SI3000 Sinope568+ Wireless Home Gateway User Guide
Contents
1. 4 11 Remote Access Management Stations allow a specific host or range of hosts remote access to your home gateway device without having to go through NAT and or Firewall This function is intended for expert users helpdesk your ISP administrators in order to connect to your device and configure it remotely To configure remote access 1 Select System gt Remote Access The following page opens ISKRATEL 4 12 Status A 37 Remote Access Management Stations Enable remote access from management stations to let an expert e g helpdesk configure your Router remotely To allow remote access to your router via Application Start IP Address End IP Address Web Browser Web Server Port On Wan Interface fo After a remote access session you should come back to this page and disable access Apply Figure 4 44 Remote Access Select the Web Browser option In the fields Start IP Address and End IP Address type the host IP address or address range If necessary change the port number Web Server Port on Wan Interface field the default port is port 80 Click Apply 4 12 Status The status pages allow you to observe the following Internet Connection Wireless Connection list of connected wireless PCs Traffic Statistics DHCP Table ARP Table Select a corresponding link to observe these statuses2. Existing DHCP server subnets Use local host Use local host je Edit Ip Subnet Mask address address Edit Delete l as DHS server as default gateway pe Ranges Subnet Value 192 168 1 0 255 255 255 0 true true tue amp ff amp Add Subnet Existing DHCP fixed IP MAC mappings IP Address Mac Address Max Lease Time Default Lease Time Edit Delete Add Fixed Host Figure 4 9 DHCP Server Configuration page 16 A C User Guide ISKRATEL 4 4 4 1 To add a DHCP subnet 1 On the DHCP Server Settings page click Add Subnet The following page is displayed Local Network Configuration IP Address UPnP Global DHCP Settings DHCP Server Settings Add DHCP server subnet This page allows you to set up a new DHCP server subnet so that the system can assign IP address subnet mask and option configuration parameters to DHCP clients The DHCP Server must be enabled to add a subnet to it Parameters for this subnet Define your neve DHCP subnet here If you do not wish to specify the subnet value and subnet mask by hand you may instead select an IP interface using the Get subnet from IP interface field A suitable subnet will be created based on the IP address and subnet mask belonging to the chosen IP interface Subnet value fi 92 166 1 0 Subnet mask 255 255 255 0 Maximum lease time 66400 Seconds Default lease time 43200 Seconds DNS server option information You may allow DHCP server to specify its own IP address by c
3. Type in Filter Rule Name select policy e ext int e ext dmz e dmz int Start Start start Start extin Outbound traffic O Inbound traffic O Both ALL Allow e Enable Enable End End End End Disable Disable Figure 4 31 Add IP Filtering Rule Select the direction to filter packets e Outbound traffic e Inbound traffic e Both Select Port Filter Rule or IP Val Port Filter Rule idator Rule Protocol e ALL Used for default Port Filter rule e TCP e UDP e ICMP e GRE Filter Action e Allow Allow specified packets in firewall e Deny Deny specified packets in firewall Source IP Range ISKRATEL ISKRATEL 4 7 2 Parental Control URL Filter A 29 e Start e End Destination IP Range e Start e End Source Port Range e Start e End Destination Port Range e Start e End Status e Enable Enable Port Filter Rule e Disable Disable Port Filter Rule 7 IP Validator Rule IP address e SINGLE IP Validator Rule blocks single IP address e SUBNET IP Validator Rule blocks subnet group of IP addresses IP address Netmask Status e Enable Enable IP Validator Rule e Disable Disable IP Validator Rule 8 To confirm the settings click Apply 4 7 2 Parental Control URL Filter Parental Control feature provides the facility to block WAN side access from the specified internal PCs in your network for a specified duration as configured by the
4. you need to ask your network administrator for the appropriate IP settings wi EB Client for Microsoft Network M ge File Eeer AE C Obtain an IP address automatically w A Internet Protocol TCP IP Ge Use the following IP address IP address tee H Fa Install U Subnet mask 255 255 255 0 Description Default gateway i Transmission Control Protocol area network protocol that pros diverse interconnected networl C Obtain DNS server address automatically Use the following DNS server addresses Show icon in taskbar when con Preferred DNS server Alternate DNS server i i i Advanced OK Cancel Figure 3 4 User defined IP address set up for Local Area Connection on computer The IP address of the modem can also be changed you can learn about that under the WEB management connection sections of the manual 3 4 3 Obtain an IP automatically If you enable DHCP server in Sinope568 is the easiest way to set up a connection to configure the LAN adapter on your system to obtain an IP automatically This can be done in your operational system by managing the Local Area Connection Properties The TCP IP protocol must be installed on your system and set to obtain an IP address automatically Example is shown on the picture below 3 5 A C User Guide ISKRATEL General Connect using B3 3Com EtherLink XL PCI Co Components checked are used b 2 x General You c
5. Annex B Argon 4x1 CSP v1 0 ISOS 9 0 E 74 2 36 Enabled 0 kbps 0 kbps 192 168 1 1 not currently set not currently set not currently set Figure 4 1 Device Overview 4 2 Save Configuration This page allows you to save the current configuration changes you have made to the flash memory of the device 1 Select Configuration gt Save Configuration The following page opens ISKRATEL 4 3 Internet A 11 Save configuration This page allows you to commit confiuration you have made during the last configuration session Commit Configuration Use to save current Router s config Figure 4 2 Save Configuration page 2 To save the changes you have made click Commit 4 3 Internet You can access the Internet in one of several ways depending on the service provided by your Internet Service Provider ISP Automatically detect settings With this access type Sinope568 will scan for a link to the Internet Using PPPoA Point to Point Protocol over ATM allows Internet access only after you have entered a valid username and password Using PPPoE Point to Point Protocol over Ethernet allows Internet access only after you have entered a valid username and password Using DHCP Dynamic Host Control Protocol automatically allows Internet access Use direct manual settings provided to you by your ISP Note Some providers do not support all connection types listed above In this case only G
6. Configuration Security You can encrypt wireless network data transmissions using wireless network security Select an encryption option fram the list below Off no encryption on the wireless network 64bit encryption on the wireless network 128bit encryption on the wireless network Wi Fi Protected Access WPA on the wireless network Wi Fi Protected Access2 VVPA2 on the wireless network Next Cancel Figure 4 18 64 a28 bit encryption 2 Click Next The following page opens ISKRATEL 4 5 2 1 64 128 bit encryption A 21 Wireless Network Security To use VYEP encryption you need to create a key You can either enter a key directly or you can enter a passphrase which Sinope566 Home Gateway can use to generate the key for you Key enter the key directly Passphrase enter a phrase from which to generate the key Next Cancel Figure 4 19 Key or password selection 3 Select on of the two options Key Enter a key of your choice For a 64 bit encryption the key must consist of 10 characters long letters A to F or digits 0 to 9 For a 128 bit encryption the key must be 26 characters long letters A to F or digits O to 9 Pasphrase Select this option if you want the device to generate a key based on the passphrase that you provide 4 After you have provided the key the following page opens Wireless Network Address Authentication You can restrict which wireless PCs can connect to your de
7. Displays a configuration page for the selected element 4 Managing Sinope568 Router This section describes the web management interface configuration options and gives instructions for configuring your router The main areas of configuration are divided into the following groups and elements Device e Overview Configuration Save Configuration Internet Local Network Configuration Wireless Network e Voice Configuration Security DNS settings Port Configuration 10 A C User Guide ISKRATEL System Administration Password e Remote Access Status e Internet Connection Wireless Connection Traffic Statistics e DHCP Table e ARP Table 4 1 Overview The Overview page displays useful current information about Sinope568 The page shows the network addresses being used by Sinope568 to connect to your PCs and for your Internet connection as well as the version information for Sinope568 The hardware version information is set by Iskratel so the make and model of your device can be quickly identified in the unlikely even that you need assistance Overview of Device Information Refresh Equipment Vendor Product Hardware type Chipset Version No Broadband Port Downstream Line Rate Upstream Line Rate LAN IP Address Default Gateway Primary DNS Server Secondary DNS Server IskraTEL Sinope56s Home Gateway x53686
8. available types are displayed 4 3 1 To establish internet connection ds Select Configuration gt Internet The following page opens 12 A C User Guide ISKRATEL Internet Connection Configuration On this page you can configure your Home Gateway to establish PPPoE Internet Connection instead of your Computer When you will do this your Home Gateway will start acting as Default Router Gateway for your local network PPPoE Connection is NOT established Connect Figure 4 3 Internet connection configuration page 2 Click Connect The Log In page opens Log In Your Router is not ready to connect to Broadband Help Enter your Broadband user name and password then click Connect Broadband User Name new ser Password reece You are not connected to Broadband These details should be obtained from your Broadband Internet service provider Connect Figure 4 4 Log In page 3 Type the username and password provided by your ISP To continue click Connect 4 4 Local Network Configuration These pages allow you to configure the following settings IP Address UPnP Global DHPC Settings DHPC Server Configuration To access these settings Select Configuration gt Local Network The Local Network Configuration page opens 1 ISKRATEL 4 4 1 IP Address A 13 Local Network Configuration IP Address UPnP Global DHCP Settings DHCP Server Settings L
9. e POWER Plug the power cable to ensure power to the Sinope568 home gateway RES Reset button This button is used to reset the configuration of the home gateway to factory default values You must hold this button while the home gateway is starting up until ALM led will start flashing fast about 30 seconds Sinope568 will use factory default settings only for the time it is running If you want to preserve factory default settings save the configuration ETH1 2 3 4 4 Ethernet 10Base T 100Base T ports Use a straight through or crossover Ethernet cable to connect your Sinope568 home gateway to a computer or any other device Up to four devices can be connected without using external Ethernet switch It is possible to manage the settings of the home gateway with telnet connection using this port The factory setting for IP address is 192 168 1 1 e WAN This port is used for connecting the ADSL cable to your phone jack Connect the Sinope568 home gateway to the WAN port to access the Internet TEL1 TEL2 This port is used to connect analog phones 4A C User Guide ISKRATEL 3 2 Light indicators The following figure shows the front panel of your Sinope568 home gateway Figure 3 2 The front panel of the Sinope568 home gateway There are five LEDs on the front panel of the modem that indicate the status of your Sinope568 home gateway e Power Broadband e Data e Wireless Phone ISKRATEL 3 2 Li
10. 00 New settings only take effect after your Router is rebooted ecessary reconfigure your PC s IP address to match new settings Figure 4 6 IP Address page 2 If you change any of the settings confirm and save the settings by clicking Apply 14 A C User Guide ISKRATEL 4 4 2 UPnP Universal Plug and Play UPnP is an architecture for pervasive peer to peer network connectivity of intelligent appliances wireless devices and PCs of all form factors It is designed to bring easy to use flexible standards based connectivity to ad hoc or unmanaged networks whether in the home in a small business public spaces or attached to the Internet Universal Plug and Play is a distributed open networking architecture that leverages TCP IP and the Web technologies to enable seamless proximity networking in addition to control and data transfer among networked devices in the home office and public spaces 1 Inthe Local Network Configuration page click the UPnP tab The following page opens Local Network Configuration IP Address UPnP Global DHCP Settings DHCP Server Settings UPnP Settings Enable UPnP to help support applications that would not otherwise work behind a Router Both UPnP Internet Gateway Device and NAT Traversal are supported V Enable UPnP Apply Figure 4 7 UPnP Settings 2 Click Enable UPnP to help support applications that would not otherwise work behind a Router 3 To continue click Apply 4
11. 21 Wireless Network Confirm settings 4 5 2 2 Wi Fi Protected Access WPA WPA2 For both encryption methods you need to set a passphrase Your wireless network can be accessed only by providing this passphrase 1 Select Wi Fi Protected Access WPA on the wireless network or Wi Fi Protected Access2 WPA2 on the wireless network The following page opens Wireless Network Wi Fi methods select the Wi Fi configuration Authentication Method Seletion Select the Authentication method PSK Pre Shared Key for Local Authentication EAP Extensible Authentication Protocol for remote Authentication Encryption Method Seletion Select the Encryption protocol method C TkKiP Temporal Key Integrity Protocol protocol AES CCMP protocol Next Cancel Figure 4 22 Wi Fi Methods 2 Select the Authentication method and the Encryption protocol method 3 Click Next The following page opens ISKRATEL 4 5 2 2 Wi Fi Protected Access WPA WPA2 A 23 Wireless Configuration Wi Fi Protected Access You must provide a pass phrase for Wi Fi Protected Access This should consist of between 6 and 63 characters Pass phrase wifigeslo Next Cancel Figure 4 23 Wi Fi Protected Access 4 Provide a passphrase to access your wireless network The passphrase must consist of at least 8 and not more than 63 characters Wireless Network Address Authentication You can restrict which wireless PCs can connect to your device S
12. 4 3 Global DHPC Settings The Global DHCP Settings page allows you to enable or disable DHCP Server running on your Sinope568 DHCP Server can automatically configure your PCs connected to Sinope568 to be able to connect to the Internet You must enable DHCP Client Automatically configure IP address on your computer 1 In the Local Network Configuration page click the Global DHCP Settings tab The following page opens ISKRATEL 4 4 4 DHPC Server Configuration A 15 Local Network Configuration IP Address UPnP Global DHCP Settings DHCP Server Settings DHCP Server Configuration This page allows you enable and disable the DHCP server Also you can specify the interfaces that DHCP Server will operate on DHCP server Status DHCP server is currently Enabled Disabled Figure 4 8 Global DHCP Settings 2 Enable or disable the DHCP server By default the DHCP server is enabled 3 Click Apply 4 4 4 DHPC Server Configuration The DHCP Server Configuration page allows you to create DHCP server subnets and DHCP server fixed host IP MAC mappings In the Local Network Configuration page click the DHCP Server Settings tab The page displays any configured DHCP server subnets or DHCP fixed IP MAC mappings Local Network Configuration IP Address UPnP Global DHCP Settings DHCP Server Settings DHCP Server Configuration This page allows creation of DHCP server subnets and DHCP server fixed host IP MAC mappings
13. AN side IP Address Settings Primary IP Address Enter here the IP address of your Router This is the address visible from the computers on your network IP Address fi 92 166 1 1 Subnet Mask 255 255 255 0 Host Name gateway Domain Name home Secondary IP Address M Configure secondary IP address and subnet mask IP Address 0 0 0 0 Subnet Mask 0 0 0 0 Figure 4 5 Local Network Configuration page 2 The settings are accessible through tabs listed below the page title To access a specific setting click the corresponding tab 4 4 1 IP Address The IP address page displays the IP address and subnet mask for Sinope568 These provide a unique address for Sinope568 as well as giving it the range of addresses to use for other PCs that are connected to Sinope568 Sinope568 s default IP address and subnet mask are suitable for most networks 1 Inthe Local Network Configuration page click the IP Address tab The following page opens Local Network Configuration IP Address UPnP Global DHCP Settings DHCP Server Settings LAN side IP Address Settings Primary IP Address Enter here the IP address of your Router This is the address visible from the computers on your network IP Address fi 92 168 1 1 Subnet Mask 255 255 255 0 Host Name gateway Domain Name home Secondary IP Address M Configure secondary IP address and subnet mask IP Address 0 0 0 0 Subnet Mask 0 0 0 0 MTU 1500 default 15
14. ISKRATEL a Cal 2000 Broadband CPE Sinope568 Wireless Home Gateway User Guide i A User Guide ISKRATEL The Table of Contents contains 6 pages The document contains 37 pages Document ident no KSS60250B EDE 030 Document Title Sinope568 Wireless Home Gateway User Guide ISKRATEL 2008 All rights reserved Technical specifications and features are binding insofar as they are specifically and expressly agreed upon in a written contract Technical modifications possible ISKRATEL User Guide A ii SAFETY PRECAUTIONS When using the equipment observe the following signs warnings and safety precautions The following requirements should be fulfilled in order to ensure optimal performance of the device up to date technology without any danger of damaging the equipment or the users Sensitivity to static electricity To protect the equipment sensitive to static electricity always use an antistatic wrist strap For an even higher level of protection we recommend that you equip the room with antistatic floor and wear an antistatic overall cotton gloves and conducting footwear Please read the installation instructions in the User Manual thoroughly before you set up the unit Correct handling ensures the safety of the user and the equipment The device is designed for indoor use The unit should be used in a sheltered area within a temperature range from 5 to 40 Celsius Do not expose
15. add a port forwarding rule 1 Inthe Port Forwarding page click Add The following page is displayed Port Forwarding Add New Port Forwarding Rule Name Pre defined Audio Video D Camerades DI C User defined WAN Interface opp D Forward to Internal Host Name sort D C Forward to Internal Host IP Address By using the rules External Port Internal Port Port Start Port End Port Start Port End ge Protocol Figure 4 36 Add New Port Forwarding Rule 2 In the Name area choose predefined applications Predefined or your applications defined by yourself User defined e Pre defined Select one of the predefined groups of applications and then the application e User defined Type the name of your application 3 Inthe WAN Interface field select the WAN interface on which you want to apply the port forwarding rule e Forward to Internal Host Name Select the internal host name of device to which you want to forward packets e Forward to Internal Host IP Address Type the internal host IP address of device to which you want forward packets 4 8 DNS settings A 33 ISKRATEL 9 4 By using the rules If you choose predefined applications the data in these fields are set from applications base If you choose user defined application you must enter data manually e Protocol Select protocol which is used by your application Each application has defined protocols and ports that it uses Data can be fo
16. age is displayed Wireless Network Global Settings Port Settings To make sure Sinope565 Home Gateway does not transmit on illegal frequencies you must set where you are in the world Country Setting select country Slovenia D Profiles Select the tvoe of wireless network you wish to use 02 11B G C 902 116 only C 802 11G only Channel Seletion nel yourself or allow to automatica D Allow Sinope568 Home Gateway to select channel C Select a channel manually Manual Selection hannel vou wish the vn Channel 2 D Confirm Cancel Figure 4 13 Global Settings page To make sure Sinope568 does not transmit on illegal frequencies you must set where you are in the world In the Country Setting area select your country from a drop down list 3 Inthe Profiles area select the type of wireless network you wish to use 4 Inthe Channel Selection select one of the following Allow Sinope568 to select channel the device will automatically select the best channel e Select a channel manually select a channel yourself 5 Click Confirm 4 5 2 To configure a wireless connection By default wireless connection is disabled To configure it you must first enable wireless networking 1 Select Configuration gt Wireless Network The following page opens 4 5 2 To configure a wireless connection A 19 ISKRATEL Wireless Network Global Settings Port Settings Wireless networking allows you to connec
17. an get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings wi BR Client for Microsoft Hetwort wi dite and Printer Sharing for KS Obtain an IP address automatically w Internet Protocol TCP IP C Use the following IP address IS adaress Install J subnetmask Description Default gateway Transmission Control Protocol area network protocol that pros diverse interconnected networl Obtain DNS server address automatically Use the following DNS server addresses Kee eg Advanced Show icon in taskbar when con Preferred DNS server Alternate WINS server OK Cancel Figure 3 5 IP obtain automatically set up for Local Area Connection on computer WEB management connection Sinope568 home gateway has embedded WEB server included in the firmware This section of the document describes the basic principles on how to manage the settings of the Sinope568 home gateway using WEB management connection with any web browser 1 To access Web management connection enter the URL in your web browser http lt ipaddress gt for example http 192 168 1 1 lt ipaddress gt is the Local IP address of the Sinope568 home gateway e g 192 168 1 1 for factory default settings The IP addresses of modem and computer must be parts of the same IP network e
18. as 6 hexadecimal pairs seperated by colons e g 00 20 2b 01 02 03 DHCP server fixed host parameters IP address MAC address Maximum lease time 86400 Seconds Default lease time 43200 Seconds Apply Cancel Figure 4 11 Add Fixed Host page 2 Type in IP address that will be given to the host with the specified MAC address MAC address maximum lease time default is 86400 seconds 3 Click Apply 4 5 Wireless Network Sinope568 allows you to connect wireless PCs to the Internet The Wireless Network pages let you enable and disable this feature and set various security settings for your wireless network These pages allow you To Set Wireless Global Settings To configure a wireless connection To access these settings Select Configuration gt Wireless Network The Wireless Network page opens Wireless Network Global Settings Port Settings Wireless networking allows you to connect wireless PCs through Sinope566 Home Gateway to the Internet Please not that you must have VAP Name wireless enabled if you want to use other VAPs VAP Name Wireless network name ESSID Status Security Edit wireless Sinope56o_ internet disabled WPA2 wireless Sinope5bs_voice disabled WPA2 Figure 4 12 Wireless Network page 18 A C User Guide ISKRATEL 4 5 1 Wireless Global Settings 1 Select Configuration gt Wireless Network Click the Global settings tab The following p
19. atnencdatuan 2 KI CHUTE elle e UTC EE 2 Hy We dE 2 eA mm Ly Lg Cs 9 eae eo re me ee woe eer ae ey eee A oo OTE E 6 Sr P S EEN 6 JAT LAN om TF oE esae nra tenets 6 3 4 2 User defined IP address 2 0 0 0 cccccccccccceeccccenececeeeeeceeeceececeeseeeeeceuceeseeseeteeeesseeceseuecessageesseeeeesaes 6 JAJ e ue un let 7 3 5 WEB management dee Il ET Le TEE 8 3 5 1 About the Web management 9 4 Managing Sinope568 ROuter cccccescecsessecseseeeeeseesesseeenseeeesseeeeaseseseesonseeseeees 9 I yaaa eis ett ee ee ees 10 Se e ue TECH TE 10 ec ue EEN 11 4 3 1 To establish internet Copnnechon ccc cccecc ccc ecccessesceeeeceeceeeeeueeeeeuueaueaueauseeuuaueaueaueeusaeuaueeeeenenes 11 4A LG NITE QIAO ME 12 aal E EE 13 ST 14 AAG ET LOPEG ricer ns sien ve easier ein 14 ee HERE ENEE 15 4 4 4 1 To add a DACP subnet iiscssisescsedsossssticussceessnasacsipeatadsaa aesrss sosuensisddosensenedeedneseuesaeatelenstessiesess 16 E er EAR e EEEE 16 ee E Tu 17 e geek COLA eNOS See ee eee ae eee eee ee 18 4 5 2 Toconfigure a wireless CONNGCION siinicicsscdrsscaunrinntcnanrmcrunsimivdinueceicnmaussnimabaidinenestenssiouiieensuus 18 Tod S E E EE 20 452 2 Wi Fi Protected Access Vy Ar eebe ege 22 Eo Tee a 24 Er AN EE 24 Dr o de EE 25 Zar eu eT Be EE 27 ISKRATEL User Guide a V 4 7 1 2 To add edit a port filter rule or an IP validator rue 27 Cle Ee rte ER el eater etc ener tire iio 29 Se On KEE 30 ka FPEO fs ye EE 31 4741 VO GO ER eg
20. button below If you do not wish to apply these settings click on the Cancel button Wireless networking will be enabled The wireless networking SSID will be set to Sinope568_internet The wireless networking security will be set to Wi Fi Protected Access WPA Only the wireless PCs shown below will be allowed to connect to the wireless network 00 01 2 50 3f Confirm Cancel Figure 4 26 Wireless Network Confirm settings 4 6 Voice Configuration The Voice Configuration page enables you to monitor the status of voice connections on your home gateway device Click the Voice option The following page is displayed Voice Configuration Voice Settings Refresh Status Phone 1 registered Phone 2 Number Phone 1 41234567 Phone 2 Figure 4 27 Voice Settings page You can have two phones connected to your device The status of each is indicated either by Phone 1 connected to port TEL1 or Phone 2 connected to port TEL2 Status displays the status of your phones registered unknown Number displays the directory number of your phone 4 7 Security Sinope568 contains advanced security features that prevent other computers on the Internet from connecting to your PCs You should only change the default security settings if you have experience in network configuration In most cases you will not need to make any changes ISKRATEL 4 7 1 IP Filter A 25 The following security features can b
21. ceived from or sent to a specific IP address or a range of addresses If you know the address details of a specific external host whom you believe may attempt to infiltrate or damage your internal network you can block traffic from that host Similarly if an internal host is accessing an external web site that contains unacceptable material you can block their access to it You must also determine which direction packets should be allowed to travel in inbound permitted traffic is transported from the outside interface to the inside interface outbound permitted traffic is transported from the inside interface to the outside interface both inbound and outbound rules apply ISKRATEL 4 7 1 1 IP Filter page A 27 4 7 1 1 IP Filter page Warning These are advanced settings and you should not change them unless you completely understand how things work 1 Select the IP Filter tab The following page opens Security Configuration Port Forwarding Parental ControV URL Filter DMZ Host IP Filter IP Filter Settings This page allows you to specify the IP packet filtering rules to prevent unsolicited access from the Internet or limit the Internet access for computers on your network Warning These are advanced settings and you should not change them unless you completely understand how things work IP Filtering C Disable Enable Apply Port Filters Source Destination Source IP Range Port Destination IP Range
22. curity interfaces the data paths between each of the router s security interfaces look like this dmz external dmz interface external interface ipdmz Firewall A ipwan 4 ae internal interface plan Figure 4 29 Firewall policies between security interfaces You can use the default pre configured Firewall policies add new policies and delete policies Port Filters A Port Filter is a rule that determines how the Firewall should handle packets being transported on a policy between two security interfaces You can create separate filter rules based on e the protocol type of the traffic allowed to be transported which TCP UDP port numbers the packets are allowed to be transported on the name of the well known protocol service or application allowed to be transported source and destination addresses Whichever type of filter rule you use you must also determine which direction packets should be allowed to travel in inbound permitted traffic is transported from the outside interface to the inside interface outbound permitted traffic is transported from the inside interface to the outside interface both inbound and outbound rules apply Note If you create a filter and you want to change the direction that packets are allowed to travel in you must delete the original filter and create another IP Validators An IP Validator is a rule that determines how the Firewall should handle packets re
23. e Internet regardless of port forwarding and firewall settings Warning These are advanced settings and you should not change them unless you completely understand how things work Those IP packets from the interface ppp that do NOT belong to any applications configured in the port forwarding table will be Discarded Forwarded to the DMZ host C Name of DMZ host IP address of DMZ host Figure 4 34 DMZ Host Configuration 3 To setup a DMZ host e Select Forwarded to the DMZ host e Inthe IP Address of DMZ host filed type in its IP address 4 Click Apply 4 7 4 Port Forwarding You can create port forwarding rules to allow certain applications to work on your computers if the Internet connection uses NAT NAT allows you to connect multiple computers to the Internet or any other IP network using one IP address 1 Select the Port Forwarding tab The following page opens 32 A C User Guide ISKRATEL Security Configuration Port Forwarding Parental Control URL Filter DMZ Host IP Filter Port Forwarding Help gt This page allows to create modify and delete port forwarding rules These rules allow applications or software to work on your computers if the Internet connection uses NAT Name Protocol External Port Internal Host Internal Port Edit Delete Add Figure 4 35 Port Forwarding 2 The page displays any previously created rules You can edit or delete these rules or add new rules 4 7 4 1 To
24. e configured Port Forwarding Parental Control URL Filter DMZ Host e IP Filter To access these pages 1 Select Configuration gt Security The following page opens Security Configuration Port Forwarding Parental ControVURL Filter DMZ Host IP Filter Port Forwarding Help gt This page allows to create modify and delete port forwarding rules These rules allow applications or software to work on your computers if the Internet connection uses NAT Name Protocol External Port Internal Host Internal Port Edit Delete Figure 4 28 Security setting page 2 To access and configure specific security feature click the corresponding tab in this page 4 7 1 IP Filter Stateful Firewall Settings on this page are actually Firewall settings A stateful Firewall tracks the movement of packets over a period of time If an outgoing packet includes a request for responses from certain types of incoming packet the packet is tracked to ensure that only those types of incoming packets are allowed through the Firewall Other types of traffic are blocked Each time outbound packets are sent from an inside host to an outside host the following stateful information is logged by the Firewall source and destination addresses e port details protocol type and range of source and destination ports e sequencing information additional flags for each connection associated with that particular inside
25. e lge TUIS EE 32 SR RRR A eia A ENE 33 EET Lg ee ene See nee eee eee eer ee en eee ee eee ee ee eke 33 do N EE riran OE E i 34 CS te E EE 34 e E Ar We e i Ee s KaSS 35 BV GIS AIG PASSION kee ENEE EENEG ege aaa 36 SIr MONO E 36 E Eed 37 ISKRATEL 1 Introduction A 1 1 Introduction 1 1 Features Sinope568 wireless home gateway is a multi mode ADSL and VoIP based wireless IAD integrated access device with the following features e high speed data transmission on single twisted copper pair full rate operations up to 24 Mbit s in downstream e compliant with ADSL ADSL2 and ADSL2 G dmt G 992 1 G lite G 992 2 G dmt bis G 992 3 G dmt bis G 992 5 and T1 413i2 over PSTN line four port 10 100BaseT Ethernet switch for LAN connection POTS FXS interfaces for telephone sets supporting VoIP SIP MGCP automatic data detection e g FAX on POTS ports multiple voice codec support VAD CNG and caller ID support e 802 11b g WLAN support for up to 54Mbit s data transmission rate e Wi Fi WPA for data security e accees for multiple Video clients VLAN tagging 802 1Q per port VLAN ID and Priority field assignment and L2 L3 based QoS in upstream direction SBT full featured Router and Firewall support for secure wireless transmitting and authentication e NAT Network Address Translation for single IP address Internet connection used by the whole LAN community e firewall filtering functio
26. elect how you want to restrict PCs below Allow any wireless PCs to connect Allow all wireless PCs to connect except those specify C Only allow the wireless PCs specify to connect Next Cancel Figure 4 24 Address Authentication 5 After you have provided the passphrase the following page opens Wireless Network Address Authentication You can restrict which wireless PCs can connect to your device Select how you want to restrict PCs below ES Allow any wireless PCs to connect C Allow all wireless PCs to connect except those specify C Only allow the wireless PCs specify to connect Figure 4 25 Address Authentication 6 In this page select one of the following options Allow any wireless PCs to connect with this option you allow any PC to connect to your wireless network Allow all wireless PCs to connect except those specify with this option you specify those PCs that will be denied access to your wireless network Only allow the wireless PCs I specify to connect with this option you specify a list of PCs that 24 A C User Guide ISKRATEL are allowed to connect to your wireless network 7 If you have selected on of the last two options in the previous step you will be prompted to add the MAC addresses of PCs to the list 8 Before you confirm changes that you have made the following page is displayed Wireless Network Confirm To confirm these settings click on the Confirm
27. en assigned a dynamic IP address form your ISP Dynamic DNS provides a permanent domain name for your PC even when your IP address has changed In order to use this feature you must subscribe to a dynamic DNS service Currently supported are dydns org or tzo com 1 Select Configuration gt DNS The following page opens Dynamic DNS LAN Host Dynamic DNS Help This page allows you to provide Internet users with a domain name instead of an IP address to access your virtual servers Your Router supports dynamic DNS service provided by the provider http Awww dyndns org or http wwaw tzo com Please register this service at these providers first Dynamic DNS C Disabled i Enabled Dynamic DNS Provider DynDNS org sl Internet Connection ppp 0 sl User Name pO Password pO Email SE Key Ir Domain Name sss Status D se leede iech ae chaden sere orot Figure 4 39 Dynamic DNS 2 To enable Dynamic DNS feature e Select Enabled e From a drop down list select the corresponding DNS Provider that you have previously subscribed to e Select the type of the internet connection e Inthe User Name field type your DNS subscription username e Inthe Password field type the corresponding password e Inthe Domain Name field type the domain you have registered at the this DNS provider 3 Click Apply 4 9 Port Configuration The Port Configuration page allows you to change the way loca
28. g 192 168 1 0 The following dialog box opens Authentication Required i f E S xX Enter username and password For Weblleer at htp 192 168 1 1 ye User Name Password per Use Password Manager to remember this password Cancel Figure 3 6 Web connection Enter the user name user and password user 3 5 1 About the Web management ISKRATEL 3 Click OK to continue The following page opens Overview of Device Information Overview Refresh Equipment Vendor Product Hardware type Chipset Version No Broadband Port Downstream Line Rate Upstream Line Rate LAN IP Address Default Gateway Primary DNS Server Secondary DNS Server Firmware Version MAC Address IskraTEL Sinope56s Home Gateway x53686 Annex B Argon 4x1 CSP v1 0 ISOS 9 0 E 74 2 36 Enabled 0 kbps 0 kbps 192 168 1 1 not currently set not currently set not currently set 5 1 9 3 14 E 74 2 36 00 01 38 AC 61 F6 Figure 3 7 Overview page 3 5 1 About the Web management The Web management interface enables you to view your modem settings edit and configure them The interface is divided into two frames left frame navigation tree The navigation tree is intended for navigating and accessing the modem configuration pages The elements listed in the tree are hyperlinks When you click a link a corresponding configuration page will be displayed in the right frame right frame display area
29. ght indicators A 5 Table 3 1 Light indicators poh Power is off off No devices connected to the home gateway or the devices are turned off on 70 Devices are connected to the home gateway and turned on 6 A C User Guide ISKRATEL 3 3 Support leg Insert the modem into the support leg provided see figure below then place the unit on a flat even Surface Figure 3 3 Support leg installation 3 4 Preliminary setup 3 4 1 LAN and TCP IP setup This section of the manual provides important information to keep in mind when setting up the first connection between your computer and Sinope568 home gateway The factory default settings of the Sinope568 home gateway have values listed bellow Table 3 2 Factory default settings Local IP address 192 168 1 1 DHCP server Disabled 3 4 2 User defined IP address The default option is to set up the connection by yourself In this case you must specify the IP address of your system Be careful that the subnet values of your system and the modem are the same e g 192 168 1 0 IP address 192 168 1 1 for modem and IP address 192 168 1 2 for computer Example is shown on the picture bellow ISKRATEL 3 4 3 Obtain an IP automatically A 7 2 x General Connect using K g3 Com EtherLink XL PCI Co General You can get IP settings assigned automatically if your network supports this Components checked are used b capability Otherwise
30. host All inbound packets are compared against this logged information and any manually configured address and port details These packets are only allowed through the Firewall if an appropriate connection exists or if a filter explicitly allows that traffic Address and port details are configured by defining Firewall validators and filters This makes it very difficult for hackers to break through the stateful Firewall because they would need to know addresses port numbers sequencing information and individual connection flags for an inside host Firewall policies A Firewall policy is the name of the rule that applies to a data path between two classes of security interface You can add different address validator and filter rules to each policy in order to provide different levels of security to the inside networks attached to the router For example if your DMZ DeMilitarited Zone contains an FTP server that can be accessed by external hosts the rules between the dmz and external security interfaces will be less stringent than those between the internal and external security interfaces Policies exist by default between the external interface and the internal interface between the external interface and the DMZ interface between the DMZ interface and the internal interface 26 A C User Guide ISKRATEL Policies are set to block only the IP addresses specified in validator rules If you have configured your router and created se
31. id domain name You can use wildcard characters and to specify the filter Start Time specify the start time of this filter to become active End Time specify the end time after which this filter will no longer be active Note For correct time of day settings SNTP client must be configured 5 Click Apply G Note After you have set the URL filter and before it becomes active you should wait for a couple of minutes before browsing the internet The time is required to clear the DNS cache and to block the DNS requests 4 7 3 DMZ Host A DMZ host is a computer on your local network that can be accessed from the Internet regardless of port forwarding and firewall settings G Note The Port forwarding rules will override these DMZ settings 1 Select the DMZ Host tab The following page opens A 31 ISKRATEL 4 7 4 Port Forwarding Security Configuration Port Forwarding Parental Control HL Filter DMZ Host IP Filter Help DMZ Host dy A DMZ host is a computer on your local network that can be accessed from the Internet regardless of port forwarding and firewall settings Warning These are advanced settings and you should not change them unless you completely understand how things work Interface DMZ Host Edit ppp 0 N A 7 Figure 4 33 DMZ Host 2 Click Edit The following page opens DMZ Host Configuration A DMZ host is a computer on your local network that can be accessed from th
32. l ports of Sinope568 are used The default port configuration is as follows Ethernet1 2 ports for connecting PCs or other network devices data Ethernet3 4 ports for connecting Set Top Boxes video e USB1 2 ports for wireless data or voice transmission 4 9 1 To change the port function A 35 ISKRATEL To view the current port configuration settings click the Port Configuration option The following page opens Port Configuration Port Configuration allows you to specify the way local ports of Sinope565 Home Gateway are used Helps Currently local ports of Sinope565 Home Gateway are configured as ethernet data Change ethernet2 data Change ethernet3 video Change ethernet4 video Change wireless Sinope56s_internet data Change wireless1 Sinope566_ voice voice Change Figure 4 40 Port Configuration 4 9 1 To change the port function Depending on device type connected to the port you can change the port function 1 To change the port function click Change The following page opens Port Configuration Setup Select one of available options bellow for port ethernet ai data select this if you have computer connected to this port video select this if you have Set Top Box connected to this port voice select this if you have VoIP phone connected to this port 9 ON nothing select this if you do not want to use this port Next gt Cancel Figure 4 41 Port Configuratio
33. less Configuration Security You can encrypt wireless network data transmissions using wireless network security Select an encryption option from the list below C Off no encryption on the wireless network C Abt encryption on the wireless network 4128bit encryption on the wireless network C Wi Fi Protected Access WPA on the wireless network Wi Fi Protected Access2 WPA2 on the wireless network Next Cancel Figure 4 17 Wireless Network Encryption 6 Select encryption for wireless network data transfer Select one of the following Off no encryption on the wireless network 64 bit encryption on the wireless network A basic encryption method You must provide a 10 character hex key 128 bit encryption on the wireless network Advanced encryption method You must provide a 26 character hex key Wi Fi Protected Access WPA on the wireless network A reliable security method You must provide a password of 8 to 63 characters long Wi Fi Protected Access WPA2 on the wireless network Depending on the encryption method you have selected follow one of the following instructions 64 128 bit encryption or Wi Fi Protected Access WPA WPA2 4 5 2 1 64 128 bit encryption For both encryption methods you need to configure a key Your wireless network can be accessed only by providing this key 1 Select 64 bit encryption on the wireless network or 128 bit encryption on the wireless network Wireless
34. licking on the Use local host address as DNS server checkbox Use local host address as DNS server Iv Default gateway option information Use local host as default gateway Apply Cancel Additional option information Add and remove items from this list to configure additional option information you would like the DHCP server to give to clients on this subnet Name Value Delete Option Name Domain Name Servers D Option Value Add Cancel Figure 4 10 Add DHCP server subnet 2 Type in e value and netmask of the subnet and set the maximum and default lease times e DHCP address range or use a default range e set your Synope568 to give out its own IP address as the DNS Server address e set your Synope568 to give out its own IP address as the default Gateway address 3 Click Apply 4 4 4 2 To add a fixed host 1 Inthe DHCP Server Settings page click Add Fixed Host The following page is displayed ISKRATEL 4 5 Wireless Network A 17 Local Network Configuration IP Address UPnP Global DHCP Settings DHCP Server Settings DHCP server fixed host IP MAC mapping Define your new fixed mapping here The IP address you choose will be given to the host with the MAC address you specify The IP address must not clash with an IP address already present in a dynamic address range You should also ensure that there is a suitable subnet defined for the IP address to reside in The MAC address should be expressed
35. n Setup 2 Select one of the available options data computer connected to this port video Set Top Box connected to this port voice VoIP phone connected to this port nothing select this if you do not want to use this port 3 Click Next to continue The following page opens 36 A C User Guide ISKRATEL Port Configuration Confirm Local port ethernet will be used for data To confirm this setting click on the Confirm Changes button below If you do not wish to apply this setting click on the Cancel button Confirm Changes Cancel Figure 4 42 Port Configuration Confirm 4 Examine the settings and if appropriate click Confirm Changes 4 10 Administration Password 1 To change the administration password select System gt Admin Password The following page opens Administration Password It is advisable that the password is changed to keep your system secure Keep a copy of your password somewhere safe H you forget your password your Router will need to be reset and all settings will be lost User name fuser New password Confirm new password Make a note of your new password somewhere safe for future reference Apply Figure 4 43 Administration Password 2 Type in the new password twice in the New password field and in the Confirm new password field The password can be any combination of letters and numbers of up to 20 characters 3 To confirm new settings click Apply
36. ns allowing better network security and management WEB management and Telnet management over CLI Command Line Interface over Ethernet interface and remotely over ADSL interface e support for centralized management node of multiple CPE e g controlled mass remote SW upgrade and auto configuration provisioning via FIP TR 069 compliant firmware upgrade over WEB management or TR 069 Universal Plug and Play feature UpnP Multi level WEB GUI Security URL filtering dynamic Firewall 1 2 Usage 1 2 1 Internet access Your Sinope568 can also be used for high speed Internet connections The TCP IP standards most commonly used for using the Internet are supported by the home gateway device The PPPoE connections in dial up or dial in mode are also possible In order to use your Sinope568 for Internet access there must be a DSLAM installed at a provider company s infrastructure near you DSLAM is a rack of ADSL line cards that links many customer ADSL connections to a single high speed ine A typical Internet access application is shown on figure below You can also use NAT Network Address Translation services that your Sinope568 provides when setting up an Internet connection This feature allows multiple users on LAN to use the Internet connection basing on one IP address The DNS server and DNS relaying is also supported A C User Guide ethernet cable DSL line DSLAM Figure 1 1 Example of Internet access connec
37. port Range Direction oe Filter Policy Filter Name Name Action Range Start End Start End Start End Start End all out ext dmz Allowed ALL 0 0 0 0 255 255 255 255 0 0 0 0 0 0 255 255 255 255 0 0 OutBound Disabled oD Protocol IP Filters e d Filter Name Policy Name IP Address Kei Direction Status Edit Figure 4 30 IP Filter Settings 2 You can select Disable or Enable to disable or enable IP Filtering Firewall 3 If there are any rules already configured you can edit or delete them in this page Select Edit or Delete option accordingly all out ext int and all out ext dmz port filter rules are configured by default and should not be deleted If all out ext int port filter rule is deleted internet connection will not work and you will have to create a new default ext int policy port filter rule 4 To add anew Port Filter Rule or IP Validator Rule click Add 4 7 1 2 To add edit a port filter rule or an IP validator rule 1 In the IP Filter Settings click the Add button to add or the Edit icon to edit the rule The following page opens 28 A Security Configuration IP Filter Add Outbound IP Filtering Rule Filter Rule Name select policy C User Guide select the direction to filter packets Port Filter Rule Protocol Filter Action Source IP Range Destination IP Range source Part Range Destination Port Range Status IP Validator Rule IP address IP address Netmask Status
38. t wireless PCs through Sinope568 Home Gateway to the Internet Please not that you must have VAP Name wireless enabled if you want to use other VAPs VAP Name Wireless network name ESSID Status Security Edit wireless Sinope56s_ internet disabled WPA2 S wireless Sinopeds68_voice disabled WPA2 S Figure 4 14 Wireless Port settings The preconfigured wireless network settings wireless and wireless1 You must first enable 2 Enable the connection wireless Click the Edit link The following page opens Wireless Configuration Enable Disable Enabling wireless networking will allow PCs with wireless network capabilities to connect to the Internet through Sinope56s Home Gateway select whether you want wireless PCs to connect to your wireless network C Disabled Wireless PCs will not be able to connect to your wireless network CS Enabled Wireless PCs will be able to connect to your wireless network Next Cancel Figure 4 15 Enable Disable Wireless network 3 Select the option Enabled and click Next The following page opens Wireless Network Name Before a wireless network can operate you need to provide a name SSID for the network Network Name SSID Sinope568_internet Next Cancel Figure 4 16 Wireless Network Name 4 Provide a unique network name Type the name in the Network Name SSID field 5 Click Next The following page opens 20 A C User Guide ISKRATEL Wire
39. the unit to direct sunlight or other heat sources The housing and electronic components may be damaged by direct sunlight or heat sources Avoid using the device in dusty or damp places and places where there is a risk of explosion Do not expose the device to humidity in a bathroom for example When the device is placed close to devices emitting electromagnetic interferences such as a microwave oven HiFi equipment etc its performance is degraded Move the device outside the disturbance range and the modem resumes its normal operation Do not try to open or repair the unit yourself The unit is a complicated electronic device that may be repaired only by authorized and qualified personnel Only use the power adapter that comes with the package Using a different voltage rating power adapter may damage this unit Place this unit on a stable surface or mount it on the wall Disconnect the power adapter before moving the unit Do not put the cables where people can fall over them Keep the package out of reach of children When you would like to dispose of the unit please follow the local regulations on conservation of the environment ISKRATEL User Guide A iv CONTENTS Book C Sinope568 Wireless Home Gateway User Guide 1 Tut ee TE d TN 1 LI TE 1 T ee eis eee eee 1 L21 ue EE 1 ker S EE 2 E S S E EE en Sele Sere Sea eeEe none eee eeee eee 2 LI PS CON ic sans cides trenidnseiscaseranseesenwrei ned herded demas imide laine tici
40. tion 1 2 2 Security ISKRATEL Connecting your computer to the Internet exposes it to a wide range of risks The Sinope568 wireless home gateway comes with security functions to safeguard your system and data Three types of interfaces can be controlled by the Firewall Internal LAN external WAN and DMZ DeMilitarized Zone A DMZ is usually used by a company that wants to host its own Internet services without sacrificing unauthorized access to its private network Typically the DMZ contains devices accessible to Internet traffic such as HTTP FTP DNS and SMTP servers You can configure the Firewall to allow or block access from one interface type to another interface type You can configure the Firewall by using a default Security level by Firewall port filters by Firewall validators and by Security triggers 2 2 1 Getting started Package contents The package comes with the following items 3 1 The following figure shows the rear panel of your Sinope568 home gateway Sinope568 ADSL Modem unit AC adapter Ethernet RJ 45 UTP cord Phone RJ 11 cord Support leg CD ROM containing user s guide Installation of hardware Ports ISKRATEL 3 1 Ports A Figure 3 1 The rear panel of the Sinope568 home gateway There are several data and voice connectors and an AC power socket on the rear panel of the modem e ON OFF Switch for turning the device on or off
41. und on the Internet for example Also more than one protocol could be set for one application e External Port Port Start Port End Type External Port Start End of your application range 1 65535 Start and End values could be equal Also external and internal ports could be equal e Internal Port Port Start Port End Type Internal Port Start End of your application range 1 65535 Start and End values could be equal Also external and internal ports could be equal 5 Click Apply to confirm the settings 4 8 DNS settings 4 8 1 LAN Host 1 Select Configuration gt DNS The following page opens DNS Table LAN Host Dynamic DNS Refresh Create a New DNS hostname entry manually Host name IP address Creator Delete new12 172 30 1 137 MANUAL CNF i Figure 4 37 DNS Table add new LAN host 2 To add a new LAN host to the DNS table click the Create a new DNS hostname entry manually The following page opens DNS Table Enter Hast Name and IP Address and click Apply button to create entry into DNS table Host Name IP Address Apply Figure 4 38 Add hostname entry 3 Enter the name of the host in the Host Name field and the IP address in the IP Address field 4 Click Apply 34 A C User Guide ISKRATEL 4 8 2 Dynamic DNS Dynamic DNS allows computers on the Internet to access hosts on your network using a domain name rather than an IP address This feature is very useful if you have be
42. user Parent or administrator Many parents want to exercise some control over the Internet access from their child PCs The Parental Control feature will enable a new time based controlling feature It will give the control to the parents administrators to control the traffic from different internal PCs connected to router 1 Select the Parental Control URL Filter tab The following page opens 30 A G C User Guide ISKRATEL Security Configuration Port Forwarding Parental Control URL Filter DMZ Host IP Filter Domain Filter Settings Help gt This page allows you to specify the Domain filter rules to prevent access or allow from the specified configured list of sites so as to limit the Internet access for computers on your network based upon the Domain s Rule Action Allow Deny Apply Filter Name Policy Name Domain Filter Start Time End Time Delete Policy Name Jewitt ee Pee Add Filter Name Domain Filter Start Time hh mm ss End Time hh mm ss Figure 4 32 Parental Control URL Filter Set the rule action Choose Allow to allow access only to URLs that you specify Choose Deny to deny access to URLs that you specify Click Apply to confirm Rule Action set the rule Fill in the following fields Filter Name enter the name of the URL filter alphanumeric characters Policy Name firewall policy ext int ext dmz dmz int Domain Filter Any alphanumeric string that represents a val
43. vice Select how you want to restrict PCs below ES Allow any wireless PCs to connect C Allow all wireless PCs to connect except those specify C Only allow the wireless PCs specify to connect Next Cancel Figure 4 20 Address Authentication 5 In this page select one of the following options Allow any wireless PCs to connect with this option you allow any PC to connect to your wireless network Allow all wireless PCs to connect except those specify with this option you specify those PCs that will be denied access to your wireless network Only allow the wireless PCs I specify to connect with this option you specify a list of PCs that are allowed to connect to your wireless network 6 If you have selected to specify a deny or allow list of PCs in the previous step you will be prompted to add addresses of PCs to the list 7 Before you confirm changes that you have made the following page is displayed 22 A C User Guide ISKRATEL Wireless Network Confirm To confirm these settings click on the Confirm button below If you do not wish to apply these settings click on the Cancel button Wireless networking will be enabled The wireless networking SSID will be set to Sinope568_internet The wireless networking security will be set to 64 bit encryption All wireless PCs except those shown below will be allowed to connect to the wireless network 00 01 f3 ac 01 f Confirm Cancel Figure 4
Download Pdf Manuals
Related Search