406 CID | Lucent Technologies Release 8.2 instruction

Network Security Issues

C Security Issues

		Administration for Network Connectivity
406	CID: 77730	555-233-504 — Issue 1 — April 2000

Image 426

Lucent Technologies Release 8.2 manual 406 CID

Contents

Definity CID Contents LAN Administration Contents Appendix a Screens Reference 243 Appendix B Private Networking 311 Appendix C Security Issues 403 Appendix G References 459 Issue Status PurposeAudience Screen Changes Issue Status PrefaceEthernet Data Module screen is changed in Release Ethernet Data Module screen Issue StatusPreface Ppp Data Module screenIP routing and the IP Route screen Issue Status Following chapter reorganization has been made for Release Reorganization Glossary OrganizationOrganization Index Screen TerminologyTerminology Node How to access this book from the web How to access this book from the webHow to order more copies Click Information Resources Tell us what you think How to Order BooksHow to Comment on This Book Tell us what you think Where to Call for Technical Support Where to Call for Technical SupportTelephone Number Trademarks Trademarks Trademarks Definity Switch Connectivity Connectivity OverviewWhat kinds of connections are possible? Trunks Definity Switch Connectivity Networking Overview Networks Call-signaling data DCS-signaling data Switch DefinityFunction of each circuit pack shown in is described below Pre-R7 circuit packs PI si only IP-InterfaceTie-Trunk Circuit Packs Netcon si only LAN IsdnQsig PPP Connection Type Hardware Required Hardware Requirements for Upgrades from Pre-R7 SwitchesRelease 8 Hardware Requirements Pgate TN577 R8si model R8csi model R8 Model Connection Type Endpoint Definity Connection types and capacitiesDefinity ECS ISDN-PRI DCS+ Csi ISDN-TSCPgate LAN Telecommuter application IP SoftphonesIP Softphones Networking Overview Road-warrior application IP Softphones Networking Overview IP Addressing Physical AddressingLogical Addressing 50% Class B 128Class a 25% Class C 128.0 to Network ID Range Host ID Range Total IP Addresses1 to 192.0.0 to Subnetting How subnets are created Class Type Network ID Subnet ID Host ID Default Subnet MaskClass Type Network ID Host ID 11111111.00000000.00000000.00000000 255.0.0.0 Decimal No. Binary SubnetClass-C subnets Bit subnets Example 11100000 Subnet mask255 224 Digits Class a Class B Class C Default Default Gateway Security Alert When to use IP routes Connection When IP Routes are Needed TypePPP Route Type host LAN Switch Node Destination Gateway Route Comments ConnectionsDS1 IP Route Examples PPP Connections DS1 PPP with Ethernet Connections Default gateways for nodes 2 and 7, respectively SW a SW BSW C Ethernet-only Connections IP route needed because Issue 1 April IP Solutions Circuit Pack Requirements Software IP SolutionsOverview Overview 323 Trunks IP-Connected TrunksIP Softphones Trunk Trunk Administration Enabling AdministrationTrunk Administration 323 Trunks Maintenance-Related System Parameters IP Parameters Codec Bandwidth Requirement UDP Port Range Min Max Node names Trunk Administration Task SummaryDescribed in the next section IP Interfaces ~ PBX ID Signaling Group2 Administered NCA TSC Assignment Trunk Group Trunk Administration Task Detail Task 1 Assign Node NamesNetwork Regions Go to page 2 of the screen Field Conditions/CommentsTask 1 Steps Task 2 Define IP Interfaces Enter c-lan or medproTask 2 Steps Trunk Administration 323 Trunks Field Conditions/Comments Task 3 Assign Link via ethernet Data Module to the LAN Task 3 Steps Task 4 Create a signaling group Task 4 Steps Configuration 4, for instructions Submit the screen Task 5 Create a trunk group Trunk Administration2 H.323 TrunksAre described in the Administrator’s Guide Open new Trunk Group form enter a tr n If using DCS, go to screen PBX ID Enter group members Enter values Task 6 Modify signaling groupOpen the Signaling Group form enter ch sig Task 6 Steps Task 7 Specify codecs Task 7 Steps Troubleshooting IP Solutions 323 Trunks Troubleshooting IP SolutionsTrunk Problem Solving Signaling group assignments SGB1 TGA1TGB1 SGA1 IP Softphone Problem Solving LAN Administration Supported Switches and Adjuncts Checklist Item Checklist for Prerequisite AdministrationOverview LAN Administration Otherwise Overview LAN Administration Checklist Item Configurations Organization of this chapter Task Summary Supported Switches and Adjuncts Intuity Audix LAN Setup Summary CMS LAN Setup Summary Configuration 1 R8r -ppp- R8si Configuration 1 R8r -ppp- R8si LAN AdministrationTask Summary Software-defined connections Prerequisite AdministrationConfiguration Hardware connections Switch 1 Task Assign Node Names Steps Switch 1 Task Assign Link via ppp Data Module to Switch Open Data Module form enter ad da n BCC COSCOR CHAP? Configuration 1 R8r -ppp- R8si Switch 1 Task Assign Processor ChannelsSwitch 1 and specifies the destination node and machine ID Open the Processor Channel Assignment form enter ch com p Local Session number on this switch must equal Switch 2 Task Assign Node Names Switch 2 Task Assign Link via ppp Data Module to Switch This data module is assigned the next available extension This is a display-only field Switch 2 Task Assign Processor Channels Open the Processor Channel Assignment form enter ch com p End Enable links and processor channels Definity ECS R8r EthernetDefinity ECS R8csi Task Summary Configuration See CentreVu CMS Software Installation and Setup Switch 1 Task Assign IP Interfaces End Open Data Module form enter a da n To CMS Name entered on the Node Names screen End Switch 2 Task Enable Bus Bridge Connectivity Open the Maintenance-Related System Parameters form enter Node-4 Interface on the router to the subnet of Switch Switch 2 Task Define IP Interfaces Switch 1 Task Assign IP Interfaces page 77 for an Add data next Switch 2 Task Assign IP Route to Switch Ip n Configuration 2 R7r +CMS -ethernet- R7csi LAN Administration Switch 2 Task- Assign Processor Channels For this connection. The Destination Port number on Intuity System Administration Definity ECS administration Intuity system administration Network Addressing Administer Extension Numbers, Channels Services Administer Subscribers IP address administered on the Lucent Intuity system IP Address 192.168.1.125 Worksheet B LAN Data for the Lucent Intuity System Enable links and processor channels R8si BX.25 HubEthernet node-3 Definity ECS R8si Definity ECS R7si Definity ECS R7r Name IP Address Default Node-1 192 Node-3 Switch 1 Task Assign pdm Data Module Configuration 3 R8si-x.25 R8r Gateway LAN AdministrationITC Configuration 3 R8si-x.25 R8r Gateway Ethernet- R8si Field Conditions/Comments Switch 1 Task Assign Link via x.25 Data Module to Switch DTE/DCE 106 CID Configuration 1 R8r -ppp- R8si Add data module next Ch com p For each connection, the Local Session number on this switch Issue 1 April CID 111 112 CID Wideband transmission For the call setup. Enter y when administering the data Open Processor Channel Assignment form enter 116 CID Switch 3 Task Assign Node Names 118 CID Configuration 1 R8r -ppp- R8si 120 CID Switch 3 Task Assign Processor Channels Open Processor Channel Assignment form enter ch com p 122 CID Enable links and processor channels ECS R8si Ppp Definity ECS R8csiR8csi Definity ECS R7csi Definity ECS R7si 126 CID Extension in the dial plan Enter values Node Name Name entered on the Node Names screen Switch 1 Task Assign Processor Channels 130 CID Must equal the Remote Session number on the remote switch Ch sig n TSC NCA-TSC 134 CID Configuration 4 R8csi -ISDN- R8si Gateway Switch 1 Task Assign ISDN-TSC GatewayLAN Administration Ppp- R8csi Open the Isdn TSC Gateway Channel Assignment form enter NCA TSC As-needed means the administered NCA-TSC will be 138 CID Switch 3 Task Enable Bus Bridge Connectivity 140 CID Switch 3 Task Assign Link via ppp Data Module to Switch Extension in the dial plan Enter valuesIs complete that is, until after all data modules Name Be a name entered on the Node Names screen For this connection. This number must match the Destination 144 CID Enable links and processor channels Review checklist Switch 1 administration Assign node names Ethernet Hub Configuration 5A Node-3 Ext 148 CID Digits Node Name node-2 CHAP? n 150 CID Switch 1 Task Assign IP Interfaces 152 CID Open Data Module form enter a da n Open the Processor Channel Assignment form enter Issue 1 April CID 155 156 CID Issue 1 April CID 157 Name IP Address Default Node-1-ppp 192 Node-2 Node-3 192 BCC Bearer Capability Class. This is a display-only field 160 CID Switch 162 CID Switch 2 Task Assign IP Route to node-3 See IP Routing page 251 in Appendix a for more Name IP Address Default Node-1-eth 192 Node-2 Node-3 Switch 3 Task Assign IP Interfaces 166 CID Open Data Module form enter a da n 168 CID End 170 CID Definity ppp ECS R8r PppDS1 172 CID Configuration 5B Submit the screen1 Issue 1 April CID 175 176 CID Switch 1 Task Assign IP Interfaces 178 CID Open Data Module form enter a da n Switch 1 Task Assign Link via ppp Data Module to C-LANa COS Switch 1 Task Assign Link via ppp Data Module to C-LANb Authentication Protocol security mechanism on this link 184 CID Issue 1 April CID 185 Must equal the Remote Session number on the remote switch Session Local Switch 1 Task Assign IP Route C-LANa to node-3 Switch 1 Task Assign IP Route C-LANb to node-2 Issue 1 April CID 189 Name IP Address Default Node-1a-ppp 192 Node-2 Node-3 Digits Node Name node-1a-ppp CHAP? n 192 CID Entered on the ppp Data Module screen 194 CID System assigns the route number 4. Enter values Name IP Address Default Node-1b-eth 192 Node-2 Node-3 Switch 3 Task Assign IP Interfaces 198 CID Network uses 1’s 200 CID End 202 CID Networking Example Ethernet 10BaseT Hub Network DiagramOverview Networking Example Router CMS Isdn TSC ECS R6si ECS R8si Link/Channel/TSC MapLink/Channel/TSC Map Networking Example ECS R8csi R6si Network MapNetwork Map Networking Example R8r Gateway R8si Connection to Switch Node Switch-Node 1 AdministrationSwitch-Node 1 Administration Networking Example DS1 Circuit Packs Dial Plan Dial Plan Record Signaling Group Synchronization Plan Group 12 tie to Switch Node 2 Trunk GroupsGroup 12 member Assignments Group 22 data to Switch Node 2- page1 Group 22 Group Member assignments Group 13 ISDN-PRI to Switch Node Group 13 member Assignments Group 14 tie to Switch Node 4 Group 14 Group 24 data to Switch Node Page1 Group 24 member Assignments Uniform Dialing Plan AAR Digit Analysis Isdn TSC Gateway Channel Assignment Routing PatternsPattern Node Names Data Modules Data module Pdm data module Ppp data module Processor Channel Assignments Ethernet data module Switch-Node 2 Administration Switch-Node 2 Administration Networking Example Trunk Goups Group 12 Uniform Dialing Paln Procr-intf data module Release 6 Processor Channel Assignment Screen Release 6 Interface Links screen Hunt Group Hunt Group Switch-Node 3 Administration Switch-Node 3 Administration Networking Example Change synch Group 13 ISDN-PRI Group 13 String Min Max Pattern Type Num Reqd 221 101 Aar 222 224 Mrk Lmt List Digits Digits 113 User Switch-Node 4 Administration Switch-Node 4 Administration4 Networking ExampleBus Bridge Switch-Node 4 Administration Networking Example Group 14 member Assignments 236 CID Change udp Name IP Address Ppp41 192 Ppp14 CMS 192 Router 192 Ethernet1 IP Routing 240 CID CMS Administration Intuity Translations for DCS AudixIntuity Translations for DCS Audix Networking Example CMS Administration Networking Example Screens Reference Networking Screens Other Network-Related Definity Screens Screens Reference Networking Screens Networking Screens Screens ReferenceValid entries Usage Pages 2 IP AddressName IP Interfaces Valid Values UsageInter-region IP connectivity allowed? Code Enable Eth PtSlot Sfx Valid Value Usage Gateway Address Net Rgn Connection When to Define IP Routes Type Host IP Routes Network IP Routes Route Number Destination NodeLAN Board LAN1 LAN2 Route Type IP Media Parameters Audio CodecPreferences Valid Entries Data Module Usage Types Data Module ScreensCommon Data Module Fields Valid Entries Data Usage Module Types Port NncssppValid Data Module Usage Entries Types Link Valid Data Usage Entries Module Types Valid Data Module Usage Values Types Switched TAC + Connected Data Module Dte, isnEstablish Connection? Connected To Unrestricted Test? Data Module Type Valid Usage EntriesCommon Fields Network uses 1’s for broadcast addresses? Are not listed below Common Fields Class a Class B Class C Default Networking Screens Screens Reference Valid Value Usage Destination Digits Chap?Chap Secret COS Physical Channel Hot-line , default , orMaintenance Extension List Internal, external ExternalAssigned Member Ext and Name Clocking Set to adjunct for DCS, CMS, or Intuity Audix This form applies only to the r modelSpecifies the data transmission rate for this connection Baud Rate Default is Sent without confirmation. Default isLeave at 64 for normal operations Page Enter y if this PDM is the secondary data module used for Enable Communication-Interface Processor ChannelProc Chan Msaclk , msahlwc , msallwc Audix , dcs , fp-mwi , gatewayGtwy-tcp , mis , msaamwl Msamcs , qsig-mwi , and blank Interface Link Interface Chan Session Remote Destination PortSession Local Mach ID Hardware configuration ReconfigurationCircuit Packs Cabinet Layout Single-carrier-stackCarrier Carrier Type Lgate TN802 Channels on its associated DS1 interface, and for no others Screen for ISDN-PRI Non-Facility Associated SignalingScreen for ISDN-PRI Facility Associated Signaling Type ISDN-PRI Associated Signaling Group NumberPrimary D-channel Max number of CA TSC Secondary D-channelMax Number of NCA TSC Trunk Group For NCA TSC Trunk Brd Supplementary Service ProtocolTrunk Group for Channel Selection Interface ID On pages 3-6 of the ATM Signaling Group screen Service/Feature TSC Index EnabledAs-needed Inactivity Time-out min Local Ext Dest. Digits Networking ScreensA Screens ReferenceThrough Can include up to 15 digits Blank Adjunct Name H.323 signaling group type is used for H.323 trunks Valid entries Usage 1719, 1720 or5000-9999 65535 Valid entries Usage Mulaw or alaw Valid entries Usage T1 or E1 Valid entries Usage PROGress default ALERTingValid entries Usage Or etsi Valid entries Usage Host , network , or pbx Isdn TSC Gateway Channel Assignments Sig Group Application Other Networking-Related Definity Screens Communication Interface LinksOther Networking-Related Definity Screens Screens Reference Destination Number Est ConnExt Conn Mod Data Module type netcon Maximum Bit Rate Special Dialing Option Assigned Member Ext Data Module type analog-dm Abbreviated Dialing # character may only be used as Extended Trunk Access Call ScreeningValid entries Usage Digits 0 through First character Extension Number Portability Numbering Plan EPN Code Hop Channel Assignments Screen Pages 1 through X of the Screen Chan for G3si Implementation notesEnter an interface link number in each field Network channel. Displays for G3si only Node Number Node Number RoutingPartitioned Group Number Route Pattern Routing Digits e.g AAR/ARS Access Code Message Waiting Indication Subscriber Number PrefixesInserted Digits to form Complete Number 1 of the screen StratumPort Network Primary SecondaryLocation/Name Slip Uniform Dial Plan Ext Codes AARCode ENPNode Local TempOOS UDPCode Ext Code, Type and associated data AARCode ENPNode Local TempOOS Location Code 310 CID Contents of this Appendix Private Networking Distributed Communications System Description of DCSDistributed Communications System Private Networking Alphanumeric Display for Terminals DCS FeaturesAttendant Control of Trunk Group Access Attendant Direct Trunk Group Selection Automatic Callback Automatic Circuit AssuranceBusy Verification of Terminals and Trunks Call Coverage DCS Call Coverage 316 CID Distinctive Ringing Call ForwardingCall Waiting Leave Word Calling Multiappearance Conference/ Transfer Trunk Group Busy/Warning IndicationDCS with Rerouting How to administer Enhanced DCS Italian DCS ProtocolForm Field ISDN/X.25 gateway DCS Over ISDN-PRI D-channel How to administer DCS Over ISDN-PRI Channel NCA-TSC DCS feature considerations DCS Over ISDN-PRI LWC considerationsBusy/Warning Operator ISDN-PRI DCS InteractionsCAS UDP Busy Verification Asai CDR GRS SDNDistinctive Ringing Multiappearance Example DCS configurationsEdcs Conference/Transfer Audix FRL TSCPBX ID DCS? TSC CA-TSC PBX-ID PBX ID Switch Ext Code Type Location Group # Grp Type Used for DCS? DCS Sig. Method Matching Min Max Del Replacement Net Conv Pattern String TSC Index Processor Application Channel Group # Grp Type Used DCS PBX ID NCA-TSCFor Sig Sig. Group Local Enable Establish Dest Far-end Appl Index Ext Dialed String Min Max Rte Call Type Node Num PatGroup # Grp Type Used for DCS Sig. Method ATM PNC? Centralized Attendant ServiceHow to administer CAS ATM-PNC CAS Backup Service CAS QueuesCAS Remote Hold CAS Incoming Call Routing Branch-generated call-identification tonesCAS Outgoing Call Routing Considerations Branch Attendants Interactions 342 CID How to administer Emergency 911 Calls InteractionsNone Extended Trunk Access Case #1Case #2 Case #3 Case #4Abbreviated Dialing How to administer ENP Extension Number Portability Inter-PBX Attendant Service How to administer Inter-PBX Attendant Service Private Network Access How to administer Private Network AccessAplt ISDN-BRI ISDN-PRI Attendant Call Waiting How to administer UDP Distributed Communications System Private Networking Switch RNX UDP Code Extension Considerations 354 CID Isdn Feature Plus Private Networking Isdn Feature PlusHow to administer Isdn Feature Plus ~ G3 Version field to ~ Isdn Feature Plus field to y Description Differences in Inserted Digits field Interrogation Interactions Forwarding and Coverage Qsig Qsig Category Supported Features Transit switch information Qsig Basic Call SetupQsig Basic Supplementary Services Transit Counter ANF-TC Diversion Tandem switch informationIsdn numbering formats Call Transfer Call Offer Call Completion Qsig Centralized SS-CC Options Other Qsig Centralized Messaging What you get with Qsig Centralized AudixWhat you do not get Path Retention Qsig Centralized Attendant ServicesAttendant Service Potential Drawbacks Qsig CAS functions in RLT-CAS Qsig Supplementary Services with ReroutingQsig Path Replacement Qsig CAS functions not in RLT CAS Rerouting Qsig Transfer into Lucent Qsig Voice MailQsig Value-Added Lucent Valu Transfer into Qsig Voice Mail Temporary Signaling Connection TSCs Qsig ProtocolsCA-TSC DCS only Protocol standards Setting Up Qsig Qsig capabilities ~ Basic Supplementary Services field is y ~ Async. Transfer Mode ATM Trunking field is y~ Basic Call Setup field is y ~ ISDN-BRI Trunks field is y Numbering Format public, private, unknown, unk-pvt Setting Up Qsig Supplementary Services Setting Up Centralized Steps Attendant Services Transfer into Voice Mail Setting Up Qsig Valu Steps Call Coverage Coverage with Qsig Diversion with Rerouting Related Hunt Group Administration Related Administration Terminating Extension GroupsRelated Phone Calling Party Number to AUDIX? y Qsig Interactions Call Forwarding Diversion Voice Mail Path ReplacementTransfer Into Qsig Qsig Name Transit Counter 382 CID Message Waiting Indications Isdn Qsig BRI Adjunct Switch Applications Interface Asai Isdn QsigCalled/Busy Name 386 CID Service CAS 388 CID Attendant Release Loop Operation 390 CID Qsig 392 CID Extending a Call 394 CID Centralized Voice Mail Via Mode Code Private Networking Centralized Voice Mail Via Mode CodeConfiguration requirements Definity ECS R8 Feature Support Centralized Voice Mail Via Mode Code Example Configuration ~ Uniform Dialing Plan field is 4 for each node Setting Up Centralized Voice Mail Via Mode Code~ Group Type field is Isdn ~ Service Type field is TIE ~ Uniform Dialing Plan field is 4 or ~ Set Network Level field is ~ Call Type field is lev0~ Type field is vmi End Japan TTC Q931-a Private Networking Protocols OverviewJapan TTC Q931-a Private Networking Protocols TTC Q931-a Protocols Setting Up TTC Q931-a ~ Interface peer-master or peer-slave~ Numbering format public, private, unknown, unk-pvt Network Security Issues Security solutionsSecurity concerns Private network Network Security IssuesAccess control network topology Private segment Damage control application restrictions Summary 406 CID Capacities and Resource Requirements For Definity Capacity Limits508 Capacities and Performance For C-LAN Number of Sockets Required Performance OverviewDefinitions G3r G3si POE =57% 65% 52% 60% Number of MedPros needed Number CL m MedPro For GOS = P001Boards =31 For Full Availability Problem SolutionExampleInternet Call Center LAN Installation Enter change system-parameters maintenance Install the C-LAN Circuit PackLAN Installation Insert C-LAN Circuit Packs Install C-LAN Cables Hub connection Required. See the figure below Other Hardware Upgrades Wall field connection IP Trunk Installation Title Document Issue Number IP Trunk Administration IP Trunk Installation IP Trunk AdministrationAdministration overview Prerequisites Plan call routing Off-Premise Dialing at Remote SiteNT Tasks 420 CID Definity administration procedures DS1 Circuit Pack Robbed-bit Cas 544 048Ami-zcs Ami-basic or hdb3 Mulaw Trunk Group 424 CID Backing up configuration manager Double-click the IP Trunk Backup Restore iconRestoring IP trunk Click Show All Ports NT administration proceduresConfirming the number of available ports Click the Dial/Routing Plan tab None Routing based on Dialed String Routing based on Line Numbers Incoming calls Select Terminating Stopping IP Trunk Service Click on Control Panel Services Starting IP Trunk service Change companding to A-LawAlaw Procedures for Extension Dialing Between Sites Non-DCS Configuration Line Search Replace IP Address String Line Search String Replace String DCS over IP Trunk IP Trunk Installation Administration SignalingDCS over IP Trunk IP Trunk Network Configuration TCP/IP signaling On Switch a On Switch BOn Switch C Line Line Search Replace StringSearch Rerouting calls when IP transmission quality is poor Click PropertiesClick Monitor and Pstn Fallback Setting up alerts on IP trunks Placing a test telephone callMore information Administration, consider making this a joint activity Testing Alerts Viewing error messagesClick Start, Programs, Administrative Tools Alert types Troubleshooting IP trunk Check physicalCheck LAN functions Maintaining the performance of the IP trunk server Use traceroute to Providing general Configuring Microsoft NetMeeting on a PCConfiguration Wizard Information for IP Trunk Installation Administration Changing Audio SettingsDCS over IP Trunk Making Calls to the IP trunk application from NetMeeting Viewing error messages Troubleshooting IP Trunk IP Trunk Worksheets Field Field Name Field Value Code IP Trunk Worksheets Worksheet Worksheets Fill in with Same Create Different IP Trunk Worksheets 1A2BX 1CX Replace string 1F1A 2F2A 1AX 458 CID References Basic Definity ECS documents Definity ECS Release 8.2 Reports, 555-233-505, Issue BCS Products Security Handbook, 555-025-600, IssueReferences References Call center documents Definity ECS Application-specific documents CentreVu Call Management System CMS Console operations Definity ECS Release 7 Console Operations Quick Reference Ansi AARADU Aplt ATM Awoh BCC B8ZSBB8ZS BER BOS BRI Ccms CcisCcitt CDR Cmdr CMS CSN CORCOS CSU DCP DCEDciu DCS Did DNS DTE DSUDtdm EIA FAS HDB3 Iana Inads IP Internet Protocol address Interserver routing table GlossaryBase address IP user LAP-D MAC MapdMA-UUI Mmch MDRMIB MSA Nfas NemaNetcon NIC OSI Paccon PDM PgatePRI PSN PsdnPstn Qppcn RPN RTP Snmp Simple Network Management Protocol Snmp GlossarySmdr SPE TCP TCP/IPTDM UDP UNPVCI VPI WAN ZCS Zero Code Suppression ZCS Index 492 CID DS1 208, 228, 233 per system Index 314 299 383 369 498 CID Qsig NCA-TSC 149, 159, 175, 180, 182 326 502 CID We’d like your opinion