THOMSON SpeedTouch 610 User manual

SpeedTouch™610
Business DSL Routers
Release R4.2
Application Note
Operation and Maintenance
600
SERIES

SpeedTouch™610
Application Note
Operation and Maintenance

Status Released
Change Note PeckelbeenS
Short Title AppNote ST610 Operation and Maintenance R4.2
Copyright © 2003 THOMSON. All rights reserved. Passing on, and copying of this document, use and
communication of its contents is not permitted without written authorization from
THOMSON. The content of this document is furnished for informational use only, may be
subject to change without notice, and should not be construed as a commitment by
THOMSON. THOMSON assumes no responsibility or liability for any errors or inaccuracies
that may appear in this document.

E-SIT-CTC-20030324-0002 v1.0 3
Contents
1 Introduction.................................................................... 5
2 The SpeedTouch™610 System Password ................... 7
2.1 System Password Configuration via the Web Interface.................................. 9
2.2 System Password Configuration via the CLI ..................................................10
3 SpeedTouch™610 System Software.......................... 15
3.1 Checking for new System Software via the SpeedTouch™610 Web Pages16
3.2 Upgrade via SpeedTouch™610 Web Pages.................................................... 17
3.3 System Software Management via FTP ..........................................................19
3.3.1 Backup System Software via FTP ................................................................................................20
3.3.2 Upgrade or Restore System Software via FTP ........................................................................22
4 SpeedTouch™610 Software Activation Keys............ 25
4.1 Software Activation Key Management............................................................ 26
4.2 Applying for a Software Module Activation.................................................... 28
5 SpeedTouch™610 Configuration Management........ 31
5.1 Configuration Management via the SpeedTouch™610 Web Pages ............ 32

E-SIT-CTC-20030324-0002 v1.0
4
5.2 Configuration Management via Telnet............................................................ 35
5.3 The :Config CLI Command Group .................................................................. 36
5.3.1 Back up Configurations via FTP...................................................................................................38
5.3.2 Store Configurations via FTP .......................................................................................................40
5.4 SpeedTouch™ Template Files ......................................................................... 44
5.5 SpeedTouch™610 Environment Variables ..................................................... 45
6 SpeedTouch™610 Advanced Diagnostics.................. 47
7 SpeedTouch™610 Command Line Interface............ 51
7.1 Accessing the CLI .............................................................................................. 52
7.2 Basic Navigation................................................................................................. 53
7.2.1 Menu-driven CLI Navigation ........................................................................................................56
8 SpeedTouch™610 FTP Access ................................... 57
9 Resetting the SpeedTouch™610 ................................ 61
9.1 Resetting the SpeedTouch™610 via its Web Pages....................................... 62
9.2 Resetting the SpeedTouch™610 via the CLI.................................................. 64
9.3 Reset via FTP...................................................................................................... 66
9.4 Switch-to-Defaults ............................................................................................. 68

1Introduction
E-SIT-CTC-20030324-0002 v1.0 5
1Introduction
Overview
Abstract This application note describes the operation and maintenance of the Speed-
Touch™610 Business DSL Router.
Being a key component of your local network, a good operation of the Speed-
Touch™610 is essential to gain maximum performance of your DSL connections.
Therefore an extended set of maintenance features and mechanisms are provided to
ensure a faultless operation of the SpeedTouch™610, 24 hours a day, 7 days a week.
Applicability This application note applies to THOMSON’s range of SpeedTouch™600Series Busi-
ness DSL Routers from Release R4.2 onwards.
In this application note
Topic Page
2 The SpeedTouch™610 System Password 7
3 SpeedTouch™610 System Software 15
4 SpeedTouch™610 Software Activation Keys 25
5 SpeedTouch™610 Configuration Management 31
7 SpeedTouch™610 Command Line Interface 51
8 SpeedTouch™610 FTP Access 57
9 Resetting the SpeedTouch™610 61

1 Introduction
E-SIT-CTC-20030324-0002 v1.0
6

2 The SpeedTouch™610 System Password
E-SIT-CTC-20030324-0002 v1.0 7
2 The SpeedTouch™610 System Password
Why securing the
SpeedTouch™610 with
a system password
The SpeedTouch™610 is an important part of your local network. In a most likely
scenario, the SpeedTouch™610 may act, not only as the LAN’s DSL gateway, but also as
the LAN’s DHCP server, DNS server, SIP multimedia PBX, IP router and secure VPN
gateway.
Being so important, it is imperative that the SpeedTouch™610 is protected, not only
from the outside, but also from the inside to avoid unintended changes to its configura-
tion.
By securing the SpeedTouch™610 via a system password you are able to ensure that
access to the SpeedTouch™610 will be allowed only for people knowing the system
password.
Important Note Never use an obvious system password to protect your SpeedTouch™610, such as your
name, date of birth or phone number.
Scope of the system
password
In case you configured a system password for the SpeedTouch™610, all access methods
are secured (from any of the SpeedTouch™ interfaces):
•SpeedTouch™ Setup wizard application
•SpeedTouch™NAPT Manager application
•Dr SpeedTouch™ application
•HTTP web interface access
•CLI Telnet access
•CLI serial access
•FTP access.
Note The system password does not affect the forwarding and/or routing func-
tionality of the SpeedTouch™610 in any way.
Forgetting the system
password
In case you forgot the system password, you will no longer be able to access the Speed-
Touch™610 web interface, CLI or via FTP in any way, nor be able to run the Speed-
Touch™ Setup wizard for re-configuration.
Therefore, it is advised to write down your system password and to keep it on a safe
place.
If you have lost your system password the only method to unlock the SpeedTouch™610
is by resetting it to its factory default settings. See “9 Resetting the SpeedTouch™610”
on page 61 for more information).

2 The SpeedTouch™610 System Password
E-SIT-CTC-20030324-0002 v1.0
8
System password
storage in user.ini
When saving the SpeedTouch™610 configuration the system password is stored in the
user.ini file as an encrypted value.
The encryption is irreversible, which means that there is no method to retrieve the
clear-text system password from the encrypted value.
For the convenience of configuring multiple SpeedTouch™ devices with the same
system password, the encryption is device independent, i.e. it can be used on any
SpeedTouch™610 device to hold the same system password.
For security reasons the encrypted string itself can not be used as password string for
accessing the device.

2 The SpeedTouch™610 System Password
E-SIT-CTC-20030324-0002 v1.0 9
2.1 System Password Configuration via the Web
Interface
Setting or changing a
system password
Proceed as follows:
1Open a web browser and browse to the SpeedTouch™610 web pages. In case a
system password was previously set, you must authenticate yourself prior to be
able to access the SpeedTouch™610 web pages.
2Open the System Password page via System Config > System Password:
3The System Password box allows you to (re-)configure SpeedTouch™610’s sys-
tem password configuration:
4Provide a user name (maximum 16 characters) of your choice. By default provid-
ing a user name is optional: when authenticating the SpeedTouch™610 will not
take it into account. You can change this behavior via the CLI (See “ Advanced sys-
tem password Options” on page 13 for more information).
5Provide a password (maximum 16 characters) of your choice. Re-type the same
password in the second field for verification.
Note Please be aware that both the user name and system password are
case sensitive.
Although the full set of 8-bit characters (extended ASCII set) is
supported for both user name and password, it is recommended to
use only a-z, A-Z, 0-9 characters to avoid problems with third party
applications.
6Click Apply.
7To re-access the web pages, you must authenticate yourself, using the system pass-
word you just configured.
8To make your system password permanent, click Save All.

2 The SpeedTouch™610 System Password
E-SIT-CTC-20030324-0002 v1.0
10
2.2 System Password Configuration via the CLI
Setting or changing a
system password
Proceed as follows:
1Open a CLI session to the SpeedTouch™610 (see “7 SpeedTouch™610 Com-
mand Line Interface” on page 51 for more information). In case a system password
was previously set, you must authenticate yourself prior to be able to access the
SpeedTouch™610 web pages.
2At the CLI prompt execute:
3At the [userid]= prompt you can optionally provide a user name (maximum 16
characters) of your choice. By default providing a user name is optional: when
authenticating the SpeedTouch™610 will not take it into account. You can change
this behavior via the CLI (See “ Advanced system password Options” on page 13
for more information).
4At the password= prompt, provide a password (maximum 16 characters) of your
choice and press ENTER.
Note Please be aware that both the user name and system password are
case sensitive.
Although the full set of 8-bit characters (extended ASCII set) is
supported for both user name and password, it is recommended to
use only a-z, A-Z, 0-9 characters to avoid problems with third party
applications.
5For verification you must retype the password (and press ENTER).
6As notified by the CLI, execute saveall to make your system password settings
permanent.
Username : Administrator
Password : *********
------------------------------------------------------------------
*
* ______ SpeedTouch 610
* ___/_____/\
* / /\\ Version 4.2.0.15
* _____/__ / \\
* _/ /\_____/___ \ Copyright (c) 1999-2003,
* // / \ /\ \ THOMSON
* _______//_______/ \ / _\/______
* / / \ \ / / / /\
* __/ / \ \ / / / / _\__
* / / / \_______\/ / / / / /\
* /_/______/___________________/ /________/ /___/ \
* \ \ \ ___________ \ \ \ \ \ /
* \_\ \ / /\ \ \ \ \___\/
* \ \/ / \ \ \ \ /
* \_____/ / \ \ \________\/
* /__________/ \ \ /
* \ _____ \ /_____\/
* \ / /\ \ /___\/
* /____/ \ \ /
* \ \ /___\/
* \____\/
*
------------------------------------------------------------------
=>
=>system setpassword

2 The SpeedTouch™610 System Password
E-SIT-CTC-20030324-0002 v1.0 11
The CLI session extract below illustrates the above procedure:
You can equally execute the full system password configuration in one CLI command:
Setting a
SpeedTouch™610
device related
identification label as
system password
Via the CLI you are able to configure some device related identification labels as system
password.
Available device related identification labels can be retrieved via the env list CLI
command:
=>system setpassword
[userid] = Administrator
password = ******
Please retype password for verification.
password = ******
:system setpassword userid=Administrator password=_CYP_zHCpbK6s5Cb82
Security notification: Password changed, use 'saveall' to make it
permanent.
=>saveall
=>
=>system setpassword userid=Administrator password=MyPassword
Security notification: Password changed, use 'saveall' to make it
permanent.
=>saveall
=>
=>env list
_COMPANY_NAME=THOMSON
_COMPANY_URL=http://www.thomson.net
_PROD_NAME=SpeedTouch
_PROD_URL=http://www.speedtouch.com
_PROD_FRIENDLY_NAME=SpeedTouch 610
_PROD_DESCRIPTION=Business DSL Router
_PROD_NUMBER=610
_BOARD_SERIAL_NBR=021090016
_PROD_SERIAL_NBR=CP021090016
_BUILD=4.2.0.15
_MODEMLABEL=MOD_SACHEM_SEA_CPE_V2.11.27
_PHYSLAYERTYPE=ISDN
_BUILDNAME=LLT5AA4.20F
_PRL=3EC18603GCAA
_FIA=NE
_BOARD_NAME=ADNT-R
_COMPANY_ID=ALCL
_COPYRIGHT=Copyright (c) 1999-2003, THOMSON
_TPVERSION=1.2.0
_ETHERNET=SINGLE
_MACADDR=00-90-D0-01-87-C1
_UDN=uuid:UPnP-SpeedTouch610-1_00-90-D0-01-87-C1
_IGDX_VERSION=1.1
_WIZ_AUTOPOPUP=1
...
=>

2 The SpeedTouch™610 System Password
E-SIT-CTC-20030324-0002 v1.0
12
All device related identification labels, starting with an underscore ’_’ can be used as
system password. However, be aware that their value may extend the 16 character limit,
hence unexpectedly truncated. Moreover, some are more convenient for using as pass-
word,The listing below provides an overview of the more appropriate device related
identification labels:
•_BOARD_SERIAL_NBR
The per device unique serial number. This serial number, optionally preceded by a
letter-code, is also printed on the identification label on the bottom of each
SpeedTouch™610. If used as System password, the preceding letter-code, if
present, should not be taken into account.
•_PRL
The per SpeedTouch™610 variant unique identification code. The variant identifi-
cation code is printed on the identification label on the bottom of each Speed-
Touch™610.
•_MACADDR
The per device unique MAC address. The MAC address can be retrieved via the
web interface and/or CLI.
To configure a device related identification label via the CLI you must enter the
following at the CLI prompt:
Where <device related identification label> stands for the acronym of the desired label
as listed above.
Note Make sure to insert the dollar sign ‘$’ in front of the device related identifica-
tion label. This will indicate the SpeedTouch™610 that the provided pass-
word value must be interpreted as the value of a device related identification
label rather than be taken as verbatim text.
Optionally you can additionally specify a user name <user name>:
For example, to configure the SpeedTouch™610 unique serial number as system pass-
word (in the example without using a user name), you must execute following CLI
command:
=>system setpassword password=$<device related identification label>
=>system setpassword userid=<user name> password=$<device related iden-
tification label>
=>system setpassword password=$_BOARD_SERIAL_NBR
Security notification: Password changed, use 'saveall' to make it
permanent.
=>

2 The SpeedTouch™610 System Password
E-SIT-CTC-20030324-0002 v1.0 13
Advanced system
password Options
The SpeedTouch™610 allows two optional settings for the system password via the
system config CLI command:
Following system password options are configurable via this command:
•[digestauth] = <{disabled|enabled}>
To enable or disable HTTP digest authentication.
By default HTTP digest authentication is disabled (like on most authentication
servers), meaning that credentials provided by the user are sent in cleartext.
With HTTP digest authentication the credentials provided by the user are
encrypted along with a certain random value generated for the nonce by the
SpeedTouch™610 and send back to the SpeedTouch™610. The Speed-
Touch™610 creates its own encrypted credentials using the configured creden-
tials using the same random value and matches them against the encrypted value
received from the user. This way the traversal of unencrypted credentials is
avoided.
Note Be aware that not all third party applications support HTTP digest
authentication. Therefore it is recommended to keep the default
setting.
•[strictusername] = <{disabled|enabled}>
To e n a b l e o r d i s a b l e s t rict user name check.
By default the SpeedTouch™610 will ignore the user name, if provided during
authentication. In case strictusername=enabled a user name should be
provided during system password configuration. For each subsequent authentica-
tion this user name must be provided next to the system password.
=>system help config
Sets or changes system config parameters
Syntax : config [upnp = <{disabled|enabled}>] [mdap =
<{disabled|enabled}>]
[drst = <{disabled|enabled}>]
[digestauth = <{disabled|enabled}>]
[strictusername = <{disabled|enabled}>]
[dcache = <{disabled|enabled}>]
Parameters :
[upnp = <{disabled|enabled}>]
Enable / disable upnp discovery
[mdap = <{disabled|enabled}>]
Enable / disable mdap discovery
[drst = <{disabled|enabled}>]
Enable / disable DRST access
[digestauth = <{disabled|enabled}>]
Enable / disable HTTP digest authentication
[strictusername = <{disabled|enabled}>]
Enable / disable strict username check
[dcache = <{disabled|enabled}>]
Enable / disable data cache
=>

2 The SpeedTouch™610 System Password
E-SIT-CTC-20030324-0002 v1.0
14

3 SpeedTouch™610 System Software
E-SIT-CTC-20030324-0002 v1.0 15
3 SpeedTouch™610 System Software
Introduction The SpeedTouch™610 products continue to evolve as extra and new functionalities are
made available. By upgrading the SpeedTouch™610 system software, you are able to
continually ensure the flawless operation of your device.
Upgrade system
software
For new system software packages, you can:
•Click the link, available on the SpeedTouch™610 Upgrade web page (see
“3.1 Checking for new System Software via the SpeedTouch™610 Web Pages” on
page 16 for more information).
•Contact your Network Administrator or your Service Provider
•Visit the SpeedTouch™ support pages at:
•http://www.speedtouch.com
System software
packages and security
All system software packages for the SpeedTouch™610 are digitally signed and
encrypted. Packages that may have come corrupted, or been altered in any way, will not
be accepted by the SpeedTouch™610.
This way, the SpeedTouch™610, or its service can never be corrupted or lost.
Remote Management The items discussed in this chapter are also valid via SpeedTouch™610’s remote
management capabilities.
For more information, see the application note “SpeedTouch™610 Remote Manage-
ment”.

3 SpeedTouch™610 System Software
E-SIT-CTC-20030324-0002 v1.0
16
3.1 Checking for new System Software via the
SpeedTouch™610 Web Pages
Procedure Proceed as follows:
1Open a web browser and go to the SpeedTouch™610 web pages.
2Open the Upgrade page via System Config > Upgrade:
3The System Software box shows some information on the currently running sys-
tem software; underneath an Internet link for getting the latest SpeedTouch™610
system software is provided:
4Click the link Here to open the SpeedTouch™ System Software Upgrade Internet
website and follow the instructions to download the latest system software for
your SpeedTouch™610.
Note You may require a user name and password, prior to be able to access
the SpeedTouch™ System Software Upgrade website.
Contact your Service Provider for more information.

3 SpeedTouch™610 System Software
E-SIT-CTC-20030324-0002 v1.0 17
3.2 Upgrade via SpeedTouch™610 Web Pages
Preliminary steps Before you start with upgrading the SpeedTouch™610, make sure:
•To inform all people relying on the SpeedTouch™610 services, that service may be
down for some short period, as upgrading the SpeedTouch™610 system software
implies a restart of the device.
•That an upgrade system software file is stored on your local disk. You can check
for the latest SpeedTouch™610 system software:
•By clicking the link available at the SpeedTouch™610 Upgrade web page (see
“3.1 Checking for new System Software via the SpeedTouch™610 Web
Pages” on page 16 for more information)
•Or for more information at http://www.speedtouch.com.
Upgrade Procedure Proceed as follows:
1Open a web browser and go to the SpeedTouch™610 web pages.
2Click Save All to save the current configuration.
3Open the Upgrade page via System Config > Upgrade:
4Open the Upgrade page via System Config - Upgrade.
On this page you can find the Software Upgrade box:

3 SpeedTouch™610 System Software
E-SIT-CTC-20030324-0002 v1.0
18
Tw o f i e l d s a r e s h o w n :
•Active software version displays the SpeedTouch™610 system software
currently running.
•Passive software version displays shows the dormant system software version.
5Check whether the Passive software version filename field is empty. If not, click
Remove passive to remove the dormant system software from the Speed-
Touch™610 permanent storage.
Note Removing the passive system software may take up to 2 minutes to
complete.
6Click Browse to locate and select the upgrade system software on your local disk.
If the full path of the upgrade system software is known, you can enter it immedi-
ately in the input field next to the Browse button.
7Click Upload. This will transfer the upgrade system software to the Speed-
Touch™610.
In case the upload of the upgrade system software was successful, its file name is
shown as passive software version:
Note Uploading the new system software may take up several minutes to
complete.
8Click Switch Over to restart the SpeedTouch™610 and activate the newly
uploaded upgrade system software.
During restart, the SpeedTouch™610 will switch the passive and active system software
and mark the newly uploaded system software as active software version.
You can check the Software Upgrade box to check whether the switch over was
successful:
System software
downgrade
Via the identical procedure it is also possible - although not recommended - to down-
grade the SpeedTouch™610 by uploading an older system software than the current
running version.
However, be aware that functionality added by previous upgrades may be lost, that
system password settings may be lost as well as end-to-end connectivity and other
configuration settings.