Page 2
While every effort has been made to ensure the accuracy of all information in this manual, BinTec Access Networks GmbH cannot assume liability to any par- ty for any loss or damage caused by errors or omissions or by statements of any kind in this document and is only liable within the scope of its terms of sale and delivery.
Page 3
You will find further information in the "Declarations of Conformity" at www.bintec.net. How to reach BinTec BinTec Access Networks GmbH You can find contact information for Südwestpark 94 BinTec France here: D-90449 Nürnberg www.bintec.fr Germany Telephone: +49 911 96 73 0...
Table of Contents Welcome! X4100/200/300 – Workgroup Access Router for Present and Future Applications Scope of Supply 1.2.1 Basic Unit 1.2.2 Expansion Cards BinTec Companion CD Documentation from BinTec System Requirements About this Manual 1.6.1 Contents 1.6.2 Meaning Feedback General Safety Precautions...
Page 6
Procedure for Initial Configuration 4.5.1 In Advance of Configuration 4.5.2 Installing BRICKware 4.5.3 Configuring a PC Man-Machine Interface (MMI) – Display with User Guide Overview Display and Input Keys 5.2.1 Using the Input Keys 5.2.2 Meaning of LEDs BinTec Access Networks GmbH...
Page 7
5.3.5 Expansion Card Data 5.3.6 Monitoring 5.3.7 Defining Default Screen 5.3.8 Saving the Configuration 5.3.9 Restarting X4100/200/300 Basic Configuration of Basic Unit with Setup Tool Basic Router Settings 6.1.1 License(s) 6.1.2 Entering System Data 6.1.3 Configuring the LAN Interface 6.1.4...
Page 8
Keepalive Monitoring Basic IP Settings 7.3.1 System Time 7.3.2 Name Resolution in X4100/200/300 with DNS Proxy 7.3.3 Port Numbers 7.3.4 BOOTP Relay Agent Quality of Service (QoS) 7.4.1 Defining IP Filters 7.4.2 Classification and (TOS) Signaling BinTec Access Networks GmbH...
Page 9
9.2.3 Authentication of PPP Connections with PAP, CHAP or MS-CHAP 9.2.4 Callback 9.2.5 Closed User Group 9.2.6 Access to Remote CAPI 9.2.7 NAT (Network Address Translation) 9.2.8 Filters (Access Lists) 9.2.9 Local Filters 9.2.10 Back Route Verification X4100/200/300 User’s Guide...
Page 10
Man-Machine Interface (MMI) 11.1.2 Local SNMP Shell Commands 11.1.3 External Aids 11.2 Typical Errors and Procedure 11.2.1 System Errors 11.2.2 ISDN Connections Technical Data 12.1 Mains Unit 12.2 Features of Basic Unit 12.2.1 Serial Console Interface BinTec Access Networks GmbH...
Page 11
Table of Contents 12.2.2 Ethernet/LAN Interface 12.2.3 10 BT Ethernet Interface for X4100 X4200 12.2.4 ISDN BRI Interface 12.2.5 Serial WAN Interface for X4200 X4300 12.3 Features of Expansion and Resource Cards 12.3.1 X4E-2/3BRI WAN Interface Card for ISDN BRI (Basic Rate Interface) 12.3.2...
Page 12
Table of Contents BinTec Access Networks GmbH...
Welcome! Congratulations on deciding to buy the X4100/200/300 extendible multiprotocol router from the workgroup access series of BinTec Access Networks GmbH – an efficient and future-oriented router solution for use in small and medium- sized firms. Figure 1-1: X4100/200/300 - the workgroup access router for present and future appli-...
X.25 (optional) and is also suitable for bridging other protocols based on the spanning tree method. Remote CAPI Using BinTec’s remote CAPI interface, applications based on the widely used CAPI interface can be used network-wide. This means the available ISDN con- nections can be used more effectively.
Page 15
You can download BinTec’s current software free of charge from the World Wide Web. You will find detailed information about the individual subjects in the relevant parts of this manual and in the more detailed documentation (on the BinTec Companion CD). X4100/200/300...
Release Notes, if required 19-inch mounting kit 1.2.2 Expansion Cards The following expansion cards can be purchased for X4100/200/300: X4E-1/2PRI: WAN interface card for ISDN PRI and/or G.703 – equipped as standard with hardware support (HiFn) for encryption and compression –...
Page 17
Scope of Supply X4E-2FE: LAN interface card for 10/100 Mbps, can be optionally equipped with – a resource card for encryption and compression (XT-ENC) X4100/200/300 User’s Guide...
Device at COM1 or Device at COM2. Configuration Manager allows you to configure and administrate all BinTec routers in the network via a graphic interface. Here you can view and edit the SNMP tables and variables. Remote CAPI Client: The Remote CAPI Client allows you to use communications applications based on the standard CAPI interface.
Instructions for the operation of BinTec routers in Great Britain. You received this documentation together with your X4100/200/300. The User’s Guide is provided in printed form. Your BinTec Companion CD also contains the complete documentation in electronic form (PDF, HTML). In addition to your Companion CD documentation, you can download all the latest documentation free of charge from our WWW server at www.bintec.net.
The router communicates with the PC via ISDN-Login, a LAN interface (10/100 Mbps) or a serial connection. Your router can therefore be used in many different operating system environments, such as DOS, Win- dows, UNIX, AS/400, Macintosh or Novell. BinTec Access Networks GmbH...
How to use the MMI with display and input face (MMI) – Display with keys. User Guide" 6: "Basic Configuration of How to take X4100/200/300 into operation with Basic Unit with Setup the Setup Tool and set up a basic configuration Tool" (including configuration of the WAN interfaces).
15 National guages. Languages" Table 1-1: List of chapters 1.6.2 Meaning To help you locate and interpret information easily, this manual uses the follow- ing visual aids: Symbol Meaning Points out useful and relevant tips. BinTec Access Networks GmbH...
Page 23
List of visual aids To help you find and interpret the information in this manual, the following typo- graphical elements are used: Typographical Meaning element Here you are requested to do something. Lists including two levels. – X4100/200/300 User’s Guide...
Page 24
Indicates keys/key combinations and Windows Windows Start menu terms. italics, e.g. Indicates values that can be entered or set in the Setup Tool or MIB variables. none Online: blue Indicates links. Table 1-3: Typographical elements BinTec Access Networks GmbH...
X4100/200/300 and meets your requirements. You as the user of BinTec products are the best person to judge whether we have suc- ceeded with this manual. So please let us know what is missing in this manual, what you don’t like, what we should do better, what you like, what you think is especially successful, etc.
Installation and Read the information on the ambient conditions (see Technical Data) be- operation fore installing and operating X4100/200/300. Place the equipment on a firm flat base. Electrostatic charges may cause damage to the equipment. You should therefore wear a grounded wrist strap or touch a grounded surface before you touch sockets or extension cards of X4100/200/300.
Page 28
Make sure you follow the correct cabling sequence, as described in the manual. Use only the cables supplied with the equipment or cables that meet the specifications in this manual. If you use other cables, BinTec Ac- cess Networks GmbH cannot accept liability for any damage occurring or for any adverse effects on operation.
Page 29
Unauthorized opening and improper repairs can result in serious danger for the user (e.g. electric shock). Ensure that repairs are only carried out by service centers authorized by BinTec. Your dealer will tell you where the service centers are situated. Failure to observe the above instructions in- validates the guarantee and no claims can be accepted.
Page 30
General Safety Precautions BinTec Access Networks GmbH...
Figure 3-1: Front view of basic unit Display and input keys BinTec’s Man-Machine Interface (MMI), a convenient user guide with display and input keys, guides the user through a number of basic functions of X4100/ 200/300. You will find a detailed description of the MMI in...
Basic Unit 3.1.2 Rear of the Different Basic Units X4100 connections Rear view of X4100 basic unit: IEC AC socket of mains unit Mini DIN socket (console) ISDN BRI interface Fixing screws for expansion card and dummy cover Ethernet/LAN Interface...
Page 34
ISDN BRI interface Expansion card slot (with dummy cover) Ethernet/LAN Interface X.21/V.35 interface 10/100 Base-T Fast Ethernet 10 Base-T Ethernet for xDSL Not used. (X.21/V.35 interface) Mini DIN socket (console) Figure 3-3: Rear view of X4200 BinTec Access Networks GmbH...
Page 35
Ethernet/LAN Interface Expansion card slot (with 10/100 Base-T Fast Ethernet dummy cover) Not used (10 Base-T Ethernet X.21/V.35 interface for xDSL) Figure 3-4: Rear view of X4300 Connecting For connecting your basic unit, go to chapter 3.4, page X4100/200/300 User’s Guide...
The components and fixing parts shown in the diagram below are required for installation in a 19-inch cabinet: Screws Mounting bracket Washers Fixing holes Figure 3-5: Exploded drawing showing the main components and fixing parts for the installation of basic units in a 19-inch cabinet BinTec Access Networks GmbH...
Page 37
Slide this preassembled unit with the two brackets screwed to it into the 19- inch cabinet and screw the preassembled unit to the longitudinal sections of the cabinet. These screws are not included with your X4100/200/300, but are supplied with the 19-inch cabinet. X4100/200/300...
Page 38
3.4, page Removal from 19-inch To remove X4100/200/300 from the 19-inch cabinet (e.g. for replacing or install- cabinet ing an expansion card, installing a fan unit, etc.), carry out the steps described above in the reverse order. BinTec Access Networks GmbH...
Expansion and Resource Cards Expansion and Resource Cards You can extend your basic unit by adding an X4100/200/300 expansion card. The following expansion cards are offered by BinTec for integration in X4100/ 200/300: X4E-1/2PRI: WAN interface card for ISDN PRI and/or G.703 –...
Page 40
If you use a PRI/G.703 expansion card in your built-in X4100/200/300 unit, make sure you fit the fan unit. You can buy the fan unit from your supplier. BinTec Access Networks GmbH...
Page 41
The installation of resource cards in an expansion card generates additional heat. A fan unit must be used to prevent damage to components! If you use an expansion card with resource card(s) in your built-in X4100/ 200/300 unit, make sure you fit the fan unit.
Do not connect X4100/200/300 to the power supply until the equipment is completely closed and you have rechecked the installation. BinTec Access Networks GmbH...
Page 43
Do not touch any parts inside the expansion slot when installing or replacing the expansion card. There is a risk of electric shock! Do not touch any parts inside the expansion slot of X4100/200/300! Caution! Electrostatic charges can damage electronic components. Please observe the...
Page 44
If you use a PRI/G.703 expansion card in your built-in X4100/200/300 unit, make sure you use the fan unit. You can buy the fan unit from your supplier. Undo the screws of the dummy cover or the expansion card installed in the slot. BinTec Access Networks GmbH...
Page 45
The installation of resource cards in an expansion card generates additional heat. A fan unit must be used to prevent damage to components! If you use an expansion card with resource card(s) in your built-in X4100/ 200/300 unit, make sure you fit the fan unit.
Connecting X4100/200/ Connect the serial port of your PC (COM1 or COM2) to the console inter- face of your X4100/200/300. Use only the serial cable supplied with the to PC or terminal equipment. You only need to connect...
Page 47
X4100/200/300 to your connection via a cable (not supplied with the equipment!). We recommend you use original BinTec cables, which you can buy from your dealer. The use of other cables may cause damage to your equipment and invalidates the guarantee!
The LEDs on the BRI expansion card indicate the following status messages: Meaning lights flashes green – 1 B-channel is used – 2 B-channels are used – – None of the B-channels used BinTec Access Networks GmbH...
Page 49
(Unit 0) and the two LEDs on the right side (red and green) to the second port (Unit 1). The red LEDs on the LAN expansion card light up if Ethernet collisions occur and the green LEDs indicate activity on the Ethernet: X4100/200/300 User’s Guide...
Page 50
– 100 Mbps Mode (Fast Ethernet) – 10 Mbps Mode (Ethernet) – – Port is not available – Ethernet collision – – No Ethernet collision Table 3-3: Status messages of LEDs on a LAN expansion card BinTec Access Networks GmbH...
All configura- tion files are deleted and the BOOTmonitor settings are set to the default values. (5) Default BOOTmonitor parameters: You can change the default settings of X4100/200/300’s BOOTmonitor, e.g. the baud rate for serial connections. X4100/200/300 User’s Guide...
Page 52
Hardware Description and Installation (6) Show system information: Shows useful information for X4100/200/300, e.g. serial number, MAC ad- dress and software versions. If you change the baud rate (the preset value is 9600 baud), make sure the ter- minal program used also uses this baud rate. If this is not the case, you will not...
Configuration Requirements This chapter describes the following: How to access X4100/200/300 (chapter 4.1, page How to log in to X4100/200/300 (chapter 4.2, page Which methods of configuration are available to you (chapter 4.3, page How the Setup Tool is constructed (chapter 4.4, page...
Over an ISDN connection The access possibilities are shown in the diagram below: Serial Connection X4x00 isdnlogin Figure 4-1: Possible connections to X4100/200/300 The various connection methods are presented below. Select the procedure to suit your needs. BinTec Access Networks GmbH...
4.1.1 Man-Machine Interface (MMI) Initial steps The MMI with its display and input keys is a good method for establishing “initial contact” with X4100/200/300. You should carry out the following initial steps with the MMI (see chapter 5, page 81):...
Page 56
BSD) or minicom (under Linux). The settings for these programs correspond to those listed above. Example of a command line for using cu: cu -s 9600 -c/dev/ttyb Example of a command line for using tip: tip -9600 /dev/ttyb BinTec Access Networks GmbH...
Enter the name and IP address of your X4100/200/300 in the window under Device Parameter. Click OK. Close DIME Tools. Running telnet Now establish a connection to X4100/200/300 with telnet: Windows Click Run… in the Windows Start menu. Type telnet <IP address of X4100/200/300>. X4100/200/300 User’s Guide...
Connection is then obtained by means of a BinTec router that is already configured or an ISDN card in the remote LAN, using a number of X4100/200/300’s ISDN connection in your own LAN (e.g.
Page 59
ISDN login, proceed as follows: Connect X4100/200/300 to the ISDN. Log in on your BinTec router in the remote LAN in the usual way. In the SNMP shell, type in isdnlogin <number ISDN connection of X4100/200/300>, e.g. isdnlogin 1234.
Configuration Requirements Logging In Regardless of how you access X4100/200/300, the SNMP shell X4100/200/300 with the login prompt always appears first. Exceptions to this rule are the Configuration Manager under Windows and the MMI. 4.2.1 User Names and Passwords in the Ex Works State In order to log in, you need to know the user name and password.
Page 61
Your router then issues an input prompt, e.g. X4000:>. The login was suc- cessful. Caution! All BinTec routers are shipped with the same user names and passwords. As long as the password remains unchanged, they are not protected against unau- thorized use. How to change the passwords is described in chapter 4.4.4,...
BinTec Access Networks GmbH. You can use its interface based on Windows managers Explorer to access all MIB tables and variables of X4100/200/300. You can also use other SNMP managers, such as SNM, HP Open View or Transview, to ac-...
Page 63
Configuration Options cess and modify the MIB tables and variables. However, more detailed knowl- edge of the structure and interrelations of the tables and subsystems of X4100/ 200/300 would be a prerequisite for handling SNMP shell commands and SNMP managers; this method is therefore suitable for experienced users. Han- dling MIB tables and MIB variables is not described in this manual.
Configuration Requirements Using the Setup Tool You can call up the Setup Tool once you have logged in to X4100/200/300: Type setup after the input prompt and press Return. The main menu of the Setup Tool appears. X4000 Setup Tool...
Setup Tool menu system. The system name of X4100/200/300 also displayed. This is especially helpful if you are using several BinTec routers with different system names. The configuration window is where the actual entries are made and the re- spective settings displayed.
The meaning of the respective commands is explained below: Menu Command Meaning To create or add an item to a list. A submenu opens for entering the desired settings. CANCEL To discard all changes made in the current menu. BinTec Access Networks GmbH...
Page 67
To leave the current menu and return to the previous menu. Any entries made are lost. Table 4-3: Buttons in the Setup Tool To save the configuration to the flash memory, you must leave the Setup Tool with Save as boot configuration and exit. X4100/200/300 User’s Guide...
Some Setup Tool menus contain lists of items, e.g. the WAN P menu, ARTNER which lists all WAN partners currently configured. X4x00 Setup Tool BinTec Access Networks GmbH [WAN]: WAN Partners MyRouter Current WAN Partner Configuration Partnername Protocol State ∧...
Search results 4.4.4 Changing the Password The procedure described below for changing the password applies to all X4100/ 200/300 passwords: the access passwords for the user names admin, read and write, the RADIUS password, the PPP password, the provider password and the CAPI user passwords.
Page 70
If the two entries were not the same, the field is reset to the old password and the following message is displayed in the help line: "Password doesn’t match. Try again." BinTec Access Networks GmbH...
Using the Setup Tool 4.4.5 Menu Architecture The main menu of the Setup Tool looks like this: X4x00 Setup Tool BinTec Access Networks GmbH MyRouter Licenses System LAN: CM-100BT, Fast Ethernet Module: WAN: CM-1BRI, ISDN S0 xDSL: Serial WAN: CM-SERIAL, Serial...
Page 72
Configuration Requirements The menu architecture (main menu and first submenus) of the Setup Tool looks like this: LAN: WAN: Serial-WAN: Serial-WAN: Figure 4-4: Setup Tool menu architecture (basic unit) BinTec Access Networks GmbH...
Page 73
Function Enter the license information in this menu. This menu is used for activating ICENSES extra licenses. In this menu, you enter the basic system settings of X4100/200/300, e.g. YSTEM system name and passwords. THERNET This menu is for configuring the interface of X4100/200/300.
Page 74
Here you enter all the settings for the protocol. This menu consists of several submenus: includes X4100/200/300’s IP routing table. Here you enter OUTING routes to your partners (e.g. default routes, network routes), which ensure that the equipment sends all the...
Page 75
Includes the settings for BinTec's CAPI user concept. You can use this to assign user names and passwords to users of the X4100/200/300's CAPI applications. This makes sure that only authorized users can receive incom- ing calls and make outgoing calls via CAPI.
Configure further functions with the Setup Tool (see chapter 7, page 173. – Configure your expansion card with the Setup Tool (see chapter 8, page 271). – Configure security functions with the Setup Tool (see chapter 9, page 293). BinTec Access Networks GmbH...
Procedure for Initial Configuration 4.5.1 In Advance of Configuration Before you start to configure your X4100/200/300, make sure you know the fol- lowing information about your ISDN connection and your network environment. Collecting the Write down your values in the table below so that you can quickly find the nec- necessary data essary information while you are performing the configuration.
Windows utility programs of BinTec Ac- cess Networks GmbH. Place your BinTec Companion CD in the CD-ROM drive of your PC. The Start window appears automatically after a short time. If the Start window does not open automatically, click your CD-ROM drive in Windows Explorer and double-click setup.exe.
You can set up WAN access over X4100/200/300, e.g. to the Internet, for all X4100/200/300 PCs located in a network with X4100/200/300. In order to do this, you must en- X4100/200/300 as gateway and as DNS for all those PCs that were not con- figured as DHCP clients.
Man-Machine Interface (MMI) – Display with User Guide BinTec’s Man-Machine Interface (MMI) with display and input keys simplifies "getting to know" your X4100/200/300 and provides easy access to status infor- mation. Graphic display of the MMI: Figure 5-1: MMI with display, input keys and equipment logo...
Overview Getting started You can use the MMI to enter X4100/200/300’s IP address and netmask without first having to set up a serial connection to the equipment. This simplifies the initial configuration, as you can first assign an IP address to X4100/200/300 then set up the equipment and connect it in the planned location.
Page 83
Overview You can change from Monitoring Mode to Configuration Mode and vice versa in the main menu "Display Settings", see chapter 5.3.1, page X4100/200/300 User’s Guide...
To select a menu item, press OK. You then change to the next lower level, in which you can also navigate by means of In the menu You can execute the following actions in a menu: Select a value (e.g. display brightness) with and then confirm with OK. BinTec Access Networks GmbH...
Enter numbers (e.g. IP address or PIN) with and then confirm with OK. Display a value (e.g. serial number of X4100/200/300) and then leave the menu with OK. Leaving the menu with To leave a menu and change to the next higher menu level without changing a setting, just press C.
The horizontal navigation bar at the bottom edge indicates in which menu of the second level of the corresponding main menu you are located. The following figures show the menu architecture with the associated naviga- tion bars. BinTec Access Networks GmbH...
Expansion Card Data (see chapter 5.3.5, page Monitoring (see chapter 5.3.6, page The following figures show the architecture of the individual menus. Running through these is a good opportunity to carry out your first steps with the MMI. X4100/200/300 User’s Guide...
..l Enter current PIN: 0000 Enter new PIN: 1234 Retype new PIN: 1234 IP Address and PIN has been Netmask changed Figure 5-5: Menus for selecting the display settings (with navigation bars) BinTec Access Networks GmbH...
Page 89
As the PIN is shown in the display in plain language for technical reasons, make sure the display is not visible to other persons when you enter the PIN. Users who do not know the set PIN cannot change from Monitoring Mode to Configuration Mode. X4100/200/300 User’s Guide...
Figure 5-6: Menus for entering the IP address and netmask (with navigation bars) IP address Enter the IP address of X4100/200/300. This is done by selecting each digit with and confirming each by pressing OK. The IP address is saved after confirming the last digit.
Figure 5-7: Menus for entering date and system time (with navigation bars) System Date For setting the current date in X4100/200/300. This is done by selecting the day, month and year in succession with and confirming each by pressing OK.
Logic Version Displays the version of X4100/200/300’s firmware logic. Hardware Version Displays the hardware version of X4100/200/300. Software Release Displays the system software version used by X4100/200/300. Onboard Interfaces Displays the status of the X4100/200/300 hardware interfaces available with the basic unit.
MIB variables: for the basic unit (Temp): sysX4ConfigTempAlarmTrap for the expansion cards (Temp1 and Temp2): sysX4ConfigTempAlarmTrapMod sysX4ConfigTempAlarmTrapMod2 If this temperature is exceeded, X4100/200/300 generates traps, which can be evaluated over the network. BinTec Access Networks GmbH...
The selected menu is shown and used as default screen. 5.3.8 Saving the Configuration Proceed as follows to save the current configuration of X4100/200/300 using the input keys: Keep the OK key pressed for three seconds. The MMI displays the following text:...
Do you really want to reboot X4000? Figure 5-13: Restarting X4100/200/300 via MMI Press OK. The MMI displays the following text: System reboot in 5 seconds! Figure 5-14: Announcement of restart The restart is executed after 5 seconds. BinTec Access Networks GmbH...
Page 97
Menus and Settings The MMI displays the following text: System reboot ... Standby until X4000 is up again! Figure 5-15: Restarting X4100/200/300 After X4100/200/300 is restarted, the MMI default screen is displayed after the default time expires. X4100/200/300 User’s Guide...
Page 98
Man-Machine Interface (MMI) – Display with User Guide BinTec Access Networks GmbH...
(chapter 6.1, page 100) This chapter describes the steps you must always carry out for taking X4100/200/300 into operation, irrespective of the environment or applica- tions for which you use X4100/200/300. – Where do we go from here? (chapter 6.1.6, page 117) This chapter tells you what to do next after you have completed the ba- sic router settings.
How to configure the PCs in your network is described in chapter 4.5.3, page 6.1.1 License(s) Extra license This chapter describes how to activate the functions of the software and hard- ware licenses you have purchased. BinTec Access Networks GmbH...
Page 101
Open the Setup Tool with setup. Go to L ICENSES The subsystems available on X4100/200/300 are listed under Available Licenses: X4x00 Setup Tool BinTec Access Networks GmbH [LICENSE]: Licenses MyRouter Available Licenses: IP (builtin), STAC, CAPI, BRIDGE Serialnumber Mask Description...
Page 102
Licensed subsystems in ex works state As of May 2003, the STAC license is no longer available in the ex works state. You can, however, obtain a free STAC license from www.bintec.net. Subsystems The following subsystems are available on your...
Enter the Mask 65535 . Leave all the other fields empty. Press Return. The licenses provided ex works are reactivated. 6.1.2 Entering System Data Now you should enter the basic system data for your X4100/200/300. Go to S YSTEM X4100/200/300 User’s Guide...
Page 104
Field Meaning System Name Defines the system name of X4100/200/300, is also used as PPP host name. Appears as input prompt when logging in to the equipment. If no system name is set, a warning appears on logging in with the user name admin.
Page 105
YSTEM ASSWORD SETTINGS Caution! All BinTec routers are shipped with the same user names and passwords. As long as the password remains unchanged, they are not protected against unau- thorized use. How to change the passwords is described in chapter 4.4.4, page Change the passwords to prevent unauthorized access to X4100/200/300.
Configuring the LAN Interface This chapter describes the configuration of the LAN interface (10/100 Base-T Ethernet) of X4100/200/300. The LAN interface is the physical interface to the local network. Enter the address in your router where it can be reached in the LAN in the CM-100BT, F menu.
Page 107
Example of a LAN with subnets: X4x00 Figure 6-2: X4100/200/300 with two different local IP addresses The first subnet has two hosts with the IP addresses 192.168.42.1 and 192.168.42.2 and the second subnet has two hosts with the IP addresses 192.168.46.1 and 192.168.46.2.
Page 108
Basic Configuration of Basic Unit with Setup Tool The following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [LAN]: Configure LAN Interface MyRouter IP Configuration Local IP Number 192.168.1.254 Local Netmask 255.255.255.0 Second Local IP Number Second Local Netmask...
Page 109
. Table 6-5: CM-100BT, F THERNET To do Proceed as follows to configure X4100/200/300’s LAN interface: 192.168.1.254 Enter Local IP Number of X4100/200/300, e.g. Enter Local Netmask, e.g. 255.255.255.0 If applicable, enter Second Local IP Number and Second Local Netmask.
Page 110
A PC sends out an ARP request and in turn receives its IP address as- signed by X4100/200/300. You therefore do not need to assign fixed IP ad- dresses to PCs, which reduces the amount of configuration work in your network.
Page 111
Basic Router Settings The following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [IP][DHCP][ADD]: Add Range of IP Addresses MyRouter Interface IP Address 192.168.1.1 Number of Consecutive Addresses Lease Time (Minutes) MAC Address Gateway NetBT Node Type not specified...
Page 112
The entries are saved and you have defined an address pool, e.g. with 8 IP addresses: 192.168.1.1 to 192.168.1.8. You can also create several entries to define an IP address pool of uncon- nected address ranges, e.g. 192.168.1.20 192.168.1.29 192.168.1.35 192.168.1.40 , etc. BinTec Access Networks GmbH...
This prevents connections being set up from the network, e.g. to the Internet Service Provider ( ISP), in order to forward WINS requests from PCs in your network. That is, X4100/200/300 asks the ISP which host name can be assigned to an IP address.
Page 114
Basic Configuration of Basic Unit with Setup Tool The following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [IP][ACCESS][FILTER][ADD]: Configure IP Access Filter MyRouter Description wrong_dns Index Protocol Source Address Source Mask Source Port specify Specify Port Destination Address...
Page 115
Proceed as follows to define rules for the filters: Go to IP ADD. CCESS ISTS ULES The following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [IP][ACCESS][RULE][ADD]: Configure IP Access Rules MyRouter Action deny M Filter wrong_dns (1) SAVE CANCEL Use <Space>...
Page 116
You have returned to IP CCESS ISTS ULES and the entries have been saved and listed. X4x00 Setup Tool BinTec Access Networks GmbH [IP][ACCESS][RULE]: Configure IP Access Rules MyRouter Abbreviations: RI (Rule Index) M (Action if filter matches) FI (Filter Index)!M (Action if filter does not match)
To save the configuration to the flash memory, you must leave the Setup Tool with Save as boot configuration and exit. 6.1.6 Where do we go from here? After you have configured X4100/200/300 for your LAN, you can carry out the following steps to permit WAN connections: Configure the WAN interface(s) of X4100/200/300 that you wish to use (chapter 6.2, page...
Page 118
Basic Configuration of Basic Unit with Setup Tool When you have completed the configuration, save your configuration file (chapter 6.4, page 170). BinTec Access Networks GmbH...
6.2.3, page 134 X4100 X4200 or a LAN expansion card). Installing an expansion card enables other WAN interfaces to be used on X4100/200/300, if applicable (see chapter 8, page 271). 6.2.1 Configuring the ISDN BRI Interface You can use the ISDN BRI interface of...
Page 120
Basic Configuration of Basic Unit with Setup Tool The following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [WAN]: WAN Interface MyRouter Result of Autoconfiguration: Euro ISDN, point-to-multipoint ISDN Switch Type autodetect on bootup D-Channel dialup B-Channel 1 dialup...
Page 121
ISDN Switch Type = leased line D+B1+B2 (TS02) . Possible values: leased dte (default value) leased dce B-Channel 1 Configuration of first B-channel. Possible values: dialup (default setting) not used leased dte leased dce X4100/200/300 User’s Guide...
Page 122
D-/B-channels under ISDN Switch Type and the values can be changed. Press SAVE. You have returned to the main menu. The entries are temporarily saved and activated. BinTec Access Networks GmbH...
Page 123
X4100/200/300 supports the following services: PPP (Routing): service is X4100/200/300‘s general routing service. This connects incoming data calls from WAN partners’ dialup connections to your LAN. This enables partners outside your own local network to access hosts within your LAN.
Page 124
Called Party Number (CPN) and the type of call (data or voice call). The CPN is the extension the partner has dialed to reach X4100/200/300. The call is then forwarded to the corresponding service (see figure 6-3, page 124).
Page 125
CAPI subsystem. All calls to the CAPI are offered to all CAPI applications in the LAN. To distribute incoming calls for the CAPI subsystem to defined users with pass- word, you should use BinTec’s User Concept (see chapter 7.1.2, page 176).
Page 126
Basic Configuration of Basic Unit with Setup Tool Confirm with Return to change the entry. Another menu window opens: X4x00 Setup Tool BinTec Access Networks GmbH [WAN][INCOMING][ADD]: Incoming Calls MyRouter Item PPP (routing) Number Mode right to left Bearer data...
Page 127
Data transmission Over Voice Bearer - useful in the USA, for example, where voice connections are sometimes cheaper than data connections. PPP V.110 Permits PPP connections to V.110 at bit rates (1200...38400) of 1200 bps, 2400 bps,..., 38400 bps. Pots Not available in X4100/200/300. X4100/200/300 User’s Guide...
Page 128
X4100/200/300 is connected to a PABX, only the PABX extension number arrives at X4100/200/300. If you are not sure which number arrives at X4100/200/300, proceed as follows: Call X4100/200/300 with a conventional telephone using one of its exten- sion numbers.
Page 129
Configuring WAN Interfaces If you use a communication application on your PC that is based on Remote CAPI 1.1 (current version: Remote CAPI 2.0), X4100/200/300 must translate MSNs (= Number, multidigit) of the incoming call to EAZs (sin- gle digit) (CAPI 1.1 can only detect single-digit numbers). This is why the CAPI entry under Item is not simply called "CAPI"...
The X.21/V.35 interface of X4200 X4300 is configured in the menu CM- SERIAL, S Setup Tool ERIAL X4x00 Setup Tool BinTec Access Networks GmbH [SLOT 3 UNIT 0 SERIAL]: Configure Serial Interface MyRouter Interface Type X.21 Connector Clock mode auto...
Page 131
Possible values: dte (default value): The pins are assigned as DTE interface. This setting is necessary, for ex- ample, if X4100/200/300 is connected to a pub- lic data network (e.g. Datex-P in Germany). Continuation of dce : The pins are assigned as DCE interface.
Page 132
The value to be set depends on the quality and length of the cable and on the connection type (balanced/unbalanced). Up to 8 Mbps are possible over a short distance of up to 5 m if shielded cables are used. Default value: 64000 bps BinTec Access Networks GmbH...
Page 133
The address field has the value for DTE. dce: The address field has the value for DCE. Interface Leads Defines whether X4100/200/300 checks the status of the interface lines. The same value should be set for both connection partners. Possible values: enabled: The status of the signal line (I for X.21, CTS for V.35) is checked and transferred...
Broadband Internet Access (xDSL) with X4100 X4200 or LAN Expansion Card BinTec Access Networks GmbH’s X4100/200/300 offers the PPP-over-Ethernet and PPTP protocols. These protocols are required, for example, for connecting terminals to the Internet over an xDSL connection to achieve increased band- width.
Page 135
X4100/200/300 Your local network Figure 6-4: Example scenario The LAN connection is handled over the LAN interface of X4100/200/300’s ba- sic unit. The xDSL modem is connected to the 10 Base-T Ethernet connection (only X4100 and X4200) or to one of the LAN interfaces of the expansion card (X4E-2 FE).
Page 136
Enter a name for uniquely identifying the PPP-over- Ethernet partner. Encapsulation Encapsulation defines how the data packets are packed for transfer to the WAN partner. PPP-over- Ethernet: Only PPP should be selected here. Table 6-13: ARTNER BinTec Access Networks GmbH...
Page 137
(for example, if the LAN cable is acciden- tally disconnected). Table 6-14: WAN P ARTNER Make no entry under Partner PPP ID. Enter the Local PPP ID, e.g. 000460004256091169386#0001@t-online.de X4100/200/300 User’s Guide...
Page 138
Table 6-16: WAN P ARTNER Select IP Transit Network: dynamic client . Press SAVE. Press SAVE. Leave WAN P with EXIT. ARTNER Creating a default route Go to IP ADD . OUTING BinTec Access Networks GmbH...
Page 139
(NAT) for your WAN partner. This con- ceals your whole network to the outside world with just one IP address. Table 6-18: Select Network Address Translation: on . Press SAVE. The WAN interface for xDSL is configured. X4100/200/300 User’s Guide...
Page 140
Enter Idle for Dynamic Short Hold (%): 0 . Enter Delay after Connection Failure (sec), e.g. Select Layer 1 Protocol: PPP over PPTP . Leave out Extended Interface Settings. Confirm with OK. You have returned to the menu WAN P ADD. ARTNER BinTec Access Networks GmbH...
Page 141
Select Telekom_Austria as IP interface and press Return. Select Network Address Translation: on . Press SAVE. Leave IP with EXIT. ETWORK DDRESS RANSLATION Leave IP with EXIT. You have returned to the main menu. The configuration of the high-speed access is complete. X4100/200/300 User’s Guide...
WAN partner. If you have set up one or more leased lines on configuring the WAN interface(s) of X4100/200/300, a WAN partner is already created automatically for each leased line in the WAN P menu. Edit this entry to suit your requirements.
Go to WAN P ARTNER This is where all WAN partners currently configured are listed with their Partner name, Protocol and State. X4x00 Setup Tool BinTec Access Networks GmbH [WAN]: WAN Partners MyRouter Current WAN Partner Configuration Partnername Protocol...
Page 144
To make an entry in the list, proceed as follows: Use ADD to add a new entry or select an existing entry. Confirm with Return to change the entry. Another menu window opens: X4x00 Setup Tool BinTec Access Networks GmbH [WAN][ADD]: Configure WAN Partner MyRouter Partner Name LittleIndian...
Page 145
Multi-Protocol HDLC Framing Async PPP over X.75 Async PPP over X.75/T.70/BTX X.25_PPP X.25 HDLC Framing (IP only) LAPB Framing (IP only) X31 B-Channel X.25 No Signaling X.25 PAD X.25 No Configuration Frame Relay X.25 No Configuration, No Signaling X4100/200/300 User’s Guide...
Page 146
Encapsulation. Compression Defines the type of compression that should be used for data traffic to the WAN partner. Possible values: STAC: only if Encapsulation = PPP MS-STAC: only if Encapsulation = PPP none BinTec Access Networks GmbH...
Page 147
Select Compression, e.g. none , if applicable. Select Encryption, e.g. none , if applicable. Entering Extension Numbers Proceed as follows to enter the extension numbers of the WAN partner: Go to WAN P WAN N ARTNER UMBERS X4100/200/300 User’s Guide...
Page 148
Basic Configuration of Basic Unit with Setup Tool This menu lists the currently entered extension numbers of the WAN partner: X4x00 Setup Tool BinTec Access Networks GmbH [WAN][ADD][WAN Numbers]: WAN Numbers (BigBoss) MyRouter WAN Numbers for this partner: WAN Number...
Page 149
For outgoing calls, where you dial your WAN partner. both (CLID) For incoming and outgoing calls. incoming (CLID) For incoming calls, where your WAN partner dials in to your X4100/200/300. Table 6-23: Direction When X4100/200/300 is connected to a PABX system for which a "0" prefix is necessary for external line access, this "0"...
Page 150
If the calling party number of an incoming call matches both a WAN partner’s Number with wildcards and a WAN partner’s Number without wildcards, the entry without wildcards is always used. To do Make the following entries: Enter Number, e.g. 0911987654321 Select Direction, e.g. outgoing BinTec Access Networks GmbH...
Page 151
When a call is received, the Calling Party Number is always sent over the ISDN D-channel. This number enables X4100/200/300 to identify the caller CLID), provided the caller is entered as a WAN partner. After identifica-...
Page 152
Basic Configuration of Basic Unit with Setup Tool The following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [WAN][ADD][PPP]: PPP Settings (BigBoss) MyRouter Authentication CHAP + PAP Partner PPP ID LittleIndian Local PPP ID BigBoss PPP Password Secret Keepalives...
Page 153
CHAP Enter Partner PPP ID, e.g. LittleIndian BigBoss Enter Local PPP ID, e.g. How to enter the passwords is described in chapter 4.4.4, page Enter PPP Password, e.g. Secret Select Keepalives, e.g. Select Link Quality Monitoring, e.g. X4100/200/300 User’s Guide...
Page 154
120 seconds, and 300 seconds if the preceding charging unit was 600 seconds. The connection is cleared on expiry of the Idle Timer for Dynamic Short Hold and shortly before the next charging unit starts. BinTec Access Networks GmbH...
Page 155
AOCD fails. You should make sure static short hold comes into operation later than dynamic short hold. If not, X4100/200/300 always clears the connection based on static short hold and never gives dynamic short hold a chance to discon- nect.
Page 156
Proceed as follows: Go to WAN Partner DVANCED ETTINGS The following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [WAN][ADD][ADVANCED]: Advanced Settings (BigBoss) MyRouter Callback Static Short Hold (sec) Idle for Dynamic Short Hold (%) Delay after Connection Failure (sec) 300...
Page 157
Software Reference. Carrying out IP Configuration Now let’s move on to the IP configuration of your WAN partner. Here you enter IP address netmask of your partner. Proceed as follows: Go to WAN P IP . ARTNER X4100/200/300 User’s Guide...
Page 158
WAN partner. Local IP Address IP address of X4100/200/300. You do not normally need to make an entry here, unless you wish to configure a transit network for one of your WAN partners (see chapter 7.2.7, page...
Page 159
IP address is assigned statically: Select IP Transit Network: yes . Local ISDN IP Address: X4100/200/300’s static IP address you get from your ISP (often termed your gateway or router address). Partner’s ISDN IP Address: Partner’s IP address (if known) or else X4100/ 200/300’s static IP address you get from your ISP.
Creating a Routing Entry chapter 6.3.1, page 143, you have just configured a WAN partner in your X4100/200/300. A routing entry is created automatically in the routing table of your X4100/200/300 for every WAN partner. You can edit existing routing en- tries and add new ones.
Page 161
Configuring WAN Partners Another menu window opens: X4x00 Setup Tool BinTec Access Networks GmbH [IP][ROUTING][ADD]: IP Routing MyRouter Route Type Network route Network WAN without transit network Destination IP Address 10.1.1.0 Netmask 255.255.255.0 Partner / Interface BigBoss Metric SAVE CANCEL Use <Space>...
Page 162
Table 6-30: Network You can enter several default routes in X4100/200/300, but only one default route can be active at any one time. If you set up access to the Internet, you must therefore configure the route to your Internet Service Provider (ISP) as a default route.
Page 163
(e.g. because you have already set up your Internet access as a default route), then you must make a separate routing entry for each subnet you want to reach in this network. X4100/200/300 User’s Guide...
Page 164
(without a default route): Select Route Type: Network route . Select Network: WAN without transit network . 10.1.2.0 Enter Destination IP Address, e.g. Enter Netmask, e.g. 255.255.255.0 BigBoss Enter Partner / Interface, e.g. Enter Metric, e.g. BinTec Access Networks GmbH...
Proceed as follows to activate NAT: Go to IP ETWORK DDRESS RANSLATION The following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [IP][NAT]: NAT Configuration MyRouter Select IP Interface to be configured for NAT static mappings GoInternet LittleIndian en1-snap EXIT Press <Ctrl-n>, <Ctrl-p>...
Basic Configuration of Basic Unit with Setup Tool Another menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [IP][NAT][CONFIG]: NAT Configuration (GoInternet) MyRouter Network Address Translation Configuration for sessions requested from outside Service Destination Source Dep. Dest. Dep. Port Remap...
Page 167
Static Short Hold (sec): e.g. Idle for Dynamic Short Hold (%): e.g. Delay after Connection Failure (sec): e.g. Channel Bundling: no Layer 1 Protocol: ISDN 64 kbps In WAN P IP : ARTNER IP Transit Network: dynamic client X4100/200/300 User’s Guide...
Page 168
Encapsulation: Async PPP over X.75 Compression: none Encryption: none In WAN P WAN N ADD: ARTNER UMBERS Number (= dial-in number): e.g. 010880191919 Direction: outgoing In WAN P PPP : ARTNER Authentication: none Keepalives: off Link Quality Monitoring: off BinTec Access Networks GmbH...
Page 169
Route Announce: up or dormant Proxy Arp: off In IP ADD: OUTING Route Type: Default route Network: WAN without transit network Partner / Interface: COMPUSERVE Metric: e.g. In IP COMPUSERVE EDIT: ETWORK DDRESS RANSLATION Network Address Translation: on X4100/200/300 User’s Guide...
Basic Configuration of Basic Unit with Setup Tool Saving the Configuration After creating a configuration on your X4100/200/300, make sure you save it: From the Setup Tool main menu, select Exit and press Return. Another menu window opens: X4x00 Setup Tool...
CAPI and TAPI Configura- tion. CAPI In the Remote CAPI tab, enter the IP address of your X4100/200/300 the user name and password of the users of communications applications configured with the Setup Tool. Click Use these values. Click OK. X4100/200/300...
Test the connection to your X4100/200/300: connection In the start menu of your PC, click Run and enter ping, followed by a space and the IP address of X4100/200/300, e.g. ping 192.168.1.254. If the configuration is correct, a window opens to indicate "Answer from 192.168.1.254...".
Advanced Configuration of Basic Unit with the Setup Tool This chapter contains more X4100/200/300 configuration options for the ad- vanced user. The following configuration steps are described: General Settings (chapter 7.1, page 174) Settings Specific to WAN Partners (chapter 7.2, page...
IP address assigned to this partner the last time. Configuration is made in the menus IP IP A WAN (PPP) , WAN DDRESS IP and WAN P ARTNER ARTNER DVANCED ETTINGS BinTec Access Networks GmbH...
Page 175
IP menu: ARTNER Field Meaning IP Transit Network Defines whether a transit network is to be used between X4100/200/300 and the WAN partner. You must select dynamic server here if you assign an address pool. Table 7-2: WAN P ARTNER...
Configuration is made in the menus CAPI and CM-1BRI, ISDN S0 NCOMING NSWERING CAPI menu: Field Meaning Name User name for which access to the CAPI ser- vice is to be allowed or denied (maximum 16 characters). BinTec Access Networks GmbH...
Page 177
Number Phone number under which the service (Item) entered above can be reached. Mode Mode in which X4100/200/300 compares the digits of Number with the called party number of the incoming call: right to left: default mode. left to right (DDI): always select this mode if...
Page 178
Go to CM-1BRI, ISDN S0 NCOMING NSWERING Make an entry here for every user in the LAN who has access to the CAPI service. Select an existing entry and confirm it with Return or add a new entry with ADD. BinTec Access Networks GmbH...
General WAN Settings Select Item: CAPI . If you use a communication application on your PC that is based on Remote CAPI 1.1 (current version: Remote CAPI 2.0), X4100/200/300 must translate MSNs (= Number, multidigit) of the incoming call to EAZs (sin- gle digit) (CAPI 1.1 can only detect single-digit numbers).
Page 180
CHAP + PAP: first CHAP, then PAP MS-CHAP: MS-CHAP only CHAP + PAP + MS-CHAP: first CHAP, if de- nied then the protocol required by the caller MS-CHAP V2 : MS-CHAP version 2 only none: no PPP authentication BinTec Access Networks GmbH...
Page 181
Table 7-6: To do Proceed as follows to define the general PPP settings: Go to PPP . Select Authentication Protocol, e.g. CHAP + PAP + MS-CHAP Select Link Quality Monitoring, e.g. Press SAVE. The PPP settings are defined. X4100/200/300 User’s Guide...
Default , the value of the CAPI application is ignored and the default value set here is always used. Set to Packet Switch if you want to use X.31 TEI for the X.25 router. CM-1BRI, ISDN S0 Table 7-7: DVANCED ETTINGS BinTec Access Networks GmbH...
The configuration steps necessary in each case are explained in detail below. 7.2.1 Delay after Connection Failure This function enables you to set the period of time X4100/200/300 is to wait after an unsuccessful attempt to set up a call. X4100/200/300...
B-channels are closed again. Static In static channel bundling, you specify right from the start how many B-channels X4100/200/300 uses for connections to the WAN partner, regardless of the amount of data transferred. BinTec Access Networks GmbH...
Page 185
Proceed as follows: Go to WAN P ARTNER DVANCED ETTINGS Select Channel Bundling. Enter Total Number of Channels. Confirm with OK. Press SAVE. The settings are listed. Refer to Bandwidth on Demand (BOD) function, see chapter 7.2.3, page 186. X4100/200/300 User’s Guide...
B-chan- nels are to be added or dropped. The use of BACP/BAP is agreed during the initial connection setup. Static or dynamic short hold (see "Defining Short Hold", page 154) may also BinTec Access Networks GmbH...
Page 187
If dynamic short hold has been con- figured, the calculated value mentioned above must also apply. X4100/200/300 also supports the AO/DI (Always On/Dynamic ISDN) function for using the ISDN D-channel for data transmission (see chapter 7.2.4,...
Page 188
The value is only displayed here; it is set under Total Number of Channels in the menu WAN P ARTNER DVANCED ETTINGS Table 7-11: WAN P ARTNER DVANCED ETTINGS XTENDED NTERFACE ETTINGS OPTIONAL BinTec Access Networks GmbH...
Page 189
Necessary for the AO/DI (Always On/Dynamic ISDN) function, see table 7-17, page 197) BAP, Passive Mode Is currently not supported by X4100/200/300. BAP, Active and Passive Is currently not supported by X4100/200/300. Mode BAP, Client Active Mode Is currently not supported by X4100/200/300.
AO/DI is a perma- nently available (always on) but nevertheless low-cost connection from the end customer to the service provider. Only Deutsche Telekom provided this feature at the time this manual was printed. BinTec Access Networks GmbH...
Page 191
How Does AO/DI Work? AO/DI is implemented in X4100/200/300 via a special PPP interface. As soon as the interface is configured and ready for operation, the initial PPP connection is set up via X.31 (X.25 in the D-channel). This involves carrying out authenti- cation of the PPP connection partner and assigning a dynamic IP address and DNS addresses, if applicable (AO/DI Client Mode).
Page 192
X.31 service has not been detected by autoconfiguration and this service is probably not supported (contact your telephone provider). Enter Specify TEI Value, e.g. Select X.31 TEI Service: Packet Switch . Press SAVE. You have returned to the CM-1BRI, ISDN S0 menu. BinTec Access Networks GmbH...
Page 193
For Datex-P, the Windowsize/Packetsize Neg. field must be de- activated. For X4100/200/300, the X.25 software is designed as an X.25 switch. This switch must be appropriately configured for AO/DI. Proceed as follows to make the preset link settings for X.25 configuration for Datex-P: Go to X.25...
Page 194
Go to WAN P ARTNER Enter Partner Name, e.g. AODI partner Select Encapsulation: PPP . Proceed as follows to make the PPP settings: Go to WAN P PPP . ARTNER Select Authentication, e.g. CHAP Leave out Partner PPP ID. BinTec Access Networks GmbH...
Page 195
The following fields of the menu are relevant for this configuration step: Field Meaning Layer 1 Protocol Defines which Layer 1 Protocol X4100/200/300 is to use. There is only one meaningful setting for AO/DI: AO/DI . Channel bundling Defines whether and which type of channel...
Page 196
Maximum number of channels that may be Dialup Channels opened. The value is defined in the Total Number of Channels field under WAN P ARTNER DVANCED ETTINGS Table 7-16: WAN P ARTNER DVANCED ETTINGS EXTENDED NTERFACE ETTINGS OPTIONAL BinTec Access Networks GmbH...
Page 197
To enter the necessary ISDN extensions for adding the B-channel, proceed as follows: Go to WAN P WAN N ARTNER UMBERS 0911123456 Enter Number, e.g. Select Direction: outgoing . Press SAVE. Leave WAN P WAN N with Exit. ARTNER UMBERS X4100/200/300 User’s Guide...
Enter Destination Mask, e.g. Select Destination Port: e.g. specify Enter Specify Port, e.g. (port for SMTP). Press SAVE. A list of all the previously defined filters appears. Leave IP (BOD) with Exit. ANDWIDTH ON EMAND ILTER BinTec Access Networks GmbH...
Page 199
B-channels are not added if the rule matches. deny !M B-channels are not added if the rule does not match. ignore The rule is ignored or it is omitted if part of a rule chain. Table 7-19: Action X4100/200/300 User’s Guide...
Page 200
Leave the IP menu with Exit. You have returned to the main menu. Configuration Examples for Application-Controlled Bandwidth Management (Bandwidth on Demand) Two configuration examples are described below: Additional bandwidth for HTTP connections Restricting mail reception to D-channel BinTec Access Networks GmbH...
Page 201
Settings Specific to WAN Partners Additional bandwidth The following example shows a special configuration of X4100/200/300 for con- for HTTP connections nection setup of the PC with the IP address 172.16.77.11 (TCP Port 80) to the Internet. The system should always change to B-Channel Mode with one B- channel when an HTTP connection is set up to the Internet.
Page 202
(BOD) BOD with Exit. ANDWIDTH ON EMAND ULES FOR Go to IP (BOD) Defining interfaces ANDWIDTH ON EMAND NTERFACES Select AODI partner . Leave IP (BOD) with Exit. ANDWIDTH ON EMAND NTERFACES The filter is defined. BinTec Access Networks GmbH...
You can define the Layer 1 Protocol of the ISDN B-channel that X4100/ 200/300 is to use for connections to the WAN partner. The default setting is the protocol for 64-kbps ISDN data connections, which is the default value of the B- channel.
Page 204
For using Always On/Dynamic ISDN (AO/DI, chapter 7.2.4, page 190). PPP over PPTP For connections to xDSL, e.g. in Austria (see "Example 2: Telekom Austria (high-speed Inter- net access)", page 140. Table 7-21: Layer 1 Protocol BinTec Access Networks GmbH...
Confirm with OK. Press SAVE. The protocol you selected is configured. 7.2.7 IP Transit Network When you enter a WAN partner in X4100/200/300, there are various options for indicating the IP address of the partner network: You enter the IP address netmask of the partner or part- ner network.
Page 206
7-23, page 207. Local IP Address LAN IP address of X4100/200/300. Appears only for the following value of IP Transit Network: no . You normally do not need to make any entry here. Exception: You set up several WAN part-...
Page 207
Settings Specific to WAN Partners Field Meaning Local ISDN IP Address ISDN IP address of X4100/200/300 in the tran- sit network. Partner’s ISDN IP WAN partner’s ISDN IP address in the transit Address network. Partner’s LAN IP IP address of LAN of WAN partner or LAN IP Address address (host).
How to configure the DNS Proxy function is described in chapter 7.3.2, page 227. When you enter a WAN partner in X4100/200/300, you can define whether X4100/200/300 sends or answers requests for WINS or DNS IP addresses. Configuration is made in the menus IP...
Page 209
Settings Specific to WAN Partners menu: TATIC ETTINGS Field Meaning Primary Domain Name IP address of X4100/200/300’s first global Server Domain Name Server (DNS). Secondary Domain IP address of another global Domain Name Name Server Server. Primary WINS IP address of X4100/200/300’s first global WINS (Windows Internet Name Server) or NBNS (NetBIOS Name Server).
Page 210
Enter Primary or Secondary WINS, if applicable. Press SAVE. Proceed as follows if you want X4100/200/300 to report the name server ad- dresses entered to the WAN partner (Server Mode) or if other name server ad- BinTec Access Networks GmbH...
This exchange is controlled by a so-called Routing Protocol, e.g. RIP (Routing Information Protocol). Routers use the to exchange the information stored in their routing ta- bles by communicating with each other at regular intervals to mutually supple- X4100/200/300 User’s Guide...
Page 212
LAN of the WAN partner. Receiving routing tables via the RIP is a possible security loophole, as external computers or routers can change X4100/200/300’s routing functionality. RIP packets do not set up or hold ISDN connections. Configuration is made in the menus WAN P...
Press SAVE. 7.2.10 Compression Data compression You can increase the data throughput and so reduce the connection costs by using data compression. X4100/200/300 supports several options, de- pending on the encapsulation selected, e.g. PPP (see chapter 6.3, page 142): STAC:...
Page 214
No compression. STAC Enables STAC data compression (if Encapsulation = PPP ). MS-STAC Useful for STAC data compression when dial- ing into a Windows Remote Access Server (if Encapsulation = PPP ). Table 7-30: Compression BinTec Access Networks GmbH...
X4100/200/300 answers the ARP request with its own hardware address. This is sufficient for establishing the connection: The data packets are sent to X4100/200/300, which then forwards them to the desired host. X4100/200/300 User’s Guide...
Page 216
The following field exists in both menus: Field Meaning Proxy Arp Enables X4100/200/300 to answer ARP requests from its own LAN and from hosts of defined WAN partners. WAN P and CM-100BT, Table 7-32: ARTNER DVANCED ETTINGS THERNET DVANCED ETTINGS BinTec Access Networks GmbH...
Page 217
Possible Values Meaning Deactivates Proxy ARP for this WAN partner. on (up or dormant) X4100/200/300 answers an ARP request only if the status of the connection to the WAN partner is up (active) or dormant (idle). In the case of...
Connection setup attempt X4100/200/300 is "busy", no connection is possible Figure 7-3: Keepalive Monitoring Cutting costs The Keepalive Monitoring function enables you to configure X4100/200/300 the branch office to avoid unnecessary WAN connections from the headquar- BinTec Access Networks GmbH...
Page 219
Settings Specific to WAN Partners ters to the branch office. X4100/200/300 checks at regular, adjustable intervals to see whether the hosts to be monitored in the LAN at the branch office can be reached. If none of the hosts to be checked answers a corresponding request after three consecutive attempts, the call from the “central server”...
Page 220
Field Meaning Group Defines a group of hosts, whose reachability is to be monitored by X4100/200/300. Each host to be monitored is assigned to a group. A total of ten groups can be configured with up to ten hosts each.
Page 221
Field Meaning FirstIfIndex Defines the first interface of an interface range in X4100/200/300, for which the action defined under DownAction is to be executed. Possible values: 10001 ... 15000 (default value: 10001 ). Interfaces with indices from 10001 to 15000 are provided for dialup connections to WAN part- ners.
Page 222
WAN partners are deactivated. X4100/200/300 continues to check the hosts at the time interval of 300 s and X4100/200/300 activates the interfaces again as soon as at least one host is reachable again. BinTec Access Networks GmbH...
Basic IP Settings Basic IP Settings Here you will find a number of basic settings you can define in X4100/200/300: Deriving System Time (chapter 7.3.1, page 223) Name Resolution ( DNS) in X4100/200/300 (chapter 7.3.2, page 227) Port Numbers (chapter 7.3.3, page...
Page 224
For Time Protocol = TIME/UDP , TIME/TCP or SNTP: Current time is checked after every Time Update Interval in seconds. For Time Protocol = ISDN: Current time is checked for each first ISDN connection after expiry of the Time Update Interval. BinTec Access Networks GmbH...
Page 225
Field Meaning Time server IP address of the time server used by X4100/200/300. Time Server is not needed if you set ISDN as Time Protocol. Table 7-36: TATIC ETTINGS The Time Protocol field contains the following selection options: Possible Values...
Page 226
Tools contain a time server. If you enter the IP address of your PC for Time Server, make sure the time server of DIME Tools is active on your PC every time you start X4100/200/300. If your computer has no fixed IP address but is assigned an IP address dynam- ically via DHCP, you cannot use your computer as a time server.
Basic IP Settings Proceed as follows to enter the system time in X4100/200/300 manually: If a method for automatically deriving the time is defined in X4100/200/300, the values obtained in this way automatically have higher priority. That is, if X4100/ 200/300 receives a relevant time signal (e.g.
Page 228
If you have configured two WAN partners in X4100/200/300, your head office and your Internet Service Provider, it is advis- able to have Internet names resolved by the DNS of your ISP, but names from within the corporate network by the DNS of the head office.
Page 229
Basic IP Settings as a positive dynamic entry in the DNS cache of X4100/200/300. This means that once a name has been resolved and is required again, X4100/200/300 answer the request from the cache and a new request to an external name serv- er is not necessary.
Page 230
IP addresses from name servers. In this case, the addresses of the glo- bal name servers entered in X4100/200/300 can be sent or the address of X4100/200/300 itself. In the latter case, DNS requests from the DHCP clients BinTec Access Networks GmbH...
Page 231
Basic IP Settings are sent to X4100/200/300, which either answers these itself or passes them on if necessary (proxy function). Exchanging DNS Addresses with WAN Partners IP Control Protocol The same applies if dynamic negotiation of name servers is activated for the IP...
Page 232
Overview of Configuration with the Setup Tool The configuration and monitoring of name resolution in X4100/200/300 is set in the menus: TATIC ETTINGS TATIC OSTS ORWARDED OMAINS YNAMIC ACHE BinTec Access Networks GmbH...
Page 233
TATIC ETTINGS Field Meaning Domain Name Defines X4100/200/300’s Domain Name. Primary Domain Name IP address of X4100/200/300’s first global Server Domain Name Server (DNS). Secondary Domain IP address of another global Domain Name Name Server Server. Primary WINS IP address of X4100/200/300’s first global...
Page 234
: No name server address is sent. self (default value): The address of X4100/ 200/300 is sent as name server address. global : The addresses of the global name servers entered in X4100/200/300 are sent. BinTec Access Networks GmbH...
Page 235
Basic IP Settings Field Meaning IPCP Assignment Defines which name server addresses are sent X4100/200/300 to a WAN partner for dynamic name server negotiation. Possible val- ues: none : No name server address is sent. self : The address of...
Page 236
ADD menu contains the following ORWARDED OMAINS fields: Field Meaning Global Nameservers: The global name servers entered in IP are displayed. TATIC ETTINGS Default Domain: The Domain Name of X4100/200/300 entered in IP is displayed. TATIC ETTINGS BinTec Access Networks GmbH...
Page 237
Host name that is to be resolved with this for- warding entry. May also contain wildcards (only at the start of Name, e.g. *.bintec.de). If an incomplete name is entered without a dot, this is completed with ".Default Domain" after confirming with SAVE.
Page 238
Space bar and confirming with STATIC. The relevant entry then disappears from YNAMIC and is listed in ACHE TATIC . TTL is transferred in this operation. OSTS Table 7-43: YNAMIC ACHE BinTec Access Networks GmbH...
Page 239
Table 7-44: DVANCED ETTINGS ... menu contains the following fields (the LOBAL TATISTICS menu is updated every second): Field Meaning Received DNS Packets Displays the number of received DNS packets, including the answer packets for forwarded requests. X4100/200/300 User’s Guide...
Page 240
IP addresses for Primary Domain Name Server, Secondary Domain Name Server, Primary WINS and Secondary WINS from the WAN partner or sends them to the WAN part- ner. Table 7-46: WAN P ARTNER DVANCED ETTINGS BinTec Access Networks GmbH...
Page 241
Name resolution in How to configure name resolution in X4100/200/300 with DNS Proxy is de- X4100/200/300 scribed below. To do If applicable, first enter the global name servers in X4100/200/300: Go to IP TATIC ETTINGS Enter Domain Name, e.g. mycompany.com X4100/200/300...
Page 242
Press SAVE. How to create static entries: Go to IP TATIC OSTS All the existing static entries are listed here. You can create a new entry with ADD. Enter Name. Select Response. Enter Address, if applicable. BinTec Access Networks GmbH...
Page 243
Activating DNS Proceed as follows if you would like to configure a WAN partner so that the ad- negotiation dress of a name server is sent by X4100/200/300 to the WAN partner or from the WAN partner to X4100/200/300 as applicable:...
IP packet within the host, a port is also entered in addition to the IP address for a connection to X4100/200/300. This addresses the relevant service. Ports are only used in the TCP and UDP proto- cols.
LAN in which it is located, it is sometimes advisable to set up a BOOTP Re- lay Agent. The agent forwards all requests and responses between the client and server via a WAN connection to this server. X4100/200/300 User’s Guide...
Page 246
BOOTP client, you must configure an appropriate WAN partner (chapter 6.3, page 142). Go to IP TATIC ETTINGS Enter the IP address for BOOTP Relay Server. Press SAVE. X4100/200/300 is configured as BOOTP Relay Agent. BinTec Access Networks GmbH...
QoS at BinTec X4100/200/300 offers QoS support for the IP protocol family with the Quality of Service feature.
Page 248
"Congestion avoidance", page 258). Configuration Overview The configuration is set in the Q S menu: X4x00 Setup Tool BinTec Access Networks GmbH [QoS]: QoS Configuration MyRouter IP Filter IP Classification and Signaling Interfaces and Policies Exit Press <Ctrl-n>, <Ctrl-p> to scroll through menu items, <Return> to enter...
WAN connections in the menu Q NTERFACES AND EDIT OLICIES 7.4.1 Defining IP Filters Proceed as follows to define IP filters: You will find a detailed description for defining filters in chapter 9.2.8, page 319. Go to Q IP F ADD. ILTER X4100/200/300 User’s Guide...
IGNALING X4x00 Setup Tool BinTec Access Networks GmbH [QOS][CLASS][ADD]:Configure IP QoS Classification and Signaling MyRouter Index Filter test Direction incoming Action classify M Classification> Signaling (TOS)> Insert behind Rule NONE SAVE CANCEL Use <Space> to select BinTec Access Networks GmbH...
Page 251
LASSIFICATION AND IGNALING Field Meaning Index Cannot be changed. X4100/200/300 automati- cally issues a number to new rules defined here or displays the Index of existing rules. Insert behind Rule Appears only if a new rule is defined. Defines the rule behind which the new rule is inserted.
Page 252
(TOS) contains the following selection options: IGNALING Field Meaning Set Type of Service (TOS) Field Defines a new value for the TOS field in the IP header for the IP packets that match the filter conditions. Possible values: 0 to 255 BinTec Access Networks GmbH...
Page 253
Select the desired value for Action. Select the desired Filter. Classification Go only to Q IP C EDIT/ADD LASSIFICATION AND IGNALING LASSIFICATION Select the desired value for Class Type. If applicable, enter a Class ID (only for Class Type normal ). X4100/200/300 User’s Guide...
Page 254
If applicable, select Next Rule. Press SAVE. You have returned to the menu Q IP C LASSIFICATION AND IGNALING Repeat these steps until you have defined all the desired rules. Continue with chapter 7.4.3, page 255. BinTec Access Networks GmbH...
Define the interface on which the previously defined classification is to be per- formed in the menu Q NTERFACES AND OLICIES X4x00 Setup Tool BinTec Access Networks GmbH [QoS][INTERFACES]: Enable IP QoS Classification and Policies MyRouter Interface First Rule First Filter...
At least three queues are used on the send side: one queue for the high-priority data, 1 to 255 queues for the data with normal priority and a (default) queue for BinTec Access Networks GmbH...
Page 257
"Keepalive", "RIP", etc.). Traffic shaping is es- sential for bandwidth limitation of virtual (WAN) interfaces or connections that are set up via an interface with a higher bandwidth, e.g. PPP over PPTP or also PPPoE, i.e. WAN connections implemented over Ethernet. X4100/200/300 User’s Guide...
Page 258
This algorithm acts only if mainly data on a TCP basis (e.g. by FTP) are trans- mitted and the respective TCP implementations operate as standard, i.e. com- patible with this specific type of signaling. Other traffic flows, e.g. on a UDP basis (such as RTP), are not affected by this. BinTec Access Networks GmbH...
Page 259
PPP connection. This is achieved by fragmenting the packets classified as normal and above a certain size (to be configured), so that a high-priority non-fragment- ed packet can be inserted between these fragments immediately if required. X4100/200/300 User’s Guide...
Page 260
If you have defined a WAN interface in chapter 7.4.3, page 255 that is to be classified as previously defined, the following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [QoS][INTERFACES][EDIT]: Configure QoS Policies MyRouter Interface dialup1 IP QoS Classification via...
Page 261
Can only be set if Specify Traffic Shaping is set to yes . Indicates the maximum bandwidth of (Bits per Second) the interface (in transmit direction). Possible values: 0 to 2048000 . Table 7-55: EDIT NTERFACES AND OLICIES CHEDULING AND HAPING X4100/200/300 User’s Guide...
Page 262
Transmit Rate (Bits per Second) is greater than zero. Possible values: yes (bounded): Reserved bandwidth is also the upper limit. no (not bounded): Bandwidth not needed elsewhere can also be used by this class. BinTec Access Networks GmbH...
Page 263
Lower Queue Threshold for this queue is reached; i.e. whether these are un- conditionally placed in the queue or possibly discarded. Possible values: none : Packets are always accepted in the queue. X4100/200/300 User’s Guide...
Page 264
Defines the maximum queue size. When this threshold is reached, attempts are made to stop the queue growing, depending on the defined dropping algorithm. Possible values: 0 to 256000 . Table 7-56: EDIT NTERFACES AND OLICIES LASS ASED OLICIES BinTec Access Networks GmbH...
Page 265
NTERFACES AND OLICIES EDIT. If applicable, select the classification IP QoS Classification via, as de- scribed in chapter 7.4.3, page 255. Go to Q EDIT NTERFACES AND OLICIES CHEDULING HAPING Select the desired Queuing and Scheduling Algorithm. X4100/200/300 User’s Guide...
Page 266
If applicable, select weighted-random (RED) for Congestion Avoidance Algorithm if the data for transmission are routed mainly over TCP connec- tions. Select the desired Dropping Algorithm. Enter the desired value for Lower Queue Threshold (relevant for Dropping Algorithm and weighted-random (RED) ). BinTec Access Networks GmbH...
Page 267
Leaving the menu Leave the menu Q with EXIT. NTERFACES AND OLICIES You have returned to the Q S menu. Leave the menu with EXIT. You have returned to the main menu. The entries are temporarily saved and activated. X4100/200/300 User’s Guide...
Advanced Configuration of Basic Unit with the Setup Tool Bridging X4100/200/300 supports the bridging function. The description of the configura- tion of X4100/200/300 as a bridge can be found in the Software Reference. BinTec Access Networks GmbH...
Extra License Functions Extra License Functions This chapter briefly describes the X4100/200/300 features you can activate with extra licenses. The relevant extra licenses are activated by adding the information received with the license in the Setup Tool menu L (see chapter 6.1.1,...
Page 270
Advanced Configuration of Basic Unit with the Setup Tool BinTec Access Networks GmbH...
Resource Cards with the Setup Tool This chapter tells you the configuration steps you can carry out if you have equipped your X4100/200/300 basic unit with an expansion card and possibly resource cards. Any expansion and resource cards equipped are automatically detected by X4100/200/300 on startup.
8.5, page 292). Setup Tool with The additional interfaces are shown as follows in the Setup Tool main menu un- additional interfaces der Module: X4x00 Setup Tool BinTec Access Networks GmbH MyRouter Licenses System LAN: CM-100BT,Fast Ethernet Module: X4E-3BRI,ISDN S0...
Page 273
Incoming Call If dialup connections are to be set up over the ISDN BRI interface, you should Answering now tell X4100/200/300 your own numbers for this interface: These settings are not possible for a leased line. Go to X4E-3BRI, ISDN S0...
Page 274
LAN, you must configure the partners you want to connect to as WAN part- ners on your X4100/200/300. This applies to both dialup connections and leased lines. Refer to chapter 6.3, page 142.
The necessary licenses for activating the desired interfaces can be obtained from your dealer. You can connect X4100/200/300’s ISDN PRI interface to a Primary Rate Inter- face. This is done by connecting the Network Termination (NT) adapter of your telephone provider to the IN socket of a port activated by license. In Germany, this provides you with 30 B-channels and 1 D-channel, which you can use for both dialup and leased lines over ISDN.
Page 276
Configuration of Expansion and Resource Cards with the Setup Tool Setup Tool with The additional interfaces are shown as follows in the Setup Tool main menu un- additional interfaces der Module: X4x00 Setup Tool BinTec Access Networks GmbH MyRouter Licenses System LAN: CM-100BT,Fast Ethernet...
Page 277
(no CRC) The default setting is used in most cases for a PRI interface. In some cases in Sweden and France, the setting special (no CRC) is neces- sary if X4100/200/300 is connected to a PABX. X4100/200/300 User’s Guide...
Page 278
ISDN protocol used correctly and dis- plays it under Result of autoconfiguration. If not, enter it manually under ISDN Switch Type. The automatic D-channel detection is then switched off. Select ISDN Line Framing, e.g. standard (CRC4) Select Clock Mode, e.g. external BinTec Access Networks GmbH...
Page 279
Incoming Call If dialup connections are to be set up over the ISDN PRI/G.703 interface, you Answering should now tell X4100/200/300 your own numbers for this interface: These settings are not possible for a leased line. Go to X4E-2PRI, ISDN S2M...
Page 280
LAN, you must configure the partners you want to connect to as WAN part- ners on your X4100/200/300. This applies to both dialup connections and leased lines. Refer to chapter 6.3, page 142.
8.5, page 292). Setup Tool with The additional interfaces are shown as follows in the Setup Tool main menu un- additional interfaces der Module: X4x00 Setup Tool BinTec Access Networks GmbH MyRouter Licenses System LAN: CM-100BT,Fast Ethernet Module: X4E-100BT,FastEthernet...
Page 282
Ethernet II Select Mode, e.g. auto Press SAVE. You have returned to the main menu and the entries have been temporarily saved and activated. Advanced Information about bridging can be found in the Software Reference. configuration BinTec Access Networks GmbH...
XT-L: resource card with 30 digital modems When equipped with resource card(s) with digital modems for analog connec- tions, X4100/200/300 can be used as a remote access server for ISDN and GSM connections and for analog connections (dial-in and dial-out).
Page 284
ISDN BRI interface NCOMING NSWERING of a BRI expansion card (see "Incoming Call Answering", page 279), you can explicitly define which modem profile is to be used for which of your own exten- BinTec Access Networks GmbH...
Page 285
Profile 1 should be able to operate all modems. You can use the remaining sev- en modem profiles to define user groups, so that the dial-in connection partners find optimum modem settings in X4100/200/300. Example scenario A typical scenario, e.g. for an Internet Service Provider, could look like this:...
Page 286
Setup Tool with digital X4100/200/300 is equipped with a resource card with digital modems, the modems menu MODEM appears in the Setup Tool main menu: X4x00 Setup Tool BinTec Access Networks GmbH MyRouter Licenses System LAN: CM-100BT,Fast Ethernet Module: X4E-3BRI,ISDN S0...
Page 287
289. Automode Defines whether dynamic negotiation of modulation is permitted with the dial-in user. Possible values: on (default value): Free negotiation is permitted re- gardless of the modulation set. off : Only the modulation set is used. X4100/200/300 User’s Guide...
Page 288
MNP5 Defines whether MNP5 compression can be negotiated Compression for a connection. Possible values: auto : Negotiation is allowed. off : MNP5 compression is not used. MODEM 1 ... 8 Table 8-2: Menu ROFILE ONFIGURATION ROFILE BinTec Access Networks GmbH...
Page 289
ONFIGURATION Select P 1 and confirm with Return. ROFILE Enter Description, e.g. Default Modem Profile Select Modulation, e.g. V.90 auto Select Error Correction, e.g. Select Automode, e.g. Select V.42bis Compression, e.g. auto auto Select MNP5 Compression, e.g. X4100/200/300 User’s Guide...
Page 290
ARTNER DVANCED ETTINGS Select Layer 1 Protocol, e.g. Modem Profile 2 Confirm with OK. Go to WAN P WAN N ADD . ARTNER UMBERS Enter the number to be used by X4100/200/300 under Number, e.g. 09117890 BinTec Access Networks GmbH...
Page 291
The WAN partner entry is displayed. Configure other WAN partner entries for the modem user, if applicable. A general example in table 8-4, page 291 shows how you could meaningfully use the modem profiles in X4100/200/300: Error Automo V.42bi Profile...
(DES, 3DES, CAST, Blowfish). This en- ables the available bandwidth to be fully utilized and connections costs cut, without affecting the performance of X4100/200/300. Caution! The installation of the PRI/G.703 expansion card or the installation of resource cards in an expansion card generates additional heat.
SAFERNET X4100/200/300 from BinTec Access Networks GmbH gives you a high de- gree of security for your network and connections. The security functions avail- able (SAFERNET) offer monitoring of activities via the router and effective access and line tapping security. The necessary configuration steps are de- scribed in this chapter.
Configuration of Security Functions Activity Monitoring A major requirement for a high degree of security is the possibility of accurately monitoring all activities on and over the router. BinTec Access Networks GmbH provides a variety of facilities for this purpose: Syslog Messages (chapter 9.1.1, page...
Page 295
Enables the display of syslog messages on the PC Serial Console connected to the serial interface of X4100/200/ 300. Use this setting only if you make a fault anal- ysis, as a very large output over the serial console adversely affects the throughput of the other inter- faces.
Page 296
Priority of the syslog messages to be sent to Log Host. Corresponds to Message Level for Syslog Table in S YSTEM Facility Syslog facility at Log Host. Only required if the Log Host is a Unix computer. BinTec Access Networks GmbH...
Page 297
: syslog messages except accounting messages. accounting : accounting messages. Timestamp System time of X4100/200/300. Possible val- ues: all : System time with date time : System time without date none : No system time indicated Table 9-2: YSTEM XTERNAL...
Page 298
TCP, UDP and ICMP sessions: Go to WAN P ARTNER DVANCED ETTINGS Activate IP Accounting with on . Displaying syslog Proceed as follows to display syslog messages: messages Go to M ONITORING AND EBUGGING ESSAGES BinTec Access Networks GmbH...
Activity Monitoring This displays the syslog messages saved internally in X4100/200/300: X4x00 Setup Tool BinTec Access Networks GmbH [MONITOR][MESSAGE]: Syslog Messages MyRouter Subj Lev Message SNMP DEB sent TRAP (linkUp,0) 115 bytes to circindex 1001 Port 36880 SNMP DEB sent TRAP (linkUp,0) 115 bytes to 199.1.1.13 Port 162...
Page 300
Configuration of Security Functions A list of the existing ISDN connections (incoming and outgoing calls) is dis- played: X4x00 Setup Tool BinTec Access Networks GmbH [MONITOR][ISDN CALLS]: ISDN Monitor - Calls MyRouter Dir Remote Name/Number Charge Duration Stack Channel State...
Page 301
Activity Monitoring The current status of the Credits Based Accounting System for the selected subsystem is displayed: X4x00 Setup Tool BinTec Access Networks GmbH [MONITOR][CREDITS][STAT]: Monitor isdnlogin Credits MyRouter Total Maximum % reached Time till end of measure interval(sec) 7794...
Page 302
Configuration of Security Functions The values for two interfaces are displayed side by side: X4x00 Setup Tool BinTec Access Networks GmbH [MONITOR][INTERFACE]: Interface Monitoring MyRouter Interface Name PROVIDER Operational Status dormant total per second total per second Received Packets 5512...
Credits Based Accounting System ISDN charges X4100/200/300’s Credits Based Accounting System enables you to control the costs billed for ISDN charges for data connections. This means you can keep the effects of possible configuration errors within limits. For example, the sys- tem enables you to define the maximum number of connections allowed in a certain period of time.
Page 304
Maximum Charge Maximum charges allowed (amount, units) dur- ing the Measure Time (sec). If you activate this setting with on , you can enter the desired value in the line below. BinTec Access Networks GmbH...
Page 305
Activate Maximum Number of Outgoing Connections, if applicable, and enter the desired value. Activate Maximum Charge, if applicable, and enter the desired value. Activate Maximum Time for Incoming Connections (sec), if applicable, and enter the desired value. X4100/200/300 User’s Guide...
X4100/200/300. Important information about the status of physical interfaces (e.g. ISDN line) and virtual interfaces (e.g. WAN partner) is easily obtained with one tool. A permanent overview of the utilization of X4100/200/300’s interfaces is possible. How does it work?
Page 307
This application is obtainable with BRICKware Re- lease 5.1.1 and higher. Activate the Activity Monitor as follows: Appropriately configure the X4100/200/300(s) to be monitored. Start and use the Windows application on your PC (see BRICKware for Windows). The configuration is made in S YSTEM...
Page 308
XTERNAL CTIVITY ONITOR The breakdown of X4100/200/300’s interfaces into physical and virtual inter- faces is described in detail in the Software Reference. Note: A leased line always represents a physical interface, but a group of leased lines is displayed as both a physical and virtual interface!
Access Security Access Security There are several ways of restricting logging in and access to X4100/200/300 to authorized users only: Logging In (chapter 9.2.1, page 309) Checking the Calling Party Number (CLID) (chapter 9.2.2, page 310) Authentication of PPP Connections (chapter 9.2.3, page...
Configuration of Security Functions Caution! All BinTec routers are shipped with the same user names and passwords. As long as the password remains unchanged, they are not protected against unau- thorized use. How to change the passwords is described in chapter 4.4.4,...
Access Security ty’s own extension number (e.g. 1234 X4100/200/300 can detect this from the screening indicator in the setup message of the ISDN D-channel. The screening indicator has four possible values: user : The calling party number indicated originates from the far end and has not been checked by the network.
Page 312
However, no alternative is currently avail- able for connecting Microsoft clients over data transmission networks. yes (delayed, CLID only) X4100/200/300 calls back after approx. four seconds, if requested to by the WAN partner. BinTec Access Networks GmbH...
Like yes (PPP negotiation) with abort option. callback optional) The Microsoft client has the option of aborting callback and maintaining the initial connection X4100/200/300 without callback. This is done by pressing CANCEL to close the dialog box that appears. Exception: This abort option cannot be used if...
User concept By using BinTec’s user concept, you can make sure that only users authenticat- ed by user name and password can access X4100/200/300’s Remote CAPI in- terface (see figure 6-3, page 124).
Page 315
WAN Partner Figure 9-1: Forward NAT NAT always refers to an interface. X4100/200/300’s LAN side is always referred to as "internal", the WAN partner as "external". You will find more information on NAT in the Software Reference. Configuration is made in IP...
Page 316
NAT for a WAN partner who cannot do this himself. In this process, X4100/200/ does not automatically conceal the local network using the global IP ad- dress assigned by the service provider. An increased configuration effort is nec- essary to ensure the same degree of security. BinTec Access Networks GmbH...
Page 317
If you do not use any of the predefined services. Enter the required val- ues under Protocol and Port to define a service. Protocol Only for Service = user defined . Defines the protocol allowed. Possible values: icmp l2tp X4100/200/300 User’s Guide...
Page 318
Add an entry with ADD or select an existing entry and confirm with Return. Select Service. Select the desired value for Protocol, if applicable. Enter the desired value for Port (-1 for any), if applicable. Enter the IP address for Destination. Press SAVE. BinTec Access Networks GmbH...
A filter describes a certain part of the IP data traffic based on the source and/or destination IP address, netmask, protocol and source and/or destination port. If you define a filter, you should therefore tell X4100/200/300: "Watch out for all data packets that match the following: ...". Rule...
Page 320
Next Rule = 0 Rule 3 Next Rule = 0 Rule 0 = Discard Packet Figure 9-2: Rule chains for various interfaces Configuration is made in: CCESS ISTS ILTER CCESS ISTS ULES REORG CCESS ISTS ULES CCESS ISTS NTERFACES BinTec Access Networks GmbH...
Page 321
Description Designation of the filter. Note that only the first 10 or 15 characters are visible in other menus. Index Cannot be changed here. X4100/200/300 auto- matically issues a number to new filters defined here. Protocol Defines a protocol. Possible values:...
Page 322
Permits the entry of a range of port numbers under Specify Port. priv (0..1023) Port numbers: 0 ... 1023. server (5000..32767) Port numbers: 5000 ... 32767. clients 1 (1024.0.4999) Port numbers: 1024 ... 4999. clients 2 (32768..65535) Port numbers: 32768 ... 65535. BinTec Access Networks GmbH...
Page 323
File Transfer Protocol ( FTP) (data) File Transfer Protocol (FTP) (commands) Telnet Simple Mail Transfer Protocol (SMTP) TCP, UDP Domain Name Server ( DNS) Trivial File Transfer Protocol TFTP) HTTP POP3 (e-mail inquiry) Network Time Protocol TCP, UDP X4100/200/300 User’s Guide...
Page 324
As destination port, the client uses the number under which the FTP server offers the FTP service, e.g. . The FTP server then an- swers with IP packets that use 21 as source port and xyz as destination port. BinTec Access Networks GmbH...
Page 325
This is shown in the diagram below: Src IP = 192.168.1.1 Src Port = xyz Dest IP = 10.1.1.2 Dest Port = 21 X4100/200/300 ISDN Src IP = 192.168.1.1 Src Port = xyz Dest IP = 10.1.1.2 Dest Port = 21...
Page 326
You can change the order of rules in a chain in the submenu IP CCESS REORG: ISTS ULES Field Meaning Index of Rule that gets Defines the first rule in the chain. Index 1 Table 9-18: REORG CCESS ISTS ULES BinTec Access Networks GmbH...
Page 327
Access Security If you reorganize such a chain, X4100/200/300 renumbers the remaining rules according to the selection in Index of Rule that gets Index 1: Before After Figure 9-4: Example of chain reorganization The rule with Index = 1 is normally always used as the first rule for a newly cre- ated interface (e.g.
Page 328
: A syslog message is generated with the protocol number, source IP address and source port number. dump : A syslog message is generated with the contents of the first 64 bytes of the de- nied packet. Table 9-19: CCESS ISTS NTERFACES BinTec Access Networks GmbH...
Page 329
Action = Allow M , only what you have expressly allowed with the filter actually gets through. It may easily occur that your telnet access to X4100/200/300 is no longer allowed as soon as you enter the rule and confirm with SAVE.
Page 330
CCESS ISTS NTERFACES Select an interface and confirm with Return if you wish to use a rule as the first rule for this interface that is not the rule displayed. Select First Rule. Select Deny Silent. BinTec Access Networks GmbH...
314) or global filters (see chapter 9.2.8, page 319). Strategy As soon as at least one entry for local filters exists in X4100/200/300, incoming requests for the corresponding local services of X4100/200/300 are only al- lowed if one of the following conditions is fulfilled: The source address is 127.0.0.1 (loopback address).
Page 332
The request is rejected if one or more entries for this service exist in the list, but none of these matches the request. Local filters therefore provide an additional tool that is different to handle than global filters and does not adversely affect performance in normal routing either. BinTec Access Networks GmbH...
Page 333
Access Security Configuration is made in IP ADD: OCAL ERVICES CCESS ONTROL Field Meaning Service Defines the local X4100/200/300 service to which access is to be controlled with this entry. Possible values: snmp(udp) rip(udp) bootps(udp) dns(udp) telnet(tcp) trace(tcp) snmp(tcp) capi(tcp)
Page 334
Service. Possible values: verify don’t verify (Only if Verify Interface = verify ) Interface Defines an interface of X4100/200/300. If X4100/200/300 receives an incoming call over this interface for the service selected under Service, the connection is allowed. If the incoming call crosses another interface, the next entry is checked.
Proceed as follows to restrict access to a local service: If an entry defines both an address and an interface for checking, both criteria must be fulfilled for an incoming call before X4100/200/300 accepts this call. Go to IP OCAL...
The Token Authentication Firewall (TAF) function permits personal authentica- authentication tion of IP connection partners. BinTec’s solution integrates the Token Authenti- cation mechanisms from Security Dynamics and does not allow data packets to cross the router until the associated source address has been authenticated successfully.
Page 337
Access Security Configuration Configuration is made in the Setup Tool menu IP ADDEXT: OUTING X4x00 Setup Tool BinTec Access Networks GmbH [IP][ROUTING][ADD]: IP Routing - Extended Route MyRouter Route Type Network route Network WAN without transit network Destination IP Address...
Page 338
The Network field contains the following selection options: Possible Values Meaning Route to a destination host or LAN that can be reached via X4100/200/300’s LAN interface. WAN without transit Route to a destination host or LAN that can be network reached via a WAN partner without including any transit network available.
Page 339
Access Security Possible Values Meaning Refuse X4100/200/300 discards data packets using this route and sends the sender a message saying the destination of the packet is unreach- able. Ignore X4100/200/300 discards data packets using this route without sending a status message.
Page 340
Enter the desired Source Mask. Select Type of Service. Enter the TOS Mask. Select the desired Protocol. Select the desired Source Port. Select the desired Destination Port. Define the Source Port, if applicable. Define the Destination Port, if applicable. BinTec Access Networks GmbH...
Page 341
Access Security Press SAVE. Extended IP routing is configured for the interfaces entered. You will find a detailed description (including configuration using the MIB vari- ables) in the Software Reference. X4100/200/300 User’s Guide...
The DES and Blowfish encryption algorithms are only supported if a license for VPN is entered in X4100/200/300. BinTec Access Networks GmbH...
Page 343
DES3 168 : Triple DES with 168-bit key none: No encryption These values are only available if PPP , Async PPP over X.75 , Async PPP over X.75/T.70/ BTX or X.25_PPP has been selected under Encapsulation. WAN P Table 9-25: ARTNER X4100/200/300 User’s Guide...
Page 344
WAN partner is generated automatically or defined statically. Possible values: authentication (default value): Key is gener- ated automatically by X4100/200/300. static : The key is defined statically and must be entered under Encryption Key (TX) and Encryption Key (RX). Encryption Key (TX)
The PPP connection to the selected VPN partner is encrypted. 9.3.2 VPN (with extra license) X4100/200/300 can set up a VPN (Virtual Private Network) using the PPTP (Point-to-Point Tunneling Protocol). This provides secure transmission of data over WAN connections, e.g. over the Internet. It can be used, for example, by field service staff to obtain low-cost access to data in the company network via Internet and laptop (dial-in via a local Internet Service Provider).
IPSec client that has been installed on the workstation. BinTec offers such a client in conjunction with the BinTec IPSec solution. If you want to implement an IPSec solution with the X4100/200/300, you need an IPSec extra license. You can obtain this from your dealer.
347) 9.4.1 Startup Procedure X4100/200/300 does not start its routing activities until the complete configura- tion is loaded, especially the defined filters. This means it is not possible to pro- voke a system start to make use of an intermediate system state in which perhaps routing takes place before the filters are active.
Page 348
9.2.10, page 335). You can counter DoS attacks that speculate on destroying the system by caus- ing the log files to overflow (syslog messages) by suitably positioning and limit- ing the size of these files. BinTec Access Networks GmbH...
Checklist Checklist The following list indicates the most important critical security points that you should observe when configuring X4100/200/300: Have you changed all four passwords for system access (admin, read, write)? See chapter 4.2, page Are the activities of your...
Page 350
211. Do you check what computers have access to the Remote CAPI interface, what applications are used on them and whether the connections used with these applications are desired? Do you use BinTec’s user concept (chapter 6.3, page 142)? Are any additional user accounts created trouble-free?
Configuration Management In this chapter, you will find instructions on the administration of your configura- tion files and on updating the X4100/200/300 software. The following areas are covered: Administration of Configuration Files (chapter 10.1, page 352) – Where are the configuration files? –...
These configuration files are stored in the flash EEPROM (electronically eras- able, programmable read-only memory) of X4100/200/300. Several different configuration files can be stored in the flash memory. The data also remains stored in the flash when X4100/200/300 is switched off.
Page 353
Administration of Configuration Files The following menu opens: X4x00 Setup Tool BinTec Access Networks GmbH [CONFIG]: Configuration Management MyRouter Operation (TFTP --> FLASH) TFTP Server IP Address 192.168.1.1 TFTP File Name b5104.x4a Name in Flash boot Type of last operation get (TFTP -->...
Page 354
As the configuration file is transferred to flash and not to memory, the file must then be loaded (FLASH --> MEMORY), so that the settings can take effect on X4100/200/300. state Save all current settings in the memory as (MEMORY --> TFTP) <TFTP File Name>...
Page 355
If an error should occur while running get (TFTP --> FLASH) and the operation is aborted, the file to be overwritten in the flash is deleted. So if you transfer a "boot" file, X4100/200/300’s boot file will be deleted and X4100/200/300 cannot load a configuration on restarting.
Page 356
Setup Tool; State of last operation displays running. When the operation has been executed successfully, the operation is dis- played under Type of last operation, State of last operation assumes the value done . BinTec Access Networks GmbH...
Page 357
192.168.1.1 C:\BRICK on your PC. Your PC has the IP address . If you want to transfer brick.cf from your PC to X4100/200/300, proceed as follows: For a Windows PC: Click the Windows Start button then Program BRICKware DIME Tools to start DIME Tools.
Page 358
. The configuration file brick.cf is saved, for example, in X4100/200/300’s flash under the name "boot". To make the settings of brick.cf take immediate effect in X4100/200/300, pro- ceed as follows: Reselect Operation: load (FLASH --> MEMORY) .
10.2 Updating Software As BinTec Access Networks GmbH is constantly improving the software for all its products and you certainly want to use the latest features of X4100/200/300, this chapter tells you how to update your software. www.bintec.net If you want to update your software, load a new software image in X4100/200/ (boot image).
Page 360
Type in the URL www.bintec.net in your browser (e.g. Internet Explorer or Netscape Navigator). BinTec’s home page opens. Click "Solutions and Products" and then "Download". Here you will find the latest software and documentation for BinTec prod- ucts. Click "X4000". Here you will find the latest software and documentation for X4100/200/ 300.
Page 361
<file name> is the name of the boot image you have saved on your PC. The file <file name> is first transferred to the memory of X4100/200/300 and checked. The following appears in the SNMP shell: Perform update (y or n)? Enter y and confirm with Return.
Page 362
Configuration Management Enter y and confirm with Return. X4100/200/300 starts with the new boot image. The previous configuration is overwritten. BinTec Access Networks GmbH...
Troubleshooting Tips If you are having problems with X4100/200/300, the following tips should help you to overcome some of the more usual stumbling blocks: Log in to X4100/200/300 and enter in the SNMP shell: debug all This makes available all the debugging information in the SNMP shell.
These commands are entered directly in X4100/200/300’s SNMP shell: debug You can use the debug command for troubleshooting in one or more sub- systems of X4100/200/300. A detailed explanation of the syntax and options can be found in chapter 13.1, page 392.
Enter trace -ip next to display data packets that are to run over the next B-channel to be opened. Enter trace -x -s me -d 0:a0:f9:d:5:a 0 0 1 to output data pack- ets sent from X4100/200/300’s MAC address over the LAN to the host with the MAC address 0:a0:f9:d:5:a. 11.1.3...
Page 366
Troubleshooting DIME Tracer (Windows) The DIME Tracer enables you to trace X4100/200/300’s ISDN and CAPI data traffic from a Windows PC. DIME Tracer is a part of DIME Tools. A detailed ex- planation can be found in BRICKware for Windows.
The password as well as the complete configuration of X4100/200/300 deleted. Select "(1) Boot System". X4100/200/300 is restarted. Reconfigure X4100/200/300. I can’t reach X4100/200/300 in the LAN. Use the MMI to check whether you have entered an IP address. X4100/200/300...
Use debug all or trace to check if a PC in the LAN is using a different netmask from the one entered on X4100/200/300. Use debug all or trace to check if a PC in the LAN is configured for Re- mote CAPI with an incorrect IP address (destination port 2662).
Page 369
Typical Errors and Procedure Use S to check if X4100/200/300 YSTEM XTERNAL YSTEM OGGING configured so that syslog messages are sent to a host outside the LAN (destination port 514). Use IP to check if an IP address located outside the...
Page 370
Check CALLS to determine if you have made the necessary entries for in- coming calls. Check if Encapsulation in WAN P is the same for both ARTNER connection partners. Check if Authentication in WAN P PPP is the same for ARTNER both connection partners. BinTec Access Networks GmbH...
0 °C to 40 °C Relative humidity 20 to 90 % non-condensing in operation 5 to 95 % non-condensing in storage Room classification Operate only in dry rooms Printed documentation User’s Guide supplied with equipment Table 12-1: X4100/200/300 technical data X4100/200/300 User’s Guide...
Electrical ratings Mains unit Wide-range mains unit without fan Mains voltage 100 to 240 V AC Mains frequency 50/60 Hz Max. current drawn 800 mA Table 12-2: Technical data for mains unit BinTec Access Networks GmbH...
Features of Basic Unit 12.2 Features of Basic Unit The features of the X4100, X4200 X4300 basic units are listed in the follow- ing table: Feature Description Processor Motorola MPC860T RISC CPU Memory 16 MB SDRAM 4 MB flash ROM...
Serial Console Interface Pin assignment of serial console interface of basic unit (8-pole mini DIN socket, X4100, X4200 and X4300): For test purposes For test purposes Figure 12-1: Pin assignment of serial console interface for X4100, X4200 X4300 BinTec Access Networks GmbH...
Shield Shield Shield Figure 12-2: 10/100 Base-T Ethernet/LAN interface (RJ45 socket) of basic unit with pin assignment for X4100, X4200 and X4300) The LAN cable used must have the following technical features: 100 Base-T cable CAT5 STP (Shielded Twisted Pair) 8-pole RJ45 plug fully shielded at both ends 4 twisted wire pairs;...
The LAN cable used must have the following technical features: 10 Base-T cable CAT5 UTP (Unshielded Twisted Pair) 8-pole RJ45 plug 2 twisted wire pairs; the following wires are twisted: – Pin 1+2 – Pin 3+6 BinTec Access Networks GmbH...
Features of Basic Unit 12.2.4 ISDN BRI Interface Pin assignment of ISDN BRI interface (RJ45 socket, X4100, X4200 and X4300): Figure 12-4: ISDN BRI interface (RJ45 socket) of basic unit with pin assignment X4100/200/300 User’s Guide...
Making the relevant settings in the Setup Tool Connector field physically reverses the signal direction and the pin functions. The cables to be used are not supplied with X4100/200/300, but can be ordered from your dealer. We recommend you use original BinTec cables, which you can buy from your dealer.
Page 379
C (B) I (A) Indication I (B) S (A) Transmit and receive clock S (B) X (A) Transmit clock (only supported for DCE X (B) cable) Table 12-4: Pin assignment of DB-15 plug for X.21 (ISO 4903) X4100/200/300 User’s Guide...
Page 380
TxC (A) Transmit clock – used in special TxC (B) cases instead of 114 TxC (A) Transmit clock TxC (B) RxC (A) Receive clock RxC (B) Table 12-5: Pin assignment of M34 plug for V.35 (ISO 2593) BinTec Access Networks GmbH...
20 to 90 % non-condensing in operation 5 to 95 % non-condensing in storage Extensions Slot for resource card with digital modems Slot for resource card for encryption and com- pression Table 12-7: Features of BRI expansion card X4100/200/300 User’s Guide...
0 °C to 40 °C Relative humidity 20 to 90 % non-condensing in operation 5 to 95 % non-condensing in storage Extensions 2 slots for resource card with digital modems Table 12-8: Features of PRI/G.703 expansion card BinTec Access Networks GmbH...
Page 385
(usually a PBX for S inter- faces). Note for NTs in Germany In Germany, "Transmit" (NT-->TE) is often designated "S2Mab" (a and b) on the plug and "Receive" (TE-->NT) "S2Man" (a and b). X4100/200/300 User’s Guide...
0 °C to 40 °C Relative humidity 20 to 90 % non-condensing in operation 5 to 95 % non-condensing in storage Extensions Slot for resource card for encryption and com- pression Table 12-11: Features of LAN expansion card BinTec Access Networks GmbH...
The installation of resource cards in an expansion card generates additional heat. A fan unit must be used to prevent damage to components! If you use an expansion card with resource card(s) in your built-in X4100/ 200/300 unit, make sure you fit the fan unit.
The ISDN PRI and G.703 expansion card is supplied ex works with hardware support for encryption and compression. The ISDN BRI expansion card and the LAN expansion card can be optionally equipped with a suitable resource card. BinTec Access Networks GmbH...
Page 389
Features of Expansion and Resource Cards Due to export and import regulations, it is not always possible to guarantee de- livery of resource cards for encryption and compression. X4100/200/300 User’s Guide...
Page 390
Technical Data BinTec Access Networks GmbH...
– -f <precount>: <precount> packets are sent first. The next packet is sent as soon as a packet has been received. Output: a dot appears on the screen for each packet sent and a dot is BinTec Access Networks GmbH...
Page 393
-a: asynchronous HDLC (B-channel only) – -F: fax (B-channel only) – -A: fax and AT commands (B-channel only) – -D: additional time parameter (delta) – -t: output in ASCII text (B-channel only) – -p: PPP (B-channel only) X4100/200/300 User’s Guide...
Page 394
-o: combine two or more -d filters or -s filters with a logical OR opera- tion. – specific <MAC filter>: me = X4100/200/300’s MAC address, bc = broadcast packets. You can combine a -d MAC filter and an -s MAC filter with a logical AND oper- ation by simply specifying them both.
Page 395
[show]|[[-q] all|acct|system|<subs> [<subs> ...]] Is used to selectively display debugging information originating from one of X4100/200/300’s subsystems. – show: displays all possible subsystems that can be debugged. – -q: no timestamp attached before each debugging message.
Page 396
-r: displays a list of routing table entries. – -p: displays a list of WAN partners. – interface: limits the information displayed to the selected interface. – -d <dest. IP addr.>: displays routes to the IP address entered. date date [YYMMDDHHMMSS] BinTec Access Networks GmbH...
Page 397
SNMP Shell Commands X4100/200/300 has a software clock. Entering date displays the time set. Entering date YYMMDDHHMMSS sets the clock to the corresponding value (year, month, day, hour, minute, second). t [<seconds>] Is used to define the auto logout time for the current login session (in the ex...
Page 398
Important Commands Entering -? usually provides syntax help. The update command can be found in chapter 10.2, page 359. Further SNMP commands can be found in the Software Reference. BinTec Access Networks GmbH...
13.2 BRICKtools for Unix Commands The "bricktrace" and "capitrace" programs are included in BRICKtools for UNIX on the BinTec Companion CD. They are started on a Unix workstation by enter- ing the following commands. bricktrace bricktrace [-h23aeFpiNtxs] [-T <tei>] [-c <cref>] [-r <cnt>] [-H <host>] [-P <port>] <channel>...
Page 400
Number of the tracer message (#<decimal>) – Length of the CAPI message ([<decimal>]) – Application ID (ID = <decimal>) – Number of the CAPI message (no. (<decimal>)) – Short output only: connection identifier (ident = 0x<hexadecimal>) BinTec Access Networks GmbH...
In den nachfolgenden Abschnitten finden Sie Sicherheitshinweise, die Sie beim Umgang mit Ihrem Gerät unbedingt beachten müssen. Transport und Transportieren und lagern Sie X4100/200/300 nur in der Originalverpack- Lagerung ung oder in einer anderen geeigneten Verpackung, die Schutz gegen Stoß...
Page 402
Verwenden Sie nur Kabel, die den Spezifikationen in diesem Hand- buch genügen oder original mitgeliefert wurden. Falls Sie andere Kabel verwenden, übernimmt BinTec Access Networks GmbH für auftretende Schäden oder Beeinträchtigung der Funktionalität keine Haftung. Die Gerätegarantie erlischt in diesen Fällen.
Page 403
Eindringen von Flüssigkeit oder Fremdkörpern) sofort die Strom- versorgung und verständigen Sie den Service. Reinigung und Das Gerät darf nur von einer BinTec-autorisierten Servicestelle geöffnet Reparatur werden. Vor Öffnen des Geräts unbedingt den Netzstecker ziehen. Durch unbefugtes Öffnen und unsachgemäße Reparaturen können erhebliche Gefahren für den Benutzer entstehen (z.
Page 404
Aseta laite tukevalle, tasaiselle alustalle. Sähköstaattiset varaukset voivat johtaa laitteen vioittumisen. Pidä siksi ran- teen ympärillä maadoitettua ranneketta tai kosketa maadoitettua pintaa, ennen kuin kosket X4100/200/300:n liittimiä tai laajennuskortteja. Kosketa laajennuskortteja periaatteessa vain reunoista äläkä tartu rakenneosiin tai johdinratoihin.
Page 405
Huomaa kaapeloitaessa käsikirjassa kuvailtu järjestys. Käytä vain kaape- lia, joka vastaa tämän käsikirjan spesifikaatioita tai joka toimitettiin alun- perin laitteen mukana. Jos käytät toista kaapelia, BinTec Access Networks GmbH ei ota vastuuta vahingoista tai toiminnan huonontumisesta. Tällai- sissa tapauksissa laitetakuu raukeaa.
Page 406
Keskeytä hätätilanteessa (esim. särkynyt kotelo tai käyttölaite, nesteen tai vieraiden esineiden joutuminen laitteen sisään) virransyöttö välittömästi ja ota yhteyttä huoltopalveluun. Puhdistus ja Vain BinTec:in valtuuttama huoltokorjaamo saa avata laitteen. Verkkopis- korjaus toke on ehdottomasti vedettävä seinästä ennen laitteen aukaisemista. Asiaton aukaiseminen ja asiantuntemattomat korjaukset voivat aiheuttaa käyttäjälle huomattavia vaaroja (esim.
Page 407
Installation et Avant de procéder à l’installation et à la mise en service de X4100/200/300, mise en service veuillez vous référer aux indications concernant les conditions d’environne- ment (cf.
Page 408
Dans le cas où vous utiliseriez d’autres câbles que ces derniers, la société BinTec Access Net- works GmbH décline toute responsabilité pour des dommages éventuels ou pour tout défaut de fonctionnement pouvant en résulter.
Page 409
L’appareil doit être ouvert uniquement par un point de service après-vente réparations agréé par BinTec. Il est impératif de retirer la fiche secteur avant d'ouvrir l'appareil. L'ouverture non autorisée de l'appareil ainsi que des réparations non conformes exposent l'utilisateur à des risques graves (risque d'électro- cution par exemple).
Page 410
απ αι µηρά αντικείµενα. Να πρ στατεύετε την µ νάδα ενδεί εων απ τυπήµατα και πτώσει και να την συνδέετε µ ν ν ή RJ11 τ υ X4100/200/300, για να στην πρ λεπ µενη υπ δ X4100/200/300 απ φύγετε τι...
Page 411
ρησιµ π ιείτε µ ν ν καλώδια π υ πληρ ύν τα αρακτηριστικά στ εγ ειρίδι ή τα γνήσια π υ παραλά ατε. Αν ρησιµ π ιείτε άλλα καλώδια, τ τε η BinTec Access Networks GmbH δεν αναλαµ άνει καµία ευθύνη για ηµιέ ή...
Page 412
Η συσκευή επιτρέπεται να αν ι τεί µ ν ν απ συνεργεία π υ έ υν επισκευή ε υσι δ τηθεί απ την BinTec. Πριν τ άν ιγµα τη συσκευή θα πρέπει πωσδήπ τε να γάλετε τ ν ρευµατ λήπτη. Αναρµ δι...
Page 413
Να µη ρησιµ π ιείτε π τέ συρµάτινα σφ υγγαράκια και αι µηρά ή αδρά ηθητικά µέσα καθαρισµ ύ. X4100/200/300 User’s Guide...
Page 414
Le cariche elettrostatiche possono provocare danni all’apparecchio. Indos- sare quindi un polsino elettrostatico o toccare una superficie collegata a ter- ra prima di afferrare prese o schede di espansione di X4100/200/300. Te- nere sempre le schede di espansione soltanto per i bordi e non toccare gli elementi costruttivi né...
Page 415
Per il cablaggio si deve seguire la sequenza descritta nel manuale. Utiliz- zare soltanto i cavi rispondenti alle specifiche riportate in questo manuale o quelli originali forniti in dotazione. Se si utilizzano altri cavi, la BinTec Ac- cess Networks GmbH non risponde dei danni o della riduzione di funzion- alità...
Page 416
(p. e. scossa elettrica). Affidare l’esecuzione delle riparazioni all’apparecchio soltanto ad un centro di assistenza BinTec autorizzato. Il rivenditore di fidu- cia può fornire informazioni sulle sedi di questi centri. In tutti gli altri casi de- cade ogni diritto alla garanzia.
Page 417
In de volgende paragrafen vindt u veiligheidsinstructies, die u bij de omgang met uw router absoluut moet in acht nemen. Transport en Transporteer en bewaar X4100/200/300 alleen in de originele verpakking bewaring of in een andere geschikte verpakking, die bescherming biedt tegen schokken en stoten.
Page 418
Gebruik enkel kabels die aan de specificaties in dit handboek voldoen of die meegeleverd werden. Indien u andere kabels ge- bruikt, is BinTec Access Networks GmbH niet aansprakelijk voor mogelijke schade of het slecht functioneren van het toestel. In dit geval vervalt de ga- rantie.
Page 419
Reiniging en Het toestel mag alleen door een door BinTec geautoriseerde servicedienst reparatie geopend worden. Voor het openen van het toestel in elk geval de netstek- ker uittrekken.
Page 420
Pass på at ikke spisse gjenstander forårsaker skader på displaymodulens displayvindu. Utsett ikke displaymodulen for støt eller fall, og kople den kun til den hertil tiltenkte RJ11-kontakt på X4100/200/300, slik at du unngår skader på X4100/200/300 og displaymodulen.
Page 421
Hvis du bruker andre kabler, påtar seg BinTec Access Networks GmbH intet ansvar for eventuelle skader eller nedsatt funksjonalitet. Garantien på apparatet oppheves i slike tilfeller.
Page 422
åpnes. Ved uautorisert åpning og usakkyndige reparasjoner kan det oppstå alvorlige risikoer for brukeren (f. eks. fare for elektrisk støt). Se til at reparasjoner på apparatet kun utføres av et BinTec- autorisert serviceverksted. Din forhandler kan fortelle deg hvor nærmeste serviceverksted er.
Page 423
Nos parágrafos que se seguem, encontra considerações em matéria de seg- urança que terá de respeitar estritamente ao lidar com o Router. Transporte e Transporte e armazene o X4100/200/300 apenas na embalagem original armazenamento ou noutra adequada para o efeito que o proteja contra embates fortes e pancadas.
Page 424
Utilize unicamente cabos que correspondam às especificações contidas neste manual ou cabos originais que tenham sido fornecidos. Se usar outros cabos, a BinTec Access Networks GmbH não se responsabi- liza por danos daí decorrentes ou por limitações de funcionamento. Nestes casos, a garantia do aparelho é...
Page 425
Limpeza e O aparelho só pode ser aberto num serviço de assistência técnica BinTec reparação autorizado. Antes de abrir o aparelho é indispensável retirar a ficha de re- de.
Page 426
Colocación y Antes de la colocación y puesta en servicio de X4100/200/300, observe las puesta en servicio instrucciones acerca de las condiciones ambientales (ver Datos técnicos).
Page 427
Si utiliza otros cables, BinTec Access Networks GmbH no se hará responsable en el caso de que se produzcan daños o una merma en el funcionamiento. En estos casos la garantía pierde su validez.
Page 428
(p. ej., electrocución). Por ello, encargue siempre los trabajos de rep- aración a un servicio técnico autorizado por BinTec, cuya dirección se la proporcionará su distribuidor. De otro modo, perderá todo el derecho de garantía.
Page 429
Säkerställ, under kabeldragningen, att apparatens ventilationsslitsar inte täcks över och att ventilationen inte påverkas. En reducerad ventilationsef- fekt kan medföra skador på X4100/200/300. Tillverkaren övertar inget ga- rantiansvar för skador som uppstår p g a bristfällig ventilation. Öppna inte basenheten, utför inga som helst förändringar på nätdelen; risk för strömstötar, livsfara.
Page 430
Utför kabeldragningen i den ordningsföljd som anges i handboken. Använd endast medlevererade originalkablar eller kablar som överensstämmer med specifikationerna i denna handbok. BinTec Access Networks GmbH påtar sig inget ansvar för eventuella skador eller brister på apparaten om den används tillsammans med andra kablar. I detta fall gäller inte garantin längre.
Page 431
Rengöring och Apparaten får endast öppnas av en av BinTEc auktoriserad serviceverks- reparation: tad. Drag alltid ut nätkontakten innan apparaten öppnas. Obehörigt öpp- nande resp ej sakkunniga reparationer på...
Page 432
Ana cihazı kesinlikle açmayınız ve elektrik çarpması sonucunda hayati tehlike bulunduğundan, elektrik kablosunda hiçbir işlem yapmayınız. Ana cihazdan tespit vidalarını sökmeyiniz. Cihaz, çalıştırılacağı odaya soğuk bir ortamdan getirilmiş ise, cihazın dışında ve içinde çiylenme olabilir. Cihazınızı çalıştırmadan önce BinTec Access Networks GmbH...
Page 433
Kabloları takarken el kitapcığındaki sıralamaya dikkat ediniz. Sadece el kitapcığında belirtilen verilere uygun veya cihazla birlikte gönderilen kabloları kullanınız. Başka kablo kullandığınız takdirde, BinTec Access Networks GmbH meydana gelen hasar veya fonksiyonlardaki olumsuz etkilerden dolayı sorumluluk üstlenmez. Bu durumlarda garanti hakkı...
Page 434
Cihazı Tamir açmadan önce, mutlaka elektrik fişini prizden çekiniz. Müsaade edilen işlemler dışında açılması ve uygun olmayan şekilde tamir edilmesi, kullanıcı için büyük tehlikeler doğurabilir (örneğin elektrik çarpması). Cihazın tamiratını sadece BinTec yetkili servisi tarafından yaptırınız. Yetkili servis yerlerini nerede bulabileceğinizi...
Page 435
Általános biztonsági útmutató A következő fejezetekben olyan biztonsági útmutatásokat talál, amelyeket a készüléke alkalmazása során feltétlenül figyelembe kell vennie. Szállítás és X4100/200/300 csak az eredeti vagy egy más, arra alkalmas tárolás csomagolásban szállítandó és tárolandó, amely lökések és ütések ellen védelmet biztosít.
Page 436
Amennyiben más vezetékeket alkalmaz, az emiatt fellépő károkért vagy a működésben fellépő változásokért a BinTec Access Networks GmbH nem vállal felelősséget. Ebben az esetben megszűnik a garanciajogosultsága. Vegye figyelembe a készülék csatlakoztatásánál a kézikönyvben leírt ide vonatkozó...
Page 437
áramellátást, és értesítse a szervizt. Tisztítás és A készüléket csak a BinTec által feljogosított szervizek nyithatják fel. A javítás készülék felnyitása előtt feltétlenül húzza ki a hálózati csatlakozót. A készülék jogtalan felnyitása és a helytelen javítás révén a felhasználó számára jelentős veszélyforrások keletkezhetnek (pl.
Page 438
X4100/200/300. Rozšiřovacích desek se zásadně dotýkejte pouze na okrajích a nesahejte na součásti nebo vodivé spoje. Uzavírejte nepoužívaný rozšiřovací slot záslepkou tak, aby do vnitřku přístroje nemohly vniknout cizí...
Page 439
Při propojování dbejte na pořadí tak, jak je popsáno v příručce. Používejte pouze kabely, jež odpovídají specifikacím v této příručce anebo dodané orig- inální kabely. Pokud použijete jiné kabely, odmítá BinTec Access Networks GmbH ručení za vzniklé škody nebo za omezenou funkčnost. Ručení za přístroj v těchto případech zaniká.
Page 440
Čištění aopravy Přístroj smí otvírat pouze autorizovaný servis firmy BinTec. Před otevřením se přístroj zásadně musí odpojit od sítě (vytáhnout zástrčku). Nepovolaným otevíráním a neodbornými opravami se uživatel vystavuje značnému ohrožení...
Page 441
Okablowanie powinno być tak prowadzone, żeby szczeliny wentylacyjne i otwory w obudowie nie zostały przysłonięte i w konsekwencji nie doszło do zakłócenia właściwego chłodzenia urządzenia. Niewystarczające przewietrzanie X4100/200/300może doprowadzić do awarii urządzenia. Uszkodzenia wynikające z niedostatecznej wentylacji mogą wiązać się z utratą reklamacji. X4100/200/300 User’s Guide...
Page 442
Należy używać tylko takich kabli których specyfikacje odpowiadają danym z niniejszej instrukcji obsługi lub też są dostarczone wraz z urządzeniem. W przypadku zastosowania innych przewodów firma BinTec Access Networks GmbH nie ponosi odpowiedzialności za poniesione szkody. Tym samym umowa gwarancyjna staje się nieaktualna.
Page 443
Należy uważać, aby do wnętrza urządzenia nie wnikały żadnego rodzaju przedmioty (np. spinacze biurowe) bądź ciecze (udar prądowy, zwarcia). Zapewnić wystarczające chłodzenia urządzenia. X4100/200/300nie zawiera żadnych części budowy które musiałyby być wymieniane przez użytkownika, nie zawiera też żadnych przełączników czy też innych elementów które trzeba ustawiać.
Page 444
Statisk elektricitet kan medføre apparatskader. Bær derfor en antistatisk manchet om håndleddet eller rør ved en flade med jordforbindelse, inden du rører ved stik eller udvidelseskort på X4100/200/300. Berør kun ud- videlseskort i kanten og tag ikke fat om konstruktionsdele eller ledninger.
Page 445
Følg den rækkefølge, der angives i denne håndbog, for tilslutningen af kablerne. Brug kun kabler som opfylder specifikationerne i denne håndbog eller de originale, medfølgede kabler. BinTec Access Networks GmbH hæfter ikke for evt. skader eller funktionsbegrænsninger ved brug af andre kabler.
Page 446
(f.eks. beskadiget kabinet eller betjeningselement, indtrængning af væske eller fremmede genstande). Rengøring og Apparatet må kun åbnes af et BinTec-autoriseret serviceværksted. Træk reparation altid netstikket ud, før apparatet åbnes. Uautoriseret åbning og ukorrekt ud- førte reparationer kan medføre betydelige farer for brugeren (f.eks. elek- trisk stød).
Basic Rate Interface consists of two B-channels and one D-channel. A B- channel has a data transmission rate of 64 kbps. The data transmission rate of an ISDN Basic Rate Interface with X4100/200/300 can be increased to up to 128 kbps using channel bundling.
Page 448
This is done by using filter functions that allow data packets to pass to certain network segments only. Some BinTec routers can be operated in Bridging Mode. Broadcast Broadcasts (data packages) are sent to all stations in a network in order to ex- change information.
Page 449
Channel bundling Channel bundling One of X4100/200/300’s features. Channel bundling is a method of increasing the data throughput. The data throughput is doubled by switching in a second B-channel for data transmission. Channel bundling can be either dynam- ic (= on demand) or static (= always).
Page 450
DIME Desktop Internetworking Management Environment DIME Tools is a collection of tools for the configuration and monitoring of rout- ers over Windows applications. They are included with all BinTec routers free of charge. Direct dialing range extension numbers range Domain Name System...
Page 451
Encapsulation Encapsulation of data packets in a certain protocol for transmitting the packets over a network that the original protocol does not directly support (e.g. NetBIOS over TCP/IP). MPPE. Encryption Refers to the encoding of data, e.g. X4100/200/300 User’s Guide...
Page 452
2.048 Mbps over ranges up to 4 km. The main HDSL applications are: High-speed data communication over leased lines. HDSL2 High Data Rate DSL, version 2 upstream downstream data rate is 1.554 Mbps over ranges up to 4 km. BinTec Access Networks GmbH...
Page 453
For ISDN protocols, however, there is a range of variations. ISDN Basic Rate Inter- An ISDN subscriber interface. The Basic Rate Interface consists of two face channels and a D-channel. Compare Primary Rate Interface. The interface to the subscriber is provided by an bus. X4100/200/300 User’s Guide...
Page 454
ISDN Basic Rate Interface, also interface. ISDN Login One of X4100/200/300’s features. X4100/200/300 can be configured and ad- ministrated remotely using ISDN Login. ISDN Login operates on routers in the ex works state as soon they are connected to an ISDN connection and therefore reachable via an extension number.
Page 455
Glossary The MIB is a database that describes all the manageable devices and functions connected to a network. All MIBs (including the BinTec MIB) contain objects specific to the manufacturer. SNMP is based on MIB. Man-Machine Interface Is a convenient user guide with LC display and input keys for the user to navi- gate the basic functions of X4100/200/300.
Page 456
An ISDN PABX is used to set up an internal telephone infrastructure allowing internal connections between the PABX extensions without the need to connect to the telephone service provider. Not all BinTec routers include an exchange. BinTec Access Networks GmbH...
Page 457
PABX can be dialed. Port Input/output The port number is used to decide to which service (telnet, WWW) an incoming data packet should be sent. POTS Plain Old Telephone System The traditional analog telephone network. X4100/200/300 User’s Guide...
Page 458
18.5 km. The main RADSL applications are: Internet access, video-on-demand (digital and compressed) and high-speed data communication over POTS. Real Time Clock (RTC) Hardware clock with buffer battery Remote Remote, as opposed to local. BinTec Access Networks GmbH...
Page 459
X4100/200/300 is supplied as standard with suitable software. BinTec’s CAPI interface is implemented as a dual-mode CAPI. CAPI 1.1 and 2.0 applications can access ISDN resources parallel to one another. This means new CAPI 2.0 applications can be used on the network or on the same PC parallel to old applications based on CAPI 1.1.
Page 460
TFTP server. In such a case, the server is not necessarily a computer server. Setup Tool Menu-driven tool for the configuration of X4100/200/300. The Setup Tool can be used as soon as the router has been accessed (serial, ISDN Login, LAN).
Page 461
(layer 3 of the OSI model) and (layer 4 of the OSI model). T-DSL Name of services of Deutsche Telekom AG. Terminal Equipment Terminal equipment for subscriber access, e.g. telephone, fax or PC. Terminal Endpoint Identifier X4100/200/300 User’s Guide...
Page 462
Data Terminal Equipment ( DTE) and a modem as Data Cir- cuit-terminating Equipment ( DCE). V.28 TU-T recommendation for unbalanced dual-current interface lines V.35 ITU-T recommendation for data transmission at 48 kbps in the range from 60- 108 kHz. BinTec Access Networks GmbH...
Page 463
Remote station that is reached over a WAN, e.g. ISDN. X.21 The X.21 recommendation defines the physical interface between two network components in packet-switched data networks (e.g. Datex-P). X.21bis The X.21bis recommendation defines the DTE/ interface to V- series synchronous modems. X4100/200/300 User’s Guide...
Page 464
Glossary X.25 An internationally agreed standard protocol that defines the interface between network components and a packet-switched data network. X.31 For integration of X.25-compatible DTEs in ISDN. BinTec Access Networks GmbH...
Bandwidth on Demand Basic configuration with Setup Tool Basic IP settings 32, 373 Basic unit Built-in unit Desktop unit Interfaces Technical data BinTec Companion CD Boot sequence BOOTP relay agent 18, 19, 78 BRICKware Installation Bridging Built-in unit CAPI Changing over the display...
Page 466
WAN interfaces WAN partner Configuration file administration Configuration Management Configuration Manager Configuration options Configuring a PC Configuring users Connection methods Console interface Corporate network connection Credits Based Accounting System 142, 160 Default route Delay after connection failure BinTec Access Networks GmbH...
Page 467
Extended IP routing Extensions CAPI ISDN Login Routing Feedback Feedback facility 113, 319, 331 Filters Firewall Flash memory General PPP settings General Safety Precautions General WAN settings Hardware Basic unit Expansion cards LEDs Setting up and connecting X4100/200/300 User’s Guide...
Page 468
IP address server PCs in the LAN Pool ISDN B-channel ISDN BRI interface Configuring Technical data 58, 123 ISDN Login LAN interface Configuring Technical data LAN-LAN connection Layer 1 protocol 119, 130 Leased lines 48, 81 LEDs BinTec Access Networks GmbH...
Page 469
Status information Using Monitoring functions in the Setup Tool MPPE MS-STAC Name resolution 165, 314 NetBIOS NetBIOS filters Netmask Entering with MMI Entering with Setup Tool 165, 314 Network Address Translation 142, 179, 311 60, 103 Passwords X4100/200/300 User’s Guide...
Page 470
Routing Information Protocol Rule S0 interface Configuring Technical data SAFERNET Safety Precautions Saving the configuration Scope of supply Security functions Access security Activity monitoring Checklist Configuring Line tapping security Special features 244, 319 Service Setting up and connecting BinTec Access Networks GmbH...
Page 471
Startup procedure Syslog messages System data, entering System requirements System time Technical data Basic unit Mains unit Telekom Austria Telnet Testing Time server Token Authentication Firewall T-Online Transit Network Troubleshooting Aids ISDN connections System errors Update User concept X4100/200/300 User’s Guide...
Page 472
Virtual Private Network (VPN) WAN interfaces WAN partner advanced functions Compuserve Configuring (basic configuration) Encapsulation Examples Internet access PPP authentication Routing entry Short hold T-Online Transit Network WINS Wildcards 208, 227 WINS X.21 X.21 interface Configuring Technical data XIPR BinTec Access Networks GmbH...
Did you have any problems during installation and configuration that you couldn’t solve with the manual? O no O yes, the following ……………………………………………………... Which configuration tools do you use? O Setup Tool O Configuration O SNMP com- others: Manager mands ………………….. Comments: ................................................................................................................................................X4100/200/300 User’s Guide...
Need help?
Do you have a question about the X4100 and is the answer not in the manual?
Questions and answers