Lanbird 1004 User manual

LANBIRD 1004 IOS Manual
LANBIRD 1004 IOS Manual
Copyright 2001 by LANBIRD Technology. All rights reserved.
LANBIRD Technology is a registered trademark; and LANBIRD 1004 is a registered trademark of
LANBIRD Technology Co., Ltd. Any part of this documentation can be used in any form or by any
means or to make any directive work(such as transformation) without approval from LANBIRD
Technology Co., Ltd. LANBIRD Technology Co., Ltd. reserves the right as the original manufacturer
to reform this documentation and to make changes in contents without any responsibility among
LANBIRD Technology Co., Ltd. to provide notification of such reform or change.
1

LANBIRD 1004 IOS Manual
Contents
LANBIRD 1004 IOS Manual..........................................................................................................1
How to Use IOS Commands.........................................................................................................6
LANBIRD command mode overview .....................................................................................6
User mode..............................................................................................................................7
Root mode..............................................................................................................................8
Configuration mode................................................................................................................8
Two types of password...........................................................................................................9
Interface Configuration Management..........................................................................................10
Interface number..................................................................................................................10
Ethernet interface configuration...........................................................................................10
Serial interface configuration................................................................................................10
keepalive configuration ........................................................................................................ 11
Viewing the interface status................................................................................................. 11
Viewing the Ethernet interface status........................................................................... 11
Viewing the serial interface status................................................................................ 11
Management of IPAddresses and Routing Configuration..........................................................13
Configuring the primary IP address for the network interface..............................................13
Configuring several IP addresses for the network interface ................................................13
Deleting the IP address from the network interface.............................................................13
Routing table configuration ..................................................................................................14
Domain Name System (DNS) server configuration .............................................................14
Network Address Translation (NAT) configuration...............................................................15
NAT terminology............................................................................................................15
Enabling/disabling NAT function...................................................................................16
NAT configuration when more than one public IP address is possessed.....................16
Configuring the public address space in the inside network.........................................18
Using Internet by using only one public IP address (PAT)............................................19
Configuring a server inside by using only one public IP address.................................19
Opening A Specific Port ................................................................................................21
Configuring the NAT timer.............................................................................................21
Configuration the NAT table size ..................................................................................22
Frame-Relay Configuration Management...................................................................................23
2

LANBIRD 1004 IOS Manual
Configuring Permanent Virtual Circuit (PVC) frame-relay....................................................23
Connecting frame-relay.................................................................................................23
Setting the frame-relay protocol....................................................................................23
Setting the Data Link Connection Identifier (DLCI).......................................................24
Configuring the Local Management Interface (LMI).....................................................25
Example of the configuration the PVC frame-relay ......................................................27
Filtering........................................................................................................................................30
The purpose of Filtering.......................................................................................................30
How to use Filtering .............................................................................................................30
The Position of LANBIRD Filter with Inbound and outbound...............................................31
Types of Protocols Which Can Be Filtered ..........................................................................32
Filtering Policy......................................................................................................................32
Process of Accomplishing Filtering ......................................................................................33
The Configuration and Enforcement of LANBIRD Filter......................................................33
Add Data on Filter.........................................................................................................33
Delete Data on Filter.....................................................................................................34
Default filter...................................................................................................................34
How to Use...........................................................................................................................35
Filter Command ............................................................................................................35
Explanation of Filter Command ....................................................................................35
Assigning Method of Network Address.........................................................................36
Set command configuration..........................................................................................36
Example of Filtering .............................................................................................................37
Example of set command .............................................................................................37
The Example of Filtering after Version 0.4.4...............................................................................39
BOOTP-relay...............................................................................................................................43
Example of BOOTP-relay.....................................................................................................43
Working Principle .................................................................................................................44
Explanation of Command.....................................................................................................44
Using Tips.............................................................................................................................44
DHCP(Dynamic Host Configuration Protocol) server..................................................................46
Example of DHCP server.....................................................................................................46
Working Principle .................................................................................................................47
Necessary Information for Server........................................................................................47
Configuration of Host ...........................................................................................................47
Explanation of Command.....................................................................................................48
3

LANBIRD 1004 IOS Manual
Enabling DHCP-server...............................................................................................48
Adding DHCP-server ....................................................................................................48
Deleting DHCP-server ..................................................................................................49
Add/Delete DNS-server ................................................................................................49
Lease time configuration...............................................................................................49
Additional gramer check after version 0.4.1.........................................................................50
Example of Configuration.....................................................................................................51
Giving condition ............................................................................................................51
Configuration.................................................................................................................51
Conforming the Configuration..............................................................................................52
Conforming the configuration of Host...........................................................................52
Conforming the configuration of Host...........................................................................52
Dynamic Backup .........................................................................................................................54
Purpose................................................................................................................................54
Example ...............................................................................................................................54
Method of Configuration.......................................................................................................54
Consideration.......................................................................................................................55
Example ...............................................................................................................................55
Conforming Configuration....................................................................................................57
Load balaning..............................................................................................................................59
Purpose................................................................................................................................59
Example of Load Balancing .................................................................................................59
Consideration of Load Balancing.........................................................................................59
What is Metric? ....................................................................................................................60
LANBIRD Load balancing Configuring Tips.........................................................................60
Method of Configuration.......................................................................................................61
Command.............................................................................................................................61
Example ...............................................................................................................................62
Giving Condition............................................................................................................63
when configuring on Router A.......................................................................................63
Conforming Configuration....................................................................................................63
UDP forward................................................................................................................................64
Example ...............................................................................................................................64
Advantages of UDP Forwarding...........................................................................................64
Required Information of Forwarding udp Packet .................................................................65
Using Tips.............................................................................................................................65
4

LANBIRD 1004 IOS Manual
Add/Delete Helper.........................................................................................................65
Add/Delete Port.............................................................................................................65
Example ...............................................................................................................................66
Queueing.....................................................................................................................................68
Types of Queueing...............................................................................................................68
Advantages of WFQ.............................................................................................................68
Example ...............................................................................................................................69
Using Tips.............................................................................................................................69
Example ...............................................................................................................................70
User.............................................................................................................................................71
Using Tips.............................................................................................................................71
Consideration.......................................................................................................................72
Example........................................................................................................................73
IP-account ...................................................................................................................................74
Working Principle .................................................................................................................74
Related Command...............................................................................................................75
Example ...............................................................................................................................75
Conforming ip-account table................................................................................................75
NULL Interface ............................................................................................................................77
Working Principle .................................................................................................................77
Example ...............................................................................................................................77
How to use...........................................................................................................................78
Null interface Example.........................................................................................................78
Appendix 1. Subnet mask and available IP addresses...............................................................81
Subnet mask 255.255.255.128............................................................................................81
Subnet mask 255.255.255.192............................................................................................81
Subnet mask 255.255.255.224............................................................................................81
Subnet mask 255.255.255.240............................................................................................82
Subnet mask 255.255.255.248............................................................................................83
Subnet mask 255.255.255.252............................................................................................84
Appendix 2. Examples of Lanbird 1004 Router NAT Configuration (version 0.3.5 and later)
.....................................................................................................................................................86
Examples of router configuration.........................................................................................86
Example of subscriber PC configuration:.............................................................................87
5

How to Use IOS Commands
How to Use IOS Commands
LANBIRD command mode overview
Lanbird IOS is divided into several command modes and the commands which can be
used by mode are defined in each mode.
The command mode mainly consists of the following three layers.
User mode →Root mode →Configuration mode
When the connection to the system is done initially, the user mode is active. Only the
commands, which enable only basic management of the system, can be used in this
mode.
It is possible to enter the root mode from the user mode by using the "root"
command. In the root mode, it is possible to convert to the configuration mode in
which the system configuration can be changed and to use all the commands for the
system management.
It is possible to enter the configuration mode from the root mode by using the "config"
command. In the configuration mode, it is possible to change all the configuration
values of the system.
Entering question mark (?) on the system prompt will display all the commands which
can be used in the current mode.Also, there are on-line helps for all commands.
Whenever it is desired to know how to use commands, enter question mark in the
middle of a command. Then, the types of the commands which can be entered in the
current status and their descriptions will be displayed. The following example shows
the on-line help functions.
6

How to Use IOS Commands
LANBIRD> ?
Exit Exit from login state
help Describe interactive help system
ping Send ICMP echo messages
root Change to root mode
show Show current system information
telnet Connect to a remote host by TELNET
tracert Trace route to destination
LANBIRD> show ?
arp ARP table
bridge Bridge table
config Saved configuration
dns DNS table
frame-relay Frame relay information
interface Interface information
log Log file
nat NAT table
rconfig Running configuration
route Routing table
system System information
snmp SNMPinformation
user Information about currently connected users
LANBIRD> show r?
rconfig route
LANBIRD> show r
User mode
If a connection is made through console without any password or the connection to a
router is made by entering the login password in the network, the default is the user
mode. In this mode, only part of root mode commands are available. In general, the
commands through which one can view the router status are provided. The prompt
ends with ">" as shown next.
LANBIRD>
7

How to Use IOS Commands
The prompt of the initial product is LANBIRD and it is possible to change it by using
the "prompt" command in the root mode. To exit from the user mode, use the "exit"
command.
Root mode
Because the user can easily change the system configuration in the root mode,
password should be used to access this mode. To enter the root mode, use the "root"
command as shown below. The prompt ends with "#".
LANBIRD> root
Password: *******
LANBIRD#
In this mode, the user can use all the commands and enter the configuration mode to
change the system configuration. To exit the root mode, use the "exit" command as
shown below.
LANBIRD# exit
LANBIRD>
Configuration mode
The user can enter this mode, in which the user can change the router’s configuration,
by using the "config" command. The prompt ends with "(config)#".
LANBIRD# config
LANBIRD(config)#
To exit the configuration mode, use the "end" or "exit" command.
LANBIRD(config)# exit
LANBIRD#
8

How to Use IOS Commands
Two types of password
* Login password
- Used to make a connection to a router through telnet.
- Password of the initial products: lanbird <-- small letters
- If the login is performed properly, the default after the connection to the router is the
user mode.
* Root password
- Used to move to the root mode after the connection to the router through console
and telnet.
- Root password for the initial products: lanbird <-- small letters
9

Interface Configuration Management
Interface Configuration Management
Interface number
Lanbird routers use interface numbers in each command. The interface numbers and
corresponding interfaces are shown below.
Interface number Description
0 Ethernet interface 0
1 Serial interface 1
2 Serial interface 2
Ethernet interface configuration
A separate configuration is unnecessary because Ethernet automatically searches 10
Mbps or 100 Mbps interface.
Serial interface configuration
Lanbird routers support various Wide Area Network (WAN) interface protocols.
Especially, Point to Point Protocol (PPP) and Cisco High level Data Link Control
(HDLC) automatic detection function are very convenient because they do not
necessitate a separate configuration of the line protocol in the general router
environment. The following shows how to configure the line protocol of the serial
interface.
Command Description
line-protocol ifnum {autodetect|ppp|hdlc|frame-relay} Configure the line protocol.
As a default of a router, the autodetect in the above table is to automatically detect
PPP or HDLC.
10

Interface Configuration Management
keepalive configuration
The configuration of the keepalive interval is necessary for all interfaces to verify if an
interface is alive. The default is 10 seconds and the following shows how to change
this value.
Command Description
keepalive ifnum interval Configure the keepalive interval with the unit of
second.
Viewing the interface status
The following command is used to view the status of each interface.
Command Description
show interface ifnum Show the interface status.
Viewing the Ethernet interface status
The following example shows the Ethernet interface status.
LANBIRD# show interface 0
Ethernet0 is up, line protocol is up
IP address 192.168.1.1 / 255.255.255.0
MAC address is 00:d0:a6:03:00:00
Mode is 10 Mbps, Half-duplex
Input
queue: 0/150
1 minute rate: 1 packets/sec, 830 bits/sec
20248 packets, 2469046 bytes, 0 no buffers
0 giant, 0 runt, 0 frame, 0 CRC, 0 overrun
Output
queue: 0/50
1 minute rate: 1 packets/sec, 653 bits/sec
17685 packets, 4876529 bytes, 0 drops
0 underrun, 0 collision, 0 late collision
Viewing the serial interface status
The following example shows the status of serial interface 1.
LANBIRD# show interface 1
11

Interface Configuration Management
Serial1 is up, line protocol is up
IP address 211.32.1.1 / 255.255.255.252
Line protocol HDLC, keepalive 10
Input
queue: 0/50
1 minute rate: 0 packets/sec, 310 bits/sec
19179 packets, 4944750 bytes, 0 no buffers
0 giant, 0 runt, 0 frame, 0 abort, 0 CRC, 0 overrun
Output
queue: 0/1500
1 minute rate: 0 packets/sec, 254 bits/sec
17005 packets, 1417970 bytes, 0 drops
0 underrun
DTR=up, RTS=up, DCD=up, DSR=up, CTS=up
12

Management of IP Addresses and Routing Configuration
Management of IP Addresses and Routing
Configuration
Configuring the primary IP address for the network interface
The IP address determines where to send an IP packet. Because some IP addresses
are reserved for special purposes, they cannot be used as the addresses for a host, a
subnet, and a network.
It is possible to configure only one primary IP address for one interface. The following
shows how to configure the primary IP address and the mask for network interface. If
another primary IP address is configured for the interface, the existing IP address is
replaced by the new one.
Command Description
ip-address add ifnum ip-addr ip-mask Configure the primary IP address and the mast for the
interface.
Configuring several IP addresses for the network interface
It is sometimes necessary to configure several IP addresses for one interface. At this
time, the following method is used to add IP addresses.
Command Description
ip-address add ifnum ip-addr mask secondary Add IP addresses and masks to the interface.
Deleting the IP address from the network interface
The following shows how to delete the IP address configured for an interface.
Command Description
ip-address del ifnum ip-addr Delete the IP address from an interface.
13

Management of IP Addresses and Routing Configuration
Routing table configuration
The following shows how to configure or add a routing path to the routing table.
Command Description
ip-route add dip-addr dmask {ifnum|fip-addr} Add a routing path.
The following shows how to delete a routing path from the routing table.
Command Description
ip-route delete dip-addr Delete a routing path.
Domain Name System (DNS) server configuration
The following shows how to configure and add a DNS server.
Command Description
dns-server add ip-addr Add a DNS server.
The following shows how to delete a DNS server.
Command Description
dns-server del ip-addr Delete a DNS server.
14

Management of IP Addresses and Routing Configuration
Network Address Translation (NAT) configuration
Two problems which Internet is facing are the lack of IP addresses and the increasing
size of the routing. NAT gives the illusion that the IP network internally used by an
organization looked as a different IP network to those outside the organization.
Consequently, NAT enables the organization not using public IP addresses to use IP
addresses by converting the non-public IP addresses to public IP addresses.
NAT terminology
The inside network in NAT means the network owned by an arbitrary organization with
the intention to change by using NAT. The hosts in the inside network posses the
addresses located in the address space, but they look as if they had addresses
located in a different address space to those outside the organization when NAT is
configured. The first is called inside address space and the second is called global
address space.
Similarly, the outside network means the opposite network connecting to the inside
network and in general refers to the network which a common organization cannot
manage.
zInside private address – the non-public IP address out of the IP addresses
assigned to the hosts in the inside network.
zInside public address – the public IP address out of the IP addresses assigned to
the hosts in the inside network. This address is not changed by NAT.
zOutside public address – As the address when the observer in the outside
network views the inside network, it is the public IP address representing more
than one inside area address.
15

Management of IP Addresses and Routing Configuration
Enabling/disabling NAT function
It is necessary to distinguish between the inside network and the outside network to
start NAT. By executing the following commands, Lanbird router determines the
direction to which NAT should be performed.
Command Description
nat enable ifnum Configure as the outside network the network connected to the interface whose
number is ifnum.
The following command is used not to use NAT function.
Command Description
nat disable Disable NAT function.
NAT configuration when more than one public IP address is possessed
For the host with an inside private address to communicate with the outside network, it
is necessary to change the private IP address of the host into the public IP address.
The address change can be configured in the following two ways: either dynamic or
static.
The static translation is to allocate the inside area address and the inside public
address to each other by one-to-one correspondence. This static translation is useful
when the connection to the host located inside from outside by means of a fixed
address is attempted. The dynamic translation is to allocate the inside area address
and several public addresses dynamically.
16
Inside network
192.168.1
SA
2.2.2.2
Cloud
211.32.129.1
DA
2.2.2.2
SA
192.168.1
DA
192.168.1.1
Router
192.168.1
Outside network

Management of IP Addresses and Routing Configuration
The following procedure shows the example of using Internet through changing the
source address of the host with the a inside private address by a router in the above
figure.
1. The user in the host 192.168.1.1 is connected to the user in the host
211.32.129.104.
2. The router checks the NAT table for the first packet sent by the host 192.168.1.1. If
the static translation is not configured, directly move to the third step. If the
translation is not configured in the NAT table, the router creates the table which
dynamically translates the source address (192.168.1.1) into one public address
selected from the public address table.
3. The router translates the host’s source address (192.168.1.1) into a public address
according to the translation table and then send the packet to next hop.
4. The host 211.32.129.104 receives the transmitted packet and then answers to the
host 192.168.1.1 by using the public (2.2.2.2).
5. When the router receives the packet with the public address of 2.2.2.2, it searches
the translation table in the Nat table by using the public address, translates the
public address into the inside area address (192.168.1.1), and then sends the
packet to the host 192.168.1.1.
17

Management of IP Addresses and Routing Configuration
6. The host 192.168.1.1 receives the packet and continues to communicate. The
router repeats the second and the fifth steps for all packets.
Configuring the static translation
The following configuration is done to always translate the host of a inside network to
a specific public address.
Command Description
nat out-static add pub-ip pri-ip Connect a public IP address pub-ip and a private IP address
pri-ip statically.
The following is how to cancel the static translation configuration.
Command Description
nat out-static del pub-ip pri-ip Cancel the static translation configuration.
Configuring the dynamic translation
The following configuration is done to dynamically translate the source address.
Command Description
nat out-public add pub-ip-network ip-mask Connect an inside private address and an outside
public address pub-ip-network dynamically.
The following shows how to cancel the dynamic translation configuration.
Command Description
nat out-public del pub-ip-network Cancel the dynamic translation configuration.
Configuring the public address space in the inside network
Lanbird NAT regards all the addresses in the inside network as private IP addresses
and translate them into outside public addresses. Consequently, when public IP
network and private IP network are mixed inside, it is necessary to configure such that
NAT is not performed for the public IP network located inside. The following
18

Management of IP Addresses and Routing Configuration
configuration is done to prevent NAT from being performed for the public IP network
located inside.
Command Description
nat in-public add pub-ip-network ip-mask Not performing the NAT for the public IP network
located in the inside network, pub-ip-network.
The following is done to cancel the public IP network configuration.
Command Description
nat in-public delete pub-ip-network Delete the public IP network configuration.
Using Internet by using only one public IP address (PAT)
Lanbird NAT supports the PortAddress Translation (PAT) function which enables
many hosts in the inside network to be connected to Internet at the same time only
with one public IP address. Because this function can be used with the basic Nat
described before, if there is no public IP address left due to the allocation of all public
IP addresses used by NAT to a group of hosts, other hosts are automatically
translated into the public addresses configured by PAT, which enables hosts to use
Internet all the time. The following is how to configure PAT.
Command Description
nat out-napt add pub-ip-addr Configure a public IP address, pub-ip-addr as a PAT address.
Configuring a server inside by using only one public IP address
If there are many public IP addresses, it is possible to configure a specific host as a
server through a static mapping. However, when PAT function is used because there
is only one public IP, this function is unavailable.At this time, a server can be
configured inside as shown below.
Command Description
nat in-server add {tcp|udp} port priv-ip-addr Configure the hosts with the inside private
19

Management of IP Addresses and Routing Configuration
address, priv-ip-addr as the server connectable
through the TCP or UDP port number of the IP
address for which PAT is configured outside.
20