Page 2 - Trademarks
2 N0115791 N0115791 Copyright © Nortel 2005–2006 All rights reserved.The information in this document is subject to change without notice. The statements, configurations, technical data, and recommendations in this document are believed to be accurate and reliable, but are presented without express ...
Page 3 - BCM50a Integrated Router Configuration — Advanced; Contents
3 BCM50a Integrated Router Configuration — Advanced Contents Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Before you begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ....
Page 9 - Appendix B
Contents 9 BCM50a Integrated Router Configuration — Advanced Chapter 16System Maintenance menus 8 to 10 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175 Command Interpreter mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175 Command syntax . ...
Page 13 - Figures
13 BCM50a Integrated Router Configuration — Advanced Figures Figure 1 Secure Internet Access and VPN Application . . . . . . . . . . . . . . . . . . . . . 38 Figure 2 Initial screen . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Figure 3 SMT Login . ...
Page 19 - Tables
19 BCM50a Integrated Router Configuration — Advanced Tables Table 1 Feature specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Table 2 Main menu commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Table 3 Main menu ...
Page 23 - Preface; Before you begin; This guide uses the following text conventions:; Bold Times New Roman; Menu choices are written in; Bold Arial
23 BCM50a Integrated Router Configuration — Advanced Preface Before you begin This guide is designed to assist you with advanced configuration of your BCM50a Integrated Router for its various applications. The SMT parts of this manual contain background information solely on features not configurabl...
Page 24 - Related publications; BCM50a Integrated Router Configuration - Basics; Hard-copy technical manuals; Arial
24 Preface N0115791 Related publications For more information about using the BCM50a Integrated Router, refer to the following publications: • BCM50a Integrated Router Configuration - Basics ( N0115790 ) The basic manual covers how to use the WebGUI to configure your BCM50a Integrated Router. • WebG...
Page 25 - USA and Canada Authorized Distributors; Technical Support - CTAS; European Alternative:; United Kingdom
Preface 25 BCM50a Integrated Router Configuration — Advanced USA and Canada Authorized Distributors Technical Support - GNTS/GNPS Telephone: 1-800-4NORTEL (1-800-466-7835) If you already have a PIN Code, you can enter Express Routing Code (ERC) 196#. If you do not yet have a PIN Code, or for general...
Page 29 - Introducing the BCM50a Integrated Router; Table 1; Feature specifications
29 BCM50a Integrated Router Configuration — Advanced Chapter 1Getting to know your BCM50a Integrated Router This chapter introduces the main features and applications of the BCM50a Integrated Router. Introducing the BCM50a Integrated Router The BCM50a Integrated Router is an ideal secure gateway for...
Page 30 - Chapter 1 Getting to know your BCM50a Integrated Router; Physical features; High-speed Internet access
30 Chapter 1 Getting to know your BCM50a Integrated Router N0115791 Physical features High-speed Internet access Your BCM50a Integrated Router supports ADSL2+ (Asymmetrical Digital Subscriber Line) for high transmission speeds and long connection distances. ADSL standards • Multimode standard (ANSI ...
Page 31 - Autonegotiating rate adaptation; Networking compatibility
Chapter 1 Getting to know your BCM50a Integrated Router 31 BCM50a Integrated Router Configuration — Advanced • Extended-reach ADSL (ER ADSL) • SRA (Seamless Rate Adaptation) • Autonegotiating rate adaptation • ADSL physical connection ATM (Asynchronous Transfer Mode) AAL5 (Adaptation Layer type 5)· ...
Page 32 - Time and date; Nonphysical features; IPSec VPN capability
32 Chapter 1 Getting to know your BCM50a Integrated Router N0115791 Autonegotiating 10/100 Mb/s Ethernet LAN The LAN interfaces automatically detect if they are on a 10 or a 100 Mb/s Ethernet. Autosensing 10/100 Mb/s Ethernet LAN The LAN interfaces automatically adjust to either a crossover or strai...
Page 33 - Certificates
Chapter 1 Getting to know your BCM50a Integrated Router 33 BCM50a Integrated Router Configuration — Advanced Certificates The BCM50a Integrated Router can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. Certificates provide a way ...
Page 34 - Content filtering
34 Chapter 1 Getting to know your BCM50a Integrated Router N0115791 Content filtering The BCM50a Integrated Router can block web features such as ActiveX controls, Java applets, and cookies, as well as disable web proxies. The BCM50a Integrated Router can block specific URLs by using the keyword fea...
Page 35 - IP Multicast
Chapter 1 Getting to know your BCM50a Integrated Router 35 BCM50a Integrated Router Configuration — Advanced IP Multicast The BCM50a Integrated Router can use IP multicast to deliver IP packets to a specific group of hosts. IGMP (Internet Group Management Protocol) is the protocol used to support mu...
Page 36 - Traffic Redirect; Built in message logging and packet tracing
36 Chapter 1 Getting to know your BCM50a Integrated Router N0115791 Traffic Redirect Traffic Redirect forwards WAN traffic to a backup gateway when the BCM50a Integrated Router cannot connect to the Internet, thus acting as an auxiliary backup when your regular WAN connection fails. Port Forwarding ...
Page 37 - Upgrade BCM50a Integrated Router Firmware; Applications for the BCM50a Integrated Router; Secure broadband internet access and VPN
Chapter 1 Getting to know your BCM50a Integrated Router 37 BCM50a Integrated Router Configuration — Advanced Upgrade BCM50a Integrated Router Firmware The firmware of the BCM50a Integrated Router can be upgraded manually through the WebGUI. Embedded FTP and TFTP Servers The embedded FTP and TFTP ser...
Page 38 - Figure 1; Secure Internet Access and VPN Application; Electro-static Discharge can disrupt the router. Use; BCM50a Integrated Router
38 Chapter 1 Getting to know your BCM50a Integrated Router N0115791 Figure 1 Secure Internet Access and VPN Application Caution: Electro-static Discharge can disrupt the router. Use appropriate handling precautions to avoid ESD. Avoid touching the connectors on the router, particularly when it is in...
Page 39 - Introduction to the SMT; he BCM50a Integrated Router SMT (System Management Terminal) is a; After the tests, the BCM50a Integrated Router asks you to press; to; Figure 2; Initial screen; Logging on to the SMT; The logon screen appears after you press
39 BCM50a Integrated Router Configuration — Advanced Chapter 2Introducing the SMT This chapter explains how to access the System Management Terminal and gives an overview of its menus. Introduction to the SMT T he BCM50a Integrated Router SMT (System Management Terminal) is a menu-driven interface t...
Page 40 - Chapter 2 Introducing the SMT; Type the username (“nnadmin “is the default) and press; Figure 3; SMT Login; the password, the screen displays an X for each character you type.; Navigating the SMT interface; Table 2; Main menu commands
40 Chapter 2 Introducing the SMT N0115791 Type the username (“nnadmin “is the default) and press [ENTER] . The logon screen prompts you to enter the password. Figure 3 SMT Login Type the password (“PlsChgMe!” is the default) and press [ENTER] . As you type the password, the screen displays an X for ...
Page 41 - Main menu; Main Menu; Figure 4
Chapter 2 Introducing the SMT 41 BCM50a Integrated Router Configuration — Advanced Main menu After you enter the password, the SMT displays the BCM50a Integrated Router Main Menu , as shown in Figure 4 . Not all models have all the features shown. Move the cursor [ENTER] or [UP] or [DOWN] arrow keys...
Page 42 - Table 3; Main menu summary
42 Chapter 2 Introducing the SMT N0115791 Figure 4 Main menu Table 3 describes the fields in Figure 4 . BCM50a Integrated Router Main Menu Getting Started Advanced Management 1. General Setup 2. WAN Setup3. LAN Setup 4. Internet Access Setup Advanced Applications11. Remote Node Setup 12. Static Rout...
Page 43 - Changing the system password; Menu 23 – System Security; Figure 5; Menu 23.1 – System Security – Change Password; Old Password
Chapter 2 Introducing the SMT 43 BCM50a Integrated Router Configuration — Advanced Changing the system password To change the BCM50a Integrated Router administrator password:. 1 From the main menu, enter 23 to display Menu 23 – System Security . 2 Enter 1 to display Menu 23.1 – System Security – Cha...
Page 44 - SMT menus at a glance; Figure 6; SMT overview
44 Chapter 2 Introducing the SMT N0115791 SMT menus at a glance Figure 6 SMT overview
Page 45 - SMT menu 1 - general setup; Introduction to general setup; Menu 1 - general setup; contains administrative and system-related information.; Configuring general setup; Enter 1 in the main menu to open; Menu 1: general setup; The; screen appears, as shown in; Figure 7; Menu 1 – General Setup
45 BCM50a Integrated Router Configuration — Advanced SMT menu 1 - general setup Introduction to general setup Menu 1 - general setup contains administrative and system-related information. Configuring general setup Enter 1 in the main menu to open Menu 1: general setup . The Menu 1 - General Setup s...
Page 46 - Chapter 2 SMT menu 1 - general setup; Table 4; General setup menu fields
46 Chapter 2 SMT menu 1 - general setup N0115791 Table 4 describes the fields in Figure 7 . Table 4 General setup menu fields Field Description Example System name Choose a descriptive name for identification purposes. Nortel recommends you enter your computer name in this field. This name can be up...
Page 48 - Configuring dynamic DNS; Menu 1: General Setup; Figure 8
48 Chapter 2 SMT menu 1 - general setup N0115791 Configuring dynamic DNS To configure Dynamic DNS, go to Menu 1: General Setup and press [SPACE BAR] to select Yes in the Edit Dynamic DNS field. Press [ENTER] to display Menu 1.1— Configure Dynamic DNS ( Figure 8 ). Not all models have every field sho...
Page 49 - Configure Dynamic DNS; Follow the instructions in; Table 5; Configure dynamic DNS menu fields
Chapter 2 SMT menu 1 - general setup 49 BCM50a Integrated Router Configuration — Advanced Figure 8 Menu 1.1 – Configure Dynamic DNS Follow the instructions in Table 5 to configure Dynamic DNS parameters. Menu 1.1 - Configure Dynamic DNS Service Provider= WWW.DynDNS.ORG Active= No DDNS Type= DynamicD...
Page 53 - This chapter describes how to configure the WAN using Menu 2.; Introduction to WAN setup; From the main menu, enter 2 to open Menu 2.
53 BCM50a Integrated Router Configuration — Advanced Chapter 3WAN Setup This chapter describes how to configure the WAN using Menu 2. Introduction to WAN setup This chapter explains how to configure the settings for your WAN port. WAN setup From the main menu, enter 2 to open Menu 2.
Page 54 - Chapter 3 WAN Setup; Figure 9; Menu 2 – WAN Setup; Table 6; Menu 2 WAN setup
54 Chapter 3 WAN Setup N0115791 Figure 9 Menu 2 – WAN Setup Table 6 describes the fields in Figure 9 . Menu 2 - WAN Setup Route Selection: WAN Metric= 1 Traffic Redirect Metric= 14 Dial Backup Metric= N/A Edit Traffic Redirect= No Dial-Backup: Active= N/A Port Speed= N/A AT Command String: Init= N/A...
Page 55 - Traffic redirect setup; Setup
Chapter 3 WAN Setup 55 BCM50a Integrated Router Configuration — Advanced Traffic redirect setup Configure parameters that determine when the BCM50a Integrated Router forwards WAN traffic to the backup gateway using Menu 2.2 - Traffic Redirect Setup . Edit Traffic Redirect Press [SPACE BAR] to select...
Page 56 - Table 7; Menu 2.2 Traffic Redirect Setup
56 Chapter 3 WAN Setup N0115791 Figure 10 Menu 2.2 – Traffic Redirect Setup Table 7 describes the fields in Figure 10 . Menu 2.2 - Traffic Redirect Setup Active= No Configuration: Backup Gateway IP Address= 0.0.0.0 Metric= 15 Press ENTER to Confirm or ESC to Cancel: Table 7 Menu 2.2 Traffic Redirect...
Page 57 - This chapter describes how to configure the LAN using; Introduction to LAN setup; From the main menu, enter 3 to open; Menu 3 – LAN setup; LAN port filter setup
57 BCM50a Integrated Router Configuration — Advanced Chapter 4LAN setup This chapter describes how to configure the LAN using Menu 3: LAN Setup . Introduction to LAN setup This section describes how to configure the BCM50a Integrated Router for LAN connections. Accessing the LAN menus From the main ...
Page 58 - TCP/IP and DHCP ethernet setup menu; From the main menu, enter 3; Menu 3 – LAN Setup; From menu 3, select the submenu option; TCP/IP and DHCP Setup; and press; as shown in
58 Chapter 4 LAN setup N0115791 Figure 12 Menu 3.1 – LAN Port Filter Setup TCP/IP and DHCP ethernet setup menu From the main menu, enter 3 to open Menu 3 - LAN Setup to configure TCP/IP (RFC 1155) and DHCP Ethernet setup. Figure 13 Menu 3 – LAN Setup From menu 3, select the submenu option TCP/IP and...
Page 59 - Table 8; DHCP Ethernet setup menu fields
Chapter 4 LAN setup 59 BCM50a Integrated Router Configuration — Advanced Figure 14 Menu 3.2 – TCP/IP and DHCP Ethernet setup Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP= Server TCP/IP Setup: Client IP Pool: Starting Address= 192.168.1.2 IP Address= 192.168.1.1 Size of Client IP Pool= 126 IP Subne...
Page 60 - Chapter 4 LAN setup
60 Chapter 4 LAN setup N0115791 Size of Client IP Pool This field specifies the size or count of the IP address pool. 126 First DNS Server Second DNS Server Third DNS Server The BCM50a Integrated Router passes a DNS (Domain Name System) server IP address (in the order you specify here) to the DHCP c...
Page 61 - IP Alias Setup; Edit; Table 9; LAN TCP/IP setup menu fields
Chapter 4 LAN setup 61 BCM50a Integrated Router Configuration — Advanced Use the instructions in Table 9 to configure TCP/IP parameters for the LAN port. IP Alias Setup You must use menu 3.2 to configure the first network. Move the cursor to the Edit IP Alias field, press [SPACE BAR] to choose Yes a...
Page 62 - Use the instructions in; IP Alias setup menu field
62 Chapter 4 LAN setup N0115791 Figure 15 Menu 3.2.1 – IP Alias setup Use the instructions in Table 10 to configure IP Alias parameters.s Menu 3.2.1 - IP Alias Setup IP Alias 1= No IP Address= N/A IP Subnet Mask= N/A RIP Direction= N/A Version= N/A Incoming protocol filters= N/A Outgoing protocol fi...
Page 65 - Internet access configuration; From the main menu, type 4 to display; Menu 4; shown in the following figure.
65 BCM50a Integrated Router Configuration — Advanced Chapter 5Internet access This chapter shows you how to configure your BCM50a Integrated Router for Internet access. Internet access configuration Using Menu 4 you can enter the Internet Access information in one screen. Menu 4 is actually a simpli...
Page 66 - describes the fields in; Menu 4 Internet access setup
66 Chapter 5 Internet access N0115791 Figure 16 Menu 4 – Internet Access Setup Table 11 describes the fields in Figure 16 . Menu 4 - Internet Access Setup ISP's Name= ChangeMeEncapsulation= ENET ENCAPMultiplexing= LLC-basedVPI #= 8VCI #= 35My Login= N/AMy Password= N/AENET ENCAP Gateway= N/AIP Addre...
Page 67 - Basic setup complete; to operate on your network, as well as access the Internet.; SPACE BAR; If the firewall is activated, the default policy can communicate
Chapter 5 Internet access 67 BCM50a Integrated Router Configuration — Advanced Basic setup complete You have successfully connected, installed, and set up your BCM50a Integrated Router to operate on your network, as well as access the Internet. If all your settings are correct, your BCM50a Integrate...
Page 68 - Chapter 5 Internet access
Page 69 - This chapter shows you how to configure a remote node.; Introduction to Remote Node setup; You first choose a remote node in; Menu 11- Remote Node Setup; Outgoing Authentication Protocol
69 BCM50a Integrated Router Configuration — Advanced Chapter 6Remote Node setup This chapter shows you how to configure a remote node. Introduction to Remote Node setup This section describes the protocol-independent parameters for a remote node. A remote node is required for placing calls to a remo...
Page 70 - Chapter 6 Remote Node setup; Remote Node setup; Remote Node profile; To configure a remote node, follow these steps:
70 Chapter 6 Remote Node setup N0115791 Nailed-Up Connection A nailed-up connection is a dial-up line where the connection is always up regardless of traffic demand. The BCM50a Integrated Router does two things when you specify a nailed-up connection. The first is that idle timeout is disabled. The ...
Page 71 - Encapsulation and Multiplexing scenarios; PPPoA; multiplexing is the best; PPP; protocol already contains this information.
Chapter 6 Remote Node setup 71 BCM50a Integrated Router Configuration — Advanced Figure 17 Menu 11 – Remote Node Setup Encapsulation and Multiplexing scenarios For Internet access you should use the encapsulation and multiplexing methods used by your ISP. Consult your telephone company for informati...
Page 72 - Menu 11.1 – Remote Node Profile; Menu 11.1 Remote Node Profile
72 Chapter 6 Remote Node setup N0115791 Selecting RFC-1483 encapsulation with VC-based multiplexing requires the least amount of overhead (0 octets). However, if there is a potential need for multiple protocol support in the future, it may be safer to select PPPoA encapsulation instead of RFC-1483 ,...
Page 74 - For the TCP/IP parameters, perform the following steps to edit; Remote Node Network Layer Options
74 Chapter 6 Remote Node setup N0115791 Edit IP/Bridge 1 For the TCP/IP parameters, perform the following steps to edit Menu 11.3 – Remote Node Network Layer Options as shown next. Edit ATM Options Press [SPACE BAR] to select Yes and press [ENTER] to display Menu 11.6 – Remote Node ATM Layer Options...
Page 75 - IP; is among the protocols in the; Route; Move the cursor to the; Menu 11.3 – Remote Node Network; Menu 11.3 – Remote Node Network Layer Options; explains fields in; Menu 11.3 Remote Node Network Layer Options
Chapter 6 Remote Node setup 75 BCM50a Integrated Router Configuration — Advanced 2 In menu 11.1, make sure IP is among the protocols in the Route field. 3 Move the cursor to the Edit IP/Bridge field, press [ SPACE BAR ] to select Yes, then press [ENTER] to display Menu 11.3 – Remote Node Network Lay...
Page 77 - Remote Node filter; Edit Filter Sets; Remote Node Filter; Chapter 11, “Filter configuration; Field
Chapter 6 Remote Node setup 77 BCM50a Integrated Router Configuration — Advanced Remote Node filter Move the cursor to the field Edit Filter Sets in menu 11.1, and then press [SPACE BAR] to set the value to Yes . Press [ENTER] to open Menu 11.1.4- Remote Node Filter . Use menu 11.1.4 to specify the ...
Page 78 - To configure the parameters for traffic redirect, see
78 Chapter 6 Remote Node setup N0115791 Figure 20 Menu 11.1.4 – Remote Node Filter (Ethernet Encapsulation) Figure 21 Menu 11.1.4 – Remote Node Filter (PPPoE or PPPoA Encapsulation) To configure the parameters for traffic redirect, see “Traffic redirect setup” on page 55 . Menu 11.1.4 - Remote Node ...
Page 79 - Editing ATM Layer Options; Yes; LLC-based Multiplexing or PPP Encapsulation
Chapter 6 Remote Node setup 79 BCM50a Integrated Router Configuration — Advanced Editing ATM Layer Options Follow the steps shown next to edit Menu 11.6 – Remote Node ATM Layer Options . In menu 11.1, move the cursor to the Edit ATM Options field and then press [SPACE BAR] to select Yes . Press [ENT...
Page 80 - Advance Setup Options; PPPoE; in the; Encapsulation
80 Chapter 6 Remote Node setup N0115791 Figure 23 Menu 11.6 for LLC-based Multiplexing or PPP Encapsulation In this case, only one set of VPI and VCI numbers need be specified for all protocols. The valid range for the VPI is 0 to 255 and for the VCI is 32 to 65535 (1 to 31 is reserved for local man...
Page 81 - Edit Advance Options; to display; Menu 11.8 – Advance Setup; Menu 11.8 – Advance Setup Options; Menu 11.8 Advance Setup Options
Chapter 6 Remote Node setup 81 BCM50a Integrated Router Configuration — Advanced Move the cursor to the Edit Advance Options field, press [SPACE BAR] to select Yes , then press [ENTER] to display Menu 11.8 – Advance Setup Options . Figure 25 Menu 11.8 – Advance Setup Options Table 14 describes the f...
Page 83 - IP Static Route Setup; to configure IP static routes in menu 12. 1.
83 BCM50a Integrated Router Configuration — Advanced Chapter 7IP Static Route Setup This chapter shows you how to configure static routes with your BCM50a Integrated Router. IP Static Route Setup Enter 12 from the main menu. Select one of the IP static routes as shown in Figure 26 to configure IP st...
Page 85 - IP Static Route Menu Fields
Chapter 7 IP Static Route Setup 85 BCM50a Integrated Router Configuration — Advanced Figure 27 Menu 12.1 – Edit IP Static Route Table 15 describes the fields in Figure 27 . Menu 12.1 - Edit IP Static Route Route #: 1Route Name= ?Active= NoDestination IP Address= ?IP Subnet Mask= ?Gateway IP Address=...
Page 87 - From the main menu, enter 14 to display; Menu 14 – Dial-in User Setup; Type a number and press
87 BCM50a Integrated Router Configuration — Advanced Chapter 8Dial-in User Setup This chapter shows you how to create user accounts on the BCM50a Integrated Router. Dial-in User Setup By storing user profiles locally, your BCM50a Integrated Router can authenticate users without interacting with a ne...
Page 88 - Chapter 8 Dial-in User Setup
88 Chapter 8 Dial-in User Setup N0115791 Figure 29 Menu 14.1 – Edit Dial-in User Table 16 describes the fields in Figure 29 . Menu 14.1 - Edit Dial-in User User Name= testActive= YesPassword= ********Press ENTER to Confirm or ESC to Cancel:Leave name field blank to delete profile Table 16 Menu 14.1-...
Page 89 - Using NAT; Server; “Address Mapping Sets” on page 92; Full Feature; Applying NAT; SUA Only
89 BCM50a Integrated Router Configuration — Advanced Chapter 9Network Address Translation (NAT) This chapter discusses how to configure NAT on the BCM50a Integrated Router. Using NAT SUA (Single User Account) Versus NAT SUA (Single User Account) is an implementation of a subset of NAT that supports ...
Page 92 - Chapter 9 Network Address Translation (NAT); NAT setup; is used; When you select; Menu 15 – NAT Setup; Address Mapping Sets; Enter 1 to bring up; Menu 15.1—Address Mapping Sets
92 Chapter 9 Network Address Translation (NAT) N0115791 NAT setup Use the address mapping sets menus and submenus to create the mapping table used to assign global addresses to computers on the LAN. You can see two NAT address mapping sets in menu 15.1. You can only configure Set 1 . Set 255 is used...
Page 93 - SUA Address Mapping Set; Enter 255 to display the screen shown in
Chapter 9 Network Address Translation (NAT) 93 BCM50a Integrated Router Configuration — Advanced Figure 33 Menu 15.1 – Address Mapping Sets SUA Address Mapping Set Enter 255 to display the screen shown in Figure 34 (see “SUA (Single User Account) Versus NAT” on page 89 ) . The fields in this menu ca...
Page 94 - explains the fields in; SUA Address Mapping Rules
94 Chapter 9 Network Address Translation (NAT) N0115791 Figure 34 Menu 15.1.255 – SUA Address Mapping Rules Table 18 explains the fields in Figure 34 . Menu 15.1.255 - Address Mapping Rules Set Name= SUA Idx Local Start IP Local End IP Global Start IP Global End IP Type --- --------------- ---------...
Page 95 - User-Defined Address Mapping Sets; Action; and; Select Rule; fields; Set; The entire set is deleted if you leave the; Set Name; field blank and
Chapter 9 Network Address Translation (NAT) 95 BCM50a Integrated Router Configuration — Advanced User-Defined Address Mapping Sets Go to menu 15.1. Enter 1 to bring up the menu shown in figure below. Look at the differences from the previous menu. Note the extra Action and Select Rule fields means y...
Page 96 - Ordering your rules; Type
96 Chapter 9 Network Address Translation (NAT) N0115791 Figure 35 Menu 15.1.1: First Set Ordering your rules Ordering your rules is important because the BCM50a Integrated Router applies the rules in the order that you specify. When a rule matches the current packet, the BCM50a Integrated Router tak...
Page 99 - Configuring a server behind NAT; If you do not assign a; Default Server; IP address, the BCM50a Integrated Router
Chapter 9 Network Address Translation (NAT) 99 BCM50a Integrated Router Configuration — Advanced Configuring a server behind NAT Note: If you do not assign a Default Server IP address, the BCM50a Integrated Router discards all packets received for ports that are not specified here or in the remote m...
Page 100 - Edit Rule
100 Chapter 9 Network Address Translation (NAT) N0115791 Figure 37 Menu 15.2 – NAT Server Sets 3 Select Edit Rule in the Select Command field; type the index number of the NAT server you want to configure in the Select Rule field and press [ENTER] to open Menu 15.2.1 - NAT Server Configuration (see ...
Page 101 - Start Port
Chapter 9 Network Address Translation (NAT) 101 BCM50a Integrated Router Configuration — Advanced Figure 38 15.2.1 – NAT Server Configuration 15.2.1 - NAT Server Configuration Index= 1 ----------------------------------------------------------------- Name= Active= No Start port= 0 End port= 0 IP Add...
Page 102 - Enter the inside IP address of the server in the; IP Address; Press; Menu 15.2 – NAT Server Setup
102 Chapter 9 Network Address Translation (NAT) N0115791 5 Enter the inside IP address of the server in the IP Address field. In the following figure, you have a computer acting as an FTP, Telnet and SMTP server (ports 21, 23 and 25) at 192.168.1.33. 6 Press [ENTER] at the “Press ENTER to confirm …”...
Page 103 - General NAT examples; The following are some examples of NAT configuration.; Internet access only; In the Internet access example shown in
Chapter 9 Network Address Translation (NAT) 103 BCM50a Integrated Router Configuration — Advanced Figure 40 Multiple servers behind NAT example General NAT examples The following are some examples of NAT configuration. Internet access only In the Internet access example shown in Figure 41 , you only...
Page 104 - “General NAT examples” on page 103
104 Chapter 9 Network Address Translation (NAT) N0115791 Figure 41 NAT Example 1 Figure 42 Menu 4: Internet access & NAT example From menu 4 shown above, simply choose the SUA Only option from the Network Address Translation field. This is the Many-to-One mapping discussed in section “General NA...
Page 105 - Example 2: Internet access with an inside server; NAT Example 2; In this case, you do exactly as shown in; Server behind the NAT as shown in
Chapter 9 Network Address Translation (NAT) 105 BCM50a Integrated Router Configuration — Advanced Example 2: Internet access with an inside server Figure 43 NAT Example 2 In this case, you do exactly as shown in Figure 43 (use the convenient pre-configured SUA Only set), and also go to menu 15.2 to ...
Page 106 - Example 3: Multiple public IP addresses with inside servers; Map the other outgoing LAN traffic to IGA3 (; to other computers behind NAT on the LAN.
106 Chapter 9 Network Address Translation (NAT) N0115791 Figure 44 Menu 15.2: Specifying an inside server Example 3: Multiple public IP addresses with inside servers In this example, there are 3 IGAs from our ISP. There are many departments but two have their own FTP server. All departments share th...
Page 108 - shows how to configure the first rule.
108 Chapter 9 Network Address Translation (NAT) N0115791 Figure 46 Example 3: Menu 11.3 Figure 47 shows how to configure the first rule. Menu 11.3 - Remote Node Network Layer Options IP Options: Bridge Options: IP Address Assignment = Dynamic Ethernet Addr Timeout(min)= N/A Rem IP Addr = 0.0.0.0 Rem...
Page 110 - Enter 15 from the main menu.
110 Chapter 9 Network Address Translation (NAT) N0115791 Figure 48 Example 3: Final Menu 15.1.1 Now configure the IGA3 to map to our web server and mail server on the LAN. 8 Enter 15 from the main menu. 9 Now enter 2 from this menu and configure it as shown in Example 3: Menu 15.2. Menu 15.1.1 - Add...
Page 111 - Configuring Trigger Port forwarding; Enter 3 in menu 15 to display; Menu 15.3 — Trigger Port Setup; Only one LAN computer can use a trigger port (range) at a time.
Chapter 9 Network Address Translation (NAT) 111 BCM50a Integrated Router Configuration — Advanced Figure 49 Example 3: Menu 15.2 Configuring Trigger Port forwarding Enter 3 in menu 15 to display Menu 15.3 — Trigger Port Setup , shown in Figure 50 . Menu 15.2 - NAT Server Setup Default Server: 0.0.0....
Page 112 - Menu 15.3: Trigger Port setup description
112 Chapter 9 Network Address Translation (NAT) N0115791 Figure 50 Menu 15.3 – Trigger Port Setup Table 22 describes the fields in Figure 50 . Menu 15.3 - Trigger Port Setup Incoming Trigger Rule Name Start Port End Port Start Port End Port -----------------------------------------------------------...
Page 115 - Using SMT menus; Menu 21 - Filter Set and Firewall; Menu 21– Filter and Firewall Setup; Activating the firewall
115 BCM50a Integrated Router Configuration — Advanced Chapter 10Introducing the firewall This chapter shows you how to get started with the firewall. Using SMT menus From the main menu enter 21 to go to Menu 21 - Filter Set and Firewall Configuration to display the screen shown in Figure 51 . Figure...
Page 116 - Configure the firewall rules using the WebGUI or CLI
116 Chapter 10 Introducing the firewall N0115791 Figure 52 Menu 21.2 – Firewall Setup Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DoS) attacks when it is active. Your network is vulnerable to attacks when the firewall is turned off. Refer to the User’s Guide for detai...
Page 117 - This chapter shows you how to create and apply filters.; Introduction to filters; Outgoing packets must undergo data filtering before they
117 BCM50a Integrated Router Configuration — Advanced Chapter 11Filter configuration This chapter shows you how to create and apply filters. Introduction to filters Your BCM50a Integrated Router uses filters to decide whether to allow passage of a data packet, make a call, or both. There are two typ...
Page 118 - Filter Structure; illustrates the logic flow when executing a filter rule. Also see
118 Chapter 11 Filter configuration N0115791 Figure 53 Outgoing packet filtering process For incoming packets, your BCM50a Integrated Router applies data filters only. Packets are processed depending upon whether a match is found. The following sections describe how to configure filter sets. Filter ...
Page 119 - Execute; Filter Set
Chapter 11 Filter configuration 119 BCM50a Integrated Router Configuration — Advanced Figure 54 Filter rule process You can apply up to four filter sets to a particular port to block multiple types of packets. With each filter set having up to six rules, you can have a maximum of 24 rules active for...
Page 120 - Chapter 11 Filter configuration; Configuring a Filter Set; Enter 21 in the main menu to open menu 21.; Menu 21 – Filter and Firewall Setup; Enter 1
120 Chapter 11 Filter configuration N0115791 Configuring a Filter Set The BCM50a Integrated Router includes filtering for NetBIOS over TCP/IP packets by default. To configure another filter set, follow the procedure below. 1 Enter 21 in the main menu to open menu 21. Figure 55 Menu 21 – Filter and F...
Page 121 - Edit Comments
Chapter 11 Filter configuration 121 BCM50a Integrated Router Configuration — Advanced Figure 56 Menu 21.1– Filter Set Configuration 3 Select the filter set you wish to configure (1-12) and press [ENTER] . 4 Enter a descriptive name or comment in the Edit Comments field and press [ENTER] . 5 Press [E...
Page 123 - Configuring a Filter Rule; Summary; Configuring a TCP/IP Filter Rule; Filter Type
Chapter 11 Filter configuration 123 BCM50a Integrated Router Configuration — Advanced Configuring a Filter Rule To configure a filter rule, type its number in Menu 21.1.1 - Filter Rules Summary and press [ENTER] to open menu 21.1.1.1 for the rule. To speed up filtering, all rules in a filter set mus...
Page 124 - describes how to configure your TCP/IP filter rule.; TCP/IP Filter Rule Menu fields
124 Chapter 11 Filter configuration N0115791 Figure 57 Menu 21.1.1.1 – TCP/IP Filter Rule Table 25 describes how to configure your TCP/IP filter rule. Menu 21.1.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 0 IP Source Route= No Destination: IP Addr=...
Page 126 - illustrates the logic flow of an IP filter.
126 Chapter 11 Filter configuration N0115791 Figure 58 illustrates the logic flow of an IP filter. Action Matched Press [SPACE BAR] and then [ENTER] to select the action for a matching packet. Check Next RuleForwardDrop Action Not Matched Press [SPACE BAR] and then [ENTER] to select the action for a...
Page 128 - Configuring a Generic Filter Rule; FFFFFFFF; Generic Filter Rule
128 Chapter 11 Filter configuration N0115791 Configuring a Generic Filter Rule This section shows you how to configure a generic filter rule. With generic rules you can filter non-IP packets. For IP packets, it is generally easier to use the IP rules directly. For generic rules, the BCM50a Integrate...
Page 129 - describes the fields in the Generic Filter Rule menu.; Generic Filter Rule Menu fields
Chapter 11 Filter configuration 129 BCM50a Integrated Router Configuration — Advanced Figure 59 Menu 21.1.1.1 – Generic Filter Rule Table 26 describes the fields in the Generic Filter Rule menu. Menu 21.1.1.1 - Generic Filter Rule Filter #: 2,3 Filter Type= Generic Filter Rule Active= No Offset= 0 L...
Page 130 - Example Filter; The example shown in
130 Chapter 11 Filter configuration N0115791 Example Filter The example shown in Figure 60 is set to block outside users from accessing the BCM50a Integrated Router via Telnet. See the included disk for more Filter Rules example. Value Enter the value (in Hexadecimal notation) to compare with the da...
Page 133 - Filter Types and NAT; Generic Filter
Chapter 11 Filter configuration 133 BCM50a Integrated Router Configuration — Advanced Figure 62 Example Filter Rules Summary: Menu 21.1.3 After you have created the filter set, you must apply it. 1 Enter 11 from the main menu to go to menu 11. 2 Then enter 1 to open Menu 11.1 Remote Node Profile . 3...
Page 134 - Firewall Versus Filters; Firewall configuration is discussed in; Applying a Filter; Nortel recommends that you apply filters if you do not activate
134 Chapter 11 Filter configuration N0115791 are replaced on a connection-by-connection basis, which makes it impossible to know the exact address and port on the wire. Therefore, the BCM50a Integrated Router applies the protocol filters to the native IP address and port number before NAT for outgoi...
Page 135 - Applying LAN Filters; Filtering LAN Traffic; Applying Remote Node Filters; – note that call filter sets are only present
Chapter 11 Filter configuration 135 BCM50a Integrated Router Configuration — Advanced Applying LAN Filters LAN traffic filter sets are useful to block certain packets, reduce traffic and prevent security breaches. Go to menu 3.1 (shown next) and enter the numbers of the filter sets that you want to ...
Page 137 - SNMP Configuration; Configuration
137 BCM50a Integrated Router Configuration — Advanced Chapter 12SNMP Configuration This chapter explains SNMP configuration menu 22. SNMP Configuration To configure SNMP, enter 22 from the main menu to display Menu 22 - SNMP Configuration as shown next. The community for Get , Set and Trap fields is...
Page 138 - describes the SNMP configuration parameters.; SNMP Configuration Menu Fields
138 Chapter 12 SNMP Configuration N0115791 Figure 66 Menu 22 – SNMP Configuration Table 27 describes the SNMP configuration parameters. Menu 22 - SNMP Configuration SNMP: Get Community= Set Community= Trusted Host= 0.0.0.0 Trap: Community= Destination= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel...
Page 139 - SNMP Traps
Chapter 12 SNMP Configuration 139 BCM50a Integrated Router Configuration — Advanced SNMP Traps The BCM50a Integrated Router will sends traps to the SNMP manager when any one of the following events occurs: Table 28 SNMP Traps Trap # Trap Name Description 0 coldStart (defined in RFC-1215 ) A trap is ...
Page 140 - Chapter 12 SNMP Configuration
Page 141 - System security; System password; Menu 23 – System security
141 BCM50a Integrated Router Configuration — Advanced Chapter 13System security This chapter describes how to configure the system security on the BCM50a Integrated Router. System security You can configure the system password, an external RADIUS server and 802.1x in this menu. System password Figur...
Page 142 - Chapter 13 System security; Configuring external RADIUS server; Enter 23 in the main menu to display; From; Menu 23- System Security; , enter 2 to display; Security – RADIUS Server,; Menu 23.2 – System Security – RADIUS server
142 Chapter 13 System security N0115791 Configuring external RADIUS server Enter 23 in the main menu to display Menu 23 – System security . Figure 68 Menu 23 – System Security From Menu 23- System Security , enter 2 to display Menu 23.2 – System Security – RADIUS Server, as shown in Figure 69 . Figu...
Page 145 - Introduction to System Status; Select menu 24 in the main menu to open; Menu 24 - System Maintenance; shown in
145 BCM50a Integrated Router Configuration — Advanced Chapter 14System information and diagnosis This chapter covers SMT menus 24.1 to 24.4. Introduction to System Status This chapter covers the diagnostic tools that help you to maintain your BCM50a Integrated Router. These tools include updates on ...
Page 146 - System Status; To get to the System Status:; In this menu, enter 1
146 Chapter 14 System information and diagnosis N0115791 Figure 70 Menu 24 – System Maintenance System Status The first selection, System Status, gives you information on the version of your system firmware and the status and statistics of the ports, as shown in the next figure. System Status is a t...
Page 147 - There are three commands in; Status; Menu 24.1 – System Maintenance –
Chapter 14 System information and diagnosis 147 BCM50a Integrated Router Configuration — Advanced 3 There are three commands in Menu 24.1 - System Maintenance - Status . Entering 1 drops the WAN connection, 9 resets the counters and [ESC] takes you back to the previous screen. Table 30 describes the...
Page 148 - Chapter 14 System information and diagnosis; System information and console port speed; Enter 24 to go to; Menu 24 – System Maintenance; Enter 2 to open; Menu 24.2 - System Information and Console Port Speed; From this menu you have two choices, as shown in
148 Chapter 14 System information and diagnosis N0115791 System information and console port speed With your system you can choose different console port speeds. To get to the System Information and Console Port Speed. 1 Enter 24 to go to Menu 24 – System Maintenance . 2 Enter 2 to open Menu 24.2 - ...
Page 149 - System Information; Ethernet address and IP address.
Chapter 14 System information and diagnosis 149 BCM50a Integrated Router Configuration — Advanced Figure 72 System Information and Console Port Speed System Information System Information gives you information about your system, as shown in Figure 73 . More specifically, it gives you information on ...
Page 151 - Console port speed; You can change the speed of the console port through; Port Speed; Menu 24.2.2 – System Maintenance – Change; Log and trace
Chapter 14 System information and diagnosis 151 BCM50a Integrated Router Configuration — Advanced Console port speed You can change the speed of the console port through Menu 24.2.2 – Console Port Speed . Your BCM50a Integrated Router supports 9 600 (default), 19 200, 38 400, 57 600, and 115 200 b/s...
Page 152 - Syslog logging; System Maintenance Menu Syslog Parameters
152 Chapter 14 System information and diagnosis N0115791 Figure 75 Menu 24.3 – System Maintenance: Log and Trace Syslog logging The BCM50a Integrated Router uses the syslog facility to log the CDR (Call Detail Record) and system messages to a syslog server. Syslog and accounting can be configured in...
Page 153 - CDR
Chapter 14 System information and diagnosis 153 BCM50a Integrated Router Configuration — Advanced Your BCM50a Integrated Router sends five types of syslog messages. Some examples of these syslog messages with their message formats are shown next: CDR Syslog Server IP Address Enter the IP Address of ...
Page 154 - Packet triggered
154 Chapter 14 System information and diagnosis N0115791 Packet triggered Filter log Packet triggered Message Format SdcmdSyslogSend( SYSLOG_PKTTRI, SYSLOG_NOTICE, String ); String = Packet trigger: Protocol=xx Data=xxxxxxxxxx…..x Protocol: (1:IP 2:IPX 3:IPXHC 4:BPDU 5:ATALK 6:IPNG) Data: We will se...
Page 155 - PPP log
Chapter 14 System information and diagnosis 155 BCM50a Integrated Router Configuration — Advanced PPP log spo: Source port dpo: Destination portMar 03 10:39:43 202.132.155.97 RAS: GEN[fffffffffffnordff0080] }S05>R01mFMar 03 10:41:29 202.132.155.97 RAS: GEN[00a0c5f502fnord010080] }S05>R01mFMar ...
Page 156 - Firewall log; Call-Triggering packet; Call-Triggering packet example
156 Chapter 14 System information and diagnosis N0115791 Firewall log Call-Triggering packet Call-Triggering Packet displays information about the packet that triggered a dial-out call in an easily readable format. Equivalent information is available in menu 24.1 in hex format. An example is shown i...
Page 158 - Follow the procedure below to get to; Maintenance; Menu 24.4 – System Maintenance: Diagnostic; WAN DHCP
158 Chapter 14 System information and diagnosis N0115791 Follow the procedure below to get to Menu 24.4 - System Maintenance – Diagnostic. 1 From the main menu, select option 24 to open Menu 24 - System Maintenance . 2 From this menu, select option 4. Diagnostic. This opens Menu 24.4 - System Mainte...
Page 159 - describes the diagnostic tests available in menu 24.4; System Maintenance menu diagnostic; Ping Host
Chapter 14 System information and diagnosis 159 BCM50a Integrated Router Configuration — Advanced Figure 79 WAN & LAN DHCP Table 33 describes the diagnostic tests available in menu 24.4 for your BCM50a Integrated Router and associated connections. Table 33 System Maintenance menu diagnostic Fiel...
Page 161 - Filename conventions; Only use firmware for your BCM50a Integrated Router specific
161 BCM50a Integrated Router Configuration — Advanced Chapter 15Firmware and configuration file maintenance This chapter tells you how to backup and restore your configuration file, as well as upload new firmware and configuration files. Filename conventions The configuration file (often called the ...
Page 162 - Chapter 15 Firmware and configuration file maintenance; Information; Backup configuration; Using Option 5 from; Menu 24 – System Maintenance,; you can back up the; Filename Conventions
162 Chapter 15 Firmware and configuration file maintenance N0115791 If your (T)FTP client does not allow you to have a destination filename different than the source, you must rename the firmware and config file names as the BCM50a Integrated Router only recognizes rom-0 and ras. Be sure you keep un...
Page 163 - Menu 24.5 – System Maintenance – Backup Configuration; Using the FTP command from the command line; bin
Chapter 15 Firmware and configuration file maintenance 163 BCM50a Integrated Router Configuration — Advanced Backup configuration Follow the instructions as shown in Menu 24.5 ( Figure 80 ). Figure 80 Menu 24.5 – System Maintenance – Backup Configuration Using the FTP command from the command line 1...
Page 164 - Example of FTP commands from the command line; FTP Session Example; GUI-based FTP clients; describes some of the commands that you can see in GUI-based FTP; TFTP and FTP over WAN Management Limitations; TFTP, FTP and Telnet over WAN do not work when:; General commands for GUI-based FTP clients
164 Chapter 15 Firmware and configuration file maintenance N0115791 Example of FTP commands from the command line Figure 81 FTP Session Example GUI-based FTP clients Table 35 describes some of the commands that you can see in GUI-based FTP clients. TFTP and FTP over WAN Management Limitations TFTP, ...
Page 165 - You disable Telnet service in menu 24.11.; Secured Client IP; field in menu 24.11 does not match; Backup configuration using TFTP; Put the SMT in command interpreter (CI) mode by entering 8 in; System Maintenance
Chapter 15 Firmware and configuration file maintenance 165 BCM50a Integrated Router Configuration — Advanced • You disable Telnet service in menu 24.11. • You apply a filter in menu 3.1 (LAN) or in menu 11.1.4 (WAN) to block Telnet service. • The IP address in the Secured Client IP field in menu 24....
Page 166 - TFTP command example; The following is an example TFTP command:; GUI-based TFTP clients; describes some of the fields that appear in GUI-based TFTP clients.; General commands for GUI-based TFTP clients
166 Chapter 15 Firmware and configuration file maintenance N0115791 5 Use the TFTP client (see the example below) to transfer files between the BCM50a Integrated Router and the computer. The file name for the configuration file is “rom-0” (rom-zero, not capital o). TFTP command example The following...
Page 167 - Chapter 17, “Remote Management,” on page 185; Restore configuration; Restore Using FTP; “Backup configuration”
Chapter 15 Firmware and configuration file maintenance 167 BCM50a Integrated Router Configuration — Advanced Refer to Chapter 17, “Remote Management,” on page 185 for information about configurations that disallow TFTP and FTP over WAN. Restore configuration This section shows you how to restore a p...
Page 168 - open; “Filename conventions” on page 161
168 Chapter 15 Firmware and configuration file maintenance N0115791 Figure 82 Telnet into Menu 24.6 1 Launch the FTP client on your computer. 2 Enter open , followed by a space and the IP address of your BCM50a Integrated Router. 3 Press [ENTER] when prompted for a username. 4 Enter your password as...
Page 169 - Restore using FTP session example; Uploading Firmware and Configuration Files; “Restore configuration” on; Maintenance – Upload System Configuration File; Firmware file upload; permanently damage your
Chapter 15 Firmware and configuration file maintenance 169 BCM50a Integrated Router Configuration — Advanced Restore using FTP session example Figure 83 Restore using FTP session example Refer to Chapter 17, “Remote Management,” on page 185 to read about configurations that disallow TFTP and FTP ove...
Page 170 - Configuration file upload; The screen shown in; Telnet Into Menu 24.7.2 System Maintenance
170 Chapter 15 Firmware and configuration file maintenance N0115791 Figure 84 Telnet Into Menu 24.7.1 Upload System Firmware Configuration file upload The screen shown in Figure 85 appears when you access menu 24.7.2 via Telnet. Figure 85 Telnet Into Menu 24.7.2 System Maintenance Menu 24.7.1 - Syst...
Page 171 - FTP file upload command from the DOS prompt example
Chapter 15 Firmware and configuration file maintenance 171 BCM50a Integrated Router Configuration — Advanced To upload the firmware and the configuration files, follow the examples in the rest of this chapter: FTP file upload command from the DOS prompt example 1 Launch the FTP client on your comput...
Page 172 - FTP Session Example of Firmware File Upload; Refer to the; TFTP file upload
172 Chapter 15 Firmware and configuration file maintenance N0115791 FTP Session Example of Firmware File Upload Figure 86 FTP Session Example of Firmware File Upload More commands (found in GUI-based FTP clients) are listed earlier in this chapter. Refer to the “Remote Management” on page 185 sectio...
Page 173 - “TFTP upload command example” on page 173; TFTP upload command example
Chapter 15 Firmware and configuration file maintenance 173 BCM50a Integrated Router Configuration — Advanced 5 Launch the TFTP client on your computer and connect to the BCM50a Integrated Router. Set the transfer mode to binary before starting data transfer. 6 Use the TFTP client (see the example be...
Page 175 - Command Interpreter mode; Use of undocumented commands or misconfiguration can
175 BCM50a Integrated Router Configuration — Advanced Chapter 16System Maintenance menus 8 to 10 This chapter leads you through SMT menus 24.8 to 24.10. Command Interpreter mode The Command Interpreter (CI) is a part of the main router firmware. The CI provides much of the same functionality as the ...
Page 176 - Command syntax; The command keywords are in Courier New font.
176 Chapter 16 System Maintenance menus 8 to 10 N0115791 Figure 87 Command mode in Menu 24 Command syntax The command keywords are in Courier New font. Enter the command keywords exactly as shown, do not abbreviate. The required fields in a command are enclosed in angle brackets <>. The option...
Page 177 - Command usage; Appendix G, “Command Interpreter,” on page 241; Call control support; is set to; or; Call history chronicles preceding incoming and outgoing calls.; System Maintenance - Call Control
Chapter 16 System Maintenance menus 8 to 10 177 BCM50a Integrated Router Configuration — Advanced means that you must specify the type of netbios filter and whether to turn it on or off. Command usage A list of commands can be found by typing “help” or “?” at the command prompt. Always type the full...
Page 178 - Budget management; to bring up the Budget
178 Chapter 16 System Maintenance menus 8 to 10 N0115791 Figure 88 Call Control Budget management Menu 24.9.1 shows the budget management statistics for outgoing calls. Enter 1 from Menu 24.9 - System Maintenance - Call Control to bring up the Budget Management menu ( Figure 89 ). Menu 24.9 - System...
Page 180 - Chapter 16 System Maintenance menus 8 to 10; This is the second option in; Menu; Call History; Call History Fields
180 Chapter 16 System Maintenance menus 8 to 10 N0115791 Call History This is the second option in Menu 24.9 - System Maintenance - Call Control . It displays information about past incoming and outgoing calls. Enter 2 from Menu 24.9 - System Maintenance - Call Control . Figure 90 Call History Table...
Page 181 - Time and Date setting; The real time is then displayed in; Enter 10 to go to
Chapter 16 System Maintenance menus 8 to 10 181 BCM50a Integrated Router Configuration — Advanced Time and Date setting There is a software mechanism to set the time manually or get the current time and date from an external server when you turn on your BCM50a Integrated Router. With Menu 24.10, you...
Page 182 - Time and Date Setting Fields
182 Chapter 16 System Maintenance menus 8 to 10 N0115791 Figure 92 Menu 24.10 System Maintenance: Time and Date Setting Table 39 describes the fields in Figure 92 . Menu 24.10 - System Maintenance - Time and Date Setting Time Protocol= NTP (RFC-1305) Time Server Address= a.ntp.alphazed.net Current T...
Page 184 - Resetting the Time; The BCM50a Integrated Router resets the time in three instances:
184 Chapter 16 System Maintenance menus 8 to 10 N0115791 Resetting the Time The BCM50a Integrated Router resets the time in three instances: • After you make changes to and leave menu 24.10 • After starting up the BCM50a Integrated Router starts up, if a time server configured in menu 24.10 • After ...
Page 185 - Remote Management; Disable
185 BCM50a Integrated Router Configuration — Advanced Chapter 17Remote Management This chapter covers remote management found in SMT menu 24.11. Remote Management With remote management, you can determine which services and protocols can access which BCM50a Integrated Router interface (if any) from ...
Page 186 - Menu 24.11 – Remote Management control
186 Chapter 17 Remote Management N0115791 Figure 93 Menu 24.11 – Remote Management Control Table 40 describes the fields in Figure 93 . Menu 24.11 - Remote Management Control TELNET Server: Port = 23 Access = Disable Secure Client IP = 0.0.0.0 FTP Server: Port = 21 Access = Disable Secure Client IP ...
Page 187 - Remote Management Limitations; Remote management over LAN or WAN does not work when:; There is a firewall rule that blocks remote management.
Chapter 17 Remote Management 187 BCM50a Integrated Router Configuration — Advanced Remote Management Limitations Remote management over LAN or WAN does not work when: 1 A filter in menu 3.1 (LAN) or in menu 11.1.4 (WAN) is applied to block a Telnet, FTP, or Web service. 2 You disable that service in...
Page 188 - Chapter 17 Remote Management
Page 189 - Introduction; . From the main menu, enter 26 to access; — Schedule Setup; Menu 26 – Schedule Setup
189 BCM50a Integrated Router Configuration — Advanced Chapter 18Call scheduling Using call scheduling (applicable only for PPPoA or PPPoE encapsulation), you can dictate when a remote node is called and for how long. Introduction Using the call scheduling feature, the BCM50a Integrated Router can ma...
Page 190 - Chapter 18 Call scheduling; to see; Menu 26.1 — Schedule Set Setup; Menu 26.1 – Schedule Set Setup; To delete a schedule set, enter the set number and press
190 Chapter 18 Call scheduling N0115791 Lower numbered sets take precedence over higher numbered sets, thereby avoiding scheduling conflicts. For example, if sets 1, 2, 3, and 4 are applied in the remote node then set 1 takes precedence over sets 2, 3, and 4 as the BCM50a Integrated Router, by defau...
Page 191 - Duration; Menu 26.1 Schedule Set Setup
Chapter 18 Call scheduling 191 BCM50a Integrated Router Configuration — Advanced If a connection is already established, your BCM50a Integrated Router does not drop it. After the connection is dropped manually or it times out, then that remote node cannot be triggered until the end of the Duration ....
Page 192 - Applying Schedule Sets to a Remote Node (PPPoE)
192 Chapter 18 Call scheduling N0115791 After you configure your schedule sets, you must apply them to the desired remote nodes. Enter 11 from the Main Menu and then enter the target remote node index. Using [SPACE BAR] , select PPPoE or PPPoA in the Encapsulation field and then press [ENTER] to mak...
Page 193 - Click; Start; and double-click the; icon to open; Network; window
193 BCM50a Integrated Router Configuration — Advanced Appendix ASetting up your computer IP address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, and Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the...
Page 194 - Appendix A Setting up your computer IP address; Installing components
194 Appendix A Setting up your computer IP address N0115791 Figure 97 WIndows 95/98/Me: network: configuration Installing components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you...
Page 195 - Configuring
Appendix A Setting up your computer IP address 195 BCM50a Integrated Router Configuration — Advanced a Click Add . b Select Client and click Add . c Select Microsoft from the list of manufacturers. d Select Client for Microsoft Networks from the list of network clients and click OK . e Restart your ...
Page 196 - Verifying Settings
196 Appendix A Setting up your computer IP address N0115791 — If you know your DNS information, select Enable DNS and type the information in the fields below (you do not need to fill them all in). Figure 99 Windows 95/98/Me: TCP/IP Properties: DNS configuration 4 Click the Gateway tab. — If you do ...
Page 197 - Windows XP: Start menu; For Windows XP, click; Windows XP: Control Panel
Appendix A Setting up your computer IP address 197 BCM50a Integrated Router Configuration — Advanced Windows 2000/NT/XP 1 For Windows XP, click Start , Control Panel . In Windows 2000/NT, click Start , Settings , Control Panel . Figure 100 Windows XP: Start menu 2 For Windows XP, click Network Conne...
Page 198 - Local Area Connection; and then click; Select; General; click; Properties; Windows XP: Local Area Connection Properties
198 Appendix A Setting up your computer IP address N0115791 3 Right-click Local Area Connection and then click Properties . Figure 102 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties . Figure 103 Wi...
Page 203 - Macintosh OS X; Macintosh OS X: Apple menu
Appendix A Setting up your computer IP address 203 BCM50a Integrated Router Configuration — Advanced Macintosh OS X 1 Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 108 Macintosh OS X: Apple menu 2 Click Network in the icon bar. — Select Automatic fr...
Page 204 - Verifying settings
204 Appendix A Setting up your computer IP address N0115791 4 For statically assigned settings, do the following: — From the Configure box, select Manually . — Type your IP address in the IP Address box. — Type your subnet mask in the Subnet mask box. — Type the IP address of your BCM50a Integrated ...
Page 205 - The Ideal Setup; Ideal Setup; The Triangle Route Problem
205 BCM50a Integrated Router Configuration — Advanced Appendix BTriangle Route The Ideal Setup When the firewall is on, your BCM50a Integrated Router acts as a secure gateway between your LAN and the Internet. In an ideal network topology, all incoming and outgoing network traffic passes through the...
Page 206 - Appendix B Triangle Route; on the LAN to the WAN.; Triangle Route Problem; The Triangle Route Solutions; in different subnets, all
206 Appendix B Triangle Route N0115791 1 A computer on the LAN initiates a connection by sending out a SYN packet to a receiving server on the WAN. 2 The BCM50a Integrated Router reroutes the SYN packet through Gateway B on the LAN to the WAN. 3 The reply from the WAN goes directly to the computer o...
Page 207 - The BCM50a Integrated Router; IP Alias; WAN
Appendix B Triangle Route 207 BCM50a Integrated Router Configuration — Advanced 2 The BCM50a Integrated Router reroutes the packet to Gateway B, which is in Subnet 2. 3 The reply from WAN goes to the BCM50a Integrated Router. 4 The BCM50a Integrated Router ends the response to the computer in Subnet...
Page 209 - This appendix shows examples for importing certificates.; Accept This Certificate Permanently; in; Security Certificate
209 BCM50a Integrated Router Configuration — Advanced Appendix CImporting certificates This appendix shows examples for importing certificates. Import BCM50a Integrated Router certificates into Netscape Navigator In Netscape Navigator, you can permanently trust the BCM50a Integrated Router server ce...
Page 210 - Appendix C Importing certificates; In Internet Explorer, double click the lock shown in; Login Screen
210 Appendix C Importing certificates N0115791 Importing the BCM50a Integrated Router Certificate into Internet Explorer For Internet Explorer to trust a self-signed certificate from the BCM50a Integrated Router, simply import the self-signed certificate into your operating system as a trusted certi...
Page 211 - to open the; Install Certificate; Certificate General Information before Import
Appendix C Importing certificates 211 BCM50a Integrated Router Configuration — Advanced 2 Click Install Certificate to open the Install Certificate wizard. Figure 115 Certificate General Information before Import
Page 212 - Next; to begin the; Certificate Import Wizard 1
212 Appendix C Importing certificates N0115791 3 Click Next to begin the Install Certificate wizard. Figure 116 Certificate Import Wizard 1
Page 213 - Select where you want to store the certificate and click; Certificate Import Wizard 2
Appendix C Importing certificates 213 BCM50a Integrated Router Configuration — Advanced 4 Select where you want to store the certificate and click Next . Figure 117 Certificate Import Wizard 2
Page 214 - Finish; to complete the; Import Certificate; Certificate Import Wizard 3; to add the BCM50a Integrated Router certificate to the root store.; Root Certificate Store
214 Appendix C Importing certificates N0115791 5 Click Finish to complete the Import Certificate wizard. Figure 118 Certificate Import Wizard 3 6 Click Yes to add the BCM50a Integrated Router certificate to the root store. Figure 119 Root Certificate Store
Page 215 - Enrolling and Importing SSL Client Certificates; Authenticate Client Certificates; Trusted CA
Appendix C Importing certificates 215 BCM50a Integrated Router Configuration — Advanced Figure 120 Certificate General Information after Import Enrolling and Importing SSL Client Certificates The SSL client needs a certificate if Authenticate Client Certificates is selected on the BCM50a Integrated ...
Page 217 - Installing the CA’s certificate; CA certificate example; and follow the wizard as shown earlier in this; Installing your personal certificates
Appendix C Importing certificates 217 BCM50a Integrated Router Configuration — Advanced Installing the CA’s certificate 1 Double click the CA’s trusted certificate to produce a screen similar to the one shown in Figure 122 . Figure 122 CA certificate example 2 Click Install Certificate and follow th...
Page 218 - Personal certificate import wizard 1
218 Appendix C Importing certificates N0115791 1 Click Next to begin the wizard. Figure 123 Personal certificate import wizard 1
Page 219 - File name; if you wish to import a; Personal certificate import wizard 2
Appendix C Importing certificates 219 BCM50a Integrated Router Configuration — Advanced 2 The file name and path of the certificate you double-clicked automatically appears in the File name text box. Click Browse if you wish to import a different certificate. Figure 124 Personal certificate import w...
Page 220 - Enter the password given to you by the CA.; Personal certificate import wizard 3
220 Appendix C Importing certificates N0115791 3 Enter the password given to you by the CA. Figure 125 Personal certificate import wizard 3
Page 221 - Place all certificates in the following store; and choose a; Personal certificate import wizard 4
Appendix C Importing certificates 221 BCM50a Integrated Router Configuration — Advanced 4 Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. Figure 126 Personal certificate import w...
Page 222 - to complete the wizard and begin the import process.; Personal certificate import wizard 5; shows the screen that appears when the certificate is correctly; Personal certificate import wizard 6
222 Appendix C Importing certificates N0115791 5 Click Finish to complete the wizard and begin the import process. Figure 127 Personal certificate import wizard 5 6 Figure 128 shows the screen that appears when the certificate is correctly installed on your computer. Figure 128 Personal certificate ...
Page 223 - When; is selected on the BCM50a; SSL client authentication
Appendix C Importing certificates 223 BCM50a Integrated Router Configuration — Advanced Using a certificate when accessing the BCM50a Integrated Router example Use the following procedure to access the BCM50a Integrated Router via HTTPS. 1 Enter https://BCM50a Integrated Router IP Address/ in your b...
Page 224 - The BCM50a Integrated Router login screen appears.; BCM50a Integrated Router secure login screen
224 Appendix C Importing certificates N0115791 3 The BCM50a Integrated Router login screen appears. Figure 131 BCM50a Integrated Router secure login screen
Page 225 - PPPoE in action; PPPoE offers the following benefits:; Traditional dial-up scenario; depicts a typical hardware configuration in which the PCs use
225 BCM50a Integrated Router Configuration — Advanced Appendix DPPPoE PPPoE in action An ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your PC to an ATM PVC (Permanent Virtual Circuit), which connects to a DSL Access Concentrator where the PPP session terminates (...
Page 226 - How PPPoE works
226 Appendix D PPPoE N0115791 Figure 132 Single-PC per router hardware configuration How PPPoE works The PPPoE driver makes the Ethernet appear as a serial link to the PC and the PC runs PPP over the Ethernet, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the A...
Page 228 - Appendix D PPPoE
Page 229 - Cable pin assignments; Ethernet cable pin assignments
229 BCM50a Integrated Router Configuration — Advanced Appendix EHardware specifications Cable pin assignments Figure 134 Ethernet cable pin assignments Table 42 General specifications Power Specification I/P AC 100~240V 50/60Hz; O/P DC 18V 1.1A MTBF 266997 hrs (Mean Time Between Failures) Operation ...
Page 230 - Appendix E Hardware specifications
Page 231 - IP addressing
231 BCM50a Integrated Router Configuration — Advanced Appendix FIP subnetting IP addressing Routers route based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP classes An IP address is made up of four octets (eight bits), written i...
Page 232 - Appendix F IP subnetting; A class C network (8 host bits) can have 2; Classes of IP addresses; Host IDs of all zeros or all ones are not allowed.; Allowed IP address range By class
232 Appendix F IP subnetting N0115791 Therefore: A class C network (8 host bits) can have 2 8 –2 or 254 hosts. A class B address (16 host bits) can have 2 16 –2 or 65 534 hosts. A class A address (24 host bits) can have 2 24 –2 hosts (approximately 16 million hosts). Since the first octet of a class...
Page 233 - Subnet masks; Natural Masks
Appendix F IP subnetting 233 BCM50a Integrated Router Configuration — Advanced Subnet masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID (using a logical AND operation). A subnet mask contains 32 bits. If there is a 1 in the bit...
Page 234 - shows all possible subnet masks for a class C address using both; Alternative Subnet Mask Notation
234 Appendix F IP subnetting N0115791 Table 46 shows all possible subnet masks for a class C address using both notations. The first mask shown is the class C natural mask. Normally, if no mask is specified, it is understood that the natural mask is being used. Example: two subnets As an example, yo...
Page 235 - – 2 or 126 hosts for each subnet.; Subnet 1; Subnet 2
Appendix F IP subnetting 235 BCM50a Integrated Router Configuration — Advanced Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit. The borrowed host ID bit can be either 0 or 1, thus giving two subnets; 192.168.1.0...
Page 236 - Example: four subnets; contains 6 host ID bits, giving 2
236 Appendix F IP subnetting N0115791 192.168.1.0 with mask 255.255.255.128 is the subnet itself, and 192.168.1.127 with mask 255.255.255.128 is the directed broadcast address for the first subnet. Therefore, the lowest IP address that can be assigned to an actual host for the first subnet is 192.16...
Page 237 - Example: eight subnets; shows class C IP address last-octet values for each subnet.; Subnet 3; Subnet 4; Eight subnets
Appendix F IP subnetting 237 BCM50a Integrated Router Configuration — Advanced Example: eight subnets Similarly, use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110). Table 53 shows class C IP address last-octet values for each subnet. Table 51 Subnet 3 Network number Last Octet Bit ...
Page 238 - is a summary for class C subnet planning.; Subnetting with Class A and Class B networks.; is a summary for class B subnet planning.; Class C subnet planning
238 Appendix F IP subnetting N0115791 Table 54 is a summary for class C subnet planning. Subnetting with Class A and Class B networks. For class A and class B addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class B address has ...
Page 241 - Command Syntax; Courier New; help
241 BCM50a Integrated Router Configuration — Advanced Appendix GCommand Interpreter The following describes how to use the command interpreter. Enter 24 in the main menu to bring up the system maintenance menu. Enter 8 to go to Menu 24.8 - Command Interpreter Mode . See the included disk or www.nort...
Page 242 - Appendix G Command Interpreter; be preceded by; sys; to set the management; Sys commands
242 Appendix G Command Interpreter N0115791 Sys commands Table 56 lists and describes the system commands. Each of these commands must be preceded by sys . For example, type sys stdio 60 to set the management session inactivity timeout to 60 minutes. Table 56 Sys commands Command Description atsh Di...
Page 249 - lists and describes the Ethernet commands. Each of these commands; ether; Exit Command
Appendix G Command Interpreter 249 BCM50a Integrated Router Configuration — Advanced Exit Command Ethernet Commands Table 58 lists and describes the Ethernet commands. Each of these commands must be preceded by ether . For example, type ether config to display information on the LAN configuration. d...
Page 250 - lists and describes the IP commands. Each of these commands must be; ip; to display the host IP address.; IP commands
250 Appendix G Command Interpreter N0115791 IP commands Table 59 lists and describes the IP commands. Each of these commands must be preceded by ip . For example, type ip address to display the host IP address. disp <name> Displays the Ethernet driver counters. status <ch_name> Shows the...
Page 257 - ipsec; to display the third; IPSec commands
Appendix G Command Interpreter 257 BCM50a Integrated Router Configuration — Advanced IPSec commands Table 60 lists and describes the IP Sec commands. Each of these commands must be preceded by ipsec . For example, type ipsec display 3 to display the third IPSec rule, if you have it configured. Table...
Page 266 - The following chart lists and describes the; WAN Commands
266 Appendix G Command Interpreter N0115791 WAN Commands The following chart lists and describes the wan commands. Each of these commands must be preceded by wan when you use them. Table 61 WAN Commands Command Description wan adsl bert Displays ADSL ber. cellcnt Displays the ADSL cell counter. chan...
Page 268 - Sys firewall commands; lists and describes the system firewall commands. Each of these; sys firewall; to turn on the firewall.; Sys firewall
268 Appendix G Command Interpreter N0115791 Sys firewall commands Table 62 lists and describes the system firewall commands. Each of these commands must be preceded by sys firewall . For example, type sys firewall active yes to turn on the firewall. Table 62 Sys firewall commands Command Description...
Page 269 - commands must be preceded by; bm; Bandwidth management commands
Appendix G Command Interpreter 269 BCM50a Integrated Router Configuration — Advanced Bandwidth management commands Table 63 lists and describes the bandwidth management commands. Each of these commands must be preceded by bm . For example, type bm show lan to display the LAN port’s bandwidth managem...
Page 272 - Certificates commands; preceded by; to display all of your certificate names and basic information.; certificates
272 Appendix G Command Interpreter N0115791 Certificates commands Table 64 describes the certificate commands. Each of these commands must be preceded by certificates (or cert for short). For example, type cert my_cert list to display all of your certificate names and basic information. All of these...
Page 279 - The following describes the NetBIOS packet filter commands.; You can configure NetBIOS filters to do the following:
279 BCM50a Integrated Router Configuration — Advanced Appendix HNetBIOS filter commands The following describes the NetBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System) are TCP or UDP packets that enable a computer to connect to and communicate with a LAN. For som...
Page 280 - Appendix H NetBIOS filter commands; Display NetBIOS filter settings; NetBIOS Display Filter Settings Command Example; The filter types and their default settings are as follows:; NetBIOS filter configuration; where; NetBIOS filter default settings
280 Appendix H NetBIOS filter commands N0115791 Display NetBIOS filter settings Figure 135 NetBIOS Display Filter Settings Command Example Syntax: sys filter netbios disp This command gives a read-only list of the current NetBIOS filter modes. The filter types and their default settings are as follo...
Page 281 - Example commands
Appendix H NetBIOS filter commands 281 BCM50a Integrated Router Configuration — Advanced • 0 = LAN to WAN and WAN to LAN • 3 = IPSec packet pass through <on|off> is a switch to enable or disable the filter. • For type 0, use on to enable the filter and block NetBIOS packets. Use off to disable...
Page 282 - Appendix I; Enhanced DHCP option commands; The following describes the DHCP option commands.; Enhanced DHCP option commands introduction; Specifying the Nortel BCM50 IP address
282 BCM50a Integrated Router Configuration — Advanced Appendix I Enhanced DHCP option commands The following describes the DHCP option commands. Enhanced DHCP option commands introduction The enhanced DHCP feature allows you to use DHCP option commands to add site-specific options to the DHCP server...
Page 283 - Nortel BCM50 DHCP server options; BCM50 DHCP server settings
Appendix I Enhanced DHCP option commands 283 BCM50a Integrated Router Configuration — Advanced The following example sets the BCM50a Integrated Router to assign an IP address of 11.12.13.10 to the Nortel BCM50. ip dhcp <interface> server m50ipreserve ip 11.12.13.10 Nortel BCM50 DHCP server opt...
Page 284 - Appendix I Enhanced DHCP option commands; BCM50 IP sets override setting
284 Appendix I Enhanced DHCP option commands N0115791 Use this command to configure the Nortel BCM50 DHCP server’s settings. BCM50 IP sets override setting Syntax: ip dhcp <interface> server overrideipsetinfo [0|1] [0:disable | 1:IP phones only | 2:All devices | 3:automatic] This is the Nortel...
Page 285 - “Nortel i2004 IP phone options; Nortel i2004 IP phone options; VoIP server settings assignment
Appendix I Enhanced DHCP option commands 285 BCM50a Integrated Router Configuration — Advanced where: Use this command to set the Nortel BCM50 DHCP to assign VoIP server and VLAN settings to Nortel’s IP Telephone 2004. You must also configure the VoIP server and VLAN settings assignment, see the “No...
Page 286 - This command sets DHCP option 128.; VLAN ID assignment; Use this command to assign VLAN IDs to IP Telephone 2004.
286 Appendix I Enhanced DHCP option commands N0115791 Use this command to assign VoIP server information to Nortel’s i2004 VoIP telephones. This command sets DHCP option 128. The following example commands set the BCM50a Integrated Router to assign information for two VoIP servers. The first command...
Page 287 - This command sets DHCP option 191.; TFTP server IP address assignment
Appendix I Enhanced DHCP option commands 287 BCM50a Integrated Router Configuration — Advanced This command sets DHCP option 191. The following example sets the BCM50a Integrated Router to assign a VLAN ID of five to VoIP telephones. ip dhcp enif0 server vlanid 5 Nortel WLAN handsets 2210 & 2211...
Page 288 - WLAN IP Telephony Manager IP Address Assignment; This command sets DHCP option 151.
288 Appendix I Enhanced DHCP option commands N0115791 WLAN IP Telephony Manager IP Address Assignment Syntax: ip dhcp <interface> server wlantelmanager [none |<serverIP>] where: Use this command to assign a WLAN Telephony Manager 2245 IP address to WLAN Handsets 2210 & 2211. This com...
Page 289 - Appendix J; Log descriptions; This appendix provides descriptions of log messages.; System error logs
289 BCM50a Integrated Router Configuration — Advanced Appendix J Log descriptions This appendix provides descriptions of log messages. Table 66 System error logs Log Message Description %s exceeds the max. number of session per host! This attempt to create a SUA/NAT session exceeds the maximum numbe...
Page 292 - Appendix J Log descriptions; See; Attack logs
292 Appendix J Log descriptions N0115791 See Table 73 for type and code details. teardrop TCP The firewall detected a TCP teardrop attack. teardrop UDP The firewall detected an UDP teardrop attack. teardrop ICMP (type:%d, code:%d) The firewall detected an ICMP teardrop attack. illegal command TCP Th...
Page 295 - Access logs
Appendix J Log descriptions 295 BCM50a Integrated Router Configuration — Advanced See Table 73 for type and code details. (set:%d) With firewall messages, this is the number of the ACL policy set and denotes the packet's direction (see Table 72 ). With filter messages, this is the number of the filt...
Page 296 - ICMP notes
296 Appendix J Log descriptions N0115791 Table 72 ACL setting notes ACL Set Number Direction Description 1 LAN to WAN ACL set 1 for packets traveling from the LAN to the WAN. 2 WAN to LAN ACL set 2 for packets traveling from the WAN to the LAN. 7 LAN to LAN/BCM50a Integrated Router ACL set 7 for pac...
Page 297 - shows a typical log from the; Sys log
Appendix J Log descriptions 297 BCM50a Integrated Router Configuration — Advanced VPN/IPSec logs To view the IPSec and IKE connection log, type 3 in menu 27 and press [ENTER] to display the IPSec log as shown next. Figure 136 shows a typical log from the initiator of a VPN connection. 0 Echo message...
Page 299 - VPN responder IPSec log; shows a typical log from the VPN connection peer.; Example VPN responder IPSec log; shows sample log messages during IKE key exchange.
Appendix J Log descriptions 299 BCM50a Integrated Router Configuration — Advanced VPN responder IPSec log Figure 137 shows a typical log from the VPN connection peer. Figure 137 Example VPN responder IPSec log This menu is useful for troubleshooting. A log index number, the date and time the log was...
Page 301 - Sample IKE key exchange logs
Appendix J Log descriptions 301 BCM50a Integrated Router Configuration — Advanced !! Active connection allowed exceeded The BCM50a Integrated Router limits the number of simultaneous Phase 2 SA negotiations. The IKE key exchange process fails if this limit is exceeded. !! IKE Packet Retransmit The B...
Page 302 - shows sample log messages during packet transmission.; Sample IPSec logs during packet transmission
302 Appendix J Log descriptions N0115791 Table 76 shows sample log messages during packet transmission. Table 77 shows RFC-2408 ISAKMP payload types that the log displays. Refer to the RFC for detailed information on each type. Table 76 Sample IPSec logs during packet transmission LOG MESSAGE DESCRI...
Page 303 - RFC-2408 ISAKMP payload types
Appendix J Log descriptions 303 BCM50a Integrated Router Configuration — Advanced CER Certificate CER_REQ Certificate Request HASH Hash SIG Signature NONCE Nonce NOTFY Notification DEL Delete VID Vendor ID Table 78 PKI logs Log Message Description Enrollment successful The SCEP online certificate en...
Page 305 - Log commands; Go to the command interpreter interface (see; Certificate path verification failure reason codes
Appendix J Log descriptions 305 BCM50a Integrated Router Configuration — Advanced Log commands Go to the command interpreter interface (see Appendix G, “Command Interpreter” on page 241 for information on how to access and use the commands). 9 Certificate decoding failed. 10 Certificate was not foun...
Page 306 - Displaying logs; Log categories and available settings
306 Appendix J Log descriptions N0115791 Configuring what you want the BCM50a Integrated Router to log Use the sys logs load command to load the log setting buffer that is used to configure which logs the BCM50a Integrated Router is to record. Use sys logs category followed by a log category and a p...
Page 307 - Log command example
Appendix J Log descriptions 307 BCM50a Integrated Router Configuration — Advanced Use the sys logs display [log category] command to show the logs in an individual BCM50a Integrated Router log category. Use the sys logs clear command to erase all of the BCM50a Integrated Router’s logs. Log command e...
Page 309 - Example; sys pwderrtm 5
309 BCM50a Integrated Router Configuration — Advanced Appendix KBrute force password guessing protection Table 81 describes the commands for enabling, disabling and configuring the brute force password guessing protection mechanism for the password. Example sys pwderrtm 5 This command sets the passw...
Page 310 - Appendix K Brute force password guessing protection
310 Appendix K Brute force password guessing protection N0115791
Page 311 - Index; Numbers; DDNS
BCM50a Integrated Router Configuration — Advanced 311 Index Numbers 4-Port Switch 31 A ADSL standards 30Alternative Subnet Mask Notation 234Applications 37AT command 55, 162ATM Options 79Authentication 69, 73Authentication Protocol 69Autonegotiating 10/100 Mb/s Ethernet LAN 32Autosensing 10/100 Mb/s...