BinTec X3200 User manual

X3200 User’s Guide 1
X3200
User’s Guide
Installation and Configuration
Copyright ©2001 BinTec Communications AG, all rights reserved.
Version 1.0
Document #71000Q
September 2001

2 BinTec Communications AG
Purpose This manual explains the installationand initial configuration ofX3200 with soft-
ware release 5.5.1. For up-to-the-minute information and instructions concern-
ing the latest software release, you should always read our release notes,
especially when carrying out a software update to a later release level. The lat-
est release notes can always be found at www.bintec.net.
Liability While every effort has been made to ensure the accuracy of all information in
this manual, BinTec Communications AG cannot assume liability to any party
for any loss or damage caused by errors or omissions or by statements of any
kind in this document and is only liable within the scope of its terms of sale and
delivery.
The information in this manual is subject to change without notice. Additional in-
formation, including changes and release notes for X3200, can be found at
www.bintec.net.
As an ISDN multiprotocol router, X3200 sets up ISDN connections in accor-
dance with the system configuration. To prevent unintentional charges accumu-
lating, the operation of the product should be carefully monitored. BinTec
Communications AG accepts no liability for loss of data, unintentional connec-
tion costs and damages resulting from unsupervised operation of the product.
Trademarks BinTec and the BinTec logo are registered trademarks of BinTec Communica-
tions AG.
Other product namesand trademarks mentioned are usually theproperty of the
respective companies and manufacturers.
Copyright All rights are reserved. No part of this publication may be reproduced or trans-
mitted in any form or by any means – graphic, electronic, or mechanical – in-
cluding photocopying, recording in any medium, taping, or storage in
information retrieval systems, without the prior written permission of BinTec
Communications AG. Adaptation and especially translation of the document is
inadmissible without the prior consent of BinTec Communications AG.
Guidelines and
standards X3200 complies with the following guidelines and standards:
■R&TTE Directive 1999/5/EC
■CE marking for all EU countries
For further information, see "Declaration of Conformity" at www.bintec.net.

X3200 User’s Guide 3
How to reach BinTec Communications AG
Südwestpark 94
D-90449 Nürnberg
Germany
Telephone: [phone]
Fax: [phone]
Internet: www.bintec.net
BinTec Communications France
6/8 Avenue de la Grande Lande
F-33174 Gradignan
France
Telephone: [phone]
Fax: [phone]
Internet: www.bintec.fr

4 BinTec Communications AG

X3200 User’s Guide 5
Inhaltsverzeichnis
Inhaltsverzeichnis
Inhaltsverzeichnis 5
1 Welcome! 11
1.1 What Do You Need X3200 For? 13
1.2 Scope of Supply 17
1.3 BinTec ISDN Companion CD 18
1.4 BinTec Documentation 20
1.5 System Requirements 21
1.6 Guarantee Terms 22
1.7 About this Manual 24
1.7.1 Contents 24
1.7.2 Meaning of Symbols Used 25
2 General Safety Precautions 29
3 Getting Started 31
3.1 Setting Up and Connecting 32
3.2 In Advance of Configuration 35
3.2.1 Gathering Information 35
3.2.2 What to Do in Your Windows Network 38
3.3 Installing BRICKware Under Windows 41
3.4 Solution Scenarios 43
3.4.1 Configuring High-Speed Internet Access 43
3.4.2 Using Communications Applications 45
3.4.3 Connecting a Branch Office to Head Office 46
3.4.4 Providing Access to Head Office for Field
Service Staff without Router Access (Dial-In) 47
3.5 Configuring X3200 Under Windows 48

6 BinTec Communications AG
Inhaltsverzeichnis
3.5.1 Configuring the Basic Router Configuration 51
3.5.2 Internet Access with X3200 55
3.5.3 Connecting X3200 to a Corporate Network 58
3.5.4 Completing the Configuration 60
3.6 Remote CAPI Interface on the PC 63
3.6.1 Installing the Remote CAPI Client on all Other PCs 63
3.6.2 Configuring Remote CAPI 63
3.7 Configuring a PC 65
3.7.1 Configuring IP Address, Gateway and DNS on the PC 65
3.7.2 Finding PCs on your Partner’s Network 67
3.8 Configuring Fax and Answering Machine with RVS-COM Lite 70
3.8.1 Installing RVS-COM Lite 70
3.8.2 Configuring RVS-COM Lite 73
3.9 Testing your Configuration 77
3.9.1 Testing your Internet Access 77
3.9.2 Sending and Receiving E-Mails 77
3.9.3 Sending a Fax 77
3.9.4 Receiving a Fax 79
4 Connecting X3200 81
4.1 Connection Methods 82
4.1.1 Connecting Over the Serial Interface 83
4.1.2 Connecting Over a LAN 85
4.1.3 Connection Over ISDN 86
4.2 Logging In 87
4.3 Configuration options 89
4.3.1 Methods of Configuration 89
4.3.2 Operation and Menu Architecture of the Setup Tool 90
5 Basic Configuration with the Setup Tool 101

X3200 User’s Guide 7
Inhaltsverzeichnis
5.1 Basic Router Settings 103
5.1.1 Entering Licenses 104
5.1.2 Entering System Data 105
5.1.3 Configuring the LAN Interface 108
5.1.4 Configuring the WAN Interface 112
5.1.5 Configuring the High-Speed Internet Interface 121
5.1.6 Configuring X3200 as DHCP Server 122
5.1.7 Setting Filters 124
5.2 X3200 and the WAN 129
5.2.1 Configuring WAN Partners 131
5.2.2 Internet Access with X3200 155
5.2.3 Dialing into Corporate Network 163
5.3 Saving the Configuration File 172
6 Advanced Configuration 173
6.1 General WAN Settings 174
6.1.1 Dynamic IP Address Server 174
6.1.2 CAPI User Concept 176
6.1.3 General PPP Settings 180
6.1.4 X.31 TEI 182
6.2 Settings Specific to WAN Partners 183
6.2.1 Delay after Connection Failure 183
6.2.2 Channel Bundling - Basic Configuration for Dialup Connections 184
6.2.3 Channel Bundling – Bandwidth on Demand (BOD) – Advanced Configuration for
PPP Connections 186
6.2.4 Always On/Dynamic ISDN (AO/DI) 192
6.2.5 BOD for IP-Based Applications 201
6.2.6 Layer 1 Protocol (ISDN B-Channel) 206
6.2.7 IP Transit Network 208
6.2.8 Transfer of DNS and WINS IP Addresses to WAN Partner 210
6.2.9 Routing Information Protocol (RIP) 213

8 BinTec Communications AG
Inhaltsverzeichnis
6.2.10 Compression 216
6.2.11 Proxy ARP (Address Resolution Protocol) 218
6.2.12 Keepalive Monitoring 220
6.3 Basic IP settings 225
6.3.1 System Time 225
6.3.2 Name Resolution in X3200 with DNS Proxy 229
6.3.3 Port Numbers 246
6.3.4 BOOTP Relay Agent 247
6.4 IPX Settings 250
6.4.1 General Settings 250
6.4.2 Configuring the LAN Interface 252
6.4.3 Configuring WAN Partners 253
6.5 Extra License Functions 256
6.5.1 Virtual Private Network (VPN) and Encryption 256
6.5.2 IPSec (Internet Protocol Security) 256
7 Security Mechanisms 259
7.1 Activity Monitoring 260
7.1.1 Syslog Messages 260
7.1.2 Monitoring Functions in the Setup Tool 265
7.1.3 Credits Based Accounting System 268
7.1.4 HTTP Status Page 271
7.1.5 Activity Monitor 274
7.2 Access Security 277
7.2.1 Logging In 277
7.2.2 Checking the Calling Party Number 278
7.2.3 Authentication of PPP Connections with PAP, CHAP or MS-CHAP 279
7.2.4 Callback 279
7.2.5 Closed User Group 281
7.2.6 Access to Remote CAPI 281
7.2.7 NAT (Network Address Translation) 282

X3200 User’s Guide 9
Inhaltsverzeichnis
7.2.8 Filters (Access Lists) 286
7.2.9 Local Filters 299
7.2.10 Back Route Verification 302
7.2.11 TAF Agent 303
7.2.12 Extended IP Routing (XIPR) 303
7.3 Line Tapping Security 305
7.3.1 Encryption 305
7.3.2 VPN (with extra license) 308
7.3.3 IPSec (with extra license) 308
7.4 Special Features 309
7.4.1 Startup Procedure 309
7.4.2 Auto Logout 309
7.4.3 Prevention of Denial-of-Service Attacks 309
7.5 Checklist 311
8 Configuration Management 313
8.1 Administration of Configuration Files 314
8.2 Resetting X3200 to the Ex Works State 321
8.3 Updating Software 322
9 Troubleshooting 325
9.1 Aids to Troubleshooting 326
9.1.1 Local SNMP Shell Commands 326
9.1.2 External Aids 327
9.2 Typical Errors 328
9.2.1 System Errors 328
9.2.2 ISDN Connections 329
9.2.3 IPX Routing 332
10 Technical Data 335

10 BinTec Communications AG
Inhaltsverzeichnis
10.1 General Product Features 336
10.2 Front Panel LEDs 339
10.3 Rear Panel Connections 342
10.4 Pin Assignment 343
10.5 BOOT Sequence 346
11 Important Commands 349
11.1 SNMP Shell Commands 350
11.2 BRICKtools for Unix Commands 357
12 General Safety Precautions in 15 Different Languages 359
Glossary 395
Index 413

X3200 User’s Guide 11
1
1 Welcome!
Congratulations on choosing to buy a router from BinTec Communications AG.
Figure 1-1: X3200
BinTec Communications’ X3200 is a fully equipped and versatile xDSL Router
for professional use. It has been developed mainly for high speed internet con-
nections using xDSL or cable technology. Moreover, you can configure the
ISDN interface as a backup solution for your high speed connection: if it fails,
you will still be connnected to the Internet or other remote networks. Further-
more,X3200 supports leased lines withoutthe need of additional licenses or up-
grades.
By acquiring additional licenses, you can set up secure networking environ-
ments either through the use of Virtual Private Networks (VPN) or through IP-
Sec. Thus, communication over the internet will be as secure as over leased
lines. Since extensive firewall mechanisms have been implemented intoX3200,
it meets the high security requirements forbranch offices orfield staff logging in
to your company network. You can, therefore, easily integrate branch offices
into the security concept of your entire enterprise.
X3200, of course, ensures the flow of all kinds of information, since it supports
fax and other network applications like eMail, Home Banking or File Transfer.
The equipment X3200 comes with is not limited to mere routing functionality: In
addition to security, BinTec lays emphasis on easymaintenance and cost man-
agement. Quality tools facilitate configuration and enable remote maintenance.

12 BinTec Communications AG
Welcome!
1
RVS-COM Lite, the communication software included with your X3200, rounds
off the complete communication package.
Where do we go from here?
What your X3200 gives
you... You will find out what X3200 means for you and exactly what X3200 can do on the following pages.
Getting X3200 up and
running... ...is described in chapter 3, page 31. There we show you how to start up X3200 within a few minutes from a Windows PC with the help of a configuration assis-
tant and how to install other useful online assistants. At the end of the chapter,
you will be in a position to surf the Internet, send or receive e-mails or faxes and
set up a connection to a partner network, for example, to access data at your
corporate headquarters.
And on top of all that… you will find extensive explanations in chapter 5, page 101, which show all the
possible configurations in detail. Even if you do not have a Windows PC, you
will find fast ways to configure your X3200.
If you have already
configured BinTec
routers...
...or you are familiar with configuration and you want to get started right away,
all you really need to know is the preset user name and password.
Otherwise... ... BinTec Communications AG wishes you lots of fun with your new product.
Pick-up Service However, should you have any problems with your X3200 hardware atany time,
BinTec Communications AG offers you free replacement of your defective
equipment for a period of one year. Further information on this can be found in
chapter 1.6, page 22.
User name Password
admin bintec
Remember, however, to change the password immediately when you log in to
your X3200 for the first time. All BinTec routers are supplied with the same
password, which means they are not protected against unauthorized access
until you change the password. How to change the passwords is described in
"Changing the password", page 95.

X3200 User’s Guide 13
What Do You Need X3200 For? 1
1.1 What Do You Need X3200 For?
Figure 1-2: Basic scenario
Why a router such as
X3200?Routers are used to interconnect networks and to exchange information be- tween the networks. Forexample, you can connect to the network of your Inter-
net Service Provider via your router as shown above and use the usual Internet
services, such as the World Wide Web (WWW) or e-mail. By connecting to an-
other partner network, e.g. your company’s head office, from your home or
branch office, you can conveniently access any information you may need from
BIANCA/BRICK-XM
BIANCA/BRICK-XM
Internet
ISDN
Your Local Area Network
Network of your
Companys
Head Office
Network of your
Internet Service
Provider
Router of your
Companys
Head Office
Router of your
Internet Service
Provider
X3200
xDSL

14 BinTec Communications AG
Welcome!
1
the headquarters, even if this is hundreds of kilometers away. The size of your
own local network – whether it consists of several computers or just one work-
station – is irrelevant.
As shown in the previous illustration, your X3200 is the essential component for
connecting the networks: it is your link to the outside world. Every router serves
as a link between the individual local networks. Within each LAN, the router is
connected to the network like a normal computer. Its task is to transmit informa-
tion as necessary from its own network to an external network (e.g. to the net-
work of your Internet Service Provider or your head office) and to find the most
suitable routes for transmission. Conversely, it receives information and routes
it to its own network.
What can X3200 do that ISDN cards can’t? Your X3200 can do considerably
more:
One router for
everyone If you have a local network with several computers, you only need one single router to allow all computers in the network access to the Internet or the head
office. The lower expenditure on equipment and administration for severalcom-
puters in the network means substantial savings. When using ISDN cards, ev-
ery workplace would have to be equipped separately.
If you configure high-speed Internet access with X3200, all the users in the local
network profit from shorter Internet access times. The bandwidth of up to
768 kbps used from the Internet ServiceProvider to the customer(downstream)
and 128 kbpsin the opposite direction (upstream) allowsconsiderably faster In-
ternet applications than with conventional ISDN, as data transfer downstream,
for example, is up to twelve times faster.
Communication
applications For communications applications on your PC, such as answering machine, fax, file transfer and Eurofile transfer, the same principle applies as for access to the
Internet. All LAN users can use these services via BinTec’s own Remote CAPI
interface while accessing a single ISDN connection over X3200. The only re-
quirementis that all users have suitable application softwareinstalled to support
the CAPI interface. This standard interface is, however, used by most commu-
nications applications. X3200 is supplied as standard with suitable software
(RVS-COM Lite). This software covers the spectrum of common communica-
tions applications.

X3200 User’s Guide 15
What Do You Need X3200 For? 1
Automatic dialing and
disconnection A significant advantage of your X3200 is also its means of obtaining access to networks. Once configured, your router decides independently if and how it is
to set up a connection to the Internet Service Provider. If you enter an external
WWW address in your browser, for example, your X3200 determines that the
requested address lies outside your own LAN and establishes a connection to
your Internet Service Provider and the Internet automatically. To save costs,
X3200 disconnects the connection after a predefined time (short hold) if no
more information is exchanged.
The same principle is applied for conveniently accessing data at another loca-
tion, e.g. your company headquarters. While running Windows, for example,
you can even connect a network drive to a computer at your head office. You
then simply click the icon for this link in Windows Explorer and can surf in the
directories and data of the remote computer just as if you were using your own
hard disk. X3200 takes care of setting up and clearing the connection.
Security X3200 also has a lot to offer with regard to security. Your router offers you inte-
grated firewall mechanisms and provides extensive, low-cost features to meet
all the requirements for access security. It protects your network against unau-
thorized external access. This is made possible by X3200’s SAFERNET func-
tions such as NAT, encryption, filters and monitoring.
Configuration and
administration A number of options are available for configuring X3200. Most of the configura- tion methods are independent of your computer’s operating system.
The simplestmethod using Windows is theConfiguration Wizard. This config-
uration assistant guides you through the configuration step by step and helps
you to make the most important settings on your router. X3200 is ready for op-
eration in only a few minutes. Using the Configuration Wizard, you can con-
figure high-speed access to the Internet quickly and easily as soon as your
provider makes your xDSL connection available.
X3200 can also be configured and administrated remotely. As soon as your
router is connected to the ISDN – even in its ex works state, configuration set-
tings can be carried out from a distant location (e.g. by the administrator at your
head office). This means you can leave the configuration of the system to be
carried out by someone at HQ.

16 BinTec Communications AG
Welcome!
1
In summary X3200 has the following main advantages:
■A connection to the Internet or another partner network allows everyone in
your LAN to use the usual Internet services (e.g. e-mail, WWW, file trans-
fer) and to access data at other locations.
■High-speed access to the Internet, so that all users in the LAN no longer
have to wait so long when accessing the Internet.
■Use of communications applications in the LAN (e.g. fax, answering ma-
chine) via a common ISDN connection.
■Simple configuration for you and remote administration by an administrator
at head office.
■Independence from the operating system of your PC.
On top of all that, you need not do without security, convenience and economy.

X3200 User’s Guide 17
Scope of Supply 1
1.2 Scope of Supply
X3200 is supplied with the following parts:
■Cable sets:
– LAN cable (RJ45, red) for LAN connection to hub
– Adapter cable (reversed) together with red LAN cable for LAN connec-
tion directly to PC
– ISDN cable (RJ45, black) for ISDN connection
– Serial cable (gray)
– Power cable
■BinTec Companion CD
■Documentation:
– User’s Guide
– Quick Install Guide
–Release Notes, if required
■Additional material:
– License card with license information

18 BinTec Communications AG
Welcome!
1
1.3 BinTec ISDN Companion CD
You will find all the programsyou needforthe installation, configuration and ad-
ministration of X3200 on your BinTec Companion CD.
BRICKware ■The Configuration Wizard leads you step by step through the basic con-
figuration of X3200.
■The Activity Monitor enables you to monitor the utilization of X3200 at a
glance.
■You gain access toX3200 via the serial interface using the provided short-
cuts Device at COM1 or Device at COM2.
■Remote CAPI Client
The Remote CAPI Client allows you to use communications applications
based on the standard CAPI interface (e.g. RVS-COM Lite).
■Token Authentication Firewall (TAF) program
This software package is required if you are using the Security Dynamics
security system.
■The Configuration Manager allows you to configure and administrate all
BinTec routers in the network via a graphic interface. Here you can view
and edit SNMP tables and variables.
■DIME Tools are for monitoring and administration of your X3200.
More detailed descriptions of all software programs can be found in our online
manual BRICKware for Windows.
RVS-COM Lite In addition to BRICKware, your BinTec Companion CD contains the RVS-COM
Lite communications program that allows you to use all the usual communica-
tions applications on your PC, e.g. answering machine, fax or file transfer. How
to do this is explained in chapter 3.8, page 70.
Please note: The license for RVS-COM Lite is a single user license. You can
purchase additional licenses from your dealer.

X3200 User’s Guide 19
BinTec ISDN Companion CD 1
What else? The Companion CD also contains a range of other useful directories in which
you can find the following, for example:
■The documentation in electronic form (see chapter 1.4, page 20)
■A copy of the router software (in its unconfigured ex works state), if appli-
cable
■UNIX Tools (administration)
■Adobe’s Acrobat Reader
■MIB tables

20 BinTec Communications AG
Welcome!
1
1.4 BinTec Documentation
The following documenattion is available:
■User’s Guide (printed/PDF file)
This manual.
■Leaflet with a Quick Install Guide for initial configuration of X3200 (PDF
and printed).
■Reference manuals (English, PDF/HTML).
–Software Reference (PDF)
Onlinereference with moredetailedinformationabout the functions de-
scribed here; reference for extra functions only available with a sepa-
rate license (e.g. VPN); reference for operation of the SNMP shell.
– MIB Reference
HTML document with short descriptions about all SNMP tables and
variables for X3200.
■BRICKware for Windows (English, PDF)
User’s guide for Windows utility programs (BRICKware)
■Release Notes (English, PDF and/or printed)
Up-to-the-minute information and instructions concerning the latest soft-
ware release, description of all changes undertaken since the previous re-
lease.
In the Release Notes Logic, you will find instructions to help you upgrade
the BOOTmonitor and/or firmware logic.
■UK information (English, PDF)
Instructions for the operation of BinTec routers in Great Britain.
You have received the documentation together with your X3200. The User’s
Guide you have received in print; in addition, you can find the complete docu-
mentation in electronic form (PDF, HTML) on the BinTec Companion CD. More-
over, the latest versions of all documents can be downloaded from
www.bintec.net.