Cabletron Systems CyberSWITCH CSX1200 User manual

WORKGROUP
REMOTE ACCESS SWITCH
USER’SGUIDE
Release 7.2
Cabletron Systems
[phone] phone
[phone] fax
[e-mail]

USER’S GUIDE
2 CyberSWITCH
NOTICE
You may post this document on a network server for public use as long as no
modifications are made to the document.
Cabletron Systems reserves the right to make changes in specifications and other
information contained in this document without prior notice. The reader should in
all cases consult Cabletron Systems to determine whether any such changes have
been made.
The hardware, firmware, or software described in this manual is subject to change
without notice.
IN NO EVENT SHALL CABLETRON SYSTEMS BE LIABLE FOR ANY
INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES
WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING
OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION
CONTAINED IN IT, EVEN IF CABLETRON SYSTEMS HAS BEEN ADVISED OF,
KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH
DAMAGES.
©Copyright 1998 by Cabletron Systems, Inc. All rights reserved.
Cabletron Systems, Inc.
P.O. Box 5005
Rochester, NH 03866-5005
Order Number: 9032187-02
VIRUS DISCLAIMER
Cabletron Systems has tested its software with current virus checking
technologies. However, because no anti-virus system is 100% reliable, we strongly
caution you to write protect and then verify that the Licensed Software, prior to
installing it, is virus-free with an anti-virus system in which you have confidence.
Cabletron Systems makes no representations or warranties to the effect that the
Licensed Software is virus-free.
Copyright © July 1997, by Cabletron Systems, Inc. All rights reserved.
Only qualified personnel should perform installation
procedures.
!
CAUTION

Workgroup Remote Access Switch 3
TRADEMARKS
Cabletron Systems, CyberSWITCH, MMAC-Plus, SmartSWITCH, SPECTRUM,
and SecureFast Virtual Remote Access Manager are trademarks of Cabletron
Systems, Inc.
All other product names mentioned in this manual are trademarks or registered
trademarks of their respective companies.
COPYRIGHTS
All of the code for this product is copyrighted by Cabletron Systems, Inc.
© Copyright 1991-1997 Cabletron Systems, Inc. All rights reserved. Printed in the
United States of America.
Portionsofthecodeforthisproductarecopyrightedbythefollowingcorporations:
Epilogue Technology Corporation
Copyright 1991-1993 by Epilogue Technology Corporation. All rights reserved.
Livingston Enterprises, Inc.
Copyright 1992 Livingston Enterprises, Inc.
Security Dynamics Technologies Inc.
Copyright 1995 by Security Dynamics Technologies Inc. All rights reserved.
Stac Electronics
Stac Electronics 1993, including one or more U.S. Patents No. 4701745, 5016009,
5126739 and 5146221 and other pending patents.
Telenetworks
Copyright 1991, 92, 93 by Telenetworks. All rights reserved.
FCC NOTICE
This device complies with Part 15 of the FCC rules. Operation is subject to the
following two conditions: (1) this device may not cause harmful interference, and
(2) this device must accept any interference received, including interference that
may cause undesired operation.
NOTE: This equipment has been tested and found to comply with the limits for a
Class A digital device, pursuant to Part 15 of the FCC rules. These limits are
designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. This equipment uses,
generates, and can radiate radio frequency energy and if not installed in
accordance with the operator’s manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely to cause
interference in which case the user will be required to correct the interference at his
own expense.

USER’S GUIDE
4 CyberSWITCH
WARNING: Changes or modificationsmade to this device which are not expressly
approved by the party responsible for compliance could void the user’s authority
to operate the equipment.
DOC NOTICE
This digital apparatus does not exceed the Class A limits for radio noise emissions
from digital apparatus set out in the Radio Interference Regulations of the
Canadian Department of Communications.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les
limites applicables aux appareils numériques de la class A prescrites dans le
Règlement sur le brouillage radioélectrique édicté par le ministère des
Communications du Canada.
VCCI NOTICE
This is a Class 1 product based on the standard of the Voluntary Control Council
for Interference by Information Technology Equipment (VCCI). If this equipment
is used in a domestic environment, radio disturbance may arise. When such
trouble occurs, the user may be required to take corrective actions.
CABLETRON SYSTEMS, INC. PROGRAM LICENSE AGREEMENT
IMPORTANT: Before utilizing this product, carefully read this License Agreement.
This document is an agreement between you, the end user, and Cabletron Systems,
Inc. ("Cabletron") that sets forth your rights and obligations with respect to the
Cabletron software program (the "Program") contained in this package. The
Program may be contained in firmware, chips or other media. BY UTILIZING THE
ENCLOSED PRODUCT, YOU ARE AGREEING TO BECOME BOUND BY THE
TERMS OF THIS AGREEMENT, WHICH INCLUDES THE LICENSE AND THE
LIMITATION OF WARRANTY AND DISCLAIMER OF LIABILITY. IF YOU DO
NOT AGREE TO THE TERMS OF THIS AGREEMENT, PROMPTLY RETURN
THE UNUSED PRODUCT TO THE PLACE OF PURCHASE FOR A FULL
REFUND.

Workgroup Remote Access Switch 5
CONTENTS
Using this Guide 23
Documentation Set 24
Guide Conventions 25
SYSTEM OVERVIEW 26
The CyberSWITCH 27
The CyberSWITCH Network 27
Unique System Features 28
Interoperability Overview 30
Interoperability Protocols 30
Interoperability Devices 31
Security Overview 32
Network Interface Overview 32
System Components 33
Remote ISDN Devices 34
Switches Supported 35
Hardware Overview 36
Safety Considerations 36
System Platforms 37
The CSX1000 and NE Link 1000 (a Network Express Product) 37
Platform Description 38
System Characteristics 40
The CSX1200 42
Platform Description 43
System Characteristics 43
Cabling Information 44
LAN Access 44
Back-to-Back Setup 45
WAN Access 46
Administration Console Access 47
System Modules 48
The CSX1200-E11-MOD 48
The CSX1200-U4-MOD 50
Software Overview 51
Overview 51
System software 51
System Files 51
Configuration Files 51
Operational Files 52
User Level Security Files 53

USER’S GUIDE
6 CyberSWITCH
SYSTEM INSTALLATION 54
Ordering ISDN Service (US Only) 56
Overview 56
Ordering NI-1 Lines Using EZ-ISDN Codes 56
Ordering NI-1 Lines Using NI-1 ISDN Ordering Codes 56
Ordering BRI ISDN Lines using Provisioning Settings 56
Provisioning Settings for AT&T 5ESS Switches 57
AT&T 5ESS NI-1 Service 58
AT&T 5ESS Custom Point-to-Point Service 59
Provision Settings for Northern Telecom DMS-100 Switches 60
Northern Telecom DMS100 NI-1 Service 60
Northern Telecom DMS100 Custom Service 61
Basic Information for Ordering PRI ISDN Lines 61
Hardware Installation 63
Pre-Installation Requirements 63
Installing the CSX1200-E11-MOD 64
Installing the CSX1200-U4-MOD 65
Cabling 66
Accessing the CyberSWITCH 67
Overview 67
Making Connections 67
Direct Connection 67
Null-Modem Connection to a PC 67
Changing the Baud Rate 68
Remote Connection using Telnet 69
Remote Connection using a Modem 69
Establishing an Administration Session 70
Powering On 70
Accessing the Release Notes 72
Upgrading System Software 73
Overview 73
Upgrading Software 73
CD File Structure 73
Local Software Upgrade 76
Local Upgrade of the Second Stage Boot (SSB) 76
Local Upgrade of the Operational Software (OSW) 77
Remote Software Upgrade 77
Remote Upgrade of the Second Stage Boot (SSB) 78
Remote Upgrade of the Operational Software (OSW) 79
Change Defaults to Secure System 80
Return Configuration to Factory Defaults 81
Accessing the Release Notes 81

Workgroup Remote Access Switch 7
BASIC CONFIGURATION 82
Configuration Tools 83
Overview 83
CFGEDIT 83
Executing CFGEDIT 83
Saving CFGEDIT Changes 84
Dynamic Management 84
Executing Dynamic Management 84
Utility Dynamic Management Commands 85
Saving Dynamic Management Changes 85
Default Configuration 86
Using the Network Worksheets 86
Using the Configuration Chapters 87
Configuring Resources and Lines 88
Overview 88
Resources 88
Configuring Resources 88
Resource Configuration Elements 90
Resource Background Information 90
Lines 92
Configuring Lines 92
Configuring a Line for a BRI Resource 92
Configuring Changes for a COMMPORT Resource 92
Configuring a Line for a PRI Resource 93
Line Configuration Elements 94
Line Background Information 98
Subaddresses 99
Configuring a Subaddress 99
Subaddress Configuration Elements 99
Subaddresses Background Information 99
Configuring Basic Bridging 100
Overview 100
MAC Layer Bridging Option 100
Enabling/Disabling Bridging 100
MAC Layer Bridging Configuration Elements 100
MAC Layer Bridging Background Information 101
Configuring Basic IP Routing 102
Overview 102
Internet Protocol (IP) Option 102
Enabling IP 102
IP Option Configuration Elements 103
IP Background Information 103
IP Operating Mode 103
Configuring the IP Operating Mode 103
IP Operating Mode Configuration Elements 104
IP Operating Mode Background Information 104

USER’S GUIDE
8 CyberSWITCH
IP Network Interfaces 105
Configuring Interfaces 105
Network Interface Configuration Elements 107
IP Network Interface Background Information 112
IP RIP and the IP Network Interfaces 117
IP RIP over Dedicated Connections 120
IP Host Operating Mode and the IP Network Interfaces 122
Using Multiple IP Addresses 122
Static Routes 124
Configuring Static Routes 124
Static Route Configuration Elements 126
Static Route Background Information 128
Default Routes 129
Configuring Default Routes 129
Default Route Configuration Elements 129
Routing Information Protocol (RIP) Option 130
Enabling/Disabling IP RIP 130
IP RIP Configuration Elements 131
IP RIP Background Information 131
SECURITY 132
Security Overview 133
Overview 133
Security Level 133
System Options and Information 134
Device Level Databases 134
User Level Databases 135
Off-node Server Information 135
Network Login Information 135
Configuring Security Level 136
Overview 136
No Security 138
Configuring No Security 138
Device Level Security 139
Configuring Device Level Security 139
Device Level Security Background Information 139
Overview of Device Authentication Process 140
User Level Security 140
Configuring User Level Security 140
User Level Security Background Information 140
Authentication Using a Security Token Card 141
System Requirements 142
Authentication Process with User Level Security 143
Device and User Level Security 144
Configuring Device and User Level Security 144
Device and User Level Background Information 145

Workgroup Remote Access Switch 9
Configuring System Options and Information 146
Overview 146
System Options 146
Configuring System Options 146
System Options Configuration Elements 147
System Options Background Information 149
System Information 150
Configuring System Information 150
System Information Configuration Elements 150
System Information Background Information 151
Administrative Session 151
Configuring Administrative Sessions 151
Administrative Session Configuration Elements 152
Administrative Session Background Information 153
Alternative Database Location Background Information 153
Session Inactivity Background Information 153
Number of Administrative Telnet Sessions Background Information 153
Telnet Server TCP Port Number Background Information 153
Emergency Telnet Server Port Number Background Information 154
Configuring Device Level Databases 155
Overview 155
On-node Device Database 155
Configuring an On-node Device Database 155
On-node Device Entries 156
Configuring On-node Device Entries 156
On-node Device Database Configuration Elements 163
General Configuration Elements 163
ISDN Configuration Elements 163
Frame Relay Access Configuration Elements 165
X.25 Access Configuration Elements 165
Authentication Configuration Elements 165
IP Information Configuration Elements 167
IPX Information Configuration Elements 167
AppleTalk Information Configuration Elements 168
Bridge Information Configuration Elements 169
Compression Configuration Elements 170
On-node Device Database Background Information 170
On-node Device Database Security Requirements 170
Off-node Device Database Location 174
Configuring Off-node Device Database Location 174
Off-node Device Database Location Configuration Elements 175
Off-node Device Database Location Background Information 175
Configuring User Level Databases 176
Overview 176
User Level Authentication Database Location 176
Configuring Authentication Database Location 176
User Level Authentication Database Location Configuration Elements 177
User Level Authentication Database Location Background Information 177

USER’S GUIDE
10 CyberSWITCH
Configuring Off-node Server Information 178
Overview 178
Multiple Administration Login Names 178
VRA Manager Authentication Server 179
Configuring VRA Manager Authentication Server 179
VRA Manager Authentication Server Configuration Elements 180
VRA Manager Authentication Server Background Information 180
RADIUS Authentication Server 180
Configuring a RADIUS Authentication Server 180
RADIUS Authentication Server Configuration Elements 182
RADIUS Authentication Server Background Information 182
TACACS Authentication Server 183
Configuring a TACACS Authentication Server 183
TACACS Authentication Server Configuration Elements 184
TACACS Authentication Server Background Information 184
ACE Authentication Server 185
Configuring an ACE Authentication Server 185
Alternate Method of Configuration 186
ACE Authentication Server Configuration Elements 186
ACE Authentication Server Background Information 187
Configuring Network Login Information 188
Overview 188
Network Login General Configuration 188
Configuring General Network Login Information 188
Network Login General Configuration Background Information 189
Network Login Banners 190
Configuring Network Login Banners 190
Network Login Banners Background Information 190
Login Configuration Specific to RADIUS Server 191
Configuring RADIUS Server Login Information 191
Login Configuration Specific to RADIUS Server Background Information 192
Login Configuration Specific to TACACS Server 192
Configuring TACACS Server Login Information 192
Login Configuration Specific to TACACS Server Background Information 194
ADVANCED CONFIGURATION 195
Configuring Alternate Accesses 196
Overview 196
Dedicated Accesses 196
Configuring a Dedicated Access 196
Dedicated Access Configuration Elements 196
Dedicated Access Background Information 197
X.25 Accesses 198
Configuring an X.25 Access 198
Basic Configuration Information 198
LAPB Configuration Information 199
X.25 Configuration Information 199
Permanent Virtual Circuit Information 201