Manuals / Motorola / Cell Phone / Cell Phone

Motorola 3342, 7000, 3352N, 2200 manual Administrator’s Handbook 368

Models: 2200 3342 3352N 3352 7000

1 368

Download 368 pages 62.68 Kb

Page 368

Administrator’s Handbook

368

Image 368

Motorola 3342, 7000, 3352N, 2200 manual Administrator’s Handbook 368

Contents

Administrator’s Handbook Administrator’s Handbook CopyrightPage Administrator’s Handbook Table of Contents Breadcrumb Trail Security Basic Troubleshooting Command Line Interface 223 Administrator’s Handbook Glossary Overview of Major Capabilities Introduction What’s NewAdministrator’s Handbook About Motorola Netopia Documentation Intended AudienceDocumentation Conventions GeneralCommand Line Interface Internal Web InterfaceOrganization Word About Example ScreensAdministrator’s Handbook Basic Mode Setup Important Safety Instructions Power Supply InstallationBewahren Sie diese Anweisungen auf Wichtige SicherheitshinweiseAchtung Setting up the Motorola Netopia Gateway Microsoft WindowsPage Macintosh MacOS 8 or higher or Mac OS Conﬁguring the Motorola Netopia Gateway MiAVo Vdsl and Ethernet WAN models QuickstartYou can skip to Home Page Basic Mode on PPPoE Quickstart Set up the Motorola Netopia Pocket Gateway Page Motorola Netopia Gateway Status Indicator Lights Home Page Basic Mode Down Link Manage My Account Link Status Details Link Enable Remote Management Link Expert Mode Link Update Firmware Link Factory Reset Accessing the Expert Web Interface Open the Web ConnectionAdministrator’s Handbook Home Page Expert Mode Home Page InformationSummary Information Field Status and/or DescriptionVoIP NATLink Breadcrumb Trail ToolbarNavigating the Web Interface Restart Button RestartLink Alert Symbol Help Button HelpLink Quickstart ConﬁgureButton Conﬁgure Administrator’s Handbook Link LAN Administrator’s Handbook Page Administrator’s Handbook Wireless supported models Privacy Page Advanced About Closed System Mode Administrator’s Handbook WPA Version Allowed Multiple SSIDsExamples Administrator’s Handbook Page WiFi Multimedia Wireless MAC Authorization Administrator’s Handbook Use Radius Server Advanced Network Conﬁguration page appears Link WAN PPP over Ethernet interfaceDHCP/PPPoE/PPPoA Autosensing Advanced RIP-1 compatibility, or RIP-2 with MD5Ethernet WAN interface Page Other WAN Options AdvancedIP Gateway Available Encapsulation types WAN Ethernet and Vdsl GatewaysAdsl Gateways Administrator’s Handbook Page Sustained Cell Rate SCR Class Transmit Priority CommentsLink Advanced Link IP Static Routes IP Static Route Entry page appearsChanges link Link IP Static ARP Link Pinholes Gateway Tips for making Pinhole EntriesPinhole Conﬁguration Procedure. Use the following steps Page Administrator’s Handbook Conﬁgure the IPMaps Feature FAQs for the IPMaps FeatureIPMaps Block Diagram Motorola Netopia Gateway WAN Interface LAN Interface192.168.1.1 192.168.1.2Link Default Server Internet Gateway Page Link Differentiated Services Page QoS Setting TOS Bit Value Behavior Link DNS Link Dhcp Server Link Radius Server Link Snmp Page 100 Link Igmp Internet Group Management ProtocolIgmp Version 3 supports 101 Link UPnP 102Link LAN Management 103Link Ethernet Bridge 104Conﬁguring for Bridge Mode 105106 Overview 107Ethernet Switching/Policy Setup 108Vlan Model Combining Bridging and Routing 109110 Vlan Port Conﬁguration screen appears 111112 113 114 115 Example 116117 118 Click the Save and Restart link 119Supported models only 120SIP Line Entry 121Call Features Settings 122123 Link System 124Link Syslog Parameters 125Administration Related Log Messages Log Event MessagesSystem Log Messages DSL Log Messages most commonAccess-related Log Messages 127128 Link Internal Servers 129Link Software Hosting 130List of Supported Games and Software 131Rename a UserPC 132133 Check the Enable Backup Gateway checkboxManual options Automatic options 134135 Link Ethernet MAC Override 136Link Clear Options 137Link Time Zone 138139 SecurityButton Security Link Passwords 140141 Conﬁguring for a BreakWater Setting Link FirewallUse a Motorola Netopia Firewall 142143 Tips for making your BreakWater Basic Firewall SelectionBasic Firewall Background BreakWater Setting ClearSailing SilentRunning LANdLocked 144145 Link IPSec 146SafeHarbour IPSec VPN 147Conﬁguring a SafeHarbour VPN 148149 Parameter Motorola Netopia Peer GatewayBe sure that you have SafeHarbour VPN enabled 150151 Parameter DescriptionsField Description 152 Address/Value153 154 Stateful Inspection Firewall installation procedureLink Stateful Inspection Exposed Addresses 155156 Open Ports in Default Stateful Inspection Installation Stateful Inspection OptionsPort Protocol Description LAN Private WAN Public Interface 157Firewall Tutorial General ﬁrewall termsBasic IP packet components Basic protocol typesExample TCP/UDP Ports TCP Port Service Firewall design rulesFirewall Logic 159160 Implied rulesExample ﬁlter set Filter basics Example ﬁltersWhat it means Example network162 163 Link Packet FilterWhat’s a ﬁlter and what’s a ﬁlter set? 164 How ﬁlter sets workFilter priority How individual ﬁlters work ﬁltering ruleParts of a ﬁlter Port numbers166 Port number comparisonsOther ﬁlter attributes 167 Putting the parts togetherFiltering example #1 168 169 Design guidelinesFiltering example #2 An approach to using ﬁlters 170171 Working with IP Filters and Filter SetsAdding a ﬁlter set Adding ﬁlters to a ﬁlter set 172173 Enter the Source Mask for the source IP address 174Deleting a ﬁlter set 175Associating a Filter Set with an Interface 176177 Policy-based Routing using FiltersetsTOS ﬁeld matching 178 179 Using the Security Monitoring LogLink Security Log 180 TCPTimestamp Background 181182 InstallButton Install Link Install Software Required FilesBackground 183Install the Motorola Netopia ﬁrmware Image Motorola Netopia ﬁrmware Image FileConﬁrm Motorola Netopia Firmware Image Files 184Verify the Motorola Netopia Firmware Release 185186 Link Install Key Use Motorola Netopia Software Feature KeysObtaining Software Feature Keys Procedure Install a New Feature Key File188 To check your installed features 189Link Install Certiﬁcate 190191 Administrator’s Handbook 192 Basic Troubleshooting 193Status Indicator Lights ActionEthernet 194Model 2241N only 195Ethernet 1, 2, 3 196Wireless 197198 Special patterns 199LAN 1, 2, 3 200Wireless Link 201202 DSL 1 & 2 ADSL2+Models only Ethernet 1, 2, 3 203 LED Function Summary Matrix 204Wireless Unlit ActiveTrafﬁc LinkFactory Reset Switch Advanced Troubleshooting 207Home 208209 Device Gateway210 Expert ModeButton Troubleshoot Link System Status 211Link Ports Ethernet 212Link Ports DSL 213Link IP Interfaces 214Link DSL Circuit Conﬁguration 215Link System Log Entire 216Link Diagnostics 217Link Network Tools 218219 If Ping is not successful, possible causes are 220221 Administrator’s Handbook 222 Command Line Interface 223Overview 224225 Command Verbs Status and/or DescriptionKeywords Using the CLI Help Facility Saving SettingsStarting and Ending a CLI Session LoggingAbout Shell Commands Shell Command ShortcutsShell Prompt 227Shell Commands Common Commands229 License keyLoglevel level Netstat Netstat -rQuit 230Reset arp Reset atmReset cdmode Reset crashReset security-log Reset wan-users all ip-addressReset wan Reset wepkeysShow crash Show dhcp agentShow dhcp server leases Show diffservShow features Show etheroam ahShow group-mgmt Show ip arpShow ip ﬁrewall Show ip lan-discoveryShow ip routes Show ip state-inspShow status Show summaryShow vlan 236237 Show wireless all Show wireless clients MACaddressUpload serveraddress ﬁlename conﬁrm View conﬁgWAN Commands About Config Commands Config Mode PromptNavigating the Config Hierarchy Show ppp stats lcp ipcpEntering Commands in Config Mode Guidelines Config CommandsSet ip ethernet a ipaddress 241Displaying Current Gateway Settings Step Mode a CLI Conﬁguration TechniqueValidating Your Conﬁguration 242Config Commands Remote ATA Conﬁguration CommandsSet ata proﬁle 0.. ata-user-password string Set ata proﬁle 0.. ata-static-wan-gateway ipaddrSet ata proﬁle 0.. ata-proxy-server ipaddr Set ata proﬁle 0.. ata-proxy-port portDSL Commands Bridging Settings Set atm vcc n vpi 0Set atm vcc n vci 0 Set atm vccn pppoe-sessions 1Set bridge table-timeout 30 Set bridge sys-bridge on offSet bridge concurrent-bridging-routing on off Set bridge dhcp-ﬁlterset stringDhcp Settings Set dhcp range 2.. start-address ipaddress Set dhcp range 2.. end-address ipaddressSet dhcp gen-option name name Set dhcp gen-option option 1Option Data Format Data Size Can Bytes Conﬁgure 250251 Set dhcp gen-option data-type ascii hex dotted-decimalSet dhcp gen-option data data 252 Set dhcp ﬁlterset name string rule n dhcp-option 0Set dhcp ﬁlterset name string rule n match-str matchstring Set dhcp ﬁlterset name string rule n match-pool ipaddress Set dhcp ﬁlterset name string rule n absent-pool ipaddressSet dhcp assigned-ﬁlterset string 253DMT Settings Domain Name System Settings 256 Igmp Settings 257Set igmp snooping off on Set igmp robustness valueSet igmp query-intvl value Set igmp query-response-intvl valueIP Settings Set ip dsl vccn restrictions admin-disabled none Set ip dsl vccn netmask netmaskSet ip dsl vccn addr-mapping on off Set ip dsl vccn auto-sensing off dhcp/pppoe pppoe/pppoaSet ip dsl vccn rip-send off v1 v2 v1-compat v2-MD5 Set ip dsl vccn rip-receive Off v1 v2 v1-compat v2-MD5Set ip ethernet a option on off Set ip ethernet a address ipaddressSet ip ethernet a restrictions none admin-disabled Set ip ethernet a netmask netmaskSet ip ethernet a rip-send Off v1 v2 v1-compat v2-MD5 Set ip ethernet a rip-receive off v1 v2 v1-compat v2-MD5Set ip ethernet a subnet n address ipaddress Set ip ethernet a subnet n netmask netmaskSet ip gateway option on off Set ip gateway interface ip-address ppp-vccnSet ip ip-ppp vccn restrictions admin-disabled none Set ip ip-ppp vccn peer-address ipaddressSet ip ip-ppp vccn addr-mapping on off Set ip ip-ppp vccn auto-sensing off dhcp/pppoe pppoe/pppoaSet ip ip-ppp vccn rip-receive off v1 v2 v1-compat v2-MD5 Set ip ip-ppp vccn igmp-null-source-addr on offSet ip ip-ppp vccn mcast-fwd on off Set ip ip-ppp vccn unnumbered on offSet ip static-arp ip-addressipaddress Set ip igmp-forwarding off onSet ip ipsec-passthrough off on Set ip prioritize off on267 Set diffserv option off onSet diffserv lohi-ratio 60 100 percent Qos off assure expedite network-control 268Set diffserv qos dscp-map default custom 269270 Queue Conﬁguration 271272 Set queue name wfq weight-type bps 273Set queue name priorityqueuename default-inputqueuename 274Rate-limiting weighted fair queue to 100Kbps 275Set ip sip-passthrough on off Set ip ethernet B rtsp-passthrough off onSet ip static-routes destination-networknetaddress 276IPMaps Settings Delete ip static-routes destination-network netaddressSet ip-maps name name internal-ip ip address Set ip-maps name name external-ip ip addressNetwork Address Translation NAT Default Settings Network Address Translation NAT Pinhole SettingsPPPoE /PPPoA Settings Set ppp module vccn restart-timer integer Set ppp module vccn magic-number on offSet ppp module vccn protocol-compression on off Set ppp module vccn lcp-echo-requests on offSet ppp module vccn port-authentication username username Set ppp module vccn port-authentication password passwordSet ppp module vccn connection-type instant-on always-on Set ppp module vccn time-out integerPPPoE with IPoE Settings Set wan-over-ether pppoe on offSet wan-over-ether pppoe-with-ipoe on off Set wan-over-ether ipoe-sessions 1Ethernet Port Settings Set atm vcc n encap pppoe-llcSet ip ip-ppp vcc1 mcast-fwd on off Set ip ip-ppp vcc1 igmp-null-source-addr off on802.3ah Ethernet OAM Settings Command Line Interface Preference Settings Set preference verbose on offSet preference more lines 285Port Renumbering Settings Set servers web-http 1Set servers telnet-tcp 1 286Security Settings Set security ipsec tunnels name 123 tun-enable on on offSet security ipsec option off on off Set security ipsec tunnels nameSet security ipsec tunnels name 123 IKE-mode DH-group 1 1 2 288Set security ipsec tunnels name 123 xauth enable off on Set security ipsec tunnels name 123 xauth password passwordSet security ipsec tunnels name 123 nat-enable on off Set security ipsec tunnels name 123 xauth username username290 Set security ipsec tunnels name 123 local-id idvalueSet security ipsec tunnels name 123 remote-id idvalue 291 Set security state-insp tcp-timeout 30 Set security state-insp udp-timeout 30Set security state-insp dos-detect off on 292Set security state-insp xposed-addr exposed-address# n 293Packet Filtering Settings 294Operator 295296 Snmp Settings 298 System SettingsSet system name name Set system idle-timeout telnet 1...120 http 1 Set system username administrator name user nameSet system password admin user Set system ftp-server option off on300 Sleep Contact-email string@domainname location stringSet system zerotouch option on off Syslog Default syslog installation procedure 302Wireless Settings supported models 304 305 Set wireless no-bridging off onSet wireless tx-power full medium fair low minimal Set wireless wmm option off on 306307 308 Set wireless network-id privacy pre-shared-key stringSet wireless network-id privacy default-keyid 309 Set wireless mac-auth option on offExample 40bit key 02468ACE02 Set radius radius-name servernamestring Set radius radius-secret sharedsecretSet radius alt-radius-name servernamestring Set radius alt-radius-secret sharedsecretVlan Settings 312 Set vlan name name ports port port-pbits 0Set vlan name name ip-interface ipinterface Assign an IP interface 313314 Set vlan name PPPoE11 id315 Set vlan name Video31 ports eth1 tag onVoIP settings Set voip phone 0 1 sip-user-password password Set voip phone 0 1 sip-user-display-name nameSet voip phone 0 1 sip-user-name username Set voip phone 0 1 auth-id stringSet voip phone 0 1 codec G72640 priority 1 2 3 4 5 6 7 none 318319 320 UPnP settings DSL Forum settingsTR-069 322Backup IP Gateway Settings Set ip backup-gateway default ipaddress 324Vdsl Settings 325326 Vdsl Parameters Accepted Values 327Parameter 328Accepted Values 329330 Glossary 331332 333 Ethernet crossover cable. See crossover cable 334335 336 337 338 339 340 341 Administrator’s Handbook 342 Description 343Agency approvals Manufacturer’s Declaration of ConformanceNorth America InternationalDeclaration for Canadian users 345Important Safety Instructions Australian Safety InformationTelecommunication installation cautions 346CFR Part 68 Information 347348 Electrical Safety AdvisoryCopyright Acknowledgments 349 350 351 Wide Area Network TerminationPPPoE/PPPoA Point-to-Point Protocol over Ethernet/ATM Simpliﬁed Local Area Network Setup Instant-On PPPDhcp Dynamic Host Conﬁguration Protocol Server 352Diagnostics ManagementDNS Proxy Embedded Web ServerRemote Access Control Password ProtectionNetwork Address Translation NAT 354Motorola Netopia Advanced Features for NAT Motorola Netopia GatewayInternal Servers 355Default Server PinholesCombination NAT Bypass Conﬁguration IP-Passthrough357 VPN IPSec Pass ThroughVPN IPSec Tunnel Termination Stateful Inspection Firewall SSL Certiﬁcate SupportVLANs 358Index 359Config 360361 NAT 264, 278 362PPP 363Shell 364VPN 365366 367 Administrator’s Handbook 368