manualshive.com logo in svg

Patton ipRocketLink 3101 Series, Getting Started Manual, Page: 86 / 119

Share
Download
Patton ipRocketLink 3101 Series Getting Started Manual Download Page 86

Certificate Setup

86

Model 3101 Series Getting Started Guide 

5 • Advanced Configuration

Import Certificate

On the 

Local Certificates 

page, click 

Import Certificate (

Figure 110

) 

to paste an existing certificate and pri-

vate key.

Figure 110. WMI: Import Local Certificate

Click 

Apply 

to add the certificate. 

Trusted CA Certificates

Click 

Certificate > Trusted CA 

to display the 

Trusted CA (Certificate Authority) Certificates 

page. CA certif-

icates are used by the 3101 to verify peers' certificates. From this page, you can import a CA certificate.

Figure 111. WMI: Trusted CA Certificates

Summary of Contents for ipRocketLink 3101 Series

Page 1: ...echnical Support 1 301 975 1007 E mail support patton com WWW www patton com Part Number 07M3101 GS Rev C Revised September 21 2011 Important This is a Class B device and is intended for use in a light industrial commercial or residential environment It is not intended for use in a heavy industrial environment ...

Page 2: ...nts to be free from defects and will at our option repair or replace the product should it fail within one year from the first date of the shipment This warranty is limited to defects in workmanship or materials and does not cover customer damage abuse or unauthorized modification If the product fails to perform as warranted your sole recourse shall be repair or replacement as described above Unde...

Page 3: ...plications Overview 23 3 Installation and Initial Configuration 25 4 Device Access and Information 31 5 Advanced Configuration 37 6 Wireless Configuration 90 7 System Management 105 8 Contacting Patton for assistance 112 A Compliance 115 B Specifications 117 ...

Page 4: ...ies Overview 18 Features 18 Models 18 Front Panel 19 LEDs 19 Rear Panel 21 Ports 22 2 Applications Overview 23 Typical applications 24 3 Installation and Initial Configuration 25 Installation Overview 26 Planning the Installation 26 Location requirements 26 Wireless operation 26 Installing the Model 3101 27 Resetting the Model 3101 28 Configuration Overview 28 Setting Up the 3101 for Configuration...

Page 5: ... ATM IPoA 52 Bridging 55 3G WAN Service Setup 56 LAN Setup 59 Configuring the private IP address for the 3101 59 Enabling IGMP Snooping 60 Enabling the LAN Side Firewall 60 Configuring the DHCP Server 60 Editing the DHCP Option 61 Editing the DHCP Option 60 61 Configuring the DHCP Static IP Lease List 61 Configuring the second IP address and subnet mask for a LAN interface 62 Setting up IPv6 LAN A...

Page 6: ...eleration Setup 80 Storage Service Setup 80 Storage Device Info 80 User Accounts 80 Interface Grouping Setup 81 IPSec Setup 83 Certificate Setup 84 Local Certificates 84 Create Certificate Request 84 Import Certificate 86 Trusted CA Certificates 86 Power Management 87 Multicast Setup 88 6 Wireless Configuration 90 Overview 91 Basic Wireless Setup 91 Wireless Security Setup 93 WPS Setup 94 Manual S...

Page 7: ...n support headquarters in the USA 113 Alternate Patton support for Europe Middle East and Africa EMEA 113 Warranty Service and Returned Merchandise Authorizations RMAs 113 Warranty coverage 113 Out of warranty service 114 Returns for credit 114 Return for credit policy 114 RMA numbers 114 Shipping instructions 114 A Compliance 115 Compliance 116 EMC 116 Low Voltage Directive Safety 116 PSTN 116 CE...

Page 8: ...8 Model 3101 Series Getting Started Guide Table of Contents Configuration and Management 119 AC Adapter 119 Environment 119 Physical Dimensions 119 USB Drivers 119 ...

Page 9: ...2 WMI Select Layer2 Interface 41 23 WMI PPPoE Connection Type 41 24 WMI PPP Information 42 25 WMI Routing Default Gateway 43 26 WMI DNS Server Configuration 44 27 WMI PPPoE Connection Summary 44 28 WMI Select Layer2 Interface 45 29 WMI IPoE Connection Type 45 30 WMI WAN IP Settings 46 31 WMI NAT Settings 46 32 WMI Routing Default Gateway 47 33 WMI DNS Server Configuration 47 34 WMI MER IPoE Connec...

Page 10: ...y 65 70 WMI NAT DMZ Host 66 71 WMI Multi Nat Setup 66 72 WMI Adding a Multi NAT Rule 66 73 WMI Outgoing IP Filtering 67 74 WMI Adding an outgoing IP filter rule 67 75 WMI Incoming IP Filtering 68 76 WMI Adding an incoming IP filter rule 68 77 Incoming IP filter application 69 78 WMI MAC Filtering 70 79 WMI MAC Filtering Global Policy 70 80 WMI Adding a MAC Filter 71 81 WMI Access Time Restriction ...

Page 11: ... 93 117 WMI WPS Configuration 94 118 WMI Manual Setup AP 94 119 WMI Wireless Security Shared Authentication Mode 95 120 WMI Wireless Security 802 1X Authentication Mode 96 121 WMI Wireless Security WPA Authentication Mode 97 122 WMI Wireless Security WPA PSK Authentication Mode 98 123 WMI Wireless Security Mixed WPA2 WPA Authentication Mode 99 124 WMI MAC Filter Configuration 100 125 WMI Wireless ...

Page 12: ...12 List of Tables 1 General conventions 16 2 LED Descriptions 19 3 Port Descriptions 22 ...

Page 13: ... set up the Model 3101 Chapter 4 on page 31 describes how to log into the unit and view device information and statistics Chapter 5 on page 37 explains how to configure advanced features for the Model 3101 Chapter 6 on page 90 explains how to configure wireless settings for the Model 3101 Chapter 7 on page 105 describes how to run diagnostic tests and manage system settings Chapter 8 on page 112 c...

Page 14: ...ORTANT heading calls attention to important information The alert symbol and CAUTION heading indicate a potential haz ard Strictly follow the instructions to avoid property damage The shock hazard symbol and CAUTION heading indicate a potential electric shock hazard Strictly follow the instructions to avoid property damage caused by electric shock The alert symbol and WARNING heading indicate a po...

Page 15: ...nnecting cables are rated for proper voltage current anticipated temperature flammability and mechanical serviceability WAN LAN PSTN ports connections may have hazardous voltages present regardless of whether the device is powered ON or OFF PSTN relates to interfaces such as telephone lines FXS FXO DSL xDSL T1 E1 ISDN Voice etc These are known as hazardous network voltages and to avoid electric sh...

Page 16: ...D Always follow ESD prevention procedures when removing and replacing cards Wear an ESD preventive wrist strap ensuring that it makes good skin con tact Connect the clip to an unpainted surface of the chassis frame to safely channel unwanted ESD voltages to ground To properly guard against ESD damage and shocks the wrist strap and cord must operate effectively If no wrist strap is available ground...

Page 17: ...17 Chapter 1 General Information Chapter contents Model 3101 Series Overview 18 Features 18 Models 18 Front Panel 19 LEDs 19 Rear Panel 21 Ports 22 ...

Page 18: ...RocketLink can be configured with static routes Bridging including Spanning Tree is supported as well as the ability to log into standard service provider networks with PPPoE using PAP CHAP authentication ipRocketLink rout ers support many advanced firewall features including ACLs and intrusion detection with blacklisting of offenders Common features such as DHCP and NAT PAT with application level...

Page 19: ...link detected Blink quickly The DSL line is training Off The device is powered off Data Green On PPP DHCP takes effect Blink slowly PPP DHCP is negotiating Blink quickly Data is being transmitted Red On The Internet authentication fails or the device is in bridge mode Ethernet 1 4 Green On The Ethernet interface is connected Blink Data is being transmitted through the ETH interface Off The Etherne...

Page 20: ...f WLAN is disabled WPS 4IWU model only Green On Connection succeeds under WiFi Protected Setup Blink Negotiation is in progress under WiFi Protected Setup Off WiFi Protected Setup is disabled USB 4IWU model only Green On A 3G or USB connection has been established Blink Data is being transmitted Off No signal is detected Table 2 LED Descriptions LED Color Status Description ...

Page 21: ...Started Guide 1 General Information Rear Panel Figure 2 Model 3101 rear panel Line Reset Eth 1 Eth 2 Eth 3 Eth 4 USB Power Model 3101 4IWU WLAN WPS Line Eth 1 Eth 2 Eth 3 Eth 4 Power Model 3101 4I Reset Line Ethernet Power Model 3101 1I Reset ...

Page 22: ...ation PBC mode If WPS is enabled press this button to start negotiation of PBC mode Ethernet 1 4 RJ 45 port for connecting the unit to an Ethernet LAN for example a PC or switch The Model 3101 has four LAN ports USB 4IWU model USB port for connecting the unit to a 3G network card or USB storage device Power Interface for connecting the power adapter Do not press the Reset button unless you want to...

Page 23: ...23 Chapter 2 Applications Overview Chapter contents Typical applications 24 ...

Page 24: ...and transfer PC file and application sharing Network and online gaming The Model 3101excels in manageability NetLinkPlug and play automatically facilitates remote unit configuration using standard ADSL CAC Ethernet USB WiFi ports facilitates local management UPnP makes unit discovery a snap With SNMP and HTTP web management the ipRocketLink can be managed from virtually any location in the world R...

Page 25: ...6 Planning the Installation 26 Location requirements 26 Wireless operation 26 Installing the Model 3101 27 Resetting the Model 3101 28 Configuration Overview 28 Setting Up the 3101 for Configuration 29 WAN and LAN Connections 29 WAN 29 LAN 29 PC Network Configuration 30 Windows XP 30 Linux 30 ...

Page 26: ...placed on a shelf or desktop Ideally you should be able to see the LED indicators on the front if you need to view them for troubleshooting Wireless operation Many environmental factors can affect the effective wireless function of the 3101 If this is your first time set ting up a wireless network device read and consider the points listed below The access point can be placed on a shelf or desktop...

Page 27: ... installation diagram for connecting the 3101 Figure 4 Model 3101 installation diagram 4IWU model shown Do not work on the system or connect or disconnect cables during periods of lightning activity Do not place any objects on top of or near the vent holes on the Model 3101 case The interconnecting cables must be acceptable for external use and must be rated for the proper application with respect...

Page 28: ...g broadband based applications and services and includes an operating system drivers and remote management capabilities The 3101delivers a set of highly integrated solutions required for the home and small of company such as IP Routing and Bridging Asynchronous Transfer Mode ATM and Digital Subscriber Line DSL support Point to Point Protocol PPP Network Port Address Translation NAT PAT Quality of ...

Page 29: ... follow the setup procedure described below to verify that all communication parame ters are valid and that the physical cable connections are correct The setup procedure consists of three consec utive configuration stages WAN and LAN Connections on page 29 PC Network Configuration on page 30 Device Access and Information on page 31 Figure 5 Typical setup diagram WAN and LAN Connections WAN To con...

Page 30: ...for all supported operating systems Figure 6 TCP IP Settings Windows XP OS Windows XP 1 From the Start menu select Control Panel Network Connections 2 Right click on the Ethernet connection icon and select Properties The Local Area Connection Properties window displays 3 Click on the General tab and select Internet Protocol TCP IP Click Properties The Internet Protocol TCP IP Properties window dis...

Page 31: ...Device Access and Information Chapter contents Overview 32 Logging In 32 Viewing Device Information 33 Summary 33 WAN Interface 33 Statistics 33 LAN 33 WAN 34 xTM 34 xDSL 35 xDSL BER Test 35 Route 36 ARP 36 DHCP 36 ...

Page 32: ...er 7 System Management on page 105 for testing the DSL line and managing system settings Chapter 6 Wireless Configuration on page 90 for configuring the wireless and USB storage features of the 4IWU version of the Model 3101 Figure 7 WMI home page Logging In To log into the 3101 s WMI for the first time 1 Launch a Web browser on your computer 2 Browse to http 192 168 1 1 the 3101 s default IP addr...

Page 33: ...our WAN connection such as the upstream rate and the LAN IPv4 address WAN Interface Click Device Info WAN Figure 8 to view the WAN interface settings such as the connection status IPv4 address and connected time Figure 8 WMI WAN Interface Info Statistics The Device Info Statistics menu provides LAN WAN ATM and ADSL information LAN In the Device Info Statistics menu click LAN Figure 9 to view the L...

Page 34: ...cs You can query information on packets recevied on the WAN interfaces Click Reset Statistics to return the values to zero Figure 10 WMI WAN Statistics xTM In the Device Info Statistics menu click xTM Figure 11 to view the ATM interface statistics You can query information on packets recevied on the xTM interfaces Click Reset Statistics to return the values to zero Figure 11 WMI ATM Statistics ...

Page 35: ...ure 12 WMI xDSL Statistics xDSL BER Test Click xDSL BER Test on the xDSL Statistics page to run a Bit Error Rate BER Test on the DSL line Select a time from the Tested Time sec drop down menu and click Start to begin the test The Tested Time choices are 1 5 10 20 60 120 180 240 300 and 360 Figure 13 WMI ADSL BER Test Note If the Error Ratio reaches up to e 5 you will not be able to access the Inte...

Page 36: ...formation Figure 14 WMI Route Info ARP Click Device Info ARP Figure 15 to view MAC and IP information of equipment attached to the 3101 Figure 15 WMI ARP Info DHCP Click Device Info DHCP Figure 15 to view the host name the IP address assigned by the DHCP server the MAC address which is corresponding to the IP address and the DHCP lease time Figure 16 WMI DHCP Info ...

Page 37: ... 60 Editing the DHCP Option 61 Editing the DHCP Option 60 61 Configuring the DHCP Static IP Lease List 61 Configuring the second IP address and subnet mask for a LAN interface 62 Setting up IPv6 LAN Auto Configuration 62 Network Address Translation NAT Setup 63 Virtual Servers 63 Port Triggering 64 DMZ Host 66 Multi NAT 66 Security Setup 67 IP Filtering 67 Outgoing 67 Incoming 68 MAC Filtering 69 ...

Page 38: ... System DNS Proxy Setup 79 Print Server Setup 79 Packet Acceleration Setup 80 Storage Service Setup 80 Storage Device Info 80 User Accounts 80 Interface Grouping Setup 81 IPSec Setup 83 Certificate Setup 84 Local Certificates 84 Create Certificate Request 84 Import Certificate 86 Trusted CA Certificates 86 Power Management 87 Multicast Setup 88 ...

Page 39: ... figure 17 for the 3101 Figure 17 Advanced Setup Menu Layer2 Interface Setup Click Advanced Setup Layer2 Interface ATM Interface Figure 21 to configure modify and remove DSL ATM interfaces Figure 18 WMI DSL ATM Interface Configuration In the main DSL ATM interface list you can click Add to configure a new ATM PVC identifier Figure 19 WMI ATM PVC Configuration ...

Page 40: ...sulation Mode You may select LLC SNAP BRIDGING or VC MUX in the drop down list Service Category You may select UBR Without PCR UBR With PCR UBR on Realtime VBR or Realtime VBR in the drop down list Select IP QoS Scheduler Algorithm You may select Strict Priority and Weighted Fair Queuing Note QoS cannot be set for CBR and Realtime VBR Click the Apply Save button to enable the new settings to take ...

Page 41: ...E To create a new PPPoE connection 1 Click Add from the main WAN service page to configure a new connection Before you can add a new PPPoE service make sure that you have created a proper ATM PVC configuration See figure 19 on page 39 The following page displays Click Next to continue Figure 22 WMI Select Layer2 Interface 2 On the Connection Type page Figure 23 select the radio button for PPP over...

Page 42: ...t to the mapped external address Dial on demand with idle timeout timer If enabled enter the Idle Timeout value in minutes If the 3101 doesn t detect the flow continuously within the allotted time the unit will automatically discon nect the PPPoE connection Once it detects the flow such as access to a webpage the 3101 will restart the PPPoE connection If disabled the 3101 will perform PPPoE dial u...

Page 43: ... this function Enable PPP Debug Mode Enable or disable this function Bridge PPPoE Frames Between WAN and Local Ports Enable or disable this function Enable IGMP Multicast Proxy Enable this function if you want PPPoE mode to support IPTV Enable MLD Multicast Proxy Enable or disable this function Click Next to continue 4 On the Routing Default Gateway page Figure 25 select a preferred WAN interface ...

Page 44: ...c DNS server addresses If only a PVC with IPoA or static MER protocol is configured you must manually enter the static DNS server addresses Click Next to continue Figure 26 WMI DNS Server Configuration 6 The final connection configuration page Figure 27 shows an summary of the PPPoE connection Click Save to keep your settings You will need to reboot the unit to activate this WAN service Figure 27 ...

Page 45: ... Interface 2 On the Connection Type page Figure 23 select the radio button for IP over Ethernet IPoE Click Next to continue Figure 29 WMI IPoE Connection Type 3 On the WAN IP Settings page Figure 30 on page 46 you may may select obtain an IP address automat ically or manually enter the IP address provided by your ISP If you enable IPv6 for this WAN service you should also enter the next hop IPV6 a...

Page 46: ...and select to enable IGMP Multicast Enable NAT Select to enable the NAT functions of the 3101 If you do not enable NAT you must add a route on the uplink equipment otherwise the access to the Internet will fail It is recommended to enable NAT Enable Firewall Enable disable IP filtering Enable IGMP Multicast Enable IGMP if you need MER mode to support IPTV Click Next to continue Figure 31 WMI NAT S...

Page 47: ...ick Next to continue Figure 32 WMI Routing Default Gateway 6 On the DNS Configuration page Figure 26 you may obtain the DNS server addresses from the selected WAN interface or manually enter the static DNS server addresses If only a PVC with IPoA or static MER protocol is configured you must manually enter the static DNS server addresses Click Next to continue Figure 33 WMI DNS Server Configuratio...

Page 48: ...To create a new PPPoA connection 1 Click Advanced Setup Layer2 Interface ATM Interface to configure modify and remove DSL ATM interfaces In the main DSL ATM interface list you can click Add to configure a new ATM PVC identi fier for PPPoA mode Figure 35 WMI ATM PVC Configuration 2 On the ATM PVC Configuration page Figure 35 select the DSL link type for PPoA and select VC MUX as the encapsulation m...

Page 49: ... page displays Click Next to continue Figure 36 WMI Select Layer2 Interface 4 On the Service Configuration page Figure 23 modify the service description Click Next to continue Figure 37 WMI PPPoA Service Description 5 On the PPP Username and Password page provide information for the PPP username password service name and authentication method Figure 38 WMI PPP Information ...

Page 50: ... within the allotted time the unit will automatically discon nect the PPPoA connection Once it detects the flow such as access to a webpage the 3101 will restart the PPPoA connection If disabled the 3101 will perform PPPoA dial up all the time Unless the 3101 is powered off and DSLAM or uplink equipment are operating abnormally the PPPoA connnection will stay up Use Static IPv4 Address If enabled ...

Page 51: ...c DNS server addresses If only a PVC with IPoA or static MER protocol is configured you must manually enter the static DNS server addresses Click Next to continue Figure 40 WMI DNS Server Configuration 8 The final connection configuration page Figure 27 shows an summary of the PPPoA connection Click Save to keep your settings You will need to reboot the unit to activate this WAN service Figure 41 ...

Page 52: ...e a new ATM PVC identi fier for PPPoA mode Figure 42 WMI ATM PVC Configuration 2 On the ATM PVC Configuration page Figure 42 select the DSL link type for IPoA and select LLC SNAP ROUTING as the encapsulation mode according to the uplink equipment Click the Apply Save button for the settings to take effect The DSL ATM Interface list displays 3 Click Add from the main WAN service page to configure a...

Page 53: ...to continue Figure 45 WMI WAN IP Settings 6 On the Network Address Translation Settings page Figure 46 you may modify NAT Settings and select to enable IGMP Multicast Enable NAT Select to enable the NAT functions of the 3101 If you do not enable NAT you must add a route on the uplink equipment otherwise the access to the Internet will fail It is recommended to enable NAT Enable Firewall Enable dis...

Page 54: ...interface as the system default gateway Click Next to continue Figure 47 WMI Routing Default Gateway 8 On the DNS Configuration page Figure 48 you should use a static DNS IP address for IPoA mode Select the proper DNS server interface and enter the primary DNS server and the secondary DNS server Click Next to continue Figure 48 WMI DNS Server Configuration ...

Page 55: ...need to reboot the unit to activate this WAN service Figure 49 WMI IPoA Connection Summary Bridging To create a new bridge connection 1 Click Add from the main WAN service page to configure a new connection Before you can add a new PPPoE service make sure that you have created a proper ATM PVC configuration See figure 19 on page 39 The following page displays Click Next to continue Figure 50 WMI S...

Page 56: ...nnection configuration page Figure 52 shows an summary of the Bridging connection Click Save to keep your settings You will need to reboot the unit to activate this WAN service Figure 52 WMI Bridging Connection Summary 3G WAN Service Setup Click Advanced Setup 3G WAN Service Figure 53 to configure a 3G connection Figure 53 WMI 3G Connection Setup If you want to access the Internet through a 3G con...

Page 57: ...igure 54 WMI 3G Pin Configuration Enable PIN protect If enabled you need to enter the PIN code when rebooting or inserting the USB Unlock with PIN code If disabled you need to enter PIN code when using 3G Unlock with PUK PIN If disabled you need to enter PUK code when failing to enter the PIN code for 3 times Change PIN code Select this radio button to modify the PIN code After proper settings cli...

Page 58: ...oes not detect the flow of the user continu ously the modem automatically stops the 3G connection Once it detects the flow like access to a webpage the modem restarts the 3G dialup Dial Delay in sec The 3G delays dial after the DSL is disconnected Default WAN Connection Select You can select DSL or 3G from the drop down list WAN back mechanism The 3G connection is backup for the DSL connection DSL...

Page 59: ...erver Figure 57 WMI LAN Interface Configuration Configuring the private IP address for the 3101 On the LAN Setup page Figure 57 you can change the device s IP address The preset IP address is 192 168 1 1 This is the private IP address of the 3101 and the address that the device can be reached on in the local network The IP address under which the 3101 can be reached from outside the LAN is assigne...

Page 60: ...e 58 on the LAN Setup page Figure 57 on page 59 Figure 58 WMI IGMP Snooping Enabling the LAN Side Firewall The firewall can prevent unexpected traffic on the Internet from your host to the LAN Select the checkbox to Enable LAN Side Firewall on the LAN Setup page Figure 57 on page 59 Configuring the DHCP Server The Model 3101 has a DHCP server for which the factory setting is active Consequently th...

Page 61: ... 60 options Figure 61 WMI DHCP Option 60 Configuring the DHCP Static IP Lease List The lease list of static IP address can reserve the static IP addresses for the hosts with the specific MAC addresses When a host whose MAC address is in the lease list of static IP address requests the DHCP server for an IP address the DHCP server assigns the reserved IP address to the host Click theAdd Entries but...

Page 62: ...e the MLD snooping function Figure 65 WMI IPv6 Auto Configuration Enable DHCPv6 Server WIDE DHCPv6 is an open source implementation of dynamic host configura tion protocol for IPv6 DHCPv6 originally developed by the KAME project The implementation mainly complies with the following standards RFC3315 RFC3319 RFC3633 RFC3646 RFC4075 RFC 4272 etc Enable RADVD The router advertisement daemon RADVD is ...

Page 63: ...ork Address Translation NAT Setup Virtual Servers The firewall can prevent unexpected traffic on the Internet from your host on the LAN The virtual server can create a channel that can pass through the firewall In that case the host on the Internet can communicate with a host on your LAN within certain port range Click Advanced Setup NAT Virtual Servers Figure 66 to add or remove a virtual server ...

Page 64: ...omatically be displayed You can modify it if necessary Protocol You may select TCP UDP TCP or UDP in the drop down list Internal Port Start When selecting a service the port number will automatically be displayed You can modify it if necessary Internal Port End When selecting a service the port number will automatically be displayed You can modify it if necessary Click Save Apply to apply the sett...

Page 65: ...umber that LAN uses to trigger the open port Trigger port End The end port number that LAN uses to trigger the open port Trigger Protocol Select the application protocol You may select TCP UDP TCP or UDP Open Port Start The start port number that is opened to WAN Open Port End The end port number that is opened to WAN Open Protocol Select the proper protocol that is opened to WAN You may select TC...

Page 66: ...s the term used to describe creating more than one public IP address for your network Multi NAT is used in the situation when your ISP provides you with a number of public IP addresses and you want to use them to provide access from Internet to multiple internal servers Multi NAT assigns one of the public IPs to the WAN interface of the router then Multi NAT is used for the other public IPs and wi...

Page 67: ...der IP Filtering in the Security menu to configure outgoing IP filtering rules By default all outgoing IP traffic from the LAN is allowed but some IP traffic can be blocked by setting up filters Click Add to create a new outgoing filter rule The Add Outgoing IP Filter page displays Figure 74 Figure 73 WMI Outgoing IP Filtering The Add Outgoing IP Filter page allows you to create a filter rule to i...

Page 68: ...it IP packet transmisstion from the Internet When incoming IP filtering rules are enabled on the 3101 you can permit remote individual PC to access various local network services Click Add to create a new incoming filter rule The Add Incoming IP Filter page displays Figure 76 Figure 75 WMI Incoming IP Filtering The Add Incoming IP Filter page allows you to create a filter rule to identify incoming...

Page 69: ...o apply the rule to one or more WAN interfaces Figure 77 shows an example of how incoming IP filtering works Figure 77 Incoming IP filter application MAC Filtering In some cases you may want to manage Layer2 MAC address to block or permit a computer within the home network When you enable MAC filtering the 3101 serves as a firewall that works on Layer 2 Click MAC Fil tering Figure 78 in the Securi...

Page 70: ... that all MAC layer frames will be blocked except for packets that match any of the specified rules in the following table Figure 78 WMI MAC Filtering To change the MAC Filtering Global Policy from FORWARDED to BLOCKED click Change Policy The MAC Filtering Global Policy page displays Figure 79 on page 70 Figure 79 WMI MAC Filtering Global Policy Select an option to confirm and you will return to t...

Page 71: ... LAN WAN both directions WAN Interface Configured in bridge mode only Select to apply the rule to one or more WAN inter faces Click Apply Save to apply the new filtering rule Parental Control Setup Time Restriction Click Advanced Setup Parental Control Time Restriction to configure access time restrictions The parental control feature allows you to configure restrictions on certain times days when...

Page 72: ... in the PC s command window Days of the Week Select the boxes of the day s you want to restrict access for the device Start and End Blocking Time Enter the time range that the device will be restricted URL Filter Click Advanced Setup Parental Control URL Filter to prevent LAN users from accessing specific websites in the WAN Figure 83 WMI URL Filter List Select the Exlude URL list type or the Incl...

Page 73: ...of Service divides this capacity between the different applications and provides under layed continuous data transfer where data packets with higher priority are given preference Refer to the following sections to enable and configure QoS Queue Management on page 73 Queue Configuration on page 74 QoS Classification on page 75 Queue Management The Queue Management Configuration page Figure 86 on pa...

Page 74: ...ide 5 Advanced Configuration Figure 86 WMI Enable QoS Queue Configuration Click Queue Config Figure 87 in the Quality of Service menu to add or remove a QoS rule The lower inte ger value for precedence indicates the higher priority Figure 87 WMI QoS Queue Configuration ...

Page 75: ...roper interface for the QoS queue Click Apply Save to save and activate the queue QoS Classification Click QoS Classification in the Quality of Service menu to configure QoS classification rules Figure 89 WMI QoS Classification Table Click Add to create a new trafflic class rule The Add Network Traffic Class Rule page displays Figure 90 on page 76 On this page enter the traffic name select the rul...

Page 76: ...igure 90 WMI Add Network Traffic Class Rule Routing Setup Click Advanced Setup Routing to manage the default gateway static route and Routing Information Proto col RIP settings Refer to the following sections Default Gateway on page 77 Static Route on page 77 Policy Routing on page 78 ...

Page 77: ...ces as the system default gateway Click Apply Save to activate any changes Figure 91 WMI Routing Default Gateway Static Route Click Routing Static Route to view current route entries Click Add to create a new static route entry The Routing Static Route Add page displays Figure 92 Figure 92 WMI Adding a Static Route On this page you can add or remove a static routing rule of IPV4 or IPv6 IP Version...

Page 78: ...ule Click the Add button to enter the policy name source IP and default gateway and select the physical LAN port and interface on the Policy Routing Setup page Figure 93 Click the Apply Save button to save the configuration Figure 93 WMI Adding a Policy Routing Rule DSL Setup Click Advanced Setup DSL to configure DSL settings The factory default settings are typically sufficient for normal DSL ope...

Page 79: ...uration Domain Name System DNS Proxy Setup Click Advanced Setup DNS Proxy to configure the DNS proxy function After enabling the DNS proxy function enter the host name of the broadband router and the domain name of the LAN network Then click Apply Save to apply the settings Figure 96 WMI DNS Proxy Configuration Print Server Setup Click Advanced Setup Printer Server Figure 97 to enable printer supp...

Page 80: ...Setup Storage Service Storage Device Info to display information about the storage device that connects to the DSL router Figure 99 WMI Storage Device Info User Accounts Click Advanced Setup Storage Service User Accounts to add delete user accounts on the storage service Figure 100 WMI Storage User Accounts Click the Add button to set up a new user account The following page displays Enter a usern...

Page 81: ...form as an inde pendent network To support this feature you must create mapping groups with the appropriate LAN and WAN interfaces using the Add button The Remove button will delete the grouping and add the ungrouped interfaces to the default group Only the default group has IP interface Click the Add button to display the Interface Grouping Configuration page Figure 103 on page 82 Follow the on s...

Page 82: ...Interface Grouping Setup 82 Model 3101 Series Getting Started Guide 5 Advanced Configuration Figure 103 WMI Interface Grouping Configuration ...

Page 83: ... Connections Click the Add button to display the IPSec Settings page Enter information for the IPSec connection name tunnel mode and remote IPSec gateway address If you need to configure the advanced settings of this IPSec tunnel connection click the Show Advanced Settings button to display more configuation options Click Apply Save to the settings Figure 105 WMI IPSec Tunnel Connections ...

Page 84: ...ertificate authority and load the signed certificate Figure 107 WMI Create Local Certificate Request Enter information for the following fields Certificate Name Enter a name for the new certificate The system will create an SSL certificate in the specified certificate repository administrator s or domain s repository by using a private key file and a cor responding certificate file Common Name Ent...

Page 85: ...ed Kingdom Click Apply to generate the certificate request Wait several seconds while the system creates the request The Certificate Signing Request page displays Figure 108 Figure 108 WMI Certificate Signing Request You need to submit the certificate request to a certificate authority that will sign the request Then load the signed certificate to the 3101 Click Load Signed Certificate to display ...

Page 86: ... existing certificate and pri vate key Figure 110 WMI Import Local Certificate Click Apply to add the certificate Trusted CA Certificates Click Certificate Trusted CA to display the Trusted CA Certificate Authority Certificates page CA certif icates are used by the 3101 to verify peers certificates From this page you can import a CA certificate Figure 111 WMI Trusted CA Certificates ...

Page 87: ...to paste an existing certificate Click Apply to add the certificate Figure 112 WMI Import CA Certificate Power Management Click Advanced Setup Power Management to control hardware modules and power consumption Figure 113 WMI Power Management Use the radio buttons to select desired options Click Apply to save the settings ...

Page 88: ...ies Getting Started Guide 5 Advanced Configuration Multicast Setup Click Advanced Setup Multicast to configure the multicast parameters of the IPv4 and IPv6 Click Apply Save to apply the settings Figure 114 WMI Multicast Configuration ...

Page 89: ...Multicast Setup 89 Model 3101 Series Getting Started Guide 5 Advanced Configuration ...

Page 90: ... Wireless Setup 91 Wireless Security Setup 93 WPS Setup 94 Manual Setup AP 94 Open or Shared 95 802 1X 96 WPA 97 WPA PSK WPA2 PSK or Mixed WPA2 WPA PSK 98 WPA2 or Mixed WPA2 WPA 99 MAC Filter Setup 100 Wireless Bridge Setup 101 Advanced Wireless Setup 102 Station Info 104 ...

Page 91: ...s Bridge Setup on page 101 Advanced Wireless Setup on page 102 Station Info on page 104 Basic Wireless Setup Click Basic in the Wireless menu to configure basic wireless features for the 3101 The Wireless Basic page displays Figure 115 From this page you can enable or disable the wireless LAN interface hide the network from active scans set the wireless network name also known as SSID and restrict...

Page 92: ... service such as IPTV SSID Enter the identification name for the wireless network The SSID is the network name shared among all points in a wireless network The SSID must be identical for all points in the wireless network It is case sensitive and must not exceed 32 characters Make sure that this setting is the same for all points in your wireless network For added security you should change the d...

Page 93: ...ures of the wireless LAN for the 3101 The Wireless Security page displays Figure 116 On this page you can configure the network security settings through the Wi Fi Protected Setup WPS method see WPS Setup on page 94 or by setting the network authentication mode see Manual Setup AP on page 94 Click Apply Save to activate any changes Figure 116 WMI Wireless Security Configuration ...

Page 94: ...Registrar access point wireless router to initiate the registra tion between a new device and an active access point wireless router The PBC method may also need a Regis trar when used in a special case where the PIN is all zeros In order to use the push button for WPS authentication you must ensure that the network card supports the function If it supports the WPS push button you do not need to c...

Page 95: ...PSK or Mixed WPA2 WPA PSK on page 98 WPA2 or Mixed WPA2 WPA on page 99 Open or Shared When you select Open or Shared as the Network Authentication mode Figure 119 provide information for the following parameters Figure 119 WMI Wireless Security Shared Authentication Mode WEP Encryption Set to Enabled Encryption Strength Select the data security level 64 bit or 128 bit Current Network Key Select th...

Page 96: ... it responds by exchanging data with the access point including security keys for subsequent encrypted sessions Figure 120 WMI Wireless Security 802 1X Authentication Mode To configure 802 1X provide information for the following parameters RADIUS Server IP Address Enter the IP Address of the authentication server RADIUS Port Enter the port number of the authentication server The default port numb...

Page 97: ...he value is set to 0 the change is done automatically between the server and the client RADIUS Server IP Address Enter the IP Address of the authentication server RADIUS Port Enter the port number of the authentication server The default port number is 1812 RADIUS Key Enter the same key as the RADIUS server WPA WAPI Encryption Select one TKIP AES or TKIP AES TKIP is the default option TKIP AES enc...

Page 98: ...de WPA WAPI passphrase Enter the password for WPA station WPA Group Rekey Interval Enter a value for the time that the WPA key must change If the value is set to 0 the change is done automatically between the server and the client WPA WAPI Encryption Select one TKIP AES or TKIP AES Default options are TKIP for WPA PSK AES for WPA2 PSK and TKIP AES for Mixed WPA2 WPA PSK TKIP AES encryption mode me...

Page 99: ...ient WPA Group Rekey Interval Enter a value for the time that the WPA key must change If the value is set to 0 the change is done automatically between the server and the client s RADIUS Server IP Address Enter the IP Address of the authentication server RADIUS Port Enter the port number of the authentication server The default port number is 1812 RADIUS Key Enter the same key as the RADIUS server...

Page 100: ...the following parameters MAC Restrict Mode The function can be turned on off Click Disabled to disable the MAC filter feature Click Allow or Deny to enable the feature You can filter wireless users according to their MAC address either by allowing or denying access Click Allow and Add to add a wireless MAC address to the filter list Enter the MAC address as XX XX XX XX XX XX and click Save Apply t...

Page 101: ...nit Access Point or Wireless Bridge You can select Wireless Bridge also known as Wireless Distribution System to disable access point functionality Selecting Access Point enables access point functionality and Wireless bridge functionality will still be available Wireless sta tions will be able to associate with the access point Bridge Restrict Select Disabled in the Bridge Restrict menu to disabl...

Page 102: ...less features for the 3101 The Wireless Advanced page displays Figure 126 Usually you do not need to change the settings on this page Click Apply Save to activate any changes Figure 126 WMI Advanced Wireless Configuration Provide information for the following parameters as needed Band Select 802 11b g using wireless frequency band range The radio frequency will remain at 2 4GHz ...

Page 103: ... associate Multicast Rate Select the multicast transmission rate for the network The rate of data transmission should be set depending on the speed of your wireless network You can select from a range of transmission speeds or you can select Auto to have the 3101 automatically use the fastest possible data rate and enable the Auto Fallback feature Auto Fallback will negotiate the best possible con...

Page 104: ...acket By default the Ack Policy for each access category is set to Disabled meaning that an acknowledgement packet is returned for every packet received This provides a more reliable transmission but increases traffic load which decreases performance Disabling the acknowledgement feature can be useful for voice applications where the trans mission speed is important and packet loss is tolerable WM...

Page 105: ...ents Overview 106 Running Diagnostic Tests 106 Managing System Settings 106 Settings 107 Backup 107 Update 107 Restore Default 107 System Log 108 TR 069 Client 109 Access Control 110 Services 110 Passwords 110 Update Software 111 Save Reboot 111 ...

Page 106: ...ists individual tests for testing the connection If a test displays a FAIL status click Rerun Diag nostic Tests at the bottom of this page to make sure the fail status is consistent If the test continues to fail click the Help link next to the test status and follow the troubleshooting procedures Click Next Connection to view test results for another configured connection Figure 128 WMI Diagnostic...

Page 107: ...backup file and click OK Figure 129 WMI Backup Settings Update Click Update under Settings in the Management menu to update 3101 setting using a saved configuration file Click Browse Figure 130 to select a saved configuration file Click Update Settings to apply the file s set tings Figure 130 WMI Update Settings Restore Default Click Restore Default under Settings in the Management menu to restore...

Page 108: ...ns The System Log Configura tion page displays Figure 134 Click the Apply Save button to apply the settings Figure 134 WMI System Log Configuration On this page you can set 3 types of system log modes including Local Remote and Both Local When selecting Local the events are recorded in the local memory Remote When selecting Remote the events are sent to the specified IP address and UDP port of the...

Page 109: ...ACS If Disabled the 3101 will not accept the commands from ACS Inform Interval Specify the number of seconds that the 3101 allows the ACS to connect ACS URL Enter the URL address for the ACS ACS User Name Enter the ACS username provided by the TR 069 Service ACS Password Enter the ACS password provided by the TR 069 Service Display SOAP messages on serial console If Enabled the SOAP Simple Object ...

Page 110: ...er Access Control in the Management menu to enable and disable LAN and WAN services Figure 137 Supported services for LAN WAN include FTP HTTP ICMP SSH TELNET and TFTP Click Apply Save to activate any changes Figure 137 WMI Access Control Services Passwords Click Passwords under Access Control in the Management menu to modify passwords for accounts Figure 138 Click Apply Save to activate any chang...

Page 111: ...re to apply the update Wait a few minutes while the 3101 reboots Note While the software update is in progress do not shut down the router After the software update completes the router automatically reboots Make sure that the new software is correct and do not use other software to update the router Figure 139 WMI Update Software Save Reboot Click Save Reboot in the Management menu to save sessio...

Page 112: ...support headquarters in the USA 113 Alternate Patton support for Europe Middle East and Africa EMEA 113 Warranty Service and Returned Merchandise Authorizations RMAs 113 Warranty coverage 113 Out of warranty service 114 Returns for credit 114 Return for credit policy 114 RMA numbers 114 Shipping instructions 114 ...

Page 113: ... Fax 1 253 663 5693 Alternate Patton support for Europe Middle East and Africa EMEA Online support available at www patton inalp com E mail support e mail sent to support patton inalp com will be answered within 1 business day Telephone support standard telephone support is available five days a week from 8 00 am to 5 00 pm CET 0900 to 1800 UTC GMT by calling 41 0 31 985 25 55 Fax 41 0 31 985 25 2...

Page 114: ...ill be issued upon receipt and inspection of the equipment 30 to 60 days We will add a 20 restocking charge crediting your account with 80 of the purchase price Over 60 days Products will be accepted for repairs only RMA numbers RMA numbers are required for all product returns You can obtain an RMA by doing one of the following Completing a request on the RMA Request page in the Support section at...

Page 115: ...115 Appendix A Compliance Chapter contents Compliance 116 EMC 116 Low Voltage Directive Safety 116 PSTN 116 CE Notice Declaration of Conformity 116 Authorized European Representative 116 ...

Page 116: ...ares that this device is in compliance with the essential requirements and other rel evant provisions of Directive 1999 5 EC The Declaration of Conformity may be obtained from Patton Elec tronics Inc at www patton com certifications The safety advice in the documentation accompanying this device shall be obeyed The conformity to the above directive is indicated by CE mark on the device Authorized ...

Page 117: ...apter contents Ethernet Interface 118 WiFi Interface 118 ADSL Interface 118 OAM 118 ATM 118 Bridging 118 Routing 118 Security 119 Configuration and Management 119 AC Adapter 119 Environment 119 Physical Dimensions 119 USB Drivers 119 ...

Page 118: ...00 Ohm line impedance with RJ 11 connector ITU T G 992 1 G 992 2 G 992 3 G 992 5 and ANSI T1 413 Issue 2 OAM Local Telnet or WWW management via Ethernet Remote Telnet or WWW management ATM ATM cells over ADSL AAL5 8 PVCs in bridge mode and 5 PVCs in router mode UBR CBR rt VBR nrt VBR and GFR traffic classes ADSL aware CAC Connection Admission Control F5 AIS RDI and loopback cells Payload encapsula...

Page 119: ...raw filter and IP layer including stateful inspection Configuration and Management SNMP v1 agent over IP ILMI VCC or HDLC EOC DHCP client server and relay for IP management Universal Plug and Play UPnP support Model 3101 4IWU Telnet with CLI command line interface or Web HTTP TR 069 or HTTP for firmware upgrade and configuration AC Adapter Input 110 220VAC 50 60Hz Output 12V 1 5A Power consumption...

Reviews:

No comments