Westell 7500XX-07 User Manual
)
User GuideVersaLink Wireless Gateway (Model 7500
15.6 Static NAT
In the Firewall Settings screen, select Static NAT from the submenu options displayed at the left of the screen. A
warning screen will display the following message:
Any changes made in this section may affect your device’s performance and configuration.
Do you want to proceed?
Click Yes to proceed.
15.6.1 Enabling Static NAT
If you clicked Yes in the warning screen, the following Static NAT screen will appear. The Static NAT screen
allows you to configure your Router to work with the special NAT services. When the Router is configured for
Static NAT, any unsolicited packets arriving at the WAN will be forwarded to the selected device. This feature can
be used when you want to host a server for a specific application.
IMPORTANT:
Static NAT and DMZ Host are mutually exclusive features. Before you enable static NAT, confirm that DMZ Host
is disabled. If needed, refer to section 15.4.2 for details on disabling DMZ Host.
030-300536 Rev. A 126 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
To enable Static NAT, select a device from the Static NAT Device drop-down menu, or enter the IP address of the
device to which you want to assign Static NAT. Next, click Enable.
The following screen shows that Static NAT has been enabled for the device you selected.
030-300536 Rev. A 127 August 2007
)
15.6.2 Disabling Static NAT
To disable Static NAT (if it has been previously enabled), click Disable in the Static NAT screen.
User GuideVersaLink Wireless Gateway (Model 7500
After you have disabled Static NAT the following screen will show no devices enabled for static NAT.
030-300536 Rev. A 128 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
15.7 Security Log
In the Firewall Settings screen, select Security Log from the submenu options displayed at the left of the screen. A
warning screen will display the following message:
Any changes made in this section may affect your device’s performance and configuration.
Do you want to proceed?
Click Yes to proceed.
If you clicked Yes in the warning screen, the following Security Log screen will appear. This screen alerts you of
noteworthy information sent to VersaLink from the Internet. The screen can contain 1000 entries, but a maximum of
50 entries are displayed at a time. Once 1000 entries have been logged, the oldest entry is removed to make space
for the new entries as they occur.
030-300536 Rev. A 129 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
Security Log
Close Clicking this button closes the security log screen.
Clear log Clicking this button removes all entries from the log.
Settings Clicking this button opens a new window that contains configuration settings for
selecting the information that you want logged.
Printable/savable format Clicking this button opens a new window that contains a list of all the logged
packets that can be saved or printed. You can send a copy of the Firewall log to a
designated printer.
Refresh Clicking this button updates the screen so that it displays the most current data.
Time Displays the time that the packet was sent.
Direction/Source Displays the direction of transmission.
Rule/Reason Displays the internal rule that caused the logged event. The internal rule is set up
under Firewall rules.
Alert Displays a description of the logged event.
Details Displays details about logged event.
If you clicked Settings in the preceding Security Log screen, the following Firewall Log Settings screen will
appear. This screen allows you to configure firewall remote logging. Remote logging allows the firewall logs to be
sent to a machine running a syslog server.
NOTE: The syslog server must be configured to isten on udp port 514, which is usually the default port. In order for
the logs to be saved to the syslog server, the server should be configured to save the logs to a file. Some of the free
syslog servers available on the Internet are kiwisyslog, MT_syslog and 3Csyslog.
To configure Remote Logging, do the following:
1. Select the desired firewall log settings from the drop-down menus.
2. Click the Enable check box below Remote Logging (a check mark will appear in the box).
3. Type the IP address of the syslog server in the Remote IP Address field.
4. Click Apply to allow the settings to take effect.
030-300536 Rev. A 130 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
16. ADVANCED
The following sections discuss the advanced features of your Router, such as IP address distribution, firmware
upgrades, etc.
IMPORTANT: This section assumes that you have active DSL and Internet service.
If you select Advanced in the top navigational menu, a warning screen will display the following message:
Any changes made in this section may affect your device’s performance and configuration.
Do you want to proceed?
Click Yes to proceed.
030-300536 Rev. A 131 August 2007
)
If you clicked Yes in the preceding warning screen, the following screen will appear. The Advanced screen allows
you to access various configurable features in your Router. To access a feature, click the link of the feature that you
want to access. The features shown in this page will be discussed in the following sections.
User GuideVersaLink Wireless Gateway (Model 7500
16.1 Diagnostics
In the Advanced screen, click Diagnostics. The following screen will appear. Using this screen, you can run the
following diagnostics tests:
• To run a DNS test, type the appropriate host name in the field provided, and then click test.
• To run a PING test, type the appropriate IP address or host name in the field provided, and then click test.
• To run a Trace Route, type the appropriate IP address or host name in the field provided, and then click
trace.
• To run a full diagnostic test on your Router, click Test All.
030-300536 Rev. A 132 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
If you want to PING using the System Self Test screen (diagnostics page) shown above, enter your DNS or IP
address in the fields provided and click on the test button. The System Self Test will run a diagnostic test that
executes independent of firewall security settings. See the following table for test descriptions and possible
responses.
If you want to PING using the MS-DOS (shell) window, first you will need to check your firewall security setting.
(If you PING via DOS shell you are susceptible to firewall rules, as this PING is dependent on VersaLink's firewall
settings.) If your firewall is set to Medium or High, you will not be able to PING. You must set your firewall
security setting to Low or None.
Diagnostics
DSL VersaLink checks the status of the DSL connection.
Possible Responses:
Connection Up: VersaLink is operating correctly and has obtained synchronization with the
opposing network device.
Connection down: VersaLink is operating correctly, but has not synchronized with the opposing
device.
PPPoE Indicates that a PPPoE session is or is not established.
Possible Responses:
Session Up: A valid PPPoE session has been detected.
No Session: Currently there is no active PPPoE session established.
Initiating Session: A PPP session must be connected from the home page.
030-300536 Rev. A 133 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
PPP Indicates that a PPPoE or PPPoA session must already be established.
Possible Responses:
Connection Up: VersaLink has established a connection
No Connection: There is no PPP connection
Initiating Connection: The PPP connection process has been initiated
Connection Halted: A successful PPP connection was halted
Cannot Connect: A PPP connection could not be made because of a PPPoE session failure.
Authorization Failure: The user name or password is incorrect.
Link Control Protocol Failed: Reestablish the session (from the home page).
Test Description / Test Results
Self Test Performs an integrity check of certain internal components of VersaLink.
PING ISP’s
Router
Performs an IP network check (i.e., an IP Ping) of the service provider’s VersaLink. This test
verifies that VersaLink can exchange IP traffic with an entity on the other side of the DSL line.
Possible Responses:
Success: VersaLink has detected an IP Remote Router connection.
No Response: The IP Remote Router does not answer the IP Ping.
Could not test: The test could not be executed due to Router settings. Check your DSL link or
your PPP session. You must have both a DSL link and a PPP connection established to execute a
PING.
DNS Performs a test to try to resolve the name of a particular host. The host name is entered in the
input box.
Possible Responses:
Success: VersaLink has successfully obtained the resolved address. The IP address is shown
below the host name input box.
No Response: VersaLink has failed to obtain the resolved address.
Host not found: The DNS Server was unable to find an address for the given host name.
No data, enter host name: No host name is specified.
Could not test: The test could not be executed due to VersaLink settings. Check your DSL link
or your PPP session. You must have both a DSL link and a PPP connection established to
execute a PING.
IP Address IP Address of the Host Name.
PING
(via IP Address or
Host Name)
Performs an IP connectivity check to a remote computer either within or beyond the service
provider’s network. You can PING a remote computer via the IP address or the DNS address. If
your PING fails, try a different IP or DNS address.
Possible Responses:
Success: The Remote Host computer was detected.
No Response: There was no response to the Ping from the remote computer.
No name or address to PING: No host name or IP address was specified.
Could not test: The test could not be executed due to Router settings. Check your DSL link or
your PPP session. You must have both a DSL link and a PPP connection established to execute a
PING.
Trace Route
Determines the route taken to destination by sending Internet Control Message Protocol (ICMP)
echo packets with varying IP Time-To-Live (TTL) values to the destination. Trace Route is used
to determine where the packet is stopped on the network.
030-300536 Rev. A 134 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
16.2 Restore Defaults
In the Advanced screen, click Restore Defaults. This screen allows you to restore the Router to its factory default
settings. To restore the Router, click the Restore Defaults button.
IMPORTANT: If you click Restore Defaults, any settings that you have configured in the Router will be erased,
and any data that the Router has reported will be lost.
If you clicked Restore Defaults, the following screen will appear. Please wait a brief moment while the Router
resets.
After the Router has reset, the Router Secure screen will be displayed. Follow the instructions explained in section
8.1, “Logging on to the Router,” to log on to your Router.
030-300536 Rev. A 135 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
16.3 Reboot Gateway
In the Advanced screen, click Reboot Gateway. This screen allows you to reboot your Router without losing any
customized settings that you have made in the Router. Click OK to reboot your Router.
If you clicked OK, the following screen will appear. Please wait a brief moment while the Router reboots.
030-300536 Rev. A 136 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
16.4 Users
In the Advanced screen, click Users. The following User Settings screen allows you to change the administrator’s
user name and password. Type the desired values in the fields provided, and then click Apply to allow the settings
to take effect. Refer to section 8.2, “Changing the Password,” for details on this feature.
NOTE:
1. If the Router is password protected and you are not an authorized user, you will not be able to change the values
in this screen. (The Router cannot be configured unless an authorized user is logged on.) Contact your network
administrator for further instructions.
2. The values typed in the password fields will be masked for security purposes.
3. This feature changes the Administrator’s password, not the PPP password.
User Settings
Full Name Displays the Administrator name. This field will be dimmed and unavailable for changes.
User Name Type the Administrators user name. (This field is case sensitive.)
New Password Type the administrator’s new password.
Retype New Password Confirm the administrator’s new password
030-300536 Rev. A 137 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
16.5 QOS
In the Advanced screen, click QOS. This screen allows you to configure Quality of Service parameters in the
Router. Select the desired Quality of Service settings, and then click Apply to allow the setting to take effect.
030-300536 Rev. A 138 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
16.6 Remote Administration
In the Advanced screen, click Remote Administration. This screen allows you to configure your Router so that it
can be accessed remotely via a URL. Configure this feature to allow maintenance or troubleshooting for your Router.
WARNING: With Remote Administration enabled, your network will be at risk from outside attacks.
To enable Remote Administration, do the following:
1. Type the desired user name.
2. Type the desired password.
NOTE: The password should be at least 4 characters long and should not exceed 32 characters. Do not
type a blank space or asterisks in the Password field. The password is case sensitive.
3. Enter the number of minutes after which remote access will disconnect, if it is idle.
NOTE: If you click the Disable Timeout check box (a check mark will appear in the box), this will
override the preceding timeout minutes, and remote access will remain activated once you enable it.
4. Click the Enable Remote Access check box (a check mark will appear in the box).
5. Click Apply to allow the settings to take effect.
030-300536 Rev. A 139 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
Remote Administration
User Name Default = admin
The name used for the Remote Administration session. The only valid characters are (az, A-Z, 0-9). The user name must be at least 6 characters and must not exceed 12
characters long.
Password The password used for the remote administration session. Do not use spaces or double-
quotes in the password field. The user name must be at least 6 characters and must not
exceed 12 characters long.
Timeout Default = 20 minutes
The interval (in minutes) after which the remote access will disconnect, if it is idle.
Disable Timeout Default = deactivated
To activate the Disable Timeout feature, click this box (a check mark will appear).
Clear the box to deactivate this feature.
Enable Remote Access Default = deactivated
Click this box (a check mark will appear) to activate Enable Remote Access.
Clear the box to deactivate this feature.
Remote URL Displays the URL for the remote access session.
16.7 ALG
In the Advanced screen, click ALG. This screen allows you to configure your Router so that it can be accessed
remotely via a URL. Configure this feature to allow maintenance or troubleshooting for your Router. This page
enables you to configure application-level gateway (ALG) services for your Gateway. Click on the box of each
service that you want to enable (a check mark will appear in the box). After you have configured the desired
settings, click Save to save the settings.
Enabling an ALG service opens the IP ports associated with the corresponding service. For example, if you have an
IPSec client running on a LAN-side PC attached to the TriLink, it is necessary to enable the IPSec ALG. Enabling
IPSec opens the default ports used by IPSec, 500 and 1500 so that traffic to and from the IPSec client may pass through.
NOTE: When the firewall level is set to “High,” some services may not be configurable.
030-300536 Rev. A 140 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
16.8 Detect WAN Configuration
In the Advanced screen, click Detect WAN Configuration. This screen displays the details of your WAN
connection.
NOTE: If you have not established and DSL connection with Verizon’s equipment and have not established an
Internet connection with Verizon, the Router will report Detection Disabled. Confirm that you have Internet
connection with Verizon. If problems persist, contact Verizon.
To check your WAN connection, click Detect Configuration. The Router will be reset.
030-300536 Rev. A 141 August 2007
)
If no connection is detected, the following screen will appear. Click Enable Continuous Retries. The Router will
automatically continue to check the WAN connection. After a WAN connection is detected, the Router will report
the results.
User GuideVersaLink Wireless Gateway (Model 7500
If you clicked Enable Continuous Retries, the following pop-up screen will appear. Click OK to continue.
030-300536 Rev. A 142 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
If you clicked OK, the following screen will appear. If want to disable continuous retries, click Disable Continuous
Retries.
030-300536 Rev. A 143 August 2007
)
User GuideVersaLink Wireless Gateway (Model 7500
16.9 Dynamic DNS Configuration
In the Advanced screen, click Dynamic DNS Configuration. Dynamic DNS is a dynamic IP address that can
aliased to a static hostname, allowing a computer on the network to be more easily accessible from the Internet.
Dynamic DNS Configuration
Domain Name This is the domain name with which the dynamic DNS client is registered.
Key Name Provided by your service provider.
Security Key Provided by your service provider.
Last Update Status Provided by your service provider.
030-300536 Rev. A 144 August 2007
Loading...