UPnP on Windows XP Systems.. 192 Reset to Factory Defaults... 194

About this Users Guide

Used symbols
The following symbols are used in this Users Guide: A note provides additional information about a topic. A tip provides an alternative method or shortcut to perform an action.

Terminology

A caution warns you about potential problems or specific precautions that need to be taken.
Generally, the SpeedTouch605(i), SpeedTouch608(i), SpeedTouch608(i) WL and SpeedTouch620(i) will be referred to as SpeedTouch in this Users Guide.
Documentation and software updates
THOMSON continuously develops new solutions, but is also committed to improve its existing products. For suggestions regarding this document, please contact documentation.speedtouch@thomson.net. For more information on THOMSON's latest technological innovations, documents and software releases, visit us at: www.speedtouch.com.

Chapter 1

Getting to know your SpeedTouch
1 Getting to know your SpeedTouch

Introduction

With the SpeedTouch605(i) and SpeedTouch608(i) Business DSL Routers and the SpeedTouch608 WL(i) and SpeedTouch620(i) Wireless Business DSL Routers you can build a secure small (home-)office network, seamlessly connecting wired and wireless devices and surf the Internet at high speed, all combined in one device.

Installation

For more information on how to set up, install and wire your SpeedTouch and set up Internet connection, refer to the Installation and Setup Guide.
Configuration Before you begin
This Users Guide will help you configuring your SpeedTouch.
Before connecting the SpeedTouch, please read the SpeedTouch Quick Installation Guide and the Safety Instructions and Regulatory Notices.
1.1 SpeedTouch LED Behaviour

Front panel LEDs

The SpeedTouch is equipped with a number of LEDs on its front panel, indicating the state of the device during normal operation.

The following table shows the meaning of the different LEDs.

Indicator Name

Description Colour

Green Red Orange Off

Solid on Solid on Solid on Power on, normal operation Power on, self-test failed, indicating device malfunction Bootloader active Power off Blinking Solid on Ethernet activity Ethernet connection, no activity No Ethernet connection Blinking Solid on Wireless activity, WPA encryption No wireless activity, WPA encryption Wireless activity, WEP encryption No wireless activity, WEP encryption Wireless activity, no security No wireless activity, no security Wireless client registration phase WLAN disabled

Ethernet

Off WLAN Green

Blinking Solid on

Red/ green Off

Toggling

Plug-in
Blinking Solid on Data passing through the cardbus Cardbus is connected, no data passing through Cardbus is not connected Blinking Solid on ISDN activity ISDN line connected, no activity No ISDN line Blinking Solid on Pending DSL line synchronisation DSL line synchronised No DSL line Blinking Solid on Internet activity Internet connectivity, no activity Internet connection setup failed No Internet connection

Off ISDN Green

Off DSL Green

Off Internet Green

Red Off

Solid on

Ethernet LEDs
A LED may be provided per Ethernet port to indicate link integrity (or activity). Depending on the SpeedTouch product you are using, a second LED (A) may be provided to indicate the 10/100Base-T selection:
A (Optional) Integrity (Activity)

Description LED Status

Off Solid on Blinking No connection on this port Ethernet link up Data is flowing from/to this port 10Base-T Ethernet connection 100Base-T Ethernet connection

10/100Base-T

Off Solid on
1.2 Accessing your SpeedTouch

Access methods

Your SpeedTouch is accessible in one of the following ways:

Access Method

Web browser

Can be used to

Configure your SpeedTouch via HTTP or HTTPS. For more information, see 1.2.1 Access via the Web Interface on page 7. Fine-tune your SpeedTouch configuration. For more information, see 1.2.2 Access via CLI on page 8. Back up and restore data on your SpeedTouch. For more information, see 1.2.3 Access via FTP on page 10. Allow a remote user to help you configuring your SpeedTouch. For more information, see 1.2.4 Remote Assistance on page 13.
Command Line Interface (CLI)
File Transfer Protocol (FTP)

Remote Assistance

1.2.1 Access via the Web Interface
To access the SpeedTouch via the Web interface

Proceed as follows:

Open a Web browser. In the address bar, type your SpeedTouchs IP address or DNS host name (http://speedtouch.lan or 192.168.1.254 by default) You can access the pages via HTTP or HTTPS. For remote assistance the secure version HTTPS is used in combination with certificates. Simply provide your ISP with the link as shown, user name and password before he can log on to the pages. For more information, see 1.2.4 Remote Assistance on page 13. The SpeedTouch Home page appears, from where you can navigate to all the configurable aspects of the SpeedTouch.
For more information on the Web pages, see 4 Basic Configuration on page 35.

1.2.2 Access via CLI

To access the SpeedTouch via the Command Line Interface (CLI)
You can access the Command Line Interface (CLI) via: The embedded Expert pages. For more information, see 5 Expert Configuration on page 99. A Telnet session This requires a TCP/IP connection between the host from which the Telnet session is opened and the SpeedTouch. Your SpeedTouch and the connected computer must have an IP address in the same subnet. The serial Console interface Quote site commands (over FTP) For more information, see Quote site command on page 12. For more information on CLI commands, see the SpeedTouch CLI Reference Guide.
To start a Telnet session
Open a telnet application. You can use the Command Prompt window. In Microsoft Windows XP for instance:
On the Windows taskbar, click Start. Select (All) Programs > Accessories > Command Prompt.

Point-to-point/Mask 255.255.255.0 255.255.255.0 81.240.198.1 255.255.255.255
For more information on CLI commands, see the SpeedTouch CLI Reference Guide.

1.2.4 Remote Assistance

To access the SpeedTouch remotely
You can make your SpeedTouch accessible from the Internet with regard to remote support. In this way, you can allow your help desk to access your SpeedTouch remotely.

To enable remote access

Go to the SpeedTouch pages, as described in 1.2.1 Access via the Web Interface on page 7. In the menu, select Toolbox > Remote Assistance. Click Enable Remote Assistance. Provide the following parameters to your help desk: URL (the HTTPS link) User name Password Your ISP is now able to access your SpeedTouch via the HTTPS link in combination with the provided certificate (a secure authentication mechanism). For security reasons, remote assistance will be automatically disabled after 20 minutes of inactivity, or after restarting your SpeedTouch.

To disable remote access

Go to the SpeedTouch pages, as described in 1.2.1 Access via the Web Interface on page 7. In the menu, select Toolbox > Remote Assistance. Click Disable Remote Assistance.

Chapter 2

Local Network Setup

2 Local Network Setup

The SpeedTouch offers you the following local networking solutions: Wired Ethernet Wireless Ethernet

Device settings

Once you have connected a device, you can personalise its settings. For more information, see Configure on page 85.

2.1 Wired Ethernet

Local network
The Ethernet ports on the back panel allow you to connect the SpeedTouch to an existing 10 or 100Base-T Ethernet network or one (or more) computer(s) with an installed Ethernet card. Using the SpeedTouch Ethernet switch, you can create a local Ethernet network of up to four devices, without needing extra networking devices. In the SpeedTouch package, a yellow full-wired straight-through RJ-45/ RJ-45 Ethernet cable is included.
Standard wiring procedure
Use the yellow Ethernet cable provided to wire your computer's Ethernet port to one of the SpeedTouch's Ethernet ports. The Ethernet cable can also be used to wire an Ethernet port of your SpeedTouch to any external Ethernet hub or switch. Please follow the installation instructions supplied with the external hub or switch for connections and Ethernet cabling.

Ethernet link check

LED indicators allow you to check your Ethernet. See 1.1 SpeedTouch LED Behaviour on page 4 for more information.
Once you have connected a device, you can personalise its settings. For more information, see Device settings on page 15.

Managed Ethernet switch

Your SpeedTouch intelligently switches data between the devices on your LAN, using priority queuing to ensure that higher priority messages are delivered first and in real time. This feature maximizes your network performance. The managed Ethernet switch allows you to configure a Virtual Local Area Network (VLAN), group ports or isolate a port, configure secure channel connections, define Quality of Service (QoS), and configure port mirroring, allowing monitoring from one port to another. You can configure the managed Ethernet switch manually using CLI (For more information, see the SpeedTouch CLI Reference Guide) or on the expert Web pages (see5.5.3 Managed Switch on page 161).

2.2 Wireless Ethernet

The SpeedTouch 608 WL/620Wi-Fi certified IEEE 802.11g compliant wireless access point allows multiple computers to connect wirelessly to your local network over the SpeedTouch Wireless LAN environment. The SpeedTouch is backward compatible with IEEE 802.11b, which means 802.11b and 802.11g devices can coexist in the same wireless network. The Wireless Distribution System (WDS) on your SpeedTouch allows you to extend the range of your wireless network. To be able to use WDS, you will need to introduce an additional WDS-enabled access point into your wireless network. To be able to connect the computers, make sure that a wireless client adapter (WLAN client) is installed on each computer you want to connect via the WLAN.
Wireless client requirements
All wireless client adapters compliant to 802.11g and/or 802.11b can communicate with the SpeedTouch and other members of the SpeedTouch (W)LAN environment. However, be aware that only 802.11g compliant wireless clients are able to gain full profit of the 54 Mb/s (Max) bandwidth delivered by the SpeedTouch. It is highly recommended to use only wireless client adapters that are Wi-Fi certified to ensure smooth interoperability with the SpeedTouchs WLAN.

2.2.1 Wireless Basics

802.11b/g
802.11b is an IEEE standard, operating at 2,4 GHz at a speed of up to 11 Mb/s. 802.11g, a newer IEEE standard also operating at 2,4 GHz, gives you up to 54 Mb/s speed, more security and better performance.

Wireless Fidelity

The Wi-Fi certification ensures that your SpeedTouch will interoperate with any Wi-Fi certified 802.11g and 802.11b compliant wireless device.

Access Point

The SpeedTouch Wireless LAN Access Point (AP) behaves as a networking hub allowing to wirelessly interconnect several devices to the local (W)LAN and to provide access to the Internet.

Dial-in clients

There are different ways to dial in, depending on the operating system on your computer and your preferences.

Dial-in method:

Embedded PPP dial-in client:
canbeusedonfollowing operating system:
For more information, see:
Dial-in client on embedded pages Windows XP/UPnP (Internet Gateway Device)
Windows, Mac, unix, other Windows XP
3.1 SpeedTouch Web Pages 3.2 Internet Gateway Device Control Agent on page 33
Embedded PPP dial-in clients
The SpeedTouchs embedded PPP dial-in client allows you to establish an Internet connection for computers residing on your local network, using only one computer of the network to control the client. If this computer runs: Any Operating System you can always use the SpeedTouch Web pages. See 3.1 SpeedTouch Web Pages on page 31 to proceed. Windows XP you can use the Windows XP Internet Gateway Device Control Client. See 3.2 Internet Gateway Device Control Agent on page 33 to proceed.
Broadband host PPPoE dial-in clients
You can also connect to the Internet using a Broadband PPPoE dial-in application. The PPP over Ethernet connection scenario provides PPP-like dial-in behaviour over the virtual Ethernet segment. To be able to use a broadband dial-in application on your computer for connecting to the Internet, the SpeedTouch needs to be configured for Bridged Ethernet or Routed PPPoE (with PPPoE relay) via the SpeedTouch Home Install Wizard on the Setup CD or the embedded Easy Setup.

If your computer runs.

Windows XP Mac OS X

you can use.

the Windows XP broadband dial-in client a Mac OS X broadband dial-in client a broadband PPPoE dial-in client provided by you Service Provider
Upon availability of OS-specific PPPoE dial-in client applications, the latter method is Operating System independent. For PPPoE session connectivity from a Mac OS 8.6/9.x, a Windows 95/ 98(SE)/ME/2000 or a Linux system, a host PPPoE dial-in application is mandatory.

3.1 SpeedTouch Web Pages

As the SpeedTouch Web pages are controllable from any Operating System with an installed Web browser, the method to establish PPP sessions described later, can be used on any computer system. For more information on Internet connection setup, refer to the provided Installation and Setup Guide.

The Configure page allows you to: Change the device information. Allow a game or service running on this device to be initiated from the Internet.

4.6.3 Assign Public IP

On this page you can assign the public IP address of your Internet Connection(s) to a specific device on your local network. You might want to do this if: You do not want to use the Network Address Translation engine of your SpeedTouch. This device is running server applications (Web server,.) and you want it to be accessible from the Internet. You can also achieve this by creating a port mapping for the specified server, as described in 4.5.2 Game & Application Sharing on page 59. This device has to be considered as the unique access point to your local network (DMZ).
Assigning the public IP address to a device
Be aware that the device to which you assign the public IP address will lose all security offered by the SpeedTouch.
In the Office Network menu, click Devices. In the Pick a task list, click Assign the public IP address of a connection to a device. Click the Edit link of your Internet connection. In the Device list, select the device you want to assign the public address to.
Click Apply. The SpeedTouch prompts you to make some adjustments as a result of the new configuration.
Click OK. Release and renew the IP address of the device. For more information, see your operating systems user guide or help.
If necessary, reassign server applications to this device.
4.6.4 Wireless Device Settings

Availability

This page is only available on SpeedTouch devices equipped with a wireless access point.
Accessing the wireless device settings page
In the Office Network menu, click Devices. In the Detected Device(s) list, click the name of the wireless device you want to view.
The Overview page displays the following items: Information allows you to view: Status displays whether the device is currently connected to the SpeedTouch network. Type displays the device type. Connected To displays the interface to which the device is currently connected. Allowed on LAN indicates whether the wireless client is allowed to connect to the SpeedTouch WLAN. Addressing allows you to view: Physical Address displays the MAC address of the device. IP Address Assignment displays whether the device is using a static or dynamic IP address. IP Address displays the current IP address of the device. Always use the same address indicates whether the wireless client has a static DHCP lease or not. DHCP Lease Time displays the time for which the wireless client can use this IP address. Connection Sharing: Gives you an overview of the games or services that are currently assigned to this device. Click the name of the game or service to view the used port mappings. For more information, see 4.5.4 Game or Application Definition on page 62.

Establishing a WDS connection
Click Configure. In the Pick a task list, click Configure WDS.
In the Pick a task list, click Scan for wireless Access Points. The SpeedTouch warns you that all associated stations will lose connectivity for a few seconds.
Click OK. The SpeedTouch lists the results in the Accessible Access Points table. Select the Access Point to which you want to establish a WDS connection. Click Apply. Configure this Access Point with: The same WEP key if WEP is enabled. The same fixed channel.

4.6.7 Interfaces

Interfaces overview
The Interfaces page gives you an overview of the interfaces used on your SpeedTouch. If you want to know more about the network settings of a specific interface, click the name of the interface you want to view.

4.6.8 Interface Settings

The Overview page gives you an overview of the current interface settings.
The Configure page allows you to: Change the IP address settings of the SpeedTouch. Change the DHCP IP address pool settings. Before changing the DHCP pools, make sure that at least one IP address of the SpeedTouch uses the same subnet as the IP addresses in the DHCP pools.
Assigning a new IP address to the SpeedTouch
Under IP Addresses, proceed as follows:
Type the IP address of your choice (for example 192.168.1.1) in the left text box. Type subnet mask (for example 255.255.255.0) in the right text box. Click Add. Network devices using the same subnet mask can now access the SpeedTouch using this IP address.

4.6.9 DHCP Pool

DHCP Pool page Accessing the DHCP Pool page
On the DHCP Pool page, you can create/change a DHCP pool.
In the Office Network menu, click Interfaces. Click the name of the interface which DHCP pool settings you want to change. Click Configure. Under DHCP Pools, click: Add to add a new DCHP pool. Edit to edit an existing DHCP pool. Delete to delete an existing DHCP pool. This link will only be shown if there are more than one DHCP pools. The DHCP Pool page appears.
Components of the DHCP Pool page
The following settings are available for configuration: Interface: The SpeedTouch interface to which the DHCP pool applies. Start Address: The start IP address of the DHCP servers address pool. End Address: The end IP address of the DHCP servers address pool. Both the start and end IP address define the IP address range used by the DHCP server to assign leases. Subnet Mask: The subnet mask of the DHCP servers address pool. Server: The SpeedTouch IP address used as DHCP server address. Gateway: The IP address that will be assigned to the DHCP clients as their default gateway. Primary DNS: The IP address of the primary DNS server. Secondary DNS: The IP address of the secondary DNS server. Primary WINS: The IP address of the primary WINS server. Secondary WINS: The IP address of the secondary WINS server. Lease Time: The time for which the DHCP client is allowed to use the assigned IP address: If you select Always give same address to DHCP clients, the lease time will be automatically set to Infinite. Always give same address to DHCP clients: Select this check box if you always want to use the same IP address for the DHCP clients.

Statistics

For a running PPP session the fourth tab allows you to overview following connection statistics: IP address: local IP address assigned by the server. Bytes received: Number of bytes received on this PPP connection. Bytes dropped: Number of bytes failed to transmit. Bytes sent: Number of bytes transmitted over this PPP connection.

5.4.3 Routed PPPoA

The Routed PPPoA configuration page allows you to add new Routed PPPoA connection entries or to change settings of existing entries.
Creating a Routed PPPoA connection entry
To add a Routed PPPoA connection entry:
Click New. In the Interface box, type a unique interface name (different from the MER interface name). In the Destination list, click the appropriate Routed Ethernet destination indicated by the Routed Ethernet interface name Type user name and password for the account at the ISP [optional]. Click Apply.
Once created, per Routed PPPoA connection, additional configuration is possible by clicking: Routing Other These parameters can only be modified when the link is down. Take the link down first by clicking Hang-up.
For a running PPP session the fourth tab allows you to overview following connection statistics: IP address: Local IP address assigned by the server. Bytes received: Number of bytes received on this PPP connection. Bytes dropped: Number of bytes failed to transmit.
Bytes sent: Number of bytes transmitted over this PPP connection.

5.4.4 Routed PPPoI

The ISDN modem is only fully functional after activating the ISDN software module with the ISDN software module activation key. For more information, see 5.2.10 Add-on on page 120.
The Routed PPPoI configuration page allows you to add new Routed PPPoI connection entries or to change settings of existing entries.
Creating a Routed PPPoI connection entry
To add a Routed PPPoI connection entry:
Click New. In the Interface box, type a unique interface name. In the ISP profile list, click: The name of a profile if you want to use an existing profile. New to create a new profile. Type the name you want to assign to this profile in the Enter Name box. These ISP profile contain the ISDN parameters.
6 Additional configuration
Type user name and password for the account at the ISP. If needed, enter the ISDN parameters of your ISP. Click Apply.
Once created, per Routed PPPoI connection, additional configuration is possible by clicking:
Routing Other These parameters can only be modified when the link is down. Take the link down first by clicking Hang-up.
For a running PPP session the fourth tab allows you to overview following connection statistics: IP address: Local IP address assigned by the server. Bytes received: Number of bytes received on this PPP connection. Bytes dropped: Number of bytes failed to transmit. Bytes sent: Number of bytes transmitted over this PPP connection.

DHCP Client

Dynamic interfaces are created and managed by means of the DHCP Client table. Following fields are listed in the DHCP Client table: Interface: The name of the SpeedTouch logical interface for which this DHCP client applies The Address column shows the IP address assigned to the interface given in the first column. The State column shows the current state of the dynamic interface. According to RFC2131, following states are envisaged: init: The DHCP client hasn't been activated yet. (You can activate a DHCP client entry by selecting it and clicking Enable. requesting: The DHCP client is searching for a DHCP server. selecting: The DHCP client requests a server for an IP address. bound: A dynamic IP address has been assigned by the DHCP server. renewing: The DHCP client requests a known server to extend its lease. rebinding: The DHCP client searches a server to extend its lease. The Timeout column is filled in for each DHCP client which is currently in the "bound" state. It indicates the lease time of the assigned IP address. For each of these interfaces you can configure following fields: IP Address: The preferred IP address to be assigned to the DHCP client. If not accepted, the (remote) DHCP server may overrule this address. Client ID: MAC address of the SpeedTouch logical interface, to be communicated to the (remote) DHCP server. If empty, the SpeedTouch 's MAC address is used. Host name: The host name associated with the dynamic IP address, to be communicated to the (remote) DHCP server User ID: The user class identifier option to be associated with the lease. Lease time: The preferred duration of the lease of the dynamic IP address, if assigned. If not accepted, the (remote) DHCP server may overrule this lease time. Vendor ID: Enable transmission of the vendor class identifier option (selected) or not (cleared).

5.5.2 DNS

DNS is short for Domain Name System. It is a network functionality that allows network members to use host names rather than IP addresses for referencing networked computers.
The DNS web page consists of two sections: Configuration Hostname Table
In addition to the host name, a local computer needs the DNS domain name to construct a fully qualified name. By default the SpeedTouch DNS's domain name is lan. You can specify another (sub)domain name in the domain field (and Apply) In normal conditions you should never disable the SpeedTouch DNS server, surely not in case the SpeedTouch DHCP server is active on the local network as well. If required however, you can disable the SpeedTouch DNS server by clearing Activate Server (and Apply). Disabling the SpeedTouch DNS server will disable all DNS forwarding functionality as well. This may compromise end-to-end connectivity through the SpeedTouch connections.

Access point settings

This section provides an overview and allows you to configure the basic wireless networking parameters for your SpeedTouch wireless access point.
Following wireless access point settings can be viewed or configured: Network Name (SSID): The network name, also known as Service Set ID (SSID). For more information, see Network Name (SSID) on page 165. Rate: Displays the current modulation rate in which the SpeedTouch is operating. Take into consideration that if the distance between the SpeedTouch and the clients increases the throughput decreases. Walls, closets and big metal objects have a negative influence. Interoperability Mode Channel Selection allows you to choose between: Auto: The best communication channel is automatically selected by the SpeedTouch (recommended setting). The Current Channel displays the channel currently in use. A specific channel. Regulatory Domain displays the access points Regulatory Domain. Only stations with correct Network name (SSID) can connect: If this check box is: Cleared, the SpeedTouch broadcasts its SSID and accepts every client. Selected, the SpeedTouch does not broadcast its SSID and accepts only those clients who have the correct Network name (SSID). Framebursting: Allows you to enhance the performance of wireless networks by improving the efficiency between the client and the access point if you have mainly downstream traffic. WMM: WMM is enabled by default. Clear the check box to disable WMM. Allow multicast frames sent to local clients. Wireless interface enabled: Allows you to enable/disable the wireless interface.
The WLAN's 'radio' link is a shared medium. As no physical connection exists between the SpeedTouch and wireless clients, a name must be given to allow unique identification of your WLAN radio link. This is done by the Network Name, also known as Service Set ID (SSID). Wireless clients must be configured for the same Network Name in order to be able to communicate with other clients on the (W)LAN - via the SpeedTouch wireless access point. To change the Network Name (SSID):

Network Name broadcast

Type a Network Name of your choice. Click Apply to immediately apply your changes.
By default the access point broadcasts its SSID and accepts every client. However, for security reasons you are able to configure not to broadcast its SSID and to accept only those clients who have exactly the same SSID, as configured on the SpeedTouch To change the Network Name broadcasting configuration:

Click Set Active to activate the new settings.

5.6.2 Log

The Log page allows you to view log messages when: a firewall rule is hit. the firewall is enabled or disabled. the firewall level is changed. a firewall rule is created. a firewall rule is modified. a firewall rule is deleted.

5.7 VPN

The VPN feature is only available if you activated the VPN software module. For more information, see 5.2.10 Add-on on page 120.
The VPN menu consists of following items
LAN to LAN VPN Client VPN Server Certificates Advanced Debug
connect your LAN with a remote LAN through an IPSec VPN tunnel. set up a connection between the SpeedTouch and a remote VPN server. set up the SpeedTouch as a VPN server. manage your authentication certificates. configure VPN tunnels with a component oriented environment. see status, statistics and logging.

5.7.1 LAN to LAN

The LAN to LAN page consists of two tabs. Select: Remote Gateway Address Known as the starting page when the SpeedTouch must be able to initiate a VPN connection. Remote Gateway Address Unknown as the starting page when the SpeedTouch only needs to have responder capability. By not specifying the Remote Gateway Address, you allow additional sites to join the VPN without requiring any modification to the configuration of your SpeedTouch.

Configuration procedure

Perform the following steps to configure your LAN to LAN application:
On the LAN to LAN web page, select either Remote Gateway Address Known or Remote Gateway Address Unknown. Configure the Remote Gateway parameters. Define the Connection parameters. Save the configuration.

5.7.2 VPN Client

The VPN Client page
The VPN client in the SpeedTouch can replace a software VPN client installed on a computer. You can use it for example to connect from your home to your employers corporate network for tele-working. The VPN Client page allows you to configure a VPN client that functions in Initiator mode. This means that the VPN client takes the initiative to set up a secure connection to a remote VPN server.

This page allows configuring the Certificates Enrollment Protocol settings.

5.7.5 Advanced

When to use
The Advanced VPN menu gives access to two main pages where the complete IPSec configuration can be done. These pages are component-oriented, as opposed to the application-oriented pages described in 5.7.1 LAN to LAN on page 177, 5.7.2 VPN Client on page 178 and 5.7.3 VPN Server on page 179. Componentoriented means that a number of components are constructed and subsequently combined. It is highly recommended to use the application-oriented web pages for VPN configurations. Only in exceptional cases, these pages will not be sufficiently flexible to fulfil your requirements. Only in these cases, the Advanced VPN menu should be used.

How to use

Configuring an operational IPSec connection basically consists of the definition of a Peer Profile and a Connection Profile. The Peer represents the remote Security Gateway and all the parameters required to set up an IKE Security Association to this Security Gateway. A Connection represents the IPSec connection and all its associated parameters. All parameters of an IPSec configuration can be adjusted, so the functionality of these web pages corresponds to the Command Line Interface (CLI). Choices have to be made in accordance to the data known to the user, and the VPN layout. The Advanced VPN menu should be used by skilled persons only, as these pages allow you to manually adjust configuration components that are in general automatically generated by the SpeedTouch. Therefore, take care when altering settings in the Advanced VPN menu.

5.7.6 Debug

Status page
This page shows the status of the IKE Security Association (Phase 1) and the IPSec Security Association(s) (Phase 2). For an operational VPN connection, both an IKE Security Association and an IPSec Security Association should be active.

Statistics page

This page shows the amount of traffic carried over the IKE Security Association (Phase 1) and the IPSec Security Association(s) (Phase 2).

Logging page

On the Logging page you can monitor the received and transmitted messages of the IKE and IPSec negotiations. Proceed as follows:

Tear Down All Tunnels

Browse to Expert mode > VPN > Debug > Logging. Select the desired level of Trace Detail. Select high to see the most detailed level of logging. Start the VPN connection. Browse again to Expert mode > VPN > Debug > Logging.
On this page you can halt all established VPN tunnels.

5.8 SIP PBX

The SIP PBX feature is only available if you activated the SIP PBX software module. For more information, see 5.2.10 Add-on on page 120.

SpeedTouch SIP PBX

The SpeedTouch has a key role in the enhancement of Voice over IP services for corporations, universities or enterprises. Using the SpeedTouch integrated multimedia SIP PBX, the user can secure the SIP communications and manage, without involvement of the operator, certain local services such as registration blocking, sessions screening, sessions logging. The added value of a PBX is now available in a SIP-enabled network!