3Com 3C421600A Programming manual

®
http://www.3com.com/
SuperStack®II
Remote Access System 1500
System Management Guide
Release 2.0
Part No. 1.024.1797 Rev 2.00
December, 1999

3Com Corporation
5400 Bayfront Plaza
Santa Clara, California
95052-8145
Copyright © 1999, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced
in any form or by any means or used to make any derivative work (such as translation, transformation, or
adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time
to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty of any kind, either implied or expressed,
including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose.
3Com may make improvements or changes in the product(s) and/or the program(s) described in this
documentation at any time.
UNITED STATES GOVERNMENT LEGENDS:
If you are a United States government agency, then this documentation and the software described herein are
provided to you subject to the following:
United States Government Legend: All technical data and computer software is commercial in nature and
developed solely at private expense. Software is delivered as Commercial Computer Software as defined in
DFARS 252.227-7014 (June 1995) or as a commercial item as defined in FAR 2.101(a) and as such is provided
with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is
provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14
(June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided
on any licensed program or documentation contained in, or delivered to you in conjunction with, this
User Guide.
[Portions of this documentation are reproduced in whole or in part with permission from (as appropriate).]
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may
not be registered in other countries.
3Com, the 3Com logo, and SuperStack are registered trademarks of 3Com Corporation.
Intel and Pentium are registered trademarks of Intel Corporation. AIX, AT, IBM, NetView, and OS/2 are
registered trademarks and Warp is a trademark of International Business Machines Corporation. Microsoft,
MS-DOS, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Novell and
NetWare are registered trademarks of Novell, Inc.
Other brand and product names may be registered trademarks or trademarks of their respective holders.

CONTENTS
ABOUT THIS GUIDE
Finding Specific Information in This Guide 13
Conventions 14
Related Documentation 15
Year 2000 Compliance 16
1OVERVIEW
Overview 18
Basic Configuration 18
Port Expansion Module Configuration 18
Primary Access Unit 18
Applications 18
Dial-In 18
Shared ISP 19
LAN-to-LAN 19
Individual Dial-Out 19
Comprehensive Security Options 20
Configuration Options 20
Web Configuration Interface 20
Command Line Interface 20
2USING THE COMMAND LINE INTERFACE
CLI Overview 22
Viewing Command Line Interface Help 22
Navigating the Command Line Interface 22
Obtaining Registered IP Addresses 23
Accessing the CLI 23
IBM Computer-compatible Computers 24
Macintosh Computers 24
UNIX-based Computers 24
Using CLI Quick Setup 24

Configuration with the CLI 25
Step One: Power On the RAS 1500 25
Step Two: Configure the RAS 1500 Basics 25
Step Three: Configure IP 26
Step Four: Configure IPX 27
Step Five: Configure DNS - Optional 30
Step Six: Configure SNMP - Optional 31
Step Seven: Save Your Work 31
64 Character Limit 32
Configuring a Manage User 32
Configuring Specific Modems 33
Configuring Modems in the Router Unit 33
Configuring Modems in the Port Expansion Unit 33
Configuring Modems in the Primary Access Unit 33
Configuring Expansion Units 34
Reconfiguring the Private IP Network 34
Replacing I/O Modules in the Port Expansion Unit 35
Disconnecting Expansion Units 35
Expansion Unit Configuration after Rebooting 35
Configuring the WAN Interface 36
Configuring Static Routes 36
IP Routes 36
IPX Routes 37
3WEB-BASED CONFIGURATION OF THE RAS 1500
Overview 39
Preparing the RAS 1500 for Web-based Management 41
Accessing the RAS 1500 for Web-based Management 43
Web-based Management of the RAS 1500 43
Basic Navigation 43
Setup Wizard 45
Configuration Pages 46
Accessing Help 48
Advanced Configuration 48
4CONFIGURING DIALOUT/IP
Overview 49

Dialout IP Verses Telnet 49
Before You Begin 50
Required Information 50
Optional Information 50
Configuring Your System For DialOut/IP Software 50
Configure the
RAS 1500 51
Configure Client Workstations 54
5CONFIGURING T
ELNET NETWORK DIAL-OUT
Overview 58
Using Telnet Network Dial-out 58
DialOut/IP Versus Telnet 59
Configuring and Using Telnet Network Dial-out 59
Before You Begin 59
Required Information 59
Optional Information 60
RAS 1500 Configuration 60
Computers on the Network 60
Configuring the RAS 1500 61
Step One: Add a System Name 61
Step Two: Add an IP Network 62
Step Three: Add a Modem Group (optional) 62
Step Four: Add the Dial-out Service 63
Step Five: Add Users 65
Step Six: Save Your Work 66
Configuring Network Computers 66
Dialing Out From a Network Computer 67
Case Study 67
6CONFIGURING NETWORK
DIAL-IN
Overview 70
Using Network Dial-In 70
Before You Begin 71
Required Information 71
Configuring the Remote Computer 71

Requirements 71
Communications Software 71
Communication Parameters 71
IP Addresses 72
Configuring RAS 1500 72
IP Address Pool Overview 72
Step One: Configure an IP Address Pool 73
Step Two: Configure IP Network Users 74
Step Three: Configure PPP Parameters 76
Step Four: Configure Additional Parameters 78
Using Callback and Roaming Callback 79
Overview 79
Configuring Callback Users 79
Calling Line Identification Callback 80
Overview 80
Call Handling 82
Configuring CLID Callback 84
Step One:
Add a CLID User 84
Step Two:
Configure the User CLID-callback Settings 84
Step Three:
Configure
CLID Security 86
Troubleshooting CLID Callback 87
Case Study 88
Network Callback User Case Study 88
Assumptions 88
How to Configure this User 88
How it Works 89
Network User Case Study 89
Assumptions 89
How to Configure this User 90
How it Works 90
7LAN-TO-LAN ROUTING
Overview 92
The Difference Between Bridging and Routing 92

Routing Overview 93
IP Routing Overview 94
Dynamic, Static, and Default Routes 95
How the RAS 1500 Routes Packets 95
Establishing Connections to Remote Gateways 96
Spoofing 96
Authentication 96
Before you Begin 97
Required Information 97
Configuring LAN-to-LAN Routing 98
Step One: Add the LAN-to-LAN User 98
Step Two: Configure the User Network Parameters 99
Step Three: Configure the User Dial-out Parameters 100
Step Four: Configure the User Routing Parameters 102
Step Five: Configure the User PPP Parameters 103
Step Six: Configure Phone Numbers 104
Step Seven: Configure Authentication 105
Step Eight: Save Your Work. 105
LAN-to-LAN Routing Case Study 105
Goals 105
Assumptions 105
Strategies 106
Configuring IP on Demand 110
8BRIDGING WITH THE RAS 1500
Overview 112
How the RAS 1500 Acts as a Bridge 112
When to Use Bridging 112
113
Bridging Tips 113
Enabling Bridging Over the LAN 113
Using FCP to Bridge with OfficeConnect Routers 114
Using Fast Connect Protocol 114
9CONFIGURING AN IP T
ERMINAL SERVER
Overview 119
Before You Begin 119

Configuring Remote Computers 119
Setting Communication Parameters 120
Configuring the RAS 1500 Login Hosts 120
Host Name 120
Address 120
Preference 120
Rlogin, Telnet and ClearTCP Ports 121
Configuring Login Users 121
Case Studies 124
Case Study A 124
Case Study B 126
10 ADVANCED MODEM CONFIGURATION WITH CLI/AT
COMMANDS
Overview 130
Before You Begin 130
Connecting to the RAS 1500 130
Accessing the Console Interface 130
AT Commands 130
Sending AT Command 130
Obtaining AT Command Help 131
Commonly Used AT Commands 131
Disconnecting with AT Commands 133
Configuring Data Compression Settings 134
Configuring Error Control Options 136
Using Error Control 137
Configuring Carrier Delay Times 138
Modifying Carrier Receive Delay 139
Configuring Link Option Settings 140
Link Speed Index 140
Obtaining Modem Call Information 144
Modem Query Commands 144
Working with Modem Memory 147
Viewing Settings 147
Saving a Phone Number to Flash Memory 148
Working with the Flash Memory Template 148
Configuring Modem Call Control Settings 149

Configuring 56 Kbps Technology 151
Factory-enabled Protocol 151
Controlling Server x2 151
Disabling V.34 Connections 152
Configuring ISDN 152
Enabling X.75 152
Frame Size 152
Window Size 152
Selecting Frame and Window Size 152
Relationships Between Frames and Windows 153
Viewing Current Frame and Window Size Settings 153
Best Possible Connection 153
Universal Connect Call Flow 154
Answering and Originating Calls 154
Setting the Originate Call Type 154
11 CONFIGURING THE RAS 1500 ROUTER
Reconfiguring Your System 157
Customizing CLI Parameters 157
Discarding and Renaming Files 161
Communicating with Remote and Local Sites 161
Dial, Disconnect, and Hangup Commands 161
Exiting the CLI 162
Network Services 163
Troubleshooting Commands 168
Viewing Facility Errors 168
Terminating an Active Process 168
Resolving Addresses 169
Resolving Host Names 169
Using Ping 169
Viewing RAS 1500 System Information 172
Viewing Interface Status, Settings 172
Monitor PPP Activity 172
Displaying System Information 173
List Commands 173
Show Commands 173

12 USING SECURITY AND ACCOUNTING
Authentication Overview 177
Local Authentication 178
RADIUS Authentication 178
Overview 178
RADIUS Authentication Process 179
Configuring RADIUS Authentication on the RAS 1500 180
NOS Authentication 182
Overview 182
NOS Authentication Process 183
Installation Overview 183
Installing and Configuring NOS Authentication Software
(Novell NetWare) 183
Installing and Configuring NOS Authentication Software
(Windows NT) 189
Changing Encryption Key 191
Configuring NOS Authentication on the RAS 1500 192
Troubleshooting NOS Authentication 195
RADIUS Accounting 195
Configuring RADIUS Accounting 196
Enabling and Disabling RADIUS Accounting 198
13 USING FRAME RELAY
Overview 202
What is Frame Relay? 202
Permanent and Switched Virtual Circuits 202
Data Link Connection Identifier 202
Committed Information Rate 203
Forward and Backward Explicit Congestion Notifications 203
Local Management Interface 203
Supporting Frame Relay 203
Congestion Control 203
Before You Begin 206
Basic Frame Relay Configuration Using the Command Line Interface 206
Frame Relay User Configuration 206
Frame Relay Data Link Configuration 208
Frame Relay PVC Configuration 209

Monitoring and Troubleshooting 211
Show the Settings at the Interface Level 211
Show the Settings at the PVC Level 211
List PVC Statistics 211
List the Status of all Frame Relay PVCs 211
Case Study 211
Goal 211
Assumptions 211
Strategies 211
14 HANDLING PACKET FILTERS
Filtering Overview 218
Filtering Capabilities 218
Filter Types 219
Data Filters 219
Advertisement Filters 219
Call Filters 220
Generic Filters 220
Creating Filters 220
Filter File Components 220
Creating Filter Files 224
Configuring Filters 226
Setting Filter Access 226
Interface Filters 227
User Filters 228
Assigning a Filter to an Interface 229
Assigning a Filter to a User 229
Managing Filters 230
Displaying the Managed Filter List 230
Adding Filters to the Managed List 230
Removing a Filter from an Interface 231
Removing a Filter from a User Profile 231
Deleting a Packet Filter 232
Verifying Filter File Syntax 232
Showing Filter File Contents 232
Generating SYSLOG Messages for Filtered Packets 232
General Filter Setup 233

Filter Examples 234
IP Packet Filter Rule Examples 234
RAS 1500 Global Filtering 241
Keywords 242
15 CONFIGURING DYNAMIC HOST CONFIGURATION PROTOCOL
Overview 245
Scenario 1 246
Scenario 2 247
Scenario 3 247
Scenario 4 248
Scenario 5 249
Configuring the RAS 1500 for Dynamic Host Configuration Protocol 250
DHCP Server 250
DHCP Proxy Server 251
User Datagram Protocol Broadcast Forwarding 251
Configuring UDP Broadcast Forwarding 252
Displaying UDP Broadcast Forwarding Parameters 252
16 USING NETWORK ADDRESS T
RANSLATION AND PORT ADDRESS
TRANSLATION
Overview 253
Network Address Translation 253
Port Address Translation 255
Configuring NAT and PAT 257
Configuring Network Address Translation 257
Configuring Port Address Translation 258
Case Studies 260
NAT Case Study 260
PAT Case Study 262
17 PPP OVER SERIAL WAN PORT
Overview 265
Case Study 266
Before You Begin 266
PPP Over Serial WAN Port Case Study 267

Goals 267
Assumptions 267
Process 267
Disabling Leased-line PPP on the RAS 1500 270
Viewing the Status of the Connection 270
Troubleshooting 270
AGMT TIME ZONES
BT
ECHNICAL SPECIFICATIONS
Certification 279
United States 279
For More Information 280
Analog V.34 Model: FCC Part 68 Compliance Statement 280
Canadian Installations 280
Physical Dimensions 281
Interfaces 281
Power Requirements 283
CT
ECHNICAL SUPPORT
Online Technical Services 285
World Wide Web Site 285
3Com FTP Site 285
3Com Bulletin Board Service 286
3ComFacts Automated Fax Service 287
Support from Your Network Supplier 287
Support from 3Com 287
Returning Products for Repair 289
INDEX
3COM LIMITED WARRANTY

ABOUT THIS GUIDE
This guide describes how to configure the SuperStack®II Remote Access
System (RAS) 1500 with AT commands and router commands.
You can also configure the RAS 1500 with the Web Configuration
Interface. See Chapter 3 or Web configuration online help for more
information.
If the information in the release notes shipped with your product differs
from the information in this guide, follow the instructions in the release
notes.
Finding Specific
Information in This
Guide
This table shows the location of specific information in this guide.
Information Required Reference
Command Line Interface basics Using the Command Line Interface
Web-based Configuration Web-based Configuration of the RAS
1500
Configuring NOS or RADIUS security Using Security and Accounting
Enhancing security with packet filters Handling Packet Filters
How to configure outgoing calls via
DialOut/IP
Configuring DialOut/IP
How to configure outgoing calls via
Telnet
Configuring Telnet Network Dial-Out
How to configure incoming calls Configuring Network Dial-In
LAN to LAN routing configuration LAN-to-LAN Routing
Bridging configuration Bridging with the RAS 1500
IP terminal server configuration Configuring an IP Terminal Server
Frame Relay configuration Using Frame Relay
Warranty Information 3Com Limited Warranty

14 ABOUT THIS GUIDE
Conventions Table 1 and Table 2 list conventions that are used throughout this guide.
Table 1 Notice Icons
Icon Notice Type Description
Information note Information that describes important features or
instructions
Caution Information that alerts you to potential loss of data or
potential damage to an application, system, or device
Warning Information that alerts you to potential personal injury
Table 2 Text Conventions
Convention Description
Syntax The word “syntax” means you must evaluate the syntax
provided and supply the appropriate values. Placeholders for
values you must supply appear in angle brackets. Example:
Set callback user’s primary dial-back number
Set user <name> phone_number <number>
In this example, you must supply the user’s name for
<name> and phone number for <number>.
Commands The word “command” means you must enter the command
exactly as shown in text and press the Return or Enter key.
Example:
To list the current IP routes, enter the following
command:
list IP routes
This guide always gives the full form of a command in
uppercase and lowercase letters. However, you can
abbreviate commands by entering only the uppercase
letters and the appropriate value. Commands are not
case-sensitive.
Screen displays This typeface represents information as it appears on the
screen.
The words “enter”
and “type”
When you see the word “enter” in this guide, you must type
something, and then press the Return or Enter key. Do not
press the Return or Enter key when an instruction simply says
“type.”
(continued)

Related Documentation 15
Related
Documentation
The RAS 1500 documentation set includes the following documents. All
3Com documentation is available on the 3Com web site:
http://www.3Com.com
■Base Unit Memory Upgrade SuperStack®II Remote Access System
1500
This document describes how to perform the memory upgrade for the
SuperStack II Remote Access System 1500.
■Firmware Upgrade SuperStack®II Remote Access System 1500
This document describes how to perform the upgrade procedures for
the SuperStack II Remote Access (RAS) 1500 Base Unit and RAS 1500
Port Expansion Unit.
■I/O Module Installation Guide SuperStack®II Remote Access System
1500
This document describes how to install an I/O module in a Router
Module or Port Expansion Module.
■Release Notes SuperStack®II Remote Access System 1500
This document provides information about the system software
release, including new features and bug fixes. It also provides
information about any changes to the RAS 1500 system
[Key] names Key names appear in text in one of two ways:
■Referred to by their labels, such as “the Return key” or
“the Escape key”
■Written with brackets, such as [Return] or [Esc]
If you must press two or more keys simultaneously, the key
names are linked with a plus sign (+). Example:
Press [Ctrl]+[Alt]+[Del]
Menu commands
and buttons
Menu commands or button names appear in italics. Example:
From the Help menu, select Contents
Words in italicized
type
Italics emphasize a point or denote new terms at the place
where they are defined in the text.
Words in bold-face
type
Bold text denotes key features.
Table 2 Text Conventions (continued)
Convention Description

16 ABOUT THIS GUIDE
documentation. The Release Notes are enclosed in the RAS 1500
package and are available at http://www.3com.com/ras1500.htm.
■SuperStack®II Remote Access System 1500 Quick Setup Guide
This guide describes the installation and initial configuration of the
RAS 1500 system.
■SuperStack®II Remote Access System 1500 System Reference Guide
This guide describes how to configure the software for the SuperStack
II Remote Access System 1500.
Year 2000
Compliance
For information on Year 2000 compliance and 3Com products, visit the
3Com Year 2000 Web page:
http://www.3com.com/products/yr2000.html

1OVERVIEW
This chapter contains the following information:
■Overview
■Applications
■Configuration Options
This guide provides the most commonly used command line interface
(CLI) parameters.

18 CHAPTER 1: OVERVIEW
Overview The SuperStack®II Remote Access System (RAS) 1500 is a powerful data
communications platform that supports a broad variety of applications.
Basic Configuration The basic configuration of a RAS 1500 consists of one Router Unit with
the following options:
■Two Basic Rate Interface (BRI) line connections, expandable to four
■Four analog lines, expandable to eight
Port Expansion
Module
Configuration
The RAS 1500 allows you to add two Port Expansion Units to your stack.
The addition of the expansion units allows your RAS 1500 stack to
support up to 12 Integrated Services Digital Network (ISDN) BRI lines or
24 analog lines.
Primary Access Unit The RAS 1500 maybe be configured with a Router Unit and a Primary
Access Unit as follows:
■T1 (North America) Primary Access Unit with 23 Primary Rate Interface
(PRI)-ISDN channels
■E1 (European) Primary Access Unit with 30 PRI-ISDN channels
Applications The RAS 1500 is a multiprotocol, dial-up router and terminal server
commonly described as a remote access server. The RAS 1500 performs
the following four basic applications:
■Dial-In
■Shared ISP
■LAN-to-LAN
■Individual Dial-Out
Dial-In The RAS 1500 provides dial-in network access for remote users. Remote
Internet Protocol (IP), Internetwork packet eXchange (IPX), and AppleTalk
network users can dial in and attach to the local network as if they were
on local nodes.
Packets transmitted over the dial-in connection are encapsulated using
the following protocols:
■Point-to-Point Protocol (PPP)