|
Q: What command allows the primary link to activate when it is functioning again?
backup auto-restore (Example: config-ppp 1)#backup auto-restore)
Q: Can backups be scheduled to function at only certain times of day?
Yes.
Q: Can one backup module back up more than one interface?
Yes, a single backup module can back up multiple interfaces. Backup priority determines which one will be backed up if more than one primary interface goes down.
Q: Can the routers be DHCP servers and assign addresses to other devices?
Yes.
Q: Is it possible to set static DHCP addresses via the router? What are the commands to configure static entries?
No, but you can set it to a sufficiently high value. Inside of the DHCP Pool utilize the "lease" command and set the time to 47,710 days, which is about 136 years. This is fairly permanent.
!
ip dhcp-server pool "test"
netbios-node-type h-node
lease 49710
!
Q: DHCP relay support?
Yes, and box can function as a DHCP server as well.
Q: Can the router function as a DNS server?
Yes.
» Return to top
Q: How many T1 or E1 interfaces can I connect into the ProCurve Secure Router 7000dl Series products?
The 7102dl will physically connect to four T1 or E1 maximum, and the 7203dl will physically connect to 12 T1 or E1 maximum. All ports can be enabled at the same time, in a "no shutdown" state, and functioning. See the "Performance" and "Network Configuration" FAQ sections for further comment.
Q: Is Does the ProCurve Secure Router 7000dl Series support SHDSL Module?
The SHDSL interface module will be available at a later date. We left software code in place to support this.
Q: Does the ProCurve Secure Router 7000dl Series support ADSL Backup Module?
An ADSL "primary" module can be used as backup. However, we are investigating offering ADSL as a "backup" option.
Q: Does the single port serial card really support 10 Mbps?
Yes.
Q: Do we need to buy expensive proprietary Compact flash like we must from other vendors?
No. We have tested this with many vendors. Buy what you want. There should be no need to purchase a $50 item for $500.
Q: Can we edit the Compact flash in a PC?
Yes, the configuration file can be edited via a text editor. You can also store other files on it.
Q: What are the supported Compact flash sizes?
We currently support 64Mbytes to 1Gbyte.
» Return to top
Q: When connecting any of the dual port T1 or E1 interfaces, such as the 2xT1 or 2xE1, how many different clock sources can I provide?
A single clocking source may be used for these dual port interface modules. When selecting "line" for one port, the other follows and derives clock from it as "through" port one. When selecting "internal" for one port the other follows and uses an internal clock also. The following describes it further:
- T1 or E1 port 1 "line" / T1 or E1 port 2 "through"
- T1 or E1 port 1 "through" / T1 or E1 port 2 "line"
- T1 or E1 port 1 "internal" / T1 or E1 port 2 "internal"
Q: Do TDM group numbers need to match the group numbers defined at the other end of the circuit?
No, those do not seem to be communicated between the devices connected to the T1 line.
Q: When configuring a backup line there is an option for "randomize-timers" to randomize dial timers to minimize resource contention. Why is this necessary?
There is a need to randomize timers so that if the primary interface becomes unavailable, both sides do not place a call at the same time. This is referred to as "call collision or contention". This is the "busy" signal. For example: you and I are in a mobile phone call conversation within the building here and yet both near our desks. Because of poor coverage the call drops. You and I attempt to use our desk phones and pick up the handset, go off hook, at the same time. You dial be for me and if it were not for our multi-line phones you would get a busy signal. The same happens in the world of backup links. One side has to be allowed to win if multiple attempts are made.
Q: What does the interface bandwidth command do?
On an interface (e.g. Ethernet 0/1) the bandwidth value is passed to upper-layer protocols (e.g. routing protocols) and is used in cost calculations.
Unlike the QoS priority bandwidth command used for physical interfaces, the bandwidth command does not affect traffic forwarding.
Q: What is fastcache?
The first packet from a traffic stream is process switched. Subsequent packets from the same stream are then hardware switched through the fast-cache for increased performance.
» Return to top
Q: Do the routers cache routes in hardware or is all routing done by the CPU?
See discussion on fastcache.
Q: What is the difference between physical port connectivity and actual maximum throughput?
The 7102dl will physically connect to four T1/E1 maximum, and the 7203dl will physically connect to 12 T1/E1 maximum. All ports can be enabled at the same time, in a "no shutdown" state, and functioning.
The performance for the 7102dl is designed to support up to 4 T1/E1 connections at wire speed with full services enabled, and the 7203dl is designed to support up to eight T1/E1 connections at wire speed with full services enabled.
Q: Does the ProCurve Secure Router 7000dl Series support DecNet, AppleTalk, IPX, SDLC, SNA or other non-IP based protocols?
Yes. The ProCurve Secure Router 7000dl Series only routes IP but will bridge all other protocols.
Q: PPPoA support?
Yes.
Q: Does the ProCurve Secure Router 7000dl Series support XRRP/VRRP?
In a typical topology, the switch that is downstream from the router supports XRRP or VRRP, so it is not necessary for the router to support the capability for client gateway redundancy.
Therefore at initial release, no; however, we will be adding VRRP capability to the router in a future free software updates.
Q: Does the ProCurve Secure Router 7000dl Series support L2TP?
We offer a IPSec VPN client for client access. We are examining the possibility of supporting L2TP & PPTP in a future free software update
A pure IP Sec client, such as the ProCurve VPN Client, will allow remote access even though the customer requires NT domain login and authentication. The client laptop will use the "cached credentials" once they are authenticated on the local network prior to use of a VPN. This is actually the preferred method since the laptop is authenticated within the company that they must have physical access to. Cached credentials are also used when the laptop is powered up without attachment to the network.
» Return to top
Q: Does the ProCurve Secure Router 7000dl Series support PIM (SM or DM)?
We will support PIM SM in a future free software update.
Q: Does the ProCurve Secure Router 7000dl Series support IS-IS routing?
IS-IS is primarily used by service providers and typically not in enterprise networks.
Q: Do we need the VPN card to do GRE?
No, but GRE does not encrypt the data as IPSec does so even though you can enable and use GRE without the VPN card, if you choose to do this the data will be unencrypted.
Q: Does GRE allow for protocols other than IP?
GRE in the ProCurve Secure Router 7000dl Series supports only IP protocol.
Q: Is there a ProCurve VPN client for the Pocket PC?
Not at first release. If there is sufficient demand, we can look at this.
Q: Priority Bandwidth: Will router allocate bandwidth and hold it even if it is not needed?
No bandwidth is allocated. Traffic is given priority up to the specified bandwidth.
Q: Does the ProCurve Secure Router 7000dl Series support CAR (Committed Access Rate)?
No. Typically the service provider controls "burst" traffic, not the router. For example, this is common in Frame Relay environments where a service provider will give a customer 128k of a committed information rate (CIR) that bursts up to 1Mbps.
Q: Does the ProCurve Secure Router 7000dl Series support GTS (Generic Traffic Shaping) or FRTS (Frame Relay Traffic Shaping)?
In environments (Frame Relay) where the WAN has a CIR and a burstable traffic rate, the router supports FRTS to shape traffic to adhere to the CIR limits. In PPP environments, customers have full access to the complete bandwidth; queuing mechanisms such as Priority Queuing and Weighted Fair Queuing are used.
» Return to top
Q: Does the ProCurve Secure Router 7000dl Series support Traffic compression?
No, but we are examining standards based header compression for VoIP applications, and this will likely be a future free software update.
Q: Does the router support "established" session parameter?
Yes, the "established" parameter can be used to make decisions on the TCP RST or ACK flags. When set they know it is an "established" session.
We filter established sessions by default in the same way.
Q: Does the router support "established" session parameter?
Yes, the "established" parameter can be used to make decisions on the TCP RST or ACK flags. When set they know it is an "established" session.
We filter established sessions by default in the same way.
Q: Are access policy sessions cached and processed in hardware?
Firewall sessions are cached in software, while packet flows are fast-switched in hardware.
Q: What is the complete list of all traffic blocked by the firewall in default settings?
No traffic of any kind is allowed, either to or through the SR when 'ip firewall' command is applied and an access policy is applied to an interface. Traffic must be specified to be allowed.
Q: Are conversations cached by the firewall and subsequent packets processed in hardware or does the CPU process firewall commands?
Firewall sessions are cached in software, while packet flows are fast-switched in hardware.
» Return to top
Q: Do the ProCurve Secure Router 7000dl Series routers come with a stateful firewall or do I need to buy additional software?
The stateful firewall is included free with the software that is preinstalled in the routers.
Q: Do the ProCurve Secure Router 7000dl Series routers need special software for VPN capability?
No. The base software will allow for VPN once the optional ProCurve SR 7100/7200 IPSec Module is purchased and installed.
Client-to-site (remote accesss) VPN capability is handled with the ProCurve VPN Client connection to and termination at the ProCurve router with an IPSec module.
Q: Is there a command to disable STP?
Not globally, but it can be disabled on a per interface basis (spanning-tree bpdufilter enable' and 'spanning-tree edgeport')
Q: What command(s) direct debug information to a syslog server?
'logging forwarding on'
'logging forwarding receiver-ip <syslog ip address>'
optional: 'logging forwarding priority-level
<fatal|error|warning|info|notice|smdr>
Q: Do the routers have extended ping / traceroute capabilities?
Yes.
Q: Is there a show tech command?
Yes.
Q: Is there a short command for undebug all?
Yes, u a is all that is needed.
» Return to top
Q: What are the differences between enable levels?
Although the levels are shown when executing 'enable ?' There is no support for levels 1-7 at this time. This may be added later.
Q: Is there a command to disable page breaks in long displays?
Router# term length 0
Q: Is there a command to suppress event logging to telnet sessions?
'no events'
Q: Will there be a setup command to walk users through the basic setup?
Not planned.
Q: Can I use my modem backup module as a dial in console port?
Yes.
- ProCurveSR7000dl#conf t
- ProCurveSR7000dl#int modem x/x
- ProCurveSR7000dl# dialin
Q: How is the user name for line access used?
Routers can be configured to use local username database or RADIUS user database. ('login local-userlist' or 'login authentication <aaa list name>')
» Return to top
Q: Is the expected telnet password behavior documented? How is it useful to assign different passwords for telnet sessions?
Yes. Can assign a unique password to a single telnet line for administrative access.
Q: Is EAP authentication implemented?
No.
Q: SSL?
Yes.
Q: Is there a Telnet- inactivity timer?
Yes.
Q: Why use multiple transform sets for a crypto map?
Interoperability. During negotiation, the IPSec Initiator will purpose all of its transform sets, the Responder will choose from its list of transform sets for a match.
Q: Is the ProCurve VPN Client required for client-router connections?
Preferred, but not required. Any native IPSec client should work.
Q: What are the commands to enable the Web interface?
Add an Ethernet interface with an IP address.
Activate the interface (no shutdown).
At the (config)# prompt,
Enable HTTP connection (ip http server).
Add a username and password for logging in to the Web interface (username username password password).
Save the configuration (write memory).
» Return to top
|
