Avocent Cyclades-PR1000 - Manuals

Cyclades-PR1000 9 Chapter 1 - How To Use This Manual Icons Icons are used to draw attention to important text. Icon Meaning Why What is Wrong? When an error is common, text with this icon will mention the symptoms andhow to resolve the problem. Where Can I FindMore Information? CyROS contains many f...

Cyclades-PR1000 10 Chapter 1 - How to Use This Manual Cyclades Technical Support and Contact Information All Cyclades products include limited free technical support, software upgrades and manual updates. These updates and the latest product information are available at: http://www.cyclades.comftp:/...

Cyclades-PR1000 11 Chapter 1 - How to Use This Manual The mailing address and general phone numbers for Cyclades Corporation are: Cyclades Corporation Phone: + 01 (510) 770-9727Fax: + 01 (510) 770-0355 41829 Albrae StreetFremont, CA 94538USA

Cyclades-PR1000 Chapter 2 - What is in the Box 12 CHAPTER 2 WHAT IS IN THE BOX The Cyclades-PR1000 comes in two varieties, described below. Both models are accompanied by the followingaccessories: • Quick Installation Manual• Documentation CD containing the complete Installation Manual and the CyROS...

Chapter 2 - What is in the Box 15 Cyclades-PR1000 Horizontal Surfaces The Velcro® strips should be used to attach the PR1000 more firmly to a horizontal surface. Remove thebacking from the prickly Velcros® and attach them to the router as shown in the figure. Remove the backingfrom the fuzzy Velcros...

Cyclades-PR1000 Chapter 2 - What is in the Box 16 Next, place the PR1000 on the horizontal surface, aligning the fuzzy and prickly Velcros® as shown in Figure 2.4. Cyclades-PR1000 Horizontal Surface Where the PR1000 Will be Secured FIGURE 2.4 HOW TO ATTACH THE PR1000 TO A HORIZONTAL SURFACE Vertical...

Chapter 2 - What is in the Box 17 Cyclades-PR1000 184,8 mm or 7.27 in Screw Slot Cyclades-PR1000 Vertical Surface Where the PR1000 Will be Secured Two 5mm Ø Screws with Nylon Fixings FIGURE 2.5 POSITIONING OF SCREWS

Cyclades-PR1000 Chapter 2 - What is in the Box 18 Place the center of the screw slots over the screws and slide the router down so the screws hold the router in place asshown in Figure 2.6. Cyclades-PR1000 Vertical Surface Where the PR1000 Will be Secured 1 2 FIGURE 2.6 HOW TO ATTACH THE PR1000 TO A...

Chapter 3 - Using CyROS Menus 19 Cyclades-PR1000 Chapter 3 Using CyROS Menus This chapter explains CyROS menu navigation and special keys. There are three ways to interact with CyROS: • Traditional menu interface using a console or Telnet session,• CyROS Management Utility based on interactive HTML ...

Cyclades-PR1000 Chapter 3 - Using CyROS Menus 20 Once the console connection is correctly established, a Cyclades banner and login prompt should appear on theterminal screen. Pressing <ESC> during the boot process will temporarily halt initialization and present several options:IP address of t...

Chapter 3 - Using CyROS Menus 21 Cyclades-PR1000 Special Keys <Enter> or <Ctrl+M> These keys are used to end the input of a value. <ESC> or <Ctrl+I> These keys are used to cancel a selection or return to the previous menu. Insome isolated cases, this key forwards you to the n...

Cyclades-PR1000 Chapter 3 - Using CyROS Menus 22 The CyROS Management Utility After one of the interfaces has been connected and configured, there is another way to interact with CyROS. Type theIP address in the location field in an HTML browser of a PC connected locally or remotely through the conf...

Chapter 3 - Using CyROS Menus 23 Cyclades-PR1000 The link Configuration Menu Interface will present an HTML version of the CyROS Main Menu, described previously. Clicking on an interface will show its current status and some additional information. Clicking on End HTTP Session will terminate the con...

Cyclades-PR1000 24 Chapter 4 - Step-by-Step Instructions CHAPTER 4 STEP-BY-STEP INSTRUCTIONS FOR COMMON APPLICATIONS This chapter provides detailed examples that can be used as models for similar applications. Turn to the examplethat is closest to your application, read the explanations, and fill in...

Cyclades-PR1000 25 Chapter 4 - Step-by-Step Instructions Please read the entire example and follow the instructions before turning the router on. The router isprogrammed to log the super user off after 10 minutes of inactivity. All data not explicitly saved tomemory is then lost. Collecting the data...

Cyclades-PR1000 26 Chapter 4 - Step-by-Step Instructions Parameter Example Your Application IP fragmentation -Ignore Bit DF Yes NAT Local ICMP Port Inactive Incoming Rule List None, filters are not included in thisexample. Outgoing Rule ListName None, filters are not included in thisexample. Proxy A...

Cyclades-PR1000 28 Chapter 4 - Step-by-Step Instructions STEP FOURThe Encapsulation parameters for PPP are less straight-forward. Many of them are based on decisions thatcannot be shown in a diagram. Fortunately, the choices made here will mostly affect the performance of the link,rather than whethe...

Cyclades-PR1000 32 Chapter 4 - Step-by-Step Instructions Menu CONFIG =>SECURITY =>NAT =>LOCAL ADDRESS =>ADD RANGEParameter Example Your Application First IP Address 192.168.0.10 Last IP Address 192.168.0.30 FIGURE 4.10 NAT LOCAL ADDRESS RANGE MENU PARAMETERS The factory preset values for...

Cyclades-PR1000 33 Chapter 4 - Step-by-Step Instructions Example 2 A LAN-to-LAN Example Using Frame Relay This section will guide you through a complete router installation for the connection of two LANs via Frame Relay.Figure 4.11 shows the example system used in this section. Spaces have been prov...

Cyclades-PR1000 34 Chapter 4 - Step-by-Step Instructions STEP ONEThe first step is to determine the parameters needed to configure the Ethernet interface (ETH0). The parametersin the Network Protocol Menu (IP) are shown in Figure 4.12. Fill in the blanks for your application in the right-mostcolumn....

Cyclades-PR1000 38 Chapter 4 - Step-by-Step Instructions At the end of the parameter list shown above, the DLCI menu appears. Choosing Add DLCI will lead to theparameters shown in Figure 4.16. The <ESC> key used at any time during the Frame Relay encapsulationparameter list will also bring up ...

Chapter 5 - Configuration of the Ethernet Interface 41 Cyclades-PR1000 CHAPTER 5 CONFIGURATION OF THE ETHERNET INTERFACE The PR1000 has one Ethernet 10/100Base-T interface, provided in a standard RJ-45 modular jack, which shouldbe connected to an Ethernet hub or switch. Use a standard 10/100Base-T s...

Chapter 5 - Configuration of the Ethernet Interface 43 Cyclades-PR1000 IP Bridge An IP Bridge is used to divide a network without subnetting. Whenever a subnetwork is created, two IP numbersare lost — one describing the network and the other reserved for broadcast. This does not occur with an IPBrid...

Cyclades-PR1000 Chapter 5 - Configuration of the Ethernet Interface 44 In Figure 5.1, an example of the use of an IP Bridge is given. From the available IP addresses, the range200.240.240.4 to 200.240.240.8 is bridged to another physical location. The following parameters apply onlyfor IP Bridge. Ne...

Chapter 6 - Configuration of the SWAN Interface 45 Cyclades-PR1000 CHAPTER 6 THE SWAN INTERFACE This chapter describes how to configure a SWAN interface. The physical link should be set up as shown inchapter 2, according to the type of modem or device at the other end of the connection and the type ...

Chapter 6 - Configuration of the SWAN Interface 46 Cyclades-PR1000 STEP TWOThe second step is to choose a data-link protocol in the Encapsulation menu. There are many encapsulationoptions on this interface. For synchronous communication: • Frame Relay: the Frame Relay Protocol is based on frame swit...

Cyclades-PR1000 Chapter 7 Network Protocols 48 CHAPTER 7 NETWORK PROTOCOLS The second step in most interface configurations is to choose which network protocol to use and assign values tothe relevant parameters. At least one of IP, Transparent Bridge, or IPX (optional, and discussed in chapter 13)mu...

Chapter 7 Network Protocols 49 Cyclades-PR1000 The IP Protocol If the preset values provided by the operating system are accepted, the interface will work at a basic level. Themost common options are explained in the following table. Network Protocol (IP) Menu CONFIG=>INTERFACE=><LINK>=&...

Chapter 7 Network Protocols 51 Cyclades-PR1000 The Transparent Bridge Protocol The Transparent Bridge Protocol can be used in conjunction with either IP or IPX. A detailed explanation of its useappears in section 4.6 of the CyROS Reference Guide. Transparent Bridge Menu CONFIG=>INTERFACE=>SWAN...

Chapter 8 - Data-Link Protocols (Encapsulation) Cyclades-PR1000 54 HDLC This data-link protocol is a proprietary alternative to PPP. It has only one parameter, the HDLC Keepalive Interval. This is the time interval between transmission of Keepalive messages. The receiver of these messages must sendk...

Chapter 8 - Data-Link Protocols (Encapsulation) Cyclades-PR1000 57 Data link connections are defined in the Add DLCI menu, which appears at the end of the Frame Relay parameter list. It can be reached by passing through all parameters or by using the <ESC> key at any point in theparameter list...

Cyclades-PR1000 Chapter 9 - Routing Protocols 63 CHAPTER 9 ROUTING PROTOCOLS Routing Strategies Routing can be done either statically or dynamically. Static Routing Static routing is recommended when the network contains a small number of routers and other equipment. Whena system is simple and witho...

Cyclades-PR1000 Chapter 9 - Routing Protocols 64 10.0.0.0 Mask: 255.0.0.0 Router 1 10.0.0.1 10.0.0.2 10.0.0.3 192.168.100.2 192.168.100.3 192.168.100.1 142.10.0.2 142.10.0.1 142.10.0.3 142.10.0.4 Router 2 142.10.0.0Mask: 255.255.0.0 192.168.100.0Mask: 255.255.255.0 A B E C D F Network 2 Network 3 Ne...

Cyclades-PR1000 Chapter 9 - Routing Protocols 65 UnnumberedInterfaces Point-to-Point Connection Slot 1 ETH0 ETH0 Slot 3 Router 1 10.0.0.3 192.168.100.1 Router 2 A B E F Network 3 Network 1 FIGURE 9.2 STATIC ROUTING EXAMPLE 2 Figure 9.2 shows another static routing example to explain the Gateway or I...

Cyclades-PR1000 Chapter 9 - Routing Protocols 67 RIP Configuration CyROS supports three basic types of RIP: 1 RIP1 [RFC 1058]2 RIP2 with broadcast (compatible with RIP1) [RFC 1723]3 RIP2 with multicast [RFC 1723] The primary difference between RIP1 and RIP2 is that only RIP2 advertises subnet masks ...

Cyclades-PR1000 Chapter 9 - Routing Protocols 68 OSPF The OSPF (Open Shortest Path First) routing protocol is significantly more complicated than RIP. The determinationof which protocol is better suited to a given network is beyond the scope of this manual. An example networkusing OSPF is given in F...

Cyclades-PR1000 Chapter 9 - Routing Protocols 69 First, some definitions: • An Autonomous System (AS) is a portion of the network that will use a single routing strategy. It is made up of a backbone area and optionally of non-backbone areas. • OSPF Areas are sub-systems that have identical routing d...

Cyclades-PR1000 Chapter 9 - Routing Protocols 70 OSPF Configuration on the Interface STEP TWOContrary to most other protocols in CyROS, OSPF must first be configured on each interface, then configured inthe CONFIG =>IP =>OSPF menu. Enter into each interface and set the parameters listed in the...

Cyclades-PR1000 Chapter 9 - Routing Protocols 71 OSPF Menu (Continued) Parameter Description Retransmit Intervalin Seconds* Time in seconds between link-state advertisement retransmissions for adjacenciesbelonging to this interface. Hello Interval inSeconds* Time in seconds between the hello packets...

Cyclades-PR1000 Chapter 9 - Routing Protocols 72 OSPF Global Configurations STEP THREEAfter completing the OSPF interface configuration for all interfaces (even those that will not use OSPF), navigateto the OSPF Menu, CONFIG=>IP=>OSPF. Enter into the OSPF Global Commands menu and set the param...

Cyclades-PR1000 Chapter 9 - Routing Protocols 75 STEP FIVEThe CONFIG =>IP =>OSPF =>NEIGHBORS menu is required if the router uses OSPF over non-broadcast multi-access interfaces such as X.25 and Frame Relay. If this is the case, set the parameters described in the followingtable. Neighbors M...

Cyclades-PR1000 Chapter 10 - CyROS, the Operating System 77 CHAPTER 10 CYROS, THE OPERATING SYSTEM This chapter explains various operating system features that are not covered in other chapters: • creation of the host table • creation of user accounts and passwords • IP Accounting Creation of the ho...

Cyclades-PR1000 Chapter 10 - CyROS, the Operating System 79 The super user has access to all menus. The usr user is shown a menu, upon sucessful login, with the items chosen in the user’s profile. The pppauto user is connected directly to the user via PPP. No menu appears. The auto user is connected...

80 Cyclades-PR1000 Chapter 11 - NAT CHAPTER 11 NAT (NETWORK ADDRESS TRANSLATION) NAT exists to convert local IP addresses into Internet “global” IP addresses. Internet IP addresses are assignedby Internet providers. Due to the explosion of the internet, these numbers are scarce. Certain ranges of IP...

82 Cyclades-PR1000 Chapter 11 - NAT NAT Static Translation Table # Global address / port local address / Port Protocol 1 200.240.230.225 / 20 192.168.0.30 / 20 TPC 2 200.240.230.225 / 21 192.168.0.30 / 21 TPC 3 200.240.230.225 / 80 192.168.0.31 / 80 TPC Types of Address Translation In dynamic addres...

85 Cyclades-PR1000 Chapter 11 - NAT STEP FOURIf static translations are to be performed, as described in the example, the parameters in the Static TranslationMenu must be set. A brief explanation of each parameter is given in the table. Static Translation Menu CONFIG =>SECURITY =>NAT =>STAT...

86 Chapter 12 - Filters and Rules Cyclades-PR1000 CHAPTER 12 RULES AND FILTERS There are four basic types of rules: 1 IP filter rules,2 Radius rules (actually a combination of previously defined IP filter rules),3 traffic control rules, and4 transparent bridge rules (similar to IP filter rules, but ...

87 Cyclades-PR1000 Chapter 12 - Filters and Rules Config IP Rule List NameRule StatusRule List TypeDefault ScopeIncoming Rule List NameOutgoing Rule List NameLinked Rule List Name N Add Rule List Rules List Insert as Rule NumberRule StatusScopeRule Priority LevelReserved BandwidthBandwidth Priority ...

88 Chapter 12 - Filters and Rules Cyclades-PR1000 Exterior Router Interior Router Router Extension to Network Bastion Host ETH0 ETH0 192.168.0.2 192.168.0.3 10.0.0.0 172.16.0.0 192.168.0.1 Perimeter Network192.168.0.0 Slot 1 Slot 1 FIGURE 12.2 FIREWALL EXAMPLE Figure 12.2 will be used to show how bo...

89 Cyclades-PR1000 Chapter 12 - Filters and Rules Exterior Router The exterior router is the network’s first defense against attacks. For this reason, it is reasonable to prohibit allpackets except for those explicitly allowed. This is done by choosing the Default Scope to be Deny. Thus, ALL desired...

90 Chapter 12 - Filters and Rules Cyclades-PR1000 Steps necessary to activate filtering on the exterior router in the example: 1 There are two interfaces with two directions each. Filtering on link 1 requires the creation of two rule lists, called exterior_in and exterior_out . Create them using the...

91 Cyclades-PR1000 Chapter 12 - Filters and Rules Rules Lists Rule List Name Rule Default List Linked Status Scope Type Rule List exterior_in Enabled Deny Filterexterior_out Enabled Deny Filter ------------------------------------------------------------------------------FILTER_LIST NAME: exterior_i...

92 Chapter 12 - Filters and Rules Cyclades-PR1000 Interior Router If an interior router exists in the network, the administrator may decide to use a Default Scope of Permit. In this case, all undesired traffic must be excluded by a rule in the rule list. In Figure 12.5, a conceptual equivalent of th...

93 Cyclades-PR1000 Chapter 12 - Filters and Rules The configuration for “Stop forged packets” is shown in the following listing: Rules Lists Rule List Name Rule Default List Linked Status Scope Type Rule List Slot1_in Enabled Permit Filter ------------------------------------------------------------...

94 Chapter 12 - Filters and Rules Cyclades-PR1000 1 Traffic Shaping (the division of bandwidth is strictly adhered to),2 Bandwidth Reservation (the division with the larger priority can steal bandwidth from the others), An example showing the first two types is given in figure 12.6. Network of Clien...

95 Cyclades-PR1000 Chapter 12 - Filters and Rules An Internet provider has three clients connected to the same router. Client A is larger and without traffic control wouldoverwhelm the router to the exclusion of Clients B and C. The administrator decides to divide the flow out of the router(to the I...

97 Cyclades-PR1000 Chapter 12 - Filters and Rules Rule 1Status Enabled Flow Priority 0 Rule bandwidth 25% Bandwidth priority 2 Protocol 0 Source IP Operator Equal Source IP start 22.22.22.0 Source IP Mask 255.255.255.0 Destination IPOperator None Source Port Operator None Destination PortOperator No...

98 Chapter 12 - Filters and Rules Cyclades-PR1000 An example showing the third type of traffic control is given in Figure 12.8. The network administrator wants to prioritizethe access to his web server. He also wants to prioritize e-mail sent by his SMTP server, but the priority should belower. All ...

99 Cyclades-PR1000 Chapter 12 - Filters and Rules The configured rules will appear as shown in the following listing. Rules ListsRule ListName Rule Default List Linked Status Scope Type RuleList web_access Enabled Traffic Filter_list Name web_access Rule 0 Rule 1 Status Enabled Status Enabled Flow p...

Cyclades-PR1000 Chapter 13 - IPX 100 CHAPTER 13 IPX (INTERNETWORK PACKET EXCHANGE) IPX is an alternative to IP, proprietary to Novell. When IPX is activated, many new menus appear to allowconfiguration of this type of network. IP and IPX can both be active in the router simultaneously, and an interf...

Cyclades-PR1000 Chapter 13 - IPX 101 Enabling IPX The first step is to activate the IPX feature in the router. This is accomplished using the menu option ADMIN=>ENABLE FEATURES => IPX. The IPX protocol must also be activated in the menu CONFIG =>IPX => GENERAL.In this menu, the Internal ...

Cyclades-PR1000 Chapter 13 - IPX 103 The routing table is displayed by the menu option INFO => SHOW ROUTING TABLE => IPX. For the example, andusing only the static route created above, the routing table appears as in Figure 13.2. Destination Interface/ Subinterface/ Remote address hops ticks T...

Cyclades-PR1000 Chapter 14 - Virtual Private Network Configuration 104 CHAPTER 14 VIRTUAL PRIVATE NETWORK CONFIGURATION The Virtual Private Network utility can be used on any link using IP routing. It is used to provide greater securitybetween two or more networks connected through a public communic...

Cyclades-PR1000 Chapter 14 - Virtual Private Network Configuration 106 .................................. ETH0 PR3000 Router RSG3 - RemoteSecurity Gateway Router IP Address: 190.190.190.1 Link 2 IP: 190.190.190.1 Link 1 0.70.70.1 IP: 7 .16.0.0 IP:172 0.0.0.0 IP: 1 Link 1 IP: 50.50.50.1 IP Network IP...

Cyclades-PR1000 Appendix A - Troubleshooting 109 APPENDIX A TROUBLESHOOTING What to Do if the Login Screen Does Not Appear When Using a Console. 1 Check the configuration of the terminal. The correct values are given in chapter 2. Is the PC’s COM port enabled? Is the Console cable being used? See Ch...

Cyclades-PR1000 Appendix A - Troubleshooting 110 What to Do if the Router Does Not Work or Stops Working. 1 Check that the cables are connected correctly and firmly (see chapter 2, What is in the Box, for correct cable connection information). 2 Confirm that the Link LED is lit, indicating proper Et...

Cyclades-PR1000 Appendix A - Troubleshooting 111 Testing the Ethernet Interface After configuring the Ethernet interface, return to the main menu using the <ESC> key as many times as isnecessary. Save the configuration to flash memory (the operating system will ask how to save the configuratio...

Cyclades-PR1000 Appendix A - Troubleshooting 112 current values of the interface parameters. Testing the WAN Interface The WAN interface can be tested using ping as described in the previous section. If the ping is not successful,check the routing table to see if a route to the destination exists (I...

Cyclades-PR1000 Appendix A - Troubleshooting 113 Power 100BT Link TX RX CPU TX RX GP Col FIGURE A.3 LED PANEL

114 Cyclades-PR1000 Appendix B - Hardware Specifications APPENDIX B HARDWARE SPECIFICATIONS General Specifications The Cyclades-PR1000 power requirements and environmental restrictions are listed in Figure B.1. Power Requirements (external DC adapter)Input voltage range 90-264 VAC, 0.5A Input freque...

Appendix B - Hardware Specifications 115 Cyclades-PR1000 External Interfaces The WAN Interface The WAN interface is provided on a DB-25 female connector. The pinout diagram is not shown here, as itdepends on which protocol (RS-232, V.25 or X.21) is configured. Please see the pinout diagrams for thec...

116 Cyclades-PR1000 Appendix B - Hardware Specifications The Console Interface 1 8 CONSOLE PORT Pin RS-232 Signal 1 RTS 2 DTR 3 TX 4 Ground 5 CTS 6 RX 7 DCD 8 DSR FIGURE B.4 CONSOLE INTERFACE - RJ-45 FEMALE

Appendix B - Hardware Specifications 117 Cyclades-PR1000 Cables The Straight-Through Cable 2345678 1517202224 2345678 1517202224 TxDRxDRTSCTSDSRGndDCDTxClk_DTERxClkDTRRITxClk_DCE TxD RxD RTS CTS DSR Gnd DCD TxClk_DTE RxClk DTR RI TxClk_DCE Pin DB-25 MaleDCE / DTE DB-25 Male Cyclades Router Signal St...

120 Cyclades-PR1000 Appendix B - Hardware Specifications The Loop-Back Connector The pin-out diagram for this connector is provided for reference. This connector would only be used for testingthe WAN interface. 23458 20 11 131214151724161925182123 FIGURE B.8 LOOP-BACK CONNECTOR - DB-25 MALE

Cyclades-PR1000 Appendix C - Configuration Without a Console 121 APPENDIX C CONFIGURATION WITHOUT A CONSOLE When a terminal or PC is not available for use as a console, the router has a special feature that allows configurationof the Ethernet interface from any PC on the LAN. The router “adopts” the...

Cyclades-PR1000 Index 122 B Bandwidth Reservation 94Boot Messages 109 C Cables 13 with a DB-25 connector 110 Connection to an Internet Access Provider 24 Cyclades ftp site 10telephones 10 CyROS menus 19 E Ethernet testing the interface 111 F Flash Memory 21Frame Relay 33 DLCI 38 H Hot Keys esc - mov...

Cyclades-PR1000 Index 123 T Technical Support 10Telephone Numbers 10Traffic Rule Lists 93Traffic Shaping 94Troubleshooting 109 U Using CyROS menus 19 V Version of CyROS newest, via ftp 7 of manual newest, via ftp 7

Cyclades Corporation 41829 Albrae Street Fremont, CA 94538 - USA Phone: (510) 770-9727 Fax: (510) 770-0355 www.cyclades.com Cyclades South America Phone: 55-11-5033-3333 Fax: 55-11-5033-3388 www.cyclades.com.br Cyclades Germany Phone: +49 (0)81 22 90 99-90 Fax: +49 (0)81 22 90 999-33 www.cyclades.de...