Lucent Technologies PortMaster Configuration Manual
Lucent Technologies PortMaster Configuration Manual

Lucent Technologies PortMaster Configuration Manual

Lucent technologies office router configuration guide
Table of Contents

Advertisement

Quick Links

PortMaster
®

Configuration Guide

Lucent Technologies
Remote Access Business Unit
4464 Willow Road
Pleasanton, CA 94588
925-737-2100
800-458-9966
May 1998
950-1182D

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PortMaster and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Lucent Technologies PortMaster

  • Page 1: Configuration Guide

    PortMaster ® Configuration Guide Lucent Technologies Remote Access Business Unit 4464 Willow Road Pleasanton, CA 94588 925-737-2100 800-458-9966 May 1998 950-1182D...
  • Page 2: Copyright And Trademarks

    Lucent Technologies, Inc. further reserves the right to revise this manual and to make changes to its content at any time, without obligation to notify any person or entity of such revisions or changes.
  • Page 3: Table Of Contents

    Subscribing to PortMaster Mailing Lists ........
  • Page 4 PortMaster Security Management ........
  • Page 5 PortMaster Modem Table ........
  • Page 6 Configuring a PortMaster for Login Users ........
  • Page 7 Network Dial-Out-Only Access ......... . Network Dial-In-and-Out (Two-Way) Access .
  • Page 8 Setting the IPX Network Number ........viii Configuration Guide for PortMaster Products 7-10...
  • Page 9 Overview of PortMaster Filtering ........
  • Page 10 Hanging Up a Line ........... . . 11. Configuring the PortMaster 3 Configuring General Settings .
  • Page 11 How to Order DS-1 Service from the Telephone Company ....11-10 Configuring the PortMaster 3 for Channelized T1 ......
  • Page 12 Configuring the PortMaster in Denver ........
  • Page 13 Configuring the PortMaster in Bangkok ........
  • Page 14 Configuration Steps for Shared Device Access ....... . . Configuration Guide for PortMaster Products...
  • Page 15 Configuration Steps for Leased Line Connections ......Configuring the PortMaster Office Router in Rome ......
  • Page 16 Contents Configuration Guide for PortMaster Products...
  • Page 17: About This Guide

    Review this guide thoroughly before configuring your PortMaster. This guide provides the settings required for the most commonly used PortMaster configurations. To use this guide you must have successfully installed your PortMaster according to the instructions provided in the relevant installation guide. This guide provides configuration information only.
  • Page 18 PortMaster Documentation The manuals are also provided as PDF and PostScript files on the PortMaster Software CD shipped with your PortMaster. In addition, you can download PortMaster information and documentation from http://www.livingston.com. • ChoiceNet® Administrator’s Guide This guide provides complete installation and configuration instructions for ChoiceNet server software.
  • Page 19: Additional References

    • PortMaster Troubleshooting Guide This guide can be used to identify and solve software and hardware problems in the PortMaster family of products. • RADIUS Administrator’s Guide This guide provides complete installation and configuration instructions for Lucent Remote Authentication Dial-In User Service (RADIUS) software.
  • Page 20 RFC 2104, HMAC: Keyed-Hashing for Message Authentication RFC 2125, The PPP Bandwidth Allocation Protocol (BAP), The PPP Bandwidth Allocation Control Protocol (BACP) RFC 2138, Remote Authentication Dial In User Service (RADIUS) RFC 2139, RADIUS Accounting RFC 2178, OSPF Version 2 PortMaster Configuration Guide...
  • Page 21: Itu-T Recommendations

    ITU-T Recommendations The following documents are recommendations of the International Telecommunication Union Telecommunication Standardization Sector (ITU-T), formerly known as CCITT: • Recommendation V.25bis (1988)—Automatic calling and/or answering equipment on the general switched telephone network (GSTN) using the 100-series interchange circuits •...
  • Page 22: Document Conventions

    Enclose optional • set nameserver [2] Ipaddress keywords and • set S0 destination Ipaddress values in [Ipmask] command syntax. Enclose a set syslog Logtype {[disabled] required choice [Facility.Priority]} between keywords and/or values in command syntax. PortMaster Configuration Guide...
  • Page 23: Document Advisories

    For all technical support requests, record your PortMaster ComOS version number and report it to the technical support staff or your authorized sales channel partner. New releases and upgrades of PortMaster software are available by anonymous FTP from ftp://ftp.livingston.com.pub/le/. In North America you can schedule a 1-hour software installation appointment by calling the technical support telephone number listed below.
  • Page 24: For The Emea Region

    Using the World Wide Web, see http://www.livingston.com/. PortMaster Training Courses Lucent Remote Access offers hands-on, technical training courses on PortMaster products and their applications. For course information, schedules, and pricing, visit the Lucent Remote Access website at http://www.livingston.com, click Services, and then click Training.
  • Page 25: Subscribing To Portmaster Mailing Lists

    To subscribe, send email to majordomo@livingston.com with subscribe portmaster-announce in the body of the message. All announcements to this list also go to the portmaster-users list. You do not need to subscribe to both lists. About This Guide Subscribing to PortMaster Mailing Lists...
  • Page 26 Subscribing to PortMaster Mailing Lists xxvi PortMaster Configuration Guide...
  • Page 27: Introduction

    All PortMasters are shipped with the following software: • ComOS®—The communication software operating system already loaded in Flash RAM on each PortMaster. You can use the ComOS command line interface to configure your PortMaster through a console. • PMVision—A GUI companion to the ComOS command line interface for Microsoft Windows, UNIX, and other platforms that support the Java Virtual Machine (JVM).
  • Page 28: Preconfiguration Planning

    Guide. Preconfiguration Planning Before the PortMaster can be used to connect wide area networks (WANs), you must install the hardware using the instructions in the installation guide for your system. This configuration guide is designed to introduce the most common configuration options available for PortMaster products.
  • Page 29: Configuration Tips

    Configuration Tips PortMaster configuration can be confusing because settings can be configured for a port, a user, or a remote location. Use the following tips to determine how to configure your PortMaster: If You Are Configuring...
  • Page 30: Basic Configuration Steps

    IP address assignment. 2. Boot the system and log in with the administrative password. You can configure the PortMaster from a terminal attached to the console port, by an administrative Telnet session, or by a network connection.
  • Page 31 ISDN PRI connection configuration is described in Chapter 11, “Configuring the PortMaster 3.” ISDN BRI connection configuration is covered in Chapter 12, “Using ISDN BRI.” 9. Configure dial-in users in the user table, or configure RADIUS. The user table is described in Chapter 7, “Configuring Dial-In Users.” If you are using RADIUS security instead of the user table, see the RADIUS Administrator’s...
  • Page 32 Basic Configuration Steps PortMaster Configuration Guide...
  • Page 33: How The Portmaster Works

    PortMaster boots from the ComOS stored in nonvolatile Flash RAM. The PortMaster uncompresses and loads the ComOS into dynamic RAM (DRAM). If a valid ComOS is not found in Flash, the PortMaster attempts to boot from the network as described in the next paragraph.
  • Page 34 If no address is configured for the Ethernet interface and no address was obtained from netbooting, the PortMaster sends a RARP message to discover its IP address. If the PortMaster receives a reply to the RARP message, its IP address is set in dynamic memory.
  • Page 35: Portmaster Initialization

    9. The PortMaster listens for TCP connections to any ports configured as network devices. 10. The PortMaster listens for activity on TCP and UDP ports, such as for administrative Telnet sessions on TCP port 23, PMconsole connections on TCP port 1643, and SNMP requests on UDP port 161.
  • Page 36: On-Demand Connections

    PortMaster denies access with an “Invalid Login” message. If no user table entry exists for the user and port security is off, the PortMaster passes the user on to the host defined for that port using the selected login service. In this situation, the specified host is expected to authenticate the user.
  • Page 37: Port Status And Configuration

    Access can also be denied if the specified login service is unavailable—for example, if the PortMaster Login Service has been selected for the user but the selected host does not have the in.pmd PortMaster daemon installed. Access is denied with the “Host Is Currently Unavailable”...
  • Page 38 The PortMaster is waiting for a login request. The host: prompt has been sent to the port. The PortMaster is waiting for a reply. The Password: prompt has been sent to the port. The PortMaster is waiting for a reply.
  • Page 39: Configuring Global Settings

    Configuring Global Settings This chapter describes how to configure settings that the PortMaster uses across all its ports and interfaces. This chapter discusses the following topics: • “Setting the System Name” on page 3-2 • “Setting the Administrative Password” on page 3-2 •...
  • Page 40: Setting The System Name

    Setting the System Name The system name is the name that identifies the PortMaster for SNMP queries, IPX protocol routing, and CHAP authentication. Enter a name that is valid for your network. The system name can have up to 16 characters, and appears in place of the Command>...
  • Page 41: How The Cable Modem Telephone Return System Works

    PortMaster OR-U dial-up routers). How the Cable Modem Telephone Return System Works After you set the IP address of the DHCP server on the PortMaster product, the cable modem dynamically configures itself so that all subsequent data travels upstream via the telephone interface, and downstream on the coaxial cable.
  • Page 42 192.168.33.10 DHCP Request Cable modem router 10.66.98.96 Internet DHCP server Telephone interface 192.168.33.10 172.16.98.67 Coaxial cable interface Dynamic configuration IP Packet DST 192.168.33.10 10.66.98.96 DHCP Response Coaxial cable interface address = 172.16.98.67 Configuration info. Cable Headend 11820024 PortMaster Configuration Guide...
  • Page 43: Setting The Default Route Gateway

    PortMaster selects when it cannot locate the destination of a packet on the local Ethernet segment. You identify the default gateway by its IP address entered in dotted decimal notation. A PortMaster can never be its own default gateway.
  • Page 44: Configuring Default Routing

    To set the default gateway, use the following command: Command> set gateway Ipaddress [Metric] If you do not specify a value for Metric, the PortMaster assumes a default value of 1. Configuring Default Routing As described in the PortMaster Routing Guide, PortMaster products can automatically send and accept route information as part of RIP messages if routing is turned on.
  • Page 45: Using The Host Table

    Using the Host Table Each host attached to an IP network is assigned a unique IP address. Every PortMaster supports a local host table to map hostnames to IP addresses. If your network lacks a computer that can perform hostname resolution, the PortMaster allows entries in a local host table.
  • Page 46: Setting The Name Server

    3-8 for instructions. Setting the Name Server The PortMaster supports RFC 1877, which allows remote hosts also supporting RFC 1877 to learn a name server through PPP negotiation. You must provide the IP address of the name server if you use a name service.
  • Page 47: Setting The Telnet Port

    The Telnet access port can be set to any number between 0 and 65535. The Telnet port enables you to access and maintain the PortMaster using a Telnet connection to this TCP port. If 0 (zero) is used, Telnet administration is disabled. The default value is 23. Ports numbered 10000 through 10100 are reserved and should not be used for this function.
  • Page 48: Setting The Loghost

    Setting System Logging Setting the Loghost To set the IP address of the loghost—the host to which the PortMaster sends syslog messages—use the following command: Command> set loghost Ipaddress Note – Do not set a loghost at a location configured for on-demand connections, because doing so keeps the connection up or brings up the connection each time a syslog message is queued for the syslog host.
  • Page 49 Table 3-3 and Table 3-4 show the keywords used to identify facilities and priorities. Lucent recommends that you use the auth facility or the local0 through local7 facilities to receive syslog messages from PortMaster products, but all the facilities are provided. See your operating system documentation for information on configuring syslog on your host.
  • Page 50: Setting Administrative Logins To Serial Ports

    You can dynamically assign IP addresses to PPP or SLIP dial-in users. By assigning addresses as needed from a pool, the PortMaster requires fewer addresses than if each user is assigned a specific address. When a dial-in connection is closed, the address goes back into the pool and can be reused.
  • Page 51: Setting The Reported Ip Address

    PortMaster for the change to take effect. Setting the Reported IP Address Some sites require a number of different PortMaster devices to appear as a single IP address to other networks. You can set a reported address different from the Ether0 address.
  • Page 52: About The Livingston.mib Definition File

    The agent is capable of responding to requests to get or set data from the manager. PortMaster products support MIB II variables as specified in RFC 1213, along with a MIB specific to PortMaster products. SNMP management can be enabled for any PortMaster.
  • Page 53 Figure 3-2 Management Information Base (MIB) Hierarchy CCITT directory Configuring Global Settings unnamed joint ISO/CCITT internet experi- mgmt private mental Livingston 11820021 Configuring SNMP 3-15...
  • Page 54 Configuring SNMP Figure 3-3 shows the tree structure of the private Livingston portion of the MIB. Figure 3-3 Part of MIB Structure showing PortMaster Port S0. 1. (not used) 2. products Reading from the top down, the object identifier (OID) in Figure 3-3 (307.3.2.1.1.1.2) breaks out as follows: •...
  • Page 55 Type ...307.3.2.1.1.1.7 Direction PortMaster Serial Interfaces Table 3-6 lists the objects in the serial interface table from the Livingston Extensions section of the MIB. Modem-specific objects apply to the PortMaster 3 only. Table 3-6 Serial Interfaces Table Object Index PortName...
  • Page 56 Configuring SNMP Table 3-6 Serial Interfaces Table (Continued) Object Direction PortStatus Started Idle InSpeed OutSpeed ModemName (PortMaster 3 only) IpAddress ifDescr InOctets OutOctets QOctets ModemStatus ModemCompression (PM-3 only) ModemProtocol (PortMaster 3 only) ModemRetrains (PortMaster 3 only) ModemRenegotiates (PortMaster 3 only)
  • Page 57 PortMaster T1/E1 Interfaces Table 3-7 lists the objects in the T1/E1 interfaces from the Livingston Extensions section of the MIB. T1/E1 interfaces are supported on the PortMaster 3 only. Table 3-7 T1/E1 Interfaces Table Object Index PhysType Function Status Framing...
  • Page 58: Portmaster Modem Table

    CRCErrors SyncErrors PortMaster Modem Table Table 3-8, lists the objects in the modem table from the Livingston Extensions section of the MIB. Modem objects are supported only on the PortMaster 3 Integrated Access Server. Table 3-8 Modem Table Object Type...
  • Page 59: Setting Snmp Monitoring

    SNMP-capable devices. This feature is most often used to monitor network statistics such as usage and error rate. If SNMP monitoring is on, the PortMaster accepts SNMP queries. If SNMP monitoring is off, all SNMP queries are ignored.
  • Page 60: Adding Snmp Read And Write Hosts

    Adding SNMP Read and Write Hosts PortMaster products allow you to control SNMP security by specifying the IP addresses of the hosts that are allowed to access SNMP information. The specification of read and write hosts allows another level of security beyond the community strings.
  • Page 61: Viewing Snmp Settings

    To clear alarms from the SNMP alarm table, enter the following command: Command> clear alarm alarm-id|all Refer to the PortMaster Command Line Reference for more information. Displaying the Routing Table Use the following command to display the IP routing table entries: Command>...
  • Page 62: Setting Static Routes

    Separate static routes tables are maintained for IP and for IPX, which you display with the show routes and show ipxroutes commands. You construct a static route table manually on a PortMaster by adding and deleting static routes as described in the following sections. Refer to the PortMaster Routing Guide for information about routing and static routes.
  • Page 63: Adding And Deleting A Static Route For Ipx

    The metric represents the cost of sending the packet through the gateway to the specified destination. Note – Never set the gateway for the PortMaster to an address on the same PortMaster; the gateway must be on another router.
  • Page 64: Modifying The Static Netmask Table

    50ms increments.The ticks metric is used in addition to the hops metric only on IPX networks. Note – Never set the gateway for the PortMaster to an address on the same PortMaster; the gateway must be on another router.
  • Page 65 255.255.255.240 subnet mask (a class C address subnetted on 28 bits). If routing broadcast is on, the PortMaster routing broadcast on Ether0 claims a route to the entire 192.168.9.0 network. Additionally, the broadcast on ptp1 claims a route to 172.16.0.0.
  • Page 66 The netmask table collapses routes on the boundaries specified. As a result, if one PortMaster has an assigned pool starting at 192.168.207.33, it broadcasts a host route to 192.168.207.32 instead of broadcasting a route to the 192.168.207.0 network. The other PortMaster routers consult their own netmask tables and convert that route back into a subnet route to 192.168.207.33 through 192.168.207.32.
  • Page 67: Enabling Netbios Broadcast Packet Propagation

    If your gateway on the Ethernet is not a PortMaster product, the netmask table is not supported. However, you can set a static route on the gateway for each of the three destination networks for your assigned pools (192.168.207.0, 192.168.208.0, and 192.168.209.0), pointing at one of the PortMaster routers.
  • Page 68: Setting Call-Check Authentication

    Setting the ISDN Switch You can configure the switch provisioning for ISDN PRI and BRI connections to PortMaster ISDN ports. See Chapter 11, “Configuring the PortMaster 3,” for details on PRI connections. See Chapter 12, “Using ISDN BRI,” for details on BRI connections.
  • Page 69: Configuring The Ethernet Interface

    “Setting OSPF on the Ethernet Interface” on page 4-8 Before configuring the Ethernet interface, you must make the appropriate Ethernet connection for your needs. Refer to the relevant installation guide for your PortMaster product for information on making the Ethernet connection.
  • Page 70: Applying Filters

    PortMaster. Input Filters When an input filter is used, all traffic coming into the PortMaster on the Ethernet interface is compared to the input filter rules. Only packets permitted by the filter rules are accepted by the PortMaster.
  • Page 71: Setting Ip Parameters

    To remove the input filter, omit the filter name when entering the command. Output Filters When an output filter is used, all traffic going out of the PortMaster on the Ethernet interface is compared to the output filter rules. Only packets permitted by the filter rules are sent by the PortMaster.
  • Page 72: Setting The Subnet Mask

    PortMaster Ethernet ports. If the setting has been changed, you must enable IP on the Ethernet interface of all PortMaster products attached directly to a local Ethernet. Disable IP traffic on this port only if the PortMaster is not attached to a local Ethernet network.
  • Page 73: Setting Ethernet Ipx Parameters

    Ethernet IPX traffic is sent and received through the PortMaster Ethernet interface. You may enable IPX on the Ethernet interface on any PortMaster products attached directly to a local Ethernet. Disable IPX traffic on this port only if the PortMaster is not attached to a local Ethernet network.
  • Page 74: Setting The Ipx Frame Type

    Ethernet_II The encapsulation method and frame type were selected when your IPX network servers were installed. The IPX frame type you set on the PortMaster must match the frame type set for your network. Contact your IPX network administrator for information about the frame type used on your network.
  • Page 75: Configuring Ethernet Subinterfaces

    With the subinterface feature of the ComOS, you can create up to 512 subinterfaces (the total number of interfaces available on a PortMaster) on a single primary Ethernet interface. Because you have the bandwidth of only a single Ethernet interface, however, efficiency begins to degrade significantly when you add more than 8 subinterfaces.
  • Page 76: Setting Ospf On The Ethernet Interface

    10 to 120 seconds; the default is 10 seconds. If the PortMaster stops receiving hello packets from a neighbor, it treats that router as inactive, or down. You can specify how long the PortMaster waits for hello packets from neighbors by using the dead-time Seconds keyword and value.
  • Page 77: Configuring An Asynchronous Port

    ISDN BRI,” gives an example of a dial-up synchronous office-to-office connection. Once a PortMaster is installed in each office and connected to the local Ethernet with an AUI, 10Base2, or 10BaseT connector, one or more asynchronous serial ports can be configured to dial another office or a set of offices when network traffic for the specified location exists.
  • Page 78 Connections to the Internet. You can set an asynchronous port for a continuous connection to an Internet service provider (ISP) by configuring it for continuous dial- out. In this configuration if the dial-out line is dropped, the PortMaster automatically reestablishes the connection.
  • Page 79: General Asynchronous Port Settings

    PortMaster. Once the connection is established, the connected device such as a printer or modem can be accessed as if it were connected directly to the host. Ports can also be configured to be accessed by programs using TCP/IP sockets, or by Telnet from the network.
  • Page 80: Parity Checking

    Command> set S0|all databits 5|6|7|8 Setting Flow Control The PortMaster can use either software or hardware flow control to communicate with the attached device to start and stop the flow of data. Because hardware flow control is more reliable, Lucent recommends that you set software flow control to off and hardware flow control to on.
  • Page 81: Setting The Dial Group

    To assign a port to a dial group, use the following command: Command> set S0 group Group Displaying Extended Port Information The PortMaster can display port information in brief or extended modes. The default setting is off. To enable or disable extended information for a port, use the following command: Command>...
  • Page 82: Setting The Login Message

    General Asynchronous Port Settings Setting the Login Message The PortMaster allows you to specify a message for each port, up to 240 characters long, that is displayed to the user before login. To insert a new line, use a caret (^). Do not include double quotation marks within the message.
  • Page 83: Setting A Port As The Console

    Command> set console S0 Setting the Port Idle Timer The idle timer is used to control how long the PortMaster waits after activity stops on a port before disconnecting a dial-in connection, and how long the PortMaster should wait for a response to a login, password, or host prompt.
  • Page 84: Configuring A Portmaster For Login Users

    To disable the idle timer, set it to 0. Configuring a PortMaster for Login Users A PortMaster can be configured to allow dial-in users to log in to a specified host. This configuration is called user login. In user login mode, the user is prompted for his or her login name after the attached modem answers and completes rate negotiation.
  • Page 85: Setting The Port Type

    To configure a PortMaster for user login, use the following steps. These steps are described in more detail in later sections. 1. Set the port type to login. Command> set S0 login 2. Set the login service. Command> set S0 service_login portmaster|rlogin|telnet|netdata [Tport] 3.
  • Page 86: Setting The Login Service

    5-10 Function PortMaster is the default login service and can be used to access any host that has the PortMaster in.pmd daemon installed. This type of login service is preferred because it makes the PortMaster port operate like a serial port attached to the host.
  • Page 87: Setting The Login Host

    You can set the terminal type for a port if it has been configured as a user login or twoway port and you have set the login service to PortMaster, rlogin, or Telnet. The terminal type is passed as an environment variable when a connection is established with a host.
  • Page 88 You can provide access to host device ports by establishing a pseudo-tty connection to the port from a UNIX host with the PortMaster daemon software installed. In this case, the port operates as a host-controlled device. Figure 5-2 shows a host device configuration using the PortMaster device service and a pseudo-tty connection.
  • Page 89 Once the port type is set to accommodate a host device, the device service must be selected and the hostname entered. If the device service selected is PortMaster for pseudo-tty service, a hostname must be specified either in the port configuration or as the global default host.
  • Page 90: Setting The Device Service

    When using the PortMaster device service, you must use a host device name listed in the /dev directory of each UNIX host with access to the shared device. The standard device entries have ranges like the following: •...
  • Page 91: Configuring A Port For Network Access

    All ports with a common Telnet port number form a pool similar to the rlogin pool. Note – If you use Telnet to administer the PortMaster, select a TCP port number for your shared device port that is different from your administrative Telnet port.
  • Page 92: Network Dial-In-Only Access

    In this configuration, the selected port allows an authorized user to connect to the network for mail, file, and other services through SLIP or PPP encapsulation. Figure 5-4 shows how the PortMaster provides network connectivity for remote users.
  • Page 93: Network Dial-Out-Only Access

    In this configuration, the port is used to establish communication from the PortMaster to an outside location. SLIP or PPP is used for these types of connections. Figure 5-5 shows an example of a dial-out-only configuration.
  • Page 94: Network Dial-In-And-Out (Two-Way) Access

    IP packets over standard asynchronous lines with a minimum line speed of 1200bps. These encapsulation methods allow you to establish connections on an as-needed basis to reduce telephone costs. 5-18 branch office modem PortMaster dial-out connection workstation 2 workstation 1 workstation 1 11820018 11820018 PortMaster Configuration Guide...
  • Page 95: Pap And Chap Authentication

    PPP. ComOS 3.3 and later releases support Multilink PPP as described in RFC 1717 on ISDN BRI ports, and all ports on the PortMaster 3. Note – Be sure to use the set S0 rts/cts command to enable hardware flow control (RTS/CTS) for all SLIP and PPP connections.
  • Page 96: Configuring A Port For A Dedicated Connection

    Hardwired connections on asynchronous ports provide the continuous connection advantage of a synchronous port at lower bandwidth, but without the cost of T1 line connection. 5-20 modem analog leased line workstation 2 PortMaster workstation 1 PortMaster 11820019 11820019 PortMaster Configuration Guide...
  • Page 97 To configure a port for a hardwired connection, follow this procedure: 1. Set the port for network hardwired. Command> set S0 network hardwired 2. Set the protocol. Command> set S0 protocol slip|ppp 3. Set the maximum transmission unit (MTU) size. Command>...
  • Page 98: Setting The Protocol

    IPX traffic can be passed through a port if you assign an IPX network number to the hardwired network connection. Note – The IPX network number must be different from the IPX networks used on the Ethernets on either end of the connection. 5-22 PortMaster Configuration Guide...
  • Page 99: Configuring Rip Routing

    Configuring RIP Routing As described in the PortMaster Routing Guide, PortMaster products automatically send and accept route information as part of RIP messages if RIP routing is turned on. To configure RIP routing for a network hardwired asynchronous port, use the following command: Command>...
  • Page 100: Setting The Ppp Asynchronous Map

    Configuring a Port for a Dedicated Connection The PortMaster supports Stac LZS data compression only for PPP connections with bidirectional compression. Stac LZS data compression cannot be used for SLIP connections. To configure compression, use the following command: Command> set S0|W1 compression on|stac|vj|off Table 5-4 describes the results of using each keyword.
  • Page 101: Setting Input And Output Filters

    For more information about filters, see Chapter 9, “Configuring Filters.” Connecting without TCP/IP Support You can configure the PortMaster to connect to bulletin board service (BBS) systems or other hosts that have serial ports and allow bidirectional communications, but do not support TCP/IP.
  • Page 102 Connecting without TCP/IP Support Note – The PortMaster ignores the Data Set Ready (DSR) signal. Some PCs might require DSR high, but they do not tie DSR to DTR. 5-26 PortMaster Configuration Guide...
  • Page 103: Configuring A Synchronous Wan Port

    9600bps to T1 (1.544Mbps) or E1 (2.048Mbps) for continuous operation. A digital service unit/channel service unit (DSU/CSU) must be attached to the WAN port on the PortMaster. For more information, see Chapter 19, “Using Synchronous Leased Lines.”...
  • Page 104 Routing over ISDN. Integrated Services Digital Network (ISDN) provides fast dial-up connectivity for applications where the expense of a dedicated Frame Relay or leased line connection is not called for by the amount and nature of the traffic. For more information, see Chapter 12, “Using ISDN BRI.” PortMaster Configuration Guide...
  • Page 105 Figure 6-1 Synchronous WAN Connection IRX Router Once you have determined the type of synchronous connection to use between your remote locations, the synchronous port on each end of the connection must be configured. Configuring a Synchronous WAN Port workstation 1 workstation 2 IRX Router CSU/DSU...
  • Page 106: Configuring Wan Port Settings

    To set the port type and the connection type, use the following command: Command> set W1 network dialin|dialout|twoway|hardwired Note – Some PortMaster products use S1 through S4 for the synchronous ports. Others use W1, or W0 through W59. Refer to your hardware installation guide for information...
  • Page 107 The port or line speed is set either by the external clock signal on the device to which the PortMaster is connected, or by the carrier. You can record this value as a reference associated with a synchronous port, but it has no effect on PortMaster behavior.
  • Page 108 38400 Setting Modem Control When modem control is on, the PortMaster uses the condition of the carrier detect (DCD) signal from an attached modem to determine whether the line is in use. Modem control is off for synchronous connections by default. With modem control set off, the PortMaster assumes the carrier detect line is always asserted.
  • Page 109: Settings For Hardwired Connections

    The reset command always drops the DTR signal. Setting the Port Idle Timer The idle timer indicates how long the PortMaster waits after activity stops on a synchronous port before disconnecting a dial-in or dial-out connection. You can set the idle time in seconds or minutes, to any value from 0 to 240. The default setting is 0 minutes.
  • Page 110: Setting The Destination Ip Address

    You can use any IP address. If you set the local address of the WAN port to 0.0.0.0 for PPP, the PortMaster uses the Ether0 address for the end of the serial link. If you set the WAN port address to 0.0.0.0 for a Frame Relay connection, the port is disabled.
  • Page 111 Command> set W1 ipxnet Ipxnetwork Configuring RIP Routing As described in the PortMaster Routing Guide, PortMaster products automatically send and accept route information as RIP messages. Turn on RIP routing for the port for network hardwired connections only such as leased lines or Frame Relay.
  • Page 112 Only packets permitted by the filter are passed through the PortMaster. If an output filter is attached, packets going to the interface are evaluated against the rule set in the filter and only packets permitted by the filter are sent out of the interface.
  • Page 113 To apply an input filter to a synchronous port, use the following command: Command> set W1 ifilter [Filtername] To apply an output filter to a synchronous port, use the following command: Command> set W1 ofilter [Filtername] You can remove filters from the port by entering the command without a filter name. If a filter is changed, you must reset the port for the change to take effect.
  • Page 114 Configuring WAN Port Settings 6-12 PortMaster Configuration Guide...
  • Page 115: Configuring Dial-In Users

    PortMaster. If you are using RADIUS, you must configure user attributes in individual user files in the RADIUS user database rather than in the PortMaster user table. Refer to the RADIUS Administrator’s Guide for more information.
  • Page 116: Displaying User Information

    Type Address/Host Netmask/Service RIP Netuser negotiated 0000000000 Login User default Telnet Netuser assigned 255.255.255.255 No Login User defaults PortMaster Netuser 192.168.7.8 0000000000 elena Type: Dial-in Network User Assigned Netmask: 255.255.255.255 Options: Quiet, compressed 1500 Async Map: 00000000 PortMaster Configuration Guide...
  • Page 117: Deleting Users From The User Table

    Network users dial in to an asynchronous serial, synchronous serial, or ISDN port on the PortMaster. A connection is established as soon as the user logs in. A PPP or SLIP (on asynchronous ports) session is started. This type of connection can be used for dial-in users or for other routers that need to access and transfer data from the network.
  • Page 118: Configuring Settings For Network And Login Users

    The idle timer defines the number of minutes or seconds the line can be idle—in both directions—before the PortMaster disconnects the user. You can set the idle time in seconds or minutes, with any value between 2 and 240. The default setting is 0 minutes.
  • Page 119: Setting The Protocol

    This method for assigning IP addresses to users is most commonly used when a large number of users are authorized to dial in. This option is used only for PPP sessions. Here, the PortMaster learns the IP address of the remote host using IPCP negotiation.
  • Page 120: Setting The Subnet Mask

    PortMaster. Each user’s connection requires a different IPX network number. If you use fffffffe as the IPX network number, the PortMaster assigns the user an IPX network number based on an IP address from the IP address pool.
  • Page 121: Setting The Asynchronous Character Map

    The PortMaster neither broadcasts nor listens for RIP information from the local Ethernet. This is the default. The PortMaster broadcasts RIP information to the host at the other end of the connection. The PortMaster listens for RIP information from the host or other router.
  • Page 122: Setting The Maximum Number Of Dial-In Ports

    Command> set user Username mtu MTU Setting the Maximum Number of Dial-In Ports You can define the number of dial-in ports that a user can use on the PortMaster for Multilink V.120, Multilink PPP (only on ISDN), and multiline load-balancing.
  • Page 123: Setting Filters

    Only packets allowed by the filter are sent out of the PortMaster to the user. If either filter is changed while a user is logged on, the change will not take effect until the user disconnects and logs in again.
  • Page 124: Specifying A Callback Location

    The location is stored in the location table. The PortMaster always calls back using the same port on which the user called in. Network users have PPP or SLIP sessions started for them, as defined in the user table.
  • Page 125: Applying An Optional Access Filter

    Description This option allows the user to log in to the default or alternate host specified for this PortMaster. You can specify the default host with the set host command shown on page 17-5. This option allows the user to log in to a host by IP address or name at the time the login session is established.
  • Page 126: Setting The Login Service Type

    7-12 Function PortMaster is the default login service and can be used to access any host that has the PortMaster in.pmd daemon installed. This type of login service is preferred because it makes the PortMaster port operate like a serial port attached to the host.
  • Page 127: Specifying A Callback Telephone Number

    You can configure the login user for callback connections to enhance network security or to simplify telephone charges. When a user logs in, the PortMaster disconnects the user and then dials out to the telephone number specified for that user. The user is reconnected to the host specified in the user table, via the same port on which the user dialed in.
  • Page 128 Configuring Login Users 7-14 PortMaster Configuration Guide...
  • Page 129: Configuring Dial-Out Connections

    Locations are stored in the location table. All dial-out locations have the following minimum settings: • Location name • Name and password that the local PortMaster uses to authenticate itself to the remote host • Telephone number of the remote host •...
  • Page 130 A location table display looks like the following. The location table entries shown here are examples only. PortMasters have empty locations tables by default. Location Destination ----------- ----------------- 172.16.1.1 192.168.1.21 sub1 192.168.3.1 172.16.1.21 Netmask Group Maxcon ---------------- -------- ---------- 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 PortMaster Configuration Guide Type -------------- On Demand Manual Manual Manual...
  • Page 131: Creating A Location

    Because the default method of initiating a connection is manual, you need to use the dial command to cause the PortMaster to manually dial out to a location. You can change the connection type as shown in Table 8-1. If you are changing an existing location’s connection type, verify that the connection is not active.
  • Page 132: Manual Dial-Out

    Note – When configuring a dial-on-demand location, be careful not to have the on-demand location be the route to the loghost, RADIUS server, RADIUS accounting server, or any host for a port using the PortMaster login or device service, unless you understand the effect of these services upon dial-on-demand.
  • Page 133: Setting The Telephone Number

    Command> set location Locname telephone String Setting the Username and Password The username and password are what the PortMaster uses to authenticate itself to the remote host. Note that the username and password you enter here must also be resident on the remote host (in the user table, RADIUS, or other authentication mechanism).
  • Page 134: Setting The Destination Ip Address

    If you are using the IPX protocol, you must assign a unique IPX network number to the network connection between the remote host and the PortMaster. Enter the IPX network number in the hexadecimal format described in Appendix A, “Networking Concepts.”...
  • Page 135: Setting Rip Routing

    Setting RIP Routing You can associate RIP routing with locations—for example, a dial on-demand connection where the remote router is defined as a location on the local PortMaster. As described in the PortMaster Routing Guide, PortMaster products automatically send and accept route information as RIP messages.
  • Page 136: Setting The Dial Group

    MTU, it is automatically fragmented. An IPX packet that exceeds the specified MTU is automatically dropped. PPP connections can have a maximum MTU of 1500 bytes. SLIP connections can have a maximum MTU of 1006 bytes. With PPP, the PortMaster can negotiate smaller MTUs when requested during PPP negotiation.
  • Page 137 For PPP connections, the PortMaster supports both bidirectional and unidirectional compression. Refer to RFC 1144 for more information about header compression. The PortMaster supports Stac LZS data compression only for PPP connections with bidirectional compression. Stac LZS data compression cannot be used for SLIP connections.
  • Page 138: Setting The Idle Timer

    PortMaster disconnects the connection. You can set the idle time in seconds or minutes, to any value from 0 to 240. The default setting is 0 minutes. If the value is set to 2 seconds or a longer interval, the port is reset after having no traffic for the designated time.
  • Page 139: Setting The Asynchronous Character Map

    This capability is called multiline load balancing. You can define a threshold known as a high-water mark for a location. The high-water mark triggers the PortMaster to bring up an additional connection to the location when the amount of data specified by the high-water mark is queued.
  • Page 140: Setting The Maximum Number Of Dial-Out Ports

    When more than one line is open to a given location, the PortMaster balances the load across each line. When the ports are idle for the time specified by the set location idletime command (see “Setting the Idle Timer”...
  • Page 141: Setting Filters

    This value is used only when the maximum number of ports is greater than one. The default high-water mark is zero. To set the high-water mark in bytes for a location, use the following command: Command> set location Locname high_water Number Setting Filters You can attach input and output filters to each location.
  • Page 142: Testing Your Location Configuration

    This keyword also resets some debugging values previously set with set debug. When your location is configured correctly, change the connection type from manual to continuous or on-demand. To test your configuration, use the following command: Command> dial Locname [-x] 8-14 PortMaster Configuration Guide...
  • Page 143: Configuring Filters

    “Restricting User Access” on page 9-15 Each topic in this chapter includes examples of filters used to accomplish the goal described. See the PortMaster Command Line Reference for more detailed command descriptions and instructions. Overview of PortMaster Filtering Packet filters can increase security and decrease traffic on your network. Filters can be used to limit certain kinds of internetwork communications by permitting or denying the passage of packets through network interfaces.
  • Page 144: Filter Options

    A maximum of 256 filter rules per filter is allowed for the PortMaster 3 and IRX. For other PortMaster products, the maximum number of filter rules allowed is 100. The PortMaster generates an error message when the number of filter rules exceeds the limit.
  • Page 145: Filter Organization

    TCP status Filter Organization Filters are stored in a filter table in the PortMaster nonvolatile configuration memory. Filters can be created or modified at any time, and the changes are not applied to an active use of the filter. Filter names must be between 1 and 15 characters.
  • Page 146: How Filters Work

    Overview of PortMaster Filtering A maximum of 256 filter rules per filter is allowed for the PortMaster 3 and IRX. For other PortMaster products, the maximum number of filter rules allowed is 100. The PortMaster generates an error message when the number of filter rules exceeds the limit.
  • Page 147: Creating Filters

    A maximum of 256 filter rules per filter is allowed for the PortMaster 3 and IRX. For other PortMaster products, the maximum number of filter rules allowed is 100. The PortMaster generates an error message when the number of filter rules exceeds the limit.
  • Page 148: Creating Ip Filters

    You can create a rule that filters IP packets according to their source and destination IP addresses. For more information on the command syntax for creating filters, see the PortMaster Command Line Reference. To create an IP filter rule that filters by address, use the following command—entered on one line: Command>...
  • Page 149: Filtering Tcp And Udp Packets

    Filtering TCP and UDP Packets TCP Packets You can filter TCP packets by source and destination IP address, or by TCP port number. Appendix B, “TCP and UDP Ports and Services,” lists port numbers commonly used for UDP and TCP port services. For a more complete list, see RFC 1700. To create a TCP filter rule, use the following command—entered on one line: Command>...
  • Page 150: Displaying Filters

    To display the filter table, use the following command: Command> show table filter To display a particular filter, use the following command: Command> show filter Filtername Deleting Filters To delete a filter, use the following command: Command> delete filter Filtername PortMaster Configuration Guide...
  • Page 151: Example Filters

    Example Filters Because filters are very flexible, you must carefully evaluate the types of traffic that a specific filter permits or denies through an interface before attaching the filter. If possible, a filter should be tested from both sides of the filtering interface to verify that the filter is operating as you intended.
  • Page 152: Input Filter For An Internet Connection

    Permits FTP connections to host 172.16.0.4. Permits Hypertext Transfer Protocol (HTTP) access to host 192.168.0.5. Permits an FTP data channel. Permits DNS. Permits DNS zone transfers. (You can write this rule to allow only connections to your name servers.) 9-10 PortMaster Configuration Guide...
  • Page 153: Input And Output Filters For Ftp Packets

    Table 9-3 Description of Internet Filter (Continued) Rule Description Permits ICMP packets. Input and Output Filters for FTP Packets Filters can be used to either permit or deny File Transfer Protocol (FTP) packets. You must understand how this protocol works before you develop FTP filters. FTP uses TCP port 21 as a control channel, but it transfers data on another channel initiated by the FTP server from TCP port 20 (FTP-data).
  • Page 154: Rule To Permit Dns Into Your Local Network

    To permit incoming RIP packets, add the following rule to your input filter: Command> set filter filtername RuleNumber permit 172.16.0.0/32 192.168.0.0/32 udp dst eq 520 In the above example, 172.16.0.0/32 is the other end of the Internet connection and 192.168.0.0/32 is the local address of the connection. 9-12 PortMaster Configuration Guide...
  • Page 155: Rule To Allow Authentication Queries

    Rule to Allow Authentication Queries To allow authentication queries used by some mailers and FTP servers, add the following rule to your input filter: Command> set filter filtername RuleNumber permit tcp dst eq 113 For more information about these types of queries, refer to RFC 1413. Rule to Allow Networks Full Access To allow some other network to have complete access to your network, add the following rule.
  • Page 156 ICMP packet types to types 0, 3, 8, and 11 using four rules instead of one. To log all packets that are denied, add the following rule to the end of your filter: Command> set filter filtername RuleNumber deny log 9-14 PortMaster Configuration Guide...
  • Page 157: Restricting User Access

    Restricting User Access Access filters enable you to restrict Telnet or rlogin connections to a specific host or network, or a list of hosts or networks. You can create an access filter that restricts user access to particular hosts. Access filters work as follows: 1.
  • Page 158 Restricting User Access 9-16 PortMaster Configuration Guide...
  • Page 159: Using Modems

    See the PortMaster Command Line Reference for more detailed command descriptions and instructions. Because the PortMaster is a DTE device, a straight-through RS-232 cable is used to connect modems to it. Straight-through cables for modems use pins 2, 3, 4, 5, 6, 7, 8, and 20.
  • Page 160: Modem Functions

    DTE rate, and the modem initialization string. For convenience, the table is preconfigured by Lucent for many common modems. When you specify the name of the modem and the attached port, the PortMaster automatically configures the modem for you, provided the modem is in the factory default state when it is initialized.
  • Page 161: Adding A Modem To The Modem Table

    Note – Use a \r for a carriage return, and a caret (^) to separate the send and expect characters in the string. In the example above, the PortMaster expects OK. Never use on or off for a modem short name.
  • Page 162 Motorola Bitsurfr 10-4 Rate Initialization String 57600 AT&F&D3&T5&R0\\D1S0=1&W^OK 11520 AT&F1&C1&D2&K3S0=1S2=129S10=20&W0& 11520 AT&F&C1&D3S0=1s2=129S10=20&W 57600 AT&F&C1&D3S0=1S10=20&W 11520 AT&F&C1&D3S0=1S10=20&W 57600 AT&F&C1&D3S0=1S10=20&W0 11520 AT&F&C1&D3S0=1S10=20&W0 11520 AT&F&C1&D2&K3S0=1S10=20&W0 11520 AT&F&C1&D3S0=1&W&W1^\rOK 11520 AT&F&C1&D3S0=1&W 11520 AT&F&C1&D3S0=1&W 11520 AT&F&C1&D2$B115200\\Q3%U1&T5S0=1S10 =20*W0&Y0 11520 AT&F&C1&D2\\Q3S0=1S10=20S80=18&W 11520 AT&F&C1&D2%A4=1%A2=95&m0@P2=11520 0@P1=a&W PortMaster Configuration Guide...
  • Page 163 Table 10-1 Factory Default Modem Table Entries (Continued) Modem Name Modem Name (Short) (Long) mot-pwr-p Motorola Power 14.4 PCMCIA mot-life-p Motorola Lifestyle 14.4 PCMCIA multizdx MultiTech Z/DX fax/data v.32 multi-v34 MultiTech MT2834 28.8k multi-v34 MultiTech MT2834 28.8k pp-v32 Practical Peripherals PP9600SA pp-v34 Practical Peripherals...
  • Page 164: Associating A Modem With A Port

    For example; to associate a U. S. Robotics V.34 modem with port S1 and configure the modem, enter: Command> set s1 modem usr-v34 Command> reset s1 10-6 Rate Initialization String 57600 AT&F1&W 11520 AT&F1S0=1&W 57600 AT&F1S0=1&W 11520 AT&F1S0=1&W 57600 AT&F1S0=1S10=20S13.0=1&W0 11520 AT&F1S0=1S10=20S13.0=1&W0 57600 AT&FM0&D2S0=1S2=1 PortMaster Configuration Guide...
  • Page 165: Configuring Ports For Modem Use

    Setting the Port Speed The speed of a port is defined as the DTE baud rate. The PortMaster allows you to specify three different baud rates for each port and one baud rate for host device ports.
  • Page 166: Setting Modem Control

    Set modem control on if you want to use the DCD signal for modem connections. When modem control is on, the PortMaster uses the condition of the carrier detect line to determine whether the line is in use. Modem control must be on for PortMaster outbound traffic.
  • Page 167: Hanging Up A Line

    Request to Send (RTS) signal on pin 4 of the RS-232 connector. The PortMaster sends information to the attached device only when the Clear to Send (CTS) modem line on pin 5 of the RS-232 connector is raised.
  • Page 168 Configuring Ports for Modem Use 10-10 PortMaster Configuration Guide...
  • Page 169: Configuring General Settings

    This chapter describes how to use the command line interface to configure the ISDN Primary Rate Interface (PRI) Line0 and Line1, and the digital modems on the PortMaster 3. The PortMaster 3 can also use many of the commands common to all PortMaster models.
  • Page 170: Configuring Line Use

    Note – T1 and E1 lines require an external clock signal provided by the device to which the PortMaster is connected, or by the telephone company network. To configure a line, use the following command. Table 11-1 explains the line use options.
  • Page 171: Setting The Channel Rate

    Warning – If you configure a line for fractional T1 and reboot the PortMaster 3 before configuring the group and channels, you will no longer be able to see and configure the line. You must erase your entire configuration and reboot to see the line again.
  • Page 172: Setting The Inband Signaling Protocol For E1

    Telco not to transmit these signals. The PortMaster defaults to r2gen when you set the line to inband (see “Configuring Line Use” on page 11-2).
  • Page 173: Configuring Isdn Pri Settings

    Setting the ISDN PRI Switch The switch type information is available from your ISDN PRI service provider. To set the switch type for ISDN connections to the PortMaster ISDN PRI ports, use the following command—entered on one line Command> set isdn-switch ni-2|dms-100|4ess...
  • Page 174: Setting The Encoding Method

    E1 lines. Frame Alignment Signal, an alternative format for E1 lines. Description Line0 or Line1. Bipolar 8-zero substitution. This is the default for T1 lines. Alternate mark inversion. High-density bipolar 3. This is the default for E1 lines. PortMaster Configuration Guide...
  • Page 175: Setting The Pulse Code Modulation

    To set a telephone number for an individual port when the line is configured as ISDN B channels, use the following command. Table 11-9 explains the directory number options. Command> set S0 directory Number Configuring the PortMaster 3 Description Line0 or Line1. Default method for T1 PRI lines.
  • Page 176: Using True Digital Modems

    Options Number Using True Digital Modems Use the following settings to configure the built-in digital modems on the PortMaster 3. Setting Digital Modems The digital modems are numbered from m0 to m59, for a maximum of 60 modems. Modem slot 0 is allocated numbers m0 through m9, modem slot 1 is allocated numbers m10 through m19, and so on.
  • Page 177: Hot-Swapping Digital Modem Cards

    You can display the status for all digital modems. Modem states are as follows: • ACTIVE—in use • READY—available for use • ADMIN—busy Configuring the PortMaster 3 Description Location name that is in the location table. Enables analog modem service on dial-out. Disables analog modem service on dial-out. Using True Digital Modems 11-9...
  • Page 178: Using Channelized T1

    The telephone company will ask you the following two questions when you order digital service level 1 (DS-1) service: • What signaling protocol do you use? You can use either of the following signaling protocols on the PortMaster 3: – E & M wink start –...
  • Page 179: Configuring The Portmaster 3 For Channelized T1

    Command> show Line0 Example Channelized T1 Configuration To configure the Line1 port on a PortMaster 3 for inband, channelized T1 for inbound calls using E & M wink start, extended superframe format, and bipolar 8-zero substitution, use the following commands: Command>...
  • Page 180: Using The T1 Expansion Card

    In addition to line2, a new port is added to the list of active ports. In a single-PRI PortMaster 3, the port is identified as W2; in a two-PRI PortMaster 3 it is identified as W48. If the Stac compression card is present in the PortMaster 3, Stac compression can be enabled for the T1 line.
  • Page 181: Configuring The T1 Expansion Card For Fractional T1

    DSU/CSU extracts timing from the line. Configuring the T1 Expansion Card for Fractional T1 The T1 card is identified as line2 in the PortMaster 3. Follow these steps to configure the PortMaster 3 to use fractional T1 service: 1.
  • Page 182: Troubleshooting The T1 Expansion Card

    WANCTL: sync_init - found device Use the show alarms command to determine whether the T1 card is not operating (for example, if the cable is pulled out). The PortMaster does not show an alarm if the card is removed. Command> show alarms...
  • Page 183: Using Multichassis Ppp

    Displaying Multichassis PPP Addresses To display the addresses of the neighboring PortMasters in the same Multichassis PPP group, and a list of connections to virtual and physical ports on the PortMaster, use the following command: Command> show mcppp Disconnecting a User from a Virtual Port To disconnect a user attached to a virtual port, you must reset the port.
  • Page 184: Troubleshooting The Portmaster 3

    Debug information is displayed to the console. To set debug flags used for troubleshooting, use the following command—entered on one line: Command> set debug mdp-status|mdp-events|mcppp-event on|off Table 11-12 explains the debug options for the PortMaster 3 Table 11-12 Debug Options for the PortMaster 3 Option mdp-status...
  • Page 185: Using Isdn Bri

    This chapter describes how to configure the PortMaster to connect two local area networks (LANs) via ISDN using V.25bis dialing on a Basic Rate Interface (BRI) with an integrated network termination device (NT1). This chapter also provides an example to demonstrate this type of configuration.
  • Page 186 Overview of ISDN BRI Connections For the ISDN S/T interface, a PortMaster requires an external terminal adapter to connect from the PortMaster synchronous port to the ISDN link. For terminal adapters that do not have automatic dialing or for administrators who want to manually connect with the terminal adapter, the PortMaster supports automatic location table scripting.
  • Page 187: Provisioning

    To help you determine the kind of provisioning you require for your ISDN setup, refer to the information in the hardware installation guide and on the Lucent Remote Access website at http://www.livingston.com. Using ISDN BRI workstation 1 workstation 2 PortMaster 2e workstation 3 ISDN New York System Link Network NT1...
  • Page 188: Configuring Isdn

    Configuring ISDN Configuring ISDN This section describes the commands that you need to configure a PortMaster for ISDN BRI service. ISDN BRI Switch Types The North American ISDN U interface and international S/T interface require different switch type settings on your PortMaster.
  • Page 189: Setting The Switch Type

    To set the ISDN switch type for an ISDN BRI S/T interface, use the following commands: Command> set isdn-switch net3|vn4|1tr6|ntt|kdd Command> reboot Note – You must reboot the PortMaster after changing the switch type for the change to take effect. Service Profile Identifier (SPID) for ISDN BRI The service profile identifier (SPID) is a unique number assigned by the telephone company that identifies your ISDN equipment to the telephone company’s switch.
  • Page 190: Terminal Identifier (Tid) For Isdn Bri

    The terminal identifier (TID) is a numeric value used by some telephone switches for additional identification. Some telephone companies require the SPID, while others require a TID, as well. When configuring the PortMaster, append the TID to the SPID if required by your carrier.
  • Page 191: Multilink Ppp

    Multilink PPP Multilink PPP V.120 is supported on analog and ISDN interfaces. The PortMaster accepts and detects both multiline load balancing and Multilink PPP connections. Multiple lines can be used to increase bandwidth, either using Multilink PPP as defined in RFC 1717 or using Lucent’s multiline load balancing.
  • Page 192: Multiple Subscriber Network For An S/T Interface

    BRI line to receive calls not intended for the PortMaster. When the MSN feature is disabled, the PortMaster rejects the call if a port is not available. In this case other S/T connected devices are not given an opportunity to check or accept the call.
  • Page 193: Isdn Port Configuration Tips

    1. Use a cable with RJ-45 connectors to connect the BRI port to the ISDN telephone line. Caution – Do not plug an analog telephone line into the PortMaster BRI port. The PortMaster could be damaged. Using ISDN BRI...
  • Page 194 Configure ISDN port settings (page 12-12). d. Configure dial-in users (page 12-13). e. Configure dial-out locations (page 12-14). 3. Configure the following settings for the PortMaster in San Francisco: a. Configure global settings (page 12-16). b. Configure Ethernet interface settings (page 12-16).
  • Page 195: Configuring The Portmaster In Denver

    S.F. Ether0 192.168.100.1/24 Configuring the PortMaster in Denver The PortMaster in Denver is being configured for an ISDN dial-up connection to the PortMaster in San Francisco. Configuring Global Settings Configure the global settings on the PortMaster in Denver to the values shown in Table 12-3.
  • Page 196: Configuring Isdn Port Settings

    Configure the ISDN port with the values shown in Table 12-5 for the example in this chapter. This example assumes that the BRI used is port S1-S2 on a PortMaster ISDN Office Router (OR-U). If your application uses ports S10 through S29 on a...
  • Page 197: Configuring A Dial-In User

    Synchronous WAN Port.” Configuring a Dial-In User A user account must be set up on the PortMaster router in Denver so that PortMaster in San Francisco can dial in when traffic is queued. The new user sf should be configured with the values shown in Table 12-6.
  • Page 198: Configuring A Dial-Out Location

    “Configuring Dial-In Users.” Configuring a Dial-Out Location A location entry on the PortMaster in Denver must be created for the location identified as sf. This allows the PortMaster router in Denver to call the PortMaster in San Francisco when network traffic is queued. The new location sf should be configured with the values shown in Table 12-7.
  • Page 199: Configuring The Portmaster In San Francisco

    Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
  • Page 200 Command set ether0 ipx enable set ether0 address 192.168.100.1 set ether0 netmask 255.255.255.0 set ether0 ipxnet F2 set ether0 ipxframe ethernet_802.2 set ether0 broadcast high set ether0 rip on PortMaster Configuration Guide...
  • Page 201 Configure the ISDN port with the values shown in Table 12-10 for the example in this chapter. This example assumes that the BRI used is port S1-S2 on a PortMaster ISDN Office Router (OR-U). If your application uses ports S10 through S29 on a PortMaster 2E, adjust these values accordingly.
  • Page 202 ISDN BRI Unnumbered IP Configuration Example Configuring a Dial-In User A user account must be set up on the PortMaster router in San Francisco so that PortMaster in Denver can dial in when traffic is queued. The new user denver should be configured with the values shown in Table 12-11.
  • Page 203 Configuring a Dial-Out Location A location entry on the PortMaster in San Francisco must be created for the location identified as denver. This allows the PortMaster router in San Francisco to call the PortMaster in Denver when network traffic is queued. The new location denver should be configured with the values shown in Table 12-12.
  • Page 204: Testing The Setup

    Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
  • Page 205: Troubleshooting An Isdn Bri Connection

    Troubleshooting an ISDN BRI Connection Most ISDN configurations come up with little trouble if you have configured the PortMaster using information from your telephone company. However, if you are having problems, use the information in this section to try to debug your configuration.
  • Page 206: Interpreting Isdn Bri Port Status

    Command> set debug 0x51 For more information about the interpreting the results of the debug command, refer to the PortMaster Troubleshooting Guide. After you verify that the PPP negotiation is correct, enter the following commands to turn off the debug utility: Command>...
  • Page 207: Using Frame Relay

    PortMaster routers support Frame Relay over synchronous ports. This chapter uses an example to demonstrate how to configure the PortMaster to connect to a synchronous line using Frame Relay. This chapter also explains how to...
  • Page 208: Pvcs And Dlcis

    Overview of Frame Relay PVCs and DLCIs PortMaster products support permanent virtual circuits (PVCs). PVCs are used to form a connection between any two devices attached to a Frame Relay cloud. Each PVC is given a unique number on each physical circuit along the path between the two devices.
  • Page 209: Discarding Frames

    Discarding Frames The PortMaster pushes as much data out of the serial port as it can at port speed for any PVC that has traffic, regardless of CIR. The Frame Relay switch passes as much of the data as possible on to the next link. However, once a particular PVC has transmitted its CIR-worth of bits each second, the switch marks any additional frames as “discard...
  • Page 210: Frame Relay Configuration On The Portmaster

    DLCIs during the synchronous port configuration. Alternatively, the PortMaster can discover DLCIs dynamically with LMI or Annex-D and learn the IP addresses of the other routers through Inverse ARP if the other routers on your Frame Relay cloud support Inverse ARP as specified in RFC 1490.
  • Page 211: Enabling Lmi

    Frame Relay switch. If LMI is enabled on the switch, you must enable LMI on the PortMaster. The default keepalive value is 10 seconds. However, if your telephone company chooses another keepalive value, change this value as they instruct you.
  • Page 212: Enabling Annex-D

    DLCIs that are accessible through the Frame Relay network by this interface. The PortMaster uses Inverse ARP to learn the IP addresses of routers attached to the PVCs represented by the specified DLCIs, if those routers support Inverse ARP.
  • Page 213: Configuration Steps For A Frame Relay Connection

    Configuration Steps for a Frame Relay Connection The example described in this chapter connects a PortMaster router located in a main office (Bangkok) with a PortMaster router located in a branch office (New York) using Frame Relay on a synchronous interface.
  • Page 214: Configuring The Portmaster In Bangkok

    Configuration Steps for a Frame Relay Connection Configuring the PortMaster in Bangkok Configure the settings for the PortMaster in Bangkok with the values in the following sections. Configuring Global Settings Configure the global settings on the PortMaster in Bangkok to the values shown in Table 13-1.
  • Page 215: Configuring The Portmaster In New York

    Configuring the PortMaster in New York Configure the settings for the PortMaster in New York with the values in the following sections. You do not need to specify a gateway for the PortMaster in New York because it is on the Internet.
  • Page 216 Command set w1 network hardwired set w1 protocol frame set w1 address 92.168.1.20.2 set w1 netmask 255.255.255.0 set w1 cd on set w1 rip listen set w1 annex-d 10 (LMI can be used instead of Annex-D) PortMaster Configuration Guide...
  • Page 217: Troubleshooting A Frame Relay Configuration

    Command> reset w1 Command> save all If LMI or Annex-D is set, the PortMaster receives DLCI information in the full status update messages from the Frame Relay switch. The PortMaster then attempts to discover IP addresses of other routers using Inverse ARP. You can set DLCI lists statically as well.
  • Page 218: Frame Relay Subinterfaces

    In this configuration, the DLCIs are divided between the subinterfaces through the use of the location table and the DLCI table. Each subinterface must have its own subnet or assigned network. The PortMaster has a limit of 512 total active interfaces, which can be further limited by available memory.
  • Page 219: Adding A Location

    Adding a Location To configure a Frame Relay subinterface, you add a location for each interface, configure it with the frame protocol, and associate it with a dial group. Then associate a synchronous port with the same dial group. For example, to create a location called sub1, enter the following commands: Command>...
  • Page 220: Troubleshooting Subinterfaces

    If you have a Cisco router on the other end of your connection, verify that it is set for encapsulation frame-relay ietf for the serial interface; otherwise, the Cisco frame-relay map command for your DLCI must have the ietf keyword appended. 13-14 PortMaster Configuration Guide...
  • Page 221: Example: Configuring A Frame Relay Subinterface

    Example: Configuring a Frame Relay Subinterface This set of example commands configures a PortMaster IRX-111 router with Frame Relay packets coming into port S1 with DLCIs 16, 17, and 18. Port S1 has already been configured for Frame Relay, so that portion is not shown here. The following commands split the Frame Relay port into a primary subinterface for DLCI 18 and a secondary subinterface for DLCIs 16 and 17.
  • Page 222 Frame Relay Subinterfaces 13-16 PortMaster Configuration Guide...
  • Page 223: Using Synchronous V.25Bis Connections

    When connecting an asynchronous ISDN terminal adapter to an asynchronous port using AT commands to dial, configure the PortMaster just as you would for a modem. Refer to Chapter 15, “Using Office-to-Office Connections,” and Chapter 16, “Using Internet Connections,”...
  • Page 224 Figure 14-1 Example of an ISDN or Switched 56Kbps Connection 14-2 workstation 1 IRX Router IRX Router terminal adapter workstation 3 workstation 1 workstation 2 Boston workstation 2 Miami terminal adapter IRX Router IRX Router workstation 3 11820007 11820007 PortMaster Configuration Guide...
  • Page 225: Configuration Steps For A Synchronous V.25Bis Connection

    The example in this chapter shows variables in italics. Change these values to reflect your network. Once you have assigned an IP address to the PortMaster, continue with the following steps: 1. Configure the following settings for the PortMaster in Boston: a.
  • Page 226 Command> save all 14-4 Command set gateway 192.168.1.1 set sysname boston Command set ether0 address 192.168.200.1 set ether0 netmask 255.255.255.0 set ether0 ipxnet F1 set ether0 ipxframe ethernet_802.2 set ether0 broadcast high set ether0 rip on PortMaster Configuration Guide...
  • Page 227 Synchronous WAN Port.” Configuring a Dial-In User A user account must be set up on the PortMaster router in Boston so the PortMaster in Miami can dial in when traffic is queued. The new user miami should be configured on the PortMaster router in Boston with the values shown in Table 14-4.
  • Page 228 Chapter 7, “Configuring Dial-In Users.” Configuring a Dial-Out Location A location entry on the PortMaster in Boston must be created for the location identified as miami. This allows the PortMaster in Boston to call the PortMaster in Miami when network traffic is queued.
  • Page 229: Configuring The Portmaster In Miami

    Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
  • Page 230 (This is the address of the next upstream router.) set default on set sysname miami Command set ether0 ipx enable set ether0 address 192.168.1.1 set ether0 netmask 255.255.255.0 set ether0 ipxnet F2 set ether0 ixpframe ethernet_802.2 set ether0 broadcast high set ether0 rip on PortMaster Configuration Guide...
  • Page 231 After you configure the Ethernet interface as shown in Table 14-7, enter the following command to save the configuration: Command> save all For more information on Ethernet settings, refer to Chapter 4, “Configuring the Ethernet Interface.” Configuring Synchronous WAN Port Settings Configure the synchronous WAN port with the values shown in Table 14-8.
  • Page 232 Configuration Steps for a Synchronous V.25bis Connection Configuring a Dial-In User A user account must be set up on the PortMaster router in Miami so the PortMaster in Boston can dial in when traffic is queued. The new user boston should be configured on the PortMaster in Miami with the values shown in Table 14-9.
  • Page 233 Configuring a Dial-Out Location A location entry on the PortMaster in Miami must be created for the location identified as boston. This allows the PortMaster router in Miami to call the PortMaster router in Boston when network traffic is queued. The new location boston should be configured on the PortMaster in Miami with the values shown in Table 14-10.
  • Page 234: Testing The Configuration

    Reset the port. b. Check your configuration. Dial Boston again. d. Repeat this procedure until the connection is made correctly. 5. When you have configured the PortMaster correctly, reset the port and save the configuration. Command> reset w1 Command> save all...
  • Page 235: Troubleshooting A Synchronous V.25Bis Connection

    V.35 interface on your CSU/DSU. • Verify that the CSU/DSU or synchronous terminal adapter is providing the clock to the PortMaster. The CSU/DSU or terminal adapter can generate the clock or receive it from the carrier. •...
  • Page 236 Troubleshooting a Synchronous V.25bis Connection 14-14 PortMaster Configuration Guide...
  • Page 237: Using Office-To-Office Connections

    The example described in this chapter connects a PortMaster Office Router located in a branch office in London with a PortMaster 2 in the headquarters in Paris. These models are used as an example; you can use any PortMaster for this configuration.
  • Page 238 Figure 15-1 Office-to-Office Dial-On-Demand Configuration workstation 1 PCMCIA modem London Paris The PortMaster ISDN Office Router OR-U has an ISDN BRI port designated S1/S2 instead of a PCMCIA modem port. The ISDN port can be used for ISDN dial-on-demand connections. 15-2 workstation 2...
  • Page 239: Configuration Steps For An Office-To-Office Connection

    Once you have assigned an IP address to the PortMaster, continue with the steps. The following values shown in this chapter apply only to this example; when you are configuring your PortMaster, use values appropriate for your network.
  • Page 240: Configuring The Office Router In London

    Configuration Steps for an Office-to-Office Connection Configuring the Office Router in London Configure the following settings on the PortMaster PCMCIA Office Router in the London office to enable London office users to access the main office network in Paris on demand.
  • Page 241 For more information on Ethernet settings, refer to Chapter 4, “Configuring the Ethernet Interface.” Configuring PCMCIA Serial Port Settings The PCMCIA modem port on the PortMaster Office Router is designated S1. Configure the port with the values shown in Table 15-3. You must install the PCMCIA modem to configure port S1.
  • Page 242 You must set up a user account on the Office Router in the London office so the PortMaster 2 in the Paris office can dial in when traffic is queued at the main office. The new user paris should be configured with the values shown in Table 15-4.
  • Page 243 Dial-Out Location Settings for London You must create a location entry on the PortMaster Office Router in the London office for the Paris office. This entry allows the Office Router in the London office to call the PortMaster 2 in the Paris office when network traffic is queued. The new location paris should be configured with the values shown in Table 17-5.
  • Page 244: Configuring The Portmaster In Paris

    For more information about configuring location table settings, refer to Chapter 8, “Configuring Dial-Out Connections.” Configuring the PortMaster in Paris In the example, the remote machine is a PortMaster 2 Communications Server in the Paris office. Configuring Ethernet Interface Settings Configure the Ethernet settings for the Paris office shown in Table 15-6.
  • Page 245 Configuring Dial-Out Port Settings For all ports on the PortMaster in Paris that you want enabled for dial-in and dial-out (two-way service) to the Office Router in the London office, enter the values shown in Table 15-7. Table 15-7 Two-Way Port Values...
  • Page 246 Configuration Steps for an Office-to-Office Connection Configuring a Dial-In User A user account must be set up on the PortMaster in Paris so the Office Router in the London can dial in when traffic is queued. The new user london should be configured with the values shown in Table 15-8.
  • Page 247 Configuring Dial-Out Location Settings You must create a location entry on the PortMaster in Paris for the London office. This entry allows the PortMaster in Paris to call the PortMaster in the London office when network traffic is queued. Configure a new location london with the values shown in Table 15-9.
  • Page 248: Testing The Setup

    Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
  • Page 249: Setting The Console Port For Multiline Load Balancing

    Multiline load balancing is used to add additional lines when network traffic is heavy. If more than one line to the same location is established, the PortMaster balances the traffic among the lines. To configure the Office Router for multiline load balancing, you must attach an external modem to the console port.
  • Page 250 Table 15-10 Location Settings for Load Balancing Setting Maximum ports High-water mark 15-14 London workstation 2 workstation 1 System Link Network PortMaster Office Router PortMaster Office Router PCMCIA modem modem PortMaster workstation 2 workstation 3 Command set location paris maxports 2...
  • Page 251: Using Isdn For On-Demand Connections

    Using ISDN for On-Demand Connections Using the ISDN BRI port on the PortMaster ISDN Office Router (OR-U) is very similar to using the PCMCIA port on the OR-M, except that you must do the following: •...
  • Page 252 Using ISDN for On-Demand Connections 15-16 PortMaster Configuration Guide...
  • Page 253: Using Internet Connections

    Using Internet Connections This chapter uses an example to demonstrate how to configure the PortMaster to establish a continuous connection to an Internet service provider (ISP), shown in Figure 18-1. This connection creates a gateway from your office to the Internet using a dial-out connection through one of the serial ports on your PortMaster.
  • Page 254 Figure 16-1 Continuous Internet Connection System Link Network PortMaster PortMaster Office Router office Internet Internet service provider 11820010 11820010 16-2 PortMaster Configuration Guide...
  • Page 255: Overview Of Continuous Internet Connections

    Configuration Steps for an Internet Connection The example described in this chapter connects a PortMaster router located in an office (office1) with an ISP (isp1) using Frame Relay on a synchronous interface. To install your PortMaster, follow the instructions in your hardware installation guide. If you need additional help, refer to the troubleshooting chapter of the installation guide.
  • Page 256: Configuring Global Settings

    2. Test the configuration (page 16-8 or page 16-9). 3. Set network filtering (page 16-10). Alternatively, you can configure a PortMaster with an ISDN port for an Internet connection. See “Using ISDN for Internet Connections” on page 16-11. Configuring Global Settings Configure the global settings to the values shown in Table 16-1.
  • Page 257 Table 16-2 Ethernet Port Parameter Values Setting IP address Netmask Broadcast address After configuring the Ethernet interface, enter the following commands to reset it and save the configuration: Command> reset ether0 Command> save all For more information on Ethernet interface parameters, refer to Chapter 4, “Configuring the Ethernet Interface.”...
  • Page 258 1500 set s1 speed 1 115200 set s1 cd on set s1 rts/cts on set s1 xon/xoff off set s1 destination 192.168.5.6 set s1 netmask 255.255.255.0 set s1 rip off set s1 compression on PortMaster Configuration Guide...
  • Page 259: Configuring A Dial-Out Location

    Asynchronous Port.” Configuring a Dial-Out Location If you are using a continuous dial-out link, a location entry on the PortMaster must be created for the location identified as isp1. This entry allows the PortMaster to establish a connection with the ISP as soon as it is booted. The new location isp1 should be configured with the values shown in Table 16-5, or as instructed by your ISP.
  • Page 260: Testing The Continuous Dial-Out Setup

    Note – Configuring the maximum ports setting to a value higher than 0 causes the PortMaster to dial out to a continuous location, or become available for dial-out to an on-demand location. By configuring the maximum ports setting last, you ensure that the PortMaster will not attempt to make a connection with a location until you have configured all the settings for that location.
  • Page 261: Testing The Network Hardwired Setup

    Command> show s1 3. If there is a problem, check your configuration. Contact your ISP if you are unable to connect as expected. 4. When you have configured the PortMaster correctly, reset the port and save the configuration. Command> reset s1 Command>...
  • Page 262: Providing Network Filtering

    53 permit tcp dst eq 53 permit icmp If you have not configured a name server for the PortMaster, use IP addresses instead of hostnames when creating filters. Table 16-6 provides a line by line description the filter.
  • Page 263: Using Isdn For Internet Connections

    If your domain name server is outside your local network, refer to “Input and Output Filters for FTP Packets” on page 9-11. Using ISDN for Internet Connections Using the ISDN port on a PortMaster is very similar to using the serial port, except that you must do the following: •...
  • Page 264 Using ISDN for Internet Connections 16-12 PortMaster Configuration Guide...
  • Page 265: Providing User Dial-In Access

    Providing User Dial-In Access This chapter uses an example to demonstrate how to configure a PortMaster for remote dial-in access to local hosts and networks. Although the example shows how Internet service providers (ISPs) can provide dial-in access to their users, this application can be used by academic environments, corporate telecommuters, or anyone else needing remote access to a host or network.
  • Page 266 The same application can be used by companies to allow remote users to access their own accounts on the corporate network. Once the PortMaster authenticates users, they can access network resources as if they were connected to the corporate network directly.
  • Page 267: Example Configuration

    IP address of host running backup RADIUS IP address of host that shell users log in to IP addresses reserved for future hosts IP address and name of first PortMaster IP addresses and names for additional PortMasters Reserved pool of assigned addresses for...
  • Page 268: Configuration Steps For Dial-In Access

    Note – This example uses a PortMaster 2E Communications Server. If you are using a PortMaster 25, the numbers of assigned pools can be moved closer together.
  • Page 269: Connecting Modems

    2. Make sure that the modem cables are securely fastened and that you provide enough room for the modems to stay cool. Configuring Global Settings Configure the global settings on the first PortMaster to the values shown in Table 17-2. Table 17-2 Global Values...
  • Page 270: Configuring Ports

    Command> save all Configuring Ports You must configure each port you are using for dial-in on the first PortMaster, plus its attached modem. Configuring Ethernet Port Settings Set the Ethernet port on the first PortMaster to the values shown in Table 17-3.
  • Page 271 Automatically answers on the first ring If you have already configured your modems on another machine, you should connect to the modem through the PortMaster and set the modem back to the factory default. Then use the recommended modem string to properly configure each modem.
  • Page 272: Configuring Users

    Configuring Users Because no more than approximately one hundred users can be configured in the user table and stored in nonvolatile memory on the PortMaster, you should use RADIUS for user authentication when configuring multiple PortMaster Communication Servers to handle more than a few dozen users each. This example assumes the use of RADIUS.
  • Page 273: Dial-In Login Users

    Note – Use the instructions in this section only if you are not using RADIUS and you are not using pass-through logins. A user account must be set up on the PortMaster for each authorized user. You should configure each new user user1, user2, and so on, with the values shown in Table 17-6.
  • Page 274: Testing The User Dial-In Setup

    Configuration Steps for Dial-In Access A user account must be set up on the PortMaster for each authorized network user. Each new user usera, userb, and so on should be configured with the values shown in Table 17-7. Table 17-7...
  • Page 275 Reset the port. b. Check your configuration. Dial the PortMaster again. d. Repeat this procedure until the connection is made correctly. 5. When you have configured the PortMaster correctly, reset the ports and save the configuration. Command> reset all Command> save all...
  • Page 276 Configuration Steps for Dial-In Access 17-12 PortMaster Configuration Guide...
  • Page 277: Accessing Shared Devices

    This chapter uses an example to demonstrate how to configure the PortMaster to connect from networked hosts to shared devices attached to the PortMaster. This type of connection provides user access to modems, printers, and other RS-232 devices. The following topics are described: •...
  • Page 278: Network Device Configuration

    Overview of Shared Device Access Methods Once a port is defined as a host device, you configure it with the PortMaster device service, and select a pseudo-tty terminal. The host device port can now be accessed if you establish a pseudo-tty connection to the port from a UNIX host with the PortMaster daemon software installed.
  • Page 279 The example described in this chapter allows a user to dial in to port S2 on the PortMaster, log in to a workstation, and access a serial printer attached to port S9 as /dev/ttyre, using the PortMaster device service. The workstation user can also access port S2 as /dev/ttyrf when it is not being used for login service.
  • Page 280: Configuration Steps For Shared Device Access

    The example in this chapter shows variables in italics. Change these values to reflect your network. Once you have assigned an IP address to the PortMaster, continue with the following steps: 1. Attach the modem to port S2 with a straight-through cable.
  • Page 281: Configuring Port Settings

    After you configure global settings as shown in Table 18-1, enter the following command to save the configuration: Command> save all Configuring Port Settings You must configure settings for your Ethernet interface, dial-in-and-out (two-way) port, and printer port. You can connect the printer to either a serial port or a parallel port. Ethernet Interface Settings Configure the Ethernet interface to the values shown in Table 18-2.
  • Page 282 (If you turn security on, you must also configure the user table or RADIUS.) set s2 service_login portmaster set s2 service_device portmaster PortMaster Configuration Guide...
  • Page 283 Configuration Steps for Shared Device Access Command set s9 device /dev/ttyre set s9 speed 1 9600 set s9 speed 2 9600 set s9 speed 3 9600 set s9 cd on set s9 xon/xoff on set s9 host default set s9 service_device portmaster 18-7...
  • Page 284: Configuring A Network Device For Telnet Access

    Command> save all Configuring a Network Device for Telnet Access To access modems or other devices attached to PortMaster ports via Telnet, use the general configuration given earlier in this chapter but use the settings shown in Table 18-6. This example is for port S1.
  • Page 285 Configuration Steps for Shared Device Access The value pm1 is the hostname of the PortMaster you are accessing, and 6001 is the TCP port set for the port you are accessing. You can also set several ports to the same TCP port to create a pool of ports available for Telnet access.
  • Page 286 Configuration Steps for Shared Device Access 18-10 PortMaster Configuration Guide...
  • Page 287: Using Synchronous Leased Lines

    (2.048Mbps). This chapter also describes how to configure a dial backup connection for your synchronous line. The example described in this chapter connects a PortMaster router located in one office with a PortMaster router located in another office using a dedicated leased line.
  • Page 288 Appendix A, “Networking Concepts.” In the leased line configuration described in this chapter, the Ethernet address of the PortMaster routers is used as the address for the serial link in a point-to-point unnumbered serial connection. Because the PortMaster relies on an external clock...
  • Page 289: Configuration Steps For Leased Line Connections

    PPP operation and can have input and output filters for network security. Note – The PortMaster also supports numbered IP interfaces on leased lines, but Lucent does not recommended this method because it wastes IP address space.
  • Page 290: Configuring The Portmaster Office Router In Rome

    Configuration Steps for Leased Line Connections Configuring the PortMaster Office Router in Rome Configure the settings for the PortMaster Office Router in Rome with the values in the following sections. Configuring Global Settings Configure the global settings to the values shown in Table 19-1.
  • Page 291 Ethernet Interface.” Configuring Synchronous WAN Port Settings Configure the synchronous WAN port on the PortMaster Office Router in Rome with the values shown in Table 19-3. Port S1 is used in this example. The IP address for the port is left unconfigured, accepting the default IP address value of 0.0.0.0.
  • Page 292: Configuring The Portmaster Office Router In Florence

    Configuration Steps for Leased Line Connections Configuring the PortMaster Office Router in Florence Configure the settings for the PortMaster Office Router in Florence with the values in the following sections. Configuring Global Settings Configure the global settings to the values shown in Table 19-4.
  • Page 293 If you are not sure of the IP address on the other end of the connection, you can set the IP destination to 255.255.255.255 and the PortMaster will attempt to learn the address. Leave all other settings at their default values.
  • Page 294: Troubleshooting A Leased Line Connection

    The error counters should be 0 (zero) except for abort errors. If your counters are nonzero, the problem is external to the PortMaster. Note – CRC errors will occur if the cable is ever unplugged from the PortMaster. • Verify that you are using the correct cable and that it is attached securely to the correct port.
  • Page 295 Then set the CSU/DSU for local loopback. You should see the following message: LCP_APPARENT_LOOP For more information about the interpreting the results of the debug command, refer to the PortMaster Troubleshooting Guide. • If the local loopback shows network connectivity in the local router, take the CSU/DSU out of loopback and set line loopback on the remote CSU/DSU.
  • Page 296 Troubleshooting a Leased Line Connection 19-10 PortMaster Configuration Guide...
  • Page 297: Networking Concepts

    “Using Naming Services and the Host Table” on page A-8 • “Managing Network Security” on page A-9 See the PortMaster Routing Guide for information on routing and how Lucent’s ComOS implements routing protocols. See the glossary for unfamiliar terms. Network Addressing PortMaster products support packet routing using both IP and IPX protocols.
  • Page 298: Ip Address Notation

    192.168.42.0 through 192.168.42.255. CIDR uses 192.168.42.0/24 to describe the same range of addresses. RIPv1 is an example of a protocol that uses address classes. OSPF and BGP-4 are examples of protocols that do not use address classes. Dotted Decimal Notation 100.100.100.10 195.32.4.200 PortMaster Configuration Guide...
  • Page 299 Network Addressing Class A Addresses The class A IP address format allocates the highest 8 bits to the network field and sets the highest-priority bit to 0 (zero). The remaining 24 bits form the host field. Only 126 class A networks can exist (0 is reserved, and 127 is used for loopback networks), but each class A network can have almost 17 million hosts.
  • Page 300 Class E Addresses The class E IP address is reserved for future use. In class E addresses, the 4 highest-order bits are set to 1, 1, 1, and 1. Routers currently ignore class E IP addresses. 192.168.20.220 Host address PortMaster Configuration Guide...
  • Page 301: Reserved Ip Addresses

    Reserved IP Addresses Some IP addresses are reserved for special uses and cannot be used for host addresses. Table A-2 lists ranges of IP addresses and shows which addresses are reserved, which are available to be assigned, and which are for broadcast. Table A-2 Reserved and Available IP Addresses Class...
  • Page 302: Ip Address Conventions

    The standard for broadcast is high, which uses all 1s in the host portion (for example, 192.168.1.255); however, many networks still use all 0s. The PortMaster can be configured either way and should be set to match the other systems on your network.
  • Page 303: Netmasks

    Netmasks A netmask is a four-octet number that identifies either a supernetwork (supernet) or a subnetwork (subnet). A netmask that designates a subnet is called a subnet mask. Using Subnet Masks to Create IP Subnets Subnet masks are used to divide networks into smaller, more manageable groups of hosts known as subnets.
  • Page 304: Using Naming Services And The Host Table

    Framed-IP-Netmask, enter the following commands: Command> set user-netmask on Command> save all Caution – The VLSM feature affects both routing and proxy ARP on the PortMaster and should be used with caution. Using Naming Services and the Host Table Naming services are used to associate IP addresses with hostnames. Many networks use the Domain Name System (DNS) or the Network Information Service (NIS) for mapping hostnames to IP addresses.
  • Page 305: Managing Network Security

    The PortMaster enables you to specify an internal host table, which can be used in addition to DNS and NIS. The host table allows each unique IP address to be aliased to a unique name. The host table is consulted when a port set for host access prompts for the name of the host.
  • Page 306: Radius

    (RADIUS) server. The server can authenticate users against a UNIX password file, NIS databases, or separately maintained RADIUS database. The PortMaster acts as a RADIUS client: it sends authentication requests to the RADIUS server, and acts on responses sent back by the server. For more information about RADIUS, refer to the RADIUS Administrator’s Guide.
  • Page 307: Tcp And Udp Ports And Services

    Authority (IANA). A more complete list is available in RFC 1700, “Assigned Numbers.” Note – If you are configuring a filter on a PortMaster from the command line interface, you must use the port number. The PortMaster does not have the /etc/services file and cannot use NIS to get the equivalent information.
  • Page 308 SNMP system management messages Interactive Mail Access Protocol (IMAP) version 3 IMAP version 3 Remote process execution Remote login Remote who daemon (rwhod) Remote command (rsh) System log facility Line printer daemon (LPD) spooler Terminal-to-terminal chat Terminal-to-terminal chat PortMaster Configuration Guide...
  • Page 309 Newer version of Terminal-to-terminal chat Routing Information Protocol (RIP) UNIX-to-UNIX Copy Protocol (UUCP) UUCP Variant of UUCP/TCP Variant of UUCP/IP Kerberized login Kerberized login 1642 PortMaster daemon in.pmd 1643 PortMaster Console Protocol 1645 Remote Authentication Dial-In User Service (RADIUS) 1646 RADIUS accounting 1647...
  • Page 310 PortMaster Configuration Guide...
  • Page 311 An error indicating an attempted and failed connection. acceptance policy A set of rules that determine the path and route information the PortMaster accepts from a BGP peer for further processing. See also policy. address A number used to identify a computer or other device on a network or internetwork. See also IP address;...
  • Page 312 The ANSI T1.617 Frame Relay Annex-D version of the Local Management Interface (LMI) protocol. The Annex-D protocol has a more robust feature set than the proprietary Cisco/Stratacom LMI, but was developed later. Recent versions of the PortMaster software support either type of LMI. Earlier versions supported only the Cisco/Stratacom version.
  • Page 313 autonomous system border router In OSPF, a router that exchanges information with routers from other autonomous systems. Autonomous system border routers are also used to import routing information about RIP, direct, or static routes from non-OSPF attached interfaces. autonomous system path list In BGP, the list of autonomous systems that a packet must traverse to reach a given set of IP address destinations located within a single autonomous system destination.
  • Page 314 BOOTP provides a way for a host on a network to acquire its assigned IP address, the IP address of a boot server host, and a file to load into memory and run. Bootstrap Protocol See BOOTP. Border Gateway Protocol See BGP. Glossary-4 PortMaster Configuration Guide...
  • Page 315 Packets that are sent to all network nodes. callback A port configuration allowing the PortMaster to call back dial-in users before providing access. Callback provides an extra layer of security and can simplify telephone charges. CCITT Consultative Committee for International Telegraph and Telephone. International organization formerly responsible for the development of communications standards.
  • Page 316 Within the confederation, each BGP peer treats only the peers in its own CMAS as internal peers. Peers in different CMASs are treated as external peers. Glossary-6 reflector. Compare confederation. cluster. See also cluster; route PortMaster Configuration Guide...
  • Page 317 A character string assigned to a Simple Network Management Protocol (SNMP) agent to restrict read and write access to the SNMP variables. ComOS The operating system for PortMaster communications servers, routers, and access servers. confederation In BGP, an autonomous system that has been subdivided into smaller autonomous systems called confederation member autonomous systems.
  • Page 318 See CMAS. console port A serial port on a PortMaster attached to a terminal or PC through which you enter commands to communicate with ComOS. CRC error Cyclic redundancy check error. These errors can indicate problems with source station hardware, receivers, retiming modules and/or repeaters, bridges, cabling, or transceivers.
  • Page 319 In BGP, an arbitrary rating number that the PortMaster assigns to every route it receives from a BGP peer. A higher numbers indicates a greater preference for a route when more than one exists to a destination. A route from an internal peer is assigned the local preference number that the PortMaster learned with the route.
  • Page 320 Frame Relay switch. If the DTE lacks complete digital line interface capability, the DSU can be located with the channel service unit (CSU) on the customer’s site and known as a CSU/DSU. See also CSU. Glossary-10 PortMaster Configuration Guide...
  • Page 321 A specialized, predefined BGP policy that simplifies the use of PortMaster routers in straightforward multihomed environments. When you define easy-multihome for a peer, you restrict what the PortMaster handles from the peer to information that is no more than two autonomous system hops away from the PortMaster. Only information that meets this criterion is accepted from the peer, put into the routing table used to forward packets to their destinations, and advertised to other peers.
  • Page 322 A peer that resides in a different autonomous system—or, when confederations are in use, in a different confederation member autonomous system (CMAS)—from the current PortMaster. Exterior BGP See EBGP. File Transfer Protocol See FTP. Glossary-12 PortMaster Configuration Guide...
  • Page 323 filter Generally, a process or device that screens network traffic for certain characteristics, such as source address, destination address, or protocol, and determines whether to forward or discard that traffic based on the established criteria. filter table A database used to store filters. Flash RAM See nonvolatile RAM.
  • Page 324 Graphical user interface. A software interface based on pictorial representations and menus of operations and files. hardwired A continuous connection between two sites. A port on a PortMaster that is configured for hardwired use cannot be simultaneously used for any other type of connection. hello Protocol used by OSPF routers to acquire neighbors and to synchronize their topological databases.
  • Page 325 Signaling over the data path. injection policy A set of rules that determine the path and route information the PortMaster takes from BGP and places into its routing table used to forward packets to their destinations. The PortMaster uses the information to determine how packets it receives are forwarded to their ultimate destinations.
  • Page 326 Internet Control Message Protocol See ICMP. Internet Protocol See IP. Internet Network Information Center See InterNIC. InterNIC Internet Network Information Center. An organization that provides information and services related to networking technologies. Glossary-16 PortMaster Configuration Guide...
  • Page 327 Internet Protocol. The protocol defined in RFC 791. IP address A 32-bit number assigned by the system administrator, usually written in the form of four decimal fields separated by periods—for example, 192.9.200.1. Any computing device that uses IP must be assigned an Internet or IP address. Part of the Internet address is the IP network number (IP network address), and part is the host address (IP host address).
  • Page 328 A periodic message sent between BGP peers to keep their BGP sessions open. If a preset amount of time elapses between keepalive messages from a peer, the PortMaster identifies the peer as no longer operational and drops the session—and any information learned from that peer.
  • Page 329 (PVC) status in Frame Relay. Two types of LMI are available on Frame Relay: the original proprietary Cisco/Stratacom LMI, and the ANSI T1.617 Annex-D LMI. Although the PortMaster supports both, LMI on the PortMaster refers to the Cisco/Stratacom implementation. See also Annex-D.
  • Page 330 Every master also has a corresponding slave. Masters are for a given connection only, and a PortMaster that functions as a master for one user’s connection can be a slave for a different user’s connection. See also slave.
  • Page 331 Modulator-demodulator. A device that converts the digital signals used by computers to analog signals that can be transmitted over telephone lines. modem table A database resident on the PortMaster containing configuration information for commonly used modems. Maximum transmission unit. The largest frame or packet that can be sent through a port on a PortMaster without fragmentation.
  • Page 332 ISDN B channels as bandwidth needs increase. See also Multichassis PPP. multiexit discriminator In BGP, an arbitrary rating number that the PortMaster can use to enforce the use of preferred exit and entry points when multiple connections exist between its autonomous system and another.
  • Page 333 neighbor (1) In OSPF, two routers that have interfaces to a common network are neighbors. On multiaccess networks, neighbors are dynamically discovered by the OSPF Hello protocol. (2) In Multichassis PPP, PortMasters in the same Multichassis PPP domain. netmask A 32-bit number that distinguishes the portion of an IP address referring to the network or subnet from the portion referring to the host.
  • Page 334 Type 1 and Type 2 external routes for the backbone area or other areas that accept external routes. Like stub areas, NSSAs can have default costs set for them but cannot have external routes advertised into them. Glossary-24 PortMaster Configuration Guide...
  • Page 335 North America, where ISDN BRI is a U loop, the customer must supply the NT1 device; in Japan and the European countries where BRI is an S/T bus, the telephone company supplies the NT1. The PortMaster integrates the NT1 device into its ISDN BRI ports that are U interfaces.
  • Page 336 (1) In BGP, a router with which a BGP speaker exchanges open messages, notification messages, update messages, and keepalive messages. A PortMaster can have both internal and external peers. See also internal peer; external peer. Glossary-26...
  • Page 337 See PPP. policy In BGP, the rule or set of rules the PortMaster follows for accepting, injecting, and/or advertising BGP routes to its BGP internal and external peers. You assign policies to a peer when you add it to the PortMaster during configuration. You can use the default policy easy-multihome, or create and assign your own policies.
  • Page 338 Permanent virtual circuit. A circuit that defines a permanent connection in a switched digital service such as Frame Relay. Frame Relay is the only switched digital service that uses PVCs supported by PortMaster products. RADIUS Remote Authentication Dial-In User Service. A client/server security protocol created by Lucent.
  • Page 339 RARP Reverse Address Resolution Protocol. A protocol used in network routers that provides a method for finding IP addresses based on media access control (MAC) addresses. Compare ARP. Remote Authentication Dial-In User Service See RADIUS. Request for Comments See RFC. Reverse Address Resolution Protocol See RARP.
  • Page 340 The routing table stored on the PortMaster contains the following information for each route: IP address and netmask length of the destination, IP address of the gateway, source of the route (if any), type of route, hop-count metric, and PortMaster interface used to forward packets along the route.
  • Page 341 (The port through which the connection is made is called the slave port.) Every slave has a corresponding master. Slaves are for a given connection only, and a PortMaster that functions as a slave for one user’s connection can be a master for a different user’s connection. See also master.
  • Page 342 The process of combining routing information from one routing protocol into another for advertisement. For example, the PortMaster summarizes non-BGP route information it receives internally via the Interior Gateway Protocol (IGP) OSPF or RIP, or via a static route, into BGP for advertisement to BGP internal and external peers. Summarized routing information must comply with BGP advertisement policy rules before advertisement.
  • Page 343 ISDN and is treated by the PortMaster as if it were a modem. A synchronous terminal adapter takes a synchronous bit stream and turns it into ISDN, typically supports V.25bis dialing, and connects to a PortMaster synchronous port.
  • Page 344 The first part lists the IP address prefixes and associated netmasks for one or more routes that the PortMaster is withdrawing from service because it can no longer reach them. The second part of an update message consists of a single BGP route. See also route.
  • Page 345 User Datagram Protocol See UDP. UUCP UNIX-to-UNIX Copy Program. Interactive communication system for connecting two UNIX computers to send and receive data. V.120 An ITU-T standard for performing asynchronous rate adaptation into ISDN. V.25bis An ITU-T standard defining how to dial on synchronous devices such as ISDN or switched 56Kbps.
  • Page 346 Wide area network. Data communications network that serves users across a broad geographic area and often uses transmission devices provided by common carriers. Frame Relay is an example of a WAN. Compare LAN. Glossary-36 PortMaster Configuration Guide...
  • Page 347: Command Index

    Command Index add dlci 13-15 add filter 9-5 add location 8-3 12-14 12-19 14-11 15-7 15-11 16-7 add location sub1 13-13 add modem 10-3 add netmask 3-28 add netuser 7-2 12-13 12-18 15-6 15-10 17-10 add route Ipaddress 3-25 add route Ipxnetwork 3-26 add subinterface 4-7 add user 7-2 17-9...
  • Page 348 11-11 11-4 11-11 15-7 15-11 16-8 12-14 12-19 14-11 15-7 15-11 16-7 12-15 12-19 13-15 14-11 15-7 15-11 16-7 12-15 12-19 15-7 15-11 15-14 16-7 12-19 14-7 14-11 15-11 16-7 16-7 12-15 12-19 14-6 15-7 15-11 PortMaster Configuration Guide 16-7...
  • Page 349 set location manual 8-5 12-14 14-11 15-7 16-7 set location map 8-11 set location maxports 8-12 12-15 15-7 15-11 15-14 16-8 set location mtu 8-8 12-15 12-19 14-11 15-7 15-11 16-7 set location multilink 12-7 set location netmask 8-6 12-14 14-6 14-11 15-7...
  • Page 350 12-13 12-18 14-5 15-6 15-10 17-10 12-14 12-18 14-6 14-10 15-10 17-10 17-9 13-9 13-10 13-9 13-10 13-9 13-10 14-5 14-9 13-9 13-11 14-5 14-9 13-9 13-10 14-9 13-9 13-10 14-5 13-9 13-10 14-9 13-9 13-10 PortMaster Configuration Guide 14-9...
  • Page 351 Command Index show filter 9-8 show ipxroutes 3-24 show Line0 11-2 11-11 show location 13-13 show M0 11-9 show mcppp 11-15 show modem 10-3 show modems 11-10 show P0 2-5 show routes 3-23 show S0 2-5 12-9 show syslog 3-12 show table filter 9-8 show table location 8-2 show table modem 10-2...
  • Page 352 Command Index Command Index-6 PortMaster Configuration Guide...
  • Page 353 3-12 example 17-4 size 3-13 addresses. See IP addresses, IPX addresses administrative logins, enabling and disabling 3-12 analog modems, enabling on PortMaster 3 11-10 Annex-D defined 13-3 keepalives 13-6 use with DLCI 13-11 using to discover Frame Relay addresses 6-8...
  • Page 354 5-22 device services 5-14 netdata 5-15 PortMaster 5-14 Telnet 5-15 using with in.pmd daemon 18-3 devices, shared 5-11 dial groups 5-5 dialback. See callback dial-in access 5-2 configuration tip 1-3 dial-in users 12-8 10-8 17-1 PortMaster Configuration Guide...
  • Page 355 configuration tip 1-3 defining 12-13 14-5 14-10 ISDN connections 12-18 maximum ports 7-8 network users 17-10 dial-in-only access 5-16 dial-on-demand connections 8-4 dial-out configuration tip 1-3 connection types 8-3 dial-out ports configuration 16-5 configuration tip 1-3 multiline load balancing 8-12 dial-out-only access 5-17 dial-up connections, continuous 16-3 digital modems 11-9...
  • Page 356 MTU 8-8 framing format 11-6 FTP filters 9-11 FXS loop start protocol 11-4 gateways route for IP 3-25 route for IPX 3-25 setting the default 3-5 global parameters default gateway 3-5 10-8 13-6 13-5 PortMaster Configuration Guide...
  • Page 357 default routing 3-6 gateway for IP 3-25 gateway for IPX 3-25 host table 3-7 IP address assignment 3-12 name service 3-7 password 3-2 route destinations for IP 3-24 route destinations for IPX 3-25 static routes 3-24 subnet mask table 3-26 system logging 3-9 system name 3-2 Telnet 3-9...
  • Page 358 16-11 filters 8-13 high-water mark 8-11 idle timer 8-10 IPX network number 8-6 maximum dial-out ports 8-12 MTU 8-8 multiline load balancing 8-11 netmask 8-6 password 8-5 protocol 8-5 routing 8-7 TCP/IP header compression 8-8 username 8-5 PortMaster Configuration Guide...
  • Page 359 8-8 frame size 8-8 network users 7-7 packet size 8-8 Multichassis PPP displaying addresses 11-16 enabling on a PortMaster 3 11-16 multiline load balancing 12-7 example 15-13 in the location table 8-11 port limits 12-8 user table 7-8 Multilink PPP 7-8 Multilink V.120 7-8...
  • Page 360 IP address 3-12 port idle timer 6-7 port type 5-9 PortMaster daemon 1-1 device service 5-14 login service 5-10 mailing lists xxv software 1-1 15-1 PortMaster 3 channel groups 11-2 channel rate 11-3 5-19 10-8 Protocol. 7-12 PortMaster Configuration Guide...
  • Page 361 displaying line status 11-1 enabling analog modem service 11-10 enabling modems 11-9 enabling Multichassis PPP support 11-16 encoding method 11-7 framing format 11-6 inband signaling 11-3 11-4 network loopback 11-8 pulse code modulation 11-8 switch type 11-6 ports dial groups 5-5 for modem use 10-7 ISDN BRI 12-2 number used for dial-in access 17-1...
  • Page 362 Ethernet 4-7 frame relay 13-12 subnet masks A-7 Ethernet interface 4-4 setting on Ethernet interface 4-4 synchronous port 6-9 subnetting connecting two networks 19-2 routing issues A-8 subnet mask A-7 support, technical xxiii switch types 18-1 10-8 PortMaster Configuration Guide...
  • Page 363 BRI 12-4 PRI 11-6 switched 56Kbps connections 14-1 synchronous leased lines 19-1 synchronous ports connection type 6-4 description 6-1 destination IP address 6-8 DLCI list 13-6 extended information 6-4 filters 6-10 modem control 6-6 port type 6-4 speed 6-5 subnet mask 6-9 TCP header compression 6-11 transport protocol 6-8 See also WAN ports...
  • Page 364 11-16 virtual switch 13-1 VLSM A-8 WAN ports example configuration 19-5 ISDN 12-12 setting up Frame Relay 13-10 switched 56Kbps 14-5 V.25bis dialing 14-5 See also synchronous ports well-known ports B-1 well-known services B-1 15-6 19-7 12-17 PortMaster Configuration Guide...

Table of Contents