Benutzeranleitung / Produktwartung 2800 des Produzenten Patton electronic
Zur Seite of 135
OnSite 2800 Series Managed VPN Router User Manual Sales Office: +1 (301) 97 5-1000 Techni cal Su ppor t: +1 (301) 97 5-1007 E-mail: suppor t@patton.com WWW: www .patton.com Part Number: 07M2800-GS, Rev . F Revised : February 22, 2012 Impor tant This is a Class A de vice and is intended for use in a light ind ustrial environment.
Patton Electronics Company , Inc. 7622 Ric kenbacker Drive Gaithersburg , MD 20879 USA Tel: +1 (301 ) 975- 1000 Fax: +1 ( 301) 8 69-929 3 Support: +1 (30 1) 975 -1007 URL: www.patton.com E-Mai l: suppo rt@patton.com T rademark Statement The term OnSite is a trad emark of Patto n Electro nics Com pany.
3 Summar y T able of Contents 1 General information ..... ...... ..... ...... ...... ......... ...... ..... ...... ......... ...... ...... ..... ...... ......... ...... ..... ...... ......... ...... ...... . 17 2 Hardware installa tion ... ...... ....
4 T able of Contents Summary Table of Contents ...... ...... ...... ...... ........ ...... ...... ...... ...... ........ ...... ...... ...... ......... ..... ...... ...... ...... ......... 3 Table of Contents .. ...... ......... ..... ...... ...... ..
5 OnSite 2800 Series User Manual Table of Con tents Installin g the T1/E1 twisted pai r cables ........ ........... ............ ........... ................. ........... ........... ............ . 34 Insta lling t he E1 du al coax ial cabl es .......
6 OnSite 2800 Series User Manual Table of Con tents Configuring Chan nel-Grou p Timeslots ... ................. ........... ............ ........... ................. ........... ........... ............ . 63 Confi guring Channe l-Gro up Enca psulati on .
7 OnSite 2800 Series User Manual Table of Con tents Addin g an IC MP fil ter rule to the current acces s contro l list profile ...... ................. ........... ............ ........... .......85 Addin g a TCP , UDP or SCTP fi lter rule to th e curre nt ac cess con trol l ist pro file .
8 OnSite 2800 Series User Manual Table of Con tents Status LEDs ............. ........... ........... ........... ................. ............ ........... ........... ............ ................ .. .......... ........... .....113 10 Contacting Patton for assista nce .
9 OnSite 2800 Series User Manual Table of Con tents Ethernet 10Base-T an d 100 Base-T ........... ............ ........... ................. ........... ............ ........... ........... ................. .....126 D Port pin-outs ...... ...... ....
10 List of Fi gures 1 OnSite Managed VPN Router (2 805 shown) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 2 OnSite 2800 Seri es X.21, an d V.35 connectors . . . . . . . . . . . . . . . . . . .
11 List of T ables 1 General conven tions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 2 Rear panel ports . . . . . . . . . . . . . . . . . . . . . . . . .
12 About this guide This guid e desc ribes OnS ite VPN r outer hardwar e, instal lation, and config uration. Audien ce This guid e is intended f or the followi ng user s: • Opera tors • Installers.
13 OnSite 2800 Series User Manual About this guide Precau tions Notes, ca utions, and warnings, which have t he foll owing meani ngs, are us ed thro ughout th is guide to help yo u become aware of potential problems. Warnin gs are intended to prev ent safety hazards that co uld result in per- sona l inju ry.
14 OnSite 2800 Series User Manual About this guide Safety when working wi th electricity The OnSite co ntains no user se rviceab le parts. The equ ipment shall be returned to P atton Electronics for repairs, or re paired by qualified se rvice per- sonne l.
15 OnSite 2800 Series User Manual About this guide General observat ions • Clean the cas e with a soft slightly moist ant i-static cloth • Place the unit on a flat surfac e and ensure free air cir.
16 OnSite 2800 Series User Manual About this guide T ypographic al conventions used in this document This section de scribes th e typographical con ventions and terms use d in this guide. Gener al conven tions The procedures d escribed in this manual use the following text conventions: Table 1 .
17 Chapter 1 General i nformation Chapter cont ents OnSite Model 28 00 Ser ies overvi ew ....... ................. ............ ........... ........... ............ ................ ............ ........... .......18 OnSite 2800 Seri es detailed descrip tion .
OnSite Model 2800 Series overview 18 OnSite 2800 Series User Manual 1 • Gen eral info rmation OnSite Model 2800 Series o vervi ew The OnSit e Model 2800 Seri es Managed VPN Ro uter (se e figur e 1 ).
OnSite Model 2800 Series overview 19 OnSite 2800 Series User Manual 1 • Gen eral info rmation • VPN tunneling for secure traversal of unsecured IP networks • IPSec payload encryption with authen.
OnSite Model 2800 Series overview 20 OnSite 2800 Series User Manual 1 • Gen eral info rmation Figure 3. OnSite 280 0 Series 10Base-T Etherne t port connectors Eth erne t WA N mo del s.
OnSite Model 2800 Series overview 21 OnSite 2800 Series User Manual 1 • Gen eral info rmation Figure 4. OnSite 28 00 Series power input connector s Model code extensions A model-code extens ion indicates the type o f power supply the Router mo del provides.
OnSite Model 2800 Series overview 22 OnSite 2800 Series User Manual 1 • Gen eral info rmation Ports desc riptions The OnSit e 2800 Se ries r ear-panel por ts are d escrib ed in table 2 .
Applications overview 23 OnSite 2800 Series User Manual 1 • Gen eral info rmation Note For LED d escription s, refer to c hapter 9, “LEDs status and monitor- ing” on page 11 2. Applications overview Patton’s OnSite managed VPN routers deliver the features you need for se cure, optimized c ommunication over non-secured IP networks.
Applications overview 24 OnSite 2800 Series User Manual 1 • Gen eral info rmation X.21 ser ial interfac es, or an Ethe rnet WAN in terface. For r emote site s where PPP service is av ailable, the 2800 Series also supports PPP network access over all the standard WAN interface options mentioned above.
Applications overview 25 OnSite 2800 Series User Manual 1 • Gen eral info rmation In figur e 7 , the blue p ipes represent V PN connecti ons for priv ate traffic within the corpor ate intranet, w hile the green pipe s represent the Inter net traffic.
26 Chapter 2 Hardware installation Chapter cont ents Planning the installation .......... ................ ............ ........... ........... ............ ................. ........... ........... ........... .............27 Installation check list .
Plan ning t he instal lation 27 OnSite 2800 Series User Manual 2 • Hardware installation Planning th e installatio n Before you start the actual installation, we strongly recommend that you gather all the information you will need to in stall and setu p the devi ce.
Plan ning t he instal lation 28 OnSite 2800 Series User Manual 2 • Hardware installation Inst allat ion c heck list The installa tion check list (see table 3 ) lists th e tasks fo r instal ling an OnSite 2800 Ser ies VPN Router . Make a copy of this che cklist and mark the entries as you comp lete each task.
Plan ning t he instal lation 29 OnSite 2800 Series User Manual 2 • Hardware installation Site log Patton recom mends that you maintain a site log to reco rd all actions relevant to the system, if you do not already keep such a log. Site log entries s hould include information such as li sted in table 4 .
Installing the VPN router 30 OnSite 2800 Series User Manual 2 • Hardware installation Location and mounting req uirements The OnSite VPN Router is intende d to be placed on a de sktop o r similar sturdy, flat surface t hat offe rs easy access to the cables.
Installing the VPN router 31 OnSite 2800 Series User Manual 2 • Hardware installation connected to the OnSi te’s Ethern et ports (see tab le 5 for port pin-out listing) via a cable terminated with RJ-45 plug s. Note Pins not listed are not used. Figure 1.
Installing the VPN router 32 OnSite 2800 Series User Manual 2 • Hardware installation • E1 (Du al coaxial c onnectos )—Model 2 803, see se ction “Install ing the E1 dual coaxial c ables” on page 35 for det ails on i nstalling the coax ial cables Instal ling the V.
Installing the VPN router 33 OnSite 2800 Series User Manual 2 • Hardware installation The ro uter’s V.35 inte rface i s wired as a DTE. No DCE co nfigurat ion is possibl e. If you are d irect ly connect- ing the router’s V.35 interface to third-party equipmen t that cannot be configured as a DCE, you must use a tail-c ircui t cable.
Installing the VPN router 34 OnSite 2800 Series User Manual 2 • Hardware installation The sig nal pin- outs fo r the Mode l 2821 X.21 i nterface are sh own in table 6 . The the router ’s X.21 in terface is wire d as a DCE. No DTE config urati on is possi ble.
Installing the VPN router 35 OnSite 2800 Series User Manual 2 • Hardware installation Note Pins not listed are not used. Installing the E1 dua l coaxial cabl es. If the PBX or swit ch connecti on provid es dual coax ial cables fo r the E1 connectio n, the trans mit cable fr om the PBX /switch c onnects to the RX coaxi al connect or.
Installing the VPN router 36 OnSite 2800 Series User Manual 2 • Hardware installation Connec ting to external po wer sourc e The VPN Router comes wi th one of the fo llowing pow er supply opti ons a.
Installing the VPN router 37 OnSite 2800 Series User Manual 2 • Hardware installation 3. Verify that the AC power cord included with your VPN Router is compat ible wi th local standards . If it is not, refer to chapt er 10, “Contacting Patton for assistance” on page 11 4 to find out ho w to replace it with a compatible power cord.
38 Chapter 3 Getting star ted with th e OnSite Managed VPN Router Chapter cont ents Introd uction ................. ................. ........... ............ ........... ................. ........... ............ ........... ........... ........... .
Introduction 39 OnSite 2800 Series User Manual 3 • Getting started w ith the OnSit e Managed VPN Router Intr oduction This chapter lead s you through the b asic steps to set up a new OnSite VPN Ro uter. Figure 9 show th e main steps fo r settin g up a new O nSite VP N Rout er.
1. Configure IP add ress 40 OnSite 2800 Series User Manual 3 • Getting started w ith the OnSit e Managed VPN Router 1. Configure IP address Power co nnection and default configur ation First the OnS ite VPN Router must be co nnected to the ma ins power supply with the power cable.
1. Configure IP add ress 41 OnSite 2800 Series User Manual 3 • Getting started w ith the OnSit e Managed VPN Router • 1 stop bit • No flo w cont rol Login Access ing your OnSit e VPN Rout er via the local co nsole po rt (or vi a a Telnet session) causes th e login screen to display.
2. Connect the OnSite VPN Router to the network 42 OnSite 2800 Series User Manual 3 • Getting started w ith the OnSit e Managed VPN Router 2. Connect the OnSite VPN Router to the network Depending w.
3. Load configurati on 43 OnSite 2800 Series User Manual 3 • Getting started w ith the OnSit e Managed VPN Router After the OnS ite VPN Router has b een rebooted the new start up configurat ion will be activated. 172.1 6.1.9 9(i f-ip)[ eth0]# reloa d Runni ng confi gur ation has been chang ed.
44 Chapter 4 Serial por t configuration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......45 Serial port config uration task list .
Introduction 45 OnSite 2800 Series User Manual 4 • Seri al por t config uration Intr oduction This chapter p rovides an over view of the ser ial port and descr ibes t he task s involve d in it s con.
Serial port configuration task list 46 OnSite 2800 Series User Manual 4 • Seri al por t config uration Note Use the no sh utdown command to enable the serial interface after the configuration procedure.
Serial port configuration task list 47 OnSite 2800 Series User Manual 4 • Seri al por t config uration Exampl e: Enabli ng an interface The example show s how to enable the built-in serial inte rface on slot 0 and port 0 of an OnSite router. Check that State is set to OPENED i n the command output of show port serial .
Serial port configuration task list 48 OnSite 2800 Series User Manual 4 • Seri al por t config uration Transmit Edge : normal Port Type : DTE CRC Type : CRC-16 Max Frame Length: 2048 Recv Threshold .
Serial port configuration task list 49 OnSite 2800 Series User Manual 4 • Seri al por t config uration 2800(cfg)#port serial 0 0 2800(prt-ser)[0/0]#framerelay 2800(frm-rel)[0/0]#lmi-type ansi Configurin g the keep-ali ve interval A keep-alive interval must be set to c onfigure the L MI.
Serial port configuration task list 50 OnSite 2800 Series User Manual 4 • Seri al por t config uration Mode: Fra me R ela y Exampl e: Entering Frame Relay PVC configuration mode The follow ing examp.
Serial port configuration task list 51 OnSite 2800 Series User Manual 4 • Seri al por t config uration Frame Relay PVC. If serial Fram e Relay PVC shall be us ed as WAN access, a suitable name for the logical IP inte rface coul d be wan as in figur e 12 below.
Serial port configuration task list 52 OnSite 2800 Series User Manual 4 • Seri al por t config uration Enabling a Fr ame Relay PVC After bindi ng Framerelay P VC to an ip inter face it must b e enabled fo r packet pro cessing. This pr ocedure acti- vates the PV C by opening the bound ip interface.
Serial port configuration task list 53 OnSite 2800 Series User Manual 4 • Seri al por t config uration 2800(frm-rel)[0/0]#pvc 1 2800(pvc)[1]#shutdown Check the PV C 1 status by us ing show runn ing- confi g and verify that the entry shutdo wn occurs in the con- figura tion part res ponsible fo r this PVC.
Serial port configuration task list 54 OnSite 2800 Series User Manual 4 • Seri al por t config uration Displ aying Frame Relay info rmation Since Frame Relay configuration for the serial interface is c omplex and req uires many commands , it is help ful to list the frame relay configuration on screen.
Serial port configuration task list 55 OnSite 2800 Series User Manual 4 • Seri al por t config uration Figure 13. Typical Integrated Service Access Scenario with dedicated PVCs Integrated service ac.
Serial port configuration task list 56 OnSite 2800 Series User Manual 4 • Seri al por t config uration Figure 14. IP Context with l ogical IP interfaces bound to Ethernet port , serial port PVC 1 and PVC 2 The related IP, serial interface and Frame Relay config ura tion procedu re is lis ted below.
Serial port configuration task list 57 OnSite 2800 Series User Manual 4 • Seri al por t config uration 5. Conf igure t he introd uced P VCs. 2800(frm-rel)[0/0]#pvc 1 2800(pvc)[1]#encapsulation rfc14.
58 Chapter 5 T1/E1 por t configuration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......59 T1/E 1 port con figurat ion task list .
Introduction 59 OnSite 2800 Series User Manual 5 • T1/E1 port configuration Intr oduction This chapter p rovides an over view of the T1/E1 WAN por t, their ch aracteri stics a nd desc ribes the confi gura- tion tasks. The model 2803 has a T 1/E1 WAN port on the rear panel of the unit .
T1/E1 port configurati on task list 60 OnSite 2800 Series User Manual 5 • T1/E1 port configuration Mode: port e1t1 <slot> <port> Configurin g T1/E1 port-type T h e T 1 / E 1 P o r t c a n e i t h e r w o r k i n T 1 o r i n E 1 ( G . 7 0 4 ) m o d e .
T1/E1 port configurati on task list 61 OnSite 2800 Series User Manual 5 • T1/E1 port configuration Configurin g T1/E1 fr aming Four framing formats are available for selec tion on the T1/E1 port. Unframed can only be u sed if the encaps u- lation is set for hdlc .
T1/E1 port configurati on task list 62 OnSite 2800 Series User Manual 5 • T1/E1 port configuration Configurin g T1/E1 application mode T h e T 1 / E 1 p o r t ca n b e c on f ig u r e d t o w o rk i n e i t h e r s h o r t - h a u l o r i n l on g - h a u l m o d e.
T1/E1 port configurati on task list 63 OnSite 2800 Series User Manual 5 • T1/E1 port configuration tion “Configuring T1/E1 encapsulation” .) On creating a new channel-gr ou p the channel-group configuration mode is imme diately entere d. To remove an existing channel-group the ‘ no’ form of the com mand has to be used.
T1/E1 port configurati on task list 64 OnSite 2800 Series User Manual 5 • T1/E1 port configuration ration mod e the encapsulation must b e set to ‘hdlc’ as well follow ed by configuring at least one timeslot per the ‘tim eslots ’ comma nd.
T1/E1 port configurati on task list 65 OnSite 2800 Series User Manual 5 • T1/E1 port configuration Example 1: Frame R elay without a chann el-group port e1t1 0 0 port-type e1 framing crc4 encapsulat.
T1/E1 port configurati on task list 66 OnSite 2800 Series User Manual 5 • T1/E1 port configuration Example 2: Framer elay with a channel- group port e1t1 0 0 port-type e1 framing crc4 encapsulation .
67 Chapter 6 VPN configuration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......68 Authenti cati on ..
Introduction 68 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n Intr oduction This chapter d escribes how to conf igure the VPN connec tions between two OnSite routers or between an OnSite and a third-party device.
VPN co nfiguration task list 69 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n T ra nsport an d tunne l mode s The mode de termines the p ayload of the ESP pac ket and hence the appli cati.
VPN co nfiguration task list 70 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n Crea tin g an IP sec pol icy pro fi le The IPsec policy p rofi le s upplies the keys for the e ncryp tion and/or the authentic ators for the authenticat ion, the security para meters indexes (SP Is), and IP addr ess of the peer of the secured c ommunica tion.
VPN co nfiguration task list 71 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n Mode: Config ure Use no in front of the above comm ands to de lete a profile or a configuration entr y.
VPN co nfiguration task list 72 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n Exampl e: C reate an IPsec policy profile The follow ing example defi nes a profile fo r AES-encryp tion at a key length of 128.
VPN co nfiguration task list 73 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n Con fig urati on of an IP in te rface and t he I P r oute r for IPse c The IP inter face that prov ides connectivi ty to the IPse c peer, must now activate the outgoing ACL profile c on- figured in the previou s section.
VPN co nfiguration task list 74 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n Exampl e: D isplay IP sec transf ormatio n prof iles 2800(cfg)#show profile ipsec-transform IPSEC transform p.
Sample co nfigur ation s 75 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n IN MANUAL ToBurg Tunnel n o 200.200.200.1 - 1111 - - AES-CBC 128 3622/unlimited 19047/un limited OUT MANUAL ToBurg Tunnel n o 200.
Sample co nfigur ation s 76 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n ipaddress 200.200.200.2 255.255.255. 252 use profile acl VPN_In in use profile acl VPN_Out out context ip router route 0.0.0.0 0.0.0.0 200.200.200.1 0 route 172.16.
Sample co nfigur ation s 77 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n Rest of the configuration, see above, just change the name of the IPsec policy pro- file in the ACL profile ‘VP.
Sample co nfigur ation s 78 OnSite 2800 Series User Manual 6 • V PN conf igu ratio n set session-key inbound esp 8888 ciph er FEDCBA0987654321FEDCBA0987654321FEDCBA 0987654321 authenticator FEDCBA09.
79 Chapter 7 Access control list configuration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......80 About access control list s .
Introduction 80 OnSite 2800 Series User Manual 7 • Access control l ist configuration Intr oduction This chapter provides an overview o f IP Access Contro l Lis ts and descri bes the t asks invo lved in c onfiguring them through the OnSi te router.
About access control lists 81 OnSite 2800 Series User Manual 7 • Access control l ist configuration For example, access lists c an allow one host to access a part of your network, and prevent another ho st fr om accessing t he same area.
Access control list conf iguration task list 82 OnSite 2800 Series User Manual 7 • Access control l ist configuration • All acces s control li sts have an implicit deny ip any any at the end.
Access control list conf iguration task list 83 OnSite 2800 Series User Manual 7 • Access control l ist configuration Before you begin to en ter the commands that c reate and configure the IP access control list, be sure that you are clear about w hat you want to ac hieve with the list.
Access control list conf iguration task list 84 OnSite 2800 Series User Manual 7 • Access control l ist configuration Mode: Profil e acces s control l ist Where the s yntax is: If you place a deny i p an y any rule at the top of an acce ss control list pr ofi le, no pac kets will pass r egardle ss of the ot her rules y ou defi ned.
Access control list conf iguration task list 85 OnSite 2800 Series User Manual 7 • Access control l ist configuration Adding an ICMP filter rule to the current access contr ol list pr ofil e The command perm it or deny are used to defi ne an ICMP filter rule.
Access control list conf iguration task list 86 OnSite 2800 Series User Manual 7 • Access control l ist configuration Where the s yntax is as follo wing: If you place a deny ip any any rul e at t he to p of a n ac cess -lis t pro fil e, no pack ets will p ass r ega rdle ss of the o the r rules y ou de fined .
Access control list conf iguration task list 87 OnSite 2800 Series User Manual 7 • Access control l ist configuration The same e ffect can also be obtained by u sing the simpler mes sage name optio n.
Access control list conf iguration task list 88 OnSite 2800 Series User Manual 7 • Access control l ist configuration Where the s yntax is: Exampl e: Create TCP or UDP ac cess co ntrol l ist ent ries Select th e access-list pro file named WanRx and create the rules for: Permitting any TCP traf fic to hos t 193.
Access control list conf iguration task list 89 OnSite 2800 Series User Manual 7 • Access control l ist configuration Binding and unbin ding an access control list pr ofile to an IP interface The command use is u s e d t o bi n d a n a c c e s s c o n t r o l l i s t p r o f i l e to an IP interface.
Access control list conf iguration task list 90 OnSite 2800 Series User Manual 7 • Access control l ist configuration Unbind an access control list profile from an interface.
Access control list conf iguration task list 91 OnSite 2800 Series User Manual 7 • Access control l ist configuration Mode: Interface Where the s yntax is: Exampl e: De bugging acce ss contr ol list p rofiles The fol lowin g example sho ws how to en able debuggi ng for incoming tr affic of acce ss contr ol list s on inte rface wan .
Examples 92 OnSite 2800 Series User Manual 7 • Access control l ist configuration Examples Denying a specific subnet Figure 16 shows an example in which a server attached to ne t work 172.16.1.0 shall not be accessibl e from outsi de networks c onnected to IP in terface lan of the OnSite device.
93 Chapter 8 Link scheduler configuration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ............ ........... .......94 Configuring access contr ol lists .
Introduction 94 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Intr oduction This chapter des cribes how to use and conf igure the OnSite Quality of Service (QoS) feature s. Refer to 7, “Acc ess con trol lis t confi gurati on” on page 79 for mo re in formation on t he use o f access contro l lis ts.
Conf iguring qua lity of s ervic e (QoS ) 95 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Figure 17. IP context and related elements Configuring quali ty of service (QoS) In t.
Conf iguring qua lity of s ervic e (QoS ) 96 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on can be used to mark a sp ecific packet type fo r the other network no des. By default the traffi c-class tag is empty. Refer to figur e 18 on page 96 when u sing the AC L to clas sify traffi c.
Conf iguring qua lity of s ervic e (QoS ) 97 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Each traffic-class is in fact assigned a relat ive wei ght, which is used to share the bandw idth among the cur rently active classes. Patton recommends that yo u specif y the weight as percent which is best readable.
Quick references 98 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Figure 19. Example of Hierarchical Scheduling Quick references The following sections provide a mini mal “standard” link schedu ler conf igurat ion fo r the c ase where a (DSL/cable) modem link is shared for all traffic.
Link scheduler configuration task list 99 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on • “modem-512” is the ti tle of the pr ofile wh ich is re ferred to when inst alling the schedu ler • “rate-limi t 512” allo ws no more than 51 2 kbit/se c to pass wh ich avoids queuei ng in the modem.
Link scheduler configuration task list 100 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on • Displaying link scheduling pr ofile informati on (see page 110 ) • Enable statistics gathering (see page 11 0) Figure 20.
Link scheduler configuration task list 101 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Some types of packets you do not h ave to tag with ACL.
Link scheduler configuration task list 102 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Mode: Config ure Exampl e: Defi ning the access control list profile In the example b elow a new access control list prof ile named Webserver i s cre ate d.
Link scheduler configuration task list 103 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Figure 22. Str ucture of a Service- Policy Profile The template show n above specif ies an arbiter with three inputs which w e call “sour c es”: x, y and “default”.
Link scheduler configuration task list 104 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on At a some poi nt the so urce tr affic- class default mu st be li sted. T his clas s mus t be pre sent, becaus e it de fines h ow packets, w hich do not be long to any of the traffic -classe s listed in the p rofile are to be handled.
Link scheduler configuration task list 105 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Mode: Sourc e Defining the bit-rate The command rate is used with shaper link arbitration to assi gn the (average) bit-rate to the selec ted source.
Link scheduler configuration task list 106 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on The ty pe-of-s ervice (T OS) byt e in an IP header specifie s preced ence (priori ty) and type of service (RFC791, RFC1349 ). The precedenc e field is defi ned by the first thr ee bits and supports e ight levels of priority.
Link scheduler configuration task list 107 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on “traffic-class” number called. W ith OnSite you can inspe ct the DSCP value in the ACL rules and modify the DSCP value with the link scheduler se t ip dscp command.
Link scheduler configuration task list 108 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Defining random e arly detection The command random-dete ct is us ed to reques t random early detecti on (RED).
Link scheduler configuration task list 109 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on Devoting the ser vice policy profile to an inter face Any servic e policy profil e needs to be bound to a certai n IP interface to get activated.
Link scheduler configuration task list 110 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on 2800>enable 2800#configure 2800(cfg)#context ip router 2800(ctx-ip)[router]#interfac.
Link scheduler configuration task list 111 OnSite 2800 Series User Manual 8 • Link s chedul er conf igurati on The command has op tional values (in the range of 1 to 4) that def ine the level of detail (see tab le 13 ). Note The debug feature s offe red by OnSi te requi re th e CPU resour ces of your OnSite ro uter.
112 Chapter 9 LEDs status and monitori ng Chapter cont ents Status LEDs ................. ................. ........... ............ ........... ......
Status LEDs 113 OnSite 2800 Series User Manual 9 • LEDs status and monitoring Status LEDs This chapter d escribes OnSite gatew ay router front panel LE Ds. Figure 24 shows OnSi te 2800 Ser ies LEDs. LED defi nitions are list ed in t able 1 4 on page 11 3.
114 Chapter 10 Contacting Patton for assistance Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ... ... ................. .....115 Contact inf ormati on .
Introduction 115 OnSite 2800 Series User Manual 10 • Contacting Patton for assistance Intr oduction This chapte r contains t he foll owing info rmation: • “Contact information”—des cribes how to contac t Patton technical sup port for assistance .
Warranty Service and Returned Merch andise Authorizations (RMAs) 116 OnSite 2800 Series User Manual 10 • Contacting Patton for assistance Out-of-war ranty serv ice Patton servic es what we sell, no matter how you ac quired it, inc luding malfunctioning p roducts that are no longer under warranty.
117 Appendix A Compliance information Chapter cont ents Comp liance .................. ................. ........... ............ ........... ........... ................. ............ ........... ....... .... ................. .....118 EMC ..........
Compl iance 11 8 OnSite 2800 Series User Manual A • Compliance information Complia nce EMC • FCC Pa rt 1 5, Cl ass A • EN55022, Clas s A • EN55024 Safety • UL 60950-1/CSA C 22.
Authorized European Representative 119 OnSite 2800 Series User Manual A • Compliance information Authorized Eur opean R epresentative D R M Green European Co mpliance Ser vices Limited.
120 Appendix B Spe cifi cations Chapter cont ents Ethernet interfa ces .................... ........... ................. ........... ........... ............ ........... ................. ........... ...... ..... ...........121 Sync serial int erface .
Ethernet interfaces 121 OnSite 2800 Series User Manual B • Specifications Ethernet interfaces 10/100Base -TX Etherne t WAN po rt 4-port 10/1 00Base- TX Ethernet LAN switch ( Model 2805) 10/100Base- .
IP services 122 OnSite 2800 Series User Manual B • Specifications PPP, PAP, CHAP , LCP, IPCP IP ser vices IPv4 route r; RIPv1, v2 (RFC 1058 and 2453) Program mable sta tic ro utes ICMP redirect (RFC 792); Packe t fragmentatio n DiffServ e/ToS set or q ueue per head er bits Packet Pol icing disc ards exce ss traffic 802.
Power supply 123 OnSite 2800 Series User Manual B • Specifications Power supply Inte rnal A C v ersion Internal po wer supp ly 100–240 VAC, 50/60 Hz, 2 00 mA 12VDC versio n with E xtern al AC Po w.
124 Appendix C Cabling Chapter cont ents Introd uction ................. ................. ........... ............ ........... ................. ........... ............ ........... ........ . ............. ...........125 Serial console .............
Introduction 125 OnSite 2800 Series User Manual C • C abling Intr oduction This section prov ides information on the cables used to c onnect the OnSite to the existing network i nfrastruc- ture and to thir d party products.
Ethernet 10Base-T and 100Base-T 126 OnSite 2800 Series User Manual C • C abling Ethernet 10Base- T and 100Base-T Etherne t device s (10Base- T/100Base- T) are conne cted to the OnSite over a cabl e with RJ- 45 plugs. Use a cross- over cable to a host, or a straight cab le to a hub.
Ethernet 10Base-T and 100Base-T 127 OnSite 2800 Series User Manual C • C abling Figure 27. Ethernet straight-through Hub Straight-through cable RJ-45, male Tx+ Tx- Rx+ Rx- 1 2 3 6 RJ-45, male 1 Rx+ .
128 Appendix D Por t pin-outs Chapter cont ents Introd uction ................. ................. ........... ............ ........... ................. ........... ............ ........... ........ . ............. ...........129 Consol e port, RJ -45, EI A-561 (RS- 232) .
Introduction 129 OnSite 2800 Series User Manual D • Port pin- outs Intr oduction This section pr ovides pin-out i nformation for the p orts of the OnS ite router. Console por t, RJ-45 , EIA-561 (RS -232) The RS-232 serial console p ort of the OnSi te is configured to operate as a DCE .
Ethernet 10Base-T and 100Base-T por t 130 OnSite 2800 Series User Manual D • Port pin- outs Ethernet 10Base- T and 100Base-T por t The Ethe rne t port s a re a uto -de tec t MDI -X. Note Pins not listed are not used. Sync seri al port V. 3 5 s e r i a l p o r t Table 16.
Sync serial port 131 OnSite 2800 Series User Manual D • Port pin- outs X.21 serial port Note Pins not labeled are not used. Table 18. X.21 Female DB-15 connector X.
132 Appendix E OnSite 280 0 Seri es factor y configuration Chapter cont ents Introd ucti on ............................. ........... ........... ........... ............ ................. ........... ........... ........... ... ... ................. .
Introduction 133 OnSite 2800 Series User Manual E • OnSite 28 00 Ser ies fact ory confi gura tion Intr oduction The fact ory configur ation set tings for the OnSite 2800 Seri es devic es are as follow s: #------------------------------------- ---------------------------# # 2800 Series # R3.
134 Appendix F Installation check list Chapter cont ents Introd uction ................. ................. ........... ............ ........... .......
Introduction 135 OnSite 2800 Series User Manual F • Ins tall ation che cklis t Intr oduction This ap pendix lists th e tasks fo r instal ling a n OnSi te 2800 Se ries Ma naged V PN Rou ter (se e table 19 ). Make a copy of this che cklist and mark the entries as you complete eac h task.
Ein wichtiger Punkt beim Kauf des Geräts Patton electronic 2800 (oder sogar vor seinem Kauf) ist das durchlesen seiner Bedienungsanleitung. Dies sollten wir wegen ein paar einfacher Gründe machen:
Wenn Sie Patton electronic 2800 noch nicht gekauft haben, ist jetzt ein guter Moment, um sich mit den grundliegenden Daten des Produkts bekannt zu machen. Schauen Sie zuerst die ersten Seiten der Anleitung durch, die Sie oben finden. Dort finden Sie die wichtigsten technischen Daten für Patton electronic 2800 - auf diese Weise prüfen Sie, ob das Gerät Ihren Wünschen entspricht. Wenn Sie tiefer in die Benutzeranleitung von Patton electronic 2800 reinschauen, lernen Sie alle zugänglichen Produktfunktionen kennen, sowie erhalten Informationen über die Nutzung. Die Informationen, die Sie über Patton electronic 2800 erhalten, werden Ihnen bestimmt bei der Kaufentscheidung helfen.
Wenn Sie aber schon Patton electronic 2800 besitzen, und noch keine Gelegenheit dazu hatten, die Bedienungsanleitung zu lesen, sollten Sie es aufgrund der oben beschriebenen Gründe machen. Sie erfahren dann, ob Sie die zugänglichen Funktionen richtig genutzt haben, aber auch, ob Sie keine Fehler begangen haben, die den Nutzungszeitraum von Patton electronic 2800 verkürzen könnten.
Jedoch ist die eine der wichtigsten Rollen, die eine Bedienungsanleitung für den Nutzer spielt, die Hilfe bei der Lösung von Problemen mit Patton electronic 2800. Sie finden dort fast immer Troubleshooting, also die am häufigsten auftauchenden Störungen und Mängel bei Patton electronic 2800 gemeinsam mit Hinweisen bezüglich der Arten ihrer Lösung. Sogar wenn es Ihnen nicht gelingen sollte das Problem alleine zu bewältigen, die Anleitung zeigt Ihnen die weitere Vorgehensweise – den Kontakt zur Kundenberatung oder dem naheliegenden Service.
