Verizon Westell 327W Wireless Gateway Router Manual
Verizon Westell 327W Wireless Gateway Router Manual
Verizon Westell 327W Wireless Gateway Router Manual
030-300444 Rev. A
User Guide
TABLE OF CONTENTS
1. 2. 3. PRODUCT DESCRIPTION ..................................................................................................................................4 SAFETY INSTRUCTIONS ...................................................................................................................................4 REGULATORY INFORMATION ........................................................................................................................5 3.1 3.2 4. 5. FCC Compliance Note...............................................................................................................................5 Canada Certification Notice.......................................................................................................................6
NETWORKING REQUIREMENTS .....................................................................................................................7 HARDWARE FEATURES....................................................................................................................................8 5.1 5.2 5.3 LED Indicators...........................................................................................................................................8 Cable Connectors and Switch Locations ...................................................................................................9 Connector Descriptions..............................................................................................................................9
6.
INSTALLING THE HARDWARE......................................................................................................................10 6.1 6.2 6.3 6.4 Installation Requirements ........................................................................................................................10 Before you begin......................................................................................................................................10 Microfilters ..............................................................................................................................................10 Hardware Installations .............................................................................................................................10
7.
ACCESSING VERSALINK ................................................................................................................................13 7.1 7.2 Logging on to the Network......................................................................................................................13 Changing the Password............................................................................................................................14
8.
CONFIGURING VERSALINK FOR INTERNET CONNECTION ...................................................................16 8.1 8.2 8.3 8.4 Confirming Your DSL Connection..........................................................................................................16 Setting Up an Account Profile .................................................................................................................18 Establishing a PPP Session ......................................................................................................................21 Disconnecting a PPP Session...................................................................................................................23
9.
10. SETTING UP ADVANCED CONFIGURATION ..............................................................................................29 11. HOME ..................................................................................................................................................................30 11.1 11.2 Adding Account Profiles .........................................................................................................................30 Editing Account Profiles..........................................................................................................................32
13. CONFIGURATION .............................................................................................................................................35 13.1 13.2 Single Static IP Single IP Address PassThrough ..................................................................................35 Service Configuration ..............................................................................................................................38 2 December 2005 Table of Contents
030-300444 Rev. A
VersaLink Gateway (B90-327W15-06) Firewall Configuration.............................................................................................................................48 Wireless Configuration ............................................................................................................................52 Advanced LAN........................................................................................................................................61 Advanced WAN.......................................................................................................................................75
14. SETTING UP ADVANCED SERVICE CONFIGURATION...........................................................................106 14.1 14.2 14.3 14.4 14.5 14.6 14.7 Port Forwarding Ranges of Ports...........................................................................................................107 Adding Port Forwarding Ports ...............................................................................................................107 Port Forwarding Trigger Ports ...............................................................................................................108 Adding Local Trigger Ports ...................................................................................................................109 Static NAT.............................................................................................................................................110 Enabling Static NAT..............................................................................................................................111 Disabling Static NAT.............................................................................................................................113
15. MAINTENANCE...............................................................................................................................................114 15.1 15.2 15.3 15.4 15.5 Backup/Restore......................................................................................................................................114 Firewall Log ..........................................................................................................................................115 Administrative Password .......................................................................................................................117 Remote Access.......................................................................................................................................118 Update Device .......................................................................................................................................120
16. TROUBLESHOOTING .....................................................................................................................................125 16.1 16.2 16.3 16.4 16.5 System Self Tests...................................................................................................................................125 Diagnostic Logs .....................................................................................................................................127 Statistics.................................................................................................................................................130 Wireless Statistics ..................................................................................................................................132 Status .....................................................................................................................................................134
17. NAT SERVICES................................................................................................................................................141 18. HELP..................................................................................................................................................................145 19. TECHNICAL SUPPORT INFORMATION ......................................................................................................160 20. PRODUCT SPECIFICATIONS.........................................................................................................................160 21. SOFTWARE LICENSE AGREEMENT............................................................................................................161 22. PUBLICATION INFORMATION.....................................................................................................................163
030-300444 Rev. A
User Guide
1. PRODUCT DESCRIPTION
The Westell VersaLink Gateway provides reliable, high-speed, Internet access to your existing small office phone line. VersaLink is capable of data rates hundreds of times faster than a traditional analog modem. But unlike analog modems, VersaLink allows you to use the same phone line for simultaneous voice/fax communications and highspeed Internet access, eliminating the need for dedicated phone lines for voice and data needs. VersaLink supports a variety of networking interfaces such as wireless 802.11b/g, ADSL, Ethernet and the following optional features: ETHERNET1: Alternate WAN uplink port Layer w/2 QOS with VLAN tagging HotSpot Simultaneous public/private network support
Hereafter, the Westell VersaLink Gateway will be referred to as VersaLink, Gateway, or modem.
2. SAFETY INSTRUCTIONS
Never install any telephone wiring during a lightning storm. Never install telephone jacks in wet locations unless the jack is specifically designed for wet locations. Never touch non-insulated telephone wires or terminals unless the telephone line has been disconnected at the network interface. Use caution when installing or modifying telephone lines.
WARNING Risk of electric shock. Voltages up to 140 Vdc (with reference to ground) may be present on telecommunications circuits.
030-300444 Rev. A
User Guide
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. The antennas used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must be co-located or operating in conjunction with any other antenna or transmitter. End users and installers must be provided with antenna installation instructions and transmitter operating conditions for satisfying RF exposure. Modifications made to the product, unless expressly approved by Westell Inc., could void the users rights to operate the equipment. PART 68 COMPLIANCE REGISTRATION This equipment is designated to connect to the telephone network or premises wiring using a compatible modular jack that is Part 68 compliant. An FCC compliant telephone cord and modular plug is provided with the equipment. See the Installation Information section of this User Guide for details. A plug and jack used to connect this equipment to the premises wiring and telephone network must comply with the applicable FCC Part 68 rules and requirements adopted by the ACTA. A compliant telephone cord and modular plug is provided with this product. It is designed to be connected to a compatible modular jack that is also compliant. See installation instruction for details. If this terminal equipment (Model 327W) causes harm to the telephone network, the telephone company may request you to disconnect the equipment until the problem is resolved. The telephone company will notify you in advance if temporary discontinuance of service is required. If advance notification is not practical, the telephone company will notify you as soon as possible. You will be advised of your right to file a complaint with the FCC if you believe such action is necessary. If you experience trouble with this equipment (Model 327W), do not try to repair the equipment yourself. The equipment cannot be repaired in the field. Contact your Internet service provider (ISP) or contact the original provider of your DSL equipment. 030-300444 Rev. A 5 December 2005 Section 3 Regulatory Information
User Guide
The telephone company may make changes to their facilities, equipment, operations, or procedures that could affect the operation of this equipment. If this happens, the telephone company will provide advance notice in order for you to make the modifications necessary to maintain uninterrupted service. If your home has specially wired alarm equipment connected to the telephone line, ensure that the installation of this equipment (Model 327W) does not disable your alarm equipment. If you have questions about what will disable alarm equipment, consult your telephone company or a qualified installer. This equipment cannot be used on public coin phone service provided by the telephone company. Connection of this equipment to party line service is subject to state tariffs.
Users should not attempt to make such connections themselves, but should contact the appropriate electrical inspection authority, or electrician, as appropriate. 030-300444 Rev. A 6 December 2005 Section 3 Regulatory Information
User Guide
4. NETWORKING REQUIREMENTS
The following system specifications are required for optimum performance of the VersaLink via 10/100 Base-T or Wireless installations. CONNECTION TYPE MINIMUM SYSTEM REQUIREMENTS Pentium or equivalent class or higher machines Microsoft Windows (98 SE, ME, 2000, NT 4.0, or XP) Macintosh OS X, or Linux installed 64 MB RAM (128 MB recommended) 10 MB of free hard drive space TCP/IP Protocol stack installed 10/100 Base-T Network Interface Card (NIC) Computer Operating System CD-ROM on hand Pentium or equivalent class or higher machines Microsoft Windows (98 SE, ME, 2000, or XP) or Macintosh OS X installed Computer Operating System CD-ROM on hand Internet Explorer 4.x or Netscape Navigator 4.x or higher 64 MB RAM (128 MB recommended) 10 MB of free hard drive space An available IEEE 802.11b/g PC adapter
ETHERNET
030-300400 Rev. B
User Guide
POWER
Solid Green E1, E2, E3, E4 (Ethernet LAN) Flashing Green OFF WIRELESS Solid Green Flashing Green OFF Solid Green Flashing Green OFF Solid Green
DSL
NOTE: Safe Boot is reflected when the Power and Internet LEDs are both red and all other LEDs are off.
030-300400 Rev. B
User Guide
Note: When VersaLink is configured for uplink mode (that is, you have selected ETHERNET PORT 1 via the WAN configuration settings), the port labeled ETHERNET1 on the rear panel functions as a WAN uplink port and Ethernet LAN connection is limited to ports E2, E3, and E4. However, when VersaLink is configured for DSLATM PORT via the WAN configuration settings, all four Ethernet ports on the rear panel may be used for Ethernet LAN connection. In DSLATM PORT mode, VersaLink will use DSL and wireless connection only.
Reset Button
ETHERNET
DC 12V
POWER
Barrel connector
Wireless
ANTENNA
030-300400 Rev. B
User Guide
IMPORTANT: Please wait until you have received notification from your Internet service provider (ISP) that your DSL line has been activated before installing your VersaLink and software.
6.3 Microfilters
ADSL signals must be blocked from reaching each telephone, answering machine, fax machine, computer modem or any similar conventional device. Failure to do so may degrade telephone voice quality and ADSL performance. Install a microfilter if you desire to use the DSL-equipped line jack for telephone, answering machine, fax machine or other telephone device connections. Microfilter installation requires no tools or telephone rewiring. Just unplug the telephone device from the baseboard or wall mount and snap in a microfilter, next snap in the telephone device. You can purchase microfilters from your local electronics retailer, or contact the original provider of your DSL equipment.
030-300400 Rev. B
10
User Guide
2.
3.
Congratulations! You have completed the Ethernet hardware installation. Proceed to section 7, Accessing VersaLink, to access VersaLinks web pages.
030-300400 Rev. B
11
User Guide
Ensure that an 802.11b/g wireless network adapter has been installed in each PC on your wireless network. Install the appropriate drivers for your Wireless IEEE802.11b or IEEE802.11g adapter. Make sure the SMA antenna connector is on tight, then orient the antenna to the proper configuration. Connect the DSL phone cable from the connector marked on the rear panel of VersaLink to the DSLequipped telephone line jack on the wall. IMPORTANT: Do not use a DSL filter on this connection. You must use the phone cord that was provided with the VersaLink kit. Connect the power supply cord to the power connector marked DC 12V on the rear panel of VersaLink. Plug the other end of the power supply into a wall socket, and then turn on the power switch (if it is not already on). Check to see if the DSL LED is solid Green. Solid green indicates that VersaLink is functioning properly. Check to see if VersaLinks Wireless LED is solid green. Solid green indicates that the Wireless interface is functioning properly. Check to see if the Internet LED is solid green. Solid green indicates that the Internet link has been established.
5. 6. 7. 8.
Congratulations! You have completed the Wireless installation. Proceed to section 7, Accessing VersaLink, to access VersaLinks web pages.
Figure 2. Connection via Wireless 030-300400 Rev. B 12 December 2005 Section 6 Installing the Hardware
User Guide
http://192.168.1.1
After you type the IP address, press Enter on your keyboard. The following screen will be displayed. Type the default user name (which is admin) and the default password (which is password) in the fields provided. Click OK.
admin password
030-300400 Rev. B
13
User Guide
Type admin or the name of your choice. Type a new password. (Do not type the word password here.)
If you clicked on change, the following pop-up screen will be displayed. Click OK.
030-300400 Rev. B
14
User Guide
If you clicked OK in the preceding pop-up screen, the following screen will be displayed. Now proceed to section 8 to configure VersaLink for Internet connection. NOTE: If VersaLink has established a DSL connection and if you are connecting via DHCP, you may now browse the Internet. Follow the instructions provided by your Internet service provider. If you are connecting via PPP, proceed to section 8 to configure VersaLink for Internet connection. In this screen, VersaLink has established a DSL connection, and the connection rates are displayed. DHCP customers may now browse the Internet. PPP customers should proceed to section 8 for instructions on configuring VersaLink for Internet connection.
030-300400 Rev. B
15
User Guide
If you do not have a DSL sync, first check your physical connections (if needed, refer to section 6, Installing the Hardware). Then, if the problem persists, contact your ISP for further instructions. NOTE: If no DSL sync is established, the connection button in this screen will not be displayed.
030-300444 Rev. A
User Guide
The following screen shows the DSL connection rate with values that indicate a successful DSL sync has been established. The connection rate values represent the transmission speed of your DSL line. (VersaLink may take time to report these values.) After you have confirmed your DSL connection, click the Connect button to set up your account profile. NOTE: VersaLink will handle transmission rates up to 8 Mbps.
030-300444 Rev. A
User Guide
If you clicked profile editor in the preceding screen, the following screen will be displyed. Enter the User name and Password that you used in the Change Password screen in section 7.2, and then click OK to continue.
030-300444 Rev. A
User Guide
If you clicked OK, the folowing screen will be displayed. The screen allows you to set up your account profile. The following account parameters are required for your Internet connection: Connection Name-the Connection Name is a word or phrase that you use to identify your account. (You may enter up 64 characters in this field.) Account ID-the Account ID is provided by your ISP. (You may enter up 255 characters in this field.) Account Password-the Account Password is provided by your ISP. (You may enter up 255 characters in this field.)
030-300444 Rev. A
User Guide
Type your account parameters in the fields provided. Next, select the type of connection setting (Manual, On Demand, Always On) that you want to use for your default service profile. Then, click save to save the settings. Manual: Select this option if you want to manually establish your PPP session. On Demand: Select this option if you want VersaLink to automatically re-establish your PPP session on demand anytime your PC requests Internet activity (for example, browsing the Internet, email, etc.). When you have traffic, this feature may cause a delay. Always On: Select this option if you want VersaLink to automatically establish a PPP session when you log on or if the PPP session goes down.
If you clicked save, the following Connection Overview screen will be displayed. Now proceed to section 8.3 to establish your PPP session.
030-300444 Rev. A
User Guide
030-300444 Rev. A
User Guide
After a PPP session has been established, the PPP Status will display UP. Congratulations! You may now browse the Internet.
For example, if you want to visit Westells home page, type http://www.westell.com in your browsers address window, and then press Enter on your keyboard.
030-300444 Rev. A
User Guide
If you clicked the Disconnect button in the preceding Connection Overview screen, the PPP Status should display DOWN. This means that you no longer have a PPP session. However, your DSL session will not be affected. When you are ready to end your DSL session, simply turn off VersaLink via the power switch on VersaLinks rear panel.
When you are ready to establish a PPP session, click the connect button. (If you have previously turned off VersaLink, first turn on VersaLink, and then log on to your account profile to establish a PPP session.) NOTE: When you are ready to exit VersaLinks interface, click on the X (close) in the upper-right corner of the window. Closing the window will not affect your PPP Status (your PPP session will not be disconnected). You must click on the disconnect button to disconnect your PPP session. When you are ready to restore this interface, launch your Internet browser and type http://192.168.1.1/ in the browsers address bar, and press Enter on your keyboard.
030-300444 Rev. A
User Guide
9. SETTING UP MACINTOSH OS X
This section provides instructions on how to use Macintosh Operating System 10 with VersaLink. Follow the instructions in this section to create a new network configuration for Macintosh OS X. ! NOTE: Macintosh computers must use VersaLinks Ethernet installation. Refer to section 6, (INSTALLING THE HARDWARE).
030-300444 Rev. A
24
User Guide
030-300444 Rev. A
25
User Guide
NOTE: The DHCP server provides this IP address. If this IP address is not displayed, check VersaLinks wiring connection to the PC. If necessary, refer to section 6 for hardware installation instructions.
030-300444 Rev. A
26
User Guide
The Enter Network Password screen will be displayed. You may now begin your network logon. Proceed to the Enter Network Password screen in section 7.1 of this User Guide for logon instructions.
030-300444 Rev. A
27
User Guide
The following sections explain the advanced features of VersaLink. [This Page Intentionally Left Blank]
030-300444 Rev. A
28
User Guide
030-300444 Rev. A
29
User Guide
11. HOME
As you navigate through the various screens of VersaLink, the name of the active page that you have selected will appear in the upper-left corner of the screen, as shown below. Please note that the actual values reported by your Gateway may differ from the values displayed in the screens.
If you have set up your account profile and established your PPP session, as discussed in section 8.3, Establishing a PPP Session, the following screen will be displayed if you click Home in the main menu.
Displays your DSL connection rate. This Connection Name is from the connection profile that you established in Section 8. UP = PPP session established DOWN = No PPP session established. CONNECT = Establish a PPP session DISCONNECT = Disconnect a PPP session This allows you to make changes to the profile that you created in Section 8.
User Guide
To add an account profile, click the Profile Editor button in Home screen; the New Connection screen will appear. Enter your profile information (the Account ID and Account password must be the same values that you entered in section 8.2) and then click New. Next, click OK in the Save new connection? pop-up screen to save your settings. If you do not want to save the new connection, click cancel in the pop-up screen. NOTE: NAT Profiles allow you to create specific service settings. A NAT Profile may be associated with a certain connection setting, or NAT services. This allows you to customize the profile for specific users. You may store up to eight unique user profiles in your VersaLink Gateway. Details on the New Connection screen are located at the end of this section.
After you have clicked OK in the Save new connection? pop-up screen, the following screen will be displayed. This screen displays the new profile My Connection0. IMPORTANT: Although you have added new profile, your Internet connection will be available only for the default profile, which you have set up in section 8.2. To establish a PPP session and browse the Internet using the new profile, you must first configure the new profile as the default account profile. To do this, click the radio button adjacent to the connection name that want to use as your default connection profile. Next click OK when asked Do you wish to change the Default Connection Profile?
030-300444 Rev. A
31
User Guide
Edit My Connection This field allows you to enter a new connection name of your choice (up to 64 characters). The account ID that you used in section 8, provided by your ISP. The account password that you used in section 8, provided by your ISP. Westell recommends that you use the Default parameter. Selecting this feature allows you to manually establish your PPP session. Selecting this feature allows the Gateway to automatically re-establish your PPP session on demand anytime your PC requests Internet activity (for example, browsing the Internet, email, etc.). When you have traffic, it may cause a delay. Selecting this feature allows the Gateway to automatically establish a PPP session when you log on, or if the PPP session goes down. Selecting this feature allows you to save the password for your new connection profile in VersaLink so that you will not have to reenter it in case of a reboot.
030-300444 Rev. A
32
User Guide
12. STATUS
Note: The actual values may differ from the values displayed in this screen.
DSL Connection Information This field will let you know if you have a DSL signal and the DSL rate at which you are connected. This field will show how much information was received (IN) or sent (OUT) in packets. PPP = An IP address identifies your device on the Internet Primary DNS = Provided by your ISP Secondary DNS = Provided by ISP This field will display your Ethernet information that was received (IN) or sent (OUT) in 33 December 2005 Section 12 Status
VersaLink Gateway (B90-327W15-06) packets on your Ethernet port. This field will display your VPI and VCI values, which are provided by your ISP.
This field will display your firewall traffic in packets. Passed: Monitors information traffic that was successfully received (IN) or transmitted (OUT) in packets. Dropped: Monitors information traffic that was not successfully received (IN) or transmitted (OUT) due to your firewall settings. PPP Connection Information Connection Name This is from the connection profile that you established in section 8. Connection Duration This field will display how long your PPP session has been connected. Status This field will display the status of your PPP session. UP=Connected DOWN=Disconnected Number of Reconnects This field will display the number of attempts that were made to establish a PPP session.
12.2 About
The following screen will be displayed if you select About from the Status menu.
Note: The actual values may differ from the values displayed in this screen.
Model Number Serial Number MAC Address Software Version Software Model Description Boot Loader Configuration
VersaLink manufacturers model number. VersaLink manufacturers serial number. Media Access Controller (MAC) i.e., hardware address of this device. Version of Application Software. VersaLink application type. Product description. Version of boot loader software Proprietary configuration number of this device.
030-300444 Rev. A
34
User Guide
13. CONFIGURATION
030-300444 Rev. A
35
User Guide
Next, Select Single Static IP from the Configuration menu to confirm that Single Static IP has been enabled, as shown in the following screen.
IMPORTANT: After you enable Single Static IP, reboot your computer to allow the changes to take effect. NOTE: If you chose to enable User Configured PC, wait for the Gateway to reset, and then manually enter the WAN IP, Gateway, and Subnet mask addresses you obtained from your ISP into a PC. 030-300444 Rev. A 36 December 2005 Section 13 Configuration
User Guide
Next, select Single Static IP from the Configuration menu to confirm that Single Static IP is disabled, as shown in the following screen.
IMPORTANT: After you disable Single Static IP, reboot your computer to allow the changes to take effect.
030-300444 Rev. A
37
User Guide
Displays the NAT (Network Address Translation) services that you have selected. Drop down selection menu of NAT (Network Address Translation) service you can select to configure you VersaLink. Factory Default = Disable Enabling UPNP (Universal Plug and Play) allows automatic device discovery by your operating system.
030-300444 Rev. A
38
User Guide
NOTE: When you are ready to disable UPNP, uncheck the UPNP Enable box in the Service Configuration screen. If you click the UPNP Enable box in the Service Configuration screen, a check mark will appear in the box and the following pop-up screen will be displayed. Click OK.
If you clicked OK in the preceding screen, the following pop-up screen will be displayed. Click on OK to continue.
Note: To use the UPNP functionality in Versalink, your Windows XP operating system must also support UPNP. Please contact your computer manufacturer to verify that UPNP is enabled in your Windows XP operating system. If you clicked OK in the preceding screen, the following screen will be displayed. The Gateway will be reset automatically, and the new configuration will take effect.
After a brief delay, the home page will be displayed. Confirm that you have a DSL sync and that your PPP session displays UP. (If necessary, click the connect button to establish a PPP session). 030-300444 Rev. A 39 December 2005 Section 13 Configuration
User Guide
If you clicked new in the preceding Service Configuration screen, the Create new Service Profile? pop-up screen will be displayed. Click OK to begin creating your new service profile. Click Cancel if you do not want to create a new service profile.
030-300444 Rev. A
40
User Guide
If you clicked OK, the following screen will be displayed. Select A New Service Profile #1 from the Current Profile drop-down arrow.
If you selected A New Service Profile #1, the following screen will be displayed. This screen shows that you have chosen to create a new service profile. You may create up to four service profiles and attach an unlimited number of NAT services to each profile.
030-300444 Rev. A
41
User Guide
The following screen shows that the profile name, My NAT Profile, was entered into the Profile Name field. Next, click save to save the new profile name. If you do not want to save the new profile name, click close.
030-300444 Rev. A
42
User Guide
If you clicked save in the Edit Service Profile screen, the following pop-up screen will be displayed. Click OK to save your new profile name.
The following screen displays the current profile. You may now add NAT services to your profile. Or, if desired, delete or edit an existing profile.
030-300444 Rev. A
43
User Guide
030-300444 Rev. A
44
User Guide
For example, the screen below displays America Online as the NAT service that has been selected. After you have selected a service, click enable.
If you click enable, the following pop-up screen will be displayed. If you click OK, you will allow incoming connections to be forwarded to a designated local PC. If you click Cancel, you will allow only outgoing connections from any local PC. Click OK or click Cancel. NOTE: If you click Cancel in the following pop-up screen, the NAT service you selected in the Service Configuration screen is still configured; however, it will not be assigned to any device on the local LAN. You must click OK to host the NAT service.
030-300444 Rev. A
45
User Guide
If you clicked OK in the preceding pop-up screen, the Host Device screen will be displayed. The Host Device screen allows you to select which device will host the NAT service you selected on your local area network. You must either select the device from the Host Device drop-down arrow or type an IP address in the field labeled IP Address, and then click done to continue.
After you have selected a NAT service and have saved it to your service profile, the following screen will be displayed. It displays the NAT service that has been added to the profile.
030-300444 Rev. A
46
User Guide
If you click the details button adjacent to a NAT service in the Service Configuration screen, the following screen will display the details of the NAT service. If you click the delete button in the Service Configuration screen, you will remove that NAT service from your profile. Click close to continue.
NOTE: If you want to set up additional Advanced Service Configuration options, refer to section 14, Setting Up Advanced Service Configuration.
030-300444 Rev. A
47
User Guide
High Medium
Security Level High security level only allows basic Internet functionality. Only Mail, News, Web, FTP, and IPSEC are allowed. All other traffic is prohibited. Like High security, Medium security only allows basic Internet functionality by default. However, Medium security allows customization through NAT configuration so that you can enable the traffic that you want to pass. The Low security setting will allow all traffic except for known attacks. With Low security, VersaLink is visible to other computers on the Internet. Firewall is disabled. (All traffic is passed) Custom is an advanced configuration option that allows you to edit the firewall configuration directly. NOTE: only the most advanced users should try this. Remote Logging Factory Default = Disable If enabled, VersaLink will send firewall logs to a syslog server. The IP address of the syslog server machine to which the diagnostics logs to be sent.
030-300444 Rev. A
48
User Guide
If you selected Edit in the Firewall Configuration screen, the following User Defined Firewall Rules screen will be displayed. The information displayed in this screen depends on the Firewall security setting you have selected. This screen allows you to change the security parameters on your Inbound and Outbound Firewall rules via the User Defined Firewall Rules drop-down arrow. If you select Inbound, this will restrict inbound traffic from the WAN to the LAN. Outbound restricts outbound traffic to the LAN from the WAN. To apply the new settings, click Apply in the screen labeled User Defined Firewall Rules. IMPORTANT: Westell recommends that you do not change the settings in the User Defined Firewall Rules screen. If you need to reset VersaLink to factory default settings, push the reset button on the rear of VersaLink.
Note: The information displayed in this screen depends on the level of security you have selected.
If you clicked Apply in the User Define Firewall Rules screen, the following pop-up screen will be displayed. Click OK to apply the rules and to switch your security level to Custom. If you click cancel, the change will not take effect.
030-300444 Rev. A
49
User Guide
If you clicked OK in the pop-up screen, the following screen will be displayed. Click save to save to continue. IMPORTANT: Westell recommends that you do not change the settings in the User Defined Firewall Rules screen. If you need to reset VersaLink to factory default settings, push the reset button on the rear of VersaLink.
Note: The information displayed in this screen depends on the level of security you have selected.
If you clicked save, the following pop-up screen will be displayed. Click OK when asked Do you wish to save these Rules to Flash? The new firewall settings will be saved.. If you click Cancel, your new firewall settings will not be saved.
030-300444 Rev. A
50
User Guide
If you select Help in the screen labeled User Defined Firewall Rules, the following screen will be displayed. This screen gives a detailed explanation of the Firewall Rules.
030-300444 Rev. A
51
User Guide
030-300444 Rev. A
52
User Guide
VersaLink Gateway (B90-327W15-06) Wireless Configuration Factory Default = Enabled. When disabled, no stations will be able to connect to the VersaLink. This string, (32 characters or less) is the name associated with the modem. To connect to the modem, the SSID on a station must match the SSID on the modem. Factory Default = 6. The modem transmits and receives data on this channel. The number of channels to choose from is pre-programmed into the modem. Station cards do not have to be set to the same channel as the AP; the stations scan all channels, and look for an AP to connect to. Factory Default = Mixed. This setting allows station to communicate with VersaLink. Possible Responses: Mixed: Station using any of the 802.11b, 802.11b+, and 802.11g rates can communicate with VersaLink. 11b only: Communication with VersaLink is limited to 802.11b 11b+: Stations using any of the 802.11b and 802.11b+ rates can communicate with VersaLink. 11g only: Communication with VersaLink is limited to 802.11g Factory Default = Disabled. When selected, this enables/disables the 4X option. If enabled, 4X support provides additional algorithms for increased throughput. The station cards must also support this option. Factory Default = Disabled. If Enabled, VersaLink will not broadcast the SSID. Stations must configure the SSID to match the Network Name (SSID) to connect to VersaLink.
Mode
4x Support
Hide SSID
If you click save in the Wireless Configuration screen, the following pop-up will be displayed. Click OK to save the settings.
030-300444 Rev. A
53
User Guide
030-300444 Rev. A
54
User Guide
Wireless Security (WEP) Wireless Security Factory Default = WEP Possible Response: Disabled: Wireless security will be disabled on the VersaLink. WPA-PSK: Selecting this will enable you to set up WPA-PSK security on the VersaLink. WEP: Selecting this will enable you to set up WEP security on the VersaLink. The AP card supports 64-bit, 128-bit, or 256-bit WEP encryption. If WEP is selected, any station can connect to the AP (as long as its SSID matches the AP SSID). IF WEP is enabled, the risk of someone nearby accessing the AP is minimized. Factory Default = Open System Possible Response: Open System: Open System authentication is the default selection. Shared Key: To use Shared Key authentication, WEP must be enabled, and a valid WEP key must be present. Enabling WEP does not force the use of Shared Key authentication. It is permissible to have WEP enabled and still use Open System authentication. If selected, the WEP Key is treated as a string of text characters, and the number of characters must 55 December 2005 Section 13 Configuration
Authentication Type
Key Select
030-300444 Rev. A
User Guide
VersaLink Gateway (B90-327W15-06) be either 5 (for 64-bit encryption) or 13 (for 128-bit encryption) or 29 (for 256-bit encryption). If not selected, the WEP key is treated as a string of hexadecimal characters, and the number of characters must be either 10 (for 64-bit encryption), 26 (for 128-bit encryption), or 58 (for 256-bit encryption). The only allowable hexadecimal characters are 0-9 and A-F. NOTE: The WEP key must be the same value and type for both VersaLink and the wireless network adapter. Pass Phrase is not the same as text and should not be used.
If you select WPA-PSK from the Wireless Security drop-down menu, the following screen will be displayed. Enter your WPA Shared Key and WPA Group Rekey Interval in the fields provided. Click save to save the settings.
Wireless Security
Wireless Security Factory Default = WEP. Possible Response: Disabled: Wireless security will be disabled on the VersaLink. WPA-PSK: Selecting this will enable you to set up WPA-PSK security on the VersaLink. WEP: Selecting this will enable you to set up WEP security on the VersaLink. The AP card supports 64-bit, 128-bit, or 256-bit WEP encryption. If WEP is selected, any station can connect to the AP (as long as its SSID matches the AP SSID). If wireless security is disabled, the risk of someone nearby accessing the AP is maximized. This is a passphrase (also called a shared secret) that must be entered in both the wireless router and the wireless client. This shared secret can be between 8 to 63 text characters (or 64 56 December 2005 Section 13 Configuration
User Guide
VersaLink Gateway (B90-327W15-06) hexadecimal characters) and can include special characters and spaces. The WPA Shared Key should be a random sequence of either keyboard characters (upper and lowercase letters, numbers, and punctuation), at least 20 characters long, or hexadecimal digits (numbers 0-9 and letters A-F) at least 24 hexadecimal digits long. The more random your WPA Shared Key, the safer it is to use. Factory Default = 3600. The number of seconds between rekeying the WPA group key. A zero 0 means that rekeying is disabled.
030-300444 Rev. A
57
User Guide
If you clicked add in the preceding screen, the following screen will be displayed. Enter and/or select the appropriate values for your MAC address settings, and then click save to save the settings. Click cancel if you do not want to save the changes.
Traffic
Allowed: When the MAC Filter is enabled, only stations in the MAC Filter Table (which are set to Allowed) will have access to the modem. Blocked: This allows the station to remain in the table, but no access to the VersaLink is allowed. The MAC address assigned to the station to which you want to allow access. The station name or description to which the MAC address is assigned. This is an optional field that is useful in identifying the station.
After you have entered your MAC address settings and clicked save, the following screen will be displayed. Next, click the Enable MAC Address Filtering box (a check mark will appear in the box). Click save to save the settings.
030-300444 Rev. A
58
User Guide
If you clicked save, the following pop-up screen will be displayed. Click OK to continue. NOTE: If you make changes to your wireless settings and then save the settings, wireless access will be interrupted for all wireless devices that are connected to your VersaLink.
Beacon Period
RTS Threshold
The time interval between beacon frame transmissions. Beacons contain rate and capability information. Beacons received by stations can be used to identify the access points in the area. RTS/CTS handshaking will be performed for any data or management MPDU containing a number of bytes greater than the threshold. If this value is larger than the MSDU size (typically set by the fragmentation threshold), no handshaking will be performed. A value of zero will enable handshaking for all MPDUs. 59 December 2005 Section 13 Configuration
030-300444 Rev. A
VersaLink Gateway (B90-327W15-06) Any MSDU or MMPDU larger than this value will be fragmented into an MPDU of the specified size. Factory Default = Local STAs Possible Responses: Always Long: Transmissions are done using the long preamble algorithm. Always Short: Transmissions are done using the short preamble algorithm. Local STAs: If all associated stations support short preamble, then the short preamble algorithm is used. Otherwise, the long preamble algorithm is used. Factory Default = Local STAs Possible Response: Always Off: Transmissions are done using a 20 usec slot time. Always ON: Transmissions are done using a usec slot time (SST). Local STAs: If all associated stations support SST, then the 9 usec slot time is used. Otherwise, the 20 uses slot time is used. Enhanced Dynamic: Similar to Local STAs, with the following extension: If associated stations that do not support SST do not transmit for a period of time, the 9 usec slot time is used. Factory Default = Enhanced Dynamic Possible Response: Always Off: PBCC is not used, operation at 22 Mbps is not possible. Always ON: PBCC is used. Local STAs: If all associated stations support PBCC, then PBCC is used. Otherwise, PBCC is not used. Dynamic: Similar to local STAs with the following extension: PBCC setting is also dependent on Beacon frames from overlapping BSS. If Beacon frames are received that do not support PBCC, then PBCC is not used. Enhanced Dynamic: Similar to Dynamic with the following extension: If associated stations that do not support PBCC do not transmit for a period of time, then PBCC is not used. Factory Default = Dynamic Possible Response: Always Off: ERP is not used Always ON: ERP is used. Local STAs: If there are any associated stations than do not support ERP, a protection algorithm is used to prevent contention. Dynamic: Similar to local STAs with the following extension: The ERP protection setting is also dependent on Beacon frames from overlapping BSS. IF Beacon frames are received that indicate ERP is not supported, then a protection algorithm is used. Enhanced Dynamic: Similar to Dynamic with the following extension: If associated stations that do not support ERP do not transmit for a period of time, then protection algorithm is not used. These are the allowable communication rates that VersaLink will attempt to use. The rates are also broadcast within the connection protocol as the rates supported by VersaLink.
PBCC Algorithm
030-300444 Rev. A
60
User Guide
030-300444 Rev. A
61
User Guide Domain Name NOTE: Some ISPs may require the name for identification purposes. Host Name
VersaLink Gateway (B90-327W15-06) User Assigned DNS This field allows you to enter a Domain Name for VersaLink. To add a Domain Name, in the field under User Assigned DNS, type in your new domain name and click Set. Static Host Assignment This field allows you to enter a HOST name for VersaLink.
To add a new Host name, in the field under Static Host Assignment, type in the Host Name and the IP address and click Set. IP Address Displays the IP address that is assigned to the Host Name. Discover Local Devices This field displays a list of the computers on the LAN that were assigned a DHCP Address. The DNS name and IP address entry of each discovered device is displayed. (NOTE: The values in this field will be displayed barring any propagation delays. If No Discovered Devices is displayed, manually refresh the screen.) If you want to add a new Host Name and IP address to your DNS server, type the Host Name and IP Address in the fields provided in the Static Host Assignment section. Then, click add to continue.
030-300444 Rev. A
62
User Guide
If you clicked add, the following screen will be displayed. This screen shows that the Host Name and IP Address have been added to the DNS server. If you want to delete a static host assignment, click the delete button adjacent to the Host Name and IP address that you want to delete.
030-300444 Rev. A
63
User Guide
DHCP Server
This setting allows VersaLink to automatically assign IP addresses to local devices connected on the LAN. Westell advises setting this to enabled for the private LAN. Off = DHCP Server is disabled Private LAN = DHCP addresses will be saved into the Private LAN configuration. Public LAN = DHCP addresses will be saved into the Public LAN configuration. This option is only available if the Public LAN DHCP server is enabled. Factory Default = 192.168.1.15 This field displays the first IP address that the DHCP server will provide. The DHCP Start Address must be within the IP address and lower than the DHCP End Address. You may use any number from 0 to 254 in this address. Factory Default = 192.168.1.47 This field displays the last IP address that the DHCP server will provide. The DHCP End Address must be within the IP address and higher than the DHCP Start Address. You may use any number from 0 to 254 in this address. Factory Default = 01:00:00:00 Displays the amount of time the provided addresses will be valid, after which the DHCP client will usually re-submit a request. NOTE: This value must be greater than 10 seconds. Seconds must be between 0 and 59, minutes must be between 0 and 59, and hours must be between 0 and 23. 64 December 2005 Section 13 Configuration
030-300444 Rev. A
User Guide
If you selected Off from drop-down menu, the following screen will be displayed automatically. Now click save to save the settings. If you click reset, the screen will refresh and the previously saved settings will be remain active. IMPORTANT: Whenever you change the DHCP Server settings, the screen will display the changes; however, you must click save to allow the changes to take effect in the modem. (Private LAN is the default for DHCP Server.)
030-300444 Rev. A
65
User Guide
If you clicked save, in the preceding DHCP Configuration screen, the following pop-up screen will appear. Click on OK to continue.
IMPORTANT: After you disable the DHCP server, reboot your PC to allow the changes to take effect.
030-300444 Rev. A
66
User Guide Next, select Private LAN from the DHCP Server drop-down menu.
If you selected Private LAN from the drop-down menu, the following screen will be displayed automatically. Now click save to save the settings. If you click reset, the screen will refresh and the previously saved settings will remain active. IMPORTANT: Whenever you change the DHCP Server settings, the screen will display the changes; however, you must click save to allow the changes to take effect in the modem. (Private LAN is the default for DHCP Server.)
030-300444 Rev. A
67
User Guide
If you clicked save, the following pop-up screen will be displayed. Click OK to continue.
IMPORTANT: After you enable the DHCP server, reboot your PC to allow the changes to take effect.
030-300444 Rev. A
68
User Guide
If you made changes and clicked on save, the following pop-up screen will be displayed. Click OK to continue. If you click Cancel, your new settings will not take effect.
Default = CHECKED If this box is CHECKED, it enables DHCP addresses to be served from the Private LAN pool. Private LAN Enable Default = CHECKED If this box is CHECKED, it enables the addresses from the Private LAN to use the NAT interface. Modem IP Address Displays VersaLinks IP address Subnet Mask Displays the Subnet Mask, which determines what portion of an IP address is controlled by the network and which portion is controlled by the host. DHCP Start Address Displays the first IP address that the DHCP server will provide. DHCP End Address Displays the last IP address that the DHCP server will provide. DHCP Lease Time Displays the amount of time the provided addresses will be valid, after which the DHCP client will usually re-submit a request. Note: The DHCP Lease Time value must be greater than 10 seconds. The default = 01:00:00:00. Seconds must be between 0 and 59, minutes must be between 0 and 59, and hours must be between 0 and 23. If the settings you have entered in the Private LAN Configuration screen are incorrect, the following warning messages may be displayed in pop-up screens. If this occurs, check the settings in the Private LAN Configuration screen. Warning Message Start Address is not part of the Subnet End Address is not part of the Subnet End Address is below the Start Address Lease time must be greater than 10 seconds Seconds must be between 0 and 59 Minutes must be between 0 and 59 Hours must be between 0 and 23 Check Private LAN DHCP Settings Check the value in the DHCP Start Address field Check the value in the DHCP End Address field Check the value in the DHCP End Address field Check the values in the DHCP Lease Time fields Check the Seconds value in the DHCP Lease Time field Check the Minutes value in the DHCP Lease Time field Check the Hours value in the DHCP Lease Time field
030-300444 Rev. A
69
User Guide
Default = NOT CHECKED If this box is CHECKED, it enables DHCP addresses to be served from the Public LAN pool. Default = NOT CHECKED If this box is CHECKED, it enables the addresses from the Public LAN to bypass the NAT interface. Provides a Public IP Address if the service provider does not automatically provide one. Provides a Public Subnet Mask if the service provider does not automatically provide one.
030-300444 Rev. A
70
User Guide
If you clicked in the Public LAN DHCP Server Enable box, the following screen will be displayed automatically. Click the Public LAN Enable box (a check mark will appear in the box). NOTE: By enabling the Public LAN DHCP Server, you automatically disable VersaLinks the Private LAN DHCP Server. (Private LAN DHCP is the default setting for VersaLink.)
If you clicked the Public LAN Enable box, the following screen will be displayed automatically. The check marks indicates that Public LAN Enable is selected. Now click save to allow the settings to take effect.
030-300444 Rev. A
71
User Guide
If you selected Public LAN Enable, or if you made other changes in the Public LAN Configuration screen and clicked save, the following pop-up screen will be displayed. Click OK to save the new settings. If you click Cancel, your new settings will not take effect.
If the settings you have entered in the Public LAN Configuration screen are incorrect, the following warning messages may be appear in pop-up screens. If this occurs, check the Public LAN Configuration settings. Warning Message Check Public LAN DHCP Settings Start Address is not part of the Subnet Check the value in the DHCP Start Address field End Address is not part of the Subnet Check the value in the DHCP End Address field End Address is below the Start Address Check the value in the DHCP End Address field Lease time must be greater than 10 seconds Check the values in the DHCP Lease Time fields Seconds must be between 0 and 59 Check the Seconds field at DHCP Lease Time Minutes must be between 0 and 59 Check the Minutes field at DHCP Lease Time Hours must be between 0 and 23 Check the Hours field at DHCP Lease Time Note: The DHCP Lease Time value must be greater than 10 seconds. The default = 01:00:00:00. Seconds must be between 0 and 59, minutes must be between 0 and 59, and hours must be between 0 and 23. If you clicked OK in the Load new Public LAN configuration? screen, the following pop-up screen will be displayed. Click OK to continue.
If you clicked OK in the preceding screen, the following screen will be displayed. VersaLink will be reset and the new configuration will take effect.
After a brief delay, the home page will be displayed. Confirm that you have a DSL sync and that your PPP session displays UP. (If necessary, click the connect button to establish a PPP session). 030-300444 Rev. A 72 December 2005 Section 13 Configuration
User Guide
13.5.7 VLAN
The following screen will be displayed if you select Advanced LAN > VLAN from the Configuration menu. NOTE: If VersaLink is configured using ETHERNET PORT 1, the following screen will not be available.
VLAN Enable
LAN Port
VLAN ID
VLAN Priority
Factory Default = DISABLED If this box is check, VLAN will be Enabled. This will allow VLAN tagging to occur according to the data ports configuration. This allows you to select the LAN port that you wish to configure. Possible responses are: Ethernet Port 1 Ethernet Port 2 Ethernet Port 3 Ethernet Port 4 WLAN Port This allows you to assign a VLAN ID to the port. Possible responses are: 1 through 8 This allows you to set the VLAN priority for the port. Possible responses are: 0 through 7 This allows you to keep or remove the VLAN tag on the port when data is outgoing. 73 December 2005 Section 13 Configuration
030-300444 Rev. A
User Guide
To enable VLAN, click the VLAN Enable box (a check mark will appear in the box). Next, select the desired settings from the drop-down menus, and then click save to continue. NOTE: For VLAN to function properly, the VLAN ID must be set to a value other than 1 in the VLAN Configuration screen and in the VC 1 Configuration screen when the you are using the Bridge (VLAN Bridge) protocol. See Advanced WAN section for configuring VCs (refer to section 13.6.3.3).
NOTE: If you change the values in the VLAN Configuration screen, you must click save to save the settings. If you click reset, the screen will refresh and display the previously saved settings for the LAN Port you have selected. If you click save, the following pop-up screen will be displayed. Click OK in the pop-up screen to allow the new settings to take effect.
030-300444 Rev. A
74
User Guide
Factory Default = ENABLED This option enables the 0/21 loopback , which is used by your ISP. Note: Westell recommends that you do not that you change this setting.
030-300444 Rev. A
75
User Guide
030-300444 Rev. A
76
User Guide
VersaLink Gateway (B90-327W15-06) Factory Default = DSLATM PORT Possible Responses: DSLATM PORT ETHERNET PORT 1 Allows you to enable or disable your VC (Virtual Connection) Displays the VPI (Virtual Path Indicator) value for a particular VC, which is defined by your Service Provider. Displays the VCI (Virtual Channel Indicator) value for a particular VC, which is defined by your Service Provider. Displays the Protocol for each VC, which is specified by your Service Provider. PPPoA = Point to Point Protocol over ATM (Asynchronous Transfer Mode) PPPoE = Point to Point Protocol over Ethernet Bridge = Bridge Protocol Classical IPoA = Internet Protocol over ATM (Asynchronous Transfer Mode). This is an ATM encapsulation of the IP protocol. Factory Default = CHECKED When this setting is CHECKED, VersaLink will allow Broadcast IP packets to/from the WAN. When this setting is NOT CHECKED, VersaLink will block Broadcast IP packets to/from the WAN. This setting is only valid if one of the Virtual Channels is configured for Bridge mode. Factory Default = CHECKED When this setting is CHECKED, VersaLink will allow Multicast IP packets to/from the WAN. When this setting is NOT CHECKED, VersaLink will block Multicast IP packets to/from the WAN. This setting is only valid if one of the Virtual Channels is configured for Bridge mode. Factory Default = DISABLED Spanning Tree Protocol is a link management protocol that provides path redundancy while preventing undesirable loops in the network. For Ethernet network to function properly, only one active path can exist between two stations. When ENABLED, two bridges are used to interconnect the same two computer network segments. Spanning Tree Protocol will allow the bridges to exchange information so that only one of them will handle a given message that is being sent between two computers within the network. NOTE: Spanning Tree cant be enabled if VLAN is enabled.
NOTE: The configuration specified by your Service Provider will determine which Protocols are available to you. Bridge Broadcast
Bridge Multicast
030-300444 Rev. A
77
User Guide
13.6.2.1
To configure VersaLink for uplink mode, select ETHERNET PORT 1 from the WAN PORT drop-down menu. By selecting ETHERNET PORT 1, you will disable VersaLinks DSL transceiver. This will disable the DSL port on the rear of the Gateway and enable the ETHERNET1 port for use as the WAN Ethernet uplink interface. NOTE: 1) If you select ETHERNET PORT1, only ports E2, E3, and E4 on the rear of the Gateway can be used for Ethernet LAN connection. ETHERNET1 will become the uplink port. 2) If you select DSLATM PORT, you can use all four ports (ETHERNET1, E2, E3, and E4) on the rear of the Gateway for Ethernet LAN connection. 3) The uplink feature is optional, and when uplink is disabled, the Gateway will use DSL and wireless only. 4) All menu options are displayed when the Gateway is configured DSLATM PORT. However, some menu options may not be available when the Gateway is configured for ETHERNET PORT 1.
NOTE: If you experience any problems, please reset VersaLink via the external hardware reset button or via the procedure defined under the Maintenance menu in section 15.1. (Factory defaults become current configuration.)
030-300444 Rev. A
78
User Guide
If you select ETHERNET PORT 1 from the WAN Port drop-down arrow, the following screen will be displayed. Click OK.
If you clicked OK in the preceding pop-up screen, the following screen will be displayed. Click on OK. If you click on Cancel, the change will not take effect.
If you clicked OK in the preceding pop-up screen, the following pop-up screen will appear. VersaLink must be reset to allow the new configuration to take effect. Click on OK.
If you clicked OK, VersaLink will be reset and the new configuration will take effect.
After VersaLink has been reset, the DSL LED will be OFF. This is because the DSL transceiver has been disabled. However, the Power, Ethernet, and Wireless LEDs will remain lit.
030-300444 Rev. A
79
User Guide
13.6.2.2
If ETHERNET PORT 1 has previously been enabled and you want to disable it and enable DSLATM PORT, select Advanced WAN > WAN from the Configuration menu. The following screen will be displayed. Next, select DSLATM PORT from the WAN PORT drop-down menu. By selecting DSLATM PORT, you will enable VersaLinks DSL transceiver. This will disable the WAN Ethernet uplink port and allow the WAN interface to use the DSL port. NOTE: 1) If you select DSLATM PORT, you can use all four ports (ETHERNET1, E2, E3, and E4) on the rear of the Gateway for Ethernet LAN connection. 2) If you select ETHERNET PORT1, only ports E2, E3, and E4 on the rear of the Gateway can be used for Ethernet LAN connection. ETHERNET1 will become the uplink port. 3) The uplink feature is optional, and when uplink is disabled, the Gateway will use DSL and wireless only. 4) All menu options are displayed when the Gateway is configured DSLATM PORT. However, some menu options may not be available when the Gateway is configured for ETHERNET PORT 1.
030-300444 Rev. A
80
User Guide
If you select DSLATM PORT from the WAN Port drop-down menu, the following screen will be displayed. Click OK.
If you click OK in the preceding pop-up screen, the following screen will be displayed. Click OK. If you click Cancel, the change will not take effect.
If you clicked OK in the preceding pop-up screen, the following pop-up screen will be displayed. VersaLink must be reset to allow the new configuration to take effect. Click OK.
If you clicked OK, VersaLink will be reset and the new configuration will take effect.
After a brief delay, the home page will be displayed. Confirm that you have a DSL sync and that your PPP session displays UP. (If necessary, click on the connect button to establish a PPP session). 030-300444 Rev. A 81 December 2005 Section 13 Configuration
User Guide
030-300444 Rev. A
82
User Guide
If you clicked edit in the WAN Configuration screen, the following VC 1 Configuration screen will be displayed. The VC 1 Configuration screen allows you to edit your virtual connection (VC). A virtual connection identifies a connection through the service providers ATM network to your ISP. Unlike physical hardware connections, virtual connections are defined by data. If you change any settings in the VC 1 Configuration screen, click the Set VC button to save the settings. NOTE: If you experience any problems, please reset VersaLink via the external hardware reset button or via the procedure defined under the Maintenance menu in section 15.1. The actual information displayed in this screen may vary, depending on network connection established.
030-300444 Rev. A
83
VersaLink Gateway (B90-327W15-06) VC 1 Configuration This setting allows you to change your VPI (Virtual Path Indicator) value for a particular VC, which is defined by your Service Provider. This setting allows you to change your VCI (Virtual Channel Indicator) value for a particular VC, which is defined by your Service Provider. Factory Default = 100% Peak Cell Rate (PCR)-The maximum rate at which cells can be transmitted across a virtual circuit, specified in cells per second and defined by the interval between the transmission of the last bit of one cell and the first bit of the next. This value is a percentage of the current data rate. 100 allows this VC to use 100% of the available bandwidth. 80 allows this VC to use 80% of the available bandwidth. Quality of Service, which is determined by your Service Provider. Possible Responses: CBR = Constant Bit Rate UBR = Unspecified Bit Rate VBR = Variable Bit Rate The Protocol for each VC, which is specified by your Service Provider. Possible Responses: PPPoA = Point to Point Protocol over ATM (Asynchronous Transfer Mode) PPPoE = Point to Point Protocol over Ethernet Bridge = Bridge Protocol Classical IPoA = Internet Protocol over ATM (Asynchronous Transfer Mode). This is an ATM encapsulation of the IP protocol. The protocol status. VC x PPPoE Settings Displays the IP network address that your modem is on. Displays VersaLink IP VersaLink address Provided by your Service Provider Provided by your Service Provider Factory Default = DISABLED If ENABLED, the Maximum Received Unit (MRU) would enforce MRU negotiations. (NOTE: enable this option only at ISPs request.) Factory Default = Enable If checked, this option will disable the modem LCP Echo transmissions. Indicates number of continuous LCP echo non-responses received before the PPP session is terminated. The interval between LCP Echo transmissions with responses. The interval between LCP. Echo after no response. Factory Default = ENABLE If ENABLED, this option allows PPP traffic to be bridged to the WAN. This feature allows you to use a PPPoE shim on the host computer to connect to your ISP, by bypassing VersaLinks capability to do this. NOTE: Tunneling is available using PPPoE protocol only.
QoS
Protocol
LCP Echo Disable LCP Echo Failures LCP Echo Retry Duration LCP Echo Retry Duration Tunneling
NOTE: The values for IP Address, VersaLink, DNS Primary, and DNS Secondary are all Override of the value obtained from the PPP connection, They default to 0.0.0.0, in which case the override is ignored. Westell recommends that you do not change the values unless your ISP instructs you to change them.
030-300444 Rev. A
84
User Guide
If you made changes and clicked the set VC button, the following pop-up screen will be displayed. Click OK when asked Set this PPPoE VC configuration? If you click on cancel, the new VC settings will not be saved.
If you clicked on OK in the preceding pop-up screen, the following pop-up screen will appear. Click OK to continue.
If you clicked OK, VersaLink will be reset and the new configuration will take effect.
After a brief delay, the home page will be displayed. Confirm that you have a DSL sync and that your PPP session displays UP. (If necessary, click the connect button to establish a PPP session.)
030-300444 Rev. A
85
User Guide
If you clicked the set VC button, the following pop-up screen will be displayed. Click on OK in the pop-up screen. If you click on Cancel, the new settings will not be saved. After you click on OK, follow the instructions to reset the Gateway, as previously discussed in section 13.6.3.
030-300444 Rev. A
86
User Guide
If you clicked the set VC button, the following pop-up screen will be displayed. Click on OK in the pop-up screen. If you click on Cancel, the new settings will not be saved. After you click on OK, follow the instructions to reset the Gateway, as previously discussed in section 13.6.3.
030-300444 Rev. A
87
User Guide
Mode
VC 1 Bridge Settings Bridge = A bridge is a layer 2 device that connects two segments of the same LAN that use the same protocol such as Ethernet. The modem does not have a WAN IP address in this mode. The client PC will typically get an IP address from a DHCP server in the network or the IP address can be assigned to the client PC statically. Routed Bridge = Routed Bridged Encapsulation (RBE) is the process by which a bridged segment is terminated on a routed interface. Specifically, VersaLink is routing on an IEEE 802.3 or Ethernet header carried over RFC 1483 bridged ATM. RBE was developed to address the known RFC1483 bridging issues, including broadcast storms and security. The modem will get a WAN IP address through DHCP or can be assigned statically. NAT will use the global address assigned to the modem. Proxy Bridge = Proxy Bridge is the process in which the modem acts as a proxy ARP agent for a local public subnet. The modem will be assigned an IP address from within that public subnet. The modem will direct all traffic to a VersaLink, which is configured statically. VersaLink address must not reside within VersaLinks assigned public subnet. All traffic will be sent via VersaLinks MAC address. The LAN may also have a private NAT'ed network. NAT will use the global address assigned to the modem. VLAN Bridge = Assigns VLAN tags to individual data ports on the modem. 88 December 2005 Section 13 Configuration
030-300444 Rev. A
User Guide
If you clicked the set VC button, the following pop-up screen will be displayed. Click on OK in the pop-up screen. If you click on Cancel, the new settings will not be saved. After you click on OK, follow the instructions to reset the Gateway, as previously discussed in section 13.6.3.
030-300444 Rev. A
89
User Guide
VC 1 - Bridge Settings (Routed Bridge) The Mode you have selected to use with Bridge protocol. Selecting a radio button allows you to either enable or disable the DHCP Client. Displays the IP network address that your modem is on. Displays the modems IP gateway address. Provided by your ISP. Provided by your ISP.
If you clicked the set VC button, the following pop-up screen will be displayed. Click on OK in the pop-up screen. If you click on Cancel, the new settings will not be saved. After you click on OK, follow the instructions to reset the Gateway, as previously discussed in section 13.6.3.
030-300444 Rev. A
90
User Guide
VC 1 - Bridge Settings (Proxy Bridge) The Mode you have selected to use with Bridge protocol. Displays the modems IP address. Provided by your Service Provider. Provided by your Service Provider.
If you clicked the set VC button, the following pop-up screen will be displayed. Click on OK in the pop-up screen. If you click on Cancel, the new settings will not be saved. After you click on OK, follow the instructions to reset the Gateway, as previously discussed in section 13.6.3.
030-300444 Rev. A
91
User Guide
VC 1 - Bridge Settings (VLAN Bridge) The Mode you have selected to use with Bridge protocol. VLAN is used to assign VLAN tags to individual data ports on the modem. Assigns a VLAN ID to the port. This will set the VLAN priority for the port. Factory Default = DISABLE Selecting Enable allows VLAN tagging to occur according to the data ports configuration.
If you clicked the set VC button, the following pop-up screen will be displayed. Click on OK in the pop-up screen. If you click on Cancel, the new settings will not be saved. After you click on OK, follow the instructions to reset the Gateway, as previously discussed in section 13.6.3.
030-300444 Rev. A
92
User Guide
If you select ETHERNET PORT 1, the following pop-up will be displayed. Click on OK.
If you click on OK, the following pop-up screen will be displayed. Click on OK.
030-300444 Rev. A
93
User Guide
If you click on OK in the preceding pop-up screen, the following pop-up screen will be displayed. Click on OK. The modem will be reset to allow the configuration to take effect.
If you clicked on OK, VersaLink will be reset and the new configuration will take effect.
030-300444 Rev. A
94
User Guide
After the Gateway has been reset, select Advanced WAN > WAN from the Configuration menu. The following screen will be displayed. To configure the WAN PORT ETHERNET PORT 1 settings, click edit.
If you clicked edit, the following screen will be displayed. By using this screen, you can configure the WAN Ethernet port settings of your Gateway.
030-300444 Rev. A
95
User Guide
If you clicked the set VC button, the following pop-up screen will be displayed. Click on OK in the pop-up screen. If you click on Cancel, the new settings will not be saved. After you click on OK, follow the instructions to reset the Gateway, as previously discussed in section 13.6.3.
After the Gateway has been reset, the WAN Configuration screen will display PPPoE as the protocol for ETHERNET PORT 1. 030-300444 Rev. A 96 December 2005 Section 13 Configuration
User Guide
If you selected ROUTED, the following screen will be displayed. Enter the appropriate values in the fields and click set. 030-300444 Rev. A 97 December 2005 Section 13 Configuration
User Guide
If you clicked set, the following pop-up screen will be displayed. Click OK in the pop-up screen. If you click Cancel, the new settings will not be saved. After you click on OK, follow the instructions to reset the Gateway, as previously discussed in section 13.6.3.
030-300444 Rev. A
98
User Guide
After the modem has been reset, the WAN Configuration screen will display Routed Bridge as the protocol for ETHERNET PORT 1.
030-300444 Rev. A
99
User Guide
13.6.5 QOS
The following screen will be displayed if you select Advanced WAN > QOS from the Configuration menu. If you change any settings in this screen, click on save. If you click on reset, this screen will refresh and display your last saved QoS configuration. NOTE: If VersaLink is configured using ETHERNET PORT 1, the following screen will not be available. The QOS feature helps ensure data integrity in high-speed transmissions. QOS provides the capability to partition network traffic into multiple priority levels or classes of service. After packet classification, other QOS features can be utilized to assign the appropriate traffic handling policies including congestion management, bandwidth allocation, and delay bounds for each traffic class.
030-300444 Rev. A
100
VersaLink Gateway (B90-327W15-06) Factory Default = DISABLED If this box is checked, Quality of Service (QOS) will be Enabled. Factory Default = DISABLED If this box is checked, Turbo TCP will be Enabled. QOS Configuration Factory Default = DISABLED If this box is checked, this will Enable the QOS filter. This feature provides the capability to partition network traffic into multiple priority levels or classes of service. After packet classification, other QoS features can be utilized to assign the appropriate traffic handling policies including congestion management, bandwidth allocation, and delay bounds for each traffic class. Possible responses are: Best Effort (BE) Assured Forwarding (AF1) Assured Forwarding (AF2) Assured Forwarding (AF3) Assured Forwarding (AF4) Expedited Forwarding (EF) Network Control (NC) The maximum allowed rate for this priority, expressed as a % of the DSL rate. The committed rate for this priority, expressed as a % of the DSL rate. The interval in milliseconds for averaging the peak offered rate. The interval in milliseconds for averaging the committed offered rate. The number of packets that can be queued for this priority. Latency Measurements This configures the maximum latency boundary in milliseconds that a specific packet may be delayed by. This setting configures the maximum latency boundary in milliseconds that a specific packet may be delayed by. Possible responses are: Boundary 1:0 ms Boundary 2:10 ms Boundary 3:30 ms Boundary 4:40 ms Boundary 5:100 ms Boundary 6:1000 ms Boundary 7:3000 ms Factory Default = DISABLED If this box is checked, IP Fragmentation will be Enabled. If Enabled and packets larger than 1500 bytes total are received, they will be fragmented. This is the IP Packet Size. Possible responses are: 100, 148, 244, 292, 340, 388, or 436
Peak Information Rte (%) Committed Information Rate (%) Peak Burst Size Committed Burst Size Max Queue Size Latency Boundary Latency Threshold (ms)
IP Fragmentation Enable
IP Fragment Size
If you made changes to the QOS Configuration and clicked on save, the following screen will be displayed. Click OK to save your new QOS settings.
030-300444 Rev. A
101
User Guide
13.6.6 Route
The following screen will be displayed if you select Advanced WAN > Route from the Configuration menu. The Route table maintains the routes or paths of where specific types of data shall be routed across a network. To add a Route, enter the appropriate values and/or select the desired options in this screen, and then click add to establish a static route.
030-300444 Rev. A
102
VersaLink Gateway (B90-327W15-06) IP Interfaces The list of active interfaces on the modem and their IP and Subnet mask address. Eth0 is the local LAN interface. Lo0 is the loopback interface. MainPPP is the local WAN interface. The IP interface address. The IP interface subnet address. The IP interface device name. Network Routing Table The list of network routes. These can be either routes for directly connected interfaces or static routes. The IP address or subnet of the Route. If the Route is a network route, Subnet Mask is used to specify the subnet address. If the Route is a Host route, then the Host Route check box is used. Indicates were to send the packet if it matches this route. Indicates were to send the packet if it matches this route. The RIP metric to be assigned to this route if and when it is advertised using RIP. Indicates whether a static route should be advertised via RIP. Host Routing Table The list of host routes. A host route is an IP route with a 32-bit mask, indicating a single destination (as opposed to a subnet, which could match several destinations.) The IP address or subnet of the Route. If the Route is a network route, Subnet Mask is used to specify the subnet address. If the Route is a Host route, then the Host Route check box is used. Indicates were to send the packet if it matches this route. Indicates were to send the packet if it matches this route. The RIP metric to be assigned to this route if and when it is advertised using RIP. Indicates whether a static route should be advertised via RIP. Inactive Routes Static routes whose interface is currently not in service. The IP address or subnet of the Route. If the Route is a network route, Subnet Mask is used to specify the subnet address. If the Route is a Host route, then the Host Route check box is used. Indicates were to send the packet if it matches this route. Indicates were to send the packet if it matches this route. The RIP metric to be assigned to this route if and when it is advertised using RIP. Indicates whether a static route should be advertised via RIP. Add Route This is used to add a new static route in the modem. The IP address or subnet of the Route. If the Route is a network route, Subnet Mask is used to specify the subnet address. If the Route is a Host route, then the Host Route check box is used. The interface to use for sending the packet, if it matches this route. (Only active VersaLinks can be used to create a static route.) The RIP metric to be assigned to this route if and when it is advertised using RIP. Determines whether or not to advertise the static route, using RIP. (RIP must also be enabled before the route will be advertised.) If checked, then the route will be made permanent by saving it to flash memory. If not checked, the route will disappear the next time the modem restarts.
Address Subnet Mask Name Network Routing Table Destination Address Subnet Mask VersaLink Interface Metric RIP Host Routing Table Destination Address Subnet Mask VersaLink Interface Metric RIP Inactive Routes Destination Address Subnet Mask VersaLink Interface Metric RIP Add Route Destination Address Subnet Mask/ Host Route VersaLink/IP Address Metric RIP Conf Save to Modem
030-300444 Rev. A
103
User Guide
13.6.7 RIP
The following details will be displayed if you select Advanced WAN > RIP from the Configuration menu. If you change any settings in this screen, click on save. If you click on reset, this screen will refresh and display your last saved RIP configuration. RIP (Routing Interface Protocol) is a dynamic inter-network routing protocol primarily used in interior routing environments. A dynamic routing protocol, as opposed to a static routing protocol, automatically discovers routes and builds routing tables.
030-300444 Rev. A
104
VersaLink Gateway (B90-327W15-06) Factory Default = DISABLED If this box is checked, RIP will be Enabled (turned ON). RIP Configuration LAN: Select this if you are configuring RIP for the LAN side. WAN: Select this if you are configuring RIP for the WAN side. (WAN side is receive only.) The version of RIP to be accepted. Possible responses are: None RIPv1 RIPv2 RIPv1 or RIPv2 The version of RIP to be transmitted. (WAN side RIP never transmits) Possible responses are: None RIPv1 RIPv1 Compatible RIPv2 If using RIP V2, you must select the type of authentication to use. Possible responses are: None Clear Text MD5 (If MD5 authentication, the password) Advanced Factory Default = DISABLED If this box is check (Enabled), this feature will determine whether the modem advertises itself as a VersaLink (i.e., the default route) Factory Default = ENABLED If this box is unchecked (Disabled), the modem will not summarize subnets into a single route before advertising. Indicates how often to update the local routing table. Indicates how often to advertise routes to neighbors. Indicates how long routes received from neighbors become invalid, if no refresh of the route is received. Indicates how long to advertise invalid routes after they have expired.
Transmit
Default VersaLink
RIP Timer Rate RIP Supply Interval RIP Expire Time RIP Garbage Collection Time
If you change any settings in the RIP Configuration screen and click on save, the following screen will be displayed. Click on OK to save your new RIP settings.
030-300444 Rev. A
105
User Guide
This option allows you to forward a range of WAN ports to an IP address on the LAN. This option allows you to forward a range of ports to an IP address on the LAN only after specific outbound traffic.
030-300444 Rev. A
User Guide
030-300444 Rev. A
VersaLink Gateway (B90-327W15-06) The NAT service for which you are configuring Port Forwarding. The type of NAT service configuration you selected. The type of Protocol that is used to run this NAT service. TCP - Transmission Control Protocol. UDP - User Datagram Protocol (UDP). The WAN-side TCP/UDP port range. The port on the WAN that will host the NAT service selected. Base Host Port is the first port that will be used for a specific service when configured for a range of ports.
The NAT service you selected. The local LAN side TCP/UDP port. The WAN side TCP/UDP port range.
030-300444 Rev. A
User Guide
030-300444 Rev. A
User Guide
030-300444 Rev. A
User Guide
If you click on the static NAT button in the Service Configuration screen, the following screen will be displayed. Select a device from the Static NAT Device drop-down arrow, or type the IP address of the device in the field labeled IP Address. Click on enable. This will automatically enable the Static NAT feature for that device.
030-300444 Rev. A
User Guide
If you click enable, the following Service Configuration screen will display. Static NAT is now enabled for the device you selected.
030-300444 Rev. A
User Guide
If you clicked disable, the following Service Configuration screen will be displayed. Static NAT is now disabled for the device you selected. (No device is displayed in the field adjacent to the static Nat button.)
030-300444 Rev. A
User Guide
15. MAINTENANCE
15.1 Backup/Restore
The following screen will be displayed if you select Backup/Restore from the Maintenance menu. NOTE: Backup settings are stored in a separate area of flash, not to an external backup source. Select one of the following options: Current configuration becomes Backup Configuration: Click backup to store the current configuration of your Gateway so that it can be recalled later. Backed up configuration becomes current configuration: Click restore if you want to retrieve the last back up copy of all configuration parameters and make these values current. Factory default becomes Current configuration: Click restore if you want set all user configurable parameters back to the factory default settings. CAUTION: If you restore the Gateway to factory default settings, any data that the Gateway has reported will be lost.
030-300444 Rev. A
114
User Guide
Clear log Printable/savable format Settings Packet Date Time Direction/Source Rule/Reason Alert
Selecting this button removes all entries from the log. Selecting this button opens a new window that contains a list of all the logged packets that can be saved or printed. Selecting this button opens a new window that contains configuration settings for selecting the information that you want logged. The packet number. The number of days passed since that the packet was sent. The time that the packet was sent. The direction of transmission. The internal rule that caused the logged event. The internal rule is set up under Firewall rules. Displays a description of the logged event.
030-300444 Rev. A
115
User Guide
If you clicked on details in the Firewall Log screen, the Packet Details screen will be displayed. Click on close.
To clear the Firewall log, click clear log in the Firewall Log screen. The following pop-up screen will be displayed. Click OK when asked Do you wish to clear the Firewall log file? If you click Cancel, the firewall log will not be cleared.
To obtain a printable format of the Firewall Log, at the Firewall Log screen, click Printable/Savable Format. This will allow you to send a copy of the Firewall log to your designated printer.
030-300444 Rev. A
116
User Guide
Enter Administrative Name NOTE: This changes the Systems Administrator password not the PPP password. Enter Administrative Password Verify Administrative Password
Type your network administrators password. Retype your network administrators password.
030-300444 Rev. A
117
User Guide
User Name Password Timeout Disable Timeout Enable Remote Access URL
Displays your current User Name (Static field) Field for entering your password The number of minutes after which remote access will be deactivated (if it has been activated). Click this box (a checkmark will appear) to activate the Disable Timeout feature. Uncheck the box to deactivate this feature. Click this box (a checkmark will appear) to activate Enable Remote Access. Uncheck the box to deactivate this feature. Displays the IP address of the remote management device (VersaLink).
030-300444 Rev. A
118
User Guide After you enable Remote Access, the following message will be displayed:
Remote access is currently enabled. After 20 minutes of inactivity, or on reboot, remote access will be automatically disabled. If you want to disable Remote Access, uncheck the Enable Remote Access box, and then click apply to save the settings.
030-300444 Rev. A
119
User Guide
Click on the check for web update button in the Update Device screen to check the web for possible software updates. This screen will retrieve the software update file and display any available update information. You must be connected to the Internet to use this option. NOTE: If you click on check for web update and the page returns a page not found message, this indicates that the software update file is not available. Go back to the previous screen to continue. Click on the web update now button in the Update Device screen to download the software update file and automatically update the modem firmware if an update is available and applicable. You must be connected to the Internet to use this option.
030-300444 Rev. A
120
User Guide
If you click on the settings button in the Update Device screen, the following screen will appear. This screen displays the location of the software update file.
030-300444 Rev. A
121
User Guide
Click on the local update now button in the Update Device screen to select the upgrade file from your PCs hard drive. This screen allows you to upgrade the software on VersaLink. Click Browse and go to the location where the upgrade file is stored.
Select the appropriate upgrade file from your browser. The file name will appear in the field labeled Upgrade File. Click upload file.
030-300444 Rev. A
122
User Guide This screen shows that the file is being uploaded to VersaLink.
The screens below show that the file upload has completed and that the Programming Flash is being erased to prepare the Flash storage area for upload of the new file. (Programming Flash is a temporary storage area for uploaded files.)
030-300444 Rev. A
123
User Guide
The screen below shows that the upload was successful. VersaLink will now reboot.
After a brief delay, the home page will be displayed. Confirm that you have a DSL sync and that the PPP Status displays UP. (If necessary, click the connect button to establish your PPP session.)
030-300444 Rev. A
124
User Guide
16. TROUBLESHOOTING
NOTE: Options in the Troubleshooting menu may or may not be displayed depending on VersaLinks WAN Configuration (DSLATM PORT or ETHERNET PORT 1). However, all menu options are displayed if VersaLink is configured for DSLATM PORT 1. The following sections provide further details on the Troubleshooting menu.
030-300444 Rev. A
125
User Guide
If you want to PING using the System Self Test screen (diagnostics page) shown above, enter your DNS or IP address in the fields provided and click on the test button. The System Self Test will run a diagnostic test that executes independent of firewall security settings. See the following table for test descriptions and possible responses. If you want to PING using the MS-DOS (shell) window, first you will need to check your firewall security setting. (If you PING via DOS shell you are susceptible to firewall rules, as this PING is dependent on VersaLink's firewall settings.) If your firewall is set to Medium or High, you will not be able to PING. You must set your firewall security setting to Low or None. Connection/Status VersaLink checks the status of the DSL connection. Possible responses are: UP: VersaLink is operating correctly and has obtained synchronization with the opposing network device. DOWN: VersaLink is operating correctly, but has not synchronized with the opposing device. Indicates that a PPPoE session is or is not established. Possible responses are: Session UP: A valid PPPoE session has been detected. No Session: Currently there is no active PPPoE session established. Initiating Session: A PPP session must be connected from the homepage screen. Indicates that a PPPoE or PPPoA session must already be established. Possible responses are: Connection UP: VersaLink has established a connection No Connection: There is no PPP connection Initiating Connection: The PPP connection process has been initiated Connection Halted: A successful PPP connection was halted Cannot Connect: A PPP connection could not be made because of a PPPoE session failure. Authorization Failure: The user name or password is incorrect. Link Control Protocol Failed: Re-establish the session (from the home page). Test Description / Test Results Performs an integrity check of certain internal components of VersaLink. Performs an IP network check (i.e., an IP Ping) of the Service Providers VersaLink. This test verifies that VersaLink can exchange IP traffic with an entity on the other side of the DSL line. Possible responses are: Success: VersaLink has detected an IP Remote VersaLink connection. No Response: The IP Remote VersaLink does not answer the IP Ping. Could not test: The test could not be executed due to VersaLink settings. Check your DSL sync or your PPP session. You must have both a DSL sync and a PPP connection established to execute a PING. Performs a test to try to resolve the name of a particular host. The host name is entered in the input box. Possible responses are: Success: VersaLink has successfully obtained the resolved address. The IP address is shown below the host name input box. No Response: VersaLink has failed to obtain the resolved address. Host not found: The DNS Server was unable to find an address for the given host name. No data, enter host name: No host name is specified. Could not test: The test could not be executed due to VersaLink settings. Check your DSL sync or your PPP session. You must have both a DSL sync and a PPP connection established to execute a PING. IP Address of the Host Name. Performs an IP connectivity check to a remote computer either within or beyond the service providers network. You can PING a remote computer via the IP address or the DNS address. If your PING fails, try a different IP or DNS address. Possible responses are: Success: The Remote Host computer was detected. No Response: There was no response to the Ping from the remote computer. No name or address to PING: No host name or IP address was specified. 126 December 2005 Section 16 Troubleshooting
DSL
PPPoE
PPP
DNS
030-300444 Rev. A
User Guide
VersaLink Gateway (B90-327W15-06) Could not test: The test could not be executed due to VersaLink settings. Check your DSL sync or your PPP session. You must have both a DSL sync and a PPP connection established to execute a PING. Determines the route taken to destination by sending Internet Control Message Protocol (ICMP) echo packets with varying IP Time-To-Live (TTL) values to the destination. Trace Route is used to determine where the packet is stopped on the network.
Trace
To view a diagnostic log, select an option from the LOGS drop-down menu.
030-300444 Rev. A
127
User Guide
If you selected All, the following screen will be displayed. This screen provides a detailed list of VersaLinks connection status and system information. Click clear diagnostic log to clear the diagnostic log information.
030-300444 Rev. A
128
User Guide
At the Save Web Page dialog box, select a destination for your log file from the Save in drop-down menu. Next, enter a name for your log file in the field labeled File name, and then click Save to save the log file.
030-300444 Rev. A
129
User Guide
16.3 Statistics
NOTE: If VersaLink is configured for ETHERNET PORT 1, only Ethernet and Wireless statistics will be displayed in the Statistics menu. The DSL Transceiver statistics and the WAN VC statistics will not be displayed. If you want to view DSL Transceiver and WAN VC statistics, you must configure VersaLink for DSLATM PORT. Refer to section 13.6.2.2 for additional details.
030-300444 Rev. A
130
User Guide In Errors In Discard Packets In Non Unicast Packets In Unicast Packets In Octets Out Errors Out Discard Packets Out Non Unicast Packets Out Unicast Packets Out Octets MTU Interface Type Interface Description
VersaLink Gateway (B90-327W15-06) The number of error packets received on the Ethernet interface. The number of discarded packets received. The number of non-Unicast packets received on the Ethernet interface. The number of Unicast packets received on the Ethernet interface. The number of bytes received on the Ethernet interface. The number of outbound packets that could not be transmitted due to errors. The number of outbound packets discarded. The number of non-Unicast packets transmitted on the Ethernet interface. The number of Unicast packets transmitted on the Ethernet interface. The number of bytes transmitted on the Ethernet interface. Maximum Transmission Unit- The number of data bytes contained in the Ethernet frame. A unique identifier that represents the interface type. A description field that refers to the interface type.
The transceiver software version number. The CPE Vendors ID code for their chipset. The operational mode. Modes supported are No Mode, Multi Mode, T.1413 Mode, G.DMT Mode, and G.LITE Mode. Data Path The data path used (either Fast or Interleaved). Transceiver Information-Down Stream/Up Stream Path DSL Speed (Kbits/Sec) The transmission rate that is provided by your ISP. SNR Margin (db) The Signal-to-Noise Ratio (S/N) where 0 db = 1x10-7, which inhibits your DSL 030-300444 Rev. A 131 December 2005 Section 16 Troubleshooting
User Guide Line Attenuation (dB) Transmit Power (db/Hz) speed. The DSL line loss. The transmitted signal strength.
VPI/VCI In Errors In Discard Packets In Non Unicast Packets In Unicast Packets In Octets Out Errors Out Discard Packets Out Non Unicast Packets Out Unicast Packets Out Octets MTU Interface Type Interface Description
Displays the VPI/VCI values obtained from your ISP. The number of error packets received on the ATM port. The number of discarded packets received. The number of non-Unicast packets received on the ATM port. The number of Unicast packets received on the ATM port. The number of bytes received on the ATM port. The number of outbound packets that could not be transmitted due to errors. The number of outbound packets discarded. The number of non-Unicast packets transmitted on the ATM port. The number of Unicast packets transmitted on the ATM port. The number of bytes transmitted on the ATM port. Maximum Transmission Unit -The number of data bytes contained in an ATM frame. A unique identifier that represents the interface type. A description field that refers to the interface type.
User Guide
The following screen will be displayed if you select Statistics > Wireless from the Troubleshooting menu.
Wireless Card Information This string, (32 characters or less) is the name associated with the Access Point (AP). To connect to the AP, the Service Set ID (SSID) on a Station card must match the SSID on the AP. 802.11 MAC Address (BSSID) This is the Media Access Controller address of the AP. It is used as the Basic Service Set Identifier (BSSID). FW Version This is the Network Interface Card Identifier. It uniquely identifies the hardware platform of the AP. This is used with other information to determine if the inserted card can be used as an AP, and if so, the version of AP firmware to be used. Not all makes of wireless station cards can be used as an AP. Communication Statistics NOTE: Data preceded by OUT pertain to transmissions from the VersaLink to a station; VersaLink is the source. Data preceded by IN pertain to data received by VersaLink; VersaLink is the destination. OUT-Unicast Frames The number of successfully transmitted frames whose destination address was a single station; not necessarily the same station, but to any single station as opposed to a transmission that multiple stations would receive-as in the case of broadcast message. OUT-Multicast Frames The number of successfully transmitted frames whose destination address was a multicast address (received by more that one station): not necessarily broadcast to all stations, but more than a single station. Broadcast messages are included in the count. OUT-Fragments The number of successful transmissions made. This will typically be greater than the sum of the Unicast and Multicast frames because large Network Name (SSID) 030-300444 Rev. A 133 December 2005 Section 16 Troubleshooting
User Guide
VersaLink Gateway (B90-327W15-06) frames are broken into multiple transmissions. The number of fragments per frame is based on the Fragmentation Threshold setting (not userconfigurable). The number of frames that successfully transmitted after more than one retry. Any fragment of a frame that required multiple retries would increment this counter for the whole frame. The number of frames that did not transmit due to the short or long retry limit being reached because no acknowledgement or CTS was received. The number of successfully received frames whose destination address was a single location, not necessarily the same location, but to any single location as opposed to the broadcast address. The number of successfully received frames whose destination address was a multicast address. Broadcast messages are included in this count. The number of fragments successfully received. This may not be equal to the sum of the Unicast and Multicast frames because large frames are broken into multiple transmissions. The number of fragments per frame is based on the Fragmentation Threshold setting (not user-configurable) on the source station. The number of frames that successfully transmitted after more than one retry. Any fragment of a frame that required multiple retries would increment this counter for the whole frame. The number of received frames discarded due to lack of buffer space.
OUT-Frames after one or more retries OUT-Dropped Frames, too many retries IN-Unicast Frames
16.5 Status
030-300444 Rev. A
134
User Guide
Devices on LAN Displays the IP network address that VersaLink is on. Media Access Controller (MAC) address of this device. Displays the ASCII (text) name of the devices connected to the LAN. Displays the status of the devices connected to the LAN.
030-300444 Rev. A
135
User Guide
Wireless Stations List This number indicates the order in which the stations are first accessed by VersaLink. The Media Access Controller Address assigned to the station. The current state of the negotiation between the station and VersaLink. Indicates whether the station that is associated with VersaLink operates in PBCC (Packet Binary Convolutional Code) modulation. The current transmit and receive rate.
030-300444 Rev. A
136
User Guide
RIP Network Routing Table RIP Host Routing Table Destination Netmask Gateway Metric
Indicates Network routes received via RIP. The Host routes received via RIP. The destination IP address of the route The IP mask of the route The gateway of the route The RIP metric (0-15). A lower value is better.
030-300444 Rev. A
137
User Guide
030-300444 Rev. A
138
VersaLink Gateway (B90-327W15-06) Indicates the DiffServ Queue. Possible responses are: 0 = Best Effort (BE) 1 = Assured Forwarding 1 (AF1) 2 = Assured Forwarding 2 (AF2) 3 = Assured Forwarding 2 (AF3) 4 = Assured Forwarding 2 (AF4) 5 = Expedited Forwarding (EF) 6 = Routing Protocols (DiffServ priorities 6 and 7) The maximum number of packets that can be queued for this priority. Indicates how many packets of this priority have been dropped by QOS due to lack of buffer space or filtering rules. Displays the number of packets, destined for the WAN, that have been received. Displays the current number of packets of this priority that are queued. Displays the most number of packets that have been queued at once for this priority. QOS Filter Statistics The DiffServ Queue. (See Queue Number description above.) The maximum allowed rate for this priority, expressed as a percentage of the DSL rate. The committed rate for this priority, expressed as a percentage of the DSL rate Displays the interval in milliseconds for averaging the peak offered rate. Displays the interval in milliseconds for averaging the committed offered rate. Displays the total number of packets of this priority that are destined for the LAN. Displays the number of packets of this priority that exceeded the committed rate, but not the peak rate, and were marked with a higher drop priority Displays the number of packets of this priority that exceeded the peak rate and that were, therefore, dropped. Displays the average size of packets for this priority, including all overhead. Displays the average rate (in packets per seconds) for this priority. QOS Latency Counts The DiffServ Queue. (See Queue Number description above.) The packets with no incoming time stamp. (Often these are generated internal to the modem.) The number of packets of this priority whose time in the modem fell between A and B milliseconds. (Time is measured from the point the packet arrives at the modems processor until is passed to the ATM hardware for transmission.) Possible ranges are (A ms to B ms): 0 ms to 10 ms 10 ms to 20 ms 20 ms to 40 ms 40 ms to 100 ms 100 ms to 1000 ms 1000 ms to 3000 ms Larger than 3000 ms
Max Queue Size Total Dropped Packets Total Enqueued Packets Current Depth Deepest Depth
Queue Number Peak Info. Rate (%) Committed Info Rate (%) Peak Burst (ms) Committed Burst (ms) Total Packets Received Total Marked Packets Total Filter Packet Drops Avg. DSL Bytes Per Packet Avg. Packet Rate Per second Queue Number Not Time Stamped A ms to B ms
030-300444 Rev. A
139
User Guide
SIP Registry Information The SIP URI that is trying to register. (This field only indicates that a SIP device tried to register, not that it succeeded.) The local, LAN IP address of the SIP device. Indicates how long (in seconds) until the registration expires.
030-300444 Rev. A
140
User Guide
NOTE: To configure VersaLink for a service or application, follow the steps in section 14 (Setting Up Advanced Service Configuration) of this User Guide. Applications/Games/VPN Support Port/Protocol 80 UDP, 2300 UDP, 8000-8999 UDP 5190 TCP/UDP 47624 TCP/UDP, 6073 TCP/UDP, 2300-2400 TCP/UDP 4099 TCP, 5190 TCP 9000-9013 UDP, 28800-29000 TCP 2300-2400 TCP/UDP, 47624 TCP/UDP 2611-2612 TCP, 6667 TCP, 6500 UDP, 27900 UDP 4000 TCP, 6112 TCP/UDP 700, 701 UDP 3453 TCP 3000 UDP, 5190 TCP 1494 TCP 110 TCP 25 TCP 27015 TCP/UDP, 27016 TCP/UDP 26214 TCP/UDP 3568 UDP, 3100-3999 TCP/UDP 3568-3569 UDP UDP 53 TCP 21 TCP 7430 TCP 80 UDP 1029 UDP 1144 UDP 65436 UDP 17478 53 UDP 2600 UDP, 27500 UDP, 27910 UDP, 27960 UDP 1024-7000 TCP/UDP 3863 UDP 4660-4670 TCP/UDP, 3875 UDP, 4533-4534 UDP, 4660-4670 UDP 3874-3875 UDP 50000-50100 TCP/UDP 50000-50100 TCP/UDP, 47624 TCP, 2300-2400 TCP/UDP 141 December 2005 Section 17 NAT Services
Application/Game Aliens vs. Predator America Online AoE II: Conquors AOL Instant Messenger Asheron's Call Battlecom Black and White Blizzard Battle.net (Diablo II) Buddy Phone Bungie.net, Myth, Myth II Server Calista IP Phone Citrix Metaframe Client POP/IMAP Client SMTP Counter Strike Dark Reign 2 Delta Force ( Client and Server ) Delta Force 2 DeltaForce: Land Warrior
DNS Elite Force Everquest F-16, Mig 29 F-22 Lightning 3 F-22 Raptor Fighter Ace II Fighter Ace II for DX play 030-300444 Rev. A
VersaLink Gateway (B90-327W15-06) Port/Protocol 20 TCP, 21 TCP UDP 3783 UDP 6515 TCP 6667 UDP 12203 TCP/UDP 13139 UDP 27900 UDP 28900 UDP 29900 UDP 29901 TCP 80 UDP 1038 UDP 1032 UDP 53 UDP 2347 UDP 2346 6346 TCP/UDP, 1214 TCP 27005 UDP(client only) 27015 UDP 28910 TCP 26900 (+1) each player needs their own port. Increment by one for each person 5500, 5503 TCP 5499 UDP 443 TCP/UDP 4 ICMP 4000 UDP, 20000-20019 TCP 4099 TCP, 5190 TCP 2000-2038 TCP, 2050-2051 TCP, 2069 TCP, 2085 TCP, 3010-3030 TCP 1024-5000 TCP, 2050-2051 TCP, 2069 TCP, 2085 TCP, 3010-3030 TCP, 2000-2038 TCP6700-6702 TCP, 6880 TCP, 1200-16090 TCP 119 TCP/UDP 220 TCP/UDP 22555 UDP PROTOCOL 50 500 UDP 9943 UDP, 56768 UDP 2213 UDP, 6666 UDP (EACH PC USING KALI MUST USE A DIFFERENT PORT NUMBER STARTING WITH 2213 + 1 1214 TCP/UDP 6346 TCP/UDP, 1214 TCP TCP 80 UDP 53 UDP 2093 UDP 12201 TCP 12300 UDP 2135 UDP 2139 TCP/UDP 28900 6660-6669 TCP 142 December 2005 Section 17 NAT Services
Ghost Recon
GNUtella Half Life Server Heretic II Server Hexen II Hotline Server HTTPS ICMP Echo ICQ OLD ICQ 2001b ICUII Client ICUII Client Version 4.xx IMAP IMAP v.3 Internet Phone IPSEC ESP IPSEC IKE Ivisit KALI, Doom & Doom II KaZaA Limewire Medal Of Honor: Allied Assault
User Guide Application/Game Motorhead Server MSN Game Zone MSN Game Zone (DX 7 & 8 play) MSN Messenger Napster Need for Speed 3, Hot Pursuit Need for Speed, Porsche Net2Phone NNTP Operation FlashPoint Outlaws Pal Talk pcAnywhere host Phone Free Quake 2 Quake 3
VersaLink Gateway (B90-327W15-06) Port/Protocol 16000 TCP/UDP, 16010-16030 TCP/UDP 6667 TCP, 28800-29000 TCP 6667 TCP, 6073 TCP, 28800-29000 TCP, 47624 TCP, 2300-2400 TCP/UDP 6891-6900 TCP, 1863 TCP/UDP, 5190 UDP, 6901 TCP/UDP 6699 TCP 1030 TCP 9442 UDP 6801 UDP 119 TCP/UDP 47624 UDP, 6073 UDP, 2300-2400 TCP/UDP, 2234 TCP 5310 TCP/UDP 2090-2091 TCP/UDP, 2095 TCP, 5001 TCP, 8200-8700 TCP/UDP, 10252500 UDP 5631 TCP, 5632 UDP, 22 UDP 1034-1035 TCP/UDP, 9900-9901 UDP, 2644 TCP, 8000 TCP 27910 UDP 27660 UDP Each computer playing QuakeIII must use a different port number, starting at 27660 and incrementing by 1. You'll also need to do the following: 1. Right click on the QIII icon 2. Choose "Properties" 3. In the Target field you'll see a line like "C:\Program Files\Quake III Arena\quake3.exe" 4. Add the Quake III net_port command to specify a unique communication port for each system. The complete field should look like this: "C:\Program Files\Quake III Arena\quake3.exe" +set net_port 27660 5. Click OK. 6. Repeat for each system behind the NAT, adding one to the net_port selected (27660,27661,27662) 6970-32000 UDP, 554 TCP/UDP 2346 TCP TCP - 554, 7070 to 7071 UDP - 6970 to 7170 6970-7170 UDP TCP/UDP 3782 UDP 3783 (BaseStation) 8000-8005 TCP 22 TCP/UDP 2346 TCP 2300-2400 TCP/UDP, 47624 TCP/UDP 23 TCP 1140-1234, 4000 TCP/UDP 5001-5010 TCP, 7775-7777 TCP, 8800-8900 TCP, 9999 UDP, 7875 UDP 7777 (default gameplay port) 7778 (server query port 7779,7779+ are allocated dynamically for each helper UdpLink objects, 143 December 2005 Section 17 NAT Services
Quicktime 4/Real Audio Rainbow Six & Rogue Spear RealOne Player Real Audio Roger Wilco ShoutCast Server SSH Secure Shell Starcraft Starfleet Command Telnet Tiberian Sun & Dune 2000 Ultima Online Unreal Tournament server
030-300444 Rev. A
VersaLink Gateway (B90-327W15-06) Port/Protocol including UdpServerUplin objects. Try starting with 7779-7781 and add ports if needed 27900 server query, if master server uplink is enabled. Home master servers use other ports like 27500 Port 8080 is for UT Server Admin. In the [UWeb.WebServer] section of the server.ini file, set the ListenPort to 8080 and ServerName to the IP assigned to VersaLink from your ISP. 143 TCP 5500 TCP, 5800 TCP, 5900 TCP 4000 TCP/UDP, 1140-1234 TCP/UDP 80 TCP 443 TCP (SSL) 8008 OR 8080 TCP (PROXY) TCP/UDP 88 and 3074 5000-5001 TCP 5055 UDP Comments IPSec using AH can not be supported through NAT. IPSec using ESP and L2TP can be supported via an ALG IPSec using ESP and L2TP can be supported via an ALG. Works through NAT.
USENET News Service VNC, Virtual Network Computing Westwood Online, C&C World Wide Web (HTTP)
XBOX Live Yahoo Messenger Chat Yahoo Messenger Phone VPN Protocol IPSec Encryption L2TP PPTP
030-300444 Rev. A
144
User Guide
18. HELP
If you select Help from the menu bar, a message from the help screens will be displayed. The type of message displayed depends on the menu that you are viewing. If you are viewing a pop-up screen, click the help link in the pop-up screen to obtain help messages.
A
About
This screen provides information about VersaLink. About VersaLink manufacturer's model number. VersaLink manufacturer's serial number. Ethernet MAC (i.e., hardware) Address of VersaLink. VersaLink application software version number. VersaLink application type. Description of VersaLink protocol processing application software. VersaLinks boot loader version number.
Model Number Serial Number MAC Address Software Version Software Model Description Boot Loader
ATM Loopback
ATM Loopback ATM Loopback This setting enables 0/21 loopback. Westell recommends that you do not change this setting.
030-300444 Rev. A
145
User Guide
B
Backup/Restore
This option allows VersaLink configuration to be backed up to or restored from a secure location in flash. The following options are displayed. Backup/Restore Selecting this command button will backup the current active configuration to the secure flash location. This command button will restore the previously stored configuration from the flash location. This option will restore VersaLink to the state that it arrived in from the factory.
C
Change Administration Password
VersaLink has an administrator password. This password protects VersaLink from any unauthorized modifications to the configuration setting in VersaLink. The following settings are displayed. Change Administration Password This field specifies the Administrator's name. Only one administrator can be defined. This field specifies the password required to enable administrator access. The password must be entered twice to ensure that the password has been entered correctly.
Connection Summary
Connection Summary Connection Summary The connection profile screen displays summary information about VersaLink. The connection state is shown along with the amount of traffic has passed through VersaLink. Each connection profile is listed with its associated usage information.
D
Diagnostics Help
This screen provides tools for diagnosing PPP connection problems. Some tests depend on VersaLinks status and the capabilities exercised by previous tests, which may prevent other types of testing.
030-300444 Rev. A
146
DSL VersaLink status checks the connection. The following is a list of the possible responses: DSL VersaLink is operating correctly and has obtained synchronization with the opposing DSLAM. Explanation: VersaLink is operating correctly, but has not synchronized with the opposing DSLAM. Solution: First, check to be sure that the cable connecting VersaLink to the ADSL wall jack is properly connected at both ends. If the cable is properly connected and VersaLink does not synchronize, try another phone cable. Next, wait for VersaLink to train. It can sometimes take as long as two minutes for VersaLink to train. If it still has not come into synchronization, power cycle VersaLink. If you have tried the approach above and VersaLink still does not synchronize, contact your service provider.
Up Down
PPPoE The PPPoE status indicates if a PPPoE session is established (i.e., if the PPPoE Discovery procedure has completed). The following is a list of the possible responses: PPPoE A valid PPPoE session has been detected. Currently there is no active PPPoE session. A PPP session must be connected from the homepage screen. The connection process for a PPPoE session has been initialized. It can sometimes take a few seconds for the PPPoE Discovery procedure to complete. Wait 10-15 seconds and try again. If the PPPoE Discovery still cannot complete, there may be a configuration issue with your service provider's equipment. Verify your VPI/VCI settings (on the LAN Advanced page) and contact your ISP provider. A successful PPPoE session was halted. A PPP session must be connected from the homepage screen. A valid PPPoE session was established. A PPPoE session could not be made. There may be a configuration issue with your service provider's equipment. Verify your VPI/VCI settings (on the LAN Advanced page) and contact your provider.
PPP This field displays the PPP Connection status. A PPPoE or PPPoA session must already be established. The following is a list of the possible responses: PPP VersaLink has established a PPP connection. There is no PPP connection. A PPP session must be connected from the homepage screen. The PPP connection process has been initialized. A successful PPP connection was halted. Solution: A PPP session must be connected from the homepage screen. Explanation: A PPP connection could not be made because of a PPPoE session failure. The username or password is incorrect. Verify that the username and password your Service Provider issued are entered correctly. Try re-establishing the session (from the home page). If this doesn't help, there may be a configuration issue or other failure with your provider's equipment. Contact your service provider. 147 December 2005 Section 18 Help
Connection up no connection initiating connection Connection halted Cannot connect Authorization failure Link control protocol failed
030-300444 Rev. A
User Guide
Self Test The Self Test performs an integrity check of certain internal components of VersaLink. The following is a list of the possible responses: Self Test VersaLink is operating correctly. Explanation: The self-test process has detected a problem with internal flash memory. Solution: Restart VersaLink. If the error persists, contact your service provider.
PING ISPs' VersaLink The IP remote VersaLink test performs an IP network check (i.e., an IP Ping) of the Service Provider's VersaLink. This test verifies that VersaLink can exchange IP traffic with an entity on the other side of the DSL line. The following is a list of the possible responses: PING ISPs VersaLink VersaLink has detected an IP remote VersaLink connection. Explanation: This message will occur when an IP remote VersaLink does not answer the IP Ping. Solution: This test fails when the provider's VersaLink does not give its IP address to VersaLink during session establishment. Try Pinging another host, using the Ping test near the bottom of the Diagnostic screen. If you are able to Ping any host, or even if you are able to find an IP address for a given host name (try "www.yahoo.com"), then the failure of the "IP Remote VersaLink" test is moot, because the success of the Ping demonstrates that you are getting IP traffic across the DSL line. If the separate Ping fails as well, contact your service provider. Explanation: Test could not be executed because of VersaLink status.
Success No Response
DNS The DNS test issues a request to try to resolve the name of a particular host. The host name is entered in the input box. The following is a list of the possible responses: DNS VersaLink has successfully obtained the resolved address. The IP address is shown below the host name input box Explanation: VersaLink has failed to successfully obtain the resolved address. Solution: Determine the IP addresses of your DNS servers (from the home page, click "Edit" and then "Advanced"), and then use the Ping test near the bottom of the Diagnostic screen to try to Ping those addresses. This may provide useful information when you contact your service provider and speak with Technical Support. Explanation: The DNS Server was unable to find an address for the given host name. Solution: That host may no longer be available on the Internet. Try entering a different host name. Explanation: There must be a host name entered in the input box. Explanation: Test could not be executed because of VersaLink status.
Success No Response
148
User Guide
Select PING to check IP continuity to a remote computer either within or beyond the Service Providers network. Enter either the IP address or the hostname of the remote host computer in the input box to the right of the Test button. If you Ping by name, DNS will be used to look up the appropriate IP address for that name. The following is a list of the possible responses: PING The Remote Host Computer was detected. Explanation: This message will occur when there was no response to the Ping from the remote computer. Solution: Bear in mind that many hosts on the Internet are configured for security reasons to not respond to IP Ping messages. If you get a success from the DNS test using the same host name, chances are your connection is fine, whether you can Ping the named host or not. Explanation: There must be a host name or IP address entered in the input box to allow VersaLink to Ping. Explanation: Test could not be executed because of VersaLink status.
Success No Response
DHCP Configuration
This screen contains the settings which control how VersaLink interacts with the local devices connected to it. Westell recommends that you do not change these settings. The following settings are displayed. DHCP Dynamic Host Configuration Protocol (DHCP) is an Internet standard that allows VersaLink to automatically assign IP addresses to devices connected on the LAN network. It is advised that this is enabled for Private LAN. This setting specifies the start of the IP address pool that the modem uses to assign IP addresses to local devices. This setting specifies the end address of the IP address pool used for automatic configuration of local devices. This setting specifies the DHCP lease time.
DHCP Server
DHCP Start Address (If DHCP is enabled) DHCP End Address (If DHCP is enabled) DHCP Lease (If DHCP is enabled)
Diagnostic Log
LOGS Lists both connection and system logs. Lists all events related to connection activity (Any traffic on the Ethernet, or DSL ports). Lists all events related to system activity (Time, Errors, Boot Information, etc.). Remote Logging Remote Logging Contains the configuration for the diagnostics remote logging. Remote diagnostics logging allows the diagnostics logs to be sent to a machine running a syslog server*. If you want to save the diagnostics logs, remote diagnostics logging should be enabled and the IP address of the syslog server must be configured. Enable Enables remote logging of diagnostics logs. Remote IP Address The IP address of the syslog server machine to which the diagnostics log are to be sent. *The syslog server must be configured to isten on udp port 514, which is usually the default port. In order for the logs to be saved to the syslog server, the server should be configured to save the logs to a file. Some of the free syslog servers available on the Internet are kiwisyslog, MT_syslog and 3Csyslog. All Connection System
030-300444 Rev. A
149
User Guide
DNS Configuration
VersaLink has a built-in DNS server. VersaLink has a feature called "Dynamic DNS." When an IP address is assigned, VersaLink will interrogate the new device for a machine name using several well-known networking protocols. Any names learned will dynamically be added to the DNS servers table of local hosts. A static host assignment is needed only if the new device does not support any of the well-known protocols. The following settings are displayed. DNS Configuration Screen The name of your network. This uses the internet standard for delineating domain names. This table allows the creation and maintenance of manually configured DNS entries. This table shows the current list of devices that have automatically provided information.
E
Edit Connection Profiles
This screen facilitates the changing of connection profile parameters. The following settings are displayed. Edit Connection Profiles This field is a description of the default connection profile that VersaLink will use. Feel free to use whatever description you desire. Your account ID is supplied by your ISP. This text string uniquely identifies you with your ISP. The Account Password is a key phrase or text string that verifies your identity to the ISP. VersaLink stores several service profiles. A service profile is a collection of settings for the built-in firewall and NAT. These settings control which applications are enabled to talk through VersaLink. This selection specifies which service profile is used when VersaLink is using this connection. These radio buttons specify how this connection profile is used. A manual setting requires that this connection must be manually established through the homepage connection button. When this is set to auto, VersaLink will monitor the network traffic and determine when a connection needs to be made. The connection process will happen automatically the Always ON selection causes VersaLink to aggressively establish a connection with your ISP. Whenever VersaLink detects that the connection to your ISP is down, it will try to reestablish that connection. Selecting this option will enable the disconnect timeout. If this option is enabled VersaLink will monitor the ISP connection for activity. If there is no activity for the timeout period, VersaLink will disconnect from the ISP. This screen is an advanced screen. Modifying parameters identified on this screen can cause severe disruption of your service. VC stands for Virtual Connection. A VC identifies a connection through the service providers ATM network to your ISP. It is not recommended that you change anything on these pages unless explicitly instructed by your service provider.
Manual/Auto/Always ON
030-300444 Rev. A
150
User Guide
F
Firewall Log
This screen is an advanced diagnostics screen. It alerts you of noteworthy information sent to your modem from the Internet. One thousand entries can be made, but a maximum of 50 entries are displayed at a time. Once 1000 entries have been logged, the oldest entry is removed to make space for new entries as they occur. Firewall Log This option gives more information about the specific log entry This option navigates you to the corresponding range of entries. The most recent entries are always on the highest numbered page. This option removes all entries from the log. This option opens a new window that contains a list of all logged packets that can be saved or printed.
Firewall Settings
This screen is an advanced configuration screen. It allows you to set the level of security you wish to have on your local network. All security levels except None protect against known Internet attacks and devices that attempt to gain remote access to VersaLink. The following settings are displayed. Firewall Settings This security level only allows basic Internet functionality. Only Mail, News, Web, FTP, and IPSEC are allowed. No other traffic is allowed. Another restriction of high security is that it cant be modified by NAT configuration options. With High security, you are guaranteed to only pass the previously mentioned traffic. Medium This security level only allows basic Internet functionality by default, just like High security. Medium security, however, allows Customization through NAT configuration, so you can enable the traffic that you want to pass. Low The low security setting will allow all traffic except for known attacks. With low security, your Gateway is visible by other computers on the Internet. Custom Custom is a very advanced configuration option that allows you to edit the firewall configuration directly. Only the most expert users should try this. Remote Logging Contains the configuration for the firewall remote logging. Remote firewall logging allows the firewall logs to b sent to a machine running a syslog server*. If you desire to save the firewall logs, remote firewall logging must be enabled and the IP address of the syslog server must be configured. Enable This option enables remote logging of firewall logs. Remote IP Address The IP address of the syslog server machine on the local area network to which the firewall logs are to be sent. *The syslog server must be configured to isten on udp port 514, which is usually the default port. In order for the logs to be saved to the syslog server, the server should be configured to save the logs to a file. Some of the free syslog servers available on the Internet are kiwisyslog, MT_syslog and 3Csyslog. High
030-300444 Rev. A
151
User Guide
H
Home Page
The home page gives you a quick summary of VersaLinks state. The following settings are displayed. Home Page The Connection Overview section displays the status of the DSL connection. The DSL must show a state of UP to allow VersaLink to communicate with your service providers network. The Connection Name section displays all of the connection profiles that are defined by VersaLink. A connection profile is information that VersaLink needs to establish a connection to your ISP. The PPP Status columns will show a status of UP if VersaLink is currently using that profile to communicate. The command button allows you to control the connection state. Selecting the Profile Editor link will allow you to define or change any of the connection profile settings.
Profile Editor
L
LAN Configuration
This screen contains the setting that controls how VersaLink interacts with the local devices connected to VersaLink. Westell does not recommend that you change these settings. The following settings are displayed. LAN Configuration This controls the IP address that VersaLink uses for local communication. This setting specifies the subnet mask to use to determine if an IP address belongs to your local network. This setting specifies the start of the IP address pool that VersaLink uses to assign IP addresses to local devices. This setting specifies the end address of the IP address pool used for automatic configuration of local devices. DNS stands for Domain Name System. This is an Internet standard that facilitates communication among devices. This allows a name to be used when specifying a device instead of an IP address. Normally you want this enabled. DHCP stands for Dynamic Host Configuration Protocol. This is an Internet standard that allows VersaLink to automatically assign IP addresses to devices connected on the LAN network. It is advised that this opt ion is set to Enabled.
Gateway IP Address Subnet Mask DHCP Start Address DHCP End Address DNS Server Enable
030-300444 Rev. A
152
User Guide
LAN Statistics
This page contains information regarding the configuration and status of your Local LAN. The following settings are displayed. LAN Configuration This displays the IP address that VersaLink uses for local communication. This displays the subnet address that VersaLinks DHCP server issues in DHCP responses. This setting specifies the start of the IP address pool that the modem uses to assign IP addresses to local devices. This setting specifies the end address of the IP address pool used for automatic configuration of local devices. Displays the status, ON or OFF of the DHCP Server Displays which network Public or Private the DHCP server is serving IP addresses for. This page displays the current devices the modem has found on your LAN. The name of the device, the Ethernet MAC address, and the status, Active or Inactive is displayed in the table.
Device IP Address DHCP NetMask DHCP Start Address DHCP End Address DHCP Server Status DHCP Server Devices on LAN
P
Private LAN
This page contains the settings that control how VersaLink interacts with the local devices connected to VersaLink. It is not recommended that these settings be changed. The following settings are displayed. Private LAN Dynamic Host Configuration Protocol (DHCP) is an Internet standard that allows VersaLink to automatically assign IP addresses to devices connected on the LAN network. It is advised that this is enabled for Private LAN. This setting enables the Private NATed interface. It is advised to leave this enabled. This controls the IP address that VersaLink uses for local communication. This setting specifies the subnet mask to use to determine if an IP address belongs to your local network. This setting specifies the start of the IP address pool that the modem uses to assign IP addresses to local devices. This setting specifies the end address of the IP address pool used for automatic configuration of local devices. This setting specifies the DHCP lease time.
Private LAN DHCP Server Enable Private LAN Enable Modem IP Address Subnet Mask DHCP Start Address (If DHCP is enabled for Private LAN) DHCP End Address (If DHCP is enabled for Private LAN) DHCP Lease (If DHCP is enabled for Private LAN)
030-300444 Rev. A
153
User Guide
Protocol
Protocol Protocol This screen informs VersaLink which networking protocol to use when communicating with your ISP. This information is provided by your ISP.
Public LAN
This screen contains the settings that control how VersaLink interacts with the local devices connected to VersaLink. It is not recommended that these settings be changed. The following settings are displayed. Public LAN Dynamic Host Configuration Protocol (DHCP) is an Internet standard that allows VersaLink to automatically assign IP addresses to devices connected on the LAN network. It is advised that this is enabled for Private LAN. This setting enables the Public interface. This feature allows a global subnet to exist behind your modem. This controls the IP address that VersaLink uses for local communication. This setting specifies the subnet mask to use to determine if an IP address belongs to your local network. This setting specifies the start of the IP address pool that the modem uses to assign IP addresses to local devices. This setting specifies the end address of the IP address pool used for automatic configuration of local devices. This setting specifies the DHCP lease time.
Public LAN DHCP Server Enable Public LAN Enable Modem IP Address Subnet Mask DHCP Start Address (If DHCP is enabled for Public LAN) DHCP End Address (If DHCP is enabled for Public LAN) DHCP Lease (If DHCP is enabled for Public LAN)
Q
Quality of Service
Quality of Service Quality of Service This feature helps ensure data integrity in high-speed transmissions. This feature provides the capability to partition network traffic into multiple priority levels or classes of service. After packet classification, other QoS features can be utilized to assign the appropriate traffic handling policies including congestion management, bandwidth allocation, and delay bounds for each traffic class.
030-300444 Rev. A
154
User Guide
R
Remote Access
This page allows you to configure your modem so that it can be configured remotely. Once enabled, this feature can be manually disabled, or it will automatically disable after 20 minutes of configuration inactivity. Remote Access This is the password a remote user must enter to access your modems interface. It must be at least 4 characters long and contain no spaces. This field contains the URL that must be placed in a remote PCs web browser in order to communicate with your modem. If this field says Not Connected, you are not currently connected to the Internet. When you have clicked on this button, entered a valid password, and connected to the Internet, Remote Access will be enabled. When you have clicked on this button, Remote Access will be disabled.
Password URL
information within a self-contained network such as a corporate local area network or an interconnected group of such LANs.
S
Single Static IP
This page contains the settings that would allow the PPP address received from the network to be propagated to a single LAN device behind the modem. Single Static IP This is the PPP IP address the ISP has assigned the modem. This box contains the devices available to share the Single Static IP address the ISP has assigned the modem. The names listed in the select box will be populated by VersaLinks DHCP server based on DHCP requests. If a devices name cannot be determined, the current IP address of the device will be placed in the list. When the feature is enabled, the active machine will be highlighted in the select box and be displayed at the bottom of the page with the disable button. When the feature is disabled, no device in the select box will be highlighted and the enable button will be available. When the User Configured PC is selected, a local PC must be configured manually with the WAN IP address as its Ethernet adapters address.
030-300444 Rev. A
155
User Guide
T
Trace Route
The Trace feature allows you to perform an IP trace route to a remote computer either within or beyond the service providers network. Enter either the IP address or the hostname of the remote host computer into the input box to the right of the Trace button. If you trace by name, DNS will be used to look up the appropriate IP address for that name. Trace Trace will display its progress in the text box. Trace will show three round trip times and the DNS name (if available) of each intermediate VersaLink. Trace will display * when it does not receive a response or cannot determine the DNS name of an intermediate Gateway. This is not necessarily an error, as some Gateways are configured to ignore trace route packets or do not have DNS name.
Success Failure
Turbo TCP
Turbo Turbo TCP is a sophisticated network traffic prioritization and queuing method that dramatically improves the performance of downstream TCP/FTP/HTTP transfers under heavy upstream bandwidth utilization conditions. This feature first assigns a high priority to TCP signaling packets in the upstream direction, then places the packet in one of several transmit queues based on this priority. Packets of unspecified priority, like TCP or UDP data, are assigned a low priority and placed in a low priority queue. The packets in the high priority queues are then transmitted before packets in the lower priority queues minimizing any transmit delays. Minimizing the transmit delay of the TCP messages upstream enables the server to send the TCP data downstream faster, resulting in a substantial throughput gain.
U
Update Device
Update Device (Software Upgrade) Update Device (Software Upgrade) This screen is used to upgrade VersaLinks application image. The application image is specified by entering in the filename or by using the browse button.
User Name
This screen is asks for information that will allow VersaLink to make a connection to the ISP on your behalf. VersaLink will need to know your Account ID and Account Password. This information is stored in VersaLink. User Name This is a description of the default connection profile, which VersaLink will use. Feel free to use whatever description you desire. Your Account ID is supplied by your ISP and is a text string that uniquely identifies you with your ISP. The Account Password is a key phrase or text string that verifies your identity to your ISP.
030-300444 Rev. A
156
User Guide
V
VC Configuration
VC Configuration VC Configuration Screen This screen is an advanced screen. Modifying parameters on this screen can cause severe disruption of your service. VC stands for Virtual Connection. A VC identifies a connection through the service providers ATM network to your ISP. It is not recommended that anything be changed on these pages unless explicitly instructed by your service provider.
VLAN
VLAN VC Configuration Screen A virtual (or logical) LAN is a local area network with a definition that maps workstations on some other basis than geographic location.
VPI/VCI
VPI/VCI VPI/VCI This screen asks for information that VersaLink needs to establish a communication channel to your ISP. The VPI and VCI values are supplied by your ISP.
W
Wireless Configuration
ACRONYMS AP-Access Point BSSID-Basic Service Set ID FW-Firmware MAC-Media Access Controller NIC-Network Interface Card PBCC-Packet Binary Convolutional Code SSID-Service Set ID WEP-Wired Equivalent Privacy WLAN-Wireless Local Area Network This string, (32 characters or less) is the name associated with the AP (modem). To connect to the AP, the SSID on a Station card must match the SSID on the AP card or be set to ANY. The AP transmits and receives data on this channel. The number of channels to choose from is pre-programmed into the AP card. Station cards do not have to be set to the same channel as the AP; the Stations scan all channels, and look for an AP to connect to. The AP card supports 64-bit, 128-bit, or 256-bit WEP encryption. The WEP option can also be disabled. If so, any station can connect to the modem (as long as its SSID matches the modems SSID). If selected, the WEP Key is treated as a string of text characters, and the number of characters must be either 5 (for 64-bit encryption) or 13 (for 128-bit encryption) or 29 (for 256-bit encryption). If not selected, the WEP key is treated as a string of hexadecimal characters, and the number of characters must be either 10 (for 64-bit encryption), 26 (for 128-bit encryption), or 58 (for 256-bit encryption). The only allowable hexadecimal characters are 0-9 and A-F. NOTE: The WEP key must be the same value and type for both VersaLink and the wireless network adapter. Pass Phrase is not the same as text and should not be used. 157 December 2005 Section 18 Help
WEP Security
WEP (Wired Equivalent Privacy)
030-300444 Rev. A
VersaLink Gateway (B90-327W15-06) If selected, the SSID is hidden from detection in certain frames of the radio protocol. This makes the SSID harder to discover by external equipment capable of passively scanning the radio signal. Additionally, the station SSID must match the AP Network Name (SSID); the generic station SSID, ANY will be refused. These are the allowable communication rates that the AP will attempt to use. The rates are broadcast within the connection protocol as rates supported by the VersaLink. If multiple rates are chosen, multi-rate communication and automatic optimum rate selection is possible. This is the default, and provides the most flexible system. If the Station signal strength or quality is poor, and the throughput of the connection is slow or intermittent, select only the lower two data rates (1 and 2 MB). This can improve performance by reducing the number of pad packets, retries and timeouts that could be occurring when the higher rates are automatically trying to be used. Lower rates can be maintained over longer distances and in a wider range of environments.
Authentication Algorithm
Wireless Statistics
Network Name (SSID) 802.11b/g MAC Address (BSSID) Primary FW This string, (32 characters or less) is the name associated with the AP. To connect to the AP, the SSID on a Station card must match the SSID on the AP. This is the Media Access Controller address of the AP. It is used as the Basic Service Set Identifier. Primary firmware version number. This is read from the card and helps determine the AP firmware to use. The format of the number is: >. The version number is also needed to identify existing errata. Secondary firmware version number. This is the station firmware that the card would use to operate as a wireless station. The format of the number is >. The version number is needed to identify existing errata. Data preceded by OUT pertain to transmissions from VersaLink to a station; VersaLink is the source. Data preceded by IN pertain to data received by VersaLink; VersaLink is the destination. 158 December 2005 Section 18 Help
Secondary FW
OUT and IN
030-300444 Rev. A
VersaLink Gateway (B90-327W15-06) The number of successfully transmitted frames whose destination address was a single station, not necessarily the same station, but to any single station: As opposed to a transmission that multiple stations would receive (for example, a broadcast message). The number of successfully transmitted frames whose destination address was a multicast address (received by more that one station): not necessarily broadcast to all stations, but more than a single station. Broadcast messages are included in the count. The number of successful transmissions made. This will typically be greater than the sum of the Unicast and Multicast frames because large frames are broken into multiple transmissions. The number of fragments per frame is based on the Fragmentation Threshold setting (not user-configurable). The number of bytes transmitted in Unicast Frames, including the header and body of each frame. The number of bytes transmitted in Multicast Frames. This includes the header and body of each frame or frame fragment. The number of frames (frame fragments) for which one or more transmission attempts were deferred to avoid a collision. The number of frames that were successfully transmitted after one, and only one, retry. All fragments of the frame must have met this requirement if the frame was fragmented. The number of frames that successfully transmitted after more than one retry. Any fragment of a frame that required multiple retries would increment this counter for the whole frame. The number of frames that did not transmit due to the short or long retry limit being reached. This number is a result of no acknowledgement or CTS received. The number of transmit requests that were discarded to free up buffer space. This count is incremented when one of the following occurs: 1) A transmit request is queued too long on the transmit queue due to excessive retries, deferrals, scans, etc. 2) A transmit request is queued too long on the Power-Save queue because the station did not poll or wake up in time. The number of successfully received frames whose destination address was a single location, not necessarily the same location, but to any single location (as opposed to the broadcast address). The number of successfully received frames whose destination address was a multicast address. Broadcast messages are included in this count. The number of fragments successfully received. This might not be equal to the sum of the Unicast and Multicast frames because large frames are broken into multiple transmissions. The number of fragments per frame is based on the Fragmentation Threshold setting (not user-configurable) on the source station. The number of bytes received in Unicast Frames. This includes the header and body of each frame or frame fragment. The number of bytes received in Multicast Frames. This includes the header and body of each frame of frame fragment. The number of received frames with a Frame Check Sequence (FCS) error. The number of received frames discarded due to lack of buffer space. The number of received frames (with the WEP sub-field set to one) that were discarded because the frame should not have been encrypted or the source station did not have privacy enabled. The number of frames received successfully while another good reception was going on above the carrier detect threshold (the message-in-message path #1 in the modem). The number of frames received successfully while another reception was going on above the carrier detect threshold, but with a bad or incomplete PLCP Preamble and Header (the message-in-message path #2 in the modem).
OUT-Multicast Frames
OUT-Fragments
OUT-Unicast Bytes OUT-Multicast Bytes OUT-Transmission Deferred OUT-Frames after single retry OUT-Frames after many retries OUT-Dropped Frames, too many retries OUT-Discarded Frames
IN-Unicast Frames
IN-Unicast Bytes IN-Multicast Bytes IN-Packet not passing checksum IN-Drops due to insufficient Rx buffers IN-Un-decryptable packets IN-Messages received in message fragments IN-Messages received in bad message fragments
030-300444 Rev. A
159
User Guide
Connectors DSL: RJ-11, 6-pin modular jack-DSL Four Ethernet: 8-pin RJ-45 modular jack (When using the optional uplink jack, ETHERNET1, LAN connection is limited to jacks E2, E3, and E4) Power: Barrel connector Wireless IEEE 802.11b/g SMA connector and antenna Power Power Supply: External 120 VAC to 12V DC wall-mount power supply Power Consumption: Less than 6 watts typical, from 120 VAC Environmental Ambient Operating Temperature: +32 to +104F (0 to +40C) Relative Humidity: 5 to 95%, non-condensing EMC/Safety/Regulatory Certifications EMC: FCC Part 15, Class B UL Standard 60950, 3rd Edition CAN/CSA Standard C22.2 No. 60950 UL CSA ACTA 968-A Industry Canada CS03
030-300444 Rev. A
160
User Guide
030-300444 Rev. A
161
User Guide
6. Governing Law. This License Agreement shall be construed and governed in accordance with the laws of the State of Illinois. You submit to the jurisdiction of the state and federal courts of the state of Illinois and agree that venue is proper in those courts with regard to any litigation arising under this Agreement. 7. Costs of Litigation. If any action is brought by either party to this License Agreement against the other party regarding the subject matter hereof, the prevailing party shall be entitled to recover, in addition to any other relief granted, reasonable attorney fees and expenses of litigation. 8. Severability. Should any term of this License Agreement be declared void or unenforceable by any court of competent jurisdiction, such declaration shall have no effect on the remaining terms hereof. 9. No Waiver. The failure of either party to enforce any rights granted hereunder or to take action against the other party in the event of any breach hereunder shall not be deemed a waiver by that party as to subsequent enforcement of rights or subsequent actions in the event of future breaches.
030-300444 Rev. A
162
User Guide
030-300444 Rev. A
163