Table of Contents
Related Manuals for Patton OnSite 3210 Series
Summary of Contents for Patton OnSite 3210 Series
-
Page 1: User Manual
OnSite 3210 Series G.SHDSL VPN Router User Manual Sales Office: +1 (301) 975-1000 Technical Support: +1 (301) 975-1007 E-mail: support@patton.com WWW: www.patton.com Part Number: 07M3210-GS, Rev. B Revised: February 23, 2012... - Page 2 E-Mail: support@patton.com Trademark Statement The term OnSite is a trademark of Patton Electronics Company. All other trademarks presented in this document are the property of their respective owners. Copyright © 2012, Patton Electronics Company. All rights reserved. The information in this document is subject to change without notice. Patton Elec- tronics assumes no liability for errors that may appear in this document.
-
Page 3: Summary Table Of Contents
Link scheduler configuration ........................68 LEDs status and monitoring ......................... 87 Contacting Patton for assistance ........................89 Compliance information ..........................92 Specifications ..............................95 Cabling ............................... 100 Port pin-outs .............................. 104 OnSite 3210 Series factory configuration ....................107 Installation checklist ..........................109... -
Page 4: Table Of Contents
Typographical conventions used in this document....................15 General conventions ............................15 General information ............................16 OnSite Model 3210 Series overview ........................17 OnSite 3210 Series detailed description ......................18 Model code extensions ..........................18 Ports descriptions ............................19 Applications overview ............................20 Branch-Office virtual private network over Frame Relay service ..............20... - Page 5 OnSite Model 3210 User Manual Table of Contents Power connection and default configuration ....................33 Connect with the serial interface ........................33 Login ................................34 Changing the IP address ..........................34 2. Connect the OnSite VPN Router to the network ....................35 3. Load configuration ............................35 G.SHDSL Basic Configuration ........................
- Page 6 OnSite Model 3210 User Manual Table of Contents When to configure access lists .........................56 Features of access control lists .........................56 Access control list configuration task list........................57 Mapping out the goals of the access control list ....................57 Creating an access control list profile and enter configuration mode ...............58 Adding a filter rule to the current access control list profile ................58...
- Page 7 Contacting Patton for assistance ........................89 Introduction ................................90 Contact information..............................90 Patton Support Headquarters in the USA .......................90 Alternate Patton support for Europe, Middle Ease, and Africa (EMEA) ............90 Warranty Service and Returned Merchandise Authorizations (RMAs)..............90 Warranty coverage ............................90 Out-of-warranty service ..........................91 Returns for credit ............................91...
- Page 8 Serial console...............................101 Ethernet 10Base-T and 100Base-T ........................102 Port pin-outs .............................. 104 Introduction ................................105 Console port, RJ-45, EIA-561 (RS-232)......................105 Ethernet 10Base-T and 100Base-T port ......................106 DSL..................................106 OnSite 3210 Series factory configuration ....................107 Introduction ................................108 Installation checklist ..........................109 Introduction ................................110...
-
Page 9: List Of Figures
Connecting an OnSite 3210 Series device to a hub ....... . -
Page 10: List Of Tables
List of Tables General conventions ..............15 Rear panel ports . -
Page 11: About This Guide
68 describes how to use and configure OnSite quality of service (QoS) features. • Chapter 8 on page 87 provides LED definitions • Chapter 9 on page 89 contains information on contacting Patton technical support for assistance • Appendix A on page 92 contains compliance information • Appendix B on page 95 contains specifications for the routers •... -
Page 12: Precautions
OnSite Model 3210 User Manual About this guide Precautions Notes, cautions, and warnings, which have the following meanings, are used throughout this guide to help you become aware of potential problems. Warnings are intended to prevent safety hazards that could result in per- sonal injury. -
Page 13: Safety When Working With Electricity
About this guide Safety when working with electricity The OnSite contains no user serviceable parts. The equipment shall be returned to Patton Electronics for repairs, or repaired by qualified service per- sonnel. Opening the OnSite case will void the warranty. WARNING Mains Voltage: Do not open the case the when the power cord is attached. -
Page 14: General Observations
OnSite Model 3210 User Manual About this guide The power supply automatically adjusts to accept an input volt- age from 100 to 240 VAC (50/60 Hz). Verify that the proper voltage is present before plugging the CAUTION power cord into the receptacle. Failure to do so could result in equipment damage. -
Page 15: Typographical Conventions Used In This Document
OnSite Model 3210 User Manual About this guide Typographical conventions used in this document This section describes the typographical conventions and terms used in this guide. General conventions The procedures described in this manual use the following text conventions: Table 1. General conventions Convention Meaning Indicates a cross-reference hyperlink that points to a figure, graphic, table, or sec-... -
Page 16: General Information
Chapter 1 General information Chapter contents OnSite Model 3210 Series overview........................17 OnSite 3210 Series detailed description ......................18 Model code extensions ..........................18 Ports descriptions .............................19 Applications overview............................20 Branch-Office virtual private network over Frame Relay service ..............20 Corporate multi-function virtual private network... -
Page 17: Onsite Model 3210 Series Overview
LAN. Besides assuring first priority for key information, Patton's advanced QoS tech- nology enhances the quality and clarity of realtime application such as live voice and video communications with the main office. -
Page 18: Onsite 3210 Series Detailed Description
Enhanced IP services include domain name service (DNS) resolver and relay, NAT/NAPT, dynamic DNS, and DHCP server. OnSite 3210 Series detailed description The OnSite 3210 Series G.SHDSL VPN Router provides secure managed VPN routed networking with 2- port Ethernet LAN connectivity and a G.SHDSL WAN interface (see figure IPLink 3210 G.SHDSL WAN port connector... -
Page 19: Ports Descriptions
OnSite Model 3210 User Manual 1 • General information • EUI stands for external 100–240V AC universal input power supply (see figure Ports descriptions The OnSite 3210 Series rear-panel ports are described in table Table 2. Rear panel ports Port Location Description... -
Page 20: Applications Overview
VPN connection through a frame-relay service network as delivered on serial lines. The OnSite 3210 Series can support a similar scenario with network service delivered via an Ether- net WAN interface. For remote sites where PPP service is available, the 3210 Series also supports PPP network access over all the standard WAN interface options mentioned above. -
Page 21: Corporate Multi-Function Virtual Private Network
42 to configure the VPN. Corporate multi-function virtual private network The OnSite 3210 Series can deliver both private corporate intranet service and public Internet access to multi- ple remote sites by leveraging OnSite’s multiple frame-relay PVC support (see figure 6). - Page 22 OnSite Model 3210 User Manual 1 • General information The corporate multi-function application carries two types of traffic between each remote office and corpo- rate’s central office: • Private corporate traffic (the intranet/extranet) • Internet traffic The service provider offers a Frame Relay network for access, so both the private corporate traffic and the Inter- net traffic is transported over a Frame Relay PVC with one DLCI.
-
Page 23: Hardware Installation
Chapter 2 Hardware installation Chapter contents Planning the installation............................24 Installation checklist ............................25 Site log ................................26 Network information .............................26 Network Diagram .............................26 IP related information ............................26 Software tools ..............................26 Power source ..............................26 Location and mounting requirements ......................27 Installing the VPN router .............................27 Mounting the VPN router ..........................27... -
Page 24: Planning The Installation
OnSite Model 3210 User Manual 2 • Hardware installation Planning the installation Before you start the actual installation, we strongly recommend that you gather all the information you will need to install and setup the device. See table 3 for an example of what pre-installment checks you might need to carry out. -
Page 25: Installation Checklist
3) lists the tasks for installing an OnSite 3210 Series VPN Router. Make a copy of this checklist and mark the entries as you complete each task. For each OnSite 3210 Series VPN Router, include a copy of the completed checklist in your site log. -
Page 26: Site Log
2 • Hardware installation Site log Patton recommends that you maintain a site log to record all actions relevant to the system, if you do not already keep such a log. Site log entries should include information such as listed in table Table 4. -
Page 27: Location And Mounting Requirements
29) Installing the Ethernet cable The OnSite 3210 Series has automatic MDX (auto-cross-over) detection and configuration on the Ethernet ports. Any of the two ports can be connected to a host or hub/switch with a straight-through wired cable (see... -
Page 28: Installing The Dsl Cable
1 Rx+ 2 Rx- 3 Tx+ 6 Tx- Figure 7. Connecting an OnSite 3210 Series device to a hub Installing the DSL cable The OnSite 3210 comes with a G.SHDSL interface. Use a straight-through RJ-11 cable to connect the DSL port. -
Page 29: Connecting To External Power Source
OnSite Model 3210 User Manual 2 • Hardware installation Connecting to external power source The VPN Router comes with one of the following power supply options as best-suited to the expected installa- tion environment: • 120/140VAC internal power supply (designated by the model code extension UI) •... -
Page 30: Vpn Router Front Panel Leds And Console Port Locations
3. Verify that the AC power cord included with your VPN Router is compatible with local standards. If it is not, refer to chapter 9, “Contacting Patton for assistance” on page 89 to find out how to replace it with a compatible power cord. -
Page 31: Getting Started With The Onsite
Chapter 3 Getting started with the OnSite Chapter contents Introduction ................................32 1. Configure IP address ............................33 Power connection and default configuration ....................33 Connect with the serial interface ........................33 Login ................................34 Changing the IP address ..........................34 2. Connect the OnSite VPN Router to the network....................35 3. -
Page 32: Introduction
E ne E ne Internet Note You can manually configure the IPLink Router. You do not have to load a configuration file. Patton Web server with configuration examples Figure 10. Steps for setting up a new OnSite VPN Router Introduction... -
Page 33: Configure Ip Address
Activate the terminal emulation program on the PC or workstation that supports the serial interface (e.g. HyperTerm). Serial Terminal L i n o le Note A Patton Model 16F-561 RJ45 to DB-9 adapter is included with each IPLink Series device Figure 11. Connecting to the terminal Terminal emulation program settings: • 9600 bps •... -
Page 34: Login
OnSite Model 3210 User Manual 3 • Getting started with the OnSite • 1 stop bit • No flow control Login Accessing your OnSite VPN Router via the local console port (or via a Telnet session) causes the login screen to display. -
Page 35: Connect The Onsite Vpn Router To The Network
3. Load configuration Patton provides a collection of configuration templates online at www.patton.com/support/upgrades—one of which may be similar enough to your application that you can use it to speed up configuring the OnSite router. Simply download the configuration note that matches your application to your PC. Adapt the configu- ration as described in the configuration note to your network (remember to modify the IP address) and copy the modified configuration to a TFTP server. - Page 36 OnSite Model 3210 User Manual 3 • Getting started with the OnSite After the OnSite VPN Router has been rebooted the new start up configuration will be activated. 172.16.1.99(if-ip)[eth0]#reload Running configuration has been changed. Do you want to copy the 'running-config' to the 'startup-config'? Press 'yes' to store, 'no' to drop changes : no Press 'yes' to restart, 'no' to cancel : yes The system is going down...
-
Page 37: G.shdsl Basic Configuration
Chapter 4 G.SHDSL Basic Configuration Chapter contents Introduction ................................38 Line Setup ................................38 Configuring PPPoE ...............................38 Configuration Summary............................39 Setting up permanent virtual circuits (PVC)......................40 Using PVC channels in bridged Ethernet mode ....................40 Using PVC channels with PPPoE ........................40 Diagnostics ..............................41 Troubleshooting DSL Connections........................41... -
Page 38: Introduction
OnSite Model 3210 User Manual 4 • G.SHDSL Basic Configuration Introduction The OnSite 3210 model has an option for a built-in G.SHDSL modem. The modem appears in the configura- tion as "port dsl 0 0" mode. port dsl 0 0 vpi 8 vci 35 pppoe... -
Page 39: Configuration Summary
OnSite Model 3210 User Manual 4 • G.SHDSL Basic Configuration Next, you will need to create a WAN profile, create a WAN interface, and create a subscriber. Then, you can configure the DSL port (port dsl 0 0) for PPPoE. Follow this example: profile napt WAN context ip router... -
Page 40: Setting Up Permanent Virtual Circuits (Pvc)
OnSite Model 3210 User Manual 4 • G.SHDSL Basic Configuration Setting up permanent virtual circuits (PVC) The modems currently available are using ATM to multiplex traffic over the DSL framing connection. ATM allows you to have separate logical connections running in parallel. Those connections are called permanent virtual circuits (PVC). -
Page 41: Diagnostics
OnSite Model 3210 User Manual 4 • G.SHDSL Basic Configuration Diagnostics Table 10. Diagnostics commans Command Purpose Step 1 node> show dsl type Displays the type of modem installed. Step 2 node> show dsl line-state Displays information about the state of the DSL link. -
Page 42: Vpn Configuration
Chapter 5 VPN configuration Chapter contents Introduction ................................43 Authentication ..............................43 Encryption ..............................43 Transport and tunnel modes ...........................44 VPN configuration task list ...........................44 Creating an IPsec transformation profile ......................44 Creating an IPsec policy profile ........................45 Creating/modifying an outgoing ACL profile for IPsec ...................47 Configuration of an IP interface and the IP router for IPsec ................48... -
Page 43: Introduction
OnSite Model 3210 User Manual 5 • VPN configuration Introduction This chapter describes how to configure the VPN connections between two OnSite routers or between an OnSite and a third-party device. A virtual private network (VPN) is a private data network that uses the public telecommunications infrastruc- ture, maintaining privacy through the use of a tunneling protocol and security procedures. -
Page 44: Transport And Tunnel Modes
OnSite Model 3210 User Manual 5 • VPN configuration Transport and tunnel modes The mode determines the payload of the ESP packet and hence the application: • Transport mode: Encapsulates only the payload of the original IP packet, but not its header, so the IPsec peers must be at the endpoints of the communications link. -
Page 45: Creating An Ipsec Policy Profile
OnSite Model 3210 User Manual 5 • VPN configuration Creating an IPsec policy profile The IPsec policy profile supplies the keys for the encryption and/or the authenticators for the authentication, the security parameters indexes (SPIs), and IP address of the peer of the secured communication. Furthermore, the profile defines which IPsec transformation profile to apply and whether transport or tunnel mode shall be most effective. - Page 46 OnSite Model 3210 User Manual 5 • VPN configuration Mode: Configure Step Command Purpose node(cfg)#profile ipsec-policy-man- Creates the IPsec policy profile name ual name node(pf-ipstr)[name]#use profile Selects the IPsec transformation profile to be ipsec-transform name applied node(pf-ipstr)[name]#session-key Sets a key for encryption or an authenticator for optional authentication, either for inbound or outbound { inbound | outbound }...
-
Page 47: Creating/Modifying An Outgoing Acl Profile For Ipsec
OnSite Model 3210 User Manual 5 • VPN configuration Example: Create an IPsec policy profile The following example defines a profile for AES-encryption at a key length of 128. 3210(cfg)#profile ipsec-policy-manual ToBurg 3210(pf-ipsma)[ToBurg]#use profile ipsec-transform AES_128 3210(pf-ipsma)[ToBurg]#session-key inbound esp-encryption 1234567890ABCDEF1234567890ABCDEF 3210(pf-ipsma)[ToBurg]#session-key outbound esp-encryption FEDCBA0987654321FEDCBA0987654321 3210(pf-ipsma)[ToBurg]#spi inbound esp 1111... -
Page 48: Configuration Of An Ip Interface And The Ip Router For Ipsec
OnSite Model 3210 User Manual 5 • VPN configuration Configuration of an IP interface and the IP router for IPsec The IP interface that provides connectivity to the IPsec peer, must now activate the outgoing ACL profile con- figured in the previous section. Furthermore, the IP router must have a route for the remote network that points to the respective IP interface. -
Page 49: Debugging Ipsec
OnSite Model 3210 User Manual 5 • VPN configuration Example: Display IPsec transformation profiles 3210(cfg)#show profile ipsec-transform IPSEC transform profiles: Name: AES_128 ESP Encryption: AES-CBC, Key length: 128 Example: Display IPsec policy profiles 3210(cfg)#show profile ipsec-policy-manual Manually keyed IPsec policy profiles: Name: ToBurg, Peer: 200.200.200.1, Mode: tunnel, transform-profile: AES_128 ESP SPI Inbound: 1111, Outbound: 2222 ESP Encryption Key Inbound: 1234567890ABCDEF1234567890ABCDEF... -
Page 50: Sample Configurations
OnSite Model 3210 User Manual 5 • VPN configuration MANUAL ToBurg Tunnel 200.200.200.1 1111 AES-CBC 128 3622/unlimited 19047/unlimited OUT MANUAL ToBurg Tunnel 200.200.200.1 2222 AES-CBC 128 2857/unlimited 19047/unlimited Sample configurations The following sample configurations establish IPsec connections between an OnSite and a Cisco router. To interconnect two OnSite routers instead, derive the configuration for the second OnSite by doing the follow- ing modifications: •... -
Page 51: Cisco Router Configuration
OnSite Model 3210 User Manual 5 • VPN configuration ipaddress 200.200.200.2 255.255.255.252 use profile acl VPN_In in use profile acl VPN_Out out context ip router route 0.0.0.0 0.0.0.0 200.200.200.1 0 route 172.16.0.0 255.255.0.0 WAN 0 Cisco router configuration crypto ipsec transform-set DES esp-des crypto map VPN_DES local-address FastEthernet0/1 crypto map VPN_DES 10 ipsec-manual set peer 200.200.200.2... -
Page 52: Cisco Router Configuration
OnSite Model 3210 User Manual 5 • VPN configuration Rest of the configuration, see above, just change the name of the IPsec policy pro- file in the ACL profile ‘VPN_Out’ Cisco router configuration crypto ipsec transform-set AES_SHA1 ah-sha-hmac esp-aes 256 crypto map VPN_AES_SHA1 local-address FastEthernet0/1 crypto map VPN_AES_SHA1 10 ipsec-manual set peer 200.200.200.2... - Page 53 OnSite Model 3210 User Manual 5 • VPN configuration set session-key inbound esp 8888 cipher FEDCBA0987654321FEDCBA0987654321FEDCBA0987654321 authenticator FEDCBA0987654321FEDCBA0987654321 set session-key outbound esp 7777 cipher 1234567890ABCDEF1234567890ABCDEF1234567890ABCDEF authenticator 1234567890ABCDEF1234567890ABCDEF set transform-set 3DES_MD5 match address 110 For the remainder of the configuration (see above), just change the name of the IPsec policy profile in the ACL profile VPN_Out.
-
Page 54: Access Control List Configuration
Chapter 6 Access control list configuration Chapter contents Introduction ................................55 About access control lists ............................55 What access lists do ............................55 Why you should configure access lists ......................55 When to configure access lists .........................56 Features of access control lists .........................56 Access control list configuration task list........................57 Mapping out the goals of the access control list ....................57... -
Page 55: Introduction
OnSite Model 3210 User Manual 6 • Access control list configuration Introduction This chapter provides an overview of IP Access Control Lists and describes the tasks involved in configuring them through the OnSite router. This chapter includes the following sections: •... -
Page 56: When To Configure Access Lists
OnSite Model 3210 User Manual 6 • Access control list configuration For example, access lists can allow one host to access a part of your network, and prevent another host from accessing the same area. In figure 14 host A is allowed to access the Human Resources network and host B is prevented from accessing the Human Resources network. -
Page 57: Access Control List Configuration Task List
OnSite Model 3210 User Manual 6 • Access control list configuration • All access control lists have an implicit deny ip any any at the end. A packet that does not match the criteria of the first statement is subjected to the criteria of the second statement and so on until the end of the access control list is reached, at which point the packet is dropped. -
Page 58: Creating An Access Control List Profile And Enter Configuration Mode
OnSite Model 3210 User Manual 6 • Access control list configuration Before you begin to enter the commands that create and configure the IP access control list, be sure that you are clear about what you want to achieve with the list. Consider whether it is better to deny specific accesses and permit all others or to permit specific accesses and deny all others. - Page 59 OnSite Model 3210 User Manual 6 • Access control list configuration Mode: Profile access control list Step Command Purpose node(pf-acl)[name]#deny ip {src src-wildcard | any | host Creates an IP access of control list src} {dest dest-wildcard | any | host dest} [cos group] entry that denies access defined according to the command options...
-
Page 60: Adding An Icmp Filter Rule To The Current Access Control List Profile
OnSite Model 3210 User Manual 6 • Access control list configuration Adding an ICMP filter rule to the current access control list profile The command permit or deny are used to define an ICMP filter rule. Each ICMP filter rule represents an ICMP access of control list entry. - Page 61 OnSite Model 3210 User Manual 6 • Access control list configuration Where the syntax is as following: Keyword Meaning The source address to be included in the rule. An IP address in dotted-decimal-format, e.g. 64.231.1.10. src-wildcard A wildcard for the source address. Expressed in dotted-decimal format this value specifies which bits are significant for matching.
-
Page 62: Adding A Tcp, Udp Or Sctp Filter Rule To The Current Access Control List Profile
OnSite Model 3210 User Manual 6 • Access control list configuration The same effect can also be obtained by using the simpler message name option. See the following example. 3210(cfg)#profile acl WanRx 3210(pf-acl)[WanRX]#deny icmp any any msg echo 3210(pf-acl)[WanRX]#exit 3210(cfg)# Adding a TCP, UDP or SCTP filter rule to the current access control list profile The commands permit or deny are used to define a TCP, UDP or SCTP filter rule. - Page 63 OnSite Model 3210 User Manual 6 • Access control list configuration Where the syntax is: Keyword Meaning The source address to be included in the rule. An IP address in dotted-decimal-format, e.g. 64.231.1.10. src-wildcard A wildcard for the source address. Expressed in dotted-decimal format this value specifies which bits are significant for matching.
-
Page 64: Binding And Unbinding An Access Control List Profile To An Ip Interface
OnSite Model 3210 User Manual 6 • Access control list configuration Binding and unbinding an access control list profile to an IP interface The command use is used to bind an access control list profile to an IP interface. This procedure describes how to bind an access control list profile to incoming packets on an IP interface Mode: Profile access control list Step... -
Page 65: Displaying An Access Control List Profile
OnSite Model 3210 User Manual 6 • Access control list configuration Unbind an access control list profile from an interface. 3210(cfg)#context ip router 3210(cfg-ip)[router]#interface wan 3210(cfg-if)[wan]#no use profile acl in Note When unbinding an access control list profile the name argument is not required, since only one incoming and outgoing access control list can be active at the same time on a certain IP interface. - Page 66 OnSite Model 3210 User Manual 6 • Access control list configuration Mode: Interface Step Command Purpose node(cfg)#context ip router Selects the IP router context node(ctx-ip)[router]#interface if-name Selects IP interface if-name for which access control list profile shall be debugged node(if-ip)[if-name]#debug acl {in | out} [level] Enables access control list debug monitor with a certain debug level for the selected interface if-name...
-
Page 67: Examples
OnSite Model 3210 User Manual 6 • Access control list configuration Examples Denying a specific subnet Figure 15 shows an example in which a server attached to network 172.16.1.0 shall not be accessible from outside networks connected to IP interface lan of the OnSite device. To prevent access, an incoming filter rule named Jamming is defined, which blocks any IP traffic from network 172.16.2.0 and has to be bound to IP interface lan. -
Page 68: Link Scheduler Configuration
Chapter 7 Link scheduler configuration Chapter contents Introduction ................................69 Configuring access control lists..........................69 Configuring quality of service (QoS) ........................70 Applying scheduling at the bottleneck ......................70 Using traffic classes ............................70 Introduction to Scheduling ..........................71 Priority ..............................71 Weighted fair queuing (WFQ) ........................71 Shaping ..............................72 Burst tolerant shaping or wfq... -
Page 69: Introduction
OnSite Model 3210 User Manual 7 • Link scheduler configuration Introduction This chapter describes how to use and configure the OnSite Quality of Service (QoS) features. Refer to 6, “Access control list configuration” on page 54 for more information on the use of access control lists. This chapter includes the following sections: •... -
Page 70: Configuring Quality Of Service (Qos)
OnSite Model 3210 User Manual 7 • Link scheduler configuration NAPT Profile Service Policy Profile router Context use command use command Interfaces Profile bind command bind command Circuit Ports Figure 16. IP context and related elements Configuring quality of service (QoS) In the OnSite 3210, the link scheduler enables the definition of QoS profiles for network traffic on a certain interface, as shown in figure... -
Page 71: Introduction To Scheduling
OnSite Model 3210 User Manual 7 • Link scheduler configuration can be used to mark a specific packet type for the other network nodes. By default the traffic-class tag is empty. Refer to figure 17 on page 71 when using the ACL to classify traffic. It illustrates the sequence of processing stages every routed packet passes. -
Page 72: Shaping
7 • Link scheduler configuration Each traffic-class is in fact assigned a relative weight, which is used to share the bandwidth among the currently active classes. Patton recommends that you specify the weight as percent which is best readable. Shaping There is another commonly used way to assign bandwidth. -
Page 73: Quick References
OnSite Model 3210 User Manual 7 • Link scheduler configuration Mode priority critical_q min. 30% min. 40% Level_1 min. 30% Mail Low_Priority Default Mode Shaper Define 2nd level Define 1st level Use arbiter on arbiter arbiter an interface Figure 18. Example of Hierarchical Scheduling Quick references The following sections provide a minimal “standard”... -
Page 74: Command Cross Reference
OnSite Model 3210 User Manual 7 • Link scheduler configuration • “modem-512” is the title of the profile which is referred to when installing the scheduler • “rate-limit 512” allows no more than 512 kbit/sec to pass which avoids queueing in the modem. •... -
Page 75: Defining The Access Control List Profile
OnSite Model 3210 User Manual 7 • Link scheduler configuration • Displaying link scheduling profile information (see page 85) • Enable statistics gathering (see page 85) Profile Packet Classification Predefined Classes Different Types (Classes) of Traffic The service-policy profile defines the arbitration mode and order in which packets of different classes are served. -
Page 76: Creating An Access Control List
OnSite Model 3210 User Manual 7 • Link scheduler configuration Some types of packets you do not have to tag with ACL. Voice and data packets from of for the OnSite itself are automatically tagged with predefined traffic-class names: Predefined internal classes for data are: •... -
Page 77: Creating A Service Policy Profile
OnSite Model 3210 User Manual 7 • Link scheduler configuration Mode: Configure Step Command Purpose node(cfg)#profile acl name Creates a new access control list profile named name node(pf-acl)[name]#permit ip host ip-address any traffic-class Creates an IP access con- class-name trol list entry that permits access for host at IP address ip-address, and specifies that packets... -
Page 78: Structure Of A Service-Policy Profile
OnSite Model 3210 User Manual 7 • Link scheduler configuration profile service-policy <profile-name> link rate, arbitration common settings common parameters source traffic-class <x> bandwidth, packet mark settings for class x queue-size, etc. source traffic-class <y> settings for class y source traffic-class default settings for all other traffic-classes not listed Figure 21. -
Page 79: Specifying The Handling Of Traffic-Classes
OnSite Model 3210 User Manual 7 • Link scheduler configuration At a some point the source traffic-class default must be listed. This class must be present, because it defines how packets, which do not belong to any of the traffic-classes listed in the profile are to be handled. When all listed “traffic-classes”... -
Page 80: Defining The Bit-Rate
OnSite Model 3210 User Manual 7 • Link scheduler configuration Mode: Source Command Purpose node(src)[name]#share percentage Defines fair queuing weight (relative to other sources) to percent- age for the selected class or policy name Defining the bit-rate The command is used with shaper link arbitration to assign the (average) bit-rate to the selected source. rate When enough bandwidth is available each source will exactly receive this bandwidth (but no more), when overloaded the shaper will behave like a wfq arbiter. -
Page 81: Specifying The Precedence Field
OnSite Model 3210 User Manual 7 • Link scheduler configuration The type-of-service (TOS) byte in an IP header specifies precedence (priority) and type of service (RFC791, RFC1349). The precedence field is defined by the first three bits and supports eight levels of priority. The next four bits—which are set by the command—determine the type-of-service (TOS). -
Page 82: Specifying Layer 2 Marking
OnSite Model 3210 User Manual 7 • Link scheduler configuration “traffic-class” number called. With OnSite you can inspect the DSCP value in the ACL rules and modify the DSCP value with the link scheduler command. set ip dscp Note When configuring service differentiation on the OnSite router, ensure that codepoint settings are arranged with the service provider. -
Page 83: Defining Random Early Detection
OnSite Model 3210 User Manual 7 • Link scheduler configuration Defining random early detection The command is used to request random early detection (RED). When a queue carries lots of random-detect TCP transfers that last longer than simple web requests, there is a risk that TCP flow-control might be ineffi- cient. -
Page 84: Devoting The Service Policy Profile To An Interface
OnSite Model 3210 User Manual 7 • Link scheduler configuration Devoting the service policy profile to an interface Any service policy profile needs to be bound to a certain IP interface to get activated. According the terminol- ogy of OnSite a service policy profile is used on a certain IP interface, as shown in figure Service Policy... -
Page 85: Displaying Link Arbitration Status
OnSite Model 3210 User Manual 7 • Link scheduler configuration 3210>enable 3210#configure 3210(cfg)#context ip router 3210(ctx-ip)[router]#interface wan 3210(if-ip)[wan]#use profile service-policy Voice_Prio out Displaying link arbitration status command displays link arbitration status. This command supports the optional show service-policy argument interface that select a certain IP interface. -
Page 86: Values Defining Detail Of The Queuing Statistics
OnSite Model 3210 User Manual 7 • Link scheduler configuration The command has optional values (in the range of 1 to 4) that define the level of detail (see table 14). Table 14. Values defining detail of the queuing statistics Optional Value Implication on Command Output Statistic gathering is switched off... -
Page 87: Leds Status And Monitoring
Chapter 8 LEDs status and monitoring Chapter contents Status LEDs................................88... -
Page 88: Status Leds
Console Enet 0 Enet 1 Console port L i n o le Figure 23. Examples of OnSite 3210 Series front panels Table 15. OnSite LED Indications Description Note If an error occurs, all LEDs will flash once per second. Power When lit, indicates power is applied. -
Page 89: Contacting Patton For Assistance
Contacting Patton for assistance Chapter contents Introduction ................................90 Contact information..............................90 Patton Support Headquarters in the USA .......................90 Alternate Patton support for Europe, Middle Ease, and Africa (EMEA) ............90 Warranty Service and Returned Merchandise Authorizations (RMAs)..............90 Warranty coverage ............................90 Out-of-warranty service ..........................91 Returns for credit ............................91... -
Page 90: Introduction
RAS warranty and obtaining a return merchandise authorization (RMA). Contact information Patton Electronics offers a wide array of free technical services. If you have questions about any of our other products we recommend you begin your search for answers by using our technical knowledge base. Here, we have gathered together many of the more commonly asked questions and compiled them into a searchable database to help you quickly solve your problems. -
Page 91: Out-Of-Warranty Service
RMA#: xxxx 7622 Rickenbacker Dr. Gaithersburg, MD 20879-4773 USA Patton will ship the equipment back to you in the same manner you ship it to us. Patton will pay the return shipping costs. Warranty Service and Returned Merchandise Authorizations (RMAs) - Page 92 Appendix A Compliance information Chapter contents Compliance ................................93 ................................93 Safety ................................93 PSTN Regulatory ............................93 Radio and TV Interference (FCC Part 15) ......................93 CE Declaration of Conformity ..........................93 Authorized European Representative ........................94 FCC Part 68 (ACTA) Statement ...........................94 Industry Canada Notice ............................94...
-
Page 93: A Compliance Information
The safety advice in the documentation accompanying this product shall be obeyed. The conformity to the above directive is indicated by the CE sign on the device. The signed Declaration of Conformity can be down- loaded from the Patton website at www.patton.com/certifications. Compliance... -
Page 94: Authorized European Representative
OnSite Model 3210 User Manual A • Compliance information Authorized European Representative D R M Green European Compliance Services Limited. Oakdene House, Oak Road Watchfield, Swindon, Wilts SN6 8TD, UK FCC Part 68 (ACTA) Statement This equipment complies with Part 68 of FCC rules and the requirements adopted by ACTA. On the bottom side of this equipment is a label that contains—among other information—a product identifier in the format US: AAAEQ##TXXXX. - Page 95 Appendix B Specifications Chapter contents Ethernet interfaces..............................96 PPP support ................................96 services................................96 Management .................................96 Operating environment ............................96 Operating temperature ............................96 Operating humidity ............................96 System...................................97 Dimensions ................................97 G.SHDSL Daughter Card.............................98 Power supply .................................99 Internal AC version ............................99 12VDC version with External AC Power Adapter ...................99 5VDC Version with External Power Adapter ....................99...
-
Page 96: B Specifications
OnSite Model 3210 User Manual B • Specifications Ethernet interfaces 10/100Base-TX Ethernet WAN port 10/100Base-TX Ethernet LAN port All ports full duplex, autosensing, auto-MDIX 10/100 Full Duplex/Autosensing Ethernet RJ-45 PPP support Frame-Relay (8 PVCs) RFC1490, FRF.12 fragmentation LMI, Q.933D, ANSI 617D, Gang of Four PPP, PAP, CHAP, LCP, IPCP IP services IPv4 router;... -
Page 97: System
OnSite Model 3210 User Manual B • Specifications System CPU Motorola MPC875 operating at 66 MHz Memory: • 32 Mbytes SDRAM • 8 Mbytes Flash Dimensions 7.3W x 1.6H x 6.1D in. (18.5H x 4.1W x 15.5D cm) System... -
Page 98: G.shdsl Daughter Card
OnSite Model 3210 User Manual B • Specifications G.SHDSL Daughter Card Note For information on configuring the G.SHDSL daughter card, see Chapter 4, “G.SHDSL Basic Configuration” on page 37. Table 16. G.SHDSL Daughter Card Specifications Factor Specs • ITU-T G.991.2 (and Amendment 2) •... -
Page 99: Power Supply
OnSite Model 3210 User Manual B • Specifications Power supply Internal AC version Internal power supply 100–240 VAC, 50/60 Hz, 200 mA 12VDC version with External AC Power Adapter Uses external AC Adaptor which provides 12VDC via barrel type connector AC Adapter Input: 90-264VAC, 47-63Hz AC Adapter Output: 12 VDC, 1.25A max Note... -
Page 100: Cabling
Appendix C Cabling Chapter contents Introduction ................................101 Serial console ..............................101 Ethernet 10Base-T and 100Base-T ........................102... -
Page 101: Introduction
The OnSite can be connected to a serial terminal over its serial console port, as depicted in figure Serial Terminal L i n o le A Patton Model 16F-561 RJ45 to DB-9 adapter is included Note with each IPLink Series device Figure 24. Connecting a serial terminal Note See section “Console port, RJ-45, EIA-561 (RS-232)”... -
Page 102: Ethernet 10Base-T And 100Base-T
OnSite Model 3210 User Manual C • Cabling Ethernet 10Base-T and 100Base-T Ethernet devices (10Base-T/100Base-T) are connected to the OnSite over a cable with RJ-45 plugs. Use a cross-over cable to a host, or a straight cable to a hub. See figure 25 (host) and figure 26... -
Page 103: Ethernet Straight-Through
OnSite Model 3210 User Manual C • Cabling Straight-through cable RJ-45, male RJ-45, male 1 Rx+ 2 Rx- 3 Tx+ 6 Tx- Figure 26. Ethernet straight-through Ethernet 10Base-T and 100Base-T... - Page 104 Appendix D Port pin-outs Chapter contents Introduction ................................105 Console port, RJ-45, EIA-561 (RS-232)......................105 Ethernet 10Base-T and 100Base-T port ......................106 ..................................106...
-
Page 105: D Port Pin-Outs
OnSite Model 3210 User Manual D • Port pin-outs Introduction This section provides pin-out information for the ports of the OnSite router. Console port, RJ-45, EIA-561 (RS-232) The RS-232 serial console port of the OnSite is configured to operate as a DCE. View the image in figure 27 showing the RJ-45 receptacle with the numerical identification of the pin numbers and functions. -
Page 106: Ethernet 10Base-T And 100Base-T Port
OnSite Model 3210 User Manual D • Port pin-outs Ethernet 10Base-T and 100Base-T port Table 18. RJ-45 socket Signal Direction from OnSite from OnSite to OnSite to OnSite The Ethernet ports are auto-detect MDI-X. Note Pins not listed are not used. Table 19. -
Page 107: Onsite 3210 Series Factory Configuration
Appendix E OnSite 3210 Series factory configuration Chapter contents Introduction ................................108... -
Page 108: Introduction
OnSite Model 3210 User Manual E • OnSite 3210 Series factory configuration Introduction The factory configuration settings for the OnSite 3210 Series devices are as follows: #----------------------------------------------------------------# # 3210 Series # R3.xx BUILDxxxxx # 2005-01-18T00:00:00 # Factory configuration file #----------------------------------------------------------------#... -
Page 109: Installation Checklist
Appendix F Installation checklist Chapter contents Introduction ................................110... -
Page 110: Introduction
This appendix lists the tasks for installing an OnSite 3210 Series G.SHDSL VPN Router (see table 20). Make a copy of this checklist and mark the entries as you complete each task. For each OnSite 3210 Series Router, include a copy of the completed checklist in your site log. Table 20. Installation checklist...
Need help?
Do you have a question about the OnSite 3210 Series and is the answer not in the manual?
Questions and answers