154 | Black Box LRA005A-R2, LRS002A-R2, LRA001A-R2 guide

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER REFERENCE MANUAL

1.7.5IPX FILTER EXAMPLES

NetBios packets are broadcasted constantly from NetBios hosts, often raising the link on a Router enough to incur unnecessary phone charges. The following filter blocks NetBios packets (destination any.any.455) on all interfaces.

(ipx)kansas> filter add -d 0.0.455 -t deny

To block these packets on a single interface, like modem0, enter:

(ipx)kansas> filter add -i modem0 -d 0.0.455 -t deny

154

Image 154

Black Box LRA005A-R2, LRS002A-R2, LRA001A-R2 manual 154

Contents

Async Router AR-P Async Router AR-5 Sync Router Page Federal Communications Commission Trademarks USER’S Guide Contents Async Router AR-P, AR-5, and Sync Router USER’S Manual Appendix B Line Use 120 Ieee 802.3 AUI, DB15 Connector SpecificationsConnector Specifications General Power Input Connector BASE-T, RJ-45 8-Pin ConnectorDB9 Connector RJ-11 Connector Applications IntroductionRouter Models Shared Router Features Prevents Unauthorized Network Access Example For digital data service Async Router AR-5 LRA005A-R2 FeaturesSync Router LRS002A-R2 Features For switched-56 data service Async Client Kit For Isdn serviceOperating Requirements Async Router AR-P, AR-5, and Sync Router USER’S Manual Connect Cables Inventory Async Router AR-P Connections Async Router AR-P Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Async Router AR-5 Connections Async Router AR-5 Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Sync Router Connections Sync Router Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Five Methods to Configure the Router Software Connect Host If you have a previously configured boot diskette If you have a previously configured boot diskette Select Host Connection Method Host Connection Methods This configuration requires the TCP/IP protocol on your LAN Procedure PC Using RouterVu Utility This configuration requires NetWare IPX protocol on your LAN Snap PC Using Serial Terminal Utility Async Router AR-P, AR-5, and Sync Router USER’S Manual Serial Terminal Async Router AR-P, AR-5, and Sync Router USER’S Manual Installation Summary Install SoftwareInstallation Procedure Async Router AR-P, AR-5, and Sync Router USER’S Manual Installation Examples Async Router AR-P, Async Router AR-5 Define LAN Parameters Define LAN parameters for local Router Define modem0 parameters Define Modem ParametersDefine modem1 if present Define modem3 if present Define client access shift for this Router Define modem4 if present Define clients Sync Router Define Sync/Modem Parameters Name and Password Syntaxes Parameters LAN Parameters IP Subnet Mask Default Values by Class Bits If you want to use a SecurID server Domain Name Suffix TypesIf you want to use a Radius server Async Router AR-P, AR-5, and Sync Router USER’S Manual Sync Router Parameters Public server IP address Do you want the firewall described in the documentation?Do you allow Telnet to the server n Client access shift-Refer to Section Configure Hosts on TCP/IP Network Configure and TestRouterlPaddress Routername Test TCP/lP Networks Using Ping Route add remotelPaddresslocalRouterIP addressl Refer to l Ping -sIPaddressofremoteRouter Enter syslog on Ping IPaddressofaremotenodePing -sIP address of localRouter Round trip time AASYNC Router AR-P, AR-5, and Sync Router USER’S Manual Test IPX Networks Using RouterVu IPX RouterVu tests Routervu -plocalRoutername Look for called out or serving call Routervu localRouternameLook for Ipxcp Opened Routervu -p servername Appendix a Networking Examples Dialup LAN-to-LAN Hamburg Passwd file paris / all2paris Name hamburg Paris HOME/BRANCH Office Designation Home Branch LAN-to-LAN Async Router Figure A-5. Modem as a Backup for a Synchronous Connection Synchronous LAN-to-LAN Routing table entries are Sync Router a How to Monitor Line Use Appendix B Line Use Dialup modemX volume off low medium high How to Limit Line Use Dialup interface quota mins Typical status display is List of predefined IP filters Filter add $FAKE25 -i iface -p tcpnew -s 25 -t deny Filter add $OUTOK -f outbound -t allowFilter add $TCPOK -p tcpestab -t allow Filter add $NOLOOP -s 127.0.0.0/8 -t deny How to disable the NLO filters How to enable all RLO filtersSimple IP filter example Long IP filter example #These filters will allow mail to and from the host After filtering, reestablish dialup time quotas Appendix C Troubleshooting LED descriptions Async Router AR-P Leds Async Router AR-5 Leds Sync Router Leds Router Commands For TCP/IP Networks only Syntax Examples Initial Configuration/Start-up Problems Routervu c 1995 Rockwell Network Systems Building list Async Router AR-P, AR-5, and Sync Router USER’S Manual Router Cannot START-LEDS Stay LIT Password -pnewpassword Following message displays during configuration AT Return Operating Problems Pause + + + pause Ping -sipaddressof localnode Ping ipaddressoflocalnodeApproach Ping ipaddress of remoteRouter Network Protocol Phase open for Async Router AR-P, AR-5, and Sync Router USER’S Manual Possible cause-CHAP failure 100Time interfaceDialing from address to address protocol 101 102 Client Problems 103 Returning Your Router for Repair 104 Radius Servers ConfigurationAppendix D Interoperability 105 SecurID Servers 106 Cd /var/ace Config modify107 Bin Put sdconf.rec Quit Cisco Router Interoperability 108 Table D-1. Cisco Command Language Modes and Their Uses 109 110 Ethernet Connection Cisco to Router Synchronous line Cisco to Router 111Dialup connection Cisco to Router 112 Figure D-2. Dialup Connection Cicso to Router 113 Dialing Out Cisco to Modem to Router \T-meansinsert the telephone number here 114Cisco dialer script for Router 115 IPX Synchronous RoutersTCP/lP Synchronous Routers This information only applies to the Sync Router Black BOX CSU/DSU MS, Eazy CSU/DSU MS, Adtran DSU III AR Interoperability with CSU/DSUs116 Local network options Network options 117Adtran ISU DTE options 3 CM-1056E, Larse S5600, RACAL-MILGO4556 118Motorola TA220/TA220K 119 Other CSU/DSUS Appendix E Glossary 120 121 122 IPXWAN-internet packet exchange protocol for WANs 123 124 125 126 Router Parameters Appendix F Installation ReferenceRoot and root passwords 127 Router Default route through Eth0 sync0 modem0128 Pick one only 129 Client Authentication Method choose one method onlyEthernet Parameters Ethernet eth0 port Sync0 port For Sync Router only Sync Parameters130 Remote Site via a leased line 131 If this modem is to be used for remote client accessModem Parameters If the Remote System is a Router 132 133 For each Client Client Parameters PlannerFor the Router 134 Link Password Example Router Link Passwords Example/Worksheet135 On Router Link Passwords Worksheet Your Site136 Remote Sites Site0 Reference Guide 137 138 Contents 140 Interface Addresses Quick ReferenceConventions Used in This Chapter 141 Generic Commands 142 143 Update iface timeout mins Update iface now Update iface init on off144 145 TCP/IP-only Commands 146 Netstat -a -s -r -m 147Rip accept routeraddr Rip duplicate on off rip merge on off RouterVu Commands148 Route 149 150 List to screen all available Routers 151 General InfoAbout TCP/IP and IPX modes CONFIG.NET file supporting TCP/IP and IPX routing CONFIG.NET Example152 153 154 Generic Commands 155 156 Access shiftSyntax Access shift shiftstart shiftstop Mtwrfsu Description 157 See also client access client add client modifyAsystat Syntax Asystat iface iface 158 Asystat modem0 Subcommands and parameters Authenticate159 160 ClientClient add -e clientname 161 Date ConfigConfig firewall iface 162 163 DefaultmodeConfig reset modify Ipx Tcpip Specifies seconds and is optional Dialup Syntax Line mode dialer commands164 Iface modem0-4, sync0 165Dialup iface demandbackoff phone# secs 166 Dialup iface backup add phone#Disconnecting the backup number on the next dialup Modem0-4, sync0 Dialup iface idletime secs Dialup iface loginname name167 Dialup iface inactive 168 Dialup iface loginpwd passwordDialup iface reset Dialup iface logprompt on off Dialup iface script file Dialup iface volume off low medium high169 Dialup iface warning mins History Help170 Logout Hostname171 Passwd MemoryMonitor 172 173 PerformancePerformance 174 18 pppIpcp negotiation 175 Iface Physical interface 176Allow on off Chap 177Ppp iface lcp local remote accm bitmap allow on off Pap Ppp iface lcp local remote acfc On off allow on off Ppp iface lcp local remote default178 Ppp iface lcp local remote magic On off value allow on off Ppp iface lcp timeout seconds 179 180 181 19 psSyntax Description Start/stop RebootReboot 182 Trace 22 tip183 Eth0, modem0-4, sync0 24 tux184 Limit traces to packets received on the interface Update iface now Update185 27 who Version186 IPX-only commands 187 188 189 IPX AddressesReserved Destination Socket Numbers Example IPX addresses 190 IPX Server TypesTable B-2. Typical IPX Server Types 191 IPX Packet TypesFilter Table B-3. IPX Packet Types Filter add name 192Iface-eth0, modem0-4, sync0 Filter delete name Filter enable disable193 Filter flush 194 IfconfigIfconfig iface speed bps Filter status 195 Ipx priority Ipx routing enable disable ipx spxIpx Number Netstat 196 Ping Subcommands and parameters Ping servername197 Ping -sservername routername network.nodeaddress Ripfilter198 Ping -sservername routername network.nodeaddress count Ripfilter add name 199Allow deny nodial 200 Route 201 Iface-modem0-4, sync0 202Iface-eth0 203 Route -f Route add 2F eth0/II 02CF1F302018 6 204Route add 12 modem0 Route delete Route delete 2F 13 sap 205 Sap add name iface /frametype servertype serveraddr hops Sap broadcast iface /frametype enable disable206 Sap delete name 207 Sap -f Sapfilter 208 209 Sapfilter delete name Sapfilter enable disable210 Sapfilter flush Sapfilter status Spoof211 Filter Ripfilter 16 tcp/ip Syntax Tcp/ip tcp/ipcommand param DescriptionRouter is in IPX mode 212 TCP/IP-only Commands 213 214 ArpArp 215 Arp -f Domain listservers Domain216 Domain suffix domainsuffix P, -l, -i, or -f 217Syslog trap both -i iface Inbound outbound Ssrcaddr/bits srcport Ddestaddr/bits destport 218Syslog trap both Iface-eth0, modem0-4, sync0 Inbound outbound 219Allow deny nodial unreach Filter spoof iface allow deny syslog trap Icmp220 Filter try srcaddr -sport destaddr -dport -pproto 221 Mtu size 222Metric hops Rip active passive off 223 SubcommandsIp address hostaddr Syntax Ipx ipxcommand param Description 224 Subcommands and protocols Ping destaddr 225 Rip netmask list 11 rip226 Rip add hostaddr seconds flags Rip duplicate on off 227Rip delete hostaddr Rip merge on off Rip netmask delete netaddr/netbits 228Route lookup destaddr Route add destaddr/bits iface routeraddr metric Route add default iface routeraddr metric229 Route addprivate destaddr/bits iface routeraddr metric Route delete destaddr/bits iface Snmp230 Snmp set community communityname -p ro rw -t on off Snmp set authtrap on off 231Snmp delete community communityname Snmp set contact contactstring 232 SyslogSyslog on off Syslog class classvalue 233Syslog address hostaddr Syslog message messagestring 234 Tcp reset tcbaddr15 tcp Syslog status Tcp status tcbaddr Traceroute235 Tcp window size 236 17 udpUdp status Appendix a System Messages 237 Chap Group Syslog Messages238 Iface Chap peer says salutationstring Iface dialer script failed failuremessage 239Iface Dialing for destinationaddr 240 Iface line speed modemlinespeed 241 Iface V.25bis call failed reasonreturned 242 PAP Group 243IPX Group RIP Group Snmp Group Console Messages244 ARP Group 245 Ipfilter Group Ifconfig Group246 Iproute Group 247 Ping Group 248PPP Group 249 System Group TCP Group 250TIP Group Trace Group 251Traceroute Group Appendix B Dialing Scripts Standard Dialing Procedure252 Dialer Script Procedure 253 Wait Sample Dialer Script254 Wait msec string Wait msec string speed Logging into Remote Systems Using Dialer Scripts 255 AT Return 256Dialup modemX inactive tip modemX Atdt 1-xxx-yyy-zzzzRETURN 257 Control the Modem Speaker’s Volume Modem Control SignalsDialup iface loginpwd loginpwd 258 259 Use Routers to New Features, ReleaseAppendix C Release 4.2 Notes 260 Sync Router Only 261 Generic Issues Outstanding Issues, ReleaseSpecial Outstanding Issues For All Routers TCP/IP Mode Issues 263 264 Reconfigure Your Local VLM-Based Clients RouterVu IssuesUsing NetWare Over Modem Lines NetWare Dialup Considerations, Release 266 How to Upgrade to ReleaseMethod 2 If you do use custom dialer scripts 267 If you have the boot diskette and prefer to use a DOS hostFtp nhipaddr Use the Router’s IP address How to Make Previous Releases Compatible with Release 268 Using Analog Leased Lines? 269 270 271 Connecting to an Internet Service Provider ISP?Intended IP addresses at your site Ppp iface pap user username password for PAP config save 272 273 Ppp iface chap user username password For ChapSample dialer script 274 Copyright 1996. Black Box Corporation. All rights reserved