Appendix D Interoperability, Radius Servers | Black Box LRS002A-R2

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

Appendix D: Interoperability

Routers can interoperate with multiple routers from multiple vendors in a coordinated manner. Use the instructions in this appendix to provide interoperability with:

•RADIUS servers

•SecurID servers

•Cisco routers

•IPX synchronous routers (Sync Router only)

•TCP/IP synchronous routers

•CSUs/DSUs (Sync Router only)

D.1 RADIUS Servers

RADIUS is a protocol that allows multiple devices (like the Router) to access a single server for authentication, authorization, and configuration information. This allows all names and passwords to be administered from a single point, greatly simplifying the task in environments where many devices are on the network.

RADIUS server software that executes on a UNIX host is available without charge. Source code is available from:

Livingston Enterprises at

ftp://ftp.livingston.com/pub/livingston/radius-1.16.tar.Z

or Merit® at: ftp://merit.edu/pub/michnet/radius.1.17.tar.Z

The Router has been tested with both of these types of RADIUS servers. If you have not previously run RADIUS, you should obtain a new copy of the software and compile it for your system, and follow its provided instructions.

The RADIUS documentation from Merit and Livingston refers to a Network Access Server (NAS). NAS is a generic term for a dial-in router.

Configuration

To use RADIUS to authenticate clients connecting to the Router, perform the following configuration steps:

1.Configure the RADIUS server to accept queries from the Router. To do this, add the Router’s name (or IP address) and password to the clients file on the RADIUS server.

For the Livingston RADIUS server, the default location of this file is /etc/raddb/clients. For the Merit RADIUS server, the default location of this file is /usr/private/etc/raddb.

2.Set the authentication method on the Router to RADIUS, and provide the name of the RADIUS server to the Router. To do this use config, or use the following commands.

105

Image 105

Black Box LRS002A-R2 manual Appendix D Interoperability, Radius Servers, 105, Livingston Enterprises at, Configuration

Contents

Async Router AR-P Async Router AR-5 Sync Router Page Federal Communications Commission Trademarks USER’S Guide Async Router AR-P, AR-5, and Sync Router USER’S Manual Contents Appendix B Line Use 120 Connector Specifications SpecificationsIeee 802.3 AUI, DB15 Connector General DB9 Connector BASE-T, RJ-45 8-Pin ConnectorPower Input Connector RJ-11 Connector Introduction ApplicationsRouter Models Shared Router Features Prevents Unauthorized Network Access Example Sync Router LRS002A-R2 Features Async Router AR-5 LRA005A-R2 FeaturesFor digital data service For switched-56 data service For Isdn service Async Client KitOperating Requirements Async Router AR-P, AR-5, and Sync Router USER’S Manual Inventory Connect Cables Async Router AR-P Connections Async Router AR-P Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Async Router AR-5 Connections Async Router AR-5 Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Sync Router Connections Sync Router Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Connect Host Five Methods to Configure the Router Software If you have a previously configured boot diskette If you have a previously configured boot diskette Host Connection Methods Select Host Connection Method This configuration requires the TCP/IP protocol on your LAN Procedure PC Using RouterVu Utility This configuration requires NetWare IPX protocol on your LAN Snap PC Using Serial Terminal Utility Async Router AR-P, AR-5, and Sync Router USER’S Manual Serial Terminal Async Router AR-P, AR-5, and Sync Router USER’S Manual Install Software Installation SummaryInstallation Procedure Async Router AR-P, AR-5, and Sync Router USER’S Manual Async Router AR-P, Async Router AR-5 Installation Examples Define LAN parameters for local Router Define LAN Parameters Define Modem Parameters Define modem0 parametersDefine modem1 if present Define modem3 if present Define modem4 if present Define client access shift for this Router Define clients Sync Router Define Sync/Modem Parameters Parameters Name and Password Syntaxes LAN Parameters Bits IP Subnet Mask Default Values by Class Domain Name Suffix Types If you want to use a SecurID serverIf you want to use a Radius server Async Router AR-P, AR-5, and Sync Router USER’S Manual Sync Router Parameters Do you want the firewall described in the documentation? Public server IP addressDo you allow Telnet to the server n Client access shift-Refer to Section Configure and Test Configure Hosts on TCP/IP NetworkRouterlPaddress Routername Route add remotelPaddresslocalRouterIP addressl Test TCP/lP Networks Using Ping Ping -sIPaddressofremoteRouter Refer to l Ping IPaddressofaremotenode Enter syslog onPing -sIP address of localRouter Round trip time AASYNC Router AR-P, AR-5, and Sync Router USER’S Manual IPX RouterVu tests Test IPX Networks Using RouterVu Routervu -plocalRoutername Routervu localRoutername Look for called out or serving callLook for Ipxcp Opened Routervu -p servername Dialup LAN-to-LAN Appendix a Networking Examples Hamburg Passwd file paris / all2paris Name hamburg Paris HOME/BRANCH Office Designation Home Branch LAN-to-LAN Async Router Synchronous LAN-to-LAN Figure A-5. Modem as a Backup for a Synchronous Connection Routing table entries are Sync Router a Appendix B Line Use How to Monitor Line Use Dialup modemX volume off low medium high Dialup interface quota mins How to Limit Line Use Typical status display is List of predefined IP filters Filter add $TCPOK -p tcpestab -t allow Filter add $OUTOK -f outbound -t allowFilter add $FAKE25 -i iface -p tcpnew -s 25 -t deny Filter add $NOLOOP -s 127.0.0.0/8 -t deny How to enable all RLO filters How to disable the NLO filtersSimple IP filter example #These filters will allow mail to and from the host Long IP filter example After filtering, reestablish dialup time quotas Appendix C Troubleshooting Async Router AR-P Leds LED descriptions Async Router AR-5 Leds Sync Router Leds Router Commands For TCP/IP Networks only Examples Syntax Routervu c 1995 Rockwell Network Systems Building list Initial Configuration/Start-up Problems Async Router AR-P, AR-5, and Sync Router USER’S Manual Router Cannot START-LEDS Stay LIT Password -pnewpassword Following message displays during configuration AT Return Pause + + + pause Operating Problems Ping ipaddressoflocalnode Ping -sipaddressof localnodeApproach Ping ipaddress of remoteRouter Network Protocol Phase open for Async Router AR-P, AR-5, and Sync Router USER’S Manual 100 Possible cause-CHAP failureTime interfaceDialing from address to address protocol 101 102 103 Client Problems 104 Returning Your Router for Repair Appendix D Interoperability ConfigurationRadius Servers 105 106 SecurID Servers 107 Config modifyCd /var/ace Bin Put sdconf.rec Quit 108 Cisco Router Interoperability 109 Table D-1. Cisco Command Language Modes and Their Uses Ethernet Connection Cisco to Router 110 111 Synchronous line Cisco to RouterDialup connection Cisco to Router Figure D-2. Dialup Connection Cicso to Router 112 Dialing Out Cisco to Modem to Router 113 114 \T-meansinsert the telephone number hereCisco dialer script for Router TCP/lP Synchronous Routers IPX Synchronous Routers115 This information only applies to the Sync Router 116 Interoperability with CSU/DSUsBlack BOX CSU/DSU MS, Eazy CSU/DSU MS, Adtran DSU III AR Local network options Adtran ISU 117Network options DTE options 118 3 CM-1056E, Larse S5600, RACAL-MILGO4556Motorola TA220/TA220K Other CSU/DSUS 119 120 Appendix E Glossary 121 IPXWAN-internet packet exchange protocol for WANs 122 123 124 125 126 Root and root passwords Appendix F Installation ReferenceRouter Parameters 127 128 Default route through Eth0 sync0 modem0Router Pick one only Ethernet Parameters Client Authentication Method choose one method only129 Ethernet eth0 port 130 Sync ParametersSync0 port For Sync Router only Remote Site via a leased line Modem Parameters If this modem is to be used for remote client access131 If the Remote System is a Router 132 133 For the Router Client Parameters PlannerFor each Client 134 Router Link Passwords Example/Worksheet Link Password Example135 136 Link Passwords Worksheet Your SiteOn Router Remote Sites Site0 137 Reference Guide 138 Contents 140 Conventions Used in This Chapter Quick ReferenceInterface Addresses 141 142 Generic Commands 143 Update iface now Update iface init on off Update iface timeout mins144 145 146 TCP/IP-only Commands 147 Netstat -a -s -r -mRip accept routeraddr 148 RouterVu CommandsRip duplicate on off rip merge on off Route 149 List to screen all available Routers 150 General Info 151About TCP/IP and IPX modes CONFIG.NET Example CONFIG.NET file supporting TCP/IP and IPX routing152 153 154 155 Generic Commands Syntax Access shift shiftstart shiftstop Mtwrfsu Access shift156 Description Asystat See also client access client add client modify157 Syntax Asystat iface iface Asystat modem0 158 Authenticate Subcommands and parameters159 Client 160Client add -e clientname 161 Config firewall iface ConfigDate 162 Config reset modify Ipx Tcpip Defaultmode163 Specifies seconds and is optional Syntax Line mode dialer commands Dialup164 165 Iface modem0-4, sync0Dialup iface demandbackoff phone# secs Disconnecting the backup number on the next dialup Dialup iface backup add phone#166 Modem0-4, sync0 167 Dialup iface loginname nameDialup iface idletime secs Dialup iface inactive Dialup iface reset Dialup iface loginpwd password168 Dialup iface logprompt on off 169 Dialup iface volume off low medium highDialup iface script file Dialup iface warning mins Help History170 Hostname Logout171 Monitor MemoryPasswd 172 Performance 173Performance 18 ppp 174Ipcp negotiation 175 176 Iface Physical interfaceAllow on off Ppp iface lcp local remote accm bitmap allow on off 177Chap Pap 178 Ppp iface lcp local remote defaultPpp iface lcp local remote acfc On off allow on off Ppp iface lcp local remote magic On off value allow on off 179 Ppp iface lcp timeout seconds 180 19 ps 181Syntax Description Reboot RebootStart/stop 182 22 tip Trace183 184 24 tuxEth0, modem0-4, sync0 Limit traces to packets received on the interface Update Update iface now185 Version 27 who186 187 IPX-only commands 188 Reserved Destination Socket Numbers IPX Addresses189 Example IPX addresses IPX Server Types 190Table B-2. Typical IPX Server Types Filter IPX Packet Types191 Table B-3. IPX Packet Types 192 Filter add nameIface-eth0, modem0-4, sync0 193 Filter enable disableFilter delete name Filter flush Ifconfig iface speed bps Ifconfig194 Filter status Ipx Ipx priority Ipx routing enable disable ipx spx195 Number 196 Netstat Subcommands and parameters Ping servername Ping197 198 RipfilterPing -sservername routername network.nodeaddress Ping -sservername routername network.nodeaddress count 199 Ripfilter add nameAllow deny nodial 200 201 Route 202 Iface-modem0-4, sync0Iface-eth0 Route -f 203 Route add 12 modem0 204Route add 2F eth0/II 02CF1F302018 6 Route delete Route delete 2F 205 13 sap 206 Sap broadcast iface /frametype enable disableSap add name iface /frametype servertype serveraddr hops Sap delete name Sap -f 207 208 Sapfilter 209 210 Sapfilter enable disableSapfilter delete name Sapfilter flush 211 SpoofSapfilter status Filter Ripfilter Router is in IPX mode Syntax Tcp/ip tcp/ipcommand param Description16 tcp/ip 212 213 TCP/IP-only Commands Arp 214Arp Arp -f 215 216 DomainDomain listservers Domain suffix domainsuffix Syslog trap both -i iface Inbound outbound 217P, -l, -i, or -f Ssrcaddr/bits srcport 218 Ddestaddr/bits destportSyslog trap both 219 Iface-eth0, modem0-4, sync0 Inbound outboundAllow deny nodial unreach 220 IcmpFilter spoof iface allow deny syslog trap Filter try srcaddr -sport destaddr -dport -pproto 221 Metric hops 222Mtu size Rip active passive off Subcommands 223Ip address hostaddr 224 Syntax Ipx ipxcommand param Description 225 Subcommands and protocols Ping destaddr 226 11 ripRip netmask list Rip add hostaddr seconds flags Rip delete hostaddr 227Rip duplicate on off Rip merge on off 228 Rip netmask delete netaddr/netbitsRoute lookup destaddr 229 Route add default iface routeraddr metricRoute add destaddr/bits iface routeraddr metric Route addprivate destaddr/bits iface routeraddr metric 230 SnmpRoute delete destaddr/bits iface Snmp set community communityname -p ro rw -t on off Snmp delete community communityname 231Snmp set authtrap on off Snmp set contact contactstring Syslog 232Syslog on off Syslog address hostaddr 233Syslog class classvalue Syslog message messagestring 15 tcp Tcp reset tcbaddr234 Syslog status 235 TracerouteTcp status tcbaddr Tcp window size 17 udp 236Udp status 237 Appendix a System Messages 238 Syslog MessagesChap Group Iface Chap peer says salutationstring 239 Iface dialer script failed failuremessageIface Dialing for destinationaddr Iface line speed modemlinespeed 240 Iface V.25bis call failed reasonreturned 241 242 IPX Group 243PAP Group RIP Group 244 Console MessagesSnmp Group ARP Group 245 246 Ifconfig GroupIpfilter Group Iproute Group 247 248 Ping GroupPPP Group System Group 249 250 TCP GroupTIP Group 251 Trace GroupTraceroute Group Standard Dialing Procedure Appendix B Dialing Scripts252 253 Dialer Script Procedure 254 Sample Dialer ScriptWait Wait msec string Wait msec string speed 255 Logging into Remote Systems Using Dialer Scripts Dialup modemX inactive tip modemX 256AT Return Atdt 1-xxx-yyy-zzzzRETURN 257 Dialup iface loginpwd loginpwd Modem Control SignalsControl the Modem Speaker’s Volume 258 259 Appendix C Release 4.2 Notes New Features, ReleaseUse Routers to 260 261 Sync Router Only Special Outstanding Issues Outstanding Issues, ReleaseGeneric Issues For All Routers 263 TCP/IP Mode Issues 264 Using NetWare Over Modem Lines RouterVu IssuesReconfigure Your Local VLM-Based Clients NetWare Dialup Considerations, Release How to Upgrade to Release 266Method 2 If you do use custom dialer scripts If you have the boot diskette and prefer to use a DOS host 267Ftp nhipaddr Use the Router’s IP address 268 How to Make Previous Releases Compatible with Release 269 Using Analog Leased Lines? 270 Connecting to an Internet Service Provider ISP? 271Intended IP addresses at your site 272 Ppp iface pap user username password for PAP config save Ppp iface chap user username password For Chap 273Sample dialer script 274 Copyright 1996. Black Box Corporation. All rights reserved