THOMSON 605 manual

SpeedT ouch™ 605/608/608 WL/620 (Wireless) Business DSL Routers User’s Guide Power Ethernet W LA N Plug-in ISD N Internet[...]

[...]

SpeedTouch™ 605/608 608 WL/620 User’s Guide[...]

Copyright Copyright ©1999-2005 THOMSON. All rights reserved. Distribution and co pying of this do cument, use and c ommunication of i ts contents is no t permitted without written authorizatio n from THOMSON. The con tent of this document is furnished for informati onal use only , may be subject to chang e without notice, and should not be con str[...]

Contents E-DOC-CTC-20051 017-0151 v1.0 i Contents About this User’s Guid e ........................... ................... 1 1 Getting to know your SpeedTouch™ ......................... 3 1.1 SpeedTouch™ LED Behaviour .. .................. ............. ............ ........... 4 1.2 Accessing your SpeedTouch™ .. ....................... ...[...]

Contents E-DOC-CTC-2005 1017-0151 v1.0 ii 4 Basic Configuration ............................ ........................ 35 4.1 Navig ation ................ ........... ........ ........... .......... ........... .......... ....... 36 4.1.1 Menu .... .............. .............. ................. .............. .............. ................. ......[...]

Contents E-DOC-CTC-20051 017-0151 v1.0 iii 4.5 Toolbox ................ ............ .......................... ............. ............ ......... 57 4.5.1 Remote Assistance .................... ................. ................. ................. .................... ............. 5 8 4.5.2 Game & Application Sh aring .......... ...........[...]

Contents E-DOC-CTC-2005 1017-0151 v1.0 iv 5.2 SpeedTouch™ ........... ............. ............ ...................... ................... 102 5.2.1 Easy Set up ......... .............. ................. .............. .............. ................. .............. ............. .... 103 5.2.2 System Inform ation ........ .............. .......[...]

Contents E-DOC-CTC-20051 017-0151 v1.0 v 5.7 VPN ... .......... ........... .......... ........... ........... .......... ........... .......... ..... 176 5.7.1 LAN to LAN........... .............. .............. ................. .............. .............. ................. ........... ... 177 5.7.2 VPN Client....... ................. .........[...]

Contents E-DOC-CTC-2005 1017-0151 v1.0 vi[...]

About this User’s Guide 1 E-DOC-CTC-20051 017-0151 v1.0 About this User’s Guide Used symbols The following symbols are us ed in th is User’ s Guide: Terminology Generally , the Spe edT ouch™605(i), Sp eedT ouch™608(i), SpeedT ouch™608(i) WL and SpeedT ouch™6 20(i) will be referred to as SpeedT ouch™ in this User’ s Guide. Document[...]

About this User’s Guide 2 E-DOC-CTC-2005 1017-0151 v1.0[...]

3 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know yo ur SpeedTouch™ 1 Getting to know your SpeedTouch™ Introduction With the SpeedT ouch™605(i) and SpeedT ouch™608(i) Bu siness DSL Routers and the SpeedT ouch™608 WL(i) and SpeedT o uch™620(i) Wireless Business DSL Routers you can build a secu re small (home-)o ffic e network, se[...]

4 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.1 SpeedTouch™ LED Behaviour Front panel LEDs The SpeedT ouch™ is equipped with a number of LEDs on its front panel , indicating the state of the device during no rmal operation. The following table shows the meaning of the different LE Ds. Indicator Description Name [...]

5 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know yo ur SpeedTouch™ Ethernet LEDs A LED may be provided per Ethernet port to indicate lin k inte grity (or activity). Depending on the SpeedT ouch™ product you are using, a second LED (A) may be provided to indi cate th e 10/100Base-T selection: Plug-in Green Blinking Data pa ssing through[...]

6 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.2 Accessing your SpeedTouch™ Access methods Y our SpeedT ouch™ is accessible in one of the fo llowing ways: Access Method Can be used to W eb browser Configure your SpeedT ouch™ via HTTP or HTTPS. For more information, see “1.2.1 Access via the W eb Interface” [...]

7 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know yo ur SpeedTouch™ 1.2.1 Access via the Web Interface To access the SpeedTouch™ via the Web interface Proceed as follo ws: 1 Open a Web browser . 2 In the address bar , type your SpeedT ouch™’ s IP ad dress or DNS host name ( h ttp://speedtouch.lan or 192.168.1 .254 by default) The Sp[...]

8 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.2.2 Access via CLI To access the SpeedTouch™ via the Command Line Interface (CLI) Y ou can access the Command Line Interface (CLI) via:  The embedded Exper t pages. For more infor mation, see “5 Expert Configuration” on page 99 .  A T e lnet session This requ[...]

9 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know yo ur SpeedTouch™ To start a Telnet session Proceed as follo ws: 1 Open a telnet application. 2 Connect to your SpeedT ouch™. 3 Enter your SpeedT ouc h™ security user name and passwo rd. As soon as you have opened a session to the CLI, the Speed T ouc h™ banner is displayed, followed[...]

10 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ 1.2.3 Access via FTP To access the SpeedTouch™ via the File Transfer Protocol (FTP) Y ou can access the file system of the Speed T ouch™ via the File T ransfer Protocol (F TP), in order to:  Restore or back up configuration files, templates or language packs.  U[...]

11 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know yo ur SpeedTouch™ File system access rights In the different directories you have the following rights: Common FTP commands Depending on the access rights you have in a directory , you can use one of the following comma nds: Directory Access rights root NO read/write active read-only dl r[...]

12 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™ FTP file transf er T o allow correct file transfers, set the transfer mode to “binary”: at the ftp prompt, type bin and press ENTER . Example. Quote site command All the CLI commands can be executed from within an F TP sessi on. Only complete CLI commands (in other wo[...]

13 E-DOC-CTC-20051 017-0151 v1.0 Chapter 1 Getting to know yo ur SpeedTouch™ 1.2.4 Remote Assistance To access the SpeedTouch™ remotely Y ou can make your SpeedT o uch accessible from the Internet with regard to remote support. In this w ay , you can allow your help des k to access your SpeedT ouch™ remotely . To enable remote access Proceed [...]

14 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 1 Getting to know your SpeedTouch™[...]

15 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup 2 Local Network Setup Introduction The SpeedT ouch™ offers you the following local networking solution s:  Wired Ethernet  Wireless Ethernet Device settings Once you have connected a device, you can personalise its settings. For more information, see “ Configure” on page 85 [...]

16 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.1 Wired Ethernet Local network The Ethernet ports on the back panel allow you to connect the SpeedT ouch™ to an existing 10 or 100Base-T Ethernet networ k or one (or more) computer(s) with an installed Ethernet ca rd. Using the SpeedT ouch™ Ethernet switch, yo u can create a local[...]

17 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup 2.2 Wireless Ethernet Introduction The SpeedT ouch™ 608 WL/620Wi-Fi® certif ied IEEE 802.11g compliant wireless access point allows m ultiple computers to connect wirelessly to yo ur local netw ork over the SpeedT ouch™ Wireless LAN envi ronment. The SpeedT ouch™ is backward comp[...]

18 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.1 Wireless Basics 802.11b/g  802.11b is an IEEE standard , operating at 2,4 GHz at a speed of up to 11 Mb/s.  802.11g, a newer IEEE standard also operat ing at 2,4 GHz, gives you up to 54 Mb/s speed, more security an d better performance. Wireless Fidelity The Wi-Fi certificat[...]

19 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup Antennas Direct the external antenna to allow optimizatio n of the wirele ss link. If fo r example the antenna is e rect, wireless links i n the horizontal plane are favou red. Please no te that the antenna cha racteristics are influe nced by the environm ent, that is by reflections of [...]

20 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.2 Connecting Wireless Cl ients for the First Time Wireless default settings After every Reset-to-Defau lts, the SpeedT ouch™ wireless acce ss point configuration i s returned to its initial default settings. These default settings are:  Security level is low (secur ity disabled[...]

21 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup First-time association example The example below shows ho w the SpeedT ouch™ wirele ss network is presented towards a Windows XP Service Pack 2 system. Proceed as follow s to associate your wi reless cl ient to the S peedT ouch ™: 1 Click the network icon in the notification area: T[...]

22 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.3 Wireless Security Introduction Since the SpeedT ouch™ wireless environment is a radi o environment, precaution s must be taken to ensure that your wireless netwo rk is sa fe from malici ous intruders. T o secure your wireless netw ork, the following wireless access point setting[...]

23 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup Access Control List (ACL) The SpeedT ouch™ fea tures a managed Acce ss Control List (ACL) a nd a physical registration mechanism in the form of the Association / Registration button on the back panel of your SpeedT ouch™. On the Wireless Access Point page , you have the following op[...]

24 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.4 Connecting Additi onal Wireless Clients Preconditions Make sure that:  The SpeedT ouch™ is turned on and ready for service.  The SpeedT ouch™ has been config ured as DHCP server (default).  The wireless client adapters have b een installed on all the computers you wan[...]

25 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup Registering clients via the association button Proceed as follo ws to register new wire less network clients via the association button: 1 Push the Association button on the SpeedT ou ch™ back panel for at least two seconds. The WLAN LED toggles betwee n green and red. The ACL will be[...]

26 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup 2.2.5 Extending the Range of Your Wirelstess Network Wireless Distribution System (WDS) The SpeedT ouch™ features th e Wireless Distribution Syst em (WDS) functionality . This feature allows you to extend the range of your wireless network by in troducing one or more WDS-enabled devi [...]

27 E-DOC-CTC-20051 017-0151 v1.0 Chapter 2 Local Network Setup To configure WDS Pr oceed as follow s: 1 Go to the SpeedT ouch™ W eb page s. 2 In the menu, select Home Netw ork . 3 Click your WLAN. 4 In the upper ri gh t corner , click Configure . 5 On the Wireless Access Point page, in the Pick a task list, click Configure WDS . 6 Select WDS Enab[...]

28 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 2 Local Network Setup[...]

29 E-DOC-CTC-20051 017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients 3 Internet Connectivity Dial-In Clients Introduction If you want to set up initial Internet connectivi ty using the Hom e Install Wizard on the Setup CD or the embedded Easy Setup, refer to the provided Installation and Setup Guide. Access methods Depending on the con[...]

30 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients Embedded PPP dial-in clients The SpeedT ouch™’ s embedded PPP dial-in clie nt allows you to establish an Intern et connection for co mputers residing on your lo cal network, using only one computer of the network to control the client. If this compu ter runs:  [...]

31 E-DOC-CTC-20051 017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients 3.1 SpeedTouch™ Web Pages Introduction As the SpeedT ouch™ W eb pages are contro llable from any Operatin g System with an installed W eb browser , the method to establish PPP sessions desc ribed later , can be used on any computer system. For more information on [...]

32 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients Terminating an Internet session Proceed as follow s to close an active PPP connection: 1 Go to the SpeedT ouch™ W eb pages. 2 Click Disconnect at the appropriate broadband connection. The SpeedT ouch™ em bedded PPP di al-in cl ient closes the Internet connection. [...]

33 E-DOC-CTC-20051 017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients 3.2 Internet Gateway Device Control Agent Introduction Windows XP users can easily establish PP P sessions, thank s to the Windows XP Internet Gateway Device (IGD) Discovery an d Control Client that allows yo u to control the SpeedT ouch™ directly from you computer [...]

34 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 3 Internet Connectivi ty Dial-In Clients Internet connection status As long as the SpeedT ouch™ embedded PPP dial-in client is co nnected, you can view the connection status and some counters by d ouble-clicking the Internet Connecti on icon in the Network Conn ections window . Terminating an Internet sess[...]

35 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4 Basic Configuration Embedded The SpeedT ouch™ comes with embedded Web pages, providing an interface to the software installed on the device. It allows easy setup and management of the SpeedT ouch™ via your Web browser from any PC connected to the SpeedT ouch™. See “1.2.1 Acces[...]

36 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.1 Navigation Navigation components The SpeedT ouch™ Web interface consists of the following com ponents:  Menu  Language Bar  Navigation Ba r  Notification Area  T asks Menu T asks Navigation bar Notification area Language bar[...]

37 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.1.1 Menu Menu items The menu is located on the left si de of the page and consists of the followin g menu items:  SpeedT ouch : Provides basic information on the SpeedT ouch™.  Broadband Connection : Allows you to view/confi gure your broadban d connections.  T oolbox : All[...]

38 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.1.2 Language Bar Language bar The language b ar is located under the SpeedT o uch™ logo and allows you to change the language o f th e SpeedT ouch™ Web interface. ! The language ba r will only be show n if more than one languag e is available.[...]

39 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.1.3 Navigation Bar Navigation bar The navig ation bar is located at the top of the page and allows you to:  View the current user name. Click this name to change your password or switch to another user .  View the current position on the SpeedT ouch™ Web interface.  Get con[...]

40 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.1.4 Notification Area Notification area The notification area i s located under the Navigation Bar and is used to display:  Error messages, in dicated by a r ed traffic light.  W arnings, indicated by an orange tr affic light.  Information, in dicated by a green traffic light[...]

41 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.1.5 Tasks Tasks T o al low a quick configuration of your Spe edT ouch™, some pa ges may offer you a number of related tasks in the Pick a task list. These tasks will guide you to the page where you can perform the selected task.[...]

42 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.2 Home SpeedTouch™ home page The SpeedT ouch™ h ome page gives yo u a sh ort overview of all the configurable aspects of the SpeedT ouch™:  SpeedT ouch  Broadband Connection  T oolbox  Office Network[...]

43 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3 SpeedTouch The SpeedTouch men u The SpeedT ouch menu consists of the following items:  Information  Configuratio n  Event Logs  Update The SpeedTouch page The SpeedT ouch page gives you some basic in formation on the SpeedT ouch™:  Product Information  Configurat[...]

44 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.3.1 Information Information The Informat ion page summarizes i mportant info rmation on your SpeedT ouch™. Y ou may need this informatio n when you contact your helpdesk.[...]

45 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3.2 SpeedTouch™ Easy Setup Easy Setup Wizard The Easy Setup Wizard helps you to co nfigure your Speed T ouch™ Internet connection. Proceed as follow s to configure the SpeedT ouc h™ using the SpeedT ouch™ Easy Setup wizard: 1 In the left menu, cli ck SpeedT ouch . 2 In the Pic[...]

46 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.3.3 Restart Restarting your SpeedTouch™ Proceed as follo ws: 1 In the left menu, cli ck SpeedT ouch . 2 In the Pick a task list, click Restart .The followi ng message appears: 3 Click Y es, rest art my SpeedT ouch . The SpeedT ouch™ restarts. The SpeedT ouch™ returns to the Home[...]

47 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3.4 Configuration Overview The Overview pa ge displays the current conf iguration of your SpeedT ouch™. Detai ls The Details page displays more de tailed information on the current confi guration of your SpeedT ouch™. Configure The Configure page allows you to change the current c[...]

48 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.3.5 Back up & Restore Introduction The Back up & Restore page allows y ou to:  Save your current configuration.  Restore a previo usly saved con figuration. Accessing the Backup & Restore page Proceed as follo ws: 1 In the SpeedT ouch menu, click Configuration. 2 Cli[...]

49 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3.6 Reset to Factory Defaults Introduction The Reset to Factory Defaults page allows yo u to reset the SpeedT ouch™ to return to the initial config uration of your Speed T ouch™. All your changes w ill be deleted.The following message appears: Resetting the SpeedTouch™ factory d[...]

50 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.3.7 Event Logs Event Logging The Event Logs page summarize s the last event s recorded on yo ur SpeedT ouch™. Recorded Events The Recorded Events table gives you an overview of the last event logs that have been recorded since the SpeedT ouch™ was tu rned on. The first co lumn of [...]

51 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.3.8 Update Updating the SpeedTouch™ system software The Update page allows you to:  View System Information.  View information on the current System Firmware.  Update your SpeedT ouch™ from a remote server . Use this option if you want your Speed T ouch™ to check the in[...]

52 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.4 Broadband Connection The Broadband Connection menu The Broadband Con nection menu consists of following menu items:  DSL Connection  Internet Services The Broadband Connection page The Broadband Con nection page gives you a short status overview of the connections configure d [...]

53 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.4.1 Connectivity Check Introduction On this page, you can perform a connectivit y check on an Interne t service of your SpeedT ouch™. Th e following message appears: Checking your Internet connectivity Proceed as follo ws: 1 In the left menu, cli ck Broadband Connection. 2 In the Pi[...]

54 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.4.2 DSL Connection Overview Click Overview to view basic informatio n on your DSL connection. Detai ls Click Details to view more deta iled inform ation on your DSL connection.[...]

55 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.4.3 Internet Services Internet Services information The Internet Serv ices page displays inform ation on your Internet Connection(s). T o view more detailed information on a specific conn ection, click the Vie w m o re link of the corresponding connection. If you configured a dial-up [...]

56 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.4.4 Internet Service Settings Accessing the Internet Service Settings page Proceed as follo ws: 1 In the Broadband Connection menu, click Internet Se rvices. 2 Click the Vi ew mo r e link of the Internet se rvice you want to view . Overview The Overview page gives you basic informatio[...]

57 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5 Toolbox The Toolbox menu The T oolbox menu consists of th e following menu item s:  Remote Assistance Allows you to make your SpeedT ou ch™ accessible fo r remote support.  Game & Applica tion Sharing Allows you to share servic es and games that you run in your private n[...]

58 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.1 Remote Assistance Enabling Remote Assistance The Remote Assistance page al lows you to make yo ur SpeedT ouch™ accessible for remote support. Proceed as follows to use remote assistance: 1 If necessary , type a password in the Password box. 2 Click Enable Remote Assistance . 3 P[...]

59 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.2 Game & Application Sharing Overview The Overview pa ge summarizes the appli cations or games installe d on a particular local host on your netw ork, for which the SpeedT ouch™ should accept inbo und initiated connections comi ng from the Internet. Configure On the Configure [...]

60 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration  Assign a game or applicatio n to a specific network device.[...]

61 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.3 Defined Games & Applications Accessing the Defined Games & Applications page Proceed as follow s to access the Defined Games & Applications page: 1 In the T oolbox menu, click Game & Application S haring . 2 In the Pick a task list, click Modify a game or ap plicat[...]

62 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.4 Game or Application Definition Accessing the Game or Application Definition page Proceed as follow s to access the Game or Application Definition page: 1 In the T oolbox menu, click Game & Application S haring . 2 In the Pick a task list, click Modify a game or ap plication . [...]

63 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Adding a Port Translation rule Proceed as follo ws: 1 Click the Edit link of the TCP/UDP port definiti on of the game or applicati on. 2 In the Protoc ol list, click the protocol the g ame or application uses. 3 In the Port Ran ge box, type the port range the gam e or application use s.[...]

64 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.5 New Game or Application Creating a new game or application Proceed as follo ws: 1 In the T oolbox menu, click Game & Application S haring . 2 In the Pick a task list, click Create a new game or appl ication .The following window appears: 3 T ype the name of the game or applica[...]

65 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.6 Web Site Filtering Web Site Filtering The SpeedT ouch™ allows you to bl ock/allow particular Web sites:  Based on the W eb site’ s URL.  Based on the W eb site’ s content.  By redirecting a W eb site to another W eb site. Overview The Overview pa ge displays:  Th[...]

66 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration Deny access to a specific Web site Use this feature if:  Allow is selected under Action for Un known Sites.  Block is selected under Action for Unknown Sites and yo u want to make an exception on an allow rule . For example: you are allo wing “provi der .com” but you want to d[...]

67 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Redirecting al l Web sites Proceed as follo ws: 1 T ype “*” in the We b S it e box. 2 Click Redirect in the Acti on list . 3 T ype the URL of the Web site you want to redirec t to (for example “mycompany .com/internetpo licy .htm”) in the Redirect box. 4 Click Add . 5 T ype the [...]

68 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.7 Web Filtering Activation Accessing this page Proceed as fol lows: 1 In the T oolbox menu, click Web Site Filtering . 2 In the Pick a task list, click Activate Web Fi ltering License . Web Filtering Activation page This page you can:  Activate a W eb Filtering evaluation license[...]

69 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.8 Content Level Accessing the Content Level page Proceed as follo ws: 1 In the T oolbox menu, click Web Site Filtering . 2 Click Configure . 3 Click the Edit link of the content l evel you want to edit. Overview The Content Level page gives you an overview of the different cate gori[...]

70 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.9 New Content Level Accessing the New Content Level page On this page you to create a new content leve l. Proceed as fo llows to access this page: 1 In the T oolbox menu, click Web Site Filtering . 2 In the upper ri gh t corner , click Configure . 3 In the Pick a task list, click Cr[...]

71 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Content level de finition Only W eb sites that match th e sele cted content level wi ll be allowed. Proceed as follows: 1 If you want to:  Allow a category: Select the check box next to the category name.  Allow an entire group: Select the check box next to the group na me.  Bl[...]

72 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.10 Firewall About the firewall The firewall allows you to secure traffic from and to the SpeedT ouch™. There are different security levels, depending on the degree of se curity you need. Overview The Overview pa ge summarizes the o verall security policy configured on your SpeedT [...]

73 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration  Low : All outgoing connections are allowed . All incoming connec tions are blocked, except for ICMP (Internet Co ntrol Management Protocol) and inbound connections assigned to a local host via Game and Application Sharin g.  Disabled : All in- and outgoing traffic is al lowed to [...]

74 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration  Select a row using the Edit link to modify the security rule.  Click Add to create a new security rule. 5 Edit or define foll owing paramete rs of the rule:  The Name of the security rule  The Source Interface and IP Address (range) Or you can type a User -defined IP addres[...]

75 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.11 Intrusion Detection Intrusion Detection Y our SpeedT ouch™ protects your network against m alicious intrusions. The Intrusion Detection page shows you the intrusions you are protected against. The Protected Intrusions table shows the number of tim es the SpeedT ouch™ actively[...]

76 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.12 Dynamic DNS Dynamic DNS The Dynamic DNS service allows you to assign a dynamic DN S host name (for example john.dynd ns.org) to a broadband connection even if it is using a dyn amic IP address. As soon as the device gets a new IP addr ess, th e dynamic DNS server updates its entr[...]

77 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.13 User Management Overview The Overview page gives you an overview of the curre ntly configured users and their privileges. Click the name of a user to edit his user account. Configure On the Configure page, you can:  Click Add to create a new user account.  Click Edit to cha[...]

78 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration W AN_Admi n This user can perform only W AN related configuration s via any access channel from any origin. User This user has access to the GUI (Overview pages, re mote assistance) via HTTP or HTTPS access channel from LAN origi n only . Guest This user does no t have any privileges. U[...]

79 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.14 Edit User Editing a user account Proceed as fol lows: 1 In the T oolbox menu, click User Management . 2 Under Local User Data , click the name of the user you want to edit. The Edit U ser page appears. On this page, you can:  Click Reset Password to reset the password of th e [...]

80 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.5.15 Change Default User The Default User page On this page you can ch ange the default user . If users browse to the Spe edT ouch™ W eb pages, they will be automatically logged on with this account. Changing the default user Proceed as follo ws: 1 In the T oolbox menu, click User M[...]

81 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.5.16 Add User Adding users Pr oceed as follows: 1 In the T oolbox menu, click User Management . 2 In the Pick a task list, click Add new user . 3 The Add User page appears. 4 Under User definition you can configure:  The name of the new user .  The administration rights of the n[...]

82 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6 Office Network Office Network Menu The Office Network menu consists of the following items:  Devices Allows you the view/co nfi gure the devices detected on yo ur local network.  Interfaces Allows you to view/confi gure the interfaces th at are available on the SpeedT ouch™.[...]

83 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.6.1 Devices Overview The Overview pa ge gives you an overview of the devices that are currently connected to the SpeedT ouch™ network. Cl ick on a device na me to get more information on a specific device. Configure The Configure page gives you an overview of the devices that are cu[...]

84 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.2 Device Settings Accessing the device settings page Proceed as follo ws: 1 In the Office Network menu, click Devices . 2 In the Detected Device(s) list, click the name of the device you want to view . Overview The Overview page displays the following items:  Information allows y[...]

85 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Configure The Configure page allows you to:  Change the devi ce information.  Allow a game or service running on th is device to be initiated from the Internet.[...]

86 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.3 Assign Public IP Introduction On this page yo u can assign the pu blic IP address of you r Internet Connection(s) to a specific device on your l ocal network. Y ou might want to do this if:  Y ou do not want to use the Network Address T ranslation engine of your SpeedT ouch™.[...]

87 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.6.4 Wireless Device Settings Availability This page is only availa ble on SpeedT ouch™ devices equipped with a wireless access point. Accessing the wireless device settings page Proceed as follo ws: 1 In the Office Network menu, click Devices . 2 In the Detected Device(s) list, clic[...]

88 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.5 Access Point Settings Availability This page is only availa ble on SpeedT ouch™ devices equipped with a wireless access point. Accessing the Acce ss Point settings Proceed as follo ws: 1 In the left menu, cli ck Office Network . 2 Under Wireles s , click the name of the Access P[...]

89 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration  Allow multicast from Broadband Network : Displays whether you to allow/deny multicast messa ges f rom the Internet.  WMM : Displays whether WMM is enabled or d isabled.For m ore inform ation about WMM, see “ Access point settings” on page 164 . Under Security the following fi[...]

90 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration  64 bit, Hexadecimal : The 40-bit Network key must cons ist of 10 hexadecimal digits.  128 bit, Alphanumeric : The 104-bit Network key consists of 13 alphanumeric characters.  128 bit, Hexade cimal : The 104-bit Network key consis ts of 26 hexadecimal digits. 4 Click Apply to i[...]

91 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 5 In the WP A V ersion list, click the de sired WP A version. 6 Click Apply to immediately ap ply your changes. 7 Configure your wireless clie nt(s) with the same settings. Access control on the SpeedTouch™ The following modes are available:  New stations are allowed (automatically[...]

92 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration Allowing new wireless If you selected New stations are allo we d (via registration) or in the New stations are not allowed list, wireless clients h ave to be added manually . Proceed as follo ws: 1 In the Office Network menu, click Devices . 2 In the Pick a task list, click Search for w[...]

93 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.6.6 Configuring WDS Availability This page is only availa ble on SpeedT ouch™ devices equipped with a wireless access point. What is WDS The Wireless Distribution System (WDS) allows you to extend the range of your wireless network by intr oducing one or more WDS-enabled devices int[...]

94 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.7 Interfaces Interfaces overview The Inter faces page gives you an overview of the interfaces used on your SpeedT ouch™. If you want to know more about the network settings of a specific interface, click the name of th e interface you want to view .[...]

95 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration 4.6.8 Interface Settings Overview The Overview page gives you an o verview of the current interf ace settings. Configure The Configure page allows you to:  Change the IP address se ttings of the SpeedT ouch™.  Change the DHCP IP address pool settings. Assigning a new IP address [...]

96 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration 4.6.9 DHCP Pool DHCP Pool page On the DHCP Pool page, you can create/cha nge a DHCP pool. Accessing the DHCP Pool page Proceed as follo ws: 1 In the Office Network menu, click Interface s . 2 Click the name of the interface which DHCP pool settings yo u want to change. 3 Click Configure[...]

97 E-DOC-CTC-20051 017-0151 v1.0 Chapter 4 Basic Configuration Components of the DHCP Pool page The following setting s are available for con figuration:  Interfac e : The SpeedT ouch™ interface to which the DHCP pool applies.  Start Address : The start IP address of the DHCP server’ s address pool.  End Address : The end IP address of[...]

98 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 4 Basic Configuration[...]

99 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5 Expert Configuration Introduction The SpeedT ouch™ E xpert Mode pages al lows for advanced configu ration and maintenance of your SpeedT ouch™ device . While the Basic pages are mainly constructed to al low you to overview and diagnose the running produc t and its configuration,[...]

100 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Expert Mode navigation The Navigation and notific ation area displays the cu rrent user and the site navigator , as well as notifica tion messages, if applicable. In addition, following action bu ttons are always available on every page: Click ... To ... Save All force a save of the c[...]

101 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.1 Home Overview The Expert Mode home page is in fa ct the same as the SpeedT ou ch™ home page in Basic Mode; it provides an instant overvi ew of all aspects of your SpeedT ouch™ configuratio n and op erational status. For more information, see Home (of Basic Configuration web i[...]

102 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2 SpeedTouch™ Overview The SpeedT ouch™ m enu consists of the followin g topics: Click ... To ... Easy Setu p start the embedded Easy Setup wizard. System Information view important Spee dT ouch™ information. Connections start/stop PPP connection sessions. Diagnostics view det[...]

103 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.2.1 Easy Setup Introduction Click Easy Setup to start the SpeedT ouc h™ Easy Se tup wizard. The Easy Se tup wizard provides an eas y way to prepare the Spee dT ouch™ for Internet connectivity . Depending on the installed wiza rd templates (see “ Manag e configuratio n files?[...]

104 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.2 System Information Overview The System Information page is the SpeedT ouch™ expert start page. It consists of four sections:  Diagnostics  DSL Line Info  Configuratio n  System Diagnostics Select Diagnostics to view the results of the System Self T est, LAN connect[...]

105 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on System Select System to view some important system information of the SpeedT ouch™. The System table lists th e SpeedT ouch™’ s:  Product Name  Physical Address . Th is worldwide uniqu e hardware address is also calle d Medium Access Cont rol (MAC) address.  Software R[...]

106 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.3 Connections Overview The Connections p age allows you to start and st op PPP con nection sessions. All existing PPP connections are listed in the Connections table. If no PPP connections hav e been defined, this tabl e is empty . Connections In the Connections table, per interfa[...]

107 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.2.4 Diagnostics Overview The Diagnostics page prov ides in-depth information, counters and statistical data on the SpeedT ouch™ syst em settings, and its LAN and W AN connections. The diagnostics are broke n down into three expandible categories:  System  LAN  WA N Per c[...]

108 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.5 Syslog Overview The Syslog page consists of two sections:  Messages  Configuratio n Messages This section allows to overview system log and alert message s your SpeedT ouch™ generated during oper ation. System log messages are use d to provide a historic al overview of e[...]

109 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on T o change or delete a destination: 1 Select the applicable interface 2 If needed, make your changes and click:  New to add a new destination with the new settings next to the existing one.  Apply to apply the changes to the existing destination.  Delete to remove the destin[...]

110 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.6 System Update Overview The System Update page features all means for management and maintenance of your SpeedT ouch™. It consists of two sections:  System configuration  System Upgrade System configuration The System Configuration section allows yo u to manage locally st[...]

111 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on T o upload system files: 1 Click Browse to specify the f ile on your local drive you wish to upload. 2 Click Upload to upload the system file to your SpeedT ouch™. Manage configuration files This table al lows you to view configuratio n files that are currently s tored on your Spee[...]

112 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration System Upgrade The System Upgrade section allows you to manage your SpeedT ouch™’ s system software and upload or apply a new system software. For extended management reaso ns and roll-back scenarios your SpeedT ouch™ provides storage room for two system software packages: the a[...]

113 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.2.7 SpeedTouch™ Services Overview The SpeedT ouch™ Services page allows you to view and configure all services that are currently configure d on your SpeedT ouch™. Th e purpose of this page is to centralise the managemen t of all SpeedT ouch™ em bedded Services and Applicat[...]

114 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Edit SpeedTouch™ service properties Editing Speed T ouch™ services migh t be us eful in cases where you want to hide/ protect the service by deviation fro m th e typical service setti ngs or restricting access from/to interfaces. However; T o edit a SpeedT ou ch™ system service:[...]

115 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on SpeedTouch™ service types The SpeedT ouch™ ser vice can be of following ty pe: Type Indicates a SpeedT ouch™ service that... Client i s the originator of an IP connection (source IP packets). Server is the responder of an IP connect ion (listening to IP packets). Peer can be an[...]

116 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.8 SNTP Overview The Simple Network T ime Protocol (SNTP) web page allows you to con figure the SpeedT ouch™ real-time clock. The page contains two sections:  SNTP Client  Manual SNTP Client As long as the SNTP section is selected, automatic time synchronisatio n of the Spe[...]

117 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.2.9 SLA Overview The Service Level Agreement (SLA) page al lows you to view and configur e ping and traceroute tests. The page contains two sections:  Select Ping to view/confi gure and perform ping tests.  Select T raceroute to vi ew/configure and perform traceroute tests. P[...]

118 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Ping tests and results T o start/stop a ping test: 1 Select the ping test entry . 2 Click:  Activate to start the ping test.  Deactivate a ping test that is currently running. T o view the results of the ping test: 1 Select the ping test entry , if needed. 2 Click Result . T o o[...]

119 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on Add/delete a traceroute test T o add a traceroute test entry: 1 Click New (if an entry is c urr ently selected, click Cancel first). 2 T ype a name for the traceroute test entry . 3 T ype the host name or IP add re ss of the target to traceroute. 4 Click Apply . T o delete a tracerou[...]

120 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.2.10 Add-on Overview Some of the SpeedT ouch™'s extended functionalities requ ire a software activation key to enable the corresp onding softwa re module. T o acquire a software activation key fo r activat ing a SpeedT ouch™ software module, procee d as follows: 1 Click the[...]

121 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.3 IP Router Overview The IP Router menu consists o f the followin g topics: Click ... To ... IP Addresses view/configure the IP addresse s assigned to any of the SpeedT ouch™ interfaces. Expressi ons view/configure interface, or IP , or Service related expressions. Classification[...]

122 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.3.1 IP Addresses Overview The IP address table shows all IP addresses config ured on any of SpeedT ouch™’ s interfaces. In the table following informatio n is provided per IP address:  The Interfa ce to which the IP addre ss applies  The IP address/Ne tmask (in prefix nota[...]

123 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.3.2 Expressions Overview Expressions a re used in rul es for source and destination interface, source and destination IP ad dress(es ) (ranges) and services. The Expressio ns page consists of three sections:  Interface  IP  Service Interface The Inter face sectio n bundles[...]

124 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration IP The IP sectio n bundles all exp ressions that express a relation based on IP addresses. The Expres sions table pr ovides follo wing information per expression:  The Name of the expressio n  A Summary of the expre ssion’ s configuration.  For more detailed info rmatio n y[...]

125 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.3.3 Classification Overview The Classification page consists of three section:  Labels , providing a l ist of existing packet cl assification labels and abilities to add/modify or delete packet classification label entries.  Routing Rules allo w you to associate a routing lab[...]

126 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Routing Rules The Routing Rules section provides an overview of the existing routing rule s. Proceed as follow s to create a new rule: 1 Click New to create a new rule. 2 Fill in all th e fields.  Index: The index of the labe l rule.  Name : The name of the rule.  Label : The[...]

127 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.3.4 IP Routing Overview The IP Rou ting table presents the current cont ent of the SpeedT ouch™ Routing Information Base. It contains all routes to all possible destinations an d is consulted by the SpeedT ouch™ any tim e prior to sending or forwar ding any packets. Similar to [...]

128 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.3.5 RIP Overview The RIP web page contai ns three tabs:  Configuratio n  Interfaces  Neighbours Configuration The Configuration section allows you to enable/disable the SpeedT ouch™ RIP functionality and con figure the some basic RIP settings. Interfaces The RIP Interface[...]

129 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.3.6 NAT Overview The NA T menu consists of followi ng sections:  Interfaces  Mappings  Te m p l a t e s Interfaces The Interfa ce page al lows you to enab le/disable NA PT on a specific interface. Proceed as follows to enab le/d isable an interface: 1 Select the interface [...]

130 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Creating a NAT mapping Proceed as follow s to create a address translatio n mapping: 1 Click New to create a new map. 2 Select or fill in all the fields (see above). 3 Click Apply . Templates The T emplate page allo ws you to create a NA(P)T template. Depending on your needs following[...]

131 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.3.7 IP QoS Definition Quality of Service is the abi lity for an application to ob tain the network service it requires for successful oper ation. Nowadays the total amount of data traffic increases, while new types of data emerge, like: voice da ta, video data, audio data. These ne[...]

132 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Configuration The Configuration page allows you to configur e IPQoS for a given destination interface for the IPQoS queues instantiation. The following setti ngs are available :  Name : The destinatio n interface for th e IPQoS queues instantiation.  State : Disable or enable IP[...]

133 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on Queues The Queues page allows you to prioritize data. The following setti ngs are available :  Propagate : If the p ropagate fu nction is en abled, an overflow to a lower priority queue will be created in case the i nitial queue is fu ll . If the function is disabled packets in ex[...]

134 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration  # marked : The number of packets that exceeded th e mark rate and - as a consequence - are marked.  # compliant : The number of packets that comply to the IPQoS meter rate limits and - as a consequence - can pass. T o add a new IPQoS rate limiting entry: 1 Click New . 2 Ty p e [...]

135 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.4 Connections Overview The Connections menu consists of the following topics: Click ... To ... AT M view/configure SpeedT ouc h™’ s A TM interfaces. Routed PPPoE view/configure the Routed PPP over Ethernet (PPPoE) Internet services. Routed PPPoA view/configure th e Routed PPP o[...]

136 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.4.1 ATM Overview The A TM page consists of following secti ons:  Phonebook  QoS Book  Interfaces Phonebook The SpeedT ouch™ Phonebook is a repository f or A TM connectivity inf ormation. A number of pre-configur ed entries may a lready reside in the SpeedT ouch™ Phonebo[...]

137 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on Virtual Channel Identifiers (VPI and VCI) The address format is vpi*vci, e.g. 8*35; or vp i.vci, e.g. 8.35. VPI (Virtual Path Iden tifier) and VCI (Virt ual Channel Identifier) are two parameters identifying A TM Virt ual Channels. It is the respon sibility of the network operator to[...]

138 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration  Upper layer pr otocol : Select the Upper Layer Protocol (ULP) for this interface. Ch oose between:  ip (for a Routed IPoA interface).  mac (for a Bridged Ethernet, Routed ETHoA, Bridged PPP over Ethernet (PPPoE), Routed PPPoE or a PPPoE Relay interface ).  ppp (for a Rout[...]

139 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.4.2 Routed PPPoE Introduction The Routed PPPoE configurati on page allows you to add new Routed PPPoE, or Routed PPPoE Relay connectio n entries or to change settings of existing entries. Creating a Routed PPPoE conn ection entry T o add a Routed PPPoE connection entry: 1 Click New[...]

140 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Other This window holds miscellan eous information and configuration possibili ties. Following fields are available:  Mode : A PPP connection can be esta blished in three ways:  Manually : Y ou have to press the Dial-In b utton of a particular connection .  Always-On : The Sp[...]

141 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.4.3 Routed PPPoA Introduction The Routed PPPoA configuration page allows yo u to add new Routed PPPoA connection entries or to change settings of existing entries. Creating a Routed PPPoA connection entry T o add a Routed PPPoA co nnection entry: 1 Click New . 2 In the Interface bo[...]

142 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Other This window holds miscellan eous information and configuration possibili ties. Following fields are available:  Mode : A PPP connection can be esta blished in three ways:  Manually : Y ou have to press the Dial-In b utton of a particular connection .  Always-On : The Sp[...]

143 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on  Bytes sent : Number of bytes transmitted over this PPP connecti on.[...]

144 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.4.4 Routed PPPoI Availability The ISDN modem is only full y functional after activating the ISDN software module with the ISDN software mo dule activation key . Fo r more information, see “5.2.10 Add-on” on page 120 . Introduction The Routed PPPoI configuration pa ge allows you [...]

145 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on Other This window holds miscellan eous information and configuration possibili ties. Following fields are available:  Mode : A PPP connection can be esta blished in three ways:  Manually : Y ou have to press the Dial-In b utton of a particular connection .  Always-On : The S[...]

146 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Statistics For a running PPP session the fourth tab allows yo u to overview following connection statistics:  IP address : Local IP address assigned by the server .  Bytes received : Number of bytes received on this PPP connection.  Bytes dropped : Number of bytes fa iled to [...]

147 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.4.5 Bridged Ethernet Overview The Bridged Ethernet pa ge consists of following secti ons:  Bridged Ethernet  VLAN Bridged Ethernet The Bridged E thernet page allows you to configure the SpeedT ouch™ for IEEE802.1D T ranspare nt Br idging, w hich equally may include p repari[...]

148 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Add a new Bridge port Proceed as fol lows to add a new port to the Ethernet Brid ge: 1 Click New under the Bridge Ethernet overview table 2 In the Interface box, type a unique interface name; in the Destination list, select the interface you want to use for this connection. 3 Mark the[...]

149 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on VLAN interface configuration Proceed as fol lows to add or r emove Bridged Et hernet interfaces for a certain VLAN: 1 Select the VLAN yo u wish to edit. 2 A listing of all bridge in terfaces will appear , each followed by a drop-down list. Change the value of the drop-down list to ad[...]

150 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.4.6 Routed Ethernet Introduction The Routed Ethernet web page allows yo u to add and modify Routed Ethernet interfaces. Routed Ethernet interfaces can be used for creatin g end-to-end MAC E ncapsulated Routing (MER) connections, or for creating a destination in terface to create Rou[...]

151 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.4.7 Routed IPoA Creating a new Routed IPoA Ethernet Inte rface T o add a new Routed IPoA Ethernet interface, procee d as follows: 1 Click New . 2 Following fields become available:  Interfac e Name : Is a name that has local signifi can ce only and allows to reference a particul[...]

152 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.4.8 PPTP-to-PPP Relay Overview The PPTP-to-PPP Relay , referred to as "Relay" further in this section, interacts with a PP TP tunnelling ap plication installed on the loc ally attached computers, for example Microsoft's Dial-Up Networking. A typical user -relay intera[...]

153 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.4.9 Virtual LAN Concept The concept of VLAN was introd uced as a way to solve many of the issues of a large Layer 2 environment. It cont rols the traffic on a physic al LAN. The physical LAN is partitioned into m ultiple virtual LANs. Ea ch VLAN is assigned a number , called the VI[...]

154 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.5 Local Networking Overview The Connections menu consists of the following topics: Click ... To ... DHCP View/configure the Sp eedT ouch™ DHCP settings. DNS View/configure the Sp eedT ouch™ DNS setti ngs. Managed Switch View/config ure the SpeedT ouch™ Managed Switch. Wireless[...]

155 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.5.1 DHCP Overview The DHCP web page offers three tabs to configure the SpeedT ouch™ 's DHCP functionality:  DHCP Server : T o configure th e general beh aviour of the SpeedT ouch™ 's DHCP server .  DHCP Relay : T o configure the SpeedT ouch™ DHCP relay .  D[...]

156 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Server Leases In case the SpeedT ouch™ DHCP server is running this table holds all leases which are assigne d by the DHCP serv er to (accepted) DHCP clients. Following lease parameters are shown:  Client ID : The MAC address of the DHCP client.  Address : The IP address leased[...]

157 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on Address Pools One or more disjunctive DHCP server ad dress pools can be crea ted per existing SpeedT ouch™ interface using the Address Pool table. The first address pool displayed in the table has the highes t priority for a certain interface. If you select one of the address pools[...]

158 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration DHCP Relay The DHCP relay tab allows you to add/delete an d overview SpeedT ouch™ 's DHCP relay interfaces. The DHCP relay confi guration is spli t up in two sections:  Relay Config T o add/delete and configure a DHCP re lay serv er on a certain interface  Relay Inter fac[...]

159 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on DHCP Client Dynamic interface s are created and managed by means of the DHCP Client table. Following fields are listed in the DHCP C lient table:  Interfac e : The name of the SpeedT ouc h™ logical interface for which this DHCP client applies  The Address column shows the IP [...]

160 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.5.2 DNS Overview DNS is short for Domain Name System. It is a network functionality that allows network members to use host names rather than IP addresses for referencing networked computers. The DNS web page consists of two sections:  Configuratio n  Hostname T able Configura[...]

161 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.5.3 Managed Switch Overview Y our SpeedT ou ch™ is equipped wi th a four -port 10/100Base- T auto-sensing MDI/ MDI-X Ethernet switch. Each physical Ethe rnet po rt of the switch can be managed individually for extended netwo rking control and mo nitoring purposes. The Managed Swi[...]

162 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Mirror Configuration Port mirroring allows monitor ing from one port (called mirror ed port) to another port (called mi rror capture port). This fun c tionality allows any port's Ingr ess and/or Egress traffic to be monitored to a pre-defined "mirror captu re port". Dep[...]

163 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.5.4 Wireless Availability This page is only availa ble on SpeedT ouch™ devices equipped with a wireless access point. Overview The SpeedT ouch™ IEEE802.11g compliant Wireless L AN (WLAN) i nterface allo ws you to share its high-speed I nternet connection with mult iple networki[...]

164 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Access point settings This section provides an over view and al lows you to configur e the basic wireless networking parameters for your SpeedT ouch™ wire less access point. Following wireless access point setti ngs can be viewed or configured :  Network Name (SSID) : The network[...]

165 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on Network Name (SSID) The WLAN's 'radio' li nk is a shared mediu m. As no physical conn ection exists between the SpeedT ou ch™ and wireless cl ients, a name must be given to all ow unique identificati on of your WLAN radio link. This is done by the Network Name, also [...]

166 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Enable/disable the wireless interface T o disable your wireless in terface: 1 Clear wireless interface enabled . 2 Click Apply to immediately ap ply your changes. T o enable the wireless interfac e: 1 Select Wireless int erface enable d . 2 Click Apply to immediately ap ply your chang[...]

167 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on WEP The Wired Equivale nt Privacy (WEP) algo rithm is used to protect wireless communication from eav esdropping. WEP relies on a secret key that is shared between the wireless client (e.g. a laptop with a wireless ethernet card and the SpeedT ouch™. The fi xed secret key is used t[...]

168 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration WPA WP A is the highest form of se curity available but make sure that yo ur wireless client and client manager are compatible with it. If you want to use this level of encryption you must have a RADIUS (Rem ote Authentication Dial-i n User Service) server installed on your netwo rk. [...]

169 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on  Ye s to allow it to exchange data with other stations.  No to explicitly deny the station to associate with the SpeedT ouch™. 5 Click Apply to immediately ap ply your changes. Networks The Networks tab allows you to:  Scan for Other Networks .  Enable WDS connections w[...]

170 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.6 Firewall Overview The Firewall menu consists of the following topics: Click ... To ... Expressi ons view/configure interface, or IP , or Service related expressions. For more information, see “5.3.2 Expressions” on page 123 . Policy view/configure the Sp eedT ouch™ Stateful [...]

171 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.6.1 Policy Firewall levels The Level list allows you to choose between the fo llowing level:  Disabled : All traffic is allowed to pass th rough your SpeedT ouch™. Game and Application sharing is allowed by the firewall.  BlockAll: Use this Security Level to block all tra f[...]

172 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration Buttons Click:  Customize.. . to create a new firewall level st arting from the selected firewall level. For more information , see “ Creating a firewall rule” on pa ge 173 .  Set Active to activate the sele cted firewall rule. Loose UDP tracking If this check box is:  Se[...]

173 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on Creating a firewall rule Proceed as follow s to create a ne w security level and to add rules: 1 Select one of the si x security levels. 2 Click Customize. 3 T ype name and description for th e new security level and click Apply . 4 Click New to add a rule. 5 Fill in all th e fields.[...]

174 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 7 Click Set Active to activate th e new settings.[...]

175 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.6.2 Log Introduction The Log page allows you to vie w log messages when:  a firewall rule is hit.  the firewall is enabled or disabled.  the firewall level is changed.  a firewall rule is created.  a firewall rule is modified.  a firewall rule is deleted.[...]

176 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.7 VPN Availability The VPN feature is only a vailable if you ac tivated the VPN so ftware module. For more information, see “5.2.10 Add-on” on page 120 . Overview The VPN menu consi sts of following it ems Click ... To ... LAN to LAN connect your LAN with a remote LAN through an[...]

177 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.7.1 LAN to LAN Tabs The LAN to LAN page consists of two tabs. Select:  Remote Gateway Address Known as the starting page when the SpeedT ouch™ must be able to initiate a VPN connection.  Remote Gateway Address Unknown as the starting page when the SpeedT ouch™ onl y needs[...]

178 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.7.2 VPN Client The VPN Client page Th e VPN client in th e SpeedT ouch™ can replace a softw are VPN client installed on a computer . Y ou can use it for example to conn ect from your home to your employer’ s corporate netwo rk for tele-working. The VPN Client page allows you to [...]

179 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.7.3 VPN Server The SpeedTouch™ as VPN Server In a VPN client-server scenario, the VPN se rver is always the responder in the IKE negotiations. V arious VPN cl ients can dial in to a VPN server , since it supports multiple simultan eous VPN connections. A VPN server do es not know[...]

180 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.7.4 Certificates Certificates pages The Certificates pages allow you to manage your certificates. Secure Storage page This page shows the list of certif icates stored in the SpeedT ouch™. Request Import page This page allows i mporting new certificates from a Certif icate Authorit[...]

181 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.7.5 Advanced When to use The Advanc ed VPN menu gives access to two ma in pages where the complete IPSec configuration can be do ne. These pa ges are component-ori ented, as opposed to the application-oriented pages described in “5.7.1 LAN to LAN” on page 177 , “5.7.2 VPN Cl [...]

182 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration 5.7.6 Debug Status page This page shows the status of the IKE Security Association (Phase 1) and the IPSec Security Ass ociat ion(s) (Phase 2) . For an operational VPN connecti on, both an IKE Security Ass ociation and an IPSec Security Ass ociation should be active. Statistics page T[...]

183 E-DOC-CTC-20051 017-0151 v1.0 Chapter 5 Expert Configurati on 5.8 SIP PBX Availability The SIP PBX feature is only available if you activated the SIP PBX so ftware module. For more information, see “5.2.10 Add-on” on page 120 . SpeedTouch™ SIP PBX The SpeedT ouch™ has a key role in the enha ncement of V oice over IP services for corpora[...]

184 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 5 Expert Configuration  Enable/disabl e call screening. Location Service The Loca tion Service page allows you to:  View the registered users.  Add new SIP users . Call Logging All inbound and outboun d SIP sessions that cross the mu lti-media SIP PBX can be monitored from the Spee dT ouch™web in[...]

185 E-DOC-CTC-20051 017-0151 v1.0 Chapter 6 Software Keys 6 Software Keys Introduction A Software Key is a tool to disclose or activate services or software modules. The following Software mo dules can be activated:  VPN256-32, VPN1 6-4, VPN1 6-1: Integrated VPN IPSec capability (SpeedT ouch™620 only)  VPN16-4: Integrated VPN IPSec extesnsi[...]

186 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 6 Software Keys 3 Select the desired software module to open the registration web site on the Internet. Complete the form to request a new software Key . 4 Select the Request Software Key button to pr oceed. As a result yo u will get a text box wi th the key in it. 5 Copy the key and past it into the Softwa[...]

187 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting 7 Troubleshooting Introduction This chapter suggest solution s for problems you may enco unter while installing or configuring y ou r SpeedT ouch™. If the suggestions do not resolve the prob lem, look at the support pages on http: // www .speedtouch.com/support or contact your service pr[...]

188 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troubleshootin g 7.1 General SpeedTouch™ Troubleshooting SpeedTouch™ does not work If none of the LEDs light up, make sure that:  The SpeedT ouch™ is plugged into a power socket outlet.  Y ou are using the correct power supply for your SpeedT ouch™ device.  The SpeedT ouch™ is turned on[...]

189 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting 7.1.1 Wired Ethernet Troubleshooting LAN LED does not light up Make sure that:  The LAN cable is securely conn ected to the 10/100Base-T port.  Y ou are using the correc t cable type fo r your Ethernet equipm ent, that is UTP CA T5 with RJ-45 connectors.[...]

190 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troubleshootin g 7.1.2 Wireless Ethernet Troubleshooting Not able to connect wireless clients Check the following:  If registration is enabled, you must pr ess t he 'Association' button to register the wireless client or search for wi reless device s via the embedded W eb pages.  Make sure[...]

191 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting 7.1.3 Upgrade Troubleshooting Error messages While upgrading your SpeedT ouch™ via the Web pages, one of the following messages may appear: Message Due to Failed to retrieve new software version from the support si te. T ry again later .  The file does not exist, meaning there is no n[...]

192 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troubleshootin g 7.2 UPnP™ on Windows XP Systems SpeedTouch™ not detected by UPnP™ or IGD Control Client Check the following:  Make sure the UPnP™ and Internet Gateway Device Control Client Networking components are added to your Windows XP system.  Y our computer doesn’ t support UPnP™ [...]

193 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting Adding IGD Discovery and Control Y our Windows XP system is able to disco ver an d control Intern et Gateway Devices (IGD), like the Sp eedT ouch™ on your local network. Therefore it is recommended to add the IGD Discovery and Cont rol client to your system. Proceed as follo ws: 1 On the[...]

194 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troubleshootin g 7.3 Reset to Factory Defaults Resetting your SpeedTouch™ Y ou might consider a reset to factory defa ults as described below. Y ou can choose between:  Software reset  Hardware reset A reset to factory default settings dele tes the configuratio n profile settings. Therefore, after[...]

195 E-DOC-CTC-20051 017-0151 v1.0 Chapter 7 Troubleshooting 4 The SpeedT ouch™ restarts. ! Y our system administrator may have di sabled the physical reset button of the SpeedT ouch™. In this case, a hardwa re reset to defaults is not poss ible.[...]

196 E-DOC-CTC-2005 1017-0151 v1.0 Chapter 7 Troubleshootin g[...]

[...]

E-DOC-CTC-200 51017-0151 v1.0 Need more help? Additional help is available online at www .speedtouch.com © THOMSON 2005. All rights reserv ed.[...]