Page 136 / 161 Scroll up to view Page 131 - 135
136
Appendix A
CONFIG Commands
Specifies the type of protocol being redirected.
If you select
other
, specifies the number of the protocol you want to translate.
Specifies the first port number in the range being translated.
Specifies the last port number in the range being translated.
.
Specifies the IP address of the internal host to which traffic of the specified type
should be transferred.
Specifies the port number your Cayman Gateway should use when forwarding
traffic of the specified type. Under most circumstances, you would use the same
number for the external and internal port.
PPPoE Settings
You can use the following commands to configure basic settings, port authentica-
tion settings, and peer authentication settings for PPP interfaces on your Cayman
Gateway.
Enables or disables PPP over Ethernet on your 2E-H unit. You must enable PPPoE
before you can enter other PPP settings.
BOTH
set pinhole protocol-select
{ tcp | udp | icmp | pptp | other }
BOTH
set pinhole numerical-protocol [ 0 - 65535 ]
BOTH
set pinhole external-port-start [ 0 - 65535 ]
BOTH
set pinhole external-port-end [ 0 - 65535 ]
BOTH
set pinhole internal-ip
internal-ip
BOTH
set pinhole internal-port
internal-port
ENET
set pppoe { on | off }
Downloaded from
www.Manualslib.com
manuals search engine
Page 137 / 161
137
Appendix A
CONFIG Commands
Configuring Basic PPP Settings
Enables or disables PPP on the Cayman Gateway.
Specifies the Maximum Receive Unit (MRU) for the PPP interface. The
integer
argument can be any number between 128 and 2048.
Enables or disables LCP magic number negotiation.
Specifies whether you want the Cayman Gateway to compress the PPP Protocol
field when it transmits datagrams over the PPP link.
Specifies whether you want your Cayman Gateway to send LCP echo requests.
You should turn off LCP echoing if you do not want the Cayman Gateway to drop
a PPP link to a nonresponsive peer.
.
Specifies the maximum number of Configure-NAK messages the PPP module can
send without having sent a Configure-ACK message. The integer argument can
be any number between 1 and 20.
Specifies the maximum number of unacknowledged configuration requests that
your Cayman Gateway will send. The integer argument can be any number
between 1 and 10.
Specifies the maximum number of unacknowledged termination requests that
your Cayman Gateway will send before terminating the PPP link. The integer
argument can be any number between 1 and 10.
Many of these setting commands are designated as
BOTH
.
Note however:
For the 3220-H (DSL platform) you must identify the virtual PPP
interface [
vccn
], a number from 1 to 8.
This argument does not apply to the 2E-H platform.
BOTH
set PPP module [vccn] option { on | off }
BOTH
set PPP module [vccn] mru
integer
BOTH
set PPP module [vccn] magic-number { on | off }
BOTH
set PPP module [vccn] protocol-compression { on | off }
BOTH
set PPP module [vccn] lcp-echo-requests { on | off }
BOTH
set PPP module [vccn] failures-max
integer
BOTH
set PPP module [vccn] configure-max
integer
BOTH
set PPP module [vccn] terminate-max
integer
Downloaded from
www.Manualslib.com
manuals search engine
Page 138 / 161
138
Appendix A
CONFIG Commands
Specifies the number of seconds the Cayman Gateway should wait before retrans-
mitting a configuration or termination request. The integer argument can be any
number between 1 and 30.
Specifies whether a PPP connection is maintained by the Cayman Gateway when
it is unused for extended periods. If you specify
always-on
, the Cayman Gate-
way never shuts down the PPP link. If you specify
instant-on
, the Cayman
Gateway shuts down the PPP link after the number of seconds specified in the
time-out
setting (below) if no traffic is moving over the circuit.
If you specified a connection type of
instant-on
, specifies the number of seconds,
in the range 30-600, the Cayman Gateway should wait for communication activ-
ity before terminating the PPP link.
Configuring Port Authentication
You can use the following commands to specify how your Cayman Gateway
should respond when it receives an authentication request from a remote peer.
The settings for port authentication on the local Cayman Gateway must match
the authentication that is expected by the remote peer. For example, if the
remote peer requires CHAP authentication and has a name and CHAP secret for
the Cayman Gateway, you must enable CHAP and specify the same name and
secret on the Cayman Gateway before the link can be established.
Specifies whether CHAP authentication is enabled. CHAP authentication must be
enabled before you can enter other CHAP information. If CHAP is turned on, it
will be the first authentication method offered to the remote peer during link
negotiation.
If you turn port authentication off and peer authentication on, the PPP software
still uses the port authentication chap-name and pap-name for authentication. As
a result, the port authentication names for PAP and CHAP must be identical to the
peer names for your Cayman Gateway on the remote peer. If you do not config-
ure a chap-name or pap-name, then the authentication packets sent by the local
peer will have blank name values. This may cause authentication to fail for some
PPP implementations.
BOTH
set PPP module [vccn] restart-timer
integer
BOTH
set PPP module [vccn] connection-type
{ instant-on | always-on }
BOTH
set PPP module [vccn] time-out
integer
BOTH
set PPP module [vccn] port-authentication
chap-option { on | off }
Downloaded from
www.Manualslib.com
manuals search engine
Page 139 / 161
139
Appendix A
CONFIG Commands
Specifies the name the Cayman Gateway sends in a CHAP response packet. The
chap_name
argument is 1-64 alphanumeric characters. The information you
enter must match the CHAP username configured in the remote PPP peer's
authentication database.
Specifies the CHAP secret for CHAP authentication. The secret argument is 1-64
alphanumeric characters. The information you enter must match the CHAP secret
used by the PPP peer.
Specifies whether PAP authentication is enabled for a port. By default, PAP
authentication is turned off. PAP authentication must be enabled before you can
enter other PAP information. If you disable PAP authentication and save the modi-
fied configuration, your Cayman Gateway retains its PAP settings.
Specifies the name the Cayman Gateway sends in a PAP response packet. The
pap_name argument is 1- 64 alphanumeric characters. The information you enter
must match the PAP username configured in the PPP peer's authentication data-
base.
Specifies the password the Cayman Gateway sends when a PPP peer sends a PAP
authentication request. The password argument is 1-64 alphanumeric characters.
The information you enter must match the PAP password used by the PPP peer.
BOTH
set PPP module [vccn] port-authentication
chap-name
chap_name
BOTH
set PPP module [vccn] port-authentication
chap-secret
secret
BOTH
set PPP module [vccn] port-authentication
pap-option { on | off }
BOTH
set PPP module [vccn] port-authentication
pap-name
pap_name
BOTH
set PPP module port-authentication
pap-password
password
Downloaded from
www.Manualslib.com
manuals search engine
Page 140 / 161
140
Appendix A
CONFIG Commands
Configuring Peer Authentication
You can specify that your Cayman Gateway will use PAP, CHAP, or both to authen-
ticate a remote peer as a PPP link is being completed. Perform the following steps
to specify how your Cayman Gateway should authenticate remote peers.
Specifies whether the Cayman Gateway will use CHAP to authenticate connec-
tions to PPP peers.
Specifies whether the Cayman Gateway will use PAP to authenticate connections
to PPP peers.
Specifies the hostname for an authorized PPP peer. The hostname argument is 1-
64 alphanumeric characters. The information you enter must match the user-
name that will be returned by the PPP peer when it is being authenticated.
Specifies the secret associated with a PPP peer. The secret argument is 1-64 alpha-
numeric characters. The information you enter must match the secret that will be
returned by the PPP peer when it is being authenticated.
Specifies the password associated with a PPP peer. The password argument is 1-
64 alphanumeric characters. The password you enter for that peer must match
the password that will be returned by the PPP peer when it is being authenti-
cated.
BOTH
set PPP module [vccn] peer-authentication
chap-option { on | off }
BOTH
set PPP module [vccn] peer-authentication pap-option { on | off }
BOTH
set PPP peer-database
peer-name
hostname
BOTH
set PPP peer-database
peer-name
hostname
chap-secret
secret
BOTH
set PPP peer-database peer-name hostname pap-password
password
Downloaded from
www.Manualslib.com
manuals search engine

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top