Administrator’s Handbook

Soft MBytes. Setting the Soft MBytes parameter forces the renegotiation of the IPSec Security Associa- tions (SAs) at the configured Soft MByte value. The value can be configured between 1 and 1,000,000 MB and refers to data traffic passed. If this value is not achieved, the Hard MBytes parameter is enforced.

Soft Seconds. Setting the Soft Seconds parameter forces the renegotiation of the IPSec Security Associa- tions (SAs) at the configured Soft Seconds value. The value can be configured between 60 and 1,000,000 seconds.

SPI . The Security Parameter Index is an identifier for the encryption and authentication algorithm and key. The SPI indicates to the remote firewall the algorithm and key being used to encrypt and authenticate a packet. It should be a unique number greater than 255.

SSL. Secure Sockets Layer. A protocol developed by Netscape for transmitting private documents via the Internet. SSL uses a cryptographic system that uses two keys to encrypt data: a public key known to every- one and a private or secret key known only to the recipient of the message.

STATEFUL. The Netopia Gateway monitors and maintains the state of any network transaction. In terms of network request-and-reply, state consists of the source IP address, destination IP address, communication ports, and data sequence. The Netopia Gateway processes the stream of a network conversation, rather than just individual packets. It verifies that packets are sent from and received by the proper IP addresses along the proper communication ports in the correct order and that no imposter packets interrupt the packet flow. Packet filtering monitors only the ports involved, while the Netopia Gateway analyzes the con- tinuous conversation stream, preventing session hijacking and denial of service attacks.

static route. Route entered manually in a routing table.

subnet mask. A 32-bit address mask that identifies which bits of an IP address represent network address information and which bits represent node identifier information.

synchronous communication. Method of data communication requiring the transmission of timing sig- nals to keep peers synchronized in sending and receiving blocks of data.

-----T-----

telnet. IP protocol that lets a user on one host establish and use a virtual terminal connection to a remote host.

TR-064.TR-064 is a LAN-side DSL Gateway configuration specification; an extension of UPnP. It defines more services to locally manage a Gateway.

TR-069.TR-069 is a WAN-side DSL Gateway Management specification; provides services similar to UPnP and TR-064. The communication between a Gateway and management agent in UPnP and TR-064 is strictly over the LAN, whereas the communication in TR-069 is over the WAN link for some features and over the LAN for others. TR-069 allows a remote Auto-Config Server to provision and manage a Gateway.

TR-101.Standard for a network architecture where the aggregation network is Ethernet-based while the DSL access network is still ATM-over-DSL-based. This facilitates multiplay service delivery over a range of scaleable broadband access technologies. Ratified by the DSL Forum in late April 2006, TR-101 enables service providers to evolve their DSL access networks to better support faster access rates and to intro- duce new multiplay services across IP-based broadband networks, all through a single gateway. These stan- dards are particularly important for widespread delivery of Internet Protocol Television (IPTV). TR-101 outlines the specific features necessary for IP-based network equipment to deliver multiple services with

340

Page 340
Image 340
Motorola 7000, 3352N, 3342, 2200 manual 340