Document Outline

• Summary Table of Contents
• Table of Contents
• List of Figures
• List of Tables
• About this guide
  • Audience
  • Structure
  • Precautions
    • Safety when working with electricity
    • General observations
  • Typographical conventions used in this document
    • General conventions
• Chapter 1 General information
  • OnSite Model 2800 Series overview
    • OnSite 2800 Series detailed description
      • OnSite 2800 Series model codes
      • Model code extensions
      • Ports descriptions
  • Applications overview
    • Branch-Office virtual private network over Frame Relay service
    • Corporate multi-function virtual private network
• Chapter 2 Hardware installation
  • Planning the installation
    • Installation checklist
    • Site log
    • Network information
      • Network Diagram
    • IP related information
    • Software tools
    • Power source
    • Location and mounting requirements
  • Installing the VPN router
    • Mounting the VPN router
    • Connecting cables
      • a. V.35 or X.21 serial WAN cable (see section “Installing the serial WAN cable” on page 31) or
      • b. T1/E1 WAN cable (see section “Installing the serial WAN cable” on page 31)
      • Installing the Ethernet cable
      • Installing the serial WAN cable
      • Connecting to external power source
• Chapter 3 Getting started with the OnSite Managed VPN Router
  • Introduction
  • 1. Configure IP address
    • Power connection and default configuration
    • Connect with the serial interface
    • Login
    • Changing the IP address
  • 2. Connect the OnSite VPN Router to the network
  • 3. Load configuration
• Chapter 4 Serial port configuration
  • Introduction
  • Serial port configuration task list
    • Disabling an interface
    • Enabling an interface
    • Configuring the encapsulation for Frame Relay
    • Enter Frame Relay mode
    • Configuring the LMI type
    • Configuring the keep-alive interval
    • Entering Frame Relay PVC configuration mode
    • Configuring the PVC encapsulation type
    • Binding the Frame Relay PVC to IP interface
    • Enabling a Frame Relay PVC
    • Disabling a Frame Relay PVC
    • Displaying serial port information
    • Displaying Frame Relay information
    • Integrated service access
• Chapter 5 T1/E1 port configuration
  • Introduction
  • T1/E1 port configuration task list
    • Enable/Disable T1/E1 port
    • Configuring T1/E1 port-type
    • Configuring T1/E1 clock-mode
    • Configuring T1/E1 line-code
    • Configuring T1/E1 framing
    • Configuring T1/E1 line-build-out (T1 only)
    • Configuring T1/E1 used-connector (E1 only)
    • Configuring T1/E1 application mode
    • Configuring T1/E1 LOS threshold
    • Configuring T1/E1 encapsulation
    • Create a Channel-Group
    • Configuring Channel-Group Timeslots
    • Configuring Channel-Group Encapsulation
    • Entering HDLC Configuration Mode
    • Configuring HDLC CRC-Type
    • Configuring HDLC Encapsulation
    • T1/E1 Configuration Examples
      • Example 1: Frame Relay without a channel-group
      • Example 2: Framerelay with a channel-group
      • Example 3: PPP without a channel-group
      • Example 4: PPP with a channel-group
• Chapter 6 VPN configuration
  • Introduction
    • Authentication
    • Encryption
    • Transport and tunnel modes
  • VPN configuration task list
    • Creating an IPsec transformation profile
    • Creating an IPsec policy profile
    • Creating/modifying an outgoing ACL profile for IPsec
    • Configuration of an IP interface and the IP router for IPsec
    • Displaying IPsec configuration information
    • Debugging IPsec
  • Sample configurations
    • IPsec tunnel, DES encryption
      • OnSite configuration
      • Cisco router configuration
    • IPsec tunnel, AES encryption at 256 bit key length, AH authentication with HMAC- SHA1-96
      • OnSite configuration
      • Cisco router configuration
    • IPsec tunnel, 3DES encryption at 192 bit key length, ESP authentication with HMAC-MD5-96
      • OnSite configuration
      • Cisco router configuration
• Chapter 7 Access control list configuration
  • Introduction
  • About access control lists
    • What access lists do
    • Why you should configure access lists
    • When to configure access lists
    • Features of access control lists
  • Access control list configuration task list
    • Mapping out the goals of the access control list
    • Creating an access control list profile and enter configuration mode
    • Adding a filter rule to the current access control list profile
    • Adding an ICMP filter rule to the current access control list profile
    • Adding a TCP, UDP or SCTP filter rule to the current access control list profile
    • Binding and unbinding an access control list profile to an IP interface
    • Displaying an access control list profile
    • Debugging an access control list profile
  • Examples
    • Denying a specific subnet
• Chapter 8 Link scheduler configuration
  • Introduction
  • Configuring access control lists
  • Configuring quality of service (QoS)
    • Applying scheduling at the bottleneck
    • Using traffic classes
    • Introduction to Scheduling
      • Priority
      • Weighted fair queuing (WFQ)
      • Shaping
      • Burst tolerant shaping or wfq
      • Hierarchy
  • Quick references
    • Setting the modem rate
    • Command cross reference
  • Link scheduler configuration task list
    • Defining the access control list profile
      • Packet classification
      • Creating an access control list
    • Creating a service policy profile
    • Specifying the handling of traffic-classes
      • Defining fair queuing weight
      • Defining the bit-rate
      • Defining absolute priority
      • Defining the maximum queue length
      • Specifying the type-of-service (TOS) field
      • Specifying the precedence field
      • Specifying differentiated services codepoint (DSCP) marking
      • Specifying layer 2 marking
      • Defining random early detection
      • Discarding Excess Load
    • Devoting the service policy profile to an interface
    • Displaying link arbitration status
    • Displaying link scheduling profile information
    • Enable statistics gathering
• Chapter 9 LEDs status and monitoring
  • Status LEDs
• Chapter 10 Contacting Patton for assistance
  • Introduction
  • Contact information
    • Patton Support Headquarters in the USA
    • Alternate Patton support for Europe, Middle Ease, and Africa (EMEA)
  • Warranty Service and Returned Merchandise Authorizations (RMAs)
    • Warranty coverage
      • Out-of-warranty service
      • Returns for credit
      • Return for credit policy
    • RMA numbers
      • Shipping instructions
• Appendix A Compliance information
  • Compliance
    • EMC
    • Safety
    • PSTN Regulatory
  • Radio and TV Interference (FCC Part 15)
  • CE Declaration of Conformity
  • Authorized European Representative
  • FCC Part 68 (ACTA) Statement (Model 2803 only)
  • Industry Canada Notice (Model 2803 only)
• Appendix B Specifications
  • Ethernet interfaces
  • Sync serial interface
  • T1/E1 interface (Model 2803 only)
  • PPP support
  • IP services
  • Management
  • Operating environment
    • Operating temperature
    • Operating humidity
  • System
  • Dimensions
  • Power supply
    • Internal AC version
    • 12VDC version with External AC Power Adapter (Models 2802, 2821, 2835)
    • 5VDC Version with External Power Adapter (Model 2805)
• Appendix C Cabling
  • Introduction
  • Serial console
  • Ethernet 10Base-T and 100Base-T
• Appendix D Port pin-outs
  • Introduction
  • Console port, RJ-45, EIA-561 (RS-232)
  • Ethernet 10Base-T and 100Base-T port
  • Sync serial port
    • V.35 serial port
    • X.21 serial port
• Appendix E OnSite 2800 Series factory configuration
  • Introduction
• Appendix F Installation checklist
  • Introduction