Ascend Customer Service

How to use this guide

What you should know

Documentation conventions

How to use the on-board software

Changing parameter values

Saving or discarding your changes

Manual set

About Wide Area Network (WAN) connections

Link encapsulation

Nailed groups

How calls are initiated

How calls are answered

Data compression options

The Answer profile

Connection profiles

Session options

Telco options

Encapsulation options

PPP connections

MP, MPP, and MP+ connections

Dynamic bandwidth allocation (DBA)

Guidelines for configuring DBA

Monitoring DBA

Clearing a call on the basis of idle bandwidth

BACP connections

Nailed MPP connections

Configuring Frame Relay connections

Configuring a Frame Relay profile

Configuring a gateway connection

Inverse ARP for Frame Relay

Configuring a T1 line

Configuration steps

Backup Connection disconnect timer

Configuring a V.35 serial WAN port

Introduction to IP routing on the Pipeline

Host-to-router connections

Router-to-router connections

Subnet mask notation

IP routing in the Answer profile

Connection profiles and IP routes

How the Pipeline uses its routing table

RIP-v2 and RIP-v1 routing

Interface-based routing

System behavior with a numbered interface

Configuring interface-based routing

Specifying the remote interface address

Multicast forwarding and IGMP functionality

Managing the routing table

Parameters that affect the routing table

Static and dynamic routes

Configuring static routes

Creating a Static Rtes profile

Configuring the default route

Specifying default routes on a per-user basis

Enabling the Pipeline to use dynamic routing

If you are using RIP-v1

Configuring RIP-v2 on Ethernet

Configuring RIP for incoming WAN connections

Configuring RIP for a particular connection

Route preferences

Viewing the routing table

Fields in the routing table

Removing down routes to a host

Identifying Temporary routes in the routing table

Configuring IP routing connections

Checking remote host requirements

Example host connection with static address

Example router connection

Example router connection on a subnet

Ascend Tunnel Management Protocol (ATMP)

Using a Pipeline in a virtual private network

Foreign and home agents

Configuring a home agent in router mode

Connecting to a local IP network

Assigning the Ethernet interface IP address

Creating a subnet for the Pipeline

Assigning two addresses: Dual IP

Using Ping to verify the address

Enabling proxy mode in the Pipeline

Enabling DNS on the Pipeline

Generating UDP checksums

Updating other routers on the backbone

BOOTP Relay

DHCP services

How IP addresses are assigned

Configuring DHCP services

Setting up a DHCP server

Setting up Plug and Play support

Setting up DHCP spoofing

Dial-in user DNS server assignments

Configuring DNS servers in the Ethernet profile

Configuring DNS servers in the Connection profile

Local DNS host address table

Configuring the local DNS table

Creating the local DNS table

Editing the local DNS table

Deleting an entry from the local DNS table

Restrictions for names in the local DNS table

User-definable TCP connection retry timeout

Network Address Translation (NAT) for a LAN

Single-address NAT and port routing

Outgoing connection address translation

Incoming connection address translation

Translation table size

Multiple-address NAT

Configuring single or multiple address NAT

NAT for Frame Relay

Configuring NAT port routing (Static Mapping submenu)

Routing all incoming sessions to the default server

Routing incoming sessions for up to 10 servers on a LAN

Disabling routing for specific ports

Well-known ports

How the Pipeline performs IPX routing

IPX Service Advertising Protocol (SAP) tables

IPX Routing Information Protocol (RIP) tables

Extensions to standard IPX

Virtual IPX network for dial-in clients

Optimized access for dial-in NetWare clients

IPX Route profiles

IPX SAP filters

Dial Query

Watchdog spoofing

Automatic SPX spoofing

WAN considerations for NetWare client software

IPX in the Answer profile

Adding the Pipeline to the local IPX network

Checking local NetWare configurations

Configuring IPX on the Pipeline Ethernet interface

Using IPXping to check the configuration

Defining a virtual IPX network for dial-in clients

Working with the RIP and SAP tables

Viewing the RIP and SAP tables

Configuring RIP in a Connection profile

Configuring a static IPX route

Configuring SAP in a Connection profile

Managing IPX SAP filters

Defining an IPX SAP filter

Applying an IPX SAP filter

Configuring IPX routing connections

An example dial-in client connection

An example with NetWare servers on both sides of the link

An example with local NetWare servers only

Introduction to Ascend bridging

How a bridged WAN connection is initiated

Physical addresses and the bridge table

Broadcast addresses and Dial Brdcast

How bridged connections are established

Bridging in the Answer profile

About IPX bridging

When there is no server support on the local network

When there is no server support on the remote network

When there is server support on both networks

IPX routing and bridging on the same connection

Enabling bridging

Managing the bridge table

Parameters that affect the bridge table

Transparent bridging

Static bridge-table entries

Configuring bridged connections

An example AppleTalk bridged connection

An example IPX client bridge (local clients)

An example IPX server bridge (local servers)

An example IP bridged connection

Introduction to filters

Data filters for dropping or forwarding certain packets

Call filters for managing connections

Predefined call filters

Overview of Filter profiles

Filtering inbound and outbound packets

Selecting filter type and activating the filter

Defining generic filter conditions

Defining IP filter conditions

Example filters

An example generic filter to handle AppleTalk broadcasts

An example IP filter to prevent address spoofing

An example IP filter for more complex security issues

Working with predefined call filters

NetWare Call filter

Extending the predefined filter for RIP packets

Defining a SNEP data filter for Ethernet

IP Call filter

AppleTalk Call filter

Display unwanted dial-out packets

When packets are not captured

Turning on the diagnostic option

Displaying packets

Secure Access Firewalls

Determining if Secure Access is present

Firewall profiles

Assigning firewalls to a Connection profile

Assigning firewalls to the Mod Config profile

Filter persistence

Background on firewall and filter persistence

Filter persistence and Connection profiles

Recommended security measures

Changing the Full Access security level password

Activating the Full Access security level

Making the Default security level restrictive

Assigning a Telnet password

Changing the SNMP read and write community string

Requiring profiles for incoming connections

Turning off ICMP redirects

Pipeline Security profiles

Default security level

Security profile passwords

Security privileges

Using the Full Access profile

Defining a second Security profile

Connection security

Authentication protocols

Name and password verification

Calling-line ID authentication

Settable disconnect cause codes for CLID authentication

Callback security

Expect callback support

Using filters to secure the network

Using security cards

Supporting outbound security card calls

Configuring the Pipeline to recognize the APP Server utility

Invoking password mode in the Pipeline

Overview of administration functions

Activating administrative privileges

Configuring administration options

Setting system values

Configuring the Pipeline to interact with syslog

Syslog messages

Using the Pipeline status windows

Performing system administration operations

Using DO commands

Saving the Pipeline configuration

Restoring the Pipeline configuration

Resetting the Pipeline

Using the terminal server interface

Invoking and quitting the terminal server interface

Terminal server commands

Accessing a local Pipeline via Telnet

About the APP Server utility

APP Server installation and setup

Configuring the Pipeline to use the APP server

Using App Server with Axent SecureNet

Creating banner text for the password prompt

Installing and using the UNIX APP Server

Installing and using the APP Server utility for DOS

Installing and using the APP Server utility for Windows

Installing the APP Server utility for Windows 3.1

Installing the APP Server utility for Windows 95

Installing the APP Server utility for Windows NT

Installing APP Server on a Macintosh

Cabling problems: Rule these out first

Common problems and their solutions

General problems

Profile configuration problems

Hardware configuration problems

Problems configuring the Pipeline

ISDN BRI interface problems

T1 and ISDN BRI circuit-quality problems

T1 access problems

Bridge/router problems

Problems accessing the remote network

Check the installation

Configuration problems

Traps for BRI linkUp and linkDown

What you need to upgrade system software

Displaying the software load name

The upgrade procedure

Activating a Security Profile

Guidelines for upgrading system software

Before you begin

Upgrading system software with a standard load

Upgrading using the serial console

Upgrading standard load using TFTP

Upgrading system software to a fat or extended load

Recovering from a failed upgrade

Pipeline checks compatibility of downloaded files

Copyright © 1998, Ascend Communications, Inc. All rights reserved.