SmartRG SR516ac User Manual Download Page 66

Page: 66 / 158

Virtual Servers

Firewall can prevent unexpected traffic on the Internet from your host on the LAN. The virtual server can create a channel that

can pass through the firewall. In that case, the host on the Internet can communicate with a host on your LAN within certain port

range.

On this page, you can add or remove virtual server entries.

1. In the left navigation bar, click

Advanced Setup

NAT

Virtual Servers

. The following page appears.

Summary of Contents for SR516ac

Page 1: ... Gateway User Manual Model SR516ac Release 1 1 January 2018 501 SE Columbia Shores Boulevard Suite 500 Vancouver Washington 98661 USA 1 360 859 1780 smartrg com ...

Page 2: ...ace 22 ATM Interface 22 PTM Interface 25 ETH Interface 26 WAN Service 27 PPP over Ethernet WAN Service 28 IP over Ethernet WAN Service 37 Bridging 47 VPN 50 L2TP Client Configuration 50 PPTP Client 54 Ethernet Mode 58 LAN 59 IPv4 Autoconfig 59 IPv6 Autoconfig 62 Local VLAN Setting 64 NAT 65 Virtual Servers 66 Port Triggering 68 DMZ Host 71 ALG 71 Multi NAT 72 Security 73 IP Filtering Outgoing 73 I...

Page 3: ...114 WPA2 and Mixed WPA2 WPA Authentication 115 WPA2 PSK and Mixed WPA2 WPA PSK Authentication 117 MAC Filter 118 Wireless Bridge 119 Advanced 119 Station Info 124 Wifi Insight 124 Site Survey 127 Channel Statistics 128 Metrics 129 Diagnostics 130 Diagnostics 130 Ethernet OAM 131 Diagnostic Tools 134 Ping 134 Traceroute 135 Start Stop DSL 136 Management 137 Settings 137 Backup 137 Update 138 Restor...

Page 4: ...ts 154 FCC Interference Statement 154 FCC Radiation Exposure Statement 155 FCC PART 68 155 Ringer Equivalency Number Statement 155 IC CS 03 statement 156 Canada Statement 156 5GHz 157 Revision History 158 SMARTRG INC PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 4 ...

Page 5: ...Getting Assistance Frequently asked questions are provided at the bottom of the Subscribers page of the SmartRG Web site Subscribers If you require further help with this product please contact your service provider Service providers if you require further help with this product please open a support request Copyright and Trademarks Copyright 2017 by SmartRG Inc Published by SmartRG Inc All rights...

Page 6: ...ERNET DSL sync acquired and gateway on line Data being transferred Internet authentication connection has failed Connections The ports located on the back of the gateway and the buttons and ports located on the left side of the gateway are described below Feature Description Rear panel DSL This grey RJ11 port is used to connect your gateway to an Internet provider via a DSL service LAN 1 4 The yel...

Page 7: ...Reset button is a small hole in the back of the gateway with the actual button mounted beneath the surface This style of push button prevents the gateway from being inadvertently reset during handling Warning Do not press the Reset button unless you are sure that you want to clear the current settings To reset your gateway use a fine wire such as a paper clip to press the button for 7 10 seconds a...

Page 8: ...DSL gateway for the first time 4 Click OK The Network Status page appears 5 To view the log for this gateway click View log at the bottom of the page The log appears in a separate window 6 To log into the GUI at the bottom of the page click Manage gateway advanced The gateway interface appears show ing the Device Info summary page Device Info In this section you can view data about your gateway an...

Page 9: ... level overview of the connection between your Internet Service Provider and your gate way device The WAN interface can physically be DSL or Ethernet and supports a number of Layer 2 and later configuration options covered later in this document In the left navigation bar click Device Info WAN The following page appears ...

Page 10: ...ions are Enabled Disabled and N A Igmp Pxy The state of the IGMP proxy Options are Enabled Disabled and N A Igmp Src Enbl The state of the IGMP source Options are Enabled and Disabled MLD Pxy The state of the MLD proxy Options are Enabled Disabled and N A MLD Src Enable The state of the MLD source Options are Enabled Disabled and N A NAT The state of NAT Options are Enabled and Disabled Firewall T...

Page 11: ... click Reset Statistics near the bottom of the page The fields on this page are defined below Field Name Description Interface Available LAN interfaces Options are LAN1 LAN4 ETHWAN 5GHz Band and 2 4 GHz Band Received Transmitted columns Bytes The total number of packets in bytes Pkts The total quantity of packets Errs The total quantity of error packets Drops The total quantity of dropped packets ...

Page 12: ...r for each service Received Transmitted columns Bytes The total number of packets in bytes Pkts The total quantity of packets Errs The total quantity of error packets Drops The total quantity of dropped packets xTM On this page you can view the ATM PTM statistics for your gateway All WAN interfaces configured for your gateway are included In the left navigation bar click Device Info Statistics xTM...

Page 13: ...ells Total quantity of received OAM Cells Out OAM Cells Total quantity of transmitted OAM Cells In ASM Cells Total quantity of received ASM Cells Out ASM Cells Total quantity of transmitted ASM Cells In Packet Errors Total quantity of received packet errors In Cell Errors Total quantity of received cell errors xDSL On this page you can view the DSL statistics for your gateway All xDSL VDSL or ADSL...

Page 14: ... In the left navigation menu click Device Info Statistics xDSL The following page appears 2 To run an xDSL BER test follow the instructions in Running xDSL BER tests 3 To reset the counters click Reset Statistics near the bottom of the page The fields on this page are defined below ...

Page 15: ...unc tions are designed to support under the following conditions l Single frame bearer and single latency operation l Signal to Noise Ratio Margin SNRM to be equal or above the SNR Target Margin l BER not to exceed the highest BER configured for one or more latency paths l Latency not to exceed the highest latency configured for one or more latency paths l Accounting for all coding gains available...

Page 16: ...per ITU T G 992 1 and G 992 3 a1 byte HEC is generated for each ATM cell header Error detection is implemented as defined in ITU T I 432 1 with the exception that any HEC error shall be considered as a multiple bit error and therefore HEC Error Correction is not performed 1 2 OCD Errors Total number of Out of Cell Delineation errors ATM Cell delineation is the process which allows iden tification ...

Page 17: ...metric digital subscriber line ADSL transceivers 2 ITU T Recommendation G 992 3 2005 Asymmetric digital subscriber line transceivers 2 ADSL2 3 ITU T Recommendation G 997 1 2006 Physical layer management for digital subscriber line DSL transceivers 4 ITU T Recommendation I 432 1 1999 B ISDN user network interface Physical layer specification General characteristics Running xDSL BER tests 1 Scroll t...

Page 18: ...success dialog box appears Note If the Error Ratio reaches e 5 you cannot access the Internet Route On this page you can view the LAN and WAN route table information configured in your gateway for both IPv4 and IPv6 imple mentation In the left navigation bar click Device Info Route The following page appears ...

Page 19: ...ubnet Mask For IPv4 only Subnet Mask Next Hop For IPv6 only Identifies the next server in the IPv6 path if any Flag Status of the flags Metric Number of hops to reach the default gateway Service Service type Interface WAN LAN interface ARP On this page you can view the MAC address and IP address information for the devices connected to the gateway In the left navigation bar click Device Info ARP T...

Page 20: ... of the host Device System level interface by which the host is connected Options are br atm eth and ptm DHCP On this page you can view the host name the IP address assigned by the DHCP server the MAC address corresponding to the IP address and the DHCP lease time In the left navigation bar select Device Info DHCP The following screen appears The fields on this page are defined below Field Name De...

Page 21: ...P Address Assignment Type of IP address assignment such as DHCP Status Status of the connection Options are Active and Inactive Expires In Time until the DHCP lease expires for each LAN device CPU Memory On this page you can view the CPU and memory data for the gateway In the left navigation bar click Device Info CPU Memory The following page appears showing the current usage and history The infor...

Page 22: ...he network interfaces for your gateway ATM Interface On this page you can configure Asynchronous Transfer Mode Permanent Virtual Circuit ATM PVC settings for your gateway You can customize latency options link type encapsulation mode and more Note Devices gateways on both ends of the connection must support ATM PVC 1 In the left navigation bar click Advanced Setup Layer2 Interface ATM Interface an...

Page 23: ...lds on this page are defined below Field Name Description VPI Enter a Virtual Path Identifier A VPI is an 8 bit identifier that uniquely identifies a network path for ATM cell packets to reach its destination A unique VPI number is required for each ATM path This setting works with the VCI Each individual DSL circuit must have a unique VPI VCI combination Options are 0 255 The default is zero 0 VC...

Page 24: ...tination Commonly used with applications that can tolerate data packet loss l UBR with PCR Same as above but with a Peak Cell Rate l CBR Constant Bit Rate relies on timing synchronization to make the network traffic predictable Used commonly in Video and Audio traffic network applications l Non Realtime VBR Non Realtime Variable Bit Rate used for connections that transport traffic at a variable ra...

Page 25: ...rds to support Packet Transfer Mode PTM An alternative to ATM mode PTM transports packets IP PPP Ethernet MPLS and others over DSL links For more information refer to the IEEE802 3ah standard for Eth ernet in the First Mile EFM On this page you can configure PTM WAN interfaces 1 In the left navigation bar click Advanced Setup Layer2 Interface PTM Interface and then click Add The following page app...

Page 26: ...que allows different scheduling priorities to be assigned to statistically multiplexed data flows Since each data flow has its own queue an ill behaved flow that sent larger packets or more packets per second than the others since it became active will only affect itself and not other sessions Default Queue Weight Enter the default weight of the specified queue Options are 1 63 The default is 1 De...

Page 27: ...ears 4 Select the LAN port you want to use as a WAN port 5 Click Apply Save to commit your changes The interface is added to the ETH WAN Interface Configuration page WAN Service On this page you can add remove or edit a WAN service You must configure the related interface ATM ETH or PTM first You can configure services for PPPoE IPoE and Bridging A sample configuration scenario is provided for eac...

Page 28: ...e information in the topics listed below l PPP over Ethernet WAN Service l IP over Ethernet WAN Service l Bridging 4 To edit an interface a Click the Edit button at the far right b Modify the settings as needed and then click through to click Apply Save 5 To remove an interface click the Remove checkbox next to it and then click the Remove button PPP over Ethernet WAN Service ...

Page 29: ...u will progress through several pages to com plete the configuration Note You can configure 7 services If 7 services are configured you must remove 1 of the services before configuring a new one 1 In the left navigation bar click Advanced Setup WAN Service and then click Add The following page appears 2 Select the Layer 2 interface to use for the WAN service ...

Page 30: ...e this configuration Enter 802 1P Priority Enter the priority for this service Options are 0 7 The default is 0 For tagged service enter values in this field and the 802 1Q VLAN ID field For untagged service accept the defaults of 1 disabled in this field and the 802 1Q VLAN ID field Enter 802 1Q VLAN ID Enter the VLAN ID for this service Options are 0 4094 The default is 1 disabled For tagged ser...

Page 31: ...ied to statistically multiplexed data flows Since each data flow has its own queue an ill behaved flow which has sent larger packets or more packets per second than the others will only punish itself and not other sessions Options are IPv4 Only IPv4 IPv6 Dual Stack and IPv6 Only Note When you select IPV4 IPV6 or IPV6 the options presented on later pages change accord ingly ...

Page 32: ...SMARTRG INC PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 32 6 Click Next The following page appears where you will configure the PPP Username Password and related information ...

Page 33: ...r of times that echos should be sent before reporting echo failure The default is 5 times Enable NAT This option is enabled by default To disable NAT Network Address Translation clear the checkbox Enable Fullcone NAT Click to enable one to one NAT All requests from the same internal IP address and port are mapped to the same external IP address and port In addition any external host can send a pac...

Page 34: ...only for IPv6 environments This option is enabled by default and enables the gate way to generate the WAN IP s prefix from the server s REST by MAC address To disable this options clear the checkbox Enable PPP Debug Mode Click to have the system put more PPP connection information into the system log of the device This is for debugging errors and not for normal usage Bridge PPPoE Frames Between WA...

Page 35: ...GHTS RESERVED COPYRIGHT 2018 35 9 Click the arrows to move your selections from left to right or from right to left 10 Optional For IPv6 environments in the Selected WAN Interface field select the preferred WAN interface for the default IPv6 gateway ...

Page 36: ...ollowing to configure the DNS l Select the DNS server interface Select interface entries and click the arrows to move the entries right or left l Define a static DNS IP address Click Use the following Static DNS IP address and enter the DNS server IP addresses l Obtain IPv6 DNS info from a WAN interface In the Obtain IPv6 DNS info from a WAN interface field select a WAN interface ...

Page 37: ...oE WAN setup is complete 14 Review the summary and either click Apply Save to commit your changes or click Back to step through the pages in reverse order to make any necessary alterations IP over Ethernet WAN Service There are several parts to configuring an IP over Ethernet IPoE WAN service You will progress through several pages to com plete the configuration Before you can configure a WAN serv...

Page 38: ...SMARTRG INC PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 38 1 In the left navigation bar click Advanced Setup WAN Service and then click Add The following page appears ...

Page 39: ...field and the 802 1Q VLAN ID field For untagged service accept the defaults of 1 disabled in this field and the 802 1Q VLAN ID field Enter 802 1Q VLAN ID Options are 0 4094 The default is 1 disabled For tagged service enter values in this field and the 802 1P Priority field For untagged service accept the defaults of 1 disabled in this field and the 802 1P Priority field Network Protocol Selection...

Page 40: ...CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 40 Field Name Description IPv4 IPv6 Dual Stack and IPv6 Only The default is IPv4 Only Note When you select IPV4 IPV6 or IPV6 the options presented on later pages change accord ingly ...

Page 42: ...D Optional Enter the vendor ID to broadcast so the DHCP server can accept the device Option 61 IAID Optional Enter the Interface Association Identifier IAID This is a unique iden tifier for an IA chosen by the client Option 61 DUID Optional Enter the DHCP Unique Identifier DUID is used by the client to get an IP address from the DHCP server Option 77 User ID Optional Enter the user class ID that s...

Page 43: ...lear the checkbox Use the following Static IPv6 address Select this option to enter the v6 Static IP information provided by your ISP WAN IPv6 Address Prefix Length Available only when Static IPv6 address is selected If entering a static IP address enter the IP address prefix length If you do not specify a prefix length the default of 64 is used Prefix Delegation Prefix Length Available only when ...

Page 44: ...his page are defined below FIELD NAME DESCRIPTION Enable NAT This option is selected by default Click to disable sharing the WAN interface across multiple devices on the LAN This setting also enables the functions in the NAT sub menu and addition PPPoE NAT features to select Enable Fullcone NAT Click to enable one to one NAT All requests from the same internal IP address and port are mapped to the...

Page 45: ... Enable MLD Multicast Proxy Available only for IPv6 environments Click to enable multicast filtering Used by IPv4 hosts to report multicast group memberships to any neighboring multicast routers Enable MLD Multicast Source Available only for IPv6 environments Select to enable this service to act as a multicast source 9 Click Next The following page appears 10 Select a WAN interface to act as the s...

Page 47: ... 14 Click Next The following page appears 15 Review the IPoE settings You can modify the settings by clicking the Back button 16 Click Apply Save to save and apply the settings Bridging Before you can configure a bridge WAN service you must create the related Layer2 ATM interface ...

Page 48: ...IAL ALL RIGHTS RESERVED COPYRIGHT 2018 48 1 In the left navigation bar click Advanced Setup WAN Service and then click Add The following page appears 2 Select the interface for the WAN service and then click Next The following page appears ...

Page 49: ...s an MLD multicast source Enter Service Descrip tion Optional Enter a different name to describe this configuration Enter 802 1P Priority Options are 0 7 The default is 1 disabled For tagged service enter values in this field and the 802 1Q VLAN ID field For untagged service accept the default of 1 disabled in this field and in the 802 1Q VLAN ID field Enter 802 1Q VLAN ID Options are 0 4094 The d...

Page 50: ...and either click Apply Save to commit your changes or click Back to step through the pages in reverse order to make any necessary alterations VPN In this section you can configure tunneling protocols L2TP or PPTP clients for your network The settings are usually specific to a customer s ISP L2TP Client Configuration On this page you can configure the L2TP Layer 2 Tunneling Protocol client ...

Page 51: ...of the L2TP server L2TP Username Enter the user name for the server L2TP Password Enter the password for the server Authentication Select the authentication method Options are NOAUTH AUTO PAP CHAP MS CHAP_V1 and MS CHAP_V2 The default is AUTO Enable MPPE Optional Click to enable Microsoft Point to Point Encryption MTU Optional Enter the maximum number of transmission units allowed for this client ...

Page 52: ...IETARY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 52 3 Click Next The following page appears 4 Select the default gateway by selecting interface entries and clicking the arrows to move the entries right or left ...

Page 53: ...ing page appears 6 Do one of the following to configure the DNS server l Select the DNS server interface Select interface entries and clicking the arrows to move the entries right or left l Define a static DNS IP address Click Use the following Static DNS IP address and enter the DNS server IP addresses ...

Page 54: ... CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 54 7 Click Next The summary page appears 8 Click Apply Save to implement your settings PPTP Client On this page you can configure the PPTP Point to Point Tunneling Protocol client ...

Page 55: ...ter the IP address of the PPTP server PPTP Username If not using the default of admin enter the user name for the server PPTP Password If not using the default of admin enter the password for the server Authentication Select the authentication method Options are NOAUTH AUTO PAP CHAP MS CHAP_V1 and MS CHAP_V2 Enable MPPE Optional Select to enable Microsoft Point to Point Encryption MTU Optional Ent...

Page 56: ...IETARY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 56 3 Click Next The following page appears 4 Select the default gateway by selecting interface entries and clicking the arrows to move the entries right or left ...

Page 57: ...owing page appears 6 Do one of the following to configure the DNS server l Select the DNS server interface Select interface entries and clicking the arrows to move the entries right or left l Define a static IP address Click Use the following Static DNS IP address and enter the DNS server IP addresses ...

Page 58: ...RY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 58 7 Click Next The summary page appears 8 Click Apply Save to implement your settings Ethernet Mode On this page you can configure the Ethernet speed for your gateway ...

Page 59: ...bles the gateway to forward multicast traffic intelligently instead of flooding all ports in the VLAN With IGMP snooping the gateway listens to IGMP membership reports queries and leave messages to identify the switch ports that are members of multicast groups Multicast traffic will only be forwarded to ports identified as members of the specific multicast group or groups If you enable the DHCP se...

Page 60: ...60 2 Optional In the GroupName field select the interface group for this configuration If there are no groupings defined the only option is Default 3 Modify the other fields using the information in the following table The default configuration settings work for most scen arios ...

Page 61: ... Server This option is enabled by default You can modify the address server and leased time fields as needed To disable the DHCP server click Disable DHCP Server Then if needed enter different server information for the LAN Edit DHCP Option 60 To modify the vendor class information click Edit DHCP Option 60 modify the entries and click the appropriate action button Then click Return Edit DHCP Opti...

Page 62: ...es from the Static IP Lease List click the Remove check box next to the entry and then click Remove Entries 7 To add OUIs a Click Add OUI The DHCP OUI page appears b Enter the OUI for the DHCP and click Apply Save 8 To remove entries from the OUI list click the Remove check box next to the entry and then click Remove OUI 9 To define a second IP address and subnet mask for a LAN interface a Click C...

Page 63: ...other fields as needed using the information in the table below 4 Click Save Apply to commit your changes Field Name Description Enable ULA Prefix Advertisement Check this option to enable unique local address ULA advertisement on the LAN Options are Randomly Generate and Statically Configure The default is Randomly Generate which enables the gateway to generate a random IPv6 prefix If you select ...

Page 64: ...ID Enter the beginning IPv6 available addresses for DHCP to assign to LAN devices l End interface ID Enter the ending IPv6 available addresses for DHCP to assign to LAN devices l Leased Time hour Amount of time before a new IPv6 lease is requested by the LAN cli ent Enable RADVD This option is enabled by default It enables Router Advertisement Daemon RADVD service that sends router advertisements ...

Page 65: ...on which you want to enable VLAN mode 3 Click Enable VLAN Mode 4 To add a VLAN a Click Add A table appears where you can enter the details b Enter the VLAN ID Options are 1 4094 c In the Pbits field enter the type of bits being passed Options are 1 7 5 Click Apply Save to apply your settings 6 To remove a VLAN entry click the Remove checkbox next to it and then click the Remove button NAT In this ...

Page 66: ...m your host on the LAN The virtual server can create a channel that can pass through the firewall In that case the host on the Internet can communicate with a host on your LAN within certain port range On this page you can add or remove virtual server entries 1 In the left navigation bar click Advanced Setup NAT Virtual Servers The following page appears ...

Page 67: ... interface that you want to configure Service Name Select or enter the service for which you want to forward IP packets Options are l Select a Service Select from services defined for your network The port table at the bottom of the page is updated with the default port ID defined for the service l Custom Service Enter a new service name to establish a user service type You must enter the ports an...

Page 68: ...rvice the internal port start and end numbers display automatically Modify them if necessary 3 In the Status field select Enable to enable this server or select Disable when you want to save the settings but not enable the NAT configuration 4 Click Apply Save to save the settings The server or servers for the selected service appear on the NAT Virtual Servers Setup page 5 To disable a server click...

Page 70: ... the application that requires a port trigger Options are l Select an Application Select an available application The Port and Protocol table is populated with the related values l Custom Application Enter a unique name for the application for which you are creating a port trigger entry You must enter the ports and select a protocol in the table at the bottom of the page Trigger Port Start Trigger...

Page 71: ...he ports of a PC on your LAN to be exposed to the Internet On this page you can set the IP address of a PC to be the DMZ host so that the DMZ host will not be blocked by your firewall 1 In the left navigation bar click Advanced Setup NAT DMZ Host The following page appears 2 Enter the DMZ Host IP Address 3 Optional To enable on demand link diagnostics click Enable LAN Loopback 4 To deactivate a DM...

Page 72: ...anced Setup NAT ALG The following page appears 2 To disable SIP for your NAT clear the SIP Enabled checkbox 3 Click Save Apply to commit the new or changed address Multi NAT On this page you can define rules for managing access to your NAT You can create multiple rules and apply them to as many as eight address ranges ...

Page 73: ...t Enter the starting address for the internal server internalAddrEnd Enter the ending address for the internal server externalAddrStart Enter the starting address for the external server externalAddrEnd Enter the ending address for the external server 3 Click Apply Save to save and apply the settings The server or servers for the selected service appear on the MultiNat table page Security In this ...

Page 74: ...IPV4 and IPV6 dual protocol enabled configured Options are IPv4 and IPv6 The default is IPv4 If you select IPV6 Source IP address and Destination IP address must be specified in IPV6 format i e an IPV6 compliant hexadecimal address such as 2001 0DB8 AC10 FE01 0000 0000 0000 0001 Protocol Select the protocol profile for the filter you are defining TCP UDP is most commonly used Options are TCP UDP T...

Page 75: ...efix length decimal value preceded with the slash Destination Port port or port port Set the destination host port or range of ports for the above host or range of hosts to define the des tination port profile for which egress traffic will be blocked e g for a computer external to the local net work IP Filtering Incoming On this page you can add an incoming filter and prevent certain data being tr...

Page 76: ... this incoming filter Options are TCP UDP TCP UDP or ICMP Source IP address pre fix length Enter the source IP address for this filter For IPv6 enter the prefix as well Source Port port or port port Enter a source port number or range xxxxx yyyyy Destination IP address prefix length Enter the destination IP address for this filter For IPv6 enter the prefix as well Destination Port port or port por...

Page 77: ... The page refreshes showing that the action has changed The Change Policy button acts like a toggle switch clicking it switches the policy from BLOCKED to FORWARD and back again 3 To add a MAC filtering rule click Add and follow the instructions in Adding a MAC Filter 4 To remove a rule click the Remove checkbox next to the rule and click Remove 5 When your changes are completed click Apply Save t...

Page 78: ...Source MAC Address Enter the MAC address of the device that originates the requests intended for the device associated with the Destination MAC Address Frame Direction Select the incoming outgoing packet interface Options are LAN WAN WAN LAN and LAN WAN The default is LAN WAN both directions WAN Interfaces Select the WAN interface s for which the filter should apply Only interfaces configured for ...

Page 79: ... additional MAC address by clicking Other MAC Address and entering the address in the adjacent field 4 Select the days of the week when this rule should apply 5 Enter the starting and ending times for the periods that you want blocked Use 24 hour format 6 Click Apply Save to implement the settings You are returned to the Parental Control Access Time Restriction page Url Filter On this page you can...

Page 80: ...the list 3 To create the list of URLs click Add The following page appears 4 Enter the URL address and its corresponding port number For example enter http www google com as the URL address and 80 as the port number If you leave the Port Number field blank the default port number of 80 is used 5 Select the days of the week when this rule will apply 6 Enter the starting and ending time periods when...

Page 81: ...rvice On this page you can enable or disable QoS and set the DSCP Mark classification The maximum number of queues that can be configured vary by mode as shown below Mode Maximum of queues ATM 16 Ethernet Ethernet WAN 8 per interface PTM 8 Note Queues for wireless connections e g WMM Voice Priority are shown only when wireless is enabled If the WMM Advert ise option on the Wireless Basic Setup pag...

Page 82: ...1 4 Click Apply Save to save your settings QoS Queue On this page you can configure a queue and add it to a selected Layer2 interface You can also edit and delete queues A num ber of standard queues are already defined You may have to remove queues that you don t need in order to create the desired queues 1 In the left navigation bar click Advanced Setup Quality Of Service QoS Queue The following ...

Page 83: ...s able The default is Enable Interface Select the Layer 2 interface to be associated with the defined QoS queue e g eth0 or ptm01 Queue Precedence Appears when atm eth or ptm interfaces are selected in the Interface field Select the priority value to be associated with the defined QoS queue Options vary by interface and can include 1 SP 1 WRR WFQ 2 SP 3 WRR 4 SP WRR WFQ and so on Note The lower th...

Page 84: ...fair round robin scheme weighting that is effective for networks with fixed packet sizes e g ATM networks l Weighted Fair Queuing Applies a fair queuing weighting scheme via allowing different sessions to have different service shares for improved data packets flow in networks with variable packet size e g PTM IP networks Shaping Burst Size Enter the shaping burst size to be applied to packets in ...

Page 85: ...tion On this page you can create classifications traffic class rules for assigning ingress traffic to a priority queue 1 In the left navigation bar click Advanced Setup Quality Of Service QoS Classification and then click Add The fol lowing page appears A maximum of 32 entries can be configured ...

Page 86: ...Traffic Class Rule section Traffic Class Name Enter a descriptive name for this rule Rule Order This option is set to Last and cannot be changed Every rule is set as the very last classification rule to be processed Rule Status Select whether this rule is active or inactive Options are Enable and Disable The default is Enable Specify Classification Criteria section All fields in this section are o...

Page 87: ...Local ATM interfaces only Enter the minimum and maximum number of digits required for IP addresses Protocol Available for WAN Local and ATM interfaces only Select the protocol specified for this clas sification Options are TCP UDP ICMP and IGMP UDP TCP Source Port Appears when TCP or UDP is selected in the Protocol field Enter the source port to be used for this classification You can enter a rang...

Page 88: ... appears 2 Optional For each interface in the table enter a Shaping Rate in Kbps and a Burst Size in bytes The default settings work for most scenarios 3 Click Apply Save to commit your changes Routing In this section you can configure default gateway static routing policy routing and RIP settings Default Gateway On this page you can select the WAN interface for the default gateway ...

Page 89: ...e lists and click the arrows to move your selections from left to right or right to left 3 Optional In the Selected WAN Interface field select the appropriate interface 4 Click Apply Save to implement the settings Static Route On this page you can configure static routes for your network Static route is a form of manually configured fixed route for IP data You can enter a maximum of 32 entries ...

Page 90: ... address subnet mask for this route Interface Select the WAN Interface for this route This list is filtered by the selected IP version Gateway IP Address Enter the next hop IP address If needed include the prefix length Metric Optional Enter a number that is zero or higher Policy Routing Policy routing makes somewhat automated routing choices based on policies defined by a network administrator Fo...

Page 91: ... 8 characters Special characters are not allowed Physical LAN Port Select a physical LAN interface for the policy route Options include Ethernet LAN ports 1 4 and both wire less bands Source IP Enter the IP address for the source of the policy route Use Interface Select the WAN Interface for this policy route If you select an IPoE interface you must enter the IP address for the Default Gateway RIP...

Page 92: ... below Field Name Description Interface Displays a list of available WAN interfaces Version Select the applicable version of the Routing Interface Protocol For detailed information about versions refer to RFC 1058 and RFC 1453 Options are 1 2 and Both Operation This option is set to Passive and cannot be changed This mode listens only It does not advertise routes DNS In this section you can config...

Page 93: ...ing page appears 2 Do one of the following to configure the DNS server l Select the DNS server interface from available WAN interfaces Select interface entries in the lists and click the arrows to move the entries right or left l Define a static DNS IP address Click Use the following Static DNS IP address and enter the DNS server IP addresses ...

Page 94: ...ate occurs in real time You can configure the settings for this feature on this page 1 In the left navigation bar click Advanced Setup DNS Dynamic DNS and then click Add The following page appears 2 Modify the fields as needed using the information in the table below 3 Click Apply Save to commit your changes Field Name Description D DNS pro vider Select a dynamic Domain Name Server provider Option...

Page 95: ...s 2 To add a DNS domain click Add The following page appears 3 Enter a domain name and IP address for the domain Only letters numbers dashes and periods are allowed 4 Click Apply Save to apply your settings DSL On this page you can set the DSL settings The modem negotiates the modulation mode with the DSLAM you usually do not need to modify the factory default settings ...

Page 96: ...SMARTRG INC PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 96 1 In the left navigation menu select Advanced Setup DSL The following page appears 2 Modify the settings as needed ...

Page 97: ...ew the tone selection table click Tone Selection Changing these settings arbitrarily is not recommended Close the window to return to the DSL Advanced Settings page 6 Click Apply and then click DSL in the left menu to return to the DSL page 7 Click Apply Save to save your changes UPnP On this page you can enable or disable the UPnP function 1 In the left navigation menu click Advanced Setup UPnP T...

Page 98: ...e appears 2 To disable the DNS Proxy click the Enable DNS Proxy checkbox to clear it 3 To modify the host and domain enter the host name of the new broadband gateway and the domain name of the LAN net work 4 Click Apply Save to implement the settings Interface Grouping On this page you can configure interface groupings Interface grouping supports multiple ports to PVC and bridging groups Each grou...

Page 100: ...o add a new grouping click Add The following page appears 3 Follow the on screen instructions and then click Apply Save 4 To remove a grouping from the list click the Remove checkbox next to the group name and then click the Remove but ton You can only remove groupings that you create ...

Page 101: ...following page appears 2 Enter a Tunnel Name In the Mechanism field the only option is 6RD 3 Select the WAN and LAN interfaces associated with the tunnel you wish to establish 4 Do one of the following l To configure the LAN interface settings manually enter values in the fields located below the Manual button l IPv4 Mask Length Options are 0 32 l 6rd Prefix with Prefix Length Prefix length such a...

Page 102: ...er the remote address in the AFTR field l To configure automatically select Automatic above the AFTR field 5 Click Apply Save to commit your changes Certificate In this section you can configure certificates local and Trusted CA for the gateway For more information about certificates refer to the ITU X 509 standard Local On this page you can manage local certificates used to identify the gateway t...

Page 103: ...ded in the table below 4 Click Apply to complete the request 5 Submit your certificate request to a certificate authority for signature Field Name Description Certificate Name Enter a certificate name that describes the intended use of the certificate Common Name Enter the IP address in dotted decimal notation domain name or email address Browsers use this information to verify your certificate is...

Page 104: ...ting a local certificate and private key 1 In the left navigation bar click Advanced Setup Certificate Local Then click Import Certificate The following page appears 2 In the Certificate Name field type cpecert 3 Paste the Certificate details between the BEGIN and END markers 4 Paste the Private Key information between the BEGIN and END markers 5 Click Apply to commit this certificate Trusted CA O...

Page 105: ...e following page appears 2 To import a certificate click Import Certificate The following page appears 3 In the Certificate Name field type a descriptive name for this certificate If you are using this certificate with TR 069 the name must be acscert 4 Paste the certificate details between the BEGIN and END markers 5 Click Apply to commit this certificate ...

Page 106: ...rent certificate and replace it with a new one Power Management Note This feature is not currently supported Multicast On this page you can configure the multicast parameters 1 In the left navigation menu click Advanced Setup Multicast The following page appears 2 Fill in the fields using the information in the table below The fields provided for the IGMP and MLD configurations are largely the sam...

Page 107: ...s interpreted as an exponent and mantissa Query Response Inter val Upon receiving a query packet a host begins counting down seconds from a random number When the timer expires the host sends its report Enter the maximum number of seconds that a host can pick to count down from Robustness Interval Applies to IGMP configuration only Enter the maximum response time within which the host must respond...

Page 108: ...response received Managing group exception lists You can manage exceptions for multicast groups using the IGMP Group Exception List or MLD Group Exception List tables The first two entries are created by default you cannot change these entries To add an exception type the IP address in the Group Address field enter the mask information in the Mask Mask bits field and then click Add To remove an ex...

Page 109: ...C fil tering and wireless bridging Basic On this page you can configure basic features of the WiFi LAN interface You can enable or disable the WiFi LAN interface hide the network from active scans set the WiFi network name also known as SSID and restrict the channel set based on country requirements 1 In the left navigation bar click Wireless The following page appears showing the information for ...

Page 110: ...d by default allowing multicast traffic to be forwarded across wireless clients This option can improve the quality of video services such as IPTV To disable Wireless Multicast Forwarding WMF clear the checkbox SSID Optional Enter the WiFi SSID For security purposes this identifier should be unique for your system If your gateway is connected to an ACS it is recommended that SSID names be be 1 32 ...

Page 111: ...tup the following methods are supported l PIN entry Mandatory method of setup for all WPS certified devices Options are l Enter STA PIN You must enter the input station PIN from the client l Use AP PIN The access point AP generates the device PIN l PBC Push Button Configuration Uses a simulated push button in the software This is an optional method on wireless clients Note To use the PIN method yo...

Page 112: ...ons that explain each authentication method The fields in the WPS Setup section are described in the following table Field Name Description Enable WPS This option is enabled by default To disable WiFi Protected Setup select Disabled Add Client Available for WPA PSK WPA2 PSK and Open Network Authentication methods Select the method for generating the WPS PIN Options are l Enter STA PIN Type the inp...

Page 113: ... value is generated by the access point 3 In the Manual Setup AP section select the SSID for the device that you want to configure The default is the 5 GHz wire less band defined for your gateway 4 Select the Network Authentication method and then fill in the fields that appear The default method is Mixed WPA2 WPA PSK Detailed instructions are provided for each method in the following sections l O...

Page 114: ...hared authentication Encryption Strength Select the length of the encryption method Options are 128 bit and 64 bit 128 bit is the default and is the more robust option for security Current Network Key Select which of the four keys is presently in effect Network Key 1 4 Enter up to four encryption keys using the on screen instructions to achieve the desired security strength 802 1X Authentication T...

Page 115: ...ptions are 1 65535 RADIUS Key Optional Enter the encryption key if needed to authenticate to the specified RADIUS server WEP Encryption This option is set to Enabled and cannot be changed It enables WEP Wired Equivalent Privacy mode Encryption Strength Select the length of the encryption method Options are 128 bit and 64 bit 128 bit is the default and is the more robust option for security Current...

Page 116: ...efault is 36000 seconds 10 hours WPA Group Rekey Interval Enter the frequency at which the gateway automatically updates the group key and sends it to con nected LAN client devices Options are 0 65535 seconds The default is 0 RADIUS Server IP address Enter the IP address of the RADIUS Remote Authentication Dial In User Service server associated with your network RADIUS Port Enter the port number f...

Page 117: ...Frames Select whether management frames are protected Options are Disabled Capable and Required The default is Disabled WPA WAPI passphrase Enter the security password to be used by this security configuration When you click Click here to display the passphrase appears in a separate window WPA Group Rekey Inter val Enter the frequency at which the gateway automatically updates the group key and se...

Page 118: ...ct Mode Options are n Disabled Disable wireless MAC address filtering This is the default n Allow Allow the wireless clients in the MAC Address list to access the wireless network Note For this option to work you must add at least one MAC address to this page n Deny Reject requests from the wireless clients in the MAC Address list to access the wireless network 4 To add a MAC Address to the filter...

Page 119: ...ion Bridge Restrict Enable or disable the bridge restrict function for MAC addresses in the Remote Bridges MAC Address field Options are l Enabled Allow only those bridges selected in the Remote Bridges MAC Address table to access the wireless LAN This is the default l Enabled Scan Allow only those bridges selected in the Remote Bridges MAC Address table to access the wireless LAN but the scanning...

Page 120: ...channel on which to operate force the transmission rate to a desired speed set the fragmentation threshold the RTS threshold the wakeup interval for clients in power save mode and more Note The default settings work for most environments It is recommended that only experienced users change settings on this page 1 In the left navigation bar click Wireless Advanced The following page appears ...

Page 121: ...ion rate The rate of data transmission should be set depending on the speed of your wireless network You can select from a range of transmission speeds 0 15 select Use 54g Rate or select Auto to have the gateway automatically use the fastest possible data rate and enable the Auto Fallback feature Auto Fallback will negotiate the best possible con nection speed between the gateway and a wireless cl...

Page 122: ...Mbps and 1 2 5 5 6 11 12 24 Mbps The default is Default Fragmentation Threshold Enter the size at which packets will be fragmented into smaller units The primary consideration for this setting is the size capability of the circuit Options are 256 2346 bytes The default is 2346 bytes Note A high packet error rate is an indication that a slightly increased fragmentation threshold is needed When poss...

Page 123: ...s may result The default is Disabled meaning that an acknowledgment packet is returned for every packet received This provides a more reliable trans mission but increases traffic load which decreases performance Disabling the acknowledgment can be useful for Voice for example where speed of transmission is important and packet loss is tol erable to a certain degree Options are Enabled and Disabled...

Page 124: ...ceiving signal with other devices Options are Disable and Enable The default is Enable Station Info On this page you can view the authenticated wireless stations and their status In the left navigation menu click Wireless Station Info The following page appears To update the data click Refresh Wifi Insight On this page you can configure the WiFi Insight system ...

Page 125: ...ETARY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 125 1 In the left navigation menu click Wireless Wifi Insight The following page appears You can also reach this page by clicking Wireless Wifi Insight Configure ...

Page 127: ...a In the Database Size field enter the maximum size for the database file where the collected data will be stored The default is 2 MB b Optional Select whether to stop data collection when the maximum size is reached Options are Overwrite Older Data and Stop Datacollection The default is Overwrite Older Data 5 Optional In the Counters section clear any counter options that you do not need The defa...

Page 128: ...at you want to review 3 In the Select Channel field select the channel that you want to review 4 In the Select Bandwidth field select the bandwidth 5 Click Scan The page refreshes to show the requested information Channel Statistics On this page you can view signal strength channel capacity interference and other details for specific channels In the left navigation menu click Wireless Wifi Insight...

Page 129: ...S RESERVED COPYRIGHT 2018 129 Metrics On this page you can view glitch counter chanim associated stations and packet queue statistics for your wireless networks In the left navigation menu click Wireless Wifi Insight Metrics The following page appears ...

Page 130: ...d in the avail able tests LAN connectivity DSL connectivity and Internet connectivity tests Diagnostics On this page you can test the connection to your local network the connection to your DSL service provider and the connection to your Internet service provider 1 In the left navigation bar click Diagnostics The following page appears showing information about the connection encountered by the ga...

Page 131: ...ty 3 To test another connection click Next Connection The data refreshes and the Previous Connection button appears 4 If a test fails click the Help link located in the last column to learn more about what is being tested and what actions you can take Ethernet OAM On this page you can view diagnostics regarding your VDSL PTM or Ethernet WAN connection Fault Management is compliant with IEEE 802 1a...

Page 132: ...rnet Link OAM 802 3ah a Click the Enabled checkbox Additional fields appear b Modify the fields as needed using the information in the Ethernet Link OAM 802 3ah section of the table below 3 To enable Ethernet Service OAM 802 1ag Y 1731 a Click the Enabled checkbox Additional fields appear showing values for 802 1ag To configure Y 1731 click the Y 1731 radio button The page refreshes ...

Page 133: ...ack test enter a MAC address in the Target MAC field and click Send Loopback at the bottom of the page The results appear in the Loopback Result row of the table 6 To run a linktrace test enter a MAC address in the Target MAC field and click Send Linktrace at the bottom of the page The results appear in the Linktrace Result row of the table Field Name Description Ethernet Link OAM 802 3ah section ...

Page 134: ...Broadcom MA ID Appears for the 802 1ag option only Enter the maintenance association ID e g BRCM MEG Level Appears for the Y 1731 option only Enter the level of the maintenance entity group MEG ID Appears for the Y 1731 option only Enter the ID of the MEG Local MEP ID Enter the ID of the local maintenance entity group end point Options are 1 8191 The default is 1 Local MEP VLAN ID Enter the VLAN I...

Page 135: ... click Diagnostics Tools Ping The following page appears 2 Enter the host name or IP address 3 Click Submit The details of the ping appear on the page 4 To return to the Ping Diagnostic page click Back 5 To stop a test click Stop Traceroute On this page you can use the traceroute utility to trace a connection ...

Page 136: ...click Diagnostics Tools Traceroute The following page appears 2 Enter the host name or IP address 3 Click Submit The details of the trace appear on the page 4 To return to the Traceroute Diagnostic page click Back 5 To stop a test click Stop Start Stop DSL On this page you can start or stop your DSL connection ...

Page 137: ... is ready the DSL connection is up message appears 3 To stop your connection click Stop A message appears stating that your DSL connection is down Management In this section you can configure server and system log settings control access and configure clients Settings In this section you can back up the current settings restore saved settings or reset the gateway to default settings Backup On this...

Page 138: ... Settings The Opening file dialog box appears b Click OK The file is saved to your default download location and is named backupsettings conf 3 To back up the current default settings a Click Backup Default Settings The Opening file dialog box appears b Click OK The file is saved to your default download location and is named backupdefaultsettings conf Update On this page you can restore previousl...

Page 139: ...onf file on your local system and click Open b Click Update Settings The gateway reboots when the update has completed Restore Default On this page you can restore the gateway to the factory default settings If you think you might need to reload the current set tings create a backup on the Management Settings Backup page before proceeding 1 In the left navigation menu click Management Settings Res...

Page 140: ...r conditions and other events encountered by your gateway You can configure the system log and view the security log 1 In the left navigation bar click Management Settings System Log The following page appears 2 To view the system log details a Click View System Log The log appears in a separate window b To update the data click Refresh ...

Page 141: ...rmation that should be displayed Options are Emergency Alert Critical Error Notice Warning Informational and Debugging The options are listed in order from least detailed to most detailed The default is Error This level is recommended least verbose unless you are actively troubleshooting a situ ation with a subscriber for which increased detail is required Mode Select where log events will be sent...

Page 142: ...n a separate window l To purge the log entries and start fresh click Reset A confirming message appears Click Close l To export the log to a local drive right click the here link in the last line of the instructions on the page The log appears in the browser window You can save the page or select all of the log text paste into a text file and save the file SNMP Agent On this page you can configure...

Page 143: ...ricted Options are public and private The default is public Set Community Select whether access to the write set community is restricted Options are public and private The default is private System Name Enter the name of the system System Location Optional Enter the location of the system System Contact Optional Enter the contact for the system Trap Manager IP Optional Enter the IP address where t...

Page 144: ...al ACS products including l Calix Consumer ACS l Cisco Prime Home l ClearVision l Device Manager by SmartRG 1 In the left navigation bar click Management Management Server The following page appears 2 Complete the necessary fields per the instructions from your ACS platform vendor Field Name Description TR 069 Client This option is enabled by default To disable this feature click the Disable butto...

Page 145: ...messages on consoles The default is Disable 3 Optional To configure the modem client Connection Request mechanism used by your ACS for communication with sub scriber gateways click Connection Request Authentication Additional fields appear Note Consult with your ACS vendor for any specific connection request requirement impacted by the following settings Field Name Description Connection Request U...

Page 146: ...Internet On this page when a STUN server is present within the infrastructure of the Service Provider you can configure this gateway with the connectivity specifics for that server 1 In the left navigation bar click Management Management Server STUN Config The following page appears 2 To view the required STUN settings click STUN Server Support Additional fields appear 3 Modify the fields using th...

Page 147: ...ns are 0 Unlimited The default is 1 no maximum limit STUN Server Minimum Keep Alive Period Enter the minimum time in seconds that the keepalive function should be active Options are 0 Unlimited The default is 0 seconds This mechanism is used for refreshing NAT bindings with using Restricted Cone NAT or Port Restricted Cone NAT A device s internal address port mappings which the STUN protocol can u...

Page 148: ...e appears 2 To add a connection click Add The following page appears 3 In the XMPP Connection field select whether to use TLS and then click Enable 4 Modify the fields as needed using the information provided in the table below Field Description Username Enter the username for accessing the XMPP server Password Enter the password for accessing the XMPP server ...

Page 149: ... Time On this page you can configure the gateway to synchronize its time with the Internet time servers This feature is enabled by default 1 In the left navigation bar click Management Internet Time The following page appears 2 Select the desired time servers 3 Select the Time zone offset 4 Optional Click Enable Daylight Savings Time 5 Click Apply Save to save and apply the settings 6 To disable t...

Page 150: ...he left navigation bar click Management Access Control The following page appears 2 Enter the user name in the Username field 3 Enter the current password in the Old Password field 4 Enter the new password in the New Password and Confirm Password fields Passwords cannot contain spaces 5 Click Apply Save to implement your changes Access List On this page you can create list of IP addresses that are...

Page 151: ...ocal management services 4 To enable the listed IP addresses to access local management services in the Access Control Mode field click Enable 5 To remove a connection click the Remove checkbox to the right of the entry and then click the Remove button If you remove the only entry Access Control Mode is set to Disable 6 Click Apply Save to save and apply the settings Services Control On this page ...

Page 152: ...o change 3 Optional In the LAN Port and Port fields modify the port numbers for the services 4 Optional In the WAN Interface field select an interface The default is ALL and works best for most environments 5 Click Apply Save to save and apply the settings Logout Timer On this page you can define the maximum time that a session can remain open before the gateway logs out 1 In the left navigation b...

Page 153: ... are available for download by direct customers of SmartRG via the SmartRG Customer Portal Note Make sure that you have downloaded the correct software file as instructed by your ISP 1 In the left navigation bar click Management Update Software The following screen appears 2 Click Browse to locate and select the correct software file 3 Click Update Software Note When software update is in progress...

Page 154: ...tion is subject to the following two conditions l This device may not cause harmful interference l This device must accept any interference received including interference that may cause undesired operation This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection a...

Page 155: ...he FCC Rules Operation is subject to the following two conditions 1 this device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment FCC PART 68 Th...

Page 156: ...devices allowed to be connected to a tele phone interface The termination of an interface may consist of any combination of devices subject only to the requirement that the sum of the RENs of all the devices not exceed five L indice d équivalence de la sonnerie IES sert à indiquer le nombre maximal de terminaux qui peuvent être raccordés à une interface téléphonique La terminaison d une interface ...

Page 157: ...edance for each antenna type indicated Antenna types not included in this list having a gain greater than the maximum gain indicated for that type are strictly prohibited for use with this device Le présent émetteur radio identifier le dispositif par son numéro de certification ou son numéro de modèle s il fait partie du matériel de catégorie I a été approuvé par Industrie Canada pour fonctionner ...

Page 158: ...INC PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2018 158 Revision History Revision Date LAN ports 1 0 Sept 2017 Initial release of this user manual 1 1 Jan 2018 Improved information for Power LED ...

Search results

Summary of Contents for SR516ac

Reviews:

Related manuals for SR516ac

Brands by name

Popular brands

SmartRG SR516ac, User Manual

Search results

Summary of Contents for SR516ac

Reviews:

Related manuals for SR516ac

Brands by name

Popular brands