background image

SMARTRG INC. PROPRIETARY AND CONFIDENTIAL. ALL RIGHTS RESERVED. COPYRIGHT © 2014

20

Advanced Setup

Layer2 Interface

ATM Interface

From this screen you can configure Asynchronous Transfer Mode / Permanent Virtual Conduit for your gateway. You can customize latency

options, Link Type, Encapsulation mode and more. Note that devices (routers) on both ends of the connection must support ATM / PVC.

ATM is becoming popular as a wide-area network (WAN) medium. ATM offers small cell size and strict quality of service, allowing voice, video,

and data to coexist.

Terms:

l

VPI - Virtural Path Identifier

l

VCI - Virtual Circuit Identifier

l

VC - Virtual Circuit

After selecting

Advanced Setup -> Layer2 Interface -> ATM Interface

from the left navigation bar, click

Add

in the center pane. The following

screen will appear. When your desired settings have been declared, click the

Apply/Save

button to commit your changes.

Summary of Contents for SR300n

Page 1: ... GATEWAY USER MANUAL For all Broadcom Chipset based models including ADSL 3xx series SR300n SR350n SR360n VDSL 5xx series SR500n SR505n SR510n SR550n Release 3 3 January 2015 ...

Page 2: ... Filtering Outgoing 43 IP Filtering Incoming 45 MAC Filtering 46 Parental Control 47 Time Restriction 48 URL Filter 48 Quality Of Service 49 QoS Config 49 QoS Queue Config 50 QoS Classification 52 QoS Port Shaping 54 Routing 55 Default Gateway 55 Static Route 56 Policy Routing 56 RIP Routing Information Protocol 57 DNS 58 DNS Server 58 Dynamic DNS 60 Static DNS 60 DSL 61 Advanced settings for the ...

Page 3: ...ices 105 Passwords 106 Update Software 107 Reboot 108 Appendix A Advanced Features Overview 109 Connect and Surf Automatic Broadband Con nection Configuration 109 Activation Automatic ACS Connection Con figuration 109 TR 069 Remote Management Automated Configuration Server Support 109 Appendix B Feature Comparison Matrix 111 Revision History 112 SMARTRG INC PROPRIETARY AND CONFIDENTIAL ALL RIGHTS ...

Page 4: ...y with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However ...

Page 5: ...C in North America or 230V AC in Europe l Do NOT use the device if the power supply is damaged as it might cause electrocution l If the power supply is damaged remove it from the power outlet l Do NOT attempt to repair the power supply Contact your local vendor to order a new power supply l Place connecting cables carefully so that no one will step on them or stumble over them Do NOT allow anythin...

Page 6: ...p their businesses on the cutting edge through its laser focused product line leveraging the very latest in broadband access and home networking technologies SmartRG solutions enable service providers to improve their bottom line by reducing service costs and increasing customer satisfaction Learn more at www SmartRG com Purpose Scope The purpose and scope of this document is to provide the custom...

Page 7: ...G produces several models that vary slightly in capabilities See Appendix B for details but the basic scheme of lights ports and buttons represented in this section exist on each model LED Status Indicators Your SmartRG gateway has several indicator lights LEDs on its front panel The number of DSL ports or USB ports may vary from model to model but generally these indicators are available on all m...

Page 8: ...rticular model The ports depicted in this example are described as follows DSL The grey RJ12 port labeled DSL is specifically intended for connection to an internet provider via a DSL Digital Subscriber Line service The center pair carries the first DSL line For models like the SR550n equipped with two DLS ports and bonded DSL capability the outer pair carries the second line WAN A stand alone RJ4...

Page 9: ...ith your gateway Intended for indoor use only External Buttons Smart RG gateways provide pushbutton controls on the exterior for critical features These buttons give you a convenient means to trigger WPS mode toggle the WiFi radio on and off or reset the gateway The following describes specifics for each of these controls WPS Button Wi Fi Protected Setup WPS is standard means for secure connection...

Page 10: ...reset that is equivalent to the Reboot function in the gateway s software UI l A 5 second hold on the Reset button performs the software UI equivalent to Restore Default l Holding reset for 10 15 seconds the POWER LED goes red and unit enters CFE mode A state associated with performing firmware updates via Internet browser The location of the Reset button varies by model l On models SR500n SR505n ...

Page 11: ...e an address via CPE s DHCP Instead manually configure your PC s interface with an IP address on the default network e g 192 168 1 100 The balance of this guide is dedicated to a sequential walk through of the user interface of your gateway Here you will find a visual reference of each screen along with a Description for each of the parameters displayed Where applicable a range of valid values is ...

Page 12: ...r change the settings in this section Summary Upon successful login Device Info is the first screen to appear This is screen is dedicated to the display of hardware and software details associated with your gateway In addition the current status of the WAN connection if present is shown Wan Info The Device Info WAN status screen provides a high level overview for the connection between your Intern...

Page 13: ...d Disabled Igmp Displays the state of IGMP Enabled Disabled MLD Displays the state of MLD Enabled Disabled NAT Displays the state of NAT Enabled Disabled Firewall Displays the state of the Firewall Enabled Disabled Status Displays the status of the WAN connection Disconnected Unconfigured Connecting Connected IPv4 Address Displays the obtained IPv4 address IPv6 Address Displays the obtained IPv6 a...

Page 14: ...eld Name Description Interface Received Transmitted LAN1 LAN2 LAN3 LAN4 Ethernet WAN if configured on your device Wl0 is the Wireless LAN side Interface Interface Displays available LAN interfaces Bytes Bytes RX TX total quantity of packets in Bytes Pkts Pkts RX TX total quantity of packets Errs Errs RX TX total quantity of error packets Drops Drops RX TX total quantity of dropped packets WAN Serv...

Page 15: ...tion pppoe ipoe b Bytes RX TX total quantity of packets in Bytes Pkts RX TX total quantity of packets Errs RX TX total quantity of error packets Drops RX TX total quantity of dropped packets Reset Statistics Resets the Statistics to zero xTM The Device Info Statistics xTM displays the ATM PTM statistics for your SmartRG Gateway All WAN interfaces configured for your SmartRG gateway are included Us...

Page 16: ...received Cell Errors xDSL Device Info Statistics xDSL displays the DSL statistics for your SmartRG Gateway All xDSL VDSL or ADSL interfaces configured for your SmartRG gateway are included You are also able to reset these counters by selecting the Reset Statistics button located on the xTM screen as shown below Use the Reset Statistics button near the bottom of the screen to reset these counters A...

Page 17: ...ection type ATM PTM ETH Status Displays the status of the connection Up NoSignal Initializing Link Power State Link output power state Line Coding Trellis Downstream Upstream Displays the state of Trellis Coded Modulation On Off SNR Margin db Downstream Upstream Signal to Noise Ratio Attenuation db Downstream Upstream Estimate of average loop attenuation Output Power dBm Downstream Upstream Transm...

Page 18: ...ived with errors RS Words Path 0 1 Downstream Upstream Total number of Reed Solomon code errors RS Correctable Errors Path 0 1 Downstream Upstream Total number of Reed Solomon with correctable errors RS Uncorrectable Errors Path 0 1 Downstream Upstream Total number of Reed Solomon with uncorrectable errors RS Codewords Received Path 0 1 Downstream Upstream Total number of Reed Solomon Codewords re...

Page 19: ...esses Gateway Displays the Gateway IP address Subnet Mask Displays the Subnet Masks Flag Including IPv6 Route Displays the status of the flags Metric Including IPv6 Route Displays the number of hops to reach the default gateway Service Including IPv6 Route Displays the service type Interface Including IPv6 Route Displays the WAN LAN interface Next Hop IPv6 Route only Displays the next hop IP addre...

Page 20: ...m level interface by which the host is connected DHCP Device Info DHCP displays a list of locally connected LAN hosts and their DHCP lease status which are directly connected to the SmartRG Gateway via a LAN Ethernet port or Wireless LAN The individual fields on this screen are defined as follows Field Name Description Hostname Displays the Host name of each connected LAN device MAC Address Displa...

Page 21: ...nds of the connection must support ATM PVC ATM is becoming popular as a wide area network WAN medium ATM offers small cell size and strict quality of service allowing voice video and data to coexist Terms l VPI Virtural Path Identifier l VCI Virtual Circuit Identifier l VC Virtual Circuit After selecting Advanced Setup Layer2 Interface ATM Interface from the left navigation bar click Add in the ce...

Page 22: ...2 65535 Enter a Virtual Channel Identifier VCI is a 16bit identifier that has a unique channel Select DSL Latency Path0 Fast No error correction and can provide lower latency on error free lines Path1 Interleaved Error checking that provides error free data which increases latency Path0 1 Both Fast Interleaved Link Type EoA Ethernet over ATM PPPoA Point to Point Protocol over ATM IPoA Internet Pro...

Page 23: ... networks with compressed video traffic Minimum Cell Rate cells s 1 indicates no shaping Minimum allowable rate at which cells can be sent on a ATM network Scheduler for Queues of Equal Precedence as the Default Queue The algorithm used to schedule the queue behavior WRR Weighted Round Robin packets are accessed in a round robin style and classes can be given WFQ Weighted Fair Queuing packets are ...

Page 24: ...ata packet scheduling technique allowing different scheduling priorities to statistically multiplexed data flows Since each data flow has its own queue an ill behaved flow who has sent larger packets or more packets per second than the others since it became active will only punish itself and not other sessions Default Queue Weight 1 63 Enter a default weight of the specified queue Default Queue P...

Page 25: ...t WAN Service There are several variations of WAN Service available to configure The three core variations are l PPP over Ethernet PPPoE l IP over Ethernet l Bridging This chapter will illustrate a sample configuration scenario down each of these three variations and define the available fields to customize your WAN service setup PPP over Ethernet After selecting Advanced Setup WAN Service from th...

Page 26: ... of WAN service you wish to create For this example choose PPP over Ethernet Click Next after completing the necessary fields The individual fields on this screen are defined as follows Field Name Description WAN service type PPP over Ethernet PPPOE IP over Ethernet IPoE Bridging Enter Service Description Enter a name to describe this configuration ...

Page 27: ...technique allowing different scheduling priorities to statistically multiplexed data flows Since each data flow has its own queue an ill behaved flow who has sent larger packets or more packets per second than the others since it became active will only punish itself and not other sessions Next configure the PPP Username Password and related information ...

Page 28: ...SMARTRG INC PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED COPYRIGHT 2014 27 ...

Page 29: ...pecify IP to forward traffic PPPoE traffic to Use Static IPv4 Address Specify IPv4 Address to apply to WAN service Retry PPP password on authentication error 1 65536 Max PPP authentication retries on failure 65536 Forever Enable PPP Debug Mode The system will put more PPP connection information into the system log of the device This is for debugging errors and not for normal usage Bridge PPPoE Fra...

Page 30: ... the PPP service being created Use the button to move your highlighted selection from left to right or for right to left Click Next after completing the necessary fields Select DNS Server Interface from available WAN interfaces Use the button to move your highlighted selection from left to right or to move your selection from right to left ...

Page 31: ...VED COPYRIGHT 2014 30 Alternatively you may use the lower portion of the screen to manually key in static DNS IP addresses Click Next after completing the desired parameters Next the summary screen will appear indicating that your PPPoE WAN setup is complete ...

Page 32: ...make any necessary alterations you may desire IP Over Ethernet The next WAN Service variant is IP over Ethernet After selecting Advanced Setup WAN Service from the left navigation bar click the Add button A progression of several screens will follow Advance to the next after completing the required fields using the Next button appearing near the bottom of each screen First select the Layer2 interf...

Page 33: ...TIAL ALL RIGHTS RESERVED COPYRIGHT 2014 32 Click the Next button to advance to the next step Next select the type of WAN service you wish to create For this example choose IP over Ethernet Click Next after completing the necessary fields ...

Page 34: ...bsequent options presented will change accordingly Enter the relevant WAN IP Settings Click Next after completing the necessary fields The individual fields on this screen are defined as follows Field Name Description Obtain an IP address automatically When you wish the ISP to automatically assign the WAN IP to the gateway Option 60 Vendor ID Optional Broadcast a specific vendor ID for the DHCP se...

Page 35: ...Net Mask Enter a secondary LAN IP address for the gateway e g 192 168 2 1 Obtain an IPv6 address automatically When you wish the ISP to automatically assign the WAN IP to the gateway Dhcpv6 Address Assignment IANA Select this option for CPE to receive WAN IP from ISP Dhcpv6 Prefix Delegation IAPD Select this option for CPE to generate WAN IPâ s prefix from server rest by MAC address Use the follow...

Page 36: ...tatefu DHCPv6 server given by the LAN IPV6 network as configured with additional options Start interface ID Enter the beginning IPv6 available addresses for DHCP to assign to LAN devices End interface ID Enter the ending IPv6 available addresses for DHCP to assign to LAN devices Leased Time hour Amount of time before a new IPv6 lease is requested by the LAN client Enable RADVD Optional Router Adve...

Page 37: ...nfigure drop down menu for each of the four Ethernet ports on your SmartRG gateway Select from Auto 100 Full 100 Half 10 Full or 10 half These options represent 100 megabit or 10 megabit using half or full duplex transmission protocols Make a manual selection from one of the latter four options when you have a specific device with a known limited transmission speed capability Simply choose Auto an...

Page 38: ...rk LAN Setup Utilize this screen to configure the router s local IP addresses subnet mask DHCP behavior and other related LAN side settings for your SmartRG Gateway After selecting Advanced Setup LAN from the left navigation bar customize the fields as desired Click Apply Save to commit your changes ...

Page 39: ... by which LAN devices will connect to this gateway Subnet Mask Set the Subnet mask to be used by LAN devices connecting to this gateway Enable IGMP Snooping Enable your SmartRG gateway to listen to Internet Group Management Protocol IGMP network traffic between hosts and routers By listening to these conversations the gateway maintains a map of which links need which IP multicast streams Standard ...

Page 40: ... access to a TFTP server contains device configuration name files in cnf file format which enables the device to communicate with other infrastructure select this option to specify the name of the TFTP server Option 66 is an IEEE standard DHCP Option 150 comma separated list of TFTP server IPv4 Address es A Cisco proprietary methodology for pointing to a TFTP server Unlike Option 66 Cisco s Option...

Page 41: ... Select a Service Select from a list of common applications that typically require port forwards in place The port ranges and protocol fields will be pre populated Custom Service If your application does not appear in the preceding drop down list you may manually enter a unique name for the application Server IP Address IP address of the LAN client in which the service has been hosted External Por...

Page 42: ...rewall be opened for access by remote parties Port Trigger dynamically opens up the Open Ports in the firewall when an application on the LAN initiates a TCP UDP connection to a remote party using the Triggering Ports The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using the Open Ports After selecting Advanced Setup NAT Port...

Page 43: ...trigger port number Set the beginning of the range of available ports Trigger Port End 1 65535 An outgoing trigger port number Set the end of the range of available ports Trigger Protocol TCP UDP TCP UDP Select the protocol required by the application that will be using the ports in the specified range Open Port Start 1 65535 An incoming port number Set the beginning of the range of available port...

Page 44: ...ced Setup NAT DMZ Host from the left navigation bar enter the DMZ Host IP Address Click Apply Save to commit the new or changed address Security IP Filtering Outgoing Add an Outgoing filter when refusal of data from the LAN to the WAN is desired After selecting Advanced Setup Security IP Filtering Outgoing from the left navigation bar click the Add button The following screen will appear to facili...

Page 45: ...ss or a block of IP address on a given network subnet This is done through appending the address with the routing â œ prefixâ length decimal value preceded with the slash associated Use of a valid decimal routing prefix for defining the subnet mask per CIDR notation is required Source Port port or port port Set the outgoing host port or range of ports for the above host or range of hosts defined b...

Page 46: ...l appear to facilitate the filtering you desire Click Apply Save to commit the completed entry The individual fields on this screen are defined as follows Field Name Description Filter Name A free form text field Enter a descriptive name for this filter IP Version Version IPv4 applies by default IPV6 can be alternately selected Protocol TCP UDP TCP UDP or ICMP Select the protocol to be associated ...

Page 47: ... firewall enabled First LAN interface checkbox Second LAN interface as applicable checkbox Check each as applicable for desired rule Bridged Interface checkbox Check as applicable for desired rule MAC Filtering Your SmartRG gateway can block or forward packets based on the originating device This MAC filtering feature is available only in Bridging mode For other modes similar functionality is avai...

Page 48: ...e Description Protocol Type PPPoE IPv4 IPv6 AppleTalk IPX NetBEUI IGMP Select the protocol associated with the device at the destination MAC address Destination MAC Address Enter the MAC address of the hardware you wish to associate with this filter Source MAC Address Enter the MAC address of the device that is originating requests intended for the device associated with the Destination MAC addres...

Page 49: ...ly Other MAC Address xx xx xx xx xx xx MAC address of another LAN device to restrict Days of the week Check the box es for day s Mon Sun the restrictions apply Start Time Blocking End Time Blocking Enter the range of time that the above stated device s is to be restricted from access to the Internet URL Filter The other side of the Parental Controls coin is URL filtering From the left navigation b...

Page 50: ...ization of internet content to help ensure the best possible performance This is particularly useful for streaming video and audio content to minimized potential for drop outs QoS becomes significant when the sum of the traffic audio video data exceeds the capacity of the line QoS Config Use the QOS Config screen to enable QOS and set the DSCP Mark classification NOTE l In ATM mode the maximum que...

Page 51: ... CS2 010000 AF41 100010 AF13 001110 CS2 010000 CS4 100000 AF12 001100 AF33 011110 EF 101110 AF11 001010 AF32 011100 CS5 101000 CS1 001000 AF31 011010 CS6 110000 AF23 010110 CS3 011000 CS7 111000 Click to Apply Save to commit the changes QoS Queue Management Configuration marking on ingress packets in accordance with the Select Default DSCP Mark setting field just above it Queue management on ingre...

Page 52: ...r disable of a given QoS queue configured on chosen Layer 2 interface Note Only one queue can be defined for any one interface precedence pair resulting in a maximum of three queues per interface Interface Dropdown selection for desired Layer 2 interface to be associated with the defined QoS queue e g eth0 eth4 The following selections are exposed upon defining an Interface as described above Queu...

Page 53: ...eue Shaping Rate 1 100000 Kbps 1 value indicates no minimum shaping applied Shaping rate defined for packets in QoS queue defined Shaping Burst Size 1600 bytes or greater Shaping defining specific burst size to be applicable to packets in queue defined The following selections are exposed if either Weighted Priority algorithm is selected as Scheduler Algorithm Minimum Rate 1 100000 Kbps 1 value in...

Page 54: ...the very last classification rule to be processed Select Null to set this rule as the next classification rule to be processed within the existing list of classification rules Rule Status Enable Disable Select whether this rule is active or turned off Class Interface local eth0 eth4 wl0 Select an interface Ether Type IP ARP IPV6 Select the Ethernet interface type for this classification Source MAC...

Page 55: ... as a range or single port port port or port Specify Class Queue Choose from available queues in the drop down list Packets classified into a queue that exit through an interface for which a queue is not specified to exist will instead egress to the default queue on the interface Mark Applied Differentiated Service Code Point Select the desired DSCP code from the drop down list 802 1P priority 1 7...

Page 56: ...es the function for which each physical port is configured on the gateway Shaping Rate Kbps 1 1 000 000 Kbps Sets the data rate for packets on the specified Interface Burst Size bytes A value of 1 indicates no shaping Burst Size will be ignored Routing Default Gateway Select Advanced Setup Routing Default Gateway and the following screen will appear Use the button to move your highlighted selectio...

Page 57: ...g Static Route click the Add button and the following screen will appear Click the Apply Save button to commit the changes entered Up to 32 entries may be added The individual fields on this screen are defined as follows Field Name Description IP Version IPv4 IPv6 Select the IP version associated with the static route you wish to create Destination IP address prefix length Enter the destination ne...

Page 58: ...cy routing table Physical LAN Port Select a physical LAN interface for the policy route from the drop down list Source IP Enter the IP address for source of this policy route Use Interface Drop down field selection providing choice of the WAN Interface desired for the policy route Default Gateway IP The IP address of the Default Gateway RIP Routing Information Protocol RIP is a type of distance ve...

Page 59: ... desire Reference RFC 1058 and RFC 1453 for detailed information on RIP versions Operation Passive Active Passive mode listens only It does not advertise routes Select Active mode to both listen and advertise routes Enabled Check this box to employ RIP on the displayed interface DNS DNS Server Use the features of this screen to input the Domain Name Server information supplied by the service provi...

Page 60: ...erver Available Wan Interfaces WAN services available to be selected for the DNS server Primary DNS Server Enter the IP address of the primary DNS server Secondary DNS Server Enter the IP address of the secondary DNS server WAN Interface Selected Alter this field only if IPv6 environment Primary IPv6 DNS Server Enter the IP address of the primary IPv6 primary DNS Secondary IPv6 DNS Server Enter th...

Page 61: ...ription D DNS provider Select a dynamic Domain Name Server provider from the drop down menu Hostname Enter the name of the dynamic DNS server Interface Select the gateway WAN interface whose traffic will be pointed at the above specified Dynamic DNS provider Username Enter the username of the dynamic DNS server Password Enter the password of the dynamic DNS server Static DNS The Static DNS service...

Page 62: ...he IP address of the DNS server client uses to assist in resolving domain names DSL Advanced settings for the DSL interface CAUTION Altering these settings unnecessarily could result in the gateway being unable to attain DSL synchronization After selecting Advanced Setup DSL from the left navigation bar click the Add button The following screen will appear Enter your desired settings then click Ap...

Page 63: ...ws Modulation Data Transmission Rate G Dmt ITU T G 992 1 standard Max Downstream 12 Mbps Max Upstream 1 3 Mbps G lite ITU T G 991 2 standard Max Downstream 4 Mbps Max Upstream 0 5 Mbps T1 413 ANSI T1 413 Issue 2 standard Max Downstream 8 Mbps Max Upstream 1 0 Mbps ADSL2 ITU T G 992 3 standard Max Downstream 12 Mbps Max Upstream 1 0 Mbps ...

Page 64: ...a rate 50Mbps 68Mbps 100Mbps Other Settings Field Name Description Inner Pair Outer Pair The RJ11 connector has four contacts The center pair of pins is DSL1 The outer pair pins are the contacts for DSL2 Select which pair should be used Bitswap Enable Enables adaptive handshaking functionality SRA Enable Enables Seamless Rate Adaptation Test Modes Mode Description Normal Puts the DSL PHY in test m...

Page 65: ... commit your changes DSL Bonding NOTE This feature supported only on SmartRG models SR550n and SR552n Bonding enables two DSL lines to feed the same modem Utilize this screen to leverage the bandwidth of both lines Bonded they will behave as a single higher bandwidth connection After selecting Advanced Setup DSL Bonding from the left navigation bar The following screen will appear Check the checkb...

Page 66: ...UPnP when 3rd party devices on your LAN support this Universal Plug and Play standard Common client devices include gaming consoles IP cameras printers and others After selecting Advanced Setup UPnP from the left navigation bar The following screen will appear Check the checkbox to enable UPnP Click Apply Save to commit your changes ...

Page 67: ...istorical cache of look ups Navigate to Advanced Setup DNS Proxy to enable and configure this feature After selecting Advanced Setup DNS Proxy from the left navigation bar The following screen will appear Check the check box to enable DNS Proxy mode and specify a Host name and Domain Name of the LAN in the fields that follow Click Apply Save to commit your changes ...

Page 68: ...step 3 static below 2 To automatically add LAN clients to a WAN Interface in the new group add the DHCP vendor ID string By configuring a DHCP vendor ID string any DHCP client request with the specified vendor ID DHCP option 60 will be denied an IP address from the local DHCP server 3 Select an interface from the Available Interface list and add it to the Grouped Interface list using the arrow but...

Page 69: ...unneling is typically used as a means to establish a path between two independent networks Your SmartRG gateway supports connecting islands of IPv6 networks across the IPv4 internet or IPv4 in IPv6 as well IPv6inIPv4 After selecting Advanced Setup IP Tunnel IPv6inIPv4 from the left navigation bar click the Add button The screen shown on the next page will appear ...

Page 70: ... these fields Click Apply Save to commit your changes IPv4inIPv6 After selecting Advanced Setup IP Tunnel IPv4inIPv6 from the left navigation bar click the Add button The screen shown on the next page will appear 1 Enter a Tunnel Name 2 Currently only the DS Lite Mechanism is supported Consult RFC6333 for further information regarding DS Lite 3 Select the appropriate LAN and WAN interfaces from th...

Page 71: ...age to enable and remove connections or edit existing connections The IPSec configuration screen is dynamic Some options are revealed or hidden depending on the selected connection After selecting Advanced Setup IP Sec from the left navigation bar click the Add New Connection The following screen will appear Enter your connection details by completing the appropriate fields Click Apply Save to com...

Page 72: ...to be used Use AH tunnel mode to encapsulate a packet with AH and IP headers For authentication the entire packet is signed Use ESP tunnel mode to encapsulate a packet with ESP and IP headers An ESP trailer is added to the packet for authentication and integrity Local Gateway Interface Select the WAN connection from the drop down list to be associated with this tunnel Remote IPSec Gateway Address ...

Page 73: ...e pages to configure certificates for the gateway Certificates contain public keys as well as the identity of the owner They verify a person s identity You can use Local and Trusted CA certificates on this gateway Local Use the Local Certificate page to configure certificates for the gateway Local certificates are used to identify the gateway to other users You can create a new certificate request...

Page 74: ...xt field Typically the company name creating the request Country Region Select the Country Region in which this certificate will be employed Click Apply to complete the request Reference the ITU X 509 standard for certificate related details The Import Certificate button on the Local landing page facilitates putting the signed Certificate and corresponding Private Key information into place 1 Ente...

Page 75: ...to four peer certificates using this feature After selecting Advanced Setup Certificate Trusted CA from the left navigation bar click the Import Certificate button The following screen will appear Enter acscert for the Certificate Name field then paste the Certificate details as indicated between the BEGIN and END markers Click Apply to commit this Certificate After adding one certificate a Remove...

Page 76: ...st common scenario being Internet television and other streaming media In IP Multicast the implementation occurs at the IP routing level where routers create the most efficient distribution paths for packets sent to a destination Select Advanced Setup Multicast from the left navigation bar The screen pictured below will appear Update or complete the necessary fields Click Apply to commit your chan...

Page 77: ... multicast router sends a query messages to hosts Expressed in seconds If the number is below 128 the value is used directly If the value is greater than 128 it is interpreted as an exponent and mantissa Query Response Interval Upon receiving a query packet a host beings counting down seconds from a random number When the timer expires the host sends it s report Enter a value for the maximum numbe...

Page 78: ...r IGMP v3 1 24 Maximum data sources allowed Maximum Multicast Group Members The maximum number of multicast groups that can be joined on a port or group of ports Fast leave Enabled Disabled If enabled the IGMP proxy removes group member immediately without sending a query LAN to LAN Intra LAN Multicast Check this option to permit a multicast data source on the LAN side and IGMP snooping enabled Me...

Page 79: ...able Wireless Hotspot2 0 Check to enable wireless Hotspot2 0 WPA2 is required Hotspot 2 0 is focused on enabling a mobile device to automatically discover Wi Fi access points that have a roaming arrangement with the user s home network and then securely connect Hide Access Point Check to Hide Access Point SSID Client Isolation Check to prevent LAN client devices from communicating with one another...

Page 80: ...ed Enabled Check to Enable a virtual wireless access point for guest access SSID Enter your desired wireless Service Set Identifier SSID here Hidden Check this option to hide the SSID from being broadcasted publicly Isolate Clients Check to prevent client PCâ s from communicating with one another Disable WMM Advertise Check to stop the wireless from advertising Wireless Multimedia WMM functionalit...

Page 81: ...blank the PBC push button mode is automatically made active Set Authorized Station MAC When manually pairing via WPS enter the MAC address of the client device you are trying to connect Set WPS AP Mode Configured Unconfigured Select Configured to have the gateway assign security settings to clients Select Unconfigured when you wish to have an external client assign security settings to your SmartR...

Page 82: ...SSID Select the SSID from the drop down list for the wireless network to which this security configuration will apply WEP Encryption Enabled Disabled Select Enabled to turn on Wired Equivalent Privacy mode Encryption Strength 128 bit 64 bit Select the length of the encryption method 128 bit being the more robust option for security Current Network Key 1 4 Select which of the four keys from the lis...

Page 83: ... a standard for RADIUS authentication per the IETF RFC 2865 Your RADIUS deployment may differ from this Older servers may use port 1645 RADIUS Key Optional Enter the encryption key if required to authenticate to the RADIUS Server specified via the Server IP address above WEP Encryption Enabled Disabled Select Enabled to turn on Wired Equivalent Privacy mode Encryption Strength 128 bit 64 bit Selec...

Page 84: ...table for WPA below The individual fields on this screen are defined as follows Field Name Description WPA Group Rekey Interval 1 65535 seconds The frequency with which the gateway automatically updates the group key and sends it to connected LAN client devices WPA WAPI Encryption AES TKIP AES Choose from Advanced Encryption Standard AES or AES combined with Temporary Key Integrity Protocol TKIP T...

Page 85: ... the gateway automatically updates the group key and sends it to connected LAN client devices WPA WAPI Encryption AES TKIP AES Choose from Advanced Encryption Standard AES or AES combined with Temporary Key Integrity Protocol TKIP This field has been pre populated with the option most complimentary to the Network Authentication selected WEP Encryption Enabled Disabled Select Enabled to turn on Wir...

Page 86: ...may differ from this Older servers may use port 1645 RADIUS Key Enter the encryption key required to authenticate to the Radius Server specified via the Server IP address above WPA WAPI Encryption AES TKIP AES Choose from Advanced Encryption Standard AES or AES combined with Temporary Key Integrity Protocol TKIP This field has been pre populated with the option most complimentary to the Network Au...

Page 87: ...ces WPA WAPI Encryption AES TKIP AES Choose from Advanced Encryption Standard AES or AES combined with Temporary Key Integrity Protocol TKIP This field has been pre populated with the option most complimentary to the Network Authentication selected WEP Encryption Enabled Disabled Select Enabled to turn on Wired Equivalent Privacy mode Encryption Strength 128 bit 64 bit Select the length of the enc...

Page 88: ...n key required to authenticate to the Radius Server specified via the Server IP address above WPA WAPI Encryption AES TKIP AES Choose from Advanced Encryption Standard AES or AES combined with Temporary Key Integrity Protocol TKIP This field has been pre populated with the option most complimentary to the Network Authentication selected WEP Encryption Enabled Disabled Select Enabled to turn on Wir...

Page 89: ...eld has been pre populated with the option most complimentary to the Network Authentication selected WEP Encryption Enabled Disabled Select Enabled to turn on Wired Equivalent Privacy mode Encryption Strength 128 bit 64 bit Select the length of the encryption method 128 bit being the more robust option for security Current Network Key 1 4 Select which of the four keys from the list is presently in...

Page 90: ... Distribution System to disable access point functionality Selecting Access Point enables access point functionality Wireless bridge functionality will still be available and wireless stations will be able to associate to the Access Point Selecting Disabled in Bridge Restrict will disable wireless bridge restriction Any wireless bridge will be granted access Selecting Enabled or Enabled Scan enabl...

Page 91: ...ranted access Choose Enabled or Enabled Scan to turn on wireless bridge restriction Only those bridges selected in the Remote Bridges list will be granted access Use the Refresh button to update the station list when Bridge Restrict is enabled Remote Bridge MAC Address Enter the MAC address es of the remote bridges to be allowed Advanced At Wireless Advanced you may configure advanced features of ...

Page 92: ...ency with which the gateway scans channels for interference If a threshold of inference is detected a new channel will be auto selected 802 11n EWC Auto Disabled Reference IEEE 802 11n Draft 2 0 for details on this standard Bandwidth 20MHz 40MHz Select the Bandwidth 40MHz bandwidth provides better throughput by taking advantage of two adjacent 20MHz bands Control Sideband Upper Lower Select the ap...

Page 93: ... seconds Set the delay time between when system activity ceases and power save mode engages NOTE Set 802 11n EWC to Auto and to Enable before setting this parameter RX power chain save PPS 0 to 2147483647 packets per second Sets a throughput threshold for when the router engages power save mode after the quiet time seconds have elapsed NOTE Set 802 11n EWC to Auto and to Enable before setting this...

Page 94: ...logy Enabled Disabled Xpress Technology is compliant with draft specifications of two planned wireless industry standards Transmit Power Set the desired output power by percentage WMM Wi Fi Multimedia Auto Enabled Disabled When enable this technology allows multimedia services audio video and voice packets to get higher priority WMM No Acknowledgement Enabled Disabled Refers to the acknowledge pol...

Page 95: ... tested and what actions to take in the event that a particular test should fail The normal test method is initiated with the Test button and utilizes OAM F5 loopback cells Selecting the Test With OAM F4 will conduct the test at the VP level in lieu of at an individual VC connection Fault Management Utilize this screen for diagnostics regarding your VDSL PTM or Ethernet WAN connection Fault Manage...

Page 96: ...l relationship exists between domains based on levels The larger the domain the higher the level value Looback Message LBM Used on demand as the first step to isolate a fault Maintenance End Point MEP Points at the edge of the domain defines the boundary for the domain Linktrace Message LTM Identifies all maintenance points in the entity Management Settings Backup Current settings for your gateway...

Page 97: ...tton will locally save a backup file of the Defaulted settings Update Use the features on this screen to restore previously backed up gateway settings Both Current and Default settings can be managed here After selecting Management Settings Update from the left navigation bar the following screen will appear Click the appropriate Choose File button for the type of setting you wish to restore Next ...

Page 98: ...ning settings Update Default Settings This button will allow you to select a conf backup file to update the Defaulted settings Restore Default Use this screen to reset the gateway to its Default settings Defaults can be customized and stored For details see Backup and Restore Settings sections of this user manual After selecting Management Settings Restore Default from the left navigation bar the ...

Page 99: ... gateway Use the features on this screen to view or alter the behavior of the System Log Upon selecting Management Settings System Log from the left navigation bar the following screen will appear The individual fields on this screen are defined as follows Action Description View System Log This button will display the system log Configure System Log This button will edit the system log ...

Page 100: ...th a subscriber for which increased detail is required Mode Control where log events will be sent Choose Remote or Both to send to the specified IP address and UDP port of a remote syslog server Choose Local or Both to record events in the local memory of your SmartRG gateway Security Log The security log contains a history of events related to sensitive access to the gateway Logged events include...

Page 101: ...hich this gateway will be linked The TR 069 client screen is preset with default connection parameters and generally only needs to be Enabled and pointed to the ACS URL Also necessary are any required ACS Username and ACS Password Default username and password are typically admin admin for Connection Request defaults Consult available ACS manufacturer s documentation if these values need to be alt...

Page 102: ...d the most typical scenario For firmware versions prior to 2 5 0 2 MAC is the only available option TR 069 Client Disable Enable TR 069 client on the CPE The TR 069 WAN Management Client can be disabled if no ACS is employed Note however that if there is a possibility of adding an ACS to your infrastructure in the future it is recommended to leave this option enabled When this feature is set to of...

Page 103: ...SmartRG Support when a change from the default is required Next you may optionally configure the modem client Connection Request mechanism used by your ACS for communication with subscriber gateways NOTE Please consult with your ACS vendor for any specific connection request requirement impacted by the following settings Use the GetRPCMethods buttons to force the gateway to attempt to sync with th...

Page 104: ...he infrastructure of the Service Provider utilize this screen to configure this gateway with the connectivity specifics for that server After selecting Management Management Server STUN Config check the STUN Server Support button to expose the required STUN settings Complete each field in accordance with the implementation specifics of server Click the Save Apply button to commit your changes The ...

Page 105: ...ive values attributed These minimum and maximum keep alive times define respectively the minimum time to retain the mapping information STUN has discovered and the maximum time to retain that information before refreshing it through forced re discovery With the above mentioned NAT schemes it is possible the network address translation initially established may not be used after a specified elapsed...

Page 106: ...ss Control Services Utilize this screen to establish a Service Control List You many control which services FTP HTTP Telnet etc are to be restricted on the LAN After selecting Management Access Control Services you may modify settings as desired Click Apply Save to commit your settings ...

Page 107: ...FTP Service access For WAN this is with default port Service Control List service HTTP HTTP Service access For WAN this is in association with port specified â default is port 80 Service Control List service ICMP ICMP Service access For WAN this is with default port Service Control List service SNMP SNMP Service access For WAN this is with default port Service Control List service SSH SSH Service ...

Page 108: ...rd as the subsequent fields will replaces it with a new password New Password The new password being chosen for the entered User Name Max 16 characters Confirm Password Re enter the desired new password exactly as entered for the previous field Update Software Utilize this feature to update the firmware of your SmartRG gateway Software updates for SmartRG product are available for download by dire...

Page 109: ...IGHTS RESERVED COPYRIGHT 2014 108 Reboot Occasional troubleshooting measures may require that the router be rebooted The reboot function is located on this screen Select Managment Reboot from the left lavigation bar The following screen will appear ...

Page 110: ...iguration SmartRG gateways are designed to discover their service provider specific ACS management settings without the use of custom firmware SmartRG Inc maintains an activation server that associates a device s MAC address with its service provider s ACS settings SmartRG gateways contact the activation server to have their ACS settings modified upon initial power up or after being reset to facto...

Page 111: ...mer Connect ACS In addition to being Calix physical layer certified to ensure Calix access equipment compatibility SmartRG gateways have been tested to confirm maximum interoperability with the Calix Compass Consumer Connect ACS solution Affinegy ACS SmartRG gateways have been tested to confirm maximum interoperability with the Affinegy ACS solution Cisco Prime Home ACS SmartRG gateways have a lon...

Page 112: ... Fi Signal Monitor IPv6 IPTV Ready SR552n Tri mode ADSL2 VDSL2 GigE 5 GE ü ü 802 11n ü ü ü SR550n Tri mode ADSL2 VDSL2 GigE 3 FE 1 GE ü ü 802 11n ü ü ü SR510n Tri mode ADSL2 VDSL2 GigE 4 FE 1 GE ü ü 802 11n ü ü ü SR505n Tri mode ADSL2 VDSL2 GigE 3 FE 1 GE ü ü 802 11n ü ü ü SR500n Tri mode ADSL2 VDSL2 GigE 4 FE 1 GE ü ü 802 11n ü ü ü SR400ac Gigabit Ethernet 5 GE ü ü Dual band concurrent 802 11ac ü...

Page 113: ...pendium of screen shots for each feature Migrated use case content to on line knowledge base See the SmartRG Customer Portal 3 2 10 20 2014 Visual overhaul New colors logo and layout Added missing sections for Ethernet Config and LAN Expanded chapters for Management Server and STUN 3 3 1 28 15 Cosmetic enhancements Replaced screen shots with new UI color scheme and logos Expanded coverage of Advan...

Reviews: