Black Box MDS921AE-10BTS-R2, MDS957AE-10BTS-R2 User Manual

UM_MDS921AE-10BTS-R2-SMARTLINK_

UM_MDS921AE

MDS921AE

SMARTLINK

MDS957AE

SMARTLINK II

ATM Based G.SHDSL Modem

USER MANUAL

Version

Version 1.

Revision

19. October 2008

Document name

UM_MDS921AE

-MDS957AE-10BTS-R2-SMARTLINK_v1-4-081019v1-2-070301.doc

User Manual

-10BTS-

R2

-10BTS-

R2

, Bridge and Router

4

-MDS957AE-10BTS-R2-

SMARTLINK_v1

-4-081019.doc

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

BlackBox

part or as a whole, transcribed, stored in a retrieval system, translated

transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical,

photocopying, manual, or otherwise, without the prior written permission of

by BlackBox

957AE-10BTS User Manual

Page 2 of 113

. The contents of this publication may not be reproduced in any

into any language, or

BlackBox

. Published

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Version Control

User Manual

Version

Date

1.0

17.01.2005

1.1

14.11.2005

1.2

28.09.2006

1.3

05.12.2007

1.4

19.03.2008

EU Directive 2002/96/EC and EN50419

This equipment is marked with the above recycling symbol. It means that at the

end of the life of the equipment you must dispose of it separately at an appropriate

collection point and not place it in the normal domestic unsorted waste stream.

(European Union only)

957AE-10BTS User Manual

Page 3 of 113

Major changes to previous version

Initial version

Included EN50419

Housing and Design Changes

G.SHDSL.bis added

Multi-Pair and Multi-Link modes

added

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Table of Contents

Version Control

................................

Description

................................

Features

................................

Specification

................................

Model Overview

................................

Applications

................................

Firewall

................................

VLAN (Virtual Local Area Network)

Getting to know about the router

Front Panel of four-

port router

Rear Panel

................................

Pinout

................................

Configuration to the router

Step 1: Check the Ethernet Adapter in PC or NB

Step 2: Check the Terminal Access Program

Step 3: Check the Web Browser in PC or NB

Step 4: Determine Connection Setting

Step 5: Install the SHDSL Router

Configuration via Web Browser

Basic Setup

................................

Bridge Mode

................................

Routing Mode

................................

DHCP Server

................................

DHCP Client

................................

PPPoE or PPPoA

................................

IPoA or EoA

................................

Advanced Setup SHDSL router

957AE-10BTS User Manual

Page 4 of 113

................................

..................

................................

...... 3

............ 6

................. 6

.......... 7

..... 9

......... 10

................ 11

..... 13

......... 16

............. 16

........... 17

................... 18

19

................. 19

....................... 19

...................... 19

. 19

......... 19

........... 20

......... 23

........ 24

...... 26

....... 26

......... 28

. 30

......... 32

.......... 35

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Advanced Setup. SHDSL.bis router

WAN

................................

Bridge

................................

VLAN

................................

NAT/DMZ

................................

Virtual Server

................................

Administration

................................

Utility

................................

Status

................................

LAN-to-

LAN connection with bridge Mode

CPE Side

................................

LAN to LAN Connection with Routing Mode

CPE side

................................

Configuration via Serial Console or Telnet with Manu Driven

Interface

................................

Configuration via Serial Console or Telnet

Window structure

................................

Configuration

................................

Status

................................

Show

................................

Write

................................

Administration

................................

Setup

................................

957AE-10BTS User Manual

Page 5 of 113

................................

...................

................................

..................

..........................

................................

.......................

................................

...........................

................................

.... 38

..................... 41

.................. 43

................... 45

............. 51

....... 54

..... 68

74

76

77

............. 78

80

.............. 82

.............. 85

86

. 87

....... 92

................... 93

.................... 94

...... 95

................... 99

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Description

The BlackBox

modem family includes ATM G.shdsl or G.shdsl.bis routers especially designed to

be Ethernet Extenders for LAN

The SHDSL (Symmetric High Speed Digital Subscriber Loop) routers comply with G.991.2 or

G.991.2(2004) standard with 10/100 Base

multi-

range form 192Kbps to 2.304Mbps (5.696Mbps with SHDSL.bis)

single-

pair copper wire or from 384Kbps to 11.392Mbps payload rates over existing two

copper wire.

The SHDSL routers are designed not only to optimize the service bit rate from central office to

customer premises also it in

functions of Multi-

DMZ, virtual server mapping and VPN pass

Because of rapid growth of network, virtual LAN has become one of the major new areas in

internetworking industry. The SHDSL

VLAN over ATM network.

The firewall routers provide not only advanced functions, Multi

VPN pass-

through but advanced firewall, SPI, NAT, DoS protection serving as a powe

to protect from outside intruders of secure connection.

The SHDSL routers allow customers to leverage the latest in broadband technologies to meet their

growing data communication needs. Through the power of SHDSL products, you can access

superior manageability and reliability.

Features

•

Easy configuration and management with password control for various application

environments

•

Efficient IP routing and transparent learning bridge to support broadband Internet

services

• VPN pass-

through for

•

Virtual LANs (VLANs) offer significant benefit in terms of efficient use of bandwidth,

flexibility, performance and security

• Build-

in advanced SPI firewall (Firewall router)

• DMZ host/Multi-

DMZ/Multi

Internet for the cost of IP address

•

Fully ATM protocol stack implementation over SHDSL

•

PPPoA and PPPoE support user authentication with PAP/CHAP/MS

•

SNMP management with SNMPv1/SNMPv2 agent and MIB II

•

Getting enhancements and

957AE-10BTS User Manual

Page 6 of 113

-to-LAN and ISP-to-LAN applications.

-T auto-

negotiation. It provides business

payload rates over exiting

tegrates high-

end Bridging/Routing capabilities with advanced

-through.

router supports port-based and tag

-

DMZ, virtual server mapping and

safeguarded connections

-NAT enables multiple workstations

on the LAN to access the

new features via Internet software upgrade

-class,

-pair

based IEEE 802.1q

rful firewall

-CHAP

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Specification

Routing

•

Support IP/TCP/UDP/ARP/ICMP/IGMP protocols

•

IP routing with static routing and RIPv1/RIPv2 (RFC1058/2453)

•

IP multicast and IGMP proxy (RFC1112/2236)

•

Network address translation (NAT/PAT) (RFC

•

NAT ALGs for ICQ/Netmeeting/MSN/Yahoo Messenger

•

DNS relay and caching (RFC1034/1035)

•

DHCP server, client and relay (RFC2131/2132)

Bridging

•

• IEEE 802.1D transparent learning bridge

• • Tag-

based IEEE 802.1q VLAN

• • Port-

based VLAN (4

• •

Spanning tree protocol (option)

Security

• DMZ host/Multi-

DMZ/Multi

•

Virtual server mapping (RFC1631)

• VPN pass-

through for PPTP/L2TP/IPSec tunneling

• Natural NAT firewall

•

Advanced Stateful packet inspection (SPI) firewall (Firewall Router)

•

Application level gateway for URL and keyword blocking (Firewall Router)

•

User access control: deny certain PCs access to Internet service (Firewall Router)

Management

• Easy-to-use web-

based GUI for quick setup, configuration and management

• Menu-driven inte

rface/Command

•

Password protected management and access control list for administration

•

SNMP management with SNMPv1/SNMPv2 (RFC1157/1901/1905) agent and MIB II

(RFC1213/1493)

•

Software upgrade via web

ATM

• Up to 8 PVCs

•

OAM F5 AIS/RDI and loopback

• AAL5

ATM QoS

•

UBR (Unspecified bit rate)

•

CBR (Constant bit rate)

• VBR-

rt (Variable bit rate real

• VBR-

nrt (Variable bit rate non

AAL5 Encapsulation

•

VC multiplexing and

•

Ethernet over ATM (RFC 2684/1483)

•

PPP over ATM (RFC 2364)

•

Classical IP over ATM (RFC 1577)

PPP

•

PPP over Ethernet for fixed and dynamic IP (RFC 2516)

•

PPP over ATM for fixed and dynamic IP (RFC 2364)

•

User authentication with PAP/CHAP/MS

957AE-10BTS User Manual

Page 7 of 113

1631)

-port router)

-NAT function

-

line interface (CLI) for local console and Telnet access

-browser/TFTP server

-time)

-real-time)

SNAP/LLC

-CHAP

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

WAN Interface

• SHDSL: ITU-

T G.991.2 (Annex A, Annex B) (SHDSL router)

• SHDSL.bis: ITU-

T G.991.2 (2004) Annex A/B/F/G (SHDSL.bis router)

•

Encoding scheme: 16

• Data Rate: o

SHDSL, single pair: N x 64Kbps (N=3~36, 0 for adaptive)

o

SHDSL.bis, single pair:

o

SHDSL.bis, two

•

Impedance: 135 ohms

LAN Interface

• 10/100 Base-T auto

-

• Four-

port router: 4x 10/100 Base

Hardware Interface

• WAN: RJ- 45

• LAN: RJ-45 4x

•

Console: RS232 female

• ND:

Reset button for factory default

Indicators

• Local

• Renmote

•

LAN. Led located on a back panel

Physical/Electrical

•

Dimensions: 18.7 x 3.3 x 14.5cm (WxHxD)

•

Power: 9VDC, 100~240VAC (via power adapter)

•

Power consumption: 9 watts max

• Temperature: 0~55

。

•

Humidity: 0%~95%RH (non

Memory

•

2MB Flash Memory, 8MB SDRAM

957AE-10BTS User Manual

Page 8 of 113

-TCPAM, 32-TCPAM

N x 64Kbps (N=3~89, 0 for adaptive)

sensing and auto-negotiation

-T auto-MDIX

C

-condensing)

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Model Overview

Smartlink_SHDSL

Overview

DESKTOP (Smartlink I & II), Ethernet Bridge Router, VLAN

DeskTop

ATM

Bridge

MDS921AE-10BTS

MDS957AE-10BTS

957AE-10BTS User Manual

Page 9 of 113

Router

Ethernet Bridge

Single Pair SHDSL

Dual Pair SHDSL

Single Pair SHDSL.bis

Dual Pair SHDSL.bis

Multi-Service

Point to Point

Point to Multipoint

9V-DC

Internal 4 Port Ethernet Switch

Firewall

VLAN Support

Console Port Management

Web Management

Telnet Management

SNMP Management

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Applications

Application with DSLAM

Application with DSLAM, ISP

Point-to-

Point Application, LAN

Ethernet

LAN-to-

LAN Ethernet Extension with Link Protection

TC

-

Ethernet

Ethernet Extension in Multi

957AE-10BTS User Manual

Page 10 of 113

-to-LAN Ethernet Extension

Main Link

Standby Link

PAM TC-PAM

Ethernet

-Link mode

Ethernet

TC-PAM

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Firewall

A firewall protects networked computers from intentional hostile intrusion that could compromise

confidentiality or result in data corruption or denial of service. It must have at least two network

interfaces, one for the network it is intended to protect,

firewall sits at the junction point or gateway between the two networks, usually a private network

and a public network such as the Internet.

A firewall examines all traffic routed between the two networks to

does, it is routed between the networks, otherwise it is stopped. A firewall filters both inbound and

outbound traffic. It can also manage public access to private networked resources such as host

applications. It ca

n be used to log all attempts to enter the private network and trigger alarms when

hostile or unauthorized entry is attempted. Firewalls can filter packets based on their source and

destination addresses and port numbers. This is known as address filtering

filter specific types of network traffic. This is also known as protocol filtering because the decision

to forward or reject traffic is

Firewalls can also filter traffi

c by packet attribute or state.

An Internet firewall cannot prevent individual users with modems from

network. By doing so they bypass the firewall altogether. Employee misconduct or carelessness

cannot be controlled by firewall

accounts must be strictly enforced. These are management issues that should be raised during

the planning of any security policy, but that cannot be solved with Internet firewalls alone.

Types of Firewall

There are three types of firewall:

Packet Filtering

In packet filtering, only the protocol and the address information of each packet is examined. Its

contents and context (its relation to other packets and to the intended application) are

The firewall pays no attention to applications on the host or local network and it "knows" nothing

about the sources of incoming data. Filtering consists of examining incoming or outgoing packets

and allowing or disallowing their transmission or a

rules. Network Address Translation (NAT) routers offer the advantages of packet filtering firewalls

but can also hide the IP addresses of computers behind the firewall, and offer a level of

circuit-based filtering.

Circuit Gateway

Also called a "Circuit Level Gateway," this is a firewall approach that validates connections before

allowing data to be exchanged. What this means is that the firewall doesn't simply allow or

disallow packets but also determines wh

according to configurable rules, then opens a session and permits traffic only from the allowed

source and possibly only for a limited period of time.

Application Gateway

The Application Level Gateway acts

with the remote system in their behalf. This can render a computer behind the firewall all but

invisible to the remote system. It can allow or disallow traffic according to very specific rules, for

instance permitting some commands to a server but not others, limiting file access to certain types,

varying rules according to authenticated users and so forth. This type of firewall may also perform

very detailed logging of traffic and monitoring of eve

instructed to sound alarms or notify an operator under defined conditions. Application

gateways are generally regarded as the most secure type of firewall. They certainly have the most

sophisticated capabilities.

957AE-10BTS User Manual

Page 11 of 113

and one for the network it is exposed to. A

see if it meets certain criteria. If it

dependent

upon the protocol used, for example HTTP, ftp or telnet.

dialing

s. Policies involving the use and misuse of passwords and user

cceptance on the basis of a set of configurable

ether the connection between both ends is valid

as a proxy for applications, performing all data exchanges

nts on the host system, and can often be

. Firewalls can also

into or out of the

ignored.

-level

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Denial of Service

Attack

Denial of service (DoS) attacks typically come in two flavors: resource starvation and resource

overload. DoS attacks can occur when there is a legitimate demand for a resource that is greater

than the supply (i.e. too many w

vulnerabilities or system mis

configurations

a malicious denial of service and simple system overload is the requirement of an individual with

m

alicious intent (attacker) using or attempting to use resources specifically to deny those

resources to other users.

Ping of death-

On the Internet, ping of death is a kind of denial of service (DoS) attack caused by

an attacker deliberately sending an IP packet larger than the 65,536 bytes allowed by the IP

protocol. One of the features of TCP/IP is fragmentation; it allows a single

down into smaller segments. Attackers began to take advantage of that feature when they found

that a packet broken down into fragments could add up to more than the allowed 65,536 bytes.

Many operating systems didn't know what to do

froze, crashed, or rebooted. Other known variants of the ping of death include teardrop, bonk and

nestea.

SYN Flood-

The attacker sends TCP SYN packet which start connections very fast, leaving the

victim wa

iting to complete a huge number of connections, causing it to run out of resources and

dropping legitimate connections. A new defense against this is the “SYN cookies”. Each side of a

connection has its own sequence number. In response to a SYN, the attack

special sequence number that is a “cookie” of the connection then forgets everything it knows

about the connection. It can then recreate the forgotten information about the connection where

the next packets come in from a legitimate co

ICMP Flood-

The attacker transmits a volume of ICMP request packets to cause all CPU

resources to be consumed serving the phony requests.

UDP Flood-

The attacker transmits a volume of requests for UDP diagnostic services which cause

all CPU re

sources to be consumed serving the phony requests.

Land attack-

The attacker attempts to slow your network down by sending a packet with identical

source and destination addresses originating from your network.

Smurf attack-

Where the source address of a broadcast ping is forged so that a huge number of

machines respond back to victim indicated by the address, overloading it.

Fraggle Attack-

A perpetrator sends a large amount of UDP echo packets at IP broadcast

addresses, al

l of it having a spoofed source address of a victim.

IP Spoofing-

IP Spoofing is a method of masking the identity of an intrusion by making it appeared

that the traffic came from a different computer. This is used by intruders to keep their anonymity

and

can be used in a Denial of Service attack.

957AE-10BTS User Manual

Page 12 of 113

eb requests to an already overloaded web server). Software

can also cause DoS situations. The difference between

IP packet to be broken

when they received an oversized packet, so they

ed machine creates a

nnection.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

VLAN (Virtual Local Area Network)

Virtual LAN (VLAN) is defined as a group of devices on one or more LANs that are configured so

that they can communicate as if they were attached to the same wire, when in fact

on a number of different LAN segments. Because VLAN is based on logical instead of physical

connections, it is extremely flexible.

The IEEE 802.1Q defines the operation of VLAN bridges that permit the definition, operation, and

administra

tion of VLAN topologies within a bridged LAN infrastructure. VLAN architecture benefits

include:

•

Increased performance

•

Improved manageability

•

Network tuning and simplification of software configurations

•

Physical topology independence

• Increased security

options

As DSL (over ATM) links are deployed more and more extensively and popularly, it is rising

progressively to implement VLAN (VLAN

requirement of ISPs.

We discuss the implementation of VLAN

spreads over both the COE and CPE sides, where there is no layer 3 routing involved.

Specification

•

The unit supports up to 8 active VLANs with shared VLAN learning (SVL) bridge out of

4096 possible

VLANs specified in IEEE 802.1Q.

•

Each port always belongs to a default VLAN with its port VID (PVID) as an untagged

member. Also, a port can belong to multiple VLANs and be tagged members of these

VLANs.

•

A port must not be a tagged member of its default VLA

• If a non-

tagged or null

PVID of the ingress port.

•

If the packet is tagged with non

•

The look up process starts with VLAN look up to determine w

VID is not valid, the packet will be dropped and its address will not be learned. If the VID is

valid, the VID, destination address, and source address lookups are performed.

•

The VID and destination address lookup determines

packet will be broadcasted to all members of the VLAN, except the ingress port.

•

Frames are sent out tagged or untagged depend on if the egress port is a tagged or

untagged member of the VLAN that frames belong.

• If VI

D and source address look up fails, the source address will be learned.

Frame Specification

An untagged frame or a priority

which it belongs. Such frames are classified as belonging to a parti

parameters associated with the receiving port. Also, priority tagged frames, which, by definition,

carry no VLAN identification information, are treated the same as untagged frames.

A VLAN-

tagged frame carries an explicit identification

carries a tag header that carries a non

68 octets. Such a frame is classified as belonging to a particular VLAN based on the value of the

957AE-10BTS User Manual

Page 13 of 113

-to-

PVC) over DSL links and, hence, it is possible to be a

-to-

PVC only for bridge mode operation, i.e., the VLAN

N.

-

VID tagged packet is received, it will be assigned with the default

-

null VID, the VID in the tag will be used.

hether the VID is valid. If the

the forwarding ports. If it fails, the

-

tagged frame does not carry any identification of the VLAN to

cular VLAN based on

of the VLAN to which it belongs; i.e., it

-

null VID. This results in a minimum tagged frame length of

they are located

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

VID that is incl

uded in the tag header. The presence of the tag header carrying a non

means that some other device, either the originator of the frame or a VLAN

mapped this frame into a VLAN and has inserted the appropriate VID.

The following f

igure shows the difference between a untagged frame and VLAN tagged frame,

where the Tag Protocol Identifier (TPID) is of 0x8100 and it identifies the frame as a tagged frame.

The Tag Control Information (TCI) consists of the following elements: 1) User pr

tagged frame to carry user priority information across bridged LANs in which individual LAN

segments may be unable to signal priority information (e.g., 802.3/Ethernet segments). 2) The

Canonical Format Indicator (CFI) is used to signal t

Information Field (RIF) field, and, in combination with the Non

carried in the RIF, to signal the bit order of address information carried in the encapsulated frame.

3) The VID uniquely

identifies the VLAN to which the frame belongs.

957AE-10BTS User Manual

Page 14 of 113

he presence or absence of a Routing

-

canonical Format Indicator (NCFI)

-null VID

-aware bridge, has

iority allows the

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

957AE-10BTS User Manual

Page 15 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Getting to know about the router

This section will introduce

the

Front Panel of four

The front panel contains LEDs which show the status of the

LEDs

Active

LOCAL Red Blink

Light

Yellow

Blink

Green

Light

REMOTE Green

Blink

Note: LAN port status is indicated on the back of the device.

957AE-10BTS User Manual

Page 16 of 113

hardware of the router.

-port router

router.

Description SHDSL self test SHDSL line connection is dropped

SHDSL handshake

SHDSL line connection is established

Transmit or received data over SHDSL link

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Rear Panel

The rear panel of SHDSL router is where all of the connections are made.

9 VDC

9V

Power adaptor inlet: Input voltage 12VDC

Switching HUB

4 Port Ethernet 10Base

MONITOR RSxDSL

G.SHDSL interface for WAN port (RJ

Button near xDSL

Reset Button

The reset button can be used only in one of two ways.

•

When you want to change its configuration but you forget the user name or password,

Press the Reset Button a while with a paper clip or sharp penc

Button will cause the product

configuration.

•

If the product is having problems connecting to the Internet and you want to configure it

again clearing all configurations, press the Reset But

Pressing the Reset Button will cause the produc

losing all of yours configuration.

957AE-10BTS User Manual

Page 17 of 113

4- Port Switch MONITOR

xDSL

SA-PAM-SAN-ATM-4ETH-FW-4W

Connectors Description

-T for LAN (RJ-45)

232C (DB9) for system configuration and maintenance

-11) 2 or 4-wire

il. Pressing the Reset

loading the factory default setting and losing all of yours

ton with a paper clip or sharp

t loading the factory default

pencil.

setting and

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Pinout

Console Port DB9 pinout:

Pin Number

1 No connection 2 RxD (O) 3 TxD (I) 4 No connection 5 GND 6 No connection 7 CTS (O) 8 RTS (I) 9 No connection

SHDSL RJ45 pinout:

Pin Number

1 No connection 2 No connection

3

Loop B

(4 wire support only)

4

Loop A

5

Loop A

6

Loop B (4 wire support only)

7 No connection 8 No connection

957AE-10BTS User Manual

Page 18 of 113

Description

Figure

45

8

9

Description

Figure

1

8

123

67

Front View RJ45-8

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Configuration to the router

This guide is designed to lead users through Web Configuration of G.shdsl Router in the easiest

and quickest way possible. Please follow the

Note: There are three methods to configure the router: serial console, Telnet and Web Browser.

Only one configuration application is used to setup the Router at any given time. Users

have to choose one method to configure it.

For Web configuration, you can skip step

For Serial Console Configuration, you can skip step 1 and 3.

Step 1: Check the Ethernet Adapter in PC or NB

Make sure that

Ethernet Adapter had been installed in PC or NB used for configuration of the

router. TCP/IP protocol is necessary for web configuration, so please check the TCP/IP protocol

whether it has been installed.

Step 2: Check the Terminal Access Program

For

Serial Console and Telnet Configuration, users need to setup the terminal access program

with VT100 terminal emulation.

Step 3: Check the Web Browser in PC or NB

According to the Web Configuration, the PC or NB need to install Web Browser, IE or Netscap

Note: Suggest to use IE5.0, Netscape 6.0 or above and 800x600 resolutions or above.

Step 4: Determine Connection Setting

Users need to know the Internet Protocol supplied by your Service Provider and determine the

mode of setting.

RFC1483 RFC1577 RFC2364 RFC2516

The different protocols are needed to setup the difference WAN parameters. After

protocol provided by your ISP, you have to setup the right protocol.

Step 5: Install the SHDSL Router

To avoid possible damage to this Router, do not turn on the router before Hardware Installation.

•

Connect the power adapter to the port

•

Connect the Ethernet cable.

Note: If the

router is directly connected to PC or NB, the Ethernet cable has to be use

one. If the

router is connected to hub or s

auto-

sensing. If yes, both cross over and none cross over Ethernet able are suitable. If not,

only pass through Ethernet cable could be used.

• Connect the DSL-

cable to the product and the other side of

• Connect the power

adapter to power source.

•

Turn on the PC or NB which is used for configuration the Router.

957AE-10BTS User Manual

Page 19 of 113

instructions carefully.

2

.

Protocol Selection

Ethernet over ATM Classical Internet Protocol over ATM Point-to-Point Protocol over ATM Point-to-Point Protocol over Ethernet

labeled DC-

IN on the rear panel of the product.

witch, be sure that the hub or

DSL-

cable to wall jack.

e.

knowing the

d cross over

switch supporting

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Configuration via Web Browser

Using Microsoft Windows 2000 and XP: click the

Double click the network

icon.

957AE-10BTS User Manual

Page 20 of 113

start button. Select

setting

and control panel.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

In the Configuration window, select the

network card and then click

property

Choose IP address tab. Select

The window will ask you to restart the PC. Click

957AE-10BTS User Manual

Page 21 of 113

TCP/IP

protocol line that has been associated with your

icon.

Obtain IP address automatically. Click OK

button.

Yes button.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

After rebooting your PC, open IE or Netscape Browser to connect the Router. Type

http://192.168.0.1

The default

IP address and sub net

Router is 192.168.0.1 and 255.255.255.0. Because

the router acts as DHCP server in your network,

the router will automatically assign IP address for

PC or NB in the network.

Type User Name root

and Password

The default user name and password are both

them after configuration.

Note: After

changing the User Name and

957AE-10BTS User Manual

Page 22 of 113

-mask of the

root and then click OK.

root

. For the system security, suggest to change

Password, strongly recommend

to save them

on your PC.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Basic Setup

The Basic

Setup contains LAN, WAN, Bridge and Route operation mode. User can use it to

completely setup the router. After successfully completing it, you can access Internet. This is the

easiest and possible way to setup the router.

Note: The advanced functions

advanced function will affect the

Click Basic

for basic installation.

957AE-10BTS User Manual

Page 23 of 113

should be used from qualified users only.

The

system performance or even create

error

incorrect setting of

s.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Bridge Mode

Before configuration the router in bridge mode

VPI: VCI: Encapsulation: Gateway: Host Name:

(if applicable)

Click Bridge and CPE

Side to setup Bridging mode of the Router and then click Next for the next

setting.

This product can be setup two SHDSL mode: CO, Central Office, and CPE, Customer Premises

Equipment. For connection with DSLAM, the SHDSL mode is CPE. For LAN to LAN co

one side must be Co and the other side must be CPE.

LAN Parameters Enter IP: 192.168.0.1 Enter Subnet Mask:

255.255.255.0

Enter Gateway:

192.168.0.254

The Gateway IP is provided by ISP.

Enter Host Name: SOHO

Some of the ISP requires the host nam

identification. You may check with ISP to see if

your Internet service has been configured with a

host name. In most cases, this field can be

ignored.

WAN1 Parameters Enter VPI: 0 Enter VCI: 32 Click LLC

Click Next.

957AE-10BTS User Manual

Page 24 of 113

check with your ISP about these information.

e as

nnection,

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

The screen will prompt the new configured parameters. Check the parameters and

The router will reboot with the new setting or

957AE-10BTS User Manual

Page 25 of 113

Continue

to configure another parameters.

Click Restart

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Routing Mode

Routing mode contains DHCP server, DHCP client, DHCP

and Ethernet and IP over ATM and Ethernet over ATM. You have to clarify which Internet protocol

is provided by ISP.

Click ROUTE and CPE

Side

This product can be setup two SHDSL mode: CO, Central Of

Equipment. For connection with DSLAM, the SHDSL mode is CPE. For LAN to LAN connection,

one side must be Co and the other side must be CPE.

DHCP Server

Dynamic Host Configuration Protocol (DHCP) is a communication proto

administrators to manage centrally and automate the assignment of Internet Protocol (IP)

addresses in an organization's network. Using the Internet Protocol, each machine that can

connect to the Internet needs a unique IP address. Whe

users with a connection to the Internet, an IP address must be assigned to each machine

be connected.

Without DHCP, the IP address must be entered manually at each computer. If computers move to

another

location in another part of the network, a new IP address must be entered. DHCP lets a

network administrator to supervise and distribute IP addresses from a central point and

automatically sends a new IP address when a computer is plugged into a different

network. If the DHCP server is Enable, you have to setup the following parameters for processing

it as DHCP server.

The embedded DHCP server assigns network configuration information at most 253 users

accessing the Internet in the same time.

IP type: Fixed IP Address: 192.168.0.1 Subnet Mask:

255.255.255.0

Host Name: SOHO

Some of the ISP requires the host name as identification. You may check with ISP to see if your

Internet service has been configured with a host name. In most cases, this

Trigger DHCP Service:

Server

The default setup is Enable DHCP server. If you want to turn off the DHCP service, choose Disable.

957AE-10BTS User Manual

Page 26 of 113

relay, Point-to-

Point Protocol over ATM

then press Next.

fice, and CPE, Customer Premises

col that lets network

n an organization sets up its computer

field can be ignored.

that can

place in the

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

For example: If the LAN IP address is 192.168.0.1, the IP range of LAN is 192.168.0.2 to

192.168.0.51

. The DHCP server assigns the IP form Start IP Address to End IP Address. The legal

IP address range is form 0 to 255, but 0 and 255 are reserved for broadcast so the legal IP

address range is from 1 to 254. On the other hand, you cannot assign an IP great

less then 1. Lease time 72 hours indicates that the DHCP server will reassign IP information in

every 72 hours.

DNS Server: Your ISP will provide at least one Domain Name Service Server IP. You can type the

router IP in this field. The

router will act as DNS server relay function.

957AE-10BTS User Manual

Page 27 of 113

er than 254 or

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

You may assign fixed IP addresses to some devices while using DHCP, provided that the fixed IP

address are not within the range used by the DHCP server.

Press Next

to setup WAN1 parameters.

DHCP Client

Some of the ISP provides DHCP server service by which the PC in LAN can access IP information

automatically. To setup the DHCP client mode, follow the procedure.

LAN IP Type: Dynamic

Click Next

to setup WAN1 parameters.

DHCP relay

If you have a DHCP

server in LAN and you want to use it for DHCP services, the product provides

DH

CP relay function to meet your

IP Type: Fixed IP Address: 192.168.0.1 Subnet Mask:

255.255.255.0

Host Name: SOHO

Some of the ISP requires the host name as

Internet service has been configured with a host name. In most cases, this field can be ignored.

Trigger DHCP Service:

Relay

Press Next

to setup DHCP server parameter.

957AE-10BTS User Manual

Page 28 of 113

needs.

identification. You may check with ISP to see if your

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Enter DHCP server IP address i

Press Next

957AE-10BTS User Manual

Page 29 of 113

n IP address field.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

PPPoE or PPPoA

PPPoA (point-to-

point protocol over ATM) and PPPoE (point

authentication and connection protocols used by many service providers for broadband Internet

access. These

are specifications for connecting multiple computer users on an Ethernet local area

network to a remote site through common customer premises equipment, which is the telephone

company's term for a modem and similar devices. PPPoE and PPPoA can be used to o

building. Users share a common Digital Subscriber Line (DSL), cable modem, or wireless

connection to the Internet. PPPoE and PPPoA combine the Point

commonly used in dialup connections, with the Ethernet protocol or ATM pr

multiple users in a local area network. The PPP protocol information is encapsulated within an

Ethernet frame or ATM frame.

Before your configure

the router, check

VPI: VCI: Encapsulation: User Name: Password: DNS Server: Host Name:

(if applicable)

IP address: (if app

licable)

Key in the WAN1 parameters:

VPI: 0 VCI: 32 AAL5 Encap: LLC Protocol: PPPoA + NAT or

PPPoE

Click Next

to setup User name and password.

For more understanding about NAT, review NAT/DMZ.

957AE-10BTS User Manual

Page 30 of 113

-to-

point protocol over Ethernet) are

-to-

Point Protocol (PPP),

otocol, which supports

the information below with your ISP.

+ NAT

ffice or

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Type the ISP1 parameters.

Username: test Password: test Password Confirm: test

Your ISP will provide the user name and password.

Idle Time: 10

You want your Internet connection to remain on at all time, enter 0 in the Idle Time field.

There are two IP types, Dynamic and Static, which you

It means that ISP PPP server will provide IP information including dynamic IP address when

SHDSL connection is established. On the other hand, you do not need to type the IP address of

WAN1. Some of the ISP will p

IP Type: Fixed IP Address: 192.168.1.1 Click Next.

Note: For

your safety, the password will prompt a

The screen will prompt the parameters that will be written in EPROM. Check the

before writing in EPROM.

Press Restart to restart the router working with new parameters or press continue to setup another

parameter.

957AE-10BTS User Manual

Page 31 of 113

can setup. The default IP type is Dynamic.

rovide fixed IP address over PPP. For fixed IP address:

star symbol.

parameters

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

IPoA or EoA

Before your configure

the router, check

VPI: VCI: Encapsulation: IP Address: Subnet Mask: Gateway: DNS Server: Host Name: (if app

licable

Type the Wan Parameters;

VPI: 0 VCI: 33 AAL5 Encap: LLC

Protocol: IPoA , EoA , IPoA

+

Click Next

to setup the IP parameters.

For more understanding about NAT, review NAT/DMZ.

IP Address: 10.1.2.1 It is router IP add

ress seem from Internet. Your ISP will provide it and you need to specify here.

Subnet mask:

255.255.255.0

This is the router subnet mask seen by external users on Internet. Your ISP will provide it to you.

Gateway: 10.1.2.2

Your ISP will provide you the

DNS Server 1: 168.95.1.1

Your ISP will provide at least one DNS (Domain Name System) Server IP address.

Click Next

957AE-10BTS User Manual

Page 32 of 113

the information below with your ISP.

)

NAT or EoA + NAT

default gateway.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

The screen will prompt the parameters that will be written in EPROM. Check the parameters before

writing in EPROM.

957AE-10BTS User Manual

Page 33 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Press Restart to restart the router working with new parameters or press continue to setup another

parameter.

957AE-10BTS User Manual

Page 34 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Advanced Setup SHDSL router

Advanced setup contains SHDSL, WAN, Bridge, Route, NAT/DMZ, Virtual server and firewall

parameters.

SHDSL

You can setup the Annex type, data rate and SNR margin for SHDSL parameters in SHDSL.

Click SHDSL

Annex Type: There are two Annex types, Annex A (ANSI) and Annex B (ETSI), in SHDSL. Check

with your ISP about it.

Data Rate: you can setup the SHDSL data r

957AE-10BTS User Manual

Page 35 of 113

ate in the multiple of 64kbps. For adaptive mode, you

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

have to setup n=0. The router will adapt the data rate according to the line status.

SHDSL SNR margin: the margin range is from 0 to 10.

957AE-10BTS User Manual

Page 36 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

SNR margin is an index of line connection. You can see the actual SNR margin in STATUS SHDSL.

The larger SNR margin, the better line connection.

If you set SNR margin in the field as 2, the SHDSL connection will drop and reconnect when the

SNR margin is

lower than 2. On the other hand, the device will reduce the line rate and reconnect

for better line connection.

The screen will prompt the parameters that will be written in EPROM. Check the parameters before

writing in EPROM.

Press Restart to restart

the router working with new parameters or press continue to setup another

parameter.

957AE-10BTS User Manual

Page 37 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Advanced Setup. SHDSL.bis router

You can setup the Annex type, data rate and SNR margin for SHDSL.bis parameters in

SHDSL.bis.

Click

SHDSL.bis

Annex Type: There are

foure Annex types, Annex A (ANSI), Annex B (ETSI), AnnexAF and Annex

BG in SHDSL.bis. Check with your ISP about it.

TCPAM Type: the default option is Auto. You may assign the different type manually by click the

caption TPCAM-

16 or TPCAM

957AE-10BTS User Manual

Page 38 of 113

-32

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

For single-pair mode

Data Rate (2W): you can setup the SHDSL.bis data rate in the multiple of 64kbps.

The default data rate is 5696Kbps (n=89).

Under Annex F/G

TCPAM32 ; data rate is 768Kbps ~ 5696Kbps (Nx64kbps, N=12~89)

TCPAM16 ; data rate is 192Kbps ~ 3840Kbps

Under Annex A/B

TCPAM16 ; 192Kbps ~ 2304Kbps (Nx 64kbps, N=3~36)

For adaptive mode, you have to setup n=0. The router will adapt the data rate according to the line

status.

957AE-10BTS User Manual

Page 39 of 113

(Nx64kbps, N=3~60)

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

For two-pair mode

Link Type.

Please select the desired

operation mode of the router.

2-Wire: 2-

wire mode, second pair is d

M-Pair 4-

wire mode. If one of two pairs fails, all link breaks

M-Pair (Conexant) 4-

wire mode.

Auto Fall Back 4-

wire mode. Two pairs works s

goes through the other pair.

Standby 4-

wire mode. Only one pair works, another pair is in standby. When one

pair fails, fraffic goes through the other pair.

Multi-link 4-

wire mode. Each pair is connected to two d

be or may not be in same location

Data Rate (4W)

: you can setup the SHDSL.bis data rate in the multiple of 128kbps.

The default data rate is 11392Kbps (n=89).

Under Annex F/G

TCPAM32 ; data rate is 1536Kbps ~ 11392Kbps

TCPAM16 ; data rate is 384Kbps ~ 7680Kbps (Nx128kbps, N=3~60)

Under Annex A/B

TCPAM16 ; 384Kbps ~ 4608Kbps (Nx 128kbps, N=3~36)

For adaptive mode, you have to setup n=0. The router will adapt the data rate according to the line

status.

SNR margin is an index of line connection quality. You can see the actual SNR margin in STATUS

SHDSL.bis. The larger is SNR margin; the better is line connection quality.

If you set SNR margin in the field as 2, the SHDSL.bis connection will drop and

SNR margin is lower than 2. On the other hand, the device will reduce the line rate and reconnect

for better line connection quality.

The screen will prompt the parameters that will be written in EPROM. Check the parameters before

writing in EPROM.

Press Restart to restart the router working with new parameters or press continue to setup another

parameter.

957AE-10BTS User Manual

Page 40 of 113

isabled

Extended compatibility with Conexant IC

imultaneously. When one pair fails, traffic

ifferent devices, which may

(Nx128kbps, N=12~ 89)

reconnect when the

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

WAN

The SHDSL or SHDSL.bis router supports up to 8 PVCs. WAN 1 was configured via BASIC except

QoS. If you want to setup another

hand, you must apply two or more Internet Services with ISPs otherwise you do not need to setup

WAN.

The WAN Number 1 will be the parameters setup in Basic Setup. If you want to setup another PVC

you can configure them in WAN 2 to WAN 8.

Enter the parameters.

If WAN protocol is PPPoA or PPPoE with dynamic IP, leave the default WAN IP address and

Subnet Mask as default setting. The system will ingore the IP address and Subnet mask

information but

deleating or leaving blank the items will cause system error.

If the WAN protocol is IPoA or EoA, leave the ISP parameters as default setting. The system will

ingore the information but deleating or leaving blank the items will cause system error.

QoS (

Quality of Service): The Traffic Management Specification V4.0 defines ATM service

cataloges that describe both the traffic transmitted by users onto a network as well as the Quailty of

Service that the network need to provide for that traffic.

UBR (Unspe

cified Bit Rate) is the simplest service provided by ATM networks. There is no

guarantee of anything. It is a primary service used for transferring Internet traffic over the ATM

network.

CBR (Constant Bit Rate) is used by connections that requires a stati

avilable during the connection life time. This bandwidth is characterized by Peak Cell Rate. Based

on the PCR of the CBR traffic, specific cell slots are assigned for the VC in the schedule table. The

ATM always sends a signle

cell duting the CBR connection’s assigned cell slot.

VBR-rt (Varible Bit Rate real

-

over IP and video comferencing, that require tightly constrained delays and delay variation. VBR

is characterized by a peak cell rate (PCR), substained cell rate (SCR), and maximun burst rate

(MBR).

VBR-

nrt (Varible Bit Rate non

PCR (Peak Cell Rate) in kbps: The maximum rate at which you expect to transmit data, voice and

video. Consider

PCR and MBS as a menas of reducing lantency, not increasing bandwidth. The

range of PCR is 64kbps to 2400kbps

SCR (Substained Cell Rate): The sustained rate at which you expect to transmit data, voice and

video. Consider SCR to be the true bandwidth of a

The range of SCR is 64kbps to 2400kbps.

MBS (Maximum Burst Size): The amount of time or the duration at which the router sends at PCR.

The range of MBS is 1 cell to 255 cells.

Press Finish

to finish setting.

957AE-10BTS User Manual

Page 41 of 113

PVCs, 2 to 7, the parameters are setup in WAN. On the other

c amount of bandwidth that is

time) is intended for real-

time applications, such as compressed voice

-real-time)

VC and not the lone-

term average traffic rate.

,

-rt

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

The screen will prompt the parameters that will be written in EPROM. Check the parameters before

writing in EPROM.

Press Restart to restart the router working with new parameters or press continue to setup another

parameter.

957AE-10BTS User Manual

Page 42 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Bridge

If your router is setup in bridge mode and you want to setup advanced filter function, you can use

BRIDGE menu to setup the filter function, blocking function.

Click Bridge to setup.

Press Add

to add the static bridge information.

If you want to

filter the definate MAC address of LAN PC to access Internet, press

the filtering table. Key the MAC address in MAC address field and select Filter in LAN field.

If you want to filter the definate MAC address of WAN PC to access LAN, pr

the filtering table. Key the MAC address in MAC address field and select Filter in WAN field. For

example: if your VC is setup at WAN 1, select WAN 1 Filter.

The screen will prompt the parameters that will be written

before writing in EPROM.

957AE-10BTS User Manual

Page 43 of 113

to the EPROM.

Check the parameters

Add to establish

ess Add to establish

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Press Restart

to restart the router working with new parameters or press

parameter.

957AE-10BTS User Manual

Page 44 of 113

continue

to setup another

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

VLAN

Virtual LAN (VLAN) is defined as a group of devices on one or more LANs that are

that they can communicate as if they were attached to the same wire, when in fact they are located

on a number of different LAN segments. Because VLAN is based on logical instead of physical

connections, it is extremely flexible.

Click VLAN

to configure VLAN.

The product support two types of VLAN, 802.1Q and Port

to the router.

For setting 802.1Q VLAN click the 802.1Q Tag

VID: Virtual LAN ID. It is

an definite number of ID which number is from 1 to 4094.

PVID: Port VID which is an untagged member of default VLAN.

Link Type: Access means the port can receive or send untagged packets.

Link Type: Trunk means that the prot can receive or send tagged

Link Type of the WAN is assigned automatically via which mode of the product is configured. If

the product works in bridge mode, the Link type of WAN will be Trunk, tagged port, and you can

assign any PVID to WAN except 0 and leaving blank.

957AE-10BTS User Manual

Page 45 of 113

-

Based. User can configure one of them

-Based VLAN. The screen

will prompt as follow.

packets.

configured so

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

When

the product works under routing mode, the Link Type of WAN will be Access mode,

un-tagged port.

Port-

Based VLANs are VLANs where the packet forwarding decision is based on the destination

MAC address and its associated port.

Click Port-Based VLAN to

configure the router.

Ethernet

This page or function let user to configure the media type of Ethernet

Click ETHERNET to configure Ethernet.

Here are several options:

AutoSense, 100Base

957AE-10BTS User Manual

Page 46 of 113

-TX

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Route

If the Router is connected to more than one network,

between them. A static route is a pre

reach a specific host or network.

With Dynamic Routing, you can enable the Router to automatically adjust to phys

the network’s layout. The Router, using the RIP protocol, determines the network packets’ route

based on the fewest number of hops between the source and the destination. The RIP protocol

regularly broadcasts routing information to other ro

Click Route

to modify the routing information.

To modify the RIP (Routing information protocol) Parameters:

RIP Mode: Enable Auto RIP Summary: Enable Press Modify

957AE-10BTS User Manual

Page 47 of 113

it may be necessary to set up a static route

-

determined pathway that network information must travel to

uters on the network.

ical changes in

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

RIP Mode: this parameter determines how the product handle

RIP allows it to exchange routing information with other router. If set to Disable, the gateway does

not participate in any RIP exchange with other router. If set Enable, the router broadcasts the

routing table of the ro

uter on the LAN and incoporates RIP broadcast by other routers into it’s

routing table. If set silent, the router does not broadcast the routing table, but it accepts RIP

broadcast packets that it receives.

957AE-10BTS User Manual

Page 48 of 113

RIP (Routing information protocol).

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

RIP Version: It determines the format an

gateway.

RIP v1: it only sends RIP v1 messages only.

RIP v2: it send RIP v2 messages in multicast and broadcast format.

957AE-10BTS User Manual

Page 49 of 113

d broadcasting method of any RIP transmissions by the

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Authentication required.

None: for RIP, there is no need of authentication

Password: the RIP is protected by password, authentication code.

MD5: The RIP will be decoded by MD5 than protected by password, authentication code.

Poison Reserve is for the purpose of promptly broadcast or multicast the RIP while the route is

changed. (ex shuting down one of the routers in routing table)

Enable: the gateway will actively broadcast or multicast the information.

Disable: the gateway will not broadcast or multicast the information.

After modifying the RIP parameters, press

The screen will prompt the modified parameter. Check the parameters and perss

the router or press Continue

957AE-10BTS User Manual

Page 50 of 113

code.

finish.

to setup another parameters.

Restart to restart

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

NAT/DMZ

NAT (Network Address Translation) is the translation of an Internet Protocol address

used within one network to a different IP address known within another network. One network is

designated the inside network and the other is the outside. Typically, a company maps its local

inside network addresses to one or more global outsi

addresses of incoming packets back into local IP addresses. This ensure security since each

outgoing or incoming request must go through a translation process, that also offers the

opportunity to qualify or authent

conserves on the number of global IP addresses that a company needs and lets the company to

use a single IP address of its communication in the Internet world.

DMZ (demilitarized zone) is a com

a company private network and the outside public network. It prevents outside users from getting

direct access to a server that has company private data.

In a typical DMZ configuration for an enterprise, a separate computer or host receives requests

from users within the private network to access via Web sites or other companies accessible on the

public network. The DMZ host then initiates sessions for thes

However, the DMZ host is not able to initiate a session back into the private network. It can only

forward packets that have already been requested.

Users of the public network outside the company can access only the DMZ

typically also have the company’s Web pages so these could serve the outside world. However, the

DMZ provides access to no other company data. In the event that an outside user penetrated the

DMZ host’s security, the Web pages might be c

be exposed.

Press NAT/DMZ

to setup the parameters.

957AE-10BTS User Manual

Page 51 of 113

de IP addresses and reverse the global IP

icate the request or match it to a previous request. NAT also

puter host or small network inserted as a “neutral zone” between

e requests to the public network.

orrupted, but no other company information would

(IP address)

host. The DMZ may

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

If you want to enable the NAT/DMZ functions, click Enable. Enable the DMZ host Function is used

the IP address assigned to the WAN for enabling DMZ fu

Multi-

DMZ: Some users who have two or more global IP addresses assigned by ISP can be used

the multi DMZ. The table is for the mapping of global IP address and virtual IP address.

957AE-10BTS User Manual

Page 52 of 113

nction for the virtual IP address.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Multi-

NAT: Some of the virtual IP a

of the global IP addresses (eg: 69.210.1.9 and 69.210.1.10). The Multi

Virtual Start IP Address: 192.168.0.10

Count: 40

Global Start IP Address: 69.210.1.9

Count: 2 Press Finish to continue.

The screen will prompt the parameters that will be written in EPROM. Check the parameters before

writing in EPROM. Press

Restart

configure another parameter.

957AE-10BTS User Manual

Page 53 of 113

ddresses (eg: 192.168.0.10 ~ 192.168.0.50) collectively use two

-

NAT table will be setup as;

to restart the router working with new parameters or

Continue to

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Virtual Server

For example: Specific ports on the WAN interface are re

only 69.210.1.8 (e.g., assigned to WAN from ISP) is visible to the Internet, but does not actually

have any services (other than NAT of course) run

Request with TCP made to 69.210.1.8:80 are remapped to the server 1 on 192.168.0.2:80 for

working days from Monday to Friday 8 AM to 6PM, other requests with UDP made to 69.210.1.8:25

are remapped to serv

er 2 on 192.168.0.3:25 and always on.

You can setup the router as Index 1, protocol TCP, interface WAN1, service name test1, private IP

192.168.0.2, private port 80, public port 80, schedule from Day Monday to Friday and time 8:0 to

16:0 and index 2, prot

ocol UDP, interface WAN1, service name test2, private IP 192.168.0.3,

private port 25, public port 25, schedule always.

Click Virtual Server

to configure the parameters.

Press Modify for modify 1.

957AE-10BTS User Manual

Page 54 of 113

-

mapped to services inside the LAN. As

ning on gateway, it is said to be a virtual server.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Type the necessary parameters then click

Press Restart

to restart the router or press

Firewall

A firewall is a set of related programs that protects the resources of a private network from other

networks. It is helpful to users that allow preventing hackers

resource accidentally.

This level only enables the NAT firewall and the remote management security. The NAT firewall will

take effect if NAT function is enabled. The remote management security is default to block any

WAN

side connection to the device. Non

management connection except those IPs specified in the pool.

Press Finish to finish setting of firewall

The screen will prompt the parameters, which will be written in

957AE-10BTS User Manual

Page 55 of 113

Finish.

continue

to setup another function.

to access its own private data

-

empty legal IP pool in ADMIN will block all remote

EPROM. Check the parameters.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Press restart to restart the router or press continue to setup another function.

This level enables basic firewall security, all DoS protection, and the SPI filter function.

957AE-10BTS User Manual

Page 56 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Press Finish to

finish setting firewall.

The screen will prompt the parameters, which will be written in EPROM. Check the parameters.

957AE-10BTS User Manual

Page 57 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Press restart to restart the router or press Continue to setup another function.

957AE-10BTS User Manual

Page 58 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

User can determine the security level for

configuring the DoS protection and defining an extra packet filter with higher priority than the

default SPI filter. Note that, an improper filter policy may degrade the capability of the firewall

and/or e

ven block the normal network traffic.

957AE-10BTS User Manual

Page 59 of 113

special purpose, environment, and applications by

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

957AE-10BTS User Manual

Page 60 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Click Advanced Firewall Security and then press Finish.

A SYN flood attack attempts to slow your network by requesting new connections but not

completing the process to open the connection. Once the buffer

full a server will not accept any more connections and will be unresponsive.

ICMP Flood: A sender transmits a volume of ICMP request packets to cause all CPU resources to

be consumed serving the phony requests.

UDP Flood:

A sender transmits a volume of requests for UDP diagnostic services which cause all

CPU resources to be consumed serving the phony requests.

A ping of death attack attempts to crash your system by sending a fragmented packet, when

reconstructed is larger

than the maximum allowable size. Other known variants of the ping of death

include teardrop, bonk and nestea.

A land attack is an attempt to slow your network down by sending a packet with identical source

and destination addresses originating from your

IP Spoofing is a method of masking the identity of an intrusion by making it appeared that the traffic

came from a different computer. This is used by intruders to keep their anonymity and can be used

in a Denial of Service attack.

A smurf

attack involves two systems. The attacker sends a packet containing a ICMP echo request

(ping) to the network address of one system. This system is known as the amplifier. The return

address of the ping has been faked (spoofed) to appear to come from a mac

network (the victim). The victim is then flooded with responses to the ping. As many responses are

generated for only one attack, the attacker is able use many amplifiers on the same victim.

IP Spoofing: Falsify the IP header information t

957AE-10BTS User Manual

Page 61 of 113

for these pending connections is

network.

o deceive the destination host.

hine on another

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Traditional firewall are stateless meaning they have no memory of the connections of data or

packets that pass through them. Such IP filtering firewalls simply examine header information in

each packet and attempt to match

prescribe action is taken. If no match is found, the packet is accepted into the network, or dropped,

depending on the firewall configuration.

A stateful firewall maintains a memory of each c

firewall records the context of connections during each session, continuously updating state

information in dynamic tables. With this information, stateful firewalls inspect each connection

traversing each in

terface of the firewall, testing the validity of data packets throughout each

session. As data arrives, it is checked against the state tables and if the data is part of the session,

it is accepted. Stateful firewalls enable a more intelligent, flexible an

security, while defeating most intrusion methods that exploit state

If you want to configure the Packet Filtering Parameters, choose Enable and press Add.

Select the protocol and configure the

If you want to ban all of the protocol from the IP (e.g.: 200.1.1.1) to access the all PCs (e.g.:

192.168.0.2 ~ 192.168.0.50) in the LAN, key in the parameter as;

957AE-10BTS User Manual

Page 62 of 113

it to a set of define rule. If the firewall finds a match, the

onnection and data passing through it. Stateful

d robust approach to network

-

less IP filtering firewalls.

parameter.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Protocol: ANY

Direction: INBOUND (INBOUND is from WAN to LAN, and OUTBOUND is L

Description: Hacker Src. IP Address: 200.1.1.1

Dest. IP Address: 192.168.0.2

Press OK to finish.

The screen will prompt the configured parameters. Check the

Click Restart to restart the gateway or Continue to configure other parameters.

Filtering rule will be configured as follow

Index Protocol Direction

Action

1 TCP Inbound

Permit

2 TCP Outbound

Permit

3 TCP Outbound

Permit

4 TCP Inbound

Permit

5 Any Either

Deny

Packet Direction

Source

1 Inbound

192.168.3.4

2 Outbound

172.16.1.1

957AE-10BTS User Manual

Page 63 of 113

AN to WAN.)

-192.168.0.50

parameters.

Filtering Rule for SMTP connection

Source Destination

Dest. Port

External Internal 25 Internal External

>1023

Internal External 25 External Internal

>1023

Any Any Any

Destination Protocol

Dest. Port

172.16.1.1 TCP 25

192.168.3.4 TCP 1234

Schedule

Always

Action (Rule)

Permit (A) Permit (B)

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

SMTP Server

172.16.1.1:25

Packet Direction

Source

3 Outbound

172.16.1.1

4 Inbound

192.168.3.4

SMTP Client

172.16.1.1:1357

Packet Direction

Source

5 Inbound

10.1.2.3

6 Outbound

171.16.3.4

6

171.16.3.4:6000

X11 Server

Update Filtering Rule

Index Protocol Direction

Action

1 TCP Inbound

Permit

2 TCP Outbound

Permit

3 TCP Outbound

Permit

4 TCP Inbound

Permit

5 Any Either

Deny

Filtering Result

Index Protocol Direction

Action

1 TCP Inbound

Permit(A)

2 TCP Outbound

Permit(B)

3 TCP Outbound

Permit(C)

4 TCP Inbound

Permit(D)

5 TCP Inbound

Deny(E)

6 TCP Outbound

Deny(E)

957AE-10BTS User Manual

Page 64 of 113

Internet

1

2

SMTP Client

192.168.3.4:1234

Firewall

Destination Protocol Dest.

Port

192.168.3.4 TCP 25

172.16.1.1 TCP 1357

Internet

3

4

SMTP Server

192.168.3.4:25

Firewall

Destination Protocol

Dest. Port

171.16.3.4 TCP 6000

10.1.2.3 TCP 5150

Internet

5

10.1.2.3:5150

Firewall

Source Destination

Source Port

External Internal >1023 Internal External 25 Internal External >1023 External Internal 25

Any Any Any

Source Destination

Source Port

192.168.3.4 171.16.1.1 1234

171.16.1.1 192.168.3.4 25

171.16.1.1 192.168.3.4 1357

192.168.3.4 171.16.1.1 25

10.1.2.3 171.16.3.4 5150

171.16.3.4 10.1.2.3 6000

Action (Rule)

Permit (C) Permit (D)

Action (Rule)

Deny (E) Deny (E)

Attacker

Dest. Port

25 >1023 25 >1023 Any

Dest. Port

25 1234 25 1357 6000 5150

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

The rules order affects the filtering result. The filtering process will proceed from top to bottom,

changing the order as the different

Rule Source Address A 10.0.0.0 B 10.1.99.0 C Any

Where “0” at the last eight bits indicates “from 1 to 254”, “0” at any eight bits preceding “0”, “0.0”

or

“0.0.0” indicates “from 1 to 254”. On the other hand, “0” and all “0” successive with “0”

represents any.

When the rule is ordered as ABC.

Index

Source Address

1 10.1.99.1 2 10.1.99.1 3 10.1.1.1 4 10.1.1.1 5 192.168.3.4

The rule order will permit 10.1.99.1 to access 172.16.6.1.

When the rule is ordered as BAC.

Index

Source Address

1 10.1.99.1 2 10.1.99.1 3 10.1.1.1 4 10.1.1.1 5 192.168.3.4

The rule order will deny 10.1.99.1 to access 172.6.6.1.

957AE-10BTS User Manual

Page 65 of 113

Rule Order

result of filtering.

Destination Address Action

172.16.6.0 Permit

172.16.0.0 Deny Any Deny

Destination Address

Action

172.16.1.1

Deny (B)

172.16.6.1

Permit (A)

172.16.6.1

Permit (A)

172.16.1.1

Deny (C)

172.16.6.1

Deny (C)

Destination Address

Action

172.16.1.1

Deny (B)

172.16.6.1

Deny (B)

172.16.6.1

Permit (A)

172.16.1.1

Deny (C)

172.16.6.1

Deny (C)

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

IP QoS

IP QoS is a good function

to decide which PCs can get the priorities to pass though router once if

the bandwidth is exhausted or fully saturated.

Click Enable

at item Trigger IP QoS Service in General IP QoS Parameter, which turn on this

function if you want to enable it.

Click Add

in the bottom of web page to begin a new entry in Policy table.

Set the policy to action:

Description: A brief statement describe this policy

Local IP: type IP address of local host in prioritized session.

Remote IP: type IP address of remote

Local Port: type the service port number of local host in prioritized session.

Remote Port: type the service port number of remote host in prioritized session.

Protocol: identify the transportation layer protocol type you wa

default is ANY.

Precedence: type the session’s prioritized level you classify, “0” is lowest priority, “5” is highest

priority.

957AE-10BTS User Manual

Page 66 of 113

host in prioritized session.

nt to prioritize, ex: TCP or UDP. The

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

This is an example for your reference,

192.168.1.60 is the highest priority to undergo

192.168.1.50 is the second high priority; 192.168.1.40 is the third high priority and so on.

957AE-10BTS User Manual

Page 67 of 113

the over full bandwidth situation.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Administration

This session introduces security and simple network management protocol (SNMP) and time

synchronous.

957AE-10BTS User Manual

Page 68 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Security

For system secutiry, suggest to change the default user name and password in the first setup

otherwise unauthorized persons can access the router and change the parameters.

There are three ways to configure the router, Web browser, telnet and ser

Press Security

to setup the parameters.

For greater security, change the Supervisor ID and password for the gateway. If you don’t set them,

all users on your network can be able to access the gateway using the default IP and Password

root.

You can authorize five legal users to access the router via telnet or console. There are two UI

modes, menu driven mode and command mode to configure the router.

Legal address pool will setup the legal IP addresses from which authorized person can

the gateway. This is the more secure function for network administrator to setup the legal address

of configuration.

Configured 0.0.0.0 will allow all hosts on Internet or LAN to access the router.

Leaving blank of trust host list will cause bl

other hand, only PC in LAN can access the router.

If you type the excact IP address in the filed, only the host can access the router.

Click Finish

to finish the setting.

957AE-10BTS User Manual

Page 69 of 113

ial console.

ocking all PC from WAN to access the router. On the

configure

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

The browser will prompt the

Press Restart

to restart the gateway working with the new parameters and press

setup other parameters.

SNMP

Simple Network Management Protocol (SNMP) provides for the exchange of m

network management client and a network management agent for remote management of network

nodes. These messages contain requests to get and set variables that exist in network nodes in

order to obtain statistics, set configuration paramet

communications can occur over the LAN or WAN connection.

The router can generate SNMP traps to indicate alarm conditions, and it relies on SNMP

community strings to implement SNMP security. This router support MIB I a

Click SNMP

to configure the parameters.

In the table of current community pool, you can setup the access authority.

In the table of current trap host pool, you can setup the trap host.

Press Modify

to modify the community pool.

SNMP status: Enable

957AE-10BTS User Manual

Page 70 of 113

configured parameters and check it before writing into EPROM.

ers, and monitor network events. SNMP

nd MIB II.

Continue to

essages between a

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Access Right: Deny for deny all access

Access Right: Read for access read only

Access Right: Write for access read and write.

Community: it serves as password for access right.

After configuring the community pool, press

S

NMP rap is an informational message sent from an SNMP agent to a manager. Click Modify to

modify the trap host pool.

Version: select version for trap host (SNMP v1 or SNMP v2).

IP: type the trap host IP

Community: type the community password. The communit

Press OK

to finish the setup.

957AE-10BTS User Manual

Page 71 of 113

OK.

y is setup in community pool.

t

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

The browser will prompt the configured parameters and check it before writing into EPROM.

Press Restart

to restart the gateway working with the new parameters and press

setup other parameters.

Time Sync

Time synchronization is an essential element for any business that relies on an IT system. The

reason for this is that these systems all have clocks that are the source of time for files or

operations they handle. Wit

other or with the correct time and this can cause

fail, security to be compromised, virtual server works in wrong schedule.

Click TIME SYNC.

There are two synchronization modes: Sample Network Time Protocol (SNTP) and

synchronization with PC. For synchronization with PC, select Sync with PC. The gateway will

synchronize the time with the connecting PC.

957AE-10BTS User Manual

Page 72 of 113

hout time synchronization, time on these systems varies with each

-

, firewall packet filtering schedule processes to

Continue to

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

SNTP is the acronym for Simple

Time Protocol (NTP) used to synchronize computer clocks in the Internet. SNTP can be used

when the ultimate performance of the full NTP implementation.

For SNTP, select SNTP v4.0.

SNTP service: Enable

Time Server: All of the time server around the world can be used but suggest to use the timeserver

nearby.

Time Zone: you have to choose the right time zone.

Press Finish to finish the setup. The browser will prompt the configured parameters and

before writing into EPROM.

957AE-10BTS User Manual

Page 73 of 113

Network Time Protocol, which is an adaptation of the Network

check it

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Utility

This section will describe the utility of the product including system information, load the factory

default configuration, upgrade the firmware logout and restart the gateway.

System Info

Click System Info

for review the information.

The browser will prompt the system information.

Config Tool

This configuration tool has three functions: load Factory Default, Restore Configuration and

Backup Configuration.

Press Config Tool. Choose the function and th

en press finish.

•

Load Factory Default function: it will load the factory default parameters to the gateway.

957AE-10BTS User Manual

Page 74 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Note:

All of the settings will be changed to factory default. On the other hand you will lose all the

configured parameters.

• Restore

Configuration: Sometime the configuration will be crushed unintentionally.

Restore configuration will help you to recover the backup configuration easily.

•

Click Finish after selecting Restore Configuration.

•

Browse the route of backup file then press finish

saved configuration.

•

Backup Configuration: After configuration, suggest using the function to backup your

router parameters in the PC.

•

Select the Backup Configuration and then press Finish.

•

Browse the place of b

backup the configuration.

Upgrade

You can upgrade the gateway using the upgrade function.

Press Upgrade.

Browse the file and press OK button to upgrade. The system will reboot

finishing.

Logout

To logout the router, press logout.

Restart

For restarting the router, click the

Press Restart

to reboot the router.

957AE-10BTS User Manual

Page 75 of 113

. The router will automatically restore the

ackup file named backup. Press Finish. The router will automatically

Restart in UTILITY.

automatically after

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Status

You can monitor the SHDSL or SHDSL.bis status including mode,

Performance information including SNR margin, atteunation and CRC error count.

LAN status will prompt the MAC address, IP address, Subnet mask and DHCP client table.

WAN status will display the WAN interface information.

You

can view the routing table in the status of route.

Interface status inculdes LAN and WAN statistics information.

Firewall status display DoS protection status and dropped packets statistics.

957AE-10BTS User Manual

Page 76 of 113

Tx power and Bitrate and

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

LAN-to-

LAN connection with bridge Mode

CO side

Click Bridge and CO

Side to setup Bridging mode of the Router and then click

LAN Parameters Enter IP: 192.168.0.1 Enter Subnet Mask:

255.255.255.0

Enter Gateway: 192.168.0.1 Enter Host Name: SOHO

957AE-10BTS User Manual

Page 77 of 113

Next.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

WAN1 Parameters Enter VPI: 0 Enter VCI: 32 Click LLC

Click Next

The screen will prompt the new configured parameters. Check the parameters and

The router will reboot with the new setting.

CPE Side

Click Bridge and CO

Side to setup Bridging mode of the Router and then click

957AE-10BTS User Manual

Page 78 of 113

Click Restart

Next.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

LAN Parameters Enter IP: 192.168.0.2 Enter Subnet Mask:

255.255.255.0

Enter Gateway: 192.168.0.2 Enter Host Name: SOHO

WAN1 Parameters Enter VPI: 0 Enter VCI: 32 Click LLC

Click Next

The screen will prompt the new configured parameters. Check the parameters and

The router will reboot with the new setting.

957AE-10BTS User Manual

Page 79 of 113

Click Restart

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

LAN to LAN Connection with Routing Mode

CO side

Click ROUTE and CO Side

then press

Type LAN parameters: IP Address: 192.168.20.1 Subnet Mask:

255.255.255.0

Host Name: SOHO

DHCP Service: For more DHCP service, review DHCP Service.

957AE-10BTS User Manual

Page 80 of 113

Next.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Type the Wan Parameters; VPI: 0 VCI: 32 AAL5 Encap: LLC Protocol: IPoA , EoA , IPoA

+

Note: The Protocol used in CO and CPE have to be the same.

Click Next

to setup the IP parameters.

For more understanding about NAT, review NAT/DMZ in page 19.

957AE-10BTS User Manual

Page 81 of 113

NAT or EoA + NAT

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

IP Address: 192.168.30.1 Subnet mask:

255.255.255.0

Gateway: 192.168.30.2 Click Next

The

screen will prompt the parameters that will be written in EPROM. Check the parameters before

writing in EPROM.

Press Restart to restart the router working with new parameters or press continue to setup another

parameter.

CPE side

Click ROUTE and CPE

Side

957AE-10BTS User Manual

Page 82 of 113

then press Next.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Type LAN parameters: IP Address: 192.168.10.1 Subnet Mask:

255.255.255.0

Host Name: SOHO

DHCP Service: For more DHCP service, review DHCP Service.

Type the Wan Parameters; VPI: 0 VCI: 32 AAL5 Encap: LLC Protocol: IPoA , EoA , IPoA

+

Note: The Protocol used in CO and CPE have to be the same.

Click Next

to setup the IP parameters.

For more understanding about NAT, review NAT/DMZ in page 19.

957AE-10BTS User Manual

Page 83 of 113

NAT or EoA + NAT

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

IP Address: 192.168.30.2 Subnet mask:

255.255.255.0

Gateway: 192.168.30.1 Click Next

The screen will prompt the parameters that will be written in EPROM. Check the parameters before

writing in EPROM.

Press Restart to restart the router working with new parameters or press continue to setup another

parameter.

957AE-10BTS User Manual

Page 84 of 113

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Configuration via Serial Console or Telnet with Manu

Driven Interface

Serial Console

Check the connectivity of the RS

your terminal access program with VT100 terminal emulation. Configure th

following value:

Baudrate

Data Bits

Parity Check

Stop Bits

Flow

Press the SPACE

key until the login screen appears. When you see the login screen, you can

logon to Router.

Note: You have to use

SPACE

User: admin Password: *****

Note: The factory default user and passwords are both “admin”.

Supervisor password: root

Note: The factory default Supervisor passwords is “root”.

Telnet

Make sure the correct Ethernet cable is used for connecting the LAN port of your computer to

ROUTER. The LAN LNK indicator on the front panel shall light if a correct cable is used. Starting

your Telnet client with VT100 terminal emulation and connecting

wait for the login screen appears. When you see the login screen, you can logon to Router.

User: admin Password: *****

Note: The default IP address is 192.168.0.1

957AE-10BTS User Manual

Page 85 of 113

-

232 cable from your computer to the serial port of ROUTER. Start

Parameter Value

9600 8

No

1

-control No

key. Pressing other keys does not work.

to the management IP of Router,

e serial link with the

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Configuration via Serial Console or Telnet

For serial console and Telnet management, the

command line interface (CLI) and menu driven interface. The CLI mode provides users a simple

interface, which is better for working with script file. The menu drive

interface to general operations. The command syntax for CLI is the same as that of the menu

driven interface. The only difference is that the menu driven interface shows you all of available

commands for you to select. You do

time on typing the whole command line.

The following figure

gives you an example of the menu driven interface. In the menu, you scroll

up/down by pressing key I

/

menu by key J

. For example, to show the system information, just logon to the

down the cursor by pressing key

submenu and select “system” command in this su

general information.

957AE-10BTS User Manual

Page 86 of 113

ROUTER

implements two operational interfaces:

n interface is a user

n’t need to remember the command syntax and save your

K, select one command by key L, and go

back to a higher level of

K

twice and select “show” command by key

bmenu, then the system will show you the

-friendly

ROUTER, move

L, you shall see a

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Window structure

From top to bottom, the window will be divided into four parts:

1. Product name

2.

Menu field: Menu tree is prompted on this field. “

3.

Configuring field: You will configure the parameters in this field.

parameters you can choose and

4.

Operation command for help

The following table shows the parameters in

Command

<ip>

An item enclosed in brackets is required. If the item is shown in lower

case bold, it represents an object with special format. For example,

<ip>

<Route|Bridge>

Two or more items enclosed in

bars means that you must choose exactly one of the items. If the item

is shown in lower case bold with leading capital letter, it is a command

parameter. For example,

<Route|Bridge>

[1~19

99]

An item enclosed in brackets is optional.

[1~65534|

-t]

Two or more items enclosed in brackets and separated by vertical

bars means that you can choose one or none of the items.

Menu Driven Interface Commands

Before changing the configuration,

The operation list will be shown on the window.

Keystroke

[UP] or I

Move to above field in the same level menu.

[DOWN] or K

Move to below

[LEFT] or J

Move back to previous menu.

[RIGHT] or L

Move forward to submenu.

[ENTER]

Move forward to submenu.

[TAB]

To choose another parameters.

Ctrl + C

To quit the configuring item.

Ctrl + Q For help

Menu Tree

The

menu three are as following figures. All of the configuration commands are placed in the

subdirectories of Enable protected by supervisor password. On the other hand, unauthorized user

cannot change any configurations but viewing the status and configurati

ping command to make sure the router is worked.

Note: Some commands could be present or not depending of firmware and hardware release.

957AE-10BTS User Manual

Page 87 of 113

>>

” symbol indicates the cursor place.

< parameters >

< more…>

indicates that there have submenu in the title.

the brackets.

Description

may be 192.168.0.3.

brackets and separated by vertical

Route

is a command parameter in

.

familiarize yourself with the operations list in the following table.

Menu Driven Interface Commands

Description

field in the same level menu.

on of the router and using

indicates the

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Status

Show

Ping

Exit

User/

Passw ord

Enable

957AE-10BTS User Manual

Page 88 of 113

Mode

SHDSL

WAN

Bridge

VLAN

Route

IP

_

Firewall

IP

DHCP

DNS

Hostname

Default

SHDSL

WAN

Route

Interface

Firewall

IP

Status

System

Config

Script

Show

Write

Reboot

Ping

Admin

Security

SNMP

Passw d

SNTP

Utility

Upgrade

Backup

Restore

Exit

SHDSL

SHDSL.bis

WAN

Route

Interface

Firewall

IP_QoS

STP

System

Config

Script

Setup

more ...

.bis

STP

LAN

Share

-QoS

-Proxy

more ...

.bis

_QoS

STP

User

ID

more ...

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Mode

SHDSL

SHDSL.bis

WAN

Bridge

VLAN

STP

Route

LAN

IP_Share

Firewall

IP-QoS

DHCP

DNS-Proxy

Hostname

Default

Setup

957AE-10BTS User Manual

Page 89 of 113

Mode

N*64

Type

Clear

Margin

1

8

Protocol

Address

Vpi_Vci

Encap

QoS

Isp

IP_type

List

QoS

Isp

IP_type

List

Gateway

Static Deny_PCs

Add

Delete

Modify

List

Mac

Lan1_

port

Wan8_

port

1

20

Lan4_

port

Wan8_

port

Mode

Modify

Pvid

Link_mode

List

Active

Static

Rip

Add

Delete

List

Generic

Lan

Wan

List

Attrib

Version

Authe

Attrib

Version

Authe

more ...

Mode

Link

N*64

Type

Clear

Margin

Tcpam

Mac

Lan1_port

Wan8_port

Lan4_port

Wan8_port

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

LAN

IP_Share

Firewall

IP-QoS

DHCP

DNS-Proxy

Hostname

Default

Setup

957AE-10BTS User Manual

Page 90 of 113

Ip_type

Address

Attrib

NAT

PAT

DMZ

Virtual

Global

Fixed

Range

Interface

Delete

List

Clear

Modify

List

Interface

Port

Server

Protocol

Name

Beguin

End

Active

Address

Level

Pkt_filter

DoS_protect

Active

Drop_frag

Add

Delete

Modify

Exchange

List

Protocol

Direction

Src_

IP

Dest_

IP

Port

TCP_

flag

ICMP_

type

Description

Enable

Beguin

End

Action

SYN_flood

ICMP_flood

UDP_flood

PING_death

Land_attack

IP_spoof

Smurf_attack

Fraggle _attack

Active

Add

Delete

Modify

List

Protocol

Local_

IP

Remote

_

Port

Description

Enable

Precedence

Generic

Fixed

Relay

List

Active

Gateway

Netmask

IP_range

Lease_time

Name_s erver1

Name_s erver2

Name_s erver3

Add

Delete

Range

Delete

List

Modify

Interface

Delete

List

IP

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Status

Show

Write

Reboot

Ping

Admin

Utility

Exit

Enable

Setup

957AE-10BTS User Manual

Page 91 of 113

User

Security

SNMP

Passwd

ID

SNTP

Upgrade

Backup

Restore

more ...

Clear

Modify

List

Port

IP_pool

List

Community

Trap

Method

Service

Time_server1

Time_server2

Time_server3

Update_rate

List

Attrib

Profile

Modify

Clear

Edit

List

Edit

List

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Configuration

To setup the router, move the cursor “

appears, type the supervisor password. The default supervisor password is

will be prompted as “ *

“ sym

----------------------------------------------------------------------

Command: enable <CR>

Message: Please input the following information.

Supervisor password: ****

----------------------------------------------------------------------

Note: The factory default Supervisor passwords is “root”.

In this sub menu, you can setup management features and upgrade software, backup the system

configuration and restore the sy

For any changes of configuration, you have to write the new configuration to EPROM and reboot

the router to work with new setting.

The screen will prompt as follow.

>> enable

Modify command privilege

setup

Configure system

status

Show running system status

show

View system configuration

write

Update flash configuration

reboot

Reset and boot system

Ping

Packet internet groper command

admin

Setup management features

utility

TFTP upgrade

Exit

Quit system

The description of the commands are:

Command

enable

Modify command privilege. When you login via serial console or Telnet, the

router defaults to a program execution (read

the

configuration and write changes to nonvolatile RAM (NVRAM), you must

work in enable mode.

setup

To configure the product, you have to use the setup command.

status

View the status of product.

show

Show the system and configuration of product.

write

Update flash configuration. After you have completed all necessary setting,

make sure to write the new configuration to NVRAM by “

reboot the system, or all of your changes will not take effect.

reboot

Reset and boot system. After you

sure to write the new configuration to NVRAM and reboot the system by

“reboot

” command, or all of your changes will not take effect.

ping

Packet internet groper command.

admin

You can setup management

utility

Upgrade software and backup and restore configuration are done via “

command.

exit

Quit system

957AE-10BTS User Manual

Page 92 of 113

>>” to enable

and press enter key. While the screen

bol for system security.

stem configuration via utility tools.

utility

Description

-

only) privileges to you. To change

write

have completed all necessary setting, make

features in this command.

root. The password

” command and

utility

”

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Status

You can view running system status of SHDSL, WAN, route and interface via

Move cursor “ >> “ to status

>> shdsl

Show SHDSL status

Shdsl.bis

Show SHDSL.bis status

wan

Show WAN interface status

route

Show routing table

interface

Show interface statistics status

firewall

Show firewall status

Command

shdsl

The SHDSL status includes line rate, SNR margin, TX power, attenuation and

CRC error of the product, and SNR margin, attenuation and CRC error of remote

side. The product access remote side information via EOC (embedded

channel).

shdsl.bis

The SHDSL.bis status includes line rate, SNR margin, TX power, attenuation,

and CRC error of the product, and SNR margin, attenuation and CRC error of

remote side. The product access remote side information via EOC (embedded

operation channel).

wan

WAN status shows the 8 PVC information which are configured.

route

You can see the routing table via route command.

interface

The statistic status of WAN and LAN interface can be monitor by interface

command.

firewall The c

urrent and history status of firewall are shown in this command.

957AE-10BTS User Manual

Page 93 of 113

and press enter.

Description

status command.

operation

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Show

You can view the system information, configuration and configuration in command script by

command.

Move cursor “ >> “ to show

and press enter.

>> system

Show general

config

Show all configuration

script

Show all configuration in command script

Command

system

The general information of the system will show in system command.

config

Config command can display detail configuration

script

Configuration information will prompt in command script.

Write

For any changes of configuration, you must write the new configuration to EPROM using

command and reboot the router to take affect.

Move cursor to “ >> “ to

write

----------------------------------------------------------------------

Command: write <CR>

Message: Please input the following information.

Are you sure? (y/n): y

----------------------------------------------------------------------

Reboot

To reboot the router, use

reboot

----------------------------------------------------------------------

Command: reboot <CR>

Message: Please input the following information.

Do you want to r

eboot? (y/n):

----------------------------------------------------------------------

Ping

Ping command will be used to test the connection of router. Move cursor “

enter.

----------------------------------------------------------------------

Command: ping <ip> [1~65534|

Message: Please input the following information.

IP address <IP> : 10.0.0.1

Number of ping request packets to send (TAB select):

Data size [1~1999]: 32

----------------------------------------------------------------------

There are 3 types of number of ping request packet to send, default, 1~65534 and

send 4 packet and –

t continuous packet until you key in Ctrl+c to stop.

957AE-10BTS User Manual

Page 94 of 113

information

Description

information.

and press enter.

command. Move cursor to “ >> “ to write

and press enter.

y

>>

-t] [1~1999]

-t

show

write

“ to ping and press

–t. Default will

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Administration

You can modify the user profile, telnet access, SNMP (Sample Network Management Protocol),

supervisor information and SNTP (Simple Network Time Protocol) in

 admin.

For configuration the parameters, move the cur

>> user

Manage user profile

security

Setup system security

snmp

Configure SNMP parameter

passwd

Change supervisor password

id

Change supervisor ID

sntp

Configure time synchronization

User Profile

You can use user

command to clear, modify and list the user profile. You can setup at most five

users to access the router via console port or telnet in user profile table however users who have

the supervisor password can change the configuration

and press enter key.

>> clear

Clear user profile

modify

Modify the user profile

list

List the user profile

You can delete the user by number using

user, you can use list

command to check it.

or add a new user to user profile.

To modify or add a new user, move the cursor to modify and press enter.

---

-------------------------------------------------------------------

Command: admin user modify <1~5> <more...>

Message: Please input the following information.

Legal access user profile number <1~5> :

----------------------------------------------------

The screen will prompt as follow.

>> Attrib

UI mode

Profile

User name and password

There are two UI mode, command and menu mode, to setup the product. We will not discuss

command mode in this manual.

Security

Security command can be configured sixteen legal IP address for telnet access and telnet port

number.

957AE-10BTS User Manual

Page 95 of 113

admin

. The route is

sor “ >> “ to admin

and press enter.

of the router. Move the cursor “

clear

command. If you do not make sure the number of

Modify

command is to modify an old user information

2

------------------

enable

>> “ to user

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Move the cursor “ >> “ to

security

that there is no restriction of IP to access the ro

>> port

Configure telnet TCP port

ip_pool

Legal address IP address pool

list

Show security profile

SNMP

Simple Network Management Protocol (SNMP) is the protocol not only governing network

management, but also the monitoring of network devices and their functions.

The router can generate SNMP traps to indicate alarm conditions, and it relies on SNMP

commun

ity strings to implement SNMP security. This router support MIB I & II.

Move the cursor “ >> “ to

snmp

>> community

Configure community parameter

trap

Configure trap host parameter

5 SNMP community entry can be configured in this

press enter.

----------------------------------------------------------------------

Command: admin snmp community <1~5> <more...>

Message: Please input the following information.

Community entry number <1~5> :

----------------------------------------------------------------------

The screen will prompt as follow:

>> edit

Edit community entry

list

Show community configuration

5 SNMP trap entry can be configured in this system. Move the cursor to trap

----------------------------------------------------------------------

Command: admin snmp trap <1~5> <more...>

Message: Please input the following information.

Trap host entry number <1~5> :

-------------------------------------------

The screen will prompt as follow:

>> edit

Edit trap host parameter

list

Show trap configuration

957AE-10BTS User Manual

Page 96 of 113

and press enter. The default legal address is 0.0.0.0. It means

uter via telnet.

and press enter.

system. Move the cursor to community and

2

and press enter.

2

---------------------------

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Supervisor password and ID

The supervisor password and ID are the last door for security but the most important. Users who

access the router via web browser have to use the ID and password to configure the router and

users who access the router via telnet or console mode have to use

router. Suggest to change the ID and password after the first time of configuration, and save it. At

next time when you access to the router, you have to use the new password.

----------------------------------------------------------------------

Command: admin passwd <pass_conf>

Message: Please input the following information.

Input old Supervisor password:

Input new Supervisor password:

Re-type Supervisor passwo

rd:

----------------------------------------------------------------------

Command: admin id <pass_conf>

Message: Please input the following information.

Legal user name (Ent

er for default) <root> :

----------------------------------------------------------------------

SNTP

Time synchronization is an essential element for any business that relies on an IT system. The

reason for this is that these systems all have clocks

operations they handle. Without time synchronization, time on these systems varies with each

other or with the correct time and this can cause

system log exposures with

wrong data.

There are two methods to synchronize time, synchronize with PC or SNTPv4. If you choose

synchronize with PC, the router will synchronize with PC. If you choose SNTPv4, the router will

use the protocol to synchronize with the time server. Sync

needs to configure service, time_server and time_zone. Synchronization with PC does not need to

configure the above parameters.

Move the cursor “ >> “ to

sntp

>> method

Select time synchronization

service

Tigger SNTP v4.0 service

time_server1

Configure time server 1

time_server2

Configure time server 2

time_server3

Configure time server 3

updaterate

Configure update period

time_zone

Configure GMT time zone offset

list

Show SNTP configuration

To configure SNTP v4 time synchronization, follow the below procedures.

move the cursor to method and press enter.

----------------------------------------------------------------------

Command: admin sntp method <

Message: Please input the following information.

SYNC method (Enter for default) <SyncWithPC> :

----------------------------------------------------------------------

957AE-10BTS User Manual

Page 97 of 113

the password to configure the

****

********

test

that are the source of time for files or

-

virtual server schedule processes to fail and

hronization with time server, SNTP v4,

and press enter.

method

SNTPv4|SyncWithPC>

SNTPv4

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Move the cursor to service and press enter.

----------------------------------------------------------------------

Command: admin sntp service <Disable|Enable>

Message: Please input the following information.

Active SNTP v4.0 service (Tab Select) <Enable> :

----------------------------------------------------------------------

Move the cursor to time_server1 and press enter.

----------------------------------------------------------------------

Command: admin sntp time_server1 <string>

Message: Please input

the following information.

Time server address(Enter for default) <ntp

----------------------------------------------------------------------

You can configure three time server in this system.

Move the cursor to update_rate an

----------------------------------------------------------------------

Command: admin sntp update_rate <10~268435455>

Message: Please input the following information.

Update period (secs) (Enter for default) :

----------------------

------------------------------------------------

Move the cursor to time_zone and configure where your router is placed. The easiest way to know

the time zone offset hour is from your PC clock. Double click the clock at the right corner of monitor

and check the time zone.

------------------------------

----------------------------------------

Command: admin sntp time_zone <

Message: Please input the following information.

GTM time zone offset (hours) (Enter for default) :

----------------------------------------------------------------------

Move the cursor to list and review the setting.

Utility

There are three utility tools, upgrade, backup and restore, embedded in the firmware. You can

update the new firmware via TFTP upgrade tools and backup the configuration via TFTP backup

tool and rest

ore the configuration via TFTP restore tool. For upgrade, TFTP server with the new

firmware will be supported by supplier but for backup and restore, you must have your own TFTP

server to backup and restore the file.

Move the cursor “ >> “ to

utility

>> upgrade

Upgrade main software

backup

Backup system configuration

Restore

Restore system configuration

957AE-10BTS User Manual

Page 98 of 113

Enable

-2.vt.edu> : ntp-2.vt.edu

d press enter.

86400

-12~12>

-8

and press enter.

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Exit

If you want to exit the system without saving, use

Setup

All of the setup parameters are located in the subdirectories of setup. Move the cursor “

setup and press enter.

>> mode

Switch system operation mode

shdsl

Configure SHDSL parameters

shdsl.bis

Configure SHDSL.bis parameters

wan

Configure WAN interface profile

bridge

Configure transparent bridging

Vlan

Configure virtual LAN paramters

Stp

Configures Spanning Tree Protocol of the Router

route

Configure routing parameters

lan

Configure LAN interface profile

ip_share

Configure NAT/PAT parameters

firewall

Configure Firewall parameters

Ip_qos

Configure IP QoS parameters of the router

dhcp

Configure DHCP parameters

dns_proxy

Configure DNS proxy parameters

hostname

Configure local host name

default

Restore

Mode

The product can act as routing mode or bridging mode. The default setting is routing mode. You

can change the system operation mode by using mode command. Move the cursor “

and press enter.

----------------------------------------------------------------------

Command: setup mode <Route|Bridge>

Message: Please input the following information.

System operation mode (TAB select) <Route>:

----------------------------------------------------------------------

SHDSL

You can setup the SHDSL parameters by the command

press enter.

>> mode

Configure SHDSL mode

n*64

Configure SHDSL data rate

type

Configure SHDSL annex type

clear

Clear current CRC error count

margin

Configure SHDSL SNR margin

There are two types of SHDSL mode, STU

office and STU-

C customer premises equipment.

You

can setup the data rate by the multiple of 64Kbps where n is from 0 to 32. If you configure n is

0, the product will perform as adaptive mode.

There are two types of SHDSL Annex type, Annex

957AE-10BTS User Manual

Page 99 of 113

exit

command to quit system.

factory default setting

Route

shdsl

. Move the cursor “

-R and STU-C. STU-

R means the terminal of central

-A and Annex-B.

>> “ to

>> “ to mode

>> “ to shdsl and

SMARTLINK

I&II

MDS921AE-10BTS - MD

S

Clear command can clear CRC error count.

General

ly, you cannot need to change SNR margin, which range is from 0 to 10. SNR margin is an

index of line connection. You can see the actual SNR margin in STATUS SHDSL. The larger SNR

margin, the better line connection. If you set SNR margin in the field as 2,

will drop and reconnect when the SNR margin is lower than 2. On the other hand, the device will

reduce the line rate and reconnect for better line connection.

SHDSL.bis

You can setup the SHDSL.bis parameters by the command

shdsl.bis and press enter.

>> mode

Configure SHDSL.bis mode

Link

Configure SHDSL.bis link

n*64

Configure SHDSL.bis data rate

type

Configure SHDSL.bis annex type

clear

Clear current CRC error count

margin

Configure SHDSL.bis SNR margin

There are two types of SHDSL.bis mode, STU

office and STU-

C customer premise equipment.

Link type will be 2-wire or 4-

wire mode according to the product. 4

under 2-wire mode. In 4-

wire mode router can operate in Auto Fall Back, Standby or Multi

modes.

2-Wire (only for 4-

wire model):

M-Pair M-Pair (Conexant) Auto Fall Back

Standby

Multi-link

You can setup the data rate by the multiple of 64Kbps where n is from 3 to 89

There are four types of SHDSL.bis Annex type, Annex

Clear command can clear CRC error count.

Generally, you cannot need to change SNR margin, which range is from 0 to 10. SNR margin is an

index of line connection.

You can see the actual SNR margin in STATUS SHDSL.bis. The larger is

SNR margin; the better is line connection quality. If you set SNR margin in the field as 2, the

SHDSL.bis connection will drop and reconnect when the SNR margin is lower than 2. On the ot

hand, the device will reduce the line rate and reconnect for better line connection.

957AE-10BTS User Manual

Page 100 of 113

the SHDSL connection

shdsl.bis

. Move the cursor “

-R and STU-C. STU-

R means the terminal of central

-

wire product can

2-wire mode, second pair is disabled

4-

wire mode. If one of two pairs fails, all link breaks

4-wire mode.

Extended compatibility with Conexant IC

4-

wire mode. Two pairs works simultaneously. When one pair fails,

traffic goes through the other pair. 4-

wire mode. Only one pair works, another pair is in standby.

When one pair fails, t

raffic goes through the other pair.

4-

wire mode. Each pair is connected to two different devices,

which may be or may not be in same location

-A, Annex-B, Annex-

F, and Annex

>> “ to

be worked

-Link

.

-G.

her

Black Box MDS921AE-10BTS-R2, MDS957AE-10BTS-R2 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual