Dynamix UM-S User manual

DYNAMIX UM-S
SHDSL ROUTER
User Manual

G.shdsl Router User Manual 152
1
Table ofContents
Descriptions..............................................................................................................4
Features.......................................................................................................................4
Specification................................................................................................................4
Applications.................................................................................................................7
Yours Firewall .........................................................................................................8
Types of Firewall.........................................................................................................8
PacketFiltering..............................................................................................8
Circuit Gateway...........................................................................................10
Application Gateway ...................................................................................10
Denialof ServiceAttack.............................................................................................11
Yours VLAN (Virtual Local Area Network) ............................................14
Specification..............................................................................................................14
Frame Specification...................................................................................................14
Applications...............................................................................................................15
Getting to know about the router ..................................................................17
Front Panel.................................................................................................................17
Rear Panel..................................................................................................................18
SHDSLLineConnector.............................................................................................19
Console Cable............................................................................................................19
Configuration to the router ..............................................................................20
Step 1:Checkthe EthernetAdapter inPCorNB........................................................20
Step 2:ChecktheWebBrowser inPC or NB.............................................................20
Step 3:ChecktheTerminalAccess Program...............................................................20
Step 4:Determine ConnectionSetting........................................................................20
Step 5:Install the SHDSLRouter...............................................................................21
Configuration via Web Browser ....................................................................23
Basic Setup .............................................................................................................25
BridgeMode..............................................................................................................26
RoutingMode............................................................................................................28

G.shdsl Router User Manual 152
2
DHCPServer...............................................................................................29
DHCPClient ................................................................................................30
DHCPrelay..................................................................................................31
PPPoE or PPPoA........................................................................................32
IPoAorEoA .................................................................................................34
Advanced Setup....................................................................................................36
SHDSL .........................................................................................................37
WAN .............................................................................................................38
Bridge ...........................................................................................................40
VLAN ............................................................................................................41
Route............................................................................................................43
NAT/DMZ .....................................................................................................45
Virtual Server...............................................................................................47
Firewall.........................................................................................................48
Administration ......................................................................................................54
Security ........................................................................................................55
SNMP ...........................................................................................................56
Time Sync ....................................................................................................58
Utility........................................................................................................................59
System Info..................................................................................................60
Config Tool...................................................................................................61
Upgrade .......................................................................................................62
Logout ..........................................................................................................63
Restart..........................................................................................................64
Status.........................................................................................................................65
LAN-to-LAN connection with bridge Mode ...........................................66
CO side ........................................................................................................66
CPE Side .....................................................................................................67
LAN to LAN Connection with Routing Mode .......................................68
CO side ........................................................................................................68
CPE side ......................................................................................................70
Configuration via Serial Console orTelnet with Manu Driven

G.shdsl Router User Manual 152
3
Interface ...................................................................................................................71
SerialConsole............................................................................................................71
Telnet.........................................................................................................................71
OperationInterface....................................................................................................72
Windowstructure.......................................................................................................73
MenuDriven Interface Commands.............................................................................74
Menu Tree..................................................................................................................74
Configuration.............................................................................................................76
Status.........................................................................................................................77
Show..........................................................................................................................78
Write..........................................................................................................................79
Reboot.......................................................................................................................80
Ping...........................................................................................................................81
Administration...........................................................................................................82
UserProfile ..................................................................................................82
Security ........................................................................................................83
SNMP ...........................................................................................................83
SupervisorPasswordand ID .....................................................................84
SNTP............................................................................................................84
Utility........................................................................................................................86
Exit............................................................................................................................86
Setup..........................................................................................................................87
Mode ............................................................................................................87
SHDSL .........................................................................................................87
WAN .............................................................................................................88
Bridge ...........................................................................................................89
VLAN ............................................................................................................90
Route............................................................................................................91
LAN...............................................................................................................93
IPshare........................................................................................................93
Firewall.........................................................................................................97
DHCP ...........................................................................................................99
DNSproxy .................................................................................................100
Hostname .................................................................................................100
Default........................................................................................................100

G.shdsl Router User Manual 152
4
Descriptions
The SHDSL (Single-Paired High Speed Digital Subscriber Loop) routerscomplywith G.991.2
standard with 10/100 Base-T auto-negotiation. It provides business-class, multi-range form
64Kbpsto2.304Mbps (for2-wire mode) or 128kbpsto4.608Mbps (for 4-wire mode) payloadrates
over exiting single-paircopper wire. The SHDSL routersare designed not onlyto optimize the
service bit rate fromcentral office to customerpremisesalso it integrates high-end
Bridging/Routing capabilities with advanced functionsof Multi-DMZ, virtual server mapping and
VPN pass-through.
Because of rapid growth of network, virtual LAN has become one of the major newareas in
internetworking industry. The SHDSL routers support port-based and IEEE 802.1q VLAN over
ATM network.
The firewall routers provide not onlyadvanced functions, Multi-DMZ, virtual servermapping and
VPN pass-through but advanced firewall, SPI, NAT, DoS protection serving as a powerful firewall
to protect from outside intruders of secure connection.
The 4-port routerssupport four ports 10Base-T /100Base-T auto-negotiation and auto-MDIX
switching portsto meet the enterprise need.
The SHDSLroutersallow customersto leveragethe latest in broadband technologies to meet their
growing data communication needs. Through the power of SHDSL products, you can access
superior manageabilityand reliability.
Features
² Easyconfiguration and management with password control for various application
environments
² Efficient IProuting and transparent learning bridge to support broadband Internet services
² VPN pass-through for safeguarded connections
² Virtual LANs(VLANs) offer significant benefit in terms of efficient use of bandwidth, flexibility,
performance and security
² Build-in advanced SPI firewall(Firewall router)
² Four10/100MbpsAuto-negotiation and Auto-MDIX switching port for flexible local area
networkconnectivity(4-port router)
² DMZ host/Multi-DMZ/Multi-NATenables multiple workstationson the LAN to access the
Internet forthe cost of IPaddress
² FullyATM protocol stackimplementation overSHDSL
² PPPoAand PPPoEsupport user authentication with PAP/CHAP/MS-CHAP
² SNMPmanagement with SNMPv1/SNMPv2 agent and MIB II
² Getting enhancementsand new features via Internet software upgrade
Specification
Routing
Ø Support IP/TCP/UDP/ARP/ICMP/IGMPprotocols
Ø IProuting with static routing and RIPv1/RIPv2 (RFC1058/2453)
Ø IPmulticast and IGMPproxy(RFC1112/2236)
Ø Networkaddress translation (NAT/PAT)(RFC1631)
Ø NATALGsfor ICQ/Netmeeting/MSN/Yahoo Messenger
Ø DNS relayand caching (RFC1034/1035)
Ø DHCPserver, client and relay(RFC2131/2132)

G.shdsl Router User Manual 152
5
Bridging
Ø IEEE 802.1D transparent learning bridge
Ø IEEE 802.1q VLAN
Ø Port-based VLAN (4-port router)
Ø Spanning tree protocol
Security
Ø DMZ host/Multi-DMZ/Multi-NATfunction
Ø Virtual server mapping (RFC1631)
Ø VPN pass-through for PPTP/L2TP/IPSectunneling
Ø Natural NATfirewall
Ø Advanced Stateful packet inspection (SPI)firewall (Firewall Router)
Ø Application level gatewayfor URLand keyword blocking (Firewall Router)
Ø Useraccess control: denycertain PCsaccessto Internet service (FirewallRouter)
Management
Ø Easy-to-use web-based GUI forquicksetup, configuration and management
Ø Menu-driven interface/Command-line interface (CLI) for local console and Telnet
access
Ø Password protected management and accesscontrol list foradministration
Ø SNMPmanagement with SNMPv1/SNMPv2 (RFC1157/1901/1905)agent and MIB II
(RFC1213/1493)
Ø Software upgrade via web-browser/TFTPserver
ATM
Ø Up to 8 PVCs
Ø OAM F5 AIS/RDI and loopback
Ø AAL5
ATM QoS
Ø UBR (Unspecified bit rate)
Ø CBR (Constant bit rate)
Ø VBR-rt (Variable bit rate real-time)
Ø VBR-nrt (Variable bit rate non-real-time)
AAL5 Encapsulation
Ø VC multiplexing and SNAP/LLC
Ø Ethernet over ATM (RFC 2684/1483)
Ø PPP over ATM (RFC 2364)
Ø Classical IPover ATM (RFC 1577)
PPP
Ø PPP over Ethernet forfixed and dynamic IP(RFC 2516)
Ø PPP over ATM forfixed and dynamic IP(RFC 2364)
Ø Userauthentication with PAP/CHAP/MS-CHAP
WAN Interface
Ø SHDSL: ITU-TG.991.2 (AnnexA, Annex B)
Ø Encoding scheme: 16-TCPAM
Ø Data Rate (2-wire mode): N x64Kbps(N=0~36, 0 foradaptive)
Ø Data Rate (4-wire mode): N x128kbps(N=0~36, 0 foradaptive)
Ø Impedance: 135 ohms

G.shdsl Router User Manual 152
6
LAN Interface
Ø 4-ports switching hub (4-port router)
Ø 10/100 Base-Tauto-sensing and auto-negotiation
Ø Auto-MDIX (4-port router)
Hardware Interface
Ø WAN: RJ-11
Ø LAN: RJ-45 x4 (4-port router)
Ø LAN: RJ-45 x1 (1-port router)
Ø Console: RS232 female
Ø RST: Reset button forfactorydefault
Indicators
Ø General: PWR
Ø WAN: LNK, ACT
Ø LAN: 10M/ACT, 100M/ACT(1-port router)
Ø LAN: 1, 2, 3, 4 (4-port router)
Ø SHDSL: ALM
Physical/Electrical
Ø Dimensions: 18.7 x 3.3 x 14.5cm (WxHxD)
Ø Power: 100~240VAC (via power adapter)
Ø Power consumption: 9 watts max
Ø Temperature: 0~45 C
Ø Humidity: 0%~95%RH (non-condensing)
Memory
Ø 2MB Flash Memory, 8MB SDRAM
Products Information
G.shdsl 2-wire router/bridge with 1-port LAN
G.shdsl 2-wire router/bridge with 1-port LAN VLAN and business class firewall
G.shdsl 2-wire router/bridge with 4-port switching hub LAN
G.shdsl 2-wire router/bridge with 4-port switching hub LAN, VLAN and business classfirewall
G.shdsl 4-wire router/bridge with 4-port switching hub LAN
G.shdsl 4-wire router/bridge with 4-port switching hub LAN, VLAN and business classfirewall

G.shdsl Router User Manual 152
7
Applications
Internet
SHDSL
Router
SHDSL Ethernet
DSLAM
LAN
Connectionwith DSLAM
SHDSL Router
SHDSLEthernet
SHDSL Router
Ethernet
LAN LAN
LAN to LAN Connection

G.shdsl Router User Manual 152
8
Yours Firewall
Afirewall protectsnetworked computersfrom intentional hostile intrusion that could compromise
confidentialityor result in data corruption or denial of service. It must have at least two network
interfaces, one for the network it isintended to protect, and one for the networkit is exposed to. A
firewall sits at the junction point orgatewaybetween the two networks, usuallya private network
and a publicnetworksuch as the Internet.
Afirewall examinesall traffic routed between the two networksto see if it meets certain criteria. If it
does, it isrouted between the networks, otherwise it is stopped. A firewall filtersboth inbound and
outbound traffic. It can also manage public accessto private networked resources such ashost
applications. It can be used to log all attempts to enter the private networkand trigger alarms when
hostile or unauthorized entryis attempted. Firewalls can filterpacketsbased on theirsource and
destination addresses and port numbers. This is known asaddressfiltering. Firewallscan also
filterspecific types of networktraffic. This is also known as protocol filtering because the decision
to forward or reject trafficisdependant upon the protocol used, for example HTTP, ftp or telnet.
Firewallscan also filter trafficbypacket attribute orstate.
An Internet firewall cannot prevent individual userswith modems from dialling into or out of the
network. Bydoing so theybypassthe firewall altogether. Employee misconduct or carelessness
cannot be controlled byfirewalls. Policies involving the use and misuse of passwordsand user
accountsmust be strictlyenforced. These are management issues that should be raised during
the planning of anysecuritypolicy, but that cannot be solved with Internet firewalls alone.
Internet
Internet
Local User Internet
Allowed Traffic
Restricted Traffic
Out to Internet
Specified Allowed Traffic
Unknown Traffic
Accessto Specific
Destination
Firewall
Types of Firewall
There are three types of firewall:
Packet Filtering
In packet filtering, onlythe protocol and the address information of each packet isexamined. Its
contents and context (its relationto otherpacketsand tothe intended application)are ignored. The
firewall pays no attention to applications on the host or local networkand it "knows" nothing about
the sourcesof incoming data. Filtering consistsof examining incoming oroutgoing packets and
allowing or disallowing theirtransmission or acceptance on the basisof a set of configurablerules.
NetworkAddressTranslation (NAT) routers offer the advantagesof packet filtering firewalls but
can also hide the IPaddressesof computersbehind the firewall, and offera level of circuit-based
filtering.

G.shdsl Router User Manual 152
9
Level 5: Application
Level 4: TCP
Level 3: IP
Level 2: Data Link
Level 1: Physical
Protocol
Source/Destinationaddress
Source/destination port
IPoptions
connectionstatus
192.168.0.5 172.16.3.4UDP
SP=3264
SA=192.168.0.5
DP=1525
DA=172.16.3.4
Filter rememberthis
information
UDP
SP=1525
SA=172.16.3.4
DP=3264
DA=192.168.0.5
Matches outgoingso allows in
UDP
SP=1525
SA=172.168.3.4
DP=2049
DA=192.168.0.5
Nomatches so disallows in
Stateful Inspection
Internet
192.168.0.10
192.168.0.11
192.120.8.5
Firewall
Internal/Protected NetworkExternal/UnprotectedNetwork
NAT(Network Address Translation)
192.168.0.10
192.168.0.11
192.120.8.5
192.120.8.5
Internal IP External IP