Motorola Netopia 3300 Скачать руководство пользователя страница 196

Страница: 196 / 254

Administrator’s Handbook

196

Stateful Inspection

Stateful inspection options are accessed by the

security state-insp

tag.

set security state-insp [ ip-ppp | dsl ] vcc

option [ off | on ]

set security state-insp ethernet [ A | B ] option [ off | on ]

Sets the stateful inspection option

off

on the specified inter face. This option is disabled by

default. Stateful inspection prevents unsolicited inbound access when NAT is disabled.

set security state-insp [ ip-ppp | dsl ] vcc

default-mapping [ off | on ]

set security state-insp ethernet [ A | B ] default-mapping [ off | on ]

Sets stateful inspection default mapping to Gateway option

off

on the specified inter face.

set security state-insp [ ip-ppp | dsl ] vcc

tcp-seq-diff [ 0 - 65535 ]

set security state-insp ethernet [ A | B ] tcp-seq-diff [ 0 - 65535 ]

Sets the acceptable TCP sequence difference on the specified inter face. The TCP sequence number dif-
ference maximum allowed value is 65535. If the value of

tcp-seq-diff

is 0, it means that this check is

disabled.

set security state-insp [ ip-ppp | dsl ] vcc

deny-fragments [ off | on ]

set security state-insp ethernet [ A | B ] deny-fragments [ off | on ]

Sets whether fragmented packets are allowed to be received or not on the specified inter face.

set security state-insp tcp-timeout [ 30 - 65535 ]

Sets the stateful inspection TCP timeout inter val, in seconds.

set security state-insp udp-timeout [ 30 - 65535 ]

Sets the stateful inspection UDP timeout inter val, in seconds.

set security state-insp dos-detect [ off | on ]

Enables or disables the stateful inspection Denial of Ser vice detection feature. If set to

, the device

will monitor packets for Denial of Ser vice (DoS) attack. Offending packets may be discarded if it is
determined to be a DoS attack.

set security state-insp xposed-addr exposed-address# "

Allows you to add an entr y to the specified list, or, if the list does not exist, creates the list for the
stateful inspection feature.

xposed-addr

settings only apply if NAT is off.

Example:

set security state-insp xposed-addr exposed-address# (?): 32

32 has been added to the

xposed-addr

list.

Содержание Netopia 3300

Страница 1: ...Administrator s Handbook Motorola Netopia Embedded Software Version 7 8 4 Motorola Netopia 2200 3300 May 2009 and 7000 Series Routers Residential models ...

Страница 2: ...implied or expressed including but not limited to the implied warranties of merchantability and fitness for a particular purpose Motorola may make improvements or changes in the product s described in this manual at any time MOTOROLA and the Stylized M Logo are registered in the US Patent Trademark Office Microsoft Windows Windows Me and Windows NT are either trademarks or registered trademarks of...

Страница 3: ... Addressing 11 Motorola Netopia Gateway Quickstart 14 CHAPTER 2 Basic Mode Features 17 The Home Page 18 Home Page Information 18 Links Bar 20 Firewall 21 Firewall Background 21 Wireless Protected Setup 24 Wireless 26 Enable Wireless 26 Wireless ID SSID 26 Enable Wireless Scheduler 27 Enable Wireless Protected Setup WPS 27 Privacy 27 Advanced Configuration Options optional 28 WiFi Multimedia 39 Wir...

Страница 4: ...eless Scheduler 86 Enable Wireless Protected Setup WPS 86 Privacy 86 Advanced Configuration Options optional 87 WiFi Multimedia 98 Wireless MAC Authorization optional 100 Statistics 102 DSL 102 ATM 102 Ethernet 103 IP 103 LAN 103 Wireless 104 Logs 104 Diagnostics 105 Remote Access 106 Update Router 107 From a Server 107 From your PC 107 Reset Router 108 Restart Router 109 Basic Mode 110 CHAPTER 4 ...

Страница 5: ...ds 144 Remote ATA Configuration Commands 144 DSL Commands 146 Bridging Settings 147 DHCP Settings 149 DMT Settings 155 Domain Name System Settings 156 IGMP Settings 158 IP Settings 160 Queue Configuration 172 IPMaps Settings 178 Network Address Translation NAT Default Settings 178 Network Address Translation NAT Pinhole Settings 179 PPPoE PPPoA Settings 180 PPPoE with IPoE Settings 183 Ethernet Po...

Страница 6: ...y Advisory 244 Warranty Information 244 Software License Limited Warranty and Limitation of Remedies 244 Software License 244 Limited Warranty 245 General Provisions 245 Copyright Acknowledgments 246 Caring for the Environment by Recycling 248 Beskyttelse af miljøet med genbrug 248 Umweltschutz durch Recycling 248 Cuidar el medio ambiente mediante el reciclaje 248 Recyclage pour le respect de l en...

Страница 7: ...be of use to the support staffs of broadband service providers and advanced residential service subscribers See Expert Mode on page 55 and Command Line Interface on page 123 Most users will find that the basic Quickstart configuration is all that they ever need to use This sec tion may be all that you ever need to configure and use your Motorola Netopia Gateway The following instructions cover ins...

Страница 8: ... reduce the risk of fire electric shock and injury to persons including the following Do not use this product near water for example near a bathtub wash bowl kitchen sink or laundry tub in a wet basement or near a swimming pool Avoid using a telephone other than a cordless type during an electrical storm There may be a remote risk of electrical shock from lightning Do not use the telephone to repo...

Страница 9: ...t stikkontakt USB powered models For Use with Listed I T E Only INSTALLATION DER TELEKOMMUNIKATION Wenn Ihre Telefonausrüstung verwendet wird sollten grundlegende Sicherheitsanweisungen immer befolgt werden um die Gefahr eines Feuers eines elektrischen Schlages und die Verletzung von Per sonen zu verringern Beachten Sie diese weiteren Hinweise Benutzen Sie dieses Produkt nicht in Wassernähe wie z ...

Страница 10: ...opia Gateway to your power source PC or local area network and your Internet access point whether it is a dedicated DSL outlet or a DSL or cable modem Different Motorola Netopia Gateway models are supplied for any of these connections Be sure to enable Dynamic Addressing on your PC See Configure Your PC for Dynamic Addressing ...

Страница 11: ... automatically 3 Select Obtain DNS server address automatically if available 4 Remove any previously conﬁgured gateways if applicable 5 Click the OK button Restart if prompted Proceed to the next section Motorola Netopia Gateway Quickstart on page 14 a Some Win dows versions follow a path like this Start menu Settings Control Panel Network or Network and Dial up Connections Local Area Connection P...

Страница 12: ... may not need to configure it at all To check open the Networking Control Panel and select Internet Protocol Version 4 TCP IPv4 Click the Properties button The Internet Protocol Version 4 TCP IPv4 Properties window should appear as shown If not select the radio buttons shown above and click the OK button ...

Страница 13: ...tep 2 2 Select Built in Ethernet 3 Select Conﬁgure Using DHCP 4 Close and Save if prompted Proceed to the next section Motorola Netopia Gateway Quickstart on page 14 a MacOS fol lows a path like this Apple Menu Control Pan els TCP IP Control Panel b Mac OS X follows a path like this Apple Menu System Prefer ences Network ...

Страница 14: ... 2 The Motorola Netopia Router displays the Language Preference page 3 Select your language from the pull down menu and click Next The browser displays the Welcome page For security you must create and enter an Administrative password for accessing the Motorola Neto pia Gateway The administrative User name is admin The initial Password can be whatever you choose from one to 32 characters long ChoI...

Страница 15: ...t to access the Motorola Netopia Gateway s configuration pages When you connect to your Gateway as an Administrator you enter admin as the UserName and the Password you just created 4 Click OK NOTE For 3397GP and 7000 Series models skip the rest of this section Congratulations Your configuration is complete You can go directly to Basic Mode Features on page 17 PPPoE Quickstart The browser displays...

Страница 16: ...favorite Internet bookmarks Optional services that you may have contracted with your provider are also available If you have any questions or encounter problems with your Motorola Netopia Gateway refer to Basic Troubleshooting on page 111 the context sensitive help in your Gateway s web pages or contact your service provider s technical support helpdesk Answers to many frequently asked product rel...

Страница 17: ...etopia Gateway you can configure trouble shoot and monitor the status of your Gateway The Home Page on page 18 Links Bar on page 20 Firewall on page 21 Wireless Protected Setup on page 24 Wireless on page 26 Gaming on page 43 Expert Mode on page 48 Troubleshoot on page 49 Help on page 54 ...

Страница 18: ...page If you prefer the web UI to be dis played in a different language you can click one of these buttons and the pages will display in that lan guage until you choose a different button Supported languages in Europe are German French Italian and English Supported languages in the Americas are Latin American Spanish Brazilian Portuguese and English More Buttons Restart Connection For a PPPoE conne...

Страница 19: ...E connection clicking this button will allow you to attempt to login using a different User ID and Password Disconnect Only for a PPPoE connection clicking this button will disconnect you from the Internet until you choose to reestablish your connection manually Click the Help link in the left hand column of links to display a page of explanatory information Help is available for every page in the...

Страница 20: ...f pages to allow you to monitor diagnose and update your Gateway The following sections give brief descriptions of these pages The Home Page on page 18 Firewall on page 21 Wireless Protected Setup on page 24 Wireless on page 26 Gaming on page 43 Expert Mode on page 48 Troubleshoot on page 49 Help on page 54 ...

Страница 21: ...ollowing table gives some tips for Firewall settings Application Select this Level Other Considerations Typical Internet usage browsing e mail Medium Multi player online gaming Low Set up Gaming on page 43 once defined services will be active whenever firewall mode set to Low Off Restore Medium when finished Going on vacation High Protects your connection while you re away Finished online use for ...

Страница 22: ...opia Firewall offers three levels of increasing protection The following tables indicate the state of ports associated with session types both on the WAN side and the LAN side of the Gateway This table shows how inbound traffic is treated Inbound means the traffic is coming from the WAN into the WAN side of the Gateway ICMP HTTP FTP SNMP telnet DHCP Gateway WAN Side Firewall Setting Off Low Medium...

Страница 23: ...their Service Providers while having no identifiable presence on the Internet Gateway LAN Side Firewall Setting Off Low Medium High Port Session Type Port State 20 ftp data Enabled Enabled Disabled 21 ftp control Enabled Enabled Disabled 23 telnet external Enabled Enabled Disabled 23 telnet Netopia server Enabled Enabled Enabled 80 http external Enabled Enabled Disabled 80 http Netopia server Enab...

Страница 24: ...teway and any client devices on your wireless network Note Not all client wireless devices support WPS Refer to their documentation This page offers two ways to enable WPS from the Setup Type pull down menu by PIN Entry Here you enter the client s Personal Identification Number PIN just as you would for a bank s ATM card Select the MAC address of the client device you want to enable enter the clie...

Страница 25: ... the exchange which may last up to two minutes then continue the WPS push button PBC installation on the client Do not power off your Router during the exchange The Router and the client will display a success message when the exchange has completed Be sure to check for the success message on both the Router and the client ...

Страница 26: ...ID SSID The Wireless ID is preset to a number unique to your unit You can either leave it as is or change it by entering a freeform name of up to 32 characters for example Hercule s Wireless LAN On client PCs software this might also be called the Network Name The Wireless ID is used to identify this particular wireless LAN Depending on their operating system or client wireless card users must eit...

Страница 27: ...rol your wireless LAN s hours of operation automatically Enable Wireless Protected Setup WPS See Wireless Protected Setup on page 24 Privacy By default Privacy is set to WPA PSK with a Wireless Protected Access Pre Shared key Other privacy options as well as other advanced wireless options are available To access them click the Advanced Conﬁguration Options button See Privacy on page 30 for more i...

Страница 28: ...p to 20 Mbps select Normal 802 11b g To limit your wireless LAN to one mode or the other select 802 11b Only or 802 11g Only NOTE If you choose to limit the operating mode to 802 11b or 802 11g only clients using the mode you excluded will not be able to connect Default Channel 1 through 11 for North America on which the network will broadcast This is a frequency range within the 2 4Ghz band Chann...

Страница 29: ... both the wireless clients and the Router share the same Wireless ID in Closed System mode the Router s wireless LAN will not appear as an available network when scanned for by wireless enabled computers Members of the Closed System WLAN must log onto the Router s wireless network with the identical SSID as that configured in the router Closed System mode is an ideal way to increase wireless secur...

Страница 30: ... are not using WPA PSK Privacy you can use WEP encryption instead For this encryption to work both your Router and each client must share the same Wireless ID and both must be using the same encryption keys See WEP Manual on page 33 WPA 802 1x provides RADIUS server authentication support See RADIUS Server authentication on page 30 below WPA PSK provides Wireless Protected Access the most secure o...

Страница 31: ...appropriate fields RADIUS Server Addr Name The default RADIUS server name or IP address that you want to use RADIUS Server Secret The RADIUS secret key used by this server The shared secret should have the same characteristics as a nor mal password Alt RADIUS Server Addr Name An alternate RADIUS server name or IP address if available Alt RADIUS Server Secret The RADIUS secret key used by this alte...

Страница 32: ...etwork is by selecting WPA PSK Wi Fi Protected Access from the pull down menu The screen expands to allow you to enter a Pre Shared Key The key can be between 8 and 63 charac ters but for best security it should be at least 20 characters When you have entered your key click the Save Changes button ...

Страница 33: ...ic on your LAN WEP Manual allows you to enter your own encryption keys manually This is a difficult process but only needs to be done once Avoid the temptation to enter all the same characters Encryption Key Size 1 4 Selects the length of each encryption key The longer the key the stron ger the encryption and the more difficult it is to break the encryption Encryption Key 1 4 The encryption keys Y...

Страница 34: ... encrypt transmitted traffic The default is key 1 Click the click Save Changes button Any WEP enabled client must have an identical key of the same length as the Router in order to suc cessfully receive and decrypt the traffic Similarly the client also has a default key that it uses to encrypt its transmissions In order for the Router to receive the client s data it must likewise have the identica...

Страница 35: ... ent wireless card for IP traffic on your LAN Enter a Passphrase The number of characters to use is shown in the pull down menu Click the Save Changes button This will generate an encryption key automatically Any WEP enabled client must have an identical key of the same length as the Router in order to suc cessfully receive and decrypt the traffic Similarly the client also has a default key that i...

Страница 36: ...rs check the Enable SSID checkbox for each SSID you want to enable The screen expands to allow you to name each additional Wireless ID and specify a Privacy mode for each one You can enable or disable Closed System Mode for each SSID by checking or unchecking the checkbox See Enable Closed System Mode on page 29 for more information Privacy modes available from the pull down menu for the multiple ...

Страница 37: ... allow you to specify your RADIUS server information See RADIUS Server authentication on page 30 You can now choose to Limit Wireless Access by MAC Address This allows you to restrict individual clients access to each SSID separately Click the Limit Wireless Access by MAC Address but ton The MAC Authorization for that SSID screen appears Select Enabled from the pull down menu The screen expands to...

Страница 38: ... The Gateway will prompt you to restart it Click the Yes button and the Gateway will restart with your new settings NOTES The Gateway supports up to 4 different SSIDs One SSID is broadcast by default and has wireless bridging enabled by default These network IDs can now be configured separately in terms of MAC Address filtering You can configure privacy on one SSID and disable it on another SSID ...

Страница 39: ...ing on Diffserv priority settings These priorities are mapped into four Access Categories AC in increasing order of priority Background BK Best Effort BE Video VI and Voice VO It requires WiFi Multimedia WMM capable clients usually a separate feature enabled at the client net work settings and client PC software that makes use of Differentiated Services Diffserv Refer to your operating system inst...

Страница 40: ...twork performance AIFs Arbitration Interframe Spacing the wait time in milliseconds for data frames cwMin Minimum Contention Window upper limit in milliseconds of the range for determining initial random backoff The value you choose must be lower than cwMax cwMax Maximum Contention Window upper limit in milliseconds of the range of determining final random backoff The value you choose must be high...

Страница 41: ...mit Wireless Access by MAC Address button The MAC Authorization screen appears Select Enabled from the pull down menu The screen expands to permit you to add MAC addresses Click the Add button Once it is enabled only entered MAC addresses that have been set to Allow will be accepted onto the wireless LAN All unlisted addresses will be blocked in addition to the listed addresses with Allow dis able...

Страница 42: ... the Submit button When you are finished adding MAC addresses click the Save Changes button You will be returned to the Advanced wireless LAN settings page You can Add Edit or Delete any of your entries later by returning to this page ...

Страница 43: ...ames and Software on page 44 1 Once you choose a software service or game click Enable The Enable Service screen appears Host Device specifies the machine on which the selected software is hosted 2 Select a PC to host the software from the Select Host Device pull down menu and click Enable Each time you enable a software service or game your entry will be added to the list of Service Names display...

Страница 44: ... Flight Sim WWII Europe Series v 1 0 Counter Strike Dark Reign Delta Force Client and Server Delta Force 2 Delta Force Black Hawk Down Diablo II Server Dialpad DNS Server Doom 3 Dues Ex Dune 2000 eDonkey Empire Earth Empire Earth 2 eMule eMule Plus F 16 Mig 29 F 22 Lightning 3 Far Cry Fighter Ace II FTP GNUtella Grand Theft Auto 2 Multiplayer H 323 compliant Netmeeting CUSeeME Half Life Half Life ...

Страница 45: ... DX MSN Messenger Need for Speed 3 Hot Pursuit Need for Speed Porsche Net2Phone NNTP Operation FlashPoint Outlaws pcAnywhere incoming PlayStation Network POP 3 PPTP Quake 2 Quake 3 Quake 4 Rainbow Six RealAudio Return to Castle Wolfenstein Roger Wilco Rogue Spear ShoutCast Server SMTP SNMP Soldier of Fortune SSH server StarCraft Starfleet Command StarLancer v 1 0 TeamSpeak Telnet TFTP Tiberian Sun...

Страница 46: ...DP Click the Next button If you chose Trigger Ports the Trigger Ports entry screen appears Trigger Ports forwards a range of ports to an IP address on the LAN only after specific outbound traffic triggers the feature Enter the following information Service Name A unique identifier for the Custom Service Global Port Range Range of ports on which incoming traffic will be received Local Trigger Port ...

Страница 47: ...n you want all unsolicited traffic to go to a specific LAN host This feature allows you to direct unsolicited or non specific traffic to a designated LAN station With NAT On in the Gateway these packets normally would be discarded For instance this could be application traffic where you don t know in advance the port or protocol that will be used Some game applications fit this profile From the pu...

Страница 48: ... users will not need to modify these settings If you need to enter Expert Mode and click the Expert Mode link you will be challenged to confirm your choice Consult with your Internet Service Provider or your system administrator before attempting to modify any settings in the Expert Mode When you click Yes enter expert mode the Expert Mode Home page appears For information go to Expert Mode on pag...

Страница 49: ...49 Troubleshoot When you click the Troubleshoot link the Links Bar expands to offer two troubleshooting sub headings Diagnostics on page 50 Statistics on page 51 ...

Страница 50: ...ndow as they are generated This sequence of tests takes approximately one minute to generate results Please wait for the test to run to completion Each test generates one of the following result codes Result Meaning PASS The test was successful FAIL The test was unsuccessful SKIPPED The test was skipped because a test on which it depended failed PENDING The test timed out without producing a resul...

Страница 51: ...Internet Line State May be Up connected or Down disconnected Modulation Method of regulating the DSL signal DMT Discrete MultiTone allows connections to work better when certain radio transmitters are present Data Path Type of path used by the device s processor Downstream and Upstream statistics Max Allowed Speed kbps Your maximum speeds for downloading receiving and uploading sending data on the...

Страница 52: ...y Gateway IP address Primary DNS The IP address of the Primary Domain Name Server Primary DNS name The name of the Primary Domain Name Server Secondary DNS The IP address of the backup Domain Name Server if any Secondary DNS name The name of the backup Domain Name Server IP interfaces Address Your Gateway s IP address as seen from your internal network LAN and from the public Internet WAN Netmask ...

Страница 53: ...click Logs the Logs page appears Select a log from the pull down menu All Displays the entire system log Connection Displays events logged for the WAN connection System Displays events logged for the Gateway system configuration The current status of the Gateway is displayed for all logs You can clear all log entries by clicking the Clear All Logs button You can save logs to a text TXT file by cli...

Страница 54: ...dministrator s Handbook 54 Help Click the Help link in the left hand column of links to display a page of explanatory information Help is available for every page in the Web interface Here is an example ...

Страница 55: ... monitor the status of your Gateway This section covers the following topics Home Page Expert Mode on page 56 Help on page 58 Links Bar on page 59 Configure on page 60 Statistics on page 102 Diagnostics on page 105 Remote Access on page 106 Update Router on page 107 Reset Router on page 108 Restart Router on page 109 Basic Mode on page 110 ...

Страница 56: ...ome Page for a PPPoE Connection Home Page Information The Home page displays information about the following categories Connection Information supported VoIP models only Telephone Information Router Information Local Network Language Selection Buttons Language Selection Buttons are located at the top of every page If you prefer the web UI to be dis played in a different language you can click one ...

Страница 57: ...your service provider s DHCP server which assigns your local WAN IP address Connect Only displays if you are not connected For a PPPoE connection clicking this button will allow you to attempt to login using a different User ID and Password Disconnect Only for a PPPoE connection clicking this button will disconnect you from the Internet until you choose to reestablish your connection manually Clic...

Страница 58: ...dministrator s Handbook 58 Help Click the Help link in the left hand column of links to display a page of explanatory information Help is available for every page in the Web interface Here is an example ...

Страница 59: ...o move freely about the site The headings in the following table are hyperlinks You can click on any heading to read about that feature Home Conﬁgure Connection LAN WAN DHCP Server IP Passthrough NAT Router Password Time Zone VLAN VoIP Wireless Statistics DSL ATM Ethernet IP LAN Wireless Logs Diagnostics Remote Access Update Router Reset Router Restart Router Basic Mode Help ...

Страница 60: ...e in the left hand column of links the links bar expands Connection on page 61 LAN WAN on page 63 DHCP Server on page 64 IP Passthrough on page 66 NAT on page 67 Router Password on page 72 Time Zone on page 73 VLAN on page 74 VoIP on page 81 Wireless on page 85 ...

Страница 61: ...ed However it will no longer pro vide routing or security features in this mode If you want the Gateway to do both bridging and routing select Enabled from the Concurrent Bridging Routing pull down menu When this mode is enabled the Gateway will appear to be a router but also bridge traffic from the LAN if it has a valid LAN side address PPPoE PPPoA DHCP Autosensing The pull down menu allows you t...

Страница 62: ... gateway senses LAN initiated traffic The WAN con nection will be disconnected if there is no activity for the period of User Inactivity Timeout Manual This setting disables automatic connection attempts You must bring the connection up and down via the Connect Disconnect buttons User InactivityTimeout in seconds If you chose either Manual or On Demand as your Connection Type the User Inactivity T...

Страница 63: ...naround feature allows Ethernet port 4 to be used as the WAN interface When you click the Enable button the DSL interface is disabled When you click the Disable button the Ethernet port 4 and the DSL interface function normally ...

Страница 64: ... the Gateway itself Subnet Mask Specifies the subnet for DHCP clients on the LAN side of the gateway Defaults to the common Class C subnet DHCP Start Address Specifies the first address in the DHCP address range You can reserve a sequence of up to 253 IP addresses within a subnet beginning with the specified address for dynamic assignment DHCP End Address Specifies the last address in the DHCP add...

Страница 65: ... to enter subnet infor mation If DHCP Server see DHCP Server on page 64 is not enabled the DHCP Start Address and DHCP End Address fields do not appear Enter the Router s IP address on the subnet in the IP Address field and the subnet mask for the subnet in the Netmask field Enter the DHCP Start Address and End Address of the subnet range in their respective fields Ranges cannot overlap and there ...

Страница 66: ...e DHCP subnet con figuration will default to a class C subnet mask 1 Select either User Conﬁgured PC or an IP address displayed in the selection win dow these are the IP addresses currently being served to computers on your LAN If you select User Configured PC you must then configure a local PC to have the public WAN IP address 2 Click Enable Once configured the passthrough host s DHCP leases will...

Страница 67: ... Software on page 68 1 Once you choose a software service or game click Enable The Enable Service screen appears Host Device specifies the machine on which the selected software is hosted 2 Select a PC to host the software from the Select Host Device pull down menu and click Enable Each time you enable a software service or game your entry will be added to the list of Service Names displayed on th...

Страница 68: ... Flight Sim WWII Europe Series v 1 0 Counter Strike Dark Reign Delta Force Client and Server Delta Force 2 Delta Force Black Hawk Down Diablo II Server Dialpad DNS Server Doom 3 Dues Ex Dune 2000 eDonkey Empire Earth Empire Earth 2 eMule eMule Plus F 16 Mig 29 F 22 Lightning 3 Far Cry Fighter Ace II FTP GNUtella Grand Theft Auto 2 Multiplayer H 323 compliant Netmeeting CUSeeME Half Life Half Life ...

Страница 69: ... Quake 2 Quake 3 Quake 4 Rainbow Six RealAudio Return to Castle Wolfenstein Roger Wilco Rogue Spear ShoutCast Server SMTP SNMP Soldier of Fortune SSH server StarCraft Starfleet Command StarLancer v 1 0 TeamSpeak Telnet TFTP Tiberian Sun Command and Conquer Timbuktu Total Annihilation Ultima Online Unreal Tournament Server Urban Assault v 1 0 VNC Virtual Network Comput ing Warlords Battlecry Warroc...

Страница 70: ...ing the Port Range entry screen appears Port Forwarding forwards a range of WAN ports to an IP address on the LAN Enter the following infor mation Service Name A unique identifier for the Custom Service Global Port Range Range of ports on which incoming traffic will be received Base Host Port The port number at the start of the port range your Gateway should use when for warding traffic of the spe...

Страница 71: ...y to forward all externally initiated IP traffic TCP and UDP protocols only to a default host on the LAN Enable it for certain situations Where you cannot anticipate what port number or packet protocol an in bound application might use For example some network games select arbitrary port numbers when a connection is opened When you want all unsolicited traffic to go to a specific LAN host This fea...

Страница 72: ...ord page appears Here you can change the administrative password that you use when logging onto the Gateway as admin Passwords are case sensitive fields and must be 1 to 32 characters long Store your password in a safe place Enter your new password and confirm it Click the Save Changes button ...

Страница 73: ...is distant from Green wich Mean Time GMT 12 12 from the pull down menu This allows you to set the time zone for gen eral time stamp purposes If you are in a time zone that honors Daylight Saving Time you may also have the option to automati cally enable or disable it If your time zone does not use Daylight Saving Time this checkbox option does not appear ...

Страница 74: ...ls When data is passed to a Motorola Netopia VGx enabled broadband gateway specific policies routing and prioritization parameters can be applied to each individual service delivering that service to the appropriate networked device with the required level of quality of service QoS In effect a single Motorola gateway acts as separate virtual gateways for each distinct service being delivered Motor...

Страница 75: ...VLANs that have an Inter VLAN routing group enabled in common When configuring VLANs you must define how traffic needs to be forwarded If traffic needs to be bridged between LAN and WAN you can create a single VLAN that encompasses the WAN port and LAN ports If traffic needs to be routed then you must define four elements LAN side VLANs WAN side VLANs Associate IP Interfaces to VLANs Inter VLAN Ro...

Страница 76: ...er with VGx managed switch technology is shown below To configure VLANs check the Enable checkbox To create a VLAN select a list item from the main VLAN page and click the Edit button The VLAN Entry page appears Check the Enable checkbox and enter a descriptive name for the VLAN ...

Страница 77: ...the VLAN s VID The default VID for the VLAN is selected by the Gateway Global indicating that the ports joining this VLAN are part of a global 802 1q Ethernet VLAN This VLAN includes ports on this Gateway and may include ports within other devices throughout the net work The VID in this case may define the behavior of traffic between all devices on the network hav ing ports that are members of thi...

Страница 78: ... specified 802 1p priority bits page 77 into the IP TOS header bit field for IP packets received on this port destined for this particular VLAN It writes any specified IP TOS priority bits into the 802 1p priority bit field for tagged IP packets transmitted from this port for this VLAN All mappings between Ethernet 802 1p and IP TOS are made according to a pre defined QoS map ping policy The pre d...

Страница 79: ...re link in the left hand toolbar and then the VLAN link and repeat the process You can Edit Clear Enable or Disable your VLAN entries by returning to the VLANs page and select ing the appropriate entry from the displayed list When you are finished click the Save Changes button ...

Страница 80: ...Administrator s Handbook 80 To view the settings for each VLAN select the desired VLAN from the list and click the Details button The screen expands to display the VLAN settings ...

Страница 81: ...ain Motorola Netopia Gateway models have two separate voice ports for connecting telephone handsets These models support VoIP If your Gateway is a VoIP model you can configure the VoIP features When you click the VoIP link the VoIP SIP Lines page appears To enable a VoIP line select one of the lines from the SIP Line Entry menu that corresponds to the port on the Gateway to which your phone is con...

Страница 82: ...t if required Default is 5060 Outbound Proxy Server Outbound Proxy server name or IP address if required Outbound Proxy Port Outbound Proxy server port if required Default is 5060 User Display Name Name of this phone s user to be displayed on the Home page Exam ple Jacob Q Smith SIP User Name Registration user ID Example jqsmith SIP User Password Registration user password Auth User ID The authori...

Страница 83: ...appear for you to enter the number if enabled Enable Call Forwarding On Busy If you check this checkbox calls will be forwarded to a specified num ber if the line is busy The On Busy Call Forwarding Number field will appear for you to enter the number if enabled Enable Call Forwarding On No Answer If you check this checkbox calls will be forwarded to a specified num ber if there is no answer The O...

Страница 84: ...Administrator s Handbook 84 The Home page for a VoIP enabled Gateway with both phone lines registered is shown below ...

Страница 85: ...Wireless ID is preset to a number unique to your unit You can either leave it as is or change it by entering a freeform name of up to 32 characters for example Hercule s Wireless LAN On client PCs software this might also be called the Network Name The Wireless ID is used to identify this particular wireless LAN Depending on their operating system or client wireless card users must either select f...

Страница 86: ...ible to control your wireless LAN s hours of operation automatically Enable Wireless Protected Setup WPS See Wireless Protected Setup on page 24 Privacy By default Privacy is set to WPA PSK with a Wireless Protected Access Pre Shared key Other privacy options as well as other advanced wireless options are available To access them click the Advanced Conﬁguration Options button See Privacy on page 8...

Страница 87: ... select Normal 802 11b g To limit your wireless LAN to one mode or the other select 802 11b Only or 802 11g Only NOTE If you choose to limit the operating mode to 802 11b or 802 11g only clients using the mode you excluded will not be able to connect Default Channel 1 through 11 for North America on which the network will broadcast This is a frequency range within the 2 4Ghz band Channel selection...

Страница 88: ...e wireless clients and the Router share the same Wireless ID in Closed System mode the Router s wireless LAN will not appear as an available network when scanned for by wireless enabled computers Members of the Closed System WLAN must log onto the Router s wireless network with the identical SSID as that configured in the router Closed System mode is an ideal way to increase wireless security and ...

Страница 89: ...at is based on encryption between the Router and any PCs clients you have with wireless cards If you are not using WPA PSK Privacy you can use WEP encryption instead For this encryption to work both your Router and each client must share the same Wireless ID and both must be using the same encryption keys See WEP Manual on page 92 WPA 802 1x provides RADIUS server authentication support See RADIUS...

Страница 90: ...ick the Conﬁgure RADIUS Server button The Configure RADIUS Server screen appears Enter your RADIUS Server information in the appropriate fields RADIUS Server Addr Name The default RADIUS server name or IP address that you want to use RADIUS Server Secret The RADIUS secret key used by this server The shared secret should have the same characteristics as a nor mal password Alt RADIUS Server Addr Nam...

Страница 91: ...selecting WPA PSK Wi Fi Protected Access from the pull down menu The screen expands to allow you to enter a Pre Shared Key The key can be between 8 and 63 charac ters but for best security it should be at least 20 characters When you have entered your key click the Save Changes button ...

Страница 92: ... for IP traffic on your LAN WEP Manual allows you to enter your own encryption keys manually This is a difficult process but only needs to be done once Avoid the temptation to enter all the same characters Encryption Key Size 1 4 Selects the length of each encryption key The longer the key the stron ger the encryption and the more difficult it is to break the encryption Encryption Key 1 4 The encr...

Страница 93: ...smitted traffic The default is key 1 Click the click Save Changes button Any WEP enabled client must have an identical key of the same length as the Router in order to suc cessfully receive and decrypt the traffic Similarly the client also has a default key that it uses to encrypt its transmissions In order for the Router to receive the client s data it must likewise have the identical key of the ...

Страница 94: ...y of your cli ent wireless card for IP traffic on your LAN Enter a Passphrase The number of characters to use is shown in the pull down menu Click the Save Changes button This will generate an encryption key automatically Any WEP enabled client must have an identical key of the same length as the Router in order to suc cessfully receive and decrypt the traffic Similarly the client also has a defau...

Страница 95: ...Enable SSID checkbox for each SSID you want to enable The screen expands to allow you to name each additional Wireless ID and specify a Privacy mode for each one You can enable or disable Closed System Mode for each SSID by checking or unchecking the checkbox See Enable Closed System Mode on page 88 for more information Privacy modes available from the pull down menu for the multiple SSIDs are WPA...

Страница 96: ...on appears to allow you to specify your RADIUS server information See RADIUS Server authentication on page 90 You can now choose to Limit Wireless Access by MAC Address This allows you to restrict individual clients access to each SSID separately Click the Limit Wireless Access by MAC Address but ton The MAC Authorization for that SSID screen appears Select Enabled from the pull down menu The scre...

Страница 97: ... will prompt you to restart it Click the Yes button and the Gateway will restart with your new settings NOTES The Gateway supports up to 4 different SSIDs One SSID is broadcast by default and has wireless bridging enabled by default These network IDs can now be configured separately in terms of MAC Address filtering You can configure privacy on one SSID and disable it on another SSID ...

Страница 98: ... data depending on Diffserv priority settings These priorities are mapped into four Access Categories AC in increasing order of priority Background BK Best Effort BE Video VI and Voice VO It requires WiFi Multimedia WMM capable clients usually a separate feature enabled at the client net work settings and client PC software that makes use of Differentiated Services Diffserv Refer to your operating...

Страница 99: ...ance AIFs Arbitration Interframe Spacing the wait time in milliseconds for data frames cwMin Minimum Contention Window upper limit in milliseconds of the range for determining initial random backoff The value you choose must be lower than cwMax cwMax Maximum Contention Window upper limit in milliseconds of the range of determining final random backoff The value you choose must be higher than cwMin...

Страница 100: ... click the Limit Wireless Access by MAC Address button The MAC Authorization screen appears Select Enabled from the pull down menu The screen expands to permit you to add MAC addresses Click the Add button Once it is enabled only entered MAC addresses that have been set to Allow will be accepted onto the wireless LAN All unlisted addresses will be blocked in addition to the listed addresses with A...

Страница 101: ... Submit button When you are finished adding MAC addresses click the Save Changes button You will be returned to the 802 11 Wireless page You can Add Edit or Delete any of your entries later by returning to this page ...

Страница 102: ...llows connections to work better when certain radio transmitters are present Data Path Type of path used by the device s processor Downstream and Upstream statistics Max Allowed Speed kbps Your maximum speeds for downloading receiving and uploading sending data on the DSL line in kilobits per second SN Margin db Signal to noise margin in decibels Reflects the amount of unwanted noise on the DSL li...

Страница 103: ...ain Name Server Secondary DNS The IP address of the backup Domain Name Server if any Secondary DNS name The name of the backup Domain Name Server IP interfaces Address Your Gateway s IP address as seen from your internal network LAN and from the public Internet WAN Netmask The subnet mask for the respective IP interfaces LAN and WAN Name The name of each IP interface example Eth0 WAN2 Network Rout...

Страница 104: ...system log Connection Displays events logged for the WAN connection System Displays events logged for the Gateway system configuration The current status of the Gateway is displayed for all logs You can clear all log entries by clicking the Clear All Logs button You can save logs to a text CTXT file by clicking the Save to File button This will download the file to your browser s default download ...

Страница 105: ...gress Window as they are generated This sequence of tests takes approximately one minute to generate results Please wait for the test to run to completion Each test generates one of the following result codes Result Meaning PASS The test was successful FAIL The test was unsuccessful SKIPPED The test was skipped because a test on which it depended failed PENDING The test timed out without producing...

Страница 106: ...orary password for the person you want to authorize Select a Timeout period for this password from the pull down menu 5 30 minutes or Unlimited Remote Access authorization lasts for a selected period of inactivity after which it is automatically disabled again to protect against unauthorized access attempts to your Gateway Selecting Unlim ited will enable remote access until the Gateway is reboote...

Страница 107: ...Software from Server button and a new version will automatically be downloaded to your Gateway When the download and installation is complete you will be prompted to restart the Gateway From your PC To update your software from a file on your PC you must first download the software from in the Americas http www netopia com equipment residential firmwareN html or in Europe http www netopia com intl...

Страница 108: ...ou to do that When you click the link you will be challenged to confirm that this is what you want to do If you want to clear your settings click the Yes reset to factory settings button The Gateway configu ration will be reset to the factory default Any configuration information you have entered will be lost and will have to be re entered The Gateway will automatically restart ...

Страница 109: ... Gateway is restarted it will disconnect all users initialize all its interfaces and copy the Operating System Software from its internal storage When you make configuration changes you must restart for the changes to take effect ...

Страница 110: ...Administrator s Handbook 110 Basic Mode When you click Basic Mode you are returned immediately to the Basic Mode Home page ...

Страница 111: ... simple suggestions for troubleshooting problems with your Gateway s initial configuration Before troubleshooting make sure you have read the User Manual plugged in all the necessary cables and set your PC s TCP IP controls to obtain an IP address automatically ...

Страница 112: ...or lights LED Action Power Solid Green Power on Off Power off Flashing Red Power On Self Test Solid Red PO ST Failure Ethernet Solid green Device connected Off No device con nected or modem power is off DSL Solid green DSL synch Off Modem power off Flash ing green DSL attempting synch Flashing green red DSL fails to synch 3 times Flashing red No DSL sig nal Internet Solid green Connected to Intern...

Страница 113: ... Flash green when there is activity on the LAN USB Model 2241N only Solid green when connected Flash green when there is activity on the LAN DSL Solid green when trained Blinking green when no line is attached or when training Internet Solid green when Broadband device is connected Flashes green for activity on the WAN port If the physical link comes up but PPP or DHCP fail the LED turns red Power...

Страница 114: ...eing installed Ethernet 1 2 3 4 Solid green when connected Flash green when there is activity on the LAN DSL Solid green when trained Blinking green when no line is attached or when training Internet Solid green when Broadband device is connected Flashes green for activity on the WAN port If the physical link comes up but PPP or DHCP fail the LED turns red Power Ethernet 1 2 3 4 DSL Internet ...

Страница 115: ...re is activity on the LAN Wireless Flashes green when there is activity on the wireless LAN Off if driver fails to initialize or if wireless is disabled DSL Solid green when trained Blinking green when no line is attached or when training Internet Solid green when Broadband device is connected Flashes green for activity on the WAN port If the physical link comes up but PPP or DHCP fail the LED tur...

Страница 116: ...inking green while training Solid green when trained Off when no line is attached Internet Solid green when Broadband device is connected Flashes green for activity on the WAN port Phone 1 Phone 2 Off when respective line is not registered and on hook Solid green when respective SIP account is registered and on hook Flash green when the respective line is off hook and registered or FXO feature is ...

Страница 117: ...olid green when Internet connection is established Internet Solid green when Gateway is connected Flashes green when transmitting or receiving data on the WAN port Ethernet 1 2 3 4 Solid green when connected Flash green when there is activity on the LAN Wireless Flashes green when there is activity on the wireless LAN Power Wireless DSL Ethernet 1 2 3 4 Internet ...

Страница 118: ...reen when there is activity on the LAN Wireless Flashes green when there is activity on the wireless LAN Off if driver fails to initialize or if wireless is disabled DSL DSL 1 2 ADSL2 models only Solid green when trained Blinking green when no line is attached or when training Flashes green for DSL traffic Internet Solid green when Gateway is connected Flashes green when trans mitting or receiving...

Страница 119: ...if device malfunctions Flashes Red when new embedded software is being installed Ethernet 1 2 3 4 Solid green when connected Flash green when there is activity on the LAN DSL Solid green when trained Blinking green when no line is attached or when training Flashes green for DSL traffic Power DSL Ethernet 1 2 3 4 ...

Страница 120: ...into the 2200 3300 or 7000 series DSL Gate way properly 3 Try a known good wall outlet 4 Replace the power supply and or unit DSL Sync Unlit 1 Make sure the you are using the correct cable The DSL cable is the thinner standard tele phone cable 2 Make sure the DSL cable is plugged into the correct wall jack 3 Make sure the DSL cable is plugged into the DSL port on the 2200 3300 or 7000 series DSL G...

Страница 121: ...the PC s TCP IP Properties for the USB Network Control Panel is set to obtain an IP address via DHCP 3 Make sure the PC has obtained an address in the 192 168 1 x range You may have changed the subnet addressing 4 Make sure the PC is configured to access the Internet over a LAN 5 Disable any installed network devices Ethernet HomePNA wireless that are not being used to connect to the 2200 3300 or ...

Страница 122: ...han 1 2 a second the unit will continue to run as normal If you press the factory default button for 1 3 seconds when you release it the Gateway will per form a factory reset clear all settings and configurations and reboot Do not hold the button down too long 5 10 seconds This will destroy any saved default settings as well DSL POWER 4 3 ETHERNET 2 1 RESET ON OFF Power Off On LAN DSL 4 1 2 3 Fact...

Страница 123: ...e command line interface to enter and update the unit s configuration settings monitor its performance and restart it This chapter covers the following topics CONFIG Commands on page 124 Overview on page 125 Starting and Ending a CLI Session on page 127 Using the CLI Help Facility on page 127 About SHELL Commands on page 128 SHELL Commands on page 129 About CONFIG Commands on page 141 CONFIG Comma...

Страница 124: ...Name System Settings on page 156 Security Settings on page 188 IGMP Settings on page 158 System Settings on page 202 IP Settings on page 160 Syslog on page 206 Queue Configuration on page 172 Wireless Settings supported models on page 208 IPMaps Settings on page 178 VLAN Settings on page 216 Network Address Translation NAT Default Set tings on page 178 VoIP settings supported models on page 221 Ne...

Страница 125: ...nload to download conﬁg ﬁle etheroam to show Ethernet OAM info exit to quit this shell help to get more help all or help help install to download and program an image into ﬂash log to add a message to the diagnostic log loglevel to report or change diagnostic log level netstat to show IP information nslookup to send DNS query for host ping to send ICMP Echo request quit to quit this shell reset to...

Страница 126: ...TR 064 LAN management dynamic dns Dynamic DNS client options ethernet Ethernet options ethernet MAC override Ethernet options igmp IGMP conﬁguration options ip TCP IP protocol options ip maps IPmaps options nat default Network Address Translation default options pinhole Pinhole options ppp Peer to Peer Protocol options wan over ether PPP over Ethernet options preferences Shell environment settings...

Страница 127: ... Motorola Netopia Gateway settings When you have logged in successfully the command line interface lists the username and the security level associated with the password you entered in the diagnostic log Ending a CLI Session You end a command line interface session by typing quit from the SHELL node of the command line interface hierarchy Saving Settings In CONFIG mode the save command saves the w...

Страница 128: ...9437188 you would see Netopia 3000 9437188 as your CLI prompt SHELL Command Shortcuts You can truncate most commands in the CLI to their shortest unique string For example you can use the truncated command q in place of the full quit command to exit the CLI However you would need to enter rese for the reset command since the first characters of reset are common to the restart command The only comm...

Страница 129: ...he results of each test as the diagnostic utility runs If one test is dependent on another the diagnostic utility indents its entry in the console window For example the diagnostic utility indents the Check IP connect to Ethernet LAN entry since that test will not run if the Check Ethernet LAN Connect test fails Each test generates one of the following result codes download server_address ﬁlename ...

Страница 130: ...e prompted to confirm whether or not you want to perform the operation log message_string Adds the message in the message_string argument to the Motorola Netopia Gateway diagnostic log loglevel level Displays or modifies the types of log messages you want the Motorola Netopia Gateway to record If you enter the loglevel command without the optional level argument the command line interface displays...

Страница 131: ... decimal notation of the device you want to locate If a host using the specified name or IP address is active it returns one or more ICMP Echo replies confirming that it is accessible from your network The s size argument lets you specify the size of the ICMP packet The c count argument lets you specify the number of ICMP packets generated for the ping request Values greater than 250 are truncated...

Страница 132: ... reset heartbeat Restarts the heartbeat sequence reset ipmap Clears the IPMap table NAT reset log Rewinds the diagnostic log display to the top of the existing Motorola Netopia Gateway diagnostic log The reset log command does not clear the diagnostic log The next show log command will display information from the beginning of the log file reset security log Clears the security monitoring log to m...

Страница 133: ... show all info Displays all settings currently configured in the Motorola Netopia Gateway show backup Displays the status of the Backup port Up or Down and reports the current port in use show bridge interfaces Displays bridge interfaces maintained by the Motorola Netopia Gateway show bridge table Displays the bridging table maintained by the Motorola Netopia Gateway show conﬁg Dumps the Motorola ...

Страница 134: ... display of individual LAN switch port statistics as well as WAN Ethernet statistics where applicable Example show enet status all 10 100 Ethernet 1 Port Status Link down Transmit OK 0 Transmit unicastpkts 0 Receive OK 0 Receive unicastpkts 0 Tx Octets 0 Rx Octets 0 10 100 Ethernet 2 Port Status Link down Transmit OK 0 Transmit unicastpkts 0 Receive OK 0 Receive unicastpkts 0 Tx Octets 0 Rx Octets...

Страница 135: ...Displays the Ethernet address resolution table stored in your Motorola Netopia Gateway show ip igmp Displays the contents of the IGMP Group Address table and the IGMP Report table maintained by your Motorola Netopia Gateway show ip interfaces Displays the IP interfaces for your Motorola Netopia Gateway show ip ipsec Displays IPSec Tunnel statistics show ip ﬁrewall Displays firewall statistics show...

Страница 136: ...splays status information for each PPPoE socket such as the socket state service names and host ID values show rootcert Dumps the Subject line for the list of all the trusted root certificates for the supplicant which is cur rently a superset of the OpenSSL trusted root certificates show rtsp Displays RTSP ALG session activity data show security log Displays blocks of information from the Motorola...

Страница 137: ...Port 00000000 00000000 SumPort 00000000 00000000 segment 5 port masks PortPort 00000000 00000000 GlobalPort 00000000 00000000 SumPort 00000000 00000000 segment 6 port masks PortPort 00000000 00000000 GlobalPort 00000000 00000000 SumPort 00000000 00000000 segment 7 port masks PortPort 00000000 00000000 GlobalPort 00000000 00000000 SumPort 00000000 00000000 segment 8 port masks PortPort 00000000 000...

Страница 138: ...tive link namePtr eth ip0 portType 7 portIndex 32 ifId 76 vlan active segment Type 1 Index 2 Vid 3 PortMask 0000003c 00000000 SwitchMask 0000003c WirelessMask 00000000 vlan active link namePtr ethernet0 0 portType 3 portIndex 2 ifId 90 vlan active link namePtr ethernet0 1 portType 3 portIndex 3 ifId 91 vlan active link namePtr ethernet0 2 portType 3 portIndex 4 ifId 92 vlan active link namePtr eth...

Страница 139: ...t over which you want to open a telnet session traceroute ip_address hostname Traces the routing path to an IP destination upload server_address ﬁlename conﬁrm Copies the current configuration settings of the Motorola Netopia Gateway to a TFTP Trivial File Trans fer Protocol server The TFTP server must be accessible on your Ethernet network The server_address argument identifies the IP address of ...

Страница 140: ...ews the DHCP lease the Motorola Netopia Gateway is currently using to acquire the IP settings for the specified DSL port The vcc id identifier is an index letter in the range B I and does not directly map to the VCC in use Enter the reset dhcp client release without the variable to see the letter assigned to each virtual circuit reset dsl Resets any open DSL connection reset ppp vccn Resets the po...

Страница 141: ...pressing RETURN Netopia 3000 9437188 top ip Netopia 3000 9437188 ip As a shortcut you can enter the significant letters of the node name in place of the full node name at the CONFIG prompt The significant characters of a node name are the letters that uniquely identify the node For example since no other CONFIG node starts with b you could enter one letter b to move to the bridge node Jumping down...

Страница 142: ...uired and optional information You can then enter the configuration values appropriate for your site without having to enter complete CLI commands When you are in step mode the command line interface prompts you to enter required and optional settings If a setting has a default value or a current setting the command line interface displays the default value for the command in parentheses If a comm...

Страница 143: ...rol X Return Enter to exit For example Netopia 3000 9437188 top set system system name Netopia 3000 9437188 Mycroft Diagnostic Level High medium Stepping mode ended Validating Your Conﬁguration You can use the validate CONFIG command to make sure that your configuration settings have been entered correctly If you use the validate command the Motorola Netopia Gateway verifies that all required sett...

Страница 144: ...n for the specified ATA configuration profile to be stored in the Gateway set ata proﬁle 0 3 ata mac addr MAC_addr Specifies the MAC address of the ATA for the specified configuration profile set ata proﬁle 0 3 ata qos enable on off Enables or disables QoS for the specified profile set ata proﬁle 0 3 ata dhcpc enable on off Enables or disables DHCP client service for the specified profile set ata ...

Страница 145: ...ies a registrar server port typically 5060 for the specified profile set ata proﬁle 0 3 ata outproxy server ip_addr Specifies an outbound proxy server hostname or IP address for the specified profile set ata proﬁle 0 3 ata outproxy port port Specifies an outbound proxy server port typically 5060 for the specified profile set ata proﬁle 0 3 ata auth id value Specifies an authorization ID for the sp...

Страница 146: ...rst Size that apply to the VC You set these values according to specifi cations defined by your service provider set atm vcc n qos peak cell rate 1 n If QoS class is set to cbr or vbr then specify the peak cell rate that should apply to the specified vir tual circuit This value should be between 1 and the line rate The Peak Cell Rate PCR should be set to the maximum rate a PVC can oversubscribe it...

Страница 147: ...etwork to another When bridging is enabled the Motorola Netopia Gateway maintains a table of up to 512 MAC addresses Entries that are not used within 30 seconds are dropped If the bridging table fills up the oldest table entries are dropped to make room for new entries Virtual circuits that use IP framing cannot be bridged NOTE For bridging in the 3341 or any model with a USB port you cannot set t...

Страница 148: ...rcuit using Ethernet framing set bridge dsl vccn option on off Enables or disables bridging services for the specified interface Specified interface must be part of a VLAN if bridge is turned on Only RFC 1483 Bridged encapsulation is supported currently show log command will show that WAN Bridge is enabled when at least one WAN interface is bridged show ip interfaces and show bridge interfaces com...

Страница 149: ... with the specified address for dynamic assignment set dhcp end address ip_address If you selected server specifies the last address in the DHCP address range set dhcp lease time lease time If you selected server specifies the default length for DHCP leases issued by the Motorola Netopia Gateway Enter lease time in dd hh mm ss day hour minute second format set dhcp option group name Specifies a na...

Страница 150: ...lar option numbers set dhcp gen option name name Specifies a DHCP generic option set named name of one to 15 characters You can specify up to 20 gen options Each can contain up to 100 bytes of data up to a maximum of 912 bytes of options data total An option will be served only if the client requests it set dhcp gen option option 1 255 Specifies the DHCP option by number 1 255 The following table ...

Страница 151: ...47 String up to 100 characters N Yes 48 49 IP address list Multiples of 4 Yes 50 IP address 4 No 51 Unsigned 4 byte integer 4 No 52 Unsigned 1 byte integer 1 No 53 Unsigned 1 byte integer 1 Yes 54 IP address 4 Yes 55 String up to 100 characters N No 56 String up to 100 characters N Yes 57 Unsigned 2 byte integer 2 Yes 58 59 Unsigned 4 byte integer 4 No 60 String up to 100 characters N Yes 61 Strin...

Страница 152: ...rm 81 Complex N No 82 Sub option list N Yes 83 Complex N No 84 Undefined Yes 85 IP address list Multiples of 4 Yes 86 87 Unicode String Multiples of 2 Yes 88 Encoded DN list N Yes 89 IP address list Multiples of 4 Yes 90 Complex N No 91 97 Undefined Weakly defined Yes 98 String up to 100 characters N Yes 99 115 Undefined Weakly defined Yes 116 Flag 1 Yes 117 Unsigned 2 byte integer list Multiples ...

Страница 153: ...in the filterset which are evaluated in order dhcp option determines which DHCP option should be compared A typical value would be to use option 60 data for comparison but allowing this value to be configured permits more flexibility set dhcp filterset name settopbox rule 1 type dhcp option set dhcp ﬁlterset name string rule n match action pass discard continue Assigns a match action to the filter...

Страница 154: ... 9450000 dhcp sc set dhcp option server set dhcp start address 192 168 1 33 set dhcp end address 192 168 1 63 set dhcp lease time 00 01 00 00 set dhcp filterset name settopbox rule 1 type dhcp option set dhcp filterset name settopbox rule 1 dhcp option 60 set dhcp filterset name settopbox rule 1 match str STB set dhcp filterset name settopbox rule 1 match action pass set dhcp filterset name settop...

Страница 155: ...a value for the VPI or VCI setting will disable this feature set dmt dmt dying gasp default off on Enables or disables Gateway dying gasp behavior in cases of power failure Default is off set dmt wiringMode auto tip_ring A_A1 not supported on all models This command configures the wiring mode setting for your ADSL line Selecting auto the default causes the Gateway to detect which pair of wires inn...

Страница 156: ...e IP address of the primary DNS name server set dns proxy enable This allows you to disable the default behavior of acting as a DNS proxy The default is on set dns secondary address ip_address Specifies the IP address of the secondary DNS name server Enter 0 0 0 0 if your network does not have a secondary DNS name server set dns conﬁgured dns priority 0 255 Sets the configured DNS priority relativ...

Страница 157: ... IP address may change as a result of a PPPoE connection to the Internet set dynamic dns option off dyndns org set dynamic dns ddns host name myhostname dyndns org set dynamic dns ddns user name myusername set dynamic dns ddns user password myuserpassword Enables or disables dynamic DNS services The default is off If you specify dyndns org you must supply your hostname username for the service and...

Страница 158: ...n order for IGMP snooping to function with IGMP Version 3 it must always track the full source filter state of each host on each group as was previously done with Version 2 only when Fast Leave support was enabled IGMP Version 3 supports IGMP Source Filtering the ability for group memberships to incorporate source address filtering This allows Source Specific Multicast SSM By adding source filteri...

Страница 159: ...querier keeps track of which client is requesting which channel by IP address When a leave message is received the querier can check its internal table to see if there are any more clients on this group If there are none it immediately sends an IGMP leave message to the upstream querier Log Enable If set to on all IGMP messages on both the LAN and the WAN will be logged Wireless Multicast to Unica...

Страница 160: ...ing queried on this interface The default is 2 set igmp fast leave off on Sets fast leave on or off Set to off by default fast leave enables a non standard expedited leave mech anism The querier keeps track of which client is requesting which channel by IP address When a leave message is received the querier can check its internal table to see if there are any more clients on this group If there a...

Страница 161: ... most networks is the network number followed by 255 For example the broadcast address for the 192 168 1 0 network would be 192 168 1 255 set ip dsl vccn netmask netmask Specifies the subnet mask for the TCP IP network connected to the virtual circuit The subnet mask specifies which bits of the 32 bit binary IP address represents network information The default subnet mask for most networks is 255...

Страница 162: ...for a publicly advertised IP address on the WAN interface set ip dsl vccn unnumbered on off Specifies whether you want the Motorola Netopia Gateway to have its WAN interface unnumbered i e set to 0 unnumbered option is only available if the address is set to 0 for the interface Enables or disables unnumbered IP addressing where an address of 0 is allowed AND the DHCP client is disabled on the spec...

Страница 163: ...ast broadcast_address Specifies the broadcast address for the local Ethernet interface IP hosts use the broadcast address to send messages to every host on your network simultaneously The broadcast address for most networks is the network number followed by 255 For example the broadcast address for the 192 168 1 0 network would be 192 168 1 255 set ip ethernet A netmask netmask Specifies the subne...

Страница 164: ...s routing tables with information received from other Gateways on your network If you specify v2 MD5 you must also specify a rip receive key Keys are ASCII strings with a maximum of 31 characters and must match the other Gateway s keys for proper operation of MD5 support Additional subnets See DHCP Settings on page 149 for subnet range configuration commands set ip ethernet A subnet 2 8 option on ...

Страница 165: ... address ip_address Specifies the IP address of the peer on the other end of the PPP link If you specify an IP address other than 0 0 0 0 your Motorola Netopia Gateway will not negotiate the remote peer s IP address If the remote peer does not accept the address in the ip_address argument as its IP address typically because it has been configured with another IP address the link will not come up T...

Страница 166: ... This last feature reduces the load on hosts which do not support routing protocols RIP 2 with MD5 authentication is an extension of RIP 2 that increases security by requiring an authentication key when routes are advertised This command is only available when address mapping for the specified virtual circuit is turned off If you specify v2 MD5 you must also specify a rip send key Keys are ASCII s...

Страница 167: ...e Motorola Netopia Gateway static ARP table set ip static arp ip address ip_address Specifies the IP address for the static ARP entry Enter an IP address in the ip_address argument in dotted decimal format The ip_address argument cannot be 0 0 0 0 set ip static arp ip address ip_address hardware address MAC_address Specifies the Ethernet hardware address for the static ARP entry Enter an Ethernet ...

Страница 168: ...tly if the end point nodes provide TOS settings from an application that can be interpreted as one of the supported states the Gateway will handle it as if it actively marked the TOS field itself NOTE The Gateway itself will not override TOS bit settings made by the endpoints Support for source provided IP TOS priorities within the Gateway is achieved simply by turning the Diff Serve option on and...

Страница 169: ...s equal to zero this check is ignored for outbound packets The check is always ignored for inbound packets The DiffServe queuing func tion must be applied ahead of NAT and before NAT re maps the inbound packets all inbound pack ets are destined for the Gateway s WAN IP address outside ip mask If you want packets destined for and originating from a certain WAN IP address to be marked enter this add...

Страница 170: ...network control set diffserv qos dscp map 31 best effort assured expedite network control By default the following settings are used in custom mode set diffserv qos dscp map 0 best effort set diffserv qos dscp map 1 best effort set diffserv qos dscp map 2 best effort set diffserv qos dscp map 3 best effort set diffserv qos dscp map 4 best effort set diffserv qos dscp map 5 assured set diffserv qos...

Страница 171: ...qos dscp map 25 network control set diffserv qos dscp map 26 network control set diffserv qos dscp map 27 network control set diffserv qos dscp map 28 network control set diffserv qos dscp map 29 network control set diffserv qos dscp map 30 network control set diffserv qos dscp map 31 network control ...

Страница 172: ...g a group of basic queues assign a queue instance to the Ethernet WAN interface map packet attributes to a queue The same queue name can be assigned to multiple interfaces which require identical queue configura tion however currently the only interface available for queueing configuration is ethernet 1 The first two queuing stages only handle packets in relative terms priority wise or percentage ...

Страница 173: ...l Funnel Queue Basic Queue set queue name basic_queue_name option on off set queue name basic_queue_name type basic Specifies the Basic Queue named basic_queue_name attributes Basic queues have one input and one output The basic queue is assigned an ID with the following attribute when the queue is full dis card By default the following Basic Queues are created basic_q0 basic_q1 basic_q2 basic_q3 ...

Страница 174: ...ndi cates the bandwidth used for each queue share bw if enabled the bandwidth for this queue can be shared between other queues when idle limit bw if enabled then the transmit bandwidth for that queue is limited to the weight ratio if the WFQ type is relative or the specified bps if the WFQ type is bps Therefore if queue X has limit bw enabled and any other queues have share bw enabled then queue ...

Страница 175: ...ative priority of queue reserve_bps_value minimum guaranteed bandwidth for a priority queue entry Example If a low priority queue has a reserve bps of 512000bps and the link is getting saturated with a higher pri ority queue the low priority queue will still use 512kbps The lower the number the higher the priority of the queue default input specifies the default input queue name By default the fol...

Страница 176: ...t queue name wfq 100kbps option on set queue name wfq 100kbps type funnel set queue name wfq 100kbps input wfq set queue name wfq 100kbps bps 100000 Interface Queue Assignment The WAN ethernet queue is assigned as follows set ethernet ethernet ip ethernet B ip ppp vccn tx queue queue_name By default the WAN ethernet interface is assigned the default priority queue set ethernet ethernet B tx queue ...

Страница 177: ...lt Gateway must be located on a network connected to the Motorola Netopia Gateway configured interface set ip static routes destination network net_address metric integer Specifies the metric hop count for the static route The default metric is 1 Enter a number from 1 to 15 for the integer argument to indicate the number of Gateways actual or best guess a packet must traverse to reach the remote n...

Страница 178: ... arbitrary port numbers when a connection is being opened By identifying your computer or another host on your network as a NAT default server you can specify that NAT traffic that would other wise be discarded by the Motorola Netopia Gateway should be directed to a specific hosts set nat default mode off default server ip passthrough Specifies whether you want your Motorola Netopia Gateway to for...

Страница 179: ...me name Specifies the identifier for the entry in the Gateway s pinhole table You can name pinhole table entries sequentially 1 2 3 by port number 21 80 23 by protocol or by some other naming scheme set pinhole name name protocol select tcp udp Specifies the type of protocol being redirected set pinhole name name external port start 0 49151 Specifies the first port number in the range being transl...

Страница 180: ...e Maximum Receive Unit MRU for the PPP interface The integer argument can be any number between 128 and 1492 for PPPoE 1500 otherwise set ppp module vccn magic number on off Enables or disables LCP magic number negotiation set ppp module vccn protocol compression on off Specifies whether you want the Motorola Netopia Gateway to compress the PPP Protocol field when it transmits datagrams over the P...

Страница 181: ...re terminating the PPP link The integer argument can be any number between 1 and 10 set ppp module vccn restart timer integer Specifies the number of seconds the Motorola Netopia Gateway should wait before retransmitting a configuration or termination request The integer argument can be any number between 1 and 30 set ppp module vccn connection type instant on always on Specifies whether a PPP con...

Страница 182: ...pia Gateway before the link can be estab lished set ppp module vccn port authentication option off on pap only chap only Specifying on turns both PAP and CHAP on or you can select PAP or CHAP Specify the username and password when port authentication is turned on both CHAP and PAP CHAP or PAP Authentication must be enabled before you can enter other information set ppp module vccn port authenticat...

Страница 183: ...0 0 0 set ip ethernet C broadcast 0 0 0 255 set ip ethernet C netmask 255 255 255 0 set ip ethernet C restrictions admin disabled set ip ethernet C addr mapping on set ip ethernet C dns acquired dns priority 20 set ip ethernet C mcast fwd on set ip ethernet C igmp null source addr off set ip ethernet C tx queue none set ip ethernet C unnumbered off set ip ethernet C rip receive off set ip ethernet...

Страница 184: ...sables multi cast forwarding on the specified interface If set to on this interface acts as an IGMP proxy host and IGMP packets are transmitted and received on this interface on behalf of IGMP hosts on the LAN interface See IGMP Settings on page 158 for more information set ip ip ppp vcc1 igmp null source addr off on Enables or disables IGMP null source address if mcast fwd is set to on If enabled...

Страница 185: ...eeps alive the Link connectivity and reports faults if the link goes down Supported OAM request and response types are remote loopback enable remote loopback disable variable request variable response set ethernet oam ah option off on Enables or disables Ethernet OAM Default is off set ethernet oam ah pass through off on Enable or disable Ethernet OAM pass through mode Default is off Warning This ...

Страница 186: ...nterface dis plays help for a node when you navigate to that node set preference more lines Specifies how many lines of information you want the command line interface to display at one time The lines argument specifies the number of lines you want to see at one time The range is 1 65535 By default the command line interface shows you 22 lines of text before displaying the prompt More y n If you e...

Страница 187: ...o use the appropriate port when opening a configuration connection to your Motorola Netopia Gateway set servers web http 1 65534 Specifies the port number for HTTP web communication with the Motorola Netopia Gateway Because port numbers in the range 0 1024 are used by other protocols you should use numbers in the range 1025 65534 when assigning new port numbers to the Motorola Netopia Gateway web ...

Страница 188: ...connecting the Motorola Netopia unit in a telecommuting scenario the corporate VPN settings will dictate the settings to be used in the Motorola Netopia unit If a parameter has not been specified from the other end of the tunnel choose the default unless you fully understand the ramifications of your parameter choice set security ipsec option off on off Turns on the SafeHarbour IPsec tunnel capabi...

Страница 189: ...te Aggressive Mode is a little faster but it does not provide identity protection for negotiations nodes set security ipsec tunnels name 123 IKE mode DH group 1 2 5 See page 193 for details about SafeHarbour IPsec tunnel capability set security ipsec tunnels name 123 IKE mode isakmp SA encrypt DES 3DES See page 193 for details about SafeHarbour IPsec tunnel capability set security ipsec tunnels na...

Страница 190: ... tunnel The default is off set security ipsec tunnels name 123 nat pat address ip address Specifies the NAT port address translation IP address for the specified IPsec tunnel set security ipsec tunnels name 123 local id type IP address Subnet Hostname ASCII Specifies the NAT local ID type for the specified IPsec tunnel when Aggressive Mode is set set security ipsec tunnels name 123 local id id_val...

Страница 191: ...soft seconds 82800 60 1000000 set security ipsec tunnels name 123 IKE mode ipsec hard mbytes 1200 1 1000000 set security ipsec tunnels name 123 IKE mode ipsec hard seconds 86400 60 1000000 The soft parameters designate when the system begins to negotiate a new key For example after 82800 seconds 23 hours or 1 Gbyte has been transferred whichever comes first the key will begin to be renegotiated Th...

Страница 192: ...ss Subnet Hostname ASCII Local ID Address Value Local ID Mask Remote ID Type IP Address Subnet Hostname ASCII Remote ID Address Value Remote ID Mask Pre Shared Key Type HEX ASCII Pre Shared Key DH Group 1 2 5 PFS Enable Off On SA Encrypt Type DES 3DES SA Hash Type MD5 SHA1 Invalid SPI Recovery Off On Soft MBytes 1 1000000 Soft Seconds 60 1000000 Hard MBytes 1 1000000 Hard Seconds 60 1000000 IPSec ...

Страница 193: ...rea Network LAN address of the remote gateway or VPN Server you are communicating with Peer Internal Netmask The Peer Internal IP Netmask is the subnet mask of the Peer Internal IP Network NAT enable Turns NAT on or off for this tunnel PAT Address If NAT is enabled this field appears You can specify a Port Address Translation PAT address or leave the default all zeroes if Xauth is enabled If you l...

Страница 194: ...1 and 1 000 000 MB and refers to data traffic passed If this value is not achieved the Hard MBytes parameter is enforced This parameter does not need to match the peer gateway Soft Seconds Setting the Soft Seconds parameter forces the renegotiation of the IPSec Security Asso ciations SAs at the configured Soft Seconds value The value can be configured between 60 and 1 000 000 seconds This paramete...

Страница 195: ... access to the user s central office IKE establishes the tunnel and Xauth authenticates the specific remote user s Gateway Since NAT is supported over the tunnel the remote user network can have multiple PCs behind the client Gateway accessing the VPN By using XAuth network VPN managers can centrally control remote user authentication Xauth Username Password Xauth authentication credentials Table ...

Страница 196: ...lue of tcp seq diff is 0 it means that this check is disabled set security state insp ip ppp dsl vccn deny fragments off on set security state insp ethernet A B deny fragments off on Sets whether fragmented packets are allowed to be received or not on the specified interface set security state insp tcp timeout 30 65535 Sets the stateful inspection TCP timeout interval in seconds set security state...

Страница 197: ...quad format 32 exposed addresses can be created The range for exposed address numbers are from 1 through 32 set security state insp xposed addr exposed address n protocol tcp udp both any Sets the protocol for the stateful inspection feature for the exposed address list Accepted values for protocol are tcp udp both or any If protocol is not any you can set port ranges set security state insp xpose...

Страница 198: ...the specified filter rule A match on this rule resets idle timeout status and keeps the WAN connection alive The default is off For idle reset to be displayed forward must be enabled on a filter rule set security pkt ﬁlter ﬁlterset ﬁlterset name input_ﬁlter output_ﬁlter index frc rte on off Turns forced routing on or off for the specified filter rule A match on this rule will force a route for pac...

Страница 199: ..._ﬁlter output_ﬁlter index tos mask value Specifies the TOS Type Of Service mask to match packets The value for tos mask can be from 0 255 set security pkt ﬁlter ﬁlterset ﬁlterset name input_ﬁlter output_ﬁlter index protocol value Specifies the protocol value to match packets the type of higher layer Internet protocol the packet is carrying such as TCP or UDP The value for protocol can be from 0 25...

Страница 200: ...src port does not display if nc is set for src compare or dst compare set security pkt ﬁlter ﬁlterset ﬁlterset name input_ﬁlter output_ﬁlter index dst port value Specifies the destination IP port to match packets the port on the receiving host that the packet is destined for if the underlying protocol is TCP or UDP dst port does not display if nc is set for src compare or dst compare set security ...

Страница 201: ...ment is the IP address of the host acting as an SNMP console set snmp sysgroup contact contact_info Identifies the system contact such as the name phone number beeper number or email address of the person responsible for the Motorola Netopia Gateway You can enter up to 255 characters for the contact_info argument You must put the contact_info argument in double quotes if it contains embedded space...

Страница 202: ...is part of this type of network do NOT alter the System Name unless specifically instructed by your Service Provider set system diagnostic level off low medium high alerts failures Specifies the types of log messages you want the Motorola Netopia Gateway to record All messages with a level equal to or greater than the level you specify are recorded For example if you specify set system diagnostic ...

Страница 203: ...word admin user Specifies the administrator or user password for a Motorola Netopia Gateway When you enter the set system password command you are prompted to enter the old password if any and new password You are prompted to repeat the new password to verify that you entered it correctly the first time To prevent anyone from observing the password you enter characters in the old and new pass word...

Страница 204: ... is 20 in the above layout each heartbeat sequence will send out a total 20 heartbeats spaced at 30 second intervals and then sleep for 30 minutes So to have the Gateway send out packets forever this number can be set very high If it is 1440 and the interval is 1 minute say the heartbeat will go out every minute for 1440 minutes or one day before sleeping The sleep setting is part of sequence cont...

Страница 205: ...he Internet will succeed If the zero touch option is set to on HTTP requests to any destination IP address except the IP address es of the configured redirection URL s will access a redirection server DNS traffic will not be blocked Other traf fic from the LAN to all destinations will be dropped set system zerotouch redirect url redirection URL Specifies the URL s of the desired redirection server...

Страница 206: ...her in dotted decimal format or as a DNS name up to 64 char acters set system syslog log facility local0 local7 Sets the UNIX syslog Facility Acceptable values are local0 through local7 set system syslog log violations off on Specifies whether violations are logged or ignored set system syslog log accepted off on Specifies whether acceptances are logged or ignored set system syslog log attempts of...

Страница 207: ...t the IP Address of the syslog host set system syslog host nameip ip addr example set system syslog host nameip 10 3 1 1 Enable change the options you require set system syslog log facility local1 set system syslog log violations on set system syslog log accepted on set system syslog log attempts on 4 Set NTP parameters Type config Set the time zone Default is 0 or GMT set system ntp time zone zon...

Страница 208: ...tion can have a significant impact on performance depending on other wireless activity in proximity to this AP Channel selection is not necessary at the clients clients will scan the available channels and look for APs using the same ssid as the client set wireless network id closed system on off When this setting is enabled a client must know the ssid in order to connect or even see the wireless ...

Страница 209: ...second ssid privacy off WEP WPA PSK WPA 802 1x set wireless multi ssid third ssid privacy off WEP WPA PSK WPA 802 1x set wireless multi ssid fourth ssid privacy off WEP WPA PSK WPA 802 1x Specifies the type of privacy enabled on multiple SSIDs when multi ssid option is set to on off no privacy WEP WEP encryption WPA PSK Wireless Protected Access Pre Shared Key WPA 802 1x Wireless Protected Access ...

Страница 210: ...o break the encryption set wireless multi ssid second ssid wepkey hexadecimal digits set wireless multi ssid third ssid wepkey hexadecimal digits set wireless multi ssid fourth ssid wepkey hexadecimal digits Specifies a WEP key for the multiple SSIDs when second third or fourth ssid privacy is set to WEP For 40 64bit encryption you need 10 digits 26 digits for 128bit and 58 digits for 256bit WEP V...

Страница 211: ... cwmax Valid values are 1 3 7 15 31 63 127 255 or 511 cwmax Maximum Contention Window upper limit in milliseconds of the range of determining final random backoff The value you choose must be higher than cwmin Valid values are 3 7 15 31 63 127 255 511 or 1023 txoplimit Time interval in microseconds that clients may initiate transmissions Valid values are 0 9999 NOTE It is not recommended that you ...

Страница 212: ... set wireless wmm client edca video cwmin value set wireless wmm client edca video cwmax value set wireless wmm client edca video txoplimit 0 9999 Sets values for client WMM video parameters set wireless wmm client edca best effort aifs 1 255 set wireless wmm client edca best effort cwmin value set wireless wmm client edca best effort cwmax value set wireless wmm client edca best effort txoplimit ...

Страница 213: ...e WEP enabled client must have the identical key of the same length in the identical slot 1 4 as the wire less Gateway in order to successfully receive and decrypt the packet Similarly the client also has a default key that it uses to encrypt its transmissions In order for the wireless Gateway to receive the client s data it must likewise have the identical key of the same length in the same slot ...

Страница 214: ...ers are 0 9 a f Example 40bit key 02468ACE02 Example 128bit key 0123456789ABCDEF0123456789 Example 256bit key 592CA140F0A238B0C61AE162F592CA140F0A238B0C61AE162F21A09C You must set at least one of these keys indicated by the default keyid Wireless MAC Address Authorization Settings set wireless mac auth option on off Enabling this feature limits the MAC addresses that are allowed to access the LAN ...

Страница 215: ...rver Settings set radius radius name server_name_string Specifies the default RADIUS server name or IP address set radius radius secret shared_secret Specifies the RADIUS secret key used by this server The shared secret should have the same charac teristics as a normal password set radius alt radius name server_name_string Specifies an alternate RADIUS server name or IP address to be used if the p...

Страница 216: ... If you set this to a value greater than 0 all packets of this VLAN with unmarked priority bits pbits will be re marked to this priority set vlan name name ports port option off on Enables or disables the Gateway s physical Ethernet USB or VCC port or wireless SSID for the speci fied VLAN set vlan name name ports port tag off on If set to on packets transmitted from this port through this VLAN mus...

Страница 217: ...ed group to route traffic to the others ungrouped VLANs cannot route traffic to each other You must save the changes exit out of configuration mode and restart the Gateway for the changes to take effect Example 1 A simple example using the Step method Navigate to the VLAN item Netopia 3000 9437188 top vlan Netopia 3000 9437188 vlan set vlan vlan node list Select name node to modify from list or en...

Страница 218: ...vlan name LanPorts ip interfaces ip eth c option off set vlan name LanPorts ip interfaces ip eth a option on set vlan name LanPorts inter vlan routing group 1 on set vlan name LanPorts inter vlan routing group 2 off set vlan name LanPorts inter vlan routing group 3 off set vlan name LanPorts inter vlan routing group 4 off set vlan name Voip_217 type global set vlan name Voip_217 id 217 set vlan na...

Страница 219: ...orts eth1 priority off set vlan name Mgmt_2017 ports eth1 promote off set vlan name Mgmt_2017 ports eth1 port pbits 0 set vlan name Mgmt_2017 ip interfaces ip ppp a option off set vlan name Mgmt_2017 ip interfaces ip eth b option off set vlan name Mgmt_2017 ip interfaces ip eth c option on set vlan name Mgmt_2017 ip interfaces ip eth a option off set vlan name Mgmt_2017 inter vlan routing group 1 ...

Страница 220: ...31 inter vlan routing group 2 off set vlan name Video_31 inter vlan routing group 3 off set vlan name Video_31 inter vlan routing group 4 off You must save the changes exit from configuration mode and restart the Gateway for the changes to take effect ...

Страница 221: ...et x will show IP over Ethernet over VDSL Ethernet WAN ppp enet x will show PPP over Ethernet over VDSL Ethernet WAN set voip phone 1 2 sip option off on Turns SIP on or off for the specified phone Default is off set voip phone 1 2 sip proxy server server_name ip_address Specifies the SIP proxy server for the specified phone by fully qualified server name or IP address set voip phone 1 2 sip proxy...

Страница 222: ...ame username Specifies the user name that authenticates the user to SIP for the specified phone set voip phone 1 2 sip user password password Specifies the password that authenticates the user to SIP for the specified phone set voip phone 1 2 auth id string Specifies the authorization ID that authenticates the user to SIP for the specified phone Most SIP Serv ers expect this to be the username its...

Страница 223: ...Dual Tone Multi Frequency Mode inband sends the DTMF digits as a normal inband tone rfc2833 sends the DTMF digits as an event as part of the RTP packet header information info sends the DTMF digits in the SIP INFO message set voip phone 1 2 sip advanced setting sip digit map string Specifies rules used to recognize a number dialed by the user and to ensure this number matches the dial plan defined...

Страница 224: ... busy on or off set voip phone 1 2 sip advanced setting call feature call forwarding on busy number option off on call forwarding on busy number option turns call forwarding when the phone is busy on another call on or off set voip phone 1 2 sip advanced setting call feature call forwarding on no answer option off on call forwarding on no answer option turns call forwarding when there is no answer...

Страница 225: ...ed setting dsp settings echo option echo off echo on echo on nlp echo on cng nlp echo option specifies under what conditions the system invokes or disables echo cancellation Default is echo on cng nlp Comfort Noise Generation with non linear processor set voip phone 1 2 sip advanced setting dsp settings echo start attenuation 0 65535 echo start attenuation specifies the minimum attenuation level a...

Страница 226: ...6 set voip phone 1 sip advanced setting sip compact header off set voip phone 1 sip advanced setting sip q value 10 set voip phone 1 sip advanced setting sip qos tos value 40 set voip phone 1 sip advanced setting rtp qos tos value 184 set voip phone 1 sip advanced setting call feature call forwarding all option on set voip phone 1 sip advanced setting call feature call forwarding all number 1234 s...

Страница 227: ...t upnp log off on Enables or disables UPnP logging set upnp read only off on Enables or disables DSL Forum settings TR 064 is a LAN side DSL CPE configuration specification and TR 069 is a WAN side DSL CPE Manage ment specification TR 064 DSL Forum LAN Side CPE Configuration TR 064 is an extension of UPnP It defines more services to locally manage the Motorola Netopia Gateway While UPnP allows ope...

Страница 228: ...f cpewan option off on set dslf cpewan acs url acs_url port_number set dslf cpewan acs user name acs_username set dslf cpewan acs user password acs_password Turns TR 069 WAN side management services on or off For 3300 Series Gateways the default is off for 2200 Series Gateways the default is on If TR 069 WAN side management services are enabled specifies the auto config server URL and port number ...

Страница 229: ... disables remote management via web UI of the network specified by network n netmask n set remote mgmt snmp enable on off Enables or disables remote management via SNMP of the network specified by network n netmask n set remote mgmt network 1 network 10 ip_addr Specifies the IP address for the network 1 10 to be remotely managed set remote mgmt netmask 1 netmask 10 netmask Specifies the subnet mas...

Страница 230: ...system to wait before the backup port becomes enabled in the event of primary line failure when backup option is set to automatic Sets the Default is 1 set backup ping host 1 option name address set backup ping host 1 hostname ip address set backup ping host 1 ip address ip_address set backup ping host 1 hostname hostname set backup ping host 2 option name address set backup ping host 2 hostname i...

Страница 231: ...ion on or off Default is off set ip backup gateway interface ip address ppp vccn Specifies the backup gateway interface ip address to which you want to direct the backup connection set ip backup gateway default ip_address Specifies the ip address of the default gateway ...

Страница 232: ...0000 0xffff min noise margin 0x0000 0xffff port bandplan 0x00 xff framing mode 0x00 0xff band mod 0x00 0xff port option 0x00 0xff power mode 0x00 0xff tx ﬁlter 0x00 0xff rx ﬁlter 0x00 0xff dying gasp off on VDSL Parameter Defaults Parameter Default Meaning sys option 0x00 VDSL system option bit0 ntr 1 margin 2 ini 3 pbo 4 tlan 5 pbo sys bandplan 0x02 VDSL system bandplan bp_3_998_4 2 bp4_997_3 3 b...

Страница 233: ...target noise margin min noise margin 0x0A VDSL port minimum noise margin port bandplan 0x02 VDSL port bandplan framing mode 0x90 DSL port frame mode 0 ATM 0x80 PTM 0x90 Auto EFM PTM band mod 0x11 VDSL port band mod port option 0x0A Annex B 0x06 Annex A VDSL port portoption bit0 I43 bit1 v43 bit2 a43 bit3 b43 power mode 0x01 VDSL port power mode tx ﬁlter 0x02 VDSL port txPathFilterMode rx ﬁlter 0x0...

Страница 234: ...to retrain at higher rates but less stable line sys bandplan BP1_998_3 0x00 BP2_998_3 0x01 BP998_3B_8_5M 0x01 BP3_998_4 0x02 BP998_4B_12M 0x02 BP4_997_3 0x03 BP997_3B_7_1M 0x03 BP5_997_3 0x04 BP6_997_4 0x05 BP997_4B_7_1M 0x05 BP7_MXU_3 0x06 FLEX_3B_8_5M 0x06 BP8_MXU_2 0x07 BP9_998_2 0x08 BP10_998_2 0x09 BP998_2B_3_8M 0x09 BP11_998_2 0x0A BP12_998_2 0x0B BP13_MXU_3 0x0C BP14_MXU_3 0x0D BP15_MXU_3 0...

Страница 235: ...am band in the PSD Upstream Band 0 or Optional band Upstream band 1 Upstream band 2 and Upstream Band 3 Setting all K2 parameters to 0 and all K1 to a high power level ie low number will essentially disable UPBO pbo k1_2 pbo k1_3 pbo k2_1 pbo k2_2 pbo k2_3 line type VDSL_AUTO_DETECT 0x80 VDSL 0x81 VDSL_ETSI 0x82 us max inter delay Maximum upstream interleave delay Provisioned in steps of 0 5 ms Us...

Страница 236: ...0x09 BP998_2B_3_8M 0x09 BP11_998_2 0x0A BP12_998_2 0x0B BP13_MXU_3 0x0C BP14_MXU_3 0x0D BP15_MXU_3 0x0E BP16_997_4B_4P 0x0F BP17_998_138_4400 0x10 BP18_997_138_4400 0x11 BP19_997_32_4400 0x12 BP20_998_138_4400_opBand 0x15 BP21_997_138_4400_opBand 0x16 BP22_998_138_4400_opBand 0x16 BP23_998_138_16000 0x17 BP24_998_3B_8KHZ 0x18 BP25_998_138_17600 0x19 BP26_CH1_3 0x1A BP27_CH1_4 0x1B framing mode HDL...

Страница 237: ... 5dBm power output 1 11 5 dBm power output tx ﬁlter 0 using internal ﬁlter in Tx path 1 using K1 external ﬁlter in Tx path for Korea VLR Application 2 using U1 external ﬁlter in Tx path for US Korea VLR Application 3 using H1 external ﬁlter in Tx path for 100 100 Application rx ﬁlter 0 using internal ﬁlter in Rx path 1 using K1 external ﬁlter in Rx path for Korea VLR Application 2 using U1 externa...

Страница 238: ...Administrator s Handbook 238 ...

Страница 239: ...put Environment Operating temperature 0 to 40 C Storage temperature 0 to 70 C Relative storage humidity 20 to 80 noncondensing Software and protocols Software media Software preloaded on internal flash memory field upgrades done via download to internal flash memory via TFTP or web upload Routing TCP IP Internet Protocol Suite RIP WAN support PPPoE DHCP static IP address Security PAP CHAP UI passw...

Страница 240: ...area of product design including RF emissions and immunity from electrical disturbances The Motorola Netopia Embedded Software Version 7 8 complies with the following EU directives Low Voltage 73 23 EEC EMC Compatibility 89 336 EEC conforming to EN 55 022 This Motorola product is in conformity with the essential requirements and other relevant requirements of the Radio Equipment and Telecommunicat...

Страница 241: ... equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help Service requirements In the event of equipment malfunction if under warranty we will exchange a product deemed defective Under FCC rules no customer is authorized to repair this equipment This restriction ...

Страница 242: ...ace The termination on an interface may consist of any combination of devices subject only to the requirement that the sum of the Ringer Equivalence Numbers of all the devices does not exceed 5 Important Safety Instructions Australian Safety Information The following safety information is provided in conformance with Australian safety requirements Caution DO NOT USE BEFORE READING THE INSTRUCTIONS...

Страница 243: ...s and requirements adopted by the ACTA A compliant telephone cord and modular plug is provided with this product It is designed to be connected to a compatible modular jack that is also compliant See installation instructions for details d The REN is used to determine the number of devices that may be connected to a telephone line Excessive RENs on a telephone line may result in the devices not ri...

Страница 244: ...NTY IF YOU DO NOT ACCEPT THESE TERMS PLEASE IMMEDIATELY RETURN THE GATEWAY IN ITS ORIGINAL PACKAGING TO THE VENDOR FROM WHICH YOU PURCHASED IT FOR A FULL REFUND OF THE PURCHASE PRICE The following describes your license to use the software the Software that has been provided with the Product and the limited warranty that Motorola provides on the Software and Product Software License The Software i...

Страница 245: ...OVE Motorola AND ITS LICENSOR S DO NOT WARRANT GUARANTEE OR MAKE ANY REPRESENTATION REGARDING THE USE OR THE RESULTS OF THE USE OF THE PRODUCT AND THE SOFTWARE IN TERMS OF ITS CORRECTNESS ACCURACY RELIABILITY CURRENTNESS OR OTHERWISE THE ENTIRE RISK AS TO THE RESULTS AND PERFORMANCE OF THE PRODUCT AND THE SOFTWARE IS ASSUMED BY YOU THE EXCLUSION OF IMPLIED WARRANTIES IS NOT PERMITTED BY SOME STATE...

Страница 246: ... com The implementation was written so as to conform with Netscape s SSL This library is free for commercial and non commercial use as long as the following conditions are adhered to The following conditions apply to all code found in this distribution be it the RC4 RSA lhash DES etc code not just the SSL code The SSL documentation included with this distribution is covered by the same copyright t...

Страница 247: ... derived from the RSA Data Security Inc MD4 Message Digest Algorithm in all material mentioning or referencing the derived work RSA Data Security Inc makes no representations concerning either the merchantability of this software or the suitability of this software for any particular purpose It is provided as is without express or implied warranty of any kind These notices must be retained in any ...

Страница 248: ...he este producto junto con sus residuos residenciales o com erciales Algunos países o regiones tales como la Unión Europea han organizado sistemas para recoger y reciclar desechos eléctricos y elec trónicos Comuníquese con las autoridades locales para obtener infor mación acerca de las prácticas vigentes en su región Si no existen sistemas de recolección disponibles solicite asistencia llamando el...

Страница 249: ...ião Européia criaram siste mas para colecionar e reciclar produtos eletroeletrônicos Para obter informações sobre as práticas estabelecidas para sua região entre em contato com as autoridades locais Se não houver sistemas de coleta disponíveis entre em contato com o Serviço ao Cliente da Motorola para obter assistência Återvinning av din Motorola utrustning Kasta inte denna produkt tillsammans med...

Страница 250: ...Administrator s Handbook 250 Please visit www motorola com recycle http www motorola com recycle for instructions on recycling ...

Страница 251: ...42 Closed System Mode 29 88 Command ARP 129 140 Ping 131 Telnet 139 Command line interface see CLI Community 201 Compression protocol 180 Concurrent Bridging Routing 61 148 CONFIG Command List 126 Configuration mode 141 Configure 60 Connection 61 Custom Service 45 70 D Default Channel 28 87 DHCP 11 149 DHCP filtering 153 DHCP lease table 132 DHCP option filtering 153 DHCP Server 64 Diagnostic log ...

Страница 252: ...ts 65 Multiple Wireless IDs 36 95 Multiple Wireless SSIDs Wireless 209 N Nameserver 156 NAT 43 67 165 178 Netmask 163 O set upnp option 227 Operating Mode Wireless 28 87 208 P Password Administrator 127 User 127 persistent log 203 Ping command 131 Pinholes 178 Port authentication 182 Port Forwarding 45 70 Port renumbering 187 PPP 140 Primary nameserver 156 Prompt CLI 128 141 Protocol compression 1...

Страница 253: ...ands 128 Prompt 128 SHELL level 141 SHELL mode 128 show config 133 Show ppp 140 Simple Network Management Protocol SNMP 201 SIP 81 221 sip passthrough 167 SMTP 178 SNMP 178 201 SNMP Notify Type settings 201 stateful inspection 136 Static NAT 46 71 Static route 176 Statistics 51 102 status indicator lights 112 Step mode 142 Subnet mask 163 subnets multiple 65 Supported Games and Software 44 68 Syst...

Страница 254: ...Administrator s Handbook 254 Z Zero Touch 205 ...

Результаты поиска

Содержание Netopia 3300

Отзывы:

Похожие инструкции для Netopia 3300

Бренды по названию

Популярные бренды

Motorola Netopia 3300, Руководство администратора

Результаты поиска

Содержание Netopia 3300

Отзывы:

Похожие инструкции для Netopia 3300

Бренды по названию

Популярные бренды