*********************************** Commplete Communications Server FAQ *********************************** Multi-Tech Systems 12-18-97 Note: Print this document with WordPad or in DOS, do not use notepad. Common Questions: 1. What is the best type of dial-in T1 to get? 2. Are the components of the Commplete Server HOT SWAPPABLE? 3. Why can't anyone connect above 33.6k to this 56k bank of modems? 4. Our new T1 installation only gives a busy signal to dial-in calls. What could be wrong? 5. When dialing into our T1 line no one can connect. The modems only make a high pitched "whirling" sound until they time out. What could be the problem? 6. RADIUS authentication is not working. How can I troubleshoot RASExpress and RADIUS problems? 7. Some callers say their modems will simply not connect with the K56Flex modems, what can be done? 8. Callers are getting a lot of quick disconnects, how can I minimize these disconnects? 9. How can I determine the firmware revision level in my Commplete Server modems? 10. How do I update the firmware code of the modems in my Commplete Server? 11. How do I update the firmware code of my Commplete Controller Module? 12. I have an older version of RASExpress on my Commplete Server, how do I upgrade it? 13. My Commplete Server is up and running, which files should I back up in case a file gets corrupted in the future? 14. RASExpress shows some lines stuck in INITIALIZING or PPP CLIENT state with no actual users attached, how can I fix this? 15. We have a 10BaseT Controller. When do I know that I need to use a 100BaseT Controller Module and 100BaseT network? 16. My TACACS+ server is not authenticating. What could be the problem? 17. I've got RADIUS or TACACS+ Accounting enabled, but I'm not getting any information sent to my authentication server from RASExpress. How can I be sure that Accounting is working in RASExpress? 18. We are seeing unusually slow throughput on the 56k modems. Is there anything that can be done to improve this? 19. How do I update the firmware code on my T1 card? 20. I have more than one segment (more than one RASCard) in my CommPlete server, how can I use RASExpress Local security without having to enter usernames and passwords into each RASExpress Server repeatedly? ********************************************************************** Answers: 1. Q: What is the best type of dial-in T1 to get? A: Any type of channelized T1 will work, but you really need to be sure you get an "Advanced T1" if you plan on using K56Flex modems and want to provide connect speeds above 33.6k. An "Advanced T1" will almost always use "Immediate" or "Wink" as the FXS signalling type. Most "Ground" or "Loop" start circuits will not allow for PCM (digital) connections. If you have obtained a "Ground" or "Loop" start circuit, make sure there aren't any digital-to-analog conversions between the T1 in the Commplete and the telco's T1 switch. Any digital-to-analog conversions between the Commplete and telco switch will eliminate any chance of getting PCM (connections above 33.6k) connections. If you will be using the rack for dial-in purposes only (such as an ISP site) you will want to get a one-way trunk instead of a two-way trunk. ********************************************************************* 2. Q: Are the components of the Commplete Server HOT SWAPPABLE? A: NO!!! The RASCards are NOT hot-swappable while powered on. You CANNOT remove modem cards or RASCards while the segment is powered on. Each segment (the Commplete has four independent segments) is individually powered by the main power supplies. You can remove the RASCard from its slot while the power supplies are still on, as long as the RASCard is POWERED OFF. You can remove modem cards while the main power supplies are on, as long as the RASCard in the segment that the modems are located in is powered OFF. Therefore, you can remove a RASCard and modems from a segment while other segments continue to run, just be sure to power OFF the RASCard in the segment you are working on. The Controller module (located in the top center of the rack) is hot swappable, but if it is removed from the rack you will disrupt all ethernet traffic in and out of the rack. The ethernet connection to your outside network goes through the Controller to get out of the rack. If you need to reset the Controller and keep the rack running, it is advised that you use a paper clip and reset the Controller through the small hole located on the front of the Controller Module. ********************************************************************** 3. Q: Why can't anyone connect above 33.6k to this 56k bank of modems? A: There are a few reasons this may happen. The most common reason is that the user is calling in from a location that is routed through a telephone company switch circuit that creates an extra digital-to-analog conversion. Remote users are dialing with analog modems on an analog phone circuit. When the call reaches the telco it is translated to digital signals. If the signal gets re-converted back to analog at any point along the way you cannot get a K56Flex connection. Many residential areas are routed through more than one telco switch, which will eliminate any chance of a K56Flex connection. If a remote user is calling out through a PBX phone system (at work), they cannot get a K56Flex connection. PBX phone systems create an extra digital-to-analog conversion within the system. The problem could lie at the Commplete Server end of the phone circuit as well. You need to have a "Wink" or "Immediate" start circuit to get K56Flex connections (see FAQ #1). If a single user can get a K56Flex connection to the Commplete, then the T1 connection between the Commplete Server and the telco T1 switch is fine. If there is a problem between the Commplete Server and the T1 switch, no one (not a single caller) would get a K56Flex connection. Again, it is critical that there are no extra analog conversions along the entire circuit. The basic circuit plan needs to look like this: Commplete <-digital-> T1 Switch <-digital-> Remote CO <-analog-> Caller C-NET has an excellent explanation of how 56k connections work. Visit their 56k connectivity site at: http://www.cnet.com/content/reviews/compare/56kmodems/ss04.html *********************************************************************** 4. Q: Our new T1 installation only gives a busy signal to dial-in calls. What could be wrong? A: If you have just recently had your T1 installed, it may be out-of-service at the telephone company switch. If you have had the Commplete Server powered off for more than a couple of minutes the telco switch may have automatically busied out your circuit. Some T1 switches will automatically put a T1 out-of-service after the T1 has been down for a few minutes. The T1 could be set up incorrectly at the switch, or you may have the parameters set wrong on your T1 card in the Commplete Server. Be sure you get ALL of the settings you need from the telephone company. Never assume the Framing Type, Line Coding, or FXS Signaling. Guessing these values will sometimes appear to work, but most likely will cause trouble in the future. To check your T1 settings, telnet into the Controller of your Commplete Server. Log in as a supervisor and type "T1STATUS xb". "x" is the slot in the rack that the RASCard and T1 card you are checking are located in. Example: To check the T1 for segment #3 type "T1STATUS 9b" You can reprogram the T1 card by typing "T1SETUP xb". (again, "x" is the slot). You should always physically pull the T1 line out of the back of the Commplete Server after you reprogram the T1 card. Wait 60 seconds and then re-insert the T1 line. This can be done without powering down the Commplete Server. This will force the T1 switch to reset the circuit. *********************************************************************** 5. Q: When dialing into our T1 line no one can connect. The modems only make a high pitched "whirling" sound until they time out. What could be the problem? A: This is most likely a T1 configuration problem. The digital signalling is probably not correct between the T1 Switch and the T1 card in your Commplete Server. The first thing you will want to check is the status of your T1 card. Telnet into the Controller of your Commplete Server. Log in as a supervisor and type "T1STATUS xb" ("x" is the slot that the RASCard and T1 are located). You can immediately see the status of your T1. It should be Online. You cannot have Sync Loss or any Alarms. If you do have Sync Loss or Alarms you will need to troubleshoot your T1 configuration. The T1 could be set up incorrectly at the switch, or you may have the parameters set wrong on your T1 card in the Commplete Server. Be sure you get ALL of the settings you need from the telephone company. Never assume the Framing Type, Line Coding, or FXS Signaling. Guessing these values will sometimes appear to work, but most likely will cause trouble in the future. To check your T1 settings, telnet into the Controller of your Commplete Server. Log in as a supervisor and type "T1STATUS xb". "x" is the slot in the rack that the RASCard and T1 card you are checking are located in. Example: To check the T1 for segment #3 type: "T1STATUS 9b" Framing Format:AT&T D4 Super Frame (SF) Line Coding:Alternate Mark Inversion (AMI) FXS Signaling Options:Ground Start Transmit Level:- 0.0dB Receive Level:+2.0db to -7.5db LED Information:Online Firmware Version:1.01p You can reprogram the T1 card by typing "T1SETUP xb". (again, "x" is the slot). You should always physically pull the T1 line out of the back of the Commplete Server after you reprogram the T1 card. Wait 60 seconds and then re-insert the T1 line. This can be done without powering down the Commplete Server. This will force the T1 switch to reset the circuit. *********************************************************************** 6. Q: RADIUS authentication is not working. How can I troubleshoot RASExpress and RADIUS problems? A: If you are dialing into the Commplete Server using a PPP dialer (such as Win95 Dial-up Networking) you will want to try and dial in using a terminal program. Dial into the rack using HyperTerminal (or any other terminal program). Log into the RASExpress Server manually. If you can log in and get to a RASExpress menu the RASExpress Server is communicating with RADIUS. There could be an incorrect setting in RADIUS that is not allowing the remote user to connect via PPP, or possibly PAP authentication is turned off in RADIUS. If dialing from a terminal program works, you will then want to dial in using Win95's dialer. Make one change before dialing in. Change the connection settings so the Terminal Window will appear after connection. You will then dial out using Win95's dialer, but then type the Username and Password manually. Then you would want to choose Option #1 (PPP Session) and then click the Continue button. If this works there is most definately a problem with PAP authentication and RADIUS. If this doesn't work you may have an IP assignment problem. If you are using DHCP IP addressing try setting a static group of IP addresses in the RASExpress Server. Telnet into the RASExpress Server and change the IP assignment type to "Address Pool". Configure the RASExpress pool to use 24 IP's that are available on your network. Make sure that you have RADIUS as the security type on your RASExpress Server. Also be sure the Primary Server IP address is pointing to your RADIUS server. The Secret password must match the password you have configured in the RADIUS server. Also make sure the IP address of the RASExpress Server and the Key are in the RADIUS "Clients" file. The Client Name must be the IP of the RASExpress Server (not the server name). The Key must be the Secret Password that you have set in the RASExpress Server security section (case sensitive). *********************************************************************** 7. Q: Some callers say their modems will simply not connect with the K56Flex modems, what can be done? A: Some modems that were designed prior to 56k technology have a difficult time handshaking past the initial 56k "tone" that the K56Flex modem produces when it picks up the line. The first step is to make sure that you have modem firmware Version 1.01, or above. Once you have version 1.01, or above, loaded into your modems you will see there is a new S registor that can control the V8bis tone (this is the initial tone that is heard when the modems start their handshaking). The new S resistor is S17, and has a default of 3. The three values for S17 is 0,3,or 6. The higher S17 is set to, the softer the V8bis tone. This value may need to be adjusted for optimal performance . *********************************************************************** 8. Q: Callers are getting a lot of quick disconnects, how can I minimize these disconnects? A: You will want to change the initialization string of your MT5634HD8 Commplete modems to: AT&FS0=1S91=16&S1 (unless you have already set a value for S91 that works well with your system) Firmware versions 1.00d (or higher) have &S1 as the default parameter within the modem so you would not need &S1 in the initialization string. You may just wish to update your modem firmware to 1.00d (or current), but you can add &S1 to the initialization string as a short-term fix. The S91=xx parameter may need to be adjusted to your particular site. This is the Transmit Level parameter. The range of values would be from 8 to 25. This value can be best described through example. Example: S91=17 Transmit level of -17db S91=13 Transmit level of -13db We have found that lowering the transmit level will sometimes help reduce disconnects and failed handshakes. Remember, lowering the transmit level means you INCREASE the S91 parameter's value. The &S1 parameter controls the modem's DSR state. RASExpress was designed to work with modems that do not have DSR forced high at all times. By default, the MT5634HD8 modems operate with &S0 set, meaning that DSR is forced. You can change this string by telnetting into the RASCard, choosing "Configuration of RASExpress Server", then choosing Modem Setup. Modify the initialization string for the modem-type you are using for all of your RASExpress lines. Be sure to confirm which modem-type you are using by going into "Communication Setup", "Multitech ISI Setup", and then Edit the Line Information on one of the ISI cards. Then choose any modem and look at the Modem Name. This is the Modem Type you are using. Lastly, you need to be sure the users are actually getting authenticated by RASExpress, RADIUS, or TACACS+. If a user cannot connect to the system at all, have them dial in using a terminal software package (like HyperTerminal) and try to log in manually. *********************************************************************** 9. Q: How can I determine the firmware revision level in my Commplete Server modems? A: Telnet into the Controller Module on the Commplete Server. Log in as a supervisor. At the "A:" prompt type "GETMODEMS". This will display all of your modems and their current state. Locate a modem that does not have any users connected to it. At the "A:" prompt type "ONLINE xx" (substitute a modem number such as '4A' for 'xx'). You will now be in an online session with the modem. Type "ATI3". You will get a response from the modem telling you the model name and firmware version in the modem. Hit twice to break out of online mode and go back to the command prompt. If you do not get any response from the modem hit twice to get back to the command prompt and type "GETMODEMS" to make sure the modem is not in use. Try a different modem if you cannot get a response from a particular modem. The Controller may be incorrectly reporting that a modem is not connected when it actually is. *********************************************************************** 10. Q: How do I update the firmware code of the modems in my Commplete Server? A: Download the latest firmware hex file from the Multi-Tech web site (www.multitech.com) in the Service and Support area. You can also obtaint the file directory from ftp.multitech.com if you know the filename you are looking for. ALWAYS double-check file sizes when ftp'ing firmware files. Since firmware files are ASCII based files it is quite easy to get a partial download of a firmware file which will cause a failed modem flash. After you have the firmware hex file on your local PC you will want to FTP to the Controller Module on the Commplete Server. Log into the Controller as a supervisor. You will need to create space on the MR9600 Controller so you can ftp the firmware file up to the Controller. You will need to delete most, or all, of the event files that are generated on the "B:" drive of the Controller. FTP into the Controller and log in as a supervisor. Change to the "B:" drive. Change to the "B:/MMM/MR.LOG" directory. Delete all of the HR files in this directory. These are just log files of Controller activity. It is easy to delete all of these files if you use an FTP program such as WS_FTP. It is much easier to do this via FTP rather than telnet because the telnet session will only allow you to delete one file at a time. Now that there is plenty of room on the Controller you need to ftp the firmware file. Connect to the Controller and change to the "B:\" directory. FTP the firmware file to this directory (you will want to delete this file after updating the Controller). After the ftp is done, telnet to the controller and compare the filesize on the controller to the filesize on your local computer's hard drive. You must do this via telnet as the ftp session will not show the correct filesize. Do NOT continue unless the file sizes are EXACTLY the same. Now telnet into the controller and log in as a supervisor. You will want to disconnect any users that are attached to the modems you plan on flashing. Reset the modems you wish to flash by typing "RS xx:yy", where xx is the first modem and yy is the last modem in the range of modems you wish to flash. Change to "B:\" if you are not there already. You are now ready to update the controller. Type "UPDATE FIRMWARE.HEX xx:yy", where FIRMWARE.HEX is the actual name of the modem firmware file, xx is the beginning of the range of modems you wish to flash, and yy is the ending modem. Example: I want to flash all modems on modem card #1 in segment #1 with the 'HD8-100C.HEX' firmware file. I type: "UPDATE HD8-100C.HEX 2A:2H" Once the flash procedure has begun you can check its progress by typing "UPDATE" at the command prompt. You can see the progress for each individual modem that you have chosen to flash. After flashing is finished you will get a message telling you that no update is in progress. If you get any "Modem Timed Out" errors during flashing you will want to re-flash those particular modems that timed out. You should reset the modem with "RS xx" and then re-flash the modem with "UPDATE FIRMWARE.HEX xx". Try this a couple times to try and update the modem that is timing out. You can confirm that the modem has been updated by going online with the modem and typing "ATI3" to check the current firmware revision. *********************************************************************** 11. Q: How do I update the firmware code of my Commplete Controller Module? A: Obtain the current Controller firmware code from the Service and Support area of www.multitech.com (or get the file directly from ftp.multitech.com). You will need to create space on the MR9600 Controller so you can ftp the firmware file up to the Controller. You will need to delete most, or all, of the event files that are generated on the "B:" drive of the Controller. FTP into the Controller and log in as a supervisor. Change to the "B:" drive. Change to the "B:/MMM/MR.LOG" directory. Delete all of the HR files in this directory. These are just log files of Controller activity. It is easy to delete all of these files if you use an FTP program such as WS_FTP. It is much easier to do this via FTP rather than telnet because the telnet session will only allow you to delete one file at a time. Now that there is plenty of room on the Controller you need to ftp the firmware file. Connect to the Controller and change to the "B:\" directory. FTP the firmware file to this directory (you will want to delete this file after updating the Controller). After the ftp is done, telnet to the controller and compare the filesize on the controller to the filesize on your local computer's hard drive. You must do this via telnet as the ftp session will not show the correct filesize. Do NOT continue unless the file sizes are EXACTLY the same. Now telnet into the controller and log in as a supervisor. Change to "B:\" if you are not there already. You are now ready to update the controller. Type "UPDATE FIRMWARE.HXC", where FIRMWARE.HXC is the actual name of the firmware file. The update will begin and a completion percentage counter will begin incrementing. After the update has reached 100% you will be prompted to reboot the Controller. Answer "Yes" to this question. When you type "Y" to answer this question your telnet session will immediately be cut off, and you will not actually see the "Y" you typed. Updating the Controller and rebooting it does NOT disconnect users that are currently attached to the Commplete Server. *********************************************************************** 12. Q: I have an older version of RASExpress on my Commplete Server, how do I upgrade it? A: Download the upgrade file from the Multi-Tech FTP site (ftp.multitech.com). You can also get the latest released version of RASExpress from the Service and Support area of www.multitech.com You will need to rename the upgrade file to "UPGRADE.EXE". Next, you need to ftp the file up to the RAS directory on your RASExpress server. RASExpress versions 5.00 and 5.10 require you to use a TFTP program to transfer files. An FTP server was not built into the RASExpress server until version 5.20. You can get a TFTP program at www.shareware.com (search for TFTP). Be sure you put the file in the directory that RAS is currently running in (e.g C:\RAS51). When you ftp into the RASExpress server use "supervisor" as your username and then your RASExpress supervisor password as the password. After you have ftp'ed the file up to the RASCard, you need to telnet into the RASCard. You will now have an additional option on the main menu that says "Upgrade Server". Choose this option. Note: RASExpress Server must reboot to complete this upgrade procedure. Make sure you are doing this at a time when you will disconnect as few users as possible. You will be prompted for the RASExpress supervisor password. After that, you will be asked to provide a "Key". Just enter "1" as the key code. RASExpress Server will now reboot. Wait 2-3 minutes and then telnet into the RASCard. You should now see the updated version showing in the telnet welcome banner. *********************************************************************** 13. Q: My Commplete Server is up and running, which files should I back up in case a file gets corrupted in the future? A: Once you have configured your RASExpress server and have it fully functioning you should back up two files from the RAS directory on the RAS server. One file is the CONFIG.RN file. This file contains all of the configuration information for the RASExpress server. The other file is the SERVER.CFG file. This file contains all local security usernames and passwords. You may want to back this file up on a regular basis if you have a large user base that continues to grow. *********************************************************************** 14. Q: RASExpress shows some lines stuck in INITIALIZING or PPP CLIENT state with no actual users attached, how can I fix this? A: There are two things you need to do to eliminate this problem. First, upgrade your modems to firmware version 1.01, or above, then change the initialization string you are using with your MT5634HD8 modems (this problem does not occur with the MT3334HD8 modems). Change the initialization string you are using to: AT&FS0=1S91=16&S1 (unless you already have S91 set to a value that works well on your system) Firmware versions 1.00d (or higher) have &S1 as the default parameter within the modem so you would not need &S1 in the initialization string. You may just wish to update your modem firmware to 1.01 (or current), but you can add &S1 to the initialization string as a short-term fix. The S91=xx parameter may need to be adjusted to your particular site. This is the Transmit Level parameter. The range of values would be from 8 to 25. This value can be best described through example. Example: S91=17 Transmit level of -17db S91=13 Transmit level of -13db We have found that lowering the transmit level will sometimes help reduce disconnects and failed handshakes. Remember, lowering the transmit level means you INCREASE the S91 parameter's value. The &S1 parameter controls the modem's DSR state. RASExpress was designed to work with modems that do not have DSR forced high at all times. By default, the MT5634HD8 modems operate with &S0 set, meaning that DSR is forced. You can change this string by telnetting into the RASCard, choosing "Configuration of RASExpress Server", then choosing Modem Setup. Modify the initialization string for the modem-type you are using for all of your RASExpress lines. Next, you should upgrade your RASExpress server to the current version. You can see your server's current version by telnetting into the RASCard and looking at the welcome banner. RASExpress version 5.21b has some timing modifications that help to prevent lines from getting stuck in INITIALIZING or PPP CLIENT (with no actual user connected) states. See FAQ #12 for information on updating your RASExpress Server. *********************************************************************** 15. Q: We have a 10BaseT Controller. When do I know that I need to use a 100BaseT Controller Module and 100BaseT network? A: Tests have shown that a 100BaseT Controller greatly improves throughput when you have 2 or more segments in the Commplete populated with RASCards. *********************************************************************** 16. Q: My TACACS+ server is not authenticating. What could be the problem? A: Make sure that TACACS+ is set as the Security Type in RASExpress. Also make sure that TACACS+ Encryption is Enabled and the IP address of the Primary Server is pointed towards your TACACS+ server. If you are dialing into the Commplete Server using a PPP dialer (such as Win95 Dial-up Networking) you will want to try and dial in using a terminal program. Dial into the rack using HyperTerminal (or any other terminal program). Log into the RASExpress Server manually. If you can log in and get to a RASExpress menu the RASExpress Server is communicating with TACACS+. There could be an incorrect setting in TACACS+ that is not allowing the remote user to connect via PPP, or possibly PAP authentication is turned off in TACACS+. If dialing from a terminal program works, you will then want to dial in using Win95's dialer. Make one change before dialing in. Change the connection settings so the Terminal Window will appear after connection. You will then dial out using Win95's dialer, but then type the Username and Password manually. Then you would want to choose Option #1 (PPP Session) and then click the Continue button. If this works there is most definately a problem with PAP authentication and TACACS+. If this doesn't work you may have an IP assignment problem. If you are using DHCP IP addressing try setting a static group of IP addresses in the RASExpress Server. Telnet into the RASExpress Server and change the IP assignment type to "Address Pool". Configure the RASExpress pool to use 24 IP's that are available on your network. There is an older version of TACACS+ that may not support PAP authentication. Current versions of TACACS+ do support PAP authentication. *********************************************************************** 17. Q: I've got RADIUS or TACACS+ Accounting enabled, but I'm not getting any information sent to my authentication server from RASExpress. How can I be sure that Accounting is working in RASExpress? A: You will want to look closely at the CONFIG.RN file that is located in the C:\RASxx directory on the RASExpress Server. FTP into the RASExpress Server and log in as "supervisor" with the password being your RASExpress supervisor password. FTP the CONFIG.RN file down to your local PC. Open the CONFIG.RN file with a text editor (DOS Edit, Notepad, etc). Search for the word "Accounting". Make sure that "Accounting = Enabled" is set in the RADIUS or TACACS+ section of CONFIG.RN. If it is disabled, edit the CONFIG.RN file directly and change the word "disabled" to "enabled". If you did need to make a change to CONFIG.RN you will now need to FTP the CONFIG.RN file back up to the RASExpress Server. You can FTP the file directly on top of the existing CONFIG.RN file on the RASExpress Server without having to delete it. You do not need to reboot the RASExpress Server to see if the change took effect. *********************************************************************** 18. Q: We are seeing unusually slow throughput on the 56k modems. Is there anything that can be done to improve this? A: If you have 2 or more segments populated and operational in your Commplete Server you may need to use the 100BaseT Controller Module. You can test this by turning off all but one of your segments and testing throughput after dialing in. If the throughput is improved you should consider getting a 100BaseT Controller and attach it to a 100BaseT network. You should also check your modem's firmware revision. There was a major throughput improvement with the 1.00d version of firmware for the MT5634HD8 modems. See FAQ #9 and #10 for instructions on checking and updating modem firmware. *********************************************************************** 19. Q: How do I update the firmware code on my T1 card? A: This should only be done if Technical Support at Multi-Tech has informed you that this is necessary for your site. A failed T1 flash may not be recoverable without getting a DSP chip on the T1 card replaced, and your Commplete Server will not be able to answer calls from the T1. If a T1 update fails, contact Multi-Tech Support to have a replacement chip shipped to you immediately. If you have been instructed to update the T1 card on your Commplete Server you need to follow these steps precisely: 1. FTP to the Controller Module and transfer the T1 firmware file up to the Controller (any directory on the Controller is fine). 2. Telnet to the Controller, log in as a supervisor and change to the directory containing the T1 firmware file. 3. You will now issue a reset command that will disconnect all users that are dialed into the T1. To issue the T1 reset command: Type: "RS 1b" (or 5b, 9b, 13b for segments 2-4). 4. Immediately after performing the reset you need to issue the flash command: To upgrade ONLY firmware Type: "UPDATE FIRMWARE.HXT 1b" To upgrade bootcode and firmware Type "UPDATE -BOOT FIRMWARE.HXT 1B" Use the corrent firmware filename and the correct segment id number (1b, 5b, 9b, or 13b) 5. Progress can be monitored by watching the Percentage Completed counter. Once the Percentage reaches 100 the update is done. IMPORTANT: If the flash fails at any time (you will get a timeout error) you should immediately repeat steps 3-5 before powering off the system. 6. After the flash has completed, power off the RASCard and turn it back on. The update is now done. Telnet into the Commplete Controller and check to see if the firmware update worked by typing "T1STATUS 1b" and noting the firmware version that is reported. *********************************************************************** 20. Q: I have more than one segment (more than one RASCard) in my CommPlete server, how can I use RASExpress Local security without having to enter usernames and passwords into each RASExpress Server repeatedly? A: After creating the new users on one of the RASExpress segments, you can ftp into that RASExpress Server and download the SERVER.CFG file to your local PC. You would then ftp the SERVER.CFG file up to all of the other RASExpress Servers individually. You do not need to delete the SERVER.CFG from the target RASExpress Server before uploading the updated file. The new SERVER.CFG will overwrite the old one. When ftp'ing into a RASExpress Server you log in with "supervisor" as the username and your RASExpress supervisor password. ***********************************************************************