SpeedStream® 6500 Series Residential Gateway User’s Guide Part No.
6500 Residential Gateway User’s Guide © Copyright 2004, Siemens Subscriber Network. All rights reserved. Printed in the U.S.A. Product names mentioned herein may be trademarks and/or registered trademarks of their respective companies. Siemens Subscriber Networks shall not be liable for technical or editorial errors or omissions in this document; nor for incidental or consequential damages resulting from the furnishing, performance, or use of this material.
6500 Residential Gateway User’s Guide D. SIEMENS will return the repaired or replacement Product to the end user at the address provided by the end user at SIEMENS’s expense. For Products shipped within the United States of America, SIEMENS will use reasonable efforts to ensure delivery within five (5) business days from the date received by SIEMENS. Expedited service is available at additional cost to the end user. E.
Contents CHAPTER 1 INTRODUCTION ..................................................................................................................... 1 Features of the Residential Gateway Family .................................................................................... 1 Network (LAN) Features .................................................................................................................. 1 Security Features.........................................................................
6500 Series Residential Gateway User’s Guide Contents CHAPTER 6 CONFIGURING ADVANCED FEATURES........................................................................... 37 ISP Connection .................................................................................................................................. 38 Advanced ISP Settings .................................................................................................................. 39 ATM Virtual Circuits ............................
1 Chapter 1 Introduction This chapter provides an overview of the Gateway's features and capabilities. Congratulations on the purchase of your new SpeedStream SS6500 Series Residential Gateway (Gateway). The Gateway is a multi-function device providing the following services: • Built-in DSL Modem that provides shared Internet access for multiple users. • One- or four-port 10/100 Ethernet Switch for 10Base-T or 100Base-T connections.
6500 Series Residential Gateway User’s Guide Introduction • Stateful Inspection Firewall All incoming data packets are monitored and all incoming server requests are filtered, thus protecting your network from malicious attacks from external sources. • Attack Protection System Attacks can flood your Internet connection with invalid data packets and connection requests, using so much bandwidth and so many resources that Internet access becomes unavailable.
6500 Series Residential Gateway User’s Guide Introduction Minimum System Requirements At a minimum, your computer must be equipped with the following to successfully install the Gateway. Your Internet Service Provider may have additional requirements for use of their service. • Ethernet connection method − A network interface card (NIC) that supports 10/100 Ethernet − Operating system that supports TCP/IP − Microsoft Internet Explorer or Netscape Navigator versions 5.
6500 Series Residential Gateway User’s Guide Introduction Physical Details Familiarize yourself with the Gateway before installing. Front Panel LEDs The front panel contains the following LEDs: Power is on. Power Green Off Power is off. Red The Power LED briefly shows red during power-up. This indicates that the SpeedStream is conducting the POST (Power-On Self Test) that is run each time the SpeedStream is powered on. On One or more Ethernet LAN ports are active.
6500 Series Residential Gateway User’s Guide Introduction Rear Panel DSL Port (RJ11) Connect the RJ11 DSL cable (looks like a telephone cord) here to use your DSL connection through an existing phone line. USB Port If your Gateway has a USB port, connect the USB cable here. The USB driver software must be installed from the provided CD-ROM. 10/100 Ethernet Ports 1 - 4 Connect the RJ45 Ethernet cable here to connect your computers, hubs, or switches to the Gateway.
2 Chapter 2 Installation This chapter covers the physical installation of the SpeedStream Gateway. Minimum System Requirements • DSL service and an Internet access account from an Internet Service Provider (ISP). • Network cables for each device you intend to connect to the Gateway. • TCP/IP network protocol must be installed on all computers. • For USB connection to the Gateway, the following operating systems are supported: • Windows 98, 98SE • Windows 2000 • Windows ME or XP • Mac OS versions 8.
6500 Series Residential Gateway User’s Guide Installation Installing Line Filters Because DSL shares your telephone line, you may need to separate the two signals so they do not interfere with each other. A line filter (may be included with some models) prevents DSL traffic from disrupting the voice signal on the telephone line, and vice versa. Follow the procedures below to install line filters on any device (telephones, fax machines, caller ID boxes) that shares the same telephone line with your DSL.
6500 Series Residential Gateway User’s Guide Installation Connecting Cables The SpeedStream Gateway provides ports for either a USB or an Ethernet connection to your primary computer. Select the interface you will use to connect the Gateway, and follow the step-by-step instructions below for your chosen installation method.
6500 Series Residential Gateway User’s Guide Installation USB Installation Method (Microsoft Windows) 1. Connect the USB Cable 1) With your computer off, connect the provided USB cable to the USB port on the Gateway. 2) Connect the other end of the USB cable to an open USB port on your computer. 3) If desired, use standard 10/100 CAT5 Ethernet cables to connect additional computers to the Ethernet ports on the Gateway. 2.
Chapter 3 Operating System Configuration 3 This chapter explains how to configure each computer on your network to work with the Gateway. To access the Internet through the SpeedStream Gateway, the TCP/IP protocol must be installed on your computer. If TCP/IP is not already installed on your computer, install it. Refer to your system documentation or online help for instructions.
6500 Series Residential Gateway User’s Guide Operating System Configuration Checking TCP/IP Settings (Windows 9x/ME) 1. Select Start>Control Panel >Network. This displays the Configuration tab on the “Network” window. 2. Select the TCP/IP protocol for your network card. 3. Click Properties. This displays the “TCP/IP Properties” window. 4. Click the IP Address tab. 5. Ensure that the Obtain an IP address automatically option is selected. This is the default Windows settings. 6. Close this window. 7.
6500 Series Residential Gateway User’s Guide Operating System Configuration Checking TCP/IP Settings (Windows 2000) 1. On the Windows taskbar click Start>Settings>Control Panel. This displays the “Control Panel” window. 2. Double-click Network and Dial-up Connections. This displays the “Network and Dial-up Connections” window. 3. Right-click Local Area Connection and select Properties. This displays the “Local Area Connections Properties” window. 4. Select the TCP/IP protocol for your network card. 5.
6500 Series Residential Gateway User’s Guide Operating System Configuration Checking TCP/IP Settings (Windows XP) 1. On the Windows taskbar click Start>Control Panel. This displays the “Control Panel” window. 2. Double-click the Network Connection icon. This displays the “Network Connections” window. 3. Right-click Local Area Connection, then click Properties. This displays the “Local Area Connection Properties” window. 4. Select the TCP/IP protocol for your network card. 5. Click Properties.
6500 Series Residential Gateway User’s Guide Operating System Configuration Checking TCP/IP Settings (MAC OS 8.6 through 9.x) 1. Select Apple >Control Panel >TCP/IP. This displays the “TCP/IP” window. 2. Select one of the following from the Connect via drop-down menu. • Ethernet or Ethernet built-in if connecting via Ethernet. • Ethernet Adaptor [en0,en1,…] if connecting via USB. 3. Select Using DHCP Server from the Configure drop-down menu. 4. Close the “TCP/IP window” and click Save. 5.
6500 Series Residential Gateway User’s Guide Operating System Configuration Checking TCP/IP Settings (MAC OSX) 1. Click Apple -> System Preferences. This displays the “System Preferences” window. 2. Double-click the Network icon under the Internet & Network section. This displays the “Network” window. 3. Select one of the following from the Show drop-down menu: • Built-in Ethernet if connecting via Ethernet. • Ethernet Adaptor [en0,en1,…] if connecting via USB. 4.
6500 Series Residential Gateway User’s Guide Operating System Configuration Internet Access Configuration Windows users must configure their computers to use the Gateway for Internet access. Ensure that the Gateway is installed correctly and the DSL line is functional. Then follow the appropriate procedure below to configure your Web browser to access the Internet via the LAN, rather than by a dial-up connection. For Windows 9x/2000 1. Select Start>Settings>Control Panel to display the Control Panel. 2.
Chapter 4 SpeedStream Gateway Setup 4 This chapter describes how to connect to and setup your Gateway configuration. This chapter describes the steps to set up the SpeedStream Gateway configuration using the Gateway Setup Wizard. Other configuration may also be required on the Gateway, depending on which features and functions of the Gateway you wish to use. Use the table below to locate detailed instructions for the required functions. To do this Refer to Configure users and devices on the Gateway.
6500 Series Residential Gateway User’s Guide SpeedStream Gateway Setup Connecting to the Gateway You can connect to the Gateway using UPnP (if it is enabled on your computer) or through the Web browser.
6500 Series Residential Gateway User’s Guide SpeedStream Gateway Setup Gateway Setup Wizard The first time you connect to the Gateway, the Setup Wizard runs automatically. (The Setup Wizard also runs if the Gateway's default settings are restored.) Proceed through the entire Setup Wizard to ensure accuracy of the installation. You will need to know the username and password for Internet service provided by your ISP. Check the information supplied by your ISP for details. 1.
6500 Series Residential Gateway User’s Guide 6. SpeedStream Gateway Setup Click Next. This displays the “Configure Time Zone” window. Optionally set the time zone of the area of the world in which you live on the “Configure Time Zone” window. This option must be enabled to define time of day restrictions for users. 7. To set the time zone, select the Yes option for Enable Time Client. 8. Select your time zone from the Select Time Zone drop-down menu, then click Next.
6500 Series Residential Gateway User’s Guide SpeedStream Gateway Setup Set the wireless security level from the “Wireless Security Configuration” window. ALL wireless devices attached to the Gateway MUST have the same wireless security settings for your network to have proper communications and security. 13. From the Security Mode drop-down menu, select one of the following options: • Disable Security Disables encryption, providing no wireless security for the Gateway.
6500 Series Residential Gateway User’s Guide SpeedStream Gateway Setup 15. If the Powerline window appears, select one of the following Powerline Interface options: • Disable Powerline connection is disabled. Click Next. This displays the “Finish” window. • Enable Powerline connection is enabled. 16. If you selected Enable, enter a password to secure your powerline connection. This password must be identical on all powerline client devices. 17.
6500 Series Residential Gateway User’s Guide SpeedStream Gateway Setup Wireless Setup WEP 64-Bit Option WEP security offers the same security offered by a wired LAN with encrypted packets. This option offers 64-bit encryption, which is the least secure WEP option. This section assumes you currently have the “Wireless Security Configuration” window displayed on your computer. To use the WEP 64-bit option: 1. Select the WEP 64-bits option from the Security Mode drop-down menu. 2. Click Next.
6500 Series Residential Gateway User’s Guide SpeedStream Gateway Setup Wireless Setup WEP 128-Bit Option WEP security offers the same security offered by a wired LAN with encrypted packets. This option offers 128-bit encryption, which is the most secure WEP option. This section assumes you currently have the “Wireless Security Configuration” window displayed on your computer. To use the WEP 128-bit option: 1. Select the WEP 128-bits option from the Security Mode drop-down menu. 2. Click Next.
6500 Series Residential Gateway User’s Guide SpeedStream Gateway Setup Wireless Setup WPA PSK Option WPA security changes encryption keys after a specified amount of time. This is the most secure option for wireless networks. This section assumes you currently have the “Wireless Security Configuration” window displayed on your computer. To use the WPA option: 1. Select the WPA-PSK option from the Security Mode drop-down menu. 2. Click Next. This displays the “Wireless WPA Configuration” window. 3.
6500 Series Residential Gateway User’s Guide SpeedStream Gateway Setup Home Window After finishing the Setup Wizard and clicking Configure, the Home window appears. This window also appears from now on when connecting to the Gateway. After finishing the Setup Wizard and clicking Configure, the “Home” window is displayed. This window is also displayed from now on when connecting to the Gateway. At the top of this window is the MenuBar that contains the login/logout drop-down menu and Help menu.
6500 Series Residential Gateway User’s Guide SpeedStream Gateway Setup Toolbar The Gateway has three primary toolbar buttons: Users, Devices, and Gateway. The options for all the toolbar buttons differ depending on the user login. The administrator has the most authority with all options enabled, while the user has limited options based on the user profile for the login. Please see the table below for more information. Users Button: This button provides access to user profiles and the User Profile Wizard.
Chapter 5 Configuring Users and Devices 5 This chapter explains how to configure users and devices on the Gateway. This chapter contains details for configuring users and devices on the Gateway. This chapter is organized into two parts corresponding to the buttons in the toolbar: Users and Devices. Refer to Chapter 6, Configuring Gateway Options for details on configuring the features on the Gateway.
6500 Series Residential Gateway User’s Guide Configuring Users and Devices 2. Type a user name in Username. 3. Type a password in Password. 4. Re-type the password in Confirm. 5. Click Next. This displays the “Profile Content Filtering” window. (At any time during user configuration, you can click Finish to complete the user profile and accept the defaults for this user.) Content filtering restricts access to undesirable Web sites and Web content.
6500 Series Residential Gateway User’s Guide Configuring Users and Devices Profile configuration access defines the access permission for a user controlling what functions and features are available to that user. 9. Select one of the following profiles and click. • Administrator User has access to the Internet and all of the configuration tools on the Gateway. • Gamer User has access to the Internet as well as the Gateway’s commonly used tools for gamers, including Port Configuration and DMZ.
6500 Series Residential Gateway User’s Guide Configuring Users and Devices • Only allowed from The user can only access the Internet at the time range set in the time drop-down menus. Be sure to specify the from and until times the user can access the Internet. 12. Select one of the following options to designate the number of minutes a user can sit idle before they are automatically logged out from the web: • Infinite Time The user is never automatically logged out of the Internet.
6500 Series Residential Gateway User’s Guide Configuring Users and Devices • Select a color from the drop-down menu. • Type a numeric color value in the box next to the color drop-down menu. The number is based on RGB (Red Green Blue) values. For example, the color red is represented by a value of ff0000, green is represented by a value of 00ff00, and blue is represented by a value of 0000ff. Note: If you are entering a numeric value for the color, ensure that the “#” is in front of your numeric value.
6500 Series Residential Gateway User’s Guide Configuring Users and Devices Editing A User Profile This section describes how to edit a user profile. You must be logged in as the administrator to edit a user profile. To edit a user profile: 1. From the “Users Profile” window, click the button in the left navigation pane corresponding to the user you want to edit. This displays the “Profile Monitor” window. 2. Click Edit Profile.
6500 Series Residential Gateway User’s Guide Configuring Users and Devices Deleting a User This section describes how to delete a user. You must be logged in as the administrator to delete a user. To delete a user: 1. From the “Users Profile” window, click the button in the left navigation pane corresponding to the user you want to delete. This displays the “Profile Monitor” window. 2. Click Delete User.
6500 Series Residential Gateway User’s Guide Configuring Users and Devices Viewing User Logs User logs provide time stamped information about the activity of the user over the network. To view user logs: 1. From the “Users Profile” window, click the button in the left navigation pane corresponding to the user you want to delete. This displays the “Profile Monitor” window. 2. Click View User Log. This displays the “Current Log Entries” window displaying all the log information about the user.
6500 Series Residential Gateway User’s Guide Configuring Users and Devices Configuring Devices The Devices option allows you to view devices connected to your Gateway. If you are logged in as the administrator, you can view all the connected devices to the Gateway. If you are logged in as a specific user, you can only view devices associated with that user logon. To use the Devices option: 1. Click Devices in the toolbar.
6 Chapter 6 Configuring Advanced Features This chapter explains how to configure advanced features on the Gateway. This chapter contains details for configuring the many advanced features available with your Gateway. Some of the features described below require at least a mid-level understanding of networking principles. These features are provided to allow configuration flexibility for advanced users.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features ISP Connection The ISP Connection option displays all active and available Internet connections. Many of the settings for this option are intended for use only by advanced users. This option may not be available depending on your ISP. You must be logged in as an administrator to use this option. WARNING: If this feature is not properly configured your Internet connection may terminate. To use the ISP connection function: 1.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Advanced ISP Settings The Gateway provides access to additional, advanced ISP configuration settings. All the options in this section should only be configured with the help and guidance of your ISP. Incorrect changes to any of these options could result in the failure of your Internet connection. To access the advanced settings, click Advanced Settings from the “ISP Connection Information” window.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features ATM Virtual Circuits Use the ATM virtual circuit advanced option to create and configure a Permanent Virtual Circuit (PVC). A PVC is used to maintain a permanent connection between two points on a network. Changes to ATM settings should not be made unless you are advised to do so by your Internet Service Provider.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Static Routes Use the static routes advanced option to configure static routes to remote equipment. Static routing allows a pre-defined route to be set for the transmission of data. Static routes take precedence over all dynamic routing options and also provide enhanced security over dynamic routing. To configure the static routes: 1.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Dynamic DNS Use the dynamic DNS advanced option to set up dynamic DNS. Dynamic DNS translates IP addresses into alphanumeric names. For example, an IP address of 333.136.249.80 could be translated into siemens.com. To use the DDNS service, you must register for the service. You can register from the following web page: www.dydns.org/services/dydns. Once registered, you must set up your DNS data on the Gateway.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features RIP (Routing Information Protocol) Using RIP, the Gateway is able to determine the shortest distance between two points on the network based on the addresses of the originating devices. RIP (Routing Information Protocol) is based on distance algorithms to calculate the shortest path. The shortest path is based on the number of hops between two points. To use the RIP option: 1.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Home Network The Home Network option displays all network-related information. You must be logged in as the administrator to access this option. To use the Home Network option: 1. Click the Home Network button on the Gateway Options pane. This displays the “Home Network” window containing information about the home network. 2.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features IP Network The Gateway provides the flexibility to use different ranges of IP addresses to be assigned by the DHCP Server housed in the Gateway. DHCP (Dynamic Host Configuration Protocol) allows computers to obtain either permanent or temporary IP addresses from a central server. To configure the IP network option: 1. Click the Configure the local SpeedStream Gateway IP Network hyperlink.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Server Ports Common applications such as HTTP (Web site traffic), FTP, and Telnet use pre-defined incoming port numbers for compatibility with other services. If you wish to change the ports used by these applications you may do so using this option. This feature is recommended for use by advanced users only. To configure the server port option: 1. Click the Configure the Local SpeedStream Gateway Server Ports hyperlink.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features LAN/WAN Port If your Gateway contains four Ethernet ports, Ethernet port #4 can be used as either a LAN (network) port or as a WAN (Internet connection) port. Select the appropriate option to define whether the port is used as a fourth local network port or as a connection for another broadband device.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Wireless Network Configure the wireless network using this option. The wireless settings on the Gateway must match those of any wireless clients on your network. To configure the wireless network: 1. Click the Configure the Local SpeedStream Gateway Wireless Network hyperlink. This displays the “Wireless Summary” window. 2. Click Begin Wireless Wizard. This displays the “Wireless Setup Configuration” window. 3.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Set the wireless security level from the “Wireless Security Configuration” window. All wireless devices attached to the Gateway MUST have the same wireless security settings for your network to have proper communications and security. 7. From the Security Mode drop-down menu, select one of the following options: • WEP 64-bits Wireless Equivalency Privacy.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Wireless Setup WEP 64-Bit Option (Advanced Home Network) WEP security offers the same security offered by a wired LAN with encrypted packets. This section assumes you currently have the “Wireless Security Configuration” window displayed on your computer. To use the WEP 64-bit option: 1. From the “Wireless Security Configuration” window, select WEP 64-bits from the Security Mode drop-down menu. 2. Click Next.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Wireless Setup WEP 128-Bit Option (Advanced Home Network) WEP security offers the same security offered by a wired LAN with encrypted packets. This option offers 128-bit encryption, which is the most secure WEP option. This section assumes you currently have the “Wireless Security Configuration” window displayed on your computer. To use the WEP 128-bit option: 1.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Wireless Setup WPA PSK Option (Advanced Home Network) WPA security changes encryption keys after a specified amount of time. This is the most secure option for wireless networks. This section assumes you currently have the “Wireless Security Configuration” window displayed on your computer. To use the WPA option: 1. From the “Wireless Security Configuration” window, select WPA PSK from the Security Mode dropdown menu. 2.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Wireless Filter and Options Configuration Control access to the Gateway of wireless devices based on the MAC address of the device using the “Wireless Filter Configuration” window. A MAC (Media Access Control) address refers to a hardware address that uniquely identifies each device of a network. Refer to the user documentation for each device you wish to deny or allow access for a particular MAC address.
6500 Series Residential Gateway User’s Guide 5. Configuring Advanced Features Optionally, configure the following items: • Data Transfer Rate If a particular wireless client is unable to auto-negotiate a connection to the Gateway, the data transfer rate may be set to a specific data rate such as 11 Mbps for 802.11b wireless clients. • RTS/CTS Threshold A group of wireless clients may experience difficulty communicating with the Gateway without interrupting each other’s communications.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Powerline Security Configuration If you have a Powerline enabled Gateway, you have the option of configuring security for the Powerline connection. To configure powerline security: 1. Select one of the following Powerline Interface options: • Enable Enables a powerline connection. • Disable Disables a powerline connection. Click Next. This displays the “Finish” window. 2.
6500 Series Residential Gateway User’s Guide 5. Configuring Advanced Features Select one of the following Powerline Filter options: • Enable Enables powerline filtering. • Disable Disables powerline filtering. If powerline filtering is disabled, all devices have access to the Gateway. 6. If powerline filtering is enabled, select one of the following Filter Mode options: • Allow Permits access to all the MAC addresses entered in the table.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features UPnP (Universal Plug and Play) Microsoft UPnP allows the Gateway to communicate directly with certain Windows operating systems to trade information about the special needs of certain applications (such as messaging programs and interactive games) as well as provide information about other devices on the network.
6500 Series Residential Gateway User’s Guide 7. Configuring Advanced Features Double-click the icon. The Gateway will open another Web page for UPnP functions. Now, NAT functionality is available. The Gateway will create virtual servers automatically when it detects the computer running Internet applications that require this configuration. Now you can configure the Gateway for UPnP. To configure UPnP on the Gateway: 1.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Security Your Gateway provides broad security measures against unwanted users. Security also allows for the configuration of the Gateway firewall, administrator password, (NAT) Network Address Translation, and DMZ (Demilitarized Zone) configuration. To use the security option, click the Security button on the Gateway Options pane. This displays the “Security Options” window containing icons to access the security features.
00 Series Residential Gateway User’s Guide Configuring Advanced Features Firewall Settings A firewall is a system designed to prevent unauthorized access to or from a private network. The firewall window provides a listing of options to be enabled or disabled as well as links to configure the more complex details of each feature. To configure the firewall: 1. From the “Security Options” window, click Firewall Settings. This displays the "Firewall Settings" window. 2.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Security Level Security level refers to how much access is permitted from your Gateway to the Internet or other networks. To enable and configure the security level feature: 1. Select Level from the “Firewall Settings” window. 2. Click the Configure hyperlink next to Level. This displays the “Firewall Level Configuration” window. 3. Select the firewall security level from the Select Firewall Level drop-down menu.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Attack Detection If the Attack Detection System is enabled, the Gateway provides protection against the most common hacker attacks that attempt to access your computer/network from the Internet. Intrusion attempts can also be logged to provide a record of attempts and their source (when available). To enable and configure the attack detection feature: 1. Select Attack Detection from the “Firewall Settings” window. 2.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features • TCP FIN An outside device can send an attack using TCP FIN. This attack never allows a data packet to finish transmitting and brings down your system. • TCP XMAS An outside device can send an attack using TCP packets with all the flags set. This causes your system to slow to a halt.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features IP Filtering Define inbound and outbound IP filter rules using this procedure. IP filtering rules can only be defined if the Firewall Level setting is Custom. This method of firewall protection is recommended for advanced users only. To define IP filtering rules: 1. Click the Configuration hyperlink next to the IP Filter option on the “Firewall Settings” window. This displays the “Firewall IP Filter Configuration Wizard” window.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Add New IP Filter Rules The “Basic Rule Definition” window is displayed when you select Add New IP Filter Rule from the “Firewall IP Configuration Wizard” window. Using this option, you can define both inbound and outbound rules. Each rule defined is added to the Rule Definition table. To add a new rule: 1. Type up to a five digit numeric value in Rule No to uniquely identify the rule. 2.
6500 Series Residential Gateway User’s Guide 9. Configuring Advanced Features If you selected This IP Address, enter an IP address in the IP Address field and do one of the following: • Enter a netmask in the Netmask field. • Select or Host to use your Gateway netmask as the source netmask. 10. Under the Destination heading, select a network connection from the Network Interface drop-down menu. 11.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features TCP/UDP Options Window The “TCP/UDP Options” window is displayed if you select TCP or UDP protocol from the “Protocol Definition” window. If you selected either of these protocol types, you must identify the source and destination ports. 1. Select one of the following options from the Source Port Operator drop-down menu and the Destination Port Operator drop-down menu: • any Any port is acceptable as the source/destination port.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features ICMP Options Window The “ICMP Options” window is displayed if you select ICMP protocol from the “Protocol Definition” window. 1. Do one of the following: • Select any of the ICMP options you wish to filter. • Select All Types to filter all options. 2. Click Next. 3. Click Finish.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Clone IP Filter Rules The “Clone Rule Definitions” window is displayed when you select Clone IP Filter Level from the “Firewall IP Configuration Wizard” window. Using this option, you can clone either high or low level rules and modify them according to your needs. If you choose to clone IP filter rules, the rules already defined in the Rule Definition table are discarded. To clone IP filter rules: 1.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features DMZ The DMZ feature allows a computer on your home network to circumvent the firewall and have direct access to the internet. This feature is primarily used for gaming. The Gateway allows you to configure a temporary or permanent DMZ (Demilitarized Zone) to bypass the firewall for network or Internet gaming. If the DMZ feature is enabled, you must select the computer to be used as the DMZ computer/host.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Firewall Snooze Control The snooze feature allows you to bypass the firewall for a set amount of time so outside support personnel can access your Gateway or network, or so you can run an application that conflicts with the firewall. This function is recommended for use only when you require this special level of unrestricted access as it leaves your Gateway and network exposed to the Internet with no firewall protection.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Administrator Password You may change the Gateway administrator password at any time if you have administrative rights to the Gateway. To change the administrator password: 1. From the “Security Options” window, click the Admin Password button. This displays the “Enter Network Password” window. 2. Provide the administrator log on ID and password, then click OK. This displays the Gateway Administrator Setup window. 3.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Address Translation The Address Translation feature provides different methods of keeping individual users/computers hidden behind a single outward-facing address, while still allowing them to access the Internet and related applications. If you have more than one available Internet connection interface, they will all be displayed in the drop-down menu for ease of selection.
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Address Translation With NAT Network Address Translation (NAT) translates an IP address from your home network to an address on the Internet. It allows only one machine to access the Internet. To enable and configure NAT address translation: 1. Select Address Translation (NAT) from the “Address Translation (NAT/NAPT)” window. 2. Click the Configure hyperlink next to Address Translation (NAT).
6500 Series Residential Gateway User’s Guide Configuring Advanced Features Address Translation With NAPT Many applications require special port access to the Internet in order to function. By enabling Network Address Port Translation (NAPT), multiple computers in your home network have access to the Internet by translating port addresses to an Internet IP address while masking their IP addresses from outside users. Only TCP, UDP, and ICMP protocols support NAPT.
6500 Series Residential Gateway User’s Guide 5. Configuring Advanced Features Do one of the following: • Select one of the following services from the Select service by name drop-down menu. − Telnet Telnet is a program that allows you to connect to other computers over the Internet. This options uses port 23. − FTP (File Transfer Protocol) FTP is used to transfer files in both ASCI and Binary format between local and remote devices. This option uses port 21.
Chapter 7 Monitoring Gateway Health 7 This chapter explains how to monitor the health of the Gateway. This chapter describes how to monitor the health of the Gateway. The Gateway health options are used to gauge the various measures of Gateway’s health. To use the Gateway health options, click the Gateway Health button from the Gateway Options pane. This displays the “Gateway Health” window.
6500 Series Residential Gateway User’s Guide Monitoring Gateway Health Statistics You can display statistics for the Internet, Home Networking, Security, and Logging. To display any of these statistics, click the Statistics button from the “Gateway Health” window. This displays the “SpeedStream Gateway Statistics” window. Click the hyperlink for the type of statistics you wish to view.
6500 Series Residential Gateway User’s Guide Monitoring Gateway Health Internet Stats Internet statistics are commonly used by your Internet Service provider to diagnose service-related issues. Internet statistics include either ATM or DSL statistics. ATM Statistics View status and statistical information for the WAN-side Asynchronous Transfer Mode (ATM) network connection. WAN-side connection to the service provider is based on an Asynchronous Transfer Mode (ATM) network connection.
6500 Series Residential Gateway User’s Guide Monitoring Gateway Health Home Networking Stats Home Networking statistics are helpful for troubleshooting issues on your home network. These statistics are displayed for each physical interface connected to the Gateway. They are separated into Ethernet, USB, Powerline, or Wireless statistics. Ethernet Statistics View status and statistical information for LAN-side Ethernet connectivity.
6500 Series Residential Gateway User’s Guide Monitoring Gateway Health Logging Extensive activity logs are provided for advanced troubleshooting and administrative use. The following types of logs are available: System, Firewall, and User Access. System Logging System logging displays Gateway status, user login, interfaces accessed, etc. Activity displayed in the system log is defined using the checkboxes provided at the bottom of the window. Click Apply after making any changes.
6500 Series Residential Gateway User’s Guide Monitoring Gateway Health Update Firmware This feature updates the firmware of your Gateway through the Internet or from a device connected to your Gateway. This option may not be available on your Gateway configuration. If available, you must be logged in as the Gateway Administrator to access the utility. To access this feature, click the Update Firmware button from your “Gateway Health” window. This displays the “System Update” window.
6500 Series Residential Gateway User’s Guide Monitoring Gateway Health Diagnostics The Gateway provides diagnostic tests and data for each interface. This data is commonly requested by technical support to assist in troubleshooting. To access this feature, click the Diagnostics button from your “Gateway Health” window. This displays the “Diagnostics” window. To use the diagnostic option: 1. Select a connection to test from the Connection to Test drop-down menu.
Chapter 8 Miscellaneous Gateway Options 8 This chapter explains how to customize the appearance of the configuration program and to reboot the Gateway. This chapter is organized into parts that correspond to the following buttons shown in the Gateway Options pane. Customize the Gateway’s display. Reboot the Gateway. Customize You are able to control the background color, language, and time zone settings of your Gateway using customization options.
6500 Series Residential Gateway User’s Guide Miscellaneous Gateway Options Color Palette Multiple color selections are available to customize the appearance of the configuration interface/program. To configure the color palette: 1. From the “Customized Settings” window, click the Color Palette button. This displays the “Customized Colors” window. 2. Using the color drop-down menus from the different display options, select the colors you wish to use in the system. 3.
6500 Series Residential Gateway User’s Guide Miscellaneous Gateway Options Language Multiple languages may be available for displaying text in the configuration interface/program. This option may not be available on your Gateway configuration. To set the language used on the Gateway windows: 1. From the “Customized Settings” window, click the Language button. This displays the “Customized Language” window. 2. Select your desired language. 3. Click Apply.
6500 Series Residential Gateway User’s Guide Miscellaneous Gateway Options Time Zone Using this option, you can configure the time parameters to automatically synchronize the Gateway’s internal date and time settings with those of your selected time zone. This time will be used to control time restrictions you may set for users as well as in entries in the system log. To enable and configure the time zone feature: 1. From the “Customized Settings” window, click the Time Zone button.
6500 Series Residential Gateway User’s Guide Miscellaneous Gateway Options Reboot You can reboot the Gateway using the Reboot option, or you can reset the Gateway to factory defaults using the reset option. Reboot should be used when the Gateway needs to be restarted. The Gateway can also be rebooted using the power switch on the rear panel of the Gateway. This option can be used at either the user or administrator level. To reboot or reset factory defaults on the Gateway: 1.
A Appendix A Troubleshooting Overview This chapter covers some common problems that may be encountered while using the Wireless DSL Gateway and some possible solutions to them. If you follow the suggested steps and the Gateway still does not function properly, contact your Internet Service Provider or Technical Support for assistance. General Issues Problem: Can't connect to the Gateway to configure it.
6500 Series Residential Gateway User’s Guide Appendix A - Troubleshooting Contacting Technical Support Before contacting technical support, please refer to the previous troubleshooting information. For issues concerning DSL service or connectivity, contact your Internet Service Provider (ISP) directly.
B Appendix B Specifications Media Interface: RJ-11 DSL WAN connection (5) 10/100Base-T RJ-45 Ethernet LAN connections (Auto-MDI/MDI-X) USB Type B connection DB-9 RS-232 Serial console port Diagnostic LEDs: Power, Status, Link and Activity for DSL, Ethernet, USB (optional), and Wireless Management: Intuitive, Web-based management Comprehensive hardware diagnostics SNMPv1 support UPnP IGD-NAT traversal support XML Management Scheme, DSL Forum 2002-281 Security: PAP (RFC 1334), CHAP (RFC 1994) Passwor
6500 Series Residential Gateway User’s Guide Routing: Appendix B Specifications DHCP server and DNS agent Network Address Port Translation (NAPT) Network Address Translation (NAT) Packet filtering RFC 2364 Point-to-Point Protocol over ATM PVCs (PPPoA) RFC 2516 Point-to-Point Protocol over Ethernet (PPPoE) RFC 2684 (formerly 1483) Bridged Ethernet and routed encapsulation RFC 2225 (formerly 1577) Classical IP over ATM PPPoE Relay/Bridging Configurable PAP and CHAP authentication TCP/IP with RIP1 and RIP2
Siemens Subscriber Network 4849 Alpha Road Dallas, TX 75244 USA (972) 852-1000 Tel (972) 852-1001 Fax info.ssn@siemens.com http://www.icn.siemens.