SSN will not honor, and will consider the warranty voided, if: (1) the seal or serial number on the Product have been tampered with; (2) the Products case has been opened; or (3) there has been any attempted or actual repair or modification of the Product by anyone other than an SSN authorized service provider. The limited warranty does not cover defects in appearance, cosmetic, decorative or structural items, including framing, and any non-operative parts. SSNs limit of liability under the limited warranty shall be the actual cash value of the product at the time the end user returns the product for repair, determined by the price paid by the end user for the product less a reasonable amount for usage. SSN shall not be liable for any other losses or damages. The end user will be billed for any parts or labor charges not covered by this limited warranty. The end user will be responsible for any expenses related to reinstallation of the product. THIS LIMITED WARRANTY IS THE ONLY WARRANTY SSN MAKES FOR THE PRODUCT AND SOFTWARE. TO THE EXTENT ALLOWED BY LAW, NO OTHER WARRANTY APPLIES, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING ANY WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. 6. Out of Warranty Repair. Out of warranty repair is available for fixed fee. Please contact SSN at the numbers provided above to determine the current out of warranty repair rate. End users seeking out of warranty repair should contact SSN as described above to obtain an RMA and to arrange for payment of the repair charge. All shipping charges will be billed to the end user. General Provisions The following general provisions apply to the foregoing Software License and Limited Warranty: 1. No Modification. The foregoing limited warranty is the end users sole and exclusive remedy and is in lieu of all other warranties, express or implied. No oral or written information or advice given by SSN or its dealers, distributors, employees or agents shall in any way extend, modify or add to the foregoing Software License and Limited Warranty. This Software License and Limited Warranty constitutes the entire agreement between SSN and the end user, and supersedes all prior and contemporaneous representation, agreements or understandings, oral or written. This Software License and Limited Warranty may not be changed or amended except by a written instrument executed by a duly authorized officer of SSN. SSN neither assumes nor authorizes any authorized service center or any other person or entity to assume for it any other obligation or liability beyond that which is expressly provided for in this limited warranty including the provider or seller of any extended warranty or service agreement. The limited warranty period for SSN supplied attachments and accessories is specifically defined within their own warranty cards and packaging. 2. EXCLUSION OF INCIDENTAL, CONSEQUENTIAL AND CERTAIN OTHER DAMAGES. TO THE FULL EXTENT PERMITTED BY LAW, IN NO EVENT SHALL SSN BE LIABLE, WHETHER UNDER CONTRACT, WARRANTY, TORT OR ANY OTHER THEORY OF LAW FOR ANY SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES WHATSOEVER, INCLUDING BUT NOT LIMITED TO DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION, PERSONAL INJURY, LOSS OR IMPAIRMENT OF DATA OR BUSINESS INFORMATION, EVEN IF SSN HAS BEEN NOTIFIED OF THE POSSIBILITY OF SUCH DAMAGES. SSNS LIABILITY TO YOU (IF ANY) FOR ACTUAL DIRECT DAMAGES FOR ANY CAUSE WHATSOEVER, AND REGARDLESS OF THE FORM OF THE ACTION, WILL BE LIMITED TO, AND SHALL NOT EXCEED, THE AMOUNT PAID FOR THE HARDWARE/SOFTWARE. 3. General. This Software License and Limited Warranty will be covered by and construed in accordance with the laws of the State of Texas, United States (excluding conflicts of laws rules), and shall inure to the benefit of SSN and its successor, assignees and legal representatives. If any provision of this Software License and Limited Warranty is held by a court of competent jurisdiction to be invalid or unenforceable to any extent under applicable law, that provision will be enforced to the maximum extent permissible, and the remaining provisions of this Software License and Limited Warranty will remain in full force and effect. Any notices or other communications to be sent to SSN must be mailed by certified mail to the following address: Siemens Subscriber Networks 4849 Alpha Road Dallas, TX 75244 U.S.A. Attn: Customer Service

Contents

INTRODUCTION.... 3 Features of the SpeedStream Router.... 3 Network (LAN) Features.... 3 Security Features..... 3 Configuration & Management.... 4 Advanced Router Functions... 4 Minimum System Requirements.... 4 General Safety Guidelines.... 4 PHYSICAL INSTALLATION.... 5 Minimum System Requirements.... 5 Hardware Installation..... 5 Basic Installation Procedure... 5 Installing Line Filters.... 6 Connecting Cables.... 7 OPERATING SYSTEM CONFIGURATION.... 9 Check TCP/IP Protocol Settings.... 9 Checking TCP/IP Settings (Windows 9x/ME)... 10 Checking TCP/IP Settings (Windows 2000).... 11 Checking TCP/IP Settings (Windows XP)... 12 Checking TCP/IP Settings (MAC OS 8.6 through 9.x)... 13 Checking TCP/IP Settings (MAC OSX).... 14 Internet Access Configuration.... 15 For Windows 9x/2000.... 15 For Windows XP.... 15 SPEEDSTREAM ROUTER SETUP.... 16 Before Configuring the Router.... 16 Connecting to the Router.... 17 Selecting PPP Connection.... 18 PPP Login.... 19 Home Window.... 20 CONFIGURING USER PROFILES... 21 Add User Profiles.... 21 Editing User Profiles.... 24 Deleting User Profiles.... 24 CONFIGURING ISP CONNECTION SETTINGS.... 25 WAN Interface.... 25 Host...... 26 DHCP..... 27 Static Routes.... 29 RFC2684..... 30 CONFIGURING NETWORK SETTINGS.... 31 RIP (Routing Information Protocol)... 32 Port Forwarding..... 33 UPnP (Universal Plug and Play).... 34 Bridge Mode..... 35 Server Ports..... 36
4100/4200 Router Users Guide
Dynamic DNS..... 37 CONFIGURING SECURITY FEATURES.... 38 Admin User.... 39 Time Client..... 40 NAT/NAPT Server.... 41 Firewall.... 42 Level..... 43 Snooze.... 44 DMZ..... 45 Filter Rules..... 46 Log..... 52 ADS..... 53 MONITORING ROUTER HEALTH.... 55 Status and Statistics.... 55 System Summary.... 56 System Log.... 56 Diagnostics..... 59 Tools..... 60 Interface Map.... 60 Reboot.... 61 Update.... 62 TROUBLESHOOTING..... 63 Basic Troubleshooting Steps.... 63 Interpreting the LED Display.... 64 Resolving Specific Issues..... 65 POST Failure (red pwr LED).... 65 Contacting Technical Support.... 66 FIREWALL SECURITY LEVELS.... 67

Chapter 1

Introduction
SpeedStream 4200 (Ethernet and USB)
Congratulations on the purchase of the SpeedStream Router with SecureRouteTM SpeedStream Router (Router) is a powerful yet simple communication device for connecting your computer or local area network (LAN) to the Internet. This manual covers the SpeedStream models 4100 and 4200.
SpeedStream 4100 (Ethernet)
Features of the SpeedStream Router
Your Router provides high-speed Internet and corporate network access to homes, networked home offices, and small offices. In addition, if you are working from a branch office, the Router provides a fast and effective means of communicating over a remote LAN with the main office. The Router can also be used to connect the corporate LAN to the Internet over the WAN.

Minimum System Requirements
At a minimum, your computer must be equipped with the following to successfully install the Router. Your Internet Service Provider may have additional requirements for use of their service. Ethernet connection method A network interface card (NIC) that supports Ethernet 10/100Base-T full-/half-duplex. Operating system that supports TCP/IP. Microsoft Internet Explorer or Netscape Navigator versions 5.0 or later. 32 MB RAM Pentium-compatible 166 MHz processor (or faster). 12 MB available hard disk space. Windows 98 or later operating system.

USB connection method

General Safety Guidelines
When using the SpeedStream Router, observe the following safety guidelines: Never install telephone wiring during a storm. Avoid using a telephone during an electrical storm. Lightening increases the risk of electrical shock. Do not install telephone jacks in wet locations and never use the product near water. Do not exceed the maximum power load ratings for the product.

Chapter 2

Physical Installation
This chapter covers the physical installation of the SpeedStream Router.
DSL service and an Internet access account from an Internet Service Provider (ISP). Network cables for the device you intend to connect to the Router. Use standard CAT5 Ethernet cables with RJ45 connectors. TCP/IP network protocol must be installed on all computers. For USB connection to the Router, the following operating systems are supported (if your Router model supports USB): Windows 98, 98SE Windows 2000 Windows ME or XP
Mac OS versions 8.6 through 10.2.4 Note: Your configuration may vary slightly from the instructions and illustrations in this chapter. Refer to your service providers documentation, or contact them with questions regarding your specific configuration.

Hardware Installation

You may position the SpeedStream Router at any convenient location in your office or home. No special wiring or cooling requirements are needed; however, you should comply with the safety guidelines specified in the General Safety Guidelines section.
Basic Installation Procedure
1. 2. 3. 4. 5. 6. Install line filters if necessary. Connect the cables. Install USB drivers if necessary. Configure network settings on your computer. Configure the Router via the Web-based management interface. Reboot the computer if prompted. Whenever you are required to reboot the Router, allow five seconds between turning off the unit and powering it back on.

USB Installation Method (Microsoft Windows)
1. Connect the USB Cable 1) With your computer off, connect the provided USB cable to the USB port on the Router. 2) Connect the other end of the USB cable to an open USB port on your computer. 3) If desired, use standard 10/100 CAT5 Ethernet cables to connect additional computers to the Ethernet ports on the Router. 2. Connect the DSL Cable 1) Connect the DSL cable (resembles a telephone cord) to the DSL port on the Router. 2) Plug the other end of the DSL cable into the phone jack. 3. Connect the Power 1) Connect the power adapter to the rear of the Router. 2) Plug the power adapter into the electrical wall outlet. 3) Flip the power switch to power on the Router. 4) Power on all connected computers. 4. Install USB Driver Software 1) Insert the USB driver CD-ROM into the CD-ROM drive of your computer. 2) When prompted, follow the on-screen instructions to complete the driver installation. 5. Check the LEDs 1) The DSL, USB, and Power LEDs should be lit. You can now configure the TCP/IP settings as detailed in Chapter 3, Operating System Configuration.
USB Driver Installation (Macintosh Systems)
When using the USB installation method on a Macintosh, follow these steps to install the USB drivers:
1. Insert the SpeedStream Installation CD into your CD-Rom drive. 2. 3. 4.
. Open the SpeedStream icon from the desktop. Click Readme.txt to open it. Follow the directions in the Readme.txt file.
You can now configure the TCP/IP settings as detailed in Chapter 3, Operating System Configuration.

Chapter 3

Operating System Configuration
This chapter explains how to configure your computer to work with the Router. To access the Internet through the SpeedStream Router, the TCP/IP protocol must be installed on your computer. If TCP/IP is not already installed on your computer, refer to your system documentation or online help for instructions. Once installed, you should check the TCP/IP protocol settings to make sure they are correct for use with the Router. Once TCP/IP is installed and configured properly, the next step is to configure your computer to use the Router for Internet access by configuring the Web browser to access the Internet via the LAN rather than by a dial-up connection.

9. Enter the user name and password you assigned to the administrator to perform the remaining configuration activities. 10. Click OK. This displays the screen for the menu option you selected. 11. Refer to the following chapters for details on configuring and managing the SpeedStream Router.

Selecting PPP Connection

If you have configured multiple PPP (Point-to-Point) sessions on your computer, the Login window showing the available PPP connections is displayed after you log on using the Administrative User Setup window.
Click the connection you wish use.

PPP Login

If you have configured only one PPP (Point-to-Point) session on your computer, the Login window for that PPP connection is displayed after you log on using the Administrative User Setup window.
1. Front the PPP Login window, enter the Username and Password. 2. To save the settings so you wont be asked for the user name and password in the future, click Save Settings on Connect. 3. To configure additional PPP options, click Show Options. This expands the window to show configurable options for the PPP connection.
4. Specify any desired PPP options from the following: Access Concentrator Enter the name of the access concentrator as provided by your ISP. Service Name Enter the service name provided by your ISP. Auto-Connect on Disconnect If selected, the Router will attempt to login every time the DSL trains if you selected Save Settings on Connect. Idle Timeout (with time value) Select to disconnect the PPP session if the router has had no traffic for a specified amount of time. Enter the time in minutes. (This option cannot be used with Autoconnect.)

Home Window

After initial startup, the Home window is displayed on startup.
In the left navigation pane of the Home window, there are configuration, diagnostic, status and statistic options for the Router. The list of options displayed differs depending on how a user is logged into the system. An administrator has full configuration rights (shown above) so will see a complete set of options, while a user has limited configuration rights and will see the subset specified for that user profile. Refer to the following chapters for information on how to use each of these options. Refer to Chapter 5, Configuring User Profiles, for details on adding, modifying, or deleting user profiles. Refer to Chapter 6, Configuring ISP Connection Settings, for details on setting ISP configuration parameters. This should only be done when instructed by your ISP. Refer to Chapter 7, Configuring Network Settings, for details on configuring network related information. Refer to Chapter 8, Configuring Security Features, for details on adding security to your network. Refer to Chapter 9, Monitoring Router Health, for details on viewing network statistics and connection status.

Bridge Mode

The Router supports two fundamental modes of operation with respect to connectivity between the Local Area Network (LAN) and the Wide Area Network (WAN): bridge/routing mode and bridge mode. The default mode of operation is bridge/routing mode. With bridge/routing mode, the Router provides typical routing functionality between the WAN side and the LAN side. However, all LAN-side interfaces are "bridged." The second mode of operation provides only "bridging" functionality. This applies to both WAN-to-LAN connectivity as well as to all LAN-side interfaces. Point-to-Point (PPP) connections are not available under the bridge mode of operation. Important! If you switch to Bridge mode, you will lose access to the Web management interface and can only return to Router mode by resetting the Router to factory defaults. To change to bridge mode: 1. Select Setup>Bridge Mode from the left navigation pane of the Web interface. This displays the Change to Bridge Mode window.

2. Click Apply.

Server Ports
Common applications such as HTTP (Web site traffic), FTP, and Telnet use pre-defined incoming port numbers for compatibility with other services. If you wish to change the ports used by these applications you may do so using this option. This feature is recommended for use by advanced users only. To configure the server port option: 1. Select Setup>Server Ports from the left navigation pane of the Web interface. This displays the SpeedStream Gateway Server Ports window.
2. Optionally, type a port number in the HTTP box. The default port for this field is 80. 3. Optionally, type a port number in the FTP box. The default port for this field is 21. 4. Optionally, type a port number in the Telnet box. The default port for this field is 23. 5. Click Apply. This displays the Your settings have been saved window. 6. Optionally, click Reboot if you wish for the settings to immediately be implemented. The system responds by restarting your Router.

Dynamic DNS

Use the dynamic DNS advanced option to set up Dynamic DNS. Dynamic DNS translates IP addresses into alphanumeric names. For example, an IP address of 333.136.249.80 could be translated into siemens.com. To use the DDNS service, you must register for the service. You can register from the following web page: www.dydns.org/services/dydns. Once registered, you must set up your DNS data on the Router. Once this is done, users can connect to your servers (or DMZ computer) from the Internet using your Domain name. Refer to the section in this document titled DMZ for more information on DMZs. To set up Dynamic DNS on the Router: 1. Select Setup>Dynamic DNS from the left navigation pane of the Web interface. This displays the Set Up Dynamic DNS window.

2. Select the Enable option under Dynamic DNS Client. 3. Type the name provided to you by www.dydns.org in the Service Username box. 4. Type your www.dydns.org password in the Password box. 5. Type the domain or host name provided by www.dydns.org in the Host Name 1 box. 6. Optionally, if you have more than one domain or host name, type it in the Host Name 2 box. 7. Click Apply. The system responds by registering your domain or host name to www.dydns.org.

Chapter 8

Configuring Security Features
The Router provides broad security measures against unwanted users. Security also allows for the configuration of the firewall, administrator password, (NAT) Network Address Translation, and DMZ (Demilitarized Zone) configuration. The security options are listed below. Admin User Time Client Manage administrator login name and password.
Configure network-based date and time functionality. An accurate date and time is of use when logging system and firewall events, and is a requirement for some firewall functionality (e.g., ICSA-compliant firewall operation). Configure and control IP addressing on the Local Area Network through either NAT or NAPT. Configure and control the internal firewall. Many of these features require a thorough understanding of networking principles and firewall operations. The firewall options are listed below.

NAT/NAPT Firewall

Monitoring Network Health

Admin User

The Administrator profile controls the requirements for logging into the Web interface and accessing configuration pages, as well as defining the administrator login name and password. To configure administrator settings: 1. Select Setup>Admin User from the left navigation pane of the Web interface. This displays the Gateway Administrator Setup window.
2. Specify a user name for the administrator. You may accept the default user name, admin, or enter a new user name in User Name. The user name is case-sensitive. 3. Enter a password in New Password; then enter the same password in Confirm New Password. The password field is case-sensitive. 4. Select a login security level from one of the following: Require admin login to access entire Web site Before you can access any screen in the Web interface, you must log in with your network user name and password. (Security level = High) Require admin login to access configuration pages Before you can access any screen in the Web interface that allows you to make configuration changes, you must log in with your network user name and password. (Security level = Medium) Do not require admin login After you log in for the first time, you will not be required to log in again at any screen. (Security level = Low) 5. Click Save Settings.

Time Client

An accurate log timestamp is one of the requirements of the ICSA Labs firewall criteria (ver 3.0a). In order to maintain accurate timestamps in each log message, the firewall implements a Simple Network Time Protocol (SNTP) client. This allows the system to automatically synchronize its date and time with Coordinated Universal, the international time standard. The system date and time are set and corrected automatically via the designated server(s). To configure the time client: 1. Select Setup>Time Client from the left navigation pane of the Web interface. This displays the Time Client Configuration window.
2. Select Enable from Enable Time Client. 3. In Primary Server IP Address, enter the IP address of the primary server to use as the time server (a well-known Network Time Protocol Server). 4. In Secondary Server IP Address enter the IP address of the secondary server to use as the time server if the router does not receive a response from the primary server. 5. In Select Time Zone, enter the time zone in minutes from UTC. 6. Click Apply.

NAT/NAPT Server

Hosts located on a Local Area Network (LAN) are often required to use private IP addresses as opposed to public IP addresses. Private IP addresses, however, are not known on the public Wide Area Network (WAN). In order to expose LAN-side hosts assigned private IP addresses to the public WAN, the Router can be configured to use one of two methodologies: Network Address Translation (NAT) or Network Address Port Translation (NAPT). NAT can expose a single LAN-side host to the WAN; NAPT can expose multiple LAN-side hosts. NAT/NAPT functionality can be individually configured for each WAN connection. To configure NAT/NAPT functionality: 1. Select Setup>NAT/NAPT from the left navigation pane of the Web interface. This displays the NAT/NAPT Configuration window showing the WAN Interface connections.
2. Select one of the following for the desired connection: NAT & NAPT Disabled Disable both NAT and NAPT in order to, for example, to set up static routes assigned by your ISP. NAT Only Enabled Enable NAT and specify the destination IP address for incoming packets. Depending on your configuration, NAT is sometimes enabled by default. NAPT Only Enabled Use NAPT only to handle multiple addresses based on port forwarding rules. NAT&NAPT Enabled Some service providers support a concurrent NAT/NAPT. Under this configuration, a single WAN interface may support multiple NAT connections with each NAT connection again exposing a single LAN-side host through a single WAN-side public IP address. Through either NAT or NAPT, the Router ensures that the LAN-side host is known to the WAN side only through the public IP address of the Routers WAN-side connection. The hosts actual private IP address remains unknown to any WAN-side hosts or servers. 3. Click Apply when you have finished configuring all desired connections.

2. Select one of the following DMZ enable options: Disable DMZ The firewall is not bypassed. Enable DMZ with this Host IP address The firewall is bypassed through an IP address typed in the box next to this field. Enable DMZ with this Host IP address The firewall is bypassed through an IP address that is selected from the Select Host drop-down menu next to this field. Select the desired host from the drop-down menu. 3. Select one of the following time element options: Make Settings Permanent DMZ settings are permanent unless changed by the administrator. Make Settings Last for DMZ settings last for only the time (in minutes) entered in the box next to this option. 4. Click Apply.

Filter Rules

If the firewall security level is set to Custom, this features allows you to specify a unique set of firewall rules for handling inbound and outbound traffic customized to the users specific requirements. In this mode of operation the firewall provides an extensive amount of configurability. As such, only advanced users should employ this feature. Rules can be filter-based on any of the following: Source and destination router interfaces IP protocols Direction of traffic flow Source and destination network/host IP address Protocol-specific attributes such as ICMP message types Source and destination port ranges (for protocols that support them), and support for port comparison operators such as less than, greater than, and equal to. Rules can specifically allow or deny packets to flow through the router. Default actions taken when no specific rule applies can also be configured. To define inbound and outbound IP filter rules: 1. Select Setup>Firewall>Filter Rules from the left navigation pane of the Web interface. This displays the Firewall IP Filter Configuration Wizard window.
2. Do one of the following: To add new IP filter rules as you define them, click Add New IP Filter Rule. This displays the Basic Rule Definition window. To clone IP filter rules already defined, click Clone IP Filter Level. This displays the Clone Rule Definition window. Once cloned, you can modify the existing rules.
Creating Custom IP Filter Rules
To add a new rule: 1. Type up to a five digit numeric value in the Rule No box to uniquely identify the rule. 2. Select either Permit or Deny from the Access drop-down menu. Select Permit to allow the rule and Deny to prohibit the rule. 3. Select either Inbound or Outbound from the Direction drop-down menu. Inbound refers to data coming into the Router, while Outbound refers to data transmitted from the Router. 4. Optionally, select the Disable stateful inspection for packets matching this rule to prevent the firewall from creating a stateful inspection session for packets matched on this rule. 5. Optionally, select the Create a log entry for packets matching this rule. When selected, an entry is placed in the log file when packets match this rule. 6. Click Next. This displays the Source & Destination Definition window.

ICMP Options Window

The ICMP Options window is displayed if you select ICMP protocol from the Protocol Definition window.
1. Do one of the following: Select any of the ICMP options you wish to filter. Select the All Types checkbox to filter all options. 2. Click Next. 3. Click Finish.

Clone IP Filter Rules

The Clone Rule Definitions window is displayed when you select Clone IP Filter Level from the Firewall IP Configuration Wizard window. Using this option, you can clone either high or low level rules and modify them according to your needs. If you choose to clone IP filter rules, the rules already defined in the Rule Definition table are discarded. To clone IP filter rules: 1. Click Clone IP Filter Level from the Firewall IP Filter Configuration Wizard window. This displays the Clone Rule Definition window.
2. Select one of the following from the Select preconfigured firewall level for cloning drop-down menu. Low Clones low-level IP filter rules. Medium Clones medium-level IP filter rules. High Clones high-level IP filter rules. 3. Click Apply. This displays the Firewall IP Filter Configuration Wizard window with the selected rule set showing in the Rule Definition table. 4. Disable or delete any rule as desired.
Firewall Logging displays attempts (both failures and successes) to access data through he firewall. Firewall log entries are defined on the Firewall Settings Configuration screen found under the Security menu. To view the firewall log, select Setup>Firewall>Log from the left navigation pane of the Web interface. This displays the Firewall Log window.
The firewall provides an advanced Attack Detection System (ADS) that may be used to detect and identify various types of attacks initiated on the Wide Area Network (WAN). The system has the capability to detect such attacks the moment they start and to protect the Local Area Network (LAN) from such attacks. If the Attack Detection System is enabled, the SpeedStream Router provides protection against the most common hacker attacks that attempt to access your computer/network from the Internet. Intrusion attempts can also be logged to provide a record of attempts and their source (when available). To enable and configure the attack detection feature: 1. Select Setup>Firewall>ADS from the left navigation pane of the Web interface. This displays the Firewall Attack Detection System window.
2. Select Enable Attack Detection. 3. Select the Filter checkbox for each event in the list you want to filter or, if you want to filter all events, select the Filter All checkbox. This provides maximum protection against malicious intrusion from outside your network. 4. Select the Log checkbox for each event in the list you want to log or, if you want to log all events, select the Log All checkbox. When logging is selected for a particular offending packet, the ADS will write an entry to the firewall log once a minute for as long as the attack persists. This shows that a long-term attack is taking place without completely filling up the firewall log with entries for every single packet. 5. Click Apply. Below is a description of each event that can be monitored. Same Source and Destination Address An outside device can send a SYN (synchronize) packet to a host with the same source and destination address (including port) causing the system to hang. When the receiving host tries to respond to the source address in the packet, it ends up just sending it back to itself. This packet could ping-pong back and forth over 200 times (consuming CPU resources) before being discarded. Broadcast Source Address An outside device can send a ping to your Router broadcast address using a forged source address. When your system responds to these pings, it is brought down by echo replies.

Status and Statistics

You can display statistics for the Internet, Home Networking, Security, and Logging. System Summary System Log Basic descriptive information that identifies the router. Displays a record of all system activity, including what actions were performed, what packets were dropped and what packets were forwarded. Displays status information about the ATM connection. Displays status information about the DSL connection. Displays status information about the Ethernet connection. Displays status information about the USB connection. Displays status information about the current routing table.
ATM/AAL DSL Ethernet USB Routes

System Summary

The System Summary window provides basic descriptive information that identifies the router, system type, current software and firmware versions, the MAC address (unique device identifier), and the status of currently configured connections. Connection information includes the identification and current status of configured point-to-point (PPP) and static connections. Select Status and Statistics>System Summary from the left navigation pane of the Web interface to view this information.

System Log

The System Log window displays a record of all system activity, including what actions were performed, what packets were dropped and what packets were forwarded. This information allows you to make informed decisions about the need to add new filter rules. The System Log contains a maximum of 200 entries; each entry may contain a maximum of 200 characters. Select Status and Statistics>System Log from the left navigation pane of the Web interface to view the System Log window.
To update the display, click Refresh. To clear the log, click Clear Log. To change the events displayed in the log, modify the Log Display Options, then click Apply.
ATM Statistics View status and statistical information for the WAN-side Asynchronous Transfer Mode (ATM) network connection. WAN-side connection to the service provider is based on an Asynchronous Transfer Mode (ATM) network connection. In addition, statistical information is provided for each Virtual Circuit (VC) configured under the ATM Adaptation Layer (AAL). Select Status and Statistics>ATM/AAL from the left navigation pane of the Web interface to view ATM/AAL statistics. This window displays ATM connection status, uptime, and transmit/receive data, VPI/VCIs and related data for each circuit DSL Statistics View status and statistical information for the Digital Subscriber Line (DSL) when the physical WAN-side connection to the service provider is achieved through a DSL line. Statistical information is accumulated over periodic intervals and may be displayed for up to a 24 hour period. Select Status and Statistics>DSL from the left navigation pane of the Web interface to view DSL statistics. This displays information about the DSL connection.

Ethernet Statistics View status and statistical information for LAN-side Ethernet connectivity. Pay special attention to the status (up or down) reported for each Ethernet port to verify that each cable is connected properly and detected by the Router. Select Status and Statistics>Ethernet from the left navigation pane of the Web interface to view Ethernet statistics.
USB Statistics View status and statistical information for LAN-side USB connectivity. Pay special attention to the status (up or down) reported for each USB port to verify that each cable is connected properly and detected by the Router. Select Status and Statistics>USB from the left navigation pane of the Web interface to view USP statistics.
Routes View all IP routes currently known by the Router. Both static and dynamic routes are shown along with their respective netmask, Router, and the corresponding interface. Select Status and Statistics>Routes from the left navigation pane of the Web interface to view the current routing table, which contains the data pertaining to all currently known static and dynamic IP routes

Diagnostics

The Router provides a considerable amount of diagnostic functionality for testing connectivity on both the Local Area Network (LAN) and the Wide Area Network (WAN). This includes LAN-side connections within the home and WAN-side connections to the carrier, service provider and Internet. WAN-side testing may be performed for each of the WAN-side connections currently configured. This data is commonly requested by technical support to assist in troubleshooting. Note: This option may not be available on your Router configuration. To run diagnostics: 1. Select Diagnostics from the left navigation pane of the Web interface. This displays Diagnostics window.
2. Select the connection you want to test from the Connection to Test drop-down menu. 3. Click Run Diagnostics. The test results display under the Results column. If one of the following failed, contact your Service Provider. Connections at the Carrier Independent Service Provider Internet Connectivity 4. If a test displays a FAIL status for any other reason then listed above, click Run Diagnostics again to confirm the failure. 5. If the test still displays a FAIL status, check all connections and passwords; then click Run Diagnostics again. 6. If the test still displays a FAIL status, contact your Service Provider for further assistance.

Contacting Technical Support
If you still cannot resolve the issue after following the recommended troubleshooting procedures, contact Efficient Networks Technical Support. Telephone: Fax: (972) 852-1000

(972) 852-1001

Email: usa.800siemens@icn.siemens.com Internet: http://www.icn.siemens.com/subscriber

Appendix B

Firewall Security Levels
Note: All applications and protocols are conditionally allowed IN if the outbound session was initiated locally and allowed OUT. Security Application/ Protocol High In Abuse.Net Age of Empires AOL AOL IM Asherons Call Baldurs Gate II BattleNet Buddy Telephone Bungie.Net Calista IP Telephone Counterstrike CUSeeMe Delta Force Descent II/III Diablo Diablo 2 Dialpad DirectPlay DNS Doom Dune 2000 EverQuest FTP GNUtella Out Medium In Out Low In Out NAPT Off In Out ICSACompliant In Out
The following table shows the security of each mode of the firewall for specific applications and protocols.
Security Application/ Protocol High In H.323 Half Life Heretic II Hexen II HTTP HTTPS ICMP ICQ 2000 ICU II IGMP IPSec multi-session IPSec single-session IRC Kali L2TP MechWarrior 4 Mplayer MS Netmeeting MSN Gaming Zone MSN Messenger Myth Napster Need for Speed Net2telephone Netshow Client NNTP NTP PCAnywhere Ping POP3 Out Medium In Out Low In Out NAPT Off In Out ICSACompliant In Out
Security Application/ Protocol High In PPPoE PPTP multi-session PPTP single-session Quake Arena Quake II Quicktime 4 Rainbow Six Real Audio Real Video Red Alert II Rogue Spear RTSP SIP SMTP Soldier of Fortune SSH Starcraft T.120 Telnet Tiberian Sun Traceroute Ultima Online Unreal Tournament VNC Warcraft Windows Media Player XDM Yahoo Messenger Out Medium In Out Low In Out NAPT Off In Out ICSACompliant In Out
Siemens Subscriber Networks
4849 Alpha Road Dallas, TX 75244 USA (972) 852-1000 Tel (972) 852-1001 Fax
usa.800siemens@icn.siemens.com http://www.icn.siemens.com/subscriber

Siemens SpeedStream 4200 ADSL Modem Install Guide.
SingTel Optus Pty Limited ABN 833 208

1273975 01/06

Your Optus Broadband Service
Make a note of your details here Account Number Username Password

Contents

Introduction Using the self-installation CD for your PC Install line filters Connecting your SpeedStream 4200 ADSL Modem Windows configuration procedures Macintosh configuration procedures Configure your modem Troubleshooting System requirements Security Managing your Optus DSL account Glossary 18 19

1. Introduction

Congratulations on selecting the Optus DSL Service. The Siemens SpeedStream 4200 ADSL modem supplied by Optus has been customised by Siemens for optimal performance on the Optus DSL Broadband service. Throughout this guide the name Optus DSL will be used to refer to both Optus DSL and Optus DSL Direct Broadband services. The simplest way to install and configure your modem for the Optus DSL Broadband service is to follow the step by step instructions on the self-installation CD. Note: It is important to note that you should not connect your modem before running the self-installation CD. This booklet supports the Optus self-installation CD which will have your new service up and running in minutes.
2. Using the self-installation CD for your PC
The self-installation CD contains simple step by step instructions for installing your modem. It also installs and configures all the software you will need to connect to your Optus DSL Broadband service. Note: The self-installation CD is not compatible with Macintosh software. Macintosh users should refer to Section 6 on how to configure their Macintosh to run with Optus DSL. The software that will be installed includes:
A USB modem driver customised for use on the Optus DSL Broadband service The Optus DSL Desktop Service Centre The latest Optus customised Internet Explorer web browser Outlook Express set up as your primary Optus email account A customised desktop icon for instant browsing A Connection Guide for troubleshooting An uninstall wizard

1.1 Before you begin

Check you have received the following items with your Optus DSL Starter Kit:
Optus CD-ROM SpeedStream 4200 ADSL Modem Power supply
To install and configure your modem using the self-installation CD 1. Quit all other open applications. 2. Insert the Optus DSL Broadband self-installation CD into your computers CD ROM drive. 3. When the Main Menu appears select DSL Installation and follow the simple step by step instructions. 4. If your PC has sound, ensure it is turned up. When the CD is finished you will automatically be connected to the Optus DSL Broadband service.

2 x line filters

USB cable
RJ-45 Straight-through Ethernet cable RJ-11 DSL cable
It is also possible (though not recommended) to manually configure your modem. This can be done using a web browser to access the management software imbedded in the modem. If you have followed the instructions on the self-installation CD and have connected the line filters, (refer to section 3) you will already be connected to the Optus DSL Broadband service and can start surfing the Net. The rest of the information in this booklet is for your reference only.

INTRODUCTION

USING THE SELF-INSTALLATION CD FOR YOUR PC

3. Install line filters

Devices such as fax machines, caller ID boxes or phones that share the same phone line as your DSL account require a line filter, which prevents noise from disrupting the DSL signal on the phone line. For your convenience, Optus has provided you with two line filters. A filter must be installed on each of the telephony devices that share the same telephone line as your Optus DSL Broadband service. These include:
4. Connecting your SpeedStream 4200 ADSL Modem
The SpeedStream 4200 ADSL Modem may be connected to either an existing USB port or an Ethernet port on your computer. If you choose to attach it via the Ethernet interface, it is only necessary to complete the steps in section 4.1. Otherwise, proceed directly to section 4.2 for USB installations.
Telephones Fax machines Dial-up modems Answering machines Any other device connected to your DSL-enabled telephone line such as Foxtel, Optus TV featuring FOXTEL Digital, or Austar.
4.1 Ethernet installation method
You will need to install an Ethernet adapter if your computer does not already have one installed. Refer to your Ethernet adapter manufacturers documentation for complete installation instructions. 1. Connect the Ethernet cable (RJ-45) to the Ethernet port on the SpeedStream 4200 ADSL Modem (yellow port). 2. Connect the other end of the Ethernet cable to the Ethernet port on your computer. 3. Plug the DSL cable (RJ-11) into the DSL port on the SpeedStream 4200 ADSL Modem (grey port). 4. Plug the other end of the DSL cable into the phone socket. 5. Plug the power adapter into the power outlet and connect it to the SpeedStream 4200 ADSL Modem (black port). 6. Ensure your SpeedStream 4200 ADSL Modem is powered on (power switch located on right side of back panel).

Place the filter on your telephone line by:
Unplugging the cord from your telephone Connecting the filter between the phone and the telephone wall socket as illustrated below.
If you have a home monitoring service (Back to Base) that uses the same phone line as your DSL service, it is your responsibility to arrange for a central filter to be installed in your premises. If you do not do this, you will experience problems with your DSL connection and your monitoring service. If you require further information about central filters we would encourage you to contact an Austel approved technician in your area. Alternatively, please call Optus Customer Support who can provide you with a list of organisations that can install one.

INSTALL LINE FILTERS

CONNECTING YOUR SPEEDSTREAM 4200 ADSL MODEM
4.2 USB installation method
1. Connect the USB cable to the USB port at the rear of the SpeedStream 4200 ADSL Modem (blue port). 2. Connect the other end of the USB cable to the USB port on your computer. 3. Plug the DSL cable (RJ-11) into the DSL port on the SpeedStream 4200 ADSL Modem. 4. Plug the other end of the DSL cable into the phone socket. 5. Plug the power adapter into the power outlet and connect it to the SpeedStream 4200 ADSL Modem (black port). 6. Ensure your SpeedStream 4200 ADSL Modem is powered on (power switch located on right side of back panel).
Step 2 Select the Network and Internet Connections icon. Note: If your Control Panel is set to Classic View, please click Switch to Category View.
Step 3 Select Network Connection.
Step 4 Double click on Local Area Connection.
5. Windows configuration procedures
Step by step instructions are provided for each of the supported Windows operating systems (Windows 98 /Me , Windows 2000 and Windows XP ).

5.1 Windows XP

Step 1 Click Start then Control Panel.
Step 5 Select Properties.
WINDOWS CONFIGURATION PROCEDURES
Step 6 Select Internet Protocol (TCP/IP) and click on Properties.
6. Macintosh configuration procedures Ethernet only
Please ensure that you are running OS9 or above before commencing. Macintosh users must set up their initial Internet connection via Ethernet. If you wish to connect via a USB connection you will need to download the relevant USB drivers from http://www.optusnet.com.au/drivers/mac/siemens_4200/
Step 7 Select Obtain an IP address automatically. Select Obtain DNS server address automatically. Click OK and close all open windows.
Note: These instructions are provided as a guide only. Optus currently does not support Macintosh software and is unable to assist Macintosh users with their broadband installation.

6.1 Macintosh OSX

Step 1 Click Apple then select System Preferences.

5.2 Windows 2000

Step 1 Click Start then select Settings then Network and Dial-up Connections. Step 2 Right click on Local Area Connection, then select Properties. Step 3 Select Internet Protocol (TCP/IP), then select Properties. Step 4 Select Obtain an IP address automatically. Select Obtain DNS server address automatically. Click OK and exit out of the Control Panel. Step 5 Select Yes to restart your computer. Step 2 Select the Network icon under the Internet & Network section.

5.3 Windows 98/Me

Step 1 Click Start select Settings then click Control Panel. Step 2 Double click on the Networks icon. Step 3 Select TCP/IP and click on Properties. Step 4 Select the IP Address tab. Select Obtain an IP address automatically radio button and click OK. Click OK and close all open windows. Step 5 Select Yes to restart your computer.
8 WINDOWS CONFIGURATION PROCEDURES MACINTOSH CONFIGURATION PROCEDURES 9
Step 3 Select the following from the Show drop-down menu:

Builtin Ethernet

7. Configure your modem
To configure your modem settings you must now access the configuration manager using your web browser. This is done by entering the IP address in the address bar of the browser window as follows. Step 1 Enter http://10.1.1.1 (Default IP address of the Optus Supplied Siemens SpeedStream 4200) to access the modem configuration software. You may wish to add this page to your Favorites for easy
Step 4 Select Using DHCP Server from the Configure IPv4 drop-down menu. Step 5 Click Apply Now and exit out of System Preferences window.

6.2 Macintosh OS9

Step 1 Click Apple and then select Control Panels and then TCP/IP. Step 2 Select the following from the Connect via drop-down menu:
Ethernet or Ethernet builtin
access later. The modem System Summary screen will appear.
Step 3 Select Using DHCP Server from the Configure drop-down menu. Step 4 Close window and save changes. Step 2 On the left side of the webpage click Setup. An expanded set of options will be displayed. Click PPP from the available options.
Replace the default username (john_citizen@optusnet.com.au) with the username Optus

provided you.

In the password field replace the default password with the password Optus provided you.
Note: You will find your Optus username and password on the letter you received with your self-installation kit.
Save these details by clicking the Save Settings button.
10 10MACINTOSH CONFIGURATION PROCEDURES SELECTIVE CALL FEATURES

SELECTIVE CALL FEATURES CONFIGURE YOUR MODEM
Step 3 You will be prompted to disconnect and reconnect the Optus DSL service. Once you have clicked on the link, you will return to the system summary page.
Step 4 On the left side of the webpage, click Setup again.
Click Mode from the available options. Confirm that Optus Bridge is the selected operation mode.
Click the Disconnect button to disconnect the modem. The text on the button will change to Connect.
If Optus Bridge is not selected click the radio button next to Optus Bridge to select it. Click Apply.
Step 5 Click Reboot to restart the modem using your saved settings.
Click the Connect button to reconnect the modem to the Optus DSL service. Step 6 Once the modem has rebooted and the ADSL connection has been successfully established the DSL LED indicator light will remain green. Your modem is now connected to the Optus DSL service.

CONFIGURE YOUR MODEM

8. Troubleshooting
If you are experiencing connection problems, switch your modem off then on again. If this fails to fix the problem see the below table for possible reasons.

9. System requirements

Your computer will need to have a CD-ROM drive and meet the basic system requirements below.
Operating System* CPU RAM Free Disk Space** Network Device

Blinking Green

Blinking Red/Green
Windows XP Power Power not applied Normal system operation N/A Self-test failure if red for more than 30 seconds Flash write in progress
Pentium 233MHz, equivalent or higher
Available USB or Ethernet port

Windows 2000 , Me and 98

Pentium, equivalent or higher

Ethernet

Power not applied Ethernet link not connected Power not applied DSL signal not detected Power not applied No USB connection Power not applied No PPP connection

Ethernet link connected

Ethernet traffic flowing in either direction The modem is establishing the best possible speed on the line USB user traffic flowing in either direction
*Operating Systems must be English language versions. **Disk space must be on the primary disk drive only
DSL line has established a connection and is ready to receive data Windows 95 NT Windows 2000 Server and Apple Macintosh operating systems are , ,
not supported by the self-installation CD or by Optus DSL Customer Service. You may

N/A N/A

configure these operating systems manually to use the Optus DSL service; however Optus DSL cannot offer any technical assistance with set-up or troubleshooting.
Optus DSL runs on your standard phone line and normally requires no special cabling in
your premises (some telephone products and services are incompatible with DSL, such

USB connected

as: Priority Assistance, Auxiliary Numbers associated with FaxStream Duet and EasyCall Multiple Number services, ISDN, and some answering and fax machine models. A full list can be found at www.optus.com.au/optusnetdsl
Your DSL modem and telephone filters must be Optus Network approved.

Activity

PPPoE session established
Establishing PPPoE session
The list of approved modems and filter specifications can be found at www.optus.com.au/optusnetdsl
An SVGA 800x600x256 or higher display is required.

TROUBLESHOOTING

SYSTEM REQUIREMENTS

10. Security

Why security matters
The Internet is your gateway to the world and while security issues shouldnt stop you enjoying your Internet experience, you need to ensure that you take precautions to protect your computer and your information.

How to protect yourself

Optus offers all its Internet customers a free Optus email SPAM filter. There are also a range of Internet security software packages available. Install firewall software A firewall will help protect your computer from hackers, Trojans, Spyware, usage theft and other threats. Popular firewall brands that you may like to consider include McAfee Personal Firewall Plus, Nortons/Symantec, Zone Alarm Pro, or Windows Firewall. Install anti-virus software Anti-virus software also provides added protection for your computer against Trojans, Spyware and other threats. There are several popular brands around, including Norton Internet Security and Panda Antivirus.

What to watch out for

Its important that you remain aware of the ways hackers try to access computers. These can include: Non-genuine websites These authentic looking websites appear to offer legitimate goods and services (also known as phishing). However, these sites are designed to obtain information, with no intention of providing you with the goods or services you paid for. Hoax emails Hoax emails appear to come from legitimate companies using a variety of false reasons. In most cases, you will be asked to confirm your account details, passwords or credit card details by either return email or via a web page. It is highly unlikely that the company would ever need you to confirm your confidential information. However if you are unsure, you should contact the company directly. SPAM SPAM is electronic junk email and in most cases is just annoying, time consuming, often offensive and wastes your data allowance. You should never reply to SPAM, even if the message offers you an opt-out link. Worms and other viruses Viruses are software applications that infect computers. Worms are viruses that spread themselves across a network. Once installed, a Worm usually uses the addresses in your email Contacts list to spread itself to your friends computers. Trojans and Spyware A Trojan is a piece of software that usually hides within a legitimate-looking application or utility to gain entry into your computer and provide hackers with a means of easy access to your computer. Spyware is similar to a Trojan, although usually less damaging.

16 SECURITY

SECURITY
11. Managing your Optus DSL account

Desktop Service Centre

The Desktop Service Centre, which can be accessed via the Optus DSL icon located on your desktop, allows you to manage your Optus DSL Internet experience from one central location. Its functions include connecting and disconnecting from the Internet, changing your password and performing diagnostic tests. Plus, it provides shortcuts to the most frequently used areas of the Optus portal including:
My Usage My Account Member Services Service Status Help

12. Glossary

ADSL The most widely available form of DSL Internet, A is for asymmetrical, DSL is for digital subscriber line. Browse To move around the Internet between websites. Cookie A small text file created on your computer when you visit some websites. A cookie identifies your computer to the website and lets the site know that you have been there before. Data The information that is collected, stored or transmitted between a computer and the Internet. Some examples of data that is downloaded to a users computer when they use the Internet are: webpages, emails, digital photos, audio files, audio streams, online videos etc. Data is measured in Megabytes (MB) and Gigabytes (GB). Download The process of viewing and receiving files from the Internet to your computer, eg. Browsing webpages, receiving emails or downloading music video files. Download allowance/download limit The amount of data you can download from the Internet without incurring additional charges or being speed limited (throttled). Download speed The speed at which you download or receive information from the Internet. Drop out To lose your Internet connection due to a problem on your phone line. Email Electronic mail the transmission of messages in electronic form. Excess usage Excess usage is where your ISP charges a fee when you exceed your download limit. Firewall A piece of software (or hardware) that blocks unauthorised traffic between your computer and the Internet. ISP Internet Service Provider any organisation that supplies an Internet service. kbps Kilo-bits per second (1000 bits per second). A measure of the speed at which data travels.
The Internet Usage Meter My Usage
The Internet Usage Meter helps you to monitor your usage of your Optus DSL Service. It allows you to view, how many Megabytes (MB) of data you have used relative to your plans monthly Data Allowance. Our systems update the Internet Usage Meter at regular intervals (at least every 15 minutes). It can be located at https://memberservices.optusnet.com.au/myusage/ or via the Desktop Service Centre.
Why should you use the Internet Usage Meter?

Your Optus Broadband plan allows you a set amount of data per month (your Data Allowance). If you use in excess of 100% of your data allowance your service speed will be reduced applicable to your plan. The Internet Usage Meter will help you evaluate your usage of the service and will let you know how much data you have left at any given time.

Changing your password

You can change your password at any time by selecting the Change Password link in the Desktop Service Centre or by visiting Change Password at https://dsl-myaccount.optusnet.com.au/user_management/change.html
MANAGING YOUR OPTUS DSL ACCOUNT

GLOSSARY

Mbps Mega-bits per second (1 million bits per second). A measure of the speed at which data travels. Megabytes (MB) A measure of data, used to indicate file size etc. 1000MB = approximately 1GB (gigabyte) or 1 million bytes. Online To be connected to the Internet. Online gaming To participate in playing games in real time with others via the Internet. PPPoE (Point-to-Point Protocol over Ethernet) A specification for connecting users on an Ethernet network to the Internet by using a broadband. SPAM Unsolicited junk email on the Internet that is usually unwanted. Throttling Throttling is where the ISP reduces the connection speed once a plans data limit is reached, rather than charging customers for excess usage. In most cases speed is reduced to speeds equivalent to a dial-up Internet connection. Traffic Data transmitted across an Internet connection or computer network. Upload The process of sending files from your computer to another computer over an Internet connection, eg. sending email. URL Universal Resource Locator an address on the world wide web. USB port Universal Serial Bus port an external interface for connecting devices to your computer eg. scanners, printers etc. Virus A program that performs some undesired action on your computer and generally propagates itself to other computers. Virus scanner A program that scans your computer for known viruses. WebMail An email service that allows you to view, receive and reply to your email from any Internet connected computer anywhere in the world.