Comtrend Corporation CT-5072T User manual

CT-5072T
ADSL2+ Ethernet Router
User Manual
Version A2.0, January 26, 2010
261095-008

1
Preface
This manual provides information related to the installation and operation of this
device. The individual reading this manual is presumed to have a basic
understanding of telecommunications terminology and concepts.
If you find the product to be inoperable or malfunctioning, please contact technical
support for immediate service by email at INT[email protected]
For product update, new product release, manual revision, or software upgrades,
please visit our website at http://www.comtrend.com
Important Safety Instructions
With reference to unpacking, installation, use, and maintenance of your electronic
device, the following basic guidelines are recommended:
Do not use or install this product near water, to avoid fire or shock hazard. For
example, near a bathtub, kitchen sink or laundry tub, or near a swimming pool.
Also, do not expose the equipment to rain or damp areas (e.g. a wet basement).
Do not connect the power supply cord on elevated surfaces. Allow it to lie freely.
There should be no obstructions in its path and no heavy items should be placed
on the cord. In addition, do not walk on, step on, or mistreat the cord.
Use only the power cord and adapter that are shipped with this device.
To safeguard the equipment against overheating, make sure that all openings in
the unit that offer exposure to air are not blocked.
Avoid using a telephone (other than a cordless type) during an electrical storm.
There may be a remote risk of electric shock from lightening. Also, do not use
the telephone to report a gas leak in the vicinity of the leak.
Never install telephone wiring during stormy weather conditions.
CAUTION:
To reduce the risk of fire, use only No. 26 AWG or larger
telecommunication line cord.
Always disconnect all telephone lines from the wall outlet before servicing
or disassembling this equipment.
WARNING
Disconnect the power line from the device before servicing.
Power supply specifications are clearly stated in Appendix C.
Copyright
Copyright© 2010 Comtrend Corporation. All rights reserved. The information
contained herein is proprietary to Comtrend Corporation. No part of this document
may be translated, transcribed, reproduced, in any form, or by any means without
prior written consent of Comtrend Corporation.
NOTE: This document is subject to change without notice.

2
Table of Contents
CHAPTER 1 INTRODUCTION...........................................................................................................4
1.1 FEATURES LIST................................................................................................................................4
1.2APPLICATION DIAGRAM...................................................................................................................4
CHAPTER 2 INSTALLATION.............................................................................................................5
2.1 HARDWARE SETUP...........................................................................................................................5
2.2 LED INDICATORS.............................................................................................................................6
CHAPTER 3 WEB USER INTERFACE..............................................................................................7
3.1 DEFAULT SETTINGS .........................................................................................................................7
3.2 IP CONFIGURATION..........................................................................................................................8
3.3 LOGIN PROCEDURE........................................................................................................................10
CHAPTER 4 QUICK SETUP.............................................................................................................11
4.1AUTO QUICK SETUP.......................................................................................................................11
4.2 MANUAL QUICK SETUP .................................................................................................................12
4.2.1 PPP over ATM (PPPoA) and PPP over Ethernet (PPPoE)............................................13
4.2.2 MAC Encapsulation Routing (MER) ..............................................................................17
4.2.3 IP Over ATM...................................................................................................................20
4.2.4 Bridging..........................................................................................................................24
CHAPTER 5 DEVICE INFORMATION...........................................................................................26
5.1 WAN.............................................................................................................................................26
5.2 STATISTICS.....................................................................................................................................27
5.2.1 LAN Statistics..................................................................................................................27
5.2.2 WAN Statistics.................................................................................................................28
5.2.3 ATM statistics .................................................................................................................28
5.2.4 ADSL Statistics ...............................................................................................................31
5.3 ROUTE...........................................................................................................................................34
5.4ARP...............................................................................................................................................35
5.5 DHCP............................................................................................................................................35
CHAPTER 6 ADVANCED SETUP.....................................................................................................36
6.1 WAN.............................................................................................................................................36
6.2 LAN..............................................................................................................................................37
6.3 NAT ..............................................................................................................................................39
6.3.1 Virtual Servers................................................................................................................39
6.3.2 Port Triggering...............................................................................................................40
6.3.3 DMZ Host .......................................................................................................................42
6.3.4 ALG.................................................................................................................................42
6.4 SECURITY ......................................................................................................................................43
6.4.1 IP Filtering .....................................................................................................................43
6.4.2 MAC Filtering.................................................................................................................45
6.5 PARENTAL CONTROL......................................................................................................................46
6.5.1 URL Filter.......................................................................................................................47
6.6 QUALITY OF SERVICE ....................................................................................................................48
6.6.1 Queue Management Configuration ................................................................................48
6.6.2 Queue Configuration......................................................................................................49
6.6.3 QoS Classification ..........................................................................................................50
6.7 ROUTING .......................................................................................................................................52
6.7.1 Default Gateway.............................................................................................................53
6.7.2 Static Route.....................................................................................................................53
6.7.3 RIP..................................................................................................................................54
6.8 DNS..............................................................................................................................................55
6.8.1 DNS Server .....................................................................................................................55
6.8.2 Dynamic DNS.................................................................................................................55
6.9 DSL...............................................................................................................................................57
6.10 CERTIFICATE................................................................................................................................58
6.10.1 Local...............................................................................................................................58

3
6.10.2 Trusted CA......................................................................................................................60
CHAPTER 7 DIAGNOSTICS.............................................................................................................61
CHAPTER 8 MANAGEMENT ..........................................................................................................62
8.1 SETTINGS.......................................................................................................................................62
8.1.1 Backup Settings...............................................................................................................62
8.1.2 Update Settings...............................................................................................................62
8.1.3 Restore Default...............................................................................................................63
8.2 SYSTEM LOG .................................................................................................................................64
8.3 SNMPAGENT ...............................................................................................................................66
8.4 TR-069 CLIENT .............................................................................................................................66
8.5 INTERNET TIME .............................................................................................................................68
8.6ACCESS CONTROL .........................................................................................................................68
8.6.1 Services...........................................................................................................................68
8.6.2 IP Addresses ...................................................................................................................69
8.6.3 Passwords.......................................................................................................................70
8.7 UPDATE SOFTWARE .......................................................................................................................70
8.8 SAVE AND REBOOT ........................................................................................................................71
APPENDIX A –FIREWALL...............................................................................................................72
APPENDIX B –PIN ASSIGNMENTS ...............................................................................................76
APPENDIX C –SPECIFICATIONS..................................................................................................77
APPENDIX D –SSH CLIENT............................................................................................................79

4
Chapter 1 Introduction
The CT-5072T (TR-069 compliant) ADSL2+ Ethernet Router provides one 10/100
Ethernet port and one ADSL port for Internet access. It features TR-068 compliant
panels for easy setup and use. It supports LAN applications, such as Video on
Demand, over a regular telephone line at speeds of up to 24 Mbps. It has full routing
capabilities and advanced security functions, such as VPNs (Virtual Private Networks)
with PPTP pass-through, L2TP pass-through, IPSec pass-through and firewall.
1.1 Features List
Annex A (POTS)
TR-068 compliant
IP filtering
SPI (Stateful Packet Inspection)
DoS protection
Static route
RIP v1/v2
Dynamic IP assignment
NAT/PAT
IGMP proxy
DHCP server/relay/client
DNS proxy
Auto PVC configuration
Up to 8 VCs
FTP/TFTP server
Embedded SNMP agent
IP/MAC address filtering
Web-based management
Configuration backup and restoration
Supports TR-069/TR-098/TR-111 for remote management
Supports remote administration, automatic firmware upgrade and configuration
1.2 Application Diagram
The following diagram depicts the application of the CT-5072T.

5
Chapter 2 Installation
2.1 Hardware Setup
Follow the instructions below to complete the hardware setup.
The picture below shows the back panel of the CT-5072T.
Power ON
Press the power button to the OFF position (OUT). Connect the power adapter to
the power port. Attach the power adapter to a wall outlet or other AC source.
Press the power button to the ON position (IN). If the Power LED displays as
expected then the device is ready for setup (see section 2.2 LED Indicators).
Caution 1: If the device fails to power up, or it malfunctions, first verify that the
power cords are connected securely. Then power it on again. If the
problem persists, contact technical support.
Caution 2: Before servicing or disassembling this equipment, disconnect all power
cords and telephone lines from their outlets.
Reset Button
Restore the default parameters of the device by pressing the Reset button for 5 to
10 seconds. After the device has rebooted successfully, the front panel should
display as expected (see section 2.2 LED Indicators for details).
NOTE: If pressed down for more than 20 seconds, the CT-5072T will go into a
firmware update state (CFE boot mode). The firmware can then be
updated using an Internet browser pointed to the default IP address.
ETHERNET Port (Yellow)
Use RJ-45 cable to connect up to four network devices. These ports are
auto-sensing MDI/X and either straight-through or crossover cable can be used.
ADSL Port (Grey) - Connect the ADSL line to this port with RJ-11 cable.

6
2.2 LED Indicators
The front panel LED indicators are shown below and explained in the following table.
This information can be used to check the status of the device and its connections.
LED
Color
Mode
Function
LAN
Green
On
An Ethernet Link is established.
Off
An Ethernet Link is not established.
Blink
Data transmitting or receiving over LAN.
INTERNET
Green
On
IP connected and no traffic detected. If an IP or
PPPoE session is dropped due to an idle timeout, the
light will remain green if an ADSL connection is still
present.
Off
Modem power off, modem in bridged mode or ADSL
connection not present. In addition, if an IP or
PPPoE session is dropped for any reason, other than
an idle timeout, the light is turned off.
Blink
IP connected and IP Traffic is passing thru the device
(either direction)
Red
On
Device attempted to become IP connected and failed
(no DHCP response, no PPPoE response, PPPoE
authentication failed, no IP address from IPCP, etc.)
ADSL
Green
On
The ADSL link is established.
Off
The ADSL link is not established.
Blink
The ADSL link is training.
POWER
Green
On
The device is powered up.
Off
The device is powered down.
Red
On
POST (Power On Self Test) failure or other
malfunction. A malfunction is any error of internal
sequence or state that will prevent the device from
connecting to the DSLAM or passing customer data.

7
Chapter 3 Web User Interface
This section describes how to access the device via the web user interface (WUI)
using an Internet browser such as Internet Explorer (version 5.0 and later).
3.1 Default Settings
The factory default settings of this device are summarized below.
LAN IP address: 192.168.1.1 LAN subnet mask: 255.255.255.0
Administrative access (username: root , password: 12345)
User access (username: user, password: user)
WAN IP address: none
Remote WAN access: disabled
Remote (WAN) access (username: support, password: support)
This device supports the following connection types.
PPP over Ethernet (PPPoE)
PPP over ATM (PPPoA)
MAC Encapsulated Routing (MER)
IP over ATM (IPoA)
Bridging
DHCP server: enabled for PPPoA and PPPoE
disabled for MER and IPoA
not available for Bridge
Firewall and NAT: enabled for PPPoE and PPPoA
disabled for MER and IPoA
not available for Bridge
Technical Note
During power on, the device initializes all settings to default values. It will then
read the configuration profile from the permanent storage section of flash memory.
The default attributes are overwritten when identical attributes with different values
are configured. The configuration profile in permanent storage can be created via
the web user interface or telnet user interface, or other management protocols.
The factory default configuration can be restored either by pushing the reset button
for more than five seconds until the power indicates LED blinking or by clicking the
Restore Default Configuration option in the Restore Settings screen.

8
3.2 IP Configuration
DHCP MODE
When the CT-5072T powers up, the onboard DHCP server will switch on. Basically,
the DHCP server issues and reserves IP addresses for LAN devices, such as your PC.
To obtain an IP address from the DCHP server, follow the steps provided below.
NOTE: The following procedure assumes you are running Windows XP.
However, the general steps involved are similar for most operating
systems (OS). Check your OS support documentation for further details.
STEP 1: From the Network Connections window, open Local Area Connection (You
may also access this screen by double-clicking the Local Area Connection
icon on your taskbar). Click the Properties button.
STEP 2: Select Internet Protocol (TCP/IP) and click the Properties button.
STEP 3: Select Obtain an IP address automatically as shown below.
STEP 4: Click OK to submit these settings.
If you experience difficulty with DHCP mode, you can try static IP mode instead.

9
STATIC IP MODE
In static IP mode, you assign IP settings to your PC manually.
Follow these steps to configure your PC IP address to use subnet 192.168.1.x.
NOTE: The following procedure assumes you are running Windows XP.
However, the general steps involved are similar for most operating
systems (OS). Check your OS support documentation for further details.
STEP 1: From the Network Connections window, open Local Area Connection (You
may also access this screen by double-clicking the Local Area Connection
icon on your taskbar). Click the Properties button.
STEP 2: Select Internet Protocol (TCP/IP) and click the Properties button.
STEP 3: Change the IP address to the domain of 192.168.1.x (1<x<255) with
subnet mask of 255.255.255.0. The screen should now display as below.
STEP 4: Click OK to submit these settings.

10
3.3 Login Procedure
Perform the following steps to login to the web user interface.
NOTE: The default settings can be found in section 3.1.
STEP 1: Start the Internet browser and enter the default IP address for the device
in the Web address field. For example, if the default IP address is
192.168.1.1, type http://192.168.1.1.
NOTE: For local administration (i.e. LAN access), the PC running the browser
must be attached to the Ethernet, and not necessarily to the device.
For remote access (i.e. WAN), use the IP address shown on the Device
Information screen and login with remote username and password.
STEP 2: A dialog box will appear, such as the one below. Enter the default
username and password, as defined in section 3.1 Default Settings.
Click OK to continue.
NOTE: The login password can be changed later (see section 8.6.3)
STEP 3: After successfully logging in for the first time, you will reach this screen.
NOTES: If a PVC connection already exists then this Quick Setup screen will be
bypassed and the Device Information screen will display instead. The
selections available on the main menu (onscreen at left) are based upon
the configured connection(s) and user account privileges.

11
Chapter 4 Quick Setup
After the first login, the Quick Setup screen will appear. It is the default screen
when no connections exist. It allows for the configuration of connection settings.
4.1 Auto Quick Setup
This function provides an automated process to quickly setup a WAN connection.
The CT-5072T will auto-select the best available PVC profile, provided the ADSL link
is up (see section 2.2). If you prefer manual connection setup, go to section 4.2.
STEP 1: Tick the DSL Auto-connect checkbox on the Quick Setup screen.
STEP 2: Click Next to start the setup process. Follow the online instructions to
complete the settings. This procedure will skip some advanced setup
procedures (such as PVC index and encapsulation selection).
STEP 3: After setup is complete the CT-5072T will reboot and display this
message.
NOTE: After the device reboots, the Device Information screen should appear.
If the browser does not refresh automatically, close it and restart.

12
4.2 Manual Quick Setup
To setup the WAN connection manually, follow these instructions:
STEP 1: Un-tick the DSL Auto-connect checkbox on the Quick Setup screen.
STEP 2: Adjust the Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI)
settings for the connection you wish to establish. You can also Enable
Quality of Service (QoS) with its checkbox .
Click Next to continue.
STEP 3: On the next screen, you can choose the Connection Type and select the
appropriate Encapsulation Mode using the drop-down box.
Here are the available encapsulations for each connection type:
PPPoA- VC/MUX, LLC/ENCAPSULATION
PPPoE- LLC/SNAP BRIDGING, VC/MUX
MER- LLC/SNAP-BRIDGING, VC/MUX
IPoA- LLC/SNAP-ROUTING, VC MUX
Bridging- LLC/SNAP-BRIDGING, VC/MUX
Un-tick this checkbox to begin manual
setup and display the following screen.

13
Click Next to continue…
NOTE: The subsections that follow continue the ATM PVC setup procedure.
Enter the appropriate settings for your service. Choosing different
connection types will lead to a different sequence of setup screens.
4.2.1 PPP over ATM (PPPoA) and PPP over Ethernet (PPPoE)
STEP 4: Enter the PPP settings as provided by your ISP. Click Next to continue.

14
PPP SETTINGS
The PPP Username, PPP password and the PPPoE Service Name entries are
dependent on the particular requirements of the ISP. The user name can be a
maximum of 256 characters and the password a maximum of 32 characters in
length. For Authentication Method, choose from AUTO, PAP, CHAP, and MSCHAP.
ENABLE FULLCONE NAT
This option becomes available when NAT is enabled. Known as one-to-one NAT, all
requests from the same internal IP address and port are mapped to the same
external IP address and port. An external host can send a packet to the internal host,
by sending a packet to the mapped external address.
DIAL ON DEMAND
The CT-5072T can be configured to disconnect if there is no activity for a period of
time by selecting the Dial on demand checkbox . You must also enter an
inactivity timeout period in the range of 1 to 4320 minutes.
PPP IP EXTENSION
The PPP IP Extension is a special feature deployed by some service providers.
Unless your service provider specifically requires this setup, do not select it.
PPP IP Extension does the following:
Allows only one PC on the LAN.
Disables NAT and Firewall.
The device becomes the default gateway and DNS server to the PC
through DHCP using the LAN interface IP address.
The device extends the IP subnet at the remote service provider to the
LAN PC. i.e. the PC becomes a host belonging to the same IP subnet.
The device bridges the IP packets between WAN and LAN ports, unless
the packet is addressed to the device’s LAN IP address.
The public IP address assigned by the remote side using the PPP/IPCP
protocol is actually not used on the WAN PPP interface. Instead, it is
forwarded to the PC LAN interface through DHCP. Only one PC on the
LAN can be connected to the remote, since the DHCP server within the
device has only a single IP address to assign to a LAN device.
ENABLE NAT
If the LAN uses private IP addresses, this checkbox must be selected.
The NAT submenu will be added to the Advanced Setup menu after reboot.
This function consumes system resources and thus may impact performance.
If the LAN uses public IP addresses, this checkbox must not be selected.
The NAT submenu will be removed from the Advanced Setup menu after reboot.
ENABLE FIREWALL
To enable IP packet filtering, tick this checkbox . The Advanced Setup Security
IP Filtering option will appear on the main menu after reboot. Disable this function
when not required for improved performance.

15
USE STATIC IP ADDRESS
Unless your service provider specially requires it, do not select this checkbox . If
selected, enter the static IP address in the IP Address field. Also, don’t forget to
adjust the IP configuration to Static IP Mode as described in section 3.2.
RETRY PPP PASSWORD ON AUTHENTICATION ERROR
Tick the checkbox to enable this function.
ENABLE PPP DEBUG MODE
When this option is selected, the system will put more PPP connection information
into the system log. This is for debugging errors and not for normal usage.
Bridge PPPoE Frames Between WAN and Local Ports
When Enabled, this creates local PPPoE connections to the WAN side. Enable this
option only if all LAN-side devices are running PPPoE clients, otherwise disable it.
The CT-5072T supports pass-through PPPoE sessions from the LAN side while
simultaneously running a PPPoE client from non-PPPoE LAN devices.
FIXED MTU
This option allows for changes to the MTU size of PPPoE and PPPoA WAN interfaces.
The default values for MTU size are 1492 for PPPoE and 1500 for PPPoA. The
allowable range of values for MTU size is from 64 to 1500. If a value is entered
outside this range the following dialog box will be displayed.
STEP 5: This screen provides access to IGMP Multicast and WAN Service settings.
Enable each service by selecting its checkbox . Click Next to continue.

16
ENABLE IGMP MULTICAST
Tick the checkbox to enable Internet Group Membership Protocol (IGMP)
multicast. IGMP is a protocol used by IP hosts to report their multicast group
memberships to any neighboring multicast routers.
ENABLE WAN SERVICE
Tick the checkbox to enable WAN service.
SERVICE NAME
This is the WAN Service label.
STEP 6: The Device Setup screen is used to configure LAN interface settings.
The IP address and Subnet Mask define the location of the CT-5072T on the LAN.
To auto-assign IP addresses, DNS server and default gateway to other LAN devices,
select the Enable DHCP server radio button. You must also enter the Start and
End IP address, Subnet Mask and DHCP leased time.
Select Enable DHCP Server Relay (if required), and enter the DHCP Server IP
Address. This allows the router to relay the DHCP packets to the remote DHCP
server. The remote DHCP server will provide the IP address.
NOTE: Enable DHCP Server Relay will not display if NAT is enabled.
To configure a secondary IP address for the LAN port, click the checkbox shown.

17
STEP 7: Click Next to display the configuration summary. Click Save/Reboot if
the settings are correct or click Back to modify these settings.
After clicking Save/Reboot, the CT-5072T will save the configuration and reboot.
4.2.2 MAC Encapsulation Routing (MER)
STEP 4: Enter the WAN IP settings provided by your ISP. Click Next to continue.

18
Select the Obtain an IP address automatically radio box to enable DHCP.
NOTE: Assigning the default gateway or DNS server with static values will disable
their automatic assignment from DHCP or another WAN connection.
STEP 5: This screen provides access to Network Address Translation (NAT), IGMP
Multicast, and WAN Service settings. Enable each service by selecting its
checkbox . Click Next to continue.
ENABLE NAT
If the LAN uses private IP addresses, this checkbox must be selected.
The NAT submenu will be added to the Advanced Setup menu after reboot.
This function consumes system resources and thus may impact performance.
If the LAN uses public IP addresses, this checkbox must not be selected.
The NAT submenu will be removed from the Advanced Setup menu after reboot.
ENABLE FULLCONE NAT
This option becomes available when NAT is enabled. Known as one-to-one NAT, all

19
requests from the same internal IP address and port are mapped to the same
external IP address and port. An external host can send a packet to the internal host,
by sending a packet to the mapped external address.
ENABLE FIREWALL
To enable IP packet filtering, tick this checkbox . The Advanced Setup Security
IP Filtering option will appear on the main menu after reboot. Disable this function
when not required for improved performance.
ENABLE IGMP MULTICAST
Tick the checkbox to enable Internet Group Membership Protocol (IGMP)
multicast. IGMP is a protocol used by IP hosts to report their multicast group
memberships to any neighboring multicast routers.
ENABLE WAN SERVICE
Tick the checkbox to enable WAN service.
SERVICE NAME
This is the WAN Service label.
STEP 6: The Device Setup screen is used to configure LAN interface settings.
The IP address and Subnet Mask define the location of the CT-5072T on the LAN.
To auto-assign IP addresses, DNS server and default gateway to other LAN devices,
select the Enable DHCP server radio button. You must also enter the start and
end IP address, Subnet Mask and DHCP leased time.