Nokia M1112 Use and care manual

Nokia M1112
T66285
ADMINISTRATOR MANUAL
ADSL (over ISDN) Routerā

C33907001SE_00 ECopyright Nokia Networks Oy
M1112
ADSL (over ISDN) Router
Administrator Manual
C33907.20 A0

M1112 Administrator Manual
ECopyright Nokia Networks Oy C33907001SE_00
ii
ECOPYRIGHT Nokia Networks Oy 2000
All rights reserved.
Nopartofthispublicationmaybecopied,distributed,transmitted,transcribed,storedinaretrieval
system, or translated into any human or computer language without the prior written permission
of Nokia Networks Oy.
The manufacturer has made every effort to ensure that the instructions contained in the
documents are adequate and free of errors and omissions. The manufacturer will, if necessary,
explain issues which may not be covered by the documents. The manufacturer’s liability for any
errors in the documents is limited to the correction of errors and the aforementioned advisory
services.
The documents have been prepared to be used by professional and properly trained personnel,
and the customer assumes full responsibility when using them.The manufacturer welcomes
customer comments as part of the process of continual development and improvement of the
documentationinthe best waypossible from theuser’sviewpoint.Please submit yourcomments
to the nearest Nokia sales representative.
NOKIA is a registered trademark of Nokia Corporation.
Any other trademarks mentioned in the documents are the property of their respective owners.

ECopyright Nokia Networks Oy
C33907001SE_00 iii
Document History
Document Date Comment
C33907001SE_00 13.09.2000

M1112 Administrator Manual
ECopyright Nokia Networks Oy C33907001SE_00
iv

ECopyright Nokia Networks Oy
C33907001SE_00 v
Contents
Chapter 1
Introduction to Nokia M1112 1-1. . . . . . . . . . . . . . . . . .
Chapter 2
Applications and features 2-1. . . . . . . . . . . . . . . . . . . . .
2.1 Applications 2-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Internet access 2-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Remote work 2-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
LAN interconnection 2-4. . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2 Features 2-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.1 Interfaces 2-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
LAN interface 2-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Internal host/gateway interface 2-7. . . . . . . . . . . . . . . . . . . .
Data VCC operation 2-7. . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.2 Routing 2-7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.3 Bridging 2-7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.4 Network Address Port Translation 2-8. . . . . . . . . . . . . . . . . . .
2.2.5 Dynamic Host Configuration Protocol 2-9. . . . . . . . . . . . . . . .
2.2.6 ATM and ADSL 2-9. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.7 Point-to-Point Tunneling Protocol (PPTP) 2-10. . . . . . . . . . . . .
2.2.8 Point-to-Point Protocol over Ethernet (PPPoE) 2-11. . . . . . . . . .
2.2.9 Payload encapsulations 2-11. . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.10 Weighted Fair Queueing (Class of Service) 2-11. . . . . . . . . . . .
2.2.11 Management 2-12. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.12 Dedicated management channel 2-12. . . . . . . . . . . . . . . . . . . . .

M1112 Administrator Manual
ECopyright Nokia Networks Oy C33907001SE_00
vi
Chapter 3
Interfaces and indicator lights 3-1. . . . . . . . . . . . . . . . .
3.1 Interfaces 3-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.1.1 Ethernet interface 3-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.1.2 ADSL interface 3-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.2 Command line interface 3-3. . . . . . . . . . . . . . . . . . . . . . . . . .
3.3 Indicator lights 3-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 4
Installing Nokia M1112 4-1. . . . . . . . . . . . . . . . . . . . . . .
4.1 M1112 default settings 4-1. . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.2 Step-by-step installation procedure 4-3. . . . . . . . . . . . . . . . .
Chapter 5
Managing M1112 5-1. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.1 Operational examples 5-1. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.1.1 Routing/tunneling IP only 5-2. . . . . . . . . . . . . . . . . . . . . . . . . .
5.1.2 Routing/tunneling IP, bridging other protocols 5-2. . . . . . . . . .
5.1.3 Routing/tunneling IP, bridging all protocols including IP 5-3. .
5.1.4 Bridging only 5-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.2 Typical configuration tasks 5-4. . . . . . . . . . . . . . . . . . . . . . . .
5.2.1 Configuring DHCP and DNS 5-4. . . . . . . . . . . . . . . . . . . . . . .
5.2.2 Configuring static and dynamic routing 5-5. . . . . . . . . . . . . . .
5.2.3 File system and downloading new firmware using TFTP 5-6. .
Downloading configuration or application from monitor 5-7
5.3 Browser management 5-8. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.1 Opening a connection 5-9. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.2 Main Page 5-10. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.3 Service Providers pages 5-11. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.4 Local Network pages 5-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Local ports 5-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
DHCP 5-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
NAPT 5-16. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Routing page 5-17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.5 Statistics page 5-18. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.6 Restart page 5-19. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.7 Save Config page 5-20. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

ECopyright Nokia Networks Oy
C33907001SE_00 vii
5.4 Command line interface (CLI) 5-20. . . . . . . . . . . . . . . . . . . . .
5.4.1 Main mode commands 5-23. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.4.2 Configuration mode commands 5-44. . . . . . . . . . . . . . . . . . . . . .
Root level commands 5-45. . . . . . . . . . . . . . . . . . . . . . . . . . .
System level commands 5-46. . . . . . . . . . . . . . . . . . . . . . . . .
Password level command 5-47. . . . . . . . . . . . . . . . . . . . . . . .
Ethernet level commands 5-48. . . . . . . . . . . . . . . . . . . . . . . .
VCC (ATM channel) commands 5-50. . . . . . . . . . . . . . . . . . .
Vbridge commands 5-55. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Dedicated management channel commands 5-56. . . . . . . . . .
Common commands 5-57. . . . . . . . . . . . . . . . . . . . . . . . . . . .
Appendix A
Technical specifications A-1. . . . . . . . . . . . . . . . . . . . . . .
A.1 Mechanical construction and power supply A-3. . . . . . . . . .
A.2 Ambient conditions, EMC and safety A-3. . . . . . . . . . . . . . .
Ambient conditions A-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
EMC A-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Safety A-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Glossary

M1112 Administrator Manual
ECopyright Nokia Networks Oy C33907001SE_00
viii

Introduction to Nokia M1112
ECopyright Nokia Networks Oy
C33907001SE_00 1-1
Chapter 1
Introduction to Nokia M1112
Nokia M1112 is an integrated ADSL (Asymmetric Digital Subscriber
Line) bridge and router which enables high-speed Internet access for
your Ethernet local area networks (LAN). It multiplies the capacity of
the already installed telephone lines used for ISDN services. M1112
brings high-speed connections available for home users, small offices
and telecommuters.
Figure 1-1 Nokia M1112
M1112 allows you to connect your desktop and laptop PCs to remote
networks. Your PCs must be equipped with a 10Base-T Ethernet
interface. M1112 has an in-built 4-port hub, which allows easy home
network installation.
The ADSL high-speed Internet access may be delivered to you over
the same copper pair of wires that is used for your ISDN services. As

M1112 Administrator Manual
ECopyright Nokia Networks Oy C33907001SE_00
1-2
bothservicesutilisethesamepairofwires,afilterisneededtoseparate
them. This is called an ISDN filter and it is a small external device
connected between your telephone and the telephone wall socket.
Your Nokia M1112 interconnects with a Digital Subscriber Line
Access Multiplexer (DSLAM) installed and maintained by your
access provider in their central office. M1112 ADSL technology is
basedon DiscreteMultitone (DMT)modulationallowingamaximum
of8 Mbit/sdatatransmission fromthenetwork and800 kbit/stowards
the network. However, these figures illustrate the maximum
performance of the technology and are subjected to the physical line
conditions and the distance from you to the central office. M1112 is
capable of adapting to the physical line conditions and guarantees the
maximum transmission rate possible on the particular line. M1112
adapts its speed to the line conditions in steps of 32 kbit/s. In addition
to these physical limitations affecting your data throughput, your
Internet Service Provider (ISP) may limit your access according to
their service provisioning policy and based on your service contract.

Applicationsand features
ECopyright Nokia Networks Oy
C33907001SE_00 2-1
Chapter 2
Applications and features
In thischapter, we present themost commonapplications andfeatures
of M1112. The use and configuration of your Nokia M1112 may be
different from the configurations presented in this manual, even for
similar applications. The configurations presented in this manual
represent a typical way of using M1112 for the corresponding
applications.
2.1 Applications
Thethree typical applications discussed below are theInternetaccess,
remote work, and office LAN interconnection.
Internet access
Your access to the Internet is provided by your Internet Service
Provider (ISP). Nokia M1112 connects you through your telephone
line and the ATM (Asynchronous Transfer Mode) network to the
network of your ISP, which, in turn, is connected to the Internet.
Hence, all your data goes through the ISP’s network. If you are using
onlyone ISPforyour Internet access, your ISPmaygiveyoua limited
set of IP addresses belonging to its address space that you may utilise
in your desktop and laptop computers on your home network.
However, in many cases it is more practical to separate your own
private LAN from the ISP’s public network by using private IP
addresses. This way you are not limited to the number of public IP
addressesprovided byyourISPbutyou canmanageyourownaddress
space independently. For this you will need to use NAPT (Network
Address Port Translation) feature available in your M1112 modem.

M1112 Administrator Manual
ECopyright Nokia Networks Oy C33907001SE_00
2-2
This mode of operation reduces the need to have more than one public
Internet address. Furthermore, it prevents others from seeing and
accessing your private network and therefore it acts as a simple
firewall.
LAN
10Base-T ATM
network
RAN
Customer
premises
DSLAM
Internet connection
Internet
10Base-T
Figure 2-1 High-speed Internet access

Applicationsand features
ECopyright Nokia Networks Oy
C33907001SE_00 2-3
Remote work
Another application for M1112 is remote work. In this case the
end-to-end architecture can, for example, use PPP over Ethernet,
whereadial-up-typePPPconnectioniscreatedbetweenyourhomePC
andyourcorporatenetworksPPPaccessserverbasedonthe username
and password you issue in your PC. The same set up could be used for
accessingthe publicInternetwith adifferentuser nameandpassword.
This example naturally presumes that your ISP supports this type of
approach for providing remote work services for our company.
Nokia M1112
10Base-T
ATM
network
Corporate
network
Remote
worker 1
Remote
worker 2
Remote
worker 3
Company
router
DSLAM
PPPoE RAN L2TP
Figure 2-2 Remote work using M1112 as a standard router

M1112 Administrator Manual
ECopyright Nokia Networks Oy C33907001SE_00
2-4
LAN interconnection
M1112 can also be used for corporate branch office LAN
interconnection. As a bridge, M1112 enables all network protocols to
be used on the corporate network.
LAN
10Base-T
ATM
network
Company
bridge
Remote
office 1
Remote
office 3
Corporate
network
DSLAM
Remote
office 2
10Base-T
Figure 2-3 LAN interconnection
2.2 Features
M1112 can operate as a bridge and/or Internet Protocol (IP) router
between the Ethernet and the virtual channels of ADSL/ATM
interfaces supporting both dynamic and static routing.
2.2.1 Interfaces
M1112 has the following interfaces:
DFour Ethernet interfaces (LAN)
D8 ATM VCC interfaces
DATM VCC management interface

Applicationsand features
ECopyright Nokia Networks Oy
C33907001SE_00 2-5
DGateway/bridgemanagement interface. This interface is usedasa
bridge host interface or gateway interface depending on the
operation mode. In this manual it is called VBRIDGE. On the
M1112 web pages, the interface is called gateway or bridge IP
interface.
M1112 can operate in four different main modes:
DBridging only
DRouting/tunneling IP only
DRouting/tunneling IP, bridging all but IP
DRouting/tunneling IP and bridging all, including IP
The mode in which M1112 operates depends on the configuration of
the unit’s interfaces. Table 2-1 shows the operational modes and the
corresponding interface configurations.
LAN interface ATM VCC interfaces Vbridge
(gateway/host inter-
face)
Bridge only
Bridging Bridging. Used as a manage-
ment (host) interface
for all bridged inter-
faces in case such is
needed.
Route/tunnel IP only
Routing (IP address
configured) Routing (IP address configured) or PPTP
local tunneling acti-
vated for each active
ATM VCC.
Not used in this case.
The unit can be man-
aged through any of
the LAN or ATM inter-
face IP addresses.

M1112 Administrator Manual
ECopyright Nokia Networks Oy C33907001SE_00
2-6
LAN interface Vbridge
(gateway/host inter-
face)
ATM VCC interfaces
Route/tunnel IP, bridge all other traffic
Routing (IP address
configured) and bridg-
ing activated.
VCCs that only route
or tunnel have routing
(IP address confi-
gured) or PPTP local
tunneling activated.
VCCs that both bridge
and route have addi-
tionally bridging acti-
vated. This requires
ETH-LLC encapsula-
tion to be used on
those VCCs.
VCCs that only bridge
have only bridging
activated.
Typically not used in
this case. The unit
can be managed lo-
cally through the LAN
interface and remote-
ly through a separate
management VCC or
the ATM VCCs which
have routing acti-
vated.
Route/tunnel IP, bridge all other including IP
Bridging activated VCCs that only route
or tunnel have routing
(IP address confi-
gured) or PPTP local
tunneling activated.
VCCs that only bridge
have only bridging
activated.
Used as an IP gate-
way interface for LAN
interface.
Table 2-1 Operational modes
LAN interface
LAN interface can be configured individually to bridge and route
packets. There are three different operational modes in the LAN
interface:
DBridging only; only bridging is activated in the interface. In this
case the interface bridges all protocols.
DRoutingonly;onlyIPaddressisconfiguredintheinterface.Inthis
case, the interface routes IP packets.
DBridgingand routing; Bridging is activated in the interface andIP
address is configured in the interface. In this case, the interface
routes IP packets and bridges all other packets.

Applicationsand features
ECopyright Nokia Networks Oy
C33907001SE_00 2-7
Internal host/gateway interface
There is a special host/gateway logical IP interface within M1112
called VBRIDGE. This interface has a specific purpose in M1112. In
applications where some ATM virtual channel connections are used
for bridging IP traffic and some other ATM virtual channel
connections are used for routing IP traffic, the VBRIDGE interface
mustbeusedinsteadofLANIPaddress.Alternatively,thisinterfaceis
used in bridge only application when the IP address is required for
remote management purposes.
Data VCC operation
M1112 supports the following encapsulations in each ATM data
virtual channel individually:
DRFC2684 LLC encapsulation for bridged IP (ETH-LLC)
DRFC2684 LLC encapsulation for routed IP (IP-LLC)
DRFC2364 Virtual circuit multiplexed PPP over AAL5 (PPP-VC)
DRFC2364 Virtual circuit multiplexed PPP over AAL5 used to
tunnel LAN/VBRIDGE PPTP packets
(TUNNELED-PPP-VC)
If an IP address is given to a virtual channel interface and bridging is
enabled at that interface, then IP data at that interface is routed and all
otherprotocolsarebridged.Theonlyencapsulationwhichallowsboth
bridging and routing simultaneously is ETH-LLC. For example, it is
possibletorouteETH-LLCencapsulatedpacketsand atthe sametime
bridge, for example, PPPoE packets (PPPoE packets are transported
directly over Ethernet frame, not within IP packets).
2.2.2 Routing
Routing is based on routing entries in a routing table. Static routes are
addedviathemanagementinterfaceanddynamicroutingisdoneusing
RIP and RIPv2. Routing is done between the Ethernet 10Base-T
interfaceandthevirtualchannelconnection(VCC)oftheATM/ADSL
interface. M1112 supports up to 8 simultaneous VCCs.
M1112 supports IGMP (Internet Group Management Protocol) proxy
receive function for IP multicast applications.
2.2.3 Bridging
Bridging is supported to provide full protocol transparency. Bridging
can be used simultaneously with IP routing. M1112 works as a

M1112 Administrator Manual
ECopyright Nokia Networks Oy C33907001SE_00
2-8
self-learning bridge supporting up to 1024 MAC addresses. Bridging
is done between the Ethernet 10Base-T interface and each ATM VCC
interface.Optionally, the bridging between the VCCs can be disabled.
2.2.4 Network Address Port Translation
M1112 supports Network Address Port Translation (NAPT) for
TCP/IP,UDP/IPandICMP/IPprotocols.WhenNAPTisused,asingle
IP address is allocated to a VCC which leads to the public IP network.
The Ethernet subnet has private IP addressing and is not visible to the
VCC. NAPT translates the IP source address and source port number
dynamically to the VCC IP address and port number. Similarly,
packets coming from the VCC are mapped back to the original
destination addresses. NAPT allows up to hundreds of hosts to sharea
singleVCCIPaddresstothepublicnetwork.TheprincipleofNetwork
Address Port Translation is presented in Figure 2-4.
NAPT router
192.168.1.254
195.112.12.161
src:192.168.1.112:1228
dst:194.112.11.111:80
src:194.112.11.111:80
dst:192.168.1.112:1228
src:195.112.12.161:50001
dst:194.112.11.111:80
src:194.112.11.111:80
dst:195.112.12.161:50001
Home network (LAN) Internet (WAN)
Figure 2-4 Principle of Network Address Port Translation
NAPT may restrict the operation of some IP applications. NAPT also
operates as a simple IP firewall because translation is only allowed
whenthefirstpacketistransmittedfromtheLAN.This meansthat the
NAPTtable entry is created only when a packet issent from thehome
network to the Internet. With server support capability, the user can
add static entries to the NAPT table allowing the translation always in
both directions. This capability is used to add servers (HTTP, NNTP,
and FTP), which are visible to the public IP network via the VCC, on
the LAN subnet.
NAPT supports most IP-based protocols. Because NAPT operateson
the IPand transportlayer, the application that includes IP address and
portwithinthepayloadwillnotworkproperlythroughNAPT.Inmany
cases, these applications can be passed through the NAPT using

Applicationsand features
ECopyright Nokia Networks Oy
C33907001SE_00 2-9
ApplicationLayerGatewayfunctionality(ALG).M1112hasALGfor
the following protocols/applications:
DICMP
DFTP
DH.323 including NetMeeting
DCUSeeMe
DPPTP
DIRC
DIPSEC ESP tunnel mode and IKE
Note,thatmostIPSECimplementationswillfailwhenpassedthrough
NAPT. A typical reason is that the identification may fail if the
identification is based on IP address. Also, only tunnel mode without
Authentication Header (AH) works.
2.2.5 Dynamic Host Configuration Protocol
M1112 can act as a Dynamic Host Configuration Protocol (DHCP)
serverforthePCsontheend-userhomenetwork.Inthismode,M1112
can assign up to 253+253 consecutive addresses from two separate
address ranges (that is, 253 consecutive addresses per address range)
to the PCs on the home network. Two separate address ranges can be
usedifmorethan253addressesarerequiredonthelocalsubnet,iftwo
non-contiguous ranges are needed or if an additional router with
DHCP relay is used on the local network. M1112 can also act as a
DHCP relay agent and relay the DHCP requests to an external DHCP
server.
2.2.6 ATM and ADSL
M1112 supports up to 8 simultaneous VCCs and supports UBR
(Unspecified bit rate) traffic shaping on all VCCs. The maximum
transmit rate on each VCC is the ADSL upstream capacity. If more
than one VCC is transmitting simultaneously, the ADSL upstream
capacityistemporarilysharedbetweentheseVCCs.WhenoneVCCis
idle, the bandwidth is used by another VCC.
The ADSL transmission is based on the DMT line code. M1112
provides a DMT line rate up to 8 Mbit/s downstream and up to 800
kbit/s upstream. The DMT transceiver is rate adaptive and capable of
providing faster rates over short distances or slower rates over long
distances. The transceiver adapts itself to the line conditions.
M1112 is compatible with ETSI 101 388.