3Com Version 4.3 - page 135

AppendixC. Lists of Reserved Ports, ICMP Types and Codes, and Internet Protocols

Name Port/protocol Description

www-http 80/udp WWW

kerberos 88/tcp Kerberos

kerberos 88/udp Kerberos

pop2 109/tcp PostOfﬁceV.2

pop3 110/tcp PostOfﬁceV.3

sunrpc 111/tcp RPC 4.0 portmapper

sunrpc 111/udp RPC4.0 portmapper

auth/ident 113/tcp AuthenticationService

auth 113/udp AuthenticationService

audionews 114/tcp AudioNews Multicast

audionews 114/udp AudioNews Multicast

nntp 119/tcp Usenet Network News Transfer

nntp 119/udp Usenet Network News Transfer

ntp 123/tcp NetworkTime Protocol

ntp 123/udp NetworkTime Protocol

netbios-ns 137/tcp NETBIOS Name Service

netbios-ns 137/udp NETBIOS Name Service

netbios-dgm 138/tcp NETBIOSDatagram Service

netbios-dgm 138/udp NETBIOSDatagram Service

netbios-ssn 139/tcp NETBIOS Session Service

netbios-ssn 139/udp NETBIOSSession Service

imap 143/tcp InternetMessage Access Protocol

imap 143/udp InternetMessage Access Protocol

sql-net 150/tcp SQL-NET

sql-net 150/udp SQL-NET

sqlsrv 156/tcp SQLService

sqlsrv 156/udp SQLService

snmp 161/tcp

snmp 161/udp

snmp-trap 162/tcp

snmp-trap 162/udp

cmip-man 163/tcp CMIP/TCP Manager

cmip-man 163/udp CMIP

cmip-agent 164/tcp CMIP/TCP Agent

cmip-agent 164/udp CMIP

irc 194/tcp Internet Relay Chat

irc 194/udp Internet Relay Chat

at-rtmp 201/tcp AppleTalkRouting Maintenance

at-rtmp 201/udp AppleTalkRouting Maintenance

at-nbp 202/tcp AppleTalk Name Binding

at-nbp 202/udp AppleTalk Name Binding

at-3 203/tcp AppleTalk

at-3 203/udp AppleTalk

at-echo 204/tcp AppleTalkEcho

131

Contents

Main 3Com TelecommutingModule User Manual: Version 4.3 Table of Contents Page Chapter 1. Introduction to 3Com VCX IP What is a Telecommuting Module? Conguration alternatives DMZ Conguration DMZ/LAN Conguration Quick guide to 3Com VCX IP Telecommuting Module installation Page Before you start About settings in 3Com VCX IP Telecommuting Module Chapter 2. Installing 3Com VCX IP Installation Installation with magic ping Installation with a serial cable Page Page Installation with a diskette Page Turning off a Telecommuting Module Remember to lock up the Telecommuting Module Chapter 3. Conguring 3Com VCX IP Logging on Log on again Log out Navigation Site Map Overview of conguration Preliminary and permanent conguration Conguring IP addresses and masks in 3Com VCX IP Telecommuting Module IP address Mask/Bits Name queries in 3Com VCX IP Telecommuting Module Page Chapter 4. How To Congure SIP DMZ Telecommuting Module, SIP server on the outside Networks and Computers Page DMZ Telecommuting Module, SIP server inside Networks and Computers Surroundings Page Basic Conguration Save/Load Conguration Standalone Telecommuting Module, SIP server on the outside Page Standalone Telecommuting Module, SIP server inside Page DMZ/LAN Telecommuting Module, SIP server on the outside Page DMZ/LAN Telecommuting Module, SIP server inside Routing Interoperability Page Page Chapter 5. The Serial Console Connecting to the serial console Main Menu 1. Basic conguration 2. Save/Load conguration Basic conguration IP address Physical device name IP address Netmask/bits Conguration computers Congure from a single computer Congure from multiple computers Password Save/Load conguration Load preliminary conguration Load both congurations and apply Save preliminary conguration Save permanent conguration Become a failover team member Leave failover team and become standalone Wipe email logs Set password Exit admin Chapter 6. Basic Conguration Basic Conguration Name of this TelecommutingModule Default domain IP policy Default Gateways DNS name or IP address IP address Gateway Reference Hosts DNS name or IP address Access Control Conguration Allowed Via Interface User Authentication Conguration Transport Conguration via HTTP Conguration via HTTPS Conguration Computers DNS Name Or Network Address Network Address Netmask/Bits Range RADIUS RADIUS Servers Identier Contact IP Address Status for RADIUS servers Conguration of a RADIUS server SNMP SNMP v1 and v2c SNMP v3 SNMP Traps Download the 3Com MIB Certicates Private Certicates Create certicate or certicate request Page CA Certicates Information Telecommuting Module Type The DMZ Conguration The DMZ/LAN Conguration The Standalone Conguration Telecommuting Module Typeconguration Current TelecommutingModule Type Page Chapter 7. Network Conguration Networks and Computers Name Subgroup Lower Limit DNS Name Or IP Address IP Address Upper Limit Interface (Network Interface 1 and 2) Physical device name Status Interface name Directly Connected Networks Alias Static routing Routed network Router VLAN Interface Status Surroundings Page Chapter 8. SIP Services Administration of SIP Basic SIP media port range SIP Servers To Monitor Logging Log class for SIP signaling Log class for SIP packets Log class for SIP debug messages Interoperability Loose routing Relaxed Refer-To Remove VIA headers Translation exceptions Preserve username Loose username check SIP URL encryption Page Force Record-Route For All Requests Force remote TLS connection reuse Page Sessions and Media Session Conguration Requests Maximum number of retransmissions for non-INVITE requests Remote SIP Connectivity STUN Server STUN server function STUN server IP addresses STUN ports Remote NAT Traversal Remote NATtraversal Re-REGISTER period for clients Use OPTIONS for registered clients OPTIONS interval Chapter 9. SIP Trafc SIP Methods Routing Domain or IP address Port Class 3xx message processing Forward class 3xx messages DNS Override For SIP Requests Domain Relay to Session Status Registered Users Active Sessions Chapter 10. Administration Save/Load Conguration Test Preliminary Conguration Duration of limited test mode Apply conguration Backup Save to diskette Load from diskette Save to local le Load from local le Show conguration User Administration Password For the admin Account Other Accounts Currently Logged In Administrators Log out Upgrade Upgrade Step 1 Step 2 Step 3 Table Look Edit Column Always have an Edit column Sometimes have an Edit column Never have an Edit column Date and Time Change Time Zone Change Date and Time Manually Date Time Set date and time manually Change Date and Time With NTP Restart Page Chapter 11. Logging Display Log Packet TypeSelection IP Address Selection Protocol/Port Selection All IP protocols TCP/UDP ICMP Beside the boxes Show newest at top Time Limits Periodical search Show This The log Display Load Time Period Interface Page Resource Monitoring Logging Conguration Inbound trafc Warnings VPN events SIP events Log Classes Log Sending Page Chapter 12. Failover Specication of failover Requirements Features Failover Telecommuting Module setup Failover Settings Dedicated interface The dedicated interface to use Dedicated network Failover type Reference Hosts Failover Status Failover Status Failover team Leaving a failover team Page Chapter 13. Tools Packet Capture Network Interface Selection IP Address Selection Protocol/Port Selection All IP protocols TCP/UDP ICMP ESP Collect data Chapter 14. Firewall and Client Conguration The DMZ type The Firewall The SIP clients The DMZ/LAN type The Firewall The Standalone type Page Appendix A. More About SIP The SIP protocol Why use SIP? SIP and rewalls SIP sessions Establishing a SIP session Appendix B. Troubleshooting Network troubleshooting No trafc shown in the log Trafc discarded as spoofed SIP troubleshooting VPN troubleshooting No IPsec tunnel established IPsec tunnel established, no trafc IPsec tunnel established, no trafc after some time Administration troubleshooting The Telecommuting Module is unaccessible forsome time when trying to apply a conguration Appendix C. Lists of Reserved Ports, ICMP Types and Codes, and Internet Protocols List of the most important reserved ports Page Page List of ICMP types ICMP codes Page Internet protocols and their numbers IP intervals Page Reserved IP addresses Appendix D. Denitions of terms Page Page Page Page Page Page Appendix E. License Conditions GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Preamble GNU GENERAL PUBLIC LICENSE Page Page GNU LESSER GENERAL PUBLIC LICENSE Version 2.1, February 1999 Preamble GNU LESSER GENERAL PUBLIC LICENSE Page Page Page The Python license Terms and conditions for accessing or otherwise using Python CWI PERMISSIONS STATEMENT AND DISCLAIMER Python Imaging Library The BSD license The MIT license The DHCP license The OpenSSL license The bzip2 license The lilo license The Vovida license The VovidaSoftware License , Version1.0 The Cavium license The Cavium License The zlib license Appendix F. Obtaining Support for Your 3Com Products Register Your Product to Gain Service Benets Solve Problems Online Purchase Extended Warranty and Professional Services Access Software Downloads Telephone TechnicalSupport and Repair Asia, Pacic Rim - TelephoneTechnical Support and Repair Europe, Middle East, and Africa - TelephoneTechnical Support and Repair Latin America - Telephone TechnicalSupport and Repair US and Canada - Telephone TechnicalSupport and Repair Index