Alcatel SpeedTouch 610 Programming manual

SpeedTouchTM
610/610i/610s/610v
Business DSL Router
Remote Management
600
SERIES

Application Note Ed. 01
SpeedTouchTM 610
Remote Management

Application Note Ed. 01
Status Released
Change Note PeckelbeenS
Short Title AppNote_RemoteManagement R4.1 Ed. 01
Copyright © 2002 THOMSON multimedia. All rights reserved. Passing on, and copying of this docu-
ment, use and communication of its contents is not permitted without written authorization
from THOMSON multimedia. The content of this document is furnished for informational
use only, may be subject to change without notice, and should not be construed as a commit-
ment by THOMSON multimedia. THOMSON multimedia assumes no responsibility or
liability for any errors or inaccuracies that may appear in this document.

Application Note Ed. 01 1
Contents
1 Introduction .................................................................... 3
2 SpeedTouchTM610 Remote Access.............................. 5
2.1 The SpeedTouchTM610 Firewall ........................................................................ 6
2.2 Remote SpeedTouchTM610 Web Interface Access ......................................... 8
2.3 Remote SpeedTouchTM610 Telnet Access ....................................................... 9
2.4 Remote SpeedTouchTM610 FTP Access ......................................................... 10
2.5 SpeedTouchTM610 Controlled Access ............................................................ 11
3 SpeedTouchTM610 Syslog............................................ 13
3.1 The SpeedTouchTM610 Syslog Daemon ......................................................... 14
3.2 Syslog via the Web Pages ................................................................................. 17
3.3 Syslog via the CLI............................................................................................... 18
3.4 Remote Syslog Notification .............................................................................. 19
4 The SpeedTouchTM610 SNMP.................................... 21
4.1 SpeedTouchTM610 SNMP configuration ......................................................... 22
4.2 SpeedTouchTM610 MIBs ................................................................................... 24

Application Note Ed. 01
2

1Introduction
Application Note Ed. 01 3
1Introduction
Overview
Abstract Being a key component of your business network, a good operation of the
SpeedTouchTM610 is essential to gain maximum performance of your DSL connections.
Continuous management and diagnosis of the SpeedTouchTM610 should be performed
to ensure a faultless operation of the SpeedTouchTM610, 24 hours a day, 7 days a week.
As such, the SpeedTouchTM610 can be perfectly embedded in high quality networks,
covered by Service Level Agreements (SLAs).
This application note describes how to remotely manage the SpeedTouchTM610 Busi-
ness DSL Router.
This application note focusses on the diagnosis and management of the
SpeedTouchTM610 from the Wide Area Network (WAN) side, i.e. remotely “over” the
DSL line. Nevertheless, most if not all topics described can be equally performed from
the local LAN.
Applicability This application note applies to the following SpeedTouchTM Business DSL Routers:
•The SpeedTouchTM610 ADSL/POTS Business DSL Router
•The SpeedTouchTM610i ADSL/ISDN Business DSL Router
•The SpeedTouchTM610s SHDSL Business DSL Router
•The SpeedTouchTM610v VDSL Business DSL Router.

Application Note Ed. 01
1 Introduction
4

2 SpeedTouchTM610 Remote Access
Application Note Ed. 01 5
2SpeedTouch
TM610 Remote Access
Introduction The application note SpeedTouchTM610 Operation and Maintenance described some of
the standard access methods the SpeedTouchTM610 provides to allow users to perform
configurations and/or - if needed- the required procedures for maintaining and opti-
mizing SpeedTouchTM610 operation and performance.
While that application note described what tools are provided by the
SpeedTouchTM610 and how to use them via the SpeedTouchTM610’s local interface(s)
(Ethernet and ATMF-25.6Mb/s), this section will describe how you can use the very
same tools via its DSL interface, i.e. from the remote side of the Packet service connec-
tion.
Resumé of
SpeedTouchTM610
access methods
Before going deeper into the specific changes needed to allow certain monitoring or
management, a listing of the methods to access the SpeedTouchTM610 is provided:
•SpeedTouchTM610 web interface access (HTTP/HTML)
•SpeedTouchTM610 CLI access (TCP/IP-Telnet)
•SpeedTouchTM610 FTP access (TCP/IP-FTP).
Note For more information on the SNTP, Syslog and SNMP management tools,
see the respective sections in this application note.

Application Note Ed. 01
2 SpeedTouchTM610 Remote Access
6
2.1 The SpeedTouchTM610 Firewall
Introduction All traffic from, to, or via any of the SpeedTouchTM610 interfaces is subjected to its
powerful programmable firewall.
For a full description of the SpeedTouchTM610 programmable firewall see the applica-
tion note The SpeedTouchTM610 and Firewalling.
In the scope of Remote management however, the following topics provide some essen-
tial information to understand the operation of the SpeedTouchTM610 firewall.
Default firewall
configuration
By default a set of rules is provided for basic firewalling.
Defining LAN as your local network, SpeedTouchTM610 as the SpeedTouchTM610’s IP
host, and WAN as the “outside” network (i.e. any IP connection configured over the
SpeedTouchTM610 DSL line), the combination of the firewall rules make sure that IP
packets migrating:
•from WAN to LAN are allowed (Rule 1)
•from LAN to WAN are allowed (Rule 2)
•from LAN to SpeedTouchTM610 are allowed (Rule 3)
•from SpeedTouchTM610 to LAN are allowed (Rule 4)
•from SpeedTouchTM610 to WAN are dropped, except DNS and DHCP (Rule 5)
•from WAN to SpeedTouchTM610 are dropped, except DNS and DHCP (Rule 6)
•from WAN to WAN are dropped (Rule 7).
Rules 1 and 2 can be considered as “DSL Gateway rules”: these assure that the
SpeedTouchTM610 can act as DSL Gateway for your local network.
Rules 3 and 4 can be defined as “Local Management rules”: these two rules enable
direct communication between the local network and the SpeedTouchTM610 IP host (be
it for http, ftp or telnet access) possible.
Rules 5, 6 and 7 could be defined as the “Security and Remote Management rules”:
these rules ensure that by default no one from the WAN has IP access with the
SpeedTouchTM610 device itself.