HP Digital NetRider - Manual

vi Preparing Telnet Listeners for Initialization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 Do This. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-3 Initializing the Acces...

viii 7 TCP/IP Network Characteristics Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

ix Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-25BOOTP Server Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-25Learning Operation . . . . . . ...

x Displaying AppleTalk Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-12 Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-12Displaying AppleTalk Rout...

xi Specifying LONGBREAK LOGOUT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-13Specifying INACTIVITY LOGOUT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-14Specifying the INACTIVITY TIMER . . . . . . . . . . . . . . . . . ...

xii Establishing a Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-18Response to Momentary Loss of CTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-19Disconnecting. . . . . . . . . . . . . . . . . ....

xiv Displaying Session Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-48Terminating Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-51 12 Configuring and Managing LAT Se...

xv Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-2Configuring a Printer for Access Through a Telnet Listener . . . . . . . . . . . . . . . . . . . . . . . . 13-2Configuring a Computer for Access Through a T...

xvi Control and Data Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-2Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-4 Configuring LPD . . . ...

xvii Enabling CSLIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-13Disabling CSLIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-13Automatic CSLIP . . . . . ...

xx Displaying LCP Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19-12Displaying IPCP Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19-14Displaying ATCP Status . . . . . . ....

xxi Novell Operation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20-17 Operational Checkout and Diagnosis. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20-19 Verifying Configuration . . . ...

xxii Defining Dialer Script Strings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21-4 Assigning the Dialer Script to a Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21-6 Steps . . . . . . . . . . . . ....

xxiv 23 Accounting Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23-1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

xxv A Cable and Adapter Recommendations Cable and Adapter Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .A-1 Cable and Adapter Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

xxvii Preface Overview Purpose Network Access Server Management is written for the person who sets up, maintains, and manages any one of the Digital Equipment Corporation family of network access servers. To use this manual, you must be familiar with using a terminal on a Digital Equipment Corporati...

xxviii Conventions This manual uses the following conventions: • The Return key, which you must press to execute all commands, is not shown in command line displays. • The Local> prompt, which appears in most examples, is the default access server prompt. You can change this prompt to something o...

xxix Associated Documents Refer to the following documentation for additional information: • LAT Network Concepts — Provides an overview of the LAT protocol. • Terminal Server Manager Installation and Use — Provides the procedures to install and use TSM. • DECserver 700 Site Preparation and Maintena...

xxx How to Order Additional Documentation To order additional documentation, use the following information: To Order: Contact: By Telephone USA (except Alaska, New Hampshire, and Hawaii): 1-800-DIGITAL (1-800-344-4825) Alaska, New Hampshire, and Hawaii: 1-603-884-6660 Canada: 1-800-267-6215 Electron...

xxxi Correspondence Documentation Comments If you have comments or suggestions about this document, send them to the DIGITAL documentation organization. Online Services To locate product-specific information, refer to the following online services: BBS To read the Bulletin Board System, set your mod...

DNAS Management 1-1 Chapter 1 DNAS Management Overview Introduction This chapter describes the tasks that the following types of users perform when managing the access server: • System administrators who configure and manage the access server • End users of network services and applications In This ...

Configuration Tasks for System Administrators 1-2 DNAS Management Configuration Tasks for System Administrators Configuration Tasks The following table lists the tasks that system administrators can perform when configuring an access server and the chapter of this manual that describes each task: De...

DNAS Management 1-3 Management Tasks for System Administrators Management Tasks for System Administrators System Management Tasks The following table lists the tasks that system administrators can perform to manage the access server. This table also lists the chapter that describes each task. To Man...

User Tasks 1-4 DNAS Management User Tasks Introduction The access server enables end users to perform tasks such as connecting to network resources and managing sessions. For a description of these tasks, refer to the Specifying the Telnet Client Session Profile section in Chapter 11. Accessing Onli...

DNAS Management 1-5 Storage of Configuration Settings and Changes in Memory Storage of Configuration Settings and Changes in Memory Memory Types The access server stores configuration settings in two types of memory: • Permanent data is stored in nonvolatile random access memory (NVRAM). • Operation...

Commands to Display and Change Configuration Settings 1-6 DNAS Management Commands to Display and Change Configuration Settings Introduction This section lists the type of commands that operate on the configuration settings stored in VRAM and NVRAM. The CHANGE and SET commands listed in the followin...

Management Tools 2-1 Chapter 2 Management Tools Overview Introduction This chapter describes the tools for managing the access server. These tools are: • Access server commands • Help • Console port • Remote console port • Access Server Manager, a PC-based management tool In This Chapter This chapte...

Access Server Commands 2-2 Management Tools Access Server Commands Introduction The access server has a command line interface. You enter commands at a prompt on a terminal attached to an access server port. The default for the prompt is: Local> Reference For a complete description of command syn...

Management Tools 2-3 Access Server Commands User Groups For practical purposes, the access server command set syntax is divided into command groups. These groups are: • Command descriptions • CLEAR/PURGE commands • SET/DEFINE/CHANGE commands • SHOW/LIST/MONITOR commands In the above list, the comman...

Access Server Commands 2-4 Management Tools Reference For more information about this command group and its qualifiers, please refer to the Network Access Server Command Reference. Privileged Commands To manage and configure the network, you use privileged commands. To enable privileged commands, us...

Management Tools 2-5 Help Help Introduction The access server provides online help about access server commands. This section describes two types of online help that are available on the access server. HELP TUTORIAL Command The command HELP TUTORIAL provides a brief introduction to the access server...

Console Port 2-6 Management Tools Console Port Displaying Port Parameters The console port receives the access server system messages. An access server can have only one console port at a time. The default console port number is 1. To change the console port, use the SET/DEFINE/CHANGE CONSOLE PORT c...

Management Tools 2-7 Remote Console Port Remote Console Port Description The remote console port is a logical port that enables you to configure the access server from a remote terminal on the network. Features of the Remote Console Port The following table lists the features that distinguish the re...

Remote Console Port 2-8 Management Tools OpenVMS Utility — Terminal Server Manager For OpenVMS systems, DIGITAL offers the Terminal Server manager (TSM) to facilitate managing the access server using the MOP remote console. TSM allows the user to store access information such as the maintenance pass...

Management Tools 2-9 Remote Console Port Example: Using NCP to Connect to an Access Server Remote Console Port from a Load Host The following example shows a connection from an OpenVMS DECnet Phase IV load host to an access server that has the DECnet node name SHRIMP. The maintenance password is FED...

Remote Console Port 2-10 Management Tools Example: Using MOP to Connect to an Access Server from a DECnet/OSI OpenVMS Node The following example shows a connection from a DECnet/OSI OpenVMS node to an access server remote console port. In this example: • The access server has a DECnet node name of D...

Management Tools 2-11 Remote Console Port Example: Using CCR to Connect to an Access Server from an ULTRIX DECnet Node The following example shows a connection from an ULTRIX DECnet node to an access server remote console port. In this example: • The access server has the DECnet node name DRUMCORPS....

Remote Console Port 2-12 Management Tools Characteristics of the Telnet Remote Console Port The following table describes the characteristics for Telnet remote console connections on the access server: Characteristic Description Number of connections allowed on the remote console port at one time 1 ...

Management Tools 2-13 Access Server Manager Access Server Manager Description The Access Server Manager application is a management tool for DECserver access servers. It runs on 32-bit Windows-based operating systems. The Access Server Manager has a graphical user interface that allows you to easily...

User Interface 3-1 Chapter 3 User Interface Overview Introduction This chapter describes how to customize and manage the user interface to the access server. The access server provides two features to manage the user interface: • A command group defines a set of commands that a specified group of us...

Command Groups and Menus 3-2 User Interface Command Groups and Menus Description In addition to convenience, command groups and menus provide the access server with a security feature. Since command groups and menus both have an associated port list, you can control which users can access them. Comm...

User Interface 3-3 Using Command Groups Using Command Groups Creating a Command Group To create a command group, follow these steps: Example: Defining a Command Group The following example shows how to enter individual commands to define a typical command group. In this command group, the values %P1...

Using Command Groups 3-4 User Interface Executing a Command Group To execute a command group, use the DO command. Example: Executing a Command Group The following example executes the command group SERVICE_A defined in the previous example. When this command executes, it substitutes the value 3 for ...

User Interface 3-5 Using Menus Using Menus Displaying a List of Enabled Menus To display a list of the menus enabled on a port, use the SHOW MENU command. If you are a privileged user, the SHOW MENU command displays the names of all menus available on the access server. To enable a menu on a port, y...

Using Menus 3-6 User Interface Assigning a Default Menu to a Port To assign a default menu to a port, use the DEFINE PORT n DEFAULT MENU command. If a port has a default menu, it displays whenever you: • Log in to the port. • Press the Local Break key or enter the Local Switch character while in a h...

User Interface 3-7 Using Menus Figure: Windows on Access Server Menus The following figure shows a typical access server menu:

Defining Menus 3-8 User Interface Defining Menus Introduction This section describes how to define menus and provides examples. Reference For complete information about the commands mentioned in this section, refer to the Network Access Server Command Reference. Main Menu Whenever the server has its...

User Interface 3-9 Defining Menus Main Menu Display The following figure shows how the Main Menu displays on the screen: Defining Menu Choices For each menu choice line, you can define: • One line of display text • A server command, which can: — Specify up to 8 optional input parameters — Be a DO co...

Defining Menus 3-10 User Interface Example: Sample Definition of a Menu Selection The following example shows one way to define the selection Open Telnet Session that appears on line 5 of the main menu: Local> CHANGE MENU MAIN LINE 5 DISPLAY "OPEN TELNET SESSION" Local> CHANGE MENU MAI...

User Interface 3-11 Defining Menus If the port is type ANSI, menu items can be selected by either using the up- and down-arrow keys or by entering the item number. To use the arrow keys, press the up- or down-arrow key until the desired item is highlighted and press Return. If the port is type SOFTC...

Defining Menus 3-12 User Interface Line 7 Execute: CONNECT TELNET 195.20.0.15 Line 7 Display: TCP/IP Host Line 9 Display Logout Line 9 Logout LOGOUT Purging Menu Lines and Entire Menus Use the PURGE MENU command to delete a string from a menu line, an entire menu line, an entire menu, or all menus f...

Managing Load Hosts 4-1 Chapter 4 Managing Load Hosts Overview Introduction This chapter describes the command procedures that you use to manage hosts that load the access server software image on a LAT network. In This Chapter This chapter contains the following topics: • DSV$CONFIGURE • DSVCONFIG ...

Load Host Procedures 4-2 Managing Load Hosts Load Host Procedures Description The specific command procedure that you use to manage the load host depends on the network version, protocol, and operating system of the load host. The following table lists the available combinations, with a reference to...

Managing Load Hosts 4-3 DSV$CONFIGURE DSV$CONFIGURE Introduction DSV$CONFIGURE is a command procedure that runs on a DECnet Phase IV OpenVMS load host or on a DECnet/OSI OpenVMS load host. This procedure enables you to: • Maintain configuration information about access servers. • Modify the local MO...

DSV$CONFIGURE 4-4 Managing Load Hosts Example: Starting DSV$CONFIGURE and Displaying Help The following example shows how to use the symbol DSV to start DSV$CONFIGURE. This example also shows how to use HELP to display a list of DSV$CONFIGURE commands. The remainder of this section explains each com...

Managing Load Hosts 4-5 DSV$CONFIGURE Example: DSV$CONFIGURE ADD Command This example shows the ADD command on a DECnet/OSI system. In this example, at the end of each line you must press return to continue. DSV> ADD SERVER _Server Name: DGD700 _Ethernet Address: 08-00-2B-26-AE-32 _Server Type: D...

DSV$CONFIGURE 4-6 Managing Load Hosts Example: DELETE Command for DSV$CONFIGURE The following example shows the DELETE command. This example omits the optional SERVER keyword. In this example, NCL displays the message NODE 0 MOP Client DGD700 on a DECnet/OSI system. NCP displays a similar message on...

Managing Load Hosts 4-9 DSVCONFIG DSVCONFIG Introduction DSVCONFIG is a menu-driven command procedure that runs on DECnet Phase IV and DECnet/OSI ULTRIX load hosts. This procedure enables you to: • Store configuration data about the access server in the DECnet node databases. • Downline load the sof...

Using a BOOTP/TFTP Server 4-10 Managing Load Hosts Using a BOOTP/TFTP Server Introduction A BOOTP/TFTP server is a UNIX host that downloads the access server software using the BOOTP and TFTP protocols. The BOOTP/TFTP server stores the information necessary to downline load the access server softwar...

Managing Load Hosts 4-11 Using a BOOTP/TFTP Server Remote Connection Password DNAS has a password feature for remote logins, similar to the main login password. DNAS uses a single value for the remote password server-wide that is separate from the main login password. The factory default value is th...

Upline Dumping 4-12 Managing Load Hosts Upline Dumping Introduction The access server upline dumps its memory when: • An unexpected failure occurs. • You force a crash. The access server always dumps to a load host with the protocol that was used for its download. After an upline dump, the access se...

Initializing the Access Server 5-1 Chapter 5 Initializing the Access Server Overview Introduction This chapter describes how to initialize the access server. Initializing the access server reloads the software image. Initializing the access server does not affect the configuration settings stored in...

Preparing LAT Services for Initialization 5-2 Initializing the Access Server Preparing LAT Services for Initialization Do This If the access server offers LAT services, follow these steps before you initialize: The time that it takes for the queue to empty depends upon the number of requests that it...

Initializing the Access Server 5-3 Preparing Telnet Listeners for Initialization Preparing Telnet Listeners for Initialization Do This If the access server has Telnet listeners, follow these steps before you initialize: Step Action 1 Disable further Telnet connections. The network access server fail...

Initializing the Access Server 5-4 Initializing the Access Server Initializing the Access Server Using the INITIALIZE Command To use the INITIALIZE command, log in to one of the following: • A terminal attached to the access server • The remote console port Login Methods You can use any of the follo...

Initializing the Access Server 5-5 Initializing the Access Server Specifying Initialization from a Load Host To specify initialization from a network load host, use the following command: Local> INITIALIZE FROM ETHERNET This command causes the access server to request the image name stored in its...

Initializing the Access Server 5-6 Initializing the Access Server Using the DIAGNOSE Option with INITIALIZE Using the DIAGNOSE option with INITIALIZE enables you to test the access server hardware. You can specify three types of tests as described in the INITIALIZE DIAGNOSE Option Tests. The followi...

Initializing the Access Server 5-7 Using NCP to Initialize the Access Server Using NCP to Initialize the Access Server NCP Initialization Commands The following table shows the NCP commands used to initialize the access server if you are on a load host: The NCP LOAD and TRIGGER commands do not have ...

Booting from the Network 5-8 Initializing the Access Server Booting from the Network Loading the Software Image If your network server is configured with Flash RAM, but does not have the correct image, the access server performs a network load. Determining Boot Protocols During the network boot sequ...

Initializing the Access Server 5-9 Booting Using Console Commands Booting Using Console Commands Introduction Console functions require DECserver ROM Version 4.0 or greater. If you program Flash RAM with a nonstandard boot image name and a load host is not available, pressing the reset-to-factory bu...

Booting Using Console Commands 5-10 Initializing the Access Server Boot Command Options The following table lists the command options you can select for the boot command: Option Definition Associated Options B This command, without an argument, starts a new boot sequence to load the access server wi...

Configuring LAT Characteristics 6-1 Chapter 6 Configuring LAT Characteristics Overview In This Chapter This chapter describes how to configure the LAT characteristics for the access server. This chapter contains the following topics: • LAT Characteristics • Displaying LAT Characteristics • ANNOUNCEM...

LAT Characteristics 6-2 Configuring LAT Characteristics LAT Characteristics Preparing to Change LAT Characteristics Before you change LAT characteristics, make sure to: • Install the latest software image on the access server and all load hosts. • Read the release notes. • Know what devices and cabl...

Displaying LAT Characteristics 6-4 Configuring LAT Characteristics Displaying LAT Characteristics Command To Use To display the current LAT characteristics, use the SHOW/LIST/MONITOR SERVER command as shown in the following example. LAT Characteristics Display Example The following example shows a t...

Configuring LAT Characteristics 6-5 ANNOUNCEMENTS Characteristic ANNOUNCEMENTS Characteristic Introduction The ANNOUNCEMENTS characteristic determines if the access server sends LAT multicast messages about local services over the Ethernet. The access server does not send any announcements if no loc...

CIRCUIT TIMER Characteristic 6-6 Configuring LAT Characteristics CIRCUIT TIMER Characteristic Introduction The CIRCUIT TIMER characteristic defines the interval at which the access server sends virtual circuit messages to the LAT service node. This value is important for balancing fast response time...

Configuring LAT Characteristics 6-7 IDENTIFICATION Characteristic IDENTIFICATION Characteristic Introduction The IDENTIFICATION characteristic is a string that can be up to 40 characters long. This string displays: • Under the welcome banner during a login procedure • In the SHOW SERVER displays The...

KEEPALIVE TIMER Characteristic 6-8 Configuring LAT Characteristics KEEPALIVE TIMER Characteristic Introduction The KEEPALIVE TIMER characteristic maintains a virtual circuit between the access server and service node when no messages are exchanged over a period of time. If the keepalive timer expire...

Configuring LAT Characteristics 6-9 MULTICAST TIMER Characteristic MULTICAST TIMER Characteristic Introduction The MULTICAST TIMER characteristic determines the interval at which a service node sends service announcements. Multicast Timer Default Values You can specify a value from 10 to 180 seconds...

ACCESS SERVER NAME Characteristic 6-10 Configuring LAT Characteristics ACCESS SERVER NAME Characteristic Introduction The SERVER NAME characteristic is a string of 1 to 16 characters. This name must be unique on the LAT network. When the access server offers a service, it periodically multicasts the...

Configuring LAT Characteristics 6-11 NODE LIMIT Characteristic NODE LIMIT Characteristic Introduction The NODE LIMIT characteristic specifies the maximum number of LAT service nodes that the access server maintains in its node database. The range is from 1 to 2000, and the default is 200. You can al...

Access SERVER NUMBER Characteristic 6-12 Configuring LAT Characteristics Access SERVER NUMBER Characteristic Introduction Each access server has a number that uniquely identifies it. Access SERVER NUMBER Values This number is a value from 0 to 32,767. The default is 0. When the access server offers ...

Configuring LAT Characteristics 6-13 PASSCHECK Characteristic PASSCHECK Characteristic Introduction The PASSCHECK characteristic determines whether a host is required to provide a password as part of a host initiated contact (HIC) request to a password-protected local service. With PASSCHECK disable...

QUEUE LIMIT Characteristic 6-14 Configuring LAT Characteristics QUEUE LIMIT Characteristic Introduction The LAT QUEUE LIMIT characteristic specifies the maximum number of outstanding connection requests for remote access to access server ports. The range is from 0 to 200, and the default is 100. Spe...

Configuring LAT Characteristics 6-15 RETRANSMIT LIMIT Characteristic RETRANSMIT LIMIT Characteristic Introduction The RETRANSMIT LIMIT characteristic specifies the number of times that the access server resends a message without an acknowledgment. After the specified time limit, the access server ti...

RESPONDER Characteristic 6-16 Configuring LAT Characteristics RESPONDER Characteristic Access Server Mapping In order to connect to other nodes on the LAN, the access server must be able to map node names, port names, and services to specific nodes. Datagram Types LAT provides the following specific...

Configuring LAT Characteristics 6-17 RESPONDER Characteristic Changing the RESPONDER Characteristic The factory default setting for the RESPONDER characteristic is disabled. To enable it, use the following command: Local> CHANGE SERVER RESPONDER ENABLED Use the SHOW SERVER command to determine th...

Service Groups 6-18 Configuring LAT Characteristics Service Groups Introduction A service group defines the access that service nodes and port users have to the network. Each service group has an identifying number from 0 to 255. Viewing Service Groups To view service groups that have access to serv...

TCP/IP Network Characteristics 7-3 Configuring the Internet Address and Subnet Mask Configuring the Internet Address and Subnet Mask Tasks You can perform the following tasks: • Set an Internet address. • Set a subnet mask. • Display the Internet address and subnet mask. Alternative: Learning IP Inf...

Configuring the Internet Address and Subnet Mask 7-4 TCP/IP Network Characteristics Setting an Internet Subnet Mask The Internet subnet mask is used to partition the host section of an Internet address into subnets. The default subnet mask depends on the class of the Internet address that you assign...

Configuring the Internet Address and Subnet Mask 7-6 TCP/IP Network Characteristics Displaying the Internet Address and Subnet Mask To display the Internet address and subnet mask, use the SHOW/LIST/MONITOR INTERNET command. Internet Address and Subnet Mask Display Example The following example show...

TCP/IP Network Characteristics 7-7 Configuring Domain Name System (DNS) Characteristics Configuring Domain Name System (DNS) Characteristics Tasks This section describes how to display and set the access server characteristics for the Internet domain name system (DNS) to resolve host names into Inte...

Configuring Domain Name System (DNS) Characteristics 7-8 TCP/IP Network Characteristics Nameservers (Learned): 99.99.99.99 Local name.acme.com 88.88.88.88 Local secondary.acme.com DHCP server: 16.20.244.250 Local> The following table describes the DNS characteristics that appear in the previous e...

TCP/IP Network Characteristics 7-9 Configuring Domain Name System (DNS) Characteristics Displaying the DNS Counters To display the DNS counters, use the SHOW/LIST INTERNET NAME RESOLUTION COUNTERS command. To reset the DNS counter, use the ZERO INTERNET NAME RESOLUTION COUNTERS command. DNS Counter ...

Configuring Domain Name System (DNS) Characteristics 7-10 TCP/IP Network Characteristics Configuring the Default Name Resolution Domain Configuring the default domain name characteristic enables you to abbreviate Internet host names in commands. To configure the Default Name Resolution Domain, use t...

TCP/IP Network Characteristics 7-11 Configuring Domain Name System (DNS) Characteristics The following example shows the procedure for and results of configuring the default name resolution to FINANCE.ACME.COM: Using Trailing Dots The access server uses a sequence of name resolution attempts when yo...

Configuring Domain Name System (DNS) Characteristics 7-12 TCP/IP Network Characteristics Changing the Time Limit The domain name resolution time limit specifies the time that the access server waits before it resends a query to a name server. The range is from 1 to 10 seconds, and the default is 4 s...

TCP/IP Network Characteristics 7-13 Configuring Domain Name System (DNS) Characteristics Configuring a List of Commonly Used Internet Hosts You can optionally enter commonly used Internet host names and addresses in the access server cache. The following command shows how to do this: Local> CHANG...

Configuring Domain Name System (DNS) Characteristics 7-14 TCP/IP Network Characteristics A local name server is any name server that is authoritative for the default domain of the access server. Before adding a local name server, you must first define the access server domain name. The following exa...

TCP/IP Network Characteristics 7-15 Configuring Domain Name System (DNS) Characteristics If the access server cannot reach a learned name server because of gateway restrictions outside the server, it does not flag the unreachable name server. This can often cause name resolution to time out and fail...

Configuring a List of Internet Gateway Addresses 7-16 TCP/IP Network Characteristics Configuring a List of Internet Gateway Addresses Introduction If the access server users need to access hosts in different networks or subnets, you can define a database of Internet gateways. The access server uses ...

TCP/IP Network Characteristics 7-17 Configuring a List of Internet Gateway Addresses Defining Networks Available Through a Specific Gateway To indicate that the access server can reach a given network through a specific gateway, use the DEFINE/SET/CHANGE INTERNET GATEWAY command with the NETWORK par...

Configuring a List of Internet ARP Entries 7-18 TCP/IP Network Characteristics Configuring a List of Internet ARP Entries Introduction The list of address resolution protocol (ARP) entries maps Internet addresses to Ethernet hardware addresses for devices on the same network as the access server. Yo...

TCP/IP Network Characteristics 7-19 Setting the TCP Keepalive Timer Setting the TCP Keepalive Timer What the Timer Does The TCP keepalive timer determines whether a TCP connection with a remote host is active and should remain open. After the access server and a remote host establish a TCP connectio...

Setting the TCP Keepalive Timer 7-20 TCP/IP Network Characteristics Retry Set Example The following example show how to set the maximum number of keepalive probes that the access server sends (10): Local> CHANGE INTERNET TCP KEEPALIVE RETRY 10 Displaying Timer Characteristics Use the SHOW/LIST IN...

TCP/IP Network Characteristics 7-21 Displaying the Internet Counters Displaying the Internet Counters Using the SHOW Command Use the SHOW/LIST/MONIITOR INTERNET command to display the Internet counters. To reset the Internet counters, use the ZERO INTERNET COUNTERS command. To reset the Internet cou...

Displaying the Internet Counters 7-22 TCP/IP Network Characteristics Internet Counter Display Fields The following table describes the fields in a typical Internet counters display: Field Description TCP Segments The following counters contain statistics on TCP segments: Transmitted: Total number of...

Learning IP Information From a BOOTP Server 7-26 TCP/IP Network Characteristics Setting Up IP Configuration Learning Do the following to set up your access server to learn IP configuration information from a BOOTP server on the network: Step Action 1 Set up the BOOTP server: a) Add an entry for the ...

TCP/IP Network Characteristics 7-27 Learning IP Information From a DHCP Server Learning IP Information From a DHCP Server Description You can use the Dynamic Host Configuration Protocol (DHCP) to automatically configure TCP/IP characteristics on the access server and remote clients. DHCP provides dy...

Learning IP Information From a DHCP Server 7-28 TCP/IP Network Characteristics DHCP Client Operation During initialization, the access server acts as a DHCP client to obtain IP configuration parameters (excluding the IP address; use a BOOTP server or the DEFINE INTERNET ADDRESS command to configure ...

TCP/IP Network Characteristics 7-29 Learning IP Information From a DHCP Server DHCP Proxy Operation The access server can act as a DHCP proxy to provide IP address assignment for most remote clients. IP Address Assignment When you enable DHCP, the access server sends requests for IP addresses to a D...

Learning IP Information From a DHCP Server 7-30 TCP/IP Network Characteristics IP Address Renewals When the DHCP server assigns an IP address to a remote client, it “leases” the address to the remote client for a finite or infinite amount of time. If the lease is about to expire and the remote clien...

TCP/IP Network Characteristics 7-31 Assigning WINS Server Addresses Assigning WINS Server Addresses What Does WINS Do? Windows Internet Naming Service (WINS) performs NetBIOS name and IP address resolution, similar to the Domain Name Service (DNS). WINS allows systems that use NetBIOS to communicate...

Assigning WINS Server Addresses 7-32 TCP/IP Network Characteristics Assigning WINS Addresses If you enable DHCP on the access server, it receives the WINS server addresses from a DHCP server on the network and writes the values to VRAM when you reinitialize the access server. When a remote client se...

TCP/IP Network Characteristics 7-33 Assigning WINS Server Addresses Nameservers (Learned): 99.99.99.99 Local name.acme.com 88.88.88.88 Local secondary.acme.com DHCP server: 16.20.244.250 Local> The following table lists the WINS characteristics displayed in the previous example. (See the Displayi...

Managing AppleTalk 8-1 Chapter 8 Managing AppleTalk Overview Introduction This chapter explains how to configure and manage the AppleTalk protocol suite on an access server. In This Chapter This chapter contains the following topics: • Configuring AppleTalk on an Access Server • Displaying AppleTalk...

Configuring AppleTalk on an Access Server 8-2 Managing AppleTalk Configuring AppleTalk on an Access Server Introduction You can configure an access server to act as an AppleTalk node on the network and many different components can then be monitored. The configuration of the AppleTalk characteristic...

Managing AppleTalk 8-3 Configuring AppleTalk on an Access Server Disabling AppleTalk If you decide that your access server should no longer act as an AppleTalk node, all AppleTalk capabilities can be turned off using the following privileged DEFINE command: Local> DEFINE APPLETALK DISABLED Reinit...

Managing AppleTalk 8-5 Displaying AppleTalk Characteristics Displaying AppleTalk Characteristics Commands Use the LIST APPLETALK CHARACTERISTICS command to display the AppleTalk characteristics. This command is nonprivileged. Use the SHOW/MONITOR APPLETALK STATUS command to see the values being used...

Displaying AppleTalk Counters 8-6 Managing AppleTalk Displaying AppleTalk Counters Command Use the SHOW/MONITOR APPLETALK COUNTERS command to display the AppleTalk counters on an access server. The command is nonprivileged. Displaying AppleTalk Counters Example The following example shows a typical ...

Managing AppleTalk 8-9 Displaying AppleTalk Counters AARP Values Two important counter values are those for AARP. Unsent AARP probes or responses can indicate network problems. This happens when the access server is too overloaded to respond to AARP requests. When there are unsent probes, other Appl...

Displaying AppleTalk Status 8-10 Managing AppleTalk Displaying AppleTalk Status Command Use the SHOW/MONITOR APPLETALK STATUS command to display the AppleTalk status on the access server. The command is nonprivileged. Displaying AppleTalk Status Example The following example shows how to display the...

Displaying AppleTalk Routes 8-12 Managing AppleTalk Displaying AppleTalk Routes Command Use the SHOW/MONITOR APPLETALK ROUTES command to display the available AppleTalk routes to an access server. The command is nonprivileged. Displaying AppleTalk Routes Example The following example shows how to us...

Displaying AppleTalk ARP Entries 8-14 Managing AppleTalk Displaying AppleTalk ARP Entries Introduction When an attached host sends a message to an unknown AppleTalk node on the access server network, the access server creates an entry in the AppleTalk ARP cache and transmits an ARP request for the n...

Configuring Basic Device Characteristics 9-1 Chapter 9 Configuring Basic Device Characteristics Overview Introduction This chapter explains how to configure the basic characteristics for all types of devices that attach to the access server ports. These devices include: • Standard DIGITAL video term...

Configuring Basic Device Characteristics 9-2 Configuring Basic Device Characteristics Configuring Basic Device Characteristics Introduction If you attach a standard DIGITAL video terminal to an access server port, the basic device characteristics described in this chapter are the only ones that you ...

Displaying Basic Device Characteristics 9-4 Configuring Basic Device Characteristics Displaying Basic Device Characteristics Command To display basic device characteristics, use the SHOW PORT command. Displaying Port Characteristics Example The following example shows how to display the port charact...

Configuring Basic Device Characteristics 9-5 Configuring the ACCESS Characteristic Configuring the ACCESS Characteristic Description The ACCESS characteristic determines which types of devices can use a port. The following table lists and defines the possible values for the port ACCESS characteristi...

Matching the Port and Device Characteristics 9-6 Configuring Basic Device Characteristics Matching the Port and Device Characteristics Introduction You must ensure that the physical characteristics of the access server port match the physical characteristics of the device as described in this sectio...

Configuring Basic Device Characteristics 9-7 Matching the Port and Device Characteristics CHARACTER SIZE and PARITY Settings The AUTOBAUD characteristic functions only if the input and output speeds of the port device are the same and the character size and parity settings have the combinations list...

Matching the Port and Device Characteristics 9-8 Configuring Basic Device Characteristics Example: Changing the PARITY Settings The following example shows how to change the parity: Local> CHANGE PORT 5 PARITY ODD SPEED The SPEED characteristic enables you to configure the port for devices that o...

Configuring Basic Device Characteristics 9-9 Matching the Port and Device Characteristics TYPE The TYPE characteristic indicates the device attached to the port. Device Types The following table lists device types available for each port of the access server: Example: Changing the device TYPE The fo...

Configuring the FLOW CONTROL Characteristic 9-10 Configuring Basic Device Characteristics Configuring the FLOW CONTROL Characteristic Introduction The FLOW CONTROL characteristic allows the access server to start and stop data transfer between the port and the attached device. Flow control prevents ...

Configuring Basic Device Characteristics 9-11 Configuring the FLOW CONTROL Characteristic Example: Enabling XON/XOFF FLOW CONTROL The following example shows how to enable XON/XOFF FLOW CONTROL: Local> CHANGE PORT 5 FLOW CONTROL XON DSR DSR FLOW CONTROL operates as follows: • If the access server...

Configuring the FLOW CONTROL Characteristic 9-12 Configuring Basic Device Characteristics Example: Disabling FLOW CONTROL The following command shows how to disable FLOW CONTROL on port 5 of an access server: Local> CHANGE PORT 5 FLOW CONTROL DISABLED FLOW CONTROL Direction The access server soft...

Configuring Basic Device Characteristics 9-13 Specifying the Automatic Logout Characteristics Specifying the Automatic Logout Characteristics Introduction This section describes the characteristics that you can use to log out a port automatically when the device attached to the port is turned off or...

Specifying the Automatic Logout Characteristics 9-14 Configuring Basic Device Characteristics Specifying INACTIVITY LOGOUT The INACTIVITY LOGOUT characteristic allows you to enable or to disable automatic log out for the port. If INACTIVITY LOGOUT is enabled, the access server automatically disconne...

Configuring Modem Signals 10-1 Chapter 10 Configuring Modem Signals Overview Introduction This chapter describes the various port characteristics that you can use to control the modem signals. You use modem signals to support devices that use these signals, such as modems, computers, and printers. I...

DTE/DCE Device Configuration 10-2 Configuring Modem Signals DTE/DCE Device Configuration Port Configuration The role of the access server in the communication is determined by the configuration of the port and the port device: • If the port access characteristic is set to local, the access server ap...

Configuring Modem Signals 10-3 Determining the Supported Modem Signals Determining the Supported Modem Signals Access Servers and MODEM CONTROL Not all access servers support all modem signals. There are three types of access servers: • Full MODEM CONTROL • MODEM CONTROL Access servers that support ...

Determining the Supported Modem Signals 10-4 Configuring Modem Signals • Set 2 — Data Signal Rate Selector (DSRS) — RING Indicator (RI) — Data Carrier Detect (DCD) — Data Terminal Ready (DTR) DSR/DTR support (Example: DECserver 90TL access server) Data Set Ready (DSR) Data Terminal Ready (DTR) Netwo...

Configuring Modem Signals 10-5 Modem Signals Description Modem Signals Description Types of Modem Signal The following table describes the various modem signals: Modem Signal Description Request To Send (RTS) Asserted by the access server to indicate to the port device that the access server is read...

Configuring Modem Signals 10-7 Specifying MODEM CONTROL and SIGNAL CONTROL Specifying MODEM CONTROL and SIGNAL CONTROL Introduction The MODEM CONTROL and SIGNAL CONTROL characteristics are identical, except that MODEM CONTROL is only used with full MODEM CONTROL access servers, and SIGNAL CONTROL is...

Specifying MODEM CONTROL and SIGNAL CONTROL 10-8 Configuring Modem Signals Example: Enabling MODEM CONTROL The following example shows how to enable MODEM CONTROL on port 5: Local> DEFINE PORT 5 MODEM CONTROL ENABLED Local> LOGOUT PORT 5 Example: Enabling SIGNAL CONTROL The following example s...

Configuring Modem Signals 10-9 Specifying SIGNAL SELECT Specifying SIGNAL SELECT Introduction The SIGNAL SELECT characteristic is used only with MODEM CONTROL access servers. This characteristic determines which of two sets of signals that the access server uses: • CTS, DSR, RTS, and DTR or • RI, DC...

Specifying SIGNAL CHECK 10-10 Configuring Modem Signals Specifying SIGNAL CHECK Introduction The SIGNAL CHECK characteristic allows the access server to check for any modem signal when a host requests a connection. If any one modem signal is present, the access server makes a connection; otherwise, ...

Configuring Modem Signals 10-11 Specifying DTRWAIT Specifying DTRWAIT Description When functioning with modems and computer interfaces, the access server port normally asserts the DTR signal at all times except during a disconnect sequence. However, there are instances when assertion of DTR is undes...

Specifying RING 10-12 Configuring Modem Signals Specifying RING Description The RING characteristic is supported only on those access servers that support the DSRS signal. Certain terminal switches and computers need to detect a RING indicator signal (RI) before they activate. The access server can ...

Configuring Modem Signals 10-13 Specifying ALTERNATE SPEED Specifying ALTERNATE SPEED Description The ALTERNATE SPEED characteristic is only used with full MODEM CONTROL access servers. Two speeds for a modem port can be defined in the access server database: primary and alternate (or fallback). The...

Specifying DIALUP 10-14 Configuring Modem Signals Specifying DIALUP Description The DIALUP characteristic is used to notify LAT service nodes that a port user connected to the service through a dial-in modem. The service node can use this information to implement system security. With DIALUP enabled...

Configuring Modem Signals 10-15 Sample Modem Configurations Sample Modem Configurations Introduction This section provides sample modem configurations for access servers that support full MODEM CONTROL. Configuring a Dial-In Modem on a Full MODEM CONTROL Server The following example provides a sampl...

Sample Modem Configurations 10-16 Configuring Modem Signals Configuring a Dial-Out Modem on a Full MODEM CONTROL Server The following example provides a sample configuration for a dial-out modem operating at 1200 baud with an ALTERNATE SPEED of 300 baud: Local> DEFINE PORT 3 ACCESS REMOTE AUTOBAU...

Configuring Modem Signals 10-17 Sample Modem Configurations Configuring a Dial-Out Modem on a MODEM CONTROL Server The following example provides a sample configuration for a dial-out modem operating at 2400 baud and configured for the RI-DCD-DSRS-DTR signals: Local> DEFINE PORT 3 ACCESS REMOTE A...

MODEM CONTROL Sequences 10-18 Configuring Modem Signals MODEM CONTROL Sequences Introduction Modem-controlled communication requires that the access server recognize what type of device is on a port and detect when this device is ready to communicate and when the device has ceased to communicate. Th...

Configuring Modem Signals 10-19 MODEM CONTROL Sequences 3 After first detecting DSR, the access server monitors the port for CTS and DCD. If it detects CTS and DCD within 30 seconds, the access server enables data flow on the line. If it does not detect CTS and DCD within 30 seconds, the access serv...

Configuring DTR and DSR Signals 10-20 Configuring Modem Signals Configuring DTR and DSR Signals Introduction This section describes how to configure DTR and DSR signals for those access servers that do not support the other modem signals. DSR flow control must be disabled when you are using the vari...

Configuring DTR and DSR Signals 10-22 Configuring Modem Signals Port is logged out if DSR is deasserted after initial assertion. DTR is deasserted for 5 seconds minimum as a consequence of a logout. DTR can only be reasserted when a connection is accepted. Reception of asynchronous data is not accep...

Configuring and Managing Interactive Devices 11-1 Chapter 11 Configuring and Managing Interactive Devices Overview Introduction This chapter explains how to configure and manage interactive devices, such as terminals, terminal-like devices, and personal computers (PCs) in terminal emulation mode. Be...

11-2 Configuring and Managing Interactive Devices • Managing Users • Managing Sessions

Configuring and Managing Interactive Devices 11-3 Configuring an Interactive Device for LAT Sessions Configuring an Interactive Device for LAT Sessions Configuring an Interactive Device for LAT Sessions The following example shows a sample configuration of a device connected to LAT services: Local&g...

Configuring an Interactive Device for LAT Sessions 11-4 Configuring and Managing Interactive Devices Sample Network Configuration The following figure show the sample network configuration for LAT and Telnet sessions: Configuring LAT Group Codes for Interactive Devices Group codes are subdivisions o...

Configuring and Managing Interactive Devices 11-5 Configuring an Interactive Device for LAT Sessions Specifying AUTOCONNECT When you disable the AUTOCONNECT characteristic on a given port, the access server displays the local mode prompt after you log in. You can then enter the CONNECT command to us...

Configuring an Interactive Device for LAT Sessions 11-6 Configuring and Managing Interactive Devices Specifying AUTOPROMPT The AUTOPROMPT characteristic is only used with the LAT protocol. This characteristic controls the initiation of a login process on some service nodes when a session begins. The...

Configuring and Managing Interactive Devices 11-7 Configuring an Interactive Device for LAT Sessions Authentication in Chapter 21 for details. Specifying Failover If a LAT service node suddenly becomes unavailable during a session, the access server searches for another LAT service node that offers ...

Configuring an Interactive Device for LAT Sessions 11-8 Configuring and Managing Interactive Devices The Service Connections Characteristic The service connections characteristic allows you to disable additions to the connection queue when a given service is busy. Changing this characteristic does n...

Configuring and Managing Interactive Devices 11-9 Configuring an Interactive Device for LAT Sessions SHOW QUEUE ALL Display Example The following example shows how to generate a queue display. For each queued request, the displays have one line of information arranged in columns under fixed headings...

Configuring an Interactive Device for LAT Sessions 11-10 Configuring and Managing Interactive Devices Configuring Port Characteristics The port characteristic, remote modification, when enabled, allows a LAT node to modify particular access server port characteristics. These characteristics include ...

Configuring and Managing Interactive Devices 11-11 Configuring an Interactive Device for Telnet Sessions Configuring an Interactive Device for Telnet Sessions Introduction User-oriented characteristics, such as forward switch and VERIFICATION and the various Telnet session characteristics (see Confi...

Configuring and Managing Interactive Devices 11-13 Configuring a Session Management (TD/SMP) Terminal Configuring a Session Management (TD/SMP) Terminal Introduction The MULTISESSION characteristic allows a session management terminal using the terminal device/session management protocol (TD/SMP) to...

Configuring a Session Management (TD/SMP) Terminal 11-14 Configuring and Managing Interactive Devices • The dedicated service characteristic must be disabled. (See the User Account Command Parameters section in this chapter.) Local Mode Command Restrictions During Session Management The following ta...

Configuring and Managing Interactive Devices 11-15 Configuring a Session Management (TD/SMP) Terminal Logging In with Multisessions The following is a typical procedure for logging in at a session management terminal with MULTISESSIONS enabled at the access server port: In local mode, you can enter ...

Configuring On-Demand Loading for Asian Terminals 11-16 Configuring and Managing Interactive Devices Configuring On-Demand Loading for Asian Terminals Introduction Asian terminals implementing the On-Demand Loading (ODL) font protocol can communicate with an OpenVMS load host through an access serve...

Configuring and Managing Interactive Devices 11-17 Configuring for Block-Mode Terminals Configuring for Block-Mode Terminals Description Block-mode terminals do not require any special setup to communicate with a host through an access server. The access server software automatically allows terminal...

Specifying the Telnet Client Session Profile 11-18 Configuring and Managing Interactive Devices Specifying the Telnet Client Session Profile Introduction You can set various features for a Telnet client session. You can either choose a profile that has many of the characteristics predefined or set t...

Configuring and Managing Interactive Devices 11-19 Specifying the Telnet Client Session Profile Telnet Client Session Characteristics Predefined for Each Profile The following table lists the Telnet client session characteristics that are predefined for each profile. Enabling a profile automatically...

Specifying the Telnet Client Session Profile 11-20 Configuring and Managing Interactive Devices 1. If ECHO is in local mode, the ECHO characteristics are suppressed, and characters are not echoed. SWITCH CHARACTERS Enabled Disabled TERMINAL TYPE Use current access server value Use current access ser...

Configuring and Managing Interactive Devices 11-21 Configuring Individual Telnet Client Session Characteristics Configuring Individual Telnet Client Session Characteristics Modifying Telnet Session Characteristics You can modify the Telnet client session characteristics in two ways: at the port leve...

Configuring Individual Telnet Client Session Characteristics 11-22 Configuring and Managing Interactive Devices The following example shows how to disable the BINARY characteristic: Example: Disabling BINARY Characteristics Local> CHANGE PORT 5 TELNET CLIENT BINARY DISABLE Specifying CHARACTER SI...

Configuring and Managing Interactive Devices 11-23 Configuring Individual Telnet Client Session Characteristics Telnet Keymapping Functions The following table shows key function definitions mapped to specific keys. You can disable any of the Telnet commands in this table by using the keyword NONE. ...

Configuring Individual Telnet Client Session Characteristics 11-24 Configuring and Managing Interactive Devices Specifying AUTOFLUSH The AUTOFLUSH characteristic automatically invokes the AO function whenever you enter the IP, SYNCH, AYT, EOR, or BRK characters. AUTOFLUSH aborts all output on its wa...

Configuring and Managing Interactive Devices 11-25 Configuring Individual Telnet Client Session Characteristics • NEWLINE TO TERMINAL — When entered, the character sequence is sent to the user’s terminal whenever a NEWLINE FROM HOST sequence is received. The factory-set default is <CRLF>. • NE...

Configuring Individual Telnet Client Session Characteristics 11-26 Configuring and Managing Interactive Devices The following shows how to enable FLOW CONTROL from port 5 to the device: Local> CHANGE PORT 5 TELNET CLIENT OUTPUT FLOW CONTROL ENABLED Specifying MESSAGE VERIFICATION The MESSAGE VERI...

Configuring and Managing Interactive Devices 11-27 Configuring Individual Telnet Client Session Characteristics Example: Configuring SWITCH CHARACTER The following example shows how to disable the SWITCH CHARACTERs on port 5: Local> CHANGE PORT 5 TELNET CLIENT SWITCH CHARACTER DISABLED Local> ...

Managing Access Server User Accounts 11-28 Configuring and Managing Interactive Devices Managing Access Server User Accounts Minimal Setup for Local User Accounts A limited amount of storage is available for defining user account records within the access server volatile and nonvolatile memory. Note...

Configuring and Managing Interactive Devices 11-29 Managing Access Server User Accounts SHOW/LIST/MONITOR USERACCOUNT Display The following table defines the values in the SHOW USSERACCOUNT display: Authorization Profile Information The access server supports a variety of information in a user or re...

Managing Access Server User Accounts 11-30 Configuring and Managing Interactive Devices Service Types and Access Levels The following table defines the service type and access level: Service Permissions Access The following table shows the type of service permissions a user can have. A user can have...

Configuring and Managing Interactive Devices 11-31 Managing Access Server User Accounts User Account Command Parameters The commands in the following table allow the security manager to manage a small local database to be used for authentication and authorization. The table shows the command keyword...

Managing Access Server User Accounts 11-32 Configuring and Managing Interactive Devices Access Command Variables The following table defines the ACCESS command parameter variables: MAX CONNECT Indicates the maximum number of minutes the user can be logged in before being forcibly logged out. Default...

Configuring and Managing Interactive Devices 11-33 Managing Users Managing Users This section describes various tasks for managing users. Providing a Contact Name and Access Server Location The SET/DEFINE/CHANGE SYSTEM command allows you to provide all access server users with a person’s name to con...

Managing Users 11-34 Configuring and Managing Interactive Devices Example: Enabling a Preferred LAT Service on a Specific Node and Port The following example shows how to specify that port 5 connects to port JAMES on node MARKETING for service FILES: Local> CHANGE PORT 5 PREFERRED FILES NODE MARK...

Configuring and Managing Interactive Devices 11-35 Managing Users Specifying Keys to Switch Between Sessions Access server users can define keys as switches. These keys can switch from one session to another without having to return to local mode. When the user presses the key, the access server int...

Managing Users 11-36 Configuring and Managing Interactive Devices Defining the Break Key The BREAK characteristic defines how the Break key is used. The Break key can be defined in three ways: • LOCAL — Pressing the Break key switches the user from service mode to local mode. This is the factory-set...

Configuring and Managing Interactive Devices 11-37 Managing Users Example: Configuring a Key as a Switch The following example shows how to identify “-” as the local switch for port 3: Local> CHANGE PORT 3 LOCAL SWITCH - Example: Disabling a Local Switch The following example shows how to disable...

Managing Users 11-38 Configuring and Managing Interactive Devices A user with privileges set can use the privileged BROADCAST ALL command to send a message to all interactive users. Example: BROADCAST ALL The following example shows a sample of a message broadcasted to all users: Local> BROADCAST...

Configuring and Managing Interactive Devices 11-39 Managing Users Specifying Message Codes Each access server message has a message code. In the following example, the number 750 is the message code: Local -750- Another port has this name With message codes disabled, the same message would look like...

Managing Users 11-40 Configuring and Managing Interactive Devices Example: Configuring LOCK The following example shows how to enable LOCK on the access server, while disabling LOCK on ports 5 through 7: Local> CHANGE SERVER LOCK ENABLED Local> CHANGE PORT 5-7 LOCK DISABLED Since anyone can LO...

Configuring and Managing Interactive Devices 11-41 Managing Users SHOW/LIST/MONITOR USERS Display Headings The following table provides an explanation of the information in the display in the previous example: Specifying User Groups Nonprivileged users can choose the groups they require for their po...

Managing Users 11-42 Configuring and Managing Interactive Devices Current groups (user-specified groups) are stored only in the operational database. Therefore, users must use the SET PORT command to configure these groups; users cannot use the DEFINE PORT or CHANGE PORT command. Current groups are ...

Configuring and Managing Interactive Devices 11-43 Managing Sessions Managing Sessions This section shows how to initiate and terminate sessions and how to display session information. Initiating a Session to a LAT Service To initiate a session to a LAT service, use the CONNECT LAT command with the ...

Managing Sessions 11-44 Configuring and Managing Interactive Devices Example: Initiating a Session with an Internet Host The following three commands show how to initiate a session with the same host. The first command uses the relative domain name, SALES; the second command uses the absolute domain...

Configuring and Managing Interactive Devices 11-45 Managing Sessions command starts a PING session, which continues until the PING succeeds (and sends a VERIFICATION message) or until the timeout period of 30 seconds is exceeded. The following shows how to test the communication to an Internet host ...

Managing Sessions 11-46 Configuring and Managing Interactive Devices For ports with session management terminals, the kind of terminal at the port further determines the port’s session limit, where the access server port can support up to eight terminal sessions. However, terminal devices typically ...

Configuring and Managing Interactive Devices 11-47 Managing Sessions SHOW/MONITOR SESSIONS Display Fields The following table describes the information in the SHOW/MONITOR SESSIONS display: Field Description Session n Number of the session. First column Status of a session, which can be one of the f...

Managing Sessions 11-48 Configuring and Managing Interactive Devices Displaying Session Characteristics You can display the characteristics of any current LAT or Telnet session. Example: SHOW PORT SESSIONS CHARACTERISTICS Display for a LAT Session The following example displays the characteristics o...

Configuring and Managing Interactive Devices 11-49 Managing Sessions SHOW/MONITOR PORT SESSIONS STATUS Display Fields The following table provides a description of the SHOW/MONITOR PORT SESSIONS STATUS display information: Field Description Do-Binary Enabled — Interpreting all data received as in a ...

Configuring and Managing Interactive Devices 11-51 Managing Sessions Terminating Sessions There are two commands you can use to terminate a session on another port: • The privileged LOGOUT PORT command allows you to manually log out any port, and all sessions terminate at the specified port. If the ...

Configuring and Managing LAT Services 12-1 Chapter 12 Configuring and Managing LAT Services Overview Introduction This chapter explains how to configure devices attached to the access server ports as LAT services. A LAT node can offer devices as LAT services to users on the port itself and other LAT...

Configuring a Port to Offer a LAT Service 12-2 Configuring and Managing LAT Services Configuring a Port to Offer a LAT Service Configuration Parameters After you attach a device to a port and ensure that the port and device characteristics match, you need to specify certain configuration parameters ...

Configuring and Managing LAT Services 12-3 Configuring Access to a LAT Service Configuring Access to a LAT Service Assigning a Service Name A service name is a name you assign to the LAT service using the CHANGE SERVICE NAME command. When you assign a service name, the access server periodically mul...

Configuring Access to a LAT Service 12-4 Configuring and Managing LAT Services Assigning an Identification String A service identification string helps users recognize and use the service. It can be up to 40 characters in length. The factory-set default is no identification string. Example: Assignin...

Configuring and Managing LAT Services 12-5 Configuring Access to a LAT Service Specifying the Service Password An optional service password restricts access to a service. When a service contains a password, the access server prompts you for the password before allowing you to use the service. There ...

Configuration of Specific Types of Devices As LAT Services 12-6 Configuring and Managing LAT Services Configuration of Specific Types of Devices As LAT Services Introduction This section provides examples of configuring the following types of devices as LAT services: • A personal computer (as both a...

Configuring and Managing LAT Services 12-7 Configuration of Specific Types of Devices As LAT Services Local> DEFINE PORT 2 LOCAL SWITCH ^L PASSWORD DISABLED PREFERRED NONE Local> DEFINE PORT 2 SIGNAL CHECK ENABLED SIGNAL CONTROL DISABLED Local> LOGOUT PORT 2 Local> CHANGE SERVER SERVICE ...

Configuration of Specific Types of Devices As LAT Services 12-8 Configuring and Managing LAT Services Configuring a Modem As a LAT Service The following example shows a sample configuration of a dial-out modem used as a LAT service: Local> DEFINE PORT 3 ACCESS REMOTE AUTOBAUD DISABLED Local> D...

Configuring and Managing LAT Services 12-9 Configuration of Specific Types of Devices As LAT Services Configuring a Printer As a LAT Service After you configure a printer as a LAT service, you need to set up the appropriate LAT remote print queue as described in the following sections of this chapte...

Configuration of Specific Types of Devices As LAT Services 12-10 Configuring and Managing LAT Services Creating a Logical Device to Access a Printer Service The following example shows how to run LATCP to create a logical device. This example configures the logical port LTA1925 to access the LAT ser...

Configuring and Managing LAT Services 12-11 Configuration of Specific Types of Devices As LAT Services $! $SET DEVICE LTA1925: /SPOOLED=(LN03_QUE,SYS$SYSDEVICE:) $! $DEFINE/FORM LN_FORM 10 /WIDTH=60 /STOCK=DEFAULT /TRUNCATE $! $! Initialize and start the print queue $! $INIT/QUE /START /PROCESSOR=LA...

Configuring and Managing LAT Services 12-13 Configuring a Printer with Unannounced Availability Configuring a Printer with Unannounced Availability Introduction This section describes how to configure a printer with unannounced availability. The only users that know about the device’s availability a...

Configuring a Printer with Unannounced Availability 12-14 Configuring and Managing LAT Services Example: Configuring a Printer with Unannounced Availability on a LAT Network on Port 4 Local> DEFINE PORT 4 ACCESS REMOTE AUTHORIZED GROUPS 10,24,46 Local> DEFINE PORT 4 AUTOBAUD DISABLED AUTOCONNE...

Configuring and Managing LAT Services 12-15 Verifying the LAT Service Verifying the LAT Service Do This To verify whether the service is functioning, try connecting to the new service. Once connected, you can assess whether the device responds appropriately. The appropriate response depends on what ...

Managing Your Access Server As a LAT Node Offering a Service 12-16 Configuring and Managing LAT Services Managing Your Access Server As a LAT Node Offering a Service Introduction By default, once there is a service, the access server functions as a service node by issuing multicast service announcem...

Configuring and Managing LAT Services 12-17 Managing Your Access Server As a LAT Node Offering a Service Example: SHOW SERVICE CHARACTERISTICS Display The following example below shows how to generate a service characteristics display for the service named PRINTER: Local> SHOW SERVICE PRINTER CHA...

Managing Your Access Server As a LAT Node Offering a Service 12-18 Configuring and Managing LAT Services Displaying Services Status The SHOW/LIST/MONITOR SERVICE STATUS command displays information about the operational condition of the network and its services, including services offered by your ac...

Configuring and Managing LAT Services 12-19 Managing Your Access Server As a LAT Node Offering a Service Example: SHOW SERVICE STATUS Display The following example shows how to generate a service status display for a service named DEVELOP: Local> SHOW SERVICE DEVELOP STATUS Service DEVELOP - Avai...

Managing Your Access Server As a LAT Node Offering a Service 12-20 Configuring and Managing LAT Services Displaying Services Summary The SHOW/MONITOR SERVICES SUMMARY command displays one line of information on each selected service or services. Use the keyword LOCAL to obtain information on locally...

Configuring and Managing LAT Services 12-21 Managing Your Access Server As a LAT Node Offering a Service Example: SHOW SERVICE SUMMARY Display The following example shows how to generate a service summary display for all network services: Local> SHOW SERVICES ALL SUMMARY Service Name Status Ident...

Configuring and Managing Telnet Servers 13-1 Chapter 13 Configuring and Managing Telnet Servers Overview Introduction This chapter explains how to configure various types of devices as a Telnet or raw TCP server. A Telnet or raw TCP server is a resource on a TCP/IP network. To use the procedures in ...

Sample Device Configurations 13-2 Configuring and Managing Telnet Servers Sample Device Configurations Introduction This section provides examples of configuring the following types of devices for access through a Telnet listener: • A printer • A computer • A modem You must configure the device and ...

Configuring and Managing Telnet Servers 13-3 Sample Device Configurations Local> CHANGE TELNET LISTENER 2010 PORTS 4 ENABLED Local> CHANGE TELNET LISTENER 2010 IDENTIFICATION "PRINTER" Local> CHANGE TELNET LISTENER 2010 CONNECTIONS ENABLED Configuring a Computer for Access Through a...

Configuring and Managing Telnet Servers 13-5 Configuring a Personal Computer As a Terminal and for Access through a Telnet Listener Configuring a Personal Computer As a Terminal and for Access through a Telnet Listener Sample Configuration To configure a PC for access through a Telnet listener only,...

Configuring a Personal Computer As a Terminal and for Access through a Telnet Listener 13-6 Configuring and Managing Telnet Servers Setting User Priority for Devices Using Dynamic Access You can enable interrupts if you want the owner or main user of the device to have full control over it. For exam...

Configuring and Managing Telnet Servers 13-7 Configuring a Personal Computer As a Terminal and for Access through a Telnet Listener Configuring a File Transfer Partner The access server supports the file transfer capability of a personal computer on an access server port. This allows a user of a per...

Configuring a Remote Print Queue 13-8 Configuring and Managing Telnet Servers Configuring a Remote Print Queue Introduction The following sections explain how to configure a print queue on an ULTRIX or UNIX system. Configuring a TCP/IP Remote Print Queue on an ULTRIX System An ULTRIX print spooler c...

Configuring a Remote Print Queue 13-10 Configuring and Managing Telnet Servers Configuring a TCP/IP Remote Print Queue on a UNIX System System managers must provide an application that queues print jobs on a UNIX system. A sample print spooler program, DS7-UNIX-SPOOL.C, for UNIX systems is included ...

Configuring and Managing Telnet Servers 13-11 Configuring a Telnet Listener Configuring a Telnet Listener Introduction Perform the following steps to assign a Telnet listener to one or more devices attached to access server ports: Step Action 1 Assign a TCP port to the access server port. The access...

Configuring Telnet Server Session Characteristics 13-12 Configuring and Managing Telnet Servers Configuring Telnet Server Session Characteristics Introduction The following sections describe how to configure the various Telnet server session characteristics. Mapping Event Indications to Keyboard Cha...

Configuring and Managing Telnet Servers 13-13 Configuring Telnet Server Session Characteristics Specifying Newline Characteristics The NEWLINE characteristics allow the person managing the access server to define a new line as a 1- or 2-character sequence. In this case, TERMINAL specifies the user a...

Configuring Telnet Server Session Characteristics 13-14 Configuring and Managing Telnet Servers Example: Setting Character Size in a Specific Direction The following example shows how to set CHARACTER SIZE to 7 in the TRANSMIT direction: Local> CHANGE PORT 5 TELNET SERVER TRANSMIT CHARACTER SIZE ...

Configuring and Managing Telnet Servers 13-15 Managing Your Access Server As a Telnet Listener Node Managing Your Access Server As a Telnet Listener Node Introduction This section contains the procedures to display and remove Telnet listeners. Displaying Telnet Listeners The SHOW/LIST/MONITOR TELNET...

Managing Your Access Server As a Telnet Listener Node 13-16 Configuring and Managing Telnet Servers Removing a Telnet Listener You can remove a Telnet listener that was defined in either the permanent or operational databases. Use the privileged CLEAR TELNET LISTEN command (which acts on the operati...

Configuring and Managing Telnet Servers 13-17 Managing Your Access Server As a Telnet Listener Node Reassigning a Port This process allows you to manage a failed access server port that is configured as a Telnet listener. Use the following steps to reassign a port: Step Action 1 Use the LIST PORT n ...

Supplying User Location Data to Telnet Servers 13-18 Configuring and Managing Telnet Servers Supplying User Location Data to Telnet Servers Introduction When the access server creates a Telnet client connection, it automatically negotiates with the Telnet server to send port user data. If the server...

Configuring and Managing Telnet Servers 13-19 Configuring a Raw TCP Listener Configuring a Raw TCP Listener Introduction When you configure a Telnet listener to use raw TCP, the associated port sends data to a device or a remote host without any data manipulation or interpretation of control charact...

Configuring a Raw TCP Listener 13-20 Configuring and Managing Telnet Servers Displaying Raw TCP Characteristics Use the SHOW/LIST TELNET LISTENER command to view the raw TCP settings. Example: Raw TCP Display The following example shows a typical display for a Telnet listener configured for raw TCP:...

Configuring LPD Printers 14-1 Chapter 14 Configuring LPD Printers Overview Introduction The Line Printer Daemon (LPD) handles remote networking printing. It listens for print requests from remote hosts on the Local Area Network (LAN) and responds to these requests. The LPD software that the access s...

LPD Operation 14-2 Configuring LPD Printers LPD Operation Supported File Types The access server’s LPD implementation supports printing of ASCII text and PostScript files. The access server does not convert files from one format to the other. Users must be aware of the type of file they want to prin...

LPD Operation 14-4 Configuring LPD Printers Operation The access server receives print requests from remote hosts on TCP port 515. It uses LPD to send the file to a local printer through the access server’s LAN interface and a serial port. The following occurs when a host on the LAN uses LPD to send...

Configuring LPD Printers 14-5 Configuring LPD Configuring LPD Configuring Remote Hosts Remote network printing using LPR/LPD requires that you set up the host system correctly. The following table describes the setup requirements for specific types of hosts: Associating a Printer With a Port To allo...

Configuring LPD 14-6 Configuring LPD Printers The following table lists the print characteristics that you can configure: Setting Port Characteristics For LPD to communicate with your printers, you must set the following port characteristics: • ACCESS REMOTE • AUTOBAUD DISABLED • FLOW CONTROL, PARIT...

Configuring LPD Printers 14-7 Configuring LPD Printer Configuration Example The following example shows how to configure the access server to use LPD for remote network printing: Local> DEFINE PRINTER LPS32_PS CONNECTIONS ENABLED HEADER ENABLED PORTS 4,5 TRAILER DISABLED AUTOCR DISABLED In this e...

Configuring and Managing SLIP Ports 15-1 Chapter 15 Configuring and Managing SLIP Ports Overview Introduction This chapter explains how to configure and manage access server ports for use with PCs and computers acting as serial line Internet protocol (SLIP) hosts. A SLIP host is an Internet host tha...

Configuring and Managing SLIP Ports 15-3 Packet Forwarding to and from SLIP Hosts Packet Forwarding to and from SLIP Hosts Description During SLIP sessions, the access server forwards packets from an attached SLIP host through the Ethernet interface to the Internet. When the access server receives a...

Displaying SLIP Characteristics 15-4 Configuring and Managing SLIP Ports Displaying SLIP Characteristics Introduction The LIST/SHOW/MONITOR SLIP CHARACTERISTICS command enables you to display the SLIP configuration for a given port. The characteristics that you manage are the host address, the Maxim...

Configuring and Managing SLIP Ports 15-5 Managing Internet Addresses for SLIP Hosts Managing Internet Addresses for SLIP Hosts Introduction The Internet address for the SLIP host must be unique on the subnet and must have the same subnet identifier as the access server. A subnet identifier is the re...

Managing Internet Addresses for SLIP Hosts 15-6 Configuring and Managing SLIP Ports How a Port Automatically Obtains the SLIP Host Address If you configure a port for SLIP communication and do not assign a host address, the access server does the following: 1 Reads the source address from the attach...

Configuring and Managing SLIP Ports 15-7 Managing the Maximum Transmission Unit Managing the Maximum Transmission Unit Introduction The maximum transmission unit (MTU) value specifies the maximum size of the datagram that a given access server port accepts. The range is 64 to 1500 bytes. The default...

Configuring a Port So That a PC Can Function as a Terminal or SLIP Host 15-8 Configuring and Managing SLIP Ports Configuring a Port So That a PC Can Function as a Terminal or SLIP Host Introduction This section describes how to configure an access server port so that you can use an attached PC as a ...

Configuring and Managing SLIP Ports 15-9 Configuring a Dedicated SLIP Port Configuring a Dedicated SLIP Port Introduction The dedicated SLIP port allows a single SLIP session. Before you perform this procedure, you must configure the device and port characteristics as described in Chapter 9. Configu...

Configuring a Dial-In Modem for Use with a SLIP Host 15-10 Configuring and Managing SLIP Ports Configuring a Dial-In Modem for Use with a SLIP Host Introduction Before you perform this procedure, you must configure the device and port characteristics as described in Chapter 9. Configuring a Dial-In ...

Configuring and Managing SLIP Ports 15-11 Establishing Terminal Sessions with a PC Establishing Terminal Sessions with a PC Prerequisites Before you can use a PC to establish a terminal session with the access server, you must: 1 Configure the device and port characteristics as described in Chapter ...

Establishing a SLIP Session 15-12 Configuring and Managing SLIP Ports Establishing a SLIP Session Enabling a SLIP Session from the PC The following example shows how a nonprivileged user could configure and start a SLIP session. The example assumes that the port characteristics are configured as sho...

Configuring and Managing SLIP Ports 15-13 Compressed SLIP Compressed SLIP Introduction The access server has the ability to enable compressed SLIP (CSLIP). Enabling CSLIP compresses the lengthy headers of IP datagrams on low-speed asynchronous serial lines. Therefore, enabling CSLIP can improve perf...

Displaying SLIP Counters 15-14 Configuring and Managing SLIP Ports Displaying SLIP Counters Commands The SHOW/MONITOR PORT SLIP COUNTERS command displays the various SLIP counters. To reset the counters, use the ZERO COUNTERS PORT SLIP command. SHOW PORT SLIP COUNTERS Display The following example s...

Configuring and Managing SLIP Ports 15-15 Disabling SLIP Disabling SLIP Command Use the CHANGE PORT n SLIP DISABLED command to disable SLIP on a port. Disable SLIP Example The following example shows how to disable SLIP on port 2: Local> CHANGE PORT 2 SLIP DISABLED

Configuring for SNMP Access 16-1 Chapter 16 Configuring for SNMP Access Overview Introduction This chapter describes how to configure the access server simple network management protocol (SNMP) agent so that it can be controlled by a remote Network Management Station (NMS). Reference For complete in...

Supported SNMP Features 16-2 Configuring for SNMP Access Supported SNMP Features Supported Specifications The access server supports the SNMP specifications listed in the following table: SNMP Community Names An SNMP community name is a character string that the NMS uses as a password to gain access...

Configuring for SNMP Access 16-3 Supported SNMP Features Supported MIBs The access server supports the Management Information Bases (MIBs) listed in the following table. The release kit contains all supported MIBs. The network manager can enroll these MIBs in the appropriate NMS. Supported MIB Varia...

Supported SNMP Features 16-4 Configuring for SNMP Access Supported Management Information Base Variables The following figure illustrates the access server implementation of MIB-II, the Character MIB, RS-232-like MIB, AppleTalk MIB, and Ethernet-like MIB variables. The objects described in this sect...

Configuring for SNMP Access 16-5 Configuring the Access Server for SNMP Access Configuring the Access Server for SNMP Access Enabling and Disabling SNMP The access server must have an Internet address to enable SNMP. To enable SNMP, enter: Local> CHANGE SNMP ENABLED To disable SNMP, enter: Local&...

Configuring the Access Server for SNMP Access 16-6 Configuring for SNMP Access Configuring a Community Name for Access by Any NMS Use the CHANGE SNMP COMMUNITY community-name SET ENABLED command to create a community name. When you create a community name without specifying an address the access ser...

Configuring for SNMP Access 16-7 Configuring the Access Server for SNMP Access Configuring Community Names to Send TRAP Messages You can optionally configure the access server to send TRAP messages to a specific NMS for each community name. The access server generates TRAP messages in response to th...

Configuring the Access Server for SNMP Access 16-8 Configuring for SNMP Access Sample SNMP Configuration The following figure is a diagram of a network configuration that results from the commands in the Configuring a Community Name for Access by Any NMS, Configuring a Community Name with an Address...

Configuring for SNMP Access 16-9 Configuring the Access Server for SNMP Access After you remove a community name, any NMS that used the community name is no longer able to communicate with the access server. The following example shows how to remove community name BUGS: Local> CLEAR SNMP COMMUNIT...

Configuring the NMS 16-10 Configuring for SNMP Access Configuring the NMS Procedure To configure an NMS to manage an access server using SNMP, do the following: Step Action 1 Enter the access server management information bases (MIBs) in the NMS database (see Supported MIB Variables in this chapter)...

Managing the Access Server 17-1 Chapter 17 Managing the Access Server Overview Introduction The following lists the actions you perform to manage the access server. These actions should be done on an as-needed basis. • Manage the access server as part of the LAT network. • Manage the access server a...

Managing Your Access Server As Part of the LAT Network 17-2 Managing the Access Server Managing Your Access Server As Part of the LAT Network Introduction The network manager should coordinate the activities of service nodes and access servers. This section describes a set of configuration guideline...

Managing the Access Server 17-3 Managing Your Access Server As Part of the LAT Network The following example shows how to decrease the node limit to 100: Local> CHANGE SERVER NODE LIMIT 100 Reducing Memory Usage Set the node limit characteristic to a lower value. The access server automatically r...

Managing Your Access Server As Part of the LAT Network 17-4 Managing the Access Server SHOW/LIST/MONITOR NODE STATUS Display Fields The following table describes the information in the fields and headings of the node status display: Field Description Node Name of the service node. LAT Protocol Vx.x ...

Managing the Access Server 17-5 Managing Your Access Server As Part of the LAT Network Viewing LAT Node Counters Information The SHOW/MONITOR NODE COUNTERS command displays the counters for messages transmitted between the access server and the selected LAT service nodes. The counters apply only to ...

Managing Your Access Server As Part of the LAT Network 17-6 Managing the Access Server Example: SHOW/LIST/MONITOR NODE COUNTERS Display The following example shows how to generate a display of the counters for LAT messages between the access server and a service node named PEACH. Each counter displa...

Managing Your Access Server As Part of the LAT Network 17-8 Managing the Access Server Viewing LAT Node Summary Information The SHOW NODE SUMMARY command produces a line of information for each selected service node. This display is useful to determine if a service node is reachable. The node summar...

Managing the Access Server 17-9 Managing Your Access Server As Part of the LAT Network Example: NODE SUMMARY Display The following example shows how to generate a node summary display: Local> SHOW NODE ALL SUMMARY Node Name Status Identification BANANA 2 Connected Documentation System ORANGE Reac...

Displaying Information About the Access Server 17-10 Managing the Access Server Displaying Information About the Access Server Introduction The LIST/MONITOR/SHOW SERVER command displays information about the access server or about data maintained by the access server. You can obtain characteristics,...

Managing the Access Server 17-11 Displaying Information About the Access Server Each counter has a maximum value of 4,294,967,295. If a counter reaches that value, it latches (remains) at that value until either the counters are set to zero or the access server is initialized. Example: SHOW SERVER C...

Displaying Information About the Access Server 17-14 Managing the Access Server Receive Failure Reasons Mask providing information about the type or types of receive failure encountered if the Receive Failures counter is not zero. This is a cumulative mask. The following are the bits defined in the ...

Managing the Access Server 17-15 Displaying Information About the Access Server System Buffer Unavailable Number of times a system buffer was not available in the access server for an incoming frame. This counter should accumulate at a rate of less than two counts per day. It is normal to experience...

Displaying Information About the Access Server 17-16 Managing the Access Server Displaying Access Server Status The SHOW/LIST/MONITOR SERVER STATUS command displays the status of the access server. The information tells you how well the access server is working under the current load and also warns ...

Managing the Access Server 17-17 Displaying Information About the Access Server Queue Entries: 0 0 100 Resource Errors: 0 Available Services: 89 92 N/A Port Framing Errors: 0 Local Services: 2 2 20 Port Parity Errors: 0 Reachable Nodes: 75 78 200 Port Overrun Errors: 0 Boot Device: Ethernet: 0 Activ...

Displaying Information About the Access Server 17-22 Managing the Access Server Displaying Access Server Summary Information The LIST/SHOW/MONITOR SERVER SUMMARY command displays the access server groups you defined. The first line displays the access server software version number and base level, L...

Managing the Access Server 17-23 Displaying Information About the Access Server Example: SHOW SERVER SUMMARY Display The following example shows how to generate an access server summary display: Local> SHOW SERVER SUMMARY Network Access SW Vx.x for DSxxx Address: 08-00-2B-02-F2-BB Name: T_LAT06 N...

Checking Port Status and Counters 17-24 Managing the Access Server Checking Port Status and Counters Introduction The LIST/MONITOR/SHOW PORT command displays information about one or more ports on the access server. You can obtain characteristics, counter, status, and summary displays for ports. Dis...

Managing the Access Server 17-25 Checking Port Status and Counters Example: SHOW PORT CHARACTERISTICS Display The following example shows how to generate a port characteristics display: Local> SHOW PORT 1 CHARACTERISTICS Port 1: Joe Smith Server: Servername Character Size: 8 Input Speed: 9600 Flo...

Checking Port Status and Counters 17-26 Managing the Access Server Example: SHOW PORT COUNTERS Display The following example shows how to generate a port counters display: Local> SHOW PORT 1 COUNTERS Port 1: Joe Smith Server: Servername Seconds Since Zeroed: 1182768 Local Accesses: 17 Framing Err...

Managing the Access Server 17-27 Checking Port Status and Counters Displaying Port Status The SHOW/MONITOR PORT STATUS command displays information about the operational condition of the selected port. Example: SHOW PORT STATUS Display The following example shows how to generate a port status displa...

Managing the Access Server 17-29 Checking Port Status and Counters Displaying Port Summary The LIST/MONITOR/SHOW PORT SUMMARY command displays one line of general information for each selected port. The port summary display is useful for obtaining information about how the ports are being used. This...

Checking Port Status and Counters 17-30 Managing the Access Server SHOW/LIST/MONITOR PORT SUMMARY Display Fields The following table describes the information under the headings in the SHOW/LIST/MONITOR PORT SUMMARY display: Heading Description Port Number n of the port. Access Current setting of th...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-1 Chapter 18 Configuring and Managing 3270 Terminal Emulation (TN3270) Overview Introduction This chapter explains how to configure and manage the 3270 Terminal Emulator (TN3270) software for the access server. This software enables ASCII ...

Supported ASCII Terminals 18-2 Configuring and Managing 3270 Terminal Emulation (TN3270) Supported ASCII Terminals Definition TN3270 supports the following models of DIGITAL ASCII terminals: • VT100 with Advanced Video Option • VT102 • VT220, VT240, and VT241 • VT320, VT330, VT340, and VT341 • VT420...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-3 Definition and Description of a Keyboard Map Definition and Description of a Keyboard Map 3278 Keyboards Because the IBM 3278 keyboard differs greatly from those on ASCII terminals, TN3270 provides keyboard maps. A keyboard map assigns t...

Configuring Basic 3270 Terminal Emulation 18-4 Configuring and Managing 3270 Terminal Emulation (TN3270) Configuring Basic 3270 Terminal Emulation Once the IBM system administrator has configured the IBM host with TCP/IP, you need to do the following: 1 Set up the ASCII terminal. 2 Indicate the mode...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-5 Configuring Basic 3270 Terminal Emulation Terminal Setup Parameters The following table provides information on terminal setup for the various DIGITAL terminal models: Indicating the 3270 Model Number To enable 3270 emulation on a port, ...

IBM Host Communications 18-6 Configuring and Managing 3270 Terminal Emulation (TN3270) IBM Host Communications Introduction This section describes IBM host communications with a terminal attached to the access server. Connecting to an IBM Host After you complete the basic configuration of a port for...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-7 IBM Host Communications The status line is restored when: • You use the STATUS function. • You send data to the host. • The IBM application clears the screen. Status Line Messages The following table describes the messages that appear on...

IBM Host Communications 18-8 Configuring and Managing 3270 Terminal Emulation (TN3270) Status Line Indicator Display The following figure shows the position of the status line indicator on the screen:

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-9 Displaying and Customizing Keyboard Maps Displaying and Customizing Keyboard Maps Introduction Although the default TN3270 keyboard maps are sufficient for most users, some may want to customize keyboard maps for specific applications. T...

Displaying and Customizing Keyboard Maps 18-10 Configuring and Managing 3270 Terminal Emulation (TN3270) Default Server-Wide Terminal Type and Keyboard Maps The following table shows the default keyboard map and the associated terminal type: These particular associations between terminal types and k...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-11 Displaying and Customizing Keyboard Maps Local> CHANGE TN3270 TERMINAL PC_100_DCA KEYMAP NEW_KEYS You can carry out a similar process for terminal devices that use the VT220 keyboard map—the other default map. Local> CHANGE TN3270...

Displaying and Customizing Keyboard Maps 18-12 Configuring and Managing 3270 Terminal Emulation (TN3270) Selecting a Server-Wide Terminal Type and Keyboard Map for a Port A port user who wants to establish a TN3270 session using a server-wide keyboard map can do the following: Note Port users cannot...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-13 Displaying and Customizing Keyboard Maps Selecting and Customizing Keyboard Maps for a Port Server-wide keymapping is the recommended method for customizing users’ TN3270 keymapping assignments. It uses access server memory efficiently ...

Displaying and Customizing Keyboard Maps 18-14 Configuring and Managing 3270 Terminal Emulation (TN3270) You can list the defaults with this command: Local> SHOW TN3270 KEYMAP "KEYMAPNAME" The defaults are shown in the Default Server-Wide Terminal Type and Keyboard Maps and the Keyboard M...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-15 Displaying and Customizing Keyboard Maps Example: SHOW PORT TN3270 KEYMAP Command The following example shows a partial display of a keymap: Local> SHOW PORT 2 TN3270 KEYMAP Port 1: john 3270 function ASCII Keystroke mnemonic descrip...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-17 Guidelines for Managing the Use of NVRAM for TN3270 Guidelines for Managing the Use of NVRAM for TN3270 Introduction There is a pool of approximately 2.5 KB of shared NVRAM for the customization of the following TN3270 characteristics: ...

Guidelines for Managing the Use of NVRAM for TN3270 18-18 Configuring and Managing 3270 Terminal Emulation (TN3270) Limiting NVRAM Usage To limit the number of NVRAM keyboard maps that the port user can customize, use the command shown in the following example: Local> DEFINE PORT TN3270 NVRAM LIM...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-19 Commands to Manage TN3270 Terminal Emulation Commands to Manage TN3270 Terminal Emulation Introduction This section summarizes the commands to manage 3270 emulation. Reference For a complete description of these commands and the correct...

Commands to Manage TN3270 Terminal Emulation 18-20 Configuring and Managing 3270 Terminal Emulation (TN3270) TN3270 Port Characteristics The following table provides information on port characteristics and their defaults: SET/DEFINE/CHANGE PORT TN3270 Description Default MODEL Specifies the model of...

Configuring and Managing 3270 Terminal Emulation (TN3270) 18-21 Commands to Manage TN3270 Terminal Emulation SHOW Commands The following table provides information on the SHOW Commands for port characteristics: SHOW Displays PORT TN3270 KEYMAP The TN3270 keyboard map for a specified port. PORT TN327...

Enabling PPP on an Access Server Port 19-2 Configuring and Managing Point-to-Point Protocol (PPP) Ports Enabling PPP on an Access Server Port Introduction To check if PPP is enabled on a given port, use the SHOW PORT command. When enabled, the keyword PPP displays in the list of enabled characterist...

Configuring and Managing Point-to-Point Protocol (PPP) Ports 19-3 Enabling PPP on an Access Server Port Enabling Dedicated PPP Traffic The following example shows a series of commands used to dedicate a port to PPP. Local> DEFINE PORT 5 ACCESS LOCAL AUTOBAUD DISABLED Local> DEFINE PORT 5 AUTOC...

Establishing and Ending a PPP Session 19-4 Configuring and Managing Point-to-Point Protocol (PPP) Ports Establishing and Ending a PPP Session Using the CONNECT PPP Command If PPP is configured, you can start a PPP session on a port by entering the following secure command: Local> CONNECT PPP You ...

Configuring and Managing Point-to-Point Protocol (PPP) Ports 19-5 Displaying PPP Characteristics Displaying PPP Characteristics Introduction This section describes the commands used to display characteristics for LCP, IPCP, and ATCP. Displaying LCP Characteristics Use the SHOW PORT n PPP LCP CHARACT...

Displaying PPP Characteristics 19-6 Configuring and Managing Point-to-Point Protocol (PPP) Ports Fields in the LCP Characteristics Display The following table explains the fields in the LCP characteristics display. Field Description Values Default LCP Indicates if LCP is enabled. Enabled Disabled En...

Configuring and Managing Point-to-Point Protocol (PPP) Ports 19-7 Displaying PPP Characteristics Displaying IPCP Characteristics The SHOW/LIST/MONITOR PPP IPCP CHARACTERISTICS command displays the IPCP configuration for a given port. The fields in the display show the latest values configured by the...

Displaying PPP Characteristics 19-8 Configuring and Managing Point-to-Point Protocol (PPP) Ports Example: IPCP Characteristics Display The following example shows a sample IPCP characteristics display. Local> SHOW PORT 5 PPP IPCP CHARACTERISTICS IPCP Characteristics: IPCP: Disabled Passive Open: ...

Displaying PPP Characteristics 19-10 Configuring and Managing Point-to-Point Protocol (PPP) Ports ATCP Characteristics The SHOW/LIST/MONITOR PPP ATCP CHARACTERISTICS command displays the ATCP configuration for a given port. The fields in the display show the latest values configured by the SET PORT ...

Displaying PPP Status 19-12 Configuring and Managing Point-to-Point Protocol (PPP) Ports Displaying PPP Status Introduction This section describes how to display the PPP LCP and IPCP status. Displaying LCP Status Use the SHOW PORT n LCP STATUS command to display LCP characteristics. This command is ...

Configuring and Managing Point-to-Point Protocol (PPP) Ports 19-13 Displaying PPP Status Fields in the LCP Status Display The following table describes the fields in the LCP status display: Field Description State The LCP state as defined in RFC 1331. Negotiation Time The number of seconds required ...

Displaying PPP Status 19-14 Configuring and Managing Point-to-Point Protocol (PPP) Ports Displaying IPCP Status Use the SHOW PORT n PPP IPCP STATUS command to display IPCP status. This command shows the actual state of the IPCP implementation in the access server. Because of the nature of PPP negoti...

Configuring and Managing Point-to-Point Protocol (PPP) Ports 19-15 Displaying PPP Status Fields in the IPCP Status Display The following table explains the fields in the IPCP status display: Field Description State The IPCP state as defined in RFC 1331. The possible states are Initial, Starting, Clo...

Displaying PPP Status 19-16 Configuring and Managing Point-to-Point Protocol (PPP) Ports Displaying ATCP Status Use the SHOW PORT n PPP ATCP STATUS command to display ATCP status. The This command shows the actual state of the ATCP implementation in the access server. Because of the nature of PPP ne...

Configuring and Managing Point-to-Point Protocol (PPP) Ports 19-17 Displaying PPP Status Fields in the ATCP Status Display The following table explains the fields in the ATCP status display: Field Description State The ATCP state as defined in RFC 1331. The possible states are Initial, Starting, Clo...

Displaying PPP Counters 19-18 Configuring and Managing Point-to-Point Protocol (PPP) Ports Displaying PPP Counters Introduction The section describes PPP counters. Displaying LCP Counters Use the SHOW PORT n LCP COUNTERS command to display LCP counters for a port. The display shows all the counters ...

Configuring and Managing Point-to-Point Protocol (PPP) Ports 19-19 Displaying PPP Counters Fields in the LCP Counters Display The following table describes the fields in the LCP counters display: Field Description Negotiation Successes The number of times that LCP successfully entered a round of neg...

Displaying PPP Counters 19-20 Configuring and Managing Point-to-Point Protocol (PPP) Ports Displaying IPCP Counters Use the SHOW PORT n IPCP command to display the IPCP counters for a port. This command requires no privileges. The display shows all the counters relevant to IPCP protocol operation. M...

Configuring and Managing Point-to-Point Protocol (PPP) Ports 19-21 Displaying PPP Counters Example: Command to Display the IPCP Counters The following example shows how to display the IPCP counters for port 5: Local> SHOW PORT 5 IPCP COUNTERS Port 5: Server: LAT_08002B26D0E7 IPCP Counters: Negoti...

Displaying PPP Counters 19-22 Configuring and Managing Point-to-Point Protocol (PPP) Ports Displaying ATCP Counters Use the SHOW PORT n ATCP Counters command to display ATCP counters for a port. This command requires no privileges. The counters display shows all the counters relevant to ATCP protoco...

Configuring and Managing Point-to-Point Protocol (PPP) Ports 19-23 Displaying PPP Counters Example: Command to Display the ATCP Counters The following example shows how to display the ATCP counters: Local> SHOW PORT 5 ATCP COUNTERS Port 5: Server: LAT_08002B26AA94 ATCP Counters: Negotiation Succe...

Managing IPX 20-1 Chapter 20 Managing IPX Overview Introduction This chapter describes how to configure and manage IPX on an access server. In This Chapter This chapter contains the following topics: • IPX Description • Getting Started • Hardware and Software Requirements • Setting Up Your PC • Sett...

IPX Description 20-2 Managing IPX IPX Description Introduction The purpose of IPX is to allow Novell NetWare clients to dial in to (or directly attach to) the network access server via asynchronous lines. Each remotely connected Novell client looks and acts as if it was directly connected to the LAN...

Managing IPX 20-3 IPX Description Login Procedures One or more serial ports of the access server can be configured for Novell dial-up access. Depending on your requirements, different login procedures for IPX can be configured including: • The remote PC user can choose to activate a connection to th...

Getting Started 20-4 Managing IPX Getting Started Checklist The following is a checklist for using this chapter to perform the basic steps to perform remote node access to a Novell network through a network access server: Step Action 1 Determine your hardware/software requirements (Hardware and Soft...

Managing IPX 20-5 Hardware and Software Requirements Hardware and Software Requirements Introduction This section describes the hardware and software necessary to run IPX. There must be at least one NetWare fileserver version 3.xx or greater on the network. If a fileserver is not directly attached t...

Setting Up Your PC 20-6 Managing IPX Setting Up Your PC PC Remote Access Software Ensure you know whether the network access server port you are dialing in to requires you to enter a login password or logs directly in to the local user interface. If this is the case, you will need to use terminal em...

Managing IPX 20-7 Setting Up the Network Access Server Setting Up the Network Access Server Enabling IPX By default, IPX is not enabled on the access server. A privileged user must enable IPX with the following commands: Local> CHANGE IPX INTERNAL ipx-net Local> CHANGE IPX ENABLED Note The ipx...

Setting Up the Network Access Server 20-8 Managing IPX can be configured either CTS (CTS-DSR-RTS-DTR) or RI (RI-DCD-DSRS-DTR). Based on configuration, correct adapter must be chosen (see Appendix A). Current high-speed modems (>9600 baud) typically use CTS. Configuring the Port for the Login Meth...

Managing IPX 20-9 Setting Up the Network Access Server Configuring the Port Dedicated to PPP Following modem connection, the PC user will log in with or without password authentication. Then, PPP will automatically be activated to pass IPX network packets. Configuring the Port With Login Password Au...

Setting Up the Network Access Server 20-10 Managing IPX Disabling PPP/PAP Password Authentication To disable the optional PPP/PAP password authentication, use the following command: Local> CHANGE PORT n LCP AUTHENTICATION DISABLE Passwords Both login password authentication and PPP/PAP password a...

Managing IPX 20-11 Summary of DECserver IPX Management Commands Summary of DECserver IPX Management Commands The following are the network access server commands you can use to manage IPX. Port PPP IPX Commands for LCP The following table explains the PORT PPP IPX commands for LCP. SHOW/LIST/MONITOR...

Summary of DECserver IPX Management Commands 20-12 Managing IPX Port PPP IPX Commands for IPXCP The following table explains the PORT PPP IPX commands for IPXCP: Port PPP Commands for PPP Negotiation Status The following table defines the PORT PPP commands for PPP negotiation status: PFC Protocol Fi...

Managing IPX 20-13 Summary of DECserver IPX Management Commands Server IPX Commands The following table defines the server IPX commands: STATUS Display the values of the PPP counters and characteristics. SHOW/LIST/MONITOR IPX Description CHARACTERISTICS Display the current values for the characteris...

Summary of DECserver IPX Management Commands 20-14 Managing IPX SAP802 IEEE 802.2 standard. SNAP802 IEEE 802.2 with SNAP SAP format. CHANGE/SET/DEFINE IPX FRAME frametype NETWORK Description ipx-net Specify explicit internal network number. LEARN Learn internal network number from LAN. DISABLED Inte...

Managing IPX 20-15 Modem Considerations Modem Considerations Dial-In Modems Keep the following in mind when using dial-in modems attached to the network access server: • Flow control for the dial-in modem and the access server port must match. CTS is recommended for DECserver 700 and DECserver 900TM...

Modem Considerations 20-16 Managing IPX Recommended Serial Port Baud Rate The following table lists guidelines for setting the serial port baud rate: UART Type Maximum Modem Speed Maximum Recommended Serial Port Baud Rate 8250 9600 Up to 9600 16450 9600 to 14400 9600 to 19200 16450-A 9600 to 14400 9...

Managing IPX 20-17 Novell Client/Server Operation Novell Client/Server Operation Establishing Remote Node Access Connection to Novell Network Vendors of PC remote node access software for Novell may have different procedures for dialing in and establishing a remote access connection to a Novell LAN ...

Managing IPX 20-19 Operational Checkout and Diagnosis Operational Checkout and Diagnosis Verifying Configuration To verify proper configuration, at a access server management port, type SHOW IPX at the local user interface prompt: • At least one LAN frame should have a corresponding network number. ...

Disabling IPX 20-20 Managing IPX Disabling IPX Using the DEFINE Command If you decide you no longer need IPX support, you can disable IPX by using the following privileged command: Local> DEFINE IPX DISABLED Reinitialize the access server to have this command take effect.

Managing IPX 20-21 Frame Types Frame Types Introduction To support a broad base of network stations, the access server supports four different frame formats for encapsulating IPX packets on the LAN. The four frame types supported by the access server can be enabled simultaneously: • Ethernet • RAW80...

Displaying IPX Characteristics 20-22 Managing IPX Displaying IPX Characteristics Using the SHOW command Use the SHOW IPX CHARACTERISTICS command to display IPX characteristics, including IPX network and node numbers. The command is nonprivileged. IPX Characteristics Display The following example sho...

Displaying IPX Status 20-24 Managing IPX Displaying IPX Status Using the SHOW IPX Command Use the SHOW IPX command to display IPX status. The command is nonprivileged. IPX Status Display The following example shows the command to display IPX status on an access server: Local> SHOW IPX STATUS IPX ...

Managing IPX 20-25 Displaying IPX Counters Displaying IPX Counters Use the SHOW IPX COUNTERS command Use the SHOW IPX COUNTERS command to display the IPX counters. The command is nonprivileged. IPX Counters Display The following example shows the command to display IPX counters on an access server: ...

Displaying IPX Routes 20-28 Managing IPX Displaying IPX Routes Using the SHOW IPX ROUTES Command Use the SHOW IPX ROUTES command to display IPX Routes. This command is nonprivileged. IPX Routes Display The following example shows the command to display IPX routes: Local> SHOW IPX ROUTES IPX Route...

Managing IPX 20-29 Resetting Counters Resetting Counters Using the ZERO Command Use the ZERO command to reset IPX counters. ZERO Command Options The following table contains the options that you can use on the command line to reset specific counters or sets of counters: Option Description ALL Zeroes...

Managing Dial Services 21-1 Chapter 21 Managing Dial Services Overview Introduction Configuring dial services is similar in concept to configuring a LAT service or Telnet listener. You define a service with a specified configuration that dictates how the user can operate the dialer. Before you begin...

Dial Services Command Groups 21-2 Managing Dial Services Dial Services Command Groups Command Groups To configure and manage the dial services, use the SET/DEFINE/CHANGE DIALER and SHOW/LIST/MONITOR DIALER command groups. Reference For more detailed information about commands used in this chapter, r...

Managing Dial Services 21-3 Checking the Current Server Settings Checking the Current Server Settings Introduction Before you configure dialer services, determine the current server configuration. Use the SHOW SERVER command to display the server configuration. Server Configuration Display The follo...

Defining a Dialer Script 21-4 Managing Dial Services Defining a Dialer Script Introduction The first step in configuring a dial service is creating a dialer script. A dialer script tells the access server what text strings to use to control a modem on a specific port. These text strings are also kno...

Managing Dial Services 21-5 Defining a Dialer Script Example: Set Dialer Script Name The following example illustrates how to modify dialer script strings in a dialer script called “dickens” in order to set unique dialer characteristics: Local > DEFINE DIALER SCRIPT dickens COMMAND "AT" L...

Assigning the Dialer Script to a Port 21-6 Managing Dial Services Assigning the Dialer Script to a Port Steps After configuring the dialer strings in a dialer script, assign the script to a specific port. Do the following: Determining the Current Dialer Script Use the SHOW PORT n command to display ...

Managing Dial Services 21-7 Assigning the Dialer Script to a Port Example: The Show Port Command Display The following example shows the resulting display for the SHOW PORT command. In this example, the preferred dialer service is CALL_HOME and the dialer script name is Generic_14400. Local> SHOW...

Assigning the Dialer Script to a Port 21-8 Managing Dial Services Verifying Dialer Script Configuration Use the SHOW PORT n command to verify any changes you make to dialer script assignments for a port. The change appears in the Dialer Script field of the display. Example: Show New Port Configurati...

Managing Dial Services 21-9 Defining the Dialer Service Defining the Dialer Service Steps After you define the dialer script and assign the dialer script to a port, define the dialer service. A dial service is used to establish a dial-back session. Do the following: Showing the Current Dialer Servic...

Defining the Dialer Service 21-10 Managing Dial Services Example: Show Dialer, Port Security Enabled In this example, a user on a port with SECURITY enabled would not have access to the STATUS display since it might provide access to unlisted or sensitive phone numbers and other information received...

Managing Dial Services 21-11 Defining the Dialer Service Local> SHOW DIALER AT_TRADESHOW STATUS Dial Service: AT_TRADESHOW - Available Identification: Dial-back from tradeshow Port: User Status Last Connection Status 9 (remote) Connected CONNECTED 14400/LAPM 10 Available BUSY 11 Raymond Connect C...

Defining the Dialer Service 21-12 Managing Dial Services Displaying Dialer Counters Use the SHOW DIALER service-name COUNTERS command to display the counters for a dialer service. Example: Show Dialer Counters The following example shows the dialer service counters display for the dialer service A T...

Managing Dial Services 21-13 Defining the Dialer Service Dialer Service Characteristics The following table describes the dialer service characteristics: User Account Characteristics The following table explains the user account characteristics: Characteristic Description Comments IDENTIFICATION All...

Defining the Dialer Service 21-14 Managing Dial Services MODE Command Variables The following table explains the MODE command variables: USERNAME Defines the user name to be supplied to a peer that requires the access server to be authenticated. Maximum length = 1 to 16 characters PASSWORD Indicates...

Managing Dial Services 21-15 Configuring Interactive Dial Requests Configuring Interactive Dial Requests Configuring for Interactive Dial-Back The following example sets the access server to a predefined phone number: Local> CHANGE DIALER AT_HOME PORT 1-16 IDENT "DIALS YOU AT HOME" The di...

Framed Dial Requests 21-16 Managing Dial Services Framed Dial Requests Introduction Dial-back requests can also be queued from a client that connects to the server using PPP. Unlike PPP, the SLIP protocol does not include a method of negotiating connection options including whether a call-back shoul...

Managing Access Server Security 22-1 Chapter 22 Managing Access Server Security Overview Introduction The DECserver Network Access Software (DNAS) supports the following authentication services: • RADIUS • SecurID • Local User Accounts • Kerberos V4 In This Chapter This chapter contains the followin...

Security Type Descriptions 22-2 Managing Access Server Security Security Type Descriptions Introduction This section describes the types of security that the access server supports. Kerberos Kerberos is a user authentication system designed for open network computing environments. It provides for th...

Managing Access Server Security 22-3 Security Type Descriptions The following occurs: Since the set of attributes that the RADIUS authentication host sends to the access server can be incomplete, you can set default realm authorization parameters that provide missing values to complete the authoriza...

Common Terminology Across Security Realms 22-4 Managing Access Server Security Common Terminology Across Security Realms Introduction This section briefly defines the terms that are common to all of the security methods that the access server supports. Accounting Host A security server that accepts ...

Managing Access Server Security 22-5 Common Terminology Across Security Realms Security Server The remote host with which the access server communicates in order to request authentication clearance during the login process. Each security method (other than user accounts) defines one or more host pro...

Managing Kerberos 22-6 Managing Access Server Security Managing Kerberos Introduction This section describes Kerberos security features and explains how to configure and manage these features on the access server. To use the procedures in this section, you must: • Ensure that the access server can c...

Managing Access Server Security 22-7 Managing Kerberos Network Access Server Requirements Before configuring security-specific parameters, make sure that: • You have entered the correct Internet address and subnet mask. (See the Configuring the Internet Address and Subnet Mask section in Chapter 7.)...

Managing Kerberos 22-8 Managing Access Server Security Example: Definition of Kerberos Settings The following example shows a sample of the commands used to change these settings: Local> CHANGE KERBEROS DEFAULT REALM finance.acme.com SECRET Secret> (not echoed) Verification> (not echoed) Lo...

Managing Access Server Security 22-9 Managing Kerberos Displaying Kerberos Settings The following example shows a sample display of Kerberos settings: Local> show kerb characteristics Retransmit Interval: Retransmit Timeout: 0 00:00:08 Ticket service port: 750 Password service port: 751 Realm: mf...

Managing Kerberos 22-10 Managing Access Server Security User Authentication Procedure When the system administrator configures Kerberos security features for a given access server port, you need to enter a valid user name and password when you log on to the access server. A complete Kerberos princip...

Managing Access Server Security 22-11 Managing Kerberos Changing a User Name and Password Once the network manager has set up the access server, users can change their own passwords on the master KDC for their realm. Example: Sample Kerberos User Authentication Session The following example shows a ...

Managing Kerberos 22-12 Managing Access Server Security Port User Authentication Counters The following example shows how to display the authentication counters for a given port: Local> SHOW PORT 1 AUTHENTICATION COUNTERS Port 1: j_smith Server: Finance_server Cur. login Cur. login Total Total at...

Managing Access Server Security 22-13 Managing RADIUS Managing RADIUS Introduction A RADIUS server must be operational on the network. The RADIUS server can include accounting capability, but the RADIUS accounting can be in a separate server, on a different node. In addition, there can be multiple R...

Managing RADIUS 22-14 Managing Access Server Security Optional Setup for RADIUS You can use the commands in the following examples to configure additional security parameters for RADIUS servers. The commands in these examples define a RADIUS server accounting node, the maximum timeout period for RAD...

Managing Access Server Security 22-15 Managing RADIUS Example: Defining Realm Default Authorization Attributes LOCAL> CHANGE RADIUS REALM JONAS.COM PERMISSIONS (DIALBACK) LOCAL> CHANGE RADIUS REALM JONAS.COM CALLBACK ENABLED DIALBACK NUMBER "1-800-555-1111" Example: Defining Password A...

Managing RADIUS 22-16 Managing Access Server Security User Access to the Access Server The primary way to define a user’s type of access is to use the RADIUS server attribute called “User-Service-Type”. The following table shows User-Service-Type values that the access server supports: Setting User ...

Managing Access Server Security 22-17 Managing RADIUS Additional RADIUS Attributes The tables in this section contain lists of additional RADIUS attributes that the access server supports. General Session Attributes The following table defines the general session RADIUS attributes: General Session A...

Managing RADIUS 22-18 Managing Access Server Security Framed Session Attributes The following table defines the framed session attributes: Framed Session Attributes Definition Framed-Protocol Type of framed protocol used for session. Used in Access-Accept packets. Values: • PPP • SLIP Framed-IP-Addr...

Managing Access Server Security 22-19 Managing RADIUS Interactive Session Attributes The following table defines the interactive session attributes: Interactive session attributes Definition Login-IP-Host The IP address of the host system with which the user is to be automatically connected. Used in...

Managing RADIUS 22-20 Managing Access Server Security RADIUS General Non-Session Attributes The following table defines the RADIUS general non-session attributes: DIGITAL Vendor-Specific Attributes The following table defines the DIGITAL vendor-specific attributes: RADIUS Overhead Attributes Definit...

Managing Access Server Security 22-21 Managing RADIUS RADIUS Accounting Attributes The following table defines the RADIUS accounting attributes: Dialout Number (2) V-Type — 2 for dialout number. V-Length >= 3 String — Any printable ASCII characters. Dialback Number (3) V-Type — 3 for dialback num...

Managing RADIUS 22-22 Managing Access Server Security Optional RADIUS User Attributes The RADIUS attributes that the access server supports are as follows: Note Other RADIUS attributes (particularly accounting attributes) are utilized internally between the RADIUS server or accounting server and the...

Managing Access Server Security 22-23 Managing SecurID Managing SecurID Introduction The Security Dynamics ACE/Server software performs dynamic two-factor SecurID authentication. Dynamic two-factor authentication combines something the user knows—a memorized personal identification number (PIN)—with...

Managing SecurID 22-24 Managing Access Server Security SecurID Realms SecurID servers do not provide any authorization data; therefore, any authorization information comes from the SecurID realm or the port characteristics. If a SecurID card is in a new PIN mode and the new PIN is coming from the ac...

Managing Access Server Security 22-25 Managing SecurID Example: Including the Realm Name If your realm name has to be included when the access server sends messages to SecurID, issue the command shown in the following example: LOCAL> CHANGE SECURID REALM realm-name INCLUDE For most usage, you wil...

Managing SecurID 22-26 Managing Access Server Security Setting User Permissions Permissions are explicitly given by the value in the realm defaults. When these are still missing, the port configuration can supply its specified values (for attributes having a corresponding representation in the port)...

Managing Access Server Security 22-27 Managing Local Access Server Security Managing Local Access Server Security Introduction The tasks described in this section cover the configuration of the local access server realm and setup of local user accounts. Configuration of server security involves: • A...

Determining Security Configuration 22-28 Managing Access Server Security Determining Security Configuration Displaying RADIUS, SECURID, and KERBEROS Characteristics The SHOW {RADIUS | SECURID | KERBEROS} CHARACTERISTICS command displays all configured realm names, along with any pertinent configurat...

Managing Access Server Security 22-29 Determining Security Configuration Example: Showing SecurID The following example shows the resulting display for the SHOW SECURID CHARACTERISTICS command: LOCAL> SHOW SECURID Retransmit Interval: 00:00:02 Retransmit TimeOut: 00.00.20 Service Port: 755 Realm:...

Determining Security Configuration 22-30 Managing Access Server Security Example: Displaying Kerberos Characteristics The following example shows the resulting display for the SHOW KERBEROS CHARACTERISTICS command: LOCAL> SHOW KERBEROS Retransmit Interval: 00:00:01 Retransmit TimeOut: 00:00:20 Ti...

Managing Access Server Security 22-31 Determining Security Configuration Showing the Authentication Counters This access server can display the counters for all realms (local, RADIUS, KERBEROS). Any session authenticated by RADIUS attempts to send accounting data to the RADIUS Server. Sessions authe...

Managing Dial-Up Access Security with AUTOLINK and AUTOLINK Authentication 22-32 Managing Access Server Security Managing Dial-Up Access Security with AUTOLINK and AUTOLINK Authentication Introduction AUTOLINK lets PC clients log in using SLIP,PPP, and character cell terminal mode. AUTOLINK AUTHENTI...

Managing Access Server Security 22-33 Managing Dial-Up Access Security with AUTOLINK and AUTOLINK Authentication Enabling AUTOLINK Authentication If you want authenticated logins, you must separately configure the port to require AUTOLINK AUTHENTICATION. The authentication can be by PPP PAP, PPP CHA...

Managing Dial-Up Access Security with AUTOLINK and AUTOLINK Authentication 22-34 Managing Access Server Security If you use either the PAP NOUSERNAME or CHAP NOUSERNAME options with the PORT LCP AUTHENTICATION command when you enable AUTOLINK authentication, the login fails. Note if you configure th...

Managing Access Server Security 22-35 Managing Dial-Up Access Security with AUTOLINK and AUTOLINK Authentication Timeouts The following are the properties of AUTOLINK timeouts: • A user has one minute to complete an interactive login successfully. The clock starts from the time the USERNAME> prom...

Specifying Other Security Features 22-36 Managing Access Server Security Specifying Other Security Features Introduction This section describes various security features on interactive ports. Specifying Dedicated Service for LAT or Telnet Resources The results of specifying a dedicated service on a ...

Managing Access Server Security 22-37 Specifying Other Security Features Telnet Requirement To set an Internet host as a dedicated service, the default protocol must be set to TELNET. You can use the host’s Internet address, domain name, or relative domain name if the host is defined in a name serve...

Specifying Other Security Features 22-38 Managing Access Server Security Login Password Definition Example The following example shows how to define TOTAL as the login password: Local> CHANGE SERVER LOGIN PASSWORD "TOTAL" or Local> CHANGE SERVER LOGIN PASSWORD Password> TOTAL (not e...

Managing Access Server Security 22-39 Specifying Other Security Features Example: Changing the Server Password Attempt Limit The following example shows how to change the password limit to 6: Local> CHANGE SERVER PASSWORD LIMIT 6

Accounting 23-1 Chapter 23 7 Accounting Overview Introduction This chapter describes the network access server accounting component. The basis of an accounting facility is the logging of events related to user access. These events can be useful to support audit trails, billing, capacity planning, an...

Accounting Description 23-2 Accounting Accounting Description Introduction The configuration of the accounting feature is supported using SNMP and the user interface. The accounting log itself is also accessible by both mechanisms. There is also a facility for sending accounting events to the access...

Accounting 23-3 What Events Are Logged? What Events Are Logged? Contents of Log Entry Types The following table shows the fields that are logged in each accounting log entry type: Log Entry Type Event Time Port ID Port Access Peer Reason Tx Rx User Port Login X X X X X Port Logout X X X X X X Sessio...

What Events Are Logged? 23-4 Accounting Event Field Descriptions The following table describes the fields in the accounting log entries: Privilege Pass-word Modified X X X X Mainte-nance Pass-word Modified X X X X Login Pass-word Modified X X X X User Privilege Level Modified X X X X SNMP Commu-nity...

Accounting 23-5 What Events Are Logged? Port • For session connect/disconnect events: — Local Access: The port the session connect or disconnect occurred on. If the connection is initiated from a physical port, this field will have the physical port number. If the connection is initiated from an exi...

Accounting 23-7 What Events Are Logged? Peer The value of this field varies depending on the protocol field, as follows: • LAT — Local Access: For nondedicated/preferred case, whatever you type following the CONNECT [LAT] command. For example, C CLUSTER1 (peer is CLUSTER1); C CLUSTER1 NODE NODE1 (pe...

What Events Are Logged? 23-8 Accounting Tx • Session Disconnect Event: The number of bytes of successfully transmitted user data on this session at the time of session termination. This field will always be zero for MOP remote console connections. • Logout Event: The number of bytes output to the po...

Accounting 23-9 When Events Are Logged When Events Are Logged Introduction This section describes when each specific event type is logged. Login Events Login events are logged at the time of the successful login (just before the user gets the Local> prompt). Unsuccessful login attempts are handle...

When Events Are Logged 23-10 Accounting Password Modified Events Password modified events (Privilege, Maintenance, Login, Remote) are logged whenever the associated password is modified with a SET/DEFINE/CHANGE command. A single event is logged for each UI command (only one event is logged for a CHA...

Accounting 23-11 Managing Accounting Managing Accounting Introduction You can manage the accounting feature fully by using SNMP or the user interface. You can access the accounting log itself using both mechanisms. This section describes the user interface commands you can use to manage the accounti...

Managing Accounting 23-12 Accounting Changing the Accounting Threshold Use the ACCOUNTING THRESHOLD command to specify the point in the building of a log when the accounting component sends out a threshold notification.Valid values for the ACCOUNTING THRESHOLD variable are: • NONE: No notification. ...

Accounting 23-13 Managing Accounting Displaying Accounting Characteristics Use the SHOW ACCOUNTING CHARACTERISTICS command to display the current values of the accounting variables. Example: Displaying Accounting Characteristics The following example shows the display that appears when you use the S...

Managing Accounting 23-14 Accounting Displaying the Accounting Log Use the SHOW ACCOUNTING LOG command to view the log. Example: Displaying the Accounting Log The following example shows a sample accounting log: Local> SHOW ACCOUNTING LOG Accounting Log: Event: Login Time: 026:10:33 Port: 3 Acces...

Accounting 23-15 Using the Accounting Console Logging Feature Using the Accounting Console Logging Feature Description When console logging is enabled, the accounting component displays the accounting events on the server console as they occur. This can be useful for viewing events on a console term...

Using the Accounting Console Logging Feature 23-16 Accounting Example: Telnet Remote View of the Accounting Log The following example shows the commands necessary to remotely view the accounting log via Telnet with a loopback connector on port 16: Local> CHANGE PORT 16 ACCESS REMOTE Local> CHA...

Cable and Adapter Recommendations A-1 Appendix A Cable and Adapter Recommendations Cable and Adapter Hardware Cable and Adapter Table The following table lists the cable and adapter hardware you need to connect devices to specific DECserver models: To Connect This Device: To This DECserver Model: 90...

Glossary -1 Glossary access server A generic name for a family of Digital Equipment Corporation access servers. access server configuration database A load host database that contains the DECnet characteristics and the access server type, the load file name, and the dump file name for each access se...

Glossary-2 American Standard Code for Information Interchange See ASCII . AppleTalk An Apple Computer, Inc., trademark for their network protocol suite. ASCII American Standard Code for Information Interchange. A set of 8-bit binary numbers representing the alphabet, punctuation, numerals, and other...

Glossary-3 BOOTP Internet Bootstrap Protocol. This Internet protocol is used to configure the communications software on a load host. BOOTP/TFTP Server This is a load host that uses the BOOTP and TFTP Internet protocols to configure the load host and downline load the software. broadcast A access se...

Glossary-4 CRC Cyclic Redundancy Check. An error detection scheme in which a receiver checks each block of data for errors. CTS Clear To Send. A signal sent from the port device to the access server to indicate that the port device is ready to receive data. Cyclic Redundancy Check See CRC . datagram...

Glossary-8 Internet Protocol See TCP/IP . IP Internet Protocol. See TCP/IP . IP datagram Internet. A basic unit of information transferred over the Internet. IVP Installation Verification Procedure. This procedure verifies that the access server software was successfully installed on a OpenVMS load ...

Glossary-16 subnet identifier This is the part of the network address that is unique to the subnet. It can be determined by logically ANDing the Internet address with the subnet mask. subnet mask A 32-bit quantity that enables gateways and host computers to know which bits in the Internet address co...

Glossary-18 UDP User Datagram Protocol. A protocol that is the part of the Internet Protocol that provides datagram service. It distinguishes between multiple destinations on a host, allowing multiple application programs executing on a host to independently exchange (send and receive) datagrams wit...

Index-1 Index Symbols * 4-6 /etc/add_DECserver procedure 4-2 /etc/list_DECserver procedure 4-2 /etc/rem_DECserver procedure 4-2 >>> 5-9 Numbers 3270 emulation 1-2 , 18-1 , 18-19 configuring 18-4 terminal 18-1 A AARP 8-6 , 8-9 Abort Output (AO) 11-23 , 13-12 ACCESS Device characteristic 9-2 ...