User manual ISKRATEL SI2000 CALLISTO821 ROUTER

[. . . ] SI2000 CALLISTO821+ ROUTER USERS GUIDE Copyright© 2005 Iskratel, Ltd. All rights reserved. SI2000 Callisto821+ Router Users Guide Index: 1 1. 1 1. 2 1. 2. 1 1. 2. 2 1. 3 2 2. 1 2. 1. 1 SI2000 Callisto821+ Router Features of SI2000 Callisto821+ Router Using SI2000 Callisto821+ Router Internet access Security Package contents Getting started Installation of hardware Ports WAN RES (Reset button) Ethernet 10Base-T/100Base-T port AC power socket Light indicators Ethernet (UTP) cables Preliminary setup LAN and TCP/IP setup User defined IP address Obtain an IP automatically Telnet management connection WEB management connection Managing SI2000 Callisto821+ Router Telnet management CLI terminology Transport Interface Object List Example: Attaching a transport to an interface CLI command groups CLI conventions add delete clear set show Help with completing CLI commands User accounts Adding new users User passwords Changing user settings WEB management About WEB management Status Quick start System Configuration Status page Status Advanced Diagnostics Port Connection Status 6 6 6 6 7 7 8 8 8 8 8 8 9 9 10 11 11 11 12 12 13 17 17 17 17 17 18 18 18 18 20 20 20 20 21 21 21 22 23 23 24 24 24 25 25 25 25 26 26 26 26 2. 1. 2 2. 1. 3 2. 2 2. 2. 1 2. 2. 2 2. 2. 3 3 3. 1 3. 1. 1 3. 1. 2 3. 1. 3 3. 1. 4 3. 1. 5 3. 2 3. 2. 1 3. 2. 2 2/107 SI2000 Callisto821+ Router Users Guide 3. 2. 3 3. 2. 4 3. 3 3. 3. 1 3. 3. 2 3. 4 3. 4. 1 3. 4. 2 3. 5 3. 5. 1 4 4. 1 4. 2 4. 3 4. 4 4. 5 4. 6 4. 7 4. 7. 1 4. 8 5 5. 1 5. 2 5. 2. 1 5. 2. 2 5. 2. 3 5. 3 5. 4 5. 5 5. 6 WAN Status LAN Status Hardware Status Defined Interfaces System page Event Log Remote Access Firmware Update Backup / Restore Restart Router Configuration page Save Configuration Authentication LAN Connections WAN Connections Security ZIPB IP Routes DHCP server DHCP relay DNS client DNS relay Bridge Ports ADSL Port Ethernet ports System (backup, restore, reset) Backup / Restore Backup configuration Restore configuration Restart Restart Firmware upgrade Upgrade Update Bridged configurations Creating new bridged connection Changing ATM QoS parameters of the connection Changing scheduler profile Changing bridge interface settings Bridge settings Interface configuration VLAN Configuration Creating new VLAN Forward All/Unregistered Configuration Routed connections About routed configurations PPPoE routed Computer configuration Creating connection Modifying connection RFC1483 routed PPPoA routed IPoA routed PPPoE over Ethernet/Bridge routed 26 27 27 27 27 27 28 29 29 29 30 30 31 33 36 39 40 43 45 49 50 51 52 52 53 54 54 54 54 55 56 56 57 57 57 59 59 61 61 62 63 65 65 66 67 69 69 69 69 70 73 74 76 78 79 3/107 SI2000 Callisto821+ Router Users Guide 6 6. 1 6. 2 6. 2. 1 7 7. 1. 1 7. 1. 2 7. 1. 3 7. 1. 4 8 8. 1 8. 1. 1 8. 1. 2 8. 2 8. 2. 1 8. 2. 2 8. 2. 3 8. 3 8. 3. 1 8. 3. 2 8. 3. 3 9 9. 1 9. 1. 1 9. 1. 2 Quality of Service ATM Quality of Service Ethernet based Quality of Service Configuring Scheduler Listing current scheduler profiles Creating new scheduler profile Difference between priority and wf2qplus scheduling Internet Access Encapsulation IPoA RFC1483 PPPoE PPPoA VPI and VCI Multiplexing VC-based multiplexing LLC-based multiplexing WAN IP Address Security options Security Enabling security Enabling security Enabling Firewall and Intrusion Detection Setting a default security level Configuring security interfaces Configuring security interfaces NAT Global IP Address Pools Reserved Mappings DMZ Configuring NAT Configuring NAT NAT Global Address Configuring NAT global addresses NAT Reserved Mapping Configuring NAT reserved mapping Firewall Port Filtering Validators Triggers Intrusion Detection Firewall policies Configuring Firewall policies Configuring Portfilters Configuring Validators Triggers Configuring Triggers Intrusion Detection Settings Configuring Intrusion Detection Settings Troubleshooting Recovery mode Flash memory Main flash memory Recovery flash memory Updating main flash memory 82 82 82 83 83 84 84 86 86 87 87 87 87 87 88 88 88 89 90 90 91 91 91 91 91 91 92 93 93 93 93 93 94 94 96 96 97 98 98 98 98 98 98 99 101 102 102 104 104 106 106 106 106 106 106 4/107 SI2000 Callisto821+ Router Users Guide 9. 2 Configuring LAN interface on PC Updating flash memory Dealing with difficulties 106 107 107 5/107 SI2000 Callisto821+ Router Users Guide 1 SI2000 CALLISTO821+ ROUTER 1. 1 Features of SI2000 Callisto821+ Router Your SI2000 Callisto821+ Router router features: - high speed data transmission on single twisted copper pair for Internet access - full rate operations up to 24 Mbit/s in downstream - 10/100BaseT Ethernet port for LAN or PC connection - PPPoE (RFC2516) connection support for accessing the Internet - PPP over CHAP or PAP - support for PPP over ATM - support for IP over ATM - RFC1483 bridged and routed support - IEEE 802. 1q VLAN support - IEEE 802. 1p Ethernet based quality of service - DHCP server for easy IP address management including - DHCP relay - DNS client - DNS relaying - WEB management and Telnet management over CLI (Command Line Interface) for LAN users - firmware upgrade over WEB management - support for VC based and LLC based multiplexing - NAT (Network Address Translation) for single IP address Internet connection, used by the whole LAN community - firewall filtering functions, allowing better network security and management - intrusion detection 1. 2 Using SI2000 Callisto821+ Router 1. 2. 1 Internet access Your SI2000 Callisto821+ Router can also be used for high speed Internet connections. The TCP/IP standards, most commonly used for using the Internet, are supported by the router. In order to use your SI2000 Callisto821+ Router for Internet access, there must be a DSLAM installed at a provider company's infrastructure near you. [. . . ] Bridge can be configured from main bridge configuration page in Configuration section. 63/107 SI2000 Callisto821+ Router Users Guide Two parameters can be set on the main page: Name Filter Age Traffic Class Mapping Description Time in seconds bridge remembers previously learned MAC address. If this option is enabled, bridge will map traffic accordingly to 802. 1p header values to different output queues. This option basically enables or disables 802. 1p quality of service. On the bottom of main bridge configuration page there are several links which point to more specific settings. Interface Configuration is used for configuring bridge interfaces which are in most cases either physical Ethernet ports or virtual ATM connections. Forward All/Unregistered Configuration is used to define bridge's behavior for multicast Ethernet traffic. Interface Statistics/Flushing and VLAN Port Statistics is used for displaying various statistics information. 64/107 SI2000 Callisto821+ Router Users Guide 4. 6 Interface configuration This page displays all interfaces attached to the bridge. Usually there are WAN connections created by user as described in 4. 3. 1Creating new bridged connection and permanent LAN connections. Options available to change are the same as described in 4. 3. 4Changing bridge interface settings. Where ever they are changed the results will be the same. 4. 7 VLAN Configuration In this section you can set up VLAN configuration of the bridge module. Be aware that you must also setup 4. 3. 8Ethernet Switch accordingly otherwise VLANs will not work as expected. Each VLAN used in the system must be added into this section. For untagged traffic special VLAN with predefined name is created by default. Even if you delete it and would like to add it back later, you must use the same name and settings. Name:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DefaultVlan VLAN ID: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 FDB Name: . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DefaultFdb 65/107 SI2000 Callisto821+ Router Users Guide 4. 7. 1 Creating new VLAN Click Create new VLAN link at the bottom of VLAN main page. Enter a descriptive name of your VLAN into Name field. For Vlan Id select a number smaller than 4096 but not equal to 1 if you are not creating DefaultVlan for untagged traffic. For Fdb Name select DefaultFdb only for DefaultVlan otherwise select one of Qbridge names. FdbName represents the MAC database bridge uses to learn MAC addresses. Using different Fdbs for each VLAN allows different frame forwarding rules for each VLAN. This is useful when one device is communicating using different VLANs over different bridge interfaces. [. . . ] Maximum ICMP Count; type in the maximum number of ICMP packets (per second) that are allowed by the Firewall before an ICMP Flood DOS is detected. The Intrusion Detection settings are applied to the Firewall, and the Security Interface Configuration page is displayed. These actions have the same effect as typing the following CLI commands: security enable firewall enable IDS firewall set IDS blacklist 104/107 SI2000 Callisto821+ Router Users Guide firewall set IDS victimprotection firewall set IDS DOSattackblock firewall set IDS SCANattackblock firewall set IDS MaxTCPopenhandshake firewall set IDS MaxPING firewall set IDS MaxICMP firewall set IDS blacklist clear 105/107 SI2000 Callisto821+ Router Users Guide 9 TROUBLESHOOTING 9. 1 Recovery mode You will now that the SI2000 Callisto821+ Router is running in recovery mode when both WAN and ALM LEDs are blinking fast. 9. 1. 1 Flash memory Main flash memory The flash memory in your Callisto821+ is divided into two parts. The first part contains data that is necessary for normal functioning of your Callisto821+, the main flash partition. [. . . ]