Security | Carrier Access CMG Router instruction

Profile Directory:Router Card Profile

Security

Security

1.Select Security < Configure -> and select [ENTER].

The fields on this screen may be used to define the authentication process for the local Adit unit.

Security Setup Window

3-8	CMG Router - Release 2.7

Image 46

Carrier Access CMG Router user manual Select Security Configure and select Enter

Contents

CMG Router Supporting Software Version Warranty Warranty Procedure Preface Limitation of Warranty & Limitation of Remedies Warranty Product Returns Vii Viii CMG Router Release Table of Contents Management Window Profile DirectoryRouter Card Profile Profile DirectoryLocal Profile Profile DirectoryRemote Profile Statistics Window Basic ConfigurationVerification Window System Reports Window Exit Window Router ConfigurationUser Events Protocol Types TroubleshootingGlossary Index Chapter Install Country Specific Ringer Tones InstallationInstall a Router Card Overview Maneuvering in the System Select Field FieldsScroll Field Edit Field Help Bar Connecting to the Router Establish a Telnet Session Set a New Password Introduction Management Window Management Overview System Time/Login System Date and Time Level Config allows the user to view and change all screensUsers, as well as change all three passwords Level Config Password Auto-Logout TimerView Password Admin Password Enhanced Security When Telneting into the Router the following will appear Upload/Download To Setup the Router for Uploads/Downloads Management Window Upload/Download Setup Menu Fields Reboot After Load Code Config Upload/Download Load Defaults Software Images Choices Management Window Profile DirectoryRouter Card Profile Configuration Main Menu Select Router Card Setup and select Enter RIP Mode Send RIP Mode ReceiveSelection is RIP1, RIP2, or RIP1/RIP2 Trunk WAN Link # WAN Trunk Setup Menu FieldsWAN Connection Data Speed WAN Connection TypeMultilink Group Voice BW Limit % Select Security Configure and select Enter Security Protocol CHAP, PAP or None Security Setup Menu FieldsAuthentication by Remote User ID Local Security Server Authentication of RemotePassword Type Snmp SYS Contact Snmp Setup Menu FieldsSYS Name SYS Location Access Snmp Trap Destinations Location Select DNS Proxy Configure and select Enter DNS Proxy DNS Server DNS Proxy Setup Menu FieldsDomain Name Site Select Spanning Tree Protocol Configure and select Enter Spanning Tree Protocol Bridge Max Age Bridge Forward DelayBridge Hello Time Bridge Priority Select Network Time Protocol Configure and select Enter Network Time Protocol SPACEBAR, select Enter Network Time Protocol Setup Menu Fields SysLog Facility SysLog Setup Menu FieldsSys Log Level Select DNS Resolver Configure and select Enter DNS Resolver My Domain Name DNS Resolver Cache ContentsDNS Resolver My Node Name Static Host List View or Modify Quality of Service Select Quality of Service Configure and select Enter Quality of Service Menu Fields Routed Voice Priority TOS Mgcp Mgcp Setup Menu Fields Mgcp Interoperability Settings Mgcp Interoperability Menu Fields Quarantine Notification Handling Mgcp Keep-Alive TimeoutMgcp Type of Service Quarantine Event Handling Voice Algorithm Names Algorithm Definition Voice Algorithm Name FieldsAlgorithm ID Algorithm Alias VoIP VoIP Setup Fields Call Detail Record Voice Algorithm Settings T38 Fax Voice Algorithm Settings VoIP Algorithm Fields Select Voice Channels Configure and select Enter Voice Channels VoIP Setup Fields Profile DirectoryRouter Card Profile Signaling Type Repeat Count RFC2833 Options SignalsPayload Type Repeat Interval Select Dial Plan Configure and select Enter Dial Plan Short Inter Digit Dial Plan Menu FieldsLong Inter Digit Profile DirectoryLocal Profile Main Menu Profile Directory window Local Profile window LAN Local Profile Setup To Setup a Local Profile LAN Network Updates Local Profile Setup Menu FieldsProfile Setup for LocalUnit Protocol LAN IP Address Default RouterSubnet Mask Setup Static Networks Profile DirectoryLocal Profile Select Configuration Profile Directory from the Main menu, To Setup Static NetworksSelect LAN Setup and Enter Static Networks Fields Network Ticks MetricHops Next Gateway Static Addresses Static MAC Address Setup Device Name Setup StaticStatic Addresses Fields MAC Address Filters To Define and Enable FiltersSelect Define Filter Custom Select LAN Setup -and select Enter Define Filter Forward ModeFilters Fields Filter Type Source/Destination Filter Name Defining Custom Filters Select Define Filter Custom and Enter Defining Protocol Filters Defining Address Filters Advertise Network/Server Advertise Network Server Window Advertise Network/Server Fields SetupSelected Items IPX Server Advertising Type Advertise Network/Server IPX Server FieldsName Dhcp Server/Client/Relay Dhcp Start IP Address Dhcp Mode ServerDomain Name Number Domain Name Servers NetBIOS over TCP/IPLease Duration Option Type Value Dhcp Mode Relay Forward DHCP/TOOTP Requests to Set Tx Packets Broadcast Bit Dhcp Mode ClientAutomatic DNS Request LAN Collision Threshold Collision Threshold Provisioning LAN Collision Threshold Fields To Configure Spanning Tree Spanning Tree Select Setup Spanning Tree and select Enter Port Priority Spanning Tree FieldsPort Cost Secondary IP Address To Add a Secondary IP Address Secondary IP Address Fields Link Speed To Set the Link Speed Link Speed Fields Profile DirectoryLocal Profile Profile DirectoryRemote Profile LocalUnit LAN Setup Profile DirectoryRemote Profile Remote Profile window Remote WAN Profile Profile Setup for RemoteUnit Mode Transmission OptionsProtocol Route Blocked Bridge Optimize WAN Network Updates GRE Tunnel Enabled with GRE Tunnel By Network Enabled with GRE Tunnel DisabledNAT Gateway Remote IP Tunnel Address Enabled with GRE Tunnel AllTunnel Name Encryption Algorithm Default Router Numbered Setup bottom of the Remote main window Security/Options Following Security/Options setup window will display Compression Security/Options FieldsSecurity Server Typical Data Static/VPN Networks Profile DirectoryRemote Profile Select WAN Setup -on the RemoteUnit line and press Enter GRE Tunnel VPN FeaturesStatic/VPN Networks Fields Encrypt Tunnel data ? Encryption Algorithm not supported in this release Static NAT Addresses Local IP Address NAT IP Address NAT Bypass Subnets Press Ctrl a to add a NAT Bypass Static Addresses Static Addresses Window MAC Address Static Addresses Window IP Address Symbol Description Firewall Filters To Add a Firewall Filter Select Ctrl a to add an IP Firewall Rule Rule Number Firewall Filters FieldsAction Pass/Drop Service Establishment ServiceName Description Packets which match this rule Local IP Address/NetworkRemote IP Address/Network Significant Bits Filter Network/Server Filter Network /Server Filter Network/Server Fields Selected Items Filter/Learn Network Filter Learn To Configure Spanning Tree Select Setup Spanning Tree and select Enter Port Priority Trunk Port ML QOS Interleaving WAN Connection Type PPP in Frame Relay, or Frame RelayML Fragment Threshold Basic Configuration Start Basic Configuration Select Yes to enter the setup program and select Enter Router Identification Fields RIP mode to send to remotes Directions for LAN Network UpdatesRIP mode to be received from remotes Protocol remotes will use to authenticate local LocalUnit Protocol LocalUnit will use to authenticate all remotes Authentication User IDChange the PAP Secret LocalUnit will send? WAN Interface Connections Port Number Set Poll Interval For Frame Relay, Set Option for PVC ManagementLink Quality Monitoring Sensitivity Set Poll Counter Profile Name Remote Adit ProfileOther Connection Select WAN Port NumberSubnet Mask WAN Connection Type Snmp Communities Snmp ConfigurationStatistics Averaging Interval Setup Complete Verification Window Ping Utility Dst Host Access PortLAN Port Tests Fields Src IP Address Single Ping Response Window FieldsContinuous Ping Result or Last Result Timeout CountResponse Count Trace Route Src Port Trace Route Utility Start TracertDstHost SrcIP Port Size TimeoutMethod IP Tos Port Monitor Trap On Port NameStart Monitor Number of bytes to display for each packet Verification Window Verification Window Statistics Window Run-Time Clear Totals Auto-UpdateRun-Time Fields Press ENTER. The Run-time Statistics window will display WAN Packet Totals ErrorsLAN Packet Totals Received Throughput to/from WAN Remote’s NameForwarded to WAN Comp. Ratio to/from WAN VoIP Channel View Call Agent VoIP Channel View FieldsSlot Endpoint Prefix Rsip Status Field Value Meaning Type Meaning Priority Queue Priority Fields Priority Queue FieldsClear All Priority Traffic Type Statistics Window System Reports Window Events To View the Event Log Message Events FieldsTime Count Alarms Alarms Fields Networks/Servers Learned From Networks/Servers FieldsDisplay Press ENTER. The Networks/Servers listing will display Frame Type Address Tables Address Tables Fields Flush Learned Entries Displays the information, listing by Port System Reports Window Exit Window Logout Reinitialize 10-4 Router Configuration Basic Setup Command Description Basic VoIP Setup Overview Set the controller to use CLI commands Command Description Fax and Modem Setup Following will configure the Fax and Modem CMG Router Release 11-7 Select Voip Configure -and select Enter Tab to Voice Algorithm Settings and select Enter 11-10 CMG Router Release 11-11 Card Maximum # of Channels configured for T.38 Reserved CMG Router Release 11-13 PPP Internet Connection and Public IP Address Routing Router in Slot CMG Router Release 11-15 Back-to-Back with PPP Boulder Router in Slot Denver Router in Slot Back-to-Back with Multi-Link PPP CMG Router Release 11-19 Back-to-Back with Frame Relay CMG Router Release 11-21 11-22 Appendix a User Events Description Authenticate Events Triggered Events Alarms User Events Appendix B Protocol Number in Firewall Filters Number Keyword Protocol Reference LEAF-2 Tlsp Reference SRP Ethernet Protocol Types HEX AT&T 8047 Protocol Types Protocol Types KTI Appendix C LAN Related Issues Communication Related IssuesExcessive Triggered Update Events on the Events screen LAN Related Issues Unable to access the Local LAN Router unit via Telnet Unable to access a remote unit via Telnet Diagnostics and Performance Tools Verification Ping Utility Statistics Run-Time System Reports Events Identify Alarm State Description Display Alarms Clear Alarm Troubleshooting Bandwidth AlgorithmAnnex D Bit Command Line Challenge Handshake Authorization Protocol ChapBridge Frame EthernetFirewall Frame relay Protocol IP HostInternet Local Area Network LAN Loopback Media Access Control MAC Mbps Multilink PPP Protocol Point-to-Point Protocol PPP PingQoS Rsip Spanning Tree Protocol Telnet Trace Route Trunk Voice over IP VoIP Index Index CMG Router Release Index Snap RIP IPX Index SYS Index Index