Home

G.SHDSL.bis Router User Manual User Manual

1. G SHDSL bis Router User Manual VO 01 42 Press on the bottom of web page to add the static bridge information Basic Advanced Status Admin Utility General Parameter Default Gateway 192 168 0 254 Static Bridge Parameters Table of Current MAC Entries Deny PCs to access Internet except forward MACs Disable O Enable MAC No Add LAN WAN1 4 WANS 8 1 Dynamic 5 Filter D2 AE E7T 2Q y 2 Dynamic 6 Filter 1 gt 01 23 45 67 89 01 Filter 3 Dynamic 7 Filter 4 Dynamic 8 Filter Filter Y 1 Filter v 5 Filter 9 2 Filter v 6 Filter 3 Filter 7 Filter 4 Filter g Filter If you want to filter the designated MAC address of LAN PC to access Internet press to establish the filtering table Put the MAC address in MAC Address field and select in LAN field If you want to filter the designated MAC address of WAN PC to access LAN press Add to establish the filtering table Key the MAC address in MAC Address field and select Filter in WAN field For example if your VC is setup at WAN 1 select WAN 1 Filter Press on the bottom of web page to review the bridge parameters Home Basic Advanced Status Admin Utility ADVANCED BRIDGE Bridge Parameters Review To let the configuration that you have changed take effect immediately please click Restart button to reboot the system To continue the setup procedure please click Continue button Generic Bridge
2. 4 2 1 3 TCPAM Type TCPAM stands for Trellis Coded Pulse Amplitude Modulation It is the modulation format that is used in both HDSL2 and SHDSL and provides robust performance over a variety of loop conditions SHDSL bis supports 16 level TCPAM line code TPCAM 16 or 32 level TCPAM line code TCPAM 32 to provide a rate reach adaptive capability offering enhanced performance increased rate or reach and improved spectral compatibility The default option is Auto You may assign the different tyoe manually by clicking the caption TPCAM 16 or TPCAM 32 Only Annex AF and BG can apply TCPAM 32 4 2 1 4 Data Rate For 2 wire model n 64kbps You can setup the SHDSL bis data rate in the multiple of 64kbps The default data rate is 5696Kbps n 89 For using Annex AF or BG TCPAM32 data rate is 192Kbps 5696Kbps Nx64kbps N 3 89 TCPAM16 data rate is 192Kbps 3840Kbps Nx64kbps N 3 60 For 4 wire model n 128kbps You can setup the SHDSL bis data rate in the multiple of 128kbps The default data rate is 11392Kbps n 89 For using Annex AF or BG TCPAM32 data rate is 384Kbps 11392Kbps Nx128kbps N 3 89 TCPAM16 data rate is 384Kbps 7680Kbps Nx128kbps N 3 60 Annex AF BG TCPAM 16 192 3840 kpbs 384 7680 kbps TCPAM 32 192 5696 kpbs 384 11392 kbps 4 2 1 5 SNR Margin This is an index for line connection quality You can see the actual SNR margin in STATUS SHDSL bis The larger the SNR margin the better
3. G SHDSL bis Router User Manual Version 0 01 Table of Contents 1 DESCRIPTIONS ccssctcosstcateaaceoasataccpatavarenacetsstuateoasenanep aetvotenaranauataccpatcencsbesetaetoatenascmnspaadioabannecoandaetnaers 5 1 1 FEATURES Sis 5 1 2 SPECIFICATION oa 6 1 3 PAP PLIGATION Sor etn vccnamen toute ansacsauen A caaten teased ASS 9 2 GETTING TO KNOW ABOUT THE ROUTE Rc cininicacnsiaica ais 10 2 1 FoR ONT Fe PIN ct da 10 Lid REAR PANEL as iii 12 2 3 SAOS L BIS PINE CONNECTOR oiaren as re E A a EA 13 2 4 CONSOLE CABE mietin rn E S A E S A A E A a 13 3 INSTALLING THE ROUTER oia E E EE 14 3 1 CHECA 14 3 2 INSTALL THE SHOSEBIS ROUTER listos 16 4 CONFIGURATION VIA WEB BROWSER sssssssssosossosssososossososososossososososossssosssosossososssosossssosssossssos 18 4 1 A Re ce nanaancan sides A 22 4 1 1 BROGeIWWMOde maana cia 22 PLD ROUNO WIDE ia la les ostia Ls 25 TAR Reference A a 33 4 2 ADVANCED A nareu as sacccuoniaeueossien ane aceoandeaesavaneedeacevansamesand s 35 42r SSA SEMIS sien EEA AAE O N O E A O O EO 35 4 2 1 1 Annex TY De le e a EAE 36 4 2 1 2 UIs TYG e AAI ias pabemtecsesauaan 36 4 2 1 3 CANT ti o ed el tele eo llo ell o al ala 38 4 2 1 4 Data atar tbala 38 4 2 1 5 INR ios 38 4 2 1 6 TEE sccccctetieta can scncsasusneqadeseuntoeguasageasedacacannccedecee de edenna ton Se cadena pean tans ii nguniaea eeniaue sade soguauanacestenbenes 38 4 2 1 7 ENE PTODE mona E Seer aren enn SUN ar enn orton Samer nt ant nt en efor ehh n
4. Port Based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port When using the port based VLAN the port is assigned to a specific VLAN independent of the user or system attached to the port This means all users attached to the port should be members in the same VLAN The network administrator typically performs the VLAN assignment The port configuration is static and cannot be automatically changed to another VLAN without manual reconfiguration As with other VLAN approaches the packets forwarded using this method do not leak into other VLAN domains on the network After a port has been assigned to a VLAN the port cannot send to or receive from devices in another VLAN Port Based VLAN Table No LAN1 LAN2 LAN3 LAN4 WAN1 WAN2 WAN3 WAN4 WAN5 WANG WANT WANS 1 2 E E E En O O O O O O d JO OOO O O O O O O O O 4 0 O 0 0 O O O O O O O O 5 0000 O O O O O O O O 6e E E E A O O O O O O O O 7 OoO oOo ao a O O O O O O O O e M j Ej E A O O O O O O O O The default setting is all ports LAN1 to LAN4 and WAN1 to WAN8 connected together which means all ports can communicate with each other That is there are no virtual LANs The option is the most flexible but the least secure Port Based VLAN Table No LAN1 LAN2 WAN1 WAN2 WAN3 WAN4 WAN5 WANG WAN7 WANS ololololiololols olololojololsio oojo ojojsjojo8 cooo0so0Doo0k Oooloolo00a oolololiololsio oololol
5. 192 168 20 1 i i Gateway 192 168 10 1 ys E E T EN A E SET SON e a da a e do S 4 6 2 1 CO Side Click ROUTE and CO Side to setup Routing mode of the Router and then click Home Basic Advanced Status Admin Utility BASIC STEP2 LAN IP Address 192 z 168 5 lo f Subnet Mask 255 y 255 i 255 i lo Host Name SOHO Trigger DHCP Service Disable Enable Meco ee ee ee Type LAN parameters IP Address 192 168 20 1 Subnet Mask 255 255 255 0 Host Name SOHO DHCP Service or For more DHCP service review the chapter on DHCP Service Home Basic Advanced Status Admin Utility BASIC STEP4 WANI VPI lo VCI 32 AALS Encap V C mux LLC Protocol Type the WAN1 Parameters VPI 0 G SHDSL bis Router User Manual V0 01 92 VCI 32 AAL5 Encap Protocol POA EoA or Note The Protocol used in CO and CPE have to be the same Click Next to setup the IP parameters For more understanding about NAT review the chapter of NAT DMZ Home Basic Advanced Status Admin Utility BASIC STEP5 WANI IP Addres ss 10 f B A fi Subnet Mask 255 255 _ 255 y lo Gateway fio hi 2 E DNS Server 1 1168 95 1 1 DNS Server 2 DNS Server 3 IP Address 192 168 20 1 Subnet Mask 255 255 255 0 Gateway 192 169 30 2 Click The screen will prompt the parameters that will be written in NVRAM Check the parameters before writing in NVRAM Press to restart the rou
6. IP QoS is a function to decide the priorities of setting IPs to transfer packets under the situation of overloading bandwidth BASIC y ADVANCED SHDSL bis LAN WAN BRIDGE VLAN SIE ROUTE NAT VIRTUAL SERVER FIREWALL IP QoS STATUS ADMIN UTILITY Home Basic Advanced Status Admin Utility ADVANCED IP QoS IP QoS Parameters General IP QoS Parameters Trigger IP QoS Service Disable O Enable IP QoS Policies Index Enable Protocol Local Remote Precedence Description Pool is Empty Click at item Trigger IP QoS Service in General IP QoS Parameter which will turn on this IP QoS function G SHDSL bis Router User Manual V0 01 63 Click in the bottom of web page to begin a new entry in IP QoS Policy table Home Basic Advanced Status Admin Utility WIP QoS POLICY 1 IP QoS Policy Parameters Policy Rule Description Loa eg Any 0 0 0 0 Single 10 0 0 1 Remote Ramge 192 168 0 1 192 168 0 76 Local Port eg Any 0 65535 Single S0 Remote Port sd Range 1024 5050 Protocot ANY Precedence 0 Description A brief statement describe this policy Local IP type IP address of local host in prioritized session Remote IP type IP address of remote host in prioritized session Local Port type the service port number of local host in prioritized session Remote Port type the service port number of remote host in prioritized session Protocol identify the transportation
7. RFC2131 2132 IP precedence RFC 791 Firewall model Bridging Up to 1024 MAC address learning bridge IEEE 802 1D Transparent learning bridge IEEE 802 1q VLAN Port based VLAN 4 port Router Security DMZ host Multi DMZ Multi NAT function Virtual server mapping RFC1631 VPN pass through for PPTP L2TP IPSec tunneling Natural NAT firewall Advanced Stateful Packet Inspection SPI firewall G SHDSL bis Router User Manual V0 01 6 User access control deny certain access of PCs to Internet service Management ATM EFM ATM QoS Easy to use web based GUI for quick setup configuration and management Menu driven interface Command line interface CLI for local console and Telnet access Password protected management and access control list for administration SNMP management with SNMPv1 SNMPv2 RFC1157 1901 1905 agent and MIB Il RFC1213 1493 Software upgrade via web browser TFTP server Mode ATM EFM Framing ATM 64B 65B Up to 8 PVCs OAM F4 F5 loop back AAL5 UBR Unspecified bit rate CBR Constant bit rate VBR rt Variable bit rate real time VBR nrt Variable bit rate non real time AAL5 Encapsulation VC multiplexing and SNAP LLC Ethernet over ATM RFC 2684 1483 PPP over ATM RFC 2364 Classical IP over ATM RFC 1577 PPP over Ethernet for fixed and dynamic IP RFC 2516 PPP over ATM for fixed and dynamic IP RFC 2364 Support PAP CHAP MS CHAP client WAN Interfac
8. Time Synchronization SYNC method Sync with PC gt Time synchronization with client System Time 2002 01 01 00 56 25 GMT 8 00 G SHDSL bis Router User Manual VO 01 81 4 4 4 2 SNTP v4 0 For using the SNTP select SNTP v4 0 Home Basic Advanced Status Admin Utility ADMIN TIME SYNC Time Synchronization SYNC method SNTP v4 0 Simple network time protocol Service C Disable Enable Time Server 1 ntp 2v edu Time Server 2 ntp drydog com Time Server 3 ntp1 cs wisc edu Time Zone GMT 08 00 HONG KONG PERTH SINGAPORE TAIPEI Update Period secs 3600 SNTP is the acronym for Simple Network Time Protocol which is an adaptation of the Network Time Protocol NTP used to synchronize computer clocks in the Internet SNTP can be used when the ultimate performance of the full NTP implementation The function only supported on router mode Service Enable Time Server 1 Time Server 2 and Time Server 3 All of the time server around the world can be used but suggest using the time server nearby to your country You can set up maximum three time server on here Time Zone Select the time difference between UTC Universal Time Coordinated formerly known as GMT Greenwich Mean Time and your time zone from the drop down list box Update Period How many times the router can resynchronize to time server The unit is second Press to finish the setup The browser will prompt the conf
9. can also be configured to provide a routed connection with the ISP which uses the IP protocol to exchange data G SHDSL bis Router User Manual V0 01 33 e o gt o e o e i o o o o o o oo el CL LAN WAN i IP 10 1 2 1 Router Netmask 255 255 255 0 BAS IP 192 168 0 1 n gt Gateway 10 1 2 2 r Netmask 255 255 255 0 DNS 168 95 1 1 E y IP 10 1 2 2 Netmask 255 255 255 0 ae ELM TFT IP 192 168 0 2 51 Netmask 255 255 255 0 Gateway 192 168 0 1 VPI 0 VCI 33 Encapsulation LLC PPPoE or PPPoA PPPoA point to point protocol over ATM and PPPoE point to point protocol over Ethernet are authentication and connection protocols used by many service providers for broadband Internet access These are specifications for connecting multiple computer users on an Ethernet local area network to a remote site through common customer premises equipment which is the telephone company s term for a modem and similar devices PPPoE and PPPoA can be used to office or building Users share a common Digital Subscriber Line DSL cable modem or wireless connection to the Internet PPPoE and PPPoA combine the Point to Point Protocol PPP commonly used in dialup connections with the Ethernet protocol or ATM protocol which supports multiple users in a local area network The PPP protocol information is encapsulated within an Ethernet frame or ATM frame Bridge BAS e a See
10. e SECURITY e SNMP e SYSLOG e TIME SYNC UTILITY Home Basic Advanced Status Admin Utility ADMIN SNMP SNMP Community and Trap Parameters Table of current community pool Index Status Access Right Community O 1 Disable as O2 Disable O3 Disable O4 Disable em O5 Disable a Reset Modity Table of current trap host pool Index Version IP Address Community O 1 Disable O2 Disable a O3 Disable m saat O4 Disable a O5 Disable Reset mic MI Mc MI G SHDSL bis Router User Manual VO 01 78 4 4 2 1 Community pool Press Modify to modify the community pool You can setup the access authority SNMP Community and Trap Parameters Table of current community pool Index Status Access Right Community 1 Disable Deny private E Disable Disable M A 0jnNn SNMP Status SNMP Community and Trap Parameters Table ofcurrent community pool Index Status Access Right Community 1 Disable private Disable Disable Disable Disable in oo no ee MT Access Right for deny all access Read for access read only Write for access read and write Community it serves as password for access right After configuring the community pool press OKI 4 4 2 2 Trap host pool SNMP trap is an informational message sent from an SNMP agent to a manager Click Modify to modify
11. 90 4 6 1 2 ERES a is ans 91 4 6 2 LAN to LAN connection with routing mode occcccoooncnccocnnnocononncnononononnnononanonnonanononanonenaninnnns 92 4 6 2 1 COS NAS 92 4 6 2 2 CPE Sid Ennii e i Av yah irie tebe AA tek bantetad TEN 93 5 CONFIGURATION VIA SERIAL CONSOLE OR TELNET WITH MANU DRIVEN INTERFACE 96 5S1 INTRODUC A O R 96 SLL SEHE 0 SO AAA o NT A T AE eR 96 SLA Tenet osaa ne N A E eRe nessa Neate 97 Sl Qperalon IN erd e riean A A R R 97 5 1 4 WV OW SUCUT O ide 99 5 1 5 Menu Driver Interface COMMANASusia id 100 5 2 MAIN MENU BEFORE ENABLE siii aiii iii EE 100 5 3 ENABLE iia telaa 101 5 4 STATUS dada 102 O A A escent areata arenes ree nant Denial ast cies Nae eater tothe ys tala det ha arcana 102 5 4 2 WO area acters itt esa E our suse E A eaten wane aaa E A O ua eaiameuNanees 103 5 4 3 AQUA 104 G SHDSL bis Router User Manual V0 01 2 SAA IME 2 EE AE OO eR EP OT Pee eI een re een TRA 104 A 21 10 RC eR Ae ee ee eC ve oe ee oe ee Oe ee 104 DAO PAOS a 105 PY AS cane Tr SY PPT Wee POET EAT SONNE Pe tree ONE PEPE eR wT Ene FeO aT ET Eee RoE TT oe Tees 105 SAO AOO Se REE eR DR PEPE RETEST CARO OREO TENOR TONE REE ONT wT Cn EO TOT erty ENE CONST oN errr reyes 106 5 5 SHOW ae cscs cna ira vineslenct E cereediaaeeenetamitaes 106 Sd Sytem naO oases avis Ri 107 592 CONFIGUTAUONINIOINQUON cas wissen Oe eae 107 59 3 CONFIGUIFATION With Script JOLIN is 107 5 6 A AA 107 5 REBOOT ill EARS 108 5
12. Encapsulation User Name Password DNS Server _ Host Name if applicable 3 2 Install the SHDSL bis Router A To avoid possible damage to this Router do not turn on the router before Hardware Installation Connect the power adapter to the port labeled DC IN on the rear panel of the product Connect the Ethernet cable Note Both 1 port router and 4 port router supports auto MDI MDIX switching so both straight through and cross over Ethernet cable can be used Connect the phone cable to the router and the other side of phone cable to wall jack Connect the power adapter to power source inlet Turn on the PC or NB to configure the Router G SHDSL bis Router User Manual V0 01 16 DB 9 Cross Ove Power Ethernet Cable Adapter Wall Jack Direct Connection with PC or NB for SHDSL bis 1 port router Server File Server a Mobile GF Device ca HUB Switch Power Adpater Ethernet Cable Wireless LAN Wall Jack 0 Connection with Hub Switch for SHDSL bis 1 port router Server Storage AE llana i Ey Wireless ccess Poin Note Book o _ i plc Y S Witching pe Mobile j a Hub a ri es Laser E Device i 7 Printer nn a PC Fl Power Adapter Ey PC Wall Jack G shdsi bis DB 9 Cable SHDSL bis 4 port router with complex network topology G SHDSL bis Router User Manual VO 01 17 4 Configuration via Web Browser zee 1 Click the start
13. Home Basic Advanced Status Admin Utility BASIC STEP2 LAN BASIC IP Address 192 168 o A hr gt ADVANCED Subnet Mask 255 i 255 p 255 y fo Default Gateway 192 1168 o 1254 STATUS DNS Server 1 168 9511 ADMIN DNS Server 2 168 95 192 1 gt UTILITY DNS Server 3 Host Name ono WANI VPI o VCI 32 Encap VC mux LLC EN Mc ce ce LAN IP 192 168 0 1 Subnet Mask 255 255 255 0 G SHDSL bis Router User Manual VO 01 23 Gateway 192 168 0 254 The Gateway IP is provided by ISP Host Name SOHO Some of the ISP requires the Host Name as identification You may check with ISP to see if your Internet service has been configured with a host name In most cases this field can be ignored WAN1 VPI 0 VCI 32 Encap Click and than Click to review Review Home Basic Advanced Status Admin Utility BASIC REVIEW REVIEW To let the configuration that you have changed take effect immediately please click Restart button to reboot the system To continue the setup procedure please click Continue button System Operation Mode System Mode Bridge Mode SHDSL bis Mode CPE Side LAN Interface IP Type Fixed IP Address 192 168 0 1 Subnet Mask 255 255 255 0 Gateway 192 168 0 254 DNS Server 1 168 95 1 1 DNS Server 2 168 95 192 1 DNS Server 3 Hostname SOHO WANI interface VPI 0 VCI 32 AAL5 Encap LLC The screen will prompt th
14. IP routing and transparent learning bridge to support Internet broadband services Virtual LANs VLANs offer significant benefit in terms of efficient use of bandwidth flexibility performance and Y security Support VPN pass through and MPLS pass through Built in advanced SPI firewall G SHDSL bis Router User Manual V0 01 5 XX NS SN SN SN SS OS Four 10 100M Base T Auto sensing Auto negotiation and Auto MDIX switching port for flexible local area network connectivity 4 port Router DMZ host Multi DMZ Multi NAT enables multiple workstations on the LAN to access the Internet for saving the cost of IP address Fully ATM protocol stack implementation over SHDSL PPPoA and PPPoE support user authentication with PAP CHAP MS CHAP IP precedence to partition the traffic into multiple classes of service SNMP management with SNMPv1 SNMPv2 agent and MIB II Getting enhancements and new features via Internet software upgrade Support RSTP feature for preventing bridge loops and providing automatic backup connection Support Dying Gasp Optional Support TR 069 Optional 1 2 Specification Routing Support IP TCP UDP ARP ICMP IGMP protocols IP routing with static routing and RIPv1 RIPv2 RFC1058 2453 IP multicast and IGMP proxy RFC1112 2236 Network address translation NAT PAT RFC1631 NAT ALGs for ICQ NetMeeting MSN Yahoo Messenger DNS relay and caching RFC1034 1035 DHCP server client and relay
15. Parameter Default Gateway 192 168 0 254 Static Bridge Parameter Deny PCs to access Internet except forward MACs Disable No MAC Address LAN WAN1 WAN2 WAN3 WAN4 WANS WANG WAN7 WANS 1 01 23 45 67 89 01 Filter Dynamic Dynamic Dynamic Dynamic Filter Filter Filter Filter The screen will prompt the parameters that will be written in NVRAM Check the parameters before writing in NVRAM Press to restart the router working with new parameters or press to setup another parameter G SHDSL bis Router User Manual VO 01 43 4 2 4 VLAN Click WLAN to configure VLAN BASIC ADVANCED SHDSL bis LAN WAN BRIDGE VLAN STP ROUTE NAT VIRTUAL SERVER FIREWALL IP Qos STATUS ADMIN UTILITY VLAN Virtual Local Area Network allows a physical network to be partitioned into multiple logical networks Devices on a logical network belong to one group A device can belong to more than one group With VLAN a device cannot directly talk to or hear from devices that are not in the same group With MTU Multi Tenant Unit applications VLAN is vital in providing isolation and security among the subscribers When properly configured VLAN prevents one subscriber from accessing the network resources of another on the same LAN VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain In traditional switched environments all broadcast packets go to each and ever
16. QoS Cancel ce ee STATUS ADMIN UTILITY v lt gt 4 2 1 1 Annex Type There are two Annex types Annex AF and Annex BG If the router will connect to your ISP please check with them for the correct setting If your routers are configured for point to point application you must choose one of the two types according to which line rate you need 4 2 1 2 Line Type There are five Line Types for you to choose 2 Wire 4 Wire Auto Fall Back StandBy and Multi link G SHDSL bis Router User Manual V0 01 36 2 Wire mode 2 wire router will provide data rate up to 5 696Mbps For 4 wires model it will only use the first pair for single pair DSL wire application 4 Wire mode 4 wire router will provide data rate up to 11 392Mbps In this mode each wire pairs of SHDSL bis router must be configured with the same line rate If one pair fails then the entire line must be restarted Auto Fall Back Mode Auto Fall Back Mode Two DSL pairs are working simultaneously When one pair is disconnected the other pair will keep working Stanby Mode Only one of two pairs are working the other pair is standby as back up If the working pair fails the standby pair will start up Multi Link Mode For 4 Wire model each pair will connect to a different remote device which may or may not be in the same location The routers can be used to create a daisy chain or ring network G SHDSL bis Router User Manual V0 01 37
17. RIP exchange with other routers Enable The router broadcasts the routing table of the router on the LAN and incoporates RIP broadcast by other routers into it s routing table Silent The router does not broadcast the routing table but it accepts RIP broadcast packets that it receives a Table of Current Interface RIP Parameter interface RIP Version Authentication Poison Authentication Mode Required Reverse Code LAN Disable 25 None 5 Enable e 2 None Enable None None Disable None WANS Disable None Disable None WANA Disable None Disable None WANS Disable None Disable None WANG Disable None Disable None WAN Disable None Disable None WANG Disable None Disable None MA eee ce RIP Version It determines the format and broadcasting method of any RIP transmissions by the gateway RIP v1 it only sends RIP v1 messages only RIP v2 it sends RIP v2 messages in multicast and broadcast format G SHDSL bis Router User Manual V0 01 51 Table of Current Interface RIP Parameter O OMe tee Oe LAN Disable 27 None Enable y WANT Disable None Enable None WANZ2 Disable None Disable None WANS Disable None Disable None WAN4 Disable None Disable None WANS Disable None Disable None WANG Disable None Disable None WAN Disable None Disable None WANS Dis
18. button Select setting and control panel Ed E antro J Panel 5 A Toskbark Start Menu ay Folder Options EZ Active Desktop 3 Windows Update Step 2 Double click the network icon E Control Panel Control Panel 2 Internet Keyboard a Options Network Configures network hardware and software k Microsoft Home Y va Sy Technical Support Multimedia Network ODBC Data Sources 32bit Regional Scanners and Settings Cameras Passwords Management y a Sounds ystem Telephony a 2 G SHDSL bis Router User Manual VO 01 18 In the Configuration window select the TCP IP protocol line that has been associated with your network card and then click property icon Network z x 2 Client for Microsoft Networks 3 D Link DFE 530T PCI Fast Ethemet Adapter Rev E Ya NetBEUI 4 TCP IP mn File and printer sharing for Microsoft Networks Hari REMORE Client for Microsoft Networks Choose IP address tab Select Obtain IP address automatically Click OK button TCPA P Properties Bidders SUITE Tete G SHDSL bis Router User Manual V0 01 19 The window will ask you to restart the PC Click Yes button 4 Cannot find server Microsoft Internet Explorer Fil Edit View Favorites Tools Help Address E 192 168 0 1 After rebooting your PC open IE or Netscape Browser to connect the Router Type http 192 168 0 1 The default IP address and sub
19. cel Authentication code You can set up a authentication code here After modifying the RIP parameters press finish The screen will prompt the modified parameter Check the parameters and perss to restart the router or press to setup another parameters G SHDSL bis Router User Manual V0 01 52 4 2 7 NAT DMZ NAT Network Address Translation is the translation of an Internet Protocol address IP address used within one network to a different IP address known within another network One network is designated the inside network and the other is the outside Typically a company maps its local inside network addresses to one or more global outside IP addresses and reverse the global IP addresses of incoming packets back into local IP addresses This ensure security since each outgoing or incoming request must go through a translation process that also offers the opportunity to qualify or authenticate the request or match it to a previous request NAT also conserves on the number of global IP addresses that a company needs and lets the company to use a single IP address of its communication in the Internet world DMZ Demilitarized zone is a computer host or small network inserted as a neutral zone between a company private network and the outside public network It prevents outside users from getting direct access to a server that has company private data In a typical DMZ configuration for an enterprise a separate computer
20. change the spanning tree algorithm reconfigures the spanning tree topology and reestablishes the link by activating the standby path Spanning Tree Protocol operation is transparent to end stations which are unaware whether they are connected to a single LAN segment or a switched LAN of multiple segments RSTP Rapid Spanning Tree Protocol defined in the IEEE 802 1w can be seen as an enhencement of the 802 1D standard Most parameters have been left unchanged so users G SHDSL bis Router User Manual 0 01 47 familiar with 802 1D can quickly configure the new protocol In most cases RSTP performs better than STP G SHDSL bis Router User Manual V0 01 48 4 2 6 Route If the Router is connected to more than one network it may be necessary to set up a static route between them A static route is a pre determined pathway that network information must travel to reach a specific host or network With Dynamic Routing you can enable the Router to automatically adjust to physical changes in the network s layout The Router using the RIP protocol determines the network packets route based on the fewest number of hops between the source and the destination The RIP protocol regularly broadcasts routing information to other routers on the network BASIC Y ADVANCED SHDSL bis LAN WAN BRIDGE VLAN STP ROUTE NAT VIRTUAL SERVER FIREWALL IP QoS STATUS ADMIN UTILITY Click to modify the routing information G SH
21. password associated with the user name above G SHDSL bis Router User Manual 0 01 30 Password confirm Enter the password again for confirmation Idle Time When you don t want the connection up all the time and specify an idle time on this field IP type A static IP address is a fixed IP that your ISP gives you A dynamic IP address is not fixed the ISP assigns you a differnet one each time you connect to the Internet The screen will prompt the parameters that will be written in NVRAM Check the parameters before writing in NVRAM Press to restart the router working with new parameters or press to continue fir setting another parameter Set up WAN1 VPI VCI Encap and Protocol Home Basic Advanced Status Admin Utility BASIC STEP4 WANI VPI lo VCI 32 AALS Encap VC mux LLC PPPoE NAT WAN VPI 0 VCI 33 AAL5 Encap gt Protocol IPoA EoA IPoA NAT or EoA NAT Click Next to hen the IP parameters For more understanding about NAT review NAT DMZ chapter Set up the WAN1 IP address Subnet Mask gateway and DNS Server Home Basic Advanced Status Admin Utility BASIC STEP5 WANI IP Address ho Ao 2 LE Subnet Mask 255 pss ps o Gateway ho ft LR LR DNS Server 1 1689511 7 DNS Server2 7 DNS Server3 MT MY IP Address 10 1 2 1 It is router IP address like from Internet Your ISP will provide it and you need to specify here Subnet mask 255 255 255 0
22. q an Disable 13 a as Disable 4 a Disable 5 Disable 6 Disable 7 Disable 8 Disable This information shows the status of all eight WAN interfaces G SHDSL bis Router User Manual VO 01 69 4 3 4 ROUTE BASIC ADVANCED Y STATUS e SHDSL bis e LAN eceeceeseesoeseseeoseoes INTERFACE FIREWALL IP QoS STP ADMIN ae UTILITY Routing tables contain a list of IP addresses Each IP address identifies a remote router or other network gateway that the local router is configured to recognize For each IP address the routing table additionally stores a network mask and other data that specifies the destination IP address ranges that remote device will accept Basic Advanced Status Admin Utility STATUS ROUTE IP Routing Table Information Destination Netmask Gateway Interface Portname E 0 0 0 0 0 0 0 0 192 168 0 254 192 168 0 1 E 192 168 0 0 255 255 255 0 directly 192 168 0 1 LAN E 127 0 0 1 255 255 255 255 directly 127 0 0 1 Loopback This information shows the IP routing table G SHDSL bis Router User Manual V0 01 70 4 3 5 INTERFACE BASIC ADVANCED Y STATUS e SHDSL bis e LAN WAN e FIREWALL IP QoS e STP ADMIN UTILITY Home Basic Advanced Status Admin Utility STATUS INTERFACE Interface Statist
23. the Router move down the cursor by pressing key K twice and select show command by key L you shall see a submenu and select system command in this submenu then the system will show you the general information SHDSL bis ROUTER General system information HCSY 148D 8000 4101606L Software Version 148D B006 4101606 Chipset PEF2462841 2 Firmware Version 1 1 1 5 7 004 Hostname SOHO System Up Time BDAY 1HR 41M IN Press Enter to Return Menu Window _ lt I K gt Hove up down lt L J gt Select Unselect lt U 0 gt Hove top bottom lt 70 gt Help G SHDSL bis Router User Manual V0 01 98 5 1 4 Window structure SHDSL bis ROUTER gt gt enable Modify command privilege status Show running system status show View system configuration ping Packet internet groper command exit Quit system Command enable lt CR gt Message lt I K gt Move up down lt L J gt Select Unselect lt U 0O gt Hove top bottom lt Q gt Help From top to bottom the window is divided into four parts 1 Product name SHDSL bis ROUTER 2 Menu field Menu tree prompts on this field Symbol gt gt indicates the cursor place 3 Configuring field You will configure the parameters in this field lt parameters gt indicates the parameters you can choose and lt more gt indicates that there is submenu in the title 4 Operation command for help The following table shows the parameter
24. the user name above Password confirm Enter the password again for confirmation Idle Time You can specify an idle time on this field when you don t want the connection up all the time IP type A static IP address is a fixed IP that your ISP gives you Adynamic IP address is not fixed the ISP assigns you a differnet one each time you connect to the Internet Press to finish setting The screen will prompt the parameters that will be written in NVRAM Check the parameters before writing in NVRAM Press to restart the router working with new parameters or press continue to setup other parameters 4 2 3 Bridge If you want to setup advanced filter function while router is working in bridge mode you can use BRIDGE menu to setup the filter blocking function Click to setup G SHDSL bis Router User Manual 0 01 41 BASIC T ADVANCED SHDSL bis LAN e NAT e VIRTUAL SERVER FIREWALL IP QoS STATUS gt ADMIN gt UTILITY Home Basic Advanced Status Admin Utility ADVANCED BRIDGE Generic Bridge Parameters General Parameter Default Gateway 192 168 0 254 Static Bridge Parameters Table of Current MAC Entries Deny PCs to access Internet except forward MACs Disable O Enable 00 00 00 00 00 00 Filter Filter 5 Filter v 1 2 Filter v 6 Filter v 3 Filter 7 Filter v 4 Filter v 8 Filter v E eed
25. to the router SHDSL bis line connection is established SHDSL bis handshake Transmitting or receiving data over SHDSL bis link LAN port connect with 10M NIC LAN port acts in 10M LAN port connect with 100M NIC LAN port acts in 100M SHDSL bis line connection is dropped SHDSL bis self test 11 2 2 Rear Panel The rear panel of SHDSL bis router is where all of the connections are made LAN LINE 1 2 3 4 Rear Panel of SHDSL bis 4 wire 2 wire 4 port router bridge CONSOLE LINE MI az Rear Panel of SHDSL bis 2 wire 1 port router bridge Connectors Description of SHDSL bis 4 ports router DC IN Power adaptor inlet Input voltage 12VDC LAN 1 2 3 4 Four Ethernet10 100BaseT auto sensing and auto MDI MDIX for LAN ports RJ 45 CONSOLE RS 232C DB9 for system configuration and maintenance LINE SHDSL bis interface for WAN port RJ 45 RST Reset button for reboot or load factory default Connectors Description of SHDSL bis 1 port router DC IN Power adaptor inlet Input voltage 12VDC LAN Ethernet 10 100BaseT auto sensing and auto MDI MDIX for LAN port RJ 45 CONSOLE RS 232C DB9 for system configuration and maintenance LINE SHDSL bis interface for WAN port RJ 45 RST Reset button for reboot or load factory default A The reset button can be used only in one of two ways 1 Press the Reset Button for one second will cause system reboot 2 Pressing the Reset Button for four seconds will cause the product to load th
26. words you will lose all the existing configured parameters 4 5 3 2 Restore Configuration Sometimes the configuration could crush accidentally lt will help you to recover the backup configuration easily Click after selecting Restore Configuration Browse the route of backup file then press Finishl Brower the location of restore file name or enter the name directly Then press OK The router will automatically restore the saved configuration 4 5 3 3 Backup Configuration After completing the configuration of the router please use this function to backup your router parameters in the PC Select the and then press Finish Browse the location of backup file name or enter the name directly Then press OK The router will automatically backup the configuration If you don t enter a file name the system will use the default config 1 log Home Basic Advanced Status Admin Utility UTILITY CONFIG TOOL Backup Configuration Press OK button to backup the system configurtion to the PC G SHDSL bis Router User Manual VO 01 86 4 5 4 Upgrade You can upgrade the router by using the upgrade function Press Upgrade in UTILITY BASIC ADVANCED STATUS ADMIN Y UTILITY e SYSTEM INFO SYSLOG CONFIG TOOL Peseeeneccseecceesaseesccssseescesns RESTART Home Basic Atvanced status Admin Utility UTILITY FIRMWARE UPGRADE Firmware Upgrade Please select the firmware file that you want and press Ok but
27. 8 PIN a N do eerie geatnettaee 108 39 ADMINISTRATION titi ei a idis 108 5 9 1 A A LORY SOOPER Coe TS ne AEO MY OPE OR ee ene Sanna nee 109 II SECCU AP AO 110 II SNMP tad A da es o ae 111 5 9 4 COMMUN V o ba 112 5 9 4 1 GAD THOSE aa E e cleadnececus N ENN 112 395 SUDCTVISOF Password and Dada ii 113 SO INP ld talent 115 5 10 Mg lo CR o E E A N E A E E A E cede 117 5 10 1 O 117 5 10 2 BOC id 117 5 10 3 ROSSO O REEE A A A A LAA A 118 5 11 O O 118 S12 0 4 0 00 PP PE O A 118 5 12 1 OD CFO On MOE aia 119 5 12 2 A T EO EE E E EE OE 119 SAZA Modernitas oia 120 5 12 2 2 Hna io ao etico dias od 120 5 12 2 3 Ns 120 5 12 2 4 RU NS ATN ee yer ae aces onder ace eats cues ese a eae seca ae stent oe eel eee 120 5 12 2 5 ATINE E eset ce ae I EET PIE TEE OEN OEE PENEN PATEE OSENI obo IENNE IN O PATEE ies 120 5 12 2 6 O AA 121 5 12 2 7 PrOD EEN N A O RO LO 121 5 12 2 8 TELVA A 121 5 12 2 9 E E IS O O E A 121 5 12 3 VAIN EAEN AT AENA A AES EA E T AE AE E AES OE AEN ea ade 121 5 12 3 1 PROTOCOL int A 122 5 12 3 2 PAJO SS Suaren aa NA aa Ra a N a NE 122 5 1233 WIP IPN Clio Ro 122 5 12 3 4 EGAPSU Atl Dir A EA A AAA AAA 122 5 12 3 5 VC OOS ira Noa 122 5 12 3 6 SP td 123 5 12 3 7 PTE A ee ane alm nae is a ete 123 5 12 3 8 A E EE E E 123 5 12 4 BROS ana 123 5 12 4 1 ROW AY sacred O 123 5 12 4 2 Stato Bride Table ran NI Guiana panies E easeeee bene 124 G SHDSL bis Router User Manual VO 01 3 IZI VEAN A A RE E EA E 125 512541 BOD LO VLAN ia ts ered
28. A IP 192 168 0 254 etmaskK O N t gq Gateway 192 168 0 254 SEA ERY De IP 192 168 0 2 knep VCI 32 Netmask 255 255 255 0 Encapsulation LLC Gateway 192 168 0 254 G SHDSL bis Router User Manual VO 01 34 4 2 Advanced Setup Advanced setup contains SHDSL bis LAN WAN Bridge VLAN Ethernet Route NAT DMZ Virtual SERVER FIREWALL and IP QoS parameters BASIC A SRE LAN WAN BRIDGE VLAN STP ROUTE NAT VIRTUAL SERVER FIREWALL IP QoS STATUS gt ADMIN gt UTILITY 4 2 1 SHDSL bis You can setup the Annex type data rate and SNR margin for SHDSL bis parameters in SHDSL bis Click SHDSL bis G SHDSL bis Router User Manual V0 01 35 BASIC e SHDSL bis e LAN e WAN e VLAN SIP e ROUTE e NAT e VIRTUAL SERVER e FIREWALL IP Qos STATUS ADMIN gt UTILITY Enter Parameters in SHDSL bis SHDSL bis EFM ATM Basic Advanced Status Admin Utility ADVANCED SHDSL bis Operation Mode BASIC A Setup Operation Mode Annex Type Annex AF 9 Annex BG ADVANCED pee ee ee o e SHDSL bis ype 72 Wire 4 Wire Auto Fall Back StandBy Multilink LAN TCPAM Type Auto OTCPAM 16 OTCPAM 32 e WAN Data Rate n 64kbps 89 range 3 89 e BRIDGE e VLAN SNR margin 0 range 10 10 e STP TC Layer O EFM Layer ATM Layer spe Rate Mode Fixed O Adaptive e VIRTUAL SERVER e FIREWALL IP
29. ATM DSLAM SHDSL bis Router Bridge EFM or ATM mode SHDSL bis Router Bridge EFM or ATM mode Point to point connection G SHDSL bis Router User Manual VO 01 9 2 Getting to know about the router This section will introduce hardware of the router 2 1 Front Panel The front panel contains LEDs which show the status of the router Par R LNK ACT L SHOSE bis Wan Front Panel of SHDSL biz 4 port routerfbridge PWR LNK act 0M ACT 100MW ACT ALM Front Panel of SHOSL bis 1 port router bridge LED status of SHDSL bis 4 port router LEDs Active Description PWR On Power on LNK On SHDSL bis line connection is established WAN Blink SHDSL bis training ACT On Transmitting or receiving data over SHDSL bis link On Ethernet cable is connected to LAN 1 Blink Transmitting or receiving data over LAN 1 On Ethernet cable is connected to LAN 2 LAN Blink Transmitting or receiving data over LAN 2 3 On Ethernet cable is connected to LAN 3 Blink Transmitting or receiving data over LAN 3 4 On Ethernet cable is connected to LAN 4 Blink Transmitting or receiving data over LAN 4 ALM On SHDSL bis line connection is dropped Blink SHDSL bis self test G SHDSL bis Router User Manual VO 01 10 LED status of SHDSL bis 1 port router LEDs Active PWR On On WAN EDS Blink ACT Blink On 10M ACT Blink LAN On 100M ACT Blink On AL Blink G SHDSL bis Router User Manual VO 01 Description Power adaptor is connected
30. DSL bis Router User Manual V0 01 49 Home Basic Advanced Status Admin Utility ADVANCED ROUTE Static Route and RIP Parameters Table of Current Static Route Entries General RIP Parameter RIP Mode Disable Enable Auto RIP Summary Disable C Enable Table of Current Interface RIP Parameter aA PO FLAN Disable 2 None Enable Cwant Disable 2 None Enable Noe ee C wan2 Disable None Disable None CwaN3 Disable None Disable None C wana Disable None Disable None a C WANS Disable None Disable None CWANG Disable None Disable None C WANT Disable None Disable C WANS Disable None Disable There are maximun 20 entries to set up the static router Press Add to add each entry For example there are 20 entries as follows Static Route and RIP Parameters Table of Current Static Route Entries 7 RESTO 5 RAURI 29 CP eat PA re ee ST RT St OL ie er ork Adare SUD af F a A toa Pe inc as tee 01 192 168 1 1 255 255 255 0 192 168 0 254 62 192 168 2 2 255 255 255 0 192 168 0 254 O3 192 168 3 3 255 255 255 0 192168 0 254 O4 19216844 255 255 255 0 192 168 0 254 OS 192 168 5 5 255 255 255 0 192 168 0 254 6 19216866 255 255 255 0 192 168 0 254 O7 192 168 7 7 255 255 255 0 192168 0 254 Os 19216888 255 255 255 0 192 168 0 254 Os 192 168 9 9 255 255 255 0 192 168 0 254
31. EWALL Multi DMZ IP QoS irtual IP Address Global IP Address gt ADMIN 2 WAN1 V UTILITY al pow y 13 4 WAN1 V 5 WANI Y 3 WAN1 V 9 wan Y 10 WANI V d a E B Z gt a DEA Count Ea 1 0 0 WANT v 3 0 0 WAN1 y oo om E If you want to enable the NAT DMZ functions click Enable The IP address assigned to the WAN will enable DMZ function for the virtual IP address 4 2 7 1 Multi DMZ Some users have two or more global IP addresses assigned by ISP can use multi DMZ The table is for mapping of global IP address and virtual IP address 4 2 7 2 Mutli NAT Some of the virtual IP addresses eg 192 168 0 10 192 168 0 50 collectively use two of the global IP addresses eg 69 210 1 9 and 69 210 1 10 The Multi NAT table will be setup as Virtual Start IP Address 192 168 0 10 Count 40 Global Start IP Address 69 210 1 9 Count 2 Press to continue to review The screen will prompt the parameters that will be written in NVRAM Check the parameters before writing in NVRAM Press to restart the router working with new parameters or to configure another parameter G SHDSL bis Router User Manual VO 01 54 4 2 8 Virtual Server This section guides you to configure Virtual Servers Click Virtual Server to configure the parameters BASIC y ADVANCED e SHDSL bis LAN
32. Firewall Security Hint This level enables basic firewall security all DoS protection and the SPI filter function C Advanced Firewall Security Hint A user can determine the security level for special purpose environment and applications by configuring the DoS protection and defining an extra packet filter with higher priority than the default SPI filter Note that an improper filter policy may degrade the capability of the firewall and or even block the normal network traffic This level enables basic firewall security all DoS protection and the SPI filter function Press to complete setting firewall G SHDSL bis Router User Manual V0 01 58 Home Basic Advanced status Admin Utility ADVANCED FIREWALL Firewall Security Level Review To let the configuration that you have changed take effect immediately please click Restart button to reboot the system To continue the setup procedure please click Continue button Firewall Security Level Security Level Automatic Firewall Security DoS Protection Parameters Review Detect SYN Attack Enable SYN Attack Threshold 200 packets per second Detect ICMP Flood Enable ICMP Flood Threshold 200 packets per second Detect UDP Flood Enable UDP Flood Threshold 200 packets per second Detect PING of Death Attack Enable TA Detect Land Attack Enable gt Detect IP Spoofing Attack Enable Detect Smurf Attack Enable aces Detect Fraggle Attack Enable 2a Packet Filtering Parameters Revi
33. If you change the default port number then you will have to let user who wish to use the service know the new port number The default value is 23 On trust host list configured 0 0 0 0 will allow all hosts on Internet or LAN to access the router Leaving blank of trust host list will cause blocking all PC from WAN to access the router On the other hand only PC in LAN can access the router If you type the excact IP address in the filed only the host on this listing can access to the router Click to finish the setting G SHDSL bis Router User Manual V0 01 77 The browser will prompt the all configured parameters and check it before writing into NVRAM Press to restart the gateway working with the new parameters and press to setup other parameters 4 4 2 SNMP Simple Network Management Protocol SNMP provides for the exchange of messages between a network management client and a network management agent for remote management of network nodes These messages contain requests to get and set variables that exist in network nodes in order to obtain statistics set configuration parameters and monitor network events SNMP communications can occur over the LAN or WAN connection The router can generate SNMP traps to indicate alarm conditions and it relies on SNMP community strings to implement SNMP security This router support both MIB and MIB ll Click SNMP to configure the parameters BASIC ADVANCED STATUS y ADMIN
34. N 2 to WAN 8 G SHDSL bis Router User Manual V0 01 39 ADVANCED WAN WAN Interface Parameters Table of Current WAN Interface Parameter No WAN vc ISP sem os ltest Protocol Disable vet o IP Address 192 168 114 VCI B2 o Password esses Subnet Mask 7 EE OLE AALS Encap LLC Password Confirm esse ts 1 QoS Class UBR Idle Time ho t QoS PCR 11392 Redial Time B o oo QoS SCR 41392 IP Type Dynamic QoS MBS i Protocol Disable VPI fo Username fest tt IP Address 19216821 VCI B3 o Password esses ts Subnet Mask 255 255 955 lAAL5 Encap LLC Password Confirm ense SCS S 2 QoS Class UBR y Idle Time ho o QoS PCR 41392 Redial Time Boo QoS SCR 44399 IP Type Dynamic QoS MBS lr Enter the parameters Protocol If WAN Protocol is PPPoA or PPPoE with dynamic IP leave the default WAN IP Address and Subnet Mask as default setting The system will ingore the IP Address and Subnet Mask information but leaving blanks in default setting will cause system error If the WAN Protocol is IPoA or EoA leave the ISP parameters as default setting The system will ingore the information but leaving blanks in default setting will cause system error VC mux VC based Multiplexing Each protocol is assigned to a specific virtual circuit VC based multiplexing may be dominant in environments where dynamic creation of
35. Name with DHCP Client mode Home Basic Advanced Status Admin Utility BASIC STEP2 LAN IP Type C Fixed pt laa idh Client IP Address i92 fics f0 fi Subnet Mask 255 Ps fo HostName SOHO Trigger DHCP Service Disable Server Relay Mc MA ee LAN IP Type Dynamic DHCP Client Click Next to set up WAN1 parameters DHCP relay If you have a DHCP server in LAN and you want to use it for DHCP services the product provides DHCP relay function to meet your need Home ERILE Advanced Status Admin Utility BASIC STEP2 LAN IP Type Fixed Dynamic DHCP Client IP Address 132 168 fo f Subnet Mask 255 255 _ 1255 fo Host Name SOHO Trigger DHCP Service Disable Sewer Relay IP Type IP Address 192 168 0 1 Subnet Mask 255 255 255 0 Host Name SOHO Some of the ISPs require the host name as identification You may check with your ISP to see if your Internet service has been configured with a host name In most cases this field can be ignored Trigger DHCP Service Set up the DHCP Server Press to setup Remote DHCP server parameter Home Basic Advanced Status Admin Utility BASIC STEP 3 DHCP RELAY Remote DHCP Server Parameter IP address 192 168 0 124 When using DHCP relay service the remote DHCP server IP address must be entered Enter DHCP server IP address in IP address field Press G SHDSL bis Router User Manual V0 01 29 Set up th
36. O10 192 168 10 10 255 255 255 0 192 168 0 254 011 192 168 11 11 255 255 255 0 192 168 0 254 O12 192 168 12 12 255 255 255 0 192 168 0 254 O13 192 168 13 13 255 255 255 0 192 168 0 254 O 14 192 168 14 14 255 255 255 0 192 168 0 254 O18 192 168 15 15 255 255 255 0 192 168 0 254 O16 192 168 16 16 255 255 255 0 192 168 0 254 O17 192 168 17 17 255 255 255 0 192 168 0 254 18 192 168 18 18 255 255 255 0 192 168 0 254 O 19 192 168 19 19 255 255 255 0 192 168 0 254 20 192 168 20 20 255 255 255 0 192 168 0 254 r To modify the RIP Routing information protocol Parameters RIP Mode Auto RIP Summary Press Modify G SHDSL bis Router User Manual VO 01 50 General RIP Parameter Auto RIP Summary ODisable Enable Table of Current Interface RIP Parameter ae ee RIP AO Authentication Poison Authentication Mode Required Reverse Code LAN Disable 2 None Enable None O WAN1 Disable 2 None Enable None O WAN2 Disable None Disable None O WAN3 Disable None Disable None O WAN4 Disable None Disable None O WAN5 Disable None Disable None O WANG Disable None Disable None O WANT Disable None Disable None O WAN8 Disable None Disable None i Ma RIP Mode This parameter determines how the router handle RIP Routing information protocol RIP allows it to exchange routing information with other router Disable The gateway does not participate in any
37. PN pass through and QoS Because of rapid growth of network virtual LAN has become one of the major new areas in internetworking industry The SHDSL bis routers supports the port based and IEEE 802 1q VLAN over ATM network or EFM network The SHDSL bis routers support 10Base T 100Base T auto negotiation and auto MDI MDIX switching port to meet the enterprise need The SHDSL bis routers provide advanced firewall with DoS protection serving as a powerful firewall to protect from outside intruders of secure connection The firewall routers also support IP precedence to classify and prioritize types of IP traffic The 4 port routers models support four ports 10Base T 100Base T auto negotiation and auto MDI MDIX switching ports to meet the enterprise need The SHDSL bis routers allow customers to leverage the latest in broadband technologies to meet their growing data communication needs User can gradually migrate from ATM based access networks to Ethernet based access networks This means the device can be installed in an existing ATM network When the network migrates to Ethernet the same device can be re used in the Ethernet network without on site intervention The unique feature of combining ATM and EFM access in the same device leverages a smooth migration of the access network 1 1 Features v Support both EFM mode and ATM mode Y Easy configuration and management with password control for various application environments Efficient
38. This is the router subnet mask seen by external users on Internet Your ISP will provide it to you Gateway 10 1 2 2 Your ISP will provide you the default gateway DNS Server 1 168 95 1 1 Your ISP will provide at least one DNS Domain Name System Server IP address G SHDSL bis Router User Manual 0 01 31 Click Next to review Review Home Basic Advanced Status Admin Utility BASIC REVIEW To let the configuration that you have changed take effect immediately please click Restart button to reb continue the setup procedure please click Continue button a System Operation Mode SystemMode Route Mode SHDSL Mode CPE Side a LAN Interface ap Address 192 168 0 1 Hostname SOHO Trigger DHCP service Enable DHCP server 192 168 0 1 StartlP address 192 168 0 2 End IP address 192 168 051 DNS Server 1 192 168 0 1 ONSSewer3 Leasetime 72hours Table of Fxed DHCP Host List Index MAC Address IP Address PoC a TE a 2 E cs Cd A gt ee goos sO ah vill The screen will prompt the parameters that will be written in NVRAM Check the parameters before writing in NVRAM Press to restart the router working with new parameters or press to setup another parameter G SHDSL bis Router User Manual V0 01 32 4 1 3 Reference diagram Bridge mode When configured in Bridge Mode the router will act as a pass through device and
39. WAN BRIDGE VLAN SIR ROUTE NAT VIRTUAL SERVER FIREWALL IP QoS STATUS ADMIN UTILITY Home Basic Advanced Status Admin Utility ADVANCED VIRTUAL SERVER Virtual Server Mapping Parameters Table of Current Virtual Server Entries Index e 4 f i Interface Private IP Protocol Schedule Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable G2 C3 C4 O5 C6 C7 C8 C9 C 10 Up to ten virtual servers index form 1 to 10 can been configured G SHDSL bis Router User Manual VO 01 55 Press Modify to modify index 1 Home Basic Advanced Status Admin Utility ADVANCED VIRTUAL SERVER Virtual Server Mapping Parameters Virtual Server 1 Protocol DISABLE v Interface WAN1 Service Name 7 Private IP Private Port 0 0 Public Port 0 o Schedule Always O From Day Sunday Y to Saturday Y Time 0 Mv 0 Mito 23 Mi 59 M Type the necessary parameters and then click OK Press to restart the router or press to setup another function For example You can setup the router as Index 1 protocol TCP interface WAN1 service name testi private IP 192 168 0 2 private port 80 public port 80 schedule from Day Monday to Friday and time 8 0 to 16 0 and index 2 protocol UDP interface WAN1 service name test2 p
40. able None Disable None MA eee ce Authentication required None for RIP there is no need of authentication code Password the RIP is protected by password authentication code MD5 The RIP will be decoded by MD5 then protected by password authentication code Table of Current Interface RIP Parameter e Aaaa ume a LAN Disable 2 y None Enable WANI Disable 2 None Enable None WAN2 Disable Disable None WANS Disable Disable None WAN4 Disable Disable None WANS Disable Disable None WANG Disable Disable None WAN Disable Disable None WANS Disable Disable None E Md cel Poison Reserve Poison Reserve is for the purpose of promptly broadcast or multicast the RIP while the route is changed ex shuting down one of the routers in routing table Enable the gateway will actively broadcast or multicast the information Disable the gateway will not broadcast or multicast the information Table of Current Interface RIP Parameter A Varian Mircea items eo LAN Disable 2 y None Enable WANI Disable 2 None None WAN2 Disable None Disable None WANS Disable None Disable None WAN Disable None Disable None WANS Disable None Disable None WANG Disable None Disable None WAN Disable None Disable None WANS Disable None Disable None E a
41. allow the workstations on your LAN to have public addresses directly on the internet Bridge BAS Na a sen A IP 192 168 0 254 etmask lt N 4 7 un Y Gateway 192 168 0 254 SA Ey DSLAM e l d IP 192 168 0 2 VPI 0 VCI 32 Netmask 255 255 255 0 Encapsulation LLC Gateway 192 168 0 254 IPoA or EoA IPoA Dynamic IP over ATM interfaces carries IP packets over AAL5 AAL5 provides the IP hosts on the same network with the data link layer for communications In addition to allow these hosts to communicate on the same ATM networks IP packets must be tuned somewhat AS the bearer network of IP services ATM provides high speed point to point connections which considerably improve the bandwidth performance of IP network On the other hand ATM provides excellent network performance and perfect QoS EoA Ethernet over A TM protocol is commonly used to carry data between local area networks that use the Ethernet protocol and wide area networks that use the ATM protocol Many telecommunications industry networks use the ATM protocol ISPs who provide DSL services often use the EoA protocol for data transfer with their customers DSL modems EoA can be implemented to provide a bridged connection between a DSL modem and the ISP In a bridged connection data is shared between the ISP s network and their customer s as if the networks were on the same physical LAN Bridged connections do not use the IP protocol EoA
42. ck button to reboot the system To continue the setup procedure please click button G SHDSL bis Router User Manual V0 01 65 BASIC ADVANCED PR e SHDSL bis LAN WAN e ROUTE e INTERFACE e FIREWALL IP QoS STP ADMIN UTILITY On STATUS item you can monitor the following SHDSL bis Mode Line rate and Performance information including SNR margin atteunation and CRC error count LA IN IP type MAC address IP address Subnet mask and DHCP client table Type IP address and MAC address wan N interface information 8 WAN interface including IP address Subnet Mask VPI VCI Encapsulation Protocol and Flag N AN ROUTE IP routing table including Flags Destination IP Netmask Gateway Interface and Portname TERFACE LAN and WAN statistics information FIREWALL Current DoS protection status and dropped packets statistics TP IPQos Show IP QoS statistics on LAN interface ste STP information include Bridge parameter and Ports Parameter G SHDSL bis Router User Manual VO 01 66 4 3 1 SHDSL bis BASIC ADVANCED Y STATUS e WAN e ROUTE e INTERFACE e FIREWALL e IP QoS e STP ADMIN UTILITY Home Basic Advanced Status Admin Utility STATUS SHDSL bis Status Information Run Time Device Status SHDSL bis Status Channel A Channel B SHDSL bis Mode CPE Side CPE Side Line Rate n 64 0 Kbps 0 Kbps Performance Information E Local Side Remote Side Channe
43. dress When an organization sets up its computer users with a connection to the Internet an IP address must be assigned to each machine Without DHCP the IP address must be entered manually at each computer If computers move to another location in another part of the network a new IP address must be entered DHCP lets a network administrator to supervise and distribute IP addresses from a central point and automatically sends a new IP address when a computer is plugged into a different place in the network If the DHCP server is Enable you have to setup the following parameters for processing it as DHCP server The embedded DHCP server assigns network configuration information at most 253 users accessing the Internet at the same time G SHDSL bis Router User Manual V0 01 27 Setup the DHCP Server parameters and fixed DHCP host table Home Basic Advanced Status Admin Utility BASIC STEP3 DHCP SERVER General DHCP Parameter Start IP Address 192 168 0 20 End IP Address 192 168 0 51 DNS Server1 19216801 DNS Server2 DNS Server3 Lease Time m2 hours Table of Fixed DHCP Host Entries Hint The format of the MAC Address is 12 34 56 718 9A BC Index MAC Address IP Address gt E o ooff N an wm A w Start IP Address This field specifies the first of the contiguous addresses in the IP address pool End IP Address The field specifies the last of the contiguous addre
44. e SHDSL bis ITU T G 991 2 2004 Annex A B F G supported Encoding scheme TC PAM 16 TC PAM 32 Data Rate N x 64kbps N 3 89 89 as default 2 wire Router Data Rate N x 128Kbps N 3 89 89 as default 4 wire Router Impedance 135 ohm G SHDSL bis Router User Manual 0 01 7 Compliant with IEEE 802 3ah LAN Interface 4 ports switching hub 4 port model 10 100 Base T auto sensing and auto negotiation Auto MDI MDIX Hardware Interface WAN RJ 45 x 1 LAN RJ 45 x 1 1 port Router RJ 45 x 4 4 port Router Console RS232 female Reset Button Load factory default Indicators General PWR WAN LNK ACT LAN 10M ACT 100M ACT 1 port Router LAN 1 2 3 4 4 port Router SHDSL bis ALM Physical Electrical Dimensions 18 7 x 3 3 x 14 5cm WxHxD Power 100 240VAC via power adapter Power consumption 9 watts maximum Temperature 0 45 C Humidity 0 95 RH non condensing Memory 2MB Flash Memory 16MB SDRAM Products Information lt 2 Wire G Shdsl bis ATM EFM Firewall Router with 1 LAN Port lt 2 Wire G Shdsl bis ATM EFM Firewall Router with 4 LAN Ports lt 4 Wire G Shdsl bis ATM EFM Firewall Router with 4 LAN Ports G SHDSL bis Router User Manual VO 01 8 1 3 Applications SHDSL bis Router ATM Mode SHDSL bis Router EFM Mode DT Y EA SHDSL bis Router ATM Mode SS SHDSL bis Router EFM Mode O Y Combination with EFM or
45. e WAN1 VPI VCI Encap and Protocol Home Basic Advanced Status Admin Utility BASIC STEP4 WANI VPI lo VCI 32 AALS Encap OVC mux LLC Protocol IPoA y Wigs PPPoE NAT VPI 0 VCI 33 AAL5 Encap LLC Protocol PPPoA NAT or PPPoE NAT Click Next to setup User name and password For more understanding about NAT review NAT DMZ chapter If the Protocol using PPPoA NAT or PPPoE NAT you must setup the ISP s parameters on the following Home Basic Advanced Status Admin Utility BASIC STEP4 ISP1 Username fest ts Password eo 7 Password Confirm pe o o Idle Time ho minutes IP Type Dynamic y IP Address 1192 168 1 1 Type the ISP1 parameters Username test Password test Password Confirm test Your ISP will provide the user name and password Idle Time 10 You want your Internet connection to remain on at all time enter 0 in the Idle Time field IP Type Dynamics The default IP type is Dynamic It means that ISP PPP server will provide IP information including dynamic IP address when SHDSL bis connection is established On the other hand you do not need to type the IP address of WAN1 Some of the ISP will provide fixed IP address over PPP For fixed IP address IP Type IP Address 192 168 1 1 Click Next Note For safety the password will be prompt as star symbol Username Enter the user name exactly as your ISP assigned Password Enter the
46. e factory default setting and lose all of your configuration When you want to change its configuration but forget the user name or password or if the product is having problems connecting to the Internet and you want to configure it again press the Reset Button for four seconds with a paper clip or sharp pencil G SHDSL bis Router User Manual VO 01 12 2 3 SHDSL bis Line Connector Below figures show the pin asignment of SHDSL bis line cord plugs 4 wire 2 wire Loop Front View mT Front View Fil Top View 2 4 Console Cable Below figure shows the pins asignment of the cosole cable O gure 2 RxD O e No connection e No comnedion SSS o Noconnecion SSS G SHDSL bis Router User Manual V0 01 13 3 Installing the Router This guide is designed to let users configure the G Shdsl bis router through Web GUI or Serial Console in the easiest and quickest way possible Please follow the instructions carefully Note There are three methods to configure the router Serial Console Telnet and Web Browser Only one configuration application is used to setup the Router at any given time Users have to choose one method to configure it For Web configuration you can skip item 3 For Serial Console Configuration you can skip item 1 and 2 3 1 Check List 1 Check the Ethernet Adapter in PC or NB Make sure that Ethernet Adapter had been installed in PC or NB for configuration of the router TCP IP protocol is necessa
47. e newly configured parameters When using bridge mode the protocol mode must be set to Ethernet over ATM EoA Checking the parameters and Click Restart The router will reboot with the new setting or to configure other parameters G SHDSL bis Router User Manual V0 01 24 4 1 2 Routing Mode Parameter Table CO side CPE side I I SHDSL WANI Protocol ease time DHCP Server Host Entries DHCP Relay IP address G SHDSL bis Router User Manual V0 01 H Fixed Dynamic DHCP Client Disable Server Relay VC mux LLC IPoA IPoA NAT EoA EoA NAT PPPoA NAT PPPoE NAT gt Q gt Q ae T gt gt qe gt O gt Q S gt gt ala j gt QO at ea tenn tenn Gan fan 25 The flow chart of route mode setup LAN setup Dynamic IP DHCP Client DHCP Relay DHCP Server Disable DHCP Server Remote Setting DHCP Server IP Setting L a WAN1 setup IPoA IPOA NAT EoA PPPoA NAT EoA NAT PPPoE NAT ISP s parameters Routing mode contains DHCP server DHCP client DHCP relay Point to Point Protocol over ATM and Ethernet and IP over ATM and Ethernet over ATM You have to clarify which Internet protocol is provided by ISP Setup up system mode and SHDSL mode Home Ba
48. een will prompt the parameters that will be written in NVRAM Check the parameters before writing in NVRAM Press to restart the router working with new parameters or press continue to setup another parameter G SHDSL bis Router User Manual VO 01 95 5 Configuration via Serial Console or Telnet with Manu Driven Interface In this section the detail of menu driven user interface will be described as follows 5 1 Introduction 5 1 1 Serial Console Check the connectivity of the RS 232 cable Connect the male 9 pin end of console port of the router and connect the female end to a serial port of your computer Start your terminal access program by VT100 terminal emulation with the following parameters Parameter Value Baudrate 9600bps Data Bits 8 Parity Check No Stop Bits 1 Flow control No Press the SPACE key until the login screen appears When you see the login screen you can logon to Router GTI SHOSL 4H FH Yersion 6127 Annex BG ACS 14A1 0000 S22108B0 14A1 0000 S221 0860 AAC Address 00 03 79 90 02 11 SOHO ROUTER ROUTE HODE LAH IF Address 192 168 0 1 Subnet Mask 255 2 HANA IP Address 192 168 1 1 Subnet Mask 255 2 ress SPACE key to enter console node configuration Note Only SPACE key invoke the login prompt Pressing other keys does not work Users admin Password Note The factory default User and Password are admin both G SHDSL bis Router User Manual VO 01 96 ser adnin a
49. ees 125 5 12 5 2 PORE Based VEAN sn uneeaeeettanans 127 5 12 6 SP ridad 127 127 O EE EE O E Ae hen E ene E E te a 127 5 12 7 1 RN 128 5 12 7 2 IO 129 5 12 8 LAN A RA 130 5 12 9 IPS y e Cs AAA PRE PC RE yg e a 131 5 12 9 1 WMA NA eee ene en ISRO 131 5 12 9 2 A E 134 5 12 9 3 A E E RNA OO 135 5 12 10 A O eE ITNT ACT NTT FETT Orr me yy earner trer rer ent a eer ar 136 SIZOT Firewall security ive adas 136 SA210A Packet ANS aaa iia 137 ZAS DOS PON aora 138 5 12 11 PP OOS a A dos 140 5 12 12 DARE eater eice pel E A ten ete rces cider ean tuba neen tagad peueae tebe ear sean dened 141 5 12 12 1 DIFCPSErver pene So 142 iZ 12 2 DACP SERVER crea HOST eenean E 142 212 3 DHCP RO ii A A A Aa 143 5 12 13 DNS POY A NS 143 5 12 14 HOST TIONG A tada 144 5 12 15 PP C ee See CERI RC ASS aS E RT eR eT 144 G SHDSL bis Router User Manual V0 01 4 Descriptions The SHDSL bis Symmetric High Speed Digital Subscriber Loop Routers with ATM EFM layer comply with G 991 2 2004 standard optimized for small to medium size business environment It provides business class multi range from 192Kbps to 5 696Mbps for 2 wire model and 384Kbps to 11 392Mbps for 4 wire model symmetric payload rates over exiting copper wire The various pair bonding techniques make it suitable for any types of DSL infrastructure The SHDSL bis routers are integrated high end Bridging Routing capabilities with advanced functions of Multi DMZ virtual server mapping V
50. eral minutes later Press to reboot the router When the restart button was clicked the router will restart and the browser session will be disconnected This may appear as if your browser session is hung up After the router restarts you may either click the browser s reload button or close the browser and re open it later G SHDSL bis Router User Manual V0 01 89 4 6 Example 4 6 1 E IP 192 168 0 1 Netmask 255 255 255 0 PC XA IP 192 168 0 100 Netmask 255 255 255 0 Gateway 192 168 0 1 VPI 0 VCI 32 Encapsulation LLC LAN to LAN connection with bridge Mode IP 192 168 0 2 Netmask 255 255 255 0 Y IP 192 168 0 200 Netmask 255 255 255 0 Gateway 192 168 0 2 4 6 1 1 CO side Click and CO Side to setup Bridging mode of the Router and then click Next Advanced status Admin Utility BASIC STEP1 Home Basic Operation Mode A SHDSL Mode COSide CPE Side Basic Advanced Status Admin Utility BASIC STEP2 LAN IP Address 192 A 168 i lo f Subnet Mask 255 A 255 i 255 i lo Gateway 1192 1168 P lo hl Host Name SOHO WANI WPI lo YCE 32 Encap YC mux LLC Enter LAN Parameters IP 192 168 0 1 Subnet Mask 255 255 255 0 Gateway 192 168 0 1 G SHDSL bis Router User Manual V0 01 90 Host Name SOHO Enter WAN1 Parameters VPI 0 VCI 32 Click Click The screen will prompt the new configured parameters Check the parame
51. etimes the technicians need it to troubleshoot problems Chipset This is the SHDSL bis chipset model name Firmware Version This is the chipset s firmware version Host Name This is the system name in BASIC Setup It is for identification purposes System Time This field displays the router s present date and time System Up Time This is the total time that the router has been on 4 5 2 SYSLOG BASIC ADVANCED STATUS ADMIN Y UTILITY e SYSTEM INFO e SYSLOG Eertoseeseeeseoeesesesseansese e CONFIG TOOL e UPGRADE e LOGOUT e RESTART SHDSL bis routers support detailed logging via Syslog function The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event message The router can generate a syslog message and send it to a syslog server Press SYSLOG it sends the syslog messages shown as follows G SHDSL bis Router User Manual VO 01 84 Home Basic Advanced Status Admin Utility UTILITY SYSLOG System Log 1 lt 129 gt Jan 1 2009 00 00 41 SOHO Shdsl bis Link Up 2 lt 129 gt Jan 1 2009 00 00 46 SOHO Shdsl bis Link Down 3 lt 129 gt Jan 1 2009 00 00 46 SOHO ShdsI bis Link Up 4 lt 129 gt Jan 1 2009 00 00 46 SOHO Shdsl bis Local ch 0 DataRate 5696kbps SNR 19 dB Attn 1 dB 5 lt 129 gt Jan 1 2009 00 00 54 SOHO ShdslI bis Remote ch 0 DataRate 5696kbps SNR 18 dB Attn 1 dB 6 lt 129 gt Jan 1 2009 00 00 00 SOHO Syste
52. ew General Packet Filtering Parameter Trigger Packet Filtering Service Disable Drop Fragmented Packets Disable Access Policies Index Enable Protocol Direction Action Source Destination TCP Flag ICMP Type Schedule Description Pool is Empty The screen will prompt the parameters which will be written in NVRAM Please check these parameters Press to restart the router or press Continue to setup another function User can determine the security level for special purpose environment and applications by configuring the DoS protection and defining an extra packet filter Please note that an improper filter policy may degrade the capability of the firewall and or even block the normal network traffic 4 2 9 3 Advanced Firewall Security Click Advanced Firewall Security and then press Finish Home Basic Advanced Status Admin Utility ADVANCED FIREWALL Firewall Security Level Firewall security level Security Level Basic Firewall Security Hint This level only enables the NAT firewall and the remote management security The NAT firewall will take effect if NAT function is enabled The remote management security is default to block any WAN side connection to the device Non empty legal IP poolin ADMIN will block all remote management connection except those IPs specified in the pool C Automatic Firewall Security Hint This level enables basic firewall security all DoS protection and the SPI filter function Hi
53. ics Port InOctets InPackets LAN 763903 6690 643888 179 o 0 wAN1 o 0 o 0 0 0 OutOctets OutPackets InDiscards OutDiscards This table shows the interface statistics Octet is a group of 8 bits often referred to as a byte Packet is a formatted block of data carried by a packet mode computer networks often referred to the IP packet InOctets The field shows the number of received bytes on this port InPactets The field shows the number of received packets on this port OutOctets The field shows the number of transmitted bytes on this port OutPactets The field shows the number of transmitted packets on this port InDiscards The field shows the discarded number of received packets on this port OutDiscards The field shows the discarded number of transmitted packets on this port G SHDSL bis Router User Manual VO 01 71 4 3 6 FIREWALL BASIC ADVANCED Y STATUS SHDSL bis LAN WAN ROUTE INTERFACE IP QoS STP ADMIN UTILITY Home ETE Advanced Status Admin Utility STATUS FIREWALL Current Firewall Status DoS Protection Status All DoS protections are disabled Dropped Packets Statistics Packets dropped by DoS protection 0 Packets dropped by SPI filter Packets dropped by packet filter 0 This information shows firewall status DoS protection and dropped packets statistics G SHDSL bis Router User Ma
54. idth that is available during the connection life time This bandwidth is characterized by Peak Cell Rate PCR Based on the PCR of the CBR traffic specific cell slots are assigned for the VC in the schedule table The ATM always sends a single cell during the CBR connection s assigned cell slot G SHDSL bis Router User Manual V0 01 40 VBR rt Varible Bit Rate real time is intended for real time applications such as compressed voice over IP and video comferencing that require tightly constrained delays and delay variation VBR rt is characterized by a peak cell rate PCR substained cell rate SCR and maximun burst rate MBR VBR nrt Varible Bit Rate non real time is intended for non real time applications such as FTP e mail and browsing PCR Peak Cell Rate in kbps The maximum rate at which you expect to transmit data voice and video Consider PCR and MBS as a menas of reducing lantency not increasing bandwidth The range of PCR is 384kbps to 11392kbps SCR Substained Cell Rate The sustained rate at which you expect to transmit data voice and video Consider SCR to be the true bandwidth of a VC and not the long term average traffic rate The range of SCR is 384kbps to 11392kbps MBS Maximum Burst Size Refers to the maximum number of cells that can be sent at the peak rate The range of MBS is 1 cell to 255 cells Username Enter the user name exactly as your ISP assigned Password Enter the password associated with
55. igured parameters and check it before writing into NVRAM G SHDSL bis Router User Manual VO 01 82 4 5 Utility BASIC ADVANCED STATUS ADMIN SYSTEM INFO SYSLOG e CONFIG TOOL e UPGRADE LOGOUT e RESTART This section will describe the utility of the product including SYSTEM INFO _ Show the system information YSLOG Capturing log information CONFIG TOOL eoan the raco default configuration restore configuration and backup configuration PGRADE Upgrade the firmware OGOUT Logout the system RESTART Restart the router 4 5 1 System Info Click System Info to view the information BASIC ADVANCED STATUS ADMIN Y UTILITY Grteceeneveseccenesceseceseesoeescesesccnssenseesen CONFIG TOOL UPGRADE LOGOUT RESTART The browser will prompt the system information G SHDSL bis Router User Manual V0 01 83 Home ERY LB Advanced Status Admin Utility UTILITY SYSTEM INFO General System Information MCSV 14A1 0000 5221D8B0 Software Version 11441 0000 5221D880 Chipset CX98102 11Z Firmware Version G127 Host Name SOHO System Time 2002 01 01 00 59 30 GMT 8 00 System Up Time ODAY OHR 59MIN lt will display general system information including MCSV software version chipset firmware version Host Name System Time and System Up Time MCSV For internal identification purposes Software Version This is the router s firmware version Som
56. ination addresses or ranges of addresses to which this packet filter rule applies Address 0 0 0 0 is equivalent Any Schedule Select everyday always or the day s of the week to apply the rule Enter the start and end times in the hour minute format to apply the rule For example If you want to ban all of the protocol from the IP e g 200 1 1 1 to access the all PCs e g 192 168 0 2 192 168 0 50 in the LAN key in the parameter as Protocol ANY Direction INBOUND INBOUND is from WAN Action DENY Description Hacker Src IP Address 200 1 1 1 Dest IP Address 192 168 0 2 192 168 0 50 Schedule You can set always or any time range which you want Press OK to finish Home Basic Advanced Status Admin Utility FIREWALL PKT FILTER Packet Filtering Parameters General Packet Filtering Parameter Trigger Packet Filtering Service Disable Enable Drop Fragmented Packets Disable Enable Access Policies Index Enable Protocol Direction Action Source Destination TCP Flag ICMP Type Schedule Description Pool is Empty The screen will prompt the configured parameters Click Enable on Trigger Packet Filtering Service item to active the packet filtering service Click Enable on Drop Fragmented Packets item to active the drop fragmented packets operation You can modify or delete the access policies by click Modify or command G SHDSL bis Router User Manual VO 01 62 4 2 10 IP QoS
57. ine aeante et Oe RT A 39 4 2 2 WAN ra A A tata 39 ADB BOJE vias asec A E ET tad teidandudiocderceatdte ules un tude davon O aides 41 4 2 4 VIN dias 44 4 2 4 1 S02 1O Tag Based VLAN ii ita 45 4 2 4 2 POnt Based VLAN aaa AAA AAA 45 PED SM o linia 47 A O O 49 DIT NAT Z inc 53 4 2 7 1 Melt OMZ EE SEA ESA A SAA AA 54 4 2 7 2 M t NA T aaa AAA 54 ADS VUOS ANOT ai idos 55 ADOS SEI CW ira des anasoe tesa giasdeeunsadetereneaeneniieases 57 4 2 9 1 Basie Firewall Secundarios 57 4 2 9 2 Automatic Firewall Security asenna ana a a 58 4 2 9 3 Advanced Firewall Security ai A E 59 4 2 10 O E EA E E TN 63 4 3 o A E 66 G SHDSL bis Router User Manual V0 01 1 PS NOS ODIS A AAA iaa 67 Zo AN AAA tds 68 4 3 3 WAN ass 69 TO ROI TEN AR aa 70 LR ANTER ACE E ad 71 dad REWARDS 72 TI A O RR SO 73 o MERA A A a le 74 4 4 ADMINISTRATO Narea ni dd idas 76 4 4 1 SOUTO Aena 76 END OL NO 78 4 4 2 1 COMUN DOO uranio 79 4 4 2 2 Tap Hot Pookie a E EEA 79 Aa SO AO 80 4 4 4 TIOS CS a 81 4 4 4 1 SY WCPO Za Oi WWI N PE resida 81 4 4 4 2 SNTE VAG tad 82 4 5 UTILITY AN 83 AL SISTE NI Do a 83 A ARS 84 MS CONO OO AN aa 85 4 5 3 1 Load Factory Detalla SNA AS 86 4 5 3 2 Restore conte raton ta a 86 4 5 3 3 BACKUP CONTE UI A AA A A A Ad 86 AO 87 4 5 5 POG OU Case A O oven eatha westeres 88 ASO O RN 89 4 6 EXAMP Escalada 90 4 6 1 LAN to LAN connection with bridge IMOJE oocccoooconococconocononnonannonncnonononannononaroconanonnnnnos 90 4 6 1 1 COS a
58. ing line command mode We will not discuss command mode in this manual The default user name on and Password are admin G SHDSL bis Router User Manual V0 01 76 Legal address pool will setup the legal IP addresses from which authorized person can configure the router This is the more secure function for network administrator to setup the legal address of configuration Home Basic Advanced Status Admin Utility ADMIN SECURITY Supervisor Profile and Security Parameters Supervisor ID and Password Supervisor ID ro ot Supervisor Password Password Confirm ias User Profile ID UserName User Password Password Confirm Ul Mode Vfadmin ee Menu E 2f Corman 5 f Command gt 4 5 PE E o 5 Po eon General Parameters Telnet Port 23 Trust Host List Warning the special trust host IP of 0 0 0 0 allows the access from any hosts on internet D IP Address ooo mn E Q N gt Oo co O Li This is the default supervisor ID and password is roof It is highly recommended that you change these for security purpose Supervisor ID Type the new ID Supervisor Password Type the existing password roof is the default password when shipped Password Confirm Retype your new password for confirmation Telnet Port For Telnet you may change the default service port by typing the new port number
59. k topology Forwarding When a port receives or sends data In other words this is operating normally Disabled This is when the network administrator has disabled the port Blocking this means the port was blocked to stop a looping condition G SHDSL bis Router User Manual VO 01 75 4 4 Administration This session introduces security and simple network management protocol SNMP and time synchronous BASIC ADVANCED STATUS e SNMP e SYSLOG e TIME SYNC UTILITY 4 4 1 Security For system secutiry please change the default user name and password in the first setup otherwise unauthorized persons can access the router and change the parameters There are three ways to configure the router Web browser telnet and serial console Press to setup the parameters BASIC ADVANCED STATUS sneaneneareenecesenesseassnseeserens e TIME SYNC UTILITY For greater security change the Supervisor ID and password for the router If you don t set them all users on your network can be able to access the router using the default Supervisor IP and Supervisor Password is roof You can authorize five legal users to access the router via telnet or console only There are two UI modes menu driven mode and line command mode to configure the router There are two Ul modes menu and command mode for telnet or console mode to setup the Router The menu is meaning menu driven interface mode and Command is mean
60. l A Channel B Channel A Channel B SNR Margin 0 dB 0 dB 0 dB 0 dB Attenuation 0 dB 0 dB 0 dB 0 dB CRC Error Count 0 0 0 0 Clear CRC Error The status information shows this is a 4 wire model which has both channel A and B If the router has connected to a remote side it can also show the performance information of remote side lt the router is 2 wire model you will not see any information on channel B Click Clear CRC Error can clear the CRC error count G SHDSL bis Router User Manual V0 01 67 4 3 2 BASIC ADVANCED y STATUS e SHDSL bis geeeeeeeseceees INTERFACE FIREWALL IP QoS STP ADMIN UTILITY LAN Basic Advanced Status Admin Utility STATUS LAN LAN Interface Status General status IP Type Fixed MAC Address 00 03 79 99 02 11 IP Address 192 168 0 1 Subnet Mask 255 255 255 0 DHCP client table Type Client IP Address Client MAC Address Table is Empty This information shows the LAN interface status and DHCP client table G SHDSL bis Router User Manual V0 01 68 4 3 3 WAN BASIC ADVANCED y STATUS e SHDSL bis e LAN WAN e ROUTE e INTERFACE e FIREWALL IP QoS STP ADMIN UTILITY Home Basic Advanced Status Admin Utility STATUS WAN WAN Interface Information ID IP Address Subnet Mask VPI VCI Encapsulation Protocol Flag 1 192 168 1 1 255 255 255 0 0 32 LLC IPoA Down 2
61. large numbers of ATM VCs is fast and economical LLC LLC based Multiplexing One VC carries multiple protocols with protocol identifying information being contained in each packet header Despite the extra bandwidth and processing overhead this method may be advantagrous if it is not practical to have a sepatate VC for each carried protocol VPI Virtual Path Identifier is for set uo ATM Permanent Virtual Channels PVC The valid range for VPI is 0 to 255 VCI Virtual Channel Identifier is for set up ATM Permanent Virtual Channels PVC The valid range for VCI is 32 to 65535 0 to 31 is reserved for local management of ATM traffic QoS Quality of Service class The Traffic Management Specification V4 0 defines ATM service cataloges that describe both the traffic transmitted by users onto a network as well as the Quailty of Service that the network needs to provide for that traffic There are four classes to be selected UBR CBR rt VBR and nrt VBR Select CBR to specify fixed bandwidth for voice or data traffic Select UBR for applications that are not time sensitive such as e mail Select VBR for bursty traffic and bandwidth sharing with other applications UBR Unspecified Bit Rate is the simplest service provided by ATM networks There is no guarantee of anything It is a primary service used for transferring Internet traffic over the ATM network CBR Constant Bit Rate is used by connections that require a static amount of bandw
62. layer protocol type you want to prioritize ex TCP or UDP The default is ANY Precedence type the session s prioritized level you classify 0 is lowest priority 5 is highest priority Click OK when all parameters are finish Home Basic Advanced Status Admin Utility ADVANCED IP QoS IP QoS Parameters General IP QoS Parameters Trigger IP QoS Service Disable Enable IP QoS Policies Index Enable Protocol Local ji Remote Precedence Description an EN 192 168 1 10 192 168 0 15 192 168 0 25 O1 ON ANY 0 65535 30 0 test1 r PA 192 168 0 15 192 168 0 25 0 0 0 0 02 ON 8 ANY 1024 5640 5 test 2 You can modify or delete the policies by click Modify or command G SHDSL bis Router User Manual VO 01 64 Click can make a review for all IP QoS parameter Home Basic Advanced status Admin Utility ADVANCED IP QoS IP QoS Parameter Review To let the configuration that you have changed take effect immediately please click Restart button to reboot the system To continue the setup procedure please click Continue button General IP QoS Parameter IP QoS Service Enable IP QoS Policies Index Enable Protocol Local Remote Precedence Description PT T 192 168 110 192 168 0 15 192 168 0 25 1 ON ANY e 80 A p 192 168 0 15 192 168 0 25 0 0 0 0 2 ON ANY 80 1024 5640 a To let the IP QoS configuration you have changed and want those take effect immediately please cli
63. lect the syslog server facility The log facility allows you to send logs to different files in the syslog server Syslog Server Setup 3 Specify an server name to which all syslog messages will be sent 4 Specify a UDP port number to which the syslog server is listening The default value is 514 Make sure this is not blocked from your firewall G SHDSL bis Router User Manual VO 01 80 Press to finish the setup The browser will prompt the configured parameters and check it before writing into NVRAM 4 4 4 Time Sync Time synchronization is an essential element for any business which relies on the IT system The reason for this is that these systems all have clock that is the source of timer for their filing or operations Without time synchronization these system s clocks vary and cause the failure of firewall packet filtering schedule processes compromised security or virtual server working in wrong schedule Click TIME SYNC gt BASIC gt ADVANCED STATUS Y ADMIN e SECURITY e SNMP e SYSLOG UTILITY Time synchronization has two methods Sync with PC Synchronization with PC SNTP v4 0 Simple Network Time Protocol with Version 4 4 4 4 1 Synchronization with PC For synchronization with PC select Sync with PC The router will synchronize the time with the connecting PC The function can supported on both bridge and router mode Home Basic Advanced Status Admin Utility ADMIN TIME SYNC
64. m Power Up 7 lt 129 gt Jan 1 2009 00 00 40 SOHO ShdsI bis Link Up 8 lt 129 gt Jan 1 2009 00 00 00 SOHO System Power Up gt 9 lt 129 gt Jan 1 2009 00 00 40 SOHO ShdsI bis Link Up 10 lt 129 gt Jan 1 2009 00 00 00 SOHO System Power Up 11 lt 129 gt Jan 1 2009 00 03 18 SOHO System User Reboot by console 12 lt 129 gt Jan 1 2009 00 00 00 SOHO System Power Up iw 13 lt 129 gt Jan 1 2009 00 01 07 SOHO ShdsI bis Link Up 14 lt 129 gt Jan 1 2009 00 01 08 SOHO Shdsl bis Link Down 15 lt 129 gt Jan 1 2009 00 01 08 SOHO ShdsI bis Link Up lt 129 gt Jan 1 2009 00 01 13 SOHO Shdsl bis Local ch 0 DataRate 5696kbps SNR 19 dB Attn 1 dB 4 5 3 Config Tool BASIC ADVANCED STATUS ADMIN vy UTILITY e SYSTEM INFO perseesseesnesesesoseeceeoeseesoessesessesesesssessey RESTART This configuration tool has three functions load Factory Default Restore Configuration and Backup Configuration Press CONFIG TOOL Home Basic Advanced Status Admin Utility UTILITY CONFIGURATION TOOL Select Configuration Tool Configuration Tool Load Factory Default y Load Factory Default Restore Configuration Backup Configuration G SHDSL bis Router User Manual VO 01 85 Choose the function and then press 4 5 3 1 Load Factory Default Load Factory Default It will load the factory default parameters to the router Note This action will change all of the settings to factory default value In other
65. net mask of the Router is 192 168 0 1 and 255 255 255 0 Because the router acts as DHCP server in your network the router will automatically assign IP address for PC or NB in the network Enter Network Password E ax yo Please type pour User name and password Site 192 168 0 1 Realm System Setup User Name root Password E Save this password in your password list Cancel Type User Name root and Password root and then click OK The default user name and password is both root For the system security suggest changing them after configuration Note After changing the User Name and Password strongly recommend you to save them because the next time when you login the User Name and Password have to be the new ones you changed G SHDSL bis Router User Manual VO 01 20 Function Listing Following is the G SHDSL bis router full function listing BASIC Quick Setup ADVANCED e SHDSL bis LAN WAN BRIDGE VLAN STP ROUTE NAT DMZ VIRTUAL SERVER FIREWALL e P QoS STATUS e SHDSL bis LAN WAN ROUTE INTERFACE FIREWALL IP QoS e STP ADMIN e SECURITY e SNMP e SYSLOG e TIME SYNC UTILITY e SYSTEM INFO SYSLOG CONFIG TOOL FIRMWARE UPGRADE LOGOUT RESTART Note If the router is not the 4 wire model the menu will not display the status of SHDSL bis channel B G SHDSL bis Router User Manual VO 01 21 4 1 Basic Setup The Basic Setup contains Bridge or Route operation mode Users can use it to
66. ng Service Disable Enable Drop Fragmented Packets Disable Enable Access Policies Index Enable Protocol Direction Action Source Destination TCP Flag ICMP Type Schedule Description Pool is Empty It can setup the packet filter rule parameters Home Basic Advanced Status Admin Utility PKT FILTER RULE 1 Packet Filter Rule Parameters Filter rule Protocol ANY Direction INBOUND OUTBOUND Action DENY PERMIT Description Permit for mail server Sre IP Address 0 0 0 0 e g Any 0 0 0 0 Single 10 0 0 1 Dest IP Address 192 168 0 111 Range 192 168 0 1 192 168 0 76 Schedule Always From Day Sunday gt to Saturday Time O y fo y to 23 7 59 7 Select the Protocol and configure the parameter Protocol ANY TCP UDP ICMP GRE RSVP ESP and AH ANY means all protocol Transmission Control Protocol User Datagram Protocol Internet Control Message Protocol Generic Routing Encapsulation Resource Reservation Protocol Encapsulating Security Payload Authentication Header G SHDSL bis Router User Manual VO 01 61 Direction INBOUND from WAN to LAN or OUTBOUND from LAN to WAN Action DENY block or PERMIT allow Description Type a description for your customized service Src IP Address The source addresses or ranges of addresses to which this packet filter rule applies Address 0 0 0 0 is equivalent Any Dest IP Address The dest
67. nt A user can determine the security level for special purpose environment and applications by configuring the DoS protection and defining an extra packet filter with higher priority than the default SPI filter Note that an improper filter policy may degrade the capability of the firewall and or even block the normal network traffic A user can determine the security level for special purpose environment and applications by configuring the DoS protection and defining an extra packet filter Please notice that an improper filter policy may degrade the capability of the firewall and even block the normal network traffic G SHDSL bis Router User Manual V0 01 59 It can set up the DoS protection parameters Home Basic Advanced Status Admin Utility FIREWALL DoS PROTECTION DoS Protection Parameters l Detect SYN Attack SYN Attack Threshold 200 packets per second Detect ICMP Flood ICMP Flood Threshold 200 packets per second Detect UDP Flood UDP Flood Threshold 200 packets per second Detect PING of Death Attack Detect Land Attack Detect IP Spoofing Attack Detect Smurf Attack Detect Fraggle Attack SYN flood A SYN flood is a form of denial of service attack attempts to slow your network by requesting new connections but not completing the process to open the connection Once the buffer for these pending connections is full a server will not accept any more connections and will be unresponsive ICMP flood A sender t
68. nual VO 01 72 4 3 7 IP QoS BASIC ADVANCED Y STATUS e SHDSL bis LAN e WAN e ROUTE e INTERFACE UTILITY Home Basic Advanced Status Admin Utility STATUS IP QoS IP QoS Statistics LAN Interface Precedence InOctets InPackets OutOctets OutPackets OutDiscardOctets OutDiscardPackets olojojojojo a olojojojojlo u e ofolja ao lju ojejeje ejejejin 99 9 ojo S a 9 9 S9 o o O This information shows IP QoS statistics Octet is a group of 8 bits often referred to as a byte Packet is a formatted block of data carried by a packet mode computer networks often referred to the IP packet InOctets The field shows the number of received bytes on this port InPactets The field shows the number of received packets on this port OutOctets The field shows the number of transmitted bytes on this port OutPactets The field shows the number of transmitted packets on this port OutDiscardsOctets The field shows the discarded number of transmitted bytes on this port OutDiscardsPackets The field shows the discarded number of transmitted packets on this port G SHDSL bis Router User Manual VO 01 73 4 3 8 STP BASIC ADVANCED Y STATUS SHDSL bis LAN WAN ROUTE INTERFACE FIREWALL e b UTILITY Home Basic Advanced Status Admin Utility Status Information Bridge Parameter STP Function Enable B
69. olsiolo olololo slololo olololololololo olololololololo ololololiolololo olololololololoa G SHDSL bis Router User Manual VO 01 46 4 2 5 STP BASIC Y ADVANCED SHDSL bis LAN WAN BRIDGE VLAN STP ROUTE NAT VIRTUAL SERVER FIREWALL IP QoS STATUS ADMIN UTILITY This Web page allows you to configure Bridge STP Parameters as Disable STP or RSTP Home Basic Advanced status Admin Utility ADVANCED STP Bridge STP Parameters Genera l Parameter Mode Disable STP C RSTP Bridge Priority ls 32768 STP Spanning Tree Protocol defined in the IEEE 802 1D is a link management protocol that provides path redundancy while preventing undesirable loops in the network For an Ethernet network to function properly only one active path can exist between two stations Multiple active paths between stations cause loops in the network If a loop exists in the network topology the potential exists for duplication of messages When loops occur some switches see stations appear on both sides of the switch This condition confuses the forwarding algorithm and allows duplicate frames to be forwarded To provide path redundancy Spanning Tree Protocol defines a tree that spans all switches in an extended network Spanning Tree Protocol forces certain redundant data paths into a standby blocked state If one network segment in the Spanning Tree Protocol becomes unreachable or if Spanning Tree Protocol costs
70. onses are generated for only one attack the attacker is able use many amplifiers on the same victim Fraggle attack A Fraggle attack is a type of denial of service attack where an attacker sends a large amount of UDP echo traffic to IP broadcast addresses all of it having a fake source address This is a simple rewrite of the smurf attack code For SYN attack ICMP flood and UDP flood they can set up the threshold of packets number per second The default values are 200 packets per second If everything is working properly you probably do not need to change the threshold setting as the default threshold values Reduce the G SHDSL bis Router User Manual V0 01 60 threshold values if your network is slower than average Traditional firewall is stateless meaning they have no memory of the connections of data or packets that pass through them Such IP filtering firewalls simply examine header information in each packet and attempt to match it to a set of define rule If the firewall finds a match the prescribe action is taken If no match is found the packet is accepted into the network or dropped depending on the firewall configuration Packet filter Click can set up the packet filtering parameters If you want to configure the Packet Filtering Parameters choose Enable and press Home Basic Advanced Status Admin Utility FIREWALL PKT FILTER Packet Filtering Parameters General Packet Filtering Parameter Trigger Packet Filteri
71. or host receives requests from users within the private network to access via Web sites or other companies accessible on the public network The DMZ host then initiates sessions for these requests to the public network However the DMZ host is not able to initiate a session back into the private network It can only forward packets that have already been requested Users of the public network outside the company can access only the DMZ host The DMZ may typically also have the company s Web pages so these could serve the outside world However the DMZ provides access to no other company data In the event that an outside user penetrated the DMZ host s security the Web pages might be corrupted but no other company information would be exposed Press NAT to setup the parameters BASIC yv ADVANCED SHDSL bis LAN WAN BRIDGE VLAN STP ROUTE NAT VIRTUAL SERVER FIREWALL IP QoS STATUS ADMIN UTILITY G SHDSL bis Router User Manual VO 01 53 Home Basic Advanced Status Admin Utility ADVANCED NAT DMZ Network Address Translation and DMZ Hosts Parameters BASIC NAT DMZ function vy ADVANCED e SHDSL bis NAT DMZ Function Disable O Enable e WAN DMZ Host BRIDGE e VLAN DMZ Host Function Disable Enable STP Virtual IP Address ROUTE NAT Active Interface WAN1 Vv VIRTUAL SERVER e FIR
72. ransmits a volume of ICMP request packets to cause all CPU resources to be consumed serving the phony requests UDP Flood A UDP flood attack is a denial of service DoS attack using the User Datagram Protocol UDP A sender transmits a volume of requests for UDP diagnostic services which cause all CPU resources to be consumed serving the phony requests Ping of Death A ping of death abbreviated POD attack attempts to crash your system by sending a fragmented packet when reconstructed is larger than the maximum allowable size Land attack A land attack is an attempt to slow your network down by sending a packet with identical source and destination addresses originating from your network IP Spoofing IP Spoofing is a method of masking the identity of an intrusion by making it appeared that the traffic came from a different computer This is used by intruders to keep their anonymity and can be used in a Denial of Service attack Smurf attack The Smurf attack is a way of generating a lot of computer network traffic to a victim host That is a type of denial of service attack A Smurf attack involves two systems The attacker sends a packet containing an ICMP echo request ping to the network address of one system This system is known as the amplifier The return address of the ping has been faked spoofed to appear to come from a machine on another network the victim The victim is then flooded with responses to the ping As many resp
73. ridge ID 8000 000379 572002 Designated ROOT ID 8000 000379 572002 ROOT Port ROOT Path Cost None 0 Ports Parameter D Disable B Blocking LS Listening LN Learning F Forwarding WAN Port No LAN 1 2 3 4 5 6 T 8 State F D D D D D D D D This information shows the STP parameter The bridge parameters have Bridge ID The bridge ID of a configuration message is an 8 byte field The six low order bytes are the MAC address of the switch The high order two byte unsigned 16 bit integer field is the bridge priority number Designated Root ID The unique Bridge Identifier of the Bridge assumed to be the Root this parameter is used as the value of the Root Identifier parameter in all CBPDUs transmitted by the Bridge Root Port Identifies the Port through which the path to the Root is established and is not significant when the Bridge is the Root and is set to zero It is the Port Identifier of the Port that offers the lowest Cost Path to the Root G SHDSL bis Router User Manual 0 01 74 Root Path Cost The Cost of the Path to the Root from this Bridge this is equal to the sum of the values of the Designated Cost and Path Cost parameters held for the Root Port When the Bridge is the Root this parameter is zero The ports parameters have Learning This is when the modem creates a switching table that will map MAC addresses to port number Listening This is when the modem processes BPDU s that allow it to determine the networ
74. rivate IP 192 168 0 3 private port 25 public port 25 schedule always Home Basic Advanced Status Admin Utility ADVANCED VIRTUAL SERVER Virtual Server Mapping Parameters Table of Current Virtual Server Entries Index Service Name Interface Private IP Protocol Schedule OF test WANT 192 168 0 2 TCP 80 80 perei 02 test2 WAN1 192 168 0 3 UDP 25 25 Always 3 m To Disable m Os a Disable E O5 Disable O6 Disable 2 O7 i T l Disable O8 g Disable O9 m a m Disable m 10 m a a Disable me E Ms a ee G SHDSL bis Router User Manual VO 01 56 4 2 9 Firewall BASIC y ADVANCED SHDSL bis LAN WAN BRIDGE VLAN STE ROUTE NAT VIRTUAL SERVER FIREWALL IP QoS STATUS ADMIN UTILITY A firewall is a set of related programs that protects the resources of a private network from other networks lt prevents hackers to access your private data resource There are three security levels Basic firewall security Automatic firewall security and advanced firewall security 4 2 9 1 Basic Firewall Security Home Basic Advanced status Admin Utility ADVANCED FIREWALL Firewall Security Level Firewall security level Security Level Basic Firewall Security Hint This level only enables the NAT firewall and the remote management security The NAT firewall will take effect if NAT function is enabled The remote management securit
75. ry for web configuration so please check if the TCP IP protocol has been properly installed 2 Check the Web Browser in PC or NB According to the Web Configuration the PC or NB need to install Web Browser IE or Firefox Note Suggest to use IE8 0 Firefox V 21 0 or above and 1024x768 resolutions or above 3 Check the Terminal Access Program For Serial Console and Telnet Configuration users need to setup the terminal access program with VT100 terminal emulation 4 Determine Connection Setting Users need to know the Internet Protocol supplied by the Service Provider in order to determine the mode of setting Protocol Selection RFC1483 Ethernet over ATM RFC1577 Classical Internet Protocol over ATM RFC2364 Point to Point Protocol over ATM RFC2516 Point to Point Protocol over Ethernet G SHDSL bis Router User Manual V0 01 14 Different Protocols requires different WAN parameters After knowing the Protocol provided by your ISP please also ask for the necessary WAN parameters for set up Bridge EoA VPI _ VCI Encapsulation Gateway Host Name if applicable IPoA VPI _ VCI Encapsulation IP Address Subnet Mask Gateway DNS Server _ PPPoE VPI _ VCI Encapsulation User Name Password DNS Server _ Host Name if applicable G SHDSL bis Router User Manual VO 01 15 Route EoA VPI _ VCI Encapsulation IP Address Subnet Mask Gateway DNS Server _ VPI _ VCI
76. s Y Access v Access Y VID Virtual LAN ID It is a definite number of ID range from 1 to 4094 PVID Port VID It is an untagged member from 1 to 4094 of default VLAN Link Type Access means the port can receive or send untagged packets Trunk means that the prot can receive or send tagged packets By default the router initially configures one VLAN VID 1 A port such as LAN1 to LAN4 and WAN1 to WAN8 can have only one PVID but can have as many VIDs as the router can store in the VLAN table Ports in the same VLAN group share the same frame broadcast domin thus increase network performance through reduced boardcast traffic VLAN groups can be modified at any time by adding moving or changing ports without any re cabling 4 2 4 2 Port Based VLAN Port Based VLANs are VLANs where the packet forwarding decision is based on the destination MAC address and its associated port For setting Port Based VLAN Click Port Based VLAN The screem will prompt as follows G SHDSL bis Router User Manual VO 01 45 Home Basic Advanced Status Admin Utility ADVANCED VLAN Virtual LAN Parameters General Parameter Mode ODisable 802 1Q Tag Based VLAN Port Based VLAN Port Based VLAN Table No LAN1 WAN1 WAN2 WAN3 WAN4 WANS WANG WAN7 WANS olololojololols Dojo ojojo o alg Dojo ooo alg Dojooo0o0o0uk ooloDoo0o0o0a oolooo0o00o0a ololololololols ololololololols ololololololols ololololololols olololojololols ololololololols
77. s in the brackets Description lt ip gt An item enclosed in brackets is required If the item is shown in lower case bold it represents an object with special format For example lt ip gt may be 192 168 0 3 lt Route Bridge gt Two or more items enclosed in brackets and separated by vertical bars means that you must choose exactly one of the items If the item is shown in lower case bold with leading capital letter it is a command parameter For example Route is a command parameter in lt Route Bridge gt An item enclosed in brackets is optional 1 65534 t Two or more items enclosed in brackets and separated by vertical bars means that you can choose one or none of the items G SHDSL bis Router User Manual V0 01 99 5 1 5 Menu Driven Interface Commands Before changing the configuration familiarize yourself with the operations list in the following table The operation list will be shown on the window Move to Top Up Move to bottom Up apo Exit Down Enter Exit Down Enter G SHDSL bis Router User Manual VO 01 100 ERROR stackunderflow OFFENDING COMMAND STACK
78. setup the router quickly After completing the Basic Setup you can use the router to the access Internet or as LAN Extender This is the easiest way to configure the router Note The advanced functions are only for advanced users to configure the router Incorrect set up of advanced functions may affect the performance causing system error or even disconnection of the router geececccccccecccosseccecccsscesceo ADVANCED STATUS ADMIN UTILITY Click Basic for basic installation 4 1 1 Bridge Mode Parameter Table LAN DNS Server 3 WAN VC mux LLO DNS Server 2 So G SHDSL bis Router User Manual V0 01 22 The flow chart of bridge mode setup Start E LAN Setting WAN1 Setting Hie Setup up system mode and SHDSL mode Advanced Status Admin Utility Home Basic BASIC STEP1i Operation Mode System Mode ROUTE O BRIDGE SHDSL bis Mode OCO Side CPE Side Click and Side to setup Bridging mode and then click Next for the next setting This router can be setup as one of two SHDSL bis working mode CO Central Office and CPE Customer Premises Equipment For connection with DSLAM the SHDSL bis router s operation mode is CPE For LAN to LAN connection one side is CO and the other side is CPE Set up a LAN IP address Subnet Mask Default Gateway DNS Servers and Host Name b WAN1 VPI VCI and Encapsulation
79. sic Advanced Status Admin Utility BASIC STEP1 Operation Mode System Mode ROUTE BRIDGE SHDSL bis Mode CO Side CPE Side click ROUTE and CPE Side then press Next Set up the LAN IP address Subnet Mask Gateway Host Name and Trigger DHCP Service with fixed IP type G SHDSL bis Router User Manual V0 01 26 Home Basic Advanced Status Admin Utility BASIC STEP2 LAN IP Type Fixed Dynamic DHCP Client IP Address 192 168 Subnet Mask 255 1255 255 Host Name SOHO Trigger DHCP Service Disable Sewer Relay T N IP type IP Address 192 168 0 1 Subnet Mask 255 255 255 0 Host Name SOHO some of the ISPs require the host name as identification You may check with ISP to see if your Internet service has been configured with a host name In most cases this field can be ignored Trigger DHCP Service The default setup is Enable DHCP server If you want to turn off the DHCP service choose Disable If set DHCP server to Relay the router acts as a surrogate DHCP server and relays requests and responses between the remote server and the clients DHCP Server Dynamic Host Configuration Protocol DHCP is a communication protocol that lets network administrators to manage centrally and automate the assignment of Internet Protocol IP addresses in an organization s network Using the Internet Protocol each machine that can connect to the Internet needs a unique IP ad
80. sses in the IP address pool For example If the LAN IP address is 192 168 0 1 the IP range of LAN is 192 168 0 2 to 192 168 0 51 The DHCP server assigns the IP form Start IP Address to End IP Address The legal IP address range is form 0 to 255 but O are reserved as network name and 255 are reserved for broadcast It implies the legal IP address range is from 1 to 254 That means you cannot assign an IP greater than 254 or less then 1 Lease time 72 hours indicates that the DHCP server will reassign IP information in every 72 hours DNS Server1 DNS Server2 and DNS Servers Your ISP will provide at least one Domain Name Service Server IP You can type the router IP in this field The router will act as DNS server relay function There are three DNS servers to be used You may assign a fixed IP address to some device while using DHCP you have to put this device s MAC address in the Table of Fixed DHCP Host Entries There are ten fixed IP address locations that can be used Every Ethernet device has a unique MAC Media Access Control address The MAC address is assigned at factory and consists of six pairs of hexadecimal characters for example 00 03 79 0A 01 3F Press to setup WAN1 parameters Some of the ISP provides DHCP server service by which the PC in LAN can access IP information automatically To setup the DHCP client mode please follow the procedure G SHDSL bis Router User Manual V0 01 28 Set up IP address Subnet Mask Host
81. ter working with new parameters or press continue to setup another parameter 4 6 2 2 CPE side Click ROUTE and CPE Side then press Next Home Basic Advanced Status Admin Utility BASIC STEP1 Operation Mode System Mode ROUTE BRIDGE SHDSL Mode CO Side CPE Side G SHDSL bis Router User Manual VO 01 93 Basic Advanced Status Admin Utility BASIC STEP2 LAN IP Address 192 fiss y o f Subnet Mask 255 E 255 j 255 i lo Host Name ono Trigger DHCP Service Disable Enable E Mc Ms Me Type LAN parameters IP Address 192 168 10 1 Subnet Mask 255 255 255 0 Host Name SOHO DHCP Service or For more DHCP service review the chapter of DHCP Service Type the WAN1 Parameters Home Basic Advanced Status Admin Utility BASIC STEP4 WANI VPI lo VCI 32 AALS Encap O WYC mux LLC Protocol IPoA VPI 0 VCI 32 AAL5 Encap Protocol IPOA EA or Note The Protocols used in CO and CPE have to be the same Click to setup the IP parameters For more understanding about NAT review the chapter of NAT DMZ Basic Advanced Status Admin Utility BASIC STEP5 WANI IP Address 110 Subnet Mask 255 Gateway fio DNS Server 1 1168 95 1 DNS Server 2 DNS Server 3 100 MEN TP ME MA ecco IP Address 192 168 30 2 Subnet mask 255 255 255 0 Gateway 192 169 30 1 Click G SHDSL bis Router User Manual VO 01 94 The scr
82. ters and Click The router will reboot with the new setting 4 6 1 2 CPE Side Click Bridge and CPE Side to setup Bridge mode of the Router and then click Home Basic Advanced Status Admin Utility BASIC STEP1 Operation Mode pessecscese A gt SHDSL Mode COSide CPE Side Home Basic Advanced Status Admin Utility BASIC STEP2 LAN IP Address 1192 168 Subnet Mask 255 5 Gateway 192 6 M co 17 VT Host Name SOHO WANI VPI o VCI 32 Encap YC mux LLC Enter LAN Parameters IP 192 168 0 2 Subnet Mask 255 255 255 0 Gateway 192 168 0 2 Host Name SOHO Enter WAN1 Parameters VPI 0 VCI 32 Click Click The screen will prompt the new configured parameters Check the parameters and Click The router will reboot with the new setting G SHDSL bis Router User Manual VO 01 91 4 6 2 LAN to LAN connection with routing mode S 3 N I STU C CO E STU R CPE Router Router E eae gt IP 192 168 20 1 IPOA or EoA IP 192 168 10 1 lt Netmask 255 255 255 0 VPI 0 VCI 32 Netmask 255 255 255 0 JE ET E I a va UN i IP 192 168 30 1 IP 192 168 30 2 ME o Netmask 255 255 255 0 ed Netmask 255 255 255 0 pl o Gateway 192 168 30 2 Es Gateway 192 168 30 1 fy o A E IP 192 168 20 100 IP 192 168 10 200 Netmask 255 255 255 0 Netmask 255 255 255 0 _ Gateway
83. the line connection quality The range of SNR Margin is 10 to 21 If you set SNR margin in the field as 3 the SHDSL bis connection will drop and reconnect when the SNR margin is lower than 3 The device will reduce the line rate and reconnect for better line connection quality 4 2 1 6 TC Layer There are two TC layer setting on this router EFM layer and ATM layer It is based on the networks connected ATM based Access Network or Ethernet based Access Network G SHDSL bis Router User Manual V0 01 38 4 2 1 7 Rate Mode For adaptive mode you have to configure it in rate mode The router will adapt the optimal data rate according to the line status The screen will prompt the parameters that will be written in NVRAM Check the parameters before writing in NVRAM Press Restart to restart the router working with new parameters or press continue to setup another parameter 4 2 2 WAN The router can support up to 8 PVCs WAN 1 was configured via BASIC menu except QoS If you want to setup another PVCs such as WAN 2 to 7 those parameters can be configured on the pages of under ADVANCED On the other hand you don t need to setup WAN unless you apply two or more Internet Services with ISPs BASIC v ADVANCED SHDSL bis VIRTUAL SERVER e FIREWALL e IP Qos STATUS gt ADMIN gt UTILITY The parameters in WAN Number 1 has been setup in Basic Setup If you want to setup additional PVCs you can configure WA
84. the trap host pool m Table of current trap host pool Index Version IP Address Community 1 Disable 192 168 0 254 private 3 4 Disable 5 Disable ee ee Version select version for trap host Version 1 is for SNMPv1 for SNMPv2 IP Address type the trap host IP address Community type the community password The community is setup in community pool Press OK to finish the setup The browser will prompt the configured parameters and check it before writing into NVRAM G SHDSL bis Router User Manual VO 01 79 Press Restart to restart the gateway working with the new parameters and press to setup other parameters 4 4 3 SYSLOG Syslog is a standard method of centralizing various logs You can use a syslog server to store your servers logs in a remote location for later perusal or long term storage BASIC ADVANCED STATUS Y ADMIN e SECURITY UTILITY Click SYSLOG to configure Home Basic Advanced Status Admin Utility ADMIN SYSLOG Syslog Configuration a Syslog Service Setup Syslog Server Service Disable Enable Facility LOCAL_USE0 Y a Syslog Server Setup E Server Name Server Port 5 14 ME A ee To send logs to the LOG server you must configure the other servers from your network to send logs to that server Syslog Service setup 1 Click the enable item of Syslog Server Service to turn on syslog service 2 Se
85. ton to upgrade the system then the system will restart a Select the firmware file name by clicking on your PC or NB and then press OK button to upgrade The system will reboot automatically after finishing the firmware upgrade operation G SHDSL bis Router User Manual V0 01 87 4 5 5 Logout To logout the router press LOGOUT in UTILITY BASIC ADVANCED STATUS ADMIN Y UTILITY SYSTEM INFO SYSLOG CONFIG TOOL PN RESTART For logout system and close window click the LOGOUT in UTILITY Home Basic Advanced Status Admin Utility UTILITY LOGOUT This page offers you the opportunity to quit your SOHO Router When the YES button be clicked the SOHO Router is logout and your browser window will be closed When click the button the Router will logout and browser window will be closed G SHDSL bis Router User Manual VO 01 88 4 5 6 Restart To restart the router click the RESTART in UTILITY BASIC ADVANCED STATUS ADMIN UTILITY e SYSTEM INFO e SYSLOG e CONFIG TOOL e UPGRADE Home Basic Advanced Status Admin Utility UTILITY RESTART This page offers you the opportunity to restart your SOHO Router When the restart button be clicked the SOHO Router is restarting and your browser session will be disconnected This may appear as if your browser session is hungup After the server restarts you may either press your browser s reload button or close your browser and re open it sev
86. y Level Basic Firewall Security DoS Protection Parameters Review Detect SYN Attack Disable SYN Attack Threshold 200 packets per second Detect ICMP Flood Disable ICMP Flood Threshold 200 packets per second Detect UDP Flood Disable UDP Flood Threshold 200 packets per second Detect PING of Death Attack Disable we Detect Land Attack Disable 0 wenn M Detect IP Spoofing Attack Disable wees M DetectSmurfAttack Disable Detect Fraggle Attack Disable ones Packet Filtering Parameters Review General packet filtering parameter Trigger Packet Filtering Service Disable Access policies Pool is Empty The screen will prompt the parameters to be recorded in NVRAM Please Check these parameters Press o restart the router or press to setup another function 4 2 9 2 Automatic Firewall Security Click Automatic Firewall Security Home Basic Advanced Status Admin Utility ADVANCED FIREWALL Firewall Security Level Firewall security level Security Level Basic Firewall Security Hint This level only enables the NAT firewall and the remote management security The NAT firewall will take effect if NAT function is enabled The remote management security is default to block any WAN side connection to the device Non empty legal IP poolin ADMIN will block all remote management connection except those IPs specified in the pool Automatic
87. y individual port With VLAN all broadcasts are confined to a specific broadcast domain The IEEE 802 1Q defines the operation of VLAN bridges that permit the definition operation and administration of VLAN topologies within a bridged LAN infrastructure Home Basic Advanced status Admin Utility ADVANCED VLAN Virtual LAN Parameters General Parameter Mode Disable 802 10 Tag Based VLAN Port Based VLAN The router supports two types of VLAN 802 1Q Tag Based VLAN and Port Based VLAN User can configure one of them to the router G SHDSL bis Router User Manual VO 01 44 4 2 4 1 802 1Q Tag Based VLAN For setting 802 1Q VLAN click the 802 1Q Tagt Based VLAN The screem will prompt as the following Home Basic Advanced Status Admin Utility ADVANCED VLAN Virtual LAN Parameters General Parameter Mode Disable 802 1Q Tag Based VLAN Port Based VLAN 802 10 Tag Based VLAN Table No VID LAN1 LAN2 LAN3 LAN4 WAN1 WAN2 WAN3 WAN4 WAN5 WANG WAN7 WAN8 1 4 2 0 O O O O O O O O O O O O 3 0 O O O O O O O O O O O O 4 0 O O O O O O O O O O O O 5 0 O O O O O O O O O O O O 6 0 O O O O O O O O O O O O 7 0 O O O O O O O O O O O O 8 0 O O O O O O O O O O O O evo i 1 lik lib 1 1 lik lib 1 p i Link Type Access Access Access Y Access Y Access Access Y Access W Access Access Y Acces
88. y is default to block any WAN side connection to the device Non empty legal IP pool in ADMIN will block all remote management connection except those IPs specified in the pool C Automatic Firewall Security Hint This level enables basic firewall security all DoS protection and the SPI filter function C Advanced Firewall Security Hint A user can determine the security level for special purpose environment and applications by configuring the DoS protection and defining an extra packet filter with higher priority than the default SPI filter Note that an improper filter policy may degrade the capability of the firewall and or even block the normal network traffic Click Basic Firewall Security This level only enables the NAT firewall and the remote management security The NAT firewall will take effect when NAT function is enabled The remote management security by default will block any WAN side connection to the device Non empty legal IP pool in ADMIN will block all remote management connection except those IPs specified in the pool G SHDSL bis Router User Manual V0 01 57 Press to finish setting of firewall and review the parameters Home Basic Advanced Status Admin Utility ADVANCED FIREWALL Firewall Security Level Review To let the configuration that you have changed take effect immediately please click Restart button to reboot the systes procedure please click Continue button Firewall security level Securit
89. zsuord socio 5 1 2 Telnet Make sure the correct Ethernet cable connected the LAN port of your computer to this Router The LAN LNK LED indicator on the front panel shall light if a correct cable is used Starting your Telnet client with VT100 terminal emulation and connecting to the management IP of Router wait for the login prompt appears Input User and Password after login screen pop up User admin Password Note The default IP address is 192 168 0 1 c Telnet 192 166 0 1 User admin Password 5 1 3 Operation Interface G SHDSL bis Router User Manual V0 01 97 For serial console and Telnet management the Router implements two operational interfaces Command Line Interface CLI and menu driven interface The CLI mode provides users a simple interface which is better for working with script file The menu driven interface is a user friendly interface to general operations The command syntax for CLI is the same as that of the menu driven interface The only difference is that the menu driven interface shows you all of available commands for you to select You don t need to remember the command syntax and save your time on typing the whole command line The following figure gives you an example of the menu driven interface In the menu you scroll up down by pressing key I K select one command by key L and go back to a higher level of menu by key y For example to show the system information just logon to

G.SHDSL.bis Router User Manual User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents