Solwise SAR110 User manual

Solwise Ltd .
Advanced Reference Guide for
Solwise SAR110
ADSL Router
Please Note: Incorrect usage of CLI commands
can seriously damage the firmware settings
and configuration of your router to the extent
where you might be unable to reset/restore to
an operable state. We reserve the right to
charge for any faulty router returned for repair
which has user corrupted firmware or settings.
April 11, 2003

- 2 -
Notification is hereby given that Solwise Ltd. reserves the right to
modify, change, update or revise this document from time to time as
required without the prior obligation to notify any person, company
or organization. Further, Solwise makes no warranty or
representation, either express or implied, with respect to
merchantability, or fitness of its products for a particular purpose.
Solwise Ltd.
13/15 Springfield Way
Anlaby
Hull HU10 6RJ
UK
Tel [phone] (local rate)
Fax [phone]
Email [email protected]
Http www.solwise.co.uk
Copyright
All rights reserved. No part of this document may be reproduced in any form or by any means
without written permission from the product manufacturer.
Changes are periodically made to the information in this document. They will be incorporated in
subsequent editions. The product manufacturer may take improvement and/or changes in the
product described in this document at any time.

- 3 -
Table of Contents
1Introduction..........................................................9
2Quick Start.........................................................11
3CLI Introduction.................................................12
4Unit Configuration..............................................13
4.1 Default Configuration................................................13
4.1.1 System Sizing Parameters........................17
4.2 Modifying the Unit’s MAC Address and
Serial Number..................................................................19
4.3 Modifying the Unit Configuration via Script
Files..................................................................................19
4.3.1 Notes on Using Script File
Configuration..........................................................20
4.4 Managing Configuration Changes...........................20
4.5 Using FTP/TFTP to Upgrade and Retrieve
the Flash Image...............................................................21
4.5.1 Data configuration Upgrade ......................22
4.5.2 Recovering from a Failed Upgrade ................22
5Interfaces and Operating Mode ........................24
5.1 Interfaces – Overview...............................................24
5.2 Configuring the Ethernet Port ..................................24
5.3 Configuring Virtual Ethernet Interfaces....................27
5.4 Configuring the WAN ATM Port...............................27
5.5 Configuring Permanent Virtual Circuits ...................28
5.5.1 AAL5 Data Encapsulation Method .................29
5.5.2 ATM Service Categories: UBR,
CBR, GFR, NRTVBR and RTVBR ....................30
5.6 Configuring Switched Virtual Circuits (SVCs)..........33
5.7 Configuring PPP Interfaces......................................36
5.7.1 Creating a Login Name and
Password for a PPP Interface.............................37
5.7.2 PPPoE Interfaces........................................38
5.7.3 PPPoA Interfaces........................................39
5.7.4 Checking the IP Address of a PPP
Interface...................................................................40

- 4 -
5.7.5 Configuring the PPP Auto
start/stop Feature ..................................................40
5.7.6 IP Unnumbered PPP Interfaces...............40
5.8 Configuring the Operating Mode..............................43
5.8.1 Bridge Mode.................................................43
5.8.2 WAN to WAN bridging ...............................46
5.8.3 Router Mode ...................................................46
5.8.4 Bridge Router Autosense (BRAS) ...........49
5.8.5 Zero Installation PPPoE Bridge
(ZIPB) Mode ...........................................................50
6Viewing and Modifying DSL Information...........54
6.1 Modifying the DSL Configuration.............................54
6.2 Viewing DSL Parameters and Statistics..................55
7Configuring IP and Routing Management.........57
7.1 Configuring Routing on LAN Hosts..........................57
7.2 Configuring Routes...................................................57
7.3 Routing Mode ...........................................................58
7.4 RIP ............................................................................59
7.4.1 RIP Global Configuration...........................59
7.4.2 RIP Interface Configuration.......................59
7.5 IGMP.........................................................................60
8Virtual Private Network......................................64
8.1 Overview...................................................................64
8.2 L2TP .........................................................................65
8.3 Configuration details.................................................67
8.4 L2TP Traps...............................................................72
9Configuring DNS Relay.....................................73
9.1 Overview of DNS Relay ...........................................73
9.2 Configuration Details ................................................73
10 Configuring DHCP Server and DHCP
Relay ..............................................................74
10.1 Default DHCP Configuration on the
SAR110 Reference Unit..................................................74
10.2 Configuring Unit as DHCP Server..........................74
10.2.1 Creating DHCP Pools..............................75
10.2.2 Excluding Addresses from a Pool .........77
10.2.3 Modifying and Deleting Pools.................78

- 5 -
10.2.4 Creating Static DHCP Assignments.............78
10.2.5 Enabling the DHCP Server...........................79
10.2.6 DHCP- DNS Relay Interaction...............80
10.2.7 Viewing DHCP Server Address
Assignments...........................................................80
10.3 Configuring DHCP Relay........................................80
10.3.1 Configuring the DHCP Relay
Interfaces ................................................................80
10.3.2 Specifying the DHCP Server IP
Address ...................................................................81
10.3.3 Enabling DHCP Relay Mode........................81
10.4 Using a DHCP Server on the LAN .........................82
10.5 DHCP Traps............................................................82
10.5.1 Duplicate IP Address Trap......................82
10.5.2 Low Threshold Hit Trap ...........................82
10.6 ForceRenew............................................................83
11 Simple Network Time Protocol..........................84
11.1 Overview .................................................................84
11.2 SNTP implementation details .................................84
11.3 Configuration details ...............................................86
12 Layer 2 Security ................................................88
12.1 Raw Filtering – Overview........................................88
12.1.1 Using Raw Filtering Rules and
Subrules ..................................................................89
12.1.2 Raw Filtering Global Configuration...............91
12.2 Protocol Blocking ....................................................91
12.3 L2 Wall.....................................................................92
12.3.1 Overview.....................................................92
12.3.2 Configuration Files....................................93
12.3.3 AutoDetect Algorithm ...............................93
12.3.4 Assumptions ..............................................94
12.3.5 Sample Configuration Files ..........................94
13 Layer 3 Security ................................................96
13.1 NAT .........................................................................96
13.1.1 Default NAT Configuration on the
SAR110 Unit.............................................................97
13.1.2 Configuring NAT Direction ......................98

- 6 -
13.1.3 The napt rule .................................................98
13.1.4 The rdr Rule .............................................100
13.1.5 The basic and filter Rules......................102
13.1.6 The bimap Rule.......................................103
13.1.7 The pass Rule .........................................103
13.1.8 Configuring ALGs........................................103
13.1.9 Enabling NAT ..........................................106
13.2 Firewall ..................................................................106
13.2.1 Attack protection .....................................106
13.2.2 Firewall features......................................110
13.2.3 Configuration details...............................111
13.3 IP Filtering and IP Sessions..................................113
13.3.1 Using IP Filtering Rules .........................115
13.3.2 Configuring Time-of- day based
rules 117
13.3.3 IP Sessions – Advanced
Configuration Issues ...........................................120
13.3.4 IP Filtering Global Configuration..........122
14 Usage Control .................................................124
14.1 Overview ...............................................................124
14.2 User Authentication process.................................125
14.3 Configuration using CLI ........................................130
15 Application Security – Surfing Profile..............132
15.1 Surfing Profile........................................................132
15.2 Invoking the Surfing Profile Feature.....................132
15.3 Types of files .........................................................132
15.3.1 Surfing profile - modes of
operation ...............................................................133
15.4 Surfing profile – feature details.............................135
16 Auto-configuration ...........................................136
16.1 AutoDetect.............................................................136
16.1.1 Overview...................................................136
16.1.2 Configuring the Modem to Work with
AutoDetect..............................................................137
16.1.3 AutoDetect Configuration Options..............138
16.1.4 Considerations ............................................140
16.2 Auto-configuration Using ILMI (TR-037) ..............141

- 7 -
16.2.1 Starting Auto- configuration
through Default ....................................................142
16.2.2 Starting auto- configuration at run
time 144
16.2.3 Viewing auto- configured VCs..............144
16.2.4 Best effort configuration.........................145
16.2.5 VCC change and Cold Start Trap........146
16.2.6 Configuration Conflicts...........................146
16.2.7 Configuration mismatch Traps .............146
16.2.8 Constraints ...............................................146
16.2.9 Recommended parameters
required from network.........................................147
17 Other Device Access Mechanisms .................148
17.1 Simple Network Management Protocol
(SNMP) ..........................................................................148
17.1.1 SNMP Communities...............................148
17.1.2 SNMP Hosts ............................................148
17.1.3 SNMP Traps ............................................149
17.1.4 Providing SNMP Access Across
the Modem............................................................149
17.2 Web-based Interface ............................................150
17.2.1 Accessing the Web- based
Interface.................................................................150
17.2.2 Accessing the Quick
Configuration Page .............................................151
17.2.3 User Instructions .........................................152
17.2.4 Web-based Diagnostics ........................152
17.3 L2 Agent Module...................................................153
18 System Maintenance.......................................155
18.1 Diagnostics............................................................155
18.1.1 Checking IP Connectivity ......................155
18.2 Diagnostics page of the HTTP Agent...................155
18.2.1 Diagnostics - categories ........................155
18.3 ATM Traffic Diagnostics........................................156
18.3.1 OAM F5 CC .............................................157
18.3.2 OAM Loopback ...........................................159
18.4 Traps .....................................................................160

- 8 -
18.5 Requesting Status and Statistical
Information.....................................................................161
18.6 Viewing complete system configuration...............163
18.7 Managing User Accounts .....................................164
18.7.1 Creating User Accounts.........................164
18.7.2 Deleting User Accounts ..............................165
18.8 Changing the Login Password .............................165
18.9 Modifying System Parameters .............................166
18.10 Configuring Host Name and Domain
Name on the Modem ....................................................166
18.11 Debugging using Memory Location ...................169
18.12 Serial Port Authentication ...................................169
18.12.1 Using CLI Commands .........................169
19 Shell Tutorial ...................................................171
19.1 Shell Tutorial - Overview.......................................171
19.2 Shell Programming Tutorial ..................................172
19.2.1 A First Script.............................................173
19.2.2 Variables...................................................174
19.2.3 IF-ELSE Construct..................................175
19.2.4 Goto...........................................................177
19.2.5 Readout and Search ..............................179
19.2.6 Return........................................................182
19.2.7 Keywords..................................................185
19.2.8 Symbols....................................................185
20 Glossary ..........................................................186

- 9 -
1 Introduction
This document contains the following chapters:
 Introduction, provides basic information on this
document.
 Chapter 2 shows how to set up, configure, and operate
the SAR110.
 Chapter 3 gives a brief overview of the main features of
the Command Line Interface (CLI).
 Chapter 4 defines and describes the reference unit’s
default configuration, and explains how you can alter the
current configuration using flat files.
 Chapter 5 shows how to configure the unit’s interfaces,
and how to change its operating mode.
 Chapter 6 explains the CLI commands that can be used
to modify and display DSL-related parameters and statistics.
 Chapter 7 shows how to use CLI to configure IP routes.
 Chapter 8 shows how to use the Layer 2 Tunneling
protocol (L2TP) to enable the unit to provide VPN services.
 Chapter 9 shows how to configure the modem as a DNS
relay server.
 Chapter 10 shows how to use CLI to configure the
Dynamic Host Configuration Protocol (DHCP) server and or
client functions.
 Chapter 11 describes the configuration options of the
Simple Network Transfer Protocol.
 Chapter 12 describes raw filtering, protocol blocking and
the L2 Wall feature.
 Chapter 13 details information on configuring NAT,
Firewall and IP Filtering.
 Chapter 14 discusses the new Usage Control feature of
the unit.
 Chapter 15 discusses the surfing profile feature that
provides application security.
 Chapter 16 discussing how auto configuration is possible
with auto detect and TR-37 support.
 Chapter 17 discusses mechanisms for management
access to the modem, using SNMP, Web-based interface,
and L2 Agent.
 Chapter 18 shows how to perform basic maintenance
functions using CLI.
 Chapter 19 helps you understand how to use shell scrips

- 10 -
to your advantage, and provides a tutorial on shell
programming.
A glossary of terms used in this document is also provided.