November 2005 - USR-TC - mailman.xmission.com

FW: [USR-TC] RE: Dial-In Problem!!!!
by Kirti S. Bajwa 30 Jan '06

30 Jan '06

Hello: For the last few days I have posted the following question: ============ Please help. This problem is going on for the last 7 weeks without fixing. TC1000 1-HiPer NMC 2-HiPerARC 10-Hiper DSP We are a small ISP (400 customers). We have 2-ISDN-PRI lines for our customers to dial in. Our entire system looks like this: / / T1 to External Internet / CISCO 26XX Router | HUB 10/100 | ---------------------------------------------------------------| | | | | | NMC ARC1 ARC2 Web Authentication ----------- 3Com ------------ Server/Email | | | | | | | | | Customer Dial-In Our customers can dial-in, are authenticated and can access the internal web site (www.tibonline.net) and retrieve their email. But when they try to connect to any web site (outside our network) on the external net (such as www.yahoo.com) they time out with a message saying that "this page can't be displayed". We have changed the HUBs, RJ45 cables. We have the CISCO Router tested fine. Finally, I replaced the 3COM box with a backup box and the problem continues. Interestingly, we can access any Internet web site (www.msn.com, www.yahoo.com, etc.) from our internal network (over LAN) without problem. ============ Since posting the above message, we have received a number of responses. Charles suggested to see how the CISCO 2600 was assigning the IP addresses (or something similar!!). For the last two days, AT&T technicians has been working with me to look into the router. They have setup static address and have done number of settings without success. I have switched 3COM to a backup 3COM box. Following are new the IP address: NMC (Port 17) 12.21.237.240 ARC1(Port 15) 12.21.237.241 IP Pool: 12.21.237.48/31 ARC2(Port 16) 12.21.237.242 IP Pool: 12.21.237.96/31 The problem is that out Dial-In customers can dial-in, access the internal network (email, authentication, DNS, Web Servers) but can not access the external Network (www.msn.com) etc. I have setup a dial-up PC (Win XP Pro) to test. The first time I connected, the IP address assigned was 12.21.237.98. I could not access the external network. I tried to do a external trace from www.traceroute.org. Following are the results of the trace. -------- Call this TRACE-1 Testing the network route from EASYNEWS.COM to 12.21.237.98... Started on Thursday July 28th, 2005 at 17:37:05 GMT (1122597425) HOST LOSS RCVD SENT BEST AVG WORST ge1-8-1000m.sw1.easynews.com 0% 10 10 0.35 3.29 28.63 e-2-11-1000m.core-03.phx1.puregig.net 0% 10 10 0.29 0.56 1.65 12.118.42.25 0% 10 10 10.84 33.96 117.05 12.123.28.58 0% 10 10 57.70 58.01 58.83 tbr1-cl2.dlstx.ip.att.net 0% 10 10 54.24 66.34 171.39 tbr2-cl1.attga.ip.att.net 0% 10 10 59.23 73.93 154.81 ar13-p3110.attga.ip.att.net 0% 10 10 52.91 94.74 205.18 12.124.52.74 0% 10 10 70.30 77.15 110.81 12.21.237.241 0% 10 10 63.97 64.57 65.97 ??? 100% 0 10 0.00 0.00 0.00 -------- Few minutes later, I dial-in and re-connected. This time, I connected to IP address 12.21.237.99. This time I could go to external Internet no problem. -------- Call this TRACE-2 Testing the network route from EASYNEWS.COM to 12.21.237.99... Started on Thursday July 28th, 2005 at 17:45:23 GMT (1122597923) HOST LOSS RCVD SENT BEST AVG WORST ge1-8-1000m.sw1.easynews.com 0% 10 10 0.35 4.46 38.83 e-2-11-1000m.core-03.phx1.puregig.net 0% 10 10 0.28 0.34 0.38 12.118.42.25 0% 10 10 10.68 10.84 10.97 12.123.28.58 0% 10 10 57.70 58.16 59.00 tbr1-cl2.dlstx.ip.att.net 0% 10 10 53.09 63.09 148.52 tbr2-cl1.attga.ip.att.net 0% 10 10 58.09 60.96 83.12 ar13-p3110.attga.ip.att.net 0% 10 10 51.81 92.41 256.88 12.124.52.74 0% 10 10 69.03 71.50 87.39 12.21.237.241 0% 10 10 63.16 66.77 87.36 12.21.237.242 0% 10 10 64.35 71.89 94.87 12.21.237.99 10% 9 10 166.21 245.81 808.73 -------- In TRACE-1 (outside network can not be connected) the trace stops at ARC1 (12.21.237.241). In TRACE-2 (outside network is connected & the dial-in connection works), the trace gets to my dial-in terminal (12.21.237.99). I have noticed couple of things in the above traces. In both traces, ARC1[Kirti S. Bajwa] (12.21.237.241) is first traced even though the IP address of my terminal (12.21.237.98 or 12.21.237.99) is on ARC2 (12.21.237.242)!! Can someone explain why trace is always first going to ARC1 IP? Can someone explain what is going on? Why sometime the dial-in wotks (access the external network) and other times it does not? AT&T is going to call back around 3:00PM (EST) to help. Is 3COM needs some settings changed? Thanks in advance. Kirti

6 15

resell ports
by PD TC 21 Nov '05

21 Nov '05

Is anyone using a Total Control to resell ports to other ISPs? If so, would you be willing to share the software you use to let individual ISPs monitor their online users or disconnect a user?

1 0

filter to prevent denial of service attacks
by PD TC 17 Nov '05

17 Nov '05

hello, We are new to the Total Controls and have been using Portmasters. We have been searching the manuals, the Internet and the maillist archives (through google searches) but have not found the answers for some questions. On our portmasters, we can set up firewall scripts/filters to block denial of service attacks by blocking ip traffic directly to the ip address of the portmaster on its ethernet port except for our local network, dns, and radius servers external to us. Is there a way to do this on the Total control? If so, what exactly do we need to do to implement it? Thank you

4 6

RE: [USR-TC] mrtg ethernet traffic & free memory
by Adam Barnhill 17 Nov '05

17 Nov '05

modem utilization(ARC): 1.3.6.1.4.1.429.4.2.1.10.0 box temp (NMC): 1.3.6.1.4.1.429.1.2.2.5 -----Original Message----- From: usr-tc-bounces+adam=semo.net(a)mailman.xmission.com [mailto:usr-tc-bounces+adam=semo.net@mailman.xmission.com] On Behalf Of Ben Winslow Sent: Thursday, November 17, 2005 10:58 AM To: Discussion "relating to the 3Com/US Robotics Total Control modem systems.; totalcontrol(a)pagedata.com Subject: Re: [USR-TC] mrtg ethernet traffic & free memory On Thu, 2005-11-17 at 09:38 -0700, PD TC wrote: > hello, > > We are new to the Total Controls and have been using Portmasters. We > have been searching the manuals, the Internet and the maillist > archives (through google searches) but have not found the answers for > some questions. > > We are trying to get mrtg information on the ethernet traffic on the > HiperARC card and the free memory on the Total Control. We saw a > posting previously by Lewis Bergman in which he posted his .cfg > information. We have tried implementing it and have been successful at > retrieving the number of modems online and the temperature of the > Total Control. We are not getting the ethernet traffic nor the free > memory to come through. The HiperARC and the NMC will have different IP addresses (and possibly different SNMP communities) -- the ARC has the Ethernet statistics in the expected place (e.g. mrtg's cfgmaker will have no problem finding them), and the best way to get those numbers will be from the ARC directly instead of the NMC (the ARC also has the number of connected clients somewhere, I don't have the OID handy.) The NMC will allow you to proxy your SNMP request to another one of the cards (I can't remember the syntax off the top of my head, but it was something like setting the community to slotid@yourcommunityname), but it'll be more efficient to query the card directly unless there's something that prevents you from doing so. I can dig up the OID for connected users and probably the snmp proxy syntax if you can't find them, but the info shouldn't be too difficult to find with a lead. Cheers, -- Ben Winslow <rain(a)bluecherry.net>

1 0

usrchk customization
by PD TC 17 Nov '05

17 Nov '05

Hello, We downloaded the usrchk program for the HiperARCs from the site: http://www.asteroid-b612.org/software We are currently using the Unix version. Is anyone else using the program for monitoring online users? We really like how it summarizes all the online users in a table and we can sort by time, speed, or port. We are trying to find out how to modify the usrchk program so it will show only logged in users with a specific domain name (username(a)domainA.com) (but not other users from other domain names such as userB(a)domainB.com that are logged in to the same Total Control chassis) and still be able to disconnect those users either automatically with the script or manually by clicking on the name. We want to give the administrator of domainA access to their own online users, but not see the online users of domainB and so on. Also, users that have a longer username (longer than 10 characters) do not show up as their name in the table output but as "NEW-CALL". We would like to increase it so all usernames are displayed. We would also like the whole username (with @domain.com) to show up and it is trunking the name and deleting the @domain.com. We are not programmers, so any assistance would be greatly appreciated. Also, if anyone knows of other software that can do what we are looking for would be appreciated. Thank you in advance.

1 0

mrtg ethernet traffic & free memory
by PD TC 17 Nov '05

17 Nov '05

hello, We are new to the Total Controls and have been using Portmasters. We have been searching the manuals, the Internet and the maillist archives (through google searches) but have not found the answers for some questions. We are trying to get mrtg information on the ethernet traffic on the HiperARC card and the free memory on the Total Control. We saw a posting previously by Lewis Bergman in which he posted his .cfg information. We have tried implementing it and have been successful at retrieving the number of modems online and the temperature of the Total Control. We are not getting the ethernet traffic nor the free memory to come through. Is there a different OID that we should be using or any other mistake that someone sees in what we are using? (We have made sure that each line does not wrap in the .cfg file itself.) Below is an excerpt from our .cfg file for the free memory and ethernet traffic: #--------------------------------------------------------------- Target[3comTC.priv]: 3:COMMUNITY@X.X.X.X MaxBytes[3comTC.priv]: 1250000 Options[3comTC.priv]: gauge, growright Title[3comTC.priv]: TC1 (HiperARC): Ethernet priv (X.X.X.X) PageTop[3comTC.priv]: <H1>TC1 Traffic Analysis for Ethernet priv (HiperARC X.X.X.X) </H1> <TABLE> <TR><TD>System:</TD><TD>TC1</TD></TR> <TR><TD>Maintainer:</TD><TD>Maintainer</TD></TR> <TR><TD>Interface:</TD><TD>Ethernet Driver (3)</TD></TR> <TR><TD>IP:</TD><TD>No hostname defined for IP address (X.X.X.X)</TD></TR> <TR><TD>Max Speed:</TD> <TD>1250.0 KBytes/s (ethernetCsmacd)</TD></TR> </TABLE> #--------------------------------------------------------------- Target[3comTC.ram]: 1.3.6.1.4.1.429.4.3.1.3.0&1.3.6.1.4.1.429.4.3.1.3.0:COMMUNITY@X.X.X.X MaxBytes[3comTC.ram]: 100000 AbsMax[3comTC.ram]: 262144 Title[3comTC.ram]: TC1 Free memory on HiPerARC (X.X.X.X) PageTop[3comTC.ram]: <h1>TC1 Free memory on HiPerARC (X.X.X.X)</h1> Options[3comTC.ram]: gauge, growright YLegend[3comTC.ram]: Kbytes free ShortLegend[3comTC.ram]: Kbytes free LegendI[3comTC.ram]: sys-mem: LegendO[3comTC.ram]: real-mem: #---------------------------------------------------------------

2 1

3Com TCH1000 only 10$/port for ISP Promotion !!!
by Ms. choi 02 Nov '05

02 Nov '05

1 0