Cabletron Systems Cabletron CyberSWITCH CSX5500 User manual

CENTRAL SITE
REMOTE ACCESS SWITCH
USER’SGUIDE
Release 7.4
Cabletron Systems
[phone] phone
[phone] fax
[e-mail]

USER’S GUIDE
2 CyberSWITCH
NOTICE
You may post this document on a network server for public use as long as no
modifications are made to the document.
Cabletron Systems reserves the right to make changes in specifications and other
information contained in this document without prior notice. The reader should in
all cases consult Cabletron Systems to determine whether any such changes have
been made.
The hardware, firmware, or software described in this manual is subject to change
without notice.
IN NO EVENT SHALL CABLETRON SYSTEMS BE LIABLE FOR ANY
INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES
WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING
OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION
CONTAINED IN IT, EVEN IF CABLETRON SYSTEMS HAS BEEN ADVISED OF,
KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH
DAMAGES.
©Copyright 1999 by Cabletron Systems, Inc. All rights reserved.
Cabletron Systems, Inc.
P.O. Box 5005
Rochester, NH 03866-5005
Order Number: 9032186-04
VIRUS DISCLAIMER
Cabletron Systems has tested its software with current virus checking
technologies. However, because no anti-virus system is 100% reliable, we strongly
caution you to write protect and then verify that the Licensed Software, prior to
installing it, is virus-free with an anti-virus system in which you have confidence.
Cabletron Systems makes no representations or warranties to the effect that the
Licensed Software is virus-free.
Copyright © July 1997, by Cabletron Systems, Inc. All rights reserved.
Only qualified personnel should perform installation
procedures.
!
CAUTION

Central Site Remote Access Switch 3
TRADEMARKS
Cabletron Systems, CyberSWITCH, MMAC-Plus, SmartSWITCH, SPECTRUM,
and SecureFast Virtual Remote Access Manager are trademarks of Cabletron
Systems, Inc.
All other product names mentioned in this manual are trademarks or registered
trademarks of their respective companies.
COPYRIGHTS
All of the code for this product is copyrighted by Cabletron Systems, Inc.
© Copyright 1991-1997 Cabletron Systems, Inc. All rights reserved. Printed in the
United States of America.
Portionsofthecodeforthisproductarecopyrighted bythefollowingcorporations:
Epilogue Technology Corporation
Copyright 1991-1993 by Epilogue Technology Corporation. All rights reserved.
Livingston Enterprises, Inc.
Copyright 1992 Livingston Enterprises, Inc.
Security Dynamics Technologies Inc.
Copyright 1995 by Security Dynamics Technologies Inc. All rights reserved.
Stac Electronics
Stac Electronics 1993, including one or more U.S. Patents No. 4701745, 5016009,
5126739 and 5146221 and other pending patents.
Telenetworks
Copyright 1991, 92, 93 by Telenetworks. All rights reserved.
FCC NOTICE
This device complies with Part 15 of the FCC rules. Operation is subject to the
following two conditions: (1) this device may not cause harmful interference, and
(2) this device must accept any interference received, including interference that
may cause undesired operation.
NOTE: This equipment has been tested and found to comply with the limits for a
Class A digital device, pursuant to Part 15 of the FCC rules. These limits are
designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. This equipment uses,
generates, and can radiate radio frequency energy and if not installed in
accordance with the operator’s manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely to cause
interference in which case the user will be required to correct the interference at his
own expense.

USER’S GUIDE
4 CyberSWITCH
WARNING: Changes or modifications made to this device which are not expressly
approved by the party responsible for compliance could void the user’s authority
to operate the equipment.
DOC NOTICE
This digital apparatus does not exceed the Class A limits for radio noise emissions
from digital apparatus set out in the Radio Interference Regulations of the
Canadian Department of Communications.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les
limites applicables aux appareils numériques de la class A prescrites dans le
Règlement sur le brouillage radioélectrique édicté par le ministère des
Communications du Canada.
VCCI NOTICE
This is a Class 1 product based on the standard of the Voluntary Control Council
for Interference by Information Technology Equipment (VCCI). If this equipment
is used in a domestic environment, radio disturbance may arise. When such
trouble occurs, the user may be required to take corrective actions.
CABLETRON SYSTEMS, INC. PROGRAM LICENSE AGREEMENT
IMPORTANT: Before utilizing this product, carefully read this License Agreement.
This document is an agreement between you, the end user, and Cabletron Systems,
Inc. ("Cabletron") that sets forth your rights and obligations with respect to the
Cabletron software program (the "Program") contained in this package. The
Program may becontained infirmware, chips or other media.BY UTILIZING THE
ENCLOSED PRODUCT, YOU ARE AGREEING TO BECOME BOUND BY THE
TERMS OF THIS AGREEMENT, WHICH INCLUDES THE LICENSE AND THE
LIMITATION OF WARRANTY AND DISCLAIMER OF LIABILITY. IF YOU DO
NOT AGREE TO THE TERMS OF THIS AGREEMENT, PROMPTLY RETURN
THE UNUSED PRODUCT TO THE PLACE OF PURCHASE FOR A FULL
REFUND.

Central Site Remote Access Switch 5
CONTENTS
USING THIS GUIDE 25
Documentation Set 26
Guide Conventions 27
SYSTEM OVERVIEW 29
The CyberSWITCH 30
Unique System Features 31
Interoperability Overview 34
Interoperability Protocols 34
Interoperability Devices 35
Encryption Overview 36
Network Layer 36
Link Layer 36
Security Overview 37
Network Interface Overview 37
System Components 38
Remote ISDN Devices 39
Switches Supported 40
Hardware Overview 41
System Platforms 41
The CSX5500 42
Platform Description 42
Cleaning the CSX5500 Air Filter 43
Platform Characteristics 44
Caution for DC-Powered CSX5500s 45
The CSX6000 46
Platform Description 46
Cleaning the CSX6000 Air Filter 47
Platform Characteristics 47
Caution for DC-Powered CSX6000s 48
The CSX7000 49
Platform Description 49
Platform Characteristics 49
Caution for DC-Powered CSX7000s 50
The NE 2000-II (A Network Express Platform) 51
Platform Description 51
Platform Characteristics 52
The NE 4000 (A Network Express Platform) 53
Platform Description 53
Platform Characteristics 53
The NE 5000 Platform (A Network Express Platform) 55
Platform Description 55
Cleaning the NE 5000 Air Filter 56
Platform Characteristics 57

USER’S GUIDE
6 CyberSWITCH
System Adapters 58
Ethernet Adapters 58
Ethernet-2 Adapter 58
Ethernet-1 Adapter 58
Hardware Characteristics 59
LAN Connection 59
Basic Rate Adapters 59
BRI-4 Basic Rate Adapter 59
BRI-1 Basic Rate Adapter 60
BRI Connection 60
Primary Rate Adapters 61
The PRI-8 61
The PRI-23 61
The PRI-23/30 62
PRI-8, PRI-23, and PRI-23/30 Connection 63
Expander Adapter 63
Hardware Characteristics 63
V.35 Adapter 64
Hardware Characteristics 64
V.35 Connection 64
RS232 Adapter 65
Hardware Characteristics 66
RS232 Connection 66
Digital Modems 67
The DM-8 68
The DM-24 68
The DM-24+and DM-30+ 68
Encryption Adapter 69
Software Overview 70
System software 70
Administration software 70
System Files 71
Configuration Files 71
Operational Files 72
User Level Security Files 73
SYSTEM INSTALLATION 74
Ordering ISDN Service (US Only) 75
Overview 75
Ordering NI-1 Lines Using EZ-ISDN Codes 75
Ordering NI-1 Lines Using NI-1 ISDN Ordering Codes 75
Ordering BRI ISDN Lines using Provisioning Settings 75
Provisioning Settings for AT&T 5ESS Switches 76
AT&T 5ESS NI-1 Service 77
AT&T 5ESS Custom Point-to-Point Service 78
Provision Settings for Northern Telecom DMS-100 Switches 78
Northern Telecom DMS100 NI-1 Service 79
Northern Telecom DMS100 Custom Service 80
Basic Information for Ordering PRI ISDN Lines 80

Central Site Remote Access Switch 7
Hardware Installation 83
Overview 83
Pre-Installation Requirements 83
Selecting Slots for the Adapters 84
Adapter Settings 85
Adapter Interrupt and I/O Address Settings 86
WAN Adapters 86
DM-8 Adapter I/O Address Settings 86
DM-24 Adapter Interrupt and I/O Address Settings 87
DM-24+ and the DM-30+ Adapter Address Settings 88
Encryption Adapter Settings 89
MVIP Settings 89
Additional Adapter Settings 90
PRI-8 90
PRI-23 91
PRI-23/30 92
Inserting the Adapters into the CyberSWITCH 93
Connecting Adapter Inter-Board Cables 94
Connecting Multiple Adapters 94
Connecting a WAN Adapter to the LCD 96
Summary of Guidelines 97
Cabling Guidelines 97
Termination Guidelines 97
Accessing the CyberSWITCH 98
Overview 98
Making Connections 98
Direct Connection 98
Null-Modem Connection to a PC 99
Remote Connection using Telnet 100
Remote Connections (Modem to Modem) 101
Analog Modem on the CyberSWITCH 101
Digital Modem on the CyberSWITCH 102
Establishing an Administration Session 103
Accessing the Release Notes 104
Upgrading System Software 105
Overview 105
Installing Software 105
Upgrading System Software 107
Local Upgrade 107
Procedure 107
Handling Upgrade Warnings and Errors 108
Remote Upgrade 108
Accessing the Release Notes 109

USER’S GUIDE
8 CyberSWITCH
BASIC CONFIGURATION 110
Configuration Tools 111
Overview 111
CFGEDIT 111
Executing CFGEDIT 112
Saving CFGEDIT Changes 112
Dynamic Management 112
Executing Dynamic Management 112
Utility Dynamic Management Commands 113
Saving Dynamic Management Changes 113
Using the Network Worksheets 114
Using the Configuration Chapters 114
Configuring Resources and Lines 115
Overview 115
Resources 115
Configuring Resources 115
Resource Configuration Elements 116
Resource Background Information 117
Lines 119
Configuring Lines 119
Configuring a Line for a BRI Resource 119
Configuring a Line for a PRI Resource 119
Configuring a Line for V.35 and RS232 Resources 120
Configuring Changes for a COMMPORT Resource 121
Line Configuration Elements 122
Line Background Information 126
R2 Signaling 127
Subaddresses 127
Configuring a Subaddress 127
Subaddress Configuration Elements 127
Subaddresses Background Information 127
Configuring Basic Bridging 128
Overview 128
MAC Layer Bridging Option 128
Enabling/Disabling Bridging 128
MAC Layer Bridging Configuration Elements 128
MAC Layer Bridging Background Information 129
Configuring Basic IP Routing 130
Overview 130
Internet Protocol (IP) Option 130
Enabling IP 130
IP Option Configuration Elements 131
IP Background Information 131
IP Operating Mode 131
Configuring the IP Operating Mode 131
IP Operating Mode Configuration Elements 132
IP Operating Mode Background Information 132

Central Site Remote Access Switch 9
IP Network Interfaces 133
Configuring Interfaces 133
Network Interface Configuration Elements 135
IP Network Interface Background Information 140
IP RIP and the IP Network Interfaces 145
IP RIP over Dedicated Connections 148
IP Host Operating Mode and the IP Network Interfaces 150
Using Multiple IP Addresses 150
Static Routes 152
Configuring Static Routes 152
Static Route Configuration Elements 154
Static Route Background Information 156
Default Routes 157
Configuring Default Routes 157
Default Route Configuration Elements 157
Routing Information Protocol (RIP) Option 158
Enabling/Disabling IP RIP 158
IP RIP Configuration Elements 159
IP RIP Background Information 159
SECURITY AND ENCRYPTION OPTIONS 160
Security Overview 161
Overview 161
Security Level 161
System Options and Information 162
Device Level Databases 162
User Level Databases 163
Off-node Server Information 163
Network Login Information 163
Configuring Security Level 164
Overview 164
No Security 166
Configuring No Security 166
Device Level Security 167
Configuring Device Level Security 167
Device Level Security Background Information 167
Overview of Device Authentication Process 168
User Level Security 168
Configuring User Level Security 168
User Level Security Background Information 168
Authentication Using a Security Token Card 169
System Requirements 170
Authentication Process with User Level Security 171
Device and User Level Security 172
Configuring Device and User Level Security 172
Device and User Level Background Information 173

USER’S GUIDE
10 CyberSWITCH
Configuring System Options and Information 174
Overview 174
System Options 174
Configuring System Options 174
System Options Configuration Elements 175
System Options Background Information 177
System Information 178
Configuring System Information 178
System Information Configuration Elements 178
System Information Background Information 179
Administrative Session 179
Configuring Administrative Sessions 179
Administrative Session Configuration Elements 180
Administrative Session Background Information 181
Alternative Database Location Background Information 181
Session Inactivity Background Information 181
Number of Administrative Telnet Sessions Background Information 181
Telnet Server TCP Port Number Background Information 181
Emergency Telnet Server Port Number Background Information 182
Configuring Device Level Databases 183
Overview 183
On-node Device Database 183
Configuring an On-node Device Database 183
On-node Device Entries 184
Configuring On-node Device Entries 184
On-node Device Database Configuration Elements 191
General Configuration Elements 191
ISDN Configuration Elements 191
Frame Relay Access Configuration Elements 193
X.25 Access Configuration Elements 193
Digital Modem Configuration Elements 194
Authentication Configuration Elements 194
IP Information Configuration Elements 196
IPX Information Configuration Elements 196
AppleTalk Information Configuration Elements 197
Bridge Information Configuration Elements 198
Compression Configuration Elements 199
On-node Device Database Background Information 199
On-node Device Database Security Requirements 199
Off-node Device Database Location 203
Configuring Off-node Device Database Location 203
Off-node Device Database Location Configuration Elements 204
Off-node Device Database Location Background Information 204
Configuring User Level Databases 205
Overview 205
User Level Authentication Database Location 205
Configuring Authentication Database Location 205
User Level Authentication Database Location Configuration Elements 206
User Level Authentication Database Location Background Information 206