CT-6373/CT-6373E

Multi-DSL VoIP WLAN IAD

Description

Comtrends CT-6373/CT-6373E is a powerful Multi-DSL WLAN VoIP Integrated Access Device (IAD), providing predictable, real-time, toll-quality voice over the Internet. The CT-6373 is for ADSL2+/VDSL2 over POTS (Annex A) while the CT-6373E is for ADSL2+/VDSL2 over ISDN (Annex B). It is designed for residential and business users who need to integrate ADSL2/2+,VDSL2, WLAN and VoIP technologies. With the latest VDSL2 broadband technology, the CT-6373/CT-6373E is perfectly suitable for triple play and offers users easy access to the Internet via WLAN or Ethernet, and provides VoIP via standard analog phones. The CT-6373/CT-6373E allows calls to be routed to anywhere in the world significantly reducing or eliminating long distance charges. You can even make phone calls when your PC is turned off. It also provides a solution for all your network and telephony needs in one integrated unit, which reduces space requirements, and the cost of hardware and cabling. This makes CT-6373/CT-6373E the most cost effective solution for your application.

Features

CT-6373 Annex A CT-6373E Annex B Multi-DSL VoIP and Router Integrated Automatically switches to ADSL2+ or VDSL2 according to the port setting of DSLAM Integrated 802.11g AP (backward compatible with 802.11b) Supports life line: PSTN alive when power off Supports fast emergency call Supports QoS (Quality of Service) for voice Supports caller ID display and restriction Supports call hold Supports call waiting Supports call forwarding Supports call transfer Supports 3-way conference Supports Direct number dialing Supports T.38 Supports remote administration, automatic remote firmware upgrade & configuration Supports VPN Pass-Through Supports Day-time parental control Supports TR-069/TR-098/TR-104/TR-111 User Friendly Color connections

Applications Diagram

Specifications
Hardware Interface WAN Interface
DSL Standard ADSL standard ADSL2+ VDSL2 standard VDSL2 FXS x2, RJ-11x1 for ADSL2+/VDSL2 (Built-in FXO,Microfilter), RJ-45 x4 for LAN, Reset Button x1, Power Switch x1, USB host/device ITU-T G.992.5, ITU-T G.992.3, ITU-T G.992.1, ANSI T1.413 Issue 2, Annex M Downstream: Up to 24 Mbps Upstream: 1.3 Mbps ITU-T G.993.2 (supporting profile 8a, 8b, 8c, 8d, 12a, 12b, 17a) Downstream: Up to 100 Mbps Upstream: 60 Mbps IEEE 802.3, IEEE 802.3u Auto-sense Yes
LAN Interface WLAN Interface
Standard 10/100 BaseT MDI/MDX support
Standard IEEE802.11g, backward compatible with 802.11b Encryption 64, 128-bit Wired Equivalent Privacy (WEP) Data Encryption Channels 11 Channels (US, Canada)/ 13 Channels (Europe)/ 14 Channels (Japan) Data Rate Up to 54Mbps MAC Address Filtering, WEP, WPA, IEEE 802.1x 10, 25, 50, 100mW @ 22MHz channel bandwidth Output power level can be selected according to the environment RFC 2364, RFC 2684 (RFC 1483) Bridge; RFC 2684 (RFC 1483) Route; RFC 2516; RFC 1577 VCs 16 AAL type AAL5 ATM service class UBR/CBR/VBR ATM UNI support UNI3.1/4.0 OAM F4/F5 Yes TR-069/TR-098/TR-104/TR-111, SNMP, Telnet, Web-based management, Configuration backup and restoration Software upgrade via HTTP, TFTP client and server, or FTP server. Transparent bridging and learning IGMP Proxy IGMP Snooping IEEE 802.1d Yes Yes

ATM Attributes

Management

Bridge Functions

Routing Functions
Static route, RIP, and RIP v1,v2, NAT/PAT, DHCP Client/Server/Relay, DNS, ARP

Security Functions

Authentication protocols PAP, CHAP VPN PPTP/L2TP/IpSec pass-through Stateful Packet Inspection, Packet filtering, Denial Of Service protection, Traffic Conditioning, WFQ-based Bandwidth Management, HTTP proxy L3 policy-based QoS, IP QoS , ToS SIP MGCP Codec RTP SDP Caller ID Life line/Emergency call Echo cancellation Silence suppression RFC 3261 RFC 3435 G.711, G.723.1, G.726, G.729ab RFC 1889 RFC 2327 ETSI based Yes G.168 Yes 100-240Vac, 15VDC /1.6A

Voice Functions

Power Supply
External power adapter Operating temperature Relative humidity
Environmental Conditions Dimensions

1.05 KG

0 ~ 50 degrees Celsius 5 ~ 95% (non-condensing)
205 mm (W) x 48 mm (H) x 145 mm (D)
Kit Weight (1*CT-6373/E, 1* RJ-11 cable, 1* RJ-45 cable, 1* USB cable, 1* Power Adapter, 1* CD-ROM)
Specifications are subject to change without notice.
Taiwan: 3F-1, No.10, Lane 609, Chung Hsin Road Section 5, San Chung, Taipei, Taiwan 24159 Tel: 886-2-2999-8261 Fax: 886-2-2999-8497 China: NO.88 East QianJin Road,Kunshan City,JiangSu,China Tel: 86-512-57383156, 86-512-57383157, 86-512-57384515 Fax: 86-512-57383155 Spain: Edif. Amrica II C/Prcion,7 portal 3 bajo H 28023 Madrid, Spain Tel: 34-917990403 Fax: 34-913510999 UK: 566 Chiswick High Road Building 3, Chiswick Park Chiswick London, W4 5YA UK Tel: 44-0-8453701031 Fax: 44-0-8453701032 France: 87, Rue du Gouverneur Gnral Flix Ebou 92130 Issy-les-Moulineaux, France Tel: 33-1-70715700 Fax: 33-1-70715701 USA & Canada: 15375 Barranca Parkway, Suite C-104 Irvine, CA 92618, USA Tel: 1-949-7539640 Fax: 1-949-7539020 Brazil: Al. Campinas, 977 - 7. Floor - Room 71 / 72 - Jardins Zip Code: 01404-001 - So Paulo - SP - Brazil Tel: 11 3052-2295 Fax: 11 3052-2295
Global contact: sales@comtrend.com Website: www.comtrend.com
Czech Republic: TOKOVO Jankovcova 1518/2, 170 00, Prague 7, Czech Republic Tel: 420-266-782040 Fax: 420-266-782990
DS_CT6373/CT6373E_R1.2_042208

CT-6373 Wireless Multi-DSL IAD Users Manual
Version A1.0, April 14, 2007

261082-001

Warning Before servicing or disassembling this equipment, always disconnect all power and telephone lines from the device. Use an appropriate power supply and a UL Listed telephone line cord. Specification of the power supply is clearly stated in Appendix D Specifications.
Preface This manual provides information to network administrators. It covers the installation, operation and applications of the Wireless Multi DSL Router.
The reader reading this manual is presumed to have a basic understanding of telecommunications. For product update, new product release, manual revision, software upgrade, technical support, etc., visit Comtrend Corporation at http://www.comtrend.com This document is subject to change without notice.
Recycling For The Environment Never throw your electronic equipment out with household waste. Ask for information from your town council on how to correctly dispose of it, so that it does not damage the environment. Always respect the current legislation regarding waste disposal. Persons who do not comply are subject to the sanctions and penalties set down in law. The cardboard box, the plastic contained in the packaging, and the parts that make up the device can be recycled in accordance with regionally established regulations. The symbol of the container with the cross, which is found on the device means that when the equipment has reached the end of its working life, it must be taken to the recycling centres provided, and that its processing must be separate from that of domestic waste.
Copyright Copyright 2007 Comtrend Corporation. All rights reserved. The information and No part of
messages contained herein are proprietary to Comtrend Corporation. means without prior written permission by Comtrend Corporation.
this document may be translated, transcribed, reproduced, in any form, or by any
Technical support When you find the product out of service, or that it doesnt work properly, please contact technical support engineer for immediate servicing or email to INT-support@comtrend.com
Table of Contents CHAPTER 1 1.1 1.2 1.3 1.4 INTRODUCTION....6
FEATURES.....6 APPLICATION.....7 FRONT PANEL LED INDICATORS...8 SIDE PANEL....10 INSTALLATION.... 11

CHAPTER 2 2.1 2.2

HARDWARE INSTALLATION.... 11 INSTALLING THE USB DEVICE DRIVER...13 LOGIN VIA THE WEB BROWSER...18

CHAPTER 3 3.1 3.2 3.3

IP ADDRESS.....18 LOGIN PROCEDURE.....19 DEFAULT SETTINGS.....20 QUICK SETUP....21

CHAPTER 4 4.1 4.2

WAN.....22 STATISTICS....23 LAN Statistics....24 WAN Statistics.....25 ATM statistics.....26 ADSL Statistics....28 VDSL Statistics....31 Route....33 ARP....34 DHCP.....35 QUICK SETUP....36
4.2.1 4.2.2 4.2.3 4.2.4 4.2.5 4.2.6 4.2.7 4.2.8 CHAPTER 5 5.1 5.2
AUTO QUICK SETUP....37 MANUAL QUICK SETUP....38 PPP over ATM (PPPoA) and PPP over Ethernet (PPPoE)..40 MAC Encapsulation Routing (MER)...45 IP Over ATM....50 Bridging....54 ADVANCED SETUP...56

5.2.1 5.2.2 5.2.3 5.2.4 CHAPTER 6 6.1 6.2

WAN.....58 LAN.....59

NAT.....61 Virtual Servers....61 Port Triggering....63 DMZ Host....65 IP Filtering....66 Parental Control....69 MAC Filtering....70
6.3.1 6.3.2 6.3.3 6.4 6.4.1 6.4.2 6.4.3 6.5 6.6

SECURITY.....66

QUALITY OF SERVICE....72 ROUTING....77 Default Gateway....77 Static Route....78 RIP.....79 DNS Server....80 Dynamic DNS.....81
6.6.1 6.6.2 6.6.3 6.7 6.7.1 6.7.2 6.8 6.9 6.10 6.11

DNS.....80

DSL.....83 PRINT SERVER....85 PORT MAPPING....86 CERTIFICATE....89 Local....90 Trusted CA.....92 WIRELESS....93
6.11.1 6.11.2 CHAPTER 7 7.1
WIRELESS BASIC SCREEN....93 Security.....95 MAC Filter.....99 Wireless Bridge....101 Advanced.....102 Quality of Service....106 Station Info....107
7.1.1 7.1.2 7.1.3 7.1.4 7.1.5 7.1.6
CHAPTER 8 VOICE....108 8.1 SIP.....109 8.1.1 Making Telephone Calls.... 112 DIAGNOSTICS.... 115 MANAGEMENT... 117
CHAPTER 9 CHAPTER 10 10.1

SETTINGS.... 117 4

10.1.1 10.1.2 10.1.3 10.2 10.3 10.4 10.5
Configuration Backup.... 118 Tools Update Settings... 119 Restore Default....120
SYSTEM LOG....122 TR-069 CLIENT....125 INTERNET TIME....127 ACCESS CONTROL.....128 Services....129 Access IP Addresses....130 Passwords....131
10.5.1 10.5.2 10.5.3 10.6 10.7
UPDATE SOFTWARE....132 SAVE AND REBOOT....133
APPENDIX A: PRINTER SERVER CONFIGURATION...134 APPENDIX B: FIREWALL....140 APPENDIX C: PIN ASSIGNMENTS....146 APPENDIX D: SPECIFICATIONS...147 APPENDIX E: SSH CLIENT...150

Chapter 1 Introduction

The CT-6373 integrates ADSL2+, VDSL2, WLAN and VoIP in one unit, which supports triple play service and supplies predictable, real-time, toll-quality voice over the Internet. The CT-6373 contains an ADSL2+ interface, VDSL2 interface, two FXS ports for VoIP service, one FXO port for PSTN service, one 802.11b/g WLAN port, one USB 1.1 device, one USB 2.0 host and four Ethernet ports for Broadband service.

Features
Multi-DSL VoIP and Router Integrated Automatically switches to ADSL2+ or VDSL2 according to the port setting of DSLAM Integrated 802.11g AP (backward compatible with 802.11b) Supports life line: PSTN alive when power off Supports fast emergency call Supports Quality of Service (QoS) for voice Supports caller ID presentation and restriction Supports call hold Supports call waiting Supports call forwarding Supports call transfer Supports 3-way conference Supports Direct number dialing Remote administration and automatic remote firmware upgrade and configuration Supports VPN Pass-Through Supports Day-time parental control

Application

The following diagram depicts the application of the CT-6373.
Front Panel LED Indicators
The front panel LEDs are shown in the picture below, followed by an explanation in the table below.
Color Mode Green On Off Orange Green On On Off Green established.
Description The Router is powered up and ADSL or VDSL link is
The Router is powered down. Powered up but The ADSL/VDSL link is terminated. A USB device is connected. A USB device is not connected.
Blink Data transmitting or receiving over USB. Off An FXS port is on hook. An FXS port is off hook. An FXS port is on hook. An FXS port is off hook. An Ethernet Link is established. An Ethernet Link is not established. Data transmitting or receiving over LAN.

On Off

Green Green

On On Off Blink Off

LAN 4x~1x
An FXO port is on hook. An FXO port is off hook. The wireless module is ready. The wireless module is not installed.

On On Off

WIRELESS Green
Blink Data transmitting or receiving over wireless.
Green ADSL Green Green VDSL Green
The ADSL link is established. The ADSL link is not established.
Blink The ADSL link is training. On Off The VDSL link is established. The VDSL link is not established.
Blink The VDSL link is training.

Side panel

The side panel with the power Jack is shown in the picture below.

Power Jack

Chapter 2 Installation

Hardware Installation

In the rear panel, there is a reset button. To load the factory default settings, hold the reset button down for at least 5 seconds. Host

Reset button

Follow the instructions below to complete the hardware connections.
Connection to LINE port If you wish to connect both the Router and a telephone, connect the LINE port to a POTS splitter with a RJ11 connection cable. Connection to LAN port To connect to a hub or PC, use a RJ45 cable. You can connect the Router to up to four LAN devices. The ports are auto-sensing MDI/X and either straight-through cable or crossover cable can be used. Connection to USB device port Connect the USB device port to a PC with a standard USB cable. Connection to USB host port The CT-6373 is equipped with one high-speed USB2.0 host connection. With software support, users can connect USB devices such as printers and a hard disc to the CT-6373. For this software release, printer server is supported. 11

Connection to Power Connect the Power jack to the shipped power cord. the wall outlet or other AC source. After all connections have been made, press the power-switch in to turn the device on. After power on, the Router performs a self-test. Wait for a few seconds until the test is finished, then the Router will be ready to operate. Attach the power adapter to
Caution 1: If the Router fails to power up, or it malfunctions, first verify that the power supply is connected correctly. Then power it on again. If the problem persists, contact our technical support engineers. Caution 2: Before servicing or disassembling this equipment, always disconnect all power cords and telephone lines from the wall outlet.
Installing the USB Device Driver
Before you connect your Routers USB cable to your PC, you must load the ADSL USB drivers. The USB driver supports Windows 98, ME, 2000, XP and Vista.
To connect the Router to a PC using the USB interface, you need to use a standard USB cable and install the USB interface software. Follow the steps below:
STEP 1: Connect the USB Router to the PC by plugging the flat connector of a standard USB cable into your PC, and plugging the square connector into the Router. The screen will display as below:
STEP 2: When the screen displays as below, click the Next button.
Note: This screen wont be displayed if the USB Driver has been previously un/installed.
STEP 3: When the screen displays as below, select Search for a suitable driver and click the Next button.
STEP 4: Select Specify a location and click the Next button. If you are installing the software from a disk, insert the disk.
STEP 5: Select the location of the file using the Browse button. Normally, the file is on the CD-ROM shipped with the device.
STEP 6: Locate the file, and click the Open button.
STEP 7: When the screen displays as below, click the OK button.
STEP 8: When the screen below displays, click the NEXT button.
STEP 9: Click the Finish button, when the screen displays as below. 16
STEP 10: Installation is complete.
Chapter 3 Login via the Web Browser
This section describes how to manage the Router via a Web browser via the remote end. You can use a web browser such as Microsoft Internet Explorer, or Netscape Navigator. (Web page is best viewed with Microsoft Internet Explorer 5.5 and later) A unique default user account is assigned with user name root and password 12345. The user can change the default password later when logged in to the device.

The Quick Setup allows the user to configure the Multi-DSL Router for DSL connectivity and Internet access. It also guides the user though the WAN network You can either manually customize setup first and then the LAN interface setup.
the Router or follow the online instruction to set up the Router. The CT-6373 Multi-DSL Router supports the following five network operating modes over an ATM PVC WAN interface. PPP over Ethernet (PPPoE) PPP over ATM (PPPoA) MAC Encapsulated Routing (MER) IP over ATM (IPoA) Bridging The following configuration considerations apply: The WAN network operating mode operation depends on the service providers configuration on the Central Office side and Broadband Access Server for the PVC If the service provider provides PPPoE service, then the connection selection depends on whether the LAN-side device (typically a PC) is running a PPPoE client or whether the CT-6373 is to run the PPPoE client. support both cases simultaneously. If every LAN-side device is running a PPPoE client, then select Bridge in PPPoE mode. CT-6373 also supports pass-through PPPoE sessions from the LAN side while simultaneously running a PPPoE client for non-PPPoE LAN devices. NAT and firewall are always enabled when PPPoE mode is selected, but they can be enabled or disabled by the user when MER or IPoA is selected, NAT and firewall are always disabled when Bridge mode is selected. Depending on the network operating mode, and whether NAT and firewall are enabled or disabled, the main panel will display or hide the NAT/Firewall menu. For instance, at initial setup, the default network operating mode is Bridge. The main panel will not show the NAT and Firewall menu. Note: Up to eight PVC profiles can be configured and saved on the flash memory. To activate a particular PVC profile, you need to navigate all the Quick Setup pages until the last summary page, then click on the Finish button and reboot the system. 36 The CT-6373 can

Auto Quick Setup

The Multi-DSL Router will You only need to follow the online instructions that
The auto quick setup requires the DSL link to be up. automatically detect the PVC. you are prompted with.
1. Select Quick Setup to display the DSL Quick Setup screen.
2. Click Next to start the setup process. Follow the online instructions to complete the setting. This procedure will skip some processes like PVC index, or encapsulation. 3. After the settings are complete, you can use the ADSL service.

4. Click Next to display the following screen.
Enable NAT checkbox: If the LAN is configured with a private IP address, the user should select this checkbox. The NAT submenu on the left side main panel will be displayed after reboot. The user can then configure NAT-related features after the system comes up. If a private IP address is not used on the LAN side, this checkbox should be de-selected to free up system resources for better performance. left main panel. Enable Firewall checkbox: If the firewall checkbox is selected, the firewall submenu on the left side main panel will be displayed after system reboot. user can then configure firewall features after the system comes up. performance. The If firewall is When the system comes back after reboot, the NAT submenu will not be displayed on the
not used, this checkbox should be de-selected to free up system resources for better When system comes back after reboot, the Firewall submenu will not be displayed on the left main panel. Enable IGMP Multicast: Tick the checkbox to enable IGMP multicast (proxy). IGMP (Internet Group Membership Protocol) is a protocol used by IP hosts to report their multicast group memberships to any immediately neighboring multicast Routers. Enable WAN Service: Tick the checkbox to enable the WAN (ADSL) service. setting for Mer is enable. Service Name: This is User-defined. If
this item is not selected, you will not be able to use the ADSL service. The default
5. Upon completion, click Next.
The following screen appears.
The Device Setup page allows the user to configure the LAN interface IP address and DHCP server. If the user would like this Multi-DSL Router to assign dynamic IP addresses, DNS server and default gateway to other LAN devices, select the radio box Enable DHCP server on the LAN to enter the starting IP address and end IP address and DHCP lease time. PCs. This configures the Router to automatically assign IP addresses, default gateway address and DNS server addresses to each of your
Note that the Routers default IP address is 192.168.1.1 and the default private address range provided by the DHCP server in the Router is 192.168.1.2 through 192.168.1.254.
Select Enable DHCP Server Relay (if required), and enter the DHCP Server IP Address. This allows the Router to relay the DHCP packets to the remote DHCP server. The remote DHCP server will provide the IP address. To configure a secondary IP address for the LAN port, click the box as shown below.
After entering your settings, select Next to display the following screen.
6. The following screen will be displayed. To enable the wireless function, select the box (by clicking on it) and input the SSID. Then, click Next.
The following screen will be displayed.

This screenshot is for Mer and IPoA encapsulations.
This screenshot is for PPPoE and PPPoA encapsulations.
This screenshot is for Bridged encapsulation.

VlanID

This function means one can add an 802.1Q VLAN tag on PPPoE/MER or Bridge mode.
It means the packets are sent to WAN and a specific VlanID (802.1Q tag) will be added in the Ethernet header. The VlanID shows which 802.1Q tag will be added. For further information on WAN, please reference section: 4.1, Page 22.
Configure the Multi-DSL Router IP Address and Subnet Mask for LAN interface. Save button only saves the LAN configuration data. Save/Reboot button saves the LAN configuration data and reboots the Router to make the new configuration effective. IP Address: Enter the IP address for the LAN port. Subnet Mask: Enter the subnet mask for the LAN port.
Enable IGMP Snooping: Enable IGMP Snooping function by ticking the box.
Standard Mode: In standard mode, as in all prior releases, multicast traffic will flood to all bridge ports when there is no client subscribes to any multicast group even when IGMP snooping is enabled.
Blocking Mode: In blocking mode, the multicast data traffic will be blocked and not flood to all bridge ports when there is no client subscription to any multicast group.
IP Address: Enter the secondary IP address for the LAN port. Subnet Mask: Enter the secondary subnet mask for the LAN port.
To display the NAT function, you need to enable the NAT feature in the WAN Setup.

Virtual Servers

Virtual Server allows you to direct incoming traffic from WAN side (identified by Protocol and External port) to the Internal server with private IP address on the LAN side. The Internal port is required only if the external port needs to be converted to a different port number used by the server on the LAN side. A maximum 32 entries can be configured.
To add a Virtual Server, simply click the Add button. The following will be displayed.
Select a Service Or Custom Server Server IP Address External Port Start
User should select the service from the list. Or User can enter the name of their choice. Enter the IP address for the server. Enter the starting external port number (when you select Custom Server). When a service is selected the port ranges are automatically configured.

External Port End

Enter the ending external port number (when you select Custom Server). When a service is selected the port ranges are automatically configured.
Protocol Internal Port Start

SET-2 802.1p Priority Select between 0-7. The lower the digit shows the higher the priority
If the Enable Differentiated Service Configuration box is ticked (i.e. selected) the following screen will be displayed:
The additional Items are explained here. Assign Differentiated Services Code Point (DSCP) Mark Source MAC Address The selected Code Point gives the corresponding priority to the packets that satisfies the rules set below.
A packet belongs to SET-1, if a binary-AND of its source MAC address with the Source MAC Mask is equal to the binary-AND of the Source MAC Mask and this field.
Source MAC Mask Destination MAC Address
This is the mask used to decide how many bits are checked in Source MAC Address. A packet belongs to SET-1 then the result that the Destination MAC Address of its header binary-AND to the Destination MAC Mask must equal to the result that this field binary-AND to the Destination MAC Mask.

Destination MAC Mask

This is the mask used to decide how many bits are checked in Destination MAC Address.

Routing

The Routing dialog box allows you to configure Default gateway, Static Route and

Default Gateway

If Enable Automatic Assigned Default Gateway checkbox is selected, this Router will accept the first received default gateway assignment from one of the PPPoA, PPPoE or MER/DHCP enabled PVC(s). If the checkbox is not selected, enter the static default gateway AND/OR a WAN interface. Click 'Save/Apply' button to save it. NOTE: If changing the Automatic Assigned Default Gateway from unselected to selected, You must reboot the Router to get the automatic assigned default gateway.

Static Route

Choose Static Route to display the Static Route screen. The Static Route screen lists the configured static routes, and allows configuring static routes. Choose Add or Remove to configure the static routes.
To add static route, click the Add button to display the following screen. Enter the destination network address, subnet mask, gateway AND/OR available WAN interface then click Save/Apply to add the entry to the routing table.

6.6.3 RIP

To activate RIP for the device, select the 'Enabled' radio button for Global RIP Mode. To configure an individual interface, select the desired RIP version and operation, followed by placing a check in the 'Enabled' checkbox for the interface. Click the 'Save/Apply' button to save the configuration, and to start or stop RIP based on the Global RIP mode selected.

Guest SSID

The BSSID is a 48bit identity used to identify a particular BSS (Basic Service Set) within an area. In Infrastructure BSS networks, the BSSID is the MAC (Medium Access Control) address of the AP (Access Point) and in Independent BSS or ad hoc networks, the BSSID is generated randomly.
Security options include authentication and encryption services based on the wired equivalent privacy (WEP) algorithm. WEP is a set of security services used to When data encryption is enabled, protect 802.11 networks from unauthorized access, such as eavesdropping; in this case, the capture of wireless network traffic. secret shared encryption keys are generated and used by the source station and the destination station to alter frame bits, thus avoiding disclosure to eavesdroppers. 802.11 supports two subtypes of network authentication services: open system and shared key. Under open system authentication, any wireless station can request The system that needs to authenticate with another wireless The receiving station then sends back a frame that indicates authentication. sending station.
station sends an authentication management frame that contains the identity of the whether it recognizes the identity of the sending station. Under shared key authentication, each wireless station is assumed to have received a secret shared key over a secure channel that is independent from 802.11 wireless network communications channel. The following screen appears when Security is selected. The Security page allows you to configure security features of the wireless LAN interface. You can set the network authentication method, selecting data encryption, specify whether a network key is required to authenticate to this wireless network and specify the encryption strength. Click Apply to configure the wireless security options.

Option Select SSID

Description Sets the wireless network name. Identifier. SSID stands for Service Set All stations must be configured with the correct SSID to
access the WLAN. If the SSID does not match, that user will not be granted access. The naming conventions are: Minimum is one character and maximum number of characters: 32 bytes.

Network

It specifies the network authentication. the wireless network.

When this checkbox is

Use SIP proxy

Register Expire Time
The time period until user would like its registration to be valid with the Registrar/Proxy Server. The default value is 300 seconds.
SIP domain name* Use SIP outbound proxy Enable SIP tag matching (Uncheck for Vonage Interop). Remote server for SIP log messages
Provided by your VoIP service provider. Click if required by your VoIP service provider. Enable or disable log the SIP message to remote server. The string for called partys telephone to display the caller name. Endpoint telephone number. As the modem has two FXS, you can enter two telephone numbers for VoIP phone.
DispName VoIP Phone Number

Auth. ID

The authentication user name for the Registrar/proxy, which is assigned by the service provider.

Auth. Password

The authentication password for the Registrar/proxy, which is assigned by the service provider.

PSTN route rule

If PSTN route rule is auto , when a PSTN call coming will ring the idle phone(phone1 idle ring phone1,phone1 busy ring phone2) If PSTN route rule is fix, when a PSTN call coming will ring the phone that the user selects from PSTN route data (phone1, phone2 or both)
Emergency calls Number 1 & 2
Emergency phone numbers. Note that you need to change these numbers to correspond with the emergency numbers that are used in your country.
FAX mode: Max Digits RFC2833 Outband DTMF
Use G711u (Pass-through) or T.38 when sending a fax. Setup the maximum number of digits for the phone number. Enable the special use of RTP packets to transmit digit events. Payload types are defined in RFC 2833, RTP Payload for DTMF Digits, Telephony Tones and Telephony Signals. A payload
RTP Payload Type for RFC2833
type is a number from 96 to 127 that identifies the type of payload carried in the packet. The payload type should be identical on the GW and call agent.

Making Telephone Calls

To make a call, simply dial the number. The dial plan (i.e. the dialed digits) is normally customized for each installation. The default dial plan delivered by Comtrend allows dialing of 4-digit extensions or direct IP addresses. Shorter extension numbers (e.g. 3-digits) can be dialed by completing the dial string with a final #. When a Call Server (SIP Proxy Server) is configured into the system, the dialed digits are translated and routed by the Call Server to the correct destination as registered with the Call Server. If no Call Server is configured, calls can still be made using 4-digit extensions, rather than using full IP addresses. The originator translates the dialed-digits to a destination device as follows: First digit: line identifier (for multi-line gateways) Remaining digits: Host number part of an IP address. The Network number part is considered to be the same as the callers IP address. For example, if a caller at address 10.136.64.33/24 dials 2023, the call will be placed to the second line at address 10.136.64.23. All devices have to be on the same Class C subnet (24 bit subnet mask). To dial an IP address directly, dial the IP address digits, using keypad * as the dot. Complete the address with a final * or #. When using IP address dialing it is not possible to specify which line at a gateway is called, so the gateway always routes IP-address dialed calls to the first line. Network busy tone (fast busy) will be played for unknown or unreachable destinations. To answer calls, simply pick up the phone or press the handsfree button.

Caller ID The Call Manager delivers Calling Number when placing calls. The calling number is transmitted to the analog line for CLASS recognition. Call Hold To put a call on hold, press flash then hang up (optional). To return to the original call, press flash or pick up the phone. The phone will issue a short ring burst every 30 seconds or so while on-hook to remind you that a call is on hold. Call Transfer To transfer a call, press flash then dial the new number. To transfer immediately, hang up (blind transfer). To transfer with consultation, wait for the party to answer, consult, and then hang up. To abort the transfer (if the third party does not answer), press flash to return to the original call. Conference Calling To turn a two-party call into a three-party conference call, press flash and dial the third party. Wait for the party to answer, then press flash. To drop the third party and return to a two-party call, press flash again. To drop yourself out of the conference, hang up. The call will be transferred (so that the other two parties remain connected to each other). In conference mode, the conference initiator performs the audio bridge/mixing function there are only 2 voice streams established. Call Waiting If call waiting is enabled on a line (see feature codes), and you hear the call waiting tone during a call, press flash to answer the second call. The first call is automatically placed on hold. To switch between calls, press flash again. To disable the call waiting feature, dial *60. To enable the call waiting feature, dial *61. Call forward feature settings (Busy or All) takes priority over the call waiting feature. Call waiting feature is ignored on new incoming calls if there is already a call on hold or in conference.
Call Forward Number To set the call forward number, dial *74 then the number. Note that this does not actually enable forwarding; to do so, select the call forward action as described below. To disable all call forwarding features, dial *70 Call Forward No Answer To enable call forward on no answer, dial *71. Incoming calls will be forwarded if unanswered for 10 seconds. Call Forward Busy To enable call forward if busy, dial *72. Incoming calls will be immediately forwarded if the phone is off-hook. Call Forward All To enable call forward for all calls, dial *73. To disable the forward all calls feature, dial *75. Previous settings for Call Forward Busy or No Answer are not modified. Call Return To place a call to the last known incoming caller (unanswered or not), dial *69. Redial To redial the last outgoing number, dial *68.

Chapter 9 Diagnostics

The Diagnostics menu provides feedback on the connection status of the CT-6373 and the ADSL link. The individual tests are listed below. If a test displays a fail status, click Rerun Diagnostic Tests at the bottom of this page to make sure the fail status is consistent. If the test continues to fail, click Help and follow the troubleshooting procedures.

Examples: 1. Filter Name Protocol Source Address Source Subnet Mask Source Port Dest. Address Dest. Sub. Mask Dest. Port : Out_Filter1 : TCP : 192.168.1.45 : 255.255.255.0 : 80 :NA : NA : NA
This filter will Drop all TCP packets coming from LAN with IP Address/Sub. Mask 192.168.1.45/24 having a source port of 80 irrespective of the destination. All other packets will be Accepted. 2. Filter Name Protocol Source Address Source Subnet Mask Source Port Dest. Address Dest. Sub. Mask Dest. Port : Out_Filter2 : UDP : 192.168.1.45 : 255.255.255.0 : 5060:6060 :172.16.13.4 : 255.255.255.0 : 6060:7070
This filter will drop all UDP packets coming from LAN with IP Address/Sub.Mask 192.168.1.45/24 and a source port in the range of 5060 to 6060, destined to 172.16.13.4/24 and a destination port in the range of 6060 to 7070 Incoming IP Filtering: Helps in setting rules to ACCEPT packets from the WAN interface. By default all incoming IP traffic from WAN is Blocked, if the Firewall is Enabled. By setting up one or more filters, particular packet types coming from the WAN can be Accepted.
Filter Name: User defined Filter Name.
Protocol: Can take on any values from: TCP/UDP, TCP, UDP or ICMP Source IP Address/Source Subnet Mask: Packets with the particular "Source IP Address/Source Subnet Mask" combination will be accepted. Source Port: This can take on either a single port number or a range of port numbers. Packets having a source port equal to this value or falling within the range of port numbers(portX : portY) will be accepted. Destination IP Address/Destination Subnet Mask: Packets with the particular "Destination IP Address/Destination Subnet Mask" combination will be accepted. Destination Port: This can take on either a single port number or a range of port numbers. Packets having a destination port equal to this value or falling within the range of port numbers(portX : portY) will be accepted. The WAN interface on which these rules apply needs to be selected by the user. Examples: 1. Filter Name Protocol Source Address Source Subnet Mask Source Port Dest. Address Dest. Sub. Mask Dest. Port : In_Filter1 : TCP : 210.168.219.45 : 255.255.0.0 : 80 :NA : NA : NA

Selected WAN interface: mer_0_35/nas_0_35 This filter will ACCEPT all TCP packets coming from WAN interface mer_0_35/nas_0_35 with IP Address/Sub. Mask 210.168.219.45/16 having a source port of 80 irrespective of the destination. All other incoming packets on this interface are DROPPED.
Filter Name Protocol Source Address Source Subnet Mask Source Port Dest. Address Dest. Sub. Mask Dest. Port
: In_Filter2 : UDP : 210.168.219.45 : 255.255.0.0 : 5060:6060 :192.168.1.45 : 255.255.255.0 : 6060:7070
This rule will ACCEPT all UDP packets coming from WAN interface mer_0_35/nas_0_35 with IP Address/Sub.Mask 210.168.219.45/16 and a source port in the range of 5060 to 6060, destined to 192.168.1.45/24 and a destination port in the range of 6060 to 7070. All other incoming packets on this interface are DROPPED.
MAC Layer Filtering: These rules help in the filtering of traffic at the Layer 2. MAC Filtering is only effective on ATM PVCs configured in Bridge mode. After a Bridge mode PVC is created, navigate to Advanced Setup -> Security -> MAC Filtering web page.
Global Policy: When set to Forwarded the default filter behavior is to Forward all MAC layer frames except those explicitly stated in the rules. Setting it to Blocked changes the default filter behavior to Drop all MAC layer frames except those explicitly stated in the rules. To setup a rule: Protocol Type: Can be either PPPoE, IPv4, IPv6, AppleTalk, IPX, NetBEUI, IGMP.
Destination MAC Address: Of the form, XX:XX:XX:XX:XX:XX. Frames with this particular destination address will be Forwarded/Dropped depending on whether the Global Policy is Blocked/Forwarded.
Source MAC Address: Of the form, XX:XX:XX:XX:XX:XX. Frames with this particular source address will be Forwarded/Dropped depending on whether the Global Policy is Blocked/Forwarded.
Frame Direction: LAN <=> WAN --> All Frames coming/going to/from LAN or to/from WAN. WAN => LAN --> All Frames coming from WAN destined to LAN. LAN => WAN --> All Frames coming from LAN destined to WAN User needs to select the interface on which this rule is applied.
Examples: 1. Global Policy: Forwarded Protocol Type: PPPoE Dest. MAC Addr: 00:12:34:56:78:90 Source MAC Addr: NA Frame Direction: LAN => WAN WAN Interface Selected: br_0_34/nas_0_34 Addition of this rule drops all PPPoE frames going from LAN-side to WAN-side with a Dest. MAC Addr. of 00:12:34:56:78:90 irrespective of its Source MAC Addr. on the br_0_34 WAN interface. All other frames on this interface are forwarded.
2. Global Policy: Blocked Protocol Type: PPPoE Dest. MAC Addr: 00:12:34:56:78:90 Source MAC Addr: 00:34:12:78:90:56 Frame Direction: WAN => LAN WAN Interface Selected: br_0_34/nas_0_34