SmartRG™ Residential Gateways
Contents
1. S Ma rt Powering the Connected Home gas SmartRG Residential Gateways November 15th 2012 Version 2 4 Table of Contents Moe 6 Who Should Read This User s Manual annnuuunnnnnnunnnnnnnnnunnnnnnnnnnnnnnnnnnunnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnuunnnnn 6 Additional Ve d E ge sani 6 Contacting SmartRG INC ninna 6 SmartRG Residential EE TE UC D Advanced Ed D Connect and Surf Automatic Broadband Connection Configuration T Activation Automatic ACS Connection Configuration rr T TR 069 Remote Management Automated Configuration Server Support 8 MEN NN 8 Calix Compass Consumer Connect ACS nnnnuuvnnvnnnnnnnnnnnnnnvnnnnnnnnnnnnnnnnnnnnnnnvennnnnnnnnnnnnennnnnnnnnnnnennnnnnnnnnnnne 8 Cisco Prime Home ACS swovceicsiisantavaiveasssasanvssendsvassandsnnswabeaniesnesicndsvanvandstneawnauanieanestbansansabbsuuatnawanssenescuans 8 SmartRG Product CTIE 9 Front Panel LEDS vn 10 Rear Panel Connectors EE 12 a ee D An 12 TIN 12 SKINN 13 SR S5SONEL EE EEE EE EN 13 SR500N SROOONE EEE NE 14 FONN 14 Logging in to Your SmartRG Gateway s UL 15 Navigating Your SmartRG Gateway s Web UL 16 Configuring Your SmartRG Common Use Cases rrvnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnenennnnnnn 18 Use Case Creating WAN Connections for Internet Access and Remote Management 18 Configuring the Layer 2 Interface Ethernet 19 Configuring the Lay2. 2012 Introduction Figure 41 QoS IPTV Queue Configuration nn 49 Figure 42 QOS Queue Enable iiicriirii ii 50 Figure 43 QoS VoIP Classifier Configuration nn 51 Figure 44 QoS IPTV Classifier Configuration sn 52 Figure 45 QoS VoIP and IPTV Classifier Configurations ss 53 Figure 46 Time Zone and NTP Server Settings rrrrrrrrrrrrrrrrrrrrvvvvvvvvvvvvvrvvvnvvvnvrnvnvvnnvnvnnvnnvvnnvnnnvnvnnvnnnnnnnnnnn 59 Figure 47 Enabling Disabling HTTP Telnet SSH Access nn 60 Figure 48 Configuring the System Log for Use In Troubleshooting 63 Figure 49 Configuring Port Mirroring to Monitor WAN Interface Traffic 64 SmartRG 2012 Confidential Page 5 SmartRG Residential Gateways Introduction This document describes the features functions and administration of SmartRG residential gateways Who Should Read This User s Manual The information in this document is intended for Network Architects NOC Administrators Field Service Technicians and other networking professionals responsible for deploying and managing broadband access networks Additional Information You may find the following documents to be helpful during your access network deployment SmartRG Data Sheets 5 SmartRG Product Release Notes Deployment and Provisioning Presentation Contacting SmartRG Inc Contact SmartRG Inc for further assistance Hours of operation Monday Friday 5am 6pm Pacific Time UTC 8 00 Support
3. ACS User Name and ACS Password blank e Enable Connection Request Authentication e Set the Connection Request User Name and Password to admin admin 3 Click Apply Save NOTE Configure less and deploy more Manage subscriber services and your entire gateway fleet with the ClearVision management system Contact SmartRG to start your trial Page 28 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases me today See us at www smartrg com Use Case Setting Up the LAN To configure the SmartRG s LAN interface 1 Select Advanced Setup gt LAN Local Area Network LAN Setup Configure the DSL Router IP Address and Subnet Mask for LAN interface GroupName Default IP Address Subnet Mask Enable IGMP Snooping Standard Mode See Important Note Blocking Mode Disable DHCP Server Enable DHCP Server Start IP Address End IP Address Leased Time hourpz4 Static IF Lease List A maximum 32 entries can be configured Mac Address Ip Address Remove L Enable LAN side firewall O Figure 20 LAN Settings 2 Leave the GroupName as Default 3 Set the LAN interface s IP Address and Subnet Mask Default values are 192 168 1 1 255 255 255 0 4 IMPORTANT If you intend to support IPTV either bridged or routed you MUST select Enable IGMP Snooping Select Blocking Mode 5 Select Enable DHCP Server and set th
4. Managing Your SmartRG Gateway Save Restore or Default Configurations To save the existing gateway configuration to your hard drive 1 Select Management gt Settings gt Backup 2 Click Backup xxx Settings Two types of settings are available for backup Running Settings settings governing the gateway s operation at the present time Default Settings settings restored at the time of a factory default You have the ability to create your own custom default settings To restore a previously saved gateway configuration as the gateway s running settings 1 Select Management gt Settings gt Update 2 Click the Choose File button under the Update working settings section and browse to find the saved config file on your hard drive e g mySmartRGRunningConfig conf 3 Click Update Working Settings To restore a previously saved gateway configuration as the gateway s default settings 1 Select Management gt Settings gt Update 2 Click the Choose File button under the Update Default Broadband Router settings section and browse to find the saved config file on your hard drive e g mySmartRGDefaultConfig conf 3 Click Update Settings To restore the gateway to default settings 1 Select Management gt Settings gt Restore Defaults 2 Click Restore Default Settings SmartRG 2012 Confidential Page 57 SmartRG Residential Gateways Update Software To update th
5. The default DSCP mark is used to mark all egress pi Select Default DSCP Mark No Changel 1 e Figure 39 Enable SmartRG QoS Processing 3 Check Enable QoS set the Default DSCP Mark to No Change 1 and click Apply Save 4 Create the VoIP queue by selecting Advanced Setup gt Quality of Service gt QoS Queue Config and click Add QoS Configuration The screen allows you to configure a QoS queue by the classifier to place Ingress packets approp interfacesprecedence pair resulting In a maxim Click Apply Save to save and activate the quer Name Enable Interface Precedence DSL Latency Figure 40 QoS VoIP Queue Configuration Page 48 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases 5 Name enable and select the WAN interface to be fed by this queue IMPORTANT Select the routed WAN interface created in the Creating the WAN Service section NOTE 6 Select a Precedence of 1 NOTE Lower values of Precedence indicate HIGHER priority 7 Leave the DSL Latency value set to PathO and Click Apply Save 8 Create the IPTV queue by selecting Advanced Setup gt Quality of Service gt QoS Queue Config and click Add QoS Configuration The screen allows you to configure a 005 queue by the classifier to place ingress packets approp interface precedence pair resulting in a maximu Click Apply Save to save and activate the queu Name Enab
6. Page 39 SmartRG Residential Gateways Your WAN Service summary Advanced Setup gt WAN Service will look similar to Wide Area Network WAN Service Setup Choose Add or Remove to configure a WAN service over selected interface atmo lipoe_0_0_35 mer MiA MiA ma Enabled Enabled Enabled D atmi br_0_0_36 Bridge MiA MiA a Disabled Disabled Disabled wan atm2 br_0_0_37 Bridge N A MiA ma Disabled Disabled Disabled ef atm br 0 38 Bridge MiA MiA a Disabled Disabled Disabled an atm br 039 Bridge MiA MiA wa Disabled Disabled Disabled aan atm br_0_0 40 Bridge Nep Nep n a Disabled Disabled Disabled ef Figure 31 IPTV WAN Service Summary Multi WAN Bridge Group Page 40 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Creating Interface Bridge Groupings 10 Select Advanced Setup gt Interface Grouping Interface Grouping maximum 16 entries can be configured Interface Grouping supports multiple ports to PVC and bridging groups Each with appropriate LAN and WAN interfaces using the Add button The Remove group has IP interface Group Name Remove WAN Interface LAN Interfaces DHCP DHCP Yendor IDs IDs atmi LAN Ai Re atm2 wlan atrn3 WIO Guest Default atm wIO Guest atm5 WIO Guest atmo Figure 32 Creating an IPTV Bridge Interface Group SmartRG 20
7. QoS VolP and IPTV Classifier Configurations The QoS configuration is now complete SmartRG 2012 Confidential Page 53 SmartRG Residential Gateways Use Case Configuring IP Security IPSec in Support of VPNs IP Security IPSec is a suite of IETF standards developed to provide data integrity and privacy key management and data authentication at the IP layer Typically IPSec is deployed to create Virtual Private Networks VPNs between communicating peers NOTE When configuring an IPSec tunnel both ends of the tunnel must be configured with identical encryption and authentication methods Page 54 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases To configure IPSec in the SmartRG gateway 1 Select Advanced Setup gt IPSec 2 Click Add New Connection and then click Show Advanced Settings to bring up the following screen IPSec Settings IPSec Connection Name Tunnel Mode Remote IPSec Gateway Address IPv4 address in dotted decimal Tunnel access from local IP addresses IP Address for VPN IP Subnetmask Tunnel access from remote IP addresses IP Address for VPN IP Subnetmask Key Exchange Method Authentication Method Pre Shared Key Perfect Forward Secrecy Advanced IKE Settings Phase 1 Mode Encryption Algorithm Integrity Algorithm Select Diffie Hellman Group for Key Exchange Key Life Time Phase 2 Encryption Algorithm Integrity Algorithm Select Diffie Hel
8. Security SettingS rrmmarrrrnrrvevnnnnnnnannnnnnnnunnnnnnnrnvnnnnnnnnnnnnnnnnnnuennnnnennnnnnnnnnnnnnnnnnnuuunnnnnene 32 Figure 24 Wireless Distribution CT EEN 33 Figure 25 Bridged IPTV eut d e brinda 35 Figure 26 Routed IPIV CONTIBUTATIOM la 35 Figure 27 Multi WAN Connection Bridged IPTV Configuration es 36 Figure 28 Selecting a Bridged WAN Service s Layer 2 Interface mens 37 Figure 29 Creating a Bridged WAN Service rnnnnnrvvvnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnennnnnnnnnnnnnnnnnnnnnnnnnnuusnnnnnnee 38 Figure 30 IPTV Layer 2 Interface Summary Multi WAN Bridge Group ss 39 Figure 31 IPTV WAN Service Summary Multi WAN Bridge Group 40 Figure 32 Creating an IPTV Bridge Interface Group iii 41 Figure 33 Defining an IPTV Bridge Interface Group n nnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnuvnnnnnnnee 42 Figure 34 Typical IPTV Bridge Interface Group nee 43 Figure 35 Vendor ID Based Interface Groupings iii 44 Figure 36 Routed IPTV Configuration Single WAN Connection rr 45 Figure 37 Routed IPTV Configuration Multiple WAN Connection ri 46 Figure 38 Typical QoS Configuration to Support VoIP and IPTV Services 47 Figure 39 Enable SmartRG QoS Processinhg rr 48 Figure 40 QoS VolP Queue Configuration ereeee rene nere nane nane eee e nananana nane ee eee eine nese nine ne ninenna 48 Page 4 Confidential SmartRG
9. and 802 1q values appropriately 802 1P 0 is lowest priority 7 is highest priority 1 is unused 802 10 1 indicates no VLAN tagging The SR 350N NE and SR 500N NE gateways support mixed VLAN tagged untagged traffic on the same WAN interface Set the untagged WAN connection s VLAN ID to 1 4 Click Next Page 24 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases 5 ForPPPWAN services enter the PPP Username and PPP Password If desired enable the firewall NAT and IGMP Proxy Click Next PPP Username and Password PPP usually requires that you have a user name and password to PPP Username PPP Password PPPoE Service Mame Authentication Method AUTO Dial on demand with idle timeout timer PPP IP extension I Advanced DMZ parigi Address Petri Non DMZ Net Mask Use Static IPv4 Address Figure 16 PPP Username and Password OR SmartRG 2012 Confidential Page 25 SmartRG Residential Gateways 6 For IPoE WAN services select Obtain an IP address automatically DHCP or select Use the following Static IP address and enter the WAN IP Address WAN Subnet Mask and WAN gateway IP Click Next WAN IP Settings Enter information provided to you by your ISP to configure the WAN IP settings Notice If Obtain an IP address automatically is chosen DHCP will be enabled If Use the following Static IP address is chosen
10. enter the WAN IP address su Obtain an IP address automatically Option 60 Vendor ID Option 61 IAID 8 hexadecimal digits Option 61 QUID hexadecimal digit Option 125 Disable Enable Use the following Static IP address WAN IP Address WAN Subnet Mask WAN gateway IP Address CT Advanced DMZ Non DMZ IP Address Non DMZ Net Mask 255 255 255 0 197 168 2 1 Figure 17 WAN IP Settings 7 If desired enable the firewall NAT and IGMP Multicast Page 26 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Network Address Translation Settings Network Address Translation NAT allows you to share CD Enable NAT UD Enable Firewall IGMP Multicast See Important Note Enable IGMP Multicast No Multicast VLAN Filter O Enable MAC Clone 00 00 00 00 00 00 Figure 18 WAN NAT Firewall and IGMP Settings 8 Select the WAN interface to be used by this WAN service Click Next 9 Select Obtain DNS info from a WAN interface and select the desired WAN interface from the drop down list a single WAN interface is common unless you are creating bridged IPTV configurations or select Use the following Static DNS IP address and enter the IP addresses of your network s primary and secondary DNS servers Click Next 10 Review the WAN service summary If you are satisfied click Apply Save SmartRG 2012 Confidential Page 27 SmartRG Residential Gateways Use
11. segmented WAN interface is bridged IPTV as detailed in the Bridged IPTV Configuration section To configure the layer 2 PTM interface to support VLAN tagged traffic select VLAN MUX Mode for Connection Mode in step 4 of the Configuring the Layer 2 Interface PTM Supported on ADSL and VDSL section SmartRG 2012 Confidential Page 23 SmartRG Residential Gateways Creating the WAN Service WAN Services are created on top of previously created Layer 2 interfaces To create a WAN service 1 Select Advanced Setup gt WAN Service and click Add 2 Select a previously created layer 2 interface from the drop down list and click Next 3 Select the WAN Service type PPP over Ethernet or IP over Ethernet are appropriate choices for routed WAN services Bridged WAN services will be covered later in the Bridged IPTV Configuration section WAN Service Configuration Select WAN service type PPP over Ethernet PPPoE IP over Ethernet Bridging Enter Service Description pppos_0_0_32 For tagged service enter valid 802 1P Priority and 802 10 VLAN ID For untagged service set 1 to both 802 1P Priority and 802 10 VLAN ID Enter 802 1P Priority 0 7 1 Enter 802 10 VLAN ID 0 4094 1 Network Protocol Selection IPV6 Only not supported IPV4 Only Figure 15 WAN Service Configuration With or Without VLAN Tagging Support If VLAN tagging support is desired set the 802 1p
12. transfer on LAN port ON WLAN enabled OFF WLAN disabled Blinking data transfer currently occurring over the WiFi interface SmartRG 2012 Confidential Page 11 SmartRG Residential Gateways Rear Panel Connectors SR10 DSL WAN LAN Reset On Off Power Figure 2 SR10 Rear Panel Connectors SR100 DSL WAN LAN1 4 Reset Power On Off Figure 3 SR100 Rear Panel Connectors Page 12 Confidential SmartRG 2012 SmartRG Residential Gateways SR350N m mA DSL WAN LAN1 4 Power On Off Reset on bottom Figure 4 SR350N Rear Panel Connectors SR350NE Ethernet WAN LAN1 3 Power On Off Reset on bottom Figure 5 SR350NE Rear Panel Connectors SmartRG 2012 Confidential Page 13 SmartRG Residential Gateways SR500N SR500NE e See DSL WAN GigE WAN LAN1 4 Reset USB On Off Power Figure 6 SR500N NE Rear Panel Connectors SR505N e eee e 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 e e e e e e 0 0 0 0 0 0 0 0 e 0 0 0 0 0 e 0 0 e 0 e e e 0 0 0 0 0 0 0 e 0 0 0 0 0 e 0 e 0 0 0 e o e 0 0 0 0 0 0 0 0 0 0 0 0 0 0 e 0 0 0 0 0 e e e e 0 e 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 e e e 0 0 0 0 e 0 0 0 0 0 0 0 0 0 0 0 0 e 0 0 0 0 0 0 0 e eee e 0 0 0 0 0 0 0 0 0 0 0 0 e 0 e 0 0 0 0 0 0 0 e e 0 0 0 0 0 0 0 0 0 0 0 0 e 0 0 0 0 0 0 e e e e e 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 e e e 0 e 0 0 0 0 0 0 0 0 0 0 e 0 0 0 0 0 0 0 0 0 0 0 0 e 0 0 0 0 0 0 0
13. 0 0 0 e 0 0 e 0 0 0 e 0 0 0 0 e ee ee ee ee ee ee ee ee ee ee DSL WAN LAN1 4 WPS Reset Power On Off USB Side Figure 7 SR505N Rear Panel Connectors Page 14 Confidential SmartRG 2012 SmartRG Residential Gateways Logging in to Your SmartRG Gateway s UI To manually configure the SmartRG access the gateway s embedded web UI 1 attach your computer s RJ45 connection to any of the SmartRG s LAN ports 1 4 2 configure your computer s IP interface to acquire an IP address using DHCP See the IMPORTANT note below for instructions on logging in to a SmartRG gateway configured for bridge mode operation 3 opena browser and enter the gateway s default address http 192 168 1 1 admin in the address bar Connect to 192 168 1 1 The server 192 168 1 1 at DSL Router requires a username and password Warning This server is requesting that your username and password be sent in an insecure manner basic authentication without a secure connection User name fi admin Remember my password Figure 8 Login Username and Password 4 Enter the default username and password admin admin and click OK to display the Device Info page The gateway s Ul can be accessed via the WAN connection by entering the WAN IP address in your browser s address bar and entering the default username and password support support WAN HTTP access MUST be enabled to access the gateway s Ul via the WAN connection
14. 1 360 859 1780 1 877 486 6210 Toll free from the US amp Canada support smartrg com Sales 1 360 859 1780 1 877 486 6210 Toll free from the US amp Canada sales smartrg com Page 6 Confidential SmartRG 2012 SmartRG Residential Gateways SmartRG Residential Gateways Advanced Features Connect and Surf Automatic Broadband Connection Configuration The Connect and Surf feature automatically establishes a WAN connection for default configured gateways obviating the need for manual or custom configurations The active physical layer is detected ADSL VDSL or GigE and layer 3 connectivity is established using PPP authentication or DHCP If you prefer to configure your SmartRG s WAN interface manually connect a laptop to any of the LAN ports and follow the instructions in the Logging in to Your SmartRG Gateway and Use Case Creating WAN Connections for Internet Access and Remote Management sections Do NOT connect the WAN interface cable until after the configuration is completed Activation Automatic ACS Connection Configuration SmartRG gateways are designed to discover their service provider specific ACS management settings without the use of custom firmware SmartRG Inc maintains an activation server that associates a device s MAC address with its service provider s ACS settings SmartRG gateways contact the activation server to have their ACS settings modified upon initial power up or a
15. 12 Confidential Page 41 SmartRG Residential Gateways 11 Click Add Grouped WAN Interfaces Available WAN Interfaces ipoe_0 0 S5fatmo br UU abati br UU Slater br 0 D 38fatm3 br UU S9 atmd br 0 0 40 atrmb Mo Interace Mone Grouped LAN Interfaces Available LAN Interfaces wlan wll Guest w ll Guest wll Guests 5 2009 ClearAccess All Rights Reserved Figure 33 Defining an IPTV Bridge Interface Group Page 42 Confidential SmartRG O 2012 Configuring Your SmartRG Common Use Cases 12 Enter the Group Name 13 Highlight the bridged WAN Interfaces to be included in the bridge group and click lt 14 Highlight the LAN Interfaces to be included in the bridge group and click lt Group Name IPTY Service Grouped WAN Interfaces Available WAN Interfaces br OO Slater Ipoe UU 35 atml br OD 3atmz Mo InterfacelMone br UU 38 atm3 br UU 2Hlatrmd br O 0 4D0fatmB Grouped LAN Interfaces Available LAN Interfaces LANE LAM LAR 3 lan LANA wll Guest wll Guest wll Guests E 2009 ClearAccess All Rights Reserved Figure 34 Typical IPTV Bridge Interface Group SmartRG 2012 Confidential Page 43 SmartRG Residential Gateways 15 Click Apply Save Creating Vendor ID Based Interface Bridge Groupings To provide greater flexibility when connecting set top boxes to LAN ports SmartRG gateways support Vendor ID Based bridge groupings Instead of adding specific LAN
16. 5 SmartRG Residential Gateways SmartRG gateways are designed to exceed the high bandwidth demands of either IPTV service architecture Refer to the appropriate section below to configure the SmartRG gateway for your particular IPTV deployment architecture Bridged IPTV Configuration A bridged IPTV configuration is comprised of e one or more WAN connections e one or more LAN connections and e an interface grouping structure to bind all of the connections together The more generalized bridged IPTV service configuration with multiple WAN connections is shown below All LAN Hosts p gt LAN lt gt no IPTV STBs Enable Segment LAN SR Ports Enable IGMP Snooping IPTV STBs Figure 27 Multi WAN Connection Bridged IPTV Configuration Page 36 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Creating Bridged WAN Connections To configure the SmartRG for bridged IPTV service deployments with one or more WAN connections start by creating the bridged WAN connections 1 Create a Layer 2 interface following the instructions detailed in a Configuring the Layer 2 Interface Ethernet b Configuring the Layer 2 Interface ADSL or c Configuring the Layer 2 Interface PTM Supported on ADSL and VDSL as appropriate for your particular SmartRG Ethernet or DSL 2 Select Advanced Setup gt WAN Service WAN Service Interface Configuration Select a laye
17. Case Provisioning Your SmartRG for Remote ACS Management This step is not required for production SmartRG gateways SmartRG maintains an Activation Server that associates MAC addresses with service providers ACS management URLs After the SmartRG has established its WAN connection using the Connect and Surf algorithm it connects to the SmartRG Activation Server and reports its MAC The Activation Server changes the ACS management URL to point to the service provider s ACS To manually provision your SmartRG for management by a TR 069 enabled Automated Configuration Server 1 Select Management gt Management Server gt TR 069 Client TR 069 Client Configuration WAN Management Protocol TR 069 allows a Auto Configuration Server ACS to perform auto configuration provision collection Select the desired values and click Apply Save to configure the TR 069 client options Inform Disable Enable Inform Interval 7200 ACS URL http myISP acs com ACS User Name ACS Password WAN Interface used by TR 069 client Any WAN W Connection Request Authentication Connection Request User Name admin Connection Request Password sssss Connection Request URL Apply Save IRPI Hueste Figure 19 TR 069 Management Settings 2 Enter the following parameter values e Enable Informs e Get he Inform Interval to 7200 seconds e Set he ACS URL e g http mylSP acs com e Leave the
18. LAN section 8 Check LAN 1 4 This segments the four LAN ports into separate interfaces instead of a single switched block of ports 9 Click Apply Save Page 38 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases At the conclusion of step 9 your Layer 2 Interface summary Advanced Setup gt Layer 2 Interface will look similar to DSL ATM Interface Configuration Choose Add or Remove to configure DSL ATM interfaces Timtarfaca Vpi Vei DSL Latency Category Link Type Connection Moda geg amore atmo o 35 Patho UBF Eo DefaultMode Disabled FI atmi o 36 Patho UBR Eod DefaultMode Disabled F atme o a7 Patho UBR Eo DefaultMode Disabled F atra o se Patho UBR Eod DefaultMode Disabled F oo F D F atm4 E 39 Fath UBR E DefaultMode Disabled atmS E fao Fath VER E DefaultMode Disabled Figure 30 IPTV Layer 2 Interface Summary Multi WAN Bridge Group The generalized more complex IPTV bridge group is detailed here The majority of DSLAMs require only a single WAN connection to support IPTV services In that typical case e The atmO interface would provide routed WAN access for Internet services and remote management and The atm1 interface would provide bridged WAN access for all IPTV related services multi cast streams middleware server access and IGMP signaling SmartRG 2012 Confidential
19. LAN hosts and the Internet pass through the gateway s routed WAN connection Remote management via TR 069 is also performed through this connection The typical Internet access remote management connection configuration is diagramed below Page 18 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Pa LAN All LAN Hosts VAN 14 gt n o IPTV STBs Figure 10 Internet TR 069 Management WAN Connection WAN connection creation is a two step process beginning with the configuration of a layer 2 interface Ethernet or DSL followed by the creation of a layer 3 WAN service Common WAN services include PPPoE DHCP and Static IP Configuring the Layer 2 Interface Ethernet To configure an Ethernet layer 2 interface 1 Select Advanced Setup gt Layer2 Interface The default Ethernet WAN interface eth0 5 LAN4 will be displayed ETH WAN Interface Configuration Choose Add or Remove to configure ETH WAN interfaces Allow one ETH as layer 2 wan interface eth0 5 LaN4 DefaultMode FI Remove Figure 11 Ethernet Layer 2 Interface Configuration Default SmartRG 2012 Confidential Page 19 SmartRG Residential Gateways No further configuration is necessary Configuring the Layer 2 Interface Ethernet with VLAN Tags In some applications it may be necessary to segment the Ethernet WAN interface into separate VLANs A common application for a VLAN segmented WAN interface i
20. Last Each successive classifier rule created will become the last one checked in the traffic identification process SmartRG 2012 Confidential Page 51 SmartRG Residential Gateways 15 Select an Ether Type of IP 0x800 16 Enter the source MAC and Mask values in 01 02 03 04 05 06 FF FF FF 00 00 00 format 17 Assign the Classification Queue identified by WAN interface amp Precedence amp Path 18 Click Apply Save 19 Create the IPTV traffic classifier by selecting Advanced Setup gt Quality of Service gt QoS Classification and click Add Add Network Traffic Class Rule The screen creates a traffic class rule to classify the upstream traffic assign queue name and at least one condition below All of the specified conditions in this classific Traffic Class Name Rule Order Rule Status Specify Classification Criteria 4 blank criterion indicates itis not used for classification Class Interface Ether Type Source MAC Address Source MAC Mask Destination MAC Address Destination MAC Mask Source Subnet Mask Destination IP Address Destination Subnet Mask Differentiated Service Code Point DSCPI Check Protocol GF 21 071 00710 hl Specify Classification Results Must select a classification queue blank mark or tag value means no change atm0 amp Frec2 amp Path0 e Assign Classification Queue Mark Differentiated Service Code Point DSCP Mark 802 1
21. See the Configure Access Controls HTTP Telnet SSH etc section for instructions on enabling WAN HTTP access IMPORTANT If your SmartRG gateway is configured for bridge mode modem operation your PC will NOT be able to acquire an address via DHCP Instead manually configure your PC s interface with an IP address on the default network e g 192 168 1 100 SmartRG 2012 Confidential Page 15 SmartRG Residential Gateways Navigating Your SmartRG Gateway s Web UI At login the Device Info page will appear In addition to the basic identification info shown the Device Info menu item can be expanded by clicking the text to reveal e WAN connection information e WAN and LAN statistics e Routing table entries e ARP table entries and e LAN host DHCP lease information gt Smart figa Device Info 26368MVWG 121009 1814 2 4 4 3 4 12L 04 A2pv6C035j d24a 1 0 38 112 70 A pv amp C035j d24a 5 100 138 2001 cpe4 12L04 3 OD OH 13M 65 00 25 5e fb 20 6f This Information reflects the current status of your WAN connection 192 168 1 1 Figure 9 Device Info Page Page 16 Confidential SmartRG 2012 SmartRG Residential Gateways The remainder of the left menu bar items can be navigated in a similar fashion Configure the following features and functions by expanding Advanced Setup WAN amp LAN interfaces routing interface groupings QoS security etc Wireless wireless a
22. TV Configuration Multiple WAN Connections ruuvvvnnnnnnnnvnnnnennnnnnnnnnnnnnnnnnnnnnnvennnnnnnnnnnnuner 46 Use Case Applying Quality of Service QoS to VoIP and IPTV LAN Traffic rr 47 Use Case Configuring IP Security IPSec in Support of VPNS rr 54 Managing Your SmartRG GateWaYy iii 57 Save Restore or Default ConfigurationS rsssrmmuuvvvvvvnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnennnnnnnnnnnnnennnnnnnnnnnnuunnenenn 57 Update STN RS 58 CONTISULE TIME du 59 Configure Access Controls HTTP Telnet SSH etc rrrrvsnnnnnnnnvnnvnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnuunnn 60 CONS SEN ai 61 Reset the ET 62 Hardware RESOU EE a E sation been 62 Hardware Reset to Factory Default Settings 62 Siwe ET dE 62 OPEN 63 Accessing SJEL Seeds 63 PENE DANS Sed 64 Monitoring Traffic on the WAN Interface Port Mirroring rvsannssuuuvvvvvnnnnnnnnnnnnnnnnnnnnnnnnnnnennnnnnnnnnnnnnnnnnn 64 Contacting SmartRG Technical SUpport iii 65 Page iii SmartRG Residential Gateways List of Figures Figure 1 SmartRG Front Panel NR ONE 10 Figure 2 SR10 Rear Panel elle de CN 12 Figure 3 SR100 Rear Panel Connectors ccccssssssssssssseseeeeeeeeeeeeeeeseeseeeeeeeeeeeeeeeeeeeeseeseseneeseeseesenseseeessess 12 Figure 4 SR350N Rear Panel Connectors uk 13 Figure 5 SR350NE Rear Panel Connectors rrunrrrvvvvnnnnnnnnnnnnnnnnnnnnnnnnnvnnnnnnnnnnnnnnnnnunennnnnnnnnnnnnnnnnnnnnnnn
23. able 9 Enable Log Level Debugging D Display Level Error D Mode Local D Figure 48 Configuring the System Log for Use In Troubleshooting 3 Select the Log Level from the drop down list Debugging provides the greatest level of log detail 4 Select the Display Level from the drop down list Debugging provides the greatest level of display detail 5 Click Apply Save Gateway logs can be sent to a remote server for storage To configure the remote Mode select Remote from the drop down list and configure the remote server s IP address and UDP port number SmartRG 2012 Confidential Page 63 SmartRG Residential Gateways Executing Diagnostics To execute the SmartRG s interface diagnostics 1 Select Diagnostics Monitoring Traffic on the WAN Interface Port Mirroring Monitoring traffic on the WAN interface can be difficult as intervening equipment between the access gear and the gateway is necessary to provide a monitoring point for your work station To simplify WAN traffic monitoring SmartRG gateways provide the capability of mirroring WAN traffic to any of the gateway s Ethernet LAN ports To configure the SmartRG gateway for port mirroring 1 Enter the URL for the Port Mirroring hidden page into your browser lt LAN IP Address gt admin engdebug cmd 2 Click the Enable check box Select the target LAN port from the Mirror Interface dropdown box 4 C
24. ccess point and detailed radio settings Diagnostics execute LAN amp WAN interface diagnostics Management backup restore default configurations update device software TR 069 ACS management settings time zone amp NTP settings and device reboot SmartRG 2012 Confidential Page 17 SmartRG Residential Gateways Configuring Your SmartRG Common Use Cases To simplify your deployment of SmartRG gateways this document is structured around specific use cases designed to illustrate meaningful service supporting configurations like e Creating WAN interfaces for Internet data access and remote gateway management e Provisioning the SmartRG for remote management via TR 069 e Setting up the LAN e Managing wireless e Creating IPTV service configurations bridged and routed e Classifying LAN traffic and applying QoS to support IPTV and VoIP applications e Enabling secure communications IPSec Given the breadth of a SmartRG residential gateway s features and the diversity of applications only the most common use cases are detailed here Please contact SmartRG Support to inquire about additional use cases Use Case Creating WAN Connections for Internet Access and Remote Management SmartRG residential gateways are commonly deployed to provide Internet access for LAN hosts such as workstations gaming consoles IP cameras and myriad other IP enabled devices increasingly found in the home or office Packets routed between
25. ction Mode O Default Mode Single service ower one connection O VLAN MUS Mode Multiple Vlan service over one connection MSc Mode Multiple Service over one Connection Enable Quality Of Service Enabling packet level QoS for a PVC improves performance for selected the number of PYCs will be reduced Use Advanced Setup Quality of Se Sca Importantioie Figure 13 ADSL Layer 2 Interface Configuration Enter the PVC s identifier VPI VCI Select the DSL Link Type Ethernet over ATM RFC 2684 is typical Select the Encapsulation Mode LLC SNAP BRIDGING is typical DS w yN Select the Service Category upstream ATM shaping UBR Without PCR Unspecified Bit Rate Without Peak Cell Rate is typical 6 Select the Connection Mode Choose Default Mode for non VLAN tagged traffic Choose VLAN MUX Mode if you intend to segment LAN traffic into separate VLAN tagged WAN services SmartRG 2012 Confidential Page 21 SmartRG Residential Gateways 7 IMPORTANT Check Enable Quality of Service if you intend to support QoS classified traffic through the WAN service 8 Click Apply Save NOTE Enabling QoS for routed IPTV service configurations will improve channel change performance Configuring the Layer 2 Interface PTM Supported on ADSL and VDSL To configure a PTM layer 2 interface 1 Select Advanced Setup gt Layer2 Interface gt PTM Interface and click Add PTM Config
26. e Setting Up Wireless Distribution System WDS When deployed in a larger home or office a single wireless access point may not be able to provide adequate Wi Fi coverage Wireless Distribution Systems WDS provides a solution for this problem WDS combines multiple gateways to act as a single larger wireless access point allowing Wi Fi clients to seamlessly roam all access points plus it provides wired access to the entire network Two or more SmartRG gateways can be configured for WDS operation The example below depicts a WDS deployment with three SmartRG gateways in a large home or office one primary gateway in the center of the building and one remote gateway at either end of the building Remote SRG 192 168 1 253 Primary SRG 192 168 1 1 E CAS GID V Remote SRG 192 168 1 252 Figure 24 Wireless Distribution System Configuring the SmartRG gateways for WDS operation requires the setting of WAN LAN and WIRELESS parameters on all gateways included in the WDS system SmartRG 2012 Confidential Page 33 SmartRG Residential Gateways To configure the WAN connections 1 On the primary SmartRG gateway configure the routed WAN connection following the instructions in the Use Case Creating WAN Connections for Internet Access and Remote Management section 2 On the remote SmartRG gateway s no WAN configuration is required as the WAN connection is unused To configure the LAN interfaces 3 On
27. e DHCP address pool s start and end IP addresses Set the DHCP Leased Time in hours 7 Ifyou would like to create static DHCP leases for specific LAN hosts click Add Entries D SmartRG 2012 Confidential Page 29 SmartRG Residential Gateways DHCP Static IP Lease Enter the Mac address and Static IP address then click 4Spply Save MAC Address IP Address ApplylSave Figure 21 Adding DHCP Static IP Leases 8 Enter the LAN host s MAC Address and the desired IP Address 9 Click Apply Save and repeat steps 7 and 8 for all static IP LAN hosts Page 30 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Use Case Setting Up Wireless To configure the SmartRG s Wireless interface 1 Select Wireless gt Basic Wireless Basic This page allows you to configure basic features of the wireless LAN interface You i wireless network name also known as SSID and restrict the channel set based on Click Apply Save to configure the basic wireless options Enable Wireless Hide Access Point Clients Isolation Disable WMM Advertise Enable Wireless Multicast Forwarding WMF Bssibg DOi25 5E Se br Fl Country UNITED STATES ww Max Clients Wireless Guest irtual Access Points Disable SES i Max Enabled SSID Hidden Clients WMM WMF Clients BSSID Advertise Figure 22 Wireless Basic Settings Select Enable Wireless Set t
28. e Home formerly ClearVision ACS interoperability Page 8 Confidential SmartRG 2012 SmartRG Residential Gateways SmartRG Product Family SmartRG residential gateways combine WAN connectivity with a firewall protected router and industry leading TR O69 remote management support Most variants provide 802 11n Wi Fi connectivity as well See the SmartRG feature details below Tri mode Tri mode er ADSL2 ADSL2 ADSL2 ADSL2 rege VDSL2 GigE VDSL2 GigE 802 11n 802 11n 802 11n 802 11n 802 11n v 10 100 Mbps LAN Ports LAN Device Discovery Monitor Contact SmartRG Support for detailed descriptions and management of the features listed above gt Managed Firewall Vv SmartRG 2012 Confidential Page 9 SmartRG Residential Gateways Front Panel LEDs The SmartRG s front panel LEDs can be useful for troubleshooting and diagnostic purposes Figure 1 SmartRG Front Panel LEDs Page 10 Confidential SmartRG 2012 SmartRG Residential Gateways The SmartRG front panel LEDs are defined as follows ON Power is on OFF Power is off WAN SR500N NE ON Ethernet WAN Active OFF No link ON Link established and active OFF No link Blinking Training mode ON Internet connection established OFF No Internet connection Blinking Data transfer on WAN Internet connection RED PPP authentication failure ON LAN link established and active OFF No LAN link BLINKING Data
29. e gateway s software 1 Select Management gt Update Software Browse to find the new gateway software on your hard drive ex CA 2 4 3 7 24282 SR500N fs kernel 3 Click Update Software NOTE The software update process takes approximately 2 minutes to complete Do NOT power cycle the gateway until the software update process has completed Page 58 Confidential SmartRG 2012 Managing Your SmartRG Gateway Configure Time Settings To set the gateway s time zone and NTP server settings 1 Select Management gt Internet Time 2 Select your time zone from the drop down list 3 Optional Select the first second NTP servers from the drop down lists A custom NTP server can be configured by selecting Other from the drop down list and entering the custom URL Time settings This page allows you to change the modem s time configuration Automatically synchronize with Internet time servers First NTP time server time nistgoy Second NTP tirne ntpl tummy com Serer Third NTP time server Fourth NTP time None S i server None Fifth NTP time server None Time zone offset GhvIT 08 001 Pacific Time Tijuana Ni Apply awe Figure 46 Time Zone and NTP Server Settings 4 Click Apply Save SmartRG 2012 Confidential Page 59 SmartRG Residential Gateways Configure Access Controls HTTP Telnet SSH etc To enable disable gateway management services such as HTTP Te
30. er 2 Interface Ethernet with VLAN TagS ri 20 Configuring the Layer 2 Interface ADSL ri 21 Configuring the Layer 2 Interface PTM Supported on ADSL and VDSL tr 22 Configuring the Layer 2 Interface VDSL PTM with VLAN TagsS ri 23 Creating the WAN Service unnvvvnnnnnnnnnnnnnnnnnnnnnnunnnnnnnnnnnnnunnnnnnnnnnnnnuunnnnnnnnnnnnuunnnnnnnnnnnnuunenevnnnnnnnnunnnevnnnnnnnnn 24 Use Case Provisioning Your SmartRG for Remote ACS Management rnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnne 28 Use Case Setting UP the LAN WEEN 29 Use Case Setting UD Wireless ege i A I psnneneemecee 31 Use Case Setting Up Wireless Distribution System WDS ri 33 Use Case Creating IPTV Service ConfiguratioNS ri 35 Bridged IPTV Configuration srscensnwidsncsvatcaceinvicuesdstusanssanieseadetaceuienutesecauGenseacuuaaeuseabeseneeuetaseaantancuousuteantiaacs 36 Creating Bridged WAN Connections muuvvvvnnnnnnnnnnnnnvnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnuunnne 37 Creating Interface Bridge GroupingsS rrruuuuunnnnnnvennnnnnnnnnnnnnnnnuuvennnnnnnnnnnnnnnnnnnnnnnnnnuunnnnnnerennnnnnnnnee 41 Page ii SmartRG 2012 Creating Vendor ID Based Interface Bridge Groupings rrnnnnnunuvnnnvnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnuunnnr 44 Routed IPTV Configuration Single WAN Connection ssnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnvenennnnnnnnnnnnnnnn 45 Routed IP
31. ess Point 2 set Bridge Restrict to Enabled SCAN 3 click Apply Save and wait for the page to refresh 4 select the partner gateway which has the same SSID as the primary gateway by checking the box next to the SSID 5 Click Apply Save IMPORTANT When configuring more than two gateways for WDS operation the remote gateways MUST NOT be partnered together to avoid creating an Ethernet loop Page 34 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Use Case Creating IPTV Service Configurations The SR350N SR350NE SR500N and SR500NE SmartRG gateways are designed to meet the demands of IPTV service deployments Typically IPTV services have been deployed using bridged architectures with public IP addresses assigned to the IPTV Set top boxes STBs connected to the gateway s LAN ports A typical bridged IPTV service configuration is shown below All LAN Hosts sun us Ed gt LANI no IPTV STBs nable segment LAN SK R Ports Enable IGMP Snooping gt IPTV STBs Figure 25 Bridged IPTV Configuration Recently service providers have begun deploying routed IPTV services with STBs being assigned private LAN IP addresses by the gateway A typical routed IPTV service configuration is shown below du A All LAN Hosts ti gt Gees vst nable GMP segment LAN Ports Enable SMP Snooping Figure 26 Routed IPTV Configuration SmartRG 2012 Confidential Page 3
32. fter being reset to factory default settings Activation server support is provided for ALL SmartRG gateways at no additional cost SmartRG Inc enters gateway MAC addresses into the activation server prior to shipment SmartRG 2012 Confidential Page 7 SmartRG Residential Gateways TR 069 Remote Management Automated Configuration Server Support With a rich TR 069 heritage and a strong commitment to standards based remote management SmartRG gateways are designed for maximum interoperability with industry leading TR 069 based remote management systems SmartRG gateways provide maximum remote manageability and the highest level of visibility into the connected home yielding e shorter integration times e lower system integration costs e improved customer support and e reduced operational expenses SmartRG works closely with industry leading TR O69 automated configuration server ACS solutions providers to ensure plug n play interoperability Affinegy ACS SmartRG gateways have been tested to confirm maximum interoperability with the Affinegy ACS solution Calix Compass Consumer Connect ACS In addition to being Calix physical layer certified to ensure Calix access equipment compatibility SmartRG gateways have been tested to confirm maximum interoperability with the Calix Compass Consumer Connect ACS solution C Calix COMPATIBLE Cisco Prime Home ACS SmartRG gateways have a long history of Prim
33. he wireless access point s SSID Select the Country from the dropdown list Click Apply Save NOTE The SmartRG provides support for 3 additional guest virtual wireless access points ARON SmartRG 2012 Confidential Page 31 SmartRG Residential Gateways 6 If you would like to select a specific Wi Fi channel 1 11 select Wireless gt Advanced and change the Channel setting The default value is Auto 7 Select Wireless gt Security Wireless Security This page allows you to configure security features of the wireless LAN interface You may setup configuration manually DR through WiFi Protcted SetupiWWPS WSC Setup Enable WSC Disabled e Manual Setup AP You can set the network authentication method selecting data encryption specity whether a network key is required to authenticate to this wireless network Click Apply Save when done Select SSID Network Authentication Wiad PSE w WP Pre Shared Key Click here to display WPA Group Rekey Interval aa WPA Encryption AES w WEP Encryption Disabled Figure 23 Wireless Security Settings 8 Select the SSID configured in step 3 above 9 Select the Network Authentication WPA2 with a Pre Shared Key is common 10 Enter the WPA Pre Shared Key Click the link to display the private key value 11 Click Apply Save Page 32 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Use Cas
34. hole located on either the rear or the bottom of the gateway depending upon model Press the switch briefly to reset the device Hardware Reset to Factory Default Settings To reset the gateway to its factory default settings press the reset switch for 6 to 8 seconds After releasing the reset switch the gateway will continue booting with a factory default configuration IMPORTANT Pressing the reset switch for more than 10 seconds causes the SmartRG gateway to reset into its boot image rendering the gateway non functional This condition can be detected by e the inability to access the SmartRG gateway s user interface using your web browser and e the inability to properly establish a WAN connection To correct this condition simply cycle power on the gateway Software Reset To reset the gateway using the SmartRG gateway s web Ul 1 Select Management gt Reboot 2 Click Reboot NOTE Software resets hardware resets and power cycles behave identically Page 62 Confidential SmartRG 2012 Troubleshooting Troubleshooting Accessing System Logs To configure the System Log for use during troubleshooting efforts 1 Select Management gt System Log 2 Click Configure System Log System Log Configuration If the log mode is enabled the system wi selected level will be displayed If the sele recorded in the local memory Select the desired values and click Apply Log O Dis
35. le Interface atm0 0 0 35 Precedence DSL Latency Patho se Figure 41 QoS IPTV Queue Configuration 9 Name enable and select the WAN interface to be fed by this queue IMPORTANT Again select the routed WAN interface created in the Creating the WAN Service NOTE section 10 Select a Precedence of 2 NOTE IPTV traffic should be of LOWER priority HIGHER Precedence value than VoIP traffic SmartRG 2012 Confidential Page 49 SmartRG Residential Gateways 11 Leave the DSL Latency value set to PathO and Click Apply Save NOTE The default data queue depicted in the QoS architecture diagram above does not need to be specifically created 12 Enable the newly created queues by selecting Advanced Setup gt Quality of Service gt QoS Queue Config check the Enable boxes for the new queues and click Enable The correct queue configuration for VoIP and IPTV services should look like QoS Queue Config Setup maximum 24 entries can be configured If you disable the WMM Advertise function In the Wireless Basic Setup page classification related The QoS function has been disabled Queues will not take effect WM Video Priority EM wl 4 Enabled WMM Best Effort Ls wid J Enabled WM Background e wl 6 Enabled f a WM Background lz ow o Enabled f WHE Best WMM Best Effort ls w 0 P Enabled se Jeff Je ele wry sal atm
36. lick Apply Save Port Mirroring Setup Figure 49 Configuring Port Mirroring to Monitor WAN Interface Traffic Page 64 Confidential SmartRG 2012 Contacting SmartRG Technical Support Contacting SmartRG Technical Support For technical support contact Support Monday Friday 5am 6pm Pacific Time UTC 8 00 1 360 859 1780 1 877 486 6210 Toll free from the US amp Canada support smartrg com SmartRG 2012 Confidential Page 65
37. lman Group for Key Exchange Key Life Time 3 Enteraname for the IPSec connection new connection ESP lm 0 0 0 0 Subnet Le 0 0 0 0 255 255 255 0 Subnet e 0 0 0 0 255 255 255 0 Auto IKE Pre Shared Key key Enable Le Hide Advanced Settings Aggressive D AES 256 SHAT 8192bit 3600 Seconds AES 256 Le SHAT 1024bit 3600 Seconds 4 Select the Tunnel Mode Authentication Header AH protects both the IP payload and the IP header Encapsulating Security Protocol ESP protects the original IP payload and SmartRG 2012 Confidential Page 55 SmartRG Residential Gateways 9 10 header by encapsulating it in an additional IP header The outer IP header remains unprotected Enter the IP address of the tunnel s remote IPSec gateway Select either a single IP address or a subnet of IP addresses for the local end of the IPSec tunnel Enter either the single local IP address or the local subnet definition Select either a single IP address or a subnet of IP addresses for the remote end of the IPSec tunnel Enter either the single remote IP address or the remote subnet definition Select the Key Exchange Method Keys can be exchanged manually set identically on both ends or automatically using Internet Key Exchange IKE This example assumes the selection of IKE 11 Select the Authentication Method Authentication can be performed eithe
38. lnet and SSH 1 Select Management gt Access Control gt Services Services LAN VAN FT b Enable L Enable HTTP C Enable icmp Enable L Enable ssh V Enable Enable TELET Enable Enable Ka Enable Enable Ed Enable Fd GET SavelApply Figure 47 Enabling Disabling HTTP Telnet SSH Access 2 Enable disable LAN and or WAN access to the various management services as desired 3 Click Save Apply NOTE For security reasons it is strongly recommended that WAN access to all services be disabled accept during deployment or when troubleshooting Page 60 Confidential SmartRG 2012 Managing Your SmartRG Gateway Configure User Logins SmartRG gateways support the following user roles admin unrestricted access by a PC connected to a LAN port Support unrestricted access by an ISP technician connected through the managed WAN interface To change user passwords 1 Select Management gt Access Control gt Passwords 2 Enterthe username admin or support 3 Enter the old password and the new password 4 Click Apply Save Default username password values are admin admin when accessed from the LAN and support support when accessed from the WAN SmartRG 2012 Confidential Page 61 SmartRG Residential Gateways Reset the Gateway Hardware Reset Reset the gateway by inserting a paper clip or similar tool into the reset switch
39. nuunennnnnee 13 Figure 6 SRSOON NE Rear Panel Connectors ssssssnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnennnnnnnnnnnnnnnnnnnnnnnnnnneveennnnee 14 Figure 7 SR505N Rear Panel Connectors rrrruvvvvsvnnnnnnannnnnnnunvennnnnnnennnnnnnnnnnnnnnnnunnennnnnnnennnnnnnnnnnnnnnnnuuunnnee 14 Figure 8 Login Username and Password rurunnrvnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnunnnnnnnnnnnnnnnnnnnnnnnnnnnuunnennnnee 15 Figure 9 PENN PE 16 Figure 10 Internet TR 069 Management WAN Connection ss 19 Figure 11 Ethernet Layer 2 Interface Configuration Default 19 Figure 12 Ethernet Layer 2 Interface Configuration VLAN Tagged 20 Figure 13 ADSL Layer 2 Interface Configuration ss 21 Figure 14 VDSL Layer 2 Interface Configuration ss 22 Figure 15 WAN Service Configuration With or Without VLAN Tagging Suppotrt 24 Figure 16 PPP Username and Password ccccccssssssssssssssssssssssssscccceseccceecececseseseesceecesseeeseeseeseseeeeeseesesssess 25 Figure 17 WAN IP dl 26 Figure 18 WAN NAT Firewall and IGMP Settings nee 27 Figure 19 TR 069 Management Settings cccccssscscssssssssssssssesseesesseseseeseeeeeeseseeeeeseseeeseseeeseseseeesseseeeeeess 28 Figure 20 LAN SERINES Lee 29 Figure 21 Adding DHCP Static IP RT TEEN 30 Figure 22 Wireless Basic SettingS rruuunnnnnnnnvnnnnnnnnnnnnnnnnnnunnennnnnnnnnnnnnnnnnnnnnnnnnuuennnnnenennnnnnnnnnnnnnnnnuuunnnnnneee 31 Figure 23 Wireless
40. o 2 pat Jafo Figure 42 QoS Queue Enable Page 50 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases 13 Create the VoIP traffic classifier by selecting Advanced Setup gt Quality of Service gt Q0S Classification and click Add Add Network Traffic Class Rule The screen creates a traffic class rule to classify the upstream traffic assign queue name and at least one condition below All of the specified conditions in this classifici Traffic Class Name Rule Order Rule Status Specify Classification Criteria blank criterion indicates itis not used for classification IF Us w 01 02 03 04 05 06 FF FF FF 00 00 00 Class Interface Ether Type Source MAC Address Source MAC Mask Destination MAC Address Destination MAC Mask Source IP Address ww Source Subnet Mask Destination IP Address Destination Subnet Mask mm Differentiated Service Code Point DSCP Check Protocol Specify Classification Results Must select a classification queue blank mark or tag value means no change Assign Classification Queue Mark Differentiated Service Code Point DSF Mark 802 1p priority Tag VLAN ID 0 4094 Figure 43 QoS VolP Classifier Configuration 14 Set the Name Rule Order and enable the classifier rule IMPORTANT If you create the classifier rules in priority order VoIP then IPTV you may leave the NOTE Rule Order set to
41. ooping has been enabled on the LAN as detailed in Use Case Setting Up the LAN 2 Create a routed WAN connection as detailed in Use Case Creating WAN Connections for Internet Access and Remote Management 3 Optional Create traffic classifiers and priority queues for the various traffic categories on your LAN e g Internet data IPTV and VoIP as detailed in Use Case Applying Quality of S The SmartRG family of gateways employs Differentiated Services RFC 2474 to provide IP traffic QoS When configuring QoS for various traffic categories the following Differentiated Services Code Point DSCP values or suggested e Internet data Best Effort DSCP O e IPTV AF21 DSCP 18 VoIP Expedited Forwarding DSCP 46 Some STBs pre mark their IP traffic making classification a relatively straightforward task for the gateway If your STB pre marks its traffic passing the DSCP mark through SmartRG 2012 Confidential Page 45 SmartRG Residential Gateways ee unchanged is suggested Routed IPTV Configuration Multiple WAN Connections It is also possible to create routed IPTV configurations with multiple WAN connections The notable difference to typical routed IPTV configurations is the addition of one or more bridged WAN connections to support multiple multicast IPTV streams Again QoS is suggested A typical multi WAN connection routed IPTV service configuration is shown below gt All LAN H
42. osts IPTV STBs Figure 37 Routed IPTV Configuration Multiple WAN Connection To configure the SmartRG for multi WAN connection routed IPTV service deployments follow the single WAN connection routed IPTV configuration instructions above plus add bridged WAN connections using the instructions detailed in Creating Bridged WAN Connections Page 46 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Use Case Applying Quality of Service QoS to VoIP and IPTV LAN Traffic When deploying time critical services such as VoIP and IPTV comingled with common data services it becomes necessary to prioritize the time critical upstream LAN traffic over common data traffic e g Internet data and file transfers Time critical traffic commonly includes SIP signaling VoIP call setup teardown and IGMP signaling IPTV channel change The SmartRG line of gateways prioritizes time critical traffic using the Differentiated Services Code Point field in the IP header as defined by RFC 2474 NOTE The residential gateway plays no part in the prioritization of downstream traffic Traffic generated by LAN hosts such as VoIP phones IPTV STBs and PCs is identified by classifiers and placed into prioritization queues Queues are emptied through the routed WAN connection based on queue priority Classifiers can identify traffic based on a number of criteria including source destination MAC address sou
43. p priority Tag VLAN ID 0 4094 Figure 44 QoS IPTV Classifier Configuration 20 Set the Name Rule Order and enable the classifier rule IMPORTANT If you create the classifier rules in priority order VoIP then IPTV you may leave the NOTE Rule Order set to Last Each successive classifier rule created will become the last one checked in the traffic identification process Page 52 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases 21 Select an Ether Type of IP 0x800 22 Enter the Differentiated Service Code Point DSCP Check value NOTE AF21 DSCP18 is common for Mediaroom STBs 23 Assign the Classification Queue identified by WAN interface amp Precedence amp Path 24 Click Apply Save The correct classifier configuration for VoIP and IPTV services should look like QoS Classification Setup maximum 32 entries can be configured Choose Add or Remove to configure network traffic classes If you disable the WMM Advertise function in the Wireless Basic Setup page classification related to wireless will not have any effect CLASSIFICATION CRITERIA CLASSIFICATION RESULTS Ord Class Ether SrcMAC Mask DstMAC SrcIP DstIP Dst DSCP 202 1P Queue DSCP 802 1P vlanID bl Name Order eat FE de mm Proto p n E mm am Mark Tag SE vor hl bp 01 02 03 04 05 06 FF FF FE 00 00 of ooo lalo epp e DO a EE art tere Figure 45
44. ports to the bridge group you can specify the Vendor ID of the set top box Any traffic received on any LAN port containing the specified Vendor ID will be bridged to the designated bridged WAN connection To configure Vendor ID based interface groupings add only the WAN interface s to the bridge group and then specify the required Vendor ID s in the following list Automatically Add Clients With the following DHCP Vendor IDs STE ID Figure 35 Vendor ID Based Interface Groupings Page 44 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Routed IPTV Configuration Single WAN Connection The common routed IPTV configuration is virtually identical to the WAN connection configuration for Internet data services with one notable exception the addition of quality of service QoS While not an absolute requirement applying QoS to LAN traffic with higher priority given to STBs ensures the timely and deterministic delivery of IPTV related uni cast requests and IGMP signaling through the gateway This provides repeatable shortest time possible channel changes in the presence of other LAN traffic A typical routed IPTV service configuration with only one WAN connection is shown below All LAN Hosts IPTV STBs segment LAN Ports Enable SMP Snooping Figure 36 Routed IPTV Configuration Single WAN Connection To configure the SmartRG for routed IPTV service deployments 1 Ensure IGMP Sn
45. r 2 interface for this service Mote For ATM interface the descriptor string is portId vp vell For PTM interface the descriptor string is portId high low Where portId 0 gt DSL Latency PATHO portid 1 gt DSL Latency PATHI portId 4 gt OSL Latency P4THORL low 0 gt Low PTM Priority not set low 1 gt Low PTM Priority set high 0 gt High PTM Priority not set high 1 gt High PTM Priority set Figure 28 Selecting a Bridged WAN Service s Layer 2 Interface 3 Select the Layer 2 Interface created in step 1 above from the drop down list and click Next SmartRG 2012 Confidential Page 37 SmartRG Residential Gateways 4 Select Bridging and click Next WAN Service Configuration Select WAN service type PPP over Ethernet PPPOE IP over Ethernet e Bridging Enter Service Description br 0 0 36 Figure 29 Creating a Bridged WAN Service 5 Review the bridged WAN service summary and click Apply Save if you are satisfied 6 Repeatsteps 1 5 as necessary to support your particular IPTV configuration i e single or multi WAN connection NOTE Some DSLAMS require multiple WAN connections to support IPTV services Contact your DSLAM vendor for IPTV configuration details IMPORTANT The IGMP bridged WAN connection MUST be the last bridged WAN connection NOTE created 7 Ensure IGMP Snooping has been enabled on the LAN as detailed in the Use Case Setting Up the
46. r with a Pre 12 13 14 Shared Key or a certificate This example assumes the selection of a Pre Shared Key Enter the Pre Shared Key value Both character and hexadecimal values are acceptable e g 0x123abc456def789 or VPN tunnel_123 Enable Disable Perfect Forward Secrecy PFS ensures the same key will not be generated again forcing a new Diffie Hellman key exchange This prohibits hackers from snooping a present transmission to decipher a key and then use that key to observe future data transmissions Set the Phase 1 Advanced IKE Settings establish a secure authenticated channel a Select the Mode Main mode is more secure but adds delay Aggressive mode is faster but less secure Select the Encryption Algorithm AES 256 is the most secure Select the Integrity Algorithm MD5 is a one way hash with a 128 bit digest SHA1 is a one way hash with a 160 bit digest d Select the Diffie Hellman Group for Key Exchange Diffie Hellman is a cryptography protocol enabling two devices to establish a shared secret via unsecured channels More bits provide greater security but come with increased time for key computation e Specify the Key Life Time Keys will be renewed after this interval 15 Set the Phase 2 Advanced IKE Settings generate keys and negotiate the IPSec Security 16 Association a Repeat steps 14b 14e Click Apply Save Page 56 Confidential SmartRG 2012 Managing Your SmartRG Gateway
47. rce destination IP address protocol DSCP mark etc This section describes a typical QoS configuration to prioritized upstream VoIP and IPTV traffic A typical VolP IPTV data QoS configuration is shown below k fo VoIP Queue Routed SCH lt gt fia WARN Connection Figure 38 Typical QoS Configuration to Support VolP and IPTV Services NE Data Derat Queue VoIP traffic is identified by its source MAC Mask VoIP user agent OUI and IPTV traffic is identified by the DSCP mark in its IP header All remaining traffic is placed in the data default queue NOTE Mediaroom based IPTV STBs place the DSCP18 mark on all upstream traffic The QoS configuration process is comprised of three main steps e Enable QoS on the routed WAN connection and enable QoS processing e Create traffic queues to prioritize the different types of traffic and e Create traffic classifiers to identify the different types of traffic SmartRG 2012 Confidential Page 47 SmartRG Residential Gateways To configure the SmartRG s QoS feature 1 Ensure the layer 2 WAN interface Enable Quality of Service check box is checked as detailed in the Layer 2 Interface configuration sections 2 Select Advanced Setup gt Quality of Service gt QoS Config QoS Queue Management Configuration If Enable QoS checkbox is selected choose a default DSCP mark Note If Enable Qos checkbox is not selected all QoS will Note
48. s bridged IPTV as detailed in the Bridged IPTV Configuration section To configure the layer 2 Ethernet interface to support VLAN tagged traffic 1 Select Advanced Setup gt Layer2 Interface The default Ethernet WAN interface eth0 5 LAN4 will be displayed Check the Remove box and click Remove Click Add Select VLAN MUX Mode ETH WAN Confiquration This screen allows you to configure a ETH port Select a ETH port sth0 LANA Select Connection Mode O Default Mode Single service over one connection fe VLAN MUX Mode Multiple Vlan service over one connection O MSC Mode Multiple Service over one Connection Figure 12 Ethernet Layer 2 Interface Configuration VLAN Tagged 5 Click Apply Save 802 1P priority and 802 10 VLAN tag values will be set at the time of WAN Service creation as detailed in Creating the WAN Service Page 20 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases Configuring the Layer 2 Interface ADSL To configure an ADSL layer 2 interface 1 Select Advanced Setup gt Layer2 Interface and click Add ATM PYC Configuration This screen allows you to configure an ATM PVC identifier WPI and VEI enable it VPI 0 255 a VCI 32 65535 35 Select DSL Link Type Eco is for PPPoE IPoE and Bridge J EoA PPPoA O IPoA Encapsulation Mode LLC SNAP BRIDGING we Service Category UER without PCR ze Select Conne
49. the primary SmartRG gateway a configure the LAN interface following the instructions in the Use Case Setting Up the LAN section b ensure the DHCP Server is ENABLED and set the End IP Address such that enough LAN IP addresses are left for static allocation to the remote gateway s included in the WDS system 4 Onthe remote SmartRG gateway s a configure the LAN interface following the instructions in the Use Case Setting Up the LAN section It is IMPORTANT to disable the DHCP server b ensure the LAN IPaddress es are assigned from the remaining IP addresses not included in the DHCP server pool on the primary SmartRG gateway IMPORTANT At this point your web browser session will terminate as the LAN IP address has changed from 192 168 1 1 to 192 168 1 x Reconnect your web browser to the remote SmartRG referencing the new LAN IP address To configure the WIRELESS interfaces 5 On the primary SmartRG gateway configure the WIRELESS interface following the instructions in the Use Case Setting Up Wireless section Do NOT select Auto for the Channel value 6 On the remote SmartRG gateway s configure the WIRELESS interface following the instructions in the Use Case Setting Up Wireless section Select the same SSID Security settings and Channel configured on the primary gateway 7 On the primary and remote SmartRG gateways 1 select Wireless gt Wireless Bridge and set AP Mode to Acc
50. uration This screen allows you to configure 4 PTM connection Select DSL Latency Patho CT Pathi Select PTM Priority Normal Priority High Priority Preemption Select Connection Mode Default Mode Single service over one connection VLAN MUX Mode Multiple Vlan service over one connection O MSC Mode Multiple Service over one Connection Enable Quality Of Service Enabling packet level QoS for this PTM interface Use Advanced SetupfQuality of Service to assign priorities for the applications Figure 14 VDSL Layer 2 Interface Configuration 2 Select the DSL Latency PathO is typical Select the PTM Priority Normal Priority is typical 4 Select the Connection Mode Default Mode is typical when VLAN segmentation is not required Page 22 Confidential SmartRG 2012 Configuring Your SmartRG Common Use Cases 5 IMPORTANT Check Enable Quality of Service if you intend to support QoS classified traffic through the WAN service 6 Click Apply Save NOTE Enabling QoS for routed IPTV service configurations will improve channel change performance 802 1P priority and 802 10 VLAN tag values will be set at the time of WAN Service creation as detailed in Creating the WAN Service Configuring the Layer 2 Interface VDSL PTM with VLAN Tags In some applications it may be necessary to segment the PTM WAN interface into separate VLANs A common application for a VLAN
Download Pdf Manuals
Related Search