Home

X4000 User's Guide

1. Figure 13 11 ISDN BRI interface RJ45 socket of BRI expansion card 406 mmsss X4000 Users Guide Features of Expansion and Resource Cards E 13 3 2 X4E 1 2PRI WAN Interface Card for ISDN PRI Primary Rate Interface and or G 703 Interfaces 2 x interfaces for ISDN PRI G 703 with 2 sockets each IN and OUT If XA000 is switched off the IN socket is looped to the OUT socket Data compression and Integrated hardware support for encryption and encryption compression Operating temperature 0 C to 40 C Relative humidity 20 to 90 non condensing in operation 5 to 95 non condensing in storage Extensions 2 slots for resource card with digital modems Table 13 12 Features of PRI G 703 expansion card Pin assignment The ISDN PRI G 703 interfaces have the following pin assignment Figure 13 12 ISDN PRI G 703 interface RJ45 socket of PRI G 703 expansion card X4000 User s Guide sssa 407 E Technical Data 13 3 3 X4E 2FE LAN Interface Card for 10 100 Mbps Interfaces 2 x 10 100 Base T auto sensing Operating temperature 0 C to 40 C Relative humidity 20 to 90 non condensing in operation 5 to 95 non condensing in storage Extensions Slot for resource card for encryption and compression Table 13 13 Features of LAN expansion card Pin assignment The LAN interfaces RJ45 sockets have the following pin
2. First enter n Enter update v IP address file name The image is checked but not yet loaded Typein update IP address file name The following appears in the SNMP shell Perform update y or n Enter y and confirm with Return X4000 performs an incremental update and the image is saved to the flash memory This procedure takes longer than a normal update The following appears in the SNMP shell Reboot now y or n Enter y and confirm with Return X4000 starts with the new boot image The previous configuration is overwritten X4000 User s Guide samen 373 p11 Configuration Management 374 mmmmm X4000 Users Guide Tips 12 Troubleshooting If you are having problems with X4000 the following tips should help you to overcome some of the more usual stumbling blocks gt Log in to X4000 and enter in the SNMP shell debug all This makes available all the debugging information in the SNMP shell Check the syslog messages created by X4000 see chapter 10 1 1 page 308 It is wise to forward syslog messages to an external host and save them to be able to evaluate the outputs for a longer period of time To interpret debugging information and syslog messages see the Software Reference This chapter shows you what the causes of particular problems can be and how to determine these causes It is structured as follows E Aids to Troubleshooting E Typical Errors X4000 User s Guide sma
3. Q o O o e e e o pe O o D Matches a group Is ignored 123 123 1234 123 of none or more 123789 digits Matches exactly Is replaced by 0 123 1234 1238 1231 1230 one digit a b Defines a range The first digit of 123 5 9 1235 1237 1239 1235 of matching the specified digits range is used a b Defines a range The first digit after 123 0 5 1236 1238 1239 1236 of excluded the specified digits range is used ab Optional Sequence is 00 1234 00123 and 123 00123 sequence to used match Table 7 17 Wildcards for incoming and outgoing calls 166 X4000 Users Guide Configuring WAN Partners gt gt PPP authentication If the calling party number of an incoming call matches both a WAN partner s Number with wildcards and a WAN partner s Number without wildcards the entry without wildcards is always used Make the following entries gt Enter the Number e g 0911987654321 gt Select the Direction e g outgoing Press SAVE The entries are saved and listed Leave WAN PARTNER ADD WAN NUMBERS with EXIT Now enter the 9 PPP settings of your WAN partner These are used to authenticate your connection partner When a call is received the Calling Party Number is always sent over the ISDN gt D channel This number enables X4000 to identify the caller gt gt CLID provided the caller is entered as a WAN partner After identification with CLID the rou
4. Table 10 8 Callback If yes PPP negotiation is used as the setting for Callback a B channel is always opened which results in costs od X4000 User s Guide samme 329 10 Configuration of Security Functions and Firewall 330 To do To do User concept Filters Proceed as follows to activate callback for a WAN partner gt Goto WAN PARTNER EDIT ADVANCED SETTINGS Select Callback gt Confirm with OK 10 2 5 Closed User Group X4000 supports the use of the Closed User Group service feature which you can request for your ISDN line from your telephone company The external internal reachability is monitored and controlled by the exchanges if this feature is selected Proceed as follows to activate a Closed User Group for a WAN partner gt Goto WAN PARTNER EDIT WAN NUMBERS EDIT ADVANCED SETTINGS Select Closed User Group specify Y Enter the CUG index gt Confirm with OK 10 2 6 Access to Remote CAPI The special features offered by BinTec routers include implementation of the gt Remote CAPI and Remote TAPI programming interfaces only for PABX devices This enables applications on computers in the LAN to use the resources of the router as if these components were installed directly in the computer By using BinTec s user concept you can make sure that only users authenticated by user name and password can access X4000 s Remote CAPI interface see chapter 7 3
5. E Technical Data 13 2 1 Serial Console Interface Pin assignment of serial console interface of basic unit 8 pole mini DIN socket Figure 13 1 Serial console interface with pin assignment 390 m mmmma X4000 Users Guide Features of Basic Unit E 13 2 2 Ethernet LAN Interface Pin assignment of 10 100 Base T Ethernet LAN interface of basic unit RJ45 socket 1 8 OOOO Figure 13 2 10 100 Base T Ethernet LAN interface RJ45 socket of basic unit with pin assignment The LAN cable used must have the following technical features HM 100 Base T cable CAT5 STP Shielded Twisted Pair E 8 pole RJ45 plug fully shielded at both ends E 4twisted wire pairs the following wires are twisted Pin 1 2 Pin 3 6 Pin 4 5 Pin 7 8 Outer shielding for all four pairs X4000 User s Guide ssmaa 391 E Technical Data 13 2 3 ISDN BRI Interface Pin assignment of ISDN BRI interface RJ45 socket Figure 13 3 ISDN BRI interface RJ45 socket of basic unit with pin assignment 392 mmmma X4000 Users Guide Features of Basic Unit od e OGD 13 2 4 Serial WAN Interfaces The X4000 basic unit is equipped with two serial WAN interfaces E The first serial port Setup Tool menu CM SERIAL SERIAL Unit 0 can be used as interface type X 21 V 11 V 35 V 11 V 36 V 11 The setting in the Setup Tool Connector field see Table 7 11 page 153 en
6. Enable IPX Spoofing Enables and disables NCP session watchdog spoofing and handling of broadcast message waiting packets Possible values E yes convenient for IPX WAN connections B no Enable SPX Spoofing Enables and disables spoofing of SPX session watchdog packets Possible values M yes convenient for SPX sessions over WAN connections B no NetBIOS Broadcast Replication Defines how X4000 handles gt gt NetBIOS packets Table 8 50 IPX X4000 User s Guide sss 269 B Advanced Configuration of the Basic Unit with the Setup Tool NetBIOS Broadcast Replication contains the following selection options yes All NetBIOS hosts in the network can access each other even if WAN connections must be set up frequently Cost intensive no default value NetBIOS hosts in the LAN can only access on LAN only each other if they do not need WAN connections to be set up Low cost Table 8 51 NetBIOS Broadcast Replication Todo Proceed as follows Go to IPX Enter Local System Name Enter Internal Network Number only if necessary Activate Enable IPX Spoofing if applicable Activate Enable SPX Spoofing if applicable Select NetBIOS Broadcast Replication e g on LAN only Press SAVE VV NV VN VN YN 8 4 2 Configuring the LAN Interface The next step is to configure X4000 s LAN interface to the IPX network The LAN interface is the physical interface to th
7. Item Service which is to accept a call to the Number below Number Phone number under which the service Item entered above can be reached Mode Mode in which X4000 compares the digits of Number with the called party number of the incoming call right to left default mode left to right DDI always select this mode if X4000 is connected to a point to point ISDN access system access User name Corresponds to Name in CAPI USER User to whom an incoming call to the CAPI service under Number is to be passed Bearer Type of incoming call Possible values E data data call E voice voice call Many random call Table 8 5 CM 1BRI ISDN SO INCOMING CALL ANSWERING When on starting X4000 in CAPI USER there is no entry automatically a standard entry is created without password with Name default and CAPI enabled Todo Proceed as follows Goto CAPI USER gt Select an existing entry and confirm it with Return or add a new entry with ADD Enter Name 192 mmsmms X4000 Users Guide General WAN Settings e OC 5 Enter your Password How to enter the passwords in the Setup Tool is described in Changing the password page 85 Select CAPI Press SAVE Repeat these steps for every user in the LAN VV VY Go to CM 1BRI ISDN SO INCOMING CALL ANSWERING Make an entry here for every user in the LAN who has access to the CAPI service
8. LAPM LAPM Link Access Protocol for Modems is used If this fails the modem clears the connection MNP MNP4 Microcom Networking Protocol is used If this fails the modem clears the connection Table 9 10 Error Correction Proceed as follows VV NV VN NV NN YN Go to MODEM PROFILE CONFIGURATION Select PROFILE 1 and confirm with Return Enter Description e g Default Modem Profile Select Modulation e g V 34 Select Error Correction e g auto Select Automode e g on Select Min Bps e g 2400 Select Max Receive Bps e g 33600 If applicable select Max Transmit Bps e g 33600 X4000 User s Guide sssaa 303 9 Configuration of Expansion and Resource Cards with the Setup Tool Modem profile 2 8 304 configuration Incoming Call Answering WAN partner Select V 42bis Compression e g auto Select MNP5 Compression e g auto Press SAVE Configure other modem profiles as necessary see Table 9 11 page 305 Proceed as follows to assign the defined modem profiles to the dial in users the example values are taken from the scenario in Figure 9 3 page 298 VV VV YN NN Go to X4E 3BRI ISDN SO UNITO INCOMING CALL ANSWERING if you wish to assign an incoming dial in connection over the first interface of an ISDN BRI expansion card Add a new entry with ADD Select Item e g PPP Modem Profile 2 Enter Number e g 091112342 Select Mode e g rig
9. Enter Maximum Number of DNS Records Enter Maximum TTL for Pos Cache Entries Enter Maximum TTL for Neg Cache Entries V NOV Y Y Press SAVE How to create static entries y Go to IP DNS STATIC HOSTS All the existing static entries are listed here You can create a new entry with ADD Enter Name Select Response Enter Address if applicable VN OV Y Y Enter TTL X4000 User s Guide samme 263 rn Advanced Configuration of the Basic Unit with the Setup Tool 264 X4000 lt gt WAN partner Monitoring and statistics Press SAVE How to create forwarding entries Goto IP DNS FORWARDED DOMAINS All the existing forwarding entries are listed here You can create a new entry with ADD Enter Name Select Interface Enter TTL Press SAVE Select EXIT VV VV Y NN Press SAVE Proceed as follows if you would like to configure a WAN partner so that the address of a name server is sent from X4000 to the WAN partner or from the WAN partner to X4000 as applicable gt Goto WAN PARTNER EDIT IP ADVANCED SETTINGS Select Dynamic Name Server Negotiation gt Confirm with OK Press SAVE How to obtain a list of dynamic entries in the cache gt Goto IP DNS DYNAMIC CACHE This menu contains a list of all the dynamic entries in the cache gt To convert a dynamic entry into a static entry tag the entry with the Space bar and confirm with STATI
10. Number of Channels Number of B channels that are to be added Table 8 18 IP B BANDWIDTH ON DEMAND BOD RuLES FoR BOD ADD The Action field which indicates how a filtered out data packet is to be handled contains the following selection options invoke M B channels are added if the rule matches invoke IM B channels are added if the rule does not match deny M B channels are not added if the rule matches deny IM B channels are not added if the rule does not match ignore The rule is ignored or it is omitted if part of a rule chain Table 8 19 Action 216 mmmsmm X4000 Users Guide Settings Specific to WAN Partners ES Additional bandwidth for HTTP connections VV VV YN NN Select Action e g invoke M Select Direction e g outgoing Select Number of Channels e g 7 Select Filter e g mail smtp out Press SAVE Leave IP BANDWIDTH ON DEMAND BOD RULES FOR BOD with Exit Leave IP BANDWIDTH ON DEMAND BOD with Exit You have returned to the main menu To apply a rule to an interface proceed as follows Y Go to IP BANDWIDTH ON DEMAND BOD CONFIGURE INTERFACES FoR BOD Select the interface to which you wish to apply a rule e g aodiclient and press Return Select the rule you wish to apply to this interface e g mail smtp out Press SAVE Leave IP BANDWIDTH ON DEMAND BOD CONFIGURE INTERFACES FOR BOD Epir with
11. Figure 7 5 Example scenario with X4000 The following settings are necessary the Setup Tool menus concerned are described elsewhere Go to PPP see chapter 8 1 3 page 194 Select PPPoE Ethernet Interface en Press SAVE Go to WAN PARTNER ADD see Table 7 13 page 163 Enter your Partner Name e g t online Select Encapsulation PPP Go to WAN PARTNER ADD PPP see Table 7 18 page 168 VV VV NV YN YN YN Enter Local PPP ID your user name e g 000460004256091 169386 000 1 Qt online de X4000 User s Guide mmmma 157 Basic Configuration of Basic Unit with Setup Tool 158 sd The T Online user name comprises the following elements EJ lt Anschlu kennung gt lt T Online Nummer gt lt Mitbenutzernummer gt t online de ty AnschluBkennung is a 12 digit number in this case 000460004256 T Online Nummer is the extension number in this case 091169386 Mitbenutzernummer is a 4 digit number in this case 0007 The T Online Nummer and the Mitbenutzernummer must be separated by if the T Online Nummer has less than 12 digits Y Y Y V WW Y V Y Y VY Y V W 6 Y Y Y Y y Enter PPP Password your T Online password Select Keepalives on Confirm with OK Go to WAN PARTNER ADD ADVANCED SETTINGS see chapter 8 2 5 page 219 Select Layer 1 Protocol PPP over Ethernet PPPoE Confirm with OK Go to WAN PARTNER ADD IP see Table 7 21 page 174 Select IP Transit Netw
12. Go to WAN PARTNER EDIT ADVANCED SETTINGS Select Channel Bundling Enter Total Number of Channels Confirm with OK VVVVY Press SAVE Refer to Bandwidth on Demand BOD function see chapter 8 2 3 page 201 200 mmsms X4000 Users Guide Settings Specific to WAN Partners 8 Switching B channels in and out Authentication 8 2 3 Bandwidth on Demand BoD This function permits dynamic bundling of leased lines with dialup lines to cope with large amounts of data You have the following options M BOD for leased lines i e dynamic connection of one or more dialup connection s to the existing leased line if required H BOD for dialup connections i e dynamic connection of one or more dialup connection s to the existing dialup connection if required E Backup for leased lines i e establishing a dialup connection when the leased line to the partner fails BOD also acts if the leased line fails i e other dialup connections can be switched in if more than 1 additional channel was allowed in the configuration Maximum Number of Dialup Channels gt 7 A B channel is switched in if the current data throughput of the relevant interface to the connection partner is 90 96 or more of the maximum permissible throughput for at least 5 seconds The current throughput is not used as a basis for switching out a B channel already connected This is based on the calculated i e fictitious throughput of the channel gr
13. Host name which is assigned the Address with this static entry May also contain wildcards only at the start of Name e g bintec de If an incomplete name is entered without a dot this is completed with Default Domain after confirming with SAVE Response Defines the type of static entry Possible values E positive default value A DNS request for Name is answered with a DNS record which contains the associated Address E ignore A DNS request is ignored no answer is given not even a negative answer E negative A DNS request for Name is answered with a negative answer Address Only for Response positive IP address which is assigned to Name TTL Period of validity in s for the assignment of Name to Address only relevant for Response positive This value is displayed in the TTL field Time To Live if X4000 sends a corresponding DNS record Default value 86400 24 h Table 8 41 IP DNS Sraric Hosts ADD X4000 User s Guide samme 255 Bg Advanced Configuration of the Basic Unit with the Setup Tool IP DNS FORWARDED DOMAINS ADD contains the following fields Global Nameservers The global name servers entered in IP STATIC SETTINGS are displayed Default Domain The Domain Name of X4000 entered in IP STATIC SETTINGS is displayed Name Host name that is to be resolved with this forwarding entry May also contain wildcards
14. Leave X 25 LINK CONFIGURATION with Exit Proceed as follows to make the preset routing settings for X 25 configuration gt Goto X 25 ROUTING ADD The following parts of the menu are relevant for this configuration step Source Link Source interface of data packets Destination Link Destination interface of data packets Destination X 25 X 25 destination address Address Table 8 14 X 25 B Routing ADD Select Source Link ocal gt Select Destination Link e g x31d2 0 1 210 mmsms X4000 Users Guide Settings Specific to WAN Partners Configuring AO DI partner as WAN partner Y NY Y Enter Destination X 25 Address e g 01901 f Press SAVE Leave X 25 ROUTING ADD with Exit Leave X 25 ROUTING with Exit You have returned to the main menu To define an AO Dl capable PPP interface proceed as follows Go to WAN PARTNER ADD Enter Partner Name e g AOD partner Select Encapsulation PPP Proceed as follows to make the PPP settings VV VY gt Go to WAN PARTNER ADD PPP Select Authentication e g CHAP Leave out Partner PPP ID Enter Local PPP ID e g bintec_router Enter PPP Password twice e g secret An asterisk appears on the screen as a place marker for each letter you enter for the password Confirm with OK To activate AO DI on the PPP interface and enter the X 25 address proceed as follows gt Go
15. The additional interfaces are shown in the Setup Tool main menu under Module as follows X4000 Setup Tool BinTec Communications AG MyRouter Licenses System LAN CM 100BT Fast Ethernet Module X4E 3BRI ISDN S0 WAN CM 1BRI ISDN S0 Serial WAN CM SERIAL Serial WAN Partner IP IPX PPP MODEM ISDN CAPI Configuration Management Monitoring and Debugging Exit The interface s are configured in the following menus E X4E 3BRI ISDN SO UNIT O for the first additional ISDN BRI port E X4E 3BRI ISDN SO UNIT 1 for the second additional ISDN BRI port E X4E 3BRI ISDN SO UNIT 2for the third additional ISDN BRI port X4000 User s Guide WAN Interface Card for ISDN BRI 9 Incoming Call Answering The number of ISDN BRI ports available with the expansion card can vary depending on how many interfaces are activated by license You can obtain any necessary licenses from your dealer Proceed as follows to configure the ISDN BRI interface s of the expansion card gt Go to X4E 3BRI ISDN SO UNIT 0 for the first interface This menu offers the same options as CM 1BRI ISDN S0 for the ISDN BRI interface of the basic unit For a detailed description see chapter 7 2 1 page 137 gt Select ISDN Switch Type autodetect on bootup This setting enables X4000 to use its automatic D channel detection As long as the D channel detection is running running appears next to Result of Autoconfiguration Once the
16. Bl How to access X4000 chapter 4 1 page 70 Bl How to log in to X4000 chapter 4 2 page 76 Bl Which methods of configuration are available to you chapter 4 3 page 78 E How the gt gt Setup Tool is constructed chapter 4 3 2 page 79 a How to carry out an initial configuration of X4000 chapter 4 4 page 91 X4000 User s Guide m 69 Configuration Requirements 4 1 Connection Methods Before you can configure your X4000 you must connect X4000 There are various ways of doing this Over the Man Machine Interface MMI Over the serial interface Over your gt gt LAN Over an gt gt ISDN connection S Connection isdnlogin Figure 4 1 Possible connections to X4000 The various connection methods are presented below so that you can choose the best method for your needs 70 samen X4000 User s Guide Connection Methods Initial steps Initial configuration Windows To do 4 1 1 Man Machine Interface MMI The MMI with its display and input keys is a good method for establishing initial contact with X4000 You should carry out the following initial steps with the MMI set the desired display language 9 enter the IP address and netmask You can then carry out further configuration steps using the Configuration Wizard or Setup Tool 4 1 2 Connecting Over the Serial Interface Connecting over the serial interface is very suitable if you carry out an initial configuration on X40
17. Feature of a connection that is permanently connected between three or more data stations or set up via switching systems Point to multipoint Several different terminals can be connected to a point to multipoint connection The individual terminals are addressed via certain extension numbers gt gt MSNs Feature of a connection between two data stations only The connection can be permanently switched or set up via switching systems A point to point ISDN access is used for the connection of a gt PABX The PABX can forward calls to a number of terminals A point to point access includes a gt gt PABX number via which the PABX is reached from outside and a group of numbers gt gt extension numbers range with which the terminals connected to the PABX can be dialed Input output The port number is used to decide to which service telnet WWW an incoming data packet should be sent Plain Old Telephone System The traditional analog telephone network X4000 User s Guide mm m 479 EE Glossary PPP PPP authentication PPPoE Primary Rate Interface PRI Protocol Proxy ARP RADSL Real Time Clock RTC 480 Remote Point to Point Protocol A protocol suite for authentication of the connection parameters of a point to point connection PPP is used to connect local networks over the gt gt WAN Multiprotocol packets are encapsulated gt gt encapsulation in a standard format befor
18. 11 2 Updating Software As BinTec Communications AG is constantly improving the software for all its products and you certainly want to use the latest features of X4000 this chapter tells you how to update your software If you want to update your software load a new software image in X4000 boot image Every boot image includes new features better performance and any necessary bugfixes from the previous version The latest software images are available free of charge from BinTec Communications AG on the World Wide Web at http www bintec de Here you can also find current product specific documentation Release Notes handbooks quick install guides and general product information Software Reference Extended Features Reference BRICKware for Windows If you want to update software make sure you read the corresponding Release Notes The release notes describe the changes provided by the new boot image There are various ways to update software This chapter will show you how to update with the help of the update command in the SNMP shell which is described step for step The alternatives to this method can be found in the Software Reference and in the Chapter Boot Sequence chapter 3 5 page 66 Caution An additional update of the module logic BOOTmonitor and or firmware logic is recommended in isolated cases If this should be the case with a new release this is clearly noted in the corresponding release notes The procedure a
19. 7 Select Filter hostxy_http_out 1 Press SAVE Leave IP BANDWIDTH ON DEMAND BOD RULES FOR BOD with Exit In the following configuration example mail reception is restricted to the D channel and there is no change to B Channel Mode The inquiry about whether new mails have been received does not cause a change to B Channel Mode either Proceed as follows to define the relevant filter for BOD gt gt gt Go to IP BANDWIDTH ON DEMAND BOD FILTER ADD Enter Description mai pop3 in Select Protocol tcp ummm X4000 Users Guide Settings Specific to WAN Partners ISDN B channel Enter Destination Address 172 16 08 15 Enter Destination Mask 255 255 255 255 Select Destination Port specify Enter Specify Port 110 VN OV Y Y Press SAVE A list of all the previously defined filters appears Y Leave IP BANDWIDTH ON DEMAND BOD FILTER with Exit Proceed as follows to define a rule for BOD Go to IP BANDWIDTH ON DEMAND BOD RULES FOR BOD ADD Select Action deny Select Direction incoming Select Number of Channels f Select Filter mai pop3 in 2 Press SAVE V VV VY NN Leave IP BANDWIDTH ON DEMAND BOD RULES FoR BOD with Exit 8 2 5 Layer 1 Protocol ISDN B Channel You can define the Layer 1 Protocol of the ISDN gt gt B channel that X4000 is to use for connections to the WAN partner The default setting is the protocol for 64 kbps IS
20. 9 Select the LAN interface of X4000 en7 or en snap and confirm with Return Select First Rule RI 1 FI 1 wrong dns Press SAVE These entries ensure that all data traffic that passes from source gt port 137 to destination port 53 will be discarded This means that no unnecessary connections will be established to resolve WINS names Leave IP ACCESS LISTS INTERFACES with EXIT Leave IP ACCESS LisTs with EXIT X4000 User s Guide samme 135 Basic Configuration of Basic Unit with Setup Tool 136 Leave IP with EXIT You have returned to the main menu The configuration of the basic router settings is complete 7 1 6 Where do we go from here After you have configured X4000 for your LAN you can carry out the following steps to permit WAN connections Configure the WAN interface s of X4000 that you wish to use ISDN BRI interface chapter 7 2 1 page 137 X 21 V 35 V 36 interface or X 21bis interface serial chapter 7 2 2 page 148 LAN interface for ADSL connections chapter 7 2 3 page 155 and chapter 9 3 2 page 288 gt Configure the WAN partners chapter 7 3 page 159 Configuration examples ISP T Online Internet Access over T Online page 183 ISP Compuserve Internet Access over Compuserve page 184 gt Configure the interfaces of your expansion card if applicable chapter 9 page 277 gt The facilities for more advanced configuration
21. ADD B ADVANCED SETTINGS Select Layer 1 Protocol PPP over Ethernet PPPoE gt Confirm with OK gt Goto WAN B ADD IP The following field is relevant IP Transit Network Defines whether X4000 uses a transit network to the WAN partner The IP address is assigned dynamically if dynamic client is selected Table 9 6 WAN PARTNER ADD IP Select IP Transit Network dynamic client Press SAVE Press SAVE Leave WAN PARTNER with EXIT gt Goto P RouriNG ADD X4000 User s Guide sssas 293 Bag Configuration of Expansion and Resource Cards with the Setup Tool The following field is relevant Partner Interface Your PPPoE partner Table 9 7 IP amp Routing ADD gt Select Route Type Default route Select Partner Interface e g t online Press SAVE Activating Network You can use NAT to ensure that Address Translation NAT E no more accesses can be made to your network from the Internet E and that connections to the Internet appear only under a single dynamically assigned IP address gt Goto IP NETWORK ADDRESS TRANSLATION 9 Select the WAN interface on which you want to activate NAT e g t online and confirm with Return Another menu window opens The following field is relevant Network Address Here you can activate Network Address Translation Translation NAT for your WAN partner This conceals your whole net
22. Goto CM 100BT FAST ETHERNET ADVANCED SETTINGS gt Activate IP Accounting with on IP accounting Proceed as follows to activate extended IP accounting X4000 then generates WAN side and records accounting messages for the selected WAN partner from TCP UDP and ICMP sessions gt Goto WAN PARTNER EDIT IP ADVANCED SETTINGS gt Activate IP Accounting with on Displaying syslog Proceed as follows to display syslog messages messages g gt Go to MONITORING AND DEBUGGING MESSAGES This displays the syslog messages saved internally in X4000 312 m mmmma X4000 Users Guide Activity Monitoring 10 X4000 Setup Tool BinTec Communications AG MONITOR MESSAGE Syslog Messages MyRouter Subj Lev Message SNMP DEB sent TRAP linkUp 0 115 bytes to circindex 1001 Port 36880 SNMP DEB sent TRAP linkUp 0 115 bytes to 199 1 1 13 Port 162 EXIT RESET Press lt Ctrl n gt lt Ctrl p gt to scroll Deleting syslog gt Select RESET to delete the syslog messages in X4000 messages xi 7 For interpretation of syslog messages see the Software Reference 4 10 1 2 Monitoring Functions in the Setup Tool You can also use the Setup Tool to display other data in addition to syslog messages The current status of certain subsystems is updated periodically and displayed Display modules are available for the following functional areas ISDN connections Credits Based Accounting System Interface statist
23. IP NETWORK ADDRESS TRANSLATION lists all the X4000 interfaces with a status display for current NAT settings Name Interface name Nat Indicates if NAT is activated for the relevant interface Possible values E off NAT not activated Bb on Forward NAT activated Wb reverse Reverse NAT activated static mappings If Nat on or Nat reverse indicates the number of entries that have been made for the interface for enabling certain IP connections in IP NETWORK ADDRESS TRANSLATION Return ADD Table 10 9 IP B NETWORK ADDRESS TRANSLATION Activate NAT for an X4000 interface with IP NETWORK ADDRESS TRANSLATION EDIT Network Address Defines the type of NAT for the selected Translation interface Possible values Hoff Do not execute NAT Mon Execute Forward NAT Wb reverse Execute Reverse NAT Table 10 10 IP B NETWORK ADDRESS TRANSLATION Return 332 nmmmsma X4000 Users Guide Access Security 10 You can explicitly allow a NAT interface certain IP connections to a certain internal host in IP NETWORK ADDRESS TRANSLATION EDIT ADD Service Service allowed for connections to the host defined under Destination Possible values ftp telnet smtp domain udp domain tcp http nntp user defined If you do not use any of the predefined services Enter the required values under Protocol and Port to define a Service Protocol Only
24. IP ACCESS FILTER ADD Configure IP Access Filter MyRouter Description wrong_dns Index 1 Protocol udp Source Address Source Mask Source Port specify Specify Port 137 Destination Address Destination Mask Destination Port specify Specify Port 53 Type of Service TOS 00000000 TOS Mask 00000000 SAVE CANCEL Enter string max length 48 chars Make the following entries to define a filter for WINS requests VV VY YN Enter Description wrong dns Select Protocol udp Select Source Port specify Enter Specify Port 137 Select Destination Port specify Enter Specify Port 53 Press SAVE You have returned to IP Access LISTS FILTER and the entries have been saved Now define a second filter as follows gt Goto P Access Lists FILTER ADD gt gt Enter Description all Select Protocol any gt Select Source Port any X4000 User s Guide samen 133 Basic Configuration of Basic Unit with Setup Tool 134 To do Select Destination Port any Press SAVE You have returned to menu IP Access LisTS FILTER The entries have been saved and both filters are now listed To define rules for these filters proceed as follows gt Goto P Access Lists RULES ADD X4000 Setup Tool BinTec Communications AG IP ACCESS RULE ADD Configure IP Access Rules MyRouter Action deny M Filter wrong_dns 1 SAVE CANCEL Use
25. Le fonctionnement de ce syst me conform ment aux normes CEI 950 EN 60950 ne peut tre garanti que si le boitier m tallique est mont au complet refroidissement protections anti incendie et antiparasite La temp rature ambiante ne doit pas d passer 50 C Evitez le rayonnement direct du soleil sur l appareil Veillez ce qu aucun objet des agrafes par ex ni aucun liquide ne s introduise l int rieur de l appareil risque d lectrocution ou de court circuit Veillez ce que l appareil ait suffisamment refroidi X4000 ne contient aucun composant devant tre remplac par l utilisateur et aucun commutateur fil volant ayant besoin d tre r gl Dans les cas d urgence extr me si le boitier ou des l ments de commande sont endommag s lorsque du liquide ou des corps trangers se sont introduits dans l appareil par ex d connectez imm diatement l alimentation en courant et contactez le service apr s vente L appareil doit tre ouvert uniquement par un point de service apr s vente agr par BinTec Il est imp ratif de retirer la fiche secteur avant d ouvrir l appareil L ouverture non autoris e de l appareil ainsi que des r parations non conformes exposent l utilisateur des risques graves risque d lectrocution par ex Les r parations ne doivent tre ex cut es que un point de service apr s vente agr par BinTec Votre concessionnaire vous fera part de l adresse laquelle vous pourrez conta
26. Mount the display unit on one of the two fixing brackets Make sure that the display unit engages properly see Figure 3 12 page 51 50 ummm X4000 Users Guide ww JB Figure 3 12 Mounting the display on one of the side brackets Step6 gt Slide this preassembled unit with the two brackets screwed to it into the cabinet and screw the preassembled unit to the longitudinal sections of the cabinet these screws are not supplied with X4000 but are included with the cabinet see Figure 3 13 page 52 Step7 gt Connect the plug of the display cable to the RJ11 socket provided X4000 Users Guide samme 51 B Hardware Description and Installation This is what X4000 should look like on completion of installation Figure 3 13 X4000 installed with connections at the front For connecting your 19 inch built in unit go to chapter 3 3 page 59 Removal from To remove X4000 from the 19 inch cabinet e g for installing a fan unit etc 19 inch cabinet carry out the steps described above in the reverse order 52 ummm X4000 Users Guide Expansion and Resource Cards ES e 3 2 Expansion and Resource Cards You can extend your basic unit by adding an X4000 expansion card The following expansion cards are offered by BinTec for integration in X4000 E X4E 1 2PRI WAN in
27. Settings Specific to WAN Partners B Mode Defines which mode is used for BOD Possible values see Table 8 12 page 205 Line Utilization Weighting Defines how the line utilization is calculated Possible values M equa All the measured values of throughput in Line Utilization Sample sec are weighted equally for the calculation default value E proportional The last measured values of throughput are weighted more heavily for the calculation i e the calculation is most heavily influenced by the last measured values in Line Utilization Sample sec Line Utilization Sample sec Time interval in seconds Throughput measurements in Line Utilization Sample sec are included in the calculation of the line utilization Possible values 5 to 300 default value 5 Gear Up Threshold Utilization threshold at which another B channel is added for a connection Gear Down Threshold B channels are dropped until the remaining channels have at least the percentage utilization degree remaining here D Channel Queue Length only if Layer 1 Protocol AO DI in the menu WAN PARTNER EDIT ADVANCED SETTINGS Threshold value for the number of bytes accumulated in the D channel at which the system is to change to the B Channel Mode see chapter 8 2 4 page 206 X4000 User s Guide ssss 203 B Advanced Configuration of the Basic Unit with the Setup Tool Maximum Number of Max
28. Type in your password e g bintec and press Return Your router then issues an input prompt e g X4000 The login was successful Caution A To prevent unauthorized access to X4000 you should change the passwords right away How to change the passwords is described in Changing the password page 85 gt Change the passwords as described in chapter 7 1 2 page 123 Closing the SNMP shell To leave the SNMP shell after completing the configuration enter exit and press Return X4000 User s Guide m m 77 4 Configuration Requirements Configuration Wizard 78 4 3 Configuration Options Before you set to work with the configuration you must select a method For this reason we would first like to give you an overview of the different configuration methods and an introduction to using the Setup Tool This manual explains how to configure X4000 by means of the Setup Tool 4 3 1 Methods of Configuration Methods of configuring X4000 Man Machine Interface MMI Configuration Wizard a m B6 Setup Tool E gt gt SNMP shell commands fg Configuration Manager and other SNMP managers The easy to use and intuitive Man Machine Interface MMI gives you the possibility of displaying information about X4000 on the display and entering a number of basic settings e g IP address and netmask with the input keys You can do this quickly and easily without having to log in The MMI cannot be used to set up a comprehen
29. We ll keep working on it You can download BinTec s current software from the World Wide Web You can find detailed information about the individual subjects in the relevant parts of this manual and in the more detailed documentation on the BinTec Companion CD X4000 User s Guide ssmnuz 17 18 1 2 Scope of Supply 1 2 1 Basic Unit The X4000 basic unit is obtainable as a desktop unit or as a 19 inch built in unit The X4000 basic unit is supplied with the following parts HM Cable sets Serial cable for the console port EC AC power cord ISDN cable E BinTec Companion CD E Documentation User s Guide Release notes if required E Additional material 19 inch mounting kit only with 19 inch built in unit License card with license information Single user license for RVS COM Lite Leaflet with X4000 guarantee information 1 2 2 Expansion Cards The following expansion cards can be purchased for X4000 E X4E 1 2PRI WAN interface card for ISDN PRI and or G 703 equipped as standard with hardware support for encryption and compression to be optionally equipped with up to two resource cards with digital modems XTR S XTR M or a resource card XTR L X4000 User s Guide Scope of Supply BH E X4E 2 3BRI WAN interface card for ISDN BRI to be optionally equipped with aresource card with digital modems XTR S XTR M and or aresource card for encryption and compression XTR ENC
30. Y Select an existing entry and confirm it with Return or add a new entry with ADD Select Item CAPI If you use a communication application on your PC that is based on Remote CAPI 1 1 current version Remote CAPI 2 0 X4000 must translate the gt gt MSNs Number multidigit of the incoming call to gt gt EAZs single digit CAPI 1 1 can only detect single digit numbers This is why the CAPI entry under Item is not simply called CAPI but CAPI 1 1 EAZ x Mapping When using CAPI 1 1 you must therefore make sure you assign each CAPI application the corresponding EAZ s by mapping For example select for Number 1234 the entry Item CAPI 1 1 EAZ 0 Mapping and for Number 5678 the entry Item CAPI 1 1 EAZ 1 Mapping CAPI 2 0 evaluates the MSN directly and translation to EAZ is not necessary You can use the same CAPI 1 1 EAZ x Mapping entry for each Number i e a single entry is sufficient You should certainly try to change your PC system to CAPI 2 0 so that you can also use new features Enter Number Select Mode Enter User Name Select Bearer X4000 User s Guide samme 193 8 Advanced Configuration of the Basic Unit with the Setup Tool 194 Authentication CLID General PPP settings Press SAVE Repeat these steps as often as necessary until you have created an entry for every user When you carry out remote CAPI configuration on the hosts you must enter the user name and
31. channel bundling for dialup connections Only one B channel is initially opened when a connection is established Dynamic channel bundling means that X4000 connects other gt gt ISDN B channels to increase the throughput for connections to the WAN partner if this is required e g for large amounts of data If the amount of data traffic drops the additional gt gt B channels are closed again In static channel bundling you specify right from the start how many B channels X4000 uses for connections to the WAN partner regardless of the amount of data transferred X4000 Users Guide sszsas 199 B Advanced Configuration of the Basic Unit with the Setup Tool The configuration is made in WAN PARTNER EDIT ADVANCED SETTINGS Channel Bundling Defines whether and which type of channel bundling is to be used for connections to the WAN partner Total Number of For dynamic channel bundling Defines the Channels maximum number of B channels that may be opened For static channel bundling Defines the number of B channels that are open during the complete connection Table 8 9 WAN PARTNER Epir ADVANCED SETTINGS The Channel Bundling field contains the following selection options no No channel bundling only one B channel is ever available for connections dynamic Dynamic channel bundling Static Static channel bundling Table 8 10 Channel bundling Todo Proceed as follows
32. input as the number of hours and converts it to the corresponding number of seconds automatically after you press SAVE Note If you select SDN as Time Protocol you must set the Time Offset to 0 If you change Time Offset sec turn back the time there should be no data flow Time Update Interval Time interval in seconds after which the sec system time is checked and updated if necessary If you enter values between 1 and 24 X4000 interprets the input as the number of hours and converts it to the corresponding number of seconds automatically after you press SAVE For Time Protocol T ME UDP TIME TCP or SNTP Current time is checked after every Time Update Interval in seconds For Time Protocol SDN Current time is checked for each first ISDN connection after expiry of the Time Update Interval X4000 User s Guide sssa 243 B Advanced Configuration of the Basic Unit with the Setup Tool Time server IP address of the time gt gt server used by X4000 Time Server is not needed if you set ISDN as Time Protocol Table 8 36 IP W STATIC SETTINGS The Time Protocol field contains the following selection options TIME UDP System time RFC 868 via gt gt UDP TIME TCP System time RFC 868 via gt gt TCP TIME SNTP System time as per SNTP Simple Network Time Protocol RFC 1769 via UDP ISDN System time from ISDN gt gt D channel free none System time not d
33. lt ifcname gt Is used to display status information for the system s interfaces based on the contents of the MIB table ifTable 1 displays the full length of the interface information normally the information is only displayed up to the twelfth character u only displays information on interfaces that are in the up status r displays the filters defined for the interface ifcname only displays information on interfaces whose names start with the characters entered e g ifstat en1 will display information on the interfaces en1 ent Illc and en1 snap netstat netstat i r p lt interface gt d dest IP addr gt Is used to display a short list of system information i displays a list of the interfaces r displays a list of routing table entries p displays a list of WAN partners interface limits the information displayed to the selected interface d dest IP addr gt displays routes to the IP address entered date date YYMMDDHHMMSS X4000 has a software clock Entering date displays the time set X4000 User s Guide SNMP Shell Commands Entering date YYMMDDHHMMSS sets the clock to the corresponding value year month day hour minute second t t lt seconds gt Is used to define the auto logout time for the current login session a connection to X4000 over telnet isdnlogin or serial interface is normally disconnected automatically
34. only information about physical interfaces E physical virt information about physical and virtual interfaces Update Interval sec Update interval in seconds Possible values 0 to 60 default value 5 Table 10 6 SvsrEM EXTERNAL Activity MONITOR The breakdown of X4000 s interfaces into physical and virtual interfaces is described in detail in the Software Reference Note A leased line always represents a physical interface but a group of leased lines is displayed as both a physical and virtual interface X4000 User s Guide sssa 323 10 Configuration of Security Functions and Firewall Todo Proceed as follows gt Goto SYSTEM EXTERNAL ACTIVITY MONITOR Enter Client IP Address Client UDP Port Type and Update Interval sec Press SAVE 324 msmmmm X4000 Users Guide Access Security Password 10 2 Access Security There are several ways of restricting logging in and access to X4000 to authorized users only Logging In chapter 10 2 1 page 325 Checking the Calling Party Number CLID chapter 10 2 2 page 326 Authentication of PPP Connections chapter 10 2 3 page 327 Callback chapter 10 2 4 page 327 Closed User Group chapter 10 2 5 page 330 Access to Remote CAPI chapter 10 2 6 page 330 Network Address Translation NAT chapter 10 2 7 page 331 Filters chapter 10 2 8 page 335 Local Filters chapter 10 2 9 page 348 Back Route Verification chapter 10 2
35. product absoluut gecontroleerd worden X4000 voldoet aan de gebruikelijke veiligheidsbepalingen voor inrichtingen van informatietechniek voor toepassing in een kantooromgeving X4000 User s Guide Reiniging en reparatie De reglementaire werking volgens IEC950 EN60950 van het systeem is al leen gegarandeerd bij een volledig gemonteerde blikken omhulling koe ling brandbeveiliging ontstoring De omgevingstemperatuur mag niet hoger zijn dan 50 C Vermijd direct zonlicht Let erop dat er geen voorwerpen bijv paperclips of vloeistoffen in het inwendige van het apparaat geraken elektrische schok kortsluiting Let op voldoende koeling X4000 bevat geen modules die door de gebruiker vervangen mogen wor den of schakelaars jumpers die de gebruiker moet instellen Onderbreek in noodgevallen bijv beschadigd huis of bedienelement binnendringen van vloeistof of vreemde voorwerpen onmiddellijk de stroomverzorging en neemt u contact op met de service dienst Het toestel mag alleen door een door BinTec geautoriseerde servicedienst geopend worden Voor het openen van het toestel in elk geval de netstek ker uittrekken Door onbevoegd openen en ondeskundige reparaties kan er groot gevaar voor de gebruiker ontstaan b v stroomstoten Reparaties aan het toestel enkel door een door BinTec geautoriseerde servicedienst laten uitvoeren Waar zich deze servicedienst bevindt weet uw handelaar In alle andere gevallen vervalt de aanspraa
36. udar pr dowy zwarcia Zapewni wystarczaj ce ch odzenia urz dzenia X4000nie zawiera adnych cz ci budowy kt re musiatyby by wymieniane przez u ytkownika nie zawiera te adnych prze cznik w czy te innych element w kt re trzeba ustawia W sytuacjach awaryjnych np uszkodzona obudowa lub element obstugi wnikni cie cieczy b d ciat obcych nale y natychmiast przerwa zasilanie urz dzenia pr dem elektrycznym i zawiadomi serwis Urz dzenie mo e by otwarte tylko przez fachowca z autoryzowanego serwisu BinTec Przed otwarciem urz dzenia koniecznie wyj wtyczk z gniazdka sieciowego Otwarcie przez osoby nieupowa nione i niefachowo przeprowadzone naprawy mog poci gn za sob powstanie powa nych zagro e dla u ytkownika np pora enie pr dem Naprawy mog by wykonywane tylko przez autoryzowany serwis naprawczy BinTec Adresy warsztat w serwisowych mo na uzyska w plac wkach handlowych W pozosta ych przypadkach wszelkie umowy gwarancyjne b d uznane za niewa ne Urz dzenia pod adnym pozorem nie wolno czy ci na mokro Dostanie si wody do wn trza urz dzenia mo e wywo ywa powa ne zagro enia dla u ytkownika np pora enie pr dem oraz powa ne uszkodzenia produktu Nigdy nie stosowa rodk w do szorowania zasadowych rodk w czyszcz cych ostrych lub szoruj cych rodk w pomocniczych X4000 User s Guide X4000 Users Guide a 449 15 General
37. uma vez que existe perigo de morte devido a choque el ctrico Nao retire quaisquer parafusos de fixagao do aparelho base HM Quando o aparelho deslocado de um local frio para o local de funcionamento poder haver forma o de condensa o tanto no exterior como no interior do aparelho Aguarde at o aparelho se encontrar X4000 User s Guide samme 443 15 General Safety Precautions in 15 Different Languages Utiliza o conforme com as especifica es 444 Opera o temperatura ambiente e completamente seco antes de o colocar em funcionamento Tenha em aten o as indica es relativas s condi es ambientais nos Dados t cnicos Verifique se a tens o de rede local corresponde s tens es nominais do equipamento de alimenta o de rede O aparelho pode ser operado nas seguintes condi es 100 240 VAC 50 60 Hz Certifique se de que a tomada de contacto de seguran a da instala o est acess vel Para desligar completamente a corrente do aparelho retire a ficha de rede Ao proceder cablagem respeite a sequ ncia tal como est descrita no manual Utilize unicamente cabos que correspondam s especifica es contidas neste manual ou cabos originais que tenham sido fornecidos Se usar outros cabos a BinTec Communications AG n o se responsabiliza por danos da decorrentes ou por limita es de funcionamento Nestes ca sos a garantia do aparelho anulada Aquando da conex o do apa
38. 1 1 Display settings Set the brightness of the display 3rd submenu Brightness Figure 5 3 Navigation bars example The vertical navigation bar at the left edge of the display is for the main menus The horizontal navigation bar at the bottom edge indicates in which menu of the second level of the corresponding main menu you are located The following figures of the menu architecture also show the associated navigation bars X4000 User s Guide Menu Architecture 5 5 3 Menu Architecture The MMI offers the following menus at the top level main menus Display Settings IP Address and Netmask a Date and Systemtime Information about X4000 Basic Unit Information about X4000 Expansion Card Monitoring Figure 5 4 Main menus with navigation bars Display Settings see chapter 5 3 1 page 100 IP Address and Netmask see chapter 5 3 2 page 102 Date and System Time see chapter 5 3 3 page 103 Information about X4000 Basic Unit see chapter 5 3 4 page 104 Information about X4000 Expansion Card see chapter 5 3 5 page 105 Monitoring see chapter 5 3 6 page 106 amp f The following figures show the architecture of the individual menus Running through these is a good opportunity to carry out your first steps with the MMI SS X4000 User s Guide m m 99 A Man Machine Interface MMI Display with User Guide 5 3
39. 1 Display Settings e OK OK Display Settings ELA Deutsch p a l Language ooo English OK OK The language has been changed Display Idletimer to ENGLISH OK allad Min aus1 23 45 OK Brightness OK ans OK 0 1 2 3 Contrast OK alan OK 0246 8 10 MMI Mode OK Run MMI in zd mode z OK Config Mod I connu Medeoni OK MMI mode has Change PIN for changed to mode Configuration Mode l OK Enter current PIN O54 f 0000 OK Enter new PIN 1234 OK Retype new PIN 1234 f ok 7 IP Address and OK PIN has been Netmask FI changed Figure 5 5 Menus for selecting the display settings with navigation bars 100 m s X4000 Users Guide Menu Architecture The main menu Display Settings offers the following options for modifying the display characteristics Language For setting the display language English is initially preset as default Display Idle Timer For enabling and disabling the display idle timer 1 5 minutes On expiry of this time the logo appears in the display if no input key has been used for the set period of time Brightness For setting the display brightness Contrast For setting the display contrast MMI Mode For changing from Configuration Mode to Monitoring Mode and vice versa To change to Configuration Mode you need the set P
40. 10 page 352 TAF chapter 10 2 11 page 353 Extended IP Routing XIPR chapter 10 2 12 page 353 10 2 1 Logging In Logging in to X4000 can be done in several ways as described in chapter 4 2 page 76 but is always protected by a password Every unsuccessful attempt to log in is logged with the source of the attempt by a syslog message and creates a corresponding SNMP trap Pauses are inserted after several unsuccessful attempts to make it difficult for automatic attempts to find the password X4000 User s Guide samme 325 10 Configuration of Security Functions and Firewall 326 A Auto logout CLID Screening indicator Caution All BinTec routers are shipped with the same user names and passwords As long as the password remains unchanged they are not protected against unauthorized use How to change the passwords is described in Changing the password page 85 gt You must change the passwords as described in chapter 4 2 page 76 gt Also make sure that unauthorized persons do not have access to the X4000 power supply serial console and gt Ethernet connection Until you have changed the default password for the user name admin a warning is always given after logging in To make unauthorized access difficult the connection to X4000 is disconnected if no keyboard entry is made for a period of 15 minutes You can change the time with the command t time in seconds see chapter 14 1 page 412 If
41. 2 6 10 2 7 Activity Monitoring Syslog Messages Monitoring Functions in the Setup Tool Credits Based Accounting System HTTP Status Page Java Status Monitor Activity Monitor Access Security Logging In Checking the Calling Party Number Authentication of PPP Connections with PAP CHAP or MS CHAP Callback Closed User Group Access to Remote CAPI NAT Network Address Translation X4000 User s Guide m m Em Table of Contents 10 2 8 Filters Access Lists 10 2 9 Local Filters 10 2 10 Back Route Verification 10 2 11 TAF Client 10 2 12 Extended IP Routing XIPR 10 3 Line Tapping Security 10 3 1 Encryption 10 3 2 VPN with extra license 10 4 Special Features 10 4 1 Startup Procedure 10 4 2 Auto Logout 10 4 3 Prevention of Denial of Service Attacks 10 5 Checklist 11 Configuration Management 11 1 Administration of Configuration Files 11 2 Updating Software 12 Troubleshooting 12 1 Aids to Troubleshooting 12 1 1 Man Machine Interface MMI 12 1 2 Local SNMP Shell Commands 12 1 3 External Aids 12 2 Typical Errors and Procedure 12 2 1 System Errors 12 2 2 ISDN Connections 12 2 3 IPX Routing 12 ummm X4000 Users Guide 335 348 352 353 353 354 354 357 358 358 358 358 360 363 364 371 375 376 376 376 377 379 379 380 383 Table of Contents 13 Technical Data 13 1 Mains Unit 13 2 Features of Basic Unit 13 2 1 Serial Console Interface 13 2 2 Ethernet LAN Interface 1
42. 50 60Hz V rifiez si la prise de courant de s curit pour l installation est librement ac cessible Il faut retirer la fiche de contact pour garantir la d connexion du secteur Lors du c blage respectez les tapes indiqu es dans le manuel N utilisez que les c bles correspondants aux sp cifications indiqu es dans ce manu el ou les c bles d origine joints la livraison Dans le cas o vous utiliseriez d autres c bles que ces derniers la soci t BinTec Communications AG d cline toute responsabilit pour des dommages ventuels ou pour tout d faut de fonctionnement pouvant en r sulter Dans de tels cas la garantie s annule Pour le raccordement de l appareil respectez les indications du manuel Posez les c bles de telle sorte qu ils ne puissent pas tre l origine de risques risques de tr buchement ou tre endommag s Pendant un orage ne connectez pas les lignes de transmission des donn es ne les d branchez pas et ne les touchez pas X4000 est concu pour l utilisation dans les bureaux En tant que router multi protocoles X4000 tablit les connexions WAN en fonction de la configuration existante Pour viter des frais de taxation ind sirables il est imp ratif de placer ce produit sous contr le X4000 est conforme aux prescriptions de s curit relatives aux quipements de la technique de l information pour l utilisation dans les bureaux ummm X4000 Users Guide Nettoyage et r parations
43. 61 Eg Hardware Description and Installation and the red LED on the back of X4000 go out at the end of the selftest The blue Power LED lights as long as X4000 is supplied with power The status messages displayed by LEDs are described in chapter 3 4 N page 63 ty i4 Hardware gt Make the necessary hardware basic settings via the keyboard and display a detailed description is contained in chapter 5 page 93 Select interactive language in the MMI Enter any IP address and netmask so that further configuration can be carried out via the LAN and not via the console port basic settings 62 ummm X4000 Users Guide Status Messages via LEDs Bg 3 4 Status Messages via LEDs The three different types of LED used by the X4000 basic unit for indicating status messages and the meaning of the LEDs on the expansion cards are given below 3 4 1 Basic Unit Power LED The blue Power LED inside the BinTec logo on the front of X4000 see Figure 3 1 page 37 lights as soon as X4000 is supplied with power Illuminated The display input keys illuminated during operation guide you through the MMI input keys 9 z 9 C Press this key to No meaningful leave the menu level entry possible Press this key to No meaningful A move backwards in entry possible the menu level Press this key to No meaningful v t move forwards in the entry possible menu level OK Confirmation of No me
44. All CAPI messages sent or received by X4000 are displayed The IP address of X4000 must be entered as the environment variable CAPI HOST h hexadecimal output s short output Only the application ID a connection identifier and the name of the CAPI message are displayed at the end of the information line 1 long output default A detailed interpretation is given for each parameter in the CAPI message Each CAPI message is preceded by a line containing the following information Timestamp seconds milliseconds local time Sent received flag X sent R received Name of the CAPI message ASCII string Command of the CAPI message OxABXY AB lt subcommand gt XY lt command gt Number of the tracer message lt decimal gt Length of the CAPI message lt decimal gt Application ID ID lt decimal gt Number of the CAPI message no lt decimal gt Short output only connection identifier ident Ox lt hexadecimal gt X4000 User s Guide Transport und Lagerung Aufstellen und in Betrieb nehmen 15 General Safety Precautions in 15 Different Languages Allgemeine Sicherheitshinweise in deutsch In den nachfolgenden Abschnitten finden Sie Sicherheitshinweise die Sie beim Umgang mit Ihrem Ger t unbedingt beachten m ssen Transportieren und lagern Sie X4000 nur in der Originalverpackung oder in einer anderen geeigneten Verpackung die Schutz gegen Sto und Schlag gew hrt Beachten S
45. Confirm with Return to change the entry Another menu window opens X4000 Setup Tool BinTec Communications AG WAN ADD WANNUMBERS ADD Add or Change WANNumbers BigBoss MyRouter Number 0911987654321 Direction outgoing Advanced Settings SAVE Cancel Enter string max length 40 chars The menu contains the following fields Number Extension of WAN partner Direction Defines whether Number should be used for incoming or outgoing calls or for both Table 7 15 WAN PARTNER ADD WAN NuuBERS ADD The Direction field contains the following selection options outgoing For outgoing calls where you dial your WAN partner both CLID For incoming and outgoing calls incoming CLID For incoming calls where your WAN partner dials in to your X4000 Table 7 16 Direction X4000 User s Guide sss 165 Basic Configuration of Basic Unit with Setup Tool Wildcards When X4000 is connected to a PABX system for which a 0 prefix is necessary for external line access this 0 must be considered when entering the access number When entering the Number you can either enter the extension digit for digit or you can replace single numbers or groups of numbers with wildcards Number can therefore be the same as various extensions You can use the following wildcards which have different effects for incoming and outgoing calls
46. DI Always On Dynamic ISDN functions IP IP ADDRESS PooL WAN PPP is for setting up a pool of IP addresses that your X4000 as a dynamic IP address server can assign to WAN partners who can then dial in IP IP AppnESS PooL LAN DHCP is for configuring X4000 as a gt gt DHCP server As a DHCP server X4000 assigns the IP addresses to the hosts in the LAN dynamically IP SNMP is for changing the basic gt gt SNMP settings IP RADIUS SERVER is for configuring RADIUS servers IP DNS is for defining the procedure for name resolution in X4000 IP LOCAL SERVICES ACCESS CONTROL is for controlling access to the local UDP and TCP services in X4000 IPX Here you make the entries for the IPX protocol gt gt IPX is used especially in Novell networks X4000 Users Guide a 89 Configuration Requirements PPP Includes generally valid gt gt PPP settings e g authentication protocol that do not just refer to particular WAN partners With these settings the router can perform an authentication procedure for incoming calls even if the calling line number cannot be identified e g because the call is made from an analog line that does not transfer the calling line number ISDN Here you administrate X4000 s Credits Based Accounting System CAPI Includes the settings for BinTec s gt gt CAPI user concept You can use this to assign user names and passwords to users of the X400
47. Data Make sure the local mains voltage is the same as the nominal voltages of the mains unit The equipment may only be operated under the following conditions 100 240 V AC 50 60Hz Make sure the safety mains socket in the building is freely accessible You must remove the mains plug to disconnect the equipment completely from the mains Make sure you follow the correct cabling sequence as described in the manual Use only the cables supplied with the equipment or cables that meet the specifications in this manual If you use other cables BinTec Communications AG cannot accept liability for any damage occurring or for any adverse effects on operation The equipment guarantee is invalidated in such cases Connect the equipment as described in the manual Arrange the cables so that they are not in the way and cannot be tripped over or damaged Do not connect disconnect or touch the data lines during lightning storms X4000 is intended for use in offices As an ISDN multiprotocol router X4000 establishes WAN connections depending on the system configuration To avoid extra charges you should carefully monitor the product X4000 meets the relevant safety standards for information technology equipment for use in offices Operation of the system according to IEC 950 EN 60950 is only guaranteed when the top of the housing is fitted cooling fire protection RFI suppression Ambient temperature should not exceed 50
48. Data Circuit Terminating Equipment see gt V 24 Control and signalling channel of the gt gt ISDN Basic Rate Interface or the Primary Rate Interface The D channel has a data transmission rate of 16 kbps In addition to the D channel each ISDN BRI has two gt gt B channels Data communications network A connection is set up when required by dialing an extension number in contrast to a gt leased line See gt extension numbers range Dynamic Host Configuration Protocol A Microsoft protocol that provides a mechanism for dynamic assignment of IP addresses A DHCP server allocates each gt client in a network an IP address from a defined address pool compiled by the system administrator Prerequisite gt gt TCP IP must be configured at the clients so that they can request their IP address from the server X4000 can be used as a DHCP server Desktop Internetworking Management Environment DIME Tools is a collection of tools for the configuration and monitoring of routers over Windows applications They are included with all BinTec routers free of charge Domain Name System Each device in a gt TCP IP network is usually located by its gt gt IP address Because 9 host names are often used in networks to reach different devices it is necessary for the associated IP address to be known This task can be performed by a Domain Name Server DNS which resolves the host names into IP addresses Alternatively name
49. Exit Leave IP BANDWIDTH ON DEMAND BOD CONFIGURE INTERFACES FOR BOD with Exit Leave IP BANDWIDTH ON DEMAND BOD with Exit You have returned to the main menu Configuration Examples for BOD Bandwidth on Demand Two configuration examples are described below Additional Bandwidth for HTTP Connections Restricting Mail Reception to D Channel The following example shows a special configuration of X4000 for connection setup of the PC with the IP address 172 16 77 11 TCP Port 80 to the Internet The system should always change to B Channel Mode with one B channel when an HTTP connection is set up to the Internet X4000 User s Guide samme 217 rn Advanced Configuration of the Basic Unit with the Setup Tool Restricting mail reception to D channel 218 Proceed as follows to define the relevant filter for BOD VV V V NV N NN Y Go to IP BANDWIDTH ON DEMAND BOD FILTER ADD Enter Description hosixy http out Select Protocol icp Enter Source Address 172 16 77 11 Enter Source Mask 255 255 255 255 Select Destination Port specify Enter Specify Port 80 Press SAVE A list of all the previously defined filters appears Leave IP BANDWIDTH ON DEMAND BOD FILTER with Exit Proceed as follows to define a rule for BOD VVVVYVY gt Go to IP BANDWIDTH ON DEMAND BOD RULES FOR BOD ADD Select Action invoke M Select Direction outgoing Select Number of Channels
50. Facility Syslog facility at Log Host Only required if the Log Host is a Unix computer Type Message type Possible values E all all messages M system syslog messages except accounting messages E accounting accounting messages Table 10 2 SvsrEM EXTERNAL SYSTEM LOGGING IP Accounting For saving accounting messages for gt gt TCP gt gt UDP and ICMP sessions Possible values on off Table 10 3 CM 100BT FAST ETHERNET ADVANCED SETTINGS IP Accounting For saving accounting messages for gt gt TCP gt gt UDP and ICMP sessions Possible values on off Table 10 4 WAN PARTNER Epir IP ADVANCED SETTINGS Todo Make the desired settings for syslog messages as follows X4000 Users Guide samme 311 10 Configuration of Security Functions and Firewall Go to SYSTEM Select Syslog Output on Serial Console Select Message Level for Syslog Table Enter Maximum Number of Syslog Entries VN OV Y Y Go to SYSTEM EXTERNAL SYSTEM LOGGING to pass syslog messages to external hosts Y Select an existing entry and confirm it with Return or add a new entry with ADD Enter Log Host Select Level Select Facility VV VY Select Type IP accounting Proceed as follows to activate IP accounting for a LAN partner X4000 then LAN side generates and records accounting messages for the selected LAN partner from TCP UDP and ICMP sessions gt
51. Figure 3 15 Rear view of a PRI G 703 expansion card 54 ummm X4000 Users Guide Expansion and Resource Cards ES Two RJ45 sockets IN and OUT are available per interface on the PRI G 703 expansion card Connect the expansion card by connecting the cable to the IN socket You can connect a backup router via the OUT socket as an option which can then take over the function of the first router if this is switched off or fails By connecting a loopback plug to the OUT socket it is also possible to prevent the provider s exchange disconnecting the line if the expansion card fails LAN Expansion Card X4E 2FE i Fast Ethernet port LEDs wmm a Figure 3 16 Rear view of a LAN expansion card 3 2 2 Installation and Replacement of Expansion Card Now you can find out how to equip the X4000 basic unit with an expansion card or replace this with one of the other X4000 expansion cards Make sure you also follow the installation guide supplied with the expansion and resource cards X4000 User s Guide ssmnuz 55 ER Hardware Description and Installation 56 A A Caution An expansion card must not be installed or replaced during operation X4000 must always be disconnected from the power supply first otherwise there is a risk of damaging both X4000 and the expansion card Always disconnect the power cord of X4000 and all connecting cables on the expansion card before you insert or replace the
52. ISO ISP ITU LAN Leased line MAC address One of X4000 s features X4000 can be configured and administrated remotely using ISDN Login ISDN Login operates on routers in the ex works state as soon they are connected to an ISDN connection and therefore reachable via an extension number ISDN Primary Rate Interface ISDN gt Primary Rate Interface also gt S interface International Standardization Organization An international organization for the development of world wide standards e g gt gt OSI model Internet Service Provider Allows companies or private individuals access to the Internet International Telecommunication Union International organization that co ordinates the construction and operation of telecommunications networks and services Local Area Network A network covering a small geographic area and controlled by its owner Usually within the confines of a building or corporate center Leased line Fixed connection to a subscriber In contrast to a gt gt dialup connection neither an extension number nor connection setup or clearing is necessary Every device in the network is defined by a fixed hardware address MAC address The network card of a device defines this internationally unique address Management Information Base The MIB is a database that describes all the manageable devices and functions connected to a network All MIBs including the BinTec MIB contain objects specific
53. If you work with Windows PCs in your network it is usually advisable to define a NetBIOS filter An example of this configuration is explained step by step in chapter 7 1 5 page 132 10 2 9 Local Filters Access to the local UDP and TCP services on X4000 telnet gt gt CAPI trace etc can be controlled via the separate Setup Tool menu IP LOCAL SERVICES AccESS CONTROL One or more restrictions can be defined here for each service If no entry exists for a service there are no access restrictions for this service i e access is possible to this service over all interfaces and from any source address provided this is not prohibited by the use of NAT see chapter 10 2 7 page 331 or global filters see chapter 10 2 8 page 335 As soon as at least one entry for local filters exists in X4000 incoming requests for the corresponding local services of X4000 are only allowed if 1 the source address is 127 0 0 1 loopback address or 2 noentry exists for the corresponding service or 3 the incoming call is expressly allowed by at least one entry The existing entries are processed in the order in which they are listed in the corresponding table in the SNMP shell localTcpAllowTable or localUdpAllowTable If an entry in this sorted list does not apply the next entry is checked This enables requests over several interfaces or from several IP addresses to be admitted individually to a certain service If a matching entry for a r
54. In order to keep the routing tables up to date routers exchange information between themselves via routing protocols e g gt gt OSPF RIP Modern routers such as X4000 are gt gt multiprotocol routers and thus capable of routing several protocols e g IP and IPX X4000 User s Guide sszmms 481 EE Glossary 482 Sp bus Sp interface Sow interface SDSL Server Setup Tool Short hold SNMP SNMP shell All ISDN sockets and the gt gt NTBA of an ISDN point to multipoint connection All Sg buses consist of a four wire cable The lines transmit digital ISDN signals The Sg bus is terminated with a terminating resistor after the last ISDN socket The S bus starts at the NTBA and can be up to 150 m long Any ISDN devices can be operated on this bus However only two devices can use the S bus at any one time as only two gt B channels are available See gt ISDN Basic Rate Interface See gt gt ISDN Primary Rate Interface Single line gt Digital Subscriber Line The gt gt upstream and gt gt downstream data rate is up to 768 kbps over ranges up to 3 5 km The main SDSL applications are gt gt E1 T1 and gt gt POTS A server offers services used by gt clients Often refers to a certain computer in the LAN e g DHCP server In client server architecture a server is the software part that executes functions for its clients e g gt gt TFTP server In such a case the server is not n
55. Network component used to connect several network components together to form a local network star shaped The Internet consists of a range of regional local and university networks The IP protocol is used for data transmission in the Internet Internet Protocol One of the gt gt TCP IP suite of protocols used for the connection of Wide Area Networks gt gt gt WANS The first part of the address by which a device is identified in an IP network e g 192 168 1 254 See also gt gt netmask Internet Packet Exchange Sequenced Packet Exchange Protocol suite from Novell for the transmission of data in a network The two parts of this protocol suite are IPX layer 3 of the OSI model and SPX layer 4 of the OSI model Integrated Services Digital Network The ISDN is a digital network for the transmission of voice and data There are two possible subscriber connections for ISDN the gt gt ISDN Basic Rate Interface and the gt Primary Rate Interface ISDN is an international standard For ISDN protocols however there is a range of variations An ISDN subscriber interface The Basic Rate Interface consists of two gt gt B channels and a gt D channel Compare gt Primary Rate Interface The interface to the subscriber is provided by an gt gt So bus ISDN Basic Rate Interface ISDN Basic Rate Interface also gt Sy interface X4000 User s Guide samme 475 EE Glossary ISDN Login 476 ISDN PRI
56. One packet is sent per X4000 interface and time interval which can be adjusted individually to values from 1 60 seconds All physical interfaces and up to 100 virtual interfaces can be monitored provided the packet size of approx 4000 bytes is not exceeded A Windows application on your PC receives the packets and displays the information received in various forms This application is obtainable with BRICKware Release 5 1 1 and higher Activate the Activity Monitor as follows HM Appropriately configure the X4000 s to be monitored E Start and use the Windows application on your PC see BRICKware for Windows ummm X4000 Users Guide Activity Monitoring 10 The configuration is made in SYSTEM EXTERNAL ACTIVITY MONITOR Client IP Address IP address to which X4000 sends the UDP packets The default value 255 255 255 255 means that the broadcast address of the first LAN interface is used Note If you enter the IP address of a WAN partner that can be reached over an ISDN dialup connection you will get a large telephone bill due to frequent setting up of ISDN connections a packet is usually sent every 5 seconds Client UDP Port Port number for Activity Monitor default value 2107 registered by IANA Internet Assigned Numbers Authority Type Type of information sent in the UDP packets to the Windows application Possible values E off deactivates Activity Monitor default value E physical
57. Request the remote terminal is requested to add a B channel adding the channel is not initiated but accepted if applicable M Link Drop Request one communication partner wants to drop a B channel dropping is initiated or accepted if applicable Table 8 17 Mode BAP Active Mode Select Mode BAP Active Mode gt Use the preset values for the other fields of this menu Press SAVE gt Confirm with OK To enter the necessary ISDN extensions for adding the B channel proceed as follows gt Goto WAN PARTNER ADD WAN NUMBERS ADD Enter the Number e g 0911123456 gt Select Direction outgoing Press SAVE 214 mmmmm X4000 Users Guide Settings Specific to WAN Partners 8 Leave WAN PARTNER ADD WAN NUMBERS ADD with Exit For dynamic assignment of the IP address by the Internet Service Provider proceed as follows gt Goto WAN PARTNER ADD IP Select IP Transit Network dynamic client Press SAVE Press SAVE VV Y Y Leave WAN PARTNER with Exit You have returned to the main menu BOD for IP Based Applications Optional Filters and rules BOD for IP based applications is configured by filters and rules in a similar way to Access Lists for IP packets see chapter 10 2 8 page 335 First filters are defined that determine which IP packets and thus applications are to influence the available bandwidth If several filters are defined they can be interlink
58. SNMP table structures and the operation of the SNMP shell Extended Features Reference PDF Online reference for extra functions some of which are only available with a separate license e g VPN MIB Reference HTML document with short descriptions about all SNMP tables and variables for X4000 B6 BRICKware for Windows English PDF User s guide for Windows utility programs BRICKware E Release notes English PDF and or printed Up to the minute information and instructions concerning the latest software release description of all changes undertaken since the previous release In the Logic release notes you will find instructions to help you upgrade BOOTmonitor and or firmware logic E Release notes for router operation in UK English PDF Instructions for the operation of BinTec routers in Great Britain X4000 User s Guide System Requirements 1 5 System Requirements X4000 can be configured from all conventional platforms X4000 is a stand alone device that is independent of the PC or operating system to which it is connected The router communicates with the PC over a LAN interface 10 100 Mbps or a serial connection Your router can therefore be used in many different operating system environments such as DOS Windows UNIX AS 400 Macintosh or Novell If you want to use the Configuration Wizard however you will require the following HM PC with serial interface V 24 Windows 95 or 98 or Windows N
59. Select Network WAN without transit network Enter Destination IP Address e g 10 1 2 0 Enter Netmask e g 255 255 255 0 Enter Partner Interface e g Littlelndian Enter Metric e g 7 VV VY NN Press SAVE You have returned to P ROUTING The entries have been saved and the newly entered or modified route is listed Repeatthese steps if you have to enter several routes Activating Network Address Translation NAT Here you can activate Network Address Translation gt gt NAT for your WAN partner This conceals your whole network to the outside world with just one IP address You should certainly do this for your connection to the Internet Service Provider ISP More information about Network Address Translation NAT can be found in chapter 10 2 7 page 331 Proceed as follows to activate NAT gt Goto IP NETWORK ADDRESS TRANSLATION X4000 Setup Tool BinTec Communications AG IP NAT NAT Configuration MyRouter Select IP Interface to be configured for NAT Nat static mappings GoInternet on 2 LittleIndian off en off enl snap off EXIT Press lt Ctrl n gt lt Ctrl p gt to scroll lt Return gt to edit select X4000 Users Guide ssmms 181 Basic Configuration of Basic Unit with Setup Tool 182 To do gt Mark the WAN partner for which you want to activate NAT e g Go nternet and press Return Another menu window opens X4000 Setup Tool BinTec Com
60. X 25 in the D channel You only need to make changes here if you want to use the X 31 TEI value for CAPI applications The menu contains the following fields X 31 TEI Value X 31 TEI is detected automatically in ISDN autoconfiguration and this value set to specify If autoconfiguration has not detected TEI you can set specify manually Specify TEI Value The value for X 31 TEI assigned by the exchange This value is detected automatically by ISDN autoconfiguration but can also be entered manually X 31 TEI Service Here you select the service for which you want to use X 31 TEI Possible values B Capi E Capi Default B6 Packet Switch Capi and Capi Default are for using X 31 TEI for CAPI applications For CAPI the TEI value set in the CAPI application is used For CAPI Default the value of the CAPI application is ignored and the default value set here is always used Set to Packet Switch if you want to use X 31 TEI for the X 25 router Table 8 7 CM 1BRI ISDN SO Apvancep SETTINGS X4000 User s Guide sssas 197 8 Advanced Configuration of the Basic Unit with the Setup Tool 198 8 2 Settings Specific to WAN Partners Specific functions for gt gt WAN partners make it possible to define the characteristics for connections to WAN partners individually Carry out the configuration steps described separately for each WAN partner Delay after Connection Failure chapter 8 2 1 page 198 Cha
61. X4000 User s Guide ssmnuz 57 B Hardware Description and Installation is reliably plugged in Once the expansion card engages in the connector fix it to the housing with the two screws you previously unscrewed from the dummy cover or the expansion card to be replaced see Figure 3 17 page 57 If you are using an expansion card with resource card s in the X4000 built in ry unit BinTec Communications AG recommends that you use the fan unit obtainable as optional equipment Removal To remove an expansion card carry out the installation steps described above in the reverse order 58 ummm X4000 Users Guide Setting Up and Connecting Bg 3 3 Setting Up and Connecting Expansion card slot with IEC AC socket of mains unit dummy cover 2 Status LEDs red and green E X 21 V 35 V 36 interface 35 V 36 interface BEES socket for RJ11 socket for display NETT X 21bis interface interface F ooo DIN socket console e EK screws for expansion card and dummy cover Ethernet LAN 10 100 Base T Plastic strip for activating the Fast Ethernet interface buffer battery for the real time clock RTC e eonen Figure 3 18 X4000 rear view X4000 Users Guide samme 59 ER Hardware Description and Installation A Connecting X4000 to PC or terminal Connecting X4000 to LAN Connecting X4000 to WAN Caution Incorrect cabling of ISDN or LAN interfaces can cause your router to malfunction gt Onl
62. X4000 s IP address instead of the name The HTTP status page of the BinTec router with the system name System Name is displayed with the IP address entered The HTTP status page contains three tables HM System description In addition to the version of the system software this also lists information from the MIB table system such as System name and Contact If a valid e mail address is given under Contact this is shown underlined E Software options This table lists information from the MIB table biboAdmLiclnfoTable and displays the status of X4000 s subsystems E Hardware interfaces This table displays the LAN and WAN interfaces of X4000 The third column of the table provides information about the current status of the physical interfaces X4000 User s Guide Activity Monitoring e od The HTTP status page contains a number of links E update Click update to update the status page E login Click login to log in to the associated BinTec router via gt telnet Bb nttp www bintec de Use this link to access BinTec s WWW server with the latest information on products and the current system software and documentation for X4000 Bb system tables Click system tables to display a list with all the X4000 MIB tables Clicking a table name lists the variables contained in the table If you don t want to display X4000 s HTTP status page enter 0 as the port number of the http port gt Goto IP STATIC SETT
63. X4000 sends requests for name server addresses to the WAN partner server send X4000 answers requests from the WAN partner for name server addresses Table 8 47 Dynamic Name Server Negotiation Procedure for Configuration with the Setup Tool Todo Proceed as follows to configure name resolution with DNS Proxy in X4000 Name resolution in If applicable first enter the global name servers in X4000 A00 gt Goto IP STATIC SETTINGS Enter Domain Name e g mycompany com gt Enter Primary or Secondary Domain Name Server if applicable 262 nmmmmm X4000 Users Guide Basic IP Settings 8 gt Enter Primary or Secondary WINS if applicable If you do not have a Secondary DNS or Secondary WINS server you can enter the IP address of the Primary DNS or WINS server in the Secondary Domain Name Server or Secondary WINS field again Ky 5 This may be necessary for connection to some data communications clients Press SAVE Activate or deactivate the cache function and define general settings for DNS Proxy gt Goto IP DNS gt Select Positive Cache and Negative Cache e g enabled 9 Select Overwrite Global Nameservers e g yes if you do not wish to enter any static global name servers under IP STATIC SETTINGS Select DHCP Assignment e g self 9 Select IPCP Assignment e g global Define the values for the static and dynamic entries Go to IP DNS ADVANCED SETTINGS
64. X4000 stabilisce collegamenti WAN in rapporto alla configurazione del sistema Per evitare canoni indesiderati si consiglia di controllare assolutamente il prodotto X4000 conforme alle relative disposizioni di sicurezza per impianti della tecnica informatica impiegati in ambiente d ufficio I funzionamento regolamentare del sistema secondo le disposizioni IEC950 EN60950 garantito raffreddamento protezione antincendio schermatura contro radiodisturbi solo se completamente montato l invo lucro di lamiera X4000 User s Guide samme 435 15 General Safety Precautions in 15 Different Languages 436 Pulizia e riparazione La temperatura ambiente non deve superare 50 C Non esporre l apparec chio all azione diretta dei raggi solari Fare attenzione che nessun oggetto p es fermagli o liquido penetri all interno dell apparecchio scossa elettrica corto circuito Provvedere ad un sufficiente raffreddamento X4000 non contiene elementi costruttivi che possono essere sostituiti dall utente n interruttori ponticelli che devono essere regolati dal cliente In casi d emergenza p es danneggiamento dell involucro o dell elemento di comando infiltrazione di liquido o di corpi estranei staccare immediatamente la corrente ed informare il servizio assistenza L apparecchio deve essere aperto soltanto da un centro di assistenza Bin Tec autorizzato Prima di aprire l apparecchio estrarre assolutamente la spina di aliment
65. but does not send requests for name server addresses if yes or no is selected client receive X4000 sends requests for name server addresses to the WAN partner server send X4000 answers requests from the WAN partner for name server addresses Table 8 26 Dynamic Name Server Negotiation WINS DNS in the LAN If you have set up a DNS or WINS in your LAN enter its IP address Todo Proceed as follows if you have not made this entry already see chapter 8 3 2 page 246 gt Goto P STATIC SETTINGS gt Enter Primary or Secondary Domain Name Server gt Enter Primary or Secondary WINS Press SAVE 228 mmmmm X4000 Users Guide Settings Specific to WAN Partners ES Routing Proceed as follows if you want X4000 to report the name server addresses entered to the WAN partner Server Mode or if other name server addresses other than those in the LAN are to be used for connections to the WAN partner Client Mode e g for dialing in to an Internet Service Provider gt Goto WAN PARTNER EDIT IP ADVANCED SETTINGS Select Dynamic Name Server Negotiation gt Confirm with OK Press SAVE If you do not have a Secondary DNS or WINS server you can enter the IP address of the Primary DNS or WINS server in the Secondary Domain Name Server or Secondary WINS field again This may be necessary for connection to some data communications clients If you do not have a Domain Name Server in y
66. configuration and all changes you set during the operation of X4000 are stored in the working memory RAM The contents of the RAM are lost when X4000 is switched off So if you modify your configuration and want to retain these changes for the next time you start X4000 you have to save the modified configuration to the flash before switching off Exit Save as boot configuration and exit see chapter 7 4 page 186 This file is then saved in the flash as a boot configuration file under the name boot When X4000 is started again this very file the configuration file with the name boot is loaded in the RAM and becomes operative Imagine the flash memory as a directory of configuration files The files in this directory can be copied moved erased and newly filed It is also possible to transfer configuration files between X4000 and a remote host by TFTP In Windows you can use the TFTP server of DIME Tools see BRICKware for Windows You can then for example save a configuration file from X4000 on your local PC The names of the files to be transferred with the TFTP server of DIME Tools may only consist of a maximum of 8 characters and a maximum of 3 characters as extension e g b5104 x4a A TFTP server is part of the system in Unix please read the instructions included in the Software Reference You can perform the various operations with the help of the Setup Tool gt Go to the CONFIGURATION MANAGEMENT menu X4000 U
67. cuokeurng 6a TIPEMEL onoo rpnore va gyd Aere Tov peuparoAnrmrm Avapu o voiypa Kat Aav8aop vr eniokeur THC GUOKEUNC ripokaAe HEYAAO KivOuvo yia Tov xprjot HAekrporn amp ia Zuvior rai n riokeur THC OUOKEUNC va yiverat HOVO oro o pfiis Tou BinTec Nou uri pxet O pBic KOVTA oaa ro pa8aivere ano rov amp priopo Cac Xe KAGE GAAN nepintwon x vgerai k be ikaiopa a ioona anocnputoogov H ouokeun dev enitp netat oe Kapia nepintwon va ka8apiorei ATO Uv evdexouevn sioo o vepoU unopei va npok uyouv onpgavrikol KivOUVOL yta ro xprjotn T X nAekrponAn amp ia kat ooBap a nuig OTH OUOKEUN X4000 User s Guide A E Na un xpnowwonotsite not cupp tiva omouyyapakia kat atxunp n adpa BonOntika u oa ka8apiopoU X4000 User s Guide sssa 433 15 General Safety Precautions in 15 Different Languages 434 Istruzioni generali di sicurezza Nei seguenti paragrafi si trovano elencate le istruzioni generali di sicurezza da osservare rigorosamente nell uso del Router Trasportoe Wi immagazzinaggio Installazionee E azionamento Trasportare ed immagazzinare X4000 soltanto nell imballaggio originale o in altro imballaggio adeguato a garantire protezione da urti e colpi Prima di installare ed usare X4000 fare attenzione alle istruzioni sulle condizioni ambientali cfr Dati tecnici Utilizzare un ripiano stabile e piano Le cariche elettrostatiche possono provocare danni all apparecchio Indossare quindi un pols
68. default route to the ISP and a network route to the head office To define a default route proceed as follows Select Route Type Default route gt Select Network WAN without transit network gt Select Partner Interface e g Golnternet Enter Metric e g 7 X4000 User s Guide ssmma 179 Basic Configuration of Basic Unit with Setup Tool Press SAVE You have returned to IP ROUTING The entries have been saved and the newly entered or modified route is listed The corporate network can consist of several LANs with different network IP addresses and netmasks gt gt subnets If you do not enter the access to such a network as a default route e g because you have already set up your Internet access as a default route then you must make a separate routing entry for each subnet you want to reach in this network oq T 1234567 10 1 2 0 255 2532530 BigBoss Littlelndian Secret Subnet 2 of your Company s Head Office Router of your Company s Head Office Your X4000 T 1234567 10 1 1 0 255 255 255 0 BigBoss Littlelndian Secret Your Local Area Network G Figure 7 7 Network with subnets Subnet 1 of your Company s Head Office Network route To establish a network route e g for a corporate network connection without a default route proceed as follows Select Route Type Network route 180 ssms X4000 Users Guide Configuring WAN Partners Activating NAT
69. den Netzstecker ziehen Durch unbefugtes Offnen und unsachgem Be Reparaturen k nnen erhebliche Gefahren f r den Benutzer entstehen z B Stromschlag Lassen Sie Reparaturen am Ger t nur von einer BinTec autorisierten Servicestelle durchf hren Wo sich die Servicestelle befindet erfahren Sie von Ihrem Handler In allen anderen F llen erl schen jegliche Garantieanspr che Das Ger t darf auf keinen Fall naB gereinigt werden Durch eindringendes Wasser k nnen erhebliche Gefahren f r den Benutzer z B Stromschlag und erhebliche Sch den am Ger t entstehen Niemals Scheuermittel alkalische Reinigungsmittel scharfe oder scheuernde Hilfsmittel benutzen X4000 User s Guide mm m 423 15 General Safety Precautions in 15 Different Languages 424 Kuljetus ja varastointi Asennus ja k ytt notto Yleiset turvallisuusm r ykset Seuraavista kappaleista l yd t turvallisuusm r ykset joita on ehdottomasti noudatettava reittivalitsinta k ytett ess Kuljeta ja varastoi X4000 vain alkuper ispakkauksessaan tai muussa sopivassa pakkauksessa joka suojaa t yt isyilt ja iskuilta Tarkista ennen X4000 laitteen asennusta ja k ytt ett ymp rist olosuhteista annettuja ohjeita kts lukua Tekniset tiedot on noudatettu Aseta laite tukevalle tasaiselle alustalle S hk staattiset varaukset voivat johtaa laitteen vioittumisen Pid siksi ranteen ymp rill maadoitettua ranneketta tai kosketa maadoit
70. display of the BOOTmonitor prompt if you want to use the BOOTmonitor functions If you do not make an entry within four seconds X4000 changes back to normal operation mode The BOOTmonitor makes the following functions available which you select by entering the relevant digit for more detailed information refer to Software Reference E 1 Boot system X4000 loads the compressed boot file from the flash memory to the RAM memory This happens automatically when started E 2 Software update via TFTP X4000 performs a software update via a TFTP server E 3 Software update via XMODEM X4000 performs a software update over a serial interface with XMODEM B6 4 Delete configuration X4000 is reset to the unconfigured ex works state All configuration files are deleted and the BOOTmonitor settings are set to the default values M 5 Default BOOTmonitor parameters You can change the default settings of X4000 s BOOTmonitor e g the baud rate for serial connections X4000 User s Guide Boot Sequence ES M Z If you change the baud rate the preset value is 9600 baud make sure the terminal program used also uses this baud rate If this is not the case you will not be able to establish a serial connection to X4000 oum X4000 User s Guide m m 67 B Hardware Description and Installation 68 ummm X4000 Users Guide 4 Configuration Requirements This chapter tells you how to carry out the following tasks
71. e mail inquiry TCP 110 Network Time Protocol TCP UDP 119 gt NetBIOS Name NBNAME UDP 137 NetBIOS Datagram NBDATA UDP 138 NetBIOS Session NBSESSION TCP 139 Simple Network Management Protocol UDP 161 SNMP Port Lists SNMP Trap Port UDP 162 Syslog Service SYSLOG UDP 514 Network File System NFS UDP 2049 Remote CAPI TCP 2662 Remote TAPI TCP 2663 Table 10 15 Services and port numbers Example A simplified FTP connection is used as an example to illustrate how to use source and destination ports In addition to source and destination IP addresses the IP protocol also uses source and destination port numbers to 340 mmssms X4000 Users Guide Access Security 10 uniquely identify data connections The FTP client creates a number e g xyz which is used as source port As destination port the client uses the number under which the FTP server offers the FTP service e g 21 The FTP server then answers with IP packets that use 21 as source port and xyz as destination port Src IP 192 168 1 1 Src Port xyz Dest IP 10 1 1 2 Dest Port 21 192 168 1 1 e2 X4000D FTP Server Src IP 192 168 1 1 10 1 12 192 168 1 2 2 Src Port xyz Dest IP 10 1 1 2 6 Dest Port 21 192 168 1 3 Network of your Your Local Area Network WAN Partner Figure 10 3 Example FTP connection X4000 User s Guide m m 341 10 Configuration of Security Functions and Firewall You can define rul
72. ej sakkunniga reparationer pa apparaten kan medf ra fara f r anv ndaren t ex elektriska st tar Reparationer far bara utf ras av en av BinTec auktoriserad serviceverkstad Aterf rsaljaren tillhandah ller information om n rmaste serviceverkstad annat fall upph r garantiansvaret att g lla Apparaten f r aldrig v treng ras Vatten som kommer i enheten kan medf ra fara f r anv ndaren t ex elektriska st tar och f rorsaka skador p apparaten Anv nd inget skurpulver inga alkaliska reng ringsmedel anv nd inga vassa resp repande hj lpmedel X4000 User s Guide samen 455 15 General Safety Precautions in 15 Different Languages 456 Ta ma ve Depolama Kurulmas ve al t r lmas Genel g venlik bilgileri t rk e M teakip b l mlerde cihaz n z kullan rken mutlaka dikkat etmeniz gereken genel g venlik bilgilerini bulabilirsiniz X4000 cihaz sadece orjinal ambalaj i inde veya arpmaya ve darbeye kar koruyan uygun ba ka bir ambalajla ta y p depolay n z X4000 cihaz n kurup al t rmadan nce evre ko ullar hakk ndaki bilgileri dikkate al n z bak Teknik Bilgiler Sa lam ve d z bir altl k kullan n z Elektrostatik y klenmeler cihaz n zarar g rmesine neden olabilir Bu y zden el bile inize antistatik bir man et tak n z veya X4000 cihaz n n soketleri ve mod llerine dokunmadan Once toprakl bir y zeye dokununuz Mod lleri yaln z kenarlar nd
73. for 56 kbps analog modems In contrast to older V 34 modems data is sent in digital form to the client when the V 90 standard is used and does not need to be first converted from digital to analog on one side of the modem provider as was the case with V 34 and earlier modems This makes higher transmission rates possible A maximum speed of 56 kbps can be achieved only under optimum conditions Very high bit rate gt Digital Subscriber Line also called VADSL or BDSL The data rate is 1 5to 2 3 Mbps XX upstream and 13 to 52 Mbps downstream over ranges of 300 m to 14 km The main VDSL applications are as for gt gt ADSL but at higher transmission rates and with synchronization over short ranges Van Jacobson Header Compression data compression procedure for IP header compression Virtual Private Network The use of existing structures such as the gt Internet structure for connecting private networks e g SOHO exchange The data can be encrypted between the two endpoints of the VPN to meet increased security requirements Wide Area Network Wide Area Network connections e g over ISDN X 25 WAN interface WAN interfaces connect the local network to the gt gt WAN This is usually done by means of analog or digital telephone lines gt gt switched or leased lines Remote station that is reached over a gt gt WAN e g ISDN The X 21 recommendation defines the physical interface between two network compo
74. from the RJ11 socket on the metal housing the display Caution The plug is locked to the socket make sure you free the plug 46 ummm X4000 Users Guide w o JB Figure 3 8 Removing the display Step3 gt Turn the display unit by approx 40 to the left and remove the display unit to the front away from the metal housing bayonet connection see Figure 3 8 page 47 X4000 Users Guide a 47 Bg Hardware Description and Installation The following components and fixing parts are required for installation in a 19 inch cabinet with the X4000 connections to the front Mounting bracket Bayonet connection for fixing the display unit 2 Fixing holes EN Display cable EMT unit Power supply for external fan unit for 19 inch built in unit only Figure 3 9 Exploded drawing showing the main components and mounting parts for the installation of X4000 in a 19 inch cabinet 48 ummm X4000 Users Guide ww o B Figure 3 10 Screwing the bracket to the fixing holes Step4 gt Using the two brackets and screws supplied with the equipment screw the brackets to the rear fixing holes provided on the side of X4000 see Figure 3 10 page 49 Always use the screws supplied Other screws cannot withstand the mechanical loads or may damage the equipment X4000 Users Guide a 49 B Hardware Description and Installation Figure 3 11 Mounting the display on a fixing bracket Step5 gt
75. g MONITOR IPXCON TCPCON screensaver etc Check if NetBIOS over IPX is used in the LAN Windows for Workgroups NT Win 95 If necessary select no or on LAN only under IPX for NetBIOS Broadcast replication gt Check if NDS Replica Synchronization is active for Netware 4 1 servers and higher Evaluate the syslog messages Level debug and if applicable filter out the IPX packets indicated in the messages as causing unwanted connections to be set up The MIB variable ipxAdmSpxConns shows more connections than are actually active X4000 may not be receiving SPX disconnect messages from the server 9 Enter the command reset router on the console of the respective server All inactive connections between the server and X4000 are cleared 384 msmmmm X4000 Users Guide Typical Errors and Procedure 12 f the disconnect for the client is lost SPX connections could remain until timeout These connections would then be displayed in ipxAdmSpxConns until timeout X4000 User s Guide mm m 385 a Troubleshooting 386 mmmma X4000 Users Guide A 13 Technical Data General product features De ejite Dimensions WxHxDinmm Desktop unit 105 x 260 x 300 19 inch built in unit 220 x 44 x 290 Weight Desktop unit 2 6 kg 19 inch built in unit 2 1 kg Transport weight incl documentation cabling packaging Desktop unit 5 1 kg 19 inch built in unit 4 6 kg Ambient requirements Storage te
76. gt netmask of the partner or partner network You must obviously have this information available M You use an additional ISDN IP address each for X4000 and the WAN partner You thus set up a virtual IP network during the connection a so called transit network You do not need this setting normally only for some special configurations HM You assign the WAN partner a dynamic IP address from a specified IP address pool for the duration of the connection E Get the WAN partner to assign you a dynamic IP address for the duration of the connection X4000 User s Guide Settings Specific to WAN Partners B Partner IP 200 200 200 2 ISDN IP ISDN IP P 200 200 200 1 200 200 200 2 D 9 amp X4000D LAN IP 10 1 1 1 LAN IP 192 168 1 254 Partner IP 200 200 200 1 Your Local Area Network Network of your WAN Partner Figure 8 1 LAN LAN link with transit network X4000 User s Guide sssa 223 B Advanced Configuration of the Basic Unit with the Setup Tool The configuration is made in WAN PARTNER EDIT IP IP Transit Network Defines whether X4000 sets up a transit network to the WAN partner Possible values see Table 8 23 page 225 Local IP Address LAN IP address of X4000 Appears only for the following value of IP Transit Network no You normally do not need to make any entry here Exception You set up several WAN partners use a transit network for one or more WAN partners and no trans
77. gt CAPI gt gt ISDN Login to define the number of connections the connection time and the charges billed If the defined limit is exceeded X4000 ummm X4000 Users Guide Activity Monitoring Syslog messages cannot set up any more connections within the defined period of time This means you can detect configuration errors in good time before your telephone bill gets too big Syslog messages are generated if the number of connections reaches 90 or 100 of the limit and if a connection is prevented by the Credits Based Accounting System because the limit is exceeded The whole account is available again if you switch X4000 off and then switch it on again i e reboot X4000 User s Guide mm m 317 10 Configuration of Security Functions and Firewall The configuration is made in ISDN CREDITS Surveillance Defines whether the Credits Based Accounting System is to be activated for the respective subsystem Possible values off on With on you can define the parameters listed below Measure Time sec Time in seconds for which the limit applies Maximum Number of Number of incoming connections allowed Incoming Connections during the Measure Time sec If you activate this setting with on you can enter the desired value in the line below Maximum Number of Number of outgoing connections allowed Outgoing Connections during the Measure Time sec If you activate this setting with on you can enter
78. gt port numbers match the filter specify Permits the entry of a port number under Specify Port specify range Permits the entry of a range of port numbers under Specify Port priv 0 1023 Port numbers 0 1023 server 5000 32767 Port numbers 5000 32767 clients 1 1024 0 4999 Port numbers 1024 4999 clients 2 32768 65535 Port numbers 32768 65535 unpriv 1024 65535 Port numbers 1024 65535 Table 10 13 Source Port and Destination Port Port numbers The port numbers are distributed as follows 0 0 024 4999 000 D DO D Well known ports The ports are created by gt clients and i e permanently servers dynamically and have no fixed assigned meaning except for special agreements unpriv 1024 65535 clients 1 server clients 2 priv 0 1023 1024 0 4999 5000 32767 32768 65535 Table 10 14 Ranges of port numbers X4000 User s Guide ssmaa 339 10 Configuration of Security Functions and Firewall The following table contains a list of some frequently used port numbers with the services assigned to them File Transfer Protocol gt gt FTP data TCP 20 File Transfer Protocol FTP commands TCP 21 Telnet TCP 23 Simple Mail Transfer Protocol SMTP TCP 25 Domain Name Server gt gt DNS TCP UDP 53 Trivial File Transfer Protocol UDP 69 gt gt TFTP HTTP TCP 80 POPS
79. has the following pin assignment a DTE cable is required for DTE Mode and a DCE cable for DCE Mode Q directio e 101 ChGND ae 4 108 TD B9 104 RD lt 3 3 105 RTS 4 gt 4 106 CTS 5 5 107 DSR 6 6 102 SigGND 7 7 109 DCD 8 8 108 2 DTR 9 20 113 XTC 11 gt 24 114 TxC lt 12 15 115 RxC lt 13 17 VCC 5V p Table 13 10 Pin assignment of 26 pole mini Delta ribbon socket 404 mmmmm X4000 Users Guide Features of Basic Unit E 13 2 5 Display Interface The RJ11 socket for the display plug has the following pin assignment VDD 3 3V Supply Voltage SDA IC Serial Data Figure 13 10 RJ11 socket for display plug with pin assignment X4000 User s Guide mmma 405 E Technical Data 13 3 Features of Expansion and Resource Cards 13 3 1 X4E 2 3BRI WAN Interface Card for ISDN BRI Basic Rate Interface Interfaces 3 x ISDN interfaces BRI S T Operating temperature 0 C to 40 C Relative humidity 20 to 90 6 non condensing in operation 5 to 95 non condensing in storage Extensions Slot for resource card with digital modems Slot for resource card for encryption and compression Table 13 11 Features of BRI expansion card Pin assignment The ISDN BRI interfaces RJ45 sockets have the following pin assignment
80. if no entry is made on the keyboard for 15 minutes seconds auto logout is activated after seconds Entering t 0 deactivates auto logout nslookup nslookup an t lt type gt w lt sec gt r lt ret gt ipaddr name lt server gt Is used to check how a name or an IP address is resolved by X4000 or another name server a displays all the data received n prevents the resolution of the indicated name server address without this option an attempt is made to resolve the address of the name server t lt type gt executes type requests Possible values for type 0 A NS MD MF CNAME SOA MB MG MR NULL WKS PTR HINFO MINFO MX TXT ANY or any decimal number w sec wait sec before sending a new request default value 3 r ret Send a request maximum ret times default value 5 ipaddr IP address to be resolved name name to be resolved server IP address of the name server that is to be asked for default value 127 0 0 1 An attempt is made to have this name server address resolved by the local DNS proxy X4000 User s Guide snsammm 417 14 Important Commands Entering usually provides syntax help The update command can be found in chapter 11 2 page 371 Further SNMP commands can be found in the Software Reference 418 smms X4000 Users Guide BRICKtools for Unix Commands 14 14 2 BRICKtools for Unix Com
81. in Flash gt is overwritten or recreated load FLASH gt MEMORY Loading the configuration file lt Name in Flash gt from flash to memory The settings in lt Name in Flash gt take immediate effect move FLASH gt FLASH Rename configuration file lt Name in Flash gt to lt New Name in Flash gt copy FLASH gt FLASH Copy configuration file lt Name in Flash gt as lt New Name in Flash gt delete FLASH Delete configuration file lt Name in Flash gt put FLASH gt TFTP Transfer configuration file lt Name in Flash gt from flash to TFTP host with the IP address lt TFTP Server IP Address gt lt TFTP File Name gt is then overwritten or recreated on the TFTP host with the contents of lt Name in Flash gt TFTP File Name is saved in ASCII format and can be edited get TFTP gt FLASH Transfer configuration file lt TFTP File Name gt from TFTP host with the IP address lt TFTP Server IP Address to flash Name in Flash is then overwritten and recreated with the contents of lt TFTP File Names As the configuration file is transferred to flash and not to memory the file must then be loaded FLASH gt MEMORY so that the settings can take effect on X4000 state MEMORY TFTP Save all current settings in the memory as TFTP File Name on the TFTP host with the IP address TFTP Server IP Address TFTP File Name is then overwritte
82. kab lerne Brug kun kabler som opfylder specifikationerne i denne h ndbog el ler de originale medfelgede kabler BinTec Communications AG haefter ikke for evt skader eller funktionsbegraensninger ved brug af andre kabler sadanne tilfaelde bortfalder apparatets garanti Overhold henvisningerne i denne h ndbog mht apparatets tilslutning Ledningerne skal tr kkes pa en s dan made at de ikke beskadiges og at de ikke er til fare for omgivelserne fare for at snuble Undlad at tilslutte eller tr kke datatransmissionsledninger ud af apparatet nar det er tordenvejr og undlad at ber re dem X4000 er beregnet til anvendelse i kontormiljo Som multiprotokolrouter etablerer X4000 WAN forbindelser afhaengigt af systemkonfigurationen For at forebygge u nskede afgiftsbetalinger b r du ubetinget overv ge produktet X4000 opfylder de g ldende sikkerhedsbestemmelser for informationsteknisk udstyr til kontorer Bestemmelsesm ssig anvendelse af systemet iht IEC_950 EN_60950 er kun sikret n r metalkabinettet er monteret komplet k ling brandsikker hed radiost jd mpning Omgivelsestemperaturen m ikke overstige 50 C Undg direkte sollys S rg for at genstande f eks klips eller v ske ikke tr nger ind i apparatet elektrisk st d kortslutning S rg for tilstr kkelig k ling X4000 indeholder ingen komponenter som m udskiftes af brugeren eller kontakter jumpere som brugeren skal indstille ummm X400
83. kipin suo ja Ymp rist n l mp tila ei saa nousta yli 50 C een V lt suoraa auringonpaistetta Varo ettei mit n vieraita esineit esim paperiliittimi tai nesteit p se laitteen sis puolelle s hk isku lyhytsulku Huolehdi siit ett laitteen j hdytys on riitt v X4000 ssa ei ole mit rakenneosia jotka t ytyy vaihtaa Laitteessa ei ole my sk n kytkimi tai jumppereita jotka k ytt j n t ytyy s t X4000 User s Guide samme 425 15 General Safety Precautions in 15 Different Languages 426 Puhdistus ja korjaus Keskeyt h t tilanteessa esim s rkynyt kotelo tai k ytt laite nesteen tai vieraiden esineiden joutuminen laitteen sis n virransy tt v litt m sti ja ota yhteytt huoltopalveluun Vain BinTec in valtuuttama huoltokorjaamo saa avata laitteen Verkkopistoke on ehdottomasti vedett v sein st ennen laitteen aukaisemista Asiaton aukaiseminen ja asiantuntemattomat korjaukset voivat aiheuttaa k ytt j lle huomattavia vaaroja esim s hk isku Anna vain BinTec in valtuuttaman huoltokorjaamon korjata laitetta Huoltokorjaamoa koskevia tietoja saat laitemyyj lt si Muissa tapauksissa kaikkinaiset takuuvaatimukset ev t n l miss n tapauksessa puhdista laitetta runsaalla vedell Sen sis n tunkeutunut vesi saattaisi aiheuttaa vakavia vaaroja esim s hk isku k ytt j lle ja vaurioittaa laitetta pahasti l koskaan k yt puhd
84. licenses Om Mask C l OK Key OK OK i Serial number SOL PMID DOE of Cc E OK via OK OK System Name Sa name of Cc zs OK via OK OK Logic version Logie version of c l OK OK OK um Hardware revision Paraware revision of c d OK OK OK Software release Sonware release of c l OK OK OK Interfaces onboard Interfaces onboard C vll OK Figure 5 8 Menus for monitoring the basic unit with navigation bars 104 ssmsms X4000 Users Guide Menu Architecture Credits Based Accounting System Displays the settings for the Credits Based Accounting System see chapter 10 1 3 page 316 Limit selected limit for charges Last cost of last connection Total total costs charged to date Available Licenses Displays the licenses entered in X4000 see chapter 7 1 1 page 121 Serial Number Displays the serial number of X4000 System Name Displays the system name of X4000 see chapter 7 1 2 page 123 Logic Version Displays the version of X4000 s firmware logic Hardware Revision Displays the hardware version of X4000 Software Release Displays the system software version used by X4000 Onboard Interfaces Displays the status of the X4000 hardware interfaces available with the basic unit 5 3 5 Information about X4000 Expansion Card Data for the interfaces on the optional expansion card can only be displayed if the relevant card is installed Pl
85. mod st d og fald og slut det kun til den dertil be regnede RJ11 b sning p X4000 for at undg skader p X4000 og display modulet MH Ved ledningsferingen skal du s rge for at apparatets udluftningsslidser ikke d kkes til og at der ikke skabes hindringer for ventilationen Begr ns ning af ventilationen for X4000 kan medf re skader p apparatet Skader som skyldes manglende ventilation d kkes ikke af garantien E Undlad at bne basisapparatet og foretag ingen manipulationer med netdelen da der ellers kan opst livsfare ved elektrisk st d Fjern ingen af basisapparatets fastg relsesskruer M Hvis apparatet bringes fra kolde omgivelser ind i det rum hvor det skal bruges kan der opst kondensvand b de udvendigt og indvendigt p apparatet Vent indtil apparatet har tilpasset sig temperaturen og er absolut t rt f r du tager det i brug Overhold omgivelsesbetingelserne i Tekniske data X4000 User s Guide samme 465 15 General Safety Precautions in 15 Different Languages Bestemmelsesmeessig 466 anvendelse brug Kontroll r om den lokale netspaending stemmer overens med netdelens maerkespaending Apparatet ma anvendes under felgende betingelser 100 240 VAC 50 60Hz Kontroll r at der er fri adgang til installationens jordede sikkerhedsstikkon takt For at opn fuld afbrydelse fra str mnettet skal netstikket tr kkes ud F lg den r kkef lge der angives i denne h ndbog for tilslutningen af
86. next lt ifcname gt For LAN interfaces trace h23iNxX1 d destination MAC filter gt o s source MAC filter gt 0 0 slot Is used to display and interpret data packets sent and received over ISDN D and B channels or the LAN h hexadecimal output 2 layer 2 output 3 layer 3 output a asynchronous HDLC B channel only F fax B channel only A fax and AT commands B channel only D additional time parameter delta t Output in ASCII text B channel only p PPP B channel only X4000 User s Guide samen 413 14 Important Commands 414 i IP output B channel only N Novell IPX output B channel only x raw dump mode X asynchronous PPP over X 75 B channel only T lt tei gt set TEI filter D channel only c lt cref gt set callref filter D channel only channel O0 D channel or X 21 interface 1 31 Bx channel unit O 1 selects the physical interface for modules with two interfaces e g CM 2BRI slot 1 2 indicates the slot in which the module is installed next only display information for the next B channel opened ifcname name or index of the interface see ifstat page 416 d destination MAC filter set destination MAC address filter LAN only s source MAC filter set source MAC address filter LAN only o combine two or mo
87. o em funcionamento do X4000 colocac o em tenha em conta as indica es relativas as condi es ambientais cf Dados funcionamento t cnicos Utilize uma base consistente e lisa E As cargas electrost ticas podem causar danos nos aparelhos Por conse guinte use um punho de liga o terra volta do pulso ou ent o toque numa superf cie ligada terra antes de mexer nas tomadas ou placas de expans o do X4000 Toque apenas nos bordos das placas de expans o e n o toque nos componentes ou circuitos impressos E Mantenha a slot de expans o n o utilizada fechada com a cobertura cega de modo a que n o possa entrar qualquer objecto no interior do aparelho Se durante o funcionamento houver algum objecto estranho dentro do aparelho existe perigo de choque el ctrico e de curto circuito HM Tenha cuidado para que nenhum objecto pontiagudo danifique a janela do m dulo de display Para evitar danos no X4000 e no m dulo de display proteja o m dulo de display contra embates fortes e quedas e conecte o mesmo tomada RJ11 do X4000 destinada a esse fim E Durante a cablagem tenha aten o para que as ranhuras de ventila o do aparelho nao fiquem tapadas e a ventila o nao seja obstru da A ob struc o da ventilac o do X4000 pode causar danos no aparelho Os danos causados por uma ventilac o insuficiente t m como consequ ncia a perda da garantia E Nao abra o aparelho base nem mexa no equipamento de alimenta o de rede
88. of X4000 X4000 Setup Tool BinTec Communications AG SLOT 3 UNIT 0 SERIAL Configure Serial Interface MyRouter Interface Type X 21 Connector dte Clock mode auto Speed 64000 bps Layer 2 Mode auto Interface Leads disabled SAVE CANCEL Use Space to select 150 mm sm s X4000 Users Guide Configuring WAN Interfaces The menu contains the following fields Interface Type Defines the interface type of the port used Possible values none default value Interface is not used X 21 Use as X 21 V 11 interface V 35 Use as V 35 V 11 interface V 36 Use as V 36 V 11 interface X 21bis Use as X 21bis V 28 interface Connector Defines the pin assignment of the port see chapter 13 2 4 page 393 This setting only affects the pin assignment for the first serial port CM SERIAL SERIAL UNIT 0 a suitable DCE or DTE cable must be used for the second serial port CM SERIAL SERIAL UNIT 1 Possible values Mate default value The pins are assigned as DTE interface This setting is necessary for example if X4000 is connected to a public data network e g Datex P in Germany E ace The pins are assigned as DCE interface This is necessary for using a unit configured as DTE X4000 User s Guide samme 151 Basic Configuration of Basic Unit with Setup Tool Clock Mode Defines which connection partner sends the clock signal for synchronization between transmitter and rece
89. of the User s Guide X4000 User s Guide samen 353 10 Configuration of Security Functions and Firewall 354 MPPE V2 DES and Blowfish 10 3 Line Tapping Security You can use an encryption mechanism to obtain data security for critical PPP connections over connections with critical security provided both connection partners support this mechanism The following functions are possible HM Encryption chapter 10 3 1 page 354 E VPN with extra license chapter 10 3 2 page 357 10 3 14 Encryption X4000 supports encryption of PPP connections to WAN partners The gt gt MPPE Microsoft Point to Point gt gt Encryption version 1 and 2 DES and Blowfish methods are used DES and Blowfish are implemented as BinTec proprietary solutions The MPPE Version 2 encryption protocol the successor to MPPE has been developed by Microsoft and also uses a 40 bit or 56 bit key These are generated on authentication If a larger key length is set in X4000 than in the dial in client the connection is not set up If one connection partner is set to MPPE V1 as encryption protocol MPPE V2 is also accepted on connection setup if the set key length is the same If these proprietary encryption algorithms are used either X4000 can generate a key automatically or you can define an individual key statically in consultation with the connection partner The DES and Blowfish encryption algorithms are only supported if a license for VPN is en
90. or Esc Esc the password change is not saved If the two passwords you entered were not the same the field is reset to the old password and Password doesn t match Try again is displayed in the help line The main menu of the Setup Tool looks like this X4000 Setup Tool BinTec Communications AG MyRouter Licenses System LAN CM 100BT Fast Ethernet Module WAN CM 1BRI ISDN SO Serial WAN CM SERIAL Serial WAN Partner IP IPX PPP ISDN CAPI Configuration Management Monitoring and Debugging Exit X4000 User s Guide Configuration Options The menu structure of the Setup Tool looks like this Licences System External Activity Monitor External Sytem Logging Keepalive Monitoring Password settings Time and Date LAN Fast Ethernet L Advanced Settings WAN ISDN S0 F Advanced Settings Incoming Call Answering Serial WAN Serial F Unit 0 Unit 1 WAN Partner PPP Advanced Settings L Compuserve Login WAN Numbers Routing Static Settings Network Adr Translation Access Lists BOD IP adr pool WAN PPP IP adr pool LAN DHCP SNMP Radius Server OSPF Token Auth Firewall Loc Serv Acc Control IP
91. password for each user corresponding to the entries in X4000 8 1 3 General PPP Settings You must enter the gt PPP settings for each WAN partner e g the settings needed for authentication of connection partners with gt gt CHAP or PAP see chapter 7 3 page 159 If a call is received X4000 then recognizes the calling WAN partner from the calling party number with the aid of gt CLID Calling Line Identification and therefore knows what authentication negotiations it has agreed with this partner The call is accepted if the authentication is correct In some cases it is not possible to identify an incoming call via CLID This is the case for example E ifthe call is made over an analog line the caller dials into your router via a gt gt modem E if the caller suppresses the CLID facility In both cases X4000 receives no calling line number The caller therefore cannot be identified by CLID even if the caller is entered as a WAN partner X4000 does not know which gt gt PPP authentication protocol to use to identify the incoming call In order to answer the call in spite of the identification problem X4000 executes the defined general PPP authentication protocol with the caller This protocol does not refer to a certain WAN partner If the data password partner PPP ID obtained by executing the authentication protocol are the same as the data of an entered WAN partner X4000 accepts the incoming call ummm X
92. procedure for this is also explained gt gt SNMP Simple Network Management Protocol is a gt protocol that defines how you can access the configuration settings All configuration settings are stored in the gt MIB Management Information Base in the form of MIB tables and MIB variables You can access these directly via the SNMP shell The Configuration Manager is a Windows based SNMP manager provided by BinTec Communications AG You can use its interface based on Windows Explorer to access all MIB tables and variables of X4000 You can also use other SNMP managers such as SNM HP Open View or Transview to access and modify the MIB tables and variables However more detailed knowledge of the structure and interrelations of the tables and subsystems of X4000 would be a prerequisite for handling SNMP shell commands and SNMP managers this method is therefore suitable for experienced users Handling MIB tables and MIB variables is not described in this manual You can find this information in the Software Reference and MIB Reference 4 3 2 Using the Setup Tool You can call up the Setup Tool once you have logged in to X4000 Type setup after the input prompt and press Return The main menu of the Setup Tool appears X4000 User s Guide m m 79 4 Configuration Requirements Configuration Window 80 Menu Line Help Line Menu layout lt Press lt Crtl n gt lt Ctrl p gt to scroll through menu items lt Return g
93. request only if the status of the connection to the WAN partner is up active or dormant idle In the case of dormant X4000 only answers the ARP request the connection is not set up until someone actually wants to use the route on up only X4000 answers an ARP request only if the status of the connection to the WAN partner is up active i e a connection already exists to the WAN partner Table 8 33 Proxy Arp Proxy Arp in CM 100BT FAST ETHERNET ADVANCED SETTINGS contains the following selection options off Disables Proxy ARP via the LAN interface on Enables Proxy ARP via the LAN interface Table 8 34 Proxy Arp X4000 User s Guide sssas 235 rn Advanced Configuration of the Basic Unit with the Setup Tool Todo Proceed as follows gt Goto WAN PARTNER EDIT IP ADVANCED SETTINGS Select Proxy Arp Press SAVE Press SAVE Go to CM 100BT Fast ETHERNET ADVANCED SETTINGS Select Proxy Arp Press SAVE VV VV YN NN Press SAVE 8 2 11 Keepalive Monitoring LAN LAN connection f you have connected two or more LANs over a dialup connection e g 236 between the LAN of the head office and the LAN of a branch office as in Figure 8 8 page 237 a central server is frequently located in the LAN at the head office If this central server is configured such that it regularly sets up WAN connections to X4000 in the LAN of the branch office e g for updating data the
94. socket DCE have the following pin assignment 101 PG 4 PG 101 102 SG 8 SG 102 103 T 9 gt R 104 103 T 2 gt f R 104 104 R lt 11 T 103 104 R lt 4 T 103 105 C 10 gt f l 106 105 C 3 gt fl 106 106 l lt 12 C 105 106 l lt 5 C 105 115 S lt 13 S 114 115 S lt 6 S 114 Table 13 4 Pin assignment of DB 15 plug for X 21 ISO 4903 X4000 User s Guide samme 395 E Technical Data M34 Plug for V 35 An M34 plug to ISO 2593 is normally used for a V 35 interface Figure 13 5 M34 plug The M34 plug has the following pin assignment 101 ChGND A ChGND 101 102 SigGND B SigGND 102 103 TDA P gt RDA 104 103 TDB S gt RDB 104 104 RDB lt R TDB 103 104 RDA lt T TDA 103 105 RTS C gt CTS 106 106 CTS lt D RTS 105 115 RCA lt V TCA 114 115 RCB lt X TCB 114 108 2 DTR H gt DSR 107 109 DCD lt F DCD 109 107 DSR lt E DTR 108 2 114 TCB lt Y TCB 114 114 TCA lt AA TCA 114 Table 13 5 Pin assignment of M34 plug for V 35 ISO 2593 396 mmsss X4000 Users Guide Features of Basic Unit KB DB 37 Plug for V 36 A DB 37 plug to ISO 4902 is normally used for a V 36 interface Figure 13 6 DB 37 plug X4000 Users Guide samma 397 E Technical Data The DB 37 plug h
95. tcp you can define a filter based on the status of the TCP connection Possible values E established All TCP packets that would not open any new connection on routing over X4000 match the filter E any All TCP packets match the filter Source Address Source IP address of the data packets that matches the filter Source Mask Source Netmask The combination of Source Address and Source Mask describes a range of IP addresses that match the filter Source Port Source port number or range of source port numbers that matches the filter X4000 User s Guide mm m 337 10 Configuration of Security Functions and Firewall Specify Port If Source Port or Destination Port specify or specify range Enter port numbers or range of port numbers Destination Address Destination IP address of the data packets that matches the filter Destination Mask Destination Netmask The combination of Destination Address and Destination Mask describes a range of IP addresses that match the filter Destination Port Destination port number or range of destination port numbers that matches the filter Type of Service TOS Type of Service TOS Mask Mask for Type of Service Table 10 12 IP Access Lists FILTER 338 mmmmma X4000 Users Guide Access Security 10 The fields Source Port and Destination Port offer the following selection options any All gt
96. the desired value in the line below Maximum Charge Maximum charges allowed amount units during the Measure Time sec If you activate this setting with on you can enter the desired value in the line below Maximum Time for Maximum time in seconds allowed for incoming Incoming Connections connections during the Measure Time sec sec If you activate this setting with on you can enter the desired value in the line below 318 m mmmma X4000 Users Guide Activity Monitoring To do am Maximum Time for Maximum time in seconds allowed for outgoing Outgoing Connections connections during the Measure Time sec sec If you activate this setting with on you can enter the desired value in the line below Maximum Number of Maximum number of incoming connections Current Incoming allowed at any one time Connections If you activate this setting with on you can enter the desired value in the line below Maximum Number of Maximum number of outgoing connections Current Outgoing allowed at any one time Connections If you activate this setting with on you can enter the desired value in the line below Table 10 5 ISDN CREDITS Proceed as follows gt gt Go to ISDN CREDITS Select Subsystem and confirm with Return Select Surveillance on if you want to use the Credits Based Accounting System for the selected Subsystem Enter Measure Time sec e g 86400 2
97. the local services and resources to known computers or networks In particular you should only allow access via CAPI SNMP HTTP trace and telnet to known computers E Are configuration files saved by TFTP kept in a safe place Have you protected all PPP accesses with a password E ifapplicable have you activated Network Address Translation NAT for the connection to the Internet Service Provider ISP See chapter 10 2 7 page 331 E Have you limited the IP data traffic at critical interfaces if necessary with the aid of filters and prevented IP address spoofing You should pay special attention to the interfaces you have not protected with NAT See chapter 10 2 8 page 335 E Have you restricted remote maintenance access via ISDN Login Have you made an entry under CM1BRI ISDN SO INCOMING CALL ANSWERING See Incoming call answering page 141 You should also observe the following additional points E Do you use the Microsoft callback procedure for PPP connections Please refer to the information in chapter 10 2 4 page 327 E Do you use an encryption protocol for line tapping security on connections with critical security See chapter 10 3 1 page 354 E Do you use personal authentication on connections with critical security X4000 User s Guide Checklist 10 HM Do you allow the influence of routing protocols e g RIP only on trustworthy networks See chapter 8 2 8 page 229 Bi Do you check what computers hav
98. to the manufacturer gt gt SNMP is based on MIB Man Machine Interface X4000 User s Guide Glossary Modem MPPC MPPE MSN Multiprotocol router NAT NetBIOS Netmask Network address Is a convenient user guide with LC display and input keys for the user to navigate the basic functions of X4000 Modulator Demodulator An electronic device used to convert digital signals to analog tone signals and vice versa so that data can be transmitted in an analog medium Microsoft Point to Point Compression data compression procedure for Microsoft Point to Point Encryption Data encryption process Multiple Subscriber Number Multiple number for an ISDN BRI in Euro ISDN The MSN is the extension number that permits a terminal to be addressed specifically on the gt gt Sy bus in Euro ISDN An MSN has up to eight digits e g 49 911 7654321 where 7654321 corresponds to the MSN Usually three such MSNs are assigned to each ISDN BRI point to multipoint connection in Germany A gt gt router that can route several protocols e g gt gt IP gt gt IPX etc Network Address Translation Used as a security mechanism in X4000 Using NAT conceals your complete network to the outside world The IP addresses of all devices in your own network remain confidential only one IP address is made known for connections to the outside Network Basic Input Output System A programming interface that activates network o
99. tries to reach a server in a remote network over a PPP connection he must wait a long time and the connection is possibly terminated In some cases the local router erroneously tells the client that a server can be reached gt Check if the server has crashed and that the aging interval has not yet expired If necessary change the setting of Send RIP SAP Updates under WAN PARTNER EDIT IPX gt Check if the server and the router in the remote network are simultaneously inactive e g because of a power cut Briefly set the WAN interface of the corresponding WAN partner with the command ifconfig to down and X4000 User s Guide samen 383 12 Troubleshooting then back to dialup in order to delete the routes and services learned by the WAN partner can t change to a network drive on the client station The file server may be invisible to the client Proceed as described under A Server exists in a remote LAN Check if all the licenses available on the server are in use ISDN connections are constantly reconnected It is not only RIP SAP packets that cause ISDN connections to be set up gt Check if there is an entry in the MIB table ipxDenyTable that is preventing Novell serialization packets from being sent over the dialup connection gt Check under IPX if you have activated enable IPX spoofing and enable SPX spoofing with yes Check if any RCONSOLE is running with a constantly changing screen e
100. uitbreidingskaarten van X4000 aan raakt Raak de uitbreidingskaarten enkel aan de randen aan en neem geen componenten of conductoren vast E De uitbreidingsslots die niet gebruikt worden met de blinde afdekking ges loten houden zodat er geen voorwerpen in het inwendige deel van het toe stel terecht kunnen komen Als er zich tijdens het gebruik vreemde voor werpen in het toestel bevinden dan bestaat er gevaar voor stroomstoten en kortsluiting E Zorg ervoor dat het displayvenster van de displaymodule niet door scherpe voorwerpen beschadigd wordt Beveilig de displaymodule tegen het stoten en vallen en sluit de module enkel aan de daarvoor bestemde RJ11 bus van X4000 aan om schade aan de X4000 en de displaymodule te vermij den E Zorg er bij de bedrading voor dat de ventilatie openingen van het toestel niet afgedekt worden en de ventilatie niet gehinderd wordt Door het hinde ren van de ventilatie van de X4000 kan het toestel beschadigd worden We kunnen geen garantie geven voor schade die veroorzaakt werd door een gebrekkige ventilatie E Het basistoestel nooit openen en nooit manipuleren aan het netdeel omdat er anders gevaar voor stroomstoten bestaat Geen schroeven van de be vestiging van het basistoestel verwijderen X4000 User s Guide mm m 437 15 General Safety Precautions in 15 Different Languages 438 Doelmatig gebruik Bl bedrijf Als het toestel vanuit een koude omgeving in de bedrijfsruimte gebracht wordt kan
101. value of this field is dependent on Direction in the submenu WAN NUMBERS and cannot be set here Table 7 13 WAN PARTNER ADD X4000 User s Guide ssss 163 Basic Configuration of Basic Unit with Setup Tool The following table illustrates which encapsulations support procedures for data compression PPP Async PPP over X 75 Async PPP over X 75 T 70 BTX Multi Protocol LAPB Framing X X DX DX Xx Multi Protocol HDLC Framing X KI XxX XxX X Xx HDLC Framing IP only X LAPB Framing IP only Table 7 14 Encapsulation and compression Todo Make the following entries gt Enter Partner Name e g Littleindian Select Encapsulation e g PPP Select Compression e g none if applicable Select Encryption e g none if applicable Go to WAN PARTNER ADD WAN NUMBERS VV VY Entering extension numbers X4000 Setup Tool BinTec Communications AG WAN ADD WAN Numbers WAN Numbers BigBoss MyRouter WAN Numbers for this partner WAN Number Direction 0911987654321 outgoing ADD DELETE EXIT Press lt Ctrl n gt lt Ctrl p gt toscroll lt Space gt tag untag DELETE lt Return gt to edit 164 m mmmm X4000 Users Guide Configuring WAN Partners This is where the currently entered extensions of the WAN partners are listed To make an entry in the list proceed as follows Use ADD to add a new entry or select an existing entry
102. you carry out a software update see chapter 11 2 page 371 you should deactivate auto logout as follows Enter t 0 in the SNMP shell You can create additional user accounts with the aid of SNMP commands see the Software Reference A certain password and a certain action can be assigned to a user 10 2 2 Checking the Calling Party Number X4000 uses Calling Line Identification gt gt CLID to check the calling party number of an incoming call You can also determine whether calling party numbers have been modified by the calling parties With some connections it is possible that another number e g 5678 is displayed at the called party s terminal instead of the calling party s own extension number e g 1234 X4000 can detect this from the ummm X4000 Users Guide Access Security Callback screening indicator in the setup message of the ISDN gt gt D channel The screening indicator has four possible values E user The calling party number indicated originates from the far end and has not been checked by the network E user verified The calling party number has been checked by the exchange and is correct E user failed The calling party number has been checked by the exchange and is incorrect E network The calling party number indicated originates directly from the exchange normal case If you want X4000 to check the screen indicator for incoming calls you must enter one of the values stated in the follo
103. your desktop unit go to chapter 3 3 page 59 3 1 2 19 Inch Built In Unit Installing ina BinTec offers X4000 as a 19 inch built in unit for installation in a 19 inch 19 inch cabinet cabinet How to install your 19 inch unit in the 19 inch cabinet is described below X4000 is flexible and can be installed as follows BP with its front panel towards the front and the connections towards the back in your 19 inch cabinet cf Installation with Front Panel Towards the Front page 41 and Figure 3 6 page 44 E with the connections towards the front in your 19 inch cabinet In this case the display can be changed over so that it can be seen from the front cf Installation with Connections Towards the Front and Changing Over the Display page 45 Figure 3 3 19 inch built in unit 40 ummm X4000 Users Guide Basic Unit Installation with Front Panel Towards the Front Caution It is not necessary to open the housing for connecting or operating or for installing or removing the expansion card If the housing is opened this tears the guarantee label on X4000 which invalidates the guarantee 9 Never open the housing Danger Live components are exposed when the equipment is open There is a risk of electric shock gt Never open the housing X4000 User s Guide ssmnuz 41 B Hardware Description and Installation The following components and fixing parts are required for installation in a 19 inc
104. 0 Mbps 9 3 LAN Interface Card for 10 100 Mbps By installing a LAN expansion card you can equip your X4000 with two additional LAN interfaces You can equip the LAN expansion card with an optional resource card for encryption and compression see chapter 9 5 page 306 9 3 1 Configuration with the Setup Tool The additional interfaces are shown in the Setup Tool main menu under Module as follows X4000 Setup Tool BinTec Communications AG MyRouter Licenses WAN Partner Exit LAN CM 100BT Fast Ethernet WAN CM 1BRI ISDN SO Serial WAN CM SERIAL Serial IP IPX PPP Configuration Management Monitoring and Debugging Module X4E 100BT FastEthernet You can configure the interfaces in the following menus E X4E 100BT FAST ETHERNET UNIT Ofor the first additional LAN interface E X4E 100BT FAST ETHERNET UNIT 1 for the second additional LAN interface X4000 User s Guide mm m 287 9 Configuration of Expansion and Resource Cards with the Setup Tool Todo Proceed as follows to configure the LAN interface s of the expansion card gt Goto X4E 100BT FAST ETHERNET UNIT 0 for the first interface This menu offers the same options as CM 100BT FAST ETHERNET for the LAN interface of the basic unit For a detailed description see chapter 7 2 1 page 137 gt Enter Local IP Number e g 192 168 1 250 Y Enter Local Netmask e g 255 255 255 0 f applicable enter Seco
105. 0 Users Guide Reng ring og reparation Afbryd straks str mforsyningen og kontakt serviceafdelingen i n dstilf lde f eks beskadiget kabinet eller betjeningselement indtraengning af vaeske eller fremmede genstande Apparatet ma kun bnes af et BinTec autoriseret servicevaerksted Tr k altid netstikket ud for apparatet bnes Uautoriseret abning og ukorrekt udferte reparationer kan medfere betydelige farer for brugeren f eks elektrisk stod Lad kun et autoriseret BinTEC servicevaerksted udfere reparationer pa apparatet Din forhandler kan oplyse dig servicev rkstedets adresse alle andre tilf lde bortfalder enhver garanti Apparatet m under ingen omst ndigheder reng res med v ske Indtr ngende vand kan uds tte brugeren for alvorlige farer f eks elektrisk st d og for rsage alvorlige skader p apparatet Benyt aldrig skuremidler alkaliske reng ringsmidler skrappe eller skurende hj lpemidler X4000 User s Guide mm m 467 E General Safety Precautions in 15 Different Languages 468 mmmmm X4000 Users Guide Glossary 100Base T 10Base T 1TR6 Access list Accounting ADSL ARP Asynchronous transmission B channel BOD Twisted pair connection Fast Ethernet Network connection for 100 Mbps networks Twisted pair connection Network connection for 10 Mbps networks with gt RJ45 connector D channel protocol used in the German ISDN Today the more common protocol is the gt gt
106. 0 auto on 14400 31200 40000 auto auto Profile 5 V 32bis auto on 4800 14400 14400 auto auto Profile 6 V 32 auto on 4800 9600 9600 auto auto Profile 7 V 23 auto on 300 1200 1200 auto auto Profile 8 V 22bis auto on 300 2400 2400 auto auto Table 9 11 Standard set of modem profiles X4000 User s Guide samme 305 9 Configuration of Expansion and Resource Cards with the Setup Tool 9 5 Resource Card for Encryption and Compression The ISDN PRI or G 703 expansion card is equipped as standard with hardware support for encryption and compression The ISDN BRI expansion card and the LAN expansion card can be optionally equipped with an appropriate resource card A resource card for encryption and compression provides hardware support for STAC compression and symmetrical encryption processes DES 3DES CAST Twofish Blowfish This enables the available bandwidth to be fully utilized and costs cut without affecting the performance of X4000 Uu If you are using an expansion card with resource card s in the X4000 built in unit BinTec Communications AG recommends that you use the fan unit obtainable as optional equipment OC Ds 9 5 1 Configuration with the Setup Tool STAC compression and encryption are configured in the usual way in the Setup Tool menu WAN PARTNER EDIT see chapter 8 2 9 page 232 and chapter 10 3 1 page 354 306 m mmmma X4000 Users Guide 10 Configuration of Security Functi
107. 0 s CAPI applications This makes sure that only authorized users can receive incoming calls and make outgoing calls via CAPI CONFIGURATION Here you can administrate X4000 s configuration files You can save them MANAGEMENT either locally on X4000 or on your PC for example MONITORING AND Includes submenus that enable you to locate problems in your network and DEBUGGING monitor activities e g at X4000 s WAN interface EXIT Quit the Setup Tool with Exit You can save the configuration file to the flash memory with Exit Save as boot configuration and exit this file is loaded after X4000 is restarted If you select Exit Exit without saving all the settings made since X4000 was last started are lost Table 4 5 Setup Tool menus 90 ummm X4000 Users Guide Procedure for Initial Configuration LE 4 4 Procedure for Initial Configuration We recommend the following procedure for initial configuration of X4000 Carry out the first configuration steps using the MMI see chapter 5 page 93 X4000 should not yet be connected to the LAN for this work only the power cord must be connected setthe desired display language enter the IP address and netmask Connect X4000 as explained in chapter 3 3 page 59 Create a basic configuration using either the Configuration Wizard see chapter 6 page 109 or Setup Tool see chapter 7 page 119 You can then carry out the following C
108. 00 passwords the access passwords for the user names admin read and write the HTTP password the RADIUS password the PPP password the provider password and the CAPI user passwords Any character may be used for entering a password Passwords are only displayed as asterisks even during password changes The number of asterisks is the same as the number of characters in the password To start the X4000 Setup Tool in a mode in which the passwords are displayed in plain language and can be changed once by editing you must enter the command setup p This option only exists if you have logged in on X4000 under the user name admi n To change a password proceed as follows In the password field the Backspace key always deletes the complete entry and not just one character 9 Select the password field and enter the new password The field changes to the change mode and the message Change Password appears in the help line gt Now press Return Tabulator or a Cursor key to confirm The field changes to the confirm mode and Confirm Password is displayed in the help line X4000 User s Guide m m 85 4 Configuration Requirements 86 Menu structure 9 Now enter the new password again and confirm by pressing Return Tabulator or a Cursor key If you have entered the repeat password correctly the password is changed The new password is saved on leaving the menu with the SAVE button If you leave the menu by pressing CANCEL
109. 00 before you have entered an IP address and netmask To connect X4000 to your computer over the serial interface connect the serial interface on the basic unit of X4000 to the serial interface of your computer If you are using a Windows PC you will need a terminal program e g HyperTerminal for the serial connection How to install this assistant and BRICKware for Windows is described in chapter 6 2 page 112 9 Click the Windows Start button and then Programs BRICKware BRICK at COM1 or BRICK at COM2 if you use the COM port of your PO to start HyperTerminal Press Return at least once after the HyperTerminal window opens A window with the login prompt appears You are now in the SNMP shell of X4000 gt Continue with chapter 4 2 page 76 X4000 User s Guide m m 71 4 Configuration Requirements 72 ML If the login prompt does not appear after pressing Return several times the connection to X4000 has not been set up successfully Check the COM1 or COM settings on your PC gt Click File Properties Click Configure in the Connect to tab The following settings are necessary Bits per second 9600 Data bits 8 Parity none Stop bits 1 Flow control none gt Enter the values and click OK Set in the Settings tab Emulation VT100 gt Click OK The changes to the terminal program settings do not take effect until you disconnect the connection to X4000 and set up the
110. 000 Tillverkaren vertar inget garantiansvar f r skador som uppst r p g a bristf llig ventilation E ppna inte basenheten utf r inga som helst f r ndringar p natdelen risk f r str mst tar livsfara Tag inte bort n gra montageskruvar fr n basenheten E Om enheten flyttas fran en kall till en varm omgivning kan det bildas kondensvatten p och i apparaten Tag apparaten i drift f rst n r den har n tt rumstemperatur och har torkat helt Beakta uppgifterna ver omgivningsf rh llanden i Tekniska data X4000 User s Guide mm m 453 15 General Safety Precautions in 15 Different Languages 454 ndam lsenlig anvandning drift Kontrollera att sp nningen pa plats verensst mmer med n tdelens markspanning Under f ljande villkor far apparaten anvandas 100 240 VAC 50 60Hz S kerst ll att det jordade v gguttaget alltid ar fritt tillg ngligt F r separering fr n n tet m ste n tkontakten dras ut Utf r kabeldragningen i den ordningsf ljd som anges i handboken Anv nd endast medlevererade originalkablar eller kablar som verensst mmer med specifikationerna i denna handbok BinTec Communications AG p tar sig inget ansvar f r eventuella skador eller brister p apparaten om den anv nds tilsammans med andra kablar detta fall g ller inte garantin l ngre Beakta anvisningarna i handboken vid anslutning av apparaten Drag kablarna s att de inte kan utg ra n gon fara de f r inte lig
111. 123 99 are connected through to the ISDN Login service 298 mmmsmm X4000 Users Guide Resource Card with Digital Modems 9 Configuration with the Setup Tool If X4000 is equipped with a resource card with digital modems the menu MODEM appears in the Setup Tool main menu X4000 Setup Tool BinTec Communications AG MyRouter Licenses System LAN CM 100BT Fast Ethernet Module X4E 3BRI ISDN SO WAN CM 1BRI ISDN S0 Serial WAN CM SERIAL Serial WAN Partner IP IPX PPP MODEM ISDN CAPI Configuration Management Monitoring and Debugging Exit The modem profiles whose settings are used by the digital modems in X4000 are defined in menu MODEM General procedure for the configuration of dial in connections 1 First define the settings for modem profile 1 in MODEM PROFILE CONFIGURATION Define other modem profiles 2 8 as necessary in MODEM PROFILE CONFIGURATION Use the settings for Incoming Call Answering to control the use of the modem profiles according to the dial in connection partner e g in X4E 3BRI ISDN SO UNIT O INCOMING CALL ANSWERING Configure a WAN partner entry for each dial in user in WAN PARTNER X4000 User s Guide mm m 299 Bag Configuration of Expansion and Resource Cards with the Setup Tool The menus MODEM PROFILE CONFIGURATION PROFILE 1 8 contain the following fields Name Profile 1 8 is displayed Description Freely selectable descriptio
112. 15 General Safety Precautions in 15 Different Languages 442 Rengj ring og reparasjon n dstilfeller f eks skadet hus eller betjenings elementer n r v ske eller fremmedlegemer er kommet inn m du straks bryte str mforsyningen og tilkalle service Apparatet skal kun pnes av et BinTec autorisert serviceverksted Trekk ut nettst pselet f r apparatet pnes Ved uautorisert pning og usakkyndige reparasjoner kan det oppst alvorlige risikoer for brukeren f eks fare for elektrisk st t Se til at reparasjoner p apparatet kun utf res av et BinTec autorisert serviceverksted Din forhandler kan fortelle deg hvor n rmeste serviceverksted er alle andre tilfeller tapes garantien Apparatet m under ingen omstendighet rengj res med vann Dersom vann trenger inn kan det oppst alvorlige risikoer for brukeren f eks elektrisk st t og alvorlige skader p apparatet Bruk aldri skuremidler alkaliske rengj ringsmidler skarpe eller skurende hjelpemidler ummm X4000 Users Guide Considerac es gen ricas em mat ria de seguranca em portugu s Nos par grafos que se seguem encontra considera es em mat ria de seguranca que ter de respeitar estritamente ao lidar com o Router Transportee BI Transporte e armazene o X4000 apenas na embalagem original ou noutra armazenamento adequada para o efeito que o proteja contra embates fortes e pancadas Instalac o e Bl Antes de proceder instala o e coloca
113. 3 2 3 ISDN BRI Interface 13 2 4 Serial WAN Interfaces 13 2 5 Display Interface 13 3 Features of Expansion and Resource Cards 13 3 1 X4E 2 3BRI WAN Interface Card for ISDN BRI Basic Rate Interface 13 3 2 X4E 1 2PRI WAN Interface Card for ISDN PRI Primary Rate Interface and or G 703 13 3 3 X4E 2FE LAN Interface Card for 10 100 Mbps 13 3 4 XTR S M L Resource Cards with Digital Modems 13 3 5 XTR ENC Resource Card for Encryption and Compression 14 Important Commands 14 1 SNMP Shell Commands 14 2 BRICKtools for Unix Commands 15 General Safety Precautions in 15 Different Languages Glossary Index Document 71000L Version1 3 X4000 User s Guide m m 387 388 389 390 392 393 405 406 406 407 408 409 411 412 419 421 469 487 497 13 E Table of Contents 14 ummm X4000 Users Guide E g 1 Welcome Congratulations on deciding to buy the X4000 extendible multiprotocol router from the workgroup access series of BinTec Communications AG an efficient and future oriented router solution for use in small and medium sized firms Figure 1 1 X4000 the workgroup access router for present and future applications X4000 can provide various applications with only a basic unit Router for leased lines with ISDN backup Central fax gateway for up to 30 connections Router for analog and digital connections VPN solution with data encryption and ISDN backup Remote access server for
114. 4 hours Activate Maximum Number of Incoming Connections if applicable and enter the desired value Activate Maximum Number of Outgoing Connections if applicable and enter the desired value Activate Maximum Charge if applicable and enter the desired value Activate Maximum Time for Incoming Connections sec if applicable and enter the desired value Activate Maximum Time for Outgoing Connections sec if applicable and enter the desired value Activate Maximum Number of Current Incoming Connections if applicable and enter the desired value X4000 User s Guide samen 319 10 Configuration of Security Functions and Firewall 320 gt Activate Maximum Number of Current Outgoing Connections if applicable and enter the desired value Press SAVE 10 1 4 HTTP Status Page Every BinTec router is equipped with an internal home page the so called HTTP status page You can use this together with an Internet browser e g Netscape Navigator Internet Explorer to display the status of X4000 This enables all users of the X4000 LAN to take a look at the status of the router provided they know the password for the user name nttp Please note HTTP pages are usually stored in the cache memory of the browser This means they can possibly be read by other users at the same workspace and may also be visible at proxy gt gt servers involved Enter the URL nttp system name in your browser You can also enter
115. 4000 Users Guide General WAN Settings B The general PPP settings are configured in PPP Authentication Protocol Defines the PPP authentication protocol offered to the caller first Possible values E PAP PAP only CHAP CHAP only CHAP PAP first CHAP then PAP MS CHAP MS CHAP only CHAP PAP MS CHAP first CHAP if denied then the protocol required by the caller E MS CHAP V2 MS CHAP version 2 only E none no PPP authentication Radius Server Authentication Settings for RADIUS server authentication For RADIUS see Extended Features Reference PPP Link Quality Monitoring Defines whether Link Quality Monitoring is executed for PPP connections Possible values E no is not executed E yes the connection statistics are stored in the gt gt MIB table biboPPPLQMTable PPPoE Ethernet Interface Defines the interface used by PPP over Ethernet for using an ADSL connection see chapter 7 2 3 page 155 Table 8 6 PPP Todo Proceed as follows to define the general PPP settings gt Go to PPP gt Select Authentication Protocol e g CHAP PAP MS CHAP X4000 User s Guide samme 195 B Advanced Configuration of the Basic Unit with the Setup Tool gt Select Link Quality Monitoring e g no Press SAVE 196 ssms X4000 Users Guide General WAN Settings B 8 1 4 X 31 TEI The menu CM 1BRI ISDN SO ADVANCED SETTINGS contains settings for X 31 TEI
116. 6 5 4 Useful Short Cuts 107 5 4 1 Defining Default Screen 107 5 4 2 Saving the Configuration 107 5 4 3 Restarting X4000 108 6 Fast Configuration with the Configuration Wizard Basic Unit 109 6 1 In Advance of Configuration 110 6 2 Installing BRICKware 112 6 3 Basic X4000 Configuration with the Configuration Wizard 113 6 4 Configuring a PC 115 6 5 Testing your Configuration 117 7 Basic Configuration of Basic Unit with Setup Tool 119 7 1 Basic Router Settings 120 7 1 1 Entering License s 121 7 1 2 Entering System Data 123 7 1 3 Configuring the LAN Interface 126 7 1 4 Configuring X4000 as DHCP Server 129 7 1 5 Setting Filters 132 7 1 6 Where do we go from here 136 7 2 Configuring WAN Interfaces 137 7 2 1 Configuring the ISDN BRI Interface 137 7 2 2 Configuring Serial Interfaces 148 7 2 3 Configuring the LAN Interface for Using ADSL PPP over Ethernet 155 7 3 Configuring WAN Partners 159 7 3 1 Basic Procedure 159 7 3 2 Examples 182 7 4 Saving the Configuration File 186 X4000 User s Guide m m 9 Em Table of Contents Advanced Configuration of the Basic Unit with the Setup Tool 187 10 8 1 8 1 1 8 1 2 8 1 3 8 1 4 8 2 8 2 1 8 2 2 8 2 3 8 2 4 8 2 5 8 2 6 8 2 7 8 2 8 8 2 9 8 2 1 8 2 1 8 3 8 3 1 8 3 2 8 3 3 8 3 4 8 4 8 4 1 8 4 2 8 4 3 8 5 8 6 General WAN Settings Dynamic IP Address Server CAPI User Concept General PPP Settings X 31 TEI Settings Specific to WAN Partners Delay after Connecti
117. Al instalar los cables respete el orden descrito en el manual Utilice Unica mente cables que cumplan las especificaciones expuestas en este manual o que hayan venido incluidos en el volumen de suministro Si utiliza otros cables BinTec Communications AG no se har responsable en el caso de que se produzcan dafios o una merma en el funcionamiento En estos ca sos la garant a pierde su validez Al conectar el aparato respete las indicaciones dadas en el manual Coloque los cables de manera que no constituyan un peligro tropezones y no puedan ser deteriorados Durante una tormenta no enchufe ni desenchufe los conductos de transmisi n de datos ni los toque X4000 est concebido para ser utilizado en oficinas Como router multiprotocolo X4000 establece conexiones WAN dependiendo de la configuraci n del sistema Para evitar que se produzcan gastos de conexiones indeseadas es absolutamente necesario vigilar el producto X4000 corresponde a las disposiciones de seguridad pertinentes para equipos inform ticos utilizados en oficinas y despachos El servicio correspondiente al destino seg n IEC 950 EN 60950 del sistema est s lo asegurado al estar montada completamente la caja de chapa refrigeraci n protecci n contra incendios antiparasitaje X4000 User s Guide samme 451 15 General Safety Precautions in 15 Different Languages 452 Limpiezay BN reparacion La temperatura ambiente no debe ser superior a los 50 C Evi
118. C The entry disappears from the list of dynamic entries and is listed as a static entry under IP DNS STATIC HOSTS How to obtain a list of static parameters gt Goto IP DNS GLOBAL STATISTICS Here you will find some statistics for DNS Proxy X4000 User s Guide Basic IP Settings B What is a gt gt port oqdED 8 3 3 Port Numbers X4000 has a number of services or applications e g HTTP gt gt telnet To be able to reach several services on the same host and as it were to enter an exact destination for the IP packet within the host a port is also entered in addition to the IP address for a connection to X4000 This addresses the relevant application Ports are only used in the TCP and UDP protocols X4000 forwards incoming 9 data packets to the port with the number associated with the desired application This addresses the relevant X4000 application and the incoming data can be processed You can define important port numbers in IP STATIC SETTINGS As the settings are normally correct you should only make changes here if necessary Remote CAPI Server Port number for gt gt Remote CAPI TCP Port connections 2662 defined by IANA www iana com Remote TRACE Server Port number for TRACE Requests Default TCP Port value 7000 RIP UDP Port Port number for gt gt RIP Routing Information Protocol Default value 520 The RIP can be disabled with RIP UDP Port 0 HTTP TCP Por
119. C Avoid exposure to direct sunlight ummm X4000 Users Guide Cleaning and repair Make sure no foreign objects e g paper clips or liquids get into the equipment risk of electric shock short circuit Make sure the equipment is sufficiently cooled X4000 contains no components for the user to replace or any switches or jumpers that need to be set by the user In an emergency e g damaged housing or operating element entry of liquid or foreign bodies immediately disconnect the power supply and notify customer service The equipment should only be opened by service centers authorized by BinTec Always disconnect the power cord before opening the equipment Unauthorized opening and improper repairs can result in serious danger for the user e g electric shock Ensure that repairs are only carried out by service centers authorized by BinTec Your dealer will tell you where the service centers are situated Failure to observe the above instructions invalidates the guarantee and no claims can be accepted Never use water to clean this equipment Water spillage can result in serious danger for the user e g electric shock and cause considerable damage to the equipment Never use scouring or abrasive alkaline cleaning agents on this equipment X4000 User s Guide ssmnuz 33 B General Safety Precautions 34 ummm X4000 User s Guide 3 Hardware Description and Installation This chapter contains the following information
120. DD DELETE EXIT Press lt Ctrl n gt lt Ctrl p gt to scroll Space tag untagDELETE Return to edit This menu lists the previously completed assignment of systems to extension numbers To make entries in the list proceed as follows gt Use ADD to add a new entry or select an existing entry Confirm with Return to change the entry Another menu window opens X4000 Setup Tool BinTec Communications AG WAN INCOMING ADD Incoming Calls MyRouter Item PPP routing Number 10 Mode right to left Bearer data SAVE CANCEL Use Space to select X4000 User s Guide Configuring WAN Interfaces The menu contains the following fields Item Service which shall accept a call to the Number below Possible values see Table 7 9 page 147 Number Phone number under which the service Item entered above can be reached Mode Mode in which X4000 compares the digits of Number with the called party number of the incoming call E right to left default value E left to right DDI Always select if X4000 is connected to a point to point connection User name only for Item CAPI 1 1 EAZ 0 9 Mapping CAPI user name Only necessary if you want to use the CAPI user concept see chapter 7 1 2 page 192 Bearer Type of incoming call Possible values E data data call Bb voice voice call E any both data and voice calls Table 7 8 CM 1BRI ISDN SO Incomin
121. DN data connections which is the default value of the B channel Only change the setting if expressly required X4000 User s Guide samme 219 Bg Advanced Configuration of the Basic Unit with the Setup Tool This is configured in WAN PARTNER EDIT ADVANCED SETTINGS Layer 1 Protocol Defines which Layer 1 Protocol X4000 is to use This setting applies only to outgoing calls to the WAN partner and to incoming calls from the WAN partner if they have been identified from the calling party number Table 8 20 WAN PARTNER EDIT ADVANCED SETTINGS uL For incoming calls that cannot be identified from the calling party number X4000 uses the settings under Item in menu CM 1BHI ISDN SO INCOMING CALL ANSWERING as the Layer 1 Protocol see Incoming call answering page 141 220 mmmma X4000 Users Guide Settings Specific to WAN Partners B Layer 1 Protocol contains the following selection options ISDN 64 kbps For 64 kbps ISDN data connections This is the default value ISDN 56 kbps For 56 kbps ISDN data connections Modem Only available if expansion card and resource card with digital modems are installed Assigns incoming analog calls to the PPP routing service The digital modem on the resource card that accepts this call uses the settings for Modem Profile 1 which were selected in the menu MODEM PROFILE CONFIGURATION PROFILE 1 DOVB Data transmission Ov
122. DSS1 A rule that defines a set of packets that should or should not be transmitted by the router Recording of connection data e g date time connection duration charging information and number of data packets transferred Asymmetric gt Digital Subscriber Line The data rate is up to 640kbps gt upstream and 1 5 9 Mbps downstream over ranges of up to 5 5 km The main ADSL applications are Internet access video on demand digital and compressed and high speed data communication over gt gt POTS Address Resolution Protocol ARP belongs to the gt gt TCP IP protocol family ARP resolves IP addresses into their corresponding gt gt MAC addresses A method of data transmission in which the time intervals between transmitted characters can vary in length This allows computers and peripheral devices to intercommunicate without being synchronized by clock signals The beginning and end of the transmitted characters must be marked by start and stop bits in contrast to gt gt synchronous transmission Control and signaling channel of the gt gt ISDN Basic Rate Interface or the Primary Rate Interface for transmission of traffic voice data An ISDN Basic Rate Interface consists of two B channels and one gt D channel A B channel has a data transmission rate of 64 kbps The data transmission rate of an ISDN Basic Rate Interface with X4000 can be increased to up to 128 kbps using gt gt channel bundl
123. E Ethernet Interface e g en2 Press SAVE WAN partner To configure a PPP over Ethernet partner proceed exactly as for configuration settings of a WAN partner NA When configuring the WAN partner make sure that Van Jacobson Header Compression is not activated in the menu WAN PARTNER ADD IP ADVANCED SETTINGS The IPX Bridging and Bandwidth on Demand functions e should not be used either gt Goto WAN PARTNER ADD 290 mmmsms X4000 Users Guide LAN Interface Card for 10 100 Mbps B The following fields are relevant Partner Name Enter a name for uniquely identifying the PPP over Ethernet partner Encapsulation Encapsulation defines how the data packets are packed for transfer to the WAN partner PPP over Ethernet Only PPP should be selected here Calling Line Indicates whether calls from this WAN partner Identification should be identified by means of the calling party number CLID The value of this field is dependent on Direction in the submenu WAN NUMBERS and cannot be set here Table 9 3 Wan PARTNER ADD 9 Enter your WAN partner s name for PPP over Ethernet under Partner Name e g t online Select Encapsulation PPP WAN partner PPP gt Goto Wan PanTNER ADD PPP settings X4000 User s Guide saman 291 Ba Configuration of Expansion and Resource Cards with the Setup Tool The following fields are relevant Partner PPP ID ID of WAN partner Remain
124. E X4E 2FE LAN interface card for 10 100 Mbps to be optionally equipped with aresource card for encryption and compression XTR ENC X4000 User s Guide ssmnuz 19 20 BRICKware RVS COM Lite 1 3 BinTec Companion CD You will find all the programs you need for the installation configuration and administration of X4000 on your BinTec Companion CD BRICKware for Windows contains the Windows utility programs DIME Tools are for monitoring and administration of your X4000 The Configuration Wizard leads you step by step through the basic configuration of X4000 You gain access to X4000 via the serial interface using the terminal program BRICK at COM1 or BRICK at COM2 The Configuration Manager allows you to configure and administrate all BinTec routers in the network via a graphic interface Here you can view and edit all SNMP tables and variables The Java Status Monitor allows you to request system information over an Internet browser Remote CAPI Client The Remote CAPI Client allows you to use communications applications based on the standard CAPI interface e g RVS COM Lite Token Authentication Firewall TAF program optional This software package is required if you are using the Security Dynamics security system The Activity Monitor enables you to monitor the utilization of X4000 at a glance More detailed descriptions of all software programs can be found in our online manual BRICKware for Windows I
125. ES X4000 Setup Tool BinTec Communications AG LICENSE Licenses MyRouter Available Licenses IP builtin STAC valid CAPI valid BRIDGE valid IPX valid Serialnumber Mask Key State 101546 55 88PNUPZ ok ADD DELETE EXIT Press lt Ctrl n gt lt Ctrl p gt to scroll Space tag untagDELETE Return to edit Listed under Available Licenses are all subsystems available to X4000 as well as their current state builtin always available valid activated not valid not activated The license entries are shown under Serialnumber Mask Key If you have not yet entered your license data the subsystem list will be almost empty Only IP i e gt gt IP routing is available builtin X4000 Users Guide ssmms 121 Basic Configuration of Basic Unit with Setup Tool Subsystems The following subsystems can be activated on your X4000 IP IP routing OSPF Open Shortest Path First only with extra license TAF Token Authentication Firewall only with extra license TUNNEL Virtual Private Networking VPN only with extra license STAC STAC gt gt data compression CAPI Remote CAPI interface makes communications applications possible on your PC e g sending and receiving faxes BRIDGE Bridging X25 X 25 only with extra license FRAME RELAY Frame Relay only with extra license IPX IPX routing Table 7 1 Subsystems Todo To enter
126. Encapsulation Defines how the data packets are packed for transfer to the WAN partner Possible values B PPP Multi Protocol LAPB Framing Multi Protocol HDLC Framing Async PPP over X 75 Async PPP over X 75 T 70 BTX X 25 PPP X 25 HDLC Framing IP only LAPB Framing IP only X31 B Channel X 25 No Signaling X 25 PAD X 25 No Configuration Frame Relay X 25 No Configuration No Signaling 162 nmmmmm X4000 Users Guide Configuring WAN Partners Compression Defines the type of compression that should be used for data traffic to the WAN partner Possible values E STAC only if Encapsulation PPP E MS STAC only if Encapsulation PPP E none Encryption Defines the type of encryption that should be used for data traffic to the WAN partner Only possible if STAC compression is not activated for the connection Possible values E MPPE 40 MPPE version 1 with 40 bit key E MPPE 56 MPPE version 1 with 56 bit key E MPPE V2 40 MPPE version 2 with 40 bit key E MPPE V2 56 MPPE version 2 with 56 bit key E DES 56 DES with 56 bit key E Blowfish 56 Blowfish with 56 bit key E none No encryption These values are only available if PPP Async PPP over X 75 Async PPP over X 75 T 70 BTX or X 25 PPP has been selected under Encapsulation Calling Line Indicates whether calls from this WAN partner Identification should be identified by means of the calling party number gt gt CLID The
127. Exceptions to this rule are the Configuration Wizard and Configuration Manager under Windows and the MMI In order to log in you need to know the user name and password In its ex works state X4000 is provided with the following user names and passwords admin bintec Read and change system variables save configurations use the Setup Tool write public Read system variables changes are lost when X4000 is turned off read public Read system variables http bintec Call up HTTP status page and Java status monitor from X4000 read system variables no login Table 4 1 User names and passwords in ex works state As you can see it is only possible to change and save configurations when you log in with the user name admin Access information user names and passwords can also only be changed if you log in with the user name admin For security reasons passwords are not normally shown on the Setup Tool screen in plain language but only as asterisks The user names appear in plain language The security concept of X4000 enables you to read all the other configuration settings with the user name read but not the access information It is therefore impossible to log in with read read the password of the admin user and subsequently log in with admin and make changes to the configuration This is how you log in Type in your user name e g admin and press Return X4000 User s Guide Logging In LE
128. FTP File Name brick cf Type in Name in Flash e g boot Select START OPERATION and press Return As long as the operation is being carried out OPERATING appears in the help line of the Setup Tool State of last operation displays running When the operation has been successfully executed get TFTP gt FLASH is displayed under Type of last operation State of last operation assumes the value done The configuration file brick cf is saved for example in X4000 s flash under the name boot To make the settings of brick cf take immediate effect in X4000 proceed as follows Reselect Operation oad FLASH gt MEMORY Select Name in Flash e g boot Select START OPERATION and press Return As long as the operation is being carried out OPERATING appears in the help line of the Setup Tool State of last operation displays running When the operation has been successfully executed load FLASH gt MEMORY is displayed under Type of last operation State of last operation assumes the value done The configuration file boot has been loaded to X4000 s memory and the settings have been activated Leave CONFIGURATION MANAGEMENT with EXIT You have returned to the main menu There is another way to transfer configuration files using the XMODEM protocol over the serial interface The procedure for this is explained in the Software Reference X4000 User s Guide Updating Software www bintec de
129. G with its LC display input keys and intuitive user guide in several languages also simplifies getting to know your router and provides fast access and display of the main settings A wide range mains unit without fans ensures quiet operation of X4000 in office environments The flexible multiprotocol router can be used for WAN access as well as for remote access server fax gateway remote CAPI server or LAN router X4000 supports the TCP IP IPX and X 25 optional protocols and is also suitable for bridging other protocols based on the spanning tree method Using BinTec s remote CAPI interface applications based on the widely used CAPI interface can be used network wide This means the available ISDN connections can be used more effectively ummm X4000 Users Guide X4000 The Workgroup Access Router for Present and Future Applications a1 Security The future The features supplied include BinTec s well tried security package SAFERNET This package contains security technologies such as filters Network Address Translation NAT and access passwords The security functions protect X4000 and the network connected to it against unauthorized access New technologies and developments are vital for BinTec Communications AG X4000 s flexible platform with an expansion slot and a powerful processor enable the rapid use of new WAN LAN technologies and features This makes X4000 a future oriented and migration capable device
130. GS for deriving the time automatically Current Time Shows the system time currently set in X4000 date and time New Time For entering the new time to be used by X4000 hours minutes New Date For entering the new date to be used by X4000 month day year Table 8 38 SYSTEM TIME AND DATE X4000 User s Guide samme 245 8 Advanced Configuration of the Basic Unit with the Setup Tool Proceed as follows to enter the system time in X4000 manually n If a method for deriving the time automatically is also defined in X4000 the values obtained automatically have higher priority That is if X4000 receives a relevant time signal e g from a time server any system time entered manually is overwritten e gt Goto SYSTEM TIME AND DATE Enter New Time Enter New Date VV Y Confirm the new system time with SET Current Time shows the new system time set in X4000 8 3 2 Name Resolution in X4000 with DNS Proxy Why Name Resolution IP address Name resolution is necessary for converting host names in a LAN or on the Internet into IP addresses For example if you would like to reach the host Goofy in your LAN or enter the URL http www bintec de in your Internet browser you need the associated IP address before you can set up the required connection The following options are available HM DNS Domain Name Server A DNS stores the relevant IP addresses for host names in the
131. IN Changing the PIN for Configuration Mode Here you can change the PIN Personal Identification Number for Configuration Mode Configuration Mode is protected by a four digit PIN The default setting of the PIN is 0000 in the ex works state When you use the MMI for the first time you should change the PIN to prevent entries by unauthorized users For technical reasons the PIN is shown on the display in plain language Make sure the display is not visible to other persons when you enter the PIN Users who do not know the set PIN cannot change from Monitoring Mode to Configuration Mode X4000 Users Guide ssmms 101 5 Man Machine Interface MMI Display with User Guide 5 3 2 IP Address and Netmask The main menu IP Address and Netmask offers the following options IP Address and OK OK IP Address Enter IP address Netmask I 192 168 1 254 OK IP address has been set to 192 168 1 254 OK Netmask OK Set netmask 255 255 255 0 OK Netmask has D eA TT been set to y OK 255 255 255 0 Figure 5 6 Menus for entering the IP address and netmask with navigation bars E IP Address Enter the IP address of X4000 This is done by selecting each digit with W and A and confirming each by pressing OK The IP address is saved after confirming the last digit E Netmask Enter the netmask of the network in which X4000 is located T
132. INGS Enter HTTP TCP port 0 Press SAVE 10 1 5 Java Status Monitor The Java status monitor offers you another facility for displaying information about X4000 using an Internet browser You can call up the following information with the JAVA status monitor E Static information such as the system name of the BinTec router and the software version E Data flow over the individual interfaces E Connections to WAN partners X4000 User s Guide samme 321 10 Configuration of Security Functions and Firewall What do you need it 322 for How does it work If you have installed the JAVA status monitor together with BRICKware see chapter 6 2 page 112 you can start it as follows gt Select Program BRICKware Java Status Monitor in the Windows Start menu The JAVA status monitor opens with your standard browser Further information about the JAVA status monitor can be found in BRICKware for Windows 10 1 6 Activity Monitor The Activity Monitor enables Windows users to monitor the activities of X4000 Important information about the status of physical interfaces e g ISDN line and virtual interfaces e g WAN partner is easily obtained with ONE tool A permanent overview of the utilization of X4000 s interfaces is possible A Status Demon collects information on X4000 and transfers it in the form of UDP packets to the broadcast address of the LAN default setting or to an explicitly entered IP address
133. Mbps Full Duplex You should normally leave the default value at Auto Table 7 4 CM 100BT Fast ETHERNET 128 smsmmm X4000 Users Guide Basic Router Settings To do Advanced configuration IP addresses in the LAN Proceed as follows to configure X4000 s LAN interface gt Enter Local IP Number of X4000 e g 192 168 1 254 gt Enter Local Netmask e g 255 255 255 0 f applicable enter Second Local IP Number and Second Local Netmask gt Select Encapsulation e g Ethernet Il Select Mode e g Auto Press SAVE You have returned to the main menu and the entries have been saved If you wish to use the IPX gt gt protocol you will find an explanation of how to configure the LAN interface for IPX in chapter 8 4 page 268 Information about bridging can be found in the Software Reference The menu CM 100BT Fast ETHERNET ADVANCED SETTINGS contains settings for the Routing Information Protocol RIP see chapter 8 2 8 page 229 IP Accounting Proxy ARP see chapter 8 2 10 page 234 and Back Route Verification see chapter 10 2 10 page 352 How to use the LAN interface for ADSL connections over the T DSL connection of Deutsche Telekom is described in chapter 7 2 3 page 155 7 1 4 Configuring X4000 as DHCP Server Each PC in your gt gt LAN and X4000 requires its own IP address If you configure X4000 as a gt gt DHCP Dynamic Host Configuration Protocol server X4000 auto
134. N charges Select EXTENDED to display additional information You can then change the status of the interface under Operation and confirm the entry with START OPERATION Proceed as follows to display the statistics for connections to gt protocols ICMP IP UDP and TCP Go to MONITORING AND DEBUGGING TCP IP The statistics for IP connections are displayed You can find the meaning of the MIB variables in the MIB Reference X4000 Setup Tool BinTec Communications AG MONITOR IP IP Statistics MyRouter nReceives 3912 OutNoRoutes 0 nHdrErrors 0 ReasmTimeout 500 nAddrErrors 0 ReasmReqds 0 ForwDatagrams 0 ReasmOKs 0 nUnknownProtos 0 ReasmFails 0 nDiscards 0 FragOKs 0 nDelivers 3321 FragFails 0 OutRequests 9 FragCreates 0 OutDiscards 0 RoutingDiscards 0 EXIT I C MP I P U DP T CP gt Select c to display statistical data for ICMP gt Selecti to display statistical data for IP gt Select u to display statistical data for UDP Select t to display statistical data for TCP 10 1 3 Credits Based Accounting System X4000 s Credits Based Accounting System enables you to control the costs billed for ISDN charges for data connections This means you can keep the effects of possible configuration errors within limits For example the system enables you to define the maximum number of connections allowed in a certain period of time You can make settings for each subsystem gt gt PPP gt
135. OFILE 1 8 CAPI 1 1 EAZ 0 9 Mapping Enables connections with Remote CAPI applications Required for CAPI 1 1 applications only X4000 User s Guide Configuring WAN Interfaces 7 od X 25 PAD Enables data connections with X 25 PAD Table 7 9 Item Make sure you enter the right number under Number i e the number that actually arrives at XA000 For example if X4000 is connected to a gt gt PABX only the PABX extension number arrives at X4000 If you are not sure which number arrives at X4000 proceed as follows gt Call X4000 with a conventional telephone using one of its extension numbers gt Goto MONITORING AND DEBUGGING ISDN MONITOR You can now see the incoming call in the menu Place the cursor on the call and enter a for details Under Local Number you can see the part of the number that arrives at X4000 Type in this part of the number in CM 1BRI ISDN SO INCOMING CALL ANSWERING ADD under Number If you use a communication application on your PC that is based on Remote CAPI 1 1 current version Remote CAPI 2 0 X4000 must translate the gt gt MSNs Number multidigit of the incoming call to gt gt EAZs single digit CAPI 1 1 can only detect single digit numbers This is why the CAPI entry under Item is not simply called CAPI but CAPI 1 1 EAZ x Mapping When using CAPI 1 1 you must therefore make sure you assign each CAPI applic
136. OTO EOWTEPLKO THC GUOKEUNC llpiv trjv Boste os Aerroupyia TIEPIMEVETE HEXPL nou n ouokeur va arokrrjosgi tnv i a 9 ppokpaoia Kal va ivat TeAsiwe oteyvn Npooe te tic cuvOnkec mepiBaGAAovtoc oto T XviK oTolxeia EEetaote av n TaON rou ror ko U NAEKTpPLKOU OLKTUOU GULOWvEi ue TNV ovopaoriKr TON TOU PEULATOANNTN H Aettoupyia ta ouokeurja ETITPETIETAL UOVO HE TIG AKOAOUBEC MpoUNOGEoEIc 100 240 VAC 50 60Hz Bepaio8eire nwe n mpiga coUKo t eykar oraong eivai mpooitn Fia THV nArjpgn artoc v sgor ano ro pe pa rip riet va By cere TO dia aNd Uv mpica Kar tv KaAWdiwon mnpoo amp re Hv oep mou TIEPLYPAMETAL oro EYXELpiOLO Na xpnoiponoteire WOVOV KAAWOLA TOU TIANpOUV TA xapaktnpictik oro eyxsipi io YY Ta yvrola mou napaA gare Av xprnolwonolsite GAAa kadd TOTe n BinTec Communications AG dev avadauBavet kapia eu8Uvn yia nuis T BAGBec oTNV AElTOUPYLKOTNTA LE AUTEC TIC MEPINTWOEIC MavEl va toxUel N EyyUNON TNG GuOKEuNC Kata tnv oUVdEon tna GuOKEUN A gere UTIOWN Gac TIG UTIOSEIEELC OTO EYXELPIOLO ALAOTPWOTE ra KAAWSLA KATA TETOLOV TPOTIO WOTE va UNV MpOKUWOUV onueia kiv vou kivOuvoc rrapariarr paroc Kal WOTE va un propo v va urtooToUv Cyd Kata tnv diapketa plac Katalyidac oUTe va ouvdo ete ovTE va ByaZeTte ra KaAWSLA HETAMOPAC SESOUEVWV OUTE va ra AKOUTIATE To X4000 npoopiZetat yia xprjon oe mepiBaAAov ypadeiou xav Router TIOAAGTIAMV TIPWTOKOAAWYV Multi Protokoll ro X4000 oe e amp aptnon ano tnv u
137. OTP server Table 8 49 IP STATIC SETTINGS Proceed as follows gt Goto IP STATIC SETTINGS Enter BOOTP Relay Server Press SAVE If a WAN connection is needed for the connection between the BOOTP server and BOOTP client you must configure an appropriate WAN partner chapter 7 3 page 159 X4000 User s Guide sssa 267 rn Advanced Configuration of the Basic Unit with the Setup Tool 268 8 4 IPX Settings The gt gt IPX Protocol Internet Packet Exchange Protocol is a network protocol that is used mainly in Novell networks Novell gt gt clients and Novell 9 servers can use IPX to communicate via LAN WAN connections The configuration steps necessary for IPX connections are explained below E General Settings E Configuring the LAN Interface E Configuring WAN Partners 8 4 1 General Settings Here you will find the global parameters for IPX These settings apply to all IPX connections of X4000 X4000 User s Guide IPX Settings B The configuration is made in IPX Local System Name IPX system name of X4000 using upper case letters numbers and Internal Network Number X4000 s internal network number This value must be unique among all the network numbers and normally comprises the last four bytes of X4000 s gt MAC address Change this value only if it is already used somewhere else in the network Internal Network Number of a Remote IPX router has the same value
138. S Primary Domain Name IP address of X4000 s first global Domain Server Name Server DNS Secondary Domain IP address of another global Domain Name Name Server Server Primary WINS IP address of X4000 s first global WINS Windows Internet Name Server or NBNS NetBIOS Name Server Secondary WINS IP address of another global WINS or NBNS Table 8 24 IP STATIC SETTINGS 226 mmmmm X4000 Users Guide Settings Specific to WAN Partners B Dynamic Name Server Negotiation In the event of dynamic name server negotiation defines whether X4000 receives IP addresses for Primary Domain Name Server Secondary Domain Name Server Primary WINS and Secondary WINS from the WAN partner or sends them to the WAN partner Table 8 25 WAN PARTNER Epit IP ADVANCED SETTINGS X4000 Users Guide samma 227 Bag Advanced Configuration of the Basic Unit with the Setup Tool The Dynamic Name Server Negotiation field contains the following selection options off X4000 does not send or answer requests for WINS or DNS IP addresses yes The response is linked to the mode for issuing receiving an IP address setting in WAN PARTNER EDIT IP under IP Transit Network HM X4000 sends requests for name server addresses to the WAN partner if dynamic client is selected HM X4000 answers requests for name server addresses from the WAN partner if dynamic server is selected HM X4000 answers
139. Safety Precautions in 15 Different Languages 450 Instrucciones generales de seguridad En los parrafos siguientes encontrara unas instrucciones de seguridad Es imprescindible tener las mismas en cuenta a la hora de manejar su router Transportey E almacenamiento Colocaci ny W puesta en servicio Transporte y almacene su X4000 nicamente en su embalaje original o en otro embalaje adecuado que garantice su protecci n contra golpes y choques Antes de la colocaci n y puesta en servicio de X4000 observe las instrucciones acerca de las condiciones ambientales ver Datos t cnicos Utilice una superficie firme y plana Las cargas electrostaticas pueden ocasionar dafos en los aparatos Por el lo lleve un pufio puesto a tierra alrededor de la mufieca o entre en contacto con una superficie puesta a tierra antes de tocar hembrillas o tarjetas de expansi n de X4000 Toque las tarjetas de expansi n s lo en los bordes y no entre en contacto con componentes ni con redes de circuitos impresos Mantenga cerrada la ranura de expansi n con la cubierta ciega para que no pueda penetrar ning n objeto en el interior del aparato Si durante el servicio hubiera dentro alg n objeto extrafio se correr a peligro de electro cuci n y de cortocircuito Preste atenci n a que ning n objeto afilado da e la ventana de display del m dulo de display Proteja este m dulo frente a golpes y ca da y con ctelo nicamente a la hembrilla RJ11 pre
140. Schlie en Sie Daten bertragungsleitungen w hrend eines Gewitters weder an noch ziehen Sie sie ab oder ber hren Sie diese X4000 ist f r den Einsatz in einer B roumgebung bestimmt Als Multiprotokoll Router baut X4000 in Abh ngigkeit von der Systemkonfiguration WAN Verbindungen auf Um ungewollte Geb hren zu vermeiden sollten Sie das Produkt unbedingt berwachen X4000 User s Guide Reinigung und Reparatur X4000 entspricht den einschl gigen Sicherheitsbestimmungen f r Einrichtungen der Informationstechnik f r den Einsatz in einer B roumgebung Der bestimmungsgemaBe Betrieb gem IEC 950 EN 60950 des Systems ist nur bei komplett montiertem Blechgehause gew hrleistet K hlung Brandschutz Funkentst rung Die Umgebungstemperatur darf 50 C nicht bersteigen Vermeiden Sie direkte Sonneneinstrahlung Achten Sie darauf daB keine Gegenst nde z B B roklammern oder Fl ssigkeiten ins Innere des Ger ts gelangen elektrischer Schlag KurzschluB Achten Sie auf ausreichende K hlung X4000 enth lt keine Bauteile die vom Benutzer getauscht werden d rfen oder Schalter Jumper die der Benutzer einstellen mu Unterbrechen Sie in Notf llen z B besch digtes Geh use oder Bedienelement Eindringen von Fl ssigkeit oder Fremdk rpern sofort die Stromversorgung und verst ndigen Sie den Service Das Ger t darf nur von einer BinTec autorisierten Servicestelle ge ffnet werden Vor ffnen des Ger ts unbedingt
141. T 4 0 Installed network card 10 Mbps Ethernet or 10 100 Mbps Fast Ethernet Installed Microsoft TCP IP protocol High color monitor more than 256 colors for correct display of graphics X4000 User s Guide m m 23 1 6 Guarantee Terms 2 years X4000 is guaranteed for 2 years from the date of purchase Please contact your dealer for handling claims under the guarantee 6 years You can extend the guarantee for X4000 to 6 years by registering with BinTec Communications AG To register fill out the online form provided at www bintec de You will then receive written confirmation by return As a registered user you not only have the advantage of an extended guarantee but also receive regular information about new products if you wish Please read the enclosed leaflet with detailed guarantee information for X4000 Danger A Live components are exposed when the equipment is open There is a risk of electric shock Itis not necessary to open the housing for connecting or operating or for installing or removing the expansion card If the housing is opened this tears the guarantee label on X4000 which invalidates the guarantee gt Never open the housing 24 ummm X4000 Users Guide 1 7 1 7 1 Contents About this Manual a About this Manual This manual is structured as follows 1 Welcome General introduction scope of supply guarantee terms information about this manual 2 General Safety Precaut
142. TL YUPW am TO xpi Cac va ayyicere pia VELWHEVN enip veia Ayyiete Tic mative avag Opniona p vo OTIC QKPEC Kat un ru vere kaAo ia n amp aprrjpuara Na dtatnpeite KAELOTEC TIC UN xpnouonoump veg UMOdOXEC avag 8piona ue ro TUMAO k Auppa wote va UNV UMOpoUV va ELOEABOUV AVTIKEINEVA oro EGWTEPIKO TNG GUOKEUT C Av KATA TNV Oidpkeia TNG Aettoupyiagc urt pxyouv p oa OTNHV GUOKeUN EEva aviikeiueva UTIAPXEL KivOuvoc nAekTponAn iac KAL BpaxukukAoparoc Na ripoo yere WOTE n OBOVN TNC pov ag ev gi amp gov va unv urtoorei nuig ano alxunpa avtikeiveva Na mpootatevete tnv pov oa evdeiEewWv AMO XTUTMHATA kat MTWOELC Kat va rrjv ouv ere LOVOV OTNV npogAen pevn urto oxr RJ11 rou X4000 yia va artoo yere Tic Cnulec oro X4000 kal otv pov a ev ei ewv Kata triv KAAWOIWON npoo amp re WOTE VA UNV KAGAUMITOVTAL OL oxiop q EagpiopoU TNG GuOKEUNC kat va unv euno icerat o aepiop q AMO TOV HELWHEVO aepiop rou X4000 unopo v va mMpoKAnBouv Cnut q OTNV ouokeurn Or BAGBEc MoU MpoKUMTOUV ann s n AEPLOHO OUVETIAYOVTAL TNV ANWAELA TNG EyyUonc X4000 User s Guide lipoBAen pevn xphon A iToUpyi a Mn avoiyete tr Baoikr cuokeur kat UNV k vere HETATPOTIEC orov peuparoArrren StOTt urt pxet kiv uvoc Bavatoc ano nAeKTporAnEia Mn BydZeTte rna Bides OTEPEWONC rna BaolKNc GUOKEUNC Orav n GUOKEUT HETAPEPETAL aMO WuXPO TlepiIBAGAAOV otov xopo Aettoupyiac uriopei va rrapouciac8ei THEN TOGO oro EEWTEPIKO OOO KAL
143. The protocol with which X4000 has learned the routing entry is displayed under Pro To define a route proceed as follows gt Use ADD to add a new entry or select an existing entry Confirm with Return to change the entry Another menu window opens To create extended IP routing entries press the ADDEXT button to open the relevant menu In this case see chapter 10 2 12 page 353 X4000 User s Guide Configuring WAN Partners X4000 Setup Tool BinTec Communications AG IP ROUTING ADD IP Routing MyRouter Route Type Network route Network WAN without transit network Destination IP Address 10110 Netmask 255 255 255 0 Partner Interface BigBoss Metric 1 SAVE CANCEL Use lt Space gt to select X4000 User s Guide ssammm 177 Basic Configuration of Basic Unit with Setup Tool The menu contains the following fields Route Type Type of route Possible values E Host route Route to a single host HM Network route Route to a network E Default route Is only used if no other suitable route is available Network Defines the type of connection LAN WAN see Table 7 23 page 179 Destination IP Address IP address of the destination host or LAN Netmask Netmask of the partner LAN only possible for Route Type Network route If no entry is made the router uses a default netmask Partner Interface WAN partner only possible for Network WAN without transit network G
144. Verwendung Betrieb 422 ffnen Sie nicht das Grundger t und nehmen Sie keinerlei Manipulationen am Netzteil vor da sonst Lebensgefahr durch einen Stromschlag besteht Entfernen Sie keine Befestigungsschrauben des Grundger tes Wenn das Ger t aus kalter Umgebung in den Betriebsraum gebracht wird kann Betauung sowohl am Ger te uBeren als auch im Ger teinneren auftreten Warten Sie bis Ihr Ger t temperaturangeglichen und absolut trocken ist bevor Sie es in Betrieb nehmen Beachten Sie die Umweltbedingungen in den Technischen Daten Pr fen Sie ob die rtliche Netzspannung mit den Nennspannungen des Netzteils bereinstimmt Das Gerat darf unter folgenden Bedingungen betrieben werden 100 240 VAC 50 60Hz Stellen Sie sicher daB die Schutzkontakt Steckdose der Installation frei zug nglich ist Zur vollst ndigen Netztrennung mu der Netzstecker gezogen werden Beachten Sie beim Verkabeln die Reihenfolge wie im Handbuch beschrieben Verwenden Sie nur Kabel die den Spezifikationen in diesem Handbuch gen gen oder original mitgeliefert wurden Falls Sie andere Kabel verwenden bernimmt BinTec Communications AG f r auftretende Sch den oder Beeintr chtigung der Funktionalitat keine Haftung Die Ger tegaranie erlischt in diesen F llen Beachten Sie beim Anschlu des Ger ts die Hinweise im Handbuch Verlegen Sie Leitungen so daf sie keine Gefahrenquelle Stolpergefahr bilden und nicht besch digt werden
145. WAN PARTNER ADD B JP Todo Make the following entries normally sufficient for a corporate network connection Select IP Transit Network e g no Enter Partner s LAN IP Address e g 10 1 1 0 Enter Partner s LAN Netmask e g 255 255 255 0 Press SAVE VVVYV Press SAVE again You have returned to WAN PARTNER and your entries have been saved 174 m mmmm X4000 Users Guide Configuring WAN Partners Routing entry creation If you are setting up access to the Internet you do not normally know the IP address of your Internet Service Provider ISP Either your X4000 is assigned its Local ISDN IP Address dynamically for the duration of the connection or statically by the ISP In such a case make the following settings in WAN PARTNER ADD JP IP address is assigned dynamically Select IP Transit Network dynamic client IP address is assigned statically Select IP Transit Network yes Local ISDN IP Address X4000 s static IP address you get from your ISP often termed your gateway or router address Partner s ISDN IP Address Partner s IP address if known or else X4000 s static IP address you get from your ISP No entries for Partners LAN IP Address and Partners LAN Netmask If you want to know more about what a transit network actually is for example and what you need it for see chapter 8 2 6 page 222 To be able to use the Domain Name Server of the ISP while connected
146. X PPP ISDN Lo Credits CAPI Ly User Config Management Monitoring a Debugging L Advanced Settings IP L Advanced Settings IPX Bridge ISDN Monitor ISDN Credits Interfaces Messages TCP IP Figure 4 4 Setup Tool menu structure basic unit X4000 User s Guide ssamnunz 87 Configuration Requirements Figure 4 4 page 87 shows the Setup Tool menus available on X4000 When you activate the necessary license X4000 detects this and displays the corresponding menus for entering license see chapter 7 1 1 page 121 Summary To help you find your bearings during configuration the menus are briefly explained below LICENSES This menu is for entering the license information printed on the license card supplied with the equipment This menu is also used for activating extra licenses SYSTEM In this menu you enter the basic system settings of X4000 e g system name and passwords FAST ETHERNET This menu is for configuring the gt LAN interface of X4000 Here you enter data such as the IP address and netmask of X4000 ISDN SO This menu is for configuring the ISDN interface of X4000 Here you enter data such as the type of ISDN connection to which X4000 is connected The submenu ISDN SO INCOMING CALL ANSWERING is for assigning the available ISDN n
147. X4000 User s Guide Installation and Configuration Copyright 2000 BinTec Communications AG all rights reserved Version 1 3 Document 71000L August 2000 X4000 User s Guide ssmnuz Purpose Liability Trademarks Copyright Guidelines and standards This manual explains the installation and initial configuration of X4000 with software release 5 1 6 For up to the minute information and instructions concerning the latest software release you should always read our release notes especially when carrying out a software update to a later release level The latest release notes can always be found at www bintec de While every effort has been made to ensure the accuracy of all information in this manual BinTec Communications AG cannot assume liability to any party for any loss or damage caused by errors or omissions or by statements of any kind in this document and is only liable within the scope of its terms of sale and delivery The information in this manual is subject to change without notice Additional information including changes and release notes for X4000 can be found at www bintec de As a multiprotocol router X4000 sets up WAN connections in accordance with the system configuration To prevent unintentional charges accumulating the operation of the product should be carefully monitored BinTec Communications AG accepts no liability for loss of data unintentional connection costs and damages resulting from u
148. X4000 with extra license and configure the router as TAF Server or TAF Client A detailed description of the operation and the necessary configuration steps can be found in BRICKware for Windows 10 2 12 Extended IP Routing XIPR In addition to the normal routing table X4000 can also make routing decisions based on an additional table called the Extended Routing Table Extended IP Routing Apart from the destination address X4000 can also include the protocol source and destination port type of service TOS and the status of the destination interface in the decision If there are entries in the Extended Routing Table these are treated preferentially compared with entries in the normal routing table XIPR is useful for example if two networks are connected via ISDN with a LAN LAN connection but certain services e g telnet should be routed over an X 25 link and not over an ISDN switched connection By making entries in the Extended Routing Table you can allow part of the IP traffic to run over the ISDN switched connection and part of the IP traffic e g for telnet to run over an X 25 link see also the Software Reference Configuration is made in the Setup Tool menu IP RouTING ADDEXT and in the MIB table ipExtRtTable A detailed description including configuration using the MIB variables can be found in the Software Reference For configuration with the Setup Tool please see the relevant additions in the next version
149. X4000 for processing The configuration of the PCs in the LAN is then easy and can also be left at provider changes This also works if the PCs in the LAN do not have any static DNS entries but are assigned these dynamically by X4000 as DHCP server Forwarding entries enable X4000 to decide which DNS is to be used for the resolution of certain names If you have configured two WAN partners in X4000 your head office and your Internet Service Provider it is advisable to have Internet names resolved by the DNS of your ISP but names from within the corporate network by the DNS of the head office A DNS request for resolution of an internal company address usually cannot be answered by the DNS of the ISP and is thus superfluous causes unnecessary costs and resolution takes longer than necessary A forwarding entry which passes DNS requests for names such as intranet de to the WAN partner head office is therefore advisable If a DNS request is passed by X4000 to a DNS and this DNS answers with a DNS record the resolved name is saved with the associated IP address as a positive dynamic entry in the DNS cache of X4000 This means that once a name has been resolved and is required again X4000 can answer the request X4000 User s Guide samme 247 8 Advanced Configuration of the Basic Unit with the Setup Tool 248 Static name entries Filter function from the cache and a new request to an external name server is not necessary These r
150. a o de corrente e recorra ao servi o de assist ncia t cnica O aparelho s pode ser aberto num servi o de assist ncia t cnica BinTec autorizado Antes de abrir o aparelho indispens vel retirar a ficha de re de A abertura n o autorizada e as repara es inadequadas podem repre sentar riscos graves para o utilizador por ex choque el ctrico Mande efectuar as repara es do aparelho apenas nos servi os de assist ncia t cnica BinTec autorizados O seu fornecedor indicar Ihe a localiza o dos referidos servi os Caso contr rio perder todos os direitos de garan tia O aparelho nunca pode ser limpo a h mido A infiltra o de gua pode constituir perigo para o utilizador por ex choque el ctrico e danos de monta no aparelho Nunca utilizar abrasivos produtos de limpeza alcalinos objectos afiados ou que risquem X4000 User s Guide samen 445 15 General Safety Precautions in 15 Different Languages 446 Og lne zasady bezpiecze stwa w j zyku polskim Poni ej podano zasady bezpiecze stwa kt rych nale y bezwzgl dnie przestrzega przy obchodzeniu si z routerem Transporti Wi magazynowanie Ustawianiei Mi uruchamianie Urz dzenie X4000 nale y transportowa i magazynowa wy cznie w opakowaniu oryginalnym lub innym nadaj cym si do tego celu opakowaniu zapewniaj cym ochron przed obiciami i uderzeniami Przed ustawieniem i uruchomieniem urz dzenia X4000 nale y zastosowa si
151. a 253 B Advanced Configuration of the Basic Unit with the Setup Tool Default Interface Defines the WAN partner to which a connection is normally set up for name server negotiation if other name resolution attempts were not successful DHCP Assignment Defines which name server addresses are sent to the DHCP client if X4000 is configured as DHCP server Possible values E none No name server address is sent E self default value The address of X4000 is sent as name server address HM global The addresses of the global name servers entered in X4000 are sent IPCP Assignment Defines which name server addresses are sent by X4000 to a WAN partner for dynamic name server negotiation Possible values E none No name server address is sent E self The address of X4000 is sent as name server address HM global default value The addresses of the global name servers entered in X4000 are sent Static Hosts The number of static entries is displayed in brackets Forwarded Domains The number of forwarding entries is displayed in brackets Dynamic Cache The number of positive and negative dynamic entries in the DNS cache is displayed in brackets Table 8 40 IP DNS 254 mmmmm X4000 Users Guide Basic IP Settings B IP DNS SrAric Hosts ADD contains the following fields Default Domain The Domain Name of X4000 entered in IP STATIC SETTINGS is displayed Name
152. ables the port to be changed so that X4000 can be operated in both DCE and DTE Mode Making the relevant settings in the Setup Tool Connector field physically reverses the signal direction and the pin functions The second serial port Setup Tool menu CM SERIAL SERIAL UNIT 1 can be used as interface type X 21bis V 28 Changing this port from DCE to DTE Mode and vice versa is only possible using a DCE or DTE cable The cables to be used are not supplied with X4000 but can be ordered from your dealer We recommend you use original BinTec cables which you can buy from your dealer The use of other cables may cause damage to your equipment and invalidates the guarantee The description below first deals with the plugs that are generally used for X 21 V 35 V 36 and X 21bis interfaces DB 15 Plug for X 21 page 395 M34 Plug for V 35 page 396 DB 37 Plug for V 36 page 397 X4000 User s Guide mm m 393 13 Technical Data E DB 25 Plug for X 21bis page 399 This is followed by a description of the two serial X4000 ports used for implementing the stated interfaces in X4000 HM 26 Pole Mini Delta Ribbon Socket for X 21 V 35 and V 36 page 400 HM 20 Pole Mini Delta Ribbon Socket for X 21bis page 403 394 smmms X4000 Users Guide Features of Basic Unit E DB 15 Plug for X 21 A DB 15 plug to ISO 4903 is normally used for an X 21 interface Figure 13 4 DB 15 plug DTE The DB 15 plug DTE and
153. about the opposite terminal a dala aAMVIe Partners name BigBoss Dial in number 0911987654321 Local name Littlelndian 110 mms mms X4000 Users Guide In Advance of Configuration a TCP IP protocol testing and installation E er Password Secret Partner s network 10 1 1 0 address es Partner s netmask s 255 255 255 0 Agree on the data with your WAN partner You must both use the same password your entry for local name and your partner s entry for partner s name must be identical your entry for partner s name and your partner s entry for local name must also be identical Make sure the TCP IP protocol is installed on the PC before you start the configuration X4000 Users Guide samme 111 n Fast Configuration with the Configuration Wizard Basic Unit 6 2 Installing BRICKware BRICKware for Windows contains the Configuration Wizard and other Windows utility programs gt Place your BinTec Companion CD in the CD ROM drive of your PC The Start window appears automatically after a short time If the Start window does not open automatically click your CD ROM drive in Windows Explorer and double click setup exe Click BRICKware The setup program starts gt Specify the directory in which BRICKware should be installed The DIME Tools which are part of BRICKware for Windows contain mainly assistants for configuration administration and di
154. aces for dialup connections to WAN partners are deactivated X4000 continues to check the hosts at the time interval of 300 s and X4000 activates the interfaces again as soon as at least one host is reachable again X4000 User s Guide samme 241 8 Advanced Configuration of the Basic Unit with the Setup Tool 8 3 Basic IP Settings Here you will find a number of basic settings you can define in X4000 E Deriving System Time chapter 8 3 1 page 242 E Name Resolution gt gt DNS in X4000 chapter 8 3 2 page 246 B gt gt Port Numbers chapter 8 3 3 page 265 E gt gt BOOTP Relay Agent chapter 8 3 4 page 266 The necessary configuration steps are explained below 8 3 1 System Time System time You need the system time to obtain correct timestamps for recording connection data for accounting You can derive the system time E automatically e g via ISDN or a time server see Deriving the System Time Automatically page 243 E by setting it manually in X4000 see Setting the System Time Manually page 245 242 msmmmm X4000 Users Guide Basic IP Settings B Deriving the System Time Automatically Configuration is made in IP B STATIC SETTINGS Time Protocol Protocol used to derive the current time Possible values TIME UDP TIME TCP SNTP ISDN E none Time Offset sec Number of seconds added to or subtracted from the derived time If you enter values between 24 and 24 X4000 interprets the
155. acket Table 10 19 IP Access Lists INTERFACES X4000 User s Guide ssamaa 345 10 Configuration of Security Functions and Firewall Todo Proceed as follows to define filters and rules bz Ensure that you don t lock yourself out when configuring the filters For example if you link the first filter to a rule that executes Action Allow M only what you have expressly allowed with the filter actually gets through It may F easily occur that your telnet access to X4000 is no longer allowed as soon as you enter the rule and confirm with SAVE Filters gt y V V VV NN NN NN NN Do not use any filters on the LAN interface First Rule none if you access X4000 via telnet If you access X4000 via the serial interface or ISDN login at least nothing can happen to you during configuration Go to IP ACCESS LISTS FILTERS Add a new entry with ADD or select an existing entry and confirm with Return to change it Enter Description Select Protocol Enter Source Address if applicable Enter Source Mask if applicable Select Source Port Enter Specify Port if applicable Enter Destination Address if applicable Enter Destination Mask if applicable Select Destination Port Enter Specify Port if applicable Press SAVE Repeat these steps until you have defined all the desired filters Do not forget to define a filter if necessary for enabling the remaining data packets Protocol a
156. ade in B System E SvsrEM EXTERNAL SYSTEM LOGGING HM CM 100BT FAST ETHERNET ADVANCED SETTINGS a WAN PARTNER EDIT IP ADVANCED SETTINGS X4000 User s Guide ssss 309 10 Configuration of Security Functions and Firewall Syslog Output on Serial Enables the display of syslog messages on the Console PC connected to the serial interface of X4000 Use this setting only if you make a fault analysis as a very large output over the serial console adversely affects the throughput of the other interfaces Possible values B yes B no Message Level for Specifies the priority of the syslog messages to Syslog Table be recorded internally Possible values E emerg emergency messages highest priority alert alert messages crit critical messages err error messages warning warning messages notice notice messages info info messages debug debug messages lowest priority Syslog messages are only recorded internally if they have a higher or identical priority to that indicated Maximum Number of Maximum number of syslog messages saved Syslog Entries internally in X4000 possible values 0 100 Table 10 1 SYSTEM 310 m mmmma X4000 Users Guide Activity Monitoring 10 Log Host IP address of the host to which syslog messages are passed Level Priority of the syslog messages to be sent to Log Host Corresponds to Message Level for Syslog Table in SYSTEM
157. agnosis of your X4000 For the basic operation of X4000 it is not necessary to have DIME Tools started automatically by Windows gt Start the Configuration Wizard at the end of the installation You will find a detailed description of the BRICKware installation and a description of the individual components in BRICKware for Windows on BinTec s WWW server under Solutions amp Products and then Download SS 112 nmm msms X4000 Users Guide Basic X4000 Configuration with the Configuration Wizard 6 6 3 Basic X4000 Configuration with the Configuration Wizard Configuration of the basic settings of X4000 is quick and easy with the Configuration Wizard Please note If you have already created a configuration with the Configuration Wizard the Wizard may assume the preset values At the end the configuration is transferred to the router and saved on the PC You can carry out the configuration in either Quick Mode or Expert Mode If you are unfamiliar with networking technologies choose Quick Mode If you have installed BRICKware and activate the Configuration Wizard the following start window appears if not see chapter 6 2 page 112 Configuration Wizard x BRICKWARE Configuration Wizard E Copyright 1999 BinTec Communicatic Figure 6 1 Configuration Wizard start window You can select from the following configuration items E Basic router configuration Bb Internet access HM Corporat
158. ain Menu Save as boot configuration and exit Exit without saving You have three alternatives Select Back to Main Menu to return to the Setup Tool main menu 9 Select Save as boot configuration and exit to save the configuration data as a file in the flash memory The SNMP shell of X4000 appears with the login prompt All the changes you have made with the Setup Tool are saved The next time you start your X4000 the configuration file you have just saved will be loaded gt Select Exit without saving to quit the Setup Tool without saving the changes made The SNMP shell of X4000 appears with the login prompt All settings or changes you have made with the Setup Tool will be lost when you turn off your X4000 186 m mmmma X4000 Users Guide 8 Advanced Configuration of the Basic Unit with the Setup Tool This chapter contains more X4000 configuration options for the advanced user This is the right chapter if you would like to make additional settings that are not covered by the Configuration Wizard or in chapter 6 page 123 The following configuration steps are described General gt gt WAN Settings chapter 8 1 page 188 Settings Specific to WAN Partners chapter 8 2 page 198 Basic gt IP Settings chapter 8 3 page 242 gt gt IPX Settings chapter 8 4 page 268 Bridging chapter 8 5 page 275 E Extra License Functions chapter 8 6 page 276 Use the Credits Based Accounting System see chapt
159. al error situations with instructions for error detection and clearance is given below Try to narrow down the causes of the problem These situations are broken down into the following categories E System errors HM ISDN connections E IPX routing 12 2 1 System Errors have forgotten my password You must return X4000 to the unconfigured ex works state 9 Connect your router over the serial interface to X4000 as explained in chapter 3 3 page 59 9 Switch X4000 off and then switch it on again You see various selftests and then Press sp for BOOTmonitor or any other key to boot system 9 Now press the Space bar A BOOTmonitor menu is displayed gt Select 4 Delete Configuration and press Return Note and confirm the following safety prompts The password as well as the complete configuration of X4000 are deleted gt Select 1 Boot System X4000 is restarted Reconfigure X4000 can t reach X4000 in the LAN 9 Use the MMI to check whether you have entered an IP address X4000 User s Guide mm m 379 12 Troubleshooting If an IP address has been entered try to set up a serial connection gt Connect your PC to X4000 over the serial interface Login as the user admin with the corresponding password gt Start the Setup Tool with setup gt Check if a configuration error is the cause Have you entered a filter under IP ACCESS LISTS that is locking you out If so make the req
160. ame Server Server Primary WINS IP address of X4000 s first global WINS Windows Internet Name Server or NBNS NetBIOS Name Server Secondary WINS IP address of another global WINS or NBNS Table 8 39 IP W STATIC SETTINGS 252 mmmmm X4000 Users Guide Basic IP Settings B IP DNS contains the following fields Positive Cache Enables positive dynamic entries in the cache Possible values HM enabled default value Successfully resolved names and IP addresses are saved in the cache E flush All positive dynamic entries in the cache are deleted E disabled Successfully resolved names and IP addresses are not saved in the cache and existing dynamic positive entries are deleted static entries are not deleted Negative Cache Enables negative dynamic entries in the cache Possible values HM enabled default value Names that could not be resolved are saved in the cache as negative entries E flush All negative dynamic entries in the cache are deleted E disabled Names that could not be resolved are not saved in the cache and existing dynamic negative entries are deleted static entries are not deleted Overwrite Global Nameservers Defines whether the addresses of global name servers in X4000 in JP STATIC SETTINGS may be overwritten with name server addresses sent by WAN partners Possible values E yes default value B no X4000 User s Guide sss
161. an tutunuz yap par alar na veya hatlara dokunmay n z Cihaz n i ine yabanc cisimlerin girmesini engellemek i in kullan lamayan mod l soketlerini k rtapalarla kapat n z Kullan m esnas nda cihaz n i inde yabanc cisimler bulunuyorsa elektrik arpmas ve elektrik ba lant lar n n k sa devre yapma tehlikesi bulunmaktad r Sivri aletlerin display mod l n n display penceresine zarar vermemesine dikkat ediniz Display mod l n arpma ve d meden koruyunuz ayr ca X4000 cihaz na ve display mod l ne zarar gelmemesi i in sadece bunun i in n g r lm s olan X4000 cihaz n n RTJ11 soketine ba lay n z Kablolar yerle tirirken cihaz n havaland rma deliklerinin kapanmamas na ve havaland rman n engellenmemesine dikkat ediniz X4000 cihaz n n havaland rmas engellendi i takdirde cihaza zarar gelebilir Yetersiz havaland rman n yol a t zararlar cihaz n garanti hakk n n kayb na sebeb verir Ana cihaz kesinlikle a may n z ve elektrik arpmas sonucunda hayati tehlike bulundu undan elektrik kablosunda hi bir i lem yapmay n z Ana cihazdan tespit vidalar n s kmeyiniz Cihaz al t r laca odaya so uk bir ortamdan getirilmi ise cihaz n disinda ve i inde iylenme olabilir Cihaz n z al t rmadan nce ummm X4000 Users Guide Belirlenmis sekilde kullanim isletim tamamen kurumas n ve oda s cakl na uyum sa lamas n bekleyiniz T
162. aningful entry or selection is entry possible possible Table 3 1 Status message via input keys LEDs on the back of One red and one green LED on the back of the X4000 basic unit see Figure 3 X4000 2 page 39 indicate the general status of each of the individual interfaces If the green LED flashes or lights this always means fault free operation If the red LED flashes or lights this indicates a fault You can obtain more detailed status information via the display the Setup Tool or an SNMP Management Tool X4000 User s Guide m m 63 Bg Hardware Description and Installation 64 3 4 2 Expansion Cards The expansion cards are equipped with LEDs which respond as described below if the cables are connected BRI Expansion Card X4E 2 3BRI The BRI expansion card has six LEDs which are assigned in pairs red and green to each port The LEDs indicate the following status messages D D o green X 1 B channel is used LED X 2 B channels are used None of the B channels used redLED X D channel missing or autoconfiguration failed X Layer 1 not stable Table 3 2 LED status messages of a BRI expansion card PRI G 703 Expansion Card X4E 1 2PRI The PRI G 703 expansion card has two LEDs The top LED is assigned to the first port Unit 0 and the bottom LED to the second port Unit 1 X4000 User s Guide Status Messages via LEDs Bg The LEDs indicat
163. as the following pin assignment b O or D gna b O or D 101 ChGND 1 ChGND 101 102 SigGND 19 SigGND 102 103 TDB 22 gt RDB 104 103 TDA 4 gt RDA 104 104 RDB lt 24 TDB 103 104 RDA lt 6 TDA 103 105 RTSB 25 gt RTSB 106 105 RTSA 7 gt CTSA 106 106 CTSB lt 27 RTSB 105 106 CTSA lt 9 RTSA 105 115 RCB lt 26 TCB 114 115 RCA lt 8 TCA 114 108 2 DTRB 30 gt DSRB 107 108 2 DTRA 12 gt DSRA 107 109 DCDB lt 31 DCDB 109 109 DCDA lt 13 DCDA 109 107 DSRB lt 29 DTRB 108 2 107 DSRA lt 11 DTRA 108 2 114 TCB lt 23 TCB 114 114 TCA lt 5 TCA 114 Table 13 6 Pin assignment of DB 37 plug for V 36 ISO 4902 398 mmmsms X4000 Users Guide Features of Basic Unit KB DB 25 Plug for X 21bis A DB 25 plug to ISO 2110 is normally used for an X 21bis interface Figure 13 7 DB 25 plug The DB 25 plug has the following pin assignment 101 ChGND 1 ChGND 101 103 TD 2 gt RD 104 104 RD 3 TD 103 105 RTS 4 gt CTS 106 106 CTS lt 5 RTS 105 107 DSR lt 6 DTR 108 2 102 SigGND 7 SigGND 102 109 DCD lt 8 DCD 109 114 TxC 15 TxC 114 115 RxC 17 RxC 115 108 2 DTR 20 J DSR 107 113 XTC 24 gt I RxC TxC 114 115 VCC 5V 25 VCC 5V Table 13 7 Pin ass
164. assignment DELE C LN w sme 8 jS Figure 13 13 LAN interface RJ45 socket of LAN expansion card 13 3 4 XTR S M L Resource Cards with Digital Modems The resource cards with digital modems are available in the following versions for X4E 3BRI and X4E 2PRI E XTR S with 8 digital modems 408 mmmsmm X4000 Users Guide Features of Expansion and Resource Cards E OGD E XTR M with 12 digital modems B6 XTR L with 30 digital modems Operating temperature 0 C to 40 C Relative humidity 20 to 90 non condensing in operation 5 to 95 non condensing in storage Table 13 14 Features of resource cards with digital modems If you are using an expansion card with resource card s in the X4000 built in unit BinTec Communications AG recommends that you use the fan unit obtainable as optional equipment 13 3 5 XTR ENC Resource Card for Encryption and Compression The resource cards for encryption and compression offer hardware support for STAC compression and symmetric encryption Encryption processes supported DES 3DES CAST Twofish and Blowfish Operating temperature 0 C to 40 C Relative humidity 20 to 90 non condensing in operation 5 to 95 non condensing in storage Table 13 15 Features of resource card for encryption and compression The ISDN PRI or G 703 expansion card is equipped as standard with hardware support for encryption and co
165. ateway IP Address IP address of the host to which X4000 should forward the IP packets Metric The lower the value the higher the priority of the route range of values 1 14 Table 7 22 IP Routing ADD 178 msmmmm X4000 Users Guide Configuring WAN Partners 7 Default route The Network field contains the following selection options LAN Route to a destination host or LAN that can be reached via X4000 s LAN interface WAN without transit Route to a destination host or LAN that can be network reached via a WAN partner without transit network WAN with transit network Route to a destination host or LAN that can be reached via a WAN partner with transit network Refuse X4000 discards data packets using this route and sends the sender a message saying the destination of the packet is unreachable Ignore X4000 discards data packets using this route without sending a status message Table 7 23 Network You can only configure one default route on your X4000 If you set up access to the Internet you must therefore configure the route to your Internet Service Provider ISP as a default route If for example you configure a corporate network connection only enter the route to the head office or branch office as a default route if you do not configure Internet access over X4000 If for example you configure both Internet access and a corporate network connection enter a
166. ation the corresponding EAZ s by mapping For example select for Number 1234 the entry Item CAPI 1 1 EAZ 0 Mapping and for Number 5678 the entry Item CAPI 1 1 EAZ 1 Mapping CAPI 2 0 evaluates the MSN directly and translation to EAZ is not necessary You can use the same CAPI 1 1 EAZ x Mapping entry for each Number i e a single entry is sufficient You should certainly try to change your PC system to CAPI 2 0 so that you can also use new features X4000 User s Guide ssamms 147 Basic Configuration of Basic Unit with Setup Tool Todo Make the following entries gt Select the Item e g PPP routing Enter the Number e g 10 Select the Mode e g right to left Select the Bearer e g data VV OY Y Press SAVE You have returned to the menu CM 1BRI ISDN SO INCOMING CALL ANSWERING The entries are saved and displayed in the list You have thus assigned a service PPP routing to one of your phone numbers 10 This means that when a data call is received by Called Party Number 10 it is put through to the service PPP routing Repeat these steps until you have assigned to all phone numbers the services to be reached under these numbers This concludes the configuration of Incoming Call Answering X4000 now distributes the incoming calls to the internal services Advanced CM 1BHI ISDN S0 ADVANCED SETTINGS contains settings for X 31 TEI see configuration chapter 8 1 4 page 197 If you use a leas
167. attack is an attempt to flood a system or force a restart by sending certain packets This means the system or a certain service can no longer be used Some Denial of Service attacks on the router itself are already prevented by the internal coding For example all X4000 interfaces for which you activate Network Address Translation NAT protect the connected PCs against some DoS attacks with X4000 User s Guide Special Features 10 fragmented packets The packet fragments are assembled again on passing through NAT before the packet can pass the router You can prevent some DoS attacks that operate with fake source IP addresses by using the Back Route Verification function see chapter 10 2 10 page 352 You can counter DoS attacks that speculate on destroying the system by causing the log files to overflow syslog messages by suitably positioning and limiting the size of these files X4000 User s Guide mm m 359 10 Configuration of Security Functions and Firewall 360 10 5 Checklist The following list indicates the most important critical security points that you should observe when configuring X4000 E Have you changed all four passwords for system access admin read write http See chapter 4 2 page 76 E Are the activities of your X4000 sufficiently accurately logged on at least one external computer and do you check the syslog messages regularly See chapter 10 1 1 page 308 E Have you restricted access to
168. ause in the MIB table isdnCallHistoryTable To interpret the entries see the Software Reference Check CALLS to determine if you have made the necessary entries for incoming calls Check if Encapsulation in WAN PARTNER EDIT is the same for both connection partners Check if Authentication in WAN PARTNER EDIT W PPP is the same for both connection partners X4000 User s Guide Typical Errors and Procedure 12 12 2 3 IPX Routing Here you will find some problems that could crop up with IPX routing together with suggestions on how they can be solved Use the Setup Tool or MMI to check if you have entered the right license 9 Use the Setup Tool to check in IPX if the entry under Internal Network Number is unique in the LAN A server exists in a remote LAN LAN LAN connection over ISDN but is invisible for clients in the local LAN The server could be invisible for clients because SAP packets are not received from the server gt Check the entries in Update Time and Age Multiplier in WAN PARTNER EDIT IPX The settings must be compatible with the settings on the servers in X4000 s LAN gt Check if a router between them filters out the SAP packets 9 Check with isdnlogin if an ISDN connection can be made between client and server 9 Check if you have made the correct entries in Local IPX NetNumber and Encapsulation under CM 100BT FAsT ETHERNET and if the server can receive them When the client
169. ay to start running your X4000 You can perform basic configuration via the serial connection of your Windows PC This basic configuration includes all the important settings of the router access to the Internet via an Internet Service Provider ISP as well as connection to a WAN partner e g to a corporate headquarters As the Configuration Wizard guides you step by step through the configuration detailed knowledge of networking technologies is not necessary Graphic illustrations and a detailed online help system you can access at any time during the configuration give you additional support The Configuration Wizard is one of several possible ways of configuring your X4000 Access to your X4000 in this case is via the serial interface Please note that you can only use the Configuration Wizard to configure your ISDN BRI interface on the basic unit For configuration of WAN connections over the X 21 V 35 V 36 or X 21bis interface you must use the Setup Tool Advanced configuration chapter 8 page 187 and setting up the security functions chapter 10 page 307 are done after this using the Setup Tool This chapter tells you how to carry out the following tasks E n advance of configuration chapter 6 1 page 110 Bb Install Windows software Install BRICKware for Windows chapter 6 2 page 112 Configure X4000 with the Configuration Wizard chapter 6 3 page 113 E Make possible additional settings on your PC chapter 6 4 pa
170. azione L apertura da parte di personale non autorizzato e riparazioni non corrette possono esporre l utilizzatore a notevoli pericoli p e scossa elettrica Affidare l esecuzione delle riparazioni all apparecchio soltanto ad un centro di assistenza BinTec autorizzato II rivenditore di fidu cia pu fornire informazioni sulle sedi di questi centri In tutti gli altri casi de cade ogni diritto alla garanzia L apparecchio non deve assolutamente essere pulito con acqua L infiltrazione di acqua pu causare gravi pericoli per l utente p es scossa elettrica nonch gravi danni all apparecchio Non utilizzare in nessun caso abrasivi detergenti a base alcalina attrezza tura affilata o abrasiva ummm X4000 Users Guide Algemene veiligheidsinstructies in het Nederlands In de volgende paragrafen vindt u veiligheidsinstructies die u bij de omgang met uw router absoluut moet in acht nemen Transporten BI Transporteer en bewaar X4000 alleen in de originele verpakking of in een bewaring andere geschikte verpakking die bescherming biedt tegen schokken en stoten Opstellen en BI Let voor het opstellen en het bedrijf van X4000 op de instructies voor de in bedrijf nemen omgevingsvoorwaarden vergelijk technische gegevens Gebruik een harde en vlakke ondergrond E Elektrostatische opladingen kunnen schade aan het toestel veroorzaken Draag daarom een geaarde manchet rond de pols of raak een geaard op pervlak aan vooraleer u de bussen of
171. by X4000 to the WAN partner In IPX networks RIP and SAP packets are sent as 9 broadcasts to connected networks to provide information about current routes and services The data flow caused by this is acceptable in the LAN but you must make a setting here to control the data flow for networks connected via WAN connections Update Time Defines the time intervals at which periodic updates are sent Age Multiplier If routes and services entered are not renewed during Update Time x Age Multiplier they are deleted This prevents accumulation of unnecessarily large numbers of routes and services that are not used Table 8 53 WAN PARTNER Epit IPX 272 mmmmm X4000 Users Guide IPX Settings B The Send RIP SAP Updates field contains the following selection options which are explained with the aid of a table To do off never no no All routes and services must be entered statically triggered piggyback only for yes yes This is the default on changes only if changes setting which is link active sufficient in most cases triggered on changes only for yes no Less data traffic than changes triggered piggyback but also less reliable piggyback only if link never yes yes At least 1 static route active and 1 static service must be entered for the WAN partner passive triggered on never yes no At least 1 static route changes only if link and 1 static service mus
172. c CALL ANSWERING ADD X4000 User s Guide sssas 145 146 Basio Configuration of Basic Unit with Setup Tool The Item field includes the following selection PPP routing Default setting for gt gt PPP routing Also applicable for the PPP connections below ISDN Login Enables logging in with gt gt isdnlogin PPP 64k Enables 64 kbps PPP data connections PPP 56k Enables 56 kbps PPP data connections PPP Modem Only available if expansion card and resource card with digital modems are installed Assigns incoming analog calls to the PPP routing service The digital modem on the resource card that accepts this call uses the settings for Modem Profile 1 which were selected in the menu MODEM PROFILE CONFIGURATION PROFILE 1 PPP DOVB Data transmission Over Voice Bearer useful in the USA for example where voice connections are sometimes cheaper than data connections PPP V 110 1200 38400 Enables PPP connections with V 110 at bit rates of 1200 bps 2400 bps 38400 bps Pots Not available in X4000 PPP Modem Profile 1 8 Only available if expansion card and resource card with digital modems are installed Assigns incoming analog calls to the PPP routing service The digital modem on the resource card that accepts this call uses the settings for Modem Profile 1 8 which were selected in the menu MODEM PROFILE CONFIGURATION PR
173. can be found in chapter 8 page 187 The configuration of security functions and Firewall can be found in chapter 10 page 307 If you wish to run communication applications on the hosts in the LAN with your X4000 basic unit e g RVS COM Lite you must configure the remote CAPI on the hosts see chapter 6 4 page 115 and assign the extension numbers accordingly Incoming call answering page 141 When you have completed the configuration you should save your configuration file chapter 7 4 page 186 X4000 User s Guide Configuring WAN Interfaces 7 2 Configuring WAN Interfaces The necessary steps for configuring the WAN interfaces of X4000 are described below step by step The basic unit is equipped with the following WAN interfaces HM ISDN BRI interface see chapter 7 2 1 page 137 E Two serial interfaces X 21 V 35 V 36 interface and X 21bis interface see chapter 7 2 2 page 148 ADSL W You can also configure the LAN interface as an interface to the WAN by providing a connection to T DSL the ADSL connection of Deutsche Telekom using PPP over Ethernet see chapter 7 2 3 page 155 If you use a LAN expansion card see chapter 9 3 2 page 288 Installing an expansion card enables other WAN interfaces to be used on X4000 if applicable see chapter 9 page 277 7 2 1 Configuring the ISDN BRI Interface You can use the ISDN BRI interface of X4000 for both dialup and leased lines over ISDN Proceed as fo
174. ccounting System chapter 10 1 3 page 316 HTTP Status Page chapter 10 1 4 page 320 Java Status Monitor chapter 10 1 5 page 321 Activity Monitor chapter 10 1 6 page 322 10 1 1 Syslog Messages All major events on X4000 s various subsystems gt gt gt ISDN gt gt PPP gt CAPI etc are logged in the form of syslog messages system logging messages The number of details visible depends on the level set eight steps from critical and information to debug The logged data are saved by X4000 in a list of adjustable length All information can be and should be passed to one or more external computers for saving and further processing e g to the system administrators computer The syslog messages are lost when you restart X4000 Avoid forwarding syslog messages to log hosts reached over a dialup connection This raises your telephone bill unnecessarily X4000 User s Guide Activity Monitoring Syslog Demon Make sure you only pass syslog messages to a safe computer Check the data regularly and ensure that there is always enough spare capacity available on the hard disk of your PC All Unix operating systems support the recording of syslog messages for setting up a Syslog Demon in Unix see the Software Reference For Windows PCs the Syslog Demon included in DIME Tools can record the data and distribute to various files depending on the contents see BRICKware for Windows Settings for syslog messages are m
175. ce before you touch sockets or extension cards of X4000 Only grip extension cards at the edges and do not touch components or conductor tracks Keep the unused extension slot covered with the dummy cover to prevent objects getting inside the equipment Foreign bodies located in the equipment during operation create a danger of electric shock and short circuits Ensure that no sharp objects can damage the window of the display module Protect the display module against knocks and dropping and only connect it to the RJ11 socket provided for this purpose on X4000 to prevent damage to X4000 and the display module Make sure the cables do not cover the ventilation slots of the equipment or interfere with ventilation Obstructing the ventilation of X4000 may cause damage to the equipment Damage caused by lack of ventilation invalidates the guarantee Never open the basic unit or tamper with the mains unit in any way as this can create a lethal danger through electric shock Don t remove any fixing screws on the basic unit Condensation may occur externally or internally if the equipment is moved from a colder room to a warmer room When moving the equipment under such conditions allow ample time for the equipment to reach room X4000 User s Guide m m 31 ES General Safety Precautions Operation according to 32 the regulations temperature and to dry out completely before operating Observe the ambient conditions under Technical
176. ce di condensazione Attendere finch l apparecchio ha superato lo sbalzo di temperatura ed assolutamente asciutto prima di X4000 User s Guide Utilizzazione conforme alla destinazione funzionamento metterlo in funzione Attenersi alle condizioni ambientali riportate nei dati tecnici Verificare se la tensione di rete locale corrisponde alle tensioni nominali dell alimentatore L apparecchio deve essere impiegato alle seguenti con dizioni 100 240Vc a 50 60Hz Accertarsi che la presa con contatto di terra dell installazione sia accessibi le Per la completa separazione dell apparecchio dalla rete di alimentazio ne necessario estrarre la spina Per il cablaggio si deve seguire la sequenza descritta nel manuale Utiliz zare soltanto i cavi rispondenti alle specifiche riportate in questo manuale o quelli originali forniti in dotazione Se si utilizzano altri cavi la BinTec Communications AG non risponde dei danni o della riduzione di funziona lit che ne risultano In questi casi decade la garanzia per l apparecchio Per il collegamento dell apparecchio ci si deve attenere alle istruzioni del manuale Disporre i collegamenti in modo che non costituiscano fonte di pericolo pericolo d inciampo e che non possano essere danneggiati Non collegare n disconnettere n toccare i cavi di trasferimento dati durante un temporale X4000 concepito per l impiego negli uffici Come Router per reti multiprotocollo
177. chine gt Click Yes to start configuration In the Remote CAPI tab enter the IP address of your X4000 and the user name and password of users of communications applications set up previously with the Configuration Wizard if these have not already been entered Click Use these values Click OK To be able to use fax services on your PC you must install a CAPI application such as RVS Com Lite RVS Com Lite is included on your BinTec Companion CD Please note The license for RVS COM Lite is a single user license You can purchase additional licenses from your dealer If you want to use your data communications network with BinTec s Remote CAPI RVS Com Lite will provide you with the necessary COM port driver gt To install RVS COM Lite click RVS Com Lite in the setup program and follow the instructions An online help system is also available You can set up WAN access over X4000 e g to the Internet for all PCs located in a network with X4000 In order to do this you must enter X4000 as gateway and as DNS for all those PCs that were not configured as DHCP clients Proceed as follows Inthe start menu click Settings Control Panel Double click Network 9 Select TCP IP in the network components list for Windows NT it is in the Protocol tab and click Properties Enter the IP address of X4000 in the Gateway tab under New Gateway Click Add Windows NT Click the IP Address tab and enter the IP address of X4000
178. connection again Sl 7 You can also use any other terminal program that can be set to 9600 bps 8N1 8 data bits no parity 1 stop bit software handshake none and VT100 O emulation If you use the Configuration Wizard for configuration you also connect to X4000 over the serial interface but you do not access the SNMP shell The start window of the Configuration Wizard appears in this case see Figure 6 1 page 113 Unix If you are using a Unix PC you cannot use HyperTerminal You will require a terminal program such as cu under System V tip under BSD or minicom under Linux The settings for these programs are the same as listed above Example of a command line for using cu cu s 9600 c dev ttyb Example of a command line for using tip tip 9600 dev ttyb X4000 User s Guide Connection Methods oqdED To do Assigning IP addresses Running telnet Windows 4 1 3 Connecting Over a LAN You can reach X4000 from the LAN over the gt telnet service Telnet is normally available on every PC To be able to reach your X4000 over the LA it should already have an gt IP address and gt gt netmask If this is not the case and X4000 has therefore not yet been configured you have two options N M Enter the IP address and netmask via the input keys of the MMI see chapter 5 page 93 E Ifyou are using Windows you can assign X4000 an IP address by using the gt DIME Tools assistant If you
179. cter le service apr s vente Tout autre cas annule le droit la garantie L appareil ne doit tre en aucun cas nettoy l eau Une p n tration d eau dans l appareil pourrait entrainer des risques graves pour l op rateur risque d lectrocution par ex et des dommages importants de l appareil Ne jamais utiliser de produits r curants de produits de nettoyage alcalins ni d outils tranchants ou grattants X4000 User s Guide mm m 429 15 General Safety Precautions in 15 Different Languages 430 Aa i i c D o o n o 21iG akK Aou80g G napayp pou 0a Bpeite tic o nyleG aopadsiag Tic omtoiec 0a rip riet va A ere OMWOSTNMOTE uT OWLV oag KATA TN xprjon rou Router Metagopa kar W aro8rnkeuon Eykar craon kai Bl amp vap amp n TNG Aeitoupyiac E E igi BEEBE Na petap pete Kal va amoOnkevete To X4000 vo otn yvrjola cuokeuao a oe uia GAAN KATGAANAN cuokseuaoia n onoia va EaodcaAicegi ripoorao a AT TIG KPOUGE C KAL ra xrumrjpara Mpv tv ykar craon Kal Thv Evap n tq Aettoupyiac rou X4000 va A gere um yiv oag Tic o nyieG OXETIKA uE TIC ouvOr keq TiepiBaAAovtoc gA ne Texvik otolxeia Xpnotiponouwjore va otaGepo kal eninedo un a po HAekTpootaTikad oopria pnropoUv va rmpokaA couv gA gn otn OuoKEUN Fi auto npiv pOere oe gradr ue TIG UMOdOXEC rj TNG mrAativeg avag Ouiona tou X4000 8a mp net va gopate va QVTLOTATIKO HAVIKE
180. d i e is still in the ex works state Connection is then obtained by means of a BinTec router that is already configured or an ISDN card in the remote LAN using a number of X4000 s ISDN connection in your own LAN e g 1234 It is thus possible for the administrator at a remote LAN to configure X4000 in a home office which is hundreds of kilometers away The X4000 in the home office e g your LAN merely has to be connected to an ISDN line and turned on amp isdnlogin 1234 i ISDN _ amp X4000 Router in the unconfigured Remote LAN T 1234 Your LAN Remote LAN Figure 4 2 Connection over ISDN login for remote maintenance X4000 User s Guide Connection Methods 4 Access over ISDN costs money If X4000 and the PC are in the same LAN it is i cheaper to access X4000 over the LAN or the serial interface e Todo gt Connect X4000 to the ISDN To reach X4000 over ISDN login proceed as follows gt Login on your BinTec router in the remote LAN in the usual way n the SNMP shell type in isdnlogin number of the ISDN connection of X4000 gt g isdnlogin 1234 The login prompt will appear in the window You are now in the SNMP shell of X4000 Continue with chapter 4 2 page 76 X4000 User s Guide m m 75 Configuration Requirements 76 To do 4 2 Logging In Regardless of how you access X4000 the gt gt SNMP shell of X4000 with the login prompt always appears first
181. d installing a fan unit etc carry out the steps described above in the reverse order 44 ummm X4000 Users Guide Basic Unit gt Installation with Connections Towards the Front and Changing Over the Display Caution It is not necessary to open the housing for connecting or operating or for installing or removing the expansion card If the housing is opened this tears the guarantee label on X4000 which invalidates the guarantee gt Never open the housing Danger Live components are exposed when the equipment is open There is a risk of electric shock X Never open the housing Caution X4000 must be switched off before changing over the display unit Changing over the display unit with the equipment switched on may damage both the display and the basic unit gt Switch off X4000 before changing over the display unit X4000 User s Guide m m 45 B Hardware Description and Installation Proceed as follows Figure 3 7 Removing the plastic cover Step1 gt Remove the plastic cover of X4000 from the metal housing This is done by pressing the edge of the housing on the narrow side of the front panel marked with a grip slightly towards the display see Figure 3 7 page 46 This releases the plastic cover which can be removed from the front The blue Power LED with the BinTec logo is still visible after removing the front panel Step 2 Changing over gt Disconnect the display cable
182. d X 21bis is checked and transferred as L1State E disabled default value The status is not checked the physical line is always up In this setting you should monitor the interface line in some other way e g with PPP Keepalive Table 7 11 CM SERIAL SERIAL Unit 0 or CM SERIAL SERIAL UNIT 1 X4000 User s Guide samme 153 Basic Configuration of Basic Unit with Setup Tool 154 To do Advanced configuration Connector DTE default value Connector DCE Function DTE Cables Standard cable Pin X 21 see DB 15 Plug for X 21 page 395 1 assignment v 35 see M34 Plug for V 35 page 396 V 36 see DB 37 Plug for V 36 page 397 DTE DCE Function Cables DTE cable DCE cable 2 Pin X 21bis see DB 25 Plug for X 21bis page 399 assignment Table 7 12 Use of Connector in the Setup Tool Proceed as follows to configure the serial interfaces the example values given are necessary if you connect X4000 to Datex P Go to CM SERIAL SERIAL UNIT 0 or CM SERIAL SERIAL UNIT 1 Select Interface Type e g X 21 Select Connector e g dte Select Clock Mode e g auto Select Speed e g 64000 bps Select Layer 2 Mode e g auto Select Interface Leads e g disabled Press SAVE You have returned to the main menu and the entries have been saved V V VV NV YN NN If you use a leased line you can implement a backup solution using the Band
183. ding and receiving of RIP packets in version 1 RIP V2 Enables sending and receiving of RIP packets in version 2 RIP V1 V2 Enables sending and receiving of RIP packets in both version 1 and version 2 Table 8 28 RIP Send and RIP Receive Proceed as follows Go to WAN PARTNER EDIT IP ADVANCED SETTINGS Select RIP Send Select RIP Receive Confirm with OK Press SAVE Press SAVE Go to CM 100BT FAST ETHERNET ADVANCED SETTINGS Select RIP Send Select RIP Receive V Y V VN NV YN NN YN Press SAVE X4000 User s Guide samme 231 B Advanced Configuration of the Basic Unit with the Setup Tool 8 2 9 Compression 232 Data compression You can increase the data throughput and so reduce the connection costs by using gt gt data compression X4000 supports several options depending on the gt gt encapsulation selected e g PPP see chapter 7 3 page 159 gt gt STAC The industry standard STAC data compression Check Mode 3 in RFC 1974 implemented in X4000 can increase the data throughput on the PPP ISDN connections MS STAC STAC data compression for Windows gt clients Check Mode 4 in RFC 1974 Select this if you dial into a Windows Remote Access Server Van Jacobson Header Compression gt gt VJHC Reduces the size of gt TCP IP packets Van Jacobson Header Compression can be used in addition to the above mentioned compression algorithms If the far station does no
184. e Chain Interface Repeat these steps to define several entries for the selected NAT interface 10 2 8 Filters Access Lists IP filters gt gt Access Lists in X4000 are based on a concept of gt filters rules and so called chains IP filters respond to incoming data packets which means they can allow or deny access to X4000 for certain data A filter describes a certain part of the IP data traffic based on the source and or destination IP address gt gt netmask protocol and source and or destination port If you define a filter you are telling X4000 Watch out for all data packets that match the following You use a rule to tell X4000 what to do with the data packets it has filtered out i e whether or not it should allow them to pass through You can also define several rules which you arrange in the form of a chain to obtain a certain sequence There are various approaches for the definition of rules and rule chains E Allow all packets that are not explicitly prohibited i e Deny all packets that match Filter 1 Deny all packets that match Filter 2 Allow the rest E Allow only what is explicitly permitted i e Allow all packets that match Filter 1 Allow all packets that match Filter 2 Deny the rest E Combination of the two possibilities described above Several rule chains can be created either completely or partly separated from each other The common use of filters is possible a
185. e extension numbers range is a group of numbers used for selecting terminals within the gt gt PABX A rule that defines a set of packets that should or should not be transmitted by the router Designates the whole range of mechanisms to protect the local network against external access X4000 provides protection mechanisms such as gt NAT gt gt CLID gt PAP CHAP access lists etc File Transfer Protocol A TCP IP protocol used to transfer files between different hosts Entrance and exit transition point Component in the local network that offers access to other networks also offers transitions between different networks e g gt LAN and gt gt WAN High Data Rate gt gt DSL The gt gt upstream and gt gt downstream data rates are gt gt T1 1 554 Mbps and gt E1 2 048 Mbps over ranges up to 4 km The main HDSL applications are High speed data communication over leased lines High Data Rate gt gt DSL version 2 The gt gt upstream and gt gt downstream data rate is 1 554 Mbps over ranges up to 4 km X4000 User s Guide Glossary Host name Hub Internet IP IP address IPX SPX ISDN ISDN Basic Rate Interface ISDN BRI The main HDSL applications are High speed data communication over leased lines A name used in gt IP networks as a replacement for the corresponding IP address A host name consists of an ASCII string that uniquely identifies the host computer
186. e Utilization Weighting Weighting within the interval considered for adding and dropping B channels Line Utilization Sample sec Length of the interval over which the mean of the measured throughput data is taken and weighted with Line Utilization Weighting Gear Up Threshold Utilization threshold at which another B channel is added for a connection Gear Down Threshold B channels are dropped until the remaining channels have at least the percentage utilization degree remaining here D Channel Queue Length Threshold value for the number of bytes accumulated in the D channel at which the system is to change to the B Channel Mode Maximum Number of Dialup Channels Maximum number of channels that may be opened The value is defined in the Total Number of Channels field under WAN PARTNER ADD ADVANCED SETTINGS Table 8 16 WAN PARTNER ADD B ADVANCED SETTINGS EXTENDED INTERFACE SETTINGS OPTIONAL X4000 User s Guide samen 213 B Advanced Configuration of the Basic Unit with the Setup Tool The following selection option in the Mode field is relevant for AO DI BAP Active Mode The Bandwidth Allocation Protocol BAP knows three different options for negotiating a bandwidth change It behaves as follows in Active Mode B6 Call Request one of the two communication partners wants to add a B channel adding the channel is initiated if applicable E Callback
187. e access to the Remote CAPI interface what applications are used on them and whether the connections used with these applications are desired Do you use BinTec s user concept chapter 7 3 page 142 Bb Are any additional user accounts created trouble free M Have you prevented the interception of connections on the Ethernet by a suitable LAN infrastructure X4000 User s Guide samme 361 10 Configuration of Security Functions and Firewall 362 mmmsmm X4000 Users Guide 11 Configuration Management In this chapter you will find instructions on the administration of your configuration files and on updating the X4000 software The following areas are covered E Administration of Configuration Files Where are the configuration files Whatis flash and memory How dol handle configuration files E Updating Software How do I keep in touch with the latest developments How do I load a new Boot Image X4000 User s Guide samen 363 11 Configuration Management 364 Flash Memory Operations Windows e Unix 11 1 Administration of Configuration Files X4000 reads its configuration information from configuration files These configuration files are stored in the flash EEPROM electronically eraseable programmable read only memory of X4000 Several different configuration files can be stored in the flash memory The data also remains stored in the flash when X4000 is switched off The current
188. e do wskaz wek dotycz cych warunk w otoczenia por Parametry techniczne Urz dzenie nale y ustawi na trwa ym i r wnym pod o u Elektrostatyczna r nica potencjat w mo e doprowadzi do uszkodzenia urz dzenia Przed przyst pieniem do pracy nale y za o y na przegub r ki antyelektrostatyczn opask zabezpieczaj c lub dotkn uziemionej powierzchni zanim dojdzie do kontaktu d oni z puszkami lub kartami rozszerzenia X4000 Karty poszerzaj ce chwyta zawsze na obrze ach nie dotyka bezpo rednio cie ek drukowanych oraz element w elektronicznych Nie u ywane pole do dodatkowych wcisk w zamkn za lepkami zabezpieczaj cymi kt re zapobiegaj dostaniu si do wn trza niepo danych przedmiot w Obecno obcych element w w urz dzeniu w czasie jego eksploatacji stanowi zagro enie pora enia pr dem lub prowadzi do spi cia elektrycznego Zwr ci szczeg ln uwag aby okienko displaya pola wy wietlaj cego w module displaya nie zosta o uszkodzone ostrymi przedmiotami Nale y chroni modut displaya przed uderzeniami i upadkiem i zamyka w do tego celu przeznaczonej puszce RJ11X4000 aby nie dopu ci do szk d na X4000 i module displaya Okablowanie powinno by tak prowadzone eby szczeliny wentylacyjne i otwory w obudowie nie zostaly przystoni te i w konsekwencji nie doszto do zak cenia w a ciwego ch odzenia urz dzenia Niewystarczaj ce przewietrzanie X4000mo e doprowadzi do a
189. e extensions a practical allocation could look as follows AE BE O 10 PPP routing 11 CAPI CAPI 12 ISDN Login Table 7 7 Distribution of extensions to services If no entry is specified in the following menu every incoming ISDN call is accepted by the ISDN Login service To avoid this be sure to make the necessary entries here As soon as you have made one or more entries in this menu the matching incoming calls are distributed to the corresponding services In the unconfigured ex works state a user with the user name default and no password is always entered for the CAPI subsystem All calls to the CAPI are offered to all CAPI applications in the LAN To distribute incoming calls for the CAPI subsystem to defined users with password you should use BinTec s User Concept see chapter 8 1 2 page 190 You should then delete the user default without password All incoming calls that do not match an entry are passed on to the CAPI Service Now set the entries for Incoming Call Answering gt Goto CM 1BRI ISDN SO INCOMING CALL ANSWERING X4000 User s Guide sssas 143 Basic Configuration of Basic Unit with Setup Tool 144 X4000 Setup Tool BinTec Communications AG WAN INCOMING Incoming Call Answering MyRouter Item Number Mode Username CAPI 1 1 EAZ 1 Mapping 11 right to left CAPI 1 1 EAZ 1 Mapping 11 right to left ISDN Login 12 right to left PPP routing 10 right to left A
190. e local network In the next menu you tell the router the network number of the IPX LAN to which it is connected As long as X4000 does not have this information it cannot actively participate in its own IPX LAN 270 mmmmm X4000 Users Guide IPX Settings Bg To do The configuration is made in CM 100BT FAST ETHERNET Local IPX NetNumber The IPX network number of the LAN to which X4000 is connected Encapsulation Defines the type of header to be used for IPX packets in the LAN connected Possible values none Ethernet II Ethernet 802 2 LLC Ethernet SNAP Ethernet NOVELL 802 3 Table 8 52 CM 100BT Fast ETHERNET Proceed as follows gt Go to CM 100BT FAST ETHERNET Enter Local IPX NetNumber Select Encapsulation Press SAVE 8 4 58 Configuring WAN Partners If the connection to one or more WAN partners is implemented with the IPX protocol you must define a number of IPX specific settings for the WAN partner X4000 User s Guide sssas 271 B Advanced Configuration of the Basic Unit with the Setup Tool The configuration is made in WAN PARTNER EDIT IPX Enable IPX Enables IPX for the WAN partner Possible values B yes B no IPX NetNumber IPX network number of the WAN connection This is required by some IPX routers Send RIP SAP Updates Defines how often gt gt RIP Routing Information Protocol and SAP Service Advertising Protocol packets are sent
191. e network connection LAN LAN connection X4000 Users Guide samme 113 n Fast Configuration with the Configuration Wizard Basic Unit 114 A The basic router settings are essential They integrate X4000 in your local network and enable the use of communications applications CAPI Select the desired items and follow the instructions on the screen Caution All BinTec routers are shipped with the same user names and passwords As long as the password remains unchanged they are not protected against unauthorized use You must therefore change your system password when requested to do SO 9 Click Finish You have now completed the basic configuration with the Configuration Wizard If you have configured X4000 as a DHCP server with the Configuration Wizard the PCs must be assigned an IP address at the end of the configuration This happens automatically under Windows NT Under Windows 95 or 98 the Configuration Wizard starts the program WINIPCFG Click Yes to start WINIPCFG Click Renew and then OK X4000 User s Guide Configuring a PC Remote CAPI configuration RVS COM Lite COM port driver RVS COM Lite installation Internet access with X4000 6 4 Configuring a PC If you have selected communications applications CAPI during the configuration you will be asked to carry out CAPI configuration now Among other things CAPI allows you to send and receive fax messages and to use an answering ma
192. e the following status messages Port is not activated by license X Port is in G 703 Mode license for G 703 or PRI is activated and G 703 is selected under ISDN Line Framing X Port is in PRI Mode license for PRI is activated and G 703 is not selected under ISDN Line Framing Table 3 3 LED status messages of a PRI G 703 expansion card LAN Expansion Card X4E 2FE The LAN expansion card has four LEDs The two LEDs on the left side red and green are assigned to the first port Unit O and the two LEDs on the right side red and green to the second port Unit 1 The red LEDs light up if Ethernet collisions occur and the green LEDs indicate activity on the Ethernet g green X 100 Mbps Mode Fast Ethernet LED X 10 Mbps Mode Ethernet Port is not available red X Ethernet collision PEL No Ethernet collision Table 3 4 Status messages of LEDs on a LAN expansion card X4000 Users Guide a 65 3 Hardware Description and Installation 66 BOOTmonitor Functions 3 5 Boot Sequence X4000 passes through various functional states on booting E Start Mode E BOOTmonitor Mode E Normal Operation Mode After several selftests have been performed successfully in Start Mode X4000 changes to the BOOTmonitor Mode The BOOTmonitor prompt is displayed if you are connected to X4000 via a terminal program Press Space within four seconds of the
193. e transmission Establishing a connection involves a number of other components and subprotocols such as the authentication mechanisms gt gt PAP CHAP Security mechanism A method of authentication using passwords in PPP Point to Point Protocol over Ethernet The PPP over Ethernet PPPoE protocol permits Internet access over Ethernet via an gt gt xDSL modem or xDSL router An ISDN subscriber interface The PRI consists of a D channel and 30 B channels in Europe In America 23 B channels and a D channel Compare ISDN Basic Rate Interface Protocols are used to define the manner and means of information exchange between two systems Protocols control and rule the course of data communication at various levels decoding addressing network routing control procedures etc ARP Address Resolution Protocol Process used to determine the associated 9 MAC address for a host whose 9 IP address is known Rate Adaptive gt gt Digital Subscriber Line The data rate is up to 640kbps gt upstream and 1 5 9 Mbps downstream over ranges of up to 18 5 km The main RADSL applications are Internet access video on demand digital and compressed and high speed data communication over gt gt POTS Hardware clock with buffer battery Remote as opposed to local X4000 User s Guide Glossary Remote access Remote CAPI RIP RJ45 Router If a far station is not located in your own local networ
194. ease observe subsequent software releases and the corresponding release notes X4000 User s Guide samen 105 5 Man Machine Interface MMI Display with User Guide Monitoring 106 5 3 6 Monitoring The main menu Monitoring offers a facility for monitoring the operating temperature of X4000 OK OK C 40 50 60 Current temperature Temp M c OK Temp1 T le Temp2 Figure 5 9 Menus for monitoring X4000 E Current Temperature Displays the current operating temperature of X4000 in C The current operating temperature is always indicated by a black bar Temp shows the temperature measured by a sensor in the basic unit Temp1 and Temp2 show the temperature measured on the expansion card A PRI expansion card is equipped with two temperature sensors and a BRI or LAN expansion card with one sensor Temp1 The current maximum permissible temperature is 60 C and is indicated by a continuous line on the display The maximum permissible temperature can be changed by editing the MIB variable sysX4ConfigTempAlarmTrap for the basic unit Temp and the MIB variables sysX4ConfigTempAlarmTrapMod1 sysX4ConfigTempAlarmTrapMod2 for the expansion cards Temp1 and Temp2 If this temperature is exceeded X4000 generates traps which can be evaluated over the network ummm X4000 Users Guide Useful Short Cuts 5 4 Useful Short Cuts You can carry out a number of actions usi
195. ecessarily a computer server Menu driven tool for the configuration of X4000 The Setup Tool can be used as soon as the router has been accessed serial gt gt ISDN Login gt gt LAN Is the defined amount of time after which a connection is cleared if no more data is transmitted Short hold can be set to static fixed amount of time or dynamic according to charging unit Simple Network Management Protocol A protocol in the gt gt TCP IP protocol suite that is used to transport management information about network components Every SNMP management system contains an gt MIB SNMP can be used to configure control and administrate various network components from one system Such an SNMP tool is included in your router the Configuration Manager As SNMP is a standard protocol you can use any other SNMP managers e g HP OpenView Input level for SNMP commands ummm X4000 Users Guide Glossary SOHO Spoofing STAC Subnet Switch Synchronous TCP TCP IP TE TEI Small Offices and Home Offices Small offices and home offices Technique for reducing data traffic and thus saving costs especially in WANs The router answers as proxy for remote PCs to cyclically transmitted data packets with a monitoring function e g sign of life messages Data compression procedure A network scheme that divides individual logical networks into smaller physical units to simplify routing LAN switches are
196. ed using a rule chain Proceed as follows to define suitable filters Go to IP BANDWIDTH ON DEMAND BOD FILTER ADD Enter Description e g mail smtp out Select Protocol e g icp Enter Destination Address e g 172 16 08 15 Enter Destination Mask e g 255 255 255 255 Select Destination Port e g specify Enter Specify Port e g 25 port for SMTP Press SAVE A list of all the previously defined filters appears VV V V YN N NN Leave IP BANDWIDTH ON DEMAND BOD FILTER with Exit A rule for BOD is defined in a similar way to a rule for IP packets see chapter 10 2 8 page 335 Different rules normally consist of different filters X4000 User s Guide samme 215 B Advanced Configuration of the Basic Unit with the Setup Tool and can be interlinked to form a rule chain Each rule results in an action but the direction of the data packets for which it is to apply can also be stated for each rule i e for sent or received data packets Proceed as follows to define a rule for BOD gt Goto P BANDWIDTH ON DEMAND BOD RULES FOR BOD ADD In addition to the already familiar fields for definition of conventional rules see chapter 10 2 8 page 335 the menu contains the following fields Direction Direction of data packets to which the rule is to be applied Possible values E incoming incoming data packets E outgoing outgoing data packets E both incoming and outgoing data packets
197. ed as global name server If necessary X4000 can send or receive the addresses of name servers to and from WAN partners In Default Interface you can also select a WAN partner to whom a connection is set up as standard for name server negotiation if name resolution was not successful using the methods already stated Exchanging DNS Addresses with LAN Partners If X4000 is configured as DHCP server DHCP clients in the LAN can be sent IP addresses from name servers In this case the addresses of the global name servers entered in X4000 can be sent or the address of X4000 itself In the latter case DNS requests from the DHCP clients are sent to X4000 which either answers these itself or passes them on if necessary proxy function Exchanging DNS Addresses with WAN Partners X4000 User s Guide samme 249 8 Advanced Configuration of the Basic Unit with the Setup Tool 250 IPCP The same applies if the dynamic negotiation of name servers is activated for the IP configuration of a WAN partner and X4000 is operating in Server Mode Dynamic Name Server Negotiation server send In this case the addresses of the global name servers or the address of X4000 itself can also be sent for name server negotiations via IPCP to the WAN partner who is the IP address client If X4000 is operating in Client Mode Dynamic Name Server Negotiation client receive name server addresses can if necessary be negotiated with the WAN partner who i
198. ed line you can implement a backup solution using the Bandwidth on Demand feature see chapter 8 2 3 page 201 If you use this facility a dialup connection is set up to the connection partner if the leased line fails 7 2 2 Configuring Serial Interfaces The X4000 basic unit is equipped with two serial WAN interfaces WP The first serial port Setup Tool menu CM SERIAL SERIAL Unrr 0 can be used as interface type X 21 V 11 V 85 N 11 V 36 V 11 148 s msmsms X4000 Users Guide Configuring WAN Interfaces The setting in the Setup Tool Connector field see Table 7 11 page 153 enables the port to be changed so that X4000 can be operated in both DCE and DTE Mode Making the relevant settings in the Setup Tool Connector field physically reverses the signal direction and the pin functions E The second serial port Setup Tool menu CM SERIAL SERIAL Unit 1 can be used as interface type X 21bis V 28 The change from DCE to DTE Mode and vice versa for this port can only be made by using a DCE or DTE cable Port 1 X 21 Standard cable Standard cable V 35 Connector dte Connector dce V 36 Port 2 X 21bis DTE cable DCE cable Table 7 10 Functionality of serial ports X4000 User s Guide sssas 149 Basic Configuration of Basic Unit with Setup Tool Configuration with the Setup Tool The following menu is available for configuring the X 21 V 35 V 36 and X 21bis interface
199. eknik Bilgiler deki evre ko ullar n dikkate al n z Yerel ebeke geriliminin ebeke par as n n nominal gerilimine uygun olup olmad n kontrol ediniz Cihaz a a daki ko ullar do rultusunda al t r labilir 100 240 VAC 50 60Hz Koruyucu kontak prizinin montaj i in rahatl kla ula labilecek durumda olmas n sa lay n z ebekeden tamam kopmak i in elektrik fi inin prizden ekilme i gerekir Kablolar takarken el kitapc ndaki s ralamaya dikkat ediniz Sadece el kitapciginda belirtilen verilere uygun veya cihazla birlikte g nderilen kablolar kullan n z Ba ka kablo kulland n z takdirde BinTec Communications AG meydana gelen hasar veya fonksiyonlardaki olumsuz etkilerden dolay sorumluluk stlenmez Bu durumlarda garanti hakk ortadan kalkar Cihaz ba larken el kitapcigindaki a klamalara dikkat ediniz Kablolar tehlike kayna olamayacak ve zarar g rmeyecek ekilde tak lma tehlikesi d eyiniz Firtina esnas nda veri iletisim hatlar n ne ba lay n z ne kart n z ne de bunlara dokununuz X4000 cihaz b ro ortam nda kullan m i in tasarlanm t r Multi Protokol Router olarak X4000 cihaz sistem konfigurasyonuna ba l olarak WAN ba lant lar kurmaktad r Istenmeyen masraflar nlemek i in r n mutlaka kontrol alt nda tutunuz X4000 cihaz b ro ortam nda kullan lan enformasyon teknik donan mlar i in ge er
200. elektrisk st t og kortslutning Pass p at ikke spisse gjenstander for rsaker skader p displaymodulens displayvindu Utsett ikke displaymodulen for st t eller fall og kople den kun til den hertil tiltenkte RJ11 kontakt p X4000 slik at du unng r skader p X4000 og displaymodulen Under tilkoplingen m du passe p at apparatets ventilasjons pninger ikke blir tildekket og at ventilasjonen ikke blir hindret Ved nedsatt ventilasjon av X4000 kan det oppst skader p apparatet Skader som oppst r p grunn av manglende ventilasjon f rer til tap av garantien pne ikke basisapparatet og utf r ingen manipulasjoner p nettdelen et tersom det i s fall er livsfare p grunn av elektrisk st t Fjern ingen festes kruer p basisapparatet Dersom apparatet blir tatt fra en kald omgivelse og inn i rommet der det skal brukes kan det oppst kondens b de p utsiden og p innsiden av apparatet Vent til routeren har tilpasset seg temperaturen og er helt t rr f r du tar den i bruk X4000 User s Guide Forskriftsmessig bruk drift Kontroller at nettspenningen pa stedet er identisk med nettdelens merke spenning Apparatet kan tas i drift under folgende betingelser 100 240 VAC 50 60Hz Kontroller at det er fri tilgang til installasjonens jordete stikkontakt Nettstop selet m trekkes ut for at apparatet skal vaere fullstendig frakoplet nettet F lg den rekkef lgen som er beskrevet i h ndboken under tilkop
201. en useless anyway X4000 User s Guide samme 237 rn Advanced Configuration of the Basic Unit with the Setup Tool 238 e odib ML eo In some countries e g Switzerland costs may still occur for these useless dial in attempts in spite of using Keepalive Monitoring If all PCs in the LAN at the branch office were inactive a connection to the head office is not set up automatically as soon as one of the PCs to be monitored is switched on The interface to the head office WAN partner is not activated i e a connection cannot be set up to the head office until X4000 has registered that a PC can be reached The amount of time that expires before X4000 indicates that a PC can be reached again depends on the monitoring interval set Interval The corresponding WAN partner i e the head office should be identifiable in X4000 via CLID Calling Line Identification If this is not the case Keepalive Monitoring may not function If Keepalive Monitoring is configured in X4000 for WAN partners that are authenticated over a RADIUS server Keepalive Monitoring does not function This means the relevant unnecessary connections cannot be prevented in this Way X4000 User s Guide Settings Specific to WAN Partners B Configuration is made in SYSTEM KEEPALIVE MONITORING ADD Group Defines a group of hosts whose reachability is to be monitored by X4000 Each host to be monitored is assigned to a group A total of te
202. entication none Keepalives off Link Quality Monitoring off ummm X4000 Users Guide Configuring WAN Partners In WAN PARTNER ADD ADVANCED SETTINGS Callback no Static Short Hold sec e g 120 Idle for Dynamic Short Hold 96 e g 0 Delay after Connection Failure sec e g 300 Channel Bundling no Layer 1 Protocol ISDN 64 kbps In WAN PARTNER ADD ADVANCED SETTINGS COMPUSERVE LOGIN Provider Compuserve Network Host CIS User ID your user name Password In WAN PARTNER ADD IP IP Transit Network dynamic client In WAN PARTNER ADD IP ADVANCED SETTINGS RIP Send none RIP Receive none Van Jacobson Header Compression off Dynamic Name Server Negotiation client receive IP Accounting off Back Route Verify off Route Announce up or dormant Proxy Arp off In IP RouTING ADD Route Type Default route Network WAN without transit network Partner Interface COMPUSERVE Metric e g 7 In IP NETWORK ADDRESS TRANSLATION COMPUSERVE Return Network Address Translation on X4000 User s Guide ssmsm 185 Basic Configuration of Basic Unit with Setup Tool 7 4 Saving the Configuration File After creating a working configuration on your X4000 make sure you save it From the Setup Tool main menu select Exit and press Return Another menu window opens X4000 Setup Tool BinTec Communications AG EXIT Exit Setup MyRouter Back to M
203. equest has still not been found after checking the last entry in the list there are two alternatives E The request is forwarded to the relevant service if no entry in the list refers to this service X4000 User s Guide Access Security 10 B6 The request is rejected if one or more entries for this service exist in the list but none of these matches the request Local filters therefore provide an additional tool that is different to handle than global filters and does not adversely affect performance in normal routing either X4000 User s Guide samme 349 10 Configuration of Security Functions and Firewall Configuration is made in IP LOCAL SERVICES ACCESS CONTROL ADD Service Defines the local X4000 service to which access is to be controlled with this entry Possible values snmp udp rip udp bootps udp dns udp telnet tcp trace tcp EI El m EJ EJ EJ Bb snmp tcp Bb capi tcp Bb tapi tcp B rfc1086 tcp Bb hitp tcp Bb nbns udp El statmon udp Verify IP Address Defines if the source IP address is to be checked when an incoming call is received for the service selected under Service Possible values E verify E don t verify 350 mmsms X4000 Users Guide Access Security 10 IP Address Only if Verify IP Address verify Defines an IP address or network address together with Mask from which incoming requests are allowed for the service selected unde
204. equests can therefore be answered more quickly bandwidth is reduced on the WAN connections and the costs of unnecessary connections are saved If a DNS request cannot be answered by any of the DNS asked this is saved in the cache as a negative dynamic entry As failed DNS requests requests that cannot be answered are not usually saved by applications or IP stacks these negative dynamic entries in the cache prevent frequent unsuccessful connection setups to external DNS The validity of the positive dynamic entries in the cache is given by the TTL Time To Live which is contained in the DNS record Negative entries are assigned the value Maximum TTL for Neg Cache Entries A dynamic entry is deleted from the cache when the TTL expires You use positive static entries to enter names with the associated IP addresses in X4000 If you save frequently needed IP addresses in this way X4000 can answer relevant DNS requests itself and the connection to an external name server is not necessary This speeds up access to these addresses For a small network such a name server can be configured in X4000 The installation of a separate DNS and the tedious updating of HOSTS files on the PCs in the LAN is not necessary With negative static entries a name is not assigned an IP address a corresponding DNS request is answered negatively and not passed to any other name server either You can easily change a dynamic entry to a static entry at the press
205. er 10 1 3 page 316 This enables you to set a limit for connections to X4000 to prevent unnecessary charges accumulating as a result of mistakes made during configuration X4000 User s Guide saman 187 8 Advanced Configuration of the Basic Unit with the Setup Tool 188 IP address pools MZ oco 8 1 General WAN Settings General WAN functions HM X4000 as Dynamic IP Address gt Server chapter 8 1 1 page 188 HM CAPI User Concept chapter 8 1 2 page 190 E General gt gt PPP Settings chapter 8 1 3 page 194 E Setting of X 31 TEI value chapter 8 1 4 page 197 These settings are not linked to certain WAN partners but concern all WAN connections 8 1 1 Dynamic IP Address Server X4000 can operate as a dynamic IP address server for PPP connections You can use this function by providing one or more pools of gt gt IP addresses These IP addresses can be assigned to dial in WAN partners for the duration of the connection Any host routes entered always have priority over IP addresses from the address pools That is when an incoming call has been authenticated X4000 first checks whether a host route is entered in the routing table for this caller If not X4000 can assign an IP address from an address pool if available If address pools have more than one IP address you cannot specify which WAN partner receives which address The addresses are initially assigned in order If a new dial in takes place within an int
206. er Voice Bearer useful in the USA for example where voice connections are sometimes cheaper than data connections V 110 1200 38400 For GSM connections with V 110 at bit rates of 1200 bps 2400 bps 38400 bps Modem Profile 1 8 Only available if expansion card and resource card with digital modems are installed Assigns incoming analog calls to the PPP routing service The digital modem on the resource card that accepts this call uses the settings for Modem Profile1 8 which were selected in the menu MODEM PROFILE CONFIGURATION PROFILE 1 8 PPTP PNS For VPN interface PPP over Ethernet For connections to ADSL see chapter 7 2 3 PPPoE page 155 and chapter 9 3 2 page 288 AO DI For using Always On Dynamic ISDN AO DI see chapter 8 2 4 page 206 Table 8 21 Layer 1 Protocol X4000 User s Guide samme 221 8 Advanced Configuration of the Basic Unit with the Setup Tool 222 Most of the entries for Layer 1 Protocol correspond to the entries for Item in CM 1BRI ISDN SO INCOMING CALL ANSWERING see Incoming call answering page 141 Proceed as follows gt Goto WAN PARTNER EDIT ADVANCED SETTINGS Select Layer 1 Protocol gt Confirm with OK Press SAVE 8 2 6 IP Transit Network When you enter a WAN partner in X4000 there are various options for indicating the IP address of the partner network HM You enter the gt IP address and
207. er aan de buiten en binnenkant van het toestel condensatie optreden Wacht tot uw toestel zich aan de temperatuur heeft aangepast en helemaal droog is vooraleer u het in gebruik neemt Neem de milieuvoorschriften in de technische gegevens in acht Ga na of de plaatselijke netspanning overeenstemt met de nominale span ningen van het netdeel Het toestel mag onder de volgende voorwaarden gebruikt worden 100 240 VAC 50 60Hz Zorg ervoor dat de veiligheidscontactdoos van de installatie vrij toeganke lijk is Om het toestel helemaal van het net te scheiden moet de netstekker uitgetrokken worden Let bij de aansluiting van de kabels op de volgorde zoals in het handboek wordt beschreven Gebruik enkel kabels die aan de specificaties in dit handboek voldoen of die meegeleverd werden Indien u andere kabels ge bruikt is BinTec Communications AG niet aansprakelijk voor mogelijke schade of het slecht functioneren van het toestel In dit geval vervalt de ga rantie Bij de aansluiting van het toestel de voorschriften in de handleiding in acht nemen Leg de kabels zodanig dat zij geen gevaarsbron struikelgevaar vormen en niet worden beschadigd Tijdens een onweer de datatransmissielijnen niet aansluiten uittrekken of aanraken X4000 is enkel voor het gebruik in een bureau omgeving geschikt Als multi protocol router bouwt X4000 afhankelijk van de systeemconfiguratie WAN verbindingen op Om ongewenste kosten te vermijden moet het
208. er the relevant system data and passwords Enter System Name of X4000 e g MyRouter Enter the Local PPP ID The entry can be the same as the System Name Enter your Location e g Europe Enter Contact e g SysAdmin Go to SYSTEM PASSWORD SETTINGS Enter admin Login Password Enter read Login Password Enter write Login Password Enter HTTP Server Password Press SAVE V V VV NV NN NN NN Press SAVE You have returned to the main menu and the entries have been saved The menu SYSTEM EXTERNAL Activity MONITOR contains the settings necessary for monitoring X4000 with the Windows Activity Monitor Tool see chapter 10 1 6 page 322 and BRICKware for Windows The menu SYSTEM EXTERNAL SYSTEM LOGGING contains the settings for syslog messages see chapter 10 1 1 page 308 The menu SYSTEM KEEPALIVE MONITORING contains the settings for the keepalive monitoring function see chapter 8 2 11 page 236 X4000 User s Guide samme 125 Basic Configuration of Basic Unit with Setup Tool 126 IP address gt gt netmask gt Encapsulation The menu SYSTEM TIME AND DATE contains the settings for manually entering the time and date in X4000 see chapter 8 3 1 page 242 7 1 3 Configuring the LAN Interface Now configure the LAN interface 10 100 Base T Ethernet of X4000 The LAN interface is the physical interface to the local network In the following menu enter the address where your router can be reac
209. erived Table 8 37 Time Protocol ISDN Proceed as follows to derive the system time via ISDN gt Goto IP STATIC SETTINGS Select Time Protocol SDN Enter Time Offset sec 0 Enter Time Update Interval sec e g 86400 corresponds to 24 hours VV Y Y Press SAVE After the first ISDN connection has been ended X4000 derives the system time from the ISDN Time server Proceed as follows to derive the system time from a time server gt Goto IP STATIC SETTINGS Select Time Protocol e g TIME UDP Enter Time Offset sec e g 0 244 mmmmm X4000 Users Guide Basic IP Settings B gt Enter Time Update Interval sec e g 86400 corresponds to 24 hours Y e od OGD Y Press SAVE Enter IP address or host name for Time Server X4000 now derives the system time via a time server X4000 adjusts its system time to the time set on the time server every 24 hours The gt gt DIME Tools contain a time server If you enter the IP address of your PC for Time Server make sure the time server of DIME Tools is active on your PC every time you start X4000 If your computer has no fixed IP address but is assigned its IP address dynamically via gt gt DHCP you cannot use your computer as a time server Setting the System Time Manually Configuration is made in SYSTEM TIME AND DATE Time is currently controlled by Shows the settings defined under IP STATIC SETTIN
210. ersion 1 and version 2 of RIP either exclusively or parallel RIP is configured separately for LAN and WAN Active and passive Routers can be defined as active or passive routers Active routers offer their routing entries to other routers via gt broadcasts Passive routers accept the information from the active routers and store it but do not pass on their own routing entries X4000 can do both WAN partner If you negotiate to receive and or send RIP packets from to your WAN partner X4000 can exchange routing information dynamically with the routers in the LAN of the WAN partner uL Receiving routing tables via the RIP is a possible security loophole as external computers or routers can change X4000 s routing functionality RIP packets do not set up or hold ISDN connections Configuration is made in E WAN PARTNER EDIT IP ADVANCED SETTINGS E CM 100BT FAST ETHERNET ADVANCED SETTINGS RIP Send Enables RIP packets to be sent via the interface to the WAN partner and LAN interface RIP Receive Enables RIP packets to be received via the interface to the WAN partner and LAN interface Table 8 27 WAN PARTNER Epir IP ADVANCED SETTINGS or CM 100BT FAST ETHERNET ADVANCED SETTINGS 230 nmmssms X4000 Users Guide Settings Specific to WAN Partners B To do RIP Send and RIP Receive contain the following selection options none Not activated RIP V1 Enables sen
211. erval of one hour an attempt is made to assign the same IP address assigned to this partner the last time Configuration is made in E P IP ADDRESS POOL WAN PPP E WAN PARTNER EDIT IP E WAN PARTNER EDIT IP ADVANCED SETTINGS X4000 User s Guide General WAN Settings B To do Pool ID Unique number for identifying the address pool A pool may comprise a number of address ranges IP Address First IP address in the address pool Number of Consecutive Addresses Total number of IP addresses in the address pool including the first IP address IP Address Table 8 1 IP IP ADDRESS POOL WAN PPP IP Transit Network Defines whether a transit network is to be used between X4000 and the WAN partner You must select dynamic server here if you assign an address pool Table 8 2 WAN PARTNER Enit IP IP Address Pool Pool ID of the address pool assigned to the WAN partner Table 8 3 WAN PARTNER Epir IP ADVANCED SETTINGS Proceed as follows gt Goto IP IP ADDRESS POOL WAN PPP ADD Enter Pool ID Enter IP Address VVVY Press SAVE Enter Number of Consecutive Addresses X4000 User s Guide saman 189 rn Advanced Configuration of the Basic Unit with the Setup Tool 190 User name and password Example gt Go to WAN PanrNER EDIT IP to assign an address pool to a WAN partner gt Select IP Trans
212. erve 182 T Online 182 IP Basic settings 242 Name resolution 246 Transit Network 222 IP address DHCP server 129 Entering with MMI 93 Entering with the Setup Tool 126 IP address pools 188 IP address server 188 PCs in the LAN 115 Pool 188 IPX 268 LAN interface 270 WAN partner 271 ISDN B channel 219 490 mmsmss s X4000 Users Guide Index J L ISDN BRI interface Configuring Technical data ISDN Login JAVA status monitor LAN interface ADSL access Configuring IPX Technical data LAN LAN connection Layer 1 Protocol Leased lines LEDs License Additional license Entering License card Line tapping security Local filters Logging in Mains unit Memory MIB MIB Reference MMI Changing over the display Display Entering IP address Entering netmask Input keys Operation Status information Monitoring functions in the Setup Tool X4000 User s Guide 137 392 74 141 321 155 126 270 391 159 219 137 148 63 93 276 BEEBE 491 EH Index MPPE 354 MS STAC 232 IN Name resolution 225 NAT 181 331 NetBIOS 225 NetBIOS filters 132 Netmask Entering with MMI 93 Entering with the Setup Tool 126 Network Address Translation 181 331 Novell networks 268 P pap 159 194 327 Passwords 76 123 Port 265 Ports 335 PPP authentication 159 327 General settings 194 PPP settings 194 PPTP 357 Proxy ARP 234 R Ram 364 Release Notes 22 Remote CAPI 115 141 330 Resetting to ex works sta
213. es in IP AccEss LISTS RULES Index Cannot be changed X4000 automatically issues a number to new rules defined here or displays the Index of existing rules Insert behind Rule Appears only if a new rule is defined Defines the rule behind which the new rule is inserted You start a new independent chain with none Action Defines the action to be taken for a filtered data packet Filters Filter used Next Rule Appears only if an existing rule is edited Defines the next rule to be used Table 10 16 IP Access Lists RULES The Action field contains the following selection options allow M Allow packet if it matches the filter allow M Allow packet if it does not match the filter deny M Deny packet if it matches the filter deny IM Deny packet if it does not match the filter ignore Use next rule Table 10 17 Action 342 mmmmm X4000 Users Guide Access Security 10 You can change the order of rules in a chain in the submenu IP Access Lists RULES REORG Index of Rule that gets Index 1 Defines the first rule in the chain Table 10 18 IP Access Lists RuLEs REORG X4000 User s Guide ssmaa 343 10 Configuration of Security Functions and Firewall If you reorganize such a chain X4000 renumbers the remaining rules according to the selection in Index of Rule that gets Index 1 REORG Before After Rule 1 1st Rule
214. ess if applicable Enter Partner s LAN IP Address if applicable Enter Partner s LAN Netmask if applicable VV VV NV YN YN YN Press SAVE 8 2 7 Transfer of DNS and WINS IP Addresses to WAN Partner A Domain Name Server gt gt DNS or Windows Internet Name Server WINS is used for converting host names and gt gt NetBIOS names into IP addresses X4000 User s Guide ssss 225 B Advanced Configuration of the Basic Unit with the Setup Tool name resolution Domain Name Servers form a hierarchical tree structure As soon as a request is sent to a Domain Name Server it tries to execute name resolution using its internal tables If it cannot find the name it asks a higher level DNS that it knows If you use the DNS Proxy function X4000 can save previously resolved names and IP addresses in the cache and on receipt of a request first checks if the desired address can be answered from the cache This keeps the costs of setting up WAN connections to name servers outside the LAN ata low level and optimizes performance in the LAN as requests to frequently used addresses or addresses already resolved are answered by X4000 itself How to configure the DNS Proxy function is described in chapter 8 3 2 page 246 When you enter a WAN partner in X4000 you can define whether X4000 sends or answers requests for WINS or DNS IP addresses Configuration is made in E P STATIC SETTINGS E WAN PARTNER EDIT IP ADVANCED SETTING
215. etnumber 0 Encapsulation none Bridging disabled Advanced Settings SAVE CANCEL Enter IP address a b c d or resolvable host name Entries are possible in this menu for IP configuration gt gt IPX configuration and gt bridging This chapter explains only the configuration of the gt gt IP Retain the preset values under IPX Configuration and Bridging X4000 User s Guide samme 127 Basic Configuration of Basic Unit with Setup Tool The following parts of the menu are relevant for this configuration step Local IP Number IP address of X4000 in the LAN Local Netmask Netmask of the network in which X4000 with Local IP Number is located Second Local IP Second IP address of X4000 in the LAN Number Second Local Netmask Netmask of the network in which X4000 with Second Local IP Number is located Encapsulation Defines the kind of header added to the IP packets that run over this LAN interface Possible values E Ethernet Il conforms to IEEE 802 3 E Ethernet SNAP You can generally retain the default value Ethernet II The LAN interface is called en1 for Ethernet II and en1 snap for Ethernet SNAP Mode Defines the mode in which the LAN interface is operated Possible values HM Auto default value Automatic detection of the LAN parameters is activated and the LAN interface is operated in the appropriate mode 10 Mbps Half Duplex 10 Mbps Full Duplex 100 Mbps Half Duplex 100
216. ettua pintaa ennen kuin kosket X4000 n liittimi tai laajennuskortteja Kosketa laajennuskortteja periaatteessa vain reunoista l k tartu rakenneosiin tai johdinratoihin Pid k ytt m tt m t laajennuskorttipaikat suojuksilla suljettuina jotta mit k n esineet eiv t voi joutua laitteen sis lle Jos laitteessa on k yt n aika na vieraita esineit siit aiheutuu s hk isku ja oikosulkuvaara Huolehdi siit ett mitk n ter v t esineet eiv t vahingoita n ytt modulin ikkunaa Suojaa n yt moduli iskuja ja putoamista vastaan Liit se vain X4000 n t h n tarkoitukseen varattuun RJ11 liittimeen X4000 n ja n ytt modulin vaurioitumisen v ltt miseksi Huomaa kaapeloitaessa ett laitteen tuuletusraot eiv t peity ja tuuletus ei esty X4000 n tuuletuksen estyess laitteeseen voi synty vaurioita Puut teellisesta tuuletuksesta aiheuneet vauriot johtavat takuun raukeamiseen l avaa peruslaitetta l k muuntele verkkolaitetta mitenk n sill siit aiheutuu s hk isku ja hengenvaara l poista yht kiinnitysruuvia peruslaitteesta Kun laite tuodaan kylm st ymp rist st k ytt tiloihin sen ulko sek sis pinnoille voi synty kastetta Odota ett laitteen l mp tila on asettunut ja laite on ehdottoman kuiva ennen kuin otat sen k ytt n Huomioi ymp rist vaatimukset jotka on esitetty teknisiss tiedoissa Tarkista vastaako paikallinen verkkoj nnite verkkolaitteen nimell
217. expansion card gt Donotconnect X4000 to the power supply until the equipment is completely closed and you have rechecked the installation Danger Do not touch any parts inside the expansion slot when installing or replacing the expansion card There is a risk of electric shock gt Do not touch any parts inside the expansion slot of X4000 Caution Electrostatic charges can damage electronic components Please observe the following precautions to avoid damaging components X Ground yourself before unpacking components and before carrying out installation work on the equipment Only grip boards at the edges and do not touch cables or components X4000 User s Guide Expansion and Resource Cards Bg Hole and screw for fixing the expansion card Figure 3 17 Installing an expansion card Installation Proceed as follows to install or replace an expansion card replacement f R P gt Undo the screws of the dummy cover or the expansion card installed in the slot Remove the dummy cover or withdraw the existing expansion card from the slot Keep the two screws of the dummy cover as these are used for fixing the expansion card Mount the resource card s on the expansion card if applicable Follow the installation guide supplied with the resource card Push the expansion card into the slot provided in the housing until it engages in the slot connector Card guides ensure that the expansion card
218. f the connection partners should be configured as active partner This page activates switching in and out additional B channels on demand Bandwidth On Demand Passive For leased lines only Enables BOD and defines the passive partner This page does not activate switching in and out additional channels Table 8 12 Mode X4000 User s Guide ssss 205 8 Advanced Configuration of the Basic Unit with the Setup Tool Todo Proceed as follows Y y VN OV Y Y Go to WAN PARTNER EDIT ADVANCED SETTINGS EXTENDED INTERFACE SETTINGS OPTIONAL Select Mode and Line Utilization Weighting Enter Line Utilization Sample sec and Maximum Number of Dialup Channels Press SAVE Confirm with OK Go to WAN PARTNER EDIT WAN NUMBERS ADD Enter Number Select Direction Sly Select Direction outgoing if you have set Mode Bandwidth On Demand Active D Select Direction incoming CLID if you have set Mode Bandwidth On Demand Passive Press SAVE Go to WAN PARTNER EDIT PPP Select Authentication Enter Partner PPP ID Local PPP ID and PPP Password if applicable Confirm with OK Press SAVE 8 2 4 Always On Dynamic ISDN AO DI Always On Dynamic ISDN AO DI uses the existing ISDN infrastructure to configure a new service for the user without hardware changes AO DI is a permanently available always on but nevertheless low cost connecti
219. field 2 Time To Live in s contained in the DNS record is used If the TTL field in the DNS record is set to 0 or exceeds Maximum TTL for Pos Cache Entries the value Maximum TTL for Pos Cache Entries is used when saving the entry When a negative dynamic entry is saved in the cache Maximum TTL for Neg Cache Entries is always assigned as this value Ref Indicates how often the entry has been referenced i e how often a DNS request has been answered with the entry from the cache X4000 User s Guide samas 257 Bg Advanced Configuration of the Basic Unit with the Setup Tool STATIC A dynamic entry can be converted to a static entry by tagging the entry with the Space bar and confirming with STATIC The relevant entry then disappears from IP DNS DYNAMIC CACHE and is listed in IP DNS STATIC Hosts TTL is transferred in this operation Table 8 43 IP DNS Dynamic CACHE 258 mmmmm X4000 Users Guide Basic IP Settings B IP DNS ADVANCED SETTINGS contains the following fields Maximum Number of Defines the maximum number of static and DNS Records dynamic entries Once this value is reached an older dynamic entry is deleted from the cache when a new entry is added The entry deleted is always the dynamic entry that has not been requested for the longest period of time If Maximum Number of DNS Records is reduced by the user dynamic entries are also deleted if necessar
220. figured Callback see chapter 10 2 4 page 327 and in doing so entered an incorrect number Number under WAN PARTNER EDIT WAN NUMBERS EDIT Check if you left a trace program running over an ISDN PPP connection This would cause packets to be sent constantly over ISDN and the connection would remain permanently open X4000 User s Guide saman 381 12 Troubleshooting 382 Outgoing calls cannot be made Use isdnlogin to check if outgoing calls are possible Check MONITORING AND DEBUGGING ISDN MONITOR to see if any outgoing calls have been recorded at all if the number dialed is correct and if the call was connected Check if ISDN syslog messages with disconnect cause have been recorded Check if Encapsulation in WAN PARTNER EDIT is the same for both connection partners Check if Authentication in WAN PARTNER EDIT PPP is the same for both connection partners Use t race to check what is being sent over the ISDN channels Check in the MIB table isdnStkTable if the MIB variable Status has the value oaded Make sure your own number is correctly entered in CALLS ADD This also applies to outgoing calls Incoming calls cannot be made Check MONITORING AND DEBUGGING ISDN MONITOR to see if an incoming call has been recorded Check WAN PARTNER EDIT WAN NUMBERS to see if a suitable number for incoming calls has been entered Check the MIB variables DSS1Cause and LocalC
221. fondijak elker l se v gett a term ket felt tlen l tartsa megfigyel s alatt Az X4000 megfelel az idev g irodai k rnyezetben val haszn latra alkalmas inform ci technikai berendez sekre vonatkoz biztons gi el r soknak Az A rendszer rendeltet sszer zemeltet se az IEC 950 EN 60950 szab lyzatnak megfelel en csak a teljesen sszeszerelt f mburkolattal biztos that h t s t zv delem zavarsz r s ummm X4000 Users Guide Tiszt t s s jav t s A k rnyezeti h m rs klet nem haladhatja meg az 50 C t Ker lje a k zvetlen naps t st gyeljen arra hogy semmilyen t rgy pl g mkapocs vagy folyad k ne ker lhessen a k sz l k belsej be ram t s r vidz rlat gyeljen a megfelel h t sre Az X4000 nem tartalmaz alkatr szeket amelyeket a felhaszn l kicser lhet vagy kapcsol kat jumpereket amelyeket a felhaszn l nak kellene be ll tania V szhelyzetben pl s r lt burkolat vagy kezel egys g folyad k vagy idegen test behatol sa eset n azonnal szak tsa meg az ramell t st s rtes tse a szervizt A k sz l ket csak a BinTec ltal feljogos tott szervizek nyithatj k fel A k sz l k felnyit sa el tt felt tlen l h zza ki a h l zati csatlakoz t A k sz l k jogtalan felnyit sa s a helytelen jav t s r v n a felhaszn l sz m ra jelent s vesz lyforr sok keletkezhetnek pl ram t s A k sz l ken sz ks ges jav
222. for Service user defined Defines the protocol allowed Possible values icmp tcp udp gre esp ah l2tp X4000 User s Guide ssmaa 333 10 Configuration of Security Functions and Firewall 334 Port 1 for any Only for Service user defined Defines the port allowed Entering 1 allows any port for the protocol If you specify the port the entry must agree with the port number of the destination host in the LAN Destination IP address of the host in the LAN Table 10 11 IP B NETWORK ADDRESS TRANSLATION Return ADD Todo Proceed as follows to activate NAT oq Go to IP NETWORK ADDRESS TRANSLATION Select the interface for which you want to activate NAT and confirm with Return Select Network Address Translation e g on This activates NAT for the selected interface Press SAVE An entry takes effect as soon as you confirm it here with SAVE Never forget this especially if you are configuring NAT from a remote host e g with telnet Proceed as follows to allow certain connections for a NAT interface to a certain host in the LAN VY V VN Y Go to IP NETWORK ADDRESS TRANSLATION EDIT Add an entry with ADD or select an existing entry and confirm with Return Select Service Select Protocol if applicable Enter Port 1 for any if applicable Enter Destination Press SAVE X4000 User s Guide Access Security Filters Rul
223. form of DNS records and resolves the names if a relevant request is received i e the name server sends a DNS record with the IP address associated with the name to the source of the request Name servers form a hierarchical tree structure If a name server cannot resolve a name it therefore asks a higher order name server etc E HOSTS files HOSTS files are located on the PCs in the LAN You can use these files to create a table of host names with associated addresses This means connections to DNS are no longer needed to resolve these names As the HOSTS files must be updated on each PC this method of name resolution is not very practicable 246 mmmsms X4000 Users Guide Basic IP Settings DNS Proxy DNS cache In practice the DNS of the Internet Service Provider is often used for name resolution Advantages of Name Resolution with X4000 X4000 has the following functions and facilities for name resolution port 53 HM DNS Proxy for passing DNS requests to the right DNS DNS cache for saving the results of DNS requests Static name entries for defining assignments of names to IP addresses Filter function to prevent the resolution of certain names Monitoring via Setup Tool to provide an overview of DNS requests in X4000 This is how it works DNS Proxy makes the tedious updating of HOSTS files on PCs in the LAN unnecessary aS you can enter X4000 as DNS on the relevant PCs DNS requests are passed by the PC to
224. ga s att man kan snubbla ver dem och s att de inte kan skadas Data verf ringskabeln f r inte anslutas dras ut eller vidr ras under ett skv der X4000 r avsedd f r anv ndning i kontorslokaler X4000 r en multi protokoll router som beroende p systemkonfiguration uppr ttar WAN f rbindelser Produkten b r vervakas s att inte on diga kostnader uppst r X4000 uppfyller kraven i alla relevanta s kerhetsbest mmelser f r informationsteknikutrustning i kontorslokaler ndam lsenlig anv ndning av systemet enligt IEC 950 EN 60950 s kerst lls endast om pl th ljet r komplett monterat kylning brandskydd radioavst rning Omgivningstemperaturen b r inte vara h gre n 50 C Undvik direkt solljus S kerst ll att det inte kan komma in n gra f rem l t ex h ftklammer eller n gon v tska i apparaten str mst tar kortslutning S rj f r fullgod kylning ummm X4000 Users Guide Reng ring och reparation X4000 har inga komponenter som anv ndaren kan byta ut och inga kontakter jumpers som m ste st llas in Koppla genast ifr n str mf rs rjningen i n dsituationer t ex skadat h lje eller skadade man verelement eller om v tska eller fr mmande f rem l har kommit in i apparaten och tag kontakt med serviceavdelningen Apparaten far endast ppnas av en av BinTEc auktoriserad serviceverkstad Drag alltid ut natkontakten innan apparaten ppnas Obeh rigt ppnande resp
225. ge 115 Configure the Remote CAPI interface Remote CAPI configuration page 115 Install RVS COM Lite RVS COM Lite installation page 115 Setup PC for WAN access Internet access with X4000 page 115 You can test your configuration at the end of the chapter X4000 User s Guide samme 109 a Fast Configuration with the Configuration Wizard Basic Unit 6 1 In Advance of Configuration Router settings Before you start to configure your X4000 make sure you know the following information about your ISDN connection and your network environment Write down your values in the table below so that you can quickly find the necessary information while you are performing the configuration Examples are shown E ISDN extensions The extension numbers of your ISDN connection E IP address and netmask of X4000 If you are installing a new network simply use the example values given a flr AINpPIC ISDN extensions 10 11 12 IP address of X4000 192 168 1 254 Netmask of X4000 255 255 255 0 Internet access For access to the Internet via your Internet Service Provider ISP you will need access information that should be provided by your ISP Provider name Golnternet Dial in number 1234567 User account MyName Password TopSecret Corporate network For connection to a corporate network or another WAN partner you must know connection LAN LAN _ the following information
226. gyelembe a m szaki adatokn l megadott k rnyezeti felt teleket Ellen rizze hogy a helyi h l zati fesz lts g megegyezik e a t pegys g n vleges fesz lts g vel A k sz l k az al bbi felt telek mellett zemeltethet 100 240 VAC 50 60Hz Gondoskodjon r la hogy a v d rintkez s csatlakoz aljzat a telep t sn l hozz f rhet legyen A h l zatr l val teljes lev laszt shoz h zza ki a h l zati csatlakoz t A vezet kez s sor n vegye figyelembe a k zik nyvben megadott sorrendet Csak olyan vezet keket alkalmazzon amelyek a k zik nyvben megadott specifik ci knak megfelelnek vagy amelyek a k sz l k sz ll t si terjedelm ben tal lhat k Amennyiben m s vezet keket alkalmaz az emiatt fell p k rok rt vagy a m k d sben fell p v ltoz sok rt a BinTec Communications AG nem v llal felel ss get Ebben az esetben megsz nik a garanciajogosults ga Vegye figyelembe a k sz l k csatlakoztat s n l a k zik nyvben le rt ide vonatkoz utas t sokat A vezet keket gy fektesse le hogy azok ne lehessenek vesz lyek forr sai botl svesz ly azokban pedig k r ne keletkezhessen Az adat tviv vezet keket vihar eset ben ne csatlakoztassa ne h zza le ne rintse meg Az X4000 irodai k rnyezetben val alkalmaz sra k sz lt Az X4000 mint multi protokoll router a rendszerkonfigur ci t f gg en a WAN sszek ttet sekre p l A nem k v nt tele
227. h Type The automatic D channel detection is then switched off An incorrectly set ISDN protocol prevents ISDN connections being set up gt Select D Channel if applicable 9 Select B Channel 1 e g dialup Select B Channel 2 e g dialup x j In most cases you can accept the preset values for D Channel B Channel 1 and B Channel 2 O If you use an ISDN leased line and have requested a special service from your service provider it may be necessary to set the local side of the leased line at this point DTE or DCE You must then ensure that the far end has set the opposite value You must also set D channel B channel 1 and B channel 2 to the same values if you have selected several D B channels under ISDN Switch Type and the values can be changed Press SAVE You have returned to the main menu and the entries have been saved Incoming call If you use the ISDN BRI interface for dialup connections you must now tell answering X4000 how it should respond to incoming calls from the ISDN X4000 distributes the incoming calls to the appropriate internal services according to the settings in the following menus X4000 supports the following services E PPP Routing The gt gt PPP service is X4000 s general routing service This connects incoming data calls from WAN partners dialup connections to your gt gt LAN This enables partners outside your own local network to access hosts within your LAN T
228. h cabinet Figure 3 4 Exploded drawing showing the main components and mounting parts for the installation of X4000 in a 19 inch cabinet 42 ummm X4000 Users Guide Basic Unit Proceed as follows Figure 3 5 Screwing the bracket to the fixing holes Step1 gt Step2 gt Step3 gt Using the two brackets and screws supplied with X4000 screw the brackets to the front fixing holes provided on the side of X4000 see Figure 3 5 page 43 Always use the screws supplied Other screws may not withstand the mechanical loads or may damage the equipment Connect the necessary interface cables to the sockets provided cables must already be installed if your cabinet is not accessible from the rear Slide this preassembled unit with the two brackets screwed to it into the cabinet and screw the preassembled unit to the longitudinal sections of the cabinet these screws are not supplied with X4000 but are included with the cabinet X4000 User s Guide m m 43 3 Hardware Description and Installation This is what X4000 should look like on completion of installation DD OO DD po OO OO Figure 3 6 X4000 installed in a 19 inch cabinet For connecting your 19 inch built in unit go to chapter 3 3 page 59 Removal from To remove X4000 from the 19 inch cabinet e g for replacing or installing an 19 inch cabinet expansion car
229. h you can also navigate by means of W and A You can execute the following actions in a menu E Select a value e g display brightness with W and A and then confirm with OK 96 ummm X4000 Users Guide Display and Input Keys B E Enter numbers e g IP address or PIN with W and A and then confirm with OK HM Display a value e g serial number of X4000 and then leave the menu with OK Leaving the menu with To leave a menu and change to the next higher menu level without changing a C setting just press C 5 2 2 Meaning of LEDs User guide The four input keys of the MMI are equipped with LEDs see Table 5 1 page 97 to provide simple convenient operation Keys are only illuminated if they can be used Pressing keys that are not illuminated has no effect 9 a 9 C Press this key to No meaningful leave the menu level entry possible Press this key to No meaningful A move backwards in entry possible the menu level Press this key to No meaningful v move forwards in the entry possible menu level OK Confirmation of No meaningful entry or selection is entry possible possible Table 5 1 Illumination of input keys X4000 Users Guide a 97 A Man Machine Interface MMI Display with User Guide 98 Navigation bars for guidance 5 2 3 Navigation Bars The display shows two navigation bars which indicate your present level in the menu system 1st main menu 1
230. have not yet installed DIME Tools together with BRICKware for Windows proceed as explained chapter 6 2 page 112 Connect X4000 to the LAN in To assign your X4000 an IP address if necessary with the DIME Tools program proceed as follows 9 Click the Windows Start button and then PROGRAMS BRICKWARE DIME Tools Ifthe gt gt BootP server is not started as standard you must start it The BootP server window will appear after a short time if X4000 is still unconfigured 9 Enter the name and IP address of your X4000 in the window under BRICK Parameter Click OK Close DIME Tools Now establish a connection to X4000 with telnet Click the Windows Start button and then Run Typetelnet IP address of X4000 gt X4000 User s Guide m m 73 4 Configuration Requirements Unix Remote configuration 74 Click OK A window with the login prompt appears You are now in the SNMP shell of X4000 Continue with chapter 4 2 page 76 Typetelnet IP address of X4000 gt into a terminal A window with the login prompt appears You are now in the SNMP shell of X4000 Continue with chapter 4 2 page 76 4 1 4 Connection Over ISDN Connection over gt ISDN with gt gt ISDN login is especially recommended if XA000 is to be configured or administrated remotely remote LAN in Figure 4 2 page 74 This is also possible even if X4000 has not been initially configure
231. hed in the LAN As long as your router does not have this entry it cannot be recognized by other hosts in the network If your X4000 is connected to a LAN that consists of two subnets you should enter a Second Local IP Number and a Second Local Netmask for it for the second subnet This is explained in the following example X4000 Local IP Number Second Local IP Number 192 168 42 3 192 168 46 3 GG GG 192 168 42 1 192 168 42 2 192 168 46 1 192 168 46 2 Figure 7 2 X4000 with two different local IP addresses The first subnet has two hosts with the IP addresses 192 168 42 1 and 192 168 42 2 and the second subnet has two hosts with the IP addresses 192 168 46 1 and 192 168 46 2 To be able to exchange data packets with the first subnet X4000 uses the IP address 192 168 42 3 for example and 192 168 46 3 for the second subnet The netmasks for both subnets must also be indicated ummm X4000 Users Guide Basic Router Settings You have probably entered the IP address and netmask in X4000 with the MMI before the basic configuration Even if you have you should still check the entries in the following menu Go to CM 100BT FAST ETHERNET X4000 Setup Tool BinTec Communications AG LAN Configure LAN Interface MyRouter IP Configuration Local IP Number 192 168 1 254 Local Netmask 255 255 255 0 Second Local IP Number Second Local Netmask Encapsulation Ethernet II Mode Auto IPX Configuration Local IPX N
232. his is done by pressing W and A as often as necessary until the correct netmask appears Save the netmask by confirming with OK 102 nmm s X4000 Users Guide Menu Architecture Date and System time Information about X4000 Basic Unit 5 3 3 Date and System Time The main menu Date and System Time offers the following options OK Of System Date System date current 2000 03 17 set 2000 04 17 OK System Time OK System time current 07 56 pm set 08 56 pm OK Figure 5 7 Menus for entering date and system time with navigation bars System Date For setting the current date in X4000 This is done by selecting the day month and year in succession with W and A and confirming each by pressing OK System Time For setting the current time in X4000 This is done by selecting the hours and minutes in succession with W and A and confirming each by pressing OK X4000 Users Guide samen 103 A Man Machine Interface MMI Display with User Guide 5 3 4 Information about X4000 Basic Unit The main menu Information about X4000 Basic Unit offers the following options for displaying system information Information OK Credits Based OK quis about X4000 m Accounting System TOL i Basic Unit c l OK otal OK Serial Number Available
233. his subsystem also enables outgoing data calls to be set up to WAN partners outside your local network Sly This PPP routing is also used for X 25 connections X4000 Users Guide ssmms 141 Basic Configuration of Basic Unit with Setup Tool 142 Bb ISDN Login The ISDN Login service allows incoming data calls access to the gt gt SNMP shell of your X4000 This is how X4000 is remotely configured and administrated B CAP The gt CAPI service allows connection of incoming and outgoing data and voice calls to communications applications on hosts in the LAN that access the gt Remote CAPI interface of X4000 This enables for example hosts connected to X4000 to receive and send faxes To be able to use CAPI applications e g RVS COM Lite from the hosts in the LAN with the X4000 basic unit you must also carry out the Remote CAPI configuration on the individual hosts see chapter 6 4 page 115 in addition to distributing the extension numbers as described in this chapter When a call is received X4000 first checks the Called Party Number CPN and the type of call data or voice call The CPN is the extension the partner has dialed to reach X4000 Then the call is forwarded to the corresponding service see Figure 7 3 page 142 WAN PPP ISDN Login Figure 7 3 Distribution of incoming calls X4000 User s Guide Configuring WAN Interfaces oqdED oq Oa If your ISDN connection has more than thre
234. ht to left Select the Bearer e g any Press SAVE Add other entries as necessary Proceed as follows to create WAN partner entries for the dial in users VV VV YN NN Go to WAN PARTNER add a new entry with ADD You will find detailed information about configuring a WAN partner in chapter 7 3 page 159 the following settings are essential here Enter Partner Name e g homeoffice 2 Select Encapsulation e g PPP Select authentication information in WAN PARTNER ADD PPP Go to WAN PARTNER ADD ADVANCED SETTINGS Select Layer 1 Protocol e g Modem Profile 2 Confirm with OK Go to WAN PARTNER ADD WAN NUMBERS ADD ummm X4000 Users Guide Resource Card with Digital Modems Bg Enter the number to be used by X4000 under Number e g 09117890 Select Direction e g outgoing Press SAVE Leave WAN PARTNER ADD WAN NUMBERS with EXIT Yo V Y V Y Select the necessary settings in WAN PARTNER ADD IP see Carrying out IP configuration page 173 Press SAVE The WAN partner entry is displayed Y Proceed in a similar way to configure other WAN partners Table 9 11 page 305 uses a general example to show how you could meaningfully use the modem profiles in X4000 Profile 1 V 34 auto on 2400 33600 33600 auto auto Profile 2 V 90 auto on 28800 31200 50000 auto auto Profile 3 V 90 auto on 28800 31200 44000 auto auto Profile 4 V 9
235. iboAdmTrapHostTable to determine if X4000 is configured so that SNMP traps are sent to a host outside the LAN destination ports 161 162 Check if the second B channel is frequently set up and cleared for connections with dynamic channel bundling due to fluctuating traffic Use debug all ortrace to check if a PC in the LAN is configured for the WINS server with an incorrect IP address destination ports 137 139 If necessary configure the PC properly or set the corresponding filters Use debug all ortrace to check if a PC in the LAN is configured for the resolution of NetBIOS names with the help of DNS it is accessed from a client port to destination port 53 Do not try to resolve NetBIOS names with DNS Use debug all or trace to check if an application on a PC in the LAN is trying to resolve names that the name server at the Internet provider does not know it is accessed from a client port to destination port 53 Install a local HOSTS file in the Windows directory that can carry out name resolution Use debug all or trace to check if NetBIOS over IP is configured on a PC in the LAN it is accessed from source port 137 to destination port 53 An attempt is thus made to resolve NetBIOS names over DNS Disable NetBIOS over IP or insert filters configuration of the corresponding filters can be found in chapter 10 2 8 page 335 or use the simple NetBIOS filter of the Configuration Wizard see chapter 6 page 109 Check if you have con
236. icitly define which modem profile is to be used for an incoming call If the party dialing in has not been assigned a modem profile or the calling party cannot be authenticated the modem automatically uses modem profile 1 Modem profile 1 is therefore used as default setting and should allow maximum selection of the settings As all dial in users that cannot be authenticated by CLID etc are assigned modem profile 1 for the connection modem profile 1 should be able to operate all modems You can use the remaining seven modem profiles to define user groups so that the dial in connection partners find optimum modem settings in X4000 X4000 User s Guide samme 297 Bag Configuration of Expansion and Resource Cards with the Setup Tool Example scenario A typical scenario e g for an Internet Service Provider could look like this 34 GSM E connection M2 digital connection analog connection Incoming Call Answering Number Item 99 ISDN Login 50 PPP V 110 30 PPP routing 41 PPP Modem Profile 1 42 PPP Modem Profile 2 Figure 9 3 Scenario for dial in Bb Dial in users who dial in over an analog connection use the numbers 0911 123 41 to 0911 123 48 for dialing in according to which analog modem type they use E Dial in users who use an ISDN connection use 0911 123 30 Bb Dial in users who dial in with a mobile phone over a GSM connection use 0911 123 50 HM incoming calls to the number 0911
237. ick the Windows Start menu and then Program BRICKware DIME Tools to start DIME Tools for installation of DIME Tools see chapter 6 2 page 112 Activate the TFTP server For a Unix computer Follow the instructions in the Software Reference Login to X4000 if you have not already done so Y Deactivate auto logout with t 0 Inthe SNMP shell type in update IP address gt file name gt The IP address is the IP address of the TFTP server e g the IP address of your Windows PC on which the TFTP server of DIME Tools is 372 mmmmm X4000 Users Guide Updating Software oqdED running and on which you have saved the new boot image e g 192 168 1 1 file name is the name of the boot image you have saved on your PC The file file name is first transferred to the memory of X4000 and checked The following appears in the SNMP shell Perform update y or n Enter y and confirm with Return The software update process is executed and the new boot image is loaded to the flash memory X4000 requires a connected block of working memory that is somewhat larger than the new software image If insufficient memory is available on X4000 X4000 offers an incremental update in which the image is loaded directly in chunks to the flash memory without checking Proceed as follows If insufficient memory is available a query will appear in the SNMP shell Do you want to perform an incremental update y or n
238. ics comparative display of several interfaces gt gt TCP IP statistics Syslog messages see chapter 10 1 1 page 308 ISDN connections Proceed as follows to display ISDN connections gt Go to MONITORING AND DEBUGGING ISDN MONITOR A list of the existing ISDN connections incoming and outgoing calls is displayed X4000 User s Guide samen 313 10 Configuration of Security Functions and Firewall 314 Credits Based Accounting System X4000 Setup Tool BinTec Communications AG MONITOR ISDN CALLS ISDN Monitor Calls MyRouter Dir Remote Name Number Charge Duration Stack Channel State in 2 2910 0 Bl active out 3 106 0 B2 active c alls h istory d etails s tatistics r elease This menu also offers you other options Select h to display a list of the last 20 ISDN calls incoming and outgoing completed since the last system start Place the cursor on an existing or completed ISDN connection and select d to display detailed information about this connection Select s to display statistics on the activity of the existing ISDN connections Select r to release the tagged ISDN connection Select c to display the list of existing ISDN connections again Proceed as follows to display the state of the Credits Based Accounting System chapter 10 1 3 page 316 Go to MONITORING AND DEBUGGING ISDN CREDITS Select a subsystem and confirm with Return The current status
239. ie vor dem Aufstellen und Betrieb von X4000 die Hinweise f r die Umgebungsbedingungen vgl Technische Daten Verwenden Sie eine feste und ebene Unterlage Elektrostatische Aufladungen k nnen zu Ger tesch den f hren Tragen Sie daher eine geerdete Manschette um das Handgelenk oder ber hren Sie eine geerdete Fl che bevor Sie Buchsen oder Erweiterungskarten von X4000 ber hren Ber hren Sie die Erweiterungskarten grunds tzlich nur an den R ndern und fassen Sie nicht auf Bauteile oder Leiterbahnen Halten Sie den nicht benutzten Erweiterungssteckplatz mit der Blindabdeckung verschlossen damit keine Gegenst nde ins Innere des Ger tes gelangen k nnen Befinden sich w hrend des Betriebs Fremdgegenst nde im Ger t besteht Stromschlag und KurzschluBgefahr Achten Sie darauf daB keine spitzen Gegenstande das Fenster des Displaymoduls besch digen Sch tzen Sie das Displaymodul vor Sto und Fall und schlie en Sie es nur an die daf r vorgesehene RJ11 Buchse von X4000 an um Sch den an X4000 und dem Displaymodul zu vermeiden Achten Sie bei der Verkabelung darauf da die L ftungsschlitze des Ger ts nicht verdeckt werden und die L ftung nicht behindert wird Durch Beeintr chtigung der L ftung von X4000 kann es zu Sch den am Ger t kommen Durch mangelnde L ftung entstandene Sch den f hren zum Garantieverlust X4000 User s Guide samme 421 15 General Safety Precautions in 15 Different Languages Bestimmungsgema Be W
240. ignment of DB 25 plug for X 21bis ISO 2110 X4000 Users Guide a E Technical Data 26 Pole Mini Delta Ribbon Socket for X 21 V 35 and V 36 The serial X 21 V 35 V 36 interface of X4000 is designed as a 26 pole mini Delta ribbon socket The interface can be used for X 21 V 35 or V 36 depending on the setting under Interface Type Figure 13 8 26 pole mini Delta ribbon socket first serial port left 400 mmmma X4000 Users Guide Features of Basic Unit E The 26 pole mini Delta ribbon socket has the following pin assignment in DTE Mode Connector DTE D O DE 4 D 101 m 1 PG A ChGND 1 ChGND 102 2 8 SG B SigGND 19 SigGND 108 3 gt f9 T S TDB 22 TDB 103 4 s gt IT P TDA 4 TDA 104 4 5 11 R T RDB 24 RDB 104 s 4 R R RDA 6 RDA 105 7 s 0 c 25 RTSB 105 g 913 c c RIS 7 RTSA 106 lt 9 12 14 27 CTSB 106 lt 10 5 l D CTS 9 CTSA 115 lt 11 13 S X RCB 26 RCB 115 lt 12 6 Is V RCA 8 RCA 108 2 15 gt 30 DTRB 108 2 16 gt H DTR 12 DTRA 109 lt 17 31 DCDB 109 lt 18 F DCD 13 DCDA 107 lt 19 29 DSRB 107 lt 20 E DSR 11 DSRA 114 lt 21 AA TCB 23 TCB 114 lt 99 Y TCA 5 TCA VCC 5V 25 Table 13 8 Pin assignment of 26 pole
241. imum permitted number of channels that Dialup Channels are opened for dialup connections The value is only displayed here it is set under Total Number of Channels in the menu WAN PARTNER EDIT ADVANCED SETTINGS Table 8 11 WAN PARTNER Epir ADVANCED SETTINGS Wl EXTENDED INTERFACE SETTINGS OPTIONAL 204 mmmmm X4000 Users Guide Settings Specific to WAN Partners B The Mode field includes the following selection options Bandwidth On Demand Deactivates BOD no additional channels are Disabled opened default value Bandwidth On Demand For dialup connections only Enabled Activates BOD additional channels can be opened The connection partner who initiated the connection opens the additional channels BAP Active Mode Necessary for the AO DI Always On Dynamic ISDN function see Table 8 17 page 214 BAP Passive Mode Is currently not supported by X4000 BAP Active and Passive Mode Is currently not supported by X4000 BAP Client Active Mode Is currently not supported by X4000 Backup For leased lines only Backup connection is activated if the leased line fails The backup connection is cleared when the leased line is available again BOD is also available for this mode if a value gt 1 is used for Maximum Number of Dialup Channels Bandwidth On Demand Active For leased lines only Enables BOD and defines the active partner Only one o
242. ing Bandwidth on Demand X4000 User s Guide samme 469 EE Glossary Bandwidth on Demand is an extended method of gt gt channel bundling in which it is also possible to connect gt gt dialup connections to gt leased lines or to configure dialup connections as a backup facility for leased lines BootP Bootstrap protocol Based on the gt gt UDP or gt IP protocol Automatically assigns an IP address DIME Tools contain a BootP server that you can start on your PC to assign the as yet unconfigured router an IP address Bridge Network components for connecting homogeneous networks As opposed to a router bridges operate at layer 2 data link layer of the gt gt OSI model are independent of higher level protocols and transmit data packets using MAC addresses Data transmission is transparent which means the information contained in the data packages is not interpreted Bridges are used to physically decouple networks and to reduce network data traffic This is done by using filter functions that allow data packets to pass to certain network segments only Some BinTec routers can be operated in Bridging Mode Broadcast Broadcasts data packages are sent to all stations in a network in order to exchange information Generally there is a certain address broadcast address in the network that allows all stations to interpret a message as a broadcast Bus A data transmission medium for use by all the devices c
243. ing around in the Setup Tool you will notice that some menus have special command options such as DELETE SAVE and CANCEL There are a few slight differences between these commands that you should be aware of ADD To create or add an item to a list A submenu appears for entering the desired settings CANCEL To discard all changes made in the current menu DELETE To delete all entries tagged with the Space bar for deletion from a list These changes become effective immediately OK To confirm the changes in the current menu These changes do not become effective until SAVE is pressed in the next menu SAVE All variables set in the current menu and all its submenus are saved to memory These changes become effective immediately EXIT To leave the current menu and return to the previous menu Any entries made are lost Table 4 3 Buttons in the Setup Tool Searching lists Some Setup Tool menus contain lists of items e g the WAN PARTNER menu which lists all gt gt WAN partners currently configured X4000 Users Guide samme 83 4 Configuration Requirements 84 X4000 Setup Tool BinTec Communications AG WAN WAN Partners MyRouter Current WAN Partner Configuration Partnername Protocol State BigBoss ppp dormant T ONLINE ppp dormant Partnerl ppp dormant Partner2 ppp dormant PROVIDER ppp dormant ADD DELETE EXIT Press lt Ctrl n gt lt Ctrl p gt
244. ing unit was 600 seconds The connection is cleared on expiry of the idle timer and shortly before the next charging unit starts Please note You can only use dynamic short hold if you receive charging information during the connection Ask your telephone company X4000 User s Guide Configuring WAN Partners 7 When using dynamic Short Hold you must also set static Short Hold so that you do not get a permanent gt switched connection if AOCD fails You should make sure static Short Hold comes into operation later than dynamic Short Hold If not X4000 always clears the connection based on static short hold and never gives dynamic short hold a chance to disconnect In this case enter a value for Static Short Hold sec that is a little more than the expected maximum dynamic idle time oq In Germany only Deutsche Telekom currently supports call charging information Static Short Hold Data E gt lt i MrT TTL p Connected Dynamic Short Hold Dd T MISI Static o Short Hold Data m 1 Figure 7 6 Dynamic and static short hold Proceed as follows Goto WAN PARTNER ADD ADVANCED SETTINGS X4000 Users Guide sssass 171 Basic Configuration of Basic Unit with Setup Tool X4000 Setup Tool BinTec Communications AG WAN ADD ADVANCED Advanced Settings BigBoss MyRouter Callback no Static Short Hold sec 20 Idle for Dynamic Short Ho
245. ino elettrostatico o toccare una superficie collegata a terra prima di afferrare prese o schede di espansione di X4000 Tenere sempre le schede di espansione soltanto per i bordi e non toccare gli elementi costruttivi n le guide per i conduttori Proteggere lo slot per la scheda di espansione non utilizzato con la coper tura per evitare che penetrino oggetti nell apparecchio Se nell apparec chio ci sono corpi estranei durante il funzionamento sussiste pericolo di scosse elettriche e di corto circuito Fare in modo che nessun oggetto appuntito possa danneggiare la finestra del modulo di visualizzazione Proteggere il modulo di visualizzazione da urti e cadute e collegarlo soltanto all apposito attacco RJ11 di X4000 per evitare danni a X4000 e al modulo stesso Durante il collegamento dei cavi occorre accertarsi che le fessure di ven tilazione dell apparecchio non vengano coperte e che la ventilazione non sia ostacolata L impedimento della ventilazione di X4000 pu danneggiare l apparecchio Danni provocati dalla carenza di ventilazione causano la perdita del diritto di garanzia Non aprire lapparecchio base e non effettuare alcuna modifica sull aliImentatore poich sussiste pericolo di morte causata da scosse elettriche Non rimuovere le viti di fissaggio dell apparecchio base Quando l apparecchio viene trasferito da un ambiente freddo nel locale di esercizio linvolucro esterno e Jl nterno dell apparecchio possono presentare trac
246. ion CHAP PAP Local PPP ID user account T Online number joint user account e g 123456789012081512345678 0001 PPP Password e g mycat Keepalives off Link Quality Monitoring off In WAN PARTNER ADD ADVANCED SETTINGS Callback no Static Short Hold sec z B 60 Idle for Dynamic Short Hold z B 0 Delay after Connection Failure sec z B 300 Channel Bundling no Layer 1 Protocol ISDN 64 kbps In WAN PARTNER ADD IP IP Transit Network dynamic client X4000 User s Guide samen 183 Basic Configuration of Basic Unit with Setup Tool 184 Compuserve In WAN PARTNER ADD B IP ADVANCED SETTINGS RIP Send none RIP Receive none Van Jacobson Header Compression off Dynamic Name Server Negotiation client receive IP Accounting off Back Route Verify off Route Announce up or dormant Proxy Arp off In IP RouTING ADD Route Type Default route Network WAN without transit network Partner Interface T Online Metric e g f In JP NETWORK ADDRESS TRANSLATION T Online Return Network Address Translation on Internet Access over Compuserve The following settings are necessary In WAN PARTNER ADD Partner Name e g COMPUSERVE Encapsulation Async PPP over X 75 Compression none Encryption none In WAN PARTNER ADD WAN NUMBERS WV ADD Number dial in number z B 010880191919 Direction outgoing In WAN PARTNER ADD PPP Auth
247. ion card is fitted The slot is automatically covered by the backplane of the expansion card when the card is fitted 36 ummm X4000 Users Guide w o 3 1 1 Desktop Unit Display with input keys Power LED blue Figure 3 1 Front view of desktop unit Display and Input Keys BinTec s Man Machine Interface MMI a convenient user guide with display and input keys guides the user through a number of basic functions of X4000 You will find a detailed description of the MMI in chapter 5 page 93 X4000 Users Guide a 37 ER Hardware Description and Installation Display uniton The display unit on the 19 inch built in unit can be mounted on the front or back 19 inch built in unit of X4000 The instructions for changing the position are contained in Step 2 Changing over the display page 46 38 ummm X4000 Users Guide w o Rear view of desktop unit Expansion card slot with dummy cover Status LEDs red and green RJ11 socket for display IEC AC socket of mains unit X 21 V 35 V 36 interface 9 X21 bis interface Plastic strip for activating the buffer battery for the real time clock RTC Mini DIN socket console DNE screws for expansion card and dummy cover EI Ethernet LAN 10 100 Base T Fast Ethernet interface ISDN BRI interface Figure 3 2 Rear view of desktop unit X4000 User s Guide samme 39 Eg Hardware Description and Installation For connecting
248. ion of a connection after data has been transferred You will find a more detailed explanation about static and dynamic short hold in the Software Reference Now let s move on to the IP configuration of your WAN partner Here you enter the gt IP address and gt gt netmask of your partner Proceed as follows gt Goto WAN PARTNER ADD p IP X4000 Setup Tool BinTec Communications AG WAN ADD IP IP Configuration BigBoss MyRouter IP Transit Network no Partner s LAN IP Address 10 1 1 0 Partner s LAN Netmask 2554 255 255 0 Advanced Settings SAVE CANCEL Use Space to select X4000 User s Guide samen 173 Basic Configuration of Basic Unit with Setup Tool The menu contains the following fields IP Transit Network Defines whether X4000 sets up a transit network to the WAN partner Local IP Address IP address of X4000 You do not normally need to make an entry here unless you wish to configure a transit network for one of your WAN partners see chapter 8 2 6 page 222 Local ISDN IP Address ISDN IP address of X4000 in the transit network Partner s ISDN IP ISDN IP address of WAN partner in the transit Address network Partner s LAN IP WAN partner s LAN IP address Address Partner s LAN Netmask WAN partner s LAN netmask If you make no entry X4000 enters a default netmask for the net class used under Partner s LAN IP Address Table 7 21
249. ions General safety precautions 3 Hardware Description and Installation Description of the hardware basic unit expansion cards MMI LEDs connections Instructions on how to install the 19 inch built in unit in the rack how to change over the display how to install and remove an expansion card and how to connect the equipment Description of boot sequence 4 Configuration Requirements Description of access and configuration options A basis for working with the Setup Tool Procedure for initial configuration 5 Man Machine Interface MMI Display with User Guide How to use the MMI with display and input keys 6 Fast Configuration with the Configuration Wizard Basic Unit How to take X4000 into operation in a few minutes using the Windows tool Configuration Wizard and how to install and set up other useful software 7 Basic Configuration of Basic Unit with Setup Tool How to take X4000 into operation with the Setup Tool and set up a basic configuration including configuration of the WAN interfaces X4000 User s Guide m m 25 EH Welcome 8 Advanced Configuration of the Basic Unit with the Setup Tool How to carry out more advanced settings with the Setup Tool 9 Configuration of Expansion and Resource Cards with the Setup Tool How to configure an expansion card and any resource card s equipped 10 Configuration of Securi
250. isj nnit teit Laitetta saa k ytt seuraavissa olosuhteissa ummm X4000 Users Guide Maaraystenmukainen k ytt k ytt 100 240 VAC 50 60 Hz Varmista ett suko pistorasia on asennusta varten vapaasti tavoitettavis sa Verkkopistoke on vedett v pistorasiasta laitteen irrottamiseksi t ydel lisesti verkosta Huomaa kaapeloitaessa k sikirjassa kuvailtu j rjestys K yt vain kaape lia joka vastaa t m n k sikirjan spesifikaatioita tai joka toimitettiin alunpe rin laitteen mukana Jos k yt t toista kaapelia BinTec Communications AG ei ota vastuuta vahingoista tai toiminnan huonontumisesta T llaisissa ta pauksissa laitetakuu raukeaa Noudata laitetta liittaessasi k sikirjan ohjeita Ved kaapelit sellaisiin paikkoihin ett ne eiv t aiheuta vaaratilanteita kompastumisia eiv tk vahingoitu l liit irrota tai kosketa tiedonsiirtokaapeleita ukonilman aikana X4000 on tarkoitettu k ytett v ksi toimistoymp rist ss X4000 on moniprotokollareititin jonka avulla voidaan luoda j rjestelm konfiguraatiosta riippuen WAN yhteyksi Jotta ei toivotuilta maksuilta v ltyt n laitetta tulee ehdottomasti valvoa X4000 vastaa toimistotiloissa k ytett ville tietotekniikan laitteistoille asetettuja asiaankuuluvia turvallisuusm r yksi J rjestelm n IEC 950 EN 60950 mukainen k ytt on taattu ainoastaan mi k li peltikotelo on asennettu t ydellisesti j hdytys palosuoja
251. istamiseen hankausaineita alkalisia puhdistusaineita taikka sy vytt vi tai hankaavia tehoaineita X4000 User s Guide Transport et entreposage Installation et mise en service Consignes de s curit g n rales en francais Vous trouverez dans les paragraphes suivants les consignes de s curit que vous devez absolument respecter lors de l utilisation de votre router Transportez et entreposez X4000 uniquement dans son emballage d origine ou un autre emballage appropri lui garantissant une bonne protection contre les chocs et les coups Avant de proc der l installation et la mise en service de X4000 veuillez vous r f rer aux indications concernant les conditions d environnement cf Caract ristiques techniques Utilisez un support stable et plat Des charges lectrostatiques peuvent endommager l appareil II est donc important que vous portiez un bracelet antistatique ou que vous touchiez une surface mise la terre avant de saisir des prises ou des cartes d extension de X4000 Il est imp ratif de ne saisir les cartes d extension que par les bords et de ne pas toucher aux composants ni aux circuits conducteurs Refermez les emplacements des cartes d extension non utilis es avec des caches borgnes de mani re ce que rien ne puisse p n trer l int rieur de l appareil Si des objets se trouvent dans l appareil en fonctionnement il y a risque d lectrocution et de court circuit Veillez ce qu aucu
252. isual aids X4000 Users Guide a 27 uU Welcome To help you find and interpret the information in this manual the following typographical elements are used Here you are requested to do something a Lists including two levels MENU SUBMENU Indicates menus and submenus in the Setup Tool Non proportional E Indicates commands e g in the SNMP Courier e g shell that you must enter as shown ping 192 168 1 254 HM Used to display the Setup Tool lt IP address gt Indicates inputs in which you enter a value for the term shown in the brackets Do not enter the pointed brackets bold italics e g Indicates example terms BigBoss bold e g Indicates terms that you can find in the glossary gt gt MIB for online texts click the double arrow bold e g E Indicates fields in the Setup Tool and MIB biboAdmLoginTable tables and variables Windows Start menu HM Indicates keys key combinations and Windows terms italics e g Indicates values that can be entered or set in none the Setup Tool or MIB variables Table 1 3 Typographical elements 28 ummm X4000 Users Guide Feedback Questionnaire 1 8 Feedback As the BinTec Communications AG documentation team we write manuals and other documentation for your use We aim to supply documentation that is up to the high quality of X4000 and meets your requirements You as the user of BinTec products are the bes
253. it Network dynamic server gt Goto WAN PARTNER EDIT IP ADVANCED SETTINGS Enter IP Address Pool Poo ID gt Confirm with OK Press SAVE 8 1 2 CAPI User Concept The CAPI user concept is used to check access to the gt CAPI service This ensures that only users entered with a user name and password can use X4000 CAPI services This means for example that an incoming fax for the user Winnetou is only passed to Winnetou and not to a user such as Old Shatterhand who is located in the same LAN If the CAPI user concept is not used see Incoming call answering page 141 all incoming calls passed to the CAPI service are offered to all CAPI applications in the LAN The first user to respond receives the call So if Old Shatterhand is quicker off the mark Configuration is made in B CAPI USER B CM 1BRI ISDN SO INCOMING CALL ANSWERING X4000 User s Guide General WAN Settings B Name User name for which access to the CAPI service is to be allowed or denied maximum 16 characters Password Password with which the user Name has to identify to gain access to the CAPI service CAPI Determines whether access to the CAPI service is allowed or denied for the user Name Possible values E enabled access to CAPI allowed E disabled access to CAPI denied Table 8 4 CAPI USER X4000 Users Guide sssass 191 B Advanced Configuration of the Basic Unit with the Setup Tool
254. it network for the other WAN partners Then enter the Local IP Address LAN IP address for all WAN partners without a transit network Local ISDN IP Address ISDN IP address of X4000 in the transit network Partner s ISDN IP WAN partner s ISDN IP address in the transit Address network Partner s LAN IP IP address of LAN of WAN partner or LAN IP Address address host Partner s LAN Netmask WAN partner s LAN netmask If you make no entry X4000 enters a default netmask for the net class used under Partner s LAN IP Address Table 8 22 WAN PARTNER EDIT IP 224 mmmmm X4000 Users Guide Settings Specific to WAN Partners B To do IP address IP Transit Network contains the following selection options yes A transit network is used dynamic client X4000 receives its IP address from the WAN partner for the duration of the connection dynamic server X4000 assigns the gt gt Remote WAN partner an IP address for the duration of the connection In this case X4000 must be configured as a dynamic IP address server i e it has an IP address pool available see chapter 8 1 1 page 188 no No transit network This setting is adequate for most WAN partners Table 8 23 IP Transit Network Proceed as follows Go to WAN PARTNER EDIT IP Select IP Transit Network Enter Local IP Address if applicable Enter Local ISDN IP Address Enter Partner s ISDN IP Addr
255. ith gt gt CLID although entered as a WAN partner In this case your X4000 does not know which authentication protocol was set for this WAN partner To enable the call to still be accepted X4000 falls back on general settings in the PPP which you can change as necessary chapter 8 1 3 page 194 Now set short hold so that X4000 clears down the ISDN connection when there is no further data exchange to save money The short hold setting can be either static or dynamic and tells X4000 the duration of the idle time after which it is to clear down the ISDN connection The static 9 short hold setting determines how much time should pass between sending the last gt data packet and clearing the ISDN connection Enter a fixed period of time in seconds With the dynamic short hold setting no fixed period of time is specified and the length of an ISDN charging unit is considered instead Dynamic short hold is based on AOCD advice of charge during the call When setting dynamic short hold you specify how much time should pass after the last exchange of data before the connection is cleared You enter a percentage based on the last charging unit The value of the idle timer can therefore change just as the length of the charging unit changes according to the time of day weekend weekday etc If you enter 50 96 for example the idle timer is 60 seconds if the preceding charging unit was 120 seconds and 300 seconds if the preceding charg
256. ive answered Server Failures Displays the number of requests that could not be answered by any name server either positively or negatively Table 8 45 IP DNS GLOBAL STATISTICS 260 mmmsmm X4000 Users Guide Basic IP Settings B The following part of WAN PARTNER EDIT W IP ADVANCED SETTINGS is of interest for this configuration step Dynamic Name Server Negotiation In the event of dynamic name server negotiation defines whether X4000 receives IP addresses for Primary Domain Name Server Secondary Domain Name Server Primary WINS and Secondary WINS from the WAN partner or sends them to the WAN partner Table 8 46 WAN PARTNER Epit IP ADVANCED SETTINGS X4000 User s Guide sss 261 Bag Advanced Configuration of the Basic Unit with the Setup Tool The Dynamic Name Server Negotiation field contains the following selection options off X4000 does not send or answer requests for name server addresses yes The response is linked to the mode for issuing receiving an IP address setting in WAN PARTNER EniT IP under IP Transit Network HM X4000 sends requests for name server addresses to the WAN partner if dynamic client is selected HM X4000 answers requests for name server addresses from the WAN partner if dynamic server is selected HM X4000 answers but does not send requests for name server addresses if yes or no is selected client receive
257. iver Possible values E auto default value The setting is based on the Connector selected X4000 sends the clock signal if Connector dce X4000 receives the clock signal if Connector dte You can usually accept this setting E external X4000 receives the clock signal irrespective of the setting selected under Connector E internal X4000 sends the clock signal irrespective of the setting selected under Connector Speed Transmission rate of connection scalable from 2400 bps to 8 Mbps The value to be set depends on the quality and length of the cable and on the connection type balanced unbalanced Up to 8 Mbps are possible over a short distance of up to 5 m if shielded cables are used Default value 64000 bps 152 nmmmmm X4000 Users Guide Configuring WAN Interfaces Layer 2 Mode Defines the value of the HDLC address field in the transmitted command frames Layer 2 Possible values E auto default value The selection made for Connector is accepted You can usually accept this setting e g for access to a public data network such as Datex P E aie The address field has the value for DTE E ace The address field has the value for DCE Interface Leads Defines whether X4000 checks the status of the interface lines The same value should be set for both connection partners Possible values E enabled The status of the signal line I for X 21 CTS for V 35 V 36 an
258. k LAN but in another LAN this is referred to as remote This LAN must be connected to the local LAN over a WAN connection over X4000 Opposite to local access see gt Remote BinTec s own interface for gt gt CAPI The Remote CAPI interface enables all subscribers of a network to use CAPI services but over X4000 to a single ISDN connection All subscribers must have the corresponding application software installed to support the CAPI interface This standard interface is however used by most communications applications X4000 is supplied as standard with suitable software RVS COM Lite BinTec s CAPI interface is implemented as a dual mode CAPI CAPI 1 1 and 2 0 applications can access ISDN resources parallel to one another This means new CAPI 2 0 applications can be used on the network or on the same PC parallel to old applications based on CAPI 1 1 Routing Information Protocol Routing protocol used in networks to exchange information routing tables between gt gt routers Plug or socket for maximum eight wires Connection for digital terminals A device that connects different networks at layer 3 of the gt gt OSI model and routes information from one network to the other Routers are able to recognize blocks of information and evaluate addresses as opposed to a 9 bridge which operates with a transparent protocol The best paths routes from one point to another are chosen by using routing tables
259. k op garantie Het apparaat mag in geen geval nat worden gereinigd Door binnendringend water kunnen er aanzienlijke gevaren ontstaan voor de gebruiker bijv elektrische schok en kan er aanzienlijke schade ontstaan aan het apparaat Gebruik nooit schuurmiddelen alkalische reinigingsmiddelen scherpe of schurende hulpmiddelen X4000 User s Guide mm m 439 15 General Safety Precautions in 15 Different Languages 440 Generelle sikkerhetshenvisninger pa norsk de f lgende avsnittene finner du sikkerhetshenvisninger som du absolutt ma ta hensyn til ved omgangen med din router Transportog Bl lagring Oppstilling og Bl ibruktaking Du m kun transportere og lagre X4000 i originalemballasjen eller i en annen egnet emballasje som beskytter mot st t og slag F r oppstilling og drift av X4000 m du ta hensyn til henvisningene n r det gjelder omgivelsesbetingelsene sml tekniske data Bruk et fast og jevnt underlag Elektrostatisk oppladning kan f re til skader p apparatet Bruk derfor en jordet mansjett rundt h ndleddet eller ber r en jordet flate f r du ber rer kontakter eller utvidelseskort p X4000 Utvidelseskortene skal prinsipielt kun gripes i kantene ta ikke p komponenter eller lederbaner Hold utvidelses stikkplassene som ikke er i bruk stengt med blinddekselet slik at ingen gjenstander kan komme inn i apparatets indre Hvis det finnes uvedkommende gjenstander i apparatet under drift er det fare for
260. kta alltid nedanst ende s kerhetsanvisningar f r anv ndning av apparaten Transport och B X4000 f r endast transporteras och f rvaras i originalf rpackningen eller i f rvaring en annan likv rdig f rpackning som ger ett fullv rdigt skydd mot st tar och slag Installation och B Beakta uppgifterna om omgivningsf rh llanden se Tekniska data innan start X4000 installeras och startas Installera den p ett stabilt och j mnt underlag E Elektrostatisk uppladdning kan f rorsaka skador p apparaten B r d rf r en antistatisk manschett runt handleden eller r r alltid vid en jordad yta innan Du vidr r uttag kontakter eller utoyggnadskort till X4000 Tag endast p utbyggnadskortens kanter vidr r aldrig ledningarna och komponenterna E T ck ver en ej anv nd utbyggnadsinsticksplats med tackskivan s att inga fr mmande f rem l kan komma in i apparaten Risk f r str mst tar och kortslutning om fr mmande f rem l finns i apparaten under drift E S kerst ll att displaymodulens displayf nster inte kan skadas av n gra spetsiga f rem l Installera displaymodulen s att den inte kan falla ned resp uts ttas f r st tar och slag Anslut den endast till h rf r avsett RJ11 uttag X4000 annars kan X4000 och displaymodulen ta skada E S kerst ll under kabeldragningen att apparatens ventilationsslitsar inte tacks ver och att ventilationen inte p verkas En reducerad ventilationseffekt kan medf ra skador pa X4
261. l from the gt gt TCP IP protocol suite Telnet enables communication with a remote device in the network Trivial File Transfer Protocol Protocol for data transmission TFTP server software is a part of gt gt DIME Tools It is used for the transfer of configuration files and software to and from the router Universal gt gt Asymmetric Digital Subscriber Line The data rate is 128 kbps gt upstream and 1 9 Mbps gt downstream over ranges of up to 5 5 km The main U ADSL applications are gt gt POTS Internet access User Datagram Protocol A transport protocol similar to 9 TCP UDP offers no control or acknowledgment mechanisms but is faster than TCP UDP is connectionless in contrast to TCP Data transmission rate from the client to the gt Internet Service Provider Universal Uniform Resource Locator Address of a file on the Internet ITU T recommendation for balanced dual current interface lines up to 10 Mbps CCITT and ITU T recommendation that defines the interface between a PC or terminal as Data Terminal Equipment gt gt DTE and a modem as Data Circuit terminating Equipment gt gt DCE TU T recommendation for unbalanced dual current interface lines ITU T recommendation for data transmission at 48 kbps in the range from 60 108 kHz Modem for gt gt V 35 X4000 User s Guide Glossary V 90 VDSL VJHC VPN WAN WAN interface WAN partner X 21 X 21bis ITU standard
262. lable from 300 to 56000 default value 33600 Max Transmit Bps Is only used if Modulation V 90 Defines the maximum baud rate of outgoing data downstream that can be used with the modem profile Scalable from 300 to 56000 default value 33600 X4000 User s Guide samme 301 Bag Configuration of Expansion and Resource Cards with the Setup Tool V 42bis Compression Defines whether V 42bis compression can be negotiated for a connection Possible values E auto Negotiation is allowed E off V 42bis compression is not used MNP5 Compression Defines whether MNP5 compression can be negotiated for a connection Possible values E auto Negotiation is allowed E off MNP5 compression is not used Table 9 9 Menu MODEM PROFILE CONFIGURATION PROFILE 1 8 302 nmmsms X4000 Users Guide Resource Card with Digital Modems E The Error Correction field contains the following selection options To do Modem profile 1 configuration none Error correction is not used required First LAPM and then MNP4 is tried for error correction If both fail the modem clears the connection auto default value First LAPM and then MNP5 is tried for error correction If both fail error correction is not used This setting should generally be selected except for dial in users with modems that only support obsolescent standards such as V 23 V 22bis or V 21
263. ld 0 Delay after Connection Failure sec 300 Layer 1 Protocol ISDN 64 kbps Channel Bundling no Extended Interface Settings optional OK CANCEL Use Space to select The following parts of the menu are relevant for this configuration step Static Short Hold sec Idle time in seconds for static short hold Example values for trunk connections 60 only effective if charging pulses are transmitted during the connection AOCD 20 otherwise Idle for Dynamic Short Idle time in for dynamic Short Hold Hold Only effective if charging pulses are transmitted during the connection AOCD Table 7 20 WAN PARTNER ADD ADVANCED SETTINGS Todo Make the following entries gt Enter Static Short Hold sec e g 20 Enter Idle for Dynamic Short Hold 96 e g 0 gt Confirm with OK You have returned to WAN PARTNER ADD 172 mmmmm X4000 Users Guide Configuring WAN Partners Carrying out IP configuration Tips on entering Idle for Dynamic Short Hold 96 E For interactive connections e g gt gt telnet specify a high value e g 80 90 to avoid clearing connections during short phases without data exchange E For Internet connections e g WWW http etc specify a medium to high value e g 50 80 to avoid clearing connections while waiting E For data connections e g gt gt ftp specify a low value e g 10 40 to avoid the unnecessary continuat
264. le vakfed llel hogy ne ker lhessenek idegen t rgyak a k sz l k belsej be Amennyiben idegen t rgyak ker lnek a k sz l k belsej be ram t s s r vidz rlat vesz lye all fenn gyeljen arra hogy a displaymodul display j t semmilyen hegyes t rgy ne s rthesse meg vja a displaymodult l k sekt l s lees st l A displaymodult csak az X4000 erre kijel lt RJ11 csatlakoz h vely re csatlakoztassa hogy az X4000 k sz l ken s a displaymodulon emiatt keletkez meghib sod sokat elker lje A vezet kez sn l gyeljen arra hogy a k sz l k szell z ny l sai ne legyenek letakarva a szell z s zavartalanul m k dj k A nem megfelel szell z s az X4000 meghib sod s hoz vezethet A nem megfelel szell z s miatt fell p k rok eset ben garanciaig nye megsz nik Ne nyissa ki a k sz l k burkolat t s ne v gezzen semmilyen talak t st a t pegys gen mert ez ltal letvesz lyes ram t s vesz lye ll fenn Ne t vol tsa el a k sz l k r gz t csavarjait Ha a k sz l k hideg k rnyezetb l ker l az zemeltet si hely re akkor a k sz l k k lsej n s belsej ben lecsap dhat a nedvess g Az zembe helyez s el tt v rja meg am g a k sz l k el nem ri a szobah m rs kletet X4000 User s Guide samme 459 15 General Safety Precautions in 15 Different Languages 460 Rendeltet sszer alkalmaz s zemeltet s s teljesen meg nem sz rad Vegye fi
265. li olan g venlik talimatnamelerine kesinlikle uymaktad r IEC 950 EN 60950 uyar nca sistemin belirlenmi ekilde kullan m sadece sa kasna tamamiyle monte edildi inde sa lanabilir sogutma yang n nleme parazit giderme evre s cakl kesinlikle 50 C yi ge memeli Cihaz direk gelen g ne nlar ndan koruyunuz X4000 User s Guide samme 457 15 General Safety Precautions in 15 Different Languages 458 Temizlik ve Tamir Cihaz n i ine yabanc cisimlerin rne in ata veya s v lar n girmesini nleyiniz elektrik arpmas k sa devre Cihaz n yeterli oranda so utulmas na dikkat ediniz X4000 cihaz nda kullan c taraf ndan de i tirilebilecek herhangi bir yap eleman veya kullan c n n ayarlamas gereken alter jumper bulunmamaktad r Acil durumlarda rne in hasarl cihaz kasas veya kullan m par as cihaz n i ine s v veya yabanc maddelerin girmesi derhal elektrik ak m n kesip servise haber veriniz Cihaz sadece BinTec in yetkili servisi taraf ndan a labilir Cihaz a madan nce mutlaka elektrik fi ini prizden ekiniz M saade edilen i lemler d nda a lmas ve uygun olmayan ekilde tamir edilmesi kullan c i in b y k tehlikeler do urabilir rne in elektrik arpmas Cihaz n tamirat n sadece BinTec yetkili servisi taraf ndan yapt r n z Yetkili servis yerlerini nerede bulabilece inizi saticinizdan re
266. ling Bruk kun kabler som svarer til spesifikasjonene i denne h ndboken eller som fulgte med i original i leveringen Hvis du bruker andre kabler p tar seg BinTec Communications AG intet ansvar for eventuelle skader eller nedsatt funksjonalitet Garantien p apparatet oppheves i slike tilfeller F lg instruksene i h ndboken under tilkoplingen av apparatet Legg opp ledningene slik at de ikke kan bli skadet og at de ikke danner farekilder fare for snuble tordenv r m du verken tilkople dataoverf ringsledningene eller frakople eller bergre dem X4000 er beregnet pa bruk i et kontorlandskap egenskap av multi protokoll router bygger X4000 opp WAN forbindelser avhengig av systemkonfigurasjonen Det er tvingende n dvendig overv ke produktet for unng utilsiktede gebyrer X4000 oppfyller gjeldende sikkerhetsbestemmelser for innretninger innen informasjonsteknikk for bruk i kontorlanskapp Forskriftsmessig bruk IEC950 EN60950 av systemet er kun gitt ved kom plett montert metalldeksel kj ling brannbeskyttelse radio steydempning Omgivelsestemperaturen m ikke overskride 50 C Unnga direkte sollys Pass pa at ingen gjenstander f eks binders eller vaesker kan komme inn i apparatet fare for elektrisk stot kortslutning Pass pa tilstrekkelig avkjeling X4000 inneholder ingen komponenter som kan byttes ut av brukeren eller brytere jumpere som brukeren m innstille X4000 User s Guide ssmmm 441
267. llows to configure the ISDN BRI interface E Entering the settings of your ISDN connection Here you set the most important parameters of your ISDN connection BE Configuring Incoming Call Answering Here you tell X4000 how to react to incoming calls from the WAN Autoconfiguration Firstly enter the settings for your ISDN connection ISDN Switch Type X c to CM 1BRI ISDN S0 X4000 User s Guide mmm 137 Basic Configuration of Basic Unit with Setup Tool 138 X4000 Setup Tool WAN WAN Interface BinTec Communications AG MyRouter ISDN Switch Type D Channel B Channel 1 B Channel 2 Incoming Call Answering gt Advanced Settings gt SAVE Result of Autoconfiguration Euro ISDN point to multipoint autodetect on bootup dialup dialup dialup CANCEL Use lt Space gt to select X4000 User s Guide Configuring WAN Interfaces The menu contains the following fields Result of Status of ISDN autoconfiguration Automatic Autoconfiguration D channel detection runs until a setting is found or until the ISDN protocol is entered manually under ISDN switch type ISDN Switch Type Defines the ISDN gt gt protocol supplied by your ISDN provider The following parameters are possible E autodetect on bootup automatic D channel detection default setting M Euro ISDN point to multipoint Euro ISDN for point to multipoint M Euro ISDN point to point Euro ISDN for point to
268. lly and must be entered under Encryption Key TX and Encryption Key RX Encryption Key TX Only for Encryption Key Negotiation static Key in hexadecimal format for encryption of outgoing data must be the same as the entry under Encryption Key RX at the connection partner s Encryption Key RX Only for Encryption Key Negotiation static Key in hexadecimal format for encryption of incoming data must be the same as the entry under Encryption Key TX at the connection partner s Table 10 22 WAN PARTNER ADD ADVANCED SETTINGS WM EXTENDED INTERFACE SETTINGS OPTIONAL Proceed as follows to exchange data in encrypted form with a WAN partner gt Goto WAN PARTNER 9 Select a WAN partner and confirm with Return to encrypt the PPP connections to this partner gt Select Encryption e g DES 56 X4000 User s Guide Line Tapping Security gt Go to WAN PARTNER EDIT ADVANCED SETTINGS EXTENDED INTERFACE SETTINGS OPTIONAL Y Select Encryption Key Negotiation e g static if you wish to define the key yourself Enter Encryption Key TX if applicable e g 1AS5EFC17B56 Enter Encryption Key RX if applicable e g 89A1288CD131 Press SAVE Confirm with OK Vo NOV Y Y Press SAVE 10 3 2 VPN with extra license X4000 can set up a VPN Virtual Private Network using the PPTP Point to Point Tunneling Protocol This provides safe encrypted transmissi
269. lt Space gt to select Make the following entries to define a rule 9 Select Action deny M Select Filter wrong dns 1 Press SAVE You have returned to IP Access LISTS RULES and the entries have been saved Now define a second rule as follows gt QGoto P Access Lists RULES ADD Select Insert Behind Rule H 1 Fl 1 wrong dns Select Action allow M Select Filter all 2 VV OY Y Press SAVE You have returned to IP Access LISTS RULES and the entries have been saved and listed X4000 User s Guide Basic Router Settings To do X4000 Setup Tool IP ACCESS RULE Configure IP Access Rules BinTec Communications AG MyRouter NRI Next Rule Index Abbreviations RI Rule Index M Action if filter matches FI Filter Index M Action if filter does not match RI FI NRI Action Filter Conditions 1 1 2 deny M wrong dns udp sp 137 dp 53 2 2 0 allow M all ADD DELETE REORG EXIT Press Ctrl n Ctrl p to scroll Space tag unt edit ag DELETE lt Return gt to Goto IP ACCESS LISTS INTERFACES X4000 Setup Tool IP ACCESS INTERFACES Configure First Rule BinTec Communications AG MyRouter Configure first rules for interfaces Interface First Rule First Filter eni 1 1 wrong dns enl snap 1 1 wrong dns EXIT Press Ctrl n Ctrl p to scroll Return t o edit select Make the following entries
270. make the following settings in WAN PARTNER ADD JP ADVANCED SETTINGS gt Select Dynamic Name Server Negotiation client receive This setting is only necessary if you have not entered fixed IP addresses for DNS on the PCs of your network Creating a Routing Entry You have just entered a WAN partner in your X4000 A routing entry is created automatically in the routing table of your X4000 for every WAN partner You can edit existing routing entries and add new ones For the connection to your Internet Service Provider you should always configure a default route Proceed as follows gt Goto IP ROUTING X4000 User s Guide samen 175 Basic Configuration of Basic Unit with Setup Tool 176 X4000 Setup Tool IP ROUTING IP Routing BinTec Communications AG MyRouter The flags are Up D Dormant B Blocked U G Gateway Route I Interface Route S Subnet Route H Host Route E Extended Route Destination Gateway Mask Flags Met Interface Pro 192 168 1 1 192 168 1 254 255 255 255 0US 0 enl loc 10 1 1 0 255 255 255 0DI 0 BigBoss mgmt default 0 0 0 0 DI 0 GoInternet mgmt ADD ADDEXT DELETE EXIT Press lt Ctrl n gt lt Ctrl p gt to scroll lt Space gt tag untag DELETE lt Return gt to edit All IP routes entered are listed here Flags shows the current status Up Dormant Blocked and the type of route Gateway Route Interface Route Subnet Route Host Route Extended Route
271. man 375 12 Troubleshooting 12 4 Aids to Troubleshooting Here you can find methods to help narrow down the possible causes of your problem HM Input keys and display for operating the Man Machine Interface MMI HM Local SNMP Shell Commands HM External Aids 12 1 4 Man Machine Interface MMI You can use the MMI to show information about the status of X4000 basic unit and expansion card on the display without having to log in on the equipment For example you can quickly obtain the version of the current software release or the current operating status of the interfaces The MMI is easy to use and the display messages are intuitive This is explained in detail in chapter 5 page 93 12 1 2 Local SNMP Shell Commands These commands are entered directly in X4000 s SNMP shell debug You can use the debug command for troubleshooting in one or more subsystems of X4000 A detailed explanation of the syntax and options can be found in chapter 14 1 page 412 Examples Enter debug all to display debugging information for all subsystems 9 Enter debug config amp for tracking down configuration management problems see chapter 11 page 363 376 mmmm X4000 Users Guide Aids to Troubleshooting 12 If you add amp to an SNMP shell command the program runs in the background isdnlogin You can use the isdnlogin command to verify that an ISDN connection can be made This is explained in chapter 14 1 page 412 E
272. mands The bricktrace and capitrace programs are included in BRICKtools for UNIX on the BinTec Companion CD They are started on a Unix workstation by entering the following commands bricktrace bricktrace h23aeFpiNtxs T tei c lt cref gt r lt cnt gt H lt host gt P lt port gt channel unit slot Is used to trace and evaluate ISDN messages D and B channels h hexadecimal output 2 layer 2 output 3 layer 3 output a asynchronous HDLC B channel only e ETS300075 Euro File Transfer output F fax B channel only p PPP B channel only i lP output B channel only N Novell IPX output B channel only t Output in ASCII text B channel only x raw dump mode s Check X4000 for available trace channels T lt tei gt set TEI filter D channel only c lt cref gt set callref filter D channel only r lt cnt gt only receive cnt bytes H lt host gt IP address or name of IP host p port specify trace TCP port default 7000 channel 0 D channel or X 21 interface 1 31 Bx channel unit 0 1 selects the physical interface for modules with two interfaces e g CM 2BRI slot 1 2 indicates the slot in which the module is installed X4000 User s Guide mm m 419 14 Important Commands capitrace 420 capitrace h s 1 Is used to trace and evaluate CAPI messages
273. matically assigns 9 IP addresses from a defined IP address pool to requesting PCs in the LAN A PC sends out an ARP request and in turn receives its IP address assigned by X4000 You do not need to assign fixed IP addresses to PCs which reduces the amount of configuration work in your network To do this you set up a pool of IP addresses from which X4000 assigns IP addresses to hosts in the LAN for a defined period of time A DHCP server also transfers the addresses of the Domain Name Server entered X4000 User s Guide samme 129 Basic Configuration of Basic Unit with Setup Tool statically or by PPP negotiation gt gt DNS gt gt NetBIOS name server WINS and standard gt gt gateway gt Qoto P IP ADDRESS POOL LAN DHCP ADD X4000 Setup Tool BinTec Communications AG IP DHCP ADD Add Range of IP Addresses MyRouter Interface eni IP Address 192 168 1 1 Number of Consecutive Addresses 8 Lease Time Minutes 120 MAC Address Gateway NetBT Node Type not specified SAVE CANCEL Use Space to select 130 m ss s X4000 Users Guide Basic Router Settings 7 The menu contains the following fields Interface An interface to which the next address pool is assigned When an address request is received over Interface one of the addresses in the address pool is assigned IP Address First IP address in the address pool Number of Consecutive Addresses Total numbe
274. mini Delta ribbon socket DTE Mode X4000 User s Guide saman 401 E Technical Data The 26 pole mini Delta ribbon socket has the following pin assignment in DCE Mode Connector DCE D O D gt 4 Dis 101 f 1 PG A ChGND 1 ChGND 102 9 8 SG B SigGND 19 SigGND 104 3 gt f9 R S RDB 22 RDB 104 4 gt f2 R P RDA 4 RDA 103 lt 5 11 T T TDB 24 TDB 108 lt 6 4 IT R TDA 6 TDA 106 7 gt i0 25 RTSB 106 8 gt 93 I cC GIS 7 CTSA 105 lt 9 12 C 27 RTSB 105 lt 10 5 C D RTS 9 RTSA 114 44 13 S X TCB 26 TCB 114 s 12 6 s v TCA 8 TCA 107 15 gt 30 DSRB 107 16 gt H DSR 12 DSRA 109 s i7 31 DCDB 109 48 F DCD 13 DCDA 108 2 lt 19 29 DTRB 108 2 amp 20 E DTR 11 DTRA 114 4 9 AA TCB 23 TCB 114 amp Y TCA 5 TCA VCC 5V 25 Table 13 9 Pin assignment of 26 pole mini Delta ribbon socket DCE Mode 402 nmmmmm X4000 Users Guide Features of Basic Unit E 20 Pole Mini Delta Ribbon Socket for X 21bis The serial X 21bis interface of X4000 is a 20 pole mini Delta ribbon socket Figure 13 9 20 pole mini Delta ribbon socket second serial port right X4000 User s Guide mmma 403 Technical Data The 20 pole mini Delta ribbon socket
275. mperature 20 C to 50 C Operating temperature 0 C to 40 C Relative humidity 20 to 90 non condensing in operation 5 to 95 non condensing in storage Room classification Operate only in dry rooms Printed documentation User s Guide supplied with equipment Table 13 1 X4000 technical data X4000 Users Guide samma 387 E Technical Data 13 1 Mains Unit Connect the IEC AC socket of the mains unit to the power supply using the power cord supplied with the equipment Mains unit Wide range mains unit without fan Mains voltage 100 to 240 V AC Mains frequency 50 to 60 Hz Max current drawn 800 mA Table 13 2 Technical data for mains unit 388 mmmma X4000 Users Guide Features of Basic Unit E 13 2 Features of Basic Unit Processor Motorola MPC860T RISC CPU Memory 16 MB SDRAM 4 MB flash ROM Interfaces Console interfaces Ethernet LAN interface WAN interfaces Serial mini DIN 10 100 Base T auto sensing RJ45 socket ISDN interface BRI S T RJ45 socket 2 x X 21 V 35 V 36 X 21bis 26 pole mini Delta ribbon socket up to 2048 kbps Displays Illuminated green 122 x 132 pixel LC display with illuminated input keys Blue Power LED on the front panel of X4000 2 Status LEDs green and red on the back of X4000 Extension capability Slot for an X4000 expansion card Table 13 3 Features of basic unit X4000 User s Guide ssmaa 389
276. mpression The ISDN BRI expansion card and the LAN expansion card can be optionally equipped with an appropriate resource card X4000 User s Guide sss 409 13 Technical Data Due to export and import regulations it is not always possible to guarantee delivery of resource cards for encryption and compression If you are using an expansion card with resource card s in the X4000 built in unit BinTec Communications AG recommends that you use the fan unit obtainable as optional equipment e 410 m mmmma X4000 Users Guide 14 Important Commands This chapter describes the following commands SNMP shell commands telnet ping trace isdnlogin debug ifconfig ifstat netstat date t nslookup BRICKtools for Unix commands bricktrace capitrace X4000 User s Guide samme 411 14 Important Commands 412 14 1 SNMP Shell Commands X4000 contains several pre installed programs that can be started directly from the SNMP shell A short description of the most commonly used programs and the associated command lines for starting the respective programs in the SNMP shell are given below Entering displays a list of the most important commands available on X4000 Please note Parameters shown in the command lines inside square brackets represent optional values Terms inside angle brackets can have several values Do not enter any brackets telnet telnet f host lt port gt Is used to comm
277. munications AG IP NAT CONFIG NAT Configuration GoInternet MyRouter Network Address Translation on Configuration for sessions requested from outside Service Destination Source Dep Dest Dep Port Remap ADD DELETE SAVE CANCEL Use Space to select Make the following entries Select Network Address Translation on Press SAVE Network Address Translation is activated for the selected interface or WAN partner Leave IP NETWORK ADDRESS TRANSLATION with EXIT gt Leave IP with EXIT You have returned to the main menu and have configured a WAN partner In order to permit certain external connections to hosts in the LAN in spite of activated NAT you must define the sessions allowed exactly How to do this is described in chapter 10 2 7 page 331 7 39 2 Examples The WAN partner settings for some example configurations are shown below E Internet Access over T Online page 183 E Internet Access over Compuserve page 184 X4000 User s Guide Configuring WAN Partners T Online How to enter the passwords is described in Changing the password page 85 Internet Access over T Online The following settings are necessary In WAN PARTNER ADD Partner Name e g 7_ONLINE Encapsulation PPP Compression none Encryption none In WAN PARTNER ADD WAN NUMBERS ADD Number dial in number z B 0191011 Direction outgoing In WAN PARTNER ADD PPP Authenticat
278. n chapter 9 5 page 306 and can be optionally equipped with up to two resource cards with digital modems chapter 9 4 page 295 X4000 User s Guide samme 281 9 Configuration of Expansion and Resource Cards with the Setup Tool 9 2 1 Configuration with the Setup Tool The additional interfaces are shown in the Setup Tool main menu under Module as follows X4000 Setup Tool BinTec Communications AG MyRouter Licenses System LAN CM 100BT Fast Ethernet Module X4E 2PRI ISDN S2M WAN CM 1BRI ISDN S0 Serial WAN CM SERIAL Serial WAN Partner IP IPX PPP MODEM ISDN CAPI Configuration Management Monitoring and Debugging Exit The ISDN PRI G 703 interface s is are configured in the menus E X4E 2PRI ISDN S2M UNIT 0 for the first ISDN PRI G 703 port E X4E 2PRI ISDN S2M UNIT 1 for the second ISDN PRI G 703 port Sly The number of ISDN PRI or G 703 ports available with the expansion card can vary depending on how many and which interfaces are activated by license You can obtain any necessary licenses from your dealer ty 282 mmmmm X4000 Users Guide WAN Interface Card for ISDN PRI and or G 703 Bg The menus contain the following fields Result of Autoconfiguration Status of ISDN autoconfiguration Automatic D channel detection runs until a setting is found or until the ISDN protocol is entered manually under ISDN Switch Type ISDN Switch Type Defines the ISDN gt gt prot
279. n groups can be configured with up to ten hosts each Possible values 0 9 IPAddress Defines a host that is to be monitored by X4000 Interval Defines the time interval in s to be used for reachability of hosts default value 300 The smallest time interval is used within a group That is all the hosts in a group are checked by X4000 at the smallest time interval of the group DownAction Defines how the status of the X4000 interfaces selected in Firstlflndex and Range is set if ALL hosts in a group are not reachable Possible values M down default value Interfaces are deactivated E up Interfaces are activated The status of the interfaces is set to the original value again when at least one host in a group can be reached again X4000 User s Guide sssa 239 Bag Advanced Configuration of the Basic Unit with the Setup Tool Firstlflndex Defines the first interface of an interface range in X4000 for which the action defined under DownAction is to be executed Possible values 10001 15000 default value 10001 Interfaces with indices from 10001 to 15000 are provided for dialup connections to WAN partners The default value 10001 designates the interface to the first WAN partner configured in X4000 dialup connection The indices of other interfaces are given in the Software Reference Range Defines the range of interfaces in X4000 for which the action defined
280. n with the user name admi n Local PPP ID This entry is necessary for identification of X4000 if gt gt PPP authentication e g PAP or gt gt CHAP is carried out that is not specific to a partner see chapter 8 1 3 page 194 Location Indicates where X4000 is located optional Contact States the contact person responsible optional If the person is to be reached from X4000 s HTTP status page see chapter 10 1 4 page 320 a valid e mail address must be entered here Table 7 2 SYSTEM Passwords Enter the passwords for X4000 in the submenu SYSTEM PASSWORD SETTINGS admin Login Password Password for user name admin read Login Password Password for user name read write Login Password Password for user name write HTTP Server Password Password for the HTTP status page of X4000 Table 7 3 SYSTEM PASSWORD SETTINGS 124 mmsmmma X4000 Users Guide Basic Router Settings A To do Advanced configuration Caution All BinTec routers are shipped with the same user names and passwords As long as the password remains unchanged they are not protected against unauthorized use How to change the passwords is described in Changing the password page 85 gt Change the passwords to prevent unauthorized access to X4000 The permission rights of the possible user names and passwords can be found in chapter 4 2 page 76 Proceed as follows to ent
281. n addition to BRICKware your BinTec Companion CD contains the RVS COM Lite communications program that allows you to use all the usual communications applications on your PC such as an answering machine fax or file transfer X4000 User s Guide BinTec Companion CD E Y Please note The license for RVS COM Lite is a single user license You can purchase additional licenses from your dealer e Whatelse The Companion CD also contains a range of other useful directories in which you can find the following for example E The documentation in electronic form see chapter 1 4 page 22 A copy of the router software UNIX Tools administration Adobe s Acrobat Reader Configuration examples X4000 User s Guide m m 21 22 1 4 Documentation from BinTec Together with X4000 you will have received part of the documentation in printed form and all of itin electronic form PDF HTML The electronic versions of the different documents are included on the BinTec Companion CD In addition to your Companion CD documentation you can download all the very latest BinTec documentation from our WWW server at www bintec de The following documentation is currently available HM Users Guide English This manual E Benutzerhandbuch German This manual in German M Reference manuals English PDF HTML Software Reference PDF Online reference with detailed information on functions described here a reference for the internal
282. n existing entry Confirm with Return to change the entry Select the Item e g PPP routing Enter the Number e g 091112330 Select the Mode e g right to left Select the Bearer e g data Press SAVE You have returned to menu X4E 2PRI ISDN S2M UNITO INCOMING CALL ANSWERING The entries are saved and displayed in the list You have now assigned a possible service PPP routing to one of your numbers 0911 123 30 This means that when a data call is received for Called Party Number 0911 123 30 it is put through to the PPP routing service Repeat these steps until you have assigned to all phone numbers the services to be reached under these numbers You have now configured Incoming Call Answering for this ISDN PRI interface and X4000 distributes the incoming calls to the internal services Leave X4E 2PRI ISDN S2M UNIT 0 INCOMING CALL ANSWERING with EXIT Press SAVE If applicable go to X4E 2PRI ISDN S2M UNIT 1 to configure the second ISDN PRI G 703 interface X4000 User s Guide samen 285 E Configuration of Expansion and Resource Cards with the Setup Tool WAN partner To enable X4000 to make connections to networks or hosts outside your LAN you must configure the partners you want to connect to as WAN partners on your X4000 This applies to outgoing connections incoming connections and leased lines Refer to chapter 7 3 page 159 286 smmmmsas X4000 Users Guide LAN Interface Card for 10 10
283. n objet pointu n endommage la fen tre du module d af fichage Prot gez le module d affichage contre les chocs et les chutes ne le raccordez qu la prise RJ11 X4000 pr vue cet effet afin d viter tout dommage du X4000 et du module d affichage Lors du c blage veillez ne pas recouvrir les fentes d a ration de l appareil de mani re ne pas entraver la ventilaton Le droit la garantie est annul lorsque les dommages r sultent d une ventilation insuffisante N ouvrez pas l appareil de base et n effectuez aucune manipulation sur le bloc d alimentation sous risque de danger de mort par lectrocution Ne retirez aucune vis de fixation sur l appareil de base Si l appareil est transport dans une pi ce o la temp rature est plus lev e que l endroit d o il provient de la condensation risque de se former l ext rieur comme l int rieur de l appareil Avant de mettre votre appareil X4000 User s Guide snsmua 427 15 General Safety Precautions in 15 Different Languages Utilisation conforme 428 fonctionnement en service attendez qu il soit la m me temp rature que la pi ce et qu il soit absolument sec Veuillez respecter les indications concernant les conditions d environnement cf Caract ristiques techniques V rifiez si la tension secteur locale correspond aux tensions nominales du bloc d alimentation L appareil ne devra fonctionner que dans les conditions ci apr s 100 240 Vca
284. n of the modem profile Modulation Defines the modem standard to be used The selected modem standard must be supported by the analog modem of the opposite terminal V 90 and lower are supported by 56000 modems V 34 and lower by 33600 modems V 32bis and lower by 14400 modems Possible values V 90 V 34bis V 34 V 32bis V 32 V 23 V 22bis V 22 V 21 Error Correction Defines the error correction to be used For possible values see Table 9 10 page 303 300 m mmmma X4000 Users Guide Resource Card with Digital Modems Bg Automode Defines whether dynamic negotiation of parameters for baud rates and modem standards is allowed with the dial in user Possible values E on default value Negotiation is allowed E off The set values are always used Min Bps Defines the minimum baud rate that can be used with the modem profile Any speed supported by the modem standard set under Modulation can be set here The connection is cleared if the only baud rates that can be negotiated with the opposite terminal are smaller than the value set here Scalable from 300 default value to 56000 Max Receive Bps Defines the maximum baud rate of incoming data upstream that can be used with the modem profile Any speed supported by the modem standard set under Modulation can be set here The value set under Max Transmit Bps is used here if this value is less than the value set here Sca
285. n or recreated X4000 User s Guide Administration of Configuration Files od reboot Restart X4000 All settings in the memory are replaced by boot settings from the flash Table 11 2 Operation The State of last operation field can display the following todo The operation has not yet been started running The operation is being executed done The operation has been executed successfully error The operation could not be fully executed see syslog message Table 11 3 State of last operation If an error should occur while running get TFTP gt FLASH and the operation is aborted the file to be overwritten in the flash is deleted So if you transfer a boot file X4000 s boot file will be deleted and X4000 cannot load a configuration on restarting If necessary rename the file to be transferred To run put Flash gt TFTP get TFTP gt Flash and state MEMORY gt TFTP you need a TFTP server on the host to or from which you can transfer a configuration file If the TFTP host is a Windows PC click Program BRICKware DIME Tools in the Windows Start menu to open DIME Tools and activate the TFTP server with File TFTP Server before you run the operation in question X4000 Users Guide samma 367 11 Configuration Management ai i7 If you want to use your Windows PC as a TFTP host but are not sure what the ey IP address of the PC is proceed as follow
286. namic entry created in the cache f none of the DNS asked can resolve the name or no default interface has been selected see 5 Is overwriting the global name server addresses admissible Overwrite Global Nameserver yes In this case a connection is set up to the first WAN partner which is configured so that addresses of DNS can be sent provided this has not previously been attempted If name server negotiation is successful these are entered as global name servers and are therefore available for further requests Request is answered with server error If one of the DNS answers with non existent domain this answer is forwarded to the source of the request immediately and included in the cache as negative entry Overview of Configuration with the Setup Tool The configuration and monitoring of name resolution in X4000 is set in IP STATIC SETTINGS IP DNS IP DNS Static Hosts IP DNS FORWARDED DOMAINS IP DNS DYNAMIC CACHE IP DNS ADVANCED SETTINGS IP DNS GLOBAL STATISTICS WAN PARTNER EDIT IP ADVANCED SETTINGS X4000 User s Guide samme 251 Bg Advanced Configuration of the Basic Unit with the Setup Tool IP STATIC SETTINGS contains the following fields Domain Name Defines X4000 s Domain Name Primary Domain Name IP address of X4000 s first global Domain Server Name Server DNS Secondary Domain IP address of another global Domain Name N
287. nd recommendation can then be found in the BOOTmonitor and Firmware Logic Update release notes under www bintec de Section Download The result of incorrect updating operations e g power cut during the update could be that X4000 no longer boots Update the module logic Bootmonitor or firmware logic only if BinTec Communications AG explicitly recommends such action X4000 User s Guide ssmms 371 11 Configuration Management Todo To update the software boot image proceed as follows 34 Do not turn X4000 off during the update Before starting the update deactivate auto logout by entering t 0 in the SNMP shell e Type in the URL www bintec de in your browser e g Internet Explorer or Netscape Navigator The BinTec home page opens Click Solutions and Products and then Download Here you will find the latest software and documentation for BinTec products gt Click X4000 Here you will find the latest software and documentation for X4000 Click the current boot image with the right mouse button e g Boot Image Rel 5 1 Rev 4 Inthe context menu click Save link as gt Type in the directory and name under which the new boot image should be saved on your PC The directory is normally CABRICK for Windows PCs and tftpboot for Unix workstations You can use this name Press SAVE The boot image is saved on your PC gt Activate a TFTP server on your PC For a Windows PC Cl
288. nd Local IP Number and Second Local Netmask gt Select Encapsulation e g Ethernet Il 9 Select Mode e g auto Press SAVE You have returned to the main menu and the entries have been saved Advanced If you wish to use the IPX gt protocol you will find an explanation of how to configuration configure the LAN interface for IPX in chapter 8 4 page 268 Information about bridging can be found in the Software Reference 9 3 2 Broadband Internet Access ADSL with X4000 and LAN Expansion Card BinTec Communications AG s X4000 offers the PPP over Ethernet protocol This protocol is required for example for connecting terminals to the Internet over the T DSL connection of Deutsche Telekom AG to achieve increased bandwidth 34 If you use the ADSL connection of another provider ask the provider about any special features of your ADSL connection that need to be taken into account e chapter 7 2 3 page 155 describes how you can use the T DSL connection with X4000 s basic unit with only one LAN interface The limitations and security risks described there do not apply if X4000 is equipped with a LAN expansion 288 smmmm X4000 Users Guide LAN Interface Card for 10 100 Mbps 9 card and several LAN interfaces are therefore available In this case for example you can use one of X4000 s LAN interfaces for your LAN and another LAN interface for access to T DSL Example Scenario The following scenario provides an e
289. nd practicable You can also define a rule chain individually for each X4000 interface X4000 User s Guide samme 335 10 Configuration of Security Functions and Firewall WAN Partner 1 WAN Partner 2 Rule 1 Rule 4 Next Rule 2 Next Rule 2 Rule 2 Rule 5 WAN Partner 3 Next Rule 3 Next Rule 0 Rule 3 Next Rule 0 Rule 0 Discard Packet Figure 10 2 Rule chains for various interfaces Configuration is made in E P Access LISTS FILTER E P Access Lists RULES E P Access Lists RULES REORG a IP ACCESS LiSTS INTERFACES 336 mssm X4000 Users Guide Access Security 10 You can define filters in IP ACCESS LISTS W FILTER Description Designation of the filter Note that only the first 10 or 15 characters are visible in other menus Index Cannot be changed here X4000 automatically issues a number to new filters defined here Protocol Defines a protocol Possible values any icmp ggp ip tcp egp igp pup chaos udp hmp xns idp rdp rsvp gre esp ah tlsp skip kryptolan iso ip igrp ospf ipip ipx in ip vrrp l2tp any matches any protocol tcp matches only TCP data packets etc Type Only if Protocol icmp Possible values any echo reply destination unreachable source quench redirect echo time exceeded param problem timestamp timestamp reply address mask address mask reply See RFC 792 Connection State If Protocol
290. nebilirsiniz Di er durumlarda garanti hakk kaybolmaktad r Cihaz n su ile temizlenmesi kesinlikle yasakt r Suyun cihaz i ine ka mas kullan c i in b y k tehlikeler do urabilir rne in elektrik arpmas ve cihaza da ciddi zararlar verebilir Kesinlikle temizleme tozlar alkalik temizlik maddeleri keskin veya a nd r c yard mc maddeler kullanmay n z X4000 User s Guide Sz ll t s s t rol s Fel ll t s s zembe helyez s ltal nos biztons gi tmutat A k vetkez fejezetekben olyan biztons gi tmutat sokat tal l amelyeket a k sz l ke alkalmaz sa sor n felt tlen l figyelembe kell vennie Az X4000 csak az eredeti vagy egy m s arra alkalmas csomagol sban sz ll tand s t roland amely l k sek s t sek ellen v delmet biztos t Az X4000 fel ll t sa s zembe helyez se el tt vegye figyelembe a k rnyezeti felt telekre vonatkoz utas t sokat v a m szaki adatokkal A k sz l ket szil rd s s k alapon alkalmazza Az elektrosztatikus t lt sek kis l se a berendez s meghib sod s hoz vezethet Ezek megel z se c lj b l viseljen f ldelt csukl p ntot vagy rintsen meg egy f ldelt fel letet miel tt az X4000 csatlakoz h velyeihez vagy b v t k rty ihoz hozz rne A b v t k rty kat mindig csak a sz l k n rintse meg sose rjen alkatr szekhez vagy vezet vonalakhoz A nem haszn lt slotokat mindig z rja
291. nents in packet switched data networks e g Datex P The X 21bis recommendation defines the gt gt DTE gt gt DCE interface to V series synchronous modems X4000 User s Guide samme 485 W Glossary X 25 An internationally agreed standard protocol that defines the interface between network components and a packet switched data network X 31 For integration of X 25 compatible DTEs in ISDN 486 mmm X4000 Users Guide Index A Access lists Access security Activity monitor Activity monitoring Additional license ADSL Advanced configuration with Setup Tool ARP Authentication TAF Auto logout Back route verification Bandwidth on Demand Basic configuration with Setup Tool Basic IP settings Basic router settings Basic unit Built in unit Desktop unit Interfaces Technical data BinTec Companion CD Boot sequence BOOTP relay agent BRICKware Installation Bridging Built in unit Callback CAPI Changing over the display Channel bundling CHAP 36 20 22 159 194 X4000 User s Guide ssmnuz 327 141 55 199 327 487 Im Index 488 Checking the calling party number Checklist for security functions CLID Closed User Group COM port driver Commands BRICKtools for Unix SNMP shell Communications applications Compression MS STAC STAC Van Jacobson Header Compression Compuserve Configuration Advanced configuration with Setup Tool Basic configuration with Configuration Wizard Basic configurati
292. network components with a similar function to gt bridges or even 9 routers They switch data packets between the input and output port In contrast to bridges switches have several input and output ports This increases the bandwidth in the network Switches can also be used for conversion between networks with different speeds e g 100 Mbps and 10 Mbps networks Transmission process in which the transmitter and receiver operate with exactly the same clock signals in contrast to gt asynchronous Spaces are bridged by a stop code Transmission Control Protocol One of the gt gt TCP IP suite of protocols used for the connection of Wide Area Networks gt gt gt WANS Transmission Control Protocol Internet Protocol A protocol suite for the connection of Wide Area Networks gt gt WANs The two parts of this protocol suite are gt gt IP layer 3 of the OSI model and gt gt TCP layer 4 of the OSI model Terminal Equipment Terminal equipment for subscriber access e g telephone fax or PC Terminal Endpoint Identifier The TEI in gt gt ISDN is an address field in layer 2 that is used for identifying a certain terminal X4000 User s Guide mm m 483 EE Glossary Telematics 484 Telnet TFTP U ADSL UDP Upstream URL V 24 V 28 V 35 V 36 Telematics is a combination of telecommunication and computer technology and describes data communication between systems and devices Protoco
293. nforma n techniky pou van v kancel sk m prost ed Provoz syst mu odpov daj c stanoven mu elu podle IEC 950 EN 60950 je zaru en pouze p i kompletn mont i plechov ho krytu chlazen protipo rn ochrana odru en Teplota okol nesm p ekro it 50 C Zabra te p m mu oz en sluncem X4000 User s Guide mm m 463 I General Safety Precautions in 15 Different Languages 464 i t n aopravy W Dbejte na to aby do vnit ku p stroje nemohly vniknout dn p edm ty nap kancel sk svorky anebo kapaliny elektrick v boj zkrat Dbejte na dostate n chlazen X4000 neobsahuje dn sou sti kter by u ivatel sm l vym ovat nebo sp na e propojky kter by u ivatel musel nastavovat V nouzov ch p padech nap po kozen sk anebo ovl dac prvek vniknut kapaliny nebo ciz ch t les okam it p eru te p vod proudu a informujte servis P stroj sm otv rat pouze autorizovan servis firmy BinTec P ed otev en m se p stroj z sadn mus odpojit od s t vyt hnout z str ku Nepovolan m otev r n m a neodborn mi opravami se u ivatel vystavuje zna n mu ohro en nap zasa en elektrick m proudem Proveden m oprav p stroje pov ujte pouze autorizovan servis firmy BinTec Adresu servisu V m sd l V obchodn k Ve v ech ostatn ch p padech zanikaj ve ker n roky ze z ruky P s
294. ng the input keys 5 4 1 Defining Default Screen The logo is displayed as standard on the screen when the idle timer expires If you want to use another screen as default screen for the MMI proceed as follows gt Use the input keys to indicate the desired screen gt Keep the C key pressed for three seconds New default screen has been selected gt Confirm with OK The selected screen is shown and used as default screen 5 4 2 Saving the Configuration Proceed as follows to save the current configuration of X4000 using the input keys Keep the OK key pressed for three seconds Do you want to save the current configuration X4000 User s Guide ssamms 107 A Man Machine Interface MMI Display with User Guide 108 Press OK Saving configuration Configuration saved Press OK 5 4 3 Restarting X4000 Proceed as follows to restart X4000 using the input keys Keep the OK key and C key pressed for three seconds ATTENTION Do you really want to reboot X4000 Press OK System reboot in 5 seconds System reboot Standby until X4000 is up again X4000 User s Guide The restart is executed after 5 seconds 6 Fast Configuration with the Configuration Wizard Basic Unit With the Configuration Wizard on your BinTec Companion CD BinTec Communications AG offers you a quick and convenient w
295. nnel Bundling chapter 8 2 2 page 199 Bandwidth on Demand BoD chapter 8 2 3 page 201 Always On Dynamic ISDN AO DI chapter 8 2 4 page 206 Layer 1 Protocol ISDN B Channel chapter 8 2 5 page 219 IP Transit Network chapter 8 2 6 page 222 Transfer of DNS and WINS Server IP Addresses to WAN Partners chapter 8 2 7 page 225 RIP Routing Information Protocol chapter 8 2 8 page 229 Compression gt VJHC gt STAC MS STAC chapter 8 2 9 page 232 gt Proxy ARP Address Resolution Protocol chapter 8 2 10 page 234 Keepalive Monitoring chapter 8 2 11 page 236 The configuration steps necessary in each case are explained in detail below 8 2 1 Delay after Connection Failure This function enables you to set the period of time X4000 is to wait after an unsuccessful attempt to set up a call X4000 User s Guide Settings Specific to WAN Partners B To do Dynamic Static This is configured in WAN PARTNER EDIT ADVANCED SETTINGS Delay after Connection Block timer Indicates the wait time in seconds Failure sec before X4000 tries again after an attempt to establish a connection has failed Table 8 8 WAN PARTNER Epir ADVANCED SETTINGS Proceed as follows gt Goto WAN PARTNER EDIT ADVANCED SETTINGS gt Enter Delay after Connection Failure sec gt Confirm with OK Press SAVE 8 2 2 Channel Bundling X4000 supports dynamic and static 9
296. nsupervised operation of the product BinTec and the BinTec logo are registered trademarks of BinTec Communications AG All other product names and trademarks mentioned are the property of the respective companies and manufacturers All rights are reserved No part of this publication may be reproduced or transmitted in any form or by any means graphic electronic or mechanical including photocopying recording in any medium taping or storage in information retrieval systems without the prior written permission of BinTec Communications AG Adaptation and especially translation of the document is inadmissible without the prior consent of BinTec Communications AG X4000 complies with the following guidelines and standards E Low voltage directive 73 23 EEC according to EN60950 complies with German equipment safety regulations ummm X4000 Users Guide E B6 Interference immunity according to EN50082 1 8 97 How to reach BinTec E Class B interference emissions according to EN55022 8 94 A1 1995 A2 1997 electromagnetic compatibility according to EU directive 89 336 EEC E CE marking for all EU countries Registration E CE registration Bi German T V inspection GS safety regulations HM BAKOM Switzerland registration had not been completed at the time this manual went to print For further information on this see the latest release notes at www bintec de In addition to the CE directives X4000 also mee
297. nt Identifier value for X 25 Packet Switch see X 31 configuration page 209 HM Carry out X 25 configuration see X 25 configuration page 209 Link configuration for Datex P Call routing H Configure AO DI partner as WAN partner see Configuring AO DI partner as WAN partner page 211 Select PPP parameters Define the PPP interface as AO DI interface Enter X 25 destination address for initial connection setup Control Bandwidth on Demand dynamic B channel bundling Control BOD for IP based applications Please note the following when carrying out X 25 configuration Some of the X 25 parameters must be adapted to the X 25 network connected For Datex P the Windowsize Packetsize Neg field must be deactivated using the Setup Tool X4000 User s Guide Settings Specific to WAN Partners ES X 31 configuration OC S X 25 configuration For X4000 the X 25 software is designed as an X 25 switch This switch must be appropriately configured for AO DI see X 25 configuration page 209 You will find all the necessary steps below for configuring X4000 for AO DI with the Setup Tool Proceed as follows to assign X 31 X 25 gt Goto CM 1BRI ISDN SO ADVANCED SETTINGS the menu is described in chapter 8 1 4 page 197 gt Select X 31 TEI Value specify The default setting for X 31 TEI Value should bespecify If this is not the case the X 31 service has not been detected by au
298. nterface Card for ISDN PRI and or G 703 The PRI Primary Rate Interface or G 703 expansion card is equipped with two ports each with two sockets IN and OUT By installing the expansion card you can equip X4000 with E one ISDN PRI and or one G 703 interface or HM two ISDN PRI interfaces or Bb two G 703 interfaces The necessary licenses for activating the desired interfaces can be obtained from your dealer You can connect X4000 s ISDN PRI interface to a Primary Rate Interface This is done by connecting the NT Network Termination adapter of your telephone provider to the IN socket of a port activated by license In Germany this provides you with 30 B channels and 1 D channel which you can use for both dialup and leased lines over ISDN With an X4000 G 703 interface you can install a G 703 leased line to a connection partner This is also done by connecting the NT Network Termination adapter of your telephone provider to the IN socket of a port activated by license A G 703 leased line is an unstructured high speed line of up to 2 Mbps for the transmission of data with HDLC framing The connection status is not checked at layer 1 if necessary this must be done by higher protocol layers such as the PPP You can use a PRI interface as both a PRI and G 703 interface You can only use a G 703 interface as a G 703 interface The PRI or G 703 expansion card is equipped as standard with hardware support for encryption and compressio
299. ny Source Port any Destination Port any 346 mmsms X4000 Users Guide Access Security Rules e ML j O Interface Y VV VY NN Leave IP ACCESS LISTS FILTERS with EXIT Go to IP Access Lists RULES to interconnect the filters to form rule chains Add a new entry with ADD or select an existing entry and confirm with Return to change it Select Insert behind Rule if you create a new rule Select Action Select Filter Select Next Rule if you change an existing rule Press SAVE Repeat these steps until you have defined all the desired rules Do not forget to define the last rule in the chain if necessary as a rule with a suitable filter for enabling all the remaining data packets Action allow M You can open a new rule chain with Insert behind Rule none Y Y VV VY Leave IP Access LISTS RULES with EXIT Go to IP ACCESS LISTS INTERFACES Select an interface and confirm with Return if you wish to use a rule as the first rule for this interface that is not the rule displayed Select First Rule Select Deny Silent Select Reporting Method Press SAVE X4000 User s Guide mm m 347 10 Configuration of Security Functions and Firewall Reorganizing a chain 348 Strategy Proceed as follows to reorganize an existing chain of rules gt Goto IP Access Lisrs RULES REORG Select Index of Rule that gets Index 1 gt Confirm with REORG
300. ocol supplied by your ISDN provider Possible values E autodetect on bootup automatic D channel detection default setting Euro ISDN S2M user profile TE Euro ISDN S2M network profile NT leased line B1 B30 leased line 1 hyperchannel leased line chann E1 31 diff endpoints This type of leased line is also called an aggregated kilostream in the UK E back to back ISDN Line Framing Possible values E standard CRC4 default setting E special no CRC HM G 703 necessary if you want to configure a G 703 leased line over the interface The default setting is used in most cases for a PRI interface In some cases in Sweden and France the setting special no CRC is necessary if X4000 is connected to a PABX X4000 User s Guide sssas 283 Ba Configuration of Expansion and Resource Cards with the Setup Tool Clock Mode Defines which connection partner sends the clock signal for synchronization between transmitter and receiver If the clock signal is not generated by the PABX network itself one of the two connection partners must generate this signal Possible values E external default setting X4000 receives the clock signal E internal XA000 sends the clock signal Table 9 1 X4E 2PRI ISDN S2M Unit 0 and X4E 2PRI ISDN S2M Unit 1 Todo Proceed as follows Goto X4E 2PRI ISDN S2M UNIT 0 for the first ISDN PRI interface Select ISDN Switch Type au
301. of Chain Rule 1 Rule 1 Next Rule 4 Next Rule 2 Rule 4 Rule 2 Next Rule 8 Next Rule 3 Rule 8 Rule 3 Next Rule 0 Next Rule 0 Rule 0 Discard Packet Rule 0 Discard Packet Figure 10 4 Example of chain reorganization In IP Access LISTS INTERFACES you can define which interface starts with which rule and if and how the sender of a packet is to be informed if the packet is denied by X4000 due to a filter violation 344 mmmmm X4000 Users Guide Access Security KJ s The rule with Index 7 is normally always used as the first rule for a newly i created interface e g to a WAN partner e Interface X4000 interface First Rule Defines which rule is used first for data packets that reach X4000 via the interface If you enter none you specify that no filters are used for the Interface Deny Silent Defines whether the sender of a packet is to be informed of its denial due to a filter violation Possible values E no Packet is denied sender is informed by a corresponding ICMP error message M yes Packet is denied sender is not informed Reporting Method Defines whether the denial of a packet due to a filter violation creates a syslog message Possible values E none No syslog message E info A syslog message is generated with the protocol number source IP address and source port number E dump A syslog message is generated with the contents of the first 64 bytes of the denied p
302. of a button in IP DNS DYNAMIC CACHE see Table 8 43 page 258 By using negative static entries you can limit name resolution in X4000 using a filter function This makes access to certain domains much more difficult for users in the LAN as it prevents the corresponding names being resolved You can use wildcards when entering the name When you enter a static entry you define how long this assignment of name and IP address is valid by setting the TTL This TTL is entered in each DNS record with which X4000 answers a relevant DNS request ummm X4000 Users Guide Basic IP Settings Monitor function Global name server Default interface DHCP Make sure your static entries are always up to date Names or IP addresses can change at any time Which IP addresses are requested by hosts in the LAN and how often The Setup Tool permits rapid access to this and other statistical information You can also use the nslookup command in the command line SNMP shell to check how a name or an IP address is resolved by X4000 or another name server see chapter 14 1 page 412 To obtain help information for the command enter nslookup Other Options In IP STATIC SETTINGS you can also enter the IP address of preferred global name servers that are to be asked if X4000 cannot answer requests itself or with forwarding entries For local applications the IP address of X4000 or the loopback address 127 0 0 1 can be enter
303. of the Credits Based Accounting System for the selected subsystem is displayed X4000 User s Guide Activity Monitoring 10 X4000 Setup Tool BinTec Communications AG MONITOR CREDITS STAT Monitor isdnlogin Credits MyRouter Total Maximum reached Time till end of measure interval sec 7794 86400 91 Number of Incoming Connections 0 2 0 Number of Outgoing Connections 0 20 0 Time of Incoming Connections 4 28800 0 Time of Outgoing Connections 13 28800 0 Charge 0 EXIT Information about configuring the Credits Based Accounting System can be found in chapter 10 1 3 page 316 Interface statistics Proceed as follows to display the current values and activities of X4000 s interfaces gt Go to MONITORING AND DEBUGGING INTERFACES The values for two interfaces are displayed side by side X4000 Setup Tool BinTec Communications AG MONITOR INTERFACE Interface Monitoring MyRouter Interface Name eni PROVIDER Operational Status up dormant total per second total per second Received Packets 5512 0 0 0 Received Octets 920664 0 0 0 Received Errors 0 0 Transmit Packets 9 0 0 0 Transmit Octets 1193 0 0 0 Transmit Errors 0 0 Active Connections N A 0 Duration N A 0 EXIT EXTENDED EXTENDED Use Space to select Select the interface to be displayed under Interface Name X4000 User s Guide samen 315 10 Configuration of Security Functions and Firewall 316 TCP IP statistics ISD
304. on Failure Channel Bundling Bandwidth on Demand BoD Always On Dynamic ISDN AO DI Layer 1 Protocol ISDN B Channel IP Transit Network Transfer of DNS and WINS IP Addresses to WAN Partner Routing Information Protocol RIP Compression 0 Proxy ARP Address Resolution Protocol 1 Keepalive Monitoring Basic IP Settings System Time Name Resolution in X4000 with DNS Proxy Port Numbers BOOTP Relay Agent IPX Settings General Settings Configuring the LAN Interface Configuring WAN Partners Bridging Extra License Features X4000 User s Guide 188 188 190 194 197 198 198 199 201 206 219 222 225 229 232 234 236 242 242 246 265 266 268 268 270 271 275 276 Table of Contents 10 Configuration of Expansion and Resource Cards with the Setup Tool 9 1 WAN Interface Card for ISDN BRI 9 1 1 Configuration with the Setup Tool 9 2 WAN Interface Card for ISDN PRI and or G 703 9 2 1 Configuration with the Setup Tool 9 3 LAN Interface Card for 10 100 Mbps 9 3 1 Configuration with the Setup Tool 9 3 2 Broadband Internet Access ADSL with X4000 and LAN Expansion Card 9 4 Resource Card with Digital Modems 9 4 1 X4000 with Digital Modems as Remote Access Server 9 5 Resource Card for Encryption and Compression 9 5 1 Configuration with the Setup Tool Configuration of Security Functions and Firewall 10 1 10 1 1 10 1 2 10 1 3 10 1 4 10 1 5 10 1 6 10 2 10 2 1 10 2 2 10 2 3 10 2 4 10 2 5 10
305. on from the end customer to the Internet Service Provider 206 mmmsms X4000 Users Guide Settings Specific to WAN Partners 8 Short Description AO DI uses X 25 data packet transmission in the D channel X 31 to set up a PPP connection PPP over X 25 9600 bps are available for data transmission in the D channel D channel Mode If more bandwidth is needed one or two B channels are dynamically added Dynamic ISDN Data transmission in this case is only in the B channel or B channels i e the B channels remain reserved for bandwidth intensive applications B channel Mode AO DI offers the following advantages E three full communication channels which can be independent if required Bi permanent connection to the Internet at low cost E transparent bandwidth control E in D Channel Mode high reliability and guaranteed throughput times volume oriented charges independent of distance E in B Channel Mode time dependent connection charges only for bandwidth intensive applications How Does AO DI Work AO DI is implemented in X4000 via a special PPP interface As soon as the interface is configured and ready for operation the initial PPP connection is set up via X 31 X 25 in the D channel This involves carrying out authentication of the PPP connection partner and assigning a dynamic IP address and DNS addresses if applicable AO DI Client Mode The use of the B channels is controlled by the data throughput or b
306. on of data over WAN connections e g over the Internet It can be used for example by field service staff to obtain low cost access to data in the company network via Internet and laptop dial in via a local Internet Service Provider You can find detailed information and configuration instructions with examples in the Extended Features Reference X4000 User s Guide samme 357 10 Configuration of Security Functions and Firewall 358 10 4 Special Features The following special features support your network security E Startup Procedure chapter 10 4 1 page 358 H Auto logout chapter 10 4 2 page 358 HM Prevention of Denial of Service Attacks chapter 10 4 3 page 358 10 4 1 Startup Procedure X4000 does not start its routing activities until the complete configuration is loaded especially the defined filters This means it is not possible to provoke a system start to make use of an intermediate system state in which perhaps routing takes place before the filters are active 10 4 2 Auto Logout Connections to X4000 via telnet gt isdnlogin or serial interface are disconnected automatically if no entry is made on the keyboard for a period of 15 minutes This makes it difficult to read out or change the system configuration on forgotten connections You can change the time with the commandt lt time in seconds gt see chapter 14 1 page 412 10 4 3 Prevention of Denial of Service Attacks A Denial of Service DoS
307. on with Setup Tool Basic router settings Configuration Configuration Management Configuring a PC Distribution of incoming calls Instructions for initial configuration Preparation Saving Security functions WAN interfaces WAN partner Configuration file administration Configuration Management Configuration Manager Configuration options Configuration Wizard Configuring a PC Configuring users Connection methods X4000 User s Guide Index Console interface Corporate network connection Credits Based Accounting System Default route Delay after connection failure Denial of Service attacks Desktop unit DHCP server Display Display interface Distribution of incoming calls DNS Documentation Domain Name Dynamic IP address server Encapsulation Encryption Errors typical Expansion cards Installation and removal Extended Features Reference Extended IP routing Extensions CAPI ISDN Login Routing Feedback Feedback facility Filters Firewall Flash memory General PPP settings General Safety Precautions 390 141 497 29 132 335 348 X4000 User s Guide m m 307 364 194 31 489 IH Index General WAN settings 188 Guarantee terms 24 Hs Hardware 35 Basic unit 36 Expansion cards 53 LEDs 63 Setting up and connecting 59 HTTP status page 320 I Incoming calls CAPI 141 ISDN Login 141 Routing 141 Input keys 93 Instructions for initial configuration 91 Internet access 159 Compus
308. onfigure further functions with the Setup Tool see chapter 8 page 187 Configure security functions with the Setup Tool see chapter 10 page 307 Configure your expansion card with the Setup Tool see chapter 9 page 277 X4000 User s Guide m m 91 Configuration Requirements 92 ummm X4000 Users Guide 5 Man Machine Interface MMI Display with User Guide BinTec s Man Machine Interface MMI with display and input keys simplifies getting to know your X4000 and provides easy access to status information BINTEC X4000 Figure 5 1 MMI with display and input keys logo This chapter contains the following information E An overview of the MMI facilities chapter 5 1 page 94 E A description of how to use the display and input keys chapter 5 2 page 96 E Adiagram of the MMI menu architecture which is helpful for the initial steps chapter 5 3 page 99 Bi Useful short cuts chapter 5 4 page 107 When you have made the initial settings with the MMI continue the configuration of X4000 using the Configuration Wizard see chapter 6 page 109 or the Setup Tool see chapter 7 page 119 X4000 User s Guide m m 93 5 Man Machine Interface MMI Display with User Guide 94 Getting started Status information User guide Logo Access protection 5 1 Overview You can use the MMI to enter X4000 s IP address and netmask without first having to set up a serial connec
309. only at the start of Name e g bintec de If an incomplete name is entered without a dot this is completed with Default Domain after confirming with SAVE Interface Defines the WAN partner to which a connection is set up for the resolution of Name TTL Period of validity in s for the assignment of Name to Address Default value 86400 24 h If the request of X4000 for Name is answered with a DNS record this contains a TTL field Time To Live in s whose value is not normally changed by X4000 on forwarding the DNS record If the TTL field received has the value 0 or exceeds Maximum TTL for Pos Cache Entries then TTL is also sent with the DNS record forwarded Table 8 42 IP W DNS FonwARDED Domains ADD 256 mmmmm X4000 Users Guide Basic IP Settings Bg IP DNS DYNAMIC CACHE contains the following fields Name Host name which is assigned the Address with this dynamic entry in the cache Address IP address which is assigned to Name Resp Defines the type of dynamic entry Possible values E positive A DNS request for Name is answered with the associated IP address from the cache E negative A DNS request for Name is answered with a negative answer from the cache TTL Indicates how many seconds the dynamic entry remains in the cache The entry is deleted on expiry of TTL When a positive dynamic entry is saved in the cache the value of the TTL
310. onnected to a network Data is forwarded over the entire bus and received by all devices on the bus Called Party Number Number of the terminal called Calling Party Number Number of the calling terminal CAPI Common ISDN Application Programming Interface A software interface standardized in 1989 that allows application programs to access ISDN hardware from the PC Most ISDN specific software solutions communications programs such as RVS COM Lite work with the CAPI interface Such communications applications enable you for example to send and receive faxes or transfer data over the ISDN from your PC See also Remote CAPI 470 mmms X4000 Users Guide Glossary CCITT Channel bundling CHAP CLID Client Data compression Datagram Data packet Consultative Committee for International Telegraphy and Telephony A predecessor organization of the gt gt ITU that passed recommendations for the development of communications standards for public telephony and data networks and data transmission interfaces Channel bundling One of X4000 s features Channel bundling is a method of increasing the data throughput The data throughput is doubled by switching in a second gt gt B channel for data transmission Channel bundling can be either dynamic on demand or static always Challenge Handshake Authentication Protocol A security mechanism during the establishment of a connection with a gt gt WAN partner
311. ons and Firewall SAFERNET The X4000 from BinTec Communications AG gives you a high degree of security for your network and connections The security functions available SAFERNET offer monitoring of activities via the router and effective access and line tapping security The necessary configuration steps are described in this chapter Some of the features can only be configured by making entries directly in the MIB tables and not by using the Setup Tool The relevant tables and variables are given in the respective section L7 You can make MIB entries either by commands in the gt gt SNMP shell or via external SNMP managers e g the Configuration Manager A description of the SNMP commands is given in the Software Reference This chapter is broken down as follows E Activity Monitoring chapter 10 1 page 308 Access Security chapter 10 2 page 325 Line Tapping Security chapter 10 3 page 354 Special Features chapter 10 4 page 358 Checklist chapter 10 5 page 360 X4000 User s Guide mm m 307 10 Configuration of Security Functions and Firewall 308 10 1 Activity Monitoring A major requirement for a high degree of security is the possibility of accurately monitoring all activities on and over the router BinTec Communications AG provides a variety of facilities for this purpose Syslog Messages chapter 10 1 1 page 308 Monitoring Functions in the Setup Tool chapter 10 1 2 page 313 Credits Based A
312. ork dynamic client Press SAVE Go to IP RouriNG ADD see Creating a Routing Entry page 175 Select Route Type Default route Select Network WAN without transit network Select Partner Interface e g t online Enter Metric e g 7 Press SAVE Go to IP NETWORK ADDRESS TRANSLATION see Activating Network Address Translation NAT page 181 Select the PPPoE interface e g t online and confirm with Return Select Network Address Translation on Press SAVE X4000 User s Guide Configuring WAN Partners 7 3 Configuring WAN Partners To enable X4000 to make connections to networks or hosts outside your LAN you must configure the partners you want to connect to as WAN partners on your X4000 This applies to outgoing connections X4000 dials its WAN partner as well as for incoming connections a WAN partner dials the number of your X4000 and leased lines Consequently if you want to access the Internet you must set up your Internet Service Provider gt gt ISP as a WAN partner If you wish to establish a LAN LAN connection e g between your LAN head office and the LAN of a branch office corporate network connection you have to configure the LAN of your branch office as a WAN partner If you have set up one or more leased lines on configuring the WAN interface s of X4000 a WAN partner for each leased line is already created automatically in the WAN Partner menu Edit this entry to suit your re
313. oup after switching out one B channel A B channel is switched out if the calculated value stays below 80 96 of the maximum permissible throughput of the remaining channels for 10 seconds Static or dynamic short hold may also cause an additional B channel to be switched out If static short hold has been configured this always has the highest priority If dynamic short hold has been configured the calculated value mentioned above must also apply X4000 also supports the AO DI Always On Dynamic ISDN function for using the ISDN D channel for data transmission see chapter 8 2 4 page 206 PPP authentication is not required from the connection partner for establishing a leased line Authentication is however necessary for any dialup connections switched in X4000 User s Guide saman 201 8 Advanced Configuration of the Basic Unit with the Setup Tool Configuration is made in E WAN PARTNER EDIT ADVANCED SETTINGS EXTENDED INTERFACE SETTINGS OPTIONAL E WAN PARTNER Epir WAN NUMBERS ADD menu description in chapter 7 3 page 159 E WAN PARTNER Epit PPP menu description in chapter 7 3 page 159 The menu WAN PARTNER EDIT ADVANCED SETTINGS EXTENDED INTERFACE SETTINGS OPTIONAL contains the following fields The fields described below appear only if Channel Bundling dynamic has previously been selected in the menu WAN PARTNER EDIT ADVANCED SETTINGS od 202 mmmmm X4000 Users Guide
314. our LAN smaller networks often have no DNS of their own the name resolution can be carried out for example via your Internet Service Provider Client Mode However this requires ISDN connections which involve charges If you work with Windows you can also obtain name resolution without asking for a DNS To do this you must adapt the LMHOSTS file on all PCs in the LAN 8 2 8 Routing Information Protocol RIP Routing can be described as follows The router receives gt gt data packets each of which contains data about the destination host On the basis of the entries in the so called Routing Table see Creating a Routing Entry page 175 the router decides which route to use to forward the data packet to ensure that it arrives at its destination as quickly and cheaply as possible with the fewest possible intermediate stations The entries in the routing table can be defined statically or the routing table can be updated constantly by a dynamic exchange of routing information between several routers This exchange is X4000 User s Guide mm m 229 sl Advanced Configuration of the Basic Unit with the Setup Tool controlled by a so called Routing Protocol e g RIP Routing Information Protocol RIP Routers use the gt RIP to exchange the information stored in their routing tables by communicating with each other at regular intervals to mutually supplement and renew their routing entries X4000 supports both v
315. p pdooor rou GUOTHYATOC ngtoupyel GUVSEGEIC WAN X4000 User s Guide samme 431 15 General Safety Precautions in 15 Different Languages 432 Ka8apicu c kar Bl TIOKEUI lia va anoo yere mpdoo8eta T An 0a rmp net onoo nnore va rummpeire THV ouokeur To X4000 avrarokpiverat otiG OXETIKEC iar amp giG aodoaAeiaq yia yKaraor ceiG r XyvoAoyiaG mnAnpodooptov KATA TH xperon oe TIEpIBAAAOV ypadsiou H ka80opiou vn Aetroupyia rou ocuorrjparoa o upwva pe ro IEC950 EN60950 iaodoaAicgrat u vo ue EYKATAOTNHHEVO nepik Aupgpa WHEN aooadAeia mupKayldc amp euprn Mapacitwv H 6 pyokpao a mepiBaAAovtToc Sev EMITPEMETAL va UTIEPBaivel rouq 50 C Anoguyete tnv k0gon oe GHEON nak akTIvoBoAia Na ripoo yxere WOTE va unv Elo ABOUV avrikeipeva T X CUVOETIPEC T UYPA oro EGWTEPIKO TNG GUOKEUNC kiv uvog NAEKTpoOTIANElac BpaxukukAoparoq Oa mp ntet va amp aooaAicerat n errapkris WUEN To X4000 dev mnepuapgpB ver se amp aprrjpnara mou pnopo v va avtikataota8ouUv amo rov xprnotn o re Oiuak rrreq rj Jumper mou TIPETIEL va puOpiost o XPNOTNC Ze EKTAKTEC TMEPIMTWOEIC T X OTAV EXEL npokAn0si BAGBN oro KEAUMOC r OTN pov a xetpiopoU rj rav xouv i0 A0 amp t UYPA rj AVTIKEINEVG va iak rrere ap ooq THV napoyxrj pe paroq Kal va EPXEOTE oe snah ue TO KATAAANAO cuvepyeio H OUOKEUN ETMLTPEMETAL va avotxrei p vov ari ouvepyeia TOU xouv eEoucloooTnGei ano tnv BinTec Mpv ro votypga trig
316. page 142 You can also prevent unauthorized access by defining filters see chapter 10 2 8 page 335 and local filters see chapter 10 2 9 page 348 X4000 User s Guide Access Security inside 192 168 1 1 a 10 2 7 NAT Network Address Translation NAT is a simple to operate procedure that can be used for several purposes in the BinTec implementation E Hiding the internal host addresses of a LAN by remapping to one or more external addresses HM Controlling external to internal access In the external direction the router forwards all 9 data packets forward NAT and connections from external callers are only allowed if explicitly enabled X4000 outside Access only when explicitly allowed 16 0 0 30 ISDN IP 16 0 0 30 X4000D LAN IP 192 168 1 254 192 168 1 2 A 192 168 1 3 Your Local Area Network Network of your WAN Partner Figure 10 1 Forward NAT E Permanent monitoring of the connections via the router with indication of the source and destination addresses and 9 ports See your syslog messages for this purpose NAT always refers to an interface X4000 s LAN side is always referred to as internal the WAN partner as external You will find more information on NAT in the Software Reference X4000 User s Guide samen 331 10 Configuration of Security Functions and Firewall Configuration is made in IP NETWORK ADDRESS TRANSLATION
317. perations on a PC It is a set of commands for transmitting and receiving data to and from other Windows PCs on the network The second part of an address in an IP network used for identification of a device e g 255 255 255 0 See also gt IP address A network address designates the address of a complete local network X4000 User s Guide ssmma 477 EE Glossary NT Network Termination An NT adapter is the network termination unit of an gt ISDN connection In Germany this is obtained from Deutsche Telekom AG It is used to connect a private network gt So bus to the public ISDN network It is equivalent to the terminal socket used for connecting an analog telephone NTBA Network Termination for Basic Access An NTBA adapter is the network termination unit of an gt ISDN Basic Rate Interface In Germany this is obtained from Deutsche Telekom AG It is used to connect a private network gt gt Sp bus to the public ISDN network It is equivalent to the terminal socket used for connecting an analog telephone OSI model OSI Open Systems Interconnection ISO reference model for networks Defines interface standards between computer manufacturers for software and hardware requirements OSPF Open Shortest Path First Routing protocol used in networks to exchange information routing tables between gt gt routers PABX Private Automatic Branch Exchange An ISDN PABX is used to set up an internal telephone infrastruc
318. point B none E leased line B1 channel 64S leased line over B channel 1 E leased line B1 B2 channel 64S2 leased line over both B channels E leased line D B1 B2 channel TSO2 leased line over D channel and both B channels E leased line B1 B2 different endpoints digital 64S with dual connection leased line to two different endpoints X4000 User s Guide sssas 139 Basic Configuration of Basic Unit with Setup Tool D Channel D channel configuration The selection can only be changed if ISDN Switch Type eased line D B1 B2 TS02 Possible values leased ate default value E leased dce B Channel 1 Configuration of first gt gt gt B channel Possible values E dialup default setting E not used E leased ate E leased ace B Channel 2 Configuration of second B channel Possible values E dialup default setting E not used E leased ate m leased dce Table 7 6 CM 1BRI ISDN SO Todo Make the following entries 9 Select ISDN Switch Type autodetect on bootup This setting enables X4000 to use its automatic D channel detection As long as the D channel detection is running running appears next to Result of Autoconfiguration Once the setting has been found it is displayed e g Euro ISDN point to multipoint 140 mms mms X4000 Users Guide Configuring WAN Interfaces ML If the ISDN protocol is not detected it can be entered manually under ISDN Switc
319. procedure chapter 7 3 page 159 Example configurations chapter 7 3 2 page 182 Saving the configuration chapter 7 4 page 186 X4000 User s Guide samme 119 Basic Configuration of Basic Unit with Setup Tool 120 7 1 Basic Router Settings The configuration of the basic router settings concerns only your X4000 and your local network 192 168 1 1 S 810 11 12 di WAN Your X4000 192 168 1 2 192 168 1 254 192 168 1 3 Your Local Area Network Figure 7 1 Basic router settings X4000 in the LAN The following steps are necessary E Entering a license chapter 7 1 1 page 121 E Entering system data e g passwords chapter 7 1 2 page 123 E Configuring the LAN interface chapter 7 1 3 page 126 E Configuring X4000 as a DHCP server optional chapter 7 1 4 page 129 E Setting NetBIOS filters optional chapter 7 1 5 page 132 The necessary preparatory measures can be found in chapter 6 1 page 110 The work to be done on your network and PCs can be found in chapter 6 4 page 115 Off we go X4000 User s Guide Basic Router Settings 7 1 1 Entering License s License card After you have logged in to your X4000 with the user name admin and called up the Setup Tool with setup as described in chapter 4 2 page 76 enter the license information This information is printed on the license card supplied Entering this information activates the functions of X4000 gt Go to LICENS
320. quirements General The procedure for configuring or editing a WAN partner in X4000 is explained in general form in chapter 7 3 1 page 159 below Examples A number of frequently required configuration examples are shown in chapter 7 3 2 page 182 Sly If you would like to configure Internet access over Compuserve please see Internet Access over Compuserve page 184 SS 7 3 1 Basic Procedure Configuring a WAN partner generally involves the following steps E Entering a WAN partner Defining a gt protocol encapsulation Entering extension s Defining gt gt PPP settings for authentication Defining gt gt short hold X4000 User s Guide samme 159 Basic Configuration of Basic Unit with Setup Tool 160 WAN partner configuration Carrying out IP configuration HM Creating routing entry E Activating Network Address Translation gt gt NAT optional Off we go Entering a WAN Partner Before you get down to it you should collect the necessary access information that you received from your ISP or system administrator see chapter 6 1 page 110 The terms used may vary slightly from provider to provider To enter a WAN partner proceed as follows gt Goto WAN PARTNER X4000 Setup Tool BinTec Communications AG WAN WAN Partners MyRouter Current WAN Partner Configuration Partnername Protocol State LittleIndian ppp dormant ADD DELETE EXIT Press lt Ctrl n gt l
321. r PC and use the Internet unnoticed by X4000 E Broadcasts in the local LAN are always forwarded by the ADSL modem NTBBA to the PTT exchange and are not rejected until the exchange This means that the maximum bandwidth of 128 kbps upstream to the PTT may not be fully available The limitations and security risks described here do not apply if X4000 is equipped with a LAN expansion card and several LAN interfaces are therefore available see chapter 9 3 2 page 288 X4000 User s Guide samme 155 Basic Configuration of Basic Unit with Setup Tool The T DSL connection without X4000 looks like this OA Customer T ISDN 768 mE Sd uU m A TAE 128 kbit s ADSL Splitte ISDN NTBA BBAE ISDN telephone PC with network card ADSL modem NTBBA Figure 7 4 T DSL connection without X4000 The following scenario see Figure 7 5 page 157 is used to describe the necessary configuration steps The LAN interface of X4000 and the ADSL modem NTBBA of Deutsche Telekom AG are connected to your hub as described in chapter 3 3 page 59 34 If you receive a special cable from Deutsche Telekom AG or another provider for connecting the ADSL modem use only this cable 156 mm msms X4000 Users Guide Configuring WAN Interfaces 192 168 1 1 F ADSL ADSL Modem 5 k NTBBA Your X4000 192 168 1 254 192 168 1 2 e 192 168 1 3 Your Local Area Network
322. r Service If a request has a different source address the next entry is checked Mask Only if Verify IP Address verify Defines a netmask A network address is thus defined together with the IP Address from which incoming requests are allowed to the service selected under Service If a request has a different source address the next entry is checked If the value of Mask is 0 0 0 0 or 255 255 255 255 the entry is a host entry i e the IP address must match exactly Verify Interface Defines if a check is to be made to determine which X4000 interface is used for an incoming call received for the service selected under Service Possible values B verify E dont verify Interface Only if Verify Interface verify Defines an interface of X4000 If X4000 receives an incoming call over this interface for the service selected under Service the connection is allowed If the incoming call crosses another interface the next entry is checked Table 10 20 IP B LocAL SERVICES ACCESS CONTROL ADD X4000 User s Guide samme 351 10 Configuration of Security Functions and Firewall Proceed as follows to restrict access to a local service uL If an entry defines both an address and an interface for checking both criteria must be fulfilled for an incoming call before X4000 accepts this call e gt Goto IP LOCAL SERVICES ACCESS CONTROL All the entries made until now are listed here P
323. r of IP addresses in the address pool including the first IP address IP Address Lease Time Minutes Specifies the length of time an address from the pool can be assigned to a host After the Lease Time Minutes expires the address can be assigned elsewhere MAC Address optional Only for Number of Consecutive Addresses 1 IP Address is only assigned to the device with MAC Address Gateway Defines which IP address is assigned to the DHCP client as gateway If no IP address is entered here the IP address of X4000 is also given NetBT Node Type Defines how and in what order the assignment of NetBIOS names to IP addresses is attempted for the hosts of an address pool You can accept the default value not specified A detailed description of this function is given in the Software Reference Table 7 5 IP IP ADDRESS POOL LAN DHCP ADD Todo Make the following entries to configure X4000 as a DHCP server Select Interface e g en1 Enter IP Address e g 192 168 1 1 X4000 Users Guide ssmms 131 Basic Configuration of Basic Unit with Setup Tool Enter Number of Consecutive Addresses e g 8 Enter Lease Time Minutes e g 120 Enter MAC Address if applicable Enter Gateway if applicable Select NetBT Node Type e g not specified vV VV Y NN Press SAVE You have returned to IP IP ADDRESS POOL LAN DHCP where the IP address pools are listed The entries a
324. ransit Network 159 WINS 225 494 mmmmms X4000 Users Guide er M WINS 225 246 X xa 148 X 21 interface Configuring 148 Technical data 393 XIPR 353 X4000 User s Guide samme 495 B 496 mmsms X4000 Users Guide Document 71000L Version1 3 Manual questionnaire fax back to 49 911 9673 1498 How do you rate your own skills O network specialist O average knowledge O little knowledge of networks of networks How do you rate the scope of the manual O not enough O just right O too much Is something important missed out in the manual O no O yes the followirig eet eite attics ea Feed en Does the manual contain unnecessary information O no O yes the following esee How do you rate the clarity of the manual O very good O good O average O bad O very bad How do you rate the comprehensibility examples explanations graphics O very good O good O average O bad O very bad Did you have any problems during installation and configuration that you couldn t solve with the manual O no O yes the following eeeeeeeeeenenmH Which configuration tools do you use O Configuration O Setup Tool O Configuration O SNMP O others Wizard Manager commands 252525266 Comments X4000 User s Guide mm m 497 E Document 71000L Version1 3 498 mmmsmm X4000 Users Guide
325. re d filters or s filters with a logical OR operation specific MAC filter me X4000 s MAC address bc broadcast packets You can combine a d MAC filter and an s MAC filter with a logical AND operation by simply specifying them both To combine two or more d and s MAC filters with a logical OR operation specify the filters and separate them with o isdnlogin isdnlogin c lt stknumber gt C s lt service gt a lt addinfo gt b lt bits gt isdn number isdn service layerl protocol Is used to open a remote login shell on X4000 over ISDN c lt stknumber gt defines the ISDN stack if several ISDN cards are used C tries to use compression V 42bis X4000 User s Guide SNMP Shell Commands b bits use only bits bits for transmission e g enter b 7 for 7 bit ASCII transmission isdn number isdn number of the ISDN partner you want to log in to isdn service the ISDN service you want to use data telephony fax g3 fax g4 btx layerl protocol Possible values v110 1200 v110 2400 v110 4800 v110 9600 v110 19200 v110 38400 modem dovb56k telephony debug debug show q all lacct system subs lt subs gt Is used to selectively display debugging information originating from one of X4000 s subsystems show displays all possible subsystems that can be debugged q no timestamp attached before each debugging me
326. re saved and you have defined an address pool with 8 IP addresses 192 168 1 1 to 192 168 1 8 You can also create several entries to define an IP address pool of unconnected address ranges e g 192 168 1 20 192 168 1 29 and 192 168 1 35 192 168 1 40 and so on ww 7 1 5 Setting Filters NetBIOS filters If you are working with Windows in your local network you should set NetBIOS filters to save costs This prevents establishing connections from the network to your Internet Service Provider gt gt ISP e g in order to forward WINS requests from PCs in your network This means that X4000 asks your ISP which gt gt host name can be assigned an IP address These connections are unnecessary because the ISP cannot resolve WINS names but still cost money A more detailed explanation of gt filters and security can be found in chapter 10 2 8 page 335 Todo To prevent these unnecessary connections proceed as follows amp d When configuring filters make sure not to lock yourself out EJ gt Use the serial interface or ISDN login on X4000 for filter configuration ty f you still access X4000 over your LAN e g telnet before starting filter configuration select in the menu IP ACCESS LISTS INTERFACES EDIT First rule none 132 mmmms X4000 Users Guide Basic Router Settings To do gt Goto P Access Lists FILTER ADD X4000 Setup Tool BinTec Communications AG
327. relho respeite as indica es constante do manual Instale os cabos de maneira a n o constitu rem uma fonte de perigo perigo de trope ar nem se danificarem Em caso de trovoada n o ligue retire ou toque nos cabos de transmiss o de dados O X4000 destina se utiliza o em escrit rios Como Router de protocolos m ltiplos o X4000 constr i liga es WAN de acordo com a configura o do sistema Para evitar custos indesejados controle o produto O X4000 corresponde s normas de seguran a habituais relativas a dispositivos de inform tica para utiliza o em escrit rios S poss vel assegurar o funcionamento adequado do sistema em confor midade com IEC950 EN60950 se a caixa de chapa estiver completamente montada refrigera o protec o contra inc ndio supress o de interfer n cias X4000 User s Guide Limpeza e repara o A temperatura ambiente n o pode exceder os 50 C Evite expor o apa relho luz solar directa Tenha o cuidado de n o deixar entrar objectos por ex clipes ou l quidos para o interior do aparelho choque el ctrico curto circuito Verifique se a refrigera o suficiente O X4000 n o cont m componentes que possam ser substitu dos pelo uti lizador ou interruptores conectores que o utilizador tenha de regular Em caso de emerg ncia por ex caixa ou elemento de comando danificado entrada de l quido ou de corpos estranhos interrompa imediatamente a aliment
328. resolution can also take place over the HOSTS file which is available on all PCs A domain refers to a group of devices in a network whose host names share a common suffix the domain name Thus in the 9 Internet a part of a naming hierarchy e g bintec de X4000 User s Guide Glossary Downstream DSL xDSL DSS1 DTE DTMF E1 T1 EAZ Encapsulation Data transmission rate from the gt Internet Service Provider to the client Digital Subscriber Line Data transmission technique that enables high transmission rates to be achieved on normal telephone lines The data rate is dependent on the distance to be covered and the quality of the line and therefore varies xDSL is used as a bookmark for the different DSL variants such as gt gt ADSL gt gt RADSL gt gt VDSL gt gt HDSL gt gt SDSL U ADSL etc which are part of the family of DSL techniques Digital Subscriber Signalling System A common D channel protocol used in the Euro ISDN Data Terminal Equipment Data Terminal Equipment see gt gt V 24 Dual Tone Multi Frequency tone dialing system Dialing method for telephony systems In this method pressing a key on the telephone keypad generates two simultaneous tones which are correspondingly evaluated by the PABX or exchange E1 European variant of the 2 048 Mbps gt gt ISDN gt Primary Rate Interface which is also called the E1 system T1 American variant of the ISDN P
329. ress ADD to add a new entry Select Service Select Verify IP Address e g verify Enter IP Address if applicable Enter Mask if applicable Select Verify Interface e g verify Select Interface if applicable VV VV NV YN NN Press SAVE The entry is listed 10 2 10 Back Route Verification This term conceals a simple but very effective X4000 function If Back Route Verification is activated at a WAN partner only those data packets are transported via the interface to the WAN partner that would be routed over the same interface on the back route You can therefore prevent packets with fake IP addresses being fed to your LAN even without filters This means you can easily prevent known and as yet unknown Denial of Service and IP spoofing attacks Todo Proceed as follows to activate Back Route Verification for a WAN partner gt Goto WAN PARTNER EDIT IP ADVANCED SETTINGS gt Activate Back Route Verify with on gt Confirm with OK 352 msmmmm X4000 Users Guide Access Security Personalized authentication Example Configuration 10 2 11 TAF Client The Token Authentication Firewall TAF function permits personal authentication of IP connection partners BinTec s solution integrates the Token Authentication mechanisms from Security Dynamics and does not allow data packets to cross the router until the associated source address has been authenticated successfully You can activate this function in
330. rimary Rate Interface with 23 basic channels and one D channel 1 544 Mbps Terminal Selection Digit Is only used in the gt gt 1TR6 system and designates the last digit of an extension number It is used for dialing various terminals connected to the ISDN Basic Rate Interface e g fax This occurs by attaching one digit between 0 and 9 to the actual ISDN telephone number In Euro ISDN DSS1 the complete extension number gt gt MSN is transferred instead of the EAZ Encapsulation of 9 data packets in a certain protocol for transmitting the packets over a network that the original protocol does not directly support e g NetBIOS over TCP IP X4000 User s Guide samme 473 EE Glossary Encryption 474 Ethernet Extension Extension numbers range Filters Firewall FTP Gateway HDSL HDSL2 Refers to the encoding of data e g gt gt MPPE A local network that connects all devices in the network PC printers etc via a twisted pair or coaxial cable An extension is an internal number for a terminal or subsystem In gt point to point ISDN accesses the extension is usually a number from the extension numbers range assigned by the telephone provider In point to multipoint connections it can be the MSN or a part of the MSN direct dialing range A point to point ISDN access includes a gt gt gt PABX number and an extension numbers range The PABX number is used to reach the PABX Th
331. rom Now test your Internet access by entering www bintec de in the browser BinTecs WWW site offers you the latest news updates and documentation X4000 User s Guide samme 117 5 Fast Configuration with the Configuration Wizard Basic Unit 118 sasmmm X4000 Users Guide 7 Basic Configuration of Basic Unit with Setup Tool This chapter tells you how to carry out the basic configuration steps for taking your X4000 basic unit into operation using the Setup Tool This chapter is broken down as follows Basic router settings chapter 7 1 page 120 This chapter describes the steps you must always carry out for taking X4000 into operation irrespective of the environment or applications for which you use X4000 You can also carry out the steps described here using the Configuration Wizard see chapter 6 page 109 Where do we go from here chapter 7 1 6 page 136 This chapter tells you what to do next after you have completed the basic router settings Configuring the WAN interfaces chapter 7 2 page 137 Description of how to configure the WAN interfaces integrated in the X4000 basic unit ISDN BRI Interface chapter 7 2 1 page 137 including the distribution of incoming calls to subsystems and users Incoming call answering page 141 Serial interfaces X 21 V 35 V 36 X 21bis chapter 7 2 2 page 148 LAN interface for using ADSL chapter 7 2 3 page 155 Configuring WAN Partners Basic
332. ry Select the Item e g PPP routing Enter the Number e g 091112330 Select the Mode e g right to left Select the Bearer e g data VN OV Y Y Press SAVE You have returned to menu X4E 3BRI ISDN SO UNITO INCOMING CALL ANSWERING The entries are saved and displayed in the list You have now assigned a possible service PPP routing to one of your numbers 0911 123 30 This means that when a data call is received for the Called Party Number 0911 123 30 it is put through to the PPP routing service Repeat these steps until you have assigned to all phone numbers the services to be reached under these numbers You have now configured Incoming Call Answering for this ISDN BRI interface and X4000 distributes the incoming calls to the internal services Leave X4E 3BHI ISDN SO UNITO INCOMING CALL ANSWERING with EXIT Press SAVE If applicable go to X4E 3BRI ISDN SO UNIT 1 to configure the second interface f applicable go to X4E 3BRI ISDN SO UNIT 2 to configure the third interface WAN partner To enable X4000 to make connections to networks or hosts outside your LAN you must configure the partners you want to connect to as WAN partners on your X4000 This applies to outgoing connections incoming connections and leased lines Refer to chapter 7 3 page 159 280 mmmms X4000 Users Guide WAN Interface Card for ISDN PRI and or G 703 9 PRI G 703 od 9 2 WAN I
333. rzypadku zastosowania innych przewod w firma BinTec Communications AG nie ponosi odpowiedzialno ci za poniesione szkody Tym samym umowa gwarancyjna staje si nieaktualna Podczas pod czania urz dzenia do sieci nale y przestrzega wskaz wek zawartych w instrukcji obstugi Przewody nale y u o y tak aby nie wyst powa o niebezpiecze stwo potykania sie o nie oraz ich uszkadzania Podczas burzy nie wolno pod ancza przewod w przenoszenia danych ani te dotyka ich lub wy ancza X4000 przeznaczona jest do pracy w otoczeniu biurowym Jako Multi Protokoll Router buduje X4000 niezale nie od konfiguracji systemowej potaczenia WAN Aby zapobiec nieprzewidzianym optatom powinno sie go strzec X4000 User s Guide mm m 447 I General Safety Precautions in 15 Different Languages 448 Oczyszczaniei Mi naprawa Urz dzenie X4000 speinia obowi zuj ce zasady bezpiecze stwa dla urz dze informatycznych przeznaczonych do stosowania w otoczeniu biurowym Zgodna z przeznaczeniem eksploatacja systemu zgodnie z IEC950 EN60950 jest zagwarantowana tylko w przypadku kompletnie zamontowanej obudowy blaszanej ch odzenie ochrona przeciwpo arowa eliminacja zak ce w eterze Temperatura otoczenia nie powinna przekracza 50 C Nale y unika bezpo redniego dzia ania promieni stonecznych Nale y uwa a aby do wn trza urz dzenia nie wnikaly adnego rodzaju przedmioty np spinacze biurowe b d ciecze
334. s Se For Windows 95 Click Run in the Windows Start menu Type in winipcfg A window opens where you can see the IP address of your PC and other network information For Windows NT Click Program i Command Prompt in the Windows Start menu gt EnteripconfigOripconfig all to request the IP address of your PC and other network information Running an operation To run an operation proceed as follows Select Operation 9 Activate a TFTP server if you have selected put get or state as the Operation Select or type in the necessary settings in CONFIGURATION MANAGEMENT Select START OPERATION and press Return As long as the operation is being carried out OPERATING appears in the help line of the Setup Tool State of last operation displays running When the operation has been executed successfully the operation is displayed under Type of last operation State of last operation assumes the value done 368 smmmsa X4000 Users Guide Administration of Configuration Files 11 Example If error is displayed under State of last operation check your settings VY Y VY Have you entered an incorrect IP address under TFTP Server IP Address Does the name of the configuration file consist of more than 8 characters and the extension of more than 3 when using DIME Tools Does the host not support TFTP did you forget to start the TFTP server of DIME Tools before starting the operation Is
335. s Guide samme 81 Configuration Requirements Menu navigation You can use the following keys or key combinations to navigate the various menus in the Setup Tool Tabulator To move to the next item in a menu Return To open a submenu or activate a menu command e g SAVE up or down To move forwards or backwards between menu fields functions with VT 100 emulation when using a terminal program left or right To scroll backwards or forwards in the same field to reveal a list of possible entries functions with VT 100 emulation when using a terminal program Esc Esc Esc twice in succession To return to the previous menu Cancels any changes made Space To toggle the delete flag for list entries that are to be deleted The tagged entries are marked with D Pressing Space again removes the tag marking Ctrl I To redraw the screen Ctrl n To move to the next item in a menu Ctrl p To move to the previous item in a menu Ctrl f To scroll forward a page in a long list An sign at the bottom right indicates the end of the list or a v indicates more to come Ctrl b To scroll back a page in a long list An sign at the top right indicates the start of the list or a a indicates more to come Ctrl c Leave the Setup Tool Table 4 2 Navigation in the Setup Tool 82 ummm X4000 Users Guide Configuration Options B Menu commands When you start mov
336. s Manual 1 7 1 Contents 1 7 2 Meaning 1 8 Feedback 2 General Safety Precautions 3 Hardware Description and Installation 3 1 Basic Unit 3 1 1 Desktop Unit 3 1 2 19 Inch Built In Unit 3 2 Expansion and Resource Cards 3 2 1 Design of Expansion Cards 3 2 2 Installation and Replacement of Expansion Card X4000 User s Guide m m 16 18 18 18 20 22 23 24 25 25 27 29 31 35 36 37 40 53 53 55 Em Table of Contents 3 3 Setting Up and Connecting 3 4 Status Messages via LEDs 3 4 1 Basic Unit 3 4 2 Expansion Cards 3 5 Boot Sequence 4 Configuration Requirements 4 1 Connection Methods 4 1 1 Man Machine Interface MMI 4 1 2 Connecting Over the Serial Interface 4 1 3 Connecting Over a LAN 4 1 4 Connection Over ISDN 4 2 Logging In 4 3 Configuration Options 4 3 1 Methods of Configuration 4 3 2 Using the Setup Tool 4 4 Procedure for Initial Configuration 5 Man Machine Interface MMI Display with User Guide 5 1 Overview 5 2 Display and Input Keys 5 2 1 Using the Input Keys 5 2 2 Meaning of LEDs 5 2 3 Navigation Bars 5 3 Menu Architecture 5 3 1 Display Settings 5 3 2 IP Address and Netmask 5 3 3 Date and System Time 5 3 4 Information about X4000 Basic Unit 5 3 5 Information about X4000 Expansion Card 8 ummm X4000 Users Guide 59 63 63 64 66 69 70 71 71 73 74 76 78 78 79 91 93 94 96 96 97 98 99 100 102 103 104 105 Table of Contents ET 5 3 6 Monitoring 10
337. s empty Local PPP ID Your T Online user ID Comprises the following elements lt Kennung gt lt T Online Nr gt lt Mitbenutzer Nr gt t online de Kennung the 12 digit user account here 000460004256 T Online Nummer telephone number here 091169386 Mitbenutzer Nr 4 digit co user number here 0001 The T Online Nr and the Mitbenutzer Nr must be separated by if the T Online Nr has less than 12 digits PPP Password Your T Online password Keepalives Activates keepalive packets The activated Keepalive function checks the interface status This permits faster detection and signaling if the connection to the provider fails for example if the LAN cable is accidentally disconnected Table 9 4 WAN PARTNER ADD PPP gt Make no entry under Partner PPP ID Enter the Local PPP ID e g 000460004256091 16938630001 t online de Enter the PPP Password Y Select Keepalives on gt Confirm with OK 292 nmmmmm X4000 Users Guide LAN Interface Card for 10 100 Mbps E Advanced settings IP settings Creating a default route gt Goto WAN PARTNER ADD ADVANCED SETTINGS The following field is relevant Layer 1 Protocol Here you can define the Layer 1 Protocol of the ISDN B channel that X4000 is to use for connections to the WAN partner PPP over Ethernet PPPoE must be selected here for access to T DSL Table 9 5 WAN PARTNER
338. s the IP address server and sent to X4000 These can be entered as global name servers in X4000 and are thus available for future name resolutions Strategy for Name Resolution in X4000 A DNS request is handled by X4000 as follows 1 Canthe request be answered directly from the static or dynamic cache IP address or negative answer f yes the information is forwarded f no see 2 2 Is a matching forwarding entry available In this case the relevant DNS are asked If the connection to the WAN partner is not active an attempt is made to set it up Ifa DNS can resolve the name the information is forwarded and a dynamic entry created in the cache f none of the DNS asked can resolve the name or no matching forwarding entry is available see 3 3 Are global name servers entered In this case the relevant DNS are asked If the IP address of X4000 or the loopback address is entered for local applications these are ignored here Ifa DNS can resolve the name the information is forwarded and a dynamic entry created in the cache f none of the DNS asked can resolve the name or no static name servers are entered see 4 X4000 User s Guide Basic IP Settings 6 Is a WAN partner selected as default interface In this case the associated DNS are asked If the connection to the WAN partner is not active an attempt is made to set it up Ifa DNS can resolve the name the information is forwarded and a dy
339. s you the configuration steps you can carry out if you have equipped your X4000 basic unit with an expansion card and possibly resource cards Any expansion and resource cards equipped are automatically detected by X4000 on startup To install your expansion and resource cards please follow the installation guide supplied with the cards and chapter 3 2 page 53 Enter any necessary license s in the Setup Tool see chapter 7 1 1 page 121 before you start the configuration This chapter is broken down as follows WAN Interface Card for ISDN BRI Basic Rate Interface chapter 9 1 page 278 WAN Interface Card for ISDN PRI Primary Rate Interface chapter 9 2 page 281 LAN Interface Card for 10 100 Mbps chapter 9 3 page 287 Resource Cards with Digital Modems chapter 9 4 page 295 Resource Card for Encryption and Compression chapter 9 5 page 306 X4000 User s Guide samme 277 9 Configuration of Expansion and Resource Cards with the Setup Tool 278 9 1 WAN Interface Card for ISDN BRI By installing a BRI Basic Rate Interface expansion card you can equip X4000 with up to three additional ISDN BRI interfaces You can use these interfaces for both dialup and leased lines over ISDN The ISDN BRI expansion card can be equipped with a resource card with digital modems see chapter 9 4 page 295 and or with a resource card for encryption and compression see chapter 9 5 page 306 9 1 1 Configuration with the Setup Tool
340. sadn dot kejte pouze na okraj ch a nesahejte na sou sti nebo vodiv spoje Uzav rejte nepou van roz i ovac slot z slepkou tak aby do vnit ku p stroje nemohly vniknout ciz p edm ty Pokud se b hem provozu v p stroji nach zej ciz p edm ty hroz nebezpe zasa en elektrick m proudem nebo zkratu Dbejte na to aby okno displeje u displejov ho modulu nebylo po kozeno ostr mi pi at mi p edm ty Chra te displejov modul p ed po kozen m n razy a p dem a p ipojte jej pouze na p slu n konektor RJ11 u X4000 aby se zabr nilo po kozen X4000 a displejov ho modulu P i kabel i dbejte na to aby nedo lo k zakryt v trac ch otvor p stroje a aby nebyla omezov na funkce v tr n V d sledku omezen v tr n X4000 by mohlo doj t k po kozen p stroje kody vznikl v d sledku nedostate n ho v tr n vedou ke ztr t n rok z ru en Neotev rejte z kladn p stroj a sitovy zdroj nepodrobujte dn m manipulac m jinak hroz ivotn nebezpe zasa en m elektrick m proudem Neodstranujte dn rouby u upevn n z kladn ho p stroje Pokud se p stroj p em st z chladn ho prost ed do provozn ho prostoru m e se vyskytnout orosen jak na vn j ch stech tak i uvnit p stroje Vy kejte teplotn pfizp soben p stroje a jeho absolutn vysu en ne jej X4000 User s Guide Pouzit provoz podle s
341. se connections are superfluous but unfortunately not free if none of the hosts in the branch office can be reached e g because all PCs are switched X4000 User s Guide Settings Specific to WAN Partners B off As itis not possible to determine whether the hosts can be reached until the connection is set up costs are incurred by the calling party i e the head office Central Server No Host reachable Headquarter s Router 192 168 1 10 Group 0 Reachable LAN IP LAN IP 192 168 1 20 10 1 1 1 192 168 1 254 Group 0 Headquarters Branch Office 1 Connection setup attempt 2 X4000 is busy no connection is possible Figure 8 3 Keepalive Monitoring Cutting costs The Keepalive Monitoring function enables you to configure X4000 in the branch office so that unnecessary WAN connections from the head office to the branch office are avoided X4000 checks at regular adjustable intervals to see whether the hosts to be monitored in the LAN at the branch office can be reached If none of the hosts to be checked answers a corresponding request after three consecutive attempts connection setup by the central server is prevented by X4000 deactivating the interface to the head office WAN partner The result is that the line to the branch office appears to be busy if the central server at head office attempts to set up a connection This means that no costs are incurred for a connection which would have be
342. ser s Guide Administration of Configuration Files t X4000 Setup Tool CONFIG Configuration Management MyRouter BinTec Communications AG Operation TFTP Server IP Address TFTP File Name Name in Flash Type of last operation START OPERATION State of last operation done get TFTP gt FLASH 192 168 1 1 b5104 x4a boot get TFTP FLASH EXIT Use Space to select The menu contains the following fields Operation Operation you want to perform TFTP Server IP Address The IP address or host name if the host name can be resolved of the TFTP server which you want to transfer a configuration file from or to TFTP File Name Name of the configuration file on the TFTP server without path data Name in Flash Name of the configuration file in the flash New Name in Flash Name of the configuration file to be newly created in the flash with Operation move or copy Type of Last Operation Type of previous operation since the last X4000 start State of last operation The state of the last operation executed Table 11 1 CONFIGURATION MANAGEMENT X4000 User s Guide sssa 365 366 Configuration Management The Operation field contains the following selection options save MEMORY gt FLASH Save all current settings from memory to flash as configuration file lt Name in Flash gt lt Name
343. setting has been found it is displayed e g Euro ISDN point to multipoint gt Select D Channel if applicable 9 Select B Channel 1 e g dialup gt Select B Channel 2 e g dialup In most cases you can accept the preset values for D Channel B Channel 1 and B Channel 2 If you use an ISDN leased line and have requested a special service from your service provider it may be necessary to set the local side of the leased line at this point DTE or DCE You must then ensure that the far end has set the opposite value You must also set D channel B channel 1 and B channel 2 to the same values if you have selected several D B channels under ISDN Switch Type and the values can be changed If dialup connections are to be set up over the ISDN BRI interface first tell X4000 how it is to respond to incoming calls over this interface these settings are not necessary for a leased line Goto X4E 3BRI ISDN SO UNIT O INCOMING CALL ANSWERING This menu lists the services previously assigned to numbers and offers the same options as CM 1BRI ISDN SO INCOMING CALL ANSWERING for the X4000 User s Guide mm m 279 9 Configuration of Expansion and Resource Cards with the Setup Tool distribution of incoming calls over the ISDN BRI interface of the basic unit For a detailed description see Incoming call answering page 141 y Use ADD to add a new entry or select an existing entry Confirm with Return to change the ent
344. sive configuration You should use the Setup Tool or Configuration Wizard for this purpose You can find detailed information about the MMI and the complete menu architecture in chapter 5 page 93 You will learn about configuration using the Configuration Wizard in chapter 6 page 109 It is useful for quick basic configuration of X4000 and can be used if you have a Windows PC This usually covers most standard configurations However if you need additional settings or wish to use other WAN interfaces of X4000 than the ISDN BRI interface of the basic unit you can use one of the other configuration options stated above You could first configure X4000 with the Configuration Wizard and subsequently extend or change this initial configuration with one of the other tools In many cases the Configuration Wizard alone will be sufficient X4000 User s Guide Configuration Options Setup Tool SNMP Configuration Manager and other SNMP managers The Setup Tool is a menu driven tool for the configuration and administration of X4000 Configuration with the Setup Tool is much easier and clearer than configuration with SNMP commands although not all settings can be made with the Setup Tool Besides the Configuration Wizard this manual mainly explains how to configure with the Setup Tool The Setup Tool is independent of the operating system of your PC If a configuration step is only possible in isolated cases with the help of an SNMP command the
345. sm in the Software o Reference SS This is configured in WAN PARTNER EDIT ADVANCED SETTINGS Callback Activates the callback function Table 10 7 WAN PARTNER EDIT ADVANCED SETTINGS 328 mmmmm X4000 Users Guide Access Security 10 Callback offers the following selection options no X4000 does not call back expected awaiting X4000 calls the WAN partner to initiate callback callback yes PPP negotiation X4000 calls back with the extension entered for the WAN partner If no number is entered the required number can be reported by the caller in a PPP negotiation This setting should be avoided if possible for security reasons However no alternative is currently available for connecting Microsoft gt gt clients over data transmission networks yes delayed CLID only X4000 calls back after approx four seconds if requested to by the WAN partner yes PPP negotiation Corresponds to the value yes PPP callback optional negotiation but contains an abort option The Microsoft client has the option of aborting callback and maintaining the initial connection to X4000 without callback This is done by pressing CANCEL to close the dialog box that appears Exception This abort option cannot be used if the WAN partner dialing in uses Windows NT and his extension number is entered in X4000 yes X4000 calls back immediately if requested to by the WAN partner
346. ssage all displays debugging information for all subsystems acct displays debugging information for the accounting subsystem system displays debugging information for all subsystems except the accounting subsystem subs subsystem for which debugging information is to be displayed Several entries are possible separated by a space ifconfig ifconfig interface destination lt destaddrs gt lt address gt netmask lt mask gt up down dialup metric lt n gt Assigns the IP address and the associated netmask to the interface lt interface gt and configures the associated parameters The routing table is changed accordingly If you only enter ifconfig lt interface gt the current interface parameters are displayed interface name of the interface ifDescr destination lt destaddrs gt destination IP address of a host This adds a host route for this host in the routing table ipRouteDest X4000 User s Guide samen 415 14 Important Commands 416 address X4000 s IP address for the interface ipRouteNextHop netmask mask netmask of the interface ipRouteMask up Sets the interface to the up status down sets the interface to the down status dialup sets the interface to the dialup status does not define its own IP address ipRouteNextHop 0 0 0 0 metric lt n gt sets route metric to n ipRouteMetric1 ifstat ifstat lur
347. t active be entered for the WAN partner timed update always always yes yes Cost intensive Table 8 54 Send RIP SAP Updates Proceed as follows Go to WAN PARTNER EDIT IP Select Enable IPX yes Enter IPX NetNumber Select Send RIP SAP Updates Enter Update Time if applicable VY V VN Y Enter Age Multiplier if applicable X4000 User s Guide sssa 273 B Advanced Configuration of the Basic Unit with the Setup Tool Confirm with OK Press SAVE 274 mmmmm X4000 Users Guide Bridging 8 8 5 Bridging X4000 supports the bridging function The description of the configuration of X4000 as a bridge can be found in the Software Reference X4000 User s Guide samme 275 8 Advanced Configuration of the Basic Unit with the Setup Tool 8 6 Extra License Features This chapter briefly describes the X4000 features you can activate with extra licenses The relevant extra licenses are activated by adding the information received with the license in the Setup Tool menu LICENSES see chapter 7 1 1 page 121 Extra licenses are currently obtainable for the following features X 25 Frame Relay OSPF VPN Virtual Private Network TAF Token Authentication Firewall You can find detailed information and configuration instructions with examples in the Extended Features Reference 276 mmmm X4000 Users Guide 9 Configuration of Expansion and Resource Cards with the Setup Tool This chapter tell
348. t gt ARP requests from the LAN That is if a host in the LAN wants to set up a connection to another host in the LAN or to a WAN partner but doesn t know its hardware address it sends a so called ARP request into the network as a broadcast This is actually a question to all those in the network What is the hardware address of host x If Proxy ARP is activated in X4000 and the desired host can be reached over a defined WAN connection X4000 answers the ARP request with its own hardware address This is sufficient for establishing the connection The gt gt data packets are sent to X4000 which then forwards them to the desired host 1 192 168 1 4 MAC ISDN 192 168 1 254 192 168 1 4 MAC 0 0 0 1 2 3 MAC 0 0 0 4 5 6 X4000D 2 192 168 1 4 MAC 0 0 0 1 2 3 Single workstation Your Local Area Network with ISDN card Figure 8 2 Proxy ARP Configuration is made in E WAN PARTNER EDIT IP ADVANCED SETTINGS Mi CM 100BT FAST ETHERNET ADVANCED SETTINGS 234 mmmmms X4000 Users Guide Settings Specific to WAN Partners B Proxy Arp Enables X4000 to answer ARP requests Table 8 32 WAN PARTNER Epir IP ADVANCED SETTINGS or CM 100BT FAST ETHERNET ADVANCED SETTINGS Proxy Arp in WAN PARTNER EDIT IP ADVANCED SETTINGS contains the following selection options off Disables Proxy ARP via the interface to the WAN partner on up or dormant X4000 answers an ARP
349. t sokat ez rt csak a BinTec ltal feljogos tott szervizekkel v geztesse A szervizek c m t rdekl dje meg a szakkeresked j n l Ellenkez esetben a mindennem garanciaig nye megsz nik A k sz l ket semmi esetre sem szabad nedvesen tiszt tani A behatol v z jelent s vesz lyforr sokat jelenthet a felhaszn l sz m ra pl ram t s s jelent s k rokat okozhat a k sz l ken Sohasem szabad s rol szereket l gos tiszt t szereket les vagy karcol seg deszk z ket alkalmazni X4000 User s Guide mm m 461 15 General Safety Precautions in 15 Different Languages V eobecn bezpe nostn pokyny V n sleduj c ch odstavc ch jsou uvedeny bezpe nostn pokyny kter se p i pou v n p stroje mus z sadn dodr ovat Doprava a uskladn n E 462 Instalacea W uveden do provozu X4000 dopravujte a skladujte pouze v origin ln m obalu anebo v jin m vhodn m obalu kter jej chr n proti n raz m P ed instalac a provozem X4000 p ihl ejte k pokyn m kter se t kaj podm nek okoln ho prost ed srovn Technick daje P edpokl d se pevn a rovn podklad Elektrostatick n boje mohou zp sobit po kozen p stroje Pou ijte proto uzemn nou man etu p ipevnenou kolem z p st anebo se nejprv dotkn te n kter uzemn n plochy ne se budete dot kat konektorovo ch z suvek nebo roz iruj c ch desek X4000 Roz i ovac ch desek se z
350. t to enter X4000 Setup Tool BinTec Communications AG Licenses System LAN CM 100BT Fast Ethernet Module WAN CM 1BRI ISDN SO Serial WAN CM SERIAL Serial WAN PArtner IP IPX PPP Configuration Management Monitoring and Debugging Exit Figure 4 3 Setup Tool menu layout To use the Setup Tool you must log in with the user name admi n If you don t know the corresponding password you cannot open the Setup Tool see chapter 4 2 page 76 The Setup Tool is easy to use After a few minutes you will have no problem finding your way around Nevertheless you should first familiarize yourself with the facilities offered by the Setup Tool By way of introduction we would first like to point out a few things you should be aware of when using the X4000 Setup Tool Every Setup Tool menu consists of three parts see Figure 4 3 page 80 The menu line contains a navigation aid to show you where you currently are in the Setup Tool menu system The system name of X4000 is also displayed This is especially helpful if you are using several BinTec routers with different system names The configuration window is where the actual entries are made and the respective settings displayed The field in which the cursor is currently located is also marked ummm X4000 Users Guide Configuration Options B The help line tells you how to move around in the menu currently displayed or which entries you can change X4000 User
351. t Ctrl p gt to scroll lt Space gt tag untag DELETE lt Return gt to edit This is where all WAN partners currently configured are listed with the corresponding Partner name Protocol and State A WAN partner interface is created automatically for leased lines Edit the previously created entry for a leased line in the WAN PARTNER menu and enter the necessary parameters State can have the following values E up connected X4000 User s Guide Configuring WAN Partners E dormant not connected E blocked not connected an error occurred on establishing a connection a renewed attempt is only possible after a specified number of seconds E down set to down by administration To make an entry in the list proceed as follows Use ADD to add a new entry or select an existing entry Confirm with Return to change the entry Another menu window opens X4000 Setup Tool BinTec Communications AG WAN ADD Configure WAN Partner MyRouter Partner Name LittleIndian Encapsulation PPP Compression none Encryption none Calling Line Identification no WAN Numbers gt PPP gt Advanced Settings gt IP gt IPX gt Bridge gt SAVE CANCEL Enter string max length 25 chars X4000 Users Guide ssmms 161 Basic Configuration of Basic Unit with Setup Tool The menu contains the following fields Partner Name Enter a name for uniquely identifying the WAN partner Encapsulation
352. t Port number for HTTP Requests Default value 80 HTTP TCP Port 0 disables access to X4000 s HTTP status page see chapter 10 1 4 page 320 Table 8 48 IP STATIC SETTINGS X4000 User s Guide samme 265 g Advanced Configuration of the Basic Unit with the Setup Tool 266 To do Bootstrap protocol Your Local Area Network BootP Relay Agent Proceed as follows to change one of the port numbers gt Goto IP STATIC SETTINGS gt Enter Remote CAPI Server TCP Port Remote TRACE Server TCP Port RIP UDP Port and or HTTP TCP Port Press SAVE 8 3 4 BOOTP Relay Agent The Bootstrap Protocol gt BOOTP defines how a host BOOTP client in a TCP IP network receives his IP address and other configuration information on booting The BOOTP client sends a BOOTP Request a BOOTP server answers the request with a BOOTP Response and supplies the client with the necessary information As the server only hears requests from the LAN in which it is located it is sometimes advisable to set up a BOOTP Relay Agent The agent forwards all requests and responses between the client and server via a WAN connection to this server X4000D BootP Server 2 IP 192 168 1 1 S WAN Partner s Network Figure 8 4 X4000 as BOOTP Relay Agent ummm X4000 Users Guide Basic IP Settings B To do oa Configuration is made in IP STATIC SETTINGS BOOTP Relay Server IP address of the BO
353. t person to judge whether we have succeeded with this manual So please let us know what is missing in this manual what you don t like what we should do better what you like what you think is especially successful etc Your constructive criticism is always welcome and will help us design the documentation for BinTec products to suit your wishes and needs The last page of this manual contains a questionnaire we have prepared for your suggestions Please fill out the questionnaire and return E by fax to 49 911 9673 1498 E by post to BinTec Communications AG Keyword Docu Feedback Stidwestpark 94 90449 N rnberg Bb or just send us an e mail to doku_feedback bintec de We look forward to receiving your feedback Thanks for your support X4000 User s Guide m m 29 E8 Welcome 30 ummm X4000 Users Guide Transport and storage Installation and operation 2 General Safety Precautions The following sections contain safety precautions you are strongly advised to heed when working with your equipment Only transport and store X4000 in its original packaging or use other appropriate packaging to protect against knocking and shaking Read the information on the ambient conditions see Technical Data before installing and operating X4000 Place the equipment on a firm flat base Electrostatic charges may cause damage to the equipment You should therefore wear a grounded wrist strap or touch a grounded surfa
354. t support data compression or its data compression is not activated X4000 detects this during the gt PPP negotiation phase and deactivates data compression for this connection Configuration is made in E WAN PARTNER EDIT E WAN PARTNER EDIT IP ADVANCED SETTINGS Compression Defines the type of compression for connections to the WAN partner Table 8 29 WAN PARTNER EDIT X4000 User s Guide Settings Specific to WAN Partners B STAC MS STAC VJHC The Compression field contains the following selection options none No compression STAC Enables STAC data compression if Encapsulation PPP MS STAC Enables STAC data compression for dialing into a Windows Remote Access Server if Encapsulation PPP Table 8 30 Compression Van Jacobson Header Enables VJHC Compression Table 8 31 WAN PARTNER Epit IP B ADVANCED SETTINGS Proceed as follows to set STAC or MS STAC Goto WAN PARTNER EDIT Select Compression Press SAVE Proceed as follows to set VJHC gt Goto WAN PARTNER EDIT IP ADVANCED SETTINGS Activate Van Jacobson Header Compression on Confirm with OK Press SAVE VV Y Y Press SAVE X4000 User s Guide sssa 233 8 Advanced Configuration of the Basic Unit with the Setup Tool 8 2 10 Proxy ARP Address Resolution Protocol ARP requests The gt Proxy ARP function enables X4000 to answer g
355. tain default interface of X4000 for monitoring purposes The MMI is operated in Configuration Mode as the default mode and all MMI functions can be used In Monitoring Mode each menu can be displayed but entries are only possible to a limited extent For example the IP address entered can be displayed in Monitoring Mode but not changed ummm X4000 Users Guide Overview B You can change from Monitoring Mode to Configuration Mode and vice versa in the main menu Display Settings see chapter 5 3 1 page 100 X4000 Users Guide samme 95 E Man Machine Interface MMI Display with User Guide Display Settings Navigating with WV and A Selecting a menu with OK In the menu 5 2 Display and Input Keys How to use the display and input keys of the MMI is described below 5 2 1 Using the Input Keys To explain the use of the input keys Figure 5 2 page 96 shows an extract of the menu system OK OK Deutsch c i Language English VA n E ViA OK Display Idletimer OK The language hh has been changed i to ENGLISH v A Brightness pe VIA Figure 5 2 Using the input keys extract from menu system The arrow keys enable you to move up and down in the menu system You always move on one level only e g changing from one main menu to another To select a menu item press OK You then change to the next lower level in whic
356. tanoven ho elu uvedete do provozu P ihl ejte k podm nk m okoln ho prost ed uveden m v Technick ch daj ch Kontrolujte zda se nap t m stn s t shoduje s hodnotami jmenovit ho nap t s tov ho zdroje P stroj Ize provozovat za t chto podm nek 100 240 VAC 50 60Hz Postarejte se o to aby z suvka s ochrannym kontaktem byla pfi instalaci voln p stupn Pro pln odpojen od s t je t eba vyt hnout s ovou z str ku P i propojov n dbejte na po ad tak jak je pops no v p ru ce Pou vejte pouze kabely je odpov daj specifikac m v t to p ru ce anebo dodan origin ln kabely Pokud pou ijete jin kabely odm t BinTec Communications AG ru en za vznikl kody nebo za omezenou funk nost Ru en za p stroj v t chto p padech zanik P i p ipojov n p stroje dbejte na pokyny uveden v p ru ce Veden ukl dejte tak aby se nestala zdrojem nebezpe nap zakopnut m a aby se nepo kodily B hem bou ky nep ipojujte veden na p enos dat neodpojujte je a ani se jich nedot kejte X4000 je ur en pro pou it v kancel sk m prost ed Jako MultiProtocol Router sestavuje X4000 v z vislosti na syst mov konfiguraci spojen WAN Chcete li zabr nit tov n ne douc ch poplatk m li byste v robek bezpodm ne n hl dat X4000 odpov d p slu n m bezpe nostn m p edpis m pro za zen i
357. te 379 RIP 229 Routing 159 Routing entry 159 175 Routing Information Protocol 229 Rule 335 RVS COM Lite 115 S S0 interface Configuring 137 Technical data 392 492 nmmmms X4000 Users Guide Index SAFERNET Safety Precautions Saving the configuration Scope of supply Security functions Access security Activity monitoring Checklist Configuration Line tapping security Special features Selecting General Settings Service Setting up and connecting Setup Tool Advanced configuration Basic configuration Menu architecture Monitoring functions Using Short hold SNMP shell Software Reference Software update STAC Startup procedure Syslog messages System data entering System requirements System time TAF T DSL Technical data Basic unit Mains unit X4000 User s Guide m m 353 155 387 389 388 493 E Index Telnet 73 Testing 117 Time server 242 Token Authentication Firewall 353 T Online 182 Transit Network 222 Troubleshooting 375 Aids 376 IPX routing 383 ISDN connections 380 System errors 379 U Update 371 User concept 141 Vv V 24 interface Technical data 393 Van Jacobson Header Compression 232 Virtual Private Network VPN 357 VPN 357 W Wan interfaces 137 WAN partner advanced functions 198 Compuserve 182 Configuring basic configuration 159 DNS 225 Encapsulation 159 Examples 182 Internet access 182 IPX 271 PPP authentication 159 Routing entry 159 Short hold 159 T Online 182 T
358. te que el aparato quede expuesto a la luz solar directa Procure que ning n objeto p ej clips o l quido entre en el interior del aparato descargas el ctricas cortocircuitos y que exista una refrigeraci n suficiente El usuario de X4000 no puede cambiar ning n componente ni debe ajustar ning n interruptor puente En casos de emergencia p ej caja o elemento de mando deteriorados penetraci n de l quidos o de cuerpos extra os interrumpa inmediatamente la alimentaci n de energ a y avise al servicio t cnico S lo personal de un servicio t cnico autorizado por Bin Tec puede abrir el aparato Antes de abrirlo es imprescindible desconectar el enchufe de la red Si se abre de forma no autorizada o las reparaciones no se efect an como es debido esto puede suponer riesgos considerables para el usuario p ej electrocuci n Por ello encargue siempre los trabajos de repara ci n a un servicio t cnico autorizado por BinTec cuya direcci n se la pro porcionar su distribuidor De otro modo perder todo el derecho de ga rant a En ningun caso el aparato debe limpiarse en h medo Al penetrar agua puede existir un peligro considerable para el usuario p ej descargas el ctricas y pueden producirse dafios considerables en el aparato No utilizar jam s productos abrasivos detergentes alcalinos ni instrumen tos afilados o abrasivos ummm X4000 User s Guide Allmanna sakerhetsanvisningar pa svenska Bea
359. ter can additionally carry out PPP authentication with the WAN partner before it accepts the call The router needs the necessary data for this which you should enter here First establish the type of authentication process that should be performed then enter a common password and two user names You get this information for example from your Internet Service Provider ISP or the system administrator at your head office The call is only accepted if the data entered in X4000 matches the caller s data If you authenticate WAN partners over a RADISU server please see the relevant instructions in the Extended Features Reference To set the PPP authentication for the WAN partner proceed as follows gt Goto WAN PARTNER ADD PPP X4000 User s Guide saman 167 Basic Configuration of Basic Unit with Setup Tool X4000 Setup Tool BinTec Communications AG WAN ADD PPP PPP Settings BigBoss MyRouter Authentication CHAP PAP Partner PPP ID LittleIndian Local PPP ID BigBoss PPP Password Secret Keepalives off Link Quality Monitoring off OK CANCEL Use Space to select The menu contains the following fields Authentication Authentication protocol Partner PPP ID ID of WAN partner Local PPP ID X4000 s ID PPP Password Password Keepalives Activates keepalive packets for checking the interface status Possible values B off B on Link Quality Monitoring Activates PPP Link Qualit
360. tered in X4000 Configuration is made in E WAN PARTNER EDIT X4000 User s Guide Line Tapping Security 10 Hi WAN PARTNER EDIT ADVANCED SETTINGS EXTENDED INTERFACE SETTINGS OPTIONAL The following field in WAN PARTNER EDIT is relevant for this configuration step Encryption Defines the type of encryption Possible values These values are only available if PPP Async PPP over X 75 Async PPP over X 75 T 70 BTX or X 25 PPP has been selected under Encapsulation MPPE 40 MPPE version 1 with 40 bit key MPPE 56 MPPE version 1 with 56 bit key MPPE V2 40 MPPE version 2 with 40 bit key MPPE V2 56 MPPE version 2 with 56 bit key DES 56 DES with 56 bit key Blowfish 56 Blowfish with 56 bit key none No encryption Table 10 21 WAN PARTNER EDIT X4000 User s Guide ssamaa 355 10 Configuration of Security Functions and Firewall 356 To do If DES or Blowfish are used the key can be generated automatically with authentication or defined statically The following fields in the WAN PARTNER M EDIT ADVANCED SETTINGS EXTENDED INTERFACE SETTINGS OPTIONAL menu are relevant for this purpose Encryption Key Defines whether a key for the connection to the Negotiation WAN partner is generated automatically or defined statically Possible values E authentication default value Key is generated automatically by X4000 E static The key is defined statica
361. terface card for ISDN PRI and or G 703 equipped as standard with hardware support for encryption and compression can be optionally equipped with up to two resource cards with digital modems XTR S XTR M or a resource card XTR L E X4E 2 3BRI WAN interface card for ISDN BRI can be optionally equipped with aresource card with digital modems XTR S XTR M and or aresource card for encryption and compression XTR ENC E X4E 2FE LAN interface card for 10 100 Mbps can be optionally equipped with aresource card for encryption and compression XTR ENC For configuration of expansion and resource cards please refer to chapter 9 page 277 The technical data including pin assignment of interfaces can be found in chapter 13 3 page 406 3 2 1 Design of Expansion Cards Rear views of the expansion cards with their respective interfaces and LEDs are shown below The meaning of the LEDs is given in chapter 3 4 2 page 64 If you are using an expansion card with resource card s in the X4000 built in unit BinTec Communications AG recommends that you use the fan unit obtainable as optional equipment X4000 User s Guide m m 53 Bg Hardware Description and Installation BRI Expansion Card X4E 2 3BRI ISDN BRI port LEDs Figure 3 14 Rear view of a BRI expansion card PRI G 703 Expansion Card X4E 1 2PRI 1 ISDN PRI G 703 port with IN 2 LEDs and OUT socket Bm A
362. the source file not in the configured directory of the TFTP path of DIME Tools when Operation get To change the TFTP path refer to BRICKware for Windows If none of these points applies proceed as follows to find the cause of the problem Leave the Setup Tool Type in the following in the SNMP shell debug config amp Reopen the Setup Tool with setup Carry out the desired operation in CONFIGURATION MANAGEMENT If an error occurs an error message with the cause of the error appears in the help line of the Setup Tool Solve the problem and carry out the operation again Leave CONFIGURATION MANAGEMENT with EXIT You have created the configuration file brick cf e g with the help of the Configuration Wizard You have not transferred the file to X4000 over the serial interface brick cf can be found in the directory CABRICK on your PC Your PC has the IP address 192 168 1 1 If you want to transfer brick cf from your PC to X4000 proceed as follows For a Windows PC Click the Windows Start button then Program BRICKware DIME Tools to start DIME Tools The TFTP server must be active Activate a TFTP server under Unix see the Software Reference Go to CONFIGURATION MANAGEMENT X4000 User s Guide mm m 369 11 Configuration Management 370 TFTP host gt flash Flash gt memory YN Y Y Select Operation get TFTP gt FLASH Type in TFTP Server IP Address e g 192 168 1 1 Type in T
363. tion to X4000 This simplifies the initial configuration as you can first assign an IP address to X4000 and then set up the equipment and connect it in the planned location The configuration is then carried out from your PC via your network e g using the Setup Tool The display of status information in the MMI enables you to monitor X4000 activities without having to log in This provides an additional diagnostic tool which can display information such as the current version of the system software or the activities of the X4000 interfaces Illuminated input keys and navigation bars simplify operation of the MMI and guide you through the menu architecture so that you can make settings in each menu without having to search for each menu individually You can still open a certain menu if you wish After switching on X4000 first performs a few selftests and then shows the X4000 logo on the display see Figure 5 1 page 93 Press any input key to use the MMI If no more inputs are made for a long period of time the MMI returns to the logo You can set this period of time in the Display Idle Timer menu X4000 s logo is normally shown on switching on X4000 or on expiry of the display idle timer To use another MMI menu instead of this show the desired menu on the display and then press C and OK simultaneously The corresponding menu then appears instead of the logo when the idle timer expires This enables you for example to display a cer
364. to WAN PARTNER ADD ADVANCED SETTINGS X4000 User s Guide samme 211 B Advanced Configuration of the Basic Unit with the Setup Tool The following part of the menu is relevant for this configuration step Layer 1 Protocol Defines which Layer 1 Protocol X4000 is to use There is only one meaningful setting for AO DI AO DI Channel Bundling Defines whether or which type of channel bundling is to be used for connections to the WAN partner see manual chapter 7 2 2 If AO DI is selected under Layer 1 Protocol dynamic is set automatically for Channel Bundling Total Number of Defines the maximum number of channels that Channels may be opened for dynamic channel bundling Remote X 25 Address X 25 destination address Appears only if AO Dl is selected under Layer 1 Protocol Table 8 15 WAN PARTNER ADD ADVANCED SETTINGS Select Layer 1 Protocol AO DI gt Enter Total Number of Channels e g 1 Enter Remote X 25 Address e g 01901 1 Proceed as follows to configure BACP BAP for the AO DI client access control of Bandwidth On Demand Go to WAN PARTNER ADD ADVANCED SETTINGS EXTENDED INTERFACE SETTINGS OPTIONAL 212 mmmmm X4000 Users Guide Settings Specific to WAN Partners B The following part of the menu is relevant for this configuration step Mode Defines which mode is used for BOD Only the BAP Active Mode setting is used for an AO DI client Lin
365. toconfiguration and this service is probably not supported contact your telephone provider Enter Specify TEI Value f 9 Select X 31 TEI Service Packet Switch Press SAVE You have returned to the CM 1BRI ISDN SO menu Press SAVE You have returned to the main menu The main menu now contains the X 25 menu which you need for the following configuration steps Information about the X 25 parameters can be found in the Extended Features Reference at www bintec de Proceed as follows to make the preset link settings for X 25 configuration for Datex P Goto X 25 LINK CONFIGURATION 9 Select the interface for which you want to configure X 25 e g x31d2 0 1 X4000 User s Guide ssss 209 B Advanced Configuration of the Basic Unit with the Setup Tool The following parts of the menu are relevant for this configuration step L3 Packet Size Permissible size of data packets for this connection on the third layer of the OSI model Windowsize Packetsize Negotiation of the size of Windowsize and Neg Packetsize with the remote terminal There is only one meaningful setting for Datex P never i e negotiation is deactivated Highest Two Way Defines the highest number of virtual channels Channel HTC Table 8 13 X 25 LinK CONFIGURATION EDIT Select L3 Packet Size max 256 Select Windowsize Packetsize Neg never Enter Highest Two Way Channel HTC 1 Press SAVE Yo V Y V Y
366. todetect on bootup This setting enables X4000 to use its automatic D channel detection As long as the D channel detection is running running appears next to Result of Autoconfiguration The setting found is then displayed e g Euro ISDN S2M user profile TE uL If the ISDN protocol is set incorrectly an ISDN connection cannot be set up and the provider s exchange may disconnect the line if it is not used Make sure X4000 detects the ISDN protocol used correctly and displays it under Result of Autoconfiguration If not enter it manually under ISDN Switch Type The automatic D channel detection is then switched off 9 Select ISDN Line Framing e g standard CRC4 gt Select Clock Mode e g external 284 mmmmm X4000 Users Guide WAN Interface Card for ISDN PRI and or G 703 9 Incoming Call Answering If dialup connections are to be set up over the ISDN PRI G 703 interface first tell X4000 how it is to respond to incoming calls over this interface these settings are not necessary for a leased line Y VN OV Y Y Go to X4E 2PRI ISDN S2M UNITO INCOMING CALL ANSWERING This menu lists the previously completed assignment of systems to numbers The menu offers the same options as CM 1BRI ISDN SO INCOMING CALL ANSWERING for distribution of incoming calls over the ISDN BRI interface of the basic unit For a detailed description see Incoming call answering page 141 Use ADD to add a new entry or select a
367. toscroll lt Space gt tag untag DELETE lt Return gt to edit Search p These lists are in alphabetical order according to the contents of the first field An incremental search function is provided which is very useful for searching for an item in long lists Proceed as follows Enter the first letter of the item you are looking for with the cursor located on an item in the list Entries can be made in upper or lower case As long as the search is active you can enter more characters to refine the search The Backspace or Delete key can be used to edit the search string The cursor automatically jumps to the first match it finds in the list The characters entered for the search are displayed in the help line at the bottom of the menu Do not enter invisible characters such as Tabulator or Space as they stop the search and could lead to a function being executed If the search does not work make sure that the cursor is located in a list field The search cannot run if the cursor is located in a command field e g ADD or DELETE X4000 User s Guide Configuration Options B Changing the password Example In the WAN PARTNER menu shown above the entries provide the following search results pore Partner1 pr Pr pR PR PROVIDER partner 2 Partner1 on entering 2 to Partner2 Table 4 4 Search results The procedure described below for changing the password applies to all X40
368. troj se z sadn nesm istit mokr m zp sobem Vnikaj c voda m e u ivatele vystavit zna n mu ohro en nap zasa en elektrick m proudem a m e zp sobit zna n po kozen p stroje Nikdy nepou vejte prost edky na mechanick i t n alkalick istic prost edky agresivn a drhnouc pom cky X4000 User s Guide Generelle sikkerhedsforskrifter p dansk Nedenst ende afsnit indeholder sikkerhedsforskrifter som ubetinget skal overholdes ved brugen af apparatet Transport og B Transport r og opbevar kun X4000 i originalemballage eller i anden egnet opbevaring emballage der beskytter mod sted og slag Opstilling og Bl Lees og overhold forskrifterne for de omgivende betingelser for X4000 ibrugtagning opstilles og tages i brug se Tekniske data Brug et fast og jeevnt underlag E Statisk elektricitet kan medf re apparatskader Baer derfor en antistatisk manchet om h ndleddet eller r r ved en flade med jordforbindelse inden du r rer ved stik eller udvidelseskort p X4000 Ber r kun udvidelseskort i kanten og tag ikke fat om konstruktionsdele eller ledninger B6 Luk den ubenyttede udvidelsesmodulplads med blindafd kningen s der ikke kan komme genstande ind i apparatets indre Er der fremmede gen stande i apparatet under driften er der fare for elektriske st d og kortslut ninger E S rg for at ingen spidse genstande beskadiger displaymodulets displayru de Beskyt displaymodulet
369. ts the ISDN requirements in France and can be connected to Euro Numeris k E aie e B ele e z eje Telephone 49 911 96 73 0 Fax 49 911 688 07 25 Mail BinTec Communications AG S dwestpark 94 D 90449 N rnberg Internet www bintec de X4000 Users Guide a 3 B Ah A 4 ummm X4000 Users Guide Table of Contents Welcome General Safety Precautions Hardware Description and Installation Configuration Requirements Man Machine Interface MMI Display with User Guide Fast Configuration with the Configuration Wizard Basic Unit Basic Configuration of Basic Unit with Setup Tool Advanced Configuration of the Basic Unit with the Setup Tool 15 31 35 69 93 109 119 187 Configuration of Expansion and Resource Cards with the Setup Tool 277 Configuration of Security Functions and Firewall Configuration Management Troubleshooting Technical Data Important Commands General Safety Precautions in 15 Different Languages Glossary Index X4000 User s Guide m m 307 363 375 387 411 421 469 487 E Table of Contents 6 ummm X4000 Users Guide Table of Contents Table of Contents Table of Contents 1 Welcome 1 1 X4000 The Workgroup Access Router for Present and Future Applications 1 2 Scope of Supply 1 2 1 Basic Unit 1 2 2 Expansion Cards 1 3 BinTec Companion CD 1 4 Documentation from BinTec 1 5 System Requirements 1 6 Guarantee Terms 1 7 About thi
370. ture Both analog terminals e g fax modem and digital terminals can be connected to a PABX The internal network provides free telephoning and connection switching The individual terminals are given different extension numbers PABX Private Automatic Branch Exchange An ISDN gt PABX is a telephone exchange with gt gt S interface and gt 1TR6 or other manufacturer specific gt D channel protocols on the subscriber side Exchanges allow internal connections between the PABX extensions without the need to connect to the telephone service provider Not all BinTec routers contain an exchange 478 mmmsm X4000 Users Guide Glossary PABX number PAP Ping Point to multipoint Point to multipoint connection Point to point Point to point ISDN access Port POTS A point to point ISDN access includes a PABX number and an gt extension numbers range The PABX number is used to reach the PABX A certain terminal of the gt gt PABX is then dialed via one of the numbers of the extension numbers range Password Authentication Protocol Authentication process for connecting over gt PPP Functions like CHAP except that the user name and password are not encoded before being transmitted to the partner Packet Internet Groper Command that can be used to determine the range to remote network components Ping is also used for test purposes to determine if the remote device can actually be reached at all
371. ty Functions and Firewall How to configure security mechanisms using SAFERNET e g NAT Network Address Translation or filters 11 Configuration Management How to administrate configuration files and how to perform software updates 12 Troubleshooting Important tips on fault clearance 13 Technical Data X4000 technical data 14 Important Commands A brief overview of the most important commands of the SNMP shell and BRICKtools for Unix 15 General Safety Precautions in 15 Different Languages General safety precautions in 15 different languages Table 1 1 List of chapters X4000 User s Guide About this Manual p 1 7 2 Meaning To help you locate and interpret information easily this manual uses the following visual aids Sly Points out useful and relevant tips and tricks YA Predicts potential pitfalls and explains how to Y avoid them 34 Brings to your attention general and important points e Explains required fundamental information Brings your attention to important safety A precautions Levels of danger are in accordance with ANSI MH Caution indicates possible danger that if unheeded could cause material damage HM Warning indicates possible danger that if unheeded could cause bodily harm E Danger indicates danger that if unheeded could lead to serious bodily harm or death Table 1 2 List of v
372. uipment 60 ummm X4000 Users Guide Setting Up and Connecting ES 34 We recommend you use original BinTec cables which you can buy from your dealer The use of other cables may cause damage to your equipment and invalidates e the guarantee Real time clock Finally you must activate the buffer battery of the real time clock Figure 3 19 Removing the plastic strip for activating the buffer battery Remove the plastic strip see Figure 3 19 page 61 from the dummy cover Expansion card To connect your expansion card Plug the necessary interface cables of your expansion card into the sockets provided Sly Two RJ45 sockets IN and OUT are available per interface on the PRI G 703 expansion card D Connect the expansion card by connecting the cable to the IN socket You can connect a backup router via the OUT socket as an option which can then take over the function of the first router if this is switched off or fails Connecting X4000 Ifyou wantto use the display make sure that the display cable is connected to power supply to the appropriate socket on the 19 inch built in unit gt Connect X4000 to a mains socket or to the power supply of the 19 inch cabinet using the IEC AC power cord supplied with the equipment X4000 selftest X4000 carries out a selftest see chapter 3 5 page 66 If you have connected all the cables correctly the red LED of the C key on the display X4000 User s Guide m m
373. uired corrections If a serial connection does not work either gt Check the settings of the terminal program see chapter 4 1 2 page 71 If you have changed the default settings in BOOTmonitor adjust your terminal settings accordingly If this doesn t succeed proceed as described under I have forgotten my password page 379 12 2 2 ISDN Connections Here you will find possible causes of errors in ISDN connections Your telephone bill is unusually high Sly Use the Credits Based Accounting System see chapter 10 1 3 page 316 This enables you to set a limit for connections to X4000 to prevent unnecessary charges accumulating as a result of mistakes made during g configuration X4000 possibly has ISDN connections that remain connected or unwanted ISDN connections are set up which cause additional costs 9 Use debug allor trace to check if a PC in the LAN is using a different netmask from the one entered on X4000 9 Use debug all or trace to check if a PC in the LAN is configured for Remote CAPI with an incorrect IP address destination port 2662 380 msms X4000 Users Guide Typical Errors and Procedure Use SYSTEM EXTERNAL SYSTEM LOGGING to check if X4000 is configured so that syslog messages are sent to a host outside the LAN destination port 514 Use IP STATIC SETTINGS to check if an IP address located outside the LAN has been entered for X4000 under Time Server Check the MIB table b
374. umbers to the desired services e g PPP routing gt gt CAPI gt gt ISDN Login SERIAL This menu is for configuring the serial WAN interfaces of X4000 WAN PARTNER Here you define all your WAN partners e g your gt Internet Service Provider gt gt ISP All the WAN partners entered are displayed in a list that includes the name of partner protocol used and current status of each 88 ummm X4000 User s Guide Configuration Options B IP Here you enter the settings for the gt gt IP protocol This menu consists of several submenus IP RouriNG includes X4000 s IP routing table Here you enter routes to your partners e g default routes network routes which ensure that your X4000 sends all the gt data packets to the correct addresses IP STATIC SETTINGS is for entering important settings e g the domain name of X4000 the IP addresses of additional gt servers e g Domain Name Server and system time specifications IP NETWORK ADDRESS TRANSLATION is for configuring the interfaces to the partners for which you want to use the Network Address Translation function gt gt NAT IP ACCESS LISTS is for defining gt filters to allow or deny access from or to the different hosts in the connected networks You can thus prevent your X4000 from establishing unintended connections to the ISDN IP BANDWIDTH ON DEMAND BOD is for defining filters for the Bandwidth on Demand and AO
375. under DownAction is to be executed If you set Firstlflndex 70001 and Range 0 only the interface with the index 10001 is affected If you set Firstlflndex 10001 and Range 4999 default value the interfaces with indices 10001 to 15000 are affected Table 8 35 SYSTEM KEEPALIVE MONITORING ADD SYSTEM KEEPALIVE MONITORING lists all the hosts that are monitored by Keepalive Monitoring The reachability of the hosts is listed under State alive if the host was reachable on the last check down if the host was not reachable Todo Proceed as follows to configure the example shown in Figure 8 3 page 237 gt Goto SYSTEM KEEPALIVE MONITORING Press ADD to add the first host that is to be monitored by X4000 with Keepalive Monitoring Enter Group 0 gt Enter IPAddress 192 168 1 10 240 mmmsmm X4000 Users Guide Settings Specific to WAN Partners V V V V YN NN NN N NN Enter Interval e g 300 Select DownAction down Enter Firstlflndex 10001 Type in Range 4999 Press SAVE Press ADD to add the second host Enter Group 0 Enter IP Address 192 168 1 20 Enter Interval e g 300 Select DownAction down Enter Firstlflndex 10001 Type in Range 4999 Press SAVE These settings ensure that X4000 checks the reachability of hosts 192 168 1 10 and 192 168 1 20 at intervals of 300 s If neither of the two hosts is reachable after three consecutive attempts all X4000 interf
376. under Standard Gateway X4000 User s Guide samen 115 n Fast Configuration with the Configuration Wizard Basic Unit Click the DNS Configuration tab and enter the IP address of X4000 under DNS Server Search Order Click Add and then OK Follow the instructions on the screen 116 m msms X4000 Users Guide Testing your Configuration A LAN connection testing Testing Internet access 6 5 Testing your Configuration Once you have removed the serial cable of X4000 your configuration is complete Now let s make sure everything works Caution Incorrect configuration of the devices in your LAN may result in unintended connections and increased charges Monitor your X4000 and make sure that the system does not establish unwanted ISDN connections and charges To avoid unnecessary charges check whether the filters set in the Configuration Wizard are sufficient for your needs If not you can configure filters with the Setup Tool chapter 10 2 8 page 335 Watch the LEDs on your X4000 cf chapter 3 4 page 63 use the monitor function of the Setup Tool cf chapter 10 1 page 308 call up your settings in the display cf chapter 5 page 93 or check your settings with an SNMP Management Tool Test the connection to your X4000 In the start menu of your PC click Run and enter ping followed by a space and the IP address of X4000 e g ping 192 168 1 254 A window appears with the response Reply f
377. unicate with another host f Specifies that the telnet session should be transparent This option is especially useful for establishing connections to non telnet ports e g uucp or smtp host IP address or name of host port port number ping ping i f lt precount gt d lt msec gt c lt count gt target lt size gt Is used to test communication to another host i sends each packet one byte larger f lt precount gt lt precount gt packets are sent first The next packet is sent as soon as a packet has been received Output a dot appears on the screen for each packet sent and a dot is X4000 User s Guide SNMP Shell Commands e OC 2 deleted for each packet received f 1 without the additional parameter d msec causes approx half the equipment s bandwidth to be loaded by sending and receiving packets d msec Waits lt msec gt until the next packet is sent default 1000 millisecondsn c count limits the number of packets sent count sets the number of packets target IP address or name of host to which echo request packets are sent size sets the length of the packets to be sent If you do not specify c count packets will be sent to the host until you stop the operation e g by pressing Ct r1 C trace For WAN interfaces trace h23aFADtpiNxX T lt tei gt c lt cref gt lt channel gt unit slot
378. up to 62 connections X4000 Users Guide a 15 16 Basic unit Expansion cards Resource cards Ergonomic design Multiprotocol router Remote CAPI 1 1 X4000 The Workgroup Access Router for Present and Future Applications The extension capability of X4000 makes the multiprotocol router a future oriented and flexible investment X4000 with its RISC CPU is extremely powerful and capable of meeting future requirements The basic unit is obtainable as a desktop unit or as a 19 inch built in unit Both variants of the basic unit are already equipped with integrated 10 100 BT Ethernet interface ISDN BRI interface serial X 21 V 35 V 36 interface for leased lines serial X 21bis interface and serial console interface A slot for externally inserting an expansion card enables X4000 to grow in line with your requirements so that you can use the same basic unit for various applications A high degree of flexibility is assured by our motto Change the card not the equipment Expansion cards with ISDN BRI or ISDN PRI interfaces can also be equipped with powerful resource cards with digital modems This makes extremely high efficiency and high port or modem density possible The well proven BinTec Setup Tool for the router configuration interface and the Configuration Wizard for fast basic configuration ensure ergonomic and user friendly design The newly developed Man Machine Interface MMI from BinTec Communications A
379. using gt gt PPP This protocol is used for checking the WAN partner name and the password defined for the WAN partner If the partner name and password at both ends are not the same a connection is not set up The user name and password are encoded in CHAP before they are sent to the partner as opposed to gt gt PAP Calling Line Identification A security mechanism during the establishment of a connection with a gt gt WAN partner A caller is identified by means of his ISDN extension number before the connection is established If the extension number is not the same as the extension number you have defined for a WAN partner a connection is not established A client uses the services provided by a gt server Clients are usually workstations A process for reducing the amount of data transmitted This enables higher throughput to be achieved in the same transmission time Examples of this technique include gt gt STAC gt gt VJHC and gt gt MPPC A self contained 9 data packet that is forwarded in the network with minimum protocol overhead and without an acknowledgement mechanism A data packet is used for information transfer Each data packet contains a prescribed number of characters information and control characters X4000 User s Guide ssmms 471 EE Glossary 472 DCE D channel DCN Dialup connection Direct dialing range DHCP DIME DNS Domain Data Circuit Terminating Equipment
380. vailable modem for an incoming dial in connection X4000 User s Guide samme 295 9 Configuration of Expansion and Resource Cards with the Setup Tool 296 WAN incoming analog call allocate a free modem select modem profile preset receiving modem using selected profile negotiate connection with dial in partner Profile 1 Default Profile Profile 2 V 90 Modem Caller Profile 3 V 34 Modem Caller Figure 9 2 Dial in to X4000 with digital modems The modems e g 30 modems with an XTR L resource card need not be individually configured as X4000 uses a flexible concept of modem profiles Up to eight modem profiles can be configured for X4000 in the menu MODEM PROFILE CONFIGURATION the modem actually used then dynamically assumes the settings of the appropriate modem profile on connection setup A modem profile defines the modem settings that are required for a connection to the opposite terminal e g automatic baud rate negotiation compression and maximum or minimum baud rate Creating several modem profiles gives you a tuning facility if you do not want to use just the default settings X4000 User s Guide Resource Card with Digital Modems 9 When defining the settings for Incoming Call Answering e g in menu CM 3BRl ISDN SO UNITO INCOMING CALL ANSWERING for the first ISDN BRI interface of a BRI expansion card see Incoming Call Answering page 285 you can expl
381. vista en X4000 a fin de evitar da os en X4000 y en el m dulo de display Al instalar los cables preste atenci n a no cubrir las rendijas de ventilaci n del aparato para no impedir la ventilaci n Si la ventilaci n de X4000 resul tase afectada podr an ocasionar da os en el aparato Los da os produci dos a causa de una ventilaci n insuficiente conllevan la p rdida de ga rant a No abra el aparato base ni manipule de ning n modo el bloque de alimen taci n ya que en caso contrario se corre peligro de muerte por electrocu ci n No retire ninguno de los tornillos de fijaci n del aparato base Si el aparato proviene de un ambiente fr o al introducirlo en el local de trabajo se puede producir deshielo tanto en su exterior como en su interior X4000 User s Guide Utilizaci n prevista servicio Por ello antes de ponerlo en funcionamiento espere a que su temperatura se haya igualado y a que est totalmente seco Preste atenci n a las condiciones medioambientales expuestas en el apartado de Datos T cnicos Asegurese de que la tensi n de la red local coincida con las tensiones no minales del bloque de alimentaci n El aparato puede funcionar bajo las si guientes condiciones 100 240 VCA 50 60Hz Asegurese de que no quede obstaculizado el acceso a la caja de enchufe con puesta a tierra de la instalaci n Para desconectar totalmente el apa rato de la red es necesario desenchufar el enchufe de la red
382. warii urz dzenia Uszkodzenia wynikaj ce z niedostatecznej wentylacji mog wi za si z utrat reklamacji X4000 User s Guide Zgodne z przeznaczeniem stosowanie eksploatacja Otwieranie urz dzenia g wnego i dokonywanie manipulacji w cz ci przewodowej jest niedozwolone i grozi miertelnym pora eniem pr dem Zabronione jest odkrecanie rub mocuj cych z urz dzenia g wnego W momencie przemieszczenia urz dzenia z zimnego otoczenia do pomieszczenia eksploatacyjnego mo e wyst pi pokrycie par zar wno cz ci zewn trznych jak i wewn trznych Nale y odczeka a urz dzenie przejmie now temperatur i ca kowicie wyschnie dopiero wtedy mo liwa jest jego eksploatacja Nale y przestrzega warunk w rodowiskowych opisanych w danych technicznych urz dzenia Konieczne jest sprawdzenie zgodno ci napi cia sieci zasilaj cej z napi ciem znamionowym zasilacza pr dowego Urz dzenie mo e by eksploatowane pod nast puj cymi warunkami 100 240 VAC 50 60 Hz Nale y upewni si czy gniazdko kontaktu bezpiecze stwa instalacji elektrycznej jest tatwo dost pne Aby przerwa w pe ni zasilanie pr dem wtyczka musi by wyci gni ta z gniazdka Przy przy czaniu przewod w nale y przestrzega kolejno ci opisanej w instrukcji obstugi Nale y u ywa tylko takich kabli kt rych specyfikacje odpowiadaj danym z niniejszej instrukcji obstugi lub te s dostarczone wraz z urz dzeniem W p
383. which you will need for the installation of X4000 E Basic unit chapter 3 1 page 36 X4000 as desktop unit chapter 3 1 1 page 37 or 19 inch built in unit chapter 3 1 2 page 40 Display and Input Keys page 37 Installing in a 19 inch cabinet page 40 Removal from 19 inch cabinet page 44 E Expansion and resource cards chapter 3 2 page 53 Design of expansion cards chapter 3 2 1 page 53 Installation and replacement of expansion card chapter 3 2 2 page 55 E Setting up and connecting X4000 chapter 3 3 page 59 Connecting X4000 to PC or terminal page 60 Connecting X4000 to LAN page 60 Connecting X4000 to WAN page 60 Connecting X4000 to power supply page 61 Connecting the Expansion card page 61 Activating the Real time clock page 61 HM Status messages by LEDs chapter 3 4 page 63 Basic unit chapter 3 4 1 page 63 Expansion cards chapter 3 4 2 page 64 E Boot sequence chapter 3 5 page 66 X4000 User s Guide m m 35 ER Hardware Description and Installation 3 1 Basic Unit BinTec Communications AG offers you X4000 in two variants E Desktop unit for setting up in the office E Built in unit for 19 inch cabinet The X4000 basic unit is not fitted with an expansion card in the ex works state The expansion slot provided for the expansion card at the rear of the equipment is closed by a dummy cover This dummy cover is unscrewed when the expans
384. width on Demand feature see chapter 8 2 3 page 201 If you use this facility a dialup connection is set up to the connection partner if the leased line fails ummm X4000 Users Guide Configuring WAN Interfaces ADSL Security risks and restrictions ML oo 7 2 8 Configuring the LAN Interface for Using ADSL PPP over Ethernet To be able to use ADSL Asymmetric Digital Subscriber Line with X4000 you must configure a PPP over Ethernet interface over the LAN interface This is done by connecting X4000 to T DSL which is the ADSL connection of Deutsche Telekom AG If you use the ADSL connection of another provider ask the provider about any special features of your ADSL connection that need to be observed The T DSL package is currently offered by Deutsche Telekom AG as high speed access to the Internet It consists of an ISDN connection and a data line with a bandwidth of up to 768 kbps from the Internet Service Provider to the customer downstream and 128 kbps in the upstream direction The following restrictions and security risks exist as the X4000 connection to T DSL is established only over one Ethernet interface E if PPP over Ethernet is operated with only one Ethernet interface there is a risk of unauthorized accesses from the Internet to the local X4000 LAN Such unauthorized accesses can originate from the first node of the Internet E Users of the local network can configure a PPP over Ethernet client on thei
385. wing MIB tables or variables only incoming calls with the corresponding screening indicator are accepted gt For incoming PPP connections Screening variable in biboDialTable For incoming ISDN Login connections Screening variable in isdnloginAllowTable 10 2 3 Authentication of PPP Connections with PAP CHAP or MS CHAP gt gt PAP gt gt CHAP and MS CHAP are the common procedures used for authentication of gt gt PPP connections These use a standard procedure to exchange a user ID and a password for checking the identity of the far end You can find further information in chapter 7 3 page 159 and chapter 8 1 3 page 194 10 2 4 Callback The callback mechanism can be used for each WAN partner to obtain additional security regarding the connection partner or to clearly allocate the costs of connections A connection is then not set up until the calling party has been X4000 User s Guide samme 327 10 Configuration of Security Functions and Firewall clearly identified by calling back X4000 can answer an incoming call with a callback or dial into a WAN partner and then wait for a callback Identification can be based on the calling party number or PAP CHAP MS CHAP authentication Identification is made in the first case without call acceptance as the calling party number is transferred over the ISDN D channel and in the second case with call acceptance You can find a detailed description of the callback mechani
386. work to the outside world with just one IP address Table9 8 IP WM NAT Select Network Address Translation on Press SAVE 294 mmmmm X4000 Users Guide Resource Card with Digital Modems 9 0odED 9 4 Resource Card with Digital Modems ISDN BRI and ISDN PRI G 703 expansion cards see chapter 9 1 page 278 and chapter 9 2 page 281 can also be equipped with resource cards with digital modems Resource cards with digital modems are available in various versions E XTR S resource card with 8 digital modems E XTR M resource card with 12 digital modems E XTR L resource card with 30 digital modems If your X4000 is equipped with resource card s with digital modems for analog data and fax connections it can be used as E Remote Access Server for ISDN and GSM connections and for analog connections dial in E fax gateway please observe future software releases and release notes If you are using an expansion card with resource card s in the X4000 built in unit BinTec Communications AG recommends that you use the fan unit obtainable as optional equipment 9 4 1 X4000 with Digital Modems as Remote Access Server X4000 equipped with digital modems can be used for dial in connections e g by home office staff with analog modems or by field service staff with laptop mobile phone and modem X4000 uses the digital modems of the resource card s as a modem pool and always dynamically takes the next a
387. xample X Enter isdnlogin 1234 telephony to establish a connection to the telephone in your local office with the number 1234 If a connection is made the telephone will ring trace The trace command can be used to display and interpret data packets sent or received over ISDN D and B channels and over the LAN An explanation of the syntax can be found in chapter 14 1 page 412 Examples 9 Entertrace ip next to display data packets that are to run over the next B channel to be opened gt Entertrace x s me d 0 a0 f9 d 5 a 0 0 1 to output data packets sent from X4000 s MAC address over the LAN to the host with the MAC address 0 a0 f9 d 5 a 12 1 3 External Aids You can analyze connections to X4000 using the following utility programs on a Windows PC or Unix workstation X4000 User s Guide snsamma 377 12 Troubleshooting DIME Tracer Windows The DIME Tracer enables you to trace X4000 s ISDN and CAPI data traffic from a Windows PC DIME Tracer is a part of DIME Tools A detailed explanation can be found in BRICKware for Windows bricktrace Unix The bricktrace program enables data sent over X4000 s ISDN channels to be inspected at a Unix workstation bricktrace is part of BRICKtools for UNIX on your BinTec Companion CD A detailed explanation can be found in chapter 14 2 page 419 378 msmmmm X4000 Users Guide Typical Errors and Procedure 12 12 2 Typical Errors and Procedure A compilation of typic
388. xample configuration for the settings in the Setup Tool The LAN connection is handled over the LAN interface of X4000 s basic unit The ADSL modem is connected to one of the LAN interfaces of the expansion card If you receive a special cable from Deutsche Telekom AG or another provider for connecting the ADSL modem use only this cable od LAN interface LAN interface basic unit expansion card a gt fener ADSL Your X4000 ADSL modem 192 168 1 254 192 168 1 1 192 168 1 2 192 168 1 3 Your local network Figure 9 1 Example scenario IP address Proceed as follows to define the IP address of X4000 configuration gt Goto CM 100BT FAST ETHERNET gt Enter your IP address in the Local IP Number field e g 192 168 1 254 X4000 User s Guide mm m 289 Ba Configuration of Expansion and Resource Cards with the Setup Tool gt Enter your netmask in the Local Netmask field e g 255 255 255 0 This address should be the default gateway for the hosts in your LAN gt Press SAVE General PPP The general PPP settings are configured in PPP settings Here you must configure an interface on which PPP over Ethernet is to run You can leave all the other settings at the default value gt Goto PPP The following field is relevant PPPoE Ethernet Defines the interface used for ADSL Interface Table 9 2 PPP Proceed as follows to define the necessary PPP settings gt Select your PPPo
389. y Static entries are not deleted Maximum Number of DNS Records cannot be set lower than the current number of existing static entries If Maximum Number of DNS Records corresponds to the number of static entries no further dynamic entries are possible Maximum TTL for Pos Is assigned to a positive dynamic entry in the Cache Entries cache as TTL if the field of the DNS record has the value 0 or exceeds Maximum TTL for Pos Cache Entries Maximum TTL for Neg Is assigned as TTL to a negative dynamic entry Cache Entries in the cache Table 8 44 IP B DNS ADVANCED SETTINGS X4000 User s Guide sssa 259 B Advanced Configuration of the Basic Unit with the Setup Tool IP DNS GLOBAL STATISTICS contains the following fields the menu is updated every second Received DNS Packets Displays the number of received DNS packets including the answer packets for forwarded requests Invalid DNS Packets Displays the number of invalid DNS packets received DNS Requests Displays the number of correct DNS requests received Cache Hits Displays the number of requests that could be answered with static or dynamic entries from the cache Forwarded Requests Displays the number of requests forwarded to other name servers Cache Hitrate Displays the number of Cache Hits per DNS Request in Successfully Answered Displays the number of successful requests Queries positive and negat
390. y Monitoring as per RFC 1989 Possible values B off B on Table 7 18 WAN PARTNER ADD PPP 168 sasmmm X4000 Users Guide Configuring WAN Partners The Authentication field contains the following selection options PAP Only run gt PAP PPP Password Authentication Protocol the password is transferred uncoded CHAP Only run gt gt CHAP PPP Challenge Handshake Authentication Protocol as per RFC 1994 the password is transferred coded CHAP PAP Run primarily CHAP otherwise PAP MS CHAP Only run MS CHAP MS Challenge Handshake Authentication Protocol CHAP PAP MS Primarily run CHAP on denial the CHAP authentication protocol required by the WAN partner MS CHAP V2 Run MS CHAP version 2 only none Run no PPP authentication protocol Table 7 19 Authentication Todo Make the following entries gt Select Authentication e g CHAP gt Enter Partner PPP ID e g Littleindian gt Enter Local PPP ID e g BigBoss Sly How to enter the passwords is described in Changing the password page 85 Enter PPP Password e g Secret gt Select Keepalives e g off gt Select Link Quality Monitoring e g off X4000 User s Guide sss 169 Basic Configuration of Basic Unit with Setup Tool 170 Setting short hold Static Dynamic Confirm with OK You have returned to WAN PARTNER ADD In some cases the caller cannot be identified w
391. y application dependent bandwidth management Bandwidth on Demand BOD for IP based applications Both Bandwidth on Demand and BOD for IP based applications uses the Bandwidth Allocation Control Protocol BACP BAP to RFC 2125 in order to agree with the remote terminal on the circumstances under which B channels are to be added or dropped The use of BACP BAP is agreed during the initial connection setup As the D channel connection is normally no longer X4000 User s Guide samme 207 8 Advanced Configuration of the Basic Unit with the Setup Tool 208 ended after connection setup it represents a permanently available always on connection to the provider As soon as the bandwidth of the D channel is no longer adequate for data transmission B channels are added and data transmission takes place exclusively in the B channels Dynamic ISDN This is implemented in X4000 by an advanced configuration option in the IP subsystem An interface is assigned filters rules and rule chains similar to the concept for IP Access Lists see User s Guide chapter 9 2 8 Filters Access Lists These rules can be used to determine whether additional B channels are to be set up for certain protocols ports or IP addresses or whether data transfer is to take place exclusively in the D channel How is AO DI Configured The following steps are necessary for configuring X4000 for AO DI M Carry out X 31 configuration i e reserve the TEI Terminal Endpoi
392. y connect the LAN interface of X4000 to the LAN interface of the hub and the ISDN interface of X4000 to the ISDN connection Make the connections in the following order Place X4000 on a firm level surface 9 Connect the serial port of your PC COM1 or COM2 to the console interface of your X4000 Use only the serial cable supplied with the equipment You only need to connect X4000 to the console interface no 4 see Figure 3 18 page 59 if you want to carry out your initial configuration serially via the console port e g with the Configuration Wizard cf chapter 6 page 109 No serial connection is necessary if you only want to quickly assign X4000 the IP address and netmask You can assign the IP address quickly and easily using the input keys and the display cf chapter 5 page 93 gt Connect the LAN interface no 5 see Figure 3 18 page 59 of X4000 to your hub Use only LAN cables suitable for CAT5 A poorer quality cable can cause malfunctions of X4000 If you want to use the ISDN BRI interface in your applications scenario gt Connect the ISDN BRI interface no 6 see Figure 3 18 page 59 of X4000 to your ISDN connection using the cable RJ 45 supplied with the equipment If you want to use the X 21 V 35 V 36 or X 21bis interface s in your application scenario 9 Connect the X 21 V 35 V 36 or X 21bis no 8 or no 9 Figure 3 18 page 59 of X4000 to your connection via a cable not supplied with the eq
393. your license proceed as follows gt Adda new entry with ADD Another menu window opens Enter Serial Number Mask and Key as shown on your license card Press SAVE You have returned to the LICENSES menu The subsystems activated by your license data are now listed The license entered is displayed with the state ok 122 mmmmm X4000 Users Guide Basic Router Settings e ec System name If not ok is shown as the state you have probably made a typing error Try again 7 1 2 Entering System Data Now you should enter the basic system data for your X4000 gt Go to SYSTEM X4000 Setup Tool BinTec Communications AG SYSTEM Change System Parameters MyRouter System Name MyRouter Local PPP ID default BigBoss Location 3rd floor Contact admin BigBoss com Syslog Output on Serial Console no Message Level for the Syslog Table info Maximum Number of Syslog Entries 20 External Activity Monitor gt External System Logging gt Keepalive Monitoring gt Password Settings gt Time and Date gt SAVE CANCEL Enter string max length 34 chars X4000 User s Guide samen 123 Basic Configuration of Basic Unit with Setup Tool The following parts of the menu are relevant for this configuration step System Name Defines the system name of X4000 is also used as PPP host name Appears as input prompt when logging in to X4000 If no system name is set a warning appears on logging i

X4000 User's Guide

Contents

Download Pdf Manuals

Related Search

Related Contents