User manual D-LINK DI-300

Copyright Statement Copyright ©1997 D-Link Corporation No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems Inc., as stipulated by the United States Copyright Act of 1976. Trademarks D-Link is a registered trademark of D-Link Corporation/D-Link Systems, Inc. All other trademarks belong to their respective owners. Limited Warranty This guide and the accompanying product are each provided "as is," without warranty as to their performance, merchantability or fitness for any particular purpose. D-Link Corporation and D-Link Systems, Inc. reserve the right to revise this publication and to make changes to its contents at any time, without obligation to notify any person or entity of such revisions or changes. Table of Contents INTRODUCTION ....................................................................... 1 Features .................................................................................................... 2 Ease of Installation.............................................................................................. 2 ISDN Basic Rate Interface (BRI)......................................................................... 2 ISDN Leased Line............................................................................................... 3 Multiple Networking Protocol Support ................................................................ 3 Dial On Demand................................................................................................. 4 Bandwidth On Demand....................................................................................... 4 Full Network Management.................................................................................. 4 RADIUS (Remote Authentication Dial In User Service) ...................................... 4 PPP Security....................................................................................................... 5 MS (Microsoft) CHAP ........................................................................................ 5 RIP-1/RIP-2 ........................................................................................................ 5 DHCP Support (Dynamic Host Configuration Protocol)....................................... 6 Call Control ........................................................................................................ 6 Data Compression............................................................................................... 6 Networking Compatibility................................................................................... 6 Applications For Your DI-300 or DI-300M ................................................ 7 Internet Access.................................................................................................... 7 Internet Single User Account (SUA).................................................................... 7 Multiprotocol LAN-to-LAN Connection .............................................................. 7 Telecommuting Server ........................................................................................ 8 What This Manual Covers.......................................................................... 8 What This Manual Doesn't Cover .............................................................. 9 Other Resources ........................................................................................ 9 Packing List............................................................................................... 9 Additional Installation Requirements....................................................... 10 BEFORE YOU BEGIN ............................................................. 11 Road Map and Flow................................................................................. 11 Completing the Worksheet ....................................................................... 12 Ordering Your ISDN Line ................................................................................. 13 Collecting General Setup Information................................................................ 14 Collecting ISDN Phone Line Information .......................................................... 14 Collecting Ethernet Setup Information............................................................... 16 INSTALLATION....................................................................... 21 A Warning On Connection Cables ........................................................... 21 Connecting Your Computer and Your DI-300 or DI-300M ....................... 22 Connecting the RS-232 Cable to the Router....................................................... 22 Connecting an ISDN Line to the Router............................................................. 22 Connecting an Ethernet Cable to the Router ...................................................... 23 Connecting a Power Adapter to the Router ........................................................ 23 The DI-300 or DI-300M's Front Panel .................................................... 23 Powering Up Your DI-300 or DI-300M.................................................... 24 Navigating Through the System Management Terminal Interface............. 25 System Management Terminal Interface Summary ................................... 27 General Setup.......................................................................................... 28 ISDN Setup .............................................................................................. 29 North American ISDN....................................................................................... 30 DSS1 & 1TR6 ISDN......................................................................................... 31 Ethernet Setup ......................................................................................... 33 General Ethernet Setup ..................................................................................... 34 TCP/IP Ethernet Setup and DHCP .................................................................... 34 Novell IPX Ethernet Setup ................................................................................ 37 Bridge Ethernet Setup....................................................................................... 37 CONFIGURING FOR INTERNET ACCESS ................................... 38 IP Addresses and the Internet .................................................................. 39 Internet Access Configuration.................................................................. 40 Single User Account ................................................................................ 43 Configuration for Single User Account .................................................... 45 Configuring Backup ISP Accounts ........................................................... 46 REMOTE NODE CONFIGURATION ............................................ 48 Bandwidth on Demand............................................................................. 54 Editing PPP Options................................................................................ 56 DIAL-IN CONFIGURATION ....................................................... 59 Telecommuting ........................................................................................ 60 Dial-In Server Application....................................................................... 60 Default Dial-In Setup............................................................................... 61 Dial-In Users Setup ................................................................................. 66 More on CLID .................................................................................................. 68 TCP/IP CONFIGURATION ...................................................... 70 IP Subnet Mask........................................................................................ 70 LAN-to-LAN Application ......................................................................... 71 Remote Node Setup .......................................................................................... 72 Static Route Setup ............................................................................................ 75 NOVELL IPX CONFIGURATION ............................................... 79 IPX Network Environment ....................................................................... 79 Frame Type....................................................................................................... 79 Network Numbers............................................................................................. 79 DI-300M on LAN with Server................................................................... 80 DI-300M on LAN without Server.............................................................. 80 IPX Spoofing ........................................................................................... 81 IPX Ethernet Setup .................................................................................. 81 LAN-to-LAN Application ......................................................................... 83 Remote Node Setup .......................................................................................... 84 Static Route Setup.................................................................................... 86 BRIDGING CONFIGURATION.................................................... 89 IPX Spoofing ........................................................................................... 89 Bridge Ethernet Setup.............................................................................. 90 LAN-to-LAN Application ......................................................................... 92 Remote Node Setup .......................................................................................... 92 Default Dial-In Setup for Bridge ....................................................................... 93 Bridge Static Route Setup ................................................................................. 94 FILTER CONFIGURATION........................................................ 96 About Filtering ........................................................................................ 96 DI-300's Filter Structure ......................................................................... 97 Configuring a Filter Set ........................................................................... 97 Configuring a Filter Rule....................................................................... 100 TCP/IP Filter Rule .......................................................................................... 101 Generic Filter Rule ......................................................................................... 105 Novell IPX Filter Rule .................................................................................... 107 SNMP ............................................................................... 110 About SNMP.......................................................................................... 110 Configuring Your DI-300M For SNMP Support ..................................... 110 SYSTEM SECURITY.............................................................. 113 Configuring the SMT Password.............................................................. 114 Using RADIUS Authentication............................................................... 115 Installing a RADIUS Server ............................................................................ 115 Configuring the DI-300M for RADIUS Authentication .................................... 116 Adding Users to the RADIUS Database........................................................... 118 Using RADIUS Authentication for CLID......................................................... 118 TELNET CONFIGURATION AND CAPABILITIES............................ 120 About Telnet Configuration ................................................................... 120 Telnet Capabilities................................................................................. 121 Single Administrator....................................................................................... 121 System Timeout .............................................................................................. 121 SYSTEM MAINTENANCE ....................................................... 122 System Status ......................................................................................... 122 Terminal Baud Rate............................................................................... 126 Log and Trace ....................................................................................... 126 View Error Log............................................................................................... 127 Syslog And Accounting ................................................................................... 127 Diagnostic ............................................................................................. 129 Backup Configuration............................................................................ 132 Restore Configuration............................................................................ 132 Software Update .................................................................................... 133 Command Interpreter Mode................................................................... 134 Call Control .......................................................................................... 134 Call Control Parameters .................................................................................. 135 Blacklist ......................................................................................................... 136 Budget Management ....................................................................................... 137 Call History .................................................................................................... 137 TROUBLESHOOTING............................................................ 139 Problems Starting Up the DI-300 or DI-300M ....................................... 139 None of the LEDs are on when you power up the router .................................. 139 Connecting the RS-232 cable, cannot access the SMT ..................................... 139 Problems With the ISDN Line ................................................................ 140 The ISDN initialization failed ......................................................................... 140 The ISDN loopback test failed......................................................................... 140 Problems with the LAN Interface ........................................................... 141 Can't PING any station on the LAN ................................................................ 141 Problems Connecting to a Remote Node or ISP ..................................... 141 Problems Connecting to a Remote User................................................. 142 ISDN SWITCH TYPES ......................................................... 143 Provisioning For U.S. Switches.............................................................. 143 Provisioning For the AT&T 5ESS Switches..................................................... 144 Provisioning For the Northern Telecom Switch ............................................... 145 GLOSSARY......................................................................... 147 INDEX ................................................................................ 157 ISDN Router User' Guide s Introduction Congratulations on your purchase of a D-Link DI-300 series Remote Access Router. In a modem-sized box, your router offers inexpensive yet complete telecommunications and internetworking solutions for your home or branch office. It is ideal for everything from Internet browsing to receiving calls from Remote Dial-in Users and making LAN-to-LAN connections to Remote Nodes. Distinguishing features of the DI-300 series include support for a full range of networking protocols such as TCP/IP (Transmission Control Protocol/Internet Protocol, also known as IP), Novell IPX (Internet Packet Exchange), and Transparent Bridging. DI-300: DI-300W: DI-300M: ISDN S/T interface, IP routing ISDN U interface, IP routing ISDN S/T interface, IP/IPX routing, bridging DI-300MW: ISDN U interface, IP/IPX routing, bridging This complete solution also includes Remote Dial-in User support, an Internet Single User Account (Network Address Translation) option, extensive Network Management, and solid security features. Introduction 1 NOTE: Throughout the remainder of this manual, the term "DI-300" refers to any DI-300 or DI-300W, and the term "DI-300M" refers to any DI-300M or DI-300MW. Features Each DI-300 series router is packed with features that give it the flexibility to provide a complete networking solution for almost any user. Ease of Installation Your DI-300 or DI-300M is a self-contained unit that is quick and easy to install. Physically, it resembles an external modem except for the fact that it is a router and uses an Ethernet cable to connect to the host network. ISDN Basic Rate Interface (BRI) Using a standard S/T or U Interface (the DI-300 and DI-300M use the S/T interface, while the DI-300W and DI-300MW use the U interface) the DI-300 and DI-300M support a full range of switch types. The switch type depends on the CO (Central Office) switch your ISDN line is connected to. See the ISDN Switch Types chapter for more information on North American, European, and Asian ISDN firmware and switch types supported by these routers. 2 Introduction The two B-channels can be used independently for two destinations. Or they can be bundled for one connection to support bandwidth-on-demand. ISDN Leased Line If the router is set up for an ISDN leased line (that is, if any option but Switch/Switch or Switch/Unused is selected for the B Channel Usage control in setup menu 2, "ISDN Setup," and the Transfer Type control is set to Leased in either setup menu 4, "Internet Access Setup," or setup menu 11.1, "Remote Node Profile"), the router will automatically initialize the leased-line connection each time it is powered up or setup menu 2, 4, or 11.1 is saved. The DI-300 and DI-300M implement the PPP echo mechanism for verifying ISDN leased line status. The setting of the Idle Timeout control in setup menu 11.1 will be used as the interval between two LCP_Echo_Req messages. It is supposed that there exists an echo reply corresponding to an echo request. Whenever an echo request is sent, the counter will be incremented by one. The send counter will be reset to zero after an echo response is received. The leased-line error recovery mechanism will be triggered after the send counter reaches 4. If the Idle Timeout control is set to zero, the PPP echo mechanism will not be used. Multiple Networking Protocol Support The DI-300M is a multi-protocol router. It supports TCP/IP, Novell IPX, and Transparent Bridging. Introduction 3 Dial On Demand The Dial On Demand feature allows a DI-300 or DI-300M to automatically place a call to a Remote Node whenever there is traffic coming from any workstation on the LAN to that remote site. Bandwidth On Demand Your DI-300 or DI-300M supports bandwidth up to 128 Kbps over a single ISDN BRI line. It incorporates PPP/MP (Point-to-Point Protocol/Multilink Protocol) to bundle two B channels over a BRI line. In addition, the router dynamically allocates bandwidth between the two B channels, increasing or decreasing bandwidth as needed to allow for greater efficiency in data transfer. It supports BAP (Bandwidth Allocation Protocol) and BACP (Bandwidth Allocation Control Protocol) to manage the number of links in multilink bundle. Full Network Management The DI-300M incorporates SNMP (Simple Network Management Protocol) support and menu-driven network management via an RS-232 or Telnet connection. In addition, both the DI-300 and the DI-300M offer the Call Detail Record (CDR) function to help you analyze and manage your telephone bill. RADIUS (Remote Authentication Dial In User Service) The RADIUS feature allows you to use a central external Unixbased server to support thousands of users (DI-300M only). 4 Introduction PPP Security The DI-300 and DI-300M support PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol). MS (Microsoft) CHAP Your DI-300 or DI-300M and a Microsoft Windows 95 or Windows NT server can authenticate each other using Microsoft's proprietary CHAP algorithm. No special setup is needed to support MS CHAP. Everything is done through PPP negotiation between the router and the server. RIP-1/RIP-2 Your DI-300 or DI-300M supports both RIP-1 and RIP-2 (Routing Information Protocol versions 1 and 2) exchanges with other routers. RIP version controls in setup menus 3.2 (TCP/IP and DHCP Ethernet Setup) and 11.3 (Remote Node Network Layer Options) let you control RIP use, and offer the following version options: RIP-1 (accept and send RIP-1 messages only), RIP-2B (accept RIP-1 and RIP-2 messages, both broadcast and multicast, and send RIP-2 messages in broadcast format), and RIP-2M (accept RIP-1 and RIP-2 messages, both broadcast and multicast, and send RIP-2 messages in multicast format). (The suggested choice in both menus is RIP-2B, except in environments where there are routers that do not understand RIP-2 packets at all. "Broadcast," above, means a destination MAC or IP host address consisting of all binary ones; "multicast" means a Introduction 5 MAC address of 01:00:5E:00:00:09 hex or an IP destination address of 224.0.0.9.) DHCP Support (Dynamic Host Configuration Protocol) DHCP (Dynamic Host Configuration Protocol) allows you to dynamically and automatically assign IP address settings to hosts on your network. Call Control Your DI-300 or DI-300M provides budget management for outgoing calls and maintains a "blacklist" of unreachable phone numbers in order to save you the expense of unnecessary charges. Data Compression The DI-300 and DI-300M incorporate Stac data compression and CCP (Compression Control Protocol). Networking Compatibility The DI-300 and DI-300M are compatible with remote access products from other companies such as Ascend, Cisco, and 3Com. Furthermore, they support Microsoft Windows 95 and Windows NT remote access capability. 6 Introduction Applications For Your DI-300 or DI-300M Some applications for the DI-300 and DI-300M include: Internet Access Your DI-300 or DI-300M supports the TCP/IP protocol, which is the language used for the Internet. It is also compatible with access servers manufactured by major vendors such as Cisco and Ascend. Internet Single User Account (SUA) For small office environments, the DI-300 and DI-300M offer a Single User Internet Account (also known as a Network Address Translator, or NAT) from an ISP (Internet Service Provider). This allows multiple users on the LAN (Local Area Network) to access the Internet concurrently for the cost of a single user. Single User Account address mapping can also be used for LAN to LAN connections. Multiprotocol LAN-to-LAN Connection The DI-300 and DI-300M can dial to or answer calls from another remote access router connected to a different network. The DI-300M supports TCP/IP and Novell IPX, and has the capability to bridge any Ethernet protocol. Introduction 7 Telecommuting Server The DI-300 and DI-300M allow Remote Dial-in Users to dial in and gain access to your LAN. This feature enables users that have workstations with remote access capabilities, e.g., Windows 95, to dial in using an ISDN terminal adapter (TA) to access the network resources without physically being in the office. What This Manual Covers This manual is divided into five parts. 1. Part One--Getting Started--is structured as a step-by-step guide to help you connect, install, and set up your DI-300 or DI-300M to operate on your LAN. 2. Part Two--The Internet--describes how to configure the router to connect to the Internet. 3. Part Three--Setting Up Advanced Applications-- describes how to use the router for more advanced applications, such as TCP/IP routing and Bridging. 4. Part Four--Advanced Management--provides information on advanced management features for network managers. 5. Part Five--System Maintenance --describes maintenance features for checking system status and logging errors. Regardless of the application, it is important that you follow the steps outlined in Part One to correctly connect your DI-300 or DI-300M to your LAN. You can then refer to other chapters of the manual depending on which applications you wish to use. 8 Introduction What This Manual Doesn't Cover This manual assumes that you know how to use your computer and are familiar with your communications software. If you have questions about using either one, refer to the manual for the product. Other Resources For more information about your DI-300 or DI-300M check the following sources: Quick Start Guide. Support disk. Packing List Before you proceed further, check all items you received with your DI-300 or DI-300M against this list to make sure nothing is missing. The complete package should include: One DI-300 or DI-300M ISDN router. One power adapter. One RS-232 cable. One LAN straight cable. One Support Disk. This User's Guide. Introduction 9 Additional Installation Requirements In addition to the contents of your package, there are other hardware and software requirements you need before you can install and use your router. These requirements include: An ISDN telephone line. An Ethernet connection to your computer. A computer equipped with an RS-232 port and communications software configured to the following parameters: VT100 terminal emulation. 9600 Baud rate. No parity, 8 Data bits, 1 Stop bit. After the router has been successfully connected to your network, you can make future changes to the configuration using a Telnet client application. 10 Introduction Before You Begin To ensure successful installation of your DI-300 or DI-300M, we strongly recommend that you carefully follow the steps outlined in the next two chapters. These chapters are designed as a guide for you to collect the necessary information about your ISDN phone line and the LAN which you will be connected to. Once this information has been collected, it will be used to configure your router. After you have successfully configured your DI-300 or DI-300M, see the appropriate chapters to set up your applications. For Internet Access, see the Configuring for Internet Access chapter starting on page 38. Road Map and Flow The chart below is provided as a step by step guide to successfully installing your DI-300 or DI-300M. Before You Begin 11 Completing the Worksheet Before you continue, locate the worksheet at the end of this chapter. This information worksheet has been provided to help you get through setup and installation of your DI-300 or DI-300M as easily as possible. 12 Before You Begin Ordering Your ISDN Line If you do not have the ISDN line installed already, we suggest that you order it from your telephone company as soon as possible to avoid the long waiting period common when ordering a new line. Use the information in this section to place the order (see the ISDN Switch Types chapter for information on provisioning your ISDN line). If you have already installed your ISDN line, you can check the following section to make sure that you can use all the features of your DI-300 or DI-300M. 1. Contact your local telephone company's ISDN Ordering Center. 2. Find out what type of ISDN service is available. Refer to the ISDN Switch Types chapter to find out the provisioning information for the appropriate switch type and ISDN service. For the U.S., the DI-300W and DI-300MW (U Interface) have been approved by Bellcore and have IOC (ISDN Ordering Code) "S" Capability, EZ-ISDN 1. 3. Provide your telephone company with the proper provisioning information. 4. When the telephone company installs your ISDN line, be sure to obtain the following information: ISDN switch type. ISDN telephone number(s). ISDN Service Profile Identifier (SPID) number(s) (only for North America). Before You Begin 13 Collecting General Setup Information Your DI-300 or DI-300M requires the following system information. You can obtain all the pertinent information from your network administrator. Record this information into the worksheet as it becomes available. This worksheet will later be referred to as you configure your router. System Name--This is the name given to the router for identification purposes. This name should be no more than 8 alphanumeric characters. Spaces are not allowed, but "-" and "_" are accepted. This name can be obtained remotely via the SNMP management protocol and will be displayed as the prompt when the user enters Command Interpreter Mode. Route IP Field--For Internet access, you will need to enable the Route IP Field. See the Configuring for Internet Access chapter starting on page 38 for more details on configuring your router for Internet access. To support Novell IPX, or Bridging, enable the appropriate protocol and reference the related chapters for detailed information. You have now collected all of the general setup information you need. Make sure that you have entered all the values onto the worksheet before proceeding to the next section. Collecting ISDN Phone Line Information After you have successfully installed the ISDN phone line or if you already have one installed, you need to use the ISDN line information to complete the worksheet and configure your router. 14 Before You Begin Your telephone company can give you the following information to configure the DI-300 or DI-300M: Switch Type AT&T 5ESS NI-1 AT&T 5ESS Point to Point AT&T 5ESS Multipoint Northern Telecom NI-1 Northern Telecom Custom DSS1 1TR6 Geography North America North America North America North America North America Europe, Asia Germany No. of Phone #s 2 1 2 2 2 2 2 No. of SPIDs 2 0 2 2 2 N/A N/A Switch Type--This is the type of switch used by your telephone company. Check with your telephone company and choose the appropriate option on the worksheet. For North America, select your ISDN switch type. For DSS1 and 1TR6, verify this field to make sure that you have the proper firmware loaded. B Channel Usage--Determine which connection is appropriate for your B channel and check the corresponding option on the worksheet. If your DI-300 or DI-300M is the only device using the ISDN line, configure B Channel Usage to Switch/Switch so the router device will use both B channels to communicate. If the router is sharing the ISDN line with other devices, configure B Channel Usage to Switch/Unused. If your DI-300 or DI-300M is on a leased line, configure B channel usage to Leased/Leased or Leased/Switch, depending on the setting of the line. Telephone Number(s)--Record on the worksheet the telephone number(s) given to you by your ISDN provider. Some switch types only have one telephone number. These phone numbers should be in a standard digit format (for example, 5551212). Note that these fields will only accept digits, so--and spaces will not be accepted. Before You Begin 15 SPID Number(s)--(For North America only) The SPID (Service Profile Identifier) is a number used by a central office switch for identification purposes. With the switch information, see the previous table for the number of SPIDs you must enter. You have now collected all of the necessary information about your ISDN phone line. Make sure that these values are entered into your worksheet before you continue to the next section. For DSS1 and 1TR6 ISDN, refer to the Installation chapter starting on page 21. Collecting Ethernet Setup Information This section assumes that you are setting up your router for a TCP/IP connection. If you want to configure the system for other protocols (e.g., IPX), refer to the appropriate chapters. Ethernet Interface--Your DI-300 or DI-300M is equipped with an NWay auto-sensing 10/100-Mbps port. Just plug in the cable, and the router will automatically determine the network speed (10 Mbps or 100 Mbps) and mode (full or half duplex) based on the capability and configuration of the attached device. IP Address--An IP Address is required for TCP/IP protocol. The IP Address is a unique 32-bit number assigned to your router. It is written in dotted decimal notation (four 8-bit numbers, between 0 and 255, separated by periods), e.g., 192.68.203.5. Record the IP Address into the worksheet as assigned by your network administrator. Note that every machine on a TCP/IP 16 Before You Begin network (the global Internet, for example) must have a unique IP address; do not assign an arbitrary address to any machine. IP Sub-net Mask--This field is required for TCP/IP protocol. An IP address consists of two parts, the network ID and the host ID. The IP Subnet Mask is used to specify the network ID portion of the address, expressed in dotted decimal notation. Your DI-300 or DI-300M will automatically calculate this mask based on the IP address that you assign. Unless you have special need for subnetting, use the default mask as calculated by the router. The table below lists some examples of IP subnet masks and the number of hosts that are allowed. Consult your network administrator if you are unsure of this value. IP Subnet Mask 255.255.255.0 255.255.255.128 255.255.255.192 255.255.255.224 255.255.255.255 Number of Host IDs 254 126 62 30 1 Number of Bits 24 25 26 27 32 Before You Begin 17 DI-300/DI-300M Setup and Installation Worksheet *HQHUDO 6HWXS ,QIRUPDWLRQ System Name (for identification purposes): _______________________________________ Protocol(s): ___TCP/IP ___IPX (DI-300M only) ___Bridging (DI-300M only) ,6'1 6HWXS ,QIRUPDWLRQ Switch Type (check one): ___AT&T 5ESS NI-1 ___AT&T Point to Point ___AT&T 5ESS Multipoint ___Northern Telecom NI-1 ___Northern Telecom Custom ___DSS1 ___1TR6 B-Channel Usage (check one): ___Switch/Switch ___Switch/Leased ___Leased/Switch ___Leased/Unused 18 Before You Begin ___Unused/Leased ___Leased/Leased ___Leased128 ___Switch/Unused North American ISDN 1st Telephone Number: _______________________________________ 1st SPID Number: _______________________________________ 2nd Telephone Number: _______________________________________ 2nd SPID Number: _______________________________________ DSS1 ISDN ISDN Data Number & Subaddress: _______________________________________ Outside Line Prefix Number: _______________________________________ PABX Number (S/T Bus Number): _______________________________________ Incoming Number Matching: ___MSN ___Calling Party Subaddress ___Don't Care Before You Begin 19 1TR6 ISDN: ISDN Data Number: _______________________________________ Outside Line Prefix Number: _______________________________________ PABX Number (S/T Bus Number): _______________________________________ Incoming Number Matching: ___EAZ ___Don't Care (WKHUQHW 6HWXS ,QIRUPDWLRQ IP Address: _______._______._______._______ IP Subnet Mask: _______._______._______._______ 1RWHV= 20 Before You Begin Installation This chapter outlines how to connect your DI-300 or DI-300M to your LAN and ISDN line. Refer to the diagram below to identify all of the ports on your device when you make connections. A Warning On Connection Cables The RS-232, ISDN line, and Ethernet cable, are very similar to each other. It is important that you use the correct cable for each connection; otherwise, your router could be damaged. Installation 21 Connecting Your Computer and Your DI-300 or DI-300M For the initial setup of your DI-300 or DI-300M, you must use RS-232 and communications software. After the router has been successfully installed, you can modify the configuration through a remote Telnet connection. See the Telnet Configuration and Capabilities chapter for detailed instructions on using Telnet to configure your DI-300 or DI-300M. Connecting the RS-232 Cable to the Router An RS-232 cable is included in your package. To connect this cable, connect the 9-pin end of the cable to the DCE port on the router's back panel. Connect the other end to the RS-232 cable connected to the serial port (COM1, COM2, or any other COM port) of your computer. Connecting an ISDN Line to the Router Plug one end of your ISDN phone line into the socket on the rear panel of the router labeled ISDN and the other end into the ISDN wall jack. S/T interface--This can only connect to your NT-1 (Network Termination) device. NOTE: Do not under any circumstances connect directly to the ISDN wall jack. 22 Installation U interface--This allows you to connect directly to your ISDN wall jack. NOTE: The ISDN jack is for ISDN line connection only. Connection of a phone line may result in damage to your DI-300 or DI-300M. Connecting an Ethernet Cable to the Router Your DI-300 or DI-300M is equipped with an RJ-45 jack for connection to a 10BASE-T Ethernet or 100BASE-TX Fast Ethernet hub or switch via a standard straight-through twisted-pair cable. Connecting a Power Adapter to the Router Plug a 12V DC, 500 mA power adapter into the jack on the router's side panel labeled POWER At this point, you should have connected the RS-232 cable, the ISDN phone line, the Ethernet cable, and the power supply. You can now power up your DI-300 or DI-300M. The DI-300 or DI-300M's Front Panel Names and descriptions of your router's front panel LEDs are given below: Installation 23 POWER--Comes on as soon as you connect the router to the power supply. TEST--Should be blinking if the router is functioning properly. ISDN: LINK--Indicates that the router has an ISDN line connected to the WAN interface and it has been successfully initialized. ISDN: B1 and B2--On if there is an active WAN session on that channel or if that channel is making or receiving a call. LAN: 10/100--When you connect a network cable to the DI-300 or DI-300M, the router will automatically detect the network speed. The 10/100 LED will light up if the LAN is operating at 100 Mbps. LAN: Link/Act--When the LAN connection is ready but idle, the Link/Act LED will shine steadily. When data are being transmitted or received, this LED will blink off and on. LAN: FDX/COL--The FDX/COL LED will shine green when the LAN connection uses full-duplex signaling. It will flash yellow when the router and another device on the LAN transmit at the same time. Occasional collisions are normal. If collisions are too frequent, the LAN must be reconfigured to reduce traffic loads. Powering Up Your DI-300 or DI-300M When you power up your DI-300 or DI-300M, the router will perform several internal tests and do an ISDN line initialization. 24 Installation After ISDN line initialization, the router will ask you to press ENTER to continue. When you press ENTER, the router will display a login screen and ask you to enter the password, as shown below: Enter the default password, 1234, to get into the Main Menu of the System Management Terminal (SMT). Note that once you are in the SMT and if there is no activity for more than 5 minutes, the router will automatically log you out and display a blank screen. If you see a blank screen, press ENTER to bring up the password screen. Navigating Through the System Management Terminal Interface The SMT is the interface that you use to configure your DI-300 or DI-300M. Several operations that you should be familiar with Installation 25 before you attempt to modify the configuration of your router are listed below: Moving Forward to Another Menu. To move forward to a sub-menu below the current one, type in the number of the sub-menu and press ENTER. Moving Backward to a Previous Menu. Press the Escape key to move back to the previous menu. Moving the Cursor. Within a menu, press ENTER (carriage return) to move to the next field. You can also use the Up and Down keys to move to the previous and the next field, respectively. Entering Information. There are two types of fields that you will need to fill in. The first requires you to type in the appropriate information. The second gives you choices to choose from. In the second case, press the space bar to cycle through the available choices. Required Fields. Some of the fields in the SMT are essential in order to configure the DI-300 or DI-300M. These fields will initially show question marks, indicating that the information must be filled in before that menu can be saved. N/A Fields. Some of the fields in the SMT will show a N/A. This symbol refers to an option that is not available or not applicable. Saving Your Configuration. You can save your configuration by pressing ENTER at the message `Press ENTER to confirm or ESC to cancel'. Saving the data on the screen will take you in most cases to the previous menu. 26 Installation The SMT main menu is shown below: System Management Terminal Interface Summary This section summarizes all major SMT Menus: # 1 2 3 4 11 Menu Title General Setup ISDN Setup Ethernet Setup Internet Access Setup Remote Node Setup Description Set up general information and enable routing or bridging of specific protocols Set up ISDN configuration Set up Ethernet configuration A quick and easy way to setup Internet connection Set up Remote Node for LAN-to-LAN connection including Internet connection. A DI-300 or DI-300M can have up to four Remote Nodes. Set up static routes for different protocols. Up to four static routes can be set for each protocol. Set up default dial-in parameters such that your DI-300 or DI-300M can be a dial-in server for the Remote Node and Remote Dial-in User. Set up Remote Dial-in User. Your DI-300 or DI-300M can directly support up to eight Remote Dial-in Users. Set up filters to be used in Menu 3 and Menu 11 to provide security, call control, etc. Set up SNMP-related parameters (DI-300M only) 12 13 Static Routing Setup Default Dial-in Setup 14 21 22 Dial-in User Setup Filter Set Configuration SNMP Configuration Installation 27 # 23 24 99 Menu Title System Security System Maintenance Exit Description Set up security related parameters Provide system status, diagnostics, firmware upload, etc. To exit from SMT and return to the blank screen General Setup This menu contains administrative and system-related information. Enter 1 in the main menu to go to Menu 1--General Setup. 1. System Name--Give the router a descriptive name for identification purposes, e.g., ABCD. This name should be no more than 8 alphanumeric characters. Spaces are not allowed, but "-" and "_" are accepted. This name can be retrieved remotely via SNMP, used for CHAP authentication, and will be displayed as the prompt in command interpreter mode. See the Dial-In Configuration chapter starting on page 59 for more information on CHAP; see the System Maintenance 28 Installation chapter starting on page 122 for more information on command interpreter mode. 2. Location--Enter the geographic location (up to 31 characters) of your DI-300 or DI-300M, e.g., San Jose. 3. Contact Person's Name--Enter the name (up to 8 characters) of the person in charge of the router. The Location and the Contact Person fields are optional. 4. Protocols--Turn on or off the individual protocols for your particular application. Unsupported protocols will have a N/A in their fields. ISDN Setup Menu 2 is for entering information about your ISDN line. Different telephone companies deploy different types of switches for ISDN service. Depending on the switch for your particular installation, you will have a different number of telephone numbers, and if you are in North America, you may also have SPIDs. Make sure that you have correct and complete telephone numbers and SPIDs. You need to pass the ISDN setup before your system can make an outgoing call or answer an incoming call. Installation 29 North American ISDN 1. Switch Type--Verify the switch type information with your telephone company. For North America, select the type of switch used by your telephone company. If your switch type is not currently shown, press the space bar to change to the next switch; repeat until you see the correct switch type. The router will not be able to place or to receive calls if the wrong switch type is specified. If you are not sure, contact your telephone company to confirm the exact switch type. 2. B Channel Usage--If you are using one B channel of your router with another device on the S/T bus, then select Switch/Unused. If not choose Switch/Switch. The following table shows the relationship between the B Channel Usage setting and ISDN B channels. B Channel Usage Switch/Switch Switch/Leased Leased/Switch Leased/Unused Unused/Leased Leased/Leased* B1 Switch Switch Leased Leased N/A Leased B2 Switch Leased Switch N/A Leased Leased 30 Installation B Channel Usage B1 B2 Leased128** Leased Leased Switch/Unused Switch N/A *Leased/Leased = B1 and B2 channels connect to different remote nodes. **Leased128 = B1 and B2 channels connect to the same remote node. 3. SPID Number(s)--SPIDs are numbers used by a switch for identification purposes. Depending on your switch type, you may have zero, one, or two SPIDs assigned to your line. For example, if your switch type is Northern Telecom Custom, you will have to enter two SPID numbers. DSS1 & 1TR6 ISDN Installation 31 1. Switch Type--This field is fixed as DSS1 or 1TR6. 2. B Channel Usage--This field is fixed as Switch/Switch. 3. ISDN Data & Subaddress--Enter the telephone number and subaddress assigned to the ISDN data call for the router. It will be used as the outgoing CGPN(Calling Party Number) setting for ISDN data calls. Note that the router only accepts digits; do not include--and spaces in this field. This field should be no longer than 19 digits for the number and 5 digits for the Subaddress. The Subaddress is only available for DSS1. 4. Dial Prefix to Access Outside Line--Enter the prefix number if the router is connected to an ISDN PBX. This number will be added to all outgoing calls and should be no longer than 3 digits. Otherwise, leave this field blank. 5. PBX Number (with S/T Bus Number)--Enter the S/T bus number if the router is connected to an ISDN PBX. If this field is left as blank then the loopback test will be skipped. 32 Installation When you are finished, press ENTER at the message `Press ENTER to Confirm...' to save your selections, or press ESC to cancel. When you press ENTER, the router will use the information that you entered to initialize the ISDN link to the telephone company switch. It should be noted that whenever the switch type is changed, the ISDN initialization will take slightly longer. In addition, if you are using the U-interface, the system will also take slightly longer to initialize. At this point, you will be asked if you wish to check if your ISDN line has been successfully connected to your router. If you select Yes, the router will perform a loop-back test to check the ISDN line. If the loop-back test fails, note the error message that you receive and take the appropriate troubleshooting action. Ethernet Setup Menu 3 is used to enter Ethernet related information. Depending on the protocols (TCP/IP or IPX) on your LAN, you will need to configure each protocol separately. Installation 33 General Ethernet Setup This menu determines the type of Ethernet interface you are using as well as the filter sets you wish to implement to monitor your Ethernet traffic. From Menu 3--Ethernet Setup, enter 1 to go to menu 3.1 -General Ethernet Setup. Input and Output Filter Sets--Filter sets are used to block certain packets to reduce traffic and to prevent a security breach. Filtering is a very involved subject, so leave these fields blank for the time being. After you have studied the Filter Configuration chapter starting on page 96, come back and define the filter sets. TCP/IP Ethernet Setup and DHCP If you are setting up your network for the first time, read the Configuring for Internet Access chapter before proceeding. The chapter contains important information on how to assign IP addresses for your network. 34 Installation From Menu 3--Ethernet Setup, enter 2 to go to Menu 3.2-- TCP/IP Ethernet Setup. 1. DHCP--This field determines whether the router will act as a DHCP (Dynamic Host Configuration Protocol) server. If this control is set to None, DHCP will not be used. If it is set to Server, the router will act as a DHCP server, capable of automatically assigning IP addresses to Windows 95, Windows NT, and other systems that support the DHCP client. When DHCP is used, the following four items need to be set. Do not set this field to Server if there is already a DHCP server on your network. 2. Client IP Pool Starting Address--DHCP can assign IP addresses to hosts dynamically instead of requiring that each system have a fixed IP address. IP addresses are allocated from a block of addresses, usually assigned by your Internet provider. The Client IP Pool Starting Address gives the first address in the reserved block. Installation 35 3. Size of Client IP Pool--Gives the size of the block of addresses reserved for DHCP address assignment. The default is 6 addresses; the maximum is 32. 4. Primary DNS Server/Secondary DNS Server--These two fields are used by DHCP clients (such as Windows 95 and Windows NT systems) for Domain Name Servers. Usually your Internet provider will provide one or more name service hosts. 5. IP Address--Enter the IP address of the DI-300 or DI-300M in dotted decimal notation (four 8-bit numbers, between 0 and 255, separated by periods), e.g., 192.68.135.5. Note that every machine on the TCP/IP network must have a unique IP address. 6. IP Subnet Mask--An IP address consists of two parts, the network ID and the host ID. The IP Subnet Mask is used to specify the network ID portion of the address, expressed in dotted decimal notation. Your DI-300 or DI-300M will automatically calculate this mask based on the IP address that you assign. Unless you have special need for subnetting, use the default subnet mask calculated by the router. 7. RIP Direction--This parameter determines how the DI-300 or DI-300M handles RIP (Routing Information Protocol). If set to Both (default), the router will broadcast its routing table on the LAN, and incorporate RIP broadcasts by other routers into its routing table. If set to In Only, the router will not broadcast its routing table on the LAN, if set to Out Only, the router will broadcast its routing table but ignore any RIP broadcast packets that it receives. If set to None, the router will not participate in any RIP exchange with other routers. 36 Installation Usually, you should leave this parameter at its default of Both and let RIP propagate the routing information automatically. 8. RIP Version--Determines what versions of the RIP Routing Information Protocol the router accepts. Choices are: RIP-1 The router will accept and send RIP version 1 messages only. RIP-2B The router will accept RIP-1 and RIP-2 messages (both broadcast and multicast), and sends RIP-2 messages in broadcast format. RIP-2M The router will accept RIP-1 and RIP-2 messages (both broadcast and multicast), and sends RIP-2 messages in multicast format. Unless there are routers in your environment that do not understand RIP-2 packets, you should probably set this field to RIP-2B. When you are finished, press ENTER at the message `Press ENTER to Confirm...' to save your selections, or press ESC at any time to cancel them. Novell IPX Ethernet Setup Refer to the chapter on Novell IPX configuration. Bridge Ethernet Setup Refer to the chapter on Bridging configuration. Installation 37 Configuring for Internet Access Menu 4 of the SMT allows you to configure Internet access on one screen. Before you configure your DI-300 or DI-300M for Internet access, you need to collect the following information from your ISP (Internet Service Provider). IP address of the ISP's gateway (optional). Telephone number(s) of your ISP. Login name. Password for ISP authentication For your Workstation: Domain Name Server (DNS) 38 Configuring for Internet Access IP Addresses and the Internet Conventionally, the Internet (with a capital I) refers the large-scale interconnected networks across the world that was originally developed by the US Department of Defense. The Internet uses exclusively the TCP/IP suite of protocols. The term "internet" (lower case i), however, refers to any interconnected networks using any protocol. An internet can be as simple as two hosts on a LAN, or it can be as complex as the Internet itself. Every machine on the Internet must have a unique address within that internet. If your networks are isolated from the Internet, e.g., only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: 10.0.0.0 172.16.0.0 -- 10.255.255.255 -- 172.31.255.255 192.168.0.0 -- 192.168.255.255 For this reason, it is recommended that you choose your network number from the above list. You can obtain your IP address from the IANA, from an ISP, or assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses. Configuring for Internet Access 39 NOTE: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. Once you have determined the IP address range for your local network, you may want to use DHCP (Dynamic Host Configuration Protocol) to assign addresses to individual hosts on the network, as an alternative to manually configuring each host's IP settings. See the TCP/IP Ethernet Setup and DHCP section on page 34 for more information about DHCP. Internet Access Configuration The following steps describe the set-up procedure to configure your DI-300 or DI-300M for Internet access. The information you will need to provide will be indicated in bold type. 40 Configuring for Internet Access 1. From the Main Menu, enter 4 to go to Menu 4 - Internet Access Setup, as seen above. 2. ISP's Name--Enter the name of your Internet Service Provider, e.g., myisp. This information is for identification purposes only. 3. ISP IP Addr--Enter the IP Address of the remote gateway at the ISP's site. If you do not have this data, just leave it blank. 4. Pri(mary) Phone # and Sec(ondary) Phone Number-- Both the Primary and the Secondary Phone number refer to the number that your DI-300 or DI-300M will dial to connect to the ISP. The router will always call your ISP using the Primary Phone number first. If the Primary Phone number is busy or does not answer, the router will call the Secondary Phone number if available. Once connected, the router will use the BACP (Bandwidth Allocation Control Protocol) to establish the second B-channel if PPP/MP is enabled, and the ISP also supports MP and BACP. Configuring for Internet Access 41 5. My Login Name--Enter the login name given to you by your ISP. 6. My Password--Enter the password associated with the login name above. Note that this login name/password pair is only for the router to connect to the ISP's gateway. When you use TCP/IP applications, e.g., FTP, to access the Internet from your workstation, you will need a separate login name and password for each server. 7. Single User Account--See the following section for a more detailed discussion on the Single User Account feature. The default is No. 8. Telco Options: Transfer Rate--This field (which only applies to outgoing calls) controls the rate at which the data is transferred between your router and the Internet. The options for this field are: 64K--The router will place 64Kbps (bits per second) digital data calls. 56K--(For the North America only) The router will place 56Kbps digital data calls. Lease--The router will place leased-line calls. 9. Multilink--Determines whether or not Multilink PPP should be used. Available options are: Off--The base transfer rate and maximum transfer rate will be 64Kbps. BOD (Bandwidth On Demand)--The base transfer rate will be 64Kbps, and the maximum transfer rate will be 128 Kbps. 42 Configuring for Internet Access