Perle Systems IOLINK-520 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of Perle Systems IOLINK-520, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Perle Systems IOLINK-520 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of Perle Systems IOLINK-520. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of Perle Systems IOLINK-520 should contain:
- informations concerning technical data of Perle Systems IOLINK-520
- name of the manufacturer and a year of construction of the Perle Systems IOLINK-520 item
- rules of operation, control and maintenance of the Perle Systems IOLINK-520 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Perle Systems IOLINK-520 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Perle Systems IOLINK-520, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Perle Systems service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Perle Systems IOLINK-520.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the Perle Systems IOLINK-520 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    IOLINK-520 and IOLINK-PRO Bridge / Router s with VPN USER AND SYSTEM ADMINISTRATION GUIDE Issue 1 © Copyright 2001 by Perle Systems Ltd. 01/2001 Part # 168-44201[...]

  • Page 2

    IOLINK -520 IOLINK -PRO and Bridge / Routers with VPN USER AND SYSTEM ADMINISTRATION GUIDE Issue 1[...]

  • Page 3

    IOLINK-520 and IOLINK-PRO Bridge / Router with IPSec USER AND SYSTEM ADMINISTRATION GUID E[...]

  • Page 4

    Export Control Notice Under the terms of C anadian Export Control, the exporter is obligated to inform the end user of certain restrictions on the use and re-exportation of products containing cryptographic technology 1. The exporter's Export Permit allows the distribution of this product containing specified cryptographic technology to only t[...]

  • Page 5

    Federal Communicati ons Commission (FCC) Note: Thi s equi pment h as b een tes ted and fo und to co mply wi th the l imi ts for a Clas s A digi tal dev ice, p ursua nt to Part 15 of t he FCC Rules. These limits are d esigned t o provide reasonable protection ag ainst harmfu l interfere nce when t he equipm ent is operat ed in a com mercia l environ[...]

  • Page 6

    Using This Manual This Ins tallation and Applications Guide provides the basic information required to initially set-up and configure the IOLINK-520 & PRO Br idge/Router. This guide is organized into the following s ections: “ Installation ” provides instructions for installing the I OLINK-520 & IOLINK-PRO. “ Typical Applications &[...]

  • Page 7

    Contents IOLINK-520 & IOLINK-PR O Installation & Applications Guide 1 INSTALLATION ___________________________________________1.1 Unpack the IOLINK Router ................................................................................ 1.1 Select a Site ........................................................................................[...]

  • Page 8

    Contents IOLINK-520 & IOLINK-PR O Installation & Applications Guide Configure Remote Site Profiles for Leased Line PPP ..............................................2.32 Configure Remote Site Profiles for Frame Relay with ISDN B ackup ...................2.34 Advanced Features .................................................................[...]

  • Page 9

    Contents IOLINK-520 & IOLINK-PR O Installation & Applications Guide A MENU TREES ____________________________________________A.1 B OCTET LOCATIONS ON ETHERNET FRAMES _____________B.1 Octet Locations on a Bridged T CP/IP Frame................................................... B .1 Octet Locations on a Bridged Novell Netware Frame ..........[...]

  • Page 10

    Contents IOLINK-520 & IOLINK-PR O Installation & Applications Guide * * * *[...]

  • Page 11

    IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 1.1 1 Installation The IOLINK-520 & IO LINK-PRO are flexible Ethernet B ridge/Routers that may be configured to ser vice Local Area Networks and Wide Area Network connections over leased lines, ISDN circuits, and frame relay permanent virt ual circuits. The I OLINK-PR O supp[...]

  • Page 12

    Applications 1.2 — IOLINK-520 & I OLINK-PRO Installation & Applications Guide Identify the Reset Switch The small hole under the front right corner of the faceplate is us ed in case a hardware res et is required. The end of a paper clip is suff icient to toggle the sm all switch behind the hole. Front Vi e w Bottom Vi e w RES ET Figure 1-[...]

  • Page 13

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 1.3 Identify the Connectors IOLINK-PRO The IOLINK-PR O may be ordered with a 10Base2, 10Bas e5, or 10BaseT LAN interface. If this IOLINK-PR O has an ISDN U or S/T Module, it must only be installed in the slot 1 (leftmost position when viewed f rom the rear of the un[...]

  • Page 14

    Applications 1.4 — IOLINK-520 & I OLINK-PRO Installation & Applications Guide CONSOLE 10/100 BT LAN MDI- X MD I LAN/ Cons ole m od ule Powe r conn ec tor RS-232/V .24 LAN 2 mo d u l e Li n k 2 mo d u l e 10 BT LAN MDI- X MD I Figure 1-4 Rear View of the IOLINK-520 with Dual LAN connections and a single WAN module Connect to the Console Co[...]

  • Page 15

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 1.5 Power Up the Bridge/Router Once the LAN and Link connections are made and the console is connected to a terminal, you are ready to power- up the IOLI NK router. Connect the AC power cord to t he back of the IOLI NK router and plug the cor d into the AC wall outl[...]

  • Page 16

    Applications 1.6 — IOLINK-520 & I OLINK-PRO Installation & Applications Guide Conventions Throughout this section, IOLI NK-520 & IOLINK-PRO menu options are shown that are required for the various configuration choices. The appropriate menu options are shown in each instance in the fo llowing format: Configuration Option Name Location[...]

  • Page 17

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 1.7 Login to Bridge/Router and Enter the Required Configuration At the login scree n type a 1 an d the default passw ord to enter the me nu system of the IOLINK Router. The default password is “BRIDGE” (case sensitive) and should be changed if security is desire[...]

  • Page 18

    Applications 1.8 — IOLINK-520 & I OLINK-PRO Installation & Applications Guide Mandatory Configuration The IOLINK-520 & IOLINK-PRO requires a minimum amount of mandatory configuration in order to operate. The following table identifies the configuration parameters that must be defined for proper operation under the operational states s[...]

  • Page 19

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 1.9 Identify the Status LEDs The four th ree colour Light Emitting Diodes (LEDs) on the f ront of the IOLINK router are depicted in Figure 1-1. T he meanings of thes e LEDs are found in th e following chart. Off Bridge/Router is powered down Green Bridge/Router is r[...]

  • Page 20

    Applications 1.10 — IOLINK-520 & I OLINK-PRO Installation & Applications Guide * * * *[...]

  • Page 21

    IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.1 2 Typical Applications & How to Configure Them The IOLINK-520 & IOLINK-PRO are flexible Ethernet Bridge/R outers. This section will describe how to set-up the IOLINK-520 & IOLINK-PR O routers using each of its networking functions. Note that depending on the mode[...]

  • Page 22

    Applications 2.2 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.1 - Bridging a nd Routing Should You Bridge or Ro ute? When connecting two networks together, the first question to ask is “should I bridge or route”? The decision to bridge or to route may be decided by how the existing networks have been already set-up. [...]

  • Page 23

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.3 2.1.1 - Bridging An Ethernet bridge intelligently forwards Ethernet data packet traffic between connected networks. The traffic may be across the Wide Area Network (illustrated below) or, in the case of the IOLINK-520, may be between two LANs connected to the s [...]

  • Page 24

    Applications 2.4 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.1.2 - IP Routin g An Ethernet IP router is used to intelligently route Internet Protocol (IP) traffic to another network. The networks may be connected across a WAN link (illus trated below) or two LANs connected to the same dual LAN IOLINK-520. Figure 2 -2 IP[...]

  • Page 25

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.5 2.1. 2 .1 - IP Addressing Devices on an IP network are located by their IP addresses, which is a 32 bit number divided into four 8 bit fields. The IP address identifies both the network and the host device (also known as a node) on that network. The address is u[...]

  • Page 26

    Applications 2.6 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.1.2.2 Masks The portion of the IP address to use as the network address is specified by us ing a mask; a mask is the contiguous number of bits to be used for the network address all set to 1. When the mask is logically ANDed with an IP addres s, the result is [...]

  • Page 27

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.7 The IOLINK-520 & IO LINK-PRO allows mask sizes from 8 to 32 bits. The subnet mask size determines how many bits of the host field of the original IP network address will be used for the creation of subnets. In this example, specifying a mask size of 26 will [...]

  • Page 28

    Applications 2.8 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.1.2.3 - IP Default Gatewa y An IP default gate way is a n IP router that is resident on the local IP network that this IOLINK router is connected to and is used to route IP fr ames for dest ination networks that do not exist in the r outing table. When an IP f[...]

  • Page 29

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.9 2.1.3 - IPX Routing The IOLINK-520 & IOLINK-PRO are pre-configured to operate as an IPX router. When installed in an IPX network, the IOLINK router will learn the IPX network numbers from connected networks. It will then route the IPX frames to the appropria[...]

  • Page 30

    Applications 2.10 — IOLINK-520 & IOLI NK-PRO Installation & Applications Guide Once the WAN connections hav e been established to the remote par tner IOLINK routers, the IPX router portion of the IO LINK routers will begin to build their r outing tables accor ding to the IPX frames they r eceive from the networ k. Manual entries may be ma[...]

  • Page 31

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.11 The following steps must be perfor med on the IOLINK ro uter connected to LAN #2. IPX Routing Disabled Location: Main ! Configuration ! Packet Services Set- up ! IPX Routing Set-up ! IPX Routing Disabling IPX routing allows the IP X frame types to be modified. [...]

  • Page 32

    Applications 2.12 — IOLINK-520 & IOLI NK-PRO Installation & Applications Guide IPX Forwar ding Enabled Location: Main ! Configuration ! Packet Services Set- up ! IPX Routing Set-up ! IPX Forwarding IPX forwarding must be re-enabled to allow the IOLINK router to forward IPX frames onto the WAN to the partner IOLINK router IPX routers. The [...]

  • Page 33

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.13 2.1 . 4 - PPP Overview Point to Point Protocol (PPP) is a connection protoc ol that allows control ove r the set-up and monitoring of network communications. It is used in procedures for user authentication (name and password), connection management (spoofing, [...]

  • Page 34

    Applications 2.14 — IOLINK-520 & IOLI NK-PRO Installation & Applications Guide 2.1.4.3 - Unnumbered Links An unnumbered link does not use network addressing on the WAN link. The WAN connection is roughly equivalent to an internal connection with each of the two end point routers oper ating as half of a complete r outer that is connect ed [...]

  • Page 35

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.15 2.1.4.4 - Multilink Operation Multilink operation defines the use of more than one link to connect between two PPP routers. When a multilink connection is required, simply enable the Multilink Operation option of the remote site profile for that connection. Whe[...]

  • Page 36

    Applications 2.16 — IOLINK-520 & IOLI NK-PRO Installation & Applications Guide 2.2 Basic WAN Configurations 2.2.1 - Basic ISDN Connecti ons If this IOLI NK-520 & IOLINK-PRO are configured as an ISDN bridge/router, it may establish WAN connections to other bridge/routers via ISDN (Integrated Services Digital Network) connections. Befor[...]

  • Page 37

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.17 The following steps must be performed to configure the IOLINK-520 & IOLINK-PR O: The default switch type for ISDN S/T interface modules is NET3, the default s witch type for ISDN U interface modules is NI-1. If the type of service your pr ovider uses matche[...]

  • Page 38

    Applications 2.18 — IOLINK-520 & IOLI NK-PRO Installation & Applications Guide Once the ISDN switch type and directory number s have been configured, the I OLINK router mus t be reset for the new values to t ake effect and for the ISDN BR I int erface to register wit h the central switch. Soft Reset Location: Main ! Diagnostics ! Soft Res[...]

  • Page 39

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.19 2.2.1.1.1 - IPX Router M anual Call Connection To establish an IPX PPP direct dia l connection, e nter the ISDN phone number of the remote site PPP router in the manual dial option. Refer to the Configure as an E thernet IPX Router section 2.3.1 for more inform[...]

  • Page 40

    Applications 2.20 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.2.2 - Basic Frame R elay Config uration North American IOLINK-520 & IOLINK-PRO with at least one non-ISDN interface are configured to have frame relay enabled for that interface by default. IOLINK-520 & IOLINK-PRO shipped outside of North America with[...]

  • Page 41

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.21 Configuration: The default configuration for IOLINK- 520 & IOLINK-PRO shipped outside North Americ a is to have frame r elay disabled. To run fr ame relay on these r outers, it must fir st be enabled. Selecting the Fr ame Relay option will toggle the settin[...]

  • Page 42

    Applications 2.22 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide learning process, the IOLINK router will automatically create a remote site profile for each PVC. The automatically created remote si te profiles will be named “LinkxDLCIyyy” where x is the phys ical link number the PVC is on and yyy is the DLCI of t he PVC[...]

  • Page 43

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.23 2.2.2.3 - Quick Star t Fra me Relay Since the IOLINK-520 & IOLI NK-PRO auto-learns the frame relay configuration, only a couple of parameters need to be configured before the unit is fully operational as an IP router for frame rela y. Upon initial start up,[...]

  • Page 44

    Applications 2.24 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.2.3 - Basic Lea sed Line Config uration The IOLINK-520 & IOLINK-PRO establishes PPP (Point to Point Protocol) W AN connections to other PPP Le ased Line IOLINK route rs or to other vendors PPP leased line routers via direct leased line connections. Either[...]

  • Page 45

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.25 The following steps must be performed on each of the IOLINK routers in the network. Local IP Address Location: Main ! Configuration ! Interface s Set-up ! LAN Set-up ! LAN IP Set-up ! IP Address / mask siz e This is the IP a ddress and subne t mask for the li n[...]

  • Page 46

    Applications 2.26 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.3 - Configure Remote Site Profiles Remote Site Profiles allow the IOLINK router to have different s ets of configuration parameters f or each of the remot e site routers that may be called or that may call this IOLINK router. This allows complete control over[...]

  • Page 47

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.27 2.3.1 - Configure Rem ote Sit e Profiles for ISDN PPP If this I OLINK rout er is configured to have at least one I SDN switched circuit, th e ISDN call parameters must be defined so that the IOLINK router knows what ISDN phone number to dial when a connection t[...]

  • Page 48

    Applications 2.28 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 1 b) Defining this remote site profile within the IP Address connect table, which will cause a call to be made when a packet fo r this IP address is r outed, Location: Main ! Configuration ! Connections up ! IP Address Connect ! IP Address Connect Enabled 1 c )[...]

  • Page 49

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.29 2.3.2 - Configure Remote Site Prof ile for Frame Relay Each of the PVC’s on t he frame relay service mus t be configur ed within an individual remote site profile on the IOLINK route r. This is usually done automa tically through the auto-learning process. Wh[...]

  • Page 50

    Applications 2.30 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide The DLCI number defined here is the Data Link Connection Identifier value provided by your frame r elay service provider. T his value must be set if auto-learning is disabled. Each Remote Site PVC must be defined to exist on one of the two physical WAN links av[...]

  • Page 51

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.31 EIR Location: Main ! Configuration ! Connections up ! Remote Site Set-up ! Edit Remote Site ! Connection Set-up ! EIR The EIR value specifies the indicated data rate t hat may be available for th is PVC. This value must be set to the sa me as the value provide [...]

  • Page 52

    Applications 2.32 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.3.3 - Configure Rem ote Sit e Profiles for L eased Li ne PPP Remote Site Profiles allow the IOLINK router to have different s ets of configuration parameters for e ach of the possible remote site PPP route rs that may be c onnected to this IOLINK r outer. Thi[...]

  • Page 53

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.33 Now that the remote s ite profile is cr eated, a link number must be ass igned as the primar y link number. The primary link number is the link interface that the IOLINK router will use to attempt to establish a c onnection to the re mote site PPP router. Prima[...]

  • Page 54

    Applications 2.34 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.3.4 - Configure R emo te Site Profi les for Frame R elay with ISDN backup Frame Relay operation is set-up as described in s ection 2.3.2 The PVC on both partner router s must be dis abled during this s et-up procedure, then r e-enabled when ready to star t. I[...]

  • Page 55

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.35 2.4 Advanced F eatures 2.4.1 - Configure Dynamic Host Configuration Protocol The IOLINK-520 & IOLINK-PRO use Dynamic Host Configuration Protocol (DHCP) to allow users in a s mall office environment to be added and r emoved from a network with all of the net[...]

  • Page 56

    Applications 2.36 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide DNS Set-Up Location: Main ! Configuration ! Application Set-up ! DHCP Set-up ! DNS Set-up ! Primary DNS -IP address local DNS server ! Secondary DNS -IP address external DNS server Figure 2 -10 Local + External DNS Ser ver Configuration The configuration option[...]

  • Page 57

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.37 2.4.2 - Network Address Translation and Port T ranslation The IOLINK-520 & IOLI NK-PRO provide support for Network Address Translation (NAT). Networ k Address Tr anslation is a technique that trans lates pr ivate IP address on a private ne twork to va lid g[...]

  • Page 58

    Applications 2.38 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide Figure 2 -11 NA PT Configuration Int er net S e rv ic e Prov ider Pri vat e Networ k Addresse s: Global IP Addres s: 199.87. 65. 43 NAPT mapping : 1.1. 1.2 = 199 .87. 65. 43 (25) 1.1. 1.3 = 199 .87. 65. 43 (23) 1.1. 1.4 = 199 .87. 65. 43 (80) e-mail server 1.1.[...]

  • Page 59

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.39 2.4.3 - Security The IOLINK router provides a number of means of providing security on incoming and outgoing traffic on a net work. These methods include the IPsec pr otocol suite, access password authentication, firewall limiting access to only des ignated dev[...]

  • Page 60

    Applications 2.40 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide make provision for NAT to be used with tunneling. We will use this example for the configuration on the pages that follow. The setup for an IPSec connection is done in the IP security set-up menu under Configuration - Packet Services. IP Security may be disable[...]

  • Page 61

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.41 Note that the policy will be applied to all WAN interfaces, so a link on a second WAN interface must have a policy item (or items) to permit tr affic acros s that interface. Next, the policy ite m(s) that specify the SA(s), the rules to te st packets a gainst a[...]

  • Page 62

    Applications 2.42 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide Then the authentic ation algorithm should be se t to MD5 IPSec ESP SA Location: Main ! Configuration ! Packet Services Set -up ! IP Security Set-up ! Policy Set-up ! Edit Item item_name ! Manual ESP SA ! Authentication MD5 If Authentication is left as “none?[...]

  • Page 63

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.43 Now the selection rules used to test each packet against are s et IPSec ESP SA Location: Main ! Configuration ! Packet Services Set -up ! IP Security Set-up ! Policy Set-up ! Edit Item item_name ! Selection Rules ! Src IP 10.10.10.1 (25) ! Dest IP 192.168.10.1 [...]

  • Page 64

    Applications 2.44 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide To do its job as a router, this device must know where t o for ward packets with I P addres ses outside the LAN. T his may be done in a number of ways : a static IP r oute to the LAN at the other end of the SA connect ion may be set, the IP addr ess of the Inte[...]

  • Page 65

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.45 Once the IPSec policies have been conf igured and it has been confir med that traff ic is passing over the IPSec connection, the default action for failed packets should be changed to discard. The initial factory setting is to bypas s IPSec, which allows remote[...]

  • Page 66

    Applications 2.46 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.4.3.2 - Configure PPP Security The PPP IOLINK-520 & IOLINK-PRO provide support for both PAP and CHAP security access authentication. An outgoing us er name, PAP pass word, and CHAP secret are defined that the IOLINK router will use when responding to an a[...]

  • Page 67

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.47 Remote Site S ecurity Parame ters E ntry Location: Main ! Configuration ! Connections up ! Edit Remote Site ! Security Pa rameters ! Outgoing User Name ! Incoming PAP Password ! Outgoing PAP Password or ! Incoming CHAP Secret ! Outgoing CHAP Secret The outgoing[...]

  • Page 68

    Applications 2.48 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.4.3.3 - Configur e Firewa ll The IOLINK-520 & IOLINK- PRO provide Firewall secur ity for restr icting access between any two networks connected through the ro uter. Firewalls ar e set-up on a per connection basis for the LAN and remote sites. T he directi[...]

  • Page 69

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.49 First the firewall on the I SP connection (remote s ite 1) of the WAN is set-up. The fi rewall option is set to “inbound” to have this WAN firewall filter traffic from the ISP to the IOLINK r outer while allowing unrestr icted access out t o the Intern et. [...]

  • Page 70

    Applications 2.50 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide Then an entry is placed in the firewall t able to allow the devices in the br anch office remote site to have unlimited T CP access to devices in the head office. Firewall Table E ntry Location: Main ! Configuration ! Applications Set-up ! Firewall Set-up ! LAN[...]

  • Page 71

    Applications IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 2.51 2.4.3.4 - Networ k Address Transla tion Using private addresses on a network and NAT/NAPT for interactions over an internetwork connection hides the internal address fr om the rest of t he world. Access is restri cted to only those s ervices that are specifical[...]

  • Page 72

    Applications 2.52 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide 2.4.5 - Bandwidth On Dema nd The IOLINK router may be set to activate its s econdary link when the load on the primar y link exceeds a user-d efined threshold. Set the traf fic loads for enabling and dis abling the secondary circuit Location: Main ! Configurati[...]

  • Page 73

    Introd uction to Fi ltering IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 3. 1 3 Introduction to Filtering The IOLINK-520 & IO LINK-PRO provide programmable filtering which gives you the ability to control under what conditions Ethernet frames are forwarded from one network to another. There are many reasons why this mi[...]

  • Page 74

    Introdu ction to Filter ing 3.2 — IOLINK-520 & IOLI NK-PRO000 Installation & Applications Guide Pattern Filtering Pattern filtering is provided in three separate sections: Bridge Pattern Filters, IP Ro uter Pattern Filter s, and IPX R outer Pattern F ilters. When the I OLINK router is operating as an IP/IPX B ridge/Router, each of t he fr[...]

  • Page 75

    Introd uction to Fi ltering IOLINK-520 & IOLINK-PR O Installation & Applications Guide — 3. 3 Example: ~12-80 This filter pattern will match if the packet information starting at the 12th octet does not equal the 80 of the filt er pattern. ( ) brackets Used in pattern filters to separate portions of filter patterns for specific operators.[...]

  • Page 76

    Introdu ction to Filter ing 3.4 — IOLINK-520 & IOLI NK-PRO000 Installation & Applications Guide Banyan Banyan (12-0BAD) (12-80C4) (12-80C5) IP Router IP router pattern filters are applied to I P Ethernet f rames that ar e being routed. When the IOLINK router is operating as an IP router, all IP routed frames will be checked against the de[...]

  • Page 77

    IOLINK-520 & IOLINK-PR O Installation & Applications Guide — A. 1 Appendix A Menu Trees The menu trees on the following pages are a graphical r epresentation of t he hierarchy of the built -in menu system of the IOLINK-520 & I OLINK-PRO. Each of the menus are shown with the options of the menus being displayed below the specific menu [...]

  • Page 78

    ISDN O ptions Fr ame R elay O ption s Continued on next page MAIN Me nu T re e softw are relea se: 51P .04. 06. xx 52P .04.0 6.x x 3] Confi gur ation 1. T ermina l 2. S how 3. A dd 4. Remov e 1. Device Set-Up menu 2. T el net S e t-U p m e nu 3 Upgr ade Dev ice 4. Load F LASH Set -Up menu 5. Cons ol e 6. Ha rdwa re S tatus 7. TF TP ac c e ss Acces [...]

  • Page 79

    Continued from pr ev i o us pa ge Continued on next page 1. IP rout in g me n u 2. NA T Adva nc ed men u 3. IP enabl ed 4. NAT enabl ed 5. Li nk I P addres s 6. P eer IP ad dres s 7. P riv ate Rout e/ Ne g oti ate ad dr ess 8. VJ co mpression 1. IP X ena ble d 2. Li nk I PX type 3. IP X net 4 Loca l IPX nod e 5. Peer IPX node 6. S tati c rou tes on[...]

  • Page 80

    Con t in ue d f rom pr ev i o us page Continued on next page ISDN O ptions Fr ame R elay O ption s softw are relea se: 51P . 04.06. xx 52P .04.0 6.x x Packet Ser vices Set-Up 4] 1. De st in at io n 2. S tat u s 3. R em ot e s ite 2. Ne xt hop 3. Type 4. Co st 5. P ri vat e 6. A dd/ Re mov e 8. S tat u s 7. Network mask 1. IP R ou te s m en u 1. Edi[...]

  • Page 81

    Continued from pr ev i o us pa ge ISDN O ptions Fr ame R elay O pt ions softw are relea se: 51P . 04.06. xx 52P .04.06 .x x 1] 1] 2] 3] 2] He lp 1. S oft Re set 2. F ul l Re set 3. He art b ea t 4. W AN tr ace 5. W AN loop ba c k 1. Tr ace lin k 2. Re al Time 3. Ca pt ure 4. E nd 5. Da ta disp l ay 6. Time 1. Li nk op era ti on 2. E xt ern al l oop[...]

  • Page 82

    * * * *[...]

  • Page 83

    IOLINK-520 & IOLINK-PR O Installation & Applications Guide — B.1 Appendix B Octet Locations on Ethernet Frames This appendix provides octet locations for the various portions of three of the common Ethernet frames. When creating pattern filters these diagrams will ass ist in the correct definition of the patterns. The offset numbers are i[...]

  • Page 84

    Octet Locations B.2 — IOLINK-520 & IOLINK-PR O000 Installation & Applications Guide Octet Locations on a Bridged Novell Netware Frame ETHERNET Type Codes Type Code Description 0800 DOD IP 0801 X.75 Internet 0804 Chaosnet 0805 X.25 Level 3 0806 A RP 0807 XNS Compatibility 6001 DEC MO P Dump/Load 6002 DEC MO P Remote Console 6003 DEC DECNET[...]

  • Page 85

    Configuration Pages IOLINK-520 & IOLINK-PR O Installation & Applications Guide — B.3 Octet Locations on an IP Routed TCP/IP Frame Octet Locations on an IPX Routed Novell Netware Frame[...]

  • Page 86

    Octet Locations B.4 — IOLINK-520 & IOLINK-PR O000 Installation & Applications Guide Octet Locations on a Bridged XNS Frame[...]

  • Page 87

    IOLINK-520 & IOLINK-PR O Installation & Applications Guide — C. 1 Appendix C Servicing Information Opening of the case and changing of modul es is only to be performed by qualified service per sonnel. WARNING ! A lways disconnect the pow er cord fr om the rear panel of the bri dge/router. The bridge/router case does not need to be opened [...]

  • Page 88

    Servicing Informat ion C.2 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide Identifying the Internal Components The major components of concern are shown in the following illustration. Link 2 In te rfa ce M odul e (IS DN BR I, DS U, G.70 3 , RS23 2, V .3 5, RS422 o r V .1 1) Primary LAN & Console In te rfa ce M odul e Link[...]

  • Page 89

    Servicing Informat ion IOLINK-520 & IOLINK-PR O Installation & Applications Guide — C.3 To Clear a “Lost” Password 1) Remove power from the bridge/router. 2) Remove the screw securing the LAN / Console module t o the rear of th e bridge/router. Be sure to grip the module only by the flange at the bottom of the metal panel. 3) Unplug t[...]

  • Page 90

    Servicing Informat ion C.4 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide Installing the ISDN Link Modules If there is an ISDN module plus another type of WAN interface module or if there is a single ISDN module, the ISDN U or S/T Module must only be installed in the Slot 1 position. The slot 2 position may contain another t[...]

  • Page 91

    Servicing Informat ion IOLINK-520 & IOLINK-PR O Installation & Applications Guide — C.5 Changing the Termination Straps on the ISDN S /T Interface The ISDN S/T link interface module has two configurable straps that control whether the ISDN LINE is set to terminate d or unterminated. Jumper str aps W5 and W6 are factory ins talled to confi[...]

  • Page 92

    Servicing Informat ion C.6 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide Performing a Software Upgrade 1) Execute the Network (TFTP) c ommand from the Load FLASH Set-Up menu. 2) Enter “none” to connect locally or enter the remote site ID number or alias to connect to a re mote site. 3) Start the TFTP application to be u[...]

  • Page 93

    Servicing Informat ion IOLINK-520 & IOLINK-PR O Installation & Applications Guide — C.7 In the following diagr am of a cluster of ro uters, when upgrading the t hree IOLINK router s in the diagram, the upgrade order should be R outer C, then Router B, and finally Router A. A TFTP software load to router C would be performed as follows: - [...]

  • Page 94

    Servicing Informat ion C.8 — IOLINK-520 & IOLINK-PR O Installation & Applications Guide * * * *[...]

  • Page 95

    IOLINK-520 & IOLINK-PR O Installation & Applications Guide — D. 1 Appendix D Interface Pinouts Pinout Information Each link interface available is described with detailed information on pin designation. Standard interface cables will provide correct connections to modems, datasets, or DSU/CSUs. When connecting two bridge/routers back-to-b[...]

  • Page 96

    Interface Pinout s D.2 — IOLINK-520 & IOLI NK-PRO00 Installation & Applications Guide These modules may have eit her the UP/DOWN swit ch type or the ON/OF F slide switch type. Each type is illustrated below. CS U/ DS U LINE 1 2 3 4 Swit c he s up down Figure D-1 Rear View of ATL-CSU/DSU Link Module with UP/DOWN Switches Figure D-2 View of[...]

  • Page 97

    Interface Pinout s IOLINK-520 & IOLINK-PR O Installation & Applications Guide — D.3 Console Pinouts The connector shown here and pinouts described here correspond to the connector labeled “Console” on the back of the IOLINK-520 & IOLI NK-PRO. DB25 Female DCE 13 1 25 14 Contact Number CCITT Circuit Number IEEE Circuit Desig. Circui[...]

  • Page 98

    Interface Pinout s D.4 — IOLINK-520 & IOLI NK-PRO00 Installation & Applications Guide V.24 & RS232C Link Pi nouts The connector shown here and pinouts described here correspond to the connector labeled “RS232 / V.24” on the back of the IOLINK-520 & IO LINK-PRO. DB25 Female DTE 13 1 25 14 Contact Number CCITT Circuit Number Cir[...]

  • Page 99

    Interface Pinout s IOLINK-520 & IOLINK-PR O Installation & Applications Guide — D.5 V.11/X.21 Link Pinouts The connector shown here and pinouts described here correspond to the connector labeled “V.11/x.21” on the back of the IOLINK-520 & IOLI NK-PRO. DB15 Female DTE 1 8 9 15 Contact Number X.21 Circuits Reference Circuit Name Dir[...]

  • Page 100

    Interface Pinout s D.6 — IOLINK-520 & IOLI NK-PRO00 Installation & Applications Guide RS442 & RS530 Link Pi nouts The connector shown here and pinouts described here correspond to the connector labeled “RS530” on the back of the IOLINK-520 & IO LINK-PRO. DB25 Female DTE 13 1 25 14 Contact Number Circuit Circuit Name Direction [...]

  • Page 101

    Interface Pinout s IOLINK-520 & IOLINK-PR O Installation & Applications Guide — D.7 V.35 Link Pinouts The connector pinouts described here correspond to the connector labeled “V.35” on the back of the IOLINK-520 & IOLINK-PR O. 13 1 25 14 DB25 Contact Number M.34 Contact Number Circui t Name Direction To From DCE DCE 1 A Protec tiv[...]

  • Page 102

    Interface Pinout s D.8 — IOLINK-520 & IOLI NK-PRO00 Installation & Applications Guide RS232 Null-Mode m Cable Confi guration Figure D-9 RS232 Null-Modem Cable The connecting cable must be a shielded cable. This cable is needed when it is necessary to connect t wo units back -to-back and a set of modems is not available. Note t hat this ca[...]

  • Page 103

    Interface Pinout s IOLINK-520 & IOLINK-PR O Installation & Applications Guide — D.9 V.35 Null-Modem Cab le Configuration Prot ective G ND T r ansmit ted Data (A) T r ansmit ted Data (B) Received Dat a (A) Received Dat a (B) T r ansm itter Sign al Eleme nt T iming (A) T r ansm itter Sign al Eleme nt T iming (B) Receiver Si gnal Elem ent T [...]

  • Page 104

    Interface Pinout s D.10 — IOLINK-520 & IOLINK-PRO00 I nstallation & Applications Guide RS530 Null-Mode m Cable Confi guration Shiel d T ransmitted Data (A) T ransmitted Data (B) Received Data (A) Received Data (B) Request T o Send (A) Request T o Send (B) Clear T o Send (A) Clear T o Send (B) DCE Ready (A) DCE Ready (B) DTE Ready (A) DTE [...]

  • Page 105

    Interface Pinout s IOLINK-520 & IOLINK-PR O Installation & Applications Guide — D.11 RS530 To RS449 Conversion Ca ble T r ansmitt ed Data (A) Data T erminal Ready (A) T r ansmitt ed Data (B) Data T erminal Ready (B) Received Data (A) Receiver Si gnal Elem ent Ti ming (DCE So urce) (A) Received Data (B) Receiver Si gnal Elem ent Ti ming (D[...]

  • Page 106

    Interface Pinout s D.12 — IOLINK-520 & IOLINK-PRO00 I nstallation & Applications Guide V.11/ X.21 Null-Mo dem Cable Configuratio n Figure D-13 V.1 1/X.21 Null-Modem Ca ble The connecting cable must be a shielded cable. Circuits which are paired (contain an (A) and (B) reference) should be connected to twisted pairs within the connecting c[...]

  • Page 107

    Index IOLINK-520 & IOLINK-PR O Installation & Applications Guide A AC power, 1 .5 Addre ss Filtering, 3.1 Auto Lea rning LMI Type , 2.21 B Backup, ISDN, 2.34 BACP, 2.50 Bandwidth on Demand, 2.52 Battery Repl acement, C.1 Bridge or Route?, 2.4 C Changin g LAN I nterfaces, C. 3 Changing Link Inte rfac es, C.3 Changin g the 10Bas eT LAN Int er[...]

  • Page 108

    Index IOLINK-520 & IOLINK-PR O Installation & Applications Guide N NAT (Network Add ress Transla tion), 2.37 NAPT, 2.37 Negative Filtering, 3.1 Novell Server, 2.9, 2.10 Null Modem Cable, D.1 Numbered L inks, 2.15 O On Link, 2.35 Openin g the cas e, C.1 P Password, 2.37 password - c lear lost, C .3 Pattern Filtering, 3.2 Popular Filters, 3.3[...]

  • Page 109

    1278089 5.2 1290 1 1047C 063 Lifetime Warranty Limit ed Life time W arranty Polic y Limite d Warranty . Subject to the sche dules set f orth below , Perle produc ts carry a lim ited lifetim e parts and la bour warrant y, that is, Perle warrants t o the original pu rchaser of each n ew pr oduct that t he pro duct w ill be f ree from defe ctive m ate[...]

  • Page 110

    1278089 5.2 1290 1 1047C 063 Other Damage No Fault Found Upgrades Part 2 Multip le Por t Failu re This is where more t han one port h as been damaged. P ossible causes are listed below : ° Plugging a de fe ctive peripher al int o the por t ° Pluggi ng a live peri pheral in to the port ° Plugging a def ectiv e data cable into t he port ° An ex t[...]