Home
Главная
Planet
Коммутаторы
GRT-101
Инструкция по эксплуатации Страница: 15

Planet GRT-101 [15/76] Bridge mode

PLANET Technology Corp. GRT-101/401/402 User’s Manual

3.3 Web operation and Quick Installation

Guide

3.3.1 Bridge Mode

- -

Содержание

G shdsl bridge router 1
Grt 101 grt 401 grt 402 1
User s manual 1
Ce mark warning 2
Copyright 2
Disclaimer 2
Planet technology corp grt 101 401 402 user s manual 2
Revision 2
Trademarks 2
Table of contents 3
Atm protocol 6
Chapter 1 overview 6
Software features 6
Software specifications 6
Bridging 7
Configuration 7
Network management 7
Ppp support 7
Routing capability 7
Hardware specification 8
Chapter 2 installation 9
Figure 2 1 grt 101 front panel 9
Figure 2 2 grt 401 front panel figure 2 2 grt 401 front panel 9
Figure 2 3 grt 402 front panel 9
Front panel leds 9
Table 2 1 grt 101 led functions 9
The following table describes the leds functions the following table describes the leds functions 9
The leds on the front panel indicate the operational status of grt series 9
Figure 2 4 grt 101 rear panel 10
Figure 2 5 grt 401 grt 402 rear panel the following table describes the connectors functions 10
Rear panel connections 10
Rear panel ports 10
Table 2 2 grt 401 grt 402 led functions 10
Table 2 3 connector functions 10
The connectors on the rear panel provide power lan console and line interfaces 10
The figure shows the rear panel connections of grt series 10
Setting up the hardware environment 12
Chapter 3 configuration 13
Logon procedure 13
Purpose 13
Serial console 13
Telnet 14
Web browser 14
Bridge mode 15
Web operation and quick installation 15
Web operation and quick installation guide 15
Web ui configuration 16
Console configuration 17
Routing mode for pppoa and pppoe with ip 17
Routing mode for pppoa and pppoe with ip sharing 17
Sharing 17
Web ui configuration 17
Console configuration 20
Routing mode for ipoa or eoa 21
Web ui configuration 21
Console configuration 23
Lan to lan connection with bridge mode 24
Web ui configuration 24
Console configuration 26
Stu c cpe side 26
Advanced setup 27
Bridge 29
To modify the rip routing information protocol parameters rip mode enable auto rip summary enable press modify 30
With dynamic routing you can enable grt series to automatically adjust to physical changes in the network s layout the cable dsl firewall router using the rip protocol determines the network packets route based on the fewest number of hops between the source and the destination the rip protocol regularly broadcasts routing information to other routers on the network click route to modify the routing information 30
Nat dmz 32
Virtual server 33
Administration 34
Security 34
In the table of current trap host pool in the table of current trap host pool you can setup the trap host press modify to modify the community pool 35
Simple network management protocol snmp is the protocol not only governing network management but also the monitoring of network devices and their functions grt series can generate snmp traps to indicate alarm conditions and it relies on snmp community strings to implement snmp security this gateway support mib ii click snmp to configure the parameters in the table of current community pool you can setup the access authority 35
Snmp status enable access right deny for deny all access access right read for access read only access right write for access read and write community it serves as password for 35
Time sync 36
Config tool 37
Restart 38
Status 38
Upgrade 38
Command line interface 39
Changes to nonvolatile ram nvram you must work in enable mode follow the steps below to invoke the enable mode 40
Follow the steps below to change the user interface to select menu driven interface for user profile 1 default user profile enter 40
For the menu interface there is a method to enable cli mode temporarily for script input by pressing ctrl u simultaneously you can see the cli system prompt in the command line window 40
Multi level password protection 40
Press ctrl u again in the command line window to back to the menu driven 40
The following command select cli mode for user profile 1 40
To enable your changes reboot the system 40
To save your changes enter 40
When you login via serial console or telnet grt series defaults to a program execution read only privileges to you to change the configuration and write 40
You are now in enable mode the system prompt appears 40
Before applying any changes into machine it is suggested to ensure the modifications and operations in grt series cli menu driven configurations following table is the main cli menu 41
Command line interface menu tree 41
Command line menu tree are shown in the following figures all of the configuration commands are placed in the subdirectories of enable protected by supervisor password on the other hand unauthorized user cannot change any configurations but viewing the status and configuration of grt series and using ping command to make sure machine network status 41
Interface 41
Menu driven command line interface 41
Firmware backup and restore system configurations via utility menu 45
Message please input the following information supervisor password in this sub menu you can setup management parameters upgrade machine 45
To enable and press enter key grt series will prompt for password for enable mode insert 45
Status 46
To write and press enter 46
You can view running system status of shdsl wan route and interface via status command 46
You can view the system information configuration and configuration in command script by show command 46
Administration 47
Reboot 47
To admin and press enter 47
To ping and press enter 47
To write and press enter 47
User profile 47
You can use user command to clear modify and list the user profile you can setup at most five users to access grt series via console port or telent in user 47
Security 48
Supervisor password and id 48
The supervisor password and id are the last door for security but the most important users who access grt series via web browser console port or telnet have to use the id and password to configure grt series suggest to change the id and password 48
To security and press enter the default legal address is 0 it means that there is no restriction of ip to access grt series via telnet 48
To snmp and press enter 48
To user and press enter key 48
You can delete the user by number using clear command if you do not make sure the number of user you can use list command to check it modify command is to modify an old user information or add a new user to user profile 48
If you want to exit the system without saving use exit command to quit system 49
There are three utility tools upgrade backup and restore embedded in the firmware you can update the new firmware via tftp upgrade tools and backup the configuration via tftp backup tool and restore the configuration via tftp restore tool for upgrade tftp server with the new firmware will be supported by supplier but for backup and restore you must have your own tftp server to backup and restore the file 49
To sntp and press enter 49
Utility 49
There are two types of shdsl mode stu r and stu c stu r means the terminal of central office and stu c customer premises equipment grt 402 s link type will be 2 wire or 4 wire mode according to the product 50
To mode and press enter 50
To setup and press enter 50
To shdsl and press enter 50
There are four types of protocols ipoa eoa pppoa and pppoe which is supported by your isp for pppoa and pppoe you do not need to setup ip address and subnet mask there is an unique vpi and vci value for internet connection supported by isp the range of vip is from 0 to 255 and vci from 0 to 65535 there are two types of encapsulation types vc mux and llc you can setup virtual circuit quality of service vc qos using qos command there are two qos class ubr and cbr the peak cell rate can be configured from 64kbps to 2400kbps isp command can configure account name password and idle time idle time are from 0 minute to 300 minutes you can review the wan interface configuration via list command 51
To wan and press enter to setup wan1 type 1 51
Wire product can be worked under 2 wire mode you can setup the data rate by the multiple of 64kbps n is from 0 to 32 if you configure n is 0 the product will perform as adaptive mode there are two types of shdsl annex type annex a and annex b clear command can clear crc error count generally you cannot need to change snr margin which range is from 0 to 10 51
Bridge 52
For more nat pat and dmz information review nat dmz section 52
Gateway default gateway 52
Ip share 52
Static static static bridging table 52
To route and press enter 52
You can setup 20 sets of static route in static command 52
You can setup default gateway ip via gateway command you can setup default gateway ip via gateway command you can setup 20 sets of static bridge in static command 52
Default 53
Dns proxy 53
Fixed fixed configure fixed host ip address list list show dhcp configuration 53
For more dhcp information review dhcp server section 53
Generic configure generic dhcp parameter 53
Host name 53
To default and then press enter 53
To dns_proxy and press enter 53
To hostname and press enter 53
Bridge management 54
Bridging mode 54
Connection mode 54
Grt series supports two connection modes bridging and routing currently it comes pre configured with routing mode note that routing mode and bridging mode cannot be used simultaneously to let grt series operate in bridging mode type 54
To enable your changes reboot the system 54
To save changes enter 54
To save your changes enter 54
To set grt series operating in routing mode enter 54
When grt series operates in bridging mode it behaves like a wire connecting a local pc directly to a service provider s network bridge data is encapsulated using the rfc1483 protocol to enable data transport grt series currently supports ieee 802 d transparent learning bridge 54
You can manage grt series using telnet either from lan interface or from wide area network wan interface the following procedure shows how to 54
Set up grt series for bridging management with ip 192 68 subnet mask 255 55 55 and gateway ip 192 68 54 55
Static bridge table 55
The ip address should be an ip address on the same network as that of the far end station the gateway ip address should be the ip address of the far end station that is used to route the lan packets to save your changes enter 55
This grt series supports a transparent learning bridge which will establish the bridge table automatically from the incoming data therefore it is unnecessary to setup the static bridge table manually in case you need to arrange the static bridge table see the description below the following commands show how to setup the static bridge table by add command 55
To enable your changes reboot the system 55
To list the content of the table use the list command 55
Lan setting 56
Routing is often confused with bridging which performs a similar function the principal difference is that bridging occurs at a lower level mac layer whereas routing occurs at a higher level e g ip layer and because routing occurs at a higher level it can perform more complex analysis to determine the optimal path for the packet grt series supports ip routing which can be static and or ripv1 v2 updating also several applications such as nat pat dhcp server and dns proxy etc are included for lan management and control 56
Routing mode 56
To delete the first entry of the table use the delete command 56
To modify the first entry in the table use the modify command 56
To save your changes enter 56
To setup grt series lan interface with ip address of 192 68 and subnet mask of 255 55 55 use the following command 56
For detailed configuration about ripv1 ripv2 please refer to the on line help message by the following commands 57
In general it is not recommended to add multiple entries with the format of default route network address 0 with subnet mask of 0 if there are multiple entries with the format of default route in the static routing table the system will automatically select only one entry to be the default route among these entries with resolvable gateway 57
In order to pass data through a network and onto the internet or wan you might need to add the ip addresses of gateways to the static routing table follow the instructions below to build a static routing table manually by adding or deleting entries in the table for example to add a route to network address 140 82 with subnet mask of 255 55 55 via gateway at 140 82 54 57
Static routing table 57
To enable rip updating with auto summary for routing table type 57
To save your changes enter 57
To set a default route with gateway of 140 82 54 use the below command 57
To show the configuration use the list command 57
Nat pat 58
In the above example it might happen that packets from some hosts will be dropped when the number of hosts having concurrent requests to the external network is greater than the number of external ip addresses if it is necessary to guarantee that some hosts e g 192 68 1 192 68 3 can access internet at any time you can use the fixed ip address mapping pool with extra external ip addresses 69 10 69 10 0 also given from isp via wan 1 59
Possible when the number of hosts having concurrent requests to the external network is equal to or less than the number of external ip addresses on grt series to setup grt series working for the above situation where wan 1 is used to connect to the corresponding isp use the below commands 59
To save your changes enter 59
To show the configuration use the list command 59
Another function provided by this grt series nat pat is the virtual server mapping specific ports on the wan interface e g wan 1 are re mapped to services inside the lan as only 69 10 e g assigned to wan 1 from isp is visible to the internet but does not actually have any services other than nat off course running on grt series it is said to be a virtual server for example requests with tcp made to 69 10 80 are remapped to the server 1 on 192 68 80 other requests with udp made to 69 10 25 are remapped to server 2 on 192 68 25 to set grt series for the above nat function use 60
To save your changes enter 60
To show the configuration use the list command 60
Dhcp server 61
Dns is the naming system for ip based networks and the naming service that is used to locate computers on the internet a dns proxy receives dns request from computers on the lan translates them into the encoding on dns protocol and forwards to the real dns server to enable the dns proxy please correctly set up the dns proxy so that it can point towards real dns servers on the internet the following example shows you how to setup the ip 61
Dns proxy 61
In most applications the value of gateway ip address is the same as the lan ip address of grt series the value of name server ip address should point towards a valid host that provides dns lookup service these parameters should be configured correctly or computers on the lan may not access internet 61
The dhcp server application automatically assigns ip addresses to dhcp clients follow the steps below to enable the dhcp applications the example sets a dhcp server which could service 50 dhcp clients the available ip addresses for dhcp clients are located from 192 68 to 192 68 1 in this example the lan environment is configured with gateway of 192 68 and subnet mask of 255 55 55 the ip address of 168 5 is set as a dns server 61
To save your changes type 61
Shdsl operation 62
Wan and atm virtual connection 62
Atm virtual connection 63
For bridging mode operation you should select ethernet over atm rfc 1483 bridged ethernet as the atm protocol for routing mode operation grt series supports ethernet over atm rfc 1483 bridged ethernet ip over atm rfc 1483 routed ip rfc 1577 ppp over atm rfc 2364 and ppp over ethernet rfc 2516 the following example enables the atm vc wan 3 with protocol of ethernet over atm 64
Llc header of the packet the vc based multiplexing method carries each protocol on a separate atm virtual circuit this method is sometimes used in private networks in which pvc creation is very economical 64
The valid ranges for the vpi is from 0 to 255 for the vci it is between 0 and 65535 the following example set the vpi vci 0 135 for atm vc wan 3 64
To change the encapsulation from default llc to vc mux for atm vc wan 3 64
To review the new configuration you have changed for wan 3 type 64
Where the selectable parameters corresponding to the above atm protocols are ethernet ipoa pppoa and pppoe to disable the pre configured atm vc wan 1 enter 64
Atm traffic shaping 65
The objectives of atm traffic management are to deliver quality of service qos guarantees for the multimedia applications and provide overall optimization of network resources currently grt series supports two kinds of atm qos service constant bit rate cbr and unspecified bit rate ubr the cbr connection involves a static amount of bandwidth allocated for those applications of video voice and circuit emulation the bandwidth is characterized by the peak cell rate pcr in the configuration the ubr connection allows you to define the pcr too however it has the lowest priority and is with no qos guarantees the range of the pcr is from 64 to 2400kbps to set the class of the atm traffic shaping for wan 3 to cbr with pcr of 512kbps enter 65
To review the new configuration you have changed for wan 3 type 65
To save the new wan port configuration enter 65
Isp profile for ppp 66
To review the new configuration you have configured type 66
To save the new wan port configuration enter 66
To set the wan 3 with ip address of 192 68 and subnet mask of 255 55 55 follow the following example 66
Wan ip address 66
Dial on demand each time a request is made from a host on the lan grt series checks the link status of the wan ports and transfers the packets if the link status is active when the link status is not active it performs login procedure with the account information of isp profiles and then transfers the packets if login successfully once the link has been established successfully grt series continuously monitors the traffic over wan links the pppoa or pppoe section will be cut off if there are no packets over the links during the period of idle timeout the valid value for idle timeout is from 0 to 300 minutes the idle timeout of 0 means that the session connects always even there is no traffic over the wan link to save the new wan port configuration enter 67
If your local isp uses protocols of pppoa or pppoe over the atm vc you may need to setup the username and password information provided from your local isp the maximum length of username and password for isp setting is limited to 51 the following command configures the isp profile for wan 3 with username pppoa3 isp com password fuyg47ds and idle timeout of 10 minutes 67
The pppoa and pppoe protocols are designed based on the concept of 67
To review the new configuration you have configured type 67
System status and performance 68
These statistics are crc error count the cyclic redundancy check error count attenuation the difference in decibels db between the power level received at the near end versus the power level transmitted from the far end signal to noise snr margin the snr margin represents the amount of increased received signal in decibels relative to the noise power level that the unit is designed to tolerate without disconnecting from the network to display status of wan ports enter 68
To display specific information for example for the shdsl interface status and performance enter 68
Use the status command to display grt series activities to see a list of applications and interfaces that provide status enter 68
Certainly you can change both user name and password in one command line the maximum length of user name and password is limited to 19 to set the user interface for an existing user profile e g user profile 1 use modify and attrib commands 69
For user profile 1 with password 76gu94t to change the username to titan 69
Grt series comes pre configured with user profile 1 already established that is user admin with password of admin and menu driven user interface the maximum number of user profiles is limited to 5 you can add delete modify or list the user profiles with the commands in the following examples to change anyone of the user name and password you must provide both items together for example to change the password only to 76gu94t for user profile 1 default user name admin enter 69
The following commands add a new user profile 2 test with password 83fdi7s and set the user interface to menu mode 69
To list active route status currently type 69
User profile 69
Management security 70
Since you can manage grt series using telnet and web browser over the network either from lan interface or from wan interface the management security is important that it prevents invalid access to grt series from internet there are extra two levels of protection for grt series telnet and web servers except login password control 70
Telnet port number 70
The valid range of the telnet port number is between 1 and 65534 to show which tcp port number is set to allow access to grt series type 70
To save your changes enter 70
To show all user profiles with attributes type 70
You can specify the tcp port number of the telnet server other than the default tcp port number 23 so that telnet access to default port number cannot reach grt series the example below shows you how to setup the telnet tcp port number from default 23 to 47 70
An empty table means there is not any constraint on the telnet client and web browser ip addresses the example below deletes the first ip entry from the legal ip address pool 71
Legal client ip 71
The maximum number in the legal ip pool is limited to 10 to show how many legal client ip addresses are configured to allow access to grt series enter 71
To save your changes enter 71
You could assign the legal client ip addresses such that only telnet clients and web browsers at the legal client ip addresses can access grt series the following example specifies a legal ip address 192 68 in the pool 71
In addition to managing grt series by means of the command line applications and web browsers you can manage the unit by using a simple network management protocol snmp management station grt series can generate snmp traps to indicate alarm conditions and it relies on snmp community strings to implement snmp security currently snmp rfc 1157 and snmpv2c rfc 1901 agents are implemented also the management information bases mibs supported by grt series include mib ii right now 72
Snmp community 72
Snmp support 72
The below example adds grt series into a snmp community private with read write access right for snmp managers in the same community 72
To disable the snmp community 1 enter the following command 72
To save your changes enter 72
To show the setting of snmp communities with access right type 72
Backup and restore configuration 73
Backup configuration 73
Grt series can generate alarm conditions to snmp manager via snmp traps the following example configures trap 1 with snmpv2c encapsulation the snmp manager is located at 192 68 54 with community private 73
Remember to backup a copy of your configuration file after you have completed configuration of grt series so you can easily recover it when necessary 73
Snmp trap 73
To disable the snmp trap 1 enter the following command 73
To save your changes enter 73
To show the setting of snmp communities with access right type 73
Use show script command to dump the system current configuration in script commands the following is an example 73
After dumping the configuration use the copy and paste function provided by your terminal access program or telnet program to save it to a text file don t miss any script command line or you would loss part of the configuration 74
Before you restore the old configuration back to grt series make sure to clear the whole setting back to the factory defaults first with the following command 74
Restore configuration 74
To restore the configuration copy the content of the whole configuration file which was saved according to section 3 7 backup configuration and paste them into the console cli via your telnet program or terminal access program 74
And reboot the system 75
If grt series is out of date get the latest version from your service provider by the trivial file transfer protocol tftp the tftp allows you to transfer new software images to upgrade grt series refer to section 3 7 backup configuration to backup a copy of your configuration file before upgrading it so you can easily recover the configuration when necessary the following example shows you how to get a kernel software image from a tftp server 192 68 00 where the image file name is kernel bin 75
Software upgrade 75
To save your restored configuration and let it take effect enter 75
Watch the system messages to ensure every command was accepted by the system successfully 75
You check the software version of grt series by the command 75
Be sure to write the new image to nvram and immediately reboot the device to activate it when you log back onto grt series after the reboot then you can use the show system command to verify the version of the new firmware that is active and restore your configuration 76

Planet GRT-101 [15/76] Bridge mode

Содержание

Похожие устройства