Netopia PN Series manuale d’uso

Netopia  Router Reference Guide[...]

Copyright Copyright © 1998 Netopia, Inc. v .298 All rights reser ved. This manual and any associated ar twork, software and product designs are copyrighted with all rights reser ved. Under the copyright laws such materials may not be copied, in whole or par t, without the prior written consent of Farallon Communications. Under the law , copying in[...]

Contents G B Chapter 1 — Introduction .......................................................... 1-1 How to use this guide .................................................... 1-2 Netopia models.................................................... 1-3 Connecting to the Advanced Configuration screens ........... 1-4 Connecting a modem to the Smar [...]

iv Reference Guide Readying computers on your local network ....................... 3-2 Connecting to a LocalT alk network— for 400 series models.................................................... 3-3 Connecting to an Ethernet network .................................. 3-4 EtherW ave ........................................................... 3-[...]

Contents v G AppleT alk Setup for Small Of fice models.......................... 6-7 AppleT alk Setup for Corporate models ............................. 6-9 EtherT alk Setup .................................................... 6-9 LocalT alk Setup.................................................. 6-11 AURP setup ...................................[...]

vi Reference Guide Establishing a dial-on-demand (DOD) connection call..................................................... 8-5 Establishing a manual connection call ................... 8-8 T roubleshooting ............................................................. 8-9 Chapter 9 — Monitoring T ools .............................................[...]

Contents vii G Uploading configuration files ............................. 10-16 T ransfer ring configuration and fir mwar e files with TFTP .................................................................. 10-17 Updating fir mware ............................................ 10-18 Downloading configuration files ......................... [...]

viii Reference Guide About SPIDs .................................................................. C-2 Example SPIDs .................................................... C-3 Second director y number ............................................... C-3 Switch-specific uses ............................................. D-3 Backup number ............[...]

1-1 ET H E R N E T ISDN Receive Link Receive Link Transmit Collision AUI Ready Traffic Traffic Go Go Traffic B1 D B2 PC card Power Chapter 1 Intr oduction Y our Netopia Router of fers Advanced Configuration features in addition to the Easy Setup features. The advanced featur e screens are accessed thr ough the Main Menu of the Router’s console c[...]

1-2 Reference Guide How to use this guide This guide is or ganized into chapters describing each of the Netopia Router’s advanced features. Y ou may want to read each chapter’s introductor y section to familiarize yourself with the various featur es available. Y ou can also use this summar y to locate relevant sections: ■ T o configure ISDN [...]

Introduction 1-3 ■ For IP filters, see “About filters and filter sets” on page 7-6 and “Working with IP filters and filter sets” on page 7-16 . ■ T o transfer fir mware and configuration files, see “Transferring configuration and fir mware files with XMODEM” on page 10-12 or “T ransfer ring configuration and fir mwar [...]

1-4 Reference Guide Connecting to the Advanced Configuration scr eens There ar e three ways to connect to the Netopia Router’s advanced configuration screens: ■ Through the console por t, using a local ter minal (see the Getting Star ted Guide ) ■ Using T elnet with the Router’s Ether net por t IP address (cannot be used for initial con?[...]

Introduction 1-5 Follow the manufacturer’s instr uctions when unpacking and preparing to use the PC Card modem. One end of the telephone cable connects to your modem, while the other end (RJ-11) connects to an analog telephone line wall socket ( not an ISDN or leased line) . T o attach the modem to the Netopia Router , pull down the r ubber door [...]

1-6 Reference Guide Navigating thr ough the Advanced Configuration scr eens T o help you find your way to par ticular screens, some sections in this guide begin with a graphical path guide similar to the following example: This par ticular path guide shows how to get to the W AN Setup screens. The path guide r epresents these steps: 1. Beginning [...]

Introduction 1-7 Keyboard navigation Use your keyboard to navigate the Netopia Router’s configuration screens, enter and edit infor mation, and make choices. The following table lists the navigation keys. T o... Use These Keys... Move through selectable items in a screen or pop-up menu Up, Down, Left, and Right Ar row Execute action of a selecte[...]

1-8 Reference Guide[...]

2-1 Chapter 2 Configuring ISDN and Leased Line Connections This chapter shows you how to configure the Netopia Router to make and receive network connections over an ISDN or leased line and how to control those connections. T opics include: ■ “ISDN W AN Setup” on page 2-2 shows you how to configur e your ISDN Netopia Router for outgoing ca[...]

2-2 Reference Guide ISDN W AN Setup The ISDN W AN Setup scr een has three subscr eens, each involving a dif fer ent aspect of using the ISDN line to control connections to remote IP or IPX networks. Note: If you have completed Easy Setup (see the Getting Star ted Guide ), the infor mation you have already enter ed will appear in some of the Advance[...]

Configuring ISDN and Leased Line Connections 2-3 Note: If your ISDN Line Configuration screen contains items that are not discussed in this section, such as SPIDs, see Appendix C, “ISDN Configuration Guide.” The ISDN Line Configuration screen consists of up to thr ee pop-up menus and up to four editable fields. North America ISDN models on[...]

2-4 Reference Guide ISDN Line Configuration Circuit Type... Permanent B-Channel Usage... B1 Data Link Encapsulation... PPP Enter information supplied to you by your ISDN phone company. From the pop-up menu, select the appr opriate B-channel, such as B1, B2, or Both. Then go to step 7. Note: A per manent ISDN cir cuit type only suppor ts 64 kbps and[...]

Configuring ISDN and Leased Line Connections 2-5 6. Select Director y Number 1 and enter the primar y dir ector y number as you would dial it, including any requir ed prefixes (such as area, access, and long-distance dialing codes). Pr ess Return. Note: If you select an IDSL (Pt-to-Pt) switch, the Director y Number 1 field will default to 555-12[...]

2-6 Reference Guide WAN Setup Line Configuration... Frame Relay Configuration... Frame Relay DLCI Configuration... Connection Profiles... Default Profile... From here you will configure yours and the remote sites' WAN information. Note: For all leased line Netopia Router models using PPP or Cisco- HDLC datalink encapsulation, the Frame Relay C[...]

Configuring ISDN and Leased Line Connections 2-7 The DDS Line Configuration screen appears for DDS leased line models (with an internal CSU/DSU connection). See page 2-12 . Line configuration for an SA/Serial line The Serial Line Configuration screen is wher e you enter the configuration parameters for your leased line, in order for the Netopi[...]

2-8 Reference Guide Equipment) because their transmit data can become altered in relation to the clock sour ced by the DCE (Data Communications Equipment). A DTE (Data T er minal Equipment) is a ter m used to define the equipment rate. It is a designation for the maximum rate at which a router can exchange infor mation. A DCE (Data Communications [...]

Configuring ISDN and Leased Line Connections 2-9 Switched async only 6. Select Date Rate (kbps) and pr ess Retur n. From the pop-up menu, select 19.2, 38.4, 57.6, 115.2, or 230.4. Choose the data rate that is about twice your modem’s capabilities. For instance, if you have a 28.8K modem, select 57.6 for your data rate. Press Retur n. 7. The Mode[...]

2-10 Reference Guide T1 Line Configuration Line Encoding... B8ZS Framing Mode... ESF Transmit ANSI PRMs: No Number of DS0 Channels: 1 First DS0 Channel: 1 Buildout (-dB)... Auto Channel Data Rate... Nx64k Clock Source... Network Data Link Encapsulation... Frame Relay Enter Information supplied to you by your telephone company. 1. Select Line Encodi[...]

Configuring ISDN and Leased Line Connections 2-11 Note: Each DS0 channel repr esents a 56k or 64k increment in bandwidth. Selecting a number less than the maximum of 24 specifies a fractional-T1 inter face. For fractional-T1, you may also specify in the check box whether the DS0 channels are contiguous or alter nating. 5. Select First DS0 Channel[...]

2-12 Reference Guide Line configuration for a DDS line The DDS Line Configuration screen is wher e you enter the configuration parameters for your leased line, in order for the Netopia Router to communicate with the physical connection. Use the infor mation in the Leased Line worksheet in the Getting Star ted Guide as a refer ence when specifyin[...]

Configuring ISDN and Leased Line Connections 2-13 3. Select Clock Source and press Retur n. From the pop-up menu, highlight the clock source, that you wish to use. The choices of fer ed are Internal Clock Sour ce, or Network Clock Source. The default is Network. Press Retur n. 4. Select Data Link Encapsulation and highlight the method of encapsula[...]

2-14 Reference Guide Connection Profiles Display/Change Connection Profile... Add Connection Profile... Delete Connection Profile... Establish WAN Connection... Disconnect WAN Connection... Return/Enter to modify an existing Connection Profile. This Screen is the main point of navigation for Connection Profiles. Note: The Establish W AN Connection [...]

Configuring ISDN and Leased Line Connections 2-15 Connection Profiles +-Profile Name---------------------IP Address----IPX Network-+ +------------------------------------------------------------+ | Easy Setup Profile 127.0.0.2 0 | | Panost Inc. 0.0.0.0 | | XYZ Corporation 0.0.0.0 | +------------------------------------------------------------+ Up/[...]

2-16 Reference Guide Deleting a Connection Profile T o delete a connection profile, select Delete Connection Pr ofile in the Connection Profiles scr een and press Retur n to display a table of connection profiles. Connection Profiles +-Profile Name---------------------IP Address----IPX Network-+ +-----------------------------------------------[...]

Configuring ISDN and Leased Line Connections 2-17 Add Connection Profile Profile Name: Profile 04 Profile Enabled: Yes IP Enabled: Yes IP Profile Parameters... IPX Enabled: Yes IPX Profile Parameters.. Data Link Encapsulation... PPP Data Link Options... Interface Group... Int CSU Telco Options... ADD PROFILE NOW CANCEL Configure a new Conn. Profil[...]

2-18 Reference Guide IP Profile Parameters Address Translation Enabled: Yes IP Addressing... Numbered Local WAN IP Address: 0.0.0.0 Local WAN IP Mask: 0.0.0.0 Remote IP Address: 0.0.0.0 Remote IP Mask: 0.0.0.0 Filter Set... Remove Filter Set Receive RIP: Yes Configure IP requirements for a remote network connection here. Applicable only to SmartIP [...]

Configuring ISDN and Leased Line Connections 2-19 The default address for the Local WAN IP Address is 0.0.0.0, which allows for dynamic addressing, when your ISP assigns an address each time you connect. However , you may enter another address if you want to use static addr essing. Note: When using Cisco-HDLC datalink encapsulation and Network Add[...]

2-20 Reference Guide a W AN IP addr ess or subnet mask associated with this connection. These default addresses will r equest that the remote r outer dynamically assign an address at the time the connection is made. T o configure a pr ofile for a ter minal adapter or Netopia Router that is dialing into your router using dynamic Network Addr ess T[...]

Configuring ISDN and Leased Line Connections 2-21 Note: Using the IPX protocol is r equired with other r emote networks using IPX for an intranet connection. For more infor mation on IPX, refer to Chapter 5, “IPX Setup” of this guide. ■ Select IPX Profile Parameters and press Retur n. This option is only available if IPX Enabled is toggled [...]

2-22 Reference Guide ■ T o change the default Path Delay , select and enter a value (in ticks). ■ T o enable NetBIOS Packet For war ding , toggle the selection to Ye s . ■ Select Incoming Packet Filter Set to attach a filter set for filtering incoming packets. Choose a filter set from the list and press Retur n. ■ Select Outgoing Packet [...]

Configuring ISDN and Leased Line Connections 2-23 Point-to-Point Protocol (PPP) and Multilink Point-to-Point Pr otocol (MP) allow the Netopia Router to make adaptable and secure connections to other networks. PPP/MP Options Data Compression... Ascend LZS Send Authentication... PAP Send User Name: Send Password: Receive User Name: Receive Password:[...]

2-24 Reference Guide authentication is set for P AP , as this is usually the most popular security parameter that ISP’s and other remote networks set up for a point-to-point connection use. ■ If you choose None , and the remote network expects to connect to the Netopia Router using this connection pro- file, you may need to set the answer pro?[...]

Configuring ISDN and Leased Line Connections 2-25 ■ If you choose to use CACHE-TOKEN , select Send User Name and enter a name for your Netopia Router . Then, select Send Password and enter a secr et name or number . If you will be using SecurID (an added method of security authentication), check with your network administrator to find out if yo[...]

2-26 Reference Guide accept an incoming call through or when a second connec- tion profile is used to make a call. See Appendix D for infor- mation on “Dynamic B-channel usage”. ■ 1 B-Channel forces a call to r emain within one B-channel. (Throughput will generally be at either 56k or 64k, depend- ing on how the local telephone company insta[...]

Configuring ISDN and Leased Line Connections 2-27 telephone number for a multilink call. In addition, the Netopia Router can bring W AN links up and down with a r emote router. Note: There ar e two specifications for BAP protocol. The first specification was proposed befor e Januar y 1997 and the latter was proposed after that date. The On-Old [...]

2-28 Reference Guide T1 and DDS models only 10. The Inter face Group field r eflects the active por t selection: the internal CSU for T1 or DDS, or SA por t for SA, if backup is enabled. See “CSU Backup” on page 2-55 for more infor mation. Models with Switched circuits only 11. Select T elco Options and press Retur n. The T elco Options scree[...]

Configuring ISDN and Leased Line Connections 2-29 ■ Select Dial and set this connection profile to only make calls, only receive calls, or do both. Choose fr om In Only (receive calls), Out Only (make calls), or Dial In/Out (receive and make calls). ■ Select Number to Dial and enter the telephone number you received fr om your ISP . This is t[...]

2-30 Reference Guide ISDN Switched circuit models only Available for inbound calls only ■ The CNA V alidation Number is the telephone number that your Netopia Router will match to incoming calls. Question marks “?” can be used in place of numbers as wild card characters to ensure that matches ar e made on dif fer ent director y numbers. See ?[...]

Configuring ISDN and Leased Line Connections 2-31 If a connection is establishing properly , the Connection State will initially read Acquiring but will change to Up once the call has successfully connected. Y ou will be able to access infor mation at the remote site that you ar e connecting to once authentication is completed successfully . Disco[...]

2-32 Reference Guide Frame Relay Configuration LMI Type... ANSI (Annex D) T391 (Polling Interval in secs): 10 N391 (Polls/Full Status Cycles): 6 N392 (Error Threshold): 3 N393 (Monitored Event Window): 4 Tx Injection Management... Standard Default CIR: 64000 Default Bc: 64000 Default Be: 0 Congestion Management Enabled: Yes Maximum Tx Frame Size: 1[...]

Configuring ISDN and Leased Line Connections 2-33 ■ The N392 option specifies the maximum number of (link reliability , protocol, and sequence number) er ror events that can occur within the N393 sliding window . If an N392 thr esh- old is exceeded, the switch declares the Netopia Router inac- tive. The default setting is 3. ■ The N393 option[...]

2-34 Reference Guide ■ The Default Be (Be also refer r ed to as Excess Burst Size) repr esents the maximum amount of data that your Frame Relay ser vice provider will attempt to deliver to a given PVC (Per manent Vir tual Cir cuit) or DLCI (Data Link Connection Identifier). This setting defaults to 0, but you may change the capacity rate if this[...]

Configuring ISDN and Leased Line Connections 2-35 A Frame Relay DLCI is a set of parameters that tells the Netopia Router how to initially connect to a remote destination. The Netopia Router leased line models suppor t up to 16 dif fer ent Frame Relay DLCI configuration profiles. Each Frame Relay DLCI configuration you set up allows the Netopia[...]

2-36 Reference Guide Changing a Frame Relay DLCI configuration T o modify a Frame Relay DLCI configuration, select Display/Change DLCIs in the Frame Relay DLCI Configuration screen. Select a DLCI Name from the table and pr ess Retur n to go to the Change DLCI screen. The parameters in this scr een are the same as the parameters in the Add DLCI s[...]

Configuring ISDN and Leased Line Connections 2-37 2. A Frame Relay DLCI Configuration table appears with a prompt asking you if you want to delete the connection profile you have just highlighted. Select CONTINUE if you wish to delete this DLCI or CANCEL if you do not. Y ou are now done configuring the Frame Relay DLCI Configuration screen. Pr[...]

2-38 Reference Guide Note: The Netopia Router allows Frame Relay DLCIs to be named, so that you can easily refer ence and dif fer entiate them. This is accomplished by giving a DLCI Name to a DLCI Number . Frame Relay DLCI Configuration +-DLCI Name----------DLCI Number-+ +--------------------------------+ | Panost Inc. 16 | | THARPER Inc. 32 | | | [...]

Configuring ISDN and Leased Line Connections 2-39 ■ The Bc (Committed Burst Size) repr esents the maximum amount of data that your Frame Relay ser vice provider agrees to transfer fr om a given PVC (Per manent Vir tual Cir- cuit) or DLCI (Data Link Connection Identifier). The setting defaults to 64000, but you may modify the committed burst siz[...]

2-40 Reference Guide How the default pr ofile works for a switched cir cuit The Default Profile works like a guar d booth at the gate to your network: it scr utinizes incoming calls. Like the guar d booth, the default profile allows calls based on a set of criteria that you define. The main criterion used to check calls is whether they match on[...]

Configuring ISDN and Leased Line Connections 2-41 WAN Setup Line Configuration... Connection Profiles... Default Answer Profile... From here you will configure yours and the remote sites' WAN information. 1. Select Default Answer Profile in the WAN Setup screen. Press Return. The Default Pr ofile scr een appears. 2. T o enable CNA authentic[...]

2-42 Reference Guide Note: If the actual calling number and entered calling number do not have the same number of digits, CNA can still match the numbers. The smaller number deter mines how many digits must match. For instance, if the actual calling number is 10 digits and the entered calling number is 7 digits, only 7 digits must be matched. The 7[...]

Configuring ISDN and Leased Line Connections 2-43 Note: For an ISDN switched circuit with HDLC datalink encapsulation enabled, the Default Profile scr een will only show the Calling Number Authentication pop-up menu. 3. T o force incoming calls to match connection pr ofiles, select Must Match a Defined Profile and toggle it to Ye s . Incoming [...]

2-44 Reference Guide words, you will have to set up a connection pr ofile for that network. Y ou can set the following default parameters for incoming calls: ■ Authentication Non-North America models only ■ For ce 56K on Answer ■ Data Compression ■ Maximum Receive Packet Size If Must Match a Defined Profile is set to No , you can also se[...]

Configuring ISDN and Leased Line Connections 2-45 How the default pr ofile works for a permanent cir cuit The default profile works like a guar d booth at the gate to your network: it scr utinizes WAN connections. Like the guard booth, the default profile allows connections based on a set of criteria that you define. The main criterion used to[...]

2-46 Reference Guide Customizing the default profile Y ou can customize the Netopia Router’s default frame relay pr ofile in the Default Frame Profile scr een. WAN Setup Line Configuration... Frame Relay Configuration... Frame Relay DLCI Configuration... Connection Profiles... Default Frame Profile... Return/Enter for default WAN connection pa[...]

Configuring ISDN and Leased Line Connections 2-47 If Must Match a Defined Pr ofile is set to No , you can also set the following parameters for accepted calls that do not match a connection profile: ■ Network Address T ranslation ■ Inter face-based Routing or System-based Routing ■ Firewall Filter Set ■ T ransmit RIP ■ Receive RIP ■[...]

2-48 Reference Guide ■ T o allow calls that only match a connection profile’s r emote IP and/or IPX address: ■ T oggle Must Match a Defined Profile to Ye s , and ■ set Authentication to None . ■ T o not allow any incoming calls to connect to the Netopia Router: ■ T oggle Must Match a Defined Profile to Ye s , and ■ Set the Dial o[...]

Configuring ISDN and Leased Line Connections 2-49 IP Address Serving IP Address Serving: On Server Name is Netopia PN435 T o select W AN IP Addr ess Ser ving, go to the IP Addr ess Ser ving screen fr om the Advanced Configuration menu and toggle On. Note: W AN IP Addr ess Ser ving is used for only incoming caller connections . Refer to “IP addr[...]

2-50 Reference Guide Viewing scheduled connections T o display a table of view-only scheduled connections, select Display/Change Scheduled Connection in the Scheduled Connections screen. Each scheduled connection occupies one r ow of the table. Scheduled Connections +-Days ---- Begin At - HH:MM --- When ----- Conn. Prof. NameEnabled ------ + | MTWT[...]

Configuring ISDN and Leased Line Connections 2-51 Adding a scheduled connection T o add a new scheduled connection, select Add Scheduled Connection in the Scheduled Connections screen and go to the Add Scheduled Connection screen. Add Scheduled Connection Scheduled Connection Enable: On How Often... Weekly Schedule Type... Forced Set Weekly Schedu[...]

2-52 Reference Guide Demand-Blocked defines the schedule when demand calls are prevented. ■ If you selected W eekly , select Set W eekly Schedule and go to the Set Weekly Schedule screen. ■ Select the days for the scheduled connection to occur and toggle them to Ye s . Set Weekly Schedule Monday: No Tuesday: No Wednesday: No Thursday: No Frida[...]

Configuring ISDN and Leased Line Connections 2-53 ■ Select AM or PM and choose AM or PM from the pop-up menu. ■ Select Scheduled Window Duration and enter the maximum duration allowed for this scheduled window (not for the call). ■ If you selected Periodic , select Every and choose how often the call should be attempted. The default is ever [...]

2-54 Reference Guide ■ Select AM or PM and choose AM or PM . The AM or PM item appears only if the time is in the 12-hour clock for mat. ■ Select Scheduled Window Duration and enter the maximum duration allowed for this scheduled window (not for the call). Use the same for mat restrictions noted above. Y ou are done configuring the once-only o[...]

Configuring ISDN and Leased Line Connections 2-55 CSU Backup When you are using the leased line inter faces T1 and DDS, you can configure an automatic CSU backup, to switch to the SA por t during a leased line failure. CSU Backup Configuration Enable SA Port as CSU Backup Yes Requires Data Link Failure of... 30 Sec Circuit Type... Switched Async [...]

2-56 Reference Guide[...]

3-1 Chapter 3 Connecting Y our Local Network In this chapter , you will lear n how to physically connect the Netopia Router to your local area network (LAN). Befor e you proceed, make sure the Netopia Router is pr operly configured. Y ou can configur e the Router using Console-based Management or Web-based Management (see the Getting Star ted Gui[...]

3-2 Reference Guide See the sections later in this chapter for details on how to connect the Netopia Router to the two types of networks. Readying computers on your local network PC and Macintosh computers must have cer tain components installed before they can communicate thr ough the Netopia Router . The following illustration shows the minimal r[...]

Connecting Y our Local Network 3-3 EtherT alk and LocalT alk: These ar e AppleT alk pr otocols used over Ethernet. Once the Netopia Router is properly configur ed and connected to your LAN, PC and Macintosh computers that have their requir ed components in place will be able to connect to the Internet or other remote IP networks. Connecting to a L[...]

3-4 Reference Guide Connecting to an Ethernet network The Netopia Router suppor ts an Ether net connection to either its AUI or its EtherW ave por ts. The Router’s autosensing featur e eliminates the need for a switch; connection to the AUI or EtherW ave por ts is automatically detected and the connected por t is used. Y ou can connect several ty[...]

Connecting Y our Local Network 3-5 EtherW ave T o add the Netopia Router to your EtherW ave daisy chain, use a 10Base-T cable with RJ-45 connectors. The router can be connected to your EtherW ave network at any point in the daisy chain. The Netopia Router in the middle of an EtherW ave daisy chain The Netopia Router in the middle of an EtherW ave d[...]

3-6 Reference Guide Y ou may use either or both of the EtherW ave por ts to connect the Netopia Router , as needed. No ter mination is necessar y , even when the router is at the end of your EtherW ave network. The Netopia Router at the end of an EtherW ave daisy chain EtherWave Netopia EtherWave[...]

Connecting Y our Local Network 3-7 10Base-T Y ou can connect a 10Base-T Ether net network to the Netopia Router either through one of its EtherWave por ts or through its AUI por t. The Netopia Router in a 10Base-T network T o connect your 10Base-T network to the Netopia Router through its EtherW ave por t, use a 10Base-T cable with RJ-45 connectors[...]

3-8 Reference Guide Thick and Thin Ethernet Y ou can connect a 10Base-5 (Thick Ether net) or 10Base-2 (Thin Ethernet) network to the Netopia Router’s AUI por t. T o connect your 10Base-5 network to the Netopia Router’s AUI por t, use a standard Ether net 10Base-5 transceiver and cable. T o connect your 10Base-2 network to the Netopia Router’s[...]

4-1 Chapter 4 IP Setup The Netopia Router uses Internet Pr otocol (IP) to communicate both locally and with remote networks. This chapter shows you how to configure the Router to ef fectively route IP traf fic. Y ou also lear n how to configure the Router to ser ve IP addr esses to hosts on your local network. Some models of the Netopia Router s[...]

4-2 Reference Guide ■ The single proxy addr ess is acquired at connection time fr om the answering side. The address can be assigned by the remote r outer from either a dynamic pool of addr esses or a fixed, static address. ■ Static NA T (Network Addr ess T ranslation) Security is made simpler and more r eliable by only having to firewall one[...]

IP Setup 4-3 In the following example screen, 192.163.100.6 is assigned to the calling Netopia Router . Note: The QuickView screen varies by your Netopia Router model and line type. Quick View Ethernet Address - 00-00-c5-ff-60-8d Current Date - 5/31/97 03:09:43PM Firmware Version -- 3.0 IP Address - 163.176.8.128 AppleTalk ET Address - 33051:150 IP[...]

4-4 Reference Guide Associating port numbers with nodes When an IP client, such as a Netscape or Microsoft Inter net Explor er web browser , wants to establish a session with an IP ser ver , such as a web ser ver , the client must know the IP address to use and the IP por t where the traf fic is to be directed. Just as an IP address specifies a p[...]

IP Setup 4-5 NA T guidelines Obser ve the following guidelines when using Network Address T ranslation. ■ The router can expor t just one local IP addr ess per TCP por t, so you can have just one machine available for a given ser vice, such as one FTP ser ver . However , some ser vices, such as Web ser vers (www-http ser vers), allow you to chang[...]

4-6 Reference Guide IP setup The IP Setup options screen is wher e you configure the Ether net side of the Netopia Router . The infor mation you enter here contr ols how the Router routes IP traf fic. Consult your network administrator or Internet Ser vice Provider to obtain the IP setup infor mation (such as the Ether net IP Address, Ethernet Su[...]

IP Setup 4-7 Small Office models only IP Setup Ethernet IP Address: 192.168.6.137 Ethernet Subnet Mask: 255.255.255.248 Default IP Gateway: 0.0.0.0 DNS Server: 0.0.0.0 Secondary DNS Server: 0.0.0.0 Domain Name: Exported Services... Follow these steps to configure IP Setup for your Small Of fice Netopia Router: ■ Select Ethernet IP Address and [...]

4-8 Reference Guide ■ If a secondar y DNS ser ver is available, select Secondar y DNS Ser ver and enter its IP address. The secondar y DNS ser ver is used by the Netopia Router when the primar y DNS ser ver is inaccessible. Entering a secondar y DNS is useful but it is not necessar y . ■ Select Domain Name and enter your network’s domain name[...]

IP Setup 4-9 ■ Select Ser vice . A pop-up menu of ser vices and por ts appears. Add Exported Service +-Type------Port-+ +----------------+ Service... | ftp 21 | | telnet 23 | | smtp 25 | Local Server's IP Address: | tftp 69 | | gopher 70 | | finger 79 | | www-http 80 | | pop2 109 | | pop3 110 | | snmp 161 | | chat 531 | | Other... | +-------[...]

4-10 Reference Guide Non-Small Office models only IP Setup Ethernet IP Address: 192.168.6.137 Ethernet Subnet Mask: 255.255.255.248 Default IP Gateway: 0.0.0.0 DNS Server: 0.0.0.0 Secondary DNS Server: 0.0.0.0 Domain Name: Receive RIP: Off Transmit RIP: Off Static Routes... Set up the basic IP attributes of your Netopia in this screen. Follow thes[...]

IP Setup 4-11 ■ Select DNS Ser ver and enter the IP addr ess for a domain name ser ver . The domain name ser ver matches the alphabetic addresses favor ed by people (for example, www .netopia.com) to the IP addresses actually used by IP r outers (for example, 163.7.8.202). ■ If a secondar y DNS ser ver is available, select Secondar y DNS Ser ve[...]

4-12 Reference Guide Static routes ar e helpful in situations where a r oute to a network must be used and other means of finding the route ar e unavailable. For example, static routes ar e useful when you cannot rely on RIP . T o go to the Static Routes screen, select the Static Routes item in the IP Setup screen. Static Routes Display/Change Sta[...]

IP Setup 4-13 Next Gateway: The IP address of the r outer that will be used to reach the destination network. Priority: An indication whether the Netopia Router will use the static route when it conflicts with infor mation r eceived from RIP packets. Enabled: An indication whether the static route should be installed in the IP routing table. Addin[...]

4-14 Reference Guide ■ Select Destination Network Subnet Mask and enter the subnet mask used by the destination network. ■ Select Next Gateway IP Address and enter the IP addr ess for the router that the Netopia Router will use to r each the destination network. This router does not necessarily have to be par t of the destination network, but i[...]

IP Setup 4-15 Modifying a static route T o modify a static route, select Display/Change Static Route in the Static Routes screen to display a table of static r outes. Select a static route fr om the table and go to the Change Static Route screen. The parameters in this scr een are the same as the ones in the Add Static Route screen (see “Adding a[...]

4-16 Reference Guide ■ The connection profile associated with the static r oute has a disabled dial-on-demand setting, and there is no cur r ent connection using that connection profile. A static route is alr eady installed in the IP routing table will be removed if any of the conditions listed above become tr ue for that static route. However [...]

IP Setup 4-17 ■ The third pr otocol, called IPCP , is par t of the PPP/MP suite of wide area pr otocols used for ISDN W AN connections. It allows remote ter minal adapters and NA T-enabled r outers to be assigned a temporar y IP address for the duration of their connection. ■ The four th protocol, called MacIP , is used only for computers on Ap[...]

4-18 Reference Guide Follow these steps to configure IP Addr ess Ser ving: ■ Ser ver Name is lists the Netopia Router’s name, model number and individual serial number . It is filled in automatically . Small Office models only ■ T o ser ve IP addresses to clients, select IP Address Ser ving and toggle it to Ye s . Activating IP Address Ser[...]

IP Setup 4-19 DHCP Options Serve Domain Name: Yes Domain Name: Serve Default Gateway: Yes Default Gateway: 192.168.6.137 Serve DNS Servers: Yes Primary DNS Server IP Addr.: 163.176.4.10 Secondary DNS Server IP Addr.: 0.0.0.0 The DHCP Options screen of fers a set of parameters that can be passed to each client requesting an IP addr ess. These additi[...]

4-20 Reference Guide ■ In the Secondar y DNS Ser ver IP Addr ess menu item, the Secondar y DNS Ser ver IP Addr ess will be automatically generated from the connection pr ofile screen, if an addr ess has been entered. (A secondar y DNS IP addr ess is not requir ed, but may be helpful. For instance, if the Netopia Router attempts to communicate to[...]

IP Setup 4-21 DHCP NetBios Options Serve NetBios Type: Yes NetBios Type... Type B Serve NetBios Scope: No NetBios Scope: Serve NetBios Name Server: No NetBios Name Server IP Addr: 0.0.0.0 DHCP allows you to allocate IP Addresses dynamically. ■ T o ser ve DHCP clients with the type of NetBIOS used on your network, select Ser ve NetBIOS Type and to[...]

4-22 Reference Guide Y ou are now finished setting up DHCP NetBIOS Options. T o r etur n to the IP Address Ser ving scr een press the Escape key once. ■ T o enable BOOTP’s address ser ving capability , select Ser ve BOOTP Clients and toggle to Ye s . Note: Addresses assigned thr ough BOOTP are per manently allocated from the IP Addr ess Ser vi[...]

IP Setup 4-23 Non-Small Office AppleT alk models only ■ Select MacIP/KIP Static Options and press Retur n. The MacIP (KIP) For warding Setup scr een tells the Netopia Router how many static addresses to allocate for MacIP/KIP clients. The addr esses must fall within the address pool fr om the previous scr een. Y ou will need to enter the number [...]

4-24 Reference Guide[...]

5-1 Chapter 5 IPX Setup Internetwork Packet Exchange (IPX) is the network pr otocol used by Novell NetW ar e networks. This chapter shows you how to configure the Netopia Router for routing data using IPX. Y ou also lear n how to configure the r outer to ser ve IPX network addresses. The Netopia Router suppor ts the following IPX features: ■ IP[...]

5-2 Reference Guide Internetwork Packet Exchange (IPX) IPX is a datagram, connectionless protocol that Novell adapted fr om Xerox Network System’s (XNS) Inter net Datagram Pr otocol (IDP). IPX is dynamically routed, and the r outing architectur e works by “learning” network addr essing automatically . IPX address An IPX address consists of a [...]

IPX Setup 5-3 Routing Information Protocol (RIP) RIP , which was also derived from XNS, is a pr otocol that allows for the bidirectional transfer of r outing tables and provides timing infor mation (ticks), so that the fastest route to a destination can be deter mined. IPX routers use RIP to cr eate and dynamically maintain databases of internetwor[...]

5-4 Reference Guide NetBIOS NetBIOS is a protocol that per for ms tasks related to the T ranspor t and Session layers of the OSI model. It can operate over IPX, using a special broadcast packet known as “IPX Packet type 20” to communicate with IPX NetBIOS ser vers. IPX Spoofing Applicable only to ISDN switched lines The Netopia has several IPX[...]

IPX Setup 5-5 T o go to the IPX Setup screen, fr om the Main Menu select Advanced Configuration and then select Network Protocols Setup and then select IPX Setup . Note: If you have completed Easy Setup, the infor mation you have already enter ed will appear in the IP Setup options screen. IPX Setup IPX Routing: On Ethernet Encapsulation... 802.3 [...]

5-6 Reference Guide 4. T o change the default path delay , select Ethernet Path Delay and enter a value (in ticks). This value is used to deter mine the por t cost of using the Ether net por t in IPX RIP calculations. 5. T o enable NetBIOS packet for war ding, select Ethernet NetBIOS For war ding and toggle it to Ye s . This parameter will deter mi[...]

IPX Setup 5-7 IPX in the answer pr ofile The answer profile can be configur ed to accept calls from r emote IPX networks. T o configure the answer pr ofile to accept calls from remote IPX networks, go to the Default Answer Pr ofile screen. Note: The Default Answer Profile scr een varies according to configuration. Default Answer Profile Aut[...]

5-8 Reference Guide IPX Parameters (Default Answer Profile) NetBios Packet Forwarding: Off Incoming Packet Filter Set... Outgoing Packet Filter Set... Incoming SAP Filter Set... Outgoing SAP Filter Set... Detach Filter Sets... Periodic RIP Timer: 60 Periodic SAP Timer: 60 Configure IPX values to use when no matching Profile can be found. IPX filte[...]

IPX Setup 5-9 Setting up and using IPX filter sets is a four-step process: 1. Create the filters to use. 2. Create the filter sets to use. 3. Add filters to the filter sets. 4. Attach the filter sets to the answer profile or to connection profiles. Y ou can configure IPX filters and set up IPX filter sets fr om the IPX Filters and Filter[...]

5-10 Reference Guide IPX packet filters For each IPX packet filter , you can configure a set of parameters to match on the source or destination attributes of IPX data packets coming from or going to the WAN. Viewing and modifying packet filters T o display a view-only table of IPX packet filters, select Show/Change IPX Packet Filters in the I[...]

IPX Setup 5-11 By default, the filter’s socket numbers and network and node addresses ar e null (all zeros). This sets the filter to match on any IPX data packet. Y ou should configure the filter using criteria that meet your security needs. 1. Select Filter Name and enter a descriptive name for the filter . 2. T o specify a source network f[...]

5-12 Reference Guide Viewing and modifying packet filter sets T o display a table of IPX packet filter sets, select Show/Change IPX Packet Filter Sets in the IPX Filters and Filter Sets screen. T o modify any of the filter sets in the list, select the desired filter set and press Retur n to go to the Change Packet Filter Set scr een. The parame[...]

IPX Setup 5-13 Show Filters/Change Actions on Match Filter Name---------------------Forward Filter 1 No Filter 2 No <<NO MATCH>> Yes Set whether filters forward or drop matching packets here. Select a filter and toggle the packet for warding action to Ye s (pass) or No (discard). 3. T o add a filter to the filter set, select Append F[...]

5-14 Reference Guide IPX SAP filters For each IPX SAP filter , you can configure a set of parameters to match on cer tain attributes of IPX SAP packet entries. The filters check IPX SAP packets for entries that match and then act on those entries. The SAP packets themselves are always allowed to continue after their entries are checked. The pur[...]

IPX Setup 5-15 Add SAP Filter Filter Name: Server Name: Socket: 0000 Type: 0000 IPX Network: 00000000 IPX Node Address: 000000000000 ADD FILTER NOW CANCEL Configure a new IPX SAP Filter. Finished? ADD or CANCEL to exit. By default, the filter’s socket and type numbers and network and node addresses ar e null (all zeros). This sets the filter to[...]

5-16 Reference Guide 6. T o specify an IPX node address for the filter to match on, select IPX Node Address and enter an IPX node addr ess. 7. Select ADD FIL TER NOW to save the cur r ent filter . Select CANCEL to exit the Add SAP Filter screen without saving the new filter . Deleting a SAP filter T o delete a SAP filter , select Delete IPX SA[...]

IPX Setup 5-17 Add SAP Filter Set Filter Set Name: Show Filters/Change Action on Match... Append Filter... Detach Filter... ADD FILTER SET NOW CANCEL Modify an IPX SAP filter here. Changes are immediate. Follow these steps to configure the new SAP filter set: 1. Select Filter Set Name and enter a descriptive name for the filter set. 2. T o chang[...]

5-18 Reference Guide 3. T o add a filter to the filter set, select Append Filter to display a table of filters. Select a filter from the table and pr ess Retur n to add it to the filter set. The default action of newly added filters is to not for ward (discar d) packet entries that match their criteria. T o exit the table without adding the ?[...]

IPX Setup 5-19 IPX r outing tables IPX routing tables pr ovide infor mation on cur r ent IPX routes and ser vices. T o go to the IPX Routing T able scr een, select IPX Routing T able in the Routing T ables scr een. This table shows detailed infor mation about cur rent IPX network r outes. IPX Routing Table Net Addr-Hops-Ticks-Type--Status-Interface[...]

5-20 Reference Guide[...]

6-1 Chapter 6 AppleT alk Setup This chapter discusses the concept of AppleT alk r outing and how to configure AppleT alk Setup for a Netopia Router with AppleT alk capability . AppleT alk is available on the Netopia Router’s 400 series which includes both the Small Of fice and Corporate models. This chapter will discuss both versions. Skip this[...]

6-2 Reference Guide Each computer or peripheral device (printer , client, file ser ver) connected to a network is called a node and has a unique node address , which can be any number fr om 1 to 254. Whenever you open the Chooser or any application that communicates with other computers on your network, your application compiles a list of all node[...]

AppleT alk Setup 6-3 T o make the ser vices on an inter net manageable, groups of devices on a network can be grouped into zones. When this is done, selecting a network ser vice (ser ver , etc.) includes choosing a zone from which the ser vice can be selected. Like network numbers, zone names are assigned by r outers. A routing table is maintained [...]

6-4 Reference Guide A router has multiple communications por ts and is capable of for warding infor mation to other routers and devices on the inter net. The router per for ms packet for war ding, network and device address maintenance, and other administrative functions requir ed by the AppleT alk pr otocols. The distinction between routers and br[...]

AppleT alk Setup 6-5 When two networks using AppleT alk communicate with each other through a network based on the Inter net Pr otocol, they are said to be tunneling through the IP network. The Netopia Router uses AURP to allow your AppleT alk network to tunnel to designated AppleT alk par tner networks, as well as to accept connections from r emot[...]

6-6 Reference Guide Soft seeding: When a router that uses soft seeding is tur ned on or reset, it r equests network number and zone name infor mation from any existing routers on the networks it will ser ve. If no other r outers reply , the router uses the network numbers and zone names specified in its own configuration. If other routers r eply [...]

AppleT alk Setup 6-7 ■ If you want the Netopia Router and all other routers on your network to use only their own configurations, set the Netopia Router and all other routers to har d seeding. In this case, any router (including the Netopia Router) that is r ebooted will not begin routing if it detects a r outing conflict between itself and any[...]

6-8 Reference Guide 1. Select AppleT alk Routing and toggle to On . 2. Select AppleT alk Zone Name and enter a name of your choice (this will apply to both the EtherT alk and LocalT alk networks) to distinguish your network from the other facilities. The two dif fer ent networks will appear in the same zone. 3. Obser ve EtherT alk Net Number . This[...]

AppleT alk Setup 6-9 Y ou have finished configuring AppleT alk Setup for the Small Of fice model. AppleT alk Setup for Corporate models AppleT alk setup for Corporate Netopia Routers consists of configuring EtherT alk, LocalT alk, and AURP . EtherT alk Setup T o go to the EtherT alk Setup options scr een, select Network Protocols Setup and then[...]

6-10 Reference Guide ■ T o view the zones available to EtherT alk Phase ll, select Show Zones and press Retur n. Y ou can dismiss the list of zones by pressing the Retur n or Escape key . ■ Select Enter New Zone Name to enter a new zone name. Note: Y our EtherT alk network number and zone name must match the values in use on the EtherT alk netw[...]

AppleT alk Setup 6-11 LocalT alk Setup The Netopia Router can function as a LocalT alk-to-EtherT alk router . This means that a LocalT alk network can be connected to the Netopia Router’s PhoneNET por t. Select LocalT alk Setup in the AppleT alk Setup scr een and press Return to the LocalT alk Routing Setup scr een. LocalTalk Routing Setup LocalT[...]

6-12 Reference Guide As an alternative, you can set LocalT alk seeding to soft seeding and let the Netopia Router receive the zone name and network number from the other r outer . ■ Select LocalT alk Network Number and enter the desired network number . ■ Select Seeding. From the pop-up menu, choose the type of seeding for the Netopia Router’[...]

AppleT alk Setup 6-13 ■ T o activate AURP and enable connections to and from AURP par tners, select AURP Enable and toggle it to On . Viewing AURP partners ■ T o see a table of existing AURP par tners, select Display/Show Par tners and press Retur n. Note: The Netopia Router can define a total of 32 AURP par tners. Adding an AURP partner ■ T[...]

6-14 Reference Guide ■ T o initiate a connection with an AURP par tner , select Initiate Connection and toggle it to Ye s . This will open a connection to the remote AppleT alk network. ■ T o restrict the new AURP par tner’s access to your intranet, select Restrict to Free Trade Zone and toggle it to Ye s . See “Restricting intranet access,[...]

AppleT alk Setup 6-15 Receiving AURP connections ■ T o control the acceptance of incoming AURP tunnels, select Accept Connections From and choose Anyone or Configured Par tners Only from the pop-up menu. If you choose Anyone , all incoming AURP connections will be accepted. The more secur e option is Configured Par tners Only , which only accep[...]

6-16 Reference Guide The AURP tickle timer is a parameter that you can set anywhere between 0 and 100 hours. This parameter tells the AURP par tners when to send out an AURP tickle packet. If this value is set to 0, the Netopia Router will never send out a tickle packet. ■ Select Update Inter val (HH:MM:SS) and set the timer to indicate how often[...]

AppleT alk Setup 6-17 ■ T o over ride the AppleT alk maximum limit of 15 hops, select Enable Hop-Count Reduction and toggle it to Ye s . Hosts on a local AppleT alk network will then “see” AppleT alk destinations across the IP tunnel as being only one hop away . AppleT alk allows a packet up to 15 hops (going thr ough 15 AppleT alk r outers) [...]

6-18 Reference Guide[...]

7-1 Chapter 7 Security The Netopia Router provides a number of security featur es to help protect its configuration scr eens and your local network from unauthorized access. Although these features ar e optional, it is strongly r ecommended that you use them. This chapter is divided into five main sections: ■ “Suggested security measures” o[...]

7-2 Reference Guide Suggested security measur es In addition to setting up user accounts, T elnet access, and filters (all of which are cover ed later in this chapter), there ar e other actions you can take to make the Netopia Router and your network more secur e: ■ If you will be using a PC Card modem for dial-up access thr ough a telephone lin[...]

Security 7-3 Caution! Y ou are str ongly encouraged to add protection to the configuration screens. Unpr otected screens could allow an unauthorized user to compromise the operation of your entir e network. The following screens can be pr otected with a name/password combination: ■ Main Menu ■ Easy Setup ■ Advanced Configuration ■ Securit[...]

7-4 Reference Guide Protecting the Security Options scr een The first screen you should pr otect is the Security Options screen, because it controls access to the configuration scr eens. Access to the Security Options screen can be pr otected with a password. Select Password T o V isit This Screen in the Security Options screen and enter a passwo[...]

Security 7-5 3. T o accept the new name/password combination, select ADD NAME/P ASSWORD NOW . T o exit the Add Name With Write Access screen without saving the new account, select CANCEL . Note: The Web ser ver uses only the first configured Name/Password pair for configuration access. T o delete a user account, select Delete User to display a l[...]

7-6 Reference Guide About filters and filter sets Security should be a high priority for anyone administering a network connected to the Internet. Using packet filters to contr ol network communications can greatly impr ove your network’s security . The Netopia Router’s packet filters are designed to pr ovide security for the Internet conne[...]

Security 7-7 Each inspector has a specific task. One inspector’s task may be to examine the destination address of all outgoing packages. That inspector looks for a cer tain destination—which could be as specific as a street addr ess or as broad as an entir e countr y—and checks each package’s destination address to see if it matches that[...]

7-8 Reference Guide For example, let’s say the first inspector’s orders ar e to send along all packages that come from Rome, and the second inspector’s orders ar e to reject all packages that come fr om France. If a package ar rives from Rome, the first inspector sends it along without allowing the second inspector to see it. A package from[...]

Security 7-9 How individual filters work As described above, a filter applies criteria to an IP packet and then takes one of three actions: A filter’ s actions ■ Passes the packet to the local or remote network ■ Blocks (discards) the packet ■ Ignores the packet A filter passes or blocks a packet only if it finds a match after applying[...]

7-10 Reference Guide Parts of a filter A filter consists of criteria based on packet attributes. A typical filter can match a packet on any one of the following attributes: ■ The source IP addr ess (where the packet was sent fr om) ■ The destination IP address (wher e the packet is going) ■ The type of higher-layer Internet pr otocol the p[...]

Security 7-11 Port number comparisons A filter can also use a comparison option to evaluate a packet’s source or destination por t number. The comparison options are: No Compare: No comparison of the por t number specified in the filter with the packet’s por t number . Not Equal T o: For the filter to match, the packet’s por t number cann[...]

7-12 Reference Guide Other filter attributes There ar e three other attributes to each filter: ■ The filter’s order (i.e., priority) in the filter set ■ Whether the filter is cur rently active ■ Whether the filter is set to pass (for ward) packets or to block (discard) packets Putting the parts together When you display a filter set,[...]

Security 7-13 Src. Por t: The sour ce por t to match. This is the por t on the sending host that originated the packet. D. Por t: The destination por t to match. This is the por t on the receiving host for which the packet is intended. On?: Displays Ye s when the filter is in ef fect or No when it is not. Fwd: Shows whether the filter for wards ([...]

7-14 Reference Guide 3. Using the tables on page 7-10 , find the destination por t and protocol numbers (the local T elnet por t): ■ Proto = TCP (or 6) ■ D. Por t = 23 4. The filter should be enabled and instr ucted to block the T elnet packets containing the source addr ess shown in step 2: ■ On? = Y es ■ Fwd = No This four-step process [...]

Security 7-15 Design guidelines Careful thought should go into designing a new filter set. Y ou should consider the following guidelines: ■ Be sure the filter set’s overall purpose is clear fr om the beginning. A vague purpose can lead to a faulty set, and that can actually make your network less secure. ■ Be sure each individual filter’[...]

7-16 Reference Guide ■ T oo much reliance on packet filters can cause too little r eliance on other security methods. Filter sets are not a substitute for password pr otection, ef fective safeguar ding of passwor ds, caller ID, the “must match” option in the answer profile, P AP or CHAP in connection profiles, callback, and general awar en[...]

Security 7-17 IP Filter Sets Display/Change IP Filter Set... Add IP Filter Set... Delete IP Filter Set... Return/Enter to configure and add a new Filter Set. Set Up IP Filter Sets (Firewalls) from this and the following Menus. The basic procedur e for creating and maintaining filter sets is as follows: 1. Add a new filter set. 2. Create the filt[...]

7-18 Reference Guide Add IP Filter Set Filter Set Name: Filter Set 2 Display/Change Input Filter... Add Input Filter... Delete Input Filter... Display/Change Output Filter... Add Output Filter... Delete Output Filter... ADD FILTER SET CANCEL Configure the Filter Set name and its associated Filters. Naming a new filter set All new filter sets have[...]

Security 7-19 Input and output filters—source and destination There ar e two kinds of filters you can add to a filter set: input and output. Input filters check packets received fr om the Inter net, destined for your network. Output filters check packets transmitted from your network to the Inter net. Packets in the Netopia Router pass throu[...]

7-20 Reference Guide Adding filters to a filter set In this section you’ll learn how to add an input filter to a filter set. Adding an output filter works exactly the same way , pr oviding you keep the dif fer ent source and destination perspectives in mind. T o add an input filter , select Add Input Filter in the Add IP Filter Set screen a[...]

Security 7-21 3. Select Source IP Addr ess and enter the source IP addr ess this filter will match on. Y ou can enter a subnet or a host address. 4. Select Source IP Address Mask and enter a mask for the sour ce IP address. This allows you to fur ther modify the way the filter will match on the source addr ess. Enter 0.0.0.0 to for ce the filter[...]

7-22 Reference Guide Y ou can add a TCP filter to a filter set with the following steps: 1. In the Add Filter screen, toggle the Enabled field to Ye s . 2. Select For war d and toggle it to Ye s . 3. Select the Protocol Type field and type in TCP . Then press Return. 4. In the last field that appears, Established TCP Conns. Only , tog- gle the[...]

Security 7-23 Change Filter Enabled: No Forward: No Source IP Address: 0.0.0.0 Source IP Address Mask: 0.0.0.0 Dest. IP Address: 0.0.0.0 Dest. IP Address Mask: 0.0.0.0 Protocol Type: 0 Source Port Compare... No Compare Source Port ID: 0 Dest. Port Compare... No Compare Dest. Port ID: 0 Enter the IP specific information for this filter. Deleting fi[...]

7-24 Reference Guide Modifying filter sets T o modify a filter set, select Display/Change Filter Set in the Filter Sets screen to display a list of filter sets. Select a filter set from the list and pr ess Retur n to go to the Change IP Filter Set screen. The items in this scr een are the same as the ones in the Add Filter screen (see “Adding[...]

Security 7-25 A sample IP filter set This section contains the settings for a filter set, called Basic Firewall, which is par t of the Netopia Router’s factor y configuration. Y ou can add Basic Firewall to your connection pr ofiles or the answer profile (see “Connection profiles for ISDN and Leased lines” on page 2-13 and “Default pr[...]

7-26 Reference Guide Basic Firewall’s filters play the following r oles. Input filters 1 and 2: These block W AN-originated OpenWindows and X-Windows sessions. Ser vice origination requests for these pr otocols use por ts 2000 and 6000, respectively . Since these are gr eater than 1023, OpenWindows and X-Windows traf fic would other wise be al[...]

Security 7-27 Input filter 3: This filter explicitly passes all W AN-originated ICMP traf fic to per mit devices on the WAN to ping devices on the LAN. Ping is an Internet ser vice that is useful for diagnostic purposes. Input filters 4 and 5: These filters pass all TCP and UDP traf fic, respectively , when the destination por t is greater th[...]

7-28 Reference Guide Trusted host. T o allow unlimited access by a tr usted remote host with the IP address a.b.c.d (cor r esponding to a numbered IP addr ess such as 163.176.8.243), inser t the following input filter ahead of the cur rent input filter 1: ■ Enabled: Y es ■ For ward: Y es ■ Source IP Addr ess: a.b.c.d ■ Source IP Addr ess [...]

Security 7-29 FTP sessions. T o allow W AN-originated FTP sessions to a LAN-based FTP ser ver with the IP address a.b.c.d (cor responding to a numbered IP address such as 163.176.8.243), inser t the following input filter ahead of the cur rent input filter 1: ■ Enabled: Y es ■ For ward: Y es ■ Source IP Addr ess: 0.0.0.0 ■ Source IP Addr [...]

7-30 Reference Guide AURP tunnel. T o allow an AURP tunnel between a remote AURP r outer with the IP address a.b.c.d (cor r esponding to a numbered IP addr ess such as 163.176.8.243) and a local AURP router (including the Netopia Router itself), inser t the following input filter ahead of the cur rent input filter 1: ■ Enabled: Y es ■ For war[...]

8-1 Chapter 8 T oken Security Authentication This chapter discusses how to configure and use security authentication on the Netopia Router . Note: The security authentication feature only applies to Netopia Router models connecting over a dial-up ISDN line using the PPP-P AP-TOKEN or PPP-CACHE-TOKEN authentication protocol. If you will not be usin[...]

8-2 Reference Guide SecurID is a two-factor authentication process to pr otect against unauthorized access. This dynamic user authentication produces a randomly-generated security code mechanism that changes ever y 60 seconds. At login, authorized users enter their password and the code displayed on their SecurID token card. While a passwor d may b[...]

T oken Security Authentication 8-3 T o per for m security car d authentication, each user must have a security authentication token card and a PIN. In addition, the user’s identifying infor mation must reside on the r emote ACE ser vers for authentication negotiation to properly take place. The Netopia Router suppor ts the following user configu[...]

8-4 Reference Guide Configuring the Netopia Router for security authentication T o configure the Netopia Router to suppor t security authentication, select an authentication method and set up a designated connection profile fr om the Advanced Configuration screen or your first connection profile fr om Easy Setup. 1. From the WAN Setup menu, s[...]

T oken Security Authentication 8-5 If you select P AP-TOKEN, select Send User Name and enter a name for your Netopia Router . Y ou will not need to enter a Send Password for P AP-TOKEN. Pr ess Retur n. If you select CACHE-TOKEN, select Send User Name and enter a name for your Netopia Router . Then, select Send Password and enter a secret name or nu[...]

8-6 Reference Guide Statistics, Utilities, Tests Statistics General Statistics... Event Histories... Routing Tables... Utilities Date and Time... Establish WAN Connection... Disconnect WAN Connection... Ping... Upgrade Feature Set... Restart System... Revert to Factory Defaults... Secure Authentication Monitor... Tests ISDN Switch Loopback Test... [...]

T oken Security Authentication 8-7 Secure Authentication Monitor Current ISDN Connection Status Profile Name---State---%Use---Remote Address---Est.---More Info--- Status --- Passcode Required For Connection Profile: Easy Setup Profile 0-Challenge: Enter PASSCODE: Passcode: 123412345678 3. From the fields that appear , select Enter P ASSCODE and pr[...]

8-8 Reference Guide Establishing a manual connection call T o establish a Manual connection call, select the Statistic, Utilities, T ests from the Main Menu and pr ess Retur n. 1. Select Establish W AN Connection fr om the Statistics, Utilities, T ests screen and pr ess Retur n. The Establish W AN Connection screen displays a table of all of the co[...]

T oken Security Authentication 8-9 Note: When using CACHE-TOKEN, your passcode is valid for a time inter val deter mined by the network administrator . When this time inter val expires, you must pr ovide a new passcode for the call negotiation. When using P AP-TOKEN for a 2B-Channel call, your passcode is valid for one call negotiation. For a secon[...]

8-10 Reference Guide[...]

9-1 Chapter 9 Monitoring T ools This chapter discusses the Netopia Router’s device and network monitoring tools. These tools can provide statistical infor mation, repor t on cur rent network status, recor d events, and help in diagnosing and locating problems. Status overview Y ou can get a useful, overall status repor t fr om the Netopia Router [...]

9-2 Reference Guide General Status All interfaces Quick View Ethernet Address - 00-00-c5-ff-60-8d Current Date - 5/30/97 03:49:52PM Firmware Version - 3.0 WAN Line Rate - 64 Kbps IP Address - 163.176.8.128 AppleTalk ET Address - 33051:150 IPX Network Address - 00000000 AppleTalk LT Address - 33050:149 Ethernet Address: The Netopia Router’s har dw[...]

Monitoring T ools 9-3 Curr ent Status The cur rent status section is a table showing the cur rent status of ISDN, the W AN, or Frame Relay . Current ISDN Connection or W AN Status ISDN only Current ISDN Connection Status ---Profile Name------State---%Use-Remote Address----Est.-More Info---------- ISP CH1 10 IP 92.163.4.1 Lcl NAT 192.163.100.6 Lease[...]

9-4 Reference Guide Current Frame Relay Status Leased line with Frame Relay enabled only Current Frame Relay Status ----DLCIs In Use----Bytes Rx----Bytes Tx----Frames Rx----Frames Tx----FECNs+BECNs-- 0 0 0 0 0 0 DLCIs In Use: Indicates the number of data link connection identifiers cur rently in use. Bytes Rx: Indicates the total number of bytes r[...]

Monitoring T ools 9-5 Each LED repr esentation can repor t one of four states: –: A dash means the LED is of f. *: An asterisk means the LED is blinking. O: The letter “O” means the LED is on (solid). E: The letter “E” means the LED is repor ting an er ror . Statistics When you are tr oubleshooting your Netopia Router , the Statistics scr[...]

9-6 Reference Guide General Statistics displays infor mation about data traf fic on the Netopia Router’s PhoneNet and Ethernet por ts. This infor mation is useful for monitoring and troubleshooting your LAN. The left side of the screen lists total packets r eceived and total packets transmitted for the following protocols: ■ IP (IP packets on [...]

Monitoring T ools 9-7 Leased line with PPP or HDLC enabled only ----------------------WAN Connection Statistics----------------------- Ch.---Bytes Rx----Bytes Tx--Packets Rx--Packets Tx--Remote Network----- 1 0 0 0 0 Leased line with Frame Relay enabled only ----------------------WAN Connection Statistics----------------------- ---------Bytes Rx---[...]

9-8 Reference Guide DLCI T raffic Statistics Models with Frame Relay enabled only DLCI Statistics DLCI----Remote IP Addr--IPX Net----Frames Rx--Frames Tx---Bytes Rx---Bytes Tx ----------------------------------SCROLL UP----------------------------------- 16 -- -- 0 0 0 0 17 -- -- 0 0 0 0 18 -- -- 0 0 0 0 ---------------------------------SCROLL DOW[...]

Monitoring T ools 9-9 Event Histories The Netopia Router recor ds cer tain relevant occur rences in event histories. Event histories are useful for diagnosing pr oblems because they list what happened before, during, and after a problem occurs. Y ou can view two dif ferent event histories: one for the router’s system and one for the ISDN or lease[...]

9-10 Reference Guide Device Event History Current Date -- 6/4/98 09:23:53 AM -Date-----Time-----Event------------------------------------------------------ ----------------------------------SCROLL UP----------------------------------- 06/04/97 08:56:13 AppleTalk initialization complete 06/04/97 08:56:06 IPX initialization complete 06/04/97 08:56:06[...]

Monitoring T ools 9-11 WAN Event History Current Date -- 6/4/97 04:36:11 PM -Date-----Time-----Event------------------------------------------------------ ----------------------------------SCROLL UP----------------------------------- 06/04/97 16:35:44 PPP: IPXCP negotiated, session 1 06/04/97 16:35:44 PPP: IPCP negotiated, session 1, rem: 192.173.1[...]

9-12 Reference Guide If the event histor y exceeds the size of the screen, you can scr oll through it by using the SCROLL UP and SCROLL DOWN items. T o scroll up, select the SCROLL UP item at the top of the list and press the Retur n key . T o scroll down, select the SCROLL DOWN item at the bottom of the list and press the Retur n key . T o get mor[...]

Monitoring T ools 9-13 IP routing table The IP routing table displays all of the IP r outes cur r ently known to the Netopia Router . T o display the IP Routing T able scr een, select IP Routing T able in the Routing T ables scr een and go to the IP Routing T able scr een. IPX routing table The IPX routing table displays all of the IPC r outes cur [...]

9-14 Reference Guide AT Routing Table -Net---Range--(Def) Zone Name---------Hops-State-Next Rtr Addr.--Pkts Fwded--- ----------------------------------SCROLL UP----------------------------------- 1 -- Admin 2 Good 46.131 2 2 -- Admin 2 Good 46.131 0 3 -- Operations 2 Good 46.131 1 4 -- Sales 2 Good 46.131 0 5 -- Marketing 2 Good 46.131 1 6 -- Marke[...]

Monitoring T ools 9-15 (Def) Zone Name: Displays the zone or zones associated with the specified network or network range. The zone name shown is either the only zone for a non extended network (e.g.:LocalT alk networks), or the default zone name for an extended network. T o see the complete list of zones for an extended network with multiple zone[...]

9-16 Reference Guide Call Accounting Enable Call Accounting: On Day for auto-reset of timers: 12 Maximum connect time (HH:MM): 12:00 RESET MINUTE COUNTERS -------- Call Accounting Statistics ---------------------------------- Total First Minutes: 0 Total Additional Time (HH:MM): 0:00 Remaining Time (HH:MM): 10:25 Trigger Date(MDY): 1/1/98 T o enabl[...]

Monitoring T ools 9-17 ■ Remaining Time (HH:MM) displays how much time is left in the recor ding inter val. If call accounting is not enabled, the message will read, Call Accounting Disabled . ■ Trigger Date (MDY) displays the date, in month, day , year for mat, when the call accounting begins. SNMP The Netopia Router includes a Simple Network [...]

9-18 Reference Guide sysObjectID and sysDescr The value retur ned by the Netopia Router SNMP agent for sysObjectID is 1.3.6.1.4.1.304.2.2. x , where x is dependent upon your model number and defined in the table below: The value retur ned by the Netopia Router SNMP agent for sysDescr is Netopia PN yyy , where yyy is your par ticular Netopia Router[...]

Monitoring T ools 9-19 The SNMP Setup scr een T o go to the SNMP Setup screen, select SNMP in the Advanced Configuration screen. SNMP Setup System Name: System Location: System Contact: Read-Only Community String: public Read/Write Community String: private Authentication Traps Enable: Off IP Trap Receivers... Configure optional SNMP parameters fr[...]

9-20 Reference Guide Community strings The Read-Only Community String and the Read/W rite Community String are like passwor ds that must be used by an SNMP manager quer ying or configuring the Netopia Router . An SNMP manager using the Read-Only Community String can examine statistics and configuration infor mation from the r outer , but cannot m[...]

Monitoring T ools 9-21 ■ An inter face down trap (ifDown) is generated when one of the router’s inter faces, such as a por t, stops functioning or is disabled. ■ An inter face up trap (ifUp) is generated when one of the router’s inter faces, such as a por t, begins functioning. The Netopia Router sends traps using UDP (for IP networks). Y o[...]

9-22 Reference Guide Viewing IP trap r eceivers T o display a view-only table of IP trap receivers, select Display/Change IP Trap Receiver in the IP T rap Receivers screen. Modifying IP trap receivers 1. T o edit an IP trap receiver , select Display/Change IP Trap Receiver in the IP T rap Receivers screen. 2. Select an IP trap receiver fr om the ta[...]

10-1 Chapter 10 Utilities and T ests A number of utilities and tests are available for system diagnostic and control purposes: ■ Setting system date and time (see page 10-2 ) ■ Establishing and disconnecting W AN connections (see Chapter 2) ■ Running a ping test (see page 10-3 ) ■ Counting the number of routers between the Netopia Router an[...]

10-2 Reference Guide Some utilities and tests may not be available on some Netopia Router models, depending on the switch type and data encapsulation method. See the following sections for more infor mation. Setting the system date and time Y ou can set the system’s date and time in the Set Date and Time screen. Select Date and Time in the Statis[...]

Utilities and T ests 10-3 Ping The Netopia Router includes a standard Ping test utility . A Ping test generates IP packets destined for a par ticular (Ping-capable) IP host. Each time the tar get host receives a Ping packet, it r etur ns a packet to the original sender . Ping allows you to see whether a par ticular IP destination is reachable fr om[...]

10-4 Reference Guide 2. Select Packets to Send to change the default setting. This is the total number of packets to be sent during the Ping test. The default setting is adequate in most cases, but you may change it to any value from 1 to 4,294,967,295. 3. Select Data Size to change the default setting. This is the size, in bytes, of each Ping pack[...]

Utilities and T ests 10-5 Packets Out: The number of packets sent by the Ping test. Packets In: The number of retur n packets received fr om the tar get host. T o be considered “on time,” r etur n packets are expected back before the next packet in the sequence of Ping packets is sent. A count of the number of late packets appears in parenthese[...]

10-6 Reference Guide Packets Lost: The number of packets unaccounted for , shown in total and as a percentage of total packets sent. This statistic may be updated during the Ping test, and may not be accurate until after the test is over . However , if an escalating one-to-one cor respondence is seen between Packets Out and Packets Lost , and Packe[...]

Utilities and T ests 10-7 The time-to-live (TTL) value for each Ping packet sent by the Netopia Router is 255, the maximum allowed. The TTL value defines the number of IP routers that the packet can traverse. Ping packets that reach their TTL value ar e dropped, and a “destination unr eachable” notification is retur ned to the sender (see the[...]

10-8 Reference Guide 3. Select Timeout per pr obe (1..10 sec) to set when the trace will timeout for each hop, up to 10 seconds. The default is 3 seconds. 4. Select Use Reverse DNS to learn the names of the r outers between the Netopia Router and the destination router . The default is Y es. 5. Select ST ART TRACE ROUTE and pr ess Retur n. The scre[...]

Utilities and T ests 10-9 Factory defaults Y ou can reset the Netopia Router to its factor y default settings. Select the Rever t to Factor y Defaults item in the Statistics, Utilities, T ests screen and pr ess Retur n. Select CONTINUE in the dialog box and press Retur n. The Netopia Router settings will r eturn to the factor y defaults, deleting y[...]

10-10 Reference Guide The Status item repor ts one of thr ee results: Untested: The loopback test has not yet been r un. Loopback T est F AILED: The loopback test has failed. See “If the loopback test fails,” below , for tr oubleshooting suggestions. Loopback T est P ASSED. The loopback test was successful. The line is working properly , and th[...]

Utilities and T ests 10-11 Console configuration In the Getting Star ted Guide , it was suggested that you set the communications parameters in your ter minal emulation software to match the Netopia Router’s default settings. However , you can change the default ter minal communications parameters to suit your requir ements. T o go to the Consol[...]

10-12 Reference Guide T ransferring configuration and firmware files with XMODEM Y ou can transfer configuration and fir mware files with XMODEM through the Netopia Router’s console or PC Car d (PCMCIA) por t. T o go to the PC Card Config/Fir mware T ransfer scr een, select PC Card Config/Fir mware Transfer in the Advanced Configuration [...]

Utilities and T ests 10-13 Using the SmartPort Follow these steps to prepar e to use the Smar tPor t (PC Car d por t): 1. Connect a standard PC Car d modem to the por t. See “Connecting a modem to the Smar tPor t” on page 1-4 for more infor mation. The modem will be initialized using the default string contained in the PC Card Modem Init String[...]

10-14 Reference Guide Updating firmwar e Fir mware updates may be available periodically fr om Farallon or from a site maintained by your or ganization’s network administra- tion. The procedur e below applies whether you are using the console or the PC Card por t. Follow these steps to update the Netopia Router’s fir mware: 1. Make sure you h[...]

Utilities and T ests 10-15 Caution! Do not manually reset the Netopia Router while it is automatically resetting or it could be damaged. Downloading configuration files The Netopia Router can be configured by downloading a configuration file. The downloaded file reconfigur es all of the Router’s parameters. Configuration files are availa[...]

10-16 Reference Guide If you choose CONTINUE , you will have ten seconds to use your ter minal emulation software to initiate an XMODEM transfer of the configuration file. If you fail to initiate the transfer in that time, the dialog box will disappear and the ter minal emulation software will infor m you of the transfer’s failur e. Y ou can th[...]

Utilities and T ests 10-17 3. Select CANCEL to exit without uploading the file, or select CONTINUE to upload the file. If you choose CONTINUE , you will have ten seconds to use your ter minal emulation software to initiate an XMODEM transfer of the configuration file. If you fail to initiate the transfer in that time, the dialog box will disapp[...]

10-18 Reference Guide The sections below describe how to update the Router’s fir mware and how to download and upload configuration files. Updating firmwar e Fir mware updates may be available periodically fr om Farallon or from a site maintained by your or ganization’s network administrator . T o update the Router’s fir mware, follow th[...]

Utilities and T ests 10-19 4. If you choose to download the fir mware, the TFTP Transfer State item will change from Idle to Reading Firmwar e . The TFTP Current Transfer Bytes item will reflect the number of bytes transfer red. Downloading configuration files The Router can be configured by downloading a configuration file using TFTP . Once[...]

10-20 Reference Guide 4. If you choose to download the configuration file, the TFTP Transfer State item will change from Idle to Reading Config . The TFTP Curr ent Transfer Bytes item will reflect the number of bytes transfer red. Uploading configuration files Using TFTP , you can send a file containing a snapshot of the Router’s cur rent [...]

Utilities and T ests 10-21 +--------------------------------------------------------------------+ +--------------------------------------------------------------------+ | Are you sure you want to save your current Netopia configuration? | | | | | | CANCEL CONTINUE | +--------------------------------------------------------------------+ Select CANCE[...]

10-22 Reference Guide[...]

A-1 Appendix A T r oubleshooting This appendix is intended to help you troubleshoot pr oblems you may encounter while using the Netopia Router . It also includes infor mation on how to contact Farallon T echnical Suppor t. Impor tant infor mation on these pr oblems may be found in the event histories kept by the Netopia Router . These event histori[...]

A-2 Reference Guide Console connection pr oblems Can’t see the configuration scr eens (nothing appears) ■ Check the cable connection from the Netopia Router’s console por t to the computer being used as a console. ■ Check that the ter minal emulation software is accessing the cor rect por t on the computer that’s being used as a console.[...]

T roubleshooting A-3 The W AN Ready LED is solid red This is an indication that the Netopia Router is unable to synchronize with the switch at your ISDN ser vice pr ovider’s central of fice. ■ Confir m that you have entered the cor rect director y numbers when configuring the Router . ■ Confir m that you have configured the Router with t[...]

A-4 Reference Guide If you are tr ying to call an ISP , confir m the following: ■ The ISP’s director y number ■ The authorization method you use (P AP , CHAP , or none) to access your ISP account ■ If using P AP or CHAP , the name and passwor d/secret you wer e given and their case (uppercase or lower case) ■ The ISP’s IP address Check[...]

T roubleshooting A-5 Network pr oblems This section contains tips on ways you can troubleshoot a networking problem. Problems communicating with r emote IP hosts ■ V erify the accuracy of the default gateway’s IP addr ess (entered in the IP Setup or Easy Setup screen). ■ Use the Netopia Router’s ping utility , in the Statistics, T ests, Uti[...]

A-6 Reference Guide Internal termination switch Non-North American models only The Netopia Router includes an inter nal ter mination switch for ter minating the S/T bus. The S/T bus is the connection from the Router to the NT1 or wall jack on your ISDN line. The S/T bus must be properly ter minated to avoid ISDN communications er rors. The Netopia [...]

T roubleshooting A-7 Technical support Farallon Communications is committed to providing its customers with reliable pr oducts and documentation, backed by excellent technical suppor t. Before contacting Farallon Look in this guide and in the accompanying Getting Star ted guide for a solution to your problem. Y ou may find a solution in this troub[...]

A-8 Reference Guide How to r each us We can help you with your problem more ef fectively if you have completed the environment pr ofile in the previous section. If you contact us by telephone, please be ready to supply Farallon T echnical Suppor t with the infor mation you used to configure the Netopia Router . Also, please be at the site of the [...]

T roubleshooting A-9 Local service If you are not located in the United States or Canada, you can get ser vice locally by contacting your nearest Farallon r eseller or distributor . For a worldwide list of our distributors, see our AppleLink bulletin board or contact Farallon dir ectly .[...]

A-10 Reference Guide[...]

B-1 Appendix B Understanding IP Addr essing This appendix is a brief general introduction to IP addr essing. A basic understanding of IP will help you in configuring the Netopia Router and using some of its power ful featur es, such as static routes and packet filtering. In packets, a header is par t of the envelope infor mation that sur rounds t[...]

B-2 Reference Guide About IP addr essing Ever y networking protocol uses some for m of addressing in or der to ensure that packets ar e delivered cor r ectly . In IP , individual network devices that are initial sour ces and final destinations of packets are usually called hosts, instead of nodes, but the two ter ms are inter- changeable. Each hos[...]

Understanding IP Addressing B-3 Class A networks have a small number of possible network numbers, but a lar ge number of possible host numbers. Conversely , Class C networks have a small number of possible host numbers, but a lar ge number of possible network numbers. Thus, the InterNIC assigns Class A addresses to lar ge or ganizations that have v[...]

B-4 Reference Guide the subnet numbers. Since the InterNIC assigns the network number proper , it should not change, so the subnet numbers must be created out of bits that would other wise be par t of the host numbers. Subnet masks T o create subnets, the network manager must define a subnet mask, a 32-bit number that indicates which bits in an IP[...]

Understanding IP Addressing B-5 Note: If you receive an IP addr ess from an ISP , ther e must be a mask associated with that IP address. By using the IP addr ess with the mask you can discover exactly how many IP host addresses you actually have. T o configure subnets pr operly , you must also be able to conver t between binar y notation and decim[...]

B-6 Reference Guide As you can see, subnet masks that allocate one, seven, or eight bits to subnets are useless for a Class C network. This is because binar y host addresses or subnet addr esses that are composed of all zeros or all ones ar e reser ved for br oadcasting (see “Broadcasts” on page B-16 ). Class A or Class B networks, on the other[...]

Understanding IP Addressing B-7 that allocates five bits to the host address and thr ee to the subnet address. This gives you a potential of six subnets of 30 machines each. 2. Deter mine the subnet mask Y ou can find the subnet mask associated with your subnetting choice in the table above. IP does not specify which bits are to be used for the s[...]

B-8 Reference Guide 5. Deter mine the host addresses Finally , combine your subnet numbers with your host numbers to deter mine the actual IP addresses you may use for your 25 hosts. The first three bytes of the addr ess will always be 199.14.17, as assigned to you by InterNIC. The final byte will be the sum of the subnet number and the host numb[...]

Understanding IP Addressing B-9 must use the mask issued by the ISP). This, however , is not a problematic limitation for your small network. The advantages to this situation is the greater ease and lower cost of obtaining a subnet from an ISP rather than a full Class C addr ess. Distributing IP addr esses T o set up a connection to the Inter net, [...]

B-10 Reference Guide Manually distributing IP addr esses If you choose to manually distribute IP addresses, you must enter each computer’s address into its TCP/IP stack softwar e. Once you manually issue an address to a computer , it possesses that address until you manually r emove it. That’s why manually distributed addresses ar e sometimes c[...]

Understanding IP Addressing B-11 ■ Avoid fragmenting your block of IP addresses. For example, tr y to use a continuous range for the static addresses you choose. The figure above shows an example of a block of IP addr esses being distributed cor rectly . The example follows these r ules: ■ An IP address must not be used as a static addr ess if[...]

B-12 Reference Guide ■ The address range specified for addr ess-ser ved clients cannot wrap around fr om the end of the total available range back to the beginning. See below for a fur ther explanation and an example. ■ The network address issued by an ISP cannot be used as a host address. A DHCP example Suppose, for example, that your ISP gav[...]

Understanding IP Addressing B-13 Internet Router A Router C Router B a.b.c.0 a.b.c.16 a.b.c.1 a.b.c.2 a.b.c.248 a.b.c.249 a.b.c.128 a.b.c.129 Nested IP subnets Under cer tain situations, you may wish to create r emote subnets from the limited number of IP addresses issued by your ISP or other authority . Y ou can do this using connection profiles.[...]

B-14 Reference Guide The Netopia Router’s connection profiles for Routers B and C cr eate entries in its IP routing table. One entr y points to the subnet a.b.c.128, while a second entr y points to the subnet a.b.c.248. The IP routing table might look similar to the following: IP Routing Table Network Address-Subnet Mask-----via Router------Port[...]

Understanding IP Addressing B-15 The Netopia Router compares the packet’s destination IP addr ess with the routes in its IP r outing table. It begins with the route at the bottom of the list and works up until there’s a match or the r oute to the default gateway is reached. When a.b.c.249 is masked by the first route’s subnet mask, it yields[...]

B-16 Reference Guide Br oadcasts As mentioned earlier , binar y IP host or subnet addr esses composed entirely of ones or zer os are r eser ved for br oadcasting. A broadcast packet is a packet that is to be delivered to ever y host on the network, if both the host address and the subnet addr ess are all ones or all zeros, or to ever y host on the [...]

C-1 Appendix C ISDN Configuration Guide This appendix contains supplemental ISDN configuration infor mation. Definitions The following ter ms are used in this appendix: Director y number: The actual phone number associated with the ISDN line you order . Depending on the type of switch pr otocol used on your line, there may be one dir ector y num[...]

C-2 Refer ence Guide About SPIDs Depending on the type of ISDN switch protocol you use, you may be requir ed to enter SPIDs in the ISDN Line Configuration screen. Generally , SPIDs ar e used with Nor th American (United States and Canada) switch protocols. The exact for mat of ISDN SPIDs is sometimes a point of confusion. This is because several f[...]

ISDN Configuration Guide C-3 Example SPIDs If your ISDN line is controlled by a DMS-100 switch using National ISDN-1, and your director y numbers ar e given as (415)234-5678 and (415)234-5679, your SPIDs are 4152345678010 and 4152345679020. Alternately , your SPIDs can be 41523456780100 and 41523456790200. Second dir ectory number The Add Connecti[...]

C-4 Refer ence Guide Backup number Another use for the Optional Second Number item is for storing a backup number in case a connection cannot be made using the primar y number . For example, if calling the primar y number r etur ns a busy signal, the Netopia Router will attempt to use the secondar y number stored in Optional Second Number . If a co[...]

ISDN Configuration Guide C-5 The table below shows which suppor ted switch types can allow an incoming call when ACO for data is on. * Must have two director y numbers assigned. This table may not be a complete list of switch protocols that suppor t ACO. T o find out if your switch protocol suppor ts ACO, or to turn ACO on, contact your ISDN ser [...]

C-6 Refer ence Guide[...]

D-1 Appendix D ISDN, DDS/ADN, and T1 Events This appendix is a complete list of the leased line and ISDN events that can appear in the Netopia Router’s event histories. The text that appears in a histor y is shown in bold, followed by a brief explanation and the parameters associated with the event. Y ou can display more infor mation about any ev[...]

D-2 Reference Guide +------------------------EVENT DETAILS----------------------+ +-----------------------------------------------------------+ | | | 19:40:04 on Friday, July 23, 1999 | | Disconnect Requested | | Called #: 914152270188; Cause: 16 | | | | | +-----------------------------------------------------------+ Leased line events W AN data li[...]

ISDN, DDS/ADN, and T1 Events D-3 Connection Confirmed to our DN: Received connect confir mation for Connect Request sent to the switch. Associated parameter: called director y number . Received Connect Ind. for DN: Received connect indication for Call Request sent to the switch. Associated parameter: called director y number . Received Disc. Ind.[...]

D-4 Reference Guide Cause No. 2: no route to specified transit network. This cause indicates that the equipment sending this cause has received a request to r oute the call through a par ticular transit network which it does not recognize. The equipment sending this cause does not recognize the transit network either because the transit network do[...]

ISDN, DDS/ADN, and T1 Events D-5 This cause is not necessarily generated by Q.931 procedur es but may be generated by internal network timers. Cause No. 21: call rejected. This cause indicates that the equipment sending this cause does not wish to accept this call, although it could have accepted the call because the equipment sending this cause is[...]

D-6 Reference Guide Cause No. 38: network out of order . This cause indicates that the network is not functioning cor rectly and that the condition is likely to last a relatively long period of time: e.g., immediately r eattempting the call is not likely to be successful. Cause No. 41: temporar y failure. This cause indicates that the network is no[...]

ISDN, DDS/ADN, and T1 Events D-7 Cause No 57: bearer capability not authorized. This cause indicates that the user has requested a bear er capability implemented by the equipment that generated this cause that the user is not authorized to use. Cause No. 58: bearer capability not pr esently available. This cause indicates that the user has requeste[...]

D-8 Reference Guide Cause No. 82: identified channel does not exist. This cause indicates that the equipment sending this cause has received a request to use a channel not activated on the inter face for a call. For example, if a user has subscribed to those channels on a primar y rate inter face number ed from 1 to 12 and the user equipment or th[...]

ISDN, DDS/ADN, and T1 Events D-9 Cause No. 95: invalid message, unspecified. This cause is used to repor t an invalid message event only when no other cause in the invalid message class applies. Cause No. 96: mandator y information element is missing. This cause indicates that the equipment sending this cause has received a message that is missing[...]

D-10 Reference Guide Cause No. 102: recover y on timer expir y . This cause indicates that a procedur e has been initiated by the expir y of a timer in association with Q.931 er ror handling pr ocedur es. Cause No. 111: protocol err or , unspecified. This cause is used to repor t a pr otocol er r or event only when no other cause in the protocol e[...]

E-1 Appendix E Further Reading Angell, David. ISDN for Dummies , Foster City , CA: IDG Books Worldwide, 1995. Thorough introduction to ISDN for beginners. Black, Uyless. Emer ging Communications T echnologies , Englewood Clif fs, New Jersey: PTR Pr entice Hall, 1994. Describes how emer ging communications technologies, including ISDN and Frame Rela[...]

E-2 Reference Guide Siyan, Karanjit. Internet Fir ewall and Network Security , Indianapolis: New Riders Publishing, 1995. Similar to the Chapman and Zwicky book. Smith, Philip. Frame Relay Principles and Applications , Addison-Wesley Publishing Company , 1996. Covers infor mation on Frame Relay , including the pr os and cons of the technology , des[...]

Glossary GL-1 Glossary Access Line: A communications line (e.g. cir cuit) inter connecting a frame-relay-compatible device (DTE) to a frame-r elay switch (DCE). See also T r unk Line . Access Rate (AR): The data rate of the user access channel. The speed of the access channel deter mines how rapidly (maximum rate) the end user can inject data into [...]

GL-2 Reference Guide Bandwidth: The range of frequencies, expr essed in Kilobits per second, that can pass over a given data transmission channel within a frame relay network. The bandwidth deter mines the rate at which infor mation can be sent through a channel - the gr eater the bandwidth, the more infor mation that can be sent in a given amount [...]

GL-3 Bridge: A device that suppor ts LAN-to-LAN communications. Bridges may be equipped to provide frame r elay suppor t to the LAN devices they ser ve. A frame-relay-capable bridge encapsulates LAN frames in frame relay frames and feeds those frame r elay frames to a frame relay switch for transmission acr oss the network. A frame-relay-capable br[...]

GL-4 Reference Guide Unchannelized The entire T1/E1 line is consider ed a channel, where: n The T1 line operates at speeds of 1.536 Mbps and is a signle channel consisting of 24 T1 time slots. n The E1 line operates at speeds of 1.984 Mbps and is a single channel consisting of 20 E1 time slots. Channelized The channel is any one of N time slots wit[...]

GL-5 Class A, B, and C networks: The values assigned to the first few bits in an IP network address deter mine which class designation the network has. In decimal notation, Class A network addresses range from 1.X.X.X to 126.X.X.X, Class B network addr esses range from 128.1.X.X to 191.254.X.X, and Class C addresses range fr om 192.0.1.X to 223.25[...]

GL-6 Reference Guide community strings: Sequences of characters that ser ve much like passwords for devices using SNMP . Dif ferent community strings may be used to allow an SNMP user to gather device infor mation or change device configurations. CRC (Cyclic Redundancy Check): A computational means to ensure the accuracy of frames transmitted betw[...]

GL-7 DHCP (Dynamic Host Configuration Protocol): A ser vice that lets clients on a LAN request configuration infor mation, such as IP host addresses, fr om a ser ver . DLCI (Data Link Control Identifier): A unique number assigned to a PVC end point in a frame relay network. Identifies a par ticular PVC endpoint within a user’s access channel [...]

GL-8 Reference Guide Ethernet address: Sometimes refer red to as a har dware addr ess. A 48-bits long number assigned to ever y Ether net hardwar e device. Ethernet addr esses ar e usually expressed as 12-character hexadecimal numbers, where each hexadecimal character (0 through F) r epresents four binar y bits. Do not confuse the Ether net address[...]

GL-9 Frame-Relay-Capable Inter face Device: A communications device that per for ms encapsulation. frame-Relay-capable r eouters and bridges are examples of inter face devices used to inter face the customer’s equipment to a frame relay network. See also Inteface Device and Encapsulation . Frame Relay Frame: A variable-length unit of data, in fra[...]

GL-10 Reference Guide hop count: The number of r outers a packet has gone through. If there ar e six routers between sour ce and destination nodes, the hop count for the packet will be six when it ar rives at its destination node. The maximum allowable hop count is usually 15. hop count reduction: A feature of AURP suppor ted by the Netopia ISDN Ro[...]

GL-11 IP (Internet Protocol): A networking protocol developed for use on computer systems that use the UNIX operating system. Often used with Ethernet cabling systems. In this manual, IP is used as an umbrella ter m to cover all packets and networking operations that include the use of the Internet Pr otocol. See also TCP/IP . IP address, IP host a[...]

GL-12 Reference Guide LAN Segment: In the context of a frame r elay network suppor ting LAN-to-LAN communications, a LAN linked to another LAN by a bridge. Bridges enable two LANs to function like a single, lar ge LAN by passing data from one LAN segment to another . T o communicate with each other , the bridged LAN segments must use the same nativ[...]

GL-13 network number: A unique number for each network in an inter net. AppleT alk network numbers ar e assigned by seed routers, to which the network is directly connected. An isolated AppleT alk network does not need a network number . network number remapping: Resolves network number conflicts when two or more AppleT alk networks that may have [...]

GL-14 Reference Guide Parameter: A numerical code that contr ols an aspect of ter minal and/or network operation. Parameters control such aspects as page size, data transmission speed, and timing options. PC Card: A removable device, such as a modem or network inter face car d, approximately the size of a cr edit card. Designed to fit into a PC Ca[...]

GL-15 protocol: A set of r ules for communication, sometimes made up of several smaller sets of r ules also called pr otocols. AppleT alk is a protocol that includes the LocalT alk, EtherT alk, and T okenT alk protocols. Q.922 A (Q.922 Annex A): The inter national draft standar d that defines the str uctur e of frame relay frames. Based on the Q.9[...]

GL-16 Reference Guide router por t: A physical or logical connection between a router and a network. Where a network only allows the use of one pr otocol, each physical connection cor responds to one logical r outer por t. An example is the Netopia ISDN Router’s LocalT alk por t. Wher e a network allows the use of several protocols, each physical[...]

GL-17 Statistical Multiplexing: Interleaving the data input of two or mor e devices on a single channel or access line for transmission through a frame relay network. Interleaving of data is accomplished using the DLCI. S/T inter face: The inter face on local ISDN equipment wher e the connection to an NT1 or a properly ter minated ISDN line is made[...]

GL-18 Reference Guide TFTP (Trivial File T ransfer Pr otocol/Internet Protocol): A protocol used to transfer files between IP nodes. TFTP is often used to transfer fir mware and configuration infor mation from a UNIX computer acting as a TFTP ser ver to an IP networking device, such as the Netopia ISDN Router . thicknet: Industr y jar gon for 10[...]

GL-19 zone: An arbitrar y subset of nodes within an AppleT alk inter net. Creating multiple zones makes it easier for users to locate network ser vices. The network administrator defines zones when he or she configures r outers. Isolated networks have no zones. LocalT alk and EtherT alk Phase I networks may have no mor e than one zone each. Ether[...]

GL-20 Reference Guide[...]

GL-21[...]

GL-22 Reference Guide[...]

IN-1 Index Numerics 1 B Channel 25 10Base-2, connecting 8 10Base-5, connecting 8 10Base-T 7 10Base-T, connecting 7 2 B Channels 26 2 B Pre-emptable 26 56 Kbps 30 64 Kbps 30 A Add Static Route 13 Adding a filter set 17 answer profile call acceptance scenarios 49 default parameters 45 defined 41 answering calls 41 AppleTalk configuring LocalTalk 11 r[...]

IN-2 Reference Guide secret 24 Community strings 19 configuration ISDN line 2 configuration files downloading with TFTP 17 downloading with XMODEM 13 uploading with TFTP 18 uploading with XMODEM 14 Configuring profiles for incoming calls. 44 configuring the console 9 Connecting to an Ethernet network 4 Connecting to the configuration screens 4 conn[...]

IN-3 EtherWave 5 EtherWave, connecting 5 event history device 9 ISDN 10 Exported Services 8 F Filter priority 8 filter sets adding 17 defined 7 deleting 24 disadvantages 15 linking to the answer profile 46 modifying 23 sample (Basic Firewall) 24 using 8, 16 viewing 23 Filtering example #1 13 filters actions a filter can take 9 adding to a filter se[...]

IN-4 Reference Guide IP Setup for Small Office models 7, 10 IPCP 17 IPX packet filter sets 11 IPX packet filters 10 IPX SAP Bindery Table 19 IPX SAP filters 14 IPX Setup 1 IPX Spoofing 4 ISDN bandwidth (56 or 64 Kbps) 30 configuration 2 event history 10 loopback test 7 SPID 1 statistics 5 TID 1 ISDN Configuration Guide 1 ISDN event cause codes 3 IS[...]

IN-5 LocalTalk configuration 11 models 3 monitoring 1 PPP options 22, 27 security 1 system utilities and tests 1 Network problems 5 network status overview 1 Next 15 Next Router Address 15 non-seeding 6 O Output filter 1 26 P packet header 16 PAP and answer profile 44 configuring 23 Parts of a filter 10 password CHAP (secret) 24 PAP 23 to protect s[...]

IN-6 Reference Guide weekly 53 screens, connecting to 4 secret (CHAP) 24 security filters 6–29 measures to increase 2 telnet 6 user accounts (passwords) 2 Security Options screen 3 seeding 5 Select B-Channel Usage 25 Service Advertising Protocol (SAP) 3 Service Profile ID, see SPID Setting the IP trap receivers 20 Setting the system date and time[...]

IN-7 Trivial File Transfer Protocol, see TFTP Troubleshooting 1 troubleshooting event histories 9 loopback test 7 WAN statistics 5 Trusted host 27 Trusted subnet 27 tunneling 5 U unproxied addresses 1 updating firmware with TFTP 16 with XMODEM 12 Updating Netopia’s firmware 16 upgrade 3 Uploading a configuration file 18 uploading configuration fi[...]

Limited W arranty and Limitation of Remedies Farallon war rants to you, the end user , that the Netopia™ ISDN Router (the “Product”) will be fr ee from defects in materials and workmanship under nor mal use for a period of one (1) year from date of purchase. Farallon’s entir e liability and your sole remedy under this war ranty during the w[...]

THE ABOVE W ARRANTIES ARE MADE BY FARALLON ALONE, AND THEY ARE THE ONL Y WARRANTIES MADE BY ANYONE REGARDING THE ENCLOSED PRODUCT . FARALLON AND ITS LICENSOR(S) MAKE NO OTHER W ARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMIT A TION THE IMPLIED WARRANTIES OF MERCHANT ABILITY AND FITNESS FOR A P ARTICULAR PURPOSE, REGARDING THE ENCLOSED PRODUC[...]