User manual ISKRATEL SI2000 CALLISTO821 ROUTER

[. . . ] SI2000 CALLISTO821+ ROUTER USERS GUIDE Copyright© 2005 Iskratel, Ltd. All rights reserved. SI2000 Callisto821+ Router Users Guide Index: 1 1. 1 1. 2 1. 2. 1 1. 2. 2 1. 3 2 2. 1 2. 1. 1 SI2000 Callisto821+ Router Features of SI2000 Callisto821+ Router Using SI2000 Callisto821+ Router Internet access Security Package contents Getting started Installation of hardware Ports WAN RES (Reset button) Ethernet 10Base-T/100Base-T port AC power socket Light indicators Ethernet (UTP) cables Preliminary setup LAN and TCP/IP setup User defined IP address Obtain an IP automatically Telnet management connection WEB management connection Managing SI2000 Callisto821+ Router Telnet management CLI terminology Transport Interface Object List Example: Attaching a transport to an interface CLI command groups CLI conventions add delete clear set show Help with completing CLI commands User accounts Adding new users User passwords Changing user settings WEB management About WEB management Status Quick start System Configuration Status page Status Advanced Diagnostics Port Connection Status 6 6 6 6 7 7 8 8 8 8 8 8 9 9 10 11 11 11 12 12 13 17 17 17 17 17 18 18 18 18 20 20 20 20 21 21 21 22 23 23 24 24 24 25 25 25 25 26 26 26 26 2. 1. 2 2. 1. 3 2. 2 2. 2. 1 2. 2. 2 2. 2. 3 3 3. 1 3. 1. 1 3. 1. 2 3. 1. 3 3. 1. 4 3. 1. 5 3. 2 3. 2. 1 3. 2. 2 2/107 SI2000 Callisto821+ Router Users Guide 3. 2. 3 3. 2. 4 3. 3 3. 3. 1 3. 3. 2 3. 4 3. 4. 1 3. 4. 2 3. 5 3. 5. 1 4 4. 1 4. 2 4. 3 4. 4 4. 5 4. 6 4. 7 4. 7. 1 4. 8 5 5. 1 5. 2 5. 2. 1 5. 2. 2 5. 2. 3 5. 3 5. 4 5. 5 5. 6 WAN Status LAN Status Hardware Status Defined Interfaces System page Event Log Remote Access Firmware Update Backup / Restore Restart Router Configuration page Save Configuration Authentication LAN Connections WAN Connections Security ZIPB IP Routes DHCP server DHCP relay DNS client DNS relay Bridge Ports ADSL Port Ethernet ports System (backup, restore, reset) Backup / Restore Backup configuration Restore configuration Restart Restart Firmware upgrade Upgrade Update Bridged configurations Creating new bridged connection Changing ATM QoS parameters of the connection Changing scheduler profile Changing bridge interface settings Bridge settings Interface configuration VLAN Configuration Creating new VLAN Forward All/Unregistered Configuration Routed connections About routed configurations PPPoE routed Computer configuration Creating connection Modifying connection RFC1483 routed PPPoA routed IPoA routed PPPoE over Ethernet/Bridge routed 26 27 27 27 27 27 28 29 29 29 30 30 31 33 36 39 40 43 45 49 50 51 52 52 53 54 54 54 54 55 56 56 57 57 57 59 59 61 61 62 63 65 65 66 67 69 69 69 69 70 73 74 76 78 79 3/107 SI2000 Callisto821+ Router Users Guide 6 6. 1 6. 2 6. 2. 1 7 7. 1. 1 7. 1. 2 7. 1. 3 7. 1. 4 8 8. 1 8. 1. 1 8. 1. 2 8. 2 8. 2. 1 8. 2. 2 8. 2. 3 8. 3 8. 3. 1 8. 3. 2 8. 3. 3 9 9. 1 9. 1. 1 9. 1. 2 Quality of Service ATM Quality of Service Ethernet based Quality of Service Configuring Scheduler Listing current scheduler profiles Creating new scheduler profile Difference between priority and wf2qplus scheduling Internet Access Encapsulation IPoA RFC1483 PPPoE PPPoA VPI and VCI Multiplexing VC-based multiplexing LLC-based multiplexing WAN IP Address Security options Security Enabling security Enabling security Enabling Firewall and Intrusion Detection Setting a default security level Configuring security interfaces Configuring security interfaces NAT Global IP Address Pools Reserved Mappings DMZ Configuring NAT Configuring NAT NAT Global Address Configuring NAT global addresses NAT Reserved Mapping Configuring NAT reserved mapping Firewall Port Filtering Validators Triggers Intrusion Detection Firewall policies Configuring Firewall policies Configuring Portfilters Configuring Validators Triggers Configuring Triggers Intrusion Detection Settings Configuring Intrusion Detection Settings Troubleshooting Recovery mode Flash memory Main flash memory Recovery flash memory Updating main flash memory 82 82 82 83 83 84 84 86 86 87 87 87 87 87 88 88 88 89 90 90 91 91 91 91 91 91 92 93 93 93 93 93 94 94 96 96 97 98 98 98 98 98 98 99 101 102 102 104 104 106 106 106 106 106 106 4/107 SI2000 Callisto821+ Router Users Guide 9. 2 Configuring LAN interface on PC Updating flash memory Dealing with difficulties 106 107 107 5/107 SI2000 Callisto821+ Router Users Guide 1 SI2000 CALLISTO821+ ROUTER 1. 1 Features of SI2000 Callisto821+ Router Your SI2000 Callisto821+ Router router features: - high speed data transmission on single twisted copper pair for Internet access - full rate operations up to 24 Mbit/s in downstream - 10/100BaseT Ethernet port for LAN or PC connection - PPPoE (RFC2516) connection support for accessing the Internet - PPP over CHAP or PAP - support for PPP over ATM - support for IP over ATM - RFC1483 bridged and routed support - IEEE 802. 1q VLAN support - IEEE 802. 1p Ethernet based quality of service - DHCP server for easy IP address management including - DHCP relay - DNS client - DNS relaying - WEB management and Telnet management over CLI (Command Line Interface) for LAN users - firmware upgrade over WEB management - support for VC based and LLC based multiplexing - NAT (Network Address Translation) for single IP address Internet connection, used by the whole LAN community - firewall filtering functions, allowing better network security and management - intrusion detection 1. 2 Using SI2000 Callisto821+ Router 1. 2. 1 Internet access Your SI2000 Callisto821+ Router can also be used for high speed Internet connections. The TCP/IP standards, most commonly used for using the Internet, are supported by the router. The PPPoE connections in dial-up or dial-in mode are also possible. [. . . ] Default user priority is 802. 1p priority field used for untagged packets. Number of 802. 1p traffic classes bridge is aware of. Array of this fields is used to change priority of all traffic. Default value is 1-1 setting which does nothing. Used to map different 802. 1p priority classes into different output queues. Port Filter Port Pvid Ingress Filtering Status Frame Access Type Port Default User Priority Num Traffic Classes Regen Priority0 -7 Traffic Class Map0 - 7 4. 5 Bridge settings This chapter describes bridge operation inside Callisto821+. Bridge is a software process which forwards Ethernet packets from one interface to another. Interface can be physical Ethernet or virtual ATM connection with appropriate encapsulation method as described in previous chapters. Bridge can be configured from main bridge configuration page in Configuration section. 63/107 SI2000 Callisto821+ Router Users Guide Two parameters can be set on the main page: Name Filter Age Traffic Class Mapping Description Time in seconds bridge remembers previously learned MAC address. If this option is enabled, bridge will map traffic accordingly to 802. 1p header values to different output queues. This option basically enables or disables 802. 1p quality of service. On the bottom of main bridge configuration page there are several links which point to more specific settings. Interface Configuration is used for configuring bridge interfaces which are in most cases either physical Ethernet ports or virtual ATM connections. VLAN Configuration is the place to set VLAN behavior of the bridge. Forward All/Unregistered Configuration is used to define bridge's behavior for multicast Ethernet traffic. Interface Statistics/Flushing and VLAN Port Statistics is used for displaying various statistics information. 64/107 SI2000 Callisto821+ Router Users Guide 4. 6 Interface configuration This page displays all interfaces attached to the bridge. Usually there are WAN connections created by user as described in 4. 3. 1Creating new bridged connection and permanent LAN connections. Options available to change are the same as described in 4. 3. 4Changing bridge interface settings. Where ever they are changed the results will be the same. 4. 7 VLAN Configuration In this section you can set up VLAN configuration of the bridge module. Be aware that you must also setup 4. 3. 8Ethernet Switch accordingly otherwise VLANs will not work as expected. Each VLAN used in the system must be added into this section. For untagged traffic special VLAN with predefined name is created by default. Even if you delete it and would like to add it back later, you must use the same name and settings. Name:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] If the Callisto821+ is turned off or reset before the confirmation message 'saved' is displayed, the main part of flash memory is defected. The same problem occurs when upgrading firmware and the power supply is turned off during the procedure. Recovery flash memory The second part of flash memory is used for the SI2000 Callisto821+ Router to boot in recovery mode. In a case when the main part of flash memory is defected, the Callisto821+ will boot in recovery mode and you will have to manually write the data to the main partition. 9. 1. 2 Updating main flash memory In a case when the main part of flash memory is defected, the Callisto821+ will boot in recovery mode and you will have to manually update the main partition. The ethernet connection to your PC is still possible when Callisto821+ is running in recovery. [. . . ]