US Robotics NETServer/8 User Manual

®NETServer 8/16 PlusUser ManualVersion 4.0P/N 1.024.1044

Table of ContentsxAccessing the Configuration Interface... 2-9Establishing Communications with NETServer Plus...

5-16 Network Dial In AccessStep 2 - Set the AppleTalk RangeSpecify the range of addresses within your LAN network rangethat you want to make available

Network Dial In Access 5-17Configuring PPP ParametersIf the remote user connects using PPP, you can also defineseveral PPP parameters that control

5-18 Network Dial In AccessReset Compression ModeDetermines how often PPP should examine packets to decidewhen to re-negotiate the optimum compression

Network Dial In Access 5-19Change the authentication setting by typing:set ppp receive_authentication [chap | pap | either | none]Phone NumberIf th

5-20 Network Dial In Access• All necessary protocols are enabled• All other settings remain at factory defaultsConfiguring User_ATo configure User_A

Network Dial In Access 5-211.Add a user called "User_B" that is a network user type (thepassword is the same as the user name):add user U

5-22 Network Dial In Access

Network Dial-Out Access 6-1Chapter 6 Network Dial-Out AccessNETServer 8/16 Plus modem ports can be accessed by networkPCs and workstations to provid

6-2 Network Dial-Out AccessOverviewThe NETServer provides these network dial-out services:• IP/IPX dial-out• TELNET dial-outIP/IPX Dial-OutIP/IPX di

Network Dial-Out Access 6-3NCSI provides a network naming service that allows you toname each NETServer on your network, as well as the ability tonam

Table of ContentsxiIP Terminal Server Setup 4-1Configuring the Remote Computer...4-2Configuring Login Hosts

6-4 Network Dial-Out AccessNetwork Dial-Out ConfigurationAdd Modem GroupsBy default all modem ports on your NETServer belong to adefault modem group c

Network Dial-Out Access 6-5To specify a modem group, the data parameter uses this format:data modem_group=<group_name>Note: If any data string

6-6 Network Dial-Out AccessTelnet usersIf you want to TELNET to a NETServer modem and havealready added a modem group and dialout user, you mustconfig

Network Dial-Out Access 6-7Or from the WIN95 Run dialog box, type in the Open field:telnet 199.56.203.5 6666You’ll be prompted for login and password

6-8 Network Dial-Out AccessPC Client Software Installation and SetupThe NPC Client Setup program is designed to run on any LANworkstation using the No

Network Dial-Out Access 6-9For either method, first load the TSR program.1.Load the TSR (Terminate and Stay Resident) part of theClient program. Thi

6-10 Network Dial-Out AccessNow you can choose to establish an IPX Dial-out session inone of two ways. To use NPC’s NTERM2 program, go toStep 2. To

Network Dial-Out Access 6-11NPC DOS Command OverviewThe following table shows basic NPC DOS commands.CommandPurposeSyntax (how to use it)NCSI.exeThis

6-12 Network Dial-Out AccessNPC Client Installation for Windows 3.xTo install the NPC Client software for Windows 3.x:1.Start Windows and go to the Pr

Network Dial-Out Access 6-138.Return to and exit Windows, then reboot your clientworkstation. After Windows has been restarted, proceed tothe next s

Table of ContentsxiiNetwork Dial-Out Access 6-1Overview ... 6-2IP/IP

6-14 Network Dial-Out AccessTo setup the NCSIPort program:1.In Windows, double-click the NCSIPort icon. The currentstatus of your communications port

Network Dial-Out Access 6-155.To test your setup, load the Windows Terminal programfound in the Accessories group. Set the communicationsport to the

6-16 Network Dial-Out Access4.Remove the Installation Diskette, click on the Restart optionto restart your computer and Windows 95.Note: You must reb

Network Dial-Out Access 6-177.In the NCSI program group, click Port Setup for NCSIPort95 option to select a specific port on NETServer. Selecting aGe

6-18 Network Dial-Out AccessOpening an ApplicationYou can open a NCSI on non-NCSI compatible communicationsapplication to use the dialout client. But,

Network Dial-Out Access 6-193 You will be returned to the BTTY main menu. Click onAction, and Connect in the pop-up screen. When OKdisplays at the s

6-20 Network Dial-Out AccessAn Overview of NPC’s Windows-Based OptionsOptionPurposeNCSIPortandNCSIPort 95These COM Port re-directors re-route Windowsc

LAN-to-LAN Routing 7-1Chapter 7 LAN-to-LAN RoutingThe NETServer can perform IP, IPX, and AppleTalk LAN-to-LAN routing with a remote NETServer or thir

7-2 LAN-to-LAN RoutingLAN-to-LAN Routing OverviewThe concept of NETServer users is not limited to end users whoconnect to the NETServer from a termina

LAN-to-LAN Routing 7-3Dynamic Routing SettingsWhen the NETServer establishes a remote connection to anordinary user (i.e., a user endstation) it is us

Table of ContentsxiiiConfiguring NETServer B ... 7-23Packet Filters 8-1Filtering Overview...

7-4 LAN-to-LAN RoutingNote: Some routing devices have an IP address assigned toeach interface rather than just one IP address for the entiredevice.

LAN-to-LAN Routing 7-5Static RoutesStatic routes are user-defined. By adding entries to the RoutesTable, you tell the NETServer how to forward packet

7-6 LAN-to-LAN RoutingHow Packets are RoutedWhen the NETServer receives a packet, it looks up the packet’sdestination in its routing table. If a stat

LAN-to-LAN Routing 7-7AuthenticationThe NETServer supports auto-detecting the PAP and CHAPmethods of login authentication on PPP connections.Note: Th

7-8 LAN-to-LAN RoutingThe challenged system then concatenates the challenge valuewith the shared secret and passes the new string through ahashing alg

LAN-to-LAN Routing 7-9PasswordUnique user password.TypeA LAN-to-LAN user is always a dialout and network user type,since the NETServer will be dialing

7-10 LAN-to-LAN RoutingAppleTalkEnables or disables AppleTalk. The default is enable.Step 3 - Specify a Remote AddressUnlike a remote end user connec

LAN-to-LAN Routing 7-11Step 4 - Set the Remote Device Phone NumberSpecify the remote device's phone number using the followingcommand:set user &l

7-12 LAN-to-LAN RoutingManual (Used for debugging) The NETServer dials outonly when it receives a dial command from thecommand line.Continuous The N

LAN-to-LAN Routing 7-13Step 6 - Configure Routing ParametersRouting parameters determine how to handle router specificparameters (spoofing, IPX WAN) a

Table of ContentsxivUsing Ping ...9-13Using Echo ...

7-14 LAN-to-LAN RoutingIPX RoutingSets the level of IPX RIP messaging that the two devices willexchange during the connection. The default is none.Li

LAN-to-LAN Routing 7-15Step 7 - Configure Dialing ScriptsYou can configure up to six send scripts and six reply scripts forthe connection. Send and r

7-16 LAN-to-LAN RoutingChannel ExpansionIndicates the channel expansion percentage. When the amountof usage of the first channel exceeds this percent

LAN-to-LAN Routing 7-17Step 9 - Configure PAP/CHAP Authentication ParametersYou can set PAP and CHAP-related authentication parametersusing the follow

7-18 LAN-to-LAN RoutingLAN-to-LAN Routing Case StudyThis section provides an example how to set up two NETServerslocated on separate LANs to perform L

LAN-to-LAN Routing 7-19AssumptionsThis case study assumes the following:• NETServer A's sysname is netserv_a• NETServer B's sysname is net

7-20 LAN-to-LAN RoutingConfiguring LAN NetworksFollow these steps to establish IP, IPX, and AppleTalk networkson NETServer A's LAN interface (eth

LAN-to-LAN Routing 7-212.Set the user's remote IP address to 78.0.0.2 with aclass A address mask:set network user netserv_b remote_ip_addr 78.0.0

7-22 LAN-to-LAN RoutingConfiguring Connection ParametersConnection parameters determine how the LAN-to-LANconnection is handled by the NETServer. Fol

LAN-to-LAN Routing 7-23Configuring NETServer BConfiguration of NETServer B is very similar to the NETServerA configuration, except for some of the net

Table of ContentsxvSupernet Example ...B-10Supernetting and the NETServer...

7-24 LAN-to-LAN RoutingAdding a UserFollow these steps to add a user (NETServer A):1.Add a user called "netserv_a" that is a network/dial-ou

LAN-to-LAN Routing 7-258.Now configure the same routing parameters for IPX:set network user netserv_a ipx_routing all9.Specify the phone number for NE

7-26 LAN-to-LAN Routing3.Set the user's (NETServer A) authentication password tonetserv_a:set network user netserv_a send_pass netserv_aNote: Th

Packet Filters 8-1Chapter 8 Packet FiltersThis chapter describes the procedures for setting up packetfilters for the NETServer. The following topics

8-2 Packet FiltersFiltering OverviewPacket filters are primarily used in networks that crossorganizational or corporate boundaries. They control inte

Packet Filters 8-3NETServer Filtering ApplicationsOnce created, a packet filter can be designated for use in any ofthe following applications:• Filte

8-4 Packet FiltersFilter TypesFilters can be classified by the following types:• Data filters - based on protocol-specific packet information• Adver

Packet Filters 8-5Advertisement FiltersAdvertisement filters operate on network protocol packets thatcontain varying information such as SAP and RIP.

8-6 Packet FiltersGeneric FiltersGeneric filters are protocol-independent and are specified bybyte and offset values in a packet. Packets are filtere

Packet Filters 8-7To be valid, a filter file must always have the following filedescriptor on the first line:#filterEnsure that there is no blank spac

Table of ContentsxviRADIUS Authentication and Accounting E-1RADIUS Overview...E-1RA

8-8 Packet FiltersProtocol RulesYou can define protocol rules within each protocol section in thefilter file. Protocol rules determine which packets

Packet Filters 8-9The following table describes each field used in the rule syntax:Field Descriptionline #Each rule must have a unique line number (1

8-10 Packet FiltersGeneric Filter RulesProtocol-independent generic filter rules are similar in format toprotocol filter rules. The following table s

Packet Filters 8-11Specifying the Filtering ActionYou can specify the filtering action for each protocol section thatdetermines whether a packet is ac

8-12 Packet Filters3. Enter the protocol rules for the protocol section you aredefining. Observe the following guidelines• Begin each rule with a un

Packet Filters 8-139. The NETServer does not recognize a filter file stored in itsflash memory until you add it to the managed filter table.Use the fo

8-14 Packet FiltersConfiguring FiltersOnce a filter has been added to the NETServer’s list of managedfilters, you can assign it to NETServer:• Interf

Packet Filters 8-15Input Filters vs. Output FiltersWhen possible, use the input filter to filter an incoming packetrather than waiting to catch a pack

8-16 Packet FiltersAssigning a Filter on an InterfaceTo configure an input or output filter on an interface, use thefollowing CLI command:set interfac

Packet Filters 8-17To set the filter access parameter to OFF for a specific interface,use the following command:set interface <interface_name> f

Overview 1-1Chapter 1 OverviewWhile the NETServer 8/16 Plus release nominally marks thelatest upgrade in the NETServer V.34/I-modem family, it trulyr

8-18 Packet FiltersIf the syntax is invalid, the filter is still added to the managedlist with a status of verify failed. To correct filter file erro

Packet Filters 8-19Deleting a Packet FilterTo delete a specific packet filter, removing the filter filepermanently from the NETServer flash memory, us

8-20 Packet FiltersFilter ExamplesThis section provides examples that will help you buildcommonly used filters.This section describes the following to

Packet Filters 8-21IP:010 ACCEPT src-addr = 192.77.200.203/16;The following rule example prevents forwarding of IP packetswith destination addresses t

8-22 Packet FiltersIP:010 ACCEPT tcp-src-port >= 24;The following rule example accepts only TCP packets that havea destination port number that is

Packet Filters 8-23Standard Port NumbersThe table below contains information on standard port numbersfor some common services. For a complete list, s

8-24 Packet FiltersTCP UDP Description518 518 ntalk (new terminal chat)- 520 RIP540 540 uucp (UNIX to UNIX copy)540 540 uucp-rlogin543 543 klogin (Ke

Packet Filters 8-25ICMP Packet FilteringICMP packets contain messages exchanged by IP modules inboth hosts and gateways to report errors, problems and

8-26 Packet FiltersIPX Packet Filter Rule ExamplesThis section briefly describes IPX packet filtering options, andprovides rule examples for each IPX

Packet Filters 8-27You can compare the source or destination IPX socket numbercontained in the packet to the socket number defined in the filterrules.

1-2 Overview• Enhanced link-layer compression support• Enhanced RADIUS support• Improved security• Command line editingEach new feature is describ

8-28 Packet FiltersIPX Call FilteringYou define IPX call filtering rules in the IPX-CALL protocolsection of the filter file. Like the rules defined i

Packet Filters 8-29Source and Destination Socket Number FilteringYou can compare the source or destination AppleTalk socketnumber contained in the pac

8-30 Packet FiltersKeywordsThis section describes valid keywords you can use for eachprotocol sectionIP and IP-CALL SectionsKeyword Description Operat

Packet Filters 8-31IPX-SAP SectionKeyword Description Operators Valuenetworknetwork address eq/ne as xx-xx-xx-xx-xx-xxnodenode address eq/ne as xx-xx-

8-32 Packet Filters

Administrative Tools 9-1Chapter 9 Administrative ToolsThis chapter covers administrative commands that are used for:• Reconfiguring your system• Co

9-2 Administrative ToolsCommand HistoryIf you want to customize the history function to change thedefault (10), use the following command. The limit i

Administrative Tools 9-3Customizing NETServer Plus ParametersSetting the SystemWith the set system command you can designate a name andlocation for yo

9-4 Administrative ToolsSettingCodeSwitch protocolWMultipointMDialing ModeOSPID (odd-numbered interface)S1SPID (even-numbered interface)S2Directory No

Administrative Tools 9-5TELNET Access PortThe TELNET Access Port identifies the specific TCP portnumber that the NETServer Plus should listen to for i

Overview 1-3Enhanced SNMP Management SupportNETServer 8/16 Plus includes full Windows-based SNMPversion 1 management support that allows you to:• Con

9-6 Administrative ToolsCommunicating with Remote and Local SitesDial and Connect CommandsYou can dialup a remote or local user with the dial and conn

Administrative Tools 9-7Exiting the CLIBye, Exit, Leave, Quit CommandsThe bye, exit, leave and quit commands all serve to shut downthe CLI but leave t

9-8 Administrative Toolsservice_nameA name you assign to the service being added or edited. Limit of32 characters.close_active_connectionsIndicates wh

Administrative Tools 9-9 CONFIGURED NETWORK SERVICES Server AdminName Type Socket Close Statustftpd TFTPD 69 FALSE ENABLED DAT

9-10 Administrative ToolsNote: If you want to allow any system to TFTP into yourNETServer, set a TFTP client to 000.000.000.000.Next, from a machine t

Administrative Tools 9-11Optional: After supplying your login name and password, type ] (ctrl ] ) and the telnet: prompt will appear.Closing a Conne

9-12 Administrative ToolsTroubleshooting CommandsUse the commands below to troubleshoot NETServer Plus.Viewing Facility Errors The set facility comma

Administrative Tools 9-13Resolving AddressesThe arp command performs IP address resolution. Type:arp <ip address or host name> output <file n

9-14 Administrative ToolsFor example:ping 199.55.55.55The command would display the following:199.55.55.55 is aliveIf you have the name service DNS, y

Administrative Tools 9-15They are list switched interfaces, list interfaces and showinterface settings, show switched interface.Viewing Netserver Plus

iiThe material contained in this manual is for information purposes only andis subject to change without notice.No part of this document may be reprod

1-4 OverviewRIP Version 2 and Classless Routing (CIDR) SupportNETServer 8/16 Plus implements RIPv2, an extension of theoriginal RIP protocol. RIPv2 a

9-16 Administrative ToolsShow CommandsYou can use show commands to view the NETServer’s currentconfiguration and its routing activity. A few of the sh

Administrative Tools 9-17Show I-modem parametersThe show imodem interface and set imodem interfacecommands display modem configuration information for

9-18 Administrative Tools S32=009 S33=000 S34=000 S35=000 S36=000 S37=000 S38=000 S39=000 S40=000 S41=000 S42=126 S43=200 S44=015 S45=

Administrative Tools 9-19Figure 1. NETServer 8 Plus I-modem Back PanelV.34 Modem DIP SwitchesDO NOT change default settings for a software download.Fi

9-20 Administrative Tools1234ONOFFFigure 3. I-modem DIP Switches (factory defaults)Switch Function1 Power-on/Reset Load Configuration DefaultsOFF Lo

Administrative Tools 9-21Switch Function1-2 Console Port Baud RateIf DIP switch 3 is on (down), these two switches set thebaud rate for the console po

9-22 Administrative ToolsWARNING! This switch erases everything. After youuse it, you must start over from scratch. Werecommend you save your prese

Administrative Tools 9-23Note: The SDL batch file will use the Com 1 port on your PC todownload to the FLASH file system. This default can bemodified

9-24 Administrative ToolsNetwork Products Corporation (Pasadena, CA) All rightsreserved.AppleTalk-compatible networking software is Copyright 1993-199

Notices & Technical Specifications A-1Appendix A Notices & TechnicalSpecificationsThis chapter describes:• Notices• Hardware specifications

Overview 1-5IPXWAN SupportNETServer 8/16 Plus supports the IPXWAN protocol used byNovell to negotiate the WAN network number and thetransmission delay

A-2 Notices & Technical SpecificationsThis equipment generates, uses and can radiate radio frequencyenergy and, if not installed and used in

Notices & Technical Specifications A-3BRI U Model: FCC Part 68 Compliance StatementThis equipment complies with Part 68 of the FCC rulesconcerning

A-4 Notices & Technical SpecificationsFCC compliant telephone cords and modular plugs areprovided with this equipment. This equipment is desi

Notices & Technical Specifications A-5Canadian InstallationsThe Industry Canada (formerly Canadian Department ofCommunications) label identifies c

A-6 Notices & Technical SpecificationsEnvironmental SpecificationsShipping and storageTemperature: -25° to +75° Celsius, -13°to +167° Fahrenh

Notices & Technical Specifications A-7External Serial Port (Console) SpecificationsPinouts8-PositionModular JackCircuit Function Direction1CC Data

A-8 Notices & Technical SpecificationsWire typeBelden 9538 or equivalent, 8conductor, shieldedMaximum cable distance 50 feet, 15 metersCabli

Notices & Technical Specifications A-9Cable SpecificationsData Transfer Rate 10 MbpsAccessing SchemeCSMA/CD (Carrier Sense MultipleAccess with Col

A-10 Notices & Technical Specifications10Base-2 (BNC)Pin FunctionCenterSignalShieldIsolated GNDCable SpecificationsData Transfer Rate 10 MbpsA

Notices & Technical Specifications A-11Modem Interface SpecificationsYour modem uses multiple standard modulation protocols andis also compatible

1-6 OverviewEnhanced Link-Layer Compression SupportNETServer 8/16 Plus supports these link-layer compressionmethods:• STAC LZS - a compression mode t

A-12 Notices & Technical Specifications• Bell 212A, 1200 bps, asynchronous, Differential Phase ShiftKeying (DPSK)• Bell 103, 300 bps, asynch

Notices & Technical Specifications A-13Fax StandardsA Total Control MP modem provides Group III-compatibility whencombined with Class 1 or Class 2

A-14 Notices & Technical SpecificationsData FormatBinary, serial; defaults to 8-bit word length, no parity, and 1stop bitWord Length Parity (1

Notices & Technical Specifications A-15Failed Call Time-out60-sec. default, programmable 2-255 sec.Answer Tone Time-out60 sec.Fax Service Class 1

A-16 Notices & Technical SpecificationsFAX Service Class 2 CommandsClass 2.0 fax commands are too numerous to be listed here. Forinformation

Notices & Technical Specifications A-17Transmitter Carrier FrequenciesOriginate Mode: 1800 HzAnswer Mode: 1800 HzOriginate Mode: 1829 HzAnswer Mod

A-18 Notices & Technical Specificationsbis, V.22, Bell 212AOriginate Mode: 1200 HzAnswer Mode: 2400 HzBell 103Originate Mode:MarkSpace1270 Hz1

Notices & Technical Specifications A-19Originate Mode: 2000 HzAnswer Mode: 2000 HzV.Fast ClassOriginate Mode: 1800 HzAnswer Mode: 1800 HzOriginate

A-20 Notices & Technical SpecificationsBell 103Originate Mode:MarkSpace2225 Hz2025 HzAnswer Mode:MarkSpace1270 Hz1070 HzOriginate Mode:MarkSpa

Notices & Technical Specifications A-21Software SpecificationsRouting Support• Transparent On-Demand, manual, timed, continuous andBandwidth on d

Overview 1-7Generic filters - Protocol-independent filters can be used tofilter packets based on their byte and offset valuesCommand Line EditingThe N

A-22 Notices & Technical SpecificationsFiltering & Security• IP, IPX (RIP and SAP), AppleTalk, IP RIP, andsource/destination filtering•

Notices & Technical Specifications A-23Client Dial-up Support• ARAP, SLIP, CSLIP, and PPP with automatic PPP detection• Telnet and Rlogin• Remo

A-24 Notices & Technical Specifications

Addressing Schemes B-1Appendix B Addressing SchemesThis appendix contains a brief introduction to the IP and IPXaddressing schemes for administrators

B-2 Addressing SchemesIP Addressing BasicsThere are three address classes in IP, ranging with addressesranges as follows: Class A - 0-127; Class B -

Addressing Schemes B-3SubnettingA large IP network can be subdivided into smaller subnetworks.This is done using a device called the subnet mask (in t

B-4 Addressing SchemesSubnets of Class C networksSince Class C networks are by far the most common, we willtake a closer look at subnetting in a Cla

Addressing Schemes B-5Reserved AddressesIn most IP machines, setting all the bits in the host portion of anIP address to 1 indicates a broadcast to al

B-6 Addressing SchemesSupernetting (Advanced TCP/IP)Because Class B Internet addresses are in short supply, largernetworks are now usually granted a

Addressing Schemes B-7Supernetting, or CIDR (Classless InterDomain Routing) is atechnique that allows each of these larger networks to berepresented b

1-8 OverviewMobile UserNETServerPSTN/ISDNRemote OfficeUserHostTelnet, RloginClearTCPHostTTY (Terminal) DataFigure 1. IP Terminal Service Topology

B-8 Addressing SchemesThis example creates supernets composed of fewer than 254Class C networks. So, their netmasks are actually splitting upthe th

Addressing Schemes B-9Step 2 - Select a range of addresses for each supernetThe range of addresses in a supernet must fit exactly into aspace that ca

B-10 Addressing SchemesSupernet ExampleThe four networks in the example below are all connected to thesame Internet service provider (ISP). The ISP

Addressing Schemes B-11Supernet 3 requires an even multiple of 8. It also can begin onthe next available address.Since supernet 4 can fit entirely in

B-12 Addressing SchemesIP Subnet Mask Address TableSubnet masking is used to expand the number of networks dueto the 32-bit limitation of IP’s addre

LEDs and DIP Switches C-1Appendix C LEDs and DIP SwitchesLED OverviewThere are two rows of LEDs on the NETServer/8, three rows ofLEDs on the NETSe

C-2 LEDs and DIP SwitchesRun/Fail LEDThe Run/Fail LED next to the row of V.34 or I-modemindicators correspond to the entire row of modems. The LEDbeha

LEDs and DIP Switches C-3Modem IndicatorsEach V.34 or I-modem indicator (1 - 16) shows the status of onemodem. The number for each modem correspo

C-4 LEDs and DIP SwitchesNETServer IndicatorsFlash ROM LEDLights when flash memory is being updated.Color MeaningRedStartup (during POST)GreenErasing

LEDs and DIP Switches C-5LAN STATUS LEDIndicates the status of the LAN (Ethernet) interface Color EthernetRedInterface failureGreenLink presentMGT

Overview 1-9Network Dial In AccessNETServer 8/16 Plus provides dial-in network access for remoteusers. Remote IP, IPX, or AppleTalk networked users c

C-6 LEDs and DIP SwitchesThese switch settings are defaults only and remain in effect onlyuntil configuration is changed using AT commands.Figures 3 b

LEDs and DIP Switches C-7Switch Function4 Disable Command Mode Local EchoOFF Keyboard commands displayedON Echo suppressed5 Disable Auto AnswerOFF

C-8 LEDs and DIP SwitchesI-modem DIP SwitchesThere are 4 I-modem DIP Switches. See Figure 4 below.1234ONOFFFigure 4. I-modem DIP Switches (factory d

LEDs and DIP Switches C-9NETServer CONFIGURATION DIP SwitchesThe NETServer CONFIGURATION DIP Switches control theNETServer hardware. See Figure 5

C-10 LEDs and DIP SwitchesSwitch Function4 Erase/Reinitialize Flash ConfigurationIf this switch is on when the NETServer is booted, theconfiguration d

Event Messages D-1Appendix D Event MessagesThis appendix includes information about the NETServer eventmessage facility that logs event messages to a

D-2 Event MessagesImportant: You must have the NETServer entered in the\etc\hosts file of the UNIX server that is running Syslog.Without this, you wi

Event Messages D-3• Unusual - An event that should not happen in the normaloperation, but from which the system should be able torecover• Common - A

D-4 Event Messages<loglevel> can be one of the following:Critical a serious system error that may effect systemintegrity.Unusual an abnormal eve

Event Messages D-5Event Message ExamplesThe NETServer is capable of delivering hundreds of eventmessages, from common events to critical events. This

1-10 OverviewDial-Out AccessNETServer 8/16 Plus modem ports can be accessed by networkPCs and workstations to provide users with dialout services.This

D-6 Event Messages"ip_addr_pool_init: bad address pool range (%lx), the value must be between1 and 254. \n"Meaning: The administrator tried

Event Messages D-7"proxy_arp_insert: no common network address found for remote ip address X"Meaning: A network user is connecting to the sy

D-8 Event Messages"ip_fwd_add_ondemand: ondemand IP network address (X) conflicts with anIP network that already exists.\n"Meaning: The admi

Event Messages D-9If the IPX network address for the WAN link isconfigured based on the IPX address, modify theaddress pool to exclude that specific I

D-10 Event Messages"CIP: The modem group %s already exists /n"Meaning: The administrator tried to configure a modemgroup, but the modem grou

Event Messages D-11Action: A protocol section must either contain at least onerule, or the section must be commented out forthe syntax to be valid&quo

D-12 Event Messages"The configuration file <filename> is corrupt. Status <error status>."Meaning: The Configuration file has bee

Event Messages D-13IPX/IP Dial-out Process Messages"INIT: Could not allocate a private data area. Status: <error status>."Meaning: The

D-14 Event Messages"Could not set the IPX ACS timer. Status: <error status>(<error value>). TheIPX Dial-out service will be automatic

RADIUS Authentication and Accounting E-1Appendix E RADIUS Authentication andAccountingRemote Authentication Dial In User Service (RADIUS) is adist

Overview 1-11LAN-to-LAN RoutingNETServer 8/16 Plus performs dial-up routing betweenfacilities. This occurs when one NETServer dials up another andlogs

E-2 RADIUS Authentication and AccountingRADIUS AccountingThe RADIUS accounting server can perform session accountingfor the NETServer. Session accoun

RADIUS Authentication and Accounting E-3If you enable:• Local authentication only - the NETServer grants or deniesaccess based on the information

E-4 RADIUS Authentication and AccountingRADIUS Security Server User Table EntriesRADIUS user table entries are stored in the RADIUS securityserver dat

RADIUS Authentication and Accounting E-5User-NameThe user name the user must enter when logging onto thenetwork via the NETServer.Values ASCII stri

E-6 RADIUS Authentication and AccountingOptional ParametersThe following sections describe optional user parameters thatyou can define in the RADIUS a

RADIUS Authentication and Accounting E-7Login-UserThe CLI also calls this a Login user. Once the user name andpassword are authenticated, this user

E-8 RADIUS Authentication and AccountingFramed-UserThe CLI calls this a Network user. Once the user ID andpassword are authenticated, users are conne

RADIUS Authentication and Accounting E-9For example:harryk Password=“flipper”,Service-type=Framed-User,Framed-Protocol=PPPDialback-No=“15088470203”

E-10 RADIUS Authentication and AccountingUse the following command to set this parameter locally:set network user <name> network_service [ARAP |

RADIUS Authentication and Accounting E-11Note: If you do not enter a mask value following the IPaddress, the NETServer automatically sets the netm

1-12 Overview

E-12 RADIUS Authentication and AccountingThe syntax for specifying the for incoming and/or outgoingpackets is:Filter_ID= input filter filename / outpu

RADIUS Authentication and Accounting E-13The address 255.255.255.255 causes the user to be prompted,while the address 0.0.0.0 causes the server to

E-14 RADIUS Authentication and AccountingReply-MessageIndicates text which may be displayed to the user.Values ASCII string (maximum 253 characters)De

RADIUS Authentication and Accounting E-15Note: If the connection is configured to use the assignedaddresses, or if the address is negotiated, and

E-16 RADIUS Authentication and AccountingIdle-TimeoutSets the maximum time (in seconds) that a connection can beidle before the session is automatical

RADIUS Authentication and Accounting E-17Channel-ExpansionIndicates the channel expansion percentage for a LAN-to-LANconnection. When the amount o

E-18 RADIUS Authentication and AccountingExpansion-AlgorithmSpecifies which type of expansion algorithm should be used todecompress incoming PPP data.

RADIUS Authentication and Accounting E-19Compression-Reset-ModeDetermines how often PPP should examine packets to decidewhen to re-negotiate the op

E-20 RADIUS Authentication and AccountingIPXIndicates whether IPX is enabled for the user.Values enableddisabledDefault enabledUse the following comma

RADIUS Authentication and Accounting E-21Start-TimeIndicates the time that the NETServer starts this connection.Values RoboTimeDefault 0Use the fol

Basic Installation and Setup 2-1Chapter 2 Basic Installation and SetupThis chapter describes what to do now that you are acquaintedwith NETServer 8/1

E-22 RADIUS Authentication and AccountingConfiguring RADIUS from the CLIThis section provides descriptions of CLI commands used tomanage the RADIUS se

RADIUS Authentication and Accounting E-23The RADIUS server(s) must be set to the same encryptionkey or secret. The encryption key is entered into

E-24 RADIUS Authentication and AccountingConfiguring RADIUS Accounting SettingsThe NETServer sends frames to the RADIUS accounting serverthat enable R

RADIUS Authentication and Accounting E-25If your network has more than one RADIUS accountingserver, indicate which one will be considered the secon

E-26 RADIUS Authentication and AccountingNote: Syslog accounting is always enabled as long as a syslogsink is defined. For more information about Sy

RADIUS Authentication and Accounting E-27When the framed user ends the session, a record like the onebelow is sent to the accounting server:Thurs J

E-28 RADIUS Authentication and Accounting

Index1IndexAAccounting serverRADIUS... E-27–E-30Syslog... Appendix DADD command...

Index2Default gateway... 2-14System name... 2-11Group number (location) ... 7-16HHELP command..

Index3PPackage, what’s included... 2-3Packet filters ... Chapter 8Deleting filters... 8-20Infor

iiiWarranty and ServiceU.S. Robotics Access Corp. Limited WarrantyYour U.S. Robotics product is covered by a Limited Warranty. U.S.Robotics warrants

2-2 Basic Installation and Setup❑ NETServer 8/16 Plus CLI Reference Guide❑ NETServer Manager Plus diskette❑ NETServer 8/16 Plus AT Modem Reference Gui

Index4TCP/IP...See TCP and IPTelnetAdministrative session... 9-3Filtering... 8-24Logi

Index5

Basic Installation and Setup 2-3Network SolutionsInterNIC Registration Services505 Huntmar Park DriveHerndon, VA 220701-703-742-4777For networks with

2-4 Basic Installation and SetupBRI works over the same wiring that is in place for analogtelephone lines. The difference is in the equipment you atta

Basic Installation and Setup 2-5B- and D-channelsBRI typically contains three channels. These channels arecreated using complex signaling techniques.U

2-6 Basic Installation and SetupThe NETServer routing engine is a completely separate devicefrom any of the I-modems. Its job is to route data from it

Basic Installation and Setup 2-7The U.S. Robotics I-teamThe I-team is a group within USR’s Customer Supportdepartment that provides ISDN ordering and

2-8 Basic Installation and Setup• Dynamic TEI assignment• RJ45 connector preferred (RJ11 is acceptable)2Specify your preferred long distance provide

Basic Installation and Setup 2-9Accessing the Configuration InterfaceThis section explains how to attach to the configuration interfacelocally via the

2-10 Basic Installation and Setupplatform you’re using, you may need to modify a configurationfile for VT100 settings.Automated Quick Setup ProgramsAs

Basic Installation and Setup 2-11information. Filtering, using the Trivial File Transfer Protocol(TFTP), and spoofing, are two other management tools

iv• Damage from repair or replacement of warranteed parts by anyoneother than U.S. Robotics or a U.S. Robotics authorized serviceproviderTHIS LIMITED

2-12 Basic Installation and SetupDouble quotations distinguish stringsIf you want to include white space or special characters in a textstring, the st

Basic Installation and Setup 2-13For example, if you type add ip n and press , commandcompletion will spell out the keyword network without losingyou

2-14 Basic Installation and SetupNETServer provides a cursory list of associated commands andtheir proper syntax. You can also get positional help wh

Basic Installation and Setup 2-15Using add and set commandsYou can use the add and set commands to set and changesystem parameters. These matched com

2-16 Basic Installation and SetupNote: For desktop and rack mounting:* DO NOT block the fan on the right side of the unit.* Keep the unit in a dry pla

Basic Installation and Setup 2-172Gather four sets of nuts, bolts, and other mountinghardware appropriate for your rack.3Holding the unit in the rack

2-18 Basic Installation and SetupCabling Examine the NETServer Plus V.34 back panel illustrationbelow for cable installation. The I-modem back panel

Basic Installation and Setup 2-19Note: You may want to install a line noise filter/surge protectorbetween the power source and the NETServer. This pr

2-20 Basic Installation and Setupyour communications software for 8 data bits, no parity and1 stop bit.4Examine the back panel of the NETServer. Find

Basic Installation and Setup 2-21Do you want to continue with NETServer Quick Setup?__There are two ways to proceed: You can set up only the basicconf

vArea North America Europe, MiddleEast, AfricaAll OtherLocalesPhone No.1-800-231-8770(toll free)353-1-205-7700 1-847-797-6600WeekdaysMonday - FridayMo

2-22 Basic Installation and Setup>>> What SNMP community will manage this system [public]?____________Along with a community name, you need t

Basic Installation and Setup 2-23>>> Would you like to set up radius authentication [yes]?__>>> Enter the IP address of the primary

2-24 Basic Installation and Setup>>> What metric should be applied to the default gateway [1]?___>>> Do you want to configure DNS fo

Basic Installation and Setup 2-25You need to specify the framing for the IPX network. It should beone of the following: "ethernet_ii", "

2-26 Basic Installation and Setup>>> Enter the end of the network range of the other router [ ] :_____Would you like to review your current s

Basic Installation and Setup 2-27 IP Frame Type: ____________ IP Def Gateway Addr: ____________ IP Def Gateway Metric: ____________ DNS Server

2-28 Basic Installation and SetupSetting Up the I-modemsUnlike V.34 modems, each I-modem must be configured beforeyou can use them. Follow the steps

Basic Installation and Setup 2-294.Reset each I-modem by issuing an ATX! command. Yournew configuration won’t take effect until you do so. Type:set im

2-30 Basic Installation and SetupTo begin manual configuration:1.Power on the NETServer. The "NETServer>" promptappears. When you’re pro

Basic Installation and Setup 2-314.Optional. If you plan to use an SNMP application toconfigure and manage the NETServer, you must specifySNMP commun

viSoftware/Firmware Update OptionsCustomers who require Software/Firmware updates beyond 90 daysfrom the purchase date will be referred to a U.S. Robo

2-32 Basic Installation and SetupImportant: Even if your network uses only the IPX protocol, youmust still set up an IP address for the NETServer if

Basic Installation and Setup 2-33Note: To verify your network settings, use the list networkscommand. You can also check the connection by using the p

2-34 Basic Installation and Setupbelow but you must also specify the order you prefer theybe employed. This value is the preference number. Type:add

Basic Installation and Setup 2-35IPX ConfigurationTo configure the NETServer's LAN interface on an IPX network,you must:• Determine the IPX netw

2-36 Basic Installation and SetupA display similar to the one shown below appears:File server name: USR_SERVER_ONEIPX internal network number: 000000

Basic Installation and Setup 2-37A display similar to the one shown below appears:LAN A Configuration Information:Network Address: [0788] [002608C0D5

2-38 Basic Installation and SetupNote: To verify network settings, use list networks command.3.Save your work by typing:save all AppleTalk Configurat

Basic Installation and Setup 2-393.Enable the network by typing the following command:enable appletalk network <name>For example:enable appletal

2-40 Basic Installation and SetupNetwork example:add user predator password aliens type manage,network Login example:add user predator password aliens

Configuration Overview 3-1Chapter 3 Configuration OverviewThe NETServer 8/16 Plus lets you manage and configure theNETServer by typing commands.

viiShipping AddressNorth America and Locations OutsideEurope, Middle East & AfricaEurope, Middle East, AfricaU.S. RoboticsATTN: SRO Receiving180

3-2 Configuration OverviewConfiguration Command OverviewNETServer configuration data is stored in several tables, (Userand Interface tables, e.g.). Y

Configuration Overview 3-3Configurable Table OverviewThis section briefly describes some of NETServer’s internaldatabases, or tables, which contai

3-4 Configuration OverviewFacilities TableYou can check the this table to judge system performance. TheFacilities Table contains each NETServer event

Configuration Overview 3-5Network TableThis table contains all generic protocol information enteredthrough the add (ip, ipx and appletalk) network

3-6 Configuration OverviewSyslog TableThis table contains IP addresses of syslog hosts to which eventmessages are sent. You can define multiple syslo

IP Terminal Server Setup 4-1Chapter 4 IP Terminal Server SetupRemote users can dial into the NETServer 8/16 Plus to establisha terminal session with

4-2 IP Terminal Server SetupConfiguring the Remote ComputerRemote terminal users are known as login users in theNETServer system. The NETServer system

IP Terminal Server Setup 4-3Configuring Login HostsFor a login host to be available to a login user, you must defineit in the NETServer login hosts ta

4-4 IP Terminal Server SetupRlogin PortOptional. The Rlogin port number of the host.Telnet PortOptional. The Telnet port number of the host.ClearTCP

IP Terminal Server Setup 4-5Configuring Login UsersRemote login users can use login services such as Telnet, Rlogin,or ClearTCP by dialing into the NE

viii

4-6 IP Terminal Server SetupRlogin Although Rlogin was originally a UNIXprotocol, it is now supported by some non-UNIX machines as well. Unlike Telne

IP Terminal Server Setup 4-7Step 2 - Configure Login User ParametersUse the following command:set login user <name>host_type [prompt | select |

4-8 IP Terminal Server SetupTCP PortOptional. If the login host uses a TCP port number other than23 (the default for Telnet), you can set the TCP por

IP Terminal Server Setup 4-9IP Terminal Service Case StudyThis section provides an example how to configure a login userto dial-in to the NETServer an

4-10 IP Terminal Server SetupAssuming that a DNS server is already configured for theNETServer, follow these steps to configure the login host andlogi

Network Dial In Access 5-1Chapter 5 Network Dial In AccessThe NETServer 8/16 Plus allows remote PC and Macintoshusers to dial in over analog or IS

5-2 Network Dial In AccessFigure 1 below depicts the NETServer's remote network accesscapabilities.Mobile UserInternetNETServerPSTN/ISDNRemote O

Network Dial In Access 5-3OverviewThis section describes how to set the NETServer up to provideremote access services to dial-in network users.Conf

5-4 Network Dial In AccessIPX ParametersYou can configure the user profile to specify a unique IPXnetwork number that will represent the link between

Network Dial In Access 5-5Remote Computer SetupThe remote user’s computer must have a modem or ISDNconnection and communications software that supp

Table of ContentsixTable of ContentsOverview 1-1What’s New with NETServer 8/16 Plus...1-1AppleTalk Phase II Support

5-6 Network Dial In AccessConfiguring Address PoolsIf you want network users to be assigned an IP or IPX addressfrom a pool each time they connect, yo

Network Dial In Access 5-7Configuring an ARAP AppleTalk Address PoolWhile a NETServer configures an ARAP AppleTalk addresspool by default, you can

5-8 Network Dial In AccessNETServer DefaultsA remote access user is defined as a network user in theNETServer database. When you create a network use

Network Dial In Access 5-9Configuring an IP UserTo configure an IP user:Step 1 - Add the UserCreate a standard network user, specifying the user&ap

5-10 Network Dial In AccessTip: At this point, it may be helpful to use the show usercommand to display the user's default parameters. This all

Network Dial In Access 5-11Step 3 - Set the Address Selection MethodIf the network user's address is not specified, you need to definewhether

5-12 Network Dial In AccessConfiguring an IPX UserTo configure an IPX user:Step 1 - Add the UserCreate a standard network user, specifying the user&ap

Network Dial In Access 5-13Step 2 - Specify a Remote AddressIf you want to explicitly specify the network user's remote IPXaddress, follow the

5-14 Network Dial In AccessStep 4 - Configure IPX RoutingConfigure how you want the NETServer to handle IPX RIP andSAP packets. The default is RESPON

Network Dial In Access 5-15Configuring an AppleTalk UserUnlike IP and IPX, AppleTalk dynamically assigns a stationaddress for the remote computer.