Nokia M1122 Use and care manual

Nokia M1122
T66280
ADMINISTRATOR MANUAL
ADSL Routerā

C33906001SE_00 ECopyright Nokia Networks Oy
M1122
ADSL Router
Administrator Manual
C33906.20 A0

M1122 Administrator Manual
ECopyright Nokia Networks Oy C33906001SE_00
ii
ECOPYRIGHT Nokia Networks Oy 2000
All rights reserved.
Nopartofthispublicationmaybecopied,distributed,transmitted,transcribed,storedinaretrieval
system, or translated into any human or computer language without the prior written permission
of Nokia Networks Oy.
The manufacturer has made every effort to ensure that the instructions contained in the
documents are adequate and free of errors and omissions. The manufacturer will, if necessary,
explain issues which may not be covered by the documents. The manufacturer’s liability for any
errors in the documents is limited to the correction of errors and the aforementioned advisory
services.
The documents have been prepared to be used by professional and properly trained personnel,
and the customer assumes full responsibility when using them.The manufacturer welcomes
customer comments as part of the process of continual development and improvement of the
documentationinthe best waypossible from theuser’sviewpoint.Please submit yourcomments
to the nearest Nokia sales representative.
NOKIA is a registered trademark of Nokia Corporation.
Any other trademarks mentioned in the documents are the property of their respective owners.

ECopyright Nokia Networks Oy
C33906001SE_00 iii
Document History
Document Date Comment
C33906001SE_00 13.09.2000

M1122 Administrator Manual
ECopyright Nokia Networks Oy C33906001SE_00
iv

ECopyright Nokia Networks Oy
C33906001SE_00 v
Contents
Chapter 1
Introduction to Nokia M1122 1-1. . . . . . . . . . . . . . . . . .
Chapter 2
Applications and features 2-1. . . . . . . . . . . . . . . . . . . . .
2.1 Applications 2-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Internet access 2-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Remote work 2-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
LAN interconnection 2-4. . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2 Features 2-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.1 Interfaces 2-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
LAN interfaces 2-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Internal host/gateway interface 2-7. . . . . . . . . . . . . . . . . . . .
Data VCC operation 2-7. . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.2 Routing 2-7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.3 Bridging 2-7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.4 Network Address Port Translation 2-8. . . . . . . . . . . . . . . . . . .
2.2.5 Dynamic Host Configuration Protocol 2-9. . . . . . . . . . . . . . . .
2.2.6 ATM and ADSL 2-9. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.7 Point-to-Point Tunneling Protocol (PPTP) 2-10. . . . . . . . . . . . .
2.2.8 Point-to-Point Protocol over Ethernet (PPPoE) 2-11. . . . . . . . . .
2.2.9 Payload encapsulations 2-11. . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.10 Weighted Fair Queueing (Class of Service) 2-11. . . . . . . . . . . .
2.2.11 Management 2-12. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2.12 Dedicated management channel 2-12. . . . . . . . . . . . . . . . . . . . .

M1122 Administrator Manual
ECopyright Nokia Networks Oy C33906001SE_00
vi
Chapter 3
Interfaces and indicator lights 3-1. . . . . . . . . . . . . . . . .
3.1 Interfaces 3-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.1.1 Ethernet interface 3-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.1.2 ADSL interface 3-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.2 Command line interface 3-3. . . . . . . . . . . . . . . . . . . . . . . . . .
3.3 Indicator lights 3-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 4
Installing Nokia M1122 4-1. . . . . . . . . . . . . . . . . . . . . . .
4.1 M1122 default settings 4-1. . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.2 Step-by-step installation procedure 4-3. . . . . . . . . . . . . . . . .
Chapter 5
Managing M1122 5-1. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.1 Operational examples 5-1. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.1.1 Routing/tunneling IP only 5-2. . . . . . . . . . . . . . . . . . . . . . . . . .
5.1.2 Routing/tunneling IP, bridging other protocols 5-2. . . . . . . . . .
5.1.3 Routing/tunneling IP, bridging all protocols including IP 5-3. .
5.1.4 Bridging only 5-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.2 Typical configuration tasks 5-4. . . . . . . . . . . . . . . . . . . . . . . .
5.2.1 Configuring DHCP and DNS 5-4. . . . . . . . . . . . . . . . . . . . . . .
5.2.2 Configuring static and dynamic routing 5-5. . . . . . . . . . . . . . .
5.2.3 File system and downloading new firmware using TFTP 5-6. .
Downloading configuration or application from monitor 5-7
5.3 Browser management 5-8. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.1 Opening a connection 5-9. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.2 Main Page 5-10. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.3 Service Providers pages 5-11. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.4 Local Network pages 5-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Local ports 5-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
DHCP 5-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
NAPT 5-16. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Routing page 5-17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.5 Statistics page 5-18. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.6 Restart page 5-19. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.7 Save Config page 5-20. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

ECopyright Nokia Networks Oy
C33906001SE_00 vii
5.4 Command line interface (CLI) 5-20. . . . . . . . . . . . . . . . . . . . .
5.4.1 Main mode commands 5-23. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.4.2 Configuration mode commands 5-44. . . . . . . . . . . . . . . . . . . . . .
Root level commands 5-45. . . . . . . . . . . . . . . . . . . . . . . . . . .
System level commands 5-46. . . . . . . . . . . . . . . . . . . . . . . . .
Password level command 5-47. . . . . . . . . . . . . . . . . . . . . . . .
Ethernet level commands 5-48. . . . . . . . . . . . . . . . . . . . . . . .
VCC (ATM channel) commands 5-50. . . . . . . . . . . . . . . . . . .
Vbridge commands 5-55. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Dedicated management channel commands 5-56. . . . . . . . . .
Common commands 5-57. . . . . . . . . . . . . . . . . . . . . . . . . . . .
Appendix A
Technical specifications A-1. . . . . . . . . . . . . . . . . . . . . . .
A.1 Mechanical construction and power supply A-3. . . . . . . . . .
A.2 Ambient conditions, EMC and safety A-3. . . . . . . . . . . . . . .
Ambient conditions A-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
EMC A-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Safety A-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Glossary

M1122 Administrator Manual
ECopyright Nokia Networks Oy C33906001SE_00
viii

ECopyright Nokia Networks Oy
C33906001SE_00 1-1
Chapter 1
Introduction to Nokia M1122
Nokia M1122 is an integrated ADSL (Asymmetric DigitalSubscriber
Line) bridge and router which enables high-speed Internet access for
your Ethernet local area network (LAN). It multiplies the capacity of
the already installed telephone lines used traditionally for telephone
and dial-up modem services. M1122 brings high-speed connections
available for home users, small offices and telecommuters.
Figure 1-1 Nokia M1122
M1122 allows you to connect your desktop and laptop PCs to remote
networks. Your PCs must be equipped with a 10Base-T Ethernet
interface. M1122 has an in-built 4-port hub, which allows easy home
network installation.
The ADSL high-speed Internet access may be delivered to you over
thesamecopperpairofwiresthatisusedforyourtraditionaltelephony

M1122 Administrator Manual
ECopyright Nokia Networks Oy C33906001SE_00
1-2
services. As both services utilise the same pair of wires, a filter is
needed to separate them. This is called a POTS filter and it is a small
external device connected between your telephone and the telephone
wall socket.
Your Nokia M1122 interconnects with a Digital Subscriber Line
Access Multiplexer (DSLAM) installed and maintained by your
access provider in their central office. M1122 ADSL technology is
basedon DiscreteMultitone (DMT)modulationallowingamaximum
of8 Mbit/sdatatransmission fromthenetwork and800 kbit/stowards
the network. However, these figures illustrate the maximum
performance of the technology and are subjected to the physical line
conditions and the distance from you to the central office. M1122 is
capable of adapting to the physical line conditions and guarantees the
maximum transmission rate possible on the particular line. M1122
adapts its speed to the line conditions in steps of 32 kbit/s. In addition
to these physical limitations affecting your data throughput, your
Internet Service Provider (ISP) may limit your access according to
their service provisioning policy and based on your service contract.

ECopyright Nokia Networks Oy
C33906001SE_00 2-1
Chapter 2
Applications and features
In thischapter, we present themost commonapplications andfeatures
of M1122. The use and configuration of your Nokia M1122 may be
different from the configurations presented in this manual, even for
similar applications. The configurations presented in this manual
represent a typical way of using M1122 for the corresponding
applications.
2.1 Applications
Thethree typical applications discussed below are theInternetaccess,
remote work, and office LAN interconnection.
Internet access
Your access to the Internet is provided by your Internet Service
Provider (ISP). Nokia M1122 connects you through your telephone
line and the ATM (Asynchronous Transfer Mode) network to the
network of your ISP, which, in turn, is connected to the Internet.
Hence, all your data goes through the ISP’s network. If you are using
onlyone ISPforyour Internet access, your ISPmaygiveyoua limited
set of IP addresses belonging to its address space that you may utilise
in your desktop and laptop computers on your home network.
However, in many cases it is more practical to separate your own
private LAN from the ISP’s public network by using private IP
addresses. This way you are not limited to the number of public IP
addressesprovided byyourISPbutyou canmanageyourownaddress
space independently. For this you will need to use NAPT (Network
Address Port Translation) feature available in your M1122 modem.

M1122 Administrator Manual
ECopyright Nokia Networks Oy C33906001SE_00
2-2
This mode of operation reduces the need to have more than one public
Internet address. Furthermore, it prevents others from seeing and
accessing your private network and therefore it acts as a simple
firewall.
LAN
10Base-T ATM
network
RAN
Customer
premises
DSLAM
Internet connection
Internet
10Base-T
Figure 2-1 High-speed Internet access

ECopyright Nokia Networks Oy
C33906001SE_00 2-3
Remote work
Another application for M1122 is remote work. In this case the
end-to-end architecture can, for example, use PPP over Ethernet,
whereadial-up-typePPPconnectioniscreatedbetweenyourhomePC
andyourcorporatenetworksPPPaccessserverbasedonthe username
and password you issue in your PC. The same set up could be used for
accessingthe publicInternetwith adifferentuser nameandpassword.
This example naturally presumes that your ISP supports this type of
approach for providing remote work services for our company.
Nokia M1122
10Base-T
ATM
network
Corporate
network
Remote
worker 1
Remote
worker 2
Remote
worker 3
Company
router
DSLAM
PPPoE RAN L2TP
Figure 2-2 Remote work using M1122 as a standard router

M1122 Administrator Manual
ECopyright Nokia Networks Oy C33906001SE_00
2-4
LAN interconnection
M1122 can also be used for corporate branch office LAN
interconnection. As a bridge, M1122 enables all network protocols to
be used on the corporate network.
LAN
10Base-T
ATM
network
Company
bridge
Remote
office 1
Remote
office 3
Corporate
network
DSLAM
Remote
office 2
10Base-T
Figure 2-3 LAN interconnection
2.2 Features
M1122 can operate as a bridge and/or Internet Protocol (IP) router
between the Ethernet and the virtual channels of ADSL/ATM
interfaces supporting both dynamic and static routing.
2.2.1 Interfaces
M1122 has the following interfaces:
DFour Ethernet interfaces (LAN)
D8 ATM VCC interfaces
DATM VCC management interface

ECopyright Nokia Networks Oy
C33906001SE_00 2-5
DGateway/bridgemanagement interface. This interface is usedasa
bridge host interface or gateway interface depending on the
operation mode. In this manual it is called VBRIDGE. On the
M1122 web pages, the interface is called gateway or bridge IP
interface.
M1122 can operate in four different main modes:
DBridging only
DRouting/tunneling IP only
DRouting/tunneling IP, bridging all but IP
DRouting/tunneling IP and bridging all, including IP
The mode in which M1122 operates depends on the configuration of
the unit’s interfaces. Table 2-1 shows the operational modes and the
corresponding interface configurations.
LAN interface ATM VCC interfaces Vbridge
(gateway/host inter-
face)
Bridge only
Bridging Bridging. Used as a manage-
ment (host) interface
for all bridged inter-
faces in case such is
needed.
Route/tunnel IP only
Routing (IP address
configured) Routing (IP address configured) or PPTP
local tunneling acti-
vated for each active
ATM VCC.
Not used in this case.
The unit can be man-
aged through any of
the LAN, or ATM in-
terface IP addresses.

M1122 Administrator Manual
ECopyright Nokia Networks Oy C33906001SE_00
2-6
LAN interface Vbridge
(gateway/host inter-
face)
ATM VCC interfaces
Route/tunnel IP, bridge all other traffic
Routing (IP address
configured) and bridg-
ing activated.
VCCs that only route
or tunnel have routing
(IP address confi-
gured) or PPTP local
tunneling activated.
VCCs that both bridge
and route have addi-
tionally bridging acti-
vated. This requires
ETH-LLC encapsula-
tion to be used on
those VCCs.
VCCs that only bridge
have only bridging
activated.
Typically not used in
this case. The unit
can be managed lo-
cally through LAN in-
terface and remotely
through a separate
management VCC or
the ATM VCCs which
have routing acti-
vated.
Route/tunnel IP, bridge all other including IP
Bridging activated VCCs that only route
or tunnel have routing
(IP address confi-
gured) or PPTP local
tunneling activated.
VCCs that only bridge
have only bridging
activated.
Used as an IP gate-
way interface for LAN
interface.
Table 2-1 Operational modes
LAN interfaces
LAN interfaces can be configured individually to bridge and route
packets. There are three different operational modes in LAN
interfaces:
DBridging only; only bridging is activated in the interface. In this
case the interface bridges all protocols.
DRoutingonly;onlyIPaddressisconfiguredintheinterface.Inthis
case, the interface routes IP packets.
DBridgingand routing; Bridging is activated in the interface andIP
address is configured in the interface. In this case, the interface
routes IP packets and bridges all other packets.

ECopyright Nokia Networks Oy
C33906001SE_00 2-7
Internal host/gateway interface
There is a special host/gateway logical IP interface within M1122
called VBRIDGE. This interface has a specific purpose in M1122. In
applications where some ATM virtual channel connections are used
for bridging IP traffic and some other ATM virtual channel
connections are used for routing IP traffic, the VBRIDGE interface
mustbeusedinsteadofLANIPaddress.Alternatively,thisinterfaceis
used in bridge only application when the IP address is required for
remote management purposes.
Data VCC operation
M1122 supports the following encapsulations in each ATM data
virtual channel individually:
DRFC2684 LLC encapsulation for bridged IP (ETH-LLC)
DRFC2684 LLC encapsulation for routed IP (IP-LLC)
DRFC2364 Virtual circuit multiplexed PPP over AAL5 (PPP-VC)
DRFC2364 Virtual circuit multiplexed PPP over AAL5 used to
tunnel LAN/VBRIDGE PPTP packets (TUNNELED-PPP-VC)
If an IP address is given to a virtual channel interface and bridging is
enabled at that interface, then IP data at that interface is routed and all
otherprotocolsarebridged.Theonlyencapsulationwhichallowsboth
bridging and routing simultaneously is ETH-LLC. For example, it is
possibletorouteETH-LLCencapsulatedpacketsand atthe sametime
bridge, for example, PPPoE packets (PPPoE packets are transported
directly over Ethernet frame, not within IP packets).
2.2.2 Routing
Routing is based on routing entries in a routing table. Static routes are
addedviathemanagementinterfaceanddynamicroutingisdoneusing
RIP and RIPv2. Routing is done between the Ethernet 10Base-T
interfaceandthevirtualchannelconnection(VCC)oftheATM/ADSL
interface. M1122 supports up to 8 simultaneous VCCs.
M1122supports IGMP (Internet Group Management Protocol) proxy
receive function for IP multicast applications.
2.2.3 Bridging
Bridging is supported to provide full protocol transparency. Bridging
can be used simultaneously with IP routing. M1122 works as a
self-learning bridge supporting up to 1024 MAC addresses. Bridging

M1122 Administrator Manual
ECopyright Nokia Networks Oy C33906001SE_00
2-8
is done between the Ethernet 10Base-T interface and each ATM VCC
interface.Optionally, the bridging between the VCCs can be disabled.
2.2.4 Network Address Port Translation
M1122 supports Network Address Port Translation (NAPT) for
TCP/IP,UDP/IPandICMP/IPprotocols.WhenNAPTisused,asingle
IP address is allocated to a VCC which leads to the public IP network.
The Ethernet subnet has private IP addressing and is not visible to the
VCC. NAPT translates the IP source address and source port number
dynamically to the VCC IP address and port number. Similarly,
packets coming from the VCC are mapped back to the original
destination addresses. NAPT allows up to hundreds of hosts to sharea
singleVCCIPaddresstothepublicnetwork.TheprincipleofNetwork
Address Port Translation is presented in Figure 2-4.
NAPT router
192.168.1.254
195.112.12.161
src:192.168.1.112:1228
dst:194.112.11.111:80
src:194.112.11.111:80
dst:192.168.1.112:1228
src:195.112.12.161:50001
dst:194.112.11.111:80
src:194.112.11.111:80
dst:195.112.12.161:50001
Home network (LAN) Internet (WAN)
Figure 2-4 Principle of Network Address Port Translation
NAPT may restrict the operation of some IP applications. NAPT also
operates as a simple IP firewall because translation is only allowed
whenthefirstpacketistransmittedfromtheLAN.This meansthat the
NAPTtable entry is created only when a packet issent from thehome
network to the Internet. With server support capability, the user can
add static entries to the NAPT table allowing the translation always in
both directions. This capability is used to add servers (HTTP, NNTP,
and FTP), which are visible to the public IP network via the VCC, on
the LAN subnet.
NAPT supports most IP-based protocols. Because NAPT operateson
the IPand transportlayer, the application that includes IP address and
portwithinthepayloadwillnotworkproperlythroughNAPT.Inmany
cases, these applications can be passed through the NAPT using

ECopyright Nokia Networks Oy
C33906001SE_00 2-9
ApplicationLayerGatewayfunctionality(ALG).M1122hasALGfor
the following protocols/applications:
DICMP
DFTP
DH.323 including NetMeeting
DCUSeeMe
DPPTP
DIRC
DIPSEC ESP tunnel mode and IKE
Note,thatmostIPSECimplementationswillfailwhenpassedthrough
NAPT. A typical reason is that the identification may fail if the
identification is based on IP address. Also, only tunnel mode without
Authentication Header (AH) works.
2.2.5 Dynamic Host Configuration Protocol
M1122 can act as a Dynamic Host Configuration Protocol (DHCP)
serverfor thePCsontheend-userhomenetwork.Inthismode,M1122
can assign up to 253+253 consecutive addresses from two separate
address ranges (that is, 253 consecutive addresses per address range)
to the PCs on the home network. Two separate address ranges can be
usedifmorethan253addressesarerequiredonthelocalsubnet,iftwo
non-contiguous address ranges are needed or if an additional router
withDHCPrelayisused onthe localnetwork. M1122can also act asa
DHCP relay agent and relay the DHCP requests to an external DHCP
server.
2.2.6 ATM and ADSL
M1122 supports up to 8 simultaneous VCCs and supports UBR
(Unspecified bit rate) traffic shaping on all VCCs. The maximum
transmit rate on each VCC is the ADSL upstream capacity. If more
than one VCC is transmitting simultaneously, the ADSL upstream
capacityistemporarilysharedbetweentheseVCCs.WhenoneVCCis
idle, the bandwidth is used by another VCC.
The ADSL transmission is based on the DMT line code. M1122
provides a DMT line rate up to 8 Mbit/s downstream and up to 800
kbit/s upstream. The DMT transceiver is rate adaptive and capable of
providing faster rates over short distances or slower rates over long
distances. The transceiver adapts itself to the line conditions. M1122