Gigaset SE515 dsl

Wireless ADSL Router 802.11g
Copyright Siemens AG Author:
Dept.: Name: Tel.: ICM CP M VD BDP Mr. Schels +722 58617
CONFIDENTIAL Inspector: Signature:
Dept.: Name: Tel.: ICM CP M VD BDP Mr. Dr. Rotter +722 42315

Signature:

File: Date:

August 19, 2003

Status: File:

Contents

Introduction.... 3 1.1 Definitions of terms and abbreviations.... 3
General description of the product... 4 2.1 The Gigaset SE515 dsl.... 4 2.1.1 Product Features... 4 2.1.1.1 ADSL Compliance.... 4 2.1.1.2 ATM Features.... 4 2.1.1.3 Wireless LAN Compliance... 5 2.1.1.4 Bridging Features.... 5 2.1.1.5 Routing Features... 5 2.1.1.6 Security Features.... 5 2.1.1.7 Configuration and Management... 6 2.1.2 Hardware Platform.... 6 2.1.2.1 Interface.... 6 2.1.2.2 Front Panel.... 6 2.1.2.3 Back Panel.... 7 2.1.2.4 Regulatory Approvals and Compliance.. 8 2.1.2.5 Power Requirement and Operation Environment Requirement.. 8 2.1.2.6 Main Chipset Information... 8 2.1.3 Software.... 9 2.1.3.1 Overview... 9 2.1.3.2 Management.... 10 2.1.3.3 WAN.... 12 2.1.3.4 LAN.... 14 2.1.3.5 Virtual Server.... 15

Page 2 / 15

1 Introduction
1.1 Definitions of terms and abbreviations

Abbreviations

ADSL ALG ANSI ATM DHCP DMZ DNS DSL DSP IGD IP IPoA ISP ITU LAN MER NAT PAT PPPoA PPPoE SNMP UDP UPnP WLAN

Description

Asymmetric Digital Subscriber Line Application Level Gateway American National Standards Institute Asynchronous Transfer Mode Dynamic Host Configuration Protocol Demilitarised Zone Domain Name System Digital Subscriber Line Digital Signal Processing Internet Gateway Device Internet Protocol IP over ATM Internet Service Provider International Telecommunication Union Local Area Network MAC Encapsulated Routing Network Address Translation Port Address Translation Point-to-Point Protocol over Asynchronous Transfer Mode Point-to-Point Protocol over Ethernet Simple Network Management Protocol User Datagram Protocol Universal Plug and Play Wireless Local Area Network

Page 3 / 15

2 General description of the product
2.1 The Gigaset SE515 dsl
The Gigaset SE515 dsl, with its WirelessLAN IEEE802.11g interface, is a fast, flexible, and scalable combination of speed and range. The new standard boasts 54Mbps of bandwidth and backward compatibility with existing 802.11b devices. Its ADSL interfaces provides users with the flexibility for Broadband Internet connections. It provides a downstream rate of up to 8 Mbps and upstream rate of up to 1 Mbps for ADSL connection, even offers auto-negotiation capability for different ADSL compliances (G.dmt, G.lite, or T1.413 Issue 2) according to the DSLAM settings. Besides its flexibility of the LAN connectivity, the Gigaset SE515 dsl also provides network security and management features. Users can enjoy various bandwidth-consuming applications via the Gigaset SE515 dsl without being exposed to the insecure internet.
Figure 1: Gigaset SE 515 dsl
2.1.1 Product Features 2.1.1.1 ADSL Compliance
ANSI T1.413 Issue 2 ITU G.992.1 Annex A (G.dmt) ITU G.992.1 Annex B (UR2) ITU G.992.2 Annex A (G.lite) ITU G.994.1 (G.hs) Support dying gasp

2.1.1.2 ATM Features

Compliant to ATM Forum UNI 3.1 / 4.0 Permanent Virtual Circuits (PVCs) Support UBR and CBR with traffic shaping Page 4 / 15
RFC2684 LLC Encapsulation and VC Multiplexing over AAL5 RFC2364 Point-to-Point Protocol (PPP) over AAL5 RFC2225 Classical IP and ARP over ATM RFC2516 PPP over Ethernet: support Relay (Transparent Forwarding) and Client functions Support PPPoA or PPPoE Bridged mode (the IP address got from ISP can be passed to the users PC and behave as the IP address of the users PC.) OAM F4/F5 End-to-End/Segment Loopback Cells

2.1.1.3 Wireless LAN Compliance
IEEE 802.11g Channels: depending on local regulations. For example, 11 Channels (Northern American), 13 Channels (Europe), and 14 Channels (Japan) Data Rate: 54 Mbit/s Modulation Technique: OFDM (Orthogonal frequency-division multiplexing) Output Power: e.i.r.p. 17dB (with internal antenna) Receiver Sensitivity: Min. 80 dBm Frequency Range: 2.4 GHz Coverage Area: Outdoors: Max. 300 meters Indoors: Max. 30 meters Support of Access Control function: only registered WLAN clients can be allowed to associate to Gigaset SE515 dsl. SSID can be hidden for the security issue (No SSID broadcast).
2.1.1.4 Bridging Features
Supports self-learning bridge specified in IEEE 802.1D Transparent Bridging Supports up to 4096 learning MAC addresses Transparent Bridging between 10/100 Mb Ethernet, USB, and Wireless LAN

2.1.1.5 Routing Features

NAT/ PAT let multiple users on the LAN to access the internet for the cost of only one IP address. ALGs such as NetMeeting, MSN Messenger, FTP, Quick Time, mIRC, Real Player, CuSeeMe, VPN pass-through, etc. Port Mapping: the users can setup multiple virtual servers (e.g., Web, FTP, Mail servers) on users local network. Support DMZ 1 UPnP IGD with NAT traversal capability Static routes, RFC1058 RIPv1, and RFC1723 RIPv2 DNS Relay DynDNS
2.1.1.6 Security Features
PAP (RFC1334), CHAP (RFC1994) for PPP session
UPnP IGD and NAT Traversal function is optional and can be provided on demand. Page 5 / 15
INTOTO - Firewall support IP packets filtering based on IP address/Port number/Protocol type Support DoS (Deny of Services) which detect & protect a number of attacks (such as SYN/FIN/RST Flood, Smurf, WinNuke, Echo Scan, Xmas Tree Scan, etc) Wireless MAC Association Control
2.1.1.7 Configuration and Management
User-friendly embedded web configuration interface with password protection Remote management access control Telnet session for local or remote management HTTP firmware upgrades through HTTP or TFTP Distribute IP addresses to end users via DHCP server provided by ADSL router SNMPv1/v2c agent with MIB-II, ADSL Line MIB2
2.1.2 Hardware Platform 2.1.2.1 Interface

DSL: LAN: USB: RJ-11 RJ-45 port for IEEE 802.3/802.3u 10/100 Base-T, auto-sensing and auto-crossover Ethernet connection port compliant to USB v1.1 for 12 Mbps connection rate (optional)

2.1.2.2 Front Panel

Figure 2: LED Front Panel 1 Port
Figure 3: LED Front Panel 4 Port (option)
ADSL Line MIB support is optional and can be provided on demand. Page 6 / 15

PWR TEST

Green Green

Status

Off Solid Off Blinking Solid Off Blinking Solid Off Blinking Solid Off Blinking Solid Off Blinking Slowly Blinking Fast Solid
Power off Power on Power off or initial sef-test Software download or updating operation parameters in progress Initial self-test failure or memory failure Power off or Ethernet not connected Ethernet user traffic flowing in either direction Ethernet connected Power off USB not connected USB user traffic flowing in either direction USB connected Power off or no radio signal Wireless LAN user traffic flowing in either direction Wireless LAN connected Power off DSL line is handshaking in progress DSL line is training in progress DSL line is ready for data traffic

LAN (1-4)

USB (option)

2.1.2.3 Back Panel

Figure 4: Back Panel 1 Port
Figure 5: Back Panel 4 Port
DSL: RJ-11 connector LAN: RJ-45 connector USB: port compliant to USB v1.1 for 12 Mbps connection rate (optional) Reset Button Power Switch 16VAC, 1A: Power connector

Page 7 / 15

2.1.2.4 Regulatory Approvals and Compliance
EMI: FCC part 15 Class B Immunity: FCC part 68 Class B Safety: UL, CE
2.1.2.5 Power Requirement and Operation Environment Requirement
Power Adaptor: Input 23010 VAC; Output 16 VAC, 1A Ambient Temperature: 0 to 45C (32 to 113F) Relative Humidity: 20% to 90% (non-condensing)
2.1.2.6 Main Chipset Information

1 Port

Item CPU Vender Broadcom Model & Edition BCM6345 Remark Ethernet MAC & PHY ADSL Transceiver & AFE USB1.1 MAC and Transceiver SDRAM Flash WLAN RF NEC AMD Broadcom Broadcom D45128163G5 AM29LV320DB-90 BCM4306CO BCM2050 16MB 4MB 802.11g Mini PCI design

4 Port

Item CPU Vender Broadcom Model & Edition BCM6345 Remark Ethernet MAC & PHY ADSL Transceiver & AFE USB1.1 MAC and Transceiver SDRAM Flash WLAN RF Switch NEC AMD Broadcom Broadcom Broadcom D45128163G5 AM29LV320DB-90 BCM4306CO BCM2050 BCM5325 16MB 4MB 802.11g Mini PCI design 10/100Base 802.3u, Auto-MDIX, 1Mb packet buffer
The chipsets are tested against all commonly used DSLAMs on the market (Siemens 2.1, Alcatel A1000, Alcatel A7300, Nokia D50, Cisco 6260, Lucent Stinger, Samsung).

Page 8 / 15

2.1.3 Software 2.1.3.1 Overview
The Gigaset SE515 dsl provides following software features for users (see figure 6):
Basic Setup Security Setup Adcanced Setup

2 - 6 Steps

5 Steps
Wireless Basic WEP Access Control LAN Internal Router IP UPnP DHCP Server WAN Internet Connection DSL IPRouting Static Route Dynamic Route Default Gateway DNS Server Firewall IP Filters URL Filters DoS Virtual Server Port Forewarding DMZ Administr ation Management Upgrade Firmware Backup & Restore Diagnostics
Device Info ADSL Line Interbet Connection Traffic Counters DHCP Table Wireless Clients Routing Table ARP Table System Log

Figure 6: UI Structure

Page 9 / 15

Management: Web-based configuration WAN: Internet Connection NAT (IP Sharing) ALGs DNS relay Firewall WAN to wireless routing LAN: DHCP UPnP Dynamic DNS MAC Access Control Virtual Server Web-based Firmware upgradeable Diagnostics
2.1.3.2 Management 2.1.3.2.1 Web-Based Configuration The Gigaset SE515 dsl supports HTTP1.0 (RFC 1945), HTML (RFC1866) base64 algorithm and provides management functions with the HTTP protocol. The system provides a series of web pages in HTML format, which displays the configuration and status of the system. Users can view and manage the system with a standard web browser such as Netscape or Internet Explorer. The BASIC SETUP allows the user to easily configure the basic WLAN settings and the internet connection. While in the ADVANCED SETUP detailed system changes can be managed, allows the SECURITY SETUP to secure the private network within a few steps.

Figure 7: User Interface

Page 10 / 15

2.1.3.2.2 Status

A status function is supported in the web configuration to display the current connection status of the Gigaset SE515 dsl.
Figure 8: Status Information at the Welcome Page

2.1.3.2.3 Diagnostics

A diagnostic function is supported in the web configuration and displays the diagnostic result.
Figure 9: Diagnostic Page
2.1.3.2.4 Upgradeable Firmware for Downloadable Software Services
New firmware can be downloaded into the Gigaset SE515 dsl for upgrading product features through web-based management.

Page 11 / 15

Figure 10:Backup & Restore

2.1.3.3 WAN

The Router supports several protocols and encapsulation types over the ATM PVC, as PPPoA, PPPoE, MER or IPoA. The ADSL Port can be enabled and disabled in order to ensure that no unauthorized access from the Private Network to the Internet is done, while In-house Networking is still possible.
2.1.3.3.1 NAT (Network Address Translation) and ALGs (Application Level Gateway)
The Gigaset SE515 dsl supports NAT protocol RFC1631. This NAT translation works for both WAN Ethernet and PPP links. It maps IP addresses from one group to another and ensures that the private network is concealed from the general public. NAPT (Network Address Port Translation) is also implemented in the Gigaset SE515 dsl. It translates network addresses and respective TCP/UDP ports into a single network address and its TCP/UDP port. All the IP packets to (from) the Internet will be NAT translated in the Gigaset SE515 dsl. This ensures, that Internal IP addresses will not be accessible from the outside internet user. Sessions are uni-directional, outbound from the private network. (Inbound and Outbound policies for CORP and DMZ networks) Sessions in the opposite direction may be allowed on an exceptional basis, using static address maps for pre-selected hosts. The ALG (Application Level Gateway) provides all the basic proxy features and also provides extensive packet analysis. When packets from the outside arrive at the gateway, they are examined and evaluated to determine whether the security policy allows the packet to enter into the internal network. Not only does the server evaluate IP addresses, it also looks at the data in the packets for corruption and alteration. The Gigaset SE515 dsl application-level gateway can provide proxy services for applications and protocols like Telnet, FTP (File Transfer Protocol), Netmeeting, MSN Instant Manager, VPN, etc.

Page 12 / 15

NAT Application Support (Including Application Level Gateways and tested Applications) 1. 2. 3. 4. 5. 6. 7. 8. 9. General: FTP General: ICMP General: LDAP General: HTTP General: SMTP General: POP3 General: Telnet General: NNTP General: Finger 26. Microsoft Games (tested with the following games) 27. Microsoft Games: Age of Empires 28. Microsoft Games: Asherons Call 29. Microsoft Games: Fighter Ace II 30. Microsoft Games: Flight simulator 31. Activision Games (tested with the following games) 32. Activision Games: Quake 2 33. Activision Games: Blizzard Games 34. Activision Games: Diablo II 35. Video/Streaming applications: RTSP 36. Video/Streaming applications: QuickTime 37. Video/Streaming applications: Real Player (Real Audio / Real Video) 38. Video/Streaming applications: H.323 (ASN1 PER encoding and decoding ) 39. Video/Streaming applications: NetMeeting 40. Video/Streaming applications: Intel Video Phone 41. Video/Streaming applications: H.323 (gatekeeper MCU) 42. Video/Streaming applications: NetMeeting (ILS support)
10. General: IMAP 11. Communication: IRC 12. Communication: AOL Instant Messenger 13. Communication: AOL enhanced chat 14. Communication: ICQ2000 15. Communication: Net2Phone 16. Communication: Microsoft Instant Messenger 17. Communication: SIP 18. Communication: CUSEEME 19. Communication: PC Anywhere 20. Security Related: PPTP 21. Security Related: IPSec (IPSec client from internal network) 22. Security Related: IKE 23. Security Related: HTTPS 24. Security Related: SSL 25. Security Related: TLS
2.1.3.3.2 DNS (Domain Name Service) Relay
The DNS protocol is aimed to get IP addresses by using a specific domain name from the DNS server. By default, the Gigaset SE515 dsl acts as a DNS relay server. The internal LAN users may set the DNS server to Gigaset SE515 dsl and the Gigaset SE515 dsl will then relay the DNS request to the DNS server provided by the ISP or a well known DNS server. It responds to packets from the DNS server to clients within the internal LAN.

2.1.3.3.3 Firewall

The Gigaset SE515 dsl has the intoto iGatefirewall implemented. Its advanced features are:
Stateful Packet Inspection Firewall Access Policies (User, User Group, IP Addresses, Schedules.) Application Content Filtering Network Address Translation With Popular ALG Support Protection Denial of service(DoS) attack HTTP Relay (using web cache servers reduces the WAN traffic) Event and alert logging

Page 13 / 15

The Gigaset SE515 dsl deploys the most commonly reported hacker patterns to check any hacker activities. The device is able to detect hacking attempts by matching the recorded patterns. The monitor function of the web-based management is able to retrieve and display the logged packets. The following is the list of hacker patterns and DoS that can be detected by the Gigaset SE 515 dsl:
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. 27. 28. LAND attack Smurf attacks Winnuke attack (Netbios out-of-bound) Reassembly attacks: Syndrop Reassembly attacks: Teardrop 2 Reassembly attacks: Opentear Reassembly attacks: Tentacle Reassembly attacks: Ping of Death attack Reassembly attacks: Netsea IP source route option detection Jolt and Jolt2 Trace route detection Ascend attack TCP XMAS scan Ping of death Octopus Overdrop Echo / chargen Storm Mime flood Ascend Kill Xmas tree SMTP illegal commands Unknown IP protocol Reassembly attacks: Bonk Reassembly attacks: Boink Reassembly attacks: IP fragment overlap Reassembly attacks: IP fragment last length changing 29. 30. 31. 32. 33. 34. 35. 36. 37. 38. 39. 40. 41. 42. 43. 44. 45. 46. 47. 48. 49. 50. 51. 52. 53. 54. 55. 56. 57. 58. Reassembly attacks: Too many IP fragments Reassembly attacks: Very small IP fragments Reassembly attacks: Empty fragment Reassembly attacks: SSPing Reassembly attacks: Flushot Reassembly attacks: Oshare IP spoofing Zero length IP option IP unaligned time Echo storm detection Ping sweep ICMP router advertisement Echo reply without echo request Twinge attack detection Snork attack Fraggle attack UDP short header TCP synflood attack. TCP header fragmentation TCP short header TCP null scan TCP sequence out of range TCP FIN scan (Stelth) TCP postconnection SYN TCP invalid urgent offset RFProwl ICMP flood UDP flooding Blind spoofing ICMP unreachable storm

2.1.3.4 LAN

2.1.3.4.1 IP Address Settings
The default setting of the Gigaset SE515 dsl IP address is 192.168.1.1, subnet mask 255.255.255.0.

2.1.3.4.2 DHCP Server

Users can enable the Gigaset SE515 dsl as a DHCP server if the network does not has one. It manages IP addresses of the internal local network and provides IP addresses, subnet mask, gateway addresses and DNS IP addresses to DHCP clients in the network. Its managed IP address pool is available for users within the segment. The default pool is from 192.168.1.2 to 192.168.1.254. Besides, it also provides a Class C subnet mask and it maintains a 253 entries static table in order to let user remains its existing IP address.

2.1.3.4.3 UPnP

Universal Plug and Play (UPnP) is supported. It is a standard that uses Internet and Web

Page 14 / 15

protocols to enable devices such as PCs, peripherals, intelligent appliances, and wireless devices to be plugged into a network and automatically know about each other. With UPnP, when a user plugs a device into the network, the device will configure itself, acquire a TCP/IP address, and use a discovery protocol based on the Internet's Hypertext Transfer Protocol (HTTP) to announce its presence on the network to other devices.
2.1.3.5 Virtual Server The Gigaset SE 515 dsl supports also Virtual Server functions. On the Internet, a virtual server is a server (computer and various server programs) at someone else's location that is shared by multiple Web site owners so that each owner can use and administer it as though they had complete control of the server. Using a virtual server, a company or individual with a Web site can not only have their own domain name and IP address, but can administer their own file directories, add e-mail accounts and address assignments.
2.1.3.5.1 Port Forwarding Port forwarding is used to provide external access to your local machines. The idea is simple: communicating directly with a computer that resides inside a firewall using Network Address Translation (NAT) to hide the identity of internal machines from the outside world.
2.1.3.5.2 DMZ The DSL Router will forward IP packets from the Internet that do not belong to any of the applications configured in the Virtual Server table to the DMZ host computer. In computer networks, a DMZ (demilitarized zone) is a computer host or small network inserted as a "neutral zone" between a individuals's private network and the outside public network. It prevents outside users from getting direct access to a server that has confident data.
2.1.3.5.3 Dynamic DNS Dynamic DNS allows Internet users to access your virtual servers using a domain name instead of an IP address. The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname in any of the many domains, allowing your computer to be more easily accessed from various locations on the Internet.

Page 15 / 15

wired network components (see page 10). u use the wireless network adapters Gigaset PC Card 54, Gigaset PCI Card 54 or Gigaset USB Adapter 54 to set up a wireless network without routers, i.e. connect PCs directly with each other or PCs to a Gigaset SE515 dsl. u use Gigaset WLAN Repeater to extend the range of your wireless local area network.
Wired local area network (Ethernet)
In a wired local area network the PCs are linked via an Ethernet cable. The Siemens Gigaset SE515 dsl has four Ethernet LAN ports for connecting four PCs. The PCs must have an Ethernet network adapter that is connected via an Ethernet cable to a LAN port on the router. New PCs frequently come supplied with such a socket. You can buy Ethernet cables (CAT-5) from specialist retailers.

Ethernet

The Gigaset SE515 dsl has a DSL interface that permits simultaneous access of all the PCs to the Internet. To use this feature you will need the access data from an Internet Service Provider.
Wireless local area network (WLAN)
In a wireless local area network (WLAN) the PCs are linked to each other via a wireless connection. The PCs must have a wireless network adapter (WLAN adapter such as the Gigaset PC Card 54 or Gigaset PCI Card 54). We generally differentiate between two types of wireless networks: Ad-hoc mode An ad-hoc network is a wireless network set up without using a router. The mobile network components that communicate with each other directly set up the network "adhoc", i.e. as and when required. Infrastructure mode The infrastructure mode is used to connect wireless and wired networks with each other. In addition to the mobile stations, the infrastructure mode needs an access point, such as the Gigaset SE515 dsl, also known as a base station. In infrastructure mode, the stations on the network always communicate with each other via an access point. Unlike the ad-hoc mode, the access point sets up the wireless network on a permanent basis, and every station that wants to be part of the wireless network has to register with the access point before it is allowed to exchange data. Using an access point also extends the range of the wireless network. The access point establishes the connection from the mobile stations of a wireless network to a wired LAN (Ethernet) or to the Internet. In this case, this is referred to as the router functionality of the device. The access point sends data packets that are not addressed to stations in its network "outside" and passes data packets coming from "outside" to the appropriate station in its network. You can use the Gigaset SE515 dsl for connecting

and click on the OK button to install all the required components.
In the left-hand pane click on Network Identification and then Properties. In the Computer Name box, enter the name the PC is to appear under in the network. This name must be unique within the network. for all the PCs in the network.
In the Workgroup box, type a name for the workgroup. This name must be the same Confirm this with OK.
The TCP/IP protocol ensures that the PCs in the network can communicate with each other. You now have to install this Protocol.
Right click to open Local Area Connection.
In the next window click on Properties.

Click on Install.

Select Protocol and click on Add. In the Network Protocol list, select the entry Internet Protocol (TCP/IP). Click on OK.
You will now see the TCP/IP protocol in the Local Area Connection Properties window.
The TCP/IP protocol requires certain settings which you will now make or check so that it can function smoothly.
Select Internet Protokol (TCP/IP) and click on Properties.
Make sure that the http proxy in your Web browser is deactivated. This function must be deactivated so that your Web browser can read your Gigaset SE515 dsl's configuration pages. The following section describes the procedure for Internet Explorer and Netscape. First decide which browser you are using and then follow the appropriate steps. Internet Explorer
Open Internet Explorer. Click on Tools Internet Options. In the Internet Options window click on the Connections tab. Click on LAN Settings. Clear all the check boxes in the Local Area Network (LAN) settings window. Click on OK and then OK again to close the Internet Options window.
Click on Start Programs Accessories Command Prompt in Windows Desktop. In the Command Prompt window enter the ipconfig /release command and
Enter exit and press the ENTER KEY.
Checking the connection to the Gigaset SE515 dsl
Once the network has been set up on a PC, you can check whether the PC has been successfully connected to the Gigaset SE515 dsl. This can be done as follows:
Open Command Prompt. This can be done by clicking on Start Programs

Command Prompt.

Enter the command ping 192.168.1.1.

Other buttons may be visible depending on the function in question. These are described in the relevant sections.
General configuration with Installation Setup
Use Installation Setup for the general configuration of the Gigaset SE515 dsl. This includes the settings for the DSL interface. The router's DSL interface is used to provide a connection to the Internet for all the PCs connected to the router. For the setup you will need the access data you have received from your Internet Service Provider. Please have this data to hand. Please note: The Installation Setup procedure will reconfigure your WAN and LAN configuration if already performed. The wireless LAN settings are not affected. Remember that configuration saves the access data in the router. Before passing your router on to somebody else or having your dealer replace it, you should first restore the factory settings (see page 16). Otherwise unauthorised persons may use your Internet access data at your expense. The router user interface guides you through configuration step by step. Once you have completed a screen, click on NEXT. If you want to make any changes or check your entries, click on BACK.
Select Installation Setup in the start screen to launch the configuration.

Select your country

First step of Installation Setup is the selection of the country where you want to work with your Gigaset SE515 dsl.
Select your country from the pick list. Click on NEXT.
Configure Internet connection
In this step you have to enter the data for your Internet connection. You will find information about the connection type and the access data you need for further configuration in the paperwork you received from your Internet Service Provider (ISP).
Enter the VPI and VCI value as provided by your Internet Service Provider. Click on NEXT.
Please note: The service category type for the connection is set to "UBR Without PCR" by default. You can change this setting via the WAN configuration in Advanced Setup (see page 81).
Select the protocol used for your Internet connection and the encapsulation type.
The following protocols are available: PPP over ATM (PPPoA) (see page 56) PPP over Ethernet (PPPoE) (see page 56) MAC Encapsulated Routing (MER) (see page 58) IP over ATM (IPoA) (see page 58)

Click on NEXT.

Depending on the connection type, you will see another screen in which you should enter the connection data. Please note: The option Bridging will change the operating mode of the Gigaset SE515 dsl from Router to Bridge. It then can be used as a link between its local area network (LAN) and other LAN segments. In Bridge mode, the WAN connection is configured as a connection with other LANs and cannot be used for Internet access. You must select Bridging if you wish to use the Roaming function with your Gigaset SE515 dsl. In this case you should connect it up to an Ethernet with the WAN connection.

Carry out the following steps: SSID
In the SSID row enter an SSID of your choice. It can be up to 32 alphanumerical characters long. Avoid names and all too obvious words. Mix letters and numbers.
SSID Visibility If you have selected this option the Gigaset SE515 dsl will send the SSID in all data transmissions. In this case eavesdroppers could use the SSID to gain access to your network. Your router's SSID will also be displayed on PCs with a wireless network adapter. If you have deselected this option, wireless network components that want to connect to the LAN must know the SSID. This offers a certain degree of protection against unauthorised access.
Please note: Once you have completed Security Setup, you have to change the SSID on the wireless network adapters of the connected PCs as well, otherwise they will no longer have access to the router's wireless network. Before the wireless network components can communicate with each other, you must use the same SSID (Service Set Identifier).
Setting the security features for the wireless network
In the next step you are able to set encryption and authorization methods for your wireless network. Wireless networks are exposed to the risk of eavesdropping even more than wired networks are. Given the typical ranges of network adapters all the intruder needs is a laptop or PDA (Personal Digital Assistant) with an appropriately configured network card to listen in on any communications over a nearby wireless LAN. The Gigaset SE515 dsl uses effective encryption methods to avoid unauthorised access (hacking) to a great extent.
At present the following security mechanisms can be used:
u WEP encryption (Wired Equivalent Privacy, see below) u WPA (Wi-Fi Protected Access) without authentication server (see page 66) u WPA (Wi-Fi Protected Access) with authentication server (see page 67) u Authentication server (802.1x) with WEP encryption (see page 67)

WEP encryption

To plug the security gap, WLAN Standard IEEE 802.11 specified an encryption mechanism called WEP (Wired Equivalent Privacy) for data encryption and device authentication to a base station (e. g. the Gigaset SE515 dsl). If you are sending sensitive data over wireless channels, we recommend that you activate WEP-Encryption on your wireless network components. Please note: Wired Equivalent Privacy (WEP) protects data transmitted between wireless nodes. However WEP does not protect transmission on your wired network or over the Internet.

MAC access control only applies to PCs that are connected 'wirelessly', you can use this PC to change the router's configuration.
You can fill in the access control list in two different ways: 1. Using the list of registered PCs Use this option if the IP addresses on the local area network are assigned by the router's DHCP server and the corresponding PCs are registered. In this case, check the List of active booked in devices option. Then select from the list all the PCs that are to have access and then click Add to the list. Please note: If you want to add PCs to the table that are not registered at the moment, first deactivate the MAC access control list, register all the PCs you want to include in the table with your router and then reactivate the MAC access control list. 2. By direct entry of the MAC address Use this option if the IP addresses are not assigned by your router's DHCP server but are static or if the PCs you want to include are not registered with the router at the moment. Please note: You can find the MAC addresses of the PCs' wireless network adapters using Command Prompt with the command ipconfig /all on the PCs in question. In this case, check the MAC Address option.
To delete an entry from the table, click Delete in the right-hand column of the table

entry.

Enter all the MAC addresses of the PCs that are to have access. The table is easier to handle if you assign a name to the PC and then click Add to the list.
To apply the settings and to go to the next step in the Security Setup, click on NEXT.
Saving the router configuration and completing the setup
In the last step of the Security Setup you can backup the current settings of your router in a file and save them on your PC or other data medium. You can then use that file to restore the current configuration of your router if necessary. The backed up data are restored in the Advanced Setup with Administration Backup & Restore.
To backup the current settings, select Save configuration to PC. If you do not want to backup the current configuration, deselect Save configuration to PC.

page 73),

u set Encryption for wireless transmissions (see page 75), and u restrict access to the router's LAN (see page 76).
Use this screen to configure your router as the Access point for a wireless LAN. You can enable or disable the wireless module and make other settings for wireless operation.
In the Wireless menu, select Basic.

u Wireless Network

Wireless devices cannot log in to your router unless its wireless module has been activated. You should therefore enable this option.

u Access Point Name

You can enter a name for your router here. This name will be used if you want to do Roaming with your router. If you do not need Roaming, leave the default name as it is.

u BSSID

The router's BSSID is displayed here. This is for information only it cannot be changed.

u SSID

Before the wireless network components can communicate with each other, you must use the same SSID (Service Set Identifier). The Gigaset SE515 dsl comes supplied with the SSID configured as Gigaset SE515. You should change this SSID for security reasons. Enter a character string of your choice. The SSID is case-sensitive. It can be up to 32 alphanumerical characters long. Please note: Remember that the connection to the wireless network adapters will be interrupted until you enter the new SSID on them as well. For additional information see "Setting the SSID and making it invisible" on page 63.

u SSID Visibility

If this option is enabled, the Gigaset SE515 dsl will send the SSID in all data transmissions, and your router's SSID will be displayed on PCs that have a wireless network adapter. In this case eavesdroppers could use the SSID to gain access to your network. Your router's SSID will not be displayed if you disable the SSID option. This will increase protection against unauthorised access to your wireless network. Make a note of the SSID however - you will need it to log your PC onto your router.

u Channel

Channel used by the Gigaset SE515 dsl to communicate with other wireless network components. You must use a common channel so that the wireless network components can communicate with one another. Please note: The available channel settings are governed by your country's regulations. They define the number of available channels.

u Transmission Mode

u define an IP address for the router (see below), u enable the UPnP feature (see page 78) u configure the router's DHCP server (see page 79).
Defining the router's private IP address
You can change the router's IP address in this screen. The default IP address for the router is 192.186.1.1. This is the router's Private IP address. This is the address under which the router can be reached on the local area network. It can be freely assigned from the block of available addresses. The IP address under which the router can be reached from outside is assigned by the Internet Service Provider.
In the LAN menu, select Internal Router IP Addresses.
If you want to assign the router a different IP address, enter it in IP Address.
Please note: We recommend using an address from a block that is reserved for private use. This address block is 192.168.1.1 - 192.168.255.254.
The Subnet mask is 255.255.255.0 by default. We advise that you do not change

this setting.

According to the configuration of the first IP address, you can configure a second IP
address and subnet mask for the LAN interface.
Please note: New settings only take effect after the router is rebooted. If necessary, reconfigure your PC's IP address to match the new configuration.
Using the universal plug and play function
PCs with UPnP (Universal Plug & Play) can offer their own network services and automatically use services offered on the network. Please note: The PC must have Windows ME or Windows XP as its operating system. Check whether the UPnP function has been installed in your PC's operating system. It may be necessary to retrospectively install the UPnP components even on Windows XP or Windows ME systems. Please consult your PC's operating instructions. Once you have installed UPnP in a PC's operating system and activated it on the router, applications on that PC (e.g. Microsoft Messenger) can communicate over the Internet without you having to specifically permit this. In this case the router performs automatic Port Forwarding (see page 84), thereby facilitating communication over the Internet. Once you have activated UPnP on the router you will see an icon for your Gigaset SE515 dsl on the task bar of the PCs on which UPnP is installed. Windows XP systems will also include the icon under network connections. Clicking on this icon opens the Gigaset SE515 dsl's configuration screens. To activate the router's UPnP function:
In the LAN menu, select UPnP.
Enable UPnP. Click on APPLY.
Please note: When the UPnP function is active, system applications can assign and use Ports on a PC. This may pose a security threat so you should disable the UPnP function if you do not wish to use it. PCs on which a UPnP application is currently running and the ports that are opened by the application are entered in the UPnP Port Forwarding list.

To view this list, in the Virtual Servers menu select the Virtual Servers (Port Forwarding) option. The list is displayed in the bottom half of the screen.
Configuring the DHCP server
The router has a DHCP Server, whose factory setting is active. As a result, the IP addresses of the PCs are automatically assigned by the router. If you want to assign static IP addresses for the PCs, you will have to deactivate the DHCP server. Please note: u If the router's DHCP server is active, configure the network settings of your PCs so that the Obtain an IP address automatically option is checked. To find out how to do this, please turn to the chapter entitled "Configuring the local area network" which starts on page 22.
u If you deactivate the router's DHCP server, you will have to assign a static IP
address for the PCs using the network settings.
In the LAN menu, select DHCP Server.
To activate the DHCP server check Enabled. Enter the range of IP addresses which the router should use for automatically assigning IP addresses to the PCs. Enter the Start IP Address and the End IP Address. Please note: The first three fields of the first and last IP address always have the first three fields of the router's IP address as their default setting because the subnet mask is always 255.255.255.x. This means that the first three address segments for all network components must be identical.
If the DHCP server is active, you can specify a Leased Time. Leased Time defines the
period of time in which the PCs retain the IP address assigned to them without changing them. Please note: If you select the check box Forever the IP addresses are never changed.
In the bottom half of the screen you can create a list of PCs to which the DHCP server will always assign the same IP address. This function is useful when you wish to define filter rules for certain PCs or forward ports to certain PCs (refer to "Configuring the firewall" on page 89 or "Setting up Port Forwarding" on page 84). The relevant PC must always have the same IP address. You can create the list of PCs in two ways:
u From the list of logged-in PCs.
You should use this option when the appropriate PCs are logged on. To do this, select the List of active booked in devices option. From the list, select the PCs you wish to add to the list, then click on Add to the list. u By entering their MAC address. You should use this option when the PCs you wish to add to the list are not currently logged onto the router. Note: You can find out the MAC addresses of the wireless network adapters of the PCs with the command ipconfig /all on the relevant PCs. Select MAC Address. Now enter the MAC addresses of the PCs you wish to add to the list. To improve clarity, type in a name for the PC, then click on Add to the list.

To remove an entry from the list, click on Delete in the right hand column of the list

WAN configuration

Once you have configured your router with the Installation Setup, you have already configured the WAN connection (Internet access) of your router. Use the WAN configuration option in Advanced Setup to check and change these settings. Via the WAN menu you can
u check and edit the router's Internet configuration (see below) u check and edit the ADSL settings

Internet configuration

To check and edit the router's WAN settings:
In the WAN menu, select Internet Connection.
The Internet Connection screen shows the current WAN configuration settings.
To change the settings, click on Modify. The appropriate configuration screen is
opened. The procedure is analogous to the Installation Setup (see page 54). Additionally you are able to change the setting for Service Category. to establish Internet connections.
To delete your Internet configuration, click on Delete. The router is no longer able To add a new Internet configuration, click on ADD. The procedure is analogous to
the Installation Setup (see page 54).
If you want to confirm, click FINISH to complete your configuration.

ADSL settings

To check and edit the router's ADSL settings:
In the WAN menu, select ADSL Settings.
The router only provides access to the Internet if ADSL Port is enabled.

IP Routing configuration

To communicate with partners located in other IP networks a route must be defined to direct the data packets from sender to recipient. These routes can be defined as static routes or via dynamic routing.

Static Route

To define static routes to certain destinations:
In the IP Routing menu, select Static Route.
A list with the current route settings is displayed.
To add a new route to the list, click ADD.
In the Destination Network area, enter the IP address and the subnet mask of the
network which should be reached from your local area network.
In the Forward packets to area
select the check box next to Gateway IP Address if the data packets are to be transmitted to the destination network via an IP router in your network. Enter its IP address. select the check box next to WAN Interface if the data packets are to be transmitted to the destination network via the Internet. Select the corresponding WAN interface from the option menu.

u The above provisions does not imply a change in the burden of proof to the detri-

ment of the customer.

u To invoke this Guarantee, please contact the Siemens helpdesk on 277.
This number is also to be found in the accompanying user guide.

Glossary

Access point An Access Point, such as the Gigaset SE515 dsl, is the centre of a wireless local area network (WLAN). It handles the connection of the wireless linked network components and regulates the data traffic in the wireless network. The Access Point also serves as an interface to other networks, e.g. an existing Ethernet LAN or via a modem to the Internet. The operating mode of wireless networks with an Access Point is called Infrastructure mode. Ad-hoc mode Ad-hoc mode describes wireless local area networks (WLANs) in which the network components set up a spontaneous network without an Access point, e. g. several Notebooks in a conference. All the network components are peers. They must have a wireless Network adapter. ADSL Aymmetric digital subscriber line (ADSL) is a special form of the DSL data transmission technique. Auto Connect Auto Connect means that applications such as Web browser, Messenger and Email automatically open an Internet connection when they are launched. This can lead to high charges if you are not using Flat rate. This function can be deactivated at the Gigaset SE515 dsl to save call charges. Bridge A Bridge connects several network segments to form a joint network, e. g. to make a TCP/IP network. The segments can have different physical characteristics, e. g. different connections such as Ethernet and wireless LANs. Linking individual segments via Bridges allows local area networks of practically unlimited size. See also: Switch, Hub, Router, Gateway Broadcast A Broadcast is a data packet not directed to a particular recipient but to all the network components on the network. The Gigaset SE515 dsl does not pass broadcast packets on; they always remain within the local area network (LAN) it administers. BSSID Basic Service Set ID BSSID permits unique differentiation of one wireless network (WLAN) from another. In Infrastructure mode the BSSID is the MAC address of the Access point. In wireless networks in Ad-hoc mode the BSSID is the MAC address of any one of the participants.
Client A Client is an application that requests a service from a Server. For example, an http Client on a PC in a local area network requests data, i.e. Web pages from an HTTP Server on the Internet. Frequently the network component (e. g. the PC) on which the Client application is running is also called a Client. DHCP Dynamic Host Configuration Protocol DHCP handles the automatic assignment of IP addresses to network components. It was developed because in large networks especially the Internet the defining of IP addresses is very complex as participants frequently move, drop out or new ones join. A DHCP Server automatically assigns the connected network components (DHCP Clients) Dynamic IP addresses from a defined IP Pool Range thus saving a great deal of configuration work. It also allows address pools to be used more effectively: Since not all participants are on the network at the same time, the same IP address can be assigned to different network components in succession as and when required. The Gigaset SE515 dsl includes a DHCP Server and so it can automatically assign IP addresses for the PCs on its local area network. For specific PCs you can specify that their IP addresses are never changed. DHCP Server See DHCP DMZ Demilitarised Zone DMZ describes a part of a network that is outside the Firewall. A DMZ is set up, as it were, between a network you want to protect (e.g. a LAN) and a non-secure network (e.g. the Internet). A DMZ is useful if you want to offer Server services on the Internet which for security reasons are not to be run from behind the firewall or if Internet applications do not work properly behind a firewall. A DMZ permits unrestricted access from the Internet to only one or a few network components, while the other network components remain secure behind the firewall. DNS Domain Name System DNS permits the assignment of IP addresses to computer or Domain names that are easier to remember. A DNS Server has to administer this information for each LAN with an Internet connection. As soon as a page on the Internet is called up, the browser obtains the corresponding IP address from the DNS Server so that it can establish the connection. On the Internet the assignment of domain names to IP addresses follows a hierarchical system. A local PC only knows the address of the local Name Server. This in turn knows all the addresses of the computers in the local area network and the next higher Name Server, which again knows addresses in its network and that of the next Name Server. DNS Server See DNS

NAT Network Address Translation NAT is a method for implementing IP addresses (mostly Private IP addresses) in a network on one or more Public IP addresses on the Internet. With NAT several network components in a LAN can share the router's public IP address to connect to the Internet. The network components of the local area network are hidden behind the router's IP address registered on the Internet. Because of this security function NAT is frequently used as part of the network Firewall. If you want to make services on a PC in the local area network available on the Internet despite NAT, you can configure the Gigaset SE515 dsl as a Virtual server. Network A network is a group of devices connected in wired or wireless mode so that they can share resources such as files and peripherals. A general distinction is made between local area networks (LANs) and wide-area networks (WANs). Network adapter The network adapter is the hardware device that connects a network component to a local area network. The connection can be wired or wireless. An Ethernet network card is an example of a wired network adapter. The Gigaset PC Card 54 and the Gigaset PCI Card 54 are examples of wireless network adapters. A network adapter has a unique address, the MAC address. Port Data is exchanged between two applications in a network across a port. The port number addresses an application within a network component. The combination of IP address/port number uniquely identifies the recipient or sender of a data packet within a network. Some applications (e.g. Internet services such as HTTP or FTP) work with fixed port numbers, others are allocated a free port number whenever they need one. Port Forwarding In Port Forwarding the Gigaset SE515 dsl directs data packets from the Internet that are addressed to a particular Port to the corresponding port of the appropriate network component. This enables servers within the local area network to offer services on the Internet without them needing a Public IP address. See also: Virtual server PPPoA Point-to-Point Protocol over ATM PPPoA is a Protocol for connecting network components in a local Ethernet network to the Internet via an ATM network. PPPoE Point-to-Point Protocol over Ethernet PPPoE is a Protocol for connecting network components in a local Ethernet network to the Internet via a modem.
Private IP address The private IP address is a network component's address within the local area network (LAN). The network operator can assign any address he or she wants. Devices that act as a link from a local area network such as the Gigaset SE515 dsl have a private and a Public IP address. Protocol A protocol describes the agreements for communication on a network. It contains rules for opening, administering and closing a connection, and rules about data formats, time frames and error handling. Communications between two applications require different protocols at various levels, e.g. the TCP/IP protocols for the Internet. Public IP address The public IP address is a network component's address on the Internet. It is assigned by the Internet Service Provider. Devices that create a link from a LAN to the Internet, such as the Gigaset SE515 dsl, have a public and a Private IP address. PVC Permanent Virtual Circuit A permanent virtual circuit is a logical connection in an ATM network. Remote Management Remote Management refers to the ability to manage a network from a network component that is actually outside the local area network (LAN). Roaming With Roaming, the range of a wireless LAN is increased by using several Access points that use the same SSID and radio channel and which are interconnected by an Ethernet. The PCs within the network can switch dynamically between several Access Points without losing an existing network connection. Router A router directs data packets from one local area network (LAN) to another via the fastest route. A router makes it possible to connect networks that have different network technologies. For example, it can link a local area network with Ethernet or WLAN technology to the Internet. See also: Bridge, Switch, Hub, Gateway Server A Server makes a service available to other network components (Clients). The term Server is often used to refer to a computer or PC. However it can also mean an application that provides a particular service such as DNS or a Web service. SMTP Simple Mail Transfer Protocol The SMTP Protocol is part of the TCP/IP protocol family. It regulates the exchange of electronic mail on the Internet. Your Internet Service Provider provides you with access to an SMTP server.

Key length 128-bit (ASCII). 128-bit (hexadecimal). 64-bit (ASCII). 64-bit (hexadecimal). 65 65
LAN. 10, 116 LAN connection creating. 20 creating a wired. 20
NAT. 84, 117 configuration. 84 Navigation bar. 51 Netscape. 14, 49 Network. 117 infrastructure. 9 wired. 8 wireless. 9 Network adapter. 117 Ethernet. 8 wireless. 9 Network Address Translation see NAT Network configuration. 22
Windows 2000. 40 Windows 98. 23 Windows XP. 32 Radius-Server. 67 Reboot. 99 Rekeying. 66 Releasing TCP/IP settings Windows 2000. 47 Windows 98. 31 Windows XP. 39 Remote Management. 95, 118 Reset. 16, 99 Reset button. 16 Reset function. 16 Restore. 71, 98 RIP. 83 Roaming. 74, 118 Route Information Protocol see RIP Router. 7, 55, 118 activate. 21 back panel. 16 backup configuration. 71, 98 configuration file. 71, 98 configuring. 49 connecting. 18 dynamic IP address. 88 for wired networks. 8 front panel. 15 installation. 13 IP address. 49, 77 launching the user interface. 49 protecting with a password. 62, 95 reboot. 99 reset. 16, 99 restore configuration. 98 security. 62 setting up. 17 setting up as a virtual server. 84 status information. 50, 100 temperature range for operation. 17 view information. 100 Router status. 50, 100 Routing dynamic. 82 static. 82
Obtain an IP address automatically Windows 2000. Windows 98. Windows XP. Opening screen. Operating mode. bridge. router. Operating state. 55 15
Password. 49, 62 assigning. 62, 95 changing. 62, 95 forgotten. 62 PC defining a name (Windows 2000). 41 defining a name (Windows 98). 24 defining a name (Windows XP). 34 IP address. 22 network settings. 22 set up as Client for Microsoft Networks. 23 Permanent Virtual Circuit siehe PVC ping command. 48, 89 Point-to-Point Protocol over ATM see PPPoA Point-to-Point Protocol over Ethernet see PPPoE Port. 117 Port Forwarding. 117 Port number. 85, 117 mapping. 85 PPPoA. 56 PPPoE. 11, 56, 117 configuring connection. 56 Private IP address. 118 Problem solving. 103 Protocol. 118 Public IP address. 118 PVC. 118
Safety precautions. 5 Security. 62
Security architecture, WEP. 64 Security measures. 12 Security Setup. 51, 62 Selecting the language. 50 Server. 118 virtual. 120 Service. 107 pre-defined. 85 Service category. 54 Service Set Identifier see SSID Set time by. 93 Setting the time by Time Server. 93 manually. 93 Setting the time zone. 94 Setting up a Network Client (Windows 98). 24 Simple Mail Transfer Protocol see SMTP Simple Network Management Potocol siehe SNMP SMTP. 118 SNMP. 119 Socket for cable modem. 16 for DSL modem. 16 for mains adapter. 16 LAN. 16 WAN. 16 Splitter connect to. 18 SSID. 13, 63, 74, 119 factory setting on router. 13 invisible. 63, 74 preconfigured. 63 visible. 63, 74 Start page. 50 Static IP address. 119 Static route. 82 Subnet. 119 Subnet mask. 77, 79, 119 Supplied items. 14 Switch. 119 Synchronising the TCP/IP settings with the router Windows 2000. 47 Windows 98. 31 Windows XP. 39 System log. 101 system log viewing. 102 System requirements. 14