Manuals / Patton electronic / Computer Equipment / Server

Patton electronic 29XX manual 169

Models: 29XX

1 326

Download 326 pages 58.53 Kb

Page 169

Access Server Administrators’ Reference Guide	13 • Filter IP

•Action: pass

•Source IP and mask: not set

•Destination IP and mask: not set

•Source Port: no compare

•Destination Port: no compare

•Protocol: 1

•TCP Established: anyPackets

•Default for dial-in: apply to Dial-in

Note This would also allow traceroute to work.

An example of using a filter

169

Image 169

Patton electronic 29XX manual 169

Contents

Remote Access Server Patton Electronics Company, Inc Contents Drop and Insert 138 Interfaces 178 Sync PPP 276 Contents Contents Structure AudienceGeneral conventions Typographical conventions used in this documentMouse conventions Introduction Chapter contentsHTTP/HTML and Snmp Object Format Introduction Logging into the HTTP/HTML Administration PagesSaving HTTP/HTML Object Changes Home Home IntroductionOperating Status Variables Immediate Actions buttons Immediate ActionsImport/Export Import/Export main window Export ConfigurationTypical access server flash memory configuration data Import Configuration Alarms Sample alarm indication Total System AlarmsX alarmTotal Displaying the Alarms windowAlarms Alarm Response OutputsModify Response-Configuring the alarm response system Alarm Snmp Trap IP 1 alarmTrapIp0 Alarm Syslog Priority syslogAlarmPriorityAlarm Snmp Trap IP 2 alarmTrapIp1 Alarm Snmp Trap IP 3alarmTrapIp2Modify Alarms settings window Modify Alarms-Configuring alarm severity levelsAuthentication ID suID Validated authentications auAuthenticationsValidTotal Displaying the Authentication windowValidated via primary server auAuthenticationsValidPrimary Statistics sectionDenied authentications auAuthenticationsDenied Validated via static database auAuthenticationsValidStaticPrimary server timeouts auPrimaryServerTimeouts Secondary server timeouts auSecondaryServerTimeoutsValidation auValidation Configuration sectionHost Address auHostAddress Timeout auTimeoutSecondary Host Address auSecondaryHostAddress Host Port auHostPortAccounting Port auAcctPort Accounting Enable auAccountingEnableRadius Packet Format auRadiusPacketFormat Radius Session ID Size auRadiusRunningIdSizeRadius Session ID auRadiusRunningId Setting Up AuthenticationAuthentication Configuration screen Host Address auHostAddress Accounting Port auAcctPort Adding Static Users Static User AuthenticationModify Static User Service Port suServicePort Service IP suServiceIPService Mask suServiceMask Filter ID suFilterIdDAX Circuit Type daxClockMode Configuring the DAXFallback Reference daxClockFallbackRef Main Reference daxClockMainRefClock Status daxClockFailure DAX Clock Status alarm conditionDial Dial Dial Dial Phone Dial Introduction Call Sorting diPageSort Dial In main windowCall ID diactIndex ML ID diactMultiIndexDuration diactSessionTime State diactStateDisconnect Reason diactTerminateReason Modulation diactModulationConnect Speed diactTxSpeed Dial Modulations windowUsername diactUsername Connection Modulation diactModulation DSP Link diactDSPIndexTransmit Connection Speed diactTxSpeed Receive Connection Speed diactRxSpeed Error Correction diactErrorCorrectionData Compression Protocol diactCompression Locally Initiated Renegotiates diactLocalRenegotiatesDial Telco window Dial Telco windowTime Slot diactSlotIndex WAN Link diactLinkIndexTime Call Is/Was Active diactSessionTime Termination Reason diactTerminateReasonShared Unique ID diactMultiIndex Dial Protocol windowProtocol diactProtocol LCP Authentication LCPAuthOptionsIP Address diactIP Port # on Remote Machine diactPortRemote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Local-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProtNext Hop diForceNextHop Dial In Details window Dial In DetailsDial In Modify window modify Login, Service, and DNS objects Dial In Modify default windowLogin Technique diLoginTechnique Modify LoginIP Address Pool diIpPool Modify Service Password Prompt diPasswordPromptDefault Service diService Username Prompt diUsernamePromptModify Domain Name Server Failure Banner diFailureBanner Modify AttemptsSuccess Banner diSuccessBanner Modify Configuration Modify Maximum Time 110 diV110Enable Modify Isdn ConfigurationModify Modem Configuration Modify V.92 ConfigurationK56flexdiModemK56Enable V90diModemV90EnableV34diModemV34Enable V32diModemV32EnableGuard Tone diModemGuardTone Billing Delay diBillingDelayCarrierLossDuration diModemCarrierLossDuration Answer Tone LengthdiModemAnswerToneLengthDirect0-No compression will be used Manage Dnis WindowManage Dnis main window Called Calling Number dnisPoolDesrcDialedNumber Dnis Entry WindowDnis Profiles Dnis Profiles Main Window Login Technique dnisProfileLoginTechniqueID dnisIpProfileId IP Pool dnisProfileAssignedIpPoolService IP dnisProfileServiceIP Service Port dnisProfileServicePortTelnet Mode dnisProfileTelnetMode Dovbs dnisProfileDOVBSAdd a Dnis Profile Status dnisIpProfileStatusDnis Profile Entry Window IP Pool dnisProfileSAssignedIpPoolDovbs dnisProfileDOVBS Service Port dnisProfileServicePort ID dnisIpPoolId Dnis IP Pools WindowIP Address Pool dnisIpPool Status dnisIpPoolStatusDnis IP Pools Entry window Dnis IP Pool Entry WindowUser Statistics Call Identification, Session Dial In User Statistics windowCall Identification Session Termination Reason diactTerminateReason Time Left In Session diactRemainingSessionDial Dial State at termination diactTerminateState LCP Statistics PPP StatisticsRemote MRU diStatRemoteMRU LCP Authentication LCPAuthOptionsLocal Multilink Mrru diStatLcpLocalMRRU Remote Multilink Mrru diStatLcpRemoteMRRURemote-Local AC Comprsn diStatRemoteToLocalACComp Local-Remote AC Comprsn diStatLocalToRemoteACCompTransmit Frame Check Seq. Size diStatTransmitFcsSize Receive Frame Check Seq. Size diStatReceiveFcsSizeLocal-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProt Operational Status diIpOperStatusRemote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Remote Max Slot ID diIpRemoteMaxSlotIdSecondary Domain Name Server diactSecondaryDNS Primary Domain Name Server diactPrimaryDNSFilters diStatIpFilterAtoJ PhonePhysical Layer DataModulation Symbol Rate diactSymbolRate Error Correction diactErrorCorrectionTransmit Connection Speed diactTxSpeed Receive Connection Speed diactRxSpeedRemote Initiated Renegotiates diactRemoteRenegotiates Locally Initiated Retrains diactLocalRetrainsRemote Initiated Retrains diactRemoteRetrains Dial Out Dial Out 105 106 Call Sorting doPageSort Dial Out Main WindowActive Calls doActive Call ID doactIndexState doactState User doactUsernameDuration doactSessionTime Disconnect Reason doactTerminateReason109 Modulation doactModulation Dial Out Details windowSpeed doactTxSpeed Dial Out Details window Dial Out Modify windowLogin Technique doLoginTechnique TCP Type doServiceTypePassword Prompt doPasswordPrompt TCP Port doTcpPortFailure Banner doFailureBanner Login Attempts Allowed doAllowAttemptsMaximum Idle Time doIdleTimeout Maximum Session Time doSessionTimeoutTime to Login sec doLoginTimeout Call History Timeout min doLingerTimeV22 doModemV22Enable Isdn doModemISDNEnableV21 doModemV21Enable Maximum Speed doModemMaxSpeedGuard Tone doModemGuardTone Minimum Speed doModemMinSpeedCarrier Loss Duration doModemCarrierLossDuration Retrain doModemRetrainRestrict Modification doModemRestrictMods Dial Out Locations WindowStatus locationstatus Add Location Idle Timeout locationIdleTimeout Multilink locationConfigMultilinkMaximum Session Time locationSessionTimeout Authentication Technique locationAuthTechniqueDialing Locations View/Modify location detailsAdd Modem Profile Dial Out Modem Profiles WindowLocations Link Profile ID modemProfileIdCarrier Loss Duration modemCarrierLossDuration Guard Tone modemGuardToneRetrainmodemRetrain Compression modemCompressionDial Out User Statistics Window Billing Delay modemBillingDelayStatus modemStatus View modem profileCall Identification Password doactPasswordCall ID doactIndex Username doactUsernameDsp Link doactDSPIndex Minutes until timeout doactRemainingIdleWan Link doactLinkIndex Time Slot doactSlotIndex126 Bad Address doStatBadAddresses PPP StatisticsBad Controls doStatBadControls Packets too long doStatPacketTooLongsLocal MRU doStatLocalMRU Remote LCP Authentication doStatLcpAuthRemote MRU doStatRemoteMRU Local Multilink Mrru doStatLcpLocalMRRURemote PPP Protocol Compression doStatRemoteToLocalProtComp Local PPP Protocol Compression doStatLocalToRemoteProtCompLocal AC Compression doStatLocalToRemoteACComp Remote AC Compression doStatRemoteToLocalACCompNumber Called doactNumberDialed Bad Packets doactErrorFramesOctets Sent doactSentOctets Octets Received doactReceivedOctetsConnection Modulation doactModulation Error Correction Protocol doactErrorCorrectionTx Connection Speed doactTxSpeed Rx Connection Speed doactRxSpeedAn example section of dialout Callback Callback diCallbackConfig Dial-in Modify ConfigurationDial-in user waiting to be called back Dial-in Main WindowCallback Configuration suCallbackConfig Radius ConfigurationCallback phone number suCallbackNumber Dialout Accounting informationDrop and Insert Call History Timeout drLingerTime Session Timeout drSessionTimeoutDrop and Insert main window Active Calls drActiveHow Drop and Insert works Drop and insert diagram Using Drop and InsertDigital Signal Processing DSP 152 DSP main window DSP Settings main window Instance #2 State dspStateSecond Instance #1 Use dspUsefirstInstance #2 Use dspUseSecond DSP Memory Capture DSP Connection PerformanceDSP PCM Capture DSP Debugging EventsConnection Summaries DSP Connection Totals Reboot-B dspTotalRebootDueToError Reboot-A dspTotalRebootDueToFailsRemote-Reneg dspRemoteRenegotiates Local-Retrain dspLocalRetrainsDSP Status DSP information windowDesired State dspDesiredState Call Statistics Debug Statistics Ethernet State boxEtherAState Ethernet Main WindowPrimaryIPAddress boxEtherAPrimaryIpAddress ConfigPrimaryIpMask boxEtherAPrimaryIpMask PrimaryIpFilters boxEtherAPrimaryIpFiltersEthernet Modify Window Ethernet Modify WindowAlignment Errors dot3StatsAlignmentErrors Technique ConfigurationEthernet Statistics SQE Test Errors dot3StatsSQETestErrors FCS Errors dot3StatsFCSErrorsOther Errors dot3StatsInternalMacTransmitErrors Carrier Sense Errors dot3StatsCarrierSenseErrorsReceived Frames Too Long dot3StatsFrameTooLongs Other Received Errors dot3StatsInternalMacReceiveErrorsChip Set ID dot3StatsEtherChipSet Filter IP Modify Filter Defining a filterDirection filterIpDirection Name filterIpNameSource IP Action filterIpActionComparison filterIpSourceAddressCmp Address filterIpSourceIpSource Port Destination IPDestination Port Protocol filterIpProtocol Port filterIpDestinationPortTCP Established filterIpTcpEstablished IP Filter showing default for dialout An example of using a filter168 169 Frame Relay Congestion frameEnableCongestion Frame Relay main window Frame Relay main windowHdlc Statistics on Link Link X frDlcmiIfIndexDlmi Window Error Threshold N392 frDlcmiErrorThreshold Signalling frDlcmiStateMultiCast Service frDlcmiMulticast Data Link Protocol frDlcmiAddressLMI Interface frDlcmiInterface Dlci windowBidirectional PollingfrDlc rDlcmiPollingBiDir Polling Verification T392 frDlcmiPollingVerificationDlci frCircuitDlci Congestion frameEnableCongestionInterface # FrameIPInterfaceNum State frCircuitStateInterfaces Number ifIndex Interfaces main windowType ifType Admin Stat ifAdminStatusOperational Status ifOperStatus Description ifDescr Interface DetailsSpeed ifSpeed Max Transfer Unit ifMTUPhysical Address ifPhysAddress Last Change ifLastChangeRequested Errored Packets ifOutErrors Received Errored Packets ifInErrorsReceived and Discarded w/No Errs ifInDiscards Received w/Unknown Protocol ifInUnknownProtos184 16 IP 186 IP main window IP main windowDiscarded for Header Errors ipInHdrErrors Default Time-To-Live ipDefaultTTLDiscarded for Address Errors ipInAddrErrors Forwarding ipForwardingReassembly Timeout ipReasmTimeout Discarded w/No Errors ipInDiscardsForwarded Datagrams ipForwDatagrams Discarded for Unknown Protos ipInUnknownProtosModify TCP main window TCPRetransmit-Timeout Minimum tcpRtoMin Retransmit-Timeout Algorithm tcpRtoAlgorithmRetransmit-Timeout Maximum tcpRtoMax Established Resets tcpEstabResetsTCP Details UDP Others Received with No Delivery udpInErrors Handling of Netbios UDP Broadcasts boxNetbiosUdpBridgingReceived udpInDatagrams Received With No Ports udpNoPortsBlock Icmp redirects boxBLockIcmpRedirects Errors icmpInErrors, icmpOutErrorsIcmp Receive/Send Messages window Total Received/Sent icmpInMsgs, imcpOutMsgsSource Quenchs icmpInSrcQuenchs, icmpOutSrcQuenchs Parameter Problems icmpInParmProbs, icmpOutParmProbsTimes Exceeded icmpInTimeExcds, icmpOutTimeExcds Redirects icmpInRedirects, icmpOutRedirectsEcho Replys icmpInReps, icmpOutReps Addressing InformationTime Stamps icmpInTimestamps, icmpInTimestamps Address Mask Requests icmpInAddrMasks icmpOutAddrMasksRouting Information Entry Reassembly Maximum Size ipAdEntReasmMaxSizeEntry Interface Index ipAdEntIfIndex Entry Subnet Mask ipAdEntNetMaskMask ipRouteMask Destination ipRouteDestCost RouteCost Gateway RouteGatewayInterface ipRouteIfIndex State RouteStateAdding a static point-to-point route to a remote host Adding a point-to-point routeAdding a static routes to a remote network Advanced… Forwarding table windowType ipRouteType Next Hop ipRouteNextHopProtocol ipRouteProto Info ipRouteInfo IP Routing Destination windowRoute Destination ipRouteDest Address Translation Information Seconds Since Updated ipRouteAgeTag RouteTag Net Address ipNetToMediaNetAddress Interface ipNetToMediaEntryPhysical ipNetToMediaPhysAddress Type ipNetToMediaTypeMFR Version 218 MFR Version 2 main window Line SignallingCountry lineSigCountry Interregister Signalling MFR Version 2 Modify window MFR Version 2-Modify213 214 Interregister Signalling 216 A1010 A1111 A1212 A1313 A1414 A1515 218 RIP Version Route Changes Made rip2GlobalRouteChanges RIP Version 2 main windowResponses Sent rip2GlobalQueries Address rip2IfConfAddressAdding a RIP address Receive rip2IfConfReceiveAuthentication Type rip2IfConfAuthType RIP Version 2-ConfigurationAuthentication Key rip2IfConfAuthKey Domain rip2IfConfDomainRIP Version 2 Statistics Status rip2IfStatStatus Sent Updates rip2IfStatSentUpdatesSnmp Snmp window Snmp windowError Status Too Big snmpInTooBigs ASN ParseErrors snmpInASNParseErrsError Status Read Only snmpInReadOnlys Generated Errors snmpInGenErrsOut Authentication Failure Traps snmpEnableAuthenTraps Generated Errors snmpOutGenErrsGet Requests snmpOutGetRequests Get Next Requests snmpOutGetNextsSystem System Snmp and Http System main windowVersion boxSnmpVersion Message Blocks ManufacturerTotal Size boxHeapSize Operating System Heap MemoryFree boxHeapFreeSpace Largest boxHeapLargestSpaceInstallation Payable featuresEnclosure System OtherWeb Settings boxBackgroundFlag System Services sysServicesPhysical Location sysLocation Monitor Privilege boxMonitorPrivilegeSystem-Modify window System-Modify windowEnable Payable FeaturesboxFeatureEnableKey Buffer Size boxbuffersize System-Packet Holding Message BlocksNo. of Buffers boxbuffercount No. of Tasks Waited boxCountBufferTaskWait No. Free boxbuffersfreeNo. of Times UnavailableboxCountBufferUnavailable System Log System Log main window System Log Main WindowDaemons System Log-ModifyPriority Min Priority for Flash Storage syslogFlashPriority Min Priority for Console RS-232 syslogConsolePriorityMin Priority for Snmp Trap Daemon syslogTrapPriority Unix Facility syslogUnixFacility Min Priority for RAM SyslogTablePriorityCall Trace syslogCallTrace MaintenanceMaintain Flash Storage syslogFlashClear Time slTick System Log-Volatile MemoryMessage slMessage What the System Log messages are telling you System Log-Non-Volatile MemoryTime slfTick Message slfMessageT1/E1 Link Error Injection linkInjectError 263 Path Code Violations dsx1FarEndCurrentPCVs 271 T1/E1 Link Activity main window Link dsx1LineIndex T1/E1 Link Activity main windowType dsx1LineType Physical Line Alarms dsx1LineStatus Alarms PresentFar End Alarm Failure Circuit ID dsx1CircuitIdentifierLoss Of Signal Failure Alarm Indication Signal AIS FailureTS16 Alarm Indication Signal Failure Loss Of Frame FailureSnmp MIB definition Isdn Signaling Alarms linkSignalStatusE1 TS16 AIS Time Elapsed dsx1TimeElapsed Line Status-ConfigurationValid Intervals dsx1ValidIntervals Line Interface Settings WAN Circuit Configuration-ModifyCircuit ID dsx1CircuitIdentifier Line Coding dsx1LineCoding Line Type dsx1LineTypeReceive Equalizer linkRxEqualizer Signalling Settings Yellow Alarm Format linkYellowFormatSignal Mode dsx1SignalMode Line Build Out linkLineBuildOutTest Settings Error Injection linkInjectError Loopback Config dsx1LoopbackConfigSend Code dsx1SendCode Channel channelIndex Line Status-Channel AssignmentDesired Function channelfunction CurrentState ChannelState Near End Line Statistics-CurrentSeverely Errored Seconds dsx1CurrentSESs Errored Seconds dsx1CurrentESsSeverely Errored Frame Seconds dsx1CurrentSEFSs Line Errored Seconds dsx1CurrentLESsNear End Line Statistics-History Near End Line Statistics-Totals Severely Errored Frame Seconds dsx1TotalSEFSs Severely Errored Seconds dsx1TotalSESsLine Errored Seconds dsx1TotalLESs Bursty ErroredSeconds dsx1TotalBESsFar End Line Statistics-Current Far End Line Statistics-History Severely Errored Frame Seconds dsx1FarEndIntervalSEFSs Severely Errored Seconds dsx1FarEndIntervalSESsLine Errored Seconds dsx1FarEndIntervalLESs Bursty Errored Seconds dsx1FarEndIntervalBESsFar End Line Statistics-Totals Using Non-Facility Associated Signaling Nfas Bursty Errored Seconds dsx1FarEndTotalBESsConfiguring Nfas Degraded Minutes dsx1FarEndTotalDMsRAS hosts 1 Nfas group containing 3 PRIs Sync PPP Sync PPP Line Status-Channel Assignment WAN Circuit Configuration windowPPP Main Window PPP configurationIp Mask pppServiceIpMask Ip Address pppServiceIpAddressDefault Settings State pppActStateAuthentication Side pppDefaultAuthenticationSide Authentication Technique pppDefaultAuthenticationTechniqueAuthentication Username pppDefaultAuthenticationUsername Authentication Password pppDefaultAuthenticationPasswordPPP Link Window Compression pppDefaultIpCompressionLink frDlcmiIfIndex Status framerelStatusLink Configuration Authentication Username pppAuthenticationUsername Authentication Side pppAuthenticationSideAuthentication Password pppAuthenticationPassword Security Level pppAccessLevelAllow Magic Number Negotiation pppMagicNumber Link Compression pppLinkCompressionBad Address pppStatBadAddresses Bad Controls pppStatBadControlsACC Map pppStatLocalToPeerACCMap LCP AuthenticationpppStatLcpAuthPeer-Local ACC Map pppStatPeerToLocalACCMap Local-Remote AC ComprsnpppStatLocalToRemoteACCompTransmit Frame Check Seq. Size pppStatTransmitFcsSize Remote-Local AC Comprsn pppStatRemoteToLocalACCompReceive Frame Check Seq. Size pppStatReceiveFcsSize Operational Status pppIpOperStatusLocal Max Slot ID pppIpLocalMaxSlotId Remote Max Slot ID pppIpRemoteMaxSlotIdOctets Sent pppActSentOctets Octets Received pppActReceivedOctetsLink Configuration Modify Link Configuration WindowLayer 2 Tunneling Protocol L2TP Static Authentication L2TP ConfigurationL2TP Radius Authentication Radius AuthenticationCisco Configuration Configuration ExampleThis will enable the use of tunnel authentication Contacting Patton About window Patton Electronics Company contact informationLicense Definitions End User License AgreementTitle WarrantyTerm Grant of LicenseAppendix a Supported Radius Attributes Access-Request Attributes Access-Accept AttributesAccounting-Start Attributes Access-Challenge AttributesAccounting-Stop Attributes Appendix B MIB trees Model 2960 MIB Tree Structure Appendix C Technical Reference What Is RADIUS? Configuring a Radius serverRadius Client/Server Architecture Radius Services Radius Standards Radius Authentication ProcedureRadius Resources RADIUS-Where Can I Get It?Configuring Radius Authentication Configuring RadiusOverview Authentication window Finding the Snmp Name Using Snmp with the Access ServerFinding the branch where the Snmp parameter resides MIB tree for Model 2960 access server Configuring Nfas Configuring Non-Facility Associated Signaling NfasLine Configuration Configuring Frame RelayWAN Channel Assignment main screen Configuring PVCs Configuring Frame Relay link parametersClick on Submit Query Configuring Permanent Virtual CircuitsIP routing with Frame Relay example Configuring IP routing with a Frame Relay LinkClick Add Route Link Status and the IP ForwardingSetting up IP address pools by configuring Dnis Ip Pools Configuring DnisSetting up a Dnis user profile Setting up a Dnis groupConfiguring the RAS Configuring a leased line/dedicated line connectionModem properties window Configuring the remote end using Microsoft WindowsUnder the Options tab set Redial attempts to a high number