Home

G.SHDSL.bis Router User Manual

1. 3 If to create or delete WAN services click the Click here to Add Delete WAN Services link _15 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Quick Setup VPI VCI Setting Edit VPI VCI here or Click here to Add or Delete WAN Services Service VPI VCI Apply Bridge Router Interface Name aiso o s Caeo J Reset pred ric1483 1 3 81 Reset fc1483 1 3 2 3 System Pages Click on System menu the following options appear CF Status System cave config Authentication Firmware Update Backup Restore Restart CF Configuration i Advanced S Quick Setup The System menu contains options including Firmware Update Backup Restore and Restart Router Save configuration and Authentication They will be introduced in the following sections 3 2 3 1 Save config To save your current configuration to Flash ROM 1 From the System menu click on Save configuration The following page is displayed Save configuration Confirm Save Please contirm that you wish to save the configuration There wil be a delay whe saving 85 configuration information is written ta fash 2 Click on Save to save your current configuration in the device After a short time the configuration is saved and the following confirmation message is displayed Saved information model to file flashfs im conf 16 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual 3 2 3 2 Authentication This option allows you to administ
2. AtendLan G SHDSL bis Router User Manual XL GRT402S XL GRT404S XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Chapter 1 Introduction 1 1 Overview G SHDSL bis router takes advantage of the latest G SHDSL bis technology Extended Rate Bonded SHDSL unfolding unprecedented possibilities for symmetric transmission Router came with multi pair bonded higher packet transport allow symmetric data rates up to 5 69 Mbps 11 38Mbps or 22 76Mbps over 2 wire 4 wire or 8 wire of ordinary telephone lines respectively at the same reach range Router is a suitable solution enables enterprise users to enjoy distance high bandwidth and symmetric data transmission hungry 1 2 Features Rate and Reach Improvements Symmetric transmission rate is up to 5 69 Mbps 11 38Mbps or 22 6Mbps over 2 wire 4 wire or 8 wire telephone line respectively The distance can reach as far as 12 000 ft CO and CPE Mode selectable Provide a point to point connectivity 2 wire 4 wire 8 wire M Pair Mode selectable Offer a flexible rate options Easy Management Support both web based GUI and CLl based management Backward Compatible to G SHDSL G 991 2 1 3 Application co G SHDSL G SHDSL bis IP DSLAM XL GRT402S 4048 Internet A Connect to IP DSLAM co CPE ay XL GRT402S 404S XL GRT402S 404S Q D S LAN LAN B LAN Extension D XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual 1 4 Specific
3. V4 Route 1 Click on the Create new Ip V4 Route hyperlink The following page is displayed _43 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Create Ip V4Route Name Value Destinetion 0 0 0 0 Gatewey Netmask 0 0 0 0 Cost 1 Interface none Advertise false Cance 2 Complete the Create IP v4 Route form in order to configure the route 3 When you have typed the details click on OK The Edit Routes page is displayed The table now contains details of the route that you have just created Edit DHCP server list Use this section to edit existing DHCP server addresses present in the DHCP relay s list DHCP server IP address Delete 192 168 1 S i app Reset 3 2 5 3 Bridge From the Advanced menu click on Bridge and then the Bridge page is displayed This page lists the following information about bridge 1 Global bridge configuration 2 VLAN configuration 3 Spanning tree configuration Global Bridge Configuration Following figure displays the global configuration settings for the bridge _44 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Global Bridge Configuration PARAMETER VALUE Bridge Mac Address U 1 53 0 0 1 Number of Ports 5 Bridge Type TRANSPARENT Unicast Leerning HYBRID Mullivast Learning Hh Contig F vid Status true Tagging EMABLED AcceptableFramelypeCty ENABLED IngressFilteringCtg ENABLED a00 Filter Aqejin seconds Get valua DISABLED
4. loop 1 to 4 6 FG Connected to ground wire 2 2 DSL Connectors Description DSL Connectors on back of the unit 2 RJ 11 sockets DSL 1 2 3 4 RJ 11 uses a 6P4C connector and cable The cable has 4 wires and we are using them for 2 pairs of DSL connection Pin 1 Not used Pin 2 Tip for DSL pair 2 or 4 Pin 3 Tip for DSL pair 1 or 3 Pin 4 Ring for DSL pair 1 or 3 Pin 5 Ring for DSL pair 2 or 4 Pin 6 Not used 2 3 Restore Factory Defaults Reboot Button Press the reset button to reset the ROUTER to its factory default settings default configuration file will be uploaded If you forget your password or cannot access the device you will need to reset the device to the default settings The procedure shows as follows 1 Power off the Modem 2 Press the reset default button 3 Power on the Modem and watch the Front Panel of the Modem 4 While the CPE LED LED blinks very quickly please release the button If you press the button to long recall won t work this is to prevent the user might hold the button all the time _6 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual 5 Now the factory is recalled then you have to save current configuration again to overwrite your previous user configuration This is so called one time recall 2 4 Hardware Connection 1 Connect the supplied RJ11 cable to the port marked DSL at the back of the SHDSL router Connect the other end of the cable to y
5. moving the subnet offering a different range of addresses on the subnet or altering option configuration parameters offered to DHCP clients on this subnet Parameters for this subnet Edit the definition of the DHCP subnet here If you do not wish to specify the subnet value and subnet mask by hand you may instead select an IP interface using the Get subnet from IP interface field The subnet will track the IP address and subnet mast belonging to the chosen IP interface Subnet value 192 lliss lh Io Subnet mask 255 M25 255 o Get subnet from IP interface iplan o Maximum lease time 86400 seconds Default lease time 43200 seconds IP addresses to be available on this subnet You need to make sure that the start and end addresses offered in this range are within the subnet you defined above Alternatively you may check the Use a default range box to assign a suitable default IP address poo on this subnet Start of address range 192 168 1 2 End of address range 192 168 li 21 Use a default range DNS server option information Enter the addresses of Primary and Secondary ONS servers to be provided to DHCP clients on this subnet You may instead alloy DHCP server to specify its own IP address by clicking on the Use local host address as DNS server checkbox Primary DNS server address o o 0 jo Secondary DNS server address o Ip fa Jo Use local host address as DNS server Default gateway option information Us
6. pvel fc 1483 0 CLI Edili Q Delete Q Create a new semice Q Creating a WAN service 1 Click on Create a new service A page is displayed containing a list of WAN service options 2 Select an option and then click on Configure You need to add detailed configuration information about the WAN service that you are creating WAN connection create service Please select the type of service you wish to create ATM RFC 1483 routed RFC 1483 bridged PPPoA routed PPPoA bridged IPoA routed PPPoE routed Ethernet Ethernet routed Ethernet bridged PPPoE over Ethernet Bridge routed 3 Click on EPE The WAN connections page is displayed The table now contains details of the service that you have just created WAN connection RFC 1483 routed Description VPI a CI 35 Encapsulation method LLC SNAP ov Ilse DHCP O WAN IP address CI Enable NAT on this interface Editing a WAN service 1 Click on the Edit link for a specific service The WAN connection edit page is displayed ae pa XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Edit connection PppoeUp Edit Service Edit PPPoE Edit Atm Channel Edit Service Options Name Value Creator Factory Defaults Description PPPOE WAN uplink Atm Protocol pppoE v Change Reset 2 Change the values for the existing service If you want to carry out advanced editing click on the links at the t
7. remote host e Max Activity Interval type the maximum interval time in milliseconds between the use of secondary port sessions f Enable Session Chaining select Allow or Block depending on whether you want to allow multi level TCP session chaining g Enable UDP Session Chaining select Allow or Block depending on whether you want to allow multi level UDP and TCP session chaining You must set Enable Session Chaining to Allow if you want this to work h Binary Address Replacement select Allow or Block depending on whether you want to use binary address replacement on an existing trigger i Address Translation Type specify what type of address replacement is set ona trigger You must set Binary Address Replacement to Allow if you want this to work 3 Once you have configured the trigger click on Apply The Firewall Trigger Configuration page is displayed containing details of the trigger that you have just configured 4 Each trigger displayed in the Firewall Trigger Configuration page has a Delete hyperlink assigned to it To delete a trigger click on this link then at the confirmation page click on the Delete button The Firewall Trigger Configuration page is displayed and details of the deleted trigger have been removed There are two hyperlinks on the page a To add a new trigger click on New Trigger b To display the Security Interface Configuration page click on Return to Interface List Configuring Intrusion Det
8. will be given to the host with the specified MAC address b Type in the MAC address and the maximum lease time default is 86400 seconds seconds 26 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual 3 Click on OK The DHCP Server page is displayed and details of your new fixed host are displayed under the sub heading Existing DHCP fixed IP MAC mappings To edit a fixed mapping click on the IP address MAC address or max lease time type a new entry and click Apply To delete a fixed mapping check the Delete box for a specific mapping and click Apply 3 2 4 4 DHCP Relay This option allows you to e enable disable DHCP relay e add DHCP servers to the DHCP relay list e configure delete server entries on the DHCP relay list Click on DHCP relay from the Configuration menu The following page is displayed DHCP Relay This page allows you to enter a list of DHCP server IP addresses that the relay will forward DHCP packets to You may also enable and disable the DACP relay from here and choose which IP interfaces the relay should operate on The DHCP relay is currently disabied You may not enable the DHCP relay because the DHCP server is already enabled and some nterface is configured for DHCP server as well as for DHCP relay DHCP relay interfaces Use this section to edit the list of IP interfaces the DHCP relay should listen on There are currently no IP interfac2s configured so the DHCP relay will li
9. 8 21s This page shows system information including MAC adsdress Firmware version Transceiver information LAN IP address and subnet mask MAC address and UP Time 3 2 1 2 Physical Port This option allows you to configure the ports available on your Router depending on the type of image that you are going to boot Configuring ports 1 From the Status menu click on Port Configuration The physical ports available on your device are displayed ane Physical Ports system Information Physical Port Port Type Connected Routing Table ia lat x Metwork Interfaces e kl Event Log Ethl ethernet X CF System Eth2 ethernet X CF Configuration Eth ethernet X Cy Advanced Eth4 ethernet v 3 Quick Setup 2 Click on Shdsl The Shdsl Port Configuration page is displayed XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Shdsl Port Configuration View advanced attributes Basic Port Attributes Name Value Connected false Link Status HandShake Link Uptime 00 00 00 Active Wires U Current Tx Rate 0 Current Annex A Number Of Repeaters 0 Tx Cell 357 Rx Cell Loop Attenuation USLI SNR Margin DSL1 ES DSLI SES DSLI CRC DSLI LOSWS DSL1 UAS DSLI 1247 Loop Attenuation DSL2 SNR Margin DSL2 ES DSL2 SES DSL CRC DSW LOSWS DSL2 UAS DSO O o O O O aA nN de y Loop Attenuation DSL3 SNR Margin DSL3 ES DSL3 SES DSL3 CRC DSL3 LOSWS DSL3 UAS DSL3 Loop Attenuation D
10. I 0 Rx VCI 35 Tx VCI 35 Rx packets 0 Tx packets 249 Rx bad packets O Tx bad packets 101 RFC 1483 parameters Encapsulation LicBrdged Refresh Click Configure WAN connections to configure WAN connections referring to the WAN connections section on Setup pages 14 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual 3 2 1 5 Event Log Click on Event Log the following page is displayed as follows Event log This page shows recent events from your router Showi il t most recent events last times are since last reboot or real time if available Time Event 00 00 17 im Changed iplan IP address to 192 168 1 1 Clear these entries Select events to view Select a log v This page displays a table containing all configuration errors experienced by your Router during a current session 3 types of logs can be selected via select a log drop down list Select events to view Syslog messages All Event Shows all events occurred Config errors Shows error messages regarding configuration s which the system DOES NOT allow to change Syslog Messages Shows all messages regarding system actions other then Config errors 3 2 2 Quick Setup page The Quick Setup page allow user to configure VPI VCI in this device The procedure to set VPI VCI is shown as follows 1 Enter one service s VPI and VCI on the fields repetitively 2 Click on Apply to submit your setting or Reset to clear your setting
11. IP address text box 2 Click on Apply The address is displayed in the Edit DHCP server list section Add new DHCP server Use this section to edd a new DHCP server to the DHCP relaw s list New DHCP server IP address Apply Copyright c 2003 GlobespanvVirata Inc Terms and conditions w Editing deleting entries in the DHCP relay list 1 To edit an entry click on an IP address and type a new entry then click on Apply 2 To delete an entry check the Delete box for a specific IP address and then click on Apply 3 2 4 5 DNS Client This option allows you to e create a list of server addresses This enables you to retrieve a domain name for a given IP address e create a domain search list DNS client uses this list when a user asks for the IP address list for an incomplete domain name From the Configuration menu click on DNS client The following page is displayed DNS client DNS servers Add Domain search order Add Configuring DNS servers 1 Type the IP address of the unknown domain name in the DNS servers text box 2 Click Add The IP address appears in the DNS servers table You can add a maximum of three server IP addresses Each IP address entry has a Delete button associated with it Click on Delete to remove an IP address from this list Configuring DNS search domains 1 Type a search string in the Domain search order text box 2 Click Add The search string is displayed in the Domain se
12. Information Ethi Port Configuration Physical Port Routing Table Network Interfaces View advanced attributes Q Event Log Cf System Basic Port Attributes CF Configuration Name Value Cf Advanced Connected false 8 Quick Setup Link Speed 100000 Note that the Reset Defaults option will not take effect until you save configuration and reboot The page displays basic port attributes for the Ethernet port on your Router 8 You can view or carry out advanced configuration for your Ethernet port attributes For instance Click View advanced atiributes on Eth1t Port Configuration page and then The Advanced Ethit Port Configuration page is displayed Status Advanced Ethi Port Configuration System Information Physical Port Routing Table Network Interfaces Return to basic attribute list O Event Log Cf System Advanced Port Attributes Cf Configuration Name Value Cf Advanced Connected false 8 Quick Setup Link Speed 100000 In Octets 0 In Unicast Pkts 0 In Errors 0 In NUcast Pkts 0 In Discards 0 Out Octets 0 Out Unicast Pkts 0 Out Errors 0 Out NUcast Pkts 0 Out Discards 259 Admin Status u vy 9 Set the Ethernet port as enabled or disabled via Admin Status drop down list and then click on Apply to update the advanced configuration or Reset to revert back to the default advanced configuration settings Click on the Return to basic attribute list to return to the Eth Port Configuration page 3 2 1 3 Routing Table Ro
13. L4 High Speed Rx Port false High Speed Tx Port false Hw VPBreakout false Hw WRibits b Hw WCIBits 10 Discard Stats Ox20772daD 4 In the Unit Id drop down menu vou can set the device as CO or CPE and then click on Apply to submit your setting 11 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Advanced Port Attributes Name Unit Id Value Wire Mode TE ei 5 If to set ROUTER s Wire Pair mode Click on Wire Pair drop down list to select the Wire Pair number needed After that click on Apply to submit your setting Advanced Port Attributes Name Value Unit Id CPE v Wire Mode Min Line Rate Max Line Rate Wire Mode DSL PairtoUse Illustration 1 2 3 4 4 WireMode 6 WireMode 8 WireMode 1 2 3 4 6 If to set the maximum and minimum line rate input the Max Line Rate and Min Line Rate respectively where values range from 200kbps to 5704kbps and then click on Apply to submit your setting After the handshaking between STU R and STU C devices the actual transmission rate will be presented in the Current Tx Rate attribute Advanced Port Attributes Name Value Unit Id CPE y Wire Mode l WirMode w Min Line Rate Max Line Rate 7 If to configure a specified Ethernet port click on eth1 eth4 via Physical Port Table and then the specified Ethernet Port Configuration page is displayed 12 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Status system
14. P e Support IGMP Snooping e DMZ support e IPSec VPN Support e Support Port based VLAN LED e LED indicator power DSL links Alarm Ethernet ports and CO CPE mode Hardware Interface e DSL interface 2 4 wires one RJ 11 jack 8 wires two RJ 11 jacks e Ethernet interface four RJ 45 jack 10 100BaseT auto sensing and crossover e AC power adapter 100VAC 240VAC 50 6OHz e One craft Interface for local console access CID Dimensions amp Weight e Dimensions 35mm H x210mm W x193mm D e Weight 914g Operating Requirements e Operating temperature OC to 50C e Operating humidity 5 to 90 RH non condensing XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Chapter 2 Hardware Setup pand Startup 2 1 Front Panel LED and Rear Panel description Following pictures are the front panel of 4 wire and 8 wire router respectively Figure 2 1 8 wire XL GRT402S Front Panel LED Figure 2 2 4 wire XL GRT404S Front Panel LED 1 PWR Power Indicator 2 DSL DSL loop On CO Off CPE 4 ALM Alarm for error 5 LAN On Ethernet Link connected 3 CO Figure 2 3 8 wire XL GRT402S rear view XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Figure 2 4 4 wire XL GRT404S rear view 1 DC IN Power Adapter Input 2 Reset Button Reset device to factory default setting 3 CID Connected to PC serial port for console 4 LAN Connected to Ethernet Port 5 DSL 1 to 4 Connected to
15. SL4 SNR Margin DSL4 ES DSL4 SES DSL4 CRC DSL4 LOSWS DSLA UAS DSL4 0 w 0 0 O 0 O O O O OQ ODORO TDT O O O es Note that the Reset Defau s option will not take effect untif you save configuration and reboot 3 You can carry out advanced configuration of your Ethernet port attributes From the Shasi Port Configuration page click on View advanced attributes The Shds Port Configuration page is displayed Shdsl is the default port name of SHDSL created in ROUTER where stands for ATM port You can configure SHDSL parameters in this page 10 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Return to basic attnbute list O Advanced Port Attributes Name Value Unit ld CPE w Wire Mode I WirMode w Min Line Rate 5708 Max Line Rate 5704 PSD Symm tit v Annex A Y Line Probe Enable w Target Margin 6 Connected false Link Status HandShake Link Uptime 00 00 00 Active Wires 0 Current Tx Rate 0 Current Annex A Number Of Repeaters 0 Tx Cell 381 Rx Cell 0 Loop Attenuation DSL1 0 SNR Margin DSLI 0 ES DSLI 0 SES DSL1 n CRC DSL1 0 LOSWS DSL1 1597 UAS DSLI 1597 Loop Attenuation DSL2 SNR Margin DSL2 ES DSL SES DSU CRC DSL LOSWS DSL UAS DSL Loop Attenuation OSL3 SNR Margin DSL3 ES DSL3 SES DSL3 CRC DSL3 LOSWS DSL3 UAS DSL3 Loop Attenuation DSLA SNR Margin DSL4 Dm Oo oc co Gc oO So DD eS oS So a SS 1S ES DSL4 SES DSL4 CRC DSL4 LOSWS DSL4 VAS DS
16. WAN connections page is displayed If you click on the Virtual If link the Virtual interface page displays a table listing the names of existing virtual interfaces Each virtual interface is called item by default 3 2 4 3 DHCP Server This option allows you to enable disable the DHCP server and create configure and delete DHCP server subnets and DHCP fixed IP MAC mappings Click on DHCP server from the Configuration menu the following page is displayed DHCP Server This page allows creation of DHCP server subnets and DHCP server fixed host IP MAC mappings You may also enable and disable the DHCP server from here The DHCP server is currently enabled DHCP server interfaces Use this section to edit the list of IP interfaces that the DHCP server will operate on There are currently no IP interfaces listed for the DHCP server The DHCP server will operate on all interfaces Add new interface Use this section to tell the DHCP server to operate on another IP interface New IP interface ipwan w Existing DHCP server subnets Subnet Value Subnet Mask Use local host Use local host Assign Auto Get subnet Delete address as address as Domain from IP DNS server default Name interface gateway 192 168 1 0 255 255 255 0 tue v tue v twe v ipan Vv O Advanced i Options O Pan Create new Subnet O Help There are currently no DHCP server fixed IP MAC mappings defined Create new Fixed Host Help Enabling disablin
17. ails of the TCP portfilter that you have just added e For a non TCP UDP portfilter click on Add Raw IP Filter The following page is displayed Firewall Add Raw IP Filter external internal Direction Source address Destination address IP Protocol Inbound Outbound IP Address IP Address Number or name Allow Allow 0 0 0 0 0 0 0 0 0 Mask Mask 0 0 0 0 0 0 0 0 Apply Specify the protocol number in the Transport Type text box for example for IGMP enter protocol number 2 Then use the Direction drop down lists to specify whether you want to allow block inbound traffic and allow block outbound traffic Click on Apply The Firewall Port Filters page is displayed containing details of the IP portfilter that you have just added 2 Each porttilter displayed in the Firewall Port Filters page has a Delete hyperlink assigned to it To delete a portfilter click on this link then at the confirmation page click on Delete The port filter is removed from the Firewall configuration Configuring validators A validator allows blocks traffic based on the source destination IP address and netmask Traffic will be allowed or blocked depending on the validator configuration specified when the policy was created See Configuring Firewall policies Section This section assumes that you have previously followed the instructions in Configuring Firewall policies Section To configure a validator 1 From the Current Firewall Policies tabl
18. an intrusion from that host Click on the Clear Blacklist button at the bottom of the page to clear blacklisting of an external host The Security Interface Configuration page is displayed b Use Victim Protection select true or false depending on whether you want to protect a victim from an attempted web spoofing attack c DOS Attack Block Duration type the length of time in seconds that the Firewall blocks suspicious hosts for once a DOS attack attempt has been detected d Scan Attack Block Duration type the length of time in seconds that the Firewall blocks suspicious hosts for after it has detected scan activity e Victim Protection Block Duration type the length of time in seconds that the Firewall blocks packets destined for the victim of a spoofing style attack f Maximum TCP Open Handshaking Count type in the maximum number of unfinished TCP handshaking sessions per second that are allowed by Firewall before a SYN Flood is detected g Maximum Ping Count type in the maximum number of pings per second that are allowed before the Firewall detects an Echo Storm DOS attack h Maximum ICMP Count type in the maximum number of ICMP packets per second that are allowed by the Firewall before an ICMP Flood DOS is detected 3 Once you have configured Intrusion Detection click on Apply The Intrusion Detection settings are applied to the Firewall and the Security Interface Configuration page is displayed 3 2 5 2 IP Rout
19. arch order table You can add a maximum of six search strings Each search string entry has a Delete button associated with it Click on Delete to remove a string from this list 3 2 4 6 DNS Relay This option allows you to create configure and delete DNS relay s primary and secondary DNS servers DNS relay can forward DNS queries to the DNS servers on this list Click on DNS Relay from the Configuration menu The following page is 28 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual displayed DNS Relay This page allows you to enter a list of DNS server IP addresses that the DNS relay can forward DNS queries to It also allows access to the DNS relay LAN database Q for IPv4 Edit DNS server list Use this section to edit existing DNS server addresses present in the DNS relaw s list The first address should be the Primary DNS server the second address should be the Secondary DNS server and so on You cannot have more than three addresses at atime There are currently no DNS servers in the list Use the section below to add a new DNS server Add new DNS server Use this section to add a new DNS server to the DNS relaw s list New DNS server IP address Apply Configuring the DNS relay list 1 In the Add new DNS server section type an address in the New DNS server IP address text box 2 Click on Apply The address is displayed in the Edit DHCP server list section To edit an entry click on an IP addres
20. ation Standard Compliance e ITU T G 991 2 e Transmission rate up to 5 69 Mbps on 2 wire e Transmission rate up to 11 38 Mbps on 4 wire e Transmission rate up to 22 76 Mbps on 8 wire e Support of Annex A Annex B Annex F and Annex G e Auto load balancing with bonded pairs e Support point to point configuration Maintenance e Firmware upgradeable via FTP or TFTP optional e Support Telnet e Support ATM OAM F5 End to End and Segment loopbacks e Statistics on DSL link and data ports e Svs log e HTTP web downloadable Management e Password protection e PAP and CHAP support e Remote access management via telnet e SNMPvt1 e Firewall Security e Packet Filter e Denial of Service e Stateful Packet Inspection SPI e Attack Alert and log e Access Control e Real time log e MIB IIl RFC 1213 RFC 1573 e Web based GUI e Command Line Interface CLI Protocol e Support ATM over G SHDSL bis and G SHDSL e MAC bridging IEEE 802 3 and 802 1D e PPPoE RFC 2416 e RFC 1483 2684 Bridged encapsulation routing mode optional e IP support TCP RIPv1 RIPv2 UDP ICMP ARP RTP ee XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual e IEEE8O2 IP Priority Output Queuing e IEEE 802 1Q VLAN e IEEE80O2 3u Fast Ethernet 100BaseT e MAG Filtering e QoS support VBR rt VBR nrt CBR and UBR e Support 8 PVCs e NAT PAT support e DHCP client server and DHCP relay functionality e VPN pass through IPSec and L2T
21. aultFdb user wants the VLAN to be associated If the FDB already exists the VLAN becomes associated with that FDB If the FDB does not exist it is created and the VLAN becomes associated with it Tagged Ports the tagged port list of the named VLAN None User priority the untagged port list of the named VLAN ethi eth2 eth3 eth4 pvco Edit Tagged Ports Allow users to edit tagged ports while clicking on Edit Edit untagged Allow users to edit untagged ports while clicking on Edit Ports Edit Tagged Ports As shown in the following figure user can add a specified port to VLAN through name drop down list Click on OK to submit your setting Reset to clear your setting and Cancel to return to previous page VLAN Tagged Ports There are currently no tagged ports Use the section below to add a new Tagged Port Add port to VLAN Name Value Name Port Type 50 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Edit untagged Ports As shown in the following figure user can add or delete a specified untagged port Click on OK to submit your setting Reset to clear your setting and Cancel to return to previous page VLAN Untagged Ports Name Delete Action eth O Add a port to VLAN eth etha eth4 a a 3 amp pve Name Value Name eth Port Type Untagged Reset Create a new VLAN Click on Create a new VLAN the Create a new VLAN page is displaye
22. ax Line Rate and Min Line Rate respectively where values range from 200 kbps to 5704 kbps and then click on Apply to submit your setting After the handshaking between STU R and STU C devices the actual transmission rate will be presented in the Current Tx Rate attribute 4 Click the line probe drop down list to set line probe as enable or disable 5 Click the annex drop down list to select the desired annex mode including A B A amp B F G and F amp G 6 Click the PSD drop down list to set PSD as symmetric or asymmetric 7 If to set the maximum and minimum line rate click on the Max Line Rate and Min Line Rate drop down list respectively range 200kbps to 5704kbps 8 If to set the target margin input the desired number in the target margin field range 10 to 21 dB 9 Click on Apply to submit your setting or Cancel to clear your setting 10 to view the advanced status of SHDSL and Ethernet ports refer to the system status section as follows 52 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Status a Svstem Status mystem status This page shows the system status of your connection System Information Physical Port Connection Status G Event Log Pon Type Connected ahdsl atm K Eth ethernet x Ethe ethernet x Eth ethernet v x Eth4 ethernet 53 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Chapter 4 Diagnostic and Troubleshooting We coul
23. ble NAT between these interfaces click on Disable NAT to internal interface Once you have enabled NAT between interfaces you can e configure global addresses see Configuring NAT global addresses section e configure reserved mapping see Configuring NAT reserved mapping section Configuring NAT global addresses Global address pools allow you to create a pool of outside network addresses that is visible outside your network Before you can configure global addresses you need to 35 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual configure NAT See Configuring NAT Section If you want to set up a global address pool on your existing NAT enabled interfaces 1 From the NAT Security Interfaces table click on the Advanced NAT Configuration hyperlink for the interface that you want to add a global pool to The following page is displayed Advanced NAT Configuration ipwan Global Address Pools Mo Global Address Pools Add Global Address Pool Q Reserved Mappings No Reserved Mappings Add Reserved Mapping O Return to Interface List Q 2 Click on Add Global Address Pool The following page is displayed NAT Add Global Address Pool ipwan Add Global Address Pool Interface Type Use Subnet Configuration IP Address Subnet Mask IP Address 2 internal wv Use Subnet Mask v Add Global Address Pool Return ta NAT Configuration Q Return to Interface List Q 3 This page allows you to create a pool of ne
24. cast Mode e Enable the SNTP client sends time synchronized broadcast packets to the network and subsequently expects a reply from a valid timeserver The client then uses the first reply it receives to establish a link for future sync operations in unicast mode This server will then be added to the server association list The client ignores any later replies from servers after the first one is received The enabled anycast mode takes precedence over any entries currently in the associations list when the sntpclient sync command is issued The entry will then be substituted for any existing entry in the unicast association list e Disable stops synchronization via anycast mode SNTP Client Mode Configuration Parameters SNTP Synchronizat on models Unicast Mode Enabled Disabled Anycast Mode Enabled Disabled Broadcast Mode Enabled Disabled Set Mode Click on Set mode to validate your setting after choosing the SNTP Synchronization mode 2 select a time zone Click on the local timezone drop down list and select a time zone And then click on Set Timezone to validate your setting Bi XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Universal Coordinated 0h SH D Western European 0h gt Status NTP servers b System Middle European Winter 1h IP Address DNS Hostname Swedish Winter 1h British Summer 1h Eastern Europe Russia Zone 1 2h V Configuration LAN connec
25. d as shown in the following figure In this page user can create a new VLAN after configuring VLAN name Vlan Id and Fdb Name respectively Click on OK to submit your setting Reste to clear your setting and Cancel to return to previous page Create a new VLAN Note to add a Default Vlan the nane given should be DefaultVlan VLAN ID as 1 and FDB Name as DafaultFdb Name Value VLAN Name Vian Id Fdb Name 3 2 5 4 Ports This option allows you to configure the SHDSL port on your router Click on Port Configuration via the Advanced menu The Shdsi port is displayed V Port Configuration shdsl Click Shdsi on the Port Configuration menu The SHDSL Port Configuration page appears promptly _5 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual DSL Configuration ltem Value Remark Fole CPE VWirelode Wirekdoda Line Probe Enable Bi Annex A w Psd Symmetric Minimum Line Rate 5704 kbps Range 200 to 5704 Maximum Line Rate 5704 kbps Range 200 to 5704 Target Margin 6 Range 10 to 21 Shdsl is the default port name of SHDSL created in ROUTER where stands for ATM port You can configure simple SHDSL parameters in this page The procedure is shown as follows 1 In the Role drop down list you can set the device as CPE or CO 2 If to set router Wire mode Click on Wire Pair drop down list to select the Wire Pair number needed 3 If to set the maximum and minimum line rate input the M
26. d simply judge whether connection is correct or incorrect from the status of LED Please refer to the list below for status of connection Description Suggestion Make sure Power LED Ethernet LED and Check all connections whether ware correct including DSL LED are lighted DSL Line Ethernet cable and power adapter Ethernet LED start to become blink yellow If your Ethernet LED no light make sure the RJ 45 you while RJ 45 line has just plugged it will turn to using is connected properly Please use the crossover yellow No blink while connection is Ethernet cable established DSL LED start to become blink yellow while If the DSL LED is still blinking is means that Router is DSL line has just plugged and start to train the training the DSL Line and connection is not DSL Link it will turn to yellow No blink while Established in this case Please make sure your ISP connection is established User name and password are correct or check DSL Link is connected properly _54
27. ddress details LAN connections LAN services currently defined Service Name IP Bridge Interface Name Description Creator eth2 eth2 eth2 CLI eth3 eth3 eth3 CLI eth4 eth4 eth4 CLI The default LAN IP interface is iplan which is not shown in the table above Edit it by using the Change default LAN port IP address button below Create a new service Change LAN port IP address b Secondary IP address details To create configure a secondary IP address click in the Secondary IP Address text box and type new address details 20 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual a LAN connections This page allows you ta change the IP address for the default LAN port The name of the IP interface is iplan Default LAN Port The Secondary IP Address should be on the same subnet as the Primary IP Address and uses the same Subnet Mask Addresses on other subnets can be added using Virtual Interfaces Primary IP Address IP Address 192 168 1 1 Subnet Mask 255 255 1255 0 Secondary IP Address IP Address o J o Apply Note there may be a short pause between clicking Apply and receiving a response Advanced LAN port iplan virtual interfaces IP Interface Name None Create a new virtual interface Q v 1 Once you have configured the IP address es click on the Apply A message is displayed confirming that your address information is being updated If you have changed the primary IP ad
28. dress you may need to enter the new address in your web browser address box Creating virtual interfaces 1 Click on the Create a new virtual interface hyperlink at the bottom of the LAN connections page On the Create virtual interface page type the IP address and netmask of the virtual interface and then click on the Apply Create virtual interface Configure new virtual interface IP Address Netrrask Apply 2 The LAN connections page is displayed The virtual interfaces section contains a table listing the names of the virtual interface s Each virtual interface is called item by default 3 Each virtual interface name has an Edit and a Delete link associated with it To edit a service a Click on the Edit link b Change the options for the existing virtual interface then click on Change The page Is reset and the new values are displayed To delete a service a Click on the Delete link b Check the details displayed and then click on the Delete this connection wD hme XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual button 3 2 4 2 WAN Connection This option allows you to create and configure WAN connections for Your Router You can also create virtual interfaces on routed services Click on WAN connections via Configuration menu the WAN connections page is displayed WAN connections WAN services currently defined Service Name IP Bridge Interface Name Description Creator fc 1483 0
29. e click on the Host Validators link for the policy that you want to configure The Configure Validators page is displayed Click 39 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual on the Add Host Validator link The following page is displayed Firewall Add Host Validator external internal Add Host Validator Host IP Address Host Subnet Mask Direction both Y Apply 2 In the Host IP Address text box type the IP address that you want to allow block 3 In the Host Subnet Mask text box type the IP mask address If you want to filter a range of addresses you can specify the mask for example 255 255 255 0 If you want to filter a single IP address use the specific IP mask address for example 255 255 255 255 4 Click on the Direction drop down list and select the direction of traffic that you want the validator to filter 5 Click on Apply The Configure Validators page is displayed containing details of the host validator that you have just added 6 Each portfilter displayed in the Configure Validators page has a Delete Host Validator hyperlink assigned to it To delete a validator click on this link then at the confirmation page click on the Delete Host Validator button The validator is removed from the Firewall configuration Configuring triggers A trigger allows an application to open a secondary port in order to transport packets The most common applications that require secondary p
30. e local host as default gateway Additional option information Add and remove items from this list to configure additional option information you would like the DHCP server to give to clients on this subnet 1 Create new DHCP option 2 This page also allows you to add additional option information At the bottom of the page click on the Create new DHCP option link 3 Click on the Option name drop down list and select a name Type a value that matches the selected option name in the Option value text box Click on OK 4 The Edit DHCP server subnet page is displayed and details of you new option are displayed under the sub heading Additional option information To delete an existing option check the Delete box for a specific option and click OK Creating a fixed host 1 Click on the Create new Fixed Host link The following page is displayed Create new DHCP server fixed host IP MAC mapping Add new mapping Define your new fixed mapping hare The IP address you choose will be given to the host with the MAC address you specify The IP address must not clash with an IP address already present in a dynamic address range You should also ensure that there is a suitable subnet defined for the address to reside in The MAC address should be expressed as 6 hexadecimal pairs seperated by colons e g 00 20 2b 01 02 03 IP address MAC address Maximum lease time 96400 2 Complete the following a Type in the IP address that
31. ection Settings Intrusion Detection settings allow you to protect your network from intrusions such as denial of service DOS attacks port scanning and web spoofing This section assumes that you have followed the instructions in Enabling Security Section and Enabling Firewall and or Intrusion Detection Section To configure Intrusion Detection settings 1 Go to the Policies Triggers and Intrusion Detection section of the Security Interface Configuration page Click on Configure Intrusion Detection The Firewall Configure Intrusion Detection page is displayed Al XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Use Blacklist false w Use Victim Protection false w Victim Protection Block Duration 500 seconds DOS Attack Block Duration 1500 seconds Scan Attack Block Duration 56400 seconds Scan Detection Threshold 5 per second Scan Detection Period g0 seconds Port Flood Detection Threshold 45 per second Host Flood Detection Threshold sp per second Flood Detection Period 45 seconds Maximum TCP Open Handshaking Count 5 per second Maximum Ping Count 45 per second Maximum ICMP Count 495 per second Apply Clear Blacklist Return to Interface List The values displayed in Firewall Configure Intrusion Detection page are the default values 2 Configure Intrusion Detection as follows a Use Blacklist select true or false depending on whether you want external hosts to be blacklisted if the Firewall detects
32. ember set 10 Filter Age is the time in seconds after which MAC addresses are removed from the filter table when there has been no activity The time may be an integer value between 10 and 100 000 seconds The default value is 300 seconds If to change the filter age input the seconds desired in the filter age field and then clock on Set Value to submit your setting 11 Traffic Class setting which is the status of traffic class mapping If to set traffic class select your option from the drop down list and click on Set Status to submit your setting The following table gives the range of values for each option which can be specified with this command and a default value Description Default value enable Enable the mapping of regenerated priority to its traffic class Disable the mapping of regenerated disable priority to its traffic class Traffic class mapping would happen only if traffic class has not been already set VLAN configuration Following figure displays the VLAN settings for the bridge VLAN Configuration disable disable prioritybased PARAMETER VALUE VLAN Version 1 Max WAN Id 4094 Max ANS JU Curren LANSs 1 The following VLAN information is displayed 1 VLAN version IEEE 802 1q version number that this device supports which is 1 2 Max VLAN Id The maximum VLAN Id for a VLAN in the bridge 3 Max VLANs The maximum number of VLANs supported in the bridge 4 Curr
33. ent VLANs The number of VLANs that are currently existing in the bridge Spanning bridge configuration Following figure displays the spanning bridge settings for the bridge _46 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Spanning bridge Configuration PARAMETER VALUE Spanning Priority IEC Forward Delay is Hell Time Maximum Age 20 eet The following spanning bridge information is displayed and allows users to configure 1 Spanning spanning tree setting true or false 2 Priority spanning tree priority value 3 Forward Delay spanning tree forward delay time Seconds 4 Hello time spanning tree hello time Seconds 5 Maximum Age spanning tree maximum age seconds Interface Configuration Click on Interface configuration and then bridge interfaces page is displayed as shown in the following figure Bridge Interfaces Frame Access Ingress Fis Pi seo ol ia Action Name PVID Type Filtering Priority Transport Priority Map ase vi false a ath Pier Man Map Er false a ath aha Priority Map Return to Bridge Q The following table gives the range of values for each option which can be specified with this command and a default value Description Default value Interface name Port VLAN Id PVID associated with the interface _47 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Frame Acceptable Frame Type se
34. enu on the left hand side of the main window e Status information about the current setup and status of the system e System The System section lets you carry out system commands like Firmware Update Backup Restore Save configuration Authentication and restart e Configuration information about the current configuration of various system features with options to change the configuration The exact information displayed on each web page depends on the specific configuration that you are using The following sections give you a general overview of the setup and configuration details 3 2 1 Status Pages XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual The Status homepage contains information about the current configuration of router It provides an overview of the current image configuration The page contains the following sections The Status page display following sections 1 system information 2 physical port 3 Routing table 4 Network interface 5 event log 3 2 1 1 System information Click System Information on Status menu and then System information page is displayed promptly Status System Information System Information Physical Port Firmware Version 01 00 03 Brenna Elen PCB Version 1 1 Network Interfaces Event Log TXCVR Info Infineon 04 C System LAN IP Address 192 168 1 1 C Configuration LAN Subnet Mask 255 255 255 0 C Advanced MAC Address 00 01 53 00 00 01 2 Quick Setup Up Time 00 0
35. er accounts for users who access the Router Click on Authentication via the System menu The following page is displayed Authentication This page allows you to control access to your router s console and these configuration web pages Currently Defined Users User May login Comment admin tue Default admin user Edit user Q Create a naw user Creating a new login account 1 Click on the Create a new user The following page is displayed Authentication create user Details for new user Username Password May login false v Comment Create Cancel and return to Authentication Setup Page O 2 Type details for the new user into the username password and comment text boxes and select a May login Option e true means that the user can login but not dialing e false means that the user can not login 3 Click on the Create The Authentication page is displayed The table now contains details for the user that you have just created Editing deleting a login account 1 The Authentication page table contains an Edit user hyperlink for each user account entry Click on a link The following page is displayed Authentication edit user admin Details for user admin Username admin Password seses May login rue w Comment Default admin user Cancel and return to Authentication Sctup Page This page allows you to e update details for a specific user account Modify the necessary te
36. es This option allows vou to create static IP routes to destination addresses via an IP interface name or a Gateway address Click on IP routes from the Configuration menu A2 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual The Edit Routes page is displayed Edit Routes There are currently no Routes defined Create new Ip V4Route O Help This page lists the following information about existing routes e Whether the route is valid or invalid e Destination IP address e Gateway address e Netmask address e Whether the route is advertised via RIP true or false Editing a route 1 To edit the destination gateway and netmask address of a route Click in the relevant text box update the information then click on Apply Edit Routes Changes successfully applied Existing Routes Valid Destination Gateway Netmask Advertise Delete Vv 192 168 10 20 255 255 255 0 0 0 0 0 rue O Advanced Options Create new Ip Route 2 To edit the cost interface setting or advertise status for the route click on the Advanced Options hyperlink for a specific route and update the relevant information Click on Edit Advanced Settings Name Value Destination 0 0 0 0 Gateway 255 255 255 0 Netmask 0 0 0 0 Cost 1 Interface ipwan w Advertise false v og Cancel Deleting a route 1 To delete an existing route check the Delete box for a specific route 2 Click on Apply Creating an IP
37. fy the transport type that you want to map from the outside interface to the inside e Port Number the port number that your transport uses 4 Once you have configured the table click on Add Reserved Mapping The table is refreshed and the reserved mapping is added to your NAT configuration To delete a reserved mapping setup click on the Delete hyperlink and then click on Delete Reserved Mapping Click on Return to Interface List to display the Security Interface Configuration page 37 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Configuring Firewall policies If to configure firewall policies click the Security Policy Configuration from Policy Triggers and Intrusion Detection as following figure shown Policies Triggers and Intrusion Detection security Policy Configuration security Trigger Configuration Q Configure Intrusion Detection i Configure Security Logging amp Then the table is displayed and contains details of each Firewall policy Security Policy Configuration Current Security Policies Interface Type 1 Interface Type 2 Validators Policy Configuration external internal Only listed hosts blocked Port Filters Host Validators external dmz Only listed hosts blocked Port Filters Host validators Q dmz internal Only listed hosts blocked Port Filters Host Validators Return to Interface List Q You can now configure the policies to include por
38. g the DHCP server The DHCP server is enabled by default If to disable the DHCP server click on Disable Note If DHCP relay is enabled DHCP server will be disabled by default You can not enable DHCP server unless you disable DHCP relay Creating a DHCP server subnet 1 Click on the Create new Subnet link The following page is displayed _24 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Create new DHCP server subnet This page allows you to set up a new DHCP server subnet so that the system can assign IP address subnet mask and option configuration parameters to DHCP clients Parameters for this subnet Define your new DHCP subnet here if you do not wish to specify the subnet value and subnet mask by hand you may instead select an IP interface using the Get subnet from IP interface field A suitable subnet will be created based on the IP address and subnet mask Eelonging to the chosen IP interfaca Subnet value Subnet mask Get subnet from IP interface none wv Maximum lease time 86400 seconds Default lease time 43200 seconds IP addresses to be available on this subnet You need to make sure that the start and end addresses offered in this range are within the subnet you defined above Alternatively you may check the Use a default range box to assign a suitable default IP address pool on this subnet Start of address range End of address range Use a defaull range C DNS server option information E
39. hat would be used for traffic class mapping as well as set in the VLAN tag of the outgoing frame User Priority to Regenerated Priority Map User Priority Fegenerated Priority il 0 1 1 a I 3 3 4 4 5 5 ia b y F Reset 48 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual The following table gives the range of values for each option which can be specified with this command and a default value Option Description Default value Priority O The regenerated user priority to which the user priority with value 0 in the 0 incoming frame should be mapped Priority 1 The regenerated user priority to which the user priority with value 1 in the 1 incoming frame should be mapped Prioritv 2 The regenerated user priority to which the user priority with value 2 in the 2 incoming frame should be mapped Prioritv 3 The regenerated user priority to which the user priority with value 3 in the incoming frame should be mapped Priority 4 The regenerated user priority to which the user priority with value 4 in the 4 incoming frame should be mapped Priority 5 The regenerated user priority to which the user priority with value 5 in the 5 incoming frame should be mapped Priority 6 The regenerated user priority to which the user priority with value 6 in the 6 incoming frame should be mapped Priority 7 The regenerated user priority to which the user priority with value 7 in the 7 incoming frame should be ma
40. ing Section Configuring NAT reserved mapping Reserved mapping allows you to map an outside security interface or an IP address from a global pool to an individual IP address inside the network Mapping is based on transport type and port number Before you can configure reserved mapping you need to configure NAT See Configuring NAT Section If you want to set up a reserved mapping on your existing NAT enabled interfaces From the NAT Security Interfaces table click on the Advanced NAT Configuration hyperlink for the interface that you want to add reserved mapping to The Advanced NAT Configuration page is displayed see Advanced NAT configuration Section Click on the Add Reserved Mapping hyperlink The following page is displayed NAT Add Reserved Mapping ipwan NO Add Reserved Mapping IP Addresses Transport External PortRange Internal Port Range Global Internal Tvpe Start End Start End 0 0 0 0 Set to 0 0 0 0 to cmp BB 10 0 0 0 use the priman IP address of the interface ipwan 4dd Reserved Mapping Return to NAT Configuration Q Return to Interface List Q 3 This page allows you to configure your reserved mapping Add specific values for the following table entries e Global IP Address if you are mapping from a global IP address type the address here If you are mapping from a security interface type 0 0 0 0 e Internal IP Address the IP address of an individual host inside your network e Transport Type speci
41. interfaces Security interfaces are based on existing LAN services You must create a LAN service for every security interface that you want to configure For details of how to create LAN services 1 From the Security Interfaces section click on Add Interface Add Interface page is displayed Security Add Interface New Interface Setup Name itera w Interface Type external v Apply Return to Interface Lisi 2 Click on the Name drop down list and select the LAN service that you want to base your security interface on 3 Click on the Interface Type drop down list and specify what kind of interface it is depending on how it connects to the network external internal or DMZ 4 Click on Apply The Security page is displayed The Security Interfaces section contains a table that displays information about each security interface that you have created 34 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Security Interfaces Name Type NAT iplan internal May be configured on external or DMZ interfaces Delete Interface ipwan external Disable NAT to internal interfaces Delete Interface Q Enable WAT to DMZ interfaces Advanced MA Configuration q item dmz Enakle NAT to internal interfaces Delete Interface B Advanced MA Configuration f jaldl itetatt all interfaces defined e Name name of LAN service that the security interface is based on e Type of network connect
42. ion specified e NAT setting It contains hyperlinks that allow you to configure NAT See Configuring NAT e Delete Interface hyperlink Click on this to display the Security Delete Interface page Check the interface details then click on the Delete button Configuring NAT To configure NAT you need to 1 Enable Security see Enabling Security section 2 Create at least two different security interface types based on existing LAN services see Configuring security interfaces section 3 Once you have created more than one security interface the NAT column in the Security Interfaces table tells you that you can enable NAT between the existing security interface and a network interface type For example if you create an external interface and an internal interface your table will look like this Security Interfaces Name Type NAT iplan internal Mlay be configured on external or DMZ interfaces Delete Interface 0 pwan external Disable NAT to internal interfaces Delete Interface Advanced MAT Configuration Add Interface The NAT column for the external interface tells you that you can enable NAT to internal interfaces If you also had a DMZ interface configured this column would also include an Enable NAT to DMZ interfaces button 4 To enable NAT between the external interface and the internal interface type click on Enable NAT to internal interface The Security page is refreshed and NAT is enabled To disa
43. ith vvvvimm dd hh mm ss format in the text box to set the svstem clock And then click on Set Clock to validate vour setting Manual System Clock Setting Set the system clock yyyy mm dd hh mm ss format 1970 01 01 00 00 00 Set Cock Note if using manual system clock setting the local time will follow the internal clock set by user 3 2 5 Advanced Pages The Advanced pages allow you to configure e Security too XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual e IP Routes e Bridge e Port These options are introduced in the following pages 3 2 5 1 Securitv Security allows you to e enable Security e configure Security interfaces e configure triggers e NAT allows you to e enable NAT between interfaces e configure global addresses s e configure reserved mapping e Firewall allows you to e enable Firewall and Firewall Intrusion Detection settings e set the Firewall security level e configure Firewall policies portfilters and validators e configure Intrusion Detection settings Via the Advanced menu click on Security and then the following page is displayed Security Interface Configuration Security State Security Enabled Disabled Firewall Enabled Disabled Intrusion Detection Enabled Enabled Disabled Change State Security Level Security Level n a Enable Firewall to set level Security Interfaces Name Type NAT iplan internal May be c
44. located in the association list if unicast or if anycast is enabled initiate an anycast sequence to the network Note to Synchronize Client with NTP Server NTP servers SNTP client mode and local time zone should be pre configured Configure SNTP NTP Server 1 Type the NTP Sever IP address in the text box of Add NTP Server IP Address and then click on Add to make it valid 2 Type the NTP Sever Hostname in the text box of Add NTP Sever Hostname and then click on Add to make it valid Configure SNTP client mode 1 Select SNTP Synchronization mode s This action enables disables the STNP client in a particular time synchronous access mode There are three modes to choose from and 30 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual each mode has enable and disable options a Unicast mode e Enable the mode uses a unicast server and the IP address or hostname in the SNTP server association list is used to synchronize the client time with the server The SNTP client attempts to contact the specific server in the association in order to receive a timestamp when the sntpclient sync command is issued e Disable the unicast server is removed from the association list b Broadcast mode e Enable allows the SNTP client to accept time synchronization broadcast packets from an SNTP server located on the network and updated the local system time accordingly e Disable stops synchronization via broadcast mode c Any
45. nections DHCP serwer DHCP relay ONS chert ONS relay SMTP client e LAN connections allows you to edit your LAN port IP address create and edit a secondary IP address and create new LAN services e WAN connections allow you to create edit and delete WAN services e DHCP server allow you to enable disable and configure your DHCP server 19 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual e DHCP relay allow you to enable disable and configure your DHCP relay e DNS client allow you to enable disable and configure DNS client e DNS relay allow you to enable disable and configure DNS relay e SNTP client allow you to configure Simple Network Time Protocol at Client side Please point to the SNTP server contact with your ISP provider 3 2 4 1 LAN connections This option allows you to e configure the IP address and subnet of the default LAN connection to the Router e configure a secondary IP address on the same subnet as the primary IP address e create virtual interfaces multiple virtual interfaces can be associated with the existing primary LAN interface From the Configuration menu click on LAN connections The following page is displayed Configuring primary and secondary LAN connections 1 The Default LAN Port section contains two subsections a IP address and subnet mask details of your primary LAN connection To edit these details click Change default LAN port IP address and type new primary a
46. nter the addresses of Primary and Secondary DNS servers to be provided to DHCP clients on this subnet You may instead alow DHCP server ta specify its own IP address by clicking on the Use local host address as DNS server checkbox Primary DNS s2rver address Secondary DNS server address Use local host address as DNS server F Default gateway option information Use local host as default gateway F Cancel fe 2 This page allows you to a Set the value and netmask of the subnet either manually or by selecting an IP interface whose value and mask is used instead and set the maximum and default lease times b Set the DHCP address range or use a default range of 20 addresses c Set the Primary and Secondary DNS Server addresses or set your System to give out its own IP address as the DNS Server address d Set your Router to give out its own IP address as the default Gateway address 3 Once you have entered new configuration details for your DHCP server click on OK The DHCP Server page is displayed containing details of your new subnet Editing a DHCP subnet 1 Click on the Advanced Options link for a specific subnet The Edit DHCP server subnet page is displayed This allows you to edit all of the values that were set when the subnet was created 25 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Edit DHCP server subnet This page allows you to change an existing DHCP server subnet This can include
47. onfigured on external or DMZ interfaces Delete Interface Q ipwan external Disable NAT to internal interfaces Delete Interface O Advanced NAT Configuration Q eface Q all interfaces defined Policies Triggers Intrusion Detection Logging Security Policy Configuration Q security Trigger Configuration Q Configure Intrusion Detection Q Configure Security Lagging O 33 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Enabling Security You must enable Security before you can enable Firewall and or Intrusion Detection In the Security State section 1 Click on the Security Enabled radio button 2 Click on Charge State to update the Security State section Enabling Firewall and or Intrusion Detection You must create a security interface before you can enable Firewall and or Intrusion Detection Once you have created a security interface 1 Click on the Firewall Enabled and or Intrusion Detection Enabled radio buttons 2 Click on Charge State to update the Security State section Setting a default security level You must have Security and Firewall enabled in order to set a default Security level 1 From the Security Level section click on the Security Level drop down list 2 Click on the level that you want to set none high medium or low Security Level Security Level Change Level Security Inte 3 Click on the Change Level bution Configuring security
48. op of the edit page The links that appear depend on the type of service that you are configuring For example for an RFC 1483 routed service you can choose from the following advanced editing links Edit Service Edit PPPoE Edit Atm Channel 3 Click on Change The edit page is displayed and changes are applied to the service Deleting a WAN service 1 At the WAN connections page click on the Delete link for a specific service The WAN connection delete page is displayed 2 Check the details displayed and then click on the Delete this connection button Creating a virtual interface routed services only 1 Click on the Virtual I f link for a specific service The Virtual interface page is displayed WAN connections WARN services currently defined Service Name IP Bridge Interface Name Description Creator PppoelJp ipwan PPPoE WAN uplink Factory Defaults Edit Delete Virtual fg rte 1483 0 rte 1483 0 ric1483 Bridgel WeabAdmin Edit Delete ethernet 0 etharnet 0 38 WebAdmin Edit Q Delete Virtual ltgg Create a new service 2 Click on the Create a new virtual interface hyperlink On the Create virtual interface page type the IP address and netmask of the virtual interface and then click on the Apply Create virtual interface Configure new virtual interface IP Address letrnask 23 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual 3 The
49. orts are FTP and NetMeeting This section assumes that you have followed the instructions in Enabling Security section To configure a trigger 1 Go to the Policies Triggers and Intrusion Detection section of the Security Interface Configuration Click on Trigger Configuration The Firewall Trigger Configuration page Is displayed There are no triggers defined at this time Click on the New Trigger link The following page is displayed Security Add Trigger Transport Port Port Secondary Secondary Allow Max Enable Enable Binary Type Number Number Port Port Multiple Activity Session UDP Address Start End Number Number Hosts Interval Chaining Session Replacement Start End Chaining tp 1024 65535 Allow Allow Allow v Allow Apply Return to Trigger List Return to Interface List 2 Configure the trigger as follows 40 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual a Transport Type select a transport type from the drop down list depending on whether you are adding a trigger for a TCP or a UDP application b Port Number Start type the start of the trigger port range that the primary session uses c Port Number End type the end of the trigger port range that the primary session uses d Allow Multiple Hosts select allow if you want a secondary session to be initiated to from different remote hosts Select block if you want a secondary session to be initiated only to from the same
50. our SHDSL source 2 Insert one end of the RJ45 Ethernet cable into one of the LAN ports marked LAN on the back of the SHDSL router Connect the other end of the cable into the Ethernet Network Interface Card NIC in your PC Connect up to four Ethernet devices to the router Use a crossover cable for a hub 3 Connect an earth ground to the grounding terminal marked FG 4 Connect the supplied external AC adapter into the DC power outlet on the back of the router Connect the power supply into your wall outlet or surge protector a XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Chapter 3 Configure via Web management 3 1 Accessing Web management To access Web management on the router that has been booted with an image containing a factory default configuration 1 Attach a PC to one of the LAN interfaces At your web browser enter the http 192 168 1 1 2 If you first time login the Web you will see a login box is displayed You must enter your username and password to access the pages The default User name Password as follows User Name admin Password admin 3 Click on OK You are now ready to configure router Mieb dmin User name Password Remember my password 3 2 About Web pages Web management provides a series of web pages that you can use to setup and configure the router These pages are organized into three main topics You can select each of the following topics from the m
51. pped oo 3 Regenerated Priority to traffic class map as shown in the following figure specifies the mapping of regenerated priority to their traffic class values Regenerated Priority to Traffic Class Map Regenerated Priority Traffic Class 0 B 1 1 2 2 i 3 k 4 4 5 5 i 6 6 7 7 The following table gives the range of values for each option which can be specified with this command and a default value VLAN Configuration Click on VLAN configuration and then VLAN interfaces page is displayed as shown in the following figure Users can configure the VLAN existing currently or create new VLAN via this page _49 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual VLANs Edit Edit Tagged Untagged P Ports Tagged Forts Untagged VLAN Id Ports Name FOB Name Create new LAN Q Return to Bridge Q The following table gives the range of values for each option which can be specified with this command and a default value option Description Default value An arbitrary name that identifies the VLAN It can be made up DefaultVlan of one or more letters or a combination of letters and digits but it cannot start with a digit Name VLAN ID The VLAN Id that the user wants to assign to the named 1 VLAN The valid values for the VLAN Id ranges between 1 and 4094 FDB Name The name of an existing Filtering Database with which the Def
52. ressing the appropriate reset button on the hardware 1 From the System menu click on Restart Router The following page is displayed Restart From this page you may restart this device Restart After clicking the restart button please wait for several seconds to lat tha system restart If you would like to reset all configuration ta factory default settings please check the follawing box LI Reset to factory default settings Restart 2 Click on Restart to reset your Router The Restart page also provides you with the option of restarting and restoring the factory default settings Click in the Reset to factory default settings box to check it and then click on the Restart Read the console status output to check how the reset is progressing 3 Once the login and password prompt is displayed at the console you can login as usual with login admin password admin then refresh the browser that is running Web The Status page is displayed and your Router has been reset 3 2 4 Configuration pages The Configuration menu contains options for configuring features on ROUTER including basic LAN and WAN connections and DHCP and DNS settings Note Most of the features contain sensible default settings You are unlikely to have to reconfigure every feature included in the Configuration menu From the left hand menu click on Configuration The following sub headings are displayed J Configuration LAN connections WAN con
53. s and type a new entry then click on Apply To delete an entry check the Delete Box for a IP address then click on Apply 3 2 4 7 SNTP Client The option allows you to Synchronize Client with NTP Server Configure SNTP NTP Server System clock setting by manual Click on SNTP client from the Configuration menu The following page is displayed 29 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Simple Network Time Protocol Client Current System Time Current Time Zone UTC Current Synchronized NTP Server 0 0 0 0 synchronize Client with NTP Server now SNTP NTP Server Configuration Parameters NTP servers IP Address DNS Hostname Add NTP Server IP Address Add NTP Server Hostname SNTP Client Mode Configuration Parameters SNTP Synchronization mode s Unicast Mode Enabled Disabled Anycast Mode Enabled G Disabled Broadcast Mode Enabled Disabled Set Mode Select a Local Timezone UTC GMT time Universal Coordinated 0h kr Enter SNTP transmit packet timeout value in seconds 3 Enter SNTP transmit packet retries value 2 Enter SNTP automatic resynchronization polling value in minutes 0 Manual Svstem Clock Setting set the system clock yyyy mm dd hh mm ss format 1970 01 01 00 00 00 Synchronize Client with NTP Server 1 Click on Synchronize that forces the SNTP client to immediately synchronize the local time with the server
54. se the device crashed 3 2 3 4 Backup Restore This page allows you to backup your configuration to or restore it from your computer Backing up your configuration 1 From the System menu click on Backup restore The following page is displayed Backup Restore Configuration This page allows you to backup the configuration settings to your computer or restore configuration from your computer Backup Configuration Backup configuration 0 your computer Restore Configuration Restore configuration from a previously saved file Configuration File Bruwse Restore 2 From the Backup Configuration section click on the Backup The File Download window is displayed and then select the Save The Save As window will prompt and _18 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual select a file in which to save your backup configuration Click on Save Restoring your configuration 1 From the System menu click on Backup restore 2 In the Restore Configuration section click in the Configuration File text box and type the network path of the file that you wish to restore If you do not know the path details click on Browse and locate the file using the Choose file box 3 Click on Restore The page is refreshed with a Configuration Restored message and details of the number of bytes uploaded 3 2 3 9 Restart This page allows you to restart your Router It has the same effect as resetting your Router by p
55. sten on all available IP interfaces Add new interface Use this section to tell DHCP relay to listen on another IP interface New IP interface jpwan v add Edit DHCP server list Use this section to edit existing DHCP server addresses present in the DHCP relaw s list There are currently no DHCP servers in the list Use the section at the bottom of the page to add a new DHCP server Add new DHCP server Use this section to add a new DHCP server to the DHCP relay s list New DHCP server IP address Apply Enabling disabling DHCP relay 1 The DHCP relay is currently disabled If you click on the Enable button DHCP server is disabled and the button changes to Enable DHCP Relay This page allows you to enter a list of DHCP server IP addresses that the relay will forward DHCP packets to You may also enable and disable the DHCP relay from here and choose which IP interfaces the relay should operate on The DHCP relay is currently disabled You may not enable the DHCP relay because the DHCP server is already enabled and some interface is configured for DHCP server as well as for DHCP relay Note If DHCP server is enabled DHCP relay will be disabled by default You can not enable DHCP relay unless you disable DHCP server Adding a DHCP server to the DHCP relay list 7 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual In the Add new DHCP server section type an address in the New DHCP server
56. tfilters and validators See Configuring portfilters Section and Configuring validators Section A porttilter is an individual rule that determines what kind of traffic can pass between two interfaces specified in an existing policy This section assumes that you have followed the instructions in Configuring Firewall policies Section To configure a portfilter 1 From the Current Firewall Policies table click on the Port Filters link for the policy that you want to configure The page displayed contains three Add Filter hyperlinks that allow you to create three different kinds of portfilter e For a TCP UDP port filter click on Add TCP or UDP Filter The following page is displayed 38 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Firewall Add TCP UDP Port Filter external internal Direction Source address Destination address Protocol Source port Destination port Inbound Outbound IP Address IP Address tcp y Range Start End Range Start End Allow wl Allow 0 0 0 0 0 0 0 0 0 3 0 Mask 65535 65535 Mask 0 0 0 0 0 0 0 0 Apply Specify the start and end of the port range for the TCP UDP protocol that you want to filter Then select TCP or UDP protocol from the Protocol drop down list After that use the Direction drop down lists to specify whether you want to allow block inbound traffic and allow block outbound traffic Click on Apply The Firewall Port Filters page is displayed containing det
57. tions WAN connections Gass Add NTP Server IP Address French Summer t2h 5 i Middle European Summer 2h Search for service Swedish Summer 2h fees Add NTP Server Hostname DHCP server i aka ESEA AS DHCP relay DNS client DNS relay ATE EREM SNTP Client Mode Configul s volga 4h IPSec Russian Ural 5h Bridge Indian Standard 45 30h Russian West Siberian 6h North Sumatra 6 30 west Australian Standard h Anycast Mode Enabled Disabled Russian Russia Yenisei 7h Broadcast Mode Enabled Disabled J3 8 47 30h China Coast 8h west Australian Daylight 8h korean Standard 9h SNTP Synchronization modeis Unicast Mode Enabled Disabled Select a Local Timezone UTC GNT time Central Australian Standard 9 30h w Enter SNTP transmit packet timeout value in seconds 5 Enter SMTP transmit packet retries value 2 Enter SNTP automatic resynchronization polling value in minutes 0 Set values 3 Enter SNTP transmit packet timeout value SNTP transmit packet retries value and SNTP automatic resynchronization polling value in the text boxes respectively And then click on Set Values to validate your setting Enter SNTP transmit packet timeout value in seconds 5 Enter SNTF transmit packet retries value Enter SMTP automatic resynchronization polling value in minutes IE Set values Svstem clock setting bv manual Enter the date and time w
58. tting Each bridge interface can be configured all Access type to accept all frames or only tagged frames Ingress Ingress Filtering Setting Accepts VLAN tagged frames only if the VLAN Id false filtering in the frame has this interface in its egress interface list User priority The user priority to regenerated user priority mapping for a bridge 0 interface Transport Name of attached transport Priority map The mapping of user priority in the incoming frames to the regenerated user priority that would be used for traffic class mapping as well as set in the VLAN tag of the outgoing frame How to configure is introduced in the following section Priority map configuration Click on priority map for a specified bridge interface and then the Priority Map for the bridge interface page is displayed In this page number of traffic classes user priority to regenerated priority map and Regenerated Priority to Traffic Class Map are provided to configure The procedure is shown as follows 1 Number of traffic classes as shown in the following figure specifies the number of traffic classes supported by the bridge interface It can be any value between 1 and 8 Priority Map for the bridge interface ethi Number of Traffic Classes Traffic Classes E 2 User Priority to Regenerated Priority Map as shown is the following figure specifies the mapping of user priority in the incoming frames to the regenerated user priority t
59. twork IP addresses that are visible outside your network Add values for the following table entries e Interface type the internal address type that you want to map your external global IP addresses to Click on the drop down list and select an interface type e Use Subnet Configuration there are two ways to specify a range of IP addresses You can either Use Subnet Mask specify the subnet mask address of the IP address or Use IP Address Range specify the first and last IP address in the range Click on the drop down list and select a method e type in the IP Address that is visible outside the network e Subnet Mask IP Address 2 the value you specify here depends on the subnet configuration that you are using If you chose Use Subnet Mask type in the subnet mask of the IP address If you chose Use IP Address Range type in the last IP 36 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual address in the range of addresses that make up the global address pool 4 Once you have configured the table click on Add Global Address Pool The table is refreshed and the global address pool is added to your NAT configuration To delete a global address pool click on the Delete hyperlink then click on the Delete Global Address Pool button Click on Return to Interface List to display the Security Interface Configuration page To create a reserved mapping click on the Add Reserved Mapping hyperlink See Configuring NAT reserved mapp
60. uting Table is a matrix with a network control protocol which gives the hierarchy of link routing at each node The Routing Table screen allows you to view the routing table built in the device ras XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual Status Routing Table System Information Physical Port Destination Netmask Gateway Interface Routing Table 192 168 1 0 255 255 255 0 0 0 0 0 iplan Network Interfaces Event Log 127 0 0 0 255 0 0 0 0 0 0 0 loopback CF System CF Configuration CF Advanced 5 Quick Setup If to create an IP route refer to the IP Routes section on Advanced menu 3 2 1 4 Network Interface If to view the statistics on Bridge Router Interfaces select a specified interface to invoke the Bridge Router Interface page Status Bridge Router Interface System Information Physical Port Description Statistics Extra Info Interface Name Routing Table rfc1483 0 Show Statistics Q Port shdsl VPIAVCI O88 pyc Network Interfaces Event Log rfc1483 1 Show Statistics Port shdsl VPIN CI 6781 ric 1405 1 Cf System eth show Statistics eth C Configuration eth show Statistics ethi Cf Advanced FT z eth3 Show Statistics Q etha S Quick Setup ethd Show Statistics eth Following figure shows the statistics on the interface rfc1483 0 Status rfc1483 0 rfc1483 0 Bridged interface ATM connection Port name shts Active TRUE Rx VPI 0 Tx VP
61. wl Traffic Class Mappin The following bridge information is displaved 1 Bridge MAC Address 2 Number of bridge interfaces configured 3 Type of the Bridge 4 Unicast learning which is non configurable and always set to Hybrid i e VLAN learning is both Independent as well as Shared depending on the association of VLANS with filtering databases 5 Multicast Learning setting which is non configurable and always set to HVM Hybrid VLAN Multicast Learning i e if two VLANs are associated with the same FDB the filtering information for a multicast MAC address in one VLAN would be used in the forwarding decision for the same MAC address in the other VLAN too 6 Config Pvid Status which is non configurable and is always true i e the bridge supports the ability to override the default PVID setting and its egress status VLAN tagged or untagged on each bridge interface 7 Tagging which is non configurable and always enabled i e each bridge interface supports 802 1Q VLAN tagging of frames 8 AcceptableFrame Tl ypeCfg which is non configurable and always enabled i e each bridge interface can be configured to accept all frames or only tagged frames 9 IngressFilteringCfg which is non configurable and is always enabled i e each _45 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual bridge interface supports discarding of frames whose VLAN classification does not include that interface in its m
62. xt boxes then 17 XtendLan G SHDSL bis Router XL GRT402S XL GRT404S User Manual click on the Apply e delete a user account Click on the Delete this user button 2 Once you have edited or deleted a user account the Authentication page is displayed and the table reflects any changes that you have made on the edit user page 3 2 3 3 Firmware Update This option allows you to upload firmware images to Router using HTTP 1 From the System menu click Firmware update The following page is displayed Firmware Update From this page you may update the system software on your network device Select Update File New Firmware Image Browse Update gt 2 Type in the location of the new firmware image that you want to upload or use Browse to browse and select the file Click on Update 3 Once the file has been uploaded to the RAM of your device it is written to Flash ROM A status page is displayed confirming that the upload is complete and telling you how much of the file in bytes and as a percentage has been written to Flash ROM 4 Once the file has been written to Flash the Firmware Update page is refreshed The page confirms completion of the update and asks you to restart your Router in order to use the new firmware Click on Restart Router from system menu Note Please do not power off the device while updating firmware or saving your configuration power off the device while updating the system might cau

G.SHDSL.bis Router User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents