Allied TelesisメーカーAR 300 AT-AR300 AT-AR300の使用説明書/サービス説明書
ページ先へ移動 of 36
Simply connecting the world Softwar e Release 2.3.1 For Rapier Sw itches, AR30 0 and AR70 0 Seri es Rou ters, an d AR800 Series Modular Swit ching Routers Introduction .......... ............. ................... ................... ............. ....
2 Release Note Software Release 2.3.1 C613-10325 -00 REV B Intr oduction Allied T elesyn Internationa l announ ces the release of Software Release 2.3.1 on the AR300 and AR700 Series r outers, Rapier Seri es laye r 3 swi tches, and AR80 0 Series modular sw itching routers.
Softw are Rel ease 2 .3.1 3 Software Release 2.3.1 C613-103 25-00 REV B Hot Swapping Network Service Modules In routers and switches that have NSM bays, this release allows the fol lowing NSMs to be h.
4 Release Note Software Release 2.3.1 C613-10325 -00 REV B files, feature li cences and ot her files. (If this happens, FLASH m emory may need to be clear ed completely , leaving no functioning software to run the r outer .) Hot swap an NSM out of an NSM bay Follow these steps to hot swap an NSM, or PICs in an NSM-4 PIC, out of an NSM bay .
Softw are Rel ease 2 .3.1 5 Software Release 2.3.1 C613-103 25-00 REV B Software Features The following feature s are available o n all routers and sw itches supported by this r eleas e, un less ot he.
6 Release Note Software Release 2.3.1 C613-10325 -00 REV B NSM Hot Swap Softw ar e Support When a car d is hot-sw apped out of a bay , it s inte rface inst ances becom e dormant.
Softw are Rel ease 2 .3.1 7 Software Release 2.3.1 C613-103 25-00 REV B Figur e 2: Ex ample out put from the SHO W INTERF ACE command fo r a specif ic interf ace.
8 Release Note Software Release 2.3.1 C613-10325 -00 REV B If the DNS s ervers have already been configured, the configuration information ca n be set using the comma nd: SET IP DNS [DOMAIN={ANY| doma.
Softw are Rel ease 2 .3.1 9 Software Release 2.3.1 C613-103 25-00 REV B Auto matic Na meserve r Conf igura tion The primary and se condary name server ’s addresses can eith er be statically configured as above, or learned dynamically o ver an interface.
10 Release Note Software Release 2.3.1 C613-10325 -00 REV B SET TRIGGER= trigger-id [INTERFACE[= int erface ]] EVENT={UP| DOWN|FAIL|ANY} [CIRCUIT= miox-circuit ] [CP={ APPLE|ATCP|BCP| CCP|DCP|DNCP|IPC.
Softw are Rel ease 2 .3.1 11 Software Release 2.3.1 C613-103 25-00 REV B IP Secur ity (IPsec) Source Interface a nd Enhancem ents A source in terface can now be specified for tunnelled IPsec traffic. The performance of IPsec is also enhanced, and mor e simultaneous IPsec tunnels are supported, because of the incre ase in ENCO channels.
12 Release Note Software Release 2.3.1 C613-10325 -00 REV B OSPF on Dem and OSPF on demand circuits allow data lin k connections to be clo sed when not carrying application traf fic.
Softw are Rel ease 2 .3.1 13 Software Release 2.3.1 C613-103 25-00 REV B Figur e 3: Examp le of dial -on-demand IS DN befor e configuring OS PF on demand.
14 Release Note Software Release 2.3.1 C613-10325 -00 REV B Paladi n Firewall Enhanc ements The existing firewall NA T performs address translation for traffic passing between a pair of interfa ces.
Softw are Rel ease 2 .3.1 15 Software Release 2.3.1 C613-103 25-00 REV B ■ Reve rse N A T This transla tes the addresses of public side de vices to addresses suitabl e for the private side of the firewall (destination addr ess will be translated for outbound packets, sou rce addre ss for inboun d packets).
16 Release Note Software Release 2.3.1 C613-10325 -00 REV B additional r ules can be ad ded to allow or deny acce ss based on IP addr esses, por t nu mbe rs, day of t he w eek , or t im e of d ay .
Softw are Rel ease 2 .3.1 17 Software Release 2.3.1 C613-103 25-00 REV B translates both the public and priva te side source and desti nation addresse s.
18 Release Note Software Release 2.3.1 C613-10325 -00 REV B T able 2: Require d parameters for Firewall NA T rules. Key to table: ■ Direction I = in. The rule is applied to a public in terface. O = out. The rule is applied to a private interface. ■ S = Selector .
Softw are Rel ease 2 .3.1 19 Software Release 2.3.1 C613-103 25-00 REV B redir ection any web traffic from the user ’s PC or lapto p can be redire cted to the ISP's web server . This for ces the user to arrange payment for using the service before being able to browse to any other site.
20 Release Note Software Release 2.3.1 C613-10325 -00 REV B Figur e 5: Using e nhanced NA T in an IPsec tunne l with diff erent I Psec and de fault gateways. Standard NA T T o translate the source addr ess of traf fic received on the private interface eth0 and dest ined for addr esses in the range 210 .
Softw are Rel ease 2 .3.1 21 Software Release 2.3.1 C613-103 25-00 REV B Reverse NA T T o redirect all traffic r eceived on a private interface to a des tination of 210.25.7.1, without changing the source a ddress, use the command: ADD FIREWALL POLICY=zone1 RULE=51 ACTI ON=NAT NATTYPE=REVERSE INT=eth1 PROTOCOL=all GBLREMOTEIP=210.
22 Release Note Software Release 2.3.1 C613-10325 -00 REV B Fir ewall HTTP Pr oxies and Firew all Policies T o add or delete a Firewall HTTP proxy , use the new HTTP option for the PROXY parameter in .
Softw are Rel ease 2 .3.1 23 Software Release 2.3.1 C613-103 25-00 REV B per line. Options are supplied after the entry and a colon . Each option is separated by a spa ce. The option keyw ords that are allowed for each ent ry are “allow” and “nocookies” .
24 Release Note Software Release 2.3.1 C613-10325 -00 REV B Figur e 6: Ex ample of a HTTP fil ter file. HTTP Cookies By default, HTTP cook ie r equests are allowed to pa ss through the HTTP proxy configur ed under the fir ewall policy .
Softw are Rel ease 2 .3.1 25 Software Release 2.3.1 C613-103 25-00 REV B T o re-enable HTTP cookie requests to pass through the HTTP proxy , use the command: ENABLE FIREWALL POLICY= name HTTPCOOKIE S .
26 Release Note Software Release 2.3.1 C613-10325 -00 REV B VRRP Port Monitoring V irtual Router Redundancy Protocol (VRRP) is now able to monitor ports in the VLAN over which it is runn ing, and reduce the priority of the router or switch if ports in th e VLAN fail.
Softw are Rel ease 2 .3.1 27 Software Release 2.3.1 C613-103 25-00 REV B If the PROPOR TIONAL option is specified, the virtual router r educes the priority to a percentage of the original priority in proportion the per centage of availa ble ports.
28 Release Note Software Release 2.3.1 C613-10325 -00 REV B Border Gateway Protocol 4 (BGP-4) The Border Gateway Pr otocol version 4 (BGP-4) is an external gateway pr otoco l which allows two routers in differe nt routing domains to exchange routing information.
Softw are Rel ease 2 .3.1 29 Software Release 2.3.1 C613-103 25-00 REV B Inter net Protocol (IP) In conjunction with BGP-4, a n umber of new commands have been added to the implementation of IP , and several commands have been modified.
30 Release Note Software Release 2.3.1 C613-10325 -00 REV B T o reset IP interfaces, use the command: RESET IP COUNTER={ALL|ARP|EGP|ICMP|INTERFACE|IP|MULTICAST| ROUTE|SNMP|UDP} This command resets the specified group of IP counters to zer o (0). The COUNTER parameter specifies the group of counters to be reset.
Softw are Rel ease 2 .3.1 31 Software Release 2.3.1 C613-103 25-00 REV B Figur e 8: Ex ample out put from the SHO W IP COUN TER=INTER FAC E comman d. IP Interface Counters ----------------------------.
32 Release Note Software Release 2.3.1 C613-10325 -00 REV B Figur e 9: Ex ample out put from the SHO W IP COUN TER=SNMP command. SNMP counters: inPkts .......................... 0 outPkts ................... ...... 0 inBadVersions ................... 0 outTooBigs .
Softw are Rel ease 2 .3.1 33 Software Release 2.3.1 C613-103 25-00 REV B T elephon y (PBX) Functionality AR300 Series r outers with telephony ports now offer a choice of ISDN supplemental services or internal PBX functions.
34 Release Note Software Release 2.3.1 C613-10325 -00 REV B Bandwi dth Limi ting This feature will be available on Ra pier i Series layer 3 switches only , when these models become available. Ingress and egress bandwidth limits are specified separa tely .
Softw are Rel ease 2 .3.1 35 Software Release 2.3.1 C613-103 25-00 REV B ENABLE TELNET SER VER Synt ax ENABLE TELNET SERVER Description This command enables the T elnet server to be accessed r emotely .
36 Release Note Software Release 2.3.1 C613-10325 -00 REV B The LOGIN parameter is used to specify whether or not users with a privilege of “user” will be a ble to login to the com mand line interface. Usern ames with LOGIN set to TRUE can be used both for P AP and CHAP authentication, and to login and access the com mand line.
デバイスAllied Telesis AR 300 AT-AR300 AT-AR300の購入後に(又は購入する前であっても)重要なポイントは、説明書をよく読むことです。その単純な理由はいくつかあります:
Allied Telesis AR 300 AT-AR300 AT-AR300をまだ購入していないなら、この製品の基本情報を理解する良い機会です。まずは上にある説明書の最初のページをご覧ください。そこにはAllied Telesis AR 300 AT-AR300 AT-AR300の技術情報の概要が記載されているはずです。デバイスがあなたのニーズを満たすかどうかは、ここで確認しましょう。Allied Telesis AR 300 AT-AR300 AT-AR300の取扱説明書の次のページをよく読むことにより、製品の全機能やその取り扱いに関する情報を知ることができます。Allied Telesis AR 300 AT-AR300 AT-AR300で得られた情報は、きっとあなたの購入の決断を手助けしてくれることでしょう。
Allied Telesis AR 300 AT-AR300 AT-AR300を既にお持ちだが、まだ読んでいない場合は、上記の理由によりそれを行うべきです。そうすることにより機能を適切に使用しているか、又はAllied Telesis AR 300 AT-AR300 AT-AR300の不適切な取り扱いによりその寿命を短くする危険を犯していないかどうかを知ることができます。
ですが、ユーザガイドが果たす重要な役割の一つは、Allied Telesis AR 300 AT-AR300 AT-AR300に関する問題の解決を支援することです。そこにはほとんどの場合、トラブルシューティング、すなわちAllied Telesis AR 300 AT-AR300 AT-AR300デバイスで最もよく起こりうる故障・不良とそれらの対処法についてのアドバイスを見つけることができるはずです。たとえ問題を解決できなかった場合でも、説明書にはカスタマー・サービスセンター又は最寄りのサービスセンターへの問い合わせ先等、次の対処法についての指示があるはずです。