HiPath 4000 V5 LAN issue

[ccmjgb]

Hi all,

The HiPath 4000 referred to in thread965-1715744 had to have the UNIXware reinstalled and I'm now going through the addition of the LAN component. I've added the customer LAN settings, route for the gateway (metric 2 - unless it should be higher), and added the entire subnet from where I'll be accessing the Assistant as well as the host IP of the PC I'll be using... but it seems I'm missing something... I've restarted UNIX after each change and can ping to the Assistant (customer port IP) and can pipng from the HiPath out to my pc, but when I try to open a browser - the wheel just spins - any input is appreciated!!

Thank you in advance

ccmjgb
- Job 38:36

 

[sbcsu]

I have found that for example if you add 192.168.0.0 into the firewall as 'net' then it does not always work.
What does work is 192.168.xxx.0 that is just leaving the last octet as zero will work.
Or if it is just a few PC's that have to have access then add them in as individual IP addresses in the firewall

 

[ccmjgb]

got it...

so here are the settings in the Assistant now:

LAN Card
192.168.2.20
255.255.255.0
192.168.2.0


Hosts
server 192.168.2.20


DNS
-empty-


Routes
default 192.168.2.254
metric 2


Alias hosts
-empty-


Firewall
10.10.10.0 w/ H-LAN, w/ ADP, w/ PPP all checked


I did a trace route from this site to the other site (were PBX is located) and
went through 5 hops - question: do all these subnets need to be added in the firewall? and another question: under the Hosts tab, is it normal to have only the server appear - shouldn't there be another entry in there?

Thank you!!

 

[ccmjgb]

... also ...

I tried removing the net entry of 10.10.10.0 and had only the ip of the PC in there 10.10.10.237 but this didn't work - pings did not go through... then I went in there to adjust the settings as they are posted above with the entire net in there and removed the individual ip address of 10.10.10.237 and response to pings resumed ...

 

[ccmjgb]

OK... so the page came up... I had the broadcast domain address incorrect - once I corrected the broadcast address to the settings listed above, the web page came up... now to check things out

 

[Iamnothere]

For a simple user logging in to Assistant using a username and password, the Firewall table needs no manual configuration. Your client IP Address is automatically added to the Firewall table upon successful logon.
The Firewall table is needed for extraneous devices which may need to access the 4K, such as the 4000 Manager. The Manager's IP Address must be added to every managed 4K Assistant, otherwise the Manager will not be able to successfully download a copy of Assistants database on a scheduled basis (automatically). If many different administrators access Assistant from various PCs, then the Firewall table may fill with IP Addresses from the same network. In that case, perhaps it would be wise to delete all of the individual IP Address entries, and add the entire network , e.g. 133.33.33.0/255.255.255.0. A network entry in the Firewall table will not effect a user's ability to logon - in other words, the user must continue to provide the proper userID and password, but the individual IP Address will not be added to the Firewall table if that network is already added. Thus, the Firewall table does not "fill up". The Firewall table is used for administrative access ONLY. It has nothing to do with Switching/Signaling.