Manuals / Eicon Networks / Computer Equipment / Network Card

Eicon Networks DIVA LAN ISDN manual Security

Models: DIVA LAN ISDN

1 213

Download 213 pages 57.11 Kb

Page 74

Chapter Six

Security

Connecting your computers to the internet or a remote corporate LAN creates a wide range of benefits, but also exposes your computers to certain risks. To safeguard your data and systems, the DIVA LAN ISDN Modem provides a comprehensive range of security features. This chapter explains how to use and configure each feature for optimal protection of your systems.

Image 74

Eicon Networks DIVA LAN ISDN manual Security

Contents

Diva LAN Isdn Modem User’s Guide First Edition August 206-312-01 Table of Contents Chapter Five Chapter ThreeChapter Four Chapter Eight Chapter SixChapter Seven Chapter Nine Chapter TenAppendix C Appendix aAppendix B Appendix D Introduction Creating your own LAN for resource sharing Connecting to the InternetIntroducing the Diva LAN Isdn Modem Diva LAN Isdn ModemAttaching telephones and fax machines Connecting to a corporate networkCreating a VPN Compression for faster throughput Connecting more computersTotal network security Bandwidth on-demand Advanced diagnosticsUnsupported configurations Advanced Isdn tariff managementSummary of features World wide web Contacting customer servicesAdministration Getting Started Installation overview Verify the configuration of your computers Prepare for installationVerify your package contents To run the Modem Monitor software To use the advanced configuration optionsTo configure the Diva LAN Isdn Modem Important Isdn concepts Isdn access interfacesChoose a connection protocol Isdn channel usageMultilink PPP Choosing a connection protocolPPP Multilink PPP + Bacp120 SummaryMultilink PPP + AO/DI Information to record when ordering your line Order an Isdn LineGather V.120 information Gather Internet account informationGather X.25 information Scripting Install the Diva LAN Isdn Modem To install the Diva LAN Isdn ModemChapter Two Getting Started Install the Diva LAN Isdn Modem Install Modem Monitor Windows 95/98/NT4 To install Modem MonitorPage Page Connecting a non-Windows computer to the Diva LAN Isdn Modem Page Configuring the Internet connection To configure the Internet connectionPage Fill in the fields as indicated below Page Page Registering your Diva LAN Isdn Modem Using your Diva LAN Isdn ModemHow long will the line stay connected? What’s next?Using Modem Monitor Starting Modem Monitor Start menu program groupStart menu options Properties dialog box ButtonsUtilities dialog box Options dialog box Utilities Status ViewerProfile table Web-based Configuration Interface Starting the web-based configuration interface To start the web-based configuration interfaceSaving configuration settings Getting helpConnection profile settings General settings and connection profilesGeneral settings Connection profile typesEditing the ISP profile To edit the ISP profilePage Editing LAN settings To edit the LAN profileSaving and restoring configuration files To save/restore configuration settingsFront panel display Viewing status informationSystem status Obtaining statistics To upgrade the firmware Upgrading the Diva LAN Isdn Modem firmwareResetting to factory defaults To reset the Diva LAN Isdn Modem to factory defaultsMinimizing Isdn Charges To set the idle timer Idle timerTo define Cost Control settings Cost ControlData call thresholds Isdn billing intervalsConfiguring Bacp To configure BacpChapter Five Minimizing Isdn Charges Configuring Bacp Configuring AO/DI To configure AO/DI To configure X.25 settings On the D-channelChapter Five Minimizing Isdn Charges Configuring AO/DI Setting Isdn active intervals To set Isdn active intervalsSpoofing NetBIOS services To enable spoofing of NetBIOS servicesData compression To enable manual dialing Manual dialingRestricting analog calls To restrict analog callsTo enable data over voice Data over voiceTraffic filtering Security Security features Configuration interfacesTo erase the system password System passwordTo set the system password Automatic log out NAT static mappings Network address translationSecurity benefits How it worksConfiguring a NAT mapping for an FTP server Default NAT serverConfiguring a NAT static mapping for a web server Running a web or FTP serverTo create a static NAT mapping Remote management InternetTo enable remote management Incoming data calls Incoming calls and IP addressingTo enable support for incoming data calls Enable Answer incoming data callsClick Authentication To set up call screening Call screeningCall authentication To set up call authenticationCallback options CallbackCallback modes To set up callback Delay before host calls backTimeout waiting for callback Enable Manual dialing only Custom security features Setting up the Phone Ports Setting phone numbers manually To enable support for fax/modem Connecting modems and fax machinesConnecting multiple analog devices How it works To enable call bumpingCall bumping RequirementsRestricting analog calls Call Forwarding Supplementary servicesTo enable supplementary services VoiceMail Service Failure ToneCall Waiting Caller IDFeature Key values Call TransferConnecting to a Corporate Network Overview ResourcesGather information Configure the Corporate profile To configure the Corporate profilePage Page Page Timeouts Using the corporate connectionNetBIOS name resolution Support for Microsoft Network NeighborhoodWhat’s next? Advanced Installations To define retry settings Connection retriesTo define a backup profile and set the profile restore delay Manual installation Installing on an existing LANUsing Modem Monitor Uncheck the Dhcp server enabled option If your LAN has a Dhcp server Adjusting configuration settings on the LANIf your LAN uses static addressing If your LAN has a routerConnecting more than four computers Third-party Ethernet HubCreating a virtual private network To create a VPNConnecting to the VPN Page Selecting a connections protocol Installation and configuration procedureConcurrent Internet and Intranet connections Defining routesAbout IP addresses Using masksIP routes Static vs. dynamic addresses192.168.1.1 External addressesISP Single connection Why routes are neededInternet 212.182.22.39Internet Multiple connectionsRouting on the local LAN 212.182.22.39Routing Information Protocol RIP Defining routes for the Diva LAN Isdn ModemChapter Nine Advanced Installations IP routes IP filters How filtering worksTo define a filter Default filtersWhat is a datagram? Chapter Nine Advanced Installations IP filters Source/Destination ActionDirection LocationIP filtering examples Dropping incoming traffic from a specific network2nd filter Allowing incoming traffic only from a specific network1st filter Blocking web surfing Chapter Nine Advanced Installations To configure the V.120 protocol Making a V.120 connectionPage SecurID support To install the Eicon SecurID Client softwareTo uninstall the Eicon SecurID Client software To enable SecurID support Other Configuration Tools Remote configuration Configuration optionsLocal configuration Web interface Local accessRemote access PrerequisitesTftp interface Using Web interfaceUsing the command line interface CLI Enabling Tftp server supportUploading/downloading configuration files Loading new firmware via TftpCommands Dtmf interfaceEstablishing a serial connection Command line interface CLIEstablishing a Telnet connection via IP Using the command line interface To establish a serial connectionCommand line reference About configuration contextDefault profiles Connection profilesTo load the new firmware TCP/IP Configuration Configuring TCP/IP Installing and configuring TCP/IP for Windows 95/98Installing TCP/IP Select Use Dhcp for Wins Resolution Page Configuring TCP/IP Installing TCP/IP for Windows NTInstalling TCP/IP Configuring TCP/IP on an iMac Technical Information Link Diva LAN Isdn Modem indicator lightsB1, B2 E1, E2, E3, E4 FaultPower Diva LAN Isdn Modem connectors Port DescriptionResetting to factory defaults Resetting the Diva LAN Isdn ModemResetting operational settings To resetDetermining termination requirements Installing the resistorTermination Single Isdn deviceCommand Line Reference Notational Conventions Section uses the following conventionsCommands For information on SeeSET Aodi Txbuffer bytes Enable Aodi AreacodeDisable Aodi Areacode SET Callback Delay seconds SET Callback Mode type option number1 number2SET Callback Timeout seconds Show Callback ConfigurationADD Isdn Screening channel number Enable Isdn ScreeningDisable Isdn Screening Delete Isdn Screening channel indexSET Isdn Threshold intervalDays maxHours maxCalls Enable Isdn Threshold Disable Isdn ThresholdCall thresholds SET Dhcp Type Server None Show Dhcp StatusShow Dhcp Configuration Stop Dhcp TraceShow Dhcp Staticmap Enable Dhcp Staticmap ip Disable Dhcp Staticmap ipDelete Dhcp Staticmap ip SET DNS Domain domain Enable DNS Relay Disable DNS RelayShow DNS Configuration SET DNS Address Primary Secondary dnsaddrShow Ethernet Address EthernetShow Ethernet Statistics Show Ethernet Trace memsize framesizeGeneral Show Date Enable Display Disable DisplayValidate Show TimeShow Version Show LED StatusShow System Status Show Calls Status Active LastSET Direction in OUT ANY Enable Filter Disable FilterSET Action Drop Forward Show IP Filter SET Type ALL UDP TCP SYN Anyicmp Show IP NAT Enable IP NAT Disable IP NATSET IP NAT UDP TCP Default port address ADD IP NAT UDP TCP port ipaddressDelete IP Route Ipaddr IP routingADD IP Route Ipaddr maskLenmetric gwAddr SET IP Route Ipaddr maskLen gwAddrShow IP Address IP variousShow Icmp Statistics Show IP StatisticsEnable IP Spoofing Disable IP Spoofing Show IP ConfigurationSET IP Services ALL Intelligent Minimal None Enable IP Multicast Disable IP MulticastEnable Isdn Teisharing Disable Isdn Teisharing Enable Isdn Answer Disable Isdn AnswerDetect Isdn Spid SET Isdn Switch NI1 5ESS Auto 5ESSPPSET Isdn Switch Jate Euro BT TPH China Singapore SET Isdn Calltype Auto 56K DOV Disable Isdn DELAY56KShow Isdn Configuration Show Isdn StatisticsEnable Isdn Accesstime Disable Isdn Accesstime Isdn Access TimeShow Isdn Accesstime Show Lapd Trace memsize framesize Stop Lapd TraceSET LOG Filter Trace Debug Info Security Warning Disable LOG Output Screen RemoteLogging and Mail Trace Stop Mail TraceSET Mlppp Mode Disable Normal Bacp Aodi SET Mlppp Linkup threshold delay channelSET Mlppp Linkdown threshold delay channel Show Mlppp ConfigurationEnable Phone Callerid Disable Phone Callerid Enable Phone Altring channel Disable Phone Altring channelEnable Phone Callbumping Disable Phone Callbumping PhoneDisable Phone Voicemail channel SET Phone Msgindicator refreshEnable Phone Voicemail channel Silent SET Phone Capability channel Speech DataShow Phone Country Show Phone ConfigurationSET Phone Country country Enable PPP Secureid Disable PPP Secureid Enable PPP Authent Disable PPP AuthentEnable PPP Compression Disable PPP Compression SET PPP Authent Encrypted ANYEnable PPP Echorequest Disable PPP Echorequest Show PPP ConfigurationShow PPP Trace portmask memsize framesize Show PPP StatisticsShow PPP Status Stop PPP Trace portProfiles Stop Q931 Trace 931Show Q931 Trace memsize framesize Show RIP Configuration Enable RIP V1 V2 V2COMPATIBLE MergeDisable RIP Merge Show RIP StatisticsDelete RIP Reject ipaddr Show RIP RejectSET Snmp Contact name SET Snmp Name nameSET Snmp Description name SET Snmp Location nameStop TCP Trace Show TCP StatisticsShow TCP Trace memsize framesize Enable Tftp Server Disable Tftp Server TftpTime Protocol Enable Timeprotocol Disable TimeprotocolShow Timeprotocol Configuration SET Timeprotocol Server timeServerStop UDP Trace Show UDP StatisticsShow UDP Trace memsize framesize 120 Enable DisableSET V120 Mode Multiframe Unacknowledged Show V120 Trace memsize framesize SET V120 Idletime IdleDelayShow V120 Configuration Stop V120 TraceDelete Script Line index ADD Script Line index command argumentScripting Show Script indexSET X25 Facilities hexstring SET X25 Address localX25addrSET X25 CUD callUserData SET X25 LCN lcnNumberStop X25 Trace Show X25 ConfigurationShow X25 Status Regulatory Information FCC Part 68 Notice Regulatory Information for the U.S.A212 Regulatory Information for Canada 213