Cabletron Systems CyberSWITCH CSX150 User manual

SMALL OFFICE
REMOTE ACCESS SWITCH
USER’SGUIDE
Release 7.2
Cabletron Systems
[phone] phone
[phone] fax
[e-mail]

USER’S GUIDE
2 CyberSWITCH
NOTICE
You may post this document on a network server for public use as long as no
modifications are made to the document.
Cabletron Systems reserves the right to make changes in specifications and other
information contained in this document without prior notice. The reader should in
all cases consult Cabletron Systems to determine whether any such changes have
been made.
The hardware, firmware, or software described in this manual is subject to change
without notice.
IN NO EVENT SHALL CABLETRON SYSTEMS BE LIABLE FOR ANY
INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES
WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING
OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION
CONTAINED IN IT, EVEN IF CABLETRON SYSTEMS HAS BEEN ADVISED OF,
KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH
DAMAGES.
©Copyright 1998 by Cabletron Systems, Inc. All rights reserved.
Cabletron Systems, Inc.
P.O. Box 5005
Rochester, NH 03866-5005
Order Number: 9032450
VIRUS DISCLAIMER
Cabletron Systems has tested its software with current virus checking
technologies. However, because no anti-virus system is 100% reliable, we strongly
caution you to write protect and then verify that the Licensed Software, prior to
installing it, is virus-free with an anti-virus system in which you have confidence.
Cabletron Systems makes no representations or warranties to the effect that the
Licensed Software is virus-free.
Copyright © July 1997, by Cabletron Systems, Inc. All rights reserved.
Only qualified personnel should perform installation
procedures.
!
CAUTION

Small Office Remote Access Switch 3
TRADEMARKS
Cabletron Systems, CyberSWITCH, MMAC-Plus, SmartSWITCH, SPECTRUM,
and SecureFast Virtual Remote Access Manager are trademarks of Cabletron
Systems, Inc.
All other product names mentioned in this manual are trademarks or registered
trademarks of their respective companies.
COPYRIGHTS
All of the code for this product is copyrighted by Cabletron Systems, Inc.
© Copyright 1991-1997 Cabletron Systems, Inc. All rights reserved. Printed in the
United States of America.
Portionsofthecodeforthisproductarecopyrightedbythefollowingcorporations:
Epilogue Technology Corporation
Copyright 1991-1993 by Epilogue Technology Corporation. All rights reserved.
Livingston Enterprises, Inc.
Copyright 1992 Livingston Enterprises, Inc.
Security Dynamics Technologies Inc.
Copyright 1995 by Security Dynamics Technologies Inc. All rights reserved.
Stac Electronics
Stac Electronics 1993, including one or more U.S. Patents No. 4701745, 5016009,
5126739 and 5146221 and other pending patents.
Telenetworks
Copyright 1991, 92, 93 by Telenetworks. All rights reserved.
FCC NOTICE
This device complies with Part 15 of the FCC rules. Operation is subject to the
following two conditions: (1) this device may not cause harmful interference, and
(2) this device must accept any interference received, including interference that
may cause undesired operation.
NOTE: This equipment has been tested and found to comply with the limits for a
Class A digital device, pursuant to Part 15 of the FCC rules. These limits are
designed to provide reasonable protection against harmful interference when the
equipment is operated in a commercial environment. This equipment uses,
generates, and can radiate radio frequency energy and if not installed in
accordance with the operator’s manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely to cause
interference in which case the user will be required to correct the interference at his
own expense.

USER’S GUIDE
4 CyberSWITCH
WARNING: Changes or modifications made to this device which are not expressly
approved by the party responsible for compliance could void the user’s authority
to operate the equipment.
DOC NOTICE
This digital apparatus does not exceed the Class A limits for radio noise emissions
from digital apparatus set out in the Radio Interference Regulations of the
Canadian Department of Communications.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les
limites applicables aux appareils numériques de la class A prescrites dans le
Règlement sur le brouillage radioélectrique édicté par le ministère des
Communications du Canada.
VCCI NOTICE
This is a Class 1 product based on the standard of the Voluntary Control Council
for Interference by Information Technology Equipment (VCCI). If this equipment
is used in a domestic environment, radio disturbance may arise. When such
trouble occurs, the user may be required to take corrective actions.
CABLETRON SYSTEMS, INC. PROGRAM LICENSE AGREEMENT
IMPORTANT: Before utilizing this product, carefully read this License Agreement.
This document is an agreement between you, the end user, and Cabletron Systems,
Inc. ("Cabletron") that sets forth your rights and obligations with respect to the
Cabletron software program (the "Program") contained in this package. The
Program may be contained in firmware, chips or othermedia.BY UTILIZING THE
ENCLOSED PRODUCT, YOU ARE AGREEING TO BECOME BOUND BY THE
TERMS OF THIS AGREEMENT, WHICH INCLUDES THE LICENSE AND THE
LIMITATION OF WARRANTY AND DISCLAIMER OF LIABILITY. IF YOU DO
NOT AGREE TO THE TERMS OF THIS AGREEMENT, PROMPTLY RETURN
THE UNUSED PRODUCT TO THE PLACE OF PURCHASE FOR A FULL
REFUND.

Small Office Remote Access Switch 5
CONTENTS
Using this Guide 22
Documentation Set 23
Guide Conventions 24
SYSTEM OVERVIEW 25
The CyberSWITCH 26
The CyberSWITCH Network 26
Unique System Features 27
Interoperability Overview 29
Interoperability Protocols 29
Interoperability Devices 30
Security Overview 31
Network Interface Overview 31
System Components 32
Remote ISDN Devices 32
Switches Supported 33
Hardware Overview 34
Safety Considerations 34
System Platforms 35
CyberSWITCH Characteristics 35
CyberSWITCH Series 36
CyberSWITCH Front Panel 36
CyberSWITCH Back Panel 37
Software Overview 39
Overview 39
System software 39
System Files 39
Configuration Files 39
Operational Files 40
User Level Security Files 41
SYSTEM INSTALLATION 42
Ordering ISDN Service (US Only) 43
Overview 43
Ordering NI-1 Lines Using EZ-ISDN Codes 43
Ordering NI-1 Lines Using NI-1 ISDN Ordering Codes 43
For Non-POTS Devices 43
For Single POTS Devices 43
For Dual POTS Devices 44

USER’S GUIDE
6 CyberSWITCH
Ordering BRI ISDN Lines using Provisioning Settings 44
Provisioning Settings for AT&T 5ESS Switches 45
AT&T 5ESS NI-1 Service 45
AT&T 5ESS Custom Point-to-Point Service 46
Provision Settings for Northern Telecom DMS-100 Switches 46
Northern Telecom DMS100 NI-1 Service 47
Northern Telecom DMS100 Custom Service 48
Hardware Installation 49
Pre-Installation Requirements 49
Accessing the CyberSWITCH 50
Overview 50
Making Connections 50
Direct Connection 50
Null-Modem Connection to a PC 50
Changing the Baud Rate 52
Remote Connection using Telnet 52
Establishing an Administration Session 53
Powering On 53
Accessing the Release Notes 54
Upgrading System Software 56
Overview 56
Upgrading Software 56
Local Software Upgrade 57
Local Upgrade of the Second Stage Boot (SSB) 57
Local Upgrade of the Operational Software (OSW) 58
Remote Software Upgrade 58
Remote Upgrade of the Second Stage Boot (SSB) 59
Remote Upgrade of the Operational Software (OSW) 60
Change Defaults to Secure System 61
Return Configuration to Factory Defaults 62
Accessing the Release Notes 62
BASIC CONFIGURATION 63
Configuration Tools 64
Overview 64
CFGEDIT 64
Executing CFGEDIT 64
Saving CFGEDIT Changes 65
Dynamic Management 65
Executing Dynamic Management 65
Utility Dynamic Management Commands 66
Saving Dynamic Management Changes 66
Default Configuration 67
Using the Network Worksheets 67
Using the Configuration Chapters 68

Small Office Remote Access Switch 7
Configuring Resources and Lines 69
Overview 69
Resources 69
Configuring Resources 69
Resource Configuration Elements 71
Resource Background Information 71
Lines 72
Configuring Lines 72
Configuring Changes for a COMMPORT Resource 73
Line Configuration Elements 74
Line Background Information 77
Subaddresses 78
Configuring a Subaddress 78
Subaddress Configuration Elements 78
Subaddresses Background Information 78
POTS Option 78
Configuring the POTS Option 78
POTS Configuration Elements 80
POTS Background Information 80
Configuring Basic Bridging 81
Overview 81
MAC Layer Bridging Option 81
Enabling/Disabling Bridging 81
MAC Layer Bridging Configuration Elements 81
MAC Layer Bridging Background Information 82
Configuring Basic IP Routing 83
Overview 83
Internet Protocol (IP) Option 83
Enabling IP 83
IP Option Configuration Elements 84
IP Background Information 84
IP Operating Mode 84
Configuring the IP Operating Mode 84
IP Operating Mode Configuration Elements 85
IP Operating Mode Background Information 85
IP Network Interfaces 86
Configuring Interfaces 86
Network Interface Configuration Elements 88
IP Network Interface Background Information 93
IP RIP and the IP Network Interfaces 97
IP RIP over Dedicated Connections 101
IP Host Operating Mode and the IP Network Interfaces 103
Using Multiple IP Addresses 103
Static Routes 105
Configuring Static Routes 105
Static Route Configuration Elements 107
Static Route Background Information 109
Default Routes 110
Configuring Default Routes 110
Default Route Configuration Elements 110

USER’S GUIDE
8 CyberSWITCH
Routing Information Protocol (RIP) Option 111
Enabling/Disabling IP RIP 111
IP RIP Configuration Elements 112
IP RIP Background Information 112
SECURITY 113
Security Overview 114
Overview 114
Security Level 114
System Options and Information 115
Device Level Databases 115
User Level Databases 116
Off-node Server Information 116
Network Login Information 116
Configuring Security Level 117
Overview 117
No Security 119
Configuring No Security 119
Device Level Security 120
Configuring Device Level Security 120
Device Level Security Background Information 120
Overview of Device Authentication Process 121
User Level Security 121
Configuring User Level Security 121
User Level Security Background Information 121
Authentication Using a Security Token Card 122
System Requirements 123
Authentication Process with User Level Security 124
Device and User Level Security 125
Configuring Device and User Level Security 125
Device and User Level Background Information 126
Configuring System Options and Information 127
Overview 127
System Options 127
Configuring System Options 127
System Options Configuration Elements 128
System Options Background Information 130
System Information 131
Configuring System Information 131
System Information Configuration Elements 131
System Information Background Information 132
Administrative Session 132
Configuring Administrative Sessions 132
Administrative Session Configuration Elements 133
Administrative Session Background Information 134
Alternative Database Location Background Information 134
Session Inactivity Background Information 134
Number of Administrative Telnet Sessions Background Information 134

Small Office Remote Access Switch 9
Telnet Server TCP Port Number Background Information 134
Emergency Telnet Server Port Number Background Information 135
Configuring Device Level Databases 136
Overview 136
On-node Device Database 136
Configuring an On-node Device Database 136
On-node Device Entries 137
Configuring On-node Device Entries 137
On-node Device Database Configuration Elements 144
General Configuration Elements 144
ISDN Configuration Elements 144
Frame Relay Access Configuration Elements 146
X.25 Access Configuration Elements 146
Authentication Configuration Elements 146
IP Information Configuration Elements 148
IPX Information Configuration Elements 148
AppleTalk Information Configuration Elements 149
Bridge Information Configuration Elements 150
POTS Information 151
Compression Configuration Elements 151
On-node Device Database Background Information 151
On-node Device Database Security Requirements 152
Off-node Device Database Location 156
Configuring Off-node Device Database Location 156
Off-node Device Database Location Configuration Elements 156
Off-node Device Database Location Background Information 156
Configuring User Level Databases 157
Overview 157
User Level Authentication Database Location 157
Configuring Authentication Database Location 157
User Level Authentication Database Location Configuration Elements 158
User Level Authentication Database Location Background Information 158
Configuring Off-node Server Information 159
Overview 159
Multiple Administration Login Names 159
VRA Manager Authentication Server 160
Configuring VRA Manager Authentication Server 160
VRA Manager Authentication Server Configuration Elements 161
VRA Manager Authentication Server Background Information 161
RADIUS Authentication Server 161
Configuring a RADIUS Authentication Server 161
RADIUS Authentication Server Configuration Elements 163
RADIUS Authentication Server Background Information 163
TACACS Authentication Server 164
Configuring a TACACS Authentication Server 164
TACACS Authentication Server Configuration Elements 165
TACACS Authentication Server Background Information 165

USER’S GUIDE
10 CyberSWITCH
ACE Authentication Server 166
Configuring an ACE Authentication Server 166
ACE Authentication Server Configuration Elements 167
ACE Authentication Server Background Information 168
Configuring Network Login Information 169
Overview 169
Network Login General Configuration 169
Configuring General Network Login Information 169
Network Login General Configuration Background Information 170
Network Login Banners 171
Configuring Network Login Banners 171
Network Login Banners Background Information 171
Login Configuration Specific to RADIUS Server 172
Configuring RADIUS Server Login Information 172
Login Configuration Specific to RADIUS Server Background Information 173
Login Configuration Specific to TACACS Server 173
Configuring TACACS Server Login Information 173
Login Configuration Specific to TACACS Server Background Information 175
ADVANCED CONFIGURATION 176
Configuring Alternate Accesses 177
Dedicated Accesses 177
Configuring a Dedicated Access 177
Dedicated Access Configuration Elements 177
Dedicated Access Background Information 178
X.25 Accesses 179
Configuring an X.25 Access 179
Basic Configuration Information 179
LAPB Configuration Information 180
X.25 Configuration Information 180
Permanent Virtual Circuit Information 182
X.25 Configuration Elements 182
X.25 Line Configuration Elements 182
LAPB Configuration Elements 183
X.25 Access Configuration Elements 184
PVC Configuration Elements 187
X.25 Access Background Information 188
Current X.25 Restrictions 190
Frame Relay Accesses 190
Configuring a Frame Relay Access 190
Configuring General Access Information 190
Configuring a PVC 191
Frame Relay General Configuration Elements 192
Frame Relay PVC Configuration Elements 193
Frame Relay Access Background Information 195
The Local Management Interface Overview 196
Data Rate Control Overview 196
Congestion Control Overview 197
Current Restrictions 197