manualshive.com logo in svg

SmartRG SR10, User Manual, Page: 55 / 65

Share
Download
SmartRG SR10 User Manual Download Page 55

Configuring Your SmartRG™ - Common Use Cases 

S m a r t R G   ©   2 0 1 2  

C o n f i d e n t i a l  

P a g e

 | 55 

To configure IPSec in the SmartRG gateway: 

 

1.

 

Select 

Advanced Setup -> IPSec 

 

2.

 

Click 

Add New Connection 

and then click 

Show Advanced Settings 

to bring up the following 

screen: 

 

3.

 

Enter a name for the IPSec connection. 

4.

 

Select the Tunnel Mode. “Authentication Header” (AH) protects both the IP payload and the 
IP header. “Encapsulating Security Protocol” (ESP) protects the original IP payload and 

Summary of Contents for SR10

Page 1: ...SmartRG Residential Gateways November 15th 2012 Version 2 4 ...

Page 2: ...Gateway s UI 15 Navigating Your SmartRG Gateway s Web UI 16 Configuring Your SmartRG Common Use Cases 18 Use Case Creating WAN Connections for Internet Access and Remote Management 18 Configuring the Layer 2 Interface Ethernet 19 Configuring the Layer 2 Interface Ethernet with VLAN Tags 20 Configuring the Layer 2 Interface ADSL 21 Configuring the Layer 2 Interface PTM Supported on ADSL and VDSL 22...

Page 3: ...in Support of VPNs 54 Managing Your SmartRG Gateway 57 Save Restore or Default Configurations 57 Update Software 58 Configure Time Settings 59 Configure Access Controls HTTP Telnet SSH etc 60 Configure User Logins 61 Reset the Gateway 62 Hardware Reset 62 Hardware Reset to Factory Default Settings 62 Software Reset 62 Troubleshooting 63 Accessing System Logs 63 Executing Diagnostics 64 Monitoring ...

Page 4: ...and IGMP Settings 27 Figure 19 TR 069 Management Settings 28 Figure 20 LAN Settings 29 Figure 21 Adding DHCP Static IP Leases 30 Figure 22 Wireless Basic Settings 31 Figure 23 Wireless Security Settings 32 Figure 24 Wireless Distribution System 33 Figure 25 Bridged IPTV Configuration 35 Figure 26 Routed IPTV Configuration 35 Figure 27 Multi WAN Connection Bridged IPTV Configuration 36 Figure 28 Se...

Page 5: ...fier Configuration 51 Figure 44 QoS IPTV Classifier Configuration 52 Figure 45 QoS VoIP and IPTV Classifier Configurations 53 Figure 46 Time Zone and NTP Server Settings 59 Figure 47 Enabling Disabling HTTP Telnet SSH Access 60 Figure 48 Configuring the System Log for Use In Troubleshooting 63 Figure 49 Configuring Port Mirroring to Monitor WAN Interface Traffic 64 ...

Page 6: ...ionals responsible for deploying and managing broadband access networks Additional Information You may find the following documents to be helpful during your access network deployment SmartRG Data Sheets SmartRG Product Release Notes Deployment and Provisioning Presentation Contacting SmartRG Inc Contact SmartRG Inc for further assistance Hours of operation Monday Friday 5am 6pm Pacific Time UTC 8...

Page 7: ...g in to Your SmartRG Gateway and Use Case Creating WAN Connections for Internet Access and Remote Management sections Do NOT connect the WAN interface cable until after the configuration is completed Activation Automatic ACS Connection Configuration SmartRG gateways are designed to discover their service provider specific ACS management settings without the use of custom firmware SmartRG Inc maint...

Page 8: ... system integration costs improved customer support and reduced operational expenses SmartRG works closely with industry leading TR 069 automated configuration server ACS solutions providers to ensure plug n play interoperability Affinegy ACS SmartRG gateways have been tested to confirm maximum interoperability with the Affinegy ACS solution Calix Compass Consumer Connect ACS In addition to being ...

Page 9: ...i connectivity as well See the SmartRG feature details below SR10 SR100 SR350N SR350NE SR500N SR500NE SR505N Models Broadband Connection ADSL2 ADSL2 ADSL2 Ethernet Tri mode ADSL2 VDSL2 GigE Tri mode ADSL2 VDSL2 GigE ADSL2 VDSL2 10 100 Mbps LAN Ports 1 4 4 3 5 4 4 LAN Device Discovery Managed Firewall Managed WiFi 802 11n 802 11n 802 11n 802 11n 802 11n WiFi Signal Monitor IPv6 IPTV Ready Contact S...

Page 10: ...dential Gateways P a g e 10 C o n f i d e n t i a l S m a r t R G 2 0 1 2 Front Panel LEDs The SmartRG s front panel LEDs can be useful for troubleshooting and diagnostic purposes Figure 1 SmartRG Front Panel LEDs ...

Page 11: ...nk DSL ON Link established and active OFF No link Blinking Training mode Internet ON Internet connection established OFF No Internet connection Blinking Data transfer on WAN Internet connection RED PPP authentication failure LAN 1 4 ON LAN link established and active OFF No LAN link BLINKING Data transfer on LAN port WLAN ON WLAN enabled OFF WLAN disabled Blinking data transfer currently occurring...

Page 12: ...s P a g e 12 C o n f i d e n t i a l S m a r t R G 2 0 1 2 Rear Panel Connectors SR10 DSL WAN LAN Reset On Off Power Figure 2 SR10 Rear Panel Connectors SR100 DSL WAN LAN1 4 Reset Power On Off Figure 3 SR100 Rear Panel Connectors ...

Page 13: ... r t R G 2 0 1 2 C o n f i d e n t i a l P a g e 13 SR350N DSL WAN LAN1 4 Power On Off Reset on bottom Figure 4 SR350N Rear Panel Connectors SR350NE Ethernet WAN LAN1 3 Power On Off Reset on bottom Figure 5 SR350NE Rear Panel Connectors ...

Page 14: ... C o n f i d e n t i a l S m a r t R G 2 0 1 2 SR500N SR500NE DSL WAN GigE WAN LAN1 4 Reset USB On Off Power Figure 6 SR500N NE Rear Panel Connectors SR505N DSL WAN LAN1 4 WPS Reset Power On Off USB Side Figure 7 SR505N Rear Panel Connectors ...

Page 15: ...dress bar Figure 8 Login Username and Password 4 Enter the default username and password admin admin and click OK to display the Device Info page NOTE The gateway s UI can be accessed via the WAN connection by entering the WAN IP address in your browser s address bar and entering the default username and password support support WAN HTTP access MUST be enabled to access the gateway s UI via the WA...

Page 16: ...eb UI At login the Device Info page will appear In addition to the basic identification info shown the Device Info menu item can be expanded by clicking the text to reveal WAN connection information WAN and LAN statistics Routing table entries ARP table entries and LAN host DHCP lease information Figure 9 Device Info Page ...

Page 17: ...e following features and functions by expanding Advanced Setup WAN LAN interfaces routing interface groupings QoS security etc Wireless wireless access point and detailed radio settings Diagnostics execute LAN WAN interface diagnostics Management backup restore default configurations update device software TR 069 ACS management settings time zone NTP settings and device reboot ...

Page 18: ...ions Enabling secure communications IPSec Given the breadth of a SmartRG residential gateway s features and the diversity of applications only the most common use cases are detailed here Please contact SmartRG Support to inquire about additional use cases Use Case Creating WAN Connections for Internet Access and Remote Management SmartRG residential gateways are commonly deployed to provide Intern...

Page 19: ...h the configuration of a layer 2 interface Ethernet or DSL followed by the creation of a layer 3 WAN service Common WAN services include PPPoE DHCP and Static IP Configuring the Layer 2 Interface Ethernet To configure an Ethernet layer 2 interface 1 Select Advanced Setup Layer2 Interface The default Ethernet WAN interface eth0 5 LAN4 will be displayed Figure 11 Ethernet Layer 2 Interface Configura...

Page 20: ... bridged IPTV as detailed in the Bridged IPTV Configuration section To configure the layer 2 Ethernet interface to support VLAN tagged traffic 1 Select Advanced Setup Layer2 Interface The default Ethernet WAN interface eth0 5 LAN4 will be displayed 2 Check the Remove box and click Remove 3 Click Add 4 Select VLAN MUX Mode Figure 12 Ethernet Layer 2 Interface Configuration VLAN Tagged 5 Click Apply...

Page 21: ...figuration 2 Enter the PVC s identifier VPI VCI 3 Select the DSL Link Type Ethernet over ATM RFC 2684 is typical 4 Select the Encapsulation Mode LLC SNAP BRIDGING is typical 5 Select the Service Category upstream ATM shaping UBR Without PCR Unspecified Bit Rate Without Peak Cell Rate is typical 6 Select the Connection Mode Choose Default Mode for non VLAN tagged traffic Choose VLAN MUX Mode if you...

Page 22: ...ce configurations will improve channel change performance Configuring the Layer 2 Interface PTM Supported on ADSL and VDSL To configure a PTM layer 2 interface 1 Select Advanced Setup Layer2 Interface PTM Interface and click Add Figure 14 VDSL Layer 2 Interface Configuration 2 Select the DSL Latency Path0 is typical 3 Select the PTM Priority Normal Priority is typical 4 Select the Connection Mode ...

Page 23: ...values will be set at the time of WAN Service creation as detailed in Creating the WAN Service Configuring the Layer 2 Interface VDSL PTM with VLAN Tags In some applications it may be necessary to segment the PTM WAN interface into separate VLANs A common application for a VLAN segmented WAN interface is bridged IPTV as detailed in the Bridged IPTV Configuration section To configure the layer 2 PT...

Page 24: ...ernet or IP over Ethernet are appropriate choices for routed WAN services Bridged WAN services will be covered later in the Bridged IPTV Configuration section Figure 15 WAN Service Configuration With or Without VLAN Tagging Support NOTE If VLAN tagging support is desired set the 802 1p and 802 1q values appropriately 802 1P 0 is lowest priority 7 is highest priority 1 is unused 802 1Q 1 indicates ...

Page 25: ...n Use Cases S m a r t R G 2 0 1 2 C o n f i d e n t i a l P a g e 25 5 For PPP WAN services enter the PPP Username and PPP Password If desired enable the firewall NAT and IGMP Proxy Click Next Figure 16 PPP Username and Password OR ...

Page 26: ... 0 1 2 6 For IPoE WAN services select Obtain an IP address automatically DHCP or select Use the following Static IP address and enter the WAN IP Address WAN Subnet Mask and WAN gateway IP Click Next Figure 17 WAN IP Settings 7 If desired enable the firewall NAT and IGMP Multicast ...

Page 27: ... Next 9 Select Obtain DNS info from a WAN interface and select the desired WAN interface from the drop down list a single WAN interface is common unless you are creating bridged IPTV configurations or select Use the following Static DNS IP address and enter the IP addresses of your network s primary and secondary DNS servers Click Next 10 Review the WAN service summary If you are satisfied click A...

Page 28: ...management URL to point to the service provider s ACS To manually provision your SmartRG for management by a TR 069 enabled Automated Configuration Server 1 Select Management Management Server TR 069 Client Figure 19 TR 069 Management Settings 2 Enter the following parameter values Enable Informs Set the Inform Interval to 7200 seconds Set the ACS URL e g http myISP acs com Leave the ACS User Name...

Page 29: ...the GroupName as Default 3 Set the LAN interface s IP Address and Subnet Mask Default values are 192 168 1 1 255 255 255 0 4 IMPORTANT If you intend to support IPTV either bridged or routed you MUST select Enable IGMP Snooping Select Blocking Mode 5 Select Enable DHCP Server and set the DHCP address pool s start and end IP addresses 6 Set the DHCP Leased Time in hours 7 If you would like to create...

Page 30: ... P a g e 30 C o n f i d e n t i a l S m a r t R G 2 0 1 2 Figure 21 Adding DHCP Static IP Leases 8 Enter the LAN host s MAC Address and the desired IP Address 9 Click Apply Save and repeat steps 7 and 8 for all static IP LAN hosts ...

Page 31: ...eless To configure the SmartRG s Wireless interface 1 Select Wireless Basic Figure 22 Wireless Basic Settings 2 Select Enable Wireless 3 Set the wireless access point s SSID 4 Select the Country from the dropdown list 5 Click Apply Save NOTE The SmartRG provides support for 3 additional guest virtual wireless access points ...

Page 32: ...ireless Advanced and change the Channel setting The default value is Auto 7 Select Wireless Security Figure 23 Wireless Security Settings 8 Select the SSID configured in step 3 above 9 Select the Network Authentication WPA2 with a Pre Shared Key is common 10 Enter the WPA Pre Shared Key Click the link to display the private key value 11 Click Apply Save ...

Page 33: ...e larger wireless access point allowing Wi Fi clients to seamlessly roam all access points plus it provides wired access to the entire network Two or more SmartRG gateways can be configured for WDS operation The example below depicts a WDS deployment with three SmartRG gateways in a large home or office one primary gateway in the center of the building and one remote gateway at either end of the b...

Page 34: ...t included in the DHCP server pool on the primary SmartRG gateway IMPORTANT At this point your web browser session will terminate as the LAN IP address has changed from 192 168 1 1 to 192 168 1 x Reconnect your web browser to the remote SmartRG referencing the new LAN IP address To configure the WIRELESS interfaces 5 On the primary SmartRG gateway configure the WIRELESS interface following the ins...

Page 35: ...vices have been deployed using bridged architectures with public IP addresses assigned to the IPTV Set top boxes STBs connected to the gateway s LAN ports A typical bridged IPTV service configuration is shown below Figure 25 Bridged IPTV Configuration Recently service providers have begun deploying routed IPTV services with STBs being assigned private LAN IP addresses by the gateway A typical rout...

Page 36: ...igure the SmartRG gateway for your particular IPTV deployment architecture Bridged IPTV Configuration A bridged IPTV configuration is comprised of one or more WAN connections one or more LAN connections and an interface grouping structure to bind all of the connections together The more generalized bridged IPTV service configuration with multiple WAN connections is shown below Figure 27 Multi WAN ...

Page 37: ...1 Create a Layer 2 interface following the instructions detailed in a Configuring the Layer 2 Interface Ethernet b Configuring the Layer 2 Interface ADSL or c Configuring the Layer 2 Interface PTM Supported on ADSL and VDSL as appropriate for your particular SmartRG Ethernet or DSL 2 Select Advanced Setup WAN Service Figure 28 Selecting a Bridged WAN Service s Layer 2 Interface 3 Select the Layer ...

Page 38: ...guration i e single or multi WAN connection NOTE Some DSLAMs require multiple WAN connections to support IPTV services Contact your DSLAM vendor for IPTV configuration details IMPORTANT NOTE The IGMP bridged WAN connection MUST be the last bridged WAN connection created 7 Ensure IGMP Snooping has been enabled on the LAN as detailed in the Use Case Setting Up the LAN section 8 Check LAN 1 4 This se...

Page 39: ...ummary Multi WAN Bridge Group NOTE The generalized more complex IPTV bridge group is detailed here The majority of DSLAMs require only a single WAN connection to support IPTV services In that typical case The atm0 interface would provide routed WAN access for Internet services and remote management and The atm1 interface would provide bridged WAN access for all IPTV related services multi cast str...

Page 40: ... Residential Gateways P a g e 40 C o n f i d e n t i a l S m a r t R G 2 0 1 2 Your WAN Service summary Advanced Setup WAN Service will look similar to Figure 31 IPTV WAN Service Summary Multi WAN Bridge Group ...

Page 41: ...our SmartRG Common Use Cases S m a r t R G 2 0 1 2 C o n f i d e n t i a l P a g e 41 Creating Interface Bridge Groupings 10 Select Advanced Setup Interface Grouping Figure 32 Creating an IPTV Bridge Interface Group ...

Page 42: ...SmartRG Residential Gateways P a g e 42 C o n f i d e n t i a l S m a r t R G 2 0 1 2 11 Click Add Figure 33 Defining an IPTV Bridge Interface Group ...

Page 43: ...C o n f i d e n t i a l P a g e 43 12 Enter the Group Name 13 Highlight the bridged WAN Interfaces to be included in the bridge group and click 14 Highlight the LAN Interfaces to be included in the bridge group and click Figure 34 Typical IPTV Bridge Interface Group ...

Page 44: ...D Based bridge groupings Instead of adding specific LAN ports to the bridge group you can specify the Vendor ID of the set top box Any traffic received on any LAN port containing the specified Vendor ID will be bridged to the designated bridged WAN connection To configure Vendor ID based interface groupings add only the WAN interface s to the bridge group and then specify the required Vendor ID s ...

Page 45: ...n Single WAN Connection To configure the SmartRG for routed IPTV service deployments 1 Ensure IGMP Snooping has been enabled on the LAN as detailed in Use Case Setting Up the LAN 2 Create a routed WAN connection as detailed in Use Case Creating WAN Connections for Internet Access and Remote Management 3 Optional Create traffic classifiers and priority queues for the various traffic categories on y...

Page 46: ... addition of one or more bridged WAN connections to support multiple multicast IPTV streams Again QoS is suggested A typical multi WAN connection routed IPTV service configuration is shown below Figure 37 Routed IPTV Configuration Multiple WAN Connection To configure the SmartRG for multi WAN connection routed IPTV service deployments follow the single WAN connection routed IPTV configuration inst...

Page 47: ...classifiers and placed into prioritization queues Queues are emptied through the routed WAN connection based on queue priority Classifiers can identify traffic based on a number of criteria including source destination MAC address source destination IP address protocol DSCP mark etc This section describes a typical QoS configuration to prioritized upstream VoIP and IPTV traffic A typical VoIP IPTV...

Page 48: ...k box is checked as detailed in the Layer 2 Interface configuration sections 2 Select Advanced Setup Quality of Service QoS Config Figure 39 Enable SmartRG QoS Processing 3 Check Enable QoS set the Default DSCP Mark to No Change 1 and click Apply Save 4 Create the VoIP queue by selecting Advanced Setup Quality of Service QoS Queue Config and click Add Figure 40 QoS VoIP Queue Configuration ...

Page 49: ...nce indicate HIGHER priority 7 Leave the DSL Latency value set to Path0 and Click Apply Save 8 Create the IPTV queue by selecting Advanced Setup Quality of Service QoS Queue Config and click Add Figure 41 QoS IPTV Queue Configuration 9 Name enable and select the WAN interface to be fed by this queue IMPORTANT NOTE Again select the routed WAN interface created in the Creating the WAN Service sectio...

Page 50: ...ault data queue depicted in the QoS architecture diagram above does not need to be specifically created 12 Enable the newly created queues by selecting Advanced Setup Quality of Service QoS Queue Config check the Enable boxes for the new queues and click Enable The correct queue configuration for VoIP and IPTV services should look like Figure 42 QoS Queue Enable ...

Page 51: ...Service QoS Classification and click Add Figure 43 QoS VoIP Classifier Configuration 14 Set the Name Rule Order and enable the classifier rule IMPORTANT NOTE If you create the classifier rules in priority order VoIP then IPTV you may leave the Rule Order set to Last Each successive classifier rule created will become the last one checked in the traffic identification process ...

Page 52: ...e Path 18 Click Apply Save 19 Create the IPTV traffic classifier by selecting Advanced Setup Quality of Service QoS Classification and click Add Figure 44 QoS IPTV Classifier Configuration 20 Set the Name Rule Order and enable the classifier rule IMPORTANT NOTE If you create the classifier rules in priority order VoIP then IPTV you may leave the Rule Order set to Last Each successive classifier ru...

Page 53: ...iated Service Code Point DSCP Check value NOTE AF21 DSCP18 is common for Mediaroom STBs 23 Assign the Classification Queue identified by WAN interface Precedence Path 24 Click Apply Save The correct classifier configuration for VoIP and IPTV services should look like Figure 45 QoS VoIP and IPTV Classifier Configurations The QoS configuration is now complete ...

Page 54: ... is a suite of IETF standards developed to provide data integrity and privacy key management and data authentication at the IP layer Typically IPSec is deployed to create Virtual Private Networks VPNs between communicating peers NOTE When configuring an IPSec tunnel both ends of the tunnel must be configured with identical encryption and authentication methods ...

Page 55: ...ay 1 Select Advanced Setup IPSec 2 Click Add New Connection and then click Show Advanced Settings to bring up the following screen 3 Enter a name for the IPSec connection 4 Select the Tunnel Mode Authentication Header AH protects both the IP payload and the IP header Encapsulating Security Protocol ESP protects the original IP payload and ...

Page 56: ... character and hexadecimal values are acceptable e g 0x123abc456def789 or VPN tunnel_123 13 Enable Disable Perfect Forward Secrecy PFS ensures the same key will not be generated again forcing a new Diffie Hellman key exchange This prohibits hackers from snooping a present transmission to decipher a key and then use that key to observe future data transmissions 14 Set the Phase 1 Advanced IKE Setti...

Page 57: ... a previously saved gateway configuration as the gateway s running settings 1 Select Management Settings Update 2 Click the Choose File button under the Update working settings section and browse to find the saved config file on your hard drive e g mySmartRGRunningConfig conf 3 Click Update Working Settings To restore a previously saved gateway configuration as the gateway s default settings 1 Sel...

Page 58: ...y s software 1 Select Management Update Software 2 Browse to find the new gateway software on your hard drive ex CA_2 4 3 7_24282_SR500N_fs_kernel 3 Click Update Software NOTE The software update process takes approximately 2 minutes to complete Do NOT power cycle the gateway until the software update process has completed ...

Page 59: ... NTP server settings 1 Select Management Internet Time 2 Select your time zone from the drop down list 3 Optional Select the first second NTP servers from the drop down lists A custom NTP server can be configured by selecting Other from the drop down list and entering the custom URL Figure 46 Time Zone and NTP Server Settings 4 Click Apply Save ...

Page 60: ...es such as HTTP Telnet and SSH 1 Select Management Access Control Services Figure 47 Enabling Disabling HTTP Telnet SSH Access 2 Enable disable LAN and or WAN access to the various management services as desired 3 Click Save Apply NOTE For security reasons it is strongly recommended that WAN access to all services be disabled accept during deployment or when troubleshooting ...

Page 61: ...o a LAN port support unrestricted access by an ISP technician connected through the managed WAN interface To change user passwords 1 Select Management Access Control Passwords 2 Enter the username admin or support 3 Enter the old password and the new password 4 Click Apply Save NOTE Default username password values are admin admin when accessed from the LAN and support support when accessed from t...

Page 62: ... releasing the reset switch the gateway will continue booting with a factory default configuration IMPORTANT Pressing the reset switch for more than 10 seconds causes the SmartRG gateway to reset into its boot image rendering the gateway non functional This condition can be detected by the inability to access the SmartRG gateway s user interface using your web browser and the inability to properly...

Page 63: ... the System Log for Use In Troubleshooting 3 Select the Log Level from the drop down list Debugging provides the greatest level of log detail 4 Select the Display Level from the drop down list Debugging provides the greatest level of display detail 5 Click Apply Save NOTE Gateway logs can be sent to a remote server for storage To configure the remote Mode select Remote from the drop down list and ...

Page 64: ...ay is necessary to provide a monitoring point for your work station To simplify WAN traffic monitoring SmartRG gateways provide the capability of mirroring WAN traffic to any of the gateway s Ethernet LAN ports To configure the SmartRG gateway for port mirroring 1 Enter the URL for the Port Mirroring hidden page into your browser LAN IP Address admin engdebug cmd 2 Click the Enable check box 3 Sel...

Page 65: ...t R G 2 0 1 2 C o n f i d e n t i a l P a g e 65 Contacting SmartRG Technical Support For technical support contact Support Monday Friday 5am 6pm Pacific Time UTC 8 00 1 360 859 1780 1 877 486 6210 Toll free from the US Canada support smartrg com ...

Reviews:

No comments