Related Manuals for Telstra 877W
Summary of Contents for Telstra 877W
- Page 1 Call the telstra Business teChniCal helpdesk on 1800 066 594 visit telstra.Com/Business cisco user guide apr 10 XXXXXX code...
- Page 2 Welcome to telstra Business BroadBand 1. A bout this user Guide – About security device MAnAGer (sdM) 2. thinGs to note before you stArt equipment – cisco® 877W and 1812 router 3. MiniMuM systeMs requireMents 4. security device MAnAGer you have purchased telstra business broadband equipment extras – cisco® customer 5. WAys to Access the sdM off cd or Gui premises equipment. the cisco user guide will help you to configure and setup your new router, so you can get more out of your telstra business broadband service. 6. i nstAllinG the security device MAnAGer (sdM version 2.5) 7. lAunchinG sdM 8. instAllinG cisco vPn client 9. confiGurinG your router usinG sdM 10. c oMMonly requested feAtures for business broAdbAnd equiPMent extrAs – cisco cPe 11. “hoW to” for eAch feAture...
-
Page 3: Operating System
(business edition) (confirm via start > settings > this, please consult your it specialist, your telstra business broadband control Panel > network > W indows® xP Professional it will guide you through the basic steps Account representative or call Protocols orconfiguration) equipment kit. W indows 2003 server to set up the configuration and features 1800 655 744 for more information 9 Mb hard disk space (standard edition) for the cisco 877W or 1812 router to help make the set up of the basic on our range of it support options, r AM: W indows 2000 Professional supplied with your telstra business and standard configurations easier, available through the business with service Pack 4 – 1 28 Mb for Windows xP broadband equipment extras. we recommend customers familiarise support extras (256 Mb recommended) Windows 2000 Advanced server themselves with the security device is not supported – 6 4 Mb for Windows 2000... - Page 4 MiniMuM systeMs requireMents c. cisco vPn client 4. s ecurity device MAnAGer the following table indicates the system requirements to install the cisco vPn client on each of the supported platforms. the security device Manager is coMPuter oPerAtinG systeM requireMents a software program provided by cisco to allow users to configure router ios, computer with a Pentium®-class W indows vista (all released M icrosoft tcP/iP installed security and network connection processor or greater, including tablet Pc versions) (confirm via start > settings > control Panel > network > features via a web based Graphical (cisco vPn client version 5.0.03.560) W indows xP Protocols or configuration). user interface (Gui). W indows 2000 5 0 Mb hard disk space t abletPc 2004/2005 r AM: Note for all Windows operating – 1 28 Mb for Windows xP systems, only 32-bit platforms (256 Mb recommended) are supported...
- Page 5 6. i nstAllinG the security device MAnAGer (sdM version 2.5) it is recommended that users install the security device Manager directly to the Pc or desktop. you are now ready to install: STEpS: 5. s elect I accept the terms of the license agreement 11.click Install. 12.click Finish after successful installation – as shown above. as shown above. 1. insert the sdM cd into your cd drive. 6. click Next. 2. download the sdM zip file to the Pc. 3. e xtract the sdM zip file. Go to sdM installer folder and click setup.exe. the installation wizard will start as shown above. 4. click Next. 7. select This Computer – as shown above 9. A ccept the default destination folder – as show above 8. click Next.
- Page 6 9. A pop up screen will now show with Warning – Security as above. click Yes. 2. e nter the Device Ip address of the router. 5. click Yes. telstra default shown above 10.10.10.1. 3. s elect This device has HTTpS enabled and I want to use it. 4. click Launch. you will be prompted to enter the user name and password. 6. e nter User name and password. A default administrator user name and password “advantage/advantage” has...
- Page 7 15. select port address Translation. Circuit Identifier (vci). the vPi and vci are obtained from 7. c lick Next. 13. e nter the Username and password from the 16. L aN interface to be translated – click drop down menu the Configuration advice from telstra. Configuration advice provided by telstra. and select your lAn interface. 9. c lick Next (if successful, move on to step 10). 14. c lick Next. 17. c lick Next.
-
Page 8: Configuring Static Route
3. click Edit Interface/Connection. 3. s elect Edit NaT Configuration tab. 4. highlight Fastethernet0 interface. 4. c lick Designated NaT Interfaces. 5. c lick Enable. the status column should now change from Down to Up. 6. click Edit Interface Connection tab. 7. c lick and highlight interface and click Edit 8. fill in the details as shown above and click OK. please note: the Edit tab may not always be active. please note: the above Ip address is used as an example only if this does not work, please use/follow the create – the actual static Ip address is detailed in your configuration connection wizard. email for telstra business broadband. - Page 9 confiGurinG your router usinG sdM the following dialogue box will appear: the following screen will be provided: 7. c lick Save. 2. dynamic Port Address translation complete the following fields: 10. action. 5. s elect appropriate boxes for trusted and untrusted 11. Description (optional). interfaces – as shown above. 12. Source Host/Network source. Please note: the above WAn interface is provided as STEpS: an example for ethernet set up (ie FastEthernet0), 13. protocol and Service. 1. c lick Configure – as shown above. for Adsl customers please use dialler0. 14. select Ip in the Ip protocol. 2. c lick NaT from the Tasks section. 16. c lick OK. 6. c lick OK.
- Page 10 confiGurinG your router usinG sdM 5. select Static – as shown above. 6. i n the Direction drop down menu – select From inside to outside. 7. i n the Translate from Interface enter the Ip address and subnet mask of the Web sever on the lAn. 8. i n Translate to interface, enter the public iP address in the Ip address field. 9. e nsure that the redirect port is selected. 10. s elect TCp. 11. Original port and Translated port are set to 80. 12. c lick OK. 13. c lick Save.
- Page 11 9. c lick File and Write (file toolbar) to start up configure – THIS IS VErY IMpOrTaNT aND IS rEQUIrED TO SaVE THE CHaNGES INTO THE rOUTEr IN CaSE OF a pOWEr FaILUrE/pOWEr CYCLE. 15. c lick Save. f. A dding/modifying/removing 2. removing telstra Administrator Account please note: username and Password the following prompt – SDM Warning will be shown, this will 1. Adding usernAMe and Password warn the administrator. before this default account is deleted,...
- Page 12 9. i nstAllinG cisco vPn client STEpS: 4. A License agreement will appear. Cisco VpN install successful: 9. the installation will start as shown above. 1. d ownload the cisco vPn client to the Pc (this feature/ 5. select I accept the license agreement. 10. c lick Finish when the installation is complete. client is only available to customers who have purchased 6. click Next. our router support service extra). 2. e xtract the cisco client zip file. Go to cisco vPn client installer folder and click setup.exe. the installation wizard will start as shown above. 3. click Next. you will be prompted to reboot your computer for installation to take effect: 11. to reboot computer, click Yes.
-
Page 13: Important Note
10. c oMMonly requested feAtures for telstrA business broAdbAnd equiPMent extrAs – cisco cPe A. Wireless b. r emote Access d. d ynamic host control f. n etwork Address translation Protocol (dhcP) (nAt)/Port Address Wired equivalent Privacy (WeP) and the routers support various remote translation (PAt) Wifi Protected Access (WPA) are the access applications, such as sdM, telnet, the dhcP protocol allows a server to two security protocol options available and ssh to allow remote management. dynamically assign iP addresses and the concept of nAt and PAt allows for encrypting wireless communications dns addresses to the Pc tcP/iP software internal devices with unregistered sdM can either use http or https. on the router. stack. the iP addresses are assigned (private) address to access the internet however, the sdM software needs from an arbitrary iP address pool. by having the router re-write and We recommend customers use WPA to be installed on the Pc. replace the internal address with an – the stronger of the two encryption... - Page 14 11. “hoW to” for eAch feAture A. c isco vPn client configuration b. c onfiguring an iPsec vPn on the router this feature is available through telstra if you have purchased this section shows how to configure the router to act as an the telstra business broadband extras ‘router support service iPsec vPn termination point to allow remote users who have (rss)’. for more information on this telstra business installed cisco vPn client on their personal computer, to broadband extras, please contact your telstra Account securely connect to the corporate local area network. this representative or call 1800 655 744. feature is available through telstra if you have purchased the telstra business broadband extras ‘router support service (rss)’. for more information on this telstra business broadband extras, please contact your telstra Account representative or call 1800 655 744. STEpS: 1. c lick Configure. 3. Connection Entry – is the name of this 2. c lick VpN in the Tasks section. particular profile. 3. c lick Easy VpN Server.
- Page 15 “hoW to” for eAch feAture you will be provided with the following screen. 10. c lick Next. 11. c lick Next. 17. c lick add. 18. Name of This Group – define remote access policies that are common to all specific users. this group name must match the name in section 11(A) step 6. 19. pre-shared Keys – password for device authentication. 20. pool Information – range of iP addresses that can be allocated to iPsec vPn clients. this address Must be unique. 21. c lick OK. 14. select Enable User authentication. 12. select Local. 13. c lick Next. 15. s elect Local Only. 16. c lick Next.
- Page 16 “hoW to” for eAch feAture c. other iPsec vPn settings 1. dns/Wins the dns/Wins configuration page allows customers who have internal servers within the corporate network which need to be assigned to the iPsec vPn user so they can resolve private host or device names. STEpS: 13. c lick Yes. 1. c lick DNS/WINS tab. 2. s elect Configure DNS Servers and fill in the required fields. 3. c heck Configure WINS Servers and fill in the required fields. 2. split tunneling split tunneling allows administrators to configure the router to allow remote users (cisco vPn clients) to have secure access to the company network while at the same In the action dropdown box: time allowing unsecure access to the internet. 8. c lick Select an action and select protect the traffic. split tunneling can pose a security risk when configured.
- Page 17 “hoW to” for eAch feAture d. Wireless radio express setup: configuring Wireless interface: router Wireless configuration 6. c lick Wireless radio Express Setup. 7. s elect Default for Optimize radio Network for. 8. s elect Enable for aironet Extensions. 9. c lick apply. please note: the Wireless hostname is provided as an example only. 18. c lick apply. 14. c lick Wireless Interface. STEpS: 15. c lick radio 802.11G. 1. c lick Configure.
- Page 18 “hoW to” for eAch feAture configuring Wireless security: – ssid Manager you have successfully connected your client/Pc to the Wireless connection as shown. 23. c lick Wireless Security. 24. c lick SSID Manger. 25. c lick BBE from Current SSID List. the bbe ssid is an example. the user should select their custom ssid as defined in step xii – Fill in the following fields. 26. s elect Open authentication in authentication setting. 3. e nter the WPA shared key. this is the same key as entered from the drop down menu, select TKIp. in step 27 (opposite) – Authenticated key management. 27. u nder authenticated Key Management: 4. r e-enter the value in Confirm network key. a. K ey Management, select Mandatory from the drop down menu.
- Page 19 Important notice to all customers selecting “High” select this option if you do not need to track use of these or “Medium” Firewall policy levels. applications on the network. it is recommended that the administrator preview the commands before applying the firewall polices. Activating your cisco device will constantly download the information t he router does not identify application-specific traffic. the firewall feature without familiarity with cisco ios firewall it requires to enforce access controls, which may result in increased returns tcP and udP traffic on sessions initiated inside polices can cause disconnection and lock the administrator downloads which count towards the usage of your telstra business the firewall. out of the router. broadband plan . this is more likely to occur if you have set your firewall/security policy to either “High” or “Medium” – please consult your it specialist for further advice. high security: select this option if you want to prevent use of these applications on the network. t he router identifies inbound and outbound instant 5. c lick Next. Messaging and drops it.
-
Page 20: Split Tunneling
Adsl Asymmetric digital subscriber line 1. the 1812 router supplied is non wireless. ethernet business digital subscriber line 2. this guide does not step through the modification to command line interface (cli). telstra business it support services – PAyG options, 3. Additional fees and charges may apply. support extras it services on demand 4. this guide does not provide instructions on how to modify the cli. 5. some support exclusions apply. command line interface 6. n ot available unless router support service is purchased. telstra does not support faults relating to customer initiated iPsec vPn customer Premise equipment set up, for support of this feature please contact your it specialist or contact us on 1800 655 744 to find out more about our digital subscriber line telstra business support extras services. domain name system (server) 7. t he vPn client supports both the Windows 2000 server and the Windows 2003 server operating systems. 8. excess usage charges will apply if subscribed plan is exceeded. dhcP dynamic host control Protocol internetwork operating system iP Address internet Protocol Address iPsec...