Patton electronic 2635, 2603, 2621 manual Security, Chapter contents

Page 68

Chapter 7	Security
Chapter contents
Introduction		69
Configuring the router		69
Configuring the security interfaces		71
Configuring Security Policies		73
Deleting a security Policy		74
Enabling the Firewall		74
Firewall Portfilters		74
Security Triggers		75
Intrusion Detection System (IDS)		78
Introduction to NAT		80
Enabling NAT		80
Global address pool and reserved map		80

68

Image 68

Contents IPLink Series High Speed Routers Mailsupport@patton.com Summary Table of Contents Contents Contents Models 2603, 2621, and 2635 Getting Started Guide Remote Site Configuration Central site configuration EMC Ethernet Cable 123 Adapter Contents Models 2603, 2621, and 2635 Getting Started Guide List of Figures Models 2603, 2621, and 2635 Getting Started Guide List of Tables Structure About this guideAudience Precautions Impaired functioningSafety when working with electricity General observationsGeneral conventions Factory default parametersTypographical conventions used in this document Chapter contents General InformationIPLink Series High Speed Routers overview General attributesEthernet Protocol supportPPP Support WAN InterfacesSecurity Front Panel Status LEDs and Console PortRear panel connectors and switches Console portPower connector Ethernet port outlined in greenGeneral Information Product Overview Introduction Applications Overview Sync Serial ApplicationInitial Conﬁguration What you will need Hardware installationInterface cable installation RJ-48C pinout diagram Models 2603, 2621, and 2635 Getting Started Guide Mechanical serviceability Case being opened with a screwdriver Ethernet connector Interface connector RJ-45 DB-25 Installing the AC power cord DCEInitial Configuration Installing the Ethernet cable Do the followingIP address modiﬁcation Web Operation and ConﬁgurationPC Conﬁguration Web BrowserModel 2603 home Model 2635 home Ethernet LAN Port LAN Connections Ethernet PortBasic Ethernet port attributes Conﬁgurable Ethernet parameters Serial Port Conﬁguration Variables WAN Serial Port ConﬁgurationSerial Interface Web Interface Conﬁguration T1/E1 Interface ConﬁgurationConﬁguring the IPLink Series 2603 for T1 Operation Web Conﬁguration , enter username See ﬁgureLine Options Fractional T1 Conﬁguring the IPLink Series 2603 for E1 OperationSerial Port Configuration WAN Services PPP BridgedWAN Services PPP Bridged WAN Service ConﬁgurationPPP Conﬁguration Leave User name and Password blank. Click on Create PPP Routed Remote site conﬁgurationClick on Create Click the Update button PPP link status LMI Management Frame Relay links LMI ConﬁgurationWeb Conﬁguration Methods Frame Relay Conﬁguration Dlci Number UseFrame Relay bridged Frame Relay bridged creationCentral site conﬁguration Frame Relay Routed RelayDescription FR routed Frame Relay Channel Routed conﬁguration Cost Interface frame-0 WAN Services Security Click on Create a new service Conﬁguring the routerClick on the Create a new Ip route... hyperlink Conﬁguring the security interfaces Valid gateway routeSecurity conﬁguration home Conﬁguring Security Policies Deﬁne ‘ppp-0’ interface as ExternalDeleting a security Policy Enabling the FirewallFirewall Portﬁlters Security Triggers Add Raw IP FilterConﬁguring TCP port ﬁlter for FTP Adding trigger for FTP data transfer Intrusion Detection System IDS Attack Name Protocol Attacking Host Blacklisted?Security Global address pool and reserved map Introduction to NATEnabling NAT Click on Add Global Address Pool button Dhcp and DNS Conﬁguration Services and features normally associated with each other Dhcp Server NATDhcp Server web Parameters for the Dhcp Server subnet Dhcp server conﬁguration webIP Addresses to be available on this subnet Dhcp IP address poolExample based on default range of IP address pool DNS server option informationDefault gateway option information Additional option informationDhcp Relay Conﬁguration of the Dhcp RelayDhcp Relay webpage DNS Relay Conﬁguring the DNS RelayDNS Relay conﬁguration webpage IP Services CLI Conﬁguration IP ServicesWEB Server Associated Ports for the different System IP Services System Conﬁguration Authentication Authentication web page showing default superuserAlarm Access the conﬁguration and status of the alarmsRemote Access Alarm & Alarm Error Log conﬁgurationSave UpdateBackup/Restore Website Settings RestartError Log Snmp DaemonSystem Tools Snmp Daemon conﬁgurationSntp Client Conﬁguration Sntp Client Mode Conﬁguration Parameters Conﬁguring the Sntp ClientSystem Clock Setting Sntp Client General Conﬁguration ParametersConﬁguration of the internal system calendar clock System Status System Status Port Connection StatusLAN Status WAN StatusHardware Status Deﬁned InterfacesStatus LEDs Contacting Patton for assistance Patton support headquarters in the USA Warranty coverageContact information Out-of-warranty service Returns for creditReturn for credit policy RMA numbersAppendix a Compliance information EMCSafety ComplianceRadio and TV Interference FCC Part CE Declaration of ConformityAuthorized European Representative Appendix B Speciﬁcations General Characteristics EthernetSync Serial Interface T1/E1 InterfaceManagement Protocol SupportPPP Support Dimensions Power and Power Supply SpeciﬁcationsAC universal power supply VDC power supplyAppendix C Cable Recommendations Ethernet Cable AdapterAppendix D IPLink Physical Connectors RJ-45 shielded 10/100 Ethernet port RJ-45 non-shielded RS-232 console port EIA-56135 M/34 and DB-25 Connector Serial port21 DB-15 Connector Pin No Circuit Signal Name DirectionE1/T1 RJ-48C Connector Pin No SignalAppendix E Command Line Interface CLI Operation Using the Console CLI TerminologyLocal VT-100 emulation Remote TelnetThen Adding new users Administering user accountsSetting user passwords Controlling user access Changing user settingsControlling login access

Related manuals

Manual 133 pages 40.62 Kb

Manual 8 pages 11.19 Kb