ADTRAN NetVanta 1224R User's Manual
Contents
1. ADRAN TECHNICAL SUPPORT NOTE Using the GUI to Configure a NetVanta 1224R STR for Internet Access using an Ethernet Port Cable or DSL modem Featuring ADTRAN OS and the Web GUI Introduction This Technical Support Note shows how to configure the NetVanta 1224R STR for an Internet connection using an ethernet port In this scenario you will usually have a separate cable or DSL modem that will handle the WAN protocol and then provide ethernet to a port on the NetVanta Overview Configuring the NetVanta 1224R STR requires an understanding of the VLAN interface model VLAN interfaces are used to create directly connected networks on the unit Ports can then be defined as members of those VLANs We will utilize VLAN interfaces to create a WAN and LAN segment for the 1224R Next we will add a default route and use the Firewall Wizard to setup basic Internet connection sharing NAPT Step 1 Logging into the unit The unit will come from the factory with an IP address of 10 10 10 1 on the default VLAN 1 interface Set the IP address on your workstation to 10 10 10 2 with a subnet mask of 255 255 255 0 and a default gateway of 10 10 10 1 In this example we will use the first port as our Internet access port Make sure you have an ethernet cable attached from your workstation to any other free port on the unit Open a web browser such as Microsoft Internet Explorer and type in 10 10 10 1 for the URL You will be prompted for a username an2. is used as an example The IP address information should have been provided to you by your Internet Service Provider ISP Getting Started System Summary Physical Interfaces Passwords IP Services DHCP Server Hostname DNS LLOP Ports Port Security Storm Control Link Aggregation YLANS Spanning Tree Mac Forwarding Class of Service Stacking Default Gateway Routing Route Table IP Interfaces OOS Maps Bridging Firewall Wizard General Firewall Security Zones VPN Wizard VPN Peers Certificates Part Mirroring Configuration Firmware Reboot Unit Telnet To Unit Logout Use this dialog to modify the WYLAN configuration If a VLON name is not entered one will be generated Enabled VLAN ID 100 VLAN Interface LAWN Interface Configuration Description Public Enabled Interface Mode IP routing IP Settings Address Type Static IP Address 100 100 100 E Subnet Mask 255 255 255 2s Dynamic DONS lt disabled gt v Secondary IP Settings IF Address Enable or disable this Liban ip to 32 alphanumeric characters PLAN IO fs any number in the range 71 4094 Select this ta configure this VLAN as an iP interace piona descriptive laber for this port UD to 80 alphanumeric characters Enable or disable this LAN interface Media Access Contro aoaress for this interface Select an interface made Enter
3. the IE adaress for this numbered internace Enter the Subnet Mask for this numbered intetace Opnamic ONS fs used to register this intertace s FP address with a OS Name Option B IP Routing Using DHCP This is a typical cable modem setup NetVanta 1224SIR ak Ga vans gt New Wan Getting Started System Summary Physical Interfaces LAN Configuration for LAN100 Passwords IP Services DHCP Server Hostname DNS ioe Enable or disable this LLDP Enabled PEAN Switch Lin to 32 alph iD to aiDphanumernc Ports VLAN Name WLAN100 EE E Fort Security Use this dialog to modify the WYLAN configuration If a VLAN name is not entered one Will be generated LAA IO fs any number n Sre ic EDE in the range 1 4094 VLANs Select thls to configure Spanning Tree VLAN Interface this VLAN as an iP MAC Forwarding interface Class of Service LAN Interface Configuration Stacking Optional descriptive iabe Router A Bridge R this are Ep to 80 Default Gateway alphanumeric characters Routing Enabled a a es tls Route Table et a IP Interfaces foo fao fce i foe ee as Media docess Control O05 Maps es EEE An i adaress for this interface Bridging Interface Mode IP routing Select an interface mode Firewall Firewall wizard IP Settings General Firewall Address Type DHCP v Security zones Opnamic OMS is used ta YPN register this internace s YPN Wizard Oynarmie OA
4. LAIMER ADTRAN provides the foregoing application description solely for the reader s consideration and study and without any representation or suggestion that the foregoing application is or may be free from claims of third parties for infringement of intellectual property rights including but not limited to direct and contributory infringement as well as for active inducement to infringe In addition the reader s attention is drawn to the following disclaimer with regard to the reader s use of the foregoing material in products and or systems That is ADTRAN SPECIFICALLY DISCLAIMS ALL WARRANTIES EXPRESSED OR IMPLIED INCLUDING BUT NOT LIMITED TO MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE IN NO EVENT SHALL ADTRAN BE LIABLE FOR ANY LOSS OR DAMAGE AND FOR PERSONAL INJURY INCLUDING BUT NOT LIMITED TO COMPENSATORY SPECIAL INCIDENTAL CONSEQUENTIAL OR OTHER DAMAGES
5. S lt disabled gt b IE address with a OAS VPM Peers eles Certificates Secondary IP Settings IP Address ee Add a new Secondary IF Address cimvate Reset Caer Reboot Unit Telnet To Unit Option C PPPoE ADSL modem set to pass through mode Set the Interface Mode to PPPoE and click Apply Clicking Apply will open a new page to set PPPoE specific settings NetVanta 1224STR LANSs gt New lan Logout Getting Started System Summary Physical Interfaces LAN Configuration for LAN100 Passwords Use this dialog to modify the VLAN configuration If a VLAN name is not entered one Will be generated IPF Services DHCP Server Hostname DNS i Enable or aisaite this LLDP Enabled VLAN EI D to aloha numeric Ports l VLAN Mame WLANLOO EE Port Security Storm Control VLAN ID ino VLAN DO fs anp number ane a goreuatien in the range 1 4094 VLANS Select this to configure Spanning Tree VLAN Interface ee as an IP MAC Forwarding internace class of Service LAN Interface Configuration Stacking Ootional descriptive labe Router Bridge Description Public for this port UD to 0 Default Gateway alphanumeric characters Routing Enabled oe Went this Route Table ed 00 jao ce oe BE jas Hegia Jecess Contra seat Heese be ee EREE a adoress for this interface aps Bridging Interface Mode josie ka Select an interface made Firewall Wizard IP Setting
6. able Physical Interfaces Passwords Static Routes are often required to reach networks that are not learned via a dynamic routing protocol Enter the appropriate information below to add 4 static route or click on 4 route below to use it as a template for a new route IP Services DHCP Server Hostname DNS Destination fo E fo lho Enter the network to ada to the LLEF Address LH 1 1_ __ i route table eerie o E W W l Enter the appropriate mask far oe Destination Mask o o o jo P E a Fort Security Storm Control Gateway Link Aggregation an Mace Mac eal Enter the gatewap adaress to VLANs Address 100 le 00 a reach this network Va ae Spanning Tree MAC Forwarding Class of Service Stacking Default Gateway Routing Route Table IF Interfaces OOS Maps Bridging Firewall Select the interface to be used Interface as the gatewar Administrative a Sp E The Distance metric for this nN network Qotional parameter Reset add O View Delete Static Route Click on the name of a route to use it as a template for a new route Destination Next Hop There are no entries in the route table Step 5 Assign an Ethernet Port to be a member of the Public VLAN In the example below we are setting the first Ethernet port as a member of VLAN 100 and setting it to edgeport mode to allow this port to come up immediately This port should be plugged into your Internet connec
7. d password for which you should enter admin and password respectively since this is the factory default After successfully entering the username and password the main GUI page will be displayed ADRAN NetVanta 1224STR Save Logout System Getting Started System Summary Physical Interfaces Passwor ds Firmware Yersion 08 02 00 E IP Services Part Number 120062014 Hostname DNS Serial Number LBADTNO41344287 LLDP System Uptime 0 days 0 hours 5 minutes 24 seconds Switch iremis 19 44 52 UTC Ports Port Security System Date 03 16 2005 Storm Control NTP Time Server Not Configured Link Aggregation VLANs Spanning Tree Port Summary MAC Forwar ding Class of Service Status for the NetVanta s interfaces Stacking Router Bridge Default Gateway Step 2 Setting up the Private VLAN Interface Click the VLANs link to setup the IP addresses for the unit In the following diagrams we will change the default IP address to 192 168 1 254 Note When you submit the default IP address change you will need to change your workstation IP address to match up with the new subnet and reconnect to the NetVanta using the new IP address For example after making the IP address change set your workstation IP address to 192 168 1 1 Ports Port Security Storm Control Link Aggregation VLANs lt _ Spanning Tree Mac Forwarding Class of Service Stacking You will see the default VLAN listed
8. d to Sent Password myPassword semi alte anne Doe Default Gateway Ragued Routing ER ff pour provider doer Route Table arvie Name mE UE T SOT Me IP Interfaces Mame fearing it wank QoS Maps pe providers does Bridging AC Name mod regains m AC henma te ae ove i dient Firewall Firewall Wizard Faer Authentication pe usad General Firewall Authentication Mona when Suthendticatin Sear anes Type remade peri VPN Wizard Peerlserame 4 ni 7 fi j ive VPN Peers RAA EAE a et era Toe Lite ae arimus Co d a Port Mirroring Configuration eai IP Settings aA Reboot Unit Address Type Negotated Telnet To Unit Default Route Se ete ae to M Dynamo DNI i used to Dynamic DNS lt disabled gt w ieoscress oh a DRS Secondary IF Settings IP diddress Step 4 Adding a Default Route when using a Static IP Address This step is not required when learning a default route dynamically as in step 3 option B when we used DHCP You need to add a static default route when using IP Routing with a static IP address or PPPoE with a static IP address Click the Route Table link and then add a static default route by specifying the destination network and subnet mask as 0 0 0 0 In our example the static IP address assigned to us by our ISP is 100 100 100 2 and the default route gateway IP address set below is 100 100 100 1 NetVanta 1224STR Logout Getting Started system summary Add a Static Route to the Route T
9. e generated Hostname DNS Enaote or diene tts LLDP Enabled DARI Parts VLAN Harme Default He to e asn Port Security Storm Control VLAN ID a Mot modifiable after the Link Aggregation VLAN is created VLANs Tras VLA cat be VLAN Type Stati Spanning Tree ERE S TATUNE CORTE MAC Forwarding Select this to Class of Service VLAN Interface this VLAN as an IP Stacking intertace paridas VLAN Interface Configuration seai zi vary Optional descriptive label ng Description for this oort ip to 0 Route Table aiphanumerie characters IF Interfaces Enable or disable tis QOS Maps Bris edie i FLEN interface Bridgeng fan ian oa Balan Cae Miaa tedo Access Control MAC Address 00 A ca O8 z BE Aa Firewall joo fafao fi ice BE o Laam Laka adress for tive intense Firewall Wizard Interface Mode IP routing Select an interdaes mode General Firewall i l Security Zones IPF Settings YPN OOOO address a l Static VEN Wizard Exp E D o ET Sens IP Address 292 1668 i 254 q ee eee ee ee l Enter the Subnet Mask utilities Subnet Mask 255 255 255 0 for this numbered Port Mirroring iinta Configuraton Opnane ONG ff used to Firmware A eee regurter divs infedtece s Reboot Unit BynamicDWs lt disebled i iP address with a DHS Telnet To Unit STIS Secondary IP Settings Step 3 Add a New VLAN for the Public Subnet Port The public VLAN will be configured in one of three different m
10. nfiguration changes This will ensure that the configuration will be maintained in the unit by storing it in the NVRAM ADRAN NetVanta 1224STR Sa System Getting Started system Summary General System Information Physical Interfaces Passwords Firmware Yersion 06 02 00 E IP Services Part Number 120052011 DHCP Server Hea mone CRE Serial Number LBADTHO4A15S 44287 LLEF System Uptime 0 days 6 hours 44 minutes 57 seconds System Time 15 40 10 UTC Ports Port Security System Date 03 17 2005 storm seman NTP Time Server fNot Configured Link Aggregation VLAK Ss spanning Treg Fort Summary Mac Forwarding Class of Service Status for the NetVanta s interfaces Stacking Router Bridge Description Membership Default Gateway eth of n UP Forward VLANLOO Routi cabs eth Of UP Forward Default Route Table IP Interfaces eth 0 3 DOWN Disable Default gas Maps eth D4 DOWN Disable Default Bridgin oe eth 075 DOWN Disable Default Firewall Wizard eth 0 6 DOWN Disable Default General Firewall eth 0 7 ae DOWN Disable Default Security Zones Step 8 Consult Additional Documentation Additional Documentation is available at www adtran com using the Service Support link or doing a search for ADTRAN OS Web GUI There you can find an introduction document for each menu If you experience any problems with your ADTRAN product please contact Technical Support at 888 423 8726 DISC
11. odes A IP Routing with a Static IP B IP Routing using DHCP or C PPPoE DHCP is normally used when connected to a cable modem and PPPoE is often used when connected to a DSL modem set in pass through or bridge mode The following pages will show an example of each different scenario We will use VLAN 100 for the public VLAN and 100 100 100 2 30 as the public IP address when a static IP address is used When a static IP address is used we need to make sure that a static default route is entered on the Route Table page Add a new VLAN by clicking the VLAN link and then clicking the Add a New VLAN button NetVanta 1224SITR LAN Configuration Use this dialog to create a new VLON or edit an existing one To edit an existing VLAN Logout Getting Started system Summary Physical Interfaces Passwords click on the item in the list below this dialog Use the Default Gateway to specify a IP Services default gateway if IP routing is not enabled on the unit Use the Route Table to add 4 DHCP Server default route when using IF routing functionality Hostname ONS Add New LAN LLOP Port Security Ster Cantal Modify Delete a LAN Link Aggregation VLAN Type IP Address Mask VLANs i Default Static 10 10 10 1 255 295 255 0 Spanning Tree MAC Forwarding Class of Service Stacking Router Bridge Default Gateway Option A IP Routing with a Static IP Configuration The IP address 100 100 100 2
12. s General Firewall ddress JDE DHE p Security Zones DVaeiic Gis s use ta register tis itetcce amp UPR uty Sard Dynamic ONS disabled Paper eu RTE YPN Peers ene Certificates Secondary IP Settings ip address Fort Mirroring Configuration Firmware Reboot Unit Option C PPPoE specific settings A username and password are required for PPPoE Service Name and AC Name are rarely used but should be entered if provided by the ISP Peer Authentication type should almost always be set to None Also PPPoE should be set for Negotiated IP address unless the ISP has specified a static IP address Whenever a static IP address is used you will need to complete the optional step 4 which shows how to configure a static default route NetVanta 1224STR TLAN gt LANITOO gt PPPoE Config save Logout System Getting Started System Summary Physical Interfaces PPPoE Configuration for ppp 2 Passwords Basic configuration for the PEP interface IP Services DHCP Sarver Dastnption PPPOE Interface asine laba Hostname 7 DNS LLDP l irabia this port enansa causes data fow to stop Porta Tor tis tanacs ony Port Securi P Maxine Transit Live Storm SN SINE EhM Range 64 1820 bpyies Ginkanaren Authentication Settings VLANs Spanning Tree Enter the Username fo Mac Forwarding Sent Username myUsename si oy remote peer Class of Service cb Stacking PESER m Entar the Passwor
13. t v Auto a Down TE Pao Ae i Ey vw we Firewall wizard eth 0 9 Disabled vlan 1 Default Auto Down all a ie T mm j mm General Firewall Disabled vlan 1 Default Auto v Down Step 6 Using the Firewall Wizard to Setup Internet Connection Sharing NAPT We will use the Firewall Wizard to setup the Security Zones on the router You can also setup some basic port forwarding using this wizard Note You only want to use this wizard for the initial configuration All future firewall settings should be added using the Security Zones link Firewall Wizard lt General Firewall Security ones Step 6 1 The first wizard page is just a warning that this will overwrite any previous firewall Settings http 10 10 10 1 Firewall Wizard Firewall Wizard The Firewall Wizard will allow you to perform a basic configuration of your firewall The settings selected in this wizard will overwrite any previous firewall configuration and will interrupt all network traffic routed through the Netvanta Done In order to begin configuration of your firewall the wizard must know which interface is connected to the Internet z o Which interface is connected to the Internet Step 6 3 This step will allow you to setup some basic port forwarding done at a later date by adding policies to the Public Security Zone http 10 10 10 1 Fire
14. tion Make sure your workstation is not plugged into this port and remember to click the Apply button Also it is probably a good idea after making this change to click the Save button to save the configuration in nonvolatile memory NetVanta 1224STR Logout Getting Started System Summary Physical Interfaces Switch Ports Configuration Passwords ee Make changes to one or more port s settings and click Apply Click on the name of the port to IP Services configure additional port settings and view port statistics DHCP Server Hostname DNS Select All Deselect All _ Apply LLDP rears cede fOr Membership Parts Port Security Template lt Select gt Select v Storm Control Enabled wlan LOO VLAN10033 Auto v 1007Full Forwarding Disabled vlan 1 Default Auto w 1007Full Forwarding E J Ti Link Aggregation YLANS at F mm x Spanning Tree eth O72 C MAC Forwarding n Ww w Class of Service eth 0 3 C Disabled vlan 1 Default Auto Down oona eth O4 C Disabled vlan Default Auto T Down Router Bridge a Default Gateway eth 0 5 C Disabled vlan 1fDefault v Auto v Down Routin Te Paute Aa eth 0 6 C Disabled vlan 1 Detault v Auto w Down KOO eee IP Interfaces eth oO C Disabled vlan 1 Default v Auto ee OOS Maps Bridging eth 0 8 m Disabled vlan i Defaul
15. wall Wizard Private Servers MD E Private Servers Firewall Wizard Switch Metvanta 12245TR Paal internet PE re there any servers on your private network that Internet users need to be able to access The NetVanta will only allow specific traffic into your private network to help protect your servers to No I don t have any servers that need to be accessed from the Internet Yes I need to provide access to the following kind of server C2 web server C FTP server 2 E mail server O Telnet server O Other server e Internet Port forwarding can be Step 6 4 The final step is to confirm that the default VLAN 1 will share the IP address applied to the public VLAN 100 http 10 10 10 1 Firewall Wizard Summary nen Sle Summary Firewall Wizard Based on your selections your firewall will be configured as follows Internet Connection Sharing Enabled All Internet access from the interfaces listed below will share the IP address 100 100 100 2 from the public interface vlan 100 Private Interface Description vlan 1 Default Port Forwarding There are no servers selected that will be accessible from the internet WARNING Clicking the apply button will overwrite your current firewall settings with the settings shown above Ee Internet Step 7 Save Your Changes The basic configuration should be complete after using the Firewall Wizard Be sure to click Save after you make any co
16. with the 10 10 10 1 IP address You can click this VLAN and change the private IP address to the private IP address you have chosen NetVanta 1224STR Logout Getting Started system Summary Physical Interfaces LAN Configuration Use this dialog to create a new VLON or edit an existing one To edit an existing VLAN Passwords click on the item in the list below this dialog Use the Default Gateway to specify a IP Services default gateway if IP routing is not enabled on the unit Use the Route Table to add a OCHCP Server default route when using IF routing functionality Hostname ONS Add New LAN LLOP Switch parte Sdd Hew VLAN Port Security Storm Control Link Aggregation i VLAN Type IP Address VLONs i Default Static 10 10 10 1 Zoo 20o 200 0 Spanning Tree MAC Forwarding Class of Service Stacking Router Bridge Default Gateway Modify Delete a LAN Change the IP address to 192 168 1 254 After changing the default VLAN interface IP address be sure to change your workstation IP address to match this network For example you could use 192 168 1 1 as your workstation IP address with a default gateway of 192 168 1 254 NetVanta 1224STR TLANS gt Default Getting Started System Summary Physical Interfaces VLAN Configuration for Default Passwords l IP Services Use this dialog to modify the VLAN configuration If a VLAN name is not entered one DHCP Server wll Be
Download Pdf Manuals
Related Search