MitraStar Movistar GPT-2541GNAC Скачать руководство пользователя страница 121

Страница: 121 / 226

Chapter 16 IPSec VPN

121

16.3 Technical Reference

This section provides some technical background information about the topics covered in this

section.

16.3.1 IPSec Architecture

The overall IPSec architecture is shown as follows.

Figure 78

IPSec Architecture

IPSec Algorithms

The

ESP

(Encapsulating Security Payload) Protocol (RFC 2406) and

(Authentication Header)

protocol (RFC 2402) describe the packet formats and the default standards for packet structure

(including implementation algorithms).

The Encryption Algorithm describes the use of encryption techniques such as DES (Data Encryption

Standard) and Triple DES algorithms.

The Authentication Algorithms, HMAC-MD5 (RFC 2403) and HMAC-SHA-1 (RFC 2404, provide an

authentication mechanism for the

and

ESP

protocols.

Key Management

Key management allows you to determine whether to use IKE (ISAKMP) or manual key configuration

in order to set up a VPN.

Содержание Movistar GPT-2541GNAC

Страница 1: ...Firmware Version 1 00 Edition 1 9 2015 Default Login Details http 192 168 1 1 User Name admin Password 1234 GPT 2541GNAC Indoor GPON HGU User s Guide...

Страница 2: ...Graphics in this book may differ slightly from the product due to differences in operating systems operating system versions or if you installed updated firmware software for your device Every effort...

Страница 3: ...r 3 WAN 25 GPON Layer2 Interface 26 Layer 2 GPON Interface Configuration 26 Ethernet Layer2 Interface 27 Ethernet Layer 2 Interface Configuration 27 WAN Service 29 WAN Connection Configuration 46 Chap...

Страница 4: ...l Control 80 Time Restriction 81 Add a Time Restriction Rule 82 URL Filter 83 Add a URL Filter Rule 84 Chapter 9 Quality of Service QoS 84 QoS General 85 Queue Setup 86 Add a QoS Queue 87 Class Setup...

Страница 5: ...Sec Architecture 122 Encapsulation 123 IKE Phases 124 Negotiation Mode 124 IPSec and NAT 125 VPN NAT and NAT Traversal 126 ID Type and Content 127 Pre Shared Key 128 Diffie Hellman DH Key Groups 129 C...

Страница 6: ...0 SIP Server 176 Dial Plan Rules 177 Phone Region 178 Call Rule 179 Call History Summary 180 Outgoing Calls 181 Incoming Calls 181 Technical Reference 190 Quality of Service QoS 191 Phone Services Ove...

Страница 7: ...ter 29 GPON Password 215 GPON Password 216 Chapter 30 Update Software 216 Update Software 218 Chapter 31 Reboot 218 Restart Using the Web Configurator 219 Chapter 32 Troubleshooting 219 Overview 219 P...

Страница 8: ...apability It has a phone port for making calls over the Internet Voice over IP or VoIP It also supports IPTV service when available from your service provider The following figure shows an application...

Страница 9: ...this port Telf Use a telephone cable to connect the Router to a VoIP phone for VoIP service Eth 1 4 Use an Ethernet cable to connect a computer to one of these ports for initial configuration and or I...

Страница 10: ...the Router sets up a WPS Connection with the wireless device Note To activate WPS you must enable WPS in the Router and in another wireless device within two minutes of each other Reset Use this butt...

Страница 11: ...lue On The Router is receiving power and ready for use Red On The Router has hardware failure Blinking The Router detected an error while self testing Off The Router is not receiving power Eth 1 4 Blu...

Страница 12: ...eless is not activated Internet Blue On The Router has a PPP connection but no traffic It has a WAN IP address either static or assigned by a DHCP server PPP negotiation was successfully completed if...

Страница 13: ...screens Enter the IP address http 192 168 1 1 2 The login screen appears The default password is random Please refer to the label sticker at the bottom of the device Enter the password Click Entrar t...

Страница 14: ...Chapter 1 Introduction 14 4 Click the Menu button and then Configuraci n avanzada 5 Click Aceptar...

Страница 15: ...oduction 15 6 The advanced configuration screens display Use the menu on the left to navigate the screens Refer to the rest of this guide for details about the screens Click Logout to exit the configu...

Страница 16: ...e Info Summary Table 3 Device Info Summary LABEL DESCRIPTION Board ID This field displays the ID number of the circuit board in the Router Symmetric CPU Threads This field displays the number of threa...

Страница 17: ...s to resolve a domain name into a numeric IP address Secondary DNS Server The Router uses this DNS server first when it needs to resolve a domain name into a numeric IP address if the primary DNS serv...

Страница 18: ...through this connection This displays N A when there is no VLAN ID number assigned IPv6 This displays whether or not IPv6 is enabled on the interface Igmp Pxy This shows whether IGMP Internet Group Mu...

Страница 19: ...BEL DESCRIPTION Interface These fields identify the LAN interfaces eth0 eth3 represent the ethernet LAN ports 1 4 wlo represents the wireless LAN interface Received Transmitted These fields display th...

Страница 20: ...terface Errs This indicates the number of frames with errors transmitted on this interface Drops This indicates the number of outgoing packets dropped on this interface Reset Statistics Click this to...

Страница 21: ...ical Gigabit Ethernet line The number after the dot represents the VLAN ID number assigned to traffic sent through this connection The number after the underscore _ represents the index number of conn...

Страница 22: ...uses a gateway G the target is in the neighbor cache C the target is a host H reinstate route for dynamic routing R the route was dynamically installed by redirect D or modified from redirect M Metric...

Страница 23: ...gure 10 ARP Info Table 8 ARP Info LABEL DESCRIPTION IPv4 IPv6 address The learned IP address of a device connected to one of the system s ports Flags Static static entry Dynamic dynamic entry that is...

Страница 24: ...Address This field displays the MAC address to which the IP address is currently assigned or for which the IP address is reserved Click the column s heading cell to sort the table entries by MAC addr...

Страница 25: ...The name of a configured layer 2 interface veip0 stands for a virtual Ethernet card and is the foundation for veip0 which are virtual WAN interfaces of the physical GPON line The number after the dot...

Страница 26: ...r a virtual Ethernet card and is the foundation for veip0 which are virtual WAN interfaces of the physical GPON line Back Click this button to return to the previous screen without saving any changes...

Страница 27: ...yer 2 Interface Configuration Click the Add button in the Layer2 Interface ETH Interface screen to open the following screen Use this screen to create a new layer 2 interface Figure 15 ETH Interface C...

Страница 28: ...e This shows the method of encapsulation used by this connection IP over Ethernet PPP over Ethernet or bridging IP This displays the IP address the connection uses This displays N A when the connectio...

Страница 29: ...MLD proxy is activated or not for this connection MLD is not available when the connection uses the bridging service MLD Source This shows whether MLD source is activated or not for this connection Re...

Страница 30: ...to continue Table 15 WAN Configuration WAN Interface continued LABEL DESCRIPTION Table 16 WAN Configuration WAN Service Configuration LABEL DESCRIPTION Select WAN service type Select the method of en...

Страница 31: ...0 to 7 to add to traffic through this connection The greater the number the higher the priority level Enter 802 1Q VLAN ID 0 4094 Type the VLAN ID number from 1 to 4094 for traffic through this connec...

Страница 32: ...Chapter 3 WAN 32 PPPoE This screen displays when you select PPP over Ethernet PPPoE in the WAN Service Configuration screen Figure 19 WAN Configuration PPPoE...

Страница 33: ...only when you select Enable NAT Select this check box to activate full cone NAT on this connection PPP IP extension Select this only if your service provider requires it PPP IP extension extends the s...

Страница 34: ...sages on the console Bridge PPPoE Frames Between WAN and Local Ports Select this option to forward PPPoE packets from the WAN port to the LAN ports and from the LAN ports to the WAN port In addition t...

Страница 35: ...Select this check box to have the Router add routing table entries based on the MLD traffic Back Click this button to return to the previous screen Next Click this button to continue Table 17 WAN Con...

Страница 36: ...Chapter 3 WAN 36 IPoE This screen displays when you select IP over Ethernet in the WAN Service Configuration screen Figure 20 WAN Configuration IPoE...

Страница 37: ...ss Use the following Static IP address Select this if you have a static IP address WAN IP Address Enter the static IP address provided by your ISP WAN Subnet Mask Enter the subnet mask provided by you...

Страница 38: ...Pv6 address prefix to create the routable global IPv6 address WAN Interface Identifier If you selected Random this field is automatically configured If you selected Manual enter the WAN Identifier in...

Страница 39: ...nection Enable Fullcone NAT Select this check box to activate full cone NAT on this connection This field is available only when you select Enable NAT Enable IGMP Multicast Proxy Select this check box...

Страница 40: ...ows the Router to get subscription information and maintain a joined member list for each multicast group It can reduce multicast traffic significantly Enable MLD Multicast Source Select this check bo...

Страница 41: ...d Default Gateway Interfaces Select a WAN interface through which to forward the service s traffic You can select multiple WAN interfaces for the device to try The Router tries the WAN interfaces in t...

Страница 42: ...ffic You can select multiple WAN interfaces for the device to try The Router tries the WAN interfaces in the order listed and uses only the default gateway of the first WAN interface that connects the...

Страница 43: ...Chapter 3 WAN 43 If you configure only one IPoE connection you must enter the static DNS server address Figure 23 WAN Configuration DNS Server PPPoE or IPoE...

Страница 44: ...om Use the following Static DNS IP address Select this to have the Router use the DNS server addresses you configure manually Primary DNS server Enter the first DNS server address assigned by the ISP...

Страница 45: ...the connection uses the bridging service IGMP Multicast Source Enabled This shows whether IGMP source enable is activated or not for this connection IGMP source enable has the Router add routing tabl...

Страница 46: ...LAN Setup Click Advanced Setup LAN to open the LAN Setup screen Use this screen to set the Local Area Network IP address and subnet mask of your Router and configure the DNS server information that t...

Страница 47: ...Chapter 4 LAN 47 Figure 25 LAN Setup...

Страница 48: ...the Router not provide DHCP services Users must configure LAN devices with manual network settings if you do not have another DHCP server on the network Enable DHCP Server Select this to have the Rou...

Страница 49: ...r assign DHCP option 240 to the LAN set top box Option240 Value Enter the option 240 value Configure the second IP Address and Subnet Mask for LAN interface Select the check box to use IP alias to con...

Страница 50: ...screen Chapter 4 LAN 50 4 2 LAN Additional Subnet Click Advanced Setup LAN Additional Subnet to open the Additional Subnet screen Use this screen to configure IP alias and public static IP IP alias a...

Страница 51: ...lic IP addresses by DHCP server Enable ARP Proxy Select the check box to enable the ARP Address Resolution Protocol proxy Apply Save Click this button to save your changes and go back to the previous...

Страница 52: ...affic The larger the number the higher the priority Remove Select an entry and click the Remove button to delete it Add Click this button to create a new LAN VLAN setting entry Apply Save Click this b...

Страница 53: ...Pv6 LAN Auto Configuration Click Advanced Setup LAN IPv6 Autoconfig to open the IPv6 LAN Auto Configuration screen Use this screen to set the Local Area Network interface IPv6 settings Figure 29 IPv6...

Страница 54: ...o a DHCPv6 client before making it available for reassignment to other systems Obtain IPv6 DNS info from a WAN interface Select this to have the Router get the IPv6 DNS server addresses from the ISP a...

Страница 55: ...he prefix Set this greater than or equal to the preferred life time 1 means no time limit Enable MLD Snooping Select this to have the Router check Multicast Listener Discovery MLD packets to learn the...

Страница 56: ...This screen contains the following fields Table 28 L2TP Client LABEL DESCRIPTION Tunnel Name This is the name of this client connection LNS Ip Address This is the IP address of the L2TP VPN server Re...

Страница 57: ...tion Options are PAP Password Authentication Protocol PAP authentication occurs in clear text and does not use encryption It s probably not a good idea to rely on this for security CHAP Challenge Hand...

Страница 58: ...P server Password Enter the password for connecting to the L2TP server Retype Retype the password for connecting to the L2TP server Get IP automatically Select Yes to have the L2TP server assign a loc...

Страница 59: ...Chapter 5 VPN 59 5 1 1 2 PPP This screen displays second when you add a new L2TP client WAN service Figure 32 L2TP Client Add PPP...

Страница 60: ...HAP only MS CHAP is the Microsoft version of the CHAP Enable NAT Select this check box to activate NAT on this connection Enable Fullcone NAT This field is available only when you select Enable NAT Se...

Страница 61: ...this connection IGMP is not available when the connection uses the bridging service IGMP Multicast Source Enabled This shows whether IGMP source enable is activated or not for this connection IGMP sou...

Страница 62: ...orld even though NAT makes your whole inside network appear as a single computer to the outside world Many residential broadband ISP accounts do not allow you to run any server processes such as a Web...

Страница 63: ...s the inside IP address of the server WAN Interface This field displays the WAN interface through which the service is forwarded Current UPNP Rule Listing Universal Plug and Play UPnP is a distributed...

Страница 64: ...er identifies a service for example web service is on port 80 and FTP on port 21 In some cases such as for unknown services or where one server can support more than one service for example both FTP a...

Страница 65: ...st port number in a series that begins with the port number in the External Start Port field above Protocol Select the protocol supported by this virtual server Choices are TCP UDP or TCP UDP Internal...

Страница 66: ...ure a new IP address each time you want a different LAN computer to use the application For example Figure 36 Trigger Port Forwarding Process Example 1 Jane requests a file from the Real Audio server...

Страница 67: ...to record the IP address of the LAN computer that sent the traffic to a server on the WAN This is the first port number that identifies a service Trigger Port Range End This is the last port number t...

Страница 68: ...t to configure port triggering rules Application Name Choose an application from the drop down list or select Custom application and enter a name to identify this rule using keyboard characters A Z a...

Страница 69: ...en it sends out a particular service The Router forwards the traffic with this port or range of ports to the client computer on the LAN that requested the service Type a port number or the starting po...

Страница 70: ...DESCRIPTION DMZ Host IP Address Enter the IP address which receives packets from ports that are not specified in the Port Forwarding screen Note If you do not assign a default server the Router disca...

Страница 71: ...the SIP register server the SIP ALG translates the Router s private IP address inside the SIP data stream to a public IP address You do not need to use STUN or an outbound proxy if you enable the SIP...

Страница 72: ...firewall allows traffic from all interfaces to go to all interfaces Configure firewall interface default policies to block specific traffic directions or firewall rules to block specific traffic No T...

Страница 73: ...ows the passage of the packets Remove Select entries and click the Remove button to delete them Edit Click the Edit button to go to the screen where you can edit the rule Add Click Add to create a new...

Страница 74: ...r in which the rules are listed The firewall rules that you configure here take priority over the general firewall action settings in the General screen Figure 43 Firewall Rules Default Action Specify...

Страница 75: ...e This displays the name of the rule Interface This displays the LAN or WAN interface s to which this rule is applied Filter Criteria This displays the filtering criteria such as the source or destina...

Страница 76: ...els Figure 44 Firewall Rules Add Table 41 Firewall Rules Add LABEL DESCRIPTION Active Select this check box to enable the rule Rule Name Enter a descriptive name of up to 16 printable English keyboard...

Страница 77: ...of port numbers of the source Destination IP Address Enter the destination IP address in dotted decimal notation Destination Subnet Mask Enter the destination subnet mask Destination IPv6 Address Ente...

Страница 78: ...isted wireless and LAN client MAC addresses and block access from MAC addresses not in the list Select Deny to have the Router block access from the listed wireless and LAN client MAC addresses and al...

Страница 79: ...the labels in this menu Table 43 MAC Filtering Add LABEL DESCRIPTION MAC Address Enter the MAC address in a valid MAC address format that is six hexadecimal character pairs for example 12 34 56 78 9a...

Страница 80: ...LABEL DESCRIPTION Username This is the name of the user whose access the rule controls MAC This is the MAC address of the LAN or wireless device whose access the rule controls Mon Sun This shows an x...

Страница 81: ...rowser s MAC Address automatically displays the MAC address of the LAN device where the browser is running This is the MAC address of the LAN or wireless device whose access the rule controls Other MA...

Страница 82: ...SCRIPTION URL List Type Select Exclude to block access to the URLs in the list and allow access to other URLs Select Include to allow access to the URLs in the list and block access to other URLs Addr...

Страница 83: ...gure a URL filtering setting to control access to certain web sites Figure 50 URL Filter Add Table 47 URL Filter Add LABEL DESCRIPTION URL Address Specify a web site or URL to which to filter access P...

Страница 84: ...ABEL DESCRIPTION Enable QoS Select the check box to turn on QoS to improve your network performance You can give priority to traffic that the Router forwards out through the WAN interface Give high pr...

Страница 85: ...ce through which traffic in this queue passes Qid This shows the priority of this queue for the interface Prec Alg Wght This displays the queue s default precedence queue management algorithm and weig...

Страница 86: ...up Add Add Click Add to create a new queue Enable Select disabled entries and click the Enable button to activate them Table 49 Queue Setup continued LABEL DESCRIPTION Table 50 Queue Setup Add LABEL D...

Страница 87: ...ce level from 1 to 8 to configure for the selected interface The smaller the number the higher the priority level Traffic assigned to higher priority queues gets through faster while traffic in lower...

Страница 88: ...ol of traffic to which the classifier applies SrcPort This displays the source port of traffic to which the classifier applies DstPort This displays the destination port of traffic to which the classi...

Страница 89: ...Class Table 52 Add QoS Class LABEL DESCRIPTION Traffic Class Name Enter a descriptive name of up to 15 printable English keyboard characters not including spaces Rule Order Select this classifier s p...

Страница 90: ...Type the mask for the specified MAC address to determine which bits a packet s MAC address should match Enter f for each bit of the specified source MAC address that the traffic s MAC address should...

Страница 91: ...that matches this classifier Mark Differentiated Service Code Point DSCP Select the DSCP mark to add to traffic that matches this classifier Use Auto marking to automatically apply a DSCP mark accordi...

Страница 92: ...o select WAN interfaces to serve as system default gateways Figure 56 Default Gateway Move the WAN interfaces to serve as system default gateways from Available Routed WAN Interfaces to Selected Defau...

Страница 93: ...Gateway This is the IP address of the gateway The gateway is a router or switch on the same network segment as the device s LAN or WAN port The gateway helps forward packets to their destinations Int...

Страница 94: ...erface such as IPoE IPoA or LAN The gateway is a router or switch on the same network segment as the device s LAN or WAN port The gateway helps forward packets to their destinations Apply Save Click t...

Страница 95: ...ing LABEL DESCRIPTION Policy Name This displays the name of the rule Source IP This displays the source IP address LAN Port This displays the source LAN port number WAN This displays the WAN interface...

Страница 96: ...licy Name Enter a descriptive name of printable English keyboard characters not including spaces Physical LAN Port Select the source LAN Ethernet port number Source IP Enter the source IP address Use...

Страница 97: ...hat the Router sends it recognizes both formats when receiving RIP version 1 is universally supported but RIP version 2 carries more information RIP version 1 is probably adequate for most networks un...

Страница 98: ...domain name to its corresponding IP address and vice versa The DNS server is extremely important because without it you must know the IP address of a machine before you can access it Use this screen t...

Страница 99: ...Chapter 11 DNS 99 Figure 62 DNS Server...

Страница 100: ...ver address assigned by the ISP Secondary DNS server Enter the second DNS server address assigned by the ISP Obtain IPv6 DNS info from a WAN interface Select this to have the Router get the IPv6 DNS s...

Страница 101: ...Table 59 Dynamic DNS LABEL DESCRIPTION Hostname This displays the entry s domain name Username This displays the entry s user name Service This displays the entry s Dynamic DNS service provider Inter...

Страница 102: ...Dynamic DNS Add LABEL DESCRIPTION D DNS provider Select your Dynamic DNS service provider from the drop down list box Hostname Type the domain name assigned to your Router by your Dynamic DNS provide...

Страница 103: ...ice can leave a network smoothly and automatically when it is no longer in use Use the UPnP screen to enable the UPnP feature on your Router Click Advanced Setup UPnP Figure 65 UPnP Table 61 UPnP LABE...

Страница 104: ...y screen Figure 66 DNS Proxy Table 62 DNS Proxy LABEL DESCRIPTION Enable DNS Proxy Select this to have the Router send its own address to the LAN clients for them to use as the DNS server Host name of...

Страница 105: ...es You can manually add a LAN interface to a new group Alternatively you can have the Router automatically add the incoming traffic and the LAN interface on which traffic is received to an interface g...

Страница 106: ...move button to delete the group from the Router WAN Interface This shows the WAN interfaces in the group LAN Interfaces This shows the LAN interfaces in the group DHCP Vendor IDs This shows the DHCP V...

Страница 107: ...Chapter 14 Interface Grouping 107 An interface can belong to only one group at a time Figure 68 Interface Grouping Add...

Страница 108: ...nterface to this group Grouped LAN Interfaces Available LAN Interfaces Select one or more LAN interfaces Ethernet LAN HPNA or wireless LAN in the Available LAN Interfaces list and use the left arrow t...

Страница 109: ...v4 WAN address and tunnels IPv6 traffic to the ISP s Border Relay router BR in the figure to connect to the native IPv6 Internet The local network can also use IPv4 services The Router uses it s confi...

Страница 110: ...for the IPv4 network 6rd Prefix This displays the IPv6 prefix for tunneling IPv6 traffic to the ISP s border relay router and connecting to the native IPv6 Internet Boarder Relay Address This display...

Страница 111: ...D type to static Select Automatic to have the Router detect it automatically through DHCP IPv4 Mask Length Enter the subnet mask number 1 32 for the IPv4 network 6rd Prefix with Prefix Length Enter an...

Страница 112: ...ernet IPv6 AFTR IPv4 in IPv6 IPv4 Internet IPv6 IPv4 LAN IPv6 IPv4 WAN IPv6 IPv4 in IPv6 Dual Stack Lite Click Advanced Setup IP Tunnel IPv4inIPv6 to view and configure Dual Stack Lite to let local co...

Страница 113: ...erface Select a WAN interface to associate with the IPv4 to IPv6 tunnel Associated LAN Interface Select a LAN interface to associate with the IPv4 to IPv6 tunnel Manual Automatic Select the 6RD type S...

Страница 114: ...c is a standards based VPN that provides confidentiality data integrity and authentication This chapter shows you how to configure the Router s VPN settings Figure 75 IPSec Fields Summary Local Networ...

Страница 115: ...his is the IP address of the remote IPSec router in the IKE SA Local Addresses This displays the IP address es on the LAN behind your Router Remote Addresses This displays the IP address es on the LAN...

Страница 116: ...ec VPN 116 16 2 IPSec VPN Add Screen Use these settings to add IPSec VPN policies Click the Add New Connection button in the Advanced Setup IPSec VPN screen to open this screen as shown next Figure 77...

Страница 117: ...by their subnet mask by entering a static IP address on the LAN behind your Router Then enter the subnet mask to identify the network address Mask or Prefix Length If Subnet is selected enter the sub...

Страница 118: ...Type your pre shared key in this field A pre shared key identifies a communicating party during a phase 1 IKE negotiation Type from 8 to 31 case sensitive ASCII characters or from 16 to 62 hexadecimal...

Страница 119: ...ation Both routers must use the same DH key group Key Life Time Define the length of time before an IPSec SA automatically renegotiates in this field A short SA Life Time increases security by forcing...

Страница 120: ...hm to use in the IKE SA Choices are DES a 56 bit key with the DES encryption algorithm 3DES a 168 bit key with the DES encryption algorithm AES AES CBC encryption CBC creates message authentication co...

Страница 121: ...ication Header protocol RFC 2402 describe the packet formats and the default standards for packet structure including implementation algorithms The Encryption Algorithm describes the use of encryption...

Страница 122: ...t be verified for integrity against the data With the use of AH as the security protocol protection is extended forward into the IP header to verify the integrity of the entire packet by use of portio...

Страница 123: ...lifetime This field allows you to determine how long an IKE SA should stay up before it times out An IKE SA times out when the IKE SA lifetime period expires If an IKE SA times out when an IPSec SA i...

Страница 124: ...sing the AH protocol digitally signs the outbound packet both data payload and headers with a hash value appended to the packet When using AH protocol packet contents the data payload are not encrypte...

Страница 125: ...transport mode either but the Router s NAT Traversal feature provides a way to handle this NAT traversal allows you to set up an IKE SA when there are NAT routers between the two IPSec routers Figure...

Страница 126: ...D type and content configuration the Router does not allow you to save multiple active rules with overlapping local and remote IP addresses With main mode see Section 16 3 4 on page 124 the ID type an...

Страница 127: ...lays in the IPSEC LOG Table 75 Mismatching ID Type and Content Configuration Example ROUTER A ROUTER B Local ID type IP Local ID type IP Local ID content 1 1 1 10 Local ID content 1 1 1 2 Remote ID ty...

Страница 128: ...hat allows two parties to establish a shared secret over an unsecured communications channel Diffie Hellman is used within IKE SA setup to establish session keys Upon completion of the Diffie Hellman...

Страница 129: ...and certification requests Figure 82 Local Certificates Table 76 Local Certificates LABEL DESCRIPTION Name This field displays the name used to identify this certificate It is recommended that you gi...

Страница 130: ...fication request For a certification request click Load Signed to import the signed certificate Click the Remove button to delete the certificate or certification request You cannot delete a certifica...

Страница 131: ...the company or group to which the certificate owner belongs You may use any character including spaces but the Router drops trailing spaces State Province Name Type up to 32 characters to identify th...

Страница 132: ...Signed Certificate LABEL DESCRIPTION Certificate Name This is the name of the signed certificate Certificate Copy and paste the signed certificate into the text box to store it on the Router Apply Cli...

Страница 133: ...mmended that each certificate have unique subject information Type This field displays general information about the certificate ca means that a Certification Authority signed the certificate Action C...

Страница 134: ...e ca means that a Certification Authority signed the certificate Subject This field displays information that identifies the owner of the certificate such as Common Name CN Organizational Unit OU Orga...

Страница 135: ...88 Trusted CA Import Certificate The following table describes the fields in this screen Table 81 Trusted CA Import Certificate LABEL DESCRIPTION Certificate Name Type a name for the signed certificat...

Страница 136: ...r 18 Power Management 18 1 Power Management Click Advanced Setup Power Management to control hardware modules to reduce power consumption Use the control buttons to select the desired option click App...

Страница 137: ...ble to set the Ethernet interfaces to power saving mode Clear this to turn off power saving on the Ethernet interfaces Ethernet Auto Power Down and Sleep Select Enable to power down Ethernet interface...

Страница 138: ...19 Chapter Chapter 19 Multicast 138 CHAPTER 19 Chapter 19 Multicast 19 1 Multicast Click Advanced Setup Multicast to configure multicast and IGMP and MLD group settings Figure 90 Multicast...

Страница 139: ...Robustness Value Enter the number of times 1 7 the Router can resend a packet if packet loss occurs due to network congestion Maximum Multicast Groups Enter a number to limit the number of multicast g...

Страница 140: ...up Wireless to enable or disable the 2 4 GHz Wireless LAN and configure basic settings If you are configuring the Router from a computer connected to the wireless LAN and you change the Router s SSID...

Страница 141: ...tgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool Clients Isolation Select this to keep the wireless clients in this SSID from communicating with each o...

Страница 142: ...ated Wireless devices associating to the access point AP must have the same SSID Enter a descriptive name up to 32 printable 7 bit ASCII characters for the wireless LAN Note If you are configuring the...

Страница 143: ...etwork Authentication to Open and WEP Encryption to Disabled to allow wireless stations to communicate with the Router without any data encryption or authentication If you do not enable any wireless s...

Страница 144: ...Chapter 20 Wireless 144 Figure 92 Wireless Security...

Страница 145: ...s current wireless security settings for WPS Unconfigured has the Router change its wireless security settings when you do one of the following Add a wireless enrollee The Router automatically uses W...

Страница 146: ...le the wireless data transmissions between the wireless stations and the access points AP to keep network communications private Both the wireless stations and the access points must use the same WEP...

Страница 147: ...eless MAC Filter Table 86 Wireless MAC Filter LABEL DESCRIPTION Select SSID Select an SSID for which to configure MAC filter settings MAC Restrict Mode Define the filter action for the list of MAC add...

Страница 148: ...ilter Add Table 87 Wireless MAC Filter Add LABEL DESCRIPTION MAC Address Enter the MAC address of the wireless device that is to be allowed or denied access to the Router Enter the MAC addresses in a...

Страница 149: ...Chapter 20 Wireless 149 20 4 Wireless Advanced Click Wireless Advanced to configure advanced wireless settings Figure 95 Wireless Advanced...

Страница 150: ...z It is often better to use the 20 MHz setting in a location where the environment hinders the wireless signal 20MHz in 2 4G Band and 40MHz in 5G Band uses a single radio channel in the 2 4 GHz band a...

Страница 151: ...th the same AP but out of range of one another When enabled a wireless client sends an RTS Request To Send and then waits for a CTS Clear To Send before it transmits This stops wireless clients from t...

Страница 152: ...environment with a lot of Radio Frequency RF noise Otherwise leave it disabled WMM APSD When using WMM enable APSD Automatic Power Save Delivery to have the Router manage radio usage to help increase...

Страница 153: ...less client s connection to the Router was authorized SSID This is the name of the wireless network on the Router to which the wireless client is connected Interface This is the name of the wireless L...

Страница 154: ...irm You must then change the wireless settings of your computer to match the Router s new settings Figure 97 Wireless 5GHz Basic Table 90 Wireless 5GHz Basic LABEL DESCRIPTION EnableWireless Guest Net...

Страница 155: ...Router from a computer connected to the wireless LAN and you change the Router s SSID or WEP settings you will lose your wireless connection when you press Save Apply to confirm You must then change t...

Страница 156: ...se throughput An 80MHz channel bonds two adjacent 40 MHz channels to get even higher data rates The wireless clients must also support 40 MHz or 80 MHz It is often better to use the 20 MHz setting in...

Страница 157: ...Beamforming Select this option to have the Router focus the wireless signal and aim it directly at the wireless clients Clear this option to disable beamforming You may need to do this if beamforming...

Страница 158: ...entification Number PIN in the field that displays when you select this option Select Use AP PIN to add a client by entering the AP s PIN from the Device PIN field in the client s WPS configuration Ad...

Страница 159: ...hat WPS worked check the list of associated wireless clients in the AP s configuration utility If you see the wireless client in the list WPS was successful Select SSID Select an SSID for which to con...

Страница 160: ...reless 5GHz MAC Filter Table 93 Wireless 5GHz MAC Filter LABEL DESCRIPTION Select SSID Select an SSID for which to configure MAC filter settings MAC Restrict Mode Define the filter action for the list...

Страница 161: ...Filter Add Table 94 Wireless MAC Filter Add LABEL DESCRIPTION MAC Address Enter the MAC address of the wireless device that is to be allowed or denied access to the Router Enter the MAC addresses in a...

Страница 162: ...peer sides match one another the connection between devices is made Wireless Bridge Limitations At the time of writing WDS is compatible with other APs of the same brand only Not all models support W...

Страница 163: ...evice in a valid MAC address format six hexadecimal character pairs for example 12 34 56 78 9a bc Apply Save Click this to save and apply your changes 20 11 Wireless 5GHz Station Info The station moni...

Страница 164: ...SID for which to display the authenticated wireless stations and their status MAC This displays the MAC address in XX XX XX XX XX XX format of a connected wireless station RSSI This displays the Recei...

Страница 165: ...s SIP number In order to make or receive a VoIP call you need to enable and configure a SIP account and map it to a phone port The SIP account contains information that allows your Router to connect...

Страница 166: ...Chapter 21 Voice 166...

Страница 167: ...characters Authentication User Name Enter the user name for registering this SIP account exactly as it was given to you You can use up to 95 printable ASCII characters Password Enter the user name fo...

Страница 168: ...he Router to accept the first choice Select the Router s third choice for voice coder decoder Select None if you only want the Router to accept the first or second choice Speaking Volume Control Enter...

Страница 169: ...to hear a waiting beeping dial tone on your phone when you have at least one voice message Your VoIP service provider must support this feature Expiration Time Keep the default value for this field un...

Страница 170: ...1 2 SIP Server Click Voice SIP Server to open the SIP Server screen Use this screen to configure the SIP server information QoS for VoIP calls the numbers for certain phone functions and dialing plan...

Страница 171: ...D_NEW in the Service Provider Selection General SIP Service Provider Name Enter a descriptive name of up to 63 printable characters for this SIP service provider profile Spaces are not allowed SIP Loc...

Страница 172: ...er Port and REGISTER Server Port fields are grayed out and not applicable and the Transport Type can also be set to AUTO if you select this option RFC 3262 RFC 3262 defines a mechanism to provide reli...

Страница 173: ...this is already handled by the outbound proxy server Outbound Proxy Port Enter the SIP outbound proxy server s listening port if your VoIP service provider gave you one Otherwise keep the default val...

Страница 174: ...f seconds the Router waits before it tries again to register the SIP account if the first try failed or if there is no response Session Expires Enter the number of seconds the Router lets a SIP sessio...

Страница 175: ...one number you specified in the SIP SIP Account screen if the phone port is busy Call Forward When Busy Disable Specify the key combinations that you can enter to turn the busy forward function off On...

Страница 176: ...number matching this rule can be 2 6 7 8 or The dot appended to a digit allows the digit to be ignored or repeated multiple times Any digit 0 9 after the dot will be ignored For example 01 means a num...

Страница 177: ...fter the character will be ignored In this example dial plan 0 49 11 1 2 9 xx xxxxxxx 1 947 xxxxxxx you can dial 0 to call the local operator call 411 or 911 or make a long distance call with an area...

Страница 178: ...example on your phone s keypad to call the phone number Figure 109 Call Rule Each field is described in the following table Apply Click this to save your changes and to apply them to the Router Cance...

Страница 179: ...ies and to erase them This field displays the speed dial number you should dial to use this entry Number This field displays the SIP number the Router calls when you dial the speed dial number Descrip...

Страница 180: ...when the call was made phone port This is the phone port on which you made the call phone number This is the SIP number you called duration This displays how long the call lasted No This is a read on...

Страница 181: ...was unanswered phone number This is the SIP number that called you duration This displays how long the call lasted 21 8 Technical Reference This section contains background material relevant to the V...

Страница 182: ...P URI For example if the SIP address is 1122334455 VoIP provider com then VoIP provider com is the SIP service domain SIP Registration Each Router is an individual SIP User Agent UA To provide voice s...

Страница 183: ...ient could be a computer or a SIP phone One device can act as both a SIP client and a SIP server SIP User Agent A SIP user agent can make and receive VoIP telephone calls This means that SIP can be us...

Страница 184: ...hat sent the request Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server Redirect servers do not initiate SIP req...

Страница 185: ...password when you register RTP When you make a VoIP call using SIP the RTP Real time Transport Protocol is used to handle voice data transfer See RFC 1889 for details on RTP Pulse Code Modulation Puls...

Страница 186: ...l is terminated SIP Call Progression Through Proxy Servers Usually the SIP UAC sets up a phone call by sending a request to the SIP proxy server Then the proxy server looks up the destination to which...

Страница 187: ...shows two proxy servers PROXY 1 and PROXY 2 Figure 116 SIP Call Through Proxy Servers UA 1 UA 2 PROXY 1 PROXY 2 SIP SIP SIP SIP RTP The following table shows the SIP call progression Table 105 SIP Ca...

Страница 188: ...uest and the call is terminated Voice Coding A codec coder decoder codes analog voice signals into digital signals and decodes the digital signals back into analog voice signals The Router supports th...

Страница 189: ...have a messaging system that sends message waiting status SIP packets as defined in RFC 3842 Custom Tones IVR IVR Interactive Voice Response is a feature that allows you to use your telephone to inter...

Страница 190: ...r when you are done 21 8 1 Quality of Service QoS Quality of Service QoS refers to both a network s ability to deliver data with minimum delay and the networking methods used to provide bandwidth for...

Страница 191: ...or that each packet gets across the DiffServ network Based on the marking rule different kinds of traffic can be marked for different priorities of forwarding Resources can then be allocated according...

Страница 192: ...d timeout 2 seconds expires or issue an invalid sub command the current operation will be aborted Table 107 European Flash Key Commands COMMAND SUB COMMAND DESCRIPTION Flash Put a current call on hold...

Страница 193: ...ss the flash key and then 2 European Call Transfer Do the following to transfer an incoming call that you have answered to another phone 1 Press the flash key to put the caller on hold 2 When you hear...

Страница 194: ...phone USA Call Hold Call hold allows you to put a call A on hold by pressing the flash key If you have another call press the flash key to switch back and forth between caller A and B by putting eith...

Страница 195: ...e following table shows the key combinations you can enter on your phone s keypad to use certain features Table 109 Phone Functions Summary ACTION FUNCTION DESCRIPTION 98 Call transfer Transfer a call...

Страница 196: ...Chapter 21 Voice 196...

Страница 197: ...r Chapter 22 Diagnostics 197 CHAPTER 22 Chapter 22 Diagnostics 22 1 Diagnostics Click Diagnostics to test the Router s connections Figure 118 Diagnostics Click Rerun Diagnostic Tests to perform the te...

Страница 198: ...n the screen shown next Figure 119 Ping TraceRoute Nslookup Table 110 Ping TraceRoute Nslookup LABEL DESCRIPTION Ping Type an IPv4 or IPv6 address to which to test a connection Click Ping and the ping...

Страница 199: ...is screen to back up save the Router s current configuration to a file on your computer Once your Router is configured and functioning properly it is highly recommended that you back up your configura...

Страница 200: ...ou want to upload Remember that you must decompress compressed ZIP files before you can upload them Update Settings Click this to begin the upload process Do not turn off the Router while configuratio...

Страница 201: ...to clear all user entered configuration information and return the Router to its factory defaults You can also press the RESET button on the rear panel to reset the factory defaults of your Router Yo...

Страница 202: ...log Overview The syslog protocol allows devices to send event notification messages across an IP network to syslog servers that collect the event messages A syslog enabled device can generate a syslog...

Страница 203: ...nal message 7 Debug The message is intended for debug level purposes Table 112 Syslog Severity Levels continued CODE SEVERITY Table 113 System Log LABEL DESCRIPTION Date Time This field displays when...

Страница 204: ...is to close the log screen Table 113 System Log continued LABEL DESCRIPTION Table 114 System Log Configuration LABEL DESCRIPTION Log Select Enable to have the Router log events Log Level Select the se...

Страница 205: ...the Security Log screen Figure 126 Security Log Server IP Address Enter the IP address of the syslog server that will log the selected categories of logs Server UDP Port Enter the port number used by...

Страница 206: ...log facility allows you to send logs to different files in the syslog server Refer to the documentation of your syslog program for more details Severity This field displays the severity level of the l...

Страница 207: ...nd a manager An agent is a management software module that resides in a managed device the Router An agent translates the local management information from the managed device into a form compatible wi...

Страница 208: ...he agent to inform the manager of some events Click Management SNMP Agent to open the following screen Use this screen to configure the Router SNMP settings Figure 128 Management SNMP Agent The follow...

Страница 209: ...ct Enter the SNMP system contact Trap Manager IP Type the IP address of the station to send your SNMP traps to Save Apply Click this to save your changes back to the Router Table 116 Management SNMP A...

Страница 210: ...aged by an ACS Auto Configuration Server Figure 129 TR 069 Client Table 117 TR 069 Client LABEL DESCRIPTION Inform Select Enable for the Router to send periodic inform via TR 069 on the WAN Otherwise...

Страница 211: ...tion request user name When the ACS makes a connection request to the Router this user name is used to authenticate the ACS Connection Request Password Enter the connection request password When the A...

Страница 212: ...hapter 27 Internet Time 212 CHAPTER 27 Chapter 27 Internet Time 27 1 Internet Time Click Management Internet Time to configure the Router to get the time from time servers on the Internet Figure 130 I...

Страница 213: ...to configure the time server Check with your ISP network administrator if you are unsure of this information Time zone offset Choose the time zone of your location This will set the time difference b...

Страница 214: ...er the name of one of the Router system accounts Old Password Type the account s default password or existing password New Password Type your new system password up to 30 characters Note that as you t...

Страница 215: ...rd Click Management GPON Password to enter the password for your GPON Internet access account Figure 132 GPON Password Table 120 GPON Password LABEL DESCRIPTION Enter GPON Password Enter the password...

Страница 216: ...pload process uses HTTP Hypertext Transfer Protocol and may take up to two minutes After a successful upload the system will reboot Do NOT turn off the Router while software upload is in progress Figu...

Страница 217: ...he Router again The Router automatically restarts in this time causing a temporary network disconnect In some operating systems you may see the following icon on your desktop Figure 134 Network Tempor...

Страница 218: ...Chapter Chapter 31 Reboot 218 CHAPTER 31 Chapter 31 Reboot 31 1 Restart Using the Web Configurator Click Management Reboot to open the following screen Use this screen to restart the Figure 135 Reboo...

Страница 219: ...ne of the LEDs turn on 1 Make sure the Router is turned on 2 Make sure you are using the power adaptor or cord included with the Router 3 Make sure the power adaptor or cord is connected to the Router...

Страница 220: ...Please refer to the label sticker at the bottom of the device 2 If you can t remember the password you have to reset the device to its factory defaults See Section 1 2 on page 9 I cannot see or access...

Страница 221: ...his does not work you have to reset the device to its factory defaults See Section 32 2 on page 219 I cannot Telnet to the Router See the troubleshooting suggestions for I cannot see or access the Log...

Страница 222: ...be a lot of traffic on the network Look at the LEDs and check Section 1 3 on page 11 If the Router is sending or receiving a lot of information try closing some programs that use the Internet especia...

Страница 223: ...ess points and the wired network The available security modes in your Router are as follows WPA2 PSK recommended This uses a pre shared key with the WPA2 standard WPA PSK This has the device use eithe...

Страница 224: ...er 32 7 UPnP When using UPnP and the Router reboots my computer cannot detect UPnP and refresh My Network Places Local Network 1 Disconnect the Ethernet cable from the Router s LAN port or from your c...

Страница 225: ...or first before connecting it to a power outlet Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord Do NOT use th...

Страница 226: ...the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV...

Результаты поиска

Содержание Movistar GPT-2541GNAC

Отзывы:

Похожие инструкции для Movistar GPT-2541GNAC

Бренды по названию

Популярные бренды

MitraStar Movistar GPT-2541GNAC, Руководство пользователя

Результаты поиска

Содержание Movistar GPT-2541GNAC

Отзывы:

Похожие инструкции для Movistar GPT-2541GNAC

Бренды по названию

Популярные бренды