FireBrick FB6202 Manuals

Manuals and User Guides for FireBrick FB6202. We have 2 FireBrick FB6202 manuals available for free PDF download: User Manual

FireBrick FB6202 User Manual

FireBrick FB6202 User Manual (181 pages)

FB6000 series Versatile Network Appliance

Brand: FireBrick | Category: Gateway | Size: 1 MB

Table of Contents

User Manual
1
Table of Contents
4
Preface
16
1 Introduction

17
- The FB6000
  17
  - Where Do I Start
    17
  - What Can It Do
    17
    
    FB6602 Mobile Gtpv1 GGSN/L2TP Gateway
    18
  - Ethernet Port Capabilities
    18
  - Product Variants in the FB6000 Series
    18
- About this Manual
  18
  - Version
    18
  - Intended Audience
    19
  - Technical Details
    19
  - Document Style
    19
  - Document Conventions
    19
  - Comments and Feedback
    20
- Additional Resources
  20
  - Technical Support
    20
  - IRC Channel
    20
  - Application Notes
    20
  - White Papers
    20
  - Training Courses
    21
2 Getting Started

22
- IP Addressing
  22
- Accessing the Web-Based User Interface
  22
- IP Addresses to Access the Firebrick
  22
  - Add a New User
    23
- Setting up a New User
  24
- Configuration Being Stored
  24
3 Configuration

25
- The Object Hierarchy
  25
- The Object Model
  25
  - Formal Definition of the Object Model
    26
  - Common Attributes
    26
- Configuration Methods
  26
- Web User Interface Overview
  26
  - User Interface Layout
    27
    
    Customising the Layout
    27
- Main Menu
  27
  - Config Pages and the Object Hierarchy
    28
    
    Configuration Categories
    28
    
    Object Settings
    29
- The "Setup" Category
  29
- Editing an "Interface" Object
  30
  - Navigating Around the User Interface
    31
  - Backing up / Restoring the Configuration
    32
  - Configuration Using XML
    32
    
    Introduction to XML
    32
    
    Example XML Configuration
    33
    
    The Root Element - <Config
    33
    
    Viewing or Editing XML
    33
  - Downloading/Uploading the Configuration
    35
    
    Download
    35
    
    Upload
    35
4 System Administration

36
- User Management
  36
  - Login Level
    36
- Setting up a New User
  36
  - Configuration Access Level
    37
  - Login Idle Timeout
    37
  - Restricting User Logins
    37
    
    Restrict by IP Address
    37
- User Login Levels
  37
- Configuration Access Levels
  37
  - Logged in IP Address
    38
  - Restrict by Profile
    38
  - Password Change
    38
  - One Time Password (OTP)
    38
  - General System Settings
    39
    
    Administrative Details
    39
    
    Home Page Web Links
    39
    
    System Name (Hostname)
    39
    
    System-Level Event Logging Control
    39
  - Software Upgrades
    40
    
    Breakpoint Releases
    40
    
    Software Release Types
    40
    
    Identifying Current Software Version
    41
    
    Internet-Based Upgrade Process
    41
    
    Manually Initiating Upgrades
    41
- Software Upgrade Available Notification
  41
  - Controlling Automatic Software Updates
    42
  - Manual Upgrade
    42
  - Boot Process
    43
    
    LED Indications
    43
    
    Port Leds
    43
    
    Power LED Status Indications
    43
5 Event Logging

44
- Overview
  44
  - Log Targets
    44
    
    Logging to Flash Memory
    44
    
    Logging to the Console
    45
- Enabling Logging
  45
- Logging to External Destinations
  45
  - Syslog
    45
  - Email
    46
    
    E-Mail Process Logging
    47
- Factory Reset Configuration Log Targets
  47
- Performance
  47
- Viewing Logs
  47
  - Viewing Logs in the User Interface
    47
  - Viewing Logs in the CLI Environment
    48
- System-Event Logging
  48
- Using Profiles
  48
- System-Event Logging Attributes
  48
6 Interfaces and Subnets

49
- Relationship between Interfaces and Physical Ports
  49
  - Port Groups
    49
  - Interfaces
    49
- Defining an Interface
  50
  - Defining Subnets
    50
    
    Source Filtering
    51
    
    Using DHCP to Configure a Subnet
    51
  - Setting up DHCP Server Parameters
    51
    
    Fixed/Static DHCP Allocations
    52
    
    Restricted Allocations
    53
    
    Special DHCP Options
    54
  - DHCP Relay Agent
    54
- Physical Port Settings
  54
  - Setting Duplex Mode
    55
  - Defining Port LED Functions
    55
7 Routing

56
- Routing Logic
  56
- Routing Targets
  57
  - Subnet Routes
    57
  - Routing to an IP Address (Gateway Route)
    57
  - Special Targets
    58
- Dynamic Route Creation / Deletion
  58
- Routing Tables
  58
- Bonding
  58
8 Profiles

60
- Overview
  60
- Creating/Editing Profiles
  60
  - Timing Control
    60
  - Tests
    61
    
    General Tests
    61
    
    Ping Tests
    61
    
    Time/Date Tests
    61
  - Inverting Overall Test Result
    61
  - Manual Override
    62
9 Traffic Shaping

63
- Graphs and Shapers
  63
  - Graphs
    63
  - Shapers
    64
  - Ad Hoc Shapers
    64
  - Long Term Shapers
    64
- Multiple Shapers
  65
- Basic Principles
  65
10 Pppoe

66
- Types of DSL Line and Router in the United Kingdom
  66
- Definining Pppoe Links
  67
  - Ipv6
    67
  - Additional Options
    67
    
    MTU and TCP Fix
    67
    
    Logging
    68
    
    Service and Ac-Name
    68
    
    Speed and Graphs
    68
11 Tunnels

69
12 System Services

70
- Protecting the FB6000
  70
- Common Settings
  70
- List of System Services
  70
  - HTTP Server Configuration
    71
    
    Access Control
    71
    
    Trusted Addresses
    71
- List of System Services
  71
  - Telnet Server Configuration
    72
    
    Access Control
    72
  - DNS Configuration
    72
    
    Blocking DNS Names
    72
    
    Local DNS Responses
    72
    
    Auto DHCP DNS
    73
  - NTP Configuration
    73
  - SNMP Configuration
    73
  - RADIUS Configuration
    73
    
    RADIUS Client
    73
    
    RADIUS Server (Platform RADIUS)
    73
    
    RADIUS Client Settings
    74
    
    Server Blacklisting
    74
13 Network Diagnostic Tools

75
- Access Check
  75
- Packet Dumping
  76
  - Dump Parameters
    76
  - Security Settings Required
    77
  - IP Address Matching
    77
  - Packet Types
    77
  - Snaplen Specification
    78
  - Using the Web Interface
    78
  - Using an HTTP Client
    78
    
    Example Using Curl and Tcpdump
    78
14 Vrrp

79
- Virtual Routers
  79
- Configuring VRRP
  80
  - Advertisement Interval
    80
  - Priority
    80
- Using a Virtual Router
  80
- VRRP Versions
  80
  - VRRP Version 2
    80
  - VRRP Version 3
    81
- Compatibility
  81
15 Bgp

82
- What Is BGP
  82
- BGP Setup
  82
  - Overview
    82
  - Standards
    82
  - Simple Example Setup
    83
  - Peer Type
    83
- Peer Types
  83
  - Route Filtering
    84
    
    Action Attributes
    84
    
    Matching Attributes
    84
    
    Announcing Black Hole Routes
    85
    
    Well Known Community Tags
    85
    
    Announcing Dead End Routes
    86
    
    Bad Optional Path Attributes
    86
    
    Network> Element
    86
    
    Route>, <Subnet> and Other Elements
    86
- Network Attributes
  86
  - Route Feasibility Testing
    87
  - Diagnostics
    87
  - Router Shutdown
    87
  - TTL Security
    87
16 Internet Service Providers

88
- Background
  88
  - How It All Began
    88
  - Point to Point Protocol
    88
  - L2Tp
    88
  - Broadband
    89
  - Radius
    89
  - Bgp
    89
- Incoming L2TP Connections
  89
- The Importance of CQM Graphs
  90
- Authentication
  90
- Accounting
  91
- RADIUS Control Messages
  91
- Pppoe
  91
- Ggsn
  91
- Typical Configuration
  91
  - Interlink Subnet
    92
  - BGP with Carrier
    92
  - RADIUS Session Steering
    92
  - L2TP Endpoints
    93
  - Isp Radius
    93
17 Command Line Interface

94
- CIDR and CIDR Notation
  95
- MAC Addresses Usage
  97
  - Multiple MAC Addresses
    97
  - How the Firebrick Allocates MAC Addresses
    98
    
    Base MAC
    98
    
    Interface
    98
    
    Pppoe
    98
    
    Subnet
    98
    
    Running out of Macs
    99
  - MAC Address on Label
    99
  - Using with a DHCP Server
    100
- Vlans : a Primer
  101
- Supported L2TP Attribute/Value Pairs
  102
  - Start-Control-Connection-Request
    102
  - Start-Control-Connection-Reply
    102
  - Start-Control-Connection-Connected
    103
  - Stop-Control-Connection-Notification
    103
  - Hello
    103
  - Incoming-Call-Request
    103
  - Incoming-Call-Reply
    104
  - Incoming-Call-Connected
    104
  - Outgoing-Call-Request
    104
  - Outgoing-Call-Reply
    105
  - Outgoing-Call-Connected
    105
  - Call-Disconnect-Notify
    105
  - WAN-Error-Notify
    105
  - Set-Link-Info
    105
- Ocrp
  105
- Occn
  105
- Cdn
  105
- Wen
  105
- Sli
  105
  - Notes
    106
    
    BT Specific Notes
    106
    
    IP over LCP
    106
- Supported RADIUS Attribute/Value Pairs for L2TP Operation
  107
  - Authentication Request
    107
- Access-Request
  107
  - Authentication Response
    108
    
    Accepted Authentication
    108
- Access-Accept
  108
  - Prefix Delegation
    109
  - Rejected Authentication
    110
  - Accounting Start
    110
- Accounting-Start
  110
- Access-Reject
  110
  - Accounting Interim
    111
- Accounting-Interim
  111
  - Accounting Stop
    112
- Accounting-Stop
  112
  - Disconnect
    112
  - Change of Authorisation
    112
- Change-Of-Authorisation
  112
  - Filter ID
    113
- Filter-ID
  113
  - Notes
    114
    
    L2TP Relay
    114
    
    Closed User Group
    115
    
    IP over LCP
    115
    
    LCP Echo and CQM Graphs
    115
    
    Routing Table
    116
- Firebrick Specific SNMP Objects
  117
  - Monitoring Information
    117
  - BGP Information
    117
- Iso.3.6.1.4.1.24693.1
  117
- Iso.3.6.1.4.1.24693.179
  117
  - L2TP Information
    118
- Iso.3.6.1.4.1.24693.1701
  118
- Command Line Reference
  119
  - General Commands
    119
    
    General Status
    119
    
    Login
    119
    
    Memory Usage
    119
    
    Process/Task Usage
    119
    
    Trace off
    119
    
    Trace on
    119
    
    Uptime
    119
    
    Disable Profile Control Switch
    120
    
    Enable Profile Control Switch
    120
    
    Load XML Configuration
    120
    
    Logout
    120
    
    See XML Configuration
    120
    
    Show DNS Resolvers
    120
    
    Show Profile Status
    120
    
    Show RADIUS Servers
    120
  - Networking Commands
    121
    
    List Routes
    121
    
    List Routing Next Hops
    121
    
    Ping and Trace
    121
    
    Show a Route from the Routing Table
    121
    
    Subnets
    121
    
    Clear DHCP Allocations
    122
    
    Lock DHCP Allocations
    122
    
    Name DHCP Allocations
    122
    
    See DHCP Allocations
    122
    
    Send Wake-On-LAN Packet
    122
    
    Show ARP/ND Status
    122
    
    Show VRRP Status
    122
    
    Unlock DHCP Allocations
    122
    
    Check Access to Services
    123
  - L2TP Commands
    123
  - BGP Commands
    123
  - GGSN Commands
    123
  - Pppoe Commands
    123
  - Advanced Commands
    123
    
    Panic
    123
    
    Reboot
    123
    
    Boot Log
    124
    
    Delete Block from Flash
    124
    
    Flash Memory List
    124
    
    Kill Command Session
    124
    
    Make Outbound Command Session
    124
    
    Screen Width
    124
    
    Show Command Sessions
    124
    
    Flash Log
    125
- Constant Quality Monitoring - Technical Details
  126
  - Broadband Back-Haul Providers
    126
  - Access to Graphs and Csvs
    126
    
    Trusted Access
    126
- File Types
  126
  - Dated Information
    127
  - Authenticated Access
    127
  - Graph Display Options
    127
    
    Data Points
    127
    
    Additional Text
    128
    
    Other Colours and Spacing
    128
  - Overnight Archiving
    129
    
    Full URL Format
    129
- URL Formats
  129
  - Load Handling
    130
  - Graph Scores
    130
  - Creating Graphs, and Graph Names
    130
- Hashed Passwords
  131
  - Password Hashing
    131
    
    Salt
    131
  - One Time Password Seed Hashing
    132
- Configuration Objects
  134
  - Top Level
    134
    
    Config: Top Level Config
    134
  - Objects
    135
    
    System: System Settings
    135
    
    Link: Web Links
    136
    
    User: Admin Users
    136
    
    Eap: User Access Controlled by EAP
    137
    
    Log-Syslog: Syslog Logger Settings
    137
    
    Log: Log Target Controls
    137
    
    Log-Email: Email Logger Settings
    138
    
    Services: System Services
    138
    
    Ntp-Service: NTP Service Settings
    139
    
    Snmp-Service: SNMP Service Settings
    139
    
    Telnet-Service: Telnet Service Settings
    140
    
    Dns-Service: DNS Service Settings
    141
    
    Http-Service: HTTP Service Settings
    141
    
    Dns-Block: Fixed Local DNS Blocks
    142
    
    Dns-Host: Fixed Local DNS Host Settings
    142
    
    Radius-Service: RADIUS Service Definition
    143
    
    Radius-Service-Match: Matching Rules for RADIUS Service
    144
    
    Radius-Server: RADIUS Server Settings
    145
    
    Ethernet: Physical Port Controls
    146
    
    Sampling: Packet Sampling Configuration
    146
    
    Interface: Port-Group/Vlan Interface Settings
    147
    
    Portdef: Port Grouping and Naming
    147
    
    Subnet: Subnet Settings
    148
    
    Vrrp: VRRP Settings
    149
    
    Dhcps: DHCP Server Settings
    150
    
    Dhcp-Attr-Hex: DHCP Server Attributes (Hex)
    151
    
    Dhcp-Attr-Number: DHCP Server Attributes (Numeric)
    151
    
    Dhcp-Attr-String: DHCP Server Attributes (String)
    151
    
    Dhcp-Attr-Ip: DHCP Server Attributes (IP)
    152
    
    Pppoe: Pppoe Settings
    152
    
    Ppp-Route: PPP Routes
    153
    
    Ggsn: GTP GGSN Settings
    154
    
    Route: Static Routes
    154
    
    Blackhole: Dead End Networks
    155
    
    Network: Locally Originated Networks
    155
    
    Loopback: Locally Originated Networks
    156
    
    Namedbgpmap: Mapping and Filtering Rules of BGP Prefixes
    156
    
    Bgp: Overall BGP Settings
    157
    
    Bgprule: Individual Mapping/Filtering Rule
    157
    
    Bgppeer: BGP Peer Definitions
    158
    
    Bgpmap: Mapping and Filtering Rules of BGP Prefixes
    159
    
    Cqm: Constant Quality Monitoring Settings
    160
- Text
  161
  - L2Tp: L2TP Settings
    162
  - L2Tp-Incoming: L2TP Settings for Incoming L2TP Connections
    162
- Hello
  162
- J.59. L2Tp-Incoming: Elements
  163
- Shaper-Override: Attributes
  167
- Syslog-Severity: Syslog Severity
  170
- Index
  180

Advertisement

FireBrick FB6202 User Manual

FireBrick FB6202 User Manual (148 pages)

Versatile Network Appliance

Brand: FireBrick | Category: Network Hardware | Size: 0 MB

Table of Contents

User Manual
1
Table of Contents
4
Preface
11
1 Introduction

12
- The FB6000
  12
  - Where Do I Start
    12
  - What Can It Do
    12
  - Ethernet Port Capabilities
    13
  - Product Variants in the FB6000 Series
    13
- About this Manual
  13
  - Version
    13
  - Intended Audience
    13
  - Document Style
    14
  - Document Conventions
    14
  - Comments and Feedback
    14
- Additional Resources
  15
  - Technical Support
    15
  - IRC Channel
    15
  - Application Notes
    15
  - White Papers
    15
  - Training Courses
    15
2 Getting Started

16
- IP Addressing
  16
- Accessing the Web-Based User Interface
  16
  - Add a New User
    17
- Setting up a New User
  18
- Configuration Being Stored
  18
3 Configuration

20
- The Object Hierarchy
  20
- The Object Model
  20
  - Formal Definition of the Object Model
    21
  - Common Attributes
    21
- Configuration Methods
  21
- Web User Interface Overview
  21
  - User Interface Layout
    22
    
    Customising the Layout
    22
- Main Menu
  22
  - Config Pages and the Object Hierarchy
    23
    
    Configuration Categories
    23
    
    Object Settings
    24
- The "Setup" Category
  24
- Special Character Sequences
  27
  - The Root Element - <Config
    28
  - Viewing or Editing XML
    28
  - Example XML Configuration
    28
  - Downloading/Uploading the Configuration
    29
    
    Download
    29
    
    Upload
    30
4 System Administration

31
- User Management
  31
- Setting up a New User
  31
  - Login Level
    32
  - Configuration Access Level
    32
  - Login Idle Timeout
    32
  - Restricting User Logins
    32
    
    Restrict by IP Address
    32
    
    Restrict by Profile
    33
  - General System Settings
    33
    
    Administrative Details
    33
    
    Home Page Web Links
    33
    
    System Name (Hostname)
    33
    
    System-Level Event Logging Control
    33
  - Software Upgrades
    34
    
    Breakpoint Releases
    34
    
    Software Release Types
    34
    
    Identifying Current Software Version
    35
    
    Internet-Based Upgrade Process
    35
    
    Manually Initiating Upgrades
    35
- Software Upgrade Available Notification
  35
  - Controlling Automatic Software Updates
    36
  - Manual Upgrade
    36
  - Boot Process
    37
    
    LED Indications
    37
    
    Port Leds
    37
    
    Power LED Status Indications
    37
5 Event Logging

38
- Overview
  38
  - Log Targets
    38
    
    Logging to Flash Memory
    38
    
    Logging to the Console
    39
- Enabling Logging
  39
- Logging to External Destinations
  39
  - Syslog
    39
  - Email
    40
    
    E-Mail Process Logging
    41
- Factory Reset Configuration Log Targets
  41
- Performance
  41
- Viewing Logs
  41
  - Viewing Logs in the User Interface
    41
  - Viewing Logs in the CLI Environment
    42
- System-Event Logging
  42
- Using Profiles
  42
6 Interfaces and Subnets

43
- Relationship between Interfaces and Physical Ports
  43
  - Port Groups
    43
  - Interfaces
    43
- Defining Port Groups
  44
- Defining an Interface
  45
  - Defining Subnets
    45
    
    Using DHCP to Configure a Subnet
    46
  - Setting up DHCP Server Parameters
    46
    
    Fixed/Static DHCP Allocations
    47
    
    Partial-MAC-Address Based Allocations
    47
- Physical Port Settings
  47
  - Disabling Auto-Negotiation
    48
  - Setting Port Speed
    48
  - Setting Duplex Mode
    48
  - Defining Port LED Functions
    48
- Example Modified Port LED Functions
  49
7 Routing

50
- Routing Logic
  50
- Routing Targets
  51
  - Subnet Routes
    51
  - Routing to an IP Address (Gateway Route)
    51
  - Special Targets
    51
- Dynamic Route Creation / Deletion
  52
- Routing Tables
  52
8 Profiles

53
- Overview
  53
- Creating/Editing Profiles
  53
  - Timing Control
    53
  - Tests
    54
    
    General Tests
    54
    
    Ping Tests
    54
    
    Time/Date Tests
    54
  - Inverting Overall Test Result
    54
  - Manual Override
    54
9 Traffic Shaping

56
- Graphs and Shapers
  56
  - Graphs
    56
  - Shapers
    56
10 Pppoe

58
- Types of DSL Line and Router in the United Kingdom
  58
- Definining Pppoe Links
  59
  - Ipv6
    59
  - Additional Options
    59
    
    MTU and TCP Fix
    59
    
    Logging
    60
    
    Service and Ac-Name
    60
    
    Speed and Graphs
    60
11 Tunnels

61
- FB105 Tunnels
  61
  - Tunnel Wrapper Packets
    61
  - Setting up a Tunnel
    61
  - Viewing Tunnel Status
    62
  - Dynamic Routes
    62
  - Tunnel Bonding
    62
  - Tunnels and NAT
    63
    
    Another Device Doing NAT
    63
    
    FB6000 Doing NAT
    63
12 System Services

65
- HTTP Server Configuration
  65
  - Access Control
    65
    
    Trusted Addresses
    66
- Telnet Server Configuration
  66
  - Access Control
    66
- DNS Configuration
  67
- NTP Configuration
  67
- SNMP Configuration
  67
13 Network Diagnostic Tools

68
- Access Check
  68
- Packet Dumping
  69
  - Dump Parameters
    69
  - Security Settings Required
    70
  - IP Address Matching
    70
  - Packet Types
    70
  - Snaplen Specification
    71
  - Using the Web Interface
    71
  - Using an HTTP Client
    71
    
    Example Using Curl and Tcpdump
    71
14 Vrrp

73
- Virtual Routers
  73
- Configuring VRRP
  73
  - Advertisement Interval
    74
  - Priority
    74
- Using a Virtual Router
  74
- VRRP Versions
  74
  - VRRP Version 2
    74
  - VRRP Version 3
    74
- Compatibility
  75
15 Command Line Interface

76
- Command Line Reference
  77
  - Check Access
    78
  - Clear Bgp
    79
  - Clear Dhcp
    80
  - Clear L2Tp All
    81
  - Clear L2Tp Session
    82
  - Clear L2Tp Tunnel
    83
  - Clear Pppoe
    84
  - Delete Config
    85
  - Delete Data
    86
  - Delete Image
    87
  - Ethernet Reset
    88
  - Ethernet Stall
    89
  - Exit
    90
  - Kill Command Session
    91
  - Kill Session
    92
  - Login
    93
  - Logout
    94
  - Panic
    95
  - Ping
    96
  - Quit
    97
  - Reboot
    98
  - Set Boot Block
    99
  - Set Command Screen Width
    100
  - Show Arp
    101
  - Show Bgp
    102
  - Show Bgp Nexthop
    103
  - Show Bgp Peer
    104
  - Show Bgp Routes
    105
  - Show Bgp Summary
    106
  - Show Boot Log
    107
  - Show Command Sessions
    108
  - Show Dhcp
    109
  - Show Dns
    110
  - Show Ethernet Counters
    111
  - Show Ethernet Status
    112
  - Show Fb105
    113
  - Show Flash Contents
    114
  - Show Flash Log
    115
  - Show L2Tp
    116
  - Show L2Tp Session
    117
  - Show L2Tp Sessions
    118
  - Show L2Tp Tunnel
    119
  - Show L2Tp Tunnels
    120
  - Show Log
    121
  - Show Memory
    122
  - Show Pppoe
    123
  - Show Profiles
    124
  - Show Radius
    125
  - Show Route
    126
  - Show Routes
    127
  - Show Sessions
    128
  - Show Status
    129
  - Show Subnet
    130
  - Show Subnets
    131
  - Show Uptime
    132
  - Show Tasks
    133
  - Show Vrrp
    134
  - Start Command Session
    135
  - Traceroute
    136
  - Troff
    137
  - Tron
    138
  - Uptime
    139
- Factory Reset Procedure
  140
- CIDR and CIDR Notation
  142
- MAC Addresses Usage
  144
18 Information Provided by Show Fb105 Command

145
- C.1. DHCP Client Names Used
  145
- Vlans : a Primer
  146
- Index
  147

Advertisement

Related Products

FireBrick Categories

Network Hardware Gateway

Network Router

More FireBrick Manuals