THOMSON 610 manual

SpeedT ouch TM 610/610i/610s/610v Business DSL Router Remote Management 600 SERIES[...]

[...]

Application Note Ed. 01 SpeedT ouch TM 610 Remote Management[...]

Application Note Ed. 01 Status Released Change Note Pec kel be en S Shor t Title AppNote_RemoteManagement R4.1 Ed. 01 Copyright © 2002 THOMSON multimedia . All rights r eserved. Passing on, and cop ying of this docu- ment, use and communication of its contents is not permitted without written authorization from THOMSON multimedia. The c ontent of [...]

Application Note Ed. 01 1 Contents 1 Introduction ....................... ......................... .................... 3 2 SpeedTouch TM 610 Remote Acce ss ............... ............... 5 2.1 The SpeedTouch TM 610 Firewall ....... ........................................................ ......... 6 2.2 Remote SpeedTouch TM 610 Web Interface Acc[...]

Application Note Ed. 01 2[...]

1I n t r o d u c t i o n Application Note Ed. 01 3 1I n t r o d u c t i o n Over view Abstract Being a ke y component of your business network, a good operation of the SpeedT ouch TM 610 is essential to gain maximum performance of your DSL connections. Continuous management and diagnosis of the SpeedT ouch TM 610 sh ould be performed to ensure a fa[...]

Application Note Ed. 01 1 Introduction 4[...]

2 SpeedTouch TM 610 Remote Access Application Note Ed. 01 5 2S p e e d T o u c h TM 610 Remote Access Introduction The application note SpeedT ouch TM 610 Operation and Main tenance described some of the standard access methods the SpeedT ouch TM 610 pr ovides to allow users to perform configurations and/or - if needed- th e r e qu ired pr ocedures[...]

Application Note Ed. 01 2 SpeedTouch TM 610 Remote Access 6 2.1 The SpeedT ouch TM 610 Firewall Introduction All traffic from, to , or via an y of th e SpeedT ouch TM 610 interfaces is subjected to its powerful pr ogrammable firewall. For a full description of the SpeedT ouch TM 610 programmable fir ewall see the applica- tion note The SpeedT ouch [...]

2 SpeedTouch TM 610 Remote Access Application Note Ed. 01 7 Implementation of the default firewall rules In the following an extract is giv e n of the default firewall rules. • Sink chain fir ewall rules appl ying to traffic destined for the SpeedT ouch TM 610 IP host (sink hook): The first rule indicates the firewall to allow only incoming traff[...]

Application Note Ed. 01 2 SpeedTouch TM 610 Remote Access 8 2.2 Remote SpeedT ouch TM 610 W eb Inter face Access Appropriate firewall rules T o allow r emote access to the SpeedT ouch TM 610 web pages from the W AN, y ou must add follo wing rules: • To t h e s i n k c h a i n : The rule allows incoming traffic fr om the W AN to the SpeedT ouch TM[...]

2 SpeedTouch TM 610 Remote Access Application Note Ed. 01 9 2.3 Remote SpeedT ouch TM 610 T elnet Access Appropriate firewall rules T o allow remote access to the SpeedT ouch TM 610 Command Line Interface (CLI) via a T elnet session fr om the W AN to the SpeedT ouch TM 610, you must add f ollowing rules: • To t h e s i n k c h a i n : The rule al[...]

Application Note Ed. 01 2 SpeedTouch TM 610 Remote Access 10 2.4 Remote SpeedT ouch TM 610 F TP Access Appropriate firewall rules T o allow remote access to the SpeedT ouch TM 610 File System via an FTP session fr om the W AN to th e SpeedT ouch TM 610, you must add tw o ru les per chain: one rule for the FTP control channel and one for the FTP dat[...]

2 SpeedTouch TM 610 Remote Access Application Note Ed. 01 11 2.5 SpeedT ouch TM 610 Controlled Access Introduction In sections “2.2 Remote SpeedT ouch TM610 W eb Interface Access ” on page 8 , “2.3 Remote SpeedT ouchTM610 T elnet Access” on page 9 and “2.4 Remote SpeedT ouchTM610 FTP Access” on page 10 the methods for allowing r e mote [...]

Application Note Ed. 01 2 SpeedTouch TM 610 Remote Access 12 In case you use the SpeedT ouch TM 610 DHCP ser v er for automatic IP configuration for the hosts on your local network, DHCP requ ests fr om local hosts will no longer be accepted to arriv e at the SpeedT ouch TM 610 IP host (i.e . its DHCP server), and equally , DHCP replies will no lon[...]

3 SpeedTouch TM 610 Syslog Application Note Ed. 01 13 3S p e e d T o u c h TM 610 Syslog Introduction Syslog is a basic , uncomplicated, yet pow erful method to administer a network device as the SpeedT ouch TM 610. By sending syslog messages, the SpeedT ouch TM 610 is able to inform netw ork managers about the general state of th e device and to r[...]

Application Note Ed. 01 3 SpeedTouch TM 610 Syslog 14 3.1 The SpeedT ouch TM 610 Syslog Daemon What is Syslog Syslog is a message generating tool that ca n be implemented in any netw ork device . The intention of the tool is to send messages ov er the netw ork indicating status, actions, possible problems, etc. from the device. Although the syslog [...]

3 SpeedTouch TM 610 Syslog Application Note Ed. 01 15 Syslog priority facilities Follo wing priority faciliti es ar e possible for a syslog message generated by the SpeedT ouch TM 610. The facilities are listed by descending priority: Priority Notation Code K ernel messages k ern 0 User -lev el messages user 8 Mail system mail 16 System daemons dae[...]

Application Note Ed. 01 3 SpeedTouch TM 610 Syslog 16 Syslog message bodies The SpeedT ouch TM 610 syslog daemon is internally responsible for collecting and admin- istering messages generated by one or mo r e of its subsystems. Fo llowing of the SpeedT ouch TM 610 subsystems are able to trigger a message: • The PPP dial-in client • The PPP oA-[...]

3 SpeedTouch TM 610 Syslog Application Note Ed. 01 17 3.2 Syslog via the W eb Pages The SpeedT ouch TM 610 Syslog web page The SpeedT ouch TM 610 Syslog web page allows users to view all or a selection of syslog messages the SpeedT ouch TM 610 generated. Simply browse to the SpeedT ouch TM 610 web pages at http://10.0.0.138 and clic k Syslog in the[...]

Application Note Ed. 01 3 SpeedTouch TM 610 Syslog 18 3.3 Syslog via the CLI The Syslog CLI command group The SpeedT ouch TM 610 CLI syslog command group basically pr ovides the sam e possibil- ities as pro vided on the SpeedT ouch TM 610 syslog web page: For mor e information on the syntax and use of the CLI syslog command group commands, see The [...]

3 SpeedTouch TM 610 Syslog Application Note Ed. 01 19 3.4 Remote Syslog Notification Introduction As described bef ore the SpeedT ouch TM 610 can be configured to send all or a selection of generated syslog messages to a host on the local or a r emote network IP addr ess. This section describes how to configur e the SpeedT o uch TM 610 syslog daemo[...]

Application Note Ed. 01 3 SpeedTouch TM 610 Syslog 20[...]

4T h e S p e e d T o u c h TM 610 SNMP Application Note Ed. 01 21 4 The SpeedT ouch TM 610 SNMP Introduction Simple Network Management Pr otocol (SNMP) is a widely spread method for managing networks. Based on a client /server concept, the SNMP ser ver (the SNMP manager) gets or sets the values of objects defined in a Management Information Base (M[...]

Application Note Ed. 01 4 The SpeedTouch TM 610 SNMP 22 4.1 SpeedT ouch TM 610 SNMP configuration SNMP Configuration There ar e a few settleable options cov ering the SNMP functionality . If no traps, sponta- neous messages sent from the SpeedT ouch TM 610 to a manager , are required then all of the default opti ons will be sufficient to access i n[...]

4T h e S p e e d T o u c h TM 610 SNMP Application Note Ed. 01 23 SNMP and the default SpeedT ouch TM 610 Firewall T owards the local network, no restrictions apply on behalf of the fire wall rules. Howe ver , regarding the W AN, any traffic on destination UDP por ts 161 (SNMP) and 162 (SNMP-trap) generated by the SpeedT ouch TM 610 will be counted[...]

Application Note Ed. 01 4 The SpeedTouch TM 610 SNMP 24 4.2 SpeedT ouch TM 610 MIBs Introduction As mentioned in “ Management Information Base” on page 21 both the SpeedT ouch TM 610 SNMP agent and the SNMP ma nager r ely on Management Informa- tion Base (MIB) files containing all rele vant SNMP objects. In the following, all MIBs important for[...]

4T h e S p e e d T o u c h TM 610 SNMP Application Note Ed. 01 25 ADSL and SHDSL MIBs Following tw o MIBs are specific per SpeedT ouch TM 610 variant (ADSL or SHDSL vari- ants). Y ou should only load the appr opriate one, although loading both will not harm functionality . T o retrie ve maxim um SNMP informat ion it is imperativ e to use the MIB pr[...]

Application Note Ed. 01 4 The SpeedTouch TM 610 SNMP 26 Example of MIB browsing Using a MIB manager (sometimes equally refer red to as MIB br owser) network adminis- trators are able to walk thr ough MIB object s in order to view cur rent of historical values of the manage d devi ce, and get or set specific values of MIB objects. Many implementatio[...]

[...]

Built for excellence 600 SERIES © 2002 THOMSON multimedia. All rights reserved. Appl ication Note Ed. 01 www.speedtouch.com[...]