Administrator’s Handbook | Motorola 7.7.4 instruction

Administrator’s Handbook

Motorola Netopia® Embedded Software Version 7.7.4

Qwest

Image 1

Motorola 7.7.4 manual Administrator’s Handbook

Contents

Administrator’s Handbook Copyright Table of Contents Advanced Setup Index Table of Contents Introduction Organization Documentation Conventions Bold terminal type User-entered text face Overview of Major Capabilities Instant-On PPP PPPoE/PPPoA Point-to-Point Protocol over Ethernet/ATM Wide Area Network Termination DNS Proxy Dhcp Dynamic Host Conﬁguration Protocol Server UPnP Embedded Web Server Diagnostics Management Password Protection Remote Access ControlNetwork Address Translation NAT Motorola Netopia Gateway NAT Default Server Motorola Netopia Advanced Features for NATInternal Servers Combination NAT Bypass Conﬁguration VPN IPSec Pass Through IP-Passthrough VPN IPSec Tunnel Termination Dynamic DNS Stateful Inspection Firewall Page Basic Mode Setup Important Safety Instructions Set up the Motorola Netopia Gateway Microsoft Windows Set up the Motorola Netopia Gateway Macintosh MacOS 9 or higher or Mac OS Conﬁgure the Motorola Netopia Gateway Page Configure the Motorola Netopia Gateway Motorola Netopia Gateway Status Indicator Lights Accessing the Web User Interface Links Bar Home Page Information Home Home Page Links Wireless ID Ssid Enable Wireless Privacy Advanced Conﬁguration Options optional Operating Mode Default Channel About Closed System Mode and Wireless Encryption Privacy Radius Server authentication Page WPA-PSK WEP-Manual Examples Enable Multiple Wireless IDs Home Page WiFi Multimedia Page Wireless MAC Authorization optional Page Home Link Gaming Supported Games and Software Http Deﬁne Custom Service Page Static NAT Page Link Advanced Setup Link Status ATM LAN Wireless supported models only User List Link Diagnostics Link Help Open the Web Connection Advanced SetupPage Home Page Advanced Setup Summary Information Advanced Setup Conﬁgure Link Conﬁgure Link Connection Select the IP Type Links Bar Link Dhcp Server Additional IP Subnets Page Link IP Passthrough Click Enable Link NAT Page Supported Games and Software Nntp Deﬁne Custom Service Page Static NAT IPSec VPN Link IPSec Conﬁguring an IPSec VPN Tunnel Parameter Motorola Netopia Peer Gateway Tunnel Conﬁguration page appears Click the Submit button Links Bar Parameter Descriptions 100 PAT Address 101 Soft MBytes 102 103 104 Link Router Password 105 Link Time Zone 106 Overview 107 Ethernet Switching/Policy Setup 108 109 110 111 112 113 Multiple Wireless IDs on 114 115 116 117 Example 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 Link Status 145 Ethernet 146 Wireless 147 Logs 148 User List 149 Result Meaning 150 151 Link Remote Access 152 From a Server 153 Link Reset Router 154 Link Restart Router 155 156 Help 157 Basic Troubleshooting 158 Status Indicator Lights 159 LED Function Summary Matrix Thicker than the standard telephone cable 160 161 Rear View 162 163 Command Line Interface 164 165 Overview 166 167 Config Commands 168 Logging Ending a CLI Session Saving Settings169 Shell Prompt Shell Command Shortcuts170 Common Commands 172 Download serveraddress ﬁlename conﬁrm Loglevel level License key173 Netstat -r Netstat174 Reset atm Reset arpReset cdmode Reset crash Reset ipmap Reset heartbeatReset log Reset security-log Restart seconds Show backupShow all-info Show bridge interfaces Show dslf device-association Show diffservShow enet all 178 Show etheroam ah Show featuresShow group-mgmt Show ip arp Show ip interfaces Show ip igmpShow ip ipsec Show ip ﬁrewall Show memory all Show logShow pppoe Show rtsp 182 Show vlan 183 Show wireless clients MACaddress Show wireless all184 Upload serveraddress ﬁlename conﬁrm WAN CommandsView conﬁg Who Reset dhcp client renew vcc-id Reset dhcp client release vcc-idReset dsl Reset ppp vccn Navigating the Config Hierarchy Config Mode PromptShow ppp stats lcp ipcp Start ppp vccn Set ip ethernet a ipaddress Entering Commands in Config Mode188 Displaying Current Gateway Settings Guidelines Config CommandsStep Mode a CLI Conﬁguration Technique 189 190 Validating Your Conﬁguration Remote ATA Conﬁguration Commands Set ata proﬁle 0.. ata-static-wan-ip ipaddr Set ata proﬁle 0.. ata-dhcpc-vid stringSet ata proﬁle 0.. ata-static-wan-subnet-mask subnetmask Set ata proﬁle 0.. ata-static-wan-gateway ipaddr Set ata proﬁle 0.. ata-outproxy-port port Set ata proﬁle 0.. ata-user-password stringSet ata proﬁle 0.. ata-auth-id value Set ata proﬁle 0.. ata-user-name string Set atm vcc n qos service-class cbr ubr vbr DSL CommandsSet atm option on off Set atm vcc n option on off Set atm vcc n qos max-burst-size 1 ...n Set atm vcc n qos sustained-cell-rate 1 ...nSet atm vcc n vpi 0 Set atm vcc n vci 0 Set atm vccn pppoe-sessions 1 Bridging SettingsSet bridge sys-bridge on off Set bridge concurrent-bridging-routing on off Set bridge ethernet option on off Set bridge table-timeout 30Set bridge dsl vccn option on off 197 Dhcp Settings Set dhcp server-address ipaddress Set dhcp default-option-group nameSet dhcp range 2.. start-address ipaddress Set dhcp range 2.. end-address ipaddress Set dhcp gen-option option 1 Set dhcp gen-option name name200 Option Data Format Data Size Can Bytes Conﬁgure 201 202 Set dhcp gen-option data data Set dhcp gen-option data-type ascii hex dotted-decimal203 Set dhcp ﬁlterset name string rule n absent-action Set dhcp ﬁlterset name string rule n dhcp-option 0204 Set dhcp ﬁlterset name string rule n match-str matchstring Pass discard continueSet dhcp ﬁlterset name string rule n match-pool ipaddress Set dhcp ﬁlterset name string rule n absent-pool ipaddress 206 Set dhcp assigned-ﬁlterset string Set dmt dmt dying-gasp default off on DMT SettingsSet dmt wiringMode auto tipring AA1 Set dmt dsl-annex-support off on Domain Name System Settings Set dmt metallic-termination auto disabled alwaysonSet dns proxy-enable Set dns domain-name domain-name Set dns conﬁgured-dns-priority 0 Set dns secondary-address ipaddress209 210 211 Igmp Settings 212 Set igmp robustness value Set igmp snooping off onSet igmp query-intvl value Set igmp query-response-intvl value Set igmp log-enable on off Set igmp wireless-m2u on offSet igmp version 1 2 Set igmp last-member-query-intvl value Set ip arp-timeout 60 IP SettingsSet ip option on off Set ip dsl vccn address ipaddress Set ip dsl vccn broadcast broadcastaddress Set ip dsl vccn restrictions admin-disabled noneSet ip dsl vccn netmask netmask Set ip dsl vccn addr-mapping on off Set ip dsl vccn igmp-null-source-addr on off Set ip dsl vccn mcast-fwd on offSet ip dsl vccn unnumbered on off Set ip dsl vccn rip-send off v1 v2 v1-compat v2-MD5 Set ip ethernet a option on off Set ip dsl vccn rip-receive Off v1 v2 v1-compat v2-MD5Set ip ethernet a address ipaddress Set ip ethernet a broadcast broadcastaddress Set ip ethernet a netmask netmask Set ip ethernet a restrictions none admin-disabledSet ip ethernet a rip-send Off v1 v2 v1-compat v2-MD5 219 Set ip ethernet a subnet 2 .. option on off Set ip ethernet a rip-receive off v1 v2 v1-compat v2-MD5Set ip ethernet a subnet n address ipaddress Set ip ethernet a subnet n netmask netmask Set ip ip-ppp vccn address ipaddress Set ip ip-ppp vccn option on offSet ip ip-ppp vccn peer-address ipaddress 221 Set ip ip-ppp vccn addr-mapping on off Set ip ip-ppp vccn restrictions admin-disabled noneSet ip ip-ppp vccn auto-sensing off dhcp/pppoe pppoe/pppoa Set ip ip-ppp vccn rip-send off v1 v2 v1-compat v2-MD5 Set ip ip-ppp vccn igmp-null-source-addr on off Set ip ip-ppp vccn rip-receive off v1 v2 v1-compat v2-MD5Set ip ip-ppp vccn mcast-fwd on off Set ip ip-ppp vccn unnumbered on off 224 Set ip ip-ppp vccn dns acquired-dns-priority 0 Set ip igmp-forwarding off on Set ip static-arp ip-addressipaddressSet ip ipsec-passthrough off on 225 226 Set ip prioritize off on Set diffserv lohi-ratio 60 100 percent Set diffserv option off on227 228 Qos off assure expedite network-control 229 Set diffserv qos dscp-map default custom 230 By default, the following settings are used in custom mode 231 Queue Conﬁguration 232 233 Set queue name wfq weight-type bps 234 235 Set queue name priorityqueuename default-inputqueuename 236 Rate-limiting weighted fair queue to 100Kbps Set ip ethernet B rtsp-passthrough off on Set ip sip-passthrough on offSet ip static-routes destination-networknetaddress 237 238 Delete ip static-routes destination-network netaddress IPMaps SettingsSet ip-maps name name internal-ip ip address Set ip-maps name name external-ip ip address Network Address Translation NAT Pinhole Settings Network Address Translation NAT Default Settings Set pinhole name name protocol-select tcp udp Set pinhole name nameSet pinhole name name external-port-start 0 Set pinhole name name external-port-end 0 PPPoE /PPPoA Settings Set ppp module vccn lcp-echo-requests on off Set ppp module vccn protocol-compression on offSet ppp module vccn echo-period integer Set ppp module vccn lost-echoes-max integer Set ppp module vccn terminate-max integer Set ppp module vccn restart-timer integerSet ppp module vccn connection-type instant-on always-on Set ppp module vccn time-out integer Set ppp module vccn port-authentication password password Set ppp module vccn port-authentication username username245 Set wan-over-ether pppoe on off PPPoE with IPoE SettingsSet wan-over-ether pppoe-with-ipoe on off Set wan-over-ether ipoe-sessions 1 247 Set atm vcc n encap pppoe-llc Set ip ip-ppp vcc1 mcast-fwd on off Ethernet Port SettingsSet ip ip-ppp vcc1 igmp-null-source-addr off on 248 Set ethernet oam ah mode active passive 802.3ah Ethernet OAM SettingsSet ethernet oam ah option off on Set ethernet oam ah pass-through off on Set ethernet oam ah keepalive-timer 5 Set ethernet oam ah discovery-timer 1Etheroam ah ping 250 Set preference verbose on off Command Line Interface Preference SettingsSet preference more lines 251 Set servers web-http 1 Port Renumbering SettingsSet servers telnet-tcp 1 252 253 Security Settings Application Select this Level Other Considerations 254 Port Session Type Port State 255 256 Set security ipsec option off on off Set security ipsec tunnels name Set security ipsec tunnels name 123 tun-enable on on off257 258 Set security ipsec tunnels name 123 IKE-mode DH-group 1 1 2 Set security ipsec tunnels name 123 xauth password password Set security ipsec tunnels name 123 xauth enable off onSet security ipsec tunnels name 123 nat-enable on off Set security ipsec tunnels name 123 xauth username username Set security ipsec tunnels name 123 remote-id idvalue Set security ipsec tunnels name 123 local-id idvalue260 261 262 Set security state-insp tcp-timeout 30 Set security state-insp dos-detect off on Set security state-insp udp-timeout 30Set security state-insp xposed-addr exposed-address# n Set security state-insp xposed-addr 264 Exposed-address# n protocol tcp udp both any Snmp Settings Set snmp notify type v1-trap v2-trap inform Set snmp v3 enable off on266 Set snmp v3 ro-account priv-password Set snmp v3 ro-account auth-passwordSet snmp v3 ro-account security-name string Set snmp v3 ro-account security-model none auth auth+priv Set snmp v3 rw-account priv-password Set snmp v3 rw-account auth-passwordSet snmp v3 rw-account security-name string Set snmp v3 rw-account security-model none auth auth+priv Show snmp v3 engine-id System SettingsSet system name name 269 270 Set system username administrator name user name Set system idle-timeout telnet 1...120 http 1Set system ftp-server option off on Set system log-size 10240 Sleep Contact-email string@domainname location string Set system password admin user272 Set system zerotouch redirect-url redirection-URL Set system zerotouch option on off273 Syslog 275 Default syslog installation procedure 276 Type save Wireless Settings supported models Set wireless multi-ssid option on off Set wireless mode both-b-and-g b-only g-only278 279 Set wireless tx-power full medium fair low minimal Set wireless no-bridging off on280 281 Set wireless wmm option off on 282 283 Set wireless network-id privacy default-keyid Set wireless network-id privacy pre-shared-key string284 285 Set wireless mac-auth option on off 286 Set radius radius-secret sharedsecret Set radius radius-name servernamestringSet radius alt-radius-name servernamestring Set radius alt-radius-secret sharedsecret Vlan Settings Set vlan name name ports port priority off on Set vlan name name ports port tag off onSet vlan name name ports port promote off on Set vlan name name ports port port-pbits 0 Assign an IP interface 290 291 An example of a Triple-Play setup Set vlan name PPPoE11 id 292 293 Set voip phone 0 1 sip-option off on VoIP settingsSet voip phone 0 1 sip-proxy-server servername ipaddress Set voip phone 0 1 sip-proxy-server-domain domainname Set voip phone 0 1 sip-user-password password Set voip phone 0 1 sip-registrar-setting sip-expires-time 0Set voip phone 0 1 sip-out-proxy-server Set voip phone 0 1 sip-user-display-name name Set voip phone 0 1 codec G729A priority 1 2 3 4 5 6 7 none 3 4 5 6 7 noneSet voip phone 0 1 codec G72616 priority 1 2 3 4 5 6 7 none Set voip phone 0 1 codec G72624 priority 1 2 3 4 5 6 7 none 297 298 Set voip phone 0 1 sip-advanced-setting dsp-settings 299 Echo-max-attenuation 0 300 Set upnp option on off UPnP settingsSet upnp log off on Set upnp read-only off on Set dslf-lanmgmt option off on DSL Forum settings302 303 Set backup option disabled manual automatic Backup IP Gateway SettingsSet backup failure-timeout 1 Set backup ping-host 1 2 name address Set backup recovery-timeout 1 Set backup auto-recovery off onSet ip backup-gateway option on off Set ip backup-gateway interface ip-address 306 Vdsl Settings 307 Vdsl Parameter Defaults Vdsl Parameters Accepted Values 308 Parameter 309 Etsi M2 CAB 310 311 312 313 314 315 Glossary 316 317 318 319 320 321 Ethernet crossover cable. See crossover cable 322 323 324 325 326 327 328 329 330 331 332 333 Description Software and protocols 334 335 Agency approvals 336 Manufacturer’s Declaration of Conformance Declaration for Canadian users 337 338 Important Safety Instructions 339 CFR Part 68 Information 340 Electrical Safety Advisory 341 Copyright Acknowledgments 342 343 344 Index DSL 66 248 NTP VPI/VCI 350