Page 2: Legal Notice
Legal Notice Aim and purpose This document is part of the user manual for the installation and configuration of funkwerk devices. For the latest information and notes on the current software release, please also read our release notes, particularly if you are updating your software to a higher release version. You will find the latest release notes under www.funkwerk-ec.com...
Page 3: Table Of Contents
Table of Contents Funkwerk Enterprise Communications GmbH Table of Contents Chapter 1 Introduction ......1 Possible Applications .
Page 4 Table of Contents Funkwerk Enterprise Communications GmbH 3.2.1 Scope of supply ......3.2.2 General Product Features .....
Page 5 Configuration options ..... . . 105 4.3.1 Funkwerk Configuration Interface ....106 4.3.2 SNMP shell .
Page 6 Table of Contents Funkwerk Enterprise Communications GmbH Chapter 5 System management ....State ......123 Global Settings .
Page 7 Table of Contents Funkwerk Enterprise Communications GmbH SHDSL ......175 6.5.1 SHDSL Configuration ..... . . 175 Serial ports .
Page 8 Table of Contents Funkwerk Enterprise Communications GmbH 9.2.1 NAT Interfaces ......228 9.2.2 Portforwarding ......229 RIP .
Page 9 Table of Contents Funkwerk Enterprise Communications GmbH Chapter 11 VPN ......11.1 IPSec .
Page 10 Table of Contents Funkwerk Enterprise Communications GmbH 12.3 Addresses ......381 12.3.1 Address list ......382 12.3.2...
Page 11 Options ......456 14.9 Funkwerk Discovery ..... . . 458 14.9.1 Device discovery .
Page 12 Table of Contents Funkwerk Enterprise Communications GmbH 15.1.2 DNS Test ......467 15.1.3 Traceroute Test .
Page 13 Table of Contents Funkwerk Enterprise Communications GmbH 17.3.1 Current Calls ......493 17.3.2 Call History ......495 17.4...
Page 14 Table of Contents Funkwerk Enterprise Communications GmbH bintec R1xxx/R3xxx/R4xxx...
Page 15: Chapter 1 Introduction
1 Introduction Funkwerk Enterprise Communications GmbH Chapter 1 Introduction The powerful devices bintec R1xxx/R3xxx/R4xxx have been specially developed for high- speed Internet access and for VPN connections in SMEs and branch offices. This chapter describes the features your new bintec gateway offers. It provides you with an overview of the ways in which your bintec gateway can be used.
Page 16: Possible Applications
1 Introduction Funkwerk Enterprise Communications GmbH 1.1 Possible Applications Connecting networks Gateways are used to connect networks and to exchange information between the net- works. For example, you can use your device to establish a connection to the network of your Internet Service Provider and use the usual Internet services, such as the World Wide Web (WWW) or e-mail.
Page 17 1 Introduction Funkwerk Enterprise Communications GmbH ally. To help you save costs, your gateway disconnects the connection after a predefined time (short hold) if no more information is exchanged. Simple data access If suitably configured, your device enables you to conveniently access data at another site, e.g.
Page 18 RADIUS or TACACS+ for authentication. Configuration and maintenance A number of options are available for configuring your gateway. Configuration with the Funkwerk Configuration Interface is operating system-independent. Remote maintenance The devices can also be configured and maintained remotely. As soon as your device is connected to the ISDN - even in its ex works state - configuration settings can be made from another location (e.g.
Page 19: Cleaning
1 Introduction Funkwerk Enterprise Communications GmbH 1.2 Cleaning You can clean your device easily. Use a damp cloth or antistatic cloth. Do not use solvents. Never use a dry cloth; the electrostatic charge could cause electronic faults. Make sure that no moisture can enter the device and cause damage.
Page 20 Typographical elements Typographical element Use • Indicates lists. Menu->Submenu Indicates menus and sub-menus in the Funkwerk Configura- tion Interface and Windows interface. File->Open Non-proportional Indicates commands that you must enter as written. (Courier), e.g. ping...
Page 21 Windows Indicates keys, key combinations and Windows terms. Start menu bold, e.g. biboAdmLo- Indicates fields in the Funkwerk Configuration Interface . ginTable italic, e.g. none Indicates values that you enter or that can be configured. Online: blue and italic, Indicates hyperlinks.
Page 22: Chapter 2 Quick Reference
Funkwerk Configuration Interface . 2.1 Introduction You configure your device using the Funkwerk Configuration Interface . The way to obtain the basic configuration is explained below step-by-step. Detailed know- ledge of networks is not necessary. A detailed online help system gives you extra support.
Page 23: Installation
Your device contains the version of the system software available at the time of production. More recent versions may have since been released. You can easily perform an update with the Funkwerk Configuration Interface using the Maintenance-> Software & Con- figuration menu.
Page 24: Connections
2 Quick Reference Funkwerk Enterprise Communications GmbH bintec R1200wu Fig. 3: Basic scenario Caution Please read the safety precautions carefully before installing and starting up your device. These are supplied with the device. 2.4.1 Connections All connections are located on the back of the device.
Page 25 2 Quick Reference Funkwerk Enterprise Communications GmbH ISDN-0 - ISDN-1 ISDN interface bintec R1200w Fig. 5: Back of Mains switch Socket for plug-in power pack DMZ/ETH5 Ethernet interface Main and AUX RSMA connection ETH2 - ETH4 Ethernet interface ETH1 / Console...
Page 26 2 Quick Reference Funkwerk Enterprise Communications GmbH bintec R3000 Fig. 7: Back of Mains switch Socket for plug-in power pack DMZ/ETH5 Ethernet interface ETH2 - ETH4 Ethernet interface ETH1 / Console Ethernet interface with serial interface function ISDN-0 - ISDN-1...
Page 27 2 Quick Reference Funkwerk Enterprise Communications GmbH bintec R3400 and R3800 Fig. 9: Back of Mains switch Socket for plug-in power pack DMZ/ETH5 Ethernet interface ETH2 - ETH4 Ethernet interface ETH1 / Console Ethernet interface with serial interface function ISDN...
Page 28: Setting Up And Connecting
2 Quick Reference Funkwerk Enterprise Communications GmbH bintec R4300 Fig. 11: Back of Mains switch Socket for plug-in power pack DMZ/ETH5 Ethernet interface ETH2 - ETH4 Ethernet interface ETH1 / Console Ethernet interface with serial interface function ISDN-0 - ISDN-1 ISDN interface X.21 / V.35...
Page 29: Configuration Of
The right X.21 interface can also be enabled if licensed. • UMTS (only R1200wu): Insert the UMTS card into the CardBus / UMTS slot. The device is now prepared for configuration using the Funkwerk Configuration Interface. 2.5 Configuration of...
Page 30 This installation is optional and not essential for the configuration or operation of the device. 2.5.1.1 Gathering data You can gather the main data for configuration with the Funkwerk Configuration Inter- face quickly, because you do not need any information that requires in-depth knowledge of networks.
Page 31 2 Quick Reference Funkwerk Enterprise Communications GmbH If you want to set up Internet access, you need an Internet Service Provider (ISP). You also receive your personal access data from your ISP. The terms used for the required access data may vary from provider to provider, but the type of information you need for dialling in is basically the same.
Page 32 2 Quick Reference Funkwerk Enterprise Communications GmbH 00012345678906112345678#0001@t-online.de Wireless LAN (only for bintec R1200w, bintec R1200wu and bintec R3000w) You can operate your device as an access point and therefore connect individual work sta- tions (e.g. laptops, PCs with wireless card or wireless adapter) by wireless connections to your local network via WLAN (Wireless LAN) and let them communicate with each other.
Page 33 2 Quick Reference Funkwerk Enterprise Communications GmbH Data for connection to a company network Access data Example value Your values Partner name BigBoss (Key of company head office) Dial-in number: 0911987654321 (Call number of the company head office's device) Local name LittleIndian (Your own code.
Page 34 The computer now has an IP configuration and can access the Internet via the gateway. Note You can open the Funkwerk Configuration Interface by entering the IP address of your device (192.168.0.254) in a supported browser (Internet Explorer 6 or 7, Mozilla Firefox version 1.2 or later) and entering the pre-configured login information ( User:...
Page 35: Setting Up An Adsl Connection
2 Quick Reference Funkwerk Enterprise Communications GmbH 2.5.2 Setting up an ADSL connection (1) Go to the WAN->ATM->Profiles menu. There is a pre-configured profile that you can adapt to the requirements. (2) Choose to check the settings of the existing profile.
Page 36: Setting Up A Wireless Lan (Only Bintec R1200W, R1200Wu And R3000W)
2.5.3 Setting up a wireless LAN (only bintec R1200w, R1200wu and R3000w) Proceed as follows to use your device as an access point in WPA-PSK mode: (1) Go to the Wireless LAN->WLAN1 menu. One VSS is pre-configured: Funkwerk-ec. (2) Choose to modify the settings of the existing VSS.
Page 37: Support Information
2.6 Support Information If you have any questions on your new product or would like more information, you can reach the Support Center of Funkwerk Enterprise Communications GmbH under the follow- ing call number or via the E-mail Hotline: +49 911 9673 1550 hotline@funkwerk-ec.com...
Page 38: Chapter 3 Technical Data
3 Technical data Funkwerk Enterprise Communications GmbH Chapter 3 Technical data This chapter summarises all the hardware properties of the R1200, R1200w, R1200wu, R3000, R3000w, R3400, R3800, R4100 and R4300 devices. 3.1 bintec R1200 3.1.1 Scope of supply Your device is supplied with the following parts: •...
Page 39 3 Technical data Funkwerk Enterprise Communications GmbH Property Value Dimensions and weights: Equipment dimensions 295 mm x 45 mm x 160 mm without cable (B x H x Weight approx. 1260 g Transport weight (incl. approx. 2,6 kg documentation, cables,...
Page 40: Leds
3 Technical data Funkwerk Enterprise Communications GmbH Property Value function ISDN-WAN S0 (2) Permanently installed DMZ/ETH5 Additional Ethernet switch port Available sockets: Serial interface V.24 RJ45 socket Ethernet interface RJ45 socket ISDN interface RJ45 socket Standards & R&TTE Directive 1999/5/EC...
Page 41 3 Technical data Funkwerk Enterprise Communications GmbH bintec R1200 Fig. 12: LEDs on In operating mode, the LEDs display the following status information for your device: LED status display State Information Power The power supply is connected. State Permanently on or Error.
Page 42: Connections
Bottom row 3.1.4 Connections All the connections are located on the back of the device. bintec R1200 has a 4-port Ether- net switch including a port with serial interface function, a DMZ/ETH5 interface and two ISDN interfaces. The connections are arranged as follows: bintec R1200 Fig.
Page 43: Pin Assignments
3.1.5 Pin Assignments 3.1.5.1 Ethernet interface The bintec R1200 has an Ethernet interface with an integrated 4-port switch (ETH1 - ETH4) and a separate Ethernet interface (DMZ/ETH5). The 4-port switch is used to connect individual PCs or other switches. The ETH1/Console interface can also be used as a serial interface.
Page 44: Bintec R1200W
The combined serial Ethernet 10/100Base-T interface does not have an Auto-MDI-X func- tion. 3.1.5.2 ISDN So interface bintec R1200 has two additional ISDN-So interfaces, which can be used for back-up func- tions, for example. The connection is made via an RJ45 socket: Fig.
Page 45: Scope Of Supply
3 Technical data Funkwerk Enterprise Communications GmbH 3.2 bintec R1200w 3.2.1 Scope of supply Your device is supplied with the following parts: • Cable sets/mains unit: - Ethernet cable - ISDN cable - Serial connecting cable - Plug-in power pack •...
Page 46 3 Technical data Funkwerk Enterprise Communications GmbH Property Value Equipment dimensions 295 mm x 45 mm x 160 mm + 8 mm (antenna socket) without cable (B x H x Weight approx. 1260 g Transport weight (incl. approx. 2,6 kg...
Page 47 3 Technical data Funkwerk Enterprise Communications GmbH Property Value DMZ/ETH5 Additional Ethernet switch port 802.11b, 802.11g and 802.11a with Antenna Diversity Available sockets: Serial interface V.24 Ethernet interface RJ45 socket ISDN interface RJ45 socket Standards & RJ45 socket Guidelines SAFERNET TM Secur- Community passwords, PAP, CHAP, MS-CHAP, MS-CHAP v.2,...
Page 48: Leds
3 Technical data Funkwerk Enterprise Communications GmbH 3.2.3 LEDs The device LEDs provide information on certain activities and statuses of the device. They are arranged as follows: bintec R1200w Fig. 16: LEDs on In operating mode, the LEDs display the following status information for your device:...
Page 49: Connections
3 Technical data Funkwerk Enterprise Communications GmbH State Information flashing Both ISDN B channels are active. ISDN-1 B/D ISDN D-channel is active. Top row ISDN-1 B/D One ISDN B channel is active. Bottom row flashing Both ISDN B channels are active.
Page 50: Pin Assignments
3 Technical data Funkwerk Enterprise Communications GmbH bintec R1200w Fig. 17: Back of Back of bintec R1200w Mains switch Socket for plug-in power pack DMZ/ETH5 Ethernet interface Main and AUX RSMA connection ETH2 - ETH4 Ethernet interface ETH1 / Console...
Page 51 3 Technical data Funkwerk Enterprise Communications GmbH RJ45 socket for Ethernet connection Function TD + TD - RD + Not used Not used RD - Not used Not used The Ethernet 10/100 BASE-T interface does not have an Auto-MDI-X function.
Page 52: Bintec R1200Wu
3 Technical data Funkwerk Enterprise Communications GmbH Fig. 19: ISDN So BRI interface (RJ45 socket) The pin assignment for the ISDN So BRI interface (RJ45 socket) is as follows: RJ45 socket for ISDN connection Function Not used Not used Transmit (+)
Page 53: General Product Features
3 Technical data Funkwerk Enterprise Communications GmbH • Documentation: - Quick Install Guide (printed) - User's Guide (on CD) - Release Notes, if required - Safety precautions 3.3.2 General Product Features The general product features cover performance features and the technical prerequisites for installation and operation of your device.
Page 54 3 Technical data Funkwerk Enterprise Communications GmbH Property Value Environmental require- ments: Storage temperature -20° to +70 °C Operating temperature 0° to 40 °C Relative atmospheric hu- 10 % to 90 % non-condensing in operation, midity 5 % to 95 % non-condensing when stored Room classification Only use in dry rooms.
Page 55: Leds
3 Technical data Funkwerk Enterprise Communications GmbH Property Value BRICKtools for Unix Printed documentation Quick Reference supplied Online documentation User's Guide BRICKware for Windows (Engl.) Software Reference (Engl.) Note Antenna Diversity The two antennas do not have equality of access. One is used both to transmit and re- ceive (marked as "main", "primary"...
Page 56 3 Technical data Funkwerk Enterprise Communications GmbH State Information State Permanently on or Error. flashing The device is active. ETH 1 to 5 The device is connected to the Ethernet. Top row flashing Data traffic via the Ethernet interface. ETH 1 to 5 Data traffic at 100 mbps.
Page 57: Connections
3 Technical data Funkwerk Enterprise Communications GmbH State Information WLAN flashing Data traffic via the WLAN interface. Top row WLAN slow flashing The WLAN module is active. Bottom row At least one WLAN client is connected. 3.3.4 Connections All the connections are located on the back of the device. bintec R1200wu has a 4-port Ethernet switch including a port with serial interface function, a DMZ/ETH5 interface and two ISDN interfaces as well as a CardBus slot for a UMTS modem.
Page 58: Pin Assignments
3 Technical data Funkwerk Enterprise Communications GmbH 3.3.5 Pin Assignments 3.3.5.1 Ethernet interface The bintec R1200wu has an Ethernet interface with an integrated 4-port switch (ETH1 - ETH4) and a separate Ethernet interface (DMZ/ETH5). The 4-port switch is used to connect individual PCs or other switches. The ETH1/Console interface can also be used as a serial interface.
Page 59 3 Technical data Funkwerk Enterprise Communications GmbH Function TD - (Ethernet) RD + (Ethernet) RX (console) GND (console) RD - (Ethernet) GND (console) TX (console) The combined serial Ethernet 10/100 BASE-T interface does not have an Auto-MDI-X func- tion. 3.3.5.2 ISDN So interface bintec R1200wu has two additional ISDN-So interfaces, which can be used for back-up functions, for example.
Page 60 3 Technical data Funkwerk Enterprise Communications GmbH 3.3.5.3 CardBus interface (PCMCIA) The CardBus interface allows a UMTS CardBus modem to be added to the system. The modem card is inserted in the existing CardBus slot and is integrated automatically by the system.
Page 61 3 Technical data Funkwerk Enterprise Communications GmbH Function Description CINT# CardBus IREQ Card power supply VPP1 Programming voltage 1 CCLK CardBus cycle CIRDY# CardBus initiator ready CCBE2# Command/Byte possible 2 CAD18 Mpx address/data 18 CAD20 Mpx address/data 20 CAD21 Mpx address/data 21...
Page 62: Bintec R3000
3 Technical data Funkwerk Enterprise Communications GmbH Function Description CBLOCK# CardBus blocked CSTOP# CardBus stop CDEVSEL# CardBus device selection Card power supply VPP2 Programming voltage 2 CTRDY# CardBus destination ready CFRAME# CardBus Cycle Frame CAD17 Mpx address/data 17 CAD19 Mpx address/data 19...
Page 63: General Product Features
3 Technical data Funkwerk Enterprise Communications GmbH - 2 DSL cables (for Annex A and for Annex B) - Plug-in power pack • bintec Companion CD • Documentation: - Quick Install Guide (printed) - User's Guide (on CD) - Release Notes, if required - Safety precautions 3.4.2 General Product Features...
Page 64 3 Technical data Funkwerk Enterprise Communications GmbH Property Value Power consumption of max. 15 Watt, normally 13 Watt the device Voltage supply 15 V AC 1.3 A EU PSU Environmental require- ments: Storage temperature -20° to +70 °C Operating temperature 0°...
Page 65: Leds
3 Technical data Funkwerk Enterprise Communications GmbH Property Value SAFERNET TM Secur- Community passwords, PAP, CHAP, MS-CHAP, MS-CHAP v.2, ity Technology PPTP, PPPoE, PPPoA, Callback, Access Control Lists, CLID, NAT, SIF, MPPE Encryption, PPTP Encryption, VPN with PPTP or IPSec...
Page 66 3 Technical data Funkwerk Enterprise Communications GmbH State Information ETH 1 to 5 The device is connected to the Ethernet. Top row flashing Data traffic via the Ethernet interface. ETH 1 to 5 Data traffic at 100 mbps. Bottom row Data traffic at 10 mbps.
Page 67: Connections
3 Technical data Funkwerk Enterprise Communications GmbH State Information asynchronous ADSL system error. flashing 3.4.4 Connections All the connections are located on the back of the device. bintec R3000 has a 4-port Ether- net switch including a port with serial interface function, a DMZ/ETH5 interface, two ISDN interfaces and an ADSL interface.
Page 68 3 Technical data Funkwerk Enterprise Communications GmbH The 4-port switch is used to connect individual PCs or other switches. The ETH1/Console interface can also be used as a serial interface. The DMZ/ETH5 interface can be used to connect an optional DSL modem or a DMZ.
Page 69 3 Technical data Funkwerk Enterprise Communications GmbH Function TX (console) The combined serial Ethernet 10/100Base-T interface does not have an Auto-MDI-X func- tion. 3.4.5.2 ADSL interface The ADSL interface is connected via an RJ45 plug. The cable supplied connects the RJ45 plug needed for the device to an RJ45 plug provided for Annex A.
Page 70: Bintec R3000W
3 Technical data Funkwerk Enterprise Communications GmbH Fig. 29: ISDN So BRI interface (RJ45 socket) The pin assignment for the ISDN So BRI interface (RJ45 socket) is as follows: RJ45 socket for ISDN connection Function Not used Not used Transmit (+)
Page 71: General Product Features
3 Technical data Funkwerk Enterprise Communications GmbH • bintec Companion CD • Documentation: - Quick Install Guide (printed) - User's Guide (on CD) - Release Notes, if required - Safety precautions 3.5.2 General Product Features The general product features cover performance features and the technical prerequisites for installation and operation of your device.
Page 72 3 Technical data Funkwerk Enterprise Communications GmbH Property Value Voltage supply 15 V AC 1.3 A EU PSU Environmental require- ments: Storage temperature -20° to +70 °C Operating temperature 0° to 40 °C Relative atmospheric hu- 10 % to 90 % non-condensing in operation,...
Page 73: Leds
3 Technical data Funkwerk Enterprise Communications GmbH Property Value Guidelines CE symbol for all EU states SAFERNET TM Secur- Community passwords, PAP, CHAP, MS-CHAP, MS-CHAP v.2, ity Technology PPTP, PPPoE, PPPoA, Callback, Access Control Lists, CLID, NAT, SIF, MPPE Encryption, PPTP Encryption, VPN with PPTP...
Page 74 3 Technical data Funkwerk Enterprise Communications GmbH In operating mode, the LEDs display the following status information for your device: LED status display State Information Power The power supply is connected. State Permanently on or Error. flashing The device is active.
Page 75: Connections
3 Technical data Funkwerk Enterprise Communications GmbH State Information Top row ADSL provider. The device has successfully synchronised with the DSLAM of the ADSL provider. ADSL flashing Data traffic via the ADSL interface. Bottom row synchronous flash- ADSL Handshake. asynchronous ADSL system error.
Page 76: Pin Assignments
3 Technical data Funkwerk Enterprise Communications GmbH bintec R3000w Fig. 31: Back of Back of bintec R3000w Mains switch Socket for plug-in power pack DMZ/ETH5 Ethernet interface Main and AUX RSMA connection ETH2 - ETH4 Ethernet interface ETH1 / Console...
Page 77 3 Technical data Funkwerk Enterprise Communications GmbH The pin assignment for the Ethernet 10/100 Base-T interface (RJ45 socket) is as follows: RJ45 socket for Ethernet connection Function TD + TD - RD + Not used Not used RD - Not used Not used The Ethernet 10/100 BASE-T interface does not have an Auto-MDI-X function.
Page 78 3 Technical data Funkwerk Enterprise Communications GmbH Fig. 33: ADSL interface (RJ45 socket) The pin assignment for the ADSL interface (RJ45 socket) is as follows: RJ45 socket for ADSL connection Function Not used Not used Not used Line a Line b...
Page 79: Bintec R3400
3 Technical data Funkwerk Enterprise Communications GmbH Function Transmit (+) Receive (+) Receive (-) Transmit (-) Not used Not used 3.6 bintec R3400 3.6.1 Scope of supply Your device is supplied with the following parts: • Cable sets/mains unit: - Ethernet cable...
Page 80 3 Technical data Funkwerk Enterprise Communications GmbH General Product Features Property Value Product name bintec R3400 Dimensions and weights: Equipment dimensions 295 mm x 45 mm x 160 mm without cable (B x H x Weight approx. 1260 g Transport weight (incl.
Page 81 3 Technical data Funkwerk Enterprise Communications GmbH Property Value SHDSL interface Internal SHDSL 4-wire modem for Annex A and Annex B. Bonding technology with 2-wire/4-wire as an inverse multiplexer - performed over IMA in accordance with the ATM forum. Ethernet IEEE 802.3...
Page 82: Leds
3 Technical data Funkwerk Enterprise Communications GmbH Property Value Software Reference (Engl.) 3.6.3 LEDs The device LEDs provide information on certain activities and statuses of the device. They are arranged as follows: bintec R3400 Fig. 35: LEDs on In operating mode, the LEDs display the following status information for your device:...
Page 83: Connections
3 Technical data Funkwerk Enterprise Communications GmbH State Information ISDN-0 B/D One ISDN B channel is active. Bottom row flashing Both ISDN B channels are active. MA / HA flashing BRRP packets are received. Top row MA / HA A user is logged in to the system (e.g. over Tel- net).
Page 84: Pin Assignments
3 Technical data Funkwerk Enterprise Communications GmbH bintec R3400 Fig. 36: Back of Back of bintec R3400 Mains switch Socket for plug-in power pack DMZ/ETH5 Ethernet interface ETH2 - ETH4 Ethernet interface ETH1 / Console Ethernet interface with serial interface function...
Page 85 3 Technical data Funkwerk Enterprise Communications GmbH RJ45 socket for Ethernet connection Function TD + TD - RD + Not used Not used RD - Not used Not used The Ethernet 10/100 BASE-T interface does not have an Auto-MDI-X function.
Page 86 3 Technical data Funkwerk Enterprise Communications GmbH Fig. 38: SHDSL interface (RJ45 socket) The pin assignment for the SHDSL interface (RJ45 socket) is as follows: RJ45 socket for SHDSL connection Function Not used Not used Not used Line a1 Line b1...
Page 87: Bintec R3800
3 Technical data Funkwerk Enterprise Communications GmbH Function Transmit (+) Receive (+) Receive (-) Transmit (-) Not used Not used 3.7 bintec R3800 3.7.1 Scope of supply Your device is supplied with the following parts: • Cable sets/mains unit: - Ethernet cable...
Page 88 3 Technical data Funkwerk Enterprise Communications GmbH The features are summarised in the following table: General Product Features Property Value Product name bintec R3800 Dimensions and weights: Equipment dimensions 295 mm x 45 mm x 160 mm without cable (B x H x Weight approx.
Page 89 3 Technical data Funkwerk Enterprise Communications GmbH Property Value Available interfaces: SHDSL interface Internal SHDSL 8-wire modem for Annex A and Annex B. Bonding technology with 2-wire/4-wire/6-wire/8-wire as an in- verse multiplexer - performed over IMA in accordance with the ATM forum.
Page 90: Leds
3 Technical data Funkwerk Enterprise Communications GmbH Property Value BRICKware for Windows (Engl.) Software Reference (Engl.) 3.7.3 LEDs The device LEDs provide information on certain activities and statuses of the device. They are arranged as follows: bintec R3800 Fig. 40: LEDs on...
Page 91 3 Technical data Funkwerk Enterprise Communications GmbH State Information Top row ISDN-0 B/D One ISDN B channel is active. Bottom row flashing Both ISDN B channels are active. MA / HA flashing BRRP packets are received. Top row MA / HA A user is logged in to the system (e.g.
Page 92: Connections
3 Technical data Funkwerk Enterprise Communications GmbH 3.7.4 Connections All the connections are located on the back of the device. bintec R3800 has a 4-port Ether- net switch including a port with serial interface function, a DMZ/ETH5 interface, an ISDN in- terface and an SHDSL interface.
Page 93 3 Technical data Funkwerk Enterprise Communications GmbH Fig. 42: Ethernet 10/100 Base-T interface (RJ45 socket) The pin assignment for the Ethernet 10/100 Base-T interface (RJ45 socket) is as follows: RJ45 socket for Ethernet connection Function TD + TD - RD +...
Page 94 3 Technical data Funkwerk Enterprise Communications GmbH 3.7.5.2 SHDSL interface The SHDSL interface is connected via an RJ45 plug. The cable supplied connects the RJ45 plug needed for the device to an RJ45 plug needed for the SHDSL connection. The following pins are used for the SHDSL connection: Fig.
Page 95: Bintec R4100
3 Technical data Funkwerk Enterprise Communications GmbH The pin assignment for the ISDN So BRI interface (RJ45 socket) is as follows: RJ45 socket for ISDN connection Function Not used Not used Transmit (+) Receive (+) Receive (-) Transmit (-) Not used Not used 3.8 bintec R4100...
Page 96: General Product Features
3 Technical data Funkwerk Enterprise Communications GmbH 3.8.2 General Product Features The general product features cover performance features and the technical prerequisites for installation and operation of your device. The features are summarised in the following table: General Product Features...
Page 97 3 Technical data Funkwerk Enterprise Communications GmbH Property Value Relative atmospheric hu- 10 % to 90 % non-condensing in operation, midity 5 % to 95 % non-condensing when stored Room classification Only use in dry rooms. Available interfaces: Ethernet IEEE 802.3...
Page 98: Leds
3 Technical data Funkwerk Enterprise Communications GmbH Property Value Online documentation User's Guide BRICKware for Windows (Engl.) Software Reference (Engl.) 3.8.3 LEDs The device LEDs provide information on certain activities and statuses of the device. They are arranged as follows: bintec R4100 Fig.
Page 99 3 Technical data Funkwerk Enterprise Communications GmbH State Information ISDN-1/0 ISDN-0: ISDN D-channel is active. Top row flashing ISDN-0: At least one ISDN B channel is active. ISDN-1/0 ISDN-1: ISDN D-channel is active. Bottom row flashing ISDN-1: At least one ISDN B channel is active.
Page 100: Connections
3 Technical data Funkwerk Enterprise Communications GmbH 3.8.4 Connections All the connections are located on the back of the device. bintec R4100 has a 4-port Ether- net switch including a port with serial interface function, a DMZ/ETH5 interface, four ISDN interfaces and two ISDN PRI interfaces.
Page 101 3 Technical data Funkwerk Enterprise Communications GmbH Fig. 47: Ethernet 10/100 Base-T interface (RJ45 socket) The pin assignment for the Ethernet 10/100 Base-T interface (RJ45 socket) is as follows: RJ45 socket for Ethernet connection Function TD + TD - RD +...
Page 102 3 Technical data Funkwerk Enterprise Communications GmbH 3.8.5.2 ISDN So interface bintec R4100 has an additional ISDN-So interface, which can be used for back-up func- tions, for example. The connection is made via an RJ45 socket: Fig. 48: ISDN So BRI interface (RJ45 socket)
Page 103: Bintec R4300
3 Technical data Funkwerk Enterprise Communications GmbH The pin assignment for the ISDN PRI interface (RJ45 socket) is as follows: RJ45 socket for ISDN PRI connection Function Not used Not used Not used Not used Note for NTs in Germany Note In Germany, "Transmit"...
Page 104: General Product Features
3 Technical data Funkwerk Enterprise Communications GmbH • bintec Companion CD • Documentation: - Quick Install Guide (printed) - User's Guide (on CD) - Release Notes, if required - Safety precautions 3.9.2 General Product Features The general product features cover performance features and the technical prerequisites for installation and operation of your device.
Page 105 3 Technical data Funkwerk Enterprise Communications GmbH Property Value Voltage supply 15 V AC 1.3 A EU PSU Environmental require- ments: Storage temperature -20° to +70 °C Operating temperature 0° to 40 °C Relative atmospheric hu- 10 % to 90 % non-condensing in operation,...
Page 106: Leds
3 Technical data Funkwerk Enterprise Communications GmbH Property Value NAT, SIF, MPPE Encryption, PPTP Encryption, VPN with PPTP or IPSec Software supplied BRICKware for Windows BRICKtools for Unix Printed documentation Quick Reference supplied Online documentation User's Guide BRICKware for Windows (Engl.) Software Reference (Engl.)
Page 107 3 Technical data Funkwerk Enterprise Communications GmbH State Information flashing Data traffic via the Ethernet interface. ETH 1 to 5 Data traffic at 100 mbps. Bottom row Data traffic at 10 mbps. ISDN-0 B/D ISDN D-channel is active. Top row ISDN-0 B/D One ISDN B channel is active.
Page 108: Connections
3 Technical data Funkwerk Enterprise Communications GmbH State Information MA / HA A user is logged in to the system (e.g. over Tel- net). Bottom row 3.9.4 Connections All the connections are located on the back of the device. bintec R4300 has a 4-port Ether- net switch including a port with serial interface function, a DMZ/ETH5 interface, two ISDN interfaces and two X.21 interfaces.
Page 109 3 Technical data Funkwerk Enterprise Communications GmbH interface can also be used as a serial interface. The DMZ/ETH5 interface can be used to connect an optional DSL modem or a DMZ. The connection is made via an RJ45 socket. Fig. 52: Ethernet 10/100 Base-T interface (RJ45 socket)
Page 110 3 Technical data Funkwerk Enterprise Communications GmbH The combined serial Ethernet 10/100Base-T interface does not have an Auto-MDI-X func- tion. 3.9.5.2 ISDN So interface bintec R4300 has two additional ISDN-So interfaces, which can be used for back-up func- tions, for example.
Page 111 3 Technical data Funkwerk Enterprise Communications GmbH Pin assignment of 26-pole mini Delta ribbon socket Signal Pin no. X.21 X.21 V.35 V.35 V.36 V.36 (DB-15) (DB-15) (M34) (M34) (DB-37) (DB-37) Shield A1 (1) A2 (2) TxD (B) A3 (3) TxD (A)
Page 112: Chapter 4 Access And Configuration
4 Access and configuration Funkwerk Enterprise Communications GmbH Chapter 4 Access and configuration This chapter describes all the access and configuration options. 4.1 Access Options The various access options are presented below. Select the procedure to suit your needs. There are various ways you can access your device to configure it: •...
Page 113 4 Access and configuration Funkwerk Enterprise Communications GmbH Windows (1) Click Run… in the Windows Start menu. (2) Enter telnet <IP address of your device>. (3) Click on OK. A window with the login prompt appears. You are now in the SNMP shell of your device.
Page 114 If no keys are available, you have to generate these first. Proceed as follows: (1) Leave the Flash Management shell with exit. (2) Call the Funkwerk Configuration Interface and log on to your device (see Calling the Funkwerk Configuration Interface on page 107).
Page 115: Access Via The Serial Interface
4 Access and configuration Funkwerk Enterprise Communications GmbH UNIX (1) Enter ssh <IP address of the device> in a terminal. The login prompt window appears. This is located in the SNMP shell of the device. (2) Continue with Logging in on page 103.
Page 116: Access Over Isdn
4 Access and configuration Funkwerk Enterprise Communications GmbH (2) Press Return (at least once) after the HyperTerminal window opens. A window with the login prompt appears. You are now in the SNMP shell of your device. You can now log in on your device and start the configuration.
Page 117: Logging In
4 Access and configuration Funkwerk Enterprise Communications GmbH Access over ISDN with ISDN Login is especially recommended if your device is to be re- motely configured or maintained. This is also possible even if your device is still in the ex works state.
Page 118: Logging In For Configuration
(1) Enter your user name in the User field of the input window. (2) Enter your password in the Password field of the input window and confirm with Re- turn or click the Login button. The status page of the Funkwerk Configuration Interface opens in the browser. bintec R1xxx/R3xxx/R4xxx...
Page 119: Configuration Options
Log into the SNMP shell as follows: (1) Enter your user name e.g. admin, and confirm with Return. (2) Enter your user password e.g. funkwerk, and confirm with Return. Your device logs in with the input prompt, e.g. TR200bw:>. The login was successful. You are now in the SNMP shell.
Page 120: Funkwerk Configuration Interface
Funkwerk Enterprise Communications GmbH 4.3.1 Funkwerk Configuration Interface The Funkwerk Configuration Interface is a web-based graphic user surface that you can use from any PC with an up-to-date web browser via an HTTP or HTTPS connection. You can use the Funkwerk Configuration Interface to carry out all configuration tasks easily.
Page 121 (4) Enter http://192.168.0.254 in the address field of the web browser. (5) Enter admin in the User field and funkwerk in the Password field and click LOGIN. You are not in the status menu of your device's Funkwerk Configuration Interface (see State on page 123).
Page 122 4 Access and configuration Funkwerk Enterprise Communications GmbH 4.3.1.2 Operating elements Funkwerk Configuration Interface window The Funkwerk Configuration Interface window is divided into three areas: • The header • The navigation bar • The main configuration window Funkwerk Configuration Interface Fig.
Page 123 4 Access and configuration Funkwerk Enterprise Communications GmbH Menu Function able. Online Help: Click this button if you want help with the menu now active. The description of the sub-menu where you are now is displayed. Logout: If you want to end the configuration, click this button to log out of your device.
Page 124 You can see at a glance the sub-menu you are in. Status page If you call the Funkwerk Configuration Interface , after you log in the status page of your device is displayed. The most important data of your device can be seen on this at a glance.
Page 125 4 Access and configuration Funkwerk Enterprise Communications GmbH tional options. Configuration elements The various actions that you can perform when configuring your device in the Funkwerk Configuration are triggered by means of the following buttons: Funkwerk Configuration Interface buttons Button Function Updates the view.
Page 126 Triggers a WLAN bandscan. Displays the next page in a list. Displays the previous page in a list. You can select the following operating functions in the list view: Funkwerk Configuration Interface list options Menu Function Update Interval Here you can set the interval in which the view is to be updated.
Page 127 Fig. 60: Configuration of the update interval Fig. 61: Filter list Structure of the Funkwerk Configuration Interface configuration menus The menus of the Funkwerk Configuration Interface contain the following basic struc- tures: Funkwerk Configuration Interface menu structure Menu...
Page 128 Click this button to process the existing list entry. You go to the configuration menu. Menu Click this tab to display extended configuration options. The following options are available for the configuration: Funkwerk Configuration Interface configuration elements Menu Function Input fields e.g. empty text field Text field with hidden input Enter the data.
Page 129 Pay particular attention to the following message: "Warning: changes not supported by the Setup Tool!". If you makes these changes with the Funkwerk Configuration Interface , this can cause inconsistencies or mal- functions. Therefore, it is recommended that the configuration is continued with the Setup Tool.
Page 130 4 Access and configuration Funkwerk Enterprise Communications GmbH System management Menu Function State In this menu, general information on your device is displayed at a glance. This information includes serial number, software version, cur- rent memory and processor use, status of the physical inter- faces and the last 10 system messages.
Page 131 4 Access and configuration Funkwerk Enterprise Communications GmbH Menu Function mode for the broadband connection. SHDSL Only R3400 and R3800w. In this menu, you configure the SHDSL interface of your device. Here you enter how many change pairs are used for the SHDSL connection.
Page 132 4 Access and configuration Funkwerk Enterprise Communications GmbH Menu Function dress Translation). In this menu, you configure the dynamic updating of the routing table via RIP. Load Balancing In this menu, you configure application-controlled bandwidth management. Multicast In this menu, you configure the use of multimedia streaming protocols for e.g.
Page 133 4 Access and configuration Funkwerk Enterprise Communications GmbH Menu Function Policies In this menu you configure the filter rules for the firewall. Interfaces In this menu, you can group together the interfaces to be filtered. Addresses In this menu, you can create the address aliases to be filtered.
Page 134 4 Access and configuration Funkwerk Enterprise Communications GmbH Menu Function Funkwerk Discovery In this menu, you can configure management functions for bintec Access Point. UPnP In this menu, you configure the UPnP settings individually for each interface of your gateway.
Page 135: Snmp Shell
4 Access and configuration Funkwerk Enterprise Communications GmbH Menu Function Internal Log In this menu, the system messages are displayed. IPSec In this menu, the IPSec connections and connection statistics that are currently active are displayed. ISDN/Modem In this menu, the ISDN connections are displayed.
Page 136 4 Access and configuration Funkwerk Enterprise Communications GmbH baud rate for serial connections. (6) Show System Information: Shows useful information about your device, e.g. serial number, MAC address and software versions. The BOOTmonitor is started as follows. The devices passes through various functional states when starting: •...
Page 137: Chapter 5 System Management
5.1 State If you log into the Funkwerk Configuration Interface , your device's status page is dis- played, which shows the most important system information. You see an overview of the following data: •...
Page 138 5 System management Funkwerk Enterprise Communications GmbH System Management Status Fig. 63: -> The System Management -> Status menu consists of the following fields: Fields in the Status System Information menu Field Value Uptime Displays the time past since the device was rebooted.
Page 139 5 System management Funkwerk Enterprise Communications GmbH Field Value Memory Usage Displays the usage of the working memory in MByte in relation to the available total working memory in MByte. The usage is also displayed in brackets as a percentage.
Page 140: Global Settings
5 System management Funkwerk Enterprise Communications GmbH Field Value • The channel used on this wireless module • Number of connected clients • Number of WDS links • Software version of the wireless card Access Client Mode: • Operation Mode: Access Client or Off •...
Page 141 Enter the relevant contact person. Here you can enter the e- mail address of the system administrator, for example. A character string of up to 255 characters is possible. The default value is funkwerk. Maximum Number of Enter the maximum number of syslog messages that are stored Syslog Entries internally in the device.
Page 142: Passwords
5 System management Funkwerk Enterprise Communications GmbH Field Value The default value is 50. You can view the stored messages in Monitoring -> Internal Log. Maximum Message Select the priority of system messages above which a log Level of Syslog Entries should be created.
Page 143 5 System management Funkwerk Enterprise Communications GmbH System Management Global Settings Passwords Fig. 65: -> -> Note All bintec devices are delivered with the same username and password. As long as the password remains unchanged, they are not protected against unauthorised use.
Page 144: Date And Time
5 System management Funkwerk Enterprise Communications GmbH Field Value SNMP Read Community Enter the password for the user name read. SNMP Write Community Enter the password for the user name write. Fields in the Passwords Global Password Options menu Field...
Page 145 5 System management Funkwerk Enterprise Communications GmbH System Management Global Settings Date and Time Fig. 66: -> -> You have the following options for determining the system time: • You can determine the system time automatically, e.g. using ISDN or/and various time servers.
Page 146 5 System management Funkwerk Enterprise Communications GmbH Fields in the Date and Time Manual Time Settings menu Field Description New Date Enter a new date. Format: • Day: dd • Month: mm • Year: yyyy New Time Enter a new time.
Page 147 5 System management Funkwerk Enterprise Communications GmbH Field Description an IP address. Also select the protocol for the time server query. Possible values: • SNTP (default value): This server uses the simple network time protocol with UDP port 123. • Time Service / UDP: This server uses the Time service with UDP port 37.
Page 148: System Licences
5 System management Funkwerk Enterprise Communications GmbH Field Description Time Update Policy Enter the time period after which the system attempts to contact the time server again following a failed time update. Possible values: • Normal (default value): The system attempts to contact the time server after 1, 2, 4, 8, and 16 minutes.
Page 149 5 System management Funkwerk Enterprise Communications GmbH Entering licence data You can obtain the licence data for extra licences via the online licensing pages in the sup- port section at www.funkwerk-ec.com . Please follow the online licensing instructions. (Please also note the information on the licence card for licences at additional cost.) You will then receive an e-mail containing the following data: •...
Page 150 5 System management Funkwerk Enterprise Communications GmbH System Management Global Settings System Licenses Fig. 67: -> -> -> Activating extra licences You activate extra licences by adding the received licence information in the System Man- agement -> Global Settings -> System Licenses -> New menu.
Page 151: Interface Mode / Bridge Groups
5 System management Funkwerk Enterprise Communications GmbH Deactivating a licence Proceed as follows to deactivate a licence: (1) Go to System Management -> Global Settings-> System Licenses. (2) Press the icon in the line containing the licence you want to delete.
Page 152: Interfaces
5 System management Funkwerk Enterprise Communications GmbH (a) Abbreviation for interface type (b) Number of the Ethernet port (c) Number of the interface Example: en1-0 (first interface on the first Ethernet port) The name of the bridge group is made up of the following parts:...
Page 153 5 System management Funkwerk Enterprise Communications GmbH bridge group. The default setting for all existing interfaces is routing mode. On selecting the New Bridge Group option for Mode / Bridge Group, a bridge group, i.e. br0 , br1 etc., is automatic- ally created and the interface is run in bridging mode.
Page 154: Administrative Access
5 System management Funkwerk Enterprise Communications GmbH Field Description figuration interface must be selected from the other options. • Ignore : No interface is defined as configuration interface. • <Interface name>: Select the interface to be used for con- figuration. If this interface is in a bridge group, it is assigned the group's IP address when it is taken out of the group.
Page 155: Ssh
5 System management Funkwerk Enterprise Communications GmbH 5.4.1.1 Add Press the Add button to configure administrative access for additional interfaces. System Management Administrative Access Access Fig. 70: -> -> -> The System Management -> Administrative Access -> Access -> Add menu consists of...
Page 156 5 System management Funkwerk Enterprise Communications GmbH System Management Administrative Access Fig. 71: -> -> You need an SSH client application, e.g. PuTTY, to be able to reach the SSH Daemon. If you wish to use SSH Login together with the PuTTY client, you may need to comply with some special configuration requirements, for which we have prepared FAQs.
Page 157 5 System management Funkwerk Enterprise Communications GmbH Field Value The function is enabled by default. Compression Select whether data compression should be used. The function is activated by choosing Enabled. The function is disabled by default. TCP Keepalives Select whether the device is to send keepalive packets.
Page 158 5 System management Funkwerk Enterprise Communications GmbH Field Value Possible options: • MD5 • SHA-1 • RipeMD160 MD5, SHA-1 and RipeMD160 are enabled by default. Fields in the SSH Key Status menu Field Value RSA Key Status The status of the RSA key is displayed here.
Page 159: Snmp
5 System management Funkwerk Enterprise Communications GmbH 5.4.3 SNMP SNMP (Simple Network Management Protocol) is a network protocol used to monitor and control network elements (e.g. routers, servers, switches, printers, computers etc.) from a central station. SNMP controls communication between the monitored devices and monit- oring station.
Page 160: Remote Authentication
5 System management Funkwerk Enterprise Communications GmbH Field Value SNMP Version Select the SNMP version your device is to use to listen for ex- ternal SNMP accesses. Possible values: • v1: SNMP Version 1 • v2c: Community-Based SNMP Version 2 •...
Page 161 5 System management Funkwerk Enterprise Communications GmbH the RADIUS server, which then searches its database. If the user is found and can be au- thenticated, the RADIUS server sends corresponding confirmation to your device. This con- firmation also contains parameters (called RADIUS attributes), which your device uses as WAN connection parameters.
Page 162 5 System management Funkwerk Enterprise Communications GmbH Field Value If a RADIUS server is used for accounting, your device sends an accounting message to the RADIUS server at the end of each connection. In the System Management -> Remote Authentication -> RADIUS menu, a list of all re- gistered RADIUS servers is displayed.
Page 163 5 System management Funkwerk Enterprise Communications GmbH Field Value Authentication Type Select what the RADIUS server is to be used for. Possible values: • Authentication (default value): The RADIUS server is used for controlling access to a network. • PPP Accounting: The RADIUS server is used for recording statistical connection data.
Page 164 5 System management Funkwerk Enterprise Communications GmbH Field Value quest is received. Possible values: • Authoritative (default value): A negative answer to a re- quest is accepted. • Non-authoritative : A negative answer to a request is not accepted. A request is sent to the next RADIUS server until your device receives an answer from a server configured as authoritative.
Page 165: Tacacs
5 System management Funkwerk Enterprise Communications GmbH Field Value to a request. If an answer has still not been received after these attempts, the Status is set to down. If the Active Check = En- abledyour device tries to reach the server every 20 seconds. If the server answers, the Status is set back to alive.
Page 166 5 System management Funkwerk Enterprise Communications GmbH • Command authorisation on the shell (e.g. telnet, show) TACACS+ uses TCP port 49 and establishes a secure and encrypted connection. In the System Management -> Remote Authentication -> TACACS+ menu, a list of all registered TACACS+ servers is displayed.
Page 167 5 System management Funkwerk Enterprise Communications GmbH Field Description current TACACS+ server is to be used for login authentication to your device. Server IP Address Enter the IP address of the TACACS+ server that is to be re- quested for login authentication.
Page 168: Options
5 System management Funkwerk Enterprise Communications GmbH Field Description Timeout Enter time in seconds for which the NAS is to wait for a re- sponse from TACACS+. If a response is not received during the wait time, the next con-...
Page 169 5 System management Funkwerk Enterprise Communications GmbH System Management Remote Authentication Options Fig. 75: -> -> The System Management -> Remote Authentication -> Options menu consists of the following fields: Fields in the Options Global RADIUS options menu Field Description...
Page 170: Chapter 6 Physical Interfaces
6 Physical interfaces Funkwerk Enterprise Communications GmbH Chapter 6 Physical interfaces 6.1 AUX You require a special cable for the console port of your gateway (e.g. AUX Backup cable) to connect an external analogue modem to the AUX port on a bintec gateway.
Page 171 6 Physical interfaces Funkwerk Enterprise Communications GmbH Physical Interfaces Fig. 77: -> -> The Physical Interfaces -> AUX -> AUX menu consists of the following fields: Fields in the AUX Basic Parameters menu Field Description AUX Port Status Select whether the AUX port should be enabled or disabled.
Page 172 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description • 115200 bps: Recommended for communication with an ana- logue modem. Incoming Service Type Here you select the gateway subsystem to which an incoming call over the modem is to be assigned.
Page 173: Ethernet Ports
6 Physical interfaces Funkwerk Enterprise Communications GmbH 6.2 Ethernet Ports An Ethernet interface is a physical interface for connection to the local network or external networks. ETH1 - ETH4, ETH5 If the switch ports (ETH1 - ETH4) are separated from each other, each separated port is assigned the desired Ethernet interface in the Ethernet Interface Selection field of the Port Configuration menu.
Page 174 6 Physical interfaces Funkwerk Enterprise Communications GmbH By default, the same configuration applies for all switch ports. During configuration, please note the following: The splitting of the switch ports into several Ethernet interfaces merely logically separates these from each other. The available total bandwidth of 100 mbps full duplex for all resulting interfaces remains the same.
Page 175: Isdn Ports
6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description Possible values: • Full Autonegotiation (default value) • Auto 100 mbps only • Auto 10 mbps only • Auto 100 mbps / Full Duplex • Auto 100 mbps / Half Duplex •...
Page 176: Isdn Configuration
6 Physical interfaces Funkwerk Enterprise Communications GmbH 6.3.1 ISDN Configuration Note If the ISDN protocol is not detected, it must be selected manually under ISDN Pro- tocol and ISDN Configuration Type . The automatic D channel detection is then switched off. An incorrectly set ISDN protocol prevents ISDN connections being set up.
Page 177 6 Physical interfaces Funkwerk Enterprise Communications GmbH Fields in the ISDN Configuration Basic Parameters menu Field Description Port Name Shows the name of the ISDN port. Autoconfig on Bootup Select whether the ISDN switch type (D channel detection for switched line) is to be automatically identified.
Page 178 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description • Point-to-point: Point-to-point ISDN access ISDN Switch Type Select the ISDN protocol supplied by your provider. Possible values: • Leased Line B1 64S: Leased line over B channel 1 (64 kbps) •...
Page 179 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description X.31 TEI Service Only if X.31 (X.25 in D channel) is enabled Select the service for which you want to use X.31 TEI. Possible values: • CAPI • CAPI Default • Packet Switch (default value) CAPI and CAPI Default are for using X.31 TEI for CAPI ap-...
Page 180 6 Physical interfaces Funkwerk Enterprise Communications GmbH Physical Interfaces ISDN Ports ISDN Configuration Fig. 80: -> -> -> The Physical Interfaces -> ISDN Ports-> ISDN Configuration-> menu consists of the following fields: Fields in the ISDN Configuration Basic Parameters menu...
Page 181 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description • Leased Line: You can select a leased line. ISDN Line Framing Only if a Port Usage is selected. Select the framing type for layer 1. Possible values: • CRC4 (Standard) (default value) •...
Page 182 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description If you encounter problems with outgoing calls, ask your provider whether a special value has to be set. Clock Mode Only if Port Usage = Back to Back (dialup) Defines which connection partner sends the clock signal for synchronization between the sender and the recipient.
Page 183 6 Physical interfaces Funkwerk Enterprise Communications GmbH You can use the Add button under Custom Time Slots to configure further bundles. Note This function is only available for leased lines. Fields in the ISDN Configuration New Bundle menu Field Description Description Enter the name of the channel bundle.
Page 184: Msn Configuration
6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description • DCE • DTE 6.3.2 MSN Configuration In this menu, you can assign the available ISDN numbers to the required services (e.g. PPP routing, ISDN login). If you use the ISDN interface for outgoing and incoming dialup connections, your own num- bers for this interface can be entered in this menu (these settings are not possible for leased lines).
Page 185 6 Physical interfaces Funkwerk Enterprise Communications GmbH Note If no entry is specified (ex works state), every incoming ISDN call is accepted by the ISDN Login service. To avoid this, you should make the necessary entries here. As soon as an entry exists, the incoming calls not assigned to any entry are forwarded to the CAPI service.
Page 186: Adsl Modem
6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description Possible values: • ISDN Login (default value): Enables logging in with ISDN Login. • PPP (Routing): Default setting for PPP routing. Contains the automatic detection of the PPP connections stated below except PPP DOVB .
Page 187 6 Physical interfaces Funkwerk Enterprise Communications GmbH 6.4.1 ADSL Configuration In this menu, you make the basic settings for your ADSL connection. R3000 and R3000w are ADSL multiprotocol routers with integrated ADSL(2+) modem and automatic ISDN backup. The ADSL modem on the R3000 / R3000w is compatible with AN- NEX A and ANNEX B standards and so can be used universally in several countries.
Page 188 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description • ANSI T1.413: ANSI T1.413 • ADSL1: ADSL classic, G.DMT, ITU G.992.1 • G.Lite: Splitterless ADSL, ITU G.992.2 • ADSL2: G.DMT.Bis, ITU G.992.3 • ADSL2 DELT: ADSL2 Double Ended Line Test •...
Page 189: Shdsl
6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description Possible values: • Automatic Mode (default value): The ADSL mode is auto- matically adapted for the remote terminal. • ADSL1: ADSL1 / G.DMT is used. • ADSL2: ADSL2 / G.992.3 is used.
Page 190 6 Physical interfaces Funkwerk Enterprise Communications GmbH R3400 and R3800 have an integrated SHDSL mode. The devices support the ITU-T Re- commendations G.991.2. Depending on the device type and configuration the gateway transmits the data over a pair of wires at up to 2312 kbps, over two pairs of wires at up to 4624 kbps, over three pairs of wires at up to 6936 kbps or over four pairs of wires at up to 9248 kbps.
Page 191 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description Possible values: • CPE (Customer Premises Equipment) (default value): Mode for the user page of the SHDSL connection. • CO (Central Office): Mode for the provider page of the SHDSL connection.
Page 192 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description rate of 192 kbps to 2312 kbps. • 4 wire: Four wires are used with m-pair bonding for a clock rate of 384 kbps to 4624 kbps. This option supports 4-wire mode under G991.2 and Globespan Enhanced Mode.
Page 193: Serial Ports
6 Physical interfaces Funkwerk Enterprise Communications GmbH 6.6 Serial ports 6.6.1 Serial ports In the Serial Ports menu, configure the serial WAN interface of your gateway. Your gateway offers an integrated X.21/V.35 interface. The interface can be operated in accordance with various electrical standards (X.21, V.35, ...).
Page 194 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description Possible values: • Interface and Connector (default value): The interface and connector types are detected automatically. • Interface: Only the interface type is detected automatically. The connector type must be set manually.
Page 195: Umts / Hsdpa
6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description The detected value is displayed, e.g. Unknown (Autodetected). If you select the Detection Mode Interface or Manual, you must set the connector type field manually. Possible values: • DTE: The pins are assigned as DTE interface. This setting is necessary, for example, if the router is connected to a public data network like Datex-P in Germany.
Page 196: Umts / Hsdpa / Hsupa
6 Physical interfaces Funkwerk Enterprise Communications GmbH 6.7.1 UMTS / HSDPA / HSUPA In the UMTS / HSDPA / HSUPA menu configure the connection for a UMTS CardBus mo- dem. R1200wu comes with automatic ISDN backup and UMTS / HSDPA.
Page 197 6 Physical interfaces Funkwerk Enterprise Communications GmbH Field Description Here you select the gateway subsystem to which an incoming call over the modem is to be assigned. Possible values: • ISDN Login(default value): The call is assigned to the ISDN Login subsystem.
Page 198: Chapter 7 Lan
7 LAN Funkwerk Enterprise Communications GmbH Chapter 7 LAN In this menu, you configure the addresses in your LAN and can structure your local network using VLANs. 7.1 IP Configuration In this menu, you can edit the IP configuration of the LAN and Ethernet interfaces of your device.
Page 199 7 LAN Funkwerk Enterprise Communications GmbH 7.1.1.1 Edit/New Choose the icon to edit existing entries. Choose the New button to create virtual inter- faces. IP Configuration Interfaces Edit/New Fig. 86: -> -> -> The LAN -> IP Configuration -> Interfaces -> Edit/New menu consists of the following...
Page 200 7 LAN Funkwerk Enterprise Communications GmbH Field Description IP Address/Netmask Only if Address Mode = Static With Add, add a new address entry and enter the IP Address and corresponding Netmask Interface Mode Select the configuration mode of the interface.
Page 201: Vlan
7 LAN Funkwerk Enterprise Communications GmbH Field Description interfaces, the current MAC address is entered by default. If you disable Use Built-In, you enter an MAC address for the virtual interface, e.g. 00:e1:f9:06:bf:03 . Some providers use hardware-independent MAC addresses to allocate their clients IP addresses dynamically.
Page 202 7 LAN Funkwerk Enterprise Communications GmbH Fig. 87: VLAN segmenting VLAN for Bridging and VLAN for Routing In the LAN -> VLAN menu, VLANs (virtual LANs) are configured with interfaces that oper- ate in bridging mode. Using the VLAN menu, you can make all the settings needed for this and query their status.
Page 203: Vlans
7 LAN Funkwerk Enterprise Communications GmbH 7.2.1 VLANs In this menu, you can display all the VLANs already configured, edit your settings and cre- ate new VLANs. By default, the Management VLAN is available, to which all interfaces are assigned.
Page 204: Port Configuration
7 LAN Funkwerk Enterprise Communications GmbH Field Description For each entry, also select whether the frames to be transmitted from this port are to be transmitted tagged (i.e. with VLAN in- formation) or untagged (i.e. without VLAN information). 7.2.2 Port Configuration In this menu, you can define and view the rules for receiving frames at the VLAN ports.
Page 205: Administration
7 LAN Funkwerk Enterprise Communications GmbH Field Description Drop non-members If this option is enabled, all tagged frames that are tagged with a VLAN ID to which the selected port does not belong are dis- carded. 7.2.3 Administration In this menu, you make general settings for a VLAN. The options must be configured sep- arately for each bridge group.
Page 206: Chapter 8 Wireless Lan
8 Wireless LAN Funkwerk Enterprise Communications GmbH Chapter 8 Wireless LAN In the case of wireless LAN (WLAN = Wireless Local Area Network), this relates to the cre- ation of a network using wireless technology. Network functions Like a wired network, a WLAN offers all the main network functions. Access to servers, files, printers, and the e-mail system is just as reliable as company-wide Internet access.
Page 207: Radio Settings
8 Wireless LAN Funkwerk Enterprise Communications GmbH Depending on the model, one or two WLAN modules, WLAN1 and, in certain models, WLAN2, available. 8.1.1 Radio Settings In the Wireless LAN -> WLAN1 -> Radio Settings menu, an overview of all the configura- tion options for the WLAN module is shown.
Page 208 8 Wireless LAN Funkwerk Enterprise Communications GmbH Wireless LAN WLAN1 Radio Settings Fig. 92: -> -> -> The Wireless LAN -> WLAN1 -> Radio Settings -> menu consists of the following fields: Fields in the Radio Settings WLAN Settings menu...
Page 209 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description Operation Mode Define the mode in which the radio module of your device is to operate. Possible values: • Select one (default value): The radio module is switched off. • Access Point: Your device is used as an access point in your network.
Page 210 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description Possible values: • 2.4 and 5 GHz • 5 and 2.4 GHz(default value) • 5 GHz • 2.4 GHz Usage Area Only for Operation Mode = Access Client, Client Mode = Infrastructure and Operation Band = 2.4 and 5 GHz,...
Page 211 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description four channels apart, as a network also partially occupies the adjacent channels. In the case of manual channel selection, please make sure first that the clients actually support these channels. Possible values: •...
Page 212 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description The function is activated with Enabled. The function is activated by default. Max. link range Enter the maximum link range. If the Use Standard option is enabled, the automatically gen- erated range is used.
Page 213 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description • 802.11 mixed (default value) / 802.11 mixed-short: Your device adapts to the client technology. The following ap- plies for mixed-short: The data rates 5.5 and 11 mbps must be supported by all clients (basic rates).
Page 214 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description • Frame Concatenation: If this function is activated, several small data packets are combined to form larger ones. This only works in combination with clients that use Conexant radio cards. • Piggyback Acknowledge: If this function is activated, the confirmation for received packets ("ACK") is combined with...
Page 215 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description The default value is 2. RTS Threshold Here, you select how the RTS/CTS mechanism is to be switched on/off. If you choose User Defined, in the input field you can specify the data packet length threshold in bytes (1..2346) as of which...
Page 216 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description The default value is 0. CW Min Define the maximum size of the contention window. Possible values are 1 to 65535. The default value is 15. CW Max Define the minimum size of the contention window.
Page 217 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description Roaming Profile Select the roaming profile. The options available include typical roaming functions. Possible values: • Fast Roaming: The WLAN client searches for available wireless networks as soon as the radio signal of the existing radio connection becomes unsuitable for higher data rates.
Page 218 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description Active Scan ively scanned. The value can only be changed for Roaming Profile = Custom Roaming. The default value is 40 ms. Min. Time Period for Indicates the minimum time in milliseconds a frequency is pass- Passive Scan ively scanned.
Page 219 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description run in one access point. The mechanism can also be switched on/off independently of the data packet length by selecting the value Always on or Always off (default value). Short Retry Limit...
Page 220: Virtual Service Sets
8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description Possible values are 1 to 65535. The default value is 1023. Max. Receive Lifetime Enter the time from receipt of the first fragment of a data packet as of which no further attempts are made. The data packet is discarded.
Page 221 8 Wireless LAN Funkwerk Enterprise Communications GmbH There are three security modes, WEP, WPA-PSK and WPA Enterprise. WPA Enterprise of- fers the highest level of security, but this security mode is only really suitable for compan- ies, because it requires a central authentication server. Private users should choose WEP or preferably WPA-PSK with higher security as their security mode.
Page 222 • Change the access passwords for your device. • Change the default SSID, Network Name (SSID) = Funkwerk-ec , of your access point. Set Visible = Enabled. This will exclude all WLAN clients that attempt to establish a connection with the general value for Network Name (SSID) Any and do not know the SSID settings.
Page 223 8 Wireless LAN Funkwerk Enterprise Communications GmbH Wireless LAN WLAN1 Virtual Service Sets /New Fig. 93: -> -> -> The Wireless LAN -> WLAN1 -> Virtual Service Sets (VSS) -> /New menu consists of the following fields: Fields in the Virtual Service Sets Service Set Parameters menu...
Page 224 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description are quicker and clients with an enabled power save function are not addressed. The function is activated by choosing Enabled. The function is disabled by default. Make sure that ARP processing cannot be applied in conjunc- tion with the MAC bridge function.
Page 225 Enter a character string with the right number of characters for the selected WEP mode. For WEP 40 you need a string of 5 characters, WEP 104 13 characters. For example hello for WEP 40, funkwerk-wep1 for WEP 104. WPA Mode Only if Security Mode = WPA-PSK and WPA-Enterprise Select whether you want to use WPA (with TKIP encryption) or WPA 2 (with AES encryption), or both.
Page 226: Wds Links
8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description Both encryption methods are rated as secure, with AES offering better performance. Preshared Key Only if Security Mode = WPA-PSK Enter the WPA password. Enter an ASCII string with 8 - 63 characters.
Page 227 8 Wireless LAN Funkwerk Enterprise Communications GmbH Important Note that the data is transferred between the access points in unencrypted form over the WDS link in the default configuration. You are therefore urgently advised to apply one of the available security methods (WEP40 or WEP104) to protect data on WDS links.
Page 228 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description the interface is automatically used. If the option is not activated, you can enter a suitable name in the input field. The Use Standard option is enabled by default. Fields in the WDS Security Settings menu...
Page 229: Client Link
8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description Enter a character string with the right number of characters for the selected WEP mode. For WEP40 you need a string of 5 characters, WEP104 13 characters. For example hello for WEP40, funkwerk-wep1 for WEP104.
Page 230 8 Wireless LAN Funkwerk Enterprise Communications GmbH 8.1.4.1 -> Client Link Choose the icon to edit existing entries. Wireless LAN WLAN1 Client Link Fig. 95: -> -> -> -> The Wireless LAN -> WLAN1 -> Client Link -> -> menu consists of the following fields:...
Page 231 Enter a character string with the right number of characters for the selected WEP mode. For WEP 40 you need a string of 5 characters, WEP 104 13 characters. For example hello for WEP 40, funkwerk-wep1 for WEP 104. WPA Mode Only if Security Mode = WPA-PSK and WPA-Enterprise Select whether you want to use WPA (with TKIP encryption) or WPA 2 (with AES encryption), or both.
Page 232 8 Wireless LAN Funkwerk Enterprise Communications GmbH Field Description WPA2 Cipher Only for Security Mode = WPA-PSK and WPA Mode = WPA2 Select which encryption method should be used. Possible values: • TKIP (default value): Temporal Key Integrity Protocol. • AES: Advanced Encryption Standard.
Page 233: Administration
8 Wireless LAN Funkwerk Enterprise Communications GmbH Fields in the Client Link Scan menu Field Description Client Link Description Displays the name of the client link you configured. Action Start the scan by clicking on Scan. If the antennas are installed correctly on both sides and LOS is free, the client finds available clients and displays them in the following list.
Page 234: Basic Settings
8 Wireless LAN Funkwerk Enterprise Communications GmbH 8.2.1 Basic settings Wireless LAN Administration Basic Settings Fig. 97: -> -> The Wireless LAN -> Administration -> Basic Settings menu consists of the following fields: Fields in the Basic Settings WLAN Administration menu...
Page 235: Chapter 9 Routing
9 Routing Funkwerk Enterprise Communications GmbH Chapter 9 Routing 9.1 Routes 9.1.1 IP routes In the Routing -> Routes -> IP Routes menu a list of all configured routes is shown. 9.1.1.1 New Choose the New button to create routes.
Page 236 9 Routing Funkwerk Enterprise Communications GmbH Routing Routes IP Routes Extended Route Fig. 99: -> -> -> with Enabled The Routing -> Routes -> IP Routes-> New menu consists of the following fields: Fields in the IP Routes Route Class menu...
Page 237 9 Routing Funkwerk Enterprise Communications GmbH Field Description Possible values: • Network Route (default value): Route to a network. • Default Route : Is used if no other suitable route is avail- able. • Host Route : Route to a single host.
Page 238 9 Routing Funkwerk Enterprise Communications GmbH Field Description The lower the value, the higher the priority of the route. Value range from 0 to 15, The default value is 1. Fields in the IP Routes Extended Route Parameters menu Field...
Page 239 9 Routing Funkwerk Enterprise Communications GmbH Field Description Destination Port Only if Layer 4 Protocol = TCP or UDP. Enter the destination port. First select the port number range. Possible values: • Any (default value): The route is valid for all port numbers.
Page 240: Options
9 Routing Funkwerk Enterprise Communications GmbH Field Description the interface is "up". If the interface is "dormant", then dial and wait until the interface is "up". • Authoritative : The route can always be used. • Dialup and continue: The route can be used if the inter- face is "up".
Page 241: Nat
9 Routing Funkwerk Enterprise Communications GmbH The Routing -> Routes -> Options menu consists of the following fields: Fields in the Options Return Route Checking menu Field Description Mode Select how the interfaces to be activated for Back Route Verify are to be specified.
Page 242: Nat Interfaces
9 Routing Funkwerk Enterprise Communications GmbH 9.2 NAT 9.2.1 NAT Interfaces Network Address Translation (NAT) is a function on your device for defined conversion of source and destination addresses of IP packets. If NAT is activated, IP connections are still only allowed by default in one direction, outgoing (forward) (= protective function).
Page 243: Portforwarding
9 Routing Funkwerk Enterprise Communications GmbH Field Description Silent Deny Select whether IP packets are to be silently denied by NAT. If this function is deactivated, the sender of the denied IP packet is informed by means of an ICMP or TCP RST message.
Page 244 9 Routing Funkwerk Enterprise Communications GmbH Routing Portforwarding Fig. 102: -> -> -> The Routing -> NAT -> Portforwarding-> New menu consists of the following fields: Fields in the Portforwarding Basic Parameters menu Field Description Interface Select the interface for which portforwarding is to be configured.
Page 245 9 Routing Funkwerk Enterprise Communications GmbH Field Description • NNTP • POP3 • SMTP • SSH • TELNET Protocol Only if Service = User-defined. Select the protocol. Possible values: • Any • ICMP • GGP • IP • TCP • EGP •...
Page 246 9 Routing Funkwerk Enterprise Communications GmbH Field Description • OSPF • IPinIP • IPXinIP • VRRP • L2TP Corresponding NAT Specify whether a NAT entry is to be created for outgoing con- entry for outgoing con- nections for portforwarding. nection The function is activated with Enabled.
Page 247: Rip
9 Routing Funkwerk Enterprise Communications GmbH Field Description The function is activated with Yes. Remote IP Address / Only for Remote Network = Yes. Netmask Now enter the remote IP address and netmask for the remote network. Fields in the Portforwarding Forward to menu...
Page 248: Rip Interfaces
9 Routing Funkwerk Enterprise Communications GmbH 9.3.1 RIP Interfaces In the Routing -> RIP -> RIP Interfaces menu, a list of all RIP interfaces is shown. Routing RIP Interfaces Fig. 103: -> -> 9.3.1.1 Edit For each RIP interface, you can, in the menu, select the options Send Version, Re- ceive Version and Route Announce.
Page 249 9 Routing Funkwerk Enterprise Communications GmbH Routing RIP Interfaces Fig. 104: -> -> -> The Routing -> RIP -> RIP Interfaces-> menu consists of the following fields: Fields in the RIP Parameters for: <Interface> menu Field Description Send Version Decide whether routes are to be propagated via RIP and if so, select the RIP version for sending RIP packets over the inter- face in send direction.
Page 250: Rip Filter
9 Routing Funkwerk Enterprise Communications GmbH Field Description Receive Version Decide whether routes are to be imported via RIP and if so, se- lect the RIP version for receiving RIP packets over the interface in receive direction. Possible values: • None (default value): RIP is not enabled.
Page 251 9 Routing Funkwerk Enterprise Communications GmbH explicitly deactivate the import or export of all other routes. You can do this using a filter for IP Address = no entry (this corresponds to the IP address 0.0.0.0) with Netmask = no entry (this corresponds to the netmask 0.0.0.0). To make sure this filter is used last, it must be placed at the lowest position.
Page 252 9 Routing Funkwerk Enterprise Communications GmbH Routing RIP Filters Fig. 106: -> -> -> The Routing -> RIP -> RIP Filter-> New menu consists of the following fields: Fields in the RIP Filter Basic Parameters menu Field Description Interface Select the interface to which the rule to be configured applies.
Page 253: Rip Options
9 Routing Funkwerk Enterprise Communications GmbH Field Description Possible values are -16 to 16. The default value is 0. Metric Offset for Inactive Select the value to be added to the route metric if the status of Interfaces the interface is "dormant". During export, the value is added to the exported metric if the interface status is "dormant".
Page 254 9 Routing Funkwerk Enterprise Communications GmbH Field Description retained. Default Route Distribu- Select whether the default route of your device is to be propag- tion ated via RIP updates. The function is activated with Enabled. The function is enabled by default.
Page 255 9 Routing Funkwerk Enterprise Communications GmbH Field Description Update Timer Only for RFC 2453 Variable Timer = Enabled An RIP update is sent on expiry of this period of time. The default value is 30 (seconds). Route Timeout Only for RFC 2453 Variable Timer = Enabled After the last update of a route, the route time is active.
Page 256: Load Balancing
9 Routing Funkwerk Enterprise Communications GmbH 9.4 Load Balancing 9.4.1 Load Balancing Groups The increasing amount of data traffic over the Internet means it is necessary to send data over different interfaces to increase the total bandwidth available. IP load balancing en-...
Page 257 9 Routing Funkwerk Enterprise Communications GmbH following fields: Fields in the Load Balancing Groups Basic Parameters menu Field Description Group Description Enter the desired description of the interface group. Distribution Policy Select the way the data traffic is to be distributed to the inter- faces configured for the group.
Page 258: Multicast
9 Routing Funkwerk Enterprise Communications GmbH Use Add to create entries. Fields in the Load Balancing Groups Interface Selection for Distribution menu Field Description Interface Select the interfaces that are to belong to the group from the available interfaces. Distribution Ratio Enter the percentage of the data traffic to be assigned to an in- terface.
Page 259 9 Routing Funkwerk Enterprise Communications GmbH For, IPv4 the IP addresses 224.0.0.0 to 239.255.255.255 (224.0.0.0/4) are reserved for multicast in the class D network. An IP address from this range represents a multicast group to which several recipients can log in. The multicast router then forwards the re- quired packets to all subnets with logged in recipients.
Page 260: Forwarding
9 Routing Funkwerk Enterprise Communications GmbH With multicast, the focus is on excluding data traffic from unwanted multicast groups. Note that if forwarding is combined with IGMP, the packets can be forwarded to the groups specified in the forwarding request.
Page 261: Igmp
9 Routing Funkwerk Enterprise Communications GmbH Field Description Source Interface to the defined Destination Interface To do this, check Enabled Disable the option if you only want to forward one defined mul- ticast group to a particular interface. The option is deactivated by default.
Page 262 9 Routing Funkwerk Enterprise Communications GmbH Routing Multicast IGMP /New Fig. 110: -> -> -> The Routing -> Multicast -> IGMP -> /New menu consists of the following fields: Fields in the IGMP IGMP Settings menu Field Description Interface Select the interface on which IGMP is to be enabled, i.e. queries are sent and responses are accepted.
Page 263 9 Routing Funkwerk Enterprise Communications GmbH Field Description Robustness Select the multiplier for controlling the timer values. A higher value can e.g. compensate for packet loss in a network suscept- ible to loss. If the value is too high, however, the time between logging off and stopping of the data traffic can be increased (leave latency).
Page 264: Options
9 Routing Funkwerk Enterprise Communications GmbH Fig. 111: IGMP Proxy The Advanced Settings menu consists of the following fields: Fields in the Advanced Settings menu Field Description IGMP Proxy Select whether your device is to forward the hosts' IGMP mes- sages in the subnet via its defined Proxy Interface.
Page 265 9 Routing Funkwerk Enterprise Communications GmbH Routing Multicast Options Fig. 112: -> -> The Routing -> Multicast -> Options menu consists of the following fields: Fields in the Options Basic Settings menu Field Description IGMP Status Select the IGMP status.
Page 266 9 Routing Funkwerk Enterprise Communications GmbH Field Description Maximum Groups Enter the maximum number of groups to be permitted, both in- ternally and in reports. Maximum Sources Enter the maximum number of sources that are specified in ver- sion 3 reports and the maximum number of internally managed sources per group.
Page 267: Chapter 10 Wan
10 WAN Funkwerk Enterprise Communications GmbH Chapter 10 WAN 10.1 Internet + Dialup In this menu, you can set up Internet access or dialup connections. To enable your device to set up connections to networks or hosts outside your LAN, you must configure the partners you want to connect to on your device.
Page 268: Default Route
10 WAN Funkwerk Enterprise Communications GmbH Authentication When a call is received, the calling party number is always sent over the ISDN D-channel. This number enables your device to identify the caller (CLID), provided the caller is entered on your device. After identification with CLID, your device can additionally carry out PPP authentication with the connection partner before it accepts the call.
Page 269: Pppoe
10 WAN Funkwerk Enterprise Communications GmbH ceptance. Connection Idle Timeout The connection idle timeout is determined in order to clear the connection automatically if it is not being used, i.e. if data is no longer being sent, to help you save costs.
Page 270 10 WAN Funkwerk Enterprise Communications GmbH 10.1.1.1 New Choose the New button to set up new PPPoE interfaces. Internet + Dialup PPPoE Fig. 113: -> -> -> The WAN -> Internet + Dialup -> PPPoE-> New menu consists of the following fields:...
Page 271 10 WAN Funkwerk Enterprise Communications GmbH Field Description tilink, you can connect several DSL connections from a pro- vider over PPP as a static bundle in order to obtain more band- width. Each of these DSL connections should use a separate Ethernet connection for this.
Page 272 10 WAN Funkwerk Enterprise Communications GmbH Field Description Connection Idle Timeout Only if Always enabled (flatrate mode) is disabled. Enter the idle time in seconds for static short hold. The static short hold setting determines how many seconds should pass between sending the last traffic data packet and clearing the connection.
Page 273 10 WAN Funkwerk Enterprise Communications GmbH Field Description Route Entries Only if IP Address Mode = Static Define other routing entries for this connection partner. Add a new entry with Add. • Remote IP Address: IP address of the destination host or network.
Page 274: Pptp
10 WAN Funkwerk Enterprise Communications GmbH Field Description the authentication protocol required by the connection partner. (MSCHAP version 1 or 2 possible.) • MS-CHAPv2: Run MS-CHAP version 2 only. DNS Negotiation Select whether your device receives IP addresses for primary DNS server and secondary DNS server from the connection partner or sends these to the connection partner.
Page 275 10 WAN Funkwerk Enterprise Communications GmbH Internet + Dialup PPTP Fig. 114: -> -> -> The WAN -> Internet + Dialup -> PPTP-> New menu consists of the following fields: Fields in the PPTP Basic Parameters menu Field Description Description Enter a name for uniquely identifying the internet connection.
Page 276 10 WAN Funkwerk Enterprise Communications GmbH Field Description When using the internal DSL modem, select here the EthoA in- terface, e.g. ethoa50-0, configured for this connection in Physical Interfaces-> ATM-> Profiles-> New. The default value is Not specified. User Name Enter the user name.
Page 277 10 WAN Funkwerk Enterprise Communications GmbH Field Description Default Route Select whether the route to this connection partner is to be defined as the default route. The function is activated with Enabled. The function is enabled by default. Create NAT Policy Specify whether Network Address Translation (NAT) is to be ac- tivated.
Page 278 10 WAN Funkwerk Enterprise Communications GmbH Field Description Possible values are 0 to 100. The default value is 5. Authentication Select the authentication protocol for this Internet connection. Select the authentication specified by your provider. Possible values: • PAP (default value) Only run PAP (PPP Password Authentica- tion Protocol);...
Page 279: Pppoa
10 WAN Funkwerk Enterprise Communications GmbH Field Description PPTP Interface will be used. Local PPTP IP Address Assign the PPTP interface an IP address that is used as the source address. The default value is 10.0.0.140. Remote PPTP IP Ad- Enter the IP address of the PPTP partner.
Page 280 10 WAN Funkwerk Enterprise Communications GmbH Internet + Dialup PPPoA Fig. 115: -> -> -> The WAN -> Internet + Dialup -> PPPoA-> New menu consists of the following fields: Fields in the PPPoA Basic Parameters menu Field Description Description Enter a name for uniquely identifying the connection partner.
Page 281 10 WAN Funkwerk Enterprise Communications GmbH Field Description The function is activated with Enabled. The function is disabled by default. Only activate this option if you have Internet access with a flat- rate charge. Connection Idle Timeout Only if Always enabled (flatrate mode) is disabled.
Page 282 10 WAN Funkwerk Enterprise Communications GmbH Field Description The function is enabled by default. Local IP Address Only if IP Address Mode = Static Enter the static IP address you received from your provider. Route Entries Only if IP Address Mode = Static Define other routing entries for this connection partner.
Page 283: Isdn
10 WAN Funkwerk Enterprise Communications GmbH Field Description • PAP/CHAP: Primarily run CHAP, otherwise PAP. • MS-CHAPv1: Only run MS-CHAP version 1 (PPP Microsoft Challenge Handshake Authentication Protocol). • PAP/CHAP/MS-CHAP : Primarily run CHAP, on denial, the au- thentication protocol required by the PPTP partner. (MSCHAP version 1 or 2 possible.)
Page 284 10 WAN Funkwerk Enterprise Communications GmbH • Use of the ISDN Callback function 10.1.4.1 New Choose the New button to set up new ISDN interfaces. Internet + Dialup ISDN Fig. 116: -> -> -> bintec R1xxx/R3xxx/R4xxx...
Page 285 10 WAN Funkwerk Enterprise Communications GmbH The WAN -> Internet + Dialup -> ISDN-> New menu consists of the following fields: Fields in the ISDN Basic Parameters menu Field Description Description Enter a name for uniquely identifying the connection partner.
Page 286 10 WAN Funkwerk Enterprise Communications GmbH Fields in the ISDN IP Mode and Routes menu Field Description IP Address Mode Select whether your device is to be assigned a static IP address or whether it should be assigned this dynamically.
Page 287 10 WAN Funkwerk Enterprise Communications GmbH Field Description • Netmask: Netmask for Destination IP Address. • Metric: The lower the value, the higher the priority of the route (possible values 0...15). The default value is 1. IP Assignment Pool Only if IP Address Mode = Provide IP Address Select an IP pool configured in the WAN ->...
Page 288 10 WAN Funkwerk Enterprise Communications GmbH Field Description ner. (MSCHAP version 1 or 2 possible.) • PAP: Only run PAP (PPP Password Authentication Protocol); the password is transferred unencrypted. • CHAP: Only run CHAP (PPP Challenge Handshake Authentic- ation Protocol as per RFC 1994); the password is transferred encrypted.
Page 289 10 WAN Funkwerk Enterprise Communications GmbH Field Description quested to do so by the connection partner. • Windows Server Mode : Your device calls back after a period of time proposed by the Microsoft client (NT: 10 seconds, new systems: 12 seconds. It uses the subscriber number (Entries->...
Page 290 10 WAN Funkwerk Enterprise Communications GmbH Field Description nel is ever available for connections. • Static: Static channel bundling. • Dynamic : Dynamic channel bundling. Fields in the Advanced Settings Dial Numbers menu Field Description Entries Add new entries with Add.
Page 291: Gprs/Umts
10 WAN Funkwerk Enterprise Communications GmbH Field Description • Active: OSPF is activated for this interface, i.e. routes are propagated or OSPF protocol packets sent over this interface. • Down : OSPF is disabled for this interface. Proxy ARP Mode Select whether and how ARP requests from your own LAN are to be responded to for the specified connection partner.
Page 292 10 WAN Funkwerk Enterprise Communications GmbH Thanks to its CardBus interface (PCCARD), the bintec gateway supports the integration of a UMTS CardBus modem in the system. This enables you to set up a connection to the In- ternet over UMTS.
Page 293 10 WAN Funkwerk Enterprise Communications GmbH Field Description Select the GPRS/UMTS interface. GPRS/UMTS Interface User Name Enter the user name. Password Enter the password. Always on Select whether the interface should always be activated. The function is activated with Enabled.
Page 294 10 WAN Funkwerk Enterprise Communications GmbH Field Description Create NAT Policy Specify whether Network Address Translation (NAT) is to be ac- tivated. The function is activated with Enabled. The function is enabled by default. Local IP Address Only if IP Address Mode = Static Enter the static IP address of the connection partner.
Page 295: Aux
10 WAN Funkwerk Enterprise Communications GmbH Field Description • PAP (default value) Only run PAP (PPP Password Authentica- tion Protocol); the password is transferred unencrypted. • CHAP: Only run CHAP (PPP Challenge Handshake Authentic- ation Protocol as per RFC 1994); the password is transferred encrypted.
Page 296 10 WAN Funkwerk Enterprise Communications GmbH You can define various settings for communication between the gateway and modem in this menu. You require a special cable for the console port of your gateway (e.g. AUX Backup cable) to connect an external analogue modem to the AUX port on a bintec gate- way.
Page 297 10 WAN Funkwerk Enterprise Communications GmbH Field Description Description Enter a name for uniquely identifying the WAN partner. The first character in this field must not be a number and no special characters or umlauts must be used either. User Name Enter the user name.
Page 298 10 WAN Funkwerk Enterprise Communications GmbH Field Description defined as the default route. The function is activated with Enabled. The function is enabled by default. Create NAT Policy Specify whether Network Address Translation (NAT) is to be ac- tivated. The function is activated with Enabled.
Page 299 10 WAN Funkwerk Enterprise Communications GmbH Field Description Maximum Number of Di- Enter the number of unsuccessful attempts to setup a connec- alup Retries tion before the interface is blocked. Possible values are 0 to 100. The default value is 5.
Page 300 10 WAN Funkwerk Enterprise Communications GmbH Field Description The function is enabled by default. Prioritize TCP ACK Select whether the TCP download is to be optimised in the Packets event of intensive TCP upload. This function can be specially applied for asymmetrical bandwidths (ADSL).
Page 301 10 WAN Funkwerk Enterprise Communications GmbH Field Description not be avoided for the connection of mobile Microsoft clients via DCN. • Delayed, CLID only : Your device calls back after ap- prox. four seconds if your device is requested to do so by the connection partner.
Page 302: Ip Pools
10 WAN Funkwerk Enterprise Communications GmbH Field Description to be responded to for the specified connection partner. Possible values: • Inactive (default value): Deactivates Proxy ARP for this connection partner. • Active or Idle: Your device only responds to an ARP re- quest if the status of the connection to the connection partner is Up or Dormant.
Page 303: Atm
10 WAN Funkwerk Enterprise Communications GmbH Internet + Dialup IP Pools Fig. 119: -> -> -> The WAN -> Internet + Dialup -> IP Pools-> Add menu consists of the following fields: Fields in the Options IP Pools menu Field...
Page 304 10 WAN Funkwerk Enterprise Communications GmbH Note The ATM encapsulations are described in RFCs 1483 and 2684. You will find the RFCs on the relevant pages of the IETF (www.ietf.org/rfc.html 10.2.1.1 New Choose the New button to set up new ATM profiles.
Page 305 10 WAN Funkwerk Enterprise Communications GmbH Field Description ATM Interface Select one ATM Interface. Type Only for Provider = - User-defined - Select the protocol for the ATM connection. Possible values: • Ethernet over ATM (default value): Ethernet over ATM (EthoA) is used for the ATM connection (Permanent Virtual Circuit, PVC).
Page 306 10 WAN Funkwerk Enterprise Communications GmbH Field Description ATM): Only shown for Type = Ethernet over ATM. Bridged Ethernet with LLC/SNAP encapsulation without Frame Check Sequence (checksums). • LLC Bridged FCS : Only shown for Type = Ethernet over ATM.
Page 307 10 WAN Funkwerk Enterprise Communications GmbH Field Description connection, e.g. 00:a0:f9:06:bf:03. An entry is only re- quired in special cases. For Internet connections, it is sufficient to select the Use Pre- configured option (default setting), in which case the MAC ad- dress of en1-0 is used.
Page 308: Service Categories
10 WAN Funkwerk Enterprise Communications GmbH Field Description Client Type Select whether the PPPoA connection is to be set up perman- ently or on demand. Possible values: • On demand (default value): The PPPoA is only set up on de- mand, e.g.
Page 309 10 WAN Funkwerk Enterprise Communications GmbH Service Catogories Fig. 121: -> -> -> The WAN -> ATM -> Service Categories-> New menu consists of the following fields: Fields in the ATM Service Categories menu Field Description Virtual Channel Connec- Select the already configured ATM connection (displayed by the...
Page 310 10 WAN Funkwerk Enterprise Communications GmbH Field Description • Variable Bit Rate V.1 (VBR.1) : (Variable Bit Rate) The connection is assigned a guaranteed data rate (Sus- tained Cell Rate (SCR)). This may be exceeded by the volume configured in Maximum Burst Size. Any additional ATM traffic is discarded.
Page 311: Oam Controlling
10 WAN Funkwerk Enterprise Communications GmbH 10.2.3 OAM Controlling OAM is a service for monitoring ATM connections. A total of five hierarchies (flow level F1 to F5) are defined for OAM information flow. The most important information flows for an ATM connection are F4 and F5.
Page 312 10 WAN Funkwerk Enterprise Communications GmbH OAM Control Fig. 122: -> -> -> The WAN -> ATM -> OAM Control-> New menu consists of the following fields: Fields in the OAM Control OAM Flow Configuration Field Description OAM Flow Level Select the OAM flow level to be monitored.
Page 313 10 WAN Funkwerk Enterprise Communications GmbH Field Description Loopback End-to-End Select whether you activate the loopback test for the connection between the endpoints of the VCC or VPC. The function is activated with Enabled. The function is disabled by default.
Page 314 10 WAN Funkwerk Enterprise Communications GmbH Field Description Possible values are 1 to 99. The default value is 5. Fields in the OAM Control CC Activation Field Description Continuity Check (CC) Select whether you activate the OAM-CC test for the connection End-to-End between the endpoints of the VCC or VPC.
Page 315: Leased Line
10 WAN Funkwerk Enterprise Communications GmbH Field Description activation negotiation). • Both : OAM CC requests are sent and answered after CC ne- gotiation (CC activation negotiation). • No Negotiation : Depending on the setting in the Direc- tion field, OAM CC requests are either sent and/or responded to.
Page 316: Interfaces
10 WAN Funkwerk Enterprise Communications GmbH 10.3.1 Interfaces In the WAN -> Leased Line -> Interfaces menu, a list of all automatically generated leased line connections is shown. Automatic generation requires the corresponding ISDN interface to be configured. Leased Line Interfaces Fig.
Page 317 10 WAN Funkwerk Enterprise Communications GmbH 10.3.1.1 Edit Choose the button to edit the configuration of the corresponding leased line. Leased Line Interfaces Autogenerated from BRI (ISDN-S0) Fig. 124: -> -> -> -> The WAN -> Leased Line -> Interfaces-> Autogenerated from BRI (ISDN-S0) ->...
Page 318 10 WAN Funkwerk Enterprise Communications GmbH Field Description Route Entries Define other routing entries for this connection class. Add a new entry with Add. The Advanced Settings menu consists of the following fields: Fields in the Advanced Settings menu Field...
Page 319 10 WAN Funkwerk Enterprise Communications GmbH Field Description Networks reachable over this interface are, however, included when calculating the routing information and propagated over active interfaces. • Active: OSPF is not activated for this interface, i.e. OSPF protocol packets sent over this interface.
Page 320 10 WAN Funkwerk Enterprise Communications GmbH Leased Line Interfaces Autogenerated from PRI (ISDN-S2M) Fig. 125: -> -> -> -> The WAN -> Leased Line -> Interfaces-> Autogenerated from PRI (ISDN-S2M) -> menu consists of the following fields: Fields in the Interfaces Basic Parameters menu...
Page 321 10 WAN Funkwerk Enterprise Communications GmbH The Advanced Settings menu consists of the following fields: Fields in the Advanced Settings menu Field Description LCP Alive Check Select whether the availability of the remote terminal is to be checked. The function is activated with Enabled.
Page 322 10 WAN Funkwerk Enterprise Communications GmbH Field Description protocol packets sent over this interface. • Down : OSPF is disabled for this interface. Proxy ARP Mode Select whether and how ARP requests are to be responded to for the specified connection partner.
Page 323 10 WAN Funkwerk Enterprise Communications GmbH The WAN -> Leased Line -> Interfaces-> Autogenerated from Serial -> menu con- sists of the following fields: Fields in the Interfaces Basic Parameters menu Field Description Description Enter the desired description for the connection.
Page 324: Real Time Jitter Control
10 WAN Funkwerk Enterprise Communications GmbH Field Description face. Possible values: • Passive (default value) OSPF is not activated for this inter- face, i.e. no OSPF protocol packets sent over this interface. Networks reachable over this interface are, however, included when calculating the routing information and propagated over active interfaces.
Page 325 10 WAN Funkwerk Enterprise Communications GmbH 10.4.1 Controlled interfaces In the WAN -> Real Time Jitter Control ->Controlled Interfaces menu, a list of all inter- faces is shown for which the real time jitter control has been configured. 10.4.1.1 New Click o the New button to set up portforwarding for other interfaces.
Page 326 10 WAN Funkwerk Enterprise Communications GmbH Field Description • All RTP Streams: All RTP streams are optimised. • Inaktive : Voice data transmission is not optimised. • Always: Voice data transmission is always optimised. Maximum Upload Speed Enter the maximum available upstream bandwidth in kbps for the selected interface.
Page 327: Vpn
IP packets. IPSec offers mechanisms for en- crypting and decrypting the data transferred in the IP packets. The IPSec implementation can also be smoothly integrated in a Public Key Infrastructure (PKI). The funkwerk IPSec implementation achieves this firstly by using the Authentication Header (AH) protocol and Encapsulated Security Payload (ESP) protocol, and secondly through the use of crypto- graphic key key administration mechanisms like the Internet Key Exchange (IKE) protocol.
Page 328 11 VPN Funkwerk Enterprise Communications GmbH Peer Monitoring The menu for monitoring a peer is called by selecting the button for the peer in the peer list. See Values in the list IPSec Tunnels on page 491. 11.1.1.1 New Choose the New button to set up more IPSec peers.
Page 329 11 VPN Funkwerk Enterprise Communications GmbH Field Description Administrative Status Select the status to which you wish to set the peer after saving the peer configuration. Possible values: • Up (default value): The peer is available for setting up a tunnel immediately after saving the configuration.
Page 330 11 VPN Funkwerk Enterprise Communications GmbH Field Description IP Address Assignment Select the configuration mode of the interface. Possible values: • Static (default value): Enter a static IP address. • IKE Config Mode: Choose an IP address from the con- figured IP pool.
Page 331 11 VPN Funkwerk Enterprise Communications GmbH Field Description Phase-2 Profile For phase 2, select a profile already configured in the Phase-2 Profiles menu. You can also select the profile marked as the default in Phase-2 Profiles: None (use Default Profile).
Page 332 11 VPN Funkwerk Enterprise Communications GmbH bintec devices support the DynDNS service to enable hosts without fixed IP addresses to obtain a secure connection over the Internet. This service enables a peer to be identified using a host name that can be resolved by DNS. You do not need to configure the IP ad- dress of the peer.
Page 333 11 VPN Funkwerk Enterprise Communications GmbH Note To use the IP address transfer over ISDN function, you must obtain a free-of-charge extra licence. You can obtain the licence data for extra licences via the online licensing pages in the support section at www.funkwerk-ec.com...
Page 334 11 VPN Funkwerk Enterprise Communications GmbH (3) Your device sends the initial ISDN call to peer B, which transfers the IP address of peer A and the token as per the callback configuration. (4) Peer B extracts the IP address of peer A and the token from the ISDN call and as- signs them to peer A based on the calling party number configured (the ISDN number used by peer A to send the initial call to peer B).
Page 335 11 VPN Funkwerk Enterprise Communications GmbH Field Description Incoming ISDN Number Only for Mode = Passive or Both. Enter the ISDN number from which the remote device calls the local device (calling party number). Wildcards may also be used. Outgoing ISDN Number Only for Mode = Active or Both.
Page 336: Phase-1 Profiles
11 VPN Funkwerk Enterprise Communications GmbH Field Description D Channel Mode Only if Transfer Mode = Use specific D Channel Mode or Try specific D Channel Mode, Fallback to B Channel Select the D channel mode in which your device tries to transfer the IP address.
Page 337 11 VPN Funkwerk Enterprise Communications GmbH 11.1.2.1 New Choose the New button to set up new profiles. IPSec Phase-1 Profiles Fig. 131: -> -> -> The VPN -> IPSec -> Phase-1 Profile-> New menu consists of the following fields: Fields in the Phase-1 Profile Phase-1 (IKE) Parameters menu...
Page 338 11 VPN Funkwerk Enterprise Communications GmbH Field Description • 3DES (default value): 3DES is an extension of the DES al- gorithm with an effective key length of 112 bits, which is rated as secure. It is the slowest algorithm currently supported.
Page 339 11 VPN Funkwerk Enterprise Communications GmbH Field Description Please note that the description of the encryption and authentic- ation or the hash algorithms is based on the author’s knowledge and opinion at the time of creating this User Guide. In particular,...
Page 340 11 VPN Funkwerk Enterprise Communications GmbH Field Description • Preshared Keys (default value): If you do not use certific- ates for the authentication, you can select Preshared Keys. These are configured during peer configuration in the IPSec Peers menu. The preshared key is the shared password.
Page 341 11 VPN Funkwerk Enterprise Communications GmbH Field Description • E-mail address • IPV4 Address • ASN.1 DN (Distinguished Name) Local ID Value Enter the ID of your device. For Authentication Method = DSA Signature, RSA Signa- ture or RSA Encryption, the Use Subject Name from cer- tificate option is shown.
Page 342 11 VPN Funkwerk Enterprise Communications GmbH Field Description uration. If these signals are not received after 20 seconds, the SA is discarded as invalid. Possible values: • Autodetect (default value): Your device detects and uses the mode supported by the remote terminal.
Page 343: Phase-2 Profiles
11 VPN Funkwerk Enterprise Communications GmbH Field Description NAT (see RFC 3715, section 2). These primarily prevent the setup of an IPSec tunnel from a host within a LANs and behind a NAT device to another host or device. NAT-T enables these...
Page 344 11 VPN Funkwerk Enterprise Communications GmbH IPSec Phase-2 Profiles Fig. 132: -> -> In the Standard column, you can mark the profile to be used as the default profile. 11.1.3.1 New Choose the New button to set up new profiles.
Page 345 11 VPN Funkwerk Enterprise Communications GmbH The VPN -> IPSec -> Phase-2 Profile-> New menu consists of the following fields: Fields in the Phase-2 Profile Phase-2 (IPSEC) Parameters menu Field Description Description Enter a description that uniquely identifies the profile.
Page 346 11 VPN Funkwerk Enterprise Communications GmbH Field Description Hash algorithms (Authentication): • MD 5 (default value): MD 5 (Message Digest #5) is an older hash algorithm. It is used with a 96 bit digest length for IPSec. • -ALL-: All options can be used.
Page 347 11 VPN Funkwerk Enterprise Communications GmbH Field Description Entry in Seconds: Enter the lifetime for phase 2 key in seconds. The value can be a whole number from 0 to 2147483647 . The default value is 28800. Entry in kBytes: Enter the lifetime for phase 2 keys as amount of data processed in Kbytes.
Page 348: Ip Pools
11 VPN Funkwerk Enterprise Communications GmbH Field Description • Autodetect: Automatic detection of whether the remote ter- minal is a bintec device. If it is, Heartbeat Both (for a remote terminal with bintec) or None (for a remote terminal without bintec) is set.
Page 349: Options
11 VPN Funkwerk Enterprise Communications GmbH Field Description IP Pool Name Enter the name of the IP pool. IP Pool Range In the first field, enter the first IP address of the range. In the second field, enter the last IP address of the range.
Page 350 11 VPN Funkwerk Enterprise Communications GmbH Field Description of your device. configuration This cancels all settings made during the IPSec configuration. Once the configuration is deleted, you can start with a com- pletely new IPSec configuration. You can only delete the configuration if Enable IPSec = Not activated.
Page 351 11 VPN Funkwerk Enterprise Communications GmbH Field Description The function is enabled by default. Sync SAs with ISP inter- Select whether all SAs are to be deleted whose data traffic was face state routed via an interface on which the status has changed from Upto Down, Dormant or Blocked.
Page 352: L2Tp
11 VPN Funkwerk Enterprise Communications GmbH Field Description The function is activated with Enabled. The function is enabled by default. Send Certificate Chains Select whether complete certificate chains are to be sent during IKE (phase 1). The function is activated with Enabled.
Page 353: Tunnel Profiles
11 VPN Funkwerk Enterprise Communications GmbH 11.2.1 Tunnel Profiles In the VPN -> L2TP -> Tunnel Profiles menu a list of all configured tunnel profiles is shown. 11.2.1.1 New Choose the New button to set up new tunnel profiles. L2TP Tunnel Profiles Fig.
Page 354 11 VPN Funkwerk Enterprise Communications GmbH Field Description Enter the host name for LNS or LAC. Local Hostname • LAC: The Local Hostname is used in outgoing tunnel setup messages to identify this device and is associated with the Remote Hostname of a tunnel profile configured on the LNS.
Page 355 11 VPN Funkwerk Enterprise Communications GmbH Field Description termined. By default, the Fixed option is disabled, which means that ports are dynamically assigned to the connections that use this pro- file. If you want to enter a fixed port, enable the Fixed option. Select this option if you encounter problems with the firewall or NAT.
Page 356: User
11 VPN Funkwerk Enterprise Communications GmbH Field Description 255, the default value is 1. Maximum Time between Enter the maximum time (in seconds) that your device waits be- Retries fore resending a L2TP control packet for which it received no re- sponse.
Page 357 11 VPN Funkwerk Enterprise Communications GmbH L2TP Users Fig. 137: -> -> -> The VPN -> L2TP -> Users-> New menu consists of the following fields: Fields in the Users Basic Parameters menu Field Description Description Enter a name for uniquely identifying the L2TP partner.
Page 358 11 VPN Funkwerk Enterprise Communications GmbH Field Description L2TP network server (LNS) or the functions of a L2TP access concentrator client (LAC client). Possible values: • LNS (default value): If you select this option, the L2TP partner is configured so that it accepts L2TP tunnels and restores the encapsulated PPP traffic flow.
Page 359 11 VPN Funkwerk Enterprise Communications GmbH Field Description • Static (default value): You enter a static IP address. • Provide IP Address: Only for Connection Type = LNS Your device dynamically assigns an IP address to the remote terminal. • Get IP Address: Only for Connection Type = LAC Your device is dynamically assigned an IP address.
Page 360 11 VPN Funkwerk Enterprise Communications GmbH Fields in the Advanced Settings menu Field Description Block after connection Enter the wait time in seconds before the device should try failure for again after an attempt to set up a connection has failed. The de- fault value is 300.
Page 361 11 VPN Funkwerk Enterprise Communications GmbH Field Description The function is disabled by default. Prioritize TCP ACK Select whether the TCP download is to be optimised in the Packets event of intensive TCP upload. This function can be specially applied for asymmetrical bandwidths (ADSL).
Page 362: Options
11 VPN Funkwerk Enterprise Communications GmbH Field Description DNS Negotiation Select whether your device receives IP addresses for primary DNS server, secondary DNS server, primary WINS and sec- ondary WINS from the L2TP partner or sends these to the L2TP partner.
Page 363: Pptp
11 VPN Funkwerk Enterprise Communications GmbH Field Description UDP destination port) as the local source port for the L2TP tion connection. The function is activated with Fixed. The function is disabled by default. 11.3 PPTP The Point-to-Point Tunnelling Protocol (=PPTP) can be used to set up an encrypted PPTP tunnel to provide security for data traffic over an existing IP connection.
Page 364 11 VPN Funkwerk Enterprise Communications GmbH 11.3.1.1 New Click on New to set up further PPTP partners. PPTP PPTP Tunnel Fig. 139: -> -> -> The VPN -> PPTP -> PPTP tunnel -> New menu consists of the following fields:...
Page 365 11 VPN Funkwerk Enterprise Communications GmbH Field Description The first character in this field must not be a number and no special characters or umlauts must be used either. PPTP Mode Enter the role to be assigned to the PPTP interface.
Page 366 11 VPN Funkwerk Enterprise Communications GmbH Field Description • Static (default value): You enter a static IP address. • Provide IP Address: Your device dynamically assigns an IP address to the remote terminal. Default Route Only if IP Address Mode = Static Select whether the route to this connection partner is to be defined as the default route.
Page 367 11 VPN Funkwerk Enterprise Communications GmbH Fields in the Advanced Settings menu Field Description Block after Connection Enter the wait time in seconds before the device should try Failure for again after an attempt to set up a connection has failed.
Page 368 11 VPN Funkwerk Enterprise Communications GmbH Field Description The function is enabled by default. Fields in the Advanced Settings IP Options menu Field Description OSPF Mode Select whether and how routes are propagated via the interface and/or OSPF protocol packets are to be sent.
Page 369 11 VPN Funkwerk Enterprise Communications GmbH Fields in the Advanced Settings PPTP Callback menu Field Description Callback Enables a PPTP tunnel through the Internet to be set up with a PPTP partner, even if the partner is currently inaccessible. As a rule, the PPTP partner will be requested by means of an ISDN call to go online and set up a PPTP connection.
Page 370: Options
Since, in SP 1, Microsoft has changed the confirma- tion algorithm in the GRE protocol, the automatic window adapt- ation for GRE must be turned off on the funkwerk side. The function is activated with Enabled. The function is enabled by default.
Page 371: Gre
11 VPN Funkwerk Enterprise Communications GmbH Field Description side must be adjusted here via the value, GRE Window Size. Possible values are 0 to 256. 11.4 GRE Generic Routing Encapsulation (GRE) is a network protocol that encapsulates other proto- cols and transports them in the form of IP tunnels to the specified recipients.
Page 372 11 VPN Funkwerk Enterprise Communications GmbH 11.4.1.1 New Choose the New button to set up new GRE tunnels. GRE Tunnels Fig. 141: -> -> The VPN -> GRE -> GRE Tunnels menu consists of the following fields: Fields in the GRE Tunnels Basic Parameters menu...
Page 373: Certificates
11 VPN Funkwerk Enterprise Communications GmbH Field Description Local IP Address Enter the IP address to be used as the source address for this GRE connection. Route Entries Define other routing entries for this connection partner. Add a new entry with Add.
Page 374: Certificate List
11 VPN Funkwerk Enterprise Communications GmbH 11.5.1 Certificate list In the VPN -> Certificates -> Certificate List menu a list of all available certificates is shown. 11.5.1.1 Edit Click the icon to display the content of the selected object (key, certificate, or request).
Page 375 11 VPN Funkwerk Enterprise Communications GmbH Field Description Certificates issued by this CA are accepted during authentica- tion (unless specified otherwise under "Phase-1 Profiles"). The function is activated with True. The function is disabled by default. Certificate Revocation Only for Certificate is a CA certificate = True.
Page 376 11 VPN Funkwerk Enterprise Communications GmbH 11.5.1.2 Request Registration authority certificates in SCEP If SCEP is used, your device also supports separate registration authority certificates. Registration authority certificates are used by some Certificate Authorities (CAs) to handle certain tasks (signature and encryption) during SCEP communication with separate keys, and to delegate the operation to separate registration authorities, if applicable.
Page 377 11 VPN Funkwerk Enterprise Communications GmbH Certificates Certificate List Request Fig. 143: -> -> -> The VPN -> Certificates -> Certificate List -> Request menu consists of the following fields: Fields in the Certificate List Certificate Request menu Field Description Certificate Request De- Enter a unique description for the certificate.
Page 378 11 VPN Funkwerk Enterprise Communications GmbH Field Description certificate must then be imported manually to your device. • SCEP : The key is requested from a CA using the Simple Cer- tificate Enrolment Protocol. Generate Private Key Only if Mode = Manual.
Page 379 11 VPN Funkwerk Enterprise Communications GmbH Field Description this CA is not checked. • <name of an existing certificate>: If all the necessary certific- ates are already available in the system, you select these manually. RA Sign Certificate Only if Mode = SCEP.
Page 380 11 VPN Funkwerk Enterprise Communications GmbH Field Description State/Province and Country. The function is disabled by default. Summary Only for Custom = enabled. Enter a subject name with attributes not offered in the list. Example: "CN=VPNServer, DC=mydomain, DC=com, c=DE". Common Name Only for Custom = disabled.
Page 381 11 VPN Funkwerk Enterprise Communications GmbH Field Description Possible values: • None (default value): No additional name is entered. • IP: An IP address is entered. • DNS: A DNS name is entered. • Email: An e-mail address is entered.
Page 382 11 VPN Funkwerk Enterprise Communications GmbH Certificates Certificate List Import Fig. 144: -> -> -> The VPN -> Certificates -> Certificate List -> Import menu consists of the following fields: Fields in the Certificate List Import menu Field Description External Filename Enter the file path and name of the certificate to be imported, or use Browse...
Page 383: Crls
11 VPN Funkwerk Enterprise Communications GmbH 11.5.2 CRLs In the VPN -> Certificates -> CRLs menu a list of all CRLs is shown. 11.5.2.1 Import Choose the Import button to import other CRLs. Certificates CRLs Import Fig. 145: -> ->...
Page 384: Certificate Servers
11 VPN Funkwerk Enterprise Communications GmbH Field Description downloading the CRL in auto mode fails, try with a certain type of encoding. • Base64 • Binary Password Enter the password to be used for the import. 11.5.3 Certificate Servers In the VPN -> Certificates -> Certificate Servers menu a list of all certificate servers is shown.
Page 385 11 VPN Funkwerk Enterprise Communications GmbH Field Description Description Enter a unique description for the certificate server. LDAP URL Path Enter the LDAP URL of the server. bintec R1xxx/R3xxx/R4xxx...
Page 386: Firewall
12 Firewall Funkwerk Enterprise Communications GmbH Chapter 12 Firewall The Stateful Inspection Firewall (SIF) provided for bintec gateways is a powerful security feature. The SIF with dynamic packet filtering has a decisive advantage over static packet filtering: The decision whether or not to send a packet cannot be made solely on the basis of source and destination addresses or ports but also using dynamic packet filtering based on the state of the connection to a partner.
Page 387: Policies
12 Firewall Funkwerk Enterprise Communications GmbH One of the basic functions of NAT is the translation of the local IP addresses of your LAN into the global IP addresses you are assigned by your ISP and vice versa. All connections initiated externally are first blocked, i.e.
Page 388: Filter Rules
12 Firewall Funkwerk Enterprise Communications GmbH 12.1.1 Filter Rules The default behaviour with Action = Access consists of two implicit filter rules: If an in- coming packet can be assigned to an existing connection and if a suitable connection is ex- pected (e.g.
Page 389 12 Firewall Funkwerk Enterprise Communications GmbH 12.1.1.1 New Choose the New button to set up new parameters. Firewall Policies Filter Rules Fig. 148: -> -> -> The Firewall -> Policies -> Filter Rules-> New menu consists of the following fields:...
Page 390 12 Firewall Funkwerk Enterprise Communications GmbH Field Description The value Any means that neither the destination interface nor the destination address is checked. Service Select one of the preconfigured services to which the packet to be filtered must be assigned.
Page 391: Qos
12 Firewall Funkwerk Enterprise Communications GmbH Field Description If QoS is not activated for this policy, bear in mind that the data cannot be prioritised on the sender side either. A policy with QoS activated is not only used for QoS, but for the firewall, too.
Page 392 12 Firewall Funkwerk Enterprise Communications GmbH Firewall Policies Fig. 149: -> -> -> The Firewall -> Policies -> QoS -> New menu consists of the following fields: Fields in the QoS Configure QoS Interface menu Field Description Interface Select the interface on which bandwidth management is to be carried out.
Page 393: Options
12 Firewall Funkwerk Enterprise Communications GmbH Field Description for the service specified under Services. 0 is entered by de- fault. • Bounded: Select whether the bandwidth defined in Band- width can be exceeded in the longer term. By activating this field, you specify that it cannot be exceeded.
Page 394: Interfaces
12 Firewall Funkwerk Enterprise Communications GmbH Field Description The messages are output together with messages from other subsystems. Possible values: • All (default value): All firewall activities are displayed. • Deny : Only reject and deny events are shown, see "Action".
Page 395: Addresses
12 Firewall Funkwerk Enterprise Communications GmbH 12.2.1 Groups In the Firewall -> Interfaces -> Groups menu, a list of all configured interface groups is shown. You can group together the interfaces of your device. This makes it easier to configure fire- wall rules.
Page 396: Address List
12 Firewall Funkwerk Enterprise Communications GmbH 12.3.1 Address list In the Firewall -> Addresses -> Address List menu, a list of all configured addresses is shown. 12.3.1.1 New Choose the New button to set up new addresses. Firewall Addresses Address List Fig.
Page 397: Groups
12 Firewall Funkwerk Enterprise Communications GmbH Field Description Address / Subnet Only if Address Type = Address / Subnet Enter the IP address of the host or a network address and the related netmask. The default value is 0.0.0.0. Address Range Only if Alias Type = Address Range Enter the start and end IP address of the range.
Page 398: Services
12 Firewall Funkwerk Enterprise Communications GmbH Field Description Description Enter the desired description of the address group. Selection Select the members of the group from the available Addresses. To do this, enable the field in the Selection column. 12.4 Services 12.4.1 Service list...
Page 399 12 Firewall Funkwerk Enterprise Communications GmbH Field Description Protocol Select the protocol on which the service is to be based. The most important protocols are available for selection. Destination Port Range Only if Protocol = TCP , UDP/TCP or UDP In the first field, enter the destination port via which the service is to run.
Page 400: Groups
12 Firewall Funkwerk Enterprise Communications GmbH Field Description • Parameter Problem • Timestamp • Timestamp Reply • Information Request • Information Reply • Address Mask Request • Address Mask Reply Code ICMP code options can only be selected if Type = Destina- tion Unreachable.
Page 401 12 Firewall Funkwerk Enterprise Communications GmbH Firewall Services Groups Fig. 155: -> -> -> The Firewall -> Services-> Groups-> New menu consists of the following fields: Fields in the Groups Basic Parameters menu Field Description Description Enter the desired description of the service group.
Page 402: Voip
13 VoIP Funkwerk Enterprise Communications GmbH Chapter 13 VoIP Voice over IP (VoIP) uses the IP protocol for voice and video transmission. The main difference compared with conventional telephony is that the voice information is not transmitted over a switched connection in a telephone network, but divided into data packets by the Internet protocol and these packets are then passed to the destination over undefined paths in a network.
Page 403 13 VoIP Funkwerk Enterprise Communications GmbH 13.1.1.1 Edit/New Choose the icon to edit existing entries. Choose the Newbutton to create application level gateway entries. VoIP Application Level Gateway SIP Proxies Edit/New Fig. 156: -> -> -> The VoIP->Application Level Gateway -> SIP Proxies -> Edit/New menu, consists of the...
Page 404: Sip Endpoints
13 VoIP Funkwerk Enterprise Communications GmbH Field Description The ports can be provider-specific. Session Timeout Enter the time in seconds for which a session stays up if no data packets are sent or received. This value must be greater than the SIP Expire Time of the con- nected SIP client (SIP telephone, terminal adapter etc.)
Page 405 13 VoIP Funkwerk Enterprise Communications GmbH VoIP Application Level Gateway SIP Endpoints Edit/New Fig. 157: -> -> -> The VoIP->Application Level Gateway -> SIP Endpoints-> Edit/New menu, consists of the following fields: Fields in the SIP Endpoints Basic Parameters menu...
Page 406: Media Gateway
13 VoIP Funkwerk Enterprise Communications GmbH Field Description External Port External port that is to be bound to the internal port. For clients, the external port is recognised automatically and should not be changed. 13.2 Media Gateway 13.2.1 Extensions Here you can configure the subscriber numbers of the terminal devices connected to the media gateway, i.e.
Page 407 13 VoIP Funkwerk Enterprise Communications GmbH VoIP Media Gateway Extensions Edit/New Fig. 158: -> -> -> The VoIP ->Media Gateway -> Extensions -> Edit/New menu consists of the following fields: Fields in the Extensions Basic Parameters menu Field Description Description Enter the name of the terminal.
Page 408 13 VoIP Funkwerk Enterprise Communications GmbH Field Description Select analogue inter- Only for Interface Type = Analogue. face Select an analogue interface. The analogue interfaces you can select depends on the device used. Registration Only for Interface Type = SIP.
Page 409 13 VoIP Funkwerk Enterprise Communications GmbH Field Description Name field is used. Only for Interface Type = SIP Password Enter a password here. A maximum of 20 characters can be entered. The password given here must also be entered on the SIP tele- phone.
Page 410: Sip Accounts
13 VoIP Funkwerk Enterprise Communications GmbH Fields in the Advanced Settings Voice Quality Settings menu Field Description Echo Cancellation Select whether echo cancellation should be used. Echo cancellation is a technique to suppress echo feedback in voice communication on full duplex lines.
Page 411 13 VoIP Funkwerk Enterprise Communications GmbH VoIP Media Gateway SIP Accounts Edit/New Fig. 159: -> -> -> The VoIP ->Media Gateway ->SIP Accounts-> Edit/New menu consists of the following fields: Fields in the SIP Accounts Basic Parameters menu Field Description Description Enter the name of the account.
Page 412 13 VoIP Funkwerk Enterprise Communications GmbH Field Description Trunk Mode Select the trunk mode to be used. Possible values: • Off (default value) The trunk mode is not used. • Client: the media gateway is operated as SIP client. • Server: the media gateway is operated as SIP server.
Page 413 13 VoIP Funkwerk Enterprise Communications GmbH Field Description assigned one for you. Authentication ID Enter a name that is to be used for authentication. If you do not enter a name, the name in the User Name field is used.
Page 414 13 VoIP Funkwerk Enterprise Communications GmbH Field Description Possible values: • Disabled (default value): the DDI sender address is not sent. • Display and User Name: the sender address is placed in both "Display" and "User" fields of the SIP header.
Page 415 13 VoIP Funkwerk Enterprise Communications GmbH Field Description Sort Order Select the codecs to be proposed for the connection. The co- decs chosen here are proposed in a certain order depending on the setting in the Codec Proposal Sequence field.
Page 416: Call Routing
13 VoIP Funkwerk Enterprise Communications GmbH Field Description seconds. Possible values are 10 to 210. The default value is 20. 13.2.3 Call Routing Here you can define the conditions for the routing of calls. In the VoIP -> Media Gateway ->Call Routing menu, a list of all existing entries is shown.
Page 417 13 VoIP Funkwerk Enterprise Communications GmbH Field Description Description Enter the name of the call routing entry. Administrative Status Select whether the call routing entry should be enabled or dis- abled. The function is activated with Enabled. The function is enabled by default.
Page 418 13 VoIP Funkwerk Enterprise Communications GmbH Field Description Called Address You can enter an address numerically (e.g. a subscriber num- ber) or alphanumerically (e.g. for a trunk) that is to be compared with a dialled address. The following wildcards can be used: •...
Page 419: Clid Translation
13 VoIP Funkwerk Enterprise Communications GmbH Field Description Notation: <a:b>, i.e. a is replaced by b. A number of rules can be chained together using semicolons as separators, e.g. <a:b>;<c:d>;<e:f>. After confirmation of entry, the rule chain is automatically sorted by the "best match" method.
Page 420 13 VoIP Funkwerk Enterprise Communications GmbH VoIP Media Gateway CLID Translation Edit/New Fig. 161: -> -> -> The VoIP ->Media Gateway -> CLID Translation-> Edit/New menu consists of the follow- ing fields: Fields in the CLID Translation Basic Parameters menu...
Page 421: Call Translation
13 VoIP Funkwerk Enterprise Communications GmbH Field Description • BRI: Restricts the entry to the selected BRI interface. • FXO: Restricts the entry to the selected FXO interface. • <SIP Account>: Restricts the entry to the selected SIP ac- count.
Page 422 13 VoIP Funkwerk Enterprise Communications GmbH Note Which number (called party number or calling party number) is translated depends on the direction (incoming or outgoing) of the call in question. For incoming calls it is the called party number, for outgoing calls the calling party number that is translated.
Page 423 13 VoIP Funkwerk Enterprise Communications GmbH Field Description Possible values: • Both (default value): For incoming and outgoing calls (bidirectional). • Incoming : For incoming calls. • Outgoing : For outgoing calls. Associated Line Select the line or SIP account via which the calls are to be routed.
Page 424: Options
13 VoIP Funkwerk Enterprise Communications GmbH 13.2.6 Options In the VoIP -> Media Gateway -> Options menu, you can make global settings for the me- dia gateway. VoIP Media Gateway Options Fig. 163: -> -> The VoIP ->Media Gateway -> Options menu consists of the following fields:...
Page 425 13 VoIP Funkwerk Enterprise Communications GmbH Field Description other extensions, the call routing is handled by the media gateway in accordance with the configured call routing entries. Note that the call routing is handled by the media gateway if the provider is not available (backup).
Page 426 13 VoIP Funkwerk Enterprise Communications GmbH Field Description ate. Fields in the Advanced Settings menu Field Description Speed Dialing Click Add to configure new speeddial numbers. bintec R1xxx/R3xxx/R4xxx...
Page 427: Chapter 14 Local Services
14 Local services Funkwerk Enterprise Communications GmbH Chapter 14 Local services 14.1 DNS Each device in a TCP/IP network is usually located by its IP address. Because host names are often used in networks to reach different devices, it is necessary for the associated IP address to be known.
Page 428 14 Local services Funkwerk Enterprise Communications GmbH information is forwarded and a dynamic entry created in the cache. (3) Otherwise, if global name servers are entered, the primary DNS server then the sec- ondary DNS server are asked. If the IP address of your device or the loopback ad- dress is entered for local applications, these are ignored here.
Page 429: Global Settings
14 Local services Funkwerk Enterprise Communications GmbH 14.1.1 Global Settings Local Services Global Settings Fig. 164: -> -> The menu Lokale Dienste -> DNS -> Global Settings consists of the following fields: Fields in the Global Settings Basic Parameters menu...
Page 430 14 Local services Funkwerk Enterprise Communications GmbH Field Description DNS Server Only for DNS Server Configuration = Static Primary Enter the IP address of the first and, if necessary, second global DNS server. Secondary WINS Server Enter the IP address of the first and, if necessary, alternative...
Page 431 14 Local services Funkwerk Enterprise Communications GmbH Field Description Maximum TTL for Posit- Enter the value to which the TTL is to be set for a positive dy- ive Cache Entries namic DNS entry in the cache if its TTL is 0 or its TTL exceeds the value for Maximum TTL for Positive Cache Entries .
Page 432: Static Hosts
14 Local services Funkwerk Enterprise Communications GmbH Field Description global name servers entered on your device are sent. 14.1.2 Static Hosts In the Local Services -> DNS -> Static Hosts menu, a list of all configured static hosts is shown.
Page 433: Domain Forwarding
14 Local services Funkwerk Enterprise Communications GmbH Field Description The entry can also start with the wildcard *, e.g. *.funkwerk.de. If a name is entered without a dot, this is completed with <Name>. after confirming with OK " is added. Response In this entry, select the type of response to DNS requests.
Page 434 Only for Forward = Host Enter the name of the host to be forwarded. The entry can also start with the wildcard *, e.g. *.funkwerk.com. If a name is entered without a full stop, once you confirm with OK " <Default Domain>. " is added.
Page 435: Cache
14 Local services Funkwerk Enterprise Communications GmbH Field Description The entry can also start with the wildcard *, e.g. *.funkwerk.com. If a name is entered without a full stop, once you confirm with OK " <Default Domain>. " is added. Forward to Select the forwarding destination requests to the name defined in Host or Domain.
Page 436 14 Local services Funkwerk Enterprise Communications GmbH Local Services Cache Fig. 167: -> -> You can select individual entries using the checkbox in the corresponding line, or select them all using the Select All button. A dynamic entry can be converted to a static entry by marking the entry and confirming with Set to Static.
Page 437: Statistics
14 Local services Funkwerk Enterprise Communications GmbH 14.1.5 Statistics Local Services Statistics Fig. 168: -> -> In the menu Lokale Dienste -> DNS -> Statistics, the following statistical values are shown: Fields in the Statistics DNS Statistics menu Field Description...
Page 438: Dyndns Client
14 Local services Funkwerk Enterprise Communications GmbH Field Description Successfully Answered Shows the number of successfully answered requests (positive Queries and negative). Server Failures Shows the number of requests that were not answered by any name server (either positively or negatively).
Page 439 14 Local services Funkwerk Enterprise Communications GmbH Local Services DynDNS Client DynDNS Update Fig. 169: -> -> -> The Local Services -> DynDNS Client -> DynDNS Update -> New menu consists of the following fields: Fields in the DynDNS Update Basic Parameters menu...
Page 440: Dyndns Provider
14 Local services Funkwerk Enterprise Communications GmbH Field Description Other DynDNS providers can be configured in the Local Ser- vices -> DynDNS Client-> DynDNS Providers menu. The default value is DynDNS . Enable Update Select whether the DynDNS entry configured here is to be activ- ated.
Page 441 14 Local services Funkwerk Enterprise Communications GmbH Local Services DynDNS Client DynDNS Providers Fig. 170: -> -> -> The Local Services -> DynDNS Client -> DynDNS Provider -> New menu consists of the following fields: Fields in the DynDNS Provider Basic Parameters menu...
Page 442: Dhcp Server
14 Local services Funkwerk Enterprise Communications GmbH Field Description Protocol Select one of the protocols implemented. Possible values: • DynDNS (default value) • Static DynDNS • ODS • HN • DYNS • Gnudip-HTML • Gnudip-TCP • Custom DynDNS Update Interval...
Page 443 14 Local services Funkwerk Enterprise Communications GmbH dress pools is shown. In the list, for each entry, you have the possibility under Pool of enabling or disabling the configured DHCP pools. 14.3.1.1 New Choose the New button to set up new IP address pools. Choose the icon to edit exist- ing entries.
Page 444 14 Local services Funkwerk Enterprise Communications GmbH Field Description the IP address pool. Pool Usage Specify whether the IP pool is used for DHCP requests in the same subnet or for DHCP requests that have been forwarded to your device from another subnet. In this case it is possible to define IP addresses from another network.
Page 445: Ip/Mac Binding
14 Local services Funkwerk Enterprise Communications GmbH Field Description time server to be sent to the client. • DNS Server: Enter the IP address of the DNS server to be sent to the client. • DNS Domain Name: Enter the DNS domain to be sent to the client.
Page 446 14 Local services Funkwerk Enterprise Communications GmbH Local Services DHCP Server IP/MAC Binding Fig. 172: -> -> -> The Local Services -> DHCP Server ->DHCP Binding -> New menu consists of the fol- lowing fields: Fields in the IP/MAC Binding Basic Parameters menu...
Page 447: Dhcp Relay Setting
14 Local services Funkwerk Enterprise Communications GmbH 14.3.3 DHCP Relay Setting If your device for the local network does not distribute any IP addresses to the clients by DHCP, it can still forward the DHCP requests on behalf of the local network to a remote DHCP server.
Page 448: Web Filter
14 Local services Funkwerk Enterprise Communications GmbH 14.4 Web Filter In the Local Services -> Web Filters menu, you can configure a URL-based Web filter service, which accesses the Proventia Web Filter from the company Internet Security Sys- tems (www.iss.net) and checks how a requested Internet page is categorised by the Proventia Web Filter.
Page 449 14 Local services Funkwerk Enterprise Communications GmbH Field Description Enable Web Filter Activate or deactivate the filter. The function is activated by choosing Enabled. The function is disabled by default. Filtered input interface(s) Select for which of the existing Ethernet interfaces web filtering is to be activated.
Page 450: Filter List
14 Local services Funkwerk Enterprise Communications GmbH Field Description Licence Key Enter the number of your Proventia Web Filter licence. The pre- set code assigned by ISS designates the device type. In the ex works state, you can activate a 30-day demo version of the Proventia Web Filter.
Page 451 14 Local services Funkwerk Enterprise Communications GmbH 14.4.2.1 New Choose the New button to set up new filters. Local Services Web Filters Filter List Fig. 175: -> -> The Local Services -> Web Filter -> Filter List menu consists of the following fields:...
Page 452: Black / White List
14 Local services Funkwerk Enterprise Communications GmbH Field Description Web Filter, the action associated with this category is used. Select the days on which the filter is to be active. Possible settings: • Daily (default value): The filter is used every day of the week.
Page 453 14 Local services Funkwerk Enterprise Communications GmbH 14.4.3.1 Add Use the Add button to add further URLs or IP addresses to the list. Local Services Web Filters Black / White List Fig. 176: -> -> -> The Local Services -> Web Filter -> Black / White List->Add menu consists of the fol-...
Page 454: History
14 Local services Funkwerk Enterprise Communications GmbH 14.4.4 History In the Local Services -> Web Filter -> History menu, you can view the recorded history of the web filter. The history logs all requests that are marked for logging by a relevant filter (Action = Log), likewise all rejected requests.
Page 455: User
14 Local services Funkwerk Enterprise Communications GmbH Note In the ex works state, a user with the user name default and no password is always entered for the CAPI subsystem. All calls to the CAPI are offered to all CAPI applica- tions in the LAN.
Page 456: Options
14 Local services Funkwerk Enterprise Communications GmbH Field Description User name Enter the user name for which access to the CAPI service is to be allowed or denied. Password Enter the password with which the user Username has to use for identification purposes to gain access to the CAPI service.
Page 457: Scheduling
14 Local services Funkwerk Enterprise Communications GmbH Field Description Enable Server Select whether your device is to be enabled as a CAPI server. The function is activated by choosing Enabled. The function is enabled by default. CAPI Server TCP Port The field can only be edited if Server Enable is enabled.
Page 458 14 Local services Funkwerk Enterprise Communications GmbH Local Services Scheduling Time Schedule Fig. 180: -> -> -> The Local Services -> Scheduling -> Schedule-> New menu consists of the following fields: Fields in the Time Schedule Basic Parameters menu Field...
Page 459 Only if Select action = Trigger software update Select the desired source. Possible values: • Current software from Funkwerk server: The latest software will be downloaded from the Funkwerk server. • HTTP server: The latest software will be downloaded from an HTTP server that you define in Update URL.
Page 460 14 Local services Funkwerk Enterprise Communications GmbH Field Description TFTP File Name Only if Select action = Trigger configuration backup Enter the name with which configuration file is to be transferred to the TFTP server. Fields in the Time Schedule Select time interval menu...
Page 461: Options
14 Local services Funkwerk Enterprise Communications GmbH Field Description Stop Time Enter the time from which the initiator is to be deactivated. De- activation is carried on the next scheduling interval. If you do not enter a Stop Time or set Stop Time = Start Time, the initiator is activated and deactivated after 10 seconds.
Page 462: Surveillance
14 Local services Funkwerk Enterprise Communications GmbH Field Description The value 300 is recommended (5 minute accuracy). Values lower than 60 are generally pointless and are an unnecessary use of system resources. If 0 is displayed in this field, the scheduler is deactivated.
Page 463: Hosts
14 Local services Funkwerk Enterprise Communications GmbH 14.7.1 Hosts In the Local Services -> Surveillance -> Hosts menu, a list of all monitored hosts is shown. Local Services Surveillance Hosts Fig. 182: -> -> Values in the list Hosts Field...
Page 464 14 Local services Funkwerk Enterprise Communications GmbH Local Services Monitoring Hosts Fig. 183: -> -> -> The Local Services -> Monitoring -> Hosts-> New menu consists of the following fields: Fields in the Hosts Host Parameters menu Field Description Group ID Select an ID for the group of hosts whose availability is to be monitored by your device.
Page 465 14 Local services Funkwerk Enterprise Communications GmbH Field Description Source IP Address Select how the IP address is to be determined that your device uses as the source address of the packet sent to the host to be monitored. Possible values: •...
Page 466: Interfaces
14 Local services Funkwerk Enterprise Communications GmbH 14.7.2 Interfaces In the Local Services -> Monitoring -> Interfaces menu, a list of all monitored Interfaces is shown. Local Services Surveillance Interfaces Fig. 184: -> -> Values in the list Interfaces Field...
Page 467 14 Local services Funkwerk Enterprise Communications GmbH Local Services Monitoring Interfaces Fig. 185: -> -> -> The Local Services -> Monitoring ->Interfaces -> New menu consists of the following fields: Fields in the Interfaces Basic Parameters menu Field Description Monitored Interface Select the interface on your device that is to be monitored.
Page 468: Ping Generator
14 Local services Funkwerk Enterprise Communications GmbH Field Description • Disabled : Deactivation of interface(s) Interface Select the interface(s) for which the action defined in Interface Action is to be performed. All the physical and virtual interfaces and the options All PPP Interfaces and All IPSec Interfaces can be selected.
Page 469 14 Local services Funkwerk Enterprise Communications GmbH Field Description Interval Shows the interval in seconds during which the ping is sent to the specified address. Status Displays the operating state of the destination IP address. 14.7.3.1 Edit/New Choose the icon to edit existing entries. Choose the New button to set up further pings.
Page 470: Isdn Theft Protection
14 Local services Funkwerk Enterprise Communications GmbH Field Description • Automatic: The IP address is determined automatically. • Specific (default value): Enter the IP address in the adja- cent input field e.g. to test a particular extended route. Interval Enter the interval is seconds during which the ping is to be sent to the target IPaddress specified in Target IP Address .
Page 471 14 Local services Funkwerk Enterprise Communications GmbH Local Services ISDN Theft Protection Options Fig. 188: -> -> The menu Local Services ->ISDN Theft Protection -> Options consists of the following fields: Fields in the Options Basic Parameters menu Field Description ISDN Theft Protection Enable or disable the ISDN theft protection function.
Page 472: Funkwerk Discovery
14.9 Funkwerk Discovery 14.9.1 Device discovery The funkwerk Discovery protocol is used to identify and configure bintec access points that are in the same wired network as your device. Once an access point has been discovered, certain basic parameters (node name, IP address, netmask, and device address) can be configured on the access point (provided you know the administrator password).
Page 473 14 Local services Funkwerk Enterprise Communications GmbH In the Local Services -> Funkwerk Discovery -> Device Discovery menu, under Res- ults a list is shown of all access points found on the network. In the Ethernet interface field, select the Ethernet interface of your device via which bintec access point discovery is to be carried out.
Page 474 Local Services Funkwerk Discovery Device Discovery Fig. 190: -> -> -> The Local Services -> Funkwerk Discovery -> Device Discovery-> menu consists of the following fields: Fields in the Funkwerk Discovery Basic Parameters menu Field Description Interface The value of this field can only be read.
Page 475 14 Local services Funkwerk Enterprise Communications GmbH Field Description point. Authentication Password You must enter the administrator password for the access point, otherwise you cannot carry out the configuration operation. Last Write Result The value of this field can only be read.
Page 476: Options
Funkwerk Enterprise Communications GmbH 14.9.2 Options In this menu, you can grant permission for your device to be discovered by other bintec devices using the funkwerk Discovery protocol and to be configured by means of this. Local Services Funkwerk Discovery Options Fig.
Page 477: Upnp
14 Local services Funkwerk Enterprise Communications GmbH 14.10 UPnP Universal Plug and Play (UPnP) makes it possible to use current messenger services (e.g. real time video/audion conferencing) as peer-to-peer communication where one of the peers lies behind a NAT-enabled gateway.
Page 478: Global Settings
14 Local services Funkwerk Enterprise Communications GmbH Local Services UPnP Interfaces Fig. 192: -> -> The menu Local Services ->UPnP-> Interfaces consists of the following fields: Fields in the Interfaces menu Field Description Answer to client request Determine whether UPnP requests from clients are to be answered via the particular interface (from the local network).
Page 479 14 Local services Funkwerk Enterprise Communications GmbH Local Services UPnP Global Settings Fig. 193: -> -> The menu Local Services ->UPnP-> Global Settings consists of the following fields: Fields in the Global Settings menu Field Description UPnP Status Decide how the gateway processes UPnP requests from the LAN.
Page 480: Maintenance
15 Maintenance Funkwerk Enterprise Communications GmbH Chapter 15 Maintenance This menu provides you with numerous functions for maintaining your device. It firstly provides a menu for testing availability within the network. You can manage your system configuration files. If more recent system software is available, you can use this menu to in- stall it.
Page 481: Dns Test
15 Maintenance Funkwerk Enterprise Communications GmbH 15.1.2 DNS Test Maintenance Diagnosis DNS Test Fig. 195: -> -> The DNS test is used to check whether the domain name of a particular host is correctly re- solved. The Output Results field shows the DNS test messages. The DNS test is started by entering the domain name to be tested in DNS Address and clicking on the Go button.
Page 482: Traceroute Test
You can use this menu to manage the software version of your device, your configuration files and the language of the Funkwerk Configuration Interface . Your device contains the version of the system software available at the time of production.
Page 483 Save Configuration button in the Funkwerk Configuration Interface navigation area. This configuration is then saved in the flash in a file with the name boot.
Page 484 15 Maintenance Funkwerk Enterprise Communications GmbH Maintenance Software & Configuration Options Fig. 197: -> -> The Maintenance -> Software & Configuration -> Options menu consists of the following fields: Fields in the Configuration Management Currently installed Software menu Field Description BOSS Shows the current software version loaded on your device.
Page 485 Field Description and reboot your device. • Import language: You can import other language versions of the Funkwerk Configuration Interface into your device. You can download the files to your PC from the download area at www.funkwerk-ec.com and from there import them to your device.
Page 486: Reboot
PC. • HTTP server: The file is stored on a remote server specified in the URL. • Current software from Funkwerk server: The file is on the official Funkwerk update server. Only for Source = HTTP server You enter the URL of the update server from which the system software file is loaded here.
Page 487: System Reboot
In this menu, you can trigger an immediate reboot of your device. Once your system has restarted, you must call the Funkwerk Configuration Interface again and log in. Pay attention to the LEDs on your device. For information on the meaning of the LEDs, see the Technical Data chapter of the manual.
Page 488: Chapter 16 External Reporting
16 External Reporting Funkwerk Enterprise Communications GmbH Chapter 16 External Reporting 16.1 Syslog Events in various subsystems of your device e.g. PPP) are logged in the form of syslog messages (system logging messages). The number of messages visible depends on the level set (eight levels from Emergency and Information to Debug).
Page 489 16 External Reporting Funkwerk Enterprise Communications GmbH 16.1.1.1 New Choose the New button to set up new syslog servers. External Reporting Syslog Syslog Servers Fig. 199: -> -> -> The External Reporting -> Syslog-> Syslog Servers -> New menu consists of the follow-...
Page 490 16 External Reporting Funkwerk Enterprise Communications GmbH Field Description • Information (default value) • Debug (lowest priority) Syslog messages are only sent to the host if they have a higher or identical priority to that indicated, i.e. all messages generated are recorded at syslog level Debug.
Page 491: Ip Accounting
16 External Reporting Funkwerk Enterprise Communications GmbH 16.2 IP Accounting In modern networks, information about the type and number of data packets sent and re- ceived over the network connections is often collected for commercial reasons. This inform- ation is extremely important for Internet Service Providers that bill their customers by data volume.
Page 492: Options
16 External Reporting Funkwerk Enterprise Communications GmbH 16.2.2 Options In this menu, you configure general settings for IP Accounting. External Reporting IP Accounting Options Fig. 201: -> -> In the External Reporting -> IP Accounting -> Options menu you can set the Log Format of the IP accounting messages.
Page 493: E-Mail Alert
16 External Reporting Funkwerk Enterprise Communications GmbH Field Description Destination interface index Packets sent Octets sent Packets received Octets received Sequential number for accounting message By default, the following format instructions are entered in the Log Format field. INET: %d%t%a%c%i:%r/%f -> %I:%R/%F%p%o%P%O[%s] 16.3 E-mail Alert...
Page 494 16 External Reporting Funkwerk Enterprise Communications GmbH The External Reporting -> E-mail Alert-> E-mail Alert Server menu consists of the fol- lowing fields: Fields in the E-mail Alert Server Basic Parameters menu Field Description Alert service Enable or disable the function.
Page 495: E-Mail Alert Recipient
16 External Reporting Funkwerk Enterprise Communications GmbH Field Description mailserver can answer the requests via POP3. POP3 Timeout Only if SMTP Authentication = SMTP after POP. Enter how long the router must wait after a relevant event be- fore it is forced to send the alert mail.
Page 496 16 External Reporting Funkwerk Enterprise Communications GmbH Field Description Matching String You must enter a "Matching String" here. This must occur in a syslog message as a necessary condition for triggering an alert. The entry is limited to 55 characters. Bear in mind that without the use of wildcards (e.g.
Page 497: Snmp
16 External Reporting Funkwerk Enterprise Communications GmbH 16.4 SNMP SNMP (Simple Network Management Protocol) is a protocol from the IP protocol family for transporting management information about network components. Every SNMP management system contains an MIB. SNMP can be used to configure, con- trol and administrate various network components from one system.
Page 498: Snmp Trap Hosts
16 External Reporting Funkwerk Enterprise Communications GmbH The External Reporting -> SNMP -> SNMP Trap Options menu consists of the following fields: Fields in the SNMP Trap Options Basic Parameters menu Field Description SNMP Trap Broadcast- Select whether the transfer of SNMP traps is to be activated.
Page 499: Activity Monitor
16 External Reporting Funkwerk Enterprise Communications GmbH External Reporting SNMP SNMP Trap Hosts Fig. 205: -> -> -> The External Reporting -> SNMP -> SNMP Trap Hosts -> New menu consists of the fol- lowing fields: Fields in the SNMP Trap Hosts Basic Parameters menu...
Page 500: Options
16 External Reporting Funkwerk Enterprise Communications GmbH the broadcast address of the first LAN interface (default setting) or to an explicitly entered IP address. One packet is sent per time interval, which can be adjusted individually to val- ues from 1 - 60 seconds. Up to 100 physical and virtual interfaces can be monitored, provided the packet size of 4096 bytes is not exceeded.
Page 501 16 External Reporting Funkwerk Enterprise Communications GmbH Field Description • Off (default value) Deactivates the sending of information to the Activity Monitor. • Physical: Only information about the physical interfaces is sent. • Physical/WAN/VPN: Information about physical and virtual interfaces is sent Send Information to Select where your device sends the UDP packets.
Page 502: Chapter 17 Monitoring
17 Monitoring Funkwerk Enterprise Communications GmbH Chapter 17 Monitoring This menu includes information that enable you to locate problems in your network and monitor activities, e.g. at your device's WAN interface. 17.1 Internal Log 17.1.1 System messages In the Monitoring -> Internal Log -> System Messages menu, a list of all internally stored system messages is shown.
Page 503: Ipsec
17 Monitoring Funkwerk Enterprise Communications GmbH Monitoring Internal Log System Messages Fig. 207: -> -> Values in the list System Messages Field Description Displays the serial number of the system message. Date Displays the date of the record. Time Displays the time of the record.
Page 504: Ipsec Tunnels
17 Monitoring Funkwerk Enterprise Communications GmbH 17.2.1 IPSec Tunnels In the Monitoring -> IPSec -> IPSec Tunnel menu, a list of all configured IPSec peers is shown. Monitoring IPSec IPSec Tunnel Fig. 208: -> -> Values in the list IPSec Tunnels...
Page 505 17 Monitoring Funkwerk Enterprise Communications GmbH By pressing the button, you display detailed statistics on the IPSec connection. Monitoring IPSec IPSec Tunnel Fig. 209: -> -> -> Values in the list IPSec Tunnels Field Description Description The description of the peer is displayed here.
Page 506: Ipsec Statistics
17 Monitoring Funkwerk Enterprise Communications GmbH 17.2.2 IPSec Statistics In the Monitoring -> IPSec -> IPSec Statistics menu, statistical values for all IPSec con- nections are shown. Monitoring IPSec IPSec Statistics Fig. 210: -> -> The Monitoring -> IPSec ->IPSec Statistics menu consists of the following fields:...
Page 507: Isdn/Modem
17 Monitoring Funkwerk Enterprise Communications GmbH Field Description • Configured: Configured IPSec connections. Field in the IPSec Statistics SAs menu Field Description IKE (Phase1) Shows the number of active phase 1 SAs (Established) from the total number of phase 1 SAs (Total).
Page 508 17 Monitoring Funkwerk Enterprise Communications GmbH Monitoring ISDN/Modem Current Calls Fig. 211: -> -> Values in the list Current Calls Field Description Displays the serial number of the ISDN connection entry. Service Displays the service to or from which the call is connected: PPP, IPSEC, X.25, POTS.
Page 509: Call History
17 Monitoring Funkwerk Enterprise Communications GmbH 17.3.2 Call History In the Monitoring -> ISDN/Modem -> Call History menu, a list of the last 20 ISDN con- nections (incoming and outgoing) made since the last system boot is shown. Monitoring ISDN/Modem Call History Fig.
Page 510: Statistics
17 Monitoring Funkwerk Enterprise Communications GmbH 17.4.1 Statistics In the Monitoring -> Interfaces -> Statistics menu, the current values and activities of all device interfaces are shown. Monitoring Interfaces Statistics Fig. 213: -> -> You change the state of the interface by pressing the...
Page 511: Wlan
17 Monitoring Funkwerk Enterprise Communications GmbH Field Description Unchanged for Displays the length of time for which the operating state of the interface has not changed. Action Enables you to change the status of the interface as displayed. 17.5 WLAN 17.5.1 WLAN1...
Page 512 17 Monitoring Funkwerk Enterprise Communications GmbH Monitoring WLAN WLAN1 Advanced Fig. 215: -> -> -> Values in the list Advanced Field Description Displays the serial number of the list entry. Description Displays the description of the displayed value. Value Displays the statistical value.
Page 513: Vss
17 Monitoring Funkwerk Enterprise Communications GmbH Description Meaning without ACK received ledgement frame was not received. Duplicate received MS- Displays the number of MSDUs received in duplicate. CTS frames received in Displays the number of received CTS (clear to send) frames response to an RTS that were received as a response to RTS (request to send).
Page 514 17 Monitoring Funkwerk Enterprise Communications GmbH Field Description IP Address Shows the IP address of the client. Uptime Shows the time in hours, minutes and seconds for which the cli- ent is logged in. Tx Packets Shows the total number of packets sent.
Page 515 17 Monitoring Funkwerk Enterprise Communications GmbH Monitoring WLAN <Connected client> Fig. 217: -> -> -> -> Values in the list VSS <Connected client> Field Description Client MAC Address Shows the MAC address of the associated client. IP Address Shows the IP address of the client.
Page 516: Wds
17 Monitoring Funkwerk Enterprise Communications GmbH Field Description 36, 24, 18, 12, 9.6 Mbit/s. If the 5-GHz frequency band is used, the indication of 11, 5.5, 2 and 1 Mbit/s is suppressed for IEEE 802.11b. Rate Displays the possible data rates on this radio module.
Page 517 17 Monitoring Funkwerk Enterprise Communications GmbH Field Description Signal dBm Shows the received signal strength in dBm. Noise dBm Shows the received noise strength in dBm. Data rate Mbit/s Shows the current transmission rate of data received on this WDS link in Mbit/s.
Page 518: Client Links
17 Monitoring Funkwerk Enterprise Communications GmbH Field Description Uptime Shows the time in hours, minutes and seconds for which the WDS link in question is active. Tx Packets Shows the total number of packets sent. Rx Packets Shows the total number of packets received.
Page 519 17 Monitoring Funkwerk Enterprise Communications GmbH Field Description Uptime Shows the time in hours, minutes and seconds for which the cli- ent link in question is active. Tx Packets Shows the total number of packets sent. Rx Packets Shows the total number of packets received.
Page 520 17 Monitoring Funkwerk Enterprise Communications GmbH Field Description Noise dBm Shows the received noise strength in dBm. SNR dB Shows the signal quality in dB. Data rate Mbit/s Shows the current transmission rate of data received on this cli- ent link in Mbit/s.
Page 521: Glossary
Glossary Funkwerk Enterprise Communications GmbH Glossary Announcement If you want to call your employees or family members to a meeting or the dinner table, you could call each one of them individually or simply use the announcement function. With just one call, you reach all the announcement-enabled telephones without the subscribers having to pick up the receiver.
Page 522 Glossary Funkwerk Enterprise Communications GmbH Direct Call You are not at home. However, there is someone at home who needs to be able to reach you quickly and easily by telephone if ne- cessary (e.g. children or grandparents). As you can set up the Direct Call function for one or more telephones, the receiver of the tele- phone simply needs to be lifted.
Page 523 Glossary Funkwerk Enterprise Communications GmbH vice. Three-party confer- A three-way telephone call. Performance feature in T-Net, T-ISDN ence and your PBX. 10 Base 2 Thin Ethernet connection. Network connection for 10-mbps net- works with BNC connector. T-connectors are used for the connec- tion of equipment with BNC sockets.
Page 524 Glossary Funkwerk Enterprise Communications GmbH optionally also of wired parts. Several WLAN clients (terminals) can log in to an access point (AP) and communicate via the AP data. If the optional wired Ethernet is connected, the signals between the two physical media, the wireless interface and wired interface, are bridged (bridging).
Page 525 Glossary Funkwerk Enterprise Communications GmbH AOC-D Display during and at end of connection. AOC-D/E Advice of charge-during/end. AOC-E Display only at end of connection. Address Resolution Protocol Assignment An external call can be signalled to internal subscribers. The entries in the "Day" option and "Night" option can be different.
Page 526 Glossary Funkwerk Enterprise Communications GmbH Busy" is deleted after a period specified by the exchange (approx. 45 minutes). Manual deletion before this period has elapsed is also possible. Automatic callback You urgently need to contact a business partner or internal sub- on no reply (CCBS) scriber.
Page 527 Glossary Funkwerk Enterprise Communications GmbH nel) with 16 kbps. The two basic channels can be used independ- ently of each other for each service offered in the T-ISDN. You can therefore telephone and fax at the same time. T-Com offers the Ba- sic Rate Interface as a point-to-multipoint or point-to-point connec- tion.
Page 528 Glossary Funkwerk Enterprise Communications GmbH preted. Broadcast Broadcasts (data packages) are sent to all devices in a network in order to exchange information. Generally, there is a certain address (broadcast address) in the network that allows all devices to inter- pret a message as a broadcast.
Page 529 Glossary Funkwerk Enterprise Communications GmbH Call forwarding in The call forwarding (CF) performance feature of the PBX enables the PBX you to be reached even if you are not in the vicinity of your tele- phone. You achieve this by automatically forwarding your calls to the required internal or external telephone number.
Page 530 Glossary Funkwerk Enterprise Communications GmbH set up automatically. However, Callback must first be activated by the caller on his or her terminal. Callback on no reply You call a subscriber, who does not pick up. With "Callback on no reply", this is not a problem for you, because with this special fea- ture, you can set up the connection without having to redial.
Page 531 Glossary Funkwerk Enterprise Communications GmbH Client A client uses the services provided by a server. Clients are usually workstations. CLIP Abbreviation for Calling Line Identification Presentation. Telephone number display of calling party. CLIR Abbreviation for Calling Line Identification Restriction. Temporary suppression of the transmission of the calling party's telephone number.
Page 532 Glossary Funkwerk Enterprise Communications GmbH or flash key. Connection of ISDN The internal telephone number of the connection, and not the ex- terminals ternal number (multiple subscriber number) must be entered as the MSN in the ISDN terminal connected to the internal ISDN bus. See the user's guide for the ISDN terminals: Enter MSN.
Page 533 Glossary Funkwerk Enterprise Communications GmbH With call assignment Day/Night, therefore, you define which internal terminals are to ring in the event of an external call. Call assignment Day/Night is achieved using a table in which all the incoming calls are assigned to internal subscribers.
Page 534 Glossary Funkwerk Enterprise Communications GmbH coming external connections and all external calls you make are stored. Display of caller's A suitable telephone is a prerequisite for this feature. Transmission number of the telephone number must be permitted by the caller.
Page 535 Glossary Funkwerk Enterprise Communications GmbH DSL/xDSL Digital Subscriber Line DSS1 Digital Subscriber Signalling System DSSS Direct Sequence Spread Spectrum is a wireless technology that was originally developed for the military and offers a high level of protec- tion against faults because the wanted signal is spread over a wide area.
Page 536 Glossary Funkwerk Enterprise Communications GmbH Encryption Refers to the encryption of data, e.g. MPPE. Entry of external In the ex works setting, all external connections made and received connection data via your PBX are recorded and stored in the form of connection data records.
Page 537 Glossary Funkwerk Enterprise Communications GmbH Extension number An extension is an internal number for a terminal or subsystem. In point-to-point ISDN accesses, the extension is usually a number from the extension numbers range assigned by the telephone pro- vider. In point-to-multipoint connections, it can be the MSN or a part of the MSN.
Page 538 Glossary Funkwerk Enterprise Communications GmbH First-level domain Describes the last part of a name on the Internet. For www.t-com.de, the first-level domain is de and in this case stands for Germany. Flash key The flash key on a telephone is the R button. R stands for Rückfrage (inquiry).
Page 539 Glossary Funkwerk Enterprise Communications GmbH Gateway Entrance and exit, transition point Half duplex Bidirectional communication method in which it is only possible to either send or receive at a particular point in time. Also known as Simplex. Handheld unit Mobile component of wireless telephone units. In the event of digital transmission, it is also possible to make telephone calls between the handheld units (DECT).
Page 540 Glossary Funkwerk Enterprise Communications GmbH B channel. With this setting, an external caller put on hold hears the PBX's on-hold music. Hook flash The use of the inquiry, brokerage and three-party conference spe- cial features in T-Net and certain performance features of some PBXs is only possible with the hook flash function (long flash) of the signal key on the telephone.
Page 541 Glossary Funkwerk Enterprise Communications GmbH each other via access points only. There is no direct communication between the individual clients. A network of this kind is also known as a BSS (basic service set), and a network that consists of several BSS is known as an ESS (extended service set).
Page 542 Glossary Funkwerk Enterprise Communications GmbH ISDN Basic Rate In- ISDN subscriber connection. The Basic Rate Interface consists of terface two B channels and one D channel. In addition to the Basic Rate In- terface, there is the Primary Rate Interface. The interface to the sub- scriber is provided by an So bus.
Page 543 Glossary Funkwerk Enterprise Communications GmbH LAPB Link Access Procedure Balanced Last access The last access by T-Service is stored and displayed in the configur- ation. Layer 1 Layer 1 of the ISO OSI Model, the bit transfer layer. Liquid Crystal Display, a screen in which special liquid crystal is used to display information.
Page 544 Glossary Funkwerk Enterprise Communications GmbH Mixed mode The access point accepts WPA and WPA2. MLPPP Multilink PPP Modem Modulator/Demodulator MPDU MAC Protocol Data Unit - every information packet exchanged on the wireless medium includes management frames and fragmented MSDUs. MPPC...
Page 545 Glossary Funkwerk Enterprise Communications GmbH mits the use of the ISDN controller as a WAN card. The NDIS WAN driver enables the use of a DCN network on Windows. NDIS is the abbreviation for Network Device Interface Specification and is a standard for the connection of network cards (hardware) to network protocols (software).
Page 546 Glossary Funkwerk Enterprise Communications GmbH Online Pass Part of the T-Com certification services for the Internet. Digital pass for the Internet. With the Online Pass, an Internet user can be au- thenticated as a customer in a company. Online services Services available around the clock via communication services such as T-Online and the Internet.
Page 547 The PBX has an internal phone book. You can store up to 300 tele- phone numbers and the associated names. You can access the PBX's phone book with the funkwerk devices (for example CS 410). You add entries to the phone book using the configuration interface.
Page 548 Glossary Funkwerk Enterprise Communications GmbH Point-to-point ISDN Point-to-point access Polling Fax machine function that "fetches" documents provided by other fax machines or fax databases. Port Input/output POTS Plain Old Telephone System Point-to-Point Protocol PPP authentication Security mechanism. A method of authentication using passwords in PPP.
Page 549 Glossary Funkwerk Enterprise Communications GmbH Real Time Clock Hardware clock with buffer battery (RTC) Receiver volume Function for controlling the volume in the telephone receiver. Reconnection on the For a point-to-multipoint connection, enables the terminal connec- bus (parking) tion to be reconnected to another ISDN socket during the telephone call.
Page 550 Glossary Funkwerk Enterprise Communications GmbH RJ45 Plug or socket for maximum eight wires. Connection for digital ter- minals. Roaming In a multicell WLAN, clients can move freely and log off from one ac- cess point and log on to another when moving through cells, without the user noticing this.
Page 551 Glossary Funkwerk Enterprise Communications GmbH ServerPass Part of the T-Com certification services for the Internet. Digital pass for a company. With the ServerPass, T-Com confirms that a server on the Internet belongs to a particular company and that this was verified through the presentation of an excerpt from the business re- gister.
Page 552 Glossary Funkwerk Enterprise Communications GmbH Session Initiation Protocol Short Message Service SMS receipt If you have connected an SMS-enabled terminal, you can decide whether SMS receipt is to be permitted for the connection. The ex works setting is no SMS receipt. To receive an SMS with your SMS- enabled terminal, you must register once with the T-Com SMS Ser- vice.
Page 553 Glossary Funkwerk Enterprise Communications GmbH side, the interface is intended for connecting a PBX (point-to-point connection) and for connecting up to eight ISDN terminals (point-to-multipoint connection). SOHO Small Offices and Home Offices The SPD (=Security Policy Database) defines the security services available for IP traffic.
Page 554 Glossary Funkwerk Enterprise Communications GmbH SSID The Service Set Identifier (SSID) or Network Name refers to the wireless network code based on IEEE 802.11. Secure Sockets Layer A technology, now standard, developed by Netscape, which is generally used to secure HTTP traffic between a web browser and a web server.
Page 555 Glossary Funkwerk Enterprise Communications GmbH suppresses the display of the called subscriber's telephone number. If display of the B telephone number is suppressed, your telephone number is not transmitted to the caller when you take a call. Suppress own tele-...
Page 556 Glossary Funkwerk Enterprise Communications GmbH phone call, receive a fax, or surf the Internet when another family member is making a long call on the other line. Three or more tele- phone numbers, which you can assign individually to your devices and distribute differently if needed through simple programming steps.
Page 557 Glossary Funkwerk Enterprise Communications GmbH TAPI configuration You can use the TAPI configuration to modify the TAPI driver in line with the program that uses this driver. You can check which MSN is to be assigned to a terminal, define a line name, and configure the dialling parameters.
Page 558 Glossary Funkwerk Enterprise Communications GmbH 22. If "Transfer Internal Code" is active, ** is placed before the 22 and the callback can be made directly from the caller list. Transmission speed The number of bits per second transmitted in T-Net or T-ISDN from the PC or fax machine.
Page 559 Glossary Funkwerk Enterprise Communications GmbH V.24 CCITT and ITU-T recommendation that defines the interface between a PC or terminal as Data Terminal Equipment (DTE) and a modem as Data Circuit-terminating Equipment (DCE). V.28 ITU-T recommendation for unbalanced dual-current interface line.
Page 560 Glossary Funkwerk Enterprise Communications GmbH wide on the Internet by means of a browser. Wired Equivalent Privacy Western plug (also known as RJ-45 plug) Plug used for ISDN terminals with eight contacts. Developed by the US telephone company Western Bell.
Page 561 Glossary Funkwerk Enterprise Communications GmbH the basis of their name (agreement with the telephone directory). The Internet supports several databases with information on users, such as e-mail addresses, telephone numbers and postal ad- dresses. You can search these databases to obtain information about individuals.
Page 562 Index Funkwerk Enterprise Communications GmbH Allow deleting/editing all routing Index entries Allowed Addresses Always Active 287 , 309 Always on 256 , 261 , 266 , 271 , 278 , 343 , 350 Client Link Description Answer to client request...
Page 563 Index Funkwerk Enterprise Communications GmbH CA Certificate Consider CA Certificates Contact Cache Hitrate (%) Continuity Check (CC) End-to-End Cache Hits Cache Size Continuity Check (CC) Segment Call Number 276 , 287 Control Mode Callback Controlled interfaces Callback Mode 273 , 284...
Page 564 Index Funkwerk Enterprise Communications GmbH 309 , 314 , 323 , 331 , 339 , 343 , DSP Module 350 , 358 , 360 , 370 , 381 , 382 , DTIM Period 383 , 384 , 387 , 389 , 393 , 397 ,...
Page 565 Index Funkwerk Enterprise Communications GmbH Firewall Status 420 , 425 , 429 , 449 , 452 , 453 , Force Certificate to be trusted 460 , 494 , 495 Forward to Interface Action 449 , 452 , 453 Forwarded Requests...
Page 566 Index Funkwerk Enterprise Communications GmbH MAC Address 185 , 292 , 432 , 460 , Mail Exchanger (MX) Last Member Query Interval Management VID Last Write Result Map to host Layer 2 Mode Matching String Layer 4 Protocol Max Receive Lifetime...
Page 567 Index Funkwerk Enterprise Communications GmbH Message Nitro Mode Message Compression Nitro XM Message Timeout Node Name Messages Noise dBm 499 , 501 , 502 , 503 , 504 Metric , 505 Metric Offset for Active Interfaces Number Called Metric Offset for Inactive Interfaces...
Page 568 Index Funkwerk Enterprise Communications GmbH POP3 Server RADIUS Dialout POP3 Timeout RADIUS Secret Port 230 , 427 Rate 501 , 503 , 505 Port Name 163 , 166 Realm Port Usage 163 , 166 , 276 , 287 Receive Version...
Page 569 Index Funkwerk Enterprise Communications GmbH RTS frames with no CTS received Server Timeout Service 171 , 230 , 375 , 494 , 495 RTS Threshold 200 , 202 Session Border Controller Mode Rx Bytes Session Timeout Rx Errors Severity Rx Packets...
Page 570 Index Funkwerk Enterprise Communications GmbH Stack Transfer Own IP Address over ISDN Start mode Start Time 446 , 495 Transmit Key 210 , 214 , 216 State/Province Transmit Power Status 449 , 452 , 454 , 490 , 492 ,...
Page 571 Index Funkwerk Enterprise Communications GmbH X.75 Layer 2 Mode URL Path Depth URL/IP-Address Usage Area Zero Cookie Size Usage Type 273 , 284 Use Key Use PFS Group Use Zero Cookies User name 256 , 261 , 266 , 271 , 278...

This manual is also suitable for:

Bintec r1200w Bintec r3000w Bintec r1200wu Bintec r3400 Bintec r3400w Bintec r3800w ... Show all

Funkwerk bintec R1200 Manual

Chapter 1 Introduction

Chapter 2 Quick Reference

Chapter 3 Technical Data

Chapter 4 Access and Configuration

Chapter 5 System Management

Chapter 6 Physical Interfaces

Chapter 7 LAN

Chapter 8 Wireless LAN

Chapter 9 Routing

Chapter 10 WAN

Chapter 11 VPN

Chapter 12 Firewall

Chapter 13 Voip

Chapter 14 Local Services

Chapter 15 Maintenance

Chapter 16 External Reporting

Chapter 17 Monitoring

Quick Links

Related Manuals for Funkwerk bintec R1200

Summary of Contents for Funkwerk bintec R1200