February 2005 - USR-TC - mailman.xmission.com

some interface is down
by Sherwin T 03 Feb '05

03 Feb '05

Hi! I've noticed that some of the interface were down. With this, some of our clients were unable to get thru. Does anyone could help me to resolve this problem? Interface Oper Admin Name Status Status slot:5/mod:1 Down Up slot:5/mod:2 Up Up slot:5/mod:3 Down Up slot:5/mod:4 Down Up Thanks in advance.

2 2

Hiper ARC II
by Russell Newberry 02 Feb '05

02 Feb '05

Does anyone have one of these Hiper ARC II NIC/NAC sets available for sale? ========================= Russell Newberry Maxis Technologies, Inc 433 West Wilshire Blvd. Oklahoma City, OK 73116 AOL IM "RUSSELLatMAXIS" e-mail: russell(a)maxistech.net Phone: 1 (800) 79 MAXIS International: 1 (405) 842-3331 Fax: 1 (405) 841-7882 http://www.maxistech.net

1 0

RE: USR-TC Digest, Vol 24, Issue 1
by Egnatoff, Billy 01 Feb '05

01 Feb '05

Kirti, Here are a few examples of filters I have needed. If you have HARM loaded, just cut and paste them into new filters and that way you have them saved. I'll forward you on a complete list of filter commands in a bit. Allows http, SSL and FTP to specified IP address. ICMP as well. #filter 1 IP: 010 ACCEPT tcp-dst-port = 80; 020 ACCEPT tcp-dst-port = 443; 030 ACCEPT tcp-dst-port = 20; 040 ACCEPT tcp-dst-port = 21; 050 REJECT dst-addr != 192.85.133.35; 060 ACCEPT icmp-type = 0; 070 DENY Reverse filter. Note the ! sign. #filter 2 IP: 010 REJECT dst-addr != 10.86.100.53; 020 DENY; Multiple servers / multiple ports using AND/ACCEPT pair. #filter 3 IP: # permit access SERVER1 010 AND tcp-dst-port = 30016; 020 ACCEPT dst-addr = 10.86.100.100/32; # permit access SERVER2 030 AND tcp-dst-port = 30020; 040 ACCEPT dst-addr = 10.86.100.101/32; # permit access SERVER3 050 AND tcp-dst-port = 30024; 060 ACCEPT dst-addr = 10.86.100.102/32; # permit access SERVER4 070 AND tcp-dst-port = 30014; 080 ACCEPT dst-addr = 10.86.100.103/32; # permit access SERVER5 090 AND tcp-dst-port = 30012; 100 ACCEPT dst-addr = 10.86.100.104/32; # permit access SERVER6 110 AND tcp-dst-port = 30018; 120 ACCEPT dst-addr = 10.86.100.105/32; # permit access SERVER7 130 AND tcp-dst-port = 30026; 140 ACCEPT dst-addr = 10.86.100.106/32; 150 AND tcp-dst-port >= 20; 160 ACCEPT tcp-dst-port <= 21; 170 ACCEPT tcp-dst-port = 7; 180 DENY;

2 1

RE: [USR-TC] RE: USR-TC Digest, Vol 23, Issue 10 Inactivity Time -out via Radi us profile.
by Kirti S. Bajwa 01 Feb '05

01 Feb '05

Bill: Your response may be my salvation. First let me explain what I am doing. I have a temporary testbed (a RH 6.2 server) authentication server. I am running freeRADIUS-1.0.1. The authentication protocol is PAP. If the testing goes OK, I plan to setup mySQL database. All user information will be stored in mySQL DB and free RADIUS will use this DB to authenticate. Your method will work for me. It gives me the opportunity to set different time-out for different users. Similarly, I can setup other attributes specific to each user, if I so desire. I have set up the freeRADIUS server but have never setup attributes. If you can send me how you setup the attributes in RADIUS, I maybe able to set freeRadius. Another settings which I may need help with is the proper filters to make TC look like a Firewall. Your help is highly appreciated. Kirti -----Original Message----- From: Egnatoff, Billy [mailto:Bill.Egnatoff@hit.cendant.com] Sent: Tuesday, February 01, 2005 11:39 AM To: 'usr-tc(a)mailman.xmission.com' Subject: [USR-TC] RE: USR-TC Digest, Vol 23, Issue 10 Inactivity Time-out via Radi us profile. Kirti, I configured our Total Controls with a 60 second time-out using a Radius profile. I don't know if you are using an external authentication method, but I though I would share this with all the same. Here is how I have it all configured. It looks tough but it is really simple. All of my callers must authenticate to an LDAP server. They do this via a Radius system. Within the LDAP directory server I created and assigned a mandatory attribute for all user objects called $ATTRIB1. I'll use this for creating groups for users in which I can then apply filters. How it works! Upon successful authentication I configured my Radius system to retrieve from LDAP, the value of $ATTRIB1 for that particular user and then assign the user a Radius_Profile named $ATTRIB1.(same value/name) In these profiles I have Total Control returnable attributes, such as TC_TimeOut, TC_FilterID, TC_IPADDRESSPOOL. These attribute will automatically be sent to the Total Control Chassis and assigned to the user's session. Step by Step: A VIP John Doe dials in and tries to authenticate. Total Control authenticates via Radius. Radius is configured to authenticate from external LDAP and retrieve attribute $x. IF authentication is successful, LDAP returns attribute $x's value. (I.e. VIP, HR, etc) Radius assigns user to profile named VIP Within profile VIP is a list of items to be sent to Total Control for the user's session, including: Time-Out, TC_IPAddressPool, FilterID or whatever you want. There are hundreds of attribute you can return. I know this might be over-kill for what you asked. If not, let me know and I can send you my config if you're interested. Doing a configuration like this make your TC seem like a firewall when used with filters correctly. I am using Funk's radius software and Netscape Directory Server (LDAP). Bill Egnatoff Sr. Systems Engineer, Central Systems Cendant Hotel Information Technology (602) 433-5769-v (602) 433-5760-f Message: 2 Date: Mon, 31 Jan 2005 15:12:49 -0500 From: "Kirti S. Bajwa" <kbajwa(a)tib.com> Subject: [USR-TC] Time-Out Settings To: "'Discussion relating to the 3Com/US Robotics Total Control modem systems.'" <usr-tc(a)mailman.xmission.com> Message-ID: <4B51F7FF1CDFD811A32A0020ED31AFEE1276A6@TESUQUE> Content-Type: text/plain; charset="ISO-8859-1" Hello List: On out 3COM, I have setup ,Inactivity Time [min][S19]' settings to '12' minutes (Under TCM > HiPer DSP Cards > Configure > Call Control Options). However, when I test this feature by dialing-in from my PC into 3COM, the connection remains open for an extended number of minutes. I do not know what the maximum time it remains open but as of this post the connection is up for 40+ minutes with no activity from my PC. Is ther anything wrong I am doing? How can I setup so the users disconnect when they reach the 'Inactivity Time"? Kirti

2 1

RE: USR-TC Digest, Vol 23, Issue 10 Inactivity Time-out via Radi us profile.
by Egnatoff, Billy 01 Feb '05

01 Feb '05

Kirti, I configured our Total Controls with a 60 second time-out using a Radius profile. I don't know if you are using an external authentication method, but I though I would share this with all the same. Here is how I have it all configured. It looks tough but it is really simple. All of my callers must authenticate to an LDAP server. They do this via a Radius system. Within the LDAP directory server I created and assigned a mandatory attribute for all user objects called $ATTRIB1. I'll use this for creating groups for users in which I can then apply filters. How it works! Upon successful authentication I configured my Radius system to retrieve from LDAP, the value of $ATTRIB1 for that particular user and then assign the user a Radius_Profile named $ATTRIB1.(same value/name) In these profiles I have Total Control returnable attributes, such as TC_TimeOut, TC_FilterID, TC_IPADDRESSPOOL. These attribute will automatically be sent to the Total Control Chassis and assigned to the user's session. Step by Step: A VIP John Doe dials in and tries to authenticate. Total Control authenticates via Radius. Radius is configured to authenticate from external LDAP and retrieve attribute $x. IF authentication is successful, LDAP returns attribute $x's value. (I.e. VIP, HR, etc) Radius assigns user to profile named VIP Within profile VIP is a list of items to be sent to Total Control for the user's session, including: Time-Out, TC_IPAddressPool, FilterID or whatever you want. There are hundreds of attribute you can return. I know this might be over-kill for what you asked. If not, let me know and I can send you my config if you're interested. Doing a configuration like this make your TC seem like a firewall when used with filters correctly. I am using Funk's radius software and Netscape Directory Server (LDAP). Bill Egnatoff Sr. Systems Engineer, Central Systems Cendant Hotel Information Technology (602) 433-5769-v (602) 433-5760-f Message: 2 Date: Mon, 31 Jan 2005 15:12:49 -0500 From: "Kirti S. Bajwa" <kbajwa(a)tib.com> Subject: [USR-TC] Time-Out Settings To: "'Discussion relating to the 3Com/US Robotics Total Control modem systems.'" <usr-tc(a)mailman.xmission.com> Message-ID: <4B51F7FF1CDFD811A32A0020ED31AFEE1276A6@TESUQUE> Content-Type: text/plain; charset="ISO-8859-1" Hello List: On out 3COM, I have setup ,Inactivity Time [min][S19]' settings to '12' minutes (Under TCM > HiPer DSP Cards > Configure > Call Control Options). However, when I test this feature by dialing-in from my PC into 3COM, the connection remains open for an extended number of minutes. I do not know what the maximum time it remains open but as of this post the connection is up for 40+ minutes with no activity from my PC. Is ther anything wrong I am doing? How can I setup so the users disconnect when they reach the 'Inactivity Time"? Kirti

1 0

Time-Out Settings
by Kirti S. Bajwa 01 Feb '05

01 Feb '05

Hello List: On out 3COM, I have setup ,Inactivity Time [min][S19]' settings to '12' minutes (Under TCM > HiPer DSP Cards > Configure > Call Control Options). However, when I test this feature by dialing-in from my PC into 3COM, the connection remains open for an extended number of minutes. I do not know what the maximum time it remains open but as of this post the connection is up for 40+ minutes with no activity from my PC. Is ther anything wrong I am doing? How can I setup so the users disconnect when they reach the 'Inactivity Time"? Kirti

2 1

RE: [USR-TC] RE: RE: Channelized T1 Question
by Joel - Fox Computers 01 Feb '05

01 Feb '05

In trunk settings of the dsp, toward the bottom of the list of options, look for something that says "number of digits" or something like that. Try setting it to 0 and see what happens. On some CT1's, they don't send any dial-in address, so the DSP just sits there waiting for it if you have it specified in the trunk settings. - Joel -----Original Message----- From: GiGoNET Support [mailto:tom@gigonet.com] Sent: Monday, January 31, 2005 10:31 PM To: Discussion relating to the 3Com/US Robotics Total Control modem systems. Subject: [USR-TC] RE: RE: Channelized T1 Question Looks okay... TC2-Arc16>> list chassis Slot Owner Description Ports Type Console 1 YES 24 Channel High Density Modem 24 STATIC NO 2 YES 24 Channel High Density Modem 24 STATIC NO 3 YES 24 Channel High Density Modem 24 STATIC NO 4 YES 24 Channel High Density Modem 24 STATIC NO 5 YES 24 Channel High Density Modem 24 STATIC NO 6 YES 24 Channel High Density Modem 24 STATIC NO 7 YES 24 Channel High Density Modem 24 STATIC NO 8 YES 24 Channel High Density Modem 24 STATIC NO 9 NO 24 Channel High Density Modem 24 STATIC NO 10 NO 24 Channel High Density Modem 24 STATIC NO 11 NO 24 Channel High Density Modem 24 STATIC NO 12 NO 24 Channel High Density Modem 24 STATIC NO 13 NO 24 Channel High Density Modem 24 STATIC NO 14 NO 24 Channel High Density Modem 24 STATIC NO 15 NO 24 Channel High Density Modem 24 STATIC NO 16 NO 24 Channel High Density Modem 24 STATIC NO > On 31 Jan 2005 at 8:55, Lewis Bergman wrote: > When you do a list chassis does the arc show that it owns the slot in > question and display the correct modem type? > > GiGoNET Support wrote: > > > > Hey Joel, > > > > I've just about got this working.. I think I've missed a piece. > > There are no alarms. I call the calls come in... but a modem > > on the dsp doesn't seem to get mapped to the call. > > > > *Slot1 DSP/span1> display atstat* > > > > Tslot Status Modem Status Call ID Action Span > > Connect Srvc State Queued Status > > 01 Idle N/A IS 0x00000000 NONE Ok > > 02 Idle N/A IS 0x00000000 NONE Ok > > 03 Dial In 003 IS 0x00020002 NONE Ok > > 04 Idle N/A IS 0x00000000 NONE Ok > > 05 Idle N/A IS 0x00000000 NONE Ok > > 06 Idle N/A IS 0x00000000 NONE Ok > > 07 Idle N/A IS 0x00000000 NONE Ok > > 08 Idle N/A IS 0x00000000 NONE Ok > > > > *Slot1 DSP/span1> display atconfig* > > > > Tslot Block Assigned Service ID Description > > Call Type Chan State > > 01 NONE 01 IS > > 02 NONE 02 IS > > > > Cheers, > > -Tom _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

2 2

RE: [USR-TC] Channelized T1 Question
by Joel - Fox Computers 31 Jan '05

31 Jan '05

They work with both CT1 or PRI - nothing required -----Original Message----- From: GiGoNET Support [mailto:tom@gigonet.com] Sent: Saturday, January 29, 2005 5:05 PM To: usr-tc(a)mailman.xmission.com Subject: [USR-TC] Channelized T1 Question Is it possible to flash the DSP T1/E1 card to work with CT1 verse PRI? Cheers, -Tom _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

3 4