Funkwerk bintec R1200 User manual

Manual
bintec R1xxx/R3xxx/R4xxx
Reference
Copyright© Version 5.0, 2009 Funkwerk Enterprise Communications GmbH
Funkwerk Enterprise Communications GmbH Manual
bintec R1xxx/R3xxx/R4xxx 1

Legal Notice
Aim and purpose
This document is part of the user manual for the installation and configuration of funkwerk devices. For
the latest information and notes on the current software release, please also read our release notes,
particularly if you are updating your software to a higher release version. You will find the latest release
notes under www.funkwerk-ec.com .
Liability
This manual has been put together with the greatest possible care. However, the information con-
tained in this manual is not a guarantee of the properties of your product. Funkwerk Enterprise Com-
munications GmbH is only liable within the terms of its conditions of sale and supply and accepts no li-
ability for technical inaccuracies and/or omissions.
The information in this manual can be changed without notice. You will find additional information and
also release notes for funkwerk devices under www.funkwerk-ec.com .
Funkwerk devices make WAN connections as a possible function of the system configuration. You
must monitor the product in order to avoid unwanted charges. Funkwerk Enterprise Communications
GmbH accepts no responsibility for data loss, unwanted connection costs and damage caused by un-
intended operation of the product.
Trademarks
funkwerk trademarks and the funkwerk logo, bintec trademarks and the bintec logo, artem trademarks
and the artem logo, elmeg trademarks and the elmeg logo are registered trademarks of Funkwerk En-
terprise Communications GmbH.
Company and product names mentioned are usually trademarks of the companies or manufacturers
concerned.
Copyright
All rights reserved. No part of this manual may be reproduced or further processed in any way without
the written consent of Funkwerk Enterprise Communications GmbH. The documentation may not be
processed and, in particular, translated without the consent of Funkwerk Enterprise Communications
GmbH.
You will find information on guidelines and standards in the declarations of conformity under
www.funkwerk-ec.com .
How to reach Funkwerk Enterprise Communications GmbH
Funkwerk Enterprise Communications GmbH, Südwestpark 94, D-90449 Nuremberg, Germany,
Phone: [phone], Fax: [phone]
Funkwerk Enterprise Communications France S.A.S., 6/8 Avenue de la Grande Lande, F-33174
Gradignan, France, Phone: [phone], Fax: [phone]
Internet: www.funkwerk-ec.com
Manual Funkwerk Enterprise Communications GmbH
2bintec R1xxx/R3xxx/R4xxx

Table of Contents
Chapter1 Introduction...........................1
1.1 Possible Applications . . . . . . . . . . . . . . . . . . . . . . . . 2
1.2 Cleaning.............................. 5
1.3 Aboutthisguide.......................... 5
Chapter 2 Quick Reference . . . . . . . . . . . . . . . . . . . . . . . . 8
2.1 Introduction............................ 8
2.2 System requirements . . . . . . . . . . . . . . . . . . . . . . . . 8
2.3 Presettings ............................ 8
2.4 Installation............................. 9
2.4.1 Connections........................... 10
2.4.2 Setting Up and Connecting. . . . . . . . . . . . . . . . . . . . . 14
2.5 Configurationof ......................... 15
2.5.1 Preparations........................... 15
2.5.2 Setting up an ADSL connection. . . . . . . . . . . . . . . . . . . 21
2.5.3 Setting up a wireless LAN (only bintec R1200w, R1200wu and R3000w) . 22
2.6 Support Information . . . . . . . . . . . . . . . . . . . . . . . . 23
Chapter 3 Technical data . . . . . . . . . . . . . . . . . . . . . . . . 24
3.1 bintecR1200 .......................... 24
3.1.1 Scopeofsupply ......................... 24
3.1.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 24
3.1.3 LEDs.............................. 26
3.1.4 Connections........................... 28
3.1.5 PinAssignments......................... 29
3.2 bintecR1200w.......................... 30
Funkwerk Enterprise Communications GmbH Table of Contents
bintec R1xxx/R3xxx/R4xxx i

3.2.1 Scopeofsupply ......................... 31
3.2.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 31
3.2.3 LEDs.............................. 34
3.2.4 Connections........................... 35
3.2.5 PinAssignments......................... 36
3.3 bintecR1200wu......................... 38
3.3.1 Scopeofsupply ......................... 38
3.3.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 39
3.3.3 LEDs.............................. 41
3.3.4 Connections........................... 43
3.3.5 PinAssignments......................... 44
3.4 bintecR3000 .......................... 48
3.4.1 Scopeofsupply ......................... 48
3.4.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 49
3.4.3 LEDs.............................. 51
3.4.4 Connections........................... 53
3.4.5 PinAssignments......................... 53
3.5 bintecR3000w.......................... 56
3.5.1 Scopeofsupply ......................... 56
3.5.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 57
3.5.3 LEDs.............................. 59
3.5.4 Connections........................... 61
3.5.5 PinAssignments......................... 62
3.6 bintecR3400 .......................... 65
3.6.1 Scopeofsupply ......................... 65
3.6.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 65
3.6.3 LEDs.............................. 68
3.6.4 Connections........................... 69
3.6.5 PinAssignments......................... 70
3.7 bintecR3800 .......................... 73
3.7.1 Scopeofsupply ......................... 73
Table of Contents Funkwerk Enterprise Communications GmbH
ii bintec R1xxx/R3xxx/R4xxx

3.7.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 73
3.7.3 LEDs.............................. 76
3.7.4 Connections........................... 78
3.7.5 PinAssignments......................... 78
3.8 bintecR4100 .......................... 81
3.8.1 Scopeofsupply ......................... 81
3.8.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 82
3.8.3 LEDs.............................. 84
3.8.4 Connections........................... 86
3.8.5 PinAssignments......................... 86
3.9 bintecR4300 .......................... 89
3.9.1 Scopeofsupply ......................... 89
3.9.2 General Product Features . . . . . . . . . . . . . . . . . . . . . 90
3.9.3 LEDs.............................. 92
3.9.4 Connections........................... 94
3.9.5 PinAssignments......................... 94
Chapter 4 Access and configuration. . . . . . . . . . . . . . . . . . . 98
4.1 AccessOptions.......................... 98
4.1.1 AccessviaLAN ......................... 98
4.1.2 Access via the Serial Interface . . . . . . . . . . . . . . . . . . . 101
4.1.3 Access over ISDN . . . . . . . . . . . . . . . . . . . . . . . . 102
4.2 Loggingin............................ 103
4.2.1 User names and passwords in ex works state . . . . . . . . . . . . 103
4.2.2 Logging in for Configuration . . . . . . . . . . . . . . . . . . . . 104
4.3 Configuration options . . . . . . . . . . . . . . . . . . . . . . . 105
4.3.1 Funkwerk Configuration Interface . . . . . . . . . . . . . . . . . . 106
4.3.2 SNMPshell........................... 121
4.4 BOOTmonitor.......................... 121
Funkwerk Enterprise Communications GmbH Table of Contents
bintec R1xxx/R3xxx/R4xxx iii

Chapter 5 System management . . . . . . . . . . . . . . . . . . . . 123
5.1 State.............................. 123
5.2 GlobalSettings.......................... 126
5.2.1 System............................. 126
5.2.2 Passwords............................ 128
5.2.3 DateandTime.......................... 130
5.2.4 SystemLicences......................... 134
5.3 Interface Mode / Bridge Groups . . . . . . . . . . . . . . . . . . 137
5.3.1 Interfaces............................ 138
5.4 Administrative Access . . . . . . . . . . . . . . . . . . . . . . . 140
5.4.1 Access............................. 140
5.4.2 SSH .............................. 141
5.4.3 SNMP.............................. 145
5.5 Remote Authentication . . . . . . . . . . . . . . . . . . . . . . 146
5.5.1 RADIUS............................. 146
5.5.2 TACACS+............................ 151
5.5.3 Options............................. 154
Chapter 6 Physical interfaces . . . . . . . . . . . . . . . . . . . . . 156
6.1 AUX .............................. 156
6.1.1 AUX .............................. 156
6.2 EthernetPorts.......................... 159
6.2.1 Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . 159
6.3 ISDNPorts ........................... 161
6.3.1 ISDN Configuration . . . . . . . . . . . . . . . . . . . . . . . . 162
6.3.2 MSN Configuration . . . . . . . . . . . . . . . . . . . . . . . . 170
6.4 ADSLModem.......................... 172
6.4.1 ADSL Configuration . . . . . . . . . . . . . . . . . . . . . . . . 172
Table of Contents Funkwerk Enterprise Communications GmbH
iv bintec R1xxx/R3xxx/R4xxx

6.5 SHDSL............................. 175
6.5.1 SHDSL Configuration . . . . . . . . . . . . . . . . . . . . . . . 175
6.6 Serialports ........................... 179
6.6.1 Serialports ........................... 179
6.7 UMTS/HSDPA ......................... 181
6.7.1 UMTS / HSDPA / HSUPA . . . . . . . . . . . . . . . . . . . . . 182
Chapter7 LAN............................. 184
7.1 IPConfiguration......................... 184
7.1.1 Interfaces............................ 184
7.2 VLAN.............................. 187
7.2.1 VLANs ............................. 189
7.2.2 Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . 190
7.2.3 Administration.......................... 191
Chapter 8 Wireless LAN . . . . . . . . . . . . . . . . . . . . . . . . 192
8.1 WLAN1............................. 192
8.1.1 RadioSettings.......................... 193
8.1.2 Virtual Service Sets . . . . . . . . . . . . . . . . . . . . . . . . 206
8.1.3 WDSLinks............................ 212
8.1.4 ClientLink............................ 215
8.2 Administration.......................... 219
8.2.1 Basicsettings.......................... 220
Chapter9 Routing........................... 221
9.1 Routes............................. 221
9.1.1 IProutes ............................ 221
9.1.2 Options............................. 226
9.2 NAT............................... 227
Funkwerk Enterprise Communications GmbH Table of Contents
bintec R1xxx/R3xxx/R4xxx v

9.2.1 NATInterfaces.......................... 228
9.2.2 Portforwarding.......................... 229
9.3 RIP............................... 233
9.3.1 RIPInterfaces.......................... 234
9.3.2 RIPFilter............................ 236
9.3.3 RIPOptions........................... 239
9.4 LoadBalancing.......................... 242
9.4.1 Load Balancing Groups . . . . . . . . . . . . . . . . . . . . . . 242
9.5 Multicast............................. 244
9.5.1 Forwarding ........................... 246
9.5.2 IGMP.............................. 247
9.5.3 Options............................. 250
Chapter10 WAN............................. 253
10.1 Internet+Dialup......................... 253
10.1.1 PPPoE............................. 255
10.1.2 PPTP.............................. 260
10.1.3 PPPoA............................. 265
10.1.4 ISDN.............................. 269
10.1.5 GPRS/UMTS .......................... 277
10.1.6 AUX .............................. 281
10.1.7 IPPools............................. 288
10.2 ATM .............................. 289
10.2.1 Profiles............................. 289
10.2.2 Service Categories . . . . . . . . . . . . . . . . . . . . . . . . 294
10.2.3 OAM Controlling . . . . . . . . . . . . . . . . . . . . . . . . . 297
10.3 Leasedline ........................... 301
10.3.1 Interfaces............................ 302
10.4 Real Time Jitter Control . . . . . . . . . . . . . . . . . . . . . . 310
10.4.1 Controlled interfaces . . . . . . . . . . . . . . . . . . . . . . . 310
Table of Contents Funkwerk Enterprise Communications GmbH
vi bintec R1xxx/R3xxx/R4xxx

Chapter11 VPN............................. 313
11.1 IPSec.............................. 313
11.1.1 IPSecPeers........................... 313
11.1.2 Phase-1 Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 322
11.1.3 Phase-2 Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 329
11.1.4 IPPools............................. 334
11.1.5 Options............................. 335
11.2 L2TP.............................. 338
11.2.1 TunnelProfiles.......................... 339
11.2.2 User .............................. 342
11.2.3 Options............................. 348
11.3 PPTP.............................. 349
11.3.1 PPTPTunnel .......................... 349
11.3.2 Options............................. 356
11.4 GRE.............................. 357
11.4.1 GRETunnels .......................... 357
11.5 Certificates ........................... 359
11.5.1 Certificate list . . . . . . . . . . . . . . . . . . . . . . . . . . 360
11.5.2 CRLs.............................. 369
11.5.3 Certificate Servers . . . . . . . . . . . . . . . . . . . . . . . . 370
Chapter12 Firewall........................... 372
12.1 Policies............................. 373
12.1.1 FilterRules ........................... 374
12.1.2 QoS .............................. 377
12.1.3 Options............................. 379
12.2 Interfaces............................ 380
12.2.1 Groups............................. 380
Funkwerk Enterprise Communications GmbH Table of Contents
bintec R1xxx/R3xxx/R4xxx vii

12.3 Addresses............................ 381
12.3.1 Addresslist........................... 382
12.3.2 Groups............................. 383
12.4 Services............................. 384
12.4.1 Servicelist............................ 384
12.4.2 Groups............................. 386
Chapter13 VoIP ............................ 388
13.1 Application Level Gateway . . . . . . . . . . . . . . . . . . . . . 388
13.1.1 SIPProxies........................... 388
13.1.2 SIPEndpoints.......................... 390
13.2 MediaGateway.......................... 392
13.2.1 Extensions............................ 392
13.2.2 SIPAccounts .......................... 396
13.2.3 CallRouting........................... 402
13.2.4 CLID Translation . . . . . . . . . . . . . . . . . . . . . . . . . 405
13.2.5 Call Translation. . . . . . . . . . . . . . . . . . . . . . . . . . 407
13.2.6 Options............................. 410
Chapter 14 Local services. . . . . . . . . . . . . . . . . . . . . . . . 413
14.1 DNS .............................. 413
14.1.1 GlobalSettings.......................... 415
14.1.2 StaticHosts........................... 418
14.1.3 Domain Forwarding . . . . . . . . . . . . . . . . . . . . . . . . 419
14.1.4 Cache.............................. 421
14.1.5 Statistics ............................ 423
14.2 DynDNSClient.......................... 424
14.2.1 DynDNSUpdate......................... 424
14.2.2 DynDNS Provider. . . . . . . . . . . . . . . . . . . . . . . . . 426
14.3 DHCPServer .......................... 428
Table of Contents Funkwerk Enterprise Communications GmbH
viii bintec R1xxx/R3xxx/R4xxx

14.3.1 DHCPPool ........................... 428
14.3.2 IP/MACBinding ......................... 431
14.3.3 DHCP Relay Setting . . . . . . . . . . . . . . . . . . . . . . . 433
14.4 WebFilter............................ 434
14.4.1 Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . 434
14.4.2 FilterList ............................ 436
14.4.3 Black / White list . . . . . . . . . . . . . . . . . . . . . . . . . 438
14.4.4 History ............................. 440
14.5 CAPIServer........................... 440
14.5.1 User .............................. 441
14.5.2 Options............................. 442
14.6 Scheduling............................ 443
14.6.1 Schedule............................ 443
14.6.2 Options............................. 447
14.7 Surveillance........................... 448
14.7.1 Hosts.............................. 449
14.7.2 Interfaces............................ 452
14.7.3 PingGenerator.......................... 454
14.8 ISDN Theft Protection . . . . . . . . . . . . . . . . . . . . . . . 456
14.8.1 Options............................. 456
14.9 Funkwerk Discovery . . . . . . . . . . . . . . . . . . . . . . . 458
14.9.1 Device discovery . . . . . . . . . . . . . . . . . . . . . . . . . 458
14.9.2 Options............................. 462
14.10 UPnP.............................. 463
14.10.1 Interfaces............................ 463
14.10.2 Global Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 464
Chapter 15 Maintenance . . . . . . . . . . . . . . . . . . . . . . . . 466
15.1 Diagnostics........................... 466
15.1.1 PingTest............................ 466
Funkwerk Enterprise Communications GmbH Table of Contents
bintec R1xxx/R3xxx/R4xxx ix

15.1.2 DNSTest............................ 467
15.1.3 Traceroute Test . . . . . . . . . . . . . . . . . . . . . . . . . 468
15.2 Software & Configuration . . . . . . . . . . . . . . . . . . . . . 468
15.2.1 Options............................. 468
15.3 Reboot............................. 472
15.3.1 SystemReboot.......................... 473
Chapter 16 External Reporting . . . . . . . . . . . . . . . . . . . . . 474
16.1 Syslog ............................. 474
16.1.1 SyslogServers.......................... 474
16.2 IPAccounting.......................... 477
16.2.1 Interfaces............................ 477
16.2.2 Options............................. 478
16.3 E-mailAlert........................... 479
16.3.1 E-mail Alert Server . . . . . . . . . . . . . . . . . . . . . . . . 479
16.3.2 E-mail Alert Recipient . . . . . . . . . . . . . . . . . . . . . . . 481
16.4 SNMP.............................. 483
16.4.1 SNMP Trap Options. . . . . . . . . . . . . . . . . . . . . . . . 483
16.4.2 SNMP Trap Hosts . . . . . . . . . . . . . . . . . . . . . . . . 484
16.5 ActivityMonitor.......................... 485
16.5.1 Options............................. 486
Chapter17 Monitoring.......................... 488
17.1 InternalLog........................... 488
17.1.1 System messages . . . . . . . . . . . . . . . . . . . . . . . . 488
17.2 IPSec.............................. 489
17.2.1 IPSecTunnels.......................... 490
17.2.2 IPSec Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . 492
17.3 ISDN/Modem .......................... 493
Table of Contents Funkwerk Enterprise Communications GmbH
xbintec R1xxx/R3xxx/R4xxx

17.3.1 CurrentCalls........................... 493
17.3.2 CallHistory ........................... 495
17.4 Interfaces............................ 495
17.4.1 Statistics ............................ 496
17.5 WLAN.............................. 497
17.5.1 WLAN1............................. 497
17.5.2 VSS .............................. 499
17.5.3 WDS.............................. 502
17.5.4 ClientLinks........................... 504
Glossary........................... 507
Index ............................ 548
Funkwerk Enterprise Communications GmbH Table of Contents
bintec R1xxx/R3xxx/R4xxx xi

Table of Contents Funkwerk Enterprise Communications GmbH
xii bintec R1xxx/R3xxx/R4xxx

Chapter 1 Introduction
The powerful devices bintec R1xxx/R3xxx/R4xxx have been specially developed for high-
speed Internet access and for VPN connections in SMEs and branch offices.
This chapter describes the features your new bintec gateway offers. It provides you with
an overview of the ways in which your bintec gateway can be used. This chapter also tells
you about the structure and content of this user's guide.
Safety precautions
The safety precautions, which are supplied with your device, tell you what you need to take
into consideration when using your bintec gateway.
Installation
How to connect your device is shown in Installation on page 9. This chapter also tells you
what preliminary tasks are necessary for configuration.
Configuration of
How to get your device running is explained in Configuration of on page 15. There we show
you how to start up your device from a Windows PC and how to install other useful online
assistants. At the end of the chapter, you will be in a position to surf the Internet, send or
receive e-mails and set up a connection to a partner network to access data at your com-
pany head office, for example.
Password
If you are already familiar with configuring bintec devices and want to get started right
away, all you really need to know is the factory default user name and password.
User Name:admin
Password:funkwerk
Caution
Remember to change the password immediately when you log in to the device for the
first time. All bintec devices are supplied with the same password, which means they
are not protected against unauthorised access until you change the password. How to
change the passwords is described in chapter Passwords on page 128.
Funkwerk Enterprise Communications GmbH 1 Introduction
bintec R1xxx/R3xxx/R4xxx 1

1.1 Possible Applications
Connecting networks
Gateways are used to connect networks and to exchange information between the net-
works. For example, you can use your device to establish a connection to the network of
your Internet Service Provider and use the usual Internet services, such as the World Wide
Web (WWW) or e-mail.
Access to head office
By connecting to another partner network, e.g. your company’s head office, from your
home or branch office, you can conveniently access any information you may need from
the head office, even if this is geographically far away. These local networks are connected
over an ISDN connection or a DSL connection. The size of your own local network –
whether it consists of several computers or just one workstation – is irrelevant.
Your gateway is your link to the outside world
Every device serves as a link between the individual local networks. Within each LAN, the
gateway is connected to the network like a normal computer. Its task is to transmit informa-
tion as necessary from its own network to an external network (e.g. to the network of your
Internet Service Provider or your head office) and to find the most suitable routes for trans-
mission. Conversely, it receives information and routes it to its own network.
One gateway for everyone
If you have a local network with several computers, you only need a single gateway to al-
low all computers in the network access to the Internet or the head office. The lower ex-
penditure on equipment and administration for several computers in the network means
substantial savings. If you used ISDN cards or modems, every workplace would have to be
equipped separately.
High-speed Internet access
If you configure high-speed Internet access with the bintec gateway, all the users in the
local network profit from faster Internet access. The bandwidth used permits considerably
faster Internet applications than conventional ISDN or modems.
Automatic dialling and disconnection
Once configured, your device decides independently if and how it is to set up a connection
to the Internet Service Provider. If you enter an external WWW address in your browser, for
example, your gateway determines that the requested address lies outside your own LAN
and establishes a connection to your Internet Service Provider and the Internet automatic-
1 Introduction Funkwerk Enterprise Communications GmbH
2bintec R1xxx/R3xxx/R4xxx

ally. To help you save costs, your gateway disconnects the connection after a predefined
time (short hold) if no more information is exchanged.
Simple data access
If suitably configured, your device enables you to conveniently access data at another site,
e.g. your head office. While running Windows, for example, you can connect a network
drive to a computer at your head office. You then simply click the icon for this link in Win-
dows Explorer and can surf in the directories and data of the remote computer just as if you
were using your own hard disk. Your gateway takes care of setting up and clearing the con-
nection.
Security/firewall/DynDNS
Your gateway is provided with integrated firewall mechanisms and therefore provides ex-
tensive, low-cost features to meet all the requirements for access security. It protects your
network against unauthorised external access. This is achieved with functions such as
NAT, encryption, filters, monitoring and a Stateful Inspection Firewall.
The Stateful Inspection Firewall (SIF) offers effective protection against attacks from the In-
ternet through dynamic packet filtering. Firewall handling is made easier through numerous
pre-configured services. To be able to find partners in spite of dynamic IP addresses, the
devices support the DynDNS function. The implemented function enables you to use the
DynDNS service of leading DynDNS providers, and some providers have been preset. The
security features of the device also include optional content filtering (there is an extra
charge for this, 30-day test version included). Here, all the outgoing Internet enquiries are
classified, allowing unwanted content to be reliably filtered out.
Other security features
With the scheduling function of the devices, times can be defined in which users are gran-
ted individual rights, such as for Internet access. The VLAN function of the devices allows
the allocation of users to virtual subnets and offers additional security.
DMZ
All devices offer the possibility of configuring a "Demilitarised Zone" (DMZ). This is a separ-
ate network located between the internal LAN and the Internet. The DMZ is the place for all
services that have to make direct contact with the Internet. If a web or mail server in the
DMZ is attacked, this has no effect on the security of your internal network.
IP Telephony
The application level gateway allows IP telephones in the LAN to establish a connection
with SIP providers without neglecting the security of the WAN connection. To do this, the
SIP proxy monitors the signalling process between the IP telephone and SIP provider and
makes the necessary NAT and firewall releases dynamically for the duration of the commu-
Funkwerk Enterprise Communications GmbH 1 Introduction
bintec R1xxx/R3xxx/R4xxx 3

nication.
Wireless LAN
The wireless interface transfers the data at max. 54 mbps (802.11g) and is compatible with
the 11 mbps variant 802.11b in the same frequency range. Encryption via the WLAN inter-
face can take place via WPA and WPA2. Virtual WLAN interfaces can be defined via multi-
SSID. This means that different rules of access to the WLAN can be implemented, e.g. to
log in internal personnel and external visitors.
IPSec
The devices have a powerful IPSec implementation and have ten active VPN tunnel li-
cences ex works. In addition to encryption via AES or 3DES, the devices offer authentica-
tion via certificates or preshared keys. In order to optimise the encrypted traffic flow, it can
be compressed using IPComp. The Dead Peer Detection function allows the availability of
the tunnel endpoint to be checked and restores it if inactive. NAT Traversal is also suppor-
ted, as is the connection of RADIUS or TACACS+ for authentication.
Configuration and maintenance
A number of options are available for configuring your gateway. Configuration with the
Funkwerk Configuration Interface is operating system-independent.
Remote maintenance
The devices can also be configured and maintained remotely. As soon as your device is
connected to the ISDN - even in its ex works state - configuration settings can be made
from another location (e.g. by the administrator at the head office). This means you can
have someone at the head office configure the system.
Models
The bintec R1xxx/R3xxx/R4xxx models provide you with flexible IP access routers with
an integrated ADSL modem (R3000 and R3000w with annex A and annex B) and a 4-port
switch. The support of ADSL2+ allows a high-performance WAN connection and permits
download rates of up to 24 mbps. A SIP Proxy controls the transparent communication with
SIP providers, so that the device can be used in VoIP scenarios such as Internet tele-
phony.
The devices bintec R1200w,R1200wu and R3000w offer WLAN functionality. The WLAN
function allows flexible use in wireless environments.
In addition to a 4-port switch and also a further Ethernet port for the LAN/WAN connection,
the devices have an ISDN interface for automatic backup or remote dial-in.
1 Introduction Funkwerk Enterprise Communications GmbH
4bintec R1xxx/R3xxx/R4xxx

1.2 Cleaning
You can clean your device easily. Use a damp cloth or antistatic cloth. Do not use solvents.
Never use a dry cloth; the electrostatic charge could cause electronic faults. Make sure that
no moisture can enter the device and cause damage.
1.3 About this guide
This document is valid for bintec devices with system software as of software version
7.8.1.
The Reference, which you have in front of you, contains the following chapters:
User's Guide - Reference
Chapter Description
Quick Reference This contains instructions for how to set up and start up your
device and create a basic configuration.
Technical data This section contains a description of all the device's technical
properties.
Access and configura-
tion
This includes explanations about the different access and con-
figuration methods.
System management
Physical interfaces
LAN
Wireless LAN
Routing
WAN
VPN
Firewall
VoIP
Local services
These chapters describe all configuration options of the Funk-
werk Configuration Interface. The individual menus are de-
scribed in the order of navigation.
The individual chapters also contain more detailed explanations
on the subsystem in question.
Funkwerk Enterprise Communications GmbH 1 Introduction
bintec R1xxx/R3xxx/R4xxx 5

Chapter Description
Maintenance
External reporting
Monitoring
Glossary The glossary contains a reference to the most important tech-
nical terms used in network technology.
Index The index lists all the key terms for operating the device and all
the configuration options and gives page numbers so they can
be found easily.
To help you locate information easily, this user's guide uses the following visual aids:
List of visual aids
Icon Use
Indicates practical information.
Indicates general and important points.
Indicates a warning of risk level Attention (points out possible
dangers that may cause damage to property if not observed).
Indicates a warning of risk level Warning (points out possible
dangers that may cause physical injury or even death if not ob-
served).
The following typographical elements are used to help you find and interpret the informa-
tion in this user's guide:
Typographical elements
Typographical element Use
•Indicates lists.
Menu->Submenu
File->Open
Indicates menus and sub-menus in the Funkwerk Configura-
tion Interface and Windows interface.
Non-proportional
(Courier), e.g. ping
Indicates commands that you must enter as written.
1 Introduction Funkwerk Enterprise Communications GmbH
6bintec R1xxx/R3xxx/R4xxx