BinTec X4000 User manual

X4000 User’s Guide 1
X4000
User’s Guide
Installation and Configuration
Copyright ©2000 BinTec Communications AG, all rights reserved.
Version 1.3
Document #71000L
August 2000

2X4000 User’s Guide
Purpose This manual explains the installation and initial configuration of X4000 with
software release 5.1.6. For up-to-the-minute information and instructions
concerning the latest software release, you should always read our release
notes, especially when carrying out a software update to a later release level.
The latest release notes can always be found at www.bintec.de.
Liability While every effort has been made to ensure the accuracy of all information in
this manual, BinTec Communications AG cannot assume liability to any party
for any loss or damage caused by errors or omissions or by statements of any
kind in this document and is only liable within the scope of its terms of sale and
delivery.
The information in this manual is subject to change without notice. Additional
information, including changes and release notes for X4000, can be found at
www.bintec.de.
As a multiprotocol router, X4000 sets up WAN connections in accordance with
the system configuration. To prevent unintentional charges accumulating, the
operation of the product should be carefully monitored. BinTec
Communications AG accepts no liability for loss of data, unintentional
connection costs and damages resulting from unsupervised operation of the
product.
Trademarks BinTec and the BinTec logo are registered trademarks of BinTec
Communications AG.
All other product names and trademarks mentioned are the property of the
respective companies and manufacturers.
Copyright All rights are reserved. No part of this publication may be reproduced or
transmitted in any form or by any means – graphic, electronic, or mechanical –
including photocopying, recording in any medium, taping, or storage in
information retrieval systems, without the prior written permission of BinTec
Communications AG. Adaptation and especially translation of the document is
inadmissible without the prior consent of BinTec Communications AG.
Guidelines and
standards X4000 complies with the following guidelines and standards:
■Low voltage directive 73/23/EEC according to EN60950, complies with
German equipment safety regulations

X4000 User’s Guide 3
■Interference immunity according to EN50082 1/8.97
■Class B interference emissions according to EN55022/8.94 +A1/1995 +A2/
1997, electromagnetic compatibility according to EU directive 89/336/EEC.
■CE marking for all EU countries
Registration:
■CE registration
■German TÜV inspection/GS safety regulations
■BAKOM (Switzerland) registration had not been completed at the time this
manual went to print. For further information on this, see the latest release
notes at www.bintec.de.
In addition to the CE directives, X4000 also meets the ISDN requirements in
France and can be connected to Euro-Numeris.
How to reach
BinTec By … At the telephone number or address
Telephone [phone]
Fax [phone]
Mail BinTec Communications AG
Südwestpark 94
D-90449 Nürnberg
Internet www.bintec.de

4X4000 User’s Guide

X4000 User’s Guide 5
Table of Contents
Table of Contents
Welcome! 15
General Safety Precautions 31
Hardware Description and Installation 35
Configuration Requirements 69
Man-Machine Interface (MMI) – Display with User Guide 93
Fast Configuration with the Configuration Wizard (Basic Unit) 109
Basic Configuration of Basic Unit with Setup Tool 119
Advanced Configuration of the Basic Unit with the Setup Tool 187
Configuration of Expansion and Resource Cards with the Setup Tool 277
Configuration of Security Functions and Firewall 307
Configuration Management 363
Troubleshooting 375
Technical Data 387
Important Commands 411
General Safety Precautions in 15 Different Languages 421
Glossary 469
Index 487

6X4000 User’s Guide
Table of Contents

X4000 User’s Guide 7
Table of Contents
Table of Contents
Table of Contents 5
Table of Contents 7
1 Welcome! 15
1.1 X4000 – The Workgroup Access Router for Present and Future
Applications 16
1.2 Scope of Supply 18
1.2.1 Basic Unit 18
1.2.2 Expansion Cards 18
1.3 BinTec Companion CD 20
1.4 Documentation from BinTec 22
1.5 System Requirements 23
1.6 Guarantee Terms 24
1.7 About this Manual 25
1.7.1 Contents 25
1.7.2 Meaning 27
1.8 Feedback 29
2 General Safety Precautions 31
3 Hardware Description and Installation 35
3.1 Basic Unit 36
3.1.1 Desktop Unit 37
3.1.2 19-Inch Built-In Unit 40
3.2 Expansion and Resource Cards 53
3.2.1 Design of Expansion Cards 53
3.2.2 Installation and Replacement of Expansion Card 55

8X4000 User’s Guide
Table of Contents
3.3 Setting Up and Connecting 59
3.4 Status Messages via LEDs 63
3.4.1 Basic Unit 63
3.4.2 Expansion Cards 64
3.5 Boot Sequence 66
4 Configuration Requirements 69
4.1 Connection Methods 70
4.1.1 Man-Machine Interface (MMI) 71
4.1.2 Connecting Over the Serial Interface 71
4.1.3 Connecting Over a LAN 73
4.1.4 Connection Over ISDN 74
4.2 Logging In 76
4.3 Configuration Options 78
4.3.1 Methods of Configuration 78
4.3.2 Using the Setup Tool 79
4.4 Procedure for Initial Configuration 91
5Man-Machine Interface (MMI) – Display with User Guide 93
5.1 Overview 94
5.2 Display and Input Keys 96
5.2.1 Using the Input Keys 96
5.2.2 Meaning of LEDs 97
5.2.3 Navigation Bars 98
5.3 Menu Architecture 99
5.3.1 Display Settings 100
5.3.2 IP Address and Netmask 102
5.3.3 Date and System Time 103
5.3.4 Information about X4000 Basic Unit 104
5.3.5 Information about X4000 Expansion Card 105

X4000 User’s Guide 9
Table of Contents
5.3.6 Monitoring 106
5.4 Useful Short-Cuts 107
5.4.1 Defining Default Screen 107
5.4.2 Saving the Configuration 107
5.4.3 Restarting X4000 108
6 Fast Configuration with the Configuration Wizard (Basic Unit) 109
6.1 In Advance of Configuration 110
6.2 Installing BRICKware 112
6.3 Basic X4000 Configuration with the Configuration Wizard 113
6.4 Configuring a PC 115
6.5 Testing your Configuration 117
7 Basic Configuration of Basic Unit with Setup Tool 119
7.1 Basic Router Settings 120
7.1.1 Entering License(s) 121
7.1.2 Entering System Data 123
7.1.3 Configuring the LAN Interface 126
7.1.4 Configuring X4000 as DHCP Server 129
7.1.5 Setting Filters 132
7.1.6 Where do we go from here? 136
7.2 Configuring WAN Interfaces 137
7.2.1 Configuring the ISDN BRI Interface 137
7.2.2 Configuring Serial Interfaces 148
7.2.3 Configuring the LAN Interface for Using ADSL (PPP-over-Ethernet) 155
7.3 Configuring WAN Partners 159
7.3.1 Basic Procedure 159
7.3.2 Examples 182
7.4 Saving the Configuration File 186

10 X4000 User’s Guide
Table of Contents
8 Advanced Configuration of the Basic Unit with the Setup Tool 187
8.1 General WAN Settings 188
8.1.1 Dynamic IP Address Server 188
8.1.2 CAPI User Concept 190
8.1.3 General PPP Settings 194
8.1.4 X.31 TEI 197
8.2 Settings Specific to WAN Partners 198
8.2.1 Delay after Connection Failure 198
8.2.2 Channel Bundling 199
8.2.3 Bandwidth on Demand (BoD) 201
8.2.4 Always On/Dynamic ISDN (AO/DI) 206
8.2.5 Layer 1 Protocol (ISDN B-Channel) 219
8.2.6 IP Transit Network 222
8.2.7 Transfer of DNS and WINS IP Addresses to WAN Partner 225
8.2.8 Routing Information Protocol (RIP) 229
8.2.9 Compression 232
8.2.10 Proxy ARP (Address Resolution Protocol) 234
8.2.11 Keepalive Monitoring 236
8.3 Basic IP Settings 242
8.3.1 System Time 242
8.3.2 Name Resolution in X4000 with DNS Proxy 246
8.3.3 Port Numbers 265
8.3.4 BOOTP Relay Agent 266
8.4 IPX Settings 268
8.4.1 General Settings 268
8.4.2 Configuring the LAN Interface 270
8.4.3 Configuring WAN Partners 271
8.5 Bridging 275
8.6 Extra License Features 276

X4000 User’s Guide 11
Table of Contents
9 Configuration of Expansion and Resource Cards with the
Setup Tool 277
9.1 WAN Interface Card for ISDN BRI 278
9.1.1 Configuration with the Setup Tool 278
9.2 WAN Interface Card for ISDN PRI and/or G.703 281
9.2.1 Configuration with the Setup Tool 282
9.3 LAN Interface Card for 10/100 Mbps 287
9.3.1 Configuration with the Setup Tool 287
9.3.2 Broadband Internet Access (ADSL) with X4000 and LAN Expansion Card 288
9.4 Resource Card with Digital Modems 295
9.4.1 X4000 with Digital Modems as Remote Access Server 295
9.5 Resource Card for Encryption and Compression 306
9.5.1 Configuration with the Setup Tool 306
10 Configuration of Security Functions and Firewall 307
10.1 Activity Monitoring 308
10.1.1 Syslog Messages 308
10.1.2 Monitoring Functions in the Setup Tool 313
10.1.3 Credits Based Accounting System 316
10.1.4 HTTP Status Page 320
10.1.5 Java Status Monitor 321
10.1.6 Activity Monitor 322
10.2 Access Security 325
10.2.1 Logging In 325
10.2.2 Checking the Calling Party Number 326
10.2.3 Authentication of PPP Connections with PAP, CHAP or MS-CHAP 327
10.2.4 Callback 327
10.2.5 Closed User Group 330
10.2.6 Access to Remote CAPI 330
10.2.7 NAT (Network Address Translation) 331

12 X4000 User’s Guide
Table of Contents
10.2.8 Filters (Access Lists) 335
10.2.9 Local Filters 348
10.2.10 Back Route Verification 352
10.2.11 TAF Client 353
10.2.12 Extended IP Routing (XIPR) 353
10.3 Line Tapping Security 354
10.3.1 Encryption 354
10.3.2 VPN (with extra license) 357
10.4 Special Features 358
10.4.1 Startup Procedure 358
10.4.2 Auto Logout 358
10.4.3 Prevention of Denial-of-Service Attacks 358
10.5 Checklist 360
11 Configuration Management 363
11.1 Administration of Configuration Files 364
11.2 Updating Software 371
12 Troubleshooting 375
12.1 Aids to Troubleshooting 376
12.1.1 Man-Machine Interface (MMI) 376
12.1.2 Local SNMP Shell Commands 376
12.1.3 External Aids 377
12.2 Typical Errors and Procedure 379
12.2.1 System Errors 379
12.2.2 ISDN Connections 380
12.2.3 IPX Routing 383

X4000 User’s Guide 13
Table of Contents
13 Technical Data 387
13.1 Mains Unit 388
13.2 Features of Basic Unit 389
13.2.1 Serial Console Interface 390
13.2.2 Ethernet/LAN Interface 391
13.2.3 ISDN BRI Interface 392
13.2.4 Serial WAN Interfaces: 393
13.2.5 Display Interface 405
13.3 Features of Expansion and Resource Cards 406
13.3.1 X4E-2/3BRI – WAN Interface Card for ISDN BRI (Basic Rate Interface) 406
13.3.2 X4E-1/2PRI – WAN Interface Card for ISDN PRI (Primary Rate Interface)
and/or G.703 407
13.3.3 X4E-2FE – LAN Interface Card for 10/100 Mbps 408
13.3.4 XTR-S/M/L – Resource Cards with Digital Modems 408
13.3.5 XTR-ENC – Resource Card for Encryption and Compression 409
14 Important Commands 411
14.1 SNMP Shell Commands 412
14.2 BRICKtools for Unix Commands 419
15 General Safety Precautions in 15 Different Languages 421
Glossary 469
Index 487
Document #71000L, Version1.3 497

14 X4000 User’s Guide
Table of Contents

X4000 User’s Guide 15
1
1 Welcome!
Congratulations on deciding to buy the X4000 extendible multiprotocol router
from the workgroup access series of BinTec Communications AG – an efficient
and future-oriented router solution for use in small and medium-sized firms.
Figure 1-1: X4000 - the workgroup access router for present and future applications
X4000 can provide various applications with only a basic unit:
■Router for leased lines with ISDN backup
■Central fax gateway for up to 30 connections
■Router for analog and digital connections
■VPN solution with data encryption and ISDN backup
■Remote access server for up to 62 connections

16 X4000 User’s Guide
Welcome!
1
1.1 X4000 – The Workgroup Access Router
for Present and Future Applications
The extension capability of X4000 makes the multiprotocol router a future-
oriented and flexible investment. X4000 with its RISC CPU is extremely
powerful and capable of meeting future requirements.
Basic unit The basic unit is obtainable as a desktop unit or as a 19-inch built-in unit. Both
variants of the basic unit are already equipped with integrated 10/100 BT
Ethernet interface, ISDN BRI interface, serial X.21/V.35/V.36 interface for
leased lines, serial X.21bis interface and serial console interface.
Expansion cards A slot for externally inserting an expansion card enables X4000 to grow in line
with your requirements, so that you can use the same basic unit for various
applications. A high degree of flexibility is assured by our motto: “Change the
card, not the equipment!”
Resource cards Expansion cards with ISDN BRI or ISDN PRI interfaces can also be equipped
with powerful resource cards with digital modems. This makes extremely high
efficiency and high port or modem density possible.
Ergonomic
design The well-proven BinTec "Setup Tool" for the router configuration interface and the "Configuration Wizard" for fast basic configuration ensure ergonomic and
user-friendly design. The newly developed Man-Machine Interface (MMI) from
BinTec Communications AG with its LC display, input keys and intuitive user
guide – in several languages – also simplifies "getting to know" your router and
provides fast access and display of the main settings. A wide-range mains unit
without fans ensures quiet operation of X4000 in office environments.
Multiprotocol router The flexible multiprotocol router can be used for WAN access, as well as for
remote access server, fax gateway, remote CAPI server or LAN router. X4000
supports the TCP/IP, IPX and X.25 (optional) protocols and is also suitable for
bridging other protocols based on the spanning tree method.
Remote CAPI Using BinTec’s remote CAPI interface, applications based on the widely used
CAPI interface can be used network-wide. This means the available ISDN
connections can be used more effectively.

X4000 User’s Guide 17
X4000 – The Workgroup Access Router for Present and Future Applications 1
Security The features supplied include BinTec’s well-tried security package
SAFERNETTM. This package contains security technologies such as filters,
Network Address Translation (NAT) and access passwords. The security
functions protect X4000 and the network connected to it against unauthorized
access.
The future New technologies and developments are vital for BinTec Communications AG.
X4000’s flexible platform with an expansion slot and a powerful processor
enable the rapid use of new WAN/LAN technologies and features. This makes
X4000a future-oriented and migration-capable device. We’ll keep working on it!
You can download BinTec’s current software from the World Wide Web.
You can find detailed information about the individual subjects in the relevant
parts of this manual and in the more detailed documentation (on the BinTec
Companion CD).

18 X4000 User’s Guide
Welcome!
1
1.2 Scope of Supply
1.2.1 Basic Unit
The X4000 basic unit is obtainable as a desktop unit or as a 19-inch built-in unit.
The X4000 basic unit is supplied with the following parts:
■Cable sets
– Serial cable for the console port
– IEC AC power cord
– ISDN cable
■BinTec Companion CD
■Documentation
–User’sGuide
– Release notes, if required
■Additional material
– 19-inch mounting kit (only with 19-inch built-in unit)
– License card with license information
– Single user license for RVS-COM Lite
– Leaflet with X4000 guarantee information
1.2.2 Expansion Cards
The following expansion cards can be purchased for X4000:
■X4E-1/2PRI: WAN interface card for ISDN PRI and/or G.703
– equipped as standard with hardware support for encryption and
compression
– to be optionally equipped with up to two resource cards with digital
modems (XTR-S, XTR-M) or a resource card (XTR-L)

X4000 User’s Guide 19
Scope of Supply 1
■X4E-2/3BRI: WAN interface card for ISDN BRI, to be optionally equipped
with
– a resource card with digital modems (XTR-S, XTR-M) and/or
– a resource card for encryption and compression (XTR-ENC)
■X4E-2FE: LAN interface card for 10/100 Mbps, to be optionally equipped
with
– a resource card for encryption and compression (XTR-ENC)

20 X4000 User’s Guide
Welcome!
1
1.3 BinTec Companion CD
You will find all the programs you need for the installation, configuration and
administration of X4000 on your BinTec Companion CD.
BRICKware BRICKware for Windows contains the Windows utility programs:
■DIME Tools are for monitoring and administration of your X4000.
■The Configuration Wizard leads you step by step through the basic
configuration of X4000.
■You gain access to X4000 via the serial interface using the terminal
program BRICK at COM1 or BRICK at COM2.
■The Configuration Manager allows you to configure and administrate all
BinTec routers in the network via a graphic interface. Here you can view
and edit all SNMP tables and variables.
■The Java Status Monitor allows you to request system information over an
Internet browser.
■Remote CAPI Client:
The Remote CAPI Client allows you to use communications applications
based on the standard CAPI interface (e.g. RVS-COM Lite).
■Token Authentication Firewall (TAF) program (optional):
This software package is required if you are using the Security Dynamics
security system.
■The Activity Monitor enables you to monitor the utilization of X4000 at a
glance.
More detailed descriptions of all software programs can be found in our online
manual BRICKware for Windows.
RVS-COM Lite In addition to BRICKware, your BinTec Companion CD contains the RVS-COM
Lite communications program that allows you to use all the usual
communications applications on your PC, such as an answering machine, fax
or file transfer.