BinTec X4100 User manual

X4100/200/300 User’s Guide 1
X4100/200/300
User’s Guide
Installation and Configuration
Copyright ©2003 BinTec Access Networks GmbH, all rights reserved.
Version 1.2
Document #71000M
April 2003

2 BinTec Access Networks GmbH
Purpose This manual explains the installation and initial configuration of X4100/200/300
with software release 6.1. For up-to-the-minute information and instructions
concerning the latest software release, you should always read our release
notes, especially when carrying out a software update to a later release level.
The latest release notes can always be found at www.bintec.net.
Liability While every effort has been made to ensure the accuracy of all information in
this manual,BinTec Access Networks GmbH cannotassume liability to any par-
ty for anyloss or damage caused by errors or omissions or by statements of any
kind in this document and is only liable within the scope of its terms of sale and
delivery.
The information in this manual is subject to change without notice. Additional in-
formation, including changes and release notes for X4100/200/300, can be
found at www.bintec.net.
As a multiprotocol router, X4100/200/300 sets up WAN connections in accor-
dance with the system configuration. To prevent unintentional charges accumu-
lating, the operation of the product should be carefully monitored. BinTec
Access Networks GmbH accepts no liability for loss of data, unintentional con-
nection costs and damages resulting from unsupervised operation of the prod-
uct.
Trademarks BinTec and the BinTec logo are registered trademarks of BinTec Access Net-
works GmbH.
Other productnames and trademarks mentioned are usually theproperty ofthe
respective companies and manufacturers.
Copyright All rights are reserved. No part of this publication may be reproduced or trans-
mitted in any form or by any means – graphic, electronic, or mechanical – in-
cluding photocopying, recording in any medium, taping, or storage in
information retrieval systems, without the prior written permission of BinTec Ac-
cess Networks GmbH. Adaptation and especially translation of the document is
inadmissible without the prior consent of BinTec Access Networks GmbH.
Guidelines and
standards X4100/200/300 complies with the following guidelines and standards:
■R&TTE Directive 1999/5/EC
■CE marking for all EU countries and Switzerland

X4100/200/300 User’s Guide 3
You will find further information in the "Declarations of Conformity" at
www.bintec.net.
How to reach BinTec BinTec Access Networks GmbH
Südwestpark 94
D-90449 Nürnberg
Germany
Telephone: [phone]
Fax: [phone]
Internet: www.bintec.de
You can find contact information for
BinTec France here:
www.bintec.fr

4 BinTec Access Networks GmbH

X4100/200/300 User’s Guide 5
Table of Contents
Table of Contents
Table of Contents 5
1 Welcome! 13
1.1 X4100/200/300 – Workgroup Access
Router for Present and Future Applications 14
1.2 Scope of Supply 16
1.2.1 Basic Unit 16
1.2.2 Expansion Cards 16
1.3 BinTec Companion CD 18
1.4 Documentation from BinTec 19
1.5 System Requirements 20
1.6 About this Manual 21
1.6.1 Contents 21
1.6.2 Meaning 22
1.7 Feedback 25
2 General Safety Precautions 27
3 Hardware Description and Installation 31
3.1 Basic Unit 32
3.1.1 Front Panel of Basic Unit 32
3.1.2 Rear of the Different Basic Units 33
3.2 Installation in 19-inch Cabinet 36
3.3 Expansion and Resource Cards 39
3.3.1 Interfaces and LEDs on Expansion Cards 39
3.3.2 Installation and Replacement of Expansion Card 42
3.4 Setting Up and Connecting 46
3.5 Status Messages via LEDs 48

6 BinTec Access Networks GmbH
Table of Contents
3.5.1 Basic Unit 48
3.5.2 Expansion Cards 48
3.6 Boot Sequence 51
4 Configuration Requirements 53
4.1 Connection Methods 54
4.1.1 Man-Machine Interface (MMI) 55
4.1.2 Connecting Over the Serial Interface 55
4.1.3 Connecting Over a LAN 57
4.1.4 Connection Over ISDN 58
4.2 Logging In 60
4.2.1 User Names and Passwords in the Ex Works State 60
4.2.2 Logging In 60
4.3 Configuration Options 62
4.4 Using the Setup Tool 64
4.4.1 Menu Navigation 65
4.4.2 Menu Commands 66
4.4.3 Searching Lists 68
4.4.4 Changing the Password 69
4.4.5 Menu Architecture 71
4.5 Procedure for Initial Configuration 76
4.5.1 In Advance of Configuration 77
4.5.2 Installing BRICKware 78
4.5.3 Configuring a PC 79
5Man-Machine Interface (MMI) – Display with User Guide 81
5.1 Overview 82
5.2 Display and Input Keys 84
5.2.1 Using the Input Keys 84
5.2.2 Meaning of LEDs 85

X4100/200/300 User’s Guide 7
Table of Contents
5.2.3 Navigation Bars and Menu Architecture 86
5.3 Menus and Settings 87
5.3.1 Display Settings 88
5.3.2 IP Address and Netmask 90
5.3.3 Date and System Time 91
5.3.4 Basic Unit Data 92
5.3.5 Expansion Card Data 93
5.3.6 Monitoring 94
5.3.7 Defining Default Screen 95
5.3.8 Saving the Configuration 95
5.3.9 Restarting X4100/200/300 96
6 Basic Configuration of Basic Unit with Setup Tool 99
6.1 Basic Router Settings 100
6.1.1 License(s) 100
6.1.2 Entering System Data 103
6.1.3 Configuring the LAN Interface 106
6.1.4 Configuring X4100/200/300 as DHCP Server 110
6.1.5 Setting Filters 113
6.1.6 Where do we go from here? 117
6.2 Configuring WAN Interfaces 119
6.2.1 Configuring the ISDN BRI Interface 119
6.2.2 Configuring Serial WAN Interfaces for X4200 and X4300 130
6.2.3 Broadband Internet Access (xDSL) with
X4100 and X4200 or LAN Expansion Card 134
6.3 Configuring WAN Partners 142
6.3.1 Configuring WAN Partners 143
6.3.2 Creating a Routing Entry 160
6.3.3 Activating Network Address Translation (NAT) 165
6.3.4 Examples of WAN Partner Settings 166
6.4 Saving the Configuration 170

8 BinTec Access Networks GmbH
Table of Contents
6.5 Communications Applications 171
6.6 Testing your Configuration 172
7 Advanced Configuration of
Basic Unit with the Setup Tool 173
7.1 General WAN Settings 174
7.1.1 Dynamic IP Address Server 174
7.1.2 CAPI User Concept 176
7.1.3 General PPP Settings 179
7.1.4 X.31 TEI (Terminal Endpoint Identifier) 182
7.2 Settings Specific to WAN Partners 183
7.2.1 Delay after Connection Failure 183
7.2.2 Channel Bundling 184
7.2.3 Bandwidth on Demand (BoD) 186
7.2.4 Always On/Dynamic ISDN (AO/DI) 190
7.2.5 Application-Controlled Bandwidth Management 198
7.2.6 Layer 1 Protocol (ISDN B-Channel) 203
7.2.7 IP Transit Network 205
7.2.8 Transfer of DNS and WINS IP Addresses to WAN Partner 208
7.2.9 Routing Information Protocol (RIP) 211
7.2.10 Compression 213
7.2.11 Proxy ARP (Address Resolution Protocol) 215
7.2.12 Keepalive Monitoring 218
7.3 Basic IP Settings 223
7.3.1 System Time 223
7.3.2 Name Resolution in X4100/200/300 with DNS Proxy 227
7.3.3 Port Numbers 244
7.3.4 BOOTP Relay Agent 245
7.4 Quality of Service (QoS) 247
7.4.1 Defining IP Filters 249
7.4.2 Classification and (TOS) Signaling 250

X4100/200/300 User’s Guide 9
Table of Contents
7.4.3 Activating the Classification 255
7.4.4 Defining QoS Bandwidth Management Policies 256
7.5 Bridging 268
7.6 Extra License Functions 269
8 Configuration of Expansion
and Resource Cards with the Setup Tool 271
8.1 WAN Interface Card for ISDN BRI 272
8.2 WAN Interface Card for ISDN PRI and/or G.703 275
8.3 LAN Interface Card for 10/100 Mbps 281
8.4 Resource Card with Digital Modems 283
8.5 Resource Card for Encryption and Compression 292
9 Configuration of Security Functions 293
9.1 Activity Monitoring 294
9.1.1 Syslog Messages 294
9.1.2 Monitoring Functions in the Setup Tool 299
9.1.3 Credits Based Accounting System 303
9.1.4 Activity Monitor 306
9.2 Access Security 309
9.2.1 Logging In 309
9.2.2 Checking the Calling Party Number 310
9.2.3 Authentication of PPP Connections with PAP, CHAP or MS-CHAP 311
9.2.4 Callback 311
9.2.5 Closed User Group 313
9.2.6 Access to Remote CAPI 314
9.2.7 NAT (Network Address Translation) 314
9.2.8 Filters (Access Lists) 319
9.2.9 Local Filters 331
9.2.10 Back Route Verification 335

10 BinTec Access Networks GmbH
Table of Contents
9.2.11 TAF Agent 336
9.2.12 Extended IP Routing (XIPR) 336
9.3 Line Tapping Security 342
9.3.1 Encryption 342
9.3.2 VPN (with extra license) 345
9.3.3 IPSec (with extra license) 345
9.3.4 Leased Lines 346
9.4 Special Features 347
9.4.1 Startup Procedure 347
9.4.2 Auto Logout 347
9.4.3 Prevention of Denial-of-Service Attacks 347
9.5 Checklist 349
10 Configuration Management 351
10.1 Administration of Configuration Files 352
10.2 Updating Software 359
11 Troubleshooting 363
11.1 Aids to Troubleshooting 364
11.1.1 Man-Machine Interface (MMI) 364
11.1.2 Local SNMP Shell Commands 364
11.1.3 External Aids 365
11.2 Typical Errors and Procedure 367
11.2.1 System Errors 367
11.2.2 ISDN Connections 368
12 Technical Data 371
12.1 Mains Unit 372
12.2 Features of Basic Unit 373
12.2.1 Serial Console Interface 374