Patton electronic 2603 manuale d’uso

Models 2603, 2621, and 2635 OnSite Series High Speed Routers User Manual Sales Office: +1 (301) 97 5-1000 Techni cal Su ppor t: +1 (301) 97 5-1007 E-mail: suppor t@patton.com WWW: www .patton.com Document Number : 03328U1-001 R ev . C Part Nu mber: 07M2600Ser-GS Impor tant This is a Class A de vice and is intended for use in a light ind ustrial env[...]

Patton Electronics Company , Inc. 7622 Ric kenbacker Drive Gaithersburg , MD 20879 USA Tel: +1 (301 ) 975- 1000 Fax: +1 ( 301) 8 69-929 3 Support: +1 (30 1) 975 -1007 Web: www.pa tton.com E-mai l: suppo rt@ pat ton. co m Copyright © 2012, Patton Electr onics Company . All righ ts reserved. The in forma tion in th is documen t is sub ject to ch ang[...]

3 Summar y T able of Contents 1 General Information ........ ...... ........ ...... ...... ...... ........ ...... ...... ...... ...... ........ ...... ...... ...... ...... ........ ...... ...... ...... .... 17 2 Product Overview ............ ...... ........ ...... ...... ...... ..... ......... ...... ...... ...... ........ ...... ...... ...... ....[...]

4 Contents Summary Table of C ontents .... ......... ...... ...... ..... ......... ...... ...... ...... ........ ...... ...... ......... ..... ...... .... ........ ...... ...... 3 Contents .... ...... ...... ......... ...... ..... ...... ......... ...... ..... ...... ...... ......... ...... ..... ...... ......... ...... ... ..... ...... ...... ....[...]

Conte nts Models 2603, 2621, and 2635 U ser Manual 5 Installi ng an interface ca ble on the OnS ite 2635’ s V.35 interface po rt .................... ........... ................. .......3 3 Installing the AC power cord ............. ............ ........... ........... ............ ................. ........... ........... ........... ..........[...]

6 Models 2603, 2621, and 2 635 User Manual Conte nts Remote Site Confi guration ..................... ............ ........... ........... ................. ........... ............ ...... ..... .......63 Central si te configurat ion . ................. ........... ........... ............ ........... ........... ................. ......... .. ....[...]

Conte nts Models 2603, 2621, and 2635 U ser Manual 7 Website Settings ....................... ........... ........... ................. ........... ............ ........... ........... .... ............. ...... ........... .....101 Error Log............................ ........... ........... ............ ................. ........... ........... .[...]

8 Models 2603, 2621, and 2 635 User Manual Conte nts T1/E1 Interface ............ ................. ........... ............ ........... ........... ................. ............ ......... .. ........... ........... ...........119 Protocol Support ................ ........... ................. ........... ............ ........... ........... .....[...]

Conte nts Models 2603, 2621, and 2635 U ser Manual 9[...]

10 List of Fi gures 1 OnSite Series Router (Model 2635 s hown) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 2 Sync Serial Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 3 T1/E1 Applicati[...]

11 Models 2603, 2621, and 2 635 User Manual 48 New Policy link t o configurati on webpage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 49 Deleting a Secur ity Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

12 List of T ables 1 General conven tions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 2 Status LED descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 3 LMI [...]

13 About this guide This guid e desc ribes i nstalling and configuri ng Patt on Electron ics OnSite S eries High Sp eed Routers. The instr uctions i n this guide are bas ed on the follow ing ass umptions: • The router may connect to a serial DTE device or T1/E1 li ne • There is a LAN connected to the Ethernet por t of the router Audien ce This [...]

14 Models 2603, 2621, and 2635 User Manual About this guide Precau tions Notes, ca utions, and warnings, which have t he foll owing meani ngs, are us ed thro ughout th is guide to help yo u become aware of potential problems. Warnin gs are intended to prev ent safety hazards that co uld result in per - sona l inju ry. Cau ti on s are intended to pr[...]

15 Models 2603, 2621, and 2635 User Manual About this guide Safety when working wi th electricity General observat ions • Clean the cas e with a soft slightly moist ant i-static cloth • Place the unit on a flat surfac e and ensure free air circul ation • Avoid exposing the unit to direct sunlight and other heat sources • Protec t the unit f[...]

16 Models 2603, 2621, and 2635 User Manual About this guide Factory default parameters OnSite Series H igh Speed Routers have the followin g factory default param eters. • Ethernet IP add ress: 192.168. 200.10/24 • WAN Conne ction: PPP Bridged • Ethernet and serial connections • MDI (LAN connector) • Model 2621 (X.21 )—DB-15 port ( DTE)[...]

17 Chapter 1 General I nformation Chapter cont ents IPLink Series High Speed Routers overview .............. ................. ............ ........... ........... ........... ................. ............ . 18 General attributes ............... ........... ........... ................. ........... ............ ........... ........... ............[...]

OnSite Series High Speed Routers ove rview 18 Models 2603, 2621, and 2635 User Manual 1 • Ge nera l Info rma tion OnSite Series High Speed Routers o ver view The OnSi te Series of gateway r outers/bridge s combine fu ll set of high-speed IP routing featu res and WAN access via PPP/IP/FR protoco ls. All O nSite route rs come wi th an auto-sensi ng[...]

OnSite Series High Speed Routers ove rview 19 Models 2603, 2621, and 2635 User Manual 1 • Ge nera l Info rma tion Ethernet • Auto-sens ing full-duplex 10Base-T /100Base-TX Ethernet. • Standard RJ-45 connector • Buil t-in MDI-X cross- over switch . • IEEE 802.1d trans parent learni ng bridge • 2 IP addres s/subnets o n Ethernet inter fac[...]

OnSite Series High Speed Routers ove rview 20 Models 2603, 2621, and 2635 User Manual 1 • Ge nera l Info rma tion • Logging via S YSLOG, and VT-100 c onsol e. Consol e port s et at 9600 b ps 8/N/1 settings no flow contr ol. Security • Packet filt ering fir ewall fo r cont rolled acces s to and from LAN/WAN. S upport for 25 5 rule s in 3 2 fil[...]

OnSite Series High Speed Routers ove rview 21 Models 2603, 2621, and 2635 User Manual 1 • Ge nera l Info rma tion Consol e port Located on the fron t panel, the unshielded RJ -45 RS- 232 console DCE port (EIA-561 ) with t he pi n-out li sted in th e follow ing tab le : Rear panel con nectors and switc hes On the rear pane l from left to right are[...]

OnSite Series High Speed Routers ove rview 22 Models 2603, 2621, and 2635 User Manual 1 • Ge nera l Info rma tion • Power input connector • Ethernet conne ctor • MDI- X sw it ch • WAN port (V .35, X.21, T1/E 1) Power connector AC universal power suppl y. The OnSi te Series route r offers in ternal or external AC p ower supply op tions. ?[...]

OnSite Series High Speed Routers ove rview 23 Models 2603, 2621, and 2635 User Manual 1 • Ge nera l Info rma tion[...]

24 Chapter 2 Product Over view Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......25 Applic atio ns Over view ................... ........... ............ ................. ........... ........... ......[...]

Introduction 25 Models 2603, 2621, and 2635 User Manual 2 • Pro duct Ove rview Intr oduction The OnSite S eries Router op erates as a bridge or a router and has two ports for communication: • The Et hernet port—C onnects to the LAN side of the c onnection • The Serial p ort—Conne cts to l ocal DTE de vices ( Model 2621 and 26 35) • The [...]

Applications Ov erview 26 Models 2603, 2621, and 2635 User Manual 2 • Pro duct Ove rview Applications Overview Patton’s OnSite G ateway routers deliver all the advanced featur es for secure , reliable, and high sp eed Internet data conn ections. Th ey combine ease-o f-use with powe rful data routing to make shared Inte rnet connectivity simpl e[...]

27 Chapter 3 Initial Configurati on Chapter cont ents Har dw ar e in stal la ti on .................... ........... ............ ........... ................. ........... ............ ........... ........... ................. .......28 What you wi ll need ............ ........... ........... ................. ........... ............ ........... ..[...]

Hardware installation 28 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion Hardware instal lation If you are already famili ar with OnSite Series Router in stallation and configuration, this chapter will enable you to finish the jo b quickly. Installation consists o f the following: • Prepari ng for the installa tion (see sec[...]

Hardware installation 29 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion Installing an interface cable on the O nSite 2603’ s T1/E1 interface port The On Site Models 2603/K and 2 603/T come w ith a sel ectable T 1/E1 WAN in terface ( see figure 4 ). Lo cated on the bac k of the OnS ite, the T1 and E1 interfac es are pre sen[...]

Hardware installation 30 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion Figure 6. Rear vi ew of the 2 603/K showing loc ation of Eth ernet and WAN conne ctors The interface ca ble has been installed , go to section “Installing the AC power cord” on pa ge 34. Crossover 10/100 Ethernet WAN MDI-X Crossover 10/100 Ethernet W[...]

Hardware installation 31 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion Installing an interface cable on th e O nSite 2621’ s X.21 interface port The OnSit e Model 2621 comes with an X.21 interf ace pre sented o n a female DB-15 connecto r (see figur e 7 ). This interface can be configured as a DTE (factory de fault), or a[...]

Hardware installation 32 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion When the local th ird part y equipme nt is co nfigured as DTE, the Mode l 3086 X. 21 serial p ort can be co nfig - ured as DCE , and a regular straig ht-through cable can then be used. Do the following to co nfigure the X.21 port as a DCE: 1. Open the On[...]

Hardware installation 33 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion 4. Re-assembl e the c ase. The interface ca ble has been installed , go to section “Installing the AC power cord” on pa ge 34. Installing an interface cable on the On Site 2635’s V. 35 interface port The OnSit e Model 2635 comes with a V.35 interf [...]

Hardware installation 34 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion Note The OnS ite comes with a V.3 5 cable configured as a tail-circuit. Use this cable to inte rconnect the OnS ite’s V.35 por t to a device confi gured as a DCE. Figure 11. Co nnecting the 2635 to a DCE device The se rial port on the OnSit e Model 263[...]

Hardware installation 35 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion Figure 12. Power connector locatio n on rear panel (Mo del 2603/T shown) 3. V er if y th a t t h e A C po w er co r d in c lu d ed wi t h y o u r O n Si te r ou t e r i s c o mp a t ib le w it h lo c al s ta nd a rd s . I f i t is not, refer to chapt er [...]

Hardware installation 36 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion Figure 13. OnSite front panel LEDs and Console port locations (Model 2603 shown) Insta lling the Et hernet cable Do the following: 1. Connect the DB9 -RJ45 adapter to the DB-9 serial po rt on the PC or dum b terminal. Use the RJ45-RJ45 straight-thro ugh [...]

Hardware installation 37 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion 7. A me ssage w ill disp lay, “ Login Succes sful.” By typi ng the ch aracter “?”, all the commands will be displayed. Login: su peruser Passwor d: **** ***** Login successful --> 8. Any commands’ parameters may be s een by enterin g the com[...]

Hardware installation 38 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion 2. Enter the OnS ite router’s IP add ress into the URL or Address fie ld of the browser. To see t he OnSit e Series router home page, r efer t o the follo wing Figure s. Mode l 2603 is s hown in figur e 14 . Model 262 1 in figur e 15 . Mode l 2635 in f[...]

Hardware installation 39 Models 2603, 2621, and 2635 User Manual 3 • I nitial Confi gura tion Figure 16. Model 26 35 home page[...]

40 Chapter 4 Ethernet LAN Por t Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......41 LAN Connections .............. ........... ........... ........... ................. ............ ........... .......[...]

Introduction 41 Models 2603, 2621, and 2635 User Manual 4 • Etherne t LAN Port Intr oduction The Ethernet LAN interface/port can be configured with two IP addresses, a primary and a secondary IP address. The configur ation web page is fo und by fo llow ing the p ath -> Service s Configuratio n (in the Configu - ration Menu) -> LAN -> ‘[...]

Introduction 42 Models 2603, 2621, and 2635 User Manual 4 • Etherne t LAN Port Figure 18. Basic Ethernet port attributes For additional statistical parameters and a few configur able parameters, click on the hyperlink View advan ced attributes... (See figu re 19 .) Figure 19. Advanced Ethernet port attributes The thre e con figu rabl e pa ramet e[...]

Introduction 43 Models 2603, 2621, and 2635 User Manual 4 • Etherne t LAN Port • Full Du plex Mode : the default val ue is ‘true’ f or Full Duplex operation. Setting it to ‘ false’ configures the Ethernet port to operate only in half-duplex mode. Rarely d o these param eters req uire a chang e from their d efault o peration. Figure 20. [...]

44 Chapter 5 Serial Por t Configuration Chapter cont ents WAN Serial Po rt Confi guration ............... ................. ............ ........... ........... ................. ........... ............ ........... .......45 Seria l Interfa ce ....... ............ ................ ............ ........... ........... ................. ............[...]

WAN Serial Port Confi guration 45 Models 2603, 2621, and 2635 User Manual 5 • Serial Port Configuration W AN Serial Port Configuration The OnSi te Series rou ters use a s ync.-serial interface (X .21, V.35) or a T1/E1 inter face for connection to s tan - dard WAN servic es. Below are the c onfiguratio n options for the WAN inte rface. Serial Inte[...]

WAN Serial Port Confi guration 46 Models 2603, 2621, and 2635 User Manual 5 • Serial Port Configuration Web Interface Co nfiguration The follow ing screen capture shows the vari ables available to configure the X.2 1 serial interf ace. Figure 21. Model 2621 X.21 serial port configuratio n parameters The nex t figure show s the Model 2 635 (V.3 5)[...]

WAN Serial Port Confi guration 47 Models 2603, 2621, and 2635 User Manual 5 • Serial Port Configuration Figure 23. Model 2603 T1/E1 WAN port configuration parameters Configuring the OnSite Series 260 3 for T1 Operation Web Config uration. Launch Netscape, Internet Explorer or si mila r web br owser , ty pe the IP add ress of t he 2603, enter user[...]

WAN Serial Port Confi guration 48 Models 2603, 2621, and 2635 User Manual 5 • Serial Port Configuration Time Slot Select. For a T 1 usi ng al l 24 ti me s lots e nter 1-24, for fractional T1 enter in any format for example: 1,2,3,5; or 1-5,10 -24. Any en try for time slots a bove 24 will r eturn an invali d-sele ction mes sage. Line Opti ons: Fra[...]

WAN Serial Port Confi guration 49 Models 2603, 2621, and 2635 User Manual 5 • Serial Port Configuration Time Slot Select. For unframed E1 service (Clear Channel) go to the “Line Option” par ameter and select “Clear Channel E1 (G .703).” For a full framed E1 enter 1- 31, for par tially fil led E1 enter the range of timesl ots using the for[...]

50 Chapter 6 WA N S e r v i c e s Chapter cont ents WAN Services .......................... ........... ........... ........... ............ ................. ........... ........... ........... ................. ............ . 51 Configuring the IPLink Series 2603 for E1 Operation ............... ........... ................. ........... .........[...]

WAN Se rvice s 51 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices WA N S e r v i c e s Configuring the OnSite Series 260 3 for E1 Op eration Web Config uration. Launch Internet Explor er o r similar web browser, t ype the IP ad dress o f the 260 3, enter username superuser and password superuser . From the ma in page clic k on t he T1/ [...]

WAN Servic e Configu ration 52 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices Once all op tions have bee n selec ted, click on the Configure and Acti vate button at the bottom o f the screen. Additionally, save the configuration by goin g to the System Configuration > Save menu. This concludes the E 1 interface configuration vi a th[...]

WAN Servic e Configu ration 53 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices Figure 28. W AN services’ options 4. In the Descri ption field, enter the d escription you wish . This is a mandatory field. Without a description, you cannot cre ate the WAN se rvice. Verify the settings to be: • Interface = 1 • LLC head er mo de = dia[...]

WAN Servic e Configu ration 54 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices 1. Bring up the web-page management system on your b rowser by enteri ng the IP address of the O nSite 2. On the M enu, go to Service s Confi gurat ion , then to WAN . Delete the factory default WAN services already defi ned. 3. Clic k on Create a n ew servic[...]

WAN Servic e Configu ration 55 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices 3. Clic k on Create a n ew service in the main window, select “PPP rout ed” and click on the Continue button. In the Description fie ld, enter the description you wi sh. In this example, it is called PPP Routed . • Description: PPP Routed • Interface:[...]

WAN Servic e Configu ration 56 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices 6. Clic k on Cr eate . Figure 31. Edit IP address of WAN port 7. Clic k on Services Con figurat ion > IP Route s > Create new Ip V4 Route. Create the gateway to th e remote router by e ntering t he WAN IP address of the r emote r outer, in th is example[...]

WAN Servic e Configu ration 57 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices Figure 33. PPP link status Central Si te Configuration. If the router at the ISP or Central site is anothe r OnSite series, follow the instructions below. If not, consu lt your thir d part y router user manual for conf iguration. See the web p ages for the de[...]

WAN Servic e Configu ration 58 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices • Username: [blank] • Pas swor d: [bl ank ] Click on the Cre ate button. 4. Go to Servic es Configur ation > WAN > Edit.. . ( for PPP routed) > Ed it ‘IP Interface’ > Ipadd r: [enter the WAN IP Address and Mask, in this ex am ple = 192.1 6[...]

WAN Servic e Configu ration 59 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices LMI C onfig urat ion O ption s. The Frame Relay Local Managem ent Interface is configur able through either the CLI or web interface on the OnSite Series. The following variables are available for configur ation. • managemen tType: (Default Val ue: no_maint[...]

WAN Servic e Configu ration 60 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices All LMI configuration var iables are contained unde r the “LMI Management” windo w found through the Ser - vices Configurati on >LMI Managemen t link. The fo llowing s creen sh ows th e configuration va riables availabl e. Figure 34. LMI Configuration [...]

WAN Servic e Configu ration 61 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices Frame Relay bridged This ap plica tion sho ws con figura tion fo r two On Site un its in bri dged m ode. If u sing a third par ty rout er at the Central site, review th e router’ s configur ation for connection to a remote brid ge. Remote Site Confi guratio[...]

WAN Servic e Configu ration 62 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices • Enca psulat ion type : Bridged Ethe r (Defi nes the RFC 1490 e ncapsulatio n type to be used by t he channel. In some instanc es you may nee d to cho ose another type. Co nsult your service provider.) • RX Max PDU : 8192 Receive side max PDU, de fault 8[...]

WAN Servic e Configu ration 63 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices 4. Enter the des cription for the circuit in the De scription field. This is a mandatory field. Without a descrip - tion yo u cannot cr eate a WAN se rvice. 5. Clic k on Create a n ew service in the main window, select Frame rel ay brid ged and click on the C[...]

WAN Servic e Configu ration 64 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices 2. On the M enu, go to Service s Confi gurat ion , then to WAN . Delete the factory default WAN services already defi ned. 3. Clic k on Create a n ew service in the main window, select “ Frame Re lay ro uted” and click on Co ntinue. 4. Enter the des cript[...]

WAN Servic e Configu ration 65 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices Figure 39. Frame Relay Channel - Routed configuration Edit Frame Relay Channel Ente r the appr opriat e inform ation in the fo llowin g field s: • Dlci: Consult with yo ur servic e provider for the DLCI nu mber requi red, in this exam ple use 45 . • Enc a[...]

WAN Servic e Configu ration 66 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices • Cost: 1 • Interface: frame-0 Figure 40. IP route for F rame Relay routed applicati on 12. Click on the Up date button. This concludes the c onfiguration of the r emote site. Be sure to save the config uration in non-volatile memor y by System Configurat[...]

WAN Servic e Configu ration 67 Models 2603, 2621, and 2635 User Manual 6 • WAN Serv ices – Enabl e NAT on this i nterface. In this exampl e leave this opt ion blank 5. Clic k the Cr eate button. 6. Go to System Configurati on > WAN > Edit (f or Frame Relay Routed service) > Edit ‘IP Interface’ 7. Enter t he WAN IP Addres s, in t hi[...]

68 Chapter 7 Security Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......69 Con figuring the router ....... ................. ........... ........... ............ ........... ................. ..........[...]

Introduction 69 Models 2603, 2621, and 2635 User Manual 7 • Security Intr oduction Security provides the ability to setup and enforce se curity policie s. The policies define the typ es of traffic per - mitted to pass th rough a gateway, either inbound, outb ound, or both, and from whi ch origins the traffic may be allowed to enter. Within the se[...]

Configuring th e router 70 Models 2603, 2621, and 2635 User Manual 7 • Security Figure 41. PPP routed WAN service for Security Fi rewall example 6. Clic k on Edit in the WAN C onnections w ebpage, and then click on the Ed it ‘Ip Interface’ hyperlink. 7. In the Edit Ip Interface webpage, ent er the fields as follows and click on the Create but[...]

Configuring the security interface s 71 Models 2603, 2621, and 2635 User Manual 7 • Security 3. Enter 192.168.101.2 in the box adjacent to Gat eway. 4. Leave Destination and Netmask both as 0.0.0.0 because this is the gateway de fault route. 5. Clic k on th e Update button . 6. Seeing the gree n check mark under Va lid indic ates the IP addresse [...]

Configuring the security interface s 72 Models 2603, 2621, and 2635 User Manual 7 • Security Figure 44. Security configuration home page 2. Go to the third s ection (Security Interfac es) on the Security Inter face Configuration webp age. Click on the hyperlink Add interface... 3. Select ‘ip1’ besi de the Name pull-down menu, and sele ct ‘i[...]

Configuring the security interface s 73 Models 2603, 2621, and 2635 User Manual 7 • Security Figure 46. Define ‘ppp-0’ interface as External Configurin g Security Po licies Continu e the previous exam ple by defini ng security poli cies. We will add only one Fir ewall policy, call ed etoi , sign ifyin g an e xt ernal- to-i nternal policy betw[...]

Enabling the Firewall 74 Models 2603, 2621, and 2635 User Manual 7 • Security Deleting a security Po licy To delete a security policy, go to the table of ‘Curre nt Security Polic ies’ and click on the Delete button for the select ed sec urity po licy. Figure 49. Deleting a Security Policy Enabling the Firew all At this point, both secur ity a[...]

Security Triggers 75 Models 2603, 2621, and 2635 User Manual 7 • Security This examp le continues to all ow pings over the fi rewall: 1. From the Configuration Menu, > Configuration > Secur ity > Security Policy Configuration... > Port Fil- ters... > Add Raw IP Filter 2. Enter 1 (for ICM P) in the Pr otocol Number field. 3. Set bot[...]

Security Triggers 76 Models 2603, 2621, and 2635 User Manual 7 • Security 4. Set Inbound as Block , but Outbound as Allow . (S ee figu re 51 .) 5. Clic k on Create . Figure 51. Configuring TCP port filter for FTP After co nfiguring t he FTP po rtfilt er, you can open an ft p sessi on from Re mote to Local, however you c an issue ftp commands (e.g[...]

Security Triggers 77 Models 2603, 2621, and 2635 User Manual 7 • Security Figure 52. Adding trigger for FTP data transfer You should now be able to use FTP commands to pass data betwe en Remote and Local.[...]

Intrusion Det ection System (I DS) 78 Models 2603, 2621, and 2635 User Manual 7 • Security Int rusio n Det ecti on S ystem ( IDS) The securi ty feature in the On Site Router pro vides pro t ection from a number of attacks. Some attacks cause a host to be blacklisted (i.e., no traffi c from that host is accepted under any circumstances) for a peri[...]

Intrusion Det ection System (I DS) 79 Models 2603, 2621, and 2635 User Manual 7 • Security – Victim Prot ection Blo ck Duration:Defaul t = 600 se conds (1 0 minutes ). Sets the dur ation of the block in sec onds. – Maximum TCP Open Handshaking Count:Defaul t = 100 Sets the maximum number of unfinis hed TCP handshaking sessions per s econd tha[...]

Introduction to NAT 80 Models 2603, 2621, and 2635 User Manual 7 • Security Introduction to NA T The basi c step s for co nfigur ing NAT are : 1. Enable NAT betwe en the internal and external in terfaces of the fi rewall. 2. Create global addresses which will be added to the global pool of IP addresses on the WAN interface. 3. Create a reserved m[...]

Introduction to NAT 81 Models 2603, 2621, and 2635 User Manual 7 • Security Clic k on Add Global Address Pool button. Figure 53. NAT Global Address Pool configuration 4. Next, create a reserved mapping between a global IP address from the global pool and a PC on the side of the internal interface ( ’ip1’). In t his example, 10.10.19.11. 5. Cl[...]

82 Chapter 8 DHCP and DNS Configuration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......83 Services and featu res normally ass ociated with each other ..... ............ ........... ................. [...]

Introduction 83 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n Intr oduction The router s off er a D HCP S erver , DHCP Relay capa bili ty, and DNS Relay incor porated into the OnSite. O f the two DHCP feature s, only one can be enabled at a time-either DHCP server or DHC P relay. DNS relay can h old two DN S serv e[...]

Introduction 84 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n Some comments on figu re 4 . Routed means a ‘routed WAN service’ and Bridged means a ‘ bridged WAN service.’ DHCP Serv er and DHCP Relay c annot be used simultaneo usly. NAT can be used only i f a Routed WAN se rvice is conf igured. 1 If a DH CP [...]

Introduction 85 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n Figure 55. DHCP Server web page The server needs to have a subnet of IP addresses w hich will be allocated when a DHCP client makes a request. Define the subnet by clicking on the hyperlink Create new Subnet ... The next webpage, ‘Create new DH CP Serv[...]

Introduction 86 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n Figure 56. DHCP server configuration web page Parameters for the DHCP Server subnet Four par ameters are in the se ction fo r defi ning the DHCP subnet. ( See figur e 57 .) Figure 57. DHCP Server s ubnet parameters The first two parameters are applicable[...]

Introduction 87 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n The thir d param eter is • Get subnet fr om IP interface: If you use this opti on, then you will not enter any values in the first tw o paramete rs. Should you define ano the r subnet and also select ‘Get su bnet from IP int erface,’ the O nSite us[...]

Introduction 88 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n Figure 59. Example based on default range of IP address pool DNS server o ption information When a client requests an IP address fr om a DHCP server , the server can also send the IP addre sses of the pri - mary and secondary DNS servers’ IP addresses.[...]

Introduction 89 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n Default gateway option info rmation The OnSite is the gatew ay all client traffic when Use local host as default gateway is checked (s ee figure 61 ). Additional option information You ma y wish to prov ide addition al information to the client s on the [...]

Introduction 90 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n • Edit DHCP se rver list: The IP addres ses of D HCP serv ers can be updated, r eset, or dele ted fr om the li st. • Add new D HCP server: the IP ad dresses of the DHCP server s are added to the DHCP rel ay list in this sec - tion. In the first secti[...]

Introduction 91 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n Figure 63. DHCP Relay server list DNS Rela y The DNS Relay webpage contains a conf igurable list of DNS server IP addresses. The OnSite’s DNS Relay forw ards DNS querie s from a client to a pre-defin ed DNS server an d DNS s erver res ponse s to the cl[...]

Introduction 92 Models 2603, 2621, and 2635 User Manual 8 • DHC P an d D NS C onfi gura tio n Figure 65. DNS Relay configuration webpage You ca n change the IP addr ess of the DNS ser vers on the D NS Relay webpage (see fig ure 66 ) by modify ing the IP address requiring the change and clicking on the Update button. To delete the IP address of a [...]

93 Chapter 9 IP Ser vices Chapter cont ents IP Se rv ices ............... ................. ........... ........... ........... ................. ............ ........... ........... ........... ................. ............ . 94 WEB Se rver ................. ........... ........... ............ ........... ................. ........... ..........[...]

IP Services 94 Models 2603, 2621, and 2635 User Manual 9 • IP Servi ces IP Serv ices Certain System Services can be enabled or disabl ed. They are DNS Relay, FTP , TFTP, SNMP, and the WEB Serv er. The im porta nce o f disab ling an y of t hese s ervices is an i ssue of security. If you are not using a particular service, it is b est to disable it[...]

IP Services 95 Models 2603, 2621, and 2635 User Manual 9 • IP Servi ces Associat ed Ports for the differe nt System (IP) Services This section is for information purpo ses only. Consult the ta ble to identify which ports are assoc iated with the differ ent System (IP) Services. Table 5. Standard port numbers for the System Services Syste m (I P) [...]

96 Chapter 10 System Configuration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......97 Authentic ation ......... ........... ........... ........... ............ ................. ........... .........[...]

Introduction 97 Models 2603, 2621, and 2635 User Manual 10 • System Co nfigurati on Intr oduction The System Configuration item on the Co nfiguration Menu opens to provide acces s to twelve (12) differ ent it ems. The y ar e: • Authenticati on: all ows you to co ntrol access to th e OnSite’s console and web config uratio n pages . • Alarm: [...]

Alarm 98 Models 2603, 2621, and 2635 User Manual 10 • System Co nfigurati on • creating a Username • defining th e Passwo rd • give the use r abilit y to co nfigur e the O nSite o r read- only au thority • add a comment useful to the administrator Figure 69. Creating new user Alarm Access the configuration and status of the alar ms. Figur[...]

Remo te Acces s 99 Models 2603, 2621, and 2635 User Manual 10 • System Co nfigurati on remain. Only by clicking on th e Reset button can you clear the alarm and reset the Time and Count parame - ters. The parameter d efinitions are: • Alarm Severity: there ar e five cate gories of severity-Cr itical, Major, M inor, Info rmationa l, and Ignore .[...]

Update 100 Models 2603, 2621, and 2635 User Manual 10 • System Co nfigurati on Update To up grade the O nSite to a nother software v ersion , select th e softw are imag e by clic king on th e Brows e but - ton. The so ftware is a ‘. tar’ file. (S ee figure 73 . ) Aft er s elec ted , the sof tware is d own load ed to th e On Site . Wa it until[...]

Restart 10 1 Models 2603, 2621, and 2635 User Manual 10 • System Co nfigurati on Figure 75. Saving or reloading pr eviously saved configuration files Resta r t Fr o m th i s w e bp a ge , yo u ca n do a s of t re bo o t of t he O n Si te o r re s to r e t h e O n S it e t o fa c to r y d e f au lt s . T o r es t or e to factor y defaults, click o[...]

Error Log 102 Models 2603, 2621, and 2635 User Manual 10 • System Co nfigurati on Error Log The Error L og we bpage shows recen t con figur atio n err ors an d prov ides for the c onfi gurat ion of the S yslo g. (See figure 78 .) Two parameters a re conf igurable for the Syslog . • Syslog Host : enter the IP add ress of th e Syslog (Default = 0[...]

System Tools 103 Models 2603, 2621, and 2635 User Manual 10 • System Co nfigurati on Fig ure 79 . SNM P Dae mon co nfig urat ion The Trap Tab le identifies th e IP address of the S NMP trap along with i ts password . Syst em T ools The Syst em Tool s webpag e prov ides t wo util ities fo r testi ng netwo rk connecti vity. The two util ities are ?[...]

104 Chapter 11 SNTP Client Configuration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ... ......... ........... .....105 Con figuring th e SNTP Cl ient ............. ........... ........... ............ ........... ..............[...]

Introduction 105 Models 2603, 2621, and 2635 User Manual 11 • SNTP C lient Config urati on Intr oduction The Simpl e Network Time Protocol (SNTP) Cl ient webp age contains the configurable parameters for either setting up the SNT P client or, in the abscence of an SNTP server, set ting the internal clock. If you plan the us e of an SNTP serve r, [...]

System Clock Setting 106 Models 2603, 2621, and 2635 User Manual 11 • SNTP C lient Config urati on SNTP Cli ent Gene ral Conf igurat ion Para meters The gen eral conf iguration p arameters for the SN TP client ar e for selec ting your tim ezone an d setting the poll - ing parameters for the client’s transm it packets. • Current T imezone: sel[...]

System Clock Setting 107 Models 2603, 2621, and 2635 User Manual 11 • SNTP C lient Config urati on Figure 83. Confi guration of the internal system calendar clock After enteri ng the system cloc k values, click on th e Set Clock button to save i n volatile memory. If the OnSite is rebooted, either soft or by power- cyc ling, the Clock Setting ret[...]

108 Chapter 12 System Status Chapter cont ents System Sta tus ..... ........... ................. ........... ............ ........... ........... ................. ............ ........... ......... .. ................. .....109 Port Co nnection Sta tus ...... ........... ................. ........... ........... ............ ................. ...[...]

System Status 109 Models 2603, 2621, and 2635 User Manual 12 • System Status Syst em Stat us A quick but thorough summary o f the OnSite’s status is provided on th is webpage, but it also has links to the detailed webp ages for the key su bsystems of the OnSite. The webpag e is di vide d into six (6) sec tions: • Port Connection Status: conne[...]

System Status 110 Models 2603, 2621, and 2635 User Manual 12 • System Status LAN Status There are two hyperlinks, LAN Settings... and DHCP Server Settings... , which go to th e ‘LAN Conne ctions’ and ‘DHCP S erver’ web pages, respe ctively. The ot her param eters shown i n LAN Sta tus are as follo ws: • Local IP add ress: the IP address[...]

Status LEDs 111 Models 2603, 2621, and 2635 User Manual 12 • System Status Status LEDs The LEDs indica te the status of the Power, the W AN, Sync Serial port, an d the Ethernet connecti on. All LED indica tors will pres ent the same looking profi le (e.g. , clear) when unlit due to being single color, water clear, high effi ciency LEDs . Table 6.[...]

112 Chapter 13 Contacti ng Patton for assistance Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ... ......... ........... .....113 Contact inf ormati on ................. ........... ........... ........... ............ ...........[...]

Introduction 113 Models 2603, 2621, and 2635 User Manual 13 • Contac ting Pat ton for assista nce Intr oduction This chapte r contains t he foll owing info rmation: • “Contact information” —des cribes how to c ontact PATTON tec hnical support fo r assistance. • “Warranty Service and Returned Merch andis e Authorizations (RMAs)” —c[...]

Warranty Service and Returned Merch andise Authorizations (RMAs) 114 Models 2603, 2621, and 2635 User Manual 13 • Contac ting Pat ton for assista nce Out-of-war ranty serv ice Patton servic es what we sell, no matter how you ac quired it, inc luding malfunctioning p roducts that are no longer under warranty. Our products have a flat fee fo r repa[...]

115 Appendix A Compliance information Chapter cont ents Comp liance .................. ................. ........... ............ ........... ........... ................. ............ ........... ....... .... ................. .....116 EMC ........... ........... ................. ........... ............ ........... ........... ................. [...]

Compl iance 11 6 Models 2603, 2621, and 2635 User Manual A • C omplianc e info rmation Complia nce EMC • FCC Pa rt 1 5, Cl ass A • EN55022, Clas s A • EN55024 Safety • UL60950-1 /CSA C22.2 No. 60950-1 • IEC/EN 60950 -1 • AS/NZS 60950- 1 PSTN Re gulator y • These d evices are not in tended for conne ction to the PST N. Radio and T V [...]

Authorized European Representative 117 Models 2603, 2621, and 2635 User Manual A • C omplianc e info rmation Authorized Eur opean R epresentative D R M Green European Co mpliance Ser vices Limited. Avalon House, Marcham Road Abingdon , Oxon OX14 1UD, U K[...]

118 Appendix B Specifi cations Chapter cont ents Gener al Cha racteri stics .................. ........... ............ ................. ........... ........... ............ ................ ............ ....... .... .....119 Ethernet . ........... ........... ............ ................ ............ ........... ........... ............ ........[...]

General Characteris tics 119 Models 2603, 2621, and 2635 User Manual B • Specif icati ons General Characteristic s • Compact l ow-cos t route r/bri dge • 10/100 Etherne t • Unlimited h ost suppor t. • Com prehens ive har dware diag nostics , works with any op erating system , easy m aintenan ce and eff ortless installation. • Buil t-in [...]

Protocol Support 120 Models 2603, 2621, and 2635 User Manual B • Specif icati ons Pr otocol Support • Complete inte rnetworking w ith IP (RFC 741), TCP (RFC 793) , UDP (RFC 768), ICMP (RFC 950), ARP (RFC 826). • IP Router with RIP (RFC 105 8), RIPv2 (RFC 2453) , • Up to 64 static ro utes with user selectable priority over RIP/OS PF routes. [...]

Security 121 Models 2603, 2621, and 2635 User Manual B • Specif icati ons Secu rity • Packet filt ering fir ewall fo r cont rolled acces s to and from LAN/WAN. S upport for 25 5 rule s in 3 2 fil ter set s. 16 indivi dual connection prof iles. • DoS Dete ction/protection. Intr usion detection, Lo gging of session, bl ocking and intrusion even[...]

122 Appendix C Cable Recommendations Chapter cont ents Ethernet Cable ................... ........... ........... ................. ............ ........... ........... ................. ........... ....... ..... ........... .....123 Adapter ........ ............ ........... ................. ........... ........... ............ ........... .......[...]

Ethernet Cable 123 Models 2603, 2621, and 2635 User Manual C • Cable Recommendations Ethernet C able Ether net cabl e (P/N 1 0-2500) ( ref er to “RJ- 45 shie lded 10/1 00 Ether net po rt” on page 125) Adapter EIA-561 t o DB-9 ( P/N 16F-561) ( refe r to “RJ-45 non- shielde d RS-232 co nsole po rt (EIA-5 61)” on page 125 ) The interconnecti[...]

124 Appendix D OnSite Physical Conn ectors Chapter cont ents RJ-45 shiel ded 10/ 100 Ethernet port .............. ........... ............ ........... ................. ........... ........... ............ ........... .....125 RJ-45 non- shield ed RS-232 conso le port (EIA-561 ) ................... ............ ........... ................. .......[...]

RJ-45 shielded 10/100 Ethern et port 125 Models 2603, 2621, and 2635 User Manual D • OnSite Physical Connectors RJ-45 sh ielded 10/100 Ethernet por t Assuming the MD I-X switch is in the out pos ition. RJ-45 no n-shielded RS-232 c onsole por t (EIA-56 1) The RS-232 serial control port of the OnSite is configured to operate as a DCE. Table 7. Ethe[...]

Serial port 126 Models 2603, 2621, and 2635 User Manual D • OnSite Physical Connectors Serial port V .35 (M/34 an d DB-25 Conne ctor) The Mode l 2635 has a DB-25 co nnector f or the V.35 int erface. table 9 provid es the pinouts f or the M/34 and DB-25 con nectors. Table 9. V.35 pinout for M /34 & DB-25 connectors M/34 Pin No. DB-25 Pin No. S[...]

Serial port 127 Models 2603, 2621, and 2635 User Manual D • OnSite Physical Connectors X.21 (DB- 15 Connector) The X.21 i nterface in t he Model 2 621 may be configur ed for eith er DTE or DCE. Def ault is DCE. Figure 8 5. X.21 D B-15 connect or Table 10. X.21 Interface (Model 2621) Pin No . Circuit Signal Name Direct ion 1 G Signal Ground or Com[...]

Serial port 128 Models 2603, 2621, and 2635 User Manual D • OnSite Physical Connectors E1/T1 (RJ -48C Co nnector ) The T1/E 1 transmit signals are not polarity sensitive, eve n though they hav e the traditional des ignation of Tip and Ring. Figure 86. T1/E 1 RJ-48C connector Table 11. T 1/E1 Port Pin No. Signal 1 Receive (Ring) 2 Receive (Tip) 3 [...]

129 Appendix E Command Line Interface (CLI) Op eration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ... ......... ........... .....130 CLI Termin ology ............... ........... ........... ............ ................. ......[...]

Introduction 130 Models 2603, 2621, and 2635 User Manual E • Command Line Interface (C LI) Operation Intr oduction The modem configuration and status ca n al so be view and m odified through the consol e, which is acc essible through the RS-232 seri al port o r through a Telne t sessio n over Ether net. CLI T ermi nology In order to use the C LI [...]

CLI T ermi nolo gy 131 Models 2603, 2621, and 2635 User Manual E • Command Line Interface (C LI) Operation By entering a keyword followed by a space and “?” the options available will print immediately without p ress - ing enter. Th e previously en tered comman ds are repr inted on the next lines. For examp le: fi ethernet ?[After typing the[...]

Administ ering user acco unts 132 Models 2603, 2621, and 2635 User Manual E • Command Line Interface (C LI) Operation ip interface ip1 list secondaryipaddresses <enter> Secondary IP addresses for interface: ip1 ID | IP Address -----|----------------- ----------------------- In this example ther e was not a secondary IP address. Now save the[...]

Administ ering user acco unts 133 Models 2603, 2621, and 2635 User Manual E • Command Line Interface (C LI) Operation Note No che ck is mad e for any curr ent passwo rd which m ay have b een set for th e user. If you wi sh to change the pass word for anot her user , ente r the co mmand: user change <username> This co mmand logs you i nto th[...]