Patton electronic 3086 manual Security, Chapter contents

Page 119

Chapter 6	Security
Chapter contents
Introduction		120
Configuring the IAD		120
Configuring the security interfaces		121
Deleting a Firewall Policy		122
Enabling the Firewall		123
Firewall Portfilters		123
Security Triggers		124
Intrusion Detection System (IDS)		126

119

Image 119

Contents Shdsl Integrated Access Device Patton Electronics Company, Inc Contents Basic Application Configurations Contents Specialized Configurations 113 Contacting Patton for assistance 143 Cable Recommendations 157 Contents Page Structure About this guideAudience Precautions About this guide Factory default parametersSafety when working with electricity Mouse conventions Typographical conventions used in this documentGeneral conventions General Information Chapter contentsModel 3086 G.SHDSL IAD overview Model 3086 G.SHDSL IAD overviewGeneral attributes Protocol support Shdsl CharacteristicsEthernet TDM InterfaceManagement PPP SupportATM Protocols Model SecurityWAN DSL Console port outlined in red Rear panel connectors and switchesPower connector Line port outlined in yellow RJ-11/4 DSL line port uses pins 2 and 3 of the RJ-11 portEthernet port outlined in green Product Overview Applications Overview Product OverviewProduct Overview Internet/Extranet AccessIP/FR and TDM Access IP/FR and Voice over DSLMetro Intranet Access Quick Start Installation What you will need Hardware installationInstalling the AC power cord Quick Start Installation Connecting network cablesIP address has now been successfully changed Web Operation and ConfigurationPC Configuration IP address Quick Start modificationModel 3086 menu structure is shown in on Model 3086 home page displays see FigureModel 3086 Menu Structure Basic Application Configurations Basic Application Configurations IPoA Routed RFC Introduction TDM Port Routed WAN Services Bridged WAN ServicesRear panel power and interface connectors Interfaces Connecting the 3086 serial port to a DTEConnecting the 3086 serial port to a DCE X.21 PortsX.21 Ports Configuring the V.35 or X.21 port via DIP switchesDIP switches location Switch Position Function Factory Default Selected Option Switch Bank S2Switch Bank S3 T1 Interface Connection T1 InterfaceDIP Switch Configuration T1 Interface ConfigurationData Rate kbps Figuration only Line Code The 3086 T1 interface uses B8ZS Web Interface ConfigurationE1 Interface Connection E1 InterfaceDescription of S2 options follows the table E1/CRC S3-8 Setting Web Interface Configuration CLI configuration Using the 3086 as a simple modem TDM data over DSLCLI configuration Wait for configuration saved message… Saving configuration… Intended DSL Data Rate Web browser configurationClear Error Counters Circuit IDTerminal Type Intended Serial Interface Data RateDSL Rate Number of i Bit TDM Plus Ethernet Traffic Central or Remote terminal Master/Slave Selecting PCM modeSelecting the DSL link speed Assigning bandwidth to serial and Ethernet portsSelect between Annex a and Annex B To select Annex B type For 3086 a at the prompt typeFor 3086 B type Circuit ID Intended Serial Interface Data Rate Interface Type Ethernet extension Hdlc Pppoh Bridged Using the 3086 in Routed or Bridged applicationsModel 3086 Remote Configuration Steps PPPoH Bridged Two stand-alone units directly connectedLeave User name and Password blank. Click on Apply Model 3086 Central Configuration Steps PPPoH Bridged Network Extension HDLC-PPPoH Routed Model 3086 Remote Configuration Steps PPPoH RoutedModel 3086 G.SHDSL Integrated Access Device User Guide Click on Configure Basic Application Configurations Model 3086 Central Configuration Steps PPPoH Routed Using the 3086 in Routed or Bridged applications Dslam Connections with remote CPE units Bridged application configurations to a DslamRFC 1483 Bridged Configuration Model 3086 Remote Configuration Steps RFC 1483 Bridged Model 3086 Central Configuration Steps RFC 1483 Bridged PPPoH Bridged Configuration Dslam Connections with remote CPE units Model 3086 Central Configuration Steps PPPoH Bridged Model 3086 Remote Configuration Steps PPPoA Bridged PPPoA Bridged RFC 2364 ConfigurationVPI = VCI = LLC header mode = off Hdlc header mode = off Model 3086 CentralConfiguration Steps PPPoA BridgedRFC 1483 Routed Routed application configurations to a DslamModel 3086 Remote Configuration Steps RFC 1483 Routed Model 3086 G.SHDSL Integrated Access Device User Guide Basic Application Configurations One IP interface was called ip1 with an IP address Model 3086 Central Configuration Steps RFC 1483 RoutedIp set interface ip1 ipaddress 192.168.100.2 Dslam Connections with remote CPE units Basic Application Configurations PPPoH Routed Ip set interface ip1 ipaddress 192.168.100.2 Dslam Connections with remote CPE units Basic Application Configurations Model 3086 Central Configuration Steps PPPoH Routed Basic Application Configurations Basic Application Configurations PPPoA Routed RFC Model 3086 Remote-Client Configuration Steps PPPoA RoutedChap User Namefred Passwoodfredspass Click on ConfigureBasic Application Configurations Dslam Connections with remote CPE units Model 3086 Central-Server Configuration Steps PPPoA Routed 100 101 102 Local IP Magic Number MRU103 104 105 106 107 Model 3086 Remote Configuration Steps IPoA RoutedIPoA Routed RFC 108 109 110 111 Model 3086 Central Configuration Steps IPoA RoutedVPI0 VCI700 WAN IP address Click on Apply 112 Specialized Configurations Dhcp Server and Relay IP ConfigurationsRouter RIP and RIPv2 Static Route115 Specialized Configurations116 DNS Client117 DNS Relay ModeIP Configurations Security 120 Configuring the IAD121 Configuring the security interfacesSecurity 122 Deleting a Firewall PolicyFirewall policy named item0 is now deleted Enabling the FirewallFirewall Portfilters Firewall Policies124 Security Triggers125 126 Scan Attack Block DurationDefault = 86400 secondsIntrusion Detection System IDS 127 Intrusion Detection System IDS NAT Network Address Translation 130 Enabling NAT131 Global address pool and reserved mapNAT Network Address Translation 132 Monitoring Status 134 Status LEDsDiagnostics Ping Software UpgradesConfiguration Procedure137 DiagnosticsOperating Local Analog Loopback LAL-Serial Port Loop Operating Remote Digital Loopback RDL-DSL Loop138 T1/E1 DiagnosticsNetwork Loop 139 T1/E1 Local Loop140 QRSS-BIT Error Rate DiagnosticsFDL statistics T1 only AlarmsT1/E1 connection Status Transceiver Status142 BIT Error Rate V.52 DiagnosticsContacting Patton for assistance Returns for credit Warranty coverageOut-of-warranty service Contact informationContacting Patton for assistance Return for credit policyRMA numbers Shipping instructionsPage Appendix a Compliance information CE Declaration of Conformity SafetyCompliance Radio and TV Interference FCC Part149 Authorized European RepresentativeFCC Part 68 Acta Statement Industry Canada Notice150 Appendix B Specifications 152 General CharacteristicsShdsl Characteristics EthernetProtocol Support Sync Serial InterfaceT1/E1 Interface 3086/RIK and RIT models only 64K/G.703 Port 3086/RIF Model154 PPP SupportATM Protocols ManagementCompliance Standard Requirements DimensionsPower and Power Supply Specifications Security156 Appendix C Cable Recommendations Foot 3 m, RJ-11/RJ-11 refer to RJ-11non-shielded port on DSL CableEthernet Cable AdapterAppendix D Physical Connectors RJ-45 non-shielded RS-232 console port EIA-561 Assuming the MDI-X switch is in the out positionRJ-45 shielded 10/100 Ethernet port RJ-11 non-shielded portSerial port 35 M/34 Connector35 DB-25 Female Connector Physical Connectors162 Power input21 DB-15 Connector E1/T1 RJ-48C Connector IEC 320 connector two prong163 Appendix E Command Line Interface CLI OperationRemote Telnet CLI TerminologyProduces a list of numbered transport objects Local VT-100 emulation165 Using the ConsoleCommand Line Interface CLI Operation ThenFollowing information is returned Administering user accountsSetting user passwords Adding new usersShdsl Commands Changing user settingsControlling login access Controlling user access168 To establish the DSL linkFor CPE remote unit 169 170 Appendix F Interworking Functions Information Interworking Functions Information 173 LMI Configuration OptionsManagementType Default Value nomaintenance Frame Relay Local Management InterfaceFullReportCycle Default Value MgtAutoStart Default Value FalseT391Value Default Value T392Value Default ValueSet configuration variable CLI Configuration MethodsShow current configuration Command lmi showDE Mapping Frame Relay Service Interworking FRF.8Web Configuration Methods FRS Configuration Options177 Translation ModeFecn Mapping 178 FRS NameSet variable attributes on a specified group CLI Configuration MethodCommand frs set group # variable value Show one of the eight groups180 Set variable attributes on a specified channelFRS Overview Screen 181 Group/Channel Level Configuration Screen182 FRN Configuration OptionsFrame Relay Network Interworking FRF.5 183 Port Level Configuration Options184 Channel Level Configuration Options185 CLI Configuration Methods for Port Level ManagementList all ports available to the system Show detailed information about a specific port186 Command frn set port# variable valueConfiguration Management of the Channel Level Variables Understanding the Channel Level View187 Set Configuration Variables associated with the ChannelsCommand frn set port# channel # variable value 188 Port Level Information Screen189 Channel Level Information ScreenPacket Information Screen Frame Relay Ethernet Based Operations Frame Relay Configuration OptionsFrame Relay CLI Configuration Options 191 Clear all Frame Relay TransportsDelete the specified transport List all active Frame Relay ChannelsClock Mode Serial Interface ConfigurationWeb Based Configuration of the Frame Relay Channel Configuration Variables Available193 Show current configuration settingsGain help about the Serial Interface 194 Web Interface ConfigurationsPing commands from the CLI Interface Ping and Trace Route195 Trace Route from the CLI InterfaceDefine Usage ip traceroute Start Trace Route ip traceroute startPing and traceroute from the web interface Backup and Restore FeaturesBackup Configuration Restore Configuration

Related manuals

Manual 2 pages 38.76 Kb