Alcatel USA 0101 Spread Spectrum Wireless ADSL Router User Manual Manual

Alcatel USA Marketing, Inc. Spread Spectrum Wireless ADSL Router Manual

UserManual.wiki >

Alcatel USA >

0101 User Manual

Manual

3EC 17766 AAAA TCZZA Ed. 012/ 362Status ReleasedChange Note BD F aa -PreRLShort Title CD-UG STWire R1.0All rights reserved. Passing on and copying of thisdocument, use and communication of its contentsnot permitted without written authorization from Alcatel.

Contents3EC 17766 AAAA TCZZA Ed. 01 3/ 362Contents1 Speed Touch Wireless Quick Guide 13...................................1.1 Get Acquainted with your Speed Touch Wireless 14...................1.2 Speed Touch Wireless Installation 16................................1.2.1 What you Need 17......................................1.2.2 STWireless Connections 18...............................1.2.3 Check your Service Provider's Offering 21..................1.2.4 Select an STWireless Packet Service 22.....................1.2.5 Configure your STWireless (If Necessary) 23.................1.2.6 Surf the Internet 24......................................1.2.7 Detailed STWireless Information 25........................2 Wiring Guide - ADSL, Power and Console 29............................2.1 Locating Ports 30.................................................2.2 Connecting the ADSL Port 31.......................................2.3 Connecting the Power Adapter 32...................................2.4 Connecting the Serial Port (Optional) 33.............................3 Wiring Guide - Network Connections 35................................3.1 Connecting Wireless LAN 36.......................................3.2 LAN Cables 39...................................................3.3 Connecting Wired Ethernet (Optionally) 40...........................3.3.1 The Ethernet Port on your STWireless 41....................3.3.2 Wired Single PC Connection 42...........................3.3.3 Wired Ethernet LAN 43..................................3.4 Wired Ethernet vs. WLAN Connectivity 44............................4 Data Services - Packet Services 47......................................4.1 Supported Packet Services 48.......................................4.2 Packet Services at a Glance 49.....................................4.3 Internet & Corporate Intranet Access vs. LANĆtoĆLAN Interconnection 52..4.4 Direct Networking vs. DialĆup Networking 53.........................4.5 ADSL Modem vs. ADSL Gateway 55.................................4.5.1 ADSL Modem Model 56..................................4.5.2 ADSL Gateway Model 57.................................5 Data Services - Transparent Bridging 59................................5.1 Preparatory Steps 60..............................................5.2 Using Bridging 62................................................5.3 Bridging Configuration 63.........................................5.3.1 Bridging Phonebook Entries 64............................

Contents3EC 17766 AAAA TCZZA Ed. 014/ 3625.3.2 Bridging Entries 65......................................5.4 Advanced Bridging Concepts 69....................................5.4.1 STWireless Bridge Operation 70...........................5.4.2 STWireless 'Bridge Data' Web Page 73.....................6 Data Services - MAC Encapsulated Routing 75...........................6.1 Preparatory Steps 76..............................................6.2 Using MER 77....................................................6.3 MER Configuration 78.............................................6.3.1 MER Phonebook Entries 79...............................6.3.2 MER Entries 80..........................................6.4 Advanced MER Concepts 86........................................7 Data Services - PPPoAĆtoĆPPTP Relaying 89..............................7.1 Preparatory Steps 90..............................................7.2 Configuring and Using a PPTP Connection 92........................7.2.1 Preparing your PC for PPPoA/PPTP 93......................7.2.2 Using PPTP towards your STWireless 94....................7.3 Example : MS Windows 98 DialĆUp Networking 95....................7.3.1 Create a New DialĆUp Networking Icon 96.................7.3.2 Create a Shortcut on your Desktop (Optional) 99............7.3.3 Open a PPPoA/PPTP DialĆUp Session 100....................7.3.4 Close a PPPoA/PPTP DialĆUp Session in Use 102..............7.4 PPPoA/PPTP Configuration 103......................................7.4.1 PPPoA/PPTP Phonebook Entries 104.........................7.4.2 PPPoA/PPTP Active Connections 105.........................7.5 Customizing PPPoA/PPTP Connections 108............................7.5.1 PPPoA/PPTP Phonebook Entries 109.........................7.5.2 Single Destination 110....................................7.5.3 Multiple Destinations 111..................................7.5.4 Restrictions on Using Specific Virtual Channels 115............7.5.5 PPTP Profiles 116.........................................7.6 Advanced PPPoA/PPTP Concepts 117.................................7.6.1 PointĆtoĆPoint Tunneling 118...............................7.6.2 Local Tunneling 119......................................7.6.3 PPPoAĆtoĆPPTP Relaying (PPPoA/PPTP) 120....................7.6.4 Simultaneous PPPoA/PPTP Sessions 121......................8 Data Services - PPP & IP Routing 123.....................................8.1 Preparatory Steps 124..............................................8.2 Using PPP & IP Routing 125.........................................8.3 PPP Configuration 127..............................................8.3.1 PPP Phonebook Entries 128................................8.3.2 PPP Entries 129..........................................

Contents3EC 17766 AAAA TCZZA Ed. 01 5/ 3628.4 PPP Entry Configuration 133.........................................8.4.1 The PPP Configuration Web Page 134.......................8.4.2 Link Related Configuration 135.............................8.4.3 Security Related Configurations 136.........................8.4.4 IP Routing Related Configurations 137.......................8.4.5 Connection Related Configuration 141......................8.4.6 NAPT and PPP & IP Routing 144............................8.4.7 NAPT and STWireless Transparency 145.....................9 Data Services - Classical IP & IP Routing 149..............................9.1 Preparatory Steps 150..............................................9.2 CIP Configuration for a LIS 151......................................9.2.1 General CIP Configuration Procedure 152...................9.2.2 Retrieving LIS Parameters 153..............................9.2.3 Implicit Assignment Mechanism 154........................9.2.4 Explicit Assignment Mechanism 155.........................9.2.5 Configuring the STWireless for CIP 156......................9.2.6 Adding Appropriate Routes to the Routing Tables 157..........9.2.7 Example Configuration 159................................9.3 Using CIP & IP Routing 161.........................................9.4 CIP Configuration 162..............................................9.4.1 CIP Phonebook Entries 163................................9.4.2 CIP Entries 164..........................................9.5 Advanced CIP Configurations 170....................................9.5.1 Configuring Multiple CIP PVCs 171.........................9.5.2 Creating Multiple CIP Members. 173........................10 Networking Services - ATM 177..........................................10.1 The ATM Packet Switching Technology 178.............................10.1.1 ATM Parameters 179......................................10.1.2 ATM and the STWireless 180...............................10.1.3 ATM and Interfaces 181...................................10.2 The Speed Touch Wireless Phonebook 182............................10.2.1 The STWireless 'Phonebook' Web Page 183..................10.2.2 Using the Phonebook 187.................................10.2.3 AutoPVC and the Phonebook 190...........................11 Networking Services - IP 193............................................11.1 General IP Information 194.........................................11.1.1 IP Addresses and Subnet Masks 195........................11.1.2 Private vs. Public Addresses 197............................11.1.3 Choosing an IP Address 199...............................11.1.4 Dynamic IP Address Configuration: DHCP 201...............11.2 Packet Services and IP Addressing 202................................11.2.1 Transparent Bridging and IP Addresses 203.................

Contents3EC 17766 AAAA TCZZA Ed. 016/ 36211.2.2 MER and IP Addresses 205................................11.2.3 PPPoAĆtoĆPPTP Relaying and IP Addresses 206................11.2.4 PPP & IP Routing and IP Addresses 207......................11.3 Speed Touch Wireless and IP Addressing 208..........................11.3.1 STWireless IP Address Types 209............................11.3.2 Static IP Address Configuration 211.........................11.3.3 Dynamic IP Address Configuration: DHCP 214...............11.3.4 Configuring the STWireless DHCP Server 218................11.4 IP Routing 222.....................................................11.4.1 The STWireless IP Router 223..............................11.4.2 Configuring the STWireless IP Routing Table 225..............12 Networking Services - DNS 229..........................................12.1 Speed Touch Wireless DNS Resolving 230.............................12.2 Configuring the Speed Touch Wireless DNS Server 233.................13 Networking Services - Firewalling 235...................................13.1 Operation of the Firewall 236.......................................13.2 Firewall Model 237................................................13.3 Firewall Actions 239................................................13.4 Firewall Criteria 240...............................................13.5 Firewalling and NAPT 242..........................................13.6 Firewall Configuration 243..........................................13.7 Firewall Configuration Examples 244.................................14 Wireless LAN Services - WLAN Configuration 249........................15 Maintenance - Software Upgrade 255....................................15.1 Upload Software from a PC 256.....................................15.2 Software Download 261............................................16 Maintenance - Speed Touch Wireless Security 263........................17 Maintenance - Lost Speed Touch Wireless 267............................17.1 PingĆofĆLife 268...................................................17.2 Speed Touch Wireless Reset 271.....................................17.2.1 BrowseĆtoĆDefaults 272...................................17.2.2 PingĆtoĆDefaults 273......................................17.2.3 SwitchĆtoĆDefaults 274....................................18 Maintenance - Speed Touch Wireless Web Interface 275..................18.1 Web Interface Preconditions 276.....................................18.1.1 Disabling Proxy Servers 277................................18.1.2 Disabling Proxying for Local IP Addresses 278................18.2 Browsing to the Web Pages 279......................................

Contents3EC 17766 AAAA TCZZA Ed. 01 7/ 36218.3 Web Page Structure 281............................................19 Maintenance - Speed Touch Wireless Command Line Interface 285........19.1 CLI via the Web Pages 286..........................................19.2 Native CLI Access 289..............................................19.2.1 CLI through a Telnet Session 290...........................19.2.2 CLI via Serial Access 294..................................19.2.3 CLI Command Basics 295.................................Abbreviations 299............................................................AppendixA Troubleshooting 301.........................................AppendixB ADSL Connectivity 303.......................................AppendixC Microsoft DialĆUp Networking 311............................AppendixD STWireless Layout and Behaviour 331.........................AppendixE STWireless Original Settings 335..............................AppendixF Hardware Reference 345.....................................AppendixG Wall Fixing Assembly 353....................................AppendixH Safety and Agency Regulatory Notices 355....................

Contents3EC 17766 AAAA TCZZA Ed. 018/ 362

9/ 3623EC 17766 AAAA TCZZA Ed. 01Welcome to the Speed Touch WirelessWelcome to the Alcatel Speed TouchWireless Asymmetric Digital SubscriberLine (ADSL) router.With the Alcatel Speed TouchWireless ADSL router, surfing the Internet, downloadingfiles and interconnecting computer networks become a whole new experience.With download speeds up to 8 Mega bits per seconds (Mbps) the Speed TouchWireless is around 200 times faster than present day modems. This superior Alcatel ADSLtechnology outperforms all similar products on the market.Your Speed TouchWireless provides the brandĆnew Wireless LAN (WLAN) technology.With Speed TouchWireless's WLAN solution, users can access other members of your(W)LAN, and surf the Internet, without using any wire to connect.Users are not bound to a fixed location in the building anymore, and enlarging thenetwork can happen without the need of expensive wiring installation.Next to the ADSL router part, for the management of your wired and/or Wireless Ethernetenvironment, your Speed TouchWireless features also a complete toolbox for excellentLocal Area Network (LAN) performance. Among others the most important are a DNSserver, a DHCP server, IP Routing. On top, a programmable firewall allows you to shieldyour local network from the Wide Area Network (WAN) and to protect your resources fromintruders.

Safety instructionsTrademarksTerminologyService Provider10 / 362 3EC 17766 AAAA TCZZA Ed. 01Prior to connecting the Speed TouchWireless , read the SafetyInstructions in appendix H.The following words and symbols mark special messagesthroughout this document:WARNING: indicates that failure to follow the directions couldcause bodily harm or loss of life.CAUTION: indicates that failure to follow the directions couldresult in damage to equipment or loss of information.The following trademarks are used in this document:"Speed Touchis a trademark of the Alcatel Company"Netscapeand Netscape Navigatorare registeredtrademarks of Netscape Communications Corporation"Windowsand Internet Explorerare trademarks ofMicrosoft Corporation"Appleand MACOS are registered trademarks of AppleComputer Inc."UNIXis a registered trademark of UNIX SystemLaboratories, Inc."Ethernetis a trademark of Xerox Corporation.For readability, the Speed TouchWireless will be referred to asSTWireless further in this User Manual.For readability, Service Provider (SP) will refer to all instances,responsible for your ADSL connections, i.e. ADSL ServiceProvider (ASP), Internet Service Provider (ISP), Corporate, etc.CAUTIONWARNING

PC, workstation,terminal, ...LAN, network, WLANDisclaimerUser Manual updates11 / 3623EC 17766 AAAA TCZZA Ed. 01For readability, PC will refer to all involved computer devices,which are able to interact with the STWireless, i.e. (portable)Personal Computer (PC), workstation, (remote) terminal, etc.For the STWireless there is no difference between wired Ethernetconnectivity and Wireless LAN (WLAN) connectivity. Therefore,both will be referred to as (W)LAN.All examples throughout this document refer to :"Net 10" IP addresses for local network configurations"VPI 0, or VPI 8 to identify the Virtual Path (VP) on the ADSLline.However, your SP might prefer other values.Due to the continuous evolution of the Alcatel ADSL technology,existing products are often upgraded. Alcatel documentationchanges accordingly.For more information on the newest technological breakdownsand documents, please consult our Alcatel web site at:http://www.alcatel.comhttp://www.alcateldsl.com

Aim of this Quick GuideIn this chapter1 Speed Touch Wireless Quick Guide13 / 3623EC 17766 AAAA TCZZA Ed. 011 Speed Touch Wireless Quick GuideUse this chapter to quickly connect your STWireless to theInternet.Topic SeeGet Acquainted with your STWireless 1.1STWireless Installation 1.2

Delivery checkDamaged or missingitemsOther materials1 Speed Touch Wireless Quick Guide14 / 362 3EC 17766 AAAA TCZZA Ed. 011.1 Get Acquainted with your Speed Touch WirelessCheck your STWireless package for the following items:"The Speed TouchWireless"1 Power supply adapter with 2m (6.56ft.) connecting cable"2m Ethernet/ATMF straightĆthrough cable (RJ45/RJ45)"2m ADSL cable (RJ11/RJ11, RJ14/RJ14)"1 Wall mounting assembly"1 Velcro sticker for the wall mounting assembly"2 Screws and 2 wall plug for the wall mounting assembly"This User Manual, either in hard copy format, or on CDĆrom.In the event of damaged or missing items, contact your localproduct dealer for further instructions.Your STWireless shipping carton may also include release notes,safety and conformity declarations, and other materials.

Your STWirelessPOTS vs. ISDNWall mounting theSTWireless1 Speed Touch Wireless Quick Guide15 / 3623EC 17766 AAAA TCZZA Ed. 01Your STWireless ADSL router is presented in a slim line box:For a detailed information and a LED description, refer toAppendix D.Ensure you have the correct STWireless:"APOTSSTWireless, connecting to an analog POTS line"An ISDN STWireless, connecting to a digital ISDN line.See the marking label to identify your STWireless.To avoid damage to your equipment, use only the appropriateSTWireless.Part of the packaging is a wall mounting assembly withaccompanying screws and wall plugs.For instructions to prepare the STWireless and wall mountingassembly for use, refer to appendix G.

Aim of this sectionIn this section1 Speed Touch Wireless Quick Guide16 / 362 3EC 17766 AAAA TCZZA Ed. 011.2 Speed Touch Wireless InstallationExecute the steps in this section and in noĆtime you are on theInternet.Topic SeeWhat you Need 1.2.1STWireless Connections 1.2.2Check your SP's Service Offerings 1.2.3Select an STWireless Packet Service 1.2.4Configure your STWireless (If Necessary) 1.2.5Surf the Internet 1.2.6Detailed STWireless Information 1.2.7

ADSL and telephoneserviceWireless LANEthernet portAccessing theSTWireless1 Speed Touch Wireless Quick Guide17 / 3623EC 17766 AAAA TCZZA Ed. 011.2.1 What you NeedADSL service must be enabled on your telephone line.You need a central splitter, or distributed filters for decouplingADSL, and telephone signals.For more information, refer to Appendix B.For wireless LAN connectivity:"The (portable) PCs, intended to be connected via theSTWireless need a WLAN networking adapter (WLANĆNIC).Each WLAN client adapter must be:"Compliant to 802.11b Direct Sequencing SpreadSpectrum (DSSS)"WECA WiĆFi certified to ensure smooth interoperability.To use the 10BaseĆT Ethernet port you need at least:"One PC with an Ethernet 10BaseĆT PCĆNetwork InterfaceCard (NIC) installed."For local networking, a 10BaseĆT hub (if needed), and thenecessary connection cables.For local configuration via HTTP/HTML, you need:"A TCP/IP protocol suite"A Web browser.For native Command Line Interface (CLI) you need:"A serial cable"An ASCII terminal (VT100), or a PC with ASCII terminalemulation.

You must connectADSL port (Line)Power port (DC)Turn on yourSTWireless1 Speed Touch Wireless Quick Guide18 / 362 3EC 17766 AAAA TCZZA Ed. 011.2.2 STWireless Connections"The ADSL Port (Line)"The Power Port (DC).After performing these steps you can turn on your STWireless.Proceed then with connecting:"Your WLAN clients"Optionally the Ethernet Port (10BaseĆT)Use the included ADSL cable to wire the STWireless's Line port toyour ADSL wall outlet.Refer to section 2.2 for more information.Only use the included power adapter to source your STWireless.The STWireless should be operated only from the type of powersource, indicated on its marking label.Refer to section 2.3 for more information.If you are not sure of the regional power conditions, check theadapter's specifications in section F.3, and your local powercompany.Use the power switch on the STWireless back panel to turn onyour STWireless.Refer to section D.3 for more information.

Connecting WLANclientsOptionally Ethernetport (10BaseĆT)Note1 Speed Touch Wireless Quick Guide19 / 3623EC 17766 AAAA TCZZA Ed. 01"Preconditions:Make sure your STWireless is turned on and finished itsPower On Self Test (POST).The (portable) PCs, intended to be connected to theSTWireless, must have a WLAN adapter readily installed,and must be configured as DHCP client."Joining the STWireless WLAN networkAs soon as the WLAN adapter detected the presence of theSTWireless WLAN network, you must push the 'WLAN' buttonon the STWireless's back panel to allow the WLAN adapterto join the STWireless WLAN network.Repeat this procedure for each (portable) PC you want to jointhe STWireless WLAN network.Refer to section 3.1 for more information.Next to the WLAN clients, a 10BaseĆT Ethernet port on the backpanel of the STWireless allows wired Ehternet connectivity.Use the included LAN cable to wire your PC's Ethernet port toSTWireless's Ethernet interface.Refer to section 3.3 for more information.There is no difference between wired Ethernet and WLANconnections for the STWireless, i.e. all network configurations areequally valid for both.Therefore, both are referred to as (W)LAN.Refer to section 3.3 for more information.

Check your wiring1 Speed Touch Wireless Quick Guide20 / 362 3EC 17766 AAAA TCZZA Ed. 01After you finished wiring the STWireless, the result shouldresemble the following figure:Note: WLAN client PCs are not shown in the above figure.

Service offeringDefault STWirelessVPI/VCI settings1 Speed Touch Wireless Quick Guide21 / 3623EC 17766 AAAA TCZZA Ed. 011.2.3 Check your Service Provider's OfferingThe SP provides at least the following information:"The Virtual Channel Identifier, that is, the VPI/VCI value of theVC to use on the ADSL line"The Connection Service supported on this VCExample: VPI/VCI = 0/35; Connection Service = PPPoEYour STWireless supports multiple simultaneous VCs on the ADSLline. If your SP exploits this capability, he will provide thisinformation per VC.The VPI/VCI value of the default configured VCs are listed inAppendix E.In the event that the provided VPI/VCI differ with the STWirelessdefaults, you can change VC settings via the STWireless webpages.See section 10.2 for more information.

Connection serviceSelection criteria1 Speed Touch Wireless Quick Guide22 / 362 3EC 17766 AAAA TCZZA Ed. 011.2.4 Select an STWireless Packet ServiceAs soon as you know the Connection Service on a VC, you canattach a Packet Service to it.Following combinations are possible:Connection Service Packet ServiceETHoA (RFC1483 Bridging) IEEE 802.1D Transparent Bridging(gg)MAC Encapsulated RoutingPPPoE (implies RFC1483 Bridging) IEEE 802.1D Transparent Bridging (*)PPPoA (RFC2364 PPPoA) PPPoAĆtoĆPPTP Relaying()PPP & IP RoutingPPPĆtoĆDHCP SpoofingCIP (RFC1483 Routing/RFC1577) CIP & IP Routing(*) A PPPoE Client application must also be installed on your PC.Criteria to prefer one Packet Service over the other for a givenConnection Service are enumerated below."ETHernet over ATM (ETHoA)If your application relies on protocols other then TCP/IP, e.g.IPX/SPX, or PPPoE to name a few, select the bridge.Select MER if multiple users want to share the Internetconnection."PPP over ATM (PPPoA)If your application relies on protocols other then TCP/IP, e.g.IPX/SPX, or NETBEUI, or if you want to avoid NAPT, select thePPPoAĆtoĆPPTP Relay.If PPTP Tunneling is not supported by your PC's OS, and if youwant to avoid NAPT, select PPPĆtoĆDHCP Spoofing.For all other cases use PPP & IP Routing. This allows you toshare the IP address obtained via PPP by the users on your(W)LAN."Classical IP (CIP)In some special circumstances, advanced user can use the CIP& IP routing Packet Service.

STWireless accessSTWirelessConfiguration1 Speed Touch Wireless Quick Guide23 / 3623EC 17766 AAAA TCZZA Ed. 011.2.5 Configure your STWireless (If Necessary)In most cases your STWireless provides instant Internetconnectivity as it features well chosen defaultsIn the exceptional cases, additional, or advanced configurationsare desired, the STWireless offers various access methods:"Its web pages (See chapter 18)"A Telnet CLI session (See subsection 19.2.1)"A Serial CLI session (See section 19.2.2).Configure the STWireless via its web pages.All packet services, the STWireless 's local networking tools, i.e.DHCP server, DNS server and IP router, and system setup tools,have their own web page.Context related Help web pages provide detailed information.For profound configurations the Command Line Interface (CLI) isprovided.

Finishing setupAccess TypesAlwaysĆon accessDialĆup access1 Speed Touch Wireless Quick Guide24 / 362 3EC 17766 AAAA TCZZA Ed. 011.2.6 Surf the InternetAfter wiring (and optionally configuring) your STWireless, you areready to surf the Internet.Depending on the used packet service(s), you can have:"AlwaysĆOn Access"DialĆUp Access.With Bridging, MER and CIP, no connection procedure is needed.Make sure your STWireless is turned on, open your PC's webbrowser and you are online, i.e. you are AlwaysĆon connected.Note: Although no connection procedure is needed, in somecases the SP expects authentication before granting completeaccess to the remote side's resources.The STWireless features also the traditional DialĆin connectivity.Now you can manually make a connection to the remote side,either via the STWireless's web pages, in the case of PPP & IPRouting, or via Operating System (OS) dependent DialĆinapplications, e.g. Microsoft's DialĆUp Networking, or a PPPoEsession client application.Note: During the connectioning procedure you will have toauthenticate yourself, via a User Name and Password.

The STWireless is morethan just" an ADSLrouter1 Speed Touch Wireless Quick Guide25 / 3623EC 17766 AAAA TCZZA Ed. 011.2.7 Detailed STWireless InformationUse the following parts (marked grey) of this manual to exploreSTWireless's advanced features:Speed TouchWireless Quick Guide 1Speed TouchWireless Wiring GuideADSL, Power and Console 2Network Connections 3Speed TouchWireless Data ServicesPacket Services 4Transparent Bridging 5MAC Encapsulated Routing 6PPPĆtoĆPPTP Relaying 7PPP & IP Routing 8Classical IP & IP Routing 9Speed TouchWireless Networking ServicesATM 10IP 11DNS 12Firewalling 13Speed TouchWireless Wireless LAN ServicesWLAN Configuration 14Speed TouchWireless MaintenanceSoftware Upgrade 15Speed TouchWireless Security 16Lost Speed TouchWireless 17Speed TouchWireless Web Interface 18Speed TouchWireless CLI 19Speed TouchWireless Appendices

1 Speed Touch Wireless Quick Guide26 / 362 3EC 17766 AAAA TCZZA Ed. 01

27 / 3623EC 17766 AAAA TCZZA Ed. 01Speed TouchWirelessWiring Guide

In this chapter2 Wiring Guide - ADSL, Power and Console29 / 3623EC 17766 AAAA TCZZA Ed. 012 Wiring Guide - ADSL, Power and ConsoleTopic SeeLocating Ports 2.1Connecting the ADSL Port 2.2Connecting the Power Adapter 2.3Connecting the Serial Port (Optional) 2.4

Port description2 Wiring Guide - ADSL, Power and Console30 / 362 3EC 17766 AAAA TCZZA Ed. 012.1 Locating Ports435Following ports are used:"3:ADSL line port, marked LINE""4:Power socket, market DC""5:Serial port, marked Console".

Important informationPreconditions prior toconnectingProcedure2 Wiring Guide - ADSL, Power and Console31 / 3623EC 17766 AAAA TCZZA Ed. 012.2 Connecting the ADSL PortRead appendix B before you connect the STWireless.Acentral splitter,ordistributed filters for decoupling ADSL andPOTS, or ISDN signals must be installed. Crossover adaptersmight be required.See appendix B for more information.Proceed as indicated in the following figure to connect theSTWireless to the ADSL line, using the included black ADSLcable:LineCrossover adapter / microfilter(if needed)ADSL Cable

IntroductionPower adapter typesProcedure2 Wiring Guide - ADSL, Power and Console 32 / 362 3EC 17766 AAAA TCZZA Ed. 012.3 Connecting the Power AdapterThe STWireless is delivered with a modular external poweradapter converting the AC mains to 9VDC/1A unregulated outputvoltage.Check if the power adapter included in the STWireless packageis compatible with your local electrical power specifications.See section F.3 for connector layout and output specifications.If you are insure of the specifications of your local mains power,contact your local product dealer for more information.Proceed as follows to connect the power supply adapter :DC

Serial accessRequirements for usingthe serial accessProcedure2 Wiring Guide - ADSL, Power and Console33 / 3623EC 17766 AAAA TCZZA Ed. 012.4 Connecting the Serial Port (Optional)Like most routers, the STWireless carries a serial port on its rearpanel, featuring access from a remote host via a modemconnection, or local access from a terminal.For access via the serial port, you must have the following:"A serial cable"An ASCII terminal (VT100), or a workstation/PC with ASCIIterminal emulation, or emulation application, for localconfiguration via the CLI,or"A (voiceband) modem, for allowing remote configuration ofthe STWireless via the CLI.Proceed as follows to connect the STWireless serial port:Step Action1 Determine the serial port on the rear panel of yourSTWireless.2 Connect the serial cable to the STWireless serial port.3Connect the other end of the serial cable to the serialinterface of the (emulated) ASCII terminal, or modem.

2 Wiring Guide - ADSL, Power and Console34 / 362 3EC 17766 AAAA TCZZA Ed. 01

In this chapter3 Wiring Guide - Network Connections35 / 3623EC 17766 AAAA TCZZA Ed. 013 Wiring Guide - Network ConnectionsTopic SeeConnecting Wireless LAN 3.1LAN Cables 3.2Connecting Wired Ethernet (Optional) 3.3Wired Ethernet vs. WLAN Connectivity 3.4

IntroductionIn this sectionWLAN basics3 Wiring Guide - Network Connections36 / 362 3EC 17766 AAAA TCZZA Ed. 013.1 Connecting Wireless LANNext to the single Ethernet port, enabling wired LAN connectivity,the STWireless contains a Wireless LAN (WLAN) hub.This WLAN hub allows wireless connection of several devices tothe public network, e.g. the Internet. The same technology enablesthese devices to communicate with each other in a locally mobilefashion, without the need of a wired LAN environment."Wireless LAN Basics"Wireless LAN Requirements"Connecting WLAN Clients"Configuration of your WLAN Environment.The WLAN's 'radio' link is a shared medium. A wireless accesspoint like the STWireless, can be seen as a hub between thewireless clients. As no physical connection exists between theSTWireless and these clients, you must name your STWireless'sWLAN environment. This is done by the so called Service SetID (SSID). Your WLAN clients must be part of this SSIDenvironment in order to be able to communicate with other clientsof this wireless network - including the STWireless.In most cases, the WLAN client will automatically recognize thepresence of WLAN networks, and their SSID. It is up to the WLANhub's policy whether the client is accepted to join the WLANnetwork, or not. This is particularly interesting in case severalindependent WLAN hubs (e.g. two STWirelesss of differentworkgroups") are coĆlocated.The IEEE802.11b standard for WLANs allows for several WLANsystems to be coĆlocated, without sharing the bandwidth. Severalchannels are available for use which are associated to a slightlydifferent frequency in the allowed range. The STWirelesssupports operation on all allowed channels.

WLAN clientrequirementsConnecting WLANclients3 Wiring Guide - Network Connections37 / 3623EC 17766 AAAA TCZZA Ed. 01Only WLAN client adapters compliant to IEEE802.11b DSSS, willbe able to communicate with the STWireless, and hence, withother members of the STWireless WLAN environment.It is advisable that the WLAN client adapter is WECA WiĆFicertified to ensure smooth interoperability.Before you start connecting the WLAN clients, make sure yourSTWireless is powered on and finished its POST.Proceed as follows:Step Action1 Install the WLAN Client adapter (WLANĆNIC, or WLANPCMCIA card) in your (portable) PC, according theWLAN client adapter's user manual.3 For initial connectivity it is recommended to configureyour (portable) PC as DHCP client.2 In most cases the WLAN client adapter cardsautomatically detect the presence of WLAN networks(that is why the STWireless must be powered up first).The STWireless WLAN's initial SSID is configured as'Alcatel_STW'. In case your WLAN adapter does notfind this network, you may configure it manually, orperform a rescan of the radio environment.3 Let your WLAN adapter try to join the STWireless'sWLAN.4 Use a pencil to push the Wireless LAN Authenticationbutton, marked WLAN" on the rear panel of yourSTWireless.This allows the STWireless to authenticatethe WLAN client.Note: In fact this step allows your WLAN to be secure:without the physical authentication, i.e. pushing theWLAN Authentication button, while your WLAN clienttries to join your WLAN, no connectivity will be enabledbetween the WLAN client and the STWireless WLAN.

ResultConfiguration of yourWLAN environment3 Wiring Guide - Network Connections38 / 362 3EC 17766 AAAA TCZZA Ed. 01After performing the last step of the procedure, you should beable to contact the STWireless, e.g. pinging 10.0.0.138, or openthe STWireless web pages. See chapter 18 for more information.As soon you have connectivity with the STWireless you are able toconfigure the STWireless WLAN parameters via the web pages.You can configure the following parameters:"SSIDYou can change the default SSID 'Alcatel_STW' into anothervalue. This can be useful in case another STWireless islocated nearby. It will avoid a WLAN client from his wirelessnetwork to connect by accident to yours."ChannelYou can change the default channel number to another value.If you know another wireless equipment runs nearby yours,e.g. another STWireless WLAN environment, you can avoidsharing the channel bandwidth by changing the channel inuse.Note: After the SSID, and/or channel number has been changedinside the STWireless, the contact may be lost and the WLANclients might be reconfigured, and reĆauthenticated to use thesame SSID, and/or channel number.See chapter 14 for more information on STWireless's Wirelessconfiguration.

Included LAN cableUsing LAN cablesLAN cable types vs.port typesDevices and their ports3 Wiring Guide - Network Connections39 / 3623EC 17766 AAAA TCZZA Ed. 013.2 LAN CablesIn your STWireless package, a full wired straightĆthroughRJ45/RJ45 cable, further referred to as LAN cable, is included.You can use LAN cables other than the one provided in the box,e.g. crossover LAN cables, etc. However, make sure that thesehave the correct layout.See section F.4 for more information on how to identifystraightĆthrough, and crossover LAN cables.Determine the LAN cable type from the following table:Port Type Interconnection Type of LAN cable SymbolMDIĆX to MDI StraightĆthroughMDIĆX to MDIĆXMDI to MDICrossoverThe STWireless's Ethernet port is of type MDIĆX.A PC's Ethernet port is always of type MDI.An Ethernet hub's port is always of type MDIĆX.

In this section3 Wiring Guide - Network Connections40 / 362 3EC 17766 AAAA TCZZA Ed. 013.3 Connecting Wired Ethernet (Optionally)Topic SeeThe Ethernet Port on your STWireless 3.3.1Wired Single PC Connection 3.3.2Wired Ethernet LAN 3.3.2

Ethernet interfaceEthernet on your PC3 Wiring Guide - Network Connections41 / 3623EC 17766 AAAA TCZZA Ed. 013.3.1 The Ethernet Port on your STWirelessThe STWireless Ethernet port 1is a 10BaseĆT Half DuplexEthernet interface of type MDIĆX, connecting to either a single PC,or a workgroup hub.1Your PC may have a builtĆin Ethernet port. If not, firstly install anEthernet PCĆNIC.10BaseĆT Half Duplex InterfacingMake sure the 10BaseĆT port(s) of your PC(s) are configured foreither Auto Negotiation or Half Duplex.Never configure the 10BaseĆT Ports for FullĆDuplex !CAUTION

Single PC configurationProcedure3 Wiring Guide - Network Connections42 / 362 3EC 17766 AAAA TCZZA Ed. 013.3.2 Wired Single PC ConnectionIn this configuration the STWireless is connected to a single PC.Proceed as indicated in the following figure to connect yourSTWireless to a single PC:10 BaseĆTMDIĆXMDI

ProcedureMDI vs. MDIĆX hubports and theSTWireless3 Wiring Guide - Network Connections43 / 3623EC 17766 AAAA TCZZA Ed. 013.3.3 Wired Ethernet LANProceed as indicated in the following figure to make theconnections for a wired LAN:Hub10BaseĆTMDIMDIĆXMDIMDIMDIMDICascading Repeating HubsBecause of the limitations of Repeating Ethernet V2.0/IEEE802.3hubs, the maximum number of repeating hubs cascaded in yourLAN is four. This restriction does not apply to switching hubs.In the above figure example the MDI uplink, also referred to ascascade", port on the hub connects the STWireless. Therefore,the included straightĆthrough LAN cable can be used.Note: This port can also be a switchable MDI/MDIĆX port.You can also use one of the MDIĆX ports of your hub. Then acrossover LAN cable must be used.CAUTION

Wireless vs. WiredLANsSTWireless networkconfigurationsSTWireless ADSLconfigurationsSTWirelessconfiguration examples3 Wiring Guide - Network Connections44 / 362 3EC 17766 AAAA TCZZA Ed. 013.4 Wired Ethernet vs. WLAN ConnectivityThe STWireless makes no difference between wired Ethernet andWLAN clients. All connected PCs, whether these are connected viathe STWireless Ethernet port, or connected via joining the WLANSSID, share the same (sub)network. All are equally valid.The STWireless allows local network management via:"An IP router (See section 11.4)"A DHCP server (See subsection 11.1.4)"NAPT abilities (See subsection 8.4.6)"A DNS server for local name resolving and DNS proxying(See chapter 12)"A Firewall (See chapter 13)All STWireless configurations for these management tools, areequally valid for both wired Ethernet clients, and WLAN clients,upon configuration.All STWireless configurations for ADSL connectivity, are equallyvalid for both wired Ethernet clients, as for WLAN clients, uponconfiguration.This User Manual contains numerous examples and exemplaryfigures.For clarity, all network connections, i.e. both wired Ethernet andWLAN client connections, are visualized as if all were wired.

45 / 3623EC 17766 AAAA TCZZA Ed. 01Speed TouchWirelessData Services

IntroductionIn this chapter4 Data Services - Packet Services47 / 3623EC 17766 AAAA TCZZA Ed. 014 Data Services - Packet ServicesThis chapter is about selecting the appropriate packet service foryour application.Topic SeeSupported Packet Services 4.1Packet Services at a Glance 4.2Internet & Corporate Access vs. LANĆtoĆLANInterconnection4.3Direct Networking vs. DialĆUp Networking 4.4ADSL Modem vs. ADSL Gateway 4.5

What is a packetservice ?The STWireless offersfive types of packetservicesNetworking protocolsExamples in thismanual4 Data Services - Packet Services48 / 362 3EC 17766 AAAA TCZZA Ed. 014.1 Supported Packet ServicesApacket service can be defined as:The actions that need to be performed on every data packet inorder to filter or forward packets to the next device in thecommunication chain.""IEEE 802.1D Transparent Bridging"MAC Encapsulated Routing"PPPoAĆtoĆPPTP Relaying"PPP & IP Routing"Classical IP & IP Routing.All examples in this manual, use the Transmission ControlProtocol (TCP)/Internet Protocol (IP) suite because it is widelyavailable (See chapter 11 for more information).However, the STWireless ADSL router is a true multiprotocoldevice, as it is able to manage most other forms of protocols.Only typical solutions are presented in this manual.However, this does not prevent you from experimenting withvarious configurations and settings.An optimal solution may be discovered through experimentation.You can also try a combination of the presented solutions.

In this sectionIEEE 802.1DTransparent BridgingMAC EncapsulatedRoutingPPPoAĆtoĆPPTPRelaying4 Data Services - Packet Services49 / 3623EC 17766 AAAA TCZZA Ed. 014.2 Packet Services at a Glance"IEEE 802.1D Transparent Bridging"MAC Encapsulated Routing"PPPoAĆtoĆPPTP Relaying"PPP & IP Routing"CIP & IP Routing"Selection Criteria"Simultaneous Use of Packet Services"Resumé.The STWireless IEEE802.1D Transparent Bridging packet serviceoffers complete protocol transparency and has inherentconfiguration simplicity. Yet it provides excellent forwardingperformance.Next to the Bridge, the STWireless contains an IP router.The STWireless RFC1483 MAC Encapsulated Routing (MER)packet service relies on standard IP Routing for its packetforwarding on the (W)LAN side. However, to the remote accessrouter on the WAN side, the STWireless presents itself as aIEEE802.1D Bridge.That way the remote side can be fooled, i.e. via Network Address& Port Translation (NAPT), the single public IP address, assigned tothe MAC entity, i.e. the Bridge", can be shared by multiple userson the local (W)LAN.In contrast to Transparent Bridging, and MAC EncapsulatedRouting, which both provide an "AlwaysĆOn" type of connection,PPPoAĆtoĆPPTP Relaying (PPPoA/PPTP), supports a session concept.An important advantage of PPPoAĆtoĆPPTP Relaying is that it avoidsthe complexity of a network router, yet to a certain extent, providesidentical features.

PPP & IP RoutingCIP & IP RoutingSelection criteriaSimultaneous use ofpacket services4 Data Services - Packet Services50 / 362 3EC 17766 AAAA TCZZA Ed. 01PointĆtoĆPoint Protocol (PPP) combined with IP routing is thetechnology of choice to create a small IP based homeĆ(W)LAN.Similar to PPPoA/PPTP, it provides a session concept. Additionally,IP routing combined with NAPT allows to multiplex users into asingle VC.The STWireless IP router can also be combined with Classical IP(CIP).Classical IP is a mature technique for creating classical IP networkson top of ATM technology. It is widely supported by most, if not allremote access routers.Although not the original aim of Classical IP, it is mostly used forconnecting routers over wide area pointĆtoĆpoint links.The criteria below can help you to select the most appropriatepacket service for your application:"The configuration required by your SP"The application protocol you wish to use (within theboundaries of the remote end)"The session aspect: an AlwaysĆon" connection or aconnection that is established when needed, i.e. DialĆup""Connectivity to a single, or simultaneously to multiple remotenetwork(s)"Security features such as identification, authentication andencryption"ADSL modem vs. ADSL gateway router model.All packet services can be active at the same time without anyrestriction. The STWireless can manage any combination of thefive packet services simultaneously up to a maximum number of12 configured virtual connections.Note: For Transparent Bridging, the maximum number ofconfigured Bridging ports is four.

Resumé4 Data Services - Packet Services51 / 3623EC 17766 AAAA TCZZA Ed. 01All STWireless's packet services can be summarized in thefollowing table:Port Packet Service Protocol Chapter10BaseĆTEhIEEE 802.1D Bridging Multiprotocol 5Ethernet MAC Encapsulated Routing TCP/IP 6PPPoAĆtoĆPPTP Relaying TCP/IP, IPX/SPX,NETBEUI7PPP & IP Routing TCP/IP 8CIP & IP Routing TCP/IP 9

Exemplary applicationsusing ADSLInternet & corporateaccessLANĆtoĆLANinterconnectionSelecting the packetservice4 Data Services - Packet Services52 / 362 3EC 17766 AAAA TCZZA Ed. 014.3 Internet & Corporate Intranet Access vs.LANĆtoĆLAN InterconnectionThis manual highlights the two most prominent ADSL applications:"High speed Internet access, or corporate Intranet access"Private Wide Area Network (WAN) /Local Area Network (LAN)interconnectionAlthough the objective (Internet vs. Intranet access) is different, thenetworking model/configuration is almost identical.Traditionally, the user must open a session by dialing into aremote access server. Prior to accessing the resources, this remoteserver will ask for the user's credentials.The most appropriate STWireless configurations are:"PPPoAĆtoĆPPTP Relaying (See chapter 7)"PPP & IP Routing (See chapter 8).Multiple PCs on a (W)LAN are interconnected via public, or privatewide area ADSL/ATM networks to devices on remote LANs.In the LANĆtoĆLAN scenario, users are less concerned about asession concept. Their networking experience should be as if theyare part of a large and widely dispersed LAN.The most appropriate STWireless configurations are:"IEEE 802.1D Transparent Bridging (See chapter 5)"MAC Encapsulated Routing (See chapter 6)"Classical IP & IP Routing (See chapter 9).In the case of Internet, or corporate access, your SP will usuallydetermine which networking model to use. In the LANĆtoĆLANscenario you determine the endĆtoĆend setĆup yourself.Independent of your application, the protocols supported at bothends of the connection must be mirror images of each other forsuccessful communication.

In this sectionWhat is directnetworking ?Comparison with LANnetworkingWhat is dialĆupnetworking ?STWireless vs.networking4 Data Services - Packet Services53 / 3623EC 17766 AAAA TCZZA Ed. 014.4 Direct Networking vs. DialĆup Networking"What is Direct Networking"Comparison with LAN Networking"What is DialĆUp Networking"STWireless & Networking"Ethernet Port(s) & Networking.Direct networking refers to how the network connection isexperienced by the user. The connection is continuously active,thus no actions need be performed.Powering on the local PCs and the STWireless is enough toenable the user to interact with the network, once the initialconfiguration is done.Direct networking is what is typically experienced on a LAN. Initialconfiguration of all networking nodes in the endĆtoĆend network isstill required, but this is performed only once, i.e. when the serviceis enabled.In this mode, there is no initial connectivity. You must explicitlyrequest a connection by dialing up to the remote access server.The remote side will require you to identify and authenticateyourself.The STWireless supports both direct networking, and dialĆupnetworking solutions, independently whether you are using theEthernet port.

Ethernet port(s)&networking4 Data Services - Packet Services54 / 362 3EC 17766 AAAA TCZZA Ed. 01Following scenarios are available:"Direct and continuous connectivity is accomplished viathe IEEE 802.1D transparent databridge, in the STWireless.See chapter 5 for more information."MER provides continuous connectivitySee chapter 6 for more information."PPPoAĆtoĆPPTP Relaying dialĆup networking relies on thestandard PPP protocol family and local tunneling, using theindustry PPTP protocol.See chapter 7 for more information."PPP & IP Routing provides dialĆup networking.See chapter 8 for more information."CIP & IP Routing provides continuous connectivity.See chapter 9 for more information.

IntroductionNoteIn this section4 Data Services - Packet Services55 / 3623EC 17766 AAAA TCZZA Ed. 014.5 ADSL Modem vs. ADSL GatewayIn the configuration where multiple PCs reside on a common LAN,they must share a gateway for specific services. The mostimportant service is ADSL for accessing the outside world.The STWireless can be used as a fast ADSL modem, leaving thegateway tasks to another (W)LAN member.However, the STWireless is able to act as an ADSL gateway routeritself. The latter is often called home or residential gateway.The boundaries between the ADSL modem model and the ADSLgateway function are not as clearly defined as explained in thissection. They are portrayed that way to focus the attention on bothmodels.Topic SeeADSL Modem Model 4.5.1ADSL Gateway Model 4.5.2

ADSL modem modelRole of the STWirelessPacket services andSTWireless ADSLmodem model4 Data Services - Packet Services56 / 362 3EC 17766 AAAA TCZZA Ed. 014.5.1 ADSL Modem ModelThe STWireless in this role, provides connectivity to either a singlePC: or to a dedicated home gateway:Single PCBit pipeADSL LineOr to a dedicated home gateway:Bit pipeADSL LineĆ RoutingĆ NAPTĆ FirewallingĆ Name ResolvingHome Gatewayperforming:Ć DHCPThe desired functionality of the STWireless ADSL router in thismodel, is maximum transparency. Packets arriving on inboundports must be forwarded transparently to outbound ports. Allintelligent decisions will be made in either the single PC, or thehome gateway.In fact, this functionality has been offered by voiceband modemsfor a long time, but then with an important speed limit.The IEEE 802.1D transparent databridge, the PPPoAĆtoĆPPTP relayand the PPPĆtoĆDHCP Proxy - all bound to the Ethernet port andthe ATM switching capabilities of the ATMF25.6 port -, adherebest to this model.

ADSL gateway modelRole of the STWirelessPacket services andSTWireless ADSLgateway model4 Data Services - Packet Services57 / 3623EC 17766 AAAA TCZZA Ed. 014.5.2 ADSL Gateway ModelThe gateway to access the outside world can be a dedicated PC asshown in subsection 4.5.1.However, the STWireless itself is designed to act as a costeffective ADSL gateway.STWireless ADSL Routeracting as Home Gateway:Ć RoutingĆ NAPTĆ FirewallingĆ Name ResolvingADSL LineĆ DHCPTo perform the gateway tasks itself, the STWireless has, inaddition to the ADSL modem part:"An IP router (See section 11.4)"A DHCP server (See subsection 11.1.4)"NAPT abilities (See subsection 8.4.6)"A DNS server for local name resolving and DNS proxying(See chapter 12)"A Firewall (See chapter 13)MER, PPP & IP Routing and CIP & IP Routing are ideally suited forthe ADSL gateway model.

4 Data Services - Packet Services58 / 362 3EC 17766 AAAA TCZZA Ed. 01

IntroductionIn this chapter5 Data Services - Transparent Bridging59 / 3623EC 17766 AAAA TCZZA Ed. 015 Data Services - Transparent BridgingThe STWireless IEEE802.1D Transparent Bridging packet serviceoffers complete protocol transparency and has inherentconfiguration simplicity. Yet it provides excellent forwardingperformance.Topic SeePreparatory Steps 5.1Using Bridging 5.2Bridging Configuration 5.3Advanced Bridging Concepts 5.4

FeaturesWhat you should knowin advanceSTWirelessPC(s)5 Data Services - Transparent Bridging60 / 362 3EC 17766 AAAA TCZZA Ed. 015.1 Preparatory StepsIEEE 802.1D Transparent Bridging:"Is platform and OS independent"Is simple to configure and easy to use"Is a true multiprotocol device"In the Alcatel implementation, has no performance limitations"Has no theoretical constraints on the number of attachedusers(There is a practical limit to achieve a reasonableperformance, e.g. 16 PCs)"Features concurrent access to multiple remote destinations"Supports up to four concurrent Bridge ports."The VPI/VCI value of the VC(s) to use on the ADSL line"ETHoA connection service must be supported on this VC"Whether IP configuration is static, or dynamic (DHCP)The STWireless comes with four preconfigured Bridging/MERphonebook entries, i.e. Br1 ... Br4.If the SP(s) impose settings which differ from the STWirelessdefaults, perform the necessary adjustments via the STWirelessweb pages.See section 5.3 for more information.The STWireless's Transparent Bridging packet service does notimpose specific requirements to your PC's networking protocollayers. However, ensure that the applied protocols are properlyinstalled and configured on your PC.

TCP/IP5 Data Services - Transparent Bridging61 / 3623EC 17766 AAAA TCZZA Ed. 01For TCP/IP, your SP will assign you either static IP parameters (perPC), or will instruct you to enable DHCP on your PC(s).Transparent Bridging and DHCPIf the SP requires you to use DHCP on your local PC(s), you mustdisable the STWireless DHCP server.This is to avoid conflicts between two DHCP servers, i.e. theSTWireless DHCP server and a remote DHCP server, being activeat the same time.See subsection 11.3.3 for more information.CAUTION

Using BridgingAlwaysĆon andcredentialsConfiguration example5 Data Services - Transparent Bridging62 / 362 3EC 17766 AAAA TCZZA Ed. 015.2 Using BridgingFrom this point on, using Transparent Bridging is ratherstraightĆforward. Turn on both your STWireless and PC, start yourWeb browser and you are on the Internet.This form of remote network access is sometimes referred to asAlwaysĆon". No connection procedure must be performed prior toconnectivity. However, the remote organization might present youwith a welcome screen asking for a user name and passwordprior to granting access to secured servers or the Internet.In the following figure an example configuration is given:"One PC is connected to an ISP"Another PC is connected to a remote LAN.Internet access viaVC 8/35InternetISPAccess PointRemote LANAccess PointLANĆtoĆLANinterconnection viaVC 8/36 Static IP addresse.g. :172.16.0.2ServerServerIP addressobtained viaDHCPATMNetwork

IntroductionIn this section5 Data Services - Transparent Bridging63 / 3623EC 17766 AAAA TCZZA Ed. 015.3 Bridging ConfigurationThe STWireless allows local configurations via the STWirelessweb pages.This section describes the configuration of Bridging entries, andthe use of the 'Bridging' web page.Topic SeeBridging Phonebook Entries 5.3.1Bridging Entries 5.3.2

Bridging phonebookentriesAdding/deletingphonebook entries5 Data Services - Transparent Bridging64 / 362 3EC 17766 AAAA TCZZA Ed. 015.3.1 Bridging Phonebook EntriesCentral to the STWireless VC pool management, is the'Phonebook' web page.The STWireless in its default state features the followingBridging/MER related phonebook entries:Note: Both Bridging and MER share the same type of phonebookentries, i.e. bridge.See section 10.2 for more information.

In this subsectionThe STWireless'Bridging' web page5 Data Services - Transparent Bridging65 / 3623EC 17766 AAAA TCZZA Ed. 015.3.2 Bridging Entries"The STWireless 'Bridging' Web Page"The 'Bridging Ports' Table"'Bridging Ports' Table Components"The 'Aging' Box"Adding Bridging Entries"Deleting Bridging Entries.Clicking in the left pane of the STWireless web pages,pops up the 'Bridging' web page (See section 18.2 for moreinformation):

The 'Bridging Ports'table'Bridging Ports' tablecomponents5 Data Services - Transparent Bridging66 / 362 3EC 17766 AAAA TCZZA Ed. 01The following figure shows the 'Bridging Ports' table in its defaultstate:The following fields are shown:Field DescriptionIntf Allows you to choose an interface name for the Bridgeinterface.Note: In most cases, the interface name will be the same asthe phonebook entry name.Destination Indicates available Phonebook entries for Bridging.Note: Specific free MER/Bridging phonebook Entries areshown, as well as free 'any type' phonebook entriesState Indicates the state of the individual (W)LAN port. It can takefollowing values:Value Descriptionconnectedidle The Bridge port only submitsinformation to the filtering database.It does not participate in the relayingof frames.The Bridge interface is attached tothe Bridge port.In most cases this also implies thatthe Bridge port is connected andforwarding.Port Indicates the name of the Bridge port on the WAN side:wan0, wan1, wan2, etc. by default.

The 'Aging' box5 Data Services - Transparent Bridging67 / 3623EC 17766 AAAA TCZZA Ed. 01Field DescriptionEncap Refers to the encapsulation, and decapsulation of Ethernet,or IEEE 802.3 frames in/from AAL5/ATM. The STWireless iscompliant with RFC 1483 Multiprotocol Encapsulation overATM Adaptation Layer 5" and supports both the LLC/SNAPmethod and the VCĆMUX method for Bridged EthernetV2.0/IEEE 802.3 PDUs.By default the encapsulation method is set to LLC/SNAP.FCS Is part of the RFC 1483 encapsulation method and indicateswhether the last four bytes of the Medium AccessControl (MAC) frames (mostly referred to as Ethernet or IEEE802.3 frames) will be preserved or not.For all Bridge ports, the FCS is set to NO by default. However,via the CLI, you can set the FCS to YES. See chapter 19 formore information.Action Contains one of the two following action buttons:Button ActionDelete an existing entry from the list.Add an entry to the list.The following figure shows the 'Aging' box of the 'Bridging' webpage:This box contains the aging timer of the bridge internal database.If the aging time of a MAC entry has expired, this entry will beremoved from the database.Only in exceptional cases the default value of 300 seconds (5minutes) needs to be modified. The allowed range is from 10seconds to 12 days (IEEE 802.1D Bridging standard).

Adding BridgingentriesNoteDeleting Bridgingentries5 Data Services - Transparent Bridging68 / 362 3EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1Browse to the 'Bridging' web page.The bottom row of the table allows addition of a new entry.2In the 'Destination' column of the bottom row, click and selectthe Bridging entry you want to add to the table.3In the 'Encap' column, click and select the encapsulationmethod for the connection, i.e. LLC/SNAP, or VCĆMUX.4Click and to finish the procedure.The maximum number of remote Bridging ports supported is 4.However, if no multiple connectivity is required, leave theconfiguration as is, to conserve ADSL upstream bandwidth.Proceed as follows:Step Action and Description1Browse to the 'Bridging' web page.2Select the Bridging entry you want to delete, and clickand to finish the procedure.

BridgingSimplified bridgearchitectureIn this section5 Data Services - Transparent Bridging69 / 3623EC 17766 AAAA TCZZA Ed. 015.4 Advanced Bridging ConceptsBridging is a LAN technology that transparently relays Ethernetframes between Bridging ports.Depending on the destination MAC addresses of Ethernet frames,the bridge makes decisions whether to forward or discard frames.Central to the operation of a databridge is its filtering database.All forwarding and filtering actions are based on information inthis database.MAC RELAY ENTITYADSL/ATM (Wireless)ETHERNET(W)LAN PORTFiltering DatabaseREMOTEPORTSVirtual ChannelsTopic SeeSTWireless Bridge Operation 5.4.1STWireless 'Bridge Data' Web Page 5.4.2

Introduction to bridgeoperationIn this subsection5 Data Services - Transparent Bridging70 / 362 3EC 17766 AAAA TCZZA Ed. 015.4.1 STWireless Bridge OperationThis section describes how the STWireless bridge operates. All ofthese operations have an impact on the entries in the filteringdatabase of the bridge.One of the characteristics of a databridge is the number of supported Bridge ports. A Bridge port is the logical equivalent of an interface. By default the STWireless supports one local port,i.e. the Ethernet port, and four remote ports. The remote ports aremapped to virtual ATM channels on the ADSL line."Learning"Aging"Learning and Aging"Flooding"Forwarding"Filtering"Isolation"Multiprotocol Bridging"Number of Supported Devices.

LearningAgingLearning and AgingFlooding5 Data Services - Transparent Bridging71 / 3623EC 17766 AAAA TCZZA Ed. 01If the bridge is turned on, the filtering database is empty. Overtime it is filled with entries via the learning mechanism.Ethernet frames arriving on any port are inspected for their sourceMAC address and put into the filtering database together with theport ID the frames arrived on.Through this knowledge, it is able to keep traffic submitted to yourlocal printer from crossing the bridge. Yet it allows framesbelonging to sessions with remote machines to pass over the ADSLline.Entries are aged, i.e. removed from the filtering database, after acertain time has elapsed (Aging time).The learning and aging process make the bridge Plug & Play. Bothkeep the filtering database upĆtoĆdate with the current networkconfiguration.Example: Suppose a PCĆNIC is replaced, the old MAC address isaged (and will be consequently discarded), while a new MACaddress will be learned.If an Ethernet frame arrives, the destination MAC address issearched for in the filtering database. If the destination MACaddress is not found (implying it is not yet learned), it is forwardedto all ports in the forwarding state, except the one the framearrived on.Note: Broadcast and multicast MAC addresses are alwaysflooded.

ForwardingFilteringIsolationMulti Protocol BridgingNumber of supporteddevices5 Data Services - Transparent Bridging72 / 362 3EC 17766 AAAA TCZZA Ed. 01If an Ethernet frame arrives with a destination MAC address that isfound in the filtering database (implying it is already learned), it isforwarded to the port that is associated with that entry.In contrast to flooding, forwarding is more selective.If the destination MAC address is found on the same port as theframe arrived on, it is filtered, i.e. silently discarded.Indeed, it makes little sense to forward the frame on this port asthe destination is directly connected to the source.The Alcatel Multiport bridge in the STWireless provides isolationbetween remote ports.i.e. Frames (including broadcasts) arriving via ADSL/ATM ports willnever be forwarded/flooded to another ADSL/ATM port.Bridging actions are performed on MAC frames. The contents ofthe MAC frame is not of importance to the bridge.Consequently it makes no difference whether your PCs orworkstations use TCP/IP, Appletalk, IPX/SPX or any other protocolsuite.However, some operators might embed restrictions into thebridge. In this way only traffic that passes through the bridge filterwill be allowed on the ADSL line.Via the dynamic learning and aging mechanism of the bridge, thenumber of PCs that can be connected to either the local, or virtualports is theoretically unlimited.Practically, the filtering database can hold as many as 256 entriessimultaneously.

IntroductionThe 'Bridge Data' webpageAvailable 'Bridge Data'tables5 Data Services - Transparent Bridging73 / 3623EC 17766 AAAA TCZZA Ed. 015.4.2 STWireless 'Bridge Data' Web PageTransparent Bridging relies completely on its filtering database formanaging the traffic, passing through the bridge. This filteringdatabase is accessible via the STWireless 'Bridging' web page,and allows you to overview all MACĆlayer entries.Clicking on the 'Bridging' web page pops up the'Bridge Data' web page:The filtering database's MAC addresses are spread over 3 tables:"The 'permanent MAC addresses' table"The 'static MAC addresses' table"The 'dynamic MAC addresses' table.

Permanent MACaddressesStatic MAC addressesDynamic MACaddresses5 Data Services - Transparent Bridging74 / 362 3EC 17766 AAAA TCZZA Ed. 01These are the MAC addresses that must always be resident insidethe bridge, as stipulated in the IEEE802.1D standard:"The STWireless's own MAC address:e.g. 00-80-9F-01-02-03"The Broadcast MAC address:FF-FF-FF-FF-FF-FF"The bridge group MAC address:01-80-C2-00-00-00"The 16 reserved MAC addresses of IEEE802.1D:From 01-80-C2-00-00-01up to 01-80-C2-00-00-0F"The all LANs bridge management group MAC address:01-80-C2-00-00-10This table list the MAC addresses you have added to the filteringdatabase via the CLI. These MAC addresses, dedicated to aparticular port, will never be aged by the bridge.In principle, no static MAC addresses are to be configured.This table lists all the MAC addresses that are currently learned bythe STWireless bridge.While the learning process adds MAC addresses received on anyof its ports, the aging process will swap them out of the tablewhen their aging timer expired.

IntroductionIn this chapter6 Data Services - MAC Encapsulated Routing75 / 3623EC 17766 AAAA TCZZA Ed. 016 Data Services - MAC Encapsulated RoutingVia the STWireless MAC Encapsulated Routing packet service youcan connect to an ADSL line supporting the ETHernet over ATM(ETHoA) connection service. In contrast to bridging though, packetfiltering and forwarding is performed by the IP router of theSTWireless and consequently inherits all the features that comewith IP.In the following, MAC Encapsulated Routing will be referred to asMER.Note: MAC is the standardized term for Ethernet.Topic SeePreparatory Steps 6.1Using MER 6.2MER Configuration 6.3Advanced MER Concepts 6.4

FeaturesWhat you should knowin advanceSTWirelessPC(s)6 Data Services - MAC Encapsulated Routing76 / 362 3EC 17766 AAAA TCZZA Ed. 016.1 Preparatory StepsMAC Encapsulated Routing:"Is instantly replaceable with an IEEE Transparent Bridge"Provides AlwaysĆon type of connections and isautoĆconfigurable if DHCP is enabled"If used in combination with NAPT, allows multiple users toshare a single IP address"When Firewalling is turned on, your local network is shieldedfor threats from the Internet."Supports up to 12 concurrent virtual channels assigned toMER."The VPI/VCI value of the VC(s) to use on the ADSL line"ETHoA connection service must be supported on this VC"Whether IP configuration is static, or dynamic (DHCP)The STWireless comes with four preconfigured MER/Bridgingphonebook entries, i.e. Br1 ... Br4.If the SP(s) impose settings which differ from the STWirelessdefaults, perform the necessary adjustments via the STWirelessweb pages.See section 6.3 for more information.For MER it is assumed that communication between theSTWireless and your PC(s) is performed via the Internet protocol.You can:"Enable the STWireless's DHCP server to enable dynamic IPconfiguration of your (W)LAN"Configure all (W)LAN's IP settings statically.

Using BridgingAlwaysĆon andcredentialsMER endĆtoĆendarchitecture6 Data Services - MAC Encapsulated Routing77 / 3623EC 17766 AAAA TCZZA Ed. 016.2 Using MERFrom this point on, using MER is rather straightĆforward. Turn onboth your STWireless and PCs, and your connected to the remoteaccess router.As MER presents itself as a Bridge, the connection behaves as forthe Transparent Bridging packet service. No connection proceduremust be performed prior to connectivity.In the following figure an example configuration of a TransparentBridging connection, and a MER connection is given:InternetISPAccess PointRemote LANAccess PointServerServer PC 1 connected via the STWireĆless's Transparent BridgeATMNetworkBridgeMAC FramesIP RoutingEthernetMERInterfaceNAPTVirtual BridgingPC 2 connected via the STWireĆless's IP Router and MER InterĆface

IntroductionIn this section6 Data Services - MAC Encapsulated Routing78 / 362 3EC 17766 AAAA TCZZA Ed. 016.3 MER ConfigurationThe STWireless allows local configurations via the STWirelessweb pages.This section describes the configuration of MER entries, and theuse of the 'MER' web page.Topic SeeMER Phonebook Entries 6.3.1MER Entries 6.3.2

MER phonebookentriesAdding/deletingphonebook entries6 Data Services - MAC Encapsulated Routing79 / 3623EC 17766 AAAA TCZZA Ed. 016.3.1 MER Phonebook EntriesCentral to the STWireless VC pool management, is the'Phonebook' web page.The STWireless in its default state features the following MERrelated phonebook entries:Note: Both MER and Bridging share the same type of phonebookentries, i.e. bridge.See section 10.2 for more information.

The STWireless 'MER'web pageThe 'MER Connections'table6 Data Services - MAC Encapsulated Routing80 / 362 3EC 17766 AAAA TCZZA Ed. 016.3.2 MER EntriesClicking in the left pane of the STWireless web pages,pops up the 'MER' web page (See section 18.2 for moreinformation):The following figure shows the 'MER Connections' table:

'MER Connections'table components6 Data Services - MAC Encapsulated Routing81 / 3623EC 17766 AAAA TCZZA Ed. 01The following fields are shown:Field DescriptionClick the button next to the MER connection you want toconfigure.Selected MER connections are indicated by a yellow bar, anda button which is lit.Itf Indicates the interface name.Note: In most cases, the interface name will be the same asthe phonebook entry name.Address Indicates the name you have chosen for the MER phonebookentry.Note: Specific free MER phonebook entries are shown, aswell as free 'any type' phonebook entriesState Indicates the state of the MER connection. It can takefollowing values:Value DescriptionIdleRetry The MER interface tries to setup aWAN connection.Connected WAN connectivity is achieved on thisMER interface.The MER interface has no WANconnection at this time.Encap Refers to the encapsulation, and decapsulation of Ethernet,or IEEE 802.3 frames in/from AAL5/ATM. The STWireless iscompliant with RFC 1483 Multiprotocol Encapsulation overATM Adaptation Layer 5" and supports both the LLC/SNAPmethod and the VCĆMUX method for Bridged EthernetV2.0/IEEE 802.3 PDUs.By default the encapsulation method is set to LLC/SNAP.FCS Is part of the RFC 1483 encapsulation method and indicateswhether the last four bytes of the MAC frames (mostlyreferred to as Ethernet or IEEE 802.3 frames) will bepreserved or not.For all MER connections, the FCS is set to NO by default.However, via the CLI, you can set the FCS to YES. Seechapter 19 for more information.

The 'MER Settings'table'MER Settings' tablecomponentsThe 'MER InterfaceSettings' table6 Data Services - MAC Encapsulated Routing82 / 362 3EC 17766 AAAA TCZZA Ed. 01The following figure shows the 'MER Settings' table:The following fields are shown:Field DescriptionInterface Allows to enter an interface name for the MER connection.Note: You don't have to fill in a name for the MER interface.The name applied will be the same as the phonebook entryname.Address Indicates free MER phonebook entries, as well as free 'anytype' phonebook entries.Encapsulation Allows to select the encapsulation method, i.e. LLC/SNAP(default), or VCĆMUX.The following figure shows the 'MER Interface Settings' table:

'MER InterfaceSettings' tablecomponents'MER Configuration'Buttons6 Data Services - MAC Encapsulated Routing83 / 3623EC 17766 AAAA TCZZA Ed. 01The following fields are shown:Field DescriptionIP Address Allows to enter a static IP address for the MER connection.Note: In case no IP address is entered, the MER connectionwill receive an IP address from the remote access server.IP Netmask Allows to enter an associated IP netmask for the static IPaddress.Note: In case no IP address is entered in the IP address field,or no IP netmask is entered, the default associated netmaskwill be used.MAC Address Allows to enter a MAC address for the MER connection. ThisMAC address, visible for the remote access server, overrulesthe STWireless MAC address.Note: In case no MAC address is entered, the source MACaddress of the bridged frames is the STWireless MACaddress.The following buttons are available:Field DescriptionDeletes the selected MER connection.If you create a new MER connection, this button allows toclear all configurational fields for the connection, i.e. returnsthem to their default settings.Creates a new MER connection, in addition to (an) existingMER connection(s).Adds the configured MER connection to the 'MACEncapsulated Routing' table, i.e. activates" the MERconnection.Applies changes you made to an existing MER connection.connection.

Adding MER entries6 Data Services - MAC Encapsulated Routing84 / 362 3EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1Browse to the 'MER' web page.2If the 'MAC Encapsulated Routing' table is empty, i.e. you arecreating the first MER connection, proceed with step 3.If you want to add a MER connection in addition to existing MERconnections (see 'MAC Encapsulated Routing' table),click3In the 'Address' field, click and select the (free) phonebookentry for your MER connection.4In the 'Encap' column, click and select the encapsulationmethod for the connection, i.e. LLC/SNAP, or VCĆMUX.5Optionally, enter the appropriate configuration in one, or more ofthe following fields:•the 'Interface' field•the 'IP Address' field•the 'IP Netmask' field•the 'MAC Address' field.Note: See topics 'MER Settings table' and MER Interface Settingstable' in this subsection for more information.6Click and to finish the procedure.

Maximum number ofMER connectionsReconfiguring anexisting MERconnectionDeleting Bridgingentries6 Data Services - MAC Encapsulated Routing85 / 3623EC 17766 AAAA TCZZA Ed. 01The STWireless can manage up to 12 MER connectionssimultaneously. This can be achieved by deleting all other packetservice entries.Note: Check with your ASP, or corporate whether multipleendĆtoĆend connectivity is enabled.Click the selection button of a MER interface.The settings shown in the 'MER Settings' and 'MER InterfaceSettings' table apply to the MER connection which is marked with ayellow bar and a selection button which is lit ( ).Make the changes to the fields, and click . Clickto make the changes persistent.Proceed as follows:Step Action and Description1 Browse to the 'Bridging' web page.2Click the selection button of the MER connection you want to deĆlete, and clickClick to finish the procedure.

In this subsectionMAC EncapsulatedRoutingMER Operation: from(W)LAN to STWireless'sIP router6 Data Services - MAC Encapsulated Routing86 / 362 3EC 17766 AAAA TCZZA Ed. 016.4 Advanced MER Concepts"MAC Encapsulated Routing"MER operation: From (W)LAN to STWireless's IP router"MER operation: From IP Router to MER"MER operation: From MER to WAN"Configuration and Operation Example.MAC Encapsulated Routing allows IP packets to be carried asbridged frames. The RFC1483 link protocol with MER is amultiprotocol encapsulation method over ATM. While the trueIEEE802.1D Transparent Bridge is a hardware component of theSTWireless, for MER, the encapsulation method is implementedby software.In the PCs, IP packets are encapsulated in MAC frames, accordingtheir destination:"For local networking, the destination MAC address is the oneof the destination device, e.g. another PC"For nonĆlocal traffic, the destination MAC address is that ofthe STWireless"In both cases, the source MAC address, is the MAC address ofthe source device, e.g. your PC.All MAC frames arrive via the Ethernet segment in theSTWireless. It decapsulates the MAC frames and routes the IPpackets, according their destination.

MER Operation: fromSTWireless's IP routerto MERMER Operation: fromMER to WANConfiguration andoperation example6 Data Services - MAC Encapsulated Routing87 / 3623EC 17766 AAAA TCZZA Ed. 01IP packets destinated for MER, can be subjected to NAPT, prior toend up in the appropriate MER interfaceNAPT allows local (W)LAN PCs to share the single static, ordynamically obtained public IP address for the MER connection.The IP packets, ending up in the MER interface are encapsulatedin MAC frames:"The source MAC address is now the STWireless MACaddress, or the MAC address, configured on the 'MER' webpage"The destination MAC address is obtained via ARP.Finally these MAC frames are processed to the WAN, over theADSL line by the STWireless, as if it were an IEEE802.1Dcompliant bridge, sending MAC, i.e. bridged frames.The figure below provides an overview of the STWirelessrearĆtoĆfront end MER operation:Virtual ChannelVPI/VCI:8/83IP RoutingIP Packet Ethernet MACFrameMERInterface IP PacketMACFrame NAPT

6 Data Services - MAC Encapsulated Routing88 / 362 3EC 17766 AAAA TCZZA Ed. 01

IntroductionTopics7 Data Services - PPPoAĆtoĆPPTP Relaying89 / 3623EC 17766 AAAA TCZZA Ed. 017 Data Services - PPPoAĆtoĆPPTP RelayingThe STWireless PPPoAĆtoĆPPTP Relaying packet service relays PPPframes, arriving via local IP tunnels to a previously selected VC,and vice versa.The PPP protocol that originates, or terminates in the locallyattached PCs, offers a session concept, and provides security viaidentification, authentication and encryption.A major advantage of PPPoAĆtoĆPPTP Relaying is that it avoids thecomplexity of an IP router, yet to a certain extent, providesidentical features.Topic SeePreparatory Steps 7.1Configuring and Using a PPTP Connection 7.2Example : MS Windows 98 DialĆUp Networking 7.3PPPoA/PPTP Configuration 7.4Customizing PPPoA/PPTP Connections 7.5Advanced PPPoA/PPTP Concepts 7.6

FeaturesWhat you should knowin advanceSTWireless7 Data Services - PPPoAĆtoĆPPTP Relaying90 / 362 3EC 17766 AAAA TCZZA Ed. 017.1 Preparatory StepsPPPoAĆtoĆPPTP Relaying:"Provides standard DialĆup" PPP behavior"Supports security via identification, authentication andencryption"Has multiprotocol support depending on the PPTPimplementation, e.g. for MS Windows: TCP/IP, IPX/SPX andNETBEUI"Offers complete TCP/IP protocol transparency; no NAPT isrequired"Supports concurrent access to multiple remote destinations(depending on provisioning)."Supports up to 12 concurrent virtual channels assigned toPPPoA/PPTP."The VPI/VCI value of the VC(s) to use on the ADSL line"PPPoA connection service must be supported on this VC"User name and password for your user account.Note: If connectivity to multiple remote organizations is required,you need additional sets of these parameters.The STWireless comes with five preconfigured free PPPphonebook entries, i.e. Relay_PPP1 ... Relay_PPP4, and PPP3.If the SP(s) impose PPPoA/PPTP settings which differ from theSTWireless defaults, perform the necessary adjustments via theSTWireless web pages.See section 7.4 for more information.

PC(s)TCP/IP7 Data Services - PPPoAĆtoĆPPTP Relaying91 / 3623EC 17766 AAAA TCZZA Ed. 01Your PC must support PPP and PointĆtoĆPoint TunnellingProtocol (PPTP).e.g. All Microsoft Windows platforms support PPP and PPTP.Before you can establish PPTP tunnels, you must configure:"An IP address in each PC which initiates a PPTP tunnel"An IP address in your STWireless which terminates the PPTPtunnel(s)To configure an IP address, or enable DHCP in your PC(s), seeAppendix NO TAG.To configure an IP address, or enable DHCP in your STWireless,see section 11.3.

IntroductionIn this section7 Data Services - PPPoAĆtoĆPPTP Relaying92 / 362 3EC 17766 AAAA TCZZA Ed. 017.2 Configuring and Using a PPTP ConnectionBefore you can open a PPTP tunnel towards the STWireless, firstlyyou must initially configure a PPTP dialĆup connection on your PC.Once this PPTP dialĆup connection is configured, you can use it toopen a PPPoA/PPTP connection to the remote side of the ADSLline.Because the configuration and use of such a connection followssimilar patterns for all popular OSs, this section will describe theprocedures in global.In section 7.3 an example is provided how to create and use aPPTP DialĆUp icon in MS Windows 98.Refer to appendix C for more information on other OSs.Topic SeePreparing your PC for PPPoA/PPTP 7.2.1Using PPTP towards your STWireless 7.2.2

Opening a sessionCredentials7 Data Services - PPPoAĆtoĆPPTP Relaying94 / 362 3EC 17766 AAAA TCZZA Ed. 017.2.2 Using PPTP towards your STWirelessDepending on your OS, you can open a session by either doubleĆclicking the PPTP connection icon, or selecting it from a RAS tableand clicking 'DialĆUp', or 'Connect'.Before you can actually browse the Internet, or contact the remote side's resources, you must supply the following credentials:"A username"An associated passwordNote: Most, if not all OSs allow the credentials to be saved.

In this section7 Data Services - PPPoAĆtoĆPPTP Relaying95 / 3623EC 17766 AAAA TCZZA Ed. 017.3 Example : MS Windows 98 DialĆUp NetworkingThe following overview summarizes the necessary steps to setup aMicrosoft Windows 98 PC for the use of PPPoAĆtoĆPPTP Relaying:Step Action See1 Configure a Private IP address on your PC2 Create a new DialĆUp Networking icon 7.3.13 Adapt DialĆUp Networking Properties C.14 Create a shortcut on your desktop (optional) 7.3.25 Open a PPPoA/PPTP DialĆUp Session 7.3.36 Surf the Internet.7 Close a PPPoA/PPTP DialĆUp Session in Use 7.3.4

Procedure7 Data Services - PPPoAĆtoĆPPTP Relaying96 / 362 3EC 17766 AAAA TCZZA Ed. 017.3.1 Create a New DialĆUp Networking IconProceed as follows:Step Action and Description1DoubleĆclick the 'My Computer' icon on your desktop.2DoubleĆclick the 'DialĆUp Networking' icon.3DoubleĆclick the 'Make New Connection' icon to activate the 'MakeNew Connection' wizard.4If you use the DialĆUp Networking application for the first time, the'Welcome to DialĆUp Networking' window appears.In that case, clickThe 'Make New Connection' window pops up:

IntroductionShortcut procedure7 Data Services - PPPoAĆtoĆPPTP Relaying99 / 3623EC 17766 AAAA TCZZA Ed. 017.3.2 Create a Shortcut on your Desktop (Optional)To work comfortably with the DialĆUp connection(s) you created,Windows 98 offers you the possibility to place a shortcut of theconnection icon on your desktop.Proceed as follows:Step Action and Description1DoubleĆclick the 'My Computer' icon on your desktop.2DoubleĆclick the 'DialĆUp Networking' icon.The 'DialĆUp Networking window pops up.3Select the appropriate DialĆUp connection icon (in the example'Corporate') and drag it to your desktop to create a copy of theicon.

Procedure7 Data Services - PPPoAĆtoĆPPTP Relaying100 / 362 3EC 17766 AAAA TCZZA Ed. 017.3.3 Open a PPPoA/PPTP DialĆUp SessionProceed as follows:Step Action and Description1DoubleĆclick the appropriate PPPoA/PPTP DialĆUp icon in the 'DialĆUp Networking' folder, or doubleĆclick its shortcut on your desktop.The 'Connect To' window pops up2Fill in your user name and password, according your user account atthe ISP, or corporate.Note: If you want the current DialĆUp connection application to reĆmember your credentials for future use, tick the 'Save Password' box(n). Make sure though, that you have logged into Windows 98when you boot your PC.3ClickThe 'Connecting To Corporate' window appears shortly before beingminimized in the system tray.4Start your application now, e.g. a Web browser.

While you areconnectedThe 'Connected To'window7 Data Services - PPPoAĆtoĆPPTP Relaying101 / 3623EC 17766 AAAA TCZZA Ed. 01Once the PPPoA/PPTP DialĆUp connection is established, you canfind the MSDUN icon showing two PCs connected to each other inthe system tray:The MSDUN icon symbolizes activity on the PPPoA/PPTPconnection by flashing PC(s):"A flashing Front" PC symbolizes upstream (TX) link activity(from your local PC towards the remote device)."A flashing Behind" PC symbolizes downstream (RX) linkactivity (from the remote device towards your PC).You can check the status of the connection by doubleĆclicking theMSDUN icon in the system tray.A'Connected To' window will pop up, showing the status of theconnection:

ProcedureResult7 Data Services - PPPoAĆtoĆPPTP Relaying102 / 362 3EC 17766 AAAA TCZZA Ed. 017.3.4 Close a PPPoA/PPTP DialĆUp Session in UseProceed as follows:Step Action and Description1If the DialĆUp connection is minimized, click the MSDUN iconin the system tray:The 'Connected To' window pops up.2Click to close the PPPoA/PPTP session.The PPPoA/PPTP DialĆUp connection will no longer exists. ThePPPoA/PPTP connection is idle, e.g. for other hosts.

IntroductionIn this section7 Data Services - PPPoAĆtoĆPPTP Relaying103 / 3623EC 17766 AAAA TCZZA Ed. 017.4 PPPoA/PPTP ConfigurationThe STWireless allows local configuration via the STWirelessweb pages.This section describes the configuration of PPPoA/PPTP entries, andhow to use the 'PPTP' web page.Topic SeePPPoA/PPTP Phonebook Entries 7.4.1PPPoA/PPTP Active Connections 7.4.2

PPTP phonebookentriesPPTP and PPPphonebook entriesAdding/deletingphonebook entries7 Data Services - PPPoAĆtoĆPPTP Relaying104 / 362 3EC 17766 AAAA TCZZA Ed. 017.4.1 PPPoA/PPTP Phonebook EntriesBasic to the STWireless VC pool management, is the 'Phonebook'web page.The STWireless in its default state features the following PPPrelated phonebook entries:Note: Both PPPoA/PPTP and PPP & IP Routing share the same type of phonebook entries, i.e. ppp.As you notice, four phonebook entries exist, named Relay_PPP,which are free, and specifically suitable for PPPoA/PPTP, and fourother phonebook entries, named PPP, and DHCP_SPOOF. Onlyuse the latter in exceptional cases for PPPoA/PPTP service.See section 10.2 for more information.

In this subsectionThe STWireless 'PPTP'web page7 Data Services - PPPoAĆtoĆPPTP Relaying105 / 3623EC 17766 AAAA TCZZA Ed. 017.4.2 PPPoA/PPTP Active Connections"The STWireless 'PPTP' Web Page"The 'Active PPTP Connections' Table"'Active PPTP Connections' Table Components"Configuring PPTP ProfilesClicking in the left pane of the STWireless web pages,pops up the 'PPTP' web page (See section 18.2 for moreinformation):

The 'Active PPTPConnections' table'Active PPTPConnections' tablecomponents7 Data Services - PPPoAĆtoĆPPTP Relaying106 / 362 3EC 17766 AAAA TCZZA Ed. 01The following figure shows the 'Active PPTP Connections' table:The following fields are shown:Field DescriptionDialĆstring Indicates the name you have chosen for the PPTP connection.Note: In your DialĆUp application you are able to specify whichPPTP connection is to be used by adding the appropriateDialĆstring, indicated here.Destination Indicates the PPTP phonebook entry name, active for thisconnection.Qos Indicates the Quality of Service (QoS) applicable for thePPPoA/PPTP connection. In most cases the QoS column willindicate default. Via CLI a specific QoS can be configured.Encap Refers to the encapsulation, and decapsulation of PPP framesin/from AAL5/ATM. The STWireless is compliant with RFC 2364PPP over AAL5" and supports both the LLC/NLPID method andthe VCĆMUX method. By default the encapsulation method forPPP frames is VCĆMUX.The encapsulation method for a PPPoA/PPTP connection can beconfigured via the CLI, see section 7.5 for more information.HDLCFramingThe PPP frames arriving via a PPTP tunnel, and the PPP framesencapsulated on ATM connections, differ in format.The PPP format on AAL5 follows RFC 1661 PointĆtoĆPointProtocol (PPP)":P_ID Information PaddingPPP FrameAddress Control P_ID Information Padding(FF) (03)PPP FrameThe latter format has two additional bytes in front of the frame(FFĆ03) inherited from another encapsulation i.e., RFC 1662PPP in HDLCĆlike framing".Whereas the PPP format within a tunnel follows PointĆtoĆPointTunneling Protocol (PPTP)":

Configuring PPTPprofiles7 Data Services - PPPoAĆtoĆPPTP Relaying107 / 3623EC 17766 AAAA TCZZA Ed. 01Field DescriptionHDLCFraming(continued)Value DescriptionNeverAlways The STWireless will make sure thatFFĆ03 is always in front of a PPP frameencapsulated on an AAL5/ATMconnection. Although not supported byRFC2364, some equipment may relyon this format.Keep The STWireless will not change thePPP frame arriving via a tunnel.The STWireless will make sure thatFFĆ03 will never be found in front of aPPP frame encapsulated on aAAL5/ATM connection, independent ofthe actual format of the PPP frame inthe tunnel. This setting is default, andfollows RFC2364.Note: This configuration possibility applies only to the upstreamdirection ! In the downstream direction, the STWireless willalways make sure that FFĆ03 is in front of the frame prior to putit in a PPTP tunnel.In order to cope with these PPP frame differences, theSTWireless adapts to the different formats on a 'perconnection' base.Additionally, the STWireless offers the following PPP/AAL5format configuration options via the CLI if interoperabilityproblems should arise (See section 7.5 for more information):State Indicates the connection state of the active PPTP connection. Itcan take following values:Value DescriptionResolvingIn Use A user opened a session on this PPTPentry.The PPTP entry is setting up theconnection.Retry The PPTP entry did not succeed inconnecting to the remote side, and isretrying.User Indicates the IP address of the host, i.e. PC, using this PPTPconnectionPPTP profiles can be configured via the CLI.See section 7.5 for more information.

IntroductionIn this section7 Data Services - PPPoAĆtoĆPPTP Relaying108 / 362 3EC 17766 AAAA TCZZA Ed. 017.5 Customizing PPPoA/PPTP ConnectionsIn this section the advanced configuration and use of PPPoA/PPTPconnections is described.Firstly, this section deals with some concepts on the customizationof PPPoA/PPTP connections.Topic SeePPTP Phonebook Entries 7.5.1Single Destination 7.5.2Multiple Destinations 7.5.3Restrictions of Using Specific Virtual Channels 7.5.4PPTP Profiles 7.5.4

IntroductionCustomizingPPPoA/PPTP entriesUsing addedphonebook entriesPPPoA/PPTP sessionscenarios7 Data Services - PPPoAĆtoĆPPTP Relaying109 / 3623EC 17766 AAAA TCZZA Ed. 017.5.1 PPPoA/PPTP Phonebook EntriesTo establish a PPPoA/PPTP session, all you need to do is opening aPPTP tunnel.However, this does only apply in the case only a single destinationis reachable via one, or more VCs.With the STWireless, it is possible to open multiple simultaneoussessions, or even simultaneously open sessions to multipledestinations.Via the STWireless 'Phonebook' web page, you are able to addPPP phonebook entries in addition to the defaults.You can give them names of your choice (in the name field). Seesection 7.4 for more information.The name you gave the PPTP phonebook entries in theSTWireless's phonebook can be used to specify whichPPPoA/PPTP VC is to be issued by a particular PPTP connectionicon.The PPPoA/PPTP entries can be used in several ways:"(All) directed to a single destination"Directed to specific destinations.

Single destinationPPPoA/PPTP sessionsSingle destinationarchitectureTwo scenarios7 Data Services - PPPoAĆtoĆPPTP Relaying110 / 362 3EC 17766 AAAA TCZZA Ed. 017.5.2 Single DestinationIf the 'VPN Server' field of the PPTP DialĆUp application is leftunchanged, i.e. only the IP address of the STWireless (or its hostname) is visible, the STWireless automatically chooses a free PPPphonebook entry from the Phonebook.This is the most easy scenario and works best if all (one, or more)PPPoA/PPTP related PPP VCs are attached to the same remotedestination.Local PPTPTunnelsCorporate HQRemoteAccess PointINTERNETATM VCPPP RELAYTwo scenarios are possible:"Single PPP VC to a single destinationIn this scenario, the SP supplied one PPP VC for connectivity. Itis most applicable when a single PC is connected to theSTWireless."Multiple PPP VCs to single destinationIn this scenario, the SP supplied multiple PPP VCs, all direct tothe same destination. This implies that several PCs canconnect to this destination at the same time (as long there isan idle channel left). Therefore, this is most applicable with aSTWireless connected to a (W)LAN.

Multiple destinationPPPoA/PPTP sessionsMultiple destinationarchitectureProcedure to specify aVC for a PPTPconnection icon7 Data Services - PPPoAĆtoĆPPTP Relaying111 / 3623EC 17766 AAAA TCZZA Ed. 017.5.3 Multiple DestinationsMultiple SPs might be connected to your STWireless, e.g., yourprivate ISP and your corporate.In this case, the STWireless's PPP VCs can be split over bothlocations. For example, 6 PPP VCs could be provisioned to yourISP, while 6 other PPP VCs are used for connecting to yourcorporate.Corporate HQRemote LANINTERNETPPPoA RELAYLocal PPTPTunnelsOther VirtualChannelsSpecific Virtual ChannelProceed as follows to specify which VC (i.e. Phonebook entry) is tobe used by a DialĆUp connection:Step Action1 Add, if needed, a PPP phonebook entry to the STWireless'sphonebook with the appropriate VPI/VCI values for the specificdestination.2 When creating a new PPTP tunnel configuration, add this PPP VCphonebook name next to the IP address, or DNS name of the VPNserver (i.e. the STWireless).

ResultNoteExample for Windows9x7 Data Services - PPPoAĆtoĆPPTP Relaying112 / 362 3EC 17766 AAAA TCZZA Ed. 01If you open this PPPoA/PPTP session, it will use the PPP Phonebookentry, specified in the VPN server field.You must check with your ISP and your corporate LANadministrator to verify which crossĆconnections exist between thePPP VCs and the locations.Proceed as follows to create an MS Windows 9x DialĆUpNetworking icon to the corporate 'Alcatel', which has to use theVC, named 'Alcatel_pptp':Step Action and Description1 Configure a PPP phonebook entry, named 'Alcatel_pptp', in thePhonebook as described in subsection 7.4.1.

7 Data Services - PPPoAĆtoĆPPTP Relaying113 / 3623EC 17766 AAAA TCZZA Ed. 01Step Action and Description2Create a DialĆUp Networking icon, named 'Alcatel', according tosection 7.3.1.In step 9 of the procedure (See section 7.3.1), you not only specifythe VPN server, i.e. the STWireless, but also the VC 'Alcatel_pptp':3DoubleĆclick the 'Alcatel' icon to open the PPPoA/PPTP session. Thefollowing DialĆUp window pops up:As you can see in the 'VPN Server' field, the VC, i.e. alcatel_pptp, tobe used is specified by its name. Consequently, this PPPoA/PPTPsession will always use this VC for establishing a connection to thecorporate 'Alcatel'.

Example Result7 Data Services - PPPoAĆtoĆPPTP Relaying114 / 362 3EC 17766 AAAA TCZZA Ed. 01The following figure shows an example of both single and multiplePPPoA/PPTP connections established simultaneously.AlcatelRemote LANMy ISPINTERNETPPP RELAYLocal PPTPTunnelsATM ChannelsOther VirtualChannels'Alcatel_pptp'

Similar phonebooknamesPositive use of similarnamesCase of no entrymatches7 Data Services - PPPoAĆtoĆPPTP Relaying115 / 3623EC 17766 AAAA TCZZA Ed. 017.5.4 Restrictions on Using Specific Virtual ChannelsThe STWireless will look for a match between the string, specifiednext to the VPN server's DNS hostname or IP address (in theprevious example the string 'Alcatel_pptp').If however, several PPPoA/PPTP entries exist, with names startingwith the same string, e.g. Alcatel_pptp1, Alcatel_pptp2, etc., it cannot be determined which of these will be used to establish theconnection.This can be used in a positive way however: if a selection ofPPPoA/PPTP VCs may be used by a particular PPPoA/PPTP session,you just have to give them names with a stringmatch in thebeginning, e.g. 'Alcatel_pptpX' ,where X is a number.In case no match is found in the STWireless phonebook, or if thespecified VC is already used, the DialĆUp application will use thefirst available idle PPPoA/PPTP VC found in the 'PPTP connections'table.Consequently, again it can not be determined which PPPoA/PPTPVC will be used to establish the connection.

IntroductionTopics7 Data Services - PPPoAĆtoĆPPTP Relaying117 / 3623EC 17766 AAAA TCZZA Ed. 017.6 Advanced PPPoA/PPTP ConceptsThis section describes some advanced concepts of theSTWireless's PPPoAĆtoĆPPTP Relaying packet service.Topic SeePointĆtoĆPoint Tunneling 7.6.1Local Tunneling 7.6.2PPPoAĆtoĆPPTP Relaying (PPPoA/PPTP) 7.6.3Simultaneous PPPoA/PPTP Sessions 7.6.4

What is TunnelingTunneling applied tothe STWirelessResult of PPTPtunnelingSupported (W)LANProtocols7 Data Services - PPPoAĆtoĆPPTP Relaying118 / 362 3EC 17766 AAAA TCZZA Ed. 017.6.1 PointĆtoĆPoint TunnelingTunneling is a technique that allows to transport certain protocolsover a network, which is not designed for that purpose.Example: IPX Packets can be wrapped in IP, ready to be routedover an IP network.At the destination, the IPX packets are decapsulated and madeavailable in their original format again.Tunneling applied to the STWireless implies that:"Tunnels have a local scope.Indeed, tunnels are established between two peers on thelocal IP network: local PCs initiate tunnels, the STWirelessterminates these tunnels."IP tunnels are established and released for the duration of asession."The protocol carried inside the tunnels is PPP. However,various protocols can be carried inside the PPP frames.The net result of PPTP tunneling is that PPP frames can crossthe local Ethernet segment between the STWireless and the clientcomputer and vice versa.This would otherwise not be possible as PPP is designed to run onpointĆtoĆpoint connections, e.g. DialĆUp connections, whereasEthernet is a shared medium.Within PPP, all kinds of protocols can be transported.The PPP/PPTP client, however, is the limiting factor. Some OSs onlyallow specific protocols to be transported within PPP tunnels (e.g.TCP/IP, IPX/SPX, or NETBEUI in case of Window 9x).

Tunneling from behindan IP routerSTWirelessPCs7 Data Services - PPPoAĆtoĆPPTP Relaying119 / 3623EC 17766 AAAA TCZZA Ed. 017.6.2 Local TunnelingThe STWireless allows local tunneling from behind an IP router:IP Network 10 IP Network 172.1610.0.0.138 10.0.0.1172.16.0.1172.16.0.3172.16.0.2Ethernet (W)LANIP Router Local PPTP tunnelsThis requires settings in both STWireless and PCs.You must add a default route for the STWireless via the 'Routing'web page (See subsection 11.4.2 for more information).In the example of the above figure, the route to be added, has thefollowing parameters:"Destination: 0.0.0.0/0"Source: Any"Gateway: 10.0.0.1For each PC, you must add a route to its internal routing table.This route must point to the STWireless. Proceed as follows for aWindows OS:Step Action and Description1Click , select 'Programs', and 'MSĆDOS' prompt.2 At the DOS prompt, enter:route add <Destination IPaddress> <Gateway IPaddress>In the example of the previous figure, the command would be:route add 10.0.0.138 172.16.0.13 To verify IP connectivity, you can ping the STWireless. If it responds,setting up PPTP tunnels is possible.

What is PPPoAĆtoĆPPTPRelayingPPPoA/PPTP overviewarchitecture7 Data Services - PPPoAĆtoĆPPTP Relaying120 / 362 3EC 17766 AAAA TCZZA Ed. 017.6.3 PPPoAĆtoĆPPTP Relaying (PPPoA/PPTP)By opening a PPPoA/PPTP session, PPTP tunnels are establishedbetween the STWireless and the PCs on your (W)LAN.These PPTP tunnels trigger the Relaying utility of the STWireless:itchooses a free VC from the pool of available free PPP phonebookentries and relays all PPP frames, sourced by the PPTP tunnel fromthe tunnel to the VC, and vice versa.At the remote end of the VC, i.e. ADSL line, the remote accessserver extracts the PPP frames, reconstructs the encapsulated IPpackets and forwards them to their destination, e.g. the Internet.At the end of a PPPoA/PPTP session, the PPTP tunnel is destroyed.This triggers the STWireless's Relay utility to release the VC.The figure below provides an overview of the endĆtoĆendarchitecture.Local PPTPTunnelsEthernet(W)LANCorporate Access PointRemote LANISP Access PointINTERNETBundled ATM VCsPPP RELAYATM Network

Upper limit ofsimultaneousPPPoA/PPTP sessionsSTWireless andsimultaneousconnections7 Data Services - PPPoAĆtoĆPPTP Relaying121 / 3623EC 17766 AAAA TCZZA Ed. 017.6.4 Simultaneous PPPoA/PPTP SessionsPPTP tunneling does not influence your local communication; youcan add as many hosts as your local network supports.However, there is an upper limit to the number of simultaneousoutbound connections. Unlike Bridging, or MER, a PPPoA/PPTPrelated VC cannot be shared by multiple users. A user establishinga tunnel requires at least one PPPoA/PPTP related VC.Therefore, any user on the local network can only initiate tunnelsas long as there are idle PPPoA/PPTP VCs, i.e. idle PPTPphonebook entries.By disabling all other packet service entries in the STWirelessPhonebook, the STWireless is capable of managing up to 12simultaneous PPPoA/PPTP VCs.If all PPPoA/PPTP VCs are in use, and a user tries to setĆup a newtunnel, the STWireless will refuse the request and an errormessage will appear on the screen.

7 Data Services - PPPoAĆtoĆPPTP Relaying122 / 362 3EC 17766 AAAA TCZZA Ed. 01

IntroductionIn this chapter8 Data Services - PPP & IP Routing123 / 3623EC 17766 AAAA TCZZA Ed. 018 Data Services - PPP & IP RoutingThe STWireless features the PPP & IP Routing packet service.Via the PPP protocol an authenticated session is established withyour SP.IP packets, arriving over the PPP connection, are forwarded by theIP router to PCs on your (W)LAN.Optionally, Network Address & Port Translation (NAPT) can beenabled to isolate your local network from the Internet, or to sharea single IP address.Topic SeePreparatory Steps 8.1Using PPP & IP Routing 8.2PPP Configuration 8.3PPP Entry Configuration 8.4

FeaturesWhat you should knowin advanceSTWirelessPC(s)8 Data Services - PPP & IP Routing124 / 362 3EC 17766 AAAA TCZZA Ed. 018.1 Preparatory StepsPPP & IP Routing:"Has an authenticated session concept: it supportsidentification, authentication and autoconfiguration."Requires no session client on the PC(s), avoiding specialinstallation procedures"Combined with NAPT, allows multiple users to share a singleIP address simultaneously on a single VC"Supports up to 12 concurrent virtual channels for PPP."The VPI/VCI value of the VC(s) to use on the ADSL line"PPPoA connection service must be supported on this VC"User name and password for your user account.Note: If connectivity to multiple remote organizations is required,you need additional sets of these parameters.The STWireless comes with eight phonebook entries available forPPP & IP Routing, of which three are preconfigured for immediateuse.If the SP(s) impose settings which differ from the STWirelessdefaults, perform the necessary adjustments via the STWirelessweb pages.See sections 8.3 and 8.4 for more information.In order to use the PPP & IP Routing mode of the STWireless, theOS on your PC(s) must support the TCP/IP suite.See chapter 11 for more information on IP.

AlwaysĆon, DialĆin andDialĆonĆDemand PPPsessionsOpening dialĆin PPPsessions8 Data Services - PPP & IP Routing125 / 3623EC 17766 AAAA TCZZA Ed. 018.2 Using PPP & IP RoutingThree methods exist to open a PPP:"DialĆinThe PPP session is opened manually"AlwaysĆonAfter the STWireless is powered and finished its POSTsuccessfully, the STWireless automatically tries to open thePPP session"DialĆonĆdemandThe PPP session is opened automatically, triggered by thearrival of packets at a/the STWireless Ethernet port, destinedfor a PPP connection.Proceed as follows (See section 18.2 for more information):Step Action and Description1Browse to the 'DialĆin' web page:2Click next to a PPP entry in the list.

Closing dialĆin PPPsessionsSaving credentials8 Data Services - PPP & IP Routing126 / 362 3EC 17766 AAAA TCZZA Ed. 01Step Action and Description3 If applicable the 'Authentication' web page pops up:Enter user name and password in the appropriate fields.4Click .5After identification and authentication, the 'PPP connections' webpage reappears.While the STWireless tries to open the session, trying will appearin the 'State' field. Once the session is active, the field displays up.From then, you are online, and you can start your application, orbrowse the Internet.Note: AlwaysĆon" PPP connections will not appear in this table.Proceed as follows:Step Action and Description1Browse to the 'DialĆin' web page.2Click next to the PPP entry you want to close the sessionfor.The session state of the PPP entry will change to down, i.e. itbecomes idle.Active PPP sessions are indicated via up in the 'State' field.If you want the STWireless to remember your credentials, check'Save password' (n)inthe'Authentication' web page.See subsection 8.4.4 for more information.

IntroductionIn this section8 Data Services - PPP & IP Routing127 / 3623EC 17766 AAAA TCZZA Ed. 018.3 PPP ConfigurationThe STWireless allows local configurations via its web pages.This section describes the enabling of PPP entries, and the use ofthe 'PPP' web page.Prior to be able to use the PPP entry, you must configure the PPPentry. This is described in section 8.4.Topic SeePPP Phonebook Entries 8.3.1PPP Entries 8.3.2

PPP phonebook entriesAdding/deletingphonebook entries8 Data Services - PPP & IP Routing128 / 362 3EC 17766 AAAA TCZZA Ed. 018.3.1 PPP Phonebook EntriesCentral to the STWireless VC pool management, is the'Phonebook' web page.The STWireless in its default configuration features the followingPPP related phonebook entries:Note: Both PPP & IP Routing and PPPoA/PPTP share the same type of phonebook entries, i.e. ppp.See section 10.2 for more information.

In this subsectionThe 'PPP' web page8 Data Services - PPP & IP Routing129 / 3623EC 17766 AAAA TCZZA Ed. 018.3.2 PPP Entries"The 'PPP' Web Page"The 'PPP Configuration' Table"'PPP Configuration' Table Components"Adding PPP Entries"Deleting PPP Entries.Clicking in the left pane of the STWireless web pages,pops up the 'PPP' web page (See section 18.2 for moreinformation):

The 'PPP configuration'table'PPP Configuration'table components8 Data Services - PPP & IP Routing130 / 362 3EC 17766 AAAA TCZZA Ed. 01The following figure shows the 'PPP Configuration' table of the'PPP' web page:The following fields are shown:Field DescriptionItf Allows you to choose an interface name for the PPP interface.Note: In most cases, the interface name will be the same asthe phonebook entry name.Dest Indicates available phonebook entries for PPP.Note: Specific free PPPoA/PPTP phonebook entries areshown, as well as free 'any type' phonebook entriesMode Indicates whether the PPP connection is:•An AlwaysĆon" connection•A DialĆin" connection•A DialĆonĆDemand" connection.See section 8.4.5 for more information.Link Indicates the link state of the PPP entry.It can take following values:Value DescriptionidleConnected The PPP entry is active, i.e. it tries tosetup a PPP connection, or PPPconnectivity is achieved.The PPP entry is not activated, i.e. itdoes not setup a PPP connection.

8 Data Services - PPP & IP Routing131 / 3623EC 17766 AAAA TCZZA Ed. 01Field DescriptionState Indicates the active state of the PPP session.It can take following values:Value DescriptionUpDown The PPP session is closed, the PPPconnection is idle.Trying The PPP session is trying to reach theactive state.The PPP session is opened andactive.Action This field contains the three following action buttons:Button ActionDelete an existing entry from the list.Add a PPP entry to the list.Configure the PPP entry.See subsection 8.4 for more.For alwaysĆon PPP entries, also an on/off button is included:Clicking the button activates/deactivates the alwaysĆon PPPconnection.Click to make the on/off change permanentButton ActionThe alwaysĆon PPP connection isdisabled, i.e. not active.The alwaysĆon PPP connection isenabled, i.e. activated.

Adding PPP entriesResultDeleting PPP entries8 Data Services - PPP & IP Routing132 / 362 3EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1Browse to the 'PPP' web page:The bottom row of the table allows addition of a new entry.2In the 'Destination' column of the bottom row, click and selectthe PPP entry you want to add to the table.3Optionally, enter a name for the PPP interface in the 'Itf' column.4Click and to finish the procedure.The PPP entry is added to the 'PPP Configuration' table. Prior to beable to open a PPP session on this PPP entry, you MUST configurethe PPP entry.See section 8.4 for more information.Proceed as follows:Step Action and Description1Browse to the 'PPP' web page.2Select the PPP connection you want to delete, click andto finish the procedure.

IntroductionIn this sectionInteraction with theSTWireless IP router8 Data Services - PPP & IP Routing133 / 3623EC 17766 AAAA TCZZA Ed. 018.4 PPP Entry ConfigurationAfter enabling the PPP entry in the 'PPP Configurations' table, youmust configure the PPP connection.Configuration of PPP entries must be done per PPP entry.This section describes the various PPP entry configurations theoffers for assuring endĆtoĆend connectivity.Topic SectionThe PPP Configuration Web Page 8.4.1Link Related Configuration 8.4.1Security Related Configuration 8.4.3IP Routing Related Configuration 8.4.4Connection Related Configuration 8.4.5NAPT and PPP & IP Routing 8.4.6NAPT and STWireless Transparency 8.4.7Most of the configurations described in this section, influence theIP router in the STWireless.See section 11.4, and subsection 11.2.4 for more information onIP routing aspects.

PPP configuration webpage8 Data Services - PPP & IP Routing134 / 362 3EC 17766 AAAA TCZZA Ed. 018.4.1 The PPP Configuration Web PageClicking next to a PPP connection you want to configure,pops up the particular 'PPP Configuration' web page:

Introduction'Link' boxDestination networks8 Data Services - PPP & IP Routing135 / 3623EC 17766 AAAA TCZZA Ed. 018.4.2 Link Related ConfigurationThe following options allow to configure the link related aspects ofyour PPP connection.Following figure shows the 'Link' box:The 'Link' box contains the following fields:"DestinationDisplays the PPP phonebook entry for the PPP connection.Click to select another free PPP phonebook entry for thePPP connection."EncapsulationAllows you to select the encapsulation method for the PPPconnection, i.e. VCĆMUX (default), or LLC/NLPID.

Introduction'Authentication' boxGuest" credentialsMemorizingCredentials8 Data Services - PPP & IP Routing136 / 362 3EC 17766 AAAA TCZZA Ed. 018.4.3 Security Related ConfigurationsIn most cases you will have a user account, with user name andpassword, at the SP.Via the 'Authentication' box in the 'PPP Configuration' web page,you can fill out your credentials for permanent storage.Following figure shows the 'Authentication' box:As default, the user account guest" is assumed (Both user nameand password are 'guest').If your SP has a guest account, you are able to open a sessionwithout having an actual subscription.The STWireless is able to memorize user name, and passwordper PPP connection; just fill out both, and click .The next time you establish this PPP connection, the information isretrieved from permanent storage.Note: Leaving the entries free, forces you to identify andauthenticate yourself each time the session is opened.

IntroductionAdvanced routingIn this subsection'Routing' box8 Data Services - PPP & IP Routing137 / 3623EC 17766 AAAA TCZZA Ed. 018.4.4 IP Routing Related ConfigurationsIf a PPP session is opened successfully (either manually by the user,triggered by (W)LAN traffic, or automatic at boot time), routes areautomatically added to the STWireless's routing table.The settings in the PPP 'IP Routing' box, are reflected in the routingtable.For advanced users, the STWireless allows manual configurationof permanent routes to dedicated destinations.See section 11.4 for more information on the STWireless's IProuter.Moreover, routes can be configured via the CLI, which will only beadded to the IP route table upon establishing the PPP connection.See chapter 19 for more information on the CLI."'Routing' box"Connection Sharing"Connection Sharing Subnet Values"'My net only' Configuration"Destination Networks"Destination Networks Subnet Values"Primary and Secondary DNS Server.The following figure shows the 'Routing' input box:

Connection sharingConnection sharingsubnet values8 Data Services - PPP & IP Routing138 / 362 3EC 17766 AAAA TCZZA Ed. 01The 'Connection Sharing' field allows you to configure which(W)LAN members, besides the PC that opened the PPP session,can use the PPP connection.Three options are available:"Only MeOnly frames of the PC that opened the PPP session will berouted via this PPP connection.Suppose you opened a PPP session to your corporate andother (W)LAN members are surfing the Internet.Via this option you can prevent them from using the PPPconnection to your corporate as their gateway to the Internet."EverybodyAll PC(s) on the local (W)LAN can forward frames over thisPPP connection. This option is the exact opposite to 'Only me'.If you open a PPP session to the Internet, other (W)LANmembers can share the PPP connection. In this way they arenot required to open a session themselves."My net onlyOnly PC(s) having the same network, and subnet number asthe PC that opened the outbound PPP session, can use the PPPconnection.The following table lists the used netmasks, related to the threepossible options:Connection Sharing value Related Source Subnet Mask NotationOnly Me 255.255.255.255 /32Everybody 0.0.0.0 /0My net Only 255.255.255.0 (default)This value depends on the subĆnet mask in use./*

'My net Only'configurationDestination networks8 Data Services - PPP & IP Routing139 / 3623EC 17766 AAAA TCZZA Ed. 01In case you want to privilege access via a particular PPPconnection for specific PCs, proceed as follows::Step Action1 Configure the PCs, to which you want to privilege outbound accessvia this PPP connection, in a particular subnet of your local (W)LAN.Note: Don't forget to make the STWireless also a member of thisworkgroup.2 Configure the 'Connection Sharing' box of the particular PPPconnection for 'My net only'.3 It is sufficient now to open the PPP session of this PPP connectionfrom one PC of this subnet.Note: As a result, only the members of that particular subnet canshare this PPP connection.The 'Destination networks' field allows you to configure whichdestination can be reached over the particular PPP connection.Four options are available:"All networksThe STWireless can potentially route frames to alldestinations over this PPP connection. The PPP connection actsas if it was a default gateway."Remote net onlyA PPP connection configured for 'Remote net only', onlyforwards frames that is destined to this specific network. Allother frames are blocked."Remote host onlyOnly those frames with a destination IP address whichmatches exactly with this entry in the STWireless routing tableare forwarded over this PPP connection. In fact, onlycommunication with the single remote host is possible."Specific network defined belowIf all previous cases do not fulfill your requirements, 'Specificnetwork' might help you out: you can specify whichdestination(s) are reachable over this PPP connection. Only ifthe destination IP address of a packet matches with this entry,the packet is forwarded over this PPP connection.

Destination networkssubnet valuesPrimary and secondaryDNS server8 Data Services - PPP & IP Routing140 / 362 3EC 17766 AAAA TCZZA Ed. 01The following table lists the used netmasks, related to the fourpossible options:Connection Sharing value Related Source Subnet Mask NotationAll Networks 0.0.0.0 /0Remote net only 255.255.255.0 /0Remote host only 255.255.255.255 /32Specific networkdefined below255.255.255.0.0 (default)This value is depending on thedestination Subnet Mask./*These fields allow - optionally - to enter the IP address(es) of theprimary, and optionally the secondary, DNS server(s). If you supplythese IP addresses, the STWireless will negotiate these addresseswith the remote side of the PPP connection. If these fields are leftblank, the remote side will supply the IP addresses of the primaryand secondary DNS servers.See chapter 12 for more information on DNS.

IntroductionIn this subsection'Options' box8 Data Services - PPP & IP Routing141 / 3623EC 17766 AAAA TCZZA Ed. 018.4.5 Connection Related ConfigurationThe following paragraphs explain which options that are used bya PPP entry when it opens a PPP session."'Options' box"Mode: Triggering of a PPP Session"Idle Time Limit"Local and/or Remote IP: STWireless PPP Client/ServerBehavior"LCP Echo (n) Requests"PAP (n): Authentication Protocols"ACCOMP (n): PPP FramingFollowing figure shows the 'Options' input box:

Mode: triggering ofPPP sessionIdle time limit8 Data Services - PPP & IP Routing142 / 362 3EC 17766 AAAA TCZZA Ed. 01The 'Mode' field allows you to configure how a PPP session isopened.Three options are available:"DialĆinThe PPP session is opened manually by clicking nextto the PPP connection in the 'DialĆin' web page."AlwaysĆonAfter the STWireless is powered and finished its POSTsuccessfully, the STWireless automatically tries to open a PPPsession for the PPP connection."DialĆonĆdemandThe PPP session is opened automatically for a limited periodof time. The opening of the session is triggered by the arrivalof packets at a/the STWireless Ethernet port, to be sent overthe PPP connection.Note: By default one PPP connection is configured as 'DialĆin' (i.e.PPP1), and another as 'AlwaysĆon' (i.e. PPP2).In case you configured a PPP connection for 'DialĆonĆdemand',the 'Idle Time Limit' box allows you to specify the time after whichan opened, but unused PPP session is closed.If left free, the idle limit time is infinite (i.e. the PPP session willnever be closed).

Local and/or remoteIP: STWireless PPPserver/client behaviorLCP echo (n) requestsPAP (n): usedauthentication protocolACCOMP (n): usedPPP framing8 Data Services - PPP & IP Routing143 / 3623EC 17766 AAAA TCZZA Ed. 01During the opening of a PPP session, IP addresses are negotiatedbetween the two PPP peers for the PPP connection. The Local IP',and 'Remote IP' fields influence this negotiation.Typically at the client side, the 'Local IP', and 'Remote IP' boxes areleft empty. This forces the client to ask the remote server foraddresses.In case you want to set up the STWireless as PPP server, suitablevalues for your network configuration must be supplied:"Setting a local IP addressForces the remote PPP client (if it allows to) to accept this IPaddress as the STWireless PPP session IP address."Setting a remote IP addressForces the remote client (if it allows to) to accept this IPaddress as its PPP session IP address.If a PPP session is up, it can issue Link Control Protocol (LCP) echorequests at regular intervals and expects LCP echo replies inreturn.This checkbox allows to turn on/off LCP echo request/replies byrespectively setting (n), or clearing the flag.By default LCP echo is on (i.e. flagged n), allowing the local PPPpeer to detect communication errors, resulting in closing of thePPP session.The default PPP authentication protocol is Challenge HandshakeAuthentication Protocol (CHAP).Setting the PAP flag (n) will use Password AuthenticationProtocol (PAP) instead.Address and Control field COMPression (ACCOMP), sometimesabbreviated as ACCM, is by default enabled, i.e. flagged (n).This option flag should not be cleared, except in specialcircumstances, i.e. where the remote PPP server expects to seeHDLC like framing (FF03 imposed to the PPP packet).

NAPTNAPT and supportedprotocolsConfiguration of NAPTNAT/PAT andSTWirelesstransparency8 Data Services - PPP & IP Routing144 / 362 3EC 17766 AAAA TCZZA Ed. 018.4.6 NAPT and PPP & IP RoutingNetwork Address Translation (NAT) is a technique that allows youto shield or decouple an internal (Private) IP address from the(negotiated) external (Public) IP address.In addition, via Port Translation (PT), this single external Public IPaddress is mapped onto multiple internal ports on the (W)LAN,thus allowing multiple users to share this external IP addresssimultaneously.The amalgam of address & port allocation is often referred to asNAPT.All supported protocols that are NAPT insensitive, passtransparently through NAPT.In addition, the STWireless supports also the following protocolsas NAPT insensitive:"All generic TCP/UDP protocols, e.g. HTTP (Hyper Text TransferProtocol)"Internet Control Message Protocol (ICMP)"File Transfer Protocol (FTP)"Internet Relay Chat (IRC)"Real Audio"Real Time Stream Protocol (RTSP).You can enable/disable NAPT via the 'PPP Configuration' webpage per PPP entry.In the 'Routing' box (See subsection 8.4.4) it is possible toset/unset the NAT flag (n).Advanced NAPT can be configured via the CLI. See chapter 19 formore information.The NAPT feature comes at the expense of the STWirelesstransparency. For consequences and solutions, see subsection8.4.7.

NAPT and STWirelesstransparencyIn this subsectionConsequences of NAPTon layers8 Data Services - PPP & IP Routing145 / 3623EC 17766 AAAA TCZZA Ed. 018.4.7 NAPT and STWireless TransparencyAs described in subsection 8.4.6, the STWireless can performNAPT to decouple your local IP addresses from the public IPaddress negotiated during a PPP session.However, this feature comes at the expense of the STWirelesstransparency. This because a number of protocols that are layeredon top of either TCP/IP, or UDP/IP do not adhere to the ISO/OSIreference model.Note: The ISO Open Systems Interconnection (OSI) referencemodel promotes the layered implementation of communicationsprotocol stacks. Layers from protocol stacks implementedaccording to this model can be changed without affecting theupper or lower layers."Consequences of NAPT on Layers"STWireless Solutions"ATMFĆ25"Via the PPPoAĆtoĆPPTP Relay"PPPĆtoĆDHCP Spoofing.An important consequence is that changing IP addresses, orTCP/UDP ports via NAPT affects the other layers as well.Due to these changes, applications that are the ultimateconsumers of the protocols cannot decode the informationcorrectly anymore.

STWireless solutionsVia the PPPĆtoĆPPTPRelayResult8 Data Services - PPP & IP Routing146 / 362 3EC 17766 AAAA TCZZA Ed. 01The STWireless offers some solutions to cope with this situation.Basically these solutions boil down in transporting Public IPaddresses transparently through the STWireless towards a devicewhere a more advanced NAT, and/or PAT can be performed.Some solutions are described in the following paragraphs:"Via the PPPĆtoĆPPTP Relay"PPPĆtoĆDHCP Spoofing.You might consider the following setup below (which can be usedonly for wired LANs:Step Action1 Install a second Ethernet PCĆNIC, next to the existing EthernetPCĆNIC, in a PC.2 Install an OS on this PC that has routing capabilities, e.g. WindowsNT, UNIX, Linux, etc.3 Install on this PC a NAT/PAT package that supports all TCP/IPprotocols.Now this PC can act as some 'home gateway'.4 Connect an Ethernet port of the STWireless to one of two PC'sEthernet PCĆNIC.5 Connect your local LAN to the second Ethernet PCĆNIC.By setting up a PPTP tunnel from the 'home gateway', the Public IPaddress is transported transparently through the STWireless toend up in the 'home gateway', where more complex NAT, and/orPAT operations can be performed.

PPPĆtoĆDHCP SpoofingResult8 Data Services - PPP & IP Routing147 / 3623EC 17766 AAAA TCZZA Ed. 01A second technique is to use the PPPĆtoĆDHCP Spoofing feature ofthe STWireless. The network configuration is practically identicalto the one described above, for wired LANs applicable only:Step Action1 Install two Ethernet PCĆNICs in a PC.2 Install an OS on this PC that has routing capabilities, e.g. WindowsNT, UNIX, Linux, etc.3 Install on this PC a NAT/PAT package that supports all TCP/IPprotocols.Now this PC can act as some 'home gateway'.4 Connect (one of) the Ethernet interface(s) of the STWireless to thePC's Ethernet PCĆNIC port.5 Connect your local LAN to the other Ethernet PCĆNIC.6 Configure the PC (acting as 'home gateway') as DHCP client.7 Configure the STWireless as DHCP server.8 DHCP in the STWireless must be configured for DHCP Spoofing.See subsection 11.3.4 for more information.9 At least one PPP connection must begin with the mnemonic "DHCP"in its phonebook name, e.g. DHCP_Spoof.As soon as a DHCP request from the home gateway hitsthe STWireless, a PPPĆtoĆDHCP Spoofing connection is triggered.The IP parameters that are negotiated with the remote peer, arecarried up to the home gateway via a DHCP reply message.

8 Data Services - PPP & IP Routing148 / 362 3EC 17766 AAAA TCZZA Ed. 01

IntroductionIn this chapter9 Data Services - Classical IP & IP Routing149 / 3623EC 17766 AAAA TCZZA Ed. 019 Data Services - Classical IP & IP RoutingClassical IP is a popular term for RFC1577: Classical IP and ARPover ATM . This RFC describes how a classical IP network can becreated with ATM technology."Classical" refers to the way IP operates in legacy (W)LANs. i.e. IPcommunication between nodes within the same IP subnet is madepossible by the shared nature of popular (W)LAN media (e.g.Ethernet) and their inherent broadcast capabilities.For communication between IP subnets, routers do intervene.In the following, Classical IP will be referred to as CIP.Topic SectionPreparatory Steps 9.1CIP Configuration for a LIS 9.2Using CIP & IP Routing 9.3CIP Configuration 9.4Advanced CIP Configurations 9.5

FeaturesWhat you should knowin advanceSTWirelessPC(s)9 Data Services - Classical IP & IP Routing150 / 362 3EC 17766 AAAA TCZZA Ed. 019.1 Preparatory StepsClassical IP:"Next to PPPoA, is a second standardized method for creatingIP networks on top of ATM technology"Is traditionally well supported by ATM access routers at theremote end of the connection"Similar to Bridging, provides "always on" type of connections"Supports up to 12 concurrent virtual channels assigned to CIP."The VPI/VCI value of the VC(s) to use on the ADSL line"CIP connection service must be supported on this VC"The remote access device must issue and respond toInATMARP messages.Note: If connectivity to multiple remote organizations is required,you need additional sets of these parameters.The STWireless comes with four preconfigured CIP entries.If the SP(s) impose CIP settings which differ from the STWirelessdefaults, perform the necessary adjustments via the STWirelessweb pages.See section 9.4 for more information.In CIP mode, the STWireless exchanges IP packets withcomputers on your local network. As a consequence all that isrequired on your local PC(s) is "standard" TCP/IP.Prior to configuring CIP, you must establish IP connectivity with theSTWireless. The easiest method is to configure your PCs as DHCPclients. By default the STWireless acts as DHCP server and leasesIP addresses to local PCs during startup.See subsection 11.1.4 for more information.

IntroductionIn this section9 Data Services - Classical IP & IP Routing151 / 3623EC 17766 AAAA TCZZA Ed. 019.2 CIP Configuration for a LISIn this section the basic procedure to enable connectivity in aLogical IP Subnet (LIS) via the ADSL line is described.Topic SeeGeneral CIP Configuration Procedure 9.2.1Retrieving LIS Parameters 9.2.2Implicit Assignment Mechanism 9.2.3Explicit Assignment Mechanism 9.2.4Configuring the STWireless for CIP 9.2.5Adding Appropriate Routes to the Routing Tables. 9.2.6Example of a CIP LIS Configuration 9.2.7

Decision procedure9 Data Services - Classical IP & IP Routing152 / 362 3EC 17766 AAAA TCZZA Ed. 019.2.1 General CIP Configuration ProcedureDue to the many decisions that must be made in order to be ableto configure the STWireless to be an active member of a LIS, theprocedure to be followed is best retrieved from the followingdecision table:Step Decision and/or Action See1Answer Action and DescriptionYe sNo You can create the LIS with IP parameters ofyour choice. See topic 'Creating a New LIS' ofsubsection 9.2.2.In case you create a new LIS, you must createthe LIS at both end of the ADSL connection, i.e.at the local, and on the remote side.You must retrieve the LIS IP parameters towhich your local configuration must adhereto. See topic 'Configuration for an Existing LIS'of subsection 9.2.2.Are you configuring the STWireless for an existing LIS ? 9.2.22 Retrieve the appropriate LIS parameters, and check onwhich VCs (identifiable by their VPI/VCI values) your serviceprovider enabled the CIP packet service.9.2.23 If needed, create a CIP phonebook entry, i.e. a CIP PVC, inthe 'Phonebook' web page.9.44Is the remote access router a RFC1577 compliant device,e.g. another STWireless?Answer Action and DescriptionYe sNo The remote access router will not respond to'InATMARP' requests submitted by theSTWireless, thus the CIP PVC must be explicitlyassigned to the CIP member.The remote access router will respond to'InATMARP' requests, thus the CIP PVC can beimplicitly assigned to the CIP member.See9.2.39.2.45 If needed, create a CIP member in the 'CIP Interfaces' tableof the 'CIP' web page.9.46 Add appropriate IP routes to the STWireless via the 'IProute' table on the 'Routing' web page.9.2.67 Add appropriate IP routes in you PC(s). 9.2.6

LISLIS parametersConfiguration for anexisting LISCreating a new LIS9 Data Services - Classical IP & IP Routing153 / 3623EC 17766 AAAA TCZZA Ed. 019.2.2 Retrieving LIS ParametersThe LIS is an important CIP concept. It is a group of IP machinesconfigured as members of the same IP subnet. In other words:they share the same IP network and subnetwork numbers.In most cases this LIS will be a corporate (W)LAN/WANenvironment, which is interconnected via the ADSL/ATM network.In order to be able to properly configure your STWireless forsharing the same logical IP subnet, you must know the followingLIS parameters:"The IP network number"The IP subnetwork number"The remote access router's RFC1577 compliancy state"The remote access router IP address, in the case it is notRFC1577 compliant.Of course, in case you know the IP address of one member of theLIS, and the associated netmask, you also have enoughinformation.For an existing LIS, you must configure the STWireless CIPsettings, according to the existing LIS parameters.If the default CIP member's IP parameters, and the CIPconnection's remote IP address, configured in the STWireless,match with these parameters, nothing needs to be configured.However, make sure that the CIP member's local IP address is notambiguous within the LIS.In the case of creating a new LIS, you are recommended to usethe default CIP configurations of the STWireless. In case theremote access router is also a STWireless, best results areassured.Note: Both ends of the LIS must be properly configured forconnectivity, inclusive the routing tables.

Implicit assignmentImplicit assignmentexampleNote9 Data Services - Classical IP & IP Routing154 / 362 3EC 17766 AAAA TCZZA Ed. 019.2.3 Implicit Assignment MechanismIf the remote side is RFC1577 compliant, e.g. anotherSTWireless, your local STWireless is able to retrieve the remoteIP address of the CIP PVC, by issuing an InATMARP request on thatPVC.That way, you must not specify an IP address for the CIP PVCs youadd to the 'CIP Connections' table, it will be implicitly assignedwhen connecting to the LIS.The sequence below describes an example of an implicitassignment mechanism:Phase Decision and Description1 Suppose you added a CIPPVC without supplying an IP address (e.g.CIPPVC2).2 The STWireless will automatically issue an InATMARP request onthis PVC.3 Is the remote side is RFC1577 compliant ?Ye s No4 It responds with an InATMARPreply, containing its IP address.The CIP's remote IP address in the'CIP Connections' table iscompleted."Unresolved" will show up in the'Remote IP Address' field.Consequently the CIPPVC cannotbe assigned and IP connectivitywill not exist with the remotehi5 Does the remote address share aLIS with a local CIP member ?machine.Ye s No6 the CIPPVC isassigned to thismember.Connectivity isassured."Unresolved"will show up.No connectivityexists.The grey shaded area of the table indicates the sequence of acorrect RFC1577 compliant LIS interconnection.

Explicit assignmentExplicit assignmentexampleNote9 Data Services - Classical IP & IP Routing155 / 3623EC 17766 AAAA TCZZA Ed. 019.2.4 Explicit Assignment MechanismIn the case of a remote access server which is not RFC1577compliant, it will not respond to InATMARP requests.As a consequence, the STWireless can not retrieve the remote IPaddress to assign the CIP PVC to the CIP member.Therefore you must explicit assign a remote IP address to the CIPPVC.The default configuration of the STWireless is an example of theexplicit assignment of a CIP PVC to a CIP member:In the 'CIP Interfaces' table, the CIP member is configured asfollows:In the 'CIP Connections' table, the remote IP address is staticallyconfigured:Consequently, CIPPVC1 is explicitly assigned to cip0.Both local and remote IP addresses must fall within the same IPnetwork and IP subnetwork, according the LIS parameters.

IntroductionConfiguration of theSTWireless'Phonebook' web pageConfiguration of theSTWireless 'CIP' webpage9 Data Services - Classical IP & IP Routing156 / 362 3EC 17766 AAAA TCZZA Ed. 019.2.5 Configuring the STWireless for CIPAfter retrieving the LIS parameters, you must configure theSTWireless, according to these parameters.This section describes in short the global procedure forconfiguring your STWireless 'Phonebook',and'CIP' web page.By default the STWireless is configured for a CIP VC as used inthe example of section 9.2.7. If this VC is appropriate to your,and/or the ADSL provider's needs, nothing has to be configuredin the STWireless phonebook.If this VC does not match the requirements, three other CIPphonebook entries are available to add.However, in the case none of the entries match, you must add aCIP phonebook entry yourself.Adding CIP phonebook entries is described in subsection 9.4.1.The default CIP phonebook entry mentioned above is by defaultconfigured for a LIS according to the example of section 9.2.7. Ifthis LIS configuration meets your requirements, nothing needs tobe configured, and your STWireless is ready for use.However, if additional configuration is needed, you can configureCIP members yourself.The assignment of your CIP PVC to the CIP member can be doneimplicit, or explicit, according the RFC1577 compliancy of theremote access router.Configuration of the STWireless 'CIP' web page is fully describedin subsection 9.4.2.

Introduction to routingConfiguring theSTWireless for LISconnectivity, basic9 Data Services - Classical IP & IP Routing157 / 3623EC 17766 AAAA TCZZA Ed. 019.2.6 Adding Appropriate Routes to the Routing TablesIP routing is a very important aspect for a LIS configuration.This subsection describes how you can ensure endĆtoĆendconnectivity for a CIP environment."Configuring the STWireless for LIS Connectivity, Basic"Configuring the STWireless for LIS Connectivity, Advanced"Configuring your (W)LAN PCs for EndĆtoĆEnd Connectivity"Routing Table Configuration.Generally, for proper CIP routing, an IP route pointing to theremote access router must exist in your STWireless's IP routingtable.If the remote access router is RFC1577 compliant, no routes forLIS connectivity need to be configured by yourself for theSTWireless's IP router. This because it automatically adds twonecessary routes as soon you configure the CIP member, i.e. twodefault gateways, thus any (0.0.0.0/0) as source address, andwith:"The LIS's local CIP member's IP address, i.e. the STWireless'sCIP interface address as destinationand"The LIS's IP subnetwork (based on the CIP member's IPparameters) as destination.As the RFC1577 compliant remote access router, falls within thesame LIS as the STWireless CIP member, it is also a member ofthe second route's destination IP subnetwork.If the remote access router is not RFC1577 compliant, you mustadd this default route (with the known remote IP address) yourself.

Configuring theSTWireless for LISconnectivity, advancedConfiguration your(W)LAN PCs forendĆtoĆendconnectivityRouting tableconfiguration9 Data Services - Classical IP & IP Routing158 / 362 3EC 17766 AAAA TCZZA Ed. 01The possibility exists to add routes yourself, e.g. to be morespecific in the source IP address pool.The default added routes have any as source address, meaningthat all local hosts can use this gateway to connect to the LIS viathe CIP interface.However, you might want to embed restrictions in LIS access bycreating a subnet in your (W)LAN, e.g. 10.0.1.x, and privilegeaccess to the LIS - and its beyond (W)LAN - to this subnet byadding a route, pointing to the remote access router (implicit, orexplicit), but with source IP address pool 10.0.1.0/24.Of course, then the default IP routes, configured by default, mustbe deleted.In order to have endĆtoĆend connectivity from your PCs to theremote side of the CIP connection and beyond, you must addroutes having the STWireless Ethernet interface IP address asgateway.By specifying 0.0.0.0/0 as destination, and the STWireless localEthernet IP address as gateway, the STWireless is configured asthe default gateway for all connection requests.However, you can specify a destination IP address pool; e.g. if theremote LAN's IP subnetwork is 192.6.11.x, you can add routes inyour PC's routing table with destination 192.6.11.0/32, and theSTWireless as gateway.Configuring routes for the STWireless is described in subsection11.4.2.

Configuration figureLocal premissesconfiguration9 Data Services - Classical IP & IP Routing159 / 3623EC 17766 AAAA TCZZA Ed. 019.2.7 Example ConfigurationThe configuration of a Classical IP LIS is illustrated with thefollowing example:ETHATMATMETHSymbolizes an VP/VC cross-connect10.0.0.2255.0.0.010.0.0.138<-0.0.0.010.0.0.1255.0.0.010.0.0.138<-0.0.0.010.0.0.138255.0.0.0172.16.1.2255.255.255.0192.168.0.1255.0.0.0192.168.0.2255.255.255.00.0.0.0.->192.168.0.18/80 8/80172.16.1.2<-0.0.0.0172.16.1.1255.255.255.010.0.0.0->172.16.1.1LIS 172.16.1.xSubnet 10.1Local Servers12In the drawing above a LIS, 172.16.1.x, represented by theellipse, runs between the STWireless (1) and the remote accessrouter (2).At the local premisses an IP network, 10.x.x.x, is created.An IP address is configured on the Ethernet port (10.0.0.138).On the ADSL side of the STWireless (1) one CIP member is bydefault enabled. This CIP member is configured with IP address172.16.1.1 and is part of the LIS 172.16.1.x.One VC in the STWireless (1) phonebook (CIPPVC1), is explicitlyassigned to this CIP member. This VC(8/80) is crossĆconnected tothe remote destination.

Remote premissesconfigurationRouting configurationNote9 Data Services - Classical IP & IP Routing160 / 362 3EC 17766 AAAA TCZZA Ed. 01At the remote ADSL side, the CIP LIS is terminated by the remoteaccess router (2) and IP packets are forwarded to local servers, orthe Internet and vice versa.Here, the CIP member is configured with IP address 172.16.1.2and is part of the same LIS 172.16.1.x.Additionally, a VC, with the same VPI/VCI values 8/80, is assignedto this CIP member (e.g. implicit assignment, because STWireless(1) is RFC1577 compliant).The routing engine must be configured with routes to the finaldestinations.For the given example, the configuration is as follows:"STWireless (1) has its default route pointing to the remoteaccess router (2)The local PCs of IP network 10.0.0.x have default gatewayspointing to STWireless (1)"The remote access router (2) has a route for Net10"(10.0.0.0) pointing to STWireless (1)The remote IP network 192.168.0.x has a default gatewaypointing to access router (2).You will notice that the example relies exclusively on Private IPaddresses. Depending the application though, other IP addressesin combination with NAPT (configurable via the CLI) can be used.

CIP operationClassical IP andSTWirelessConfiguration andoperation example9 Data Services - Classical IP & IP Routing161 / 3623EC 17766 AAAA TCZZA Ed. 019.3 Using CIP & IP RoutingSimilar to classical LAN networking, IP Routing and CIP adhere tothe "alwaysĆon" concept. That is, no special actions (e.g. dialing)must be undertaken prior to IP connectivity.IP packets sourced by local PCs, arrive via the Ethernet segment inthe STWireless. The latter makes routing decisions based on thedestination IP address of the packet. If the packet ends up in theCIP member, it will on its turn determine to which VC it has tooutput the packet.You can check IP connectivity from any PC on the local Ethernetsegment. Therefor, ping the IP address at the far end of the virtualconnection; e.g. for the example of subsection 9.2.7, this wouldbe 172.16.1.2, or thus ping 172.16.1.2.The IP router in the STWireless forwards packets between theEthernet port and the Classical IP entity sitting on top of theADSL/ATM port. In turn, the CIP entity determines which VC it hasto output the packet to, prior to ATM encapsulation.The figure below provides an overview of the STWirelessrearĆtoĆfront end Classical IP operation:Virtual ChannelsVPI/VCI:8/80VPI/VCI:8/81VPI/VCI:8/82VPI/VCI:8/83Virtual Channel Resolving,ATM encapsulationIP RoutingIP Packet EthernetCIPMember

IntroductionIn this section9 Data Services - Classical IP & IP Routing162 / 362 3EC 17766 AAAA TCZZA Ed. 019.4 CIP ConfigurationThe STWireless allows local configuration via the STWirelessweb pages.This section describes the configuration of CIP entries, and how touse the 'CIP' web page.Topic SeeCIP Phonebook Entries 9.4.1CIP Entries 9.4.2

In this subsectionCIP phonebook entriesAdding/deletingphonebook entries9 Data Services - Classical IP & IP Routing163 / 3623EC 17766 AAAA TCZZA Ed. 019.4.1 CIP Phonebook Entries"CIP Phonebook Entries"Adding CIP Phonebook Entries"Deleting CIP Phonebook Entries.See subsection 10.2.2 for more information.Basic to the STWireless VC pool management, is the 'Phonebook'web page.The STWireless in its default state features the following CIPrelated phonebook entries:See section 10.2 for more information.

In this subsectionThe STWireless 'CIP'web page9 Data Services - Classical IP & IP Routing164 / 362 3EC 17766 AAAA TCZZA Ed. 019.4.2 CIP Entries"The STWireless 'CIP' Web Page"The 'CIP Interfaces' Table"'CIP Interfaces' Table Components"The 'CIP connections' Table"'CIP Connections' Table Components"Adding CIP members"Assigning CIP PVCs to CIP members"Deleting CIP Entries.Clicking in the left pane of the STWireless web pages,pops up the 'CIP' web page:

The 'CIP Interfaces'table'CIP Interfaces' tablecomponents9 Data Services - Classical IP & IP Routing165 / 3623EC 17766 AAAA TCZZA Ed. 01The following figure shows the 'CIP Interfaces' table:The following fields are shown:Field DescriptionName Indicates the CIP member name.All CIP members are named as cipX, where Xis a number.Local IPAddressIndicates the IP address of the local ADSL side of the LIS, i.e.the IP address of your CIP interface.Mask Indicates the netmask/subnetmask of the local IP address.Action This field contains one of the two following action buttons:Button ActionDelete an existing member from thelist.Add a CIP member to the list.

The 'CIP Connections'table'CIP Connections' tablecomponents9 Data Services - Classical IP & IP Routing166 / 362 3EC 17766 AAAA TCZZA Ed. 01The following figure shows the 'CIP Connections' table:The following fields are shown:Field DescriptionDest Indicates the CIP VC phonebook name.Remote IPAddressIndicates the remote IP address of the remote ADSL side of the LIS, i.e. the IP address of the remote CIP interface.Note: In case the VC is not crossĆconnected, or implicitassignment was not successful, this field shows Unresolved".Action This field contains one of the two following action buttons:Button ActionDelete an existing connection from thelist.Add a CIP connection to the list.

Adding CIP membersResult9 Data Services - Classical IP & IP Routing167 / 3623EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1 Browse to the 'CIP' web page:The bottom row of the 'CIP Interfaces' table allows addition of a newCIP member.2Fill in the following CIP member parameters:Value DescriptionLocal IPAddressMask The associated netmask/subnetmask forthat local IP address.The IP address at the CIP member at yourlocal side of the LIS.3Click and to finish the procedure.A CIP member of the LIS is created at your STWireless's CIPinterface side of the LIS. The local IP address is added to the 'IPAddress' table.Two default routes are added to the 'IP Route' table, both pointingto the STWireless as gateway, but the first with the CIP memberitself as destination, and the second with the LIS subnetwork IPaddress pool as destination.

Assigning CIP PVCs toCIP membersResult9 Data Services - Classical IP & IP Routing168 / 362 3EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1 Browse to the 'CIP' web page:The bottom row of the 'CIP Connections' table allows addition of anew CIP connection.2In the 'Dest' column of the bottom row, click and select the CIPPVC you want to assign.3Depending the RFC1577 compliancy of the remote access router,the following must be filled in, in the 'Remote IP address' column:Compliancy Remote IP AddressYESNO You must fill in the exact IP addressof the remote access router; thePVC is explicitly assigned to theCIP member.You don't have to fill in anything; theInATMARP reply will implicitlyassign the PVC to the CIP member.3Click and to finish the procedure.A CIP PVC is assigned, and added in the 'CIP Connections' table.

Deleting CIP entries9 Data Services - Classical IP & IP Routing169 / 3623EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1Browse to the 'CIP' web page.2Select the CIP connection, and/or CIP member you want todelete, and click3Click to store the changes in permanent memory.

IntroductionIn this section9 Data Services - Classical IP & IP Routing170 / 362 3EC 17766 AAAA TCZZA Ed. 019.5 Advanced CIP ConfigurationsThe example of subsection 9.2.7 showed a configuration with asingle VC, used for ADSL connectivity within one LIS.In this section the use of multiple VCs to connect to a LIS, and theconnectivity to multiple LISs is described.Topic SeeConfiguring multiple CIP PVCs 9.5.1Creating multiple CIP members 9.5.2

Multiple VCs for oneLISExampleProcedure9 Data Services - Classical IP & IP Routing171 / 3623EC 17766 AAAA TCZZA Ed. 019.5.1 Configuring Multiple CIP PVCsMultiple VCs can be assigned, either explicit or implicit, to CIPmembers in the 'CIP Connections' table.By doing so, local PCs can simultaneously access multiple ADSLnodes of one LIS.The following figure shows an example of such a configuration:PVC1172.16.0.310.1.0.110.1.0.2ETHATM172.16.0.1 10.1.0.138ETHATMLIS 172.16.x.xETHATMPVC2172.16.0.210.1.0.13810.3.0.13810.1.0.110.3.0.1(VPI/VCI: 8/80)8/81PVC38/808/818/808/81(VPI/VCI: 8/81)8/80(VPI/VCI: 8/81)Proceed as follows to assign multiple CIP PVCs to one CIPmember:Step Action and Description1 Browse to the 'CIP' web page.The bottom row of the 'CIP Connections' table allows addition of anew CIP connection.2In the 'Dest' column of the bottom row, click and select the CIPPVC you want to assign.E.g., you can select the preconfigured CIPPVC2, 3, or 4 if these aresupported for the CIP packet service by the ADSL provider.

ResultNote9 Data Services - Classical IP & IP Routing172 / 362 3EC 17766 AAAA TCZZA Ed. 01Step Action and Description3Depending the RFC1577 compliancy of the remote access router, thefollowing must be filled in, in the 'Remote IP address' column of theCIP PVC:Compliancy Remote IP AddressYESNO You must fill in the exact IPaddress of the remote accessrouter; the PVC is explicitlyassigned to the CIP memberYou don't have to fill in anything;the InATMARP reply will implicitlyassign the PVC to the CIPmember.4Click5 Repeat steps 2, 3 and 4 until all provided crossĆconnects are addedto the 'CIP Connections' table.6Click to store the changes in permanent memory.The CIP PVCs you have added, appear in the 'CIP Connections'table.However, check whether the remote IP addresses get resolved onthese new CIPPVCs.If yes, check IP connectivity with the remote device via a ping utilityon one of the local PCs.As your SP is responsible for the crossĆconnects, check whether hesupports this advanced configuration.

Multiple VCs formultiple LISsExample9 Data Services - Classical IP & IP Routing173 / 3623EC 17766 AAAA TCZZA Ed. 019.5.2 Creating Multiple CIP Members.You can create multiple CIP members, and consequently theSTWireless can be part of multiple LISs.By doing so, your PC(s) can connect to multiple LISs.The following figure shows an example of such a configuration:ETHATMETHATMETHATM10.2.0.110.2.0.210.2.0.138172.16.0.2(VPI/VCI:8/80)PVC1LIS:172.16.x.xLIS:192.168.0.xPVC2192.168.0.2192.168.0.110.1.0.13810.1.0.210.1.0.1InternetGatewayINTERNETLocal Servers8/808/81172.16.0.1(VPI/VCI:8/81)8/808/81

Adding CIP membersResultNote9 Data Services - Classical IP & IP Routing174 / 362 3EC 17766 AAAA TCZZA Ed. 01Proceed as follows to add multiple CIP members to the 'CIPInterfaces' table:Step Action and Description1 Browse to the 'CIP' web page.The bottom row of the 'CIP Interfaces' table allows addition of a newCIP member.2Fill in the following CIP interface parameters:Value DescriptionLocal IPAddressMask The associated netmask/subnetmask forthat local IP address.The IP address at the additional CIPmember.3Click4 Repeat steps 2 and 3 for each LIS you want to connect to.5 For each additional CIP member, at least one CIP PVC must beassigned. This can be done implicit, or explicit (according eachremote side's RFC1577 compliancy).See the procedure in subsection 9.5.1 for adding CIP PVCs to the'CIP Connections' table.6Click to store the changes in permanent memory.The CIP members you created, appear in the 'CIP Interfaces'table.The CIP PVCs, you have added appear in the 'CIP Connections'table.However, check whether the remote IP addresses get resolved onthese new CIP members and their associated CIP PVCs.If yes, check IP connectivity with the LISs via a ping utility on one ofthe local PCs.As your SP is responsible for the crossĆconnects, check whether hesupports this advanced configuration.

175 / 3623EC 17766 AAAA TCZZA Ed. 01Speed TouchWirelessNetworking Services

IntroductionIn this chapter10 Networking Services - ATM177 / 3623EC 17766 AAAA TCZZA Ed. 0110 Networking Services - ATMAll data arriving at and departing from your STWireless via theADSL line is carried in ATM cells.In this way, ATM is the fundamental communication language"for the STWireless towards the remote devices.Topic SeeThe ATM Packet Switching Technology 10.1The STWireless Phonebook 10.2

ATM SwitchingIn this section10 Networking Services - ATM178 / 362 3EC 17766 AAAA TCZZA Ed. 0110.1 The ATM Packet Switching TechnologyATM is a connectionĆoriented packet switching technology usingfixedĆsize packets, called cells.These cells consist of a header and a payload and are switchedthrough a public or private ATM network depending on thecontents of the header.EndĆtoĆend connections are formed by crossĆconnecting individualATM segments in ATM switches.Topic SeeATM Parameters 10.1.1ATM and the STWireless 10.1.2ATM and Interfaces 10.1.3

Virtual channelsVCs and the STWirelessChannel identifiers10 Networking Services - ATM179 / 3623EC 17766 AAAA TCZZA Ed. 0110.1.1 ATM ParametersATM uses VCs to create individual communication links betweennetwork nodes. ATM uses two types of VCs:"Permanent Virtual Channels (PVCs) are static connectionsbetween network nodes that are configured statically.The nodes of the connection operate as if they are connectedwith a dedicated physical line."Switched Virtual Channels (SVCs) are similar to voicetelephone network connections. These are temporaryconnections between any two end points on the network andare configured via signaling. A Switched VC (SVC) is createddynamically for each session and released when theinformation exchange is complete.Currently all STWireless ATM connections are static, i.e. of typePVC.Each ATM cell carries two labels called VPI and VCI as part of itsheader.An ATM channel, commonly referred to as virtual channel, is fullyidentified by these two labels. Therefore, multiple ATM channelscan reside on your ADSL line.

EndĆtoĆend ATMconnectivitySTWireless vs. remotedestinationATM provisionSTWireless defaultPVCs10 Networking Services - ATM180 / 362 3EC 17766 AAAA TCZZA Ed. 0110.1.2 ATM and the STWirelessThe following figure provides an overview of the endĆtoĆendarchitecture of the ATM connectivity; from your STWireless to theremote access devices.Corporate Access PointInternetISP Access Point ATM CrossĆconnectATM CrossĆconnectADSL LineMultiple ATMvirtual channelsEthernetThis channel is not crossĆconnectedSymbolizes a cross connection.Hence no endĆtoĆend connectivity!Remote LANPractically speaking, a number of VCs to one, or multiple remotedestination(s) can start from/are terminated at the STWireless.By default, a number of channels are terminated in theSTWireless.EndĆtoĆend ATM connectivity is the responsibility of localoperators. There might be regional differences in the type andnumber of ATM channels that are crossĆconnected.If problems are encountered, check with your local operator formore information.See Appendix E for the specific default VPI/VCI values.

ATM traffic handlingEthernet port10 Networking Services - ATM181 / 3623EC 17766 AAAA TCZZA Ed. 0110.1.3 ATM and InterfacesATM traffic, arriving at the STWireless, is switched to the Ethernetport, and WLAN hub.Inside ATM VCs any protocol can be transported. However, at bothendpoints - that is where the ATM channels are terminated -, thesame protocol must be supported. If not, there will be noendĆtoĆend connectivity.This port terminates a number of ATM connections and extractsframes from arriving cells and encapsulates frames in departingcells.Only frames recognized/supported by the STWireless ona particular ATM connection are extracted, or encapsulated.Currently the supported encapsulations are:"For Bridged connections:RFC 1483, Ethernet V2.0/IEEE 802.3 bridged PDUs for boththe LLC/SNAP method and VCĆMUX method"For MER connections:RFC 1483, Ethernet V2.0/IEEE 802.3 bridged PDUs for boththe LLC/SNAP method and VCĆMUX method"For PPPoA/PPTP connections:RFC 2364, PPP PDUs for both the LLC/NLPID method andVCĆMUX method"For Routed PPP connections:RFC 2364, PPP PDUs for both the LLC/NLPID method andVCĆMUX method"For Routed CIP connections:RFC 1483 LLC/SNAP method for Routed PDUs.

IntroductionIn this section10 Networking Services - ATM182 / 362 3EC 17766 AAAA TCZZA Ed. 0110.2 The Speed Touch Wireless PhonebookThe STWireless phonebook is like any ordinary phonebook:A repository for names and numbers".However, in contrast to a standard phonebook, it containsadditional connectivity information.Basic to the STWireless ADSL router operation are ATM VCs. TheSTWireless phonebook is the management tool for all possibleATM VC connections.This chapter describes how to use the STWireless phonebook,and consequently how to manage this VC pool.Topic SeeThe 'Phonebook' Web Page 10.2.1Using the Phonebook 10.2.2AutoPVC and the Phonebook 10.2.3

In this subsectionThe STWireless'Phonebook' web page10 Networking Services - ATM183 / 3623EC 17766 AAAA TCZZA Ed. 0110.2.1 The STWireless 'Phonebook' Web Page"The STWireless 'Phonebook' Web Page"The 'Phonebook' Table"'Phonebook' Table Components"Phonebook Defaults"The 'AutoPVC' Table.Clicking in the left pane of the STWireless webpages, pops up the 'Phonebook' web page (See section 18.2 formore information):

The 'Phonebook' table'Phonebook' tablecomponents10 Networking Services - ATM184 / 362 3EC 17766 AAAA TCZZA Ed. 01The following figure shows an example of the 'Phonebook' table ofthe 'Phonebook' web page:The following fields are shown:Field DescriptionName Indicates the name, or alias of the virtual connection phonebookentry. Any name can be given to an entry.Address Indicates the VPI, and VCI value of the ATM VC, terminated on theADSL port, for the phonebook entry.The allowed VPI range: from 0 up to 15.The allowed VCI range: from 32 up to 511.

10 Networking Services - ATM185 / 3623EC 17766 AAAA TCZZA Ed. 01Field DescriptionType Represents the sort of packet services that are supported on theATM VC.It can take the following values:Value Packet Servicebridgeppp PPPoAĆtoĆPPTP RelayingSee chapter 7 for more information.IP Routing & PPP.See chapter 8 for more information.IP Routing & CIP.See chapter 9 for more information.IEEE802.1D Transparent BridgingSee chapter 5 for more information.MAC encapsulated RoutingSee chapter 6 for more information.cipany Any kind of packet service is allowed.Avail Indicates the availability of the VC phonebook entry. An entry isavailable if it is not configured in any packet service web page, ornot in temporary use by a packet service.AutoPVCIndicates whether the entry is listed in the 'AutoPVC'list (yes), or not(no).If the ATM VC related to the phonebook entry is listed in the'AutoPVC' list, the phonebook entry row is highlighted by a yellowbar.See subsection 10.2.3 for more information.Action Contains one of the two following action buttons:Button ActionDelete a phonebook entry from the list.Add a phonebook entry to the list.

Phonebook DefaultsThe 'AutoPVC' table10 Networking Services - ATM186 / 362 3EC 17766 AAAA TCZZA Ed. 01The phonebook entries, configured by default, are listed inappendix E.The following figure shows an example of the 'AutoPVC' table:Any PVC, identified by its VPI/VCI, communicated via AutoPVC, isadded to the 'AutoPVC' table. If AutoPVC is not supported at theremote side, the 'AutoPVC' table stays empty.See subsection 10.2.3 for more information.

IntroductionIn this subsectionRestrictions for addingphonebook entries10 Networking Services - ATM187 / 3623EC 17766 AAAA TCZZA Ed. 0110.2.2 Using the PhonebookThe main function of the STWireless phonebook is to present aninstant overview of all possible entries and their status.Another important function is that it helps you to navigate throughthe various STWireless VC connection possibilities."Restrictions for Adding Phonebook Entries"Adding Phonebook Entries"Deleting Phonebook Entries.Although you are free to give any name to a phonebook entry, afew restrictions apply:"You may not provide an entry with a name which already issupplied in the 'Phonebook' table."Phonebook entries, which are intended to be used for thePPPoAĆtoĆPPTP Relaying packet service may not start with acapital 'P', or a capital 'T'."In case you want to use the STWireless PPPĆtoĆDHCPSpoofing feature, the name of the PPP entry you intend to usewith this feature, must start with 'DHCP', e.g. DHCP_Spoof1,DHCP_2, etc.Each entry in the STWireless phonebook must have a unique VC,i.e. a unique VPI/VCI combination. Adding a phonebook entrywith a VPI/VCI, which is already used in the 'Phonebook' table,will result in an error message.

Adding phonebookentries10 Networking Services - ATM188 / 362 3EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1Browse to the 'Phonebook' web page:2Scroll to the bottom row of the 'Phonebook' table:The bottom row of the table allows addition of a new entry.3In the 'Name' column of the bottom row, enter a name of yourchoice for identifying the phonebook entry.4In the 'Address'column, enter the VC's VPI.VCI values.In most cases these values are provided by your SP.5In the 'Type' column of the bottom row, click and select thepacket service of your choice, or choose any.6Click and to finish the procedure.

Deleting phonebookentries10 Networking Services - ATM189 / 3623EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1Browse to the 'Phonebook' web page.2Select the phonebook entry you want to delete, and click3If the phonebook is currently in use, i.e. is connected, orconfigured, you are asked to confirm the deletion of the entry:4Make the following selection:If ... Then click ...You are sure that the phonebook entrymay be deleted ...The phonebook entry, which is in use,may not be deleted ...4Click to store the changes in permanent memory.

AutoPVCOperation of AutoPVCCriterion 1Criterion 210 Networking Services - ATM190 / 362 3EC 17766 AAAA TCZZA Ed. 0110.2.3 AutoPVC and the PhonebookThe default VCs, can be remotely modified via the AutoPVCfeature of the STWireless.AutoPVC operates only in conjunction with the Alcatel DSLAM andSTWireless, and offers the functionality that user VCs that are tobe terminated on the Ethernet port, can be notified by theSTWireless.Basically the following steps are executed:1. The ADSL operator configures VCs on the DSLAM2. Via AutoPVC the VPI/VCI values are communicated to the STWireless3. AutoPVC messages are subsequently processed by theSTWireless, according to the two criteria listed below.Any PVC, or VPI/VCI communicated via AutoPVC is added to theAutoPVC list on the 'Phonebook' web page.If AutoPVC is not supported, this list is empty.An AutoPVC VPI value in the range from 0 up to 15 will be notified in the AutoPVC list.If the VPI/VCI value is used in the Phonebook, this phonebookentry will be highlighted by a yellow bar.

Example 1Example 210 Networking Services - ATM191 / 3623EC 17766 AAAA TCZZA Ed. 01If the ADSL provider configures Virtual Path (VP) 5 on the DSLAM,then the STWireless crossĆconnects VPI 5 on the ADSL line to VPI5 on the Ethernet port, and WLAN hubSuppose the ADSL provider configures one of the STWireless'sdefault terminated VCs, e.g. 8/35, on the DSLAM.VPI/VCI 8/35 will end up in the 'AutoPVC' list:As this VC matches with the Bridging entry Br1, this phonebookentry will be highlighted in the 'Phonebook' table:In this way the user can distinguish the activated VC from dummyphonebook entries.

10 Networking Services - ATM192 / 362 3EC 17766 AAAA TCZZA Ed. 01

IntroductionAim of this chapterIn this chapter11 Networking Services - IP193 / 3623EC 17766 AAAA TCZZA Ed. 0111 Networking Services - IPFor Internet access, and home networking, TCP/IP plays a crucialrole. Due to the flexibility and the multitude of TCP/IP features,numerous configurations are possible.This chapter highlights some general IP parameters and somepossible IP configurations for the below purposes:"Internet access via your SP"Private LANĆtoĆLAN interconnections over the ADSL/ATMnetwork"Local IP connectivity towards other PCs on your (W)LAN.Topic SeeGeneral IP Information 11.1Packet Services and IP Addresses 11.2STWireless and IP Addressing 11.3IP Routing 11.4

In this section11 Networking Services - IP194 / 362 3EC 17766 AAAA TCZZA Ed. 0111.1 General IP InformationTopic SeeIP Addresses and Subnet Masks 11.1.1Private vs. Public IP Addresses 11.1.2Choosing an IP Address 11.1.3Dynamic IP Address Configuration: DHCP 11.1.4

What is an IP addressNetwork part, subnetpart and host partExample: network andsubnetwork parts11 Networking Services - IP195 / 3623EC 17766 AAAA TCZZA Ed. 0111.1.1 IP Addresses and Subnet MasksAn IP address is a 32Ćbit number that uniquely identifiesa computer (i.e. an networking interface) on your network or theInternet.This number is commonly represented in dotted quad" format.Each octet (8 bits) is represented as a decimal number.Dots are used as octet separators (e.g. 10.0.0.138).Historically, an IP address consists of two parts: a network partand a host part.The network part identifies the network on which a PC resides. Thehost part identifies a particular PC on a given network.The dividing line between the network part and the host part canbe derived from the netmask or subnet mask.The 1 bits in the Subnet Mask represent the contiguous leadingbits of the IP address that has network significance.For example, an IP address is 172.16.0.2 and the subnet mask is255.255.255.0.The binary notation of the IP address equals:10101100.00010000.00000000.00000010The dotted quad notation of the subnet mask equals:11111111.11111111.11111111.00000000Since all the 1Ćbits of the subnet mask have network significance,the network part of the IP address would be: 10101100.00010000.00000000.00000010AND 11111111.11111111.11111111.00000000 10101100.00010000.00000000or 172. 16. 0.The subnet part is the remaining part 00000010or 2.

IP address networkclassesPrefix notation for IPaddressesExample: prefixnotationIP address notationand the STWireless11 Networking Services - IP196 / 362 3EC 17766 AAAA TCZZA Ed. 01By splitting up the IP address in a network part and a subnetworkpart, it is possible to divide IP addresses in four classes (In factfive).These classes are differentiated by the initial bits of an IP address:Class Range from ... up to ... Network Part BitsA 0.0.0.0 ... 127.255.255.255 8B128.0.0.0 ... 191.255.255.255 16C192.0.0.0 ... 223.255.255.255 24D224.0.0.0 ... 239.255.255.255 32A more up to date representation of subnet masks does not referto a subnet mask, but to a prefix length.The prefix number equals the number of ones in the subnet mask.For example, the subnet mask 255.255.255.0 could also bewritten as the prefix /24.For example:"IP address 10.0.0.138"netmask 255.255.255.0With the prefix method this will be written as :"prefix IP address 10.0.0.138/24In the routing table of the STWireless this notation will be used.

IntroductionPrivate IP addressesUsing privateaddressesPrivate PC(s) accessingpublic services11 Networking Services - IP197 / 3623EC 17766 AAAA TCZZA Ed. 0111.1.2 Private vs. Public AddressesPrivate PC(s) do not require access to PC(s) in other enterprises, orto the Internet. Therefore it is sufficient for the PC to have an IPaddress that is unique within the enterprise but may be ambiguousbetween enterprises and on the Internet.On the other hand there is also a need for InternetĆwide" uniqueIP addresses to allow web servers to be constantly online.The first set of addresses are called Private IP addresses; thesecond set Public IP addresses.In the examples throughout this document Private IP addresses areused for local IP configurations.Private IP addresses are defined in RFC1918 Address Allocationfor Private Internets". This RFC is categorized as "Best CurrentPractice".In principle if an IP address is assigned to a PC and the connectivityis limited to intraĆenterprise communication only, the IP address canbe assumed to be privately held.The limitation however is that communication between enterprisesand connection to the Internet itself via those private IP addressedPCs is not possible, and even not allowed.Via mediating gateways (e.g. the STWireless) private PC(s) canstill have access to external services, e.g. the Internet.

Private IP addressclassesPublic IP addressesUsing Public IPaddresses11 Networking Services - IP198 / 362 3EC 17766 AAAA TCZZA Ed. 01IANA (the Internet Assigned Number Authority), defined blocks ofIP addresses for private purposes:ClassTypeFrom To Number of NetworkNumbersA 10.0.0.0 10.255.255.255 1B 172.16.0.0 172.16.255.255 16 (Contiguous)C 192.168.0.0 192.168.255.255 256 (Contiguous)A Public IP address is an officially assigned IP address by anInternet Registry and is guaranteed to be worldwide unique.As a consequence the PC to which the address is assigned, hasworldwide Internet connectivity.Public IP addresses are used by PC(s) that need globalconnectivity, outside the enterprise, and/or with the Internet;therefore these PC(s) require public IP addresses to be globallyunique.You may not assign Public IP addresses yourself. If you need aPublic IP address or block of IP addresses, contact your InternetService Provider (ISP).The ISP must in turn contact its upstream registry, or hisappropriate regional registry, e.g.: the American Registry forInternet Numbers (ARIN) (http://www.arin.net).

IntroductionUse of public IPaddressesUse of private IPaddressesSimultaneous use ofpublic & private IPaddresses11 Networking Services - IP199 / 3623EC 17766 AAAA TCZZA Ed. 0111.1.3 Choosing an IP AddressRegardless of your application, IP addresses must always beconfigured at both ends of the connection.Prior to configuring an IP address, you must choose a suitableone. In this subsection a few criteria are listed that may influenceyour choice.Public IP addresses are required when accessing the Internet. EachPC on the Internet must have a unique IP address. If not, IPpackets cannot be routed.For endĆtoĆend IP communication your ISP or LAN administratorwill supply you with a Public IP address.Private IP addresses are to be used for local IP communication.E.g. configuring the STWireless, or dumping files to your localprinter.For this purpose it is best to choose addresses from the privateranges.Further, all examples will be given with 10.x.x.x private addresses,sometimes referred to as Net10" IP addresses.In most networking scenario's, Private and Public IP addresses willbe in use simultaneously, e.g.:"PPPoAĆtoĆPPTP RelayingIn this configuration, one IP layer is carried into another.Otherwise stated: on your local (home) (W)LAN the Public IPlayer is carried inside a Private IP layer (a so called IP Tunnel)."PPP & IP RoutingIn this scenario the Public IP layer will be terminated in theSTWireless and translated into a Private IP layer via the NAPTtranslation feature of the STWireless.

Local vs. endĆtoĆendDynamic vs. static IPconfiguration11 Networking Services - IP200 / 362 3EC 17766 AAAA TCZZA Ed. 01In the various configurations, multiple IP addresses are in use atthe same time, however their scope will differ. The Public IPaddresses will run endĆtoĆend, Private IP addresses will remainlocal.Both Public and Private IP addresses can either be staticallyconfigured, or can be distributed dynamically via DHCP.See section 11.1.4 for more information.Again, for endĆtoĆend IP communication, your ISP or (W)LANadministrator will decide on the method. For local configurationyou can choose the method yourself.

DHCPUse of DHCPOperation of DHCPDHCP and STWireless11 Networking Services - IP201 / 3623EC 17766 AAAA TCZZA Ed. 0111.1.4 Dynamic IP Address Configuration: DHCPDHCP is short for Dynamic Host Configuration Protocol and is partof the TCP/IP protocol suite. It provides a framework for passingconfiguration information to PC(s) on a TCP/IP network.The intention is for individual PC(s) to extract their IP parametersfrom a central server, rather then configuring them manually.A PC supporting DHCP, will receive the following IP parameters viaDHCP:"Its own IP address and subnet mask"The IP address of the default gateway"The IP addresses of the primary and secondary DNS servers.DHCP operates in client/server mode: a PC in its booting stageacts as a DHCP client and emits broadcast DHCP requests. Theseare intercepted by a DHCP server (on the same network) whichresponds with DHCP replies.These DHCP replies contains, among other information, the IPaddress for the DHCP client.Mostly this IP address is given for a limited period of time. Thisallows automatic reuse of an address that is no longer needed bythe PC to which it was assigned.The task of being DHCP server can also be performed by theSTWireless.STWireless DHCP server configuration is possible via the 'DHCP'web page. See section 11.3.3 for more information.

IntroductionIn this section11 Networking Services - IP202 / 362 3EC 17766 AAAA TCZZA Ed. 0111.2 Packet Services and IP AddressingIn this section the interaction between IP addresses and packetservices is described.Apart from Bridging, all packet services require the TCP/IP suite,and even the Bridging packet service will in most cases be used incombination with IP addressing.Topic SeeTransparent Bridging and IP Addresses 11.2.1MER and IP Addresses 11.2.2PPPoAĆtoĆPPTP Relaying and IP Addresses 11.2.3PPP & IP Routing and IP Addresses 11.2.4

IP vs. BridgingTypical Bridging SetupUsing TCP/IP andBridgingLocal IP communication11 Networking Services - IP203 / 3623EC 17766 AAAA TCZZA Ed. 0111.2.1 Transparent Bridging and IP AddressesBasically, Bridging does not require any IP address at all: neitherin your PC(s), nor in your STWireless.However, in case of Internet access or private IP networking, yourPC(s) must be configured for TCP/IP.In most cases, your SP will require you to use DHCP for your PC.In this case the DHCP server is at the remote side of the ADSLconnection. Therefore, also your STWireless's DHCP server mustbe disabled.As you can see in the following figure, this typical configurationsetup, illustrates the transparency of the Bridging packet service:STWirelessInternetAccess PointATMNetwork DHCP ClientIP AddressDHCP ServerATMNetworkYour SP may:"Provide you with an IP address"Require you to use DHCP.Alternatively, a second but Private IP address can be manuallyconfigured for local IP communication. It depends on your OSwhether it supports this combination.e.g. Microsoft supports Logical Multihoming via Registry keys.

11 Networking Services - IP204 / 362 3EC 17766 AAAA TCZZA Ed. 01Bridging & DHCP ServiceThe STWireless DHCP server is by default enabled (via AutoDHCP).In case you use your STWireless in Bridging mode and your ISPrequires you to enable DHCP in your PC(s), you must disable theDHCP server inside the STWireless to avoid conflicts between twoDHCP servers being active at the same time.Setting the DHCP modes of your STWireless is described insection 11.3.3.CAUTION

MER and IP addressesSTWireless IPaddressesPC IP addressconfigurationDefault gateway forthe PCsMER & IP routing11 Networking Services - IP205 / 3623EC 17766 AAAA TCZZA Ed. 0111.2.2 MER and IP AddressesLocal IP addresses must be configured prior to use IP routing.As the STWireless has a preconfigured Net10" address(10.0.0.138), you can configure IP addresses like 10.0.0.1,10.0.0.2, ... in your PCs, or use the STWireless DHCP server.In case another IP address is required, you can set STWireless'sIP address via the STWireless web pages, or via a PingĆofĆLife.See sections 11.3 and 17.1 for more information.The PC IP address can be configured statically (no DHCP), ordynamically (STWireless as DHCP server).See subsection 11.3.3 for more information.In addition, configure the STWireless's IP address as defaultgateway in your PCs.At the ADSL side of the STWireless IP router, MER will receive anIP address from the remote access server. However, you can alsoconfigure an IP address for the MER connection on the 'MER' webpage. In this case, the STWireless negotiates the acceptance ofthe IP address with the remote side.Via NAPT, both Private and Public IP addresses can coexist in therouter.

IP vs. PPPoA/PPTPPrivate IP addressesPublic IP addressesSimultaneous use ofpublic & private IPPPP IP addressnegotiation11 Networking Services - IP206 / 362 3EC 17766 AAAA TCZZA Ed. 0111.2.3 PPPoAĆtoĆPPTP Relaying and IP AddressesPrior to using PPTP, local IP addresses must be configured. The useof these IP addresses is limited to the local network.Consequently you are free to choose any IP address as long as it iscompatible with your local network and is unique in that samenetwork.As the STWireless has a preconfigured Net10" address(10.0.0.138), you should configure IP addresses like 10.0.0.1,10.0.0.2, ... on your PCs.Note: IP addresses can be configured automatically viaSTWireless's DHCP server. See section 11.3.3, for moreinformation.For PPPoA/PPTP, a second set of (Public) IP addresses havingendĆtoĆend scope, will automatically be negotiated via the PPPprotocol inside your PC(s).Both Public and Private IP addresses are active simultaneouslybecause of PPTP tunneling. In fact two nested" IP layers exist:the Public IP layer which is carried within the Private IP layer on thelocal (W)LAN.By default the PPTP tunnel application automatically negotiates thePublic IP address.In case your SP instructs you to use a static IP address forPPPoA/PPTP, you can supply a static IP address:

IP routing and IPaddressesSTWireless IPaddressesPC IP addressconfigurationDefault gateway forthe PCsPPP & IP routingPPP IP addressnegotiationNAPT11 Networking Services - IP207 / 3623EC 17766 AAAA TCZZA Ed. 0111.2.4 PPP & IP Routing and IP AddressesLocal IP addresses must be configured prior to use IP routing.As the STWireless has a preconfigured Net10" address(10.0.0.138), you can configure IP addresses like 10.0.0.1,10.0.0.2, ... in your PCs, or use the STWireless DHCP server.In case another IP address is required, you can set STWireless'sIP address via the STWireless web pages, or via a PingĆofĆLife.See sections 11.3 and 17.1 for more information.The PC IP address can be configured statically (no DHCP), ordynamically (STWireless as DHCP server).In addition, configure the STWireless's IP address as defaultgateway in your PCs.At the ADSL side of the STWireless IP router, PPP automaticallynegotiates an IP address with its remote PPP peer. Via NAPT, bothPrivate and Public IP addresses can coexist in the router.You can configure the PPP local IP address of the STWireless.Inspecial circumstances, you can configure a remote IP address forthe PPP connection.See subsection 8.4.5 for more information.NAPT is enabled by default on PPP connections. In case your(W)LAN uses Public IP addresses, NAPT is not required.See subsection 8.4.6 for more information.

IntroductionIn this section11 Networking Services - IP208 / 362 3EC 17766 AAAA TCZZA Ed. 0111.3 Speed Touch Wireless and IP AddressingLike any other member of a (W)LAN, the STWireless must belocally identified by an IP address to be able to communicate withother local (W)LAN devices.This section deals with the IP address configuration of theSTWireless for local communication only.Topic SeeSTWireless IP Address Types 11.3.1Static IP Address Configuration 11.3.2Dynamic IP Address Configuration 11.2.4Configuring the STWireless DHCP Server 11.2.4

Assigning IP addressesto the STWirelessSTWireless andmultiple IP addresses'IP address' table11 Networking Services - IP209 / 3623EC 17766 AAAA TCZZA Ed. 0111.3.1 STWireless IP Address TypesIP addresses can be assigned to the STWireless in several ways.Summarized, following IP address types exist:"The default IP address: 10.0.0.138"IP addresses assigned via the 'Initial Setup' web page"IP addresses assigned via a 'PingĆofĆLife"IP addresses assigned via the 'Routing' web page.Moreover, IP addresses can be configured, and/or negotiatedduring connection sessions (e.g. MER, and PPP & IP Routing).As the STWireless IP layer supports logical multiĆhoming (oneinterface supporting multiple IP addresses), the staticallyconfigured IP address(es) and dynamically required IP address(es)can be active at the same time.If you browse to the 'Routing' web page (See section 18.2 formore information), you can find the 'IP address' table. This tablesummarizes all IP addresses configured on any of the STWirelessinterfaces:

'IP address' tablecomponents11 Networking Services - IP210 / 362 3EC 17766 AAAA TCZZA Ed. 01The following fields are shown:Field DescriptionIntf Indicates the interface (Intf) to which the IP parameter set wasassigned to.It can take several values depending on the packet servicesthat are active. The Ethernet (eth0) and the Loopback (loop)are always present.Address Shows the IP address of the interface.Netmask If available, it shows the Netmask of the interface.Type Indicates the origin of the IP parameters.It can take following values:Value DescriptionAutoUser Implies that an additional IP parameter setwas added through the 'Initial Setup' webpage.Extra Implies that an additional IP parameter setwas added through the 'Routing' web page.The default IP address 10.0.0.138 is also ofthis type.Temp Implies that this (additional) IP parameter setwas added via a PingĆofĆLife.Implies that the parameters were acquiredautomatically through DHCP, or are typicalstandard IP addresses (e.g. 'loop').Transl This field indicates the translation performed.It can take following values:Value DescriptionNoneNAT NAPT is performed on this address.No address translation is performed on thisaddress.Action Contains one of the two following action buttons:Button ActionDelete an IP address from the list.Add an IP address to the list.

Default STWireless IPaddressIn this subsectionSetting an IP addressvia the 'Initial Setup'web page11 Networking Services - IP211 / 3623EC 17766 AAAA TCZZA Ed. 0111.3.2 Static IP Address ConfigurationThe STWireless comes with a preconfigured Net10" IP address,i.e. 10.0.0.138.In case you add the STWireless to an existing (W)LAN, it could bethat you must configure a User Defined" IP address, other thanthe Net 10" address, appropriate for the (W)LAN's IP settings."Setting an IP Address via the 'Initial Setup' Web Page"Setting an IP Address via the 'Routing' Web Page"STWireless Associated Netmasks"Sample Configuration: Single PC"Sample Configuration: Small Workgroup.See section 18.2 for more information.Proceed as follows:Step Action and Description1Browse to the 'Initial Setup' web page:

Setting an IP addressvia the 'Routing' webpageSTWireless associatednetmasks11 Networking Services - IP212 / 362 3EC 17766 AAAA TCZZA Ed. 01Step Action and Description2In the 'IP Address' field you can configure a user defined IP addressfor the STWireless.This IP address will show up as User " in the STWireless 'IPaddress' table (See section 11.3.1).3In the 'Subnetmask' field you must configure an appropriatenetmask for applying subnetting in your (W)LAN.4Click . As a result, the new IP settings are applied.5To verify connectivity, point your Web browser to the new IP address.Make sure though that your PC shares the same subnetwork.6Click to store the IP settings to permanent storage.Proceed as follows to configure an Extra" IP address:Step Action and Description1Browse to the 'Routing' web page.2In the 'IP address' table, you can configure an extra IP address,using the table's bottom row.Fill in the bottom row as follows:•Intf: Eth0"•IP address: the IP address for the STWireless.•Netmask: the appropriate netmask.3Click . As a result, the new IP settings are applied.4To verify connectivity, point your browser to the new address. Makesure though that your PC shares the same subnetwork.Click to store the IP settings to permanent storage.(Private) IP Address Class AssociatedNetmaskExample IPAddressA (1.x.x.x to 126.x.x.x) 255.0.0.0 10.x.x.xB (128.0.x.x to 191.255.x.x) 255.255.0.0 172.16.x.xC (192.0.0.x to 223.255.255.x) 255.255.255.0 192.168.x.x

Sample configuration:single PCSample configuration:small workgroup11 Networking Services - IP213 / 3623EC 17766 AAAA TCZZA Ed. 01In the below figure, a simple configuration is given: One PC isattached to the STWireless:IP Network 10IP address : 10.0.0.138(Sub)netmask : 255.255.0.0Default Gateway : noneIP address : 10.0.0.1(Sub)netmask : 255.255.0.0Default Gateway : noneYou can setup a local workgroup around the STWireless asshown in the figure below:IP Network 172.16IP address : 172.16.0.4(Sub)netmask : 255.255.0.0Default Gateway : noneIP address : 172.16.0.3(Sub)netmask : 255.255.0.0Default Gateway : 172.16.0.4IP address : 172.16.0.1(Sub)netmask : 255.255.0.0Default Gateway : 172.16.0.4IP address : 172.16.0.2(Sub)netmask : 255.255.0.0Default Gateway : 172.16.0.4Note: Notice that the default gateways in the PCs point to theSTWireless.

STWireless DHCPclient/server settingDefault STWirelessDHCP configurationIn this subsection11 Networking Services - IP214 / 362 3EC 17766 AAAA TCZZA Ed. 0111.3.3 Dynamic IP Address Configuration: DHCPDepending on the size and complexity of your network, a fewDHCP configurations can be envisaged:(W)LANTypeDHCPModeArgumentationSimple No All few members of the small (W)LAN have static IPaddresses, including the STWireless.MediumsizedServer For small home (W)LANs it might be worthwhile toconfigure all of your (W)LAN devices as DHCP clients,and the STWireless as the DHCP server.In this configuration each time a computer starts, itwill obtain its IP configuration from the STWireless.Advanced Client For advanced networks, the role of DHCP servermight be performed by an IP node other than theSTWireless on the local (W)LAN.Typically such functions are attributed to homegateways: computers having better networkingcapabilities than the other PC(s) on the home (W)LAN.All local PCs remain configured as DHCP clients,including the STWireless.For the STWireless, the DHCP server is by default enabled, i.e.set for 'Auto DHCP'."The STWireless 'DHCP' Web Page"Configuring the STWireless for (W)LANs without DHCPServer"Configuring the STWireless as DHCP Server"Configuring the STWireless as DHCP Client"Configuring the STWireless Auto DHCP"Dynamic IP Addressing.

The STWireless 'DHCP'web pageConfiguring theSTWireless for a(W)LAN without DHCP11 Networking Services - IP215 / 3623EC 17766 AAAA TCZZA Ed. 01Clicking in the left pane of the STWireless web pages,pops up the 'DHCP'web page:To setup the STWireless without DHCP, tick on the'DHCP' web page.In this configuration, it is assumed that all members, theSTWireless included, have static IP addresses.See subsection 11.3.2 for static IP addressing of the STWireless.Note: This configuration might be required in case you use theTransparent Bridging packet service.

Configuring theSTWireless as DHCPserverConfiguring theSTWireless as DHCPclient11 Networking Services - IP216 / 362 3EC 17766 AAAA TCZZA Ed. 01To setup the STWireless as DHCP server, tick onthe 'DHCP' web page.Via the 'DHCP Server Configuration' web page, you can configurethe STWireless DHCP server settings. See subsection 11.3.4 formore information.IP AddressSTWireless DHCPServerInternetAccess PointATMNetworkNote: This setting might cause side effects with Bridging. Seesection 11.2.1 for more information.To setup the STWireless as DHCP client, tick onthe 'DHCP' web page.IP AddressInternetAccess PointATMNetwork DHCP ClientIP AddressDHCP ServerSTWireless

Configuring theSTWireless for AutoDHCPAutomatic IPaddressing11 Networking Services - IP217 / 3623EC 17766 AAAA TCZZA Ed. 01One of the STWireless features is that it can automatically revertfrom DHCP client to DHCP server.At boot time the STWireless probes the (W)LAN for a specifiedtime limit ('Client timeout') to check wether another DHCP server isavailable on the network. If so, it will act as a DHCP client. If noresponse is received within the specified time, the STWirelessbecomes a DHCP server.To allow the STWireless to act as Auto DHCP client/server, tickon the 'DHCP' web page.Additionally, you can configure the 'Client timeout' in seconds.Via the 'DHCP server configuration' web page, you can configurethe STWireless DHCP server settings. See subsection 11.3.4 formore information.OSs supporting 'Automatic IP Addressing', might initially notestablish IP connectivity with the STWireless. This is because the IPaddress they assimilated is not within the STWireless 'Auto DHCP'server range.To prevent this problem, please power on your (W)LANdevices after the STWireless has come online.Indeed, when the STWireless is in 'Auto DHCP', it will firstoperate as a DHCP client. After the client timeout exceeded, itswitches to DHCP server mode, but this might be to late as someclients will already selected an automatic IP address.Dynamic IP addressing is a feature allowing DHCP clients toassign themselves an IP address.This happens when there is no DHCP server on the network, orwhen the server is temporarily down. After automatic assignment,the DHCP client will issue DHCP requests at regular instances.If the DHCP server is back online, the client will now lease an IPaddress from the server, after discarding its temporary automaticIP address.

IntroductionIn this subsectionThe 'DHCP serverconfiguration' webpage11 Networking Services - IP218 / 362 3EC 17766 AAAA TCZZA Ed. 0111.3.4 Configuring the STWireless DHCP ServerIf the STWireless is configured for 'Auto DHCP' or 'DHCP server',additional configuration must be done."The 'DHCP server configuration' Web Page"DHCP Server IP Addressing Box"DHCP Spoofing Box"DHCP Lease Table.Clicking on the 'DHCP' web page, pops up the 'DHCPserver configuration' web page:

DHCP server IPaddressing boxDHCP server IPaddressing box options11 Networking Services - IP219 / 3623EC 17766 AAAA TCZZA Ed. 01This box allows to specify the STWireless DHCP server features:You can configure following parameters:Field This configures ... DefaultAddressesthrough ...The range of addresses the DHCP server canchoose an IP address from for lease.Net10"Subnet Mask The subnetting applied to the local network,scoped by the DHCP server.nosubnettingLease Time The time (Lease Time) IP addresses can beassigned to a device by DHCP.7200secondsDefaultGatewayThe IP address of the default gateway. 'auto' (*)DNS Server The IP address of the DNS server. 'auto' (**)(*) Setting 'auto' in the 'Def. Gateway' field means, that there willbe referred to the 'Routing' web page.(**) Setting 'auto' in the 'DNS server' field means, that there will bereferred to the 'DNS' web page.

DHCP spoofing boxDHCP spoofing boxoptions11 Networking Services - IP220 / 362 3EC 17766 AAAA TCZZA Ed. 01This box allows you to set the DHCP spoofing parameters forPPPĆtoĆDHCP spoofing connections.See section 8.4.7 for more information on PPPĆtoĆDHCP spoofing.You can configure following parameters:Field This configures ... DefaultTimeout The time limit the STWireless is waitingfor a negotiated PPP connection session IPaddress. After timeout a Private PPPconnection session IP address will beissued.4 secondsLease Time The time (Lease Time) the Private PPPconnection session IP address, issued aftertimeout, can be assigned to theSTWireless.60 secondsDialĆonĆDemandLease TimeThe lease time for the Private PPPdialĆonĆdemand IP address which is in useuntil actual traffic opens up the link.10 seconds

DHCP lease tableDHCP lease tableoptions11 Networking Services - IP221 / 3623EC 17766 AAAA TCZZA Ed. 01This table allows you to manually assign IP addresses to devices,identified by there MAC address, with the possibility to let thislease expire after some specified time.You can configure following parameters:Field DescriptionClient ID Configures the MAC address of the device the STWirelessleases to.Address Configures the lease IP address for the device.State Indicates if the lease is:Value Descriptiononoff Device is unreachable.expired Timeout time limit has expired for thelease.Device is up, running and using the lease.Action Contains one of the two following action buttons:Button ActionDelete an existing lease.Manually add a lease to the list.

IntroductionIn this section11 Networking Services - IP222 / 362 3EC 17766 AAAA TCZZA Ed. 0111.4 IP RoutingNext to the ADSL router part, the STWireless supports alsostandard IP routing via its IP router.This section aims to familiarize you with the STWireless IP routerabilities.Topic SeeThe STWireless IP router 11.4.1Configuring the STWireless IP Routing Table 11.4.2

IntroductionFeaturesConfiguring an IProuting table11 Networking Services - IP223 / 3623EC 17766 AAAA TCZZA Ed. 0111.4.1 The STWireless IP RouterBecause the STWireless can act as an IP router, it has the abilityto access machines in other networks than its own. This canbe achieved by adding specific routes to its IP routing table.This subsection provides some general information on theSTWirelessIP router functionality.IP routing:"Is a standard and a wellĆknown principle, mainly due to thewidespread Internet use"Has broad application support, as it is implemented in most,if not all Operating Systems (Windows, Unix, MAC OS, ...).The routes in an ordinary routing table or Forwarding InformationBase (FIB) include, among others, destination IP addresses, subnetmasks and gateways.When an IP packet arrives at the router, the router examinesthe destination IP address. The router looks up the most specificmatch in the routing table for that destination address. Finding themost specific match equals finding the longest subnet mask forthat IP address.For example, the subnet mask 255.255.255.0 is more specificthan 255.255.0.0 because the network part in the first case islonger (and thus more specific) than the network part in thesecond case.Once the most specific match is found, the router forwards the IPpacket to the gateway associated with that match.

Simplified example ofa traditional IP routingtableThe STWireless IProuting tableExample of theSTWireless extended IProuting table11 Networking Services - IP224 / 362 3EC 17766 AAAA TCZZA Ed. 01The following table is an example of an IP routing table:Route Destination Subnet Mask Gateway30.0.0.2 255.255.255.255 30.0.0.1010.0.0.0 255.255.255.0 10.0.0.1380.0.0.0 0.0.0.0 20.0.0.10Depending on the configuration made, the STWireless may usean extended routing table.In addition to the data contained in an ordinary routing table, itcontains information about the source IP address and the sourcesubnet mask.The lookup principle may also be extended: not only thecombination of destination IP address and subnet mask is lookedup, but also the combination of source IP address and subnetmask.The extended IP routing table gives extra functionality to theSTWireless and is explained in subsection 11.4.2.The following table is an example of the STWireless extended IProuting table:Dest. IPAddressDest. SubnetMaskSource IPAddressSource SubnetMaskGateway30.0.0.2 255.255.255.255 10.0.0.2 255.255.255.255 30.0.0.1010.0.0.0 255.255.255.0 10.0.0.0 255.255.255.0 10.0.0.1380.0.0.0 0.0.0.0 10.0.0.0 255.255.255.0 20.0.0.10

IntroductionIn this subsectionGeneral ATM/ADSLendĆtoĆend IParchitecture11 Networking Services - IP225 / 3623EC 17766 AAAA TCZZA Ed. 0111.4.2 Configuring the STWireless IP Routing TableThe main function of the IP router in the STWireless, is to route IPpackets from the local network to the remote networks overthe ATM/ADSL connections and vice versa.In this subsection, configuration of the STWireless IP routing tableis described."General ATM/ADSL EndĆtoĆEnd IP Architecture"ATM/ADSL IP Routing"STWireless PowerĆon IP Routing Table Configuration"IP Route Table"Adding Specific Routes to the 'IP Route' Table"Criteria for a Valid IP Route.The figure below provides an overview of the general endĆtoĆendIP architecture:Internet20.0.0.1ISP10.0.0.110.0.0.1030.0.0.130.0.0.330.0.0.210.0.0.2STWirelessCorporateATMNetwork

ATM/ADSL IP routingSTWireless powerĆonIP routing tableconfiguration11 Networking Services - IP226 / 362 3EC 17766 AAAA TCZZA Ed. 01Routing to ATM/ADSL connections actually means:"Routing between the local (W)LAN and Classical Logical IPsubnets and vice/versa"Routing between the local (W)LAN and PPP connections andvice/versa.Basically the IP router only cares about IP addresses, i.e. the'Destination IP address' of any packet received on any of itsinterfaces (PPP, CIP or Ethernet) is looked up in the IP routing table.The lookup process will determine the best route that may lead tothe final destination of the packet. Consequently it will forwardthe packet to the interface that may reach this destination.When the STWireless is powered, routes are automaticallyconfigured in the routing table, e.g.:"As soon as the Ethernet interface is up and running, a route(being the IP address of the Ethernet interface) is added"If a CIP member is created and configured with an IP address,this IP address will show up in the table"The IP address negotiated between the remote peer and aPPP connection (configured for AlwaysĆOn) will also beautomatically added to the routing table.

'IP route' tableAdding specific routesto the 'IP route' table11 Networking Services - IP227 / 3623EC 17766 AAAA TCZZA Ed. 01If you browse to the 'Routing' web page (See section 18.2 formore information), you can find the 'IP route' table:Proceed as follows:Step Action and Description1Browse to the 'Routing' web page:

Criteria for a valid IProute11 Networking Services - IP228 / 362 3EC 17766 AAAA TCZZA Ed. 01Step Action and Description2In the 'IP route' table, you can configure an IP route, using thetable's bottom row.Fill in the following IP route parameters:Value DescriptionDestinationSource The IP prefix of the source device (pool).Specifying any, indicates that all traffic,coming from the Ethernet interface, issent over this routeGateway The IP address of the gateway.The IP prefix of the destination, ornextĆhop" device.Note: See section 11.1.1 for more information on the prefixnotation.3Click4Click to store the changes in permanent memory.The criteria for an IP route to be valid are that:"The destination and source entries must yield correct prefixes"The gateway must be directly connected.

IntroductionIn this chapter12 Networking Services - DNS229 / 3623EC 17766 AAAA TCZZA Ed. 0112 Networking Services - DNSIP addresses are fundamental to the operation of the Internet.They not only uniquely identify Internet nodes but also allow IProuters to forward datagrams to their destinations.IP addresses, being 32Ćbit numbers, are ideally suited forcomputers but are far from usable to humans.Therefore, the Domain Name System,orDNS, was designed: adistributed database, held by a hierarchical system of servers, thatis used by TCP/IP applications to map between hostnames and IPaddresses.This chapter describes STWireless's DNS abilities.Topic SeeSTWireless DNS Resolving 12.1Configuring your STWireless DNS Server 12.2

IntroductionLocal DNS resolvingExample of local DNSresolvingResult of local DNSresolving12 Networking Services - DNS230 / 362 3EC 17766 AAAA TCZZA Ed. 0112.1 Speed Touch Wireless DNS ResolvingThe STWireless features a DNS server for the locally attachedPCs, and as DNS relay for nonĆlocal DNS hostnames.The same mechanism for resolving computer names to IPaddresses when browsing the Internet, applies to your localnetwork. Instead of using the IP addresses for a local IP node e.g.10.0.0.138 for the STWireless, you can give your nodes namesand let a local DNS server, e.g. the STWireless itself, do theresolving.In the following example, a (W)LAN is built around theSTWireless.In this scenario, it is assumed that the STWireless acts as DHCPserver, and as DNS server for the local network.During startĆup, a first PC launches a DHCP request on the(W)LAN.One of the fields in the DHCP request contains the computername e.g. YourPC.The STWireless reacts by intercepting this request and returnsa DHCP reply containing:"The IP address for his computer, e.g. 10.0.0.1"The local domain name, e.g. lan (default)"The IP address of the local DNS server, e.g. 10.0.0.138 beingthe STWireless (default).A second PC, named MyPC, is powered on and is configured viaa DHCP reply as below:"The IP address for his computer, e.g. 10.0.0.2"The local domain name, i.e. lan"The IP address of the local DNS server, i.e. 10.0.0.138In the example scenario, it is now possible to ping both PCs,MyPC, and YourPC, by referring to their computer names insteadof their IP addresses.

12 Networking Services - DNS231 / 3623EC 17766 AAAA TCZZA Ed. 01

Local DNS resolvingmechanismNonĆlocal DNSresolving12 Networking Services - DNS232 / 362 3EC 17766 AAAA TCZZA Ed. 01The mechanism as follows:Phase Description1 Apply a ping YourPC on MyPC.2 Via this command, MyPC launches a DNS request,basically asking:What is the IP address of YourPC.lan ?3 As the STWireless is the DNS server, it will respond withthe appropriate IP address, being 10.0.0.1.4 The ping utility in MyPC will now submit the ping to10.0.0.1 which may eventually reply.The STWireless resolves names within the local domain, i.e. lan(default STWireless setting) as described above.However, all other domain names, e.g. Alcatel.com, cannot beresolved by the STWireless, and are forwarded over theappropriate link on the ADSL line.

In this subsectionThe STWireless 'DNS'web page12 Networking Services - DNS233 / 3623EC 17766 AAAA TCZZA Ed. 0112.2 Configuring the Speed Touch Wireless DNSServerThe example of section 12.1, refers to a new (W)LAN, using thedefault STWireless configuration, thus as well as Auto DHCPserver, as DNS server.In case the STWireless is added to a existing (W)LAN,configuration of the STWireless DNS server might be necessaryto meet the existing (W)LAN conditions.Clicking in the left pane of the STWireless web pages,pops up the 'DNS'web page:

DNS server fieldDNS server fieldcomponentsDNS hostname tableDNS hostname tablecomponents12 Networking Services - DNS234 / 362 3EC 17766 AAAA TCZZA Ed. 01This field allows configuration of the STWireless DNS server:You can configure the following parameters:Field Description DefaultServeractiveThis check box enables (n), or disables theSTWireless DNS server.n,STWirelessDNS serveractive.DomainNameSpecifies the domain name of your (W)LAN.This name is communicated by the DNS serverto the local PCs, and is subsequently used bythe PCs to complete a DNS request.lanThis table allows you to manually configure DNS hostnames tohosts, identified by their IP address:You can configure the following parameters:Field DescriptionHostname A DNS hostname of your choice for the PC.Address The IP address of the PC to which you assign the DNShostname.

IntroductionIn this chapter13 Networking Services - Firewalling235 / 3623EC 17766 AAAA TCZZA Ed. 0113 Networking Services - FirewallingA Firewall is a security gateway that controls access between aprivate (W)LAN domain, often referred to as Intranet, and thepublic Internet.It secures the entry points to the network, in such a way that accessis only allowed to authorized traffic. Therefore, to effectivelycontrol the flow of data, firewall protection should be placed ateach point where the network connects to the WAN, or theInternet.This chapter aims to familiarize you with the operation of theSTWireless's programmable Firewall.Topic SeeOperation of the Firewall 13.1Firewall Model 13.2Firewall Actions 13.3Firewall Criteria 13.4Firewall and NAPT 13.5Firewall Configuration 13.6Firewall Configuration Examples 13.7

What is the STWirelessFirewallHow the STWirelessFirewall works13 Networking Services - Firewalling236 / 362 3EC 17766 AAAA TCZZA Ed. 0113.1 Operation of the FirewallThe STWireless Firewall is a set of related programs that protectsthe resources of your local network from users from othernetworks.Basically, a firewall examines each network packet to determinewhether to forward it toward its destination. Firewalls work in mostcases closely together with a proxy server that makes networkrequests on behalf of your local network users.For the STWireless Firewall the STWireless acts as well asnetwork gateway and proxy server to contact the outside world viathe ADSL lineThe STWireless Firewall is in fact a packet filter: inside andoutside nodes are visible to each other at the IP level, but thefirewall filters out, i.e. blocks the passage of certain packets,based on their header.Packets are intercepted at certain Packet Interception Point (PIP),called hooks, in the STWireless IP router. At this points, they arematched against a chain, which comprises rules (at least one).These rules determine the type of control implemented on thepackets.Incoming and outgoing traffic is validated by comparing certainvalues in the packets with configured Firewall parameters. Theparameters in a rule can be divided according to the protocol towhich they belong: a first group validates traffic on the interfacelevel, a second group on IP level, a third group filters on TCP, UDP,and ICMP level.

STWireless FirewallModelSTWireless Firewallmodules13 Networking Services - Firewalling237 / 3623EC 17766 AAAA TCZZA Ed. 0113.2 Firewall ModelThe following figure shows a model of the STWireless Firewall:(1) (2)(3)Sink SourceInput OutputForwardRouterModuleForwardModuleNAPTModuleThe following modules can be identified (See Firewall model):"Router Module : This module, which has nothing to do withthe STWireless IP router, is responsible for the traffic within"the STWireless Firewall, i.e. it routes the packets towards theSink PIP or Forward PIP."Forward Module : This module is responsible for forwardingthe packets toward the output."NAPT Module : This module is responsible for the translationof IP addresses, in case firewalling is used with NAPT.

STWireless FirewallhooksSTWireless Firewallstreams13 Networking Services - Firewalling 238 / 362 3EC 17766 AAAA TCZZA Ed. 01The following hooks, or PIPs can be determined (See Firewallmodel):"Input : The point of all incoming trafficAt this point it can be determined whether the packet isallowed to reach the STWireless IP router, or the local host."Sink : The point of all traffic destined to the STWireless IProuterAt this point it can be determined whether the packet isallowed to address the local host."Forward : The point of all traffic to be forwarded by theSTWirelessAt this point it can be determined whether the packet isallowed to be handled, i.e. routed, by the STWireless IProuter."Source : The point of all traffic sourced by the STWireless IProuterAt this point it can be determined whether the packet isallowed to leave the local host."Output : The point of all outgoing trafficAt this point it can be determined whether the packet isallowed to leave the STWireless IP router, or local host.The following streams (See Firewall model) can run through thePIPs:"(1) Input -> Sink : The flow of packets exclusively destinedto the STWireless."(2) Source-> Output : The flow of packets sourcedexclusively by the STWireless itself"(3) Input -> Forward -> Output : The flow of packetssourced by the WAN, forwarded towards the local network, orvice versa.

STWireless Firewallactions13 Networking Services - Firewalling 239 / 3623EC 17766 AAAA TCZZA Ed. 0113.3 Firewall ActionsOnce a packet is intercepted in a hook, and a rule is found to beapplicable, one of the following actions can be performed on thepacket:"AcceptThe packet will be submitted to the next processing stage,without further action."DenyThe packet will not be submitted to the next processing stage.A message will be sent to the sender that the packet could notbe delivered, e.g. with an ICMP host unreachable" errormessage."DropThe packet will not be submitted to the next processing stage,without any further action."CountEach packet passing through is counted, without any furtheraction.

STWireless FirewallcriteriaInterface relatedcriteriaIP related criteriaTCP related criteria13 Networking Services - Firewalling240 / 362 3EC 17766 AAAA TCZZA Ed. 0113.4 Firewall CriteriaAt every hook (PIP) a separate access list, called chain, containingan ordered list of rules will operate on each processed packet,resulting in a specific treatment of this packet (See topic'STWireless Firewall Actions').A rule is able to operate on the following packet criteria:"Interface related"IP related"TCP related"UDP related"ICMP related."Source interface"Source interface group"Destination interface"Destination interface group."Source IP address"Source IP netmask"Destination IP address"Destination IP netmask"Type of service"Protocol (TCP, UDP, or ICMP)."Source Port number"Source Port number range"Destination Port number"Destination Port number range"Synchronization flag"Urgent flag

UDP related criteriaICMP related criteria13 Networking Services - Firewalling241 / 3623EC 17766 AAAA TCZZA Ed. 01"Source Port number"Source Port number range"Destination Port number"Destination Port number range"Type"code number"Code number range.

What is NAPTSTWireless Firewalland NAPT13 Networking Services - Firewalling242 / 362 3EC 17766 AAAA TCZZA Ed. 0113.5 Firewalling and NAPTNAT (Network Address Translation), is the translation of an IPaddress used within one network to another IP address, knownwithin another network.NAPT (Network Address and Port Translation) uses a combinationof IP addressing and port number mapping to create uniquecombinations. That way, the STWireless can determine whichpacket, sourced by the WAN, is destined to which device on yourlocal (W)LAN, and vice versa, without revealing the internal deviceinformation towards the remote side.The position of the Input, NAPT, Forward and Output logicalprocessing modules in the overall STWireless Firewall model isrelative to the traffic direction. In contrast, the STWireless's WANand (W)LAN interfaces are physical" interfaces; their position isnot relative to the traffic direction.The NAPT module is situated between the Forward and Outputhook (See STWireless Firewall model). Since the traffic directionwill determine input, and output, the NAPT module can always bepositioned between the Forward and Output module.If you set rules on a hook, you should know if the packets thatpass through that hook contain IP addresses that areNAPTĆtranslated or not.If rules are set on the Output hook and NAPT is active, the IPpackets that pass that hook will contain translated IP addresses. Ifyou want to avoid certain traffic, by setting rules that filter oncertain (ranges of) IP addresses, you should be aware of thelocation where the rule will be verified, since, depending on thehook, another IP address will be seen by the Firewall.As a conclusion: if NAPT is activated, the IP address that identifiesa local device, will be different depending on the direction of thetraffic.

Configuring theSTWireless FirewallDefault STWirelessFirewall configuration13 Networking Services - Firewalling243 / 3623EC 17766 AAAA TCZZA Ed. 0113.6 Firewall ConfigurationIn order to create a Firewall, suitable for your needs, you cancreate a chain on every hook at the STWireless. In each chainrules can be applied with configurable parameters. Rules can alsorefer to a previously defined access list, thus allowing nestedaccess lists, or chains.You can configure the STWireless firewall only via the CLI.See chapter 19 for more information.The STWireless Firewall is enabled by default with followingbehavior:Packets migrating"from WAN to WAN are dropped"from STWireless to WAN are dropped, except Port 53 (DNS)"from STWireless to (W)LAN are allowed"from (W)LAN to STWireless are allowed"from (W)LAN to WAN are allowed"from WAN to (W)LAN are allowed"from a remote LAN to local (W)LAN are allowed"from local (W)LAN to a remote LAN are allowed.

Example setup13 Networking Services - Firewalling244 / 362 3EC 17766 AAAA TCZZA Ed. 0113.7 Firewall Configuration ExamplesIn the following two simple examples are provided to show theworking and configuration of the STWireless Firewall.Both are based on a small (W)LAN, consisting of the STWirelessand a small number of PCs, all configured with dynamic 'Net10'IP addresses, leased by the STWireless's DHCP server:Remote LANAccess PointTelnet ServerServerATMNetworkSpeed Touch Prowith FirewallIP address:200.20.20.1Local (W)LANIP addressrange:10.0.0.0/8In both examples the STWireless Firewall must block all services,except an outgoing Telnet service towards one specified remoteTelnet server, with IP address 200.20.20.1.

Example 1: Firewallconfiguration withoutNAPT13 Networking Services - Firewalling245 / 3623EC 17766 AAAA TCZZA Ed. 01NAPT is not applied on your local (W)LAN for this ADSLconnection. This means that the IP addresses are not hidden forthe remote side of the connection.In the following table, the rules to apply are summarized:Flow Source Dest. Prot. SourceportDest.portACK=1ActionOut 10.0.0.0/8 200.20.20.1 TCP 1024Ć6553523 - acceptIn 200.20.20.1 10.0.0.0/8 TCP 23 1024Ć65535Yes acceptAny External 10.0.0.0/8 Any Any Any - dropFor the STWireless Firewall, this will result in the following CLIconfiguration:1. A chain must be created, e.g. 'Telnet':firewall chain create chain=Telnet2. Following rules must be created for that chain:DFor the outgoing Telnet service packets:firewall rule create chain=Telnet src=10.0.0.0/8dst=200.20.20.1 srcintfgrp=lan prot=tcpsrcport=1024 srcportend=65535 dstport=23action=acceptDFor incoming Telnet service reply packets:firewall rule create chain=Telnet src=200.20.20.1dst=10.0.0.0/8 srcintfgrp=wan prot=tcp srcport=23dstport=1024 dstportend=65535 ack=yesaction=acceptDFor blocking all other services:firewall rule create chain=Telnet action=drop3. The chain 'Telnet' must be assigned to the input hook:firewall assign hook=input chain=Telnet

Example 2: Firewallconfiguration withNAPTMore information13 Networking Services - Firewalling246 / 362 3EC 17766 AAAA TCZZA Ed. 01NAPT is applied for this ADSL connection; all outgoing 'Net10' IPaddressed packets are translated into the 192.6.11.10 IPaddress. So the complete local LAN is presented towards theremote side as the single IP address 192.6.11.10.In the following table, the rules to apply are summarized:Flow Source Dest. Prot. SourceportDest.portACK=1ActionOut 10.0.0.0/8 200.20.20.1 TCP 1024Ć6553523 - acceptIn 200.20.20.1 192.6.11.10 TCP 23 1024Ć65535Yes acceptAny External Internal Any Any Any - dropFor the STWireless Firewall, this will result in the following CLIconfiguration:1. A chain must be created, e.g. 'Telnet':firewall chain create chain=Telnet2. Following rules must be created for that chain:DFor the outgoing Telnet service packets:firewall rule create chain=Telnet src=10.0.0.0/8dst=200.20.20.1 srcintfgrp=lan prot=tcpsrcport=1024 srcportend=65535 dstport=23action=acceptDFor incoming Telnet service reply packets:firewall rule create chain=Telnet src=200.20.20.1dst=192.6.11.10 srcintfgrp=wan prot=tcp srcport=23dstport=1024 dstportend=65535 ack=yesaction=acceptDFor blocking all other services:firewall rule create chain=Telnet action=drop3. The chain 'Telnet' must be assigned to the input hook:firewall assign hook=input chain=TelnetSee chapter 19 for more information on STWireless's Firewall CLIconfiguration.

247 / 3623EC 17766 AAAA TCZZA Ed. 01Speed TouchWirelessWireless LAN Services

IntroductionIn this chapter14 Wireless LAN Services - WLAN Configuration249 / 3623EC 17766 AAAA TCZZA Ed. 0114 Wireless LAN Services - WLAN ConfigurationAfter having initial WLAN connectivity, you can configure yourSTWireless WLAN parameters. Additional configuration of yourWLAN environment settings might be required in case, e.g.another STWireless, with identical WLAN configuration, is locatednearby."The STWireless 'Wireless' Web Page"The 'SSID' Field"'Channel' Field"Connectivity after Configuration

The STWireless'Wireless' web pageThe 'SSID' field14 Wireless LAN Services - WLAN Configuration250 / 362 3EC 17766 AAAA TCZZA Ed. 01Clicking in the left pane of the STWireless web pages,pops up the 'Wireless' web page (See chapter 18 for moreinformation):The following figure shows the 'SSID' field:The Service Set ID (SSID) allows you to uniquely identify yourSTWireless WLAN in the radio environment. This can be useful incase multiple WLAN environments are present nearby yourlocation.Changing the default SSID 'Alcatel_STW' into another value canbe useful in case another STWireless is located nearby. It willavoid a WLAN client from his wireless network to connect byaccident to yours.

The 'Channel' field14 Wireless LAN Services - WLAN Configuration251 / 3623EC 17766 AAAA TCZZA Ed. 01The following figure shows the 'Channel' field:The channel number identifies the frequency on which your WLANconnectivity is enabled in the WLAN environment.Changing the default channel number to another value can beuseful in case you know another wireless equipment runs nearbyyours, e.g. another STWireless WLAN environment. This way youcan avoid sharing the channel bandwidth with other WLANs byselecting different channel numbers for concurrent WLANs.You may not freely choose any channel number. The channelnumber range is from 1 up to 14 (included).Moreover, restrictions apply depending on the country where theSTWireless is used:"US:1,6,or11"Europe (except France): 1, 7, or 13"France: 14.

Configuring WirelessparametersWLAN connectivityafter configuration14 Wireless LAN Services - WLAN Configuration252 / 362 3EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1Browse to the 'Wireless Configuration' web page.2Enter the appropriate configuration in the following fields:•the 'SSID' name of your WLAN•the 'channel' number for your WLAN connectivityNote: See the corresponding topics in this chapter for moreinformation.3Click and to finish the procedure.After the SSID, and/or channel number has been changed insidethe STWireless, the contact is lost.All your WLAN clients must be reconfigured, and/orreĆauthenticated to use the same new SSID, and/or new channelnumber as the STWireless.See section 3.1 for more information.

253 / 3623EC 17766 AAAA TCZZA Ed. 01Speed TouchWirelessMaintenance

Software UpgradeIn this chapter15 Maintenance - Software Upgrade255 / 3623EC 17766 AAAA TCZZA Ed. 0115 Maintenance - Software UpgradeThe STWireless supports two software upgrade possibilities:"A new version of the software can be downloaded viathe ADSL line to your STWireless."You can upload new STWireless software yourself from a PCon your local LAN.Both features, presented in this chapter, are simultaneouslysupported. However the final result depends on the ADSLprovider's policy.Topic SeeUpload Software from a PC 15.1Software Download 15.2

IntroductionIn this sectionThe 'SoftwareUpgrade' web page15 Maintenance - Software Upgrade256 / 362 3EC 17766 AAAA TCZZA Ed. 0115.1 Upload Software from a PCAlcatel ADSL products continue to evolve.By upgrading software, the STWireless is able to follow thisevolution."The 'Software Upgrade' Web Page"'Upgrade' Web Page Components"'Upgrade' Web Page Buttons"Upgrade Preconditions"Uploading Upgrade Software"Activating Upgrade Software.Click to pop up the 'Upgrade' web page:

'Upgrade' web pagecomponents'Upgrade' web pagecomponents15 Maintenance - Software Upgrade257 / 3623EC 17766 AAAA TCZZA Ed. 01The following fields are shown:"'Active software version'Indicates the software version that the STWireless is currentlyusing."'Passive software version'Indicates the software version resident in the STWireless, butnot used. This could be a newer version which is yet to beswitched to active, but also a dormant older version."Software path fieldAllows you to specify the path to the STWireless upgradesoftware package to be uploaded.Clicking allows you to browse to the locationof the upgrade software.The following buttons are available:Button FunctionalityTo start the upload process.The software package indicated by the Software path will betransferred to the STWireless to become the passivesoftware version.To remove the passive software version from the STWirelessmemory.To switch active and passive software versions after a sucĆcessful upload.Your STWireless will reboot and come online again with thenew version.

Upgrade PreconditionsUploading software15 Maintenance - Software Upgrade258 / 362 3EC 17766 AAAA TCZZA Ed. 01A valid STWireless software package must reside either on yourharddisk, on a floppy disk, or CDĆrom.For new software upgrade packages, please contact your SP, orcheck the Alcatel web sites at:http://www.alcatel.comhttp://www.alcateldsl.comProceed as follows:Step Action and Description1Browse to the 'Software Upgrade' web pageIn the 'Active software version' field the software package that isrunning is labeled.2Check whether the 'Passive software version' field is empty.If not, click3Click next to the Software path input field tolocate the upgrade software package Note: If the path is known, you can immediately enter it in theSoftware path input field and skip step 4 in this procedure.

Upload Result15 Maintenance - Software Upgrade259 / 3623EC 17766 AAAA TCZZA Ed. 01Step Action and Description4The 'File Upload' window pops up:This window allows you to browse to the location of the upgradesoftware package on either your harddisk, floppy, or CDĆrom.5Click on the appropriate upgrade software package name to selectit, and clickAs a result, the upgrade software location will be inserted in theSoftware path field.6Click to start the upload.As a result the upgrade software package name will appear in the'Passive software version' field.Note: In case you did not remove the passive version, prior touploading new software, the upload will be unsuccessful and anerror message will appear.After a successful upload, two software versions are stored on theSTWireless:"The running, active version"The dormant, passive version.

Activating upgradesoftwareResult15 Maintenance - Software Upgrade260 / 362 3EC 17766 AAAA TCZZA Ed. 01Proceed as follows to switch passive upgrade and active runningsoftware versions:Step Action and Description1If needed, browse to the 'Upgrade' web page.Note: Make sure a passive software version is labeled in the'Passive software version' field.If not, firstly upload a upgrade software package as described in theprevious procedure.2Click to start the switching of the two versions.After switching the versions, the STWireless reboots:After reboot your STWireless will come online with the newversion.In the 'Upgrade' web page you will notice that active and passiveversions (prior to the upgrade) have trade places.

IntroductionSoftware DownloadResult15 Maintenance - Software Upgrade261 / 3623EC 17766 AAAA TCZZA Ed. 0115.2 Software DownloadThe STWireless supports a second software upgrade possibility: anew version of the software can be downloaded from the ADSLnetwork to your STWireless.This can be done via the STWireless dedicated control VCs.This feature is controlled by the SP.At some point in time he might decide to upgrade the software inyour STWireless.Software download will happen almost unnoticed, while you areconnected to the ADSL line.The removal of a possible dormant software version, thedownload itself, and the switching of both versions is performedautomatically.ADSL service can be interrupted for a short period due to a rebootof the STWireless.You will notice a change in the software version if you browse tothe STWireless 'Software Upgrade' web page.

15 Maintenance - Software Upgrade262 / 362 3EC 17766 AAAA TCZZA Ed. 01

In this chapterNote16 Maintenance - Speed Touch Wireless Security263 / 3623EC 17766 AAAA TCZZA Ed. 0116 Maintenance - Speed Touch Wireless SecurityYour STWireless is a highly advanced product, operating accordingthe many configurations set via the STWireless Web interface, or viathe CLI.In this way, STWireless operation is vulnerable to misconfigurationby other users.Therefore, the STWireless can be secured from such users by asystem password to restrict access to the Web interface, or the CLI.This chapter describes how to set such a system password.Never use an obvious system password to protect the STWireless,as your name, birth date, or phone number.Forgetting the System PasswordIn case you forgot the system password, you are no longer able toaccess the web interface, or the CLI, and you will be no longer ableto (re)configure the STWireless settings.Therefore, write your system password down and keep it on a saveplace.Otherwise, a SwitchĆtoĆDefaults, must be performed, restoring alloriginal settings of the STWireless.CAUTION

Setting a systempasswordResult16 Maintenance - Speed Touch Wireless Security264 / 362 3EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1Browse to the 'System' web page.2In the 'Password' field, fill in a password.Note: Asterisks will appear instead of the password. The number ofasterisks is at random:3Click in the header frame.4To make your password permanent, click in the menuframe.5Authenticate yourself, using the system password, you justconfigured.Every time you want to access the STWireless web pages, or (Telnet)CLI, you must authenticate yourself, using the system password youconfigured.

Clearing a systempasswordResult16 Maintenance - Speed Touch Wireless Security265 / 3623EC 17766 AAAA TCZZA Ed. 01Proceed as follows to set a system password for your STWireless:Step Action and Description1Browse to the 'System' web page.2In the 'Password' field, delete the asterisks3Click in the header frame.4To make the deletion permanent, click in the menu frame.No authentication is required anymore to access the STWireless webpages, or the (Telnet) CLI.

16 Maintenance - Speed Touch Wireless Security266 / 362 3EC 17766 AAAA TCZZA Ed. 01

IntroductionIn this chapter17 Maintenance - Lost Speed Touch Wireless267 / 3623EC 17766 AAAA TCZZA Ed. 0117 Maintenance - Lost Speed Touch WirelessNon accessibility to your STWireless may occur if wronglyconfigured, simply by forgetting its IP address, or forgetting thesystem password.Due to the flexible nature of the STWireless, you may end up in asituation where restoring all of the original defaults is the onlysolution.The STWireless has tools to cope with these situations.Topic SeePingĆofĆLife17.1STWireless Reset 17.2

IntroductionGeneral procedureNoteThe PingĆofĆLifeprocedure17 Maintenance - Lost Speed Touch Wireless268 / 362 3EC 17766 AAAA TCZZA Ed. 0117.1 PingĆofĆLifeThe STWireless offers a unique method to supply an IP address tothe STWireless.This method, the PingĆofĆLife,allows to provide the STWirelesswith an IP address, without affecting other configurational settings.The principle is fairly simple: a special ping packet will deliver anIP address to your STWireless.Generally the procedure is as follows:Step Action1 PreĆconfigure the intended IP address and a special MAC groupaddress in the ARP cache of one of your PCs.2 Power cycle the STWireless, and allow the POST to end (thistakes about 30 seconds).3Ping this same IP address within 60 seconds after the STWirelessended its POST.If everything goes well, the STWireless has assimilated this IPaddress.4 Save the new IP setting via the STWireless web pages.Most TCP/IP packages support theARPandPINGcommand. ThePingĆofĆLife can be executed from any PC on your local network.Proceed as follows:Step Action and Description1 Turn off the STWireless.2Open an DOS window (Windows OS), or a terminal window(UNIX, Linux) on a PC.3 In the DOS window, or terminal window, execute: arp –aThis command allows you to overview the current entries in theARP cache.

PingĆofĆLifewithmultiple PCĆNICs17 Maintenance - Lost Speed Touch Wireless269 / 3623EC 17766 AAAA TCZZA Ed. 01Step Action and Description4 Add a static entry to the ARP cache, according to following syntax:arp –s <STWireless IP address> 01–90–D0–80–01–01orarp –s <STWireless IP address> 01:90:D0:80:01:01<STWireless IP address> is a placeholder for the IP addressto be assigned to the STWireless.5 Verify if this step was successful. Execute: arp –a a second time.In the entries list, your arp –s command entry should be added.6 Turn on the STWireless and allow the POST to end.7 Ping the IP address you just entered in the ARP cache within 60seconds:ping <STWireless IP address>8 If successful, the STWireless has configured this IP address andwill reply to the ping.8You may clear the entry in the ARP cache by issuing the followingcommand:arp –d <STWireless IP address>Note: Leaving the entry in the ARP cache does not harm thegeneral operation.10 Browse to the STWireless web pages, and click tomake the new IP address permanent.If your PC is equipped with multiple PCĆNICs, or WLAN adapters,make sure that the procedure is applied to the one which joinedthe STWireless. WLAN environment.In the following syntax, <Interface IP address> identifies theparticular PCĆNIC:arp –<a,s,d> <STWireless IP address> –N <interface IPaddress>IP Addresses and Subnet MasksMake sure that the intended STWireless IP address and your PCshare the same IP (sub)network.If not, the ping will be submitted with the MAC address of thedefault router instead of the special MAC group address.CAUTION

Example DOS boxThe 'Ping Ćt' command17 Maintenance - Lost Speed Touch Wireless270 / 362 3EC 17766 AAAA TCZZA Ed. 01In the following figure all the steps are shown as an example ofsetting STWireless's IP address to 10.0.0.145 from a PC with anMS Windows OS:You can avoid waiting 30 and then 60 seconds by proceeding asfollows:Step Action and Description1..5 Follow the PingĆofĆLifeprocedure as described, from step 1 up tostep 5.6 Initiate a continuous pinging, by executingping –t <STWireless IP address>7 Turn on the STWireless.8 After the POST, the STWireless will reply to the ping.9 Terminate the continuous ping by pressing CTRLĆC.10 Save the IP address via the STWireless web pages.

Overview of theToĆDefaults methodsIn this section17 Maintenance - Lost Speed Touch Wireless271 / 3623EC 17766 AAAA TCZZA Ed. 0117.2 Speed Touch Wireless ResetTo restore STWireless's original settings, three methods areprovided:"Two local software methods:DBrowseĆtoĆDefaultsWhich sets all parameters to original defaults, but keepsthe system password and IP address.DPingĆtoĆDefaultsWhich sets all parameters to original defaults, includingthe system password and IP address."One hardware method:DSwitchĆtoĆDefaults.Which sets all parameters to original defaults, includingthe system password and IP address.Restoring Original SettingsBe careful when using ToĆDefaults procedures as these destroychanges you previously made to the STWireless internal settings.A reset to defaults via a PingĆtoĆDefaults, or via aSwitchĆtoĆDefaults, also implies the STWireless's IP address isreset to 10.0.0.138. As a consequence, IP connectivity with theSTWireless could be lost. In that case you must execute aPingĆofĆLife.Topic SeeBrowseĆtoĆDefaults 17.2.1PingĆtoĆDefaults17.2.2SwitchĆtoĆDefaults 17.2.3CAUTION

ProcedureBrowseĆtoĆDefaultsresult17 Maintenance - Lost Speed Touch Wireless272 / 362 3EC 17766 AAAA TCZZA Ed. 0117.2.1 BrowseĆtoĆDefaultsStep Action and Description1Browse to the 'System' web page.2If you are sure to reset the STWireless to its original defaults,click3The STWireless will ask to confirm the reset:4Make the following selection:If ... Then click ...You are sure that you want to reset theSTWireless completely ...You do not want to continue with the resetto original defaults ...4To make the reset permanent, click in the menu frame.5Press the reload button of your Web browser.After reset, all original configurations of the STWireless arerestored, except the STWireless system password, and Ethernet IPaddress(es).

IntroductionProcedureNote17 Maintenance - Lost Speed Touch Wireless273 / 3623EC 17766 AAAA TCZZA Ed. 0117.2.2 PingĆtoĆDefaultsA second software method to reset all settings to the originaldefaults is the PingĆtoĆDefaults.The technique is identical to that used for the PingĆofĆLife, exceptthat another MAC address is used, i.e. 01–90–D0–80–01–FF.Proceed as follows:Step Action and Description1 Turn off the STWireless.2Open an MSDOS command prompt window (Windows OS), or aterminal window (UNIX, Linux).3 Add a static entry to the ARP cache, according to following syntax:arp –s <IP address> 01-90-D0-80-01-FFThis <IP address> can be any address within your subnet aslong as it is not used by any other member of your local network.4 Verify if this step was successful. Execute arp –aIn the entries list, your arp –s command entry should be added.5 Turn on the STWireless and allow the POST to end.6 Ping the IP address <IP address> you just entered in the ARPcache: ping <IP address>7You must clear the entry in the ARP cache by issuing the followingcommand:arp –d <IP address>8 If needed, reconfigure the STWireless's IP address.The IP address <IP address> used to perform a PingĆtoĆDefaultsis not assimilated by your STWireless. The STWireless will restartwith the original defaults, including the default IP address10.0.0.38.

IntroductionProcedure17 Maintenance - Lost Speed Touch Wireless274 / 362 3EC 17766 AAAA TCZZA Ed. 0117.2.3 SwitchĆtoĆDefaultsAt the back of the STWireless there is a a set of DIP switcheslabeled "Config".Via these switches a hardware reset of the STWireless, theSwitchĆtoĆDefaults, is possible.Proceed as follows:Step Action and Description1 Make sure your STWireless is turned on.2 Put DIP switch number 4 in the UP position:Config ConsoleYou will notice that the PWR/Alarm LED flashes amber.3 Power cycle the STWireless and wait to allow the POST to end.The STWireless will come online with manufacturing defaults.4 Reset the DIP switch in its original position. If not, the 'PWR/Alarm'LED will flash amber as a warning.5 After a reset to original defaults a reconfiguration of STWireless'sIP address might be necessary.This because the reset to defaults also resets your STWireless's IPaddress to its default value 10.0.0.138.DIP Switch PositionLeaving the DIP switch in the UP position, will cause unintendedreset to manufacturing defaults !CAUTION

IntroductionThe STWireless webinterfaceIn this chapter18 Maintenance - Speed Touch Wireless Web Interface275 / 3623EC 17766 AAAA TCZZA Ed. 0118 Maintenance - Speed Touch Wireless WebInterfaceThe STWireless comes with integrated local configurationcapabilities.Two methods exist:"Configuration via a Web Browser"Configuration through a Command Line Interface (CLI).The local configuration via the STWireless web interface, is based on the HyperText Transfer Protocol (HTTP) server/Web browserconcept.It allows configuration of your STWireless via a Web browserthrough HyperText Markup Language (HTML) web pages from anylocal PC attached to the Ethernet interface(s).Topic SeeWeb Interface Preconditions 18.1Browsing to the Web Pages 18.2Web Page Structure 18.3

PreconditionsNoteIn this section18 Maintenance - Speed Touch Wireless Web Interface276 / 362 3EC 17766 AAAA TCZZA Ed. 0118.1 Web Interface PreconditionsWhen your PC is connected to a Proxy server for accessing theInternet, you must change your Web browser preferences,because the STWireless is a local device and its IP address cannotbe resolved by the Proxy server.Therefore, prior to access the STWireless web pages, make surethat, either:"Your Web browser is not using a Proxy server"The STWireless IP address is not submitted to the Proxyserver.The procedures described, are methods for:"Netscape Navigator, version 2.0 or above"Microsoft Internet Explorer, version 2.2 or above.This section covers the following topics:Topic SeeDisabling Proxy Servers 18.1.1Disabling Proxying for Local IP Addresses 18.1.2

IntroductionDisabling Proxy serversfor Netscape NavigatorDisabling Proxy serversfor Internet ExplorerWeb browser versions18 Maintenance - Speed Touch Wireless Web Interface277 / 3623EC 17766 AAAA TCZZA Ed. 0118.1.1 Disabling Proxy ServersThis subsection describes how to disable Proxy servers for yourWeb browser.As a consequence of this action, connectivity through the Proxyserver to the Internet is lost.Therefore, after configuring your STWireless, do not forget toreset your Web browser to its original settings !1. Select 'Edit' from the toolbar2. Select 'Preferences'3. In the 'Category' box select Advanced, Proxies4. Click the option button 'Direct Connection to the Internet'.1. RightĆclick the 'Internet' icon2. From the popĆup menu select 'Properties'3. Clear the 'Use Proxy Server' check box.Since several versions of these Web browsers exist, the proxysettings might be located in other menus than the ones describedabove. Consult the documentation of your Web browser for moreinformation on proxy settings.

IntroductionDisabling Proxying forNetscape NavigatorDisabling Proxying forInternet ExplorerWeb browser versions18 Maintenance - Speed Touch Wireless Web Interface278 / 362 3EC 17766 AAAA TCZZA Ed. 0118.1.2 Disabling Proxying for Local IP AddressesThis subsection describes how to avoid that IP addresses, you canconnect to directly, as for the STWireless, are passed over to theProxy server.However, this option can only be used if the Proxy servers aremanually configured, i.e. are not automatically configured, or ifthe Proxy servers are known by name, and port.1. Select 'Edit' from the toolbar2. Select 'Preferences'3. In the 'Category' box select Advanced, Proxies4. Under 'Manual Proxies', click the view button5. In the Exceptions box, add the IP address of your STWireless,or the IP subnetwork address pool.1. Select 'Tools'from the toolbar2. From the popĆup menu select 'Internet Options'3. In the 'Internet Options' window, select the 'Connections' tab4. Click the 'LAN Settings...' button5. In the 'Proxy Server' box, check the 'Bypass Proxy servers forlocal addresses' box, and click 'Advanced'6. In the 'Exceptions' settings, add the STWireless IP address.Since several versions of these Web browsers exist, the proxysettings might be located in other menus than the ones describedabove. Consult the documentation of your Web browser for moreinformation on proxy settings.

Procedure18 Maintenance - Speed Touch Wireless Web Interface279 / 3623EC 17766 AAAA TCZZA Ed. 0118.2 Browsing to the Web PagesProceed as follows:Step Action and Description1Start the Web browser on your PC or workstation.2Contact the STWireless by entering either:"The STWireless IP addressor"The STWireless DNS hostname.Note: The default IP address is 10.0.0.138The default DNS hostname is SpeedTouch.3If a system password was set (See chapter 16 for more information),an authentication window will pop up:Enter the system password in the 'Password' field and press Enter.

Result18 Maintenance - Speed Touch Wireless Web Interface280 / 362 3EC 17766 AAAA TCZZA Ed. 01As a result the 'Welcome to the World of ADSL' web page pops up:From now on the STWireless acts as a Web server sending HTMLpages/forms at your request. You can fill out these pages/formsand submit them to the STWireless. The latter scans the pagesand makes configurations accordingly.

In this sectionSTWireless web pageframes18 Maintenance - Speed Touch Wireless Web Interface281 / 3623EC 17766 AAAA TCZZA Ed. 0118.3 Web Page Structure"STWireless Web Page Frames"Header Frame Components"Menu Frame Components"Body Frame Components.All web pages can be divided into three sections:Menu frame HeaderframeBody frameEach web page contains:"A horizontal bar, referred to as Menu frame hereafter"A vertical pane, referred to as Header frame hereafter"The user field, referred to as Body frame hereafter.

Header framecomponentsMenu framecomponents18 Maintenance - Speed Touch Wireless Web Interface282 / 362 3EC 17766 AAAA TCZZA Ed. 01The header frame is present in all of the STWireless web pages.Under the generic ADSL banner it contains on most pages alsosubject related command buttons.Two command buttons are always available:Button FunctionalityTo let the changes you made, take effect.However, you must still click to store the changesto permanent memory.To pop up the STWireless online help pages.Subject related command buttons are only visible in theappropriate web page you have selected.The Menu frame is generic for all STWireless's web pages.Each menu button represents a STWireless configuration webpage, yielding all configurational possibilities related to menusubject.The following buttons are available:Click thisbutton ...To ... SeeReturn to the 'Welcome to the World of ADSL' webpage.18.2Configure user defined STWireless IP parameĆters.11.3.2Set a System passwordPerform a BrowseĆtoĆDefaults.1617.2.1Overview the record of all possible, and existingATM connection information.10.2DialĆin to WAN via the PPP packet service. 8.2Configure the STWireless IP router. 11.4.1Configure the MER packet service. 6.3Configure the PPP packet service. 8.3Configure the CIP packet service. 9.4

18 Maintenance - Speed Touch Wireless Web Interface283 / 3623EC 17766 AAAA TCZZA Ed. 01Click thisbutton ...SeeTo ...Overview active PPTP connections. 7.4Configure the Bridging packet service.View Bridging MAC layer data.5.35.4.2Configure the STWireless DHCP server/client. 11.3.3Configure the STWireless DNS server/client. 12.2Configure the STWireless WLAN parameters. 14Upgrade STWireless software. 15Save all changes made to persistent memory.Open the 'CLI' web pages to allow detailedconfiguration of the STWireless.19.1PopuptheSTWireless online help pages.

18 Maintenance - Speed Touch Wireless Web Interface284 / 362 3EC 17766 AAAA TCZZA Ed. 01

IntroductionIn this chapter19 Maintenance - Speed Touch Wireless Command Line Interface285 / 3623EC 17766 AAAA TCZZA Ed. 0119 Maintenance - Speed Touch WirelessCommand Line InterfaceFor advanced configurations, with full control over all theSTWireless functions, the STWireless exhibits a low levelinterface, i.e. the Command Line Interface (CLI).As the CLI has far more configurational possibilities than theregular STWireless web pages, it is intended for experiencedusers only.The CLI is accessible via:"The STWireless web pages"A Telnet session via Ethernet IP connectivity"The serial 'Console' port.Topic SeeCLI via the Web Pages 19.1Native CLI Access 19.2

In this sectionCLI web pagerequirementsThe STWireless 'CLI'web page19 Maintenance - Speed Touch Wireless Command Line Interface286 / 362 3EC 17766 AAAA TCZZA Ed. 0119.1 CLI via the Web Pages"CLI Web Page Requirements"The STWireless 'CLI' Web Page"CLI Commands Basics"Example: Command Group Description"Executing Commands"Example: Command Execution"Detailed CLI Commands DescriptionTo be able to access the 'CLI' web page, you need the following:"Microsoft's Internet Explorer 4.0, or better"Netscape's Communicator 4.06, or better.Both web browsers must support JavaScript.Clicking in the left pane of the STWireless web pages,pops up the 'CLI' web page (See section 18.2 for moreinformation):

CLI commands basicsExample: commandgroup descriptionExecuting commands19 Maintenance - Speed Touch Wireless Command Line Interface287 / 3623EC 17766 AAAA TCZZA Ed. 01All CLI groups and commands are placed in a menu. You canopen a group by clicking the mark next to a group name, orclicking the group name.The following example shows the output if you click next to the'ip' group name:Clicking on a command name will execute it. Commands withoutparameters are indicated with , and are executed immediately.Commands which require additional parameters are indicatedwith . After you configured all parameters, you must clickto execute the command.

Example: commandexecutionCLI Reference Manual19 Maintenance - Speed Touch Wireless Command Line Interface288 / 362 3EC 17766 AAAA TCZZA Ed. 01Clicking 'aplist' in the 'ip' command group generates thefollowing immediate output:A CLI Reference manual with detailed CLI configurationdescription of all the commands can be found at:http://www.alcatel.comhttp://www.alcateldsl.com

IntroductionIn this chapter19 Maintenance - Speed Touch Wireless Command Line Interface289 / 3623EC 17766 AAAA TCZZA Ed. 0119.2 Native CLI AccessNext to the CLI access via the STWireless web pages, you can usenative access via the serial port, or via a basic Telnet session.This allows configuration via a character based CLI. As aconsequence, the use of a web browser, or even any graphical, oroperational environment is avoided.Topic SeeCLI through a Telnet Session 19.2.1CLI via Serial Access 19.2.2CLI Commands Basics 19.2.3

IntroductionNoteIn this sectionTelnet featuresTelnet requirements19 Maintenance - Speed Touch Wireless Command Line Interface290 / 362 3EC 17766 AAAA TCZZA Ed. 0119.2.1 CLI through a Telnet SessionVia a PC, or terminal connected via the STWireless WLANenvironment, or connected to the Ethernet interface of theSTWireless you can execute CLI commands.However, you must gain access to the STWireless first, byopening a TCP/IP Telnet session.The examples throughout this section all refer to MicrosoftWindows OSs. However, all the concepts remain equally valid forother OSs."Telnet Features"Telnet Requirements"Opening a Telnet Session to your STWireless"Closing a Telnet Session.Telnet is:"A fairly general, biĆdirectional, eightĆbit byteĆorientedcommunication facility"A standard method of interfacing terminal devices to eachother.Prior to using Telnet, you need:"A connected, and configured STWireless, with known IPaddress, or DNS hostname, and, if applicable, the systempassword"A PC, or terminal connected to the (W)LANNote: (W)LAN is referred to as a network containing at leastone PC, or terminal, and your STWireless."A TCP/IP suite installed on this PC, or terminal"A Telnet session application installed on this PC, or terminal.

Opening a Telnetsession to yourSTWireless19 Maintenance - Speed Touch Wireless Command Line Interface291 / 3623EC 17766 AAAA TCZZA Ed. 01Proceed as follows:Step Action and Description1Click from the system tray on your desktop.2Select 'Programs' and click to open a DOSwindow.3The DOS window pops up:At the DOS prompt, enter: telnet.4The 'Telnet' window pops up:In the toolbar, you select 'Connect', and click 'Remote System...'.5The 'Connect' window pops up:In the Host Name' field, enter the STWireless IP address, or itsDNS hostname.Note: The default IP address is 10.0.0.138The default DNS hostname is SpeedTouch.

Result19 Maintenance - Speed Touch Wireless Command Line Interface292 / 362 3EC 17766 AAAA TCZZA Ed. 01Step Action and Description6Click7 The STWireless will prompt you with User:8 Press 'Enter'.9 The following step depends on the following:If ... Then ...A system password was setbeforeYou must supply thepassword, prior to gainingCLI access.No system password wassetNo passwords must besupplied, and you haveimmediate CLI access.10 The STWireless CLI banner will appear:At this point you reached the CLI prompt, preceded by theopening CLI banner:=>CLI commands can be executed now.

Closing a TelnetSessionNote19 Maintenance - Speed Touch Wireless Command Line Interface293 / 3623EC 17766 AAAA TCZZA Ed. 01CLI access to your STWireless is released, either via timeout, orby holding down the 'Ctrl' tab and pressing ']'.To quit the Telnet application, enter quit, or hold down the 'Ctrl'tab and press 'C'.You can perform a quick release from the CLI to your OS'sprompt, by holding down the 'Ctrl' tab and pressing 'C' at the CLIprompt.

Advantages of the CLIvia serial accessSerial accessrequirementsSerial connectionsettingsAccessing the CLI19 Maintenance - Speed Touch Wireless Command Line Interface294 / 362 3EC 17766 AAAA TCZZA Ed. 0119.2.2 CLI via Serial AccessThe CLI via serial access:"Provides CLI command connectivity to the STWireless,without the need of a TCP/IP configuration"Allows remote STWireless configuration via an intermediatePOTS modem, or ISDN modem/router.For serial access, you need:"A serial cable."An ASCII terminal (VT100), or a PC with ASCII terminalemulation, for local configurationor"A POTS, or ISDN modem/router for remote configurationSetup the serial interface of your ASCII terminal, or PC for:"9600 BAUD"8 databits"no parity, 1 stopbit.As soon the connection is made, your terminal is ready for the CLI.Just press 'Enter' to pop up the CLI banner, possibly aftersupplying the STWireless system password.

IntroductionGeneral CLIinformationCLI helpNavigating through CLIlevels19 Maintenance - Speed Touch Wireless Command Line Interface295 / 3623EC 17766 AAAA TCZZA Ed. 0119.2.3 CLI Command BasicsAlthough it is not the aim of this subsection to give a complete overview of all possible configurational STWireless items, thissubsection describes some of the generalities of the native CLIenvironment.Once you accessed your STWireless, you will get the CLI prompt:=>.From this point you can start entering your commands.The CLI access is structured in what is called levels".The => prompt indicates that you are in the root" level of CLI.Typing help at the root prompt shows you the available command groups:=>helpFollowing commands are available :help : Displays this help information? : Displays this help informationexit : Exits group selection... : Exits group selection.Following command groups are available :dhcp dns td atmf merbridge pptp ppp cip natqosbook phonebook ip software systemconfig firewall=>Entering the name of a command group, accesses you to thisspecific level.For example , entering =>config followed by pressing 'Enter',brings you to the 'config' level.This is indicated by its own prompt: [config]=>

$Command group helpCommand helpCommand executionCLI Reference Manual19 Maintenance - Speed Touch Wireless Command Line Interface296 / 362 3EC 17766 AAAA TCZZA Ed. 01Typing help at the command group level prompt shows you theavailable commands.For example , entering help at the 'config' level generates thefollowing output:[config]=>helpFollowing command groups are available :save : Saves complete configuration.erase : Removes all saved data.load : Loads saved or factory default configuration.flush : Flushes complete configuration.reset : Flush & restore factory default configuration.[config]=>Typing help followed by a command generates shows you adescription of the command, and a parameter syntax, ifapplicable:For example , entering help reset in the 'config' levelgenerates the following output:[config]=>help reset [keep_ip = <{no|yes}>] Reset IP settings or not. Resetting IP can break current telnet/http session ![config]=>Typing the command executes the command. In most cases youmust also provide related parameters.The consequences of a command execution have immediateeffect. However, only after executing the save command, the newsettings are stored in persistent memory.A CLI Reference manual with detailed CLI configurationdescription of all the commands can be found at:http://www.alcatel.comhttp://www.alcateldsl.com$

Alcatel USA 0101 Spread Spectrum Wireless ADSL Router User Manual Manual

Alcatel USA Marketing, Inc. Spread Spectrum Wireless ADSL Router Manual

Manual

Navigation menu

Namespaces

Views

Navigation