Iskratel SI2000 CALLISTO821+ User manual

SI2000 CALLISTO821+ ROUTER
USER GUIDE
Copyright©2005 Iskratel, Ltd.
All rights reserved.

SI2000 Callisto821+ Router User Guide
KSS5320A2-ATE-010 2/109
© The contents of this document is the property of ISKRATEL KRANJ, SLOVENIA, and may not be copied, reproduced or disclosed to a third party without written consent of the owner
Index:
1 SI2000 CALLISTO821+ ROUTER 6
1.1 Features of SI2000 Callisto821+ Router 6
1.2 Using SI2000 Callisto821+ Router 6
1.2.1 Internet access 6
1.2.2 Security 7
1.3 Package contents 7
2 GETTING STARTED 8
2.1 Installation of hardware 8
2.1.1 Ports 8
WAN 8
RES (Reset button) 8
Ethernet 10Base-T/100Base-T port 8
AC power socket 8
2.1.2 Light indicators 9
2.1.3 Ethernet (UTP) cables 10
2.2 Preliminary setup 11
2.2.1 LAN and TCP/IP setup 11
User defined IP address 11
Obtain an IP automatically 12
2.2.2 Telnet management connection 12
2.2.3 WEB management connection 14
3 MANAGING SI2000 CALLISTO821+ ROUTER 16
3.1 Telnet management 16
3.1.1 CLI terminology 16
Transport 16
Interface 16
Object 17
List 17
Example: Attaching a transport to an interface 17
3.1.2 CLI command groups 18
3.1.3 CLI conventions 19
add 19
delete 19
clear 20
set 20
show 20
3.1.4 Help with completing CLI commands 21
3.1.5 User accounts 22
Adding new users 22
User passwords 23
Changing user settings 23
3.2 WEB management 24
3.2.1 About WEB management 24
Status 25
Quick start 25
System 25
Configuration 25

SI2000 Callisto821+ Router User Guide
KSS5320A2-ATE-010 3/109
© The contents of this document is the property of ISKRATEL KRANJ, SLOVENIA, and may not be copied, reproduced or disclosed to a third party without written consent of the owner
3.2.2 Status page 25
Status 25
Advanced Diagnostics 25
Port Connection Status 26
WAN Status 26
LAN Status 26
Hardware Status 26
Defined Interfaces 27
3.2.3 Quick Start page 27
Creating a login using DHCP 28
3.2.4 System page 30
Event Log 30
Remote Access 31
Firmware Update 32
Backup / Restore 32
Restart Router 32
3.2.5 Configuration page 33
Save Configuration 33
Authentication 34
LAN Connections 37
WAN Connections 39
Security 43
ZIPB 44
IP Routes 46
DHCP server 48
DHCP relay 52
DNS client 54
DNS relay 55
Bridge 55
3.3 Ports 56
3.3.1 ADSL Port 57
3.3.2 Ethernet ports 57
3.4 System (backup, restore, reset) 58
3.4.1 Backup / Restore 58
Backup configuration 58
Restore configuration 59
3.4.2 Restart 60
Restart 60
3.5 Firmware upgrade 61
3.5.1 Upgrade 61
Update 61
4 BRIDGED CONFIGURATIONS 62
4.1 Creating new bridged connection 62
4.2 Changing ATM QoS parameters of the connection 64
4.3 Changing scheduler profile 65
4.4 Changing bridge interface settings 66
4.5 Bridge settings 67
4.6 Interface configuration 68
4.7 VLAN Configuration 68
4.7.1 Creating new VLAN 69
4.8 Forward All/Unregistered Configuration 71

SI2000 Callisto821+ Router User Guide
KSS5320A2-ATE-010 4/109
© The contents of this document is the property of ISKRATEL KRANJ, SLOVENIA, and may not be copied, reproduced or disclosed to a third party without written consent of the owner
5 ROUTED CONNECTIONS 72
5.1 About routed configurations 72
5.2 PPPoE routed 72
5.2.1 Computer configuration 72
5.2.2 Creating connection 73
5.2.3 Modifying connection 76
5.3 RFC1483 routed 77
5.4 PPPoA routed 79
5.5 IPoA routed 81
5.6 PPPoE over Ethernet/Bridge routed 83
6 QUALITY OF SERVICE 85
6.1 ATM Quality of Service 85
6.2 Ethernet based Quality of Service 85
6.2.1 Configuring Scheduler 86
Listing current scheduler profiles 86
Creating new scheduler profile 87
Difference between priority and wf2qplus scheduling 87
7 INTERNET ACCESS 88
7.1.1 Encapsulation 89
IPoA 89
RFC1483 89
PPPoE 89
PPPoA 89
7.1.2 VPI and VCI 90
7.1.3 Multiplexing 91
VC-based multiplexing 91
LLC-based multiplexing 91
7.1.4 WAN IP Address 91
8 SECURITY OPTIONS 92
8.1 Security 92
8.1.1 Enabling security 93
Enabling security 93
Enabling Firewall and Intrusion Detection 93
Setting a default security level 93
8.1.2 Configuring security interfaces 94
Configuring security interfaces 94
8.2 NAT 95
Global IP Address Pools 95
Reserved Mappings 95
DMZ 95
8.2.1 Configuring NAT 96
Configuring NAT 96
8.2.2 NAT Global Address 97
Configuring NAT global addresses 97
8.2.3 NAT Reserved Mapping 99
Configuring NAT reserved mapping 99
8.3 Firewall 100
Port Filtering 100
Validators 100

SI2000 Callisto821+ Router User Guide
KSS5320A2-ATE-010 5/109
© The contents of this document is the property of ISKRATEL KRANJ, SLOVENIA, and may not be copied, reproduced or disclosed to a third party without written consent of the owner
Triggers 100
Intrusion Detection 100
8.3.1 Firewall policies 101
Configuring Firewall policies 101
Configuring Portfilters 102
Configuring Validators 104
8.3.2 Triggers 105
Configuring Triggers 105
8.3.3 Intrusion Detection Settings 107
Configuring Intrusion Detection Settings 107
9 TROUBLESHOOTING 108
9.1 Recovery mode 108
9.1.1 Flash memory 108
Main flash memory 108
Recovery flash memory 108
9.1.2 Updating main flash memory 108
Configuring LAN interface on PC 108
Updating flash memory 109
9.2 Dealing with difficulties 109

SI2000 Callisto821+ Router User Guide
KSS5320A2-ATE-010 6/109
© The contents of this document is the property of ISKRATEL KRANJ, SLOVENIA, and may not be copied, reproduced or disclosed to a third party without written consent of the owner
1 SI2000 CALLISTO821+ ROUTER
1.1 Features of SI2000 Callisto821+ Router
Your SI2000 Callisto821+ Router router features:
- high speed data transmission on single twisted copper pair for Internet access
- full rate operations up to 24 Mbit/s in downstream
- 10/100BaseT Ethernet port for LAN or PC connection
- PPPoE (RFC2516) connection support for accessing the Internet
- PPP over CHAP or PAP
- support for PPP over ATM
- support for IP over ATM
- RFC1483 bridged and routed support
- IEEE 802.1q VLAN support
- IEEE 802.1p Ethernet based quality of service
- DHCP server for easy IP address management
- DHCP relay
- DNS client
- DNS relaying
- WEB management and Telnet management over CLI (Command Line Interface) for LAN users
- firmware upgrade over WEB management
- support for VC based and LLC based multiplexing
- NAT (Network Address Translation) for single IP address Internet connection, used by the whole LAN
community
- firewall filtering functions, allowing better network security and management
- intrusion detection
1.2 Using SI2000 Callisto821+ Router
1.2.1 Internet access
Your SI2000 Callisto821+ Router can also be used for high speed Internet connections. The TCP/IP
standards, most commonly used for using the Internet, are supported by the router. The PPPoE connections
in dial-up or dial-in mode are also possible. In order to use your SI2000 Callisto821+ Router for Internet
access, there must be a DSLAM installed at a provider company's infrastructure near you. DSLAM is a rack
of ADSL line cards that links many customer ADSL connections to a single high speed ine. A typical Internet
access application is shown below on figure 2.
You can also use NAT (Network Address Translation) services that your SI2000 Callisto821+ Router
provides when setting up an Internet connection. This feature allows multiple users on LAN to use the
Internet connection, basing on one IP address. The DNS server and DNS relaying is also supported.

SI2000 Callisto821+ Router User Guide
KSS5320A2-ATE-010 7/109
© The contents of this document is the property of ISKRATEL KRANJ, SLOVENIA, and may not be copied, reproduced or disclosed to a third party without written consent of the owner
Figure 1: Example of Internet access connection
1.2.2 Security
Connecting your computer to the Internet exposes it to a wide range of risks. The SI2000 Callisto821+
Router comes with security functions to safeguard your system and data. Three types of interfaces can be
controlled by the Firewall: Internal (LAN), external (WAN) and DMZ (DeMilitarized Zone). A DMZ is usually
used by a company that wants to host its own Internet services without sacrificing unauthorized access to its
private network. Typically, the DMZ contains devices accessible to Internet traffic such as HTTP, FTP, DNS
and SMTP servers. You can configure the Firewall to allow or block access from one interface type to
another interface type.
You can configure the Firewall by using a default Security level, by Firewall port filters, by Firewall validators
and by Security triggers.
1.3 Package contents
SI2000 Callisto821+ Router package comes with following items:
1. SI2000 Callisto821+ Router unit
2. AC adapter
3. Ethernet UTP cord
4. CD-ROM containing user's guide
internet
DSLAM
DSL line
ethernet cable
A
TM

SI2000 Callisto821+ Router User Guide
KSS5320A2-ATE-010 8/109
© The contents of this document is the property of ISKRATEL KRANJ, SLOVENIA, and may not be copied, reproduced or disclosed to a third party without written consent of the owner
2 GETTING STARTED
2.1 Installation of hardware
2.1.1 Ports
The following figure shows the rear panel of your SI2000 Callisto821+ Router.
Figure 2: The rear panel of the SI2000 Callisto821+ Router
WAN
This port is used for connecting the ADSL cable to your phone jack. Connect the SI2000 Callisto821+ Router
to the ADSL port to access the Internet.
RES (Reset button)
This button is used to reset the configuration of the router to factory default values. You must hold this button
while the router is starting-up until ALM led will start flashing fast (about 30 seconds). Callisto821+ will use
factory default settings only for the time it is running. If you want to preserve factory default settings save the
configuration.
Ethernet 10Base-T/100Base-T port
Use a straight-through or crossover ethernet cable (2.1.3Ethernet (UTP) cables) to connect your SI2000
Callisto821+ Router to a computer or any other device. It is possible to manage the settings of the router with
telnet connection using this port. The factory setting for IP address is 192.168.1.1.
AC power socket
Plug the power cable to ensure power to the SI2000 Callisto821+ Router.

SI2000 Callisto821+ Router User Guide
KSS5320A2-ATE-010 9/109
© The contents of this document is the property of ISKRATEL KRANJ, SLOVENIA, and may not be copied, reproduced or disclosed to a third party without written consent of the owner
2.1.2 Light indicators
The following figure shows the front panel of your SI2000 Callisto821+ Router.
There are five LEDs on the front panel of the router that indicate the status of your SI2000 Callisto821+
Router. The description is given in table 1.
table 1: LEDs description
LED Status Description
PWR on Power on.
off Power off or fatal malfunction.
100M/10M on Ethernet link is established. No ethernet activity.
off No ethernet link established.
blinking Ethernet activity.
WAN on ADSL line is established.
off ADSL interface is not functional.
blinking slow ADSL interface is in handshake mode looking for DSLAM
blinking fast ADSL interface detected DSLAM on the other side and
negotiating link parameters.
ALM blinking malfunction
Figure 3: The front panel of the SI2000 Callisto821+ Router

SI2000 Callisto821+ Router User Guide
KSS5320A2-ATE-010 10/109
© The contents of this document is the property of ISKRATEL KRANJ, SLOVENIA, and may not be copied, reproduced or disclosed to a third party without written consent of the owner
2.1.3 Ethernet (UTP) cables
You should use a straight-through Ethernet cable to connect your SI2000 Callisto821+ Router to a computer
directly or use a crossover cable to connect to an external hub. The explanation on what does that mean
follows.
There are 8 contacts on UTP connector, described in the next table. The UTP connectors are shown on
figure 5 :
table 2: UTP contacts
Contact MDI signal
1 TD+
2 TD-
3 RD+
4 Not used by 10Base-T
5 Not used by 10Base-T
6 RD-
7 Not used by 10Base-T
8 Not used by 10Base-T
In case of straight-through cable, the contacts on both sides of the cable are connected in the same way, like
shown on the left side of figure 6.
In case of crossover cable, the contacts on both sides of the cable are connected cross-over, like shown on
the right side of figure 6.
Figure 5: Ethernet cable: straight-through connected cable (left) and crossover connected cable (right)
Figure 4: The UTP connectors