Security, Overview | Paradyne 7112 guide

Security

4

Overview

The DSU/CSU provides several methods of security by limiting user access to the ATI through option settings. Refer to ATI Access on page 4-4.

HEnable the Login Required option to require a Login ID for the:

ÐTerminal Port

ÐTelnet Session

HLimit the access:

ÐPort Access Level option of 1, 2, or 3 for the Terminal port

ÐSession Access Level option of 1, 2, or 3 for the Telnet Session

HDisable the access:

ÐTelnet Session option

ÐFacility Data Link (FDL) option

ÐEthernet Port Use option

SNMP security is handled through Community Names with access levels and

IP address validation. Refer to Controlling SNMP Access on page 4-6.

7112-A2-GB20-20

March 1998

4-1

Image 29

Paradyne 7112 manual Security, Overview

Contents

Model 7112 T1 DSU/CSU Copyright 1998 Paradyne Corporation All rights reserved Contents Configuring the DSU/CSU Monitoring the DSU/CSU Messages and Troubleshooting MIB Descriptions Technical Specifications Glossary Index Document Summary About This GuideDocument Purpose and Intended Audience Product-Related Documents About the T1 DSU/CSU Model 7112 T1 DSU/CSU Features Typical Configuration through a T1 network Typical DSU/CSU Configurations User Interface Types Front Panel LED Status Indicators Snmp Management Capabilities Rear Panel Interface ConnectionsManagement Information Base MIB Support Network Connecting to the Terminal Port Using the Ascii Terminal Interface ATIAccessing the ATI Select Initiating an ATI Session Screen Format Types Screen Work AreasWhat Affects Screen Displays Use the screen format Navigating Status Test Configuration ControlKeyboard Keys Press Procedure Screen Function Keys Switching Between Screen Work AreasFor the screen Select Press Enter to Function Example Ending an ATI Session Using the Ascii Terminal Interface ATI Main Menu → Control → Device Configuring the DSU/CSUEntering Device and System Information Configuration Option Area Configuration Option Set Configuring the DSU/CSUConfiguration Option Areas Saving Configuration Options Accessing and Displaying Configuration OptionsMain Menu → Configuration Load Configuration From If you select Then Cross Connect Assignments Assigning DS0 Channels to the Data Port Displaying DS0 Channel Assignments Using the Block or Acami Assignment Method Clearing DS0 Channel Assignments Using the Individual Channel Assignment Method Overview Security On the Administer Enter Logins screen, for Creating a LoginMain Menu → Control → Administer Logins Resetting the DSU/CSUs COM Port or Factory Defaults Deleting a Login If entering yes to prompt Then ATI Access Effective Access Levels ATI Access to Menu Functions Effective Access Level Connection Failed Controlling Snmp AccessAssigning Snmp Community Names and Access Levels Limiting Snmp Access through the IP Addresses Security IP Addressing IP Addressing Subnet IP Addressing ExamplesLocal Addressing Only No FDL NMS a NMS B FDL Connection ± Extending Subnet for FDL LAN a FDL Connection ± Unique FDL Subnet Assigning IP Addresses and Subnet Masks If using Then assign IP Addressing What to Monitor Monitoring the DSU/CSU Main Menu → Status → Display LEDs DSU/CSU LEDs Fail System LEDs Alarm SIG ± Network SignalEER ± Excessive Error Rate Network LEDs Port LEDs Main Menu → Status → System and Test Status Status Screen CommandsSystem and Test Status Yyyyyyyy Health and Status Messages Xxxxxxxx Self-Test Results Test Status Messages Meaning Test Status Messages Network Time Slot Fields top Indicate Cross Connect StatusMain Menu → Status → Cross Connect Status Main Menu → Status → Network Performance Statistics Network Performance Statistics Interval Table Summary Information Worst Interval Main Menu → Status → Ethernet Port Status Ethernet Port StatusHour Totals Main Menu → Status → Management Protocol Statistics Management Protocol Statistics March Status Specific Trap Screen TestingDetecting Problems Main Menu → Test Accessing the Test Menu Main Menu → Test → Network Tests Running Network Tests Payload Loopback Line Loopback Repeater Loopback Test Patterns for the Network Remote Send Line Loopback Main Menu → Test → Data Port Tests Running Data Port Tests CSU DSU Data Terminal Loopback Data Channel Loopback Send V.54 Up/Down Sequences Test Patterns for the DTE Send FT1 Up/Down Sequences Ending an Active Test Lamp Test Snmp Traps Messages and TroubleshootingConfiguring Snmp Traps Device Messages 1 What Message Indicates What To Do Device Messages Device Messages 2 What Message Indicates What To Do Troubleshooting 1 Symptom Possible Cause Solutions Troubleshooting Troubleshooting 2 Symptom Possible Cause Solutions Messages and Troubleshooting Select To Access To Configure Configuration Option Tables System Options Menu Test TimeoutTable A-1. System Options Self Test Table A-2. Network Interface Options 1 Network Interface Options MenuLine Framing Format Line Coding Format Line Build Out LBO Possible Settings 0.0, ±7.5, ±15, ±22.5 Bit Stuffing Possible Settings 62411, Part68, DisableTable A-2. Network Interface Options 2 FDL Management Link Network Initiated Payload Loopback PLB Table A-2. Network Interface Options 3Network Initiated Line Loopback LLB Circuit Identifier Table A-2. Network Interface Options 4Ansi Performance Report Messages Cross Connect Assignments Assign By Available Settings Block, ACAMI, ChannelTable A-3. Cross Connect Assignments Synchronous Data Port Assignments Table A-4. Data Port Options 1 Data Port Options MenuPort Base Rate Invert Transmit Clock Invert Transmit and Received Data Action on Network Yellow AlarmTable A-4. Data Port Options 2 Table A-4. Data Port Options 3 Table A-5. Ethernet Port Options 1 Port Use Possible Settings 802.3, Version 2, DisableEthernet Port Options Menu Table A-5. Ethernet Port Options 2 Terminal Port OptionsTable A-6. Terminal Port Options 1 Character Length Port Access Level Possible Settings Level 1, Level 2, Level Login RequiredTable A-6. Terminal Port Options 2 Stop Bits Table A-7. Telnet Session Options 1 Telnet Session OptionsTable A-6. Terminal Port Options 3 Table A-7. Telnet Session Options 2 Table A-8. General Snmp Management Options 1 Snmp MenuGeneral Snmp Management Options Snmp NMS Security Options Name 2 AccessTable A-8. General Snmp Management Options 2 Table A-9. Snmp NMS Security Options 1 Table A-9. Snmp NMS Security Options 2 Access Level Table A-10. Snmp Traps Options 1 Snmp Traps OptionsSnmp Traps Number of Trap Managers Table A-10. Snmp Traps Options 2 Link Traps Possible Settings Disable, Up, Down, BothEnterprise Specific Traps Link Trap Interfaces Configuration Option Settings default in Bold Configuration WorksheetsEnable, Disable Worksheets Blank Disable, EnableESF, D4 Internal, External Nx64, Nx56 Ethernet Port Configuration Option Settings Snmp NMS Security Snmp Worksheets MIB II ± RFC 1213 and RFC MIB Descriptions SysName system System GroupSysDescr system Physical 1 ± Layer Interfaces GroupDatalink/subnetwork Internet 4 ± Layer EthernetCsmacd6 ± Used for Version Hardware Revision º Up1 IfInOctets ifEntry Testing3 stateIfInErrors ifEntry IfXEntry Extension to Interface Table ifXTableIfName ifXEntry IfStackEntry2 Interface Stack GroupIfStackEntry1 IP Group Interface Test TableGeneric Receive Address Table Exist. The following objects must InvalidBe specified On next TCP Group Icmp GroupUDP Group Do not specify the following Transmission Group Snmp GroupTable C-6. Transmission Group Objects Description Transmission Dsx1ConfigEntry DS1 Near End Group Configuration Table ObjectsDS1/E1 ± RFC Dsx1ESF2 ± Indicates Dsx1B8ZS2 ± Indicates Dsx1SendResetCode4 ±Dsx1AMI5 ± Indicates Dsx1SendNoCode1 ± Dsx1LossOfSignal64 ± Dsx1NoAlarm1 ± NoDsx1NoLoop1 ± The T1 Dsx1PayloadLoop2 ± LocalTiming2 ± LoopTiming1 ±ThroughTiming3 ± Dsx1other1 ± Snmp Dsx1CurrentEntry DS1 Near End Group Current Table Objects Dsx1IntervalEntry10 DS1 Near End Group Interval Table ObjectsDsx1IntervalEntry Dsx1TotalEntry DS1 Near End Group Total Table Objects RS-232-Like MIB ± RFC Ethernet-Like MIB ± RFCDS1 Fractional Group Number of RS-232-Like Ports Object Rs232PortEntry Rs232AsyncPortEntry Disabled2 ± Does notAsynchronous Port Table Objects Rs232SyncPortEntry Synchronous Port Table Objects Rs232InSigEntry Input Signal Table Objects Rs232OutSigEntry Output Signal Table Objects Generic Interface Test Table Objects Generic Interface Extension MIB ± RFCIfExtnsTestEntry TestMon Qrss wellKnownTests ± Starts a Monitor 511 test on the interface InSyncWithBitErrors InSyncNoBitErrorsInProgress3 ± Test is NotSupported4 ± Requested Enterprise MIB Object Device Configuration Variable pdn-commonDevice Security, pdn-security pdn-common Device Traps, pdn-traps pdn-common MIB Descriptions Trap warmStart Standards Compliance for Snmp TrapsTrap authentificationFailure Snmp Trap Description Possible Cause Traps linkUp and linkDown Interface LinkUp/Down Variable-Bindings Possible Cause Trap What It Indicates Possible Cause Traps enterpriseSpecificPage Standards Compliance for Snmp Traps Cabling Overview Cables and Pin Assignments Modular RJ48C-to-CA81A T1 Network Interface Cable Modular RJ48C-to-RJ48C T1 Network Interface Cable 10BaseT Connector Terminal Port EIA-232 ConnectorSignal Direction Pin # Use Pin # Pin Serial Crossover Cable Direction Pin Socket Connector DTE V.35 ConnectorSignal Cables and Pin Assignments Model 7112 DSU/CSU Technical Specifications 1 Technical Specifications Model 7112 DSU/CSU Technical Specifications 2 Glossary Default Configuration optionDigital signal Channel allocation EIA-232 Factory defaultsEnterprise MIB Enterprise-specific Loopback ResetManager Snmp Multiplexing Self-test RS-232Subnet Subnet address Pattern Yellow AlarmIn-8 pattern Numbers Index IN-2 IN-3 IN-4