BinTec X4100 User manual

X4100/200/300 User’s Guide 1
X4100/200/300
User’s Guide
Installation and Configuration
Copyright ©2003 BinTec Access Networks GmbH, all rights reserved.
Version 1.2
Document #71000M
April 2003

2 BinTec Access Networks GmbH
Purpose This manual explains the installation and initial configuration of X4100/200/300
with software release 6.1. For up-to-the-minute information and instructions
concerning the latest software release, you should always read our release
notes, especially when carrying out a software update to a later release level.
The latest release notes can always be found at www.bintec.net.
Liability While every effort has been made to ensure the accuracy of all information in
this manual,BinTec Access Networks GmbH cannotassume liability to any par-
ty for anyloss or damage caused by errors or omissions or by statements of any
kind in this document and is only liable within the scope of its terms of sale and
delivery.
The information in this manual is subject to change without notice. Additional in-
formation, including changes and release notes for X4100/200/300, can be
found at www.bintec.net.
As a multiprotocol router, X4100/200/300 sets up WAN connections in accor-
dance with the system configuration. To prevent unintentional charges accumu-
lating, the operation of the product should be carefully monitored. BinTec
Access Networks GmbH accepts no liability for loss of data, unintentional con-
nection costs and damages resulting from unsupervised operation of the prod-
uct.
Trademarks BinTec and the BinTec logo are registered trademarks of BinTec Access Net-
works GmbH.
Other productnames and trademarks mentioned are usually theproperty ofthe
respective companies and manufacturers.
Copyright All rights are reserved. No part of this publication may be reproduced or trans-
mitted in any form or by any means – graphic, electronic, or mechanical – in-
cluding photocopying, recording in any medium, taping, or storage in
information retrieval systems, without the prior written permission of BinTec Ac-
cess Networks GmbH. Adaptation and especially translation of the document is
inadmissible without the prior consent of BinTec Access Networks GmbH.
Guidelines and
standards X4100/200/300 complies with the following guidelines and standards:
■R&TTE Directive 1999/5/EC
■CE marking for all EU countries and Switzerland

X4100/200/300 User’s Guide 3
You will find further information in the "Declarations of Conformity" at
www.bintec.net.
How to reach BinTec BinTec Access Networks GmbH
Südwestpark 94
D-90449 Nürnberg
Germany
Telephone: [phone]
Fax: [phone]
Internet: www.bintec.de
You can find contact information for
BinTec France here:
www.bintec.fr

4 BinTec Access Networks GmbH

X4100/200/300 User’s Guide 5
Table of Contents
Table of Contents
Table of Contents 5
1 Welcome! 13
1.1 X4100/200/300 – Workgroup Access
Router for Present and Future Applications 14
1.2 Scope of Supply 16
1.2.1 Basic Unit 16
1.2.2 Expansion Cards 16
1.3 BinTec Companion CD 18
1.4 Documentation from BinTec 19
1.5 System Requirements 20
1.6 About this Manual 21
1.6.1 Contents 21
1.6.2 Meaning 22
1.7 Feedback 25
2 General Safety Precautions 27
3 Hardware Description and Installation 31
3.1 Basic Unit 32
3.1.1 Front Panel of Basic Unit 32
3.1.2 Rear of the Different Basic Units 33
3.2 Installation in 19-inch Cabinet 36
3.3 Expansion and Resource Cards 39
3.3.1 Interfaces and LEDs on Expansion Cards 39
3.3.2 Installation and Replacement of Expansion Card 42
3.4 Setting Up and Connecting 46
3.5 Status Messages via LEDs 48

6 BinTec Access Networks GmbH
Table of Contents
3.5.1 Basic Unit 48
3.5.2 Expansion Cards 48
3.6 Boot Sequence 51
4 Configuration Requirements 53
4.1 Connection Methods 54
4.1.1 Man-Machine Interface (MMI) 55
4.1.2 Connecting Over the Serial Interface 55
4.1.3 Connecting Over a LAN 57
4.1.4 Connection Over ISDN 58
4.2 Logging In 60
4.2.1 User Names and Passwords in the Ex Works State 60
4.2.2 Logging In 60
4.3 Configuration Options 62
4.4 Using the Setup Tool 64
4.4.1 Menu Navigation 65
4.4.2 Menu Commands 66
4.4.3 Searching Lists 68
4.4.4 Changing the Password 69
4.4.5 Menu Architecture 71
4.5 Procedure for Initial Configuration 76
4.5.1 In Advance of Configuration 77
4.5.2 Installing BRICKware 78
4.5.3 Configuring a PC 79
5Man-Machine Interface (MMI) – Display with User Guide 81
5.1 Overview 82
5.2 Display and Input Keys 84
5.2.1 Using the Input Keys 84
5.2.2 Meaning of LEDs 85

X4100/200/300 User’s Guide 7
Table of Contents
5.2.3 Navigation Bars and Menu Architecture 86
5.3 Menus and Settings 87
5.3.1 Display Settings 88
5.3.2 IP Address and Netmask 90
5.3.3 Date and System Time 91
5.3.4 Basic Unit Data 92
5.3.5 Expansion Card Data 93
5.3.6 Monitoring 94
5.3.7 Defining Default Screen 95
5.3.8 Saving the Configuration 95
5.3.9 Restarting X4100/200/300 96
6 Basic Configuration of Basic Unit with Setup Tool 99
6.1 Basic Router Settings 100
6.1.1 License(s) 100
6.1.2 Entering System Data 103
6.1.3 Configuring the LAN Interface 106
6.1.4 Configuring X4100/200/300 as DHCP Server 110
6.1.5 Setting Filters 113
6.1.6 Where do we go from here? 117
6.2 Configuring WAN Interfaces 119
6.2.1 Configuring the ISDN BRI Interface 119
6.2.2 Configuring Serial WAN Interfaces for X4200 and X4300 130
6.2.3 Broadband Internet Access (xDSL) with
X4100 and X4200 or LAN Expansion Card 134
6.3 Configuring WAN Partners 142
6.3.1 Configuring WAN Partners 143
6.3.2 Creating a Routing Entry 160
6.3.3 Activating Network Address Translation (NAT) 165
6.3.4 Examples of WAN Partner Settings 166
6.4 Saving the Configuration 170

8 BinTec Access Networks GmbH
Table of Contents
6.5 Communications Applications 171
6.6 Testing your Configuration 172
7 Advanced Configuration of
Basic Unit with the Setup Tool 173
7.1 General WAN Settings 174
7.1.1 Dynamic IP Address Server 174
7.1.2 CAPI User Concept 176
7.1.3 General PPP Settings 179
7.1.4 X.31 TEI (Terminal Endpoint Identifier) 182
7.2 Settings Specific to WAN Partners 183
7.2.1 Delay after Connection Failure 183
7.2.2 Channel Bundling 184
7.2.3 Bandwidth on Demand (BoD) 186
7.2.4 Always On/Dynamic ISDN (AO/DI) 190
7.2.5 Application-Controlled Bandwidth Management 198
7.2.6 Layer 1 Protocol (ISDN B-Channel) 203
7.2.7 IP Transit Network 205
7.2.8 Transfer of DNS and WINS IP Addresses to WAN Partner 208
7.2.9 Routing Information Protocol (RIP) 211
7.2.10 Compression 213
7.2.11 Proxy ARP (Address Resolution Protocol) 215
7.2.12 Keepalive Monitoring 218
7.3 Basic IP Settings 223
7.3.1 System Time 223
7.3.2 Name Resolution in X4100/200/300 with DNS Proxy 227
7.3.3 Port Numbers 244
7.3.4 BOOTP Relay Agent 245
7.4 Quality of Service (QoS) 247
7.4.1 Defining IP Filters 249
7.4.2 Classification and (TOS) Signaling 250

X4100/200/300 User’s Guide 9
Table of Contents
7.4.3 Activating the Classification 255
7.4.4 Defining QoS Bandwidth Management Policies 256
7.5 Bridging 268
7.6 Extra License Functions 269
8 Configuration of Expansion
and Resource Cards with the Setup Tool 271
8.1 WAN Interface Card for ISDN BRI 272
8.2 WAN Interface Card for ISDN PRI and/or G.703 275
8.3 LAN Interface Card for 10/100 Mbps 281
8.4 Resource Card with Digital Modems 283
8.5 Resource Card for Encryption and Compression 292
9 Configuration of Security Functions 293
9.1 Activity Monitoring 294
9.1.1 Syslog Messages 294
9.1.2 Monitoring Functions in the Setup Tool 299
9.1.3 Credits Based Accounting System 303
9.1.4 Activity Monitor 306
9.2 Access Security 309
9.2.1 Logging In 309
9.2.2 Checking the Calling Party Number 310
9.2.3 Authentication of PPP Connections with PAP, CHAP or MS-CHAP 311
9.2.4 Callback 311
9.2.5 Closed User Group 313
9.2.6 Access to Remote CAPI 314
9.2.7 NAT (Network Address Translation) 314
9.2.8 Filters (Access Lists) 319
9.2.9 Local Filters 331
9.2.10 Back Route Verification 335

10 BinTec Access Networks GmbH
Table of Contents
9.2.11 TAF Agent 336
9.2.12 Extended IP Routing (XIPR) 336
9.3 Line Tapping Security 342
9.3.1 Encryption 342
9.3.2 VPN (with extra license) 345
9.3.3 IPSec (with extra license) 345
9.3.4 Leased Lines 346
9.4 Special Features 347
9.4.1 Startup Procedure 347
9.4.2 Auto Logout 347
9.4.3 Prevention of Denial-of-Service Attacks 347
9.5 Checklist 349
10 Configuration Management 351
10.1 Administration of Configuration Files 352
10.2 Updating Software 359
11 Troubleshooting 363
11.1 Aids to Troubleshooting 364
11.1.1 Man-Machine Interface (MMI) 364
11.1.2 Local SNMP Shell Commands 364
11.1.3 External Aids 365
11.2 Typical Errors and Procedure 367
11.2.1 System Errors 367
11.2.2 ISDN Connections 368
12 Technical Data 371
12.1 Mains Unit 372
12.2 Features of Basic Unit 373
12.2.1 Serial Console Interface 374

X4100/200/300 User’s Guide 11
Table of Contents
12.2.2 Ethernet/LAN Interface 375
12.2.3 10 BT Ethernet Interface for X4100 and X4200 376
12.2.4 ISDN BRI Interface 377
12.2.5 Serial WAN Interface for X4200 and X4300 378
12.3 Features of Expansion and Resource Cards 383
12.3.1 X4E-2/3BRI WAN Interface Card for ISDN BRI (Basic Rate Interface) 383
12.3.2 X4E-1/2PRI WAN Interface Card for
ISDN PRI (Primary Rate Interface) and/or G.703 384
12.3.3 X4E-2FE LAN Interface Card for
10/100 Mbps 386
12.3.4 XT-S/M/2M/L Resource Cards with Digital Modems 387
12.3.5 XT-ENC Resource Card for Encryption and Compression 388
13 Important Commands 391
13.1 SNMP Shell Commands 392
13.2 BRICKtools for Unix Commands 399
14 General Safety Precautions in 15 National Languages 401
Glossary 447
Index 465
Manual Questionnaire of User’s Guide 71000M, Version1.2 473

12 BinTec Access Networks GmbH
Table of Contents

X4100/200/300 User’s Guide 13
1
1 Welcome!
Congratulations on deciding to buy the X4100/200/300 extendible multiprotocol
router from the workgroup access series of BinTec Access Networks GmbH –
an efficient and future-oriented router solution for use in small and medium-
sized firms.
Figure 1-1: X4100/200/300 - the workgroup access routerfor present and future appli-
cations
X4100/200/300 provides a varied range of applications with just one basic unit:
■Router for leased lines with ISDN backup
■Router for analog and digital connections
■VPN solution with data encryption and ISDN backup
■Remote access server for up to 62 connections
■"Quality of Service" enables effective use of the available bandwidth
■"xDSL" supports broadband technologies such as ADSL, SDSL, cable mo-
dems, etc.
■Reliable corporate communications through powerful data encryption with
IPSec (optional)
■Central fax gateway for up to 30 connections in preparation
COK
X4300
COK
X4200
COK
X4100

14 BinTec Access Networks GmbH
Welcome!
1
1.1 X4100/200/300 – Workgroup Access
Router for Present and Future Applica-
tions
The extension capability of X4100/200/300 makes the multiprotocol router a fu-
ture-oriented and flexible investment. X4100/200/300 with its RISC CPU is ex-
tremely powerful and capable of meeting future requirements.
Basic unit The basic units can be mounted in a 19-inch cabinet using brackets. The stan-
dard equipment of the basic units includes a 10/100 BT Ethernet interface, an
ISDN BRI interface and a serial console interface.
The standard equipment of the X4100 basic unit also includes a 10 BT Ethernet
interface for xDSL.
The standard equipment of the X4200 basic unit also includes a 10 BT Ethernet
interface for xDSL and a serial X.21/V.35 interface for leased lines.
The standard equipment of the X4300 basic unit also includes two serial X.21/
V.35 interfaces for leased lines.
Expansion cards Aslotfor externally inserting an expansioncard enables X4100/200/300 to grow
in line with your requirements, so that you can use the same basic unit for var-
ious applications. This ensures a high degree of flexibility.
Resource cards All expansion cards can also be equipped with powerful resource cards. This
makes extremely high efficiency and high port or modem density possible. The
resource cards are equipped with digital modems for analog connections or with
encryption and compression modules (HiFn). HiFn encrypts the data to ensure
secure data transmission.
Multiprotocol router The flexible multiprotocol router can be used for WAN access, as well as for re-
mote access server, LAN router, remote CAPI server or fax gateway (in prepa-
ration). X4100/200/300 supports the protocols of the TCP/IP protocol family and
X.25 (optional) and is also suitable for bridging other protocols based on the
spanning tree method.
Remote CAPI Using BinTec’s remote CAPI interface, applications based on the widely used
CAPI interface can be used network-wide. This means the available ISDN con-
nections can be used more effectively.

X4100/200/300 User’s Guide 15
X4100/200/300 – Workgroup Access Router for Present and Future Applications 1
Security The features supplied include BinTec’s well-tried security package SAFER-
NETTM. This package contains security technologies such as filters, Network
Address Translation (NAT) and access passwords. The security functions pro-
tect X4100/200/300 and the network connected to it against unauthorized ac-
cess. IPSec is available as an option. X4100/200/300 can also be used to
provide VPNs (PPTP).
Quality of Service More and more applications need increasinglylarger bandwidths, which are not
always available. "Quality of Service" (QoS) makes it possible to use the avail-
able bandwidth and distribute the available resources effectively and intelligent-
ly. Certain applications can be given preference and bandwidth reserved for
them. This is an enormous advantage, especially for time-critical applications
such as VoIP, SAP, etc.
xDSL/Cable modem The X4100 and X4200 basic units are equipped with two Ethernet interfaces.
This makes them ideal for operation with various DSL modems (ADSL, SDSL,
etc.) or a cable modem.
IPSec X4100/200/300 can be optionally extended with full IPSec software, which pro-
vides interoperability with IPSec software from many other manufacturers. This
software supports features like "Internet Key Exchange", "pre-shared keys",
"Public Key Infrastructure", X.509v3 certificates, tunnel and transportmode and
the encryption processes DES, Triple DES, CAST and Blowfish with code
lengths up to 168 bits.
The future New technologies and developments are vital forBinTec Access NetworksGm-
bH. X4100/200/300’s flexible platform with an expansion slot and a powerful
processor enable the rapid use of new WAN/LAN technologies and features.
This makes X4100/200/300 a future-oriented and migration-capable device.
You can download BinTec’s current software free of charge from the World
Wide Web.
You will find detailed information about the individual subjects in the relevant
parts of this manual and in the more detailed documentation (on the BinTec
Companion CD).

16 BinTec Access Networks GmbH
Welcome!
1
1.2 Scope of Supply
This chapter describes the scope of supply for the basic units and expansion
cards.
1.2.1 Basic Unit
The X4100/200/300 basic unit is designed for mounting in a 19-inch rack. The
X4100/200/300 basic unit is supplied with the following parts:
■Cable sets
– Serial cable for the console port
– IEC AC power cord
– ISDN cable
■BinTec Companion CD
■Documentation
– User’s Guide
–Release Notes, if required
■19-inch mounting kit
1.2.2 Expansion Cards
The following expansion cards can be purchased for X4100/200/300:
■X4E-1/2PRI: WAN interface card for ISDN PRI and/or G.703
– equipped as standard with hardware support (HiFn) for encryption and
compression
– can be optionally equipped with up to two resource cards (XT-S, XT-M,
XT-2M, XT-L) with maximum 30 digital modems.
■X4E-2/3BRI: WAN interface card for ISDN BRI, can be optionally equipped
with
– a resource card with digital modems (XT-S, XT-M) and/or
– a resource card for encryption and compression (XT-ENC)

X4100/200/300 User’s Guide 17
Scope of Supply 1
■X4E-2FE: LAN interface card for 10/100 Mbps, can be optionally equipped
with
– a resource card for encryption and compression (XT-ENC)

18 BinTec Access Networks GmbH
Welcome!
1
1.3 BinTec Companion CD
You will find all the programsyou needfor the installation, configuration and ad-
ministration of X4100/200/300 on your BinTecCompanion CD.
BRICKware BRICKware for Windows contains the Windows utility programs:
■DIME Tools are for monitoring and administration of your X4100/200/300.
■You gain access to X4100/200/300 via the serial interface using the termi-
nal program Device at COM1 or Device at COM2.
■The Configuration Manager allows you to configure and administrate all
BinTec routers in the network via a graphic interface. Here you can view
and edit the SNMP tables and variables.
■Remote CAPI Client:
The Remote CAPI Client allows you to use communications applications
based on the standard CAPI interface.
■Token Authentication Firewall (TAF) program (optional):
This software package is required if you are using the Security Dynamics
security system.
■The Activity Monitor enables you to monitor the utilization of X4100/200/
300 at a glance.
More detailed descriptions of all software programs can be found in our online
manual BRICKware for Windows.
What else? The Companion CD also contains a range of other useful directories in which
you can find the following, for example:
■The documentation in electronic form (see chapter 1.4, page 19)
■A copy of the router software
■UNIX Tools (administration)
■Adobe Acrobat Reader

X4100/200/300 User’s Guide 19
Documentation from BinTec 1
1.4 Documentation from BinTec
The following documentation is currently available:
■User’s Guide (English)
This manual.
■Reference manuals (English, PDF/HTML).
–Software Reference (PDF)
Online reference with detailed information on functions described here,
a reference for the internal SNMP table structures and the operation of
the SNMP shell.
–MIBReference
HTML document with short descriptions about all SNMP tables and
variables for X4100/200/300.
■BRICKware for Windows (English, PDF)
User’s guide for Windows utility programs (BRICKware)
■Release Notes (English, PDF and/or printed)
Up-to-the-minute information and instructions concerning the latest soft-
ware release, description of all changes undertaken since the previous re-
lease.
In the Logic Release Notes, you will find instructions to help you upgrade
BOOTmonitor and/or firmware logic.
■Release Notes for router operation in UK (English, PDF)
Instructions for the operation of BinTec routers in Great Britain.
You received this documentation together with your X4100/200/300. The User’s
Guide isprovided in printed form. YourBinTec CompanionCD also contains the
complete documentation in electronic form (PDF, HTML). In addition to your
Companion CD documentation, you can download all the latest documentation
free of charge from our WWW server at www.bintec.net.

20 BinTec Access Networks GmbH
Welcome!
1
1.5 System Requirements
X4100/200/300 can be configured from all conventional platforms. X4100/200/
300 is a stand-alone device that is independent of the PC or operating system
to which it is connected. The router communicates with the PC via ISDN-Login,
a LAN interface (10/100 Mbps) or a serial connection. Your router can therefore
be used in many different operating system environments, such as DOS, Win-
dows, UNIX, AS/400, Macintosh or Novell.