znid Administration and Configuration Guide For software version 1.1.0 January 2008 Document Part Number: 830-01703-04
Zhone Technologies @Zhone Way 7001 Oakport Street Oakland, CA 94621 USA 510.777.7000 www.zhone.com info@zhone.com COPYRIGHT 2000 2008 Zhone Technologies, Inc. All rights reserved. This publication is protected by copyright law. No part of this publication may be copied, distributed, displayed, modified, transmitted, stored in a retrieval system, or translated without express written permission from Zhone Technologies, Inc. Acculink, ADSL/R, Bitstorm, Comsphere, DSL the Easy Way, ETC, Etherloop, FrameSaver, GranDSLAM, GrandVIEW, Hotwire, the Hotwire logo, imarc, Jetstream, MVL, NextEDGE, Net to Net Technologies, OpenLane, Paradyne, the Paradyne logo, Performance Wizard, ReachDSL, StormPort, and TruePut are registered trademarks of Zhone Technologies, Inc. BAN, Connect to Success, GigMux, Hotwire Connected, JetFusion, JetVision, MALC, MicroBurst, PacketSurfer, Quick Channel, Raptor, Reverse Gateway, SLMS, Spectrum Manager, StormTracker, Z-Edge, Zhone, ZMS, and the Zhone logo are trademarks of Zhone Technologies, Inc. All other products names or service marks mentioned herein are the trademarks, trade names and service names of their respective owners. Zhone Technologies makes no representation or warranties with respect to the contents hereof and specifically disclaims any implied warranties of merchantability, noninfringement, or fitness for a particular purpose. Further, Zhone Technologies reserves the right to revise this publication and to make changes from time to time in the contents hereof without obligation of Zhone Technologies to notify any person of such revision or changes.
CONTENTS About This Guide 5 Style and notation conventions...5 Technical Support...8 Service Requirements...8 Chapter 4 Getting Started...9 Chapter 5 Web-based Management...13 Left Sidebar...15 Chapter 6 Network Connections...17 The Connection Wizard...19 Ethernet Gateway...19 Network Types...21 Point-to-Point Protocol over Ethernet (PPPoE)...42 Ethernet Connection...47 Dynamic Host Configuration Protocol (DHCP)...48 WAN-LAN Bridge...50 Virtual LAN Interface (VLAN)...57 Chapter 7 Security...71 Access Control...75 DMZ Host...84 Port Triggering...85 Network Address Translation (NAT)...92 Configuration...92 Using NAT/NAPT...96 Defining NAT/NAPT Rules...98 Advanced Filtering...104 Security Log...108 Applying Corporate-Grade Security...113 znid Administration and Configuration Guide 3
Chapter 8 Voice Over IP...117 Physical Setup...117 IP Telephony...117 Dialing Parameters...118 Signaling Protocol...118 Quality of Service...119 Phone Features...123 Codecs...125 RTCP...128 Chapter 9 Quality of Service...131 General...133 Chapter 10 Advanced...159 GPON znid ONU Information...164 Configuration File...170 Customer Factory default...170 Universal Plug and Play...180 Firmware Upgrade...185 Firmware Restore...203 Fast Path...204 Secure Socket Layer VPN...206 Chapter 11 System Monitoring...249 Monitoring Connections...249 Traffic Statistics...249 System Log...250 System Up Time...251 Chapter 12 znid TR-069 Commands...253 Choosing TR-069 Interface...253 TR-069 Commands...254 SNMP Management...255 Chapter 13 Glossary...257 4 znid Administration and Configuation Guide
ABOUT THIS GUIDE This guide is intended for use by installation technicians, system administrators, and network administrators. It explains how to configure the znid. Style and notation conventions The following conventions are used in this document to alert users to information that is instructional, warns of potential damage to system equipment or data, and warns of potential injury or death. Carefully read and follow the instructions included in this document. Caution: A caution alerts users to conditions or actions that could damage equipment or data. Note: A note provides important supplemental or amplified information. Tip: A tip provides additional information that enables users to more readily complete their tasks. WARNING! A warning alerts users to conditions or actions that could lead to injury or death. WARNING! A warning with this icon alerts users to conditions or actions that could lead to injury caused by a laser. Related documentation Refer to the following publication for additional information: znid Hardware Installation Guide explains how to install the znid. znid Quick Installation Guide provides a quick overview of the znid installation znid Administration and Configuation Guide 5
Refer to the release notes for software installation information and for changes in features and functionality of the product (if any). Acronyms The following acronyms are related to Zhone products and may appear throughout this manual: Table 1: Acronyms and their descriptions Acronym ADSL ARP ATM BAN CID DSL EFM SHDSL IAD MALC MIB MTAC MTAC-FC PBX POTS RIP SDSL SHDSL SLMS SNMP TFTP VCI VCL Description Asymmetrical digital subscriber line Address resolution protocol Asynchronous Transfer Mode Broadband Access Node Channel identifier Digital subscriber line Ethernet in the First Mile Symmetric high-bit-rate digital subscriber line Integrated access device Multi-access line concentrator Management information bases Metallic Test Access Card Metallic Test Access Card with fan controller Private branch exchange Plain old telephone service Routing Information Protocol Symmetric digital subscriber line Symmetric high-bit-rate digital subscriber line Single Line Multi-Service Simple Network Management Protocol Trivial File Transfer Protocol Virtual channel identifier Virtual channel link 6 znid Administration and Configuation Guide
Contacting Global Service and Support Table 1: Acronyms and their descriptions Acronym VPI ZMS Description Virtual path identifier Zhone Management System Contacting Global Service and Support Technical support Contact Global Service and Support (GSS) if you have any questions about this or other Zhone products. Before contacting GSS, make sure you have the following information: Zhone product you are using System configuration Software version running on the system Description of the issue If you require assistance with the installation or operation of your product, or if you want to return a product for repair under warranty, contact GSS. The contact information is as follows: Service requirements E-mail support@zhone.com Telephone (North America) 877-ZHONE20 Telephone (International) 510-777-7133 Internet www.zhone.com/support If you purchased the product from an authorized dealer, distributor, Value Added Reseller (VAR), or third party, contact that supplier for technical assistance and warranty support. If the product malfunctions, all repairs must be performed by the manufacturer or a Zhone-authorized agent. It is the responsibility of users requiring service to report the need for service to GSS. znid Administration and Configuation Guide 7
Contacting Global Service and Support Contact Global Service and Support (GSS) if you have any questions about this or other Zhone products. Before contacting GSS, make sure you have the following information: Zhone product you are using System configuration Software version running on the system Description of the issue Technical Support If you require assistance with the installation or operation of your product, or if you want to return a product for repair under warranty, contact GSS. The contact information is as follows: E-mail Telephone (North America) support@zhone.com 877-ZHONE20 Telephone (International) 510-777-7133 Internet www.zhone.com/support If you purchased the product from an authorized dealer, distributor, Value Added Reseller (VAR), or third party, contact that supplier for technical assistance and warranty support. Service Requirements If the product malfunctions, all repairs must be performed by the manufacturer or a Zhone-authorized agent. It is the responsibility of users requiring service to report the need for service to GSS. 8 znid Administration and Configuation Guide
GETTING STARTED Connecting your computer or home network to the gateway is a simple procedure, varying slightly depending on your operating system. The setup is designed to seamlessly integrate the znid with your computer or home network. Moreover, zero-configuration is attained when taking advantage of Universal Plug-and-Play support in Windows XP. The Windows default network settings dictate that in most cases the setup procedure described below will be unnecessary. For example, the default DHCP setting in Windows 2000 is client, requiring no further modification. However, it is advised to follow the setup procedure described below to verify that all communication parameters are valid and that the physical cable connections are correct. znid Setup The basic setup procedure consists of three consecutive configuration stages: 1. Setting up LAN and WAN connections 2. PC network configuration 3. znid configuration Stage 1 - Setting up LAN and WAN Connections LAN Connection Your connection to the Internet is determined by the type of gateway that you have. Please consult the znid Installation Guide for details on how to connect copper wires or fiber to the znid s WAN interface. WAN Connection Your connection to the Internet is determined by the type of gateway that you have. If your gateway has a built-in DSL modem, connect its DSL socket to the wall socket using a telephone cable. Consult your modem documentation regarding specific cables necessary for connection. Mention GPON and AE. znid Administration and Configuation Guide 9
Getting Started Stage 2 - PC Network Configuration Each network interface on the PC should either be configured with a statically defined IP address and DNS address, or should be instructed to automatically obtain an IP address using the Network DHCP server. The znid provides a DHCP server on its LAN and it is recommended to configure your LAN to obtain its IP and DNS server IPs automatically. This configuration principle is identical but performed differently on each operating system. The figure below displays the TCP/IP Properties dialog box as it appears in Windows XP. Following are TCP/IP Figure 1: IP and DNS Configuration Windows XP 1. Access Network Connections from the Control Panel. 2. Right-click the Ethernet connection icon, and select Properties. 3. Under the General tab, select the Internet Protocol (TCP/IP) component, and press the Properties button. 4. The Internet Protocol (TCP/IP) properties window will be displayed. (a) Select the Obtain an IP address automatically radio button. 10 znid Administration and Configuation Guide
znid Setup (b) Select the Obtain DNS server address automatically radio button. (c) Click OK to save the settings. Windows 2000/98/Me 1. Access Network and Dialing Connections from the Control Panel. 2. Right-click the Ethernet connection s icon, and select Properties to display the connection s properties. 3. Select the Internet Protocol (TCP/IP) component, and press the Properties button. 4. The Internet Protocol (TCP/IP) properties will be displayed. (a) Select the Obtain an IP address automatically radio button. (b) Select the Obtain DNS server address automatically radio button. Windows NT 1. Access Network from the Control Panel to display the network control panel. 2. From the Protocol tab, select the Internet Protocol (TCP/IP) component, and press the Properties button. 3. From the IP Address tab select the Obtain an IP address automatically radio button. 4. From the DNS tab, verify that no DNS server is defined in the DNS Service Search Order box and no suffix is defined in the Domain Suffix Search Order box. Linux Additional Network Configuration 1. Login into the system as a super-user, by entering `su at the prompt. 2. Type ifconfig to display the network devices and allocated IP s. 3. Type pump -i <dev>, where <dev> is the network device name. 4. Type ifconfig again to view the new allocated IP address. 5. Make sure no firewall is active on device <dev>. The znid does not require further configuration in order to start working. After the setup described in this chapter, you can immediately start using your gateway to: Share a broadband connection among multiple users (HTTP, FTP, Telnet, NetMeeting) and between all of the computers connected to your home network. znid Administration and Configuation Guide 11
Getting Started Build a home network by connecting additional PCs and network devices to the gateway. Control network parameters, including DHCP, DNS and WAN settings. View network status, traffic statistics, system log and more. Allow access from the Internet to games and other services provided by computers in the home net- work. Prohibit computers in the home network from accessing selected services on the Internet. Block access to specific Internet Web sites from your home network. Advanced users can fully configure and control the znid via the Web-based management. Figure 2: Security General Adding Computers to Network Multiple computers can be connected directly to the gateway without requiring a hub or a switch. 12 znid Administration and Configuation Guide
WEB-BASED MANAGEMENT Accessing the Web-based Management This chapter describes the znid Web-based management (WBM) which allows you to control various znid system parameters, using a user-friendly graphical interface. The Web-based management includes a connection wizard, a graphic network map, multiple sessions, authentication data kept on gateway, multiple user support, multilingual support, a connection diagnostics screen and more. To access the Web-based management: If your computer is running an operating system that supports UPnP, such Windows XP, you can easily add the computer to your home network and access the Web-based management directly from within. 1. Launch a Web-browser on a PC in the LAN. 2. Type the gateway s IP address or name as provided with your gateway in the address bar (Internet Explorer) or location bar (Netscape Navigator). The default IP address is 192.168.1.1, and default name is http://znid.home. 3. Enter your username and password to log on to the WBM. For security reasons, you should change these settings after the initial login. The default user name is admin, and the default password is zhone for administration rights, and the default user name is user and the default password is password for limited user rights. A read only user is also pre-configured with a user name of user read and a password of password. Your session will automatically time-out after a few minutes of inactivity. If you try to operate the Web- based management after the session has expired the Login screen will appear and you will have to re- enter your user name and password before proceeding. This feature helps to prevent unauthorized users from accessing the web-based management and changing the gateway s settings. Your Home Network Map To view your network map, press the Network Map View button located at the top of the left sidebar of the WBM screen. The Network Map screen will appear. znid Administration and Configuation Guide 13
Web-based Management Figure 3: The Network Map The network map depicts the various network elements, such as the Internet connection, firewall, gateway, internal network interface and local network computers and peripherals. The following explains the meaning of different network map symbols: Represents the Internet Represents your Ethernet Wide Area Network (WAN) connection. Click this icon to configure the WAN interface. Represents the gateway s Firewall. The height of the wall corresponds to the security level currently selected: Minimum, Typical or Maximum. Click this icon to configure security settings. If the znid is equipped with multiple LAN devices (other than bridges) then the home network will use the following icons to indicate the interface used for connecting the PC. Represents an Ethernet Local Area Network (LAN) connection. Click this icon to configure network parameters for the Ethernet LAN device. 14 znid Administration and Configuation Guide
Your Home Network Map Represents a bridge connected in the home network. Click this icon to view the bridge s underlying devices. Represents a computer (host) connected in the home network. Each computer connected to the network appears below the network symbol of the network through which it is connected. Click an icon to view network information for the corresponding computer. The znid s standard network map displays devices that the znid recognized and granted a DHCP lease. Left Sidebar The Web-based management screens have been grouped into several subject areas and may be accessed by clicking the appropriate icon in the left sidebar. The subject areas are: Network Map: Display the Network Map Network Connections: Create and configure networks connections Security: Configure the Firewall and regulate communications between the Internet and the home network Voice Over IP: Use the znid s Voice over IP to place and receive calls over the Internet using a standard telephone set QoS: Use the znid s Quality of Service to provide better service to selected network traffic Advanced: Control system parameters (DHCP server, DNS) and perform administrative functions, including changing password, setting date & time and upgrading the system System Monitoring: View network status, traffic statistics and the system log Logout: Log out from the znid Managing Tables Tables are structures used throughout the Web-based management. They handle user-defined entries relating to elements such as network connections, local servers, restrictions and configurable parameters. The principles outlined in this section apply to all tables in the Web-based management. znid Administration and Configuation Guide 15
Web-based Management Figure 4: Typical Table Structure Each row defines an entry in the table. The following buttons located in the Action column enable adding, editing, deleting and moving table entries: Use the Add action icon to add a row to the table. Use the Edit action icon to edit a row in the table. Use the Remove action icon to remove a row from the table. Use the Move Up action icon to move a row one step up in the table. table. Use the Move Down action icon to move a row one step down in the 16 znid Administration and Configuation Guide
NETWORK CONNECTIONS The znid supports various network connections, both physical and logical. The Network Connections screen enables you to configure the various parameters of your physical connections, the LAN and WAN, and create new connections, using tunneling protocols over existing connections, such as PPP and VPN. When clicking the Network Connections icon on the sidebar for the first time, the following typical screen will appear: Figure 5: Network Connections - Basic Press the Advanced button to expand the screen and display all connection entries. znid Administration and Configuation Guide 17
Network Connections Figure 6: Network Connections - Advanced This chapter describes the different network connections available with the znid in their order of appearance in the Network Connections screen, as well as the connection types that you can create using the Connection Wizard. Note: Some of the connections described herein may not be available with certain versions. The znid s default network connections are: LAN - Creating a home/soho network LAN Bridge LAN Ethernet WAN - Internet Connection WAN Ethernet The logical network connections available with the znid are: WAN - Internet Connection Point-to-Point Protocol over Ethernet Ethernet Connection Dynamic Host Configuration Protocol Manual IP Address Configuration Determine Protocol Type Automatically WAN-LAN Bridge Advanced Connections Network Bridging 18 znid Administration and Configuation Guide
The Connection Wizard VLAN Interface The Connection Wizard Ethernet Gateway The logical network connections can be easily created using the Connection Wizard. This wizard is consisted of a series of Web-based management screens, intuitively structured to gather all the information needed to create a logical connection. In order to create a connection on an Ethernet gateway using the wizard, click the New Connection link in the Network Connections screen. The Connection Wizard screen will appear. Figure 7: Connection Wizard This screen presents you with the main connection types. Each option that you choose will lead you to further options in a tree-like formation, adding more information with each step and narrowing down the parameters towards the desired network connection. znid Administration and Configuation Guide 19
Network Connections Figure 8: Advanced Connection Wizard Screen The tree formation of this section is depicted below. 20 znid Administration and Configuation Guide
The Connection Wizard Figure 9: Advanced Connection Wizard Tree Network Types Every network connection in the znid can be configured as one of three types: WAN, LAN or DMZ. This provides high flexibility and increased functionality. For example, you may define that a LAN Ethernet connection on the znid will operate as a WAN network. This means that all hosts in this LAN will be referred to as WAN computers, both by computers outside the znid and by the znid itself. WAN and firewall rules may be applied, such as on any other WAN network. Another example, is that a network connection can be defined as a DMZ (Demilitarized) network. Although the network is physically inside the znid, it will function as an unsecured, independent network, for which the znid merely acts as a router. znid Administration and Configuation Guide 21
Network Connections One of these three network types is defined in each connection s configuration screen, in the Network combo-box, as depicted in the following sections. DMZ Network When defining a network connection as a DMZ network, you must also: Remove the connection from under a bridge, if that is the case. Change the connection s routing mode to Route, in the Routing section of the configuration screen. Add a routing rule on your external gateway (which may be with your ISP) informing of the DMZ network behind the znid. LAN Bridge The LAN bridge connection is used to combine several LAN devices under one virtual network. Please note, that when a bridge is removed, its formerly underlying devices inherit the bridge s DHCP settings. For example, the removal of a bridge that is configured as DHCP client, automatically configures the LAN devices formerly constituting the bridge as DHCP clients, with the exact DHCP client configuration. Creation with the Connection Wizard To configure an existing bridge or create a new one, perform the following steps: 1. Click the New Connection link in the Network Connections screen. The Connection Wizard screen will appear. 2. Select the Advanced Connection radio button and click Next. The Advanced Connection screen will appear. 3. Select the Network Bridging radio button and click Next. The Bridge Options screen will appear. 22 znid Administration and Configuation Guide
The Connection Wizard Figure 10: Bridge Options 4. Select whether to configure an existing bridge (this option will only appear if a bridge exists) or to add a new one: (a) Configure Existing Bridge Select this option and click Next. The Network Bridging screen will appear allowing you to add new connections or remove existing ones, by checking or unchecking their respective check boxes. znid Administration and Configuation Guide 23
Network Connections Figure 11: Network Bridging For example, checking the WAN check box will create a LAN-WAN bridge. (b) Add a New Bridge Select this option and click Next. A different Network Bridging screen will appear allowing you to add a bridge over the unbridged connections, by checking their respective check boxes. Figure 12: Network Bridging 24 znid Administration and Configuation Guide
The Connection Wizard Important notes: The same connections cannot be shared by two bridges. A bridge cannot be bridged. Bridged connections will lose their IP settings. 5. Click Next. The Connection Summary screen will appear corresponding to your changes. Figure 13: Connection Summary - Configure Existing Bridge 6. Check the Edit the Newly Created Connection check box if you wish to be routed to the new connection s configuration screen after clicking Finish. 7. Click Finish to save the settings. The new bridge will be added to the network connections list, and will be configurable like any other bridge. General The top part of the configuration window displays general communication parameters. It is recommended not to change the default values in this screen unless you are familiar with the networking concepts they represent. Since your gateway is configured to operate with the default values, no parameter modification is necessary. You can configure the following general connection settings: znid Administration and Configuation Guide 25
Network Connections Schedule By default, the connection will always be active. However, you can configure scheduler rules in order to define time segments during which the connection may be active. Once a scheduler rule(s) is defined, this field changes to a combo box, allowing you to choose between the available rules. To learn how to configure scheduler rules. Network Select whether the parameters you are configuring relate to a WAN, LAN or DMZ connection, by selecting the connection type from the combo-box. For more information. Physical Address The physical address of the network card used for your network. Some cards allow you to change this address. MTU MTU is the Maximum Transmission Unit. It specifies the largest packet size permitted for Internet transmission. The default setting, Manual, allows you to enter the largest packet size that will be transmitted. The recommended size is 1492. You should leave this value in the 1200 to 1500 range. To have the gateway select the best MTU for your Internet connection, select Automatic. Figure 14: General Bridge Settings Internet Protocol Select one of the following Internet Protocol options from the Internet Protocol drop down menu: No IP Address Obtain an IP Address Automatically Use the Following IP Address Please note that according to the selection you make in the Internet Protocol drop down menu, the screen will refresh and display relevant configuration settings. No IP Address Select No IP Address if you require that this connection will have no IP address. This can be useful if this connection is under a bridge. 26 znid Administration and Configuation Guide
The Connection Wizard Figure 15: Internet Protocol Settings No IP Address Use the Following IP Address The LAN connection is usually configured using a permanent (static) IP address. Your service provider should provide you with this address, and subnet mask. Figure 16: Internet Protocol Settings Static IP Bridge Settings The bridge section allows you to specify the LAN devices that you would like to join under the network bridge. Click the Edit icon on the VLAN column to assign the network connections to specific Virtual LANS. Select the STP check box to enable the Spanning Tree Protocol on the device. You should use this to ensure that there are no loops in your network configuration, and apply these settings in case your network consists of multiple switches, or other bridges apart from those created by the gateway. Figure 17: LAN Bridge Settings znid Administration and Configuation Guide 27
Network Connections IP Address Distribution The IP Address Distribution section allows you to configure the gateway s Dynamic Host Configuration Protocol (DHCP) server parameters. The DHCP automatically assigns IP addresses to network PCs. If you enable this feature, make sure that you also configure your network PCs as DHCP clients. Select one of the following options from the IP Address Distribution combo-box: DHCP Server Start IP Address The first IP address that may be assigned to a LAN host. Since the gateway s default IP address is 192.168.1.1, this address must be 192.168.1.2 or greater. End IP Address The last IP address in the range that can be used to automatically assign IP addresses to LAN hosts. Subnet Mask A mask used to determine to what subnet an IP address belongs. An example of a subnet mask value is 255.255.0.0. Lease Time In Minutes Each device will be assigned an IP address by the DHCP server for a this amount of time, when it connects to the network. When the lease expires the server will determine if the computer has disconnected from the network. If it has, the server may reassign this IP address to a newly-connected computer. This feature ensures that IP addresses that are not in use will become available for other computers on the network. Provide Host Name If Not Specified by Client If the DHCP client does not have a host name, the gateway will automatically assign one. Figure 18: IP Address Distribution DHCP Server DHCP Relay Your gateway can act as a DHCP relay in case you would like to dynamically assign IP addresses from a DHCP server other than your gateway s DHCP server. Note that when selecting this option you must also change the znid s WAN to work in routing mode. 28 znid Administration and Configuation Guide
The Connection Wizard 1. After selecting DHCP Relay from the drop down menu, a New IP Address link will appear: Figure 19: IP Address Distribution - DHCP Relay Click the New IP Address link. The DHCP Relay Server Address screen will appear: Figure 20: DHCP Relay Server Address 2. Specify the IP address of the DHCP server. 3. Click OK to save the settings. Disabled Select Disabled from the combo-box if you would like to statically assign IP addresses to your network computers. Figure 21: IP Address Distribution - Disable DHCP Routing You can choose to setup your gateway to use static or dynamic routing. Dynamic routing automatically adjusts how packets travel on the network, whereas static routing specifies a fixed routing path to neighboring destinations. Routing Select Advanced or Basic routing. Routing Mode Select one of the following routing modes: znid Administration and Configuation Guide 29
Network Connections Route Use route mode if you want your gateway to function as a router between two networks. NAPT Network Address and Port Translation (NAPT) refers to network address translation involving the mapping of port numbers, allowing multiple machines to share a single IP address. Use NAPT if your LAN encompasses multiple devices, a topology that necessitates port translation in addition to address translation. Device Metric The device metric is a value used by the gateway to determine whether one route is superior to another, considering parameters such as bandwidth, delay, and more. Default Route Select this check box to define this device as a the default route. Routing Information Protocol (RIP) Select this check box to enable the Routing Information Protocol (RIP). RIP determines a route based on the smallest hop count between source and destination. When RIP is enabled, select the following: Listen to RIP messages - select None, RIPv1, RIPv2 or RIPv1/2. Send RIP messages - select None, RIPv1, RIPv2-broadcast or RIPv2-multicast. Multicast - IGMP Proxy Internal IGMP proxy enables the system to issue IGMP host messages on behalf of hosts that the system discovered through standard IGMP interfaces. IGMP proxy enables the routing of multicast packets according to the IGMP requests of LAN devices asking to join multicast groups. Select the Multicast IGMP Proxy Internal check-box to enable this feature. Routing Table Allows you to add or modify routes when this device is active. Use the New Route button to add a route or edit existing routes. Figure 22: Advanced Routing Properties 30 znid Administration and Configuation Guide
The Connection Wizard Internet Connection Firewall Your gateway s firewall helps protect your computer by preventing unauthorized users from gaining access to it through a network such as the Internet. The firewall can be activated per network connection. To enable the firewall on this network connection, select the Enabled check box. Figure 23: Internet Connection Firewall Additional IP Addresses You can add alias names (additional IP addresses) to the gateway by clicking the New IP Address link. This enables you to access the gateway using these aliases in addition to the 192.168.1.1 and the http://znid.home. Figure 24: Additional IP addresses LAN Ethernet A LAN Ethernet connection connects computers to the znid using Ethernet cables, either directly or via network hubs and switches. Figure 25: LAN Ethernet properties znid Administration and Configuation Guide 31
Network Connections Clicking the Settings button at the bottom-right of the connection s Properties window, will open its Configuration window: Figure 26: LAN Ethernet Configuration General The top part of the configuration window displays general communication parameters. It is recommended not to change the default values in this screen unless you are familiar with the networking concepts they represent. Since your gateway is configured to operate with the default values, no parameter modification is necessary. You can configure the following general connection settings: Schedule By default, the connection will always be active. However, you can configure scheduler rules in order to define time segments during which the connection may be active. Once a scheduler rule(s) is defined, this field changes to a combo box, allowing you to choose between the available rules. Network Select whether the parameters you are configuring relate to a WAN, LAN or DMZ connection, by selecting the connection type from the combo-box. Physical Address The physical address of the network card used for your network. Some cards allow you to change this address. 32 znid Administration and Configuation Guide
The Connection Wizard MTU MTU is the Maximum Transmission Unit. It specifies the largest packet size permitted for Internet transmission. The default setting, Manual, allows you to enter the largest packet size that will be transmitted. The recommended size, is 1492. You should leave this value in the 1200 to 1500 range. To have the gateway select the best MTU for your Internet connection, select Automatic. Internet Protocol Select one of the following Internet Protocol options from the Internet Protocol drop down menu: No IP Address Obtain an IP Address Automatically Use the Following IP Address Please note that according to the selection you make in the Internet Protocol drop down menu, the screen will refresh and display relevant configuration settings. No IP Address Select No IP Address if you require that this connection will have no IP address. This can be useful if this connection is under a bridge. Figure 27: Internet Protocol Settings No IP Address Use the Following IP Address The LAN connection is usually configured using a permanent (static) IP address. Your service provider should provide you with this address, and subnet mask. Figure 28: Internet Protocol Settings Static IP IP Address Distribution The IP Address Distribution section allows you to configure the gateway s Dynamic Host Configuration Protocol (DHCP) server parameters. The DHCP automatically assigns IP addresses to network PCs. If you enable this feature, make sure that you also configure your network PCs as DHCP clients. znid Administration and Configuation Guide 33
Network Connections Select one of the following options from the IP Address Distribution combo-box: DHCP Server Start IP Address The first IP address that may be assigned to a LAN host. Since the gateway s default IP address is 192.168.1.1, this address must be 192.168.1.2 or greater. End IP Address The last IP address in the range that can be used to automatically assign IP addresses to LAN hosts. Subnet Mask A mask used to determine to what subnet an IP address belongs. An example of a subnet mask value is 255.255.0.0. Lease Time In Minutes Each device will be assigned an IP address by the DHCP server for a this amount of time, when it connects to the network. When the lease expires the server will determine if the computer has disconnected from the network. If it has, the server may reassign this IP address to a newly-connected computer. This feature ensures that IP addresses that are not in use will become available for other computers on the network. Provide Host Name If Not Specified by Client If the DHCP client does not have a host name, the gateway will automatically assign one for him. Figure 29: IP Address Distribution DHCP Server DHCP Relay Your gateway can act as a DHCP relay in case you would like to dynamically assign IP addresses from a DHCP server other than your gateway s DHCP server. Note that when selecting this option you must also change the znid s WAN to work in routing mode. 1. After selecting DHCP Relay from the drop down menu, a New IP Address link will appear: Figure 30: IP Address Distribution - DHCP Relay Click the New IP Address link. The DHCP Relay Server Address screen will appear: 34 znid Administration and Configuation Guide
The Connection Wizard Figure 31: DHCP Relay Server Address 2. Specify the IP address of the DHCP server. 3. Click OK to save the settings. Disabled Select Disabled from the combo-box if you would like to statically assign IP addresses to your net- work computers. Figure 29. IP Address Distribution - Disable DHCP Routing You can choose to setup your gateway to use static or dynamic routing. Dynamic routing automatically adjusts how packets travel on the network, whereas static routing specifies a fixed routing path to neighboring destinations. Routing Select Advanced or Basic routing. Routing Mode Select one of the following routing modes: Route Use route mode if you want your gateway to function as a router between two networks. NAPT Network Address and Port Translation (NAPT) refers to network address translation involving the mapping of port numbers, allowing multiple machines to share a single IP address. Use NAPT if your LAN encompasses multiple devices, a topology that necessitates port translation in addition to address translation. Device Metric The device metric is a value used by the gateway to determine whether one route is superior to another, considering parameters such as bandwidth, delay, and more. znid Administration and Configuation Guide 35
Network Connections Default Route Select this check box to define this device as a the default route. Multicast - IGMP Proxy Internal IGMP proxy enables the system to issue IGMP host messages on behalf of hosts that the system discovered through standard IGMP interfaces. IGMP proxy enables the routing of multicast packets according to the IGMP requests of LAN devices asking to join multicast groups. Select the Multicast IGMP Proxy Internal check-box to enable this feature. Routing Table Allows you to add or modify routes when this device is active. Use the New Route button to add a route or edit existing routes. Figure 32: Advanced Routing Properties Internet Connection Firewall Your gateway s firewall helps protect your computer by preventing unauthorized users from gaining access to it through a network such as the Internet. The firewall can be activated per network connection. To enable the firewall on this network connection, select the Enabled check box. Figure 33: Internet Connection Firewall Additional IP Addresses You can add alias names (additional IP addresses) to the gateway by clicking the New IP Address link. This enables you to access the gateway using these aliases in addition to the 192.168.1.1 and the http://znid.home. Figure 34: Additional IP Addresses 36 znid Administration and Configuation Guide
The Connection Wizard General The top part of the configuration window displays general communication parameters. It is recommended not to change the default values in this screen unless you are familiar with the networking concepts they represent. Since your gateway is configured to operate with the default values, no parameter modification is necessary. You can configure the following general connection settings: Schedule By default, the connection will always be active. However, you can configure scheduler rules in order to define time segments during which the connection may be active. Once a scheduler rule(s) is defined, this field changes to a combo box, allowing you to choose between the available rules. Network Select whether the parameters you are configuring relate to a WAN, LAN or DMZ connection, by selecting the connection type from the combo-box. The physical address of the network card used for your network. Some cards allow you to change this address. Clone MAC Allows you to copy the current MAC address of your PC to the MAC address of this device. MTU MTU is the Maximum Transmission Unit. It specifies the largest packet size permitted for Internet transmission. In the default setting, Automatic, the gateway selects the best MTU for your Internet connection. In case you change to manual, you can enter the largest packet size, you should leave this value in the 1200 to 1500 range. Figure 35: 100 WAN Ethernet properties znid Administration and Configuation Guide 37
Network Connections Figure 36: WAN Ethernet configuration Internet Protocol Settings Select one of the following Internet Protocol options from the Internet Protocol drop down menu: No IP Address Obtain an IP Address Automatically Use the Following IP Address Please note that according to the selection you make in the Internet Protocol drop down menu, the screen will refresh and display relevant configuration settings. 38 znid Administration and Configuation Guide
The Connection Wizard No IP Address Select No IP Address if you require that your gateway have no IP address. This can be useful if you are working in an environment where you are not connected to other networks, such as the Internet. Figure 35. Internet Protocol Settings No IP Address Obtain an IP Address Automatically Your WAN connection is configured by default to act as a DHCP client. You should keep this configuration in case your service provider supports DHCP, or if you are connecting using a dynamic IP address. The server that assigns the gateway with an IP address, also assigns a subnet mask. You can override the dynamically assigned subnet mask by selecting the Override Subnet Mask and specifying your own mask instead. You can press the Release button to release the current leased IP address. Once the address has been released, the button text changes to Renew. Use the Renew button to renew the leased IP address. Figure 37: Internet Protocol Settings Automatic IP Use the Following IP Address Your WAN connection can be configured using a permanent (static) IP address. Your service provider should provide you with this IP address, subnet mask and the default gateway IP address. Figure 38: Internet Protocol Settings Static IP znid Administration and Configuation Guide 39
Network Connections DNS Server Domain Name System (DNS) is the method by which website or domain names are translated into IP addresses. You can configure the connection to automatically obtain a DNS server address, or specify such an address manually, according to the information provided by your ISP. To configure the connection to automatically obtain a DNS server address, select Obtain DNS Server Address Automatically from the DNS Server drop down menu. Figure 39: Automatic DNS Settings To manually configure DNS server addresses, select Use the Following DNS Server Addresses from the DNS Server drop down menu. Specify up to two different DNS server address, one primary, another secondary. Figure 40: DNS Settings Routing You can choose to setup your gateway to use static or dynamic routing. Dynamic routing automatically adjusts how packets travel on the network, whereas static routing specifies a fixed routing path to neighboring destinations. Routing Select Advanced or Basic routing. Routing Mode Select one of the following routing modes: Route Use route mode if you want your gateway to function as a router between two networks. NAPT Network Address and Port Translation (NAPT) refers to network address translation involving the mapping of port numbers, allowing multiple machines to share a single IP address. Use NAPT if your LAN encompasses multiple devices, a topology that necessitates port translation in addition to address translation. Device Metric The device metric is a value used by the gateway to determine whether one route is superior to another, considering parameters such as bandwidth, delay, and more. 40 znid Administration and Configuation Guide
The Connection Wizard Default Route Select this check box to define this device as a the default route. Multicast - IGMP Proxy Internal IGMP proxy enables the system to issue IGMP host messages on behalf of hosts that the system discovered through standard IGMP interfaces. IGMP proxy enables the routing of multicast packets according to the IGMP requests of LAN devices asking to join multicast groups. Select the Multicast IGMP Proxy Internal check-box to enable this feature. Routing Table Allows you to add or modify routes when this device is active. Use the New Route button to add a route or edit existing routes. Figure 41: Advanced Routing Properties Internet Connection Firewall Your gateway s firewall helps protect your computer by preventing unauthorized users from gaining access to it through a network such as the Internet. The firewall can be activated per network connection. To enable the firewall on this network connection, select the Enabled check box. Figure 42: Internet Connection Firewall Additional IP Addresses You can add alias names (additional IP addresses) to the gateway by clicking the New IP Address link. This enables you to access the gateway using these aliases in addition to the 192.168.1.1 and the http://znid.home. znid Administration and Configuation Guide 41
Network Connections Figure 43: Additional IP Addresses Point-to-Point Protocol over Ethernet (PPPoE) Point-to-Point Protocol over Ethernet (PPPoE) relies on two widely accepted standards, PPP and Ethernet. PPPoE enables your home network PCs that communicate on an Ethernet network to exchange information with PCs on the Internet. PPPoE supports the protocol layers and authentication widely used in PPP and enables a point-to-point connection to be established in the normally multipoint architecture of Ethernet. A discovery process in PPPoE determines the Ethernet MAC address of the remote device in order to establish a session. Creation with the Connection Wizard To create a new PPPoE connection, perform the following steps: 1. Click the New Connection link in the Network Connections screen. The Connection Wizard screen will appear. 2. Select the Internet Connection radio button and click Next. The Internet Connection screen will appear. Figure 44: Point-to-Point Protocol over Ethernet 4. Enter the username and password provided by your Internet Service Provider (ISP), and click Next. The Connection Summary screen will appear. 42 znid Administration and Configuation Guide
Point-to-Point Protocol over Ethernet (PPPoE) Figure 45: Connection Summary 5. Check the Edit the Newly Created Connection check box if you wish to be routed to the new connection s configuration screen after clicking Finish. 6. Click Finish to save the settings. The new PPPoE connection will be added to the network connections list, and will be configurable like any other connection. General Schedule By default, the connection will always be active. However, you can configure scheduler rules in order to define time segments during which the connection may be active. Once a scheduler rule(s) is defined, this field changes to a combo box, allowing you to choose between the available rules. Network Select whether the parameters you are configuring relate to a WAN, LAN or DMZ connection, by selecting the connection type from the combo-box. MTU MTU is the Maximum Transmission Unit. It specifies the largest packet size permitted for Internet transmission. The default setting, Manual, allows you to enter the largest packet size that will be transmitted. The recommended size, is 1492. You should leave this value in the 1200 to 1500 range. To have the gateway select the best MTU for your Internet connection, select Automatic. Underlying Connection Specify the underlying connection above which the protocol will be initiated. znid Administration and Configuation Guide 43
Network Connections Figure 46: General PPPoE Settings Internet Protocol Select one of the following Internet Protocol options from the Internet Protocol drop down menu: Obtain an IP Address Automatically Use the Following IP Address Please note that according to the selection you make in the Internet Protocol drop down menu, the screen will refresh and display relevant configuration settings. Obtain an IP Address Automatically Your PPP connection is configured by default to obtain an IP automatically. You should change this configuration in case your service provider requires it. The server that assigns the gateway with an IP address, also assigns a subnet mask. You can override the dynamically assigned subnet mask by selecting the Override Subnet Mask and specifying your own mask instead. Figure 47: Internet Protocol Settings Automatic IP Use the Following IP Address Your WAN connection can be configured using a permanent (static) IP address. Your service provider should provide you with this IP address, subnet mask and the default gateway IP address. 44 znid Administration and Configuation Guide
Point-to-Point Protocol over Ethernet (PPPoE) Figure 48: Internet Protocol Settings Static IP DNS Server Domain Name System (DNS) is the method by which website or domain names are translated into IP addresses. You can configure the connection to automatically obtain a DNS server address, or specify such an address manually, according to the information provided by your ISP. To configure the connection to automatically obtain a DNS server address, select Obtain DNS Server Address Automatically from the DNS Server drop down menu. Figure 49: Automatic DNS Settings To manually configure DNS server addresses, select Use the Following DNS Server Addresses from the DNS Server drop down menu. Specify up to two different DNS server address, one primary, another secondary. Figure 50: DNS Settings Routing You can choose to setup your gateway to use static or dynamic routing. Dynamic routing automatically adjusts how packets travel on the network, whereas static routing specifies a fixed routing path to neighboring destinations. Routing Select Advanced or Basic routing. znid Administration and Configuation Guide 45