Manuals / Patton electronic / Computer Equipment / Network Card

Patton electronic 3086 manual Intrusion Detection System IDS

Models: 3086

1 196

Download 196 pages 1.92 Kb

Page 128

6 • Security	Model 3086 G.SHDSL Integrated Access Device User Guide

128	Intrusion Detection System (IDS)

Image 128

Patton electronic 3086 manual Intrusion Detection System IDS

Contents

Shdsl Integrated Access Device Patton Electronics Company, Inc Contents Basic Application Configurations Contents Specialized Configurations 113 Contacting Patton for assistance 143 Cable Recommendations 157 Contents Page Structure About this guideAudience Precautions About this guide Factory default parametersSafety when working with electricity Mouse conventions Typographical conventions used in this documentGeneral conventions Chapter contents General InformationModel 3086 G.SHDSL IAD overview Model 3086 G.SHDSL IAD overviewGeneral attributes Shdsl Characteristics EthernetTDM Interface Protocol supportManagement PPP SupportATM Protocols Security ModelWAN DSL Console port outlined in red Rear panel connectors and switchesPower connector Line port outlined in yellow RJ-11/4 DSL line port uses pins 2 and 3 of the RJ-11 portEthernet port outlined in green Product Overview Product Overview Applications OverviewInternet/Extranet Access IP/FR and TDM AccessIP/FR and Voice over DSL Product OverviewMetro Intranet Access Quick Start Installation What you will need Hardware installationInstalling the AC power cord Connecting network cables Quick Start InstallationWeb Operation and Configuration PC ConfigurationIP address Quick Start modification IP address has now been successfully changedModel 3086 home page displays see Figure Model 3086 menu structure is shown in onModel 3086 Menu Structure Basic Application Configurations Basic Application Configurations IPoA Routed RFC Introduction Routed WAN Services Bridged WAN Services TDM PortRear panel power and interface connectors Connecting the 3086 serial port to a DTE Connecting the 3086 serial port to a DCEX.21 Ports InterfacesConfiguring the V.35 or X.21 port via DIP switches X.21 PortsDIP switches location Switch Bank S2 Switch Position Function Factory Default Selected OptionSwitch Bank S3 T1 Interface T1 Interface ConnectionT1 Interface Configuration DIP Switch ConfigurationData Rate kbps Figuration only Web Interface Configuration Line Code The 3086 T1 interface uses B8ZSE1 Interface E1 Interface ConnectionDescription of S2 options follows the table E1/CRC S3-8 Setting Web Interface Configuration CLI configuration Using the 3086 as a simple modem TDM data over DSLCLI configuration Wait for configuration saved message… Saving configuration… Web browser configuration Clear Error CountersCircuit ID Intended DSL Data RateTerminal Type Intended Serial Interface Data RateDSL Rate Number of i Bit TDM Plus Ethernet Traffic Selecting PCM mode Selecting the DSL link speedAssigning bandwidth to serial and Ethernet ports Central or Remote terminal Master/SlaveSelect between Annex a and Annex B To select Annex B type For 3086 a at the prompt typeFor 3086 B type Circuit ID Intended Serial Interface Data Rate Interface Type Using the 3086 in Routed or Bridged applications Model 3086 Remote Configuration Steps PPPoH BridgedTwo stand-alone units directly connected Ethernet extension Hdlc Pppoh BridgedLeave User name and Password blank. Click on Apply Model 3086 Central Configuration Steps PPPoH Bridged Model 3086 Remote Configuration Steps PPPoH Routed Network Extension HDLC-PPPoH RoutedModel 3086 G.SHDSL Integrated Access Device User Guide Click on Configure Basic Application Configurations Model 3086 Central Configuration Steps PPPoH Routed Using the 3086 in Routed or Bridged applications Dslam Connections with remote CPE units Bridged application configurations to a DslamRFC 1483 Bridged Configuration Model 3086 Remote Configuration Steps RFC 1483 Bridged Model 3086 Central Configuration Steps RFC 1483 Bridged PPPoH Bridged Configuration Dslam Connections with remote CPE units Model 3086 Central Configuration Steps PPPoH Bridged PPPoA Bridged RFC 2364 Configuration Model 3086 Remote Configuration Steps PPPoA BridgedModel 3086 CentralConfiguration Steps PPPoA Bridged VPI = VCI = LLC header mode = off Hdlc header mode = offRFC 1483 Routed Routed application configurations to a DslamModel 3086 Remote Configuration Steps RFC 1483 Routed Model 3086 G.SHDSL Integrated Access Device User Guide Basic Application Configurations Model 3086 Central Configuration Steps RFC 1483 Routed One IP interface was called ip1 with an IP addressIp set interface ip1 ipaddress 192.168.100.2 Dslam Connections with remote CPE units Basic Application Configurations PPPoH Routed Ip set interface ip1 ipaddress 192.168.100.2 Dslam Connections with remote CPE units Basic Application Configurations Model 3086 Central Configuration Steps PPPoH Routed Basic Application Configurations Basic Application Configurations Model 3086 Remote-Client Configuration Steps PPPoA Routed PPPoA Routed RFCUser Namefred Passwoodfredspass Click on Configure ChapBasic Application Configurations Dslam Connections with remote CPE units Model 3086 Central-Server Configuration Steps PPPoA Routed 100 101 Local IP Magic Number MRU 102103 104 105 106 107 Model 3086 Remote Configuration Steps IPoA RoutedIPoA Routed RFC 108 109 110 111 Model 3086 Central Configuration Steps IPoA RoutedVPI0 VCI700 WAN IP address Click on Apply 112 Specialized Configurations IP Configurations RouterRIP and RIPv2 Static Route Dhcp Server and RelaySpecialized Configurations 115DNS Client 116DNS Relay Mode 117IP Configurations Security Configuring the IAD 120121 Configuring the security interfacesSecurity Deleting a Firewall Policy 122Enabling the Firewall Firewall PortfiltersFirewall Policies Firewall policy named item0 is now deletedSecurity Triggers 124125 126 Scan Attack Block DurationDefault = 86400 secondsIntrusion Detection System IDS 127 Intrusion Detection System IDS NAT Network Address Translation Enabling NAT 130131 Global address pool and reserved mapNAT Network Address Translation 132 Monitoring Status Status LEDs 134Diagnostics Software Upgrades ConfigurationProcedure PingDiagnostics Operating Local Analog Loopback LAL-Serial Port LoopOperating Remote Digital Loopback RDL-DSL Loop 137138 T1/E1 DiagnosticsNetwork Loop T1/E1 Local Loop 139QRSS-BIT Error Rate Diagnostics 140Alarms T1/E1 connection StatusTransceiver Status FDL statistics T1 onlyBIT Error Rate V.52 Diagnostics 142Contacting Patton for assistance Warranty coverage Out-of-warranty serviceContact information Returns for creditReturn for credit policy RMA numbersShipping instructions Contacting Patton for assistancePage Appendix a Compliance information Safety ComplianceRadio and TV Interference FCC Part CE Declaration of ConformityAuthorized European Representative FCC Part 68 Acta StatementIndustry Canada Notice 149150 Appendix B Specifications General Characteristics Shdsl CharacteristicsEthernet 152Sync Serial Interface T1/E1 Interface 3086/RIK and RIT models only64K/G.703 Port 3086/RIF Model Protocol SupportPPP Support ATM ProtocolsManagement 154Dimensions Power and Power Supply SpecificationsSecurity Compliance Standard Requirements156 Appendix C Cable Recommendations DSL Cable Ethernet CableAdapter Foot 3 m, RJ-11/RJ-11 refer to RJ-11non-shielded port onAppendix D Physical Connectors Assuming the MDI-X switch is in the out position RJ-45 shielded 10/100 Ethernet portRJ-11 non-shielded port RJ-45 non-shielded RS-232 console port EIA-56135 M/34 Connector 35 DB-25 Female ConnectorPhysical Connectors Serial portPower input 21 DB-15 Connector E1/T1 RJ-48C ConnectorIEC 320 connector two prong 162Appendix E Command Line Interface CLI Operation 163CLI Terminology Produces a list of numbered transport objectsLocal VT-100 emulation Remote TelnetUsing the Console Command Line Interface CLI OperationThen 165Administering user accounts Setting user passwordsAdding new users Following information is returnedChanging user settings Controlling login accessControlling user access Shdsl Commands168 To establish the DSL linkFor CPE remote unit 169 170 Appendix F Interworking Functions Information Interworking Functions Information LMI Configuration Options ManagementType Default Value nomaintenanceFrame Relay Local Management Interface 173MgtAutoStart Default Value False T391Value Default ValueT392Value Default Value FullReportCycle Default ValueCLI Configuration Methods Show current configurationCommand lmi show Set configuration variableFrame Relay Service Interworking FRF.8 Web Configuration MethodsFRS Configuration Options DE Mapping177 Translation ModeFecn Mapping FRS Name 178CLI Configuration Method Command frs set group # variable valueShow one of the eight groups Set variable attributes on a specified group180 Set variable attributes on a specified channelFRS Overview Screen Group/Channel Level Configuration Screen 181182 FRN Configuration OptionsFrame Relay Network Interworking FRF.5 Port Level Configuration Options 183Channel Level Configuration Options 184CLI Configuration Methods for Port Level Management List all ports available to the systemShow detailed information about a specific port 185Command frn set port# variable value Configuration Management of the Channel Level VariablesUnderstanding the Channel Level View 186187 Set Configuration Variables associated with the ChannelsCommand frn set port# channel # variable value Port Level Information Screen 188189 Channel Level Information ScreenPacket Information Screen Frame Relay Ethernet Based Operations Frame Relay Configuration OptionsFrame Relay CLI Configuration Options Clear all Frame Relay Transports Delete the specified transportList all active Frame Relay Channels 191Serial Interface Configuration Web Based Configuration of the Frame Relay ChannelConfiguration Variables Available Clock Mode193 Show current configuration settingsGain help about the Serial Interface Web Interface Configurations Ping commands from the CLI InterfacePing and Trace Route 194Trace Route from the CLI Interface Define Usage ip tracerouteStart Trace Route ip traceroute start 195Backup and Restore Features Backup ConfigurationRestore Configuration Ping and traceroute from the web interface