Ethernet

Off WLAN Green

Blinking Solid on

Red/ green Off

Toggling

Blinking Solid on Pending DSL line synchronisation DSL line synchronised No DSL line Blinking Solid on Internet activity Internet connectivity, no activity Internet connection setup failed No Internet connection

Off Internet Green

Red Off

Solid on

Ethernet LEDs
A LED may be provided per Ethernet port to indicate link integrity (or activity). Depending on the SpeedTouch product you are using, a second LED (A) may be provided to indicate the 10/100Base-T selection:
A (Optional) Integrity (Activity)

Description LED Status

Off Solid on Blinking No connection on this port Ethernet link up Data is flowing from/to this port 10Base-T Ethernet connection 100Base-T Ethernet connection

10/100Base-T

Off Solid on
1.2 Accessing your SpeedTouch

Access methods

Your SpeedTouch is accessible in one of the following ways:

Access Method

Web browser

Can be used to

Configure your SpeedTouch via HTTP or HTTPS. For more information, see 1.2.1 Access via the Web Interface on page 7. Fine-tune your SpeedTouch configuration. For more information, see 1.2.2 Access via CLI on page 8. Back up and restore data on your SpeedTouch. For more information, see 1.2.3 Access via FTP on page 10. Allow a remote user to help you configuring your SpeedTouch. For more information, see 1.2.4 Remote Assistance on page 13.
Command Line Interface (CLI)
File Transfer Protocol (FTP)

Remote Assistance

1.2.1 Access via the Web Interface
To access the SpeedTouch via the Web interface

Proceed as follows:

Open a Web browser. In the address bar, type your SpeedTouchs IP address or DNS host name (http://speedtouch.lan or 192.168.1.254 by default) You can access the pages via HTTP or HTTPS. For remote assistance the secure version HTTPS is used in combination with certificates. Simply provide your ISP with the link as shown, user name and password before he can log on to the pages. For more information, see 1.2.4 Remote Assistance on page 13. The SpeedTouch Home page appears, from where you can navigate to all the configurable aspects of the SpeedTouch.
For more information on the Web pages, see 4 SpeedTouch Web Interface on page 35.

1.2.2 Access via CLI

To access the SpeedTouch via the Command Line Interface (CLI)
You can access the Command Line Interface (CLI) via: A Telnet session This requires a TCP/IP connection between the host from which the Telnet session is opened and the SpeedTouch. Your SpeedTouch and the connected computer must have an IP address in the same subnet. Quote site commands (over FTP) For more information, see Quote site command on page 12. For more information on CLI commands, see the SpeedTouch CLI Reference Guide.
To start a Telnet session
Open a telnet application. You can use the Command Prompt window. In Microsoft Windows XP for instance:
On the Windows taskbar, click Start. Select (All) Programs > Accessories > Command Prompt.
Connect to your SpeedTouch. In the Command Prompt window: At the prompt, type telnet followed by the IP address of your SpeedTouch (192.168.1.254 by default).
Enter your SpeedTouch security user name and password. The default user is Administrator and the default password is blank. As soon as you have opened a session to the CLI, the SpeedTouch banner is displayed, followed by the CLI prompt, as shown in the example below.
Username : Administrator ----------------------------------------------------------------------* ______ SpeedTouch * ___/_____/\ * / /\\ Version 5.4 * _____/__ / \\ * _/ /\_____/___ \ Copyright (c) 1999-2005, * // / \ /\ \ THOMSON * _______//_______/ \ / _\/______ * / / \ \ / / / /\ * __/ / \ \ / / / / _\__ * / / / \_______\/ / / / / /\ * /_/______/___________________/ /________/ /___/ \ * \ \ \ ___________ \ \ \ \ \ / * \_\ \ / /\ \ \ \ \___\/ * \ \/ / \ \ \ \ / * \_____/ / \ \ \________\/ * /__________/ \ \ / * \ _____ \ /_____\/ * \ / /\ \ /___\/ * /____/ \ \ / * \ \ /___\/ * \____\/ ----------------------------------------------------------------------{Administrator}=>

1.2.3 Access via FTP

To access the SpeedTouch via the File Transfer Protocol (FTP)
You can access the file system of the SpeedTouch via the File Transfer Protocol (FTP), in order to: Restore or back up configuration files, templates or language packs. Upgrade your configuration or firmware.

File system

The SpeedTouch file system is stored on non-volatile memory and contains the SpeedTouch software, service template files and (optionally) default setting files.

To open an FTP session

Open a Command Prompt window. In Microsoft Windows XP for instance:
At the prompt, type ftp followed by the IP address of your SpeedTouch (192.168.1.254 by default). Enter your SpeedTouch security user name and password. The default user is Administrator and the default password is blank. The example below shows an FTP session to the SpeedTouch file system.

File system structure

The structure of the file system is very simple: it consists of a single root directory called root and two subdirectories called active and dl (download). The root directory contains: all the necessary files for the SpeedTouch to start correctly the active and the dl directories The active directory contains the active software image. The dl directory contains the passive software image. If you made changes to the SpeedTouch configuration and saved them, a user.ini configuration settings file is created in the dl subdirectory.
File system access rights
In the different directories you have the following rights:

Directory

root active dl

Access rights

NO read/write read-only read/write

Common FTP commands

Depending on the access rights you have in a directory, you can use one of the following commands:

Use the command.

cd dir bin hash put
access another directory than the one currently open. Example: ftp>cd dl. list the directory files. Example: ftp>dir. set the transfer mode to binary. turn on the hashing option. upload files. Example: ftp>put C:/MyBackupFiles/user.ini. A configuration file must be uploaded to the dl directory.
download files. Example: ftp>get user.ini. Downloading the configuration file must be done from the dl directory.

delete bye

delete files. quit FTP.

FTP file transfer

To allow correct file transfers, set the transfer mode to binary: at the ftp prompt, type bin and press ENTER. Turn on the hashing option to see the progression of the file transfer: At the ftp prompt, type hash and press ENTER. Example.
/home/doejohn{1}$ftp 192.168.1.254 Connected to 192.168.1.Inactivity timer = 120 seconds. Use 'site idle <secs>' to change. Name (192.168.1.254:doejohn): 331 SpeedTouch (00-90-D0-01-02-03) User 'doejohn' OK. Password requir ed. Password : ###### 330 OK ftp> ftp>bin 200 TYPE is now 8-bit binary ftp> ftp>hash 200Hash mark printing on (8192 bytes/hash mark). ftp>cd dl 250 Changed to /dl ftp>put C:\user.ini 200 Connected to 192.168.1.10 port Opening data connection for user.ini 226 File written successfully ftp: 256 bytes sent in 0,000Seconds 256000,000Kbytes/sec. ftp>

Quote site command

All the CLI commands can be executed from within an FTP session. Only complete CLI commands (in other words, the complete command syntax with all the parameters already specified) can be executed. Example: To execute the CLI command :ip iplist to list all IP addresses currently assigned to SpeedTouch interfaces, at the FTP prompt, type quote site ip iplist and press ENTER.

2.2.2 Connecting Wireless Clients for the First Time
Wireless default settings
After every Reset-to-Defaults, the SpeedTouch wireless access point configuration is returned to its initial default settings. These default settings are: Security level is low (security disabled) for an easy first use, meaning the data will not be encrypted. Wireless security settings are described in 2.2.3 Wireless Security on page 22. This default network name (SSID) is printed on the identification label located on the bottom of your SpeedTouch and is unique for each device. It consists of the concatenation of the word SpeedTouch and 6 hexadecimal characters, without any spaces, for example SpeedTouch123456. The SpeedTouch is broadcasting its network name (SSID). The radio channel number is set to automatically scan for the best radio channel. Registration is not activated. New stations are allowed automatically. The Access Control List is open and empty. No wireless client will be denied access to the SpeedTouch based on its physical hardware address. The default wireless settings may differ from the settings listed above depending on your Service Providers requirements. If this is the case, refer to the installation/configuration instructions provided by your Service Provider.
To prepare wireless clients for the first time
Make sure that: The SpeedTouch is turned on and ready for service. The SpeedTouch is in its default configuration. If necessary, reset the SpeedTouch to its default configuration (See 5.3 Reset to Factory Defaults on page 103 for more information). A wireless client adapter is installed on your computer. The wireless client adapters IP configuration is set to dynamically obtain its IP configuration (DHCP) - this is usually the default. For more information, see the documentation of your wireless client adapter.
To configure wireless clients for the first time
The wireless client must be correctly configured for the default network name. As the SpeedTouch broadcasts its network name to the wireless clients, you can select the SpeedTouch wireless network from a list of available networks. Depending on your wireless client a wireless icon may become green or a message similar to the following may appear: Successfully joined Wireless network SpeedTouch123456. Some wireless clients do not automatically join a wireless network. If so, follow the instructions for the wireless client software to initiate association.
First-time association example
The example below shows how the SpeedTouch wireless network is presented towards a Windows XP Service Pack 2 system.
Proceed as follows to associate your wireless client to the SpeedTouch:
Click the network icon in the notification area: The Wireless Network Connection window appears:
In the Choose a wireless network list, select the SpeedTouch wireless network and click Connect. The following window appears:

The same fixed channel. The SpeedTouch and your wireless repeater do not necessarily need to use the same SSID. Using different SSIDs allows you to force your wireless clients to use either the access point of the SpeedTouch or the one of your wireless repeater.

To configure WDS

Go to the SpeedTouch Web pages. In the menu, select Home Network. Click your WLAN. In the upper right corner, click Configure. If not already done, set a fixed channel and check whether the security settings (WEP encryption or no encryption) on your SpeedTouch are the same as on the repeater.
On the Wireless Access Point page, in the Pick a task list, click Configure WDS.
Select WDS Enabled. In the Pick a task list, click Scan for wireless access points. A warning is displayed.
Click OK. The SpeedTouch scans for access points on the same radio channel. Select your repeater in the List of Accessible Access Points, and then click Apply.

Chapter 3

Internet Connectivity Dial-In Clients
3 Internet Connectivity Dial-In Clients
If you want to set up initial Internet connectivity using the Home Install Wizard on the Setup CD or the embedded Easy Setup, refer to the provided Installation and Setup Guide.
Depending on the configuration of the SpeedTouch you may have: Direct access: As soon as the initial configuration is finished, immediate and uninterrupted WAN access is provided. If you have direct access, the remote organisation might ask for a user name and password on an Internet welcome page. Dial-in access: Access must be explicitly established, that is by dialling into a Broadband Remote Access Server (BRAS). Depending on the SpeedTouch configuration, dial-in access is provided via the SpeedTouchs Routed PPPoA or Routed PPPoE packet services with embedded PPP client.

Connection protocols

The applied connection protocol model depends on the service profile you selected to configure the SpeedTouch and should correspond with the Service Providers requirements. If, for instance, your ISP provides PPPoE, you should configure PPPoE. You can find more information on connection protocols in the Internet Connection Configuration Guide.

Dial-in clients

There are different ways to dial in, depending on the operating system on your computer and your preferences.

Dial-in method:

Embedded PPP dial-in client:
canbeusedonfollowing operating system:

The SpeedTouch embedded PPP dial-in client will close the Internet connection. The Internet Gateway icon displays Disconnected and your computers are offline.

Chapter 4

SpeedTouch Web Interface
4 SpeedTouch Web Interface

Embedded

The SpeedTouch comes with embedded Web pages, providing an interface to the software installed on the device. It allows easy setup and management of the SpeedTouch via your Web browser from any PC connected to the SpeedTouch. See 1.2.1 Access via the Web Interface on page 7 to access the pages.

SpeedTouch documentation

Consult: The SpeedTouch Installation and Setup Guide for more information on setup and installation procedures.

4.1 Navigation

Navigation components
The SpeedTouch Web interface consists of the following components: Menu Language Bar Navigation Bar Notification Area Tasks
Navigation bar Notification area Language bar

4.1.1 Menu

Menu items
The menu is located on the left side of the page and consists of the following menu items: SpeedTouch: Provides basic information on the SpeedTouch. Broadband Connection: Allows you to view/configure your broadband connections. Toolbox: Allows you to assign games or applications to a device and secure your Internet connection. Home Network: Allows you to manage your local network.
Collapsing and expanding the menu
You can collapse/expand the menu by clicking the arrow located at the top of the menu.

4.1.2 Language Bar

Language bar
The language bar is located under the SpeedTouch logo and allows you to change the language of the SpeedTouch Web interface.
The language bar will only be shown if more than one language is available.

4.1.3 Navigation Bar

Navigation bar
The navigation bar is located at the top of the page and allows you to: View the current user name. Click this name to change your password or switch to another user. View the current position on the SpeedTouch Web interface. Get context-related Help information.

Display level

Depending on the page you are viewing, the following buttons will be available: Overview to view a summary of the current status or configuration. Details to view more detailed information on the current status or configuration. Configure to change the current settings.

4.1.4 Notification Area

Notification area
The notification area is located under the Navigation Bar and is used to display: Error messages, indicated by a red traffic light. Warnings, indicated by an orange traffic light. Information, indicated by a green traffic light. If none of these events occur, the notification area will not be shown.

4.1.5 Tasks

To allow a quick configuration of your SpeedTouch, some pages may offer you a number of related tasks in the Pick a task list. These tasks will guide you to the page where you can perform the selected task.

4.2 Home

SpeedTouch home page
The SpeedTouch home page gives you a short overview of all the configurable aspects of the SpeedTouch: SpeedTouch Broadband Connection Toolbox Home Network

4.3 SpeedTouch

The SpeedTouch menu
The SpeedTouch menu consists of the following items: Information Configuration Event Logs

The SpeedTouch page

The SpeedTouch page gives you some basic information on the SpeedTouch: Product Information Configuration

4.3.1 Information

Information
The Information page summarizes important information on your SpeedTouch. You may need this information when you contact your helpdesk.
4.3.2 SpeedTouch Easy Setup

Easy Setup Wizard

The Easy Setup Wizard helps you to configure your SpeedTouch Internet connection. Proceed as follows to configure the SpeedTouch using the SpeedTouch Easy Setup wizard:
In the left menu, click SpeedTouch. In the Pick a task list, click Set up. The Easy Setup wizard will now guide you through the configuration of your SpeedTouch.

4.3.3 Restart

Restarting your SpeedTouch
In the left menu, click SpeedTouch. In the Pick a task list, click Restart.The following message appears:
Click Yes, restart my SpeedTouch. The SpeedTouch restarts. The SpeedTouch returns to the Home page.

4.3.4 Configuration

Overview Details
The Overview page displays the current configuration of your SpeedTouch.
The Details page displays more detailed information on the current configuration of your SpeedTouch.

Configure

The Configure page allows you to change the current configuration.
If you want to: Reconfigure your SpeedTouch: Click Configuration Wizard under Service Configuration. For more information, see 4.3.2 SpeedTouch Easy Setup on page 45. Configure the time settings of your SpeedTouch: Select Auto-configuration if you want the SpeedTouch to use a time server to synchronise its clock to a dedicated time server. Clear Auto-configuration to manually configure the SpeedTouch time settings. Disable/enable Web browsing interception or set it to automatic: In the Web Browsing Interception list, click the Web browsing interception setting of your choice.
If you disable Web browsing interception or set it to automatic you will not be able to use Parental Control.
Click Apply to apply and save your settings.

2 Content level activation
To activate your new content level:
In the Toolbox menu, click Parental Control. In the upper right corner, click Configure. In the Content Level list, select your new content level. Click Apply. The new content level is now active.

4.5.10 Firewall

About the firewall
The firewall allows you to secure traffic from and to the SpeedTouch. There are different security levels, depending on the degree of security you need.
The Overview page summarizes the overall security policy configured on your SpeedTouch.
On the Configure page you can select the security level of the SpeedTouch.

Security Levels

Select one of following security levels: BlockAll: All traffic from and to the Internet is blocked. Game and Application Sharing is not allowed by the firewall. Although BlockAll should block all connections, some mandatory types of traffic such as DNS will still be relayed between LAN and WAN via the SpeedTouch. Standard: All outgoing connections are allowed. All incoming connections are blocked, except for inbound connections assigned to a local host via Game and Application Sharing. Disabled: All in- and outgoing traffic is allowed to pass through your SpeedTouch, including Game and Application Sharing. This is the default firewall level. The firewall levels only have impact on the forward hook. This means that the handling of traffic from and to the Web pages of the SpeedTouch is independent of the selected firewall level. Protocol checks will be performed on all accepted connections, irrespective of the chosen level. You can only disable protocol checks via the CLI.
Details of a security level
To view the details of the currently active security level:
In the Toolbox menu, click Firewall. Click the Details link. The name of the rule The Action that is applied on the traffic when the rule is valid The Source and Destination interface or IP address (range) to which the rule applies The protocol or SpeedTouch Service for which the rule applies. The number of Hits (number of times that the rule was applied to traffic).
Following information is provided per rule that is part of the security level
Creating a new security level
In the Toolbox menu, click Firewall. In the upper right corner, click Configure. In the Pick a task list, click Create a new Security Level. In the Name box, type a name for the new security level. Choose an existing security level to clone from. Click Apply.

Create an account at the Dynamic DNS service of your choice, for example: www.dyndns.org www.no-ip.com www.dtdns.com
On the Dynamic DNS page, click Configure. Select the Enabled check box.
If necessary, click the broadband connection to which you want to assign the Dynamic DNS hostname in the Interface list. Type the user name and password of your Dynamic DNS service account in the corresponding fields. In the Service list, click your Dynamic DNS service. In the Host box, type the host name you want to assign to this interface (for example myspeedtouch.dyndns.org). Click Apply.

4.5.13 User Management

The Overview page gives you an overview of the currently configured users and their privileges. Click the name of a user to edit his user account.
On the Configure page, you can: Click Add to create a new user account. Click Edit to change a user account. Click Delete to remove a user.

Types of users

The table below shows the types of users and their privileges:

Privileges

This is the root (master) account. This user has all privileges without any exceptions or limitations. This user can perform any service via any access channel from any access origin. This user can perform any service via any access channel from WAN origin only. This user can perform any service via any access channel from LAN or Local origin only. This user can perform only LAN related configurations via any access channel from any origin. This user has access to the GUI (Service/overview page) via HTTP or HTTPS access channel from LAN origin only.

SuperUser

TechnicalSupport

Administrator

LAN_Admin

Poweruser

WAN_Admin
This user can perform only WAN related configurations via any access channel from any origin. This user has access to the GUI (Overview pages, remote assistance) via HTTP or HTTPS access channel from LAN origin only. This user does not have any privileges.

4.5.14 Edit User

Editing a user account
In the Toolbox menu, click User Management. Under Local User Data, click the name of the user you want to edit.
The Edit User page appears. On this page, you can: Click Reset Password to reset the password of the selected user to the user name. So, if you reset the password of John his password will be John. Change the administration rights of the selected user.
You can not change the administration rights of the account you are logged on with.
4.5.15 Change Default User

The Default User page

On this page you can change the default user. If users browse to the SpeedTouch Web pages, they will be automatically logged on with this account.
Changing the default user
To allow users to automatically log on under this account, this default user account must be configured with a blank password.
In the Toolbox menu, click User Management. In the Pick a task list, click Set the default user. The Change Default User page appears.
In the User Name list, click the name of the new default user. Click Change Default User to confirm your choice.

4.5.16 Add User

Adding users
In the Toolbox menu, click User Management. In the Pick a task list, click Add new user. The Add User page appears.
Under User definition you can configure: The name of the new user. The password of the new user will be equal to the user name; for example if the user name is John Doe, the password will be John Doe. Also when resetting a user, the password will be changed into the user name.
The administration rights of the new user.
You can only add users with less than or equal administration rights as yourself.

4.6 Home Network

Home Network Menu
The Home Network menu consists of the following items: Devices Allows you the view/configure the devices detected on your local network. Interfaces Allows you to view/configure the interfaces that are available on the SpeedTouch.
The Home Network page Viewing (wireless) client information
The Home Network page gives you an overview of your SpeedTouch network.
If you click on a (wireless) client you can: View the (wireless) clients network settings. Configure the (wireless) clients network settings by clicking Configure.

4.6.1 Devices

The Overview page gives you an overview of the devices that are currently connected to the SpeedTouch network. Click on a device name to get more information on a specific device.
The detected device dsldevice is the SpeedTouch itself.
The Configure page gives you an overview of the devices that are currently connected to the SpeedTouch network. If you want to: Get more information on a specific device, click on the name of the device. See 4.6.2 Device Settings on page 83 for more information. Edit a device from the Detected Device(s) list, click Edit. Delete a device from the Detected Device(s) list, click Delete. Once a device connects to the SpeedTouch network, it will remain listed in the Detected Device(s) list until you delete it.

4.6.2 Device Settings

Accessing the device settings page
In the Home Network menu, click Devices. In the Detected Device(s) list, click the name of the device you want to view.
The Overview page displays the following items: Information allows you to view: Status shows whether the device is currently connected to the SpeedTouch network. Type shows the device type. Connected To shows the interface to which the device is currently connected. Addressing allows you to view: Physical Address shows the MAC address of the device. IP Address Assignment shows whether the device is using a static or dynamic IP address. IP Address shows the current IP address of the device. Always use the same address indicates whether the wireless client has a static DHCP lease or not. DHCP Lease Time displays the time for which the wireless client can use this IP address. Connection Sharing: Gives you an overview of the games or services that are currently assigned to this device. Click the name of the game or service to view the used port mappings. For more information, see 4.5.4 Game or Application Definition on page 61.
The Configure page allows you to: Change the device information. Allow a game or service running on this device to be initiated from the Internet.

4.6.3 Assign Public IP

On this page you can assign the public IP address of your Internet Connection(s) to a specific device on your local network. You might want to do this if: You do not want to use the Network Address Translation engine of your SpeedTouch. This device is running server applications (Web server,.) and you want it to be accessible from the Internet. You can also achieve this by creating a port mapping for the specified server, as described in 4.5.2 Game & Application Sharing on page 58. This device has to be considered as the unique access point to your local network (DMZ).
Assigning the public IP address to a device
Be aware that the device to which you assign the public IP address will lose all security offered by the SpeedTouch.
In the Home Network menu, click Devices. In the Pick a task list, click Assign the public IP address of a connection to a device. Click the Edit link of your Internet connection. In the Device list, select the device you want to assign the public address to.
Click Apply. The SpeedTouch prompts you to make some adjustments as a result of the new configuration.
Click OK. Release and renew the IP address of the device. For more information, see your operating systems user guide or help.
If necessary, reassign server applications to this device.
4.6.4 Wireless Device Settings
Accessing the wireless device settings page
In the Home Network menu, click Devices. In the Detected Device(s) list, click the name of the wireless device you want to view.
The Overview page displays the following items: Information allows you to view: Status displays whether the device is currently connected to the SpeedTouch network. Type displays the device type. Connected To displays the interface to which the device is currently connected. Allowed on LAN indicates whether the wireless client is allowed to connect to the SpeedTouch WLAN. Addressing allows you to view: Physical Address displays the MAC address of the device. IP Address Assignment displays whether the device is using a static or dynamic IP address. IP Address displays the current IP address of the device. Always use the same address indicates whether the wireless client has a static DHCP lease or not. DHCP Lease Time displays the time for which the wireless client can use this IP address. Connection Sharing: Gives you an overview of the games or services that are currently assigned to this device. Click the name of the game or service to view the used port mappings. For more information, see 4.5.4 Game or Application Definition on page 61.

Select Networking Services in the Components list and click Details. In the Networking Services window, Select Internet Gateway Device Discovery and Control Client and click OK.
5.3 Reset to Factory Defaults
Resetting your SpeedTouch
You might consider a reset to factory defaults as described below.
Be aware that a reset to factory defaults will revoke all configurational changes you made to the SpeedTouch.
You can choose between: Software reset Hardware reset A reset to factory default settings deletes the configuration profile settings. Therefore, after the reset, a reconfiguration of your SpeedTouch will be needed. Also your WLAN clients will have to be re-associated, as described in 2.2.2 Connecting Wireless Clients for the First Time on page 20.

Software reset

Go to the SpeedTouch Web pages. In the menu, select SpeedTouch > Configuration. In the Pick a task list, click Reset my SpeedTouch to default settings. The SpeedTouch restarts. The SpeedTouch returns to the SpeedTouch home page (unless the IP address of your computer is not in the same subnet as the default IP address of the SpeedTouch, being 192.168.1.254).

Hardware reset

Make sure the SpeedTouch is turned on. Use a pen or an unfolded paperclip to push the recessed reset button on the back panel. The reset button is marked with a red circle. Push it until the power LED lights red - this will take about 7 seconds.

1 ON/OFF Reset

Release the reset button. The SpeedTouch restarts.
THOMSON 2005. All rights reserved. E-DOC-CTC-20051017-0147 v1.0

Need more help?

Additional help is available online at www.speedtouch.com