Carrier Access CMG Router instruction

Profile Directory:Remote Profile

Firewall Filters

3.Tab down to Setup: <Security/Options> and scroll with the [SPACEBAR] to <Firewall Filters>. Press [ENTER]

Remote

Profile

Window

4. Select [CTRL A] to add an IP Firewall Rule.

Firewall

Filters

Window

5.Enter the parameters of the rule, select [ESC] to close the window and save the configuration. See page 5-30for a description of all fields for the Firewall Setup window.

CMG Router - Release 2.7

5-29

Image 161

Carrier Access CMG Router user manual Select Ctrl a to add an IP Firewall Rule

Contents

CMG Router Supporting Software Version Warranty Procedure Warranty Preface Limitation of Warranty & Limitation of Remedies Warranty Product Returns Vii Viii CMG Router Release Table of Contents Profile DirectoryRouter Card Profile Management Window Profile DirectoryRemote Profile Profile DirectoryLocal Profile Verification Window Basic ConfigurationStatistics Window System Reports Window User Events Router ConfigurationExit Window Glossary Index TroubleshootingProtocol Types Chapter Install a Router Card InstallationInstall Country Specific Ringer Tones Overview Maneuvering in the System Scroll Field FieldsSelect Field Edit Field Help Bar Establish a Telnet Session Connecting to the Router Set a New Password Introduction Management Window Management Overview System Time/Login Users, as well as change all three passwords Level Config allows the user to view and change all screensSystem Date and Time Level View Password Auto-Logout TimerConfig Password Admin Password Enhanced Security When Telneting into the Router the following will appear Upload/Download To Setup the Router for Uploads/Downloads Management Window Reboot After Load Code Upload/Download Setup Menu Fields Config Upload/Download Load Defaults Software Images Choices Management Window Profile DirectoryRouter Card Profile Main Menu Configuration Select Router Card Setup and select Enter Selection is RIP1, RIP2, or RIP1/RIP2 RIP Mode ReceiveRIP Mode Send Trunk WAN Connection WAN Trunk Setup Menu FieldsWAN Link # Multilink Group WAN Connection TypeData Speed Voice BW Limit % Security Select Security Configure and select Enter Authentication by Remote Security Setup Menu FieldsProtocol CHAP, PAP or None User ID Password Authentication of RemoteLocal Security Server Type Snmp SYS Name Snmp Setup Menu FieldsSYS Contact SYS Location Access Snmp Trap Destinations Location DNS Proxy Select DNS Proxy Configure and select Enter Domain Name DNS Proxy Setup Menu FieldsDNS Server Site Spanning Tree Protocol Select Spanning Tree Protocol Configure and select Enter Bridge Hello Time Bridge Forward DelayBridge Max Age Bridge Priority Network Time Protocol Select Network Time Protocol Configure and select Enter SPACEBAR, select Enter Network Time Protocol Setup Menu Fields SysLog Sys Log SysLog Setup Menu FieldsFacility Level DNS Resolver Select DNS Resolver Configure and select Enter DNS Resolver DNS Resolver Cache ContentsMy Domain Name My Node Name Static Host List View or Modify Select Quality of Service Configure and select Enter Quality of Service Routed Voice Priority Quality of Service Menu Fields TOS Mgcp Mgcp Setup Menu Fields Mgcp Interoperability Settings Mgcp Interoperability Menu Fields Mgcp Type of Service Mgcp Keep-Alive TimeoutQuarantine Notification Handling Quarantine Event Handling Voice Algorithm Names Algorithm ID Voice Algorithm Name FieldsAlgorithm Definition Algorithm Alias VoIP Call Detail Record VoIP Setup Fields T38 Fax Voice Algorithm Settings VoIP Algorithm Fields Voice Algorithm Settings Voice Channels Select Voice Channels Configure and select Enter VoIP Setup Fields Profile DirectoryRouter Card Profile Signaling Type Payload Type RFC2833 Options SignalsRepeat Count Repeat Interval Dial Plan Select Dial Plan Configure and select Enter Long Inter Digit Dial Plan Menu FieldsShort Inter Digit Profile DirectoryLocal Profile Main Menu Profile Directory window Local Profile window LAN Local Profile Setup To Setup a Local Profile Profile Setup for LocalUnit Local Profile Setup Menu FieldsLAN Network Updates Protocol LAN Subnet Mask Default RouterIP Address Setup Static Networks Profile DirectoryLocal Profile Select LAN Setup and Enter To Setup Static NetworksSelect Configuration Profile Directory from the Main menu, Network Static Networks Fields Hops MetricTicks Next Gateway Static Addresses Static MAC Address Setup Static Addresses Fields Setup StaticDevice Name MAC Address Select Define Filter Custom To Define and Enable FiltersFilters Select LAN Setup -and select Enter Filters Fields Forward ModeDefine Filter Filter Type Filter Name Source/Destination Select Define Filter Custom and Enter Defining Custom Filters Defining Protocol Filters Defining Address Filters Advertise Network/Server Advertise Network Server Window Selected Items SetupAdvertise Network/Server Fields IPX Server Advertising Name Advertise Network/Server IPX Server FieldsType Dhcp Server/Client/Relay Dhcp Domain Name Dhcp Mode ServerStart IP Address Number Lease Duration NetBIOS over TCP/IPDomain Name Servers Option Type Value Forward DHCP/TOOTP Requests to Dhcp Mode Relay Automatic DNS Dhcp Mode ClientSet Tx Packets Broadcast Bit Request LAN Collision Threshold Collision Threshold Provisioning LAN Collision Threshold Fields Spanning Tree To Configure Spanning Tree Select Setup Spanning Tree and select Enter Port Cost Spanning Tree FieldsPort Priority To Add a Secondary IP Address Secondary IP Address Secondary IP Address Fields To Set the Link Speed Link Speed Link Speed Fields Profile DirectoryLocal Profile Profile DirectoryRemote Profile Profile DirectoryRemote Profile LocalUnit LAN Setup Remote Profile window Remote WAN Profile Profile Setup for RemoteUnit Protocol Route Blocked Bridge Optimize Transmission OptionsMode GRE Tunnel WAN Network Updates NAT Gateway Enabled with GRE Tunnel DisabledEnabled with GRE Tunnel By Network Tunnel Name Enabled with GRE Tunnel AllRemote IP Tunnel Address Encryption Algorithm Numbered Default Router Setup bottom of the Remote main window Security/Options Following Security/Options setup window will display Security Server Security/Options FieldsCompression Typical Data Static/VPN Networks Profile DirectoryRemote Profile Select WAN Setup -on the RemoteUnit line and press Enter Static/VPN Networks Fields VPN FeaturesGRE Tunnel Encrypt Encryption Algorithm not supported in this release Tunnel data ? Static NAT Addresses NAT IP Address Local IP Address NAT Bypass Subnets Press Ctrl a to add a NAT Bypass Static Addresses Static Addresses Window MAC Address Static Addresses Window IP Address Firewall Filters Symbol Description To Add a Firewall Filter Select Ctrl a to add an IP Firewall Rule Action Pass/Drop Firewall Filters FieldsRule Number Name Description ServiceService Establishment Remote IP Address/Network Local IP Address/NetworkPackets which match this rule Significant Bits Filter Network/Server Filter Network /Server Selected Items Filter/Learn Filter Network/Server Fields Network Learn Filter To Configure Spanning Tree Select Setup Spanning Tree and select Enter Port Priority Trunk Port ML Fragment Threshold WAN Connection Type PPP in Frame Relay, or Frame RelayML QOS Interleaving Basic Configuration Start Basic Configuration Select Yes to enter the setup program and select Enter Fields Router Identification RIP mode to be received from remotes Directions for LAN Network UpdatesRIP mode to send to remotes Protocol remotes will use to authenticate local LocalUnit Change the PAP Secret LocalUnit will send? Authentication User IDProtocol LocalUnit will use to authenticate all remotes Port Number WAN Interface Connections Link Quality Monitoring Sensitivity For Frame Relay, Set Option for PVC ManagementSet Poll Interval Set Poll Counter Other Remote Adit ProfileProfile Name Subnet Mask Select WAN Port NumberConnection WAN Connection Type Statistics Averaging Interval Snmp ConfigurationSnmp Communities Setup Complete Verification Window Ping Utility LAN Port Tests Fields Access PortDst Host Src IP Address Continuous Ping Response Window FieldsSingle Ping Response Count Timeout CountResult or Last Result Trace Route DstHost Trace Route Utility Start TracertSrc Port SrcIP Port Method TimeoutSize IP Tos Port Monitor Start Monitor Port NameTrap On Number of bytes to display for each packet Verification Window Verification Window Statistics Window Run-Time Run-Time Fields Auto-UpdateClear Totals Press ENTER. The Run-time Statistics window will display LAN Packet Totals ErrorsWAN Packet Totals Received Forwarded to WAN Remote’s NameThroughput to/from WAN Comp. Ratio to/from WAN VoIP Channel View Slot VoIP Channel View FieldsCall Agent Endpoint Prefix Field Value Rsip Status Type Meaning Meaning Priority Queue Clear All Priority Queue FieldsPriority Fields Priority Traffic Type Statistics Window System Reports Window To View the Event Log Events Time Events FieldsMessage Count Alarms Alarms Fields Networks/Servers Display Networks/Servers FieldsLearned From Press ENTER. The Networks/Servers listing will display Frame Type Address Tables Flush Learned Entries Address Tables Fields Displays the information, listing by Port System Reports Window Exit Window Logout Reinitialize 10-4 Router Configuration Command Description Basic Setup Overview Basic VoIP Setup Set the controller to use CLI commands Command Description Following will configure the Fax and Modem Fax and Modem Setup CMG Router Release 11-7 Select Voip Configure -and select Enter Tab to Voice Algorithm Settings and select Enter 11-10 CMG Router Release 11-11 Card Maximum # of Channels configured for T.38 Reserved CMG Router Release 11-13 Router in Slot PPP Internet Connection and Public IP Address Routing CMG Router Release 11-15 Boulder Router in Slot Back-to-Back with PPP Denver Router in Slot Back-to-Back with Multi-Link PPP CMG Router Release 11-19 Back-to-Back with Frame Relay CMG Router Release 11-21 11-22 Appendix a Description User Events Authenticate Events Triggered Events Alarms User Events Appendix B Number Keyword Protocol Reference Protocol Number in Firewall Filters LEAF-2 Tlsp Reference SRP HEX Ethernet Protocol Types AT&T 8047 Protocol Types Protocol Types KTI Appendix C Excessive Triggered Update Events on the Events screen Communication Related IssuesLAN Related Issues LAN Related Issues Unable to access a remote unit via Telnet Unable to access the Local LAN Router unit via Telnet Diagnostics and Performance Tools Ping Utility Verification Run-Time Statistics Events System Reports State Description Identify Alarm Display Alarms Clear Alarm Troubleshooting Annex D AlgorithmBandwidth Bit Bridge Challenge Handshake Authorization Protocol ChapCommand Line Firewall EthernetFrame Frame relay Internet HostProtocol IP Local Area Network LAN Multilink PPP Loopback Media Access Control MAC Mbps QoS PingProtocol Point-to-Point Protocol PPP Spanning Tree Protocol Rsip Trace Route Trunk Voice over IP VoIP Telnet Index Index CMG Router Release Index Snap RIP IPX Index SYS Index Index