Introduction        1

•   "Overview of PortMaster Hardware and Software" on page 1-1

•   "Preconfiguration Planning" on page 1-7

•   "Configuration Tips" on page 1-8

•   "Basic Configuration Steps" on page 1-9

Overview of PortMaster Hardware and Software

PortMaster products support three types of service:

• Routing services-to support both Internet Protocol (IP) and Novell Internetwork Packet Exchange (IPX) protocol routing. The dial-on-demand feature allows the use of dial-up lines when data must be sent between networks.

• Terminal services-to connect asynchronous devices and terminal emulation software for Telnet and rlogin connections to host computers. Terminal services also allow a user to access a server port as if it were a UNIX tty device for use with any standard serial device.

• Telecommuting services-to connect devices over telephone lines using Serial Line Internet Protocol (SLIP) or Point-to-Point Protocol (PPP). Security is accomplished with password protection, user authentication, packet filtering, ChoiceNet, and RADIUS.

    Table 1-1 provides brief descriptions of PortMaster hardware and software and their applications. More detailed descriptions follow the table.

   

  PortMaster Products

  Product	Features	General Applications
  PortMaster 3 Integrated Access Servers	Up to 60 internal modems. One or two 1.544Mbps ISDN Primary Rate Interface (PRI) T1/E1 ports, including channelized T1 support. One asynchronous port. One Ethernet port. CSU/DSU functionality. Communications server functionality. Multiprotocol router functionality, including Multichassis PPP.	High-density WAN service pooling for central sites with remote access and point of presence (POP) applications.
  PortMaster 2 Communications Servers	Multiple asynchronous 115.2Kbps serial ports-10, 20, 25, or 30. ISDN BRI ports-0, 5, 10, or 15. Security features including callback, password, packet filtering, PPP authentication protocols Password Authentication Protocol (PAP) and Challenge Handshake Authentication Protocol (CHAP), RADIUS, and ChoiceNet support. Dial-on-demand, continuous, scheduled, dynamic routing via Routing Information Protocol (RIP) and Open Shortest Path First (OSPF) protocol, and SAP support. Optional synchronous routing port over T1, E1, Frame Relay, ISDN, or leased lines. Support for TCP, IP, IPX, SPX, SAP, OSPF, RIP, SLIP, CSLIP, ICMP, UDP, ARP, Telnet, rlogin, and PPP protocols. TCP/IP host device emulation for connection to shared devices on supported hosts.	Terminal services, telecommuting, and routing for enterprise-wide connections.
  PortMaster IRX Routers	Multiprotocol routing. From 1 to 4 synchronous ports for interfacing to other WAN routers. Networking speeds up to T1/E1 for TCP/IP and IPX networks. Synchronous, asynchronous, Frame Relay, and PPP connections.	High-speed routing between remote sites.
  PortMaster FireWall IRX Router	Multiprotocol routing. Secure Internet access. No intruder access to internal networks and data. T1/E1 synchronous port for PPP or Frame Relay. Asynchronous port for dial-up networking or out-of-band management, and two local Ethernet ports. Enhanced filtering. Packet logging. Network isolation.	High-speed routing to gateway servers and the Internet.
  PortMaster Office Routers	Small size. Dial-up routing capability for connecting to other offices or the Internet. One Ethernet port for local connection, and one asynchronous port for administration or dial-up connections. Multiprotocol routing, filtering, and routing support. One of the following: One PCMCIA port for dial connections One ISDN BRI port (ST interface) One ISDN BRI port with integrated NT1 (U interface) DB-25 V.35 synchronous port (384Kbps) DB-25 V.35 T1/E1 synchronous port (2.048Mbps)	On-demand routing to other offices, or cost-effective Internet connection.
  ComOS software	Remote access operating system with a command line interface, for all PortMaster products.	PortMaster configuration, operation, and administration.
  PMconsole software	Multiplatform graphical user interface (GUI) for configuring PortMaster products.	PortMaster configuration and administration.
  RADIUS software	Extensible security system that enables authentication, authorization, and accounting of dial-up users.	Network and data security.
  ChoiceNet software	Centralized traffic-filtering mechanism for networks using dial-up remote access, synchronous leased-line, or Ethernet connections.	Fine-tuning the level of access provided to users.

PortMaster 3 Integrated Access Server

The PortMaster 3 comes with one or two T1/E1 ports, one Ethernet port (with three connector types), one asynchronous console port, and six expansion slots for digital modem cards. Up to 6 digital modem cards (for a maximum of 60 modems) can be installed in each chassis, with 8 or 10 modems per card.

For installation information, see the PortMaster 3 Hardware Installation Guide.

PortMaster 2 Communications Servers

All Communications Servers have an Ethernet port and some combination of asynchronous, synchronous, and parallel ports.

For installation information, see the PortMaster Communications Server Hardware Installation Guide.

PortMaster IRX Internetwork Routers

IRX routers have one or two Ethernet ports, one asynchronous port for dial-up routing or console administration, and one or more synchronous ports for high-speed routing. The IRX routers are designed to perform routing functions and not communications server functions.

The FireWall IRX-211 router has two Ethernet ports and provides local networks with secure connectivity to remote networks, including the worldwide Internet. The FireWall IRX-211 provides security by allowing internetwork-accessible hosts, such as FTP and Web servers, to be segmented from the private network. This router also implements independent packet filtering and packet logging for each network segment. Packet filtering allows you to permit or deny the passage of packets to limit inbound packets, while providing local users with outbound access to remote networks and Internet services.

For installation information, see the PortMaster Internetwork Router Hardware Installation Guide.

PortMaster Office Routers

Each PortMaster Office Router consists of an Ethernet port, a console port that can also be used for an external modem, and one of the following:

• PCMCIA modem port

• ISDN Basic Rate Interface (BRI) port

• Synchronous port

  For installation information, see the PortMaster Office Router Hardware Installation Guide.

PortMaster Software

• ComOS-The communication software operating system already loaded in the Flash RAM of each PortMaster. You can use the ComOS command line interface to configure your PortMaster through a console.

• PMconsole-The GUI software for configuring the PortMaster. The PortMaster can also be configured through the console or a Telnet session without PMconsole. PMconsole is available for Microsoft Windows, SunOS, Solaris, AIX, HP-UX, and other UNIX platforms.

For installation and configuration instructions, see the PMconsole for Windows Administrator's Guide.

• pmd or in.pmd-The optional PortMaster daemon software that can be installed on UNIX hosts to allow the host to connect to printers or modems attached to a PortMaster. The daemon also allows the PortMaster to multiplex incoming users onto the host using one TCP stream instead of multiple streams like rlogin. The daemon is available for SunOS, Solaris, AIX, HP-UX, and other platforms.

For installation and configuration instructions, copy the PortMaster software to the UNIX host as described in the PortMaster Software CD booklet.

• RADIUS-The RADIUS server, radiusd, runs as a daemon on UNIX systems, providing centralized authentication of dial-in users. The radiusd daemon is provided to Lucent Remote Access customers in binary and source form for SunOS, Solaris, Solaris/X8.6, AIX, HP-UX, IRIX, Alpha OSF/1, Linux, and BSD/OS platforms.

For installation and configuration instructions, see the RADIUS Administrator's Guide.

• ChoiceNet-ChoiceNet is a security technology invented by Lucent Remote Access to provide a traffic filtering mechanism for networks using dial-up remote access, synchronous leased-line, or Ethernet connections. When used with RADIUS, ChoiceNet provides exceptional flexibility in fine-tuning the level of access provided to users.

For installation and configuration instructions, see the ChoiceNet Administrator's Guide.

Preconfiguration Planning

The configuration guide is designed to introduce the most common configuration options available for PortMaster products. Review this material before you configure your PortMaster. If possible, make the following decisions before you begin the configuration process:

• What general configuration do you want to implement?

• Do you want to use a synchronous connection to a high-speed line?

• Will your high-speed lines be using Frame Relay, ISDN, switched 56Kbps, or PPP?

• If you want dial-on-demand routing, do you want multiline load-balancing?

• Do you want multilink PPP (RFC 1990)?

• Do you want packet filtering for Internet connections?

• Do you want packet filtering for connections to other offices?

• Do you want dial-in users to use SLIP, PPP, or both?

• If you use PPP, do you want PAP or CHAP authentication?

• Are you using a name service-DNS or NIS?

• Do you have the appropriate network addresses available?

• Are you running IP, IPX, or both?

• Do you want to enable SNMP for network monitoring?

• Do you want dial-in only, dial-out only, or two-way communications on each port?

• What characteristics do you want to assign to the dial-out locations?

• How do you want to configure dial-in users?

• Do you want to use RADIUS to authenticate dial-in users, or the internal user table on the PortMaster?

• Do you want to use ChoiceNet to filter network traffic?

• Do you want to use the console port for administration functions, or do you want to attach an external modem to the port?

• For dial-in uses, are you receiving service on analog lines, ISDN BRI, ISDN PRI, channelized T1, or E1?

Configuration Tips

If You Are Configuring...	Then Configure Settings on...
A network hardwired port or hardwired multiline load balancing	The port
One or more ports for dial-out operation	Dial-out locations using the location table
One or more ports for dial-in operation	Dial-in users using the user table or RADIUS
A callback network user	The callback location in the location table, and refer to the location name in the user table

Basic Configuration Steps

1. Install the PortMaster hardware and assign an IP address and a password as described in the installation guide shipped with your PortMaster.

   Note ¯ This guide assumes that you have completed Step 1 and does not give details on hardware installation or IP address assignment.

2. Boot the system and log in with the administrative password.

   You can configure the PortMaster from a terminal attached to the console port, by an administrative Telnet session, or by a network connection.

3. If you want to use PMconsole software to configure your PortMaster, install it on a workstation anywhere on your network.

   See the PMconsole for Windows Administrator's Guide for more information about using PMconsole to configure your PortMaster. PMconsole for UNIX is similar.

4. Configure the global settings.

   PortMaster global settings are described in Chapter 3, "Configuring Global Settings."

5. Configure the Ethernet settings, and configure the IP and IPX protocol settings for your network.

   PortMaster Ethernet settings are described in Chapter 4, "Configuring the Ethernet Interface."

6. Configure the asynchronous port(s).

   PortMaster asynchronous port settings are described in Chapter 5, "Configuring an Asynchronous Port."

7. Configure the synchronous port(s), if available.

   PortMaster synchronous port settings are described in Chapter 6, "Configuring a Synchronous WAN Port."

8. Configure ISDN BRI connection(s), if available.

   ISDN PRI connection configuration is described in Chapter 11, "Configuring the PortMaster 3." ISDN BRI connection configuration is covered in Chapter 12, "Using ISDN BRI."

9. Configure dial-in users in the user table, or configure RADIUS.

   The user table is described in Chapter 7, "Configuring Dial-In Users." If you are using RADIUS security instead of the user table, see the RADIUS Administrator's Guide.

10. Configure ChoiceNet, if you are using it.

    ChoiceNet is a traffic filtering mechanism for networks using dial-up remote access, synchronous leased-line, or Ethernet. Refer to the ChoiceNet Administrator's Guide for more information.

11. Configure dial-out locations in the location table.

    The location table is described in Chapter 8, "Configuring Dial-Out Connections."

12. Configure filters in the filter table.

    Once the filters are created, they can be assigned as input or output filters for the Ethernet interface, users, locations, or hardwired ports. Filters are described in Chapter 9, "Configuring Filters."

13. Configure OSPF, if you are using this protocol.

    OSPF is described in the PortMaster Routing Guide.

14. Configure BGP, if you are using this protocol.

    BGP is described in the PortMaster Routing Guide.

15. Troubleshoot your configuration, if necessary, and back it up.

    See Chapter 20, "Preventing and Troubleshooting Problems," for instructions. Once you have correctly configured all the settings necessary for your circumstances, your PortMaster is ready to provide communication service and routing for your network.