Related Manuals for Comtrend Corporation CT-5072T
Summary of Contents for Comtrend Corporation CT-5072T
-
Page 1: User Manual
CT-5072T ADSL2+ Ethernet Router User Manual Version A2.0, January 26, 2010 261095-008... - Page 2 Copyright Copyright© 2010 Comtrend Corporation. All rights reserved. The information contained herein is proprietary to Comtrend Corporation. No part of this document may be translated, transcribed, reproduced, in any form, or by any means without prior written consent of Comtrend Corporation.
-
Page 3: Table Of Contents
Table of Contents CHAPTER 1 INTRODUCTION ......................4 1.1 F ..........................4 EATURES 1.2 A ........................4 PPLICATION IAGRAM CHAPTER 2 INSTALLATION ......................5 2.1 H ........................... 5 ARDWARE ETUP 2.2 LED I ..........................6 NDICATORS CHAPTER 3 WEB USER INTERFACE ....................7 3.1 D ......................... - Page 4 6.10.2 Trusted CA ........................60 CHAPTER 7 DIAGNOSTICS ......................61 CHAPTER 8 MANAGEMENT ......................62 8.1 S ............................62 ETTINGS 8.1.1 Backup Settings....................... 62 8.1.2 Update Settings ....................... 62 8.1.3 Restore Default ....................... 63 8.2 S ..........................64 YSTEM 8.3 SNMP A ..........................
-
Page 5: Chapter 1 Introduction
Chapter 1 Introduction The CT-5072T (TR-069 compliant) ADSL2+ Ethernet Router provides one 10/100 Ethernet port and one ADSL port for Internet access. It features TR-068 compliant panels for easy setup and use. It supports LAN applications, such as Video on Demand, over a regular telephone line at speeds of up to 24 Mbps. -
Page 6: Chapter 2 Installation
2.2 LED Indicators for details). NOTE: If pressed down for more than 20 seconds, the CT-5072T will go into a firmware update state (CFE boot mode). The firmware can then be updated using an Internet browser pointed to the default IP address. -
Page 7: Led Indicators
2.2 LED Indicators The front panel LED indicators are shown below and explained in the following table. This information can be used to check the status of the device and its connections. Color Mode Function An Ethernet Link is established. Green An Ethernet Link is not established. -
Page 8: Chapter 3 Web User Interface
Chapter 3 Web User Interface This section describes how to access the device via the web user interface (WUI) using an Internet browser such as Internet Explorer (version 5.0 and later). 3.1 Default Settings The factory default settings of this device are summarized below. ... -
Page 9: Ip Configuration
3.2 IP Configuration DHCP MODE When the CT-5072T powers up, the onboard DHCP server will switch on. Basically, the DHCP server issues and reserves IP addresses for LAN devices, such as your PC. To obtain an IP address from the DCHP server, follow the steps provided below. - Page 10 STATIC IP MODE In static IP mode, you assign IP settings to your PC manually. Follow these steps to configure your PC IP address to use subnet 192.168.1.x. NOTE: The following procedure assumes you are running Windows XP. However, the general steps involved are similar for most operating systems (OS).
-
Page 11: Login Procedure
3.3 Login Procedure Perform the following steps to login to the web user interface. NOTE: The default settings can be found in section 3.1. STEP 1: Start the Internet browser and enter the default IP address for the device in the Web address field. For example, if the default IP address is 192.168.1.1, type http://192.168.1.1. -
Page 12: Chapter 4 Quick Setup
It allows for the configuration of connection settings. 4.1 Auto Quick Setup This function provides an automated process to quickly setup a WAN connection. The CT-5072T will auto-select the best available PVC profile, provided the ADSL link is up (see section 2.2). -
Page 13: Manual Quick Setup
4.2 Manual Quick Setup To setup the WAN connection manually, follow these instructions: STEP 1: Un-tick the DSL Auto-connect checkbox on the Quick Setup screen. Un-tick this checkbox to begin manual setup and display the following screen. STEP 2: Adjust the Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) settings for the connection you wish to establish. -
Page 14: Ppp Over Atm (Pppoa) And Ppp Over Ethernet (Pppoe)
Click Next to continue… NOTE: The subsections that follow continue the ATM PVC setup procedure. Enter the appropriate settings for your service. Choosing different connection types will lead to a different sequence of setup screens. 4.2.1 PPP over ATM (PPPoA) and PPP over Ethernet (PPPoE) STEP 4: Enter the PPP settings as provided by your ISP. - Page 15 DIAL ON DEMAND The CT-5072T can be configured to disconnect if there is no activity for a period of time by selecting the Dial on demand checkbox . You must also enter an inactivity timeout period in the range of 1 to 4320 minutes.
- Page 16 When Enabled, this creates local PPPoE connections to the WAN side. Enable this option only if all LAN-side devices are running PPPoE clients, otherwise disable it. The CT-5072T supports pass-through PPPoE sessions from the LAN side while simultaneously running a PPPoE client from non-PPPoE LAN devices.
- Page 17 STEP 6: The Device Setup screen is used to configure LAN interface settings. The IP address and Subnet Mask define the location of the CT-5072T on the LAN. To auto-assign IP addresses, DNS server and default gateway to other LAN devices, select the Enable DHCP server radio button.
-
Page 18: Mac Encapsulation Routing (Mer)
STEP 7: Click Next to display the configuration summary. Click Save/Reboot if the settings are correct or click Back to modify these settings. After clicking Save/Reboot, the CT-5072T will save the configuration and reboot. 4.2.2 MAC Encapsulation Routing (MER) STEP 4: Enter the WAN IP settings provided by your ISP. Click Next to continue. - Page 19 Select the Obtain an IP address automatically radio box to enable DHCP. NOTE: Assigning the default gateway or DNS server with static values will disable their automatic assignment from DHCP or another WAN connection. STEP 5: This screen provides access to Network Address Translation (NAT), IGMP Multicast, and WAN Service settings.
- Page 20 STEP 6: The Device Setup screen is used to configure LAN interface settings. The IP address and Subnet Mask define the location of the CT-5072T on the LAN. To auto-assign IP addresses, DNS server and default gateway to other LAN devices, select the Enable DHCP server radio button.
-
Page 21: Ip Over Atm
Select Enable DHCP Server Relay (if required), and enter the DHCP Server IP Address. This allows the CT-5072T to relay the DHCP packets to the remote DHCP server. The remote DHCP server will provide the IP address. NOTE: Enable DHCP Server Relay will not display if NAT is enabled. - Page 22 NOTE: Since DHCP is not supported over IPoA connections, the default gateway settings and DNS server addresses must be assigned manually. STEP 5: This screen provides access to Network Address Translation (NAT), IGMP Multicast, and WAN Service settings. Enable each service by selecting its checkbox .
- Page 23 ENABLE FIREWALL To enable IP packet filtering, tick this checkbox . The Advanced Setup Security IP Filtering option will appear on the main menu after reboot. Disable this function when not required for improved performance. ENABLE IGMP MULTICAST Tick the checkbox ...
- Page 24 STEP 6: The Device Setup screen is used to configure LAN interface settings. The IP address and Subnet Mask define the location of the CT-5072T on the LAN. To auto-assign IP addresses, DNS server and default gateway to LAN devices, select the Enable DHCP server radio button.
-
Page 25: Bridging
STEP 7: Click Next to display the configuration summary. Click Save/Reboot if the settings are correct or click Back to modify these settings. After clicking Save/Reboot, the CT-5072T will save the configuration and reboot. 4.2.4 Bridging STEP 4: To enable bridge service, tick the checkbox and enter a service name. - Page 26 STEP 5: The Device Setup screen is used to configure LAN interface settings. Enter an IP Address and Subnet Mask for the CT-5072T LAN interface. STEP 6: Click Next to display the configuration summary. Click Save/Reboot if the settings are correct or click Back to modify these settings.
-
Page 27: Chapter 5 Device Information
Chapter 5 Device Information The web user interface is divided into two windowpanes, the main menu (at left) and the display screen (on the right). The main menu has several options and selecting each of these options opens a submenu with more selections. NOTE: The menu items shown are based upon the configured connection(s) and user account privileges. -
Page 28: Statistics
Heading Description VPI/VCI ATM VPI (0-255) / VCI (32-65535) VLAN Mux Shows 802.1Q VLAN ID Con. ID WAN connection ID number Category ATM service category Service Name of the WAN connection Interface Name of the interface for WAN Protocol Shows the connection type IGMP Shows Internet Group Management Protocol (IGMP) status Shows Network Address Translation (NAT) status... -
Page 29: Wan Statistics
Heading Description Interface LAN interface(s) Received/Transmitted: - Bytes Number of Bytes - Pkts Number of Packets - Errs Number of packets with errors - Drops Number of dropped packets 5.2.2 WAN Statistics This screen shows data traffic statistics for each WAN interface. Heading Description Service... - Page 30 ATM Interface Statistics Heading Description In Octets Number of received octets over the interface Out Octets Number of transmitted octets over the interface In Errors Number of cells dropped due to uncorrectable HEC errors In Unknown Number of received cells discarded during cell header validation, including cells with unrecognized VPI/VCI values, and cells with invalid cell header patterns.
- Page 31 Heading Description In Errors Number of received AAL5/AAL0 CPCS PDUs received that contain an error. These errors include CRC-32 errors. Out Errors Number of received AAL5/AAL0 CPCS PDUs that could not be transmitted due to errors. In Discards Number of received AAL5/AAL0 CPCS PDUs discarded due to an input buffer overflow condition.
-
Page 32: Adsl Statistics
5.2.4 ADSL Statistics The ADSL Statistics screen is shown below with a reference table that follows. Click the Reset Statistics button to refresh this screen. Field Description Mode G.Dmt, G.lite, T1.413, ADSL2, ADSL2+... - Page 33 Field Description Type Channel type Interleave or Fast Line Coding Trellis On/Off Status Lists the status of the DSL link Link Power State Link output power state. SNR Margin (dB) Signal to Noise Ratio (SNR) margin Attenuation (dB) Estimate of average loop attenuation in the downstream direction.
- Page 34 Within the ADSL Statistics window, a Bit Error Rate (BER) test can be started using the ADSL BER Test button. A small window will open when the button is pressed; it will appear as shown below. Click Start to start the test or Close. If the test is successful, the pop-up window will display as follows.
-
Page 35: Route
5.3 Route Choose Route to display the routes that the CT-5072T has found. Field Description Destination Destination network or destination host Gateway Next hub IP address Subnet Mask Subnet Mask of Destination Flag U: route is up !: reject route... -
Page 36: Arp
5.4 ARP Click ARP to display the ARP information. Field Description IP address Shows IP address of host pc Flags Complete, Incomplete, Permanent, or Publish HW Address Shows the MAC address of host pc Device Shows the connection interface 5.5 DHCP Click DHCP to display all DHCP Leases. -
Page 37: Chapter 6 Advanced Setup
Chapter 6 Advanced Setup This chapter explains the following screens: 6.1 WAN 6.2 LAN 6.3 NAT 6.4 Security 6.5 Parental Control 6.6 Quality of Service 6.7 Routing 6.8 DNS 6.9 DSL 6.10 Certificate 6.1 WAN This screen allows for the configuration of WAN interfaces. To Add a new WAN connection, click the Add button. -
Page 38: Lan
Heading Description Interface Name of the interface for WAN Protocol Shows the connection type Igmp Shows Internet Group Management Protocol (IGMP) status Shows Network Address Translation (NAT) status Firewall Shows the status of Firewall Shows Quality of Service (QoS) status State Shows the connection state of the WAN connection Remove... - Page 39 DHCP Server: To enable DHCP, select Enable DHCP server and enter Start and End IP addresses and the Leased Time. This setting configures the router to automatically assign IP, default gateway and DNS server addresses to every PC on your LAN. DHCP Server Relay: Enable with checkbox ...
-
Page 40: Nat
6.3 NAT To display this option, NAT must be enabled in at least one PVC shown on the Advanced Setup - WAN screen. (NAT is not an available option in Bridge mode) 6.3.1 Virtual Servers Virtual Servers allow you to direct incoming traffic from the WAN side (identified by Protocol and External port) to the Internal server with private IP addresses on the LAN side. -
Page 41: Port Triggering
Consult the table below for field and header descriptions. Field/Header Description Select a Service User should select the service from the list. Custom Server User can enter the name of their choice. Server IP Address Enter the IP address for the server. External Port Start Enter the starting external port number (when you select Custom Server). - Page 42 Consult the table below for field and header descriptions. Field/Header Description Select an Application User should select the application from the list. Custom Application User can enter the name of their choice. Trigger Port Start Enter the starting trigger port number (when you select custom application).
-
Page 43: Dmz Host
6.3.3 DMZ Host The DSL router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer. To Activate the DMZ host, enter the DMZ host IP address and click Save/Apply. To Deactivate the DMZ host, clear the IP address field and click Save/Apply. -
Page 44: Security
6.4 Security To display this function, you must enable the firewall feature in WAN Setup. For detailed descriptions, with examples, please consult Appendix A – Firewall. 6.4.1 IP Filtering This screen sets filter rules that limit IP traffic (Outgoing/Incoming). Multiple filter rules can be set and each applies at least one limiting condition. - Page 45 Field Description Filter Name The filter rule label Protocol TCP, TCP/UDP, UDP, or ICMP. Source IP address Enter source IP address. Source Subnet Mask Enter source subnet mask. Source Port (port or port:port) Enter source port number or range. Destination IP address Enter destination IP address.
-
Page 46: Mac Filtering
Each network device has a unique 48-bit MAC address. This can be used to filter (block or forward) packets based on the originating device. MAC filtering policy and rules for the CT-5072T can be set according to the following procedure. The MAC Filtering Global Policy is defined as follows. FORWARDED means that all MAC layer frames will be FORWARDED except those matching the MAC filter rules. -
Page 47: Parental Control
Consult the table below for detailed field descriptions. Field Description Protocol Type PPPoE, IPv4, IPv6, AppleTalk, IPX, NetBEUI, IGMP Destination MAC Address Defines the destination MAC address Source MAC Address Defines the source MAC address Frame Direction Select the incoming/outgoing packet interface WAN Interfaces Applies the filter to selected bridge PVCs. -
Page 48: Url Filter
See below for field descriptions. Click Save/Apply to add a time restriction. User Name: A user-defined label for this restriction. Browser's MAC Address: MAC address of the PC running the browser. Other MAC Address: MAC address of another LAN device. Days of the Week: The days the restrictions apply. -
Page 49: Quality Of Service
Enter the URL address and port number then click Save/Apply to add the entry to the URL filter. URL Addresses begin with “www”, as shown in this example. A maximum of 100 entries can be added to the URL Filter list. Tick the Exclude radio button to deny access to the websites listed. -
Page 50: Queue Configuration
QoS and DSCP Mark are defined as follows: Quality of Service (QoS): This provides different priority to different users or data flows, or guarantees a certain level of performance to a data flow in accordance with requests from Queue Prioritization. Default Differentiated Services Code Point (DSCP) Mark: This specifies the per hop behavior for a given flow of packets in the Internet Protocol (IP) header that do not match any other QoS rule. -
Page 51: Qos Classification
Queue Configuration Status: Enable/Disable the Queue entry. Queue: Assign the entry to a specific network interface (QoS must be enabled). Queue Precedence: Configure precedence for the Queue entry. Lower integer values for precedence imply higher priority for this entry relative to others. 6.6.3 QoS Classification The network traffic classes are listed in the following table. - Page 52 Field Description Traffic Class Name Enter a name for the traffic class. Rule Order Last or null are the only options. Rule Status Disable or enable the rule. Assign Classification The queue configurations are presented in this format: Queue “Interfacename&Prece P&Queue Q” where P and Q are the Precedence and Queue Key values for the corresponding Interface as listed on the Queue Config screen.
-
Page 53: Routing
Field Description SET-1 Protocol TCP, TCP/UDP, UDP, or ICMP. Differentiated The selected Code Point gives the corresponding priority to Services Code Point the packets that satisfies the rules set below. (DSCP) Check Static IP or DHCP ID Select IP Address, Vendor Class ID (DHCP Option 60), or drop-down box User Class ID (DHCP Option 77) Source IP Address... -
Page 54: Default Gateway
6.7.1 Default Gateway If the Enable Automatic Assigned Default Gateway checkbox is selected, the router will accept the first received default gateway assignment from one of the PPPoA, PPPoE or MER (DHCP enabled) PVC(s). If the checkbox is not selected, enter the static default gateway AND/OR a WAN interface. -
Page 55: Rip
Click the Add button to display the following screen. Enter Destination Network Address, Subnet Mask, Gateway IP Address, and/or WAN Interface. Then click Save/Apply to add the entry to the routing table. 6.7.3 To activate RIP, select the Enabled radio button for Global RIP Mode. To configure an individual interface (PVC), select the desired RIP Version and Operation, and then select the Enabled checkbox ... -
Page 56: Dns
You must reboot the router to make the new configuration effective. 6.8.2 Dynamic DNS The Dynamic DNS service allows you to map a dynamic IP address to a static hostname in any of many domains, allowing the CT-5072T to be more easily accessed from various locations on the Internet. - Page 57 To add a dynamic DNS service, click Add. The following screen will display. Consult the table below for field descriptions. Field Description D-DNS provider Select a dynamic DNS provider from the list Hostname Enter the name for the dynamic DNS server Interface Select the interface (PVC) from the list Username...
-
Page 58: Dsl
6.9 DSL The DSL Settings screen allows for the selection of DSL modulation modes. For optimum performance, the modes selected should match those of your ISP. DSL Mode Data Transmission Rate - Mbit/s (Megabits per second) G.Dmt Downstream: 12 Mbit/s Upstream: 1.3 Mbit/s G.lite Downstream:... -
Page 59: Certificate
6.10 Certificate A certificate is a public key, attached with its owner’s information (company name, server name, personal real name, contact e-mail, postal address, etc) and digital signatures. There will be one or more digital signatures attached to the certificate, indicating that these entities have verified that this certificate is valid. - Page 60 Field Description Certificate Name A user-defined name for the certificate. Common Name Usually, the fully qualified domain name for the machine. Organization Name The exact legal name of your organization. Do not abbreviate. State/Province Name The state or province where your organization is located. It cannot be abbreviated.
-
Page 61: Trusted Ca
6.10.2 Trusted CA CA is an abbreviation for Certificate Authority, which is a part of the X.509 system. It is itself a certificate, attached with the owner information of this certificate authority; but its purpose is not encryption/decryption. Its purpose is to sign and issue certificates, in order to prove that these certificates are valid. -
Page 62: Chapter 7 Diagnostics
Chapter 7 Diagnostics The Diagnostics menu provides feedback on the connection status of the CT-5072T. The basic tests (no PVC configured) are described in the table below. If a test displays a fail status, click the Test button to retest and confirm the error. If the... -
Page 63: Chapter 8 Management
Chapter 8 Management The Management menu has the following maintenance functions and processes: 8.1 Settings 8.2 System Log 8.3 SNMP Agent 8.4 TR-069 Client 8.5 Internet Time 8.6 Access Control 8.7 Update Software 8.8 Save and Reboot 8.1 Settings This includes Backup Settings, Update... -
Page 64: Restore Default
PC IP configuration to match your new settings. NOTE: This entry has the same effect as the Reset button. The CT-5072T board hardware and the boot loader support the reset to default. If the Reset button is continuously pressed for more than 5 seconds, the boot loader... -
Page 65: System Log
8.2 System Log This function allows a system log to be kept and viewed upon request. Follow the steps below to configure, enable, and view the system log. STEP 1: Click Configure System Log, as shown below (circled in Red). STEP 2: Select desired options and click Save/Apply. - Page 66 “Emergency” down to this configured level will be recorded to the log buffer on the CT-5072T SDRAM. When the log buffer is full, the newer event will wrap up to the top of the log buffer and overwrite the old event.
-
Page 67: Snmp Agent
8.3 SNMP Agent Simple Network Management Protocol (SNMP) allows a management application to retrieve statistics and status from the SNMP agent in this device. Select the Enable radio button, configure options, and click Save/Apply to activate SNMP. Options Description SNMP Agent Use the radio buttons to Enable or Disable the SNMP Agent Read Community Default is “public”... - Page 68 Option Description Inform Disable/Enable TR-069 client on the CPE. Inform Interval The duration in seconds of the interval for which the CPE MUST attempt to connect with the ACS and call the Inform method. ACS URL URL for the CPE to connect to the ACS using the CPE WAN Management Protocol.
-
Page 69: Internet Time
NTP timeserver. 8.6 Access Control 8.6.1 Services The Service Control List provides access options to the CT-5072T over the LAN or WAN. To enable a service, tick its checkbox under LAN or WAN and click Save/Apply. -
Page 70: Ip Addresses
NOTES: The WAN column only appears if a PVC connection is configured. For a quick introduction to SSH clients consult Appendix 8.6.2 IP Addresses This option limits access to the router by IP address. When Access Control Mode is enabled, only the IP addresses listed here can access the router. Before enabling Access Control Mode, configure the IP addresses by clicking the Add button. -
Page 71: Passwords
Passwords This screen is used to configure the user account access passwords for the device. Access to the CT-5072T is controlled through the following three user accounts: root - this has unrestricted access to change and view the configuration. -
Page 72: Save And Reboot
STEP 1: Obtain an updated software image file from your ISP. STEP 2: Enter the path and filename of the firmware image file in the Software File Name field or click the Browse button to locate the image file. STEP 3: Click the Update Software button once to upload and install the file. NOTE: The update process will take about 2 minutes to complete. -
Page 73: Appendix A - Firewall
Appendix A – Firewall STATEFUL PACKET INSPECTION Refers to an architecture, where the firewall keeps track of packets on each connection traversing all its interfaces and makes sure they are valid. This is in contrast to static packet filtering which only examines a packet based on the information in the packet header. - Page 74 Example 2: Filter Name : Out_Filter2 Protocol : UDP Source Address : 192.168.1.45 Source Subnet Mask : 255.255.255.0 Source Port : 5060:6060 Dest. Address : 172.16.13.4 Dest. Subnet Mask : 255.255.255.0 Dest. Port : 6060:7070 This filter will drop all UDP packets coming from the LAN with IP Address / Subnet Mask of 192.168.1.45/24 and a source port range of 5060 to 6060, destined to 172.16.13.4/24 and a destination port range of 6060 to 7070.
- Page 75 Example 2: Filter Name : In_Filter2 Protocol : UDP Source Address : 210.168.219.45 Source Subnet Mask : 255.255.0.0 Source Port : 5060:6060 Dest. Address : 192.168.1.45 Dest. Sub. Mask : 255.255.255.0 Dest. Port : 6060:7070 This rule will ACCEPT all UDP packets coming from WAN interface mer_0_35/nas_0_35 with IP Address/Subnet Mask 210.168.219.45/16 and a source port in the range of 5060 to 6060, destined to 192.168.1.45/24 and a destination port in the range of 6060 to 7070.
- Page 76 DAYTIME PARENTAL CONTROL This feature restricts access of a selected LAN device to an outside Network through the CT-5072T, as per chosen days of the week and the chosen times. User Name: Name of the Filter. Browser’s MAC Address: Displays MAC address of the LAN device on which the browser is running.
-
Page 77: Appendix B - Pin Assignments
Appendix B – Pin Assignments LINE PORT (RJ11) Definition Definition ADSL_TIP ADSL_RING LAN Port (RJ45) Definition Definition Transmit data+ Transmit data- Receive data- Receive data+... -
Page 78: Appendix C - Specifications
Appendix C – Specifications Hardware Interface RJ-11 X 1 for ADSL2+ RJ-45 X 1 for LAN Power Switch X 1 Reset Button X 1 WAN Interface ITU-T G.992.5/G.992.3/G.992.1, ANSI T1.413 Issue 2 G.992.5 (ADSL2+) ..Downstream : 24 Mbps Upstream : 1.3 Mbps G.992.3 (ADSL2)...Downstream : 12 Mbps Upstream : 1.3 Mbps G.DMT ......Downstream : 8 Mbps Upstream : 832 Kbps Annex M... - Page 79 Relative humidity ........5 ~ 95% (non-condensing) Dimensions ........92 mm (W) x 34 mm (H) x 114 mm (D) Kit Weight (1*CT-5072T, 1*RJ11 cable, 1*RJ45 cable, 1*power adapter, 1*CD-ROM) = 0.65 kg Certifications ............FCC Part 15 class B, CE NOTE:...
-
Page 80: Appendix D - Ssh Client
Appendix D – SSH Client Unlike Microsoft Windows, Linux OS has a ssh client included. For Windows users, there is a public domain one called “putty” that can be downloaded from here: http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html To access the ssh client you must first enable SSH access for the LAN or WAN from the Management ...