Solwise SAR110 Manuel utilisateur

Solwise Ltd

Advanced Reference Guide for

Solwise SAR110

ADSL Router

Please Note: Incorrect usage of CLI commands

can seriously damage the firmware settings

and configuration of your router to the extent

where you might be unable to reset/restore to

an operable state. We reserve the right to

charge for any faulty router returned for repair

which has user corrupted firmware or settings.

April 11, 2003

- 2 -

Notification is hereby given that Solwise Ltd. reserves the right to

modify, change, update or revise this document from time to time as

required without the prior obligation to notify any person, company

or organization. Further, Solwise makes no warranty or

representation, either express or implied, with respect to

merchantability, or fitness of its products for a particular purpose.

Solwise Ltd.

13/15 Springfield Way

Anlaby

Hull HU10 6RJ

Tel 0845 458 4558 (local rate)

Fax 0845 458 4559

Email [email protected]

Http www.solwise.co.uk

without written permission from the product manufacturer.

Changes are periodically made to the information in this document. They will be incorporated in

subsequent editions. The product manufacturer may take improvement and/or changes in the

product described in this document at any time.

- 3 -

Table of Contents

1Introduction..........................................................9

2Quick Start.........................................................11

3CLI Introduction.................................................12

4Unit Configuration..............................................13

4.1 Default Configuration................................................13

4.1.1 System Sizing Parameters........................17

4.2 Modifying the Unit’s MAC Address and

Serial Number..................................................................19

4.3 Modifying the Unit Configuration via Script

Files..................................................................................19

4.3.1 Notes on Using Script File

Configuration..........................................................20

4.4 Managing Configuration Changes...........................20

4.5 Using FTP/TFTP to Upgrade and Retrieve

the Flash Image...............................................................21

4.5.1 Data configuration Upgrade ......................22

4.5.2 Recovering from a Failed Upgrade ................22

5Interfaces and Operating Mode ........................24

5.1 Interfaces – Overview...............................................24

5.2 Configuring the Ethernet Port ..................................24

5.3 Configuring Virtual Ethernet Interfaces....................27

5.4 Configuring the WAN ATM Port...............................27

5.5 Configuring Permanent Virtual Circuits ...................28

5.5.1 AAL5 Data Encapsulation Method .................29

5.5.2 ATM Service Categories: UBR,

CBR, GFR, NRTVBR and RTVBR ....................30

5.6 Configuring Switched Virtual Circuits (SVCs)..........33

5.7 Configuring PPP Interfaces......................................36

5.7.1 Creating a Login Name and

Password for a PPP Interface.............................37

5.7.2 PPPoE Interfaces........................................38

5.7.3 PPPoA Interfaces........................................39

5.7.4 Checking the IP Address of a PPP

Interface...................................................................40

- 4 -

5.7.5 Configuring the PPP Auto

start/stop Feature ..................................................40

5.7.6 IP Unnumbered PPP Interfaces...............40

5.8 Configuring the Operating Mode..............................43

5.8.1 Bridge Mode.................................................43

5.8.2 WAN to WAN bridging ...............................46

5.8.3 Router Mode ...................................................46

5.8.4 Bridge Router Autosense (BRAS) ...........49

5.8.5 Zero Installation PPPoE Bridge

(ZIPB) Mode ...........................................................50

6Viewing and Modifying DSL Information...........54

6.1 Modifying the DSL Configuration.............................54

6.2 Viewing DSL Parameters and Statistics..................55

7Configuring IP and Routing Management.........57

7.1 Configuring Routing on LAN Hosts..........................57

7.2 Configuring Routes...................................................57

7.3 Routing Mode ...........................................................58

7.4 RIP ............................................................................59

7.4.1 RIP Global Configuration...........................59

7.4.2 RIP Interface Configuration.......................59

7.5 IGMP.........................................................................60

8Virtual Private Network......................................64

8.1 Overview...................................................................64

8.2 L2TP .........................................................................65

8.3 Configuration details.................................................67

8.4 L2TP Traps...............................................................72

9Configuring DNS Relay.....................................73

9.1 Overview of DNS Relay ...........................................73

9.2 Configuration Details ................................................73

10 Configuring DHCP Server and DHCP

Relay ..............................................................74

10.1 Default DHCP Configuration on the

SAR110 Reference Unit..................................................74

10.2 Configuring Unit as DHCP Server..........................74

10.2.1 Creating DHCP Pools..............................75

10.2.2 Excluding Addresses from a Pool .........77

10.2.3 Modifying and Deleting Pools.................78

- 5 -

10.2.4 Creating Static DHCP Assignments.............78

10.2.5 Enabling the DHCP Server...........................79

10.2.6 DHCP- DNS Relay Interaction...............80

10.2.7 Viewing DHCP Server Address

Assignments...........................................................80

10.3 Configuring DHCP Relay........................................80

10.3.1 Configuring the DHCP Relay

Interfaces ................................................................80

10.3.2 Specifying the DHCP Server IP

Address ...................................................................81

10.3.3 Enabling DHCP Relay Mode........................81

10.4 Using a DHCP Server on the LAN .........................82

10.5 DHCP Traps............................................................82

10.5.1 Duplicate IP Address Trap......................82

10.5.2 Low Threshold Hit Trap ...........................82

10.6 ForceRenew............................................................83

11 Simple Network Time Protocol..........................84

11.1 Overview .................................................................84

11.2 SNTP implementation details .................................84

11.3 Configuration details ...............................................86

12 Layer 2 Security ................................................88

12.1 Raw Filtering – Overview........................................88

12.1.1 Using Raw Filtering Rules and

Subrules ..................................................................89

12.1.2 Raw Filtering Global Configuration...............91

12.2 Protocol Blocking ....................................................91

12.3 L2 Wall.....................................................................92

12.3.1 Overview.....................................................92

12.3.2 Configuration Files....................................93

12.3.3 AutoDetect Algorithm ...............................93

12.3.4 Assumptions ..............................................94

12.3.5 Sample Configuration Files ..........................94

13 Layer 3 Security ................................................96

13.1 NAT .........................................................................96

13.1.1 Default NAT Configuration on the

SAR110 Unit.............................................................97

13.1.2 Configuring NAT Direction ......................98

- 6 -

13.1.3 The napt rule .................................................98

13.1.4 The rdr Rule .............................................100

13.1.5 The basic and filter Rules......................102

13.1.6 The bimap Rule.......................................103

13.1.7 The pass Rule .........................................103

13.1.8 Configuring ALGs........................................103

13.1.9 Enabling NAT ..........................................106

13.2 Firewall ..................................................................106

13.2.1 Attack protection .....................................106

13.2.2 Firewall features......................................110

13.2.3 Configuration details...............................111

13.3 IP Filtering and IP Sessions..................................113

13.3.1 Using IP Filtering Rules .........................115

13.3.2 Configuring Time-of- day based

rules 117

13.3.3 IP Sessions – Advanced

Configuration Issues ...........................................120

13.3.4 IP Filtering Global Configuration..........122

14 Usage Control .................................................124

14.1 Overview ...............................................................124

14.2 User Authentication process.................................125

14.3 Configuration using CLI ........................................130

15 Application Security – Surfing Profile..............132

15.1 Surfing Profile........................................................132

15.2 Invoking the Surfing Profile Feature.....................132

15.3 Types of files .........................................................132

15.3.1 Surfing profile - modes of

operation ...............................................................133

15.4 Surfing profile – feature details.............................135

16 Auto-configuration ...........................................136

16.1 AutoDetect.............................................................136

16.1.1 Overview...................................................136

16.1.2 Configuring the Modem to Work with

AutoDetect..............................................................137

16.1.3 AutoDetect Configuration Options..............138

16.1.4 Considerations ............................................140

16.2 Auto-configuration Using ILMI (TR-037) ..............141

- 7 -

16.2.1 Starting Auto- configuration

through Default ....................................................142

16.2.2 Starting auto- configuration at run

time 144

16.2.3 Viewing auto- configured VCs..............144

16.2.4 Best effort configuration.........................145

16.2.5 VCC change and Cold Start Trap........146

16.2.6 Configuration Conflicts...........................146

16.2.7 Configuration mismatch Traps .............146

16.2.8 Constraints ...............................................146

16.2.9 Recommended parameters

required from network.........................................147

17 Other Device Access Mechanisms .................148

17.1 Simple Network Management Protocol

(SNMP) ..........................................................................148

17.1.1 SNMP Communities...............................148

17.1.2 SNMP Hosts ............................................148

17.1.3 SNMP Traps ............................................149

17.1.4 Providing SNMP Access Across

the Modem............................................................149

17.2 Web-based Interface ............................................150

17.2.1 Accessing the Web- based

Interface.................................................................150

17.2.2 Accessing the Quick

Configuration Page .............................................151

17.2.3 User Instructions .........................................152

17.2.4 Web-based Diagnostics ........................152

17.3 L2 Agent Module...................................................153

18 System Maintenance.......................................155

18.1 Diagnostics............................................................155

18.1.1 Checking IP Connectivity ......................155

18.2 Diagnostics page of the HTTP Agent...................155

18.2.1 Diagnostics - categories ........................155

18.3 ATM Traffic Diagnostics........................................156

18.3.1 OAM F5 CC .............................................157

18.3.2 OAM Loopback ...........................................159

18.4 Traps .....................................................................160

- 8 -

18.5 Requesting Status and Statistical

Information.....................................................................161

18.6 Viewing complete system configuration...............163

18.7 Managing User Accounts .....................................164

18.7.1 Creating User Accounts.........................164

18.7.2 Deleting User Accounts ..............................165

18.8 Changing the Login Password .............................165

18.9 Modifying System Parameters .............................166

18.10 Configuring Host Name and Domain

Name on the Modem ....................................................166

18.11 Debugging using Memory Location ...................169

18.12 Serial Port Authentication ...................................169

18.12.1 Using CLI Commands .........................169

19 Shell Tutorial ...................................................171

19.1 Shell Tutorial - Overview.......................................171

19.2 Shell Programming Tutorial ..................................172

19.2.1 A First Script.............................................173

19.2.2 Variables...................................................174

19.2.3 IF-ELSE Construct..................................175

19.2.4 Goto...........................................................177

19.2.5 Readout and Search ..............................179

19.2.6 Return........................................................182

19.2.7 Keywords..................................................185

19.2.8 Symbols....................................................185

20 Glossary ..........................................................186

- 9 -

1 Introduction

This document contains the following chapters:

 Introduction, provides basic information on this

document.

 Chapter 2 shows how to set up, configure, and operate

the SAR110.

 Chapter 3 gives a brief overview of the main features of

the Command Line Interface (CLI).

 Chapter 4 defines and describes the reference unit’s

default configuration, and explains how you can alter the

current configuration using flat files.

 Chapter 5 shows how to configure the unit’s interfaces,

and how to change its operating mode.

 Chapter 6 explains the CLI commands that can be used

to modify and display DSL-related parameters and statistics.

 Chapter 7 shows how to use CLI to configure IP routes.

 Chapter 8 shows how to use the Layer 2 Tunneling

protocol (L2TP) to enable the unit to provide VPN services.

 Chapter 9 shows how to configure the modem as a DNS

relay server.

 Chapter 10 shows how to use CLI to configure the

Dynamic Host Configuration Protocol (DHCP) server and or

client functions.

 Chapter 11 describes the configuration options of the

Simple Network Transfer Protocol.

 Chapter 12 describes raw filtering, protocol blocking and

the L2 Wall feature.

 Chapter 13 details information on configuring NAT,

Firewall and IP Filtering.

 Chapter 14 discusses the new Usage Control feature of

the unit.

 Chapter 15 discusses the surfing profile feature that

provides application security.

 Chapter 16 discussing how auto configuration is possible

with auto detect and TR-37 support.

 Chapter 17 discusses mechanisms for management

access to the modem, using SNMP, Web-based interface,

and L2 Agent.

 Chapter 18 shows how to perform basic maintenance

functions using CLI.

 Chapter 19 helps you understand how to use shell scrips

- 10 -

to your advantage, and provides a tutorial on shell

programming.

A glossary of terms used in this document is also provided.

Autres manuels pour SAR110

Table des matières

Autres manuels Solwise Routeur réseau

Solwise

Solwise SAR-600EH Fiche d'information produit

Solwise

Solwise SSR725 Manuel

Solwise

Solwise SAR-600 Instructions d'utilisation

Solwise

Solwise SAR715PVW Manuel

Solwise

Solwise 3GWIFIMRD Manuel utilisateur

Solwise

Solwise WLn-401 Manuel utilisateur

Solwise

Solwise 4G-54RV Manuel utilisateur

Solwise

Solwise SAR-600E Fiche d'information produit

Solwise

Solwise SAR-600E Manuel utilisateur

Solwise

Solwise SAR-600E Manuel utilisateur

Solwise

Solwise SAR-600EH Manuel utilisateur

Solwise

Solwise SAR-600EW Fiche d'information produit

Solwise

Solwise PTI-840V Manuel utilisateur

Solwise

Solwise NET-3G-A10 Manuel utilisateur

Solwise

Solwise SAR110 Manuel

Solwise

Solwise AWOS2400050 Manuel utilisateur

Solwise

Solwise SAR715PV Manuel utilisateur

Solwise

Solwise 434T Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité