Manuals / Patton electronic / Computer Equipment / Server

Patton electronic 29XX manual Block Icmp redirects boxBLockIcmpRedirects

Models: 29XX

1 326

Download 326 pages 58.53 Kb

Page 196

Access Server Administrators’ Reference Guide	16 • IP

Figure 80. ICMP window

Click on ICMP under the Configuration Menu to monitor access server ICMP statistics (see figure 80).

Block ICMP redirects (boxBLockIcmpRedirects)

Enables you to configure how the access server handles ICMP redirects. Enabling the access server to receive redirected messages is generally considered a security breach.

The following options are available:

•allowredirects(0)

•stopredirects(1)

ICMP Receive/Send Messages window

The ICMP window displays the ICMP message counters. ICMP messages are displayed in the window as col- umns comprising two types of messages:

•Messages received by the access server (InMibVariable)

•Messages sent by the access server (OutMibVariable)

The numbers following the parameters can be a good source of what is happening on the network to point out potential problems. Both gateways (routers) and hosts can send ICMP messages.

Total Received/Sent (icmpInMsgs, imcpOutMsgs)

The number of ICMP messages the access server has received/sent. This number also includes ICMP messages received/sent which have ICMP specific errors.

w/Errors (icmpInErrors, icmpOutErrors)

The number of ICMP messages which the access server has received/sent but are deemed to be faulty (for example, bad ICMP checksums, bad length, or non-routable errors).

ICMP

196

Image 196

Patton electronic 29XX manual Block Icmp redirects boxBLockIcmpRedirects, Icmp Receive/Send Messages window

Contents

Remote Access Server Patton Electronics Company, Inc Contents Drop and Insert 138 Interfaces 178 Sync PPP 276 Contents Contents Audience Structure Typographical conventions used in this document General conventions Mouse conventions Chapter contents Introduction Introduction Logging into the HTTP/HTML Administration Pages HTTP/HTML and Snmp Object Format Saving HTTP/HTML Object Changes Home Introduction Home Operating Status Variables Immediate Actions Immediate Actions buttons Import/Export Export Configuration Import/Export main window Typical access server flash memory configuration data Import Configuration Alarms Sample alarm indication Displaying the Alarms window Total System AlarmsX alarmTotal Alarm Response Outputs Alarms Modify Response-Configuring the alarm response system Alarm Syslog Priority syslogAlarmPriority Alarm Snmp Trap IP 1 alarmTrapIp0Alarm Snmp Trap IP 2 alarmTrapIp1 Alarm Snmp Trap IP 3alarmTrapIp2 Modify Alarms-Configuring alarm severity levels Modify Alarms settings window Authentication ID suID Displaying the Authentication window Validated authentications auAuthenticationsValidTotalValidated via primary server auAuthenticationsValidPrimary Statistics section Validated via static database auAuthenticationsValidStatic Denied authentications auAuthenticationsDeniedPrimary server timeouts auPrimaryServerTimeouts Secondary server timeouts auSecondaryServerTimeouts Configuration section Validation auValidation Timeout auTimeout Host Address auHostAddressSecondary Host Address auSecondaryHostAddress Host Port auHostPort Accounting Enable auAccountingEnable Accounting Port auAcctPortRadius Packet Format auRadiusPacketFormat Radius Session ID Size auRadiusRunningIdSize Setting Up Authentication Radius Session ID auRadiusRunningId Authentication Configuration screen Host Address auHostAddress Accounting Port auAcctPort Static User Authentication Adding Static Users Modify Static User Service IP suServiceIP Service Port suServicePortService Mask suServiceMask Filter ID suFilterId DAX Configuring the DAX Circuit Type daxClockMode Main Reference daxClockMainRef Fallback Reference daxClockFallbackRef DAX Clock Status alarm condition Clock Status daxClockFailure Dial Dial Dial Dial Phone Dial Introduction Dial In main window Call Sorting diPageSortCall ID diactIndex ML ID diactMultiIndex State diactState Duration diactSessionTimeDisconnect Reason diactTerminateReason Modulation diactModulation Connect Speed diactTxSpeed Dial Modulations windowUsername diactUsername Connection Modulation diactModulation DSP Link diactDSPIndexTransmit Connection Speed diactTxSpeed Error Correction diactErrorCorrection Receive Connection Speed diactRxSpeedData Compression Protocol diactCompression Locally Initiated Renegotiates diactLocalRenegotiates Dial Telco window Dial Telco window WAN Link diactLinkIndex Time Slot diactSlotIndexTime Call Is/Was Active diactSessionTime Termination Reason diactTerminateReason Dial Protocol window Shared Unique ID diactMultiIndex LCP Authentication LCPAuthOptions Protocol diactProtocolIP Address diactIP Port # on Remote Machine diactPort Remote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Local-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProtNext Hop diForceNextHop Dial In Details Dial In Details window Dial In Modify default window Dial In Modify window modify Login, Service, and DNS objects Login Technique diLoginTechnique Modify LoginIP Address Pool diIpPool Password Prompt diPasswordPrompt Modify ServiceDefault Service diService Username Prompt diUsernamePrompt Modify Domain Name Server Failure Banner diFailureBanner Modify AttemptsSuccess Banner diSuccessBanner Modify Configuration Modify Maximum Time Modify Isdn Configuration 110 diV110Enable Modify V.92 Configuration Modify Modem Configuration V90diModemV90Enable K56flexdiModemK56EnableV34diModemV34Enable V32diModemV32Enable Billing Delay diBillingDelay Guard Tone diModemGuardToneCarrierLossDuration diModemCarrierLossDuration Answer Tone LengthdiModemAnswerToneLength Manage Dnis Window Direct0-No compression will be used Manage Dnis main window Dnis Entry Window Called Calling Number dnisPoolDesrcDialedNumber Dnis Profiles Login Technique dnisProfileLoginTechnique Dnis Profiles Main WindowID dnisIpProfileId IP Pool dnisProfileAssignedIpPool Service Port dnisProfileServicePort Service IP dnisProfileServiceIPTelnet Mode dnisProfileTelnetMode Dovbs dnisProfileDOVBS Status dnisIpProfileStatus Add a Dnis ProfileDnis Profile Entry Window IP Pool dnisProfileSAssignedIpPool Dovbs dnisProfileDOVBS Service Port dnisProfileServicePort Dnis IP Pools Window ID dnisIpPoolIdIP Address Pool dnisIpPool Status dnisIpPoolStatus Dnis IP Pool Entry Window Dnis IP Pools Entry window Dial In User Statistics window User Statistics Call Identification, Session Call Identification Session Time Left In Session diactRemainingSession Termination Reason diactTerminateReason Dial Dial State at termination diactTerminateState PPP Statistics LCP Statistics LCP Authentication LCPAuthOptions Remote MRU diStatRemoteMRULocal Multilink Mrru diStatLcpLocalMRRU Remote Multilink Mrru diStatLcpRemoteMRRU Local-Remote AC Comprsn diStatLocalToRemoteACComp Remote-Local AC Comprsn diStatRemoteToLocalACCompTransmit Frame Check Seq. Size diStatTransmitFcsSize Receive Frame Check Seq. Size diStatReceiveFcsSize Operational Status diIpOperStatus Local-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProtRemote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Remote Max Slot ID diIpRemoteMaxSlotId Primary Domain Name Server diactPrimaryDNS Secondary Domain Name Server diactSecondaryDNSFilters diStatIpFilterAtoJ Phone Data Physical Layer Error Correction diactErrorCorrection Modulation Symbol Rate diactSymbolRateTransmit Connection Speed diactTxSpeed Receive Connection Speed diactRxSpeed Remote Initiated Renegotiates diactRemoteRenegotiates Locally Initiated Retrains diactLocalRetrainsRemote Initiated Retrains diactRemoteRetrains Dial Out Dial Out 105 106 Dial Out Main Window Call Sorting doPageSortActive Calls doActive Call ID doactIndex User doactUsername State doactStateDuration doactSessionTime Disconnect Reason doactTerminateReason 109 Modulation doactModulation Dial Out Details windowSpeed doactTxSpeed Dial Out Modify window Dial Out Details window TCP Type doServiceType Login Technique doLoginTechniquePassword Prompt doPasswordPrompt TCP Port doTcpPort Login Attempts Allowed doAllowAttempts Failure Banner doFailureBanner Maximum Session Time doSessionTimeout Maximum Idle Time doIdleTimeoutTime to Login sec doLoginTimeout Call History Timeout min doLingerTime Isdn doModemISDNEnable V22 doModemV22EnableV21 doModemV21Enable Maximum Speed doModemMaxSpeed Minimum Speed doModemMinSpeed Guard Tone doModemGuardToneCarrier Loss Duration doModemCarrierLossDuration Retrain doModemRetrain Restrict Modification doModemRestrictMods Dial Out Locations WindowStatus locationstatus Add Location Multilink locationConfigMultilink Idle Timeout locationIdleTimeoutMaximum Session Time locationSessionTimeout Authentication Technique locationAuthTechnique View/Modify location details Dialing Locations Dial Out Modem Profiles Window Add Modem ProfileLocations Link Profile ID modemProfileId Guard Tone modemGuardTone Carrier Loss Duration modemCarrierLossDurationRetrainmodemRetrain Compression modemCompression Billing Delay modemBillingDelay Dial Out User Statistics WindowStatus modemStatus View modem profile Password doactPassword Call IdentificationCall ID doactIndex Username doactUsername Minutes until timeout doactRemainingIdle Dsp Link doactDSPIndexWan Link doactLinkIndex Time Slot doactSlotIndex 126 PPP Statistics Bad Address doStatBadAddressesBad Controls doStatBadControls Packets too long doStatPacketTooLongs Remote LCP Authentication doStatLcpAuth Local MRU doStatLocalMRURemote MRU doStatRemoteMRU Local Multilink Mrru doStatLcpLocalMRRU Local PPP Protocol Compression doStatLocalToRemoteProtComp Remote PPP Protocol Compression doStatRemoteToLocalProtCompLocal AC Compression doStatLocalToRemoteACComp Remote AC Compression doStatRemoteToLocalACComp Bad Packets doactErrorFrames Number Called doactNumberDialedOctets Sent doactSentOctets Octets Received doactReceivedOctets Error Correction Protocol doactErrorCorrection Connection Modulation doactModulationTx Connection Speed doactTxSpeed Rx Connection Speed doactRxSpeed An example section of dialout Callback Dial-in Modify Configuration Callback diCallbackConfig Dial-in Main Window Dial-in user waiting to be called back Callback Configuration suCallbackConfig Radius ConfigurationCallback phone number suCallbackNumber Accounting information Dialout Drop and Insert Session Timeout drSessionTimeout Call History Timeout drLingerTimeDrop and Insert main window Active Calls drActive How Drop and Insert works Using Drop and Insert Drop and insert diagram Digital Signal Processing DSP 152 DSP main window DSP Settings main window Instance #2 State dspStateSecond Instance #1 Use dspUsefirstInstance #2 Use dspUseSecond DSP Connection Performance DSP Memory CaptureDSP PCM Capture DSP Debugging Events Connection Summaries DSP Connection Totals Reboot-A dspTotalRebootDueToFails Reboot-B dspTotalRebootDueToErrorRemote-Reneg dspRemoteRenegotiates Local-Retrain dspLocalRetrains DSP Status DSP information windowDesired State dspDesiredState Call Statistics Debug Statistics Ethernet Ethernet Main Window State boxEtherAState Config PrimaryIPAddress boxEtherAPrimaryIpAddressPrimaryIpMask boxEtherAPrimaryIpMask PrimaryIpFilters boxEtherAPrimaryIpFilters Ethernet Modify Window Ethernet Modify Window Alignment Errors dot3StatsAlignmentErrors Technique ConfigurationEthernet Statistics FCS Errors dot3StatsFCSErrors SQE Test Errors dot3StatsSQETestErrorsOther Errors dot3StatsInternalMacTransmitErrors Carrier Sense Errors dot3StatsCarrierSenseErrors Received Frames Too Long dot3StatsFrameTooLongs Other Received Errors dot3StatsInternalMacReceiveErrorsChip Set ID dot3StatsEtherChipSet Filter IP Defining a filter Modify Filter Name filterIpName Direction filterIpDirection Action filterIpAction Source IPComparison filterIpSourceAddressCmp Address filterIpSourceIp Source Port Destination IPDestination Port Protocol filterIpProtocol Port filterIpDestinationPortTCP Established filterIpTcpEstablished An example of using a filter IP Filter showing default for dialout 168 169 Frame Relay Congestion frameEnableCongestion Frame Relay main window Frame Relay main window Link X frDlcmiIfIndex Hdlc Statistics on Link Dlmi Window Signalling frDlcmiState Error Threshold N392 frDlcmiErrorThresholdMultiCast Service frDlcmiMulticast Data Link Protocol frDlcmiAddress Dlci window LMI Interface frDlcmiInterfaceBidirectional PollingfrDlc rDlcmiPollingBiDir Polling Verification T392 frDlcmiPollingVerification Congestion frameEnableCongestion Dlci frCircuitDlciInterface # FrameIPInterfaceNum State frCircuitState Interfaces Interfaces main window Number ifIndex Type ifType Admin Stat ifAdminStatusOperational Status ifOperStatus Interface Details Description ifDescr Max Transfer Unit ifMTU Speed ifSpeedPhysical Address ifPhysAddress Last Change ifLastChange Received Errored Packets ifInErrors Requested Errored Packets ifOutErrorsReceived and Discarded w/No Errs ifInDiscards Received w/Unknown Protocol ifInUnknownProtos 184 16 IP 186 IP main window IP main window Default Time-To-Live ipDefaultTTL Discarded for Header Errors ipInHdrErrorsDiscarded for Address Errors ipInAddrErrors Forwarding ipForwarding Discarded w/No Errors ipInDiscards Reassembly Timeout ipReasmTimeoutForwarded Datagrams ipForwDatagrams Discarded for Unknown Protos ipInUnknownProtos Modify TCP TCP main window Retransmit-Timeout Algorithm tcpRtoAlgorithm Retransmit-Timeout Minimum tcpRtoMinRetransmit-Timeout Maximum tcpRtoMax Established Resets tcpEstabResets TCP Details UDP Handling of Netbios UDP Broadcasts boxNetbiosUdpBridging Others Received with No Delivery udpInErrorsReceived udpInDatagrams Received With No Ports udpNoPorts Errors icmpInErrors, icmpOutErrors Block Icmp redirects boxBLockIcmpRedirectsIcmp Receive/Send Messages window Total Received/Sent icmpInMsgs, imcpOutMsgs Parameter Problems icmpInParmProbs, icmpOutParmProbs Source Quenchs icmpInSrcQuenchs, icmpOutSrcQuenchsTimes Exceeded icmpInTimeExcds, icmpOutTimeExcds Redirects icmpInRedirects, icmpOutRedirects Addressing Information Echo Replys icmpInReps, icmpOutRepsTime Stamps icmpInTimestamps, icmpInTimestamps Address Mask Requests icmpInAddrMasks icmpOutAddrMasks Entry Reassembly Maximum Size ipAdEntReasmMaxSize Routing InformationEntry Interface Index ipAdEntIfIndex Entry Subnet Mask ipAdEntNetMask Destination ipRouteDest Mask ipRouteMask Gateway RouteGateway Cost RouteCostInterface ipRouteIfIndex State RouteState Adding a static point-to-point route to a remote host Adding a point-to-point routeAdding a static routes to a remote network Forwarding table window Advanced… Type ipRouteType Next Hop ipRouteNextHopProtocol ipRouteProto Info ipRouteInfo IP Routing Destination windowRoute Destination ipRouteDest Address Translation Information Seconds Since Updated ipRouteAgeTag RouteTag Interface ipNetToMediaEntry Net Address ipNetToMediaNetAddressPhysical ipNetToMediaPhysAddress Type ipNetToMediaType MFR Version 218 MFR Version 2 main window Line SignallingCountry lineSigCountry Interregister Signalling MFR Version 2-Modify MFR Version 2 Modify window 213 214 Interregister Signalling 216 A1010 A1111 A1212 A1313 A1414 A1515 218 RIP Version RIP Version 2 main window Route Changes Made rip2GlobalRouteChangesResponses Sent rip2GlobalQueries Address rip2IfConfAddress Receive rip2IfConfReceive Adding a RIP address RIP Version 2-Configuration Authentication Type rip2IfConfAuthTypeAuthentication Key rip2IfConfAuthKey Domain rip2IfConfDomain RIP Version 2 Statistics Sent Updates rip2IfStatSentUpdates Status rip2IfStatStatus Snmp Snmp window Snmp window ASN ParseErrors snmpInASNParseErrs Error Status Too Big snmpInTooBigsError Status Read Only snmpInReadOnlys Generated Errors snmpInGenErrs Out Generated Errors snmpOutGenErrs Authentication Failure Traps snmpEnableAuthenTrapsGet Requests snmpOutGetRequests Get Next Requests snmpOutGetNexts System System Snmp and Http System main windowVersion boxSnmpVersion Manufacturer Message Blocks Operating System Heap Memory Total Size boxHeapSizeFree boxHeapFreeSpace Largest boxHeapLargestSpace Payable features InstallationEnclosure System Other System Services sysServices Web Settings boxBackgroundFlagPhysical Location sysLocation Monitor Privilege boxMonitorPrivilege System-Modify window System-Modify window Enable Payable FeaturesboxFeatureEnableKey Buffer Size boxbuffersize System-Packet Holding Message BlocksNo. of Buffers boxbuffercount No. of Tasks Waited boxCountBufferTaskWait No. Free boxbuffersfreeNo. of Times UnavailableboxCountBufferUnavailable System Log System Log Main Window System Log main window Daemons System Log-ModifyPriority Min Priority for Flash Storage syslogFlashPriority Min Priority for Console RS-232 syslogConsolePriorityMin Priority for Snmp Trap Daemon syslogTrapPriority Min Priority for RAM SyslogTablePriority Unix Facility syslogUnixFacility Call Trace syslogCallTrace MaintenanceMaintain Flash Storage syslogFlashClear Time slTick System Log-Volatile MemoryMessage slMessage System Log-Non-Volatile Memory What the System Log messages are telling youTime slfTick Message slfMessage T1/E1 Link Error Injection linkInjectError 263 Path Code Violations dsx1FarEndCurrentPCVs 271 T1/E1 Link Activity main window Link dsx1LineIndex T1/E1 Link Activity main windowType dsx1LineType Alarms Present Physical Line Alarms dsx1LineStatusFar End Alarm Failure Circuit ID dsx1CircuitIdentifier Alarm Indication Signal AIS Failure Loss Of Signal FailureTS16 Alarm Indication Signal Failure Loss Of Frame Failure Isdn Signaling Alarms linkSignalStatus Snmp MIB definition E1 TS16 AIS Time Elapsed dsx1TimeElapsed Line Status-ConfigurationValid Intervals dsx1ValidIntervals Line Interface Settings WAN Circuit Configuration-ModifyCircuit ID dsx1CircuitIdentifier Line Coding dsx1LineCoding Line Type dsx1LineTypeReceive Equalizer linkRxEqualizer Yellow Alarm Format linkYellowFormat Signalling SettingsSignal Mode dsx1SignalMode Line Build Out linkLineBuildOut Test Settings Error Injection linkInjectError Loopback Config dsx1LoopbackConfigSend Code dsx1SendCode Channel channelIndex Line Status-Channel AssignmentDesired Function channelfunction Near End Line Statistics-Current CurrentState ChannelState Errored Seconds dsx1CurrentESs Severely Errored Seconds dsx1CurrentSESsSeverely Errored Frame Seconds dsx1CurrentSEFSs Line Errored Seconds dsx1CurrentLESs Near End Line Statistics-History Near End Line Statistics-Totals Severely Errored Seconds dsx1TotalSESs Severely Errored Frame Seconds dsx1TotalSEFSsLine Errored Seconds dsx1TotalLESs Bursty ErroredSeconds dsx1TotalBESs Far End Line Statistics-Current Far End Line Statistics-History Severely Errored Seconds dsx1FarEndIntervalSESs Severely Errored Frame Seconds dsx1FarEndIntervalSEFSsLine Errored Seconds dsx1FarEndIntervalLESs Bursty Errored Seconds dsx1FarEndIntervalBESs Far End Line Statistics-Totals Bursty Errored Seconds dsx1FarEndTotalBESs Using Non-Facility Associated Signaling NfasConfiguring Nfas Degraded Minutes dsx1FarEndTotalDMs RAS hosts 1 Nfas group containing 3 PRIs Sync PPP Sync PPP WAN Circuit Configuration window Line Status-Channel Assignment PPP configuration PPP Main Window Ip Address pppServiceIpAddress Ip Mask pppServiceIpMaskDefault Settings State pppActState Authentication Technique pppDefaultAuthenticationTechnique Authentication Side pppDefaultAuthenticationSideAuthentication Username pppDefaultAuthenticationUsername Authentication Password pppDefaultAuthenticationPassword Compression pppDefaultIpCompression PPP Link WindowLink frDlcmiIfIndex Status framerelStatus Link Configuration Authentication Side pppAuthenticationSide Authentication Username pppAuthenticationUsernameAuthentication Password pppAuthenticationPassword Security Level pppAccessLevel Link Compression pppLinkCompression Allow Magic Number Negotiation pppMagicNumberBad Address pppStatBadAddresses Bad Controls pppStatBadControls LCP AuthenticationpppStatLcpAuth ACC Map pppStatLocalToPeerACCMapPeer-Local ACC Map pppStatPeerToLocalACCMap Local-Remote AC ComprsnpppStatLocalToRemoteACComp Remote-Local AC Comprsn pppStatRemoteToLocalACComp Transmit Frame Check Seq. Size pppStatTransmitFcsSizeReceive Frame Check Seq. Size pppStatReceiveFcsSize Operational Status pppIpOperStatus Remote Max Slot ID pppIpRemoteMaxSlotId Local Max Slot ID pppIpLocalMaxSlotIdOctets Sent pppActSentOctets Octets Received pppActReceivedOctets Modify Link Configuration Window Link Configuration Layer 2 Tunneling Protocol L2TP L2TP Configuration Static Authentication Radius Authentication L2TP Radius Authentication Configuration Example Cisco Configuration This will enable the use of tunnel authentication Contacting Patton Patton Electronics Company contact information About window License End User License Agreement Definitions Warranty TitleTerm Grant of License Appendix a Supported Radius Attributes Access-Accept Attributes Access-Request Attributes Access-Challenge Attributes Accounting-Start Attributes Accounting-Stop Attributes Appendix B MIB trees Model 2960 MIB Tree Structure Appendix C Technical Reference What Is RADIUS? Configuring a Radius serverRadius Client/Server Architecture Radius Services Radius Authentication Procedure Radius Standards RADIUS-Where Can I Get It? Radius Resources Configuring Radius Authentication Configuring RadiusOverview Authentication window Using Snmp with the Access Server Finding the Snmp Name Finding the branch where the Snmp parameter resides MIB tree for Model 2960 access server Configuring Non-Facility Associated Signaling Nfas Configuring Nfas Configuring Frame Relay Line Configuration WAN Channel Assignment main screen Configuring Frame Relay link parameters Configuring PVCs Configuring Permanent Virtual Circuits Click on Submit Query Configuring IP routing with a Frame Relay Link IP routing with Frame Relay example Link Status and the IP Forwarding Click Add Route Configuring Dnis Setting up IP address pools by configuring Dnis Ip PoolsSetting up a Dnis user profile Setting up a Dnis group Configuring a leased line/dedicated line connection Configuring the RAS Configuring the remote end using Microsoft Windows Modem properties window Under the Options tab set Redial attempts to a high number