manualshive.com logo in svg

Eci Telecom B-FOCuS 270, Configuration Manual, Page: 37 / 67

Share
Download
Eci Telecom B-FOCuS 270 Configuration Manual Download Page 37

B-FOCuS 270/285/400 PR  

Configuration Manual 

ECI Telecom Ltd. Proprietary

  

 

37 

5.9. Firewall 

Statistics 

The Firewall Statistics menu presents data for traffic that has passed via the firewall 
or has been blocked. 
The Traffic tab displays statistics for all sessions that have reached the firewall. 
 

  

The HTTP tab displays only sessions in the HTTP proxy protocol, sorted by the users 
that have initiated them. 

 

Summary of Contents for B-FOCuS 270

Page 1: ...B FOCuS 270 285 400PR Router Configuration Manual www ecitele com ...

Page 2: ...pment design or specifications Information supplied by ECI is believed to be accurate and reliable However no responsibility is assumed by ECI for the use thereof nor for the rights of third parties which may be effected in any way by the use thereof Any representation s in this document concerning performance of ECI product s are for informational purposes only and are not warranties of future pe...

Page 3: ...d Operations 17 5 1 ADSL Mode 17 5 2 DHCP 17 5 2 1 The Router as a DHCP Server 17 5 2 2 The Router as a DHCP Relay 18 5 3 Firewall 18 5 3 1 Users Control 19 5 3 2 Access Control List ACL 20 5 3 3 Proxy 21 5 3 4 IP Level Filtering 22 5 4 NAPT 24 5 4 1 Static IP address in WAN 25 5 4 2 Static Mapping of IP Addresses 25 5 4 3 Static Mapping of Port Numbers 26 5 5 Configure 27 5 5 1 Defining Interface...

Page 4: ... ATM 49 6 5 1 Basic Workflow 49 6 5 2 Basic Workflow 50 6 6 Defining PPP Over Ethernet 51 6 6 1 Basic Workflow 51 6 6 2 Advanced Workflow 52 6 7 Updating Software Version 53 7 Troubleshooting 55 7 1 Defining User Name and Password Only in 400PR 55 7 2 Proper Version Upgrading 56 7 3 Hardware Reset 57 8 Specifications 59 8 1 Connection Diagrams 59 8 1 1 B FOCuS 270 Connections 59 8 1 2 B FOCuS 285P...

Page 5: ...The Ethernet ports rates can be either 10 or100Mbps The router can be installed either as a bridge in layer 2 of the Communication model or as a router in layer 3 of the Communication model It contains an internal dialer as well as additional services such as Dynamic Host Configuration Protocol DHCP Network Address Translation NAT and Firewall The configuration software is burned into a flash memo...

Page 6: ...B FOCuS 270 285 400 PR Configuration Manual ECI Telecom Ltd Proprietary 6 ...

Page 7: ...ion software the computer should be defined on the same subnet with the router The access to the definition windows differs somewhat for the various operating systems The example presented here refers to Windows XP To redefine the computers in the Local Area Network LAN 1 From the Start menu select Settings Control Panel Network Connections The Network Connections dialog box appears 2 From the lis...

Page 8: ...box appears 5 Select the Use the following IP address radio button Define a unique IP address for the computer in the same subnet where the router is defined its format should be 192 168 1 n where n is a unique integer from 2 to 255 In the Subnet mask field enter 255 255 255 0 In the Default gateway field enter 192 168 1 1 the router s IP address 6 Click OK The Local Area Connection Properties dia...

Page 9: ...ic power system see Connection Diagram To activate the configuration software 1 Open an Internet browser 2 In the address line enter the router s IP address 192 168 1 1 A login dialog box appears 3 Enter the user name admin and the password Bezeqwow Click OK The configuration software s opening window appears The menus are displayed at the left side of the window They are divided into two groups B...

Page 10: ...etary 10 The display on the right side of the window differs according to the menu selection on the left side The display presents the default router parameters Configurable fields can be used to modify the initial settings for customizing the router to specific needs ...

Page 11: ...e line quality the transfer rates in the upstream and downstream directions and additional parameters 4 2 WAN Setup When the WAN Setup menu is selected from the Basic menu the WAN Setup dialog box appears The router s software supports a collection of transformation protocols for connecting computers to service suppliers over the public network s ADSL infrastructure The router can be configured in...

Page 12: ...ames are bridged over ATM virtual channels The Ethernet frames are encapsulated using either the LLC SNAP or Vc Multiplexing method The router is only responsible for transferring the frames between the LAN and the Internet service provider If the router s DHCP server is activated it assigns IP address to the computers for communication with the WAN If the DHCP server is not activated IP addresses...

Page 13: ...can be activated These additional parameters should be configured user name password and authentication protocol In PPP configuration IP addresses for accessing the WAN are supplied by the ISP to the router When the router is activating the internal DHCP it supplies IP addresses to the computers in the LAN This must be done to enable surfing the Internet from a computer in the LAN In addition NAPT...

Page 14: ...the dialog box 4 3 LAN Setup When the LAN Setup menu is selected from the Basic menu the LAN Setup dialog box appears Define the IP address and subnet mask of the router towards the LAN port eth0 and click Apply 4 4 Routing Setup When the Routing Setup menu is selected from the Basic menu the Routing Setup dialog box appears The table displays all the routers recognized in the network It contains ...

Page 15: ... Information The RIP List window appears This list appears for the B FOCuS 270 285PR This list appears for the B FOCuS 400PR 4 5 Save Reboot When a new configuration has been defined it must be burned into the router s internal flash memory Then the router must be restarted The new configuration becomes effective only after it has been saved and the router has been restarted When selecting Save Re...

Page 16: ...o the default configuration settings you must erase the changes you have made and restart the computer The default configuration becomes effective only after the reboot When selecting Erase Reboot from the Basic menu the following dialog box appears Click Erase first When an acknowledgement is received click Reboot ...

Page 17: ...ted the second mode becomes inactive Note When there is a DHCP in the LAN port eth0 can be defined as a client and receive an IP address from it This mode can be configured using the Configure option in the Advanced menu See Configure 5 2 1 The Router as a DHCP Server The DHCP tab enables defining parameters when the router is configured as a DHCP server Each line can be used to define a range of ...

Page 18: ...lt gateway used to access the WAN The number of days for leasing the address 3 Click Apply 4 Perform Save Reboot 5 2 2 The Router as a DHCP Relay To define the router as a DHCP relay 1 Define the address of the DHCP in the WAN 2 Change the DHCP Relay mode to Enable 3 Click Apply 4 Perform Save Reboot 5 3 Firewall The firewall filters the traffic between the LAN and the WAN Logically it is position...

Page 19: ...s In addition he can use CLI Telnet HTTP or FTP to access the configuration user interface To login as an administrator use the user name admin and the password Bezeqwow see Activation Pppoa and pppoe are users with administrator s permissions but they can access the configuration user interface only via HTTP An administrator as defined in the Permissions field can add modify and delete all the ro...

Page 20: ...assword The Change Password dialog box appears 3 Enter the old password and the new password twice The length of the password should be at least 16 characters 4 Click Apply 5 3 2 Access Control List ACL This tab enables control over the traffic to and from the LAN The control is performed by a proxy The proxy must be defined both in the computer using the browser s software and in the router see P...

Page 21: ... you must define a specific user Otherwise the rule applies to all users 3 Define these parameters The priority of this rule relative to other rules Destination address in the WAN IP address range in the LAN Domain name The applications to which the rule applies for example Audio All blocks downloading audio files Time range over which the rule applies within a weekly frame Whether the defined tra...

Page 22: ...oritized order When a new package appears the firewall checks whether the top priority rule applies to it If it does a decision is made whether to transfer or to block it in accordance with the rule If it does not apply the next prioritized rule is applied and so on until the end of the list The List of Firewall Policies presents the defined rules Note that the priority is higher as the Precedence...

Page 23: ... When TCP is selected you may define also specific flags 5 Apply the rule to the traffic via the firewall You can do this in one of two ways Define a new Action ID In this case you should define An interface selected from the list The direction of traffic relative to the WAN In refers to Upstream from LAN to WAN Out refers to Downstream from WAN to LAN The action applied to the specified traffic A...

Page 24: ...e Network Address Port Translation NAPT protocol translates IP addresses from LAN to WAN and vice versa This is performed for efficient use of the IP address range and for protection of privacy Each package contains in its header the addresses of the source and the destination In addition it contains the identity of source and destination ports This information is required to identify the applicat...

Page 25: ...t numbers from WAN to LAN 5 4 1 Static IP address in WAN You can define a static IP address for the router from the WAN side The address is received from the ISP To add a new line click Add The Static WAN Address Configuration dialog box appears Enter the IP address you have received from the ISP and click Apply 5 4 2 Static Mapping of IP Addresses Static mapping of IP addresses enables access fro...

Page 26: ...dress To fields In addition open the applicable port in the Firewall see IP Level Filtering 3 Click Apply 5 4 3 Static Mapping of Port Numbers Static mapping of port numbers enables access from the WAN to the LAN while preserving privacy The static mapping list shows the router s IP address for the WAN the IP address for the LAN and the port s range for traffic from the WAN to the LAN A few lines ...

Page 27: ...cable port in the Firewall see IP Level Filtering 5 5 Configure The Configure menu enables detailed definition of the communication parameters in various sessions You can see a summary table of all the interface definitions as well as the parameters of each interface separately 5 5 1 Defining Interface Parameters The List of Interface Entries table in the Interface tab summarizes the parameters of...

Page 28: ... data To configure the eth0 interface 1 Select the radio button on the eth0 line and click Configure Interface The Ethernet Interface Configuration dialog box appears 2 Select the mode of defining the IP address static or dynamic from the DHCP server 3 If the IP address is set to static mode defined these parameters IP address and subnet mask Maximum size of a package MTU Communication rate auto 1...

Page 29: ... G W The DNS Default Gateway Configuration dialog box appears 2 Define Domain name in the WAN Primary and secondary DNS in the WAN IP address of the default gateway for accessing the WAN 3 Click Apply Note As a default the router is defined as the relay of the ISP parameters towards the LAN To define a NAT for the ATM and PPP Interfaces 1 Select NAT The NAT Configuration dialog box appears 2 Selec...

Page 30: ...adio button and click Delete Encap To add a new Channel 1 Click Add The VCC Configuration dialog box appears 2 This dialog box resembles the WAN Setup dialog box in the Basic Operations menu yet it enables more detailed definitions For example traffic shaping parameters such as Peak Cell Rate CDVT traffic type voice or data and service type CBR UBR NRTVBR RTVBR 3 Select the required protocol and d...

Page 31: ...be selected as a default Each channel can be started and stopped individually using the Start and Stop buttons Starting a channel activates dial up from the router to the public network 5 5 4 Defining PPPoA The PPPoA tab displays detailed parameters of the dial up over ATM channels Note that the table s header consists of two lines and two lines of data are displayed accordingly for each channel A...

Page 32: ...it will send an IGMP join report to the Multicast Router over the IGMP Proxy interface When the IGMP Proxy Router receives an IGMP leave report it sends a group specific query over the IGMP Proxy Router interfaces If it doesn t receive any response to that group specific query and the WAN Multicast Router type is Version 2 then the IGMP Proxy sends a leave report to the WAN Multicast Router over t...

Page 33: ...e router s parameters when operated as a bridge 5 7 1 Bridge Parameters The Bridge tab displays the defined bridge parameters To delete an existing bridging group Click Flush To define a group of interfaces as a bridging group 1 Click GroupInfo The Group Interfaces dialog box appears 2 Check the interfaces you want to include in the group and click Apply To define an interface and an encapsulation...

Page 34: ...ridge entries Click Enable Note The workflow is as follows Define an EoA configuration Click Flush Define a bridging group Add an interface Click Enable Finally open the Configure menu and validate that the status of all the interfaces defined within the group is Bridged 5 7 2 Spanning Tree The Spanning Tree tab presents the definition of links within the tree links to bridges in the WAN the state...

Page 35: ...ng from this node towards the WAN will be blocked or passed The default is Dynamic enabling passage from all nodes via the eth0 interface If you block the passage from some nodes the parameter in the Age column is changed to Static Note You cannot modify a line whose Age parameter is Dynamic You can only add a similar line referring to the same MAC address whose age parameter is Static Both lines ...

Page 36: ...e filtering definitions Use the radio button to select the node you want to delete and click Delete Note You cannot delete Dynamic definitions for eth0 which is the default 5 8 Defining Time and Date To apply time dependent rules the router must be synchronized with local timing For example firewall blocking rules can change according to business hours The Time Date menu enables configuring the ro...

Page 37: ... The Firewall Statistics menu presents data for traffic that has passed via the firewall or has been blocked The Traffic tab displays statistics for all sessions that have reached the firewall The HTTP tab displays only sessions in the HTTP proxy protocol sorted by the users that have initiated them ...

Page 38: ...perates The Interface tab displays general data about all interfaces their statuses and the traffic that has passed through them The TCP IP tab displays data on the traffic in the IP UDP TCP and ICMP protocols The DHCP tab displays data concerning IP addresses allocated by the router s DHCP server the connection and disconnection times and the MAC address of the connected computer ...

Page 39: ...s of fitness tests and updating the router s software version 5 12 1 Testing ATM Channels The OAM Loopback tab enables activating a connectivity fitness test by sending data from the router to the WAN receiving it back and making a comparison Two test called Flow types can be performed Sending a standard data package identified by a specific content identifier over a virtual ATM channel F5 end to ...

Page 40: ...tware is released it is sent to you in the form of a file with the extension bin To load a new software version to the router 1 Click Browse 2 Locate the new version s bin file 3 Click Upgrade Very Important Do not switch the router off during the upgrade process You must wait until a success message appears Afterwards restart the router to apply the new version 4 This message appears when the upg...

Page 41: ...ng User Name and Password only in 400PR 1 Login as a PPPoA user using user name pppoa and password user The PPPoA Configuration dialog box appears 2 Change the user name to the name received from your ISP Use the format user Name domain For example john ISP 3 Change the password to the one you have received from your ISP 4 Check the Enable NAT checkbox 5 Click Modify 6 From the Basic operations me...

Page 42: ...fine a bridge per RFC 1483 in the basic way 1 From the Basic operations menu select WAN Setup The WAN Setup dialog box appears 2 Click the RFC 1483 Bridged radio button 3 In the top line enter the VPI and VCI values and select the LLC SNAP radio button 4 At the bottom of the dialog box click Add 5 Check that a new line containing the values you have defined is added to the table at the bottom of t...

Page 43: ...fo The Group Interfaces dialog box appears 4 Check the interfaces you want to add to the group in this example etho atm0 atm1 5 Click Apply This line is added to the List of Bridge Entries 6 To define the bridge from the Advanced operations menu click Configure 7 In the VCC tab click Add The VCC Configuration dialog box appears As a default the bridge definition radio button is selected Enter the ...

Page 44: ...interfaces in this example atm1 Enter the VCI and VPI values and select the type of encapsulation 11 Click Apply The values you have defined appear in the atm line in this example atm1 12 To activate the bridge click Enable 13 From the Advanced menu select Configure Check that the status of all the group members eth0 atm0 atm1 is Bridged 14 From the Advanced menu select VCC Check that all the valu...

Page 45: ...p The WAN Setup dialog box appears 2 Click the RFC 1483 Routed radio button Define VPI VCI encapsulation type LLC SNAP and check Enable NAPT Define a WAN IP address and subnet mask 3 At the bottom of the dialog box click Add Check that a line is added to the table containing the values you have defined 6 3 2 Advanced Workflow To define a routed IPoA per RFC 1483 using the advanced method 1 From th...

Page 46: ... Add The VCC Configure dialog box appears 6 Click the Routed radio button Select the interface you want to define atm4 from the list Define VPI VCI and all other parameters 7 Click Apply A new line is added to the VCC table 8 To define NAT return to the Interface tab and click NAT The NAT Configuration dialog box appears 9 Check Enable NAT and select the Interface you want to define atm4 Click App...

Page 47: ...ine Classical IPoA 1 From the Advanced menu select Configure 2 From the list of interfaces select an available ATM interface in this example atm5 and click Configure Interface The ATM Interface Configuration dialog box appears 3 Define the name of the interface the IP address and subnet mask in the WAN and the MTU value Change the status to UP 4 Click Apply Check that the definitions appear in the...

Page 48: ...PVC checkbox define the next hop IP address an address in the WAN from which the routing continues 9 In both cases click Apply Check that the newly defined interface appears in the VCC list 10 Click Show VCC Quality and validate that the traffic shaping parameters appear as you have defined them 11 Click Close to close the pop up window 12 To activate NAT select the Interface tab and click NAT The...

Page 49: ...definition of most parameters 6 5 1 Basic Workflow To define PPP over ATM using the basic method 1 From the Basic operations menu select WAN Setup The WAN Setup dialog box appears 2 Click the PPPoA radio button Define VPI VCI and encapsulation type Note that Enable NAPT is checked by default Define user name name domain and password as received from your ISP and select the PAP authentication proto...

Page 50: ... users on the same interface but when one of them is connected to the ISP the others cannot be connected 4 Click Apply Check that a line is added in the VCC tab 5 Select the PPPoA tab and check that the interfaces you have defined are displayed 6 Note that the interface you have defined in the Basic menu appears in ppp0 the first available ppp interface before the one you have defined in the Advan...

Page 51: ...on of most parameters 6 6 1 Basic Workflow To define PPP over Ethernet using the basic method 1 From the Basic operations menu select WAN Setup The WAN Setup dialog box appears 2 Click the PPPoE radio button Define VPI VCI and encapsulation type LLC Note that Enable NAPT and Enable DHCP Server are checked by default Define user name name domain and password as received from your ISP and select the...

Page 52: ...oE tab and validate that the interfaces you have defined are displayed 6 Note that the interface you have defined in the Basic menu appears in ppp2 the first available ppp interface before the one you have defined in the Advanced menu is selected by default It has been assigned by default Profile ID 0 The interface you have defined in the Advanced menu appears with the values you have defined 7 If...

Page 53: ... menu select Diagnostics and click the Upgrade tab 2 Click Browse 3 Locate the new version s bin file 4 Click Upgrade Very Important Do not switch the router off during the upgrade process You must wait until a success message appears Afterwards restart the router to apply the new version 5 This message appears when the upgrade process has been completed ...

Page 54: ...B FOCuS 270 285 400 PR Configuration Manual ECI Telecom Ltd Proprietary 54 ...

Page 55: ... Only in 400PR Phenomenon You cannot dial up to the WAN Possible solution The defined user name and or password are incorrect To solve the problem 1 Login as a pppoa user Use the default user name pppoa and the default password user The PPPoA Configuration dialog box appears 2 Change the user name to the one you received from your ISP Use the format user name domain 3 Check the Enable NAT checkbox...

Page 56: ...ine type telnet 192 168 1 1 A login prompt appears 3 Type admin The word Password appears 4 Type the password received from your ISP 5 Type version The name of the file in the flash memory appears If the name is Recovery this is the basic version Continue to the next step for loading the upgrade version If the name of the upgrade file appears like in the shown example this is not the case Try rest...

Page 57: ...on is installed 7 3 Hardware Reset In case you need to return to the default configurations and you cannot access the router via the configuration GUI perform hardware reset Note Hardware reset should be performed only in necessary cases To perform hardware reset 1 Disconnect the ADSL cable from the router 2 Press the Reset pushbutton on the back side of the router until the ADSL LED is illuminate...

Page 58: ...B FOCuS 270 285 400 PR Configuration Manual ECI Telecom Ltd Proprietary 58 ...

Page 59: ...ications This section contains useful information about the router Connection diagram Indicators Technical specifications 8 1 Connection Diagrams The following figures show how the routers are connected to the computers telephone network and power source 8 1 1 B FOCuS 270 Connections ...

Page 60: ...B FOCuS 270 285 400 PR Configuration Manual ECI Telecom Ltd Proprietary 60 8 1 2 B FOCuS 285PR Connections 8 1 3 B FOCuS 400PR Connections ...

Page 61: ...r between the computer and the modem using a 100Base T connection Off The modem s USB port is not connected to the computer On The modem s USB port is connected to the computer and operating properly USB Link only 285 Blinking Indicates data transfer between the computer and the modem using a USB connection Off The modem s LAN Link 1 4 ports are not connected to the computer On The modem s LAN Lin...

Page 62: ...B FOCuS 270 285 400 PR Configuration Manual ECI Telecom Ltd Proprietary 62 8 2 1 B FOCuS 270PR 8 2 2 B FOCuS 285PR Power Alarm LAN 10 LAN100 USB Network Connectivity ADSL Sync ...

Page 63: ...B FOCuS 270 285 400 PR Configuration Manual ECI Telecom Ltd Proprietary 63 8 2 3 B FOCuS 400PR ...

Page 64: ... 2684 ATM Forum UNI version 3 1 4 0 PVC Supports VC based and LLC multiplexing for 32 VCs PPP over AAL5 RFC 2364 Classical IP over ATM RFC 1577 PPP RFC 1661 PPPoE RFC 2516 IpoA RFC2225 Supports fast and interleaved mode DMT Issue 2 frequency modulation based ADSL physical layer ADSL DMT Issue 2 interface Downstream data rate up to 8 Mbps Upstream data rate up to 1 Mbps ATM cell delineation adheren...

Page 65: ...8 3 2 2 Bridging IEEE 802 1D transparent learning bridge Ethernet over ATM PVCs RFC 1483 2684 Supports filtering based on source MAC address Up to 128 MAC learning addresses VLAN transparency 8 3 2 3 Quality of Service QoS Supports multiple levels of QoS UBR CBR nrtVBR rtVBR SCR and MBS Traffic Management v 4 1 8 3 3 Management HTML browser interface for Web based management and software upgrade p...

Page 66: ...bitrary bytes in the packet header or packet Payload PAP CHAP and PPP RFC 1334 Authentication 8 3 4 3 Content Filtering Filtering based on domain names 8 3 5 Physical Interface Dimensions 175mm x 152mm x 31mm 1 RJ 11 port for ADSL connection 4 RJ 45 ports for 10100Base T Ethernet IEEE 802 3 or 100Base T Ethernet IEEE 802 3u LAN Auto sensing and half full duplexing are supported PR270 and PR285 one...

Page 67: ...PR lower or equal to 6W Auto Restart Following a power failure and restoration the router restarts automatically Spectral Mask Complies with ITU T Recommendations G992 3 Annex A Average PSD within the pass band is lower than 38 dBm Hz Pass band ripple is lower than 3 5 dB Loss of Power Indication Complies with ITU T Recommendations G992 1 8 3 8 Compliance FCC Part 15 Subpart B Part 68 UL 1950 CE E...

Reviews:

No comments