Security, Model | Patton electronic 3086 guide

Model 3086 G.SHDSL Integrated Access Device User Guide	1 • General Information

•SNMPv1 (RFC 1157) MIB II (RFC 1213)

•Quick Start Setup runs through common options to simplify circuit turn-up.

•Logging via SYSLOG, and VT-100 console. Console port set at 9600 bps 8/N/1 settings no flow control.

•EOC access for End-To-End management, configuration, and control.

Security

•Packet filtering firewall for controlled access to and from LAN/WAN. Support for 255 rules in 32 filter sets. 16 individual connection profiles.

•DoS Detection/protection. Intrusion detection, Logging of session, blocking and intrusion events and Real-Time alerts. Logging or SMTP on event.

•Password protected system management with a username/password for console and virtual terminal. Sepa- rate user selectable passwords for SNMP RO/RW strings.

•Access list determining up to 5 hosts/networks which are allowed to access management system

SNMP/HTTP/TELNET.

•Logging or SMTP on events: POST, POST errors, line/DSL, PPP/DHCP, IP.

Front Panel Status LEDs, Test Mode Switches, and Console Port

The IpRocketLink routers have all status LEDs and console port on the front panel of the unit, and all other electrical connections are located on the rear panel.

Figure 1. Model 3086

The status LEDs from left to right are (see table 3 for LED descriptions):

•Power

•WAN Link (DSL)

•Sync Serial (TD, RD, CTS, and DTR) or T1/E1 (Link, LOSS, TD, and RD)

•Ethernet Link, 100M, Tx, and Rx

•Status NS, ER, and TM

Model 3086 G.SHDSL IAD overview

19

Image 19

Patton electronic 3086 manual Security, Model

Contents

Shdsl Integrated Access Device Patton Electronics Company, Inc Contents Basic Application Configurations Contents Specialized Configurations 113 Contacting Patton for assistance 143 Cable Recommendations 157 Contents Page Audience About this guideStructure Precautions Safety when working with electricity Factory default parametersAbout this guide General conventions Typographical conventions used in this documentMouse conventions General Information Chapter contents General attributes Model 3086 G.SHDSL IAD overviewModel 3086 G.SHDSL IAD overview Protocol support Shdsl CharacteristicsEthernet TDM Interface ATM Protocols PPP SupportManagement Model Security WAN DSL Power connector Rear panel connectors and switchesConsole port outlined in red Ethernet port outlined in green RJ-11/4 DSL line port uses pins 2 and 3 of the RJ-11 portLine port outlined in yellow Product Overview Applications Overview Product Overview Product Overview Internet/Extranet AccessIP/FR and TDM Access IP/FR and Voice over DSL Metro Intranet Access Quick Start Installation Installing the AC power cord Hardware installationWhat you will need Quick Start Installation Connecting network cables IP address has now been successfully changed Web Operation and ConfigurationPC Configuration IP address Quick Start modification Model 3086 menu structure is shown in on Model 3086 home page displays see Figure Model 3086 Menu Structure Basic Application Configurations Basic Application Configurations IPoA Routed RFC Introduction TDM Port Routed WAN Services Bridged WAN Services Rear panel power and interface connectors Interfaces Connecting the 3086 serial port to a DTEConnecting the 3086 serial port to a DCE X.21 Ports X.21 Ports Configuring the V.35 or X.21 port via DIP switches DIP switches location Switch Position Function Factory Default Selected Option Switch Bank S2 Switch Bank S3 T1 Interface Connection T1 Interface DIP Switch Configuration T1 Interface Configuration Data Rate kbps Figuration only Line Code The 3086 T1 interface uses B8ZS Web Interface Configuration E1 Interface Connection E1 Interface Description of S2 options follows the table E1/CRC S3-8 Setting Web Interface Configuration CLI configuration Using the 3086 as a simple modem TDM data over DSLCLI configuration Wait for configuration saved message… Saving configuration… Intended DSL Data Rate Web browser configurationClear Error Counters Circuit ID DSL Rate Number of i Bit Intended Serial Interface Data RateTerminal Type TDM Plus Ethernet Traffic Central or Remote terminal Master/Slave Selecting PCM modeSelecting the DSL link speed Assigning bandwidth to serial and Ethernet ports For 3086 B type For 3086 a at the prompt typeSelect between Annex a and Annex B To select Annex B type Circuit ID Intended Serial Interface Data Rate Interface Type Ethernet extension Hdlc Pppoh Bridged Using the 3086 in Routed or Bridged applicationsModel 3086 Remote Configuration Steps PPPoH Bridged Two stand-alone units directly connected Leave User name and Password blank. Click on Apply Model 3086 Central Configuration Steps PPPoH Bridged Network Extension HDLC-PPPoH Routed Model 3086 Remote Configuration Steps PPPoH Routed Model 3086 G.SHDSL Integrated Access Device User Guide Click on Configure Basic Application Configurations Model 3086 Central Configuration Steps PPPoH Routed Using the 3086 in Routed or Bridged applications RFC 1483 Bridged Configuration Bridged application configurations to a DslamDslam Connections with remote CPE units Model 3086 Remote Configuration Steps RFC 1483 Bridged Model 3086 Central Configuration Steps RFC 1483 Bridged PPPoH Bridged Configuration Dslam Connections with remote CPE units Model 3086 Central Configuration Steps PPPoH Bridged Model 3086 Remote Configuration Steps PPPoA Bridged PPPoA Bridged RFC 2364 Configuration VPI = VCI = LLC header mode = off Hdlc header mode = off Model 3086 CentralConfiguration Steps PPPoA Bridged Model 3086 Remote Configuration Steps RFC 1483 Routed Routed application configurations to a DslamRFC 1483 Routed Model 3086 G.SHDSL Integrated Access Device User Guide Basic Application Configurations One IP interface was called ip1 with an IP address Model 3086 Central Configuration Steps RFC 1483 Routed Ip set interface ip1 ipaddress 192.168.100.2 Dslam Connections with remote CPE units Basic Application Configurations PPPoH Routed Ip set interface ip1 ipaddress 192.168.100.2 Dslam Connections with remote CPE units Basic Application Configurations Model 3086 Central Configuration Steps PPPoH Routed Basic Application Configurations Basic Application Configurations PPPoA Routed RFC Model 3086 Remote-Client Configuration Steps PPPoA Routed Chap User Namefred Passwoodfredspass Click on Configure Basic Application Configurations Dslam Connections with remote CPE units Model 3086 Central-Server Configuration Steps PPPoA Routed 100 101 102 Local IP Magic Number MRU 103 104 105 106 IPoA Routed RFC Model 3086 Remote Configuration Steps IPoA Routed107 108 109 110 VPI0 VCI700 WAN IP address Click on Apply Model 3086 Central Configuration Steps IPoA Routed111 112 Specialized Configurations Dhcp Server and Relay IP ConfigurationsRouter RIP and RIPv2 Static Route 115 Specialized Configurations 116 DNS Client 117 DNS Relay Mode IP Configurations Security 120 Configuring the IAD Security Configuring the security interfaces121 122 Deleting a Firewall Policy Firewall policy named item0 is now deleted Enabling the FirewallFirewall Portfilters Firewall Policies 124 Security Triggers 125 Intrusion Detection System IDS Scan Attack Block DurationDefault = 86400 seconds126 127 Intrusion Detection System IDS NAT Network Address Translation 130 Enabling NAT NAT Network Address Translation Global address pool and reserved map131 132 Monitoring Status 134 Status LEDs Diagnostics Ping Software UpgradesConfiguration Procedure 137 DiagnosticsOperating Local Analog Loopback LAL-Serial Port Loop Operating Remote Digital Loopback RDL-DSL Loop Network Loop T1/E1 Diagnostics138 139 T1/E1 Local Loop 140 QRSS-BIT Error Rate Diagnostics FDL statistics T1 only AlarmsT1/E1 connection Status Transceiver Status 142 BIT Error Rate V.52 Diagnostics Contacting Patton for assistance Returns for credit Warranty coverageOut-of-warranty service Contact information Contacting Patton for assistance Return for credit policyRMA numbers Shipping instructionsPage Appendix a Compliance information CE Declaration of Conformity SafetyCompliance Radio and TV Interference FCC Part 149 Authorized European RepresentativeFCC Part 68 Acta Statement Industry Canada Notice 150 Appendix B Specifications 152 General CharacteristicsShdsl Characteristics Ethernet Protocol Support Sync Serial InterfaceT1/E1 Interface 3086/RIK and RIT models only 64K/G.703 Port 3086/RIF Model 154 PPP SupportATM Protocols Management Compliance Standard Requirements DimensionsPower and Power Supply Specifications Security 156 Appendix C Cable Recommendations Foot 3 m, RJ-11/RJ-11 refer to RJ-11non-shielded port on DSL CableEthernet Cable Adapter Appendix D Physical Connectors RJ-45 non-shielded RS-232 console port EIA-561 Assuming the MDI-X switch is in the out positionRJ-45 shielded 10/100 Ethernet port RJ-11 non-shielded port Serial port 35 M/34 Connector35 DB-25 Female Connector Physical Connectors 162 Power input21 DB-15 Connector E1/T1 RJ-48C Connector IEC 320 connector two prong 163 Appendix E Command Line Interface CLI Operation Remote Telnet CLI TerminologyProduces a list of numbered transport objects Local VT-100 emulation 165 Using the ConsoleCommand Line Interface CLI Operation Then Following information is returned Administering user accountsSetting user passwords Adding new users Shdsl Commands Changing user settingsControlling login access Controlling user access For CPE remote unit To establish the DSL link168 169 170 Appendix F Interworking Functions Information Interworking Functions Information 173 LMI Configuration OptionsManagementType Default Value nomaintenance Frame Relay Local Management Interface FullReportCycle Default Value MgtAutoStart Default Value FalseT391Value Default Value T392Value Default Value Set configuration variable CLI Configuration MethodsShow current configuration Command lmi show DE Mapping Frame Relay Service Interworking FRF.8Web Configuration Methods FRS Configuration Options Fecn Mapping Translation Mode177 178 FRS Name Set variable attributes on a specified group CLI Configuration MethodCommand frs set group # variable value Show one of the eight groups FRS Overview Screen Set variable attributes on a specified channel180 181 Group/Channel Level Configuration Screen Frame Relay Network Interworking FRF.5 FRN Configuration Options182 183 Port Level Configuration Options 184 Channel Level Configuration Options 185 CLI Configuration Methods for Port Level ManagementList all ports available to the system Show detailed information about a specific port 186 Command frn set port# variable valueConfiguration Management of the Channel Level Variables Understanding the Channel Level View Command frn set port# channel # variable value Set Configuration Variables associated with the Channels187 188 Port Level Information Screen Packet Information Screen Channel Level Information Screen189 Frame Relay CLI Configuration Options Frame Relay Configuration OptionsFrame Relay Ethernet Based Operations 191 Clear all Frame Relay TransportsDelete the specified transport List all active Frame Relay Channels Clock Mode Serial Interface ConfigurationWeb Based Configuration of the Frame Relay Channel Configuration Variables Available Gain help about the Serial Interface Show current configuration settings193 194 Web Interface ConfigurationsPing commands from the CLI Interface Ping and Trace Route 195 Trace Route from the CLI InterfaceDefine Usage ip traceroute Start Trace Route ip traceroute start Ping and traceroute from the web interface Backup and Restore FeaturesBackup Configuration Restore Configuration