AT&T RIM BlackBerry 8300 User manual

1
AT&T VPN Gateway 8300
Version 6.0.1

2
© 2014 AT&T Intellectual Property. All rights reserved. AT&T, the AT&T logo and all other AT&T marks
contained herein are trademarks of AT&T Intellectual Property and/or AT&T affiliated companies. All
other marks contained herein are the property of their respective owners
California Prop 65 Warning: WARNING this product contains chemicals known to the state of California
to cause cancer, birth defects or other reproductive harm.

3

רצומב






רצומה
רצומה
רצומב

רצומה



רצומה






Class A










ןאוביהלנוישנרטניא ססיורס קרווטנ לבולג יט דנא יט ייא05107 דול ,הפועתה הדש תיירק ,4 בגנה בוחר

DSA-60PFB-24 1 190250



Class A



Table of Contents

4
Installing the AT&T VPN Gateway 8300....................................................................................................................................................5
Step 1: Establish Physical Connectivity to the Internet ..............................................................................................................................5
Option a. Wired Ethernet Connection.....................................................................................................................................................6
Option b. Cellular Connection ................................................................................................................................................................6
Step 2: Establish Local Network Connectivity ............................................................................................................................................6
Configuring the AT&T VPN Gateway 8300 ...............................................................................................................................................7
Access the AT&T VPN Gateway Web Interface ..........................................................................................................................................7
Primary IPv4 WAN Interface Set-up...........................................................................................................................................................8
Configuring DHCP ...............................................................................................................................................................................10
Configuring a Static IP Address............................................................................................................................................................11
Configuring PPPoE...............................................................................................................................................................................12
Configuring an Always-On Cellular Connection..................................................................................................................................13
Configuring a User Controllable Dial as Primary Configuration..........................................................................................................15
Cellular service verification..................................................................................................................................................................17
Administrator Access.................................................................................................................................................................................18
Establishing VPN Connectivity .................................................................................................................................................................19
LAN Port Configuration.............................................................................................................................................................................21
VLANS.......................................................................................................................................................................................................21
Hub Mode..................................................................................................................................................................................................24

5
Installing the AT&T VPN Gateway 8300
Unpack the AT&T VPN Gateway 8300, the cables, and the power supply.
Installation steps vary depending on type of Internet connection and type of local network connectivity. See Figure 1 for
connectors on the rear panel of the AT&T VPN Gateway 8300.
Figure 1: AT&T VPN Gateway 8300 Rear Panel
Follow the guide below to determine the necessary set-up steps for your environment.
Step 1: Establish Physical Connectivity to the Internet
In most cases, a wired Ethernet connection will be provided by your ISP. This type of connection includes DSL, Cable and
Managed Internet Connections. It is also possible to connect to the Internet via high speed cellular access, in which case
you should proceed to the appropriate section in this guide.
Once an Internet Connection has been established, the AT&T VPN Gateway 8300 will try to retrieve its configuration from
the network, and if successful, may perform an automatic reboot to pick up the new configuration. This should occur within
the first 2-3 minutes after initial power on. Wait for a steady GREEN ONLINE light on the front panel to indicate the AT&T
VPN Gateway 8300 is ready for use.
Basic connectivity is shown in Figure 2. Devices in the local network are connected to one or more of the LAN ports on
the rear of the AT&T VPN Gateway 8300; the broadband connection is usually established via the WAN 1 port.
AT&T VPN Gateway
8300
Other network devices
Computer
INTERNET
Broadband Internet
Device (DSL / Cable
modem)
Figure 2: Basic Network Connectivity

6
Option a. Wired Ethernet Connection
Use a straight-through Ethernet cable (usually provided by your Broadband Internet Service Provider) to connect your
Internet broadband interface device to the Ethernet port labeled WAN 1 on the AT&T VPN Gateway 8300. The AT&T VPN
Gateway should be connected directly to the broadband interface device.
Dynamic Host Control Protocol (DHCP) is the default configuration for Internet IP addressing of the AT&T VPN Gateway
8300 Internet network interface. If your device automatically obtains an address from your ISP through DHCP, it should
auto-configure shortly after powering up.
If your Broadband Internet Service Provider supplied you with a static IP address or PPPoE account information for use
with your broadband connection, you will need to perform additional configuration of the primary interface through the
AT&T VPN Gateway 8300 web interface in order to establish Internet access and to retrieve device configuration. See
“Configuring a Static IP Address” or “Configuring PPPoE” later in the guide.
Option b. Cellular Connection
Insert your approved cellular USB modem into one of the three USB ports on the front or back of the AT&T VPN Gateway
8300.
The AT&T VPN Gateway needs basic set-up of the cellular USB modem through the web interface before it can connect
to the Internet to retrieve its configuration. See “Configuring an Always-On Cellular Connection” or “Configuring a
User Controllable Dial as Primary Configuration” later in the guide. After a cellular connection is set up and
connected the GREEN ONLINE light on the front panel will blink to indicate the AT&T VPN Gateway 8300 is using a
cellular connection.
Step 2: Establish Local Network Connectivity
In most cases, your devices will attach directly to the AT&T VPN Gateway 8300 via one of the 8 VLAN ports with an
Ethernet cable. The Local LAN ports are auto-sensing, so either a straight-through or a crossover cable can be used
interchangeably.
The default configuration for computers attaching to any of the AT&T VPN Gateway 8300 Local LAN ports is DHCP. If
you are not sure if you are using DHCP for your LAN IP addressing, please contact your Information Services (IS)
Department for assistance before proceeding.
If your computer is configured to use DHCP, but the AT&T VPN Gateway 8300 is not providing your computer with an IP
address, please contact your IS Department. In this case you will not be able to access the Web Interface as described
below.
Once the necessary cabling has been attached, connect the power supply to the receptacle labeled 19V –2.5A and to a
standard AC power outlet.
Note: After the AT&T VPN Gateway has retrieved its configuration, the IP addresses given out on the LAN ports are likely
to change from the default values the device was configured for. If the IP addressing does change, it may be necessary to
reboot or reconfigure your devices attached to the AT&T VPN Gateway in order to obtain/assign a valid IP address to use
when accessing the Local LAN ports of the AT&T VPN Gateway.

7
Configuring the AT&T VPN Gateway 8300
In most cases, no user-level configuration is required as an IP address is retrieved automatically through DHCP and the
device configuration is retrieved from the network. In some cases it is necessary to perform some initial configuration
through the Web Interface –for example if the primary Internet connection needs to be manually configured prior to use.
Access the AT&T VPN Gateway Web Interface
The AT&T VPN Gateway web interface can be accessed from a computer attached to a LAN port on the AT&T VPN
Gateway. The web interface can be used to access various administration functions and can allow the VPN connection to
be controlled.
1. Open your web browser.
2. In the Address or Location box enter http://attvpngateway.att.com and press the Enter key.
3. This will take you to one of several possible initial pages, depending on your configuration and connectivity
options. Common navigation icons appear on the upper left side of each page for access to “Home”, “Control
Panel” and “Help”
In the event that the AT&T VPN Gateway has already retrieved its configuration, it may have been configured for
Administrator access. See Administrator Access on page 18 for more information on gaining administrator access to the
web interface.

8
Primary IPv4 WAN Interface Set-up
To configure the primary interface for something other than DHCP (or to change DHCP settings), follow these steps:
1. Access the web interface as described on page 7.
2. Click on the Control Panel navigation icon.
3. Click the entry for Network Settings to display the Network Settings sub-menu and click the entry for AT&T VPN
Gateway WAN IPv4 IP Settings as shown in Figure 3.
Figure 3: Network Settings Selection

9
Figure 4 will be displayed where you will be given the opportunity to select your primary connection type.
Figure 4: IPv4 Settings Window
If you are not sure how your Internet Access should be configured, contact your IS department. Two basic types of
connection are offered. An “Always-On Internet Connection” means that the connection will normally always be available,
and the AT&T VPN Gateway will try to re-establish connectivity if the connection is lost. The other type is for where an
Internet connection is only established when required. This is commonly used where having a connection up at all times
may be expensive and there are periods of time when the connection is not required. Continue configuration from the
section appropriate to your connection type.

10
Configuring DHCP
To configure DHCP, follow these steps after reaching Figure 4:
1. Select the radio button next to “DHCP” on Figure 4 and click OK to proceed to the DHCP set up window.
2. Select the DHCP options required by your ISP on Figure 5. Most ISPs do NOT require any of these values to be
set.
3. Press OK to save the new settings.
4. At the end of the set-up, you will be asked to reboot to pick up the new configuration. After reboot, skip to the
section titled “Establishing VPN Connectivity”on page 19.
Figure 5: DHCP Settings

11
Configuring a Static IP Address
To configure a static IP address, follow these steps after reaching Figure 4:
1. Select the radio button next to “Static”on Figure 4 and click OK to proceed to the Static IP set up window.
2. Enter the Static IP information requested on Figure 6 and press OK to save the new settings. The Static IP
information is provided by your ISP.
3. At the end of the set-up, you will be asked to reboot to pick up the new configuration. After reboot, skip to the
section titled “Establishing VPN Connectivity” on page 19.
Figure 6: Static IP Settings

12
Configuring PPPoE
To configure PPPoE Account information, follow these steps after reaching Figure 4:
1. Select the radio button next to “PPPoE”on Figure 4 on and click OK to proceed to the to the PPPoE set up
window.
2. Enter the information requested on Figure 7 and press OK to save the new settings.
3. At the end of the set-up, you will be asked to reboot to pick up the new configuration. After reboot, skip to the
section titled “Establishing VPN Connectivity” on page 19.
Figure 7: PPPoE Settings

13
Configuring an Always-On Cellular Connection
To configure an Always-On Cellular connection, follow these steps after reaching Figure 4:
1. Ensure your supported Cellular USB modem is inserted into one of the three USB ports on the front or back of
the AT&T VPN Gateway 8300.
2. Select the radio button next to Cellular in the “Always-On” section and click OK to proceed to the set-up
sequence.
3. Select your modem type from the drop down menu on Figure 8. For more detailed information on supported
Cellular USB modems and associated configuration, please contact your IS Department.
4. The Access Point Name and AT Strings are optional fields that you can enter information into if they are required.
If these fields are not required then leave them blank. Click NEXT to proceed to the next page.
5. Enter the phone number provided by your Cellular service provider on Figure 9.
6. Enter the user ID and password provided by your Cellular service provider. Some networks/APNs don't use the
user ID and some Cellular service providers require that the user ID is NOT sent. In those cases enter “empty”
(without quotes) for both the user ID and password to ensure that no user ID and password information is sent in
the authentication flow.
7. At the end of the set-up, you will see a summary of the configuration and will be asked to reboot to pick up the
new configuration. After reboot, skip to the section “Establishing VPN Connectivity”on page 19.

14
Figure 8: Cellular Always On Settings- Modem Properties
Figure 9: Cellular Always On Settings - Login Information

15
Configuring a User Controllable Dial as Primary Configuration
To configure a Cellular User Controllable Dial as Primary connection, follow these steps after reaching Figure 4:
1. Ensure your supported Cellular USB modem is inserted into one of the three USB ports on the front or back of
the AT&T VPN Gateway 8300.
2. Select the radio button next to “Cellular”in the “User Controllable Dial as Primary Connection” section and click
OK to proceed to the set-up sequence.
3. Select your modem type from the drop down menu on Figure 10. For more detailed information on supported
Cellular USB modems and associated configuration, please contact your IS Department.
4. The Access Point Name and AT Strings are optional fields that you can enter information into if they are required.
If these fields are not required then leave them blank. Click NEXT to proceed to the next page.
5. Enter the phone number provided by your Cellular service provider on Figure 11.
6. Enter the user ID and password provided by your Cellular service provider. Some networks/APNs don't use the
user ID and some Cellular service providers require that the user ID is NOT sent. In those cases enter “empty”
(without quotes) for both the user ID and password to ensure that no user ID and password information is sent in
the authentication flow.
7. Select your Dial Internet connection method from the drop down menu.
8. At the end of the set-up, you will see a summary of the configuration and will be asked to reboot to pick up the
new configuration. After reboot, skip to the section titled “Establishing VPN Connectivity”on page 19.

16
Figure 10: Cellular Dial as Primary Settings - Modem Properties
Figure 11: Cellular Dial as Primary Settings - Login Information

17
Cellular service verification
After completing the setup of either mode of the cellular connection, it is important to determine that there is adequate
signal strength before deciding on a final installed position. Cellular coverage can vary, even over a short distance and a
bad placement of the AT&T VPN Gateway 8300 can result in substandard or even non-existent cellular service.
You can check the signal strength at site of install by pressing the “reset” button on the back while powered on with the
Cellular USB modem inserted. A paper clip or other sharp object will be required to properly depress this button.
The signal strength will be represented by a sequence of LEDs illuminated on the front panel. Up to six LEDs, starting with
the “online” light may be illuminated depending on detected strength. The signal strength will appear in this form for five
seconds. At least three LEDs of signal strength are recommended.
Figure 12: Cellular Signal Strength Display
The unit should be installed in a location that gives optimal signal strength.
Note: After the final location has been determined by the best signal strength the AT&T VPN Gateway needs to be
rebooted in order to re-establish the cellular connection.

18
Administrator Access
One or more users may be designated as administrators by your IS Department. If your AT&T VPN Gateway 8300 was
set up for administrator access, Figure 13 is displayed and you must select your authentication level. You must be a
designated administrator to configure or control the AT&T VPN Gateway 8300.Select Administrator, enter the password
provided by your IS Department, and click OK.
Selecting General User and then clicking OK restricts the current session to be view only. Certain functionality, such as
the ability to terminate the VPN connection, is disabled.
If an Administrator password is not required Figure 13 is not displayed. The AT&T VPN Gateway must be able to retrieve
configuration from the network in order to implement Administrator access.
Figure 13: Administration Panel

19
Establishing VPN Connectivity
The authentication mode of your AT&T VPN Gateway 8300 is determined by the service parameters ordered by your IS
Department. All configurations require a username and password of some form and may also require other information.
This information may be downloaded from the network and the AT&T VPN Gateway 8300 may be set to automatically
establish connectivity. To establish a VPN connection with your AT&T VPN Gateway 8300 follow these steps:
1. Open your web browser as described under “Access the AT&T VPN Gateway Web Interface”on page 7 and if
necessary click the Home button to view the Login page. The form of the page will depend on the network and
type of authentication configured. Figure 14 shows a Login page for an AT&T Managed connection where the
VPN Service connection method and Dial Backup VPN Service connection method are configurable by the user.
2. One or more VPN connections may have been defined. Each VPN connection will be represented in a status box
on the left side of the page, showing the current state of each connection. If there is more than one VPN
connection defined, only the first VPN connection can be user controlled. The others will be established and
maintained automatically. The user controllable connection status will always be the top entry in the status box.
3. If user input is required in order to establish the primary VPN connection, provide the requested information and
click Connect.
4. The AT&T VPN Gateway 8300 authenticates your credentials and establishes a secure VPN connection to your
network.
5. A status page will be shown similar to Figure 15 until the VPN connection is terminated.

20
Figure 14: Example of Login Page for AT&T Managed
Figure 15: Example of Connected Page