Users Manual: Callisto 821 Annex A

Table of Contents

Chapter 1 Getting Started
I. II. III. IV. Overview Features Packaging Appearance Front Panel Rear Panel Hardware Installation Management Default Values Software Upgrade 11 12

Callisto 821

Annex A ADSL Bridge Simple Router

V. VI. VII. VIII.

Chapter 2 Web Interface M anagement
I. II. III. Overview Preparation Login A. Home B. LAN C. WAN D. Bridging E. Routing F. Services G. Admin 29 39
Chapter 3 Quick Protocol Setup
Overview A. RFC 1483 Bridge B. PPPoE Route Configuration C. RFC 1483 + NAT D. PPPoA Route Configuration E. IPoA Route Configuration F. DHCP Configuration G. NAT Configuration

Iskratel, Ltd.

Copyright 20.5.2003 All rights reserved.

1 / 66

2 / 66
Appendix A Specifications
A1. Hardware Specifications A2. Software Specifications 62 63

I. Overview

SI2000 Callisto821 Annex A is multi-mode ADSL Router, compliant with ANSIT1.413 Issue 2, ITU G.992.1 (G.dmt) Annex A, G.992.2 (G.lite). SI2000 Callisto821 Annex A provides high-speed Internet access via one WAN port over ATM over ADSL, and also connects to a corporate network via one 10/100BaseT Ethernet port. SI2000 Callisto821 Annex A allows the service provider to deploy ADSL rapidly over existing wire infrastructure (POTS).

Appendix B Regulations

C1. R&TTE Declaration of Conformity C2. FCC Part 15 Notice C3. IC CS-03 Notice 66

3 / 66

4 / 66

II. Features

High Speed Asymmetrical Data Transmission on a Single Twisted Copper Pair Full rate operations up to 8Mbps downstream and up to 1Mbps upstream. G.lite operation up to 1.5Mbps downstream and 512Kbps upstream. One 10/100BaseT Ethernet port for PC connection DHCP server support for easy LAN IP address management Supports PPPoE (RFC2516), PPP (RFC2364), and IP (RFC 2225/RFC1577) over ATM over ADSL RFC2684 (RFC1483) Bridged/Routed for both LLC/VC MUX Allows LAN users to access the Internet through Network Address Translation (NAT, IP sharing) simultaneously Local OAM&P through command line interface via RJ-45 Ethernet port or RS-232 Craft port (optional) Configuration and management via local Telnet and Web browser through the Ethernet interface and remotely through ADSL interface Supports applications such as TFTP, DHCP, Telnet, HTTP, and FTP Firmware upgradeable through TFTP Interoperability complies with TR-48, U-R2

Packaging

This package consists of the following items:
SI2000 Callisto821 Annex A ADSL device unit

RJ-45 Cable

2X RJ-11 Cable

AC Adapter

Users Manual CD

5 / 66

6 / 66

Rear Panel

Appearance

Front Panel

Label LED Status ON ON ON Blinking ON Blinking ON
Color Green Green Green Green Green RED RED
Description 100M Ethernet transmitting. 10M Ethernet transmitting. Power supply is connected. Training with DSLAM. ADSL link is ready. Booting up. Error.
Label PWR ETHERNET RESET WAN

100M 10M PWR WAN ALM

Description Power jack; connect to a power adapter. Serial port; connect to an ASCII data terminal. Reset the modem back to factory settings by holding down on this button RJ-11 connect to the ADSL outlet. SI2000 Callisto821 Annex A uses RJ-11 Cable.

7 / 66

8 / 66

Hardware Installation

1. Connect one end of the ADSL cable to the WAN port of SI2000 Callisto821 Annex A and the other end to the ADSL wall outlet. (SI2000 Callisto821 Annex A uses RJ-11 cable) 2. Use a RJ-45 cable to connect one end to the Ethernet port of the SI2000 Callisto821 Annex A, and the other end to the LAN or a PC with an Ethernet adapter installed. 3. Plug in the AC adapter to the AC power socket, and then connect the DC jack to the PWR inlet of the SI2000 Callisto821 Annex A.

Management

SI2000 Callisto821 Annex A supports simple, flexible, and easy-to-operate methods for management purposes. SI2000 Callisto821 Annex A can be managed via the following paths: Local Ethernet Port (Telnet) connect the Ethernet port to your local area network or directly to a PC. Telnet SI2000 Callisto821 Annex A from any workstation in the LAN. The default local Ethernet IP address is 192.168.1.1. Local Ethernet Port (Web Browser) connect the Ethernet port to your local area network or directly to a PC. Launch your web browser and enter default local Ethernet IP address 192.168.1.1 into the address bar. ADSL Port from Remote Site while the ADSL connection is in service, you may remotely Telnet SI2000 Callisto821 Annex A from a workstation connected to the CO equipment.

Power outlet

Computer

ADSL outlet

Note: Be sure to use a RJ-45 crossover cable while connecting to a hub.
Note: As operating an ADSL device requires technical know-how and experience. It is recommended that only qualified technical staffs manage the Callisto821. Therefore, a password authentication is required when you enter the web interface. To obtain the password, see the Default Values section.

9 / 66

10 / 66

Default Values

VIII. Software Upgrade
You may easily upgrade SI2000 Callisto821 Annex A embedded software by obtaining the compressed upgrade kit from the service provider then following the steps: Extract the ZIP file for updated firmware. Connect SI2000 Callisto821 Annex A via the local Ethernet port or remote ADSL link. Make sure that the SI2000 Callisto821 Annex A Ethernet IP address and your terminal are properly configured, then you can successfully ping SI2000 Callisto821 Annex A. The default local IP address is 192.168.1.1. Under DOS prompt, execute the FTP command open <IP address of SI2000 Callisto821 Annex A>, then input user name and password. Execute upload command put tepatch.bin. This upgrading process may last as long as 60 seconds. Then reboot SI2000 Callisto821 Annex A with new software. DHCP Server: Disable DNS Relay: Disable

13 / 66

14 / 66
After logging in, the first tab that will be displayed is the Home tab. Under this tab, the System View page is displayed. This page displays a summary of the interfaces and their settings.
This page is divided into five sections. The table below describes each section. Section Name Device Description Displays model name, hardware/software version, device mode, uptime, current time, time zone, daylight savings time, and domain name. Displays operation status, last state, DSL version, and DSL standard. Displays the WAN interface name, encapsulation type, IP address, subnet mask, lower interface, VPI/VCI values, and operational status. Displays the LAN interface name, MAC address, IP address, subnet mask, lower interface, transmission speed, duplex type and operational status. Displays the interface name, and enabled/disabled features, such as: NAT, IP filter, RIP, DHCP relay, DHCP client, DHCP server, and IGMP.

DSL WAN Interface

LAN Interface

Services Summary

To add, change, or remove any of the interface settings, click on the interface name. Click on the Modify button to set the device date, time, time zone, and other related settings. Click on the Submit button when completed.

15 / 66

16 / 66
Click on the LAN tab to view its sub-menus and configure the LAN settings. The four sub-menus are: LAN Config, DHCP Mode, DHCP Server, and DHCP Relay. Each sub-menu is described below.
DHCP Mode Click on the DHCP Mode link to select a DHCP setting. From the drop down list, select DHCP Server, DHCP Relay, or None. Click on the Submit button when completed.
LAN Config Click on the LAN Config link to change the LAN IP address/ subnet mask, decide where the LAN is getting its IP address from, and enable or disable IGMP. Follow the steps below in order to set up the LAN. I. Get LAN Address: Select Manual if you would like to enter your own IP address. Select External DHCP Server if a DHCP server other than this device assigns the IP addresses. Select Internal DHCP Server if you would like this device to assign the IP addresses. LAN IP Address: Enter the LAN IP address into these text boxes. LAN Network Mask: Enter the subnet mask of the LAN IP address into these text boxes. IGMP: Depending on your ISPs settings, choose to enable or disable IGMP. Click on the Submit button when completed. 3. DHCP Server Click on the DHCP Server link to view the DHCP Server settings. The table displays the DHCP server settings, this includes: start IP, end IP, domain name, gateway address, and status. Click on the Add button to enable a DHCP server and fill in the IP information based on your ISP settings.

II. III.

17 / 66

18 / 66

DHCP Relay Click on the DHCP Relay link to view the DHCP Relay settings. Fill in the DHCP server IP address in the text boxes and select an interface name from the dorp down list, then click on the Add button to complete the DHCP Relay configuration.
Click on the WAN tab to view its sub-menus and configure the WAN settings. The five sub-menus are: DSL, ATM VC, PPP, EOA, and IPOA. Each sub-menu is described below.
a) DSL Parameters Click on the DSL Param button to view the DSL parameters. Another window will then display the DSL parameters, which may be different due to the type and speed of the network. Click on the Close button to close the window, or click on the Refresh button to refresh the status.
DSL Click on the DSL link to view the DSL status. Click on the DSL Param button to view the DSL parameters and the Stats button to view the DSL statistics. Both the DSL Parameters and DSL Statistics are described below. Click on the Clear button to clear and refresh the DSL status. You may also change the page refresh rate by selecting a different time period from the Refresh Rate drop down list.

19 / / 66

b) DSL Stats Click on the Stats button to view the DSL status. Another window will then display the DSL status, which may be different due to the type and speed of the network. Click on the Close button to close the window, or click on the Refresh button to refresh the status.
Click on the Add button to another interface.
After you click on the Add button, another window will pop-up. First select a VC interface from the drop down list. Then enter the VPI, VCI values into the text box. Select a Mux type from the drop down list, and then enter the number of protocols per AAL5 in the text box. Click on the Submit button when completed.
3. 2. ATM VC Click on the ATM VC link to view the ATM VC table. This table displays the interface name, VPI/VCI values, Mux type, and maximum protocols per AAL5. Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon.
Point to Point Protocol (PPP) Click on the PPP link to view the PPP configuration table. This table displays PPP information such as: interface name, interface type, protocol, WAN IP, gateway IP, default route, DHCP, DNS, and operation status. Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon.

21 / 66

22 / 66
The following is a list of field names and their descriptions. After filling in the table click on the Submit button when completed. Field Name PPP Interface ATM VC Interface Sec Type Status Protocol Service Name Use DHCP Use DNS Default Route Security Protocol Login Name Password Description Select an interface name from the drop down list. Select an ATM VC from the drop down list. Select between public, private, or DMZ. Select start, stop, or start on data. Select between PPPoA or PPPoE. Enter a name for this service in the text box. Select between enable or disable. Select between enable or disable. Select between enable or disable. Select between PAP or CHAP. Enter the username for this service. Enter the password for this service.
After you click on the Add button, another window will pop-up.
Ethernet over ATM (EoA) Click on the EOA link to view the RFC1483/EoA configuration table. This table displays EoA information such as: interface name, interface security type, lower interface, config IP, network IP, DHCP, default route, gateway IP, and status. Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon. Click on the Add button to add another interface.

23 / 66

24 / 66
Click on the Add button to add another interface. After you click on the Add button, another window will pop-up.
After you click on the Add button, another window will pop-up. The following is a list of field names and their descriptions. After filling in the table click on the Submit button when completed. Field Name IPoA Interface The following is a list of field names and their descriptions. After filling in the table click on the Submit button when completed. Field Name EoA Interface Interface Sec Type Lower Interface Conf IP Address Netmask Use DHCP Default Route Gateway IP Address 5. Description Select an interface name from the drop down list. Select between public, private, or DMZ. Select a lower interface name from the drop down list. Enter the LAN IP address here. Enter the subnet mask here. Select between enable or disable. Select between enable or disable. Enter the gateway IP address here. Conf IP Address Interface Sec Type Netmask RFC 1577 Use DHCP Default Route Gateway IP Address Description Select an interface name from the drop down list. Enter the LAN IP address here. Select a lower interface name from the drop down list. Enter the subnet mask here. Select between Yes or No to use RFC 1577. Select between enable or disable. Select between enable or disable. Enter the gateway IP address here.

IP over ATM (IPoA) Click on the IPoA link to view the IP over ATM configuration table. This table displays IPoA information such as: interface name, interface security type, lower interface, config IP, network IP, subnet mask gateway IP, and status. Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon.

25 / / 66

Bridging

Routing

Click on the Bridging tab to view its sub-menus and configure the bridge settings. The six sub-menus are: Bridging, LAN Config, DSL, ATM VC, and RFC 1483 Interface (EoA). The bridging sub-menu is described below. (Each of the other sub-menus is described in the earlier sections.)
Click on the Routing tab to view its sub-menus and configure the routing settings. The eight sub-menus are: IP route, IP address, LAN Config, DSL, ATM VC, PPP, EoA, and IPoA. The IP route sub-menu is described below. (Each of the other sub-menus is described in the earlier sections.)
Bridging Click on the Bridging link to view the Bridge configuration. This table displays bridge information such as: interface name. Click on the trash can icon to delete the current interface, or edit the current interface by clicking on the pencil icon. There are three radio buttons on this page. In order to use bridging, you must enable Bridging and WAN to WAN Bridging. Click on the Submit button when completed.
IP Route Click on the IP Route link to view the IP route table. This table displays IP route information such as: destination, net mask, next hop, interface name, route type and route origin. This table lists IP addresses of Internet destinations commonly accessed by your network. When a computer requests to send data to a listed destination, the device uses the Next Hop to identify the first Internet router it should contact to route the data most efficiently. Click on the trash can icon to delete the current destination or click on the Add button to add another destination.

27 / 66

28 / 66
After you click on the Add button, another window will pop-up. a) NAT Global Info The table displays the idle times for several protocols; you may change the times and click on the Submit button.

The following is a list of field names and their descriptions. After filling in the table click on the Submit button when completed. Field Name Destination Netmask Gateway/Next Hop Description Enter the destination IP address of the router. Enter the subnet mask of the IP address. Enter the IP address of the gateway or the next router hop

Services

b) NAT Entry Rule The table displays NAT route configuration. Click on the trash can icon to delete the current rule or click on the Add button to add another rule.
Click on the Services tab to view its sub-menus and configure the service settings. The six sub-menus are: NAT, RIP, Firewall, IP filter, DNS, and Blocked Protocols. Each one is described in detail below.
NAT Click on the NAT link to view the NAT global information table. The table displays the idle times for several protocols; you may change the times and click on the Submit button. The NAT feature offers three sections. First, click on the Enable radio box, to enable the NAT feature. Then select a NAT option from the drop down list. The three options are: NAT Global Info, NAT Rule Entry, and NAT translations. Each one is described below.

29 / 66

30 / 66
The following is a list of field names and their descriptions. After filling in the table click on the Submit button when completed. Field Name Rule Flavor Rule ID IF Name Protocol Local Address From Local Address To Global Address From Global Address To Destination Port From Destination Port To Local Port Description Select a rule from the drop down list. Enter a rule ID into this text box. Select an interface name from the drop down list. Select a protocol from the dorp down list. Enter a local IP address from where NAT will be used. Enter a local IP address to where NAT will be used. Enter an Internet IP address from where NAT will be used. Enter an Internet IP address to where NAT will be used. Select a destination port from the drop down list, or enter it into the text box. Select a destination port from the drop down list, or enter it into the text box. Select a local port from the drop down list, or enter it into the text box.
c) NAT Translations The table displays the current NAT translations, if any exist. Click on the trash can icon to delete a translation or click on the Refresh button to refresh the page.

31 / 66

32 / 66
RIP Click on the RIP link to view the Routing Information Protocol (RIP) Configuration table. Routers on your LAN communicate with one another using the Routing Information Protocol. This table lists any interfaces on your device that use RIP (typically the LAN interface), and the version of the protocol used. In order to add a RIP configuration, follow the steps below: a. First, click on the Enable radio box, to enable the RIP configuration b. Select an interface name from the drop down list. c. Enter the number of router hops into the metric text box d. Select a send mode from the drop down list. e. Select a receive mode from the drop down list. f. Click on the add button Click on the trashcan icon to delete a RIP interface Click on the Global Stats icon to view the NAT statistics. This table will open in a new window.

6. Blocked Protocols Click on the Blocked Protocols link to view the list of protocols. This page is used to block or unblock protocols running across the system. Check the box if you would like the protocol blocked, un-check the box to allow the protocol.
IP Frag Pkt Packet Size TOD Rule Status

37 / 66

38 / 66
Click on the Submit button when completed.
To add a new user click on the Add button, or click on the pencil icon to edit the settings of an existing user.
Click on the Admin tab to view its sub-menus and configure the admin settings. The six sub-menus are: User Config, Commit & Reboot, Image Upgrade, Alarm, Diagnostics, and Port Settings. Each one is described in detail below.
The following information is required in order to create a new user. Click on the Submit button when completed. Field Name User ID Privilege Password Confirm Password Description Enter the username here Select a privilege, root, or user. Enter the password here Re-enter the password here
1. User Config Click on the User Config link to view the list of users. This page displays user information. Use this page to add/delete users and change your password. Your new username and password can be up to 128 characters and is case-sensitive.

39 / 66

40 / 66
2. Commit & Reboot Click on the Commit & Reboot link to view the reboot options. This page is used to save the changes into the devices memory and reboot the device using different options. Click on the Commit button to save the changes. In order to reboot the device, select and option from the drop down list. The six options are: a. Reboot b. Reboot from default configuration c. Reboot from backup configuration d. Reboot from last configuration e. Reboot from clean configuration f. Reboot from minimum configuration Click on the Reboot button after you have made your choice.
3. Image Upgrade Click on the Image Upgrade link to upgrade the software on the modem. You may easily upgrade Callisto821 embedded software by obtaining the compressed upgrade kit from the service provider and then following the steps: a. Click on the Browse button to select the upgrade file (tepatch.bin). b. Click on the Upload button to upload the file into the modem c. This process may last as long as 60 seconds.
Note: The device software may also be upgraded through the DOS prompt. See Chapter 1: VIII Software Upgrade for more details.

41 / 66

42 / 66
4. Alarm Click on the Alarm link to view the list of alarms. The alarms shown in the table have been recorded in response to system events. Click on the Clear button to clear the alarms.
5. Diagnostics Click on the Diagnostics link to test the device. Results will be displayed as pass, fail, or N.A, depending on your settings. Click on the Submit button to begin the diagnostic tests.

6. Port Settings Click on the Port Settings link to change the port settings on the device. Change the settings by entering the new value into the text box and click on the Submit button when completed.

43 / 66

44 / 66

Overview

This chapter provides quick steps on setting up the protocols on this device. From this point on, configuration steps are listed for each of the protocols in their respective sections. The seven sections are: A. B. C. D. E. F. G. RFC 1483 Bridge PPPoE Route Configuration RFC 1483 + NAT PPPoA Route Configuration IPoA Route Configuration DHCP Configuration NAT Configuration

A. RFC 1483 Bridge

Configuration Table: Protocol WAN IP Modem IP Gateway IP VPI/VCI RFC1483 Bridge Mode. The ISP assigns the IP address, or have an IP address assigned from an external/internal DHCP server. 192.168.1.1 None. 1/32
1. Click on the WAN tab to view its sub-menus and configure the WAN settings, then click on the ATM VC link below it.
2. You will then see the ATM VC Configuration table. Click on the Add button to add a new VPI/VCI setting.
Note: The settings/parameters listed in the next few sections only provide an example to setting up the protocols. Contact your ISP for the actual settings 45 / / 66
3. Another window will then appear. Enter the VPI/VCI values (1/32) into the VPI and VCI text boxes. Then click on the Submit button to confirm the changes.
6. Click on the Bridging tab to view its sub-menus and configure the bridging settings, then click on the Bridging link below it.
7. Select EOA-1 from the drop down list, and click on the Add button. Then click on the Submit button to confirm the changes.
4. Click on the EoA link below the WAN tab.
5. Enter the IP address and subnet mask based on your ISP settings. The default gateway is not required in RFC 1483 bridge mode. Then click on the Submit button to confirm the changes.
8. Click on the Admin tab to view its sub-menus and configure the bridging settings, then click on the Commit & Reboot link below it.
9. Select the Reboot from last configuration option from the drop down list, and the click on the Commit and Reboot button.

47 / 66

48 / 66
B. PPPoE Route Configuration
1. Click on the WAN tab to view its sub-menus and configure the WAN settings, then click on the PPP link below it.

C. RFC 1483 + NAT

Configuration Table: Protocol LAN IP Modem IP WAN IP VPI/VC Value RFC1483 Mode + NAT. 192.168.1.xxx or assigned by DHCP server. 192.168.1.1 210.62.8.3 1/32
2. You will then see the PPP Configuration table. Click on the Add button to add a new PPPoE setting.

3. 4. 5. 6. 7. 8. 9.

Select an interface name: PPP-1 Select a protocol: PPPoE Default Route: Disable Security Protocol: Select PAP or CHAP Login Name: Enter username here (from ISP) Password: Enter password here (from ISP) Click on the Submit button to confirm the changes.

49 / 66

50 / 66
7. Click on the Services tab to view its sub-menus and configure the NAT settings, then click on the NAT link below it.
8. Select NAT Entry Rule from the NAT configuration drop down list. Then click on the Add button to add a NAT entry.
5. Enter the IP address and subnet mask based on your ISP settings. 6. Enable DHCP and Default Route and click on the Submit button. 9. Rule Flavor: Select a Rule flavor from the drop down list (Basic) 10. Rule ID: Enter a number here 11. Local Address From: Address from where this device will receive IPs 12. Local Address to: 255.255.255.255 (broadcast) or other 13. Login Name: Enter username here (from ISP) 14. Global Address From: Global Address from where this device will receive IPs 15. Global Address From: Global Address from where this device will send its packets 16. Click on the Submit button to confirm the changes.

51 / 66

52 / 66
D. PPPoA Route Configuration
Configuration Table: Protocol LAN IP Modem IP Gateway IP VPI/VCI Username Password PPPoA Route Mode. 192.168.1.xxx 192.168.1.1 Not required. 1/32 From ISP. From ISP.
4. Click on the PPP link in the Routing tab, and then click on the Add button to add a PPPoA configuration.
1. Click on the Routing tab to view its sub-menus and configure the Routing settings, then click on the ATM VC link below it.
2. You will then see the ATM VC Configuration table. Click on the Add button to add a new VPI/VCI setting. 3. Another window will then appear. Enter the VPI/VCI values (1/32) into the VPI and VCI text boxes. Then click on the Submit button to confirm the changes.

5. 6. 7. 8. 9. 10. 11.

Select an interface name: PPP-1 Select a protocol: PPPoA Default Route: Enable Security Protocol: Select PAP or CHAP Login Name: Enter username here (from ISP) Password: Enter password here (from ISP) Click on the Submit button to confirm the changes.

53 / 66

54 / 66
12. Click on the Admin tab to view its sub-menus and configure the bridging settings, then click on the Commit & Reboot link below it.
E. IPoA Route Configuration
Configuration Table: Protocol LAN IP Modem IP Gateway IP VPI/VCI WAN IP IPoA Route Mode 192.168.1.xxx 192.168.1.1 210.62.8.1 1/32 210.62.8.2
13. Select the Reboot from last configuration option from the drop down list, and the click on the Commit and Reboot button.

55 / 66

56 / 66
4. Click on the IPoA link in the Routing tab, and then click on the Add button to add an IPoA configuration.

F. DHCP Configuration

1. Click on the LAN tab to view its sub-menus and configure the LAN settings, then click on the DHCP Mode link below it.

2. From the drop down list, select DHCP Server, and click on the Submit button.
Select an interface name: IPoA-0 Conf. IP Address: From ISP Net mask: From ISP Gateway IP Address: From ISP Login Name: Enter username here (from ISP) Lower Interface: Select aal5-0 Click on the Submit button to confirm the changes.
3. Click on the DHCP Server link under the LAN tab, and click on the Add button.

57 / 66

58 / 66

4. 5. 6. 7. 8. 9.

Start IP Address: Enter the Start IP Address (192.168.1.2) End IP Address: Enter the End IP Address (192.168.1.13) Net mask: based on IP address (255.255.255.0) Domain Name: Enter a name here Gateway IP Address: Enter a Gateway IP Address here Click on the Submit button to confirm the changes.

G. NAT Configuration

1. Click on the Services tab to view its sub-menus and configure the NAT settings, then click on the NAT link below it.
10. Click on the Admin tab to view its sub-menus and configure the bridging settings, then click on the Commit & Reboot link below it.
2. From the NAT Options drop down list, select NAT Rule Entry.
11. Select the Reboot from last configuration option from the drop down list, and the click on the Commit and Reboot button.
3. Click on the Add button to add a new NAT Rule Entry.

59 / 66

60 / 66
4. Rule Flavor: Select a Rule flavor from the drop down list (Basic) 5. Rule ID: Enter a number here 6. Local Address From: Address from where this device will receive IPs 7. Local Address to: 255.255.255.255 (broadcast) or other 8. Login Name: Enter username here (from ISP) 9. Global Address From: Global Address from where this device will receive IPs 10. Global Address From: Global Address from where this device will send its packets 11. Click on the Submit button to confirm the changes.
A1. Hardware Specifications
Local Interface One port 10/100BaseT Ethernet, IEEE 802.3, RJ-45 connector WAN ADSL Line Interface For POTS line, compliant with ITU G.992.1 (G.dmt) Annex A, ITU G.992.2 (G.lite), and ANSI T1.413 issue 2 Line Impedance: 100 Connection Loop: One Pair (2-wire) Connector: RJ-11 for Annex A Automatic-rate adaptation Indicators 100M Green LED, indicates 100M is transferring data 10M Green LED, indicates 10M is transferring data PWR Green LED, indicates power link status WAN Green LED, indicates ADSL data link status ALM Red LED, indicates data error and operation status OAM&P Remote: Telnet or Web browser Environment Operation Temperature: 0C ~ 45C Operation Humidity: 5% ~ 95% Storage Temperature: -20 ~ +85C Storage Humidity: 5%~95% Power AC Adapter: Input 120 VAC/60Hz or 230VAC/50Hz; Output 15VAC 1A Power Consumption: Less than 10 Watts Physical Dimensions (W x D x H) 180mm x 143mm x 42mm Certificates CE, CB, FCC Part 15 Class B, UL

Warning: Users should not attempt to make such connections themselves, but should contact appropriate electric inspection authority, or electrician, as appropriate.

65 / 66

66 / 66

[Fulldisclosure] CSRF vulnerabilities in ADSL modem Callisto 821+
Source: http://www.derkeiler.com/MailingLists/FullDisclosure/201105/msg00567.html
From: "MustLive" <mustlive@xxxxxxxxxxxxxxxxxx> Date: Tue, 31 May 2011 18:36:31 +0300 Hello list! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ (SI2000 Callisto821+ Router). These are CrossSite Request Forgery vulnerabilities. In April I've already drew attention of Ukrtelecom's representative (and this modem was bough at Ukrtelecom) about multiple vulnerabilities in this model of Callisto modems (and other models also could be affected). SecurityVulns ID: 11700. Affected products: Vulnerable is the next model: SI2000 Callisto821+ Router: X7821 Annex A v1.0.0.0 / Argon 4x1 CSP v1.0 (ISOS 9.0) [4.3.45.1]. This model with other firmware and also other models of Callisto also must be vulnerable. Details: These attacks should be conducted on modem owner, which is logged into control panel. Taking into account that it's unlikely to catch him in this state, then it's possible to use beforementioned vulnerabilities (http://websecurity.com.ua/5161/) for conducting of remote login (for logining him into control panel). After that it's possible to conduct CSRF attack. CSRF (WASC09): This vulnerability allows to open remote (external) access to admin panel. By default access is possible only from local computer (and LAN), but at turning this option on it's possible to enter into admin panel from Internet. At that the time is set on which remote access is opened.
[Fulldisclosure] CSRF vulnerabilities in ADSL modem Callisto 821+ http://websecurity.com.ua/uploads/2011/Callisto%20821+%20CSRF3.html This vulnerability allows to conduct modem restart and reset to factory default settings. http://websecurity.com.ua/uploads/2011/Callisto%20821+%20CSRF4.html Timeline: 2011.04.14 informed Ukrtelecom about multiple vulnerabilities in modems, which they give (sell) to their clients. 2011.05.27 disclosed at my site. 2011.05.27 informed developers (Iskratel). I mentioned about these vulnerabilities at my site (http://websecurity.com.ua/5172/). Best wishes & regards, MustLive Administrator of Websecurity web site http://websecurity.com.ua
_______________________________________________ FullDisclosure We believe in it. Charter: http://lists.grok.org.uk/fulldisclosurecharter.html Hosted and sponsored by Secunia http://secunia.com/