Page 2
B-FOCuS 270/285/400 PR Configuration Manual Copyright by ECI Telecom 2001-2003. All rights reserved worldwide. The information contained in this document is proprietary and is subject to all relevant copyright, patent and other laws protecting intellectual property, as well as any specific agreement protecting ECI rights in the aforesaid information.
B-FOCuS 270/285/400 PR Configuration Manual Introduction This manual describes the configuration procedures performed after installing the B- FOCuS 270/285/400PR router. The manual is intended for use by skilled technicians with a solid background in telecommunications. The B-FOCuS router enables the connection of computers interconnected by a local area network (LAN) to the Wide Area Network (WAN) via an ADSL dial-up network.
B-FOCuS 270/285/400 PR Configuration Manual Preparatory Actions 2.1. Required Infrastructure To be connected to the router, the computer requires the following: • CPU: At least 266MHz. • An Ethernet Network Interface Card: Either 10Mbps or 100Mbps. • Operating System: Windows 98, NT, ME, 2000 or XP, Unix or Macintosh.
Page 8
B-FOCuS 270/285/400 PR Configuration Manual 4. Check that the name of the Network Interface Card you used for connecting the computer to the router’s eth0 port appears in the Connect using field. Select Internet Protocol (TCP/IP) and then click Properties. The Internet Protocol (TCP/IP) Properties dialog box appears.
B-FOCuS 270/285/400 PR Configuration Manual Activation To activate the configuration software, you should first connect the router to the computer (or to the LAN), to the telephony network and to the electric power system (see Connection Diagram). To activate the configuration software: 1.
Page 10
B-FOCuS 270/285/400 PR Configuration Manual The display on the right side of the window differs according to the menu selection on the left side. The display presents the default router parameters. Configurable fields can be used to modify the initial settings for customizing the router to specific needs.
B-FOCuS 270/285/400 PR Configuration Manual Basic Operations 4.1. Link Status Upon initializing, the current settings of communication parameters are displayed. This window presents the status of the ADSL communication, the line quality, the transfer rates in the upstream and downstream directions and additional parameters.
B-FOCuS 270/285/400 PR Configuration Manual • RFC 1483 Routed. • PPPoE (PPP over Ethernet). • PPPoA (PPP over ATM). • MER (currently not applicable). A newly installed router is configured as RFC 1483 bridged. In the following sections, we will explain how this default setting can be modified.
B-FOCuS 270/285/400 PR Configuration Manual 4.2.3. PPP Over Ethernet In this configuration, additional management services can be activated, like authentication and efficient bandwidth management (by closing inactive sessions). Additional parameters should be defined: • User name, password and authentication protocol (in most of the cases PAP is used).
B-FOCuS 270/285/400 PR Configuration Manual Note: You cannot change the VCI and VPI values using the Modify command. Instead, delete the old line from the table at the bottom of the dialog box and add a new line with the new parameters.
On. In addition, you can define the RIP version to be used. For additional information concerning the RIP protocol, click RIP Information. The RIP List window appears. This list appears for the B-FOCuS 270/285PR. This list appears for the B-FOCuS 400PR. 4.5. Save & Reboot When a new configuration has been defined, it must be burned into the router’s...
B-FOCuS 270/285/400 PR Configuration Manual 4.6. Erase & Reboot If you want to return to the default configuration settings, you must erase the changes you have made and restart the computer. The default configuration becomes effective only after the reboot.
B-FOCuS 270/285/400 PR Configuration Manual Advanced Operations 5.1. ADSL Mode When selecting ADSL Mode from the Advanced menu, this dialog box appears. Currently only G.DMT is supported. 5.2. DHCP The DHCP protocol enables dynamic allocation of IP addresses for efficient use of the address reservoir.
B-FOCuS 270/285/400 PR Configuration Manual 2. Define: • Interface. Only eth0 is supported, as the router acts as a DHCP Server towards the LAN. • IP address range for allocation in the LAN. • Default gateway (the router’s IP address towards the LAN).
B-FOCuS 270/285/400 PR Configuration Manual The filtering is performed by defining users (of the router’s services); assigning for each user access permissions to the router and to the WAN; and defining filtering rules that apply to certain users and certain types of traffic.
B-FOCuS 270/285/400 PR Configuration Manual 2. Click Delete. To modify the parameters of an existing user: 1. Select the required user using the radio button. 2. Click Modify. The User Modification dialog box appears. 3. Modify the required parameters (user name, password, access services and permissions) and click Apply.
B-FOCuS 270/285/400 PR Configuration Manual The ACL List displays the defined access rules. To add a new rule definition: 1. Click Add. The Access List Configuration dialog box appears. 2. Select whether you want to apply the rule to specific users (from the list of users defined at the Access Control tab) or to all users.
B-FOCuS 270/285/400 PR Configuration Manual As a default, the proxy and the authentication process are disabled. If you want to apply the ACL rules, you must enable the proxy. Note: The proxy must be defined in the router as well as in all the LAN computers.
Page 23
B-FOCuS 270/285/400 PR Configuration Manual 2. Define the rule’s parameters: • Precedence (an integer from 1 to 64K). • Source IP address and subnet mask. • Destination IP address and subnet mask. • Source port range. • Destination port range (use the list).
B-FOCuS 270/285/400 PR Configuration Manual In this case, enter the number of an existing Action ID. The rule’s application parameters are copied from the original definition. You can redefine the precedence to apply this rule at a higher priority. 6. Click Apply.
B-FOCuS 270/285/400 PR Configuration Manual NAPT translates its IP address and port number to other values. When the answer arrives from the WAN, the NAPT server knows how to route it to the originating computer. From the WAN side it is impossible to initiate access to a specific computer within the LAN, unless the proper permissions have been defined.
B-FOCuS 270/285/400 PR Configuration Manual To add a line to the list: 1. Click Add. The Static NAT Configuration dialog box appears. 2. Define the IP address towards the WAN and the IP addresses range for allocation in the LAN.
B-FOCuS 270/285/400 PR Configuration Manual 2. Define the public address, the public port range, the local address, the local port range and the layer 4 protocol (UDP or TCP). 3. Click Apply. Note: In addition to these definitions, open the applicable port in the Firewall (see IP Level Filtering ).
Page 28
B-FOCuS 270/285/400 PR Configuration Manual • mer0 – is not applicable. • adsl0 - is the interface towards the WAN (not definable). • lo0 – is the loop-back interface (not definable). • atm0-atm7 - are the interfaces for IOPA networks.
Page 29
B-FOCuS 270/285/400 PR Configuration Manual 2. Define: • IP address and subnet mask. • Maximal size of a package (MTU). 3. To activate the interface set the status to UP. 4. Click Apply. To define DNS and Default Gateway to all interfaces: 1.
B-FOCuS 270/285/400 PR Configuration Manual 5.5.2. Defining Virtual Channels The VCC tab displays the defined virtual channels. To see virtual channels in the IPoA network: Click List Ipoa. To Delete the encapsulation in a specific channel: Select the required radio button and click Delete Encap.
B-FOCuS 270/285/400 PR Configuration Manual To view ATM parameters: Click Show VCC Quality. A list of VCCs and their parameters appears. 5.5.3. Defining PPPoE The PPPoE tab displays detailed parameters of the dial-up over Ethernet channels. Note that the table’s header consists of two lines, and two lines of data are displayed accordingly for each channel.
B-FOCuS 270/285/400 PR Configuration Manual 5.6. IGMP Proxy The IGMP Proxy is used for transferring video and television channels over telephony infrastructure. You can see a summary table of all the interface definitions as well as the parameters of each interface separately.
B-FOCuS 270/285/400 PR Configuration Manual 5.7. Bridging Ethernet frames are bridged over ATM virtual channels (per RFC 1483). The frames are encapsulated either in LLC mode or in Vc Multiplexing mode. The Bridging menu enables viewing and defining the router’s parameters, when operated as a bridge.
B-FOCuS 270/285/400 PR Configuration Manual 2. Select an interface from the list. You can only select interfaces that have previously been defined as members of the bridging group. 3. Define virtual channels (Vpi and Vci). 4. Select the type of encapsulation.
B-FOCuS 270/285/400 PR Configuration Manual 2. Define the required port parameters and click Apply. To activate the definition Click Enable. 5.7.3. Defining Filtering The Filters tab presents the filtering parameters of Ethernet nodes. For every node in the tree (defined by means of a MAC address of a communication unit in the network), you can define the filtering parameter –...
B-FOCuS 270/285/400 PR Configuration Manual 2. Define the MAC address and Frame (Forward or Block). Click Apply. To modify filtering definitions: 1. Use the radio button to select the node you want to modify and click Modify. The Filter Configuration dialog box appears.
B-FOCuS 270/285/400 PR Configuration Manual 5.9. Firewall Statistics The Firewall Statistics menu presents data for traffic that has passed via the firewall or has been blocked. The Traffic tab displays statistics for all sessions that have reached the firewall. The HTTP tab displays only sessions in the HTTP proxy protocol, sorted by the users that have initiated them.
B-FOCuS 270/285/400 PR Configuration Manual 5.10. System Statistics The System Statistics menu presents general data on the system in which the router operates. The Interface tab displays general data about all interfaces, their statuses and the traffic that has passed through them.
B-FOCuS 270/285/400 PR Configuration Manual 5.11. ATM Statistics The ATM Statistics tab displays data for traffic in the ATM network. The AAL5 tab presents traffic data at the AAL5 layer, used to transfer data channels. The SNDCP tab presents encapsulation data.
B-FOCuS 270/285/400 PR Configuration Manual 5.12.2. Testing at IP Level At the IP level, you can check the connectivity to other computers using the Ping command. Define the destination computer’s IP address and click Submit. 5.12.3. Updating Software Version When a new version of the router’s software is released, it is sent to you in the form of a file with the extension .bin.
B-FOCuS 270/285/400 PR Configuration Manual Workflows This section describes typical workflows for using the B-FOCuS 270/400PR User Interface for performing typical operations. 6.1. Changing User Name and Password (only in 400PR) 1. Login as a PPPoA user, using user name: pppoa and password: user. The PPPoA Configuration dialog box appears.
B-FOCuS 270/285/400 PR Configuration Manual 6.2. Defining a Bridge per RFC 1483 You can define a bridge in two ways. The basic workflow is simple, but most of the parameters are defined by default. The advanced workflow enables detailed definition of most parameters.
B-FOCuS 270/285/400 PR Configuration Manual 6.2.2. Advanced Workflow To define a bridge per RFC 1483 in the advanced way: 1. You have to assign the interfaces you want to define to the bridging group. From the Advanced operations menu select Bridging.
Page 44
B-FOCuS 270/285/400 PR Configuration Manual 9. To define the encapsulation, select Bridging from the Advanced menu and click Add PVC. The Bridge Configuration dialog box appears. 10. Select one of the atm interfaces (in this example, atm1). Enter the VCI and VPI values and select the type of encapsulation.
B-FOCuS 270/285/400 PR Configuration Manual 6.3. Defining a Routed IPoA per RFC 1483 You can define a router in two ways. The basic workflow is simple, but most of the parameters are defined by default. The advanced workflow enables detailed definition of most parameters.
Page 46
B-FOCuS 270/285/400 PR Configuration Manual 3. Define the selected interface, the IP address and subnet mask in the WAN, and the MTU value. Set the status to UP. Click Apply. 4. Check that the newly defined interface appears in the table in the Interface tab and that its status is UP.
B-FOCuS 270/285/400 PR Configuration Manual 11. From the Basic menu select WAN Setup. Check that the channel you have defined appears in Router mode and that NAPT is in the On state. 6.4. Defining Classical IPoA per RFC 1577 Classical IPoA per RFC 1577 can only be done using the Advanced method.
Page 48
B-FOCuS 270/285/400 PR Configuration Manual 8. There are two options: • If you check the Default PVC checkbox, you should define specific VC and VP and the traffic shaping parameters. • If you uncheck the Default PVC checkbox, define the next hop IP address – an address in the WAN from which the routing continues.
B-FOCuS 270/285/400 PR Configuration Manual 13. Select the interface (atm5). Check the Enable NAT checkbox. Click Apply and then click Continue. 14. Check that the interface you have defined appears in the WAN Setup table with NAPT in the On state.
B-FOCuS 270/285/400 PR Configuration Manual 6.5.2. Basic Workflow To define PPP over ATM using the advanced method: 1. From the Advanced operations menu select WAN Configure. 2. In the VCC tab click Add. The VCC Configuration dialog box appears. 3. Select the PPPoA radio button. Define: VPI, VCI, Profile ID, user name (<name>@<domain>) and password, authentication protocol (PAP), a ppp...
B-FOCuS 270/285/400 PR Configuration Manual 8. Check that the interface you have defined appears in the VCC list. Note: After connection to the WAN, you will be able to see the IP address allocated by the ISP (either in the WAN Setup menu or when you login as a PPPoA user).
B-FOCuS 270/285/400 PR Configuration Manual 6.6.2. Advanced Workflow To define PPP over Ethernet using the advanced method: 1. From the Advanced operations menu select Configure. 2. In the VCC tab click Add. The VCC Configuration dialog box appears. 3. Select the PPPoE radio button. Define: VPI, VCI, Profile ID, user name (<name>@<domain>) and password, authentication protocol, a ppp interface,...
B-FOCuS 270/285/400 PR Configuration Manual 6.7. Updating Software Version To load a new software version: 1. From the Advanced menu select Diagnostics and click the Upgrade tab. 2. Click Browse. 3. Locate the new version’s *.bin file. 4. Click Upgrade.
B-FOCuS 270/285/400 PR Configuration Manual Troubleshooting This section describes possible problems arising when the router is used, and suggests possible solutions. 7.1. Defining User Name and Password (Only in 400PR) Phenomenon: You cannot dial up to the WAN. Possible solution: The defined user name and/or password are incorrect.
B-FOCuS 270/285/400 PR Configuration Manual 7.2. Proper Version Upgrading Phenomenon: You cannot access the Configuration definition graphical user interface (GUI). When defining the address 192.168.1.1, an error message appears. Possible solution: The new version has not been installed properly. There might have been a power failure during the upgrade, or the new file was faulty or wrong.
B-FOCuS 270/285/400 PR Configuration Manual 14. Switch the router’s power off. Wait for 5 seconds and switch it on. Try to access the Configuration GUI via the browser. 15. Use the Version option in the Advanced menu to check that the proper version is installed.
This section contains useful information about the router: • Connection diagram. • Indicators. • Technical specifications. 8.1. Connection Diagrams The following figures show how the routers are connected to the computers, telephone network and power source. 8.1.1. B-FOCuS 270 Connections ECI Telecom Ltd. Proprietary...
B-FOCuS 270/285/400 PR Configuration Manual 8.2. Indicators The router’s front panel contains these LED indicators: Condition Status Power is off. Power Power is on. The modem is operating properly. Alarm The modem has a problem. Please call your service provider.
B-FOCuS 270/285/400 PR Configuration Manual 8.3.4. Security 8.3.4.1. Stateful Firewall Security Extracts state-related information required for the security decision from all application layers. 8.3.4.2. Packet Filter Firewall Capable of filtering all information available in the IP packet: • Source and destination interface.
B-FOCuS 270/285/400 PR Configuration Manual 8.3.7. Power • 110/220V AC +/-10%, 50 ~60Hz, • 270PR and 285PR: 9V 800mA. • 400PR: 9V 1.2A. • Power Consumption: • 270PR and 285: lower or equal to 5W. • 400PR: lower or equal to 6W.