Motorola Routers, 6161252-00-01 User Manual

Administrator’s Handbook

Motorola Netopia® Embedded Seftware Version 8.7.4

Enterprise Series Routers

Administrator’s Handbook

All rights reserved. No part of this publication may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation or adaptation) without written permission from Motorola, Inc.

Motorola reserves the right to revise this publication and to make changes in content from time to time without obligation on the part of Motorola to provide notification of such revision or change. Motorola provides this guide without warranty of any kind, either implied or expressed, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Motorola may make improvements or changes in the product(s) described in this manual at any time. MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. Microsoft, Windows, Windows Me, and Windows NT are either trademarks or registered trademarks of Microsoft Corporation in the U.S and/or other countries. Macintosh is a registered trademark of Apple, Inc. Firefox is a registered trademark of the Mozilla Foundation. All other product or service names are the property of their respective owners.

Motorola, Inc. 1303 East Algonquin Road Schaumburg, Illinois 60196 USA

Version 8.7.4

Part Number

6161252-00-01

Contents iii

Chapter 1 — Introduction.......................................................... 1-1

What’s New in 8.7.4 ...................................................... 1-1

Telnet-based Management.............................................. 1-2

Motorola Netopia® Telnet Menus.................................... 1-2

Motorola Netopia® Models............................................. 1-3

Screen differences .............................................. 1-3

Connecting through a Telnet Session............................... 1-4

Conﬁguring Telnet software................................... 1-4

Navigating through the Telnet Screens............................. 1-5

Chapter 2 — WAN Conﬁguration................................................2-1

WAN Conﬁguration ......................................................... 2-1

WAN Ethernet Conﬁguration screen ....................... 2-1

ADSL Line Conﬁguration screen ............................ 2-4

Creating a New Connection Proﬁle................................... 2-8

Advanced Connection Options....................................... 2-15

Conﬁguration Changes Reset WAN Connection..... 2-15

Scheduled Connections...................................... 2-16

Backup Conﬁguration ......................................... 2-21

Diffserv Options ................................................ 2-22

Priority Queuing (TOS bit).................................... 2-25

VRRP Options (WAN Link Failure Detection).......... 2-26

Chapter 3 — System Conﬁguration............................................ 3-1

System Conﬁguration Features ....................................... 3-1

IP Setup........................................................................ 3-2

Filter Sets ..................................................................... 3-2

IP Address Serving ........................................................ 3-2

Network Address Translation (NAT).................................. 3-2

Stateful Inspection......................................................... 3-3

Add Exposed Address List .................................... 3-3

Exposed Address Associations ............................. 3-7

VLAN Conﬁguration ...................................................... 3-11

Overview ........................................................... 3-11

Administrator’s Handbook

Ethernet Switching/Policy Setup ......................... 3-12

Associating Inter-VLAN Routing Groups ................ 3-17

Adding a RADIUS Proﬁle ..................................... 3-18

Adding Port interfaces ....................................... 3-20

Changing or Deleting a VLAN............................... 3-23

Changing or Deleting an Authentication Server

Conﬁguration ..................................................... 3-24

Conﬁguring additional Authentication Servers....... 3-25

VLAN Example ................................................... 3-27

Date and time ............................................................. 3-37

Wireless conﬁguration .................................................. 3-38

Wireless Multimedia (WMM) ............................... 3-40

Enable Privacy ................................................... 3-41

Multiple SSIDs................................................... 3-45

MAC Address Authentication............................... 3-47

Console Conﬁguration .................................................. 3-49

SNMP (Simple Network Management Protocol)............... 3-50

Security ...................................................................... 3-50

Upgrade Feature Set .................................................... 3-50

Router/Bridge Set........................................................ 3-51

IGMP (Internet Group Management Protocol) ................. 3-52

Logging ....................................................................... 3-55

Log event dispositions ....................................... 3-56

Procedure for Default Installation for ICSA ﬁrewall cer tiﬁcation of Small/Medium Business Category Module

(ADSL Routers) ............................................................ 3-60

Chapter 4 — Multi-NAT .............................................................4-1

Overview ....................................................................... 4-1

Features ............................................................. 4-2

Supported trafﬁc ................................................. 4-5

Support for AOL Instant Messenger (AIM)

File Transfer ........................................................ 4-5

Support for Yahoo Messenger............................... 4-5

Contents v

MultiNAT Conﬁguration ................................................... 4-6

Easy Setup Proﬁle conﬁguration ............................ 4-6

Server Lists and Dynamic NAT conﬁguration........... 4-7

System Conﬁguration ........................................... 4-7

Modifying map lists............................................ 4-12

Adding Server Lists...................................................... 4-15

Modifying server lists ......................................... 4-18

Deleting a server ............................................... 4-20

Binding Map Lists and Server Lists ............................... 4-21

IP proﬁle parameters.......................................... 4-21

IP Parameters (WAN Default Proﬁle) .................... 4-23

NAT Associations......................................................... 4-25

IP Passthrough ............................................................ 4-27

MultiNAT Conﬁguration Example.................................... 4-30

Chapter 5 — Virtual Private Networks (VPNs)............................5-1

Overview ....................................................................... 5-1

About PPTP Tunnels ....................................................... 5-4

PPTP conﬁguration ............................................... 5-4

About IPsec Tunnels....................................................... 5-7

About L2TP Tunnels ....................................................... 5-7

L2TP conﬁguration ............................................... 5-8

About GRE Tunnels ...................................................... 5-10

VPN force-all...................................................... 5-12

About ATMP Tunnels..................................................... 5-14

ATMP conﬁguration ............................................ 5-14

Encryption Support ...................................................... 5-16

MS-CHAP V2 and 128-bit strong encryption ......... 5-17

ATMP/PPTP Default Proﬁle............................................ 5-17

VPN QuickView ............................................................ 5-18

Dial-Up Networking for VPN ........................................... 5-19

Installing Dial-Up Networking............................... 5-20

Creating a new Dial-Up Networking proﬁle ............ 5-21

Administrator’s Handbook

Conﬁguring a Dial-Up Networking proﬁle ............... 5-21

Windows XP Client Conﬁguration ......................... 5-23

Connecting using Dial-Up Networking................... 5-23

Allowing VPNs through a Firewall ................................... 5-23

PPTP example.................................................... 5-24

ATMP example................................................... 5-27

Windows Networking Broadcasts................................... 5-30

Chapter 6 — Internet Key Exchange for VPNs ............................ 6-1

Overview ....................................................................... 6-1

Internet Key Exchange (IKE) Conﬁguration........................ 6-2

Adding an IKE Phase 1 Proﬁle ............................... 6-4

Changing an IKE Phase 1 Proﬁle ........................... 6-9

Key Management......................................................... 6-11

Advanced IPsec Options ..................................... 6-14

IPsec WAN Conﬁguration Screens ................................. 6-21

IPsec Manual Key Entry................................................ 6-22

VPN Quickview................................................... 6-23

WAN Event History Error Repor ting ...................... 6-24

Chapter 7 — IP Setup ...............................................................7-1

IP Setup........................................................................ 7-1

IP subnets........................................................... 7-3

Static routes ....................................................... 7-6

RIP Options ................................................................... 7-9

Overview ............................................................. 7-9

Authentication conﬁguration................................ 7-10

Connection Proﬁles and Default Proﬁle ................ 7-15

IP Address Serving ...................................................... 7-17

IP Address Pools................................................ 7-19

DHCP NetBIOS Options ...................................... 7-21

More Address Ser ving Options...................................... 7-23

Conﬁguring the IP Address Server options ........... 7-24

DHCP Relay Agent........................................................ 7-28

Contents vii

Connection Proﬁles ...................................................... 7-30

Multicast Forwarding.................................................... 7-32

Virtual Router Redundancy (VRRP) ...................... 7-34

Additional LANs ................................................. 7-38

Chapter 8 — Line Backup .........................................................8-1

Conﬁguring Backup ........................................................ 8-1

Connection Proﬁles ........................................................ 8-2

IP Setup.............................................................. 8-6

WAN Conﬁguration ......................................................... 8-7

Backup Conﬁguration screen ................................ 8-9

Using Scheduled Connections with Backup .................... 8-12

Backup Default Gateway............................................... 8-14

Backup Conﬁguration screen .............................. 8-14

IP Setup screen ................................................. 8-16

Backup Management/Statistics.................................... 8-16

QuickView ................................................................... 8-18

Chapter 9 — Monitoring Tools ................................................... 9-1

Quick View Status Overview............................................ 9-1

General status..................................................... 9-2

Current status ..................................................... 9-2

Status lights........................................................ 9-3

Statistics & Logs ........................................................... 9-3

Event Histories .............................................................. 9-4

IP Routing Table............................................................. 9-6

General Statistics .......................................................... 9-6

System Information........................................................ 9-8

Simple Network Management Protocol (SNMP)................. 9-8

The SNMP Setup screen....................................... 9-9

SNMP traps....................................................... 9-11

Chapter 10 — Security ...........................................................10-1

Suggested Security Measures....................................... 10-1

viii

Administrator’s Handbook

Telnet Tiered Access – Two Password Levels ................. 10-1

UPnP Support.................................................... 10-2

Superuser conﬁguration ..................................... 10-3

Limited user conﬁguration .................................. 10-3

Advanced Security Options ........................................... 10-5

RADIUS server authentication ............................. 10-6

TACACS+ server authentication........................... 10-7

Warning alerts ................................................... 10-8

User access password ..................................... 10-11

User menu differences..................................... 10-12

Telnet Access ............................................................ 10-19

About Filters and Filter Sets........................................ 10-20

What’s a ﬁlter and what’s a ﬁlter set? ............... 10-20

How ﬁlter sets work ......................................... 10-20

How individual ﬁlters work ................................ 10-21

Design guidelines ............................................ 10-26

Working with IP Filters and Filter Sets.......................... 10-27

Adding a ﬁlter set............................................. 10-27

Deleting a ﬁlter set .......................................... 10-32

A sample ﬁlter set............................................ 10-32

Policy-based Routing using Filtersets........................... 10-35

TOS ﬁeld matching........................................... 10-37

Firewall Tutorial ......................................................... 10-38

General ﬁrewall terms ...................................... 10-38

Basic IP packet components............................. 10-38

Basic protocol types......................................... 10-38

Firewall design rules ........................................ 10-39

Filter basics..................................................... 10-41

Example ﬁlters................................................. 10-42

Conﬁguration Management ......................................... 10-45

TFTP ............................................................... 10-48

Contents ix

Chapter 11 — Utilities and Diagnostics ...................................11-1

Ping ............................................................................ 11-2

Trace Route................................................................. 11-4

Telnet Client ................................................................ 11-5

Factory Defaults .......................................................... 11-6

Transferring Conﬁguration and Software Files with TFTP .. 11-6

Updating software.............................................. 11-7

Downloading conﬁguration ﬁles ........................... 11-7

Uploading conﬁguration ﬁles ............................... 11-8

Restarting the System ................................................. 11-8

Appendix A — Troubleshooting..................................................A-1

Conﬁguration Problems .................................................. A-1

Network problems................................................ A-2

How to Reset the Router to Factory Defaults.................... A-2

Power Outages .............................................................. A-3

Technical Support .......................................................... A-3

Before contacting Motorola................................... A-3

Environment proﬁle .............................................. A-3

How to reach us .................................................. A-4

Online product information ................................... A-4

Index

Administrator’s Handbook

Introduction 1-1

Chapter 1

Introduction

This

Administrator’s Handbook

Router family.

Your Motorola Netopia® equipment offers advanced conﬁguration features accessed through the Main Menu of the Telnet conﬁguration screen. This Administrator’s Handbook documents the advanced features, including advanced testing, security, monitoring, and conﬁguration. This Administrator’s Handbook should be used as a companion to the Quickstart Guide and the Getting Started Guide. You should read the Quickstart Guide and the Getting Started Guide before reading this Administrator’s Handbook.

What’s New in 8.7.4

New in Motorola Netopia® Embedded Software Version 8.7.4 are the following features:

•

Specify Source Address of Outbound Router Trafﬁc. See

covers the advanced features of the Motorola Netopia® ENT Enterprise-Series

“Enhanced Dead Peer Detection” on page 6-15

Ability to support multiple networks over the same IPSec tunnel. See

•

page 6-17

•

Backup timer can now be set in seconds instead of minutes. Minimum failure setting has been reduced to 10 seconds. See

•

USB-equipped models now support Macintosh Mac OS X on the USB port.

VLAN enhancements. See

•

IP multicast to layer 2 unicast mapping. See

page 3-52

Corresponding commands have been added to the Command Line Inter face (CLI). In addition:

•

DHCP Generic Options support.

•

DHCP ﬁltersets support.

Support for router generated packets with their source address outside the local member range for IPSec

•

force all tunnels.

See the

Chapter 8, “Line Backup.”

“VLAN Conﬁguration” on page 3-11

“IGMP (Internet Group Management Protocol)” on

Command Line Interface Commands Reference

available on the Motorola Netopia® website.

“Multiple Network IPsec” on

1-2 Administrator’s Handbook

Telnet-based Management

Telnet-based management is a fast menu-driven interface for the capabilities built into Motorola Netopia® Embedded Software Version 8.7.4. Telnet-based management provides access to a wide variety of features that the Router supports. You can customize these features for your individual setup. This chapter describes how to access the Telnet-based management screens. This section covers the following topics:

“Motorola Netopia® Telnet Menus” on page 1-2

•

Motorola Netopia® Models” on page 1-3

“

•

“Connecting through a Telnet Session” on page 1-4

“Navigating through the Telnet Screens” on page 1-5

•

Motorola Netopia® Telnet Menus

Telnet-based management screens contain the main entry points to Motorola Netopia® Embedded Software Version 8.7.4 conﬁguration and monitoring features. The entry points are displayed in the Main Menu shown below:

Netopia 3366 V 8.7.4

Easy Setup...

WAN Configuration...

System Configuration...

Utilities & Diagnostics...

Statistics & Logs...

Quick Menus...

Quick View...

The

•

Easy Setup

You can use Easy Setup to initially conﬁgure the Router directly through a Telnet session.

Easy Setup menus contain up to ﬁve descendant screens for viewing or altering these values. The number of screens depends on whether you have optional features installed.

The

Quickstart Guide

menus display and permit changing the values contained in the default connection proﬁle.

describes the Easy Setup menus to get you up and running quickly.

Introduction 1-3

•

The

WAN Conﬁguration

Networks (VPNs) and default proﬁle, creating or deleting additional connection proﬁles, and conﬁguring or reconﬁguring the manner in which you may be using the Router to connect to more than one ser vice provider or remote site. See

Private Networks (VPNs).”

•

The

System Conﬁguration

• IP Setup • Filter Sets

• IP Address Serving • Network Address Translation (NAT)

• Date and Time • SNMP (Simple Network Management Protocol)

• Security • Upgrade Feature Set

• Change Device to a Bridge • Logging

menu displays and permits changing your connection proﬁle(s), Vir tual Private

“WAN Conﬁguration,” beginning on page 2-1

menus display and permit changing:

. See also

Chapter 5, “Virtual

and more. See

•

The

Utilities & Diagnostics

the Router's behavior, as well as for updating the software and rebooting the system. See

“Utilities and Diagnostics.”

•

The

Statistics & Logs

your Router, your network, and their history. See

The

•

Quick Menus

menus that are accessed through the other menu entr y points.

The

Quick View

“Quick View Status Overview” on page 9-1

“System Conﬁguration Features,” beginning on page 3-1

menus provide a selection of the various tools for monitoring and diagnosing

menus display several sets of tables and device logs that show information about

“Statistics & Logs,” beginning on page 9-3

screen is a shortcut entr y point to a variety of the most commonly used conﬁguration

menu displays at a glance current real-time operating information about your Router. See

Chapter 11,

Motorola Netopia® Models

This

Administrator’s Handbook

However some information in this guide will only apply to a speciﬁc model.

Screen differences

Because different Motorola Netopia® ENT Enterprise-Series models offer many different features and interfaces, the options shown on some screens in this particular model’s Telnet screen.

These differences are noted throughout the manual.

covers all of the Motorola Netopia® ENT Enterprise-Series Router models.

Administrator’s Handbook

may not appear on your own

1-4 Administrator’s Handbook

Connecting through a Telnet Session

Features of Motorola Netopia® Embedded Software Version 8.7.4 can be conﬁgured through the Telnet screens.

Before you can access the console screens through Telnet, you must have:

•

A network connection locally to the Router or IP access to the Router.

•

Telnet software installed on the computer you will use to conﬁgure the Router

Configuring Telnet software

If you are conﬁguring your device using a Telnet session, your computer must be running a Telnet software program.

•

If you connect a PC with Microsoft Windows, you can use a Windows Telnet application or run Telnet from the Start menu.

•

If you connect a Macintosh computer, Mac OS X users can use the Terminal application that comes with Mac OS X in the Utilities folder.

Introduction 1-5

Navigating through the Telnet Screens

Use your keyboard to navigate the Motorola Netopia® Embedded Software Version 8.7.4’s conﬁguration screens, enter and edit information, and make choices. The following table lists the keys to use to navigate through the Telnet screens.

To... Use These Keys...

Move through selectable items in a screen or pop-up menu Up, Down, Left, and Right Arrow

Set a change to a selected item or open a pop-up menu of options for a selected item like entering an upgrade key

Change a toggle value (Yes/No, On/Off) Tab

Restore an entry or toggle value to its previous value Esc

Move one item up Up arrow or Control + O

Move one item down Down arrow or Control + K

Page up Control + A

Page down Control + Z

Display a dump of the device event log Control + E

Display a dump of the WAN event log Control + F

Refresh the screen Control + L

To help you ﬁnd your way to particular screens, some sections in this guide begin with a graphical path guide similar to the following example:

Main

System

Configuration

Return or Enter

IP Setup

This particular path guide shows how to get to the Network Protocols Setup screens. The path guide represents these steps:

1. Beginning in the Main Menu, select System Conﬁguration and press Return. The System Conﬁguration screen appears.

2. Select IP Setup and press Return. The IP Setup screen appears.

To go back in this sequence of screens, use the Escape key.

1-6 Administrator’s Handbook

WAN Conﬁguration 2-1

Chapter 2

WAN Configuration

This chapter describes how to use the Telnet-based management screens to access and conﬁgure advanced features of your equipment. You can customize these features for your individual setup. These menus provide a powerful method for experienced users to set up their Router’s connection proﬁles conﬁguration.

This section covers the following topics:

• “WAN Conﬁguration” on page 2-1

• “WAN Ethernet Conﬁguration screen” on page 2-1

• “ADSL Line Conﬁguration screen” on page 2-4

• “Creating a New Connection Proﬁle” on page 2-8

• “Advanced Connection Options” on page 2-15

• “Conﬁguration Changes Reset WAN Connection” on page 2-15

• “Scheduled Connections” on page 2-16

• “Backup Conﬁguration” on page 2-21

• “Diffserv Options” on page 2-22

• “Priority Queuing (TOS bit)” on page 2-25

• “VRRP Options (WAN Link Failure Detection)” on page 2-26

WAN Configuration

To conﬁgure your Wide Area Network (WAN) connection, navigate to the WAN Conﬁguration screen from the Main Menu and select WAN (Wide Area Network) Setup.

Main

The Line Conﬁguration screen appears. The Line Conﬁguration screen will be appropriate to the type of WAN interface supported by your particular Router model.

WAN Ethernet Configuration screen

The WAN Ethernet Conﬁguration screen appears as follows:

WAN

Configuration

WAN

Setup

2-2 Administrator’s Handbook

WAN Ethernet Configuration

Address Translation Enabled: Yes Obtain WAN address via DHCP: On

NAT Map List... Easy-PAT List NAT Server List... Easy-Servers NAT Options... Stateful Inspection Enabled: No

Filter Set... Remove Filter Set

WAN Ethernet Speed Setting... Auto-Negotiation Wan Ethernet MAC Address: 00:0f:cc:0b:9d:ce

DHCP Client Mode: Standards-Based

RIP Options...

Set up the basic IP attributes of your Ethernet Module in this screen.

• Address Translation Enabled allows you to specify whether or not the router performs Network Address

Translation (NAT) on the Ethernet WAN port. NAT is enabled by default.

• Obtain WAN address via DHCP allows you to toggle WAN DHCP Off and On. DHCP is On by default. so that

if you do not change the setting, the Router will acquire its WAN IP address automatically. By default, the router acts as a DHCP client on the Ethernet WAN port and and attempts to acquire an address from a DHCP server.

• The Local WAN IP Address ﬁeld allows you to manually conﬁgure an IP address for use on the Ethernet

WAN port. This ﬁeld only becomes visible if you toggle Obtain WAN address via DHCP to Off.

• The Local WAN IP Mask ﬁeld becomes visible if you specify a Local WAN IP Address. This allows you to

manually conﬁgure an IP subnet mask for use on the Ethernet WAN port. This item is visible only if you have conﬁgured a non-zero Ethernet IP Address; other wise, the router obtains a subnet mask via DHCP.

• The NAT Map List and NAT Server List options are set to the defaults, Easy-PAT List and Easy-Servers.

These provide standard NAT mappings. For more advanced NAT conﬁgurations, see “Multi-NAT” on

page 4-1.

• NAT Options allows you to specify IP Passthrough, allowing a single PC on the LAN to have the router’s

public address assigned to it. See “IP Passthrough” on page 4-27.

• If you set Stateful Inspection Enabled to Yes , you can enable a security feature for computers on your LAN

when NAT is disabled. See “Stateful Inspection” on page 3-3.

• The Filter Set pop-up allows you to associate an IP ﬁlter set with the Ethernet WAN port. See “About Filters

and Filter Sets” on page 10-20.

• Remove Filter Set allows you to remove a previously associated ﬁlter set.

• The WAN Ethernet Speed Setting is conﬁgurable via a pop-up menu. Options are:

• Auto-Negotiation (the default)

WAN Conﬁguration 2-3

• 100 Mbps Full Duplex

• 100 Mbps Half Duplex

• 10 Mbps Full Duplex

• 10 Mbps Half Duplex

• 100 Mbps, Full Duplex, Fixed

• 100 Mbps, Half Duplex, Fixed

• 10 Mbps, Full Duplex, Fixed

• 10 Mbps, Half Duplex, Fixed

This may be useful in mixed networks, where multiple routers have different ethernet speed capability. If you want to maintain a single speed setting for compatibility with multiple routers on your LAN, you can select a speed/duplex combination that all of your routers can match.

• The Wan Ethernet MAC Address is the hardware address of the Motorola Netopia

providers require a speciﬁc MAC address as par t of their authentication process. In such a case, you can enter the MAC address that your service provider requires. If your ser vice provider doesn’t use this method, you don’t need to change this ﬁeld.

device. Some service

• The DHCP Client Mode setting depends on the type of access concentrator equipment your service

provider uses. Most use Standards-Based. Alternatively, your provider may instruct you to select Copper Mountain Speciﬁc.

• The RIP Options selection displays the WAN Ethernet RIP Parameters screen.

WAN Ethernet RIP Parameters +----------------+ +----------------+ Receive RIP: | Off | | v1 | | v2 | | Both v1 and v2 | | v2 MD5 Authentication +----------------+

• The Receive RIP pop-up menu controls the reception and transmission of Routing Information Protocol

(RIP) packets on the Ethernet WAN port. The default is Both.

2-4 Administrator’s Handbook

The Transmit RIP pop-up menu is hidden if NAT is enabled.

Routing Information Protocol (RIP) is needed if there are IP routers on other segments of your Ethernet network that the Motorola Netopia

Router needs to recognize. Set to “Both” (the default) Motorola Netopia® Embedded Software Version 8.7.4 will accept information from either RIP v1 or v2 routers. Alternatively, select Receive RIP and select v1, v2, or v2 MD5 Authentication from the popup menu. With Receive RIP set to “v1,” the Motorola Netopia® Router’s Ethernet por t will accept routing information provided by RIP packets from other routers that use the same subnet mask. Set to “v2,” the Motorola Netopia® Embedded Software Version 8.7.4 will accept routing information provided by RIP packets from other routers that use different subnet masks.

For more information on v2 MD5 Authentication, see “

RIP Options” on page 7-9.

If you want the Motorola Netopia® Router to advertise its routing table to other routers via RIP, select Transmit RIP and select v1, v2 (broadcast), or v2 (multicast) from the popup menu. With Transmit RIP v1 selected, the Motorola Netopia® Embedded Software Version 8.7.4 will generate RIP packets only to other RIP v1 routers. With Transmit RIP v2 (broadcast) selected, the Motorola Netopia® Embedded Software Version 8.7.4 will generate RIP packets to all other hosts on the network. With Transmit RIP v2 (multicast) selected, the Motorola Netopia® Embedded Software Version 8.7.4 will generate RIP packets only to other routers capable of recognizing RIP v2 packets.

ADSL Line Configuration screen

The ADSL Line Conﬁguration screen is shown below:

ADSL Line Configuration

Circuit Type... Multimode Trellis Coding Enabled: On

Signaling Mode... FDM Fast Retrain Enabled: On

Wiring Type... AutoSense Data Link Encapsulation... RFC1483 Annex Modes enabled: Off

1. Select Circuit Type and from the pop-up menu choose the type of circuit to which you will be connecting: Multimode, T1.413, G.dmt, or G.lite.

2. Select Trellis Coding Enabled. Toggle it to On (the default) or Off.

3. Select Signaling Mode and choose Echo Cancellation or FDM (the default).

4. If you selected Multimode Circuit Type, the Fast Retrain Enabled ﬁeld appears. Toggle it to On (the default) or Off.

WAN Conﬁguration 2-5

5. For model 3341 and 3366C ADSL modems, a Wiring Type pop-up menu allows you to choose the type of copper pair wiring in use at your location. For all other models this option is preset and does not appear.

Usually, the default AutoSense will detect the type and adjust itself accordingly. If you want to set it yourself, and you know the type of wiring you have, choose either Tip/Ring (Inner Pair) or A/A1 (Outer Pair) from the pop-up menu.

6. Select Data Link Encapsulation and press Return. The pop-up menu will offer you the choice of PPP or RFC1483.

7. Toggle Annex Modes enabled to On only if your service provider supports it. The embedded software has the ability to support Annex M mode. However, Annex M mode may affect the training timing in some cases. Consequently, the default is Off. Not all ser vices suppor t this feature for all subscribers.

ATM Circuit Configuration

On ADSL WAN interfaces, the Asynchronous Transfer Mode (ATM) connection between the router and the central ofﬁce equipment (DSLAM) is divided logically into one or more virtual circuits (VCs). A vir tual circuit may be either a permanent vir tual circuit (PVC) or a switched vir tual circuit (SVC). Motorola Netopia® Routers support PVCs.

VCs are identiﬁed by a Virtual Path Identiﬁer (VPI) and Virtual Channel Identiﬁer (VCI). A VPI is an 8-bit value between 0 and 255, inclusive, while a VCI is a 16-bit value between 0 and 65535, inclusive.

• Circuits support attributes in addition to their VPI and VCI values. When conﬁguring a circuit, you can

specify an optional circuit name of up to 14 characters. The circuit name is used only to identify the circuit for management purposes as a convenience to aid in selecting circuits from lists. The default circuit name is “Circuit <n>”, where <n> is some number between one and eight corresponding to the circuit’s position in the list of up to eight circuits.

• You can also individually enable or disable a circuit without deleting it. This is useful for temporarily

removing a circuit without losing the conﬁgured attributes.

• In order to function, each circuit must be bound to a Connection Proﬁle or to the Default Proﬁle. Among

other attributes, the proﬁle binding speciﬁes the IP addressing information for use on the circuit. Each circuit must be bound to a distinct Connection Proﬁle.

ATM VPI/VCI Autodetection. You can bind multiple circuits to the same Connection Proﬁle. Motorola Netopia® Embedded Software Version 8.7.4 allows you to have a standard conﬁguration that uses, for example, four VCs (0/35, 0/38, 8/35, 8/38) pointing to the same proﬁle.

The unit will now automatically select the active VC on networks with a VPI/VCI of any of these four values without any custom conﬁguration of the unit. You must, however, manually create these VCs and associate them with the proﬁle you desire.

You conﬁgure Virtual Circuits in the Add/Change Circuit screen.

Main

WAN

Configuration

ATM Circuits

Configuration

2-6 Administrator’s Handbook

ATM Circuits Configuration

Show/Change Circuit... Add Circuit... Delete Circuit...

8. To add a circuit, select Add Circuit and press Return. The Add Circuit screen appears.

Add Circuit

Circuit Name: Circuit 2

Circuit Enabled: Yes

Circuit VPI (0-255): 0

Circuit VCI (32-65535): +-------------+ +-------------+ QoS... | UBR | Peak Cell Rate (0 = line rate): | CBR | | VBR | +-------------+ Use Connection Profile... Default Profile Use Default Profile for Circuit ADD Circuit NOW CANCEL

• Enter a name for the circuit in the Circuit Name ﬁeld.

• Toggle Circuit Enabled to Yes.

• Enter the Virtual Path Identiﬁer and the Virtual Channel Identiﬁer in the Circuit VPI and Circuit VCI

ﬁelds, respectively.

• The Peak Cell Rate ﬁeld is editable. Motorola Netopia® Embedded Software Version 8.7.4 supports

three ATM classes of service for data connections: Unspeciﬁed Bit Rate (UBR), Constant Bit Rate (CBR), and Variable Bit Rate (VBR). You can conﬁgure these classes of service on a per VC basis. The

default ATM class of service is UBR.

Quality of Service (QoS) settings

Note: QoS settings are not available on Ethernet-to-Ethernet WAN models.

• Select the QoS (Quality of Service) setting from the pop-up menu: UBR. CBR, or VBR.

UBR: No conﬁguration is needed for UBR VCs. Leave the default value 0 (maximum line rate). CBR: One parameter is required for CBR VCs. Enter the Peak Cell Rate that applies to the VC. This

value should be between 1 and the line rate. You set this value according to speciﬁcations deﬁned by your service provider.

Add Circuit

Circuit Name: Circuit 2

Circuit Enabled: Yes

Circuit VPI (0-255): 0

Circuit VCI (32-65535): 32

QoS... VBR Peak Cell Rate (0 = line rate): 0 Sustained Cell Rate: 0 Maximum Burst Size: 0 Use Connection Profile... Default Profile Use Default Profile for Circuit ADD Circuit NOW CANCEL

Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes.

WAN Conﬁguration 2-7

VBR: This class is characterized by:

• a Peak Cell Rate (PCR), which is a temporary burst, not a sustained rate, and

• a Sustained Cell Rate (SCR),

• a Burst Tolerance (BT), speciﬁed in terms of Maximum Burst Size (MBS). The MBS is the maximum number of cells that can be transmitted at the peak cell rate and should be less than, or equal to the Peak Cell Rate, which should be less than, or equal to the line rate. VBR has two sub-classes: a. VBR non-real-time (VBR-nrt): Typical applications are non-real-time traf ﬁc, such as IP data trafﬁc. This class yields a fair amount of Cell Delay Variation (CDV).

b. VBR real time (VBR-rt): Typical applications are real-time traf ﬁc, such as compressed voice over IP

and video conferencing. This class transmits cells with a more tightly bounded Cell Delay Variation. The applications follow CBR.

• Then, select a Connection Proﬁle for the Circuit. To use the Default Proﬁle, select Use Default Proﬁle

for Circuit and press Return. For other options, select a proﬁle from the Use Connection Proﬁle

pop-up menu.

2-8 Administrator’s Handbook

Note: With multiple VCs you must explicitly statically bind the second (and all subsequent) VCs to a proﬁle.

The ﬁrst VC will automatically statically bind according to pre-deﬁned dynamic binding rules when you add the second VC. It will revert back to dynamic binding if the number of VCs is reduced to one; for example, by deleting previously deﬁned VCs.

When the link comes up the router binds the VC dynamically to the ﬁrst suitable Connection Proﬁle or to the Default Proﬁle if there is no Connection Proﬁle conﬁgured.

• If you factory default the router, the VC binds to the Default Proﬁle.

• If you delete a Connection Proﬁle that is statically bound to a VC, the VC binding is set back to the Default

Proﬁle. If there is only one VC deﬁned, the VC dynamically binds to the ﬁrst suitable proﬁle or to the Default Proﬁle. If there are multiple VCs deﬁned, it binds to the Default Proﬁle.

• If you add a second VC, it is initialized to the Default Proﬁle, and the menu screens display the VC

Connection Proﬁle-related items, allowing you to bind to a speciﬁc Connection Proﬁle instead of the Default Proﬁle. In addition, the router statically binds the ﬁrst VC according to the rules used to select a proﬁle for dynamic binding. At this point, each proﬁle uses static binding when the link is brought up.

• If there are no VCs when you add a VC -- for example, if you deleted all your previous VCs and star ted adding

them again -- dynamic binding will occur when the link comes up. If you delete a VC, leaving only one VC, that VC resumes dynamically binding again.

• Select ADD Circuit NOW and press Return.

9. To display or change a circuit, select Display/Change Circuit, select a circuit from the pop-up menu, and press Return. The ﬁelds are the same as those in the Add Circuit screen.

10. To delete a circuit, select Delete Circuit, select a circuit from the pop-up menu, and press Return. In the conﬁrmation window, select CONTINUE and press Return.

11. Press Escape to return to the WAN Setup menu.

Creating a New Connection Profile

Connection proﬁles are useful for conﬁguring the connection and authentication settings for negotiating a PPP connection. If you are using the PPP data link encapsulation method, you can store your authentication information in the connection proﬁle so that your user name and password (or host name and secret) are transmitted when you attempt to connect.

Connection proﬁles deﬁne the networking protocols necessar y for the Router to make a remote connection. A connection proﬁle is like an address book entr y describing how the Router is to get to a remote site, or how to recognize and authenticate a connection. To create a new connection proﬁle, you navigate to the WAN Conﬁguration screen from the Main Menu, and select Add Connection Proﬁle.

WAN Conﬁguration 2-9

Main

The Add Connection Proﬁle screen appears.

Add Connection Profile

Profile Name: Profile 1 Profile Enabled: Yes

Encapsulation Type... RFC1483

RFC1483 Mode... Bridged 1483

IP Profile Parameters...

COMMIT CANCEL

Return accepts * ESC cancels * Left/Right moves insertion point * Del deletes. Configure a new Conn. Profile. Finished? COMMIT or CANCEL to exit.

WAN

Configuration

Add Connection

Profile

1. Select Proﬁle Name and enter a name for this connection proﬁle. It can be any name you wish. For example: the name of your ISP.

2. Toggle Proﬁle Enabled to Ye s or No. The default is Yes. You can toggle it to No, if you want to disable it later.

3. Select Encapsulation Type and press Return. The pop-up menu offers the possible data link encapsulation methods for connection proﬁles used for a variety of purposes: PPP, RFC1483, ATMP, PPTP, IPsec, L2TP.

Multiple Data Link Encapsulation Settings

4. Select Encapsulation Options and press Return.

• If you selected ATMP, PPTP, L2TP, or IPSec, see Chapter 5, “Vir tual Private Networks (VPNs).”

2-10 Administrator’s Handbook

• If you selected PPP or RFC1483, the screen offers different options:

Add Connection Profile

Profile Name: Profile 1 Profile Enabled: Yes

Encapsulation Type... +--------------+ +--------------+ RFC1483 Mode... | Bridged 1483 | | Routed 1483 | +--------------+

IP Profile Parameters...

COMMIT CANCEL

• If you selected RFC1483, the screen allows you

to choose Bridged 1483 or Routed 1483.

Add Connection Profile

Profile Name: Profile 1 Profile Enabled: Yes

Encapsulation Type... PPP Underlying Encapsulation... None PPP Mode... VC Multiplexed Encapsulation Options...

IP Profile Parameters...

Interface Group... Primary

COMMIT CANCEL

Configure a new Conn. Profile. Finished? COMMIT or CANCEL to exit.

• If you selected PPP, the screen allows you to

choose PPPoE or None as the Underlying Encapsulation.

• If you choose None, the PPP Mode offers the

choice of VC Multiplexed or LLC SNAP.

If you are using PPP, when you select Encapsulation Options, the Datalink (PPP/MP) Options screen appears. (RFC1483 does not require these options and does not offer the menu selection.)

WAN Conﬁguration 2-11

Datalink (PPP/MP) Options

Data Compression... Standard LZS

Send Authentication... PAP

Send User Name: Send Password: Receive User Name: Receive Password:

• Data Compression defaults to Standard LZS. You

can select Ascend LZS, if you are connecting to compatible equipment, or None from the pop-up menu.

• The Send Authentication pop-up menu lets you

select PAP, CHAP, or None.

• Selecting PAP or CHAP allows you to enter your

authentication credentials for both sending and receiving connections.

PAP requires a User Name and Password; CHAP requires a Host Name and Secret. The screen changes to accommodate your selection.

Datalink (PPP/MP) Options

Data Compression... Standard LZS

Send Authentication... PAP

Send User Name: Send Password: Receive User Name: Receive Password:

Dial on Demand: Yes

Idle Timeout (seconds): 300

• If you are creating a Backup proﬁle, you can

toggle Dial on Demand to Yes (the default) or No and adjust the idle timeout in seconds from the default 300 (5 minutes). See “Line Backup” on page 8-1 for more information.

Return to the Add Connection Proﬁle screen by pressing Escape.

5. Select IP Proﬁle Parameters and press Return. The IP Proﬁle Parameters screen appears.

2-12 Administrator’s Handbook

IP Profile Parameters

Address Translation Enabled: Yes IP Addressing... Numbered NAT Map List... Easy-PAT List NAT Server List... Easy-Servers NAT Options... Stateful Inspection Enabled: No

Local WAN IP Address: 0.0.0.0 Local WAN IP Mask: 0.0.0.0

Filter Set... Remove Filter Set

RIP Profile Options...

Return/Enter to select <among/between> ... Configure IP requirements for a remote network connection here.

6. Toggle or enter your IP Parameters.

For more information, see:

• “IP Setup” on page 7-1

• “Network Address Translation (NAT)” on page 3-2

• “Stateful Inspection Options” on page 3-8

• “Filter Sets” on page 3-2

• The RIP Proﬁle Options selection displays the RIP Proﬁle Parameters screen.

WAN Conﬁguration 2-13

RIP Profile Parameters +-----------------------+ +-----------------------+ Receive RIP: | Off | | v1 | | v2 | | Both v1 and v2 | | v2 MD5 Authentication | +-----------------------+

• The Receive RIP pop-up menu controls the reception and transmission of Routing Information Protocol

(RIP) packets on the WAN port. The default is Both v1 and v2.

A Transmit RIP pop-up menu is hidden if NAT is enabled.

Routing Information Protocol (RIP) is needed if there are IP routers on other segments of your Ethernet network that the Motorola Netopia® Router needs to recognize. Set to “Both” (the default) Motorola Netopia® Embedded Software Version 8.7.4 will accept information from either RIP v1 or v2 routers. Alternatively, select Receive RIP and select v1, v2, or v2 MD5 Authentication from the popup menu. With Receive RIP set to “v1,” the Motorola Netopia® Router’s Ethernet por t will accept routing information provided by RIP packets from other routers that use the same subnet mask. Set to “v2,” the Motorola Netopia® Embedded Software Version 8.7.4 will accept routing information provided by RIP packets from other routers that use different subnet masks.

For more information on v2 MD5 Authentication, see “

RIP Options” on page 7-9.

PPPoE/PPPoA Autodetection

Beginning with Software Version 8.5, if you are using PPP, and you have selected PPPoE as the Underlying Encapsulation, you can further enable the ability to connect automatically to your ISP’s central ofﬁce equipment

whether they are using PPP over Ethernet or PPP over ATM.

Note: This feature applies only to ATM-based WAN connections.

7. Select PPPoE Options and press Return.

The PPPoE Options screen appears.

2-14 Administrator’s Handbook

PPPoE Options

PPPoA Autodetect: No

Return/Enter accepts * Tab toggles * ESC cancels.

Toggle PPPoA Autodetect to On.

If your ISP is using PPPoE, the connection will be made normally. If your ISP is using PPPoA, when the Motorola Netopia® Gateway detects this, it will automatically switch to PPPoA transparently.

8. Return to the Add Connection Proﬁle screen by pressing Escape.

9. Select COMMIT and press Return. Your new Connection Proﬁle will be added.

If you want to view the Connection Proﬁles in your device, return to the WAN Conﬁguration screen, and select Display/Change Connection Proﬁle. The list of Connection Proﬁles is displayed in a scrolling pop-up screen.

WAN Configuration +-Profile Name---------------------IP Address------+ +--------------------------------------------------+ | Easy Setup Profile 255.225.255.255 | | Profile 1 0.0.0.0 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | +--------------------------------------------------+

+ 310 hidden pages