Date, 162, Config firewall iface | Black Box LRS002A-R2 specification

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER REFERENCE MANUAL

2.6 config

Configures the parameters required for the Router to operate properly. More sophisticated configurations must be accomplished with individual commands.

Syntax

config firewall iface config modify config reset config save config show

Description

config firewall iface

Configure an IP firewall on the iface interface. Refer to the User’s Manual for the list of IP filters used in the firewall.

config modify

Modifies the current configuration. Displays the current setting for each configuration item as it is entered and allows the user to change the value.

config reset

Resets the Router to its default state. This is useful if the administrator wants to completely clear out a previous configuration. When this configuration is done, the Router is rebooted.

config save

Saves the current configuration including all items set by individual commands, so that the Router will be properly configured at the next system start.

config show

Displays the current configuration as a list of individual commands executed when the Router is started.

2.7 date

Display or set the date

Syntax

date [yymmddhhmm [.ss]]

Description

Sets the Router clock’s current date and time to what you enter. Displays the clock’s current date and time if you do not enter anything.

Subcommands and parameters

date [yymmddhhmm [.ss]]

162

Image 162

Black Box LRS002A-R2, LRA005A-R2, LRA001A-R2 manual Date, 162, Config firewall iface

Contents

Async Router AR-P Async Router AR-5 Sync Router Page Federal Communications Commission Trademarks USER’S Guide Contents Async Router AR-P, AR-5, and Sync Router USER’S Manual Appendix B Line Use 120 Ieee 802.3 AUI, DB15 Connector SpecificationsConnector Specifications General Power Input Connector BASE-T, RJ-45 8-Pin ConnectorDB9 Connector RJ-11 Connector Introduction ApplicationsRouter Models Shared Router Features Prevents Unauthorized Network Access Example For digital data service Async Router AR-5 LRA005A-R2 FeaturesSync Router LRS002A-R2 Features For switched-56 data service For Isdn service Async Client KitOperating Requirements Async Router AR-P, AR-5, and Sync Router USER’S Manual Connect Cables Inventory Async Router AR-P Connections Async Router AR-P Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Async Router AR-5 Connections Async Router AR-5 Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Sync Router Connections Sync Router Connections Async Router AR-P, AR-5, and Sync Router USER’S Manual Five Methods to Configure the Router Software Connect Host If you have a previously configured boot diskette If you have a previously configured boot diskette Select Host Connection Method Host Connection Methods This configuration requires the TCP/IP protocol on your LAN Procedure PC Using RouterVu Utility This configuration requires NetWare IPX protocol on your LAN Snap PC Using Serial Terminal Utility Async Router AR-P, AR-5, and Sync Router USER’S Manual Serial Terminal Async Router AR-P, AR-5, and Sync Router USER’S Manual Install Software Installation SummaryInstallation Procedure Async Router AR-P, AR-5, and Sync Router USER’S Manual Installation Examples Async Router AR-P, Async Router AR-5 Define LAN Parameters Define LAN parameters for local Router Define Modem Parameters Define modem0 parametersDefine modem1 if present Define modem3 if present Define client access shift for this Router Define modem4 if present Define clients Sync Router Define Sync/Modem Parameters Name and Password Syntaxes Parameters LAN Parameters IP Subnet Mask Default Values by Class Bits Domain Name Suffix Types If you want to use a SecurID serverIf you want to use a Radius server Async Router AR-P, AR-5, and Sync Router USER’S Manual Sync Router Parameters Do you want the firewall described in the documentation? Public server IP addressDo you allow Telnet to the server n Client access shift-Refer to Section Configure and Test Configure Hosts on TCP/IP NetworkRouterlPaddress Routername Test TCP/lP Networks Using Ping Route add remotelPaddresslocalRouterIP addressl Refer to l Ping -sIPaddressofremoteRouter Ping IPaddressofaremotenode Enter syslog onPing -sIP address of localRouter Round trip time AASYNC Router AR-P, AR-5, and Sync Router USER’S Manual Test IPX Networks Using RouterVu IPX RouterVu tests Routervu -plocalRoutername Routervu localRoutername Look for called out or serving callLook for Ipxcp Opened Routervu -p servername Appendix a Networking Examples Dialup LAN-to-LAN Hamburg Passwd file paris / all2paris Name hamburg Paris HOME/BRANCH Office Designation Home Branch LAN-to-LAN Async Router Figure A-5. Modem as a Backup for a Synchronous Connection Synchronous LAN-to-LAN Routing table entries are Sync Router a How to Monitor Line Use Appendix B Line Use Dialup modemX volume off low medium high How to Limit Line Use Dialup interface quota mins Typical status display is List of predefined IP filters Filter add $FAKE25 -i iface -p tcpnew -s 25 -t deny Filter add $OUTOK -f outbound -t allowFilter add $TCPOK -p tcpestab -t allow Filter add $NOLOOP -s 127.0.0.0/8 -t deny How to enable all RLO filters How to disable the NLO filtersSimple IP filter example Long IP filter example #These filters will allow mail to and from the host After filtering, reestablish dialup time quotas Appendix C Troubleshooting LED descriptions Async Router AR-P Leds Async Router AR-5 Leds Sync Router Leds Router Commands For TCP/IP Networks only Syntax Examples Initial Configuration/Start-up Problems Routervu c 1995 Rockwell Network Systems Building list Async Router AR-P, AR-5, and Sync Router USER’S Manual Router Cannot START-LEDS Stay LIT Password -pnewpassword Following message displays during configuration AT Return Operating Problems Pause + + + pause Ping ipaddressoflocalnode Ping -sipaddressof localnodeApproach Ping ipaddress of remoteRouter Network Protocol Phase open for Async Router AR-P, AR-5, and Sync Router USER’S Manual 100 Possible cause-CHAP failureTime interfaceDialing from address to address protocol 101 102 Client Problems 103 Returning Your Router for Repair 104 Radius Servers ConfigurationAppendix D Interoperability 105 SecurID Servers 106 Cd /var/ace Config modify107 Bin Put sdconf.rec Quit Cisco Router Interoperability 108 Table D-1. Cisco Command Language Modes and Their Uses 109 110 Ethernet Connection Cisco to Router 111 Synchronous line Cisco to RouterDialup connection Cisco to Router 112 Figure D-2. Dialup Connection Cicso to Router 113 Dialing Out Cisco to Modem to Router 114 \T-meansinsert the telephone number hereCisco dialer script for Router 115 IPX Synchronous RoutersTCP/lP Synchronous Routers This information only applies to the Sync Router Black BOX CSU/DSU MS, Eazy CSU/DSU MS, Adtran DSU III AR Interoperability with CSU/DSUs116 Local network options Network options 117Adtran ISU DTE options 118 3 CM-1056E, Larse S5600, RACAL-MILGO4556Motorola TA220/TA220K 119 Other CSU/DSUS Appendix E Glossary 120 121 122 IPXWAN-internet packet exchange protocol for WANs 123 124 125 126 Router Parameters Appendix F Installation ReferenceRoot and root passwords 127 Router Default route through Eth0 sync0 modem0128 Pick one only 129 Client Authentication Method choose one method onlyEthernet Parameters Ethernet eth0 port Sync0 port For Sync Router only Sync Parameters130 Remote Site via a leased line 131 If this modem is to be used for remote client accessModem Parameters If the Remote System is a Router 132 133 For each Client Client Parameters PlannerFor the Router 134 Router Link Passwords Example/Worksheet Link Password Example135 On Router Link Passwords Worksheet Your Site136 Remote Sites Site0 Reference Guide 137 138 Contents 140 Interface Addresses Quick ReferenceConventions Used in This Chapter 141 Generic Commands 142 143 Update iface now Update iface init on off Update iface timeout mins144 145 TCP/IP-only Commands 146 147 Netstat -a -s -r -mRip accept routeraddr Rip duplicate on off rip merge on off RouterVu Commands148 Route 149 150 List to screen all available Routers General Info 151About TCP/IP and IPX modes CONFIG.NET Example CONFIG.NET file supporting TCP/IP and IPX routing152 153 154 Generic Commands 155 156 Access shiftSyntax Access shift shiftstart shiftstop Mtwrfsu Description 157 See also client access client add client modifyAsystat Syntax Asystat iface iface 158 Asystat modem0 Authenticate Subcommands and parameters159 Client 160Client add -e clientname 161 Date ConfigConfig firewall iface 162 163 DefaultmodeConfig reset modify Ipx Tcpip Specifies seconds and is optional Syntax Line mode dialer commands Dialup164 165 Iface modem0-4, sync0Dialup iface demandbackoff phone# secs 166 Dialup iface backup add phone#Disconnecting the backup number on the next dialup Modem0-4, sync0 Dialup iface idletime secs Dialup iface loginname name167 Dialup iface inactive 168 Dialup iface loginpwd passwordDialup iface reset Dialup iface logprompt on off Dialup iface script file Dialup iface volume off low medium high169 Dialup iface warning mins Help History170 Hostname Logout171 Passwd MemoryMonitor 172 Performance 173Performance 18 ppp 174Ipcp negotiation 175 176 Iface Physical interfaceAllow on off Chap 177Ppp iface lcp local remote accm bitmap allow on off Pap Ppp iface lcp local remote acfc On off allow on off Ppp iface lcp local remote default178 Ppp iface lcp local remote magic On off value allow on off Ppp iface lcp timeout seconds 179 180 19 ps 181Syntax Description Start/stop RebootReboot 182 22 tip Trace183 Eth0, modem0-4, sync0 24 tux184 Limit traces to packets received on the interface Update Update iface now185 Version 27 who186 IPX-only commands 187 188 189 IPX AddressesReserved Destination Socket Numbers Example IPX addresses IPX Server Types 190Table B-2. Typical IPX Server Types 191 IPX Packet TypesFilter Table B-3. IPX Packet Types 192 Filter add nameIface-eth0, modem0-4, sync0 Filter delete name Filter enable disable193 Filter flush 194 IfconfigIfconfig iface speed bps Filter status 195 Ipx priority Ipx routing enable disable ipx spxIpx Number Netstat 196 Subcommands and parameters Ping servername Ping197 Ping -sservername routername network.nodeaddress Ripfilter198 Ping -sservername routername network.nodeaddress count 199 Ripfilter add nameAllow deny nodial 200 Route 201 202 Iface-modem0-4, sync0Iface-eth0 203 Route -f Route add 2F eth0/II 02CF1F302018 6 204Route add 12 modem0 Route delete Route delete 2F 13 sap 205 Sap add name iface /frametype servertype serveraddr hops Sap broadcast iface /frametype enable disable206 Sap delete name 207 Sap -f Sapfilter 208 209 Sapfilter delete name Sapfilter enable disable210 Sapfilter flush Sapfilter status Spoof211 Filter Ripfilter 16 tcp/ip Syntax Tcp/ip tcp/ipcommand param DescriptionRouter is in IPX mode 212 TCP/IP-only Commands 213 Arp 214Arp 215 Arp -f Domain listservers Domain216 Domain suffix domainsuffix P, -l, -i, or -f 217Syslog trap both -i iface Inbound outbound Ssrcaddr/bits srcport 218 Ddestaddr/bits destportSyslog trap both 219 Iface-eth0, modem0-4, sync0 Inbound outboundAllow deny nodial unreach Filter spoof iface allow deny syslog trap Icmp220 Filter try srcaddr -sport destaddr -dport -pproto 221 Mtu size 222Metric hops Rip active passive off Subcommands 223Ip address hostaddr Syntax Ipx ipxcommand param Description 224 Subcommands and protocols Ping destaddr 225 Rip netmask list 11 rip226 Rip add hostaddr seconds flags Rip duplicate on off 227Rip delete hostaddr Rip merge on off 228 Rip netmask delete netaddr/netbitsRoute lookup destaddr Route add destaddr/bits iface routeraddr metric Route add default iface routeraddr metric229 Route addprivate destaddr/bits iface routeraddr metric Route delete destaddr/bits iface Snmp230 Snmp set community communityname -p ro rw -t on off Snmp set authtrap on off 231Snmp delete community communityname Snmp set contact contactstring Syslog 232Syslog on off Syslog class classvalue 233Syslog address hostaddr Syslog message messagestring 234 Tcp reset tcbaddr15 tcp Syslog status Tcp status tcbaddr Traceroute235 Tcp window size 17 udp 236Udp status Appendix a System Messages 237 Chap Group Syslog Messages238 Iface Chap peer says salutationstring 239 Iface dialer script failed failuremessageIface Dialing for destinationaddr 240 Iface line speed modemlinespeed 241 Iface V.25bis call failed reasonreturned 242 PAP Group 243IPX Group RIP Group Snmp Group Console Messages244 ARP Group 245 Ipfilter Group Ifconfig Group246 Iproute Group 247 248 Ping GroupPPP Group 249 System Group 250 TCP GroupTIP Group 251 Trace GroupTraceroute Group Standard Dialing Procedure Appendix B Dialing Scripts252 Dialer Script Procedure 253 Wait Sample Dialer Script254 Wait msec string Wait msec string speed Logging into Remote Systems Using Dialer Scripts 255 AT Return 256Dialup modemX inactive tip modemX Atdt 1-xxx-yyy-zzzzRETURN 257 Control the Modem Speaker’s Volume Modem Control SignalsDialup iface loginpwd loginpwd 258 259 Use Routers to New Features, ReleaseAppendix C Release 4.2 Notes 260 Sync Router Only 261 Generic Issues Outstanding Issues, ReleaseSpecial Outstanding Issues For All Routers TCP/IP Mode Issues 263 264 Reconfigure Your Local VLM-Based Clients RouterVu IssuesUsing NetWare Over Modem Lines NetWare Dialup Considerations, Release How to Upgrade to Release 266Method 2 If you do use custom dialer scripts If you have the boot diskette and prefer to use a DOS host 267Ftp nhipaddr Use the Router’s IP address How to Make Previous Releases Compatible with Release 268 Using Analog Leased Lines? 269 270 Connecting to an Internet Service Provider ISP? 271Intended IP addresses at your site Ppp iface pap user username password for PAP config save 272 Ppp iface chap user username password For Chap 273Sample dialer script 274 Copyright 1996. Black Box Corporation. All rights reserved