C-Com PAMSPAN 3000 User Manual

PAMSPAN 3000

User Manual

Ver. 1.0

First Edition (August 2004)

RECYCLABLE

PAMSPAN 3000 User Manual

Contents:

1. Introduction.......................................................................................................................................1

1.1 PAMSPAN3000 Overview ................................................................................................................................ 1

1.2 Features ........................................................................................................................................................... 1

1.3 Application ....................................................................................................................................................... 2

1.4 Specification .................................................................................................................................................... 3

2. Hardware Setup and Startup............................................................................................................4

2.1 Front Panel LED and Rear Panel description............................................................................................... 4

2.2 Dip Switch illustration..................................................................................................................................... 5

2.2 Restore Factory Defaults/Reboot Button...................................................................................................... 6

2.3 Parts check ...................................................................................................................................................... 6

2.4 Hardware Connection ..................................................................................................................................... 7

2.6 Configuring Your Computers ......................................................................................................................... 8

Before you begin................................................................................................................................................. 8

Windows ® XP PCs ............................................................................................................................................ 8

Windows 2000 PCs............................................................................................................................................. 8

Windows Me PCs................................................................................................................................................ 9

Windows 95, 98 PCs......................................................................................................................................... 10

Assigning static Internet information to your PCs ............................................................................................. 11

3. Configure the PAMSPAN 3000 from EmWeb..................................................................................1

3.1 Accessing EmWeb .......................................................................................................................................... 1

3.2 About EmWeb pages....................................................................................................................................... 1

3.2.1 About the Status Page ............................................................................................................................... 2

3.2.3 About the Quick Start page ........................................................................................................................ 5

3.2.2.1 Creating a login using DHCP.............................................................................................................. 6

3.2.2.2 Creating a PPPoE login...................................................................................................................... 6

3.2.3 About System configuration ....................................................................................................................... 7

3.2.3.1 Event Log............................................................................................................................................ 7

3.2.3. Remote Access..................................................................................................................................... 8

3.2.3.4 Firmware Update ................................................................................................................................ 9

3.2.3.5 Backup/restore ................................................................................................................................... 9

3.2.3.6 Restart .............................................................................................................................................. 10

3.2.4 About the Configuration menu ................................................................................................................. 11

3.2.4.1 Save configuration............................................................................................................................ 12

3.2.4.2 Authentication ................................................................................................................................... 12

3.2.4.3 LAN connections .............................................................................................................................. 14

3.2.4.4 WAN Connection .............................................................................................................................. 16

3.2.4.5 IP Routes .......................................................................................................................................... 19

3.2.4.7 DHCP Server.................................................................................................................................... 20

3.2.4.8 DHCP Relay ..................................................................................................................................... 24

3.2.4.9 DNS Client........................................................................................................................................ 25

-1-

PAMSPAN 3000 User Manual

3.2.4.10 DNS Relay...................................................................................................................................... 26

3.2.4.11 SNTP Client .................................................................................................................................... 27

3.2.4.12 Security........................................................................................................................................... 30

3.2.4.13 Ports ............................................................................................................................................... 41

3.2.4.14 Search for Service .......................................................................................................................... 46

4. Diagnostic and Troubleshooting...................................................................................................47

Appendix A: Advanced DSL port attributes .....................................................................................48

-2-

1. Introduction

Thank you for choosing PAMSPAN3000 as your broadband access solution. This manual

helps you with the setup and configuration of your product.

1.1 PAMSPAN3000 Overview

PAMSPAN3000 G.SHDSL Router is designed for Small and medium-sized businesses to

access the Internet and remote office networks by providing a cost-effective high-speed

alternative to replace expensive leased-line services. PAMSPAN3000 provides a

dual-channel SHDSL Loop, which is capable of full duplex and symmetric transmission rate

up to 2.3Mbps (2 wire mode) and 4.6Mkbps (4 wire mode), depending on the application

needed.

PAMSPAN3000 is an ideal product for businesses and Internet Service Providers (ISP) to

provide LAN server and internet access to areas where copper pair shortages exist within

the public telephone network; and its flexibility makes it ideal for applications such as web

hosting, video conferencing and heavy two-way

PAMSPAN 3000 User Manual

data traffic needed in the business environment.

By providing user friendly and easily configured

interface, users can easily configure

PAMSPAN3000 via TELNET, Web Management,

dip-switches and buttons on the back panel of PAMSPAN3000.

1.2 Features

Rate and Reach Improvements

Supporting dual-channel SHDSL loop, which can offer up to 2.32 Mbps (2 wire mode), or

4.6 Mbps (4 wire mode) can reach customers as far as 20,000 feet from the Telco/PTT

office.

CO and CPE mode provided for point-to-point connectivity between two sites

2-wire / 4-wire Mode Selectable

2-wire and 4-wire Mode are selectable upon user’s application scenario.

Better Power Management

Designed with low-power modes, providing statistical and overall power savings, it reduces

the transceiver power consumption according to the line characteristics.

-1-

PAMSPAN 3000 User Manual

1.3 Application

a. Connect to the G.SHDSL IP DSLAM

b. connect to another PAMSPAN3000 set as CO side

-2-

1.4 Specification

SHDSL Compliance

 Comply to ITU-T G.991.2 (Annex A, Annex B)

G. SHDSL

Data Rate: N x 64Kbps (N=0~72 for 4 wire, N=0~36 for 2wire, 0 for adaptive)
Impedance: 135 ohms
Annex obtained from CPE side, CO side auto adjust
Configurable: 2-wire or 4-wire mode
Default: 2/4 wire (depending on model), Annex A.

Auto-negotiating/Manually-Configurable rate.

ATM Protocols

ATM Cell over SHDSL
Up to 8 PVCs
OAM F5 AIS/RDI and loopback
QoS (min. support of AAL5 CBR)
Support OAM F4/F5 AIS/RDI and loopback
ITU-T G.991.2
RFC2684 (RFC1483), multi-protocol over ATM
RFC2225 (RFC1577), IPoA
RFC2364, PPP over ATM (CHAP and PAP supported)
RFC2516, PPPoE (PPP over Ethernet) over ATM

VC multiplexing and SNAP/LLC

PAMSPAN 3000 User Manual

PPP Support

PPP (RFC 1661)
PPP over AAL5 (RFC 2364)

PPPoE (PPP over Ethernet, RFC 2516)

Bridge Mode

Transparent Bridging (IEEE 802.1D)
RFC2684 (RFC1483) Bridged
Spanning Tree Protocol (IEEE 802.1D)
Supporting IP, IGMP and PPPoE packets filter function
IEEE 802.1q VLAN (4 ports only)

Port-based VLAN (4 ports only)

Routing Mode

TCP/IP with RIP1, RIP2 or static IP routing
NAT/PAT – RFC1631 (basic Firewall support)
RFC2684 (RFC1483) Routed
DNS Relay and caching (RFC1034/1035)
Support IP/TCP/UDP/ARP/ICMP/IGMP protocols
IP multicast and IGMP proxy (RFC1112/2236)
DHCP server, client and relay (RFC2131/2132)

Physical condition:

Dimension: 185mm(L) x 135mm(D) x 35mm(H)

Weight: 330g

-3-

PAMSPAN 3000 User Manual

2. Hardware Setup and Startup

_________________________________________________________________________________________

2.1 Front Panel LED and Rear Panel description

Following pictures are the front panel of 2-wire and 4-wire PAMSPAN3000 respectively.

Figure 2-1 4-wire PAMSPAN3000 Front Panel LED

Figure 2-2 2-wire PAMSPAN3000 Front Panel LED

1. Power

2. DSL 1

3. DSL 2

4. CPE

5. Ethernet Link

Power Indicator

DSL loop1

DSL loop 2
On--- CPE

Off--- CO

On---Ethernet Link connected

1. DC IN:

2. Reset Button:

3. Power Switch:

4. LAN:

5. DSL 1 to 2

6. FGND

7. Mode

Figure 2-3 Rear Panel illustration

Power Adapter Input

Reset device to factory default setting

Switch for system turn on/turn off

Connected to Ethernet Port

Connected to SHDSL Line 1 to 2

Connected to ground wire

Allow users to config rate and CO/CPE through Dip Switch

-4-

2.2 Dip Switch illustration

The PAMSPAN3000 is equipped with a dip switch, located on its rear panel, in which

transmission rate and CO/CPE selection can be configured by manual.

Outlook of Dip Switch

As the following figure shown, position 1 to 3 is assigned to Rate configuration and position

4 is for CO or CPE selection.

PAMSPAN 3000 User Manual

Rate Configuration

Transmission Rate can be manually configured by utilizing Rate Dip Switch where 8 modes

are provided as following figure shown.

CO/CPE Selection

By using Dip 4 as following figure shown, users can easily to configure the PAMSPAN3000

as CO or CPE.

-5-

PAMSPAN 3000 User Manual

Note: Default is Rate7 and CPE.

2.2 Restore Factory Defaults/Reboot Button

Press the reset button to reset the PAMSPAN3000 to its factory-default settings (default

configuration file will be uploaded). If you forget your password or cannot access the

device, you will need to reset the device to the default settings. The procedure shows as

follows:

1. Power off the Modem.

2. Press the reset default button.

3. Power on the Modem, and watch the Front Panel of the Modem.

4. While the " CPE LED” LED" blinks very quickly, please release the button.

(If you press the button to long, recall won't work, this is to prevent from you hold the

button all the time)

5. Now the factory is recalled, then you have to save current config again to overwrite your

previous user configuration. (This is so-called "one-time recall")

2.3 Parts check

Check the following items in your package. Contact our sales representatives if any item is

missing or damaged.

1. PAMSPAN3000

2.

3.

Power adapter

Ethernet cable

-6-

PAMSPAN 3000 User Manual

4. Standard DSL line cable

5. support CD

QIG

6.

2.4 Hardware Connection

1. Connect the DSL cable to the DSL port of RJ-11 socket.

2. Use a RJ-45 cable to connect the PAMSPAN3000 to the LAN or a PC with

Ethernet adapter installed.

3. Connect the power supply to PAMSPAN3000 by plugging the round DC connector

into the DC jack on the rear panel. Plug the power supply into the wall. Verify that

the Power LED is illuminated or not. If the power LED is illuminated, this indicates

that the PAMSPAN3000 is connected properly.

4. Ground the PAMSPAN3000 by connecting a grounded wire

Quick Installation Guide

Note: Please use crossover RJ-45 to connect PAMSPAN3000 to the HUB, if your hub is

not featured with auto sensing function.

-7-

2.6 Configuring Your Computers

This section provides instructions for configuring the Internet settings on your computers to

work with the Router

Before you begin

By default, the Router automatically assigns all required Internet settings to your PCs. You

need only to configure the PCs to accept the information when it is assigned.

Note: In some cases, you may want to assign Internet information manually to some or all of
your computers rather than allow the Router to do so. See “Assigning static Internet
information” on page 11 for instructions.

If you have connected your PC of LAN via Ethernet to the Router, follow the instructions

that correspond to the operating system installed on your PC.

Windows ® XP PCs

PAMSPAN 3000 User Manual

1. In the Windows task bar, click the Start button, and then click Control Panel.

2. Double-click the Network Connections icon.

3. In the LAN or High-Speed Internet window, right-click on the icon corresponding to

your network interface card (NIC) and select Properties. (Often, this icon is labeled

Local Area Connection).The Local Area Connection dialog box displays with a list of

currently installed network items.

4. Ensure that the check box to the left of the item labeled Internet Protocol TCP/IP is

checked, and click.

5. In the Internet Protocol (TCP/IP) Properties dialog box, click the radio button labeled

Obtain an IP address automatically. Also click the radio button labeled Obtain DNS

server address automatically

6. Click twice to confirm your changes, and close the Control Panel.

Windows 2000 PCs

First, check for the IP protocol and, if necessary, install it:

1. In the Windows task bar, click the Start button, point to Settings, and then click

Control Panel.

2. Double-click the Network and Dial-up Connections icon.

3. In the Network and Dial-up Connections window, right-click the Local Area Connection

icon, and then select Properties.

The Local Area Connection Properties dialog box displays with a list of currently

installed network components. If the list includes Internet Protocol (TCP/IP), then the

-8-

PAMSPAN 3000 User Manual

protocol has already been enabled. Skip to step 10.

4. If Internet Protocol (TCP/IP) does not display as an installed component,

click

.

5. In the Select Network Component Type dialog box, select Protocol, and then

click

.

6. Select Internet Protocol (TCP/IP) in the Network Protocols list, and then

click

.

You may be prompted to install files from your Windows 2000 installation CD or other

media. Follow the instructions to install the files.

7. If prompted, click

to restart your computer with the new settings.

Next, configure the PCs to accept IP information assigned by the Router:

8. In the Control Panel, double-click the Network and Dial-up Connections icon.

9. In Network and Dial-up Connections window, right-click the Local Area Connection

icon, and then select Properties.

10. In the Local Area Connection Properties dialog box, select Internet Protocol

(TCP/IP), and then click .

11. In the Internet Protocol (TCP/IP) Properties dialog box, click the radio button labeled

Obtain an IP address automatically. Also click the radio button labeled Obtain DNS

server address automatically.

12. Click

Panel.

Windows Me PCs

1. In the Windows task bar, click the Start button, point to Settings, and then click

Control Panel.

2. Double-click the Network and Dial-up Connections icon.

3. In the Network and Dial-up Connections window, right-click the Network icon, and

then select Properties.

The Network Properties dialog box displays with a list of currently installed network

components. If the list includes Internet Protocol (TCP/IP), then the protocol has

already been enabled. Skip to step 11.

4. If Internet Protocol (TCP/IP) does not display as an installed component,

twice to confirm and save your changes, and then close the Control

click

5. In the Select Network Component Type dialog box, select Protocol, and then

.

-9-

PAMSPAN 3000 User Manual

click .

6. Select Microsoft in the Manufacturers box.

7. Select Internet Protocol (TCP/IP) in the Network Protocols list, and then

click

You may be prompted to install files from your Windows Me installation CD or other

media. Follow the instructions to install the files.

8. If prompted, click

Next, configure the PCs to accept IP information assigned by the Router.

9. In the Control Panel, double-click the Network and Dial-up Connections icon.

10. In Network and Dial-up Connections window, right-click the Network icon, and then

select Properties.

11. In the Network Properties dialog box, select TCP/IP, and then click

12. In the TCP/IP Settings dialog box, click the radio button labeled Server assigned IP

address. Also click the radio button labeled Server assigned name server address.

13. Click

Panel.

Windows 95, 98 PCs

First, check for the IP protocol and, if necessary, install it:

.

to restart your computer with the new settings.

.

twice to confirm and save your changes, and then close the Control

1. In the Windows task bar, click the Start button, point to Settings, and then click

Control Panel.

2. Double-click the Network icon.

The Network dialog box displays with a list of currently installed network components.

If the list includes TCP/IP, and then the protocol has already been enabled. Skip to

step 9.

3. If TCP/IP does not display as an installed component, click

.

The Select Network Component Type dialog box displays.

4. Select Protocol, and then click

.

The Select Network Protocol dialog box displays.

5. Click on Microsoft in the Manufacturers list box, and then click TCP/IP in the Network

Protocols list box.

6. Click

to return to the Network dialog box, and then click

again.

You may be prompted to install files from your Windows 95/98 installation CD. Follow

-10-

PAMSPAN 3000 User Manual

the instructions to install the files.

7. Click

to restart the PC and complete the TCP/IP installation.

Next, configure the PCs to accept IP information assigned by PAMSPAN 3000:

8. Open the Control Panel window, and then click the Network icon.

9. Select the network component labeled TCP/IP, and then click

If you have multiple TCP/IP listings, select the listing associated with your network

card or adapter.

10. In the TCP/IP Properties dialog box, click the IP Address tab.

11. Click the radio button labeled Obtain an IP address automatically.

12. Click the DNS Configuration tab, and then click the radio button labeled Obtain an IP

address automatically.

13. Click

twice to confirm and save your changes.

You will be prompted to restart Windows.

14. Click

.

Assigning static Internet information to your PCs

.

If you are like most users, you will not need to assign static Internet information to your

LAN PCs. Your ISP automatically assigns this information.

In some cases however, you may want to assign Internet information to some or all of your

PCs directly (often called “statically”), rather than allowing the PAMSPAN 3000 to assign it.

This option may be desirable (but not required) if:

• You have obtained one or more public IP addresses that you want to always associate

with specific computers (for example, if you are using a computer as a public web

server).

• You maintain different subnets on your LAN (subnets are described in Appendix B).

Before you begin, be sure to have the following information on hand, or contact your ISP if

you do not know it:

• The IP address and subnet mask to be assigned to each PC to which you will be

assigning static IP information.

• The IP address of the default gateway for your LAN. In most cases, this is the address

assigned to the LAN port on the G.SHDSL2/2+ Router. By default, the LAN port is

assigned this IP address: 192.168.1.1. (You can change this number, or another

number can be assigned by your ISP.)

• The IP address of your ISP’s Domain Name System (DNS) server.

On each PC to which you want to assign static information, follow the instructions on

-11-

PAMSPAN 3000 User Manual

pages 8 through 11 relating only to checking for and/or installing the IP protocol. Once it is

installed, continue to follow the instructions for displaying each of the Internet Protocol

(TCP/IP) properties. Instead of enabling dynamic assignment of the IP addresses for the

computer, DNS server and default gateway, click the radio buttons that enable you to enter

the information manually.

Note: Your PCs must have IP addresses that place them in the same subnet as the G.SHDSL
Router’s LAN port. If you manually assign IP information to all your LAN PCs, you can follow
the LAN Connections to change the LAN port IP address accordingly.

-12-

PAMSPAN 3000 User Manual

3. Configure the PAMSPAN 3000 from EmWeb

3.1 Accessing EmWeb

To access EmWeb on the PAMSPAN 3000 that has been booted with an image containing

a factory default configuration:

1. Attach a PC to one of the LAN interfaces. At your web browser, enter the

URL:http://192.168.1.1

2. If you first time login the EmWeb, you will see a login box is displayed. You must enter

your username and password to access the pages. The default User name/Password as

follows

User Name: admin

Password: admin

3. Click on

The first time that EmWeb is launched during a session, a Welcome message is displayed

at the top of the Status homepage. This message is replaced by the Status heading once

the page is automatically or manually refreshed.

. You are now ready to configure PAMSPAN 3000 using EmWeb.

3.2 About EmWeb pages

EmWeb provides a series of web pages that you can use to setup and configure the

PAMSPAN 3000. These pages are organized into four main topics.

-1-

You can select each of the following topics from the menu on the left-hand side of the main

window:

• Status: information about the current setup and status of the system.

• Quick Start: information about how to setup the WAN connection.

• System: information about the system hardware and options to upgrade the firmware and

restart the system.

• Configuration: information about the current configuration of various system features with

options to change the configuration.

The exact information displayed on each web page depends on the specific configuration

that you are using. The following sections give you a general overview of the setup and

configuration details.

3.2.1 About the Status Page

The Status homepage contains information about the current configuration of PAMSPAN

PAMSPAN 3000 User Manual

3000. It provides an overview of the current image configuration. The page contains the

following sections:

• Status section:

The Status section displays:

1. The current WAN IP Address configuration. It also provides a WAN Settings

hyperlink that allows you to create, modify or delete your WAN configuration.

2. The current Local IP Address configuration. It also provides a LAN Settings

hyperlink that allows you to create, modify or delete your LAN configuration.

-2-

PAMSPAN 3000 User Manual

• Advanced Diagnostics:

The Advanced Diagnostics section displays:

• Connection Authentication details; this displays details about your current ISP login

settings. It also provides a Login Settings hyperlink that allows you to create, modify or

delete your existing login setup.

-3-

PAMSPAN 3000 User Manual

• Port Connection Status:

This section displays information about your port connections:

• Port; the ports available on your Router

• Type; the kind of traffic that can be transported on each port connected; which of the

ports on your Router are currently connected:

represents a port that is not connected

represents a port that is connected

• WAN Status:

• IP Address Type; whether the WAN IP address is used or the address is obtained

dynamically from DHCP.

• WAN Subnet Mask

• Default Gateway; whether DHCP server has been configured to give out the WAN IP

address as the default Gateway address.

• Primary DNS; whether a Primary DNS IP address has been set. The WAN Status section

also provides two hyperlinks:

• IP Address Settings; this allows you to create, modify or delete your WAN configuration.

• DNS Client Settings; this allows you to create, modify or delete your DNS Client

configuration.

• LAN Status:

This section displays the following status information about your Local Area Network

settings:

• LAN Subnet Mask

• Act as Local DHCP Server (Yes/No)

• MAC Address; this is the actual MAC address for the Ethernet block. You can configure

this Router to use the MAC address from the Ethernet NIC in the PC instead of its own

MAC address.

This is known as MAC Address Spoofing.

If you have configured MAC spoofing on the Router the MAC address shown in this table

will not be changed. This table will always show the true MAC address of the Router.

The LAN Status section also provides a DHCP Server Settings hyperlink that allows you to

configure your DHCP server status.

• System Information:

This section displays the following status information about your Router:

• Up-Time; the length of time (in hours: minutes: seconds) that your current session has

-4-

PAMSPAN 3000 User Manual

been connected for

• Version: The released firmware version of PAMSPAN 3000.

• Defined Interfaces:

This section lists LAN interfaces that have been defined. For more information on defining

LAN interfaces, each interface listed has a Show Statistics hyperlink associated with it.

Click on this for detailed information about some/all of the following (depending on the

interface type and configuration):

• the interface

• connection details

• port configuration

• service parameters

PAMSPAN 3000 has default interfaces defined. These defaults depend on the type of

image that you are building.

3.2.3 About the Quick Start page

This page allows you to configure your WAN login connection. From the left-hand menu,

click on Quick Start. The Quick Start page is displayed.

There are two types of login that you can configure:

Using a DHCP address from your ISP instead of having a login account.

-5-

PAMSPAN 3000 User Manual

Login using PPPoE. This allows a user to login remotely via PPPoE.

Note: Please refer to following sections for details for all settings above-mentioned.

3.2.2.1 Creating a login using DHCP

1. From the Login Type section, click on the No Login/DHCP radio button. Click on .

The DHCP Login Options form is displayed:

2. Complete the DHCP Login Options:

a. If you want your ISP server to automatically recognize your own host name, type a

Special DHCP host name.

b. If you want LAN DHCP clients to use a specific domain name, type a Domain Name

for Clients to send with DNS Requests.

3. Once you have configured DHCP login options, click on

is refreshed, and the following confirmation message appears near the top of

the page:

Settings successfully changed

3.2.2.2 Creating a PPPoE login

1. From the Login Type section, click on the PPoE Login radio button. Click on .

The PPoE Login Options form is displayed:

. The Quick Start page

-6-

PAMSPAN 3000 User Manual

2. Complete the PPoE Login Options:

a. Fill the PPoE username and Password that provided by the ISP in the PPoE Setup

section.

b. In the PPoE Login Options section, select your PPoE service name as Dial On

Demand or Keep-Alive.

3. Once you have configured PPoE login options, click on

refreshed, and the following confirmation message appears near the top of the page:

Settings successfully changed.

3.2.3 About System configuration

From the left-hand menu, click on System. The following sub-headings are displayed:

The System menu contains options including Event Log, Romate Access, Firmare Update,

Backup/Restore and Restart Router that will be introduced in the following sections.

3.2.3.1 Event Log

The Event Log page is automatically displayed when a configuration error occurs. From

. The Quick Start page is

the System menu, click on Event Log. The following page is displayed:

-7-

PAMSPAN 3000 User Manual

This page displays a table containing all configuration errors experienced by your Router

during a current session. The table also tells you:

• when the error occurred (in seconds since your system was restarted)

• which process the error occurred in

• brief descriptions of the Error

3.2.3. Remote Access

This allows you to enable temporary remote access to your Router using Network Address

Translation (NAT).

Note: In order to configure remote access, you first need to enable the firewall and create

an external to internal firewall policy. For more information, see Security section of

configuration.

1. Once you have configured Security, from the System menu, click on Remote Access to

display the following:

2. Type in the length of time that you want to allow remote access for. Click on

3. The Remote Access page is displayed, confirming the number of seconds remaining for

.

-8-

remote access.

3.2.3.4 Firmware Update

This option allows you to upload firmware images to Router using HTTP.

1. From the System menu, click Firmware update. The following page is displayed:

2. Type in the location of the new firmware image that you want to upload, or use

to browse and select the file. Click on .

PAMSPAN 3000 User Manual

3. Once the file has been uploaded to the RAM of your device, it is written to Flash ROM. A

status page is displayed confirming that the upload is complete and telling you how

much of the file (in bytes and as a percentage) has been written to Flash ROM.

4. Once the file has been written to Flash, the Firmware Update page is refreshed. The

page confirms completion of the update and asks you to restart your Router in order to

use the new firmware. Click on Restart Router from system menu.

Note: Please do not power-off the device while updating firmware or saving your

configuration, power-off the device while updating the system might cause the device

crashed.

3.2.3.5 Backup/restore

This page allows you to backup your configuration to, or restore it from your computer.

Backing up your configuration

1. From the System menu, click on Backup/restore. The following page is displayed:

-9-

PAMSPAN 3000 User Manual

From the Backup Configuration section, click on the . The File Download

2.

window is displayed and then select the

and select a file in which to save your backup configuration. Click on

Restoring your configuration

1. From the System menu, click on Backup/restore.

2. In the Restore Configuration section, click in the Configuration File text box and type the

network path of the file that you wish to restore. If you do not know the path details, click

on

3. Click on . The page is refreshed with a Configuration Restored message and

details of the number of bytes uploaded.

3.2.3.6 Restart

This page allows you to restart your Router. It has the same effect as resetting your Router

by pressing the appropriate reset button on the hardware.

1. From the System menu, click on Restart Router. The following page is displayed:

. The Save As window will prompt

.

and locate the file using the Choose file box.

2.

Click on to reset your Router. The Restart page also provides you with the

-10-

PAMSPAN 3000 User Manual

option of restarting and restoring the factory default settings. Click in the Reset to factory

default settings box to check it, and then click on the

output to check how the reset is progressing.

3. Once the login and password prompt is displayed at the console, you can login as usual

(with login = admin, password = admin), then refresh the browser that is running EmWeb.

The Status page is displayed and your Router has been reset.

3.2.4 About the Configuration menu

The Configuration menu contains options for configuring features on PAMSPAN 3000

including basic LAN and WAN conections and DHCP and DNS settings.

Note: Most of the features contain sensible default settings. You are unlikely to have to

reconfigure every feature included in the Configuration menu. From the left-hand menu,

click on Configuration. The following sub-headings are displayed:

. Read the console status

• Save config: allows you to save your current configuration to Flash memory.

• Authentication: allows you to create, edit and delete user accounts.

• LAN connections: allows you to edit your LAN port IP address, create and edit a

secondary IP address and create new LAN services.

• WAN connections: allows you to create, edit and delete WAN services.

• Security: allows you to configure Security, Firewall, NAT and Intrusion Detection.

• Search for service: allow you to search for IP DSLAM with matched PVCs.

• IP routes: allows you to create, edit and delete IP routes.

• DHCP server: allows you to enable, disable and configure your DHCP server.

• DHCP relay: allows you to enable, disable and configure your DHCP relay.

• DNS client: allows you to enable, disable and configure DNS client.

• DNS relay: allows you to enable, disable and configure DNS relay.

• SNTP client: allows you to configure Simple Network Time Protocol at Client side.

(Please point to the SNTP server, contact with your ISP provider.)

• Ports: allows you to configure the ports available on your Router.

-11-

Note: Please refer to following sections for details for all settings above-mentioned.

3.2.4.1 Save configuration

To save your current configuration to Flash ROM:

1. From the Configuration menu, click on Save config. The following page is displayed:

PAMSPAN 3000 User Manual

2. Click on to save your current configuration in the device.

After a short time the configuration is saved and the following confirmation message is

displayed: Saved information model to file //flashfs/im.conf

3.2.4.2 Authentication

This option allows you to administer accounts for users who access the Router. From the

Configuration menu, click on Authentication. The following page is displayed:

Creating a new login account

1. Click on the Create a new user. The following page is displayed:

-12-

PAMSPAN 3000 User Manual

2. Type details for the new user into the username, password and comment text boxes,

and select a May login? Option:

• true means that the user can login but not dialing

• false means that the user can not login

3. Click on the

. The Authentication page is displayed. The table now contains

details for the user that you have just created.

Editing/deleting a login account

1. The Authentication page table contains an Edit user hyperlink for each user account

entry. Click on a link. The following page is displayed:

This page allows you to:

• update details for a specific user account. Modify the necessary text boxes then click

on the

.

• delete a user account. Click on the Delete this user button.

2. Once you have edited or deleted a user account, the Authentication page is displayed

and the table reflects any changes that you have made on the edit user page.

-13-

3.2.4.3 LAN connections

This option allows you to:

• configure the IP address and subnet of the default LAN connection to the Router.

• configure a secondary IP address on the same subnet as the primary IP address.

• create virtual interfaces; multiple virtual interfaces can be associated with the existing

primary LAN interface.

From the Configuration menu, click on LAN connections. The following page is displayed:

Configuring primary and secondary LAN connections

1 The Default LAN Port section contains two subsections:

a. IP address and subnet mask details of your primary LAN connection. To edit these

PAMSPAN 3000 User Manual

details, click

and type new primary address

details.

b. Secondary IP address details. To create/configure a secondary IP address, click in

the Secondary IP Address text box and type new address details.

-14-

PAMSPAN 3000 User Manual

Once you have configured the IP address(es), click on the . A message is

3.

displayed confirming that your address information is being updated. If you have

changed the primary IP address, you may need to enter the new address in your

web browser address box.

Creating virtual interfaces

1. Click on the Create a new virtual interface... hyperlink at the bottom of the LAN

connections page. On the Create virtual interface page, type the IP address and

netmask of the virtual interface, and then click on the

.

2. The LAN connections page is displayed. The virtual interfaces section contains a

table listing the names of the virtual interface(s). Each virtual interface is called item#

by default.

3. Each virtual interface name has an Edit and a Delete link associated with it. To edit a

-15-

service:

a. Click on the Edit link.

b. Change the options for the existing virtual interface, then click on Change. The

page is reset and the new values are displayed.

To delete a service:

a. Click on the Delete link.

b. Check the details displayed, and then click on the Delete this connection button.

3.2.4.4 WAN Connection

This option allows you to create and configure WAN connections for Your Router. You

can also create virtual interfaces on routed services. From the Configuration menu,

click on WAN connections. The WAN connections page is displayed:

PAMSPAN 3000 User Manual

Creating a WAN service

1. Click on Create a new service. A page is displayed containing a list of WAN service

options.

2. Select an option, and then click on Configure. You need to add detailed configuration

information about the WAN service that you are creating.

3. Click on

. The WAN connections page is displayed. The table now contains

details of the service that you have just created.

-16-

PAMSPAN 3000 User Manual

Editing a WAN service

1. Click on the Edit link for a specific service. The WAN connection:

edit page is displayed.

2. Change the values for the existing service. If you want to carry out advanced editing,

click on the links at the top of the edit page. The links that appear depend on the type of

service that you are configuring. For example, for an RFC 1483 routed service, you can

choose from the following advanced editing links:

Edit ‘Service’

Edit ‘PPPoE’

Edit ‘Atm Channel’

3. Click on Change. The edit page is displayed and changes are applied to the service.

Deleting a WAN service

1. At the WAN connections page, click on the Delete link for a specific service. The WAN

connection: delete page is displayed.

2. Check the details displayed, and then click on the Delete this connection button.

Creating a virtual interface (routed services only)

1. Click on the Virtual I/f link for a specific service. The Virtual interface page is displayed.

-17-

PAMSPAN 3000 User Manual

2. Click on the Create a new virtual interface... hyperlink. On the Create virtual interface

page, type the IP address and netmask of the virtual interface, and then click on the

3. The WAN connections page is displayed. If you click on the Virtual I/f link, the Virtual

interface page displays a table listing the names of existing virtual interfaces. Each

virtual interface is called item# by default.

-18-

3.2.4.5 IP Routes

This option allows you to create static IP routes to destination addresses via an IP

interface name or a Gateway address. From the Configuration menu, click on IP routes.

The Edit Routes page is displayed:

This page lists the following information about existing routes:

PAMSPAN 3000 User Manual

• Whether the route is valid or invalid

• Destination IP address

• Gateway address

• Netmask address

• Whether the route is advertised via RIP (true or false)

Editing a route

1. To edit the destination, gateway and netmask address of a route, Click in the relevant

text box, update the information then click on

.

2. To edit the cost, interface setting or advertise status for the route, click on the Advanced

Options hyperlink for a specific route and update the relevant information. Click on

.

-19-

PAMSPAN 3000 User Manual

Deleting a route

1. To delete an existing route, check the Delete box for a specific route.

2. Click on .

Creating an IP V4 Route

1. Click on the Create new Ip V4 Route hyperlink. The following page is displayed

2. Complete the Create IP v4 Route form in order to configure the route.

3. When you have typed the details, click on . The Edit Routes page is displayed. The

table now contains details of the route that you have just created.

3.2.4.7 DHCP Server

This option allows you to enable/disable the DHCP server and create configure and delete

DHCP server subnets and DHCP fixed IP /MAC mappings. From the Configuration menu,

click on DHCP server. The following page is displayed:

-20-

PAMSPAN 3000 User Manual

Enabling/disabling the DHCP server

The DHCP server is enabled by default. If to disable the DHCP server, click on

Note: If DHCP relay is enabled, DHCP server will be disabled by default. You can not

enable DHCP server unless you disable DHCP relay.

Creating a DHCP server subnet

1. Click on the Create new Subnet link. The following page is displayed:

-21-

PAMSPAN 3000 User Manual

2.

This page allows you to:

a. Set the value and netmask of the subnet (either manually or by selecting an IP

interface whose value and mask is used instead), and set the maximum and default

lease times.

b. Set the DHCP address range (or use a default range of 20 addresses).

c. Set the Primary and Secondary DNS Server addresses or set your System to give out

its own IP address as the DNS Server address.

d. Set your Router to give out its own IP address as the default Gateway address.

3. Once you have entered new configuration details for your DHCP server, click on .

The DHCP Server page is displayed, containing details of your new subnet.

Editing a DHCP subnet

1. Click on the Advanced Options link for a specific subnet. The Edit DHCP server subnet

page is displayed. This allows you to edit all of the values that were set when the

subnet was created.

-22-

PAMSPAN 3000 User Manual

2. This page also allows you to add additional option information. At the bottom of the page,

click on the Create new DHCP option link.

3. Click on the Option name drop-down list and select a name. Type a value that matches

the selected option name in the Option value text box. Click on

4. The Edit DHCP server subnet page is displayed, and details of you new option are

.

displayed under the sub-heading Additional option information. To delete an existing

option, check the Delete box for a specific option and click

.

Creating a fixed host

1. Click on the Create new Fixed Host link. The following page is displayed:

-23-

PAMSPAN 3000 User Manual

Complete the following:

2.

a. Type in the IP address that will be given to the host with the specified MAC address.

b. Type in the MAC address and the maximum lease time (default is 86400 seconds).

3. Click on OK. The DHCP Server page is displayed, and details of your new fixed host are

displayed under the sub-heading Existing DHCP fixed IP/MAC mappings. To edit a fixed

mapping, click on the IP address, MAC address or max lease time, type a new entry and

click

click

3.2.4.8 DHCP Relay

This option allows you to:

• enable/disable DHCP relay.

• add DHCP servers to the DHCP relay list.

• configure/delete server entries on the DHCP relay list. From the Configuration menu, click

on DHCP relay. The following page is displayed:

. To delete a fixed mapping, check the Delete box for a specific mapping and

.

Enabling/disabling DHCP relay

1. The DHCP relay is currently disabled. If you click on the Enable button, DHCP server is

disabled and the button changes to Enable.

-24-

PAMSPAN 3000 User Manual

Note: If DHCP server is enabled, DHCP relay will be disabled by default. You can not

enable DHCP relay unless you disable DHCP server.

Adding a DHCP server to the DHCP relay list

1. In the Add new DHCP server section, type an address in the New DHCP server IP

address text box.

2. Click on . The address is displayed in the Edit DHCP server list section.

Editing/deleting entries in the DHCP relay list

1. To edit an entry, click on an IP address and type a new entry, then click on .

2. To delete an entry, check the Delete box for a specific IP address, and then click on

.

3.2.4.9 DNS Client

This option allows you to:

• create a list of server addresses. This enables you to retrieve a domain name for a given

IP address.

• create a domain search list. DNS client uses this list when a user asks for the IP address

list for an incomplete domain name.

From the Configuration menu, click on DNS client. The following page is displayed:

-25-

PAMSPAN 3000 User Manual

Configuring DNS servers

1. Type the IP address of the unknown domain name in the DNS servers: text box.

2. Click . The IP address appears in the DNS servers table. You can add a maximum

of three server IP addresses. Each IP address entry has a Delete button associated with

it. Click on

Configuring DNS search domains

1. Type a search string in the Domain search order: text box.

2. Click . The search string is displayed in the Domain search order table. You can

add a maximum of six search strings. Each search string entry has a Delete button

associated with it. Click on

3.2.4.10 DNS Relay

This option allows you to create, configure and delete DNS relay’s primary and secondary

DNS servers. DNS relay can forward DNS queries to the DNS servers on this list. From the

Configuration menu, click on DNS Relay. The following page is displayed:

to remove an IP address from this list.

to remove a string from this list.

-26-

PAMSPAN 3000 User Manual

Configuring the DNS relay list

1. In the Add new DNS server section, type an address in the New DNS server IP address

text box.

2. Click on . The address is displayed in the Edit DHCP server list section. To edit an

entry, click on an IP address and type a new entry, then click on

entry, check the Delete? Box for a IP address, then click on

3.2.4.11 SNTP Client

The option allows you to:

• Synchronize Client with NTP Server

• Configure SNTP-NTP Server

• System clock setting by manual

From the Configuration menu, click on SNTP client. The following page is displayed:

. To delete an

.

-27-

PAMSPAN 3000 User Manual

Synchronize Client with NTP Server

1. Click on

that forces the SNTP client to immediately synchronize the local

time with the server located in the association list (if unicast) or, if anycast is enabled,

initiate an anycast sequence to the network.

Note: to Synchronize Client with NTP Server, NTP servers, SNTP client mode, and local

time zone should be pre-configured.

Configure SNTP-NTP Server

1. Type the NTP Sever IP address in the text box of Add NTP Server IP Address, and

then click on

to make it valid.

2. Type the NTP Sever Hostname in the text box of Add NTP Sever Hostname, and then

click on

to make it valid.

Configure SNTP client mode

1. Select SNTP Syncroniztion mode(s): This action enables/disables the STNP client in

a particular time synchronous access mode. There are three modes to choose from,

and

each mode has enable and disable options:

a. Unicast mode:

• Enable - the mode uses a unicast server and the IP address or hostname in the

SNTP server association list is used to synchronize the client time with the server.

The SNTP client attempts to contact the specific server in the association in order

to receive a timestamp when the sntpclient sync command is issued.

• Disable - the unicast server is removed from the association list.

b. Broadcast mode:

• Enable - allows the SNTP client to accept time synchronization broadcast packets

from an SNTP server located on the network, and updated the local system time

accordingly.

• Disable - stops synchronization via broadcast mode

c. Anycast Mode:

• Enable - the SNTP client sends time synchronized broadcast packets to the

network and subsequently expects a reply from a valid timeserver. The client then

uses the first reply it receives to establish a link for future sync operations in unicast

mode.

This server will then be added to the server association list. The client ignores any

later replies from servers after the first one is received.

The enabled anycast mode takes precedence over any entries currently in the

-28-

PAMSPAN 3000 User Manual

associations list when the sntpclient sync command is issued. The entry will then

be substituted for any existing entry in the unicast association list.

• Disable - stops synchronization via anycast mode.

Click on

mode.

to validate your setting, after choosing the SNTP Syncroniztion

2. select a time zone:

Click on the local timezone drop down list and select a time zone. And then click on

to validate your setting.

3. Enter SNTP transmit packet timeout value, SNTP transmit packet retries value and

SNTP automatic resynchronization polling value in the text boxes respectively. And

then click on

System clock setting by manual

1. Enter the date and time with yyyy:mm:dd:hh:mm:ss format in the text box to set the

to validate your setting.

-29-

system clock. And then click on to validate your setting.

Note: if using manual system clock setting, the local time will follow the internal clock set

by user.

3.2.4.12 Security

This option allows you to configure Security, NAT and Firewall:

Security - EmWeb allows you to:

• enable Security,

• configure Security interfaces

• configure triggers.

• NAT - EmWeb allows you to:

PAMSPAN 3000 User Manual

• enable NAT between interfaces:

• configure global addresses; s

• configure reserved mapping;

• Firewall - EmWeb allows you to:

• enable Firewall and Firewall Intrusion Detection settings;

• set the Firewall security level;

• configure Firewall policies, portfilters and validators;

• configure Intrusion Detection settings;

Note: Please refer to following sections for details for all settings above mentioned .

From the Configuration menu, click on Security. The following page is displayed:

-30-

PAMSPAN 3000 User Manual

Enabling Security

You must enable Security before you can enable Firewall and/or Intrusion Detection. In the

Security State section:

1. Click on the Security Enabled radio button.

2. Click on to update the Security State section.

Enabling Firewall and/or Intrusion Detection

You must create a security interface before you can enable Firewall and/or Intrusion

Detection.

Once you have created a security interface:

1. Click on the Firewall Enabled and/or Intrusion Detection Enabled radio buttons.

2. Click on to update the Security State section.

Setting a default security level

You must have Security and Firewall enabled in order to set a default Security level.

1. From the Security Level section, click on the Security Level drop-down list.

2. Click on the level that you want to set; none, high, medium or low.

-31-

PAMSPAN 3000 User Manual

3. Click on the button.

Configuring security interfaces

Security interfaces are based on existing LAN services. You must create a LAN service for

every security interface that you want to configure.

For details of how to create LAN services,

1. From the Security Interfaces section, click on Add Interface. Add Interface page is

displayed:

2. Click on the Name drop-down list and select the LAN service that you want to base your

security interface on.

3. Click on the Interface Type drop-down list and specify what kind of interface it is

depending on how it connects to the network; external, internal or DMZ.

4. Click on . The Security page is displayed. The Security Interfaces section contains

a table that displays information about each security interface that you have created:

• Name - name of LAN service that the security interface is based on

• Type of network connection specified

-32-

PAMSPAN 3000 User Manual

• NAT setting. It contains hyperlinks that allow you to configure NAT. See Configuring

NAT

• Delete Interface... hyperlink. Click on this to display the Security: Delete Interface page.

Check the interface details, then click on the Delete button.

Configuring NAT

To configure NAT, you need to:

1. Enable Security; see Enabling Security section.

2. Create at least two different security interface types based on existing LAN services; see

Configuring security interfaces section

3. Once you have created more than one security interface, the NAT column in the Security

Interfaces table tells you that you can enable NAT between the existing security interface

and a network interface type. For example, if you create an external interface and an

internal interface, your table will look like this:

The NAT column for the external interface tells you that you can enable NAT to internal

interfaces. If you also had a DMZ interface configured, this column would also include an

Enable NAT to DMZ interfaces button.

4. To enable NAT between the external interface and the internal interface type, click on

. The Security page is refreshed and NAT is

enabled. To disable NAT between these interfaces, click

on

.

Once you have enabled NAT between interfaces, you can:

• configure global addresses; see Configuring NAT global addresses section.

• configure reserved mapping; see Configuring NAT reserved mapping section.

Configuring NAT global addresses

Global address pools allow you to create a pool of outside network addresses that is

visible outside your network. Before you can configure global addresses, you need to

configure NAT. See Configuring NAT Section

If you want to set up a global address pool on your existing NAT enabled interfaces:

1. From the NAT Security Interfaces table, click on the Advanced NAT Configuration

hyperlink for the interface that you want to add a global pool to. The following page is

-33-

displayed:

PAMSPAN 3000 User Manual

2.

Click on Add Global Address Pool. The following page is displayed:

3. This page allows you to create a pool of network IP addresses that are visible outside

your network. Add values for the following table entries:

• Interface type; the internal address type that you want to map your external global IP

addresses to. Click on the drop-down list and select an interface type.

• Use Subnet Configuration; there are two ways to specify a range of IP addresses. You

can either Use Subnet Mask (specify the subnet mask address of the IP address) or Use

IP Address Range (specify the first and last IP address in the range). Click on the

drop-down list and select a method.

• type in the IP Address that is visible outside the network

• Subnet Mask/IP Address 2; the value you specify here depends on the subnet

configuration that you are using. If you chose Use Subnet Mask, type in the subnet

mask of the IP address. If you chose Use IP Address Range, type in the last IP address

-34-

PAMSPAN 3000 User Manual

in the range of addresses that make up the global address pool.

4. Once you have configured the table, click on . The table is

refreshed and the global address pool is added to your NAT configuration. To delete a

global address pool, click on the Delete hyperlink, then click on the Delete Global

Address Pool button.

Click on Return to Interface List to display the Security Interface Configuration page.

To create a reserved mapping, click on the Add Reserved Mapping hyperlink. See

Configuring NAT reserved mapping Section.

Configuring NAT reserved mapping

Reserved mapping allows you to map an outside security interface or an IP address from a

global pool to an individual IP address inside the network. Mapping is based on transport

type and port number. Before you can configure reserved mapping, you need to configure

NAT. See Configuring NAT Section.

If you want to set up a reserved mapping on your existing NAT enabled interfaces:

1. From the NAT Security Interfaces table, click on the Advanced NAT Configuration

hyperlink for the interface that you want to add reserved mapping to. The Advanced NAT

Configuration page is displayed, see EmWeb Advanced NAT configuration Section.

2. Click on the Add Reserved Mapping hyperlink. The following page is displayed:

3. This page allows you to configure your reserved mapping. Add specific values for the

following table entries:

• Global IP Address; if you are mapping from a global IP address, type the address here.

If you are mapping from a security interface, type 0.0.0.0.

• Internal IP Address; the IP address of an individual host inside your network.

• Transport Type; specify the transport type that you want to map from the outside

interface to the inside.

-35-

PAMSPAN 3000 User Manual

• Port Number; the port number that your transport uses.

4. Once you have configured the table, click on

. The table is

refreshed and the reserved mapping is added to your NAT configuration.

To delete a reserved mapping setup, click on the Delete hyperlink, and then click on

.

Click on Return to Interface List to display the Security Interface Configuration page.

Configuring Firewall policies

If to configure firewall policies, click the Security Policy Configuration from Policy,

Triggers and Intrusion Detection as following figure shown.

Then the table is displayed and contains details of each Firewall policy.

You can now configure the policies to include portfilters and validators. See Configuring

portfilters Section and Configuring validators Section.

A portfilter is an individual rule that determines what kind of traffic can pass between two

interfaces specified in an existing policy. This section assumes that you have followed the

instructions in Configuring Firewall policies Section.

To configure a portfilter:

1. From the Current Firewall Policies table, click on the Port Filters link for the policy that

you want to configure. The page displayed contains three Add Filter hyperlinks that allow

you to create three different kinds of portfilter:

• For a TCP/UDP port filter click on Add TCP or UDP Filter. The following page is

displayed:

-36-

PAMSPAN 3000 User Manual

Specify the start and end of the port range for the TCP/UDP protocol that you want to

filter. Then select TCP or UDP protocol from the Protocol drop-down list. After that,

use the Direction drop-down lists to specify whether you want to allow/block inbound

traffic, and allow/block outbound traffic. Click on

. The Firewall Port Filters page

is displayed, containing details of the TCP portfilter that you have just added.

• For a non-TCP/UDP portfilter click on Add Raw IP Filter. The following page is

displayed:

Specify the protocol number in the Transport Type text box, for example, for IGMP,

enter protocol number 2. Then use the Direction drop-down lists to specify whether you

want to allow/block inbound traffic, and allow/block outbound traffic. Click on

.

The Firewall Port Filters page is displayed, containing details of the IP portfilter that

you have just added.

2. Each portfilter displayed in the Firewall Port Filters page has a Delete hyperlink

assigned to it. To delete a portfilter, click on this link, then at the confirmation page, click

on

. The port filter is removed from the Firewall configuration.

Configuring validators

A validator allows/blocks traffic based on the source/destination IP address and netmask.

Traffic will be allowed or blocked depending on the validator configuration specified when

-37-

PAMSPAN 3000 User Manual

the policy was created. See Configuring Firewall policies Section. This section assumes

that you have previously followed the instructions in Configuring Firewall policies Section.

To configure a validator:

1. From the Current Firewall Policies table, click on the Host Validators link for the policy

that you want to configure. The Configure Validators page is displayed. Click on the Add

Host Validator link. The following page is displayed:

2. In the Host IP Address text box, type the IP address that you want to allow/block.

3. In the Host Subnet Mask text box, type the IP mask address. If you want to filter a range

of addresses, you can specify the mask, for example, 255.255.255.0. If you want to filter

a single IP address, use the specific IP mask address, for example, 255.255.255.255.

4. Click on the Direction drop-down list and select the direction of traffic that you want the

validator to filter.

5. Click on

. The Configure Validators page is displayed, containing details of the

host validator that you have just added.

6. Each portfilter displayed in the Configure Validators page has a Delete Host Validator

hyperlink assigned to it. To delete a validator, click on this link, then at the confirmation

page, click on the Delete Host Validator button. The validator is removed from the

Firewall configuration.

Configuring triggers

A trigger allows an application to open a secondary port in order to transport packets. The

most common applications that require secondary ports are FTP and NetMeeting. This

section assumes that you have followed the instructions in Enabling Security Section.

To configure a trigger:

1. Go to the Policies, Triggers and Intrusion Detection section of the Security Interface

Configuration. Click on Trigger Configuration. The Firewall Trigger Configuration page is

displayed. There are no triggers defined at this time. Click on the New Trigger link. The

following page is displayed:

-38-

PAMSPAN 3000 User Manual

2. Configure the trigger as follows:

a. Transport Type; select a transport type from the drop-down list, depending on

whether you are adding a trigger for a TCP or a UDP application.

b. Port Number Start; type the start of the trigger port range that the primary session

uses.

c. Port Number End; type the end of the trigger port range that the primary session uses.

d. Allow Multiple Hosts; select allow if you want a secondary session to be initiated

to/from different remote hosts. Select block if you want a secondary session to be

initiated only to/from the same remote host.

e. Max Activity Interval; type the maximum interval time (in milliseconds) between the

use of secondary port sessions.

f. Enable Session Chaining; select Allow or Block depending on whether you want to

allow multi-level TCP session chaining.

g. Enable UDP Session Chaining; select Allow or Block depending on whether you want

to allow multi-level UDP and TCP session chaining. You must set Enable Session

Chaining to Allow if you want this to work.

h. Binary Address Replacement; select Allow or Block depending on whether you want

to use binary address replacement on an existing trigger.

i. Address Translation Type; specify what type of address replacement is set on a trigger.

You must set Binary Address Replacement to Allow if you want this to work.

3. Once you have configured the trigger, click on

Configuration page is displayed, containing details of the trigger that you have just

configured.

4. Each trigger displayed in the Firewall Trigger Configuration page has a Delete hyperlink

assigned to it. To delete a trigger, click on this link, then at the confirmation page, click

on the Delete button.

The Firewall Trigger Configuration page is displayed and details of the deleted trigger have

. The Firewall Trigger

-39-

PAMSPAN 3000 User Manual

been removed. There are two hyperlinks on the page:

a. To add a new trigger, click on New Trigger.

b. To display the Security Interface Configuration page, click on Return to Interface List.

Configuring Intrusion Detection Settings

Intrusion Detection settings allow you to protect your network from intrusions such as

denial of service (DOS) attacks, port scanning and web spoofing. This section assumes

that you have followed the instructions in Enabling Security Section and Enabling Firewall

and/or Intrusion Detection Section.

To configure Intrusion Detection settings:

1. Go to the Policies, Triggers and Intrusion Detection section of the Security Interface

Configuration page. Click on Configure Intrusion Detection. The Firewall Configure

Intrusion Detection page is displayed:

The values displayed in EmWeb Firewall Configure Intrusion Detection page are the

default values.

2 .Configure Intrusion Detection as follows:

a.

Use Blacklist; select true or false depending on whether you want external hosts to be

blacklisted if the Firewall detects an intrusion from that host. Click on the Clear

Blacklist button at the bottom of the page to clear blacklisting of an external host.

The Security Interface Configuration page is displayed.

b. Use Victim Protection; select true or false depending on whether you want to protect a

victim from an attempted web spoofing attack.

c. DOS Attack Block Duration; type the length of time (in seconds) that the Firewall

blocks suspicious hosts for once a DOS attack attempt has been detected.

-40-

d.

e. Victim Protection Block Duration; type the length of time (in seconds) that the Firewall

f. Maximum TCP Open Handshaking Count; type in the maximum number of unfinished

g. Maximum Ping Count; type in the maximum number of pings (per second) that are

h. Maximum ICMP Count; type in the maximum number of ICMP packets (per second)

that are allowed by the Firewall before an ICMP Flood DOS is detected.

3. Once you have configured Intrusion Detection, click on . The Intrusion Detection

settings are applied to the Firewall, and the Security Interface Configuration page is

displayed.

3.2.4.13 Ports

PAMSPAN 3000 User Manual

Scan Attack Block Duration; type the length of time (in seconds) that the Firewall

blocks suspicious hosts for after it has detected scan activity.

blocks packets destined for the victim of a spoofing style attack.

TCP handshaking sessions (per second) that are allowed by Firewall before a SYN

Flood is detected.

allowed before the Firewall detects an Echo Storm DOS attack.

This option allows you to configure the ports available on your Router, depending on the

type of image that you are booting.

Configuring ports

1. From the left-hand menu, click on Configuration. From the Configuration menu, click on

Ports. A sub-list of ports available on your device is displayed.

2. From the Ports menu, click on Shdsl. The Shdsl Port Configuration page is displayed:

3. You can carry out advanced configuration of your Ethernet port attributes. From the

-41-

PAMSPAN 3000 User Manual

Shdsl Port Configuration page, click on View advanced attributes. The Shdsl Port

Configuration page is displayed. “Shdsl” is the default port name of SHDSL created in

PAMSPAN3000 where stands for ATM port. You can configure SHDSL parameters in

this page.

-42-

PAMSPAN 3000 User Manual

4. Before preceeding any advanced configuration, set 4WActive Line and Active Line as

True.

5. If to choose 4-wire mode, select true in the 4Wire Enable drop-down list, and then

click on

to submit your setting.

6. Similarly, if to choose 2-wire mode, select false in the 4Wire Enable drop-down list,

and then click on

to submit your setting.

7. If to set PAMSPAN3000 as CO or CPE, select CO or CPE in the Mode drop-down list

and then click on

8. Moreover, other attributes that are also available for editing, click on

to submit your setting.

to update

the advanced configuration, or Reset to revert back to the default advanced

configuration settings. Click on the Return to basic attribute list to return to the Shdsl

Port Configuration page.

Note: 1. if you want set the device as 4-wire mode, in the Bite Rate mode drop-down list,

only fixed mode is valid value and selectable.

2. If to configure the transmission rate for CO and CPE, set as fixed mode already,

users should unplug the RJ-11 loop cable first and then configure the

transmission rate through Fixed Bit Rate drop-down list. After that, replug the loop

cable into the device.

3. If to switch 2/4 wire mode, the RJ-11 loop cable should be unplug first. Plug the

loop cable again after your configuration is completed.

4. The PAMSPAN-3000, featured with CPE and 2-wire mode, is recommended to

set Bite Rate Mode as adaptive and Fixed Bit Rate as 2312 kbps so that the real

transmission rate could be decided by the CO side.

5. If the CO and CPE side are set as fixed mode and have different Rate, the two

devices will be idle and the loop LED will be off. To reactivate the devices, users

should unplug the loops cable first and then set the same rate for CO and CPE

side. After that, set Active Line/4WActive Line as true and press

submit your setting. Finally, replug the loop cables into the devices.

to

-43-

PAMSPAN 3000 User Manual

6. Please refer to the Appendix A: Advanced DSL port attributes for detailed

information of Shdsl port attributes.

9. From the Ports menu, click on Ethernet. The Ethernet Port Configuration page is

displayed:

The page displays basic port attributes for the Ethernet port on your Router.

10. You can carry out advanced configuration of your Ethernet port attributes. From the

Ethernet Port Configuration page, click on View advanced attributes. The Advanced

Ethernet Port Configuration page is displayed.

11. Update the port attributes that are available for editing, then click on

the advanced configuration, or

configuration settings. Click on the Return to basic attribute list to return to the

to update

to revert back to the default advanced

-44-

PAMSPAN 3000 User Manual

Ethernet Port Configuration page.

12. From the Ports menu, click on Usb-ethernet. The Ethernet Port Configuration page is

displayed:

13. You can carry out advanced configuration of your Usb-ethernet port attributes. From

the Usb-ethernet Port Configuration page, click on View advanced attributes. The

Advanced Usb-ethernet Port Configuration page is displayed.

-45-

PAMSPAN 3000 User Manual

14. Update the port attributes that are available for editing, then click on

the advanced configuration, or

configuration settings. Click on the Return to basic attribute list to return to the

Usb-ethernet Port Configuration page.

3.2.4.14 Search for Service

This option allows users to search for IP DSLAM with matched PVCs. Select true In the

Enabled drop-down list and then click on

with matched PVC.

to update

to revert back to the default advanced

to start searching for the IP DSLAM

-46-

PAMSPAN 3000 User Manual

4. Diagnostic and Troubleshooting

_________________________________________________________________________________________

We could simply judge whether connection is correct or incorrect from the status of LED.

Please refer to the list below for status of connection.

Description Suggestion

Make sure Power LED, Ethernet LED,

and DSL LED are lighted.

Ethernet LED start to become blink

yellow while RJ-45 line has just

plugged, it will turn to yellow (No

blink) while connection is

established.

DSL LED start to become blink yellow

while DSL line has just plugged and

start to train the DSL Link, it will turn to

yellow(No blink) while connection is

established.

Check all connections whether ware correct, including

DSL Line, Ethernet cable and power adapter.

If your Ethernet LED no light, make sure the RJ-45 you

using is connected properly (Please use the crossover

Ethernet cable)

If the DSL LED is still blinking, is means that Router is

training the DSL Line and connection is not Established,

in this case, Please make sure your ISP User name

and passw ord are correct or check DSL Link is

connected properly.

-47-

PAMSPAN 3000 User Manual

Appendix A: Advanced DSL port attributes

Attribute Value Default

DSP Firmware Version DSP code version number N/A

DSP Version DSL driver version number N/A

Connected Current connected state:

True – modem is connected to a remote modem

False – modem is not connected to a remote modem

Annex Type Current Annex Type:

1. Annex_A

2. Annex_B

State Current state of the device:

Idle – not connected or attempting to connect

HandShake – connecting/hunting for remote modem

Training – connecting/found a remote modem

Showtime – connected to remote modem

Mode To be configured as CO or CPE CPE

Bit Rate Mode

Fixed Bit Rate

Framer sync

Framer Type

Bit Rate

Tx Eoc False: close EOC transmitting and receiving function.

Eoc Type

Vender ID It shows the vender ID of the device

4Wire Enable Enable – 4Wire mode

4WAuto Start

4WActivate Line false – normal operation

The transfer modes provided by the device: Fixed,
adaptive

Nx64(data) + 8xI (data) +8(EOC)
2312kbps = 36*64(data) +8*0(data) + 8 (EOC)

Even though Tx Eoc is set as False, EOC will occupy
8K.

Out_Of_Sync – Framer data unsync

In_Sync - Framer data sync

Framer is a device used to align/synchronize to an
embedded framing pattern in a serial bit stream. Once
synchronized and data fields are properly aligned,
overhead bits for alarms, performance monitoring,
embedded signaling, etc. may be extracted and
processed. Four Framer types are provided: Level2,
Level1A,Level1B.

Transmit and Receive rate (bits per second) of the
device

True : Open EOC function (invalid presently)

Six types of Embedded Operations Channel are
selectable, including DIS, INV, STA, CFG, ATMS, and
CFGLB.

Disable – 2Wire mode

“True” - A 4-wire Connection will be established at
power up.

“False” - The modem will remain in Idle mode at power
up.

true – reset DSP

False

Annex_A

N/A

adaptive

2312kbps

Level2

0

False

Disable

False

false

-48-

PAMSPAN 3000 User Manual

Attribute Value Default

Auto Start “True” - A Connection will be established at power up.

“False” - The modem will remain in Idle mode at power
up.

Activate Line false – normal operation

true – reset DSP

CRCerrors

SEGAerrors segment anomaly

LOSWerrors Loss of Sync Word error occurred

SNRLp1

SNRLp2

Atten Lp1

Atten Lp2

Physical Port

Port Speed

TxBurstSize

CACMode

Cbr_CPS

RvbrPCR_CPS

RbrPCR_CPS

VbrPCR_CPS

VbrSCR_CPS

Ubr_CPS

RingLength

VPIRange

VCIRange

DefaultPCR

DefaultMaxQueue

TrafficShaping

NiType

SnmpIfIndex

SnmpIfType

cyclic redundancy check errors occurred

Signal to Noise Ratio margin in loop 1

Signal to Noise Ratio margin in loop 2

A value between 0dB and 12dB that indicates the
transmit power attenuation in loop1

A value between 0dB and 12dB that indicates the
transmit power attenuation in loop2

A value between 0 and 14 that sets the Utopia Level 2
Utopia address

Specifies the maximum aggregate transmit speed for the
port, specified in cells/second.

Burst size (in cells) for unshaped traffic. See the ATM
Driver Tuning Guide (DO-008174-TC).

Call Access Control (CAC) mode.

Total allocated CBR bandwidth in cells per second (this
is used by CAC).

Bandwidth allocated for rt-VBR PCR.

Bandwidth allocated for VBR PCR.

Bandwidth allocated for VBR PCR.

Bandwidth allocated for VBR SCR.

Total UBR bandwidth.

Size of timing ring for shaped traffic (determines
maximum delay for a channel).

Number of bits of supported VPI range. The default
value of twelve indicates a VPI range of 0-4095.

Number of bits of supported VCI range. The default
value of sixteen indicates a VCI range of 1-65535.
Application code may open a channel with a VCI in
range 1 = vci < VCIRange.

Default PCR in cells/second of channels on this port
(only relevant for shaped traffic).

Default buffer queue depth of channels on this port.

Whether traffic-shaping is enabled on the port.

Whether received cell headers are treated as having
8-bit VPI (uni) or 12-bit VPI (nni).

Unique value for interface (assigned by support library).

IANAifType MIB-II interface type code.

True

false

0

-49-