Manuals / Black Box / Computer Equipment / Network Router

Black Box LRU4240 manual Configuring the Firewall

Models: LRU4240

1 218

Download 218 pages 43.37 Kb

Page 64

Dual Trunk E1 Router

Configuring the Firewall

For instructions on setting the firewall refer to “Configuring the Firewall” on page 61.

52

SALES: 0870 90 10 750

Dual Trunk E1 Router User’s Guide

Image 64

Black Box LRU4240 manual Configuring the Firewall

Contents

LRU4240 0118 96 560870 90 10 0118 96 55Austria Sweden France ItalyDeutschland Denmark Switzerland SpainCopyright ISO Compliance Dual Trunk E1 Router User’s Guide Technical 0118 96 56Regulatory Information Customer InformationPreface Access Configuration Bridging Configuration Firewall Configuration Troubleshooting Appendix B, Cable and Connector Pin Assignments 101 Dual Trunk E1 Router Dual Trunk E1 Router Dual Trunk E1 Router Dual Trunk E1 Router Index 203 Dual Trunk E1 Router Dual Trunk E1 Router Dual Trunk E1 Router Dual Trunk E1 Router SALES0870 90 10 Audience PrefaceOrganization Symbols ConventionsTypeface or Symbol Purpose Example TypographyBlack BOX Technical Support Telephone 0118 96 56Returning a Unit Send US Your CommentsBlack Box All suggestions and comments are appreciatedProduct Overview Product OverviewApplications Dual independent links applicationLoad balancing RedundancyMultilink application Monitoring Higher Protocol Layers Monitoring the Entire WAN Protocol StackProvided with Level 2 Option for Level 2 Installation Package ContentsBefore YOU Install Site Requirements Unpacking and Checking EquipmentInstalling the Dual Trunk E1 Router InstallationInstallation Using AC Power Installation Using DC Power Back Panel View-Ports and Ground StudDual Trunk E1 Router Navigating the Front Panel Terminal SetupButton Function 7 8 9 j k l m DescriptionDefault Display Configuration OptionsFront Panel Display EFS FieldFollowing table lists the configuration options Test OptionsOption Definition Self Test appears on the displayTerminal User Interface Mode Monitor Option Write AccessMonitor Options To Stop a TestTerminal Interface Navigation Setting a Menu ParameterAttaching to a Terminal Using the Ethernet port as management interface Using Terminal SoftwareTerminal Setup Hyperterm Windows SetupCOM1 Properties box appears for Port Settings Type a File Name, choose an icon then click OKSet the following Logging On from a Terminal Logging Off from a Terminal Adjusting Comm Port SettingsLogging on from a Telnet Connection Assigning User Passwords Configuring Access RightsEnter the Normal User or Super User password Overview of Access Configuration Access ConfigurationProcedure Description Menu Reference Dual Trunk E1 Router Configuring LAN Interface Setting ID, DATE, TIME, and Network TimingUnit Configuration− Menu 4A Procedure StepsDate Main/Alt Sync INT, NET1, NET2Configuring Timeslot Allocations Net Configuration and StatusSet allocation type to Contiguous Configuring WAN Protocol Configuring Single Link PPP InterfaceConfiguring independent PPP links Interfaces Configuring Mlppp InterfaceConfiguring PPP Protocol Parameters Procedure PurposeConfiguring single link Frame Relay Configuring independent Frame Relay linksConfiguring Multilink Frame Relay Configuring Frame Relay DLCIsConfiguring Slip Manual Dlci configurationProcedureSteps Mapping DLCIs to IP AddressesConfiguring TUI Access Rights Configuring Radius AuthenticationSelect Authentication Retries Select Authentication Response TimeoutConfiguring Snmp ENABLING/DISABLING Traffic MonitoringConfiguring Time and Date Synchronization Configuring Dhcp Select Menu-$KOverview of the Configuration Bridging ConfigurationBridging Configuration Vlan Forwarding support Managing the unit in Bridging modeBridging Application Examples Dual Trunk E1 Router Configuring Bridging Configuring static MAC Bridge RoutesSelect Menu-$A Set Bridge Route Aging Time in secondsDisplaying MAC to Port Map Table Select Menu-$GASet the Action field to Add Select the Action field of the entry you want to deleteConfiguring the Firewall Routing Configuration Configuring Routing Mode Configuring Default GatewayConfiguring Static Routes Select the Destination IP field of an inactive route Set the Action field 5 to AddConfiguring NAT Configuring Dynamic RoutingLoad balancing over independent links NAT Configuration menus Menu DescriptionConfiguring NAT for single link ISP Select menu-$JAGlobal Map TableSelect Menu-$JC Select menu-$JESingle link Internet Example Configuring NAT for MultihomingSet subnet mask to NET1 to ISP1 with single global IP address Configuring NAT for Internet access and Frame Relay networkNET2 to ISP2 with 4 global IP address starting from Configuring bundled internet access and Frame Relay network Firewall Configuration Configuring the FirewallSelect the Ord field 1 of an inactive route line To add an entry to the access listSelect the Status field 6 of the selected active route Diagnostics Indicators DescriptionRequired Tools and Equipment Performing Tests from the Front PanelLoopback Tests Loop NET TestLoop Payload Test Loop Up Remote and Loop Down Remote TestsPattern Tests QRW Pattern TestOther Pattern Tests Send Test Type Pattern Test DescriptionLamp Test Performing Diagnostics from the Terminal Menu-9 DiagnosticsMenu-9A Physical Layer Diagnostics Performing Diagnostics from TelnetLink Layer Diagnostics and Delay Monitoring TestLink-based Testing for Public Packet Networks Delay Monitoring for TCP/IPNon-Disruptive Testing Menu-9B-Link Layer DiagnosticsSelect the test packets length Select the Test LengthPress S to start the test Dual Trunk E1 Router Monitoring and Management Monitoring and ManagementTerminal User Interface Access Methods Monitoring PerformanceDisplaying Performance Reports Performance Report MenusDays. up to 32 screens Event Log Performance Data Report EventsEvent Description Delay Monitoring Routing MonitoringMonitoring Status Menu-1 Main StatusMenu-2 Data Status IN-BAND ManagementIn-band Network Registers, 24 Hour Detail Protocol DirectoryField Definition FTP Control FTP Data Telnet Smtp e-mailProtocol Distribution Network Layer and Application Layer Host TablesNetwork Layer and Application LayerMatrix Tables Dual Trunk E1 Router Configuring Alarm Conditions AlarmsHow Alarm Reports Are Displayed Menu-8 Alarm Menu-8A Alarm ConfigurationMenu-8C Miscellaneous Management Configuration Menu-8E Modem Initialization StringsTroubleshooting Troubleshooting the UnitUnit Problems Symptom Probable Cause SolutionUnit Problems 2 Unit Problems 3 Network Problems Ctrl-LNetwork Problems 2 Network Problems 3 Network Problems 4 Dual Trunk E1 Router Specifications Technical SpecificationsPerformance LRU4240 Network InterfacePower Options LRU4240 DiagnosticsPhysical EnvironmentalAlarm Parameters Configuration Factory Default Settings Your Configuration Dual Trunk E1 RouterModem String Configuration Comm Port and Terminal ConfigurationEthernet Configuration 100 Sales 0870 90 10 Cable and Connector Pin Assignments RJ48 Pin SignalE1 Network PIN Assignments Dual Trunk E1 Router User’s Guide Technical 0118 96 56 101RJ45 Pins Signal Description Communication Port PIN AssignmentsDE-9 to DB-25 Adapter Pin Assignments Table B-7 describes the Comm Port RJ45 pin assignmentsSoftware Upgrade Using the Download Menu UtilitySetting Up for Tftp Software DownloadError Error Type Indicator Description Message Error IndicatorsAbnormal Termination Group Field Description Download Aborted by UserDual Trunk E1 Router User’s Guide Technical 0118 96 56 105 Programming software upgrades remotely 106 Sales 0870 90 10Changing software SOFTWARE-ONLY UpgradesDual Trunk E1 Router User’s Guide Technical 0118 96 56 107 108 Sales 0870 90 10 Menu Number Name Description MenusDual Trunk E1 Router User’s Guide Technical 0118 931 109 119 110 Sales 0118 965 Dual Trunk E1 Router User’s GuideUp to 32 screens Dual Trunk E1 Router User’s Guide Technical 0118 931 111127 112 Sales 0118 965 Dual Trunk E1 Router User’s GuideParameter Parameter-Options Definition Devices on the same network IP Address/LenIcmp Redirect 114 Sales 0118 965Parameter Parameter Options Definition Dual Trunk E1 Router User’s Guide Technical 0118 931 115Default Disabled DefaultParameter Parameter- Options Definition 116 Sales 0118 965Indication Description Default 0%Technical 0118 931 117 Event Default Background Block Error BBE 118 Sales 0118 965Outage State Dual Trunk E1 Router User’s Guide Technical 0118 931 119Last Sample Time 120 Sales 0118 965FCS Errors Carrier Sense ErrorsSingle Collisions Defer TransmitHeader Errors Received Address Errors ReceivedReassembly Required Reassembly SuccessfulErrors Transmitted Parameter Problems TxEchos Rx Echo Replies RxParameter Description Default 124 Sales 0118 965Dual Trunk E1 Router User’s Guide Technical 0118 931 125 Default Disabled How Often NET 1/2 FramingLine Impedence Time/Date Automatic SyncParamete Description Default Parameter Default Primary Parameter-Options Parameters Definition DefaultBlock All Alarms-Yes, No Carrier Loss Alarm-Enabled, DisabledRAI Received Alarm-Enabled, Disabled Normal User Password-text stringSuper User Password-text string DLC IBC Link Loss Alarm-Enabled or DisabledField Definition Options Default Current TestPattern Test 130 Sales 0118 965Pattern Error Counter CRC or CRC4 ErrorsFrame Error Event Code ViolationsType Parameter Definition Default PatternCurrent 132 Sales 0118 965Parameter-Definition Default Primary Parameter-Options Definition DefaultAddress Definition Indication DefinitionDhcp Server Dhcp RelayDual Trunk E1 Router User’s Guide Technical 0118 931 135 136 Sales 0118 965 Router Command Line Interface Reference Access to Router Command LineConfiguring the router automatically Select Menu-8X from the TUIRouter Command Line Help 138 Sales 0870 90 10Topic Description Dual Trunk E1 Router User’s Guide Technical 0118 96 56 139CLI Command Modes Mode DescriptionOspf to enter Ospf mode 140 Sales 0870 90 10Unit Command Reference Configure terminal Show running-configQuit Show unit idE1 framing E1 line-impedanceE1 timeslot Interface Ifname icmp-redirectInterface frame-relay dlci Interface enetInterface frame-relay lmi Interface frame-relay map Interface frame-relay map clearIp bridge static-route Ip dhcp-relayIp nat Ip nat globalIp nat local-addr Ip nat staticIp route default-gateway Ip route modeIp route bridge-route-aging-time Ip route load-balancingIp route vlan-id Ip route vlan-priorityIp static-route clear MultilinkT1 lbo T1 timeslotTime-sync Time-zoneUnit alarm Traffic typeUnit ansi-fdl Unit clockUnit yellow-alarm Wan-port in-serviceUnit modem Unit outageKernel Command Reference Interface IfnameDebug zebos events 152 Sales 0870 90 10Specifies the debug option-set for receive packet Command Syntax show running-configCommand Mode enable Command Mode Enable connected Connected154 Sales 0870 90 10 Router rip RIP Command ReferenceDebug rip Distance Ip rip receive-packetIp rip receive version Ip rip send-packetIp rip send version Ip rip send version 1-compatibleIp split-horizon Dual Trunk E1 Router User’s Guide Technical 0118 96 56 157Neighbor NetworkPassive-interface RouteCommand Syntax show debugging rip Command Mode Enable Command Syntax show ip protocols Command Mode EnableShow debugging rip Show ip protocolsCommand Syntax show running-configCommand Mode rip Command Syntax show ip rip Command Mode EnableTimers Show ip ripOspf Command Reference Area authenticationCommand Mode Router mode Usage VersionRelated Commands Area default-costArea export-list Area import-listCommand Mode Area rangeArea shortcut Dual Trunk E1 Router User’s Guide Technical 0118 96 56 163Area stub Area virtual-linkAuto-cost Dual Trunk E1 Router User’s Guide Technical 0118 96 56 165Debug ospf event Compatible rfc1583Debug ospf ism Debug ospf lsa Debug ospf nsmDebug ospf packet Debug ospf routeDebug ospf zebos 168 Sales 0870 90 10Default-information originate Default-metricCommand Syntax default-metric1-16777214 Dual Trunk E1 Router User’s Guide Technical 0118 96 56 169Command Syntax description Line DescriptionDistribute-list 170 Sales 0870 90 10Related Commands ip ospf authentication Ip ospf authentication-keyCommand Mode Interface mode Usage Ip ospf costIp ospf database-filter Usage 172 Sales 0870 90 10Related Commands ip ospf dead-interval Ip ospf hello-intervalDefault Broadcast type Command Mode interface mode Usage Equivalent CommandsIp ospf network Ip ospf priorityIp ospf retransmit-interval Related Commands ip ospf transmit-delayDual Trunk E1 Router User’s Guide Technical 0118 96 56 175 Login Command Syntax no login DefaultCommand Syntax match interface Ifname no match interface Match interfaceMatch metric Match route-type externalMatch tag Dual Trunk E1 Router User’s Guide Technical 0118 96 56 177Network area 178 Sales 0870 90 10Opaque-lsa-capable OpaqueDual Trunk E1 Router User’s Guide Technical 0118 96 56 179 Ospf authentication-key Ospf abr-typeOspf cost 180 Sales 0870 90 10Ospf dead-interval Ospf hello-intervalEquivalent Commands ip ospf hello-interval Command Syntax ospf priorityOspf network Ospf priorityOspf transmit-delay Ospf router-idCommand Mode 184 Sales 0870 90 10 Refresh timerRedistribute Command Syntax router-id Ipaddress Command Syntax no router ospfRouter-id Router ospfCommand Syntax no set metric-type Set next-hopSet tag 186 Sales 0870 90 10Command Mode Priviledged Exec mode Usage Command Syntax show ip ospfShow debugging ospf Show ip ospfShow ip ospf border-routers 188 Sales 0870 90 10Show ip ospf database Dual Trunk E1 Router User’s Guide Technical 0118 96 56 189Command Mode Priviledged Exec mode Usage Examples Show ip ospf database asbr-summaryShow ip ospf database external 190 Sales 0870 90 10Show ip ospf database network Dual Trunk E1 Router User’s Guide Technical 0118 96 56 191Show ip ospf database opaque-area 192 Sales 0870 90 10Show ip ospf database router Show ip ospf database opaque-linkDual Trunk E1 Router User’s Guide Technical 0118 96 56 193 Show ip ospf database summary 194 Sales 0870 90 10Show ip ospf interface Show ip ospf neighbor 196 Sales 0870 90 10Show ip ospf route Command Syntax show ip ospf routeDual Trunk E1 Router User’s Guide Technical 0118 96 56 197 Command Mode 198 Sales 0870 90 10 Command Syntax show ip protocolsShow memory all Dual Trunk E1 Router User’s Guide Technical 0118 96 56 199 Ospf LsdbShow memory lib 200 Sales 0870 90 10Show memory ospf Related Commands 202 Sales 0870 90 10 Timers spfSummary-address Index DataPasswords RequirementsIndex 205 206