bintec elmeg be.IP 4isdn User manual

Manual
be.IP 4isdn
Operation as a Media Gateway
Copyright© Version 10.1.27 RC 10/2017 bintec elmeg GmbH
bintec elmeg GmbH Manual
be.IP 4isdn

Legal Notice
Warranty
This publication is subject to change.
bintec elmeg GmbH offers no warranty whatsoever for information contained in this manu-
al. bintec elmeg GmbH is not liable for any direct, indirect, collateral, consequential or any
other damage connected to the delivery, supply or use of this manual.
Copyright © bintec elmeg GmbH.
All rights to the data included, in particular the right to copy and propagate, are reserved by
bintec elmeg GmbH.
Open source software in this product
Along with other components, this product contains open source software that has been
developed by third party suppliers and which is licensed under an open source software li-
cense. These open source software files are subject to copyright. For a current list of the
open source software programs and the open source software licenses, go to
www.bintec-elmeg.com.
GEMA
This product uses internal music for calls on hold for which approval from GEMA (German
Society for Musical Performance and Mechanical Reproduction Rights) is not required. This
has been confirmed by GEMA with the following approval certification. The approval certi-
fication can be viewed at the following web address: www.bintec-elmeg.com. System hold
music: elmeg Song, Hold the line.
Manual bintec elmeg GmbH
be.IP 4isdn

Table of Contents
Chapter1 Introduction...........................1
Chapter2 Introduction...........................2
2.1 be.IP4isdn ............................ 2
2.1.1 Setting up and connecting . . . . . . . . . . . . . . . . . . . . . . 2
2.1.2 Connectors ............................ 4
2.1.3 Connections (on the side) . . . . . . . . . . . . . . . . . . . . . . 4
2.1.4 Mountingbrackets......................... 4
2.1.5 LEDs............................... 5
2.1.6 Scopeofsupply .......................... 6
2.1.7 General Product Features . . . . . . . . . . . . . . . . . . . . . . 7
2.2 Reset............................... 8
2.3 Presettings ............................ 9
2.4 Support-Information . . . . . . . . . . . . . . . . . . . . . . . . 10
Chapter3 Mounting ........................... 11
3.1 Connecting terminals . . . . . . . . . . . . . . . . . . . . . . . 11
3.1.1 Internal ISDN connection . . . . . . . . . . . . . . . . . . . . . 11
3.2 Resetbutton........................... 11
3.3 Wallmounting.......................... 11
3.4 PinAssignments......................... 12
3.4.1 Ethernet interfaces . . . . . . . . . . . . . . . . . . . . . . . . 12
3.4.2 ISDNinterface.......................... 13
3.4.3 VDSLinterface.......................... 14
3.4.4 Serialinterface.......................... 14
Chapter 4 Basic configuration . . . . . . . . . . . . . . . . . . . . . . 16
bintec elmeg GmbH Table of Contents
be.IP 4isdn i

4.1 Preparations........................... 16
4.1.1 Systemsoftware ......................... 16
4.1.2 System requirements . . . . . . . . . . . . . . . . . . . . . . . 16
4.1.3 Gatheringdata.......................... 17
4.1.4 SettingupaPC ......................... 18
4.2 Configuring the system . . . . . . . . . . . . . . . . . . . . . . 19
4.2.1 Network setting (LAN) . . . . . . . . . . . . . . . . . . . . . . . 20
4.2.2 Enter SIP provider . . . . . . . . . . . . . . . . . . . . . . . . 20
4.3 Setting up an internet connection . . . . . . . . . . . . . . . . . . 20
4.3.1 Internet connection via the internal VDSL modem . . . . . . . . . . . 20
4.3.2 Other internet connections . . . . . . . . . . . . . . . . . . . . . 20
4.3.3 Testing the configuration. . . . . . . . . . . . . . . . . . . . . . 21
4.4 Useraccess........................... 21
4.5 Software updates for be.IP 4isdn . . . . . . . . . . . . . . . . . . 22
Chapter 5 Access and configuration. . . . . . . . . . . . . . . . . . . 24
5.1 AccessviaLAN ......................... 24
5.1.1 HTTP/HTTPS.......................... 24
5.2 Configuration........................... 24
5.2.1 Configuration interface . . . . . . . . . . . . . . . . . . . . . . 24
Chapter6 Assistants........................... 35
Chapter 7 System Management . . . . . . . . . . . . . . . . . . . . . 36
7.1 Status.............................. 36
7.2 GlobalSettings ......................... 38
7.2.1 System............................. 38
7.2.2 Passwords ........................... 41
7.2.3 DateandTime.......................... 42
Table of Contents bintec elmeg GmbH
ii be.IP 4isdn

7.2.4 SystemLicences......................... 46
7.3 Interface Mode / Bridge Groups . . . . . . . . . . . . . . . . . . 49
7.3.1 Interfaces............................ 50
7.4 Administrative Access . . . . . . . . . . . . . . . . . . . . . . 53
7.4.1 Access............................. 53
7.4.2 SSH .............................. 54
7.4.3 SNMP ............................. 58
7.5 Remote Authentication . . . . . . . . . . . . . . . . . . . . . . 59
7.5.1 RADIUS ............................ 59
7.5.2 Options............................. 64
7.6 Configuration Access . . . . . . . . . . . . . . . . . . . . . . . 65
7.6.1 AccessProfiles.......................... 65
7.6.2 Users.............................. 68
7.7 Certificates ........................... 69
7.7.1 CertificateList.......................... 70
7.7.2 CRLs.............................. 77
7.7.3 Certificate Servers . . . . . . . . . . . . . . . . . . . . . . . . 78
Chapter 8 Physical Interfaces . . . . . . . . . . . . . . . . . . . . . . 79
8.1 EthernetPorts.......................... 79
8.1.1 Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . 80
8.2 ISDNPorts ........................... 81
8.2.1 ISDN Configuration . . . . . . . . . . . . . . . . . . . . . . . . 82
8.2.2 MSN Configuration . . . . . . . . . . . . . . . . . . . . . . . . 84
8.3 DSLModem........................... 86
8.3.1 DSL Configuration . . . . . . . . . . . . . . . . . . . . . . . . 86
Chapter9 LAN.............................. 90
9.1 IPConfiguration......................... 90
bintec elmeg GmbH Table of Contents
be.IP 4isdn iii

9.1.1 Interfaces............................ 90
9.2 VLAN.............................. 102
9.2.1 VLANs ............................. 102
9.2.2 Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . 103
9.2.3 Administration.......................... 104
Chapter 10 Wireless LAN Controller . . . . . . . . . . . . . . . . . . 105
10.1 Wizard ............................. 105
10.1.1 Wireless LAN Controller Wizard . . . . . . . . . . . . . . . . . . 105
10.1.2 Wireless LAN Controller VLAN Configuration . . . . . . . . . . . . 111
10.2 Controller Configuration . . . . . . . . . . . . . . . . . . . . . . 112
10.2.1 General............................. 112
10.2.2 Slave AP Autoprofile . . . . . . . . . . . . . . . . . . . . . . . 115
10.3 Slave AP configuration . . . . . . . . . . . . . . . . . . . . . . 116
10.3.1 Slave Access Points . . . . . . . . . . . . . . . . . . . . . . . 116
10.3.2 RadioProfiles.......................... 119
10.3.3 Wireless Networks (VSS) . . . . . . . . . . . . . . . . . . . . . 125
10.4 Monitoring............................ 133
10.4.1 WLAN Controller . . . . . . . . . . . . . . . . . . . . . . . . . 133
10.4.2 Slave Access Points . . . . . . . . . . . . . . . . . . . . . . . 134
10.4.3 ActiveClients .......................... 135
10.4.4 Wireless Networks (VSS) . . . . . . . . . . . . . . . . . . . . . 135
10.4.5 Client Management . . . . . . . . . . . . . . . . . . . . . . . . 136
10.5 Neighbor Monitoring . . . . . . . . . . . . . . . . . . . . . . . 136
10.5.1 NeighborAPs.......................... 136
10.5.2 RogueAPs ........................... 137
10.5.3 RogueClients.......................... 137
10.6 Maintenance .......................... 138
10.6.1 Firmware Maintenance . . . . . . . . . . . . . . . . . . . . . . 138
Table of Contents bintec elmeg GmbH
iv be.IP 4isdn

Chapter11 Networking......................... 141
11.1 Routes............................. 141
11.1.1 IPv4 Route Configuration . . . . . . . . . . . . . . . . . . . . . 141
11.1.2 IPv6 Route Configuration . . . . . . . . . . . . . . . . . . . . . 146
11.1.3 IPv4 Routing Table . . . . . . . . . . . . . . . . . . . . . . . . 148
11.1.4 IPv6 Routing Table . . . . . . . . . . . . . . . . . . . . . . . . 149
11.1.5 Options............................. 150
11.2 IPv6 General Prefixes . . . . . . . . . . . . . . . . . . . . . . 151
11.2.1 General Prefix Configuration . . . . . . . . . . . . . . . . . . . . 151
11.3 NAT .............................. 152
11.3.1 NATInterfaces.......................... 153
11.3.2 NAT Configuration . . . . . . . . . . . . . . . . . . . . . . . . 154
11.3.3 NAT - Configuration example. . . . . . . . . . . . . . . . . . . . 160
11.4 LoadBalancing ......................... 162
11.4.1 Load Balancing Groups . . . . . . . . . . . . . . . . . . . . . . 162
11.4.2 Special Session Handling . . . . . . . . . . . . . . . . . . . . . 166
11.4.3 Load balancing - Configuration example . . . . . . . . . . . . . . . 169
11.5 QoS .............................. 172
11.5.1 IPv4/IPv6 Filter . . . . . . . . . . . . . . . . . . . . . . . . . 172
11.5.2 QoS Classification . . . . . . . . . . . . . . . . . . . . . . . . 176
11.5.3 QoS Interfaces/Policies . . . . . . . . . . . . . . . . . . . . . . 178
11.6 AccessRules .......................... 185
11.6.1 AccessFilter .......................... 186
11.6.2 RuleChains........................... 190
11.6.3 Interface Assignment . . . . . . . . . . . . . . . . . . . . . . . 191
Chapter12 Multicast........................... 193
12.1 General............................. 194
12.1.1 General............................. 194
bintec elmeg GmbH Table of Contents
be.IP 4isdn v

12.2 IGMP.............................. 195
12.2.1 IGMP.............................. 195
12.2.2 Options............................. 198
12.3 Forwarding ........................... 199
12.3.1 Forwarding ........................... 199
Chapter13 WAN............................. 200
13.1 Internet+Dialup......................... 200
13.1.1 PPPoE............................. 201
13.1.2 PPTP.............................. 209
13.1.3 PPPoA............................. 214
13.1.4 IPPools ............................ 221
13.2 ATM .............................. 222
13.2.1 Profiles............................. 223
13.2.2 Service Categories . . . . . . . . . . . . . . . . . . . . . . . . 227
13.2.3 OAM Controlling . . . . . . . . . . . . . . . . . . . . . . . . . 229
13.3 Real Time Jitter Control . . . . . . . . . . . . . . . . . . . . . . 233
13.3.1 Controlled Interfaces . . . . . . . . . . . . . . . . . . . . . . . 233
Chapter14 VPN............................. 235
14.1 IPSec.............................. 235
14.1.1 IPSecPeers........................... 236
14.1.2 Phase-1 Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 252
14.1.3 Phase-2 Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 259
14.1.4 XAUTHProfiles ......................... 263
14.1.5 IPPools ............................ 265
14.1.6 Options............................. 266
14.2 be.IP Secure Client . . . . . . . . . . . . . . . . . . . . . . . . 269
14.3 LISPLight............................ 269
Table of Contents bintec elmeg GmbH
vi be.IP 4isdn

14.3.1 Router (ITR/ETR) . . . . . . . . . . . . . . . . . . . . . . . . 271
14.3.2 Local/Remote-Sites . . . . . . . . . . . . . . . . . . . . . . . 273
14.3.3 EID Prefix Segregation (LISP Instances) . . . . . . . . . . . . . . 275
Chapter15 Firewall........................... 277
15.1 Policies............................. 278
15.1.1 IPv4 Filter Rules . . . . . . . . . . . . . . . . . . . . . . . . . 279
15.1.2 IPv6 Filter Rules . . . . . . . . . . . . . . . . . . . . . . . . . 281
15.1.3 Options............................. 283
15.2 Interfaces............................ 285
15.2.1 IPv4Groups........................... 285
15.2.2 IPv6Groups........................... 286
15.3 Addresses ........................... 286
15.3.1 AddressList........................... 286
15.3.2 Groups............................. 287
15.4 Services ............................ 288
15.4.1 ServiceList........................... 288
15.4.2 Groups............................. 290
15.5 Configuration........................... 291
15.5.1 SIF - Configuration example . . . . . . . . . . . . . . . . . . . . 291
Chapter16 VoIP ............................ 296
16.1 Settings............................. 296
16.1.1 Extensions ........................... 296
16.1.2 SIPAccounts .......................... 301
16.1.3 Locations............................ 309
16.1.4 ISDNTrunks .......................... 311
16.1.5 Options............................. 312
16.2 MediaGateway ......................... 315
16.2.1 CallRouting........................... 316
bintec elmeg GmbH Table of Contents
be.IP 4isdn vii

16.2.2 CLID Translation . . . . . . . . . . . . . . . . . . . . . . . . . 319
16.2.3 Call Translation . . . . . . . . . . . . . . . . . . . . . . . . . 320
Chapter 17 Local Services . . . . . . . . . . . . . . . . . . . . . . . 323
17.1 DNS .............................. 323
17.1.1 Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . 324
17.1.2 DNSServers .......................... 327
17.1.3 StaticHosts........................... 329
17.1.4 Domain Forwarding . . . . . . . . . . . . . . . . . . . . . . . 330
17.1.5 DynamicHosts ......................... 331
17.1.6 Cache ............................. 331
17.1.7 Statistics ............................ 332
17.2 HTTPS............................. 332
17.2.1 HTTPSServer.......................... 333
17.3 DynDNSClient ......................... 333
17.3.1 DynDNSUpdate......................... 334
17.3.2 DynDNS Provider . . . . . . . . . . . . . . . . . . . . . . . . 335
17.4 DHCPServer .......................... 337
17.4.1 IP Pool Configuration . . . . . . . . . . . . . . . . . . . . . . . 337
17.4.2 DHCP Configuration . . . . . . . . . . . . . . . . . . . . . . . 338
17.4.3 IP/MACBinding ......................... 342
17.4.4 DHCP Relay Settings . . . . . . . . . . . . . . . . . . . . . . . 343
17.4.5 DHCP - Configuration example . . . . . . . . . . . . . . . . . . . 344
17.5 DHCPv6Server ......................... 347
17.5.1 DHCPv6Server ......................... 349
17.5.2 DHCPv6 Global Options . . . . . . . . . . . . . . . . . . . . . 350
17.5.3 Stateful Clients . . . . . . . . . . . . . . . . . . . . . . . . . 352
17.5.4 Stateful Clients Configuration. . . . . . . . . . . . . . . . . . . . 352
17.6 CAPIServer........................... 353
17.6.1 User .............................. 353
Table of Contents bintec elmeg GmbH
viii be.IP 4isdn