Paradyne 9820, 9820-2M, 9820-8M, and 9820-45M Limiting FTP Access

Security and Logins

5-6 9820-A2-GB20-20

June 2000

Limiting FTP Access

FTP access can be limited by:

HDisabling FTP access completely.

HRequiring a user ID and password to login.

HLimiting FTP bandwidth. (Models 9820, 9820-2M, 9820-8M.)

"Procedure

To limit FTP access when the session is not on the TS Management Link:

1. Select the Telnet and FTP Session options.

Main Menu

→

Configuration

→

Management and Communication

→

Telnet and FTP Sessions

2. Set the following configuration options, as appropriate.

To . . . Set the configuration option . . .

Disable FTP FTP Session to Disable.

Require a login Login Required to Enable.

NOTE: User ID and password combinations

must be defined. See

Creating a Login

.

If you want to allow users to configure the unit

or perform file transfers, including downloads,

keep the access at Level-1.

Level-1 access is required to download

software to the unit, or to upload or download

configuration files. Level-3 is sufficient for

NMS access for SLV historical information.

Limit bandwidth for FTP

(Models 9820, 9820-2M, 9820-8M) FTP Max Receive Rate to a rate less than the

network line speed, typically less than or

equal to the CIR.

This method is not recommended if SLV

reports are desired since FTP is required to

generate the reports.

3. Save your changes.

See

Configuring Telnet and/or FTP Session Support

in Chapter 4,

Configuration

Options,

for more information about setting FTP configuration options.

Contents

Main Page i Contents About This Guide 1 About FrameSaver SLV In-Line Monitors 2 User Interface and Basic Operation 3 Configuration Procedures 4 Configuration Options iii 5 Security and Logins 6 Monitoring iv 7 FTP Operation 8 Troubleshooting 9 Setting Up OpenLane for FrameSaver Devices v 10 Setting Up NetScout Manager Plus for FrameSaver Devices 11 Setting Up Network Health for FrameSaver Devices 12 Hardware Maintenance (9820-45M) vi A Menu Hierarchy B SNMP MIBs and Traps, and RMON Alarm Defaults vii C Connectors, Cables, and Pin Assignments D Technical Specifications E Equipment List Page ix About This Guide Purpose and Intended Audience Document Organization Section Description x Section Description xi Product-Related Documents Document Number Document Title xii Conventions Used Convention Used When Used 1-1 About FrameSaver SLV In-Line Monitors 1 SLM Overview FrameSaver SLV In-Line Monitor Features SLM Overview About FrameSaver SLV In-Line Monitors 1-2 1-3 FrameSaver SLV In-Line Monitor Features 1-4 1-5 1-6 2-1 User Interface and Basic Operation 2 2-2 Logging On 2-3 Saving Configuration Options Configuration Procedures 2-4 Main Menu Menu Hierarchy User Interface and Basic Operation 2-5 Screen Work Areas Screen Format Description User Interface and Basic Operation 2-6 Navigating the Screens Keyboard Keys Use the following keyboard keys to navigate within the screen area: Press . . . To . . . 2-7 Function Keys Page 2-9 Selecting a Field Entering Information Page 3-1 Configuration Procedures 3 3-2 Basic Configuration Setting Up Auto-Configuration 3-3 Configuration Option Areas FrameSaver SLV, Models 9820, 9820-2M, 9820-8M, and 9820-45M, Quick Reference Configuration Option Tables 3-4 Accessing and Displaying Configuration Options 3-5 Changing Configuration Options PVC Connections User Interface and Basic Operation 3-6 Saving Configuration Options Minimal Configuration Before Deploying Remote Units 4-1 Configuration Options 4 4-2 4-3 Configuring Using the Easy Install Screen (Model 9820-45M) Easy Install Table 4-1. Easy Install Configuration Options (1 of 2) 4-4 Entering System Information and Setting the System Clock Security and Logins System Information 4-5 Setting Up for Trap Dial-Out and Trap Dial-Out Configuring SNMP Traps Setting Up Call Directories for Trap Dial-Out Configuring SNMP NMS Security Setting Up Auto-Configuration Auto-Configuration 4-7 Selecting a Frame Relay Discovery Mode Auto-Configuration Frame Relay Discovery Mode Setting Up Local Management at the Central Site 4-8 Automatically Removing a Circuit DLCI Records 4-9 Automatically Removing a Circuit 4-10 Setting Up Management Setting Up Local Management at the Central Site 4-11 Setting Up So the Router Can Receive RIP Setting Up Service Provider Connectivity at the Central Site 4-12 Setting Up Back-to-Back Operation Changing Operating Mode Change Operating Mode 4-13 Configuration Option Tables Configuring the Overall System 4-14 Configuring Frame Relay and LMI for the System Configuring Frame Relay for an Interface See System Frame Relay and LMI 4-15 Table 4-2. System Frame Relay and LMI Options (2 of 2) 4-16 Configuring Service Level Verification Options SLV options are selected from the System menu (see Table 4-3). Service Level Verification Table 4-3. Service Level Verification Options (1 of 2) 4-17 Table 4-3. Service Level Verification Options (2 of 2) 4-18 Configuring General System Options System General Table 4-4. General System Options 4-19 Configuring the Physical Interfaces Configuring the Network Data Port Physical 4-20 Table 4-5. Network Data Port Physical Interface Options (2 of 2) 4-21 Configuring the User Data Port Data Ports Physical 4-22 Table 4-6. User Data Port Physical Interface Options (2 of 2) 4-23 Configuring Frame Relay for an Interface For network data port links: For user data port links: Configuring Frame Relay and LMI for the System See 4-24 Table 4-7. Interface Frame Relay Options (2 of 3) 4-25 Table 4-7. Interface Frame Relay Options (3 of 3) 4-26 Manually Configuring DLCI Records [Network/Data Ports] DLCI Records 4-27 Table 4-8. DLCI Record Options (2 of 3) 4-28 Table 4-8. DLCI Record Options (3 of 3) quality of service maximum burst size For FrameSaver SLV 9820-45M: Configuring PVC Connections PVC Connections 4-30 Table 4-9. PVC Connection Options (2 of 3) 4-31 Table 4-9. PVC Connection Options (3 of 3) 4-32 Setting Up Management and Communication Options Configuring Node IP Information Node IP 4-33 Table 4-10. Node IP Options (1 of 3) 4-34 Table 4-10. Node IP Options (2 of 3) 4-35 Table 4-10. Node IP Options (3 of 3) are are not , Configuring Management PVCs Manually Configuring DLCI Records Management PVCs 4-37 Table 4-11. Management PVC Options (2 of 4) Interface 4-38 Table 4-11. Management PVC Options (3 of 4) Setting Up So the Router Can Receive RIP For Model 9820-45M: For nonmultiplexed DLCIs: 4-39 Table 4-11. Management PVC Options (4 of 4) 4-40 Configuring General SNMP Management General SNMP Management Table 4-12. General SNMP Management Options 4-41 Configuring Telnet and/or FTP Session Support Telnet and FTP Session 4-42 Table 4-13. Telnet and FTP Session Options (2 of 3) 4-43 Table 4-13. Telnet and FTP Session Options (3 of 3) maximum receive rate For FrameSaver SLV 9820-8M: For FrameSaver SLV 9820-2M: Configuring SNMP NMS Security SNMP NMS Security 4-45 Configuring SNMP Traps and Trap Dial-Out RMON Alarm Defaults SNMP MIBs and Traps, and SNMP Traps 4-46 Table 4-15. SNMP Traps and Trap Dial-Out Options (2 of 5) Model 9820-45M: Models 9820, 9820-2M, 9820-8M: linkname 4-47 Table 4-15. SNMP Traps and Trap Dial-Out Options (3 of 5) 4-48 Table 4-15. SNMP Traps and Trap Dial-Out Options (4 of 5) 4-49 Table 4-15. SNMP Traps and Trap Dial-Out Options (5 of 5) 4-50 Configuring the Ethernet Port (Model 9820-45M) Ethernet Port 4-51 4-52 Configuring the Communication Port Communication Port Table 4-17. Communication Port Options (1 of 5) 4-53 Table 4-17. Communication Port Options (2 of 5) 4-54 Table 4-17. Communication Port Options (3 of 5) 4-55 Table 4-17. Communication Port Options (4 of 5) 4-56 Table 4-17. Communication Port Options (5 of 5) Configuring Node IP Information 4-57 Configuring the COM Port to Support an External Modem (Models 9820, 9820-2M, 9820-8M) External Modem (Com Port) Standard EIA-232-D Crossover Cable Connectors, Cables, and Pin Assignments 4-58 Table 4-18. External Modem (COM Port) Options (2 of 2) .nnn.nnn.nnn 4-59 Configuring the Modem Port (Model 9820-45M) Modem Port 4-60 Table 4-19. Modem Port Options (2 of 3) 4-61 Table 4-19. Modem Port Options (3 of 3) Page 5-1 Security and Logins 5 5-2 Limiting Access 5-3 Controlling Asynchronous Terminal Access 5-4 Controlling External COM Port Device Access Controlling Modem Port Device Access (Model 9820-45M) 5-5 Controlling Telnet or FTP Access Configuring Telnet and/or FTP Session Support Limiting Telnet or FTP Access Over the TS Management Link Limiting Telnet Access Telnet and FTP Sessions Limiting FTP Access Configuring Telnet and/or FTP Session Support Telnet and FTP Sessions 5-7 Limiting Telnet or FTP Access Over the TS Management Link 5-8 Controlling SNMP Access Disabling SNMP Access 5-9 Assigning SNMP Community Names and Access Levels 5-10 Limiting SNMP Access Through IP Addresses Configuring General SNMP Management General SNMP Management Management and Communication Configuration Creating a Login Administer Logins 5-12 Modifying a Login Deleting a Login 6-1 Monitoring 6 6-2 Displaying System Information nnnn-nnx nn.nn.nn Identity View this field . . . To find the . . . Front Panel LEDs Figure 6-2. Model 9820-45M Front Panel FrameSaver SLV FrameSaver Front Panel Status LEDs Table 6-1. System Status LEDs Health and Status Messages 6-5 Table 6-2. NETWORK Status LEDs Table 6-3. PORT Status LEDs 6-6 Displaying LEDs and Control Leads Display LEDs and Control Leads Display LEDs and Control Leads Screen (Models 9820, 9820-2M, 9820-8M) 6-7 Table 6-5. Network and User Data Port LEDs and Control Leads Label Indication What It Means in Chapter 4, Configuring the Physical Interfaces See Display LEDs and Control Leads Screen (Model 9820-45M) Display LEDs & Control Leads Screen (Model 9820-45M) Table 6-6. General LEDs Label Indication What It Means 6-9 Configuring the Physical Interfaces 6-10 Power Module LEDs (Model 9820-45M) 6-11 Device Messages FTP Operation Changing Software (Seen at an FTP terminal.) 6-12 Table 6-9. Device Messages (2 of 5) FTP Operation Changing Software (Seen at an FTP terminal.) 6-13 Table 6-9. Device Messages (3 of 5) 6-14 Table 6-9. Device Messages (4 of 5) Upgrading System Software FTP Operation 6-15 Table 6-9. Device Messages (5 of 5) nm m 6-16 Status Information 6-17 System and Test Status Messages Status System and Test Status Self-Test Results Messages Health and Status Messages 6-18 nnnn Change Operating Mode) Control Main Menu 6-19 Table 6-11. Health and Status Messages (2 of 2) 6-20 6-21 Network LMI-Reported DLCIs Status LMI Reported DLCIs 6-22 Table 6-13. Network LMI-Reported DLCIs Status Field Status What It Indicates 6-23 PVC Connection Status PVC Connection Status 6-24 Table 6-14. PVC Connection Status (2 of 2) Field What It IndicatesStatus 6-25 Network Interface Status Network Interface Status 6-26 IP Routing Table (Model 9820-45M) The IP Routing Table display is selected from the Status menu. IP Routing Table IP Routing Table Screen Example Table 6-16. IP Routing Table (1 of 2) Field What It Indicates 6-27 6-28 Performance Statistics 6-29 Clearing Performance Statistics 6-30 Service Level Verification Performance Statistics yyy Service Level Verification xx,yyy, 6-31 Table 6-17. Service Level Verification Performance Statistics (2 of 2) 6-32 DLCI Performance Statistics DLCI 6-33 Table 6-18. DLCI Performance Statistics (2 of 2) 6-34 Frame Relay Performance Statistics Frame Relay 6-35 Table 6-19. Frame Relay Performance Statistics (2 of 3) (contd) 6-36 Table 6-19. Frame Relay Performance Statistics (3 of 3) 6-37 Ethernet Performance Statistics (Model 9820-45M) Ethernet 6-38 Trap Event Log (Model 9820-45M) Trap Event Log 7-1 FTP Operation 7 7-2 FTP File Transfer Transferring Collected Data from to to/from 7-3 Security and Logins Creating a Login in Chapter 5, 7-4 Upgrading System Software Changing Software xxxxxx 7-5 Determining Whether a Download Is Completed Changing Software 7-6 Transferring Collected Data Options Viewing Captured Packets from the Menu-Driven User Interface 8-1 Troubleshooting 8 8-2 Physical Tests DTE Loopback IP Ping Test Problem Indicators 8-3 Resetting the Unit and Restoring Communication Resetting the Unit from the Control Menu Resetting the Unit By Cycling the Power 8-4 Restoring Communication with an Improperly Configured Unit Resetting the Unit and Restoring Communication 8-5 Troubleshooting Management Link Feature FTP Operations Transferring Collected Data Viewing Captured Packets from the Menu-Driven User Interface Configuring Node IP Information Viewing Captured Packets from the Menu-Driven User Interface LMI Packet Capture Utility Display LMI Trace Log 8-7 Alarms Status System and Test Status Table 8-1. Alarm Conditions (1 of 4) Alarm Condition What It Indicates What To Do 8-8 Table 8-1. Alarm Conditions (2 of 4) - -n Replacing the Front Panel Assembly 8-9 Table 8-1. Alarm Conditions (3 of 4) 8-10 Table 8-1. Alarm Conditions (4 of 4) nnnn (9820-45M) Replacing a Power Module Troubleshooting Tables Reset Device) Control Main Menu Device Problems 8-12 Table 8-2. Device Problems (2 of 2) Symptom SolutionsPossible Cause xxxxxxxx 8-13 Frame Relay PVC Problems Table 8-3. Frame Relay PVC Problems Symptom Possible Cause Solutions 8-14 Tests Available Configuration Options Configuring General System Options x Test Timeout Feature Starting and Stopping a Test Aborting All Tests 8-16 Aborting All Tests Starting and Stopping a Test 8-17 PVC Tests 8-18 Network or Port (Internal) PVC Loopback Send Pattern 8-19 Monitor Pattern Connectivity 8-20 Physical Tests DTE Loopback Data Port Physical Tests 8-21 IP Ping Test nn " IP Ping 8-22 Lamp Test 9-1 Setting Up OpenLane for FrameSaver Devices 9 OpenLane Support of FrameSaver Devices Setting Up the OpenLane SLM System Setting Up FrameSaver SLV Support OpenLane Support of FrameSaver Devices Setting Up the OpenLane SLM System About This Guide Product-Related Documents OpenLane 5.x Service Level Management for UNIX Quick Start Installation Instructions OpenLane 5.x Service Level Management for Windows NT Quick Start Installation Instructions Setting Up NetScout Manager Plus for FrameSaver Devices 10 10-2 Getting Started Creating History Files Adding SLV Alarms Using a Template 10-3 Configuring NetScout Manager Plus NetScout Probe User Guide NetScout Manager/Plus & NetScout Server Administrator Guide NetScout Manager/Plus User Guide 10-4 Adding FrameSaver SLV Units to the NetScout Manager Plus Network Adding Frame Relay Agents NetScout Manager/Plus & NetScout Server Administrator Guide 10-5 Verifying Domains and Groups (Models 9820 and 9820-2M) 10-6 Correcting Domains and Groups (Models 9820 and 9820-2M) Verifying Domains and Groups 10-7 Configuring Domains in Properties Files NetScout Manager/Plus & NetScout Server Administrator Guide 10-8 Adding SLV Alarms Using a Template Editing Alarms agentname filename Adding SLV Alarms Manually Editing Alarms 10-10 10-11 Adding SLV Alarms Manually Adding SLV Alarms Using a Template Editing Alarms 10-12 Configuring Alarms in NetScout Manager/Plus & NetScout Server Administrator Guide 10-13 Creating History Files 10-14 10-15 Installing the User-Defined History Files 10-16 Monitoring a DLCIs History Data Page 10-18 10-19 Monitoring the Agent Using NetScout Manager Plus (Models 9820 and 9820-2M) 10-20 Statistical Windows Supported (Models 9820 and 9820-2M) 11-1 Setting Up Network Health for FrameSaver Devices 11 11-2 Network Health Installation Guide Network Health Traffic Accountant Reports Guide Installation and Setup of Network Health 11-3 Discovering FrameSaver Elements Discovering Elements elements 11-4 Configuring the Discovered Elements Discovering Elements 11-5 Grouping Elements for Reports Managing Groups and Group Lists 11-6 Generating Reports for a Group Health Reports Guide Running Reports from the Console About Service Level Reports About At-a-Glance Reports Reports Applicable to SLV Devices 11-8 11-9 Page 12-1 Hardware Maintenance (9820-45M) 12 Overview 12-2 Cleaning the Front Panel Assembly 12-3 Replacing the Front Panel Assembly 12-4 Replacing a Power Module Page Menu Hierarchy A-2 Menu Hierarchy from: I A-3 Auto-Configuration Easy Install* Auto-Configuration Control Page B-1 SNMP MIBs and Traps, and RMON Alarm Defaults B B-2 MIB Support Downloading MIBs and SNMP Traps B-3 System Group (mib-2) FrameSaver Units sysDescr (system 1) FrameSaver Units sysObjectID (system 2) B-4 Interfaces Group (mib-2) Paradyne Indexes to the Interface Table (ifTable) B-5 NetScout Indexes to the Interface Table (ifTable) DLCI number interface number DLCI number interface number Standards Compliance for SNMP Traps B-7 Trap: warmStart Trap: authenticationFailure B-8 Traps: linkUp and linkDown B-9 Table B-6. linkUp and linkDown Variable-Bindings (1 of 2) Interface Variable-Bindings Possible Cause B-10 Table B-6. linkUp and linkDown Variable-Bindings (2 of 2) Interface Possible CauseVariable-Bindings B-11 B-12 Traps: enterprise-Specific B-13 s B-14 Traps: RMON-Specific RMON Alarm and Event Defaults Two traps are defined to support the Alarm and Events Groups of RMON. See B-15 RMON Alarm and Event Defaults Traps: RMON-Specific Standards Compliance for SNMP Traps Physical Interface Alarm Defaults Frame Relay Link Alarm Defaults Network Synchronous Port Physical Interface Alarm Defaults B-17 Frame Relay Link Alarm Defaults B-18 Table B-11. Frame Relay Link Alarm Defaults (2 of 2) Item Interval MIB/Tag/OID Event Sample Type DLCI Alarm Defaults Paradyne Area B-20 B-21 DLCI Alarm Defaults Editing Alarms Setting Up NetScout Manager Plus for FrameSaver Devices B-22 B-23 Object ID Cross-References (Numeric Order) B-24 Table B-15. History OID Cross-Reference (1 of 4) Object ID (OID)1Item MIB/Tag B-25 Table B-15. History OID Cross-Reference (2 of 4) B-26 Table B-15. History OID Cross-Reference (3 of 4) B-27 Table B-15. History OID Cross-Reference (4 of 4) See Table B-16 for an RMON alarm OID cross-reference. B-28 Table B-16. Alarm OID Cross-Reference (1 of 2) Object ID (OID) Item MIB/Tag B-29 Table B-16. Alarm OID Cross-Reference (2 of 2) Object ID (OID) MIB/TagItem Page Page C-2 Rear Panels Connectors, Cables, and Pin Assignments C-3 COM (Terminal) Port Connector LAN Adapter Converter and Cable (Models 9820, 9820-2M, 9820-8M) Connectors, Cables, and Pin Assignments C-4 Standard EIA-232 Crossover Cable (Models 9820, 9820-2M, 9820-8M) C-5 C-6 User and Network Data Port Connectors C-7 X.21 Network Cable (Models 9820, 9820-2M, 9820-8M) C-8 X.21 DTE Adapter Cable (Models 9820, 9820-2M, 9820-8M) Page C-10 Page C-12 Page C-14 C-15 EIA-612/613 HSSI Connectors (Model 9820-45M) C-16 LAN Connector (Model 9820-45M) Modem Connector (Model 9820-45M) D-1 Technical Specifications D Table D-1. FrameSaver SLV Unit Technical Specifications (1 of 3) Technical Specifications D-2 Table D-1. FrameSaver SLV Unit Technical Specifications (2 of 3) Technical Specifications D-3 Table D-1. FrameSaver SLV Unit Technical Specifications (3 of 3) Page E-1 Equipment List E Equipment See page E-3 for cables you can order. Description Model/Feature Number E-2 Equipment List E-3 Cables This table lists cables you can order. Description Part Number Feature Number Page IN-1 Index Numbers A B C D IN-3 E IN-4 F G H I IN-5 K L IN-6 M N IN-7 O P IN-8 Q R S IN-9 T IN-10 U IN-11 V W X