Avocent Cyclades-PR1000 Manuel d'utilisateur

Cyclades-PR1000Installation ManualAccess RouterCyclades Corporation

Cyclades-PR100010Chapter 1 - How to Use This ManualCyclades Technical Support and Contact InformationAll Cyclades products include limited free techn

Cyclades-PR1000Chapter 13 - IPX 100CHAPTER 13 IPX (INTERNETWORK PACKET EXCHANGE)IPX is an alternative to IP, proprietary to Novell. When IPX is act

Cyclades-PR1000Chapter 13 - IPX 101Enabling IPXThe first step is to activate the IPX feature in the router. This is accomplished using the menu optio

Cyclades-PR1000Chapter 13 - IPX 102The parameter Send SAP Update can be set to Demand, Periodic, or None. This parameter affects both SAP andRIP. Pe

Cyclades-PR1000Chapter 13 - IPX 103The routing table is displayed by the menu option INFO => SHOW ROUTING TABLE => IPX. For the example, andusi

Cyclades-PR1000Chapter 14 - Virtual Private Network Configuration104CHAPTER 14 VIRTUAL PRIVATE NETWORK CONFIGURATIONThe Virtual Private Network utili

Cyclades-PR1000Chapter 14 - Virtual Private Network Configuration 105An example showing a local security network and two remote security networks is s

Cyclades-PR1000Chapter 14 - Virtual Private Network Configuration106...ETH0PR3000RouterRSG3 - RemoteSecurity GatewayRou

Cyclades-PR1000Chapter 14 - Virtual Private Network Configuration 107STEP THREEUse the menu item INFO =>SHOW ROUTING TABLE to confirm that the othe

Cyclades-PR1000Chapter 14 - Virtual Private Network Configuration108STEP SIXNow, the Remote Security Networks must be defined. This is done in the CO

Cyclades-PR1000Appendix A - Troubleshooting 109APPENDIX A TROUBLESHOOTINGWhat to Do if the Login Screen Does Not Appear When Using a Console.1 Check

Cyclades-PR100011Chapter 1 - How to Use This ManualThe mailing address and general phone numbers for Cyclades Corporation are:Cyclades CorporationPho

Cyclades-PR1000Appendix A - Troubleshooting 110What to Do if the Router Does Not Work or Stops Working.1 Check that the cables are connected correctly

Cyclades-PR1000Appendix A - Troubleshooting 111Testing the Ethernet InterfaceAfter configuring the Ethernet interface, return to the main menu using t

Cyclades-PR1000Appendix A - Troubleshooting 112current values of the interface parameters.Testing the WAN InterfaceThe WAN interface can be tested usi

Cyclades-PR1000Appendix A - Troubleshooting 113 Power100BTLinkTXRXCPUTXRXGPColFIGURE A.3 LED PANEL

114Cyclades-PR1000Appendix B - Hardware SpecificationsAPPENDIX B HARDWARE SPECIFICATIONSGeneral SpecificationsThe Cyclades-PR1000 power requirements

Appendix B - Hardware Specifications 115Cyclades-PR1000External InterfacesThe WAN InterfaceThe WAN interface is provided on a DB-25 female connector.

116Cyclades-PR1000Appendix B - Hardware SpecificationsThe Console Interface18CONSOLE PORTPin RS-232 Signal1RTS2DTR3TX4Ground5CTS6RX7 DCD8DSRFIGURE B.4

Appendix B - Hardware Specifications 117Cyclades-PR1000CablesThe Straight-Through Cable2345678151720222423456781517202224TxDRxDRTSCTSDSRGndDCDTxClk_DT

118Cyclades-PR1000Appendix B - Hardware SpecificationsThe DB-25 to M.34 AdapterDB-25 FemaleSignalPGndRTSCTSDSRGndDCDTxD/V.35 (B)TxD/V.35 (A)RxD/V.35 (

Appendix B - Hardware Specifications 119Cyclades-PR1000The X.21 Modem CablePin #124679111517192224Cyclades-PR1000(DB25)X.21 Equipament(DB15)SignalCGND

Cyclades-PR1000Chapter 2 - What is in the Box 12CHAPTER 2 WHAT IS IN THE BOXThe Cyclades-PR1000 comes in two varieties, described below. Both models

120Cyclades-PR1000Appendix B - Hardware SpecificationsThe Loop-Back ConnectorThe pin-out diagram for this connector is provided for reference. This c

Cyclades-PR1000Appendix C - Configuration Without a Console 121APPENDIX C CONFIGURATION WITHOUT A CONSOLEWhen a terminal or PC is not available for u

Cyclades-PR1000Index 122BBandwidth Reservation 94Boot Messages 109CCables 13with a DB-25 connector 110Connection to an Internet AccessProvider 24

Cyclades-PR1000Index 123TTechnical Support 10Telephone Numbers 10Traffic Rule Lists 93Traffic Shaping 94Troubleshooting 109UUsing CyROS menus 19

Cyclades Corporation41829 Albrae StreetFremont, CA 94538 - USAPhone: (510) 770-9727Fax: (510) 770-0355www.cyclades.comCyclades South AmericaPhone: 5

Chapter 2 - What is in the Box 13Cyclades-PR1000The V.35/RS-232 ModelDB-25MaleDB-25MaleBack Panel of PR1000orStraight-ThroughCableStraight-ThroughCabl

Cyclades-PR1000Chapter 2 - What is in the Box 14The X.21 ModelDB-15MaleBack Panel of PR1000DB-25MaleX.21 DSU/CSUwith DB-15InterfaceConsole CableLabele

Chapter 2 - What is in the Box 15Cyclades-PR1000Horizontal SurfacesThe Velcro® strips should be used to attach the PR1000 more firmly to a horizontal

Cyclades-PR1000Chapter 2 - What is in the Box 16Next, place the PR1000 on the horizontal surface, aligning the fuzzy and prickly Velcros® as shown in

Chapter 2 - What is in the Box 17Cyclades-PR1000184,8 mm or 7.27 inScrew SlotCyclades-PR1000Vertical Surface Wherethe PR1000 Will be SecuredTwo 5mm Ø

Cyclades-PR1000Chapter 2 - What is in the Box 18Place the center of the screw slots over the screws and slide the router down so the screws hold the r

Chapter 3 - Using CyROS Menus 19Cyclades-PR1000Chapter 3 Using CyROS MenusThis chapter explains CyROS menu navigation and special keys. There are th

Cyclades-PR1000 Installation ManualVersion 1.2 – May 2002Copyright (C) Cyclades Corporation, 1998 - 2002We believe the information in this manual is

Cyclades-PR1000Chapter 3 - Using CyROS Menus 20Once the console connection is correctly established, a Cyclades banner and login prompt should appear

Chapter 3 - Using CyROS Menus 21Cyclades-PR1000Special Keys<Enter> or <Ctrl+M>These keys are used to end the input of a value.<ESC>

Cyclades-PR1000Chapter 3 - Using CyROS Menus 22The CyROS Management UtilityAfter one of the interfaces has been connected and configured, there is ano

Chapter 3 - Using CyROS Menus 23Cyclades-PR1000The link Configuration Menu Interface will present an HTML version of the CyROS Main Menu, describedpre

Cyclades-PR100024Chapter 4 - Step-by-Step InstructionsCHAPTER 4 STEP-BY-STEP INSTRUCTIONS FOR COMMON APPLICATIONSThis chapter provides detailed examp

Cyclades-PR100025Chapter 4 - Step-by-Step InstructionsPlease read the entire example and follow the instructions before turning the router on. The ro

Cyclades-PR100026Chapter 4 - Step-by-Step InstructionsParameter Example Your ApplicationIP fragmentation -Ignore Bit DFYesNAT LocalICMP Port InactiveI

Cyclades-PR100027Chapter 4 - Step-by-Step InstructionsSTEP THREEThe network protocol parameters, shown in Figure 4.4, are similar to those for the Eth

Cyclades-PR100028Chapter 4 - Step-by-Step InstructionsSTEP FOURThe Encapsulation parameters for PPP are less straight-forward. Many of them are based

Cyclades-PR100029Chapter 4 - Step-by-Step InstructionsSTEP FIVESince a modem is used in the example, the dial-out table must be configured. This is d

Cyclades-PR1000Table of ContentsTable of ContentsCHAPTER 1 HOW TO USE THIS MANUAL ...

Cyclades-PR100030Chapter 4 - Step-by-Step InstructionsSTEP SIXTwo static routes must be added to tell the router that all traffic not intended for the

Cyclades-PR100031Chapter 4 - Step-by-Step InstructionsMenu CONFIG=>STATIC ROUTES=>IP=>ADD ROUTEParameter Example Your ApplicationDestination

Cyclades-PR100032Chapter 4 - Step-by-Step InstructionsMenu CONFIG =>SECURITY =>NAT =>LOCAL ADDRESS =>ADD RANGEParameter Example Your Appli

Cyclades-PR100033Chapter 4 - Step-by-Step InstructionsExample 2 A LAN-to-LAN Example Using Frame RelayThis section will guide you through a complete

Cyclades-PR100034Chapter 4 - Step-by-Step InstructionsSTEP ONEThe first step is to determine the parameters needed to configure the Ethernet interface

Cyclades-PR100035Chapter 4 - Step-by-Step InstructionsSTEP TWONo more parameters are necessary for the Ethernet interface. The other interface to be

Cyclades-PR100036Chapter 4 - Step-by-Step InstructionsSTEP THREEThe network protocol parameters, shown in Figure 4.14, are similar to those for the Et

Cyclades-PR100037Chapter 4 - Step-by-Step InstructionsSTEP FOURThe Encapsulation parameters for Frame Relay are less straight-forward. Many of them a

Cyclades-PR100038Chapter 4 - Step-by-Step InstructionsAt the end of the parameter list shown above, the DLCI menu appears. Choosing Add DLCI will lea

Cyclades-PR100039Chapter 4 - Step-by-Step InstructionsSTEP FIVENow that the central office’s LAN has been defined, a route must be added to tell the r

Cyclades-PR1000Table of ContentsOther Parameters...

Cyclades-PR100040Chapter 4 - Step-by-Step InstructionsSTEP SEVENThe Ethernet interface can be tested as described in the troubleshooting appendix. Th

Chapter 5 - Configuration of the Ethernet Interface 41Cyclades-PR1000CHAPTER 5 CONFIGURATION OF THE ETHERNET INTERFACEThe PR1000 has one Ethernet 10/

Cyclades-PR1000Chapter 5 - Configuration of the Ethernet Interface 42Network Protocol Menu (Continued)Parameter DescriptionSecondary IPAddressApplies

Chapter 5 - Configuration of the Ethernet Interface 43Cyclades-PR1000IP BridgeAn IP Bridge is used to divide a network without subnetting. Whenever a

Cyclades-PR1000Chapter 5 - Configuration of the Ethernet Interface 44In Figure 5.1, an example of the use of an IP Bridge is given. From the availabl

Chapter 6 - Configuration of the SWAN Interface 45Cyclades-PR1000CHAPTER 6 THE SWAN INTERFACEThis chapter describes how to configure a SWAN interface

Chapter 6 - Configuration of the SWAN Interface 46Cyclades-PR1000STEP TWOThe second step is to choose a data-link protocol in the Encapsulation menu.

Chapter 6 - Configuration of the SWAN Interface 47Cyclades-PR1000STEP FOURIf PPP Encapsulation is being used, a type of authentication should be chos

Cyclades-PR1000Chapter 7 Network Protocols48CHAPTER 7 NETWORK PROTOCOLSThe second step in most interface configurations is to choose which network p

Chapter 7 Network Protocols49Cyclades-PR1000The IP ProtocolIf the preset values provided by the operating system are accepted, the interface will wor

Cyclades-PR1000Table of ContentsOSPF Global Configurations ...

Cyclades-PR1000Chapter 7 Network Protocols50Network Protocol (IP) Menu (Continued)Parameter DescriptionIP MTU Assigns the size of the Maximum Transmi

Chapter 7 Network Protocols51Cyclades-PR1000The Transparent Bridge ProtocolThe Transparent Bridge Protocol can be used in conjunction with either IP

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100052CHAPTER 8 DATA-LINK PROTOCOLS (ENCAPSULATION)Each encapsulation option is presented i

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100053PPP Menu (Continued)Parameter DescriptionDisable LCP EchoRequestsLCP (Link Control Pro

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100054HDLCThis data-link protocol is a proprietary alternative to PPP. It has only one para

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100055Parameter DescriptionEncapsulationTypeRFC1490 - IETF is the standard used by most equi

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100056STEP TWOAfter configuring the general parameters, each DLC must be defined. An exampl

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100057Data link connections are defined in the Add DLCI menu, which appears at the end of th

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100058Add DLCI Menu CONFIG=>INTERFACE =><LINK> =>ENCAPS =>FRAME RELAY =&g

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100059To edit the DLCI table, use the list command (CONFIG=>INTERFACE=><LINK>=&g

Cyclades-PR1000Table of ContentsCHAPTER 14 VIRTUAL PRIVATE NETWORK CONFIGURATION...104APP

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100060X.25A Cyclades Router can act either as a DTE (Data-terminal Equipment) connected to a

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100061X.25 Menu (Continued)Parameter DescriptionNumber of Virtual Circuits Indicates the max

Chapter 8 - Data-Link Protocols (Encapsulation)Cyclades-PR100062STEP TWOThe next step is to create a static routing table associating each remote X.12

Cyclades-PR1000Chapter 9 - Routing Protocols 63CHAPTER 9 ROUTING PROTOCOLSRouting StrategiesRouting can be done either statically or dynamically.Stat

Cyclades-PR1000Chapter 9 - Routing Protocols 6410.0.0.0Mask: 255.0.0.0Router 110.0.0.110.0.0.210.0.0.3192.168.100.2192.168.100.3192.168.100.1142.10.0.

Cyclades-PR1000Chapter 9 - Routing Protocols 65UnnumberedInterfacesPoint-to-Point ConnectionSlot 1ETH0ETH0Slot 3Router 110.0.0.3192.168.100.1Router 2A

Cyclades-PR1000Chapter 9 - Routing Protocols 66Add Static Route Menu CONFIG =>STATIC ROUTES =>IP =>ADD ROUTEParameter DescriptionDestination

Cyclades-PR1000Chapter 9 - Routing Protocols 67RIP ConfigurationCyROS supports three basic types of RIP:1 RIP1 [RFC 1058]2 RIP2 with broadcast (compat

Cyclades-PR1000Chapter 9 - Routing Protocols 68OSPFThe OSPF (Open Shortest Path First) routing protocol is significantly more complicated than RIP. T

Cyclades-PR1000Chapter 9 - Routing Protocols 69First, some definitions:• An Autonomous System (AS) is a portion of the network that will use a single

Cyclades-PR10007Chapter 1 - How To Use This ManualCHAPTER 1 HOW TO USE THIS MANUALThree Cyclades manuals are related to the PR1000.1 The Quick Instal

Cyclades-PR1000Chapter 9 - Routing Protocols 70OSPF Configuration on the InterfaceSTEP TWOContrary to most other protocols in CyROS, OSPF must first b

Cyclades-PR1000Chapter 9 - Routing Protocols 71OSPF Menu (Continued)Parameter DescriptionRetransmit Intervalin Seconds*Time in seconds between link-st

Cyclades-PR1000Chapter 9 - Routing Protocols 72OSPF Global ConfigurationsSTEP THREEAfter completing the OSPF interface configuration for all interface

Cyclades-PR1000Chapter 9 - Routing Protocols 73OSPF Global Commands (Continued)Parameter DescriptionTransit Area ID ID of the OSPF Area sandwiched bet

Cyclades-PR1000Chapter 9 - Routing Protocols 74STEP FOURThe next step is to define the areas created in step two. This is done in the OSPF Area Menu.

Cyclades-PR1000Chapter 9 - Routing Protocols 75STEP FIVEThe CONFIG =>IP =>OSPF =>NEIGHBORS menu is required if the router uses OSPF over non-

Cyclades-PR1000Chapter 9 - Routing Protocols 76STEP SIXIt is not always possible to connect all areas directly to the backbone. When an area is conne

Cyclades-PR1000Chapter 10 - CyROS, the Operating System 77CHAPTER 10 CYROS, THE OPERATING SYSTEMThis chapter explains various operating system featur

Cyclades-PR1000Chapter 10 - CyROS, the Operating System78Other users can be created and the user “usr” can be assigned a password. The password of th

Cyclades-PR1000Chapter 10 - CyROS, the Operating System 79The super user has access to all menus. The usr user is shown a menu, upon sucessful login

Cyclades-PR10008Chapter 1 - How To Use This ManualChapter 12 - Filters and Rules - demonstrates how to protect your router from undesired traffic.Chap

80Cyclades-PR1000Chapter 11 - NATCHAPTER 11 NAT (NETWORK ADDRESS TRANSLATION)NAT exists to convert local IP addresses into Internet “global” IP addr

81Cyclades-PR1000Chapter 11 - NAT• Two servers that are accessed via the same global IP address, assigned statically.There are two types of NAT availa

82Cyclades-PR1000Chapter 11 - NATNAT Static Translation Table# Global address / port local address / Port Protocol1 200.240.230.225 / 20 192.168.0.30

83Cyclades-PR1000Chapter 11 - NATAn overview of the NAT menu is shown in the table below.NAT Menu CONFIG =>SECURITY =>NATMenu Option Descriptio

84Cyclades-PR1000Chapter 11 - NATSTEP TWOThe parameters in the Timeout Menu are explained in more detail below. The preset values should be appropri

85Cyclades-PR1000Chapter 11 - NATSTEP FOURIf static translations are to be performed, as described in the example, the parameters in the Static Transl

86Chapter 12 - Filters and RulesCyclades-PR1000CHAPTER 12 RULES AND FILTERSThere are four basic types of rules:1 IP filter rules,2 Radius rules (actu

87Cyclades-PR1000Chapter 12 - Filters and RulesConfigIPRule List NameRule StatusRule List TypeDefault ScopeIncoming Rule List NameOutgoing Rule List N

88Chapter 12 - Filters and RulesCyclades-PR1000Exterior RouterInterior RouterRouterExtension to NetworkBastionHostETH0ETH0192.168.0.2192.168.0.310.0.0

89Cyclades-PR1000Chapter 12 - Filters and RulesExterior RouterThe exterior router is the network’s first defense against attacks. For this reason, it

Cyclades-PR10009Chapter 1 - How To Use This ManualIconsIcons are used to draw attention to important text.Icon Meaning WhyWhat is Wrong? When an error

90Chapter 12 - Filters and RulesCyclades-PR1000Steps necessary to activate filtering on the exterior router in the example:1 There are two interfaces

91Cyclades-PR1000Chapter 12 - Filters and RulesRules ListsRule List Name Rule Default List Linked Status

92Chapter 12 - Filters and RulesCyclades-PR1000Interior RouterIf an interior router exists in the network, the administrator may decide to use a Defau

93Cyclades-PR1000Chapter 12 - Filters and RulesThe configuration for “Stop forged packets” is shown in the following listing:Rules ListsRule List Name

94Chapter 12 - Filters and RulesCyclades-PR10001 Traffic Shaping (the division of bandwidth is strictly adhered to),2 Bandwidth Reservation (the divis

95Cyclades-PR1000Chapter 12 - Filters and RulesAn Internet provider has three clients connected to the same router. Client A is larger and without tr

96Chapter 12 - Filters and RulesCyclades-PR1000Rules ListsRule List Name Rule Default List LinkedStatus Scope Type RuleListtraffic_1 Enabled TrafficFi

97Cyclades-PR1000Chapter 12 - Filters and RulesRule 1Status EnabledFlow Priority 0Rule bandwidth 25%Bandwidth priority 2Protocol 0Source IP Operator E

98Chapter 12 - Filters and RulesCyclades-PR1000An example showing the third type of traffic control is given in Figure 12.8. The network administrato

99Cyclades-PR1000Chapter 12 - Filters and RulesThe configured rules will appear as shown in the following listing.Rules ListsRule ListNameRule Default