Security | Eicon Networks DIVA LAN ISDN guide

Chapter Six

Security

Connecting your computers to the internet or a remote corporate LAN creates a wide range of benefits, but also exposes your computers to certain risks. To safeguard your data and systems, the DIVA LAN ISDN Modem provides a comprehensive range of security features. This chapter explains how to use and configure each feature for optimal protection of your systems.

Image 74

Eicon Networks DIVA LAN ISDN manual Security

Contents

Diva LAN Isdn Modem User’s Guide First Edition August 206-312-01 Table of Contents Chapter Five Chapter ThreeChapter Four Chapter Eight Chapter SixChapter Seven Chapter Nine Chapter Ten Appendix C Appendix aAppendix B Appendix D Introduction Creating your own LAN for resource sharing Connecting to the InternetIntroducing the Diva LAN Isdn Modem Diva LAN Isdn Modem Attaching telephones and fax machines Connecting to a corporate networkCreating a VPN Compression for faster throughput Connecting more computersTotal network security Bandwidth on-demand Advanced diagnosticsUnsupported configurations Advanced Isdn tariff management Summary of features World wide web Contacting customer servicesAdministration Getting Started Installation overview Verify the configuration of your computers Prepare for installationVerify your package contents To run the Modem Monitor software To use the advanced configuration optionsTo configure the Diva LAN Isdn Modem Important Isdn concepts Isdn access interfacesChoose a connection protocol Isdn channel usage Multilink PPP Choosing a connection protocolPPP Multilink PPP + Bacp 120 SummaryMultilink PPP + AO/DI Information to record when ordering your line Order an Isdn Line Gather V.120 information Gather Internet account informationGather X.25 information Scripting Install the Diva LAN Isdn Modem To install the Diva LAN Isdn Modem Chapter Two Getting Started Install the Diva LAN Isdn Modem Install Modem Monitor Windows 95/98/NT4 To install Modem MonitorPage Page Connecting a non-Windows computer to the Diva LAN Isdn Modem Page Configuring the Internet connection To configure the Internet connectionPage Fill in the fields as indicated below Page Page Registering your Diva LAN Isdn Modem Using your Diva LAN Isdn ModemHow long will the line stay connected? What’s next? Using Modem Monitor Starting Modem Monitor Start menu program group Start menu options Properties dialog box Buttons Utilities dialog box Options dialog box Utilities Status ViewerProfile table Web-based Configuration Interface Starting the web-based configuration interface To start the web-based configuration interface Saving configuration settings Getting help Connection profile settings General settings and connection profilesGeneral settings Connection profile types Editing the ISP profile To edit the ISP profilePage Editing LAN settings To edit the LAN profile Saving and restoring configuration files To save/restore configuration settings Front panel display Viewing status informationSystem status Obtaining statistics To upgrade the firmware Upgrading the Diva LAN Isdn Modem firmware Resetting to factory defaults To reset the Diva LAN Isdn Modem to factory defaults Minimizing Isdn Charges To set the idle timer Idle timerTo define Cost Control settings Cost Control Data call thresholds Isdn billing intervals Configuring Bacp To configure Bacp Chapter Five Minimizing Isdn Charges Configuring Bacp Configuring AO/DI To configure AO/DI To configure X.25 settings On the D-channel Chapter Five Minimizing Isdn Charges Configuring AO/DI Setting Isdn active intervals To set Isdn active intervals Spoofing NetBIOS services To enable spoofing of NetBIOS services Data compression To enable manual dialing Manual dialing Restricting analog calls To restrict analog calls To enable data over voice Data over voice Traffic filtering Security Security features Configuration interfaces To erase the system password System passwordTo set the system password Automatic log out NAT static mappings Network address translationSecurity benefits How it works Configuring a NAT mapping for an FTP server Default NAT serverConfiguring a NAT static mapping for a web server Running a web or FTP server To create a static NAT mapping Remote management Internet To enable remote management Incoming data calls Incoming calls and IP addressing To enable support for incoming data calls Enable Answer incoming data calls Click Authentication To set up call screening Call screening Call authentication To set up call authentication Callback options CallbackCallback modes To set up callback Delay before host calls backTimeout waiting for callback Enable Manual dialing only Custom security features Setting up the Phone Ports Setting phone numbers manually To enable support for fax/modem Connecting modems and fax machinesConnecting multiple analog devices How it works To enable call bumpingCall bumping Requirements Restricting analog calls Call Forwarding Supplementary servicesTo enable supplementary services VoiceMail Service Failure ToneCall Waiting Caller ID Feature Key values Call Transfer Connecting to a Corporate Network Overview Resources Gather information Configure the Corporate profile To configure the Corporate profilePage Page Page Timeouts Using the corporate connectionNetBIOS name resolution Support for Microsoft Network Neighborhood What’s next? Advanced Installations To define retry settings Connection retries To define a backup profile and set the profile restore delay Manual installation Installing on an existing LANUsing Modem Monitor Uncheck the Dhcp server enabled option If your LAN has a Dhcp server Adjusting configuration settings on the LANIf your LAN uses static addressing If your LAN has a router Connecting more than four computers Third-party Ethernet Hub Creating a virtual private network To create a VPN Connecting to the VPN Page Selecting a connections protocol Installation and configuration procedureConcurrent Internet and Intranet connections Defining routes About IP addresses Using masksIP routes Static vs. dynamic addresses 192.168.1.1 External addresses ISP Single connection Why routes are neededInternet 212.182.22.39 Internet Multiple connections Routing on the local LAN 212.182.22.39 Routing Information Protocol RIP Defining routes for the Diva LAN Isdn Modem Chapter Nine Advanced Installations IP routes IP filters How filtering works To define a filter Default filtersWhat is a datagram? Chapter Nine Advanced Installations IP filters Source/Destination ActionDirection Location IP filtering examples Dropping incoming traffic from a specific network 2nd filter Allowing incoming traffic only from a specific network1st filter Blocking web surfing Chapter Nine Advanced Installations To configure the V.120 protocol Making a V.120 connectionPage SecurID support To install the Eicon SecurID Client softwareTo uninstall the Eicon SecurID Client software To enable SecurID support Other Configuration Tools Remote configuration Configuration optionsLocal configuration Web interface Local accessRemote access Prerequisites Tftp interface Using Web interfaceUsing the command line interface CLI Enabling Tftp server support Uploading/downloading configuration files Loading new firmware via Tftp Commands Dtmf interface Establishing a serial connection Command line interface CLIEstablishing a Telnet connection via IP Using the command line interface To establish a serial connection Command line reference About configuration contextDefault profiles Connection profiles To load the new firmware TCP/IP Configuration Configuring TCP/IP Installing and configuring TCP/IP for Windows 95/98Installing TCP/IP Select Use Dhcp for Wins Resolution Page Configuring TCP/IP Installing TCP/IP for Windows NTInstalling TCP/IP Configuring TCP/IP on an iMac Technical Information Link Diva LAN Isdn Modem indicator lightsB1, B2 E1, E2, E3, E4 FaultPower Diva LAN Isdn Modem connectors Port Description Resetting to factory defaults Resetting the Diva LAN Isdn ModemResetting operational settings To reset Determining termination requirements Installing the resistorTermination Single Isdn device Command Line Reference Notational Conventions Section uses the following conventions Commands For information on See SET Aodi Txbuffer bytes Enable Aodi AreacodeDisable Aodi Areacode SET Callback Delay seconds SET Callback Mode type option number1 number2SET Callback Timeout seconds Show Callback Configuration ADD Isdn Screening channel number Enable Isdn ScreeningDisable Isdn Screening Delete Isdn Screening channel index SET Isdn Threshold intervalDays maxHours maxCalls Enable Isdn Threshold Disable Isdn ThresholdCall thresholds SET Dhcp Type Server None Show Dhcp Status Show Dhcp Configuration Stop Dhcp Trace Show Dhcp Staticmap Enable Dhcp Staticmap ip Disable Dhcp Staticmap ipDelete Dhcp Staticmap ip SET DNS Domain domain Enable DNS Relay Disable DNS RelayShow DNS Configuration SET DNS Address Primary Secondary dnsaddr Show Ethernet Address EthernetShow Ethernet Statistics Show Ethernet Trace memsize framesize General Show Date Enable Display Disable DisplayValidate Show Time Show Version Show LED StatusShow System Status Show Calls Status Active Last SET Direction in OUT ANY Enable Filter Disable FilterSET Action Drop Forward Show IP Filter SET Type ALL UDP TCP SYN Anyicmp Show IP NAT Enable IP NAT Disable IP NATSET IP NAT UDP TCP Default port address ADD IP NAT UDP TCP port ipaddress Delete IP Route Ipaddr IP routingADD IP Route Ipaddr maskLenmetric gwAddr SET IP Route Ipaddr maskLen gwAddr Show IP Address IP variousShow Icmp Statistics Show IP Statistics Enable IP Spoofing Disable IP Spoofing Show IP ConfigurationSET IP Services ALL Intelligent Minimal None Enable IP Multicast Disable IP Multicast Enable Isdn Teisharing Disable Isdn Teisharing Enable Isdn Answer Disable Isdn Answer Detect Isdn Spid SET Isdn Switch NI1 5ESS Auto 5ESSPPSET Isdn Switch Jate Euro BT TPH China Singapore SET Isdn Calltype Auto 56K DOV Disable Isdn DELAY56KShow Isdn Configuration Show Isdn Statistics Enable Isdn Accesstime Disable Isdn Accesstime Isdn Access TimeShow Isdn Accesstime Show Lapd Trace memsize framesize Stop Lapd Trace SET LOG Filter Trace Debug Info Security Warning Disable LOG Output Screen RemoteLogging and Mail Trace Stop Mail Trace SET Mlppp Mode Disable Normal Bacp Aodi SET Mlppp Linkup threshold delay channelSET Mlppp Linkdown threshold delay channel Show Mlppp Configuration Enable Phone Callerid Disable Phone Callerid Enable Phone Altring channel Disable Phone Altring channelEnable Phone Callbumping Disable Phone Callbumping Phone Disable Phone Voicemail channel SET Phone Msgindicator refreshEnable Phone Voicemail channel Silent SET Phone Capability channel Speech Data Show Phone Country Show Phone ConfigurationSET Phone Country country Enable PPP Secureid Disable PPP Secureid Enable PPP Authent Disable PPP AuthentEnable PPP Compression Disable PPP Compression SET PPP Authent Encrypted ANY Enable PPP Echorequest Disable PPP Echorequest Show PPP Configuration Show PPP Trace portmask memsize framesize Show PPP StatisticsShow PPP Status Stop PPP Trace port Profiles Stop Q931 Trace 931Show Q931 Trace memsize framesize Show RIP Configuration Enable RIP V1 V2 V2COMPATIBLE MergeDisable RIP Merge Show RIP Statistics Delete RIP Reject ipaddr Show RIP Reject SET Snmp Contact name SET Snmp Name nameSET Snmp Description name SET Snmp Location name Stop TCP Trace Show TCP StatisticsShow TCP Trace memsize framesize Enable Tftp Server Disable Tftp Server Tftp Time Protocol Enable Timeprotocol Disable TimeprotocolShow Timeprotocol Configuration SET Timeprotocol Server timeServer Stop UDP Trace Show UDP StatisticsShow UDP Trace memsize framesize 120 Enable DisableSET V120 Mode Multiframe Unacknowledged Show V120 Trace memsize framesize SET V120 Idletime IdleDelayShow V120 Configuration Stop V120 Trace Delete Script Line index ADD Script Line index command argumentScripting Show Script index SET X25 Facilities hexstring SET X25 Address localX25addrSET X25 CUD callUserData SET X25 LCN lcnNumber Stop X25 Trace Show X25 ConfigurationShow X25 Status Regulatory Information FCC Part 68 Notice Regulatory Information for the U.S.A212 Regulatory Information for Canada 213