- USR-TC - mailman.xmission.com

RE: [USR-TC] Web Connection problem
by Kirti S. Bajwa 04 Feb '05

04 Feb '05

Adam: I am learning 3COM. So I need your /help/ further. Where are the MTU settings? Kirti -----Original Message----- From: Adam Barnhill [mailto:adam@semo.net] Sent: Thursday, February 03, 2005 5:40 PM To: Discussion relating to the 3Com/US Robotics Total Control modemsystems. Subject: RE: [USR-TC] Web Connection problem That kind of sounds like an MTU problem we had in the past. Is your PPP MTU set at default? I believe that is 1514 -----Original Message----- From: usr-tc-bounces+adam=semo.net(a)mailman.xmission.com [mailto:usr-tc-bounces+adam=semo.net@mailman.xmission.com] On Behalf Of Kirti S. Bajwa Sent: Thursday, February 03, 2005 4:21 PM To: 'Discussion relating to the 3Com/US Robotics Total Control modemsystems.' Subject: [USR-TC] Web Connection problem Hello List: Please /help/ with this strange problem. I am testing a 3COM box. When I dial-in onto 3COM & connect to http://www.tib.com (which is our web site), it connects with no problem. Similarly, I can connect to numerious other web sites. However, when I try connecting www.msn.com or www.riteaid.net, it never connects. There are few other web sites with the same problem. When I try to sign-in into MSN Messenger, same problem. Such connection can not be made. I have spent the last two days on this problem trying to figure out what to do. FYI, I can issue: HiPer> resolve name msn.com and it does resolve the address. Similarly, I can resolve address of 'riteaid.net' and just about any other web site I have tried. I have disabled 'cache' & ncache' on HiPer ARC. I have no idea what else to do. Please /help/ or give suggestions!!\ FYI, I have no such problem with our production system which uses a different type of dial-in modem bank (instead of 3COM). Kirti _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0

RE: [USR-TC] Web Connection problem
by Adam Barnhill 03 Feb '05

03 Feb '05

That kind of sounds like an MTU problem we had in the past. Is your PPP MTU set at default? I believe that is 1514 -----Original Message----- From: usr-tc-bounces+adam=semo.net(a)mailman.xmission.com [mailto:usr-tc-bounces+adam=semo.net@mailman.xmission.com] On Behalf Of Kirti S. Bajwa Sent: Thursday, February 03, 2005 4:21 PM To: 'Discussion relating to the 3Com/US Robotics Total Control modemsystems.' Subject: [USR-TC] Web Connection problem Hello List: Please /help/ with this strange problem. I am testing a 3COM box. When I dial-in onto 3COM & connect to http://www.tib.com (which is our web site), it connects with no problem. Similarly, I can connect to numerious other web sites. However, when I try connecting www.msn.com or www.riteaid.net, it never connects. There are few other web sites with the same problem. When I try to sign-in into MSN Messenger, same problem. Such connection can not be made. I have spent the last two days on this problem trying to figure out what to do. FYI, I can issue: HiPer> resolve name msn.com and it does resolve the address. Similarly, I can resolve address of 'riteaid.net' and just about any other web site I have tried. I have disabled 'cache' & ncache' on HiPer ARC. I have no idea what else to do. Please /help/ or give suggestions!!\ FYI, I have no such problem with our production system which uses a different type of dial-in modem bank (instead of 3COM). Kirti _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

1 0

Web Connection problem
by Kirti S. Bajwa 03 Feb '05

03 Feb '05

Hello List: Please /help/ with this strange problem. I am testing a 3COM box. When I dial-in onto 3COM & connect to http://www.tib.com (which is our web site), it connects with no problem. Similarly, I can connect to numerious other web sites. However, when I try connecting www.msn.com or www.riteaid.net, it never connects. There are few other web sites with the same problem. When I try to sign-in into MSN Messenger, same problem. Such connection can not be made. I have spent the last two days on this problem trying to figure out what to do. FYI, I can issue: HiPer> resolve name msn.com and it does resolve the address. Similarly, I can resolve address of 'riteaid.net' and just about any other web site I have tried. I have disabled 'cache' & ncache' on HiPer ARC. I have no idea what else to do. Please /help/ or give suggestions!!\ FYI, I have no such problem with our production system which uses a different type of dial-in modem bank (instead of 3COM). Kirti

1 0

RE: [USR-TC] 3COM settings
by Kirti S. Bajwa 03 Feb '05

03 Feb '05

Todd: Let me clarify. I want to change the 'timeout' settings. Under TCM, I select (all) the HiPer DSP cards and the under 'Call Control Options' I change the 'Inactivity Time[min]S19] from 10 min to 6 min & issue the 'Set' & save the settings as: Action/commands: software-> save Template T1 to NVRAM Action/commands: software-> save Template T1 to NVRAM Action/commands: software-> software reset Can I do the above without disconnecting current users who are connected to 3COM? Kirti -----Original Message----- From: Todd Bertolozzi [mailto:berto@core.com] Sent: Thursday, February 03, 2005 10:41 AM To: Discussion relating to the 3Com/US Robotics Total Control modemsystems. Subject: Re: [USR-TC] 3COM settings It all really depends on what settings you want to change. I don't believe it really matters if you are configuring the arc, something via TCM, or via console. What do you want to configure/change? Todd ----- Original Message ----- From: "Kirti S. Bajwa" <kbajwa(a)tib.com> To: "'Discussion relating to the 3Com/US Robotics Total Control modemsystems.'" <usr-tc(a)mailman.xmission.com> Sent: Thursday, February 03, 2005 10:33 AM Subject: [USR-TC] 3COM settings > Hello: > > Our 3COM chassis is up and initial tests shows that it is working. Since > there are users logged on to the chassis, how should I make changes to the > settings? Is it possible to make changes via TCM & no user is disconnected? > > Kirti > > _______________________________________________ > USR-TC mailing list > USR-TC(a)mailman.xmission.com > http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc > _______________________________________________ USR-TC mailing list USR-TC(a)mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/usr-tc

2 1

some interface is down
by Sherwin T 03 Feb '05

03 Feb '05

Hi! I've noticed that some of the interface were down. With this, some of our clients were unable to get thru. Does anyone could help me to resolve this problem? Interface Oper Admin Name Status Status slot:5/mod:1 Down Up slot:5/mod:2 Up Up slot:5/mod:3 Down Up slot:5/mod:4 Down Up Thanks in advance.

2 2

Hiper ARC II
by Russell Newberry 02 Feb '05

02 Feb '05

Does anyone have one of these Hiper ARC II NIC/NAC sets available for sale? ========================= Russell Newberry Maxis Technologies, Inc 433 West Wilshire Blvd. Oklahoma City, OK 73116 AOL IM "RUSSELLatMAXIS" e-mail: russell(a)maxistech.net Phone: 1 (800) 79 MAXIS International: 1 (405) 842-3331 Fax: 1 (405) 841-7882 http://www.maxistech.net

1 0

RE: USR-TC Digest, Vol 24, Issue 1
by Egnatoff, Billy 01 Feb '05

01 Feb '05

Kirti, Here are a few examples of filters I have needed. If you have HARM loaded, just cut and paste them into new filters and that way you have them saved. I'll forward you on a complete list of filter commands in a bit. Allows http, SSL and FTP to specified IP address. ICMP as well. #filter 1 IP: 010 ACCEPT tcp-dst-port = 80; 020 ACCEPT tcp-dst-port = 443; 030 ACCEPT tcp-dst-port = 20; 040 ACCEPT tcp-dst-port = 21; 050 REJECT dst-addr != 192.85.133.35; 060 ACCEPT icmp-type = 0; 070 DENY Reverse filter. Note the ! sign. #filter 2 IP: 010 REJECT dst-addr != 10.86.100.53; 020 DENY; Multiple servers / multiple ports using AND/ACCEPT pair. #filter 3 IP: # permit access SERVER1 010 AND tcp-dst-port = 30016; 020 ACCEPT dst-addr = 10.86.100.100/32; # permit access SERVER2 030 AND tcp-dst-port = 30020; 040 ACCEPT dst-addr = 10.86.100.101/32; # permit access SERVER3 050 AND tcp-dst-port = 30024; 060 ACCEPT dst-addr = 10.86.100.102/32; # permit access SERVER4 070 AND tcp-dst-port = 30014; 080 ACCEPT dst-addr = 10.86.100.103/32; # permit access SERVER5 090 AND tcp-dst-port = 30012; 100 ACCEPT dst-addr = 10.86.100.104/32; # permit access SERVER6 110 AND tcp-dst-port = 30018; 120 ACCEPT dst-addr = 10.86.100.105/32; # permit access SERVER7 130 AND tcp-dst-port = 30026; 140 ACCEPT dst-addr = 10.86.100.106/32; 150 AND tcp-dst-port >= 20; 160 ACCEPT tcp-dst-port <= 21; 170 ACCEPT tcp-dst-port = 7; 180 DENY;

2 1

RE: [USR-TC] RE: USR-TC Digest, Vol 23, Issue 10 Inactivity Time -out via Radi us profile.
by Kirti S. Bajwa 01 Feb '05

01 Feb '05

Bill: Your response may be my salvation. First let me explain what I am doing. I have a temporary testbed (a RH 6.2 server) authentication server. I am running freeRADIUS-1.0.1. The authentication protocol is PAP. If the testing goes OK, I plan to setup mySQL database. All user information will be stored in mySQL DB and free RADIUS will use this DB to authenticate. Your method will work for me. It gives me the opportunity to set different time-out for different users. Similarly, I can setup other attributes specific to each user, if I so desire. I have set up the freeRADIUS server but have never setup attributes. If you can send me how you setup the attributes in RADIUS, I maybe able to set freeRadius. Another settings which I may need help with is the proper filters to make TC look like a Firewall. Your help is highly appreciated. Kirti -----Original Message----- From: Egnatoff, Billy [mailto:Bill.Egnatoff@hit.cendant.com] Sent: Tuesday, February 01, 2005 11:39 AM To: 'usr-tc(a)mailman.xmission.com' Subject: [USR-TC] RE: USR-TC Digest, Vol 23, Issue 10 Inactivity Time-out via Radi us profile. Kirti, I configured our Total Controls with a 60 second time-out using a Radius profile. I don't know if you are using an external authentication method, but I though I would share this with all the same. Here is how I have it all configured. It looks tough but it is really simple. All of my callers must authenticate to an LDAP server. They do this via a Radius system. Within the LDAP directory server I created and assigned a mandatory attribute for all user objects called $ATTRIB1. I'll use this for creating groups for users in which I can then apply filters. How it works! Upon successful authentication I configured my Radius system to retrieve from LDAP, the value of $ATTRIB1 for that particular user and then assign the user a Radius_Profile named $ATTRIB1.(same value/name) In these profiles I have Total Control returnable attributes, such as TC_TimeOut, TC_FilterID, TC_IPADDRESSPOOL. These attribute will automatically be sent to the Total Control Chassis and assigned to the user's session. Step by Step: A VIP John Doe dials in and tries to authenticate. Total Control authenticates via Radius. Radius is configured to authenticate from external LDAP and retrieve attribute $x. IF authentication is successful, LDAP returns attribute $x's value. (I.e. VIP, HR, etc) Radius assigns user to profile named VIP Within profile VIP is a list of items to be sent to Total Control for the user's session, including: Time-Out, TC_IPAddressPool, FilterID or whatever you want. There are hundreds of attribute you can return. I know this might be over-kill for what you asked. If not, let me know and I can send you my config if you're interested. Doing a configuration like this make your TC seem like a firewall when used with filters correctly. I am using Funk's radius software and Netscape Directory Server (LDAP). Bill Egnatoff Sr. Systems Engineer, Central Systems Cendant Hotel Information Technology (602) 433-5769-v (602) 433-5760-f Message: 2 Date: Mon, 31 Jan 2005 15:12:49 -0500 From: "Kirti S. Bajwa" <kbajwa(a)tib.com> Subject: [USR-TC] Time-Out Settings To: "'Discussion relating to the 3Com/US Robotics Total Control modem systems.'" <usr-tc(a)mailman.xmission.com> Message-ID: <4B51F7FF1CDFD811A32A0020ED31AFEE1276A6@TESUQUE> Content-Type: text/plain; charset="ISO-8859-1" Hello List: On out 3COM, I have setup ,Inactivity Time [min][S19]' settings to '12' minutes (Under TCM > HiPer DSP Cards > Configure > Call Control Options). However, when I test this feature by dialing-in from my PC into 3COM, the connection remains open for an extended number of minutes. I do not know what the maximum time it remains open but as of this post the connection is up for 40+ minutes with no activity from my PC. Is ther anything wrong I am doing? How can I setup so the users disconnect when they reach the 'Inactivity Time"? Kirti

2 1

RE: USR-TC Digest, Vol 23, Issue 10 Inactivity Time-out via Radi us profile.
by Egnatoff, Billy 01 Feb '05

01 Feb '05

Kirti, I configured our Total Controls with a 60 second time-out using a Radius profile. I don't know if you are using an external authentication method, but I though I would share this with all the same. Here is how I have it all configured. It looks tough but it is really simple. All of my callers must authenticate to an LDAP server. They do this via a Radius system. Within the LDAP directory server I created and assigned a mandatory attribute for all user objects called $ATTRIB1. I'll use this for creating groups for users in which I can then apply filters. How it works! Upon successful authentication I configured my Radius system to retrieve from LDAP, the value of $ATTRIB1 for that particular user and then assign the user a Radius_Profile named $ATTRIB1.(same value/name) In these profiles I have Total Control returnable attributes, such as TC_TimeOut, TC_FilterID, TC_IPADDRESSPOOL. These attribute will automatically be sent to the Total Control Chassis and assigned to the user's session. Step by Step: A VIP John Doe dials in and tries to authenticate. Total Control authenticates via Radius. Radius is configured to authenticate from external LDAP and retrieve attribute $x. IF authentication is successful, LDAP returns attribute $x's value. (I.e. VIP, HR, etc) Radius assigns user to profile named VIP Within profile VIP is a list of items to be sent to Total Control for the user's session, including: Time-Out, TC_IPAddressPool, FilterID or whatever you want. There are hundreds of attribute you can return. I know this might be over-kill for what you asked. If not, let me know and I can send you my config if you're interested. Doing a configuration like this make your TC seem like a firewall when used with filters correctly. I am using Funk's radius software and Netscape Directory Server (LDAP). Bill Egnatoff Sr. Systems Engineer, Central Systems Cendant Hotel Information Technology (602) 433-5769-v (602) 433-5760-f Message: 2 Date: Mon, 31 Jan 2005 15:12:49 -0500 From: "Kirti S. Bajwa" <kbajwa(a)tib.com> Subject: [USR-TC] Time-Out Settings To: "'Discussion relating to the 3Com/US Robotics Total Control modem systems.'" <usr-tc(a)mailman.xmission.com> Message-ID: <4B51F7FF1CDFD811A32A0020ED31AFEE1276A6@TESUQUE> Content-Type: text/plain; charset="ISO-8859-1" Hello List: On out 3COM, I have setup ,Inactivity Time [min][S19]' settings to '12' minutes (Under TCM > HiPer DSP Cards > Configure > Call Control Options). However, when I test this feature by dialing-in from my PC into 3COM, the connection remains open for an extended number of minutes. I do not know what the maximum time it remains open but as of this post the connection is up for 40+ minutes with no activity from my PC. Is ther anything wrong I am doing? How can I setup so the users disconnect when they reach the 'Inactivity Time"? Kirti

1 0

Time-Out Settings
by Kirti S. Bajwa 01 Feb '05

01 Feb '05

Hello List: On out 3COM, I have setup ,Inactivity Time [min][S19]' settings to '12' minutes (Under TCM > HiPer DSP Cards > Configure > Call Control Options). However, when I test this feature by dialing-in from my PC into 3COM, the connection remains open for an extended number of minutes. I do not know what the maximum time it remains open but as of this post the connection is up for 40+ minutes with no activity from my PC. Is ther anything wrong I am doing? How can I setup so the users disconnect when they reach the 'Inactivity Time"? Kirti

2 1