Addresses

    500 filters. 1. Select Configuration <Profile Directory> from the Main Menu and press NTER 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window IP Router - Release 2.97 5-27...
  • Page 158 Profile Directory:Remote Profile Static NAT Addresses 3. Select Setup: <Static NAT Addresses>, scroll through the list of options with the [S ] if <Static NAT Addresses> is not displayed. Press [E PACEBAR NTER Remote Profile Window 5-28 IP Router - Release 2.97...

  • Page 159: Local Ip Address

    NAT Port - Enter a NAT port. Range = 1-65535. <TCP> - Selects TCP port types. Local Port - Enter a local port. Range = 1-65535. NAT Port - Enter a NAT port. Range = 1-65535. IP Router - Release 2.97 5-29...

  • Page 160: Nat Bypass Subnets

    NAT translation when passing through a NAT enabled WAN interface. 1. Select Configuration <Profile Directory> from the Main Menu, and press NTER 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window 5-30 IP Router - Release 2.97...
  • Page 161 An IP address or host to bypass the NAT Translation, in the form of xxx.xxx.xxx.xxx, where xxx is between 0-255. Subnet Mask Subnet mask of the Network IP address above, in the form of xxx.xxx.xxx.xxx, where xxx is between 0-255. IP Router - Release 2.97 5-31...

  • Page 162: Static Addresses

    NOTE: Each static address filter will count toward the maximum number of 500 filters. 1. Select Configuration <Profile Directory> from the Main Menu, and press NTER 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window 5-32 IP Router - Release 2.97...
  • Page 163 Profile Directory:Remote Profile Static Addresses 3. Select Setup: <Static Addresses >, scroll through the list of options with the ] if <Static Addresses> is not displayed. Press [E PACEBAR NTER Remote Profile Window IP Router - Release 2.97 5-33...
  • Page 164 4. Scroll through the list of options with the [S ] to select Setup Static: PACEBAR <MAC Address> or Setup Static: <IP Address>. Press [C A] to add a Static Address. Static Addresses Window (MAC Address) Static Addresses Window (IP Address) 5-34 IP Router - Release 2.97...

  • Page 165: Device Name

    Profile Setup screen, the device can be reached via the local LAN. If the static address is configured on a specific Remote (WAN) Profile screen, the device can be reached via that specific remote. This field is only available if the Setup Static field is set to <IP Address>. IP Router - Release 2.97 5-35...

  • Page 166: Firewall Filters (Remote Profile)

    (service flows). Firewall Rules Window Symbol Description Rule Number Pass (no ! (blank) indicates Drop) Services(s) Lists current service defined LAN Device(s) Lists LAN defined for this rule (* indicates any) ==> Outgoing <== Incoming 5-36 IP Router - Release 2.97...
  • Page 167 1. On the Main Menu, press [T ] until Configuration <Profile Directory> is highlighted, and press [E NTER 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window IP Router - Release 2.97 5-37...
  • Page 168 3. Tab down to Setup: <Firewall Filters> scroll through the list of options with the [S ] if <Firewall Filters> is not displayed. Press [E PACEBAR NTER Remote Profile Window 4. Press [C A] to add an IP Firewall Rule. Firewall Filters Window 5-38 IP Router - Release 2.97...
  • Page 169 Blank column = Pass Typically, rules are established with the Pass action, since the last rule (which is automatically defined by the software) Drops all services not expressly permitted by the previous rule(s). For IP Router - Release 2.97 5-39...
  • Page 170 Post Office Protocol Version 3 SMTP Simple Mail Transfer SNMP Simple Network Management Protocol Transmission Control Protocol Port <Equal> or <Range> = Specify a number or range. Number = 0-65535 Start Number = 0-65535 End Number = 0-65535 5-40 IP Router - Release 2.97...
  • Page 171 Use this field to identify the number of bits, from left to right, that will be used to match the IP Address field within the data packet with the value entered into the Remote IP Address/ Network. Range is between 1 to 32. IP Router - Release 2.97 5-41...
  • Page 172 An event/alarm will be logged for each packet for all UDP transfers. UDP traffic should typically not be allowed across a firewall. NOTE: All firewall rules are considered filters and will be applied toward the maximum allowable number of 500 filters. 5-42 IP Router - Release 2.97...

  • Page 173: Filter Network/Server

    1. Select Configuration <Profile Directory> from the Main Menu, and press NTER 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window IP Router - Release 2.97 5-43...
  • Page 174 ] to PACEBAR <Filter Network/Server>. Press [E NTER Remote Profile Window 4. Select with the [S ] <IP Networks>, <IPX Networks> or <IPX PACEBAR Servers>. [T ] to the Selected Items field. Filter Network/ Server 5-44 IP Router - Release 2.97...
  • Page 175 The <Learn> mode is much better suited for larger networks, as specifying which networks/servers you wish the Router to learn may consume less filters than specifying which networks/servers you Do Not want learned. IP Router - Release 2.97 5-45...
  • Page 176 Hex value. This setting will enable the unit to learn or filter all services that match the specified service type. This field may be used in conjunction with the Name field, described below. Range 1-FFFF. 5-46 IP Router - Release 2.97...
  • Page 177 This field will change depending on the value set in the Selected Items field. Use the to place and X in this field to choose that the Router will Learn the chosen PACEBAR network or server. IP Router - Release 2.97 5-47...

  • Page 178: Spanning Tree

    The Spanning Tree configures the setup for the Spanning Tree Algorithm. To Configure Spanning Tree: 1. Select Configuration <Profile Directory> from the Main Menu, and press NTER 2. Select WAN < Setup -> and press [E NTER Profile Directory Window 5-48 IP Router - Release 2.97...
  • Page 179 Profile Directory:Remote Profile Spanning Tree 3. Select Setup: <Spanning Tree > and press [E NTER 4. To enable Spanning Tree, scroll <Disabled> to <Enabled>, with the ], press [E PACEBAR NTER IP Router - Release 2.97 5-49...
  • Page 180 Port Priority The Port Priority value can range from 0 to 255, with a default of 128. Port Cost The Port Priority value can range from 0 to 65535, with a default of 651. 5-50 IP Router - Release 2.97...

  • Page 181: Trunk Port

    Use this screen to define the Router Interface. 1. On the Main Menu, press [T ] until Configuration <Profile Directory> is highlighted. 2. Select WAN <Setup -> on the RemoteUnit line and press [E NTER Profile Directory Window IP Router - Release 2.97 5-51...
  • Page 182 Profile Directory:Remote Profile Trunk Port 3. Select Setup:<Trunk Port> and press [E NTER Remote Profile Window WAN Port Setup Window 5-52 IP Router - Release 2.97...
  • Page 183 MLPPP. The MultiLink Fragment Threshold is the size at which non- prioritized packets will be inspected to determine if they should be fragmented. Range 320-1600, with a default of 1600. WAN Port Setup Window with MLPPP IP Router - Release 2.97 5-53...
  • Page 184 Profile Directory:Remote Profile Trunk Port 5-54 IP Router - Release 2.97...

  • Page 185: Basic Configuration

    HAPTER Basic Configuration In this Chapter Overview Start Basic Configuration Local Unit Identification Routing Protocol/Security WAN Interface Connections Remote Unit Profile SNMP Configuration Setup Complete...

  • Page 186: Overview

    NTER Start Basic Configuration 1. Select Configuration: <Basic Config > -> from the Router Main menu and press [E NTER IP Router - Release 2.97...
  • Page 187 Basic Configuration Start Basic Configuration 2. Select <Yes> to enter the setup program and press [E NTER IP Router - Release 2.97...

  • Page 188: Local Unit Identification

    IP Address of this Router Enter the IP Address of the Router. Subnet Mask of this Router Enter the Subnet Mask of the above IP Address. Default Router of this Router Enter a default Router IP Address. IP Router - Release 2.97...

  • Page 189: Routing Protocol/Security

    <RIP1/RIP2> - Set to Rip Version 1 or 2. Select RIP mode to send to remotes <RIP1> - Set to RIP version 1. Default. <RIP2> - Set to RIP version 2. <RIP1/RIP2> - Set to Rip Version 1 or 2. IP Router - Release 2.97...
  • Page 190 32 characters long. Select the protocol LocalUnit will use to authenticate all remotes <CHAP> - Set authentication to CHAP (Challenge-Handshake Authentication Protocol). <PAP> - Set authentication to PAP (Password Authentication Protocol). <NONE> - Disable authentication. Default. IP Router - Release 2.97...

  • Page 191: Wan Interface Connections

    <PPP> - Set the connection type to Point-to-Point Protocol. <Frame Relay 1490> - Set the connection type to Frame Relay per RFC 1490. <PPP in Frame Relay> - Set the connection type to PPP over Frame Relay per RFC 1973. IP Router - Release 2.97...

  • Page 192: Set Poll Interval

    <Annex D> - Set to Annex D, which is a Frame Relay standard extension. <LMI> - Set to Local Management Interface (LMI) rev1 (DLCI 1023). Set Poll Interval Range is between 5-30. Set Poll Counter Range is between 1-255. IP Router - Release 2.97...

  • Page 193: Remote Unit Profile

    [E ]. The guide will walk through each Remote Profile that has been setup. NTER When exiting the last profile the guide will ask if you if you would like to add a Remote Profile. IP Router - Release 2.97...
  • Page 194 Mode - <Route>, <Blocked> and <Bridge>. WAN Network Updates - <Never>, <Periodic> and <Triggered>. Mode - <Blocked>, <Bridge> and <Optimized>. WAN Network Updates - <Never>, <Periodic>, <Triggered>. Other Mode - <Blocked>, <Bridge> and <Optimized>. 6-10 IP Router - Release 2.97...
  • Page 195 Displays the WAN connection type (PPP, Frame Relay 1490 or PPP in Frame Relay). DLCI Enter the Data Link Connection Identifier. Range is between 16-1022. Note: This field is not available with a WAN that has PPP set as its connection type. IP Router - Release 2.97 6-11...

  • Page 196: Snmp Configuration

    Enter a 10 character name. Address - Enter an IP address (first line) Subnet Mask for second line. Location - Selection is: <Local LAN>, will have a selection for each existing Remote Unit profile. 6-12 IP Router - Release 2.97...

  • Page 197: Setup Complete

    Basic Configuration Setup Complete Setup Complete You have now completed the Basic Configuration. You may re-enter the Basic Configuration to make changes now or at any time. IP Router - Release 2.97 6-13...
  • Page 198 Basic Configuration Setup Complete 6-14 IP Router - Release 2.97...

  • Page 199: Verification Window

    HAPTER Verification Window The Verification window is used to identify suspected communication problems between the Local (LAN) and Remote (WAN) devices. In this Chapter Ping Utility Trace Route Port Monitor...

  • Page 200: Ping Utility

    Ethernet II and the Router’s IP Address must be configured. 1. On the Main Menu, press [T ] until Ping Utility is highlighted on the Verification option. 2. Press [E ]. The Ping Utility window will display. NTER IP Router - Release 2.97...
  • Page 201 This is one of the multiple IP addresses assigned to the Ethernet LAN port and will override the IP address that will be used as the source IP address. Default is to use the IP address of the interface from which the ping is sent. IP Router - Release 2.97...

  • Page 202: Start Ping

    : 100.1.0.10 MAC Address : 00-00_86_62_72_17 MAC Address Response Time : < 1ms Last Result : Destination Unreachable Response Count: 19 Timeout Count: 0 Last Result : Host Responding Response Count: 19 Timeout Count: 0 IP Router - Release 2.97...

  • Page 203: Data Transmission

    Timeout Count field will display a 0, which means that no communications errors have been encountered. NOTE: A continuous ping test may be intermittently unsuccessful. This is an indication that a transmission error may occur with this device during actual data transmission. IP Router - Release 2.97...

  • Page 204: Trace Route

    1. On the Main Menu, press [T ] until the Ping Utility is highlighted on the Verification option. 2. Press [S ] to scroll to Trace Route. PACEBAR IP Router - Release 2.97...
  • Page 205 InitialTTL This optional parameter defines the beginning of the range of hops to query. Range is 1 - 254 value, Note: must be less than MaxTTL. Default is 1. IP Router - Release 2.97...

  • Page 206: Udp Port

    Defines the number of probe packets sent to each hop along the route. Range is 1 - 10,. Default is 3. Wait Defines the wait time between queries. Range is 0 - 250 ms. Default is 1 ms. Timeout Defines the query timeout. Range is 1 - 60 seconds. Default is 3 seconds. IP Router - Release 2.97...

  • Page 207: Port Monitor

    1. On the Main Menu, press [T ] until the Ping Utility is highlighted on the Verification option. 2. Press [S ] to scroll to Port Monitor. PACEBAR IP Router - Release 2.97...

  • Page 208: Port Name

    Use this prompt to initiate the packet trace. Select START MONITOR - > and press NTER to begin the trace. As the transmission occurs, the packet hex dump will be displayed on the screen. If you wish, you may end the trace at any point. Press to terminate. 7-10 IP Router - Release 2.97...
  • Page 209 Number of bytes to display for each packet: Use this field to enter the number of bytes to display for each packet. The range is 0-512. Direction Use this field to define the direction to trace. <Both>, <Transmit> or <Receive>. IP Router - Release 2.97 7-11...
  • Page 210 00: 18 41 03 CC 45 00 00 60 E5 1F 00 00 7E 11 82 AA 10: 14 14 00 03 C0 A8 00 04 00 89 00 89 00 4C 48 0F FR DLCI-100 IP IP4-HDR: src=20.20.0.3 dst=192.168.0.4 ttl=126 len=20 UDP-HDR: Ports src=137 dst=137 len=76 cksum is=480F,cacl=0 7-12 IP Router - Release 2.97...

  • Page 211: Statistics Window

    HAPTER Statistics Window The Statistics window is used to review data transmission information between the Local (LAN) unit and Remote (WAN) devices. This option allows you to review data transmission statistics to/from remote units. This data will help you to monitor the Router’s connection/performance capabilities such as throughput, compression, and errors.

  • Page 212: Run-Time

    If no data is currently being transmitted to a specific unit, the transmission fields will display 0’s. 1. On the Main Menu, press [T ] until the Run-time is highlighted on the Statistics option. IP Router - Release 2.97...
  • Page 213 Use this field to reset (clear) the total packets displayed in the following fields. <All> Will clear both the LAN and WAN Packet Totals. <LAN> Will clear only the LAN Packet Totals. <WAN> Will clear only the WAN Packet Totals. IP Router - Release 2.97...
  • Page 214 This includes RX CRC errors (partial frames, aborted frames, long frames and “bad frames”) as well as aborted TX frames. It is used to identify WAN communication problems prior to contacting the telephone company for further diagnosis. For this total to update, Auto-Update must be <On>. IP Router - Release 2.97...
  • Page 215 Router was able to compress the data. Since some data is more compressible than others, the compression ratio will reflect this. Remote Conns. The numeric value in this field represents the number of connections currently active per Remote (WAN) site. IP Router - Release 2.97...
  • Page 216 Statistics Window Run-Time IP Router - Release 2.97...

  • Page 217: System Reports Window

    HAPTER System Reports Window In this Chapter Events Alarms Networks/Servers Address Tables...

  • Page 218: Events

    System Reports Window Events Events Displays the log of events for the IP Router. To View the Event Log: 1. On the Main Menu, press [T ] until Events is highlighted on the System Reports option. IP Router - Release 2.97...
  • Page 219 If the same event occurs consecutively, the value in the count column will display the number of times that the event occurred, although the message will display only once. Note that the time stamp reflects the date and time that the event first occurred. IP Router - Release 2.97...

  • Page 220: Alarms

    The Alarm Log is cleared when the Router is reinitialized. 1. On the Main Menu, press [T ] until the Alarms is highlighted on the System Reports option. Use the [S ] to scroll to Alarms if it not displayed. PACEBAR IP Router - Release 2.97...
  • Page 221 Displays the actual alarm that triggered the alarm on the Router. Count Unlike the Event screen, the value in the count column will not increment each time that the alarm occurs. Note that the time stamp reflects the time that the alarm first occurred. IP Router - Release 2.97...

  • Page 222: Networks/Servers

    This screen will change depending on the values in the Display and Learned From fields. 1. On the Main Menu, [T ] to the System Reports option. 2. Press [S ] to scroll to Networks/Servers. PACEBAR IP Router - Release 2.97...
  • Page 223 System Reports Window Networks/Servers 3. Press [E ]. The Networks/Servers listing will display. NTER IP Router - Release 2.97...
  • Page 224 System Reports Window Networks/Servers 4. To view the other display options, scroll through the Display: <IP Networks> field. IP Router - Release 2.97...
  • Page 225 This field displays the MAC Address of the first gateway (Router) that the data will use to reach the destination network. This field is only used on IP Networks. Hops See Metric, above. This field is only used on IPX Networks. IP Router - Release 2.97...

  • Page 226: Frame Type

    Router. If a packet is received that is formatted in a frame type that has not been enabled, the Router will not accept the data. Note that multiple frame types may be supported simultaneously. This field applies only to IPX Networks. 9-10 IP Router - Release 2.97...

  • Page 227: Address Tables

    Network Tables are used to determine if and where the Router should send packets. 1. On the Main Menu, [T ] to the System Reports option. 2. Press [S ] to scroll to Address Tables. PACEBAR IP Router - Release 2.97 9-11...
  • Page 228 System Reports Window Address Tables 3. Press [E ]. The Address Tables window will display. These windows NTER will change as different options are selected. Address Address 9-12 IP Router - Release 2.97...
  • Page 229 <On> will update the screen every 5 seconds. Port Name Displays the information, listing by Port. IP Address Displays the IP Address of the learned address. MAC Address Displays the MAC Address of the learned address. IP Router - Release 2.97 9-13...
  • Page 230 System Reports Window Address Tables 9-14 IP Router - Release 2.97...

  • Page 231: Exit Window

    HAPTER Exit Window In this Chapter Logout Reinitialize...

  • Page 232: Logout

    1. On the Main Menu, press [T ] until the Logout is highlighted on the Exit option. 2. Press [E ]. The system will exit out of the Router Menu-Drive software NTER and the following message is displayed. 10-2 IP Router - Release 2.97...

  • Page 233: Reinitialize

    1. On the Main Menu, press [T ] until the Logout is highlighted on the Exit option. 2. Press [S ] to scroll to Reinitialize. PACEBAR 3. Press [E ]. The following message is displayed: NTER IP Router - Release 2.97 10-3...
  • Page 234 Exit Window Reinitialize 4. Press [S ] to scroll <NO> to <YES>, and press [E ]. The system PACEBAR NTER will close the session and reboot. 10-4 IP Router - Release 2.97...

  • Page 235: Router Configuration

    HAPTER Router Configuration In this Chapter Basic Setup PPP Internet Connection and Public IP Address Routing Frame Relay Internet Connection and Public IP Address Routing Internet Connection using PPP, NAT/PAT and Firewall Filters Internet Connection using NAT and Static NAT Addresses Back-to-Back with PPP Back-to-Back with Multi-Link PPP...

  • Page 236: Basic Setup

    Local and Remote Profile Setup For most router configuration changes to go into reset effect, the router must be reset. Best practice is to always reset the router after making configuration changes. 11-2 IP Router - Release 2.97...

  • Page 237: Ppp Internet Connection And Public Ip Address Routing

    Set the WAN interface named "wan1" to be set 1 "wan1" trunk 1 mapped to trunk 1 Set the encapsulation on trunk 1 to PPP set 1:1:1 encapsulation ppp Reboot the router, to enable all configurations set reset 1 IP Router - Release 2.97 11-3...

  • Page 238: Frame Relay Internet Connection And Public Ip Address Routing

    Set the WAN interface named "wan1" to be set 1 "wan1" trunk 1 mapped to trunk 1 Set the DLCI number set 1 "wan1" dlci 101 Reboot the router, to enable all configurations set reset 1 11-4 IP Router - Release 2.97...

  • Page 239: Internet Connection Using Ppp, Nat/Pat And Firewall Filters

    Set the WAN interface named "wan1" NAT set 1 "wan1" nat address address 216.174.44.2 1 Adds a static IP network (route) to the WAN add 1 "wan1" static ip network interface 0.0.0.0 0.0.0.0 1 IP Router - Release 2.97 11-5...
  • Page 240 Set the WAN interface named "wan1" to be set 1 "wan1" trunk 1 mapped to trunk 1 Set the encapsulation on trunk 1 to PPP set 1:1:1 encapsulation ppp Reboot the router, to enable all configurations set reset 1 11-6 IP Router - Release 2.97...

  • Page 241: Internet Connection Using Nat And Static Nat Addresses

    Set the WAN interface named "wan1" to set NAT set 1 "wan1" nat port dynamic port mapping to be dynamic Set the WAN interface named "wan1" NAT set 1 "wan1" nat address address 216.174.44.2 1 IP Router - Release 2.97 11-7...
  • Page 242 *In the private network that can be reached from the outside world. There can be up to 16 static NAT addresses, therefore the actual range can be 216.174.44.232 to 216.174.44.247. Only 4 were used in this example. 11-8 IP Router - Release 2.97...

  • Page 243: Back-To-Back With Ppp

    Set the encapsulation on trunk 1 to PPP set 1:1:1 encapsulation ppp Set the WAN interface named "wan1" to be set 1 "wan1" trunk 1 mapped to trunk 1 Reboot the router, to enable all configurations set reset 1 IP Router - Release 2.97 11-9...

  • Page 244: Denver Router In Slot 1

    Set the encapsulation on trunk 1 to PPP set 1:1:1 encapsulation ppp Set the WAN interface named "wan1" to be set 1 "wan1" trunk 1 mapped to trunk 1 Reboot the router, to enable all configurations set reset 1 11-10 IP Router - Release 2.97...

  • Page 245: Back-To-Back With Multi-Link Ppp

    2.2.2.0 255.255.255.0 1 Set the WAN interface named "wan1" to be set 1 "wan1" trunk multilink mapped to trunk multilink group 1 group 1 Reboot the router, to enable all configurations set reset 1 IP Router - Release 2.97 11-11...

  • Page 246: Denver Router In Slot 1

    1.1.1.0 255.255.255.0 1 Set the WAN interface named "wan1" to be set 1 "wan1" trunk multilink mapped to trunk multilink group 1 group 1 Reboot the router, to enable all configurations set reset 1 11-12 IP Router - Release 2.97...

  • Page 247: Back-To-Back With Frame Relay

    Set the encapsulation on trunk 1 to Frame Relay set 1:1:1 encapsulation fr Disable LMI (Local Management Interface) set 1 lmi disable Set the WAN interface named "wan1" to be set 1 "wan1" trunk 1 mapped to trunk 1 IP Router - Release 2.97 11-13...

  • Page 248: Denver Router In Slot 3

    Set the WAN interface named "wan1" to be set 3 "wan1" trunk 1 mapped to trunk 1 Set the DLCI number set 3 "wan1" dlci 101 Reboot the router, to enable all configurations set reset 3 11-14 IP Router - Release 2.97...

  • Page 249: User Events

    PPENDIX User Events In this Appendix User Events Authenticate Events Triggered Events Alarms...

  • Page 250: User Events

    Adit Initialized “IP Address” was dynamically assigned by “remote” Login accepted at “access” level Login rejected Password changed for “access” level Port “X” connected Port “X” down System Date/Time Change recorded Terminal inactivity, login terminated IP Router - Release 2.97...

  • Page 251: Authenticate Events

    Authentication failure to “remote” using CHAP Retry timeout occurred WAN protocol is active (inactive) to “remote” on port “X” LCP negotiation was successful to “remote” IPCP negotiation was successful to “remote” CCP negotiation failed to IP Router - Release 2.97...

  • Page 252: Triggered Events

    Triggered ETH II IPX Server update (to) from “X” Triggered SNAP IPX Network update (to) from “X” Triggered SNAP IPX Server update (to) from “X” Triggered IP Network request (to) from “X” Triggered ETH II IP Network update (to) from “X” IP Router - Release 2.97...

  • Page 253: Alarms

    This is logged when the unit begins the recovery process from trunks with high error conditions. [Pass, Drop] [dyn] [Any, Protocol=xx,Type=xx,Port=xx] [to, from] <rem sys> Firewall Rule <rule num> NOTE: All alarms generate SNMP traps. IP Router - Release 2.97...
  • Page 254 User Events Alarms IP Router - Release 2.97...

  • Page 255: Protocol Types

    PPENDIX Protocol Types In this Appendix Protocol Number in Firewall Filters Ethernet Protocol Types...

  • Page 256: Protocol Number In Firewall Filters

    User Datagram [RFC768, JBP] Multiplexing [IEN90, JBP] DCN-MEAS DCN Measurement Subsystems [DLM1] Host Monitoring [RFC890, RH6] Packet Radio Measurement [ZSU] XNS-IDP XEROX NS IDP [ETHERNET, XEROX] TRUNK-1 Trunk-1 [BWB6] TRUNK-2 Trunk-2 [BWB6] LEAF-1 Leaf-1 [BWB6] IP Router - Release 2.97...
  • Page 257 [Gary Salamon] Encap Security Payload for IPv6 [RFC2406] Authentication Header for IPv6 [RFC2402] I-NLSP Integrated Net Layer Security TUBA [GLENN] SWIPE IP with Encryption [J16] NARP NBMA Address Resolution Protocol [RFC1735] MOBILE IP Mobility [Perkins] IP Router - Release 2.97...
  • Page 258 SUN ND PROTOCOL-Temporary [WM3] WB-MON WIDEBAND Monitoring [SHB] WB-EXPAK WIDEBAND EXPAK [SHB] ISO-IP ISO Internet Protocol [MTR] VMTP VMTP [DRC3] SECURE-VMTP SECURE-VMTP [DRC3] VINES VINES [BXH] [JXS] NSFNET-IGP NSFNET-IGP [HWB] Dissimilar Gateway Protocol [DGP, ML109] IP Router - Release 2.97...
  • Page 259 Virtual Router Redundancy Protocol [Hinden] PBM Reliable Transport Protocol [Speakman] any 0-hop protocol [IANA] L2TP Layer Two Tunneling Protocol [Aboba] D-II Data Exchange (DDX) [Worley] IATP Interactive Agent Transfer Protocol [Murphy] Schedule Transfer Protocol [JMP] IP Router - Release 2.97...
  • Page 260 Combat Radio User Datagram [Sautter] SSCOPMCE [Waber] IPLT [Hollbach] Secure Packet Shield [McIntosh] PIPE Private IP Encapsulation within IP [Petri] SCTP Stream Control Transmission Protocol [Stewart] Fibre Channel [Rajagopal] RSVP-E2E-IGNORE [RFC3175] 135-254 Unassigned [IANA] Reserved [IANA] IP Router - Release 2.97...

  • Page 261: Ethernet Protocol Types

    0807 SNX Compatibility 081C Symbolics Private 0888-088A Xyplex 0900 Ungermann-Bass network debugger 0A00 Xerox 802.3 PUP 0A01 PUP 802.3 Address Translation 0BAD Banyan Systems Inc. 1000 Berkeley trailer negotiation 1001-100F Berkeley Trailer encapsulation 1600 VALID IP Router - Release 2.97...
  • Page 262 7000 Ungermann-Bass download 7001 Ungermann-Bass NIU 7002 Ungermann-Bass NIU 7007 OS/9 Microware 7020-7029 LRT (England) 7030 Proteon 7034 Cabletron 8003 Cronus VLN 8004 Cronus Direct 8005 HP Probe protocol 8006 Nestar 8008 AT&T 8010 Excelan IP Router - Release 2.97...
  • Page 263 DEC Unassigned 803F DEC LAN Traffic Monitor 8040 DEC Unassigned 8041 DEC Unassigned 8042 DEC Unassigned 8044 Planning Research Corporation 8046 AT&T 8047 AT&T 8049 ExperData (France) 805B VMTP (Versatile Message Transaction Protocol, RFC-1045, Stanford) IP Router - Release 2.97...
  • Page 264 Dansk Data Elektronic A/S (Denmark) 807C Merit Internodal 807D VitaLink Communications 807E VitaLink Communications 807F VitaLink Communications 8080 VitaLink Communications bridge 8081 Counterpoint Computers 8082 Counterpoint Computers 8083 Counterpoint Computers 8088 Xyplex 8089 Xyplex 808A Xyplex B-10 IP Router - Release 2.97...
  • Page 265 Taylor Inst. 80D3 Rosemount Corporation 80D4 Rosemount Corporation 80D5 IBM SNA Services over Ethernet 80DD Varian Associates 80DE Integrated Solutions TRFS (Transparent Remote File System) 80DF Integrated Solutions 80E0-80E3 Allen-Bradley 80E4-80F0 Datability 80F2 Retix IP Router - Release 2.97 B-11...
  • Page 266 Novell (old) NetWare IPX (ECONFIG E Option) 8138 Novell 8139-813D 9000 Loopback (Configuration Test Protocol) 9001 Bridge Communications XNS Systems Management 9002 Bridge Communications TCP/IP Systems Management 9003 Bridge Communications FF00 BBN BITAL LANBridge cache wakeup B-12 IP Router - Release 2.97...

  • Page 267: Troubleshooting

    PPENDIX Troubleshooting In this Appendix Communication Related Issues LAN Related Issues Diagnostics and Performance Tools Verification Statistics System Reports...

  • Page 268: Communication Related Issues

    We suggest that you review all created data filters, advertised networks and static route entries and eliminate those that are no longer applicable. See Chapter 4, LAN (Local) Profile Setup. IP Router - Release 2.97...
  • Page 269 Verify that Static/VPN Networks authentication remote router port is mismatch enabled. Add network to Static/ Correct network defined VPN Network field Verify that remote router has route defined back to local router ‘s newtorks IP Router - Release 2.97...

  • Page 270: Unable To Access The Local (Lan) Router Unit Via Telnet

    Address as the default route for the workstation and make sure that there is a remote route to the remote’s network in the Network/Server table. Be aware that if you establish a firewall filter and do not expressly permit Telnetting into this unit, you will be denied access. IP Router - Release 2.97...

  • Page 271: Diagnostics And Performance Tools

    Troubleshooting Diagnostics and Performance Tools Diagnostics and Performance Tools The Verification, Statistics and System Reports features are instrumental in diagnosing and troubleshooting the Router card. IP Router - Release 2.97...

  • Page 272: Verification

    (LAN) unit and Remote (WAN) devices. This option allows you to review data transmission statistics to/from remote units. This data will help you to monitor the Router’s connection/performance capabilities such as throughput, compression, and errors. See Chapter 8, Statistics Window for more information regarding this feature. IP Router - Release 2.97...

  • Page 273: System Reports

    The MAC Address and IP Address Tables, along with Network Tables are used to determine if and where the Router should send packets. See Address Tables on page 9-11 for more information regarding this feature. IP Router - Release 2.97...

  • Page 274: Alarms

    Yellow Ethernet collisions have occurred and have not dropped to minimum level Yellow Flashing Ethernet collision occurring No Ethernet transmit activity Green Ethernet transmit activity No current Ethernet receive activity Green Current Ethernet receive activity IP Router - Release 2.97...
  • Page 275 Troubleshooting Alarms Display Alarms To display Router alarms: On the Main Menu, System Reports option select <Alarms - >, or use the ] to scroll to Alarms if it not displayed. PACEBAR IP Router - Release 2.97...

  • Page 276: Clear Alarm

    Once an alarm is identified then the process of clearing it can begin. Silence Alarm, if necessary (Alarm Cut Off CLI command: aco) Check Connection Check Cable, replace if necessary Check hardware and replace if necessary Call Customer Service C-10 IP Router - Release 2.97...

  • Page 277: Glossary

    LOSSARY Glossary Annex D A frame relay standard extension dealing with the communication and signaling between customer premises and equipment and frame relay network equipment for the purpose of querying network status information. B8ZS Bipolar 8-Zero Substitution, a coding scheme that maintains ones density.
  • Page 278 Network Time Protocol, developed to maintain a common sense of time among Internet hosts around the world. Many systems on the Internet run NTP, and have the same time (relative to Greenwich Mean Time). Password Authentication Protocol Glossary - 2 IP Router - Release 2.97...
  • Page 279 Spanning Tree Protocol is a link management protocol that provides path Tree redundancy while preventing undesirable loops in the network. For an Ethernet network to function properly, only one active path can exist between two stations. IP Router - Release 2.97 Glossary - 3...
  • Page 280 1.544 Mbps. T-1 is a standard for the digital transmission in North America Telnet An Internet standard protocol that enables a computer to function as a terminal working from a remote computer Trunk A communication line between two switching systems. Glossary - 4 IP Router - Release 2.97...

  • Page 281: Index

    NDEX Index Numerics IP Address ..... . . 6-4 Name ......6-4 100T Subnet Mask .
  • Page 282 ....1-5 connecting with Telnet ....1-5 Index - 2 IP Router - Release 2.97...
  • Page 283 Filter Type ......4-24 Firewall (Local Profile) ..4-9 4-31 Firewall (Remote Profile) ..5-15 5-36 IP Router - Release 2.97 Index - 3...
  • Page 284 Sample Interval ....4-55 Significant Bits ....4-37, 5-41 Index - 4 IP Router - Release 2.97...
  • Page 285 Bytes to Display ....7-10 7-11 Mode Forward ......4-24 IP Router - Release 2.97 Index - 5...
  • Page 286 Trunk Port ......5-51 WAN Network Updates ....5-7 Index - 6 IP Router - Release 2.97...
  • Page 287 Community Name ....3-13 Clear Totals ......8-3 IP Router - Release 2.97 Index - 7...
  • Page 288 Network ......4-16 Next Gateway ..... 4-16 Index - 8 IP Router - Release 2.97...
  • Page 289 Metric ......9-9 Name ......9-9 IP Router - Release 2.97 Index - 9...
  • Page 290 Port Number ..... . . 6-7 WAN Connection ....6-7 Index - 10 IP Router - Release 2.97...

This manual is also suitable for:

770-0015-bl

Table of Contents