RCA 620 manual

SpeedT ouch™ 605/608/608 WL/620 (Wireless) Business DSL Routers User’s Guide Power Ethernet W LA N Plug-in ISD N Internet[...]

[...]

SpeedTouch™ 605/608 608 WL/620 User’s Guide[...]

Copyright Copyright ©1999-2005 THOMSON. All rights reserved. Distribution and co pying of this do cument, use and communication o f its contents is not permitted witho ut written authorizatio n from THOMSON. The con tent of this docume nt is furnished for informati onal use only , may be subject to ch ange without notice, and should not be con str[...]

Contents E-DOC-CTC-20051 017-0151 v1.0 i Contents About this User’s Guid e ........................... ................... 1 1 Getting to know your SpeedTouch™ ......................... 3 1.1 SpeedTouch™ LED Behaviour .. .................. ............. ............ ........... 4 1.2 Accessing your SpeedTouch™ .. ....................... ...[...]

Contents E-DOC-CTC-2005 1017-0151 v1.0 ii 4 Basic Configuration ............................ ........................ 35 4.1 Navig ation .............. .......... ........... ........... .......... ........... .......... ....... 36 4.1.1 Menu .... .............. .............. ................. .............. .............. ................. ......[...]

Contents E-DOC-CTC-20051 017-0151 v1.0 iii 4.5 Toolbox ................ ............ .......................... ............. ............ ......... 57 4.5.1 Remote Assistance .................. ................... ................. ................. ................. ................ 5 8 4.5.2 Game & Application Sh aring .......... ...........[...]

Contents E-DOC-CTC-2005 1017-0151 v1.0 iv 5.2 SpeedTouch™ ........... ............. ............ ........... ........... ................... 102 5.2.1 Eas y Setup ............... .............. ................. .............. .............. ................ ............... ....... .... 103 5.2.2 System In formation ................. ............[...]

Contents E-DOC-CTC-20051 017-0151 v1.0 v 5.7 VPN ... .......... ........... .......... ........... ........... .......... ......... .......... ....... 176 5.7.1 LAN to LAN........... .............. .............. ................. .............. .............. ................. ........... ... 177 5.7.2 VPN Clien t..................... ............[...]

Contents E-DOC-CTC-2005 1017-0151 v1.0 vi[...]

About this User’s Guide 1 E-DOC-CTC-20051 017-0151 v1.0 About this User’s Guide Used symbols The following symbols are us ed in th is User’ s Guide: Terminology Generally , the Spe edT ouch™605(i), Sp eedT ouch™608(i), SpeedT ouch™608(i) WL and SpeedT ouch™6 20(i) will be referred to as SpeedT ouch™ in this User’ s Guide. Document[...]

About this User’s Guide 2 E-DOC-CTC-2005 1017-0151 v1.0[...]

3 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1 Getting to know your SpeedTouch™ Introduction With the SpeedT ouch™605(i) and SpeedT ouch™608(i) Bu siness DSL Routers and the SpeedT ouch™608 WL(i) and SpeedT o uch™620(i) Wireless Business DSL Routers you can build a secu re small (home-)o ffice network, seam[...]

4 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.1 SpeedTouch™ LED Behaviour Front panel LEDs The SpeedT ouch™ is equipped with a number of LEDs on its front panel , indicating the state of the device during no rmal operation. The following table shows the meaning of the differ ent LEDs. Indicator Description Name [...]

5 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ Ethernet LEDs A LED may be provided per Ethernet port to indicate link inte grity (or activity). Depending on the SpeedT ouch™ product you are using , a second LED (A) may b e provided to indi cate th e 10/100Base-T selection: Plug-in Green Blinking Data pa ssing through[...]

6 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.2 Accessing your SpeedTouch™ Access methods Y our SpeedT ouch™ is accessible in one of the fo llowing ways: Access Method Can be used to W eb browser Configure your SpeedT ouch™ via HTTP or HTTPS. For more information, see “1.2.1 Access via the W eb Interface” [...]

7 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.2.1 Access via the Web Interface To access the SpeedTouch™ via the Web interface Proceed as fol lows: 1 Open a Web browser . 2 In the address bar , type your SpeedT ouch™’ s IP ad dress or DNS host name ( h ttp://speedtouch.lan or 192.168.1 .254 by default) The Spe[...]

8 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.2.2 Access via CLI To access the SpeedTouch™ via the Command Line Interface (CLI) Y ou can access the Command Line Interface (CLI) via:  The embedded Exper t pages. For more infor mation, see “5 Expert Configuration” on page 99 .  A T elnet session This requi[...]

9 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ To start a Telnet session Proceed as fol lows: 1 Open a telnet application. 2 Connect to your SpeedT ouch™. 3 Enter your SpeedT ouc h™ security user name and passwo rd. As soon as you have opened a session to the CLI, the Speed T ou ch™ banner is displayed, followed [...]

10 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.2.3 Access via FTP To access the SpeedTouch™ via the File Transfer Protocol (FTP) Y ou can access the file system of the Speed T ouch™ v ia the File T ransfer Protocol (F TP), in order to:  Restore or back up configuration files, templates or language packs.  [...]

11 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ File system access rights In the different directories you have the following rights: Common FTP commands Depending on the access rights you have in a directory , you can use one of the following comma nds: Directory Access rights root NO read/write active read-only dl re[...]

12 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ FTP file transf er T o allow correct file transfers, set the transfer mode to “binary”: at the ftp prompt, type bin and press ENTER . Example. Quote site command All the CLI commands can be executed from within an F TP sessi on. Only complete CLI commands (in other wo[...]

13 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.2.4 Remote Assistance To access the SpeedTouch™ remotely Y ou can make your SpeedT ouch accessible from the Internet with regard to remote support. In this w ay , you can allow your help des k to access your SpeedT ouch™ remotely . To enable remote access Proceed as[...]

14 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™[...]

15 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup 2 Local Network Setup Introduction The SpeedT ouch™ offers you the following local networking soluti ons:  Wired Ethernet  Wireless Ethernet Device settings Once you have connected a device, you can personalise its settings. For more information, see “ Configure” on page 85 [...]

16 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.1 Wired Ethernet Local network The Ethernet ports on the back panel allow you to connect the SpeedT ouch™ to an existing 10 or 100Base-T Ethernet networ k or one (or more) computer(s) with an installed Ethernet ca rd. Using the Speed T ouch™ Ethernet switch, yo u can create a loca[...]

17 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup 2.2 Wireless Ethernet Introduction The SpeedT ouch™ 608 WL/620Wi-Fi® certif ied IEEE 802.11g compliant wireless access point allows m ultiple computers to connect wirelessly to yo ur local netw ork over the SpeedT ouch™ Wireless LAN envi ronment. The SpeedT ouch™ is backward comp[...]

18 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.1 Wireless Basics 802.11b/g  802.11b is an IEEE standard , operating at 2,4 GHz at a speed of up to 11 Mb/s .  802.11g, a newer IEEE standard also operat ing at 2,4 GHz, gives you up to 54 Mb/s speed, more secur ity and better performance. Wireless Fidelity The Wi-Fi certifica[...]

19 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup Antennas Direct the external antenna to allow optimiza tion of the wirele ss link. If fo r example the antenna is e rect, wireless links i n the horizontal plane are fav oured. Please no te that the antenn a characteristics ar e influe nced by the environm ent, that is by reflections of[...]

20 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.2 Connecting Wireless Cl ients for the First Time Wireless default settings After every Reset-to-Defau lts, the SpeedT ouch™ wireless acce ss point configuration i s returned to its initial default setting s. These default settings are:  Security level is low (secur ity disable[...]

21 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup First-time association example The example below shows ho w the SpeedT ouch™ wirele ss network is presented towards a Windows XP Service Pack 2 system. Proceed as follow s to associate your wi reless cl ient to th e SpeedT ouc h™: 1 Click the network icon in the notification area: T[...]

22 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.3 Wireless Security Introduction Since the SpeedT ouch™ wireless environment is a radio environment, precaution s must be taken to ensure that your wireless netwo rk is sa fe from malici ous intruders. T o secure your wireless netw ork, the following wireless access point settings[...]

23 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup Access Control List (ACL) The SpeedT ouch ™ features a managed Acce ss Control List (ACL ) and a physical registration mechanism i n the form of the Association / Registration button on the back panel of your SpeedT ouch™. On the Wireless Access Point pa ge, you have the followi ng [...]

24 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.4 Connecting Additi onal Wireless Clients Preconditions Make sure that:  The SpeedT ouch™ is turned on and ready for service.  The SpeedT ouch™ has been config ured as DHCP server (default).  The wireless client adapter s have b een installed on all the comput ers you w[...]

25 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup Registering client s via the association button Proceed as follo ws to register new wir e less network clients via the association button: 1 Push the Association button on the SpeedT ouch™ back panel for at least two seconds. The WLAN LED toggles betwee n green and red. The ACL will b[...]

26 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.5 Extending the Range of Your Wirelstess Network Wireless Distribution System (WDS) The SpeedT ouch™ features th e Wireless Distribution Syst em (WDS) functionality . This feature allows you to extend the range of your wireless network by in troducing one or more WDS-enabled de vi[...]

27 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup To configure WDS Pr oceed as follow s: 1 Go to the Spe edT ouch™ Web pages. 2 In the menu, select Home Netw ork . 3 Click your WLAN. 4 In the upper ri gh t corner , click Configure . 5 On the Wireless Access Point page, in the Pick a task list, click Configure WDS . 6 Select WDS Enabl[...]

28 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup[...]

29 E-DOC-CTC-20051 017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients 3 Internet Connectivity Dial-In Clients Introduction If you want to set u p initial Internet connectivi ty using the Ho me Install Wizard on the Setup CD or the embedded Easy Setup, refer to the provided Installation and Setup Guide. Access methods Depending on the co[...]

30 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients Embedded PPP dial-in clients The SpeedT ouch™’ s embedded PPP dial-in clie nt allows you to establish an In ternet connection for co mputers residing on your local network, using o nly one computer of the network to control the client. If this compu ter runs:  [...]

31 E-DOC-CTC-20051 017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients 3.1 SpeedTouch™ Web Pages Introduction As the SpeedT ouch™ W eb pages are contro llable from any Operatin g System with an installed W eb browser , the method to establish PPP sessions des cribed later , can be used on any computer system. For more information on [...]

32 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients Terminating an Internet session Proceed as follow s to close an active PPP connection: 1 Go to the Spe edT ouch™ W eb pages. 2 Click Disconnect at the appropriate broadband connection. The SpeedT ouch™ em bedded PPP di al-in cl ient closes the Internet connection.[...]

33 E-DOC-CTC-20051 017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients 3.2 Internet Gateway Device Control Agent Introduction Windows XP users can easily establish PP P sess ions, thanks to the Windows XP Internet Gateway Device (IGD) Discovery an d Control Client that allows you t o control the SpeedT ouch™ directly from you computer [...]

34 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients Internet connection status As long as the SpeedT ouch™ embedded P PP dial-in client is co nnected, you can view the connection status and some counters by d ouble-clicking the Internet Connecti on icon in the Network Conn ections window . Terminating an Internet ses[...]

35 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4 Basic Configuration Embedded The SpeedT ouch™ comes with embedded Web pages, providing an interface to the software installed on the device. It allows easy setup and management of the SpeedT ouch™ via your Web browser from any PC connected to the SpeedT ouch™. See “1.2.1 Acces[...]

36 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.1 Navigation Navigation components The SpeedT ouch™ Web interface consists of the followin g components:  Menu  Language Bar  Navigation Ba r  Notification Area  T asks Menu T asks Navigation bar Notification area Language bar[...]

37 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.1.1 Menu Menu items The menu is located on the left si de of the page and consists of the follo wing menu items:  SpeedT ouch : Provides basic information on the SpeedT ouch™.  Broadband Conne ction : Allows you to view/co nfigure your broadban d connections.  T oolbox : Al[...]

38 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.1.2 Language Bar Language bar The language b ar is located under the SpeedT o uch™ logo and allows you to change the language o f th e SpeedT ouch™ W eb interface. ! The language ba r will only be show n if more than one lang uage is available.[...]

39 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.1.3 Navigation Bar Navigation bar The navig ation bar is loca ted at the top of the page and allows you to:  View the current user name. Click this name to change your password or switch to another user .  View the current position on the SpeedT ouch™ Web interface.  Get co[...]

40 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.1.4 Notification Area Notification area The notification ar ea is located under the Navigation Bar and is used to displ ay:  Error messages, in dicated by a red traffic light.  W arnings, indicated by an orange tr affic light.  Information, in dicated by a green traffic light[...]

41 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.1.5 Tasks Tasks T o al low a quick configuration of yo ur SpeedT ouch™, some pa ges may offer you a number of related tasks in the Pick a task list. These tasks will guide you to the page where you can perform the selected task.[...]

42 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.2 Home SpeedTouch™ home page The SpeedT ouch ™ home page gives yo u a sh ort overview of all the configurable aspects of the SpeedT ouch™:  SpeedT ouch  Broadband Conne ction  T oolbox  Office Network[...]

43 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3 SpeedTouch The SpeedTouch men u The SpeedT ouch menu consists of the following items:  Information  Configuratio n  Event Logs  Update The SpeedTouch page The SpeedT ouch page gives you some basic in formation on the SpeedT ouch™:  Product Information  Configurat[...]

44 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.3.1 Information Information The Informat ion page summarizes i mportant info rmation on your SpeedT ouch™. Y ou may need this informatio n when you contact your helpdesk.[...]

45 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3.2 SpeedTouch™ Easy Setup Easy Setup Wizard The Easy Setup Wizard helps you to co nfigure your Sp eedT ouch™ Intern et connection. Proceed as follow s to configure the SpeedT ouc h™ using the SpeedT ouch™ E asy Setup wizard: 1 In the left menu, cli ck SpeedT ouch . 2 In the P[...]

46 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.3.3 Restart Restarting your SpeedTouch™ Proceed as fol lows: 1 In the left menu, cli ck SpeedT ouch . 2 In the Pick a task list, click Restart .The followi ng message appears: 3 Click Y es, rest art my SpeedT ouch . The SpeedT ouch™ restarts. The SpeedT ouch™ returns to the Home[...]

47 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3.4 Configuration Overview The Overview pa ge displays the current conf iguration of your SpeedT ouch™. Detai ls The Details page displays more de tailed information on the current co nfiguration of your SpeedT ouch™. Configure The Configure page allows you to change the current c[...]

48 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.3.5 Back up & Restore Introduction The Back up & Restore page allows y ou to:  Save your current configuration.  Restore a previo usly saved con figuration. Accessing the Backup & Restore page Proceed as fol lows: 1 In the SpeedT ouch menu, click Configuration. 2 Cli[...]

49 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3.6 Reset to Factory Defaults Introduction The Reset to Factory Defaults page allows yo u to reset the SpeedT ouch™ to return to the initial co nfiguration of your Speed T ouch™. All your chan ges will be deleted.The following message appears: Resetting the SpeedTouch™ factory d[...]

50 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.3.7 Event Logs Event Logging The Ev ent Logs page summarize s the last event s recorded on yo ur SpeedT ouch™. Recorded Events The Recorded Events table gives you an overview of the last event logs that have been recorded since the SpeedT ouch™ was tu rned on. The first co lumn of[...]

51 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3.8 Update Updating the SpeedTouch™ system software The Update page allows you to:  View System Information.  View information on the current System Firmware.  Update your Speed T ouch™ from a remote server . Use this option if you want your Speed T ouch™ to check the i[...]

52 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.4 Broadband Connection The Broadband Connection menu The Broadban d Connection menu consists of following menu items:  DSL Connection  Internet Services The Broadband Connection page The Broadban d Connection page gives you a short status overview of the connections config ured [...]

53 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.4.1 Connectivity Check Introduction On this page, you can perform a connectivit y check on an Interne t service of your SpeedT ouch™. The following me ssage appears: Checking your Internet connectivity Proceed as fol lows: 1 In the left menu, cli ck Broadband Connection. 2 In the Pi[...]

54 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.4.2 DSL Connection Overview Click Overview to view basic informatio n on your DSL connection. Detai ls Click Details to view more deta iled inform ation on your DSL connection.[...]

55 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.4.3 Internet Services Internet Services information The Internet Serv ices page displays inform ation on your Internet Connection(s). T o view more detailed information on a specific conn ection, click the Vie w m o re link of the corresponding connection . If you configured a dial-up[...]

56 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.4.4 Internet Service Settings Accessing the Internet Service Settings page Proceed as fol lows: 1 In the Broadband Connection menu, click Interne t Services. 2 Click the Vi ew mo r e link of the Internet se rvice you want to view . Overview The Overview page gives you basic informatio[...]

57 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5 Toolbox The Toolbox menu The T oolbox menu consists of th e following menu it ems:  Remote Assistance Allows you to make your SpeedT ou ch™ accessible fo r remote support.  Game & Applica tion Sharing Allows you to share servic es and games that you run in your private n[...]

58 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.1 Remote Assistance Enabling Remote Assistance The Remote Assistance page al lows you to make yo ur SpeedT ouch™ accessible for remote support. Proceed as follows to use remote assistance: 1 If necessary , type a password in the Password box. 2 Click Enable Remote Assistance . 3 P[...]

59 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.2 Game & Application Sharing Overview The Overview pa ge summarizes the app lications or games installe d on a particular local host on your n etwork, for which the Speed T ouch™ should accept inboun d initiated connections comi ng from the Internet. Configure On the Configure[...]

60 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration  Assign a game or appli cation to a specific network device.[...]

61 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.3 Defined Games & Applications Accessing the Defined Games & Applications page Proceed as follow s to access the Defined Games & Applications page: 1 In the T oolbox menu, click Game & Applicatio n Sharing . 2 In the Pick a task list, click Modify a game or ap plicat[...]

62 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.4 Game or Application Definition Accessing the Game or Application Definition page Proceed as follow s to access the Game or Application Definition page: 1 In the T oolbox menu, click Game & Applicatio n Sharing . 2 In the Pick a task list, click Modify a game or ap plication . [...]

63 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Adding a Port Translation rule Proceed as fol lows: 1 Click the Edit link of the TCP/UDP port defin ition of the game or applicati on. 2 In the Proto col list, click the protocol the game or application uses. 3 In the Port Ran ge box, type the port range the game or application use s. 4[...]

64 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.5 New Game or Application Creating a new game or application Proceed as fol lows: 1 In the T oolbox menu, click Game & Applicatio n Sharing . 2 In the Pick a task list, click Create a new game or appl ication .The following window appears: 3 T ype the name of the game or applica[...]

65 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.6 Web Site Filtering Web Site Filtering The SpeedT ouch™ allows you to bl ock/allow particular Web sites:  Based on the W eb site’ s URL.  Based on the W eb site’ s content.  By redirecting a W eb site to another W eb site. Overview The Overview pa ge displays:  Th[...]

66 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration Deny access to a specific Web site Use this feature if:  Allow is selected under Action for Un known Sites.  Block is selected under Action for Unknown Sites and yo u want to make an exception on an allow rule . For example: you are allo wing “provi der .com” but you want to d[...]

67 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Redirecting all Web sites Proceed as fol lows: 1 T ype “*” in the We b S it e box. 2 Click Redirect in the Acti on list . 3 T ype the URL of the W eb site you want to redirect to (for example “mycompany .com/internetpo licy .htm”) in the Redirect box. 4 Click Add . 5 T ype the U[...]

68 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.7 Web Filtering Activation Accessing this page Proceed as fo llows: 1 In the T oolbox menu, click Web Site Filtering . 2 In the Pick a task list, click Activate Web Fi ltering License . Web Filtering Activation page This page you can:  Activate a W eb Filtering evaluation license[...]

69 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.8 Content Level Accessing the Content Level page Proceed as fol lows: 1 In the T oolbox menu, click Web Site Filtering . 2 Click Configure . 3 Click the Edit link of the content l evel you want to edit. Overview The Content Level page gives you an overview of the different cate gori[...]

70 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.9 New Content Level Accessing the New Content Level page On this page you to create a new content leve l. Proceed as fo llows to access this page: 1 In the T oolbox menu, click Web Site Filtering . 2 In the upper ri gh t corner , click Configure . 3 In the Pick a task list, click Cr[...]

71 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Content level de finition Only W eb sites that match th e sele cted content level wi ll be allowed. Proceed as follows: 1 If you want to:  Allow a category: Select the check box next to the category name.  Allow an entire group: Select the check box next to the grou p name.  Bl[...]

72 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.10 Firewall About the firewall The firewall allows you to secure traffic from and to the SpeedT ouch™. There are different security levels, depending on the degree of se curity you need. Overview The Overview pa ge summarizes the o verall security policy configured on your SpeedT [...]

73 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration  Low : All outgoi ng connections are allowed . All incoming connec tions are blocked, except for ICMP (Internet Co ntrol Management Protocol) and inbound connections assigned to a local host via Game and Application Sharin g.  Disabled : All in- and outgoing traffic is al lowed to[...]

74 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration  Select a row using the Edit link to modify the security rule.  Click Add to create a new security rule. 5 Edit or define foll owing paramete rs of the rule:  The Name of the security rule  The Source Interface and IP Address (range) Or you can type a User -defined IP addres[...]

75 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.11 Intrusion Detection Intrusion Detection Y our SpeedT ouch™ protects your network agains t malicious intrusions. The Intrusion Detection page shows you the intrusions you are protected against. The Protec ted Intrusions table shows the numbe r of times the SpeedT ouch™ activel[...]

76 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.12 Dynamic DNS Dynamic DNS The Dynamic DNS service allows you to assign a dynamic DN S host name (for example john.d yndns.org) to a broadband connection even if it is using a dyn amic IP address. As soon as the device gets a new IP ad dress, th e dynamic DNS server updates its entr[...]

77 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.13 User Management Overview The Overview page gives you an overview of the currently configured user s and their privileges. Click the name of a user to edit his user account. Configure On the Configure page, you can:  Click Add to create a new user account.  Click Edit to cha[...]

78 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration W AN_A dmin This user can perform on ly W AN related configuration s via any access channel from any origin. User This user has access to the GUI (Overview pages, re mote assistance) via HTTP or HTTPS access channel from LAN origi n only . Guest This user does no t have any privileges. [...]

79 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.14 Edit User Editing a user account Proceed as fol lows: 1 In the T oolbox menu, click User Management . 2 Under Local User Data , click the name of the user you want to edit. The Edit U ser page appears. On this page, you can:  Click Reset Password to reset the password of th e [...]

80 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.15 Change Default User The Default User page On thi s page you can ch ange the default user . If users browse to the Spe edT ouch™ W eb pages, they will be automatically logged on with this account. Changing the default user Proceed as fol lows: 1 In the T oolbox menu, click User [...]

81 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.16 Add User Adding users Pr oceed as follows: 1 In the T oolbox menu, click User Management . 2 In the Pick a task list, click Add new user . 3 The Add User page appears. 4 Under User definition you can configure:  The name of the new user .  The administrati on rights of the [...]

82 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6 Office Network Office Network Menu The Office Network menu consists of the following items:  Devices Allows you the view/co nfi gure the devices detected on your local network.  Interfaces Allows you to view/confi gure the interfaces th at are available on the SpeedT ouch™. [...]

83 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.6.1 Devices Overview The Overview pa ge gives you an overview of the devices that are currently connected to the SpeedT ouch™ network. Cl ick on a device na me to get more information on a specific device. Configure The Configure page gives you an overview of the devices that are cu[...]

84 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.2 Device Settings Accessing the device settings page Proceed as fol lows: 1 In the Office Network menu, click Devices . 2 In the Detected Device(s) list, click the name of the device you want to view . Overview The Overview page displays the following items:  Information allows y[...]

85 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Configure The Configure page allows you to:  Change the devi ce information.  Allow a game or service running on th is device to be initiated from the Internet.[...]

86 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.3 Assign Public IP Introduction On this page you can assign the pu blic IP address of you r Internet Connection (s) to a specific device on your l ocal network. Y ou might want to do this if:  Y ou do not want to use the Network Address T ranslation engine of your SpeedT ouch™.[...]

87 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.6.4 Wireless Device Settings Availability This page is only availa ble on SpeedT ouch™ devices equipped with a wireless access point. Accessing the wireless device settings page Proceed as fol lows: 1 In the Office Network menu, click Devices . 2 In the Detected De vice(s) list, cli[...]

88 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.5 Access Point Settings Availability This page is only availa ble on SpeedT ouch™ devices equipped with a wireless access point. Accessing the Acce ss Point settings Proceed as fol lows: 1 In the left menu, cli ck Office Network . 2 Under Wireles s , click the name of the Access P[...]

89 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration  Allow multicast from Broadband Network : Displays whether you to allow/deny multicast messa ges f rom the Internet.  WMM : Displays whether WMM is enabled or d isabled.For more inform ation about WMM, see “ Access point settings” on page 164 . Under Security the following fie[...]

90 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration  64 bit, Hexadecimal : The 40-bit Network key must cons ist of 10 hexadecim al digits.  128 bit, Alphanumeric : The 104-bit Network key consists of 13 alphanumeric characters.  128 bit, Hexade cimal : The 104-bit Network key consis ts of 26 hexadecimal digits. 4 Click Apply to [...]

91 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 5 In the WP A V ersion list, click the de sired WP A version. 6 Click Apply to immediately ap ply your changes. 7 Configure you r wireless clie nt(s) with the same settings. Access control on the SpeedTouch™ The following modes are available:  New stations are allowed (automaticall[...]

92 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration Allowing new wireless If you selected New stations are allo we d (via registration) or in the New stations are not allowed list, wireless clients h ave to be added manually . Proceed as fol lows: 1 In the Office Network menu, click Devices . 2 In the Pick a task list, click Search for w[...]

93 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.6.6 Configuring WDS Availability This page is only availa ble on SpeedT ouch™ devices equipped with a wireless access point. What is WDS The Wireless Distribution System (WDS) allows you to extend the range of your wireless network by in troducing one or more WDS-enabled devices int[...]

94 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.7 Interfaces Interfaces overview The Inter faces page gives you an overview of the interfaces used on your SpeedT ouch™. If you want to know more about the network settings of a specific interface, click the name of th e interface you want to view .[...]

95 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.6.8 Interface Settings Overview The Overview page gives you an o verview of th e current inter face settings. Configure The Configure page allows you to:  Change the IP address se ttings of the SpeedT ouch™.  Change the DHCP IP address pool settings. Assigning a new IP address[...]

96 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.9 DHCP Pool DHCP Pool page On th e DHCP Pool page, you can create/cha nge a DHCP pool. Accessing the DHCP Pool page Proceed as fol lows: 1 In the Office Network menu, click Interface s . 2 Click the name of the interface which DHCP pool settings you want to change. 3 Click Configure[...]

97 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Components of the DHCP Pool page The following setting s are available for con figuration:  Interfac e : The SpeedT ouch™ interface to which the DHCP pool appl ies.  Start Address : The start IP address of the DHCP server’ s address pool.  End Address : The end IP address o[...]

98 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration[...]

99 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5 Expert Configuration Introduction The SpeedT ouch™ E xpert Mode pages al lows for advanced configu ration and maintenance of yo ur SpeedT ouch™ device . While the Basic pages are mainly constructed to al low you to overview and diagnose the running pro duct and its configuration[...]

100 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Expert Mode navigation The Navigation and notific ation area displays the cu rrent user and the site navigator , as well as notifica tion messages, if applicable. In addition, following action bu ttons are always available on every page: Click ... To ... Save All force a save of the c[...]

101 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.1 Home Overview The Expert Mod e home page is in fa ct the same as the SpeedT ouch™ home page in Basic Mode; it provid es an instant overvi ew of all aspects of your SpeedT ouch™ configuratio n and op erational status. For more information, see Home (of Basic Configuration web [...]

102 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2 SpeedTouch™ Overview The SpeedT ouch™ m enu consists of the followin g topics: Click ... To ... Easy Setu p start the embedded Easy Setup wizard. System Information view important Spee dT ouch™ information. Connections start/stop PPP connection sessions. Diagnostics view det[...]

103 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.2.1 Easy Setup Introduction Click Easy Setup to start the SpeedT ouc h™ Ea sy Setup wizard. The Easy Se tup wizard provides an eas y way to prepare the Spee dT ouch™ for Internet connectivity . Depending on the installed wiza rd templates (see “ Manag e configuratio n files?[...]

104 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.2 System Information Overview The System Information page is the SpeedT ouch™ expert start page. It consists of four sections:  Diagnostics  DSL Line Info  Configuratio n  System Diagnostics Select Diagnostics to view the results of the System Self T est, LAN connect[...]

105 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration System Select System to view some important system information of the SpeedT ouch™. The System table lists th e SpeedT ouch™’ s:  Product Name  Physical Address . This worldwide uniq ue hardware address is also calle d Medium Access Cont rol (MAC) address.  Software Re[...]

106 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.3 Connections Overview The Connections page allows you to start and st op PPP connection sessions. All existing PPP connecti ons are listed in the Connections table. If no PPP connections hav e been defined, this tabl e is empty . Connections In the Connections tabl e, per interfa[...]

107 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.2.4 Diagnostics Overview The Diagnostics page prov ides in-depth informatio n, counters and statistical data on the SpeedT ouch™ syst em settings, and its LAN and W AN connections. The diagnostics are broke n down into three expandible categories:  System  LAN  WA N Per [...]

108 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.5 Syslog Overview The Syslog page consists of two sections:  Messages  Configuratio n Messages This section allows to overview system log and alert message s your SpeedT ouch™ generated during op eration. System log messages are use d to provide a histori cal overview of e[...]

109 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration T o change or delete a destination: 1 Select the applicable interface 2 If needed, make your changes and click:  New to add a new destination with the new settings next to the existing one.  Apply to apply the changes to the existing destination.  Delete to remove the destin[...]

110 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.6 System Update Overview The System Update page features all means for management and maintenance of your SpeedT ouch™. It consists of two sections:  System configuration  System Upgrade System configuration The System Configuration section allows yo u to manage locally st[...]

111 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration T o upload system files: 1 Click Browse to specify the f ile on your local drive you wi sh to upload. 2 Click Upload to upload the system file to your SpeedT ouch™. Manage configuration files This table al lows you to view configuratio n files that are currently s tored on your Spe[...]

112 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration System Upgrade Th e System Upgrade section allows you to manage your SpeedT ouch™’ s system software and upload or apply a new system software. For extended managem ent reasons and roll-back scenarios your SpeedT ouch™ provides storage room for two system software packages: the [...]

113 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.2.7 SpeedTouch™ Services Overview The SpeedT ouch™ Services page allows you to view and configure all services that are currently configure d on your SpeedT ouch™. The purpose of this page is to centralise the manage ment of all SpeedT ouch ™ embedded Service s and Applicat[...]

114 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Edit SpeedTouch™ service properties Editing Speed T ouch™ services migh t be us eful in cases where you want to hide/ protect the service by deviatio n from th e typical service setti ngs or restricting access from/to interfaces. However; T o edit a SpeedT ou ch™ system service:[...]

115 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration SpeedTouch™ service types The SpeedT ouch™ ser vice can be of following type: Type Indicates a SpeedT ouch™ service that... Client is the origin ator of an IP con nection (source IP packets). Server is the responder of an IP conn ection (listening to IP packets). Peer can be an[...]

116 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.8 SNTP Overview The Simple Network T ime Protocol (SNTP) web page allows you to con figure the SpeedT ouch™ real-time clock. The page contains two sections:  SNTP Client  Manual SNTP Client As long as the SNTP section is selected, automatic time synchronisatio n of the Spe[...]

117 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.2.9 SLA Overview The Service Level Agreement (SLA) page al lows you to view and configur e ping and traceroute tests. The page contains two sections:  Select Ping to view/co nfigure and perform ping tests.  Select T raceroute to vi ew/configure and perform traceroute tests. P[...]

118 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Ping tests and results T o start/stop a ping test: 1 Select the ping test entry . 2 Click:  Activate to start the ping test.  Deactivate a ping test that is currently running. T o view the results of the ping test: 1 Select the ping te st entry , if needed. 2 Click Result . T o [...]

119 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration Add/delete a traceroute test T o add a traceroute test entry: 1 Click New (if an entry is c urr ently selected, click Cancel first). 2 T ype a name for the traceroute test entry . 3 T ype the host name or IP add re ss of the target to traceroute. 4 Click Apply . T o delete a tracerou[...]

120 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.10 Add-on Overview Some of the SpeedT ouch™'s extended functionalities requ ire a software activation key to enable the corresp onding softwa re module. T o acquire a software activation key fo r activat ing a SpeedT ouch™ software module, procee d as follows: 1 Click the[...]

121 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.3 IP Router Overview The IP Router menu consists o f the follow ing topics: Click ... To ... IP Addresses view/configure the IP addresse s assigned to any of the SpeedT ouch™ interfaces. Expressi ons view/configure interface, or IP , or Service rela ted expressions. Classificatio[...]

122 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.3.1 IP Addresses Overview The IP address table shows all IP addresses config ured on any of SpeedT ouch™’ s interfaces. In the table followi ng informatio n is provided per IP address:  The Interf ace to which the IP addre ss applies  The IP address/ Netmask (in prefix not[...]

123 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.3.2 Expressions Overview Expression s are used in r ules for source and destination interface, source and destination IP ad dress(es ) (ranges) and services. The Expressio ns page consists of three sections:  Interface  IP  Service Interface The Inter face secti on bundles[...]

124 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration IP The IP sectio n bundles all exp ressions that express a relation based on IP addresses. The Expre ssions table pr ovides follo wing information per expression:  The Name of the expressio n  A Summary of the expre ssion’ s configuration.  For more detailed info rmatio n y[...]

125 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.3.3 Classification Overview The Classification page consists of three section:  Labels , providing a l ist of existing packet cl assification labels and abilities to add/modify or delete packet classification label entries.  Routing Rules allow you to associate a routing labe[...]

126 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Routing Rules The Routing Rules section provides an overview of the existing routing rule s. Proceed as follow s to create a new rule: 1 Click New to create a new rule. 2 Fill in all th e fields.  Index: The index of the labe l rule.  Name : The name of the rule.  Label : The[...]

127 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.3.4 IP Routing Overview The IP Rou ting table presents the current cont ent of the SpeedT ouch™ Routing Information Base. It contains all ro utes to all possible destinations an d is consulted by the SpeedT ouch™ an y time prior to sending or forwar ding any packets. Similar to[...]

128 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.3.5 RIP Overview The RIP web page contai ns three tabs:  Configuratio n  Interfaces  Neighbours Configuration The Configuration section allows you to enable/disable the SpeedT ouch™ RIP functionality and con figure the some basic RIP settings. Interfaces The RIP Interface[...]

129 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.3.6 NAT Overview The NA T menu consists of followi ng sections:  Interfaces  Mappings  Te m p l a t e s Interfaces The Interf ace page al lows you to enab le/disable NA PT on a sp ecific interface. Proceed as follows to enab le/d isable an interface: 1 Select the interface[...]

130 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Creating a NAT mapping Proceed as follow s to create a address translat ion mapping: 1 Click New to create a new map. 2 Select or fill in all the fields (see above). 3 Click Apply . Templates The T emplate page allo ws you to create a NA(P)T template. Depending on your needs following[...]

131 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.3.7 IP QoS Definition Quality of Service is the abi lity for an application to ob tain the network service it requires for successful oper ation. Nowadays the total amount of data traffic increases, while new types of data emerge, like: voice da ta, video data, audio data. These ne[...]

132 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Configuration The Configuration page allows you to config ur e IPQoS for a given destination interface for the IPQoS queues instantiation. The following setti ngs are available :  Name : The destinatio n interface for th e IPQoS queues instantiation.  State : Disable or enable I[...]

133 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration Queues The Queues page allows you to prioritize data. The following setti ngs are available :  Propagate : If the p ropagate fu nction is en abled, an overflow to a lower priority queue will be created in case the i nitial queue is full . If the function is disabled packets in exc[...]

134 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration  # marked : The number of packets that exceeded th e mark rate and - as a consequence - are marked.  # compliant : The number of packets that comply to the IPQoS meter rate limits and - as a consequence - can pass. T o add a new IPQoS rate limiting entry: 1 Click New . 2 Ty p e [...]

135 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.4 Connections Overview The Connections menu consists of the following topics: Click ... To ... AT M view/configure SpeedT ouc h™’ s A TM interfaces . Routed PPPoE view/configure the Routed PPP over Ethernet (PPPoE) Internet services. Routed PPPoA view/configure th e Routed PP P[...]

136 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.4.1 ATM Overview The A TM page consists of following secti ons:  Phonebook  QoS Book  Interfaces Phonebook The SpeedT ouch™ Phonebook is a repository f or A TM connectivity inf ormation. A number of pre-config ured entries may already reside in the SpeedT ouch™ Phoneboo[...]

137 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration Virtual Channel Identifiers (VPI and VCI) The address format is vpi*vci, e.g. 8*35; or vp i.vci, e.g. 8.35. VPI (Virtual Path Iden tifier) and VCI (V irtual Channel Identifier) are two parameters identifying A TM Virt ual Channels. It is the resp onsibility of the network operator to[...]

138 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration  Upper layer pr otocol : Select the Upper Layer Protocol (ULP) for this interface. Ch oose between:  ip (for a Routed IPoA interface).  mac (for a Bridged Ethernet, Ro uted ETHoA, Bridged PPP over Ethernet (PPPoE), Routed PPPoE or a PPPoE Relay interface ).  ppp (for a Rou[...]

139 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.4.2 Routed PPPoE Introduction The Routed PPPoE configurati on page allows you to add new Routed PPPoE, or Routed PPPoE Relay con nection entries or to change settings of existing entries. Creating a Routed PPPoE conn ection entry T o add a Routed PPPoE connection entry: 1 Click New[...]

140 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Other This window holds miscellan eous information and configuration possibili ties. Following fields are available:  Mode : A PPP connection can be es tablished in three ways:  Manually : Y ou have to press the Dial-In b utton of a particular connection .  Always-On : The Sp[...]

141 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.4.3 Routed PPPoA Introduction The Routed PPPoA configuration page allows yo u to add new Routed PPPoA connection entries or to change settings of exist ing entries. Creating a Routed PPPoA connection entry T o add a Routed PPPo A connection entry: 1 Click New . 2 In the Interface b[...]

142 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Other This window holds miscellan eous information and configuration possibili ties. Following fields are available:  Mode : A PPP connection can be es tablished in three ways:  Manually : Y ou have to press the Dial-In b utton of a particular connection .  Always-On : The Sp[...]

143 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration  Bytes sent : Number of bytes transmitted over this PPP connecti on.[...]

144 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.4.4 Routed PPPoI Availability The ISDN modem is only full y functional after activating the ISDN software module with the ISDN software mo dule activation key . Fo r more inform ation, see “5.2.10 Add-on” on page 120 . Introduction The Routed PPPoI configuration p age allows you[...]

145 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration Other This window holds miscellan eous information and configuration possibili ties. Following fields are available:  Mode : A PPP connection can be es tablished in three ways:  Manually : Y ou have to press the Dial-In b utton of a particular connection .  Always-On : The S[...]

146 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Statistics For a running PPP session the fourth tab allows yo u to overview following connection statistics:  IP address : Local IP address assigned by the server .  Bytes received : Number of bytes received on this PPP connection.  Bytes dropped : Number of bytes fa iled to [...]

147 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.4.5 Bridged Ethernet Overview The Bridged Ethernet pa ge consists of following sections:  Bridged Ethernet  VLAN Bridged Ethernet The Bridg ed Ethernet page allows you to configure the SpeedT ouch™ for IEEE802.1D T ranspare nt Br idging, w hich equally may include p reparin[...]

148 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Add a new Bridge port Proceed as fol lows to add a new port to the Ethernet Brid ge: 1 Click New under the Bridge Ethernet overview table 2 In the Interface box, type a unique interface name; in the Destination list, select the interface you want to use for this connection. 3 Mark the[...]

149 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration VLAN interface configuration Proceed as fol lows to add or remove Bridged E thernet interfaces for a certain VLAN: 1 Select the VLAN yo u wish to edit. 2 A listing of all brid ge interfaces will appear , each followed by a drop-down list. Change the value of the drop-down list to add[...]

150 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.4.6 Routed Ethernet Introduction The Routed Ethernet web page allows yo u to add and modify Routed Ethernet interfaces. Routed Ethernet interfaces can be used for creatin g end-to-end MAC E ncapsulated Routing (MER) connections, or for creating a destination in terface to create Rou[...]

151 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.4.7 Routed IPoA Creating a new Routed IPoA Ethernet Inte rface T o add a new Routed IPoA Ethernet interface, procee d as follows: 1 Click New . 2 Following fields become available:  Interfac e Name : Is a name that has local sign ifican ce only and allows to reference a particul[...]

152 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.4.8 PPTP-to-PPP Relay Overview The PPTP-to-PPP Relay , referred to as "Rela y" further in this section, interacts with a PP TP tunnelling ap plication installed on the loc ally attached computers, for example Microsoft's Dial-Up Networking. A typical user -relay inter[...]

153 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.4.9 Virtual LAN Concept The concept of VLAN was introd uced as a way to solve many of the issues of a large Layer 2 environment. It cont rols the traffic on a physic al LAN. The physical LAN is partitioned int o multiple virtual LANs. Ea ch VLAN is assigned a number , called the VI[...]

154 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.5 Local Networking Overview The Connections menu consists of the following topics: Click ... To ... DHCP View/configure the Sp eedT ouch™ DHCP settings. DNS View/configure the Sp eedT ouch™ DN S settings. Managed Switch View/con figure the SpeedT ouch™ Managed Switch. Wireless[...]

155 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.5.1 DHCP Overview The DHCP web page offers three tabs to configure the SpeedT ouch™ 's DHCP functionality:  DHCP Server : T o configur e the general beh aviour of the SpeedT ouch™ 's DHCP server .  DHCP Relay : T o configure the SpeedT ouch™ DHCP relay .  D[...]

156 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Server Leases In case the SpeedT ouch™ DHCP server is running this table holds all leases which are assigne d by the DHCP serv er to (accepted) DHCP clients. Following lease parameters are shown:  Client ID : The MAC address of the DHCP client.  Address : The IP address leased[...]

157 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration Address Pools One or more disjunctive DHCP server ad dress pools can be created per existing SpeedT ouch™ interface using the Address Pool table. The first address pool displayed in the table has the highes t priority for a certain interface. If you select one of the address pools,[...]

158 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration DHCP Relay The DHCP rela y tab allows you to add/delete an d overview SpeedT ouch™ 's DHCP relay interfaces. The DHCP relay confi guration is spli t up in two sections:  Relay Config T o add/dele te and configure a DHCP re lay serv er on a certain interface  Relay Inter f[...]

159 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration DHCP Client Dynamic interface s are created and managed by means of the DHCP Client table. Following field s are listed in the DHCP C lient table:  Interfac e : The name of the SpeedT ou ch™ logical interface for which this DHCP client applies  The Address column shows the IP[...]

160 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.5.2 DNS Overview DNS is short for Domain Name System. It is a network functionality that allows network members to use host names rather than IP addresses for referencing networked computers. The DNS web page consists of two sections:  Configuratio n  Hostname T able Configura[...]

161 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.5.3 Managed Switch Overview Y our SpeedT ouch™ is equipped with a four -port 10/100Base- T auto-sensing MDI/ MDI-X Ethernet switch. Each physical Ethe rnet port of the switch can be managed individually for extended netwo rking control and mo nitoring purposes. The Managed Switch[...]

162 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Mirror Configuration Port mirroring allows monitor ing from one port (called mirror ed port) to another port (called mi rror capture port). This func tionality allows any port's In gress and/or Egress traffic to be monitored to a pre-defined "mirror captu re port". Depe[...]

163 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.5.4 Wireless Availability This page is only availa ble on SpeedT ouch™ devices equipped with a wireless access point. Overview The SpeedT ouch™ IEEE802.11g complian t Wireless L AN (WLAN) inte rface allo ws you to share its high -speed Internet connection with mult iple network[...]

164 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Access point settings This section provides an over view and al lows you to configur e the basic wireless networking parameters for your SpeedT ouch™ wire less access point. Following wireless access point setti ngs can be viewed or configu red:  Network Name (SSID) : The network[...]

165 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration Network Name (SSID) The WLAN's 'radio' li nk is a shared me dium. As no physical co nnection exists between the SpeedT ouch™ and wireless clie nts, a name must be given to all ow unique identifi cation of your WLAN radio link. This is done by the Network Name, also k[...]

166 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Enable/disable the wireless interface T o disable your wireless in terface: 1 Clear wireless interface enabled . 2 Click Apply to immediately ap ply your changes. T o enable the wireless interfac e: 1 Select Wireless int erface enable d . 2 Click Apply to immediately ap ply your chang[...]

167 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration WEP The Wired Equiva lent Privacy (WEP) algo rithm is used to protect wireless communication from eav esdropping. WEP relies on a secret key that is shared between the wireless client (e.g. a laptop with a wireless ethernet card and the SpeedT ouch™. The fi xed secret key is used t[...]

168 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration WPA WP A is the highest form of se curity available but make sure that yo ur wireless client and client manager are compatible with it. If you want to use this level of encryption you must have a RADIUS (Rem ote Authentication Dial-i n User Service) server installed on your netwo rk. [...]

169 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration  Ye s to allow it to exchange data with other stations.  No to explicitly deny the station to associate with the SpeedT ouch™. 5 Click Apply to immediately ap ply your changes. Networks The Networks tab allows you to:  Scan for Other Networks .  Enable WDS connections w[...]

170 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.6 Firewall Overview The Firewall menu consists of the following topics: Click ... To ... Expressi ons view/configure interface, or IP , or Service rela ted expressions. For more information, see “5.3.2 Expressions” on page 123 . Policy view/configure the Sp eedT ouch™ Stateful[...]

171 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.6.1 Policy Firewall levels The Level list allows you to choose between the fo llowing level:  Disabled : All traffic is allowed to pass th roug h your SpeedT ouch™. Game and Application sharing is allowed by the firewall.  BlockAll: Use this Security Level to block all tra [...]

172 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Buttons Click:  Customize.. . to create a new firewall level st arting from the selected firewall level. For more information , see “ Creating a firewall rule” on page 173 .  Set Active to activate the sele cted firewall rule. Loose UDP tracking If this check box is:  Sel[...]

173 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration Creating a firewall rule Proceed as follow s to create a ne w security level and to add rule s: 1 Select one of the si x security levels. 2 Click Customize. 3 T ype name and description for th e new security level and click Apply . 4 Click New to add a rule. 5 Fill in all th e fields[...]

174 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 7 Click Set Active to activate th e new settings.[...]

175 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.6.2 Log Introduction The Log page allows you to view log messages when:  a firewall rule is hit.  the firewall is enabled or disabled.  the firewall level is changed.  a firewall rule is created.  a firewall rule is modified.  a firewall rule is deleted.[...]

176 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.7 VPN Availability The VPN feature is only a vailable if you ac tivated the VPN so ftware module. For more information, see “5.2.10 Add-on” on pa ge 120 . Overview The VPN menu consi sts of following it ems Click ... To ... LAN to LAN connect your LAN with a remote LAN through a[...]

177 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.7.1 LAN to LAN Tabs The LAN to LAN page consists of two tabs. Select:  Remote Gateway Address Known as the starting page when the SpeedT ouch™ must be able to initiate a VPN connection.  Remote Gateway Address Unknown as the starting page when the SpeedT ouch™ onl y needs[...]

178 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.7.2 VPN Client The VPN Client page Th e VPN client in th e SpeedT ouch™ can replace a softw are VPN client installed on a computer . Y ou can use it for example to conn ect from your home to yo ur employer’ s corporate netwo rk for tele-working. The VPN Client page allows you to[...]

179 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.7.3 VPN Server The SpeedTouch™ as VPN Server In a VPN client-server scenari o, the VPN se rver is always the responder in the IKE negotiations . V arious VPN clients can dial in to a VPN server , since i t supports multiple simultan eous VPN connections. A VPN server do es not kn[...]

180 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.7.4 Certificates Certificates pages The Certificates pages allow you to manage you r certificates. Secure Storage page This page shows the list of certif icates stored in the SpeedT ouch™. Request Import page This page allows i mporting new certificates from a C ertificate Authori[...]

181 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.7.5 Advanced When to use The Advanc ed VPN menu gives access to two ma in pages where the complete IPSec configuration can be done. These pa ges are component-ori ented, as opposed to the application-oriented pages described in “5.7.1 LAN to LAN” on page 177 , “5.7.2 VPN Cl i[...]

182 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.7.6 Debug Status page This page shows the status of the IKE Security Association (Phase 1) and the IPSec Security Ass ociat ion(s) (Phase 2) . For an operational VPN connecti on, both an IKE Security Ass ociation and an IPSec Security Ass ociation should be active. Statistics page T[...]

183 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configu ration 5.8 SIP PBX Availability The SIP PBX feature is only available if you activated the SIP PBX so ftware module. For more information, see “5.2.10 Add-on” on page 120 . SpeedTouch™ SIP PBX The Spee dT ouch™ has a key role in the enha ncement of V oice over IP services for corpor[...]

184 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration  Enable/disa ble call screening. Location Service The Loca tion Service page allows you to:  View the registered users.  Add new SIP users . Call Logging All inbound and outboun d SIP sessions that cross the mu lti-media SIP PBX can be monitored from the Spee dT ouch™web in[...]

185 E-DOC-CTC-20051 017-0151 v1.0 Chapter 6 Software Keys 6 Software Keys Introduction A Software Key is a tool to disclose or activate services or software modules. The following Software mo dules can be activated:  VPN256-32, VPN1 6-4, VPN16-1: Integrated VPN IPSec capability (SpeedT ouch™620 only)  VPN16-4: Integrated VPN IPSec extesnsio[...]

186 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 6 Software Keys 3 Select the desired software module to open the registration web site on the Internet. Complete the form to request a new software Key . 4 Select the Request Software Key button to pr oceed. As a result yo u will get a text box wi th the key in it. 5 Copy the key and past it into the Softwa[...]

187 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting 7 Troubleshooting Introduction This chapter suggest solution s for problems you may enco unter while installing or configuring y ou r SpeedT ouch™. If the suggestions do not reso lve the problem, look at the support pages on http: // www .speedtouch.com/support or contact your service pr[...]

188 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troublesho oting 7.1 General SpeedTouch™ Troubleshooting SpeedTouch™ does not work If none of the LEDs light up, make sure th at:  The SpeedT ouch™ is plugged into a power socket outlet.  Y ou are using the correct power supply for your SpeedT ouch™ device.  The SpeedT ouch™ is turned o[...]

189 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting 7.1.1 Wired Ethernet Troubleshooting LAN LED does not light up Make sure that:  The LAN cable is securely conn ected to the 10/100Base-T port.  Y ou are usi ng the correc t cable type fo r your Ethernet equipmen t, that is UTP CA T5 with RJ-45 connectors.[...]

190 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troublesho oting 7.1.2 Wireless Ethernet Troubleshooting Not able to connect wireless clients Check the following:  If registration is enabled, you must pr ess the 'Association' button to register the wireless client or search for wi reless de vices via the embedded W eb pages.  Make sure [...]

191 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting 7.1.3 Upgrade Troubleshooting Error messages While upgrading your SpeedT ouch™ via the Web pages, one of the following messages may appear: Message Due to Failed to retrieve new software version from the supp ort site. T ry again later .  The file does not exist, meaning there is no n[...]

192 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troublesho oting 7.2 UPnP™ on Windows XP Systems SpeedTouch™ not detected by UPnP™ or IGD Control Client Check the following:  Make sure the UPnP™ and Internet Gateway Device Control Client Networking components are added to your Windows XP system.  Y our computer doesn’ t support UPnP™ [...]

193 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting Adding IGD Discovery and Control Y our Windows XP system is able to disco ver an d control Intern et Gateway Devices (IGD), like the Sp eedT ouch™ on your local network. Therefore it is recommended to add the IGD Discovery and Cont rol client to your system. Proceed as fol lows: 1 On the[...]

194 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troublesho oting 7.3 Reset to Factory Defaults Resetting your SpeedTouch™ Y ou might consider a reset to factor y defaults as described below . Y ou can choose between:  Software reset  Hardware reset A reset to factory default settings dele tes the configuratio n profile settings. Therefore, afte[...]

195 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting 4 The SpeedT ouch™ restarts. ! Y our system administrator may have di sabled the physical reset button of the SpeedT ouch™. In this case, a hardwa re reset to defaults is not possible.[...]

196 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troublesho oting[...]

[...]

E-DOC-CTC-200 51017-0151 v1.0 Need more help? Additional help is available online at www .speedtouch.com © THOMSON 2005. All rights reserv ed.[...]