Remote Access Protocols, Multiple IP Subnetworks | HP LCS60 manual

Table of Contents

Remote Access Protocols			1-10
TCP/Async Gateway Service			1-10
		TCP Service Ports	1-11

Serial Line IP (SLIP)			1-11
Point-to-Point Protocol (PPP)			1-12
		Van Jacobson TCP/IP Header Compression	1-12

		Compressed IPX Header (CIPX)	1-13

AppleTalk Remote Access Protocol (ARAP)			1-13

Multiple IP Subnetworks			1-13
IP Routing			1-13
Security Groups			1-15

IP Address Assignment by the LCS60			1-17

Hardware Features			1-17
Enhanced Processor			1-17
Fiber Interface			1-18

Network Security			1-18

Copy Protection			1-19

ii

Issue 3

Image 20

HP manual Remote Access Protocols, Multiple IP Subnetworks, IP Address Assignment by the LCS60 Hardware Features

Contents

Issue 3 July Issue Table of Contents Hardware Installation General LCS60 Software Configuration PPP Configuration AdministrationLCS60 Configuration and Connection for PPP Service LAN Connections Slip Configuration Administration Arap Configuration AdministrationLCS60 Configuration and Connection for Slip Service LCS60 Configuration and Connection for Arap Service Gateway Services Configuration Administration User InformationBasics Logging On Lcsadm Interface Maintenance Originating Group Security StarKeeper II NMS User Error Messages Software Installation Fujitsu or Seagate ST5660N DriveReload System Software Unix System Software Installation Manual Pages User Information Glossary Index Index Figures Figure F-8 PPP Connection Screen Tables Table of Contents Xiv Issue Screens Page LAN Protocols Document Organization Reference DocumentationOverview Remote Access Protocols IP Address Assignment by the LCS60 Hardware FeaturesMultiple IP Subnetworks Network Security Copy Protection Manual Pages Customer Assistance Table of Contents Issue Document Organization Software Installation Reference DocumentationMan Pages User Information Apple References Gateway References Overview PPP ReferencesSlip Reference Other References Benefits Simple Network Management Protocol Snmp LAN ProtocolsDomain Name Server DNS Resolver Supported Traps and MIBs AppleTalk ProtocolRouting Information Protocol RIP AppleTalk Network Number and Zone Assignment LCS60 as an AppleTalk Router IPX Protocol IPX Virtual Network Assignment Remote Access Protocols TCP/Async Gateway Service TCP Service Ports Serial Line IP Slip Point-to-Point Protocol PPP Van Jacobson TCP/IP Header Compression AppleTalk Remote Access Protocol Arap Multiple IP SubnetworksIP Routing Compressed IPX Header Cipx IP Routing with the LCS60 Security Groups IP Address Assignment Enhanced Processor Hardware FeaturesIP Address Assignment by the LCS60 Network Security Fiber Interface Copy Protection AdministrationBackup/Restore Centralized Network Management R3.0 UpgradeRemote Upgrade Manual Pages Online Manual Pages Where command is the name of the command Customer Assistance Assembly Installing the LCS60Introduction Site Preparation Configuration of the Lucent Technologies Data Switch LCS60 Power and GroundingLAN Connections Ethernet Introduction Controls and IndicatorsLists the LCS60 controls and indicators Controls and Indicators Controls Location Switch FunctionIndicators Board Indicator Function Specifications Space Requirements Cabling Required Additional Equipment EMI ConsiderationsRequired Equipment Assembly Installing the LCS60Unpacking Rack Mounting Hardware Wall Mounting Table-Top Mounting Connecting the System Console System Console and Port ConfigurationSerial Port Optioning DTE/DCE 9600 bps Baud Rate ⎜ Flow Control Non-Default Optioning MVME712M Module Optioning RS-232 Interface Connection through a Data Switch Direct Connection to the LCS60 Screen 2-1 TY Configuration Dialogue CC0 enter groupCC0 enter ty Module Address Screen 2-2 MSM Configuration Dialogue Screen CC0 restore msm CC0 enter msm Asynchronous Terminal Data Switch Connection through Modems Connection through StarKeeper II NMS System Console Connections through StarKeeper II NMS Connecting the Fiber Interface Routing the Optical Fiber Cable Installing the CPM-HS Module and Optical Fiber Cable LCS60 Dialogues Enter Group Name Define the Local Address for the LCS60 Morse Level Enter local Type Enter mnemonicName of the LCS60 Configure the CPM-HS Module Service stateAddress Directory entry Power and Grounding Power-Up Procedures LCS60 Rear Panel AC Connections Power-Down Procedures RebootVerify LCS60 Console Connection Etc/shutdown -g0 -y Verify Fiber Connection Configure the LCS60 Configure the LCS60 as directed in Chapters 3 throughLAN Connections Ethernet LAN Connections Base Level Backup Starting the LCS60 Table of Contents Preliminary Hardware Requirements Example Network Preliminary Configuration Requirements LCS60 Software Step Initial SetupSpecific Services Initsetup Screen 3-1 LCS60 Top Directory == morse Software KEY Configuration Parameters LCS60 ID LCS60 Software Protocol and Services Commands ⎜ Service Command Configure Protocols and Gateway Services srvsetup Srvsetup Configure Protocols and Gateway Services srvsetup PROTOCOL/SERVICES to be Started When Booting LCS60 and Service Session Parameter Configuration Menu == tcpasy == asytcp LCS60 Software LCS60 Software LCS60 Software Reserved IP Addresses for Slip and PPP Services LCS60 Software Configure Address and Zone for Appletalk Virtual Network TCP/IP Ethernet Interface Configuration MenuVirtual Network Number Virtual Node Number Virtual Network Zone Name == morse-e0 == m-net0 == ethernet IPX Configuration ManagementEthernet Configuration Parameters Virtual PPP Configuration Parameters Configure Default Route, DNS, and Snmp NEW Default Route dftrouteDefault Route Functions Domain Name System DNS Configuration Domain Name Server dns Simple Network Management Protocol Snmp Configuration Snmp Manager snmp Base Level Backup Starting the LCS60 Configuration Changes Configuration Commands Config Directory Administrative and Maintenance Commands Administrative/Maintenance Commands Config Directory Administrative and Maintenance Commands Administration LCS60 Configuration and Connection For PPP Service Table of Contents Issue LCS60 Configuration and Connection for PPP Service Shows an example network using PPP service Configuring PPP Service for IP, IPX, and AppleTalk Screen 4-1 Configure IP Network Security Group Example Enter the lcsadm interface Add the PPP serviceEnter protocol from Config or config protocol from Top Screen Screen 4-2 Configure Reserved IP Address Example PPP Screen 4-3 Configure IPX Parameters Example Screen Virtual PPP Configuration Parameters Screen 4-4 Configure AppleTalk Virtual Network Example == Research Lab Screen 4-5 Configure the Ethernet Interface Example PPP Service Connection Dialstrings PPP Privately Administered Static IP Address Reserved IP Address Dynamically Assigned IP Address Destination mlkway/earth/morse.ppp..-uhartnell For example Following screen shows how to checkShow Session Examples All TopSession# show ppp 1.1 ip Call Trace ExamplePeer # pg /usr/adm/lcs/ppp.log Related CommandsLog File PPP LCS60 Configuration and Connection For Slip Service Table of Contents Issue LCS60 Configuration and Connection for Slip Service Shows an example network using Slip service Configuring Slip Service Screen 5-1 Configure IP Network Security Group Example == Library Screen 5-2 Configure Reserved IP Address Example Techs Quit Screen 5-3 Configure the Ethernet Interface Example == m-net0 Slip Service Connection Dialstrings Header Compression in Chapter Privately Administered IP Address IP address is requested. This is not required when a NAC isIdentifies the user either user name or numeric ID for whom Used Reserved IP Address Destination mlkway/earth/morse.slip..-uhartnell Destination mlkway/earth/morse.slip..154.12.23.11 Destination mlkway/earth/morse.slip Following screen shows an example of the stop slip commandStop Example Errors For Slip connection errors, refer to Appendix CTop# stop slip # trace slip ∙ ping ∙ netstat # pg /usr/adm/lcs/slip.log Slip LCS60 Configuration and Connection For Arap Service Arap Service Connection Dialstring Table of Contents Issue LCS60 Configuration and Connection for Arap Service Shows an example network using Arap service Configuring Arap Service Screen 6-1 Configure AppleTalk Virtual Network Example Virtual Node Number Screen Destination mlkway/earth/brown.arap Arap Service Connection DialstringShow Service Example CRC Show Session ExampleTop session ∙ atping ∙ atnetstat ∙ atlog # pg /usr/adm/lcs/arap.log Arap Gateway Services Service Ports Trace TCP/Async Error Messages Log Files Table of Contents Issue LCS60 Configuration and Connection for Gateway Service Shows an example network using gateway services Gateway Enter a number in the range 1024 == telnet Screen 7-1 Gateway Service Configuration ExampleTCP-TO-ASYNCHRONOUS Gateway Service Configuration Menu Nohup SIDPress Return to continue == == directory == socket == wimsey Disabled Access to Gateway Services Dialstrings Telnet Service Inactivity Timeout Option Hosts daytime TCP service, the user would specify portPort An example is shown in the following screen Return to Destination Option Are accessed by the telnet and/or socket serviceUser Information Async-to-TCP Gateway Service Destination earth/brown.telnet Telnet open TCP-to-Async Gateway Service Destination earth/brown.telnet..moon $ telnet brown Uucp FeatureData Switch to LCS60 to LAN For tcpsock would be LAN to LCS60 to Data Switch # lcsadm Top # config srvports Example Uucp Service Using SunOS Example Uucp Service Using NCR Usr/etc/rfsaddr -h 60name TopPorts disable Service PortsFollowing screens show a variety of port commands Error Messages Trace TCP/AsyncFollowing screen shows a typical trace Conn ⎜ Log File Information Directory Gateway Services Log FilesLog Files Typical Administrative Tasks System Console Remote AdministrationBasics Logging On Lcsadm Interface Status Error Messages Backup and Restore OperationsNetwork Access Password Option Basics Logging On Remote Administration System ConsoleEdit the file lcsadm Delete the # sign from the line # cd /etc/opt/dk/srvtab # lcsadm Lcsadm Interface# dkcu mlkway/earth/morse.lcsadm Common Commands This command exits the lcsadm interfaceHelp Need information e.g., help start Initial System Setup initsetup Top Directory CommandsScreen 8-1 Top Directory Top# manager Routed ⎪ asytcp ⎪ tcpasy ⎪ arap ⎪ all Stop ? ⎪ dkhost ⎪ ipx ⎪ tcpip ⎪ atalk ⎪ slip ⎪ ppp ⎪ snmp ⎪ Session Directory Commands Start/stop Command Dependencies Following commands are available from the Session directory Screen 8-2 Session Directory Name trace Synopsis TopSession# show ppp 1.1 atalk Ports Directory Commands Screen 8-3 Ports Directory Disable port# port#2 Service Directory Commands Screen 8-4 Service DirectoryFollowing commands are available from the Service directory Top service Manager Directory Commands Flush service-type service-type Top manager Following commands are available from the Manager directoryScreen 8-5 Manager Directory Following commands are available from the Server directory Screen 8-6 Server Directory Config Directory Commands Arap Ppp Slip Asytcp Atmgr Tcpasy Lcm Screen 8-7 Config Directory Top config Name subnet Synopsis subnet LCS60 ID Software KEY Configuration Parameters Administration Typical Administrative Tasks YES LCS60 Change the Default Route Example Log Level Example Following screen illustrates the summary commands System Console Configuration ParametersSummary Output Examples System Console Parameters- Autobaud Backup and Restore Operations Screen 8-8 LCS60 Backup and Restore Configuration Menu # lcsadm config backupLCS60 Backup and Restore Configuration Menu Generic vs. Variable Files To Back Up to Tape Backup/Restore Tape Local ModeLocal and Remote Modes Screen 8-9 Backup/Restore Menu Screen 8-10 Tape Backup Management MenuBACKUP/RESTORE Menu Tape Backup Management Menu To Restore from Tape Centralized Backup/Restore Remote Mode To List the Contents of a Tape Security Authorizing Clients and Servers Centralized BACKUP/RESTORE Menu -- Server Access to Backup/Restore Functions Clients ServersScreen 8-11 Centralized Backup/Restore Menu Server Defining Backup/Restore Servers on a Client Screen 8-12 Centralized Backup Server Definition MenuCentralized Backup Server Definition Menu Changing a Client to a Server Defining Backup/Restore Clients on the Server Screen 8-13 Centralized Backup Client Definition MenuCentralized Backup Client Definition Menu == mlkway/earth/brown Backup or Restore Functions Screen 8-14 Centralized Backup Operations MenuBackup/Restore Functions Changing a Server to a Client Screen 8-15 Centralized Backup Operations Menu Server Centralized Backup Operations Menu -- Server== backup1 From a Server Restore from server example follows == brown Network Access Password Option Screen 8-16 Tape Backup Management Menu ServerTape Backup Management Menu -- Server Creating a Tape # useradd -u444 nap # passwd nap $ telnet Deleting the Network Access Password Changing the Network Access PasswordNew password will become effective immediately Status Error Messages LCS60 Status Report Hardware Error Messages Error Messages from the LCS60 Fiber InterfaceConsole Error Messages Switch. Try manually restarting the interface When the condition has been clearedSwitch network through the CPM-HS. This condition should be Optical connection between the receiver on the Vmedkhs Call Error Messages Server Error Messages Lucent Technologies Data Switch Server Log File # pg /var/opt/dk/log/dksrvlog.morse Additional Log Files ⎜ Log File ⎜ tcplisten.log ⎜ TCP-to-Async serviceLog Files Administration Installing an Upgrade on a Remote Upgrade Client Reload System Software After the Dump is Completed Vmedkhs Diagnostics Connection VerificationMemory Dump Unix System Software Installation Reload System SoftwareSeagate ST5660N Seagate ST11200N Screen 9-1 How to Enter System Responses ?RETURN NCD 1GB Scsi Seagate Continue with the dialogue as shown in the screen below Do not enter bo 0 UFS Utility Fixes Tape Installation Screen 9-2 UFS Utility Fixes Maintenance Tape InstallationRemove the tape once you have completed the installation # pkgadd -d /dev/rmt/ctape1 # pkgrm inet Inet Package RemovalScreen 9-3 inet Package Removal Indicates that the inet package has already been removed LCS60 Application Software InstallationScreen 9-4 LCS60 Application Software Installation Important Notice # /etc/shutdown -g0 -y System is Being Shut Down NOW Unixr MP Removing the LCS60 Application Software Screen 9-5 LCS60 Application Software Removal R2.0 Example # pkgrm lcs60 Vendor AT&T-LC Upgrade# pkginfo -l lcs60p Remote Upgrade Installing an Upgrade on a Remote Upgrade Client Remote Upgrade Installation Menu # pkgadd -d /var/spool/pkg Processor Board Firmware Update ⎜ N⎜ B ⎜ a Processor Board Firmware Update ⎜ 0D ⎜ Reset Local System CPU Y/N? Screen 9-6 set and env Commands Bugset Processor Diagnostics MVME197 Ecdm HEXLanc Mask Vmedkhs Diagnostics Screen 9-7 Example diag cpm for CPM-HS Module CC0 rem cpm CC0 diag cpm Diagnostic Exits CC0 res cpm CC0 display conn mod LCS60 to Data Switch Connected Host Verification dkcu Connection Verification LCS60 to Data Switch Verification Loopback Test dkcu LCS60 to Local Ethernet Host Verification pingDkcu mlkway/earth/watson Dkcu mlkway/earth/morse Memory Dump Screen 9-8 Service Menu At the root prompt, remove the tape from tape drive After the Dump is CompletedCd /stand Echo unix ⎪ cpio -oBc /dev/rmt/ctape1 Originating Group Security Srvtab Table of Contents Issue Srvtab Server Table System Field These fields are described below ⎜ hyphen Null generally login ⎜ arap Service Field⎜ File Service Flags Field Table A-1 Server Table Flags User Field Table A-1 Program Field Table A-2 User ID Mapping Options Table A-3 Program Arguments Specification Initial Parms Field Server Table Scanning Rules Table A-3 Modifications to the Server Table Server Table Validation and Matching Appendix a Configuration of the StarKeeper Alarms to StarKeeper II NMS Table of Contents Issue Configuration of the StarKeeper II NMS Diskette or Tape Installation For HP ForHardware Enter i Return when you see the following Enter /usr/bin/installpkg then enter F to installSupport for AT&T 6386 into the disk drive when instructed Then execute the following four commands StarKeeper II NMS Configuration Commands At Release enter If you are ready for StarKeeper To indicate that StarKeeper Alarms to StarKeeper II NMS Action Reboot the system cd / /etc/shutdown -y -g0 Description The inetinit process is not executing Description The tlid process is not executing L600730 Process ipxd is down StarKeeper II NMS User Error Messages Slip Sessions Table of Contents Issue Access denied Cable Error MessageOutgoing Call Error Messages Address too long All channels busyAll trunk channels busy Auto dialer failed to initiate call. Try again Dial to vlp error Dialer errorDkserver Cant open line. Call System Administrator Could not complete your call. Try again Dkserver Dksrvtab not readable. Call System Administrator Dkserver Cant chroot. Call System AdministratorError During Call SETUP. Call System Dkserver Cant push your streams module Host configuration mismatch. Call Network Administrator Host protocol errorDkserver Call on a busy device or call collision, try again Endpoint hung up Network congestion--Call forward error. Try again later Network congestion--Call timeout. Try againNetwork congestion--Connection error. Try again later Insufficient CIR at module Network routing error No diagnostic channelOpen channel error Network hung up Service mismatch SIM no accessReceive window too small Remote node not answering Incoming Error Messages Slip Sessions Ipaserrno=error number Slip is temporarily disabledMissing -s %h option in dksrvtab4 slip file Ip address IP address is invalid Mtu=MTU size, must satisfy 296 = mtu = Reload System Software Unix System Software Installation Seagate ST5660N Drive Table of Contents Issue Unix System Software Installation Screen D-1 How to Enter System Responses If you have a Seagate ST11200N drive, refer to for Unix Sys Appendix D Add the following line to the file NCD See note below Return Appendix D Manual Pages Table of Contents Statlcs Telnet Table of Contents Issue Atping1M Atlog Atlog 1MAtlog -d loglevel -t enprz0 Atnetstat 1M Atnetstat Atnetstat 1M Atping 1M Atping -dsec net.node packetsize count Atping Atping 1M Usr/etc/atping Usr/etc/atlog Usr/etc/atnetstat Dkcu 1C ˜ !cmd ˜ $cmd ˜ %take from to ˜ ˜ Send the line ˜ . . . to the remote system Opt/dk/bin Directory in which this command residesTransmit a Break to the remote system Common Signaling Channel device for interface Dkmaint 1MDkmaint r i interface c channel Opt/dk/sbin Wwsize FTPFTP Append local-file remote-file Account passwdAllbinary Disconnect BinaryDebug Macdef mname Macdel mname Macls mname Nmap inpattern outpattern Ntrans inchars outcharsOpen host port Prompt Proxy ftp-cmd Put local-file remote-fileQuote arg Rename remote-file new-name Rstatus file RuniqueSendport Site arg Verbose SystemUmask mask Netrc4, services4 Chmod1, umask1 Ifconfig Ifconfig 1M Broadcast addrHostgroups Join addr Metric n Mtu mtuNetmask mask Netstat1 Inetinit.cf4 Ifstat -adfstz-linterval config file cntrlr num Ifstat Ifstat 1M Linterval Etc/ifstat.conf Ifstat Ifstat 1M Iftrace 1M Iftrace gdpbhrtn f diskfile i count keywordsDiskfile Count Iftrace Iftrace 1M Keywords Ipxnetstat 1M Ipxnetstat -ir dv -p rip ⎪ ipx intervalEtc/lcs/ipxas.cf Usr/etc/ipxnetstat Ipxping1M Usr/etc/ipxping Usr/etc/ipxnetstat Ipxping Ipxping 1MIpxping networknode packetsize count interval Netstat Netstat -AainrsSv-p protocol interval Hosts4, networks4, protocols4, services4 Named1M, route1M, routed1M Nslookup Nslookup host server nslookup serverHost server Help Server host lserver host NoaaonlyNod2 Nodebug Timeout=x NorecurseRetry=x Root=host Named1M Resolver3 Named.boot4, resolv.conf4 Ping -r-vhost packetsize count Netstat1 Ifconfig1MPing 1M Symbolic Links Pull Pull 1CPull L destination filename ... directory Long Names Multiple Interfaces Push Push 1C Push lxho9 a/b c a/d/e /tmp/oneCreates files /tmp/one/b, /tmp/one/c, and /tmp/one/e, while Push lxho9 /tmp/two ! a/b D/e Symbolic Links Local machine will be used as the file modification time Route 1M Route flush net⎪host Route Route 1M Usr/etc/statlcs Statlcs 1MStatlcs -t Crmod TelnetTelnet -ec-8 host port Help command ? command Negotiate command optionEscape c Linemode Options Transnvt commandOpen -ec-8host port Telnetd4 Slip Service Examples Introduction Client Software ConfigurationPPP Service Examples Arap Service Example Connection via Modem Client Software Configuration All users Users with a NAC security server Client PackagesMac Connection CCL Script Screen F-1 CCL Script Example @ORIGINATE Screen F-1 USERID, Password CCL and Modem HintsNj/exch/system.ppp Exit PPP Service Examples Windows 95 IPX over PPPModem Be sure you dont have conflicts with existing label numbers PC Configuration Figure F-1 Windows 95 IPX Over PPP Example Screens PPP Connection Destination mlkway/earth/morse.ppp Screen F-2 Sample LCS60 dialup.scr Screen F-2 Figure F-3 PC/TCP Example Screens 14400 154.12.22.81 InterPPP Connection User Information Figure F-5 Network Control Panel Figure F-7 IP Address Screen Figure F-8 PPP Connection Screen Figure F-9 AppleTalk Status Window Slip Service Examples ChameleonNFS Figure F-11 Custom Setup Window Default Screen F-3 slip.ini File FragmentTYPE=SLIP SLIP0 TYPE=SLIP SLIP1 Arap Service Example Connection via Modem Information Figure F-15 Arap Remote Access Setup Modem Example Figure F-16 Arap Remote Access Status Screen Example User Information General Parameters Report Fields Table of Contents Issue Glossary General Interface InternetIP Network Network Parameters AppleTalk Network/Zone atalkas Ethernet Interface etherif DNS Resolver dns Define Service Sessions maxsessionsSLIP/PPP Service ipas/ipx TCP-to-Asynchronous Gateway Services srvports Subnetwork Configuration subnet Report Fields Session DirectoryShow Arap Sesid Session ID number Show Slip Char Mode Show Async/TCPConnect Time Idle Time Show PPP Link, IP, IPX, AppleTalk Magic Proto CompAddr Comp Peer Addr Trace Arap Trace Async/TCP Trace PPP Trace Slip Show Statistics Show ConfigurationsPorts Directory Show Service DirectorySummary Cfg UseCap Max Service Name Manager DirectoryServer Directory Psid # Server Name # InuseStartup Time Index Index Issue Index Async-to-TCP gateway service AuthenticationAutoboot reset Backup, 8-18,see Backup/restore PPP, F-2 Mac, F-1 Network security group, 4-3,5-3 Data switch InstallationD8AH connector, 2-13,2-18 Data switch, G-1 Index Server log file Ifconfig, E-19 Dialstrings Index Local backup/restore Login, A-3Configuration, F-1,F-22 Maintenance, 9-1,D-1 NAC Example, F-13 Index Routing IP packets RS-232 connections, 2-4,2-9 to SID Index How to enter, 9-2,D-2 Backup toList contents Restore from LCS60 console connection Version Index