Cyclades Access Router Cyclades-PR2000 инструкция обслуживания

Cyclades-PR2000 Installation Manual Access Router Cyclades Corporation[...]

Cyclades-PR2000 Installation Manual V ersion 1.2 – May 2002 Copyright (C) Cyclades Corporation, 1998 - 2002 We believe the information in this manual is accurate and reliable. However , we assume no responsibility , financial or otherwise, for any consequences of the use of this Installation Manual. This manual is published by Cyclades Corporatio[...]

Cyclades-PR2000 T able of Contents 3 T able of Contents CHAPTER 1 HOW TO USE THIS MANUAL .............................................................................................. .......... 7 Installation Assumptions ....................................................................................................... ........................[...]

Cyclades-PR2000 T able of Contents 4 The IP Protocol ................................................................................................................ ................................. 49 The Transparent Bridge Protocol ................................................................................................ ..................[...]

Cyclades-PR2000 T able of Contents 5 Creation of user accounts and passwords ........................................................................................ ............... 87 IP Accounting .................................................................................................................. ................................. 89[...]

Cyclades-PR2000 T able of Contents 6 T esting the W AN Interfaces ..................................................................................................... ....................... 123 APPENDIX B HARDWA RE SPECIFICA TIONS ............................................................................................ ... 126 General Specific[...]

Cyclades-PR2000 7 Chapter 1 - How T o Use This Manual CHAPTER 1 HOW TO USE THIS MANUAL Three Cyclades manuals are related to the PR2000. 1 The Quick Installation Manual -- provided with the router , 2 The Installation Manual -- available electronically on the Cyclades web site, 3 The CyROS Reference Guide -- also available electronically on the Cyc[...]

Cyclades-PR2000 8 Chapter 1 - How T o Use This Manual Chapter 12 - Filters and Rules - demonstrates how to protect your router from undesired traffic. Chapter 13 - IPX - presents the hidden menus available only in routers with IPX activated. Chapter 14 - Virtual Private Network - describes CyROS’ VPN implementation. Appendix A - Troubleshooting -[...]

Cyclades-PR2000 9 Chapter 1 - How T o Use This Manual Conventi on Des cri ption CONFIG=>I NTERFACE=>L A combinatio n of menu ite ms, with the l ast bein g either a menu item, a paramet er, or a command. In this example, L lists the interface c onfigurat ion. <INTERF ACE> A variable menu item th at depends on hardwar e opt ions or a choi[...]

Cyclades-PR2000 10 Chapter 1 - How to Use This Manual Cyclades T echnical Support and Contact Information All Cyclades products include limited free technical support, software upgrades and manual updates. These updates and the latest product information are available at: http://www .cyclades.com ftp://ftp.cyclades.com/pub/cyclades Before contactin[...]

Cyclades-PR2000 11 Chapter 1 - How to Use This Manual The mailing address and general phone numbers for Cyclades Corporation are: Cyclades Corporation Phone: + 01 (510) 770-9727 Fax: + 01 (510) 770-0355 41829 Albrae Street Fremont, CA 94538 USA[...]

Cyclades-PR2000 Chapter 2 - What is in the Box 12 CHAPTER 2 WHA T IS IN THE BOX The Cyclades-PR2000 is accompanied by the following accessories: Back Panel of PR2000 Console Cable Labeled “Conf” T o COM Port of Computer Power Cable T o W all Outlet Cyclades - PR2000 WAN 1 WAN 1 WAN 2 WAN 2 P o w e r P l u g Power Plug O n O f f On Off Ethernet [...]

Chapter 2 - What is in the Box 13 Cyclades-PR2000 • Quick Installation Manual • Console Cable • Installation Manual & Reference Guide (on CD) • Mounting Kit • T wo straight-through cables • Power Source & Cable • T wo V .35 Adapters • Gender Changer Figure 2.1 shows which cables are used for each type of modem and how everyt[...]

Cyclades-PR2000 Chapter 3 - Using CyROS Menus 14 Chapter 3 Using CyROS Menus This chapter explains CyROS menu navigation and special keys. There are four ways to interact with CyROS: • T raditional menu interface using a console or T elnet session, • CyROS Management Utility based on interactive HTML pages, • SNMP (explained in the CyROS Refe[...]

Chapter 3 - Using CyROS Menus 15 Cyclades-PR2000 Once the console connection is correctly established, a Cyclades banner and login prompt should appear on the terminal screen. If nothing appears, see the first section of the troubleshooting appendix for help. The second step is to log in. The preset super-user user ID is “super” and the corresp[...]

Cyclades-PR2000 Chapter 3 - Using CyROS Menus 16 Special Keys <Enter> or <Ct rl+ M> Th ese k eys a re us ed to en d t h e i np ut of a v a lu e. <ESC> or <Ctrl+I> These ke ys are used to cancel a selection or return t o the previous menu. In some isolated cases, thi s key jumps to the next me nu in a series of menus at the s[...]

Chapter 3 - Using CyROS Menus 17 Cyclades-PR2000 The CyROS Management Utility After one of the interfaces has been connected and configured, there is another way to interact with CyROS. T ype the IP address in the location field in an HTML browser of a PC connected locally or remotely through the configured interface. A super-user ID and password w[...]

Cyclades-PR2000 Chapter 3 - Using CyROS Menus 18 The link Configuration Menu Interface will present an HTML version of the CyROS Main Menu, described previously . Clicking on an interface will show its current status and some additional information. Clicking on End HTTP Session will terminate the connection.[...]

Cyclades-PR2000 19 Chapter 4 - Step-by-Step Instructions CHAPTER 4 STEP-BY-STEP INSTRUCTIONS FOR COMMON APPLICA TIONS This chapter provides detailed examples that can be used as models for similar applications. T urn to the example that is closest to your application, read the explanations, and fill in the blank spaces with parameters appropriate t[...]

Cyclades-PR2000 20 Chapter 4 - Step-by-Step Instructions STEP ONE The first step is to determine the parameters needed to configure the Ethernet interface (ETH0). The parameters in the Network Protocol Menu (IP) are shown in Figure 4.2. Fill in the blanks for your application in the right-most column. These parameters will be entered into the route[...]

Cyclades-PR2000 21 Chapter 4 - Step-by-Step Instructions STEP TWO No more parameters are necessary for the Ethernet interface. The other interface to be configured is the SW AN. The SWAN physical media parameters are shown in Figure 4.3. Fill in the values for your application. The SW AN configuration is described in more detail in chapter 6 of the[...]

Cyclades-PR2000 22 Chapter 4 - Step-by-Step Instructions Me nu CON FIG=>INTERFACE=>SW AN=>NETWORK PROTOCOL=>IP Para meter Exa mple You r Appl ica tion Act ive or In activ e Act ive en able s IP commu nic at ion (IPX and Transparent Bridge are not used in this example). Interface U nnumbered/ Num ber ed Num ber ed Primary IP Address 0.0.[...]

Cyclades-PR2000 23 Chapter 4 - Step-by-Step Instructions STEP FOUR The Encapsulation parameters for PPP are less straight-forward. Many of them are based on decisions that cannot be shown in a diagram. Fortunately , the choices made here will mostly effect the performance of the link, rather than whether it works or not. Fill in the parameters appr[...]

Cyclades-PR2000 24 Chapter 4 - Step-by-Step Instructions STEP FIVE A static route must be added to tell the router that all traffic not intended for the local LAN should be sent to the Access Provider . Chapter 9 of the Installation Manual explains static routes and other routing methods available in CyROS. Fill in the spaces in Figure 4.6 with the[...]

Cyclades-PR2000 25 Chapter 4 - Step-by-Step Instructions STEP SEVEN NA T parameters will now be determined for routing outside of the local LAN. Network Address Translation maps the local IP addresses, registered in the local address range menu below , to the one global IP address assigned by the access provider . Local IP addresses not indicated i[...]

Cyclades-PR2000 26 Chapter 4 - Step-by-Step Instructions Instructions for creating a backup of the configuration file. Use the menu option ADMIN =>WRITE CONFIGURA TION =>TO FTP SERVER. Fill in the IP address of the computer where the configuration file should be saved, the file name, the directory name, and the user account information. This [...]

Cyclades-PR2000 27 Chapter 4 - Step-by-Step Instructions Example 2 A LAN-to-LAN Example Using Frame Relay This section will guide you through a complete router installation for the connection of two LANs via Frame Relay . Figure 4.9 shows the example system used in this section. Spaces have been provided next to the parameters needed for the config[...]

Cyclades-PR2000 28 Chapter 4 - Step-by-Step Instructions STEP ONE The first step is to determine the parameters needed to configure the Ethernet interface (ETH0). The parameters in the Network Protocol Menu (IP) are shown in Figure 4.10. Fill in the blanks for your application in the right-most column. These parameters will be entered into the rout[...]

Cyclades-PR2000 29 Chapter 4 - Step-by-Step Instructions STEP TWO No more parameters are necessary for the Ethernet interface. The other interface to be configured is the SW AN in slot 1. The SWAN physical media parameters are shown in Figure 4.1 1. Fill in the values for your application. The SW AN configuration is described in more detail in chap[...]

Cyclades-PR2000 30 Chapter 4 - Step-by-Step Instructions STEP THREE The network protocol parameters, shown in Figure 4.12, are similar to those for the Ethernet interface. Fill in the parameters for your network in the right-most column. Me nu CON FIG=>INTERFACE=>SW AN=>NETWORK PROTOCOL=>IP Para meter Exa mple You r Appl ica tion Act iv[...]

Cyclades-PR2000 31 Chapter 4 - Step-by-Step Instructions STEP FOUR The Encapsulation parameters for Frame Relay are less straight-forward. Many of them are based on decisions that cannot be shown in a diagram. Fortunately , the choices made here will mostly effect the performance of the link, rather than whether it works or not. Fill in the paramet[...]

Cyclades-PR2000 32 Chapter 4 - Step-by-Step Instructions Me nu CON FIG=>INTERFACE=>SW AN=> ENCAPSULATION=>FRAME RELAY=><ESC>=>ADD DLC I Para meter Exa mple You r Appl icat ion DLCI Number Sixteen. This number is supplied b y the Pu bl ic F r am e Re l a y net w o rk pr ov i d er . Fram e Rel a y Ad dr es s Ma p Static , whic[...]

Cyclades-PR2000 33 Chapter 4 - Step-by-Step Instructions Me nu CON FIG=>STAT IC ROUTES=>IP=>AD D ROUTE Para meter Exa mple You r Appl ica tion Destination I P Address 15.0.0.0 Subnet Ma sk 255.255.255.0 Gateway or Interface gateway Gateway I P Address 200.240.230.1 Met r i c One -- n um b er o f r o ut e rs bet wee n rou te r being configu[...]

Cyclades-PR2000 34 Chapter 4 - Step-by-Step Instructions Instructions for creating a backup of the configuration file. Use the menu option ADMIN =>WRITE CONFIGURA TION =>TO FTP SERVER. Fill in the IP address of the computer where the configuration file should be saved, the file name, the directory name, and the user account information. This [...]

Cyclades-PR2000 35 Chapter 4 - Step-by-Step Instructions Example 3 Link Backup This example shows the configuration of a backup link, with a swan connection to a public Frame Relay Network providing the primary link and a SW AN with a PPP connection providing the secondary link. Figure 4.16 shows the networks used in this example. It is assumed tha[...]

Cyclades-PR2000 36 Chapter 4 - Step-by-Step Instructions STEP ONE The bandwidth used by CyROS for multilink circuit calculations is that given in the traffic control menu, rather than the actual physical bandwidth available. If this bandwidth value is not set, the preset value (zero) will be used and the multilink circuit will not function. The ban[...]

Cyclades-PR2000 37 Chapter 4 - Step-by-Step Instructions Me nu CON FIG=>MULTILINK=>MULTILINK C IRCU IT NUMBER=>ADD/ MODIFY INTER FACE Para meter Exa mple You r Appl ica tion Slot N SWAN 1 Ty pe of In t e rf a c e Mai n Time to Activate Backup After Th is Link Goes Down 5 Time to Deactivate Backup After Th is Link Retu rns 20 FIGURE 4.18 AD[...]

Cyclades-PR2000 38 Chapter 4 - Step-by-Step Instructions STEP THREE Up to this point, the configuration can be used either for link back up or for load back up. This example shows link back up, but parameters applicable to load back up will be mentioned when they appear . Complete information on the multilink circuit concept is provided in chapter [...]

Cyclades-PR2000 39 Chapter 4 - Step-by-Step Instructions STEP FOUR Now , a static backup route must be created for the secondary link. It is assumed that a route of some sort (static, RIP , etc.) already exists for the primary link. The static route parameters for the example secondary link are shown in Figure 4.21. Fill in the parameters for your [...]

Cyclades-PR2000 40 Chapter 4 - Step-by-Step Instructions STEP SIX The multilink circuit can be tested by temporarily deactivating the interface on the primary link. This is done in the ADMIN=> ST ART/STOP INTERF ACE menu by selecting the SW AN interface. If there is traffic, the backup link should then take over , and the menu item INFO =>SHO[...]

Chapter 5 - Configuration of the Ethernet Interface 41 Cyclades-PR2000 CHAPTER 5 CONFIGURA TION OF THE ETHERNET INTERFACE The PR2000 has one Ethernet 10Base-T interface, provided in a standard RJ-45 modular jack, which should be connected to an Ethernet hub or switch. Use a standard 10Base-T straight-through cable (not included). When the Ethernet [...]

Cyclades-PR2000 Chapter 5 - Configuration of the Ethernet Interface 42 Network Protocol Menu (Continued) Parameter Des cription Sec ondary IP Address App lies t o Numb ered interfaces. Indicates a second (or third, etc. up to eight) IP address that can be us ed to refer to this interface. This p arameter a nd the next are rep eat ed un t i l n o va[...]

Chapter 5 - Configuration of the Ethernet Interface 43 Cyclades-PR2000 IP Bridge An IP Bridge is used to divide a network without subnetting. Whenever a subnetwork is created, two IP numbers are lost — one describing the network and the other reserved for broadcast. This does not occur with an IP Bridge. PR2000 PR3000 ETH0 ETH0 200.240.240.1 200.[...]

Cyclades-PR2000 Chapter 5 - Configuration of the Ethernet Interface 44 Network Protocol Menu (Continued) -- (IP Bridge) Parameter Des cription I P B ridge Activates t he IP Bridge functionality. The follow ing para met ers app ly only if I P Bri dge i s Active . Initi al IP Addre ss to be Bridged Indicates the start of the range of IP addresses to [...]

Chapter 6 - The SW AN and Async Interfaces 45 Cyclades-PR2000 CHAPTER 6 THE SW AN AND ASYNC INTERF ACES This chapter describes how to configure a SW AN interface. The physical link should be set up as shown in chapter 2, according to the type of modem or device at the other end of the connection and the type of SW AN port. The async interface, prov[...]

Chapter 6 - The SW AN and Async Interfaces 46 Cyclades-PR2000 STEP TWO The second step is to choose a data-link protocol in the Encapsulation Menu. There are many encapsulation options on this interface. For synchronous communication: • Frame Relay: the Frame Relay Protocol is based on frame switching and constructs a permanent virtual circuit (P[...]

Chapter 6 - The SW AN and Async Interfaces 47 Cyclades-PR2000 STEP FOUR If PPP Encapsulation is being used, a type of authentication should be chosen. This is done in the authentication menu. Authentication Menu CONFIG=>INTERF ACE=>SWAN=>AUTHENTICA TION Parameter Des cription Aut hen tica ti on Ty pe Local uses the list of users defined in[...]

Cyclades-PR2000 Chapter 7 Network Protocols 48 CHAPTER 7 NETWORK PROTOCOLS The second step in most interface configurations is to choose which network protocol to use and assign values to the relevant parameters. At least one of IP , T ransparent Bridge, or IPX (optional, and discussed in chapter 13) must be activated. Use the information provided [...]

Chapter 7 Network Protocols 49 Cyclades-PR2000 The IP Protocol If the preset values provided by the operating system are accepted, the interface will work at a basic level. The most common options are explained in the following table. Network Protocol (IP) Menu CONFIG=>INTERF ACE=><LINK>=>NETWORK PROTOCOL=>IP Parameter Des criptio[...]

Cyclades-PR2000 Chapter 7 Network Protocols 50 Network Protocol (IP) Menu (Continued) Parameter Des cription IP MTU Assigns the si ze of the Ma ximum Tra nsmission Unit fo r the inte rface. This determines whether or not a given IP datagram is fra gmented . NAT Determines the ty pe of IP address if NAT is be ing used. Use Gl oba l otherwise. See ch[...]

Chapter 7 Network Protocols 51 Cyclades-PR2000 The T ransparent Bridge Protocol The T ransparent Bridge Protocol can be used in conjunction with either IP or IPX. A detailed explanation of its use appears in section 4.6 of the CyROS Reference Guide. T ransparent Bridge Menu CONFIG=>INTERFACE=>SW AN=>NETWORK PROTOCOL=>TRANSP ARENT BRIDGE[...]

Cyclades-PR2000 Chapter 8 - Data-Link Protocols (Encapsulation) 52 CHAPTER 8 DA T A-LINK PROTOCOLS (ENCAPSULA TION) Each encapsulation option is presented in a separate section in this chapter . Not all data-link protocols are available for all interfaces. PPP (The Point-to-Point Protocol) PPP is the only encapsulation option than can be either syn[...]

Cyclades-PR2000 53 Chapter 8 - Data-Link Protocols (Encapsulation) PPP Menu (Continued) Parameter Des cription Di sabl e LCP E c ho Requests LCP (Link Control Protoc ol) messages a re norm ally exchanged to m onitor the s tatus of the link. Disabling these messages re duces traffic, but the link then has no way o f kno win g i f the other end is st[...]

Cyclades-PR2000 Chapter 8 - Data-Link Protocols (Encapsulation) 54 CHAR The configuration of the CHAR data-link protocol is confined to one menu, CONFIG =>INTERF ACE =><LINK> =>ENCAPSULA TION =>CHAR. Informa tion about all the parameters appearing in this menu is provided in the table below . Not all parameters will appear for all[...]

Cyclades-PR2000 55 Chapter 8 - Data-Link Protocols (Encapsulation) PPPCHAR The configuration of the PPPCHAR protocol is contained in the menu CONFIG =>INTERF ACE =><LINK> =>ENCAPSULA TION =>PPPCHAR. The parameters for PPPCHAR are a combination of those for PPP and CHAR. See the tables describing the PPP and CHAR options for guidan[...]

Cyclades-PR2000 Chapter 8 - Data-Link Protocols (Encapsulation) 56 The Local Management Interface (LMI) Protocol provides services not available in simple Frame Relay . It is used for controlling the connection between the user and the network. It monitors this link, maintains the list of DLCs, and sends status messages about the PVCs. A separate v[...]

Cyclades-PR2000 57 Chapter 8 - Data-Link Protocols (Encapsulation) STEP TWO After configuring the general parameters, each DLC must be defined. An example will be used to demonstrate the procedure. A public Frame Relay network connecting offices in São Paulo, Rio de Janeiro, Salvador , and Recife is shown in Figure 1 1.1. Each router will have a r[...]

Cyclades-PR2000 Chapter 8 - Data-Link Protocols (Encapsulation) 58 Rio de Janeiro Network: 192.168.201.0 Recife Network: 192.168.202.0 São Paulo Network: 192.168.200.0 Salvador Network: 192.168.203.0 Router Router Router Router 200.1.1.1 200.1.1.4 200.1.1.3 200.1.1.2 11 81 21 FIGURE 8.1 PERMANENT VIRTUAL CIRCUITS BETWEEN OFFICES[...]

Cyclades-PR2000 59 Chapter 8 - Data-Link Protocols (Encapsulation) Add DLCI Menu CONFIG=>INTERF ACE =><LINK> =>ENCAPS =>FRAME RELA Y => <ESC> =>ADD DLCI Parameter Des cription DLCI Number Used to identif y the DLC. This number is supplied b y the Public Frame Rela y network provider. The DLC Is are stored in a table w [...]

Cyclades-PR2000 Chapter 8 - Data-Link Protocols (Encapsulation) 60 Modem or DSU/CSU X.25 Switch / DCE Switch / DCE Router / DTE Router / DTE FIGURE 8.2 PUBLIC X.25 NETWORK EXAMPLE X.25 A Cyclades Router can act either as a DTE (Data-terminal Equipment) connected to a public X.25 network or as a DTE or DCE (Data circuit-terminating Equipment) as par[...]

Cyclades-PR2000 61 Chapter 8 - Data-Link Protocols (Encapsulation) X.25 Menu CONFIG=>INTERF ACE=><LINK>=>ENCAPSULA TION =>X.25 Parameter Des cription X.121 (Local DTE) Addr ess Address assigned to this int erface (provi ded b y the public X.25 Net work Provider). C an be up to 15 digit s. Switch Mode Active Causes the Router to ac[...]

Cyclades-PR2000 Chapter 8 - Data-Link Protocols (Encapsulation) 62 X.25 Menu (Continued) Parameter Des cription Packet Size The packet size to be sent acr oss the interface. This n umber may be negoti ated if the Packet Size Facility is utilized (s ee last parameter i n this table). Num b er o f R e t rie s N 2 Num ber o f t i m e s a n i n fo r m [...]

Cyclades-PR2000 63 Chapter 8 - Data-Link Protocols (Encapsulation) STEP TWO The next step is to create a static routing table associating each remote X.121 address with an IP address or a TCP Socket location. This is done in the Add DTE menu, which appears at the end of the X.25 parameter list. It can be reached by passing through all X.25 paramete[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 64 CHAPTER 9 ROUTING PROTOCOLS Routing Strategies Routing can be done either statically or dynamically . Static Routing Static routing is recommended when the network contains a small number of routers and other equipment. When a system is simple and without redundant links, static routing is the simple[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 65 Static Routes Routers used in very small or simple networks may use static routes as the primary routing method. When RIP or OSPF are used, some static routes may still be needed. Configuration of static routes will be explained using two examples. 10.0.0.0 Mask: 255.0.0.0 Router 1 10.0.0.1 10.0.0.2 [...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 66 Unnumbered Interfaces Point-to-Point Connection Slot 1 ETH0 ETH0 Slot 3 Router 1 10.0.0.3 192.168.100.1 Router 2 A B E F Network 3 Network 1 FIGURE 9.2 ST A TIC ROUTING EXAMPLE 2 Figure 9.2 shows another static routing example to explain the Gateway or Interface parameter . Between the two routers is[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 67 Add Static Route Menu CONFIG =>ST A TIC ROUTES =>IP =>ADD ROUTE Parameter Des cription Destinat ion IP Address Add ress that r oute will lead to. To configure a default route, type "de fault" for this parameter, oth erwise enter 0.0.0. 0 in both this and the n ext paramet er. Both [...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 68 RIP Configuration CyROS supports three basic types of RIP: 1 RIP1 [RFC 1058] 2 RIP2 with broadcast (compatible with RIP1) [RFC 1723] 3 RIP2 with multicast [RFC 1723] The primary difference between RIP1 and RIP2 is that only RIP2 advertises subnet masks and next hops. If the network contains equipment[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 69 OSPF The OSPF (Open Shortest Path First) routing protocol is significantly more complicated than RIP . The determination of which protocol is better suited to a given network is beyond the scope of this manual. An example network using OSPF is given in Figure 9.3. Router 0 Router 1 Router 2 Router 3 [...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 70 First, some definitions: • An Autonomous System (AS) is a portion of the network that will use a single routing strategy . It is made up of a backbone area and optionally of non-backbone areas. • OSPF Areas are sub-systems that have identical routing databases. An area generally has no knowledge [...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 71 OSPF Menu (continued) Ex terna l Me tri c Def ines the metr ic tha t wi ll be adver ti sed by O SPF. Ex ternal Me tri c Ty pe Fo r Type 1 , the total metric of this r oute is composed of the internal metric (inside the aut ono m ou s s ystem ) an d t he e xt ern a l m et r ic ( pr ov id e d i n t he [...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 72 OSPF Global Configurations STEP THREE After completing the OSPF interface configuration for all interfaces (even those that will not use OSPF), navigate to the OSPF Menu, CONFIG=>IP=>OSPF . Enter into the OSPF Global Commands menu and set the parameters as indicated in the table below . OSPF Gl[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 73 OSPF Global Commands (Continued) Parameter Des cription RIP External Metric- Ty pe Applie s when Advertise RIP routes is set to Yes . For Type 1 , the tota l metr ic of thi s route is composed of th e internal metric (inside the a utonomo us system) and the external metric (provide d in the previous [...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 74 Area Menu (continued) Area Range N Sta tus An Area Border Router (ABR) advertises link states for all net works within the area. The number of such advertisements can p otentia lly be r educed by condensing different IP networks in t o a single range. Area Range N Net Address App lies wh e n Area Ra [...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 75 STEP SIX It is not always possible to connect all areas directly to the backbone. When an area is connected to the backbone only through another area, two virtual links must be created. One from the backbone to the unattached area and one from the unattached area to the backbone. If this occurs in th[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 76 BGP-4 Configuration The BGP-4 routing protocol is used for routing on the Internet, performed between Autonomous Systems (ASs). An autonomous system is defined as: · A set of routers and networks under the same administration. · An interconnected network, where no router is reachable solely through[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 77 The last option is to aggregate the addresses contained in the local autonomous system in order to present an aggregated route to the outside world. This is done in the last step. 8. Aggregate the addresses contained in the AS. The steps defined above will now be clarified. STEP ONE The global parame[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 78 CONFIG=>IP=>BGP4=>GLOBAL Parameter Des cription BGP4 Protocol Activates the protocol. Local AS Number This number is assigned by the service provider. Router Identifier Usual ly the same as the Router ID, one o f the interfa ce IP addresses Clu ster Ide ntif ier On ly us ed w hen this rou te[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 79 STEP TWO The neighbor menu identifies the routers inside and outside the AS that will communicate with the router via BGP- 4. Each update message exchanged between routers contains path attributes. How these path attributes are manipulated by the router when routes are received or sent to each neighb[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 80 CONFIG=>IP=>BGP4=>NEIGHBOR=>ADD (continued) Keepalive Interv al between keepalive messag es sent to this neighbor. Connection Retr y Time W hen a connection with this neighbor is broken, the rout er try to reconnect with frequency 1 divide d by the Connection R etr y Tim e. Start Time Tim[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 81 1 2 3 4 5 6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . PR3000 100.10.0.0/16 U n d e s i r e d R o u t e B a c k u p R o u t e P r t e e f e r r e d R o u FIGURE 9.5 MUL TIPLE ROUTES CONT AINING AS 5 CONFIG=>IP=>BGP4=>ACCESS LIST=>ADD Parameter Description Access L[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 82 STEP FOUR An access list needs at least one rule. The example in Figure 9.6 shows three access lists, each one with several rules. Each neighbor can be assigned up to 6 access lists, as seen in step 2. Route Map Discarded Routes Discarded Routes Discarded Routes Seq. 4 Seq. 10 Access list popeye_comm[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 83 CONFIG=>IP=>BGP4=>ACCESS LIST=>CONFIGURE RULES=><ACCESS LIST NAME> =>ADD Parameter Des cription Rule Status Enables the rule. Scope See explanation of this parameter in step 3. Rule AS Position Applies only for Access L ist Type equal to AS Path. Limits the search on AS number[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 84 STEP SIX A route map can either apply to all routes not discarded by the access lists, as shown in Figure 9.6, or to routes filtered by a particular access list, as shown in Figure 9.7. Route Map Discarded Routes Discarded Routes Seq. 4 Seq. 10 Access list popeye_comm type Community Access list popey[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 85 CONFIG=>IP=>BGP4=>ROUTE MAP=>ADD Parameter Des cription Route Map Numb er Identifies the route map Sequence Number Identifies the sequence within the r oute map. The numbers n eed not be consecutive. Match List Name Associates an access list with this sequence, as sho wn in the figure abo[...]

Cyclades-PR2000 Chapter 9 - Routing Protocols 86 CONFIG=>IP=>BGP4=>AGGREGA TE ADDRESSES=>ADD Parameter Des cription Num b er An ID f o r ref e r e nc e. Address The aggregated addres s. In the example, 200.5 0.50.0. Mask ( bi tl en ) Th e m ask f or th e a gg reg a te d add r es s. I n th e e xampl e , 23. AS Set Yes ca use s t h e r ou[...]

Cyclades-PR2000 Chapter 10 - CyROS, the Operating System 87 CHAPTER 10 CYROS, THE OPERA TING SYSTEM This chapter explains various operating system features that are not covered in other chapters: • creation of the host table • creation of user accounts and passwords • IP Accounting Creation of the host table CyROS allows identification of hos[...]

Cyclades-PR2000 Chapter 10 - CyROS, the Operating System 88 Other users can be created and the user “usr” can be assigned a password. The password of the super user should be changed as soon as possible. The menu CONFIG=>SECURITY=>USERS allows addition, deletion, and modification of the list of users. The parameters are: • User Name, ?[...]

Cyclades-PR2000 Chapter 10 - CyROS, the Operating System 89 login name is indicated when the auto user is configured, the user is logged in to the remote host directly (though a password may be necessary , depending on the remote host configuration). IP Accounting IP Accounting is used to count the total number of packets allowed (or not) to pass t[...]

90 Cyclades-PR2000 Chapter 1 1 - NA T CHAPTER 1 1 NA T (NETWORK ADDRESS TRANSLA TION) NA T exists to convert local IP addresses into Internet “global” IP addresses. Internet IP addresses are assigned by Internet providers. Due to the explosion of the internet, these numbers are scarce. Certain ranges of IP addresses are reserved for internal us[...]

91 Cyclades-PR2000 Chapter 1 1 - NA T There are two types of NA T available in CyROS -- Normal NA T and Expanded NA T . This chapter describes Expanded NA T . A description of Normal NA T appears in Chapter 4 of the CyROS Reference Guide. W hat is th e difference betw een Expande d and Normal Mode NAT? The Normal Mode is a pre vious implementation [...]

92 Cyclades-PR2000 Chapter 1 1 - NA T NAT Sta tic Transla tion Tabl e # Gl oba l address / port local addr ess / Port Proto co l 1 20 0.2 40.230.225 / 20 192.168.0. 30 / 20 TPC 2 20 0.2 40.230.225 / 21 192.168.0. 30 / 21 TPC 3 20 0.2 40.230.225 / 80 192.168.0. 31 / 80 TPC T ypes of Address Translation In dynamic address translation , a pool of glob[...]

93 Cyclades-PR2000 Chapter 1 1 - NA T An overview of the NA T menu is shown in the table below. NA T Menu CONFIG =>SECURITY =>NA T Menu Option Descript ion General P arameters for enabling NAT and c hoosing the NAT Mode. Also includes port translation option. Global Address The first and last IP address es in th e range. In the example, these[...]

94 Cyclades-PR2000 Chapter 1 1 - NA T STEP TWO The parameters in the T imeout Menu are explained in more detail below. The preset values should be appropriate for most applications. T imeout and Options Menu CONFIG =>SECURITY =>NA T =>TIMEOUT AND OPTIONS Parameter Des cription UDP Timeout Inactivity time required before a UDP transla tion [...]

95 Cyclades-PR2000 Chapter 1 1 - NA T STEP FOUR If static translations are to be performed, as described in the example, the parameters in the Static T ranslation Menu must be set. A brief explanation of each parameter is given in the table. Static T ranslation Menu CONFIG =>SECURITY =>NA T =>ST A TIC TRANSLA TION => ADD ENTRY Parameter[...]

96 Chapter 12 - Filters and Rules Cyclades-PR2000 CHAPTER 12 RULES AND FIL TERS There are four basic types of rules: 1 IP filter rules, 2 Radius rules (actually a combination of previously defined IP filter rules), 3 traffic control rules, and 4 transparent bridge rules (similar to IP filter rules, but for applications that use a transparent bridge[...]

97 Cyclades-PR2000 Chapter 12 - Filters and Rules Config IP Rule List Name Rule Status Rule List T ype Default Scope Incoming Rule List Name Outgoing Rule List Name Linked Rule List Name N Add Rule List Rules List Insert as Rule Number Rule Status Scope Rule Priority Level Reserved Bandwidth Bandwidth Priority Level Protocol Source IP Operator IP A[...]

98 Chapter 12 - Filters and Rules Cyclades-PR2000 Exterior Router Interior Router Router Extension to Network Bastion Host ETH0 ETH0 192.168.0.2 192.168.0.3 10.0.0.0 172.16.0.0 192.168.0.1 Perimeter Network 192.168.0.0 Slot 1 Slot 1 FIGURE 12.2 FIREWALL EXAMPLE Figure 12.2 will be used to show how both an exterior router and an interior router woul[...]

99 Cyclades-PR2000 Chapter 12 - Filters and Rules Exterior Router The exterior router is the network’s first defense against attacks. For this reason, it is reasonable to prohibit all packets except for those explicitly allowed. This is done by choosing the Default Scope to be Deny . Thus, ALL desired traffic must be expressly allowed by the rule[...]

100 Chapter 12 - Filters and Rules Cyclades-PR2000 Steps necessary to activate filtering on the exterior router in the example: 1 There are two interfaces with two directions each. Filtering on link 1 requires the creation of two rule lists, called exterior_in and exterior_out . Create them using the menu CONFIG =>RULES LIST =>IP =>ADD RUL[...]

101 Cyclades-PR2000 Chapter 12 - Filters and Rules The configuration for “Let e-mail in” is shown in the following figure (obtained by selecting CONFIG =>RULES LIST =>IP =>L in the menus): Rules L ists Rule Li st Name Rule Default List Link ed Status Sc ope Type Rule List exterio r_in En abled Deny Filt er exterio r_out Enabled Deny Fi[...]

102 Chapter 12 - Filters and Rules Cyclades-PR2000 Filter_ list Name exter io r_out Rule 0 Status En abled Scope Pe rmit Protoco l TCP Source IP Operato r Equal Source IP start 192.168.0 .3 Source IP Mask 255.255.2 55.255 Destina tion IP O perator None Source Po rt Operat or Equal Source Po rt Start SMTP Destina tion Port Operato r Greater t han De[...]

103 Cyclades-PR2000 Chapter 12 - Filters and Rules Interior Router If an interior router exists in the network, the administrator may decide to use a Default Scope of Permit . In this case, all undesired traffic must be excluded by a rule in the rule list. In Figure 12.5, a conceptual equivalent of the interface is shown. All packets except those w[...]

104 Chapter 12 - Filters and Rules Cyclades-PR2000 The configuration for “Stop forged packets” is shown in the following listing: Rules L ists Rule List Nam e Rule Default List Linked Status Scope Type Rule List slot1_i n Enabled Permit Filter Filter_ list Name s lot1_in Rule 0 Status En abled Scope Deny Protoco l 0 Source IP Ope rator Equal So[...]

105 Cyclades-PR2000 Chapter 12 - Filters and Rules T raffic Rule Lists There are three kinds of traffic rules that can be configured in CyROS. The first two determine a division of bandwidth for traffic flowing out of the router: 1 T raffic Shaping (the division of bandwidth is strictly adhered to), 2 Bandwidth Reservation (the division with the la[...]

106 Chapter 12 - Filters and Rules Cyclades-PR2000 The third determines which services have priority flowing through the router: 3 Service Prioritization. An Internet provider has three clients connected to the same router . Client A is larger and without traffic control would overwhelm the router to the exclusion of Clients B and C. The administra[...]

107 Cyclades-PR2000 Chapter 12 - Filters and Rules Rules L ists Rule Li st Name Rule Default List Linked Status Sc ope Type Rule List traffic _1 Enabled Traffic Filter_ list Name traffi c_1 Rule 0 Status En abled Flow pr iority 0 Rule ba ndwidth 50% Bandwid th priority 1 Protoco l 0 Source IP Op erator Equal Source IP st art 11.11.1 1.0 Source IP M[...]

108 Chapter 12 - Filters and Rules Cyclades-PR2000 Rule 1 Status En abled Flow Pr iority 0 Rule ba ndwidth 25% Bandwid th priority 2 Protoco l 0 Source IP Op erator Equal Source IP st art 22.22.2 2.0 Source IP Ma sk 255.255.25 5.0 Destina tion IP Operato r None Source Por t Operator None Destina tion Port Operato r None Rule 2 Status En abled Flow [...]

109 Cyclades-PR2000 Chapter 12 - Filters and Rules An example showing the third type of traffic control is given in Figure 12.8. The network administrator wants to prioritize the access to his web server . He also wants to prioritize e-mail sent by his SMTP server , but the priority should be lower . All other traffic should have the lowest priorit[...]

110 Chapter 12 - Filters and Rules Cyclades-PR2000 The configured rules will appear as shown in the following listing. Rules L ists Rule Li st Name Rule De fault List Linked Status Sc ope Type Rule List web_acc ess Enabled Traffic Filter_ list Name web_a cc ess Rule 0 Rule 1 Status Enabled St atus Enab led Flow pr iority 1 Flow Pr iority 2 Rule ba [...]

Cyclades-PR2000 Chapter 13 - IPX 111 CHAPTER 13 IPX (INTERNETWORK PACKET EXCHANGE) IPX is an alternative to IP , proprietary to Novell. When IPX is activated, many new menus appear to allow configuration of this type of network. IP and IPX can both be active in the router simultaneously , and an interface can have both IP and IPX traffic passing th[...]

Cyclades-PR2000 Chapter 13 - IPX 112 Enabling IPX The first step is to activate the IPX feature in the router . This is accomplished using the menu option ADMIN =>ENABLE FEA TURES => IPX. The IPX protocol must also be activated in the menu CONFIG =>IPX => GENERAL. In this menu, the Internal Network Number (the unique number assigned to [...]

Cyclades-PR2000 Chapter 13 - IPX 113 The parameter Send SAP Update can be set to Demand, Periodic, or None. This parameter affects both SAP and RIP . Periodic causes the router to send these messages every minute, while choosing Demand will cause the router to send messages only when a message request is received. Frame Relay Frame Relay parameters[...]

Cyclades-PR2000 Chapter 13 - IPX 114 The routing table is displayed by the menu option INFO => SHOW ROUTING T ABLE => IPX. For the example, and using only the static route created above, the routing table appears as in Figure 13.2. Destin ation In terface/ Su bin terface/ Remote address hops tick s Type 000000 01 0 1 Primar yNet 00A0B0 00 Eth[...]

Cyclades-PR2000 Chapter 14 - Virtual Private Network Configuration 115 CHAPTER 14 VIRTUAL PRIV A TE NETWORK CONFIGURA TION The Virtual Private Network utility can be used on any link using IP routing. It is used to provide greater security between two or more networks connected through a public communications network. The basic concepts are present[...]

Cyclades-PR2000 Chapter 14 - Virtual Private Network Configuration 116 An example showing a local security network and two remote security networks is shown in Figure 14.2. The PR2000 in the local security network will be configured step by step. (Which network is considered local and which network is considered remote depends on the router being c[...]

Cyclades-PR2000 Chapter 14 - Virtual Private Network Configuration 117 ETH0 PR3000 Router RSG3 - Remote Security Gateway Router IP Address: 190.190.190.1 Link 2 IP: 190.190.190.1 Link 1 0.70.70.1 IP: 7 .16.0.0 IP:172 0.0.0.0 IP: 1 Link 1 IP: 50.50.50.1 IP Network IP:10..255.255.0 Router IP Address: 20.20.20.1 PR2000 Link 1 0.20.20.1 IP: 2 RSG2 RSG1[...]

Cyclades-PR2000 Chapter 14 - Virtual Private Network Configuration 118 STEP THREE Use the menu item INFO =>SHOW ROUTING T ABLE to confirm that the other Remote Security Gateways (RSGs), and all the networks included in the Remote Security Networks, are reachable. In the example, this would require that all of the following appear in RSG3’s rou[...]

Cyclades-PR2000 Chapter 14 - Virtual Private Network Configuration 119 STEP SIX Now , the Remote Security Networks must be defined. This is done in the CONFIG =>SECURITY =>VPN =>REMOTE IP NETWORKS =>ADD NETWORK menu. The IP address and network mask must be defined for all remote devices to be included in the remote network for VPN commu[...]

Cyclades-PR2000 Appendix A - T roubleshooting 120 APPENDIX A TROUBLESHOOTING What to Do if the Login Screen Does Not Appear When Using a Console. 1 Check the configuration of the terminal. The correct values are given in chapter 2. 2 Check to see if the router booted correctly . Before the login screen appears, boot messages should appear on the sc[...]

Cyclades-PR2000 Appendix A - T roubleshooting 121 What to Do if the Router Does Not Work or Stops W orking. 1 Check that the cables are connected correctly and firmly (see chapter 2, What is in the Box, for correct cable connection information). 2 Confirm that the Link LED is lit, indicating proper Ethernet cable termination. If it is not lit, chec[...]

Cyclades-PR2000 Appendix A - T roubleshooting 122 T esting the Ethernet Interface After configuring the Ethernet interface, return to the main menu using the <ESC> key as many times as is necessary . Save the configuration to flash memory (the operating system will ask how to save the configuration on the way back to the main menu). The simpl[...]

Cyclades-PR2000 Appendix A - T roubleshooting 123 T esting the W AN Interfaces The W AN interface can be tested using ping as described in the previous section. If the ping is not successful, check the routing table to see if a route to the destination exists (INFO =>SHOW ROUTING T ABLE). The menu items INFO =>SHOW ST A TISTICS =>SW AN and[...]

Cyclades-PR2000 Appendix A - T roubleshooting 124 • The S column reveals the stage of the test at the time the table was created — D = data transfer , S = synchronization. • The next 4 columns indicate bytes and packets sent and received. • The last three columns indicate the port with which the interface is communicating. The test s hould [...]

Cyclades-PR2000 Appendix A - T roubleshooting 125 LEDs The LEDs on the PR1000’s case display the following information: • Power - Lit when the PR1000 is turned on. • 10BT - Lit when the Ethernet link is being used for a fast Ethernet connection. • Col - Indicates collisions on the LAN. • Link - Lit when the Ethernet link is correctly term[...]

126 Cyclades-PR2000 Appendix B - Hardware Specifications APPENDIX B HARDW ARE SPECIFICA TIONS General Specifications The Cyclades-PR2000 power requirements and environmental restrictions are listed in Figure B.1. Pow er R e q ui r e m ents (e xt e r nal DC ad a p ter ) In put volt age r ang e 90 -264 VAC , 1 3 W Inp ut fr eq ue n c y ra ng e 47/ 63[...]

Appendix B - Hardware Specifications 127 Cyclades-PR2000 External Interfaces The W AN Interfaces The W AN interfaces are provided on a DB-25 female connector. The pinout diagram is not shown here, as it depends on which protocol (RS-232, V .25 or X.21) is configured. Please see the pinout diagrams for the cables used for each protocol to determine [...]

128 Cyclades-PR2000 Appendix B - Hardware Specifications The Asynchronous Interface ASYNCHRONOUS PORT Pin Signal 1 RTS 2 DTR 3 TxD 4 Ground 5 CTS 6 RxD 7 DCD 8D S R 1 8 FIGURE B.4 ASYNCHRONOUS INTERF ACE - RJ-45 FEMALE The Console Interface CONSOLE POR T Pin RS-232 S ig nal 1R T S 2D T R 3T X 4G r o u n d 5C T S 6R X 7 DCD 8D S R 1 8 FIGURE B.5 CON[...]

Appendix B - Hardware Specifications 129 Cyclades-PR2000 Cables The Straight-Through Cable 2 3 4 5 6 7 8 15 17 20 22 24 2 3 4 5 6 7 8 15 17 20 22 24 TxD RxD RTS CTS DSR Gnd DCD TxClk_DTE RxClk DTR RI TxClk_DCE TxD RxD RTS CTS DSR Gnd DCD TxClk_DTE RxClk DTR RI TxClk_DCE Pin DB-25 Male DCE / DTE DB-25 Male Cyclades Router Signal Straight-Through Cab[...]

130 Cyclades-PR2000 Appendix B - Hardware Specifications DB-25 - M.34 Adaptor DB-25 Female Signal PGnd RTS CTS DSR Gnd DCD TxD/V .35 (B) TxD/V .35 (A) RxD/V .35 (B) RxD/V .35 (A) TxClk_DTE/V .35 (B) TxClk_DTE/V .35 (A) TxClk_DCE/V .35 (B) DTR TxClk_DCE/V .35 (A) RxClk V .35 (A) RxClk V .35 (B) Male Retention Screw Female Retention Screw Female Rete[...]

Appendix B - Hardware Specifications 131 Cyclades-PR2000 The ASY/Modem Cable PR2000 RJ-45 / 8 pins Pin 3 6 2 5 1 7 8 4 Signal TxD RxD DTR CTS RT S DCD DSR Gnd Modem (DB-25) Pin 2 3 20 5 4 8 6 7 Signal TxD RxD DTR CTS RT S DCD DSR Gnd ASY/MODEM RJ-45 ASY/Modem Cable DB-25 Male FIGURE B.8 ASY/MODEM CABLE - RJ-45 TO DB-25 MALE The Cross Cable[...]

132 Cyclades-PR2000 Appendix B - Hardware Specifications DB-25 Male DB-25 Male Pin 1 3 2 4 5 7 8 20 6 13 11 14 12 24 17 15 19 25 16 21 13 18 Signal PGnd RxD TxD RTS CTS Gnd DCD DTR DSR R x DV . 3 5+( B ) TxD V .35 + (B) RxD V .35 - (A) TxD V .35 - (A) TxD V .35 - (A) RxClk TxClk DCE TxClk_DCE V .35 + (B) RxClk V .35 + (B) TxClk DTE V .35 - (B) TxCl[...]

Appendix B - Hardware Specifications 133 Cyclades-PR2000 DB-25 Loopback Connector 2 3 4 5 8 20 11 13 12 14 15 17 24 16 19 25 18 21 23 DB-25 Male FIGURE B.10 LOOPBACK CONNECTOR - DB-25 MALE[...]

Appendix C - Configuration Without a Console Cyclades-PR2000 134 APPENDIX C CONFIGURA TION WITHOUT A CONSOLE When a terminal or PC is not available for use as a console, the router has a special feature that allows configuration of the Ethernet interface from any PC on the LAN. The router “adopts” the destination IP address of the first non-UDP[...]

Cyclades-PR2000 Index 135 B Backup Link configuration 35 Bandwidth Reservation 105 Boot Messages 120 C Cables parallel 13 Router MD/V .35 13 with a DB-25 connector 121 Connection to an Internet Access Provider 19 Cyclades ftp site 10 telephones 10 CyROS menus 14 E Ethernet testing the interface 122 F Flash Memory 16 Frame Relay 27 DLCI 31 H Hardwar[...]

Cyclades Corporation 41829 Albrae Street Fremont, CA 94538 - USA Phone: (510) 770-9727 Fax: (510) 770-0355 www .cyclades.com Cyclades South America Phone: 55-1 1-5033-3333 Fax: 55-1 1-5033-3388 www .cyclades.com.br Cyclades Germany Phone: +49 (0)81 22 90 99-90 Fax: +49 (0)81 22 90 999-33 www .cyclades.de Cyclades UK Phone: +44 1724 277179 Fax: +44 [...]