Alcatel AST570 Скачать руководство пользователя страница 222

Страница: 222 / 300

AST570 Firewall

criteria

Interface related

criteria

IP related criteria

TCP related criteria

17 Security Services - Firewalling

222

/ 300

3EC 17766 AAAA TCZZA Ed. 04

17.4 Firewall Criteria

At every hook (PIP) a separate access list,

called

chain

, containing

an ordered list of rules will operate on each processed packet,

resulting in a specific treatment of this packet (See topic '

AST570

Firewall Actions').
A rule is able to operate on the following packet criteria:

Interface

TCP

UDP

ICMP

related.

Source interface

Source interface group

Destination interface

Destination interface group.

Source IP address

Source IP netmask

Destination IP address

Destination IP netmask

Type of service

Protocol (TCP, UDP or ICMP).

Source Port number

Source Port number range

Destination Port number

Destination Port number range

Synchronization flag

Urgent flag.

Содержание AST570

Страница 1: ...3EC 17766 AAAA TCZZA Ed 04 SPEED TOUCH 570 User s Guide...

Страница 2: ...00 Status Released Change Note BD F aa 35249 Short Title CD UG AST570 R1 0 All rights reserved Passing on and copying of this document use and communication of its contents not permitted without writt...

Страница 3: ...Single PC Ethernet Wiring 31 2 2 3 LAN Ethernet Wiring 32 3 Wiring Guide DSL and Power 33 3 1 Locating Ports 34 3 2 Connecting the DSL Port 35 3 3 Connecting the Power Adapter 36 4 WLAN Guide Wireles...

Страница 4: ...on and Use Relayed PPPoA 93 10 1 Preparatory Steps 94 10 2 Using Relayed PPPoA 95 10 2 1 Preparing the PC for PPTP Tunneling 96 10 2 2 Using PPTP towards your AST570 97 10 3 Example MS Windows 98 Dial...

Страница 5: ...he Phonebook 161 14 Networking Services IP 163 14 1 Speed Touch and IP 164 14 2 Packet Services and IP 166 14 2 1 Transparent Bridging 167 14 2 2 Relayed PPPoA 168 14 2 3 Routed Packet Services 169 14...

Страница 6: ...to Defaults 246 20 2 2 Ping to Defaults 247 20 2 3 Switch to Defaults 248 21 Maintenance Speed Touch Web Interface 249 21 1 Web Interface Preconditions 250 21 1 1 Disabling Proxy Servers 251 21 1 2 Di...

Страница 7: ...f your data MAC based filtering and encryption tools and a physical authentication mechanism secure your WLAN from unauthorized access For optimal LAN and WLAN performance the Alcatel Speed Touch 570...

Страница 8: ...ation The following trademarks are used in this document Speed Touch is a trademark of the Alcatel Company Netscape and Netscape Navigator are registered trademarks of Netscape Communications Corporat...

Страница 9: ...ctivity Therefore both will be referred to as W LAN All examples throughout this User s Guide refer to Net 10 IP addresses for local network configurations VPI 0 or VPI 8 to identify the Virtual Path...

Страница 10: ...10 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 11: ...s chapter 1 Speed Touch Quick Guide 11 300 3EC 17766 AAAA TCZZA Ed 04 1 Speed Touch Quick Guide Use this chapter to quickly connect your AST570 to the Internet Topic See Get Acquainted with your AST57...

Страница 12: ...11 RJ11 RJ14 RJ14 1 Wall mounting assembly with Velcro sticker 2 Screws and 2 wall plugs for the wall mounting assembly This User s Guide in hard copy format In the event of damaged or missing items c...

Страница 13: ...ottom The marking label for the North American market is similar to the example below Marking Label Information Do not remove the marking label from the bottom nor cover it with another label Next to...

Страница 14: ...ation Execution of the steps in this section will bring you on the Internet in no time Topic See What you Need 1 2 1 AST570 Connections 1 2 2 Check your SP s Service Offerings 1 2 3 Select an AST570 P...

Страница 15: ...decoupling ADSL and telephone signals Contact your SP for more information For WLAN connectivity The portable PCs intended to be connected via the AST570 need a WLAN networking adapter WLAN NIC Each W...

Страница 16: ...e Note In case no wired Ethernet connections have to be made you can omit this step and continue with wiring the DSL port Refer to section 2 2 for more information Use the included DSL cable to wire t...

Страница 17: ...Ethernet connection only implies in case the Ethernet port is used for connecting a PC Once all previous steps are completed turn on your AST570 The AST570 is ready for service as soon as the start up...

Страница 18: ...1 On the WLAN adapter configure the Service Set ID SSID with the AST570 default SSID printed on the marking label found on the bottom of the AST570 This default SSID exists of the word Alcatel follow...

Страница 19: ...different from the Connection Service s default encapsulation Example VPI VCI 0 35 Connection Service ETHoA RFC1483 Br Encapsulation Method ETHoA default i e LLC SNAP Your AST570 supports multiple si...

Страница 20: ...Connection Service Protocol s Packet Service ETHoA RFC1483 Bridging Transparent Bridging g g Routed Ethernet Bridged PPPoE Routed PPPoE PPPoA RFC2364 Relayed PPPoA Routed PPPoA PPP to DHCP Spoofing IP...

Страница 21: ...In exceptional cases additional or advanced configurations are desired the AST570 offers various access methods Its Web interface See chapter 21 The Command Line Interface See chapter 22 Configure the...

Страница 22: ...IP Routing no connection procedure is needed Turn on the AST570 and you are online Note Although no access procedure is needed some SPs require authentication before granting accesss to their resource...

Страница 23: ...ced features Alcatel Speed Touch Quick Guide 1 Alcatel Speed Touch Wiring Guide Wired LAN 2 DSL and Power 3 Alcatel Speed Touch WLAN Guide Wireless LAN 4 Alcatel Speed Touch Configuration and Use Pack...

Страница 24: ...word 19 Alcatel Speed Touch To Defaults 20 Alcatel Speed Touch Web Interface 21 Alcatel Speed Touch CLI 22 Alcatel Speed Touch Appendices Abbreviations Alcatel Speed Touch Troubleshooting A Alcatel Sp...

Страница 25: ...25 300 3EC 17766 AAAA TCZZA Ed 04 Alcatel Speed Touch 570 Wiring Guide...

Страница 26: ...26 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 27: ...to be used as an extension of a traditional wired networking environment it features a 10Base T MDI X Ethernet port on the back panel This chapter will guide you through the wiring of the AST570 Ethe...

Страница 28: ...er make sure that these have the correct layout See section D 6 for more information on how to identify straight through and crossover LAN cables Determine the LAN cable type from the following table...

Страница 29: ...this section 2 Wiring Guide Wired LAN 29 300 3EC 17766 AAAA TCZZA Ed 04 2 2 Connecting Ethernet Topic See The Ethernet Port on your AST570 2 2 1 Single PC Ethernet Wiring 2 2 2 LAN Ethernet Wiring 2 2...

Страница 30: ...Indicator Description Name Color State Integrity Activity Green Off No connection on the Ethernet port Activity On Ethernet link up No activity on the Ethernet port Flashing Data is flowing from to th...

Страница 31: ...7766 AAAA TCZZA Ed 04 2 2 2 Single PC Ethernet Wiring In this configuration the AST570 is connected to a single PC Your wired LAN consists of only one PC and the AST570 Proceed as indicated in the fol...

Страница 32: ...Repeating Hubs You may cascade up to four repeating hubs in your LAN limitations of Repeating Ethernet V2 0 IEEE802 3 hubs In case more hubs need to be cascaded you must use switching hubs In the abo...

Страница 33: ...In this chapter 3 Wiring Guide DSL and Power 33 300 3EC 17766 AAAA TCZZA Ed 04 3 Wiring Guide DSL and Power Topic See Locating Ports 3 1 Connecting the DSL Port 3 2 Connecting the Power Adapter 3 3...

Страница 34: ...Port description 3 Wiring Guide DSL and Power 34 300 3EC 17766 AAAA TCZZA Ed 04 3 1 Locating Ports 3 2 Following ports are used 2 DSL line port marked LINE 3 Power socket market DC...

Страница 35: ...rt A central splitter or distributed filters for decoupling DSL and POTS signals must be installed on your telephone line or telephone wall outlets In some cases crossover adapters might be required P...

Страница 36: ...he AC mains to 9VDC 1A unregulated output voltage Check if the power adapter included in the AST570 package is compatible with your local electrical power specifications See section D 5 for connector...

Страница 37: ...37 300 3EC 17766 AAAA TCZZA Ed 04 Alcatel Speed Touch 570 WLAN Guide...

Страница 38: ...38 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 39: ...n this chapter 4 WLAN Guide Wireless LAN 39 300 3EC 17766 AAAA TCZZA Ed 04 4 WLAN Guide Wireless LAN Topic See Wireless LAN Connectivity 4 1 Wireless LAN Configuration 4 2 Wired LAN vs Wireless LAN 4...

Страница 40: ...LAN Access Point behaves as a hub and allows wireless connectivity of several devices to the local W LAN and via the AST570 DSL router to the public network e g the Internet The same technology enable...

Страница 41: ...le to communicate with other clients of the W LAN including the AST570 The IEEE802 11b standard for WLANs allows for several WLAN networks using different radio channels to be co located Several chann...

Страница 42: ...address Direct Sequence Spread Spectrum DSSS channel number The channel number possible values are dependent of the regulatory domain where you purchased the AST570 FCC 1 to 11 and ETSI 1 to 13 By def...

Страница 43: ...el012345 Note In fact this step allows your WLAN to be secure without the physical authentication i e pushing the Association button while your WLAN client tries to join your WLAN no connectivity will...

Страница 44: ...WLAN client to AST570 WLAN might be different from the first time joining procedure explained in subsection 4 1 2 The following parameters could influence the way how to allow WLAN clients to join th...

Страница 45: ...Control is enabled you must press the Association button on the back panel of the AST570 or click on the Wireless page via an authenticated WLAN client or a wired Ethernet connection 5 Make sure that...

Страница 46: ...similar WLAN configuration is located nearby The Wireless page allows also to configure WEP encryption and Association Control for security and privacy of your WLAN network The AST570 Wireless Page T...

Страница 47: ...tion table 4 WLAN Guide Wireless LAN 47 300 3EC 17766 AAAA TCZZA Ed 04 Click in the left pane of the AST570 pages to pop up the Wireless page See section 21 2 for more information The following figure...

Страница 48: ...able DSSS channel number range is from 1 up to 13 restrictions apply depending on the country where the AST570 is used FCC channels 1 to 11 ETSI channels 1 to 13 WEP Encryption This checkbox allows yo...

Страница 49: ...ffect on the Wireless LAN configuration Proceed as follows 1 Browse to the Wireless page 2 The 40 bits WEP key can be Generated by the AST570 Therefor click Manually configured by yourself in the Key...

Страница 50: ...ation Control mechanism by clearing the box 4 Click In case of enabling the Association Control mechanism previous WLAN connectivity might be temporary lost 5 Verify connectivity of the WLAN clients b...

Страница 51: ...A rejected WLAN client will never be allowed to traffic the AST570 WLAN network even when is clicked or the Association button is pressed 2 Click to finish the procedure To remove a WLAN client from t...

Страница 52: ...T570 WLAN configuration click 3 The AST570 will ask to confirm the reset 4 Click if you are sure Otherwise click All WLAN parameters are reset to their factory default Therefore WLAN connectivity will...

Страница 53: ...llows local network management via An IP router See section 14 5 A DHCP server See section 14 4 A DNS server See chapter 15 NAPT abilities See chapter 16 A programmable Firewall See chapter 17 All AST...

Страница 54: ...4 WLAN Guide Wireless LAN 54 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 55: ...55 300 3EC 17766 AAAA TCZZA Ed 04 Alcatel Speed Touch 570 Configuration and Use...

Страница 56: ...56 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 57: ...ter 5 Configuration and Use Packet Services 57 300 3EC 17766 AAAA TCZZA Ed 04 5 Configuration and Use Packet Services Topic See Supported Packet Services 5 1 Packet Services at a Glance 5 2 Selection...

Страница 58: ...om the LAN side towards the DSL line and vice versa Transparent Bridging Routed Ethernet Bridged PPPoE Routed PPPoE Relayed PPPoA Routed PPPoA Classical IP IP Routing All examples in this User s Guide...

Страница 59: ...ess In this mode access must be explicitly established e g by dialing into a Remote Access Server RAS For dial in access use either of Bridged PPPoE Routed PPPoE Relayed PPPoA Routed PPPoA As their na...

Страница 60: ...ference for the remote access server between frames sourced by a bridge and those sourced by the AST570 MER entity PPPoE is one of two popular mechanisms to get in touch with the SP Bridged PPPoE By i...

Страница 61: ...ket Service User VC IP Address Protocol W LAN i f Bridging n 1 per user Multiprotocol interface s Routed Ethernet n 1 via NAPT IP Suite Bridged PPPoE n 1 per user Multiprotocol Routed PPPoE n 1 via NA...

Страница 62: ...ies of the remote end The access method an Always On connection or a connection that is established when needed i e Dial In Connectivity to a single or multiple remote networks Security features such...

Страница 63: ...arent Bridging is the packet service of your choice as it Is platform and OS independent Is true multiprotocol Has no performance limitations in the Alcatel implementation Has almost no constraints on...

Страница 64: ...both RFCs You can attach up to four connections VCs to the bridge To conserve DSL upstream bandwidth do not attach more connections than needed Bridging does not impose specific requirements to your P...

Страница 65: ...e Phonebook page 2 On the Bridge page select this phonebook entry from the Address pop down list 3 For this entry select the correct encapsulation method from the Encapsulation pop down list 4 Click S...

Страница 66: ...Ed 04 6 3 Bridging Configuration This section describes the use of the AST570 Bridge page The Bridge Page The Bridging Ports Table Bridging Ports Table Components The Aging Box Adding Entries Deleting...

Страница 67: ...of the Bridging entry Note Unless the interface is created via the CLI Bridging entries are always in state connected i e attached to a Bridge port Port Indicates the name of the Bridge port on the W...

Страница 68: ...s Proceed as follows 1 Browse to the Bridge page 2 If needed click 3 Select the phonebook entry from the Address pop down list Note In case the presented phonebook entries do not suite your desired co...

Страница 69: ...tely relies on its filtering database for its frame forwarding through the bridge This filtering database is accessible via the Bridge page and allows you to overview all current MAC entries Click on...

Страница 70: ...resident inside the bridge as stipulated in the IEEE802 1D standard The AST570 own Ethernet MAC address e g 00 80 9F 01 02 03 The Broadcast MAC address FF FF FF FF FF FF The bridge group MAC address 0...

Страница 71: ...e with an IEEE Transparent Bridge Provides Always on type of connections and is auto configurable if DHCP is enabled Allows multiple users to share a single IP address if NA P T is enabled Allows your...

Страница 72: ...on service must be supported on this VC Encapsulation method LLC SNAP Whether IP configuration is static or dynamic DHCP The AST570 can manage up to 12 Routed Ethernet connections simultaneously Note...

Страница 73: ...page select this phonebook entry from the Address pop down list 3 For this entry select the correct encapsulation method from the Encapsulation pop down list 4 DHCP is per default on If needed unchec...

Страница 74: ...TCZZA Ed 04 7 3 Routed Ethernet Configuration This section describes the use of the AST570 MER page The MER Page The MER Settings Table MER Settings Table Components Adding Entries Deleting Entries C...

Страница 75: ...is created via the CLI Routed Ethernet entries are always in state connected Encap Encapsulation Indicates the applied encapsulation method for Ethernet frames on the VC The AST570 supports both the L...

Страница 76: ...owse to the MER page 2 If needed click 3 Select the phonebook entry from the Address pop down list Note In case the presented phonebook entries do not suite your desired configuration you must firstly...

Страница 77: ...570 transparent bridge can be used in combination with a PPP over Ethernet PPPoE client installed on your PC The resulting Bridged PPPoE packet service provides similar dial in experience as found on...

Страница 78: ...thod LLC SNAP Remote access server must be a PPPoE server PPPoE client to be installed User name and password for your user account Up to four simultaneous Bridged PPPoE sessions can be active Note Pe...

Страница 79: ...reating Dial Up icons with Microsoft s Dial Up Networking application All you need is your user name and password for your account although sometimes also a Service Name and or Access Concentrator is...

Страница 80: ...y need to configure the Transparent Bridging packet service of the AST570 in order to meet the requirements of your SP regarding VC s and encapsulation There are no default Bridging entries Therefore...

Страница 81: ...a virtual Ethernet segment Requires no PPPoE client on the PC s avoiding special installation procedures Allows multiple users to share a single IP address if NA P T is enabled Allows your local netwo...

Страница 82: ...e supported on this VC Encapsulation method LLC SNAP Remote access server must be a PPPoE server User name and password for your user account The AST570 can manage up to 12 Routed PPPoE connections si...

Страница 83: ...ook entry from the Address pop down list 3 For this entry select PPPoE in the Protocol field 4 Select the correct encapsulation method from the Encapsulation pop down list 5 Optionally enter user name...

Страница 84: ...ing will appear in the State field Once the session is active the field displays up From then you are online and you can start your application or browse the Internet During the time the session is up...

Страница 85: ...ations for Routed PPPoE connections are identical to the configuration of Routed PPPoA connections Therefore most configurational aspects in this section will be referred to the configuration sections...

Страница 86: ...ee section 13 2 for more information 5 Select the encapsulation method for the Routed PPPoE entry from the Encapsulation pop down list 6 Optionally enter user name and password for the Routed PPPoE en...

Страница 87: ...to the highlighted entry in the PPP Configuration table The Detailed Configuration table contains three or four tabs Three tabs PPPoE Routing and Other allow you to overview or configure connection r...

Страница 88: ...TCZZA Ed 04 9 4 1 PPPoE Configurations The AST570 Routed PPPoE embedded session client allows to configure your PPPoE session for connecting for a dedicated Service via an Access Concentrator If appli...

Страница 89: ...g This field allows you to configure which W LAN members besides the PC that opened the Routed PPPoE session can use the connection Destination networks Specific network These fields allow you to conf...

Страница 90: ...after which a running but unused PPPoE session is closed Local IP Remote IP IP addresses are negotiated between the two PPP peers of the Routed PPPoE session The Local IP and Remote IP fields influenc...

Страница 91: ...sion is running on the selected Routed PPPoE entry Following session statistics are available IP Address The IP address at the local peer of the current PPP link This address can be dynamically assign...

Страница 92: ...9 Configuration and Use Routed PPPoE 92 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 93: ...n Has multiprotocol support depending on the PPTP implementation e g for MS Windows TCP IP IPX SPX and NETBEUI Offers complete TCP IP protocol transparency no NA P T is required Supports concurrent ac...

Страница 94: ...ns simultaneously Note Check with your SP or corporate whether multiple end to end connectivity is enabled Your PC must support Point to Point Protocol PPP and Point to Point Tunnelling Protocol PPTP...

Страница 95: ...PPTP dial up connection is configured you can use it to open a Relayed PPPoA connection to the remote side of the DSL line Because the configuration and use of such a connection follows similar patte...

Страница 96: ...or the PPTP connection icon The VPN server s IP address or DNS hostname i e the AST570 IP address or DNS hostname Optionally you can complete this entry with the following string information The VC s...

Страница 97: ...on 8 51 DIALUP_PPP3 PPPoA on 8 66 In case these PPPoA phonebook entries do not meet your requirements you can configure a new one See section 13 2 for more information Depending on your OS you can ope...

Страница 98: ...etworking The following overview summarizes the necessary steps to setup a Microsoft Windows 98 PC for the use of Relayed PPPoA Step Action See 1 Configure a Private IP address on your PC 2 Create a n...

Страница 99: ...cription 1 Double click the My Computer icon on your desktop 2 Double click the Dial Up Networking icon 3 Double click the Make New Connection icon to activate the Make New Connection wizard 4 If you...

Страница 100: ...soft VPN Adapter for PPTP tunneling 7 Click to pop up the VPN server window 8 Enter the DNS hostname or IP address of the Virtual Private Network VPN server Note VPN server is another word for PPTP se...

Страница 101: ...Use Relayed PPPoA 101 300 3EC 17766 AAAA TCZZA Ed 04 A new icon with the name of the connection you have just created will be added to your Dial Up Networking folder Per destination you can create a...

Страница 102: ...on your desktop The Connect To window pops up 2 Fill in your user name and password according your user account at the SP or Corporate Note If you want the current Dial Up connection to remember your...

Страница 103: ...m tray The MSDUN icon symbolizes activity on the Relayed PPPoA connection by flashing PC s A flashing Front PC symbolizes upstream TX link activity from your local PC towards the AST570 A flashing Beh...

Страница 104: ...n Use Proceed as follows Step Action and Description 1 If the Dial Up connection is minimized click the MSDUN icon in the system tray The Connected To window pops up 2 Click to close the session The P...

Страница 105: ...d PPPoA Configuration This section describes the use of the AST570 PPTP page The PPTP Page The Active PPTP Connections Table Active PPTP Connections Table Components Advanced Configuration Tunneling f...

Страница 106: ...the Qos column will indicate default Via the CLI you can configure a specific QoS profile Encap Indicates the applied encapsulation method for PPP frames in the VC The AST570 supports both the VC MUX...

Страница 107: ...ection the AST570 will always make sure that FF 03 is in front of the frame prior to put it in a PPTP tunnel In order to cope with these PPP frame differences the AST570 adapts to the different format...

Страница 108: ...t add a default route for the AST570 via the Routing page See section 14 5 for more information In the example of the figure above the route to be added has the following parameters Destination 0 0 0...

Страница 109: ...tion authentication and auto configuration Requires no session client on the PC s avoiding special installation procedures Allows multiple users to share a single IP address if NA P T is enabled Allow...

Страница 110: ...supported on this VC Encapsulation method VC MUX Remote access server must be a PPP oA server User name and password for your user account The AST570 can manage up to 12 Routed PPPoA connections simul...

Страница 111: ...oA connection Per default following Routed PPPoA connections are preconfigured DIALUP_PPP1 dial in connection DIALUP_PPP2 always on connection DHCP_SPOOF spoofing connection In case these entries do n...

Страница 112: ...ur selection is highlighted 4 Click 5 If applicable an Authentication table pops up Enter your user name and password in the appropriate fields If you want the AST570 to remember your credentials chec...

Страница 113: ...nnection statistics on the PPP page See section 11 4 3 for more information Proceed as follows 1 Browse to the Dial in page 2 Active PPPoA sessions are indicated via up in the State field Click next t...

Страница 114: ...tivity Prior to be able to use a Routed PPPoA or Routed PPPoE entry you may need to configure it This is described in section 11 4 For more information on the use of the Routed PPPoE packet service of...

Страница 115: ...the interface name will be the same as the phonebook entry name Destination Indicates available phonebook entries for Routed PPPoA and Routed PPPoE Following phonebook entries are shown Free PPPoA ph...

Страница 116: ...P session is opened and active Protocol Indicates the packet service type for the PPP connection It can take following values Protocol Description PPPoA PPPoE The PPP connection is a Routed PPPoE conn...

Страница 117: ...te a correct phonebook entry See section 13 2 for more information 5 Select the encapsulation method for the Routed PPPoA entry from the Encapsulation pop down list per default set to VC MUX 6 Optiona...

Страница 118: ...nection in the PPP Configuration table The Detailed Configuration table contains three or four tabs The first tab PPPoE is not of importance for Routed PPPoA The second and third tab Routing and Other...

Страница 119: ...r advanced users the AST570 allows manual configuration of permanent routes to dedicated destinations See section 14 5 for more information on the AST570 IP router Moreover routes can be configured vi...

Страница 120: ...your corporate as their gateway to the Internet Everybody All PC s on the local W LAN can forward frames over this PPP entry This option is the exact opposite to Only me If you open a PPP session to...

Страница 121: ...configure which destination can be reached over the particular PPP entry Four options are available All networks The AST570 can potentially route frames to all destinations over this PPP entry The PPP...

Страница 122: ...ed Source Subnet Mask Notation All networks 0 0 0 0 0 Remote net only 255 255 255 0 0 Remote host only 255 255 255 255 32 Specific network defined below 255 255 255 0 0 default This value is depending...

Страница 123: ...ns The following paragraphs explain which options that are used by a PPP entry when it opens a PPP session Other Tab Mode Triggering of a PPP Session Idle Time Limit Local and or Remote IP AST570 PPP...

Страница 124: ...tomatically tries to open a PPP session for the PPP entry Dial on demand The PPP session is opened automatically for a limited period of time The opening of the session is triggered by the arrival of...

Страница 125: ...on IP address Setting a remote IP address Forces the remote client if it allows to to accept this IP address as its PPP session IP address These fields allow optionally to enter the IP address es of t...

Страница 126: ...n protocols to be used Challenge Handshake Authentication Protocol CHAP Password Authentication Protocol PAP Per default the AST570 will negotiate CHAP with the BroadBand RAS BBRAS as it is the safest...

Страница 127: ...ession is running on the selected Routed PPPoA entry Following session statistics are available IP Address The IP address at the local peer of the current PPP link This address can be dynamically assi...

Страница 128: ...11 Configuration and Use Routed PPPoA 128 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 129: ...ed method next to PPPoA and PPPoE for creating IP networks on top of ATM technology Is traditionally well supported by ATM access routers at the remote end of the connection Similar to Bridging provid...

Страница 130: ...For full compliancy to RFC1577 the remote access device must issue and respond to InATMARP messages Note The RFC1577 on which Classical IP over ATM relies is updated by RFC2225 The AST570 fully compli...

Страница 131: ...dures to enable connectivity in a Logical IP Subnet LIS via the ATM core network Topic See General CIP Configuration Procedure 12 2 1 Retrieving LIS Parameters 12 2 2 Implicit Assignment Mechanism 12...

Страница 132: ...an Existing LIS of subsection 12 2 2 Are you configuring the AST570 for an existing LIS 12 2 2 2 Retrieve the appropriate LIS parameters and check on which VCs identifiable by their VPI VCI values you...

Страница 133: ...577 RFC2225 compliancy state The remote access router IP address in the case it is not RFC1577 RFC2225 compliant Of course in case you know the IP address of one member of the LIS and the associated n...

Страница 134: ...Description 1 Suppose you added a CIPPVC without supplying an IP address e g CIPPVC2 2 The AST570 will automatically issue an InATMARP request on this PVC 3 Is the remote side is RFC1577 RFC2225 compl...

Страница 135: ...address to assign the CIP PVC to the CIP member Therefore you must explicit assign a remote IP address to the CIP PVC The default configuration of the AST570 is an example of the explicit assignment o...

Страница 136: ...onebook If this VC does not match the requirements three other CIP phonebook entries are available to add However in the case none of the entries match you must add a CIP phonebook entry yourself Addi...

Страница 137: ...xist in your AST570 IP routing table If the remote access router is RFC1577 RFC2225 compliant no routes for LIS connectivity need to be configured by yourself for the AST570 IP router This because it...

Страница 138: ...bnet by adding a route pointing to the remote access router implicit or explicit but with now source IP address pool 10 0 1 0 24 Of course then the default IP routes configured by default must be dele...

Страница 139: ...0 192 168 0 1 8 80 8 80 172 16 1 2 0 0 0 0 172 16 1 1 255 255 255 0 10 0 0 0 172 16 1 1 LIS 172 16 1 x Subnet 10 1 Local Servers 1 2 In the drawing above a LIS 172 16 1 x represented by the ellipse r...

Страница 140: ...because AST570 1 is RFC1577 RFC2225 compliant The routing engine must be configured with routes to the final destinations For the given example the configuration is as follows AST570 1 has its defaul...

Страница 141: ...e packet You can check IP connectivity from any PC on the local Ethernet segment Therefor ping the IP address at the far end of the virtual connection e g for the example of subsection 12 2 7 this wou...

Страница 142: ...on describes the use of the AST570 CIP page The CIP Page The CIP Interfaces Table CIP Interfaces Table Components The CIP connections Table CIP Connections Table Components Adding CIP members Assignin...

Страница 143: ...hows the CIP Interfaces table Field Description Intf Indicates the CIP member name All CIP members are named cipX where X is a number Local Address Indicates the IP address of the local DSL side of th...

Страница 144: ...wing figure shows the CIP Connections table Field Description Dest Indicates the CIP VC phonebook name Remote Address Indicates the remote IP address of the remote DSL side of the LIS i e the IP addre...

Страница 145: ...P address of the CIP member at your local side of the LIS Mask The associated classful or classless netmask subnetmask for this local IP address 4 Click and to finish the procedure A CIP member of the...

Страница 146: ...te your desired configuration you must firstly create a correct phonebook entry See section 13 2 for more information 4 Depending the RFC1577 RFC2225 compliancy of the remote access router the followi...

Страница 147: ...147 300 3EC 17766 AAAA TCZZA Ed 04 Alcatel Speed Touch 570 Networking...

Страница 148: ...148 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 149: ...M All data arriving at and departing from your AST570 via the DSL line is carried in Asynchronous Transfer Mode ATM cells In this way ATM is the fundamental communication language for the AST570 towar...

Страница 150: ...technology using fixed size packets called cells These cells consist of a header and a payload and are switched through a public or private ATM network depending on the contents of the header End to e...

Страница 151: ...line Switched Virtual Channels SVCs are similar to voice telephone network connections These are temporary connections between any two end points on the network and are configured via signaling A Swit...

Страница 152: ...annels Wireless Ethernet This channel is not cross connected Symbolizes a cross connection Hence no end to end connectivity Remote LAN Practically speaking a number of VCs to one or multiple remote de...

Страница 153: ...encapsulations are For Transparently Bridged connections RFC 1483 Ethernet V2 0 IEEE 802 3 bridged PDUs for both the LLC SNAP method and VC MUX method For Routed Ethernet connections RFC 1483 Etherne...

Страница 154: ...mbers However in contrast to a standard phonebook it contains additional connectivity information Basic to the AST570 operation are ATM VCs The AST570 phonebook is the management tool for all possible...

Страница 155: ...17766 AAAA TCZZA Ed 04 13 2 1 The AST570 Phonebook Page The Phonebook Page The Phonebook Table Phonebook Table Components Phonebook Defaults The AutoPVC Table Click in the left pane of the AST570 page...

Страница 156: ...of the Phonebook table of the Phonebook page Field Description Name Indicates the name or alias of the phonebook entry Any name can be given to an entry Address Indicates the VPI and VCI value of the...

Страница 157: ...ter 6 for more information Routed Ethernet MER See chapter 7 for more information IPoA RFC1483 Rt any Any kind of packet service is allowed Bridged PPPoE See chapter 8 for more information Routed PPPo...

Страница 158: ...example of the AutoPVC table Any PVC identified by its VPI VCI and communicated via AutoPVC is added to the AutoPVC table If AutoPVC is not supported at the remote side i e the Digital Subscriber Lin...

Страница 159: ...are free to give any name to a phonebook entry a few restrictions apply You may not provide an entry with a name which already is supplied in the Phonebook table Phonebook entries which are intended t...

Страница 160: ...from the Type pop down list 6 Click and to finish the procedure On the Phonebook page click next to the phonebook entry you want to delete As a result your selection is highlighted Click and Phoneboo...

Страница 161: ...o be terminated on the Ethernet port can be notified by the AST570 Basically the following steps are executed 1 The SP configures VCs on the DSLAM 2 Via AutoPVC the VPI VCI values are communicated to...

Страница 162: ...f the AST570 default terminated VCs e g 8 35 on the DSLAM VPI VCI 8 35 will end up in the AutoPVC list As this VC matches with the Bridging entry Br1 the AutoPVC field of this phonebook entry will ind...

Страница 163: ...tions are possible Although not the same IP is often referred to as Transmission Control Protocol TCP IP This chapter highlights some general IP parameters and some possible IP configurations for the...

Страница 164: ...st Configuration Protocol DHCP allows the PC s on your local network to retrieve automatically an IP address from an IP address leasing server i e a DHCP server See subsection 14 4 for more informatio...

Страница 165: ...ain Routing CIDR In CIDR an IP network is represented by a prefix which is the IP address of a network followed by a slash and lastly an indication of the number of leftmost contiguous bits correspond...

Страница 166: ...section the interaction between IP addresses and packet services is described Apart from Bridging all packet services require the IP suite and even the Bridging packet service will in most cases be us...

Страница 167: ...e side of the DSL connection Therefore your AST570 DHCP server must be disabled Your SP may Provide you with an IP address Require you to use DHCP Alternatively a second but Private IP address can be...

Страница 168: ...igure IP addresses like 10 0 0 1 10 0 0 2 on your PCs Note IP addresses can be configured automatically via AST570 DHCP server See section 14 4 for more information A second set of Public IP addresses...

Страница 169: ...3 and 20 1 for more information The PC IP address can be configured statically no DHCP or dynamically AST570 as DHCP server In addition configure the AST570 IP address as default gateway in your PCs...

Страница 170: ...s on basic IP addressing and routing for its packet forwarding i e Both local as remote users on either side of the DSL connection experience the LIS environment as if they are sharing one single netw...

Страница 171: ...ke any other member of a W LAN the AST570 must be locally identified by an IP address to be able to communicate with other local W LAN devices This section deals with the IP address configuration of t...

Страница 172: ...ned via the Routing page IP addresses assigned via the DHCP Client page IP addresses configured and or negotiated by connections As the AST570 IP layer supports logical multi homing one interface supp...

Страница 173: ...onfigured on any of the AST570 interfaces Field Description Intf Indicates the interface Intf to which the IP parameter set was assigned to It can take several values depending on the packet services...

Страница 174: ...P parameter set was added through the Routing page The default IP address 10 0 0 138 is also of this type Temp Implies that this additional IP parameter set was added via a Ping of Life Implies that t...

Страница 175: ...itial Setup Page Setting an IP Address via the Routing Page Proceed as follows 1 Click in the left pane of the AST570 pages to pop up the Initial Setup page See section 21 2 for more information On th...

Страница 176: ...llowing information Select eth0 from the Intf pop down list Enter an IP address in the IP Address field e g 192 6 11 150 Enter an associated sub netmask in the Netmask field e g 255 255 255 0 Select w...

Страница 177: ...10 0 0 1 Sub netmask 255 255 0 0 Default Gateway none You can setup a local workgroup around the AST570 as shown in the figure below IP Network 172 16 IP address 172 16 0 4 Sub netmask 255 255 0 0 Def...

Страница 178: ...ent and the AST570 as the DHCP server In this configuration each time a compute start it will obtain its IP configuration from the AST570 Advanced Client For advanced networks the role of DHCP server...

Страница 179: ...e left pane of the AST570 pages to pop up the DHCP pages See section 21 2 for more information By default the DHCP client page is shown Two buttons on the DHCP pages allow to switch between the DHCP c...

Страница 180: ...0 as DHCP client DHCP Server Configuration Table Address Pool Configuration PPP Spoofing Configuration DHCP Server Lease Table Adding Leases Manually On the AST570 DHCP Server page the DHCP Server Sta...

Страница 181: ...re information One of the AST570 features is that it can automatically revert from DHCP client to DHCP server At boot time the AST570 probes the W LAN for a specified time limit Client timeout to chec...

Страница 182: ...After the client timeout exceeded it switches to DHCP server mode but this might be to late as some clients will already selected an automatic IP address Dynamic IP addressing is a feature allowing DH...

Страница 183: ...erver auto Setting auto in the Def Gateway field means that there will be referred to the Routing page Setting auto in the DNS server field means that there will be referred to the DNS page This box a...

Страница 184: ...dresses e g FTP server or in case the device is not able to send receive DHCP requests replies These leases are permanent i e will never be released Proceed as follows 1 Click in the DHCP Server Lease...

Страница 185: ...DHCP Client Configuration Table Components Enabling an AST570 DHCP Client Apart from being DHCP server the AST570 can also act as DHCP client The dynamically assigned IP addresses can be obtained fro...

Страница 186: ...cription Init Requesting The DHCP client requests a DHCP server for an IP address Bound A dynamic IP address has been assigned by the DHCP server Renewing The DHCP client requests a known DHCP server...

Страница 187: ...terface pop down list Select eth0 in case you want to enable the DHCP client for the AST570 itself Select the Routed Ethernet entry in case you want to enable the MER DHCP client 4 Optionally enter on...

Страница 188: ...TCZZA Ed 04 14 5 Speed Touch Routing Next to the DSL router part the AST570 supports also IP routing via its IP router This section aims to familiarize you with the AST570 IP router abilities Topic S...

Страница 189: ...ot all Operating Systems Windows Unix Mac OS The routes in an ordinary routing table or Forwarding Information Base FIB include among others destination IP addresses subnet masks and gateways When an...

Страница 190: ...ary routing table it contains information about the source IP address and the source subnet mask The lookup principle may also be extended not only the combination of destination IP address and subnet...

Страница 191: ...ld also be written as the prefix 24 For example IP address 10 0 0 138 netmask 255 255 255 0 With the prefix method this will be written as prefix IP address 10 0 0 138 24 In the AST570 routing table t...

Страница 192: ...DSL connections and vice versa In this subsection configuration of the AST570 IP routing table is described General ATM DSL End to End IP Architecture ATM DSL IP Routing AST570 Power on IP Routing Ta...

Страница 193: ...process will determine the best route that may lead to the final destination of the packet Consequently it will forward the packet to the interface that may reach this destination When the AST570 is p...

Страница 194: ...mask or next hop device IP address for the IP route Source Indicates the source IP address pool prefix mask of the IP route Gateway Indicates the IP address of the directly connected gateway to which...

Страница 195: ...that all outgoing traffic is sent over this route Source IP address pool in prefix notation Specifying any indicates that all traffic coming from the Ethernet interface is sent over this route Gateway...

Страница 196: ...14 Networking Services IP 196 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 197: ...to forward packets to their destinations IP addresses being 32 bit numbers are ideally suited for computers but are far from usable to humans Therefore the Domain Name System DNS was designed a distri...

Страница 198: ...this scenario it is assumed that the AST570 acts as DHCP server and as DNS server for the local network During start up a first PC launches a DHCP request on the W LAN One of the fields in the DHCP re...

Страница 199: ...s the IP address of YourPC lan 3 As the AST570 is the DNS server it will respond with the appropriate IP address being 10 0 0 1 4 The ping utility in MyPC will now submit the ping to 10 0 0 1 which ma...

Страница 200: ...1 refers to a new W LAN using the default AST570 configuration i e configured for DHCP server as well as DNS server In case the AST570 is added to a existing W LAN configuration of the AST570 DNS serv...

Страница 201: ...of all current DNS clients and optionally allows to add DNS leases manually Field Description Hostname The DNS hostname of the device Address The IP address to which the DNS hostname is assigned This...

Страница 202: ...me table allows you to configure DNS leases manually e g for devices which do not support DNS Proceed as follows 1 In this table if needed click 2 Enter the following information in the DNS hostname t...

Страница 203: ...203 300 3EC 17766 AAAA TCZZA Ed 04 Alcatel Speed Touch 570 Security...

Страница 204: ...204 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 205: ...nslation PT this single external Public IP address is mapped onto multiple internal ports on the W LAN thus allowing multiple users to share this external IP address simultaneously The amalgam of addr...

Страница 206: ...eeded Therefore the AST570 exhibits the NAT page allowing static IP address and UDP TCP port mapping for inbound IP packets to be configured The use of the NAT page is described in section 16 3 All su...

Страница 207: ...ia the embedded Routed Ethernet DHCP client used for the Routed Ethernet connection to be shared amongst multiple local PCs You can enable disable NA P T via the Detailed configuration table per Route...

Страница 208: ...ented according to this model can be changed without affecting the upper or lower layers An important consequence is that changing IP addresses or TCP UDP ports via NA P T affects the other layers as...

Страница 209: ...indows NT UNIX etc 3 Install on this PC a NAT PAT package that supports all TCP IP protocols Now this PC can act as some home gateway 4 Connect the Ethernet port of the AST570 to one of the PC s two E...

Страница 210: ...home gateway 4 Connect one of the Ethernet port s of the AST570 to the PC s Ethernet PC NIC port 5 Connect your local W LAN to the other Ethernet PC NIC 6 Configure the PC acting as home gateway as DH...

Страница 211: ...ction describes the use of the NAT page for configuring static network address and port mapping for inbound IP packets The NAT Page The NAT Settings Table NAT Settings Table Components The Default Ser...

Страница 212: ...PPP connections where the AST570 receives a different IP address each time the connection is established the AST570 allows to save the NAT settings in a template That way you don t have to specify whi...

Страница 213: ...tes both IP address and port as IP PORT Note The outside port must only be specified for the TCP and UDP protocols All other protocols do not need a port to be specified Protocol Indicates the protoco...

Страница 214: ...tion for the AST570 IP address on which NAT is to be enabled Outside IP address Enter 0 in case of a dynamically assigned IP address Outside port if applicable Note You only have to enter an outside p...

Страница 215: ...IP address range 10 0 0 0 8 10 0 0 1 Public IP address 192 6 11 10 Public IP address 10 0 0 138 The AST570 NA P T router must redirect all external FTP connections to 192 6 11 10 to 10 0 0 1 the FTP s...

Страница 216: ...NAT Settings table configuration 16 Security Services NAT PAT 216 300 3EC 17766 AAAA TCZZA Ed 04 The following figure shows the NAT Settings table with the added static NAT entry...

Страница 217: ...ork in such a way that access is only allowed to authorized traffic Therefore to effectively control the flow of data firewall protection should be placed at each point where the network connects to t...

Страница 218: ...tside world via the DSL line The AST570 Firewall is in fact a packet filter inside and outside nodes are visible to each other at the IP level but the firewall filters out i e blocks the passage of ce...

Страница 219: ...Static NA P T Module The following modules can be identified See Firewall model Router Module This module which has nothing to do with the AST570 IP router is responsible for the traffic within the A...

Страница 220: ...T570 At this point it can be determined whether the packet is allowed to be handled i e routed by the AST570 IP router Source The point of all traffic sourced by the AST570 IP router At this point it...

Страница 221: ...et Accept The packet will be submitted to the next processing stage without further action Deny The packet will not be submitted to the next processing stage A message will be sent to the sender that...

Страница 222: ...fic treatment of this packet See topic AST570 Firewall Actions A rule is able to operate on the following packet criteria Interface related IP related TCP related UDP related ICMP related Source inter...

Страница 223: ...CMP related criteria 17 Security Services Firewalling 223 300 3EC 17766 AAAA TCZZA Ed 04 Source Port number Source Port number range Destination Port number Destination Port number range Type code num...

Страница 224: ...input and output the Dynamic NA P T module can always be positioned between the Forward and Output module If you set rules on a hook you should know if the packets that pass through that hook contain...

Страница 225: ...fer to a previously defined access list thus allowing nested access lists or chains You can configure the AST570 firewall only via the CLI See chapter 22 for more information The AST570 Firewall is en...

Страница 226: ...d on a small W LAN consisting of the AST570 and a small number of PCs all configured with dynamic Net10 IP addresses leased by the AST570 DHCP server Remote LAN Access Point Telnet Server Server ATM N...

Страница 227: ...the AST570 Firewall this will result in the following CLI configuration 1 A chain must be created e g Telnet firewall chain create chain Telnet 2 Following rules must be created for that chain For the...

Страница 228: ...drop For the AST570 Firewall this will result in the following CLI configuration 1 A chain must be created e g Telnet firewall chain create chain Telnet 2 Following rules must be created for that chai...

Страница 229: ...229 300 3EC 17766 AAAA TCZZA Ed 04 Alcatel Speed Touch 570 Maintenance...

Страница 230: ...230 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 231: ...possibilities A new version of the software can be downloaded via the DSL line to your AST570 You can upload new AST570 software yourself from a PC on your local W LAN Both features presented in this...

Страница 232: ...ocal W LAN Alcatel DSL products continue to evolve By upgrading software the AST570 is able to follow this evolution The Upgrade Page Upgrade Page Components Upgrade Page Buttons Upgrade Preconditions...

Страница 233: ...ormant older version Software path field Allows you to specify the path to the AST570 upgrade software package to be uploaded Clicking allows you to browse to the location of the upgrade software The...

Страница 234: ...lows 1 Browse to the Upgrade page 2 In the Active software version field the software package that is running is labeled Check whether the Passive software version field is empty If not click 3 Click...

Страница 235: ...the Software path input field 6 Click to start the upload As a result the upgrade software package name will appear in the Passive software version field Note In case you did not remove the passive v...

Страница 236: ...the Upgrade page Note Make sure a passive software version is labeled in the Passive software version field If not firstly upload a upgrade software package as described in the previous procedure 2 Cl...

Страница 237: ...cated control VCs This feature is controlled by the SP At some point in time he might decide to upgrade the software in your AST570 Software download will happen almost unnoticed while you are connect...

Страница 238: ...18 Maintenance Speed Touch Software 238 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 239: ...ss to the Web interface or the CLI This chapter describes how to set such a system password Never use an obvious system password to protect the AST570 as your name birth date or phone number Moreover...

Страница 240: ...n the Retype your password field Note Asterisks will appear instead of the password The number of asterisks is at random 4 Click 5 To make your password permanent click 6 Authenticate yourself using t...

Страница 241: ...lity to your AST570 may occur if wrongly configured simply by forgetting its IP address or forgetting the system password Due to the flexible nature of the AST570 you may end up in a situation where r...

Страница 242: ...tended IP address and a special MAC group address in the ARP cache of one of your PCs 2 Power cycle the AST570 and allow the POST to end this takes about 30 seconds 3 Ping this same IP address within...

Страница 243: ...n be any address within your subnet as long as it is not used by any other member of your local network 5 To verify whether this step was successful execute arp a a second time In the entries list you...

Страница 244: ...PC NICs make sure that the procedure is applied to the one connected to the AST570 In the following syntax Interface IP address identifies the particular PC NIC arp a s d ST IP address 01 90 D0 80 01...

Страница 245: ...parameters to original defaults including the system password Wireless LAN settings and IP address Restoring Original Settings Be careful when using To Defaults procedures as these destroy all changes...

Страница 246: ...he System setup page the following table is shown 3 Click if you are sure to reset the AST570 to its original defaults 4 The AST570 will ask to confirm the reset 5 Click if you are sure Otherwise clic...

Страница 247: ...IP address 01 90 D0 80 01 FF any IP address can be any address within your subnet as long as it is not used by any other member of your local network 4 To verify whether this step was successful execu...

Страница 248: ...Make sure your AST570 is turned on 2 Use a pencil to press the push button at the back of the AST570 Hold on the push button for several seconds until all front LEDs go out 3 Release the button Via t...

Страница 249: ...tion via a Web browser Configuration through a Command Line Interface CLI The local configuration via the AST570 web interface is based on the HyperText Transfer Protocol HTTP server Web browser conce...

Страница 250: ...AST570 is a local device and its IP address cannot be resolved by the Proxy server Therefore prior to access the AST570 pages make sure that either Your Web browser is not using a Proxy server The AST...

Страница 251: ...s lost Therefore after configuring your AST570 do not forget to reset your Web browser to its original settings 1 Select Edit from the toolbar 2 Select Preferences 3 In the Category box select Advance...

Страница 252: ...2 Select Preferences 3 In the Category box select Advanced Proxies 4 Under Manual Proxies click the view button 5 In the Exceptions box add the IP address of your AST570 or the IP subnetwork address p...

Страница 253: ...t 10 0 0 138 The AST570 DNS hostname default SpeedTouch lan 3 If a system password was set See chapter 19 for more information an authentication window will pop up Enter the system password in the Pas...

Страница 254: ...ed Touch Web Interface 254 300 3EC 17766 AAAA TCZZA Ed 04 21 3 Speed Touch Page Structure All AST570 pages can be divided into two frames Menu frame User frame Each web page contains The generic Menu...

Страница 255: ...existing ATM connections 13 2 Dial in page for Routed PPPoA and Routed PPPoE sessions 11 2 Configure static NA P T entries 16 Configure the AST570 IP router 14 5 Configure the Routed Ethernet packet s...

Страница 256: ...21 Maintenance Speed Touch Web Interface 256 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 257: ...ll the AST570 functions the AST570 exhibits a low level interface i e the Command Line Interface CLI As the CLI has far more configurational possibilities than the regular AST570 pages it is intended...

Страница 258: ...asics Example Command Group Description Executing Commands Example Command Execution Detailed CLI Commands Description To access the CLI page you need one of the following Microsoft s Internet Explore...

Страница 259: ...by clicking the mark next to a group name or clicking the group name The following example shows the output if you click next to the wireless group name Clicking on a command name will execute it Comm...

Страница 260: ...ch CLI 260 300 3EC 17766 AAAA TCZZA Ed 04 Clicking aplist in the ip command group generates the following immediate output A CLI Reference Guide with detailed CLI configuration description of all the...

Страница 261: ...ext to CLI access via the AST570 pages you can use native access via a basic Telnet session This allows configuration via a character based CLI As a consequence the use of a Web browser or even any gr...

Страница 262: ...ents Using a Telnet Session to your AST570 Telnet is A fairly general bi directional eight bit byte oriented communication facility A standard method of interfacing terminal devices to each other Prio...

Страница 263: ...tionally after supplying the system password telnet 10 0 0 138 Trying 10 0 0 138 Connected to 10 0 0 138 Escape character is User SpeedTouch 00 80 9F 01 23 45 Password ______ ___ _____ ALCATEL SPEED T...

Страница 264: ...our commands The CLI access is structured in what is called levels The prompt indicates that you are in the root level of CLI Typing help at the root prompt shows you the available command groups help...

Страница 265: ...uration config Typing help followed by a command generates shows you a description of the command and a parameter syntax if applicable For example entering help reset in the config level generates the...

Страница 266: ...22 Maintenance Speed Touch CLI 266 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 267: ...267 300 3EC 17766 AAAA TCZZA Ed 04 Alcatel Speed Touch 570 Appendices...

Страница 268: ...268 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 269: ...rect Sequence Spread Spectrum DTE Data Terminal Equipment FIB Forwarding Information Base FTP File Transfer Protocol GUI Graphical User Interface HTML HyperText Markup Language HTTP HyperText Transfer...

Страница 270: ...ort Translation PVC Permanent Virtual Channel QoS Quality of Service RAS Remote Access Server REN Ringer Equivalence Number RF Radio Frequency RIP Routing Information Protocol ROW Rest Of the World RT...

Страница 271: ...6 AAAA TCZZA Ed 04 VP Virtual Path VPI Virtual Path Identifier VPN Virtual Private Network WAN Wide Area Network WECA Wireless Ethernet Compatibility Alliance WEP Wired Equivalent Privacy Wi Fi Wirele...

Страница 272: ...Abbreviations 272 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 273: ...when using and configuring the AST570 If the following troubleshooting tips have not resolved the problem contact the company from which you purchased the AST570 for assistance In case you encounter D...

Страница 274: ...t 40 bits WEP key in case of WEP encryption No wired LAN connectivity LAN LED does not light up Make sure the cable s are securely connected to the 10Base T port LAN LED does not light up Ethernet por...

Страница 275: ...to wall mount your AST570 with the wall fixing assembly delivered in the package Before you start check for the following items The wall fixing assembly 2 screws and 2 wall plugs 1 Velcro sticker 1 Ma...

Страница 276: ...les position the wall fixing assembly over the holes insert the screws in the wall plugs and tighten them firmly 4 Place the Velcro sticker on the wall fixing assembly in the outlined area 5 Position...

Страница 277: ...revolutionized communication it exhibits an important drawback it provides little network security By implementing the IP Security Protocol Suite RFC2401 RFC2409 RFC2451 and RFC2404 to name just a fe...

Страница 278: ...semi automated IP route configuration methods of the AST570 DSL router will be extended with RIPv1 and RIPv2 Routing Information Protocol RIP provides automatic route table construction and maintenanc...

Страница 279: ...endixD Speed Touch Specifications Topic See Front Panel Layout and LED Description D 1 Power On Off Behavior D 2 Back Panel Layout D 3 Connector Pin Assignments D 4 Power Supply Adapter D 5 LAN Cables...

Страница 280: ...ired and or wireless interfaces Off No activity on the wired and wireless interfaces Line TX Green Flashing ATM cells are being sent over the DSL line Off No transmission activity Line RX Green Flashi...

Страница 281: ...As soon your AST570 is turned on you can check the PWR Alarm LED See section D 1 to see how the POST progresses Phase PWR Alarm LED Indication Description 1 Flashing red POST pending 2 Solid amber St...

Страница 282: ...el Power Switch Power Socket Ethernet Port Defaults Button Line Port Association button The Ethernet port on the rear panel has a LED Link Integrity Activity LED 10Base T MDI X Indicator Description N...

Страница 283: ...B 5 Wire B Subscriber line wire B 2 5 mod els 10Base T MDI X 12345678 RJ 45 1 RX Receive data from DTE MDI X RJ 45 Front view 2 RX Receive data from DTE 3 TX Transmit data to DTE 6 TX Transmit data t...

Страница 284: ...or equivalent US model 120V 9V North America wall plug P48 091000 Axxxx UK Sing model 230V 9V UK wall plug F48 091000 Axxxx ROW model 230V 9V Euro wall plug D48 091000 Axxxx Australia model 240V 9V A...

Страница 285: ...ayout Straight through LAN cables with the following layout are applicable for interconnecting Ethernet ports 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 Crossover LAN cables with...

Страница 286: ...C to 40 C 40F to 105F Humidity 20 to 80 AC voltage 100 to 120 VAC 220 to 240 VAC DC voltage 9V 1A Frequency 50 60 Hz Power consumption 7Wmax The AST570 is equipped with two omnidirectional Radio Frequ...

Страница 287: ...am user payload data rates Up to 8Mbit s depending on provisioning Upstream user payload data rates Up to 1Mbit s depending on provisioning ADSL standards compliancy ITU G DMT Full rate ITU G 992 1 An...

Страница 288: ...Mb s DSSS channel number range 1 2 412GHz 2 2 417GHz 3 2 422GHz 4 2 427GHz 5 2 432GHz 6 2 437GHz 7 2 442GHz 8 2 447GHz 9 2 452GHz 10 2 457GHz 11 2 462GHz default 12 2 467GHz 13 2 472GHz Typical indoor...

Страница 289: ...chapter AppendixE Speed Touch Default Assignments 289 300 3EC 17766 AAAA TCZZA Ed 04 AppendixE Speed Touch Default Assignments Topic See General Defaults E 1 Connection Service ATM Encapsulation Defau...

Страница 290: ...er AST570 Firewall AST570 System password AppendixE Speed Touch Default Assignments 290 300 3EC 17766 AAAA TCZZA Ed 04 E 1 General Defaults AlcatelXXXXXX where XXXXXX is a placeholder for the last 6 c...

Страница 291: ...SNAP for Bridged PDUs FCS not preserved g Routed PPPoE 0 8 48 Relayed PPPoA 0 8 49 y Routed PPPoA 0 8 50 PPPoA 0 8 51 PPPoA AAL5 RFC2364 0 8 64 AAL5 RFC2364 RFC2364 VC MUX f PPP PDU 0 8 65 RFC2364 VC...

Страница 292: ...AppendixE Speed Touch Default Assignments 292 300 3EC 17766 AAAA TCZZA Ed 04...

Страница 293: ...ides basic Safety Information on Alcatel s Speed Touch product Prior to using the Speed Touch product read this appendix carefully Follow all warnings and instructions marked on the product This chapt...

Страница 294: ...provided by Alcatel except to the extent that this restriction is expressly prohibited by local law copy rent loan re sell sublicense or otherwise transfer or distribute the equipment to others modif...

Страница 295: ...a Pollution Degree 2 environment This device must be installed so that a separation distance of at least 20 centimeters is maintained between the internal radiating antenna and the body of the user in...

Страница 296: ...t on the power cord Do not locate this product where the cord will be subject to persons walking on it Do not overload wall mains outlets and extension cords as this increases the risk of fire or elec...

Страница 297: ...change in performance Avoid using a modem telephone other than a cordless type during an electric storm There is a slight risk of electric shock caused by lightning Do not use the telephone to report...

Страница 298: ...TCZZA Ed 04 F 2 European Community Declaration of Conformity Products with the marking comply with both EMC and Low Voltage Directives issued by the Commission of the European Community A copy of the...

Страница 299: ...quipment This equipment is designed to be connected to the telephone network or premises wiring using a compatible modular jack that is Part 68 compliant The Ringer Equivalence Number REN is used to d...

Страница 300: ...Class B limits for radio noise emissions from digital apparatus as set out in the radio interference regulations of the Canadian Department of Communication Le pr sent appareil num rique n met pas de...

Результаты поиска

Содержание AST570

Отзывы:

Похожие инструкции для AST570

Бренды по названию

Популярные бренды

Alcatel AST570, Руководство пользователя

Результаты поиска

Содержание AST570

Отзывы:

Похожие инструкции для AST570

Бренды по названию

Популярные бренды