Introduction   1

  This chapter discusses the following topics:

•  "PortMaster Software" on page 1-1
•  "Preconfiguration Planning" on page 1-2
•  "Setting the View" on page 1-3
•  "Configuration Tips" on page 1-3
•  "Basic Configuration Steps" on page 1-4

       PortMaster Software

  All PortMaster products are shipped with the following software:

•  ComOS®--The communication software operating system already loaded in nonvolatile RAM (also called Flash RAM) on each PortMaster. You can use the ComOS command line interface to configure your PortMaster through a console.
•  PMVision^TM--A graphical user interface (GUI) companion to the ComOS command line interface for Microsoft Windows, UNIX, and other platforms that support the Java Virtual Machine (JVM). Because PMVision also supports command entry, you can use a combination of GUI panels and ComOS commands to configure, monitor, and debug a PortMaster. When connected to one or more PortMaster products, PMVision allows you to monitor activity and edit existing configurations. PMVision replaces the PMconsole interface to ComOS.

    This application and other Java-based configuration tools for the PortMaster are available via anonymous FTP at ftp://ftp.livingston.com/pub/livingston/software/java/ .

•  pmd  or in.pmd --The optional PortMaster daemon software that can be installed on UNIX hosts to allow the host to connect to printers or modems attached to a PortMaster. The daemon also allows the PortMaster to multiplex incoming users onto the host using one TCP stream instead of multiple streams like rlogin . The daemon is available for SunOS, Solaris, AIX, HP-UX, and other platforms.

    For installation and configuration instructions, copy the PortMaster software to the UNIX host as described on the PortMaster Software CD package.

•  RADIUS--The RADIUS server daemon, radiusd , runs on UNIX systems, providing centralized authentication for dial-in users. The radiusd  daemon is provided to customers in binary and source form for SunOS, Solaris, Solaris/X8.6, AIX, HP-UX, IRIX, Alpha OSF/1, Linux, and BSD/OS platforms.

    For installation and configuration instructions, see the RADIUS for Windows NT Administrator's Guide and RADIUS for UNIX Administrator's Guide.

•  ChoiceNet--ChoiceNet is a security technology invented by Lucent to provide a traffic filtering mechanism for networks using dial-up InterNetworking Systems, synchronous leased line, or Ethernet connections. When used with RADIUS, ChoiceNet provides exceptional flexibility in fine-tuning the level of access provided to users.

    For installation and configuration instructions, see the ChoiceNet Administrator's Guide.

       Preconfiguration Planning

  Before the PortMaster can be used to connect wide area networks (WANs), you must install the hardware using the instructions in the PortMaster 4 Installation Guide.

  This configuration guide is designed to introduce the most common configuration options available for the PortMaster 4. Review this material before you configure your PortMaster and, if possible, answer the following questions:

•  What general configuration do you want to implement?
•  Do you want to use a synchronous connection to a high-speed line?
•  Will your high-speed lines use Frame Relay, ISDN, switched 56Kbps, or PPP?
•  If you want dial-on-demand routing, do you want multiline load-balancing?
•  Do you want Multilink Point-to-Point Protocol (PPP) (RFC 1717)?
•  Do you want packet filtering for Internet connections?
•  Do you want packet filtering for connections to other offices?
•  Do you want dial-in users to use Serial Line Internet Protocol (SLIP), PPP, or both?
•  If you use PPP, do you want Password Authentication Protocol (PAP) or Challenge Authentication Protocol (CHAP) authentication?
•  Are you using a name service--Domain Name System (DNS) or Network Information Service (NIS)?
•  Have you obtained the necessary network addresses?
•  Do you want to enable Simple Network Management Protocol (SNMP) for network monitoring?
•  Do you want dial-in only, dial-out only, or two-way communication on each port?
•  What characteristics do you want to assign to the dial-out locations?
•  How do you want to configure dial-in users?
•  Do you want to use RADIUS or the internal user table on the PortMaster to authenticate dial-in users?
•  Do you want to use ChoiceNet to filter network traffic?
•  Do you want to use the console port for administration functions, or do you want to attach an external modem to the port?
•  For dial-in users, do you receive service on analog lines, ISDN Primary Rate Interface (PRI), channelized T1, or E1?

  Many other decisions must be made during the configuration process. This guide discusses the various configuration options and their implications.

       Setting the View

  The PortMaster 4 operates via the modules and boards installed in its slots. The system manager module installed in slot 4 provides overall (global) management for the entire chassis.

  To monitor and configure a particular module or board, you use the set view  command to set the view to the slot of the installed board or module. The default view is slot 4, which is the manager view.

  Because the Ethernet interfaces on a PortMaster 4 are numbered uniquely, you can configure them from any view. However, you must reboot Ether0 and reset the appropriate slot for the other Ethernet interfaces to activate configuration settings.

  Except for the manager module, for which the command line prompt displays no number, the prompt indicates the view you are in. For example:

  Command> set view 3
View changed from 4 to 3
Command 3> set view 4
View changed from 3 to 4
Command>

  The save all  command saves all configuration information for all boards regardless of what view is set.

       Configuration Tips

  PortMaster configuration can be confusing because settings can be configured for a port, a user, or a remote location. Use Table 1-1 to determine how to configure your PortMaster.

  Table 1-1 PortMaster Configuration Tips

If You Are Configuring . . .	Then Configure Settings on . . .
A network hardwired port or hardwired multiline load balancing	The port
One or more ports for dial-out operation	Dial-out locations using the location table
One or more ports for dial-in operation	Dial-in users using the user table or RADIUS
A callback network user	The callback location in the location table (refer to the location name in the user table)

       Basic Configuration Steps

  The exact PortMaster configuration steps you follow depend upon the hardware you are installing and your network configuration. However, the following general configuration steps are the same for all PortMaster products:

  1. Install the PortMaster hardware and assign an IP address and a password as described in the PortMaster 4 Installation Guide.

  2. Boot the system and log in with the administrative password.

  You can configure the PortMaster from a terminal attached to the console port, through an administrative Telnet session, or through a network connection.

  Note ¯ This configuration guide assumes that you have completed Step 1 and Step 2 and does not give details on hardware installation, IP address assignment, or administrative password assignment.

  3. If you want to use PMVision software to configure your PortMaster, install it on a workstation anywhere on your network.

  PMVision is available via anonymous FTP at ftp://ftp.livingston.com/pub/livingston/software/java/.  See the PMVision online help for information on using PMVision.

  4. Configure the global settings.

  PortMaster global settings are described in Chapter 2, "Configuring Global Settings."

  5. Configure the Ethernet settings, and configure the IP protocol settings for your network.

  PortMaster Ethernet settings are described in Chapter 4, "Configuring an Ethernet Interface."

  6. Configure the synchronous ports.

  PortMaster synchronous port settings are described in Chapter 6, "Configuring a Synchronous WAN Port."

  7. Configure T1, E1, and ISDN PRI connections.

  ISDN PRI connection configuration is described in Chapter 11, "Configuring T1, E1, and ISDN PRI" and Chapter 12, "Configuring a T3 Mux Board."

  8. Configure dial-in users in the user table, or configure RADIUS.

  The user table is described in Chapter 5, "Configuring Dial-In Users." If you are using RADIUS security instead of the user table, see the RADIUS for Windows NT Administrator's Guide or RADIUS for UNIX Administrator's Guide.

  9. Configure ChoiceNet, if you are using it.

  ChoiceNet is a traffic filtering mechanism for networks using dial-up InterNetworking Systems, synchronous leased line, or Ethernet. Refer to the ChoiceNet Administrator's Guide for more information.

  10. Configure dial-out locations in the location table.

  The location table is described in Chapter 7, "Configuring Dial-Out Connections."

  11. Configure filters in the filter table.

  Once the filters are created, they can be assigned as input or output filters for the Ethernet interface, users, locations, or hardwired ports. Filters are described in Chapter 8, "Configuring Filters."

  12. Configure the Layer 2 Tunneling Protocol (L2TP) if you are setting up an L2TP tunnel to an L2TP-compatible router.

  See Chapter 9, "Configuring L2TP."

  13. Configure OSPF, if you are using this protocol.

  OSPF is described in the PortMaster Routing Guide.

  14. Configure BGP, if you are using this protocol.

  BGP is described in the PortMaster Routing Guide.

  15. Troubleshoot your configuration, if necessary, and back it up.

  See the troubleshooting information in this guide and the PortMaster Troubleshooting Guide for instructions.

  Once you have correctly configured all the settings necessary for your circumstances, your PortMaster is ready to provide communication service and routing for your network.