Home

Perle Systems PERLE P850 User's Manual

1. DESTINATION DESTINATION HOST SOURCENETWORK 36 37 38 39 40 4l 42 43 1 1 1 1 1 L SOURCE SOURCEHOST SOURCE NOVELL SPX HEADER 44 45 46 47 48 49 50 51 52 53 54 55 Connection Datastream SOURCE DESTINATION SEQUENCE ACKNOWLEDGE ALLOCATION Control Type CONNECTION ID CONNECTIONID NUMBER NUMBER NUMBER NOVELL DATA FIELD AND ETHERNET CHECKSUM 56 57 58 59 60 61 62 w x Y 2 DATA FIELD UP TO 534OCTETS OF DATA ETHERNET CHECKSUM 71 Octet Locations on Ethernet Frames ETHERNET Type Codes Type Code Description 0801 X 75 Internet ARP sot DECMOPDumpload 6x2 DECMOPRemoteConsie soos DECDECNET Phase IV Route o DEC Diagnostic Protocol DEC Customer Protocol Cavers ARP DECLAN Traffic Monitor eors AppleTalk AARP Kinetics suc 72 Octet Locations on Ethernet Frames Octet Locations on an IP Routed TCP IP Frame INTERNET PROTOCOL 0 1 2 3 4 5 6 7 8 9 10 11 Type of T a Wy FRAGMENT TIMETO T HEADER veR HL GEO TOTALLENGTH IDENTIFICATION MVE PROTOCOL CHECKSUM 12 13 14 15 16 7 18 19 L L L i li SOURCE ADDRESS DESTINATION ADDRESS TRANSPORT CONTROL PROTOCOL 20 21 22 23 24 25 26 27 28 29 30 31 L L L SOURCE PORT PESEDUION SEQUENCE NUMBER ACKNOWLEDGEMENT NUMBER 32 33 34 35 36 37 38 39 40 41 42 43
2. Frame Relay disable Location Main Configuration WAN Set up V Link Set up i Frame Relay disabled The router will request confirmation of the change enter yes Quick Start PPP Leased Line Connections The PPP Leased Line P850 requires only a few configuration parameters to establish a direct connection to another PPP IP router Once the connection is established and is working properly the P850 should be configured with a remote site profile entry for that vendors router Before the P850 can establish a link connection to another PPP router the link speed information must be defined Refer to the following diagram that shows an P850 unit and another vendors unit connected together with a direct leased line connection PPP IP Router 25 Applications Figure 2 2 Basic PPP Leased Line Configuration The following steps must be performed on the P850 unit Link Speed Location Main Configuration WAN Set up V Link Set up Link Speed The clock speed that the P850 will expect to receive from the DCE link device must be defined Local IP Address Location Main Configuration LAN Set up LAN IP Set up V P A ddress Subnet mask size This is the IP address and subnet mask for the link of this P850 in the unnumbered IP connection 26 Applications Bridge Connection Once the link speeds have been configured the P850 will attempt to establish the link connection to the
3. GES Reserves WINDOW CHECKSUM URGENIPOINIER DATA FIELD 44 45 46 47 48 49 50 wW x Y Z DATA FIELD NEXT 500 OCTETS ETHERNET CHECKSUM Octet Locations on an IPX Routed N ovell Netware Frame NOVELLIPX HEADER 0 1 2 3 4 5 6 7 8 9 Checksum LENGTH Transport PACKET DESTINATION NETWORK 10 11 12 13 14 15 16 17 18 19 20 21 L 1 1 DESTINATION HOST DES SOURCE NETWORK 22 23 24 25 26 27 28 29 i y SOURCE SOURCE HOST SOURCE NOVELL SPX HEADER 30 31 32 33 34 35 36 37 38 39 40 41 1 L 1 1 L Connection Datastream SOURCE DESTINATION SEQUENCE ACKNOWLEDGE ALLOCATION Control Type CONNECTIONID CONNECTION ID NUMBER NUMBER NUMBER NOVELLDATA FIELD ANDETHERNET CHECKSUM 42 43 44 45 46 4 48 w x Y 2 I f 1 DATA FIELD UP TO 534 OCTETS OF DATA ETHERNET CHECKSUM 73 Octet Locations on Ethernet Frames Octet Locations on a Bridged XNS Frame LEVEL 2 ETHERNET 1 2 3 4 5 6 8 9 10 n 12 13 1 1 1 1 1 1 1 1 1 ETHERNET DESTINATION ADDRESS ETHERNET SOURCE ADDRESS TYPE CODE o INTERNET PACKET 15 16 17 18 19 20 21 22 23 1 CHECKSUM LENGTH Transport DESTINATION NETWORK Control pe 24 25 26 27 28 29 30 31 32 33 34 35 1 1 1 1 1 1 1 1 DESTINATION HOST SOURCE NETWORK 36 37 38 39 40 4l 42 43 46 Ww x X 2 1 1 1 1 1 1 1 1 1 1 1 SOU
4. NOTICE The Canadian Department of Communications label identifies certified equipment This certification means that the equipment meets certain telecommunications network protective operational and safety requirements The Department does not guarantee the equipment will operate to the user s satisfaction Before instaling this equipment users should ensure that it is permissible to be connected to the facilities of the local telecommunication company The equipment must also be installed using an acceptable method of connection The customer should be aware that compliance with the above conditions may not prevent degradation of service in some situations Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by the supplier Any repairs or alteration made by the user to this equipment or equipment malfunctions may give the telecommunications company cause to request the user to disconnect the equipment Users should ensure for their own protection that the electrical ground connections of the power utility telephone lines and internal metallic water pipe system if present are connected together This precaution may be particularly important in rural areas CAUTION Users should not attempt to make such connections themselves but should contact the appropriate electric inspection authority or electrician as appropriate Using This Manual This Installation and Applications G u
5. 5 Show Permanent Table Source port 6 Clear Bridging Table 5 Show Pore Destination port Description 79 Entry direction Ip Routing Set Up 2 IP Routes 1 ARP Set Up e T Edi Static Route Edit Static Route aging timer S IP routing p 2 Default Gateway Ti Desinaion 2 ARP retry timer 4 IP forwarding 3 Show all Routes 2 Status 23 Add 5 ARP proxy 1 4 Show Static Routes Remote site E WAP table 5 Clear Static Routes Next hop 3 Type 14 Cost 5 Private 26 Add Remove 7 1 17 Network mask IPX Routing Set Up 8 Status 2 Static Routes Static Services 1 Static Routes menu 1 2 Static Services menu Edit Route 1 Edi Service Edit Service 13 IPX Routing Convert Route mcm 2 Convert Service 14 IPX Forwarding de E 2 NAME 3 Show Static Services Sia 4 4 Clear Static Routes j 5 Local Networks 3 Interface 4 Clear Static Services amp Server Name 6 Show Routes Hoy Interface 7 Show Services 25 Tic Network 18 Help 18 Node E Sockel 8 Hops 8 1 FilterSet up IP MAC Address a 31 IP Router Pattern 7 Router Pattern ters lers Filters 21 MAC Address Filters 1 Edit MAC Address Filter Show Alias Show Alias 11 Show Alias Add Alias 13 Remove Alias Show Pattern Add Pattern 16 Remove Patten Help 6 Remove Pattern 7 Help 5 Queue Limit Set Up 4 High Medium Normal Low Li
6. Note If the module is being changed from one type of service to another you must first select none before a new selection may be chosen Also the link must be toggled through a disable enable cycle before the change is brought into effect 10 Installation Setting the T1 E1Parameters T1 E1 WAN only The parameters requred for a T1 or E1 connection may be obtained from your service provider These may then be entered via the T1 E1 set up menu to configure the router for that service E1 Selection Location Main Configuration WAN Set Up V Link Set Up T1 E1 Set Up Link mode TlorE1 Set the service mode to which this P850 router will be connected Service parameters Location Main Configuration WAN Set Up V Link Set Up v T1 E1 Set Up Speed Channel rate 56 64 kbps T1 E1framing framed unframed SF E SF Line encoding AMI INV AMIJ B8Z5S H D B3 Select the service channel speed framing format and encoding as designated by the service provider T1 service requires the specification of a Line Build Out factor This parameter modifies the transmitted signal to compensate for degradation due to line losses between the transmitter and receiver A number of different options are available to meet standards for T1 long haul direct connection to service providers central office facility T1 short haul connection through a local PBX AT amp T TR64211 specification long haul and
7. Perle P850 Bridge Router USER AND SYSTEM ADMINISTRATION GUIDE Part number 5500086 14 Copyright 2002 Perle Systems Ltd Federal Communications Commission FCC Note This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manua may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense Warning The user is cautioned that modifications to this equipment can void the authority granted by the FCC to operate the equipment 1 This equipment complies with Part 68 of the FCC rules On the bottom of this equipment is a label that contains among other information the FCC registration number and ringer equivalence number REN for this equipment If requested this information must be provided to the telephone company 2 Applicable USOC jack required RJ49C 3 If the terminal equipment P850 router causes harm to the telephone network the telephone company will notify you in advance that temporary disco
8. The second method of filtering is pattern filtering where each frame is checked against a filter pattern The filter pattern may be defined to perform a check of any portion of the Ethernet frame Separate filter patterns may be defined for bridged frames IP routed frames and IPX routed frames For more information on filtering please refer to the Programmable Filtering section of the P850 reference manual file The PDF file is located on the accompanying CD RO M MAC Address Filtering MAC address filtering is provided by three built in functions The first function is Filter if Source the second is Filter if Destination The third function allows you to change the filter operation from positive to negative The positive filter operation causes frames with the specified MAC addresses to be filtered The negative filter operation causes frames with the specified MAC addresses to be forwarded You may easily prevent any station on one segment from accessing a specific resource on the other segment for this positive filtering and the use of Filter if Destination would be appropriate If you want to disallow a specific station from accessing any service Filter if Source could be used 61 Introduction to Filtering You may easily prevent stations on one segment from accessing all but a specific resource on the other segment for this negative filtering and the use of Forward if Destination would be appropriate I
9. Transmitted Data Request To Send Data Set Ready Data Set Ready Request To Send DB25 MALE DTE Ready Received Line Signal Detector CD 8 Signal Ground Signal Ground 7 Received Line Signal Detector CD DTE Ready 20 15 Transmit Timing DCE Source Receiver Timing DCE Source 17 17 Receiver Timing DCE Source Transmit Timing DCE Source 45 24 Transmit Timing DTE Source Transmit Timing DTE Source 24 Figure C 12 RS232 V 24 Null Modem Cable The connecting cable must be a shielded cable This cable is needed when it is necessary to connect two units back to back and a set of modems is not available Note that this cable specifies D B25 connectors on each end to allow direct connection to the link interface connector on each unit The link speed must be defined for each of the two units 90 Servicing Information RS530 RS422 Null Modem Cable DB25 MALE DB25 MALE 1 Shield Shield 1 2 Transmitted Data A Received Data 3 14 Transmitted Data B Received Data B 16 3 Received Data A Transmitted Data A 2 16 Received Data B Transmitted Data B 14 4 Request To Send A DCE Ready A 6 19 Request To Send B DCE Ready B 22 5 Clear To Send A Clear To Send A 5 6 DCE Ready A Request To Send 4 22 DCE Ready B Request To Send B 19 20 DTE Ready A Received Line Signal Detector 8 23 DTE Ready B Received Line Signal Detector B 1
10. 9 1 Priority Queuing 21 Edit List Edit Priority List Edit Priority List List 12 Show Priority List 3 Remove Priority List p 4 Show E 5 Clear Statistics A Remove Item 4 Default Priority 5 Queue Limit Setup Remote Site Information 1 Common protocol stats 2 PPP statistics 1 Statistics Set Up Extended Statistics Interval Clear All Statistics Statistics setup menu Remote site information men LAN statistics menu Link stats Link performance menu Link summary Interface stats Interface status Clear link amp interface stats Frame relay statistics 4 tatus E 5 Usage information a 6 Clear remote site stats 2 1 WAN Trace 6 Help 1 Acknowledge alarm 2 Show eveni 3 Clear events 4 Show security log 5 Clear security log 6 Show resumption log 7 Clear resumption log 69 3 Firewall Set Up Add Alias 23 Remove Alias Show Pattern Add Pattern 6 Remove Pattern WAN diagnostics 4 CSU DSU digital loopback 5 CSU DSU remote loopback 4 NAT Exports 519 1 SNMP set up menu Edt Community TT Server IP pool address menu 1 LAN firewall setup menu 12 Syslog IP 2 DHCP set up menu Message Size 2 DNS setup menu 2 WAN firewall setup menu 2 Router port i B 3 Show Communities 3 NetBIOS setup
11. se x Power rd p 9 S 10BaseT V 35 Universal Figure C 1Top Intemal View of the P850 router V 35 or Universal WAN interface 76 Servicing Information aN Sanity Timer Always ON Force ZMODEM SW Upgrade 3 Return Password to Default gt Y Power amp Q9 CSUDSU Sx 10BaseT 1 1 Figure 2 Internal View of the P850 CSU DSU orT1 E1 7 Servicing Information Sanity Timer Do not remove this strap pins 1 2 Force ZMODEM Software Load On the rare occasion that during the programming of the FLASH something happens to the bridge router power hit or hardware reset causing the FLASH to become corrupted the bridge router will restart in ZMODEM receive mode only If the bridge router does not start in ZMODEM receive mode perform the following steps power down the bridge router open the case remove the strap from the center set of pins 3 4 power up the bridge router The bridge router should now restart and bein ZMODEM receive mode 5 Re install the strap and replace the cover 1 H Please refer to Appendix E or the Menus Reference Manual for information on how to do software upgrades To Clear a Lost Password Remove power from the bridge router Remove the case cover Remove the jumper strap on pins 5 6 Re attach the power to the bridge router and wait for Power LED to go green Remove power
12. 35 Applications Define an IP Subnet Mask An IP network may be divided into smaller portions by a process called sub netting A subnet is specified using high end bits of the host field of the IP address for network addressing This is done with a subnet mask Thus the size of the subnet i e The number of bits available for subnet addressing is the size of the subnet mask minus the length of the network field of the IP address for that class 8 16 or 24 bits for classes A B and C respectively For example a small company is connected to the Internet they are assigned a single class C IP network address 199 169 100 0 This network address allows the company to define up to 255 host addresses within their network Their network will be attached to the Internet with an IP router If this company decides to split their network into two LANs to reduce the load on their network the original IP network address may be sub netted into two or more smaller IP networks consisting of a smaller number of host addresses in LAN This allows each of the sites to be a smaller IP network and to be routed together to allow inter network communication The P850 allows masks from 8 to 32 bits The mask size determines how many bits of the host field of the original IP network address will be used for the creation of subnets In this example a subnet mask size of 26 will produce a subnet size of 2 bits 24 bits from the class C network address field plu
13. Outbound An entry is made in the firewall table to allow the devices in the branch office to have unlimited TCP access to devices in the head office Firewall Table Entry Location Main Configuration Applications Set up V Firewall Set up LAN Firewall Set up Edit Firewall Entry filter ID 1 V Dest IP A ddress 195 100 1 0 V Destination Mask 255 255 255 0 X Source IP A ddress 195 100 2 0 V Source M ask 255 255 255 0 V Protocol TCP V entry direction outbound Finally holes are provided in the LAN firewall to allow Internet access to the FTP and WWW servers 53 Applications Firewall Location Main Configuration Applications Set up V Firewall Set up LAN Firewall Set up Designated Servers V FTP Server 195 100 1 12 WWW HTTP Sever 195 100 1 20 e The configuration options described here are only for initial s amp up and configuration purposes For more information on all of the configuration parameters available please refer to the P850 PPP Menus Reference Manual on the accompanying CD RO M 94 Applications Configure Remote Site Profiles for PPPoE Remote Site Profiles allow for the router to be configured to support PPP over Ethernet PPPoE client on the router The PPPoE feature on the Perle routers provide a PPPoE client support on Ethernet interfaces to a bridging DSL modem to the Internet This feature will create a PPP
14. accomplished by pressing the tab key The tab key takes you to the previous menu level If you wish to move from your current menu location directly to the main menu simply press the equals key When choosing menu options that will toggle between values simply pressing the number associated with that option will cause the options value to change Each successive selection of the option will cause the options value to change Some menu options require input from the operator When selecting an option that requires a value the menu system will display the range of values acceptable and a prompt symbol gt Simply enter the new value at the prompt symbol and press enter Should you make an error in entering the new value the BACK SPACE key for most terminals deletes the most recently entered characters 17 Applications Conventions Throughout this section P850 menu options are shown that are required for the various configuration choices The appropriate menu options are shown in each instance in the following format Configuration O ption N ame Location Main Sub Menu Name V Sub Menu Name Option N ame The configuration option is shown as well as the options location within the menu system The character indicates that a sub menu level must be chosen The option name is finally shown in italics The keyboard graphic in the left margin indicates that this is information that the user will have to enter f
15. as follows 1 gt 4 2 gt 5 5 gt 2 4 gt 1 Pins 1 and 2 are receive 1 ring 2 tip Pins 4 and 5 are transmit 4 ring 5 tip 81 Servicing Information UNIVERSAL WAN Module The Universal WAN Interface module in this router may be configured to operate in one of four modes V 11 X 21 V 35 RS232 V 24 or RS530 RS422 The interface connector for all types is a standard D B25 pin female connector WARNING ensure that the connector cable used with the Universal WAN interface module has the correct pinouts for the operational mode selected for the interface V 11 21 V 35 RS232 V 24 or RS530 RS422 Using the incorrect cable connector for the operational mode selected may cause permanent damage to the interface module Pinouts for each mode of operation are listed on the pages following 82 Servicing Information V 35 Link Pinouts 25 34 Direction Contact Contact Circuit To From No No Name DCE DCE 1 A ProtectveGround NA Perret a 3 Received Data A R LE estu E 0 Clear to send meses SipnadGrond SipnadGrond Data Channel Received Line Signal A Detector 9 X Receiver Sonal Element Timing X xe e eic 1i W X 12 aa Send Signal Element Timing X EN a 34 FX Ls ys srl ment ings 5 Received Data Received Signal Elem
16. from the bridge router Re install the jumper strap on pins 5 6 Install the case cover Power up the bridge router Log into the bridge router using the default password BRID GE and change the password as desired 1 gt CO Ne 1 2 rr wa 78 Servicing Information Connecting to the Console Connector The console connector on the P850 isa DCE interface on a RJ45 pinout The supplied D B9 to RJ45 converter should be used to connect to the DB9 connector of a DTE terminal This connection will then provide access to the built in menu system If the console interface is to be connected to a modem or other DCE device a standard RS 232 crossover converter should be used The following table illustrates the console pinouts RJ45 connector DB9 connector RS 232 on unit DCE on converter DCE signal name Console LAN 3 y Y 7 N MDI X MDI Figure Rear View of the Console and LAN Connectors 79 Servicing Information WAN Interface Connection Pinout Information The P850 router is manufactured with three different WAN link modules V 35 LXT411 CSU DSU or Universal WAN The type installed may be determined from the label above the WAN link output connector on the back of the router V 35 Module The V 35 link interface is provided as a DB25 connector on the back of the bridge router so an interface converter is needed to convert to t
17. gateway is an IP router that is resident on the local IP network that this P850 is connected to and is used to route IP frames for destination networks that do not exist in the routing tables When an IP frame is received that is destined for a network that is not listed in the routing tables of the P850 the P850 will send the IP frame to the default gateway If the device originating the IP frame is on the same local LAN as the P850 the P850 will then send an ICMP redirect message to the originating device Any future IP frames for that destination network will then be sent to the default gateway instead of the P850 A default gateway may be configured if there are a large number of routes that will pass through another router to a larger network An example of this would be a router that is used to connect to the Internet All of the P850s on the local LAN would have the Internet access router as the default gateway The 8505 would route information within the internal network and any IP frames that are destined for the Internet would be routed to the default gateway Default Gateway Location Main Configuration Application Set up DHCP Set up 4 D G ateway The IP address of the default gateway consists of 4 octets and is represented by 4 fields separated by periods where each field is specified by a decimal number e g 199 169 1 10 Each decimal number must be less than or equal to 255 that is the maximum v
18. is required for the PVC connection refer to the Configure PPP Security section for information on setting the security passwords and user names for PPP 23 Applications By default PPP is disabled for each of the newly created remote site profiles If PPP encapsulation is desired for example to use security the PPP encapsulation option should be set to enabled By default when PPP encapsulation is enabled multilink is also enabled PPP Encapsulation Location Main Configuration WAN Set Up Remote Site Set Up V Edit Remote Site Connection Set up V PPP enable The configuration options described here are only for initial set up and configuration purposes For more complete information on all of the configuration parameters available please refer to P850 PPP Menus R ference M anual file on the accompanying CD ROM 24 Applications Basic Leased Line Configuration P850s shipped outside North A merica are configured to have a default setting as a leased line router The P850 will operate as a PPP leased line bridge router if the frame relay function is disabled The Leased Line P850 establishes PPP Point to Point Protocol WAN connections to other PPP Leased Line P850 units or to other vendors PPP leased line routers via direct leased line connections Configuration T he default configuration for N orth A merican P850 is to have frame rday enabled T o run PPP leased line frame rday must be disabled
19. it will query the frame relay service to try to determine the LMI type Once the LMI type is determined the PVC configurations will be known from the full status enquiry messages If the DLCI numbers of the PVC s on your service are determined during this learning process the P850 will automatically create a remote site profile for each PVC The automatically created remote site profiles will be named LinkxDLClyyy where x is the physical link number the PVC is on and yyy is the DLCI of the PVC If during this learning process the maximum number of remote sites 40 has been reached the P850 will prompt you that there are no remote sites available A new remote site cannot be auto created unless one of the existing remote sites is manually deleted 21 Applications Manual Configuration LMI Type The LMI Type option allows you to manually specify the type of Link Management Interface in use by the Frame Relay service provider for the Frame Relay service When the LMI type is set to none the P850 simply creates frame relay packets and sends them on the defined PVC s The links are not checked for errors There is no congestion control checking The link is only monitored for control signals To manually configure the LMI type Auto Learning option must be disabled Auto Leaming Location Main Configuration WAN Set up Link Set up i Frame Relay Set up Auto learning enabled LMI Type Location Main Config
20. menu 4 2 3 Block src IP spoofing 3 Default export Events ee 4 Remove Community f4 DHCP services a 4 Show services 4 Security 5 E M raton I Car socos 6 Time to live Edit Community 7 Lease period 1 Designated servers menu 1 7 Ping TACUIT 8 Default Gateways 2 Edit firewall entry menu Edit Services 3 Firewall 12 Show Server IP address 4 Firewall statistics 1 Other Services menu 1 4 Remove Address address pool 5 Clear statistics E EL 7 Show address pool 6 Show firewall entries iB BOE 2 Add static address 7 Remove entry 5 WWW HTTP Remove static address 1 E Designated Servers 6 Telnet 2 9 7 DNS DNS Set Up Ena SNTE senar POP 2 3 server 11 Primary DNS FTP server Other Services x 2 Secondary DNS WWW HTTP server 1 3 Domain name Telnet Server port 3 Local DNS Term x NetBIOS Setup Remote DNS Host IP address 8 Secondary local DNS Host port Send NetBIOS node type 3 Secondary remote DNS Description 5 1 Send NetBIOS scope 2 m 6 Remove Bridging Set Up Spanning Tree 1 Seng NetBIOS pame srv Edit Firewall Entry 2 7 Dest IP address BEL Hec 15 Brage Prov NEIBIOS name server Destination mask 2 Bridge Forwarding 2 Bridge Priority Source IP address zm 3 Bridge Aging Timer 3 F orwarding Delay Source mask 3 SNMP 4 Show Bridging Table is Helle ty le Age Timer Protocol type
21. profile settings The IP address of the WAN link of the remote PPP router is defined as the Peer IP Address within the remote site profile settings The WAN IP network number is defined by defining a subnet size to use when defining the local IP address The size of the subnet will determine the IP network number used The IPX node address of the local WAN link is defined as the Local IPX Node within the remote site profile settings The IP address of the WAN link of the remote PPP router is defined as the Peer IPX N ode within the 43 Applications remote site profile settings The WAN IPX network number is defined with the IPX N et option in the remote site profile settings Unnumbered Links An unnumbered link does not use network addressing on the WAN link The WAN connection is roughly equivalent to an internal connection with each of the two end point routers operating as half of a complete router that is connected between the two endpoint LANs When an IPCP link is set to unnumbered the only configuration option applicable is Peer IP Address The peer IP address in this case is the IP address of the remote PPP router that is the IP address of its LAN connection If the peer IP address is not specified the P850 router will attempt to determine it when negotiating the IPCP connection When an IPXCP link is set to unnumbered no addressing configuration is required All of the IPX settings are negotiated during the IPXCP connectio
22. remote site PPP router The Bridge connection does not require any configuration for operation IP Router Connection Once the link speeds and local IP address have been configured the P850 will attempt to establish the link connection to the remote site PPP router The IP connection is an unnumbered connection that requires only the configuration of the IP address of the P850 IPX Router Connection Once the link speeds have been configured the P850 router will attempt to establish the link connection to the remote site PPP router The IPX connection is an unnumbered connection that does not require any configuration If security is required for the connection refer to the Configure PPP Security section for information on setting the security passwords and user names for PPP The configuration options described here are only for initial s amp up and configuration purposes For more comple information on all of the configuration parameters available please refer to the P850 PPP Menus Reference M anual file on the acompanying CD ROM 27 Applications Should You Bridge or Route When connecting two Local Area N etworks together the first question to ask is should I bridge or route The decision to bridge or to route may be decided by how the existing networks have been already set up Bridging should be used when the network consists of non routable protocols or routable protocols using the same network numbers Some
23. set to incoming outgoing both or none Once the direction of filtering for a connection has been set holes may be created in the firewall to allow specified traffic through Normally the LAN firewall is used for restricting intranet traffic connections within the corporate network and remote site firewalls are used to limit access from less trusted sources such as the Internet or dial up links Main FTP server 195 100 1 12 Main Web server 195 100 1 20 Corporate Head Office Network 195 100 1 0 Branch Office Network 195 100 2 0 Router with firewall enabled Any other network any IP address Figure 2 10 Sample Firewall Application The above diagram shows a corporate head office network which is connected to the Internet with P850 There is also a branch office at a remote site connected with a Digital Leased link The administrator at the corporate head office wishes to set up an IP firewall to allow everyone on the Internet to have access to the corporate FTP and Web servers and nothing else The administrator 51 Applications also wishes to allow all of the TCP traffic from the branch office network to have access to the head office Anyone in the corporation may have unrestricted access to the Internet The following steps must be performed on the P850 to set up the firewall support as desired First the firewall on the ISP connection remote site 1 of the WAN is set up The firewall o
24. up and configuration purposes For more information on all of the configuration parameters available please refer to P850 PPP Menus Reference Manual file on the acompanying CD RO M 40 Applications N ovell Servers in O ne Location O nly Some Novell LAN installations require that a remote LAN that consists of only Novell IPX clients be connected to a central LAN that contains the Novell servers and some more clients In this configuration the P850 located at the remote site must be configured with the appropriate IPX network numbers The IPX network number must be configured manually because there is no Novell server at the remote site The P850 router must act as a Novell server to supply the proper IPX network number to the clients on the remote site LAN In the following diagram the P850 connected to LAN 2 must be configured with IPX network number 1500 using the appropriate frame type The clients connected to LAN 2 must also be running with the same frame type as defined on the P850 After the P850s have established the WAN connection the IPX routing procedures will cause the names of the services located on LAN 1 to be stored in the services table on the P850 on LAN 2 When one of the clients on LAN 2 starts up it will look for a server on the local LAN and the P850 will respond with the list of servers that are located on the central LAN IPX Network Address WAN connection 1500 defined on router Novell IP
25. 0 7 Signal Ground Signal Ground 7 8 Received Line Signal Detector A DTE Ready A 20 10 Received Line Signal Detector B DTE Ready B 23 15 Transmit Timing A DCE Source Receiver Timing A DCE Source 17 12 Transmit Timing B DCE Source Receiver Timing B DCE Source 9 24 Transmit Timing Transmit Timing 11 Transmit Timing B DTE Source Transmit Timing 18 Local Loopback 21 Remote Loopback Remote Loopback 21 17 Receiver Timing A DCE Source Transmit Timing A DCE Source 15 9 Receiver Timing B DCE Source Transmit Timing B DCE Source 12 25 Test Mode Test Mode 25 Figure C 13 RS530 RS422 Null Modem Cable The connecting cable must be a shielded cable Circuits which are paired contain an A and B reference should be connected to twisted pairs within the connecting cable This cable is needed when it is necessary to connect two units back to back and a set of modems is not available Note that this cable specifies DB25 connectors on each end to allow direct connection to the link interface connector on each unit The link speed must be defined for each of the two units 91 Software Upgrades APPENDIX D SOFTWARE UPGRADES Procedures for performing a Console ZMODEM Flash Load to upgrade the operating software of the router 1 Savethe current configuration of the router Main menu option 6 2 Execute the Console Z MO D EM command from the Load FLASH Set Up menu 3 Confir
26. AT amp T TR64211 short haul Your service 11 Installation provider will tell you which specification their service requires Short haul LBOs are listed as the length of the cable run in feet between the router and the local exchange E1 service does not require line build out selection Set Link Interface Location Main Configuration WAN Set Up V Link Set Up T1 E1 Set Up LBO as spedfed T1 long haul LBO s LOdb L7 5db L15db L22 5db Short haul LBOs SOto110ft S110t0220ft S220t0330ft S330to440ft SA40to550ft S550to660ft AT amp T standard TR64211long haul connection TLOdb AT amp T standard TR64211 short haul connection T SOto110ft TS110to220ft TS220t0330ft TS330to440ft TS440to550ft TS550to660ft If fractional T1 E1 service is being provided you will need to specify the channels timeslots to be used Set Link Interface Location Main Configuration WAN Set Up V Link Set Up T1 E1 Set Up Slot Channel Set Up Start first channd Number number of channds 12 Installation Some E1 service providers reserve timeslot 16 for network management use If your service specifies that timeslot 16 is for their use toggle this option to reserved Set Link Interface T ype Location Main Configuration WAN Set Up V Link Set Up V T1 E1 Set Up Slot Channel Set Up V E1 Timeslot 16 reserved 13 Installation Identify the Status LEDs Th
27. LASH clear the configuration to default values except IP Address IP Routing state IP Forwarding state WAN Environment Link 1 amp 2 State Password and connection data for the remote site if applicable and then reset After the reset the remote sites information will have to be re entered either from a saved configuration file recommended or by manually reentering the information for each site The router may take up to two 2 minutes to program and verify the FLASH The console will not respond during this time To check on the router s current state during this process get the file status txt from the router This file will report the router s state both the mode and version if no errors have occurred or an error message On the rare occasion that during the programming of the FLASH something happens to the bridge router power hit or hardware reset causing the FLASH to become corrupted the bridge router will restart in ZMO D EM receive mode only If 94 Servicing Information the bridge router does not start in ZMODEM receive mode refer to Appendix D Servicing Information The TFTP Load Flash operation may be aborted by re connecting to the console of the router and choosing the Abort Load option from the Load FLASH Set Up menu This will cause the router to reset and return to normal operations operating from the existing software In the following diagram of a cluster of routers when upgrading the t
28. RCE HOST ETHERNET CHECKSUM SEQUENCED PACKET PROTOCOL 15 16 18 19 20 21 22 23 1 1 1 1 1 1 1 1 1 CHECKSUM LENGTH DESTINATION NETWORK 25 26 27 28 29 30 31 32 33 34 35 1 1 1 1 1 1 1 1 1 DESTINATION HOS SOURCE NETWORK 37 38 39 40 45 46 47 Li 1 1 1 1 1 1 Connection Datastream SOURCE SOURCE HOST Control Type CONNECTION ID 52 53 54 55 58 OO sia 1 1 1 1 1 1 1 ACKNOWLEDGE ALLOCATION DATA FIELD ETHERNET CHECKSUM 14 17 NUMBER NUMBER 74 APPENDIX SERVICING INFORMATION Opening of the case is only to be performed by qualified service personnel WARNING Before servicing ensure that appliance coupler is disconnected Always disconnect the power cord from the rear panel of the bridge router Geraetesteckvorrichtung trennen vor den Wartung O pening the case 1 Remove power from the bridge router and remove the other cabling 2 Tum the bridge router over and place it on a flat cushioned surface 3 Remove the two Phillips head screws that fasten the case together 4 Hold the two halves of the case together and tum the bridge router right side up 5 Liftoffthetop half of the case 75 Servicing Information Identifying the Internal Components The major components and the jumper strap positions are shown Sanity Timer Always ON Force ZMODEM SW Upgrade Return Password to Default
29. Set Up V Security Set Up SO utgoing Username ISP provided V5 Outgoing PAP password V ISP provided password V Outgoing CHAP password if required by ISP V ISP chap password 97 Applications To ensure that network traffic is routed to the PPPoE connection the router must be configured to have the default IP gateway setup to your newly created PPPoE remote site connection Location Main V Configuration SIP Routing Set up SG ateway VS PPPoE remote site alias 58 Applications QOS Priority Queuing Priority Queuing PQ allows the users to configure the router to allow specific traffic bound for an outgoing interface to be prioritized into high medium normal and low queues Packets sent to the high priority queue are serviced first followed by the packets on the medium queue and so on The router can configure outbound traffic to specific queues based upon protocol addresses and incoming interfaces To enable Priority Queuing you must configure a Priority list which contains the criteria items for the outbound packets Each packet will be compared to item 1 in the Priority List and then progress down the list of items in order until a match is found When a match is found the comparison search will stop and the packet will be given the priority configured for that item Thus more specific priority criteria should be defined at the beginning of the list To define item criteria within a Prior
30. X Client Novell Server Novell IPX Client Novell IPX Client Figure 2 8 IPX Routed Local Area N etworks Servers on one side The following steps must be performed on the P850 router connected to LAN 2 41 Applications IPX Frame Types Location Main Configuration V PX Routing Set up Configure LAN Nets E thernet I Frames RAW 802 3 Frames IEEE 802 2 Frames 802 2 SN A P Frames Define the appropriate IPX network number for the appropriate frame type Note that IPX network numbers must be unique If more than one frame type is to be used each frame type must have a unique IPX network number There must be no duplicate IPX network numbers within your entire IPX routed network they must all be unique The IPX network numbers may be any value from 0 to FFFFFFFF HEX Configuration Sino there is not a serve on LAN 2 in this example the IPX network number may be manually configured and the P850 router will proceed to route between the two n amp works When manually configuring an IPX ndwork number for a frame type that has already learned a network number IPX routing must be disabled before the new network number is assigned 4 Applications PPP Link Configuration Overview A PPP Point to Point Protocol connection between two routers may use a number of Network Control Protocols NCP for communication An IP router connection will use the Internet Protocol Control Protocol IPCP NCP for all IP co
31. ainst the defined IP router pattern filters IP routed frames are unaffected by the bridge pattern filters and the IPX router pattern filters NetBIOS over TCP NetBIOS over TCP 22 0089 NETBIOS Datagram Service 22 008A NETBIOS Session Service 22 008B Note Uses theTCP D estination Port location Other interesting TCP Ports Other interesting TCP Ports Decimal Hex use _ Ca s mm d m3 w Th _ 66 APPENDIX MENU TREES The menu trees on the next few facing pages are a graphical representation of the hierarchy of the built in menu system of the P850 The menus are shown with the options of the menus being displayed below the specific menu name Each of the menu options shown in the menu tree is explained in the accompanying P850 menu reference files The PDF files are located on the accompanying CD ROM Menu names are displayed in boxes The numbers on the left side of the boxes indicate the menu option from the parent menu that this menu corresponds to All menu options are listed with numbers indicating their actual position within the menu system 67 1 Configuration Teminal Set Up menu Device Set Up menu Telnet Set Up menu 14 Load FLASH Set Up menu Console Hardware Status 7 TFTP access Terminal 5 1 2 LAN Set Up T Bridge setup menu 2 IP setup menu IPX set up menu QOS setup wans usse 1 Physical link type 2 Link oper
32. al IP addresses for all PC workstation on your internal LAN Location Main V5 Configuration V WAN Set up V Remote Site Set Up Edit Remote Site V Protocol Set Up IP Set up V NAT enabled X enabled Access to some web pages is a common problem experienced when running a PPPoE client on a router By design PPPoE packets can support a maximum MTU of up 1492 bytes Normally when a connection is established over common PPP the TCP protocol negotiates its maximum data size using the mss option default 1460 By default most Windows PCs have their TCP mss option set to 1460 bytes Since PPPoE requires an additional 8 bytes of header data the 96 Applications TCP mss option should decrease to 1452 bytes Therefore when configuring the router for PPPoE the remote site NAT configuration automatically adjust its TCP mss option to 1452 to accommodate this requirement To verify this value has been adjusted Location Main V Configuration WAN Set Up V Remote Site Set up V Protocol Set Up Parameters V NAT Advanced Set up mss X enabled mss value 151452 Normally your ISP provider will provide you with an outgoing username and password and to authenticate with their services The PPPoE remote site configuration needs to have the security section configured with this ISP parameters to authenticate the PPPoE connection Location Main V Configuration WAN Set Up V Remote Site
33. alue of each 8 bit field A configured Default Gateway will override a default route learned from RIP Configuration The Default Gateway may be located across the WAN oonnadion 34 Applications Define an IP Static Route Static IP routes may be defined when one specific router is to be used to reach a destination IP network The static route will have precedence over all learned RIP routes even if the cost of the RIP learned routes is lower Edit Static Route Location Main Configuration V P Routing Set up IP Routes Edit Route Edit Static Route V Remote Site v Net Hop Cost A dd Each static IP route is defined in the Edit Route menu The destination network IP address is specified when you first enter the menu and then the IP address of the next hop route and the cost may be defined Once all of the static IP routes are defined they may be viewed with the Show Static Routes command from the IP Routes menu Configuration When the IP routing protool is set to none the subnet mask size must also be defined when creating a static route entry The subnet mask is required to allow a static route to be created to a different IP network address L The configuration options described here are only for initial s amp up and configuration purposes For more information on all of the configuration parameters available please refer to the P850 PPP Menus Reference Manual on the accompanying CD RO M
34. ation 3 Frame Relay 4 Frame Relay set up menu 5 Link Interface type T1 E1 setup menu 6 5 7 8 Bridge STP Set Up State Path cost Priority ink speed Link CD wait time Loop compensation Frame Relay Set Up Auto learning X LMI type 3 Polling interval Enquiry interval Error threshold 6 Monitored events 5 6 Slot Channel Set Up Link mode Idle code Number LBO T1 E1 framing gt Numi 14 Channel rate Speed E1CRC4 Slot Channel Set Up 7 Line encoding larm generation 1 403 PRIM Speed E1 timeslot 16 Status 1 Edit Remote Site menu 2 Remote site summar Cali summary 4 Remove remote site 5 Manual call 6 Force disconnect Connection setup menu Activation menu Protocol set up menu Security parameters menu Remote site alias Connection Primary connection Secondary connection 9 Remote site type 3 1 Security Set Up 1 Default parameters menu Security level 3 Request security 4 CHAP challenges 5 Caller ID security Default Parameters T Outgoing user name 2 Outgoing PAP password 3 Outgoing CHAP secret 4 PPP Set Up 1 1 Advanced PPP Set Up menu 2 Restart Timer 3 Configure Count 4 Failure Count 1 5 Terminate Count l Advanced PPP Set Up 1 Echo monitoring Quality protocol Quality interval MP encapsulation MP sequen d
35. be a shielded cable NOTE For U K Approval The connecting cable may be any length between 0 and 5M Each end must be terminated in a male 25 pin X 21 bis connector as defined in ISO 2110 1989 1 1 1 1 1 1 1 1 X 1 1 0 1 3 5 6 7 8 9 0 1 2 X 2 Em Em 5 6 E e e 10 EN 2 EN EN 5 16 EUM 18 19 2 2 2 2 2 5 85 Servicing Information RS530 RS422 Link Pinouts Direction Contact Circuit To From N umber Circuit N ame DCE DCE l Shield Protective Ground INA 2 me Tears E Received Data tenets 5 CB A Clatosnd MM MEM AB Signal Ground ETT TTE TD GNE RM ER 9 DD B Receive Signal Element Timing DCE Source X 10 CF B Received Line Signal D etector X 11 DA B Transmit Signal Element Timing DTE Source x 12 DB B Transmit Signal Element Timing DCE Source 13 CB B Clear to Send a i DB A Transmit Signal Element Timing DCE Source CSI CT E 0 17 DD Receive Signal Element Timing OCE Source X Local Loopback IX i X 20 coar omaremmat Remote Loopback S CD b DataTermina Ready K DA A Transmit Signal Element Ting OTE Source X ese Figure C 8 RS530 RS422 Link Pinouts The connecting cable must be a shielded cable Circuits which are pa
36. be set The number of addresses to be assigned must also be specified to a maximum of 253 With the DHCP Services and IP Address Pool defined devices may be attached to the network up to the maximum specified and they will be automatically configured W hen setting up a router as a DHCP server that will have both a e DNS server on the internal network and a remote connedion to another DNS server for example through an ISP then the local DNS server should be set as the primary DNS and the external DNS server as the secondary D N S DNS Set Up Location Main Configuration Application Set up DHCP set up DNS set up Primary DNS IP address local D NS server Secondary DNS IP addr extemal D NS server External o n LAGE C D Internet Service Provider y Local DNS Server Primary Figure 2 9 Local External DNS Server Configuration 46 Applications Configure N etwork Address Translation NAT Support is provided for Network Address Translation NAT Network Address Translation is a technique which translates private IP addresses on a private network to valid global IP addresses for access to the Internet Port translation NAPT allows more than one private IP address to be translated to the same global IP address Port translation allows data exchanges initiated from hosts with private IP addresses to be sent to the Internet via the router using a single global IP addre
37. e case Identifying the Internal Components Sanity Timer Force ZMOD EM Software Load To Clear a Lost Password Connecting to the Console Connector WAN Interface Connection Pinout Information V 35 Module CSU DSU Module T1 E1 Module UNIVERSAL WAN Module V 35 Link Pinouts 99 59 61 61 62 65 65 65 65 65 66 66 66 66 67 Contents RS232C V 24 Link Pinouts RS530 RS422 Link Pinouts V 11 X 21 Link Pinouts V 11 X 21 DB25 to DB15 Connector Cable V 35 Null Modem Cable Configuration The link speed must be defined for each of the two units RS232 V 24 Null Modem Cable RS530 RS422 Null Modem Cable APPENDIX D SOFTWARE UPGRADES 85 86 87 88 89 89 90 91 92 1 INSTALLATION The P850 is an Ethernet Bridge Router that provides bridging IP IPX routing and compression over a frame relay permanent virtual circuit or a PPP leased line circuit The following instructions provide a quick set up guide for installation of the P850 router Unpack the P850 Rough handling during shipment can damage electronic equipment As you unpack the router carefully check for signs of damage If damage is suspected contact the shipper Save the box and all packing material to protect the router should it ever need to be moved or returned for service Check the packing slip that identifies the components and the LAN connector The connectors on the rear of the router provide all external connections to t
38. e meanings of the four 3 colour Light Emitting Diodes LED s on the front of the P850 router are found in the following chart Green Green flashing Yellow Yellow flashing Router is in BOOT mode Power eo O OO Green LAN is connected and forwarding Red Routeris NOT connected to the LAN e ding ie Listening Green LINK is up idle _ Green LINKiupide Green flashing LINK is up transmitting data traffic LINK negotiating control signals asserted on link Red LINK isdown no control signals present Tx OOoOe e0O Green LINK is up idle Green flashing LINK is up receiving data traffic LINK negotiating control signals received from link Red LINK is down no control signals present Rx OOO _ 14 Installation Power LAN Figure 1 4 Front View of the P850 router 15 2 TYPICAL APPLICATIONS amp How TO CONFIGURE THEM The P850 is an Ethernet Bridge Router that supports frame relay RAW 1490 permanent virtual circuits frame relay encapsulated PPP permanent virtual circuits and PPP leased lines This section will describe how to set up the P850 using each of its networking functions The P850 may be configured as a simple Ethernet bridge an Ethernet IP router an Ethernet IPX router or a combination of the three When operating the P850 as a combination bridge router simply configures each of the components separately T he configuration op
39. e the router has been powered up on this console the display may be unreadable until the next step is performed Enter at least one RETURN up to three if necessary in order for the router to determine the baud rate of the terminal used for the console Le autobaud The following information will now be seen on the console connected to the router Terminals supported AMS ewe wom ewcilOS emil002 will i925 tvi950 vt52 vt100 wyse 50 wyse vp teletype Enter terminal type Select the terminal type being used if listed and enter its name in lower case at the prompt or choose the terminal type teletype if your terminal is not listed This terminal type operates in scroll mode and may be used successfully until a custom terminal definition is created Login and Enter the Required Configuration At the login screen type a 1 and the default password to enter the menu system of the P850 router The default password is BRIDGE case sensitive and should be changed if security is desired With the options of the built in menu system the P850 may be configured to operate within your environment Refer to the P850 PPP Menus Reference Manual file on the accompanying CD ROM for a complete description of all the Menu O ptions Installation Mandatory Configuration The P850 router requires a minimum amount of mandatory configuration in order to operate The following table identifies the configuration parameters that m
40. e will ignore the packet Ethernet bridges also communicate to each other using what is called the Spanning Tree Protocol STP STP is used to prevent loops in a network which cause LAN traffic to be re broadcast again and again causing network congestion The P850 is pre configured to operate as an Ethernet bridge compatible with the IEEE 802 1d Spanning Tree Protocol definitions This means that without configuration modifications the P850 will bridge Ethernet traffic to its partner bridges when the Wide Area Network WAN connection has been established 29 Applications The P850 router also is pre configured as an IPX router T his means that if you wish to bridge IPX traffic instead of routing it you must disable the IPX routing function of the P850 route Once IPX routing has been disabled all IPX traffic will be bridged betwen partner bridges on theWA The two Local Area Networks may be bridged together with minimal configuration required Simply connect the P850s to each of the LANs and connect the interface module to the supplied equipment from the service provider The WAN set up must be configured appropriately in order for the links to operate Once the WAN connection has been established to the remote partner P850 the P850 will proceed to bridge the LAN traffic between the two locations If SNMP or Telnet management is required for the P850 an IP address must be defined for each P850 The IP address allows
41. efault type of none Before the link can be used 6 Installation it must be configured to the type of connection service that will be used please see the following section for this procedure The V 35 module and Universal WAN module in V 35 mode require interface converters that convert from a D B25 connector to a male 34 pin V 35 connector used for the V 35 service interface Be sure to secure the cable connector to the router and the communications equipment with connector screws to prevent accidental disconnection The T1 E1 and LX411 CSU DSU interfaces connect with a standard RJ 45 RJ 48C specification for T1 E1 RJ 48S specification for CSU D SU connector After the P850 is powered up and the router has established communications with its partner across the WAN the Tx LED will turn green Installation Power Up the Router Once the LAN and Link connections are made and the console is connected to a terminal you are ready to power up the P850 router Connect the DC power cord from the supplied power supply to the back of the P850 router and plug the power supply into the AC wall outlet Observe the LEDs as the router powers up The LEDs will go through a flashing pattern as the power up diagnostics are performed After the power up diagnostics are finished the Power LED will go from red to green The console will also display testing and initialization messages as it performs these tasks if this is the first tim
42. en defining a pattern filter these frame displays indicate the offset values to use in order to define the pattern filter correctly Servicing Information provides information on opening the case and changing the straps Using the Electronic Reference Manual The P850 router Reference Manuals are provided as Adobe A crobat PDF files on the accompanying CD ROM The PPP Menus Reference File is provided individually for ease of configuration reference The Adobe Acrobat Reader program is included on the CD ROM It is also available for most computer operating platforms from Adobe on the Internet at www adobe com The Reference Manual provides the following information e Introduction to bridging routing and P850 features e Pin out references for the link modules e List of event and alarm logs e Expanded description of programmable filtering The P850 PPP Menus Reference Manual provides the following information e Complete description of the options for the built in menu system Contents 1 INSTALLATION Unpackthe P850 Select a Site Identify the Connectors Connect to the Console Make the LAN Connections Make the WAN Link Connection Power Up the Router Login and Enter the Required Configuration Mandatory Configuration Setting the Link Interface Type Universa WAN only Setting the T1 E1Parameters T1 E1WAN only Identify the Status LEDs 2 TYPICAL APPLICATIONS amp HOW TO CONFIGURE THEM Managing the P850 U
43. ent Timing A a ec IE SE soe els vee RET DsaTemmdRey x _ 21 N Remote Loopback _ E NUMEN RENE e NN EK GENE Numam ee ee 321 24 U TemindSignalElementTimig A X 25 NN _ X Figure C 6 V 35 Link Pin Outs The connecting cable must be a shielded cable 83 Servicing Information Circuits which are paired contain an A and B reference should be connected to twisted pairs within the connecting cable NOTE ForU K Approval The connecting cable may be any length between 0 and 5M One end must be terminated in a male 34 pin X 21 bis connector as defined in 150 2593 1984 The other end must be terminated in a male 25 pin X 21 bis connector as defined in ISO 2110 1989 84 Servicing Information RS232C V 24 Link Pinouts Con Circ Circuit Direction tact uit Name To From DCE DCE 1 Protective Ground NA 2 Transmitted D ata X 3 Received D ata X AA BA BB CA Request to Send X __ CC Data Set Ready X AB CF CD CE DA 7 Signal Ground NA Received Line Signal Detector CD X e 4 X Transmit Signal Element Timing D CE Source Receive Signal Element Timing DCE Source Local Loopback X Data Terminal Ready X Ring Indicator Transmit Signal Element Timing DTE Source X Figure C 7 RS232 V 24 Link Pinouts The connecting cable must
44. ernal routing table with the remote network IPX addresses and the remote partner IPX routers associated with those networks When an IPX frame is received from the local LAN the destination IPX address is 39 Applications examined and looked up in the routing tables Once the destination IPX address is found in the routing tables the IPX router sends the IPX frame to the remote partner P850 router that is connected to the appropriate remote IPX network To configure the P850 to be an IPX router when both LAN segments contain Novell servers the IPX network numbers are learned automatically from the routing information and service announcements sent by the servers The P850 will automatically assign the IPX network numbers and proceed to route the IPX frames to the appropriate destination network g W hen two IPX LAN sements with N ovell servers on each sement are Mer to be connected together with IPX routers you must ensure that the IPX network numbers on each of the N servers is unique If the IPX network numbers are the same the IPX routers will not operate Once the WAN connections have been established to the remote partner P850 routers the IPX router portion of the P850 routers will begin to build their routing tables according to the IPX frames they receive from the network Manual entries may be made in the routing tables by adding static IPX routes L The configuration options described here are only for initial s amp
45. etworks the following parameters must be defined in the built in menu system IP Address amp Subnet Size Location Main Configuration LAN Set up LAN IP Set up V IP A ddress mask size The IP address consists of 4 octets and is represented by 4 fields separated by periods where each field is specified by a decimal number e g 199 169 1 10 Each decimal number must be 37 Applications less than or equal to 255 that is the maximum value of each 8 bit field The IP address is first specified and then you will be prompted to enter the mask size The mask size defines the subnet mask by using the specified number to reserve a series of contiguous bit locations from the start of the entire IP address These reserved bit locations are then used as part of the network portion of the IP address For example with a class C IP address a subnet size of 26 will provide 2 host bits for the subnet address resulting in 4 possible subnets The addresses for two of these are all ones or all zeros and are not valid under standard subnets leaving two subnets available Configuration The subnd mask size entered defines the size of the subne mask from the start of the entire IP address The configuration of the sub netted class C IP network is now completed Remember that each of the 2 sub networks created may only have 62 host IP addresses defined The configuration options described here are only for i
46. f you want to disallow all but one specific station from accessing any service on the other segment the use of Forward if Source could be used Pattern Filtering Pattern filtering is provided in three separate sections Bridge Pattern Filters IP Router Pattern Filters and IPX Router Pattern Filters When the P850 is operating as an IP IPX Bridge Router each of the frames received from the local LAN is passed on to the appropriate internal section of the P850 The IPX frames are passed on to the IPX router the IP frames are passed on to the IP router and all other frames are passed on to the bridge Different pattern filters may be defined in each of these sections to provide very extensive pattern filtering on LAN traffic being sent to remote LANs Pattern filters are created by defining an offset value and a pattern match value The offset value determines the starting position for the pattern checking An offset of 0 indicates that the pattern checking starts at the beginning of the data frame An offset of 12 indicates that the pattern checking starts at the 12 octet of the data frame When a data frame is examined in its HEX format an octet is a pair of HEX values with offset location 0 starting at the beginning of the frame Please refer to A ppendix C O det Locations on E theme Frames for more information on octet locations in data frames The pattern match value is defined as a HEX string that is used to match against the da
47. he 12th octet does not equal the 80 of the filter pattern Introduction to Filtering brackets Used in pattern filters to separate portions of filter patterns for specific operators Example 12 80 amp 14 24 14 32 This filter pattern will be checked in two operations First the section in brackets will be checked and then the results of the first check will be used in the second check using the first portion of the filter pattern If the packet information starting at the 14 octet equals 24 or 32 and the information at the 12 octet equals 80 the filter pattern will match 64 Introduction to Filtering Popular Filters Some of the more commonly used pattern filters are shown here Bridge Bridge pattern filters are applied to Ethernet frames that are bridged only When the P850 is operating as a router all routed frames will be unaffected by the bridge pattern filters IP amp Related Traffic IP amp Related Traffic 12 0800 12 0806 20800 12 0806 Novell IPX Frames Novell IPX Frames temen 2413 802 2 LLC 14 amp 20 8137 NetBIOS amp NetBEUI Microsoft Windows NetBIOS amp NetBEUI Microsoft Windows 65 Introduction to Filtering Banyan 12 0BAD 12 80C5 IP Router IP router pattern filters are applied to IP Ethernet frames that are being routed When the P850 is operating as an IP router all IP routed frames will be checked ag
48. he P850 router Select a Site Place the router in a well ventilated area The site should maintain normal office temperature and humidity levels Air vents located on the rear of the router must have an inch or so of clearance from any object Units should not be stacked Installation Identify the Connectors Each unit is configured with both straight MDI and crossed over MDI X 10BaseT LAN connectors the P850 will auto sense between the two Only one connector may be used at a time The P850 router is produced with four different WAN interface modules V 35 CSU DSU Universal WAN or T1 E1 The type of module in a unit may be determined by looking at the label over the WAN connector on the back panel 12VDC Console LAN CSU DSU O OCC MDI X MDI Figure 1 1 Rear View of the CSU DSU P850 router Console LAN UNIVERSAL WAN e o MDI X MDI Figure 1 2 Rear View of the Universal WAN P850 Console LAN C MDI X MDI Figure 1 3 Rear View of the V 35 P850 router 12VDC Console LAN T1 E1 Ll Xx MDI X MDI Figure 1 4 Rear View of the T1 E1 P850 router 5 Installation Connect to the Console Connection to the router operator s console is made through the RJ 45 connector labeled CONSOLE on the back of the router A RJ 45 cable and RJ 45 to D B9 female converter are provided for connection to a D B9 male connector Connect the console port of the P850 ro
49. he standard V 35 connectors When connecting two bridge routers back to back without modems a null modem cable is required to crossover the pins on the links Crossing over the pins allows two bridge routers both configured as DTE interfaces to be connected together With this configuration both bridge routers will provide clocking for the links and each bridge router must have a link speed defined CSU DSU Module P850 routers with an LXT411 CSU D SU interface module use a standard RJ45 service connector pinout specification RJ48S 56 64 CSU DSU Figure C 4 Rear View of the CSU DSU Connector 80 Servicing Information The LXT411 CSU DSU link connection is set to operate at 64 Kbps by default The link may be set to 56 Kbps via the software menus if required When two CSU DSU link routers are to be connected via a leased line in a back to back set up the unit must be set to 56 Kbps link speed and a null modem crossover cable used for the connection A DSU CSU crossover cable would be constructed as follows 1 gt 7 2 gt 8 7 gt 1 8 gt 2 T1 E 1 Module P850 routers with a T1 E1 interface module use a standard RJ45 service connector pinout specification RJ48C T1 E1 Figure C 5 Rear View of the T1 E 1 Connector When two T1 E1 routers are to be connected in a back to back set up a null modem crossover cable used for the connection A T1 E1 crossover cable would be constructed
50. hree P850 routers in the diagram the upgrade order should be Router C then Router B and finally Router A A TFTP software load to Router C would be performed as follows Using TFTP get config txt from each router and save Telnet to Router C Enter the ID or alias of Router B in the Network TFTP option to put Router C in Network Load mode When Router C restarts in Network Load mode the connection to Router B will be re established only if autocall is enabled on router B The TFTP transfer of the upgrade code may now be performed from the PC to Router Once Router C has completed programming the flash and has restarted in operational mode the connection to Router B will be re established only if autocall is enabled on router B Once router C is operating with the new software the PC may be used to reload the config txt file back to Router C Repeat for Router B then again for Router A Perform the Router B upgrade using the ID or alias of Router A Router A upgrades would not require a remote site ID as the PC used for TFTP transfers is located on the same LAN as Router A 95 PC used for TFTP transfers Router B Router C 96
51. ide provides the basic information required to initially set up and configure the P850 router This guide is organized into the following sections Installation provides instructions for installing the P850 router Typical Applications amp How to Configure T hem provides simple configuration examples for typical applications in which the P850 router might be used The applications described in this document are for example only and provide a method of quick configuration of the P850 router For more complete information on all of the configuration parameters available please refer to the PPP Menu Reference Manual on the accompanying CD ROM Introduction to Filtering provides an introduction to the pattern filtering options of the P850 router Several examples of typical pattern filters are also provided Menu Trees provides a graphical tree type overview of the structure of the built in menu system of the P850 router All of the configuration is performed using the options provided in the menu system The Menu Tree is like an index to the menu options Configuration Pages provides a place to note the current configuration of the P850 router for future reference If a replacement unit is required the configuration may be quickly modified to be the same as the existing unit Octet Locations on Ethernet Frames provides a graphical representation of the various common Ethernet frames that the P850 router will bridge or route Wh
52. ired contain an A and B reference should be connected to twisted pairs within the connecting cable 86 Servicing Information V 11 X 21 Link Pinouts X 21 Direction Contact Circuits Circuit To From No Ref Name DCE DCE 1 Protecivecround 3 T transmitted e a ra enoo Indication A ssa Sa erent 3 DN e Gmud Sga Ground e Te TrmmitedDaa X n 88 Received dati x 3 89 indication a Ca ser SgdtenerTmi f Figure C 9 V 11 X 21 Link Pinouts The connecting cable must be a shielded cable Circuits which are paired contain an A and B reference should be connected to twisted pairs within the connecting cable NOTE For U K Approval The connecting cable may be any length between 0 and 5M 87 Servicing Information V 11 X 21 DB25 to DB15 Connector Cable DB25 MALE DB15 MALE 1 Protective Ground Protective Ground 1 2 Transmit Data A Transmit Data A 2 3 Receive Data A Receive Data A 4 7 Signal Ground Signal Ground 8 8 Indication A Indication A 5 10 Indication B Indication B 12 12 Signal Element Timing B Signal Element Timing B 13 14 Transmit Data B Transmit Data B 9 15 Signal Element Timing A Signal Element Timing A 6 16 Receive Data B Receive Data B 11 20 Control A Control A 3 23 Control B Control B 10 Figure C 10 V 11 X 21DB25
53. iscriminator 9 MP minimum 5 Force disconnect 6 Link summary Continued on next page O Frame Relay Options 1 2 4 Access Set Up 1 Terminal Set Up 1 Device Set Up 1 2 Remote Site Set Up Edit Remote Site Menu Tree software release F5P6 04 xx 3 5 l Telnet Set Up Toad FLASH Set Up iD Conso MODEM FTP Password Device Name Show Time 1 Console 2 Network Telnet access Dump Restore 24 Set Time 6 Remove Name 3 LAN IPX Set Up LAN QOS Set Up 1 Secondary set up 1 EiemetT frames t 1 Queumng Strategy 2 LAN NAT set up 2 RAW 802 3 frames 3 IP address 3 IEEE 80222 frames 4 Routing protcol 4 802 2 SNAP frames 5 RIP mode 5 Auto Learn 6 Route cost 16 Help 1 Secondary IP Set Up z 1 Edit Secondary JT Edit Secondary ni Show Secondary Entry Remove Secondary Entry Secondary IP ize 2 LAN NAT set up 1 Translation Show adest pool Dynamic IP pool Add static entry Remove static entry 6 NAT enable 1 Connection Set Up 1 Primary link 2 Auto call 1 STP Parameters T State 2 Path cost 1 8 Priority 1 IP Routing a 1 Routing protocol 2 RIP mode 3 Triggered RIP 4 Auto Default Route 5 Link cost NAT advanced 1 Translation type how address pool ynamic IP pool static entry lemove static entry mss enabled CP mss value 1 1 STP parameters menu 2 Bridge enabled 23 Tinyg
54. ity List Location Main V5 Configuration QOS Setup V5 Priority Queuing V Edit Priority List V Edit Items Once the Priority List is defined the Priority List can be assigned to a Remote Site interface or the LAN interface 99 Applications To assign a Priority List to a LAN interface Location Main V Configuration V Lan Set up QOS Set up V Queuing Strategy gt Priority V Priority L ist N umber To assign a Priority List to a Remote Site Configuration Location Main Configuration V Wan Set up V Remote Site Set up V Edit Remote Site V Protocol Set up QOS Setup V Queuing Strategy b Priority V Priority L ist N umber 60 3 INTRODUCTION TO FILTERING The P850 provides programmable filtering which gives you the ability to control under what conditions Ethernet frames are forwarded to remote networks There are many reasons why this might need to be accomplished some of which are security protocol discrimination bandwidth conservation and general restrictions Filtering may be accomplished by using two different methods The first method is to filter or forward frames based solely on their source or destination MAC address This method of filtering is useful when bridging between LANs and for providing remote access security in any type of network The Ethernet MAC Media Access Control address is checked against the addresses in the filtering list and the frame is filtered or forwarded accordingly
55. mation is required Enter yes to proceed 4 Afterthe router restarts the router will be in receive ZMODEM mode The router will display the following messages on the console port System startup Receiving ZMODEM B0100000023be50 5 Start the Z MOD EM transfer and send the file all from the Operational BOOT Code directory on the CD ROM 6 OncetheZMODEM transfer is complete the router will verify the file all in memory program and verify the FLASH clear the configuration to default values except the password and then reset A byte status message will be displayed on the console port during the programming of the FLASH After the reset the remote sites information will have to be re entered either from a saved configuration file recommended or by manually reentering the information for each site On the rare occasion that during the programming of the FLASH something happens to the bridge router power hit or hardware reset causing the FLASH to become corrupted the bridge router will restart in ZMO D EM receive mode only If 92 Servicing Information the bridge router does not start in ZMODEM receive mode refer to Appendix D Servicing Information for recovery procedure The ZMODEM Load Flash operation may be aborted by aborting the ZMODEM transfer and then entering 5 control X characters X from the console keyboard After the control X characters are sent the router will display a li
56. me Some of the common Ethernet type codes are also shown here The Ethernet type codes are located at offset 12 of the bridged Ethernet frame 70 Octet Locations on Ethernet Frames Octet Locations on a Bridged TCP IP Frame LEVEL2ETHERNET 0 1 2 3 4 5 6 7 8 9 10 n 12 13 ETHERNET DESTINATION ADDRESS ETHERNET SOURCE ADDRESS TYPE CODE INTERNET PROTOCOL 14 15 16 17 18 19 20 21 22 23 24 25 ver mi QPe f TOTALLENGTH IDENTIFICATION FRAGMENT TIMETO prorocoL BEER 26 27 28 29 30 81 32 33 SOURCE ADDRESS DESTINATION ADDRESS TRANSPORT CONTROL PROTOCOL 34 35 36 37 38 39 40 41 42 43 44 45 SOURCEPORT SEQUENCE NUMBER ACKNOWLEDGEMENT NUMBER 46 47 48 49 50 51 52 53 54 55 56 57 1 1 1 Reserved WINDOW CHECKSUM URGENIPOINIER DATA FIELD 58 59 60 61 62 63 64 LL W Z L DATA FIELD NEXT 500 OCTETS ETHERNET CHECKSUM Octet Locations on a Bridged N ovell N etware Frame LEVEL2 ETHERNET 0 1 2 3 4 5 6 7 8 9 10 11 12 13 L L L 1 1 L 1 1 1 ETHERNET DESTINATION ADDRESS ETHERNET SOURCE ADDRESS TYPECODE NOVELL IPX HEADER 14 15 16 17 18 19 20 21 22 23 L 1 1 1 1 Checksum LENGTH Board SSE DESTINATION NETWORK 24 25 26 27 28 29 30 31 32 33 34 35 1 1
57. mited menu system Choose the Abort Load option from the Load FLASH Set Up menu This will cause the router to reset and return to normal operations operating from the existing software If the ZMODEM transfer operation needs to be restarted after it has been canceled or after loading the first file simply choose the Console ZMODEM option from the Load FLASH Set Up menu once again Considerations When the router is placed in Console load BO OT mode the LAN interface and the WAN interface will be disabled The router wil only accept information from the console management port The BOOT code of the P850 may be upgraded by performing a load of the all file from the O perational BOOT Code directory on the CD ROM 93 Procedures for performing a TFTP Flash Load to upgrade the operating software of the router 1 Execute the Network TFTP command from the Load FLASH Set Up menu 2 Enter none to connect locally or enter the remote site ID number or alias to connect to a remote site 3 Start the TFTP application to be used for transfers to the router The IP address of the router may be found in the Internet Set Up menu 4 Put the file all for this router from the O perational BOOT Code directory on the CD ROM to the router Any router not in Network Load BOOT mode will respond with an access violation error 5 The router will verify the file all in memory program and verify the F
58. mmunications An IPX router connection will use the Internet Packet Exchange Control Protocol IPX CP NCP for all IPX communications In order to establish an IPCP or IPXCP link connection between two PPP routers either a numbered link or an unnumbered link connection must be established The two types of link connections are available to allow for greater flexibility between vendors products Numbered Links A numbered link assigns a network address either IP or IPX to both ends of the WAN connection In a numbered link configuration the WAN connection may be viewed as another LAN network with the two PPP routers simply routing information between their local LANs and the common connected WAN network Because the WAN is considered to be a separate network each of the stations on that network must be assigned a network address If a numbered IP link is to be established then each WAN interface must be assigned an IP address on a unique IP network The WAN IP network address must be different than the two existing networks that are being connected together with the PPP routers If anumbered IPX link is to be established then each WAN interface must be assigned an IPX node address on a unique IPX network number The WAN IPX network address must be different than the two existing networks that are being connected together with the PPP routers The IP address of the local WAN link is defined as the Local IP Address within the remote site
59. n 44 Applications Configure D ynamic H ost Configuration Protocol The P850 uses Dynamic Host Configuration Protocol DHCP to allow users in a small office environment to simply enable DHCP clients on their workstations and power them up to get their proper initialization Y ou would then be able to use TCP IP applications such as connecting to the Internet DHCP allows configuration of devices DHCP clients to be handled from a central DHCP server This allows devices to be added and removed from a network with all of the network information ie IP address DNS subnet mask etc being configured automatically It is designed to allocate network addresses to a number of hosts on the P850 s LAN and supply minimal configuration needed to allow hosts to operate in an IP network The following steps must be performed on the P850 to configure it as a DHCP server DHCP Services Location Main Configuration Applications Set up DHCP Set up DHCP Services Server DHCP Services options which are available are none and server Set to server to enable this device as a DHCP Server IP Address Pool Location Main Configuration Applications Set up DHCP Set up Server IP address pool V IP address pool V IP A ddress number of addresses The IP address pool option requires having the first IP address in the range that is wanted for the 45 Applications devices attached to the D HCP Server to
60. n all of the configuration parameters available please refer to the P850 PPP Meus Reference Manual file on the accompanying CD RO M 31 Applications Configure as an Ethernet IP Router An Ethernet IP router is used to intelligently route Internet Protocol IP LAN traffic to remotely connected LANs across the WAN Router IP Address Router IP Address 199 169 1 10 WAN connection 199 169 2 12 IP Network Address 199 169 2 0 IP Network Address 199 169 1 0 Figure 2 41 Routed Local Area N etworks IP routers forward IP frames based upon their IP destination address and an internal routing table The router maintains the internal routing table with the remote network IP addresses and the remote partner IP routers associated with those networks When an IP frame is received from the local LAN the destination IP address is examined and looked up in the routing tables O nce the destination IP network is found in the routing tables the IP router sends the IP frame to the remote partner P850 that is connected to the appropriate remote IP network If no explicit route entry is found in the routing tables the IP frame is sent to the D efault G ateway To configure the P850 to be an IP router the following parameters must be defined in the built in menu system 32 Applications IP Address Location Main Configuration LAN Set up LAN IP Set up V P A ddress Subnet mask size The IP address consists of fo
61. network management stations to use SNMP to configure and monitor the P850 remotely The IP address also allows Telnet stations to connect to the P850 and view the built in menu system without having to physically connect to the device IP Address Location Main Configuration LAN Set up LAN IP Set up V P A ddress Subnet mask size The IP address consists of four 8 bit numbers and is represented by 4 fields separated by periods where each field is specified by a decimal number e g 199 169 1 10 Each decimal number must be less than or equal to 255 the maximum value of an 8 bit field The IP address is first specified and then you will be prompted to enter the size of the subnet mask 30 Applications The size of the subnet mask defines the subnet mask by using the specified number to reserve a series of contiguous bit locations from the start of the entire IP address These reserved bit locations are then used as the network portion of the IP address For example with a class C IP address a subnet mask size of 26 will mask the 24 network address bits plus 2 host bits for the subnet address resulting in 4 subnet addresses being created Note that depending on whether or not nonstandard subnets are allowed not all of these addresses may be valid see the sections on defining masks The configuration options described here are only for initial set up and configuration purposes For more information o
62. nitial s amp up and configuration purposes For more information on all of the configuration parameters available please refer to the P850 PPP Menus Reference Manual file on the accompanying CD RO M 38 Applications Configure as an Ethernet IPX Router The P850 is preconfigured to operate as an IPX router when installed in an IPX network The P850 router will leam the IPX network numbers from the local LAN and when the WAN connections are established the P850 will route the IPX frames to the appropriate destination IPX network The IPX routing scenario may consist of one of the two following configurations The first configuration consists of Novell servers located on each of the LAN segments to be connected The second configuration consists of Novell servers located on only one of the LAN segments to be connected The P850 IPX router will need to be configured differently in the second configuration with Novell servers located on only one of the LAN segments N ovell Servers in Both Locations An Ethernet IPX router is used to intelligently route Novell IPX LAN traffic to remotely connected LANs across the WAN WAN connection IPX Network Address 1500 Novell IPX Client Novell Server Novell Server Novell IPX Client Figure 2 7 IPX Routed Local Area N etworks Servers on both sides IPX routers forward IPX frames based upon their IPX destination address and an internal routing table The router maintains the int
63. nk performance 1 Display local 2 Display local ATT 3 Display far end 2 4 Reset local Reset far end Reset all Priority Selection Protocol Parameter LAN Statistics 1 Bridged traffic 2 IP traffic 5 IPX traffic 2 4 Total LAN traffic LAN error Clear LAN statistics Clear LAN errors 2 3l Test Pattern Set Up T1 E1 Loopback 1 Soft Reset 1 Trace link 1 Link operation Full Reset 2 Real Time Test pattern set up menu 1 Pattern a 1 Loopback type 23 Heartbeat 1 Capture 1 loopback menu 2 Start Xmt 2 Loopback mode 24 WAN trace 4 2 HE loopback 1 3 Loopback delay 5 WAN loopback E display 3 CSU DSU self test Start loopback Menu Tree software release F5P6 04 xx APPENDIX B OcTET LOCATIONS ON ETHERNET FRAMES This appendix provides octet locations for the various portions of three of the common Ethernet frames When creating pattern filters these diagrams will assist in the correct definition of the patterns The offset numbers are indicated by the numbers above the frame representations Note the differences in the TCP IP and Novell frames when bridging and when routing When routing the TCP IP and Novell frames are examined after the Level 2 Ethernet portion of the frame has been stripped from the whole data frame This means that the offset numbers now start from 0 at the beginning of the routed frame and not the bridged fra
64. ntinuance of service may be required But if advance notice is not practical the telephone company will notify the customer as soon as possible Also you will be advised of your right to file a complaint with the FCC if you believe it to be necessary 4 The telephone company may make changes to its facilities equipment pertains or procedures that could affect the operation of the equipment If this happens the telephone company will provide advance notice in order for you to make the necessary modifications in order to maintain uninterrupted service 5 If trouble is experienced with this equipment P850 please contact TriNexus Communications at 1 888 668 7711 for repair and warranty information If the equipment is causing harm to the telephone network the telephone company may request that you disconnect the equipment until the problem is resolved 6 The following repairs may be made by the customer none Canadian Emissions Standard ICE S 003 This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus as set out in the interference causing equipment standard entitled D igital Apparatus ICES 003 of the D epartment of Communications Cet appareil num rique respecte les limites de bruits radio lectriques applicables aux appareils num riques de Classe A prescrites dans la norme sur le mat riel brouilleur Appareils Num riques NMB 003 dict e par le ministre des Communications
65. or configuration T he note icon is used to provide miscdlaneous information on d configuration and set up of the P850 Configuration The Configuration N ote is used to indicate that there may be another configuration item that is effected by changing this option L The information icon is used to indicate that more information is available on this subject The information is usually located within another document as specified N The caution icon indicates that caution should be taken when performing this task 18 Applications Basic Frame Relay Configuration North American P850s are configured to have frame relay enabled as the default setting With frame relay enabled the router will communicate over WAN connections to other frame relay units via frame relay Permanent Virtual Circuits PVC From 1 to 40 PVC s may be defined to connect to other frame relay units Before the P850 can establish a PVC connection to another frame relay router at least one PVC must be defined The P850 is pre configured to query the frame relay service to auto learn the required parameters they may also be set manually The DLCI Data Link Connection Identifier number for the PVC is assigned by the frame relay service provider The PVC must be defined on the physical link on the P850 Refer to the following diagram that shows three P850 units connected together with a PVC being configured on each unit The configuration of the PVCs
66. protocols can only be bridged some of the more well known are NetBEUI used by Microsoft Windows 3 11 Windows 95 and Windows NT and LAT used by Digital Equipment Corp If your IPX or IP network address is the same at both locations bridging is simpler and requires less configuration If the locations are to be routed together the network numbers will have to be different in both cases this could require extensive reconfiguration IPX routing should be used if the two locations are already set up with different IPX network numbers Routing IPX will minimize the number of SAP and RIP messages being sent across the WAN IP routing should be used if the two locations are already set up with different IP network numbers or if you wish to divide your one IP network number into two sub networks In some cases both bridging and routing may be required Routing may be required for IP information and bridging may be required for NetBEUI 28 Applications Configure as an Ethernet Bridge An Ethernet bridge intelligently forwards LAN traffic to remotely connected LANs across the Wide Area Network WAN WAN connection Figure 2 3 Bridged Local Area N etworks Ethernet bridges simply forward information based on Ethernet MAC addresses If a LAN packet is destined for a device located on a remote LAN the bridge will forward that packet to the remote LAN If a LAN packet is destined for a device located on the local LAN the bridg
67. ption is set to inbound to have this WAN firewall filter traffic from the ISP to the P850 while allowing unrestricted access out to the Internet Firewall WAN Remote Site Filter direction Location Main Configuration Applications Set up V Firewall Set up WAN Firewall Set up enter ID 1 for ISP remote site Firewall inbound The firewall on the Intemet connection is set up to protect the entire corporate network including the branch office from unauthorized traffic Then the entries are made in the Designated Servers menu to allow Internet access to the FTP and Web servers on the corporate network FTP amp WWW Designated Servers Location Main Configuration Applications Set up V Firewall Set up WAN Firewall Set up V ID 1 for ISP remote site Designated Servers V FTP Saver 195 100 1 12 WWW HTTP Sever 195 100 1 20 When defining a designated server you will be prompted for the IP address of that device Adding an entry to the 52 Applications designated servers list allows you to quickly setup a firewall entry without having to figure out TCP port values Next the LAN firewall is set up to restrict access to the LAN The firewall option is set to outbound to have the LAN firewall filter traffic from the P850 Firewall LAN Filter Direction Location Main Configuration Applications Set up V Firewall Set up LAN Firewall Set up V Firewall amp
68. ram 4 FCS preservation 2 IP Parameters 14 IP routing menu Advanced menu 2 T Schedule 2 Usage set up 3 Threshold set up 4 Inactivity timer 5 Recovery timer 1 Activation intervals Display schedule Display time Usage Set Up Usage limit 2 Call limit 3 Restart time Link IP address 2 Peer IP address Private Route Negotiate address gj 8 W compression IPX Parameters SE e Tx p Link IPX ty L IPX net Pe 2 Peer IPX node Static routes only DMR enabled 8 Force RIP update CCP Parameters Compression Extended sequence 4 3 Protocol Set Up Bridge parameters menu 7 IP parameters menu 23 IPX parameters menu CCP parameters menu QOS Set Up 4 Security Parameters x 1 Incoming PAP password Incoming CHAP secret Outgoing user name 24 Outgoing PAP password 5 Serup 1 i Queuing Strategy 5 Outgoing CHAP secret 68 Continued from previous page 4 Application Set Up 1 2 Bridge Pattern Filters IP Router Patter Filters IPX Router Filters 2 Filter Operation 3 Broadcast Address 4 Show Bridging Table 5 Show Permanent Table 16 Clear Bridging Table Status Location Filter If Source Filter If Destination j Permanent 16 Remove Help QOS Set Up 1 Priority Queuing
69. responding to an authentication request from a remote site PPP router T he cold start defaults for the security user name and passwords are as follows T hese defaults will exist when the P850 is first started before and configuration is entered and after a Full Reset has been performed These default values are also s amp when the P850 is placed in TFTP Network load mode for upgrading the operating software via TFTP transfers Care should be taken when upgrading a group of P850s that have security levels set D user name is the same as the default device name D PA P password and CH A P ser are both set to none The complete security configuration for both incoming and outgoing calls is defined within the Security menu of the WAN Set up section Security Level Location Main Configuration WAN Set up Security Set up Seurity L evel The security level defines the type of security that this P850 will request when a remote site PPP router attempts to establish a PPP connection The security may defined as none PAP or CHAP When a security level is defined on this P850 an entry for each remote site PPP router that may be connected to this P850 must be placed in the security database The security database is used to store the user names and passwords of the remote site PPP routers 49 Applications Security Database E ntry Location Main Configuration WAN Set up Edit Remote Site Secu
70. rity Parameters Incoming PA P Password i Incoming CHA P Secret Outgoing U ser N ame Outgoing PA P Password 5 Outgoing CH A P Secret The security entries in the security database define the user names and passwords that remote site PPP routers will provide when an authentication request is sent from this P850 W hen defining the user names for the PPP routers that will be connecting together you should remember that the remote site PPP router user name that is authenticated by the P850 is used to match to the configured remote site profiles If a match to a configured remote site profile exists the inooming call will use the configuration defined within that remote site profile This also allows easier viewing of the remote site statistics L The configuration options described here are only for initial set up and configuration purposes For more information on all of the configuration parameters available please refer to the P850 PPP Menus Reference Manual file on the acompanying CD RO M 50 Applications Configure Firewall The P850 provides Firewall security for restricting access between any two networks connected through the router Firewalls are set up on a per connection basis for the LAN and remote sites The direction of filtering is from the perspective of the P850 incoming traffic is from the network in question to the P850 outgoing is from the P850 to the network The direction of filtering may be
71. s 2 bits from the host address field Two bits gives 4 possible sub network addresses from the original IP network address T wo of the resulting sub networks will have either all zeros or all ones as the subnet address under standard subnets these addresses are reserved for network functions and hence are invalid addresses So setting a mask of 26 will generate two resulting sub networks with up to 62 host addresses each 64 potential addresses minus the all zero and all one addresses The new IP network addresses will be 199 169 100 64 and 199 169 100 128 The subnet mask for the newly created networks will be 255 255 255 192 36 Applications Configuration The mask size entered defines the size of the subnet mask from the start of the entire IP address T his allows subnet sizes from 0 to 24 bits subnet mask size of 8 in a dass A address represents a subnet size of 0 or no subndting performed Original IP Network Address 199 169 100 0 Subnet IP Network Address Subnet IP Network Address Subnet Mask is 199 169 100 64 955 255 255 192 199 169 100 128 Router IP Address 199 169 100 129 Subnet Mask Size 26 Router IP Address 199 169 100 65 Subnet Mask Size 26 Host IP Address Host IP Address Host IP Address Host IP Address 199 169 100 66 199 169 100 67 199 169 100 130 199 169 100 131 Figure 2 5 Defining an IP Subnet Mask To configure the P850 routers to route between the newly created sub n
72. sing Menus Conventions Basic Frame Relay Configuration Auto Learning the Frame Relay Configuration Manual Configuration LMI Type Quick Start Frame Relay Basic Leased Line Configuration Quick Start PPP Leased Line Connections Should Y ou Bridge or Route Configure as an Ethernet Bridge Configure as an Ethernet IP Router D efine an IP D efault G ateway D efine an IP Static Route D efine an IP Subnet Mask Configure as an Ethernet IPX Router Novell Servers in Both Locations Novell Servers in Location PPP Link Configuration O verview Numbered Links Unnumbered Links Configure D ynamic Host Configuration Protocol Configure Network Address Translation NAT Configure PPP Security Configure Firewall gd gt A Configure Remote Site Profiles for PPPoE QOS Priority Queuing 3 INTRODUCTION TO FILTERING MAC Address Filtering Pattern Filtering Popular Filters Bridge IP amp Related Traffic Novell IPX Frames NetBIO S amp NetBEUI Microsoft Windows Banyan IP Router NetBIO S over TCP Other interesting TCP Ports APPENDIX A MENU TREES APPENDIX B OCTET LOCATIONSON ETHERNET FRAMES Octet Locations on a Bridged TCP IP Frame Octet Locations on a Bridged Novell Netware Frame ETHERNET Type Codes Octet Locations on an IP Routed TCP IP Frame Octet Locations on an IPX Routed Novell Netware Frame Octet Locations on a Bridged XNS Frame APPENDIX C SERVICING INFORMATION Opening th
73. ss A global IP address must be assigned to the WAN link upon which NAPT is enabled for NAPT to work The global IP address will be assigned by the ISP To use NAPT the private network addresses of the services that will be available globally must be assigned NAT Exports Location Main Configuration Applications Set up NAT Exports Edit Services V enter the private network IP address of each service offered The NAT enabled option allows you to enable Network Address Translation NAT Enabled Location Main Configuration WAN Set up Remote Site Set up Edit Remote Site Protocol Set up V IP Parameters NAT Enabled nabled 47 Applications The Translation Type option allows you to use Network A ddress Port Translation Translation type Location Main Configuration 4 WAN Set up Remote Site Set up V Edit Remote Site X Protocol Set up V P Parameters NAT Advanced Translation type Port The configuration options described here are only for initial s amp up and configuration purposes For more complete information on all of the configuration parameters available please refer to the P850 PPP Menus R eference M anual file on the accompanying CD ROM 40 Applications Configure PPP Security The P850 provides support for both PAP and CHAP PPP security authentication An outgoing user name PAP password and CHAP secret are defined that the P850 will use when
74. ta frame If the HEX data at the appropriate offset location in the data frame matches the HEX string of the filter pattern there is a positive filter match The data frame will be filtered according to the filter operators being used in the filter pattern 62 Introduction to Filtering The following operators are used in creating Pattern filters offset Used in pattern filters to determine the starting position to start the pattern checking Example 12 80 This filter pattern will match if the packet information starting at the 12 octet equals the 80 of the filter pattern OR Used in combination filters when one or the other conditions must be met Example 10 20 12 80 This filter pattern will match if the packet information starting at the 10 octet equals the 20 of the filter pattem or if the packet information starting at the 12 octet equals the 80 of the filter pattern amp AND Used in combination filters when one and the other conditions must be met Example 10 20 amp 12 80 This filter pattern will match if the packet information starting at the 10 octet equals the 20 of the filter pattem and the packet information starting at the 12 octet equals the 80 of the filter pattern NOT Used in pattern filters to indicate that all packets not matching the defined pattern will be filtered Example 12 80 63 This filter pattern will match if the packet information starting at t
75. tions described within this section are only for initial set up and configuration purposes For more information on all of the configuration parameters available please refer to the P850 PPP Menus Reference M anual file on the acompanying CD ROM Important The P850 uses FLASH memory to store the configuration information Configuration settings are stored to FLASH memory after there has been 30 seconds of idle time Idle time is when there is no selection or modification of the values in the built in menu system If you wish to save the configuration immediately enter to jump to the main menu then select option 6 to save the configuration 16 Applications Managing the P850 Using Menus This section describes the minimum configuration parameters required when setting up the P850 Each of the configuration scenarios requires setting of operational parameters on the P850 The built in menu system of the P850 is used to configure the unit When navigating around the menu system a new menu or an option may be chosen by simply typing the number associated with the option that you wish to choose The menu system operates on a hotkey principa Each menu option may be chosen by simply typing the number associated with that option The P850 will accept the choice and act on it immediately The menu system consists of different menu levels each containing new configuration options Navigation back out of a nested menu is easily
76. to DB15 Connector Cable NOTE For U K Approval The connecting cable may be any length between 0 and 5M 88 Servicing Information V 35 Null Modem Cable Configuration DB25 MALE DB25 MALE 1 Protective GND Protective GND 1 2 lransmitted Data A Received Data A 3 14 Transmitted Data B Received Data B 16 3 Received Data A Transmitted Data A 2 16 Received Data B Transmitted Data B 14 9 Receiver Signal Element Timing B Transmitter Signal Element Timing B 11 20 Data Terminal Read Data Channel Received Line Signal Detector CD 8 8 Data Channel Received Line Signal Detector CD Data Terminal Ready 20 1 Signal Ground Signal Ground 7 6 Data Set Read Request To Send 4 5 Data Set TEE Data Set Ready 6 4 Request To Send Data Set mt 5 Figure C 11 V 35 Null Modem Cable The connecting cable must be a shielded cable Circuits which are paired contain an A and B reference should be connected to twisted pairs within the connecting cable This cable is needed when it is necessary to connect two units back to back and a set of modems is not available Note that this cable specifies D B25 connectors on each end to allow direct connection to the link interface connector on each unit The link speed must be defined for each of the two units 89 Servicing Information RS232 V 24 Null Modem Cable DB25 MALE Shield Shield Transmitted Data Received Data Received Data
77. tunnel to an ISP located somewhere on the ATM network side of the xDSL modem This feature eliminates the hassle and potential error of running a PPPoE client on each LAN workstation that requires Internet access The following steps must be performed in order for the router to be configured for PPPoE connection The remote site set up for the PPPoE should refer to the section for Configure Remote Site Profiles for Leased Line PPP as the initial guideline for setting up a remote site configuration for PPP Afterwards the following steps transform the PPP remote site connection to a unique PPPoE remote site configuration Location Main V Configuration V WAN Set Up V Remote Site Set up Edit Remote Site Connection Set up V Primary Link OLAN The Auto Call field will be automatically setup to be enabled when a LAN interface is selected as the primary link This will allow the PPPoE connection to be established automatically upon boot up of the router 55 To verify that PPPoE is enabled for this remote connection view the read only parameter Location Main V Configuration SWAN Set UP V Remote Site Set Up V E dit Remote Site V5 Protocol Set Up V PPPoE V enabled When setting up your PPPoE link with your ISP provider one global IP addresses will be provided that should be used for the PPPoE remote site configuration By enabled the NAT feature on the remote site configuration allows you to maintain only one glob
78. ur 8 bit numbers and is represented by 4 fields separated by periods where each field is specified by a decimal number e g 199 169 1 10 Each decimal number must be less than or equal to 255 the maximum value of an 8 bit binary number The IP address is first specified and then you will be prompted to enter the Subnet mask size The Subnet mask size defines the subnet mask by using the specified number to reserve a series of contiguous bit locations from the start of the entire IP address These reserved bit locations are then used as the network portion of the IP address for the subnet For example with a class C IP address a subnet mask size of 26 will mask the 24 network address bits plus 2 host bits for the subnet address resulting in 4 subnet addresses being created Note that depending on whether or not nonstandard subnets are allowed not all of these addresses may be valid see the sections on defining masks The default gateway parameter only needs to be defined when there is another IP router connected to the LAN that is the default gateway for this IP network Once the WAN connections have been established to the remote partner P850s the IP router portion of the P850s will begin to build their routing tables according to the IP frames they receive from the network Manual entries may be made in the routing tables by adding static IP routes 33 Applications Define an IP Default Gateway An IP default
79. uration WAN Set up Link Set up Frame Relay Set up LMI The configuration options described here are only for initial set up and configuration purposes For more complee information on all of the configuration parameters available please refer to the P850 PPP Menus Reference M anual file on the accompanying CD ROM 22 Applications Quick Start Frame Relay Since the P850 auto learns the frame relay configuration only a couple of parameters need to be configured before the unit is fully operational as an IP router for frame relay Upon initial start up the P850 is pre configured to query the frame relay service to auto learn the LMI type and the PVC DLCI numbers The P850 will then automatically create a remote site profile for each PVC Within each of the remote site profiles automatically created Bridging IP routing and IPX routing are all set to enabled Because each of these options are enabled by default and the automatically created remote site profiles will establish a PVC connection to the remote site routers the P850 will bridge and IPX route data without any user configuration Because an IP router requires an IP address the P850 must be configured with an IP address before IP routing is fully operational To configure an IP address for the P850 use the IP address option IP Address Location Main Configuration LAN Set up LAN IP Set up V P A ddress Subnet mask size If security
80. ust be defined for proper operation under the operational states shown in the table Mandatory Configuration IP Router IPX Router Frame Relay PPP Leased Line m None Frame Relay Disabled Remote Site Profile The configuration options required for proper initial operation are described in Section 2 Typical Applications and How to Configure Them Refer to Section 2 for details on configuring the P850 router Also refer to the Menu Reference Manual file on the accompanying CD ROM for a complete description of all the Menu O ptions Other options may be changed depending upon specific installation configurations Refer to the menu tree in Appendix A for a reference of the menu structure and options Installation Setting the Link Interface T ype Universal WAN only The Universal WAN Interface must be configured to match the service to which it will be connected WARNING ensure that the connector cable used with the Universal interface module has the correct pinouts for the operational mode selected for the interface V 11 X 21 V 35 RS232 V 24 or RS530 RS422 Using the incorrect cable connector for the operational mode selected may cause permanent damage to the interface module Please see Appendix D for pinout assignments Set Link Interface Location Main Configuration WAN Set Up V Link Set Up V Link Interface Select the Service type to which this P850 router will be connected
81. uter to a computer running an asynchronous communication package or a standard asynchronous terminal The router supports autobaud rates at 1200 2400 9600 or 19 200 bps The router is managed through the use of hotkey Menus Appendix C provides the pinout information for the console connector and the D B9 to RJ45 converter Make the LAN Connections Connect the P850 router to the LAN with the available LAN interface cable The P850 may be connected directly to a wiring hub or Ethernet switch by using the MDI LAN port and a standard 10BaseT cable The P850 may be connected directly to a computer network card by using the MDI X LAN port and a standard 10BaseT cable Make the WAN Link Connection The Universal WAN module may be selected to operate as a V 11 V 35 RS232 EIA530 interface The Universal WAN interface module uses D B25 connector Be sure to secure the cable connector to the router and the communications equipment with connector screws to prevent accidental disconnection WARNING ensure that the connector cable used with the Universal interface module has the correct pinouts for the operational mode selected for the interface V 11 V 35 RS232 or 530 Using the incorrect cable connector for the operational mode selected may cause permanent damage to the interface module Please see Appendix D for pinout assignments Note When the P850 router is initially powered up the Universal WAN will have the d
82. within the frame relay cloud is controlled by the frame relay service provider DLCI numbers assigned for these 2 PVCs from the a frame relay provider 52 Frame Relay PVC WAN connections Figure 2 1Frame Relay configuration 19 Applications Configuration The default configuration for P850s shipped outside North American is to have frame relay disabled To run frame relay on these routers it must first be enabled Frame Relay enable Location Main Configuration WAN Set up V Link Set up i Frame Relay enabled The router will request confirmation of the change enter yes For an P850 with a CSU D SU interface the default clock speed that the P850 will expect to receive from the DCE link is 64K bps If the DCE link is 56 Kbps then the Link Speed value must be reset to 56 here Link Speed Location Main Configuration WAN Set up V Link Set up Link Sp d 56 20 Applications Auto Learning the Frame Relay Configuration The P850 is pre configured to query the frame relay service to auto leam the LMI type and the PVC DLCI numbers This auto learn function allows the P850 to be plugged into the frame relay service and auto learn the PVC configuration to become operational without further manual configuration Manual configuration is also allowed by modifying the options within each Remote Site Profile and the individual link configuration menus When the P850 first starts up

Perle Systems PERLE P850 User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents