Manuals / Motorola / Cell Phone / Cell Phone

Motorola 7000, 3352N, 3342, 2200 manual Vpn, 365

Models: 2200 3342 3352N 3352 7000

1 368

Download 368 pages 62.68 Kb

Page 365

Image 365

System contact, SNMP 297 System diagnostics 298 system idle-timeout 299

Telnet 226, 278 Telnet command 238 Telnet traffic 286 TFTP 278

TFTP server 229 Toolbar 43

TOS bit 165, 177 TraceRoute 218, 354 Trap 297

Trivial File Transfer Protocol 229 Truncation 240

UPnP 102 User name 226

User password 39, 140, 226

set atm 245

View command 242 view config 238 VLAN ID 111 VLAN Settings 311 VLANs 107 Voice-over-IP 120, 316 VoIP 120, 316

VPN

IPSec Pass Through 357 IPSec Tunnel Termination 357

Weighted Fair Queue 273 weighted fair queuing 271 Wide Area Network 351 WiFi Multimedia 62 Wireless 53

365

Page 365

Image 365

Motorola 7000, 3352N, 3342, 2200 manual Vpn, 365

Contents

Administrator’s Handbook Copyright Administrator’s HandbookPage Administrator’s Handbook Table of Contents Breadcrumb Trail Security Basic Troubleshooting Command Line Interface 223 Administrator’s Handbook Glossary Overview of Major Capabilities What’s New IntroductionAdministrator’s Handbook Intended Audience About Motorola Netopia DocumentationDocumentation Conventions GeneralInternal Web Interface Command Line InterfaceWord About Example Screens OrganizationAdministrator’s Handbook Basic Mode Setup Power Supply Installation Important Safety InstructionsBewahren Sie diese Anweisungen auf Wichtige SicherheitshinweiseAchtung Microsoft Windows Setting up the Motorola Netopia GatewayPage Macintosh MacOS 8 or higher or Mac OS MiAVo Vdsl and Ethernet WAN models Quickstart Conﬁguring the Motorola Netopia GatewayYou can skip to Home Page Basic Mode on PPPoE Quickstart Set up the Motorola Netopia Pocket Gateway Page Motorola Netopia Gateway Status Indicator Lights Home Page Basic Mode Down Link Manage My Account Link Status Details Link Enable Remote Management Link Expert Mode Link Update Firmware Link Factory Reset Open the Web Connection Accessing the Expert Web InterfaceAdministrator’s Handbook Home Page Information Home Page Expert ModeSummary Information Field Status and/or DescriptionNAT VoIPLink Breadcrumb Trail ToolbarNavigating the Web Interface Button Restart RestartLink Alert Symbol Button Help HelpLink Quickstart ConﬁgureButton Conﬁgure Administrator’s Handbook Link LAN Administrator’s Handbook Page Administrator’s Handbook Wireless supported models Privacy Page Advanced About Closed System Mode Administrator’s Handbook WPA Version Allowed Multiple SSIDsExamples Administrator’s Handbook Page WiFi Multimedia Wireless MAC Authorization Administrator’s Handbook Use Radius Server Advanced Network Conﬁguration page appears PPP over Ethernet interface Link WANDHCP/PPPoE/PPPoA Autosensing RIP-1 compatibility, or RIP-2 with MD5 AdvancedEthernet WAN interface Page Other WAN Options AdvancedIP Gateway Available Encapsulation types WAN Ethernet and Vdsl GatewaysAdsl Gateways Administrator’s Handbook Page Sustained Cell Rate SCR Transmit Priority Comments ClassLink Advanced IP Static Route Entry page appears Link IP Static RoutesChanges link Link IP Static ARP Link Pinholes Tips for making Pinhole Entries GatewayPinhole Conﬁguration Procedure. Use the following steps Page Administrator’s Handbook FAQs for the IPMaps Feature Conﬁgure the IPMaps FeatureMotorola Netopia Gateway WAN Interface LAN Interface IPMaps Block Diagram192.168.1.1 192.168.1.2Link Default Server Internet Gateway Page Link Differentiated Services Page QoS Setting TOS Bit Value Behavior Link DNS Link Dhcp Server Link Radius Server Link Snmp Page 100 Link Igmp Internet Group Management ProtocolIgmp Version 3 supports 101 102 Link UPnP103 Link LAN Management104 Link Ethernet Bridge105 Conﬁguring for Bridge Mode106 107 Overview108 Ethernet Switching/Policy Setup109 Vlan Model Combining Bridging and Routing110 111 Vlan Port Conﬁguration screen appears112 113 114 115 116 Example117 118 119 Click the Save and Restart link120 Supported models only121 SIP Line Entry122 Call Features Settings123 124 Link System125 Link Syslog ParametersLog Event Messages Administration Related Log MessagesSystem Log Messages DSL Log Messages most common127 Access-related Log Messages128 129 Link Internal Servers130 Link Software Hosting131 List of Supported Games and Software132 Rename a UserPC133 Check the Enable Backup Gateway checkboxManual options 134 Automatic options135 136 Link Ethernet MAC Override137 Link Clear Options138 Link Time Zone139 SecurityButton Security 140 Link Passwords141 Link Firewall Conﬁguring for a BreakWater SettingUse a Motorola Netopia Firewall 142143 Tips for making your BreakWater Basic Firewall SelectionBasic Firewall Background 144 BreakWater Setting ClearSailing SilentRunning LANdLocked145 146 Link IPSec147 SafeHarbour IPSec VPN148 Conﬁguring a SafeHarbour VPNParameter Motorola Netopia Peer Gateway 149150 Be sure that you have SafeHarbour VPN enabled151 Parameter DescriptionsField Description Address/Value 152153 154 Stateful Inspection Firewall installation procedureLink Stateful Inspection 155 Exposed Addresses156 Stateful Inspection Options Open Ports in Default Stateful Inspection InstallationPort Protocol Description LAN Private WAN Public Interface 157General ﬁrewall terms Firewall TutorialBasic IP packet components Basic protocol typesFirewall design rules Example TCP/UDP Ports TCP Port ServiceFirewall Logic 159160 Implied rulesExample ﬁlter set Example ﬁlters Filter basicsWhat it means Example network162 163 Link Packet FilterWhat’s a ﬁlter and what’s a ﬁlter set? 164 How ﬁlter sets workFilter priority ﬁltering rule How individual ﬁlters workParts of a ﬁlter Port numbers166 Port number comparisonsOther ﬁlter attributes 167 Putting the parts togetherFiltering example #1 168 169 Design guidelinesFiltering example #2 170 An approach to using ﬁlters171 Working with IP Filters and Filter SetsAdding a ﬁlter set 172 Adding ﬁlters to a ﬁlter set173 174 Enter the Source Mask for the source IP address175 Deleting a ﬁlter set176 Associating a Filter Set with an Interface177 Policy-based Routing using FiltersetsTOS ﬁeld matching 178 179 Using the Security Monitoring LogLink Security Log TCP 180181 Timestamp Background182 InstallButton Install Required Files Link Install SoftwareBackground 183Motorola Netopia ﬁrmware Image File Install the Motorola Netopia ﬁrmware ImageConﬁrm Motorola Netopia Firmware Image Files 184185 Verify the Motorola Netopia Firmware Release186 Use Motorola Netopia Software Feature Keys Link Install KeyObtaining Software Feature Keys Procedure Install a New Feature Key File188 189 To check your installed features190 Link Install Certiﬁcate191 Administrator’s Handbook 192 193 Basic TroubleshootingAction Status Indicator LightsEthernet 194195 Model 2241N only196 Ethernet 1, 2, 3197 Wireless198 199 Special patterns200 LAN 1, 2, 3201 Wireless Link202 DSL 1 & 2 ADSL2+Models only Ethernet 1, 2, 3 203 204 LED Function Summary MatrixActive Wireless UnlitTrafﬁc LinkFactory Reset Switch 207 Advanced Troubleshooting208 HomeDevice Gateway 209210 Expert ModeButton Troubleshoot 211 Link System Status212 Link Ports Ethernet213 Link Ports DSL214 Link IP Interfaces215 Link DSL Circuit Conﬁguration216 Link System Log Entire217 Link Diagnostics218 Link Network Tools219 220 If Ping is not successful, possible causes are221 Administrator’s Handbook 222 223 Command Line Interface224 Overview225 Command Verbs Status and/or DescriptionKeywords Saving Settings Using the CLI Help FacilityStarting and Ending a CLI Session LoggingShell Command Shortcuts About Shell CommandsShell Prompt 227Common Commands Shell Commands229 License keyLoglevel level Netstat -r NetstatQuit 230Reset atm Reset arpReset cdmode Reset crashReset wan-users all ip-address Reset security-logReset wan Reset wepkeysShow dhcp agent Show crashShow dhcp server leases Show diffservShow etheroam ah Show featuresShow group-mgmt Show ip arpShow ip lan-discovery Show ip ﬁrewallShow ip routes Show ip state-inspShow summary Show statusShow vlan 236237 Show wireless clients MACaddress Show wireless allUpload serveraddress ﬁlename conﬁrm View conﬁgWAN Commands Config Mode Prompt About Config CommandsNavigating the Config Hierarchy Show ppp stats lcp ipcpGuidelines Config Commands Entering Commands in Config ModeSet ip ethernet a ipaddress 241Step Mode a CLI Conﬁguration Technique Displaying Current Gateway SettingsValidating Your Conﬁguration 242Remote ATA Conﬁguration Commands Config CommandsSet ata proﬁle 0.. ata-static-wan-gateway ipaddr Set ata proﬁle 0.. ata-user-password stringSet ata proﬁle 0.. ata-proxy-server ipaddr Set ata proﬁle 0.. ata-proxy-port portDSL Commands Set atm vcc n vpi 0 Bridging SettingsSet atm vcc n vci 0 Set atm vccn pppoe-sessions 1Set bridge sys-bridge on off Set bridge table-timeout 30Set bridge concurrent-bridging-routing on off Set bridge dhcp-ﬁlterset stringDhcp Settings Set dhcp range 2.. end-address ipaddress Set dhcp range 2.. start-address ipaddressSet dhcp gen-option name name Set dhcp gen-option option 1250 Option Data Format Data Size Can Bytes Conﬁgure251 Set dhcp gen-option data-type ascii hex dotted-decimalSet dhcp gen-option data data 252 Set dhcp ﬁlterset name string rule n dhcp-option 0Set dhcp ﬁlterset name string rule n match-str matchstring Set dhcp ﬁlterset name string rule n absent-pool ipaddress Set dhcp ﬁlterset name string rule n match-pool ipaddressSet dhcp assigned-ﬁlterset string 253DMT Settings Domain Name System Settings 256 257 Igmp SettingsSet igmp robustness value Set igmp snooping off onSet igmp query-intvl value Set igmp query-response-intvl valueIP Settings Set ip dsl vccn netmask netmask Set ip dsl vccn restrictions admin-disabled noneSet ip dsl vccn addr-mapping on off Set ip dsl vccn auto-sensing off dhcp/pppoe pppoe/pppoaSet ip dsl vccn rip-receive Off v1 v2 v1-compat v2-MD5 Set ip dsl vccn rip-send off v1 v2 v1-compat v2-MD5Set ip ethernet a option on off Set ip ethernet a address ipaddressSet ip ethernet a netmask netmask Set ip ethernet a restrictions none admin-disabledSet ip ethernet a rip-send Off v1 v2 v1-compat v2-MD5 Set ip ethernet a rip-receive off v1 v2 v1-compat v2-MD5Set ip ethernet a subnet n netmask netmask Set ip ethernet a subnet n address ipaddressSet ip gateway option on off Set ip gateway interface ip-address ppp-vccnSet ip ip-ppp vccn peer-address ipaddress Set ip ip-ppp vccn restrictions admin-disabled noneSet ip ip-ppp vccn addr-mapping on off Set ip ip-ppp vccn auto-sensing off dhcp/pppoe pppoe/pppoaSet ip ip-ppp vccn igmp-null-source-addr on off Set ip ip-ppp vccn rip-receive off v1 v2 v1-compat v2-MD5Set ip ip-ppp vccn mcast-fwd on off Set ip ip-ppp vccn unnumbered on offSet ip igmp-forwarding off on Set ip static-arp ip-addressipaddressSet ip ipsec-passthrough off on Set ip prioritize off on267 Set diffserv option off onSet diffserv lohi-ratio 60 100 percent 268 Qos off assure expedite network-control269 Set diffserv qos dscp-map default custom270 271 Queue Conﬁguration272 273 Set queue name wfq weight-type bps274 Set queue name priorityqueuename default-inputqueuename275 Rate-limiting weighted fair queue to 100KbpsSet ip ethernet B rtsp-passthrough off on Set ip sip-passthrough on offSet ip static-routes destination-networknetaddress 276Delete ip static-routes destination-network netaddress IPMaps SettingsSet ip-maps name name internal-ip ip address Set ip-maps name name external-ip ip addressNetwork Address Translation NAT Pinhole Settings Network Address Translation NAT Default SettingsPPPoE /PPPoA Settings Set ppp module vccn magic-number on off Set ppp module vccn restart-timer integerSet ppp module vccn protocol-compression on off Set ppp module vccn lcp-echo-requests on offSet ppp module vccn port-authentication password password Set ppp module vccn port-authentication username usernameSet ppp module vccn connection-type instant-on always-on Set ppp module vccn time-out integerSet wan-over-ether pppoe on off PPPoE with IPoE SettingsSet wan-over-ether pppoe-with-ipoe on off Set wan-over-ether ipoe-sessions 1Set atm vcc n encap pppoe-llc Ethernet Port SettingsSet ip ip-ppp vcc1 mcast-fwd on off Set ip ip-ppp vcc1 igmp-null-source-addr off on802.3ah Ethernet OAM Settings Set preference verbose on off Command Line Interface Preference SettingsSet preference more lines 285Set servers web-http 1 Port Renumbering SettingsSet servers telnet-tcp 1 286Set security ipsec tunnels name 123 tun-enable on on off Security SettingsSet security ipsec option off on off Set security ipsec tunnels name288 Set security ipsec tunnels name 123 IKE-mode DH-group 1 1 2Set security ipsec tunnels name 123 xauth password password Set security ipsec tunnels name 123 xauth enable off onSet security ipsec tunnels name 123 nat-enable on off Set security ipsec tunnels name 123 xauth username username290 Set security ipsec tunnels name 123 local-id idvalueSet security ipsec tunnels name 123 remote-id idvalue 291 Set security state-insp udp-timeout 30 Set security state-insp tcp-timeout 30Set security state-insp dos-detect off on 292293 Set security state-insp xposed-addr exposed-address# n294 Packet Filtering Settings295 Operator296 Snmp Settings 298 System SettingsSet system name name Set system username administrator name user name Set system idle-timeout telnet 1...120 http 1Set system password admin user Set system ftp-server option off on300 Sleep Contact-email string@domainname location stringSet system zerotouch option on off Syslog 302 Default syslog installation procedureWireless Settings supported models 304 305 Set wireless no-bridging off onSet wireless tx-power full medium fair low minimal 306 Set wireless wmm option off on307 308 Set wireless network-id privacy pre-shared-key stringSet wireless network-id privacy default-keyid 309 Set wireless mac-auth option on offExample 40bit key 02468ACE02 Set radius radius-secret sharedsecret Set radius radius-name servernamestringSet radius alt-radius-name servernamestring Set radius alt-radius-secret sharedsecretVlan Settings 312 Set vlan name name ports port port-pbits 0Set vlan name name ip-interface ipinterface 313 Assign an IP interfaceSet vlan name PPPoE11 id 314Set vlan name Video31 ports eth1 tag on 315VoIP settings Set voip phone 0 1 sip-user-display-name name Set voip phone 0 1 sip-user-password passwordSet voip phone 0 1 sip-user-name username Set voip phone 0 1 auth-id string318 Set voip phone 0 1 codec G72640 priority 1 2 3 4 5 6 7 none319 320 DSL Forum settings UPnP settings322 TR-069Backup IP Gateway Settings 324 Set ip backup-gateway default ipaddress325 Vdsl Settings326 327 Vdsl Parameters Accepted Values328 Parameter329 Accepted Values330 331 Glossary332 333 334 Ethernet crossover cable. See crossover cable335 336 337 338 339 340 341 Administrator’s Handbook 342 343 DescriptionManufacturer’s Declaration of Conformance Agency approvalsNorth America International345 Declaration for Canadian usersAustralian Safety Information Important Safety InstructionsTelecommunication installation cautions 346347 CFR Part 68 Information348 Electrical Safety AdvisoryCopyright Acknowledgments 349 350 351 Wide Area Network TerminationPPPoE/PPPoA Point-to-Point Protocol over Ethernet/ATM Instant-On PPP Simpliﬁed Local Area Network SetupDhcp Dynamic Host Conﬁguration Protocol Server 352Management DiagnosticsDNS Proxy Embedded Web ServerPassword Protection Remote Access ControlNetwork Address Translation NAT 354Motorola Netopia Gateway Motorola Netopia Advanced Features for NATInternal Servers 355Pinholes Default ServerCombination NAT Bypass Conﬁguration IP-Passthrough357 VPN IPSec Pass ThroughVPN IPSec Tunnel Termination SSL Certiﬁcate Support Stateful Inspection FirewallVLANs 358359 Index360 Config361 362 NAT 264, 278363 PPP364 Shell365 VPN366 367 Administrator’s Handbook 368