| 45.1. Tunneling proprietary protocols | ||
|---|---|---|
 | Chapter 45. Tunneling proprietary protocols |  |
| 45.1. Tunneling proprietary protocols | ||
|---|---|---|
| | Chapter 45. Tunneling proprietary protocols | |
The Abilis supports two types of virtual tunneling, which can be applied to different level 2 links:
Both virtual tunnels support several operation modes:
Tunnelling Mode
Table 45.1. Tunnelling modes
| Mode | Description | Note |
|---|---|---|
STD | Standard | No out-of-sequence packet reordering! Use
STD only for tunnels through LAN and high
quality WAN. |
EXT | Extended | EXT supports out-of-sequence packet
reordering, extended statistics and diagnostics. Use
EXT for PV or AIPT tunnels through WAN,
when both linked Abilis have a static IP Address. |
EXT-SERVER | Extended Server | Use the combination of EXT-SERVER
and EXT-CLIENT, for PV or AIPT tunnels, when
one side has a dynamic IP address (client) and the other side
has a static address (the server must have a static IP
address). |
EXT-CLIENT | Extended Client | EXT client is also to be used in
PV or AIPT tunnels when
Abilis is placed behind a router doing NAT/PAT |
ART Protocol: “Abilis Redundant Tunneling” sends the same information on two different lines. The receiving Abilis discards the packet which arrives second (out-of sequence). The probability that the same packet is lost on both links equals the product of the original probabilities. Example: two links with 10% failure rate (a very high one!) ends up with 1%, which is normally negligible
![[Tip]](../images/tip.png) | Tip |
|---|---|
It's advisable to use ART ONLY with lines with the same speed. In case of lines with different speeds, the packets are sent with the maximum speed of the slower line. |
Backup over ISDN: in case of failure of the permanent VPN connection, the Abilis PV or AIPT tunnels may be instantaneously switched onto ISDN backup lines.
Link Check: it's a procedure used to detect end-to-end link (or emulated p-link) real functioning, regardless of the lower protocol layer states.
Encryption: it activates the cryptography of the data sent on the virtual VPN and define up to 63 256 bit cryptography key (exist also a default cryptography key that can be used in configuration).
MPX (Multiplexing): this owner protocol allows to share the same link (VPN) for transmission of data and packetized voice (also Link Check, if enabled).
VRED Protocol: Abilis “Voice Redundancy” duplicates VOICE and/or FAX packets by repeating a packet when the subsequent one has to be sent. This method is similar to the redundancy used in SIP for T38 packets. The receiving Abilis discards the packet which arrives second (out-of sequence). The probability that the same packet is lost in two different moments is therefore reduced.
LOG: activates/deactivates logging functionalities of meaningful events of the VPNs. These functionalities can be applied to IP tunnel or Link Level.
Link check allows to automatically manage an eventual “True link backup” (onto ISDN line) in case of failure of the permanent VPN connection. When activating a packet voice or IP tunnel, Abilis checks continuously the link using the parameters below:
LLOGLink Check logging activation/deactivation.
LMPXActivates the multiplexing of DATA,
“Link-Check”, VOICE frames type
[NO: Abilis MPX multiplexing isn't active;
YES: Abilis MPX multiplexing is active only for
the data protocols LAPB and LINK-FR; EXT:
Abilis MPX multiplexing is active for ANY data protocol]. The
default value is YES;
LCEnables/disables the use of the “Link-Check”
protocol, and consequently the transmission of
“Link-check” frames. The link-check protocol is
automatically disabled when
MPX:NO.
![[Note]](../images/note.png) | Note |
|---|---|
With |
LCREnables and selects the cryptography to be applied on the
frames passing through the resource. Cryptography can be
selectively applied to the different traffic types (VOICE and
DATA). [NO: no cryptography is applied;
DATA: cryptography is applied only on DATA
traffic type; VOICE: cryptography is applied
only on VOICE traffic type; ALL: cryptography
is always in use, whatever is the traffic data type].
LCRKEYSelects the key to be used for cryptography operations.
Users can choose either the default key supplied by the system
(LCRKEY:DFT), or one of the
keys defined in the cryptography keys table, in which case the
numeric value (from 1 to 63) corresponding to the desired
LCRKEY has to be specified. If the configured
value refers to a missing LCRKEY it will be
shown inside square brackets (e.g.
CRKEY:[5] means that the key
number 5 isn't present in the table). If the parameter
LCR is set to NO, the value
of LCRKEY is useless.
LT1Maximum time to wait for a Link-Check “probe” acknowledge. If this time elapses without receiving the acknowledge the “probe” is immediately repeated, as a result “not acknowledged probes” are repeated every LT1 milliseconds [200..15000 ms]. The default is 3000;
LT3This is the time interval between a correctly sent and
acknowledged Link-Check “probe” and the next one to
send while the link is regularly working (e.g.
P-LINK state is READY)
[600..45000 ms]. It has relationships with the parameter
LT1: and it has to satisfy the simple rule:
LT3 > LT1 * 2. The default is
9000;
LN2Sets the maximum number of Link-Check “probes” retransmission [1..99]. The default is 3.
| Tip |
|---|---|
Refer to chapter Section 45.5, “Appendix - LN2 parameter” to have more information about LN2 parameter. |
LCOMPSet the compression type to use for an IP resource with subtype AIPT[-BCK], DL[-BCK], ML, BCH. Data Compression is available only under licence.[NO: compression not active, LZO1X: is often the best choice of all, LZO1B: is good with a large blocksize or with very redundant data, LZO1F: s good with a small blocksize or with binary data]
These parameters are in the link section:
[10:42:48] ABILIS_CPX:d p ip-5
RES:Ip-5 - Not Saved (SAVE CONF), Not Refreshed (INIT) ------------------------
- IP over IP (Abilis tunnel) (AIPT) ------------------------------------
New DESCR:
OPSTATE:UP LOG:NO STATE-DETECT:NORMAL
LINK-FRAG:AIPT LINK-FRAGSIZE:1480
IPADD:000.000.000.000 MASK:255.255.255.255 NEIGH:000.000.000.000
REDIS:YES HIDE:NO RP:NONE IPSEC:NO VRRP:NO
NAT:NO DIFFSERV:NO DDNS:NO
OUTBUF:100 OUTQUEUE:FAIR MTU:1500
OUTSPL:NO
INBUF:0 mru:1500 SRCV:NO
- TRFA section ---------------------------------------------------------
TRFA:NO
- Link -----------------------------------------------------------------
LLOG:DS LMPX:YES LC:YES LCOMP:NO LCR:NO
LT1:3000 LT3:9000 LN2:3 LCRKEY:DFT
- IP Tunnel ------------------------------------------------------------
MODE:EXT D-TOS:0-N V-TOS:0-D C-TOS:0-D
MPX:NO RS-BUF:100 V-TOUT:100 V-RED:NONE
PATH:SINGLE LOCPORT:2105 REMPORT:2100 CR:NO CRKEY:DFT
OUT-IP:AUTO
LOCIPADD:R-ID (192.168.000.201) REMIPADD:#The Abilis sends a link-check every LT3 msec. If there's no response, Abilis sends it again every LT1 msec for LN2 times. Using the default values it can take from 9 to 18 seconds to consider the link down.
The default values can be changed using the syntax:
s p pv-<id> par:<value> for a PV tunnel
s p ip-<id> par:<value> for an AIPT tunnel.
| Tip |
|---|---|
LT1 parameter has relationships with the parameter T1: and it has to satisfy the simple rule: T3 > T1 * 2. |
| |  | |
| Chapter 45. Tunneling proprietary protocols |  | 45.2. Configuring Packet Voice tunnels |