Siemens 5890 manual

Part No. 107-5890-001 SIEMENS Business Class 5890 DSL Router User’s Guide[...]

Software License and Limited Warranty Copyright© 2005 Siemens Home and Of fice Communications Devices LL C. All rights reserved. Sie mens and the Siemens logo are trade marks of Siemens AG, Germany. All other trademarks are held by their respective companie s. Siemens reserves the right to make changes to product spe cif ications at any time witho[...]

liable for any other losses or damages. • The end user will be billed for any parts or labor charges not covered by this limited warranty. The end user will be responsi ble for any expenses relat ed to reinstallation of the product . • THIS LIMITED WARRENTY IS THE ONLY WARRENT Y SSN MAKES FOR THE PRODUCT AND SOFTWARE. TO THE EXTENT ALLOWED BY L[...]

SIEMENS 5890 DSL Router User’s Guide SIEMENS i T able of Content s Chapter 1 Product Specif ications Front Panel ................ ............. ................ ............. ............. ................ ............. ............. ... ................... ............. ..... 1 Back Panel ...................... ................. ............. ..[...]

SIEMENS 5890 DSL Router User’s Guide SIEMENS ii Point-to-Point Protocol ov er ATM (VC Multiplexing) ............ ............. ................ ................ ............. ....... ..... 18 Point-to-Point Protocol ov er ATM (LLC Encapsulation) ................ ................ ............. ............. ................ . .. 20 RFC 1483 (Multi[...]

SIEMENS 5890 DSL Router User’s Guide SIEMENS iii Secure Shell .............. ............. ................ ............. ................ ............. ................ ............. . ...................... ............ 68 Configure SSH .................... ................ ............. ............. ................ ............. ............[...]

SIEMENS 1 Chapter 1 Product S pecifications Front Panel The following table explains the LEDs that appear on the front panel of the Sieme ns 5890 router . Back Panel The following t able describes the variou s connections on the back panel of the Siemens 58 90 router . Light Color Indications Power Green Off Power is ON Power is OFF T est Y ellow: [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 1 Produc t Specifications Hardware Speci fications SIEMENS 2 Hardware Specifications Physical Specifications • Dimensions:8.25" W x 7.0" D x 1.7" H • Wei g ht : –T B D Operational Environment • T emperature:0°F to 104°F • 10°C to 40°C • Humidity: 8% to 95% non -condensing[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 1 Produc t Specifications Sof tware Specificatio ns SIEMENS 3 Sof tware Specifications Configuration Management • Easy Setup Web Ma nagement Interface • Configuration and manag ement using HTTP , serial console, SNMP , SSH, or T e lnet • TFTP download/upload of new softwa re and configuration fil[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 1 Produc t Specifications Sof tware Specificatio ns SIEMENS 4 AT M • Encapsulatio n (IP , Bridging, and Bridge Encapsulated Routing ) (RFC 2684/1483) • PPP over A T M (LLC and VC multiplexing) (RFC 2364) • Classical IP over A TM (RFC 2225) • Classical IP (RFC 1577) • AAL5 • Virtual Circuit [...]

SIEMENS 5 Chapter 2 Inst allation This chapter descr ibes the steps you must take to inst all and conf igure the various compo nents in your network to utilize the Siemens DSL broa dband internet router . This includes setting up the hardware connections to the Intern et router , configuring the PC to use the Internet router fo r Internet access, a[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation Inst allation Requirement s SIEMENS 6 Network Service Provider Requirement s Y our Network Service P rovider will pr ovide you with information to config ure your router ’s W AN connection. Depending upon the type of service that you order ed, you will need some of the items from the f[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation Hardware In stallation SIEMENS 7 Hardware Inst allation Y ou may position the Siemens broadband router at any convenient location where it will be we ll ventilated. Do not stack it with other device s or place it on the ca rpet. Y ou ca n connect the router to an existin g Ethernet port [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation PC Configuration SIEMENS 8 PC Configuration Y our PC must be configured to use the TCP/IP protocol suite over the In ternet, and to accept Dynamic Host Configuration Protocol address assign me nts from th e router . Although this is the default settings for the PC, it is a good idea to v[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation PC Configuration SIEMENS 9 Windows NT 4 1. On your desktop, rig ht click on the Network Neighborhood icon. This displays the Network window . 2. Click the Protocols tab. 3. Select TCP/IP Protocol from the Network Prot ocols list. 4. Click Properties . This displays the Microsoft TCP/IP P[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation PC Configuration SIEMENS 10 Windows 2000 1. Select St art >Set tings >C ontrol Pa nel . This displays the Co ntrol Panel w indow . 2. Double-click the Network and Dial-up Connection icon. This displays the Network and Dialup Conne ction window . 3. Right-click Local Area Connection[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation PC Configuration SIEMENS 11 Windows XP 1. Click St art >Control Pane l. This displays the Control Panel window . 2. Double-click the Network Conn ections icon. This displays the Network Connection windo w . 3. Right-click Local Area Connection , then click Properties. This displays th[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation PC Configuration SIEMENS 12 Mac OS 9.x 1. Click Apple -> Control Panels -> TCP/IP . This displays the TCP/IP Control Panel window . 2. Select Ethernet from the Connect via drop-down menu. 3. Select Using DHCP Server from the Configure drop-down menu. 4. Complete the fields shown wi[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation PC Configuration SIEMENS 13 Mac OSX 1. Click Apple -> System Preferences . This displays the Syst em Preferences window . 2. Double-click the Network icon under the Internet & Network section. This displays the Network window . 3. Select Ethernet from the Connect via drop-down men[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation PC Configuration SIEMENS 14 Linux 1. From a term inal window, run linuxconfig . This displays the Config window . 2. Click the Adaptor ta b . 3. Enter any information specified by your service provider in the fields un der the appropriate Adapte r tab. 4. When setting s are completed , c[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation Configuring the Router SIEMENS 15 Configuring the Router The Siemens Business Class Router family of produc ts provides two user interfaces: a W eb Management Interface and a console- based Command Line Interface (CLI). Th e Web Managem ent Inter face uses an HTTP server housed in the ro[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 2 Installation Configuring the Router SIEMENS 16 Router Information Page The Router Information Pag e is the first page you encounter af ter logging into the router . The Router Information p age displays basic router informatio n and configuration settin gs. On the Router Information page , the follow[...]

SIEMENS 17 Chapter 3 Easy Setup This chapter descr ibes how to define router config uration settings using the Easy Setup Wizard. These settings control access to the Wide Area Network (W AN ) and Local Area Network (LAN). During th e Easy Setup procedure, you will be prom pted to specify configuration parameters that may require information from y[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 18 Point-to-Point Protocol o ver A TM (VC Multiplexing) If you selected Point-to-Point Protocol o ver A TM (VC Multiplexing) from the W an Interface p age, the Point- to-Point Protoc ol page is displayed w hen you click Next . T o configure Point-to-Point Protocol: [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 19 5. If you enabled IP rou ting, option ally select on e or more of the following : • NA T Enabled: Network Addres s T ranslation (NA T) a llows multiple works tations on yo ur LAN to share a single, pu blic IP address. All outgoing traf fic appears to originate [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 20 Point-to-Point Protocol o ver A TM (LLC Encap sulation) If you selected Point-to-Point Protocol o ver A TM (LLC Encap sulation) from the W an Interface page , the Point-to-Point Protocol p age is displayed when you click Next . T o configure Point-to-Point Protoc[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 21 5. If you enabled IP rou ting, option ally select on e or more of the following : • NA T Enabled: Network Addres s T ranslation (NA T) a llows multiple works tations on yo ur LAN to share a single, pu blic IP address. All outgoing traf fic appears to originate [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 22 RFC 1483 (Multiprotocol Encap sulation LLC/SNAP) If you selected RFC 1483 ( Multiprotocol Enca psul ation LLC/SNAP ) from the W an Interf ace page, the RFC 1483 Networking p age is displayed when you click Next . T o configure RFC 1483: 1. Select one or more of t[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 23 RFC 1483 (VC Multiplexing Routed) If you selected RF C 1483 (VC Multiplexi ng Routed) from the W an Interface p age, the RFC 1483 Netwo rking page is displayed when you click Next . T o configure RFC 1483: 1. Select one or more of the following RFC 1483 networkin[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 24 Point-to-Point Protocol o ver Ethernet over RFC1483 If you selected Point-to-Point Protocol o ver Ethernet o ver RFC 1483 from the Wan Interface page, the Point-to-Point Pr otocol over Ethernet over RFC 1483 page is displayed wh en you click Next . T o configure [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 25 RFC 1483 MAC Encap sulated Routin g (MER) If you selected RFC 1483 MAC Encap sulated Routing from the W an Interface page, the RFC 1483 MER Networking page is displayed when you click Next . T o configure RFC 1483 MER Networking: 1. Select one or more of the foll[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 26 RA W IP If you selected RA WIP from th e W a n Interfac e page, the RA WIP Networki ng page is displayed when you click Next . T o configure RAWIP Networkin g: 1. Select one or more of the fo llowing RA WIP Netw orking options: • Bridging Enabled: Forward all t[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 27 Dynamic Host Conf iguration Protocol Dynamic Host Configuration Protocol (DHCP) provides a dynamic, “upon re quest,” IP address to computers and other networked devices. Th e router can act as a DHCP server for devices on your local network. The router provid[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 3 Easy Setup Select Protocol SIEMENS 28 Local Area Network Configuration Local Area Network configuratio n information is configured on the LAN IP Configur ation page. T o configure the Local Area Network: 1. In IP Address , enter the network address of the ro uter . This address must be globally uniqu[...]

SIEMENS 29 Chapter 4 User Setup This chapter describes how to set up users on the router and contro l their access to router functions and to the Internet. T he featur es that cont rol users and their a ccess are listed below . T o access one of these options, click the link o n the left navigat ion pane of the Router Info rmation page. User Manage[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 4 User Setup User Managem ent SIEMENS 30 Adding/Modifying A User Account User accounts are used to contr ol access to the router and the Internet. T o add a user account: 1. Click New User on the User Management page. This displays the Add /Modify User pa ge. (T o modify a user , select the desired nam[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 4 User Setup User Managem ent SIEMENS 31 Deleting A User Account T o delete a user account: 1. Select the name of the accoun t you want to delete in the Select User list on the User Manage ment p age, then click Delete User . 2. When pro mpted, click OK to confirm the account deletion.[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 4 User Setup User Managem ent SIEMENS 32 User Lookup User authentication verification is performed when an access request is made to the system. The ro uter checks the user database to verify the user account by usern ame and p assword, supplied by the user when making the access request. Y ou can spec[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 4 User Setup User Managem ent SIEMENS 33 Secure Mode Configuration Y ou can enable secure mode to control whether an interface is trusted or untrusted. T o configure Secure Mode: 1. Click Secure Mode Configuration on the left navigation p ane of the User Management p age. This displays the Secure Mo de[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 4 User Setup User Managem ent SIEMENS 34 Configure the Radius Server Remote Authentication Dial In User Se rvice (RADIUS) is client-server bas e d access control and authentication feature. T he RADIUS clie nt resides lo cally on the router and works in conjunction with a variety of RADIUS Server appli[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 4 User Setup User Managem ent SIEMENS 35 Configure the T acPlus Server T acplus allows access control and user authentication to be managed from a remote server .T o configure the T a cplus Server: 1. Click Configure T acplus Server on the left navigation p ane of the User Management p age. This displa[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 4 User Setup User Managem ent SIEMENS 36 Management Classes All system operations, are p artitioned into functiona l groups called m anagemen t classes . Managem ent classes group functions into the following categ ories. Class Functional Areas Voice Voice operations and shared network functions. Netwo[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 4 User Setup Change Password SIEMENS 37 Change Password User passwords a re changed from the Change Passwo rd page. T o change a user password: 1. Click Change Password from the left navigation pa ne on the Router Informa tion page. Th is displays the Change Password p age. 2. Enter the n ew password f[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 4 User Setup Access Control SIEMENS 38 Access Control Restrict adminis trative control of the router to a specific set of IP addresses. Eac h remote access method (T elnet, Web, and SNMP) can be configured separ ately . T o set Access Control parameters: 1. Click Access Control fro m the left navigati [...]

SIEMENS 39 Chapter 5 Advanced Setup This chapter d escribes how to configure a dvanced featur e s on the router . Advanced features are listed below . T o configure o ne of thes e featur es, click the lin k on th e left navigation pane of th e Router Information p age. W AN Selection Select WAN physical layer mode. Remote File Configuration Add, de[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup WA N S e l e c t i o n SIEMENS 40 W AN Selection The router can be connected to the interne t using IDSL , SDSL, or SHDSL. The connection mode is usually dictated by your service prov ider . Only one select ion is compatible with your ISP’ s central of fice equipment. T o specify the[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup Remote File Config uration SIEMENS 41 Remote File Configuration Using the Remote File Configuration option to add, modify , or delete a remote file. Each remote file represent s a connection to a re mote router . It is possible that multiple remote files ar e used in conjunction for a [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup DMZ SIEMENS 42 DMZ One computer on your local network can be configured to allow unrestricted two-way communication with servers or individual users on the Internet. This provid es the ability to run programs that are incompatible with firewalls.This feature is primarily us ed for gami[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup DMZ SIEMENS 43 6. T o change the server status, se lect enable or disable from DMZ DHCP Server St atus . Disabled, the router will not act as a DHCP server . 7. T o define the start and ending addre ss range of the IP address pool, enter the st arting address in First IP Address and th[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup Router Clock SIEMENS 44 Router Clock Use the Router Clock option to se t the date and time on the router . T o set the current date and time on the router: 1. Click Router Clock on the left navigation p ane of the Router Information page. This displays the Current Date and T ime page. [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup DHCP SIEMENS 45 DHCP Dynamic Host Configuration Protoc ol (DHCP) is a communication prot ocol that allocates IP addres s automatically to any DHCP client request ing an IP address. A DHCP client ca n be any device attached to your network, for example, a PC. (Note that DHCP is effectiv[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup DHCP SIEMENS 46 3. Click Apply . 4. When a PC boots and asks for an IP address, the DHCP server assig ns it an address from a pool of addresses assigned to the subnetwork where the client reque st originated. T o specify the start and ending address range of the IP address pool, en ter[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup QoS SIEMENS 47 QoS Quality of Service act ively manages network resources to sustain servic e levels for priority applications. Mission-critical and real-time Inte rnet applications dem and a network that provides high bandwid th and low latency . Such applications cannot tolerate unpr[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup QoS SIEMENS 48 • Priority . Priority determines the order in whic h packets will be processed by the router . • Weight . W eight determines the amount of b andwidth to be a llocated to a given ap plication. The router support s four priority levels; High, Medium , Normal and Low . [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup QoS SIEMENS 49 Configure QoS Policy QoS policies control how QoS manages network resources. T o configure a QoS policy: 1. Click QoS Policy Page from the left naviga tion pane of the QoS Configuration p age. This displays the QoS Policy Setting page. 2. Click Create . This expands the [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup QoS SIEMENS 50 5. In Source IP , select one of the following : • From/T o : Enables source address checking. S pecify the source IP address or range of IP addresses that must match for this policy to be used. • Do not care : Disables source addr ess checking. 6. In Dest IP , select[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup QoS SIEMENS 51 Reorder QoS Policies T o move a QoS policy: 1. On the QoS Policy Setting p age, select the policy you wa nt to move in the IP Policy List drop- down menu and click Move . This expands the Qo S Policy Setting page. 2. T o specify the new location, se lect one of the follo[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup Routing T able Configuration SIEMENS 52 Routing T able Configuration Every host has a default routing t able that it uses to determine which physical interface address to use for outgoing IP traf fic. The router supports vir tual routing, which allows you to define mu ltiple routing ta[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup Dial Backup SIEMENS 53 Dial Backup Dial Backup provides a backup to the Internet throug h an asynchr onous modem connection when the defa ult W AN link service experiences inter ruption. The modem connection can be provide d through either an internal V .90 modem or an external V .90 o[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup A TM T raffic Shaping SIEMENS 54 A TM T raffic Shaping An A TM network provides Virtual Path (VP) or V irtual Ci rcuit (VC) connectio ns with distinct levels of service. A TM Traf fic Shaping defines the level of service to use for each configured interface. T o configure Traf fic Shap[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup A TM T raffic Shaping SIEMENS 55 4. Select one of the following Service T ypes . • Constant Bit Rate : Requests a st atic amount of bandwidth that is continuously available for the lifetime o f the connection.This bandwid th amount is characterized by a Peak Cell Rate value. • Real[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup Switch Managem ent SIEMENS 56 Switch Management Each router provides four or eight Ether net 10/100 s witching port s for connection to the local area network (LAN). These RJ-45 port s are located on the rear p anel and have individual Link S tatus LEDs to provide port status and link [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup Switch Managem ent SIEMENS 57 Switch Mirror Configuration The router support s traffic mirroring on the Ether net switch . Port mirroring “m irrors” the traf fic on one (or more) Ethernet port s to a target (o r capture) port where the tr af fic can be studied. This is usef ul for [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup Switch Managem ent SIEMENS 58 Switch Age Time When a switch receives a message, the originating MA C addr ess and the originating port is saved in the switch’s MAC ad dress table. Th e switch uses the mess age’ s destination MAC address and previous entries in the MAC address table[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup Command Line Interface SIEMENS 59 Command Line Interface Use the Command Line Interfac e option to use the web interfac e to enter CLI commands. (Refer to the Command Line Interface Guide for available commands. ) T o execute a CLI command from the web interface: 1. Click Command Line [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 5 Advanced Setup File Editor SIEMENS 60 File Editor Use the File Editor to create and edit files stored on the router . These files contain con figuration and other dat a used by the ro uter . For advanced use rs who underst and the file forma ts and synt ax, this method may be more efficient than conf[...]

SIEMENS 61 Chapter 6 Security Setup This chapter descr ibes how to configu re security feature s on the router . Security features are listed below . T o configure one of these featur es, clic k the link on the left navigat ion pane of the Router In formation page. NA T Network Address T ranslation provides a level of security by hiding the priva t[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup NA T SIEMENS 62 NA T Network Address T ranslation (NA T) provides a level o f secu rity by hiding the private IP addresses of your LAN behind the single public IP address of your router . All connections p ass through the router and are translated by NA T . Network addresses on inbound[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup NA T SIEMENS 63 NA T Server Configuration For incoming messa ges, NA T converts the globa l address to the loca l IP address. 1. T o configure the Wan side for NA T functionality , click NA T Server from the lef t navigation pane. This displays the NA T Server Settings page. 2. From th[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup NA T SIEMENS 64 NA T Host Mapping T ypically , a local network address (internal) is translated to one or mor e global (external) addresses for outgoing messages. 1. T o configure a one to one mapping of LAN IP addresses to W AN IP addresses, click NA T Host Mapping from the left navig[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup SNMP SIEMENS 65 SNMP The Simple Network M anagement Protocol (SNMP) is a st andard proto col that communica tes management information betwee n network management st ations and thei r manage d objects or agents (for exam ple, routers and switches). By using this protocol, network eq ui[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup SNMP SIEMENS 66 5. In T rap Enable , select Enable or Disa ble . SNMP agents also ha ve the ability to send (unreq uested) messages to SNMP manag ers; these messages are called tra ps and not ify the SNMP manager s that an event has happened on the system. 6. If you enable d Tr a p E n[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup SNMP SIEMENS 67 SNMP Password An SNMP password is used to authenticate an SNMP Ma nager . Once authentic ated, SNMP set requests will be performed. T o set the SNMP Password: 1. Click SNMP Password from the SNMP Configuratio n page. Th is displays the SNMP Password page. 2. Enter the N[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup Secure Shell SIEMENS 68 Secure Shell Secure Shell (SSH) se cures network serv ices (such as remote terminal sessions, remote command execution, secure FTP type file transfers, and secur e tunneling of TCP traf fic between two networks) over an insecure network, such as the public Inter[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup Secure Shell SIEMENS 69 Configure SSH T o configure Secure Shell settings: 1. Click Configure SSH from the Secure Shell (SSH) Configuration List p age. This displays the Configure Secure Shell (SSH) page. 2. For Sta tu s , select Enable or Disable to enable or disable the SSH f eature.[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup Secure Shell SIEMENS 70 Load Keys Diffie -Hellman is the key exchange system used for authentication in the establishment and maintenance of SSH connections. The key exchange requir es a Public Key and a Private Key . This key pair can either be loaded from a source file or generated b[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup Secure Shell SIEMENS 71 Key Generator Diffie -Hellman is the key exchange system used for authentication in the establishment and maintenance of SSH connectio ns. The Key exchange r e quires a Public key and a Private key . This key pair can either be loaded from a source file or gener[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup Firewall Scri pts SIEMENS 72 Firewall Script s A firewall is any combination of ha rdware and softwar e that secures a network and traf fic to prevent interception or intr usion. The router has built-in firewall capabilities to secure your network and data communications. The router is[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup St ateful Firewall SIEMENS 73 S t ateful Firewall A firewall is a program or hard ware device that filter s the information coming through the Internet co nnection into your private network or computer system designed to prevent un authorized access to or from a pr ivate network. If an[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup St ateful Firewall SIEMENS 74 Configure St ateful Firewall T o configure the S tateful Firewall: 1. Click St ateful Firewall fr om the left navigation p ane of the Router Information pag e. This displays the S tateful Firewall Co nfiguratio n page. 2. For Firewall St atus , select On o[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup St ateful Firewall SIEMENS 75 View Dropped Packet s T o view the most recent dropped packet s: 1. Click Dropped Packe ts from the left n avigation pane of the S t atefu l Firewall Conf iguration p a ge. This displays the Firewall Dr opped Packet List page. 2. Do one of the following: ?[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup St ateful Firewall SIEMENS 76 Configure Firewall Rules T o configure firewall rules: 1. Click Firewall Rules from the left navigation p ane of the S tatef ul Firewall Configuratio n pa ge. This displays the Firewall Rule Configuration page. When firewall rule s are created, th ey are s[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup St ateful Firewall SIEMENS 77 5. For Ta r g e t , select one of the following to specify the charac teristics a p acket must have in order to matc h the firewall rule: • Protocol/Port S pecifies the protoc ol or por t that applie s to the ru le. This can be one of the following : - t[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup St ateful Firewall SIEMENS 78 Delete Firewall Rules T o delete firewall rules: 1. Click Firewall Rules from the left navigation p ane of the S tatef ul Firewall Configuratio n pa ge. This displays the Firewall Rule Configuration page. 2. Click Delete . This expands the Firewall Rule Co[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup IKE/IPSec Configuration SIEMENS 79 IKE/IPSec Configuration IPSec (Internet Protocol Security) is an open st andard that defines optional auth entication and encryption methods at the IP packet level. I PSec can on ly handle IP p ackets. IPsec is especially useful for implementing V irt[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup IKE/IPSec Configuration SIEMENS 80 Easy IKE/IPSec Setup Internet Key Exchange (IKE) is a means of dynamically creating secu re IP (IPSec) connections, which uses encryption and authen tication to v irtual pr ivate networks over an insecu re network. The Easy IKE/IPSec Setup form is use[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup IKE/IPSec Configuration SIEMENS 81 Advanced IKE/IPSec Setup The Advanced IKE/IPSec Setup p age presents informat ion about current IKE a nd IPSec peers, policies and proposals. T o perform Advanced IKE/IPSec setup, click Advanced IKE/IPSec Setup from the left navigation pane of the IKE[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup IKE/IPSec Configuration SIEMENS 82 IKE Peers Definition IKE peers are those devices known to your internal mod e m as capable of p articipatin g in IKE connections. T o define a new IKE Peer: 1. Click Create next to IKE Peers from the Advanced IKE/ IPSec Setup page. This displays the I[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup IKE/IPSec Configuration SIEMENS 83 IKE Proposals Definition IKE I proposals specify how packets will be encrypted/aut henticated for Phase I. T o define a new IKE proposal: 1. Click Create next to IKE Proposals from the Advanced IKE/IPSec Setup pa ge. This displays the IKE Proposal Def[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup IKE/IPSec Configuration SIEMENS 84 IKE IPSec Proposals Definition IKE IPSec Proposals specify how packets will be encryp ted/authenticated for the final SA. IPSec uses SAs (Security Assoc iations) fo r making co nnections between tw o devices. An SA is an instance of a secur ity policy[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup IKE/IPSec Configuration SIEMENS 85 3. Select one of the following security protocols: • AH (Authentication Header ) method , a security protoco l that au thenticates the send er of each data packet. If the AH protocol is selected, only p acket authentication can be performed , not en[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup IKE/IPSec Configuration SIEMENS 86 IKE IPSec Policies Definition IPSec policies are criteria for pa ckets that IPSec will recognize, an d actions that IPSec will take upon recognition. T o define a new IKE IPSec policy: 1. Click Create next to IKE IPSec Policies fr om the Advanced I KE[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup IKE/IPSec Configuration SIEMENS 87 9. In Destination IP Address , enter the IP address of the remote pr ivate network to whic h your router will connect using this policy . 10. In Destination Subnet Mas k , enter the subnet mask of th e remote private network to which your router will [...]

SIEMENS 5890 DSL Router User’s Guide Chapter 6 Security Setup VPN Log On SIEMENS 88 VPN Log On VPN Log On start s an IPSec session. IPSec sessions are initiated through Security Associations (SAs), which allow peers to negotiate a comm on set of securi ty attribut e s that assures source au thenticity , data integr ity and confidentiality of IP p[...]

SIEMENS 89 Chapter 7 Monitoring Router This chapter describes how to monitor the health of your router co nnections. Router health can be monitored using the following functions. System Summary T o view system summary information, click System Summary on the left navigation pane of the Router Information page . This displays the System Summary p ag[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 7 Monitoring Rou ter System Summary SIEMENS 90 Ethernet Interface Information Click Ethernet Info on th e left navigation pane of the System Summary page to display inform ation abou t the Ethernet interface. Remote Connection Information Click Remote Info on the left navigation p ane of the System Sum[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 7 Monitoring Rou ter System Summary SIEMENS 91 IP Routing Information Click IP Routing Info on the left navigation pane of the System Summary page to disp lay information about the active interfaces in the IP routing t able. System Information Click System Info on the left navigation pane of the System[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 7 Monitoring Rou ter Diagnostics SIEMENS 92 Diagnostics The Diagnostic feature provides info rmation about var ious component s of your system that might help in diagnosing a problem. T o run diagnostics, click Diagnostics on the lef t navigation p ane of the Router Information page . This displays the[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 7 Monitoring Rou ter Diagnostics SIEMENS 93 Interface Information Select Interface information from the dro p down menu and click Execute to display interface information. AT M S t a t i s t i c s Select AT M S t a t i s t i c s from the drop down menu and click Execute to display A TM statistics.[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 7 Monitoring Rou ter Diagnostics SIEMENS 94 Routing T able Information Select Routing T able information from the drop do wn menu and click Execute to display information ab out the configured r outing tab les. Files Information Select Files information from the drop down menu and click Execute to disp[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 7 Monitoring Rou ter Diagnostics SIEMENS 95 Memory Usage Select Memory usage from the dr op down menu and click Execute to display memory usage information. List All Configuration Dat a Select List all configur ation dat a from the drop down menu an d click Execute to d isplay configuration information[...]

SIEMENS 5890 DSL Router User’s Guide Chapter 7 Monitoring Rou ter Diagnostics SIEMENS 96 TCP/IP St atistics Select TCP/IP statistics fro m the drop down menu and click Execute to display TCP/IP information.[...]