Funkwerk bintec R230a User manual

Copyright ©May 2, 2006 Funkwerk Enterprise Communications GmbH
Version 2.0
User’s Guide
bintec R230a / R230aw / R232b / R232bw
Access and Configuration

Purpose This document is part of the user’s guide to the installation and configuration of bintec gateways run-
ning software release 7.2.10 or later. For up-to-the-minute information and instructions concerning the
latest software release, you should always read our Release Notes, especially when carrying out a
software update to a later release level. The latest Release Notes can be found at www.funkwerk-
ec.com.
Liability While every effort has been made to ensure the accuracy of all information in this manual, Funkwerk
Enterprise Communications GmbH cannot assume liability to any party for any loss or damage caused
by errors or omissions or by statements of any kind in this document and is only liable within the scope
of its terms of sale and delivery.
The information in this manual is subject to change without notice. Additional information, changes and
Release Notes for bintec gateways can be found at www.funkwerk-ec.com.
As multiprotocol gateways, bintec gateways set up WAN connections in accordance with the system
configuration. To prevent unintentional charges accumulating, the operation of the product should be
carefully monitored. Funkwerk Enterprise Communications GmbH accepts no liability for loss of data,
unintentional connection costs and damages resulting from unsupervised operation of the product.
Trademarks bintec and the bintec logo are registered trademarks of Funkwerk Enterprise Communications GmbH.
Other product names and trademarks mentioned are usually the property of the respective companies
and manufacturers.
Copyright All rights are reserved. No part of this publication may be reproduced or transmitted in any form or by
any means – graphic, electronic, or mechanical – including photocopying, recording in any medium,
taping, or storage in information retrieval systems, without the prior written permission of Funkwerk En-
terprise Communications GmbH. Adaptation and especially translation of the document is inadmissible
without the prior consent of Funkwerk Enterprise Communications GmbH.
Guidelines and standards bintec gateways comply with the following guidelines and standards:
R&TTE Directive 1999/5/EG
CE marking for all EU countries and Switzerland
You will find detailed information in the Declarations of Conformity at www.funkwerk-ec.com.
How to reach Funkwerk
Enterprise Communications
GmbH
Funkwerk Enterprise Communications GmbH
Suedwestpark 94
D-90449 Nuremberg
Germany
Telephone: [phone]
Fax: [phone]
Internet: www.funkwerk-ec.com
Bintec France
6/8 Avenue de la Grande Lande
F-33174 Gradignan
France
Telephone: [phone]
Fax: [phone]
Internet: www.bintec.fr

Access and Configuration bintec User’s Guide 1
1About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.1 Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.2 Use of Typographical Elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2Access Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.1 Access via Serial Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.1.1 Access via Serial Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.2 Access via LAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
2.2.1 Telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
2.2.2 SSH . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
2.3 Access via ISDN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
3Login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
3.1 User Names and Passwords in Ex Works State . . . . . . . . . . . . . . . . . . . 13
3.2 Login for Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
4Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
4.1 HTML Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
4.1.1 ASCII Version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
4.2 Setup Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
4.2.1 Menu Navigation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
4.2.2 Menu Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
4.2.3 Search Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
4.2.4 Change Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
4.2.5 Menu Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
4.3 SNMP Shell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
4.4 SNMP Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

2 bintec User’s Guide Access and Configuration

Access and Configuration bintec User’s Guide 3
About this Manual 1
1 About this Manual
This chapter explains the structure of this manual and the content of the
individual chapters and the use of symbols and typographical elements.
1.1 Contents
This manual is divided into a "Basics", a "Reference" and a "Workshop" section.
These are complemented by a glossary as well as an overall index of all chap-
ters.
The "Basics" section contains the following chapters:
Table 1-1: List of Chapters in the "Basics" section
The "Reference" section is an evolving collection of documents on advanced
gateway configuration. It grows as the number of available functions grows.
The Glossary contains a reference of the most commonly used technical terms
of networking, the Index is an assembled version of the individual indices found
throughout the reference section. It will help you finding relevant information on
all topics by using the Acrobat Reader search function. The Workshop section
offers step-by-step instructions for main configuration tasks of your gateway
which exceed the basic configuration with the HTML Wizard.
Chapter Contents
Quick Install Guide Instructions on installing and taking your gate-
way into operation, and how to create in a few
minutes a basic configuration using the HTML
Wizard.
Technical Data The technical data for the devices of the R
Series.
Access and
Configuration
Description of all access and configuration
options. Basics for working with the Setup Tool.

1
4 bintec User’s Guide Access and Configuration
About this Manual
1.2 Use of Typographical Elements
To help you locate and interpret information easily, this manual uses the follow-
ing visual aids:
Table 1-2: List of symbols
The following typographical elements are used to help you find and interpret the
information in this manual:
Symbol Meaning
Indicates text where troubleshooting notes are
given.
Note
Indicates general important notes.
Attention!
Warning!
Indicates warnings. Levels:
Attention (indicates possible danger that, if
unheeded, could cause material damage)
Warning (indicates possible danger that, if
unheeded, could cause bodily harm or death)
Typographical element Meaning
■
–
–
Lists up to level 2.
MENU ➜ SUBMENU
File ➜Open
Indicates menus or submenus in the Setup
Tool.
Indicates menus or submenus in the Windows
interface.

Access and Configuration bintec User’s Guide 5
About this Manual 1
Table 1-3: Typographical elements
non-proportional
(Courier), e.g.
ping 192.168.1.254
Indicates commands (e.g. in the SNMP shell),
that you must enter as displayed.
Display in the Setup Tool.
bold, e.g.
➤➤ MIB
Indicates terms you can find in the glossary
(Online the link to the glossary is opened by a
click).
bold, e.g.
Windows start menu
Indicates keys, key combinations and Windows
terms.
bold and cursive, e.g.
BIBOADMLOGINTABLE
Indicates fields in the Setup Tool and MIB
tables/variables.
cursive, e.g.
none
Indicates values you can enter in the Setup
Tool or for MIB variables resp. which can be
adjusted.
Online: blue Indicates hyperlinks.
Typographical element Meaning

1
6 bintec User’s Guide Access and Configuration
About this Manual

Access and Configuration bintec User’s Guide 7
Access Options 2
2 Access Options
In the following chapter you will find a description of the different access
options. Please select the option that fits best to your convenience.
For the configuration of your gateway you have the following access options:
■via the serial interface (page 7)
■via your ➤➤ LAN (page 9)
2.1 Access via Serial Interface
Each bintec gateway is equipped with a serial interface at which you can
setup a direct connection to a PC. The following chapter describes what
to observe when setting up a serial connection and how to configure the
gateway.
2.1.1 Access via Serial Connection
Access via serial interface is recommended if you like to create the initial
gateway configuration and if a LAN connection is not possible via the pre-
configured IP address (192.168.0.254/255.255.255.0).
Windows Please follow the instructions in the Quick Install Guide to connect your gate-
way to your PC via serial interface. The printed version of the Quick Install
Guide is included in the gateway delivery size. Additionally, you can find the
electronical version on the Companion CD.
If you use a Windows-PC for setting up the serial connection a terminal program
is required, e.g. HyperTerminal. Please check whether HyperTerminal was in-
stalled during the Windows installation. You can also use any other terminal
program that can be adjusted to the respective parameters (see below).
ToDo If you have installed BRICKware as described in the Quick Install Guide, two
links are provided. If you use these for the serial connection of your gateway,
you do not need to specify any settings.

2
8 bintec User’s Guide Access and Configuration
Access Options
Please take the following steps to access your gateway via serial interface:
1. Click
Programs ➜ BRICKware ➜ Device at COM1 (resp. Device at
COM2 if you use the COM2 interface at your PC) in the Windows start
menu to start HyperTerminal.
2. Press Return (possibly several times) when the HyperTerminal screen has
opened.
The login prompt window is displayed. You are on the SNMP shell of your gate-
way. Now you can log in to your gateway and start the configuration.
Troubleshooting If the login prompt is not displayed even after repeatedly pressing Return, the
connection of your gateway failed.
Therefore, check the settings of COM1 resp. COM2 at your PC:
1. Click File
➜ Properties.
2. In Connect To click Configure...
The following settings are required:
– Bits per second: 9600
– Data bits: 8
– Parity: None
– Stopbits: 1
– Flow Control: None
3. Insert values and click OK.
4. In Settings select:
–Emulation:VT100
5. Click OK.
To enable the modifications of the terminal program settings please disconnect
and reconnect your gateway.
If you use Windows HyperTerminal, umlauts and special characters may be dis-
played incorrectly. If necessary set HyperTerminal to Auto detect instead of VT
100.
Unix A terminal program such as cu (for System V), tip (for BSD) or minicom (for
Linux) is required. The settings for these tools are as decribed above.
Example for a command line to use cu:cu -s 9600 -c/dev/ttyS1

Access and Configuration bintec User’s Guide 9
Access Options 2
Example for a command line to use tip: tip -9600 /dev/ttyS1
2.2 Access via LAN
Accessing your gateway via one of the Ethernet interfaces provides the
possibility to configure the gateway via HTML user interface. The HTML-
Wizard is the easiest configuration option.
2.2.1 Telnet
You can access the SNMP shell not only via a web browser but also via a Telnet
connection so that you can adjust additional configuration settings as described
in the chapter “Configuration Options” on page 17.
ToDo You do not need any further software on your PC to set up a Telnet connection
to your gateway: Telnet is a standard tool of all operating systems.
Take the following steps:
Windows 1. Click Run... in the Windows start menu.
2. Enter telnet <IP address of your gateway>.
3. Click OK.
The login prompt window is displayed. You have now accessed the SNMP shell
of your gateway.
4. Continue with “Login for Configuration” on page 14.
Unix Under UNIX and Linux you can set up a Telnet connection as well:
1. Enter telnet <IP address of your gateway> in a terminal.
The login prompt window is displayed. You have now accessed the SNMP shell
of your gateway.
2. Continue with “Login for Configuration” on page 14.

2
10 bintec User’s Guide Access and Configuration
Access Options
2.2.2 SSH
In addition to an unencrypted and potentially compromisable Telnet connection
you can also connect to your gateway via an SSH connection. This is encrypted
and allows you to securely make use of all remote maintenance options offered
by bintec products.
In order to connect to your gateway via SSH, the following requirements must
be met:
■You need to have encryption keys created by your gateway and stored in
the Flash ROM.
■You need an SSH client installed on your PC.
Encryption Keys
ToDo First of all you must make sure that the encryption keys required for a SSH con-
nection have been created on your gateway:
1. Login to your gateway using one of the already available connection meth-
ods (e.g. Telnet - for logging in, see “Login” on page 13).
2. At the the command prompt, type update -i. You now have access to the
Flash management shell.
3. Call a listing of all files stored on the gateway: ls -al.
If you see something like this, the keys have been created and you can login to
your gateway via SSH:
Flash-Sh > ls -al
Flags Version Length Date Name ...
Vr-xpbc-B 7.1.04 2994754 2004/09/02 14:11:48 box150_srel.ppc860
Vrw-pl--f 0.0 350 2004/09/07 10:44:14 sshd_host_rsa_key.pub
Vrw-pl--f 0.0 1011 2004/09/07 10:44:12 sshd_host_rsa_key
Vrw-pl--f 0.0.01 730 2004/09/07 10:42:17 sshd_host_dsa_key.pub
Vrw-pl--f 0.0.01 796 2004/09/07 10:42:16 sshd_host_dsa_key
Flash-Sh >
Note
For each of the so called algorithms the gateway creates a key pair, i.e. two files
must have been stored in the Flash for each algorithm (see screenshot above).

Access and Configuration bintec User’s Guide 11
Access Options 2
If there are no keys stored in the Flash, you need to create them. Proceed as
follows:
1. Leave the Flash Management Shell: exit.
2. Open a Setup Tool session and navigate to the menu SECURITY ➜SSH
DAEMON ➜CERTIFICATION MANAGEMENT.
3. To have the gateway create a key, simple place the cursor on the desired
key and confirm with Enter. The gateway will create the respective key and
store it in the Flash ROM.
4. Make sure, both keys, DSA and RSA, have been successfully created. To
do so repeat the procedure described above.
Login via SSH
Once you have made sure the necessary keys are available, you should make
sure that an SSH client is installed on your PC. Most UNIX and Linux distribu-
tions per default install a command line client. PCs running a version of Win-
dows, however, usually need additional software, like e.g. PuTTY.
ToDo To connect to your gateway, now take the following steps:
UNIX 1. Enter ssh <IP address of your gateway> in a terminal.
The login prompt window is displayed. You have now accessed the SNMP shell
of your gateway.
2. Continue with “Login for Configuration” on page 14.
Windows 1. The ways of setting up a SSH connection greatly depend on the software
used. Refer to the documentation of the software you are using.
Once you have connected to your gateway, the login prompt window is dis-
played. You have now accessed the SNMP shell of your gateway.
2. Continue with “Login for Configuration” on page 14.
Note
PuTTY may need to use specific settings for successfully establishing an SSH
connection with a bintec gateway. You can find an FAQ detailing the necessary
settings in the support section of www.funkwerk-ec.com.

2
12 bintec User’s Guide Access and Configuration
Access Options
2.3 Access via ISDN
All gateways with ISDN interface can be addressed and configured by an-
other gateway using an ISDN call.
Access via ➤➤ ISDN with ➤➤ ISDN login is especially recommended if your
gateway is to be operated via remote configuration and maintenance. This is
possible even if your gateway configuration is still in ex works state. The gate-
way then is accessed by means of a bintec gateway already configured or a PC
with ISDN card in the remote LAN. The bintec gateway in the own LAN that is
to be configured is addressed by a calling number of the ISDN connection (e.g.
1234). This e.g. enables the administrator in the remote LAN to configure your
gateway without being on site.
ToDo Your gateway in your LAN only needs to be connected to ISDN and to be
switched on.
Take the following steps to address your gateway via ISDN login:
1. Connect your gateway to the ISDN connector.
2. Log in to your bintec gateway in the remote LAN as administrator.
3. Enter isdnlogin <ISDN call number of your gateway> into the
SNMP shell, e.g. isdnlogin 1234.
The login prompt window is displayed. You have now accessed the SNMP shell
of your gateway.
4. Continue with “Login for Configuration” on page 14".
Note
Please note that only the gateways R232b and R232bw are equipped with an
ISDN interface.
Attention!
If you connect an unconfigured gateway and a telephone system (PABX)
in parallel at the ISDN connector, the telephone system cannot answer in-
coming calls as long as no ISDN number is configured on the gateway.
Consider the costs of an ISDN connection! If your gateway and your PC
are connected to the same LAN, the access to your gateway via LAN or via
the serial interface is more economical.

Access and Configuration bintec User’s Guide 13
Login 3
3 Login
By means of predefined access data you can log in to your gateway and
carry out different operations. The range of the operations allowed is lim-
ited according to the authorizations of the respective user.
For each access option, first the login prompt is displayed. Without authorization
you cannot read any information on your gateway nor modify the configuration.
You do not need to log in to read the basic information which is displayed on the
HTTP status page. You can open it via LAN by entering the IP address of the
gateway (in ex works state: 192.168.0.254) into a web browser.
3.1 User Names and Passwords in Ex
Works State
Following user names and passwords are preconfigured on your gateway:
Table 3-1: User names and passwords in ex works state
User name Password Authorizations
admin bintec Read and change system variables,
save configurations, use the Setup
Tool.
write public Read and write system variables
(except passwords) (changes are lost
when you switch off your gateway).
read public Read system variables (except pass-
words).
http bintec Open the system variables pages via
the HTTP status page of your gate-
way, only read system variables
(except passwords).

3
14 bintec User’s Guide Access and Configuration
Login
It is possible to modify and save the configuration only if you login with the user
name admin. As well the access data (user names and passwords) can only
be modified if the user logs in as admin. The passwords are not displayed in
plain text in the Setup Tool for safety reasons, but are visible as asteriks. The
user names, however, are written in plain text.
For safety reasons with the user name read you can read all configuration set-
tings except the access data. Thus it is impossible to login with read, then read
the password of the user admin and afterwards login as admin to modify the
configuration.
3.2 Login for Configuration
ToDo Setup a connection to the gateway by one of the access options described in
chapter “Access Options” on page 7.
How you log in to the SNMP shell:
1. Enter your user name , e.g. admin, and confirm with Enter.
2. Enter your password, e.g. bintec, and confirm with Enter.
Your gateway answers with the login prompt, e.g. r232bw:> . Login has been
successfully completed. You now accessed the SNMP shell.
How to login via the HTML user interface:
1. Enter your user name into the field User name of the login window.
2. Enter your password into the field Password of the login window.
The HTTP status page of the gateway opens in the browser and displays the
available options.

Access and Configuration bintec User’s Guide 15
Login 3
Leave SNMP shell To leave the SNMP shell after completing the configuration enter exit and
press Enter.
Attention!
All bintec gateways are shipped with the same user names and pass-
words. As long as the password remains unchanged, they are not protect-
ed against unauthorized use. How to change the passwords is described
in “Change Password” on page 24.
Change the passwords to prevent unauthorized access to your gateway.
If you have forgotten your password, you must reset your gateway to the
ex works state, which means your configuration will be lost.

3
16 bintec User’s Guide Access and Configuration
Login

Access and Configuration bintec User’s Guide 17
Configuration Options 4
4 Configuration Options
This chapter contains not only an overview of the different tools you can
use for the configuration of your gateway, but also an introduction to the
application of the Setup Tool.
The following configuration options are available:
■HTML Wizard (page 17)
■Setup Tool (page 19)
■SNMP shell commands (page 29)
■Configuration Manager and other SNMP manager (page 30)
The availability of the configuration options depends on the type of connection
to your gateway:
Table 4-1: Connection and configuration options
For each type of connection several configuration options are hence available.
4.1 HTML Wizard
The Quick Install Guide contains a short description of the configuration
by means of the HTML Wizard. It is required for the basic configuration of
your gateway and suitable if you can address your gateway from your
Type of connection Possible configuration options
LAN HTML Wizard, HTML Setup Tool, ASCII Wiz-
ard, ASCII Setup Tool, Configuration Manager,
Shell commands
Serial connection ASCII WIzard, ASCII Setup, Shell commands
Note
You must login as admin to be able to modify the configuration! Configuration
modification is impossible without knowing the respective password. This
applies for all configuration options.

4
18 bintec User’s Guide Access and Configuration
Configuration Options
LAN at its preconfigured IP configuration. The HTML Wizard normally cov-
ers all standard configurations.
If you would like to adjust further settings, you can select one of the other con-
figuration options mentioned above. You can first configure your gateway with
the HTML Wizard and then extend or modify the initial configuration using one
of the other options. The mere configuration with the HTML Wizard, however,
normally is sufficient.
The Wizard guides you through the steps of the gateway configuration. After
completion of the Wizard sequence your gateway is ready for operation. The
data you need to enter during the Wizard run as well as the prerequisites for
configuration are described in the Quick Install Guide (printed version also in-
cluded in delivery size).
Open issues can be clarified by means of the comprehensive help system of the
Wizard. Therefore, the Wizard is not described in this chapter in detail.
4.1.1 ASCII Version
If you cannot access your gateway via your LAN or cannot start the HTML
Wizard for any other reason, you can start the ASCII version of the Wizard
on the SNMP shell. Thus you can use all features of the Wizard via a serial
connection.
ToDo You can start the ASCII version of the Wizard with all available types of connec-
tion: connection to the gateway via LAN or via serial connection. Log in as
admin and access on SNMP shell is required.
Take the following steps:
1. Log in to the gateway as admin (see “Login for Configuration” on page 14).
2. After the command prompt enter wizard and press Enter.
The ASCII version of the Wizard starts. In this version all configuration options
of the HTML version are available. The help texts can be opened by selecting
the HELP menu.