CTC Union SHDSL User manual

USER MANUAL
SHDSL Routers

G.shdslRouterUserManual
CTC Union Technologies Co., Ltd.
Neihu Technology Park
Far Eastern Vienna Technology Center
8F, No. 60 Zhouzi St.
Neihu, Taipei, 114
Taiwan
SHDTU03-ET10R 2-Wire SHDSL Router With 1-Port Ethernet
SHDTU03-ET10RS 2-Wire SHDSL Router With 4-Port Ethernet Switch
SHDTU03F-ET10R 2-Wire SHDSL Router With 1-Port Ethernet featured
with firewall function
SHDTU03A-ET10RS 4-Wire SHDSL Router With 4-Port Ethernet Switch
SHDTU03F-ET10RS 2-Wire SHDSL Router With 4-Port Ethernet Switch,
featured with firewall function
SHDTU03AF-ET10RS 4-Wire SHDSL Router With 4-Port Ethernet Switch,
featured with firewall function
Installation and Operation Manual
Version 3.3 Nov 2005
Specifications subject to change without notice.

G.shdslRouterUserManual
Table of Contents
Descriptions ........................................................................................................................ 1
Features............................................................................................................ 1
Specification.................................................................................................... 1
Applications..................................................................................................... 4
Your Firewall ...................................................................................................................... 5
Types of Firewall............................................................................................. 5
Packet Filtering................................................................................................. 5
Circuit Gateway................................................................................................ 7
Application Gateway........................................................................................ 7
Denial of Service Attack.................................................................................. 8
Your VLAN (Virtual Local Area Network) ...................................................................... 11
Specification.................................................................................................. 11
Frame Specification....................................................................................... 11
Applications................................................................................................... 12
Getting to know the router................................................................................................ 14
Front Panel..................................................................................................... 14
Rear Panel...................................................................................................... 15
SHDSL Line Connector................................................................................. 16
Console Cable................................................................................................ 16
Configuration of the router ............................................................................................... 17
Step 1: Check the EthernetAdapter in PC or NB.......................................... 17
Step 2: Check the Web Browser in PC or NB ............................................... 17
Step 3: Check the Terminal Access Program................................................. 17
Step 4: Determine Connection Setting .......................................................... 17
Step 5: Install the SHDSL Router.................................................................. 18
Configuration via Web Browser........................................................................................ 20
Basic Setup........................................................................................................................ 22
Bridge Mode.................................................................................................. 23
Routing Mode................................................................................................ 25
DHCP Server .................................................................................................. 26
DHCP Client.................................................................................................... 27
DHCP relay...................................................................................................... 28
PPPoE or PPPoA........................................................................................... 29
IPoA or EoA..................................................................................................... 31
Advanced Setup................................................................................................................ 33

G.shdslRouterUserManual
SHDSL............................................................................................................. 34
WAN ................................................................................................................. 35
Bridge............................................................................................................... 37
VLAN................................................................................................................ 38
Route................................................................................................................ 40
NAT/DMZ......................................................................................................... 42
Virtual Server .................................................................................................. 44
Firewall............................................................................................................. 45
IP QoS.............................................................................................................. 51
Administration .................................................................................................................. 53
Security............................................................................................................ 54
SNMP............................................................................................................... 55
Time Sync........................................................................................................ 57
Utility................................................................................................................................ 58
System Info ..................................................................................................... 59
Config Tool....................................................................................................... 60
Upgrade........................................................................................................... 61
Logout.............................................................................................................. 62
Restart.............................................................................................................. 63
Status................................................................................................................................. 64
LAN-to-LAN connection with bridge Mode.................................................................... 65
CO side............................................................................................................ 65
CPE Side......................................................................................................... 66
LAN to LAN Connection with Routing Mode ................................................................. 67
CO side............................................................................................................ 67
CPE side.......................................................................................................... 69
Configuration via Serial Console or Telnet with Menu Driven Interface......................... 70
Serial Console................................................................................................ 70
Telnet ............................................................................................................. 70
Operation Interface........................................................................................ 71
Window structure........................................................................................... 72
Menu Driven Interface Commands ............................................................... 73
Menu Tree...................................................................................................... 73
Configuration................................................................................................. 75
Status.............................................................................................................. 76
Show.............................................................................................................. 77
Write .............................................................................................................. 78
Reboot............................................................................................................ 79

G.shdslRouterUserManual
Ping................................................................................................................ 80
Administration............................................................................................... 81
User Profile...................................................................................................... 81
Security............................................................................................................ 82
SNMP............................................................................................................... 82
Supervisor Password and ID........................................................................ 83
SNTP................................................................................................................ 83
Utility............................................................................................................. 85
Exit................................................................................................................. 85
Setup.............................................................................................................. 86
Mode................................................................................................................. 86
SHDSL............................................................................................................. 86
WAN ................................................................................................................. 87
Bridge............................................................................................................... 88
VLAN................................................................................................................ 89
Route................................................................................................................ 90
LAN................................................................................................................... 92
IP share............................................................................................................ 92
Firewall............................................................................................................. 96
IPQoS............................................................................................................... 98
DHCP............................................................................................................... 99
DNS proxy..................................................................................................... 100
Host name..................................................................................................... 100
Default............................................................................................................ 100
Appendix Console Port Cable PIN Assignment ............................................................. 101

G.shdslRouterUserManual
Descriptions
The SHDSL (Single-Paired High Speed Digital Subscriber Loop) routers comply with G.991.2
standard with 10/100 Base-T auto-negotiation. It provides business-class, multi-range from
64Kbps to 2.304Mbps (for 2-wire mode) or 128kbps to 4.608Mbps (for 4-wire mode) payload rates
over exiting single-pair copper wire. The SHDSL routers are designed not only to optimize the
service bit rate from central office to customer premises but also to integrate high-end
Bridging/Routing capabilities with advanced functions of Multi-DMZ, virtual server mapping and
VPN pass-through.
Because of the rapid growth of the Internet, virtual LAN has become one of the major new areas in
the Internet industry. The SHDSL routers support port-based and IEEE 802.1q VLAN over ATM
network.
The firewall routers provide not only advanced functions, Multi-DMZ, virtual server mapping and
VPN pass-through but advanced firewall, SPI, NAT, DoS protection serving as a powerful firewall
to protect from outside intruders of secure connection.
The 4-port routers support four ports 10Base-T /100Base-T auto-negotiation and auto-MDIX
switching ports to meet the enterprise need.
The SHDSL routers allow customers to leverage the latest in broadband technologies to meet their
growing data communication needs. Through the power of SHDSL products, you can access
superior manageability and reliability.
Features
Easy configuration and management with password control for various application
environments
Efficient IP routing and transparent learning bridge to support broadband Internet services
VPN pass-through for safeguarded connections
Virtual LANs (VLANs) offer significant benefit in terms of efficient use of bandwidth, flexibility,
performance and security
Build-in advanced SPI firewall (Firewall router)
Four 10/100Mbps Auto-negotiation and Auto-MDIX switching port for flexible local area
network connectivity (4-port router)
DMZ host/Multi-DMZ/Multi-NAT enables multiple workstations on the LAN to access the
Internet for the cost of only one IP address
Full ATM protocol stack implementation over SHDSL
PPPoA and PPPoE support user authentication with PAP/CHAP/MS-CHAP
SNMP management with SNMPv1/SNMPv2 agent and MIB II
Get enhancements and new features via Internet software upgrade
Specification
Routing
¾Support IP/TCP/UDP/ARP/ICMP/IGMP protocols
¾IP routing with static routing and RIPv1/RIPv2 (RFC1058/2453)
¾IP multicast and IGMP proxy (RFC1112/2236)
¾Network address translation (NAT/PAT) (RFC1631)
¾NAT ALGs for ICQ/Netmeeting/MSN/Yahoo Messenger
¾DNS relay and caching (RFC1034/1035)
¾DHCP server, client and relay (RFC2131/2132)
1

G.shdslRouterUserManual
Bridging
¾IEEE 802.1D transparent learning bridge
¾IEEE 802.1q VLAN
¾Port-based VLAN (4-port router)
¾Spanning tree protocol
Security
¾DMZ host/Multi-DMZ/Multi-NAT function
¾Virtual server mapping (RFC1631)
¾VPN pass-through for PPTP/L2TP/IPSec tunneling
¾Natural NAT firewall
¾Advanced Stateful packet inspection (SPI) firewall (Firewall Router)
¾Application level gateway for URL and keyword blocking (Firewall Router)
¾User access control: deny certain PCs access to Internet service (Firewall Router)
Management
¾Easy-to-use web-based GUI for quick setup, configuration and management
¾Menu-driven interface/Command-line interface (CLI) for local console and Telnet
access
¾Password protected management and access control list for administration
¾SNMP management with SNMPv1/SNMPv2 (RFC1157/1901/1905) agent and MIB II
(RFC1213/1493)
¾Software upgrade via web-browser/TFTP server
ATM ¾Up to 8 PVCs
¾OAM F5 AIS/RDI and loopback
¾AAL5
ATM QoS
¾UBR (Unspecified bit rate)
¾CBR (Constant bit rate)
¾VBR-rt (Variable bit rate real-time)
¾VBR-nrt (Variable bit rate non-real-time)
AAL5 Encapsulation
¾VC multiplexing and SNAP/LLC
¾Ethernet over ATM (RFC 2684/1483)
¾PPP over ATM (RFC 2364)
¾Classical IP over ATM (RFC 1577)
PPP ¾PPP over Ethernet for fixed and dynamic IP (RFC 2516)
¾PPP overATM for fixed and dynamic IP (RFC 2364)
¾User authentication with PAP/CHAP/MS-CHAP
WAN Interface
¾SHDSL: ITU-T G.991.2 (Annex A,Annex B)
¾Encoding scheme: 16-TCPAM
¾Data Rate (2-wire mode): N x 64Kbps (N=0~36, 0 for adaptive)
¾Data Rate (4-wire mode): N x 128kbps (N=0~36, 0 for adaptive)
¾Impedance: 135 ohms
2

G.shdslRouterUserManual
LAN Interface
¾4-ports switching hub (4-port router)
¾10/100 Base-T auto-sensing and auto-negotiation
¾Auto-MDIX (1-port & 4-port router)
Hardware Interface
¾WAN: RJ-11
¾LAN: RJ-45 x 4 (4-port router)
¾LAN: RJ-45 x 1 (1-port router)
¾Console: RS232 female
¾RST: Reset button for factory default
Indicators
¾General: PWR
¾WAN: LNK, ACT
¾LAN: 10M/ACT, 100M/ACT (1-port router)
¾LAN: 1, 2, 3, 4 (4-port router)
¾SHDSL: ALM
Physical/Electrical
¾Dimensions: 18.7 x 3.3 x 14.5cm (WxHxD)
¾Power: 100~240VAC (via power adapter)
¾Power consumption: 9 watts max
¾Temperature:-5~55。C
¾Humidity:
0%~95%RH (non-condensing)
Memory
¾2MB Flash Memory, 8MB SDRAM
Products’ Information
SHDTU03/ET10R: 2-Wire SHDTU03/bridge with 1-port LAN
SHDTU03/ET10RS: 2-Wire SHDTU03/bridge with 4-port switching HUB LAN
SHDTU03F/ET10R: 2-Wire SHDTU03/bridge with 1-port LAN, with firewall feature
SHDTU03F/ET10RS: 2-Wire SHDTU03/bridge with 4-port switching HUB LAN, with firewall
feature
SHDTU03A/ET10RS: 4-Wire SHDTU03/bridge with 4-port switching HUB LAN
SHDTU03AF/ET10RS: 4-Wire SHDTU03/bridge with 4-port switching HUB LAN, with firewall
feature
3

G.shdslRouterUserManual
Applications
Internet SHDSL
Router
SHDSL Ethernet
DSLAM
LAN
Connection with DSLAM
SHDSL Router
SHDSL Ethernet
SHDSL Router
Ethernet
LAN LAN
LAN to LAN Connection
4

G.shdslRouterUserManual
Your Firewall
A firewall protects networked computers from intentional hostile intrusion that could compromise
confidentiality or result in data corruption or denial of service. It must have at least two network
interfaces, one for the network it is intended to protect, and one for the network it is exposed to. A
firewall sits at the junction point or gateway between the two networks, usually a private network
and a public network such as the Internet.
Afirewall examines all traffic routed between the two networks to see if it meets certain criteria. If it
does, it is routed between the networks, otherwise it is stopped.A firewall filters both inbound and
outbound traffic. It can also manage public access to private networked resources such as host
applications. It can be used to log all attempts to enter the private network and trigger alarms when
hostile or unauthorized entry is attempted. Firewalls can filter packets based on their source and
destination addresses and port numbers. This is known as address filtering. Firewalls can also
filter specific types of network traffic. This is also known as protocol filtering because the decision
to forward or reject traffic is dependant upon the protocol used, for example HTTP, ftp or telnet.
Firewalls can also filter traffic by packet attribute or state.
An Internet firewall cannot prevent individual users with modems from dialling into or out of the
network. By doing so they bypass the firewall altogether. Employee misconduct or carelessness
cannot be controlled by firewalls. Policies involving the use and misuse of passwords and user
accounts must be strictly enforced. These are management issues that should be raised during
the planning of any security policy, but that cannot be solved with Internet firewalls alone.
Internet
Internet
Local User Internet
Allowed Traffic Out to Internet
Specified Allowed Traffic
Access to Specific
Destination
Restricted Traffic
Unknown Traffic
Firewall
TypesofFirewall
There are three types of firewall:
PacketFiltering
In packet filtering, only the protocol and the address information of each packet is examined. Its
contents and context (its relation to other packets and to the intended application) are ignored. The
firewall pays no attention to applications on the host or local network and it "knows" nothing about
the sources of incoming data. Filtering consists of examining incoming or outgoing packets and
allowing or disallowing their transmission or acceptance on the basis of a set of configurable rules.
Network Address Translation (NAT) routers offer the advantages of packet filtering firewalls but
can also hide the IP addresses of computers behind the firewall, and offer a level of circuit-based
filtering.
5