Page 2
2. Applicable USOC jack required: RJ49C 3. If the terminal equipment P840 causes harm to the telephone network, the telephone company will notify you in advance that temporary discontinuance of service may be required. But if advance notice is not practical, the telephone company will notify the customer as soon as possible.
Page 3
The ISDN-S/T interface of this device is intended for direct connection to the S/T jack of an NT-1 unit and therefore does not require Communications Canada certification. The P840 should only be connected to Communications Canada approved NT-1 units. Statements for ISDN U Module...
Using This Manual This Installation and Applications Guide provides the basic information required to initially set up and configure the P840 router. This guide is organized into the following sections: Installation “ ” provides instructions for installing the P840. Typical Applications & How to Configure Them “...
Page 5
Using the Electronic Reference Manual The P840 Reference Manuals are provided as Adobe Acrobat PDF files on the accompanying CD-ROM. The Menu Reference File is provided individually for ease of configuration reference. The Adobe Acrobat Reader is included on the CD-ROM.
Login and Enter the Required Configuration Mandatory Configuration Identify the Status LEDs The NetWizard Graphical User Interface SECTION 2 TYPICAL APPLICATIONS & HOW TO CONFIGURE THEM Managing the P840 Using the Menus Conventions Bridging and Routing Should You Bridge or Route? Bridging IP Routing...
Page 8
Contents Connection Basic ISDN Connections “Quick Start” PPP ISDN Connections IPX Router Connection IP Router Connection Basic Frame Relay Configuration Auto Learning the Frame Relay Configuration Basic Leased Line Configuration Bridge Connection. IP Router Connection. IPX Router Connection ADVANCED FEATURES Dynamic Host Configuration Protocol Network Address Translation and Port Translation...
Page 9
Contents APPENDIX B OCTET LOCATIONS ON ETHERNET FRAMES Octet Locations on a Bridged TCP/IP Frame Octet Locations on a Bridged Novell Netware Frame ETHERNET Type Codes Octet Locations on an IP Routed TCP/IP Frame Octet Locations on an IPX Routed Novell Netware Frame Octet Locations on a Bridged XNS Frame APPENDIX C SERVICING INFORMATION Opening the case...
ECTION NSTALLATION The P840 is an ISDN Ethernet Bridge/Router that provides bridging, IP/IPX routing, and compression over a PPP ISDN connection and support an ISDN BRI interface via an integral ISDN-ST or ISDN-U link module. The ISDN BRI interface supports two 64 Kbps B-channels.
RJ-45 cable and RJ-45 to DB9 (female) converter are provided for connection to a DB9 (male) connector. Connect the console port of the P840 Router to a computer running an asynchronous communication package or a standard asynchronous terminal. The bridge/router supports autobaud rates at 1200, 2400, 9600...
Appendix D provides the pinout information for the console connector and the DB9 to RJ45 converter. Make the LAN Connections Connect the P840 Router to the LAN with the available LAN interface cable. The Router may be connected directly to a wiring hub or Ethernet switch by using the MDI LAN port and a standard 10BaseT cable.
P840 Router. Connect the DC power cord from the supplied power supply to the back of the P840 Router and plug the power supply into the AC wall outlet. Observe the LEDs as the bridge/router powers up. The LEDs will go through a flashing pattern as the power-up diagnostics are performed.
Section 2: Typical Applications and How to Configure Them. Refer to Section 2 for details on configuring the P840. Also refer to the P840 PPP Menu Reference Manual file on the accompanying CD-ROM for a complete description of all the Menu Options.
The meanings of the four 3-color Light Emitting Diodes (LEDs) on the front of the Router are found in the following chart. POWER LINK 1 LINK 2 Figure 1-2 Front View of the P840 Router Green Bridge/Router is running and has passed power-up diagnostics Green (flashing)
Installation Graphical User NetWizard Interface The NetWizard router setup assistant comes on the CD-ROM packaged with this router. The NetWizard is a standalone Java applet that communicates with the Router through the LAN connection. The NetWizard will run on computer operating systems with Java support.
Page 17
Installation one you wish to configure and proceed by clicking on the NetWizard button. Follow the steps on the NetWizard through the configuration of the router. Configuration Note: If the NetWizard is to be installed on a WindowsNT system, the user must log in as "Administrator".
This section will describe how to set up the P840 networking functions. The P840 may be configured as a simple Ethernet bridge, an Ethernet IP router, an Ethernet IPX router, or a combination of the three. When operating the P840 as a combination bridge/router simply configure each of the components separately.
The Router menu system operates on a “hotkey” principle; navigating around the menu system is done by typing the number associated with the desired option; the P840 acts on the choice immediately (no need to hit the “enter” key). The menu system consists of different menu levels each containing new configuration options.
Applications Conventions Throughout this section, P840 menu options are shown that are required for the various configuration choices. The appropriate menu options are shown in each instance in the following format: Configuration Option Name Location: Main Sub-Menu Name Sub-Menu Name...
Applications Bridging and Routing Should You Bridge or Route? When connecting two Local Area Networks together, the first question to ask is should I bridge or route? The decision to bridge or to route may be decided by how the existing networks have been already set up. Bridging should be used when the network consists of non-routable protocols or routable protocols using the same network numbers.
LAN traffic to be re-broadcast again and again causing network congestion. The P840 is pre-configured to operate as an Ethernet bridge compatible with the IEEE 802.1d Spanning Tree Protocol definitions. This means that without configuration modifications, the P840 will bridge Ethernet...
Page 23
Applications The P840 also is pre-configured as an IPX router. This means that if you wish to bridge IPX traffic instead of routing it, you must disable the IPX routing function of the P840. Once IPX routing has been disabled, all IPX traffic will be bridged between partner bridges on the WAN.
Applications IP Routing An Ethernet IP router is used to intelligently route Internet Protocol (IP) LAN traffic to remotely connected LANs across the WAN. Router IP Address Router IP Address 199.169.1.10 199.169.2.12 WAN connection IP Network Address IP Network Address 199.169.2.0 199.169.1.0 LAN #1...
Applications IP Addressing Devices on an IP network are located by their IP addresses, which is a 32 bit number divided into four 8 bit fields. The IP address identifies both the network and the host device (also known as a node) on that network. The address is usually written as the four decimal values for the fields (between 0 and 255) separated by decimal points;...
Applications Class C Uses three high order fields to address over 2 million networks, the low order field is used to address up to 254 hosts. IP addresses within a private network may be assigned arbitrarily, however, if that network is to interconnect with the global Internet, it is necessary to obtain a registered IP address.
Applications IP Subnets An IP network may be divided into smaller networks by a process called sub-netting. A subnet is specified using some of the high order bits of the host field of the IP address for sub-network addressing. The portion of the IP address to be used as the subnet address is defined by using a subnet mask.
Page 28
Devices on LAN#1 will have addresses from 199.169.100.65 to 199.169.100.126, devices on LAN#2 will have addresses from 199.169.100.129 to 199.169.100.254. To configure the P840 to route between the newly created sub-networks, the following parameters must be defined on each router. 1. IP Address...
IP Static Route With its default settings, the P840 will automatically learn the routes to other devices on the network through RIP messages. In some instances it may be desirable to have a predetermined or static route that will always be used to reach certain devices, such as when one specific router is to be used to reach a remote site network.
Page 30
Applications enter the menu and then the IP address of the next hop route and the cost may be defined. Once static IP routes are defined, they may be viewed with the Show Static Routes command from the IP Routes menu. Configuration Note: When the IP routing protocol is set to none, static routes will be used to route traffic.
Applications IPX Routing The P840 is pre-configured to operate as an IPX router when installed in an IPX network. The Router will learn the IPX network numbers from the local LAN and when the WAN connections are established, the Router will route the IPX frames to the appropriate destination IPX network.
Applications To configure the P840 to be an IPX router when both LAN segments contain Novell servers, the IPX network numbers are learned automatically from the routing information and service announcements sent by the servers. The Router will automatically assign the IPX network numbers and proceed to route the IPX frames to the appropriate destination network.
Page 33
Applications IPX Network Address 1500 - defined on router WAN connection IPX Network Address 1512 LAN #1 LAN #2 Novell IPX Client Novell Server Novell Client Novell IPX Client Figure 2-5 IPX Routed Local Area Networks (Servers on one side) The following steps must be performed on the Router connected to LAN IPX Routing Disabled Location: Main...
Page 34
Applications IPX Frame Types Location: Main Configuration IPX Routing Set up Configure LAN Networks Ethernet-II Frames RAW 802.3 Frames IEEE 802.2 Frames 802.2 SNAP Frames Define the appropriate IPX network number for the appropriate frame type. Note that IPX network numbers must be unique.
Page 35
IPX router and maintain its routing and server tables. The configuration options described here are only for initial set up and configuration purposes. For more complete information on all of the configuration parameters available please refer to the P840 PPP Menu Reference Manual file on the accompanying CD-ROM.
Applications PPP Overview Point to Point Protocol (PPP) is a connection protocol that allows control over the set-up and monitoring of network communications. It is used in procedures for user authentication (name and password), connection management (spoofing, bandwidth on demand, multilink), and compression.
Applications use when defining the local IP address. The size of the subnet mask will determine the IP network number used. The IPX node address of the local WAN link is defined as the Local IPX Node within the remote site profile settings. The IPX address of the WAN link of the remote PPP router is defined as the Peer IPX Node within the remote site profile settings.
Applications Location: Main Configuration WAN Set up Remote Site Set up Edit Remote Site Protocol Set up IP Parameters Peer IP address Multilink Operation Multilink operation defines the use of more than one link to connect between two PPP routers. The MultiLink Operation option of the remote site profile for a connection is enabled by default.
The remote site profile allows the definition of various connection parameters: Circuit set-up, Bridge and Routing protocol configurations, activation criteria and security. The following steps must be performed on the P840 in order to define a new remote site profile. Remote Site Profile ID & Alias...
Applications the ID number or the alias may be provided to access the site profile for editing. Now that the remote site profile is created, a link number must be assigned as the primary link number. The primary link number is the link interface that the Router will use to attempt to establish a connection to the remote site PPP router.
Frame Relay Remote Site Profiles When frame relay is activated on the P840 it is set by default to automatically query the frame relay service to auto-learn the required parameters and automatically set up remote site profiles for each connection.
Remote Site Profiles allow for the router to be configured to support PPP over Ethernet (PPPoE) client on the router. The PPPoE feature on the Perle routers provide a PPPoE client support on Ethernet interfaces to a bridging DSL modem to the Internet. This feature will create a PPP tunnel to an ISP located somewhere on the ATM network side of the xDSL modem.
Page 43
Applications Location: Main Configuration WAN Set-UP Remote Site Set-Up Edit Remote Site Protocol Set-Up PPPoE enabled When setting up your PPPoE link with your ISP provider, one global IP addresses will be provided that should be used for the PPPoE remote site configuration.
Page 44
Applications adjust its TCP mss option to 1452 to accommodate this requirement. To verify this value has been adjusted: Location: Main Configuration WAN Set-Up Remote Site Set-up Protocol Set-Up IP Parameters NAT Advanced Set-up TCP mss enabled TCP mss value 1452 Normally your ISP provider will provide you with an outgoing username and password and to authenticate with their services.
Page 45
Applications Location: Main Configuration IP Routing Set-up Gateway PPPoE remote site alias...
Applications Basic Configurations The P840 may be configured to handle the two BRI B-channels as both switched circuit ISDN links, as both Digital-Leased links (Digital-Leased is also known as Super-digital, ADSL-lite or monopole) or as one of each type. In addition, each Digital-Leased link may be set for either Frame Relay or PPP operation.
Page 47
Applications Manual Call: The system operator may use the Manual Call option of the Remote Site Set up menu to initiate a connection attempt. Location: Main Configuration WAN Set up Remote Site Set up Manual Call Remote site ID or alias to call Auto Call: Enabling the Auto-Call option within the Edit Remote Site menu of this remote site profile causes the Router to attempt to...
Applications Basic ISDN Connections The default settings of the P840 configure it for ISDN routing (rather than Digital_Leased). It may establish WAN connections to other bridge/routers via ISDN (Integrated Services Digital Network) connections. Either 1 or 2 ISDN B-channels (2 B-channels per ISDN BRI interface) may be used.
Page 49
Applications Ten ISDN switch types are available: net3, ni-1, ni-2, dms-100, 5ess-pp, 5ess-mp, tph1962, kdd, sweden, or ntt. Note that if your routers are located within different ISDN jurisdictions, the ISDN switch type may be different on each of the units. Directory Numbers &...
LAN. “Quick Start” PPP ISDN Connections The PPP P840 provides a “Quick Start” menu option that allows you to enter the basic configuration parameters required to establish a manual direct dial ISDN connection to another PPP IP/IPX router. Once the connection is established and is working properly, the Router should be configured with a remote site profile entry for that router.
Applications IPX Router Connection To establish an IPX PPP direct dial connection, enter the ISDN phone number of the remote site PPP router in the manual dial option. Refer to the Configure as an Ethernet IPX Router, section 2.1.3 for more information on IPX configuration required.
Leased service (also known as Super-digital, ADSL-lite or monopole) on one or both BRI channels. If a link on the P840 is configured for frame relay, it will communicate over WAN connections to other frame relay units via Frame Relay Permanent Virtual Circuits (PVC).
Manual on the accompanying CD-ROM for information on manual configuration). When the P840 first starts up it will query the frame relay service to determine the LMI type. Once the LMI type is determined, the PVC configurations will be known from the full status enquiry messages. If the DLCI numbers of the PVC’s on your service are determined during...
Page 54
Applications If during this learning process the maximum number of remote sites (40) has been reached, the P840 will prompt you that there are no remote sites available. A new remote site cannot be auto-created unless one of the existing remote sites is manually deleted.
Page 55
The configuration options described here are only for initial set up and configuration purposes. For more complete information on all of the configuration parameters available please refer to the P840 PPP Menus Reference Manual file on the accompanying CD-ROM.
The P840 may be configured to route PPP packets over Digital-Leased service (also known as Super-digital, ADSL-lite or monopole) on one or both BRI channels. The P840 in Digital-Leased mode will operate as a PPP leased line bridge/router if the frame relay function is disabled. The leased line P840 establishes PPP (Point to Point Protocol) WAN connections to other PPP leased line P840s or to other vendor’s PPP...
PPP router. The Bridge connection does not require any configuration for operation. IP Router Connection. If IP traffic is to be routed, the IP address of the P840 must be set. Local IP Address Location: Main...
Router’s LAN and supply the minimal configuration needed to allow hosts to operate in an IP network. The following steps must be performed on the P840 to configure it as a DHCP server.
Page 59
Applications The IP address pool option requires setting the first IP address in the range that is to be used for the devices attached to the DHCP Server. The number of addresses to be assigned must also be specified, to a maximum of 253. With the DHCP Services and IP Address Pool defined, devices may be attached to the network (up to the maximum specified) and they will be automatically configured.
Page 60
Figure 2-10 Local + External DNS Server Configuration The configuration options described here are only for initial set up and configuration purposes. For more complete information on all of the configuration parameters available please refer to the P840 PPP Menu Reference Manual on the accompanying CD-ROM.
Applications Network Address Translation and Port Translation The P840 provides support for Network Address Translation (NAT). Network Address Translation is a technique that translates private IP address on a private network to valid global IP addresses for access to the Internet.
Page 62
Applications Then NAT (Network Address Translation) is enabled: NAT Enable Location: Main Configuration WAN Set up Remote Site Set up Edit Remote Site Protocol Set up IP Parameters NAT Enabled Enabled Private Internet Service Network Provider Addresses: e-mail server 1.1.1.2 1.1.1.8 Global IP telnet...
Configure PPP Security The PPP P840 provides support for both PAP and CHAP security access authentication. An outgoing user name, PAP password , and CHAP secret are defined that the Router will use when responding to an authentication request from a remote site PPP router.
Page 64
Applications The complete security configuration for both incoming and outgoing calls is defined within the Security menu of the WAN Set up section. Security Level Location: Main Configuration WAN Set up Security Set up Security Level The security level defines the type of security that this Router will request when a remote site PPP router attempts to establish a PPP connection.
Page 65
Applications For a pair of partner routers with security enabled, the outgoing user name in the security parameters entry of one router must match the remote site alias in the partner router’s remote sites table. The configuration options described here are only for initial set up and configuration purposes.
Figure 2-12 Sample Firewall Application The above diagram shows a corporate head office network, which is connected to the Internet with a P840. There is also a branch office at a remote site connected with a Digital Leased link. The administrator at...
Page 67
Applications The following steps must be performed on the P840 to set up the firewall support as desired. First the firewall on the ISP connection (remote site 1) of the WAN is set up. The firewall option is set to “inbound” to have this WAN firewall filter traffic from the ISP to the Router while allowing unrestricted access out to the Internet.
Page 68
Applications Next, the LAN firewall is set up to restrict access to the LAN. The firewall option is set to “outbound” to have the LAN firewall filter traffic from the Router. Firewall LAN Filter Direction Location: Main Configuration Applications Set up Firewall Set up Firewall Set up Firewall...
Page 69
Applications Firewall Location: Main Configuration Applications Set up Firewall Set up Firewall Set up Designated Servers FTP Server — 195.100.1.12 WWW (HTTP) Server — 195.100.1.20 The configuration options described here are only for initial set up and configuration purposes. For more information on all of the configuration parameters available please refer to the Menu Reference Manual file on the accompanying CD-ROM.
Access is restricted to only those services that are specifically designated to be available. Filters The programmable filtering functions available on the P840 provide a very powerful means of controlling traffic flow to and from a network. Introduction to Filtering...
Applications Compression Compressing data allows data throughput rate considerably greater than the physical line rate. The actual rate achieved will depend on how compressible the specific data is. Generally, graphics and databases compress up to 600%, text 400 to 500%, binary codes about 200%. Enable compression Location: Main Configuration...
Applications Bandwidth On Demand The Router may be set to activate its secondary link when the load on the primary link exceeds a user-defined threshold. Set the traffic loads for enabling and disabling the secondary circuit Location: Main Configuration WAN Set up Remote Site Set up Edit Remote Site Threshold...
Page 73
Applications Bandwidth Allocation Control Protocol (BACP) may be used to negotiate the link activation between partner routers (BACP must be used if the partner router is not another Router). Enable BACP Location: Main Configuration WAN Set up Remote Site Set up Edit Remote Site Protocol Set up BACP Set up...
Applications QOS - Priority Queuing Priority Queuing (PQ) allows the users to configure the router to allow specific traffic bound for an outgoing interface to be prioritized into high, medium, normal and low queues. Packets sent to the high priority queue are serviced first, followed by the packets on the medium queue and so on.
Page 75
Applications To assign a Priority List to a LAN interface Location: Main Configuration Lan Set-up QOS Setup Queuing Strategy Priority Priority List Number To assign a Priority List to a Remote Site Connection Location: Main Configuration Wan Set-up Remote Site Set-up Edit Remote Site Protocol Set-up QOS Setup...
When the Perle router has SNTP enabled it will periodically send NTP packets to the NTP/SNTP server which will respond with the network time. The router will synchronize its internal clock with the response from the NTP/SNTP server.
Page 77
Applications Summer-time each year by specifying the month, week, day and hour for the begin and end Summer-time. To enable SNTP on the router and setup for unicast mode to directly obtain the time from a specific NTP server implement the following steps.
Page 78
Applications Summer Time Setup Summer Time enabled Summer Time Mode date Summer Time Start Year Month Date Time Summer Time End Year Month Date Time Offset...
IP routed frames, and IPX routed frames. For more information on filtering, please refer to the Programmable Filtering section of the P840 reference manual file. The PDF file is located on the accompanying CD-ROM. MAC Address Filtering MAC address filtering is provided by three built-in functions.
Introduction to Filtering disallow a specific station from accessing any service, “Filter if Source” could be used. You may easily prevent stations on one segment from accessing all but a specific resource on the other segment; for this, “negative” filtering and the use of “Forward if Destination”...
Page 81
Introduction to Filtering The following operators are used in creating Pattern filters. offset Used in pattern filters to determine the starting position to start the pattern checking. Example: 12-80 This filter pattern will match if the packet information starting at the 12 octet equals the 80 of the filter pattern.
Page 82
Introduction to Filtering brackets Used in pattern filters to separate portions of filter patterns for specific operators. Example: 12-80&(14-24|14-32) This filter pattern will be checked in two operations. First the section in brackets will be checked and then the results of the first check will be used in the second check using the first portion of the filter pattern.
Introduction to Filtering Popular Filters Some of the more commonly used pattern filters are shown here. Bridge Bridge pattern filters are applied to Ethernet frames that are bridged only. When the Router is operating as a router, all routed frames will be unaffected by the bridge pattern filters.
Introduction to Filtering IP Router IP router pattern filters are applied to IP Ethernet frames that are being routed. When the Router is operating as an IP router, all IP routed frames will be checked against the defined IP router pattern filters. IP routed frames are unaffected by the bridge pattern filters and the IPX router pattern filters.
REES The menu trees on the next few facing pages are a graphical representation of the hierarchy of the built-in menu system of the P840. The menus are shown with the options of the menus being displayed below the specific menu name.
Menu Trees Menu Tree MAIN software release: 05P6.06.xx Quick Start ISDN Set-Up 1. ISDN Set-Up menu 1. Switch Type 2. Device Name Dial prefix 3. Security Level Directory number 4. IP Address 4. Directory number Frame Relay menu options 5. Default Gateway 5.
Page 87
Menu Trees Continued from previous page Syslog Application Set-Up Firewall Set-Up NAT Exports SNMP Set-Up DHCP Set-Up 1. Syslog 1. Edit Services 1. LAN firewall setup menu 1. Edit Community menu 1. SNMP set-up menu 1. Server IP pool address menu 2.
Octet Locations on Ethernet Frames PPENDIX CTET OCATIONS THERNET RAMES This appendix provides octet locations for the various portions of three of the common Ethernet frames. When creating pattern filters these diagrams will assist in the correct definition of the patterns. The offset numbers are indicated by the numbers above the frame representations.
Octet Locations on Ethernet Frames ETHERNET Type Codes Type Code Description 0800 DOD IP 0801 X.75 Internet 0804 Chaosnet 0805 X.25 Level 3 0806 0807 XNS Compatibility 6001 DEC MOP Dump/Load 6002 DEC MOP Remote Console 6003 DEC DECNET Phase IV Route 6004 DEC LAT 6005...
Servicing Information PPENDIX ERVICING NFORMATION Opening of the case is only to be performed by qualified service personnel. WARNING ! Before servicing ensure that appliance coupler is disconnected. Always disconnect the power cord from the rear panel of the router. Geraetesteckvorrichtung trennen vor den Wartung.
Servicing Information Identifying the Internal Components The major components of concern and the jumper strap positions are shown in the following illustration. Figure C-1 Top Internal View of the Router Router Connecting to the ISDN-U Link Module The connection to the central office is made with the RJ45 ISDN connector on the rear panel.
Servicing Information To Clear a “Lost” Password Remove power from the router. Remove the case cover. Remove the jumper strap on pins 3-6 of W1. Re-attach the power to the router and wait for Power LED to go green. Remove power from the router. Re-install the jumper strap on pins 3-6 of W1.
Servicing Information Connecting to the Console Connector The console connector on the P840 is a DCE interface on a RJ45 pinout. The supplied DB9 to RJ45 converter should be used to connect to the DB9 connector of a DTE terminal. This connection will then provide access to the built-in menu system.
PPENDIX OFTWARE PGRADES Procedures for performing a Console ZMODEM Flash Load to upgrade the operating software of the router: 1) Save the current configuration of the router (Main menu: option 6). 2) Execute the Console (ZMODEM) command from the Load FLASH Set-Up menu.
Page 98
If the ZMODEM transfer operation needs to be restarted after it has been canceled or after loading the first file, simply choose the Console (ZMODEM) option from the Load FLASH Set-Up menu once again. Considerations: When the router is placed in Console load BOOT mode, the LAN interface and the WAN interface will be disabled.
Page 99
Servicing Information Procedures for performing a TFTP Flash Load to upgrade the operating software of the router: 1) Execute the Network (TFTP) command from the Load FLASH Set- Up menu. 2) Enter “none” to connect locally or enter the remote site ID number or alias to connect to a remote site.
Page 100
reset and return to normal operations operating from the existing software. In the following diagram of a cluster of routers, when upgrading the three Router routers in the diagram, the upgrade order should be Router C, then Router B, and finally Router A. A TFTP software load to Router C would be performed as follows: Using TFTP, get config.txt from each router and save.
Page 101
Servicing Information PC used for TFTP transfers Router A Link 1 Router B Link 2 Router C...