AT&T Remote Port Security Device - Manuals

Contents 1 Getting Started Getting Started 1-1 Audience 1-4 Responsibilities 1-4 In This Document 1-5 Typographical Conventions 1-5 Hotline or Other Service Call Numbers/Addresses 1-6 2 Installation I n s t a l l a t i o nR o o m L a y o u t / E n v i r o n m e n t Power SupplyLocation of Administra...

3 RPSD System Administration RPSD RPSD System Administration Time of Day AccessSystem Activity LogSingle Point AdministrationEnable/Disable (Block) AT&T and Other Key Users Force Connect/DisconnectAuthorized Keys System Administrator Command Set A - Add UserB - Block User U - Unblock UserT - Tes...

List of Figures Figure 1-1 1-2 2-1 2-2 2-3 2-4 2-5 2-6 2-7 2-8 2-9 2-10 B-1 B-2 Protection ProcessRPSD Lock and Key Configuration Bypass ConnectionsRPSD LockRPSD KeyCommon RPSD Lock ConfigurationRPSD Lock to CO Line (RMATS Channel) RPSD Lock to Modem RPSD Lock to Administration Terminal or Printer D...

List of Tables Table Page 2-1 2-2 3-1 4-1 2-16 2-23 3-3 4-2 5-4 A-1 B-2 B-3 5-1 A-1 B-1 B-2 Aux. Port, Terminal, and Printer PinoutsCables, Connectors, and Ports Access Failure Messages Access Failure Messages Access Failure Messages Cables, Connectors, and Ports RPSD Lock LEDs RPSD Key LEDs

1 Getting Started Getting Started AudienceResponsibilitiesIn This DocumentTypographical ConventionsHotline or Other Service Call Numbers/Addresses 1-1 1-4 1-4 1-5 1-5 1-6

Getting Started The DEFINITY ® Remote Port Security Device (RPSD) is a single line dial-up port protection system that prevents unauthorized access to a host resource. Host resource dial-up ports, called “subscribers,” are protected by the installation of the RPSD Lock hardware unit on the analog in...

The RPSD system protects a port in the following manner: a call into the channel to theprotected host activates the RPSD Lock. Without involving the protected host resource or itsassociated modem, the RPSD Lock performs a verification of the caller’s identity through a set ofcommunications with the ...

The RPSD Lock device is approximately the size of a modem and is connected between the PBXmodem and the Central Office (CO) line. The RPSD Key device is of similar size and is connected between the client’s (caller’s) modem and CO line. See Figure 1-2. FIGURE 1-2 RPSD Lock and Key Configuration In F...

Audience This document is intended for the following audience: ■ AT&T Technicians ■ RPSD System Administrators ■ RPSD Key Users AT&T Technicians refers to the personnel from AT&T who install the RPSD Lock device at thecustomer premises. It is assumed that AT&T Technicians are familia...

In This Document This document comprises the following material: ■ ■ ■ ■ Chapter 1: Getting Started provides an overview of the RPSD system, a description of this document and its intended audience, and an explanation of typographical conventions. Chapter 2: Installation describes the recommended ha...

Hotline or Other Service Call Numbers/Addresses If assistance is needed with the RPSD Lock, Key, or the PBX, or problems occur in the RPSD Lock or Key that cannot be resolved by using Chapter 5, Troubleshooting, contact the technical support center at: 1 800 242-2121 1-6 Getting Started

2 Installation Installation 2-1 Room Layout/Environment 2-3 2-3 2-4 Power SupplyLocation of Administration Terminal or Printer Hardware Components RPSD LockRPSD Power Monitor AdapterP B X s O t h e rM o d e m sRPSD Lock or Key Administration TerminalRPSD Lock Administration PrinterRPSD Key 2-5 2-5 2...

Room Layout/Environment While the location of the RPSD Lock is not critical to its function, it is best if the Lock is kept inan equipment cabinet near the PBX modem. This helps protect the Lock against dust and otherprecipitate, as well as protecting against physical damaging from being knocked to ...

Location of Administration Terminal or Printer For the purposes of installation, it is simplest if the RPSD Lock or Key administration terminal orprinter is co-located with the RPSD Lock or Key. However, this is not always possible. In theevent that the terminal or printer must be located at some di...

Hardware Components When you order the RPSD Lock device, you receive the Lock, power supply, a 7-foot cable withmodular connectors on each end, and a 14 foot cable with modular connectors on each end. If any other cables or connectors are required, they must be ordered separately. In addition, any p...

RPSD Power Monitor Adapter The Power Monitor Adapter (PMA) (Comcode 406453662) provides an installation option thatallows you to control the behavior of the RPSD during power failure conditions. In the event of a unit failure or a power failure, the RPSD is designed to block incoming and outgoing ca...

A second pair of RJ11 port connections may be installed for simple bypass of the RPSD Lock.To bypass the Lock, the modular connection cords are removed from the RPSD Lock Telco andSubscriber ports and connected to the bypass connection block, which connects the line directly.See Figure 2-1 for the r...

FRONT BACK FIGURE 2-2 RPSD Lock PBXs AT&T supports RPSD use on the following types of PBXs: ■ System 75 (R1V2, R1V3) ■ System 85 (R1V1, R1V2, R2V1, R2V2, R2V3, R2V4) ■ DEFINITY Generic 1 (all models) ■ DEFINITY Generic 2 (all models) ■ Dimension® PBX To install the RPSD Lock you must locate the ...

Other Other dial-up port applications may be supported. To install an RPSD Lock device for theseapplications, locate the CO line used to service that port and install the Lock as you would for the remote maintenance and administration application. Modems The RPSD Lock works with any modem that may b...

RPSD Key The RPSD Key is similar to the RPSD Lock in size and appearance. Like the RPSD Lock,the RPSD Key has seven LEDs on the front panel and four ports on the back panel. For adetailed description of the front panel LEDs, see Appendix B, Front Panel LEDs. The backpanel ports are: ■ an RJ11 port f...

FIGURE 2-4 Common RPSD Lock Configuration The Lock is installed between the CO line and the PBX modem. The modem location depends on the type of PBX. The modem is located: ■ on the circuit pack for System 75 and DEFINITY Generic 1 ■ external to the PBX for System 85 and DEFINITY Generic 2 The RPSD L...

You will need the following components to install the RPSD Lock: ■ ■ ■ ■ ■ ■ ■ ■ ■ ■ RPSD Lock device the CO line assigned as the RMATS channel (on customer premises) the PBX modem (on customer premises) 6 position wire (length depends on local configuration) two modular connectors two DB25 connecto...

Modular Plug RJ11 Jack CO Line (RMATS Channel) Modular Plug FIGURE 2-5 RPSD Lock to CO Line (RMATS Channel) Connecting the RPSD Lock to the PBX Modem The 212A modem has a DB25 input, so the connection to the RPSD Lock must be adapted toconnect the tip and ring from a modular plug to a DB25. The two ...

Modular Plug PBX Modem Modular Plug FIGURE 2-6 RPSD Lock to Modem Connecting the RPSD Lock to the AdministrationTerminal or Printer You will need the following hardware components to connect the RPSD Lock device to the administration terminal, printer, or modem: ■ RPSD Lock device ■ administration t...

To connect the RPSD Lock device to the administration terminal or printer, use thefollowing procedure: 1 Using Table 2-1, make up a DB25 connector with EIA-RS232 cable for the Aux. Portof the RPSD Lock. 2 Make up the appropriate connector for the terminal or printer according to the pindescriptions ...

FIGURE 2-7 RPSD Lock to Administratlon Terminal or Printer Hardware Installation Procedures 2-17

2 3 4 5 6 7 8 20 22 Transmit Data Receive Data Request to Send Clear to Send Data Set Ready Signal Ground Data Carrier Detect Data Terminal Ready Ring Indicator RPSD Terminal or Printer 2 3 4 5 6 7 8 20 22 (DCE) (DTE) FIGURE 2-8 DB25 Connections From RPSD Lock or Key to Data Terminal Equipment 2-18 ...

2 3 4 5 6 7 8 20 2 3 4 5 6 7 8 20 RPSD (DCE) FIGURE 2-9 Printer (DCE) DB25 Connections From RPSD Lock or Key to Data Communications Equipment Obtain further information for the specific terminal or printer in use from the documentationaccompanying them. Powering Up the RPSD Lock To power the RPSD Lo...

AC Outlet FIGURE 2-10 RPSD Lock Power Supply Installing the RPSD Key The RPSD Key is installed between the user’s terminal and modem. To install an RPSD Keydevice, you need: ■ ■ ■ ■ ■ ■ ■ ■ ■ RPSD Key Terminal Modem two modular connectors 6 position wire one RS-232 connectors one DB25 connector (mal...

Connecting the RPSD Key to the Terminal The RPSD Key is connected to the terminal via the Aux. Port on the back of the RPSD Key device and the terminal’s RS-232 port. Obtain or make up a cable with the RS-232 wire,the RS-232 connector on one end, and the DB25 connector (male) on the other end. Conne...

Power-Up Behavior of Uninitialized Key With an uninitialized Key, the left four LEDs will all light up upon power-up. If any otherbehavior occurs, there is a firmware error and the Key should be replaced. Testing an Uninitialized Key Test an RPSD Key that has not been initialized by connecting eithe...

Cables, Connectors, and Ports Table Table 2-2 shows the cables, connectors, and ports required to install the RPSD system. This table includes optional connections as well as the basic configuration. TABLE 2-2 Cables, Connectors, and Ports Part From To modular connector6 position wiremodular connect...

Software Components The software for the RPSD system is contained within the hardware components and does not need to be loaded separately. Additionally, if you are not installing an RPSD Key or Keys, youneed only set the date and time for the RPSD Lock and, in the case of multiple Locks, a Lock ID....

Initializing an RPSD Key Initialization of an RPSD Key involves both the Key and the RPSD Lock. On the Lock,the Key User ID in question must be added using the Add User command. See Chapter 3,System Administrator Command Set for the procedure for using the Add User command. On the Key, the following...

Test RPSD Lock Installation The Self Check tests the health of the RPSD Lock. If the correct response is received when thetest is run, the RPSD Lock is functioning properly. To perform the Self Check, dial the RMATS channel from a touch-tone telephone. When the callis answered, you hear a short tone...

3 RPSD System Administration RPSD System Administration 3-1 Time of Day Access 3-1 System Activity Log 3-2 Single Point Administration 3-4 Enable/Disable (Block) AT&T and Other Key Users 3-4 Force Connect/Disconnect 3-4 Authorized Keys 3-5 RPSD System Administrator Command Set 3-7 A - Add UserB ...

RPSD System Administration The RPSD Lock device prevents unauthorized access to the RMATS channel on your PBX. Inadministering the RPSD, keep in mind that access via telephone lines is not the only means ofbreaching the security of your system. A system can be breached, for example, by physicallyint...

System Activity Log The System Activity Log retains a log history of the last 60 status messages generated by theRPSD Lock. As a new message is generated, the oldest message in the buffer is deleted. The most recent twenty messages are sent to the RPSD Lock administration terminal or printer anddisp...

Single Point Administration A single administration terminal or printer can be used to administer multiple Locks. To do so,you will need to either administer the Locks from tty ports via the UNIX ® Operating System, or you can use, in the case of printers, a printer sharing device. Where multiple Lo...

Authorized Keys You may have up to twenty-five RPSD Key user IDs on the RPSD Lock. Ten RPSD Key userIDs are reserved as permanent for AT&T personnel to administer and maintain the PBX,peripheral, or adjunct via the RMATS port. These user IDs cannot be deleted. The permanentuser IDs can, however,...

RPSD System Administrator Command Set This section describes the commands available on the RPSD Lock and their syntax. Theprocedures in which the commands are used have been described earlier in this chapter.This material is provided as a quick reference. Also described in this section is the method...

Optionally, a single Key can be used to access multiple Locks. This is done by entering the [secret_key] information when adding that Key. The same [secret_key] information is then used when adding that Key to other Locks. The information is then used to generate the test responce. The secret key ch...

B - Block User Syntax: b <user_id> [ RETURN ] Blocks an RPSD Key user from access to the RMATS channel. Both permanent andnon-permanent users may be blocked. In the syntax line above, b is the command and <user_id> is the user ID. To determine whether a user is already blocked, or to che...

L - List User Table Syntax: l [ RETURN ] or l <full_or_partial_user_id> [ RETURN ] The List User Table command lists information regarding all users if no user ID is specified. The command lists information regarding a specified user if the full user ID is given, or all usersbeginning with whi...

The fields of the List User Table screen are: User ID Provides the user ID. Blocked? States whether a Block command has been issued for that user. The default is no block. If a user is not blocked, the field is left blank. Blocks can beissued on both permanent and non-permanent users. Permanent? Tel...

Third Sample Command and Response: The following is a sample of the output returned by using the second syntax example, which listsall users beginning with the same characters. > l KEY User ID Blocked? Perm? Restriction(s) KEY11 KEY12 B KEY13 B KEY14 KEY15 KEY16 KEY17 KEY18 B KEY19 KEY20 -- End o...

CR - Change Restriction Syntax: cr <restr_id,start(hh:mm),end(hh:mm),day_no.> [ RETURN ] The Change Restriction command is used to set the list of time restrictions that may be placed ona user or users. Time restrictions block access to the RMATS channel for a specified portion oftime on a spe...

LR - List Restrictions [ RETURN ] S y n t a x : lr or lr <restr_id> [ RETURN ] The List Restrictions command is used to list the time restrictions that have been administered. Up to 14 separate restrictions maybe created (A-N). The first syntax example above will list the time restrictions for...

UR - User Restrictions Syntax: ur <full_or_partial_user_id, restr_id(s)> [ RETURN ] The User Restrictions command is used to assign time restrictions to a user or set of users. Thecommand assigns restrictions to a specified user if the full user ID is given, or all users beginning with whichev...

AH - Access History S y n t a x : [ RETURN ] ah The Access History command displays details regarding the last twenty accesses of the RMATSchannel for both incoming and outgoing calls. The command takes no arguments. Sample Command and Response: > ah ---Access History --- Date Time User ID Device...

LS - List Statistics Syntax: ls [ RETURN ] The List Statistics command displays a statistical summary of call attempts and failures, both cumulative and since the last time the statistical summary was reset. The summary is reset by the administrator using the Reset Statistics command, described in t...

RS - Reset Statistics [ RETURN ] Syntax: rs [ RETURN ] Entering r S resets the access attempts statistics to zero. This command does not reset cumulative totals. The access attempts statistics are obtained by using the List Statisticscommand. FC - Force Connect Syntax: fc If a call comes in that the...

FD - Force Disconnect Syntax: fd [ RETURN ] The Force Disconnect command disconnects a call in progress. This might be used to clear thechannel for a higher priority call. The Lock will request confirmation of a Force Disconnect command. If a Force Disconnect command is issued when no call is in pro...

SC - Set Communications Parameters Syntax: sc <speed,length_parity> [ RETURN ] The Set Communications Parameters command is used to set the communications link speed, character length, and parity on the serial port. The default setting is 9600 baud, 8 bit, no parity. In the syntax above sc is ...

Help Screens To obtain a help screen for any command, enter a question mark (?) followed by thecommand and [ RETURN ]. Sample Help Request and Help Response: > ?i Command: I - ID Set Function: Set ID to precede all log messages from this device. Format: I log id Example: >I LOCK-A To clear ID ...

4 RPSD Key Use RPSD Key Use 4-1 Access Failure Messages 4-2 Last Call Status Test 4-2 RPSD Key User Command Set U - Set User ID K - Set Secret KeyN - Set Device Number L - List User InformationH - History Display D - Date SetC - Clock Set I - Set Log ID S - Status Display 4-3 4-4 4-4 4-5 4-5 4-6 4-7...

RPSD Key Use When the RPSD system is working correctly, Key use and authentication should be almost invisible to the RPSD Key user. The user dials the RMATS channel from the user’s terminal, authentication takes place (during which time the LEDs on the front panel of the RPSD Key indicate the status...

U - Set User ID Syntax: u <user_id> [ RETURN ] The Set User ID command is used to enter a name that will identify the RPSD Key to theRPSD Lock. This command is only used when initializing a Key in the virgin state. See Chapter 2, Initializing an RPSD Key for a complete description of the proce...

N - Set Device Number Syntax: n <number> [ RETURN ] The Set Device Number command enters a number from 100 to 9999999 as an identifier for the RPSD Key device. Use this command when you have two or more RPSD Keys with the sameuser ID. The device number is associated with the Key for the purpos...

H - History Display Syntax: h [ RETURN ] The History Display command displays a log history of the last twenty messages generated by or sent to the RPSD Key device. See Table 4-1 for an explanation of the status messages sent to the Key by the RPSD Lock when a connection attempt fails. Sample Comman...

D - Date Set Syntax: d <mm/dd/yy> [ RETURN ] The Date Set command is used to set the date for the RPSD Key’s internal calendar. You should set the date when you begin using the Key just to be certain that it is correct. To check the dateyou can use the Status Display command described in this ...

I - Set Log ID Syntax: i <log_id> [ RETURN ] The Set Log ID command is used to identify which Key is associated with which status message.This is especially important where multiple devices share a single administration terminal. Thecommand adds the ID to the beginning of each message generate...

W - Wipe Out Syntax: w [ RETURN ] The Wipe Out command will erase the user ID, secret key information, and device ID of theRPSD Key and return it to a virgin state. If the Wipe Out command is used, the Key will beunable to access the RPSD Lock unless the entire initialization procedure is performed ...

5 Troubleshooting Troubleshooting 5-1 Access Failure Messages 5-3 Testing the RPSD Lock 5-7 Built-in Diagnostics 5-7 Self Check 5-8 Last Call Status Test 5-8 Modem Ring Test 5-9 Hardware Replacement 5-9 Replacing the PBX Modem 5-10 Replacing the Lock or Key 5-11 Saving the Key Seed Value 5-13

Troubleshooting This chapter provides a basis for establishing the cause of trouble or access failure with yourRPSD system. In the event that you are unable to determine the cause of the problem or resolve the matter to your satisfaction, contact the technical support center at: 1 800 242-2121 Note:...

Access Failure Messages When calls to the RPSD Lock are disconnected without reaching the PBX modem, the Lockgenerates an access failure message that is sent to standard output and saved in the systemactivity log. The access failure message is also sent as a reply to the caller whose attempt failed(...

TABLE 5-1 (Continued) Access Failure Messages Code No. Message Meaning 4 Blocked User 5 InvalidResponse 6 Outgoing Call 7 Ring - NoAnswer 8 F o r c eD i s c o n n e c t Theadministratorplaced a blockon the caller’sRSPD Key userID. The RSPD Keyresponded tothe RSPDLock’schallenge, butthe responsewas i...

Testing the RPSD Lock There are two ways in which the RPSD Lock can be tested to determine the cause of accessfailures and whether the Lock or some associated piece of hardware is malfunctioning. ■ Built-in diagnostics ■ Hardware replacement Note: In all cases where a connection fails, if it is impo...

Self Check The Self Check tests the health of the RPSD Lock. To perform the Self Check, dial the RMATS channel from a touch-tone telephone. When the callis answered, you hear a short tone (indicating a connection to the RPSD Lock). Press 1 ✱ on the telephone pad. If the response is 3 quick tones, fo...

Modem Ring Test The Modem Ring Test tells you whether the call attempts are getting through to the modem. Ifthere is a problem with the RPSD Lock, the PBX modem, or the cabling, the call will not reachthe modem. The likeliest result, in the case of a problem, is a Ring No Answer. To perform the Mode...

Replacing the PBX Modem To test whether the problem diagnosed by the Modem Ring Test is in the PBX modem, performthe following procedure: 1 2 3 4 5 6 7 Disconnect the modular telephone plug from the PBX modem and connect a touch-tonetelephone to the modem. Call the RMATS channel from a touch-tone te...

B Device LEDs Front Panel LEDs B-1 RPSD Lock B-1 RPSD Key B-2

Front Panel LEDs Both the RPSD Lock and the RPSD Key have seven LEDs each on their front panels. The following sections explain the meaning of each LED and their various states. RPSD Lock FIGURE B-1 RPSD Lock LEDs The first LED on the left is the red Power light. This indicates that the power is on....

Table B-1 explains the status of the RPSD Lock when the different LEDs are lit. TABLE B-1 RPSD Lock LEDs LED Meaning 1 OnOnOn 2 OnOffOff 3 OffOnOff 4 Off OffOn 5 Off Off Off 6 Off OffOff 7 OffOff Off On Off Off Off On Off Off An incoming call is being processed.The RPSD Lock is ringing the modem.An ...

Index F A AC outlet, 2-3Access failure messages, 3-3, 4-2, 5-3RPSD Key, 4-1, 4-2 Access history command, 3-20 screen explained, 3-20 Add user command, 3-7Administration printer connection, 2-9location, 2-4 EIA-RS232 limitations, 2-4 reason to have one, 2-5requirements, 2-9set link speed, 2-4 Adminis...