191

The Install Certiﬁcate page appears.

2.Browse to the location where you have saved your certiﬁcate and select the ﬁle, or type the full path.

3.Click the Install Certiﬁcate button.

4.Restart your Gateway.

Page 191

Image 191

Motorola 3352N, 7000, 3342, 2200 manual 191

Contents

Administrator’s Handbook Copyright Administrator’s HandbookPage Administrator’s Handbook Table of Contents Breadcrumb Trail Security Basic Troubleshooting Command Line Interface 223 Administrator’s Handbook Glossary Overview of Major Capabilities What’s New Introduction Administrator’s Handbook General About Motorola Netopia DocumentationIntended Audience Documentation Conventions Internal Web Interface Command Line Interface Word About Example Screens Organization Administrator’s Handbook Basic Mode Setup Power Supply Installation Important Safety Instructions Bewahren Sie diese Anweisungen auf Wichtige SicherheitshinweiseAchtung Microsoft Windows Setting up the Motorola Netopia GatewayPage Macintosh MacOS 8 or higher or Mac OS MiAVo Vdsl and Ethernet WAN models Quickstart Conﬁguring the Motorola Netopia Gateway You can skip to Home Page Basic Mode on PPPoE Quickstart Set up the Motorola Netopia Pocket Gateway Page Motorola Netopia Gateway Status Indicator Lights Home Page Basic Mode Down Link Manage My Account Link Status Details Link Enable Remote Management Link Expert Mode Link Update Firmware Link Factory Reset Open the Web Connection Accessing the Expert Web Interface Administrator’s Handbook Field Status and/or Description Home Page Expert ModeHome Page Information Summary Information NAT VoIP Link Breadcrumb Trail ToolbarNavigating the Web Interface Button Restart Restart Link Alert Symbol Button Help Help Link Quickstart ConﬁgureButton Conﬁgure Administrator’s Handbook Link LAN Administrator’s Handbook Page Administrator’s Handbook Wireless supported models Privacy Page Advanced About Closed System Mode Administrator’s Handbook WPA Version Allowed Multiple SSIDsExamples Administrator’s Handbook Page WiFi Multimedia Wireless MAC Authorization Administrator’s Handbook Use Radius Server Advanced Network Conﬁguration page appears PPP over Ethernet interface Link WAN DHCP/PPPoE/PPPoA Autosensing RIP-1 compatibility, or RIP-2 with MD5 Advanced Ethernet WAN interface Page Other WAN Options AdvancedIP Gateway Available Encapsulation types WAN Ethernet and Vdsl GatewaysAdsl Gateways Administrator’s Handbook Page Sustained Cell Rate SCR Transmit Priority Comments Class Link Advanced IP Static Route Entry page appears Link IP Static Routes Changes link Link IP Static ARP Link Pinholes Tips for making Pinhole Entries Gateway Pinhole Conﬁguration Procedure. Use the following steps Page Administrator’s Handbook FAQs for the IPMaps Feature Conﬁgure the IPMaps Feature 192.168.1.2 IPMaps Block DiagramMotorola Netopia Gateway WAN Interface LAN Interface 192.168.1.1 Link Default Server Internet Gateway Page Link Differentiated Services Page QoS Setting TOS Bit Value Behavior Link DNS Link Dhcp Server Link Radius Server Link Snmp Page 100 Link Igmp Internet Group Management ProtocolIgmp Version 3 supports 101 102 Link UPnP 103 Link LAN Management 104 Link Ethernet Bridge 105 Conﬁguring for Bridge Mode 106 107 Overview 108 Ethernet Switching/Policy Setup 109 Vlan Model Combining Bridging and Routing 110 111 Vlan Port Conﬁguration screen appears 112 113 114 115 116 Example 117 118 119 Click the Save and Restart link 120 Supported models only 121 SIP Line Entry 122 Call Features Settings 123 124 Link System 125 Link Syslog Parameters DSL Log Messages most common Administration Related Log MessagesLog Event Messages System Log Messages 127 Access-related Log Messages 128 129 Link Internal Servers 130 Link Software Hosting 131 List of Supported Games and Software 132 Rename a UserPC 133 Check the Enable Backup Gateway checkboxManual options 134 Automatic options 135 136 Link Ethernet MAC Override 137 Link Clear Options 138 Link Time Zone 139 SecurityButton Security 140 Link Passwords 141 142 Conﬁguring for a BreakWater SettingLink Firewall Use a Motorola Netopia Firewall 143 Tips for making your BreakWater Basic Firewall SelectionBasic Firewall Background 144 BreakWater Setting ClearSailing SilentRunning LANdLocked 145 146 Link IPSec 147 SafeHarbour IPSec VPN 148 Conﬁguring a SafeHarbour VPN Parameter Motorola Netopia Peer Gateway 149 150 Be sure that you have SafeHarbour VPN enabled 151 Parameter DescriptionsField Description Address/Value 152 153 154 Stateful Inspection Firewall installation procedureLink Stateful Inspection 155 Exposed Addresses 156 157 Open Ports in Default Stateful Inspection InstallationStateful Inspection Options Port Protocol Description LAN Private WAN Public Interface Basic protocol types Firewall TutorialGeneral ﬁrewall terms Basic IP packet components 159 Example TCP/UDP Ports TCP Port ServiceFirewall design rules Firewall Logic 160 Implied rulesExample ﬁlter set Example network Filter basicsExample ﬁlters What it means 162 163 Link Packet FilterWhat’s a ﬁlter and what’s a ﬁlter set? 164 How ﬁlter sets workFilter priority Port numbers How individual ﬁlters workﬁltering rule Parts of a ﬁlter 166 Port number comparisonsOther ﬁlter attributes 167 Putting the parts togetherFiltering example #1 168 169 Design guidelinesFiltering example #2 170 An approach to using ﬁlters 171 Working with IP Filters and Filter SetsAdding a ﬁlter set 172 Adding ﬁlters to a ﬁlter set 173 174 Enter the Source Mask for the source IP address 175 Deleting a ﬁlter set 176 Associating a Filter Set with an Interface 177 Policy-based Routing using FiltersetsTOS ﬁeld matching 178 179 Using the Security Monitoring LogLink Security Log TCP 180 181 Timestamp Background 182 InstallButton Install 183 Link Install SoftwareRequired Files Background 184 Install the Motorola Netopia ﬁrmware ImageMotorola Netopia ﬁrmware Image File Conﬁrm Motorola Netopia Firmware Image Files 185 Verify the Motorola Netopia Firmware Release 186 Procedure Install a New Feature Key File Link Install KeyUse Motorola Netopia Software Feature Keys Obtaining Software Feature Keys 188 189 To check your installed features 190 Link Install Certiﬁcate 191 Administrator’s Handbook 192 193 Basic Troubleshooting 194 Status Indicator LightsAction Ethernet 195 Model 2241N only 196 Ethernet 1, 2, 3 197 Wireless 198 199 Special patterns 200 LAN 1, 2, 3 201 Wireless Link 202 DSL 1 & 2 ADSL2+Models only Ethernet 1, 2, 3 203 204 LED Function Summary Matrix Link Wireless UnlitActive Trafﬁc Factory Reset Switch 207 Advanced Troubleshooting 208 Home Device Gateway 209 210 Expert ModeButton Troubleshoot 211 Link System Status 212 Link Ports Ethernet 213 Link Ports DSL 214 Link IP Interfaces 215 Link DSL Circuit Conﬁguration 216 Link System Log Entire 217 Link Diagnostics 218 Link Network Tools 219 220 If Ping is not successful, possible causes are 221 Administrator’s Handbook 222 223 Command Line Interface 224 Overview 225 Command Verbs Status and/or DescriptionKeywords Logging Using the CLI Help FacilitySaving Settings Starting and Ending a CLI Session 227 About Shell CommandsShell Command Shortcuts Shell Prompt Common Commands Shell Commands 229 License keyLoglevel level 230 NetstatNetstat -r Quit Reset crash Reset arpReset atm Reset cdmode Reset wepkeys Reset security-logReset wan-users all ip-address Reset wan Show diffserv Show crashShow dhcp agent Show dhcp server leases Show ip arp Show featuresShow etheroam ah Show group-mgmt Show ip state-insp Show ip ﬁrewallShow ip lan-discovery Show ip routes 236 Show statusShow summary Show vlan 237 View conﬁg Show wireless allShow wireless clients MACaddress Upload serveraddress ﬁlename conﬁrm WAN Commands Show ppp stats lcp ipcp About Config CommandsConfig Mode Prompt Navigating the Config Hierarchy 241 Entering Commands in Config ModeGuidelines Config Commands Set ip ethernet a ipaddress 242 Displaying Current Gateway SettingsStep Mode a CLI Conﬁguration Technique Validating Your Conﬁguration Remote ATA Conﬁguration Commands Config Commands Set ata proﬁle 0.. ata-proxy-port port Set ata proﬁle 0.. ata-user-password stringSet ata proﬁle 0.. ata-static-wan-gateway ipaddr Set ata proﬁle 0.. ata-proxy-server ipaddr DSL Commands Set atm vccn pppoe-sessions 1 Bridging SettingsSet atm vcc n vpi 0 Set atm vcc n vci 0 Set bridge dhcp-ﬁlterset string Set bridge table-timeout 30Set bridge sys-bridge on off Set bridge concurrent-bridging-routing on off Dhcp Settings Set dhcp gen-option option 1 Set dhcp range 2.. start-address ipaddressSet dhcp range 2.. end-address ipaddress Set dhcp gen-option name name 250 Option Data Format Data Size Can Bytes Conﬁgure 251 Set dhcp gen-option data-type ascii hex dotted-decimalSet dhcp gen-option data data 252 Set dhcp ﬁlterset name string rule n dhcp-option 0Set dhcp ﬁlterset name string rule n match-str matchstring 253 Set dhcp ﬁlterset name string rule n match-pool ipaddressSet dhcp ﬁlterset name string rule n absent-pool ipaddress Set dhcp assigned-ﬁlterset string DMT Settings Domain Name System Settings 256 257 Igmp Settings Set igmp query-response-intvl value Set igmp snooping off onSet igmp robustness value Set igmp query-intvl value IP Settings Set ip dsl vccn auto-sensing off dhcp/pppoe pppoe/pppoa Set ip dsl vccn restrictions admin-disabled noneSet ip dsl vccn netmask netmask Set ip dsl vccn addr-mapping on off Set ip ethernet a address ipaddress Set ip dsl vccn rip-send off v1 v2 v1-compat v2-MD5Set ip dsl vccn rip-receive Off v1 v2 v1-compat v2-MD5 Set ip ethernet a option on off Set ip ethernet a rip-receive off v1 v2 v1-compat v2-MD5 Set ip ethernet a restrictions none admin-disabledSet ip ethernet a netmask netmask Set ip ethernet a rip-send Off v1 v2 v1-compat v2-MD5 Set ip gateway interface ip-address ppp-vccn Set ip ethernet a subnet n address ipaddressSet ip ethernet a subnet n netmask netmask Set ip gateway option on off Set ip ip-ppp vccn auto-sensing off dhcp/pppoe pppoe/pppoa Set ip ip-ppp vccn restrictions admin-disabled noneSet ip ip-ppp vccn peer-address ipaddress Set ip ip-ppp vccn addr-mapping on off Set ip ip-ppp vccn unnumbered on off Set ip ip-ppp vccn rip-receive off v1 v2 v1-compat v2-MD5Set ip ip-ppp vccn igmp-null-source-addr on off Set ip ip-ppp vccn mcast-fwd on off Set ip prioritize off on Set ip static-arp ip-addressipaddressSet ip igmp-forwarding off on Set ip ipsec-passthrough off on 267 Set diffserv option off onSet diffserv lohi-ratio 60 100 percent 268 Qos off assure expedite network-control 269 Set diffserv qos dscp-map default custom 270 271 Queue Conﬁguration 272 273 Set queue name wfq weight-type bps 274 Set queue name priorityqueuename default-inputqueuename 275 Rate-limiting weighted fair queue to 100Kbps 276 Set ip sip-passthrough on offSet ip ethernet B rtsp-passthrough off on Set ip static-routes destination-networknetaddress Set ip-maps name name external-ip ip address IPMaps SettingsDelete ip static-routes destination-network netaddress Set ip-maps name name internal-ip ip address Network Address Translation NAT Pinhole Settings Network Address Translation NAT Default Settings PPPoE /PPPoA Settings Set ppp module vccn lcp-echo-requests on off Set ppp module vccn restart-timer integerSet ppp module vccn magic-number on off Set ppp module vccn protocol-compression on off Set ppp module vccn time-out integer Set ppp module vccn port-authentication username usernameSet ppp module vccn port-authentication password password Set ppp module vccn connection-type instant-on always-on Set wan-over-ether ipoe-sessions 1 PPPoE with IPoE SettingsSet wan-over-ether pppoe on off Set wan-over-ether pppoe-with-ipoe on off Set ip ip-ppp vcc1 igmp-null-source-addr off on Ethernet Port SettingsSet atm vcc n encap pppoe-llc Set ip ip-ppp vcc1 mcast-fwd on off 802.3ah Ethernet OAM Settings 285 Command Line Interface Preference SettingsSet preference verbose on off Set preference more lines 286 Port Renumbering SettingsSet servers web-http 1 Set servers telnet-tcp 1 Set security ipsec tunnels name Security SettingsSet security ipsec tunnels name 123 tun-enable on on off Set security ipsec option off on off 288 Set security ipsec tunnels name 123 IKE-mode DH-group 1 1 2 Set security ipsec tunnels name 123 xauth username username Set security ipsec tunnels name 123 xauth enable off onSet security ipsec tunnels name 123 xauth password password Set security ipsec tunnels name 123 nat-enable on off 290 Set security ipsec tunnels name 123 local-id idvalueSet security ipsec tunnels name 123 remote-id idvalue 291 292 Set security state-insp tcp-timeout 30Set security state-insp udp-timeout 30 Set security state-insp dos-detect off on 293 Set security state-insp xposed-addr exposed-address# n 294 Packet Filtering Settings 295 Operator 296 Snmp Settings 298 System SettingsSet system name name Set system ftp-server option off on Set system idle-timeout telnet 1...120 http 1Set system username administrator name user name Set system password admin user 300 Sleep Contact-email string@domainname location stringSet system zerotouch option on off Syslog 302 Default syslog installation procedure Wireless Settings supported models 304 305 Set wireless no-bridging off onSet wireless tx-power full medium fair low minimal 306 Set wireless wmm option off on 307 308 Set wireless network-id privacy pre-shared-key stringSet wireless network-id privacy default-keyid 309 Set wireless mac-auth option on offExample 40bit key 02468ACE02 Set radius alt-radius-secret sharedsecret Set radius radius-name servernamestringSet radius radius-secret sharedsecret Set radius alt-radius-name servernamestring Vlan Settings 312 Set vlan name name ports port port-pbits 0Set vlan name name ip-interface ipinterface 313 Assign an IP interface Set vlan name PPPoE11 id 314 Set vlan name Video31 ports eth1 tag on 315 VoIP settings Set voip phone 0 1 auth-id string Set voip phone 0 1 sip-user-password passwordSet voip phone 0 1 sip-user-display-name name Set voip phone 0 1 sip-user-name username 318 Set voip phone 0 1 codec G72640 priority 1 2 3 4 5 6 7 none 319 320 DSL Forum settings UPnP settings 322 TR-069 Backup IP Gateway Settings 324 Set ip backup-gateway default ipaddress 325 Vdsl Settings 326 327 Vdsl Parameters Accepted Values 328 Parameter 329 Accepted Values 330 331 Glossary 332 333 334 Ethernet crossover cable. See crossover cable 335 336 337 338 339 340 341 Administrator’s Handbook 342 343 Description International Agency approvalsManufacturer’s Declaration of Conformance North America 345 Declaration for Canadian users 346 Important Safety InstructionsAustralian Safety Information Telecommunication installation cautions 347 CFR Part 68 Information 348 Electrical Safety AdvisoryCopyright Acknowledgments 349 350 351 Wide Area Network TerminationPPPoE/PPPoA Point-to-Point Protocol over Ethernet/ATM 352 Simpliﬁed Local Area Network SetupInstant-On PPP Dhcp Dynamic Host Conﬁguration Protocol Server Embedded Web Server DiagnosticsManagement DNS Proxy 354 Remote Access ControlPassword Protection Network Address Translation NAT 355 Motorola Netopia Advanced Features for NATMotorola Netopia Gateway Internal Servers IP-Passthrough Default ServerPinholes Combination NAT Bypass Conﬁguration 357 VPN IPSec Pass ThroughVPN IPSec Tunnel Termination 358 Stateful Inspection FirewallSSL Certiﬁcate Support VLANs 359 Index 360 Config 361 362 NAT 264, 278 363 PPP 364 Shell 365 VPN 366 367 Administrator’s Handbook 368