Title and Copyright Information
 
About This Manual
Audience
New and Changed Features
Organization
Related Documents
Reader's Comments
Conventions
 
1    Overview to Network Administration
1.1    Introduction to Network Administration: Connections
1.2    Administrative Methods
1.2.1    SysMan Menu
1.2.1.1    Quick Setup
1.2.1.2    Network Setup Wizard
1.2.1.3    Command-Line Integration
1.2.2    Compaq Insight Manager
1.2.3    Other Interfaces
1.2.4    Manually Editing Configuration Files
1.2.5    Installation and Configuration Cloning
 
2    Basic Network Connections
2.1    Network Environment
2.1.1    Network Interface
2.1.1.1    Multiple Interfaces in a Subnet
2.1.1.2    NetRAIN
2.1.1.3    Link Aggregation
2.1.2    Routing
2.2    Preparing for the Configuration
2.2.1    Information for Interfaces and Daemons
2.2.1.1    All Network Interfaces
2.2.1.2    Token Ring Interface
2.2.1.3    NetRAIN Interface
2.2.1.4    LAG Interface
2.2.1.5    rwhod Daemon
2.2.1.6    routed Daemon
2.2.1.7    Gateways File
2.2.1.8    gated Daemon
2.2.1.9    IP Router
2.2.2    Information for Network Files
2.2.2.1    Static Routes File (/etc/routes)
2.2.2.2    Hosts File (/etc/hosts)
2.2.2.3    Hosts Equivalencies File (/etc/hosts.equiv)
2.2.2.4    Networks File (/etc/networks)
2.3    Configuring the Network Components
2.3.1    Configuring Network Interfaces
2.3.2    Configuring the rwhod Daemon
2.3.3    Configuring the routed Daemon
2.3.4    Configuring the gated Daemon
2.3.5    Configuring the System as an IP Router
2.3.6    Configuring the Static Routes File
2.3.7    Configuring the hosts File
2.3.8    Configuring the hosts.equiv File
2.3.9    Configuring the networks File
2.3.10    Configuring IP Aliases
2.4    Managing Multiple Network Interfaces
2.4.1    Configuring NetRAIN
2.4.2    Monitoring NetRAIN Activity
2.4.3    Configuring a Link Aggregation Group
2.5    Enabling Access Filtering on an Interface
2.6    Displaying and Modifying the FDDI Parameters
2.7    Managing Token Ring Source Routing
2.8    Displaying and Modifying the Token Ring IP MTU Size
2.9    Managing Network Quality of Service
2.9.1    Managing the Traffic Control Subsystem
2.9.2    Managing RSVP
2.9.2.1    Starting and Stopping rsvpd
2.9.2.2    Adding and Deleting Network Interfaces
2.9.2.3    Displaying RSVP Session Information
 
3    Internet Protocol Version 6
3.1    Introduction to IPv6
3.2    Terms
3.3    IPv6 Addressing
3.3.1    Address Text Representation
3.3.2    Types of Addresses
3.3.2.1    Unicast Address
3.3.2.2    Anycast Address
3.3.2.3    Multicast Address
3.3.3    Address Prefixes
3.3.4    Address Autoconfiguration
3.3.5    Address Resolution
3.3.6    Address Assignment
3.3.6.1    Aggregatable Global Unicast Address Format
3.3.6.2    Aggregatable Testing Address Format
3.4    Deploying IPv6 Using Tunnels
3.4.1    Automatic Tunnels
3.4.2    6to4 Tunnels
3.4.3    Configured Tunnels
3.5    IPv6 Environment
3.6    Planning IPv6
3.6.1    Verifying IPv6 Support in the Kernel
3.6.2    Preparing for the Configuration
3.6.2.1    DNS/BIND
3.6.2.2    6to4 Tunnel
3.6.2.3    Configured Tunnel
3.6.2.4    Router
3.6.2.5    Manual Routes
3.6.3    Configuring Systems in Sample IPv6 Configurations
3.6.3.1    Simple Host-to-Host Configuration
3.6.3.2    Host-to-Host with Router Configuration
3.6.3.3    IPv6 Network-to-IPv6 Network with Router Configuration
3.6.3.4    Multiple IPv6 Networks and Multiple Routers Configuration
3.6.3.5    Host-to-Host over IPv4 Configured Tunnel Configuration
3.6.3.6    Host-to-Router over IPv4 Configured Tunnel Configuration
3.6.3.7    IPv6 Network-to-IPv6 Network over IPv4 Configured Tunnel Configuration
3.6.3.8    6to4 Tunnel Configuration
3.7    Configuring IPv6 on Your System
3.7.1    Configuring an IPv6 Host
3.7.2    Configuring an IPv6 Router
3.8    Postconfiguration Tasks
3.8.1    Connecting to the 6bone Network
3.8.2    Initializing a New Interface for IPv6
3.8.2.1    Setting the IPv6 Interface Identifier
3.8.3    Removing IPv6 from an Interface
3.8.4    Creating a Configured Tunnel
3.8.5    Adding an Address to an Interface
3.8.6    Deleting an Address from an Interface
3.8.7    Adding or Deleting a Default Router
3.8.8    Manually Adding a Route for an On-Link Prefix
3.8.9    Configuring Routing Support in the Kernel
3.8.10    Editing the Run-Time Configuration File
3.8.11    Editing the Router Configuration File
3.8.12    Tuning the Kernel Subsystems
3.9    IPv6 Daemon Log Files
 
4    Internet Protocol Security
4.1    IPsec Environment
4.1.1    Host-to-Host Configuration
4.1.2    Secure Gateway-to-Secure Gateway Configuration
4.1.3    Host-to-Secure Gateway Configuration
4.1.4    Restrictions
4.2    Secure Connections
4.2.1    IPsec Protocols
4.3    Security Association
4.4    Key Exchange
4.4.1    Manual Keying
4.4.2    IKE
4.4.2.1    Phase 1 Exchanges
4.4.2.2    Phase 2 Exchanges
4.5    Certificates
4.5.1    Certificate Encoding
4.5.2    Guidelines for Using Certificates
4.6    Planning IPsec
4.6.1    Verifying That the IPsec Subset is Installed
4.6.2    Taking Inventory of the System's Network Traffic
4.6.3    Implementing IPsec on a TruCluster
4.6.4    Following the IPsec Implementation Guidelines
4.6.5    Reducing the IPsec Impact on System Performance
4.6.6    Preparing for the Configuration
4.6.6.1    IPsec Connection Worksheet
4.6.6.2    IPsec Proposal Worksheet
4.6.6.3    IPsec Custom Proposal Worksheet
4.6.6.4    IKE Proposal Worksheet
4.6.6.5    IKE Custom Proposal Worksheet
4.6.6.6    IKE Authentication Worksheet
4.6.6.7    Public-Key Certificate Worksheet
4.6.6.8    IKE Options Worksheet
4.6.6.9    Manual Keys Worksheet
4.6.7    Configuring Systems in Sample IPsec Configurations
4.6.7.1    Configuring a Host-to-Host Connection
4.6.7.2    Configuring a Secure Gateway-to-Secure Gateway Connection
4.6.7.3    Configuring a Host-to-Secure Gateway Connection
4.6.7.4    Configuring a Connection for Specific Traffic
4.7    Configuring IPsec
4.7.1    Configuring a Host
4.7.2    Configuring a Secure Gateway
4.8    Postconfiguration Tasks
4.8.1    Managing the IPsec Daemon
4.8.2    Monitoring Security Associations
4.8.3    Monitoring IPsec
 
5    Mobile IPv6
5.1    Mobile IPv6 History
5.2    Mobile IPv6 Environment
5.3    Mobile IPv6 Operation
5.4    Planning Mobile IPv6
5.4.1    Verifying IPv6 Support in the Kernel
5.4.2    Verifying Mobile IPv6 Support in the Kernel
5.5    Configuring Mobile IPv6
5.5.1    Configuring a Correspondent Node
5.5.2    Configuring a Correspondent Node and Router
5.6    Monitoring the Mobile IPv6 Environment
5.6.1    Using tcpdump
5.6.2    Using netstat
5.6.3    IPv6 Daemon Log Files
 
6    Asynchronous Transfer Mode
6.1    ATM Environment
6.1.1    Classical IP Environment
6.1.2    LAN Emulation Environment
6.1.3    IP Switching
6.2    Planning ATM
6.2.1    Verifying That the ATM Subsets Are Installed
6.2.2    Configuring ATM into the Kernel
6.2.3    Preparing for the Configuration
6.2.3.1    Adapter Information
6.2.3.2    Classical IP Information
6.2.3.3    LAN Emulation Information
6.2.3.4    IP Switching Information
6.3    Configuring ATM
6.3.1    Configuring an ATM Adapter
6.3.2    Configuring Classical IP
6.3.2.1    Creating PVC Mappings on Your ATM Switch
6.3.2.2    Adding Servers to the atmhosts File
6.3.2.3    Adding Hosts to the hosts Database
6.3.2.4    Running the ATM Configuration Application
6.3.2.5    Configuring the Classical IP Logical Interface
6.3.2.6    Adding Static Routes (SVC only)
6.3.2.7    Verifying the PVC Configuration (PVCs only)
6.3.3    Configuring LAN Emulation
6.3.3.1    Adding Servers to the atmhosts File
6.3.3.2    Adding Hosts to the hosts Database
6.3.3.3    Running the ATM Configuration Application
6.3.3.4    Configuring the LAN Emulation Logical Interfaces
6.3.4    Configuring IP Switching
6.3.4.1    Adding IP Addresses to the hosts File
6.3.4.2    Running the ATM Configuration Application
6.3.4.3    Configuring the IP Switching Logical Interfaces
6.3.4.4    Adding Routes
6.4    Managing the ATM Environment
6.4.1    ATM Networking and Displaying Information About ATM Networks
6.4.2    Signaling Module
6.4.3    Classical IP Environment
6.4.4    LAN Emulation Environment
6.4.4.1    Managing LAN Emulation Clients
6.4.4.2    Displaying the LE-ARP Table
6.4.5    IP Switching
6.4.6    ATM Subsystem Messages
 
7    Dynamic Host Configuration Protocol
7.1    DHCP Environment
7.1.1    DHCP Parameter Assignment
7.1.2    DHCP and Security
7.2    Planning DHCP
7.2.1    Verifying Installation of the DHCP Software
7.2.2    Preparing for the Configuration
7.2.2.1    Server/Security Parameters
7.2.2.2    Information for Basic DHCP Parameters
7.3    Configuring a DHCP Server
7.3.1    Configuring Server/Security Parameters
7.3.2    Configuring IP Ranges
7.3.3    Configuring Host Name Lists
7.3.4    Configuring a Subnetwork
7.3.5    Configuring a DHCP Client Node
7.3.6    Setting Group Parameters
7.3.7    Starting the DHCP Server (joind)
7.4    Managing DHCP
7.4.1    Starting the DHCP Client
7.4.2    Monitoring DHCP Client Configuration
7.4.3    Mapping Client IP Addresses Permanently
7.4.4    Restricting Access to the DHCP Server
7.4.5    Configuring a BOOTP Client
7.4.6    Disabling DHCP Address Assignment
 
8    Point-to-Point Connections
8.1    Serial Line Internet Protocol (SLIP)
8.1.1    SLIP Environment
8.1.2    Planning SLIP
8.1.2.1    Verifying the Hardware
8.1.2.2    Preparing for the Configuration
8.1.3    Configuring SLIP
8.1.3.1    Configuring a Dial-In System
8.1.3.2    Configuring a Dial-Out System
8.1.4    Terminating a SLIP Dial-Out Connection
8.2    Point-to-Point Protocol (PPP)
8.2.1    PPP Environment
8.2.1.1    Chat Scripts
8.2.1.2    PPP Options
8.2.1.3    Authentication
8.2.2    Planning PPP
8.2.2.1    Verifying the Hardware
8.2.2.2    Verifying PPP Support in the Kernel
8.2.2.3    Preparing for Configuration
8.2.2.3.1    Basic Connection Options
8.2.2.3.2    Authentication Options
8.2.3    Configuring a Dial-Out System with PPP
8.2.3.1    Setting Up Initial Communications for a Dial-Out System
8.2.3.2    Creating Options Files for a Dial-Out System
8.2.3.3    Creating Secrets Files
8.2.3.3.1    Creating Entries in the PAP Secrets File
8.2.3.3.2    Creating Entries in the CHAP Secrets File
8.2.3.4    Setting Up Message Logging
8.2.3.5    Initiating a PPP Connection
8.2.3.6    Connecting to a Microsoft Windows Remote Access Server
8.2.3.6.1    Configuring a RAS Server
8.2.3.6.2    Solving Microsoft CHAP Authentication Problems
8.2.4    Configuring a Dial-In System with PPP
8.2.4.1    Setting Up Initial Communications for a Dial-In System
8.2.4.2    Creating Options Files for a Dial-In System
8.2.5    Monitoring and Terminating PPP Connections
8.3    Guidelines for Using Modems
8.3.1    Using the Correct Modem Cables
8.3.2    Configuring a System for Dial-In Access
8.3.2.1    Setting Up a Modem for Dial-In Access
8.3.3    Configuring Your System for Dial-Out Access
8.3.3.1    Creating Entries in the /etc/remote File
 
9    Local Area Transport Connections
9.1    LAT Environment
9.1.1    Types of LAT Connections
9.1.2    Controlling Access in a LAT Network
9.1.3    Specifying Passwords for Remote Services
9.1.4    Load Balancing
9.2    Planning LAT
9.2.1    Verifying That the LAT Subset Is Installed
9.2.2    Verifying DLB Support in the Kernel
9.2.3    Preparing for the Configuration
9.3    Configuring LAT
9.3.1    Configuring LAT with latsetup
9.3.2    Starting and Stopping LAT
9.3.3    Creating a LAT Startup File
9.3.4    Customizing the inittab File
9.3.5    Running LAT Over Specific Network Adapters
9.4    Configuring LAT Connections
9.4.1    Setting Up Printers
9.4.1.1    Setting Up the Printer on a Terminal Server
9.4.1.2    Testing the Port Configuration
9.4.1.3    Setting Up a Service Node for the Printer
9.4.1.4    Setting Up the Print Spooler on the Service Node
9.4.1.5    Testing the Printer
9.4.2    Setting Up Host-Initiated Connections
9.4.2.1    Setting Up the System for Host-Initiated Connections
9.4.2.2    Program Interface
9.4.3    Setting Up Outgoing Connections
9.4.3.1    Setting Up the System for Outgoing Connections
9.4.3.2    Program Interface
9.4.4    Setting Up the LAT/Telnet Gateway
9.4.5    Creating Dedicated or Optional Services
9.4.6    Providing a Dedicated tty Device on a Terminal
9.4.6.1    Setting Up a Dedicated tty Device
9.4.6.2    Removing a Dedicated tty Device
 
10    Solving Network and Network Services Problems
10.1    Using the Diagnostic Map
10.2    Getting Started
10.3    Solving IPv4 Network Problems
10.4    Solving IPv6 Network Problems
10.4.1    Solving IPv6 Host Problems
10.4.2    Solving IPv6 Router Problems
10.4.3    Solving Mobile IPv6 Problems
10.5    Solving IPsec Problems
10.6    Solving ATM Problems
10.6.1    Solving CLIP Problems
10.6.2    Solving LANE Problems
10.6.3    Solving IP Switching Problems
10.7    Solving DHCP Problems
10.8    Solving SLIP Problems
10.9    Solving PPP Problems
10.10    Solving LAT Problems
 
11    Using the Problem Solving Tools
11.1    Displaying Network Interface Information
11.2    Detecting Network Interface Failures
11.2.1    Configuring and Deconfiguring NIFF
11.2.2    Viewing NIFF Events
11.3    Testing Access to Internet Network Hosts
11.4    Displaying Network Statistics
11.5    Displaying and Modifying the Internet (IPv4) to MAC Address Translation Tables
11.6    Displaying a Datagrams's Route to a Network Host
11.7    Displaying Headers of Packets on the Network
11.8    Viewing the Error Log File
11.9    Viewing the syslogd Daemon Message Files
 
12    Reporting Network Problems
12.1    Gathering General Information
12.2    Gathering Hardware Architecture Information
12.3    Gathering Software Architecture Information
 
A    Monitoring the Network Interfaces
A.1    Monitoring the Ethernet Interface
A.2    Monitoring the FDDI Interface
A.2.1    FDDI Counters
A.2.2    FDDI Status
A.2.3    FDDI Characteristics
A.3    Monitoring the Token Ring Interface
A.3.1    Token Ring Counters
A.3.2    Token Ring and Host Information
 
B    IPsec Messages
B.1    Normal Status Messages
B.2    Start-up Error Messages
B.2.1    General Start-Up Error Messages
B.2.2    Manual Key Connection Error Messages
B.3    IKE Negotiation Messages
B.3.1    Phase 1 Error Messages
B.3.2    Phase 2 Error Messages
B.4    ipsecd Daemon Messages
 
Glossary
 
Examples
2-1    Creating One NetRAIN Set
2-2    Creating Two NetRAIN Sets
2-3    Sample Link Aggregation Statements
3-1    Sample IPv6 Host Configuration Variables
3-2    Sample IPv6 Router Configuration Variables
3-3    Sample ip6rtrd.conf File
9-1    Sample /etc/latstartup.conf File
 
Figures
1-1    SysMan Menu
1-2    Quick Setup
1-3    Network Setup Wizard
1-4    Compaq Management Agents
2-1    Sample Single Interface Configuration
2-2    Sample Multiple Interfaces in a Subnet
2-3    Sample NetRAIN Configuration
2-4    Sample Link Aggregation Configuration
2-5    Interface and Daemon Worksheet
2-6    Network Files Worksheet
3-1    Creating an Interface ID from a MAC Address
3-2    Simple Host-to-Host Configuration
3-3    Host-to-Host with Router Configuration
3-4    IPv6 Network-to-IPv6 Network with Router Configuration
3-5    Multiple IPv6 Networks and Multiple Routers Configuration
3-6    Host-to-Host over Configured Tunnel Configuration
3-7    Host-to-Router over Tunnel Configuration
3-8    IPv6 Network-to-IPv6 Network over Configured Tunnel Configuration
3-9    6to4 Configuration
3-10    IPv6 Configuration Worksheet 1
3-11    IPv6 Configuration Worksheet 2
4-1    Sample Host-to-Host Configuration
4-2    Sample Secure Gateway-to-Secure Gateway Configuration
4-3    Sample Host-to-Secure Gateway Configuration
4-4    Typical IPv4 Packet (unprotected)
4-5    Typical IPv6 Packet (unprotected)
4-6    AH Transport Mode and Tunnel Mode Packets (IPv4)
4-7    AH Transport Mode and Tunnel Mode Packets (IPv6)
4-8    ESP Transport Mode and Tunnel Mode Packets (IPv4)
4-9    ESP Transport Mode and Tunnel Mode Packets (IPv6)
4-10    SAs Created for One Protocol
4-11    SAs Created for Two Protocols
4-12    Worksheet Flow Diagram
4-13    IPsec Connection Worksheet
4-14    IPsec Proposal Worksheet
4-15    IPsec Custom Proposal Worksheet
4-16    IKE Proposal Worksheet
4-17    IKE Custom Proposal Worksheet
4-18    IKE Authentication Worksheet
4-19    IPsec Public-Key Certificate Worksheet
4-20    IKE Options Worksheet
4-21    IPsec Manual Keys Worksheet
5-1    Mobile IPv6 Communications
6-1    Classical IP over an ATM Network
6-2    Emulated LAN over an ATM Network
6-3    IP Switching over an ATM Network
6-4    ATM Setup Worksheet
6-5    ATM Classical IP Worksheet
6-6    ATM LAN Emulation Worksheet
6-7    ATM IP Switching Worksheet
7-1    DHCP Configuration (acme-net)
7-2    DHCP Server/Security Parameters Worksheet
7-3    Basic DHCP Parameters Worksheet
8-1    Sample Simple SLIP Configuration
8-2    SLIP Configuration with Gateway System
8-3    SLIP Setup Worksheet
8-4    Simple PPP Configurations
8-5    Network PPP Configuration
8-6    PPP Setup Worksheet
8-7    PPP Authentication Worksheet
9-1    Sample LAT Network Configuration
9-2    LAT Setup Worksheet
 
Tables
2-1    Comparison of Multiple Interface Configurations
2-2    Options to the fddi_config Command
2-3    Options to the srconfig Command
3-1    Well-Known Multicast Addresses
3-2    IPv6 Address Types and Prefixes
4-1    SysMan Default Connections
4-2    Certificate Binary Data Encoding Methods
6-1    ATM Kernel Options
8-1    Mandatory startslip Subcommands
8-2    Optional startslip Subcommands
8-3    slhosts File Options
8-4    Modem Commands for Dial-Out Access
8-5    Modem Commands for Dial-In Access
9-1    LAT Parameters
10-1    Problem Solving Starting Points
11-1    Options to the ping Command
11-2    Options to the netstat Command
11-3    Options to the traceroute Command
 
Index