Perle-systems 1700 Uživatelský manuál Strana 1

Perle 1700 SeriesPerle 1700 SeriesPerle 1700 SeriesPerle 1700 SeriesBridge / RoutersUser And SystemAdministration GuidePart number 5500071-14© Copyrig

Applications4CONSOLE10/100 BT LANMDI-X MDILAN/Console modulePower connectorRS-232/V.24LAN 2 moduleLink 2 module10 BT LANMDI-X MDIFigure 1-4 Rear View

V.11/X.21 Null-Modem Cable ConfigurationFigure D-13 V.11/X.21 Null-Modem CableThe connecting cable must be a shielded cable.Circuits which are paired

Applications5Power Up the Bridge/RouterOnce the LAN and Link connections are made and the console is connected to a terminal,you are ready to power-up

Applications6ConventionsThroughout this section, P1705 & P1730 menu options are shown that are required for thevarious configuration choices. The

Applications7Login to Bridge/Router and Enter the RequiredConfigurationAt the login screen type a 1 and the default password to enter the menu system

Applications8Setting the T1/E1Parameters (T1/E1 WAN only)The parameters required for a T1 or E1 connection may be obtained from your serviceprovider

Applications9E1 service does not require line build out selection.Set Link Interface Type:Location: Main ª Configurationª WAN Set Upª Link Set Up ªT1

Applications10Mandatory ConfigurationThe P1705 & P1730 requires a minimum amount of mandatory configuration in order tooperate. The following tab

Applications11Identify the Status LEDsThe four three colour Light Emitting Diodes (LEDs) on the front of the router are depictedin Figure 1-1. The me

122 Typical Applications & How to Configure ThemThe P1705 & P1730 are flexible Ethernet Bridge/Routers. This section will describe how toset-

Applications13Bridging and RoutingShould You Bridge or Route?When connecting two networks together, the first question to ask is “should I bridge orro

Federal Communications Commission (FCC)Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant

Applications14BridgingAn Ethernet bridge intelligently forwards Ethernet data packet traffic between connectednetworks. The traffic may be across the

Applications15IP RoutingAn Ethernet IP router is used to intelligently route Internet Protocol (IP) traffic to anothernetwork. The networks may be con

Applications16IP AddressingDevices on an IP network are located by their IP addresses, which is a 32 bit numberdivided into four 8 bit fields. The IP

Applications17MasksThe portion of the IP address to use as the network address is specified by using a mask; amask is the contiguous number of bits to

Applications18The P1705 & P1730 allows mask sizes from 8 to 32 bits. The subnet mask size determineshow many bits of the host field of the origin

Applications19IP Default GatewayAn IP default gateway is an IP router that is resident on the local IP network that thisrouter is connected to and is

Applications20IPX RoutingThe P1705 & P1730 are pre-configured to operate as an IPX router. When installed in anIPX network, the router will learn

Applications21to the IPX frames they receive from the network. Manual entries may be made in therouting tables by adding static IPX routes.Novell Ser

Applications22The following steps must be performed on the router connected to LAN #2.IPX Routing DisabledLocation: Main ª Configurationª IPX Routin

Applications23IPX Forwarding EnabledLocation: Main ª Configurationª IPX Routing Set-upª IPX ForwardingIPX forwarding must be re-enabled to allow the

Using This ManualThis Installation and Applications Guide provides the basic information required to initially set-up and configure theP1730 & PRO

Applications24PPP OverviewPoint to Point Protocol (PPP) is a connection protocol that allows control over the set-upand monitoring of network communic

Applications25Unnumbered LinksAn unnumbered link does not use network addressing on the WAN link. The WANconnection is roughly equivalent to an inter

Applications26Multilink OperationMultilink operation defines the use of more than one link to connect between two PPProuters. The MultiLink Operation

Applications27Basic WAN ConfigurationsBasic ISDN ConnectionsIf this P1705 & P1730 are configured as an ISDN bridge/router, it may establish WANcon

Applications28The following steps must be performed to configure the P1705 & P1730:The default switch type for ISDN S/T interface modules is NET3,

Applications29Once the ISDN switch type and directory numbers have been configured, the router mustbe reset for the new values to take effect and for

Applications30PPP ISDN Manual Call Quick ConnectionsThe PPP P1705 & P1730 should be configured with a remote site profile entry for eachrouter tha

Applications31IPX Router Manual Call ConnectionTo establish an IPX PPP direct dial connection, enter the ISDN phone number of theremote site PPP route

Applications32Basic Frame Relay ConfigurationNorth American P1705 & P1730 with at least one non-ISDN interface are configured tohave frame relay e

Applications33Configuration: The default configuration for P1705 & P1730 shipped outside NorthAmerica is to have frame relay disabled. To run fram

Contents1 INSTALLATION 1Unpack the Router... 1Select a S

Applications34If during this learning process the maximum number of remote sites has beenreached, the router will prompt you that there are no remote

Applications35Quick Start Frame RelaySince the P1705 & P1730 auto-learns the frame relay configuration, only a couple ofparameters need to be conf

Applications36Basic Leased Line ConfigurationThe P1705 & P1730 establishes PPP (Point to Point Protocol) WAN connections to otherPPP Leased Line r

Applications37The following steps must be performed on each of the routers in the network.Local IP AddressLocation: Main ª Configurationª LAN Set-up

Applications38Configure Remote Site ProfilesRemote Site Profiles allow the router to have different sets of configuration parameters foreach of the r

Applications39Configure Remote Site Profiles for ISDN PPPIf this router is configured to have at least one ISDN switched circuit, the ISDN callparame

Applications401 b) Defining this remote site profile within the IP Address connect table, which willcause a call to be made when a packet for this IP

Applications41Configure Remote Site Profile for Frame RelayEach of the PVC’s on the frame relay service must be configured within an individualremote

Applications42The DLCI number defined here is the Data Link Connection Identifiervalue provided by your frame relay service provider. This value must

Applications43EIRLocation: Main ª Configurationª WAN Set upª Remote Site Set-upª Edit Remote Siteª Connection Set-upª EIRThe EIR value specifies the

ContentsConfigure Remote Site Profiles ...38Configure Remote Site Profiles fo

Applications44Configure Remote Site Profiles for Leased Line PPPRemote Site Profiles allow the router to have different sets of configuration paramet

Applications45Now that the remote site profile is created, a link number must be assigned as the primarylink number. The primary link number is the l

Applications46Configure Remote Site Profiles for Frame Relay with ISDN backupFrame Relay operation is set-up as described in section 2.3.2The PVC on b

Applications47Configure Remote Site Profiles for PPPoERemote Site Profiles allow for the router to be configured to support PPP over Ethernet(PPPoE) c

Applications48Location: Mainª Configurationª WAN Set-upª Remote Site Set-Upª Edit Remote Siteª Protocol Set-Upª IP Set-upª NAT enabledª enabledAccess

Applications49Normally your ISP provider will provide you with an outgoing username and password andto authenticate with their services. The PPPoE rem

Applications50Advanced FeaturesConfigure Dynamic Host Configuration ProtocolThe P1705 & P1730 use Dynamic Host Configuration Protocol (DHCP) to al

Applications51DNS Set-UpLocation: Main ª Configurationª Application Set-upªDHCP Set-upªDNS Set-upªPrimary DNS -IP address local DNS serverªSecondary

Applications52Network Address Translation and Port TranslationThe P1705 & P1730 provide support for Network Address Translation (NAT). NetworkAdd

Applications53Figure 2 -11 NAPT ConfigurationInternet ServiceProviderPrivate Network Addresses:Global IPAddress:199.87.65.43NAPT mapping:1.1.1.2 = 19

ContentsProcessor settings for the ISDN Link Modules ... 79Changing the Termination Straps on the ISDN S/

Applications54SecurityThe router provides a number of means of providing security on incoming and outgoingtraffic on a network. These methods include

Applications55Remote Site Security Parameters EntryLocation: Main ª Configurationª WAN Set upªEdit Remote Siteª Security Parametersª Outgoing User Na

Applications56Configure FirewallThe P1705 & P1730 provide Firewall security for restricting access between any twonetworks connected through the r

Applications57First the firewall on the ISP connection (remote site 1) of the WAN is set-up. The firewalloption is set to “inbound” to have this WAN f

Applications58Then an entry is placed in the firewall table to allow the devices in the branch office remotesite to have unlimited TCP access to devic

Applications59Network Address TranslationUsing private addresses on a network and NAT/NAPT for interactions over aninternetwork connection hides the i

Applications60Bandwidth On DemandThe router may be set to activate its secondary link when the load on the primary linkexceeds a user-defined thresho

Applications61QOS - Priority QueuingPriority Queuing (PQ) allows the users to configure the router to allow specific trafficbound for an outgoing inte

Applications62To assign a Priority List to a LAN interfaceLocation: MainªConfigurationªLan Set-upªQOS Set-upªQueuing StrategyªPriorityªPriority L

Applications63Simple Network Time Protocol (SNTP)The Simple Network Time Protocol (SNTP) feature on the Perle Routers support the clientside of the pr

11 InstallationThe P1705 & P1730 are flexible Ethernet Bridge/Routers that may be configured to serviceLocal Area Networks and Wide Area Network

Applications64ªIP Address (XXX.XXX.XXX.XXX)ªSecondary IP AddressªIP Address (XXX.XXX.XXX.XXX)ªVersionª3The time zone and daylight savings time configu

Introduction to Filtering653 Introductionto FilteringThe P1705 & P1730 provide programmable filtering which gives you the ability to controlunder

Introduction to Filtering66Pattern FilteringPattern filtering is provided in three separate sections: Bridge Pattern Filters, IP RouterPattern Filters

Introduction to Filtering67Example: ~12-80 This filter pattern will match if the packetinformation starting at the 12th octet does notequal the 80 of

Introduction to Filtering68BanyanBanyan(12-0BAD)(12-80C4)(12-80C5)IP RouterIP router pattern filters are applied to IP Ethernet frames that are being

69Appendix AMenu TreesThe menu trees on the following pages are a graphical representation of the hierarchy of the built-inmenu system of the P1705 &a

1Configuration1. Terminal2. Show3. Add4. Remove1. Terminal Set-Up menu2. Device Set-Up menu3. Telnet Set-Up menu4. Load FLASH Set-Up menu5. Console6.

Continued fromprevious page1. Destination2. Status3. Remote site2. Next hop3. Type4. Cost5. Private6. Add/Remove8. Status7. Network maskEdit Static Ro

72Appendix BOctet Locations onEthernet FramesThis appendix provides octet locations for the various portions of three of the commonEthernet frames. W

Configuration Pages73Octet Locations on a Bridged Novell Netware FrameETHERNET Type CodesType Code Description0800 DOD IP0801 X.75 Internet0804 Chaosn

Applications2Identify the Reset SwitchThe small hole under the front right corner of the faceplate is used in case a hardware resetis required. The e

Octet Locations74Octet Locations on an IP Routed TCP/IP FrameOctet Locations on an IPX Routed Novell NetwareFrame

Configuration Pages75Octet Locations on a Bridged XNS Frame

76Appendix CServicing Information Opening of the case and changing of modules is only tobe performed by qualified service personnel.WARNING !Always di

Servicing Information77Identifying the Internal ComponentsThe major components of concern are shown in the following illustration.Link 2 Interface Mod

Servicing Information78 To Clear a “Lost” Password1) Remove power from the bridge/router.2) Remove the screw securing the LAN / Console module to the

Servicing Information79Installing the ISDN Link ModulesIf there is an ISDN module plus another type of WAN interface module or if thereis a single ISD

Servicing Information80Changing the Termination Straps on the ISDN S/TInterfaceThe ISDN S/T link interface module has two configurable straps that co

Servicing Information81Performing a Software Upgrade1) Execute the Network (TFTP) command from the Load FLASH Set-Upmenu.2) Enter “none” to connect lo

Servicing Information82In the following diagram of a cluster of routers, when upgrading the three routersin the diagram, the upgrade order should be

Servicing Information83Appendix DInterface PinoutsPinout InformationEach link interface available is described with detailed information on pin design

Applications3Identify the ConnectorsP1705The P1705 may be ordered with a 10Base2, 10Base5, or 10BaseT LAN interface.If this P1705 has an ISDN U or S/T

These modules may have either the UP/DOWN switch type or the ON/OFF slide switch type.Each type is illustrated below.CSU/DSULINE1 2 3 4SwitchesupdownF

Console PinoutsThe connector shown here and pinouts described here correspond to the connector labeled“Console” on the back of the P1705 & P1730.D

V.24 & RS232C Link PinoutsThe connector shown here and pinouts described here correspond to the connector labeled“RS232 / V.24” on the back of the

V.11/X.21 Link PinoutsThe connector shown here and pinouts described here correspond to the connector labeled“V.11/x.21” on the back of the P1705 &am

RS442 & RS530 Link PinoutsThe connector shown here and pinouts described here correspond to the connector labeled“RS530” on the back of the P1705

V.35 Link PinoutsThe connector pinouts described here correspond to the connector labeled “V.35” on theback of the P1705 & P1730.1312514DB25Contac

RS232 Null-Modem Cable ConfigurationFigure D-9 RS232 Null-Modem CableThe connecting cable must be a shielded cable.This cable is needed when it is nec

V.35 Null-Modem Cable ConfigurationProtective GNDTransmitted Data (A)Transmitted Data (B)Received Data (A)Received Data (B)Transmitter Signal Element

RS530 Null-Modem Cable ConfigurationShieldTransmitted Data (A)Transmitted Data (B)Received Data (A)Received Data (B)Request To Send (A)Request To Send

RS530 To RS449 Conversion CableTransmitted Data (A)Data Terminal Ready (A)Transmitted Data (B)Data Terminal Ready (B)Received Data (A)Receiver Signal