November 2003 - USR-TC - mailman.xmission.com

IP Filters via Radius Profiles
by Brandon Lehmann 19 Nov '03

19 Nov '03

Hi List, I have read through a lot of the archives concerning IP filtering similar to Ascend-Data-Filter. I would like to refrain from setting up "filters" on the TC. I would rather send the filters down dynamically from the radius server. I have added the following radius attributes to my sql server for passing the filters down to the user on login. USR-IP-Input-Filter = "1 AND tcp-dst-port = 25", USR-IP-Input-Filter = "2 REJECT dst-addr != X.X.X.X/24", USR-IP-Input-Filter = "3 PERMIT" Please not that my Radius server automatically translates this attribute to IP-Input-Filter. I have read through some TC documentation that refers to IP-Input-Filter and says that the AND statement comes before the REJECT statement BUT to number the rules in order. However, I have seen in the list that they are number out of order, 2, 1, 3 per say. If I number these in this order the user cannot connect. If I use the order above the user can connect but the filters do not apply. I am stumped. Any help would be appreciated. *Yes that is a class C for my mail server. Thanks, Brandon Lehmann

2 2

Anybody selling 333NMC's?
by Stephen Rivera - WRCA.Net 17 Nov '03

17 Nov '03

Looking for any of these elusive puppies. If you have one or 2 or 10. I'm interested. (***Would have blue pull tabs) anyone interested in an ARC (not hiper arc) cheap $2000. 2nd gen. never used. out of box condition. been sitting here to long. also have 5 or so 336 bundles available. Priced to compete. ********************************************************************* Steve Rivera IM: srivera711 (877)WRCANET x102 for more product info got www.wrca.net WRCA , Inc. - 481 Wright Debow Rd. Jackson, NJ 08527

1 0

RE: [USR-TC] Quad analog modems DTE
by Parham D. Beheshti 15 Nov '03

15 Nov '03

No one has an answer for me yet??? :-( ________________________________ From: usr-tc-bounces(a)mailman.xmission.com [mailto:usr-tc-bounces@mailman.xmission.com] On Behalf Of Parham D. Beheshti Sent: Tuesday, November 11, 2003 12:25 PM To: usr-tc(a)mailman.xmission.com Subject: [USR-TC] Quad analog modems DTE Hello I got 16 quad analog modems, 1 netserver and 1 386 nmc ... from tcm I cant set dte to packet bus. It sets fine to packet bus but as when I do a Get. I shows nic. Well, I saved to nv, softreset, hard reset, still the same problem. Please let me know if I should change a jumper or a setting to get modems talk to netserver on packet bus Thank you in advance Parham

2 1

Corrupted Flash, diagnostic power-up failure
by Gen Camiling 14 Nov '03

14 Nov '03

Hi there, im upgrading code for hiperdsp, downloading was succesful but upon boot-up of the card this is what i got: Flash Image Has Valid CRC, Loading Image.... Diagnostic Power-Up Failure Manufacturing Info -> 1AAA13M0 Mode/Env -> 1/0 Fault Code -> 0-8-25-1 Expected Data -> f005400c Received Data -> f0054004 Text Message -> Address Equals Data Test Failure Info Message -> Second read failed. Hard error indicated. Questions: 1. If the Flash gets corrupted and you tried re-flashing and still card does not come up, is there a way to salvage the card or is it good as hardware failure (dead)? 2. Is there a list/link/copy where we can interpret such fault code like the one stated above? -- Best regards, Gen =================================== Gener R. Camiling Chief Technical Officer International Micro Village, Inc. http://www.imvi.com.ph ===================================

1 0

Hiper ARC setup assistance please
by Mike Cisar 13 Nov '03

13 Nov '03

I am in the midst of replacing my existing PRI/Quad/Netserver/NMC setup with a Hiper DSP/ARC/NMC. I have gone through, configured everything that I can figure and got the system to the point where it's answering calls and successfully authenticating users against our RADIUS (freeradius) server. The problem I am having is that once users are connected most of them are not able to do anything (and in fact the users that are not working I cannot even ping). The puzzling part is that the problem is not tied to a particular user (a user may dial in 10 times, and maybe one time out of the 10 everything works fine). The times when things do not work, I have had the users check winipcfg and it shows the correct IP, gateway, etc, etc. I'm sure there is probably some routing setting or somesuch that I have not set properly or routing isn't propagating to something it needs to propagate to that is causing this issue. The users are "firmly" connected, its not as if they are getting disconnected... and they are having no problems during the connection process. Side note that I did have to change the PPP authentication setting from "any" to "PAP" to get users to authenticate to the RADIUS server (the session was defaulting to CHAP and failing)... that is the only thing remotely convoluted that I tried changing :-) I thought everything had gone miraculously well when I saw users dialling in, being assigned IP addresses and connecting successfully... until the phone started ringing with people saying "I can connect but I can't do anything". I've tried to configure with HARM (which I hear everybody hates :-) after resetting to factory default. I'm more than happy to reset the ARC to factory defaults again(probably the best place to start :-) if someone is instead able to give me a quick rundown of the command line settings which I should enter from factory default to end up with a working configuration. Our needs are about as basic as it gets, so I'm guessing it *should* be about 10 or 15 command lines to configure. I'll give my working settings from the Netserver setup below, and hopefully this will give enough info... There are no users configured in the Netserver. IP addresses and DNS servers are assigned to the customers by the Netserver with the exception of a handful of users which receive a static IP courtesy of the RADIUS server (but still receive their DNS server settings courtesy of the Netserver). I've set the IP's for the new equipment not to conflict with the old so that all I have to do is unplug the PRI from the old chassis and plug it into the new one to do the switchover (or to test). The RADIUS server is all configured up to accommodate this setup. (IP's shortened below to save my fingers :-). - I have a single PRI with 23 channels - Existing Netserver is IP 1.1.1.226 with netmask 255.255.255.224 and gateway of 1.1.1.225 - Existing NMC is IP 1.1.1.130 with netmask 255.255.255.192 and gateway of 1.1.1.129 - Our single IP Pool for dialup users starts at 1.1.1.228 netmask 255.255.255.224 gw 1.1.1.225 and has 27 IP's available (will be using the same pool in new setup) - Hiper NMC will be IP 1.1.1.181 with netmask 255.255.255.192 and gateway of 1.1.1.129 - Hiper ARC with dual 10/100 NIC will be IP 1.1.1.227 with netmask 255.255.255.224 and gateway of 1.1.1.225 on the top ethernet port, the bottom ethernet port is not connected. - Radius server is 1.1.1.133 with a secret of blah for both accounting and authentication - DNS servers are 1.1.1.130 and 1.1.1.131 - Logging server is 1.1.1.133 - SNMP traps to 1.1.1.133 - 3.5.105 firmware on DSP, 5.3.107 on ARC and 8.6.3 on NMC I think that's about everything. Thanks in advance for your assistance! Cheers, >>>>> Mike <<<<<

2 4

finding latest software
by choi 13 Nov '03

13 Nov '03

This is Ms. Choi from Thailand. I'm working with Sub ISP in thailand and using TCH 1000 (used ㅜ.ㅜ) for internet service. TCH is quite good so far but I got a little problem about software version. Actually, I bought used TCH and no management contract with 3com so cannot get any update version of each ARC, DSP, NMC etc. Buying new TCH is still heavy for me. If you can give me those software version, it would be highly appreciated. ㅜ.ㅜ I've heard that these are the latest code (is it correct??) 3COM DSP 3.7.4 3COM Access Router Card 5.7.2 3COM Network Management Card 10.2.5 I'm looking forward to your reply soon. Thank you. ** Please help me !!! Best Regards Choi Thai System Integration Co.Ltd. Bangkok : #211, 2F Times Square Bldg, 246, Sukhumvit Soi 12~14 Klongtoey, Bangkok 10110 Thailand Tel : +(662) 653-3636~9 Fax : +(662) 653-3635 Pattaya : 475/1-3, Moo 4, Sukhumvit Rd Naklua, Banglamung, Chonburi 20150 Thailand Tel : +(6638) 727-727 Fax : +(6638) 727-726

2 1

RE: [USR-TC] V92 Chassis's Available
by Joel - Fox Computers 12 Nov '03

12 Nov '03

Shannan is correct. You have to get a support contract in order to get software downloads. Hope that helps. Thanks, Joel -----Original Message----- From: SWDT Inc. [mailto:sky1@airmail.net] Sent: Wednesday, November 12, 2003 2:01 PM To: Discussion relating to the 3Com/US Robotics Total Control modemsystems. Subject: Re: [USR-TC] V92 Chassis's Available Probably means that he will replace any defective parts or pieces during a six month time frame should something go wrong. Shannan Young sky1(a)airmail.net Southwest Data Technology, Inc. 401 S. Sherman Street Suite #211 Richardson, TX 75081 972-739-7010 972-739-7013 (Fax) www.swdt.com ----- Original Message ----- From: Todd Bertolozzi <mailto:todd.bertolozzi@voyager.net> To: Discussion relating to the 3Com/US <mailto:usr-tc@mailman.xmission.com> Robotics Total Control modemsystems. Sent: Wednesday, November 12, 2003 1:59 PM Subject: Re: [USR-TC] V92 Chassis's Available Hi Joel, I'm curious what the 6 month warranty entails? Access to software downloads? Todd ----- Original Message ----- From: Joel - <mailto:jfox@foxcomputers.com> Fox Computers To: Discussion relating to the <mailto:usr-tc@mailman.xmission.com> 3Com/US Robotics Total Control modemsystems. Sent: Monday, November 10, 2003 10:09 AM Subject: [USR-TC] V92 Chassis's Available $1000 each!!! Still have some 336-port V.92-capable chassis's available. Gotta get these out the door. Config'd as follows: (14) Hiper DSPs (2) 128MB Hiper ARC's (1) Hiper NMC (2) 130Amp AC Power Supplies Will warranty for 6 months Email me with Questions. Thanks, Joel _____ _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc _____ _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0

V92 Chassis's Available
by Joel - Fox Computers 12 Nov '03

12 Nov '03

$1000 each!!! Still have some 336-port V.92-capable chassis's available. Gotta get these out the door. Config'd as follows: (14) Hiper DSPs (2) 128MB Hiper ARC's (1) Hiper NMC (2) 130Amp AC Power Supplies Will warranty for 6 months Email me with Questions. Thanks, Joel

3 2

RE: [USR-TC] HiPer Access Modem Compatibility
by Joel - Fox Computers 12 Nov '03

12 Nov '03

The partial-page download you mention sounds like an MTU setting, possibly coming from your RADIUS server. Past experiences like this lead me to believe your old TC rack ignored the information, while the new one will certainly use the setting, and a wrong setting will cause exactly what you are describing. Check to see if your RADIUS is sending back something like "Framed-MTU=576", which seems to be a "common" setting on some RADIUS servers, but it will really mess up your dial-up users. - joel -----Original Message----- From: ISN Support Staff [mailto:support@isn.net] Sent: Wednesday, November 12, 2003 11:47 AM To: Discussion "relating to the 3Com/US Robotics Total Control modem systems. Subject: [USR-TC] HiPer Access Modem Compatibility Hello, We recently switched one of our dialing pools from an old Total Control 1000 system (CISCO AS5100 terminal server cards with USR Quad Modem cards running analog) to a HiPer system with digital lines and v90 support, and now we seem to be having a lot of compatibility problems. Even when we've had our end users disable 56K on their modem, some of them have a problem of getting connected but not being able to access the Internet reliably (they get the first few packets of data, then the browser just hangs, waiting for the rest.) I've noticed that this seems to happen mostly with AOpen FM56 modems, but they do seem to work fine on our other TC 1000 units (non-hiper: Dual T1's with 12 digital quad modems running v90) Does anyone know of any compatibility problems I should be aware of, or is there any suggestions as to a good init string/script to use in the Hiper systems to make them more friendly with non-USR modems? _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

4 5

HiPer Access Modem Compatibility
by ISN Support Staff 12 Nov '03

12 Nov '03

Hello, We recently switched one of our dialing pools from an old Total Control 1000 system (CISCO AS5100 terminal server cards with USR Quad Modem cards running analog) to a HiPer system with digital lines and v90 support, and now we seem to be having a lot of compatibility problems. Even when we've had our end users disable 56K on their modem, some of them have a problem of getting connected but not being able to access the Internet reliably (they get the first few packets of data, then the browser just hangs, waiting for the rest.) I've noticed that this seems to happen mostly with AOpen FM56 modems, but they do seem to work fine on our other TC 1000 units (non-hiper: Dual T1's with 12 digital quad modems running v90) Does anyone know of any compatibility problems I should be aware of, or is there any suggestions as to a good init string/script to use in the Hiper systems to make them more friendly with non-USR modems?

1 0