Carrier Access 770-0015 AM

IP Router - Release 1.8 5-31

Profile Directory:Remote Profile

Firewall Filters

3. Tab down to Setup: <Firewall Filters> scroll through the list of options with

the [SPACEBAR] if <Firewall Filters> is not displayed. Press [ENTER].

4. Press [CTRL A] to add an IP Firewall Rule.

5. Enter the parameters of the rule, pr ess [ESC] to close the window and save the

configuration. See page5-32 for a description of all fields for the Firewall

Setup window.

Remote

Profile

Window

Firewall

Filters

Window

Contents

Main IP Router Page P Preface Warranty Limitation of Warranty & Limitation of Remedies iv IP Router - Release 1.8 Warranty Product Returns TABLE OF CONTENTS Preface 1 2 3 4 5 6 7 8 9 10 11 A B C Page Introduction Overview Installation Install a Router Card Maneuvering in the System Fields Scroll Field Select Field Edit Field Page Connecting to the Router Establish a Telnet Session Set a New Password Management Window Management Overview Page System Date and Time Page Enhanced Security Management Window WARNING! Upload/Download WARNING! To Setup the Router for Uploads/Downloads Page Upload/Download Setup Menu Fields Page Load Defaults Page Page Profile Directory: Router Card Profile Page RIP Mode Receive RIP Mode Send Trunk Page Multilink Group Data Speed Security Authentication by Remote Profile Directory: Router Card Profile Authentication of Remote Protocol: CHAP, PAP or NONE Local Security Server Type Page Page SNMP Trap Destinations Page DNS Proxy Page Spanning Tree Protocol Page Network Time Protocol Page SysLog Page DNS Resolver DNS Resolver Setup Menu Fields Page Page Page Profile Directory: Local Profile Page LAN (Local) Profile Setup Page To Setup a Local Profile: Local Profile Setup Menu Fields Page LAN IP: LAN IPX: Setup < > Link Speed Static Networks Profile Directory: Local Profile IP Networks IPX Networks To Setup Static Networks Page 5. Press [CTRL A] to add a Static Network. Static Network Menu Fields Network Subnet Mask Metric Page Static Addresses Page Static IP Address Menu Fields Filters Page Filters Menu Fields Defining Custom Filters Defining Protocol Filters Defining Address Filters Advertise Network/Server Page Advertise Network/Server Menu Fields IPX Server Advertising Page DHCP Server/BOOTP Relay Page DHCP Server/BOOTP Relay Menu Fields Page LAN Collision Threshold Page Page Profile Directory: Local Profile Spanning Tree To Configure Spanning Tree: Page Page Secondary IP Address To Add a Secondary IP Address: Page Link Speed To Set the Link Speed: Page Page Profile Directory:Remote Profile Page Page Remote (WAN) Profile Profile Directory:Remote Profile Profile Setup for (RemoteUnit) Transmission Options Protocol Mode Protocol Route Blocked Bridge Optimize Profile Directory:Remote Profile WAN Network Updates GRE Tunnel NAT Gateway <Enabled> with GRE Tunnel <Disabled> <Enabled> with GRE Tunnel <By Network> Page WAN IP Setup < > (bottom of the Remote main window) Page Security/Options Page Security/Options Fields Static/VPN Networks Page Profile Directory:Remote Profile GRE Tunnel set to <All> Static/VPN Networks Fields Profile Directory:Remote Profile GRE Tunnel set to <By Network> Page VPN - > Static NAT Addresses Page NAT Bypass Subnets Profile Directory:Remote Profile 4. Press [CTRL A] to add a NAT Bypass. Network Subnet Mask Static Addresses Page Static Addresses Fields Firewall Filters To Add a Firewall Filter: WARNING! Page Firewall Filters Fields Rule Number Action: (Pass/Drop) Profile Directory:Remote Profile Service Service Establishment Name Description Local IP Address/Network Remote IP Address/Network < > Packets which match this rule Filter Network/Server Page Profile Directory:Remote Profile Filter Network/Server Fields Setup Selected Items (Filter/Learn) Network Type Page Spanning Tree To Configure Spanning Tree: Page Page Trunk Port Page Page Page Basic Configuration Basic Configuration Overview Start Basic Configuration Page Router Identification Routing Protocol/Security Page WAN Interface Connections Page Page Page Page Basic Configuration SNMP Configuration SNMP Communities SNMP Trap Destinations Page Page Verification Window Ping Utility LAN Port Tests Fields START PING < > <Single Ping > <Continuous Ping > [ESC] to terminate the test at any time. Response Window Fields: Page Trace Route Page Page Port Monitor Page Page Page Statistics Window Statistics Window Run-Time Page Statistics Window LAN Packet Totals Received Transmitted Errors Page Page System Reports Window Page Page Page Page Networks/Servers Page Page Address Tables Flush Learned Entries Display [SPACEBAR] to select the appropriate view. The screen will update accordingly as you scroll Page Page Page Exit Window Logout Exit Window Reinitialize Page Router Configuration 11-2 IP Router - Release 1.8 Basic Setup Basic Setup IP Router - Release 1.8 11-3 PPP Internet Connection and Public IP Address R outing PPP Internet Connection and Public IP Address Routing ISP Router that provides the Internet connection. 11-4 IP Router - Release 1.8 Frame Relay Internet Connection and Public IP Address Routing Frame Relay Internet Connection and Public IP Address Routing ISP Router that provides the Internet connection. IP Router - Release 1.8 11-5 Internet Connection using PPP, NAT/PAT and Firewall Filters Internet Connection using PPP, NAT/PAT and Firewall Filters ISP Router that provides the Internet connection. Router with NAT/PAT and Firewall Filters. 11-6 IP Router - Release 1.8 Internet Connection using PPP, NAT/PAT and Firewall Filters IP Router - Release 1.8 11-7 Internet Connection using NAT and Static NAT Addresses Internet Connection using NAT and Static NAT Addresses ISP Router that provides the Internet connection. Router with NAT and Static NAT addresses. Page IP Router - Release 1.8 11-9 Router Configuration Back-to-Back with PPP Back-to-Back with PPP The following configuration will set up two Routers back-to-back with PPP. Boulder Router in Slot 1 11-10 IP Router - Release 1.8 Back-to-Back with PPP Denver Router in Slot 1 IP Router - Release 1.8 11-11 Router Configuration Back-to-Back with Frame Relay Back-to-Back with Frame Relay The following configuration will set up two Routers back-to-back with Frame Rel ay. Boulder Router in Slot 1 11-12 IP Router - Release 1.8 Back-to-Back with Frame Relay Denver Router in Slot 3 A User Events In this Appendix User Events Authenticate Events Triggered Events Page Page Page Protocol Number in Firewall Filters Page Page Page Page Ethernet Protocol Types Page Page Page Page Page Page Page A Troubleshooting Communication Related Issues Excessive Triggered Update Events on the Events screen LAN Related Issues Unable to add data filters, advertise networks or create static route entries IP Router - Release 1.8 C-3 LAN Related Issues Unable to connect to anything outside the LAN from LAN host Unable to access the Local (LAN) Router unit via Telnet Unable to access a remote unit via Telnet Page Verification Statistics System Reports Identify Alarm Alarm indicators Page Clear Alarm G Page Page Page I Index