Security, Chapter contents | Patton electronic 3086 guide

Chapter 6	Security
Chapter contents
Introduction		120
Configuring the IAD		120
Configuring the security interfaces		121
Deleting a Firewall Policy		122
Enabling the Firewall		123
Firewall Portfilters		123
Security Triggers		124
Intrusion Detection System (IDS)		126

119

Image 119

Patton electronic 3086 manual Security, Chapter contents

Contents

Shdsl Integrated Access Device Patton Electronics Company, Inc Contents Basic Application Configurations Contents Specialized Configurations 113 Contacting Patton for assistance 143 Cable Recommendations 157 Contents Page Structure About this guideAudience Precautions About this guide Factory default parametersSafety when working with electricity Mouse conventions Typographical conventions used in this documentGeneral conventions General Information Chapter contents Model 3086 G.SHDSL IAD overview Model 3086 G.SHDSL IAD overviewGeneral attributes Protocol support Shdsl CharacteristicsEthernet TDM Interface Management PPP SupportATM Protocols Model Security WAN DSL Console port outlined in red Rear panel connectors and switchesPower connector Line port outlined in yellow RJ-11/4 DSL line port uses pins 2 and 3 of the RJ-11 portEthernet port outlined in green Product Overview Applications Overview Product Overview Product Overview Internet/Extranet AccessIP/FR and TDM Access IP/FR and Voice over DSL Metro Intranet Access Quick Start Installation What you will need Hardware installationInstalling the AC power cord Quick Start Installation Connecting network cables IP address has now been successfully changed Web Operation and ConfigurationPC Configuration IP address Quick Start modification Model 3086 menu structure is shown in on Model 3086 home page displays see Figure Model 3086 Menu Structure Basic Application Configurations Basic Application Configurations IPoA Routed RFC Introduction TDM Port Routed WAN Services Bridged WAN Services Rear panel power and interface connectors Interfaces Connecting the 3086 serial port to a DTEConnecting the 3086 serial port to a DCE X.21 Ports X.21 Ports Configuring the V.35 or X.21 port via DIP switches DIP switches location Switch Position Function Factory Default Selected Option Switch Bank S2 Switch Bank S3 T1 Interface Connection T1 Interface DIP Switch Configuration T1 Interface Configuration Data Rate kbps Figuration only Line Code The 3086 T1 interface uses B8ZS Web Interface Configuration E1 Interface Connection E1 Interface Description of S2 options follows the table E1/CRC S3-8 Setting Web Interface Configuration CLI configuration Using the 3086 as a simple modem TDM data over DSLCLI configuration Wait for configuration saved message… Saving configuration… Intended DSL Data Rate Web browser configurationClear Error Counters Circuit ID Terminal Type Intended Serial Interface Data RateDSL Rate Number of i Bit TDM Plus Ethernet Traffic Central or Remote terminal Master/Slave Selecting PCM modeSelecting the DSL link speed Assigning bandwidth to serial and Ethernet ports Select between Annex a and Annex B To select Annex B type For 3086 a at the prompt typeFor 3086 B type Circuit ID Intended Serial Interface Data Rate Interface Type Ethernet extension Hdlc Pppoh Bridged Using the 3086 in Routed or Bridged applicationsModel 3086 Remote Configuration Steps PPPoH Bridged Two stand-alone units directly connected Leave User name and Password blank. Click on Apply Model 3086 Central Configuration Steps PPPoH Bridged Network Extension HDLC-PPPoH Routed Model 3086 Remote Configuration Steps PPPoH Routed Model 3086 G.SHDSL Integrated Access Device User Guide Click on Configure Basic Application Configurations Model 3086 Central Configuration Steps PPPoH Routed Using the 3086 in Routed or Bridged applications Dslam Connections with remote CPE units Bridged application configurations to a DslamRFC 1483 Bridged Configuration Model 3086 Remote Configuration Steps RFC 1483 Bridged Model 3086 Central Configuration Steps RFC 1483 Bridged PPPoH Bridged Configuration Dslam Connections with remote CPE units Model 3086 Central Configuration Steps PPPoH Bridged Model 3086 Remote Configuration Steps PPPoA Bridged PPPoA Bridged RFC 2364 Configuration VPI = VCI = LLC header mode = off Hdlc header mode = off Model 3086 CentralConfiguration Steps PPPoA Bridged RFC 1483 Routed Routed application configurations to a DslamModel 3086 Remote Configuration Steps RFC 1483 Routed Model 3086 G.SHDSL Integrated Access Device User Guide Basic Application Configurations One IP interface was called ip1 with an IP address Model 3086 Central Configuration Steps RFC 1483 Routed Ip set interface ip1 ipaddress 192.168.100.2 Dslam Connections with remote CPE units Basic Application Configurations PPPoH Routed Ip set interface ip1 ipaddress 192.168.100.2 Dslam Connections with remote CPE units Basic Application Configurations Model 3086 Central Configuration Steps PPPoH Routed Basic Application Configurations Basic Application Configurations PPPoA Routed RFC Model 3086 Remote-Client Configuration Steps PPPoA Routed Chap User Namefred Passwoodfredspass Click on Configure Basic Application Configurations Dslam Connections with remote CPE units Model 3086 Central-Server Configuration Steps PPPoA Routed 100 101 102 Local IP Magic Number MRU 103 104 105 106 107 Model 3086 Remote Configuration Steps IPoA RoutedIPoA Routed RFC 108 109 110 111 Model 3086 Central Configuration Steps IPoA RoutedVPI0 VCI700 WAN IP address Click on Apply 112 Specialized Configurations Dhcp Server and Relay IP ConfigurationsRouter RIP and RIPv2 Static Route 115 Specialized Configurations 116 DNS Client 117 DNS Relay Mode IP Configurations Security 120 Configuring the IAD 121 Configuring the security interfacesSecurity 122 Deleting a Firewall Policy Firewall policy named item0 is now deleted Enabling the FirewallFirewall Portfilters Firewall Policies 124 Security Triggers 125 126 Scan Attack Block DurationDefault = 86400 secondsIntrusion Detection System IDS 127 Intrusion Detection System IDS NAT Network Address Translation 130 Enabling NAT 131 Global address pool and reserved mapNAT Network Address Translation 132 Monitoring Status 134 Status LEDs Diagnostics Ping Software UpgradesConfiguration Procedure 137 DiagnosticsOperating Local Analog Loopback LAL-Serial Port Loop Operating Remote Digital Loopback RDL-DSL Loop 138 T1/E1 DiagnosticsNetwork Loop 139 T1/E1 Local Loop 140 QRSS-BIT Error Rate Diagnostics FDL statistics T1 only AlarmsT1/E1 connection Status Transceiver Status 142 BIT Error Rate V.52 Diagnostics Contacting Patton for assistance Returns for credit Warranty coverageOut-of-warranty service Contact information Contacting Patton for assistance Return for credit policyRMA numbers Shipping instructionsPage Appendix a Compliance information CE Declaration of Conformity SafetyCompliance Radio and TV Interference FCC Part 149 Authorized European RepresentativeFCC Part 68 Acta Statement Industry Canada Notice 150 Appendix B Specifications 152 General CharacteristicsShdsl Characteristics Ethernet Protocol Support Sync Serial InterfaceT1/E1 Interface 3086/RIK and RIT models only 64K/G.703 Port 3086/RIF Model 154 PPP SupportATM Protocols Management Compliance Standard Requirements DimensionsPower and Power Supply Specifications Security 156 Appendix C Cable Recommendations Foot 3 m, RJ-11/RJ-11 refer to RJ-11non-shielded port on DSL CableEthernet Cable Adapter Appendix D Physical Connectors RJ-45 non-shielded RS-232 console port EIA-561 Assuming the MDI-X switch is in the out positionRJ-45 shielded 10/100 Ethernet port RJ-11 non-shielded port Serial port 35 M/34 Connector35 DB-25 Female Connector Physical Connectors 162 Power input21 DB-15 Connector E1/T1 RJ-48C Connector IEC 320 connector two prong 163 Appendix E Command Line Interface CLI Operation Remote Telnet CLI TerminologyProduces a list of numbered transport objects Local VT-100 emulation 165 Using the ConsoleCommand Line Interface CLI Operation Then Following information is returned Administering user accountsSetting user passwords Adding new users Shdsl Commands Changing user settingsControlling login access Controlling user access 168 To establish the DSL linkFor CPE remote unit 169 170 Appendix F Interworking Functions Information Interworking Functions Information 173 LMI Configuration OptionsManagementType Default Value nomaintenance Frame Relay Local Management Interface FullReportCycle Default Value MgtAutoStart Default Value FalseT391Value Default Value T392Value Default Value Set configuration variable CLI Configuration MethodsShow current configuration Command lmi show DE Mapping Frame Relay Service Interworking FRF.8Web Configuration Methods FRS Configuration Options 177 Translation ModeFecn Mapping 178 FRS Name Set variable attributes on a specified group CLI Configuration MethodCommand frs set group # variable value Show one of the eight groups 180 Set variable attributes on a specified channelFRS Overview Screen 181 Group/Channel Level Configuration Screen 182 FRN Configuration OptionsFrame Relay Network Interworking FRF.5 183 Port Level Configuration Options 184 Channel Level Configuration Options 185 CLI Configuration Methods for Port Level ManagementList all ports available to the system Show detailed information about a specific port 186 Command frn set port# variable valueConfiguration Management of the Channel Level Variables Understanding the Channel Level View 187 Set Configuration Variables associated with the ChannelsCommand frn set port# channel # variable value 188 Port Level Information Screen 189 Channel Level Information ScreenPacket Information Screen Frame Relay Ethernet Based Operations Frame Relay Configuration OptionsFrame Relay CLI Configuration Options 191 Clear all Frame Relay TransportsDelete the specified transport List all active Frame Relay Channels Clock Mode Serial Interface ConfigurationWeb Based Configuration of the Frame Relay Channel Configuration Variables Available 193 Show current configuration settingsGain help about the Serial Interface 194 Web Interface ConfigurationsPing commands from the CLI Interface Ping and Trace Route 195 Trace Route from the CLI InterfaceDefine Usage ip traceroute Start Trace Route ip traceroute start Ping and traceroute from the web interface Backup and Restore FeaturesBackup Configuration Restore Configuration