h3h5_in_the_lan.fm
A31003-H3590-S100-7-7620, 06/2012
HiPath 3000/5000 V9, Service documentation
13-47
Nur für den internen Gebrauch HiPath 3000/5000 in the LAN Network
HG 1500 Board
● MAC verification
MAC address filters can limit access from devices within the LAN. If MAC filtering is en-
abled, devices such as these can only set up connections from the LAN via HG 1500 V3.0
whose IP and MAC addresses are explicitly released for this purpose.
13.6.15.3 Alive Monitoring with Keep Alive
The Keep Alive Test is used for HXG3 boards located in different network nodes. This test
sends a ping signal to the other HXG3 boards and then waits for a return signal. If a return sig-
nal is not received from an HXG3 board (for example, because the IP connection is down) then
the board is considered out of service. If this happens during call setup, a message is sent to
the HiPath 3000 to set the call up again.
The connection is automatically cleared down if the connection exists already and the Keep
Alive Test fails. This is especially important for data connections to ensure that the applications
involved can react appropriately and do not stall.
13.6.15.4 Monitoring IP Data Packages with rpcap and Wireshark (Ethereal)
Tracing via the HIP interface
The HIP interface (interface between HiPath 3000 and HG 1500) cannot be traced directly.
However, external connections to the HIP interface via the LAN interfaces (LAN1: emac0 or
LAN2: emac1) can be traced. When the rpcap service is launched, a server port of the HG 1500
opens. This enables direct access to TCP/IP packets by an IP trace tool such as e.g. Wireshark
(Ethereal).
Wireshark is a program for analyzing network communication connections. It records data
packages from HG 1500 and displays them in a table overview.
rpcap (Remote Packet Capture)
The rpcap protocol permits programs such as Wireshark to run on the destination system as a
server, recording data packets and transmitting them to a client. The client processes, analyzes
and archives the data packets.
>
An external firewall should be used if the demands for security on the firewall are
higher (for example, if Internet and VPN traffic is being transferred to Internet gate-
ways at the same time).
To Next Page
Loading...
Need help?
General