Cabletron Systems Cyber SWITCH 1000 User manual

WORKGROUP
REMOTE ACCESS SWITCH
EXAMPLE NETWORKS
Release 7.2
Cabletron Systems
[phone] phone
[phone] fax
[e-mail]

EXAMPLE NETWORKS
2 CyberSWITCH
NOTICE
You may post this document on a network server for public use as long as no
modifications are made to the document.
Cabletron Systems reserves the right to make changes in specifications and other
information contained in this document without prior notice. The reader should in
all cases consult Cabletron Systems to determine whether any such changes have
been made.
The hardware, firmware, or software described in this manual is subject to change
without notice.
IN NO EVENT SHALL CABLETRON SYSTEMS BE LIABLE FOR ANY
INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES
WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING
OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION
CONTAINED IN IT, EVEN IF CABLETRON SYSTEMS HAS BEEN ADVISED OF,
KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH
DAMAGES.
©Copyright 1998 by Cabletron Systems, Inc. All rights reserved.
Cabletron Systems, Inc.
P.O. Box 5005
Rochester, NH 03866-5005
Order Number:9032236-02
VIRUS DISCLAIMER
Cabletron Systems has tested its software with current virus checking
technologies. However, because no anti-virus system is 100% reliable, we strongly
caution you to write protect and then verify that the Licensed Software, prior to
installing it, is virus-free with an anti-virus system in which you have confidence.
Cabletron Systems makes no representations or warranties to the effect that the
Licensed Software is virus-free.
Copyright © July 1997, by Cabletron Systems, Inc. All rights reserved.
Only qualified personnel should perform installation
procedures.
!
CAUTION

Workgroup Remote Access Switch 3
TRADEMARKS
Cabletron Systems, CyberSWITCH, MMAC-Plus, SmartSWITCH, SPECTRUM,
and SecureFast Virtual Remote Access Manager are trademarks of Cabletron
Systems, Inc.
All other product names mentioned in this manual are trademarks or registered
trademarks of their respective companies.
COPYRIGHTS
All of the code for this product is copyrighted by Cabletron Systems, Inc.
© Copyright 1991-1997 Cabletron Systems, Inc. All rights reserved. Printed in the
United States of America.
Portionsofthecodeforthisproductarecopyrightedbythefollowingcorporations:
Epilogue Technology Corporation
Copyright 1991-1993 by Epilogue Technology Corporation. All rights reserved.
Livingston Enterprises, Inc.
Copyright 1992 Livingston Enterprises, Inc.
Security Dynamics Technologies Inc.
Copyright 1995 by Security Dynamics Technologies Inc. All rights reserved.
Stac Electronics
Stac Electronics 1993, including one or more U.S. Patents No. 4701745, 5016009,
5126739 and 5146221 and other pending patents.
Telenetworks
Copyright 1991, 92, 93 by Telenetworks. All rights reserved.
FCC NOTICE
This device complies with Part 15 of the FCC rules. Operation is subject to the
following two conditions: (1) this device may not cause harmful interference, and
(2) this device must accept any interference received, including interference that
may cause undesired operation.
NOTE: This equipment has been tested and found to comply with the limits for a
Class A digital device, pursuant to Part 15 of the FCC rules. These limits are
designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. This equipment uses,
generates, and can radiate radio frequency energy and if not installed in
accordance with the operator’s manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely to cause
interference in which case the user will be required to correct the interference at his
own expense.

EXAMPLE NETWORKS
4 CyberSWITCH
WARNING: Changes or modificationsmade to this device which are not expressly
approved by the party responsible for compliance could void the user’s authority
to operate the equipment.
DOC NOTICE
This digital apparatus does not exceed the Class A limits for radio noise emissions
from digital apparatus set out in the Radio Interference Regulations of the
Canadian Department of Communications.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les
limites applicables aux appareils numériques de la class A prescrites dans le
Règlement sur le brouillage radioélectrique édicté par le ministère des
Communications du Canada.
VCCI NOTICE
This is a Class 1 product based on the standard of the Voluntary Control Council
for Interference by Information Technology Equipment (VCCI). If this equipment
is used in a domestic environment, radio disturbance may arise. When such
trouble occurs, the user may be required to take corrective actions.
CABLETRON SYSTEMS, INC. PROGRAM LICENSE AGREEMENT
IMPORTANT: Before utilizing this product, carefully read this License Agreement.
This document is an agreement between you, the end user, and Cabletron Systems,
Inc. ("Cabletron") that sets forth your rights and obligations with respect to the
Cabletron software program (the "Program") contained in this package. The
Program may be contained in firmware, chips or other media. BY UTILIZING THE
ENCLOSED PRODUCT, YOU ARE AGREEING TO BECOME BOUND BY THE
TERMS OF THIS AGREEMENT, WHICH INCLUDES THE LICENSE AND THE
LIMITATION OF WARRANTY AND DISCLAIMER OF LIABILITY. IF YOU DO
NOT AGREE TO THE TERMS OF THIS AGREEMENT, PROMPTLY RETURN
THE UNUSED PRODUCT TO THE PLACE OF PURCHASE FOR A FULL
REFUND.

Workgroup Remote Access Switch 5
CONTENTS
Simple Remote Bridging Network 9
Overview 9
Initial Installation Steps 9
Configuring the Simple Remote Bridge 9
Resources 10
Lines 10
Bridging and Routing Information 11
Bridging 11
IP Routing 11
Configure the CyberSWITCH 12
Save Configuration Files 15
Verify the Installation 16
Remote Bridging Network with Security 17
Overview 17
Initial Installation Steps 17
Resources 19
Lines 19
Device Information 20
Bridging and Routing Information 22
Bridging 22
IP Routing 22
Configure the CyberSWITCH 23
Configuring the Options 23
Configuring the Security 23
Save Configuration Files 26
Verify the Installation 27
IP Routing Network 28
Overview 28
Initial Installation Steps 28
System Details 30
Resources 30
Lines 30
Device Information 31
Device Information 33
Bridging and Routing Information 35
Bridging 35
IP Routing 35
Configure the CyberSWITCH 36
Configuring the CyberSWITCH Options 36
Configuring the Security 40
Save Configuration Files 43
Verify the Installation 44
IP Routing Network with Remote Bridge Devices 45
Overview 45
Business Assumptions 45
Initial Installation Steps 45
Resources 47

EXAMPLE NETWORKS
6 CyberSWITCH
Lines 47
Device Information 48
Bridging and Routing Information 50
Bridging 50
IP Routing 50
Configure the CyberSWITCH 51
Configuring the CyberSWITCH Options 51
Configuring the Security 54
Verify the Installation 57
IP Routing Network with PPP Devices 58
Overview 58
Initial Installation Steps 58
System Details 60
Resources 60
Lines 60
Bridging and Routing Information 61
Bridging 61
IP Routing 61
Bridging and Routing Information 62
Bridging 62
IP Routing 62
Device Information 63
Configure SITE1 65
Configuring the System Options 65
Finishing the Security Configuration 73
Configure SITE2 74
Configuring SITE2 Options 74
Configuring Security 75
Save Configuration Files 75
Verify the Installation 75
IPX Routing Network 77
Overview 77
Business Assumptions 77
Initial Installation Steps 77
System Details 79
Resources 79
Lines 79
Device Information 80
Bridging and Routing Information 83
Bridging 83
IP Routing 83
IPX Routing 84
Configure IPX Routing: Masternet (Detroit) 85
Configure Devices 85
Configure System Options 87
Save Configuration Files 92
Configure the Remote Devices 92
Verify the Installation 92

Workgroup Remote Access Switch 7
AppleTalk Routing Network 93
Overview 93
Initial Installation Steps 93
Resources 95
Lines 95
AppleTalk Routing 96
Configure the CyberSWITCH 98
Configuring the Options 98
Configuring Device Information 101
Configuring an AppleTalk Static Route 104
Save Configuration Files 105
Verify the Installation 105
Index 106

E XAMPLE N ETWORKS
We provide several example networks, beginning with a simple network and progressing to more
complex networks. You may find the configuration instructions provided for each example helpful
when configuring your own network.
We include the following chapters:
• Simple Remote Bridging Network
An example ofa simple network using remote bridge devices to access a CyberSWITCH’s four
basic rate lines.
• Remote Bridging Network with Security
A bridged network with Calling Line Id security and Bridge MAC Address security enabled.
The network is configured with two devices. One device will be configured to require a Bridge
MAC Address security password, and one device will not. This network uses BRI lines.
•IPRoutingNetwork
An IP routing network with devices accessing the network from their homes.
• IP Routing Network with Remote Bridge Devices
A smart bridging interface to allow the two remote bridge devices to connect to an IP subnet.
The CyberSWITCH treats these devices connected to the Smart Bridging network interface as
if they were connected to the same Ethernet segment.
• IP Routing Network with PPP Devices
Uses IP routing to connect two of our products, both using PPP. Each system is on a separate
LAN. The configuration for this network is designed to allow three different types of accesses.
•IPXRoutingNetwork
A sample network using IPX protocol to communicatewith remote bridges as well as a remote
IPX router.
• AppleTalk Network
An AppleTalk network made up of two LANs, separated by the WAN.

S IMPLE R EMOTE B RIDGING N ETWORK
OVERVIEW
This chapter provides an example of a simple network using remote bridge devices to access four
basic rate lines in the CyberSWITCH. Bridges are formed between each of the LANs to which the
remote bridge devices are connected, and the LAN to which the CyberSWITCH is connected.
The following section provides the initial installation steps that would be used with any type of
network installation.
INITIAL INSTALLATION STEPS
The initial steps in the CyberSWITCH installation process are basically the same no matter how
complicated the network. These steps are:
• completing the requirement worksheets
•orderingISDNservice
• powering on the system
• accessing Release Notes
• connecting an administration console
• setting up Telnet access
• upgrading system software
• changing defaults to secure system
• returning configuration to factory defaults
The chapters Accessing the CyberSWITCH and Upgrading System Software (in the User’s Guide)
describe each of these steps in detail.
Worksheets for this network are included on the next few pages.
CONFIGURING THE SIMPLE REMOTE BRIDGE
Because this is a simple bridged network, you only need to fill out the System Details and Bridging
and Routing Information worksheets. The worksheets for Example 1 are on the following pages.

EXAMPLE NETWORKS
10 CyberSWITCH
System Name: SITE1 PAP Password:_______________ CHAP Secret:___________________
RESOURCES
LINES
BRI Lines
PRI Lines
V.35 and RS232 Lines
Type Slot Switch type Synchronization type
BRI 15ESS
Ethernet_1 2
Name Slot Port Line type Call screen TEI SPID Directory number
Line1 1 1 PPP Auto
Line2 1 2 PPP Auto
Line3 1 3 PPP Auto
Line4 1 4 PPP Auto
Name Slot Port Framing type Line coding Sig. method Line build-out
Name Slot Port Device/Network Idle character
SYSTEM DETAILS

Workgroup Remote Access Switch 11
S IMPLE R EMOTE B RIDGING N ETWORK
Bridging and Routing Information
BRIDGING
IP ROUTING
Network Interface Information
Static Routes
Bridging X enabled ❒disabled
Mode of Operation ❒restricted ❒unrestricted
Bridge Filters
Bridge Dial Out/
Known Connect List
IP Routing X enabled ❒disabled
Mode of Operation ❒router X IP host
LAN Name
IP address
Mask
Unnumbered WAN ❒need
❒don’t need
Remote LAN Name
IP address
Mask
Traditional WAN Name
IP address
Mask
Direct Host WAN Name
IP address 192.42.1.6 192.42.1.7
Mask
IP Host Mode IP address
Mask
Destination network address Mask Next hop
❒ default?
❒default?
❒default?
❒default?
BRIDGING AND ROUTING INFORMATION

EXAMPLE NETWORKS
12 CyberSWITCH
CONFIGURE THE CYBERSWITCH
Using CFGEDIT, we will guide you through the steps to configure the CyberSWITCH for a simple
remote bridge network. We will execute these steps in the same order as they appear in the
configuration menus.
Start the CFGEDIT configuration utility. Type the following command at the system prompt:
cfgedit <return>
The following Main Menu will then be displayed:
CONFIGURING THE PHYSICAL RESOURCE INFORMATION
We start with configuring the Physical Resource information. Press 1 at the Main Menu to display
the Physical Resource Configuration Menu:
You may only configure the switch type. The rest of the resource information may only be
displayed.
We will next add the line information. Press 2 at the Physical Resources Menu and press 1 to add a
line. First, you will be prompted for the line name. You will then be asked to select which slot and
port you wish to use. We will use LINE1 as the line name, and slot 1, port 1 as the slot and port
combination:
You will then be prompted for the line interface type. For our example, we will be using point-to-
point lines. Press 1 as shown below to select this line type.
Main Menu:
1) Physical Resources
2) Options
3) Security
4) Save Changes
Select function from above or <RET> to exit:
Physical Resource Menu:
1) Resources
2) Data Lines
3) Access
4) ISDN Subaddress
Select function from above or <RET> for previous menu:
LINE NAME or press <RET> for previous menu: LINE1
Currently available Ports:
SLOT Resource Type Available Ports Switch Type
---- --------------- ----------------- ---------------
1 BASIC_RATE 1, 2, 3, 4 BRI_5ESS
Slot number from above? 1
Port number from Slot 1? 1

Workgroup Remote Access Switch 13
S IMPLE R EMOTE B RIDGING N ETWORK
Bridging and Routing Information
The nextitem thatyou need to configureis the Data Linkfor theline. Depending on the switch type,
there may be more than one Data Link per line. In our example, we use one Data Link with
Automatic TEI Negotiation:
After entering the above information, press <return> to display the line menu. Because there are
four lines in this example, the steps for adding a line should be repeated for lines 2, 3, and 4. After
all lines have been added, press <return> twice to return to the Main Menu.
CONFIGURING THE OPTIONS
The default configuration for the CyberSWITCH is bridging disabled and IP routing enabled. For
reasons we provide below, we want both bridging and IP routing enabled. Under the Option Menu,
select the bridging option and follow the instructions to enable bridging.
This network is abridged network, but we are going to configure an IP option (the IP host operating
mode) so that we may use an IP application (such as Telnet, TFTP, or SNMP) to manage the
CyberSWITCH. Refer to the graphic below for clarification.
LINE TYPE = BR_ISDN
1) POINT_TO_POINT
2) POINT_MULTIPOINT
Select Option [default = POINT_TO_POINT] or press <RET> for previous menu: 1
Current DATA LINK Configuration for this line:
id TEI
-- ----
There are currently no Data Links configured for this line.
Enter (1) to Add or press <RET> for previous menu: 1
Automatic TEI Negotiation (Y or N) [default = Y]? Y
Current Data Link Configuration for this line:
id TEI
-- ----
1 AUTO
(1) Add, (2) Change, (3) Delete a DATA LINK or press <RET> for previous menu? <RET>

EXAMPLE NETWORKS
14 CyberSWITCH
The network illustrated above is a bridged network. Each system, SITE1 and SITE2 have been
configured with all the necessary bridging information. SITE1and SITE2 have also been configured
in the IP host operating mode, and each have an IP host interface. This will allow each system to be
managed remotely by the PC using Telnet client software (once the initial configuration has been
completed).
Note that the IP address associated with each system is on the same LAN as the PC. This does not
have to be the case. As long as the PC has access to the systems through their IP addresses, it can
manage the systems using Telnet (or one of the other IP applications).
The steps below describe the configuration steps needed for the above example:
To enable the IP Host Operating Mode:
1. Select IP Operating Mode from the IP configuration menu.
2. Select IP host operating mode.
Note: The IP operating mode can not be set to host unless bridging is enabled.
3. When you select the IP host operating mode, an abbreviated IP configuration will be displayed
(similar to the following):
IP Menu:
1) IP Routing (Enable/Disable)
2) IP Operating Mode
3) IP Interfaces
4) IP Static Routes
5) RIP (Enable/Disable)
6) IP Static ARP Table Entries
7) Isolated Mode (Enable/Disable)
8) Static Route Lookup via RADIUS (Enable/Disable)
9) IP Address Pool
10) IP Filter Information
11) DHCP Information
Select function from above or <RET> for previous menu:
Telnet Client
192.42.1.0 IP Host Interface
192.42.1.6
IP Host Interface
192.42.1.7
ISDN
CSX1200 "A"
CSX1200 "B"
POWER SERVICE TX RX 10BASE- T
LAN B-CHANNELS E1ONLY
B2 B4 B6 B8 B26B28
B22 B24
B18 B20
B14 B16
B10 B12 B30 L1
B1 B3 B5 B7 B25B27
B21 B23
B17 B19
B13 B15
B9 B11 B29B31
E1
DT1
D
POWER SERVICE TX RX 10BASE- T
LAN B-CHANNELS E1ONLY
B2 B4 B6 B8 B26B28
B22 B24
B18 B20
B14 B16
B10 B12 B30 L1
B1 B3 B5 B7 B25B27
B21 B23
B17 B19
B13 B15
B9 B11 B29B31
E1
DT1
D

Workgroup Remote Access Switch 15
S IMPLE R EMOTE B RIDGING N ETWORK
Bridging and Routing Information
To configure the IP host interface:
1. Select IP Interfaces from the IP configuration menu.
2. Select to add an interface.
3. Enter the IP address assigned to this interface. For SITE1, this is 192.42.1.6; for SITE2, this is
192.42.1.7.
4. Enter the subnet mask.
5. Enter the MTU size.
6. Select the transmit broadcast address.
If IP RIP is enabled, enter the following additional information:
7. IP RIP receive control.
8. IP RIP respond control.
9. IP RIP v2 authentication control.
10. IP RIP v2 authentication key (required only if the IP RIP v2 authentication control has been
configured with a value other than “No Authentication.“
For more detailed information on the IP host operating mode, refer to the IP Operating Mode section
in the Configuring Basic IP Routing chapter of the User’s Guide.
CONFIGURING THE SECURITY
For this network configuration, we require no security. The default configuration is device security
enabled. To make the required configuration change, select Security from the Main Menu. Then
select Security Level. Finally, select No Security.
SAVE CONFIGURATION FILES
We have now configured all of the required information. Press 4 from the Main menu to save the
changes and then press <RET> to exit. Reboot the system to activate your changes.

EXAMPLE NETWORKS
16 CyberSWITCH
VERIFY THE INSTALLATION
Steps on how to verify the installation are detailed in the System Verification chapter of the User’s
Guide. This section gives an outline of which steps should be executed.
On the CyberSWITCH:
Verify resources are operational
Issue
dr command
Look for BRI line messages
Look for LAN initialized messages
Look for Bridge initialized messages
Verify WAN Lines Available
Connect WAN lines
Issue
dr command
Look for “Data Link up 1,1” in reports
On each Combinet LAN:
Attempt accessing a resource on the system LAN. This may require that you reboot your machine
and proceed through the logon sequence.

R EMOTE B RIDGING N ETWORK WITH S ECURITY
OVERVIEW
This example network is a bridged network with Calling Line Id security and Bridge MAC Address
security enabled. The network is configured with two devices. One device will be configured to
require a Bridge MAC Address security password, and one device will not. This network uses BRI
lines.
Worksheets for this network are included on the following pages.
Note that a Hunt Group is used for the BRI lines pictured in the Network Topology Worksheet.
Remote devices will thenonly need to configure one telephone number (the Hunt Group number)
for the CyberSWITCH instead of all four phone numbers. If the first line is busy, the next line is
automatically used, and so on until a free line is found. A Hunt Group number can be arranged
through your Service Provider.
INITIAL INSTALLATION STEPS
The initial steps in the CyberSWITCH installation process are basically the same no matter how
complicated the network. These steps are:
• completing the requirement worksheets
•orderingISDNservice
• powering on the system
• accessing Release Notes
• connecting an administration console
• setting up Telnet access
• upgrading system software
• changing defaults to secure system
• returning configuration to factory defaults
The chapters Accessing the CyberSWITCH and Upgrading System Software (in the User’s Guide)
describe each of these steps in detail.
Worksheets for this network are included on the next few pages.

EXAMPLE NETWORKS
18 CyberSWITCH
File Server
BRIBRI
PC
PC
PC
BRI
Hunt Group Number:
13135551111
13135551111
13135551112 13135551113
13135551114
13135551212
13135552121 13135556789 13135559876
Bridge Ethernet Address:
000123456789
Password: JXF30
Bridge Ethernet Address:
003456789000
Password: None
User Name:
Mike Mann User Name: Pat Smith
Bridges
ISDN
POWER SERVICE TX RX 10BASE - T
LAN B-CHANNELS E1 ONLY
B2 B4 B6 B8 B26 B28
B22 B24
B18 B20
B14 B16
B10 B12 B30 L1
B1 B3 B5 B7 B25 B27
B21 B23
B17 B19
B13 B15
B9 B11 B29 B31
E1
DT1
D
NETWORK TOPOLOGY

Workgroup Remote Access Switch 19
R EMOTE B RIDGING N ETWORK WITH S ECURITY
Initial Installation Steps
System Name: Remote Bridge PAP Password:_______________ CHAP Secret:___________________
RESOURCES
LINES
BRI Lines
* Hunt Group Number: 13135551111
PRI Lines
Type Slot Switch type Synchronization type
BRI 1NI-1
Ethernet_1 2
Name Slot Port Line type Call
screen TEI SPID Directory number
Line1 1 1 PPP Auto 3135551111 13135551111*
3135551112 13135551112*
Line2 1 2 PPP Auto 3135551113 13135551113*
3135551114 13135551114*
Name Slot Port Framing type Line coding Sig. method Line build-out
SYSTEM DETAILS

EXAMPLE NETWORKS
20 CyberSWITCH
Device Name: Mike Mann
Calling (ISDN, FR, etc.) Information X.25 Information
Authentication Information : Frame Relay Information
* HDLC Bridge only
Protocol for this particular device?
Bridge IP
IPX AppleTalk
Line Protocol HDLC bridge PVC
Base Data Rate SVC
Initial Data Rate
Max Data Rate
Dial-Out Number(s)
PAP Password DLCI
CHAP Secret
IP Host ID
Bridge Ethernet Address* 000123456789
Bridge Password* JXF30
CLID(s) 13135551212 13135552121
Bridging enabled? ❒enabled ❒disabled IP enabled? ❒enabled ❒disabled
Make calls
for bridged data? ❒enabled ❒disabled IP Address (on WAN link)
For IP RLAN, IP (Sub-)
network number ❒0.0.0.0 if unnumbered link
For IPX RLAN, external
network number Make calls for IP data? ❒enabled ❒disabled
IPX enabled? ❒enabled ❒disabled AppleTalk enabled? ❒enabled ❒disabled
Callable by IPX? ❒enabled ❒disabled AppleTalk Address
IPXWAN protocol? ❒enabled ❒disabled Make calls for
AT data? ❒enabled ❒disabled
IPX routing protocol?
❒none ❒RIP/SAP
❒ triggered RIP/SAP
AT Routing Protocol
IPX spoofing?
DEVICE INFORMATION