Security and Logins | Paradyne 9123 specification

Security and Logins

4

This chapter includes the following:

HLimiting Access

HControlling Asynchronous Terminal Access

HControlling External COM Port Device Access

HControlling Telnet or FTP Access

ÐLimiting Telnet Access

ÐLimiting FTP Access

ÐLimiting Telnet or FTP Access Over the TS Management Link

HControlling SNMP Access

ÐDisabling SNMP Access

ÐAssigning SNMP Community Names and Access Levels

ÐLimiting SNMP Access Through IP Addresses

HCreating a Login

HModifying a Login

HDeleting a Login

9123-A2-GB20-10

July 2000

4-1

Image 97

Paradyne 9123 manual Security and Logins

Contents

FrameSaver Flex Copyright E 2000 Paradyne Corporation All rights reserved Contents Configuration Security and Logins Troubleshooting Setting Up NetScout Manager Plus for FrameSaver Devices Index Purpose and Intended Audience About This GuideDocument Organization Where installation and setup information is located and how Setting Up OpenLane for FrameSaver Devices. IdentifiesSetting Up NetScout Manager Plus for FrameSaver Devices. Describes setup of the NetScout Manager Plus Product-Related Documents Conventions Used When viewing this manual online. Click onTo indicate a hyperlink to additional information Highlighted text System Overview About the FrameSaver FlexSystem Overview FrameSaver Flex Feature Sets Flex Flex SLV Feature Feature Set Basic Advanced Basic Flex Features Maximum Number of PVCs and Management PVCs Supported 9123-A1-211 9123-A1-213 Feature 9123-A1-221 9123-A1-223Models Through Connections PVCs Dedicated Management PVCs July Advanced Flex SLV Features OpenLane SLM System NetScout Manager Plus and NetScout Probes About the FrameSaver Flex User Interface Basic Operation Logging On Procedure If your login was Then Select Main MenuMain Menu Screen Work Areas Service Level Verification System OptionsScreen Format Description Keyboard Keys Navigating the ScreensPress Select For the screen Press Enter to Function Function Keys Selecting from a Menu Switching Between Screen Areas Entering Information Selecting a FieldExample User Interface and Basic Operation Configuration Configuration Configuration Menu Basic ConfigurationConfiguration EDIT/DISPLAY Configuration Option Area Description Configuration Option Areas Main Menu → Configuration Accessing and Displaying Configuration Options Configuration → PVC Connections Changing Configuration Options Saving Configuration Options Main Menu → Easy Install Using the Easy Install FeatureEasy Install Screen Example Default If the selection is Unit is configured to operate Entering System Information Setting the System Clock Setting Up So the Router Can Receive RIPConfiguration → Data Ports → Dlci Records Main Menu → Control → System Information Main Menu → Auto-Configuration Setting Up Auto-ConfigurationAuto-Configuration Screen Example AUTO-CONFIGURATION Main Menu → Auto-Configuration → Frame Relay Discovery Mode Selecting a Frame Relay Discovery ModeDiscovery Mode Configuration Description 9123-A2-GB20-10 July Automatically Removing a Circuit Changing Operating Mode Setting Up Back-to-Back OperationMain Menu → Control → Change Operating Mode Configuring the Overall System Configuration Option Tables Main Menu → Configuration → System → Frame Relay and LMI Configuring Frame Relay and LMI for the SystemSystem Frame Relay and LMI Options 1 LMI Behavior System Frame Relay and LMI Options 2 LMI Status Enquiry N1 Possible Settings 1, 2, 3, 4Traffic Policing System Frame Relay and LMI Options 3 LMI Heartbeat T1 Possible Settings 5, 10, 15, 20, 25 Service Level Verification Options 1 Configuring Service Level Verification Options SLV Timeout Clearing Event Threshold Service Level Verification Options 2SLV Packet Size bytes Main Menu → Configuration → System→ General Configuring General System OptionsGeneral System Options Configuring the Network Interface Configuring the Physical InterfacesMain Menu → Configuration → Network → Physical Network Physical Interface Options 1 Bit Stuffing Network Physical Interface Options 2Transmit Timing Network Initiated LLB Network Physical Interface Options 3 Network Initiated Dclb Possible Settings Disable, V.54&ANSINetwork Initiated PLB Ansi Performance Report Messages Circuit Identifier Network Physical Interface Options 4 Main Menu → Configuration → Data Ports → Physical Configuring the User Data PortData Port Physical Interface Options 1 Transmit Clock Source Monitor RTS Control Data Port Physical Interface Options 2Port DTE Initiated Loopbacks Assigning Time Slots/Cross Connections Main Menu → Easy Install → Time Slot Assignment ScreenAssigning Frame Relay Time Slots to the Network Interface Value Meaning Frame Relay Network Time Slot Assignment Screen ExampleTime Slot Assignment Rule Frame Relay Network 1 Assignment Select Frame Relay Network Assignments Synchronous Data Port Assignment Screen Example Assigning the Synchronous Data Port to Network Time SlotsSync Data Port Assignment Clearing Assignments Interface Frame Relay Options 1 Configuring Frame Relay for an Interface LMI Parameters Interface Frame Relay Options 2 Frame Relay DS0s Base Rate Interface Frame Relay Options 3 Main Menu→ Configuration→ Network/Data Port→ Dlci Records Manually Configuring Dlci RecordsDlci Type Possible Settings Standard, Multiplexed Dlci Record Options 1 CIR bps Dlci Record Options 2Committed Burst Size Bc Bits Excess Burst Size Bits Dlci Priority Dlci Record Options 3Outbound Management Priority Main Menu → Configuration → PVC Connections Configuring PVC ConnectionsPVC Connection Options 1 Destination Link PVC Connection Options 2Destination Dlci Destination Edlci Configuring Node IP Information Setting Up Management and Communication Options Node IP Options 1 Node IP Options 2 TS Access Management Link Node IP Options 3 TS Access 10. Management PVC Options 1 Configuring Management PVCsName 10. Management PVC Options 2 Primary Link Possible Settings Net1-FR1, Port-1, ClearSet DE Primary Dlci 10. Management PVC Options 3Primary Edlci Name 1 Access Configuring General Snmp Management11. General Snmp Management Options 1 Snmp Management 11. General Snmp Management Options 2 Configuring Telnet and/or FTP Session Support12. Telnet and FTP Session Options 1 12. Telnet and FTP Session Options 2 Inactivity Timeout 12. Telnet and FTP Session Options 3 FTP Login RequiredDisconnect Time Minutes FTP Session Access Type Configuring Snmp NMS Security13. Snmp NMS Security Options NMS IP Validation 14. Snmp Traps Options 1 Configuring Snmp TrapsSnmp Traps Number of Trap Managers Enterprise Specific Traps 14. Snmp Traps Options 2 14. Snmp Traps Options 3 Link Traps Possible Settings Disable, Up, Down, BothRmon Traps 15. Ethernet Port Options 1 Configuring the Ethernet PortInterface Status Proxy ARP 15. Ethernet Port Options 2 16. Communication Port Options 1 Configuring the Communication PortPort Use Character Length 16. Communication Port Options 2 Login RequiredStop Bits Ignore Control Leads 16. Communication Port Options 3 RIP 16. Communication Port Options 4 External Modem Commands Configuring the COM Port to Support an External ModemDial-In Access 17. External Modem COM Port Options Configuration Security and Logins Controlling Asynchronous Terminal Access Limiting Access Set the configuration option Controlling Telnet or FTP Access Controlling External COM Port Device Access Limiting Telnet Access Limiting FTP Access Limiting Telnet or FTP Access Over the TS Management Link Disabling Snmp Access Controlling Snmp Access Assigning Snmp Community Names and Access Levels Limiting Snmp Access Through IP Addresses Main Menu → Control → Administer Logins Creating a LoginField Enter Deleting a Login Modifying a Login Operation and Maintenance Main Menu → Status → Identity Displaying System InformationView this field To find Main Menu → Status → Display LEDs and Control Leads Viewing LEDs and Control LeadsDisplay LEDs & Control Leads Screen General Status LEDs 1 Label Indication Color What It Means LED Descriptions Network Interface LEDs Label Indication Color What It Means General Status LEDs 2 Label Indication Color What It Means User Data Port LED Label Indication Color What It Means Control Lead DescriptionsAdditional Control Leads Label Indication What It Means Network Interface Device Messages 1 What It Indicates What To Do Device Messages See Changing Software Device Messages 2 What It Indicates What To Do Device Messages 3 What It Indicates What To Do Software Device Messages 4 What It Indicates What To Do Changes? prompt Device Messages 5 What It Indicates What To Do Status Menu Status InformationStatus Last System Reset Date and Time Self-Test Results Messages Last System Reset Date and TimeSystem and Test Status Messages Self-Test Results Messages Health and Status Messages 1 What It Indicates Health and Status Messages Frame relay link Health and Status Messages 2 What It Indicates Frame relay link 1, 2 Health and Status Messages 3 What It Indicates Test Status Messages 1 What It Indicates Test Status Messages Test Status Messages 2 What It Indicates Network LMI-Reported DLCIs StatusMain Menu → Status → LMI Reported DLCIs LMI-Reported DLCIs Status Screen Example Network LMI-Reported DLCIs Status Field What It Indicates Main Menu → Status → PVC Connection Status PVC Connection StatusPVC Connection Status Screen Example 10. PVC Connection Status 1 Field 10. PVC Connection Status 2 Field What It Indicates Displaying Network Time Slot Assignments Time Slot Assignment StatusMain Menu → Status → Timeslot Assignment Status → Network Network Timeslot Assignment Status Screen Example Cross Connect Status Field Indicates Bottom Main Menu → Status → IP Routing Table IP Routing TableIP Routing Table Screen Example 11. IP Routing Table Values 1 Column What It Indicates 11. IP Routing Table Values 2 Column What It Indicates Main Menu → Status → Performance Statistics Performance StatisticsPerformance Statistics Menu Performance Statistics Performance Statistics → Clear All Statistics Clearing Performance StatisticsPerformance Statistics → Frame Relay Performance Statistics → ESF Line Service Level Verification Performance Statistics Average round trip latency is measured every SLV sampling Main Menu → Status → Performance Statistics → Dlci Dlci Performance Statistics13. Dlci Performance Statistics 1 What It Indicates CIR&EIR 13. Dlci Performance Statistics 2 What It Indicates Frame Relay Performance Statistics Frame Relay ErrorsMain Menu → Status → Performance Statistics → Frame Relay 14. Frame Relay Performance Statistics 1 What It Indicates 14. Frame Relay Performance Statistics 2 What It Indicates Frame Relay Errors contdFrame Relay LMI 14. Frame Relay Performance Statistics 3 What It Indicates Frame Relay Hdlc Errors Main Menu → Status → Performance Statistics → ESF Line ESF Line Performance StatisticsTo select intervals You must enter an interval or time on ±LOFC±± ESF Line Performance Statistics Screen Example UAS Statistic What It Indicates Main Menu → Status → Performance Statistics → Ethernet Ethernet Performance Statistics Main Menu → Status → Trap Event Log Trap Event LogTrap Event Log Screen Example Trap Event LOG FTP File Transfers Dir directory Command Definition If the message displayed is Then Upgrading System Software Changing Software Determining Whether a Download Is Completed If retrieving Then Transferring Collected Data Troubleshooting Indicators See Problem Indicators Resetting the Unit from the Control Menu Resetting the Unit and Restoring CommunicationResetting the Unit By Cycling the Power If selecting Following occurs Restoring Communication with a Misconfigured Unit LMI Packet Capture Utility Feature Troubleshooting Management Link FeatureMain Menu → Control → LMI Packet Capture Utility LMI Trace Log Example LMI Packet Capture Utility → Display LMI Trace LogLMI Trace LOG Alarm Conditions 1 What It Indicates What To Do Alarms Operational appears Alarm Conditions 2 What It Indicates What To Do Alarm Conditions 3 What It Indicates What To Do Alarm Conditions 4 What It Indicates What To Do Device Problems Troubleshooting TablesDevice Problems 1 Symptom Possible Cause Solutions Viewing the Trap Event Log With a Misconfigured Unit Device Problems 2 Symptom Possible Cause Solutions Frame Relay PVC Problems Symptom Possible Cause Solutions Frame Relay PVC Problems Test Menu Example Tests AvailableTest When the status of a test is Only command available is Test Timeout FeatureStarting and Stopping a Test Aborting All Tests PVC Tests Screen Example PVC TestsNetwork PVC Tests Send Pattern PVC LoopbackMain Menu → Test → Network PVC Tests Main Menu → Test → Data Port PVC Tests Connectivity Monitor Pattern Physical Tests Screen Example Physical Tests Main Menu → Test → Network Physical Tests Line Loopback Payload Loopback Repeater Loopback Send Line Loopback Data Channel Loopbacks on a Frame Relay Link Qrss Send and Monitor Pattern Tests Main Menu → Test → Data Port Physical Tests DTE Loopback Main Menu → Test → IP Ping IP Ping Test Procedure Main Menu → Test → Lamp Test Lamp Test OpenLane Support of FrameSaver Devices OpenLane Support of FrameSaver Devices Setting Up the OpenLane SLM System Setting Up FrameSaver Flex and SLV Support To Find Your License Key Number Ordering Flex SLV Activations Activation Certificate Administering and Managing Flex SLV Activations Checking Activation Certificate Status Entering an Activation Certificate Scheduling Activations Accessing and Printing the Certificate Summary Report Cancelling Scheduled ActivationsChecking the Status of Scheduled Activations July Setting Up NetScout Manager Plus for FrameSaver Devices Preparation AlarmsProperties User history Configuring NetScout Manager Plus Procedure Adding SLV Alarms Using a Template Editing Alarms 9123-A2-GB20-10 July Adding SLV Alarms Manually Paradyne Field Select or Enter Creating History Files Procedure Dvuhist -f Dallas51 3 config 30 60 Dallas51k.udh Installing the User-Defined History Files Monitoring a DLCIs History Data July 9123-A2-GB20-10 July Monitoring the Agent Using NetScout Manager Plus Procedure Setting Up NetScout Manager Plus for FrameSaver Devices Setting Up Network Health for FrameSaver Devices Installation and Setup of Network Health Discovering FrameSaver Elements Configuring the Discovered Elements Grouping Elements for Reports Generating Reports for a Group About Service Level ReportsAbout At-a-Glance Reports About Trend Reports Reports Applicable to Flex and SLV DevicesPrinted Reports July 9123-A2-GB20-10 July Setting Up Network Health for FrameSaver Devices Menus Menu Hierarchy Status Menu Hierarchy Frame Relay Mode Easy Install Auto-Configuration Data Ports Assignment Menu Hierarchy Leased Line Mode Control Menu Hierarchy Snmp MIBs and Traps, Rmon Alarm Defaults Downloading MIBs and Snmp Traps MIB Support FrameSaver Units sysDescr system System Group mib-2FrameSaver Units sysObjectID system Paradyne Indexes to the Interface Table ifTable Interfaces Group mib-2Physical Layer Frame Relay Logical Layer Rmon Logical Layer NetScout Indexes to the Interface Table ifTableFor the DTE Examples Standards Compliance for Snmp Traps Trap warmStart Trap authenticationFailureTable B-3. warmStart Trap What It Indicates Possible Cause Variable-Binding Traps linkUp and linkDown MIB Physical Sublayer Logical Link Sublayer Physical Sublayer contd DevHealthAndStatus Traps enterprise-Specific SLVs devFrExt.mib Placeholder Traps RMON-Specific Event Defaults Rmon Alarm and Event DefaultsEventIndex EventDescription EventType EventCommunity Rising Event Operation Physical Interface Alarm Defaults Frame Relay Link Alarm Defaults Snmp MIBs and Traps, and Rmon Alarm Defaults Dlci Alarm Defaults ± Paradyne Area Dlci Alarm Defaults ± NetScout Area Rx Dlci Link Object ID Cross-References Numeric Order 6.1.2.1.2.10.32.2.1 6.1.2.1.2.2.16.1.4.1.1795.2.24.2 Dlci CIR 6.1.4.1.1795.2.24.2.6.9.4 6.1.4.1.1795.2.24.2.6.9.4.4.2 Dlci EIR 6.1.4.1.1795.2.24.2.6.9.4.7.1 6.1.4.1.1795.2.24.2.6.9.4.5.2.1 6.1.4.1.1795.2.24.2.6.9.4.10.3.1 6.1.2.1.10.32.2.1 Snmp MIBs and Traps, and Rmon Alarm Defaults Snmp MIBs and Traps, and Rmon Alarm Defaults Rear Panel Connectors, Cables, Pin Assignments Canadian T1 Line Interface Cable Feature No -F1-510 T1 Network Cable Feature No -F1-500T1 Network Interface Function Circuit Direction Pin Number Signal Direction Pin # COM Port Connector Pin Standard EIA-232-D Crossover Cable AT Command String To configure the modem to Signal Data Port ConnectorStandard V.35 Straight-through Cable Direction Pin Socket Ethernet Port Connector Connectors, Cables, and Pin Assignments Technical Specifications T1 Network Interface COM PortEthernet Port Data Port FrameSaver Flex SLV Upgrade Description Model / Feature NumberEquipment List Equipment Optional Features Description Part Number Feature NumberCables NMS Products Numbers Index IN-2 IN-3 IN-4 IN-5 IN-6 IN-7 IN-8 IN-9 IN-10