Gigaset SE515 dsl / englisch / A31008-E515-Bxxx-1-7619 / cover_front.fm / 28.05.2004

Contents

Safety precautions. 5 The Gigaset SE515 dsl. 6
Wired local area network (Ethernet). 8 Wireless local area network (WLAN). 9 Features and applications. 11

First Steps. 14

System requirements. Package contents. Operating displays and connections. Front panel. Back panel. Setting up the Gigaset SE515 dsl. Connecting with the splitter. Creating a LAN connection. Activating. 21
Configuring the local area network. 22
Setting up a PC as a Client for Microsoft Networks. Selecting a computer name and workgroup. Installing the TCP/IP protocol. TCP/IP protocol settings. Deactivating the http proxy. Synchronising the TCP/IP settings with the Gigaset SE515 dsl. Network configuration with Windows XP. Configuring the network. Selecting a computer name and workgroup. Checking the network settings and completing the installation procedure. TCP/IP protocol settings. Deactivating the http proxy. Synchronising the TCP/IP settings with the Gigaset SE515 dsl. Network configuration with Windows 2000. Installing network services. Selecting a computer name and workgroup. Installing the TCP/IP protocol. TCP/IP protocol settings. Deactivating the http proxy. Synchronising the TCP/IP settings with the Gigaset SE515 dsl. Checking the connection to the Gigaset SE515 dsl. 48

The user interface. 49

Launching the user interface. 49 UI elements. 51
General configuration with Installation Setup. 53
Select your country. 53 Internet connection via PPP. 56 Internet connection via IP. 58
Configuring security measures. 62
Assign password. Setting the security features for the wireless network. WEP encryption. WPA encryption. 64 66
Configuration with Advanced Setup. 72
Basic. Setting the wireless security. Access control to local area network. Defining the router's private IP address. Using the universal plug and play function. Configuring the DHCP server. Internet configuration. ADSL settings. IP Routing configuration. Static Route. Dynamic routing. DNS server. Setting up the NAT function. Setting up Port Forwarding. Opening the firewall for selected PCs (DMZ). Activating dynamic DNS. Configuring the firewall. Filtering services. 89 89
Administration tasks and status information. 91
Manually opening an Internet connection. 91 Setting the time and time zone. 93 Router management. 94 Assigning a password. 95 Setting Remote-Management. 95 Changing the Web server port. 96 IGMP proxy configuration. 96 Saving and restoring a configuration. 98 Resetting the router. 99 Displaying the router's status. 100 System log. 101

Appendix. 103

Fault tracing. 103
Specifications. 106 Service (Customer Care). 107

Glossary. 111 Index. 122

Safety precautions
u Only use the mains adapter (16V AC 1A) supplied with the Gigaset SE515 dsl. Com-

u u u u u

ply with the connection values and ratings when connecting the device to the mains. Protect the equipment from moisture. Never open the device. For electrical safety reasons it may only be opened by authorised service technicians. The router may affect medical equipment. Take account of the technical conditions in the relevant environment. Make sure you include these operating instructions when you pass on your Gigaset SE515 dsl to someone else. Please dispose of the Gigaset SE515 dsl in an environmentally friendly manner.
Trademarks Microsoft, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP and Internet Explorer are registered trademarks of the Microsoft Corporation. Netscape, Netscape Navigator and Netscape Communicator are registered trademarks of the Netscape Communications Corporation.

The Gigaset SE515 dsl

The Siemens Gigaset SE515 dsl is a powerful but simple communications device including a modem for connecting your PC or local area network (LAN) to the Internet (via DSL). Your Gigaset SE515 dsl contains an integrated ADSL modem for easy connection of the device to the Internet. The Gigaset SE515 dsl permits Internet access for several users. A single user account can be shared, if your Internet Service Provider permits this. If you want to surf the Internet at the lowest possible cost, then the Gigaset SE515 dsl is a convenient and effective solution. The Gigaset SE515 dsl is programmed with numerous functions and is simple to handle. It can be configured and ready to use within a few minutes.
local area networks with Gigaset products
You can use the Siemens Gigaset SE515 dsl Router to set up a local area network, e. g. a home network. All the PCs in this network can communicate with each other and have access to the Internet.
Gigaset SE515 dsl Windows ME

Internet

Windows 2000

local area network

Windows XP

Windows 98 SE

You can set up the network in a number of ways. You can
u use a Gigaset SE515 dsl to set up a wired local area network (see page 8). u use the Gigaset SE515 dsl to set up a local area network comprising wireless and
wired network components (see page 10). u use the wireless network adapters Gigaset PC Card 54, Gigaset PCI Card 54 or Gigaset USB Adapter 54 to set up a wireless network without routers, i.e. connect PCs directly with each other or PCs to a Gigaset SE515 dsl. u use Gigaset WLAN Repeater to extend the range of your wireless local area network.
Wired local area network (Ethernet)
In a wired local area network the PCs are linked via an Ethernet cable. The Siemens Gigaset SE515 dsl has four Ethernet LAN ports for connecting four PCs. The PCs must have an Ethernet network adapter that is connected via an Ethernet cable to a LAN port on the router. New PCs frequently come supplied with such a socket. You can buy Ethernet cables (CAT-5) from specialist retailers.

with anything.

Installing the Gigaset SE515 dsl

Please note:

u Only use the router with the mains adapter (16V AC 1A) that is supplied. u Do not plug any phone jack connectors into the routers DSL and LAN sockets. u Use standard network cables for all connections, CAT-5 for the LAN and RJ11 ADSL
line cable for DSL connections.
Before you start connecting PCs to your Gigaset SE515 dsl make sure that
u a wired or wireless Network adapter is connected to the PC. Please read the operat-
ing instructions that came with the adapter. The latest PCs and notebooks have wired adapters built in at the factory. u Gigaset SE515 has been entered as the SSID on the network adapter.
Connecting with the splitter
To connect the integrated modem with the splitter, insert one end of the supplied RJ11 ADSL line cable in the DSL socket of the router and the other end in the splitter.
Connection to the splitter
Creating a LAN connection
You can connect PCs to your router in wireless or wired mode and so set up a local area network (LAN). Wireless A wireless connection is established by a wireless network adapter installed in your PC. This can be a Gigaset PCI Card 54, Gigaset PC Card 54, a Gigaset USB Adapter 54or other 802.11g or 802.11b compatible wireless network adapter. You define a Wireless network by assigning all the devices an identical SSID. Assign the router's SSID to the network adapters. The factory setting for the router's SSID is Gigaset SE 515. If the correct SSID has been entered in your PC's wireless network adapter, the wireless link will be established automatically once you connect your router to the mains power supply (see page 21).
PC with Gigaset PCI Card 54
Notebook with Gigaset PC Card 54
Wired Insert one end of the supplied Ethernet cable in one of the LAN sockets (LAN1 - LAN4) on the back of the router and the other end in the PC's Ethernet network card. The four LAN sockets can automatically set the transmission speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet and the transmission mode to Half duplex or Full duplex depending on the performance of the network adapter in your PC.

PC with Ethernet card

Notebook with Ethernet card

Activating

Connect the mains adapter cable to the 16V AC socket on the router. Plug the mains adapter into a mains socket. Then press the power button on the back panel of the router.
This activates the Gigaset SE515 dsl. The power LED on the front lights up. The DSL LED is blinking, indicating that the DSL port is being synchronised. When finished, the DSL LED turns on. The LAN LEDs light up when a device is connected to the corresponding LAN connection. The radio link to a PC that is connected by means of a wireless network adapter is now opened automatically provided the network adapter has been configured with the same SSID as the router (see page 19). Opening the radio link may take a few seconds. The WLAN LED flashes when data are being sent or received over the wireless interface. If this is not the case, please turn to "Fault tracing" on page 103.

If the Obtain an IP address automatically and Obtain DNS server address automatically options have not been activated, activate them now and click on OK. Close the following screens.
Open Internet Explorer and click on Stop. Click on Tools and then Internet Options. In the Internet Options window click on the Connections tab. Click on Settings. Clear all the check boxes in the Local Area Network (LAN) settings window. Click on OK and then OK again to close the Internet Options window.
Open Netscape. Click on Edit and then Preferences. Double click on Advanced Category in the Preferences window and then click on
You have now configured your computer so that it is ready to be connected to the Gigaset SE515 dsl. You now have to release the old TCP/IP settings and synchronise them with the settings of your Gigaset SE515 dsl.
Click on Start on the Windows Desktop and then Programs, followed by Accessories and finally Command Prompt.
In the Command Prompt window enter the ipconfig /release command and

press the ENTER KEY.

Then enter the ipconfig /renew command and press the ENTER KEY.
Enter exit and press the Enter Key to close the Command Prompt window.
Network configuration with Windows 2000
To integrate a PC with Windows 2000 into a network that is configured with a Gigaset SE515 dsl: 1. Install the network services (see below). 2. Select computer names and workgroup (see page 41). 3. Install the TCP/IP protocol (see page 42). 4. Make TCP/IP protocol settings (see page 44). 5. Deactivate the http proxy (see page 46). 6. Synchronise the TCP/IP settings to the Gigaset SE515 dsl (see page 47).
Installing network services
You have to install the network services before the PCs in your network can access shared resources. This is done as follows:
Click on Start Settings Control Panel. Double click on the Network and Dial-up Connections icon.
In the left-hand pane click on Add Network Components.
Select Networking Services and click on Next. You will now be prompted for the Windows installation CD. Insert the WIN2000 CD
and click on the OK button to install all the required components.
In the left-hand pane click on Network Identification and then Properties. In the Computer Name box, enter the name the PC is to appear under in the network. This name must be unique within the network. for all the PCs in the network.
In the Workgroup box, type a name for the workgroup. This name must be the same Confirm this with OK.
The TCP/IP protocol ensures that the PCs in the network can communicate with each other. You now have to install this Protocol.
Right click to open Local Area Connection.
In the next window click on Properties.

Click on Install.

Select Protocol and click on Add. In the Network Protocol list, select the entry Internet Protocol (TCP/IP). Click on OK.

The user interface

Once you have configured the network settings on a PC in your local area network, you can then use that PC to configure the Gigaset SE515 dsl with the router's user interface. The Gigaset SE515 dsl can be configured using any browser that supports Java, e.g. Microsoft Internet Explorer 5.5 or higher, Netscape Navigator 7.0 or higher.
Launching the user interface
To access the Gigaset SE515 dsl's user interface:
Launch your Web browser. Enter the router IP address in the Web browser address bar.
http://192.168.1.1 You will then see a login window:
Click on LOGIN (the default is no password).
Please note: For security reasons you should assign a password at a later stage (see page 62). You will now see the start page.

The start page

The start page is the starting point for all configuration and administration activities.
Selecting the language If you wish to change the default user interface language, select the required language from the Select your language pick list. Functions of the start page In the start page you can
u open an Internet connection (see page 91), u change the account of the Internet connection (see page 92), u view status: information about the router (see page 100), u make configuration settings for the router with the Installation Setup, Security

Setup or Advanced Setup.

Installation Setup Security Setup
Use Installation Setup for the basic settings required for connecting to the Internet. This is described from page 53 on. The Security Setup allows you to take precautions against unauthorised access to your router and LAN. For example, you can assign a password and set up encryption for wireless transmissions. This is described from page 62 on. For the protection of your network we recommend that you carry out this setup. Advanced Setup provides additional functions. For example, you can back up and restore your configuration data, set up your router as a virtual server for your network, and much more. These configuration steps are optional and can be carried out at a later stage. This is described from page 72 on.

Advanced Setup

UI elements
The UI pages contain the following elements:

Title bar

Navigation bar

Working area

Buttons
Title bar The title bar indicates whether you are in Installation Setup, Security Setup or Advanced Setup, or whether a status page is open. Additionally you can use the button to finish your configuration and return to the login screen. Navigation bar The navigation bar always displays Home. It finishes the setup or closes the status screen and returns to the start screen. In Advanced Setup, the navigation bar also lists the configuration options of the Gigaset SE515 dsl. Clicking on an option opens a menu in which you can select the function you want. If you have opened the router's status screen, the navigation bar lists all of the topics on which you can view information. Click on the topic you require and the page with the information opens.

Select Installation Setup in the start screen to launch the configuration.

Select your country

First step of Installation Setup is the selection of the country where you want to work with your Gigaset SE515 dsl.
Select your country from the pick list. Click on NEXT.
Configure Internet connection
In this step you have to enter the data for your Internet connection. You will find information about the connection type and the access data you need for further configuration in the paperwork you received from your Internet Service Provider (ISP).
Enter the VPI and VCI value as provided by your Internet Service Provider. Click on NEXT.
Please note: The service category type for the connection is set to "UBR Without PCR" by default. You can change this setting via the WAN configuration in Advanced Setup (see page 81).
Select the protocol used for your Internet connection and the encapsulation type.
The following protocols are available: PPP over ATM (PPPoA) (see page 56) PPP over Ethernet (PPPoE) (see page 56) MAC Encapsulated Routing (MER) (see page 58) IP over ATM (IPoA) (see page 58)

Click on NEXT.

Depending on the connection type, you will see another screen in which you should enter the connection data. Please note: The option Bridging will change the operating mode of the Gigaset SE515 dsl from Router to Bridge. It then can be used as a link between its local area network (LAN) and other LAN segments. In Bridge mode, the WAN connection is configured as a connection with other LANs and cannot be used for Internet access. You must select Bridging if you wish to use the Roaming function with your Gigaset SE515 dsl. In this case you should connect it up to an Ethernet with the WAN connection.
Internet connection via PPP
Complete this screen if you dial up the Internet via PPPoA (PPP over ATM) or PPPoE (PPP over Ethernet).
Select Obtain an IP address automatically if your Internet Service provider assigns
a Dynamic IP address for your Internet connection. In this case your router is a DHCP Client. Please note: In this connection type your router is assigned a Dynamic IP address by the Internet Service Provider. If you want to use a PC in your network as a server, you can use the router's DynDNS service (see page 88).
Select Use the following IP address if your Internet Service Provider has given you
a fixed IP address. Enter the data which you have received from your Internet Service Provider in the WAN IP Address.
Using the Enable NAT check box you can descide if the NAT (Network Address Translation) functionality of your router should be enabled or disabled. Internet Service Provider.
Enter the PPP User Name and the PPP Password which you have been given by your Select how Internet sessions should be established:

At present the following security mechanisms can be used:
u WEP encryption (Wired Equivalent Privacy, see below) u WPA (Wi-Fi Protected Access) without authentication server (see page 66) u WPA (Wi-Fi Protected Access) with authentication server (see page 67) u Authentication server (802.1x) with WEP encryption (see page 67)

WEP encryption

To plug the security gap, WLAN Standard IEEE 802.11 specified an encryption mechanism called WEP (Wired Equivalent Privacy) for data encryption and device authentication to a base station (e. g. the Gigaset SE515 dsl). If you are sending sensitive data over wireless channels, we recommend that you activate WEP-Encryption on your wireless network components. Please note: Wired Equivalent Privacy (WEP) protects data transmitted between wireless nodes. However WEP does not protect transmission on your wired network or over the Internet.
To activate WEP encryption on your wireless network components:
Activate WEP encryption on your Gigaset SE515 dsl and generate a 64 or 128-bit key.
Make a note of the generated key. 64 or 128 bit key.
Activate WEP encryption on the wireless network adapters and enter the generated
You can choose either the standard 64-bit key or the more robust 128-bit key for encryption. The keys are generated in hexadecimal format or in the ASCII format. You must use the same keys for encryption and decryption for the Gigaset Router and all your wireless network adapters.
Select the encryption mode: 64 or 128-bit.
The Web page then has an added section where you can enter the key. The following illustration shows the page after selecting a 128-bit key.
If you choose Hexadecimal, you can use characters 0 to 9 and A to F. With an encryption depth of 64 bits, the key is exactly 10 characters long. An example of a valid key would be: 1234567ABC. With an encryption depth of 128 bits, the key is exactly 26 characters long. An example of a valid key would be: 234567ABC8912345DEF1234567. If you choose ASCII, you can use characters 0 to 9 and A to F and the special characters of the ASCII character set. With an encryption depth of 64 bits, the key is exactly 5 characters long. An example of a valid key would be: GIGA1. With an encryption depth of 128 bits, the key is exactly 13 characters long. An example of a valid key would be: GIGASET_SE515. Please note: u It is very important to make a note of the key you enter. You will need this information to configure the wireless network adapters properly.
u Once you have completed Security Setup, you have to change the WEP encryp-
tion on the wireless network adapters of the connected PCs as well, otherwise they will no longer have access to the router's wireless network

Defining the router's private IP address
You can change the router's IP address in this screen. The default IP address for the router is 192.186.1.1. This is the router's Private IP address. This is the address under which the router can be reached on the local area network. It can be freely assigned from the block of available addresses. The IP address under which the router can be reached from outside is assigned by the Internet Service Provider.
In the LAN menu, select Internal Router IP Addresses.
If you want to assign the router a different IP address, enter it in IP Address.
Please note: We recommend using an address from a block that is reserved for private use. This address block is 192.168.1.1 - 192.168.255.254.
The Subnet mask is 255.255.255.0 by default. We advise that you do not change

this setting.

According to the configuration of the first IP address, you can configure a second IP
address and subnet mask for the LAN interface.
Please note: New settings only take effect after the router is rebooted. If necessary, reconfigure your PC's IP address to match the new configuration.
Using the universal plug and play function
PCs with UPnP (Universal Plug & Play) can offer their own network services and automatically use services offered on the network. Please note: The PC must have Windows ME or Windows XP as its operating system. Check whether the UPnP function has been installed in your PC's operating system. It may be necessary to retrospectively install the UPnP components even on Windows XP or Windows ME systems. Please consult your PC's operating instructions. Once you have installed UPnP in a PC's operating system and activated it on the router, applications on that PC (e.g. Microsoft Messenger) can communicate over the Internet without you having to specifically permit this. In this case the router performs automatic Port Forwarding (see page 84), thereby facilitating communication over the Internet. Once you have activated UPnP on the router you will see an icon for your Gigaset SE515 dsl on the task bar of the PCs on which UPnP is installed. Windows XP systems will also include the icon under network connections. Clicking on this icon opens the Gigaset SE515 dsl's configuration screens. To activate the router's UPnP function:
In the LAN menu, select UPnP.
Enable UPnP. Click on APPLY.
Please note: When the UPnP function is active, system applications can assign and use Ports on a PC. This may pose a security threat so you should disable the UPnP function if you do not wish to use it. PCs on which a UPnP application is currently running and the ports that are opened by the application are entered in the UPnP Port Forwarding list.
To view this list, in the Virtual Servers menu select the Virtual Servers (Port Forwarding) option. The list is displayed in the bottom half of the screen.

Click on APPLY to apply the setting.

Dynamic routing

The Route Information Protocol (RIP) is able to dynamically find the optimum route for the transmission of data packets. You can activate the RIP on your router. To activate dynamic routing for a specific interface on your router:
In the IP Routing menu, select Dynamic Routing.
Select the Enabled check box to activate RIP for the interface shown in the Interface

column.

You can select the RIP version and the operating mode (active or passive). Click on APPLY to apply the setting.

DNS server

Normally your Internet Service Provider provides you with a DNS Server which handles the assignment of IP addresses to computer or Domain names each time an Internet connection is established. If required you can manually define the DNS Server to be used for your Internet connections.
Select the menu DNS Server.
The Enable Automatic Assigned DNS check box is activated by default. The router will accept the first DNS assignment received during connection setup.
To select the DNS server manually, disable the Enable Automatic Assigned DNS
check box and enter the IP addresses of your preferred DNS servers (primary and secondary).
Please note: If you change back from manual to automatic assignment you will have to reboot the router.
Setting up the NAT function
The Gigaset SE515 dsl comes supplied with the NAT function (Network Address Translation). The NAT function acts as a firewall against unauthorised access from the Internet. You can use the router's NAT settings to
u set up the router as a virtual server by configuring port forwarding (see below), u open the NAT firewall for specific PCs (see page 86), u activate the dynamic DNS (see page 88).
Setting up Port Forwarding
If you want to offer files or Web services that are on a PC in your local area network to other Internet users, you have to set the PC up as a server (e. g. as on FTP or HTTP server). However the router's NAT function does not normally allow "external" access to PCs on the local area network. To make services available on the Internet from local PCs, you have to set up the router as a virtual server.
Externally the router takes on the role of the server. It receives the requests of remote users under its public IP address and automatically redirects them to the local PCs. The private IP addresses of the servers on the local area network remain protected. Internet services are addressed via defined port numbers. The router needs a mapping table of the port numbers to redirect the service requests to the server that actually makes the service available. For that purpose port forwarding has to be configured.

To create a DMZ for a PC, in the NAT menu select DMZ.
Select the connection the DMZ definition should be assigned to in the PVC Name

field.

Enter the name of the service provided by the PC in the Service Name field.
Now you have to choose the PC. You can do it in two different ways.
Click Add to the list. A new entry for the PC will be displayed in the list. Click APPLY if you want to apply these settings for the router configuration.

Activating dynamic DNS

A service which you wish to provide on the Internet can be accessed by a Domain name. Your router's Public IP address is assigned to this Domain name. If your Internet Service Provider assigns the IP address for your local area network's WAN connection dynamically, then the IP address of the router may change. The assignment to the Domain name will no longer be valid and your service will no longer be available. In this case you must ensure that the assignment of the IP address to the Domain name is regularly updated. This is handled by the dynamic DNS Service (DynDNS). You can use the DynDNS service to assign your Gigaset Router an individual static Domain name on the Internet even if it does not have a static IP address. There are various providers on the Internet offering free DynDNS Service. The Gigaset SE515 dsl uses the DynDNS Service from DynDNS.org (http://www.DynDNS.org). If you use the service of this DynDNS provider, then your service can be reached on the Internet as a subdomain of one of the DynDNS.org domains. If you have activated the router's DynDNS function, it will monitor its public IP address. When this changes, it will open a connection to DynDNS.org and update its IP address there. Please note: You have to open an account with DynDNS.org before you can use the router's DynDNS function. Follow the instructions on the DynDNS.org website. Then enter the account user data when configuring the router.
To use the router's DynDNS function, in the Virtual Servers menu select Dynamic
Enable the dynamic DNS feature. Select the connection the Dynamic DNS definition should be assigned to in the PVC

Name field.

Enter the User Name, Password and Domain Name. You will have received these
from DynDNS.org when you registered. A typical domain name might be: my_domain.dyndns.org

Configuring the firewall

You can use the Firewall menu to make settings that will enhance the security of your network. You can

Saving and restoring a configuration
Once you have configured your router, it is advisable to back up the settings. Then you can restore them at any time, should they be accidentally deleted or overwritten.
u In the Administration menu, select Backup & Restore.

Save configuration data

Click on Backup.
Your browser opens a file selection window where you can specify the file you wish to store in the backup file.
On your local PC select a directory where you wish to store the configuration file,
and enter a name for the file. Once the procedure has been completed, the current configuration data of your router will have been backed up in the specified file. Restoring the back-up
Click on Browse and in your file system select the backup file with which you wish
to restore the configuration.

Click on Restore.

A window will appear prompting you to confirm the restore.
Click on """OK""".
The next window will warn you that the router will not be available for about a minute during the restore procedure.
Click on """OK""" to close this message.
The configuration will now be updated.

Resetting the router

You can reset your router to the factory settings or reboot.
In the Administration menu, select Reset Router.
Restoring the factory settings via the Reset Router screen is advisable before passing your router on to somebody else or having your dealer replace it. Otherwise unauthorised persons may use your Internet access data at your expense.
To do this, click on Restore.
Resetting the router takes a few seconds. Please note: If you no longer have access to your router configuration, you can also reset the router using the reset button on the back side of the device (see page 16). Remember that a complete router reset will reset all your configuration settings to the factory settings. This means that you will have to reconfigure your router from scratch. You can reboot your router if it no longer functions properly. It should then be ready for use again.
To do this, click on Reboot.
Rebooting the router takes a few seconds. Please note: You can also reboot the router by unplugging the power lead and then plugging it in again.
Displaying the router's status
The status screens show information about the router's configuration and connection status. You can view the following status screens: Device Information - shows the router's basic configuration settings. Overview ADSL Line Status Traffic Counters DHCP Table Wireless Clients Table Routing Table ARP Table System Log displays the current status of the ADLS line. provides statistics about the data transmitted by the router. lists the devices which get their IP addresses from the router. lists all wireless clients which are currently connected to the router. shows the current settings for IP routing (see also page 82). displays the current address translation table (physical adresses to IP adresses). displays log information about all activities on the DSL port of your router (see below). Internet Connection shows current active Internet connenctions.

To view a status screen, proceed as follows:
Select status on the main screen. On the navigation bar, select the option with the information you require.

System log

Your Gigaset SE515 dsl is able to send various information to log files which can be displayed if required. You can configure which information is logged and which information is displayed in the system log view.
In the status menu, select System Log.
Configuring the system log To configure the system log, click Configure System Log.
You can enable or disable the log function. Choose your desired Log Level.
The log level specifies which kind of events are logged to the log file. There are eight types of log level for you to choose from. The default is Debugging.
Choose your desired Display Level
The display level defines which kind of events should be shown in the system log view. There are the same eight types of display level as with the log level. The default is Error.
Choose your desired Mode.
The mode selection includes Local, Remote and Both. It defines the log server to be used for logging. The default one is Local. If you choose Remote or Both, all the events will be sent to the specified UDP port of the specified log server.
To save your settings, click APPLY.

Viewing System Log

To view the system log, click on View System Log.
The following screen will be shown immediately for your reference.
Click REFRESH to synchronise the log information with the log file.

Appendix

Fault tracing
This chapter describes common problems and their solutions. The Gigaset SE515 dsl is easy to monitor thanks to its LED displays. Problems can be quickly identified. If you cannot solve the connection problem after checking the LED displays, please consult the other sections of the following table. Symptom Power lamp does not light up. Possible cause and solutions No power supply.
Check whether the mains adapter is connected to
the Gigaset SE515 dsl and a power outlet.
The LAN LED on a connected device does not light up.
adapter are working properly. If the mains adapter is not working properly, please get in touch with our customer service unit (see page 107). No LAN connection
Check whether the device is switched on. Check whether the power outlet and the mains
Make sure that the connected device is switched

Gigaset SE515 dsl

Wireless ADSL Router 802.11g
Copyright Siemens AG Author:
Dept.: Name: Tel.: ICM CP M VD BDP Mr. Schels +722 58617
CONFIDENTIAL Inspector: Signature:
Dept.: Name: Tel.: ICM CP M VD BDP Mr. Dr. Rotter +722 42315

Signature:

File: Date:

August 19, 2003

Status: File:

Contents

Introduction.... 3 1.1 Definitions of terms and abbreviations.... 3
General description of the product... 4 2.1 The Gigaset SE515 dsl.... 4 2.1.1 Product Features... 4 2.1.1.1 ADSL Compliance.... 4 2.1.1.2 ATM Features.... 4 2.1.1.3 Wireless LAN Compliance... 5 2.1.1.4 Bridging Features.... 5 2.1.1.5 Routing Features... 5 2.1.1.6 Security Features.... 5 2.1.1.7 Configuration and Management... 6 2.1.2 Hardware Platform.... 6 2.1.2.1 Interface.... 6 2.1.2.2 Front Panel.... 6 2.1.2.3 Back Panel.... 7 2.1.2.4 Regulatory Approvals and Compliance.. 8 2.1.2.5 Power Requirement and Operation Environment Requirement.. 8 2.1.2.6 Main Chipset Information... 8 2.1.3 Software.... 9 2.1.3.1 Overview... 9 2.1.3.2 Management.... 10 2.1.3.3 WAN.... 12 2.1.3.4 LAN.... 14 2.1.3.5 Virtual Server.... 15

Page 2 / 15

1 Introduction
1.1 Definitions of terms and abbreviations

Abbreviations

ADSL ALG ANSI ATM DHCP DMZ DNS DSL DSP IGD IP IPoA ISP ITU LAN MER NAT PAT PPPoA PPPoE SNMP UDP UPnP WLAN

Description

Asymmetric Digital Subscriber Line Application Level Gateway American National Standards Institute Asynchronous Transfer Mode Dynamic Host Configuration Protocol Demilitarised Zone Domain Name System Digital Subscriber Line Digital Signal Processing Internet Gateway Device Internet Protocol IP over ATM Internet Service Provider International Telecommunication Union Local Area Network MAC Encapsulated Routing Network Address Translation Port Address Translation Point-to-Point Protocol over Asynchronous Transfer Mode Point-to-Point Protocol over Ethernet Simple Network Management Protocol User Datagram Protocol Universal Plug and Play Wireless Local Area Network

Page 3 / 15

2 General description of the product
2.1 The Gigaset SE515 dsl
The Gigaset SE515 dsl, with its WirelessLAN IEEE802.11g interface, is a fast, flexible, and scalable combination of speed and range. The new standard boasts 54Mbps of bandwidth and backward compatibility with existing 802.11b devices. Its ADSL interfaces provides users with the flexibility for Broadband Internet connections. It provides a downstream rate of up to 8 Mbps and upstream rate of up to 1 Mbps for ADSL connection, even offers auto-negotiation capability for different ADSL compliances (G.dmt, G.lite, or T1.413 Issue 2) according to the DSLAM settings. Besides its flexibility of the LAN connectivity, the Gigaset SE515 dsl also provides network security and management features. Users can enjoy various bandwidth-consuming applications via the Gigaset SE515 dsl without being exposed to the insecure internet.
Figure 1: Gigaset SE 515 dsl
2.1.1 Product Features 2.1.1.1 ADSL Compliance
ANSI T1.413 Issue 2 ITU G.992.1 Annex A (G.dmt) ITU G.992.1 Annex B (UR2) ITU G.992.2 Annex A (G.lite) ITU G.994.1 (G.hs) Support dying gasp

2.1.1.2 ATM Features

Compliant to ATM Forum UNI 3.1 / 4.0 Permanent Virtual Circuits (PVCs) Support UBR and CBR with traffic shaping Page 4 / 15
RFC2684 LLC Encapsulation and VC Multiplexing over AAL5 RFC2364 Point-to-Point Protocol (PPP) over AAL5 RFC2225 Classical IP and ARP over ATM RFC2516 PPP over Ethernet: support Relay (Transparent Forwarding) and Client functions Support PPPoA or PPPoE Bridged mode (the IP address got from ISP can be passed to the users PC and behave as the IP address of the users PC.) OAM F4/F5 End-to-End/Segment Loopback Cells
2.1.1.3 Wireless LAN Compliance
IEEE 802.11g Channels: depending on local regulations. For example, 11 Channels (Northern American), 13 Channels (Europe), and 14 Channels (Japan) Data Rate: 54 Mbit/s Modulation Technique: OFDM (Orthogonal frequency-division multiplexing) Output Power: e.i.r.p. 17dB (with internal antenna) Receiver Sensitivity: Min. 80 dBm Frequency Range: 2.4 GHz Coverage Area: Outdoors: Max. 300 meters Indoors: Max. 30 meters Support of Access Control function: only registered WLAN clients can be allowed to associate to Gigaset SE515 dsl. SSID can be hidden for the security issue (No SSID broadcast).

2.1.1.4 Bridging Features
Supports self-learning bridge specified in IEEE 802.1D Transparent Bridging Supports up to 4096 learning MAC addresses Transparent Bridging between 10/100 Mb Ethernet, USB, and Wireless LAN

2.1.1.5 Routing Features

NAT/ PAT let multiple users on the LAN to access the internet for the cost of only one IP address. ALGs such as NetMeeting, MSN Messenger, FTP, Quick Time, mIRC, Real Player, CuSeeMe, VPN pass-through, etc. Port Mapping: the users can setup multiple virtual servers (e.g., Web, FTP, Mail servers) on users local network. Support DMZ 1 UPnP IGD with NAT traversal capability Static routes, RFC1058 RIPv1, and RFC1723 RIPv2 DNS Relay DynDNS
2.1.1.6 Security Features
PAP (RFC1334), CHAP (RFC1994) for PPP session
UPnP IGD and NAT Traversal function is optional and can be provided on demand. Page 5 / 15
INTOTO - Firewall support IP packets filtering based on IP address/Port number/Protocol type Support DoS (Deny of Services) which detect & protect a number of attacks (such as SYN/FIN/RST Flood, Smurf, WinNuke, Echo Scan, Xmas Tree Scan, etc) Wireless MAC Association Control
2.1.1.7 Configuration and Management
User-friendly embedded web configuration interface with password protection Remote management access control Telnet session for local or remote management HTTP firmware upgrades through HTTP or TFTP Distribute IP addresses to end users via DHCP server provided by ADSL router SNMPv1/v2c agent with MIB-II, ADSL Line MIB2
2.1.2 Hardware Platform 2.1.2.1 Interface
DSL: LAN: USB: RJ-11 RJ-45 port for IEEE 802.3/802.3u 10/100 Base-T, auto-sensing and auto-crossover Ethernet connection port compliant to USB v1.1 for 12 Mbps connection rate (optional)

2.1.2.2 Front Panel

Figure 2: LED Front Panel 1 Port
Figure 3: LED Front Panel 4 Port (option)
ADSL Line MIB support is optional and can be provided on demand. Page 6 / 15

PWR TEST

Green Green

Status

Off Solid Off Blinking Solid Off Blinking Solid Off Blinking Solid Off Blinking Solid Off Blinking Slowly Blinking Fast Solid
Power off Power on Power off or initial sef-test Software download or updating operation parameters in progress Initial self-test failure or memory failure Power off or Ethernet not connected Ethernet user traffic flowing in either direction Ethernet connected Power off USB not connected USB user traffic flowing in either direction USB connected Power off or no radio signal Wireless LAN user traffic flowing in either direction Wireless LAN connected Power off DSL line is handshaking in progress DSL line is training in progress DSL line is ready for data traffic

LAN (1-4)

USB (option)

2.1.2.3 Back Panel

Figure 4: Back Panel 1 Port
Figure 5: Back Panel 4 Port
DSL: RJ-11 connector LAN: RJ-45 connector USB: port compliant to USB v1.1 for 12 Mbps connection rate (optional) Reset Button Power Switch 16VAC, 1A: Power connector

Page 7 / 15

2.1.2.4 Regulatory Approvals and Compliance
EMI: FCC part 15 Class B Immunity: FCC part 68 Class B Safety: UL, CE
2.1.2.5 Power Requirement and Operation Environment Requirement
Power Adaptor: Input 23010 VAC; Output 16 VAC, 1A Ambient Temperature: 0 to 45C (32 to 113F) Relative Humidity: 20% to 90% (non-condensing)
2.1.2.6 Main Chipset Information

1 Port

Item CPU Vender Broadcom Model & Edition BCM6345 Remark Ethernet MAC & PHY ADSL Transceiver & AFE USB1.1 MAC and Transceiver SDRAM Flash WLAN RF NEC AMD Broadcom Broadcom D45128163G5 AM29LV320DB-90 BCM4306CO BCM2050 16MB 4MB 802.11g Mini PCI design

4 Port

Item CPU Vender Broadcom Model & Edition BCM6345 Remark Ethernet MAC & PHY ADSL Transceiver & AFE USB1.1 MAC and Transceiver SDRAM Flash WLAN RF Switch NEC AMD Broadcom Broadcom Broadcom D45128163G5 AM29LV320DB-90 BCM4306CO BCM2050 BCM5325 16MB 4MB 802.11g Mini PCI design 10/100Base 802.3u, Auto-MDIX, 1Mb packet buffer
The chipsets are tested against all commonly used DSLAMs on the market (Siemens 2.1, Alcatel A1000, Alcatel A7300, Nokia D50, Cisco 6260, Lucent Stinger, Samsung).

Page 8 / 15

2.1.3 Software 2.1.3.1 Overview
The Gigaset SE515 dsl provides following software features for users (see figure 6):
Basic Setup Security Setup Adcanced Setup

2 - 6 Steps

5 Steps
Wireless Basic WEP Access Control LAN Internal Router IP UPnP DHCP Server WAN Internet Connection DSL IPRouting Static Route Dynamic Route Default Gateway DNS Server Firewall IP Filters URL Filters DoS Virtual Server Port Forewarding DMZ Administr ation Management Upgrade Firmware Backup & Restore Diagnostics
Device Info ADSL Line Interbet Connection Traffic Counters DHCP Table Wireless Clients Routing Table ARP Table System Log

Figure 6: UI Structure

Page 9 / 15

Management: Web-based configuration WAN: Internet Connection NAT (IP Sharing) ALGs DNS relay Firewall WAN to wireless routing LAN: DHCP UPnP Dynamic DNS MAC Access Control Virtual Server Web-based Firmware upgradeable Diagnostics
2.1.3.2 Management 2.1.3.2.1 Web-Based Configuration The Gigaset SE515 dsl supports HTTP1.0 (RFC 1945), HTML (RFC1866) base64 algorithm and provides management functions with the HTTP protocol. The system provides a series of web pages in HTML format, which displays the configuration and status of the system. Users can view and manage the system with a standard web browser such as Netscape or Internet Explorer. The BASIC SETUP allows the user to easily configure the basic WLAN settings and the internet connection. While in the ADVANCED SETUP detailed system changes can be managed, allows the SECURITY SETUP to secure the private network within a few steps.

Figure 7: User Interface

Page 10 / 15

2.1.3.2.2 Status

A status function is supported in the web configuration to display the current connection status of the Gigaset SE515 dsl.
Figure 8: Status Information at the Welcome Page

2.1.3.2.3 Diagnostics

A diagnostic function is supported in the web configuration and displays the diagnostic result.
Figure 9: Diagnostic Page
2.1.3.2.4 Upgradeable Firmware for Downloadable Software Services
New firmware can be downloaded into the Gigaset SE515 dsl for upgrading product features through web-based management.

Page 11 / 15

Figure 10:Backup & Restore

2.1.3.3 WAN

The Router supports several protocols and encapsulation types over the ATM PVC, as PPPoA, PPPoE, MER or IPoA. The ADSL Port can be enabled and disabled in order to ensure that no unauthorized access from the Private Network to the Internet is done, while In-house Networking is still possible.
2.1.3.3.1 NAT (Network Address Translation) and ALGs (Application Level Gateway)
The Gigaset SE515 dsl supports NAT protocol RFC1631. This NAT translation works for both WAN Ethernet and PPP links. It maps IP addresses from one group to another and ensures that the private network is concealed from the general public. NAPT (Network Address Port Translation) is also implemented in the Gigaset SE515 dsl. It translates network addresses and respective TCP/UDP ports into a single network address and its TCP/UDP port. All the IP packets to (from) the Internet will be NAT translated in the Gigaset SE515 dsl. This ensures, that Internal IP addresses will not be accessible from the outside internet user. Sessions are uni-directional, outbound from the private network. (Inbound and Outbound policies for CORP and DMZ networks) Sessions in the opposite direction may be allowed on an exceptional basis, using static address maps for pre-selected hosts. The ALG (Application Level Gateway) provides all the basic proxy features and also provides extensive packet analysis. When packets from the outside arrive at the gateway, they are examined and evaluated to determine whether the security policy allows the packet to enter into the internal network. Not only does the server evaluate IP addresses, it also looks at the data in the packets for corruption and alteration. The Gigaset SE515 dsl application-level gateway can provide proxy services for applications and protocols like Telnet, FTP (File Transfer Protocol), Netmeeting, MSN Instant Manager, VPN, etc.

Page 12 / 15

NAT Application Support (Including Application Level Gateways and tested Applications) 1. 2. 3. 4. 5. 6. 7. 8. 9. General: FTP General: ICMP General: LDAP General: HTTP General: SMTP General: POP3 General: Telnet General: NNTP General: Finger 26. Microsoft Games (tested with the following games) 27. Microsoft Games: Age of Empires 28. Microsoft Games: Asherons Call 29. Microsoft Games: Fighter Ace II 30. Microsoft Games: Flight simulator 31. Activision Games (tested with the following games) 32. Activision Games: Quake 2 33. Activision Games: Blizzard Games 34. Activision Games: Diablo II 35. Video/Streaming applications: RTSP 36. Video/Streaming applications: QuickTime 37. Video/Streaming applications: Real Player (Real Audio / Real Video) 38. Video/Streaming applications: H.323 (ASN1 PER encoding and decoding ) 39. Video/Streaming applications: NetMeeting 40. Video/Streaming applications: Intel Video Phone 41. Video/Streaming applications: H.323 (gatekeeper MCU) 42. Video/Streaming applications: NetMeeting (ILS support)

10. General: IMAP 11. Communication: IRC 12. Communication: AOL Instant Messenger 13. Communication: AOL enhanced chat 14. Communication: ICQ2000 15. Communication: Net2Phone 16. Communication: Microsoft Instant Messenger 17. Communication: SIP 18. Communication: CUSEEME 19. Communication: PC Anywhere 20. Security Related: PPTP 21. Security Related: IPSec (IPSec client from internal network) 22. Security Related: IKE 23. Security Related: HTTPS 24. Security Related: SSL 25. Security Related: TLS
2.1.3.3.2 DNS (Domain Name Service) Relay
The DNS protocol is aimed to get IP addresses by using a specific domain name from the DNS server. By default, the Gigaset SE515 dsl acts as a DNS relay server. The internal LAN users may set the DNS server to Gigaset SE515 dsl and the Gigaset SE515 dsl will then relay the DNS request to the DNS server provided by the ISP or a well known DNS server. It responds to packets from the DNS server to clients within the internal LAN.

2.1.3.3.3 Firewall

The Gigaset SE515 dsl has the intoto iGatefirewall implemented. Its advanced features are:
Stateful Packet Inspection Firewall Access Policies (User, User Group, IP Addresses, Schedules.) Application Content Filtering Network Address Translation With Popular ALG Support Protection Denial of service(DoS) attack HTTP Relay (using web cache servers reduces the WAN traffic) Event and alert logging

Page 13 / 15

The Gigaset SE515 dsl deploys the most commonly reported hacker patterns to check any hacker activities. The device is able to detect hacking attempts by matching the recorded patterns. The monitor function of the web-based management is able to retrieve and display the logged packets. The following is the list of hacker patterns and DoS that can be detected by the Gigaset SE 515 dsl:
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. 25. 26. 27. 28. LAND attack Smurf attacks Winnuke attack (Netbios out-of-bound) Reassembly attacks: Syndrop Reassembly attacks: Teardrop 2 Reassembly attacks: Opentear Reassembly attacks: Tentacle Reassembly attacks: Ping of Death attack Reassembly attacks: Netsea IP source route option detection Jolt and Jolt2 Trace route detection Ascend attack TCP XMAS scan Ping of death Octopus Overdrop Echo / chargen Storm Mime flood Ascend Kill Xmas tree SMTP illegal commands Unknown IP protocol Reassembly attacks: Bonk Reassembly attacks: Boink Reassembly attacks: IP fragment overlap Reassembly attacks: IP fragment last length changing 29. 30. 31. 32. 33. 34. 35. 36. 37. 38. 39. 40. 41. 42. 43. 44. 45. 46. 47. 48. 49. 50. 51. 52. 53. 54. 55. 56. 57. 58. Reassembly attacks: Too many IP fragments Reassembly attacks: Very small IP fragments Reassembly attacks: Empty fragment Reassembly attacks: SSPing Reassembly attacks: Flushot Reassembly attacks: Oshare IP spoofing Zero length IP option IP unaligned time Echo storm detection Ping sweep ICMP router advertisement Echo reply without echo request Twinge attack detection Snork attack Fraggle attack UDP short header TCP synflood attack. TCP header fragmentation TCP short header TCP null scan TCP sequence out of range TCP FIN scan (Stelth) TCP postconnection SYN TCP invalid urgent offset RFProwl ICMP flood UDP flooding Blind spoofing ICMP unreachable storm

2.1.3.4 LAN

2.1.3.4.1 IP Address Settings
The default setting of the Gigaset SE515 dsl IP address is 192.168.1.1, subnet mask 255.255.255.0.

2.1.3.4.2 DHCP Server

Users can enable the Gigaset SE515 dsl as a DHCP server if the network does not has one. It manages IP addresses of the internal local network and provides IP addresses, subnet mask, gateway addresses and DNS IP addresses to DHCP clients in the network. Its managed IP address pool is available for users within the segment. The default pool is from 192.168.1.2 to 192.168.1.254. Besides, it also provides a Class C subnet mask and it maintains a 253 entries static table in order to let user remains its existing IP address.

2.1.3.4.3 UPnP

Universal Plug and Play (UPnP) is supported. It is a standard that uses Internet and Web

Page 14 / 15

protocols to enable devices such as PCs, peripherals, intelligent appliances, and wireless devices to be plugged into a network and automatically know about each other. With UPnP, when a user plugs a device into the network, the device will configure itself, acquire a TCP/IP address, and use a discovery protocol based on the Internet's Hypertext Transfer Protocol (HTTP) to announce its presence on the network to other devices.
2.1.3.5 Virtual Server The Gigaset SE 515 dsl supports also Virtual Server functions. On the Internet, a virtual server is a server (computer and various server programs) at someone else's location that is shared by multiple Web site owners so that each owner can use and administer it as though they had complete control of the server. Using a virtual server, a company or individual with a Web site can not only have their own domain name and IP address, but can administer their own file directories, add e-mail accounts and address assignments.
2.1.3.5.1 Port Forwarding Port forwarding is used to provide external access to your local machines. The idea is simple: communicating directly with a computer that resides inside a firewall using Network Address Translation (NAT) to hide the identity of internal machines from the outside world.
2.1.3.5.2 DMZ The DSL Router will forward IP packets from the Internet that do not belong to any of the applications configured in the Virtual Server table to the DMZ host computer. In computer networks, a DMZ (demilitarized zone) is a computer host or small network inserted as a "neutral zone" between a individuals's private network and the outside public network. It prevents outside users from getting direct access to a server that has confident data.

2.1.3.5.3 Dynamic DNS Dynamic DNS allows Internet users to access your virtual servers using a domain name instead of an IP address. The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname in any of the many domains, allowing your computer to be more easily accessed from various locations on the Internet.

Page 15 / 15