Cabletron Systems 1000, 1200 manual Example Networks, Configuring The Security, CyberSWITCH

EXAMPLE NETWORKS

The interface name is a symbolic name given to the interface. For the WAN (RLAN) interface, you should use a name that describes this interface. Type Satellites for this example.

You will then be asked for the IP address for the interface. In our example, the value you should enter is 198.12.10.1. You will then be asked for the IP subnet mask value. In our example, we are using a Class C address (without any subnetwork addressing) that requires 24 bits of the address to define the network number. Therefore, press <return> to accept the default of “24” significant bits. Press <return> to accept the default packet encapsulation type (Ethernet). Press <return> to accept the default of 1500 as the MTU size. Press <return> to accept the default transmit broadcast address.

The rest of the RLAN interface information requested pertains to the Proxy ARP and, if you have not disabled RIP, the RIP feature. Accept all of the default values, or modify as needed.

The following screen will summarize the configured interfaces:

Current INTERFACES:
id Name		Type	IP address	Mask
-- -----------------		---------------------- --------------- ---------------
1	corpoffice	LAN	128.1.1.1	255.255.0.0
2	satellites	WAN (RLAN)	198.12.10.1	255.255.255.0

(1) Add, (2) Change, (3) Delete, (4) Display a INTERFACE or press <RET> for previous menu?

Return to the Main Menu.

CONFIGURING THE SECURITY

This example has two remote devices, and the device information for each of those devices must be configured. Device security is used, and the remote devices are configured in the on-node authentication database. Device security using an on-node authentication database are the default values.

Before beginning, note the following:

This is a system configuration using IP Routing and Bridge MAC Address Security. We will disable IP routing so that the system will recognize particular devices as a remote bridges. When configuring device-level bridging information for each remote bridge, we will provide the following elements: Device Name, Device Type, Bridge Ethernet Address and associated password, and the IP (Sub-) Network Number of the remote LAN.

Note that there may be multiple remote bridges and LAN segments on the subnetwork 198.12.10.0. (Our example includes two.) When using the RLAN interface, you are only required to enter the subnetwork address of the IP network when configuring each device. In this example, the host at Carmel is 198.12.10.2, and the host at Monterey is 198.12.10.3; but when configuring each device (i.e., bridge) you only enter the IP subnetwork number 198.12.10.0.

To begin the security configuration, press 3 at CFGEDIT’s Main Menu. The Security Configuration Menu will then be displayed. The sections below provide instructions for configuring security information.

54 CyberSWITCH