Professional Documents
Culture Documents
OPERATION MANUAL
KMBE
Ethernet Bridge/Router Module
Kilomux-2100/2104
KMBE
Ethernet Bridge/Router Module
Kilomux-2100/2104
International Headquarters
RAD Data Communications Ltd.
Limited Warranty
RAD warrants to DISTRIBUTOR that the hardware in the KMBE to be delivered hereunder shall be
free of defects in material and workmanship under normal use and service for a period of twelve
(12) months following the date of shipment to DISTRIBUTOR.
If, during the warranty period, any component part of the equipment becomes defective by
reason of material or workmanship, and DISTRIBUTOR immediately notifies RAD of such defect,
RAD shall have the option to choose the appropriate corrective action: a) supply a replacement
part, or b) request return of equipment to its plant for repair, or c) perform necessary repair at
the equipment's location. In the event that RAD requests the return of equipment, each party
shall pay one-way shipping costs.
RAD shall be released from all obligations under its warranty in the event that the equipment has
been subjected to misuse, neglect, accident or improper installation, or if repairs or
modifications were made by persons other than RAD's own authorized service personnel, unless
such repairs by others were made with the written consent of RAD.
The above warranty is in lieu of all other warranties, expressed or implied. There are no
warranties which extend beyond the face hereof, including, but not limited to, warranties of
merchantability and fitness for a particular purpose, and in no event shall RAD be liable for
consequential damages.
RAD shall not be liable to any person for any special or indirect damages, including, but not
limited to, lost profits from any cause whatsoever arising from or in any way connected with the
manufacture, sale, handling, repair, maintenance or use of the KMBE, and in no event shall RAD's
liability exceed the purchase price of the KMBE.
DISTRIBUTOR shall be responsible to its customers for any and all warranties which it makes
relating to KMBE and for ensuring that replacements and other adjustments required in
connection with the said warranties are satisfactory.
Software components in the KMBE are provided "as is" and without warranty of any kind. RAD
disclaims all warranties including the implied warranties of merchantability and fitness for a
particular purpose. RAD shall not be liable for any loss of use, interruption of business or
indirect, special, incidental or consequential damages of any kind. In spite of the above RAD
shall do its best to provide error-free software products and shall offer free Software updates
during the warranty period under this Agreement.
RAD's cumulative liability to you or any other party for any loss or damages resulting from any
claims, demands, or actions arising out of or relating to this Agreement and the KMBE shall not
exceed the sum paid to RAD for the purchase of the KMBE. In no event shall RAD be liable for
any indirect, incidental, consequential, special, or exemplary damages or lost profits, even if RAD
has been advised of the possibility of such damages.
This Agreement shall be construed and governed in accordance with the laws of the State of
Israel.
Product Disposal
To facilitate the reuse, recycling and other forms of recovery of waste
equipment in protecting the environment, the owner of this RAD product is
required to refrain from disposing of this product as unsorted municipal
waste at the end of its life cycle. Upon termination of the units use,
customers should provide for its collection for reuse, recycling or other form
of environmentally conscientious disposal.
Safety Symbols
This symbol may appear on the equipment or in the text. It indicates potential
safety hazards regarding product operation or maintenance to operator or service
personnel.
Warning
Danger of electric shock! Avoid any contact with the marked surface while the
product is energized or connected to outdoor telecommunication lines.
Protective ground: the marked lug or terminal should be connected to the building
protective ground bus.
Warning
Some products may be equipped with a laser diode. In such cases, a label with the
laser class and other warnings as applicable will be attached near the optical
transmitter. The laser warning symbol may be also attached.
Please observe the following precautions:
Before turning on the equipment, make sure that the fiber optic cable is intact
and is connected to the transmitter.
The use of optical devices with the equipment will increase eye hazard.
Connecting AC Mains
Make sure that the electrical installation complies with local codes.
Always connect the AC plug to a wall socket with a protective ground.
The maximum permissible current capability of the branch distribution circuit that supplies power
to the product is 16A (20A for USA and Canada). The circuit breaker in the building installation
should have high breaking capacity and must operate at short-circuit current exceeding 35A (40A
for USA and Canada).
Always connect the power cord first to the equipment and then to the wall socket. If a power
switch is provided in the equipment, set it to the OFF position. If the power cord cannot be
readily disconnected in case of emergency, make sure that a readily accessible circuit breaker or
emergency switch is installed in the building installation.
In cases when the power distribution system is IT type, the switch must disconnect both poles
simultaneously.
Connecting DC Power
Unless otherwise specified in the manual, the DC input to the equipment is floating in reference
to the ground. Any single pole can be externally grounded.
Due to the high current capability of DC power systems, care should be taken when connecting
the DC supply to avoid short-circuits and fire hazards.
Make sure that the DC power supply is electrically isolated from any AC source and that the
installation complies with the local codes.
The maximum permissible current capability of the branch distribution circuit that supplies power
to the product is 16A (20A for USA and Canada). The circuit breaker in the building installation
should have high breaking capacity and must operate at short-circuit current exceeding 35A (40A
for USA and Canada).
Before connecting the DC supply wires, ensure that power is removed from the DC circuit. Locate
the circuit breaker of the panel board that services the equipment and switch it to the OFF
position. When connecting the DC supply wires, first connect the ground wire to the
corresponding terminal, then the positive pole and last the negative pole. Switch the circuit
breaker back to the ON position.
A readily accessible disconnect device that is suitably rated and approved should be incorporated
in the building installation.
If the DC power supply is floating, the switch must disconnect both poles simultaneously.
Ports
Safety Status
SELV
Always connect a given port to a port of the same safety status. If in doubt, seek the assistance
of a qualified safety engineer.
Always make sure that the equipment is grounded before connecting telecommunication cables.
Do not disconnect the ground connection before disconnecting all telecommunications cables.
Some SELV and non-SELV circuits use the same connectors. Use caution when connecting cables.
Extra caution should be exercised during thunderstorms.
When using shielded or coaxial cables, verify that there is a good ground connection at both
ends. The grounding and bonding of the ground connections should comply with the local codes.
The telecommunication wiring in the building may be damaged or present a fire hazard in case of
contact between exposed external wires and the AC power lines. In order to reduce the risk,
there are restrictions on the diameter of wires in the telecom cables, between the equipment
and the mating connectors.
Caution
To reduce the risk of fire, use only No. 26 AWG or larger telecommunication line
cords.
Attention
Some ports are suitable for connection to intra-building or non-exposed wiring or cabling only. In
such cases, a notice will be given in the installation instructions.
Do not attempt to tamper with any carrier-provided equipment or connection hardware.
Avertissement
Achtung
This is a class A product. In a domestic environment, this product may cause radio
interference, in which case the user will be required to take adequate measures.
Cet appareil est un appareil de Classe A. Dans un environnement rsidentiel, cet
appareil peut provoquer des brouillages radiolectriques. Dans ces cas, il peut tre
demand lutilisateur de prendre les mesures appropries.
Das vorliegende Gert fllt unter die Funkstrgrenzwertklasse A. In Wohngebieten
knnen beim Betrieb dieses Gertes Rundfunkstrrungen auftreten, fr deren
Behebung der Benutzer verantwortlich ist.
Franais
Symboles de scurit
Ce symbole peut apparaitre sur l'quipement ou dans le texte. Il indique des risques
potentiels de scurit pour l'oprateur ou le personnel de service, quant
l'opration du produit ou sa maintenance.
Avertissement
Danger de choc lectrique ! Evitez tout contact avec la surface marque tant que le
produit est sous tension ou connect des lignes externes de tlcommunications.
Les utilisateurs pourront, dans certains cas, insrer leurs propres metteurs-rcepteurs Laser SFP
dans le produit. Les utilisateurs sont avertis que RAD ne pourra pas tre tenue responsable de
tout dommage pouvant rsulter de l'utilisation d'metteurs-rcepteurs non conformes. Plus
particulirement, les utilisateurs sont avertis de n'utiliser que des produits approuvs par
l'agence et conformes la rglementation locale de scurit laser pour les produits laser de
classe 1.
Respectez toujours les prcautions standards de scurit durant l'installation, l'opration et la
maintenance de ce produit. Seul le personnel de service qualifi et autoris devrait effectuer
l'ajustage, la maintenance ou les rparations de ce produit. Aucune opration d'installation,
d'ajustage, de maintenance ou de rparation ne devrait tre effectue par l'oprateur ou
l'utilisateur.
Franais
Certains produits peuvent tre quips d'une diode laser. Dans de tels cas, une
tiquette indiquant la classe laser ainsi que d'autres avertissements, le cas chant,
sera jointe prs du transmetteur optique. Le symbole d'avertissement laser peut
aussi tre joint.
Avertissement
Veuillez observer les prcautions suivantes :
Franais
Connexion d'alimentation CC
Sauf s'il en est autrement spcifi dans le manuel, l'entre CC de l'quipement est flottante par
rapport la mise la terre. Tout ple doit tre mis la terre en externe.
A cause de la capacit de courant des systmes alimentation CC, des prcautions devraient
tre prises lors de la connexion de l'alimentation CC pour viter des courts-circuits et des risques
d'incendie.
Assurez-vous que l'alimentation CC est isole de toute source de courant CA (secteur) et que
l'installation est conforme la rglementation locale.
La capacit maximale permissible en courant du circuit de distribution de la connexion alimentant
le produit est de 16A (20A aux Etats-Unis et Canada). Le coupe-circuit dans l'installation du
btiment devrait avoir une capacit leve de rupture et devrait fonctionner sur courant de
court-circuit dpassant 35A (40A aux Etats-Unis et Canada).
Avant la connexion des cbles d'alimentation en courant CC, assurez-vous que le circuit CC n'est
pas sous tension. Localisez le coupe-circuit dans le tableau desservant l'quipement et fixez-le
en position OFF. Lors de la connexion de cbles d'alimentation CC, connectez d'abord le
conducteur de mise la terre la borne correspondante, puis le ple positif et en dernier, le
ple ngatif. Remettez le coupe-circuit en position ON.
Un disjoncteur facilement accessible, adapt et approuv devrait tre intgr l'installation du
btiment.
Le disjoncteur devrait dconnecter simultanment les deux ples si l'alimentation en courant CC
est flottante.
Glossary
10BaseT
Address
Agent
Analog
ARP (Address
Resolution Protocol)
Asynchronous
Transmission
Asynchronous transmission is the sending of data units characterby-character. The characters are preceded by start bits and
followed by stop bits.
AWG
Balanced
Bandwidth
Baud
Bit
Bridge
Bridging
Broadcast
Buffer
Bus
Byte
Carrier
Channel
CHAP
Clock
Compression
Congestion
Congestion Control
Data
Default Gateway
Diagnostics
Digital
Dynamic Station
E3
Encapsulation
Ethernet
Firewall
Frame
Frame Relay
Gateway
Interface
IP Address
IP Mask
IP/IPX Routing
IPX (Internetwork
Packet Exchange)
ISDN (Integrated
Services Digital
Network)
Jitter
Laser
Latency
The time between initiating a request for data and the beginning
of the actual data transfer. Network latency is the delay
introduced when a packet is momentarily stored, analyzed and
then forwarded.
Leased Lines
Loading
Loopback
MAC is the lower sublayer of the data link layer. MAC is the
interface between a node's Logical Link Control and the network's
physical layer. The MAC differs for various physical media.
MAC Address
Manager
Mask
MTU (Maximum
Transmit Unit)
MultiCast
Multiplexer
Network
Network Layer
NetBEUI (NetBIOS
Extended User
Interface)
Parity
Node
Packet
Packet Switching
PAP
parameters
Parameters are often called arguments, and the two words are
used interchangeably. However, some computer languages such as
C define argument to mean actual parameter (i.e., the value), and
parameter to mean formal parameter. In RAD CLI, parameter
means formal parameter, not value.
Polling
See Multidrop.
Port
PPP is the protocol defined in RFC 1661, the Internet standard for
transmitting network layer datagrams (e.g. IP packets) over serial
point-to-point links.
PPP is designed to operate both over asynchronous connections
and bit-oriented synchronous systems, it can configure
connections to a remote network dynamically, and test that the
link is usable. PPP can be configured to encapsulate different
network layer protocols (such as IP, IPX, or AppleTalk) by using the
appropriate network.
prompt
Protocol
RIP (Routing
Information Protocol)
RIP-2
Router
Routing
SAP
Serial Transmission
Single Mode
SOCKS
Space
Spoofing
Static Station
Stop Bit
Synchronous
Transmission
Transmission in which data bits are sent at a fixed rate, with the
transmitter and receiver synchronized.
T1
TCP (Transmission
Control Protocol)
Telnet
Throughput
Traffic Management
Contents
Chapter 1. Introduction
1.1
1.2
1.3
1.4
1.5
1.6
Overview.................................................................................................................... 1-1
Versions ................................................................................................................. 1-1
Features .................................................................................................................... 1-1
Bridging .................................................................................................................. 1-2
IP Routing ............................................................................................................... 1-2
IPX Routing ............................................................................................................. 1-2
Address Translation (Single IP) and Firewall ............................................................. 1-2
Solid Firewall .......................................................................................................... 1-3
Applications ............................................................................................................... 1-3
Basic Bridging ......................................................................................................... 1-3
Routing Between Central and Remote Offices ......................................................... 1-3
Dual Link Applications ............................................................................................. 1-4
Physical Description ................................................................................................... 1-5
LEDs ....................................................................................................................... 1-5
Connectors ............................................................................................................. 1-5
Jumpers .................................................................................................................. 1-5
Functional Description................................................................................................ 1-6
Management .......................................................................................................... 1-6
Configuration Parameters ....................................................................................... 1-6
Technical Specifications.............................................................................................. 1-6
2.2
2.3
Chapter 3. Operation
3.1
3.2
3.3
KMBE
Table of Contents
Chapter 4. Configuration
4.1
4.2
4.3
ii
KMBE
Chapter 1
Introduction
1.1
Overview
KMBE is based on the MBE family of standalone bridges and IP/IPX routers for the
small office. KMBE is a Kilomux-2100/2104 I/O module that can be used for
various bridging and routing functions, connecting one or two Ethernet LANs via
the Kilomuxs main links. Quick setup and advanced configuration menus provide
on-screen instructions that guide you through the configuration procedures.
Versions
You can order KMBE with the following LAN interfaces:
AUI
Thin coax
UTP (10BaseT).
1.2
Features
Bridging
Supports IP fragmentation
KMBE
Supports Telnet allowing configuration and control of the device over WAN
and LAN
Kilomux-2100/2104
Features
1-1
Chapter 1 Introduction
Security
PAP/CHAP authentication
Other
Bridging
KMBE supports standard proprietary functionality. Because bridging is the KMBE
default, you can use KMBE as a bridge with little or no configuration.
IP Routing
KMBE is an IP router that supports:
CIDR topologies
IP fragmentation.
IPX Routing
In addition to IP routing, KMBE also supports IPX routing and includes support for
RIP and SAP.
1-2
Features
KMBE
Kilomux-2100/2104
Chapter 1 Introduction
Solid Firewall
The Solid Firewall feature prevents access from the Intranet into the Small Office
LAN. This feature makes the Small Office LAN invisible to outside users. The Solid
Firewall feature is a simple and foolproof way of protecting security sensitive
Small Offices (e.g. doctors and lawyers) from Intranet hackers.
1.3
Applications
This section gives four examples of the applications KMBE can be used in.
Basic Bridging
Two KMBEs can be used opposite each other in a bridging application. The KMBE
connected to the larger network or to a network with connections to other
networks, is the Main KMBE. The KMBE connected to the smaller network is the
Remote KMBE, see Figure 1-1.
KMBE
Supply Internet access to all of the remote offices through only one Internet
connection.
Kilomux-2100/2104
Applications
1-3
Chapter 1 Introduction
1-4
Applications
KMBE
Kilomux-2100/2104
Chapter 1 Introduction
1.4
Physical Description
KMBE modules are designed for installation in any I/O slot of a Kilomux-2100 or
Kilomux-2104 chassis. Installation procedures for KMBE are provided in Chapter 2
of the Installation and Operation Manual.
LEDs
The LED indicators on the rear panel show the operating status of KMBE. Various
indicators display LAN activity, configuration mode, alert conditions, and
readiness of the system. For a description of the rear panel, see Rear Panel
section in Chapter 2.
Connectors
The LAN connector, located on the rear panel, is available in different interfaces
according to your needs.
Jumpers
You need to set the internal jumpers of KMBE according to the specific conditions
of use. For more information on setting the jumpers, see Internal Settings section
in Chapter 2.
KMBE
Kilomux-2100/2104
Physical Description
1-5
Chapter 1 Introduction
1.5
Functional Description
Management
An SNMP agent provides management by RADview or any other standard SNMP
management station. For more information, see SNMP Manager Table in Chapter 6.
Configuration Parameters
KMBE supports Telnet, allowing configuration and control of the device over WAN
and LAN. You can also perform fast configuration from a terminal emulator. For
more information, see Initial Setup in Chapter 3.
1.6
LAN Interface
Technical Specifications
Standard
Type
Control Port
General
Interface
RS-232/V.24
Connector
RJ-45
Data Rates
Data Format
8 bit, no parity
Bandwidth Allocated on
Kilomux Main Link
256 kb
Protocol
HDLC based
Panel Control
Reset
Diagnostics
1-6
Technical Specifications
KMBE
Kilomux-2100/2104
Indicators
Chapter 1 Introduction
Power
Consumption
KMBE
Kilomux-2100/2104
1.1W
Technical Specifications
1-7
Chapter 1 Introduction
1-8
Technical Specifications
KMBE
Kilomux-2100/2104
Chapter 2
Installation and Setup
This chapter provides information on the functions of the rear panel indicators
and connectors of the KMBE module, and instructions for performing the internal
settings, physical installation, and cable connections to this module.
Caution
2.1
Installation
Rear Panel
The rear panels of the three models of KMBE modules are shown in Figure 2-1.
The module rear panel includes several indicators, a RESET push-button and the
LAN connector. Their functions are explained in Table 2-1.
KMBE
MAIN
KMBE
REM
5
ERR
LINK A
LINK B
MAIN
3
2
RDY
LAN
ERR
TX
LAN
ERR
RDY
11
3
2
RX
TX
8
LAN
ERR
RDY
C
T
R
L
10
1
RESET
LAN
THIN
COAX
A
U
I
REM
5
ERR
LINK A
LINK B
7
RX
C
T
R
L
10
RESET
MAIN
LAN
RX
C
T
R
L
REM
ERR
LINK A
LINK B
LAN
TX
KMBE
9
10
RESET
UTP
12
11
11
KMBE
Kilomux-2100/2104
Installation
2-1
Indicator
Function
RESET push-button
Lights steadily when the link between the local and remote KMBE
modules is disconnected
Lights momentarily for each error detected in a packet received
from link A
Lights steadily when the link between the local and remote KMBE
modules is disconnected
Lights momentarily for each error detected in a packet received
from link B
10
CONTROL connector
11
LAN Connector
12
Lights when the KMBE UTP interface is connected to the local LAN
Internal Settings
All KMBE modules have one user-selectable jumper, designated WTCH-DOG. The
KMBE modules include additional jumpers, which are factory-set and should not
be moved. The WTCH-DOG jumper allows maintenance personnel to disable the
KMBE watchdog circuit during maintenance.
Figure 2-2 shows the location of the jumper. The jumper has two positions:
ON - The watchdog circuit is enabled. This is the setting required for normal
operation
2-2
Installation
KMBE
Kilomux-2100/2104
JP6
OFF
WTCH-DOG
ON
WTCH- DOG
JUMPER-JP6
OFF
ON
WATCHDOG
DISABLED
WATCHDOG
ENABLED
STN-HUB SWITCH
(UTP INTERFACE ONLY)
STN
STN
HUB
HUB
FUSE F3
FUSE F2
Receive
Transmit
STN (Station)
Pins 1, 2
Pins 3, 6
HUB
Pins 3, 6
Pins 1, 2
The correct position of the switch depends on the wiring used in your particular
network. In general:
Set the switch to STN if the KMBE module connects directly to the LAN (this
interchanges the connections of the receive and transmit pairs).
Set the switch to HUB if the KMBE module connects to an Ethernet hub.
Module Installation
The KMBE module can be inserted into, or removed from, an operating chassis
(hot-swappable).
Refer to the system installation plan and insert the module in the assigned I/O
slot of the Kilomux chassis.
The module is ready to start operating as soon as it is plugged into an operating
Kilomux chassis. For module configuration instructions, see Chapter 3.
KMBE
Kilomux-2100/2104
Installation
2-3
Cable Connections
Identify the cable intended for connection to the LAN connector of this module,
and connect the cable to the module connector on the rear panel.
Note
For the KMBE module with UTP interface, verify that the LAN receive and transmit
pairs are properly connected in accordance with the wiring conventions used in
your system.
Control Connector
The CONTROL connector is an RJ-45 connector wired as follows:
Note
Designation
Direction
Function
1, 2
Internal Test
Reserved
Not Connected
SG
Signal Ground
TXD
OUT
Transmit Data
RXD
IN
Receive Data
Not Connected
Not Connected
2.2
Operating Indications
Normal Indications
After the power-up self-test, either the MAIN or the REM indicator must light,
indicating the selected mode. The LAN RX and LAN TX indicators must light (or
flash), and the ERR LAN and ERR LINK indicators must be off.
The READY indicator will turn on when the LAN and WAN interfaces are ready.
Note
2-4
Operating Indications
KMBE
Kilomux-2100/2104
2.3
Initial Setup
KMBE features a setup program that is invoked and run from an ASCII terminal or
a PC terminal emulator. The terminal/terminal-emulator is connected to the
CONTROL port on the KMBE rear panel.
This section describes how to connect to the terminal and to access the Main
menu setup program.
Setting a Password
For first time operation, or if no configuration password has been specified, the
following message appears:
WARNING: No configuration password exists.
Define configuration password? (Y/N):
To set a password:
1. Type Y to set a configuration password.
KMBE
Kilomux-2100/2104
Initial Setup
2-5
Note
All KMBE password verification routines are CASE SENSITIVE. Once a password has
been set, always use the same case when typing the password.
Note
2-6
Initial Setup
KMBE
Kilomux-2100/2104
Chapter 3
Operation
This chapter gives an introduction on how to operate and initially configure
KMBE. Topics covered in this chapter include:
3.1
You can configure KMBE via the Kilomux supervision port using an ASCII Terminal
or any supported remote management. You can also configure Channel
parameters (Link Speed and Location) from the LCD on the Kilomux front panel.
For information about these configuration methods, refer to the
Kilomux-2100/2104 System Installation and Operation Manual. Table 3-1 explains
the KMBE composite channel configuration parameters.
KMBE
Kilomux-2100/2104
3-1
Chapter 3 Operation
Function
Values
LOCATION
Default: MAIN
LINK_SPEED
Default: NC
All fields
ML-A
BOTH
ML-B
3-2
KMBE
Kilomux-2100/2104
Chapter 3 Operation
Table 3-2. KMBE Link Bandwidth Compatibility with the Kilomux Main Link Rate
Main Link Rate
384
512
768
1024
1536
9.6
19.2
28.8
38.4
48.0
57.6
67.2
76.8
86.4
96
105.6
115.2
124.8
128
160
192
224
240
272
304
336
368
512
768
1024
1280
Link Bandwidth
KMBE
Kilomux-2100/2104
3-3
Chapter 3 Operation
3.2
3.3
This section provides a brief description of the available KMBE menus and
screens.
MAIN
3-4
MENU
1.
2.
3.
4.
5.
Quick setup
Security setup
Advanced setup
View
Diagnostic tools
0.
Exit
KMBE
Kilomux-2100/2104
Chapter 3 Operation
Quick Setup
The Quick Setup menu allows you to adjust setup and link configuration
parameters while KMBE is in operation. Line-by-line prompting simplifies the
setup. On-screen instructions and explanations guide you through the setup
procedure.
Security Setup
Use the options in the Security Setup menu to control KMBE management and
entry to your LAN by unauthorized users.
Advanced Menu
The Advanced menu lists KMBE configuration parameters and their current values.
You are able to change these parameters and to perform advanced configuration
operations, not available through the Quick Setup menu. Resetting the device and
software downloads are also performed via the Advanced menu.
View
Use the options in the View menu to view configuration screens and information
on interface connections, routing tables and statistics.
Diagnostic Tools
Use the Diagnostic Tools menu to verify WAN and LAN connectivity. The Ping
feature allows you to dial (Ping) another user on the LAN or WAN. If the remote
user replies, WAN connectivity is confirmed up to and including the IP level.
Exit
Select this option to return to the Operational Status Messages screen. From the
Operational Status Messages screen you can remove or change the password.
KMBE
Kilomux-2100/2104
3-5
Chapter 3 Operation
3-6
KMBE
Kilomux-2100/2104
Chapter 4
Configuration
4.1 Quick Setup Menu
The Quick Setup menu allows you to enter the minimum number of parameters
needed to operate your KMBE/N.
Principles of Operation
The Quick Setup screen guides you through the configuration, port by port. The
Quick Setup screen asks you for the appropriate parameters depending on the
type of port you are configuring and how you have already configured other
ports. The Quick Setup screen presents messages, and prompts you to accept or
modify the current parameters.
The parameter options are enclosed in brackets [ ]. To view the options, use
the space bar to toggle, then press ENTER
To enter new information, type in the new parameters and press ENTER.
After all parameters have been accepted or changed, you can view them on the
screen. A confirmation message appears requesting that you confirm all the
setup changes. The device resets after the changes are saved.
To configure the setup parameters:
1. From the Main menu, select option 1, Quick Setup.
2. Follow the on-screen instructions to accept or modify the setup parameters.
3. Press Y to save the setup parameters.
KMBE
Kilomux-2100/2104
4-1
Chapter 4 Configuration
Link Mode
Select this parameter to determine how data is transmitted across the link. When
the mode is synchronous, data bits are transmitted at a fixed rate. The sender
and the receiver are synchronized. The other mode is Frame Relay. Frame Relay is
a packet-switching protocol for connecting devices on a WAN.
Use the space bar to toggle between Synchronous, or Frame Relay modes.
Routing
Select this parameter to assign the link type. Use the space bar to toggle
between Bridge, IP, IPX or IP&IPX link types.
Selecting IPX link type disables the Single IP and WAN IP Address features, and
removes the corresponding parameters from the screen.
WAN IP Address
Select this parameter to enter the IP address for the WAN interface.
4-2
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Host IP Setup
LAN IP Address
Select this parameter to enter the IP address. Every device on a TCP/IP network
must have an address to identify it. The IP address is a value consisting of the
network address and the host address on that network. The value assigned to a
network depends on the number of computers on that network.
The IP address is a 32-bit number. The number is made up of 4 parts, with each
part consisting of 3 digits. One part of the address identifies the network and
another part of the address identifies the host. Which numbers in the address
identifies the host is dependent on the IP class.
There are 5 classes of IP addresses. Each class represents a network having a
certain number of computers. For example, a Class C address is given to a
network having between 1-255 computers. Table 4-1 gives the ranges for
different classes of IP addresses.
Range
0.0.0.0 to 127.255.255.255
128.0.0.0 to 191.255.255.255
192.0.0.0 to 223.255.255.255
224.0.0.0 to 239.255.255.255
240.0.0.0 to 247.255.255.255
The numbers in each part of the code are translated into binary. The binary code
identifies the network and the host.
IP addresses are assigned by the Internet Network Information Center (InterNIC).
InterNIC assigns the network ID. Host IDs are assigned by the network
administrator.
LAN IP Mask
Select this parameter to enter the IP mask. The mask is configured automatically
from the IP address class, as shown in Figure 4-1. If you want to change the
default mask, enter a new mask. For example, the IP mask is usually
225.225.225.0. A mask of this sort would allow 254 hosts on the LAN. If you
want to create a subnet which allows 6 users, including KMBE/N, configure the
mask as 22.225.225.248. on KMBE/N and each host that is included on the
subnet.
KMBE
Kilomux-2100/2104
4-3
Chapter 4 Configuration
Digital
Network
KILOMUX
KMBE/N
192.168.1.2
255.255.255.248
192.168.1.1
IP address
Mask
Default Gateway
.3
.248
192.168.1.1
.4
.248
192.168.1.1
.5
.248
192.168.1.1
.6
.248
192.168.1.1
Security Setup
Device Access Name
Select this parameter to display the name assigned to KMBE/N for identification
by the Internet Provider. To change the device access name, type in the new
name and press ENTER.
Type the new password and press ENTER. Retype the same password for
verification and press ENTER.
4.2
Security Setup
This chapter describes the Setup menu. Topics covered in this chapter include:
4-4
Security Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Quick Setup
2 Security Setup
3 Advanced Menu
View
5 Diagnostic Tools
3
FIREWALL
Options
SNMP Access
TELNET Access
TELNET access
SNMP access
FIREWALL options
Disabled
Disabled
Disabled
KMBE
Kilomux-2100/2104
Security Setup
4-5
Chapter 4 Configuration
4-6
Security Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
To enable a specific application to enter the Solid Firewall (both in regular router
and Single IP modes):
1. In the Firewall Forward Application List screen, press A to add an application.
KMBE
Kilomux-2100/2104
Security Setup
4-7
Chapter 4 Configuration
ADVANCED SETUP
1. TELNET server
2. PING request
NO
NO
IP ADDRESS
192.168.1.1
192.168.1.1
Telnet server, Ping request, DNS server, E_Mail POP3, E-Mail SMTP,
FTP server, WWW server, TFTP server, SNMP, User defined
Application type: [E-MAIL POP3
]
[Default ] Advanced
Host IP address interval: [SINGLE ]
Host IP Address: 192.168.1.2
Guest IP address interval: [INTERVAL ]
Guest start IP Address: 192.168.1.3
Guest end IP Address: 192.168.1.2
Host port interval: [SINGLE ]
Host port: 110
Guest port interval: [ALL
]
Frame type: [TCP ]
2. To select an application, toggle the SPACE bar.
3. If a specific application has a specific IP destination on the LAN, select
DEFAULT and type the IP destination address.
4. The advanced option includes the following possibilities for forwarding an IP
session to the secured LAN:
5. Host IP address interval - range of destination addresses on the LAN (only
one address for Single IP)
6. Guest IP address interval - range of source addresses in the Intranet
7. Host port interval - range of UDP or TCP destination ports of the applications
8. Guest port - range of UDP or TCP source ports of the applications
9. Frame type - UDP, TCP or ICMP protocol.
10. Select Single, All or Interval and type the IP address for each option listed
above.
11. Press ESC.
12. Save the Firewall setup.
In Single IP mode, for each application, only one destination address from the
secured LAN can be used. Incoming traffic from the WAN should be destined to
the single IP address. KMBE forwards the application to the destination address
on the LAN, as listed in the Firewall Forward Application List.
4-8
Security Setup
KMBE
Kilomux-2100/2104
4.3
Chapter 4 Configuration
Advanced Setup
The Advanced menu contains the majority of KMBE configuration parameters. You
can change these parameters and perform advanced configuration operations
that are not available through the Quick Setup menu. Resetting the device and
software downloads are also performed via the Advanced menu.
Advanced Menu
1
2
Setup
Device Control
1. Setup
2. Device control
ESC - Return to previous menu
Choose one of the above:
The options in the Advanced menu are described below.
Setup Menu
Advanced Menu
1
2
2
Host
Parameters
3
Routing/
Bridging
Setup
Device Control
4
Interface
Parameters
5
Access Control
(Security)
6
WAN Economy
Factory Default
Options
KMBE
Kilomux-2100/2104
Advanced Setup
4-9
Chapter 4 Configuration
Host parameters
Routing/Bridging
Interface parameters
Access control (Security)
WAN economy
Factory default options
Host Parameters
Select this option to enter reference information about the device, the IP Host,
the SNMP agent and TFTP.
Advanced Menu
1
2
Setup
Device Control
1
Host Parameters
Device Control
1. Device Name
IP Host
SNMP Manager
Table
1. IP Address
1. Manager Table
2. Contact Person
2. IP Mask
3. System Location
5
TFTP
RADIUS
1. File Server IP
Address
2. File Name
3. Default Gateway
4. MAC Address
3. Retransmitting
Timeout
4. Total Timeout
4-10
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Device ID
IP host
SNMP manager table
TFTP
RADIUS
Device ID
Select this option to view and/or modify the following arbitrary parameters.
Device Name
Select this parameter to assign an arbitrary name to KMBE for identification by
the system manager.
Contact Person
Select this parameter to enter the name of the person to be contacted with
matters pertaining to the system.
System Location
Select this parameter to enter the physical location of the device.
MAC Address
Select this parameter to assign a MAC address locally. This allows you additional
control of the devices in the LAN. KMBE can be used with the default address
provided by the manufacturer or with a locally administered address. Locally
administered addresses are very useful for managing large networks.
IP Host
Select this option to configure the following IP parameters.
IP Address
Every device on a TCP/IP network must have an address to identify it. The IP
address is a value consisting of the network address and the host address on
that network. The value assigned to a network depends on the number of
computers on that network.
The IP address is a 32-bit number. The number is made up of 4 parts, with each
part consisting of 3 digits. One part of the address identifies the network and
KMBE
Kilomux-2100/2104
Advanced Setup
4-11
Chapter 4 Configuration
another part of the address identifies the host. Which numbers in the address
identifies the host is dependent on the class.
There are 5 classes of IP addresses. Each class represents a network having a
certain number of computers. For example, a Class C address is given to a
network having between 1-255 computers. Table 4-1 gives the ranges for
different classes of IP addresses.
Range
0.0.0.0 to 127.255.255.255
128.0.0.0 to 191.255.255.255
192.0.0.0 to 223.255.255.255
224.0.0.0 to 239.255.255.255
240.0.0.0 to 247.255.255.255
The numbers in each part of the code is translated into binary. The binary code
identifies the network and the host.
IP addresses are assigned by the Internet Network Information Center (InterNIC).
InterNIC assigns the network ID. Host IDs are assigned by the network
administrator.
IP Mask
A subnet is a portion of a network that shares a common address component. On
TCP/IP networks, subnets are defined as all devices whose IP addresses have the
same prefix. For example, all devices with IP addresses that start with
133.100.100. would be part of the same subnet. An IP mask allows filtering of IP
addresses on a subnet.
When an IP address is configured the IP mask is automatically configured
according to Table 4-2.
IP Address Range
Default IP mask
0.0.0.0-127.255.255.255
255.0.0.0
128.0.0.0-191.255.255.255
255.255.0.0
192.0.0.0-223.255.255.255
255.255.255.0
224.0.0.0-239.255.255.255
255.255.255.225
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
automatically sends the packets to the default gateway MAC address; in this case
KMBE. KMBE then passes the packets to the Central Access Router link. From
there they are routed onwards.
The default gateway can be an IP address or a WAN interface. If you choose to
use an IP address, enter the address of the router which will deliver the frames.
Specifying an IP address for the default gateway is done with shared media, such
as LAN interface.
If you choose to use a WAN interface, the connection to the router is point-topoint. Choose "by interface" and Interface 1 is automatically set.
Kilomux-2100/2104
Advanced Setup
4-13
Chapter 4 Configuration
Total Timeout
Select this parameter to enter the amount of time KMBE should wait for an
acknowledgment from the TFTP server.
Routing/Bridging Menu
Select this option to enter routing or bridging information for the device.
Advanced Menu
1
2
Routing
Setup
Device Control
1
Link Number
Interface
Routing/Bridging
Mode
1. Link Type
Static
Station &
Nets
Add
2. Link Protocol
4
IP Routing
Setting
5
RADIUS
1. New Stations
Aging Time
1. Interface Address
Clear
3. Link Cost/Metric
IPX
Routing
Settings
2. RIP Mode
Delete
4. PPP Settings
3. Maximum Transmit
Unit
4. DHCP Setting
5. PC Remote
Access
2. Protocol Field
Compression
1. Shared IP Net
3. IP Compression
(V Jacobson-RFC1144)
2. Remote Workstation
IP Address Allocation
4. Data Negotiation
Compression Mode
RFC 1974 compatible
5. Multilink
3. Remote Workstation
IP Address Pool
4. Primary Domain
Name Server
5. Secondary
Domain
Name Server
4-14
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
PPP
Setup Menu
1.
2.
3.
4.
5.
1.
2.
3.
4.
Link type
- IP & IPX ROUTER
Link protocol
- PPP
Link cost/metric - 1
PPP settings
KMBE/N
KMBE/N
Routing/Bridging Mode:
* Bridge
* IP
* IPX
* IP+IPX
KILOMUX
KILOMUX
KMBE
Kilomux-2100/2104
Advanced Setup
4-15
Chapter 4 Configuration
A link control procedure (LCP) to establish, configure, and test the datalink connection. Having a LCP allows each end to negotiate various
options
Each frame begins and ends with a flag byte whose value is 0x7e. The flag
byte is followed by an address byte whose value is 0xff. The address byte is
followed by a control byte whose value is 0x03.
The control byte is followed by the protocol field. The value of the protocol
field determines the type of information field. A value of 0x0021 means the
information filed is an IP datagram. A value of 0xc21 means that the
information field is link control data, and a value of 0x8021 means that the
information field is for network control data. The CRC field is a cyclic
redundancy check, used to detect errors in the frame.
PPP is often used across slow serial lines. It is therefore important to reduce
the number of bytes per frame to reduce the latency time. Using the LCP,
most implementations negotiate to omit the constant address and control
fields and to reduce the size of the protocol fields from 2 bytes to 1 byte. In
addition, when using the IP NCP, most implementations use Van Jacobson
header compression to reduce the size of the IP and TCP headers.
KMBE/N
KMBE/N
Protocol:
* PPP
* RFC-1490
* Native
KILOMUX
KILOMUX
Link Cost/Metric
Select this parameter to assign a cost to each WAN link for routing purposes.
Metrics are hop counts. Hop counts are the number of routers through which a
packet must go to get to its destination. Adjacent interfaces have a hop count of
1. If a packet must go through 2 routers to get to its destination the hop count is
2. The higher the hop count the longer the route.
A router will automatically send packets using the lowest possible metric. If a
router is not functioning, KMBE will send the packets through an interface with a
higher metric.
4-16
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
PPP Settings
This option is only available for PPP link protocol.
The PPP Setting screen has the following options:
Disabled
No History
LCB
Sequence
Extended.
Data compression
set at LCB
KMBE/N
KMBE/N
Auto
Negotiation
KILOMUX
Data compression
set at Extended
KILOMUX
Kilomux-2100/2104
Advanced Setup
4-17
Chapter 4 Configuration
In Figure 4-8, the KMBE data compression is set at LCB. In the remote
unit the data compression is set to Extended. Messages are sent between
the 2 units, until a common data compression mode is found.
1. IP
cost-1
2. IPX - 19490182
interface-3
cost-1
KILOMUX
KMBE/N
Router
IP address 192.168.1.2
Mask 255.255.255.240
IP NET 1
IP NET 2
4-18
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
IPX Net - IPX Net is used for IPX routing. Define the IPX Net and the interface
number in hexadecimal
MAC - MAC is used in the remote device for Bridging. MAC defines the MAC
address of the static station in the bridge station list.
IP Routing Settings
IP ROUTING SETTINGS (Device name KMBE)
1.
2.
3.
4.
Interface address
RIP mode
Maximum transmit unit
PC remote access
Interface Address
Not applicable.
RIP Mode
Select this parameter to set the type of RIP to be sent. Toggle between RIP1,
RIP2, RIP1+2 or No RIP for each interface. Since most Internet applications do not
use RIP, the default setting is No RIP.
RIP stands for Routing Information Protocol. Every router has a routing table
which directs packets. A router uses the routing table to send the packets
through a designated gateway (if the packet was sent to another network) or
sends the packets directly to a host. The routing table is built when the host is
booted up. RIP sends a request to all active interfaces, asking for the others'
routing table. Using the information received, the host builds its own routing
table in which the packet destinations are entered.
By sending requests for information, RIP both builds the table and updates the
entries. RIP updates the table using the responses received every 30 seconds.
If a router is not functioning, the packets must be redirected and sent to a
second router. The routing table contains the address of a backup router. RIP
informs all of the other routers in a network on how to circumvent the nonfunctioning router.
Maximum Transmit Unit
Select this parameter to set the maximum transmit unit (MTU) for
IP fragmentation. The MTU must be set for each interface.
Both Ethernet and 802.3 encapsulation have frame size limits. If a frame is larger
than the MTU, IP fragments the frame into smaller units.
KMBE
Kilomux-2100/2104
Advanced Setup
4-19
Chapter 4 Configuration
PC Remote Access
PC Remote Access (Device name KMBE)
1.
2.
3.
4.
5.
Select this parameter to enter the Shared IP net address. The Shared IP net
address is used by all remote workstations connecting to the remote access
server on the WAN links.
Remote Workstation IP Address Allocation
4-20
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
frame types
802.3
Ethernet II
802.2
SNAP
[Automatic]
000A8023
04FD9F16
000A8022
05FD9F16
D2FD9F16
Learn LAN IPX Nets for all Frame Types - By setting this parameter to
Automatic, KMBE learns IPX Nets from RIP/SAP frames sent by other IPX
routers on the same LAN. If there are no other IPX routers on KMBE LAN, this
parameter must be set to Manual, and you must configure the IPX Nets for
each frame type.
LAN IPX Net for Frame Type - Each of these parameters specifies the IPX Nets
associated with a particular frame type. Each frame type is supported by the
LAN. KMBE supplies default values for these frame types.
Dial-in IPX Net - This parameter specifies the IPX Net definition for a WAN
interface.
RIP/SAP Mode
RIP / SAP MODE SETUP (Device name KMBE)
1. Link 1 RIP/SAP mode: [Enabled]
2. LAN
RIP/SAP mode: [Enabled]
ESC - Return to previous menu
Choose one of the above:
Link 1 RIP/SAP Mode
Select this parameter to Enable/Disable the RIP/SAP mode. The default setting
enables sending RIP and SAP tables for all updates and interfaces (Link and LAN).
When disabled KMBE does not send RIP/SAP frames. KMBE receives and processes
RIP/SAP frames sent from other routers.
Station Aging
Station aging determines the amount of time a station is allowed to be inactive
before it is removed from the network. A station is inactive when no IP traffic is
forwarded or received to the KMBE LAN interface. For example, in Figure 4-10, IP
address 192.18.1.1 has an aging time of 120 seconds. If no frames are received
KMBE
Kilomux-2100/2104
Advanced Setup
4-21
Chapter 4 Configuration
from IP address 192.18.1.1 within 120 seconds, the station will be removed from
the KMBE IP net table.
Digital
Network
KILOMUX
KMBE/N
Station Aging
120 seconds
IP address 192.168.1.1
Interface Parameters
Select this option to set link, or Frame Relay parameters.
4-22
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Advanced Menu
1
3
Interface Parameters
Setup
Device Control
4
X.25 Module
Setting
Frame Relay
Settings
ISDN Protocol
Setting
Link Settings
1. ISDN Protocol
& SPIC
1. Status
2. Type
1. Asynchronous
3. Connection Type
2. Synchronous
4. Connection
Timeout (sec)
3. ISDN
1. Modem Name
2. Modem Initializing
String
5. Control
Signals Mode
4. X.25
5. Frame Relay
3. Autobauding to
Modem Speed
4. Reset Modem
Before Setup
5. Analyze Modem
Answer
7. Parity
8. Stop Bit
6. Modem Speaker
On
7. Modem Dialling
Number
8. Local Number
(for Dialback)
9. Modem Setting
9. Number of Rings
Before Answer
KMBE
Kilomux-2100/2104
Advanced Setup
4-23
Chapter 4 Configuration
Link settings
ISDN protocol settings
Frame relay DLCI settings
X.25 module setting
Link Settings
Status
Select this parameter to specify the status of a link: enabled or disabled. An
enabled link transmits frames. Normally you would want all links enabled. If a
router is not working, the link to that router should be disabled. All frames are
then rerouted.
Type
Select this parameter to specify the type of interface in use: Synchronous.
When the mode is synchronous, data bits are transmitted at a fixed rate. The
sender and the receiver are synchronized. The third mode is Frame Relay. Frame
Relay is a packet-switching protocol for connecting devices on a WAN.
Connection Type
Select this parameter to specify the type of connection:
Within the designated time, KMBE will send frames <N> times. For example, if the
time is configured to120 and the number is configured to 6, every 20 seconds a
frame is sent. If there is no response KMBE assumes that the remote unit has
failed.
4-24
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Frame Relay
Frame Relay is a form of WAN which is designed to maximize throughput and
minimize cost by simplifying network processing.
Frame Relay Features
T1.617/ANNEX D
Q.933/ANNEX A
LMI.
Supports self learning of the maintenance protocol and the DLCI which
enables connection to the Frame Relay network without configuring Frame
Relay parameters
Figure 4-12 shows a map of the options in the Advanced menu that are used to
configure KMBE for operation over a Frame Relay network.
KMBE
Kilomux-2100/2104
Advanced Setup
4-25
Chapter 4 Configuration
Advanced
menu
View
Setup
Device
control
Frame relay
DLCIs'
Interface
Parameters
Reset
options
Reset Link
Frame Relay
DLCI setting
Link
setting
DLCI
Self learn
DLCI/
Maintenance
Maintenance
Protocol
State
CLLM
Status
CIR
Polling
Interval
Excess
Full enquiry
Interval
Throughput
Error
Threshold
Monitored
Events
Select this parameter to specify whether KMBE will self learn the maintenance
protocol on the Frame Relay link and the DLCI status (UP or DOWN). When this
parameter is disabled (OFF), you need to configure the maintenance protocol and
the DLCI manually.
CLLM Status
Select this parameter to specify whether CLLM frames, used for congestion
indication, will be supported (ON) or not (OFF).
Maintenance Protocol
Select this parameter to specify the maintenance protocol of the Frame Relay
link: T1.617/ANNEX D, Q.933/ANNEX A, LMI or None. This parameter can only be
configured if Self learn DLCI /Maintenance parameter is disabled (OFF).
4-26
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Polling Interval
Select this parameter to specify the number of polling intervals after which a full
status request frame is transmitted.
Polling interval = 10
Full inquiry interval = 4
KMBE/N
Status Inquiry
10 seconds
Status Inquiry
10 seconds
Status Inquiry
10 seconds
Status Inquiry
10 seconds
Status Inquiry
10 seconds
Status Inquiry
Select this parameter to specify the number of monitored events (status inquiry
frames and full status inquiry frames) in a sliding monitored events window.
KMBE
Kilomux-2100/2104
Advanced Setup
4-27
Chapter 4 Configuration
4-28
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Excess
Select this parameter to specify the maximum amount of uncommitted data bits
that the network will attempt to deliver during the measurement interval. The
value of this parameter should be received from the Frame Relay provider.
Throughput
Select this parameter to specify this parameter to specify the average number of
data bits per second transferred by the network. When a measurement interval
of one second is assigned to the CIR, the throughput value should equal the CIR
value.
1
4
Access Control
(Security)
2
External Access
Security
1. Security
Authorization
Device Security
Identity
1. Name
2. Minimum Accepted
PPP Security
Security Host/
Guest
Setup
Device Control
Advanced PC to
LAN Bridge Link
Security
Login Script
Setup
1. Security Link
2. Password
3. Accessible
Stations/Nets
4. User Access
Profiles
1. Access Mode
1. Unlimited Access
2. Limited Access
3. Static Statiions/Net
Access
KMBE
Kilomux-2100/2104
Advanced Setup
4-29
Chapter 4 Configuration
User Access Profile - Allow/deny access according to the User Access Profile
(see below)
If you select RADIUS, configure the RADIUS Access parameters from the Host
Parameters menu.
Minimum Accepted PPP Security
Select this parameter to specify the minimum security to none, PAP or CHAP.
PPP supports 2 types of security systems:
Accessible Stations/Nets
Select this parameter to define parameters which limit public access to the
network. Access can be allowed for all stations/nets, only certain stations/nets,
4-30
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
or only stations/nets which are static. When the access mode is 'limited', use the
access list to define which stations/nets have access.
User Access Profiles
Select this parameter to view and modify user access profiles in the access
control users list. The list contains user names, security parameters and dialback
options.
Security Host/Guest
Select this parameter to define a link's security status. When a link is defined as a
Host, users are approved according to your profile list. When link is defined as a
Guest, the device sends its name and password to be approved by the host. The
Guest mode is the default.
KMBE
Kilomux-2100/2104
Advanced Setup
4-31
Chapter 4 Configuration
Advanced Menu
1
5
WAN Economy
1. Block and
Forwarding
2. Link to Link
Traffic
3. IP/IPX Broadcast
Control
Device Control
3
Connection
On Demand
Filters
Setup
1. Start Connection
2. Terminate
Connection
3. Minimum Time
Between Two
Connects
4. Quick Filters
4
IP/IPX Spoofing
Fast
Retransmission
Frame Limit
4. Minimum Time
Between Two
Disconnects
5. Connect
Manually
6. Disconnect
Manually
4-32
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Filters
Connection on demand
Spoofing
Fast retransmission frame limit: 2
Filtering
Filtering allows you to limit the amount of traffic which enters and exits the Small
Office LAN via KMBE. Filtering is used to:
Increase security
Quick Filters
Advanced Filters.
Quick Filters are used to regulate IP and IPX. A Quick Filter can neutralize
IP and/or IPX protocol by blocking all traffic of that protocol, as illustrated in
Figure 4-18.
Quick Filter
Quick Filter
KMBE/N
KMBE/N
Digital
Network
KILOMUX
KILOMUX
KMBE
Kilomux-2100/2104
Advanced Setup
4-33
Chapter 4 Configuration
From LAN to the Link. Using filters here will forward or block traffic from the
LAN outwards
From Link to the LAN. Using filters here will forward or block traffic from the
link inwards.
Advanced Filter
KMBE/N
KMBE/N
Digital
Network
KILOMUX
KILOMUX
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Example:
You want to allow only one particular user on the Small Office LAN to access the
Internet for FTP purposes. To insure that no one else is able to access the
Internet, create a blocking filter for all traffic going to the link. To do this, from
the Blocking and Forwarding menu enter "Block all traffic for Link1". In addition,
create a filter to test each packet for the IP host address of the specified user
and the FTP socket of the packet. Since forwarding takes precedence over
blocking, that user's frames are forwarded.
Definition of Filter Tests
You need to define the filter test that will be applied to every packet that is
transmitted. Use any combination of the following parameters to define the filter
test:
Protocol
Defining Filters
Filters can be defined through the control port, Telnet or SNMP. First decide on
the mode and conditions for a filter, then follow the instructions below to set
filter parameters.
KMBE
Kilomux-2100/2104
Advanced Setup
4-35
Chapter 4 Configuration
From the Filters menu, press 2 to toggle between Full Propagation and Block
Propagation. The default is Block Propagation.
The broadcast control filter manages special frames which are normally
propagated throughout the network. The frames managed are:
NETBIOS over IP - IP frames with TCP/UDP ports 137, 138, 139 propagation.
Link Traffic
Use this to configure whether traffic will be sent or blocked when KMBE is
configured as a bridge:
4-36
Advanced Setup
KMBE
Kilomux-2100/2104
QUICK
Chapter 4 Configuration
IP
IPX
SNA
NetBIOS
AppleTalk
DECnet
Others
NO
NO
NO
NO
NO
NO
NO
FILTERS
FILTERS
FILTERS
FILTERS
FILTERS
FILTERS
FILTERS
ENTER
T
N
SPACE
BACKSPACE
ESC
Enter data
Toggle (parameters inside [])
Next line (skip this one)
Move right
Move left
Return to previous menu
Filter Id - 1
KMBE
Kilomux-2100/2104
Advanced Setup
4-37
Chapter 4 Configuration
High level (IP only) - Used to include or exclude high level protocols
True-False Menus
Many of the Advanced Filter parameters can be configured so that:
For example, if you choose BroadCast-True, any frame which is BroadCast will
pass. If you choose BroadCast-False, any frame which is not BroadCast will pass.
Advanced Filter Parameters
Operation - The action which the filter applies to a frame that passes:
Forward
Block
Connect
Disconnect.
The operations are listed in their order of priority. For example if the connect and
disconnect commands are applied to a frame, the connect command takes
precedence.
Interface - The area where the filters will act. If you want to filter traffic
going to the LAN, choose LAN. If you want to filter traffic going to the link,
choose Link.
Source Address - Toggle to the desired address type (MAC or NET). The
address format (hexadecimal or binary) appears. Type in the complete source
address.
4-38
Destination Address - Toggle to the desired address type (MAC, NET, All,
BroadCast, MultiCast). The address format (hexadecimal or binary) appears.
Type in the complete destination address. Choose True or False.
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Yes
No.
When Yes is chosen, a list of High Level protocols appear. The High Level
protocols include:
FTP
WWW
Telnet
TFTP
SNMP
DNS
RIP.
Select the protocols you want to filter. Choose True or False.
Low Level (IP protocol) - Toggle to the required low level protocol for the
filter. If the port number is defined in decimal format, specify the low level
protocol as UTP or TCP. If no port number is defined, specify the low level
protocol as UTP, TCP, or ICMP. Choose True or False.
Low Level (IPX protocol) - Toggle to the required low level protocol for the
filter. If a socket is defined in the destination address, a low level protocol or
socket number may not be specified. Conversely, if a socket address or low
level is not defined, a socket number may be specified.
Mask - A mask is a test pattern that is used to allow certain frame patterns
only. You define a code against which the frame is compared.
To create a mask, toggle to Yes. Three pairs of codes and offsets must be
created. The offset defines the point in the frame at which the comparison is
made. For example, an offset of 8 means that the 8th byte is compared to the
code. The offset can be from the 7th byte onwards.
The frame is made of 3 different portions:
KMBE
Kilomux-2100/2104
Advanced Setup
4-39
Chapter 4 Configuration
4-40
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
1
2
2
Software
Download
Upload Device
Parameters to
TFTP Server
Download Device
Parameters from
TFTP Server
Setup
Device Control
1. Download
from TFTP
Server
5
Reset Options
6
Control Other
Device
1. Reset Device
2. XMODEM via
Control Port (BOOT
Manager)
2. Reset Link
3. Reset Interface
Module
3. Download Software
to ISDN Module
Terminal Type
1. VT-100, UT-200,
VT-220 ANSI
Terminals
2. VT-52, IBM 3101
Terminals
3. Other Terminals
KMBE
Kilomux-2100/2104
Advanced Setup
4-41
Chapter 4 Configuration
1.
2.
3.
4.
5.
6.
Software download
Upload device parameters to TFTP server
Download device parameters from TFTP server
Reset options
Control other device (bridge link only)
Terminal type
Software Download
SOFTWARE PARAMETERS IN THE DOWNLOAD (Device name KMBE)
1. The parameters in the download from TFTP Server
2. The parameters in the MODEM via control port (BOOT Manager)
3. The parameters in the download software to ISDN module
ESC - Return to previous menu
Choose one of the above:
Select this option to download a new software version.
KMBE includes a Dual Image Flash, capable of storing two different versions of
software in two different partitions. Upon reset or boot KMBE automatically runs
the program stored in the active partition.
New software versions are loaded into the backup partition. If loading succeeds,
the backup partition becomes active and reset is automatically performed,
running the new software version. If loading fails, however, the device will be still
capable of working, since the Flash partition storing the old version is still active.
Figure 4-21 illustrates this process.
4-42
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Step
1
Original
S/W Version
Copy 1
Active Partition
Step
2
Original
S/W Version
Copy 2
Original
S/W Version
Backup Partition
New
S/W Version
Step
3
Original
S/W Version
Backup Partition
New
S/W Version
Active Partition
KMBE
Kilomux-2100/2104
Advanced Setup
4-43
Chapter 4 Configuration
4. In the New Software File Name field, type the path and file name of the new
software version.
The IP address and the new software version file name can also be defined
through the Setup menu.
5. Press S to start the download process.
During the process, the new program code is downloaded to the Flash backup
partition, thus erasing its previous contents.
Upon completion, the newly downloaded Flash partition becomes active,
while the old versions partition becomes backup. The device automatically
resets, running the new program stored in the active partition.
During the download process, a counter shows the number of packets that have
passed. Downloading can be interrupted at any time by pressing the ESC key.
4-44
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 4 Configuration
Upon completion of the download process, the unit performs reset. The new
parameters only come into effect after resetting.
Reset Options
Select this option to reset the device, link or interface module. The interface
module reset relates to ISDN options only.
Terminal Type
Select this option to choose a terminal type. Since each terminal type uses
different ASCII control codes for cursor control, KMBE requires this information to
display the screens clearly.
KMBE
Kilomux-2100/2104
Advanced Setup
4-45
Chapter 4 Configuration
4-46
Advanced Setup
KMBE
Kilomux-2100/2104
Chapter 5
Troubleshooting and
Diagnostics
5.1
Error Messages
Table 5-1 lists different symptoms and their causes, and what corrective actions
to take. If a persistent fault condition occurs, confirm that the KMBE is configured
properly. Link errors are sometimes caused by loose contact between connectors
or lack of cable continuity. Check that all connectors are plugged in properly and
that the quality of the cable is good.
Possible Cause
In synchronous operation:
Corrupted frames are being
received, or the physical
connection is unstable.
Red LAN ERROR indicator is There is a temporary transmission Check cable connections and ensure that
blinking
problem.
the proper cable type is being used.
Red LAN ERROR indicator is There is a problem with the LAN
ON
connection.
KMBE
Kilomux-2100/2104
5-1
5.2
Technical Support
Technical support for MiniCVS can be obtained from the local distributor from
whom it was purchased.
For further information, please contact the RAD distributor nearest you or one of
RAD's offices worldwide.
This information can be found at RAD's Web site: http://www.rad.com/ (for
offices location, click About RAD > Worldwide Offices; for distributors location,
click Where to Buy > End Users).
5-2
KMBE
Kilomux-2100/2104
Appendix A
Boot Manager
This appendix describes the various options of the BOOT Manager.
A.1
Preface
KMBE includes a Dual Image Flash, capable of storing two different versions of
software in two different partitions.
Upon reset, KMBE automatically runs the program stored in the active partition.
New software versions are loaded into the backup partition. If loading succeeds,
the backup partition becomes the active partition and KMBE is reset
automatically, running the new software version. If loading fails, the device is still
capable of working, since the Flash partition storing the old version remains
active.
Dual Image Flash can be controlled by the BOOT Manager. Use the BOOT Manager
to:
A.2
KMBE
A-1
Software download
Upload device parameters to TFTP server
Download device parameters from TFTP server
Reset options
Terminal type
Rescue
If KMBE does not respond properly, try the Rescue option:
1. Connect to the terminal emulator.
2. Switch on KMBE and immediately press R. The BOOT Manager menu appears.
A.3
7.0A5 test1
Testing ISDN download in RAS (LK)
0) Exit
Choose one of the above:
The options in the BOOT Manager menu are described below.
A-2
KMBE
Step 1
Step 2
Original
S/W Version
Copy 1
Original
S/W Version
Copy 2
Original
S/W Version
New
S/W Version
Primary Partition
Secondary Partition
Primary Partition
Secondary Partition
Step 3
Original
S/W Version
New
S/W Version
Secondary Partition
Primary Partition
Partitions Status
Select this option to display information about the status of the active (first) and
the backup (second) Flash partitions. Note that the BOOT Manager menu also
displays a partial status at its upper part:
First : 1997 Apr 30 12:32 MBEBOOT.X 7.0A5 test1
Second: 1997 May 01 14:46 RE70A6.X Testing ISDN download in
RAS (LK)
KMBE
A-3
Erase Configuration
Select this option to erase the device configuration parameters which are also
stored in the Flash memory. Sometimes it is needed after downloading a new
version, if its parameter set is not fully compatible with the previous version
parameters. You may also use this command to set the device to the default
settings. The Erase Configuration command is also useful if you forget the
password.
KMBE/N
Select this option to set the devices baud rate to 9600, 19200, 38400, 57600 or
115200 bps. For software code download, it is recommended to use the highest
rate possible, i.e. 115200 bps (the baud rate must be higher than 9600 bps to
enable downloading). Figure A-2 illustrates this process.
A-4
KMBE
Note
Exit
Select this option to exit from the BOOT Manager menu and perform BOOT/RESET
KMBE.
If the BOOT Manager is idle for more the two minutes, exit will be performed
automatically.
KMBE
A-5
A-6
KMBE
Manual Name:
KM-2100/2104 KMBE
Publication Number:
425-217-12/08
Excellent
Installation instructions
Operating instructions
Manual organization
Illustrations
The manual as a whole
Good
Fair
Poor
Very Poor
Error Report
Type of error(s) or
problem(s):
Please list the exact page numbers with the error(s), detail the errors you found (information missing,
unclear or inadequately explained, etc.) and attach the page to your fax, if necessary.
You are:
Distributor
End user
VAR
Other
International Headquarters
24 Raoul Wallenberg Street
Tel Aviv 69719, Israel
Tel. 972-3-6458181
Fax 972-3-6498250, 6474436
E-mail market@rad.com
www.rad.com