Comtrend CT-5361T Manual
Comtrend CT-5361T - Datasheet, size: 374 KB
Here you can find all about Comtrend CT-5361T like manual and other informations. For example: reset, usb driver, ip address, driver, password.
Comtrend CT-5361T manual (user guide) is ready to download for free.
On the bottom of page users can write a review. If you own a Comtrend CT-5361T please write about it to help other people. [ Report abuse or wrong photo | Share your Comtrend CT-5361T photo ]
User reviews and opinions
No opinions have been provided. Be the first and add a new opinion/review.
The following diagram depicts the application of the device on a wireless network.
Front Panel LED Indicators
The front panel LED indicators are shown in the picture below and followed by an explanation in the table below.
Mode Function On Off The router is powered up. The router is powered down. POST (Power On Self Test) failure (not bootable) or Device malfunction. A malfunction is any error of internal sequence or state
that will prevent the device from connecting to the DSLAM or passing customer data. This may be identified at various times such after power on or during operation through the use of self testing or in operations which result in a unit state that is not expected or should not occur. Green On Off Green Green Blink On Off Green Green Blink On Off Green Blink An Ethernet Link is established. An Ethernet Link is not established. Data transmitting or receiving over LAN. The wireless module is ready and idle. The wireless module is not installed. Data transmitting or receiving over WLAN. A USB link is established. A USB link is not established. Data transmitting or receiving over USB.
DSL good sync Modem power off Flashing Green = DSL attempting sync Flashing at 2 Hz with a 50% duty cycle when trying to detect carrier signal Flashing at 4 Hz with a 50% duty cycle when the carrier has been detected and the modem is trying to train.
IP connected and no traffic detected.
If an IP or PPPoE
session is dropped due to an idle timeout, the light will remain green if an ADSL connection is still present. Off Modem power off, modem in bridged mode or ADSL connection not present. the light is turned off. Green Red Blink On IP connected and IP Traffic is passing thru the device (either direction) Device attempted to become IP connected and failed (no DHCP response, no PPPoE response, PPPoE authentication failed, no IP address from IPCP, etc.) The light will turn red when it attempts to reconnect and DHCP or PPPoE fails. Also, if an IP or PPPoE session is dropped for any reason, other than an idle timeout, INTERNET
Chapter 2 Installation
In the rear panel, there is a reset button. To load the factory default settings, hold the reset button down for at least 5 seconds.
Follow the instructions below to complete the hardware connections.
Connection to LINE port If you wish to connect both the router and a telephone, connect the LINE port to a POTS splitter with a RJ11 connection cable.
ATM AAL5 LAYER STATISTICS FOR EACH VCC OVER ADSL INTERFACE Field CRC Errors SAR TimeOuts Description Number of PDUs received with CRC-32 errors Number of partially re-assembled PDUs which were discarded because they were not fully re-assembled within the required period of time. Over Sized SDUs If the re-assembly time is not supported then, this object contains a zero value. Number of PDUs discarded because the corresponding SDU was too large Short Packets Errors Number of PDUs discarded because the PDU length was less than the size of the AAL5 trailer Length Errors Number of PDUs discarded because the PDU length did not match the length in the AAL5 trailer 30
Within the ADSL
The following figure shows the ADSL Network Statistics screen. button. The Reset button resets the statistics.
Statistics window, a bit Error Rate Test can be started using the ADSL BER Test
Field Mode Type Line Coding Status Link Power State SNR Margin (dB) Attenuation (dB) Output Power (dBm) Attainable Rate (Kbps) Rate (Kbps) Super Frames Super Frame Errors RS Words RS Correctable Errors RS Uncorrectable Errors HEC Errors OCD Errors LCD Errors Total ES: Total SES: Total UAS: T1.413, ADSL2
Description Line Coding format, that can be selected G.dmt, G.lite, Channel type Interleave or Fast Trellis On/Off Lists the status of the DSL link Link output power state. Signal to Noise Ratio (SNR) margin Estimate of average loop attenuation in the downstream direction. Total upstream output power The sync rate you would obtain. Current sync rate. Total number of super frames Number of super frames received with errors Total number of Reed-Solomon code errors Total Number of RS with correctable errors Total Number of RS words with uncorrectable errors Total Number of Header Error Checksum errors Total Number of out-of-cell Delineation errors Total number of Loss of Cell Delineation Total Number of Errored Seconds Total Number of Severely Errored Seconds Total Number of Unavailable Seconds
Choose Route to display the routes that the route information has learned.
Click ARP to display the ARP information.
Click DHCP to display the DHCP information.
Chapter 5 Quick Setup
The Quick Setup allows the user to configure the ADSL router for DSL connectivity and Internet access. It also guides the user though the WAN network setup first and then the LAN interface setup. You can either manually customize the router or follow the online instruction to set up the router. The CT-5361T ADSL router supports the following five network operating modes over an ATM PVC WAN interface. PPP over Ethernet (PPPoE) PPP over ATM (PPPoA) MAC Encapsulated Routing (MER) IP over ATM (IPoA) Bridging The following configuration considerations apply: The WAN network operating mode operation depends on the service providers configuration on the Central Office side and Broadband Access Server for the PVC If the service provider provides PPPoE service, then the connection selection depends on whether the LAN-side device (typically a PC) is running a PPPoE client or whether the CT-5361T is to run the PPPoE client. support both cases simultaneously. If some or none of the LAN-side devices do not run PPPoE client, then select PPPoE. If every LAN-side device is running a PPPoE client, then select Bridge In PPPoE mode, CT-5361T also supports pass-through PPPoE sessions from the LAN side while simultaneously running a PPPoE client fro non-PPPoE LAN devices. NAT and firewall are always enabled when PPPoE mode is selected, but they can be enabled or disabled by the user when MER or IPoA is selected, NAT and firewall are always disabled when Bridge mode is selected. Depending on the network operating mode, and whether NAPT and firewall are enabled or disabled, the main panel will display or hide the NAPT/Firewall menu. For instance, at initial setup, the default network operating mode is Bridge. The main panel will not show the NAPT and Firewall menu. The CT-5361T can
Note: Up to sixteen PVC profiles can be configured and saved on the flash memory. To activate a particular PVC profile, you need to navigate all the Quick Setup pages until the last summary page, then click on the Finish button and reboot the system.
Auto Quick Setup
You only need to follow the online instructions that
The auto quick setup requires the ADSL link to be up. The ADSL router will automatically detect the PVC. you are prompted. 1. Select Quick Setup to display the DSL Quick Setup screen.
2. Click Next to start the setup process. Follow the online instructions to complete the setting. This procedure will skip some processes like PVC index, or encapsulation. 3. After the settings are complete, you can use the ADSL service.
Manual Quick Setup
manual configuration of the connection type.
STEP 1: Click Quick Setup and un-tick the DSL Auto-connect checkbox to enable
Un-tick this checkbox to enable manual setup and display the following screen.
STEP 2: Enter the Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI). Select Enable Quality Of Service if required. Click Next.
STEP 3: Choosing different connection types pops up different settings requests. Enter appropriate settings that are requested by your service provider. The following descriptions state each connection type setup separately. Select Enable 802.1q (by ticking the box) if required, and input a number for the VLAN ID. Click on Next to go to next step.
PPP over ATM (PPPoA) and PPP over Ethernet (PPPoE)
1. Select the PPP over ATM (PPPoA) or PPP over Ethernet (PPPoE) radio button and click Next. The following screen appears:
PPP USERNAME/PPP PASSWORD Give PPP Username, PPP Password and PPPoE Service Name, then select the Authentication Method (AUTO/PAP/CHAP/MSCHAP). Please contact your ISP for the information. The WEB user interface allows a maximum of 256 characters in the PPP user name and a maximum of 32 characters in PPP password. Encapsulation Mode Choosing different connection types provides different encapsulation modes. PPPoA- VC/MUX, LLC/ENCAPSULATION PPPoE- LLC/SNAP BRIDGING, VC/MUX MER- LLC/SNAP-BRIDGING, VC/MUX IPoA- LLC/SNAP-ROUTING, VC MUX Bridging- LLC/SNAP-BRIDGING, VC/MUX Disconnect if no activity The CT-5361T can be configured to disconnect if there is no activity for a period of time by selecting the Dial on demand check box. When the checkbox is ticked, you need to enter the inactivity timeout period. minute to 4320 minutes. The timeout period ranges from 1
PPP IP Extension The PPP IP Extension is a special feature deployed by some service providers. Unless your service provider specially requires this setup, do not select it. The PPP IP Extension supports the following conditions: Allows only one PC on the LAN The public IP address assigned by the remote side using the PPP/IPCP protocol is actually not used on the WAN PPP interface. Instead, it is forwarded to the PCs LAN interface through DHCP. Only one PC on the LAN can be connected to the remote, since the DHCP server within the ADSL router has a single IP address to assign to a LAN device. NAPT and firewall are disabled when this option is selected. The ADSL router becomes the default gateway and DNS server to the PC through DHCP using the LAN interface IP address. The ADSL router extends the IP subnet at the remote service provider to the LAN PC. That is, the PC becomes a host belonging to the same IP subnet. The ADSL router bridges the IP packets between WAN and LAN ports, unless the packet is addressed to the routers LAN IP address.
Chapter 6 Advanced Setup
This chapter explains: WAN, LAN, Routing, DSL and Port Mapping Note: Shown below for your reference are the available menu options for each different configuration.
This screenshot is for MER and IPoA encapsulations.
This screenshot is for PPPoE and PPPoA encapsulations.
This screenshot is for Bridge encapsulation.
This function means one can add an 802.1Q VLAN tag on PPPoE/MER or Bridge mode.
It means the packets are sent to WAN and a specific VlanID (802.1Q tag) will be added in the Ethernet header. The VlanID shows which 802.1Q tag will be added. Please reference subsection 4.1 for further information.
Configure the DSL Router IP Address and Subnet Mask for LAN interface. Save button only saves the LAN configuration data. Save/Reboot button saves the LAN configuration data and reboots the router to make the new configuration effective. IP Address: Enter the IP address for the LAN port. Subnet Mask: Enter the subnet mask for the LAN port.
Enable IGMP Snooping: Enable /Disable the function that is IGMP Snooping. Standard Mode: In standard mode, as in all prior releases, multicast traffic will flood to all bridge ports when there is no client subscribes to any multicast group even when IGMP snooping is enabled. Blocking Mode: In blocking mode, the multicast data traffic will be blocked and not flood to all bridge ports when there is no client subscription to any multicast group. To configure a secondary IP address for the LAN port, click the box as shown below.
IP Address: Enter the secondary IP address for the LAN port. Subnet Mask: Enter the secondary subnet mask for the LAN port.
To display the NAT function, you need to enable the NAT feature in the WAN Setup.
Virtual Server allows you to direct incoming traffic from WAN side (identified by Protocol and External port) to the Internal server with private IP address on the LAN side. The Internal port is required only if the external port needs to be converted to a different port number used by the server on the LAN side. A maximum 32 entries can be configured.
To add a Virtual Server, simply click the Add button. The following will be displayed.
Select a Service Or Custom Server Server IP Address External Port Start
User should select the service from the list. Or User can enter the name of their choice. Enter the IP address for the server. Enter the starting external port number (when you select Custom Server). When a service is selected the port ranges are automatically configured.
External Port End
Enter the ending external port number (when you select Custom Server). When a service is selected the port ranges are automatically configured.
Protocol Internal Port Start
User can select from: TCP, TCP/UDP or UDP. Enter the internal port starting number (when you select Custom Server). When a service is selected the port ranges are automatically configured
Internal Port End
Enter the internal port ending number (when you select Custom Server). When a service is selected the port ranges are automatically configured.
Some applications require that specific ports in the Routers firewall be opened for access by the remote parties. Port Trigger dynamically opens up the Open Ports in the firewall when an application on the LAN initiates a TCP/UDP connection to a remote party using the Triggering Ports. The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using the Open Ports. A maximum 32 entries can be configured.
To add a Trigger Port, simply click the Add button. The following will be displayed.
Select an Application Or Custom Application Trigger Port Start
User should select the application from the list. Or User can enter the name of their choice. Enter the starting trigger port number (when you select custom application). When an application is selected the port ranges are automatically configured.
Trigger Port End
Enter the ending trigger port number (when you select custom application). When an application is selected the port ranges are automatically configured.
Trigger Protocol Open Port Start
User can select from: TCP, TCP/UDP or UDP. Enter the starting open port number (when you select custom application). When an application is selected the port ranges are automatically configured.
Open Port End
Enter the ending open port number (when you select custom application). When an application is selected the port ranges are automatically configured.
User can select from: TCP, TCP/UDP or UDP.
The DSL router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer.
Enter the computers IP address and click Apply to activate the DMZ host. Clear the IP address field and click Apply to deactivate the DMZ host. 62
SIP ALG is Application layer gateway. If the user has an IP phone(SIP) or VoIP gateway(SIP) behind the ADSL router, the SIP ALG can help VoIP packet passthrough the router (NAT enabled).
Note: SIP (Session Initiation Protocol, RFC3261) is the protocol of choice for most VoIP (Voice over IP) phones to initiate communication. This ALG is only valid for SIP protocol running on UDP port 5060.
To display the Security function, you need to enable the firewall feature in the WAN
IP filtering allows you to create a filter rule to identify outgoing/incoming IP traffic by specifying a new filter name and at least one condition below. All of the specified conditions in this filter rule must be satisfied for the rule to take effect. Click Save/Apply to save and activate the filter. Outgoing Note: The default setting for Outgoing is Accepted.
To add a filtering rule, simply click the Add button. The following screen will be displayed.
Filter Name Protocol Source IP address Source Subnet Mask Source Port (port or port:port) Destination IP address Destination Subnet Mask Destination port (port or port:port)
Type a name for the filter rule. User can select from: TCP, TCP/UDP, UDP or ICMP. Enter source IP address. Enter source subnet mask. Enter source port number. Enter destination IP address. Enter destination subnet mask. Enter destination port number.
Incoming Note: The default setting for Incoming is Blocked.
To configure the parameters, please reference Outgoing table above.
Parental control: allows parents, schools, and libraries to set access times for Internet use.
To add a parental control, simply click the Add button. The following screen will be displayed.
Username: MAC: Mon, Tue, Wed, Thu, Fri, Sat, Sun: Start, End Blocking Time:
Input Internet access user name Set the MAC address to access the Internet Set which days that will have block restrictions to Internet access Set Internet block start and stop time 67
Mac Filtering is only available when Bridging PVC is configured. Each network device has a unique MAC address. You can block or forward the packets based on the MAC addresses. The MAC Filtering Setup screen allows setting up the MAC filtering policy and the MAC filtering rules. MAC Filtering is only effective on ATM PVCs configured in Bridge mode. The policy FORWARDED means that all MAC layer frames will be FORWARDED except those matching with any of the specified rules in the following table. BLOCKED means that all MAC layer frames will be BLOCKED except those matching with any of the specified rules in the following table. FORWARD; you change by clicking the Change Policy button. The default is
Choose Add or Remove to configure MAC filtering rules.
The following screen
pops up when you click Add. Create a filter to identify the MAC layer frames by specifying at least one condition below. If multiple conditions are specified, all of them take effect. Click Apply to save and activate the filter.
Option Protocol type Destination MAC Address Source MAC Address Frame Direction: WAN Interface
Description PPPoE, IPv4, IPv6, AppleTalk, IPX, NetBEUI, IGMP Define the destination MAC address Define the source MAC address Select a direction of the frame Selects the interface that the MAC filter rule(s) will be applied. Only the WAN interface that is configured for bridged can be selected.
Quality of Service
To display the QoS function, you need to enable the QoS feature in the WAN Setup.
Choose Add to configure network traffic classes. The following screen will be displayed:
Traffic Class Name Assign ATM Transmit Priority Mark IP Precedence Mark IP Type Of Service
Enter name for traffic class. Select Low, Medium or High. Select between 0-7. The lower the digit shows the higher the priority. Select either: Normal Service, Minimize Cost, Maximize Reliability, Maximize Throughput, Minimize Delay
Mark 802.1p if 802.1q is enabled on WAN SET-1 Physical LAN Port Protocol Source IP Address 71
Select between 0-7. The higher the digit shows the higher the priority.
Select between ENET(1-4), USB, Wireless and Wireless_Guest. User can select from: TCP, TCP/UDP, UDP or ICMP. Enter the source IP address.
Source Subnet Mask Source Port (port or port:port) Destination IP address Destination Subnet Mask Destination port (port or port:port) SET-2 802.1p Priority
Enter the subnet mask for the source IP address. Enter source port number or port range. Enter destination IP address. Enter destination subnet mask. Enter destination port number or port range. Select between 0-7. The lower the digit shows the higher the priority
If the Enable Differentiated Service Configuration box is ticked (i.e. selected) the following screen will be displayed:
The additional Items are explained here. Assign Differentiated Services Code Point (DSCP) Mark Source MAC Address The selected Code Point gives the corresponding priority to the packets that satisfies the rules set below. A packet belongs to SET-1, if a binary-AND of its source MAC address with the Source MAC Mask is equal to the binary-AND of the Source MAC Mask and this field. Source MAC Mask Destination MAC Address This is the mask used to decide how many bits are checked in Source MAC Address. A packet belongs to SET-1 then the result that the Destination MAC Address of its header binary-AND to the Destination MAC Mask must equal to the result that this field binary-AND to the Destination MAC Mask. Destination MAC Mask This is the mask used to decide how many bits are checked in Destination MAC Address. 73
The Routing dialog box allows you to configure Default gateway, Static Route and
If Enable Automatic Assigned Default Gateway checkbox is selected, this router will accept the first received default gateway assignment from one of the PPPoA, PPPoE or MER/DHCP enabled PVC(s). If the checkbox is not selected, enter the static default gateway AND/OR a WAN interface. Click Save/Apply button to save it. NOTE: If changing the Automatic Assigned Default Gateway from unselected to selected, You must reboot the router to get the automatic assigned default gateway.
Allows seamless rate adaptation
Port Mapping supports multiple port to PVC and bridging groups. Each group will perform as an independent network. To support this feature, you must create mapping groups with appropriate LAN and WAN interfaces using the Add button. The Remove button will remove the grouping and add the ungrouped interfaces to the Default group. As shown below, when you tick the Enable virtual ports on, all of the LAN interfaces will be grouped together as a default.
To add a port mapping group, simply click the Add button.
To create a group from the list, first enter the group name and then select from the available interfaces on the list.
Automatically Add Clients With the Following DHCP Vendor IDs: Add support to automatically map LAN interfaces including Wireless and USB to PVC's using DHCP vendor ID (option 60). The local DHCP server will decline and send the requests to a remote DHCP server by mapping the appropriate LAN interface. This will be turned on when PortMapping is enabled. There are 4 PVCs (0/33, 0/36, 0/37, 0/38). 0/33 is for PPPoE and the others are for IP setup-box (video). The LAN interfaces are ETH1, ETH2, ETH3, ETH4, USB Wireless and Wireless_Guest. Port mapping configuration are: 1. Default: ETH1, ETH2, ETH3, ETH4, USB Wireless and Wireless_Guest.
2. Video: nas_0_36, nas_0_37 and nas_0_38. The DHCP vendor ID is "Video". The CPE's DHCP server is running on "Default". And ISP's DHCP server is running on PVC 0/36. It is for setup-box use only. In the LAN side, PC can get IP address from CPE's DHCP server and access Internet via PPPoE (0/33). If the setup-box was connected with interface "ETH1" and send a DHCP request with vendor id "Video", CPE's DHCP server will forward this request to ISP's DHCP server. And CPE will change the port mapping configuration automatically. The port mapping configuration will become: 1. Default: ETH2, ETH3, ETH4, USB Wireless and Wireless_Guest. 2. Video: nas_0_36, nas_0_37, nas_0_38 and ETH1.
A certificate is a public key, attached with its owners information (company name, server name, personal real name, contact e-mail, postal address, etc) and digital signatures. There will be one or more digital signatures attached on the certificate, indicating that these signers have verified that the owner information of this certificate is correct.
Settings System log TR-069 Client Internet Time Access Control Update software Save/Reboot
The Settings option allows you to back up your settings to a file, retrieve the setting file, and restore the settings.
The Backup option under Management>Settings save your router configurations to a file on your PC. Click BACKUP Settings in the main window. You will be prompted to define the location of the backup file to save. After choosing the file location, click Backup Settings. The file will then be saved to the assigned location.
The Update option under Management>Settings update your router settings using your saved files.
Clicking the Restore Default Configuration option in the Restore Settings screen can restore the original factory installed settings.
NOTE 1: This entry has the same effect as the hardware reset-to-default button. The CT-5361T board hardware and the boot loader support the reset to default button. If the reset button is continuously pushed for more than 5 seconds, the boot loader will erase the entire configuration data saved on the flash memory. NOTE 2: Restoring system settings requires a system reboot. This necessitates that the current Web UI session be closed and restarted. Before restarting the connected PC must be configured with a static IP address in the 192.168.1.x subnet in order to configure the CT-5361T.
Default settings The CT-5361T default settings are LAN port IP= 192.168.1.1, subnet mask = 255.255.255.0 Local user name: root Password: 12345 Remote user name: support Remote user password: support
After the Restore Default Configuration button is selected, the following screen appears. Close the DSL Router Configuration window and wait for 2 minutes before reopening your web browser. If necessary, reconfigure your PC's IP address to match your new configuration.
The System Log option under Management>Settings allows you to view the system events log, or to configure the System Log options. The default setting of system log is disabled. Follow the steps below to enable and view the system log.
Username used to authenticate the CPE when making a connection to the ACS using the CPE WAN Management Protocol. This username is used only for HTTP-based authentication of the CPE.
Password used to authenticate the CPE when making a connection to the ACS using the CPE WAN Management Protocol. This password is used only for HTTP-based authentication of the CPE.
Connection Request Username used to authenticate an ACS making a Connection
User Name Password Get RPC Methods
Request to the CPE. Request to the CPE. This method may be used by a CPE or ACS to discover the set of methods supported by the ACS or CPE it is in communication with. This list may include both standard TR-069 methods (those defined in this specification or a subsequent version) and vendor-specific methods. The receiver of the response MUST ignore any unrecognized methods. Click this button to force the CPE to immediately establish a connection to the ACS.
Connection Request Password used to authenticate an ACS making a Connection
The Internet Time option under Management menu bar configures the Modems time. To automatically synchronize with Internet time servers, tick the corresponding box displayed on the screen. Then click Save/Apply.
The Access Control option under Management menu bar configures the access-related parameters, including three parts: Services, IP Address, and Passwords.
The Services option limits or opens the access services over the LAN or WAN. These services are provided FTP, HTTP, ICMP, SSH (Security Socket Share), TELNET, and TFTP. Enable the service by checking the item in the corresponding checkbox, and then click Save/Apply.
Access IP Addresses
If the Access Control
The IP Addresses option limits the access by IP address.
Mode is enabled, only the allowed IP addresses can access the router. Before you enable it, configure the IP addresses by clicking the Add button.
Enter the IP address, subnet mask and select the interface. Then click Save/Apply to allow the PC with this IP address managing the DSL Router.
The Passwords option configures the access passwords for the router.
your DSL router is controlled through three user accounts: root, support, and user. root has unrestricted access to change and view configuration of your DSL Router. "support" is used to allow an ISP technician to access your DSL Router for maintenance and to run diagnostics. "user" can access the Router, view configuration settings and statistics, as well as, update the router's software. Use the fields below to enter up to 16 characters and click Apply to change or create passwords.
The Update Software screen allows you to obtain an updated software image file from your ISP. Manual software upgrades from a locally stored file can be performed using the following screen.
Step 1: Obtain an updated software image file from your ISP. Step 2: Enter the path to the image file location in the box below or click the Browse button to locate the image file. Step 3: Click the "Update Software" button once to upload the new image file. NOTE: The update process takes about 2 minutes to complete, and your DSL Router will reboot.
Save and Reboot
The Save/Reboot options saving the configurations and reboot the router.
the DSL Router Configuration window and wait for 2 minutes before reopening your web browser. If necessary, reconfigure your PC's IP address to match your new configuration.
Appendix A: Firewall
Stateful Packet Inspection Refers to an architecture, where the firewall keeps track of packets on each connection traversing all its interfaces and makes sure they are valid. This is in contrast to static packet filtering which only examines a packet based on the information in the packet header. Denial of Service attack Is an incident in which a user or organization is deprived of the services of a resource they would normally expect to have. Various DoS attacks the device can withstand are: ARP Attack, Ping Attack, Ping of Death, Land, SYN Attack, Smurf Attack and Tear Drop. TCP/IP/Port/Interface filtering rules These rules help in the filtering of traffic at the Network layer i.e. Layer 3. When a Routing interface is created "Enable Firewall" must be checked. Navigate to Advanced Setup -> Security -> IP Filtering, web page. Outgoing IP Filtering: Helps in setting rules to DROP packets from the LAN interface. By default if Firewall is Enabled all IP traffic from LAN is allowed. By setting up one or more filters, particular packet types coming from the LAN can be dropped. Filter Name: User defined Filter Name. Protocol: Can take on any values from: TCP/UDP, TCP, UDP or ICMP Source IP Address/Source Subnet Mask: Packets with the particular IP Address/Source Subnet Mask" combination will be dropped. Source Port: This can take on either a single port number or a range of port numbers. Packets having a source port equal to this value or falling within the range of port numbers(portX : portY) will be dropped. "Source
Selected WAN interface: mer_0_35/nas_0_35 This filter will ACCEPT all TCP packets coming from WAN interface mer_0_35/nas_0_35 with IP Address/Sub. Mask 184.108.40.206/16 having a source port of 80 irrespective of the destination. All other incoming packets on this interface are DROPPED.
Filter Name Protocol Source Address Source Subnet Mask Source Port Dest. Address Dest. Sub. Mask Dest. Port
: In_Filter2 : UDP : 220.127.116.11 : 255.255.0.0 : 5060:6060 :192.168.1.45 : 255.255.255.0 : 6060:7070
This rule will ACCEPT all UDP packets coming from WAN interface mer_0_35/nas_0_35 with IP Address/Sub.Mask 18.104.22.168/16 and a source port in the range of 5060 to 6060, destined to 192.168.1.45/24 and a destination port in the range of 6060 to 7070. All other incoming packets on this interface are DROPPED.
MAC Layer Filtering: These rules help in the filtering of traffic at the Layer 2. MAC Filtering is only effective on ATM PVCs configured in Bridge mode. After a Bridge mode PVC is created, navigate to Advanced Setup -> Security -> MAC Filtering web page.
Global Policy: When set to Forwarded the default filter behavior is to Forward all MAC layer frames except those explicitly stated in the rules. Setting it to Blocked changes the default filter behavior to Drop all MAC layer frames except those explicitly stated in the rules. To setup a rule: Protocol Type: Can be PPPoE, IPv4, IPv6, AppleTalk, IPX, NetBEUI or IGMP.
Destination MAC Address: Of the form, XX:XX:XX:XX:XX:XX. Frames with this particular destination address will be Forwarded/Dropped depending on whether the Global Policy is Blocked/Forwarded.
Source MAC Address: Of the form, XX:XX:XX:XX:XX:XX. Frames with this particular source address will be Forwarded/Dropped depending on whether the Global Policy is Blocked/Forwarded.
Frame Direction: LAN <=> WAN --> All Frames coming/going to/from LAN or to/from WAN. WAN => LAN --> All Frames coming from WAN destined to LAN. LAN => WAN --> All Frames coming from LAN destined to WAN User needs to select the interface on which this rule is applied.
Examples: 1. Global Policy: Forwarded Protocol Type: PPPoE Dest. MAC Addr: 00:12:34:56:78:90 Source MAC Addr: NA Frame Direction: LAN => WAN WAN Interface Selected: br_0_34/nas_0_34 Addition of this rule drops all PPPoE frames going from LAN-side to WAN-side with a Dest. MAC Addr. of 00:12:34:56:78:90 irrespective of its Source MAC Addr. on the br_0_34 WAN interface. All other frames on this interface are forwarded.
ATM service class UBR/CBR/VBR
Management Telnet, Web-based management, Configuration backup and restoration, TR-069, SNMP (optional) Software upgrade via HTTP, TFTP server, or FTP server Bridge Functions Transparent bridging and learning VLAN support Spanning Tree Algorithm IGMP Proxy Routing Functions Static route, RIP, and RIPv2, NAT/PAT, DHCP Server/DHCP Relay, DNS Proxy, ARP Security Functions Authentication protocols PAP, CHAP, TCP/IP/Port filtering rules, Port triggering/Forwarding, Packet and MAC address filtering, access control, SSH Application Passthrough PPTP, L2TP, IPSec, VoIP, Yahoo messenger, ICQ, RealPlayer, NetMeeting, MSN, X-box, etc OS Supported for USB driver Windows Vista/2000/XP/ME/98SE Power Supply External power adapter 110 Vac or 220 Vac Environment Condition Operating temperature 0 ~ 50 degrees Celsius Relative humidity 5 ~ 90% (non-condensing) Dimensions 200 mm (W) x 44 mm (H) x 136.5 mm (D) IEEE 802.1d Yes Yes Yes
Certifications FCC Part 15 class B, FCC Part 68, CE Note: Specifications are subject to change without notice.
Appendix D: SSH Client
Linux OS comes with ssh client. MicroSoft Windows does not have ssh client but there is a public domain one putty that you can download. http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html To access the router using Linux ssh client: From LAN: Use the router WEB UI to enable SSH access from LAN. (default is enabled) type: ssh -l root 192.168.1.1 From WAN: In the router, use WEB UI to enable SSH access from WAN. type: ssh -l support router-WAN-ip-address To access the router using Windows putty ssh client: From LAN: Use the router WEB UI to enable SSH access from LAN (default is enabled) type: putty -ssh -l root 192.168.1.1 From WAN: In the router, use WEB UI to enable SSH access from WAN. type: putty -ssh -l support router-WAN-ip-address
Wireless ADSL2+ Router
The CT-5361T is an 802.11g (54Mbps) Wireless and Wired ADSL2+ router. Four 10/100 Base-T Ethernet ports and an optional USB port and an integrated 802.11g WiFi WLAN Access Point (AP) provide with wired LAN connectivity and wireless connectivity separately. The CT-5361T ADSL2+ router also provides for state of the art security features such as WPA data encryption, Firewall and VPN pass through. The CT-5361T is designed for both residential and business applications that require wireless and wired connectivity to an ADSL broadband network. The CT-5361T supports up to 16 contiguous virtual connections allowing for multiple simultaneous Internet connections. The CT-5361T is also designed with TR-068 compliant color panel and LED indicators, which eases the installation of the modem and makes it more user-friendly.
CT-5361T (Annex A) UPnP Integrated 802.11g AP (Backward compatible with 802.11b) WPA/WPA2 and 802.1x Optional Turbo mode in wireless (After burner) WMM RADIUS client MAC address filtering IP filtering Static route/RIP/RIP v2 routing functions Dynamic IP assignment IP QoS NAT/PAT IGMP Proxy DHCP Server/Relay/Client DNS Proxy Auto PVC configuration Per-VC packet level QoS Up to 16 VCs Embedded SNMP agent Web-based management Supports remote administration, automatic firmware upgrade and configuration Configuration backup and restoration FTP/TFTP server Supports TR-069/TR-098/TR-111 for remote management TR-068 compliant
RJ-11 X1 for ADSL, RJ-45 X 4 for LAN, USB X 1 for LAN, Reset button X 1, Power switch X 1, Wi-Fi Antenna X 1
ADSL standard G.992.5 (ADSL2+) G.992.3 (ADSL2) G.DMT AnnexM ITU-T G.992.5, ITU-T G.992.3, ITU-T G.992.1, ANSI T1.413 Issue 2 Downstream : 24 Mbps Upstream : 1.3 Mbps Downstream : 12 Mbps Upstream : 1.3 Mbps Downstream : 8 Mbps Upstream : 832 Kbps
Standard 10/100 BaseT MDI/MDX support IEEE 802.3, IEEE 802.3u Auto-sense Yes IEEE802.11g, backward compatible with 802.11b 64, 128-bit Wired Equivalent Privacy (WEP) Data Encryption 11 Channels (US, Canada)/ 13 Channels (Europe)/ 14 Channels (Japan) Up to 54Mbps Yes Yes Yes (this feature is optional) Yes
Standard Encryption Channels Data Rate WPA/WPA2 IEEE 802.1x Afterburner mode (Turbo mode) WMM
RFC 2364 (PPPoA), RFC 2684 (RFC 1483) Bridge/Route; RFC 2516 (PPPoE); RFC 1577 (IPoA), Annex M Support PVCs 16 AAL type AAL5 ATM service class UBR/CBR/VBR ATM UNI support UNI3.1/4.0 OAM F4/F5 Yes
SNMP, Telnet, Web-based management, Configuration backup and restoration Software upgrade via HTTP, TFTP server, or FTP server Supports TR-069/TR-098/TR-111 for Remote Management
Transparent bridging and learning VLAN support Spanning Tree Algorithm IGMP Proxy IEEE 802.1d Yes Yes Yes
Static route, RIP, and RIPv2, NAT/PAT, DHCP Server/DHCP Relay/DHCP Client, DNS Proxy, ARP
Authentication protocols PAP, CHAP, TCP/IP/Port filtering rules, Port triggering/Forwarding, Packet and MAC address filtering, Access control, SSH
L3 policy-based QoS, IP QoS, ToS
PPTP, L2TP, IPSec, VoIP, Yahoo messenger, ICQ, RealPlayer, NetMeeting, MSN, X-box, etc
External power adapter 100 - 240 Vac 0 ~ 50 degrees Celsius 5 ~ 95% (non-condensing)
Operating temperature Relative humidity
205 mm(W) x 48 mm (H) x 145 mm (D)
Kit Weight (1*CT-5361T, 1*RJ11 cable, 1*RJ45 cable, 1*power adapter, 1*CD-ROM)
Note: Specifications are subject to change without notice.
Taiwan: 3F-1, No.10, Lane 609, Chung Hsin Road Section 5, San Chung, Taipei, Taiwan 24159 Tel: 886-2-2999-8261 Fax: 886-2-2999-8497 China: NO.88 East QianJin Road,Kunshan City,JiangSu,China Tel: 86-512-57383156, 86-512-57383157, 86-512-57384515 Fax: 86-512-57383155 Spain: Edif. Amrica II C/Prcion,7 portal 3 bajo H 28023 Madrid, Spain Tel: 34-917990403 Fax: 34-913510999 UK: 566 Chiswick High Road Building 3, Chiswick Park Chiswick London, W4 5YA UK Tel: 44-0-8453701031 Fax: 44-0-8453701032 France: 87, Rue du Gouverneur Gnral Flix Ebou 92130 Issy-les-Moulineaux, France Tel: 33-1-70715700 Fax: 33-1-70715701 Czech Republic: TOKOVO Jankovcova 1518/2, 170 00, Prague 7, Czech Republic Tel: 420-266-782040 Fax: 420-266-782990 USA & Canada: 16 Goodyear, Suite 120, Irvine, CA 92618 Tel: 1-949-7539640 Fax: 1-949-7539020 Brazil: Al. Campinas, 977 - 7. Floor - Room 71 / 72 - Jardins Zip Code: 01404-001 - So Paulo - SP - Brazil Tel: 11 3052-2295 Fax: 11 3052-2295 Mexico: Mariano Escobedo 396 Office 503 Colonia Anzures, Deleg. Miguel Hidalgo 11590 Distrito Federal Mxico Tel: +52 (55) 4623-1516
Global contact: email@example.com Website: www.comtrend.com
Usb Driver FW650C 22 DCC 600 KJ-7808RV MVW681 WT-H555TH 32PW9520 12 Zxled8 37FD9944 01S B2130 DMC-ZS1 EWN14991W 32LT7 N-series-T1module SU-VX500 Tourer-2008 Tvsiii GT-I8000 M8 Aficio 5560 Driver USR8000 Reset TX-32LX1A WLI3-TX1-g54 MP4-player TX-P50g20ES 957DF RMB750 Blackberry 7510 TH-A5 Ux-n1 DVR-510 PR-D2V LD-2130WH RW780 I7 Zoom LE40R73BD NV-HS870 KR500 Satellite M30 UE-37B6000 Deskjet 5655 WIN1200 Motorola H560 Password MP560 Cxai5198 EWT10410W AX34PRO 6408D Plus PI7200E TM300 Sc07 Longshot Cs6 Ip Address Navigon 81XX TX-SR705 GV-D300 Denon D-G1 Panel Aspire 3660 FO-A560 Espero MHC-RG40 NAD M3 Goal Plus 4262 C Bolido 4565 Leica M1 Bahamas MP34 Kd-sh1000 PEQ2200 32ZP18P M1917TM-SN 264-1 665-7436 LF-W1BR Arena 2 Mypal A696 SL-1210M5G Wellgate 2608 G663scvi AAM6010EV-t4 Aspire-5630 Laserjet 3800 MSC 3DX LRY-517 Proton 520 AS800C CDX-GT410U Olympus IS-1 14-20 KW Bike POD Fishfinder PM-A840S ICD-B120 PT-L785 RX-884R 4810T SRU530-87 LS6245 HT-BD2 Pilot MZ-E30 LA40S81BX
manuel d'instructions, Guide de l'utilisateur | Manual de instrucciones, Instrucciones de uso | Bedienungsanleitung, Bedienungsanleitung | Manual de Instruções, guia do usuário | инструкция | návod na použitie, Užívateľská príručka, návod k použití | bruksanvisningen | instrukcja, podręcznik użytkownika | kullanım kılavuzu, Kullanım | kézikönyv, használati útmutató | manuale di istruzioni, istruzioni d'uso | handleiding, gebruikershandleiding
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101