Black Box LRA005A-R2 - Manual (Page 74)

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL
74
The Router modem should only operate when someone is attempting to communicate with a remote
host, as when logging in or sending mail to a remote host. If the Router modem dials for no apparent
reason, restrict use of the phone line until the source of the traffic is determined.
Use the dialup volume command to control the Router’s internal modem speaker.
dialup modemX volume [off | low | medium | high]
B.1.3 T URN ON SYSLOG (IP AND IPX NETWORKS )
To determine which host is initiating the majority of calls in an IPX network, turn syslog on. From ipx
mode, enter the command:
tcp syslog on
Syslog messages will be displayed on the Router console, but are not saved (in a file).
To determine which host is initiating the majority of calls in an IP network, check your syslog host’s
syslog file. Each night at approximately midnight, the Router sends a connection report to the syslog
host, if both the Router and host are configured correctly. Refer to the system administrator manual for
your syslog host and the syslog command in the Reference Manual.
To create a useful syslog file, configure the Router with your syslog host IP address, and configure your
syslog host to save Router syslog messages to a file. The syslog host address may be configured at any time
using:
syslog address host_address
Whenever an outgoing call is made, a syslog message similar to the following will be sent to your syslog
host (and/or the console):
routerl modem0 Dialing for 128.66.32.120:4466->10.0.0.1:25
In this example, the host with IP address 128.66.32.120 is attempting to contact the host with IP
address 10.0.0.1. The Router senses that the modem connection is down and begins dialing this host.
The numbers following the colon (:) are the TCP or UDP port numbers. Host 128.66.32.120 is sending a
mail datagram to the mail daemon on port 25 of host 10.0.0.1. The port number of the destination host
usually indicates the type of data being sent. Use all of this information to investigate the reason for the
numerous calls.
The syslog details the amount of time spent on the phone for the current day. For example:
Jan 1 00:00:00 routerl modem0 Connections: in 2 (0:00:04:11)
out S (0:03:58:50)
This report shows that the Router named “router1” made 5 outgoing calls, for a billable total of 3
hours, 58 minutes, and 50 seconds and accepted 2 incoming calls. If there are many outgoing calls, you
may want to restrict the Router’s use of the telephone line. If there are many incoming calls from a
system on a remote network belonging to your company, you may want to restrict the remote Router’s
phone use.