Sarian Systems 2000 Series User manual

Sarian Systems
2000 Series
Reference Guide
© 2002-2003 Sarian Systems Limited. All rights reserved. No part of this document covered by copyright may be
reproduced or copied in any form or by any means graphic, electronic, or mechanical, including photocopying, recording,
taping, or information and retrieval systems without written permission of Sarian Systems Ltd.
Sarian Systems reserve the right to modify or revise all or part of this document, its contents, and any products described
herein at any time without prior notification and shall not be responsible for any loss, cost, or damage, including
consequential damage, caused by reliance on these materials.
Issue 1.7, 9th June 2003. Part # 6222-0001

CONTENTS
PREFACE 5
1INTRODUCTION 6
1.1 Unpacking The Unit 6
1.2 Front Panel Features 7
1.3 Rear Panel Features 8
1.4 GPRS SIM Card Installation 9
2USING THE WEB INTERFACE 12
2.1 Installing The Driver File 12
2.2 Creating A New Connection 14
2.3 Configuring A New Connection 16
2.4 Initiating A Connection 18
3THE COMMAND LINE INTERFACE 20
3.1 The “AT” Command Prefix 20
3.2 The Escape Sequence 21
3.3 Result Codes 21
3.4 “S” Registers 21
3.5 Application Commands 22
3.6 The Active Port 22
3.7 Establishing A Remote Connection 23
4CONFIGURING YOUR UNIT 24
4.1 Logging In 24
4.2 The Configuration Pages 25
4.3 Configure fADAPT 26
4.4 Configure fAnalyser 28
4.5 Configure fASY Ports 33
4.6 Configure fBackup IP addresses 35
4.7 Configure fCalling Numbers 36
4.8 Configure fCommand Mappings 37
4.9 Configure fDHCP Server 37
4.10 Configure fDNS Update 39
4.11 Configure fEthernet 41
4.12 Configure fEvent Handler 44
4.13 Configure fFirewall 46
4.14 Configure fFirewall Timers 48
4.15 Configure fFTP Relay Agents 49
4.16 Configure fGeneral 51
4.17 Configure fGPRS Module 56
4.18 Configure fISDN LAPB 59
4.19 Configure fISDN LAPD 62

2000 Series Reference guide
4.20 Configure fIP Routes 64
4.21 Configure fIPSEC 67
4.22 Configure fIPSec fEroutes 70
4.23 Configure fIPSec fDefault Eroute 74
4.24 Configure fNUI Mappings 75
4.25 Configure fPPP 76
4.26 Configure fProtocol Bindings 94
4.27 Configure fSMS Edit 95
4.28 Configure fSMTP 95
4.29 Configure fSNTP 97
4.30 Configure fStatic NAT Mappings 98
4.31 Configure fSYNC Ports 99
4.32 Configure fTime 100
4.33 Configure fTime Bands 100
4.34 Configure fTPAD 102
4.35 Configure fUsers 109
4.36 Configure fX.25 Macros 110
4.37 Configure fX.25 PADS 112
4.38 Configure fX.25 PADS fParameters 115
4.39 Configure fX.25 Switch 120
4.40 Saving configuration settings. 125
5STATISTICS PAGES 127
5.1 Statistics fAdapt 127
5.2 Statistics fASY Ports 127
5.3 Statistics fDNS Update 128
5.4 Statistics fEthernet 128
5.5 Statistics fIP 128
5.6 Statistics fIPSec fDynamic Eroutes 129
5.7 Statistics fIPSec fIKE SAs 129
5.8 Statistics fIPSec fIPSec SAs 129
5.9 Statistics fPPP 130
5.10 Statistics fSYNC Channels 130
5.11 Statistics fTPAD 131
5.12 Statistics fX.25 PAD 132
6STATUS PAGES 134
6.1 Status fAnalyser Trace 134
6.2 Status fDHCP Server 134
6.3 Status fEvent Log 135
6.4 Status fFile Directory 135
6.5 Status fFirmware Versions 135
6.6 Status fGPRS Module 135
6.7 Status fIGMP Groups 136
6.8 Status fISDN BRI 136
6.9 Status fWeb Directory 136

6.10 Status fWeb Server 137
6.11 Status fX.25 Sessions 137
7THE FILING SYSTEM 138
7.1 System Files 138
7.2 Filing System Commands 138
8USING V.120 141
8.1 Initial Set Up 141
8.2 Initiating A V.120 Call 141
8.3 Answering V.120 Calls 141
9X.25 PACKET SWITCHING 143
9.1 Introduction. 143
9.2 X.28 Commands 143
10 PPP OVER ETHERNET 150
11 IPSEC AND VPN’S. 151
11.1 What is IPSec ? 151
11.2 Data Encryption methods. 151
12 FIREWALL SCRIPTS 155
12.1 Firewall script syntax. 155
12.2 Filtering on port numbers. 160
12.3 Filtering on TCP flags. 161
12.4 Filtering on ICMP codes. 162
12.5 Stateful inspection. 163
12.6 The fwlog.txt File. 166
12.7 Debugging a Firewall 168
13 REMOTE MANAGEMENT 170
13.1 Remote Management Using V.120 170
13.2 Remote Management Using Telnet 170
13.3 Remote Management Using FTP 170
13.4 Remote Management Using X.25 171
14 THE EVENT LOG 172
14.1 What Is The Event Log? 172
14.2 The logcodes.txt File 173
15 AT COMMANDS 175
15.1 D Dial 175
15.2 H Hang-up 175
15.3 Z Reset 175
15.4 &C DCD Control 175
15.5 &F Load Factory Settings 176
15.6 &V View Profiles 176
15.7 &W Write sregs.dat 176

2000 Series Reference guide
15.8 &Y Set Default Profile 176
15.9 &Z Store phone number 177
15.10\LS Lock Speed 177
15.11\PORT Set Active Port 177
15.12\at Ignore invalid AT commands 178
16 “S” REGISTERS 179
16.1 S0 V.120 Answer Enable 179
16.2 S2 Escape Character 179
16.3 S23 Parity 180
16.4 S15 Data forwarding timer 180
16.5 S31 ASY Interface Speed 180
16.6 S33 DTR dialling 181
16.7 S45 DTR Loss De-bounce 181
17 GENERAL SYSTEM COMMANDS 182
17.1 CONFIG Show/Save Configuration 182
17.2 REBOOT Reboot Unit 182
18 ASY PORT CONNECTORS 183
19 LOGCODES.TXT 184
20 EMAIL TEMPLATES 190
20.1 Template Structure 190

2000 Series Reference Guide
PREFACE
Sarian Systems 2000 series products are extremely versatile and may be used in a wide variety of
applications. It would not be possible to describe in detail all such applications in a single guide.
Consequently, this guide has been written for use by technically competent personnel with a good
understanding of the communications technologies used in the product, and of the requirements
for their specific application.
Throughout this manual certain typographical conventions are used as follows:
Text Type Meaning
Text like this … is standard text.
Text like this… indicates points that are of particular importance.
Text like this … indicates commands entered by the user.
Text like this … indicates responses from the unit to commands
you enter at the command line.
Configure fSave is a reference to the Windows or the unit’s menu
system.
Requests for corrections or amendments to this guide are welcome and should be addressed to:
Sarian Systems Ltd.
Riverside Business Park
Leeds Road, Ilkley
West Yorkshire
LS29 8JZ
Safety and operational notices.
1. With respect to European EMC requirements, Sarian 2000 series are Class A products. In a domestic
environment, these products may cause radio interference in which case the user may be required to take
adequate measures.
2. For office and domestic operation Sarian 2000 series products are designed for use only with the approved mains
power transformer supplied by Sarian Systems Ltd.
3. Ports that are capable of connecting to other apparatus are defined as SELV ports. To ensure conformity with
EN60950 ensure that these ports are only connected to ports of the same type on other apparatus.
4. Do not attempt to repair the products. They contain no electronic components that can be serviced or replaced by
the user. Any attempt to service or repair the unit by the user will void the product warranty.
5. Sarian 2000 series products are designed for indoor use only and should be used in an environment that is
suitable for computers and other electronic equipment.
6. Users of models incorporating GSM/GPRS capability should ensure that the unit (when used with the supplied
aerial) is positioned at least 1 metre away from themselves.
Page 5

2000 Series Reference guide
1 Introduction
Thank you for purchasing a Sarian 2000 series product. There are number of models in the 2000
series which at the time of writing include:
Model Description
IR2140 ISDN router, 4 serial ports
IM2040 ISDN multiplexer, 4 serial ports
GR2130 GPRS / ISDN router, 3 serial ports
IR2420 ISDN router / 3-port hub, 2 serial ports
GR2410 GPRS / ISDN router / 3-port hub, 1 serial port
This guide describes the operation of all of the standard features available across the range at the
time of writing. Consequently, some of the features described in this guide may only be available
on certain models or must be purchased as “feature packs”. You should refer to the specification of
the particular model you have purchased to ascertain which features are supported as standard.
In addition to a comprehensive range of communications capabilities, Sarian 2000 series products
provide a combination of powerful, yet easy to use, configuration, management and diagnostic
tools. The LAN interfaces supports 10/100-mode operation with auto-detect and, depending upon
the model, up to four asynchronous serial devices may be connected to share a single WAN
interface (e.g. ISDN).
In many applications, the serial ports will be configured to appear as if they were standard “AT”
modems and behave accordingly. However, many other standard protocols are supported (e.g. B
and D-channel X.25, PPP, V.120, TPAD etc). This makes it simple and cost-effective to migrate
existing terminal equipment, which uses the analogue telephone network, to faster, more reliable
and cost-effective digital services.
All major features of the unit can be configured using a standard Internet Web browser. This can
be done locally (via a serial port or LAN port) or remotely (via the WAN connection). A built-in Web-
server and flexible FLASH-memory based filing system mean that the unit can also be customised
to provide application specific functions, statistics and diagnostic information.
Sarian 2000 series products are ideal for applications such as general IP routing, on-line
authorisation of credit card transactions or terminal serving. They are able to emulate most of the
standard industry protocols, such as TPAD, and can carry out both APACS 30 and APACS 50
transactions with remote hosts much faster than with traditional analogue modems, whilst requiring
no changes either to the host or to the terminal software.
Your 2000 series unit also supports up to four Switched Virtual Circuits (SVC’s) over the ISDN D-
channel (where this service is available from your network supplier), simultaneously with two
64Kb/s B channel circuits, thus enabling you to gain the maximum benefit from your investment in
ISDN lines.
An optional advanced feature allows the encapsulation of TCP/IP data in X.25 packets allowing the
unit to be used to carry “always on” traffic between two LANs without using the ISDN B channels.
1.1 Unpacking The Unit
Open the box and carefully take out all of the items. These should include a packing list that details
the full contents of the package.
Check each item on the packing list against the package contents. If any item is missing or
damaged, please contact your supplier. You should also make a record of any damage that may
have occurred during shipping and report it to the carrier.
Page 6

2000 Series Reference Guide
1.2 Front Panel Features
The front panel of each product incorporates a number of LED indicators that will illuminate steady
or flashing when the unit is in use. The precise number and function of the LED’s will depend upon
the model you have purchased. The illustration below is of the IR2140.
The following descriptions cover all the different types of indicator that are used on 2000 series
products:
ON (all models)
The ON indicator will illuminate steady red when power is applied.
LAN (router and hub models only)
The LAN indicator(s) will illuminate steady when there is a connection to the associated LAN
port or flash when data is transmitted or received on that port.
D, B1, B2 (ISDN models only)
The D, B1 and B2 indicators reflect the status of the ISDN BRI connection as follows:
The Dindicator will illuminate steady when the ISDN LAPD link is established. It will
flash slowly when a D-channel X.25 link has been raised. When the D-channel X.25
link is passing data, it will flash quickly.
♦
♦
♦
♦
♦
The B1 and B2 indicators will illuminate steady when the respective B-channel is
active. If data is being transmitted or received over any of these channels, the
appropriate indicator will flash. The B2 indicator will also flash when the unit is first
powered up to indicate that the unit is performing a self-test. When it stops flashing the
unit is ready to use.
DTE
The DTE indicators (up to four) will illuminate steady if a terminal is connected to the
corresponding port and the DTR signal is on. If data is being transmitted via a particular port
the corresponding indicator will flash.
NET, SIM, DAT (GPRS models only)
These indicators relate to GPRS operation and operate as follows:
The NET indicator illuminates steady when a GPRS network has been detected. It is
also used to indicate the GSM signal strength when no separate signal strength
indicators are available. When signal strength is low it will flash slowly. A stronger
signal will result in a faster flash rate.
The SIM indicator illuminates steady when a valid SIM card is installed in the unit.
The DAT indicator flashes to indicate that data is being transferred over GPRS.
note
On models with both ISDN and GPRS the D, B1 and B2 indicators are shared with the NET, SIM
and DAT indicators so that their function depends on how the unit is configured.
Page 7

2000 Series Reference guide
1.3 Rear Panel Features
The rear panels of the 2000 series products incorporate the power supply connector, serial port
connectors and, if applicable connectors for LAN cables and GPRS aerials. Some models also
include a “user” switch that is normally used to reset the unit. The following illustration shows the
rear panel of the IR2140.
The following descriptions cover all the different types of connector that are used on 2000 series
products.
1.3.1 The power connector
Sockets marked 12V DC or DC IN are use to connect the mains power adapter. To connect the
power supply push the plug from the mains adapter firmly into the socket on the rear of the unit
before connecting the power supply to the mains AC outlet.
note:
You must not use any power supply adapter other than that supplied by Sarian Systems. Doing so
may damage the product and will invalidate the warranty.
When you first apply power to the unit, the ON indicator will illuminate and after about 10 seconds,
the unit will initiate a series of diagnostic self-tests. During this process one or more of the other
indicators (depending on the model), will flash to show that the unit is busy. When the flashing
stops, the unit is ready to use.
1.3.2 LAN connectors
Connectors labelled LAN (or 10/100 LAN) are used to connect the unit to a 10/100-BaseT LAN.
On models with a single LAN port (e.g. IR2140), the router may be connected to your LAN (directly
or via a suitable hub), using the CAT5 cable supplied.
On models with integral hub capability (e.g. IR2410), the operation of the individual ports will
depend upon the configuration of the unit i.e. they may be configured to act as hub ports (so as to
provide access to a LAN for other connected terminal devices) or they may appear as individual
LAN segments with their own Ethernet MAC/IP addresses.
note:
The LAN ports on the IR2420 and GR2410 are auto-sensing for both speed and direction i.e.
standard or crossover cables may be used interchangeably.
1.3.3 ISDN BRI connector
The connector labelled ISDN BRI is used to connect the unit to the ISDN network using the cable
supplied. One end of the cable should be fitted into this connector (with the retaining clip at the
bottom) before the other end is connected to the wall mounted ISDN outlet socket.
note:
You should not use any cable other than the one supplied or a purpose designed ISDN cable.
Doing so may damage the product and invalidate the warranty.
Page 8

2000 Series Reference Guide
1.3.4 Serial port connectors
Serial port connectors are labelled PORT or DTE and the number will vary depending upon the
model you have purchased. The type of connector used may be a standard 25-way D socket or an
8-way/8-contact RJ45 socket. Where RJ45 sockets are used the unit will be supplied with the
appropriate number of RJ45 to 9-way D adapters. Details of the pin designations for the ports are
given under the heading ASY Port Connectors. In general, 25-way D sockets support RS232
synchronous and asynchronous operation, though some models can be provided with X.21/RS485
capability. Ports using RJ45 connectors provide RS232 asynchronous operation only.
1.3.5 User switch
If present, the small, recessed switch labelled USER normally acts as a reset switch. Pressing this
while the unit is powered up will cause a hardware reset (similar to removing and re-applying
power).
1.3.6 Aerial (or GPRS Aerial)
Models that incorporate a GPRS (General Packet Radio System) module, will feature a TNC
connector on the rear panel labelled AERIAL or GPRS AERIAL.
These models are capable of working at GSM 900 and DCS 1800 frequencies and a dual-band
GSM900/DCS1800 aerial is normally supplied with the unit. This should be screwed onto the
AERIAL connector prior to operation. For desktop operation, the unit is also supplied with a
detachable 90°“elbow” adapter. Using the aerial without this adapter allows it to be mounted on a
wall or other vertical surface using the keyhole slots provided in the base.
In cases where signal reception is weak, it is permissible to use an external antenna and Sarian
Systems can supply a range of specialist antennas.
1.4 GPRS SIM Card Installation
Models such as the GR2130 and GR2420 incorporate a wireless GPRS module, which is capable
of transmitting and receiving data at rates up to 33,000bps.
note:
Before you can use the router in this mode, you must have a subscription with a suitable GSM
network operator that provides GPRS coverage in your area.
If, when you ordered the router, you also took out a subscription to a mobile GPRS service through
Sarian Systems, the SIM card required to activate the service will already be installed in your unit.
In this case the installation procedure described below will not apply.
If you have NOT ordered your GPRS service subscription from Sarian Systems, your operator will
provide you with a “SIM” (Subscriber Identity Module) card. This card must be installed in the
router before use.
1.4.1 GR2130 and GR2410
The GPRS module (which incorporates the SIM-card holder), on these models is located inside the
unit and cannot be accessed without removing the lid. To do this you will require a small crosshead
screwdriver.
First make sure that the unit is disconnected from the mains power supply and then proceed as
follows:
a) Remove the aerial (if fitted).
b) Turn the unit onto its lid and remove the 2 fixing screws from the base (two additional
screws for re-assembling the case are provided separately with the unit).
Page 9

2000 Series Reference guide
c) Place the unit the correct way up and carefully lift the lid free noting that it will only fit
correctly one way round.
d) Locate the SIM-card holder. Your unit may contain one of two alternative GPRS modules
(Motorola G.18 or Siemens MC45). There following illustration shows the location of the
SIM-card holder for both types of module:
e) Make sure the SIM card is correctly oriented according to the module type and then insert
it into the holder in the direction of the arrow and push it firmly into place.
f) Replace the lid (making sure of the orientation) and fix with the four screws.
g) Screw the GPRS aerial (with or without the elbow adapter as necessary) to the TNC
connector on the rear panel.
You should now refer to the section entitled Configuring/Testing GPRS Models before attempting
to use the unit.
1.4.2 Configuring/Testing GPRS Models
Refer to the Configure fGPRS Module section of this guide to configure your router for the
correct APN and PIN code (if any).
You can now power up your unit and test connection to the GPRS network. If you have correctly
configured everything, the SIM indicator on the front panel should illuminate green to show that a
GPRS enabled SIM card is present. The unit will now attempt to log on to the specified GPRS
network and if it is able to do so, the GPRS indicator will illuminate steady. Data passing to and
from the network will be reflected by the status of the DAT indicator, which will flash alternatively
red and green. If you are unable to connect to the network, go to the Status fGPRS Module web
page and press the Refresh button. The page should appear similar to the following:
Page 10

2000 Series Reference Guide
note:
The signal strength is shown in “negative dB”, which means that the stronger the signal, the lower
the number. As a guide -30dB would be a very strong signal, only normally obtained very close to a
cell site. -120dB represents a very weak signal on the limits of operation. If your unit reports -
120dB or less, try re-orienting the antenna or consider adding an external antenna.
Page 11

2000 Series Reference guide
2 Using The Web Interface
To access the built-in web pages using a web browser (e.g. Internet Explorer), you will need to
install the sarian2k.inf driver file and create a PPP Dial-up Networking connection (DUN) for the
unit as described below. It is assumed that you already have a basic knowledge of Windows
networking concepts and terminology.
note:
To use Dial-up Networking you must have the TCP/IP fDial-up adapter installed in the Network
Configuration for Windows. Check this by selecting Settings fControl Panel fNetwork f
Configuration.
2.1 Installing The Driver File
The precise procedure for installing the .inf driver file for the unit will vary slightly between different
versions of Windows. The following description applies to Windows XP. Start by selecting Start f
Control Panel fPhone and Modem Options. Select the Modems tab and you will see a dialog
similar to the following:
Click on Add… to move to install a new modem driver:
Page 12

2000 Series Reference Guide
Check the Don’t detect my modem, I will select it from a list option before clicking Next > to
display the following dialog screen:
This screen lists the manufacturers and models of modem currently available on your system.
Insert the CD supplied into the CD drive and click on Have Disk….
Use the Browse button to locate the sarian2k.inf file on the drive CD supplied with your unit. This
will be in the appropriate Windows version sub-directory of the drives folder e.g. win95-98. The
name and description of the Sarian unit will appear in the Modelslist:
Page 13

2000 Series Reference guide
Click Next > and you will be asked to select which COM port the unit is to be connected to. Select
an appropriate port, click Next > and Windows will install the driver. Once installation is complete
click Finish to return to the Phone and Modem Options dialog:
Click on the OK button if you are satisfied with the installation.
2.2 Creating A New Connection
You now need to create a new network connection through which you can access your unit.
If you are planning to connect the unit directly to your PC for configuration purposes, connect it to
the appropriate COM port now using a suitable serial cable.
If you wish to configure a remote unit, make sure it is connected to a suitable ISDN line and make
a note of the ISDN number.
From the Windows Start menu, select All Programs fAccessories fCommunications fNew
Connection Wizard. You will be presented with the New Connection Wizard introduction screen.
Click on Next to proceed to the Network Connection Type dialog:
Page 14

2000 Series Reference Guide
Select the Connect to the network at my workplace radio-button then click on Next >:
Select the Dial-up connection radio-button then click on Next >:
From the Select a Device dialog, select the Sarian device you have just installed and make sure
that any other devices in the list are unchecked. Click Next >.
You must now enter a name for the connection. It is helpful to choose a name that you will easily
remember such as “My Local Sarian” or “IR2140 - Bristol Office”. Click Next >.
Page 15

2000 Series Reference guide
The next dialog allows you to fill in the phone number for the connection.
If the connection is being created for direct local access using a COM port, you should set the
phone number to 123. This number will be intercepted by the unit and recognised as an attempt to
connect locally.
If the connection is being created for remote access, enter the correct ISDN telephone number
(including the area code), for the remote unit.
When you have done this click Next >. The final dialog screen will confirm that the connection has
been created and includes a check box to allow you to create a shortcut on your desktop if
necessary. Click on Finish to complete the task.
2.3 Configuring A New Connection
The new Network Connection that you have just created may now be used to connect to the unit
but before you do this, you will need to check some of the configuration properties. Click on the
Start button and select Connect To fMy Sarian 2000 Router (substituting the connection name
you chose).
Page 16

2000 Series Reference Guide
Click on the Properties button to display the properties dialog for the connection:
On the General tab, click Configure to display the Modem Configuration dialog:
Make sure that the Maximum speed (bps) is set to 115200 and that the Enable hardware flow
control box is checked.
Click OK when you have finished to return to the main properties dialog.
Now select the Networking tab:
Page 17

2000 Series Reference guide
Make sure that the Type of dial-up server I am calling is set to PPP: Windows 95/98/NT/2000,
Internet and click on Settings:
Make sure that all three options are unchecked before clicking OK to return to the Networking tab.
In the This connection uses the following items list, Internet Protocol (TCP/IP) should be the
only item that is checked. Make sure that this is the case and then click OK to return to the main
dialog. You are now ready to initiate a connection.
2.4 Initiating A Connection
In the main dialog, you are asked to enter a username and password. The default settings for your
unit are “username” and “password” respectively but you should change as soon as possible in
order to prevent unauthorised access to your unit (refer to the section entitled Configure fUsers
for instructions on how to do this). The username is not case sensitive, but the password is.
Page 18