Page 1 Do not import other template elements such as page layout. To return to the draft version, import color def’ns from draft-colors.fm. To switch to the beta version, import color def’ns from beta-colors.fm OmniAccess 700 Web GUI Users Guide Release Versions: 2.2-R02...
Page 2 The following information is for the Users of the OmniAccess 700: If it is not installed in accordance with the installation instructions, it may not function exactly to the said specifications. Modifying the equipment without Alcatel-Lucent's written authorization may result in the equipment no longer complying with the said dimensions.
Page 3: Table Of Contents
Table of Contents Preface......................1 About this Guide........................1 Chapter Description ........................1 Audience ........................... 1 Document Organization ......................2 Document Conventions......................2 Obtaining Documentation......................2 Reference Publications ......................3 Obtaining Technical Assistance ....................3 Documentation Feedback ......................3 2 GUI Layout and Logging on to USGM ............5 USGM Web GUI Tool........................
Page 4 5 Monitor ......................311 Monitor ..........................311 Interface Statistics ......................312 DHCP Bindings....................... 316 Active Routes ......................... 318 Traffic Statistics ......................320 SNMP Statistics......................324 Firewall Session Statistics ....................326 Firewall and Security ...................... 328 IPsec VPN Statistics....................... 338 IPS Statistics ........................
Page 5 List of Figures Logon to USGM 7 USGM Home Page 8 USGM - Configure Main Page 14 System Config 15 Edit System Configuration 16 Chassis Config 17 Chassis Config - View 18 Chassis Config - Setting Card Type to T1 or E1 18 Chassis Config - Changing Card Type 19 Interfaces 21 Interfaces - Configuring GigE Interface Details 23...
Page 6 Routing - VRF 99 Routing - Add New Static Route 100 System Access: SNMP 103 System Access - Syslog 106 System Access - Syslog - Configure Syslog Parameters 108 Management Utilities: File Transfer & Access 110 Time Range 111 Time Range: Create New Absolute Time Range 113 Time Range: Create New Periodic Time Range 114 Traffic Classification: List 117 Traffic Classification: Create New List 119...
Page 7 Firewall: Firewall Policy - Add New Intrusion Rule 181 Firewall: Firewall Policy - Attach Interface 182 VPN IPsec: IPsec Wizard 185 VPN IPsec: IPsec Wizard - Introduction 185 VPN IPsec: IPsec Wizard - Create IPsec Policy with IPsec Profile 186 VPN IPsec: IPsec Wizard - Create IPsec Policy with Crypto-map 187 VPN IPsec: IPsec Wizard - Create IPsec Policy with Crypto-map - Add Peer 188 VPN IPsec: IPsec Wizard - Create IPsec Policy with Crypto-map - Create Match-list 189...
Page 8 Quality of Service: Class Map 245 Quality of Service: New Class Map 247 Quality of Service: New Class Map Rule 248 Quality of Service: Policy Map 250 Quality of Service: Policy Map - New 252 Quality of Service: Policy Map - New Traffic Class Basic Configuration 254 Quality of Service: Policy Map - New Traffic Class Policing Configuration 257 Quality of Service: Policy Map - New Traffic Class Policing Configuration –...
Page 9 Monitor: Firewall and Security - Filters 328 Monitor: Firewall and Security - Filters - Show Policy Statistics 330 Monitor: Firewall and Security - NAT 331 Monitor: Firewall and Security - DOS Attack 333 Firewall and Security - DOS Attack - Show DOS Attack Statistics 334 Monitor: Firewall and Security - DOS Attack - View 334 Monitor: Firewall and Security - DOS Attack - View Statistics 335 Monitor: Firewall and Security - Firewall Policy 336...
Page 10: Preface
REFACE BOUT THIS UIDE This chapter describes how to configure OmniAccess 700 (OA-700 - OA 740/OA 780) using the Web Graphical User Interface (GUI) tool - Unified Services Gateway Configuration Manager (USGM). The guide contains procedures for configuring interfaces, routing parameters, SNMP, syslog parameters, time range, lists and match lists, traffic classification, filter and firewall, IPsec policy, QoS, and various other features.
Page 11: Document Organization
Note: A note contains helpful suggestions or information that may be easily overlooked. BTAINING OCUMENTATION Alcatel-Lucent provides several ways to obtain technical assistance and other technical resources. Documents can be downloaded from our support site service.esd.alcatel-lucent.com. Alcatel-Lucent Web GUI Users Guide...
Page 12: Reference Publications
We value your comments and suggestions about our documentation. If you have comments about this book, please enter them through the feedback link on the Alcatel-Lucent Website. We will use your feedback in our plans to improve the documentation. Alcatel-Lucent...
Page 13 Left running head: Chapter name (automatic) Preface Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 14: Gui Layout And Logging On To Usgm
• Netscape 7.0 or later • Mozilla 1.7 or later • Mozilla Firefox 1.0 or later Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle Web GUI Users Guide section of Beta Beta Beta...
Page 15: Launching The Gui
Step 3: Open a web browser in your PC. Step 4: In the address bar/field, type the IP address of the interface and press the Enter. This launches the USGM with the login page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 16: Logon To Usgm
Establish authentication to new users by configuring new user accounts. To configure new user account, use the following command: username <user-name> {password [5] <password>|nopassword| secret [5] <password>} Example: ALU (config)# username user1 password pass1 Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 17: Usgm Home
The Top Panel also has ‘About USGM and Logout links’. About USGM gives the details on the USGM tool like the version number, model name, and so on. Alcatel-Lucent Web GUI Users Guide Beta...
Page 18 These logs enable you to take appropriate action for smooth functioning of the system. Click these buttons to view the details of the respective log messages. (See “Logs” section for more information.) Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 19: Description Of Standard Buttons On The Gui
This button discards the updates that are being entered and reverts to the latest saved information from the database. PPLY This button saves all the configured data. ANCEL This button cancels an operation without saving the data entered. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 20: Icons And Labels
Click this icon to view details of the selected item. View Statistics/View Real Time Graph Click this icon to view statistics/real time graph. Enable Statistics Click this icon to enable viewing statistics. Disable Statistics Click this icon to disable statistics. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 21: Logout
The system automatically logs you out of the tool if there is no activity for 15 minutes. When you perform any activity after 15 minutes of inactivity, the system prompts you to login again. Alcatel-Lucent Web GUI Users Guide Beta...
Page 22: Configure
ONFIGURE This chapter provides procedure to configure various features like interfaces, routing, traffic classification, filters, IPsec policy, QoS. Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle Web GUI Users Guide section of Beta...
Page 23: Configure
OA-700. Menu Bar Submenu Figure 3: USGM - Configure Main Page By default, System is selected and its details are displayed in the Center Panel. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 24: System
Table 2: System Config Field Description Field Description YSTEM ONFIG System Name Name given to the system. System Contact Contact details. System Location Place where the system is located. Edit Edit system parameters. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 25: Edit System Configuration
Step 2: Enter or edit the system name, system contact, and system location in the respective fields. (System Name is mandatory.) Step 3: Click Apply to save the changes or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta...
Page 26: Chassis Config
Nomenclature The name of the line card/system component. Action Provides an option to view the details of the respective card. Note: Provides an option to set the card type to T1 or E1. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 27: Chassis Config - View
2. The following message box is displayed prompting you to set the line card type to T1 or E1: Figure 8: Chassis Config - Setting Card Type to T1 or E1 3. Select the card type and click Apply or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 28: Chassis Config - Changing Card Type
1. Click Configure icon in the Action column against the T1E1 line card. 2. The following message box is displayed: Figure 9: Chassis Config - Changing Card Type 3. Click OK to continue. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 29: Interfaces
Configure E1 Controller • Configure Channelized Serial Interface • Configure Serial Interface (V.35/ X.21) • Configure Logical Interface Add Virtual LAN (VLAN) Add Tunnel Interface iii. Add Loopback Interface Add MLPPP Interface Add MLFR Interface Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 30 Step 2: Click Interfaces sub-menu. The Interfaces page is displayed with the list of all the interfaces available on your system. The list also displays those interfaces configured using the CLI commands. Figure 10: Interfaces Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 31 Action Provides option to edit, activate/ shutdown the interface, and associate policy/policies to the interface Refresh Update the interface page Interface Details This table displays the details of the selected interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 32: Interfaces - Configuring Gige Interface Details
Ethernet interface that is to be configured. This displays the Interface Configuration page in the Center Panel. Interface Configuration page contains basic and advanced details and secondary address details table. Figure 11: Interfaces - Configuring GigE Interface Details Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 33 5. Click Apply to add the set values, or click Reset to retain the original values. Step 5: Configure advanced details in the Advanced table. The table displays the default values. You can retain the same or configure as required. Alcatel-Lucent Web GUI Users Guide Beta...
Page 34 Follow the procedure below to configure the T1 Controller. Step 1: On the Interfaces page, click Configure icon against the T1 Controller that is to be configured. The following page is displayed: Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 35: Interfaces - Configuring T1 Controller
Select the Short radio button, and select the length from the Length drop-down list. Short option sets the transmit attenuation for a cable length (line build-out) of 660 feet or shorter for a T1 trunk. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 36 Internal: The controller synchronizes itself to the internal (system) clock. ii. Line: The controller recovers external clock from the line and provides the recovered clock to the internal (system) clock generator. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 37: Interfaces - T1 Controller - Channel Group Configuring
Step 6: The channel-group thus configured forms the channelized serial interface, and is displayed in the Interfaces page. Note: You can configure encapsulation on a channelized serial interface. See “Configure Channelized Serial Interface” for more details on this. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 38: Interfaces - Configuring E1 Controller
Follow the procedure below to configure the E1 Controller. Step 1: On the Interfaces page, click Configure icon against the E1 Controller that is to be configured. The following page is displayed: Figure 14: Interfaces - Configuring E1 Controller Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 39: Interfaces - E1 Controller - Channel Group Configuring
Click Configure Channel Group to configure channel group. Channel Group Configuring pop up window is displayed. Figure 15: Interfaces - E1 Controller - Channel Group Configuring Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 40 Step 5: The channel-group thus configured forms the channelized serial interface, and is displayed in the Interfaces page. Note: You can configure encapsulation on a channelized serial interface. See “Configure Channelized Serial Interface” for more details on this. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 41: Interfaces - Configure Hdlc Encapsulation On A Channelized Serial Interface
1. By default HDLC radio button is selected. (HDLC is the default encapsulation on the interface), and the following page displays the HDLC parameters: Figure 16: Interfaces - Configure HDLC Encapsulation on a Channelized Serial Interface Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 42 PPP supports protocols like IP, IPX and DECnet through the Network Control Protocols. 1. Set the PPP encapsulation on the interface by selecting PPP radio button under Encapsulation. The following page displays the PPP parameters: Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 43: Interfaces - Configure Ppp Encapsulation On A Channelized Serial Interface
"Negotiate IP Address with the Peer" is selected on the peer, then the IP address assigning will be successful. • Disable option disables Serve Peer with IP Address. This will set the flag to accept the peer’s IP address during IPCP. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 44: Interfaces - Configure Ppp Encapsulation On A Channelized Serial Interface - Advanced Options
7. Click Advanced Options to initiate LCP negotiation on a PPP encapsulation and configure PPP Timers. The following page is displayed: Figure 18: Interfaces - Configure PPP Encapsulation on a Channelized Serial Interface - Advanced Options Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 45 Click OK to save LCP and PPP Timers configuration or click Cancel to cancel the operation. 8. After configuring the parameters, click Apply to save the PPP configuration or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 46: Interfaces - Configure Frame Relay Encapsulation On A Channelized Serial Interface
1. Set the Frame Relay encapsulation on the interface by selecting Frame Relay radio button under Encapsulation. The following page displays the Frame Relay parameters: Figure 19: Interfaces - Configure Frame Relay Encapsulation on a Channelized Serial Interface Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 47 - There are multiple VC present (one main interface and one sub-interface with DLCI configured or two sub-interfaces with DLCI configured). - QoS policy is configured on the FR Interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 48: Interfaces - Configure Frame Relay Encapsulation On A Channelized Serial Interface - Add Sub Interface
• Click Add Sub Interface to configure a sub interface. Sub Interface Creation window is displayed. Figure 20: Interfaces - Configure Frame Relay Encapsulation on a Channelized Serial Interface - Add Sub Interface Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 49 Each MLPPP interface is identified by a bundle ID. For more details on MLPPP interface configuration, see “Add MLPPP Interface” under Logical Interfaces section. 1. Set the MLPPP encapsulation on the interface by selecting MLPPP radio button under Encapsulation. The following page displays the MLPPP parameters: Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 50: Interfaces - Configure Mlppp Encapsulation On A Channelized Serial Interface
(CHAP - Challenge Authentication Protocol, PAP - Password Authentication Protocol, EAP - Extensible Authentication Protocol). Authentication is not mandatory. Set the authentication protocol for authenticating the peer by selecting the option from PPP Authentication drop down list: Chap/Pap/Eap/None Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 51: Interfaces - Configure Mlppp Encapsulation On A Channelized Serial Interface - Advanced Options
Enter the echo interval in Echo Interval field. This denotes the interval between the LCP echo requests sent. “0” implies that no echo requests are sent. The default value is 10 seconds. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 52 Each MLFR interface is identified by a bundle ID. For more details on MLFR interface configuration, see “Add MLFR Interface” under Logical Interfaces section. 1. Set the MLFR encapsulation on the interface by selecting MLFR radio button under Encapsulation. The following page displays the MLFR parameters: Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 53: Interfaces - Configure Mlfr Encapsulation On A Channelized Serial Interface
9. After configuring the parameters, click Apply to save the MLFR configuration or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 54: Interfaces - Configuring Serial Interface (V.35/X.21)
Step 2: Associate a VRF to the serial interface. Select the VRF to be associated from the VRF list. The selected VRF is displayed in the VRF Forwarding field. Note: By default, all the interfaces are associated with the Default VRF. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 55 For more details on encapsulation configuration, refer to “Configure Channelized Serial Interface” section. Step 5: After configuring the parameters, click Apply to save the Serial interface configuration or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 56 If IRB is not enabled for a VLAN interface, policies cannot be configured. • When no VLANs are configured on the L2 ports, all ports of the switch belong to one broadcast domain. All the L2 ports participate in pure bridging. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 57: Interfaces - Configure Vlan
Select Virtual LAN from the list. Configure VLAN page is displayed as shown below. Figure 25: Interfaces - Configure VLAN Step 2: Enter the VLAN ID in the VLAN ID field. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 58: Interfaces - Configure Vlan - Add Port
VLAN is updated and a prompt to configure STP is displayed. Step 8: Click OK to continue STP configuration. STP Config page is displayed with the default values in the respective fields. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 59: Interfaces - Configure Vlan - Stp Config
Step 11: Configure the switch port parameters. These are configured on per port basis. • Click Edit link under Action column against the switch port whose state, priority, and cost parameters are to be configured. • Configure the required value in the respective fields. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 60 Click OK to configure the switch port parameters or click Cancel to cancel the operation. Step 12: Click Apply to save the VLAN STP configuration or click Cancel to cancel the operation. Step 13: The VLAN interface thus configured is displayed in the Interfaces page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 61: Interfaces - Edit Vlan Configuration
Address and Mask column. • Click Apply to add the secondary IP address, or click Cancel to cancel adding secondary IP address. • Click Delete icon in the Action column to delete the secondary address. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 62 Cancel to cancel the operation. VLAN I ELETE NTERFACE 1. In the Interfaces page, click Delete icon in the Action column against the VLAN to be deleted. 2. Confirm at the prompt to delete the VLAN. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 63 Specifically, a hierarchical structure allows a core to be constructed by connecting core routers together with GRE tunnels. From that core, additional tunnels can be provisioned to the provider edge routers. • Separation of Customer and Provider Routing Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 64 • GRE packet is encapsulated using an outer IP header. • Outer IP header’s IP protocol value = 47 Alcatel-Lucent Specific Overview • OA-700 does not support overlapping of private addresses. • The source IP address must be configured either on a loopback interface or on one of the physical interfaces.
Page 65 Configure • IPsec Tunnel Interface Alcatel-Lucent provides support for IPsec in a tunnel mode with encryption, intended for secure site-to-site communications over an untrusted network. Currently IPsec can be configured through a crypto-map and applied to a interface.In addition, IPsec as a tunnel interface is required so that, •...
Page 66: Interfaces - Tunnel Configuration
MTU field. The default MTU is 1476. Step 3: Click Apply to configure the tunnel interface or click Cancel to cancel the operation. Step 4: The tunnel interface thus configured is displayed in the Interfaces page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 67: Interfaces - Tunnel Configuration
Basic box. Make the necessary changes if necessary. Tunnel Number is not editable. • VRF Forwarding displays the VRF configured. To remove the VRF, click Remove. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 68 ELETE UNNEL NTERFACE 1. In the Interfaces page, click Delete icon in the Action column against the tunnel that is to be deleted. 2. Confirm at the prompt to delete the tunnel. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 69: Interfaces - Loopback Configuration
Enter the description for the loopback interface in the Description field. Step 3: Click Apply to configure the loopback interface or click Cancel to cancel the operation. Step 4: The loopback interface thus added is displayed in the Interfaces page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 70: Interfaces - Loopback Configuration
1. IP address and the description configured for the interface is displayed in their respective fields. 2. VRF Forwarding displays the VRF configured. To remove the VRF, click Remove. 3. Make the changes and click Apply or click Reset to retain the original details. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 71 OOPBACK NTERFACE 1. In the Interfaces page, click Delete icon in the Action column against the loopback interface that is to be deleted. 2. Confirm at the prompt to delete the loopback interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 72: Interfaces - Mlppp Bundle Configuration
Each MLPPP interface is identified by a bundle ID. Enter the ID for the interface in the Bundle ID field. This creates a MLPPP bundle interface that is identified by the bundle ID. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 73 If Static option is selected, enter the IP address and the Mask in the IP Address and Mask fields. This IP address will be advertised during IPCP but not allow its negotiation. Click Remove to delete the IP address and re-enter the new IP address. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 74: Interfaces - Configure Mlppp Interface - Advanced Options
Enter the max configure value in Max Configure field. Configure Request packets (Number of LCP or NCP) without receiving a valid Configure Ack/NaK/Reject before assuming that the peer is unable to respond. The default value is 10 seconds. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 75 Step 2: The parameters configured for the MLPPP bundle interface is displayed in their respective fields. Step 3: Modify the required parameters. Bundle ID cannot be modified. Step 4: Click Apply to save the configuration or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 76: Interfaces - Mlfr Bundle Configuration
Configuring MLFR Bundle Interface page is displayed as shown below. Figure 35: Interfaces - MLFR Bundle Configuration Step 2: Configure the MLFR bundle interface by entering the bundle ID, VRF, description, MTU, IP address and bundle identification (BID) name for the interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 77 • Enter the DTE error threshold value in Error Threshold field. The default value is • Enter the DTE monitored event count in the Monitored Event Count field. The default value is 4. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 78 Step 2: The parameters configured for the MLFR bundle interface is displayed in their respective fields. Step 3: Modify the required parameters. Bundle ID cannot be modified. Step 4: Click Apply to save the configuration or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 79: Interfaces - Policy Association
Click Out Direction drop-down list. Filters created in your system are displayed. Select the filter to be attached to the interface in the egress direction from the list. If filters are not configured, see “Creating a Filter” section. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 80 1. In the Interfaces page, click Interface Name whose configuration details are to be viewed. 2. The interface details for the selected interface are displayed in the Interface Details table. The details displayed vary based on the selected interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 81 To shutdown an interface, click Shutdown icon for the selected interface and confirm at the prompt. This will administratively bring down the interface and the status changes to ‘Inactive’. Note: The Shutdown icon is displayed only when the interface is in ‘active’ state. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 82: Dhcp (Dynamic Host Configuration Protocol)
This means that a new computer can be added to a network without the hassle of manually assigning it a unique IP address. Many ISPs (Internet Service Provider) use dynamic IP addressing for dial-up users. Alcatel-Lucent Specific Overview Note: By default, the DHCP service is disabled and you should 'enable' the DHCP server explicitly for the service to become available.
Page 83 Configure are displayed in the left navigation panel. Step 2: Click DHCP sub-menu. DHCP page has two tabs: DHCP Server and DHCP Relay. By default, DHCP Server page is displayed in the center panel. Figure 37: DHCP Server Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 84 1. Enter the name for the DHCP pool in the DHCP Pool Name field. 2. Under the pool type, select Network radio button. By default, Network is selected. This allows you to specify the network to which the pool belongs to. Alcatel-Lucent Web GUI Users Guide Beta...
Page 85: Dhcp Server
Specify the lower and the upper addresses of the network range in the Start Address and End Address fields. The range should not include the network address and the broadcast address of the network. Alcatel-Lucent Web GUI Users Guide Beta...
Page 86: Dhcp Server - Add Dhcp Pool - Network
IP addresses as required. iv. To remove the IP address from the list, click Remove. 5. After configuring the parameters, click OK to save the network pool or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 87: Dhcp Server - Add Dhcp Pool - Host
3. Enter the host IP address (that exists within a configured network pool) in the IP Address field. 4. Enter the hardware address of the host in the Hardware Address field. 5. Click OK to save or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 88: Dhcp Server - Add Dhcp Pool - Options
1. Enter the name for the DHCP pool in the DHCP Pool Name field. 2. Select Options tab to configure the pool options. Figure 41: DHCP Server - Add DHCP Pool - Options Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 89: Dhcp Server - Add Dhcp Pool - Options - Add Option
To delete a DHCP pool, follow the procedure given below: 1. DHCP Server page displays the list of the DHCP pools configured. Select the DHCP pool to be deleted, and click Delete. 2. Confirm at the prompt to delete. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 90: Dhcp Server - Configure Global Options
Figure 43: DHCP Server - Configure Global Options 3. Click Add to add a global option. The following pop up window is displayed. Figure 44: DHCP Server - Configure Global Options - Add Global Option Alcatel-Lucent Web GUI Users Guide Beta...
Page 91 2. Make the required changes and click OK to save the changes. Delete DHCP Global Option 1. Similarly, select the global option to be deleted from the list, and click Delete. 2. Confirm at the prompt to delete. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 92 In addition, the Relay Agent receives the server's response and passes the response back to the client. The relay agent allows the client and server to reside on different subnets. Alcatel-Lucent Specific Overview We implement forwarding to the DHCP server directly or via rebroadcast on another interface on the OA-700.
Page 93: Dhcp Relay
3. Click Apply to save the changes or Cancel to retain original parameters. Delete Relay DHCP Request to Server 1. Click Delete icon in the Action column to delete the Relay DHCP Server parameters. 2. Confirm at the prompt to delete. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 94 3. Click Apply to save the changes made or Cancel to retain original parameters Detach Rebroadcast DHCP Request to Interface 1. Click Delete icon in the Action column to delete the rebroadcast interfaces. 2. Confirm at the prompt to delete. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 95: Routing
Configure are displayed in the left navigation panel. Step 2: Click Routing sub-menu. Routing page has three tabs: Routing, Policy Based Routing, and VRF. By default, Static Route Details table is displayed in the center panel. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 96: Routing - Static Route Details
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Configure Figure 46: Routing - Static Route Details Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 97 Administrative Distance The administrative distance of the routing protocol Protocol Protocol type (Static) Action Provides an option to edit/delete static routes. New Static Routes Add static routes. Refresh Update Static Routing table. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 98: Routing - Add New Static Route
Step 5: Enter the administrative distance of the routing protocol in the Administrative Distance field. By default, this is set to 1. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 99 2. Under Action column, click Delete icon against the static route to be deleted in the Static Route Details page. 3. Confirm at the prompt to delete the static route and its details. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 100 PBR provides the ability to route traffic based on attributes other than the destination IP address. Attributes like source IP address, protocol type can be used to define policies and apply them to an interface. Alcatel-Lucent Specific Overview • OA-700 supports PBR that allows routing of packets based on policies (match- lists) to a specified egress interface/next hop.
Page 101: Routing - Policy Based Routing
Step 2: Click Routing sub-menu. Routing page has three tabs: Routing, Policy Based Routing, and VRF. Click Policy Based Routing tab. The following page is displayed: Figure 48: Routing - Policy Based Routing Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 102 Route: For Us/Next Hop Interface Name of the interface. Specifies the egress path of the packet. Next Hop The egress path of the packet. Action Provides option to edit and/or delete IP policy rule. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 103: Policy Based Routing - Create New Ip Policy
Step 1: Click New Policy in the Policy Based Routing page to create a new IP policy. Step 2: The following page is displayed: Figure 49: Policy Based Routing - Create New IP Policy Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 104: Policy Based Routing - Create New Ip Policy - Create New Match-List
Click New to configure new match-lists or if there are no match-lists configured. The following page is displayed. Figure 50: Policy Based Routing - Create New IP Policy - Create New Match- list Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 105 1. In the Policy Based Routing page, select the IP policy to which new rule is to be added. 2. Click New Rule. Page to add new rule is displayed. 3. Configure the required rule elements. 4. Click Apply to save changes or Cancel to retain the original settings. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 106 Step 1: Attach an IP Policy to the interface in the Policy Based Routing table. 1. Select the IP policy to be attached on an interface from the Policy Name list. 2. Click Attach Interface icon. Attach Interface page is displayed: Alcatel-Lucent Web GUI Users Guide Beta...
Page 107: Policy Based Routing - Attach Interface
3. Confirm at the prompt to detach the IP Policy. IP P ELETING OLICY 1. Click Delete icon in the Action column against the IP Policy to be deleted. 2. Confirm at the prompt to delete the IP Policy. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 108: Routing - Vrf
Configure are displayed in the left navigation panel. Step 2: Click Routing sub-menu. Routing page has three tabs: Routing, Policy Based Routing, and VRF. Click VRF tab. The following page is displayed: Figure 52: Routing - VRF Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 109: Routing - Add New Static Route
Figure 53: Routing - Add New Static Route Step 3: Enter the VRF name and description in the VRF Name and Description fields. Step 4: Click Add to add a new VRF or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 110 1. Under Action column, click Delete icon against the VRF to be deleted in the Virtual Routing and Forwarding page. 2. Confirm at the prompt to delete the VRF and its details. All routing protocol configuration within the VRF is removed. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 111: System Access
The agents and managers share a database of information, called the Management Information Base (MIB). This page allows you to configure SNMP parameters. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 112: System Access: Snmp
System Access page has three tabs: SNMP, Syslog, and File Transfer & Access. By default, SNMP tab is active, and its details are displayed in the center panel. Figure 54: System Access: SNMP Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 113 Port number of the SNMP trap host SNMP Version SNMP version configured of the trap host Community String Community string set on the SNMP trap host Action Provides option to edit and/or delete trap host details Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 114 3. Click Apply to save changes, or Cancel to retain the original settings. SNMP T ELETING A 1. Click Delete icon in the Action column against the trap host to be deleted. 2. Confirm at the prompt to delete the SNMP trap host. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 115: System Access - Syslog
Step 2: Click System Access sub-menu. System Access page has three tabs: SNMP, Syslog, and File Transfer & Access. Click Syslog tab. The following page is displayed. Figure 55: System Access - Syslog Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 116 Debugging. Enabled Select the check box to either enable/ disable log types. Host Configuration IP Address IP address of the host to which logs should be sent. Port Port number of the host. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 117: System Access - Syslog - Configure Syslog Parameters
1. Click Edit to set the log options. 2. Set the watermark in the Watermark field in the range 100-10000. 3. Enter buffered size in the Buffered Size field in the range between 4-16384. Alcatel-Lucent Web GUI Users Guide Beta...
Page 118 2. Enter IP address in the IP Address field, port number in the Port field, and select severity from Severity drop down list. 3. Click Apply to add new host. ELETE 1. To delete any host, click Delete icon. 2. Confirm at the prompt to delete the host. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 119: Management Utilities: File Transfer & Access
Step 1: Select the HTTP/HTTPS/SSH/Telnet/SNMP check box, and click Apply to enable the protocols for file transfer and access. Multiple options can be selected. Step 2: Uncheck the required check box to disable the support of a specific access protocol. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 120: Time Range
Step 2: Click Time Range sub-menu. Time Range table is displayed in the center panel. Note: If there is no time range configured, “There is no Time Range To Display“ message is displayed in the Time Range table. Figure 58: Time Range Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 121 ANGE To configure time range on a one time basis, set the absolute time range. 1. Select the Absolute radio button in the time range configuration page. Absolute time range table is displayed. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 122: Time Range
4. Click Apply to configure Absolute Time Range. Note: If the End Date/Time is not specified, the time range is applied continuously from the specified start time. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 123: Time Range: Create New Periodic Time Range
Enter the start and end time in hh:mm:ss format. For Weekly periodicity, also select the day of week from the Day of Week drop down list. 4. Click Apply to configure the Periodic Time Range. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 124 2. Make changes to the time range settings. Click Apply to save changes. ELETE ANGE 1. Click on the Delete icon in the Action column for the time range to be deleted. 2. Confirm at the prompt to delete time range. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 125: Traffic Classification
Configure are displayed in the left navigation panel. Step 2: Click Traffic Classification sub-menu. Traffic Classification has two tabs: List and Match List. By default, List page is displayed in the center panel. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 126: Traffic Classification: List
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Configure Figure 61: Traffic Classification: List Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 127 Host - Host IP address; Prefix - IP address/prefix length Interface – Interface name List– Other lists configured on the system. Action Provides option to delete the elements. New Element Create new element. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 128: Traffic Classification: Create New List
2. Click Apply to create a new list or Cancel to cancel the operation. The list thus configured is displayed in the List page. And, the List Details table displays the elements configured to the list. Alcatel-Lucent Web GUI Users Guide Beta...
Page 129: Traffic Classification: List - Create New Element
3. Select the type of element from the drop down list in the Element column and enter its respective details: Host/Prefix/Interface/List. 4. Click Apply to add the element to the list or Cancel to cancel the task. Alcatel-Lucent Web GUI Users Guide Beta...
Page 130 List Details table. 1. Click Delete icon in the Action column against the element to be deleted. 2. Confirm at the prompt to delete the element from the selected list. Alcatel-Lucent Web GUI Users Guide Beta...
Page 131: Traffic Classification - Match List
Step 2: Click Traffic Classification sub-menu. Traffic Classification has two tabs: List and Match List. Click the MatchList tab. The following page is displayed in the center panel. Figure 64: Traffic Classification - Match List Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 132 Destination type - Any, Host, Prefix, Interface, List. Summary Summary of the list rules. Action Provides option to edit and/or delete MatchList rules. New Rule Create new match-list rule Include MatchList Include available match-lists to a match- list. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 133: Traffic Classification: - New Match List - Configure Rule / Include Match List
Select Configure Rule radio button to define the rule for the match-list you are creating, or select the Include Match List radio button to include rules from the match-lists already configured in your system. Alcatel-Lucent Web GUI Users Guide Beta...
Page 134 Enter the destination address with prefix length for Prefix. • Select the interface from the interfaces list for Interface. • Select the list from the lists configured for List. Step 5: Select rule elements for the protocols. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 135: Traffic Classification: New Match List Rule - Ip / Protocol / Ah / Esp/ Gre/ Ospf/ Igmp
IP / P / AH / ESP / GRE/ OSPF/ IGMP LEMENTS FOR ROTOCOL Figure 66: Traffic Classification: New Match List Rule - IP / Protocol / AH / ESP/ GRE/ OSPF/ IGMP Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 136 (GT), greater than or equal to (GE), less than (LT), less than or equal to (LE), between the range (RANGE), or for the fixed length (FIXED). Alcatel-Lucent Web GUI Users Guide Beta...
Page 137: Traffic Classification: New Match List Rule - Tcp
3. Set the IP precedence level. Check the IP-Precedence check box to set IP precedence level in the range between 1 and 7. 4. Add Fragments. Check the Fragment check box to match the IP Fragment bit. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 138 Selected Flags column. • Select as many flags from the Available Flags column and move it to the Selected Flags column and click OK. The selected flag/s is displayed in the Flag field. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 139: Traffic Classification: New Match List Rule - Udp
3. Set the IP precedence level. Check the IP-Precedence check box to set IP precedence level in the range between 0 and 7. 4. Add fragments. Check the Fragment check box to match the IP Fragment bit. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 140: Traffic Classification: New Match List Rule - Icmp
Check the Service (Destination Port) check box apply rule based on destination. Select from the following options: RPC-PORTMAP, SNMP, SNMPTRAP, TFTP, DNS, GT, GE, LT, LE, RANGE, NFS, SIP. ICMP LEMENTS FOR Figure 69: Traffic Classification: New Match List Rule - ICMP Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 141 Check the ICMP-subtype check box to apply rule based on ICMP subtype (0- 255). Specify the ICMP subtype. Step 6: Click Apply to create match-list and to return to Match List page, or Cancel to return to the Match List page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 142: Traffic Classification - New Match List Include
MatchList column. Step 4: Click Apply to include the selected match-list to the match-list you are creating and to return to Match Lists page, or Cancel to return to the Match List page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 143: Traffic Classification - Match List - New Rule For The Match-List
3. Define the rule as required. Refer “Configure Rule” section for details on defining a rule. Match-list Name is not editable. 4. Click Apply to save changes, or Cancel to retain the original settings. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 144: Traffic Classification - Match List - Add Match List Include
5. Click Apply to save changes, or Cancel to retain the original settings. 6. The match-lists that added are displayed in the Included Matchlist table. 7. Click on the respective match-list to view its details like the protocol, source, destination and summary. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 145 2. Click Delete icon in the Action column against the rule to be deleted. 3. Confirm at the prompt to delete the rule. Note: You cannot delete a rule under a match-list or delete a match-list if the match-list is attached to an interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 146: Firewall
The Firewall has the following tabs: Firewall Wizard, Filters, NAT, DOS Attack, Transparent Firewall and Firewall Policy. By default Firewall Wizard tab is selected and the Firewall Configuration Wizard page is displayed in the center panel. Figure 73: Firewall: Firewall Wizard Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 147: Firewall: Firewall Wizard - Introduction
Firewall Policy. The following window is displayed: Figure 74: Firewall: Firewall Wizard - Introduction Step 2: Click Next. Interface Selection window is displayed. This page allows you to attach a firewall policy to an interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 148: Firewall: Firewall Wizard - Interface Selection
Internet and the internal network. A DMZ typically contains the following: Web Server, Mail Server, Application Gateway, E-Commerce Systems. Example of systems to place on a DMZ include Web servers and FTP servers. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 149: Firewall: Firewall Wizard - Dmz Settings
2. Add the DMZ service/s to be accessed through the internet. Click Add. Add DMZ Services pop up window is displayed: You have to add at least one DMZ service. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 150: Firewall: Firewall Wizard - Dmz Settings - Add Dmz Service
Delete to delete the selected service. Step 4: Click Next to continue. Access Management window is displayed. Access Management allows remote management of the OA-700.(SSH/Telnet to access CLI, HTTP/HTTPS for Web based management and SNMP service.) Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 151: Firewall: Firewall Wizard - Access Management
Left running head: Chapter name (automatic) Configure Figure 78: Firewall: Firewall Wizard - Access Management 1. By default, all the access protocol are enabled. 2. Unselect the check box to disable the access protocol. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 152: Firewall: Firewall Wizard - Summary
The filters, DOS attack, and the firewall policy auto configured by the wizard is displayed in the Filters, DoS Attack and Firewall Policy tabs as shown below. Alcatel-Lucent Web GUI Users Guide Beta...
Page 153: Firewall: Filters Generated By The Wizard
Left running head: Chapter name (automatic) Configure Figure 80: Firewall: Filters Generated by the Wizard Figure 81: Firewall: DoS Attack Generated by the Wizard Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 154: Firewall: Firewall Policy Generated By The Wizard
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Configure Figure 82: Firewall: Firewall Policy Generated by the Wizard Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 155 Step 3: Click Firewall sub-menu. The Firewall has the following tabs: Firewall Wizard, Filters, NAT, DOS Attack, Transparent Firewall and Firewall Policy. Select Filters tab. Filters page is displayed in the center panel. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 156: Firewall - Filters
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Configure Figure 83: Firewall - Filters Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 157 Add a new rule to the filter Interface Bindings Interface List of interfaces to which the filters are applied Direction Filter Direction: Ingress (IN)/Egress (OUT) direction Attach Interface Attach filter to an interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 158: Firewall: Filters - New Filter
Edit Filter Params table. See “Edit Filter Parameters” section to configure time range for the filter. Step 3: Click Apply to add a new filter, or Cancel to cancel adding new filter. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 159: Firewall: Filters - Add Rule To A Filter
6. Check Log check box to enable logging. This logs the first packet of a session. 7. Click Apply to set new action for the filter. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 160: Firewall: Filters - Attach Filter To An Interface
Interfaces already bound to the selected filter are displayed in Interface Bindings table. 2. Click Enable Interface Statistics icon to enable interface statistics. 3. Click the same icon to disable interface statistics for a filter. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 161: Firewall: Filters - Edit Filter Parameters
Rules already configured for the selected filter is displayed in Configured Actions table. 2. Click Delete icon in the Action column against the filter rule to be deleted. 3. Confirm at the prompt to delete action. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 162 Step 3: Click Firewall sub-menu. The Firewall has the following tabs: Firewall Wizard, Filters, NAT, DOS Attack, Transparent Firewall and Firewall Policy. Select NAT tab. NAT page is displayed in the center panel. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 163: Firewall And Security: Nat
Left running head: Chapter name (automatic) Configure Figure 88: Firewall and Security: NAT Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 164 Interface List of interfaces to which the NAT is applied Direction The direction to which the NAT is applied: In coming (IN) or out going (OUT). Attach Interface Attach NAT to an interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 165: Firewall: Nat - New Source Nat Configuration
Source NAT you just created is displayed. Step 5: Configure the NAT rule for selected rule type. Select the NAT Rule Type: Static Address Translation (1:1), Address & Port Translation or Bypass. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 166: Firewall: Nat - Source Nat Configuration - Nat Rule - Static Address Translation
10, or increments 10 to the last entered value. 2. Select the match-list. Select the match-list from the Match List field in the Match List box. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 167 NAT policy on the interface. 4. Click Apply to configure NAT rule for the newly created SNAT policy or Cancel to return to the NAT Policy page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 168: Firewall: Nat - Source Nat Configuration - Nat Rule - Address & Port Translation
Check the Priority/Rule Number check box to set the priority number for the rule to be applied. Higher the number, higher is the priority. 2. Select match-list. Select the match-list from the Match List field in the Match List box. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 169 If no port range is specified, a default port range of 2048 – 65535 is used. 4. Click Apply to configure NAT rule for the newly created SNAT policy or Cancel to return to the NAT Policy page. Alcatel-Lucent Web GUI Users Guide Beta...
Page 170: Firewall: Nat - Source Nat Configuration - Nat Rule - Bypass
Select the match-list from the Match List field in the Match List box. 3. Click Apply to configure NAT rules for the newly created SNAT policy or Cancel to return to the NAT Policy page. Alcatel-Lucent Web GUI Users Guide Beta...
Page 171: Firewall: Nat - New Destination Nat Configuration
Step 4: Click Apply to create new DNAT. NAT Rule Configuration page for the new DNAT you just created is displayed. Step 5: Configure NAT rule for selected rule type. Select the NAT Rule Type: Static Address Translation (1:1), Address & Port Translation or Bypass. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 172: Firewall: Nat - Destination Nat Configuration - Nat Rule - Static Address Translation
10, or increments 10 to the last entered value. 2. Select the match-list. Select the match-list from the Match List field in the Match List box. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 173: Firewall: Nat - Destination Nat Configuration - Nat Rule - Address & Port Translation
4. Click Apply to configure NAT rules for the newly created DNAT policy or Cancel to return to the NAT Policy page. Address and Port Translation Figure 95: Firewall: NAT - Destination NAT Configuration - NAT Rule - Address & Port Translation Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 174 The range for the port is 1-65535. This is optional. 4. Click Apply to configure NAT rules for the newly created DNAT policy or Cancel to return to the NAT Policy page. Alcatel-Lucent Web GUI Users Guide Beta...
Page 175: Firewall: Nat - Destination Nat Configuration - Nat Rule - Bypass
Select the match-list from the Match List field in the Match List box. 3. Click Apply to configure NAT rules for the newly created DNAT policy or Cancel to return to the NAT Policy page. Alcatel-Lucent Web GUI Users Guide Beta...
Page 176: Firewall: Nat - Attach Nat To An Interface
Interfaces already bound to the selected NAT are displayed in Interface Bindings table. 2. Click Enable Interface Statistics icon to enable interface statistics. 3. Click the same icon to disable interface statistics for a NAT policy. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 177 1. Select the NAT policy from the NAT Policy list. 2. Click Delete icon in the Action column against the NAT policy to be deleted. 3. Confirm at the prompt to delete the selected NAT policy. Alcatel-Lucent Web GUI Users Guide Beta...
Page 178: Firewall: Dos Attack
The Firewall has the following tabs: Firewall Wizard, Filters, NAT, DOS Attack, Transparent Firewall and Firewall Policy. Select DOS Attack tab. DOS Attack page is displayed in the center panel. Figure 98: Firewall: DOS Attack Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 179 DOS A REATING TTACK Follow the procedure below to create DOS Attacks. Step 1: Click New DOS Attack in DOS Attack page to create new DOS Attack. The New Attack page is displayed. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 180: Firewall: Dos Attack - New
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Configure Figure 99: Firewall: DOS Attack - New Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 181: Firewall: Dos Attack - View
1. Click View icon in the Action column against the DOS attack policy whose DOS attacks is to be viewed. 2. The DOS attacks configured for the DOS attack policy is displayed in a pop up window as shown below: Figure 100: Firewall: DOS Attack - View Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 182 You cannot delete DoS attack if the attack is attached to a firewall policy. To delete the attack object, disassociate the DOS attack from the firewall policy. For more information on attaching an attack to a firewall policy, see “Adding Rule to Firewall Policy” section. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 183: Firewall: Transparent Firewall
The Firewall has the following tabs: Firewall Wizard, Filters, NAT, DOS Attack, Transparent Firewall and Firewall Policy. Select Transparent Firewall tab. Transparent Firewall page is displayed in the center panel. Figure 101: Firewall: Transparent Firewall Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 184: Firewall: Transparent Firewall - New
Follow the procedure below to create TF policy. Step 1: Click New in Transparent Forwarding Details page to create new TF policy. Add Transparent Forwarding page is displayed. Figure 102: Firewall: Transparent Firewall - New Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 185 4. Click Apply to save the changes or Cancel to cancel the operation. TF P ELETE OLICY 1. Click Delete icon in the Action column against the TF policy to be deleted. 2. Confirm at the prompt to delete TF policy. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 186: Firewall: Firewall Policy
The Firewall has the following tabs: Firewall Wizard, Filters, NAT, DOS Attack, Transparent Firewall and Firewall Policy. Select Firewall Policy tab. Firewall Policy page is displayed in the center panel. Figure 103: Firewall: Firewall Policy Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 187 Match List Match-list associated with the firewall policy. Sensor Name The name of the sensor. Threshold/Pkts Threshold for the number of packets/ second. Threshold/Milli Sec Time in millisecond. Mode Detection, Prevention or Prevention- Reset. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 188: Firewall: Firewall Policy - New Firewall Policy
Figure 104: Firewall: Firewall Policy - New Firewall Policy Step 2: Enter the firewall policy name in the Firewall Name field. Step 3: Click Add to new firewall policy or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta...
Page 189: Firewall: Firewall Policy - Add New Dos Attack Rule
3. Enter rule number, select match-list, DOS attack policy, define action, and select the time range. Time range is not mandatory. 4. Click Apply to add new DOS Attack rule. 5. Add as many rules as required. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 190: Firewall: Firewall Policy - Add New Intrusion Rule
3. Enter rule number, select match-list, sensor name, enter Threshold/Packets and Threshold/Milli Sec, and select mode. Threshold/Packets and Threshold/Milli Sec values are not mandatory. 4. Click Apply to add new intrusion rule. 5. Add as many rules as required. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 191: Firewall: Firewall Policy - Attach Interface
2. Click Edit icon in the Action column for the firewall policy rule to be edited. 3. Enter the new firewall policy rule parameters in the respective columns. 4. Click Apply to save the changes or Cancel to retain original parameters. Alcatel-Lucent Web GUI Users Guide Beta...
Page 192 Interfaces already configured for the selected firewall policy is displayed in the Interface Bindings table. 2. Click Detach icon in the Action column to detach firewall policy from the selected interface. 3. Confirm at the prompt to detach the firewall policy. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 193: Vpn Ipsec
For IPsec Profiles, creates VPN Peers and associates IPsec Profiles to the created Tunnel Interfaces. • IKE settings for configuring PFS, Lifetime, security proposals • VPN (IPsec) settings for configuring PFS, lifetime and transform set Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 194: Vpn Ipsec: Ipsec Wizard
Follow the procedure below to configure a IPsec Policy using the wizard. Step 1: Click Launch Wizard in the IPsec Wizard page to create new IPsec Policy. The following page is displayed: Figure 109: VPN IPsec: IPsec Wizard - Introduction Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 195: Vpn Ipsec: Ipsec Wizard - Create Ipsec Policy With Ipsec Profile
Enter the number for the tunnel interface in the Tunnel Number field. • Enter the IP address and the subnet mask of the tunnel interface in the IP Address and Subnet Mask fields. • Enter the description for the tunnel in the Description field. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 196: Vpn Ipsec: Ipsec Wizard - Create Ipsec Policy With Crypto-Map
Configure Crypto-map 1. Select Crypto-map radio button. Crypto-map settings is displayed. Figure 111: VPN IPsec: IPsec Wizard - Create IPsec Policy with Crypto-map 2. Enter the crypto-map name in the Policy Name field. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 197: Vpn Ipsec: Ipsec Wizard - Create Ipsec Policy With Crypto-Map - Add Peer
Attach a match-list to a crypto-map under VPN Traffic (Match-list) field. You can either attach an exiting match-list or create a new match-list and attach it to the crypto-map. Click Add. Create New and Attach Existing options are displayed. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 198: Vpn Ipsec: Ipsec Wizard - Create Ipsec Policy With Crypto-Map - Create Match-List
Address Type drop-down list: Host/Prefix. Enter the source IP address for host, and enter the source address with prefix length for prefix. vi. Click OK. The match-list thus created is displayed in the VPN Traffic (Match-list) field. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 199: Vpn Ipsec: Ipsec Wizard - Create Ipsec Policy With Crypto-Map - Select Match-List
Click OK. The match-list thus selected is displayed in the VPN Traffic (Match-list) field. Step 3: Click Next. IKE Settings window is displayed. This window allows you to configure IKE policy, and IKE settings like PFS, Lifetime, security proposals. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 200: Vpn Ipsec: Ipsec Wizard - Ike Settings
Lifetime (KB) field. v. Select the encryption algorithm in the IKE Proposal box. Maximum of four proposals can be associated with an IKE policy. The system prompts if more than four encryption algorithms are selected. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 201: Vpn Ipsec: Ipsec Wizard - Ike Settings - Use Existing Ike Policy
These are not editable. Only IPsec SA Lifetime (KB) can be modified. Step 4: Click Next. VPN (IPsec) Settings window is displayed. This window allows you to configure VPN (IPsec) Settings like configuring PFS, Lifetime & transform set. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 202: Vpn Ipsec: Ipsec Wizard - Vpn (Ipsec) Settings
Retain the default values or configure as required. 4. Configure Transform-set as required. To do the same, unselect the Use Default Transform-set check box. • Here you have two options: Configure a new Transform-set or use an already created Transform-set. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 203: Vpn Ipsec: Ipsec Wizard - Ike Settings - Select Existing Transform-Set
Algorithm box. These are not editable. Step 5: Click Next. Summary window is displayed. Based on the IPsec policy type configured (Crypto-map or IPsec Profile using Tunnel interface), the Summary window displays the respective IPsec policy configuration. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 204: Vpn Ipsec: Ipsec Wizard - Summary (Ipsec Profile Policy Type)
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Configure Figure 119: VPN IPsec: IPsec Wizard - Summary (IPsec Profile Policy Type) Figure 120: VPN IPsec: IPsec Wizard - Summary (Crypto-map Policy Type) Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 205: Vpn Ipsec: Ipsec Wizard - Ipsec Policy/Policies Generated By The Wizard
Click on this to view the details of the IKE policy configured for the IPsec policy. Traffic Classifier Match-list associated with the IPsec policy. Click on this to view the details of the Match-list configured for the IPsec policy. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 206: Vpn Ipsec: Ipsec Wizard - Edit Ipsec Policy
IPsec policy to be edited. 2. Edit IPsec Policy page is displayed. This page displays the parameters configured for the selected IPsec policy. Modify the required parameters. Figure 122: VPN IPsec: IPsec Wizard - Edit IPsec Policy Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 207 2. Confirm at the prompt to delete the IPsec policy. Note: An IPsec policy assigned to an interface cannot be deleted. To delete an IPsec policy associated with an interface, disassociate the IPsec policy from the interface and then delete. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 208: Vpn Ipsec: Ipsec Wizard - View Ipsec Policy Details
2. A pop-up window displays the IKE Policy, Peer Host, Traffic Classifier, Transform Set, PFS, Lifetime in Seconds and KB details for the selected IPsec policy as shown below: Figure 123: VPN IPsec: IPsec Wizard - View IPsec Policy Details Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 209: Vpn Ipsec: Preshared Keys
The table below provides field description for Preshared Keys page. Table 21: Preshared Keys Field Description Field Description RESHARED Peer Host IP address of the peer Preshared key. Action Provides option to edit or delete a key. Configure new preshared key. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 210: Ipsec Vpn: Assign Preshared Keys
3. Click Apply to save changes, or Cancel to retain the original key. ELETING RESHARED 1. Click Delete icon in the Action column against the key you want to delete. 2. Confirm at the prompt to delete the key assigned to a host. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 211: Vpn Ipsec: Ike Policy
The VPN IPsec has four tabs: IPsec Wizard, Preshared Keys, IKE Policy, and Transform Set. Select IKE Policy tab. IKE Policy page is displayed in the center panel. Figure 126: VPN IPsec: IKE Policy Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 212: Vpn Ipsec: Dead Peer Detection
Follow the procedure below to configure DPD. Step 1: In the IKE Policy page, click Edit under Dead Peer Detection box to enter the DPD values. Figure 127: VPN IPsec: Dead Peer Detection Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 213: Vpn Ipsec: New Ike Policy
Default PFS group is group2 (1024 bit). Step 5: Set lifetime for the IKE policy in Lifetime in Seconds field in the range of 540 - 86400 seconds. The default lifetime for IKE is 86400 seconds. Alcatel-Lucent Web GUI Users Guide Beta...
Page 214 An IKE policy associated with any IPsec policy cannot be deleted. To delete an IKE policy associated with an IPsec policy, either disassociate that IKE policy from the IPsec policy, or delete the IPsec policy. Alcatel-Lucent Web GUI Users Guide Beta...
Page 215: Vpn Ipsec: View Ike Policy Details
2. A pop up window displays the Proposal, PFS, Lifetime, IP Security Association details for the selected IKE policy as shown below: Figure 129: VPN IPsec: View IKE Policy Details Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 216: Vpn Ipsec: Transform Sets
Encapsulation set for the transform set. IPsec Policy Reference Lists IPsec policy/policies to which the particular IKE policy is attached. Action Provides option to edit and/or delete a transform set. Create new transform set. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 217: Vpn Ipsec: New Transform Set
The system prompts if more than four encapsulations are selected. Step 4: Click Apply to add new transform set, or Cancel return to transform set page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 218 A transform set associated with any IPsec policy cannot be deleted. To delete a transform set associated with an IPsec policy, either disassociate that transform set from the IPsec policy, or delete the IPsec policy. Alcatel-Lucent Web GUI Users Guide Beta...
Page 219: Vrrp
VRRP group. VRRP Interface Tracking The VRRP Interface Tracking feature extends the capabilities of the VRRP to allow tracking of specific interfaces within the router that can alter the priority of a router. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 220: Virtual Routing Redundancy Protocol (Vrrp) Groups
The interval value set between sending successive advertisements by the master virtual router in a group. (Seconds/Milliseconds) Tracking Interface Interface tracked for the VRRP group Displays if the Track on Interface Mode is enabled or disabled Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 221: Vrrp Group Configuration
Step 3: VRRP is configured on an interface. Hence, first select an interface on which VRRP is to be configured. Note that operational state of the interface must be up. Select the interface on which VRRP is to be configured from the list. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 222: Vrrp Group Configuration - Add Secondary Ip Address
To add more IP addresses (Secondary IP address), click Add IP Addresses. Add Secondary IP Address window is displayed. • Click Add. Add IP pop up window is displayed. Figure 134: VRRP Group Configuration - Add Secondary IP Address Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 223 Disabling the pre-empt mode disables the pre-emption of the VRRP group. • Configure track Interface and set the authentication option for a virtual router. To configure track interface and set authentication option, click Optional Parameters. Add Optional Parameters window is displayed. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 224: Vrrp Group Configuration - Add Optional Parameters
VRRP or click Cancel to cancel the operation. Step 9: Once you have entered the required configuration values, click Apply to create a new VRRP Group or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 225: Vrrp Group Configuration - View Master Router Details
3. Click Apply to save changes, or Cancel to retain the original configuration. VRRP G ELETING ROUP 1. Click Delete icon in the Action column for the interface whose VRRP Group is to be deleted. 2. Confirm at the prompt to delete the VRRP group. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 226: Intrusion Prevention
Signature Policies, Sensors, Alerts and Reports, and View Rule File. By default, Status tab is selected, and the status of the signature database in IPS Status table is displayed in the center panel. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 227: Intrusion Prevention: Status
Signature Database TimeStamp This displays the timestamp of the signature file. Signature Update Report This displays the last time the security appliance on device checked for the signature updates on remote signature server. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 228 This also displays the additions and deletions in the new version against the current version, and the signature update status. Refresh Refresh the Report Status. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 229: Intrusion Prevention: Status - Signature Update
3. Select the server option: Default Server/Other Server from where you want to download the signature files. If you have selected Other Server option, enter the URL of the location from where Signature file has to be downloaded in the URL field. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 230: Intrusion Prevention: Status - Ips Rollback
2. Select the desired version of the signature database from the Version drop-down list. 3. Click Rollback to roll back to the previous version of Signature file in the Signature Database in IDS. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 231: Intrusion Prevention: Global Settings
Table is displayed based on IPS classes. Rule Indicates if the rule is used for DETECTION or PREVENTION or PREVENTION-RESET. Status Displays if a specific rule is enabled or disabled. Action Provides an option to edit the IPS rules. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 232: Intrusion Prevention: Global Settings - Configure
IP traffic that is generating an attack. Step 5: Set status to Enable/Disable from the Status drop-down list. Step 6: Click Apply to save changes. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 233: Intrusion Prevention: Signature Policies
Step 4: Select the required option by selecting the respective radio button and their values: Class/Category/Priority/SID. Step 5: Click GO. Signature policy details based on the selected option is displayed in the table with option to edit the signature policy. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 234 The status of the signature policy: Enabled/Disabled Priority Defines the attack signature as Low, Medium, or High. Action Provides option to edit the IPS signature policy. Allows to create new rule for the signature. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 235: Intrusion Prevention: Signature Policies - New
2. Change the Signature Policy parameters. The Sensor Type and the SID cannot be modified. 3. Click Apply to save changes or Cancel to retain the original values and to return to Signature Policy page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 236: Intrusion Prevention: Sensors
Rate Threshold / Per Milli Seconds Rate threshold in milli seconds. Associated Firewall Policy The firewall policy to which the sensor is attached. Action Provides option to edit/delete the sensor. Add new sensor. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 237: Intrusion Prevention: Sensor - New
This denotes the threshold time in milliseconds inside which if the specified threshold number of packets are received, those packets are treated as attacks. Step 4: Click Apply to add new intrusion sensor. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 238: Intrusion Prevention: Sensor - Associating Sensor To A Firewall Policy
7. Select the match-list from the Traffic Classifier list. 8. Select the mode from the Mode list: Detection/Prevention/Prevention-Reset. 9. Click Apply to associate a Firewall Policy to a Sensor/edit the sensor parameters or Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 239 2. Confirm at the prompt to delete the Sensor. Note: A Sensor assigned to a Firewall Policy cannot be deleted. To delete a Sensor associated with a Firewall Policy, disassociate the Sensor from the Firewall Policy and then delete. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 240: Intrusion Prevention: Alerts And Reports
Select Alerts and Reports tab. IDS Alerts and Reports page is displayed in the center panel. Figure 147: Intrusion Prevention: Alerts and Reports IDS Alerts and Reports page displays all the alerts and reports based on its severity, date, module, sub module, and the message. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 241 Date the alert message is posted. Module Module for which the alert message is posted. Sub Module Sub-module for which the alert message is posted. Message The alert message. Refresh Refresh the messages. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 242: Intrusion Prevention: View Rule File
Table 30: View Rule File Field Description Field Description File Name Name of the rule file to be viewed. View File View the selected rule file. File Contents This box displays the contents of the selected rule file. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 243: Intrusion Prevention: View Rule File - View File
Step 3: Select the rule file to be viewed from the File Name drop-down list. Step 4: Click View File to view the contents of the selected rule file in File Contents box as shown below. Figure 149: Intrusion Prevention: View Rule File - View File Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 244: Qos (Quality Of Service)
Packets at the ingress are classified using common classifier, and exploits the one-pass classification feature on the OA-700. These packets, based on classification are grouped into a class. QoS is applied on each flow. Alcatel-Lucent Web GUI Users Guide Beta...
Page 245: Quality Of Service: Qos Wizard
Quality of Service has four tabs: QoS Wizard, Class Map, Policy Map, and Interface Association. By default, QoS Wizard tab is selected and QoS Wizard window is displayed in the center panel. Figure 150: Quality of Service: QoS Wizard Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 246: Quality Of Service: Qos Wizard - Introduction
Auto QoS configuration automatically gets enabled on the interface. These configurations are not editable. 1. In the Policy Configuration window, select Auto QoS Policy radio button. The parameters to configure Auto QoS policy is displayed. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 247: Quality Of Service: Qos Wizard - Policy Configuration - Auto Qos Policy
Select Interface to apply QoS policy list. Note: By default, the policy will be attached to the interface in the egress direction. Auto QoS cannot be configured on tunnel interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 248: Quality Of Service: Qos Wizard - Policy Configuration - Customized Qos Policy
Step 3: Click Next. Bandwidth Allocation window is displayed. The wizard creates a policy with the following traffic classes: Voice Class, Business Critical Class, Network Control Class, Best Effort. This window allows you to configure the bandwidth for these classes. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 249: Quality Of Service: Qos Wizard - Bandwidth Allocation
Value in Kbps field. 3. Click Details to view the QoS classes created by the wizard and the details of the bandwidth assigned to the classes. The following pop-up window is displayed: Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 250: Quality Of Service: Qos Wizard - Bandwidth Allocation - Details
Voice bandwidth get precedence over the others. The amount of bandwidth left after the Voice bandwidth is distributed/assigned for Business Critical, Network Control and Best Effort classes. Step 4: Click Next. Summary window displays the summary of the QoS policy configuration. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 251: Quality Of Service: Qos Wizard - Summary
The policy map, the interface associated with the policy map, and the class maps auto configured by the wizard is displayed in the Policy Map, Interface Association and Class Map tabs as shown below. Alcatel-Lucent Web GUI Users Guide Beta...
Page 252: Quality Of Service: Policy Map Generated By The Wizard
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Configure Figure 157: Quality of Service: Policy Map Generated by the Wizard Figure 158: Quality of Service: Interface Association Generated by the Wizard Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 253: Quality Of Service: Class Map Generated By The Wizard
Left running head: Chapter name (automatic) Configure Figure 159: Quality of Service: Class Map Generated by the Wizard Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 254: Quality Of Service: Class Map
Quality of Service has four tabs: QoS Wizard, Class Map, Policy Map, and Interface Association. Select Class Map tab. Class Map page is displayed in the center panel. Figure 160: Quality of Service: Class Map Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 255 Match criteria for rules: ALL/ANY Match list Match list to be associated with the class map. Action Provides option to edit and/or delete class map rules. New Class Map Rule Create new class map rule. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 256: Quality Of Service: New Class Map
Step 4: Set the rule match criteria for the class map from the Rule Match Criteria drop-down list: MATCH ALL/MATCH ANY Step 5: Click Apply to create a new class map or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 257: Quality Of Service: New Class Map Rule
MatchList column. • Click OK. The selected match-lists is displayed in the Match List drop-down list. Step 5: Click Apply to add new class map rule or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 258 Follow the procedure below to delete a class map rule: 1. Click Delete icon under the Action column against the class map rule to be deleted. 2. Confirm at the prompt to delete the selected class map rule. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 259: Quality Of Service: Policy Map
Quality of Service has four tabs: QoS Wizard, Class Map, Policy Map, and Interface Association. Select Policy Map tab, Policy Map page will be displayed in the center panel. Figure 163: Quality of Service: Policy Map Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 260 Click “+” sign under a traffic class to view the child policies added to the policy map. This tree structure also allows you to define hierarchical policies, i.e, add child policies within a policy map. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 261: Quality Of Service: Policy Map - New
Step 6: By default, the default-class exists for a policy map, and is displayed in the Policy Map Traffic Classes table. Step 7: If the Auto QoS template option is selected, the automatically created traffic classes are displayed in the Policy Map Traffic Classes table. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 262 Step 6: Define basic, policing, and congestion avoidance configuration for the Traffic Class. There are three tabs provided: Basic Configuration, Policing Configuration, Congestion Avoidance. Click on the respective tab to display the parameters. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 263: Quality Of Service: Policy Map - New Traffic Class Basic Configuration
Class Priority box. By default, Best Effort radio button is selected. Network-control class will have highest priority among all the traffic classes, Priority class will have the next priority, and Default class has the least priority. Alcatel-Lucent Web GUI Users Guide Beta...
Page 264 Excess burst determines how large traffic bursts can be before all traffic exceeds the rate limit. Note: Excess burst cannot be less than committed burst. And, peak rate cannot be less than the committed rate. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 265 Enter the queue limit in the Queue Limit field. This should be in the range 10- 3500. Default queue limit is 150. 8. Click Apply to create a new Traffic Class with basic configuration or click Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 266: Quality Of Service: Policy Map - New Traffic Class Policing Configuration
6. Policing is allowed at leaf class only. 1. Click Policing Configuration tab in the New Traffic Class page. Policing Configuration page is displayed: Figure 166: Quality of Service: Policy Map - New Traffic Class Policing Configuration Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 267: Quality Of Service: Policy Map - New Traffic Class Policing Configuration - Committed Rate
Select Committed Rate option in the Police Parameters box. The Committed Rate Parameters fields are displayed as shown below. Figure 167: Quality of Service: Policy Map - New Traffic Class Policing Configuration – Committed Rate Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 268 Select Type of Service check box, select the type of service from the drop down list. • Enter the peak-rate in the Peak-Rate field. Select Committed Burst in the Police Parameters box. Committed Burst Parameters are displayed as shown below. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 269: Quality Of Service: Policy Map - New Traffic Class Policing Configuration - Committed Burst
Select the IP Precedence check box and select IP Precedence value from the drop down list. Select Type of Service check box and select the type of service from the drop down list. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 270: Quality Of Service: Policy Map - New Traffic Class Policing Configuration - Excess Burst
Configuration – Excess Burst • Check Excess Burst Parameters check box to set the excess burst values. • Set Excess Burst rate in the Excess Burst field. The default burst rate is 1500 bytes. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 271 But if there is child attached to a class, then RED/WRED cannot be configured on the class. 1. Click Congestion Avoidance tab in the New Traffic Class page. The following page is displayed: Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 272: Quality Of Service: Policy Map - New Traffic Class Congestion Avoidance
Max Threshold - Maximum threshold of the queue. Drop Probability - Displays the drop probability. By default, it is 10. Action - Provides an option to edit the Min Threshold, Max Threshold values. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 273 Fields to edit the traffic class parameters page is displayed. 3. Edit the traffic class configuration as desired. Policy Name and Class Name cannot be edited. 4. Click Apply to save changes or Cancel to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 274 Traffic classes configured for the selected policy map is displayed in the Policy Map Traffic Classes table. 2. Click Delete icon under the Action column against the traffic class to be deleted. 3. Confirm at the prompt to delete the selected traffic class. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 275: Quality Of Service: Policy Map - Add Service Policy
Step 5: Service Policy list displays the list of policy maps configured in the system. Select the required policy map from the Service Policy list. Step 6: Click Apply. This sets the selected service policy (policy map) as a child policy. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 276: Quality Of Service: Policy Map - Qos Over Tunnel Interface
Step 2: The New Traffic Class page is displayed in the center panel. Step 3: Select Tunnel radio button. Tunnel Attachment page is displayed. Figure 172: Quality of Service: Policy Map - QoS over Tunnel Interface Alcatel-Lucent Web GUI Users Guide Beta...
Page 277 Step 7: This automatically creates a tunnel class in the root (parent) policy. And, the policy applied over the tunnel interface will become the child policy of the root policy. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 278 Policy map associated with the interface. Direction Direction Ingress or Egress (IN or OUT). Action Provides option to edit/detach the policy map for the interface. Attach Interface Allows to attach selected policy map to an interface. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 279: Quality Of Service: Interface Association - Attach Interface
MLPPP/MLFR encapsulation. 2. You cannot attach a QoS policy having four levels of hierarchy on a FR interface. 3. You cannot attach a policy map on the tunnel interface in the ingress direction. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 280 1. Click Detach Interface icon in the Action column to detach the policy map from the selected interface. 2. Confirm at the prompt to detach the policy-map from the interface it has been bound. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 281 Left running head: Chapter name (automatic) Configure Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 282: Maintenance
From the USGM menu bar, click Maintenance. All submenu/links under Maintenance are displayed in the left navigation panel. Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle Web GUI Users Guide section of...
Page 283: Utilities
Step 2: From the USGM menu bar, click Maintenance. All submenu/links under Maintenance are displayed in the left navigation panel. Step 3: Click Utilities sub-menu. Utilities page is displayed in the center panel. Figure 175: Maintenance: Utilities Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 284 Deletes the selected file/s from the USB Ping Sends ICMP echo requests, and checks the connectivity to a specific host Telnet Starts a telnet connection to a remote host Note: This option is available only in Windows Operating System. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 285: Maintenance: Utilities - Save Running Configuration (A)
1. Click Save Config… to save the current running configuration. The following window is displayed: Figure 176: Maintenance: Utilities - Save Running Configuration (a) • Click Save. Once the configuration is saved, the following window is displayed: Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 286: Maintenance: Utilities - Save Running Configuration (B)
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Maintenance Figure 177: Maintenance: Utilities - Save Running Configuration (b) Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 287: Maintenance: Utilities - Device Reboot
3. To save the current configuration, select the Save Running Configuration check box. 4. Click Reboot. 5. Once the reboot is successful, USGM login page is displayed. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 288: Maintenance: Utilities - Cleanup Usb
Files box. (Note that it may take a few seconds to fetch the files from the storage media.) 3. Click Delete to delete the selected files. 4. Click Clear to clear the file selection and add new files for deletion. 5. Click Cancel to cancel the cleanup operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 289: Maintenance: Utilities - Ping
Packets - The number of packets sent. • Bytes - Number of bytes for each packet. • Remarks - Time out for each packet. • Detailed Status - Displays the detailed ping status. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 290: Maintenance: Utilities - Telnet
Configure chapter. 1. Click Telnet. The following page is displayed: Figure 181: Maintenance: Utilities - Telnet 2. Enter the authenticated user name and the password to get the access to the remote system. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 291: License Management
OA-700. License Manager helps in managing these license files. Note: The license file is in XML format. Based on the user requirement, Alcatel-Lucent would generate an appropriate license. Currently, the following features are license enabled: •...
Page 292: Maintenance: License Management
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Maintenance Figure 182: Maintenance: License Management Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 293 Step 1: Click Install License in the License Management page. Step 2: Install License window is displayed. The license file can be installed either from the device (USB) or from the remote location. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 294: License Management: Install License From Device
2. Click Browse… to select the path for the license file.The following window is displayed. (Note that it may take a few seconds to fetch the files from the storage media.) Figure 184: License Management: Install License from Device - Browse File Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 295: License Management: Install License From Remote Site (A)
5. Enter the path of the license to be installed from the remote site in License File Path field. 6. Click OK to install the license or click Cancel to quit installing the license at any time. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 296: License Management: View All License
Step 3: List of all the licenses present in the selected file is displayed in the window. It displays the feature names that are license enabled, attributes like the license issued date, license serial number, validity, status information. Alcatel-Lucent Web GUI Users Guide Beta...
Page 297: License Management: Backup License On Usb Device
(Note that it may take a few seconds to fetch the files from the storage media.) 3. The selected file is displayed in the File Name field in the License Backup window. 4. Click Ok to backup the license file. Alcatel-Lucent Web GUI Users Guide Beta...
Page 298: License Management: Backup License To Remote Site
Step 3: Confirm at the prompt to delete the license file or click Cancel to cancel the operation. Once confirmed, this would delete the license file and withdraw the licenses of all the related features. Alcatel-Lucent Web GUI Users Guide Beta...
Page 299: Lifeline
Step 2: From the USGM menu bar, click Maintenance. All submenu/links under Maintenance are displayed in the left navigation panel. Step 3: Click Lifeline sub-menu. Lifeline page is displayed in the center panel. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 300: Maintenance: Lifeline
Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) Maintenance Figure 189: Maintenance: Lifeline Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 301 2. Once disabled, the button will change to Enable Lifeline. 3. Click this button to enable the Lifeline. IFELINE You can exit the Lifeline functionality. 1. Click Exit Lifeline in the Lifeline page. Confirm at the prompt to exit the Lifeline functionality. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 302: Add Lifeline Route
HDLC, PPP and Frame Relay, and L2-GE (Layer 2) line cards. To add a Lifeline static route, follow the procedure given below: 1. Click Add in the Routes table in Lifeline page. 2. The following page is displayed: Figure 190: Add Lifeline Route Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 303 6. Click Add to add a new lifeline static route or click Cancel to cancel the operation. ELETE IFELINE OUTE 1. From the Routes table, select the lifeline route to be deleted, and click Delete. 2. Confirm at the prompt to delete. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 304: Upgrade
• Software Upgrade • Flash Upgrade Packages are the vehicles for software delivery on a Alcatel Lucent system. There are three kinds of packages: 1. LoL-<version>.npm This is the collection of files that installs the operating system components. It contains the flash image for SC (Switch Card), Services Engine (SE) and other line cards.
Page 305: Maintenance: Upgrade - Software Upgrade
The Upgrade menu has two tabs: Software Upgrade and Flash Upgrade. Select Software Upgrade tab. Software Upgrade page is displayed in the center panel. This displays the current software configuration. Figure 191: Maintenance: Upgrade - Software Upgrade Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 306 Package description. Build Date Date the package was built. Size (KB) Size of the package in KB. Action Provides option to set the selected package as the default package or remove the package. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 307: Upgrade: Software Upgrade - Install Package From Device
Figure 192: Upgrade: Software Upgrade - Install Package from Device 2. Click Browse… to select the path for the package. (Note that it may take a few seconds to fetch the files from the storage media.) 3. The following window is displayed. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 308: Upgrade: Software Upgrade - Install Package From Device - Browser
Clicking Continue verifies the package and leads to next page based on the Package Type being installed, and also if the verification succeeds. There can be two kinds of Package Type: Release and Component Upgrade. • The following page is displayed for Package Type Release. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 309: Upgrade: Software Upgrade - Install Package From Device (B)
If this check box is not selected, a confirmation message to proceed the installation without saving the running configuration is displayed. Confirm at the prompt to continue installation. 7. Click Install. This installs the new package. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 310: Upgrade: Software Upgrade - Install Package From Remote Site (A)
Clicking Continue verifies the package and leads to next page based on the Package Type being installed, and also if the verification succeeds. There can be two kinds of Package Type: Release and Component Upgrade. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 311: Upgrade: Software Upgrade - Install Package From Remote Site (B)
If this check box is not selected, a confirmation message to proceed the installation without saving the running configuration is displayed. Confirm at the prompt to continue installation. 7. Click Install. This installs the new package. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 312: Upgrade: Software Upgrade - Backup Package On Usb Device
(Note that it may take a few seconds to fetch the files from the storage media.) 3. The selected file is displayed in the Backup boot path field in the Backup Details page. 4. Click Backup to backup the package. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 313: Upgrade: Software Upgrade - Backup Package At Remote Site
5. Enter the relative path for the package to backup at remote location in the Package Path field. 6. Click Continue to save the default package backup in the destination path. 7. Click Cancel to quit the process. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 314: Upgrade: Software Upgrade - Set As Default
The device comes up with the current running configuration after restart if this option is selected. 4. Click Yes to continue to confirm setting the selected package as default or click No to cancel the operation. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 315: Upgrade: Software Upgrade - Package Component Details
2. The details such as component name, component version, and the component size (in kilobytes), and the total number of components in the package is displayed in the Component Details window. Figure 200: Upgrade: Software Upgrade - Package Component Details Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 316: Upgrade: Software Upgrade - Cleanup Usb
1. To remove a package, click Remove Package icon under the Action column in Other Package table. 2. Confirm at the prompt to remove the package. Note: The default package cannot be removed. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 317: Upgrade: Flash Upgrade
Description LASH PGRADE LoL Firmware Version Version of the firmware that resides on boot flash Loader Version Version of the bootloader Flash Upgrade Upgrade flash either from USB or from a remote site Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 318: Upgrade: Flash Upgrade - Flash Upgrade On Usb
3. Select Save Running Configuration check box to save the running configuration to the startup configuration. 4. Click Install to upgrade the flash. 5. System restarts and the new flash image is installed in the system. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 319: Upgrade: Flash Upgrade - Flash Upgrade From A Remote Location
6. Select Save Running Configuration check box to save the running configuration to the startup configuration. 7. Click Install to install the flash image. 8. System restarts and the new flash image is installed in the system. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 320: Monitor
Firewall, Interfaces, IPsec VPN, IPS, QoS, Active Routes. From the USGM menu bar, click Monitor. All submenu/links under Monitor are displayed in the left navigation panel. Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle Web GUI Users Guide section of...
Page 321: Interface Statistics
Monitor are displayed in the left navigation panel. Step 3: Click Interface Statistics sub-menu. Interfaces page displays the details of all the interfaces configured on the system in the center panel. Figure 205: Monitor: Interfaces Statistics Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 322 Indicates if the interface is administratively up or down. Oper Status Indicates if the interface is active or inactive. Action Provides option to view the interface statistics. Refresh Refresh the Interface Statistics page Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 323: Monitor: Interfaces Statistics - View Interface Statistics
1. In the Interfaces page, click View icon in the Action column against the interface whose statistics are to be viewed. 2. The interface statistics is displayed in a pop up window as shown below: Figure 206: Monitor: Interfaces Statistics - View Interface Statistics Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 324 Figure 207: Monitor: Interfaces Statistics - View Interface Statistics 3. The graph shows the real time statistical details -the number of packets sent and received on an interface (Bytes/sec). Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 325: Dhcp Bindings
Step 2: From the USGM menu bar, click Monitor. All submenu/links under Monitor are displayed in the left navigation panel. Step 3: Click DHCP Bindings sub-menu. The following page is displayed in the center panel. Figure 208: Monitor: DHCP Bindings Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 326 Lease Time Specifies the time for which the clients can use the IP address assigned to them. This will be ‘Infinite’ for Manual bindings. Type of Binding Displays the type of DHCP binding: Dynamic/Manual Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 327: Active Routes
Step 5: Select Select VRF radio button. Choose the required VRF from the list. This displays the static routes attached to the VRF selected from the list. Figure 209: Monitor: Active Route Details Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 328 Interface IP address of the interface through which the traffic is routed Administrative Distance The administrative distance of the routing protocol Protocol Static/Connected/Protocol type (RIP, OSPF, etc.) Refresh Update the Active Routes page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 329: Traffic Statistics
Step 5: Select Select VRF radio button. Choose the required VRF from the list. This displays the static routes attached to the VRF selected from the list. Figure 210: Monitor: Traffic Statistics - IP Statistics Alcatel-Lucent Web GUI Users Guide Beta...
Page 330 Counter Name Counters supported for outgoing traffic Value The value of each of the counters Fragment Counter Name Counters supported Value The value of each of the counters Refresh Refresh the IP Statistics page Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 331: Monitor: Traffic Statistics - Icmp Statistics
Step 6: Select Select VRF radio button. Choose the required VRF from the list. This displays the static routes attached to the VRF selected from the list. Figure 211: Monitor: Traffic Statistics - ICMP Statistics Alcatel-Lucent Web GUI Users Guide Beta...
Page 332 TATISTICS Sent Counter Name Counters supported Value The value of each of the counters Received Counter Name Counters supported Value The value of each of the counters Refresh Refresh the ICMP Statistics page Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 333: Snmp Statistics
Step 2: From the USGM menu bar, click Monitor. All submenu/links under Monitor are displayed in the left navigation panel. Step 3: Click SNMP Statistics sub-menu. SNMP Statistics page displays the SNMP statistics in the center panel. Figure 212: Monitor: SNMP Statistics Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 334 TATISTICS Received Counter Name Number of SNMP requests received. Value The value of each of the counters Sent Counter Name Number of SNMP requests sent. Value The value of each of the counters Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 335: Firewall Session Statistics
Monitor are displayed in the left navigation panel. Step 3: Click Firewall Session Statistics sub-menu. Firewall Session Statistics page displays the Firewall Session summary and the details table in the center panel. Figure 213: Monitor: Firewall Session Statistics Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 336 Last Heard Time elapsed since the last data transfer took place. This helps in deleting a session if it has been idle for too long. Refresh Refresh the Firewall Session Statistics page Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 337: Firewall And Security
Step 4: Select the filter whose statistical information is to be viewed from the Filter List drop down list. The filter page displays the parameters, actions and the interface information for the selected filter. Figure 214: Monitor: Firewall and Security - Filters Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 338 Interface The interface to which the filter is applied Direction The direction of the traffic to which the filter is applied: In/Out Action Enable/Disable statistics for a selected interface from the Configuration page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 339: Monitor: Firewall And Security - Filters - Show Policy Statistics
Step 1: Select the filter whose statistical information is to be viewed from the Filter List drop down list. Step 2: Click Show Policy Statistics. Global statistics for the selected Filter policy is displayed. Figure 215: Monitor: Firewall and Security - Filters - Show Policy Statistics Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 340: Monitor: Firewall And Security - Nat
NAT Policy Name drop down list. The NAT page displays the policy name, type of policy, rules configured and the interface that the policy is applied to for the selected NAT Policy. Figure 216: Monitor: Firewall and Security - NAT Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 341 Interface The interface to which the NAT policy is applied Direction The direction of the traffic to which the policy is applied: In/Out Action Enable/Disable statistics for an interface from the Configuration page Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 342: Monitor: Firewall And Security - Dos Attack
List of DOS Attacks configured in the system. The logged attacks Firewall Policy Reference The firewall policy to which the DOS Attack is attached. Action Provides option to view the configured threshold for an attack, and the attack counters. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 343: Firewall And Security - Dos Attack - Show Dos Attack Statistics
2. The configured threshold for an attack is displayed in a pop up window as shown below: Figure 219: Monitor: Firewall and Security - DOS Attack - View Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 344: Monitor: Firewall And Security - Dos Attack - View Statistics
3. Click View Statistics icon in the Action column against the attack. The attack counters is displayed in a pop up window as shown below: Figure 220: Monitor: Firewall and Security - DOS Attack - View Statistics Alcatel-Lucent Web GUI Users Guide Beta...
Page 345: Monitor: Firewall And Security - Firewall Policy
Step 5: Click Show Policy Statistics. This displays the firewall policy statistics for the selected firewall policy in a pop up window. Figure 222: Firewall and Security - Firewall Policy - Show Policy Statistics Alcatel-Lucent Web GUI Users Guide Beta...
Page 346 Action column against the attack whose statistics are to be viewed. 2. This displays the firewall statistics for the rule in a pop up window as shown below: Figure 223: Firewall and Security - Firewall Policy - Show Policy Statistics Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 347: Ipsec Vpn Statistics
Select the interface and the IPsec policy from the Interface and the IPsec Policies drop-down list. IPsec VPN Statistics page displays the details of all the IPsec VPNs configured on the system in the center panel. Figure 224: Monitor: IPsec VPN Statistics Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 348 Auth Number of packets authenticated Errors Number of packets with errors Time-left The duration left after which the lifetime (lifetime in kilobytes/lifetime in seconds) gets reset. Refresh Refresh the IPsec VPN Statistics page Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 349: Ips Statistics
Summary tab is selected and Summary page is displayed in the center panel. The Summary page displays the snort statistics. Click Clear Counter(s) to clear the statistics counters. Figure 225: Monitor: IPS Statistics - Summary Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 350 The number of packets that are queuing up for detection by snort Packets Detected The number of packets that were identified as an intrusion Clear Counter(s) Clears the statistics counters Refresh Refresh the IPS Summary statistics Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 351: Monitor: Ips Statistics - Preprocessor
The IPS Statistics has three tabs: Summary, Preprocessor, and Rules. Select Preprocessor tab. Preprocessor page is displayed in the center panel with the snort preprocessor statistics. Click Clear Counter(s) to clear the statistics counters. Figure 226: Monitor: IPS Statistics - Preprocessor Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 352 Displays the names of counters under each preprocessor Value Displays the number of intrusions detected for each of the corresponding counters Clear Counter(s) Clears the statistics counters Refresh Refresh the IPS Preprocessor statistics page Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 353: Monitor: Ips Statistics - Rules
The IPS Statistics has three tabs: Summary, Preprocessor, and Rules. Select Rules tab. Rules page is displayed in the center panel with information about the intrusions that were detected as per the snort rules. Figure 227: Monitor: IPS Statistics - Rules Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 354 Value Number of intrusions detected as per the particular counter for that rule Action Clears the individual counter Clear Counter(s) Clears the statistics counters Refresh Refresh the IPS Rules statistics page Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 355: Qos Statistics
Monitor are displayed in the left navigation panel. Step 3: Click QoS Statistics sub-menu. QoS Statistics page displays the details of the QoS configured on the system in the center panel. Figure 228: QoS Statistics Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 356: Qos Statistics
Number of packets transmitted by the traffic class Bytes Dequeued Total amount of bytes dequeued by the traffic class Queue Length Number of packets currently in the queue. Clear Ingress Statistics Clears the egress statistics Refresh Refresh the QoS page Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 357: Logs
Step 3: Click Logs sub-menu. Logs page is displayed in the center panel. Step 4: Select the log severity from the Select the Log severity drop-down list. The following page is displayed based on the log selected: Figure 229: Monitor: Logs Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 358 Sub Module The sub module for which the log was generated. Message The detailed log message. Delete All Deletes all the logs from the Logs page. Refresh Refreshes the logs in the Logs page. Alcatel-Lucent Web GUI Users Guide Beta Beta...
Page 359 Left running head: Chapter name (automatic) Monitor Alcatel-Lucent Web GUI Users Guide Beta Beta...

Alcatel-Lucent OmniAccess 700 User Manual

1 Preface

2 GUI Layout and Logging on to USGM

3 Configure

4 Maintenance

5 Monitor

Quick Links

Related Manuals for Alcatel-Lucent OmniAccess 700

Summary of Contents for Alcatel-Lucent OmniAccess 700