Commissioning Avaya Secure Router 2330/4134

Transcription

1 Commissioning Avaya Secure Router 2330/4134 Release NN Issue July 2013

2 2013 Avaya Inc. All Rights Reserved. Notice While reasonable efforts have been made to ensure that the information in this document is complete and accurate at the time of printing, Avaya assumes no liability for any errors. Avaya reserves the right to make changes and corrections to the information in this document without the obligation to notify any person or organization of such changes. Documentation disclaimer Documentation means information published by Avaya in varying mediums which may include product information, operating instructions and performance specifications that Avaya generally makes available to users of its products. Documentation does not include marketing materials. Avaya shall not be responsible for any modifications, additions, or deletions to the original published version of documentation unless such modifications, additions, or deletions were performed by Avaya. End User agrees to indemnify and hold harmless Avaya, Avaya's agents, servants and employees against all claims, lawsuits, demands and judgments arising out of, or in connection with, subsequent modifications, additions or deletions to this documentation, to the extent made by End User. Link disclaimer Avaya is not responsible for the contents or reliability of any linked websites referenced within this site or documentation provided by Avaya. Avaya is not responsible for the accuracy of any information, statement or content provided on these sites and does not necessarily endorse the products, services, or information described or offered within them. Avaya does not guarantee that these links will work all the time and has no control over the availability of the linked pages. Warranty Avaya provides a limited warranty on its hardware and Software ( Product(s) ). Refer to your sales agreement to establish the terms of the limited warranty. In addition, Avaya s standard warranty language, as well as information regarding support for this Product while under warranty is available to Avaya customers and other parties through the Avaya Support website: Please note that if you acquired the Product(s) from an authorized Avaya reseller outside of the United States and Canada, the warranty is provided to you by said Avaya reseller and not by Avaya. Software means computer programs in object code, provided by Avaya or an Avaya Channel Partner, whether as stand-alone products or pre-installed on hardware products, and any upgrades, updates, bug fixes, or modified versions. Licenses THE SOFTWARE LICENSE TERMS AVAILABLE ON THE AVAYA WEBSITE, ARE APPLICABLE TO ANYONE WHO DOWNLOADS, USES AND/OR INSTALLS AVAYA SOFTWARE, PURCHASED FROM AVAYA INC., ANY AVAYA AFFILIATE, OR AN AUTHORIZED AVAYA RESELLER (AS APPLICABLE) UNDER A COMMERCIAL AGREEMENT WITH AVAYA OR AN AUTHORIZED AVAYA RESELLER. UNLESS OTHERWISE AGREED TO BY AVAYA IN WRITING, AVAYA DOES NOT EXTEND THIS LICENSE IF THE SOFTWARE WAS OBTAINED FROM ANYONE OTHER THAN AVAYA, AN AVAYA AFFILIATE OR AN AVAYA AUTHORIZED RESELLER; AVAYA RESERVES THE RIGHT TO TAKE LEGAL ACTION AGAINST YOU AND ANYONE ELSE USING OR SELLING THE SOFTWARE WITHOUT A LICENSE. BY INSTALLING, DOWNLOADING OR USING THE SOFTWARE, OR AUTHORIZING OTHERS TO DO SO, YOU, ON BEHALF OF YOURSELF AND THE ENTITY FOR WHOM YOU ARE INSTALLING, DOWNLOADING OR USING THE SOFTWARE (HEREINAFTER REFERRED TO INTERCHANGEABLY AS YOU AND END USER ), AGREE TO THESE TERMS AND CONDITIONS AND CREATE A BINDING CONTRACT BETWEEN YOU AND AVAYA INC. OR THE APPLICABLE AVAYA AFFILIATE ( AVAYA ). Avaya grants you a license within the scope of the license types described below, with the exception of Heritage Nortel Software, for which the scope of the license is detailed below. Where the order documentation does not expressly identify a license type, the applicable license will be a Designated System License. The applicable number of licenses and units of capacity for which the license is granted will be one (1), unless a different number of licenses or units of capacity is specified in the documentation or other materials available to you. Designated Processor means a single stand-alone computing device. Server means a Designated Processor that hosts a software application to be accessed by multiple users. Copyright Except where expressly stated otherwise, no use should be made of materials on this site, the Documentation, Software, or hardware provided by Avaya. All content on this site, the documentation and the Product provided by Avaya including the selection, arrangement and design of the content is owned either by Avaya or its licensors and is protected by copyright and other intellectual property laws including the sui generis rights relating to the protection of databases. You may not modify, copy, reproduce, republish, upload, post, transmit or distribute in any way any content, in whole or in part, including any code and software unless expressly authorized by Avaya. Unauthorized reproduction, transmission, dissemination, storage, and or use without the express written consent of Avaya can be a criminal, as well as a civil offense under the applicable law. Third Party Components Third Party Components mean certain software programs or portions thereof included in the Software that may contain software (including open source software) distributed under third party agreements ( Third Party Components ), which contain terms regarding the rights to use certain portions of the Software ( Third Party Terms ). Information regarding distributed Linux OS source code (for those Products that have distributed Linux OS source code) and identifying the copyright holders of the Third Party Components and the Third Party Terms that apply is available in the Documentation or on Avaya s website at: support.avaya.com/copyright. You agree to the Third Party Terms for any such Third Party Components. Note to Service Provider The Product may use Third Party Components that have Third Party Terms that do not allow hosting and may need to be independently licensed for such purpose. Preventing Toll Fraud Toll Fraud is the unauthorized use of your telecommunications system by an unauthorized party (for example, a person who is not a corporate employee, agent, subcontractor, or is not working on your company's behalf). Be aware that there can be a risk of Toll Fraud associated with your system and that, if Toll Fraud occurs, it can result in substantial additional charges for your telecommunications services. Avaya Toll Fraud intervention If you suspect that you are being victimized by Toll Fraud and you need technical assistance or support, call Technical Service Center Toll Fraud Intervention Hotline at for the United States and Canada. For additional support telephone numbers, see the Avaya Support website: Suspected security vulnerabilities with Avaya products should be reported to Avaya by sending mail to: securityalerts@avaya.com. Trademarks The trademarks, logos and service marks ( Marks ) displayed in this site, the Documentation and Product(s) provided by Avaya are the registered or unregistered Marks of Avaya, its affiliates, or other third parties. Users are not permitted to use such Marks without prior written consent from Avaya or such third party which may own the Mark. Nothing contained in this site, the Documentation and Product(s) should be construed as granting, by implication, estoppel, or otherwise, 2 Commissioning July 2013 Comments? infodev@avaya.com

3 any license or right in and to the Marks without the express written permission of Avaya or the applicable third party. Avaya is a registered trademark of Avaya Inc. All non-avaya trademarks are the property of their respective owners. Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Downloading Documentation For the most current versions of Documentation, see the Avaya Support website: Contact Avaya Support See the Avaya Support website: for product notices and articles, or to report a problem with your Avaya product. For a list of support telephone numbers and contact addresses, go to the Avaya Support website: scroll to the bottom of the page, and select Contact Avaya Support. Commissioning July

4 4 Commissioning July 2013 Comments?

5 Contents Chapter 1: Introduction... 7 Introduction... 7 Related Resources... 7 Documentation... 7 Training... 7 Avaya Mentor videos... 7 Support... 8 Chapter 2: New in this release... 9 Other changes... 9 Chapter 3: Avaya Secure Router 2330/4134 commissioning Prerequisites Secure Router 2330/4134 commissioning procedures Secure Router 2330/4134 commissioning navigation Chapter 4: Commissioning the Avaya Secure Router 2330/ Gathering required information Connecting a terminal for local access Powering up the Secure Router 2330/ Logging in to the Secure Router 2330/ Defining boot parameters Viewing boot parameters and software image information Enabling the management LAN port Disabling the USB port on the Secure Router Configuring SSH Enabling FTP, TFTP, and Telnet Configuring FTP users Verifying the Telnet connection Viewing Telnet server settings Clearing a Telnet session Configuring the Telnet banner Configuring the Telnet timeout Configuring the host name Configuring the static default route Verifying the next-hop connection Configuring the date Configuring the time Configuring multiple SNTP servers Configuring the SNTP client Displaying the SNTP configuration Configuring the SNTP source address Configuring daylight saving time Example of configuring daylight saving time Changing the admin user password Changing the administrator account name Adding users Commissioning July

6 Removing users Pinging a device Saving a configuration Deleting a configuration file Rebooting or resetting the Secure Router 2330/ Powering down the Secure Router 2330/ Viewing the Secure Router 2330/4134 configuration Viewing chassis status Viewing interface module configuration Checking the system for alarms Checking the system status Configuring reverse Telnet on the Secure Router Copying an external compact flash or a USB drive file Downloading a network file to a compact flash or a USB drive Formatting the external compact flash file system Formatting the USB drive file system Listing files on a compact flash drive or USB drive Listing image version files from a compact flash drive or USB drive Removing a file from a compact flash drive or USB drive Renaming a file on a compact flash drive or USB drive Uploading files from a compact flash drive or USB drive Uploading the event log from the Secure Router 2330/ Chapter 5: Licensing Base license VPN license SIP Media Gateway license DSP channel licensing Obtaining a license key Installing a DSP channel license Displaying the number of licensed DSP channels SSM user licensing Obtaining a license key Installing an SSM user license Displaying the number of licensed SSM users Chapter 6: Upgrades and conversions SNMP Server upgrade procedure if upgrading from a pre release Configuring SNMP for version 1 access to the SNMP Server Configuring the SNMP Server to support SNMP Trap Host Configuring SSM if upgrading from a pre-10.3 release Conversions between Advanced Gateway and Secure Router Converting an Advanced Gateway to a Secure Router Converting a Secure Router to an Advanced Gateway Commissioning July 2013

7 Chapter 1: Introduction Introduction This document provides information about the recommended method to commission the Avaya Secure Router 2330/4134. For a complete list of Command Line Interface (CLI) commands that you use to monitor and configure the Secure Router 2330/4134, see Avaya Secure Router 2330/4134 Command Line Reference (NN ). Related Resources Documentation See the Avaya Secure Router 2330/4134 Documentation Roadmap, NN , for a list of the documentation for this product. Training Ongoing product training is available. For more information or to register, you can access the Web site at Avaya Mentor videos Avaya Mentor is an Avaya-run channel on YouTube that includes technical content on how to install, configure, and troubleshoot Avaya products. Go to and perform one of the following actions: Commissioning July

8 Introduction Enter a key word or key words in the Search Channel to search for a specific product or topic. Scroll down Playlists, and click the name of a topic to see the available list of videos posted on the site. Support Visit the Avaya Support website at for the most up-to-date documentation, product notices, and knowledge articles. You can also search for release notes, downloads, and resolutions to issues. Use the online service request system to create a service request. Chat with live agents to get answers to questions, or request an agent to connect you to a support team if an issue requires additional expertise. 8 Commissioning July 2013 Comments? infodev@avaya.com

9 Chapter 2: New in this release There are no new features in Avaya Secure Router 2330/4134 Commissioning (NN ) for Release Other changes Licensing All licensing information was consolidated and moved into its own chapter in this document. For information, see Licensing on page 59. Release notes This section contains information previously documented in the Secure Router 2330/4134 Release Notes and that has been moved to Avaya Secure Router 2330/4134 Configuration Commissioning (NN ) for Release : General upgrade information For information, see Upgrades and conversions on page 67. Commissioning July

10 New in this release 10 Commissioning July 2013 Comments?

11 Chapter 3: Avaya Secure Router 2330/4134 commissioning You commission the Avaya Secure Router 2330/4134 to prepare the unit for software feature configuration. Commissioning includes tasks such as establishing communication with the system, defining boot parameters, configuring usernames and passwords, and establishing remote access. Prerequisites Ensure the Secure Router 2330/4134 is securely installed in an equipment rack. Secure Router 2330/4134 commissioning procedures This task flow shows you the sequence of procedures you perform to commission the Secure Router 2330/4134. To link to any procedure, go to Secure Router 2330/4134 commissioning navigation on page 14. Commissioning July

12 Avaya Secure Router 2330/4134 commissioning Figure 1: Secure Router 2330/4134 commissioning procedures 12 Commissioning July 2013 Comments?

13 Secure Router 2330/4134 commissioning procedures Figure 2: Secure Router 2330/4134 commissioning procedures (continued) Commissioning July

14 Avaya Secure Router 2330/4134 commissioning Secure Router 2330/4134 commissioning navigation Gathering required information on page 17 Connecting a terminal for local access on page 19 Powering up the Secure Router 2330/4134 on page 20 Logging in to the Secure Router 2330/4134 on page 23 Defining boot parameters on page 24 Enabling the management LAN port on page 26 Disabling the USB port on the Secure Router 4134 on page 28 Configuring SSH on page 29 Enabling FTP, TFTP, and Telnet on page 29 Verifying the Telnet connection on page 31 Viewing Telnet server settings on page 31 Clearing a Telnet session on page 32 Configuring the Telnet banner on page 32 Configuring the Telnet timeout on page 33 Configuring the host name on page 34 Configuring the static default route on page 34 Verifying the next-hop connection on page 35 Configuring the date on page 35 Configuring the time on page 36 Configuring the SNTP client on page 38 Displaying the SNTP configuration on page 39 Configuring daylight saving time on page 39 Changing the admin user password on page 42 Changing the administrator account name on page 43 Adding users on page 43 Removing users on page 44 Configuring FTP users on page 30 Pinging a device on page Commissioning July 2013 Comments? infodev@avaya.com

15 Secure Router 2330/4134 commissioning navigation Saving a configuration on page 45 Deleting a configuration file on page 46 Rebooting or resetting the Secure Router 2330/4134 on page 46 Powering down the Secure Router 2330/4134 on page 47 Viewing the Secure Router 2330/4134 configuration on page 48 Viewing chassis status on page 48 Viewing interface module configuration on page 49 Checking the system for alarms on page 49 Checking the system status on page 50 Configuring reverse Telnet on the Secure Router 4134 on page 50 Copying an external compact flash or a USB drive file on page 52 Downloading a network file to a compact flash or a USB drive on page 52 Formatting the external compact flash file system on page 53 Formatting the USB drive file system on page 54 Listing files on a compact flash drive or USB drive on page 54 Listing image version files from a compact flash drive or USB drive on page 55 Removing a file from a compact flash drive or USB drive on page 55 Renaming a file on a compact flash drive or USB drive on page 56 Uploading files from a compact flash drive or USB drive on page 56 Uploading the event log from the Secure Router on page 57 Commissioning July

16 Avaya Secure Router 2330/4134 commissioning 16 Commissioning July 2013 Comments?

17 Chapter 4: Commissioning the Avaya Secure Router 2330/4134 This section includes the recommended method to commission the Avaya Secure Router 2330/4134, while ensuring that you limit unauthorized access to the router. Commissioning is the first step following hardware installation. The commissioning task includes the initial procedures required to bring the router online, and to configure appropriate access for remote users. Gathering required information Before you begin, gather all the information you require to complete the commissioning steps. Record all the required information for commissioning your Secure Router 2330/4134 in the following table. Procedure job aid Table 1: Gathering required information Required information Sample entries Record information here New password for admin user Host name Management IP address and mask Next hop IP address for static route to hosts and servers IP address of hosts and servers that access the Secure Router 2330/4134 kevx fremont /24 a.b.c.d/32 The following figure is an example of a commissioning scenario showing the basic configuration requirements including host name, management interface, and terminals. Commissioning July

18 Commissioning the Avaya Secure Router 2330/4134 Figure 3: Commissioning scenario The following figure shows the same commissioning example scenario but with the Secure Router Figure 4: Secure Router 2330 Commissioning scenario 18 Commissioning July 2013 Comments?

19 Connecting a terminal for local access Connecting a terminal for local access Connect a local terminal to the console port of the Secure Router 2330/4134. This local connection provides communication with the system during commissioning. Important: When powering up for the first time, Avaya recommends that you use a direct console connection to the Secure Router 2330/4134. After you have completed the initial configuration, you can use a remote connection for router management. Prerequisites You have a PC running HyperTerminal or similar terminal emulation program with the following communication protocol settings: bps - 8 data bits - 1 stop bit - No flow control - No parity Ensure you have the supplied console cable (shipped with the chassis). Ensure you have the supplied female DB-9 to RJ-45 adapter if you require it for connection to your terminal or PC. Ensure you have the Secure Router 2330/4134 securely installed in the equipment rack. 1. Insert the male RJ-45 connector in the console port of the Secure Router 2330/ Connect the female DB-9 to RJ-45 adapter to the opposite end of the console cable, if necessary. 3. Insert the RJ-45 or female DB-9 connector (dependent on your equipment) in a terminal or PC. Procedure job aid The following figure shows how to connect a terminal to the Secure Router 4134 for local access. Commissioning July

20 Commissioning the Avaya Secure Router 2330/4134 Figure 5: Connect a local terminal to the Secure Router 4134 The following figure shows how to connect a terminal to the Secure Router 2330 for local access. Figure 6: Connect a local terminal to the Secure Router 2330 Powering up the Secure Router 2330/4134 Power up the Secure Router 2330/4134 to initiate the power-on diagnostics test. The Secure Router 2330/4134 indicates the resulting pass or fail with status LEDs, and by logging results in the event log. Average time for the Secure Router to boot up: 5 minutes. 20 Commissioning July 2013 Comments? infodev@avaya.com

21 Powering up the Secure Router 2330/4134 Prerequisites The Secure Router 2330/4134 is securely mounted and grounded. For information about installing the Secure Router 4134 chassis, see Avaya Secure Router 4134 Installation Chassis (NN ). For information about installing the Secure Router 2330 chassis, see Avaya Secure Router 2330 Installation Chassis (NN ). For information about installing the power supplies, interface modules, and other hardware components, see Avaya Secure Router 2330/4134 Installation Hardware Components (NN ). A local terminal is connected to the Secure Router console port (the console port is located on the rear panel of the Secure Router 4134 and the front panel of the Secure Router 2330). Ensure you have powered up the terminal or PC. Voltage: Risk of electric shock Ensure the Secure Router 2330/4134 is properly grounded. For information about grounding the Secure Router 4134, see Avaya Secure Router 4134 Installation Chassis (NN ). For information about grounding the Secure Router 2330, see Avaya Secure Router 2330 Installation Chassis (NN ). Important: When powering up for the first time, Avaya recommends that you use a direct console connection to the Secure Router 2330/4134. After you have completed the initial configuration, you can use a remote connection for router management. (AC power) 1. Connect power cables for AC power supplies. On the Secure Router 2330, no power switch exists, and so the router begins to power up as soon as the power cable is connected. 2. On the Secure Router 4134, turn on one power switch at a time (if you installed two AC power supplies). Power switches are on the rear panel of the Secure Router The fans start immediately, and the LEDs cycle. Commissioning July

22 Commissioning the Avaya Secure Router 2330/ Verify that diagnostic testing is underway by observing the startup messages on your local terminal. 4. Once the router completes the self-diagnostics tests, verify that the System LED and, on the Secure Router 4134, the power LEDs that correspond to the power supplies installed on your router (PS0 and PS1) are green. 5. Verify that the fan LED on the rear panel of the Secure Router 2330/4134 is green, and air is flowing through the unit. (DC power on Secure Router 4134) 1. Connect power cables for DC power supplies. 2. Turn on the DC power source. The fans start immediately, and the LEDs cycle. 3. Verify that diagnostic testing is underway by observing the startup messages on your local terminal. 4. Once the router completes the self-diagnostics tests, verify that the System LED and the power LEDs that correspond to the power supplies installed on your router (PS0 and PS1) are green. 5. Verify that the fan LED on the rear panel of the Secure Router 4134 is green, and air is flowing through the unit. For troubleshooting information, see Avaya Secure Router 2330/4134 Troubleshooting (NN ). When the Secure Router 2330/4134 begins powering up, the boot sequence displays messages on the terminal or PC that you connected to the console port. A prompt displays at the beginning of the boot sequence indicating that you can stop the auto-boot sequence by pressing any key. The Secure Router 2330/4134 waits for 5 seconds for input from you before beginning the boot sequence. If you press a key and stop the auto-boot sequence, the Secure 22 Commissioning July 2013 Comments? infodev@avaya.com

23 Logging in to the Secure Router 2330/4134 Router 2330/4134 displays the bootrom command menu. The following figure shows the prompt to stop the auto-boot sequence and enter the bootrom command area. Figure 7: Accessing the bootrom command menu If you accidentally enter the bootrom command menu, you can exit that command menu and restart the normal boot sequence by on your keyboard. For detailed information on using the bootrom command menu, see Avaya Secure Router 2330/4134 Troubleshooting (NN ). Logging in to the Secure Router 2330/4134 The first time you log on to the Secure Router 2330/4134 CLI, you perform initial configuration such as the following: Configure the IP address for the management port. Configure the next-hop (gateway IP address). Enable remote access. Use the procedure in this section to log on to the Secure Router 2330/4134 for the first time. Prerequisites You have securely mounted the Secure Router 2330/4134 in an equipment rack. You have connected a local terminal to the console port of the Secure Router 2330/4134. You have powered up the Secure Router 2330/4134. The boot sequence is complete. Commissioning July

24 Commissioning the Avaya Secure Router 2330/4134 To log on to the Secure Router 2330/4134 CLI for the first time, enter the default user name and password: login: admin password: setup Defining boot parameters You can configure boot parameters for the Secure Router 2330/4134, if necessary. You configure boot parameters only if you are having issues to boot the router. For example, you can change the device from which the router boots (that is, the device that has the software image) if you want to try to boot the device from a software image on an FTP server in the network. The boot parameters are relevant to the boot process only. Any network addressing that you configure for boot parameters is independent of the normal IP addresses that the router uses in runtime. The addresses you configure in the boot parameters can be the same as or different from the IP addresses you configure for normal operation. After the Secure Router 2330/4134 boots, the router no longer uses the information in the boot parameters, but rather the router uses what you have configured in the system.cfg file. The Secure Router 2330/4134 provides two bootrom images for redundancy: normal bootrom the default boot image saved in the normal boot area, and used as your working bootrom image golden bootrom the backup boot image saved in the golden boot area, and used if the normal bootrom image is corrupted For more information about troubleshooting the Secure Router 2330/4134, see Avaya Secure Router 2330/4134 Troubleshooting (NN ). 1. To access configuration mode, enter: configure terminal 2. To define the boot parameters, enter: boot_params Example of defining boot parameters 1. Access configuration mode: configure terminal 2. Define boot parameters: boot_params The router returns the following: WARNING : Configuration changes not yet saved! 24 Commissioning July 2013 Comments? infodev@avaya.com

25 Defining boot parameters 3. When prompted, enter the name of the device from which you prefer the router boots: Boot dev [ftp,cf0,cf1,usb0]: cf0 4. Enter the boot file name (the router provides this information if you have previously configured it): Boot file name: SR4134.Z 5. Enter the name of the server you use to download the software image (the router provides this information if you have previously configured it): Server name: sunserver 6. Enter the server IP address (the router provides this information if you have previously configured it): Server IP address: Enter the router IP address (the router provides this information if you have previously configured it): My IP address: Enter the subnet mask (the router provides this information if you have previously configured it): My subnet mask: Enter the gateway IP address (the router provides this information if you have previously configured it): Gateway IP address: Enter your user name and password: User name: kevx Password: kevx 11. Enter 0 to disable or 1 to enable the checksum feature: Checksum enable [0:Disable,1:Enable]: Enter 0 to disable or 1 to enable the display of the image header contents: Show header enable [0:Disable,1:Enable]: Enter the number (0, 1, or 2) that corresponds to the type of bootrom image update that you prefer, or enter 3 if you prefer to not update the bootrom image: Save bootrom image [0:AutoUpdate,1:NormalBTupd,2:GoldenBTupd,3:NoUpd]: 0 If you select 0, 1, or 2, the router returns the following: BOOT PARAMETERS HAVE BEEN SAVED. 14. Reboot the Secure Router 2330/4134 to activate changes, or continue with your configuration: Commissioning July

26 Commissioning the Avaya Secure Router 2330/4134 DO YOU WANT TO REBOOT: (Y/N)? y Viewing boot parameters and software image information Use the procedures in this section to view the boot parameters configuration and to display information for the normal and golden bootrom images. 1. To view the boot parameters configuration, enter: show boot_params To view the current software version information, enter: show version Enabling the management LAN port Enable a management Local Area Network (LAN) port on the Secure Router 4134 for network management access. To enable the management port, you assign it an IP address. The Secure Router 2330 does not support a dedicated management LAN port. You can use one of the front panel Ethernet ports as a management LAN port. Important: The Secure Router 4134 management Ethernet interface (FE 0/0) on the rear panel does not support jumbo frames. Therefore, the management port Maximum Transmission Unit (MTU) can be configured with a value in the range of 64 to 1500 bytes. Important: The Secure Router 4134 management Ethernet interface (FE 0/0) does not support routing or multicast. Important: The Secure Router 4134 management Ethernet interface (FE 0/0) is disabled after boot if a voice card is installed in the chassis. You can use one of the front panel Ethernet ports as a management LAN port. The following figure shows the location of the management port on the rear panel of the Secure Router Commissioning July 2013 Comments? infodev@avaya.com

27 Enabling the management LAN port Figure 8: Management port on the rear panel of the Secure Router 4134 Prerequisites You must be connected to the Secure Router 2330/4134 through the console port. See Connecting a terminal for local access on page 19 for information about connecting a terminal to the console port. You must log in as a user with sufficient permissions to configure the Secure Router 2330/4134. You must have the IP address and netmask that you want to assign to the management port. The following procedure uses Ethernet port 0/0 (on the rear of the Secure Router 4134) for the management port. You can also use port 0/1 or port 0/2 on the front panel of the Secure Router 4134 for management purposes. Ethernet port 0/0 is a 10/100 Base-T port. Ethernet ports 0/1 and 0/2 are 10/100/1000 Base-T ports. On the Secure Router 2330, you can use one of the front panel Ethernet ports as a management port. 1. To access configuration mode, enter: Commissioning July

28 Commissioning the Avaya Secure Router 2330/4134 configure terminal 2. To identify the management port for configuration, enter: interface ethernet 0/0 3. To configure the management port IP address, enter: ip address <ipaddr> <netmask> 4. To configure the speed and mode of the port, enter: speed < auto> mode <full_duplex half_duplex> Table 2: Variable definitions Variable Value < auto> The speed of the interface. Enter auto for autonegotiation. Note that Ethernet port 0/0 is a 10/100 Base-T port. <full_duplex half_duplex> The port mode. The default value is half_duplex. <ipaddr> <netmask> The IP address that you assign to the management port. For example, The network mask that you assign to the management port IP address. For example, Disabling the USB port on the Secure Router 4134 To provide additional security on the router, you can optionally disable the rear-panel USB port. The Secure Router 2330 does not support a USB port. Important: The system configuration must be stored to retain this setting over system reboots. 1. To access configuration mode, enter: configure terminal 2. To disable the USB port, enter: no usb enable 3. To display the status of the USB port, enter: 28 Commissioning July 2013 Comments? infodev@avaya.com

29 Configuring SSH show usb_userstat 4. To re-enable the USB port, as required, enter: usb enable Configuring SSH You can enable an SSH connection for remote access. To generate a key and enable SSH, use the procedures in this section. 1. To access configuration mode, enter: configure terminal 2. To access the SSH key generation subtree, enter: ssh_keygen 3. To generate the DSA key, enter: generate dsa 4. To generate the RSA key, enter: generate rsa 5. To exit the SSH key generation subtree, enter: exit 6. To enable the SSH connection, enter: ssh_server enable 7. To save the configuration, enter: save local Enabling FTP, TFTP, and Telnet The default configuration for the Secure Router 2330/4134 includes FTP, TFTP, and Telnet servers disabled. You can enable any and all of these servers to allow this type of access to the Secure Router 2330/4134. Commissioning July

30 Commissioning the Avaya Secure Router 2330/4134 Prerequisites You must assign an IP address to the Secure Router 2330/ To access configuration mode, enter: configure terminal 2. To enable the FTP service, enter: ftp_server 3. To enable the TFTP service, enter: tftp_server 4. To enable the Telnet service, enter: telnet_server Configuring FTP users 1. To access configuration mode, enter: configure terminal 2. To configure an FTP user, enter a user name: ftp_user <username> The default ftp user name is admin. 3. At the prompt, enter a password for the FTP user: Please enter new password: <password> The default ftp user password is admin. 4. At the prompt, re-enter the password: Please re-enter password: <password> If you entered the password correctly, the Secure Router returns a message indicating a successful configuration: password is set 5. To verify the current ftp server configuration, enter: show ftp 30 Commissioning July 2013 Comments? infodev@avaya.com

31 Verifying the Telnet connection Job aid: sample output The following figure shows sample output for the show ftp command. Verifying the Telnet connection Verify the Telnet connection to ensure that users can successfully access the Secure Router 2330/4134 using remote access. Prerequisites The IP address of the management interface on the Secure Router 2330/4134 must be configured. You must have the IP address of the management interface on the router. You must have a terminal or workstation connected to the Ethernet LAN. 1. To start a Telnet session from your workstation, enter: telnet <ipaddr> 2. To log in, enter: login: admin password: setup Viewing Telnet server settings View the Telnet server settings for information about the status of the Telnet server (enabled or disabled) and the Telnet session timeout value. To view information about the Telnet server settings, enter: Commissioning July

32 Commissioning the Avaya Secure Router 2330/4134 show telnet Clearing a Telnet session You can disconnect a specific Telnet session, if necessary, or you can disconnect all Telnet sessions simultaneously. 1. To view the list of users currently connected using a Telnet session to find the Telnet session sequence numbers, enter: show users The following figure shows an example of the Telnet session sequence numbers for users remotely connected to the router. 2. To clear a specific Telnet session, enter: clear telnet_session <value> Table 3: Variable definitions <value> Variable Value The Telnet session sequence number. Enter a value from 1 to 16. To quickly disconnect all Telnet sessions, use the command: clear telnet_sessions Configuring the Telnet banner You can customize the banner that appears when users access the router using Telnet services. When configuring the Telnet banner, use \n to begin a new line. With Release 10.2 and later, you no longer need to use quotes ("") as a delimiter for the banner text. 32 Commissioning July 2013 Comments? infodev@avaya.com

33 Configuring the Telnet timeout 1. To access configuration mode, enter: configure terminal 2. To configure the Telnet banner, enter: telnet_banner banner <string> [banner1] [banner2] Table 4: Variable definitions [banner1] [banner2] <string> Variable Value An optional parameter that you use to extend the banner text. If you require the banner text be more than 255 characters in length, use banner1 <string> to continue the banner text. An optional parameter that you use to extend the banner text. The banner text that you want to appear in Telnet sessions. The banner text can be up to 255 characters in length. Use \n to begin a new line within the banner. Configuring the Telnet timeout You can configure the timeout value for Telnet sessions. A Telnet session disconnects if it remains inactive for the configured session duration. 1. To access configuration mode, enter: configure terminal 2. To configure the Telnet timeout value, enter: telnet_timeout <value> Table 5: Variable definitions Variable Value <value> Enter the time in seconds (from 0 to 3600) after which inactive Telnet sessions automatically disconnect. The default value is 900 seconds. If you enter a value of 0 Commissioning July

34 Commissioning the Avaya Secure Router 2330/4134 Variable Value seconds, inactive Telnet sessions do not automatically disconnect. Configuring the host name Configure a host name for the Secure Router 2330/4134 to uniquely identify it. Once assigned, the host name becomes the CLI prompt name. Important: Changing the host name later (that is, post commissioning), and committing this change, drops all Telnet and SSH connections. All active console sessions also end. 1. To access configuration mode, enter: configure terminal 2. To configure the host name for the Secure Router 2330/4134, enter: hostname <WORD> Table 6: Variable definitions <WORD> Variable Value The name you want to assign to the Secure Router 2330/4134. Configuring the static default route Configure a static route to specify a preferred route to a destination. You can identify the gateway, or next-hop, for a static route by specifying one of the following: IP address of a directly connected interface name of a local interface such as ethernet0/0 1. To access configuration mode, enter: 34 Commissioning July 2013 Comments? infodev@avaya.com

35 Verifying the next-hop connection configure terminal 2. To configure the gateway route, enter: ip route <netaddr/mask> <gateway> Table 7: Variable definitions <netaddr/mask> <gateway> Variable Value The IP address and the subnet mask of the destination network. For example, /24. Entering the subnet mask is optional. The IP address or interface name of the gateway. For example, Verifying the next-hop connection Use the procedure in this section to verify that the connection from the management interface successfully connects to the next-hop device. Prerequisites You must have the IP address of the next-hop device. To ping the next-hop device, enter: ping <ipaddr> Configuring the date To configure the date, you enter the month, day, and year. 1. To access configuration mode, enter: configure terminal 2. To configure the date, enter: date <month> <day> <year> Commissioning July

36 Commissioning the Avaya Secure Router 2330/4134 Table 8: Variable definitions <day> <month> <year> Variable Value The current day in relation to the month. Enter a value from 1 to 31. The current month. Enter a value from 1 to 12. The current year. Enter a value from 2000 to Configuring the time To set the current time for the Secure Router 2330/4134, you specify the time in relation to Coordinated Universal Time (UTC): time zone offset ahead (+) or behind (-) UTC number of hours ahead or behind UTC number of minutes ahead or behind UTC 1. To access configuration mode, enter: configure terminal 2. To configure your local time, enter: utc <+ -> <hour offset> <minute offset> Table 9: Variable definitions Variable Value <+ -> The time zone offset. Enter + to indicate that your time zone is ahead of UTC. Enter - to indicate that your time zone is behind UTC. For example, if you are in New York, you enter utc -. <hour offset> <minute offset> The number of hours that your local time is offset from UTC. Enter a value from 0 to 23. For example, if you are in New York, you enter utc - 4. The number of minutes that your local time is offset from UTC. Enter a value from 0 to 36 Commissioning July 2013 Comments? infodev@avaya.com

37 Configuring multiple SNTP servers Variable Value 59. For example, if you are in New York, you enter utc Configuring multiple SNTP servers The Secure Router 2330/4134 supports the Multiple Simple Network Time Protocol (SNTP) Server feature. SNTP is a simple form of the Network Time Protocol (NTP), which is an internet protocol used for synchronization of computer clocks. The Multiple SNTP Server feature provides support for up to 10 SNTP servers. Multiple servers provide redundant backup for synchronizing time on the Secure Router. During configuration, servers can be specified by hostname or IP address, and a timeout value must be set for the query. The Multiple SNTP Server features operates by having the SNTP service query configured SNTP servers on a round-robin basis. If an SNTP server is queried and fails to respond, the router sends a request to the next configured SNTP server. The SNTP server support is not active until the service is enabled. While the service is enabled the configuration cannot be changed. The show sntp command has been modified to display the current state of SNTP, the server it is contacting to receive the current time, as well as all configured servers. When specifying a server by domain name, DNS entries need to be configured before SNTP functions properly. Use the following procedure to configure multiple SNTP servers. 1. To configure multiple SNTP servers, enter Configuration Mode. configure terminal 2. Because DNS entries must be configured for SNTP to function properly, configure primary and secondary DNS servers. ip pname_server <address> ip name_server <address> 3. To configure an SNTP server, enter the sntp sub-tree. sntp 4. Configure the source address of the SNTP client. source-address <address> 5. Configure the number of retries for each SNTP server. retries <count> 6. Configure an NTP server. Commissioning July

38 Commissioning the Avaya Secure Router 2330/4134 server <server> [timeout] 7. To add up to 10 SNTP servers, repeat step Enable the SNTP client. enable Table 10: Variable definitions <address> <count> <server> Variable Specifies an IP address. Value Specifies the number of retries the NTP server performs, in the range 1 5. Default is 3. Specifies the NTP server to use for updates. <timeout> Specifies the maximum response time, in the range Default is Configuring the SNTP client The Simple Network Time Protocol (SNTP) synchronizes the internal clocks of various network devices across large, diverse networks to universal standard time. Use the procedure in this section to enable the SNTP client on the Secure Router 2330/ To access configuration mode, enter: configure terminal 2. To set the location of the SNTP server, enter: sntp server {ipaddr hostname} 3. To set the timeout value for the response from the server, enter: sntp timeout <value> Table 11: Variable definitions {ipaddr hostname} <value> Variable Value The IP address or host name of the broadcast server. The default value is any broadcast server. The timeout value in seconds. The default timeout value is 1024 seconds. 38 Commissioning July 2013 Comments? infodev@avaya.com

39 Displaying the SNTP configuration Displaying the SNTP configuration Use this procedure to display the SNTP configuration. To display the SNTP configuration, enter: show sntp Configuring the SNTP source address Use the following procedure to configure the SNTP server source address for all services. Procedure Steps 1. To configure source addresses for a service, enter Configuration Mode. configuration terminal 2. Enter the sntp subtree sntp 3. Configure the source address. source-address <[ip-address] [interface-name]> Table 12: Variable definitions [ip-address] Variable [interface-name] Value Specifies the source address by IP address. Specifies the source address by interface name. Configuring daylight saving time The daylight saving time (DST) feature allows you to configure a time offset for daylight saving. Use the procedure in this section to configure DST on the Secure Router 2330/ To access configuration mode, enter: Commissioning July

40 Commissioning the Avaya Secure Router 2330/4134 configure terminal 2. To configure the DST offset, enter: dst set <device location> <start hour> <start minute> <start week of month> <start day of week> <start month> <end hour> <end minute> <end week of month> <end day of week> <end month> <dst duration hrs> <dst duration minutes> 3. To enable DST, enter: dst enable 4. To disable DST, enter: no dst enable 5. To display the DST configuration and status, enter: show dst Table 13: Variable definitions <device location> <start hour> Variable Value Specifies the location of the device. Specifies the start hour (00-23), in other words, the hour at which the DST offset time begins. <start minute> Specifies the start minute (00-59) <start week of month> Specifies the start week of <start month> (1-4) <start day of week> Specifies the start day of week (0 - sunday, 6 - saturday) <start month> Specifies the start month of year (1-12) <end hour> Specifies the end hour (00-23), in other words, the hour at which the DST offset time ends. <end minute> Specifies the end minute (00-59) <end week of month> Specifies the end week of <end month> (1-4) <end day of week> Specifies the end day of week (0 - sunday, 6 - saturday) <end month> Specifies the end month of year (1-12) <dst duration hrs> Specifies the number of offset hours to add to the time at the start of DST (and remove at the end of DST). 40 Commissioning July 2013 Comments? infodev@avaya.com

41 Example of configuring daylight saving time Variable <dst duration minutes> Value Specifies the number of offset minutes to add to the time at the start of DST (and remove at the end of DST). Example of configuring daylight saving time Consider the following DST scenario: DST start: 2nd Sunday of April at 2:00 AM DST end: 2nd Sunday of October at 2:00 AM Offset time amount: 1:00 hours To achieve this configuration, consider the following: Parameter DST start: 2nd Sunday of April at 2:00 AM DST end: 2nd Sunday of October at 2:00 AM start hour start minute start week of month start day of week start month end hour end minute end week of month end day of week end month dst duration hrs dst duration minutes Offset time amount: 1:00 hours To configure DST for this example, use the following procedure. 1. To enter configuration mode, enter: configure terminal 2. To configure the DST for this example, enter: Commissioning July

42 Commissioning the Avaya Secure Router 2330/4134 dst set LOCATION To enable DST, enter: dst enable This configuration provides the following outcome: For year 2009: DST start: SUN APR 12 02:00: DST end: SUN OCT 11 02:00: For year 2010: DST start: SUN APR 11 02:00: DST end: SUN OCT 10 02:00: Changing the admin user password The system administrator login consists of two components: the account name and the password. The initial login name is always "admin". You can change this after logging in for the first time. The default administrative password is "setup". Avaya recommends you change the default password as soon as possible to ensure only authorized personnel can access the Secure Router 2330/ To access password configuration mode, enter: password The Secure Router 2330/4134 prompts you for the current user name. 2. Enter the default user name, which is the current user name: admin The Secure Router 2330/4134 prompts you for the old password. 3. Enter the default password, which is the current password: setup The Secure Router 2330/4134 prompts you for the new password. 4. Enter your new password. The Secure Router 2330/4134 prompts you to verify the new password. 5. Re-enter your new password. A message appears that confirms that the password is changed. 42 Commissioning July 2013 Comments? infodev@avaya.com