Lucent Technologies, Inc. further reserves the right to revise this manual and to make changes to its content at any time, without obligation to notify any person or entity of such revisions or changes.
Review this guide thoroughly before configuring your PortMaster. This guide provides the settings required for the most commonly used PortMaster configurations. To use this guide you must have successfully installed your PortMaster according to the instructions provided in the relevant installation guide. This guide provides configuration information only.
Page 18
PortMaster Documentation The manuals are also provided as PDF and PostScript files on the PortMaster Software CD shipped with your PortMaster. In addition, you can download PortMaster information and documentation from http://www.livingston.com. • ChoiceNet® Administrator’s Guide This guide provides complete installation and configuration instructions for ChoiceNet server software.
• PortMaster Troubleshooting Guide This guide can be used to identify and solve software and hardware problems in the PortMaster family of products. • RADIUS Administrator’s Guide This guide provides complete installation and configuration instructions for Lucent Remote Authentication Dial-In User Service (RADIUS) software.
Page 20
RFC 2104, HMAC: Keyed-Hashing for Message Authentication RFC 2125, The PPP Bandwidth Allocation Protocol (BAP), The PPP Bandwidth Allocation Control Protocol (BACP) RFC 2138, Remote Authentication Dial In User Service (RADIUS) RFC 2139, RADIUS Accounting RFC 2178, OSPF Version 2 PortMaster Configuration Guide...
ITU-T Recommendations The following documents are recommendations of the International Telecommunication Union Telecommunication Standardization Sector (ITU-T), formerly known as CCITT: • Recommendation V.25bis (1988)—Automatic calling and/or answering equipment on the general switched telephone network (GSTN) using the 100-series interchange circuits •...
Enclose optional • set nameserver [2] Ipaddress keywords and • set S0 destination Ipaddress values in [Ipmask] command syntax. Enclose a set syslog Logtype {[disabled] required choice [Facility.Priority]} between keywords and/or values in command syntax. PortMaster Configuration Guide...
For all technical support requests, record your PortMaster ComOS version number and report it to the technical support staff or your authorized sales channel partner. New releases and upgrades of PortMaster software are available by anonymous FTP from ftp://ftp.livingston.com.pub/le/. In North America you can schedule a 1-hour software installation appointment by calling the technical support telephone number listed below.
Using the World Wide Web, see http://www.livingston.com/. PortMaster Training Courses Lucent Remote Access offers hands-on, technical training courses on PortMaster products and their applications. For course information, schedules, and pricing, visit the Lucent Remote Access website at http://www.livingston.com, click Services, and then click Training.
To subscribe, send email to majordomo@livingston.com with subscribe portmaster-announce in the body of the message. All announcements to this list also go to the portmaster-users list. You do not need to subscribe to both lists. About This Guide Subscribing to PortMaster Mailing Lists...
All PortMasters are shipped with the following software: • ComOS®—The communication software operating system already loaded in Flash RAM on each PortMaster. You can use the ComOS command line interface to configure your PortMaster through a console. • PMVision—A GUI companion to the ComOS command line interface for Microsoft Windows, UNIX, and other platforms that support the Java Virtual Machine (JVM).
Guide. Preconfiguration Planning Before the PortMaster can be used to connect wide area networks (WANs), you must install the hardware using the instructions in the installation guide for your system. This configuration guide is designed to introduce the most common configuration options available for PortMaster products.
Configuration Tips PortMaster configuration can be confusing because settings can be configured for a port, a user, or a remote location. Use the following tips to determine how to configure your PortMaster: If You Are Configuring...
IP address assignment. 2. Boot the system and log in with the administrative password. You can configure the PortMaster from a terminal attached to the console port, by an administrative Telnet session, or by a network connection.
Page 31
ISDN PRI connection configuration is described in Chapter 11, “Configuring the PortMaster 3.” ISDN BRI connection configuration is covered in Chapter 12, “Using ISDN BRI.” 9. Configure dial-in users in the user table, or configure RADIUS. The user table is described in Chapter 7, “Configuring Dial-In Users.” If you are using RADIUS security instead of the user table, see the RADIUS Administrator’s...
PortMaster boots from the ComOS stored in nonvolatile Flash RAM. The PortMaster uncompresses and loads the ComOS into dynamic RAM (DRAM). If a valid ComOS is not found in Flash, the PortMaster attempts to boot from the network as described in the next paragraph.
Page 34
If no address is configured for the Ethernet interface and no address was obtained from netbooting, the PortMaster sends a RARP message to discover its IP address. If the PortMaster receives a reply to the RARP message, its IP address is set in dynamic memory.
9. The PortMaster listens for TCP connections to any ports configured as network devices. 10. The PortMaster listens for activity on TCP and UDP ports, such as for administrative Telnet sessions on TCP port 23, PMconsole connections on TCP port 1643, and SNMP requests on UDP port 161.
PortMaster denies access with an “Invalid Login” message. If no user table entry exists for the user and port security is off, the PortMaster passes the user on to the host defined for that port using the selected login service. In this situation, the specified host is expected to authenticate the user.
Access can also be denied if the specified login service is unavailable—for example, if the PortMaster Login Service has been selected for the user but the selected host does not have the in.pmd PortMaster daemon installed. Access is denied with the “Host Is Currently Unavailable”...
Page 38
The PortMaster is waiting for a login request. The host: prompt has been sent to the port. The PortMaster is waiting for a reply. The Password: prompt has been sent to the port. The PortMaster is waiting for a reply.
Configuring Global Settings This chapter describes how to configure settings that the PortMaster uses across all its ports and interfaces. This chapter discusses the following topics: • “Setting the System Name” on page 3-2 • “Setting the Administrative Password” on page 3-2 •...
Setting the System Name The system name is the name that identifies the PortMaster for SNMP queries, IPX protocol routing, and CHAP authentication. Enter a name that is valid for your network. The system name can have up to 16 characters, and appears in place of the Command>...
PortMaster OR-U dial-up routers). How the Cable Modem Telephone Return System Works After you set the IP address of the DHCP server on the PortMaster product, the cable modem dynamically configures itself so that all subsequent data travels upstream via the telephone interface, and downstream on the coaxial cable.
PortMaster selects when it cannot locate the destination of a packet on the local Ethernet segment. You identify the default gateway by its IP address entered in dotted decimal notation. A PortMaster can never be its own default gateway.
To set the default gateway, use the following command: Command> set gateway Ipaddress [Metric] If you do not specify a value for Metric, the PortMaster assumes a default value of 1. Configuring Default Routing As described in the PortMaster Routing Guide, PortMaster products can automatically send and accept route information as part of RIP messages if routing is turned on.
Using the Host Table Each host attached to an IP network is assigned a unique IP address. Every PortMaster supports a local host table to map hostnames to IP addresses. If your network lacks a computer that can perform hostname resolution, the PortMaster allows entries in a local host table.
3-8 for instructions. Setting the Name Server The PortMaster supports RFC 1877, which allows remote hosts also supporting RFC 1877 to learn a name server through PPP negotiation. You must provide the IP address of the name server if you use a name service.
The Telnet access port can be set to any number between 0 and 65535. The Telnet port enables you to access and maintain the PortMaster using a Telnet connection to this TCP port. If 0 (zero) is used, Telnet administration is disabled. The default value is 23. Ports numbered 10000 through 10100 are reserved and should not be used for this function.
Setting System Logging Setting the Loghost To set the IP address of the loghost—the host to which the PortMaster sends syslog messages—use the following command: Command> set loghost Ipaddress Note – Do not set a loghost at a location configured for on-demand connections, because doing so keeps the connection up or brings up the connection each time a syslog message is queued for the syslog host.
Page 49
Table 3-3 and Table 3-4 show the keywords used to identify facilities and priorities. Lucent recommends that you use the auth facility or the local0 through local7 facilities to receive syslog messages from PortMaster products, but all the facilities are provided. See your operating system documentation for information on configuring syslog on your host.
You can dynamically assign IP addresses to PPP or SLIP dial-in users. By assigning addresses as needed from a pool, the PortMaster requires fewer addresses than if each user is assigned a specific address. When a dial-in connection is closed, the address goes back into the pool and can be reused.
PortMaster for the change to take effect. Setting the Reported IP Address Some sites require a number of different PortMaster devices to appear as a single IP address to other networks. You can set a reported address different from the Ether0 address.
The agent is capable of responding to requests to get or set data from the manager. PortMaster products support MIB II variables as specified in RFC 1213, along with a MIB specific to PortMaster products. SNMP management can be enabled for any PortMaster.
Page 53
Figure 3-2 Management Information Base (MIB) Hierarchy CCITT directory Configuring Global Settings unnamed joint ISO/CCITT internet experi- mgmt private mental Livingston 11820021 Configuring SNMP 3-15...
Page 54
Configuring SNMP Figure 3-3 shows the tree structure of the private Livingston portion of the MIB. Figure 3-3 Part of MIB Structure showing PortMaster Port S0. 1. (not used) 2. products Reading from the top down, the object identifier (OID) in Figure 3-3 (307.3.2.1.1.1.2) breaks out as follows: •...
Page 55
Type ...307.3.2.1.1.1.7 Direction PortMaster Serial Interfaces Table 3-6 lists the objects in the serial interface table from the Livingston Extensions section of the MIB. Modem-specific objects apply to the PortMaster 3 only. Table 3-6 Serial Interfaces Table Object Index PortName...
Page 57
PortMaster T1/E1 Interfaces Table 3-7 lists the objects in the T1/E1 interfaces from the Livingston Extensions section of the MIB. T1/E1 interfaces are supported on the PortMaster 3 only. Table 3-7 T1/E1 Interfaces Table Object Index PhysType Function Status Framing...
CRCErrors SyncErrors PortMaster Modem Table Table 3-8, lists the objects in the modem table from the Livingston Extensions section of the MIB. Modem objects are supported only on the PortMaster 3 Integrated Access Server. Table 3-8 Modem Table Object Type...
SNMP-capable devices. This feature is most often used to monitor network statistics such as usage and error rate. If SNMP monitoring is on, the PortMaster accepts SNMP queries. If SNMP monitoring is off, all SNMP queries are ignored.
Adding SNMP Read and Write Hosts PortMaster products allow you to control SNMP security by specifying the IP addresses of the hosts that are allowed to access SNMP information. The specification of read and write hosts allows another level of security beyond the community strings.
To clear alarms from the SNMP alarm table, enter the following command: Command> clear alarm alarm-id|all Refer to the PortMaster Command Line Reference for more information. Displaying the Routing Table Use the following command to display the IP routing table entries: Command>...
Separate static routes tables are maintained for IP and for IPX, which you display with the show routes and show ipxroutes commands. You construct a static route table manually on a PortMaster by adding and deleting static routes as described in the following sections. Refer to the PortMaster Routing Guide for information about routing and static routes.
The metric represents the cost of sending the packet through the gateway to the specified destination. Note – Never set the gateway for the PortMaster to an address on the same PortMaster; the gateway must be on another router.
50ms increments.The ticks metric is used in addition to the hops metric only on IPX networks. Note – Never set the gateway for the PortMaster to an address on the same PortMaster; the gateway must be on another router.
Page 65
255.255.255.240 subnet mask (a class C address subnetted on 28 bits). If routing broadcast is on, the PortMaster routing broadcast on Ether0 claims a route to the entire 192.168.9.0 network. Additionally, the broadcast on ptp1 claims a route to 172.16.0.0.
Page 66
The netmask table collapses routes on the boundaries specified. As a result, if one PortMaster has an assigned pool starting at 192.168.207.33, it broadcasts a host route to 192.168.207.32 instead of broadcasting a route to the 192.168.207.0 network. The other PortMaster routers consult their own netmask tables and convert that route back into a subnet route to 192.168.207.33 through 192.168.207.32.
If your gateway on the Ethernet is not a PortMaster product, the netmask table is not supported. However, you can set a static route on the gateway for each of the three destination networks for your assigned pools (192.168.207.0, 192.168.208.0, and 192.168.209.0), pointing at one of the PortMaster routers.
Setting the ISDN Switch You can configure the switch provisioning for ISDN PRI and BRI connections to PortMaster ISDN ports. See Chapter 11, “Configuring the PortMaster 3,” for details on PRI connections. See Chapter 12, “Using ISDN BRI,” for details on BRI connections.
“Setting OSPF on the Ethernet Interface” on page 4-8 Before configuring the Ethernet interface, you must make the appropriate Ethernet connection for your needs. Refer to the relevant installation guide for your PortMaster product for information on making the Ethernet connection.
PortMaster. Input Filters When an input filter is used, all traffic coming into the PortMaster on the Ethernet interface is compared to the input filter rules. Only packets permitted by the filter rules are accepted by the PortMaster.
To remove the input filter, omit the filter name when entering the command. Output Filters When an output filter is used, all traffic going out of the PortMaster on the Ethernet interface is compared to the output filter rules. Only packets permitted by the filter rules are sent by the PortMaster.
PortMaster Ethernet ports. If the setting has been changed, you must enable IP on the Ethernet interface of all PortMaster products attached directly to a local Ethernet. Disable IP traffic on this port only if the PortMaster is not attached to a local Ethernet network.
Ethernet IPX traffic is sent and received through the PortMaster Ethernet interface. You may enable IPX on the Ethernet interface on any PortMaster products attached directly to a local Ethernet. Disable IPX traffic on this port only if the PortMaster is not attached to a local Ethernet network.
Ethernet_II The encapsulation method and frame type were selected when your IPX network servers were installed. The IPX frame type you set on the PortMaster must match the frame type set for your network. Contact your IPX network administrator for information about the frame type used on your network.
With the subinterface feature of the ComOS, you can create up to 512 subinterfaces (the total number of interfaces available on a PortMaster) on a single primary Ethernet interface. Because you have the bandwidth of only a single Ethernet interface, however, efficiency begins to degrade significantly when you add more than 8 subinterfaces.
10 to 120 seconds; the default is 10 seconds. If the PortMaster stops receiving hello packets from a neighbor, it treats that router as inactive, or down. You can specify how long the PortMaster waits for hello packets from neighbors by using the dead-time Seconds keyword and value.
ISDN BRI,” gives an example of a dial-up synchronous office-to-office connection. Once a PortMaster is installed in each office and connected to the local Ethernet with an AUI, 10Base2, or 10BaseT connector, one or more asynchronous serial ports can be configured to dial another office or a set of offices when network traffic for the specified location exists.
Page 78
Connections to the Internet. You can set an asynchronous port for a continuous connection to an Internet service provider (ISP) by configuring it for continuous dial- out. In this configuration if the dial-out line is dropped, the PortMaster automatically reestablishes the connection.
PortMaster. Once the connection is established, the connected device such as a printer or modem can be accessed as if it were connected directly to the host. Ports can also be configured to be accessed by programs using TCP/IP sockets, or by Telnet from the network.
Command> set S0|all databits 5|6|7|8 Setting Flow Control The PortMaster can use either software or hardware flow control to communicate with the attached device to start and stop the flow of data. Because hardware flow control is more reliable, Lucent recommends that you set software flow control to off and hardware flow control to on.
To assign a port to a dial group, use the following command: Command> set S0 group Group Displaying Extended Port Information The PortMaster can display port information in brief or extended modes. The default setting is off. To enable or disable extended information for a port, use the following command: Command>...
General Asynchronous Port Settings Setting the Login Message The PortMaster allows you to specify a message for each port, up to 240 characters long, that is displayed to the user before login. To insert a new line, use a caret (^). Do not include double quotation marks within the message.
Command> set console S0 Setting the Port Idle Timer The idle timer is used to control how long the PortMaster waits after activity stops on a port before disconnecting a dial-in connection, and how long the PortMaster should wait for a response to a login, password, or host prompt.
To disable the idle timer, set it to 0. Configuring a PortMaster for Login Users A PortMaster can be configured to allow dial-in users to log in to a specified host. This configuration is called user login. In user login mode, the user is prompted for his or her login name after the attached modem answers and completes rate negotiation.
To configure a PortMaster for user login, use the following steps. These steps are described in more detail in later sections. 1. Set the port type to login. Command> set S0 login 2. Set the login service. Command> set S0 service_login portmaster|rlogin|telnet|netdata [Tport] 3.
5-10 Function PortMaster is the default login service and can be used to access any host that has the PortMaster in.pmd daemon installed. This type of login service is preferred because it makes the PortMaster port operate like a serial port attached to the host.
You can set the terminal type for a port if it has been configured as a user login or twoway port and you have set the login service to PortMaster, rlogin, or Telnet. The terminal type is passed as an environment variable when a connection is established with a host.
Page 88
You can provide access to host device ports by establishing a pseudo-tty connection to the port from a UNIX host with the PortMaster daemon software installed. In this case, the port operates as a host-controlled device. Figure 5-2 shows a host device configuration using the PortMaster device service and a pseudo-tty connection.
Page 89
Once the port type is set to accommodate a host device, the device service must be selected and the hostname entered. If the device service selected is PortMaster for pseudo-tty service, a hostname must be specified either in the port configuration or as the global default host.
When using the PortMaster device service, you must use a host device name listed in the /dev directory of each UNIX host with access to the shared device. The standard device entries have ranges like the following: •...
All ports with a common Telnet port number form a pool similar to the rlogin pool. Note – If you use Telnet to administer the PortMaster, select a TCP port number for your shared device port that is different from your administrative Telnet port.
In this configuration, the selected port allows an authorized user to connect to the network for mail, file, and other services through SLIP or PPP encapsulation. Figure 5-4 shows how the PortMaster provides network connectivity for remote users.
In this configuration, the port is used to establish communication from the PortMaster to an outside location. SLIP or PPP is used for these types of connections. Figure 5-5 shows an example of a dial-out-only configuration.
IP packets over standard asynchronous lines with a minimum line speed of 1200bps. These encapsulation methods allow you to establish connections on an as-needed basis to reduce telephone costs. 5-18 branch office modem PortMaster dial-out connection workstation 2 workstation 1 workstation 1 11820018 11820018 PortMaster Configuration Guide...
PPP. ComOS 3.3 and later releases support Multilink PPP as described in RFC 1717 on ISDN BRI ports, and all ports on the PortMaster 3. Note – Be sure to use the set S0 rts/cts command to enable hardware flow control (RTS/CTS) for all SLIP and PPP connections.
Hardwired connections on asynchronous ports provide the continuous connection advantage of a synchronous port at lower bandwidth, but without the cost of T1 line connection. 5-20 modem analog leased line workstation 2 PortMaster workstation 1 PortMaster 11820019 11820019 PortMaster Configuration Guide...
Page 97
To configure a port for a hardwired connection, follow this procedure: 1. Set the port for network hardwired. Command> set S0 network hardwired 2. Set the protocol. Command> set S0 protocol slip|ppp 3. Set the maximum transmission unit (MTU) size. Command>...
IPX traffic can be passed through a port if you assign an IPX network number to the hardwired network connection. Note – The IPX network number must be different from the IPX networks used on the Ethernets on either end of the connection. 5-22 PortMaster Configuration Guide...
Configuring RIP Routing As described in the PortMaster Routing Guide, PortMaster products automatically send and accept route information as part of RIP messages if RIP routing is turned on. To configure RIP routing for a network hardwired asynchronous port, use the following command: Command>...
Configuring a Port for a Dedicated Connection The PortMaster supports Stac LZS data compression only for PPP connections with bidirectional compression. Stac LZS data compression cannot be used for SLIP connections. To configure compression, use the following command: Command> set S0|W1 compression on|stac|vj|off Table 5-4 describes the results of using each keyword.
For more information about filters, see Chapter 9, “Configuring Filters.” Connecting without TCP/IP Support You can configure the PortMaster to connect to bulletin board service (BBS) systems or other hosts that have serial ports and allow bidirectional communications, but do not support TCP/IP.
Page 102
Connecting without TCP/IP Support Note – The PortMaster ignores the Data Set Ready (DSR) signal. Some PCs might require DSR high, but they do not tie DSR to DTR. 5-26 PortMaster Configuration Guide...
9600bps to T1 (1.544Mbps) or E1 (2.048Mbps) for continuous operation. A digital service unit/channel service unit (DSU/CSU) must be attached to the WAN port on the PortMaster. For more information, see Chapter 19, “Using Synchronous Leased Lines.”...
Page 104
Routing over ISDN. Integrated Services Digital Network (ISDN) provides fast dial-up connectivity for applications where the expense of a dedicated Frame Relay or leased line connection is not called for by the amount and nature of the traffic. For more information, see Chapter 12, “Using ISDN BRI.” PortMaster Configuration Guide...
Page 105
Figure 6-1 Synchronous WAN Connection IRX Router Once you have determined the type of synchronous connection to use between your remote locations, the synchronous port on each end of the connection must be configured. Configuring a Synchronous WAN Port workstation 1 workstation 2 IRX Router CSU/DSU...
To set the port type and the connection type, use the following command: Command> set W1 network dialin|dialout|twoway|hardwired Note – Some PortMaster products use S1 through S4 for the synchronous ports. Others use W1, or W0 through W59. Refer to your hardware installation guide for information...
Page 107
The port or line speed is set either by the external clock signal on the device to which the PortMaster is connected, or by the carrier. You can record this value as a reference associated with a synchronous port, but it has no effect on PortMaster behavior.
Page 108
38400 Setting Modem Control When modem control is on, the PortMaster uses the condition of the carrier detect (DCD) signal from an attached modem to determine whether the line is in use. Modem control is off for synchronous connections by default. With modem control set off, the PortMaster assumes the carrier detect line is always asserted.
The reset command always drops the DTR signal. Setting the Port Idle Timer The idle timer indicates how long the PortMaster waits after activity stops on a synchronous port before disconnecting a dial-in or dial-out connection. You can set the idle time in seconds or minutes, to any value from 0 to 240. The default setting is 0 minutes.
You can use any IP address. If you set the local address of the WAN port to 0.0.0.0 for PPP, the PortMaster uses the Ether0 address for the end of the serial link. If you set the WAN port address to 0.0.0.0 for a Frame Relay connection, the port is disabled.
Page 111
Command> set W1 ipxnet Ipxnetwork Configuring RIP Routing As described in the PortMaster Routing Guide, PortMaster products automatically send and accept route information as RIP messages. Turn on RIP routing for the port for network hardwired connections only such as leased lines or Frame Relay.
Page 112
Only packets permitted by the filter are passed through the PortMaster. If an output filter is attached, packets going to the interface are evaluated against the rule set in the filter and only packets permitted by the filter are sent out of the interface.
Page 113
To apply an input filter to a synchronous port, use the following command: Command> set W1 ifilter [Filtername] To apply an output filter to a synchronous port, use the following command: Command> set W1 ofilter [Filtername] You can remove filters from the port by entering the command without a filter name. If a filter is changed, you must reset the port for the change to take effect.
Page 114
Configuring WAN Port Settings 6-12 PortMaster Configuration Guide...
PortMaster. If you are using RADIUS, you must configure user attributes in individual user files in the RADIUS user database rather than in the PortMaster user table. Refer to the RADIUS Administrator’s Guide for more information.
Network users dial in to an asynchronous serial, synchronous serial, or ISDN port on the PortMaster. A connection is established as soon as the user logs in. A PPP or SLIP (on asynchronous ports) session is started. This type of connection can be used for dial-in users or for other routers that need to access and transfer data from the network.
The idle timer defines the number of minutes or seconds the line can be idle—in both directions—before the PortMaster disconnects the user. You can set the idle time in seconds or minutes, with any value between 2 and 240. The default setting is 0 minutes.
This method for assigning IP addresses to users is most commonly used when a large number of users are authorized to dial in. This option is used only for PPP sessions. Here, the PortMaster learns the IP address of the remote host using IPCP negotiation.
PortMaster. Each user’s connection requires a different IPX network number. If you use fffffffe as the IPX network number, the PortMaster assigns the user an IPX network number based on an IP address from the IP address pool.
The PortMaster neither broadcasts nor listens for RIP information from the local Ethernet. This is the default. The PortMaster broadcasts RIP information to the host at the other end of the connection. The PortMaster listens for RIP information from the host or other router.
Command> set user Username mtu MTU Setting the Maximum Number of Dial-In Ports You can define the number of dial-in ports that a user can use on the PortMaster for Multilink V.120, Multilink PPP (only on ISDN), and multiline load-balancing.
Only packets allowed by the filter are sent out of the PortMaster to the user. If either filter is changed while a user is logged on, the change will not take effect until the user disconnects and logs in again.
The location is stored in the location table. The PortMaster always calls back using the same port on which the user called in. Network users have PPP or SLIP sessions started for them, as defined in the user table.
Description This option allows the user to log in to the default or alternate host specified for this PortMaster. You can specify the default host with the set host command shown on page 17-5. This option allows the user to log in to a host by IP address or name at the time the login session is established.
7-12 Function PortMaster is the default login service and can be used to access any host that has the PortMaster in.pmd daemon installed. This type of login service is preferred because it makes the PortMaster port operate like a serial port attached to the host.
You can configure the login user for callback connections to enhance network security or to simplify telephone charges. When a user logs in, the PortMaster disconnects the user and then dials out to the telephone number specified for that user. The user is reconnected to the host specified in the user table, via the same port on which the user dialed in.
Locations are stored in the location table. All dial-out locations have the following minimum settings: • Location name • Name and password that the local PortMaster uses to authenticate itself to the remote host • Telephone number of the remote host •...
Page 130
A location table display looks like the following. The location table entries shown here are examples only. PortMasters have empty locations tables by default. Location Destination ----------- ----------------- 172.16.1.1 192.168.1.21 sub1 192.168.3.1 172.16.1.21 Netmask Group Maxcon ---------------- -------- ---------- 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 PortMaster Configuration Guide Type -------------- On Demand Manual Manual Manual...
Because the default method of initiating a connection is manual, you need to use the dial command to cause the PortMaster to manually dial out to a location. You can change the connection type as shown in Table 8-1. If you are changing an existing location’s connection type, verify that the connection is not active.
Note – When configuring a dial-on-demand location, be careful not to have the on-demand location be the route to the loghost, RADIUS server, RADIUS accounting server, or any host for a port using the PortMaster login or device service, unless you understand the effect of these services upon dial-on-demand.
Command> set location Locname telephone String Setting the Username and Password The username and password are what the PortMaster uses to authenticate itself to the remote host. Note that the username and password you enter here must also be resident on the remote host (in the user table, RADIUS, or other authentication mechanism).
If you are using the IPX protocol, you must assign a unique IPX network number to the network connection between the remote host and the PortMaster. Enter the IPX network number in the hexadecimal format described in Appendix A, “Networking Concepts.”...
Setting RIP Routing You can associate RIP routing with locations—for example, a dial on-demand connection where the remote router is defined as a location on the local PortMaster. As described in the PortMaster Routing Guide, PortMaster products automatically send and accept route information as RIP messages.
MTU, it is automatically fragmented. An IPX packet that exceeds the specified MTU is automatically dropped. PPP connections can have a maximum MTU of 1500 bytes. SLIP connections can have a maximum MTU of 1006 bytes. With PPP, the PortMaster can negotiate smaller MTUs when requested during PPP negotiation.
Page 137
For PPP connections, the PortMaster supports both bidirectional and unidirectional compression. Refer to RFC 1144 for more information about header compression. The PortMaster supports Stac LZS data compression only for PPP connections with bidirectional compression. Stac LZS data compression cannot be used for SLIP connections.
PortMaster disconnects the connection. You can set the idle time in seconds or minutes, to any value from 0 to 240. The default setting is 0 minutes. If the value is set to 2 seconds or a longer interval, the port is reset after having no traffic for the designated time.
This capability is called multiline load balancing. You can define a threshold known as a high-water mark for a location. The high-water mark triggers the PortMaster to bring up an additional connection to the location when the amount of data specified by the high-water mark is queued.
When more than one line is open to a given location, the PortMaster balances the load across each line. When the ports are idle for the time specified by the set location idletime command (see “Setting the Idle Timer”...
This value is used only when the maximum number of ports is greater than one. The default high-water mark is zero. To set the high-water mark in bytes for a location, use the following command: Command> set location Locname high_water Number Setting Filters You can attach input and output filters to each location.
This keyword also resets some debugging values previously set with set debug. When your location is configured correctly, change the connection type from manual to continuous or on-demand. To test your configuration, use the following command: Command> dial Locname [-x] 8-14 PortMaster Configuration Guide...
“Restricting User Access” on page 9-15 Each topic in this chapter includes examples of filters used to accomplish the goal described. See the PortMaster Command Line Reference for more detailed command descriptions and instructions. Overview of PortMaster Filtering Packet filters can increase security and decrease traffic on your network. Filters can be used to limit certain kinds of internetwork communications by permitting or denying the passage of packets through network interfaces.
A maximum of 256 filter rules per filter is allowed for the PortMaster 3 and IRX. For other PortMaster products, the maximum number of filter rules allowed is 100. The PortMaster generates an error message when the number of filter rules exceeds the limit.
TCP status Filter Organization Filters are stored in a filter table in the PortMaster nonvolatile configuration memory. Filters can be created or modified at any time, and the changes are not applied to an active use of the filter. Filter names must be between 1 and 15 characters.
Overview of PortMaster Filtering A maximum of 256 filter rules per filter is allowed for the PortMaster 3 and IRX. For other PortMaster products, the maximum number of filter rules allowed is 100. The PortMaster generates an error message when the number of filter rules exceeds the limit.
A maximum of 256 filter rules per filter is allowed for the PortMaster 3 and IRX. For other PortMaster products, the maximum number of filter rules allowed is 100. The PortMaster generates an error message when the number of filter rules exceeds the limit.
You can create a rule that filters IP packets according to their source and destination IP addresses. For more information on the command syntax for creating filters, see the PortMaster Command Line Reference. To create an IP filter rule that filters by address, use the following command—entered on one line: Command>...
Filtering TCP and UDP Packets TCP Packets You can filter TCP packets by source and destination IP address, or by TCP port number. Appendix B, “TCP and UDP Ports and Services,” lists port numbers commonly used for UDP and TCP port services. For a more complete list, see RFC 1700. To create a TCP filter rule, use the following command—entered on one line: Command>...
To display the filter table, use the following command: Command> show table filter To display a particular filter, use the following command: Command> show filter Filtername Deleting Filters To delete a filter, use the following command: Command> delete filter Filtername PortMaster Configuration Guide...
Example Filters Because filters are very flexible, you must carefully evaluate the types of traffic that a specific filter permits or denies through an interface before attaching the filter. If possible, a filter should be tested from both sides of the filtering interface to verify that the filter is operating as you intended.
Permits FTP connections to host 172.16.0.4. Permits Hypertext Transfer Protocol (HTTP) access to host 192.168.0.5. Permits an FTP data channel. Permits DNS. Permits DNS zone transfers. (You can write this rule to allow only connections to your name servers.) 9-10 PortMaster Configuration Guide...
Table 9-3 Description of Internet Filter (Continued) Rule Description Permits ICMP packets. Input and Output Filters for FTP Packets Filters can be used to either permit or deny File Transfer Protocol (FTP) packets. You must understand how this protocol works before you develop FTP filters. FTP uses TCP port 21 as a control channel, but it transfers data on another channel initiated by the FTP server from TCP port 20 (FTP-data).
To permit incoming RIP packets, add the following rule to your input filter: Command> set filter filtername RuleNumber permit 172.16.0.0/32 192.168.0.0/32 udp dst eq 520 In the above example, 172.16.0.0/32 is the other end of the Internet connection and 192.168.0.0/32 is the local address of the connection. 9-12 PortMaster Configuration Guide...
Rule to Allow Authentication Queries To allow authentication queries used by some mailers and FTP servers, add the following rule to your input filter: Command> set filter filtername RuleNumber permit tcp dst eq 113 For more information about these types of queries, refer to RFC 1413. Rule to Allow Networks Full Access To allow some other network to have complete access to your network, add the following rule.
Page 156
ICMP packet types to types 0, 3, 8, and 11 using four rules instead of one. To log all packets that are denied, add the following rule to the end of your filter: Command> set filter filtername RuleNumber deny log 9-14 PortMaster Configuration Guide...
Restricting User Access Access filters enable you to restrict Telnet or rlogin connections to a specific host or network, or a list of hosts or networks. You can create an access filter that restricts user access to particular hosts. Access filters work as follows: 1.
Page 158
Restricting User Access 9-16 PortMaster Configuration Guide...
See the PortMaster Command Line Reference for more detailed command descriptions and instructions. Because the PortMaster is a DTE device, a straight-through RS-232 cable is used to connect modems to it. Straight-through cables for modems use pins 2, 3, 4, 5, 6, 7, 8, and 20.
DTE rate, and the modem initialization string. For convenience, the table is preconfigured by Lucent for many common modems. When you specify the name of the modem and the attached port, the PortMaster automatically configures the modem for you, provided the modem is in the factory default state when it is initialized.
Note – Use a \r for a carriage return, and a caret (^) to separate the send and expect characters in the string. In the example above, the PortMaster expects OK. Never use on or off for a modem short name.
For example; to associate a U. S. Robotics V.34 modem with port S1 and configure the modem, enter: Command> set s1 modem usr-v34 Command> reset s1 10-6 Rate Initialization String 57600 AT&F1&W 11520 AT&F1S0=1&W 57600 AT&F1S0=1&W 11520 AT&F1S0=1&W 57600 AT&F1S0=1S10=20S13.0=1&W0 11520 AT&F1S0=1S10=20S13.0=1&W0 57600 AT&FM0&D2S0=1S2=1 PortMaster Configuration Guide...
Setting the Port Speed The speed of a port is defined as the DTE baud rate. The PortMaster allows you to specify three different baud rates for each port and one baud rate for host device ports.
Set modem control on if you want to use the DCD signal for modem connections. When modem control is on, the PortMaster uses the condition of the carrier detect line to determine whether the line is in use. Modem control must be on for PortMaster outbound traffic.
Request to Send (RTS) signal on pin 4 of the RS-232 connector. The PortMaster sends information to the attached device only when the Clear to Send (CTS) modem line on pin 5 of the RS-232 connector is raised.
Page 168
Configuring Ports for Modem Use 10-10 PortMaster Configuration Guide...
This chapter describes how to use the command line interface to configure the ISDN Primary Rate Interface (PRI) Line0 and Line1, and the digital modems on the PortMaster 3. The PortMaster 3 can also use many of the commands common to all PortMaster models.
Note – T1 and E1 lines require an external clock signal provided by the device to which the PortMaster is connected, or by the telephone company network. To configure a line, use the following command. Table 11-1 explains the line use options.
Warning – If you configure a line for fractional T1 and reboot the PortMaster 3 before configuring the group and channels, you will no longer be able to see and configure the line. You must erase your entire configuration and reboot to see the line again.
Setting the ISDN PRI Switch The switch type information is available from your ISDN PRI service provider. To set the switch type for ISDN connections to the PortMaster ISDN PRI ports, use the following command—entered on one line Command> set isdn-switch ni-2|dms-100|4ess...
E1 lines. Frame Alignment Signal, an alternative format for E1 lines. Description Line0 or Line1. Bipolar 8-zero substitution. This is the default for T1 lines. Alternate mark inversion. High-density bipolar 3. This is the default for E1 lines. PortMaster Configuration Guide...
To set a telephone number for an individual port when the line is configured as ISDN B channels, use the following command. Table 11-9 explains the directory number options. Command> set S0 directory Number Configuring the PortMaster 3 Description Line0 or Line1. Default method for T1 PRI lines.
Options Number Using True Digital Modems Use the following settings to configure the built-in digital modems on the PortMaster 3. Setting Digital Modems The digital modems are numbered from m0 to m59, for a maximum of 60 modems. Modem slot 0 is allocated numbers m0 through m9, modem slot 1 is allocated numbers m10 through m19, and so on.
You can display the status for all digital modems. Modem states are as follows: • ACTIVE—in use • READY—available for use • ADMIN—busy Configuring the PortMaster 3 Description Location name that is in the location table. Enables analog modem service on dial-out. Disables analog modem service on dial-out. Using True Digital Modems 11-9...
The telephone company will ask you the following two questions when you order digital service level 1 (DS-1) service: • What signaling protocol do you use? You can use either of the following signaling protocols on the PortMaster 3: – E & M wink start –...
Command> show Line0 Example Channelized T1 Configuration To configure the Line1 port on a PortMaster 3 for inband, channelized T1 for inbound calls using E & M wink start, extended superframe format, and bipolar 8-zero substitution, use the following commands: Command>...
In addition to line2, a new port is added to the list of active ports. In a single-PRI PortMaster 3, the port is identified as W2; in a two-PRI PortMaster 3 it is identified as W48. If the Stac compression card is present in the PortMaster 3, Stac compression can be enabled for the T1 line.
DSU/CSU extracts timing from the line. Configuring the T1 Expansion Card for Fractional T1 The T1 card is identified as line2 in the PortMaster 3. Follow these steps to configure the PortMaster 3 to use fractional T1 service: 1.
WANCTL: sync_init - found device Use the show alarms command to determine whether the T1 card is not operating (for example, if the cable is pulled out). The PortMaster does not show an alarm if the card is removed. Command> show alarms...
Displaying Multichassis PPP Addresses To display the addresses of the neighboring PortMasters in the same Multichassis PPP group, and a list of connections to virtual and physical ports on the PortMaster, use the following command: Command> show mcppp Disconnecting a User from a Virtual Port To disconnect a user attached to a virtual port, you must reset the port.
Debug information is displayed to the console. To set debug flags used for troubleshooting, use the following command—entered on one line: Command> set debug mdp-status|mdp-events|mcppp-event on|off Table 11-12 explains the debug options for the PortMaster 3 Table 11-12 Debug Options for the PortMaster 3 Option mdp-status...
This chapter describes how to configure the PortMaster to connect two local area networks (LANs) via ISDN using V.25bis dialing on a Basic Rate Interface (BRI) with an integrated network termination device (NT1). This chapter also provides an example to demonstrate this type of configuration.
Page 186
Overview of ISDN BRI Connections For the ISDN S/T interface, a PortMaster requires an external terminal adapter to connect from the PortMaster synchronous port to the ISDN link. For terminal adapters that do not have automatic dialing or for administrators who want to manually connect with the terminal adapter, the PortMaster supports automatic location table scripting.
To help you determine the kind of provisioning you require for your ISDN setup, refer to the information in the hardware installation guide and on the Lucent Remote Access website at http://www.livingston.com. Using ISDN BRI workstation 1 workstation 2 PortMaster 2e workstation 3 ISDN New York System Link Network NT1...
Configuring ISDN Configuring ISDN This section describes the commands that you need to configure a PortMaster for ISDN BRI service. ISDN BRI Switch Types The North American ISDN U interface and international S/T interface require different switch type settings on your PortMaster.
To set the ISDN switch type for an ISDN BRI S/T interface, use the following commands: Command> set isdn-switch net3|vn4|1tr6|ntt|kdd Command> reboot Note – You must reboot the PortMaster after changing the switch type for the change to take effect. Service Profile Identifier (SPID) for ISDN BRI The service profile identifier (SPID) is a unique number assigned by the telephone company that identifies your ISDN equipment to the telephone company’s switch.
The terminal identifier (TID) is a numeric value used by some telephone switches for additional identification. Some telephone companies require the SPID, while others require a TID, as well. When configuring the PortMaster, append the TID to the SPID if required by your carrier.
Multilink PPP Multilink PPP V.120 is supported on analog and ISDN interfaces. The PortMaster accepts and detects both multiline load balancing and Multilink PPP connections. Multiple lines can be used to increase bandwidth, either using Multilink PPP as defined in RFC 1717 or using Lucent’s multiline load balancing.
BRI line to receive calls not intended for the PortMaster. When the MSN feature is disabled, the PortMaster rejects the call if a port is not available. In this case other S/T connected devices are not given an opportunity to check or accept the call.
1. Use a cable with RJ-45 connectors to connect the BRI port to the ISDN telephone line. Caution – Do not plug an analog telephone line into the PortMaster BRI port. The PortMaster could be damaged. Using ISDN BRI...
Page 194
Configure ISDN port settings (page 12-12). d. Configure dial-in users (page 12-13). e. Configure dial-out locations (page 12-14). 3. Configure the following settings for the PortMaster in San Francisco: a. Configure global settings (page 12-16). b. Configure Ethernet interface settings (page 12-16).
S.F. Ether0 192.168.100.1/24 Configuring the PortMaster in Denver The PortMaster in Denver is being configured for an ISDN dial-up connection to the PortMaster in San Francisco. Configuring Global Settings Configure the global settings on the PortMaster in Denver to the values shown in Table 12-3.
Configure the ISDN port with the values shown in Table 12-5 for the example in this chapter. This example assumes that the BRI used is port S1-S2 on a PortMaster ISDN Office Router (OR-U). If your application uses ports S10 through S29 on a...
Synchronous WAN Port.” Configuring a Dial-In User A user account must be set up on the PortMaster router in Denver so that PortMaster in San Francisco can dial in when traffic is queued. The new user sf should be configured with the values shown in Table 12-6.
“Configuring Dial-In Users.” Configuring a Dial-Out Location A location entry on the PortMaster in Denver must be created for the location identified as sf. This allows the PortMaster router in Denver to call the PortMaster in San Francisco when network traffic is queued. The new location sf should be configured with the values shown in Table 12-7.
Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
Page 200
Command set ether0 ipx enable set ether0 address 192.168.100.1 set ether0 netmask 255.255.255.0 set ether0 ipxnet F2 set ether0 ipxframe ethernet_802.2 set ether0 broadcast high set ether0 rip on PortMaster Configuration Guide...
Page 201
Configure the ISDN port with the values shown in Table 12-10 for the example in this chapter. This example assumes that the BRI used is port S1-S2 on a PortMaster ISDN Office Router (OR-U). If your application uses ports S10 through S29 on a PortMaster 2E, adjust these values accordingly.
Page 202
ISDN BRI Unnumbered IP Configuration Example Configuring a Dial-In User A user account must be set up on the PortMaster router in San Francisco so that PortMaster in Denver can dial in when traffic is queued. The new user denver should be configured with the values shown in Table 12-11.
Page 203
Configuring a Dial-Out Location A location entry on the PortMaster in San Francisco must be created for the location identified as denver. This allows the PortMaster router in San Francisco to call the PortMaster in Denver when network traffic is queued. The new location denver should be configured with the values shown in Table 12-12.
Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
Troubleshooting an ISDN BRI Connection Most ISDN configurations come up with little trouble if you have configured the PortMaster using information from your telephone company. However, if you are having problems, use the information in this section to try to debug your configuration.
Command> set debug 0x51 For more information about the interpreting the results of the debug command, refer to the PortMaster Troubleshooting Guide. After you verify that the PPP negotiation is correct, enter the following commands to turn off the debug utility: Command>...
PortMaster routers support Frame Relay over synchronous ports. This chapter uses an example to demonstrate how to configure the PortMaster to connect to a synchronous line using Frame Relay. This chapter also explains how to...
Overview of Frame Relay PVCs and DLCIs PortMaster products support permanent virtual circuits (PVCs). PVCs are used to form a connection between any two devices attached to a Frame Relay cloud. Each PVC is given a unique number on each physical circuit along the path between the two devices.
Discarding Frames The PortMaster pushes as much data out of the serial port as it can at port speed for any PVC that has traffic, regardless of CIR. The Frame Relay switch passes as much of the data as possible on to the next link. However, once a particular PVC has transmitted its CIR-worth of bits each second, the switch marks any additional frames as “discard...
DLCIs during the synchronous port configuration. Alternatively, the PortMaster can discover DLCIs dynamically with LMI or Annex-D and learn the IP addresses of the other routers through Inverse ARP if the other routers on your Frame Relay cloud support Inverse ARP as specified in RFC 1490.
Frame Relay switch. If LMI is enabled on the switch, you must enable LMI on the PortMaster. The default keepalive value is 10 seconds. However, if your telephone company chooses another keepalive value, change this value as they instruct you.
DLCIs that are accessible through the Frame Relay network by this interface. The PortMaster uses Inverse ARP to learn the IP addresses of routers attached to the PVCs represented by the specified DLCIs, if those routers support Inverse ARP.
Configuration Steps for a Frame Relay Connection The example described in this chapter connects a PortMaster router located in a main office (Bangkok) with a PortMaster router located in a branch office (New York) using Frame Relay on a synchronous interface.
Configuration Steps for a Frame Relay Connection Configuring the PortMaster in Bangkok Configure the settings for the PortMaster in Bangkok with the values in the following sections. Configuring Global Settings Configure the global settings on the PortMaster in Bangkok to the values shown in Table 13-1.
Configuring the PortMaster in New York Configure the settings for the PortMaster in New York with the values in the following sections. You do not need to specify a gateway for the PortMaster in New York because it is on the Internet.
Page 216
Command set w1 network hardwired set w1 protocol frame set w1 address 92.168.1.20.2 set w1 netmask 255.255.255.0 set w1 cd on set w1 rip listen set w1 annex-d 10 (LMI can be used instead of Annex-D) PortMaster Configuration Guide...
Command> reset w1 Command> save all If LMI or Annex-D is set, the PortMaster receives DLCI information in the full status update messages from the Frame Relay switch. The PortMaster then attempts to discover IP addresses of other routers using Inverse ARP. You can set DLCI lists statically as well.
In this configuration, the DLCIs are divided between the subinterfaces through the use of the location table and the DLCI table. Each subinterface must have its own subnet or assigned network. The PortMaster has a limit of 512 total active interfaces, which can be further limited by available memory.
Adding a Location To configure a Frame Relay subinterface, you add a location for each interface, configure it with the frame protocol, and associate it with a dial group. Then associate a synchronous port with the same dial group. For example, to create a location called sub1, enter the following commands: Command>...
If you have a Cisco router on the other end of your connection, verify that it is set for encapsulation frame-relay ietf for the serial interface; otherwise, the Cisco frame-relay map command for your DLCI must have the ietf keyword appended. 13-14 PortMaster Configuration Guide...
Example: Configuring a Frame Relay Subinterface This set of example commands configures a PortMaster IRX-111 router with Frame Relay packets coming into port S1 with DLCIs 16, 17, and 18. Port S1 has already been configured for Frame Relay, so that portion is not shown here. The following commands split the Frame Relay port into a primary subinterface for DLCI 18 and a secondary subinterface for DLCIs 16 and 17.
When connecting an asynchronous ISDN terminal adapter to an asynchronous port using AT commands to dial, configure the PortMaster just as you would for a modem. Refer to Chapter 15, “Using Office-to-Office Connections,” and Chapter 16, “Using Internet Connections,”...
Page 224
Figure 14-1 Example of an ISDN or Switched 56Kbps Connection 14-2 workstation 1 IRX Router IRX Router terminal adapter workstation 3 workstation 1 workstation 2 Boston workstation 2 Miami terminal adapter IRX Router IRX Router workstation 3 11820007 11820007 PortMaster Configuration Guide...
The example in this chapter shows variables in italics. Change these values to reflect your network. Once you have assigned an IP address to the PortMaster, continue with the following steps: 1. Configure the following settings for the PortMaster in Boston: a.
Page 226
Command> save all 14-4 Command set gateway 192.168.1.1 set sysname boston Command set ether0 address 192.168.200.1 set ether0 netmask 255.255.255.0 set ether0 ipxnet F1 set ether0 ipxframe ethernet_802.2 set ether0 broadcast high set ether0 rip on PortMaster Configuration Guide...
Page 227
Synchronous WAN Port.” Configuring a Dial-In User A user account must be set up on the PortMaster router in Boston so the PortMaster in Miami can dial in when traffic is queued. The new user miami should be configured on the PortMaster router in Boston with the values shown in Table 14-4.
Page 228
Chapter 7, “Configuring Dial-In Users.” Configuring a Dial-Out Location A location entry on the PortMaster in Boston must be created for the location identified as miami. This allows the PortMaster in Boston to call the PortMaster in Miami when network traffic is queued.
Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
Page 230
(This is the address of the next upstream router.) set default on set sysname miami Command set ether0 ipx enable set ether0 address 192.168.1.1 set ether0 netmask 255.255.255.0 set ether0 ipxnet F2 set ether0 ixpframe ethernet_802.2 set ether0 broadcast high set ether0 rip on PortMaster Configuration Guide...
Page 231
After you configure the Ethernet interface as shown in Table 14-7, enter the following command to save the configuration: Command> save all For more information on Ethernet settings, refer to Chapter 4, “Configuring the Ethernet Interface.” Configuring Synchronous WAN Port Settings Configure the synchronous WAN port with the values shown in Table 14-8.
Page 232
Configuration Steps for a Synchronous V.25bis Connection Configuring a Dial-In User A user account must be set up on the PortMaster router in Miami so the PortMaster in Boston can dial in when traffic is queued. The new user boston should be configured on the PortMaster in Miami with the values shown in Table 14-9.
Page 233
Configuring a Dial-Out Location A location entry on the PortMaster in Miami must be created for the location identified as boston. This allows the PortMaster router in Miami to call the PortMaster router in Boston when network traffic is queued. The new location boston should be configured on the PortMaster in Miami with the values shown in Table 14-10.
Reset the port. b. Check your configuration. Dial Boston again. d. Repeat this procedure until the connection is made correctly. 5. When you have configured the PortMaster correctly, reset the port and save the configuration. Command> reset w1 Command> save all...
V.35 interface on your CSU/DSU. • Verify that the CSU/DSU or synchronous terminal adapter is providing the clock to the PortMaster. The CSU/DSU or terminal adapter can generate the clock or receive it from the carrier. •...
The example described in this chapter connects a PortMaster Office Router located in a branch office in London with a PortMaster 2 in the headquarters in Paris. These models are used as an example; you can use any PortMaster for this configuration.
Page 238
Figure 15-1 Office-to-Office Dial-On-Demand Configuration workstation 1 PCMCIA modem London Paris The PortMaster ISDN Office Router OR-U has an ISDN BRI port designated S1/S2 instead of a PCMCIA modem port. The ISDN port can be used for ISDN dial-on-demand connections. 15-2 workstation 2...
Once you have assigned an IP address to the PortMaster, continue with the steps. The following values shown in this chapter apply only to this example; when you are configuring your PortMaster, use values appropriate for your network.
Configuration Steps for an Office-to-Office Connection Configuring the Office Router in London Configure the following settings on the PortMaster PCMCIA Office Router in the London office to enable London office users to access the main office network in Paris on demand.
Page 241
For more information on Ethernet settings, refer to Chapter 4, “Configuring the Ethernet Interface.” Configuring PCMCIA Serial Port Settings The PCMCIA modem port on the PortMaster Office Router is designated S1. Configure the port with the values shown in Table 15-3. You must install the PCMCIA modem to configure port S1.
Page 242
You must set up a user account on the Office Router in the London office so the PortMaster 2 in the Paris office can dial in when traffic is queued at the main office. The new user paris should be configured with the values shown in Table 15-4.
Page 243
Dial-Out Location Settings for London You must create a location entry on the PortMaster Office Router in the London office for the Paris office. This entry allows the Office Router in the London office to call the PortMaster 2 in the Paris office when network traffic is queued. The new location paris should be configured with the values shown in Table 17-5.
For more information about configuring location table settings, refer to Chapter 8, “Configuring Dial-Out Connections.” Configuring the PortMaster in Paris In the example, the remote machine is a PortMaster 2 Communications Server in the Paris office. Configuring Ethernet Interface Settings Configure the Ethernet settings for the Paris office shown in Table 15-6.
Page 245
Configuring Dial-Out Port Settings For all ports on the PortMaster in Paris that you want enabled for dial-in and dial-out (two-way service) to the Office Router in the London office, enter the values shown in Table 15-7. Table 15-7 Two-Way Port Values...
Page 246
Configuration Steps for an Office-to-Office Connection Configuring a Dial-In User A user account must be set up on the PortMaster in Paris so the Office Router in the London can dial in when traffic is queued. The new user london should be configured with the values shown in Table 15-8.
Page 247
Configuring Dial-Out Location Settings You must create a location entry on the PortMaster in Paris for the London office. This entry allows the PortMaster in Paris to call the PortMaster in the London office when network traffic is queued. Configure a new location london with the values shown in Table 15-9.
Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
Multiline load balancing is used to add additional lines when network traffic is heavy. If more than one line to the same location is established, the PortMaster balances the traffic among the lines. To configure the Office Router for multiline load balancing, you must attach an external modem to the console port.
Page 250
Table 15-10 Location Settings for Load Balancing Setting Maximum ports High-water mark 15-14 London workstation 2 workstation 1 System Link Network PortMaster Office Router PortMaster Office Router PCMCIA modem modem PortMaster workstation 2 workstation 3 Command set location paris maxports 2...
Using ISDN for On-Demand Connections Using the ISDN BRI port on the PortMaster ISDN Office Router (OR-U) is very similar to using the PCMCIA port on the OR-M, except that you must do the following: •...
Page 252
Using ISDN for On-Demand Connections 15-16 PortMaster Configuration Guide...
Using Internet Connections This chapter uses an example to demonstrate how to configure the PortMaster to establish a continuous connection to an Internet service provider (ISP), shown in Figure 18-1. This connection creates a gateway from your office to the Internet using a dial-out connection through one of the serial ports on your PortMaster.
Page 254
Figure 16-1 Continuous Internet Connection System Link Network PortMaster PortMaster Office Router office Internet Internet service provider 11820010 11820010 16-2 PortMaster Configuration Guide...
Configuration Steps for an Internet Connection The example described in this chapter connects a PortMaster router located in an office (office1) with an ISP (isp1) using Frame Relay on a synchronous interface. To install your PortMaster, follow the instructions in your hardware installation guide. If you need additional help, refer to the troubleshooting chapter of the installation guide.
2. Test the configuration (page 16-8 or page 16-9). 3. Set network filtering (page 16-10). Alternatively, you can configure a PortMaster with an ISDN port for an Internet connection. See “Using ISDN for Internet Connections” on page 16-11. Configuring Global Settings Configure the global settings to the values shown in Table 16-1.
Page 257
Table 16-2 Ethernet Port Parameter Values Setting IP address Netmask Broadcast address After configuring the Ethernet interface, enter the following commands to reset it and save the configuration: Command> reset ether0 Command> save all For more information on Ethernet interface parameters, refer to Chapter 4, “Configuring the Ethernet Interface.”...
Page 258
1500 set s1 speed 1 115200 set s1 cd on set s1 rts/cts on set s1 xon/xoff off set s1 destination 192.168.5.6 set s1 netmask 255.255.255.0 set s1 rip off set s1 compression on PortMaster Configuration Guide...
Asynchronous Port.” Configuring a Dial-Out Location If you are using a continuous dial-out link, a location entry on the PortMaster must be created for the location identified as isp1. This entry allows the PortMaster to establish a connection with the ISP as soon as it is booted. The new location isp1 should be configured with the values shown in Table 16-5, or as instructed by your ISP.
Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
Command> show s1 3. If there is a problem, check your configuration. Contact your ISP if you are unable to connect as expected. 4. When you have configured the PortMaster correctly, reset the port and save the configuration. Command> reset s1 Command>...
53 permit tcp dst eq 53 permit icmp If you have not configured a name server for the PortMaster, use IP addresses instead of hostnames when creating filters. Table 16-6 provides a line by line description the filter.
If your domain name server is outside your local network, refer to “Input and Output Filters for FTP Packets” on page 9-11. Using ISDN for Internet Connections Using the ISDN port on a PortMaster is very similar to using the serial port, except that you must do the following: •...
Page 264
Using ISDN for Internet Connections 16-12 PortMaster Configuration Guide...
Providing User Dial-In Access This chapter uses an example to demonstrate how to configure a PortMaster for remote dial-in access to local hosts and networks. Although the example shows how Internet service providers (ISPs) can provide dial-in access to their users, this application can be used by academic environments, corporate telecommuters, or anyone else needing remote access to a host or network.
Page 266
The same application can be used by companies to allow remote users to access their own accounts on the corporate network. Once the PortMaster authenticates users, they can access network resources as if they were connected to the corporate network directly.
IP address of host running backup RADIUS IP address of host that shell users log in to IP addresses reserved for future hosts IP address and name of first PortMaster IP addresses and names for additional PortMasters Reserved pool of assigned addresses for...
Note – This example uses a PortMaster 2E Communications Server. If you are using a PortMaster 25, the numbers of assigned pools can be moved closer together.
2. Make sure that the modem cables are securely fastened and that you provide enough room for the modems to stay cool. Configuring Global Settings Configure the global settings on the first PortMaster to the values shown in Table 17-2. Table 17-2 Global Values...
Command> save all Configuring Ports You must configure each port you are using for dial-in on the first PortMaster, plus its attached modem. Configuring Ethernet Port Settings Set the Ethernet port on the first PortMaster to the values shown in Table 17-3.
Page 271
Automatically answers on the first ring If you have already configured your modems on another machine, you should connect to the modem through the PortMaster and set the modem back to the factory default. Then use the recommended modem string to properly configure each modem.
Configuring Users Because no more than approximately one hundred users can be configured in the user table and stored in nonvolatile memory on the PortMaster, you should use RADIUS for user authentication when configuring multiple PortMaster Communication Servers to handle more than a few dozen users each. This example assumes the use of RADIUS.
Note – Use the instructions in this section only if you are not using RADIUS and you are not using pass-through logins. A user account must be set up on the PortMaster for each authorized user. You should configure each new user user1, user2, and so on, with the values shown in Table 17-6.
Configuration Steps for Dial-In Access A user account must be set up on the PortMaster for each authorized network user. Each new user usera, userb, and so on should be configured with the values shown in Table 17-7. Table 17-7...
Page 275
Reset the port. b. Check your configuration. Dial the PortMaster again. d. Repeat this procedure until the connection is made correctly. 5. When you have configured the PortMaster correctly, reset the ports and save the configuration. Command> reset all Command> save all...
This chapter uses an example to demonstrate how to configure the PortMaster to connect from networked hosts to shared devices attached to the PortMaster. This type of connection provides user access to modems, printers, and other RS-232 devices. The following topics are described: •...
Overview of Shared Device Access Methods Once a port is defined as a host device, you configure it with the PortMaster device service, and select a pseudo-tty terminal. The host device port can now be accessed if you establish a pseudo-tty connection to the port from a UNIX host with the PortMaster daemon software installed.
Page 279
The example described in this chapter allows a user to dial in to port S2 on the PortMaster, log in to a workstation, and access a serial printer attached to port S9 as /dev/ttyre, using the PortMaster device service. The workstation user can also access port S2 as /dev/ttyrf when it is not being used for login service.
The example in this chapter shows variables in italics. Change these values to reflect your network. Once you have assigned an IP address to the PortMaster, continue with the following steps: 1. Attach the modem to port S2 with a straight-through cable.
After you configure global settings as shown in Table 18-1, enter the following command to save the configuration: Command> save all Configuring Port Settings You must configure settings for your Ethernet interface, dial-in-and-out (two-way) port, and printer port. You can connect the printer to either a serial port or a parallel port. Ethernet Interface Settings Configure the Ethernet interface to the values shown in Table 18-2.
Page 282
(If you turn security on, you must also configure the user table or RADIUS.) set s2 service_login portmaster set s2 service_device portmaster PortMaster Configuration Guide...
Page 283
Configuration Steps for Shared Device Access Command set s9 device /dev/ttyre set s9 speed 1 9600 set s9 speed 2 9600 set s9 speed 3 9600 set s9 cd on set s9 xon/xoff on set s9 host default set s9 service_device portmaster 18-7...
Command> save all Configuring a Network Device for Telnet Access To access modems or other devices attached to PortMaster ports via Telnet, use the general configuration given earlier in this chapter but use the settings shown in Table 18-6. This example is for port S1.
Page 285
Configuration Steps for Shared Device Access The value pm1 is the hostname of the PortMaster you are accessing, and 6001 is the TCP port set for the port you are accessing. You can also set several ports to the same TCP port to create a pool of ports available for Telnet access.
(2.048Mbps). This chapter also describes how to configure a dial backup connection for your synchronous line. The example described in this chapter connects a PortMaster router located in one office with a PortMaster router located in another office using a dedicated leased line.
Page 288
Appendix A, “Networking Concepts.” In the leased line configuration described in this chapter, the Ethernet address of the PortMaster routers is used as the address for the serial link in a point-to-point unnumbered serial connection. Because the PortMaster relies on an external clock...
PPP operation and can have input and output filters for network security. Note – The PortMaster also supports numbered IP interfaces on leased lines, but Lucent does not recommended this method because it wastes IP address space.
Configuration Steps for Leased Line Connections Configuring the PortMaster Office Router in Rome Configure the settings for the PortMaster Office Router in Rome with the values in the following sections. Configuring Global Settings Configure the global settings to the values shown in Table 19-1.
Page 291
Ethernet Interface.” Configuring Synchronous WAN Port Settings Configure the synchronous WAN port on the PortMaster Office Router in Rome with the values shown in Table 19-3. Port S1 is used in this example. The IP address for the port is left unconfigured, accepting the default IP address value of 0.0.0.0.
Configuration Steps for Leased Line Connections Configuring the PortMaster Office Router in Florence Configure the settings for the PortMaster Office Router in Florence with the values in the following sections. Configuring Global Settings Configure the global settings to the values shown in Table 19-4.
Page 293
If you are not sure of the IP address on the other end of the connection, you can set the IP destination to 255.255.255.255 and the PortMaster will attempt to learn the address. Leave all other settings at their default values.
The error counters should be 0 (zero) except for abort errors. If your counters are nonzero, the problem is external to the PortMaster. Note – CRC errors will occur if the cable is ever unplugged from the PortMaster. • Verify that you are using the correct cable and that it is attached securely to the correct port.
Page 295
Then set the CSU/DSU for local loopback. You should see the following message: LCP_APPARENT_LOOP For more information about the interpreting the results of the debug command, refer to the PortMaster Troubleshooting Guide. • If the local loopback shows network connectivity in the local router, take the CSU/DSU out of loopback and set line loopback on the remote CSU/DSU.
Page 296
Troubleshooting a Leased Line Connection 19-10 PortMaster Configuration Guide...
“Using Naming Services and the Host Table” on page A-8 • “Managing Network Security” on page A-9 See the PortMaster Routing Guide for information on routing and how Lucent’s ComOS implements routing protocols. See the glossary for unfamiliar terms. Network Addressing PortMaster products support packet routing using both IP and IPX protocols.
192.168.42.0 through 192.168.42.255. CIDR uses 192.168.42.0/24 to describe the same range of addresses. RIPv1 is an example of a protocol that uses address classes. OSPF and BGP-4 are examples of protocols that do not use address classes. Dotted Decimal Notation 100.100.100.10 195.32.4.200 PortMaster Configuration Guide...
Page 299
Network Addressing Class A Addresses The class A IP address format allocates the highest 8 bits to the network field and sets the highest-priority bit to 0 (zero). The remaining 24 bits form the host field. Only 126 class A networks can exist (0 is reserved, and 127 is used for loopback networks), but each class A network can have almost 17 million hosts.
Page 300
Class E Addresses The class E IP address is reserved for future use. In class E addresses, the 4 highest-order bits are set to 1, 1, 1, and 1. Routers currently ignore class E IP addresses. 192.168.20.220 Host address PortMaster Configuration Guide...
Reserved IP Addresses Some IP addresses are reserved for special uses and cannot be used for host addresses. Table A-2 lists ranges of IP addresses and shows which addresses are reserved, which are available to be assigned, and which are for broadcast. Table A-2 Reserved and Available IP Addresses Class...
The standard for broadcast is high, which uses all 1s in the host portion (for example, 192.168.1.255); however, many networks still use all 0s. The PortMaster can be configured either way and should be set to match the other systems on your network.
Netmasks A netmask is a four-octet number that identifies either a supernetwork (supernet) or a subnetwork (subnet). A netmask that designates a subnet is called a subnet mask. Using Subnet Masks to Create IP Subnets Subnet masks are used to divide networks into smaller, more manageable groups of hosts known as subnets.
Framed-IP-Netmask, enter the following commands: Command> set user-netmask on Command> save all Caution – The VLSM feature affects both routing and proxy ARP on the PortMaster and should be used with caution. Using Naming Services and the Host Table Naming services are used to associate IP addresses with hostnames. Many networks use the Domain Name System (DNS) or the Network Information Service (NIS) for mapping hostnames to IP addresses.
The PortMaster enables you to specify an internal host table, which can be used in addition to DNS and NIS. The host table allows each unique IP address to be aliased to a unique name. The host table is consulted when a port set for host access prompts for the name of the host.
(RADIUS) server. The server can authenticate users against a UNIX password file, NIS databases, or separately maintained RADIUS database. The PortMaster acts as a RADIUS client: it sends authentication requests to the RADIUS server, and acts on responses sent back by the server. For more information about RADIUS, refer to the RADIUS Administrator’s Guide.
Authority (IANA). A more complete list is available in RFC 1700, “Assigned Numbers.” Note – If you are configuring a filter on a PortMaster from the command line interface, you must use the port number. The PortMaster does not have the /etc/services file and cannot use NIS to get the equivalent information.
Page 308
SNMP system management messages Interactive Mail Access Protocol (IMAP) version 3 IMAP version 3 Remote process execution Remote login Remote who daemon (rwhod) Remote command (rsh) System log facility Line printer daemon (LPD) spooler Terminal-to-terminal chat Terminal-to-terminal chat PortMaster Configuration Guide...
Page 309
Newer version of Terminal-to-terminal chat Routing Information Protocol (RIP) UNIX-to-UNIX Copy Protocol (UUCP) UUCP Variant of UUCP/TCP Variant of UUCP/IP Kerberized login Kerberized login 1642 PortMaster daemon in.pmd 1643 PortMaster Console Protocol 1645 Remote Authentication Dial-In User Service (RADIUS) 1646 RADIUS accounting 1647...
Page 311
An error indicating an attempted and failed connection. acceptance policy A set of rules that determine the path and route information the PortMaster accepts from a BGP peer for further processing. See also policy. address A number used to identify a computer or other device on a network or internetwork. See also IP address;...
Page 312
The ANSI T1.617 Frame Relay Annex-D version of the Local Management Interface (LMI) protocol. The Annex-D protocol has a more robust feature set than the proprietary Cisco/Stratacom LMI, but was developed later. Recent versions of the PortMaster software support either type of LMI. Earlier versions supported only the Cisco/Stratacom version.
Page 313
autonomous system border router In OSPF, a router that exchanges information with routers from other autonomous systems. Autonomous system border routers are also used to import routing information about RIP, direct, or static routes from non-OSPF attached interfaces. autonomous system path list In BGP, the list of autonomous systems that a packet must traverse to reach a given set of IP address destinations located within a single autonomous system destination.
Page 314
BOOTP provides a way for a host on a network to acquire its assigned IP address, the IP address of a boot server host, and a file to load into memory and run. Bootstrap Protocol See BOOTP. Border Gateway Protocol See BGP. Glossary-4 PortMaster Configuration Guide...
Page 315
Packets that are sent to all network nodes. callback A port configuration allowing the PortMaster to call back dial-in users before providing access. Callback provides an extra layer of security and can simplify telephone charges. CCITT Consultative Committee for International Telegraph and Telephone. International organization formerly responsible for the development of communications standards.
Page 316
Within the confederation, each BGP peer treats only the peers in its own CMAS as internal peers. Peers in different CMASs are treated as external peers. Glossary-6 reflector. Compare confederation. cluster. See also cluster; route PortMaster Configuration Guide...
Page 317
A character string assigned to a Simple Network Management Protocol (SNMP) agent to restrict read and write access to the SNMP variables. ComOS The operating system for PortMaster communications servers, routers, and access servers. confederation In BGP, an autonomous system that has been subdivided into smaller autonomous systems called confederation member autonomous systems.
Page 318
See CMAS. console port A serial port on a PortMaster attached to a terminal or PC through which you enter commands to communicate with ComOS. CRC error Cyclic redundancy check error. These errors can indicate problems with source station hardware, receivers, retiming modules and/or repeaters, bridges, cabling, or transceivers.
Page 319
In BGP, an arbitrary rating number that the PortMaster assigns to every route it receives from a BGP peer. A higher numbers indicates a greater preference for a route when more than one exists to a destination. A route from an internal peer is assigned the local preference number that the PortMaster learned with the route.
Page 320
Frame Relay switch. If the DTE lacks complete digital line interface capability, the DSU can be located with the channel service unit (CSU) on the customer’s site and known as a CSU/DSU. See also CSU. Glossary-10 PortMaster Configuration Guide...
Page 321
A specialized, predefined BGP policy that simplifies the use of PortMaster routers in straightforward multihomed environments. When you define easy-multihome for a peer, you restrict what the PortMaster handles from the peer to information that is no more than two autonomous system hops away from the PortMaster. Only information that meets this criterion is accepted from the peer, put into the routing table used to forward packets to their destinations, and advertised to other peers.
Page 322
A peer that resides in a different autonomous system—or, when confederations are in use, in a different confederation member autonomous system (CMAS)—from the current PortMaster. Exterior BGP See EBGP. File Transfer Protocol See FTP. Glossary-12 PortMaster Configuration Guide...
Page 323
filter Generally, a process or device that screens network traffic for certain characteristics, such as source address, destination address, or protocol, and determines whether to forward or discard that traffic based on the established criteria. filter table A database used to store filters. Flash RAM See nonvolatile RAM.
Page 324
Graphical user interface. A software interface based on pictorial representations and menus of operations and files. hardwired A continuous connection between two sites. A port on a PortMaster that is configured for hardwired use cannot be simultaneously used for any other type of connection. hello Protocol used by OSPF routers to acquire neighbors and to synchronize their topological databases.
Page 325
Signaling over the data path. injection policy A set of rules that determine the path and route information the PortMaster takes from BGP and places into its routing table used to forward packets to their destinations. The PortMaster uses the information to determine how packets it receives are forwarded to their ultimate destinations.
Page 326
Internet Control Message Protocol See ICMP. Internet Protocol See IP. Internet Network Information Center See InterNIC. InterNIC Internet Network Information Center. An organization that provides information and services related to networking technologies. Glossary-16 PortMaster Configuration Guide...
Page 327
Internet Protocol. The protocol defined in RFC 791. IP address A 32-bit number assigned by the system administrator, usually written in the form of four decimal fields separated by periods—for example, 192.9.200.1. Any computing device that uses IP must be assigned an Internet or IP address. Part of the Internet address is the IP network number (IP network address), and part is the host address (IP host address).
Page 328
A periodic message sent between BGP peers to keep their BGP sessions open. If a preset amount of time elapses between keepalive messages from a peer, the PortMaster identifies the peer as no longer operational and drops the session—and any information learned from that peer.
Page 329
(PVC) status in Frame Relay. Two types of LMI are available on Frame Relay: the original proprietary Cisco/Stratacom LMI, and the ANSI T1.617 Annex-D LMI. Although the PortMaster supports both, LMI on the PortMaster refers to the Cisco/Stratacom implementation. See also Annex-D.
Page 330
Every master also has a corresponding slave. Masters are for a given connection only, and a PortMaster that functions as a master for one user’s connection can be a slave for a different user’s connection. See also slave.
Page 331
Modulator-demodulator. A device that converts the digital signals used by computers to analog signals that can be transmitted over telephone lines. modem table A database resident on the PortMaster containing configuration information for commonly used modems. Maximum transmission unit. The largest frame or packet that can be sent through a port on a PortMaster without fragmentation.
Page 332
ISDN B channels as bandwidth needs increase. See also Multichassis PPP. multiexit discriminator In BGP, an arbitrary rating number that the PortMaster can use to enforce the use of preferred exit and entry points when multiple connections exist between its autonomous system and another.
Page 333
neighbor (1) In OSPF, two routers that have interfaces to a common network are neighbors. On multiaccess networks, neighbors are dynamically discovered by the OSPF Hello protocol. (2) In Multichassis PPP, PortMasters in the same Multichassis PPP domain. netmask A 32-bit number that distinguishes the portion of an IP address referring to the network or subnet from the portion referring to the host.
Page 334
Type 1 and Type 2 external routes for the backbone area or other areas that accept external routes. Like stub areas, NSSAs can have default costs set for them but cannot have external routes advertised into them. Glossary-24 PortMaster Configuration Guide...
Page 335
North America, where ISDN BRI is a U loop, the customer must supply the NT1 device; in Japan and the European countries where BRI is an S/T bus, the telephone company supplies the NT1. The PortMaster integrates the NT1 device into its ISDN BRI ports that are U interfaces.
Page 336
(1) In BGP, a router with which a BGP speaker exchanges open messages, notification messages, update messages, and keepalive messages. A PortMaster can have both internal and external peers. See also internal peer; external peer. Glossary-26...
Page 337
See PPP. policy In BGP, the rule or set of rules the PortMaster follows for accepting, injecting, and/or advertising BGP routes to its BGP internal and external peers. You assign policies to a peer when you add it to the PortMaster during configuration. You can use the default policy easy-multihome, or create and assign your own policies.
Page 338
Permanent virtual circuit. A circuit that defines a permanent connection in a switched digital service such as Frame Relay. Frame Relay is the only switched digital service that uses PVCs supported by PortMaster products. RADIUS Remote Authentication Dial-In User Service. A client/server security protocol created by Lucent.
Page 339
RARP Reverse Address Resolution Protocol. A protocol used in network routers that provides a method for finding IP addresses based on media access control (MAC) addresses. Compare ARP. Remote Authentication Dial-In User Service See RADIUS. Request for Comments See RFC. Reverse Address Resolution Protocol See RARP.
Page 340
The routing table stored on the PortMaster contains the following information for each route: IP address and netmask length of the destination, IP address of the gateway, source of the route (if any), type of route, hop-count metric, and PortMaster interface used to forward packets along the route.
Page 341
(The port through which the connection is made is called the slave port.) Every slave has a corresponding master. Slaves are for a given connection only, and a PortMaster that functions as a slave for one user’s connection can be a master for a different user’s connection. See also master.
Page 342
The process of combining routing information from one routing protocol into another for advertisement. For example, the PortMaster summarizes non-BGP route information it receives internally via the Interior Gateway Protocol (IGP) OSPF or RIP, or via a static route, into BGP for advertisement to BGP internal and external peers. Summarized routing information must comply with BGP advertisement policy rules before advertisement.
Page 343
ISDN and is treated by the PortMaster as if it were a modem. A synchronous terminal adapter takes a synchronous bit stream and turns it into ISDN, typically supports V.25bis dialing, and connects to a PortMaster synchronous port.
Page 344
The first part lists the IP address prefixes and associated netmasks for one or more routes that the PortMaster is withdrawing from service because it can no longer reach them. The second part of an update message consists of a single BGP route. See also route.
Page 345
User Datagram Protocol See UDP. UUCP UNIX-to-UNIX Copy Program. Interactive communication system for connecting two UNIX computers to send and receive data. V.120 An ITU-T standard for performing asynchronous rate adaptation into ISDN. V.25bis An ITU-T standard defining how to dial on synchronous devices such as ISDN or switched 56Kbps.
Page 346
Wide area network. Data communications network that serves users across a broad geographic area and often uses transmission devices provided by common carriers. Frame Relay is an example of a WAN. Compare LAN. Glossary-36 PortMaster Configuration Guide...
Page 351
Command Index show filter 9-8 show ipxroutes 3-24 show Line0 11-2 11-11 show location 13-13 show M0 11-9 show mcppp 11-15 show modem 10-3 show modems 11-10 show P0 2-5 show routes 3-23 show S0 2-5 12-9 show syslog 3-12 show table filter 9-8 show table location 8-2 show table modem 10-2...
Page 352
Command Index Command Index-6 PortMaster Configuration Guide...
Page 353
3-12 example 17-4 size 3-13 addresses. See IP addresses, IPX addresses administrative logins, enabling and disabling 3-12 analog modems, enabling on PortMaster 3 11-10 Annex-D defined 13-3 keepalives 13-6 use with DLCI 13-11 using to discover Frame Relay addresses 6-8...
Page 354
5-22 device services 5-14 netdata 5-15 PortMaster 5-14 Telnet 5-15 using with in.pmd daemon 18-3 devices, shared 5-11 dial groups 5-5 dialback. See callback dial-in access 5-2 configuration tip 1-3 dial-in users 12-8 10-8 17-1 PortMaster Configuration Guide...
Page 356
MTU 8-8 framing format 11-6 FTP filters 9-11 FXS loop start protocol 11-4 gateways route for IP 3-25 route for IPX 3-25 setting the default 3-5 global parameters default gateway 3-5 10-8 13-6 13-5 PortMaster Configuration Guide...
Page 357
default routing 3-6 gateway for IP 3-25 gateway for IPX 3-25 host table 3-7 IP address assignment 3-12 name service 3-7 password 3-2 route destinations for IP 3-24 route destinations for IPX 3-25 static routes 3-24 subnet mask table 3-26 system logging 3-9 system name 3-2 Telnet 3-9...
Page 359
8-8 frame size 8-8 network users 7-7 packet size 8-8 Multichassis PPP displaying addresses 11-16 enabling on a PortMaster 3 11-16 multiline load balancing 12-7 example 15-13 in the location table 8-11 port limits 12-8 user table 7-8 Multilink PPP 7-8 Multilink V.120 7-8...
Page 360
IP address 3-12 port idle timer 6-7 port type 5-9 PortMaster daemon 1-1 device service 5-14 login service 5-10 mailing lists xxv software 1-1 15-1 PortMaster 3 channel groups 11-2 channel rate 11-3 5-19 10-8 Protocol. 7-12 PortMaster Configuration Guide...
Page 361
displaying line status 11-1 enabling analog modem service 11-10 enabling modems 11-9 enabling Multichassis PPP support 11-16 encoding method 11-7 framing format 11-6 inband signaling 11-3 11-4 network loopback 11-8 pulse code modulation 11-8 switch type 11-6 ports dial groups 5-5 for modem use 10-7 ISDN BRI 12-2 number used for dial-in access 17-1...
Page 363
BRI 12-4 PRI 11-6 switched 56Kbps connections 14-1 synchronous leased lines 19-1 synchronous ports connection type 6-4 description 6-1 destination IP address 6-8 DLCI list 13-6 extended information 6-4 filters 6-10 modem control 6-6 port type 6-4 speed 6-5 subnet mask 6-9 TCP header compression 6-11 transport protocol 6-8 See also WAN ports...
Page 364
11-16 virtual switch 13-1 VLSM A-8 WAN ports example configuration 19-5 ISDN 12-12 setting up Frame Relay 13-10 switched 56Kbps 14-5 V.25bis dialing 14-5 See also synchronous ports well-known ports B-1 well-known services B-1 15-6 19-7 12-17 PortMaster Configuration Guide...
Need help?
Do you have a question about the PortMaster and is the answer not in the manual?
Questions and answers