Nortel 251 User manual

Contivity 251 VPN Switch
User’s Guide
Version 2.00
Part No. 317516-A Rev 00
December 2003
600 Technology Park Drive
Billerica, MA 01821-4130

ii
317516-A Rev 00
Copyright © 2003 Nortel Networks
All rights reserved. December 2003.
The information in this document is subject to change without notice. The statements,
configurations, technical data, and recommendations in this document are believed to be accurate
and reliable, but are presented without express or implied warranty. Users must take full
responsibility for their applications of any products specified in this document. The information in
this document is proprietary to Nortel Networks Inc.
The software described in this document is furnished under a license agreement and may be used
only in accordance with the terms of that license. The software license agreement is included in this
document.
Trademarks
Nortel Networks, the Nortel Networks logo, and Contivity are trademarks of Nortel Networks.
Adobe and Acrobat Reader are trademarks of Adobe Systems Incorporated.
Check Point and Firewall 1 are trademarks of Check Point Software Technologies Ltd.
ava is a trademark of Sun Microsystems.
Microsoft, Windows, Windows NT, and MS-DOS are trademarks of Microsoft Corporation.
NETVIEW is a trademark of International Business Machines Corp (IBM).
OPENView is a trademark of Hewlett-Packard Company.
SPECTRUM is a trademark of Cabletron Systems, Inc.
All other trademarks and registered trademarks are the property of their respective owners.
Restricted rights legend
Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of,
this computer software, the rights of the United States Government regarding its use, reproduction,
and disclosure are as set forth in the Commercial Computer Software-Restricted Rights clause at
FAR 52.227-19.
Statement of conditions

iii
Contivity 251 VPN Switch User’s Guide
In the interest of improving internal design, operational function, and/or reliability, Nortel
Networks Inc. reserves the right to make changes to the products described in this document
without notice.
Nortel Networks Inc. does not assume any liability that may occur due to the use or application of
the product(s) or circuit layout(s) described herein.
Portions of the code in this software product may be Copyright © 1988, Regents of the University
of California. All rights reserved. Redistribution and use in source and binary forms of such
portions are permitted, provided that the above copyright notice and this paragraph are duplicated
in all such forms and that any documentation, advertising materials, and other materials related to
such distribution and use acknowledge that such portions of the software were developed by the
University of California, Berkeley. The name of the University may not be used to endorse or
promote products derived from such portions of the software without specific prior written
permission.
SUCH PORTIONS OF THE SOFTWARE ARE PROVIDED “AS IS” AND WITHOUT ANY
EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE.
In addition, the program and information contained herein are licensed only pursuant to a license
agreement that contains restrictions on use and disclosure (that may incorporate by reference
certain limitations and notices imposed by third parties).
Nortel Networks Inc. software license agreement
This Software License Agreement (“License Agreement”) is between you, the end-user
(“Customer”) and Nortel Networks Corporation and its subsidiaries and affiliates (“Nortel
Networks”). PLEASE READ THE FOLLOWING CAREFULLY. YOU MUST ACCEPT THESE
LICENSE TERMS IN ORDER TO DOWNLOAD AND/OR USE THE SOFTWARE. USE OF
THE SOFTWARE CONSTITUTES YOUR ACCEPTANCE OF THIS LICENSE AGREEMENT.
If you do not accept these terms and conditions, return the Software, unused and in the original
shipping container, within 30 days of purchase to obtain a credit for the full purchase price.
“Software” is owned or licensed by Nortel Networks, its parent or one of its subsidiaries or
affiliates, and is copyrighted and licensed, not sold. Software consists of machine-readable
instructions, its components, data, audio-visual content (such as images, text, recordings or
pictures) and related licensed materials including all whole or partial copies. Nortel
Networks grants you a license to use the Software only in the country where you acquired the
Software. You obtain no rights other than those granted to you under this License Agreement. You

iv
317516-A Rev 00
are responsible for the selection of the Software and for the installation of, use of, and results
obtained from the Software.
1. Licensed Use of Software. Nortel Networks grants Customer a nonexclusive license to use a
copy of the Software on only one machine at any one time or to the extent of the activation or
authorized usage level, whichever is applicable. To the extent Software is furnished for use with
designated hardware or Customer furnished equipment (“CFE”), Customer is granted a
nonexclusive license to use Software only on such hardware or CFE, as applicable. Software
contains trade secrets and Customer agrees to treat Software as confidential information using the
same care and discretion Customer uses with its own similar information that it does not wish to
disclose, publish or disseminate. Customer will ensure that anyone who uses the Software does so
only in compliance with the terms of this Agreement. Customer shall not a) use, copy, modify,
transfer or distribute the Software except as expressly authorized; b) reverse assemble, reverse
compile, reverse engineer or otherwise translate the Software; c) create derivative works or
modifications unless expressly authorized; or d) sublicense, rent or lease the Software. Licensors of
intellectual property to Nortel Networks are beneficiaries of this provision. Upon termination or
breach of the license by Customer or in the event designated hardware or CFE is no longer in use,
Customer will promptly return the Software to Nortel Networks or certify its destruction. Nortel
Networks may audit by remote polling or other reasonable means to determine Customer’s
Software activation or usage levels. If suppliers of third party software included in Software require
Nortel Networks to include additional or different terms, Customer agrees to abide by such terms
provided by Nortel Networks with respect to such third party software.
2. Warranty. Except as may be otherwise expressly agreed to in writing between Nortel Networks
and Customer, Software is provided “AS IS” without any warranties (conditions) of any kind.
NORTEL NETWORKS DISCLAIMS ALL WARRANTIES (CONDITIONS) FOR THE
SOFTWARE, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE AND ANY WARRANTY OF NON-INFRINGEMENT. Nortel Networks is not
obligated to provide support of any kind for the Software. Some jurisdictions do not allow
exclusion of implied warranties, and, in such event, the above exclusions may not apply.
3. Limitation of Remedies. IN NO EVENT SHALL NORTEL NETWORKS OR ITS AGENTS
OR SUPPLIERS BE LIABLE FOR ANY OF THE FOLLOWING: a) DAMAGES BASED ON
ANY THIRD PARTY CLAIM; b) LOSS OF, OR DAMAGE TO, CUSTOMER’S RECORDS,
FILES OR DATA; OR c) DIRECT, INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE, OR
CONSEQUENTIAL DAMAGES (INCLUDING LOST PROFITS OR SAVINGS), WHETHER IN
CONTRACT, TORT OR OTHERWISE (INCLUDING NEGLIGENCE) ARISING OUT OF
YOUR USE OF THE SOFTWARE, EVEN IF NORTEL NETWORKS, ITS AGENTS OR
SUPPLIERS HAVE BEEN ADVISED OF THEIR POSSIBILITY. The forgoing limitations of

v
Contivity 251 VPN Switch User’s Guide
remedies also apply to any developer and/or supplier of the Software. Such developer and/or
supplier is an intended beneficiary of this Section. Some jurisdictions do not allow these limitations
or exclusions and, in such event, they may not apply.
4. General
a. If Customer is the United States Government, the following paragraph shall apply: All
Nortel Networks Software available under this License Agreement is commercial computer
software and commercial computer software documentation and, in the event Software is
licensed for or on behalf of the United States Government, the respective rights to the
software and software documentation are governed by Nortel Networks standard
commercial license in accordance with U.S. Federal Regulations at 48 C.F.R. Sections
12.212 (for non-DoD entities) and 48 C.F.R. 227.7202 (for DoD entities).
b. Customer may terminate the license at any time. Nortel Networks may terminate the
license if Customer fails to comply with the terms and conditions of this license. In either
event, upon termination, Customer must either return the Software to Nortel Networks or
certify its destruction.
c. Customer is responsible for payment of any taxes, including personal property taxes,
resulting from Customer’s use of the Software. Customer agrees to comply with all
applicable laws including all applicable export and import laws and regulations.
d. Neither party may bring an action, regardless of form, more than two years after the cause
of the action arose.
e. The terms and conditions of this License Agreement form the complete and exclusive
agreement between Customer and Nortel Networks.
f. This License Agreement is governed by the laws of the country in which Customer
acquires the Software. If the Software is acquired in the United States, then this License
Agreement is governed by the laws of the state of New York.

vi
317516-A Rev 00
Federal Communications Commission (FCC) interference statement
This device complies with Part 15 of FCC rules. Operation is subject to the
following two conditions:
•This device may not cause harmful interference.
•This device must accept any interference received, including interference that
may cause undesired operations.
This equipment has been tested and found to comply with the limits for a Class B
digital device pursuant to Part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference in a commercial
environment. This equipment generates, uses, and can radiate radio frequency
energy, and if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception,
which can be determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more of the following
measures:
1. Reorient or relocate the receiving antenna.
2. Increase the separation between the equipment and the receiver.
3. Connect the equipment into an outlet on a circuit different from that to which
the receiver is connected.
4. Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for
compliance could void the user's authority to operate the equipment.
Certifications
Refer to the product page at www.nortelnetworks.com.

vii
FCC Statement vii

viii
317516-A Rev 00
Nortel Networks limited warranty
Nortel Networks warrants to the original end user (purchaser) that this product is
free from any defects in materials or workmanship for a period of up to two years
from the date of purchase. During the warranty period, and upon proof of
purchase, should the product have indications of failure due to faulty
workmanship and/or materials, Nortel Networks will, at its discretion, repair or
replace the defective products or components without charge for either parts or
labor, and to whatever extent it shall deem necessary to restore the product or
components to proper operating condition. Any replacement will consist of a new
or re-manufactured functionally equivalent product of equal value, and will be
solely at the discretion of Nortel Networks. This warranty shall not apply if the
product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy
of the purchaser. This warranty is in lieu of all other warranties, express or
implied, including any implied warranty of merchantability or fitness for a
particular use or purpose. Nortel Networks shall in no event be held liable for
indirect or consequential damages of any kind of character to the purchaser.
To obtain the services of this warranty, contact Nortel Networks' Service Center
for your Return Material Authorization number (RMA). Products must be
returned Postage Prepaid. It is recommended that the unit be insured when
shipped. Any returned products without proof of purchase or those with an out-
dated warranty will be repaired or replaced (at the discretion of Nortel Networks)
and the customer will be billed for parts and labor. All repaired or replaced
products will be shipped by Nortel Networks to the corresponding return address,
Postage Paid. This warranty gives you specific legal rights, and you may also
have other rights that vary from country to country.
Safety Warnings
1. To reduce the risk of fire, use only No. 26 AWG or larger telephone wire.
2. Do not use this product near water, for example, in a wet basement or near a swimming
pool.
3. Avoid using this product during an electrical storm. There may be a remote risk of
electric shock from lightening.

ix
Contivity 251 VPN Switch User’s Guide
Contents
Figures.......................................................................................................................................... xvii
Tables............................................................................................................................................ xxv
Charts .......................................................................................................................................... xxix
Preface......................................................................................................................................... xxxi
What is DSL?............................................................................................................................. xxxiii
Getting Started.................................................................................................................................. I
Chapter 1 Getting to Know Your Contivity 251..........................................................................1-1
1.1 Introducing the Contivity 251........................................................................................1-1
1.2 Features of the Contivity 251 .......................................................................................1-1
1.3 Applications for the Contivity 251.................................................................................1-6
1.4 Hardware Setup..........................................................................................................1-10
Chapter 2 Introducing the WebGUI.............................................................................................2-1
2.1 WebGUI Overview........................................................................................................2-1
2.2 Accessing the Contivity 251 WebGUI ..........................................................................2-1
2.3 Navigating the Contivity 251 WebGUI..........................................................................2-3
2.4 Resetting the Contivity 251 ..........................................................................................2-4
Chapter 3 Wizard Setup...............................................................................................................3-1
3.1 Wizard Setup Introduction............................................................................................3-1
3.2 Encapsulation...............................................................................................................3-1
3.3 Multiplexing...................................................................................................................3-2
3.4 VPI and VCI..................................................................................................................3-3
3.5 Wizard Setup Configuration: First Screen....................................................................3-3
3.6 IP Address and Subnet Mask.......................................................................................3-4
3.7 IP Address Assignment................................................................................................3-5
3.8 Nailed-Up Connection (PPP)........................................................................................3-6
3.9 NAT...............................................................................................................................3-7
3.10 Wizard Setup Configuration: Second Screen...............................................................3-7
3.11 DHCP Setup...............................................................................................................3-12
3.12 Wizard Setup Configuration: Third Screen.................................................................3-13
3.13 Wizard Setup Configuration: Connection Tests .........................................................3-16
3.14 Test Your Internet Connection ...................................................................................3-17
System, LAN and WAN.................................................................................................................... II
Chapter 4 System Setup..............................................................................................................4-1
4.1 System Overview..........................................................................................................4-1
4.2 Configuring DNS Servers.............................................................................................4-1
4.3 Configuring Password ..................................................................................................4-3
4.4 Dynamic DNS...............................................................................................................4-4
4.5 Configuring Time and Date ..........................................................................................4-6

xContents
317516-A Rev 00
Chapter 5 LAN Setup....................................................................................................................5-1
5.1 LAN Overview...............................................................................................................5-1
5.2 DNS Server Address ....................................................................................................5-1
5.3 DNS Server Address Assignment ................................................................................5-2
5.4 LAN TCP/IP..................................................................................................................5-2
5.5 Configuring LAN ...........................................................................................................5-4
5.6 Configuring IP Alias......................................................................................................5-6
Chapter 6 WAN Setup...................................................................................................................6-1
6.1 WAN Overview .............................................................................................................6-1
6.2 Metric............................................................................................................................6-1
6.3 PPPoE Encapsulation...................................................................................................6-2
6.4 Traffic Shaping..............................................................................................................6-2
6.5 Configuring WAN Setup................................................................................................6-3
6.6 Traffic Redirect on the LAN ..........................................................................................6-7
6.7 Traffic Redirect on the WAN.........................................................................................6-7
6.8 Configuring WAN Backup.............................................................................................6-8
6.9 Configuring Advanced WAN Backup..........................................................................6-11
6.10 AT Command Strings .................................................................................................6-15
6.11 DTR Signal .................................................................................................................6-16
6.12 Response Strings .......................................................................................................6-16
6.13 Configuring Advanced Modem Setup.........................................................................6-16
NAT and Static Route .....................................................................................................................III
Chapter 7 Network Address Translation (NAT) Screens...........................................................7-1
7.1 NAT Overview...............................................................................................................7-1
7.2 SUA (Single User Account) Versus NAT......................................................................7-5
7.3 SUA Server...................................................................................................................7-6
7.4 Selecting the NAT Mode...............................................................................................7-8
7.5 Configuring SUA Server ...............................................................................................7-9
7.6 Configuring Address Mapping....................................................................................7-11
7.7 Editing an Address Mapping Rule..............................................................................7-13
Chapter 8 Static Route .................................................................................................................8-1
8.1 Static Route Overview..................................................................................................8-1
8.2 Configuring IP Static Route..........................................................................................8-1
Firewall and Content Filters...........................................................................................................IV
Chapter 9 Firewalls.......................................................................................................................9-1
9.1 Firewall Overview .........................................................................................................9-1
9.2 Types of Firewalls.........................................................................................................9-1
9.3 Introduction to Contivity 251’s Firewall.........................................................................9-2
9.4 Denial of Service...........................................................................................................9-3
9.5 Stateful Inspection........................................................................................................9-8
9.6 Guidelines For Enhancing Security With Your Firewall..............................................9-13

Contents xi
Contivity 251 VPN Switch User’s Guide
9.7 Packet Filtering Vs Firewall........................................................................................9-15
Chapter 10 Firewall Configuration............................................................................................10-1
10.1 Remote Management and the Firewall ......................................................................10-1
10.2 Enabling the Firewall..................................................................................................10-1
10.3 Attack Alert.................................................................................................................10-2
Chapter 11 Creating Custom Rules .......................................................................................... 11-1
11.1 Rules Overview ..........................................................................................................11-1
11.2 Rule Logic Overview...................................................................................................11-2
11.3 Connection Direction..................................................................................................11-3
11.4 Logs............................................................................................................................11-5
11.5 Rule Summary............................................................................................................11-5
11.6 Predefined Services ...................................................................................................11-7
11.7 Creating/Editing Firewall Rules................................................................................11-10
11.8 Timeout.....................................................................................................................11-13
Chapter 12 Customized Services..............................................................................................12-1
12.1 Introduction to Customized Services..........................................................................12-1
12.2 Creating/Editing A Customized Service .....................................................................12-2
12.3 Example Custom Service Firewall Rule.....................................................................12-3
Chapter 13 Content Filtering Screens......................................................................................13-1
13.1 Content Filtering Overview.........................................................................................13-1
13.2 Configuring Keyword Blocking ...................................................................................13-1
13.3 Configuring the Schedule...........................................................................................13-3
13.4 Configuring Trusted Computers.................................................................................13-4
VPN/IPSec.........................................................................................................................................V
Chapter 14 Introduction to IPSec..............................................................................................14-1
14.1 VPN Overview............................................................................................................14-1
14.2 IPSec Architecture......................................................................................................14-3
14.3 Encapsulation.............................................................................................................14-4
14.4 IPSec and NAT...........................................................................................................14-5
Chapter 15 VPN Screens............................................................................................................15-1
15.1 VPN/IPSec Overview..................................................................................................15-1
15.2 IPSec Algorithms........................................................................................................15-1
15.3 My IP Address............................................................................................................15-2
15.4 Secure Gateway Address...........................................................................................15-2
15.5 VPN Summary Screen ...............................................................................................15-3
15.6 Keep Alive ..................................................................................................................15-7
15.7 NAT Traversal ............................................................................................................15-8
15.8 ID Type and Content ..................................................................................................15-9
15.9 Pre-Shared Key........................................................................................................15-11
15.10 Connection Type ......................................................................................................15-11
15.11 Configuring a Contivity Client VPN Rule..................................................................15-11

xii Contents
317516-A Rev 00
15.12 Configuring a Basic Branch Office VPN Rule...........................................................15-13
15.13 Configuring an IP Policy ...........................................................................................15-21
15.14 IKE Phases...............................................................................................................15-25
15.15 Configuring Advanced Branch Office Setup.............................................................15-27
15.16 Viewing SA Monitor ..................................................................................................15-31
15.17 Configuring Global Setting........................................................................................15-32
15.18 VPN and Remote Management................................................................................15-33
Remote Management, UPnP and Logs.........................................................................................VI
Chapter 16 Remote Management Configuration.....................................................................16-1
16.1 Remote Management Overview.................................................................................16-1
16.2 Telnet..........................................................................................................................16-2
16.3 FTP.............................................................................................................................16-3
16.4 Web.............................................................................................................................16-3
16.5 Configuring Remote Management..............................................................................16-3
Chapter 17 Universal Plug-and-Play (UPnP)............................................................................17-1
17.1 Introducing Universal Plug and Play...........................................................................17-1
17.2 Configuring UPnP.......................................................................................................17-2
17.3 Installing UPnP in Windows Example.........................................................................17-3
17.4 Using UPnP in Windows XP Example........................................................................17-5
Chapter 18 Logs Screens...........................................................................................................18-1
18.1 Logs Overview............................................................................................................18-1
18.2 Configuring Log Settings ............................................................................................18-1
18.3 Displaying the Logs ....................................................................................................18-5
18.4 SMTP Error Messages ...............................................................................................18-6
Maintenance...................................................................................................................................VII
Chapter 19 Maintenance ............................................................................................................19-1
19.1 Maintenance Overview...............................................................................................19-1
19.2 System Status Screen................................................................................................19-1
19.3 DHCP Table Screen...................................................................................................19-6
19.4 Diagnostic Screens.....................................................................................................19-7
19.5 Firmware Screen ......................................................................................................19-10
19.6 Configuration Screen................................................................................................19-12
SMT General Configuration.........................................................................................................VIII
Chapter 20 Introducing the SMT ...............................................................................................20-1
20.1 SMT Introduction ........................................................................................................20-1
20.2 Navigating the SMT Interface.....................................................................................20-3
20.3 Changing the System Password ................................................................................20-6
Chapter 21 Menu 1 General Setup ............................................................................................21-1
21.1 General Setup.............................................................................................................21-1
21.2 Procedure To Configure Menu 1................................................................................21-1
Chapter 22 Menu 2 WAN Backup Setup ...................................................................................22-1

Contents xiii
Contivity 251 VPN Switch User’s Guide
22.1 Introduction to WAN Backup Setup............................................................................22-1
22.2 Dial Backup ................................................................................................................22-1
22.3 Configuring Dial Backup in Menu 2............................................................................22-1
22.4 Configuring Dial Backup Setup ..................................................................................22-4
22.5 Advanced Dial Backup Setup.....................................................................................22-6
Chapter 23 Menu 3 LAN Setup..................................................................................................23-1
23.1 LAN Setup..................................................................................................................23-1
23.2 Protocol Dependent Ethernet Setup...........................................................................23-2
23.3 TCP/IP Ethernet Setup and DHCP.............................................................................23-2
Chapter 24 Internet Access .......................................................................................................24-1
24.1 Internet Access Overview...........................................................................................24-1
24.2 IP Policies...................................................................................................................24-1
24.3 IP Alias .......................................................................................................................24-1
24.4 IP Alias Setup.............................................................................................................24-2
24.5 Route IP Setup...........................................................................................................24-4
24.6 Internet Access Configuration....................................................................................24-4
Chapter 25 Remote Node Configuration..................................................................................25-1
25.1 Remote Node Setup Overview...................................................................................25-1
25.2 Remote Node Setup...................................................................................................25-1
25.3 Remote Node Network Layer Options........................................................................25-6
25.4 Remote Node Filter ....................................................................................................25-9
25.5 Editing ATM Layer Options ......................................................................................25-10
Chapter 26 Static Route Setup..................................................................................................26-1
26.1 IP Static Route Overview ...........................................................................................26-1
26.2 Configuring Static Routes...........................................................................................26-2
Chapter 27 Bridging Setup........................................................................................................27-1
27.1 Bridging in General.....................................................................................................27-1
27.2 Bridge Ethernet Setup................................................................................................27-1
Chapter 28 Network Address Translation (NAT)......................................................................28-1
28.1 Using NAT..................................................................................................................28-1
28.2 Applying NAT..............................................................................................................28-1
28.3 NAT Setup..................................................................................................................28-3
28.4 Address Mapping Sets ...............................................................................................28-4
28.5 Configuring a Server behind NAT ..............................................................................28-9
28.6 General NAT Examples............................................................................................28-11
Chapter 29 Enabling the Firewall..............................................................................................29-1
29.1 Remote Management and the Firewall ......................................................................29-1
29.2 Access Methods.........................................................................................................29-1
29.3 Enabling the Firewall..................................................................................................29-1
SMT Advanced Management.........................................................................................................IX
Chapter 30 Filter Configuration.................................................................................................30-1

xiv Contents
317516-A Rev 00
30.1 About Filtering.............................................................................................................30-1
30.2 Configuring a Filter Set for the Contivity 251..............................................................30-4
30.3 Filter Rules Summary Menus .....................................................................................30-6
30.4 Configuring a Filter Rule.............................................................................................30-8
30.5 Filter Types and NAT................................................................................................30-15
30.6 Example Filter...........................................................................................................30-15
30.7 Applying Filters and Factory Defaults.......................................................................30-18
Chapter 31 SNMP Configuration...............................................................................................31-1
31.1 About SNMP...............................................................................................................31-1
31.2 Supported MIBs..........................................................................................................31-2
31.3 SNMP Configuration...................................................................................................31-2
31.4 SNMP Traps...............................................................................................................31-4
Chapter 32 System Information and Diagnosis.......................................................................32-1
32.1 System Status.............................................................................................................32-1
32.2 System Information.....................................................................................................32-3
32.3 Log and Trace.............................................................................................................32-5
32.4 Diagnostic...................................................................................................................32-9
Chapter 33 Firmware and Configuration File Maintenance....................................................33-1
33.1 Filename Conventions................................................................................................33-1
33.2 Backup Configuration .................................................................................................33-2
33.3 Restore Configuration.................................................................................................33-7
33.4 Uploading Firmware and Configuration Files ...........................................................33-10
Chapter 34 System Maintenance...............................................................................................34-1
34.1 Command Interpreter Mode .......................................................................................34-1
34.2 Call Control Support ...................................................................................................34-2
34.3 Time and Date Setting................................................................................................34-4
Chapter 35 Remote Management..............................................................................................35-1
35.1 Remote Management Overview.................................................................................35-1
35.2 Remote Management.................................................................................................35-1
35.3 Remote Management and NAT..................................................................................35-3
35.4 System Timeout..........................................................................................................35-4
Chapter 36 IP Policy Routing.....................................................................................................36-1
36.1 IP Policy Routing Overview ........................................................................................36-1
36.2 Benefits of IP Policy Routing......................................................................................36-1
36.3 Routing Policy.............................................................................................................36-1
36.4 IP Routing Policy Setup..............................................................................................36-2
36.5 Applying an IP Policy..................................................................................................36-6
36.6 IP Policy Routing Example .........................................................................................36-7
Chapter 37 Call Scheduling.......................................................................................................37-1
37.1 Introduction.................................................................................................................37-1
Appendices.......................................................................................................................................X

Contents xv
Contivity 251 VPN Switch User’s Guide
Appendix A Troubleshooting......................................................................................................A-1
Appendix B IP Subnetting .......................................................................................................... B-1
Appendix C PPPoE...................................................................................................................... C-1
Appendix D Virtual Circuit Topology......................................................................................... D-1
Appendix E Power Adaptor Specifications................................................................................E-1
Appendix F Setting up Your Computer’s IP Address................................................................F-1
Appendix G Splitters and Microfilters....................................................................................... G-1
Appendix H Log Descriptions.................................................................................................... H-1
CI Commands Index.......................................................................................................................XI
Appendix I Command Interpreter ................................................................................................I-1
Appendix J Index ..........................................................................................................................J-1

xvii
Contivity 251 VPN Switch User’s Guide
Figures
Figure 1-1 Contivity 251 Internet Access Application......................................................................1-7
Figure 1-2 Firewall Application ........................................................................................................1-8
Figure 1-3 VPN Application .............................................................................................................1-9
Figure 1-4 Contivity 251 LAN-to-LAN Application .........................................................................1-10
Figure 2-1 WebGUI: Login...............................................................................................................2-2
Figure 2-2 WebGUI: Change Password at Login............................................................................2-2
Figure 2-3 WebGUI Site Map Screen..............................................................................................2-4
Figure 2-4 Example Xmodem Upload.............................................................................................2-6
Figure 3-1 Wizard Screen 1.............................................................................................................3-3
Figure 3-2 Internet Connection with PPPoA....................................................................................3-7
Figure 3-3 Internet Connection with RFC 1483...............................................................................3-9
Figure 3-4 Internet Connection with ENET ENCAP......................................................................3-10
Figure 3-5 Internet Connection with PPPoE..................................................................................3-11
Figure 3-6 Wizard Screen 3...........................................................................................................3-14
Figure 3-7 Wizard: LAN Configuration ..........................................................................................3-15
Figure 3-8 Wizard Screen 4...........................................................................................................3-17
Figure 4-1 System...........................................................................................................................4-1
Figure 4-2 System: General ............................................................................................................4-2
Figure 4-3 System: Password .........................................................................................................4-3
Figure 4-4 System: DDNS...............................................................................................................4-5
Figure 4-5 System: Time and Date..................................................................................................4-6
Figure 5-1 LAN and WAN IPAddresses..........................................................................................5-1
Figure 5-2 LAN: LAN Setup.............................................................................................................5-5
Figure 5-3 LAN: IPAlias..................................................................................................................5-7
Figure 6-1 Example of Traffic Shaping............................................................................................6-3
Figure 6-2 WAN: WAN Setup (Internet Access Setup)....................................................................6-4
Figure 6-3 Traffic Redirect Setup Example .....................................................................................6-7
Figure 6-4 Traffic Redirect WAN Setup...........................................................................................6-8
Figure 6-5 Traffic Redirect LAN Setup ............................................................................................6-8
Figure 6-6 WAN: WAN Backup Setup.............................................................................................6-9
Figure 6-7 WAN: WAN Backup: WAN Backup Advanced.............................................................6-12
Figure 6-8 WAN: WAN Backup: Advanced Modem Setup............................................................6-17
Figure 7-1 How NAT Works.............................................................................................................7-3

xviii Figures
317516-A Rev 00
Figure 7-2 NAT Application With IPAlias.........................................................................................7-4
Figure 7-3 Multiple Servers Behind NAT Example ..........................................................................7-8
Figure 7-4 NAT: Mode......................................................................................................................7-9
Figure 7-5 NAT: Edit SUA/NAT Server Set....................................................................................7-10
Figure 7-6 NAT: Address Mapping Rules.......................................................................................7-12
Figure 7-7 NAT: Edit Address Mapping Rule.................................................................................7-13
Figure 8-1 Example of Static Routing Topology...............................................................................8-1
Figure 8-2 Static Route....................................................................................................................8-2
Figure 8-3 Static Route: Edit Routing Rule......................................................................................8-3
Figure 9-1 Contivity 251 Firewall Application...................................................................................9-3
Figure 9-2 Three-Way Handshake ..................................................................................................9-5
Figure 9-3 SYN Flood......................................................................................................................9-6
Figure 9-4 Smurf Attack...................................................................................................................9-7
Figure 9-5 Stateful Inspection..........................................................................................................9-9
Figure 10-1 Enabling the Firewall..................................................................................................10-2
Figure 10-2 Firewall: Alert..............................................................................................................10-5
Figure 11-1 LAN to WAN Traffic.....................................................................................................11-4
Figure 11-2 WAN to LAN Traffic.....................................................................................................11-4
Figure 11-3 Firewall: Rule Summary .............................................................................................11-6
Figure 11-4 Creating/Editing A Firewall Rule...............................................................................11-11
Figure 11-5 Adding/Editing Source and Destination Addresses..................................................11-13
Figure 11-6 Firewall: Timeout ......................................................................................................11-14
Figure 12-1 Firewall: Customized Services...................................................................................12-1
Figure 12-2 Firewall: Creating/Editing A Customized Service.......................................................12-2
Figure 12-3 Configure Source IP Example....................................................................................12-4
Figure 12-4 Configuring Customized Services for My Service Example.......................................12-4
Figure 12-5 Syslog Rule Configuration Example...........................................................................12-5
Figure 12-6 Rule Summary Example ............................................................................................12-6
Figure 13-1 Content Filter: Keyword..............................................................................................13-2
Figure 13-2 Content Filter: Schedule.............................................................................................13-3
Figure 13-3 Content Filter: Trusted................................................................................................13-4
Figure 14-1 Encryption and Decryption.........................................................................................14-2
Figure 14-2 IPSec Architecture......................................................................................................14-3
Figure 14-3 Transport and Tunnel Mode IPSec Encapsulation.....................................................14-4
Figure 15-1 IPSec Summary Fields...............................................................................................15-3

Figures xix
Contivity 251 VPN Switch User’s Guide
Figure 15-2 VPN: Summary ..........................................................................................................15-4
Figure 15-3 NAT Router Between VPN Switches .........................................................................15-8
Figure 15-4 VPN: Contivity Client................................................................................................15-12
Figure 15-5 VPN: IKE (Branch Office).........................................................................................15-14
Figure 15-6 VPN: Policy..............................................................................................................15-21
Figure 15-7 Two Phases to Set Up the IPSec SA.......................................................................15-25
Figure 15-8 VPN: IKE (Branch Office): Advanced Setup............................................................15-28
Figure 15-9 VPN: SA Monitor......................................................................................................15-31
Figure 15-10 VPN: Global Setting...............................................................................................15-32
Figure 16-1 Telnet Configuration on a TCP/IP Network................................................................16-3
Figure 16-2 Remote Management ................................................................................................16-4
Figure 17-1 Configuring UPnP ......................................................................................................17-2
Figure 18-1 Log Settings...............................................................................................................18-3
Figure 18-2 Logs: View Logs.........................................................................................................18-5
Figure 18-3 E-mail Log Example...................................................................................................18-7
Figure 19-1 System Status............................................................................................................19-2
Figure 19-2 System Status: Show Statistics..................................................................................19-4
Figure 19-3 DHCP Table................................................................................................................19-6
Figure 19-4 Diagnostic: General....................................................................................................19-8
Figure 19-5 Diagnostic: DSL Line..................................................................................................19-9
Figure 19-6 Firmware Upgrade ...................................................................................................19-11
Figure 19-7 Network Temporarily Disconnected .........................................................................19-11
Figure 19-8 Error Message..........................................................................................................19-12
Figure 19-9 Configuration Maintenance......................................................................................19-12
Figure 19-10 Backup Configuration.............................................................................................19-13
Figure 19-11 Restore Configuration ............................................................................................19-14
Figure 19-12 Configuration: Restore Successful.........................................................................19-15
Figure 19-13 Network Temporarily Disconnected .......................................................................19-15
Figure 20-1 Login Screen..............................................................................................................20-2
Figure 20-2 Contivity 251 SMT Menu Overview............................................................................20-3
Figure 20-3 SMT Main Menu.........................................................................................................20-5
Figure 20-4 Menu 23 System Password.......................................................................................20-6
Figure 21-1 Menu 1 General Setup...............................................................................................21-2
Figure 21-2 Menu 1.1 Configure Dynamic DNS............................................................................21-4
Figure 22-1 Menu 2 WAN Backup Setup ......................................................................................22-2

xx Figures
317516-A Rev 00
Figure 22-2 Menu 2.1Traffic Redirect Setup..................................................................................22-3
Figure 22-3 Menu 2.2 Dial Backup Setup......................................................................................22-5
Figure 22-4 Menu 2.2.1 Advanced Dial Backup Setup..................................................................22-6
Figure 23-1 Menu 3 LAN Setup.....................................................................................................23-1
Figure 23-2 Menu 3.1 LAN Port Filter Setup.................................................................................23-1
Figure 23-3 Menu 3.2 TCP/IP and DHCP Ethernet Setup ............................................................23-2
Figure 24-1 Physical Network........................................................................................................24-2
Figure 24-2 Partitioned Logical Networks......................................................................................24-2
Figure 24-3 Menu 3.2 TCP/IP and DHCP Setup...........................................................................24-2
Figure 24-4 Menu 3.2.1 IPAlias Setup..........................................................................................24-3
Figure 24-5 Menu 1 General Setup...............................................................................................24-4
Figure 24-6 Menu 4 Internet Access Setup ...................................................................................24-5
Figure 25-1 Menu 11 Remote Node Setup....................................................................................25-2
Figure 25-2 Menu 11.1 Remote Node Profile................................................................................25-3
Figure 25-3 Menu 11.3 Remote Node Network Layer Options .....................................................25-6
Figure 25-4 Sample IPAddresses for a TCP/IP LAN-to-LAN Connection ....................................25-9
Figure 25-5 Menu 11.5 Remote Node Filter (RFC 1483 or ENET Encapsulation)......................25-10
Figure 25-6 Menu 11.5 Remote Node Filter (PPPoA or PPPoE Encapsulation).........................25-10
Figure 25-7 Menu 11.6 for VC-based Multiplexing ......................................................................25-11
Figure 25-8 Menu 11.6 for LLC-based Multiplexing or PPP Encapsulation ................................25-11
Figure 25-9 Menu 11.1 Remote Node Profile..............................................................................25-12
Figure 25-10 Menu 11.8 Advance Setup Options........................................................................25-12
Figure 26-1 Sample Static Routing Topology ................................................................................26-2
Figure 26-2 Menu 12 Static Route Setup ......................................................................................26-2
Figure 26-3 Menu 12.1 IP Static Route Setup...............................................................................26-3
Figure 26-4 Menu12.1.1 Edit IP Static Route ................................................................................26-3
Figure 27-1 Menu 11.1 Remote Node Profile................................................................................27-2
Figure 27-2 Menu 11.3 Remote Node Network Layer Options .....................................................27-2
Figure 27-3 Menu 12.3.1 Edit Bridge Static Route........................................................................27-3
Figure 28-1 Menu 4 Applying NAT for Internet Access..................................................................28-2
Figure 28-2 Menu 11.3 Applying NAT to the Remote Node...........................................................28-3
Figure 28-3 Menu 15 NAT Setup...................................................................................................28-4
Figure 28-4 Menu 15.1 Address Mapping Sets.............................................................................28-4
Figure 28-5 Menu 15.1.255 Address Mapping Rules (SUA Only).................................................28-5
Figure 28-6 Menu 15.1.1 First Set.................................................................................................28-6