Security and Logins | Paradyne FrameSaver DSL, 9783 specification

Security and Logins

5

This chapter includes the following:

HLimiting Access

HControlling Asynchronous Terminal Access

HControlling External COM Port Device Access

HControlling Telnet or FTP Access

ÐLimiting Telnet Access

ÐLimiting FTP Access

ÐLimiting Telnet or FTP Access Over the TS Management Link

HControlling SNMP Access

ÐDisabling SNMP Access

ÐAssigning SNMP Community Names and Access Levels

ÐLimiting SNMP Access Through IP Addresses

HCreating a Login

HModifying a Login

HDeleting a Login

9783-A2-GB20-00

July 2000

5-1

Image 87

Paradyne FrameSaver DSL, 9783 manual Security and Logins

Contents

FrameSaver DSL Copyright E 2000 Paradyne Corporation All rights reserved Contents Configuration Options Operation and Maintenance Troubleshooting Setting Up Network Health for FrameSaver Devices Index About This Guide Purpose and Intended AudienceDocument Organization Setting Up OpenLane for FrameSaver Devices. Identifies Troubleshooting. Provides device problem resolutionAlarm, and other information, as well as troubleshooting Test procedures Product-Related Documents Highlighted text When viewing this manual online. Click onConventions Used To indicate a hyperlink to additional information About the FrameSaver DSL Unit System OverviewSystem Overview Features FrameSaver DSL Features and Benefits 9783-A2-GB20-00 July Benefits Frame Relay DSL ATM FrameSaver DSL Feature Sets Basic Advanced Feature Feature Set Basic Features Maximum Number of PVCs and Management PVCs Supported Advanced SLV Features OpenLane SLM System About the FrameSaver DSL Unit User Interface Basic Operation Logging On Procedure If your login was Then Select Main Menu Screen Work Areas Screen Format DescriptionThis is a remote-site unit that supports 8 PVCs and has Navigating the Screens Keyboard KeysPress Select For the screen Press Enter to Function Function Keys Selecting from a Menu Switching Between Screen Areas Selecting a Field Entering InformationExample User Interface and Basic Operation Configuration Procedures Configuration Menu Basic Configuration Configuration Option Area Description Configuration Option Areas Main Menu → Configuration Accessing and Displaying Configuration Options Configuration → PVC Connections Changing Configuration Options Saving Configuration Options Overview Configuration Options Configuration Options Using the Easy Install Feature Main Menu → Easy InstallEasy Install Screen Example Easy Install Configuration Options 1 TS Access DlciTS Access VPI Ethernet Port Options Screen Easy Install Configuration Options 2TS Access VCI Create a Dedicated Network Management Link Main Menu → Control → System Information Setting Up So the Router Can Receive RIPEntering System Information Setting the System Clock Configuration → Data Ports → Dlci Records Configuring the Overall System Configuration Option Tables LMI Behavior Configuring Frame Relay and LMI for the SystemMain Menu → Configuration → System → Frame Relay and LMI System Frame Relay and LMI Options 1 LMI Status Enquiry N1 Possible Settings 1, 2, 3, 4 LMI Heartbeat T1 Possible Settings 5, 10, 15, 20, 25System Frame Relay and LMI Options 2 Service Level Verification Options 1 Configuring Service Level Verification Options Service Level Verification Options 2 SLV Timeout Clearing Event ThresholdSLV Packet Size bytes General System Options Configuring General System OptionsMain Menu → Configuration → System→ General Test Timeout Network Physical Interface Options Configuring the Physical InterfacesConfiguring the Network Interface Main Menu → Configuration → Network → Physical Transmit Clock Source Configuring the User Data PortMain Menu → Configuration → Data Ports → Physical Data Port Physical Interface Options 1 Data Port Physical Interface Options 2 Monitor DTRPort DTE Initiated Loopbacks LMI Parameters Configuring Frame Relay for the Data PortMain Menu → Configuration → Data Ports → Frame Relay Data Port Frame Relay Options 1 Data Port Frame Relay Options 2 Network ATM Options Configuring ATM for the Network InterfaceMain Menu → Configuration → Network → ATM Cell Delineation Error Event Threshold VPI,VCI Number VPI Configuring Circuit and Dlci RecordsDlci Record Options 1 Dlci Number Committed Burst Size Bc Bits Dlci Type Possible Settings Standard, MultiplexedDlci Record Options 2 CIR bps Outbound Management Priority Dlci Record Options 3Excess Burst Size Bits Dlci Priority Configuring PVC Connections Main Menu → Configuration → PVC Connections10. PVC Connection Options 1 Destination Edlci 10. PVC Connection Options 2Destination Link Destination Dlci Configuring Node IP Information Setting Up Management and Communication Options 11. Node IP Options 1 11. Node IP Options 2 11. Node IP Options 3 TS Access Management Link Configuring Management PVCs 12. Management PVC Options 1Name Primary Link Possible Settings Net1-FR1, Port-1, Clear 12. Management PVC Options 2Set DE 12. Management PVC Options 3 Primary DlciPrimary Edlci Snmp Management Configuring General Snmp ManagementName 1 Access 13. General Snmp Management Options 1 13. General Snmp Management Options 2 Name 2 Access Telnet Session Configuring Telnet and/or FTP Session SupportTelnet Login Required 14. Telnet and FTP Session Options 1 Inactivity Timeout 14. Telnet and FTP Session Options 2Disconnect Time Minutes FTP Max Transfer Rate Kbps FTP Login Required14. Telnet and FTP Session Options 3 FTP Session NMS IP Validation Configuring Snmp NMS SecurityAccess Type 15. Snmp NMS Security Options Number of Trap Managers Configuring Snmp Traps16. Snmp Traps Options 1 Snmp Traps Enterprise Specific Traps 16. Snmp Traps Options 2 Rmon Traps Link Traps Possible Settings Disable, Up, Down, Both16. Snmp Traps Options 3 Link Traps Interfaces Configuring the Ethernet Port 17. Ethernet Port Options 1Interface Status Proxy ARP 17. Ethernet Port Options 2 Character Length Configuring the Communication Port18. Communication Port Options 1 Port Use Ignore Control Leads Login Required18. Communication Port Options 2 Stop Bits 18. Communication Port Options 3 RIP 18. Communication Port Options 4 19. External Modem COM Port Options Configuring the COM Port to Support an External ModemExternal Modem Commands Dial-In Access Security and Logins Controlling Asynchronous Terminal Access Limiting Access Set the configuration option Controlling Telnet or FTP Access Controlling External COM Port Device Access Limiting Telnet Access Limiting FTP Access Limiting Telnet or FTP Access Over the TS Management Link Disabling Snmp Access Controlling Snmp Access Assigning Snmp Community Names and Access Levels Limiting Snmp Access Through IP Addresses Creating a Login Main Menu → Control → Administer LoginsField Enter Deleting a Login Modifying a Login Operation and Maintenance Displaying System Information Main Menu → Status → IdentityView this field To find Viewing LEDs and Control Leads Main Menu → Status → Display LEDs and Control LeadsDisplay LEDs & Control Leads Screen General Status LEDs 1 Label Indication Color What It Means LED Descriptions User Data Port LED Label Indication Color What It Means Network Interface LEDs Label Indication Color What It Means User Data Port Control Lead DescriptionsAdditional Control Leads Label Indication What It Means Network Interface Device Messages 1 What It Indicates What To Do Device Messages See Changing Software Device Messages 2 What It Indicates What To Do Device Messages 3 What It Indicates What To Do See Upgrading System Device Messages 4 What It Indicates What To Do Device Messages 5 What It Indicates What To Do Reset COM Port Status Menu Status Information Self-Test Results Messages Last System Reset Date and TimeSelf-Test Results Messages Last System Reset Date and Time System and Test Status Messages Health and Status Messages 1 What It Indicates Health and Status Messages Frame relay link Health and Status Messages 2 What It Indicates Frame relay link 1, 2 Health and Status Messages 3 What It Indicates Test Status Messages 1 What It Indicates Test Status Messages Send Pttn Active, Interface Test Status Messages 2 What It Indicates PVC Connection Status 1 Field PVC Connection StatusMain Menu → Status → PVC Connection Status PVC Connection Status Screen Example PVC Connection Status 2 Field What It Indicates 10. Network Interface Status Field What It Indicates Network Interface StatusMain Menu → Status → Network Interface Status Network Interface Status Screen Example IP Routing Table Main Menu → Status → IP Routing TableIP Routing Table Screen Example 11. IP Routing Table Values Column What It Indicates Performance Statistics Main Menu → Status → Performance StatisticsPerformance Statistics Menu Performance Statistics → ESF Line Clearing Performance StatisticsPerformance Statistics → Clear All Statistics Performance Statistics → Frame Relay Service Level Verification Performance Statistics Average round trip latency is measured every SLV sampling Dlci Performance Statistics Main Menu → Status → Performance Statistics → Dlci13. Dlci Performance Statistics 1 What It Indicates CIR&EIR 13. Dlci Performance Statistics 2 What It Indicates 14. Frame Relay Performance Statistics 1 What It Indicates Frame Relay ErrorsFrame Relay Performance Statistics Main Menu → Status → Performance Statistics → Frame Relay Frame Relay LMI Frame Relay Errors contdFrame Relay Hdlc Errors 14. Frame Relay Performance Statistics 2 What It Indicates TC Sublayer ATM Performance StatisticsMain Menu → Status → Performance Statistics → ATM 15. ATM Performance Statistics 1 What It Indicates 15. ATM Performance Statistics 2 What It Indicates Ethernet Performance Statistics Main Menu → Status → Performance Statistics → EthernetStatistic What It Indicates Trap Event Log Main Menu → Status → Trap Event LogTrap Event Log Screen Example Operation and Maintenance FTP Operation FTP File Transfers Dir directory Command Definition If the message displayed is Then Upgrading System Software Changing Software Determining Whether a Download Is Completed If retrieving Then Transferring Collected Data Troubleshooting Indicators See Problem Indicators Resetting the Unit and Restoring Communication Resetting the Unit from the Control MenuResetting the Unit By Cycling the Power If selecting Following occurs Restoring Communication with an Improperly Configured Unit Troubleshooting Management Link Feature LMI Packet Capture Utility FeatureMain Menu → Control → LMI Packet Capture Utility LMI Trace Log Example LMI Packet Capture Utility → Display LMI Trace Log Alarm Conditions 1 What It Indicates What To Do Alarms Alarm Conditions 2 What It Indicates What To Do Alarm Conditions 3 What It Indicates What To Do Alarm Conditions 4 What It Indicates What To Do Device Problems 1 Symptom Possible Cause Solutions Troubleshooting TablesDevice Problems See Trap Event Log in , Operation and Maintenance Unit Device Problems 2 Symptom Possible Cause Solutions ATM Problems Symptom Possible Cause Solutions ATM Problems Frame Relay PVC Problems Symptom Possible Cause Solutions Frame Relay PVC Problems Test Menu Example Tests Available Test Timeout Feature When the status of a test is Only command available isStarting and Stopping a Test Active Aborting All Tests PVC Tests Screen Example PVC Tests Main Menu → Test → Data Port PVC Tests PVC LoopbackSend Pattern Main Menu → Test → Network PVC Tests Connectivity Monitor Pattern Main Menu → Test → Data Port Physical Tests DTE Loopback Main Menu → Test → IP Ping IP Ping Test Procedure Main Menu → Test → Lamp Test Lamp Test Setting Up OpenLane for FrameSaver Devices OpenLane Support of FrameSaver DevicesOpenLane Support of FrameSaver Devices Setting Up the OpenLane SLM System Setting Up FrameSaver and SLV Support Setting Up OpenLane for FrameSaver Devices 10-1 Setting Up Network Health for FrameSaver Devices Installation and Setup of Network Health Discovering FrameSaver Elements Configuring the Discovered Elements Grouping Elements for Reports About Service Level Reports Generating Reports for a GroupAbout At-a-Glance Reports Reports Applicable to FrameSaver SLV Devices About Trend ReportsPrinted Reports 10-8 10-9 10-10 Menus Menu Hierarchy Status Menu Hierarchy Frame Relay Mode Control Easy Install Menu Hierarchy Snmp MIBs and Traps, Rmon Alarm Defaults Downloading MIBs and Snmp Traps MIB Support System Group mib-2 FrameSaver Units sysDescr systemFrameSaver Units sysObjectID system Frame Relay Logical Layer Interfaces Group mib-2Paradyne Indexes to the Interface Table ifTable Physical Layer Rmon Logical Layer NetScout Indexes to the Interface Table ifTable Examples Standards Compliance for Snmp Traps Variable-Binding Trap authenticationFailureTrap warmStart Table B-3. warmStart Trap What It Indicates Possible Cause Traps linkUp and linkDown Sample strings Physical Sublayer Interface Variable-Bindings Possible Cause Table B-6. linkUp and linkDown Variable-Bindings 2 ATM Logical Link Sublayer DevHealthAndStatus Traps enterprise-Specific SLVs devFrExt.mib Placeholder Traps RMON-Specific Rising Event Operation Rmon Alarm and Event DefaultsEvent Defaults EventIndex EventDescription EventType Physical Interface Alarm Defaults Frame Relay Link Alarm Defaults Snmp MIBs and Traps, and Rmon Alarm Defaults MIB FR DTE MIB Dlci Alarm Defaults ± Paradyne Area Frames Sent Snmp MIBs and Traps, and Rmon Alarm Defaults Object ID Cross-References Numeric Order 6.1.2.1.2.2.1 6.1.2.1.2.10.32.2.16.1.4.1.1795.2.24.2 Dlci CIR 6.1.4.1.1795.2.24.2.6.9.4 6.1.4.1.1795.2.24.2.6.9.4.4.2 Dlci EIR 6.1.4.1.1795.2.24.2.6.9.4.7.1 6.1.4.1.1795.2.24.2.6.9.4.5.2.1 6.1.4.1.1795.2.24.2.6.9.4.10.3.1 6.1.2.1.10.32.2.1 Snmp MIBs and Traps, and Rmon Alarm Defaults Rear Panel Connectors, Cables, Pin Assignments DSL Network Interface Cable Figure C-1. DSL Network Interface Cable with RJ48C Connector Signal Direction Pin # COM Port Connector Pin Standard EIA-232-D Crossover Cable AT Command String To configure the modem to Data Port Connector Standard V.35 Straight-through CableDirection Pin Socket Ethernet Port Connector Connectors, Cables, and Pin Assignments Technical Specifications Data Port COM PortDSL Network Interface Ethernet Port Equipment Model / Feature NumberFrameSaver SLV Upgrade Equipment List Cables Description Model / Feature NumberDescription Part Number Feature Number Optional Features Numbers Index IN-2 IN-3 IN-4 IN-5 IN-6 IN-7 IN-8 IN-9