You are on page 1of 134

ONT-2-E4xxxi Multi-service

Residential Gateway Series
Operator Guide
for ONT-2-E4000i, ONT-2-E4020i, ONT-2-E4021i, ONT-2-E4020iWn,
ONT-2-E4021iWn, and ONT-2-E4001i

Review Draft

TM 87-10878 Rev. A
March 2014

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

Copyright © 2014 Aurora Networks. All rights reserved.

All rights reserved. No part of this document may be reproduced, stored in a retrieval system, or transmitted, in any form or
by any means, electronic, mechanical, photographic, magnetic, or otherwise, without the prior written permission of Aurora
Networks.

Aurora Networks makes no representations, express or implied, with respect to this documentation or any of the software it
may describe, including (with no limitation) any implied warranties of utility, merchantability or fitness for any particular
purpose. All such warranties are expressly disclaimed. Neither Aurora Networks nor its distributors or dealers shall be liable
for any indirect, incidental or consequential damages under any circumstances.

(The exclusion of implied warranties may not apply in all cases under some statutes, and thus the above exclusion may not
apply.)

Specifications are subject to change without notice. Every attempt has been made to make this manual complete, accurate,
and up-to-date. Readers are cautioned, however, that Aurora Networks reserves the right to make changes without notice
and shall not be responsible for any damages, including indirect, incidental or consequential damages, caused by reliance on
the material presented, including, but not limited to, omissions, typographical, arithmetical, or listing errors in the material.

Aurora Networks, the Aurora logo, LcWDM, PWRLink, SUPRALink, and Trident7 are registered trademarks of Aurora
Networks, Inc. AUROS, BitCoax, Fiber on Demand, Light-Plex, MAXLink, METROLink, Node PON, OBI-free, Opti-
Trace, PWRBlazer, Remote QAM, SMART Media Converter, Universal Digital Return Platform, and VHub are trademarks
of Aurora Networks, Inc. Other product and company names mentioned herein may be trademarks of their respective
owners and are used here only for identification purposes.

Revision Date ECO
Number
Rev. A Initial release. xxxxxx xxxxxxx

Visit www.aurora.com for the latest documentation release information.
Aurora Networks, Inc.
5400 Betsy Ross Drive
Santa Clara, CA 95054 USA
Phone +1 408.235.7000
Fax +1 408.845.9043
www.aurora.com

ii TM 87-10878 Rev. A

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

Contents
Contents iii

Preface ix
Intended Audience .............................................................................................................................................ix
Conventions Used in This Guide .......................................................................................................................ix
How to Use this Guide .......................................................................................................................................ix
Related Documentation .......................................................................................................................................x
ONT-2-E4xxxi Multi-service Residential Gateway Series Models ...................................................................xi
Product Support .................................................................................................................................................xi
Comments and Feedback ...................................................................................................................................xi

Chapter 1 Introduction and Product Overview............................................................ 1
1.1 Introduction ..............................................................................................................................................1
1.2 Overview of ONT-2-E4xxxi Multi-service Residential Gateway Series .................................................2
1.3 Network Deployment of ONT-2-E4xxxi Residential Gateway Series .....................................................3
1.4 Ports and Interfaces—Rear Panel .............................................................................................................3
1.5 Interfaces Description ..............................................................................................................................5
1.5.1 Ethernet Connections ...............................................................................................................5
1.5.2 EPON SC/APC Fiber Optic Network Interface .......................................................................5
1.5.3 Voice Telephony Interfaces (Standard Telephone) ..................................................................6
1.5.4 IEEE 802.11n Wireless Access Point with Support for Secured Access .................................6
1.5.5 RF Overlay (RF Video Service) ...............................................................................................6
1.5.6 Power .......................................................................................................................................7
1.6 Supported Residential Gateway (RG) Features ........................................................................................7
1.6.1 Network Address Translation (NAT)/NAPT (Network Address Port Translations) ...............7
1.6.2 Domain Name System (DNS) Relay and Dynamic Domain Name System (DDNS) ..............8
1.6.3 Dynamic Host Configuration Protocol (DHCP) Client and Server ..........................................8
1.6.4 Security Firewall and Rich Packet Filtering.............................................................................8
1.6.5 Advanced Quality of Service, ..................................................................................................8
1.6.6 Virtual Server ...........................................................................................................................8
1.6.7 Flexible Management Interfaces including Web GUI..............................................................8
1.7 Product Specifications ..............................................................................................................................9
1.7.1 Environmental Specifications ..................................................................................................9
1.7.2 Power Specifications ................................................................................................................9
1.7.3 Optical Interface .......................................................................................................................9
1.7.4 Ethernet Interface .....................................................................................................................9

TM 87-10878 Rev. A iii

........... A ....................... 37 4.............................................................................................3 Statistics Information .................ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1.......................................................................................................................................................................................................................... 24 4........................................................................................3................................................................................................................................3................................................................. 10 Chapter 2 Before Configuring Your ONT ............... 18 3................................................................ 35 4................ 40 4........................ 18 3................................................ 19 Chapter 4 Advanced Setup ................. 11 2.......................5 Wireless Access Point for the ONT-2-E4020iWn and ONT-2-E4021iWn ..........7........................................................................................................................................ 32 4................................................................................................................................................................2 Device LAN IP Settings . 32 4................................................................................................. 13 Chapter 3 Configuring Device Information ................... 13 2...................................................................................................................................7.................................................................................................. 13 2.....................2...............2................................................................................................................................................................................................... 21 4.............. 43 iv TM 87-10878 Rev............................ 12 2...................................................................................2 WAN Information .............2............................................................................... 16 3....................1.......................1 Username and Password for Web GUI Interface .. 37 4..............1 Factory Default Settings .................................................................................2 Accessing Your ONT-2-E4xxxi Unit and Web GUI.3.......................1 LAN ....3 ISP Setting in WAN Site ................................................................................. 12 2..... 34 4............................ 21 4...................................4..............................................................3 DMZ Host ...............6 DHCP Device Info .................................... 15 3...................................................3.. 11 2... 17 3...........................1 Summary ..............3 LAN ......................5 ARP Device Info ....................................................................1.....................................1.............................................. 12 2..... 21 4.........................................................6 Telephone Interface.................1 NAT Virtual Server .................................................................................................2 Layer 2 Ethernet Interface ............................ 16 3...............................1.1 Saving Configuration Changes ........................4 Route Device Info ............................................................................................................1 Layer 2 Interface .....3 IPv6 Autoconfig .1 LAN Statistics ..2 WAN Service Statistics ......................................4 DHCP Server......................................1......2 LAN VLAN Setting .........3 Connecting to the GUI Interface of the ONT ..........5 LAN Port Addresses.3...................................2 Port Triggering ....................................... 10 1.................... 11 2........................................................................................ 16 3..................................................................................................................................................1 Layer 2 EPON Interface ................1.....................................................................................4 NAT ..2 WAN Service ............................................................ 12 2............... 23 4...............................4............................................................................................1........4.......... 12 2........................................... 15 3...............................................................2 Logging Out ..............................................

............................................................. 87 5....1.........9 Domain Name Service (DNS) ....................................................................................... 79 4...........7. 65 4.8 Routing ........10 Universal Plug and Play (UPnP) ......................................................................................................................... 54 4................1.............16 Multicast.......12 Interface Grouping .................................... 71 4......................................................................................................14......... 63 4.................9..............................................................................................................................2 Channel Allocation ......7...................................................... 87 TM 87-10878 Rev......... 50 4......................................................................... 75 4........4 MAC Filtering .................3 Incoming IP Filtering .....................................................7..................................................................2 Outgoing IP Filtering ........................3 Policy Routing..............................................8........................................... 79 4.1 SSID Uniqueness ................................................................ 46 4...........1 Wi-Fi Testing and Deployment Considerations ...............................................................................1 83 4....5...8.......................................................................................... 50 4............................ 71 4...........4 Routing Information Protocol (RIP) Routing ................................................................................................7 Quality of Service (QoS) ........................................................................................................................................13 IP Tunnel .............13........5.2 QoS Policer .................................................... 58 4..................................................................................................... 44 4.....................................................1 Configure Default Gateway .........................11 DNS Proxy ......................2 83 4.............8............................................................. 53 4.................................................8........................................7..............................................................................9...2 Static Route ........... 71 4............................. 44 4... 81 4................ 83 Chapter 5 Wireless .............3 QoS Classification............................................................................6..................................2 Dynamic DNS ..........1 IPv6inIPv4 (6in4)............. 48 4.............................................5..................................6............. 72 4.........14.........13....................................................15 83 4..................................................... 55 4.............................................. 87 5.........6 Parental Control .......................................................................................................................... 87 5....1 IP Filtering ..... 66 4.........................................................................1 Time Restriction ............................. 44 4........1 DNS Server ......................................................................... 67 4...................................................................................2 URL Filter ................... A v ...........................................................................................................14 83 4....... 77 4....................................... 69 4...............................................................................................................................1 QoS Queue ....................5...........................................................4 QoS Port Shaping ................. 74 4....................................................................................................................................................................................................2 IPv4inIPv6 (4in6)...5 Security .......................................................................................................................................... 66 4.................................................................................................................................................. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4......................................................

.....................................................3 System Log .. 107 7................................................................................................. 97 6...4 Security Log ....................................................2 Settings ... 104 6............................................................................2 Global Parameters—SIP Debug Settings ................... 109 8............................................................................................................... 90 5..........7 Station Info .....................................................................................9 Update Software ........1 Voice—SIP Advanced Configuration .................................. A .................................... 88 5.......................................... 110 8............................................2........................................................................................................................................................................2 Global Parameters SIP Basic Settings ............................... 100 6...........................1 Backup .....................................................................................................................1 SIP Basic Settings .......................................... 99 6..........................................5 SNMP Agent .........1 Troubleshooting .........................2 Update ..................................10 Reboot ..................................1..................................................................................2 Basic Parameters .......................................................................................................................... 104 6........................................................................................................................................................ 88 5..................................................................................................................... 88 5.......................... 103 6....................... 115 8...............................................7 Internet Time ......................................................................................................6 TR-069 Client .................................................................................................... 110 8................. 117 8............ 92 5........................................1 Service Provider--SIP Debug Setting ............................................................................................................. 97 6.....................................................1 Service Provider SIP Basic Settings.................................................................. 111 8..............3 Wireless Security .........................................4 Encryption .......... 115 8..................................................................................................... 111 8......3................................................................................................................................................................ 112 8....................................................................... 114 8...................................................................... 100 6...............2................................ 93 5..............................................................2........................................................................................................................................................... 118 8..........................1....4 MAC Filter ..1.................ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 5.......................................................................................8 Access Control ........................ 97 6...... 109 8...........2 SIP Advanced Setting .......6 Advanced Wireless......................................................................................1................................................ 117 8....................................................................... 94 5...............2..............................3 Signal Strength ...................................... 96 Chapter 6 Voice Configurations ............................................................................ 107 Chapter 8 Management........................ 119 vi TM 87-10878 Rev...................3 SIP Debug Setting ......................................1 Set up the SNMP Agent ........3 Restore Default Settings .......................................................................3.................... 105 Chapter 7 Diagnostics ..................................................2 Global Parameters—SIP Advanced Settings ......................................................................................................................................2.............................................................................................................5 Wireless Bridge ......................................................

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Index 121 TM 87-10878 Rev. A vii .

A .ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide viii TM 87-10878 Rev.

related model TM 87-10878 Rev. This preface describes the intended audience of this guide. firewall. voice. and advance Quality of Service (QoS) features on your ONT-2-E4xxxi Series unit. chapter descriptions. related documentation. wireless. A ix . ONT-2-E4020iWn. Firewall. LAN. and system parameters. This symbol identifies important points related to the text. CAUTION! This symbol is used to identify situations that present minor hazards that can interfere with or threaten equipment or system performance. ONT-2-E4021iWn. and how to provide documentation feedback. Symbol Description WARNING! This symbol is used to identify conditions or actions that could seriously injure personnel. Intended Audience The Optical Network Terminal ONT-2-E4xxxi Series Operator Guide is intended for system and network operators. Conventions Used in This Guide The following symbols represent the conventions used in this guide. ONT-2-E4020iWn. Chapter Description Preface Describes the intended audience and scope of this guide. how to access Aurora Networks documentation. to select WAN. This guide contains the configuration information you need to set up your PC to talk to the ONT-2- E4xxxi Series ONT. an electrical shock hazard. You are instructed on how to use the web GUI interface to access operator screens that you use to perform these configurations. as well as to monitor system status. security. ONT-2-E4021i. ONT-2-E4021i. ONT- 2-E4020i. system administrators. list of chapters in this guide. for example. ONT-2-E4020i. and ONT-2-E4001i that comprise the ONT-2-E4xxxi Series. and ONT-2- E4021iWn. This guide describes the GUI interface imbedded in the ONT-2-E4xxxi Series unit and how to use the GUI screens to easily configure the Residential Gateway (RG). and network engineers who are responsible for installing and configuring the ONT-2-E4000i. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Preface System and network operators of Trident7 systems can use the Optical Network Terminal ONT-2- E4xxxi Multi-service Residential Gateway Series Operator Guide to manage the ONT-2-E4000i. Note How to Use this Guide This guide is organized by specific tasks. how to contact product support.

the TR-069 Client. Introduction and Product Presents an introduction to the EPON Multi-service Overview Residential Gateway and a description of interfaces and ports. Chapter 2. how to set up the Internet time and user permissions. product support information. Chapter 4. and DHCP device information. DNS Proxy. Advanced Setup Describes how you can view and configure Layer 2 interfaces (EPON and Ethernet). and restore functions.3ah EPON Multi-service Residential Gateway ONT-2-E4020iWn Data Sheet 87-50074 Rev. A IEEE 802. default username and password. device IP and DHCP server settings.com for the latest software versions and TM numbers for the corresponding manuals. and logging into the web interface. ARP. MAC filter.aurora. Chapter 5. Related Documentation TM Number ONT-2-E4xxxi Multi-service Residential Gateway Series Hardware Installation Guide 87-50077 Rev. B Note: TM numbers for software manuals depend on the software version (different manuals for different versions). station information. and how to provide documentation feedback. Universal Plug and Play. Chapter 7.3ah EPON Residential Gateway ONT-2-E4000i Data Sheet 87-50076 Rev.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Chapter Description names. Chapter 1. and Storage Service. Chapter 3. update. Chapter 6. LAN. A . downloading new and updated software. A IEEE 802. Domain Name Service. Routing. and a detailed description of the supported features and Residential Gateway (RG) capabilities. Chapter 8. Before Configuring Your ONT Read information about factory default settings for the web GUI interface. product specifications. and rebooting the ONT. You can configure wireless security. wireless bridge.11-based wireless network. B Sheet Trident7 Element Management Suite User Guide 87-50067 Rev.aurora. as well as System and Security logging. and advanced wireless parameters. x TM 87-10878 Rev. Wireless Provides information on configuring parameters in an IEEE 802. Related Documentation Refer to Aurora Networks’ Web site at www.com for the latest product information and documentation updates. statistics.3ah Multi-service Residential Gateway EPON ONT-2-E4xxxi Series ONTs Data 87-50075 Rev. Management Explains the backup. A IEEE 802. Quality of Service. See www. Voice Configurations Describes how to configure Session Initiation Protocol (SIP) parameters for voice service. WAN service. Configuring Device Explains the screens that you can use to view and monitor Information summary device status information and specific WAN . The Web site includes a special customer support area (password required) for Aurora customers. Diagnostics Explains the diagnostics screen you can use to run diagnostic tests to check your Ethernet and wireless connections. route.

click Customer Registration and register to get your password. or Toll +1 408. For questions about or comments on this manual: phone +1 408. Product Support For technical support: phone +1 888.7061 or e-mail techpubs@aurora. Submit comments by sending e-mail directly to techpubs@aurora.. TM 87-10878 Rev.aurora. Select Support and Tech Manuals to see the corresponding TM numbers.850.S.com. ONT-2-E4xxxiWn-** -US United States -UK United Kingdom -EU Europe -AU Australia Note: The ONT-2-E4020iWn and ONT-2-E4021iWn have two attached antennas. or e-mail tac@aurora. Do not attempt to detach the antennas. use the AC adapter provided with your ONT or the AC adapter meeting the electrical requirements suitable for your geographic location. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Related Documentation TM Number Go to www.com. If you don’t have a password.R. This area requires a password.8249. A xi . You can also send e-mail to support@aurora. Canada. Comments and Feedback We have made every effort to ensure that this manual describes the product completely and correctly.6726) toll-free (U. After logging in (with your e-mail address and password). Item Part Number Description ONT-2-E4xxxi-** or Where ** is one of the following: EPON Multi-service Residential Gateway.). select Support and Software to see the latest software versions.235.287.com.AURORA6 (888. P.com.com and click on Support then Software for the latest software release information. For each model. ONT-2-E4xxxi Multi-service Residential Gateway Series Models The following table lists the ONT-2-E4xxxi Series model names/numbers by country. and we encourage your feedback—your comments and corrections are welcome.

A .ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide xii TM 87-10878 Rev.

MAC Filtering  Parental Control—Time Restriction. Passwords Control. Static Route. DMZ host  Security—IP Filtering. IPv4inIPv6  Multicast configuration • Wireless (Wi-Fi):  Basic  Security—manual configuration. QoS Policer. URL Filter  Quality of Service (QoS)—QoS Queue. A 1 . Update Software. SNMP agent. and debug settings • Diagnostics tests to test the connection to your local network • Management: Backup settings. Wi-Fi Protected Setup (WPS). Wireless Bridge. Policy Routing. Address Resolution Protocol (ARP) • Advanced Setup:  Layer2 interface--EPON and Ethernet interfaces  WAN service setup: IP over Ethernet. and Station Info status • Voice: SIP basic. IPv6 Autoconfig  Network Address Translation (NAT) setup—Virtual servers. port triggering. You can use the GUI screens to easily configure the Residential Gateway (RG) and wireless (Wi-Fi) features on your EPON gateway. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Chapter 1 Introduction and Product Overview 1. advanced. QoS Port Shaping  Routing—Default Gateway setup. RIP  Universal Plug and Play (UPnP) configuration  Domain Name Server (DNS) Proxy  Interface Grouping configuration  IP Tunnel configuration—IPv6inIPv4. TR-069 (WAN Management Protocol) to perform auto configuration activities. QoS Classification. You can set up the following types of configurations using the web GUI screens: • Device information: Wide Area Network (WAN). Bridging  Local Area Network (LAN) configuration—Enable IGMP Snooping and LAN firewall.1 Introduction This guide describes the web-based GUI interface embedded in the ONT-2-E4xxxi Multi-service Residential Gateway Series ONTs. and Reboot functions TM 87-10878 Rev. routing. statistics. VLAN setup. and Advance Features configuration. Wired Equivalent Privacy (WEP) encryption  MAC Filter. System and Security Logs.

and IEEE 802. the ONT-2-E4000i only provides the four 1000BASE-T ports. Provisioning of Wi-Fi and RG services are supported through a Web-based GUI interface. and triple-play services. You can upgrade the ONT-2-E4xxxi Series gateways to the latest firmware remotely through the Web-based GUI or the Trident7 EMS. VoIP. 2 POTS ports for VoIP. and up to 1 Gbps (1000BASE-T) connectivity to four independent LANs on the customer premise. IPTV video. All ONTs in the family support the latest Residential Gateway features. IPTV (including high-definition TV). data. firewall security. Optional features for Wi-Fi.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. The ONT-2-E4021iWn is a full-featured EPON ONT Residential Gateway. Support for the Trident7 Element Management Suite (EMS) is built in for service provisioning and management of data. Wi-Fi. A . The various features are described in subsequent sections of this guide. 1 RF Video Overlay port. Voice over IP (VoIP). See Table 1 for a brief overview of interfaces. RF video. Voice over IP. and VoIP services. Table 1 Multi-service Residential Gateway Interfaces and Services Multi-service Gigabit POTS Port RF Overlay Wi-Fi Data and Residential Residential Ethernet VoIP Port Service IPTV Gateway (RG) Gateway (GE) Service RF Video (Wireless) Service Features Series Interfaces Service ONT-2-E4000i 4 NA NA NA X X ONT-2-E4020i 4 2 NA NA X X ONT-2-E4021i 4 2 1 NA X X ONT-2-E4001i 4 NA 1 NA X X ONT-2-E4020iWn 4 2 NA X X X ONT-2-E4021iWn 4 2 1 X X X 2 TM 87-10878 Rev.11n wireless (Wi-Fi) access. The ONT-2-E4020iWn is the same basic unit as the E4021iWn without the RF Video. featuring a 4-port RJ-45 10/100/1000BASE-T Gigabit Ethernet switch. the ONT-2-E4020i has no Wi-Fi and RF Video. and IPTV services on each EPON Multi-service Residential Gateway. efficient provisioning. and RF Video Overlay are also available. including high-speed EPON and Turbo- EPON communication to the Cable Operator or ISP WAN network. ports. the ONT-2-E4021i and ONT-2-E4001i provide RF Video without Wi-Fi.2 Overview of ONT-2-E4xxxi Multi-service Residential Gateway Series The ONT-2-E4xxxi Multi-service Residential Gateway Series of Optical Network Terminals provide basic and optional features supporting current and future business and consumer connectivity needs for data.

3 Network Deployment of ONT-2-E4xxxi Residential Gateway Series The following diagram illustrates an example of a typical network deployment of the ONT-2-E4xxxi Multi-service Residential Gateway Series. Figure 1 Rear Panel Ports on ONT-2-E4021iWn The following table describes all ports and interfaces available on the rear panel of ONTs in the ONT- 2-E4xxxi Series family. Ports and interfaces on an ONT-2-E4021i would be the same. see Figure 2. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. 1. except there would not be any “WiFi” and “WPS” buttons nor antennas. For a description of the optical fiber connector.4 Ports and Interfaces—Rear Panel Ports on the ONT-2-E4xxxi Multi-service Residential Gateway Series are located on the rear panel. where the difference from the ONT-2-E4020iWn is the RF Video Overlay port. See Figure 1 for a view of the ports and interfaces on an example ONT-2-E4021iWn. in addition to the four 10/100/1000BASE-T Gigabit Ethernet ports (LAN1 to LAN4). “WiFi” and “WPS” buttons and the two antennas that support wireless. located in the left end compartment (shown in Figure 1). two voice ports (Phone1 Phone2). Figure 1 shows that an ONT-2- E4021iWn has one RF Video Overlay port. TM 87-10878 Rev. A 3 .

LAN3. LAN2. such as a flash drive. 4 TM 87-10878 Rev. ONT-2- E4001i) Reset Restore to factory defaults. Power off the device when it is not in use. Power Connect to the supplied power adapter. CAUTION: Beware of accidentally pressing this button—it will turn off the ONT.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Table 2 Rear Panel Ports on ONT-2-E4xxxi Multi-service Residential Gateways Interface Description ON/OFF Power ON/OFF switch. (RF-capable models: ONT-2-E4021i. (WiFi-capable models: ONT-2- E4020iWn ONT-2-E4021iWn) LAN1. for power saving. the standard USB connector might accommodate back up of local configuration data and firmware updates via mass storage media. If you power on the device and use a thin needle to press the Reset button for over one (1) second. (Battery) RF Connect to an RF video port for delivery of RF video services over 75 Ohm RG-6 coaxial cable. WPS Press to activate Wi-Fi Protected Setup (WPS) for a period of time. for LAN4 connecting to the local network. 10/100/1000BASE-T Gigabit Ethernet ports Phone1 Connect these two voice ports to an analog phone set with a RJ-11 cable. In the future. RJ-45 Ethernet interface with the self-adaptive rate of 10/100/1000 Mbps. WiFi (Wireless) The WiFi button is reserved for future use. If you cannot log in to the ONT or forget your username/password. Phone2 (all models except ONT-2-E4000i and ONT-2-E4001i) USB The USB port is reserved for future use. ONT- 2-E4021iWn. Depress button to turn on. the ONT is automatically reset and is restored to the factory default settings. Activating WPS in this manner may override your disabling WPS via the GUI interface. Backup Power Connect to an external power supply. press this button for over one (1) second to restore to the default username and password. A .

See Figure 1 for the location of the interfaces and ports on the EPON gateway. supporting bi-directional communications at 2 (2. The IEEE 802. The link length can be no greater than 100 m (≈328 ft).488) Gbps downstream and 1 (1. meaning that each port can act as part of a separate independent network segment.244) Gbps upstream (Turbo-EPON) speeds. where the fiber is shown routed through the smaller aperture for wall mounting. which is the Ethernet standard. when snapped into place.3ah EFM (Ethernet First Mile) compliant.2 EPON SC/APC Fiber Optic Network Interface The ONT-2-E4xxxi Multi-service Residential Gateway Series supports one EPON optical interface via an SC/APC connector located on the left-side rear panel for the Network Interface (NI) connection. The SC/APC PON connector is smartly enclosed by a small plastic removable cover that. All Ethernet ports are “switched” interfaces.3x-compliant gigabit Ethernet 10/100/1000Base-T interfaces auto-detect whether the connecting cable is a straight-through or cross-over type and configure themselves accordingly. 1. 1.1 Ethernet Connections The ONT-2-E4xxxi Multi-service Residential Gateway Series provides four switched Ethernet 10/100/1000 Base-T RJ-45 copper wire twisted pair interfaces for direct connection to a PC or Ethernet set top box.5. or indirect connection to other Ethernet equipment via an attached switch. All ONTs in the series feature a high-speed PON interface to the outside world that is IEEE 802. the interfaces auto-negotiate (by default) to match the speed of the remote device.5 Interfaces Description This section describes the various hardware interfaces on the ONT-2-E4xxxi Multi-service Residential Gateway series. A 5 . protects the connector from becoming dislocated or separated from the ONT.5. or router. hub. In addition. This interface accepts a single mode fiber terminated with an SC/APC connector. hence video or data traffic can be restricted to the port for which it is intended. See Figure 2 for the optical fiber connector location. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. Figure 2 SC/APC Optical Fiber Interface Port TM 87-10878 Rev.

The network connector and network EPON fiber must be wired to the premises by the service provider or contractor in an appropriate location before the EPON Multi-service Residential Gateway can be installed. ONT-2-E4020iWn. The Wi-Fi Protected Access (WPA) and Wired Equivalent Privacy (WEP) features enhance the security level of data protection and access control via Wireless LAN. The RJ-11 POTS (Standard Telephone) ports support a REN (Ringer Equivalency Number) load of four Note (4). 6 TM 87-10878 Rev. The voice ports are commonly known as Plain Old Telephone Service (POTS) ports.11b equipment. and broadband networks. and ONT-2-E4001i units support both IP video and RF video service.11b/g/n Wireless Access Point that provides flexible connectivity between wired. FAX Transmission with T. and data over the same single fiber. The ONT-2-E4020i. call transferring.4 IEEE 802. wired in a standard two-wire configuration. A . ONT-2-E4020iWn. and analog voice data is converted to IP packets for transmission over the service provider’s network. A broad range of codecs is supported.5. ONT-2-E4021i. echo cancellation. such as silence suppression. The RF “F Type” Connector is found on the rear panel of the unit. These connections provide toll quality voice through a Voice over IP (VoIP) connection. with one line per jack. UPC connectors are blue in color.” The voice ports on the ONT use RJ-11 modular jacks. The RF Overlay is a downstream overlay of 1550nm that is added to the same PON fiber with wavelength-division multiplexing (WDM). The RF video overlay service on these units enables delivery of RF video as an overlay onto the PON stream that is delivering IP video.5 RF Overlay (RF Video Service) The ONT-2-E4021i. Refer to Figure 1for the location of the telephone connectors. not an APC connector. ONT-2-E4021i. and Caller ID.11n Wireless Access Point with Support for Secured Access The ONT-2-E4020iWn and ONT-2-E4021iWn units feature an integrated 802.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide A small screw located in the unit holds the cover in place. The unit is backward compatible with existing and installed 802. The ONT-2-E400i supports an UPC connector. You can attach a standard household telephone to these ports to make voice calls. call waiting. ONT-2-E4021iWn.5. voice activity detection.38 fax relay and G. and ONT-2-E4021iWn provide two independent standard analog voice ports.11g and 802. labeled “Phone1” and Phone2. 1. and ONT-2-E4021iWn support a wide variety of telephony features. voice. Call setup and signaling is provided via the Session Initiation Protocol (SIP) for interoperating with industry standard VoIP switches. comfort noise generation.5. WPS (Wi-Fi Protected Setup) is used for easy establishment of secured wireless networks. wireless. Note 1.711 pass-through are also supported modes of operation. 1.3 Voice Telephony Interfaces (Standard Telephone) The ONT-2-E4020i.

The EPON Multi-service Residential Gateway supports a backup power connector in the rear panel of the ONT that is marked as a “Backup Power” connector.1 Network Address Translation (NAT)/NAPT (Network Address Port Translations) NAT and NAPT simultaneously allow multiple users to access outside resources (such as the Internet) with one IP address/one Internet access account. See Figure 3 for a closeup of the Backup Power connector in the rear panel of the ONT. The EPON Multi-service Residential Gateway has a minimum input current rating of 1. It is intended for a backup power supply with alarm inputs. 1.6. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. This backup power connector is reserved for a future feature.5.6 Supported Residential Gateway (RG) Features All ONT-2-E4xxxi Multi-service Residential Gateway Series support the following Residential Gateway features. A 7 . The backup power connector is an 8-pin connector.5 AMPS. See Figure 4 for a closeup of the side backup power connector. Figure 3 Rear Backup Power Connector The EPON Multi-service Residential Gateway also supports an additional backup power connector on the side.6 Power The EPON Multi-service Residential Gateway is shipped with an AC/DC power adapter that accepts a rated input voltage of 100-240 volts AC and provides an output voltage of 12 VDC to the ONT. Figure 4 Side Backup Power Connector 1. TM 87-10878 Rev. The power adapter (also referred to as power supply) shipped with the ONT is equipped with an AC plug that is suitable for the country or region of sale.

a user can assign a PC in the LAN acting as a WEB server inside and expose it to the outside network. More than five (5) DDNS servers are supported.org/.3 Dynamic Host Configuration Protocol (DHCP) Client and Server As part of the Residential Gateway features.6. bandwidth management. as well as DNS IP address to local computers. The ONT-2-E4xxxi Multi-service Residential Gateway Series supports advanced QoS features.6. including rate limiting on a per port basis.6 Virtual Server Users can specify services to be visible from the WAN side of the EPON Multi-service Residential Gateway. For example. the ONT’s DHCP client can obtain a WAN IP address directly from the Internet Service Provider (ISP) automatically. A .2 Domain Name System (DNS) Relay and Dynamic Domain Name System (DDNS) A DNS Relay provides an automatic way to associate a domain name (a user-friendly name such as www. For example. but also based on Port numbers. providing a higher level of security control. Web GUI.6. 1.com) and IP address of a service or device. Users can use Telnet. the DHCP server in the ONT can allocate a range of client IP addresses and distribute them. Provisioning of Wi-Fi and RG services are supported through the Web-based GUI interface.1p) and Layer 3 DiffServ markings. 8 TM 87-10878 Rev. and Traffic Prioritization based on Layer 2 Class of Service (802.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. every DNS conversion request packet from the PC to this gateway will be forwarded to the real DNS in the outside network. A DMZ host setting is provided to a local computer exposed to the outside network. you must first apply for an account from a DDNS service. The gateway can detect incoming service requests and forward either a single port or a range of ports to the specific local computer for dispensation. and SNMP through the WAN and LAN ports to configure and manage the device. When a local machine sets its DNS server with this relay’s IP address.3 specifications through flexible management interfaces with LAN and WAN ports. 1. The DDNS service allows you to alias a dynamic IP address to a static hostname. 1. 1. and VoIP services. Packets will be filtered from and to the Internet.6. to use the service. Outside users can browse inside web servers directly while it is protected by NAT.6.dyndns. From the WAN side. the ONT includes a DHCP server that can serve IP addresses to CPEs attached to the LAN ports. Layer 2 DHCP relay (with Option 82) is also supported.5 Advanced Quality of Service.yahoo. such as http://www. including IP address and subnet mask.4 Security Firewall and Rich Packet Filtering A firewall with rich packet filtering process not only filters the packet based on an IP address. For LAN-attached customer devices. Support for the Trident7 Element Management Suite (EMS) is built in for service provisioning and management of data. IPTV video.6.7 Flexible Management Interfaces including Web GUI The ONT supports Ethernet OAM per IEEE 802. 1. This dynamic IP address is the WAN IP address.

and product specifications: 1.3 Optical Interface Connector: SC/APC Fiber: G.652 single mode fiber IEEE 802.4 Ethernet Interface Number of ports: 4 (four) 10/100/1000 Mbps (1000BASE-T) TM 87-10878 Rev.1 Environmental Specifications • Operating temperature range: 0ºC to +40ºC (+32ºF to +104ºF) • Storage temperature range: -20ºC to +70ºC (-4ºF to +158ºF) • Humidity (Operating): 10% to 90%.240 V AC input • Output: 12 V DC • Power consumption: TBD 1. 100 .3ah (1G-EPON) compliant Supports FEC Transmission speed: • 1 Gbps and 2 Gbps (Turbo-EPON) downstream • 1 Gbps upstream Downstream: • Receive Wavelength (data): 1490 nm ± 10 nm • Receive Wavelength (RF Video): 1555 ± 10 nm • Receive sensitivity @ 1490 nm (min-max): -8 to -28 dBm (without FEC) • Receive sensitivity @ 1550 nm (min-max): -8 to +2 dBm Upstream: • Transmit Wavelength: 1310 nm ± 20 nm • Minimum output optical power: +0.7.2 Power Specifications • Input: unit is supplied with an AC/DC adapter. A 9 . power. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide You can upgrade the ONT-2-E4xxxi Series gateways to the latest firmware remotely through the Web- based GUI and through the Trident7 EMS. non-condensing 1.7.7. 1. non-condensing • Humidity (Storage): 5% to 95%.7 Product Specifications The ONT-2-E4xxxi Series has the following environmental.5 dBm • Maximum output spectrum width (with -20 dB loss): 1 nm: 1.7.

Number of ports: 2 Connectors: RJ-11 Transmission Distance: Up to 1 km 10 TM 87-10878 Rev.7.1q Link distance max: 100 m (≈328 ft) 1. supports MDI/MDIX VLAN: IEEE802.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Connectors: RJ-45 Auto negotiation: IEEE 802.11b/g/n 2X2 MIMO: 2 physical antennas WEP and WPA Security Multiple SSID Support 1.3. A .7. full duplex/halfduplex.5 Wireless Access Point for the ONT-2-E4020iWn and ONT-2-E4021iWn Wi-Fi Standard: 802. 10/100/1000BASE-T.6 Telephone Interface Only the ONT-2-E4000i and ONT-2-E4001i do not have voice ports or a telephone interface.

you need to know the following default settings. 2. and support-level permissions to log in to the web GUI interface.1 Factory Default Settings Before configuring the ONT-2-E4xxxi unit. be familiar with the ONT’s default settings.1.1 Administrator-Level An operator or personnel granted administrator privileges can log in to the Web GUI from the LAN side by using the following default username and password: Username: admin Password: admin 2. wireless and system parameters on the ONT-2- E4xxxi unit. you can log in to the Web GUI through the PON by using the following default username and password: Username: support Password: support Note: If you have forgotten your username or password for the ONT-2-E4xxxi device. 2.1. A 11 .1.3 Support-Level If you are field support technicians or personnel with support-level permissions. 2.1. TM 87-10878 Rev.1. user-level (subscriber).2 User-Level If you have user or subscriber-level permissions.1 Username and Password for Web GUI Interface There are administrator-level.1. you can restore your device to its default setting by pressing the Reset button and holding it for over one (1) second. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Chapter 2 Before Configuring Your ONT Before you start configuring Residential Gateway. Each level of permission has its limit to access and modify the Web GUI screens. This chapter lists the default username/password to log in to the Web GUI. default DHCP server IP address. you can log in to the Web GUI from the LAN side by using the following default username and password: Username: user Password: user 2. and default LAN and WAN port IP addresses. This manual is intended for operator or other personnel with administrator privileges and describes all screens accessible to those with administrator-level permissions.1. default IP address and subnet mask.

1 Subnet Mask 255.168.253 2. you need IE 5.168.1. other users cannot access the system interface until the current user has logged out of the system.1.0 (that is.168. 2.168.2 Accessing Your ONT-2-E4xxxi Unit and Web GUI This section describes how you can log in to the ONT-2-E4xxxi unit and Web GUI using your web browser.255. Be aware that the web GUI interface can only be accessed by one PC at a time. The default IP address of the ONT-2-E4xxxi unit is 192.1.168.100 through 192.1 and the subnet mask is 255.3 ISP Setting in WAN Site DHCP (Dynamic Host Configuration Protocol) is used.168.253).ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 2.255.1.0 You must configure your PC to obtain an IP address through a DHCP server or a fixed IP address that should be in the same subnet as the ONT-2-E4xxxi unit. any attached PC must be in the same subnet and have an IP address in the range of 192. A .255.255.255.254 2. when a PC has logged into the web GUI interface.4 DHCP Server DHCP server is enabled. Your configuration is based on your PC operating system. The easiest method is to configure the PC to get an IP address automatically from the ONT-2-E4xxxi unit using DHCP.1.1. You can easily access the ONT-2-E4xxxi unit and Web GUI through your web browser.168.1.1. You may have to set up your PC to talk to the ONT.0 or above installed on your computer.2 Device LAN IP Settings IP Address: 192.1.1.0 DHCP server function Enabled IP addresses for distribution to PCs 100 IP addresses continuing from 192.1. LAN Port IP address 192.2 to 192.168. the second PC can only access 12 TM 87-10878 Rev.1 Subnet Mask: 255. DHCP assigned IP Addresses: 192. 2. Therefore.1.168.1.5 LAN Port Addresses The parameters of LAN and WAN ports are pre-set in the factory.255. If the previous user forgets to log out. The default values are shown in the following table.2 to 192. For Internet Explorer users.

Open your web browser and type http://192. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide the web GUI interface after a user-defined.1 Saving Configuration Changes Once you make any configuration changes through the Web GUI.2. If the authentication succeeds.1 in the browser's address box.2.1. 2. 2.3 Connecting to the GUI Interface of the ONT 1.2.168. simply close your web browser. automatic logout period expires. Press OK to proceed.2 Logging Out To exit the Web GUI interface. the changes are automatically saved. The default username and password for operator- level privileges are “admin” and “admin” respectively. A 13 . A username and password window will appear. 2. 2. the ONT’s GUI homepage “Device Info” screen displays: TM 87-10878 Rev. Press Enter. The default automatic logout period is 3 minutes. This is the default IP address for this ONT. 3.

A .ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Figure 5 Device Info Screen 14 TM 87-10878 Rev.

wireless driver version. and uptime information. such as board ID. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Chapter 3 Configuring Device Information Once you have logged in to the Web GUI of the ONT-2-E4xxxi Series via your web browser.1 Summary You can view a summary of the general status of the ONT-2-E4xxxi unit by clicking on the Summary menu item under Device Info. You can also view Wide-Area Network (WAN) connection status information. Bootloader version. You can view the following information under the Device Info menu: • Summary • WAN Information • Statistics Information • Route Device Info • ARP Device Info • DHCP Device Info 3. You can view specific information for the ONT. the Device Info Summary screen displays. TM 87-10878 Rev. software version. A 15 . voice service version. base MAC address.

connection type. Internet Group Management Protocol (IGMP) enabled or disabled status. you can view interface and interface description information. To evaluate Wide Area Network (WAN) connections. IPv6 enabled or disabled status.1 LAN Statistics You can view statistics about packets received and transmitted on Local Area Network (LAN) interfaces on the ONT-2-E4xxxi unit by clicking on LAN under Statistics. A . 16 TM 87-10878 Rev. firewall enabled or disabled status. 3.3 Statistics Information You can view LAN and WAN statistics about packets received and transmitted on LAN interfaces on the ONT-2-E4xxxi unit by clicking on Statistics. Multicast Listener Discovery (MLD) enabled or disabled status.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3.2 WAN Information Click on the WAN menu item under Device Info to display the WAN Device Info screen. Network Address Translation (NAT) enabled or disabled status.3. and IPv4 and IPv6 address data. VLAN Mux (Multipler) ID. 3.

and USB port is described as follows.2 WAN Service Statistics You can view statistics about packets received and transmitted on Wide Area Network (WAN) interfaces on the ONT-2-E4xxxi unit by clicking on WAN Service under Statistics. wireless port. USB usb0 interface will always (reserved for future use) show no data (zeroes). • Reset Statistics: Click to reset the numbers. Received: shows the number of Bytes. and Drops (dropped packets) transmitted on that interface. Pkts (packets). Errs (errors). 3. For all ONT-2-E4xxxi models. TM 87-10878 Rev. 3. . and Drops (dropped packets) received on that interface. Errs (errors). Transmitted: shows the number of Bytes.3. Pkts (packets). ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. 2. A 17 . except ONT-2-E400i Port Interface name (GUI) LAN1 eth4 LAN2 eth5 LAN3 eth3 LAN4 eth2 Wireless (antennas) wl0 is the wireless interface if you have a wireless model. Interface: The mapping of interface names to the physical Ethernet LAN ports.

Note the types of indicators for “Flag” on the screen. gateway. and service information by clicking on Route under Device Info. 3.5 ARP Device Info You can view the Address Resolution Protocol (ARP) status information by clicking on ARP under Device Info: IP address. metric.4 Route Device Info By interface. Hardware MAC address. Flag indicator. and device name information. subnet mask. flag indicator. you can view route destination. A . 18 TM 87-10878 Rev.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3.

A 19 . MAC address. such as host name. TM 87-10878 Rev. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3. IP address. and expiration information by clicking on DHCP under Device Info.6 DHCP Device Info You can view Dynamic Host Configuration Protocol (DHCP) lease information.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 20 TM 87-10878 Rev. A .

and DMZ Host • Security—IP Filtering and MAC Filtering • Parental Control • Quality of Service (QoS)—QoS Queue. A 21 . QoS Policer. Policy Routing.1. 4. Static Route.1 Layer 2 Interface You can configure EPON and Ethernet interfaces by clicking the Layer2 Interface menu item under Advanced Setup. and QoS Port Shaping • Routing—Default Gateway. you can view and configure the following types of information: • Layer 2 Interface (EPON and Ethernet interfaces) • WAN Service (including setting up WAN-side firewall) • LAN (including setting up LAN-side firewall) • NAT--NAT Virtual Server. and RIP Routing • Domain Name Service (DNS)—DNS Server and Dynamic DNS • Universal Plug and Play (UPnP) • DNS Proxy • Interface Grouping • IP Tunnel--IPv6inIPv4 (6in4) and IPv4inIPv6 (4in6) • Multicast 4. Be sure to leave one interface as an EPON WAN interface. Port Triggering. TM 87-10878 Rev.1 Layer 2 EPON Interface You can add or remove EPON WAN interfaces by clicking the EPON Interface menu item under Layer2 Interface in the Advanced Setup menu. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Chapter 4 Advanced Setup Under Advanced Setup. The following screen shows that interface “epon0” is the layer 2 EPON WAN interface. QoS Classification.

A . 22 TM 87-10878 Rev. To remove an EPON interface.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Click on the Add button. The EPON WAN Configuration screen is displayed to allow you to add and configure an EPON WAN port. select the interface to be removed by clicking the Remove checkbox next to that interface. Then click the Remove button.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4. TM 87-10878 Rev. The ETH WAN Configuration screen is displayed to allow you to add and configure an Ethernet WAN port. A 23 . Click on the Add button.2 Layer 2 Ethernet Interface You can add or remove Ethernet WAN interfaces by clicking the ETH Interface menu item under Layer2 Interface in the Advanced Setup menu.1.

Select the WAN Service menu item under Advanced Setup. 4. such as whether VLAN is configured. firewall. click the Edit button next to the interface and the Network Address Translation Settings screen displays for you to edit NAT. and IGMP Multicast settings. whether IGMP or NAT or the WAN-side firewall is enabled. click on the Add button. select the interface to be removed by clicking the Remove checkbox next to that interface. Then click the Remove button. Then click the Remove button. select the interface to be removed by clicking the Remove checkbox next to that interface. To change any parameter for an interface.” To remove an Ethernet interface. The WAN Service Interface Configuration screen appears (see below). The Wide Area Network (WAN) Service Setup screen displays and shows detailed information about each WAN interface. Go to Step 0 by clicking on “4. To select and add a new WAN interface for this service.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide To remove an Ethernet interface.2 WAN Service You can set up WAN parameters as instructed by your ISP. VLAN Mux (Multipler) ID. 1. A . 24 TM 87-10878 Rev.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide a. a. Click on the Next button to display the “WAN Service Configuration” screen. Select WAN service type: select Routed (IP over Ethernet) or Bridging service type. A 25 . 2. TM 87-10878 Rev. Click on the drop down menu to select a Layer 2 interface to add to the WAN service.

For untagged service. The QoS 802. Typically voice traffic receives the highest priority. Network Protocol Selection: select IPV4 Only. Next: click to display the WAN IP Settings screen.1Q VLAN ID from range of 0 to 4094 for this tagged service.1 priority determines the outbound port queue to which the packet is sent. Enter 802. video. IPv4&IPv6 (Dual Stack).1P priority level and 802. f. A .1P Priority and 802.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide In this example. or IPv6 only.1P Priority [0-7]: Enter the priority level (0 best effort to 1 lowest priority to 7 highest priority) that is used to prioritize different classes of traffic (such as voice.1P priority tagging allows you to assign a priority (0 to 7) to outbound packets containing a particular VLAN ID. enter “-1” for both 802. data). the “WAN IP Settings” screen displays: 26 TM 87-10878 Rev. For tagged service (802.1Q VLAN ID [0-4094]: Enter the 802.1Q tagging): Enter 802. b. e. c. The 802. Enter Service Description: Type in a service description of the WAN interface you are adding.1Q VLAN ID. d. Routed service type is selected. 3. If you selected Routed service type and clicked Next.

You can choose DHCP to automatically obtain an IP address or use a Static IP address. IGMP is used for one-to-many applications. d. Your ISP provided the information for you to configure WAN IP settings. IGMP is used on IPv4 networks. Back: click Back to return to the previous screen. Enable Firewall: click the checkbox to enable firewall protection h. Enable NAT: click the checkbox to enable NAT functionality g. you are enabling DHCP for the Permanent Virtual Circuit (PVC) in IP over Ethernet (IPoE) mode. e. Enable IGMP Multicast: click the checkbox to enable Internet Group Management Protocol (IGMP) Multicast. and IGMP Multicast settings. the “Network Address Translation Settings” screen (above) also displays for you to edit NAT. and gateway IP address. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide a. TM 87-10878 Rev. A 27 . If you select Obtain an IP address automatically. f. such as online streaming video and gaming. subnet mask. firewall. If you select Use the following Static IP address. you must enter static addresses for the WAN IP address. IGMP is used by hosts and adjacent routers on IP networks to set up group memberships for Multicast service. Next: click next to display the Network Address Translation Settings screen: Network Address Translation (NAT) Settings Configuration If you clicked on Edit in the WAN Service Setup screen to edit WAN settings for an interface. c. b.

You can designate the system default gateways in priority order in this screen. l. You can have multiple interfaces serve as DNS servers with the use order based on the priority order. Next: click next to display the “Routing—Default Gateway” screen. Click Next to display the DNS Server Configuration screen. ii. You can select an interface to be the DNS Server Interface from available WAN interfaces or enter static DNS server IP addresses (primary and secondary). You can also click the right arrow to move the interface back. k. 28 TM 87-10878 Rev. A . No Multicast VLAN Filter: j. Click the left arrow to move the selected interface to the “Selected Default Gateway Interfaces” box. You can change the priority order by removing all the interfaces and adding them back in a different order. You can change the default gateway priority order of the interface by removing all the interfaces and adding them back in the desired order. i. Back: click Back to return to the previous screen. Selected Default Gateway Interfaces: select the interface from the “Available Routed WAN Interfaces” box to be used as a default gateway. Available Routed WAN Interfaces: move an available interface to the “Selected Default Gateway Interfaces” box.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide i.

Use the following Static DNS IP address: you can enter static IP addresses for the DNS server instead of selecting an interface. In ATM mode. static DNS server IP addresses must be entered. A 29 . TM 87-10878 Rev. Next: click to display the WAN Setup—Summary screen. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide i. m. You can view a summary of the configuration settings you entered for the WAN interface. if only a single PVC with IPoA or static IPoE protocol is configured. Make sure your settings match the settings provided by your ISP. Select DNS Server Interface from Available WAN Interfaces: select an interface from the “Available WAN Interfaces” box and move it by clicking the left arrow to the “Selected DNS Server Interfaces” box. ii.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

n. Apply/Save: Click on the Apply/Save button to apply the change and save the
configuration.
4. If you selected Bridging service type in the WAN Service Configuration screen, an example
screen is shown below.

30 TM 87-10878 Rev. A

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

Note: When the ONT is in bridging mode, the ONT simply passes the packet from the LAN side to
the WAN side without inspecting or altering the data in the packet as the packet passes through. A
cable modem typically operates in bridging mode.
a. Enter Service Description: Type in a service description of the WAN interface you
are adding.
b. For tagged service (802.1P priority level and 802.1Q tagging):
Enter 802.1P Priority [0-7]: Enter the priority level (0 best effort to 1 lowest priority
to 7 highest priority) that is used to prioritize different classes of traffic (such as voice,
video, data). Typically voice traffic receives the highest priority.
The QoS 802.1P priority tagging allows you to assign a priority (0 to 7) to outbound
packets containing a particular VLAN ID. The 802.1 priority determines the outbound
port queue to which the packet is sent.
Enter 802.1Q VLAN ID [0-4094]: Enter the 802.1Q VLAN ID from range of 0 to
4094 for this tagged service.
c. For untagged service, enter “-1” for both 802.1P Priority and 802.1Q VLAN ID.
d. Next: click to display the WAN Setup--Summary screen. You can view a summary of
the configuration settings you entered for the WAN interface. Make sure your settings
match the settings provided by your ISP.

e. Apply/Save: Click on the Apply/Save button to apply the change and save the
configuration.

TM 87-10878 Rev. A 31

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

4.3 LAN
You can set up the following various LAN parameters under Advanced Setup:

• LAN
• LAN VLAN Setting
• IPv6 Autoconfig

4.3.1 LAN
Click on the LAN menu item under Advanced Setup. The “Local Area Network (LAN) Setup” screen
displays.

1. Configure the Broadband Router IP Address/Subnet Mask for LAN interface: select the Group
Name.
2. IP Address/Subnet Mask: you can modify the IP address and subnet mask to conform to your
LAN’s IP subnet in the IP Address and Subnet Mask fields.

32 TM 87-10878 Rev. A

Enable LAN side firewall: click to enable the firewall on the LAN side. click on the Add Entries button. 4. 5. Enable DHCP Server: click to enable the DHCP server to automatically assign IP addresses. Enter the Start IP Address and End IP Address that is the range of IP addresses that the DHCP server can assign. TM 87-10878 Rev. Enable IGMP Snooping: you can enable or disable by checking or unchecking the checkbox. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3. for example video streaming. The default is 24 hours. you can enable IGMP Snooping. IGMP snooping prunes multicast traffic at Layer 2 by configuring Layer 2 LAN ports dynamically to forward multicast traffic only to those ports that want to receive it. A 33 . 6. To add DHCP MAC or Static IP address entries. Internet Group Management Protocol (IGMP) specifies how a host can register to a router to receive specific multicast traffic. If you will be multicasting. Blocking Mode: blocks unknown multicast addresses. The client needs to renew IP address prior to expiry of the lease to continue to maintain IP connectivity. Disable DHCP Server: click to disable using the DHCP server function because you want to manually assign IP addresses. Leased Time: you can change the DHCP Leased Time in hours. Standard Mode: disables blocking of unknown multicast addresses. 7. The IP address assigned to the requestor(client) by the DHCP server is valid for the specified leased time. The DHCP Static IP Lease screen displays.

Note: To make the new configuration effective. Configure the second IP Address and Subnet Mask for LAN interface: check the checkbox to add a second IP address and subnet mask. Then click the Apply/Save button to apply the change and save the configuration.2 LAN VLAN Setting You can add or remove various VLAN parameters by selecting the LAN VLAN Setting menu item under Advanced Setup.3. you must reboot the switch or router with the Reboot option under the Management menu in the left panel. When the IP Address and Subnet Mask fields display. enter the information. The Local Area Network (LAN) VLAN Setup screen displays. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. 8. To remove DHCP MAC or Static IP address entries. 34 TM 87-10878 Rev. 9. 10.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide To add a static IP address or MAC address entry to the DHCP Static IP Lease List. 1. click on the Remove Entries button. 4. enter the MAC or IP address. Select a LAN port from the drop down menu. A .

Stateless DHCPv6 means the DHCP server is not required to store any state information about DHCP clients. 3. Enable VLAN Mode: Click to enable (Dynamic) VLAN mode that allows a switch to automatically configure a port for a specific VLAN. such as TM 87-10878 Rev. Note: To make the new configuration effective. 4. Stateful autoconfiguration is IP address assignment through a DHCPv6 server. b. you are adding a new VLAN after clicking the “Add” button. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. a.3. you must reboot the switch or router with the Reboot option under the Management menu in the left panel. clients configure their own IPv6 address through a non-DHCPv6 based method. Add: Click the Add button to add a new VLAN by VLAN ID. The DHCP for IPv6 (DHCPv6) protocol provides stateful address configuration to IPv6 hosts. based on the MAC address of the device. In this step. Pbits: This is a user priority value of traffic type ranging from 0 to 7. 5. Instead. 4. The default value is 5 (Best Effort) and a value of 7 indicates Background. and then click the Remove button to delete the specified VLAN ID. based on flags in the router advertisement message sent by a neighboring router. Vlan ID: enter the VLAN ID you want to add. Remove: check the Remove field next to the VLAN ID you wish to delete. c. with a higher value indicating a lower priority. A 35 . ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 2.3 IPv6 Autoconfig There are two types of autoconfiguration in an IPv6 network--stateful and stateless.

3.3. Stateless: select for stateless DHCPv6. but to obtain other information. such as the DNS server address.3. See description in section 4. b. c. A .3. IPv6 LAN Applications: 2. Clients can use the MAC address of their network interface to determine the interface ID. Leased Time (hour): enter in hours. Static LAN IPv6 Address Configuration: Enter the IPv6 interface address. Interface ID does not support ZERO COMPRESSION "::". RADVD is used in stateless IPv6 autoconfiguration. Enable DHCPv6 Server: select to enable the DHCPv6 server and display the following fields. Stateful DHCPv6 is supported based on the assumption of a prefix length less than 64 bits.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide IPv6 address auto-configuration (based on the IPv6 prefixes included in router advertisement messages) or static IP address configuration. 1. Also see description in section 4. Enable RADVD: select to enable Router Advertisement Daemon (RADVD) and display the following fields. a. Select the IPv6 Autoconfig menu item under LAN. The IPv6 LAN Auto Configuration screen displays. d. DHCP clients do not use the DHCPv6 server to obtain IP address information. Stateful: select for stateful DHCPv6. Start and End Interface Id: The interface identifier is the last 64 bits of an IPv6 address. RADVD implements link- local advertisements of IPv6 router addresses and IPv6 routing prefixes using the Neighbor 36 TM 87-10878 Rev. 3. With stateless DHCPv6.

Enable ULA Prefix Advertisement: select to enable Unique-Local Address (ULA) to advertise the network prefix. the following fields display. a. When NAT is enabled. 5. Standard Mode: disables blocking of unknown multicast addresses. A virtual server is useful if you have software that requires communication with the Internet.4. TM 87-10878 Rev. ULA addresses are private and typically designated by the prefix “fd.1 NAT Virtual Server A virtual server allows you to direct incoming traffic from the WAN side to a private IP address on the LAN side. and the address of the responsible default router. 4. MLD is a protocol used by IPv6 Multicast routers to discover Multicast “listeners” (nodes configured to receive IPv6 Multicast packets) on directly attached links and to discover which packets are of interest to neighboring nodes. 4. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. Prefix: enter the network prefix. c. You can add a new virtual server in this screen. When this field is enabled. peer-to-peer and games.” b. you can configure a NAT Virtual Server. the maximum transmission unit (MTU). Preferred Life Time (hour): f. b. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Discovery Protocol (NDP). d.4 NAT Network Address Translation (NAT) allows you to share one Wide Area Network (WAN) IP address for multiple computers on your Local Area Network (LAN). Valid Life Time (hour): 4. Select the NAT menu item and the “NAT Virtual Servers Setup” screen displays. Randomly Generate: select to enable non-static ULA IP configuration. The advertisement messages contain the routing prefix. for example. e. Blocking Mode: blocks unknown multicast addresses. A 37 . Statically Configure: select to enable static ULA IP configuration. and a DMZ Host. Port Triggering. Enable MLD Snooping: select to enable Multicast Listener Discovery (MLD) snooping for IPv6 Multicast traffic. a.

A . enter the Virtual Server IP address.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Figure 6 NAT Virtual Server Setup 1. You can configure a maximum of 32 entries. Click on the Add button to add a Virtual Server. and view the External Port Start/End and Internal Port Start/End ports from where IP packets are forwarded to the Virtual Server. The “NAT – Virtual Servers” screen displays. An Internal Port entry is only required when the External Port needs to be converted to a different port number used by the server on the LAN side. In this screen. The Virtual Server is identified by the External Port and type of protocol on the WAN side. 38 TM 87-10878 Rev. you are able to select a service.

4. The Virtual Server is identified by the External Port and type of protocol (on the WAN side). Internal Port End is typically set to the same port number as External Port End. 6. Internal Port End: This port number cannot be modified directly. 8. Once the service name is selected. you are able to view your Virtual Server configurations and delete any servers: TM 87-10878 Rev. then the “NAT—Virtual Servers Setup” screen displays. then Internal Port End is set to the same port number as Internal Port Start. In this screen. 3. or TCP/UDP protocol from the drop-down menu. Apply/Save: Click on the Apply/Save button to apply the change and forward IP packets for this service to the selected server. After you Apply/Save the Virtual Server changes. UDP. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Figure 7 Add NAT Virtual Server 2. External Port End: This parameter selects the ending port number for the Virtual Server. This is typically the IP address of the computer on your network which is using the application or game. 7. A 39 . the External Port and Internal Port Start/End numbers will populate. The Virtual Server is identified by the External Port and type of protocol (on the WAN side). Server IP Address: Enter the Virtual Server IP address. 5. Or create a new custom service by selecting Custom Service. 10. Service Name: You can select an existing service to forward IP packets for this service to the virtual server. Protocol: Select TCP. 9. Internal Port Start: If you modify this number. External Port Start: This parameter selects the starting port number for the Virtual Server.

the “NAT Port Triggering Setup” screen displays. 40 TM 87-10878 Rev. you can configure the router to allow the remote party from the WAN side to establish new connections back to the application on the LAN side using the “open ports. require that specific ports in the firewall be opened to allow access by remote parties.4.” You can configure a maximum of 32 entries.” This is important because certain applications. such as video conferencing. games. Port Triggering opens up the “open Ports” in the router’s firewall when an application on the LAN initiates a TCP/UDP connection to a remote party using the “Triggering Ports.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Figure 8 NAT Virtual Servers Configuration 4. and remote access applications.2 Port Triggering Select the Port Triggering menu item under NAT. A . In this screen.

TM 87-10878 Rev. Click on the Add button to select and add an application for which specific ports are identified as open ports. You can configure the port settings in this screen. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Figure 9 NAT Port Triggering Setup 1. A 41 .

You can also enter a custom application name and configure its port settings. 42 TM 87-10878 Rev. Apply/Save: Click on the Apply/Save button to add the configuration changes. 4. you are able to view your port triggering and open port configurations and remove any unwanted configurations by checking the Remove checkbox and clicking on Remove. Application Name: Select the application from the drop-down menu for which open ports have been configured. Once the application is selected. A . After you Apply/Save the NAT Port Triggering changes.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Figure 10 NAT Port Triggering Configuration 2. Use Interface: Select the interface where the open ports will reside. then the “NAT—Port Triggering Setup” screen displays. In this screen. the Trigger Port Start/End and Open Port Start/End numbers are populated. 3.

The DMZ host is the computer to which the Broadband Router will forward all IP packets from the WAN that do not belong to any applications in the Virtual Servers table. In this screen. Figure 11 NAT DMZ Host 1. To deactivate the DMZ Host. A 43 . ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4.3 DMZ Host The DMZ is used to forward all IP packets coming into the router to a specified IP address. clear the IP Address field and click Save/Apply. TM 87-10878 Rev. DMZ Host IP Address: Enter the IP address for the DMZ Host. the “NAT DMZ Host” screen displays. Select the DMZ Host menu item under NAT.4. 2. Save/Apply: Click to activate the DMZ Host. you can enter the IP address of the DMZ Host.

1 IP Filtering You can configure Outgoing IP Filtering and Incoming IP Filtering to manage traffic on your ONT. In this screen. 1. 4. You can configure an outgoing IP Filter that specifies which LAN traffic is blocked from passing through to the WAN side (Internet). A .5 Security You can configure IP Filtering and MAC Filtering to manage traffic on your EPON Multi-service Residential Gateway. you can create an outgoing IP Filter.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4. 4. However.2 Outgoing IP Filtering Select the Security menu item under Advanced Setup.5. 44 TM 87-10878 Rev.5. All outbound IP traffic from the LAN side to the WAN side is allowed by default. the Outgoing IP Filtering Setup screen displays. Remove: Click to remove an outgoing IP filter. you can block outbound IP traffic by configuring IP filters.

5. 7. 3. 11. Apply/Save: Click to save and activate the filter. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 2. TM 87-10878 Rev. Destination IP address: Specify the IP address to which the packets are going (to the LAN side). TCP/UDP. The Add IP Filter—Outgoing screen displays. Source Port: Specify the port number of the port where the packets are coming from (from the WAN side). 10. 8. A 45 . You can add a filter or rule by creating a filter name and one or more conditions that when satisfied will block outgoing IP traffic. Source IP address: Specify the IP address where the packets are coming from (from the WAN side). IP Version: Select IPv4 or IPv6. Add: Click to add an outgoing IP filter. 6. such as TCP. After you save and activate the filter. UDP. then the Outgoing IP Filtering Setup screen displays. Filter Name: Enter the filter name. 9. Protocol: Select the protocol. Destination Port: Specify the port number of the port to which the packets are going (to the LAN side). 4. or ICMP.

46 TM 87-10878 Rev. you are able to view your outgoing IP filter configurations and remove any unwanted configured filters by checking the Remove checkbox and clicking on Remove.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide In this screen. Select Incoming under IP Filtering under Security in the Advanced Setup menu to display Incoming IP Filtering Setup. A . However. 4.5.3 Incoming IP Filtering All incoming IP traffic is blocked when a firewall is enabled on a WAN or LAN interface. you can allow certain incoming IP traffic by setting up incoming IP filters.

2. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. All the conditions must be satisfied before the rule takes effect. TM 87-10878 Rev. A 47 . You must specify at least one condition in the rule. Remove: click to remove the configured IP filter. Add: click to add an incoming IP filter rule and to display the Add IP Filter—Incoming screen.

UDP. Protocol: select TCP/UDP. Source Port (port or port:port): Specify the port or port number of the port where the packets are coming from (from the WAN side). IP Version: select IPv4 or IPv6. Filter Name: enter a name for the filter rule.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3. or ICMP. Destination Port (port or port:port): Specify the port or port number of the port to which the packets are going (to the LAN side).4 MAC Filtering MAC Filtering is only allowed for bridged WAN service. To forward traffic means that all MAC layer frames are forwarded except those matching any of the specified rules in the filter. Destination IP address[/prefix length]: Specify the IP address to which the packets are going (to the LAN side). WAN Interfaces (Configured in Routing mode and with firewall enabled) and LAN Interfaces: to apply this rule. To block traffic means all MAC layer frames are blocked except those matching any of the specified rules in the filter. 4. 5. select one or more of the displayed interfaces. 11. Source IP address[/prefix length]: Specify the IP address where the packets are coming from (from the WAN side). You can configure MAC Filtering to forward or block traffic by MAC address. 10. In this screen. 48 TM 87-10878 Rev. A . 9.5. Apply/Save: Click to save and activate the filter. TCP. Select the MAC Filtering menu item under Security. the “MAC Filtering Setup” screen displays. 4. 6. 7. you can change the MAC Filtering policy or add settings to the MAC Filtering table. 8.

4. 2. A confirmation screen asks you to verify your change. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. Change Policy: select to change the policy of defined MAC filtering rules for an interface. FORWARD: select the policy for an interface to change it. TM 87-10878 Rev. the “Add MAC Filter” screen displays. If you select Add to add an entry to the MAC Filtering table. A 49 . or No to cancel. Select Yes to continue. Choose Add or Remove to configure MAC filtering rules. 3. You can create a filter by specifying at least one condition.

Frame Direction: select direction of frames (WAN. AppleTalk. WAN Interfaces (Configured in Bridge mode only): select the interface from the drop-down menu. 50 TM 87-10878 Rev. Save/Apply: Click to save and activate the filter. NetBEUI. c. parents can configure time of day and URL filter settings to control the Internet activities of the child. Destination MAC Address: enter MAC address.6 Parental Control In a home setting. Protocol Type: select PPPoE. the “Access Time Restriction” screen displays.1 Time Restriction Parents can control access to the router and Internet by configuring rules called Time of Day restrictions. Time of Day restrictions define the time and days computers on the network are allowed access to the Internet.6. restrict the time of web surfing. and limit the child’s access to certain websites. 4. A . IPv4. IPX. IPv6. d.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide a. Select the Parental Control menu item under Advanced Setup. 4. LAN) from the drop-down menu e. In bridging mode. Source MAC Address: enter MAC address. or IGMP. the ONT simply passes the packet from the LAN side to the WAN side without inspecting or altering the data in the packet as the packet passes through. b. f.

The “Access Time Restriction” screen displays. TM 87-10878 Rev. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Figure 12 Parental Control—Restrict Time Access 1. A 51 . Click Add to configure time of day restrictions on a specific LAN device connected to the router.

52 TM 87-10878 Rev. 5. 3. Apply/Save: Click to save and activate the time of day restriction. 4. Days of the week: Click to select which days you want the restriction in place. Browser’s MAC Address: MAC address of the LAN device (computer you are currently using) you want to place on a Time of Day restriction. End Blocking Time: Enter the end time to stop blocking Internet access. Start Blocking Time: Enter the start time to begin blocking Internet access.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Figure 13 Time of Day Restriction 2. 6. 7. A . 8. Other MAC Address: Add MAC address of another LAN device. User Name: Enter child’s name.

Select either to Exclude or Include specific URLs. A 53 . the “URL Filter” screen displays. Click Add to create a URL Filter and display the “URL Filter Add” screen. TM 87-10878 Rev. Select the Url Filter menu item under Parental Control. Figure 14 URL Filter Restriction 1. 2. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4.6.2 URL Filter You can configure a filter to restrict a child’s access to certain web sites by excluding specific URLs or by building a list of included URLs the child may access.

Enter the URL address to either exclude or include. 4. In this screen.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Figure 15 Add Parental Control--URL Filter 3. Apply/Save: Click to save and activate the time of day restriction. 4.7 Quality of Service (QoS) You can configure the following QoS parameters by selecting the Quality of Service menu item under Advanced Setup: • QoS Queue • QoS Policer • QoS Classification • QoS Port Shaping 54 TM 87-10878 Rev. you are able to review your URL filters and remove any unwanted filters by checking the Remove checkbox and clicking on Remove. then a list of URL filters displays. After you save the URL filter. A .

Apply/Save: Click to apply the change and save the configuration 4.1 QoS Queue After clicking on the Quality of Service menu item.1. Select Default DSCP Mark: select a value from the drop-down menu. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4. or data traffic. Click on QoS Queue under Quality of Service to display the QoS Queue Setup screen. When QoS is enabled.7. See Table 3 DSCP Class Values for more information. you can select a default DSCP value. 4. TM 87-10878 Rev. 1. the QoS—Queue Management Configuration screen displays. A 55 .7. You can enable QoS globally on all interfaces with a default differentiated services code point (DSCP) value. video. 3. 2.1 QoS Queue Setup: Use the QoS Queue Setup screen to set up Wi-Fi Multimedia (WMM) parameters for VoIP. Enable QoS: Click to enable QoS on all interfaces with a default differentiated services code point (DSCP) value.

The QoS Queue Configuration screen displays. Remove: Check the remove-checkboxes in the “QoS Queue Setup” screen. 56 TM 87-10878 Rev. A . You can configure a maximum of four (4) queues for each Ethernet interface and a maximum of four (4) queues for each Ethernet WAN interface. 2. 1. QoS enables Wi-Fi access points to prioritize traffic and optimizes the way shared network resources are allocated among different voice. WMM Best Effort. WMM in the table refers to QoS over Wi-Fi. video streaming. and data traffic. then click on the Remove button to remove a QoS queue from a Layer 2 interface. WMM Video Priority.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide The ATM mode and PTM mode are not currently used. video. Add: click on this button to configure a QoS queue and add it to a Layer 2 interface. WMM defines four access categories (WMM Voice Priority. and WMM Background) that are used to prioritize traffic so that these traffic categories have access to the necessary network resources. interactive gaming.

Queue Precedence: select the precedence value from 1 through 4.Flash • 100 (4) . Traditionally.Priority • 010 (2) .Critical • 110 (6) .Internetwork Control • 111 (7) . The ONT-2-E4xxxi Series uses precedence values 001(1) through 100(4) that can be assigned to QoS queues. 6. Enable: select to enable (or disable) the QoS queue. where the lower value has the higher priority. 4. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3.Routine • 001 (1) . 5. Name: enter the name of the QoS queue.Immediate • 011 (3) .Network Control TM 87-10878 Rev. • 000 (0) . IP Precedence has used the first three bits of the Type of Service (TOS) field to give eight (8) possible precedence values. A 57 .Flash Override • 101 (5) . Interface: Select the Interface name to which to add the QoS queue from the pull down menu.

you can think conceptually of having a “traffic contract” with your ISP. Policing is the monitoring of data rates and burst sizes for a particular class of traffic. the QoS Policer Setup screen displays. 4. Dual-rate (Two Rate) policers monitor both CIR and peak information rate (PIR) of traffic. which can be used. Click the QoS Policer menu item under Quality of Service. Any packet that uses up the Excess Burst Size is exceeding and is dropped. Apply/Save: Click to apply the change and save the configuration. Committed Burst Size (CBS). and Excess Burst Size (EBS). 7.7. Policing will drop the exceeding traffic. A . 58 TM 87-10878 Rev. In general.2 QoS Policer QoS Policing on a network determines whether network traffic is within a specified profile or contract. to put frames with particular precedence values into the appropriate queues.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide These map to the IP Precedence values in the TOS field of the IP datagram. Policing will cause out-of-profile traffic to drop or to be marked down to another differentiated services code point (DSCP) value to enforce a contracted service level. The ONT can have up to four queues per Ethernet interface or port. (Exceeding) • Re-mark the packet with a different DSCP or IP precedence value. when there is congestion. You can configure up to 32 policers or types of policing of traffic classes. the policer measures the cumulative byte rate of arriving packets and the policer can take one of the following actions: • Allow the packet to pass. Conforming traffic means the packet falls within the traffic contract and is forwarded. To check if traffic matches the traffic contract. Two Rate Three-Color takes into account another parameter the Peak Information Rate (PIR) The CIR is what you pay for at the ISP. Single-rate (One Rate) policers monitor the specified committed information rate (CIR) of traffic. The ISP limits your traffic to what you pay for. The traffic contract (for Single Rate Two and Three-Color) may be generally described through three parameters: Committed Information Rate (CIR). (Conform) • Drop the packet.

Configuring a Simple Token Bucket policer TM 87-10878 Rev. 3. Remove: Check the remove-checkboxes. 2. A 59 . ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. See step 5 Configuring a Simple Token Bucket policer. Enable: click on this button to scan through the queues in the table to enable the checked Policers. where you can configure a Simple Token Bucket policer. then click on the Remove button to remove the checked Policers. 5. 4. Add: click to add a policer. The QoS Policer Configuration screen displays (see below).

8. and “red” if it exceeds the CBS. you must reboot the switch or router with the Reboot option under the Management menu in the left panel. 7. A . Based on the policer selected. Name: Enter QoS policer name. it is a Single Rate Two-Color policer (see above screen). 9. configure the Committed Information Rate (CIR) in kilo bytes per second (kbps) and Committed Burst Size (CBS) in bytes. 60 TM 87-10878 Rev.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 6. A packet is “green” if it does not exceed the CBS. Enable: you can select from the pull-down menu to enable or disable the QoS Policer function. Drop. you can select Simple Token Bucket (Single Rate Two-Color). different fields are displayed for you to complete. Single Rate Two- Color Traffic is classified into two categories or “colors:” compliant (green) and in excess (red). Meter Type: depending on which type of policing parameters is desired. or Two Rate Three-Color policer from the pull-down menu. If you select Simple Token Bucket as the meter type. Enter how to handle conforming and nonconforming traffic: Conforming Action: Select Null or DSCP Mark Nonconforming Action: Select Null. Single Rate Three-Color. For a Single Rate Two-Color policer. Note: To make the new configuration effective. or DSCP Mark Apply/Save: Click on the Apply/Save button to apply the change and save the configuration.

Enter how to handle conforming and nonconforming traffic: Conforming Action: Select Null or DSCP Mark Partial Conforming Action: Select Null. the policer can temporarily send or burst more packets than normally. For a Single Rate Three-Color policer. Data traffic can be “bursty” and not “smooth” like VoIP. Note: To make the new configuration effective. configure the Committed Information Rate (CIR) in kilo bytes per second (kbps). or DSCP Mark Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. This policer also allows for temporary bursts. Drop. the Single Rate Three-Color QoS Policer Configuration screen displays. then it is quiet again. “yellow” if it does exceed the CBS. and “red” otherwise. TM 87-10878 Rev. For a Single Rate Three-Color policer. Drop. Committed Burst Size and Excess Burst Size are supported. or DSCP Mark Nonconforming Action: Select Null. This means sometimes a lot of packets are sent. Committed Burst Size (CBS) in bytes. you must reboot the switch or router with the Reboot option under the Management menu in the left panel. but not the EBS. Due to this nature. A 61 . If you select a Meter Type of Single Rate Three-Color. A packet is “green” if it does not exceed the CBS. and Excess Burst Size (EBS) in bytes. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 10.

The Two Rate Three-Color policer takes into account another “rate” parameter the Peak Information Rate (PIR). Drop. in addition to the Committed Information Rate (CIR). If you select a Meter Type of Two Rate Three-Color. Enter how to handle conforming and nonconforming traffic: Conforming Action: Select Null or DSCP Mark Partial Conforming Action: Select Null. or DSCP Mark 62 TM 87-10878 Rev. the Two Rate Three-Color QoS Policer Configuration screen displays. configure both CIR and PIR. The Peak Information Rate is higher than the CIR and allows traffic to burst. • Packets above the PIR are violating. The Two Rate Three-Color policer can take one of the following actions: • Packets that fall under the CIR are conforming. Drop.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 11. or DSCP Mark Nonconforming Action: Select Null. • Packets that exceed the CIR but are below the PIR are exceeding. as well as the Peak Burst Size and the CBS. A . For a Two Rate Three-Color policer.

Add Network Traffic Class Rule Use this screen to create a traffic class rule to classify incoming traffic into a priority queue and add a DSCP or Ethernet priority marking on the packet. Enable: click on this button to scan through the queues in the table to enable the checked Policers. you must reboot the switch or router with the Reboot option under the Management menu in the left panel. The QoS Classification Setup screen displays. then click on the Remove button to remove the checked classification rules. 3. 1.7. You can configure up to a maximum of 32 QoS classification rules for the ONT.3 QoS Classification Click the QoS Classification menu item under Quality of Service in the Advanced Setup menu. Note: To make the new configuration effective. The Add Network Traffic Class Rule screen displays. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. 2. A 63 . TM 87-10878 Rev. 4. Remove: Check the remove-checkboxes. Add: click to add a rule. 4.

8021Q. A . If IP is selected. IPv6. select one of the following additional fields: • Source IP Address[/Mask]: enter the source port’s IP address and mask. Ether Type: Specify Ethernet type—IP. which allows DHCP relay to compare option 60 strings in received DHCP client packets against strings that you configure on the router (for example. ARP. Rule Status: Select Enable or Disable.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Traffic Class Name: Enter a name for the traffic class. PPPoE_DISC/PPPoe_SES. Specify Classification Criteria Specify traffic condition(s) for the class Class Interface: Specify type of interface—LAN. • Vendor Class ID (DHCP Option 60): Supports the DHCP vendor class identifier option 60. Ethernet port (eth0 to eth5). enables DHCP relay to direct client traffic to a specific DHCP server (vendor-option server). 8865. Rule Order: Last is the only order. WAN. 8866. wireless port (wl0). 64 TM 87-10878 Rev.

Specify Class Queue (Required): Specify Class Policer Mark Differentiated Service Code Point (DSCP): The AF behavior group defines four separate AF classes with Class 4 having the highest priority. data). Source MAC Mask: Enter the MAC address mask of the source (port). video. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. Source MAC Address: Enter the MAC address of the source (port).7. Destination MAC Address: Enter the MAC address of the destination port. Note: To make the new configuration effective. you must reboot the switch or router with the Reboot option under the Management menu in the left panel. Within each class. Burst size is the maximum data that can be sent at a given moment to a given port. Specify Classification Results: A blank value indicates no operation. Select the priority level: 0 best effort to 1 lowest priority to 7 highest priority. The combination of classes and drop precedence yields twelve separate DSCP encodings from AF11 through AF43 (see table below) Table 3 DSCP Class Values Class 1 (lowest) Class 2 Class 3 Class 4 (highest) Low Drop AF11 (DSCP 10) AF21 (DSCP 18) AF31 (DSCP 26) AF41 (DSCP 34) Med Drop AF12 (DSCP 12) AF22 (DSCP 20) AF32 (DSCP 28) AF42 (DSCP 36) High Drop AF13 (DSCP 14) AF23 (DSCP 22) AF33 (DSCP 30) AF43 (DSCP 38) Mark 802. if you specify a burst size of 16000 bytes. packets are given a drop precedence (high. Set Rate Limit: enter rate limit in Kbits per second. A DHCP server uses option 77 to choose the address pool it allocates an address from or to select any other configuration option. medium or low).1p priority: the QoS VLAN Priority allows you to assign a priority to outbound packets containing the specified VLAN ID. The shaping rate could be the maximum rate at which the traffic is sent. A 65 . it means that: • If a packet arrives whose size is <= 16000 bytes. 4. the packet is rated as “conform” (does not exceed the burst size) and it will be transmitted. For example. TM 87-10878 Rev. The priority level is used to prioritize different classes of traffic (voice. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide • User Class ID (DHCP Option 77): Used by a DHCP client to optionally identify the type or category of user or applications it represents. Destination MAC Mask: Enter the MAC address mask of the destination port.4 QoS Port Shaping Quality of Service (QoS) Port Shaping is a subset of traffic shaping and is generally a means of controlling the volume of traffic being sent into a network by setting a shaping rate (Kbps) or burst size (bytes) for each of the Ethernet ports.

1 Configure Default Gateway Click the Routing menu item under Advanced Setup.” it indicates no shaping and Burst Size will be ignored. Burst Size (bytes): enter the burst size in bytes that is the maximum data that can be sent at a given moment to a given port. The Routing–Default Gateway screen displays. The QoS Port Shaping Setup screen displays. You can put multiple WAN interfaces on the default gateway list. If you set the Shaping Rate to “-1.8. set up a Static Route. 1. The port will not be able to exceed the maximum or fixed rate at which data can be sent to the port. 4. and configure Routing Information Protocol (RIP) Routing.8 Routing You are able to Configure Default Gateway from a list of WAN interfaces. 4. but the system will only use one WAN 66 TM 87-10878 Rev. the packet is dropped. Click the QoS Port Shaping menu item under Quality of Service in the Advanced Setup menu. If the packet size is less than or equal to the burst size. Shaping Rate (Kbps): enter a maximum or fixed rate at which the traffic is sent in kilobytes per second (Kbps). Apply/Save: Click to apply the change and save the configuration.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide • If a packet arrives whose size is> 16000 bytes. If the packet size is greater than the burst size. 3. A . configure Policy Routing. the packet is allowed and transmitted. 2. the packet will be considered “exceed” and then will be dropped.

8. 2. TM 87-10878 Rev. you manually enter routes into a routing table by means of a configuration file that is loaded when the switch or router starts up. 4. 1. You can also click the right arrow to move the interface back. A 67 . you must reboot the switch or router with the Reboot option under the Management menu in the left panel. Click the left arrow to move the selected interface to the “Selected Default Gateway Interfaces” box. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. Selected WAN Interface: select a preferred IPv6 WAN interface as the default IPv6 gateway 4. Note: To make the new configuration effective. The Routing – Static Route screen displays. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide interface as the default gateway. Because these routes do not change after they are configured. Selected Default Gateway Interfaces: select the interface from the “Available Routed WAN Interfaces” box to be used as a default gateway. 3. You can configure up to 32 static routes for the ONT. based on its priority in the list with the first having the highest priority and the last having the lowest priority if the WAN interface is connected. they are called “Static” routes. Available Routed WAN Interfaces: move an available interface to the “Selected Default Gateway Interfaces” box. Click the Static Route menu item under Routing. You can change the default gateway priority order of the interface by removing all the interfaces and adding them back in the desired order.2 Static Route In Static routing.

Add: Click to add a static route. A .ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. You are not able to remove system created routes. 68 TM 87-10878 Rev. 2. The Routing – Static Route Add screen displays as follows. Remove: click to remove a static route.

You can configure up to seven (7) policy routes on interfaces. This is the hop count that describes the number of hops that the packet takes on the path from source to destination. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3. 4. Enter a number equal to or greater than zero. You can enter a low metric to encourage traffic to use the static route. Policy routing is applied to incoming packets. Each time the packet is passed to the next device.3 Policy Routing Policy routing or policy-based routing is a method of making routing decisions based on policies set by the network administrator. or other information available in the packet header. Remove: select to remove policy routing on an interface. 2. protocol of the payload. a hop occurs. It is for cases where there may be a need to forward the packet based on criteria other than destination address or destination network. size of the packet. Select the Policy Routing menu item under Routing. A typical criteria used in policy routing is the source address. Apply/Save: Click on the Apply/Save button to apply the change and save the static route configuration. 8. Destination IP address/prefix length: Enter destination network address. Gateway IP Address: Enter the default gateway IP address. The Policy Routing Setting screen displays. TM 87-10878 Rev.8. 6. Metric: Optional. You can use the “ping” command to determine the hop count to a specific destination. A 69 . subnet mask 5. Add: select to add policy routing on an interface and display the Policy Routing Setup screen. IP Version: select IPV4 or IPv6. 1. Interface: Select the WAN interface to which to add the static route. However other criteria might be access list (ACL). 4. 7.

Apply/Save: Click to apply the change and save the configuration. The Policy Routing Setting screen displays where you will be able to see the Policy Routing you just created.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3. Default Gateway IP: enter the default gateway address if you selected IP over Ethernet (IPoE) as the WAN interface. Source IP: enter the source IP address. Physical LAN Port: select the LAN port to which to apply Policy Routing. 70 TM 87-10878 Rev. Policy Name: enter the name for the policy. 5. A . 4. 8. Use Interface: 7. 6.

4. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4. 1. TM 87-10878 Rev. Click the RIP menu item under Routing.4 Routing Information Protocol (RIP) Routing RIP is a distance-vector routing protocol that uses hop count as a routing metric. 2. Active or Passive. 4. The Routing--RIP Configuration screen displays below. 3. 1. Apply/Save: Click to apply the change and save the configuration.8.2.9. The DNS Server Configuration screen displays (below). Version: select desired RIP version. To disable RIP on the WAN interface. Uncheck the “Enabled” checkbox to disable RIP on an interface.1 DNS Server Click on the DNS menu item under Advanced Setup. Operation: select desired Operation. A 71 . or both. Enabled: click to place a check to enable RIP on the WAN interface. uncheck the “Enabled” checkbox. This screen allows you to enable RIP for a WAN interface by selecting the RIP version and type of RIP operation. RIP implements a limit on the number of hops allowed (15 maximum) in the path from source to destination to prevent routing loops. 4.9 Domain Name Service (DNS) You can configure the DNS Server and Dynamic DNS under DNS in the Advanced Setup menu.

9. where only a single PVC with IPoA or a static IPoE protocol is configured. • Use the Following Static DNS IP Address: Enter a static DNS IP address to be the DNS server interface.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide You can use this screen to configure the DNS Server interface by one of two methods. If Asynchronous Transfer Mode (ATM) switching protocol is used. For IPv6 DNS Server Configuration: you must have a configured IPv6 WAN interface. Enter a Primary DNS server IP address and a Secondary DNS server IP address. Click on one of the following buttons: • Select DNS Server Interface from Available WAN Interfaces: Select an interface from the available WAN interfaces in the right-side box and moving it to the left-side box. Usually when you connect 72 TM 87-10878 Rev. Use the following Static IPv6 DNS address: Enter a Primary IPv6 DNS server IP address and a Secondary IPv6 DNS server IP address. 4. A . you must use Static DNS IP addresses.2 Dynamic DNS Dynamic Domain Name System (DDNS) is a method of keeping an Internet domain name linked to a changing IP address because static IP addresses are not used on all computers. Then you can configure an IPv6 DNS server in one of two methods: Obtain IPv6 DNS info from a WAN Interface: Select a WAN Interface from the drop-down box.

The “Dynamic DNS” screen displays. Click on the Dynamic DNS menu item under DNS. 1. TM 87-10878 Rev. In this way. the IP address is dynamically assigned.org or TZO. runs on your computer. Add: Click to add a Dynamic DNS address from DDNS providers DynDNS. provided by a service provider. your ISP assigns an unused IP address from a pool of IP addresses and this address is only used for the duration of that connection. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide to the Internet. A 73 . The program updates the DNS database to reflect the change in IP address. contacting the DNS service each time the IP address provided by the ISP changes. The DDNS program. DDNS allows the ONT to be more easily accessed from various locations on the Internet.

you must reboot the switch or router with the Reboot option under the Management menu in the left panel. 4. Enable UPnP: click on checkbox to enable UPnP. 1.10 Universal Plug and Play (UPnP) Click on the UPnP menu item under Advanced Setup. 3. Username: enter username for the DDNS settings.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 2. The “UPnP Configuration” screen displays below. Hostname: enter the name of the host. 5. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. Note: To make the new configuration effective.org or TZO. 7. you must reboot the switch or router with the Reboot option under the Management menu in the left panel. Password: enter a password to protect the DDNS settings. Note: To make the new configuration effective. D-DNS provider: select a DDNS service provider--DynDNS. A . 74 TM 87-10878 Rev. 4. 2. 6. Interface: select an interface name. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration.

TM 87-10878 Rev. A 75 . The “DNS Proxy Configuration” screen displays.11 DNS Proxy Click on the DNS Proxy menu item under Advanced Setup. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4.

DNS Proxy is a method to control DNS traffic through the firewall. A . Note: To make the new configuration effective.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. you must reboot the switch or router with the Reboot option under the Management menu in the left panel. 76 TM 87-10878 Rev. Host name of the Broadband Router: enter the host name. Domain name of the LAN network: enter your domain name. 4. 2. A DNS Proxy policy can block illegally formed DNS packets by examining the contents at the application layer and validating that the packets meet RFC compliance for DNS traffic. Enable DNS Proxy: click the checkbox to enable Domain Name Service Proxy. 3. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration.

The Interface Grouping screen displays where you can create PVC or bridging groups with interfaces and map the groups to ports. 2. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4. 1. The Interface Grouping Configuration screen displays. Create the mapping group with the appropriate LAN and WAN interfaces. Each group performs as an independent network. Remove: check the box to remove the specified grouping and add the ungrouped interfaces to the default group. TM 87-10878 Rev. Add: click to create a Permanent Virtual Circuit (PVC) or bridging group. A 77 .12 Interface Grouping Click on the Interface Grouping menu item under Advanced Setup.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3. Note: To make the new configuration effective. 5. 7. If you prefer to statically add Ethernet interfaces from a list of Available LAN Interfaces to a Grouped LAN Interfaces group. If you prefer to dynamically add LAN Ethernet interfaces to a group. WAN Interface used in the grouping: select a WAN interface from the list. 4. A . you must reboot the switch or router with the Reboot option under the Management menu in the left panel. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. 78 TM 87-10878 Rev. 6. select the interface and click on the arrow to add the interface to the group. add the DHCP Vendor ID string (DHCP option 60) to the boxes at the bottom of the screen. Group Name: Enter a unique group name.

you can send IPv6 packets of 1480 bytes without fragmentation. This is defined in RFC 4213. A 79 .13.13 IP Tunnel Two types of IP tunneling are supported: • IPv6inIPv4 (also called “6in4”) • IPv4inIPv6 (also called “4in6”) using DS-Lite 4. Select the IPv6inIPv4 menu item under IP Tunnel to display the “IP Tunneling—6in4 Tunnel Configuration” screen. The 6in4 tunnels are usually manually configured. Therefore.1 IPv6inIPv4 (6in4) The term “6in4” refers to a mechanism for migrating from IPv4 to IPv6 by using tunneling to encapsulate IPv6 traffic over configured IPv4 links. the encapsulation overhead is just the size of the IPv4 header of 20 bytes. In 6in4. This protocol number is specifically designated for IPv6 encapsulation. In the example where the Maximum Transmission Unit (MTU) is 1500 bytes. the IPv4 packet header is immediately followed by the IPv6 packet being carried. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4. The encapsulated IPv6 traffic (6in4 traffic) is sent over the IPv4 Internet inside IPv4 packets whose IP headers have the IP protocol number set to 41. TM 87-10878 Rev.

80 TM 87-10878 Rev. Associated WAN Interface: select the WAN-side interface name/number. 4.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. The “IP Tunneling—6in4 Tunnel Configuration” screen displays. 5. 6. Mechanism: only 6RD is supported. Border Relay IPv4 Address 7. The following fields display—enter the required configuration information for: a. Note that only 6rd (generally known as IPv6 Rapid Deployment). The ISP must operate 6rd gateways that accept only tunneled IPv6 traffic. Associated LAN Interface: select the LAN-side interface name/number. Add: select to add a 6in4 tunnel. 2. It operates entirely within the end-user's ISP's network. 6rd is a mechanism to facilitate IPv6 rapid deployment by encapsulating IPv6 packets inside IPv4 for transmission over IPv4 backbone networks. 6rd Prefix with Prefix Length c. 6rd requires customers have a home gateway/router that supports 6rd and encapsulation of IPv6 packets. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. 3. Tunnel Name: enter name for 6in4 tunnel. IPv4 Mask Length b. A . Manual or Automatic: select manual configuration of the 6in4 tunnel.

Add: select to add a 4in6 tunnel. A 81 . 1. Select the IPv4inIPv6 menu item under IP Tunnel to display the “IP Tunneling—4in6 Tunnel Configuration” screen. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4. 4in6 uses tunneling to encapsulate IPv4 traffic over configured IPv6 links as defined in RFC 2473.2 IPv4inIPv6 (4in6) The term “4in6” refers to a mechanism for allowing IPv4 traffic to be used in an IPv6 only network. The 4in6 tunnels are usually manually configured.13. TM 87-10878 Rev. The “IP Tunneling—4in6 Tunnel Configuration” screen displays (see below).

Mechanism: select DS-Lite. 2. 4in6 tunnels carry IPv4 traffic across the network to arrive at an IPv4-IPv4 NAT server (the AFTR). Tunnel Name: enter name for 4in6 tunnel. A . AFTR: enter the IP address of the Address Family Transition Router (AFTR).ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Only Dual-Stack (DS)-Lite configuration is supported. Manual: We recommend manual configuration of the 4in6 tunnel. DS-Lite enables a service provider to share IPv4 addresses among customers by combining two technologies—IP in IP (IPv4-in-IPv6) and Network Address Translation (NAT). DS-Lite technology enables continued support for IPv4 traffic and aids in incremental deployment of IPv6. The AFTR displays when manual configuration of the 4in6 tunnel is selected. The AFTR performs fragmentation and reassembly of large IPv4 packets during sourcing (of video streams) and receiving (watching video streams). 4. 6. where customers will share IPv4 addresses. the AFTR box displays. 7. When manual configuration is selected. 82 TM 87-10878 Rev. Automatic: select for automatic configuration of the 4in6 tunnel. 3. 8. 9. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. 5. DS-Lite makes incremental deployment easier by de-coupling IPv6 deployment in the service provider’s network (up to the CPE devices) from deployment of IPv6 in the rest of the Internet and in customer applications and CPE devices. Associated LAN Interface: select the LAN-side interface name/number. Associated WAN Interface: select the WAN-side interface name/number.

In WAN configuration. 1. IGMP is used by hosts and adjacent routers on IP networks to set up group memberships for Multicast service. A 83 . TM 87-10878 Rev. Multicast Precedence: select Disable (Multicast precedence) or a priority value from 1 through 4. IGMP is used on IPv4 networks. similar to IGMP. You can configure Internet Group Management Protocol (IGMP) settings in IPv4 networks or Multicast Listener Discovery (MLD) settings in IPv6 networks. IGMP is used for one-to-many applications. you are able to enable IGMP Multicast. such as online streaming video and gaming. The Multicast screen displays. to discover Multicast listeners (nodes that want to receive Multicast addresses) on a directly attached interface. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 4.16 Multicast Click on the Multicast menu item under Advanced Setup. where 1 is the highest value. MLD is embedded in ICMPv6. IPv6 routers use MLD.

Default value is 10000 milliseconds (10 seconds). By varying the Query Interval. larger values make the traffic less bursty. the Robustness Value may be increased. the source is deleted from the Include List. all Multicast routers on the interface lower their timer for that source. • Membership Join Immediate (IPTV): Click to enable. an administrator may tune the burstiness of MLD messages on the link. • Last Member Query Interval: This is the Maximum Response Delay used to calculate the Maximum Response Code inserted into Multicast Address Specific Queries sent in response to Version 1 Multicast Listener Done messages. Default value is 1000 milliseconds (1 second). By varying the Query Interval. • Maximum Multicast Data Sources (for IGMPv3: 1-24): The default is 10. • Maximum Multicast Groups: The default is 25. A . 3. an administrator may tune the number of MLD messages on the link. • Robustness Value: measures the number of retransmissions. and should not be one. • Last Member Query Interval: This is the Maximum Response Delay used to calculate the Maximum Response Code inserted into Multicast Address Specific Queries sent in response to Version 1 Multicast Listener Done messages. MLD Configuration: modify any of the following MLD configuration fields if you wish to change the default values. • Maximum Multicast Group Members: The default is 25. The value of the Robustness Value cannot be zero. a wireless connection).ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 2. When a node wants to stop listening to a specific source. The number of seconds represented by the Query Response Interval must be less than the Query Interval. • Query Interval: This is the interval between General Queries sent by the Querier. • Query Response Interval: This is the Maximum Response Delay used to calculate the Maximum Response Code inserted into the periodic General Queries. then all the Multicast routers on the interface update their source timer. an administrator may tune the number of MLD messages on the link. larger values cause MLD Queries to be sent less often. Default value is 125 seconds. By varying the Query Response Interval. This value allows tuning IGMP according to the expected packet loss on an interface. • Query Response Interval: This is the Maximum Response Delay used to calculate the Maximum Response Code inserted into the periodic General Queries. an administrator may tune the burstiness of MLD messages on the link. It is also the Maximum Response Delay used to 84 TM 87-10878 Rev. If a report of other listeners for that source on the interface is received before timer expires. By varying the Query Response Interval. as host responses are spread out over a larger interval. • Default Version: the default MLD version is 2 (MLDv2). • LAN to LAN (Intra LAN) Multicast Enable: click to enable Intra LAN Multicast. If not. • Query Interval: This is the interval between General Queries sent by the Querier. The number of seconds represented by the Query Response Interval must be less than the Query Interval. larger values cause MLD Queries to be sent less often. larger values make the traffic less bursty. Default value is 125 seconds. It is also the Maximum Response Delay used to calculate the Maximum Response Code inserted into Multicast Address and Source Specific Query messages. The default is 2. • Default Version: the default version is 3 (IGMPv3). Default value is 10000 milliseconds (10 seconds). as host responses are spread out over a larger interval. • Fast Leave Enable: click to enable the Fast Leave scheme that is based on use of source timers. IGMP Configuration: modify any of the following IGMP protocol configuration fields if you wish to change the default values. If an interface is expected to be lossy (for example.

• Maximum Multicast Groups: The default is 25. all Multicast routers on the interface lower their timer for that source. • LAN to LAN (Intra LAN) Multicast Enable: click to enable Intra LAN Multicast. When a node wants to stop listening to a specific source. This value allows tuning IGMP according to the expected packet loss on an interface. Default value is 1000 milliseconds (1 second). • Maximum Multicast Data Sources (for IGMPv3: 1-24): The default is 10. and should not be one. The value of the Robustness Value cannot be zero. If an interface is expected to be lossy (for example. 4. If a report of other listeners for that source on the interface is received before timer expires. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide calculate the Maximum Response Code inserted into Multicast Address and Source Specific Query messages. a wireless connection). the Robustness Value may be increased. • Membership Join Immediate (IPTV): Click to enable. the source is deleted from the Include List. A 85 . • Robustness Value: measures the number of retransmissions. The default is 2. If not. then all the Multicast routers on the interface update their source timer. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. TM 87-10878 Rev. • Fast Leave Enable: click to enable the Fast Leave scheme that is based on use of source timers. • Maximum Multicast Group Members: The default is 25.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 86 TM 87-10878 Rev. A .

You can configure the following parameters: • Basic Parameters • Wireless Security • MAC Filter • Wireless Bridge • Advanced • Station Info 5. and 11 are non-overlapping channels. It is important.1. especially in devices within close proximity of each other. Allowing all access points to use one default channel (for example. However. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Chapter 5 Wireless You are able to configure parameters in an IEEE 802.1 Wi-Fi Testing and Deployment Considerations When you test and deploy the Wi-Fi system. A helpful reference for WLAN channels can be found at: http://en. to make certain that the broadcasted SSID is unique to the specific access point being installed. 6. A 87 . Using common.1.wikipedia. A wireless network implementation takes place at the physical layer. SSIDs across a deployment can result in unreliable service because client machines can become confused as to which access point they should be associated with.org/wiki/List_of_WLAN_channels TM 87-10878 Rev. only channels 1. Channels 1 through 11 are available to be set. non-unique.1 SSID Uniqueness The Service Set Identifier (SSID) is used by the wireless access point to broadcast and identify its availability to clients. we recommend you consider the following configuration issues: • SSID Uniqueness • Channel Allocation • Signal Strength • Encryption 5. unlike wired networks that use electrical conductors.2 Channel Allocation There are multiple channels that are available for transmission on the Wi-Fi access point. Having multiple channels allows the client to avoid heavily-used channels. 5.11 based wireless network. A wireless network generally uses radio communication. You should consider these channels when you are setting channel selections and want to avoid other access points in the area. channel 6) would create interference that could result in poor connectivity or slow data rates.

Unwanted clients are likely to cause contention for services offered on an “open” device. and restrict the channel set based on country requirements. You can enable or disable the wireless LAN interface.2 Basic Parameters You can configure basic features on the wireless LAN interface.1.1. pay attention when you are determining the Wi-Fi location and orientation. set the wireless network name (SSID). 88 TM 87-10878 Rev.4 Encryption Encryption methods are available on many wireless devices. The “Wireless—Basic” screen displays to allow you to configure basic parameters of the wireless LAN interface. 5. disable Wi-Fi Multimedia (WMM). enable client isolation. You can improve signal strength by adjusting access point placement and positioning the antenna. Similar considerations should be made if multiple Wi-Fi enabled ONTs exist within close proximity of each other or if a Wi-Fi enabled ONT is collocated with multiple consumer wireless gateways. We recommend you create an encryption method for each Wi-Fi deployment because unrestricted or “open” access could result in the unwanted membership of client devices to a Wi-Fi unit that is open to allow any connections. Encryption features configure restricted access to the access point and prevent unwanted associations from being made to a particular device.3 Signal Strength Signal strength adjustments should be considered if significant noise caused by neighboring devices exists or to gain coverage over a larger area.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 5. See Wireless Security on page 90 for information on configuring security features on the wireless LAN interface. 5. hide the Access Point or wireless network name by inhibiting broadcasting. Thus. Click on the Basic menu item under Wireless. A . Keep in mind that these recommendations are based on general best practices and not restricted to the operation or functionality of the Aurora Wi-Fi feature available on our ONT products. enable Wireless Multicast Forwarding (WMF).

provides basic Quality of Service (QoS) features to wireless networks. WMM prioritizes traffic according to four Access Categories (AC) – voice (AC_VO). 5. best effort (AC_BE). based on IEEE 802. You can enter clients in the SSID column. WMM. SSID: Enter the Service Set Identifier (SSID) that is the wireless network name (informal. and background (AC_BK). Country: Select country from the drop-down menu. Clients Isolation: Click checkbox to enable. and configure the basic settings for each client in the table. Unchecking the checkbox will disable wireless on the LAN interface. enable or disable the clients. A 89 . Max Clients: Enter the maximum number of clients supported on the wireless network. TM 87-10878 Rev. 9. Enable Wireless Multicast Forwarding (WMF): Click checkbox to enable WMF. 7. This hides the wireless network from active scans and impedes casual wireless snooping. video (AC_VI). WMF is multicasting over a wireless network. Enable Wireless: Click checkbox to enable wireless on the LAN interface. 8. 3. 10. 6. human- readable name). 2. Hide Access Point: Click checkbox to inhibit the broadcasting of the Service Set Identifier (SSID) that is the wireless network name. BSSID: Broadcast Service Set Identifier (BSSID) is usually the MAC address of the wireless Access Point (WAP). ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. 4. and is automatically entered. Disable WMM Advertise: Click checkbox to disable Wi-Fi Multimedia (WMM).11e standard.

90 TM 87-10878 Rev.3 Wireless Security You can configure security features of the wireless LAN interface either by configuring them manually or using Wi-Fi Protected Setup (WPS). type of network authentication. and Wired Equivalent Privacy (WEP) encryption). 5. Click on the Security menu item under Wireless. There are two predominant types of security for IEEE 802. A . WPA implements the Temporal Key Integrity Protocol (TKIP) that dynamically generates a new 128-bit key for each packet. such as WPA2.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 11. The methods of authentication used with WEP are: Open System.11i standard. Shared Key • Wi-Fi Protected Access (WPA and WPA2) authentication—security protocols that have superceded WEP. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration. and manually set up the Access Point (AP) parameters (SSID. you can enable or disable WPS. WPA2 is the newer IEEE 802.11 wireless networks: • Wired Equivalent Privacy (WEP) authentication—a security algorithm that is more frequently used by older wireless network devices. The “Wireless—Security” screen displays. It is currently considered easily broken and replaced by newer standards. In this screen.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

WPA2 uses Cipher Block Chaining Message Authentication Code Protocol (CCMP), a new
Advanced Encryption Security (AES) based encryption mode with strong security.
Each wireless network device encrypts network traffic using a 256 bit key. This Shared Key or Pre-
shared key (PSK) may be either a string of 64 hexadecimal digits or a passphrase of 8 to 63 ASCII
characters.
The following are the main types of Pre-Shared Key (PSK): WPA-PSK, WPA2-PSK, and WPA/WPA2-
PSK:

• The WPA- PSK adapts the TKIP (Temporal Key Integrity Protocol) encrypted algorithms,
which usually incorporates Message Integrity Code (MIC) to provide protection against hackers.
• The WPA2-PSK adapts CCMP (Cipher Block Chaining Message Authentication Code Protocol)
of the AES (Advanced Encryption Security) algorithms.
• WPA/WPA2-PSK is a mixed WPA and WPA2 authentication.
12. Enable WPS: Wi-Fi Protected Setup (WPS) is available only when WPA2 PSK, Mixed
WPA2/WPA-PSK, or OPEN mode of network authentication is configured. Otherwise, WPS is
disabled by default.
WPS attempts to make setting up a secure wireless home network easy for the home user by
automating the procedure. Commonly for newer devices, the Pre-shared key is preconfigured in the
device’s memory, or a PIN used as a Pre-shared key is placed on a placard on the device.
13. Select SSID: Select the wireless network name from the drop-down menu.
14. Network Authentication: Select the type of network authentication from the drop-down menu.
Depending on which type of Network Authentication is selected, additional fields will display for
you to complete for that network authentication.
15. WEP Encryption: You can enable WEP encryption only when you have chosen Open or Shared
Key or 802.1X method of network authentication. Otherwise WEP is disabled by default.
When WEP Encryption is enabled, the following fields display:
Encryption Strength: select 128-bit or 64-bit encryption.
Current Network Key: select from Network Key 1 through 4. You can enter a network key: For 128-
bit encryption keys, enter 13 ASCII characters or 26 hexadecimal digits; for 64-bit encryption keys,
enter 5 ASCII characters or 10 hexadecimal digits.
RADIUS Server IP Address, RADIUS Port, RADIUS Key: Enter RADIUS information when
802.1X authentication is selected.
16. When WPA-PSK, WPA2-PSK, or Mixed WPA2/WPA-PSK authentication is selected, the
following additional fields are displayed:
WPA/WAPI passphrase: a passphrase of 8 to 63 ASCII characters making up the Pre-shared key.
WPA Group Rekey Interval: period of renewal time for changing the security key automatically
between wireless client and Access Point (AP).
WPA/WAPI Encryption: select AES or TKIP + AES.
17. When WPA, WPA2, or Mixed WPA2/WPA authentication is selected, the following additional
fields are displayed:
WPA Group Rekey Interval: period of renewal time for changing the security key automatically
between wireless client and Access Point (AP).

TM 87-10878 Rev. A 91

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

RADIUS Server IP Address, RADIUS Port, RADIUS Key: Enter RADIUS information.
WPA/WAPI Encryption: select AES or TKIP + AES.
18. Apply/Save: Click on the Apply/Save button to apply the change and save the configuration.

5.4 MAC Filter
You can configure the MAC Filter feature to allow or deny users access to the wireless router based on
the user’s MAC address, as well as choose to disable MAC filtering. Click on the MAC Filter menu
item under Wireless. The “Wireless—MAC Filter” screen displays. In this screen you can set up the
MAC Filter and add or remove MAC addresses of devices in your home or business network.

1. Select SSSID: Select the wireless network name from the drop-down menu.
2. MAC Restrict Mode: Specify one of the following modes:

• Disable to disable MAC filtering.
• Allow to allow users access to the EPON wireless gateway based on the user’s MAC address.
If the MAC filter is empty, WPS will be disabled.

• Deny to deny users access to the EPON wireless gateway based on the user’s MAC address.

92 TM 87-10878 Rev. A

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

3. Add: Click to add MAC addresses of devices in your network to the MAC Filter list. The
“Wireless—MAC Filter” screen displays

a. MAC Address: Enter the MAC address of the device you want to add to the MAC
Filter list.
b. Apply/Save: Click on the Apply/Save button to apply the change and save the
configuration.
4. Remove: Click to remove MAC addresses of devices in your network from the MAC Filter list

5.5 Wireless Bridge
You can configure Wireless Bridge parameters of the wireless LAN interface. Wireless Bridge is also
known as Wireless Distribution System (WDS). WDS allows your wireless network to be expanded
using multiple Access Points (APs) without the need for wired connections between the APs. A wireless
AP is a device that allows wireless devices to connect to a wired network using Wi-Fi. The AP can be
integrated into the EPON gateway or it may connect to an EPON gateway (via a wired network) as a
standalone device.

1. AP Mode:
Selecting Access Point enables Access Point functionality. This means the EPON gateway can
connect wirelessly to other WDS-enabled routers and allow wireless clients to connect.
Selecting Wireless Bridge disables Access Point functionality. Wireless Bridge will only allow the
EPON gateway to connect to other WDS-enabled routers.
2. Bridge Restrict:
Select Enabled or Enabled(Scan) to restrict the EPON gateway from connecting to wireless bridges
that are not authorized.
Select Disabled to disable the wireless Bridge Restriction. This will allow any wireless bridge to
connect to the EPON gateway.

TM 87-10878 Rev. A 93

1. Select the Advanced menu item from the Wireless option. you can select a specific channel on which to operate. wakeup interval for clients in power-save mode. beacon interval for the access point. Xpress mode. Band: this is a default setting at 2. and short or long preambles.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3. A . Apply/Save: Click to apply the change and save the configuration. 5. The Wireless—Advanced screen displays. You can also set the following: Request to Send (RTS) threshold. 5. For example. change the transmission rate to a select speed. 4. Refresh: click to update the Remote Bridges MAC Address fields. only those bridges whose MAC addresses appear in these fields will be granted access.6 Advanced Wireless The Advanced settings allow you to configure advanced features of the wireless LAN interface.11g 94 TM 87-10878 Rev. Remote Bridges MAC Address: If Bridge Restrict is set to Enabled or Enabled(scan).4GHz – 802. and modify the fragmentation threshold.

9. 3. 54g is a Broadcom Wi-Fi technology.11n/EWC: select Auto or Disabled. 6. 20. 17. Xpress™ Technology: select Enable or Disable. Auto Channel Timer (min): Zero is the default.11n Rate: select 54g rate. 1Mbps is the default value. Basic Rate: This is the set of data transfer rates that all the stations will be capable of using to receive frames from a wireless medium. or a rate from 6. or cordless phone. DTIM Interval: This sets the Wake-up interval for clients in power-saving mode. 11. A 95 . 19. RIFS Advertisement: select Auto or Off. Channel: select from channel 1 through 11. This is a technology that utilizes standards based on framebursting to achieve higher throughput. 10. Multicast Rate: This is the rate at which a message is sent to a specified group of recipients. If you are experiencing interference with another 2. 5. aggregate throughput (the sum of the individual throughput speeds of each client on the network) can improve by up to 25% in 802. Global Max Clients: to be determined 23. RX Chain Power Save PPS: 10 is the default value. 21. 802. 16. such as a baby monitor. Bandwidth: select a bandwidth in MHz.11n Protection: select Auto or Off. 22. The beacon interval may be adjusted in milliseconds (ms). Control Sideband: Lower is the default. 14. With Xpress Technology enabled.11n Client Only: Select Off or On. Beacon Interval: A Beacon is a packet of information that is sent from a connected device to all other devices where it announces its availability and readiness. 4.4Ghz device. 8. RX Chain Power Save Quiet Time: 10 is the default value. Select 1 through 54 Mbps. then change the channel on your EPON gateway. 54g™ Rate: This is the wireless link rate at which information is received and transmitted on your wireless network. 15. A beacon interval is a period of time (sent with the beacon) before sending the beacon again. The default is 2346. security alarm.11g and 802. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 2. Select a rate in Mbps. 12. Support 802. 802. 7. OBSS Coexistence: select Enable or Disable. TM 87-10878 Rev.5 to 130 Mbps.11g only networks and up to 75% in mixed networks comprised of 802. 13. 18.11b devices. RX Chain Power Save: select Enable or Disable. RTS Threshold: This threshold controls what size data packet the low level RF protocol issues to an RTS packet. 802. Fragmentation Threshold: This is used to fragment packets which help improve performance in the presence of radio frequency (RF) interference.

Select from 20%.7 Station Info You can display the authenticated wireless stations. 96 TM 87-10878 Rev.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 24. WMM (Wi-Fi Multimedia): select Enable or Disable. Transmit Power: This is the percentage of power that should be transmitted from your wireless router. 1. 25. 40%. and 100%. 5. Select the Station Info menu option from Wireless. 26. A . which may be wireless bridges that are authorized or may be WDS-enabled routers. 27. 60%. WMM No Acknowledgement: select Enable or Disable. Refresh: click to update the fields in this screen. 28. Apply/Save: Click to apply the change and save the configuration. 80%. WMM APSD: select Enable or Disable.

1.1 Service Provider SIP Basic Settings You must click Stop SIP client button to stop the SIP client first before changing any of the parameters. SIP Registrar. Use SIP Outbound Proxy: check to use a SIP outbound proxy server that receives requests from clients and allows the ability to receive calls at multiple locations. which is generally obtained free from many service providers. SIP is a signaling protocol used in VoIP communications that allows users to make voice and video calls over the Internet.1 SIP Basic Settings You are able to set Basic Settings for your SIP operation. 5. The SIP proxy server can act as both a server and a client. Select the SIP Basic Setting menu item under Voice. A 97 . The main purpose of the SIP protocol is to set up and tear down voice calls and video. After you finish entering your changes. and port 5061 is typically used for traffic encrypted with Transport Layer Security (TLS). 4. 2. and preferred type of codecs. SIP Outbound Proxy. Note that changing this parameter for one service provider affects all other service providers. 1. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Chapter 6 Voice Configurations You are able to configure Session Initiation Protocol (SIP) parameters for voice service. Note that changing this parameter for one service provider affects all other service providers. SIP Outbound Proxy: enter the SIP outbound proxy name. such as routing requests to the user’s current location. A SIP client is an application program you install on your computer that contains softphone functionality and provides an interface for you to communicate. Locale selection: select your location from the drop-down menu. including SIP domain name. SIP domain name: enter the domain name for your SIP server or SIP proxy server. VoIP Dialpan Setting: The Dial Plan specifies how to interpret digit sequences dialed by the user. There are many types of SIP clients and some are offered free by your service provider. To communicate through SIP. implementing provider call-routing policies. Port 5060 is commonly used for non-encrypted signaling traffic. TM 87-10878 Rev. You can configure the following voice parameters specifically for the service provider or as global parameters that affect the whole interface (Basic Setting) or the console log level (Debug Setting): • SIP Basic Setting • SIP Advanced Setting • SIP Debug Setting 6. SIP Proxy port: enter the port number. you need a SIP address or account. SIP Proxy. and providing voice features to users. and a SIP client. SIP Proxy: enter the SIP Proxy server name. then click the Start SIP client button to implement the changes and have the changes take effect. and how to convert those sequences into an outbound dial string. 3. 6. Use SIP Proxy: check to use a SIP proxy server to manage many of the call setup functions between SIP devices. authenticating and authorizing users for services.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide SIP Outbound Proxy port: enter the port number. Use SIP Registrar: check to use a SIP registrar that acts as a SIP endpoint that accepts REGISTER requests SIP Registrar: enter the SIP Registrar name. 98 TM 87-10878 Rev. 8. Extension: Enter extension number. and port 5061 is typically used for traffic encrypted with Transport Layer Security (TLS). and port 5061 is typically used for traffic encrypted with Transport Layer Security (TLS). Port 5060 is commonly used for non-encrypted signaling traffic. A . Port 5060 is commonly used for non-encrypted signaling traffic. 6. For your SIP Accounts: You can enter the following information. 7. SIP Registrar port: enter the port number. Account Enabled: Click to enable.

Stop SIP client: Click to stop the SIP client first before changing any of the parameters. Start SIP client: After you finish entering your changes. 12. 6. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 9. Start SIP client: After you finish entering your changes. TM 87-10878 Rev. 5. or 30. 17. 3. 10. striking a balance between bandwidth and voice quality. A 99 . length of time carried in one RTP packet. then click the Start SIP client button to implement the changes. Preferred codec 1 through codec 6: Select a preferred codec. Bound Interface Name: select the interface name. Restore default setting: Click to restore the default voice basic settings. Restore default setting: Click to restore the default voice basic settings. then click the Start SIP client button to implement the changes.2 Global Parameters SIP Basic Settings You can configure global parameters that affect the entire specified interface.1. 18. Physical Terminal Assignment: Physical SIP station number or phone line assignment. Display name: Enter the display name for the SIP account. IP Address Family: IPV4 is the default. Apply: Click to apply the changes entered. Codecs are used to digitally encode and compress analog audio information. 20. Stop SIP client: Click to stop the SIP client first before changing any of the parameters. 15. 13. 2. Password: Enter password for the account. Authentication name: 11. 16. This is the packetization time in milliseconds. 1. Preferred ptime: Select 10. 4. 14.

the Voice-- SIP Advanced Configuration screen displays where you can set SIP call features for voice account 0 and voice account 1. Under the “Service Provider” tab. 6. Click the SIP Advanced Setting menu item under Voice. To set SIP call features on a global level for all voice accounts. select the “Global Parameters” tab.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 6.2 SIP Advanced Setting You can set SIP Call features by specifying options in the SIP Advanced Setting menu. 6. 100 TM 87-10878 Rev. A . The Voice--SIP Advanced Configuration screen displays where you can set numerous SIP call features for voice account 0 and voice account 1. Apply: Click to apply the changes entered.2.1 Voice—SIP Advanced Configuration Click the “Service Provider” tab in the SIP Advanced Setting menu item.

A 101 . Call waiting: Lines currently connected receive an audible beep to identify that another call is pending. 1. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Activated SIP Call Features: Click each SIP call feature to activate the feature for each account number. TM 87-10878 Rev.

15. DND: Check to turn on the Do Not Disturb (DND) feature. A Call Barring digit map has rules that apply to Call barring. Anonymous calling: Making calls without revealing your identity to those you are calling. A . 4. 10. but incoming call information is presented to the phone. 8. the subscriber can dial another number with a configured override feature that overrides the pre-programmed number. MWI: Check to select Message Waiting Indicator. Call barring pin: enter the pin code to cancel Call Barring on outgoing calls. A line configured for Hot Line cannot place outgoing calls to any number other than the preprogrammed number. 18. 3. 102 TM 87-10878 Rev. Also during the delay period before the pre-programmed number is dialed.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 2. 9. Warm Line and Hot Line Hot Line and Warm Line allow the user to place an outgoing call to a preprogrammed number without having to dial the telephone number by lifting the phone off hook. or 2) the ringer is turned off. so user can accept the call if desired. Forward on “busy”: Calls are redirected to another phone number when your line is busy. 12. Warm line override number: enter the phone number that will override the pre-programmed Warm Line number during the delay period before the pre-programmed number is dialed. for example. 6. 7. 5. Enable V18 support: SIP-18 support 16. The subscriber is able to configure the delay period. 13. Anonymous call blocking: Blocks any incoming unidentified number. Warm Line number: enter the preprogrammed number for the line configured with the Warm Line feature. Call forwarding number: Enter the phone number where you want to redirect your calls. 17. Registration Retry Interval: interval time in seconds when registration is retried. Incoming calls are not affected by the Hot Line or Warm Line feature. 14. Forward on “no answer”: Calls are redirected to another phone number after a specified number of rings. there is a delay of seconds before the ONT sends the call automatically to a pre-programmed number. a template that matches different sequences of digits that users dial as part of their interaction with their phone system. 11. Enable T38 support: Click to enable T38 Fax Relay. Call barring: Allows you to restrict outbound calling to specific numbers or dialing codes. Registration Expire Timeout: time in seconds when the SIP registration expires. This feature may have the following two options: 1) where no incoming call information is presented to the user and the phone beeps. Disconnect Delay (ms): delay time in milliseconds (ms) before a call disconnects. Warm Line service differs in that when the receiver is lifted off the hook. Hot line number: enter the preprogrammed number for the line configured with the Hot Line feature. usually from 1 to 20 seconds. and also allows you to bar incoming calls. Call barring digit map: A digit map defines phone specific dialing behavior. Forward unconditionally: All calls are redirected to another phone number.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 19. 23. 22. You can configure global parameters that affect the entire specified interface. 27.2 Global Parameters—SIP Advanced Settings Click the “Global Parameters” tab to display the Global Parameters screen. Hook Flash Relay setting: Select SIPInfo or None.2. 28. 20. Relaying DTMF prevents losing signal integrity over voice compressed codecs. DSCP for SIP: Select the Differentiated Services (DiffServ) value for SIP. SRTP Configuration: Disabled is the default and cannot be changed. Apply: Click to apply and save configuration changes. SIPinfo. Start SIP client: After you finish entering your changes. then click the Start SIP client button to implement the changes. Stop SIP client: Click to stop SIP client. Music Server port: Enter the music port server number. 1. DTMF Relay setting: Select Inband. RTP is regarded as the primary standard for audio/video. 30. multimedia transport in IP networks. A 103 . SIP Transport protocol: UDP is the only option. Enable SIP tag matching: Check to enable. Start SIP client: Click to start SIP client. Stop SIP client: Click to stop the SIP client first before changing any of the parameters. Music Server: Enter music server IP address. TM 87-10878 Rev. or RFC2933. 6. This is Dual-tone Multi-frequency Relay (DTMF) mechanism where a voice gateway listens for in-call tones and relays them to the peer. 24. 25. 21. DSCP for RTP: Select the Differentiated Services (DiffServ) value for Real-time Transport Protocol (RTP). 26. 2. 29.

Notice.3 SIP Debug Setting If logging is enabled. The system can output Error. Ingress gain: Select from 20 to -20. The Voice—SIP Debug Configuration screen displays. Start SIP client: After you finish entering your changes. A . VAD support: This is Voice Activity Detection support.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 3. 7. Apply: Click to apply the changes entered. Check to enable VAD support. 4. or Debug logs. select the following: 3. 1. 8. the system logs specified events that are set in the Global Parameters screen in SIP Debug Settings. 6. Apply: Click to apply the changes entered. SIP log server IP Address: Enter the IP address for the SIP log server. SIP log server port: Enter the SIP log server port number.1 Service Provider--SIP Debug Setting Click on SIP Debug Setting menu item under Voice. 104 TM 87-10878 Rev. 6. 5. Stop SIP client: Click to stop the SIP client first before changing any of the parameters. Egress gain: Select from 20 to -20. For the selected line number. 6.3. then click the Start SIP client button to implement the changes. 2.

4. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 6. Stop SIP client: Click to stop the SIP client first before changing any of the parameters.2 Global Parameters—SIP Debug Settings You can select the Console Log Level to output debug error messages globally for the interface. Notice. 1. A 105 . 2. Start SIP client: After you finish entering your changes. Vodsl Console Log Level: Select type of console log level to output: Error.3. then click the Start SIP client button to implement the changes. Apply: Click to apply the changes entered. TM 87-10878 Rev. Click the Global parameters tab in SIP Debug Setting. or Debug. 3.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 106 TM 87-10878 Rev. A .

A 107 . If you are not able to access this page. 4. If a test fails. 7. follow the troubleshooting procedures listed below. If all the tests pass. If a test shows a Fail status. TM 87-10878 Rev. then close and restart your Web browser. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Chapter 7 Diagnostics The EPON Multi-service Residential Gateway is capable of testing your Ethernet connections. verify that the Ethernet cable from your computer or your hub is connected to the LAN port on the ONT. Reseat the cable by unplugging both ends and reconnecting them to their respective ports. With the ONT on. 2. This resets the ONT to its default settings. Wait 10 seconds and turn it back on. click “Help” and follow the troubleshooting procedures. 3.1 Troubleshooting 1. Wait for the ONT to initialize. Make sure you are using the Ethernet cable supplied with your ONT. To reconfigure the ONT. The results show if the Ethernet interface from your computer is connected to the LAN port of the ONT and if the wireless interface from your computer is connected to the LAN port of the ONT. close and restart your Web browser to access the Internet. These procedures are also described below. The Diagnostics screen allows you to run diagnostic tests to check your Ethernet and wireless connections. use a stick to press the reset button on the ONT for over one (1) second and release it. click the Rerun Diagnostic Test button to check that the Fail status is consistent. Turn off the ONT. If the test continues to fail. type your account username and password.

108 TM 87-10878 Rev.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Contact Aurora Networks Technical Support if you have tried all of the above and are still experiencing a Fail condition. A .

You can perform the following operations: • Backup and Update settings • Restore Default Settings • Set up the System Log and Security Log • Set up the SNMP Agent 8. You can enable the SNMP agent so that you can retrieve statistics and status on this ONT. which is the software that runs on managed devices. Click on the SNMP Agent menu item under Management.1 Set up the SNMP Agent The Simple Network Management Protocol (SNMP) is used mostly in network management systems to monitor network-attached devices for conditions that require administrative attention. 2. such as modifying and applying a new configuration through remote modification of these MIBs. The protocol allows active management tasks. • TR-069 Client • Set up Internet Time on the ONT TM 87-10878 Rev. The SNMP—Configuration screen displays below. These variables are known as Management Information Bases (MIBs). SNMP Agent: click to enable or disable the SNMP agent. A 109 . Apply/Save: Click to apply the change and save the configuration. SNMP agents. expose management data on the managed systems as variables. 1. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Chapter 8 Management You have many tools to manage your ONT.

Suggest you save the file with an . You can save the file . a. b. You can open the . You can also simply restore the ONT to its factory default settings. Click Backup under Settings under Management to display the Settings-Backup screen. A . and restore the ONT’s configuration from a file. 110 TM 87-10878 Rev. passwords • Update Software (ONT firmware) • Reboot the ONT 8.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide • Set up Access Control on the ONT--user permissions. 1. update the ONT’s configuration.2 Settings You can back up your ONT’s configuration to a file.2. 8. This function allows you to transfer the entire configuration of one ONT to another ONT in case you need to clone the configuration or replace it. Click the Backup Settings button to display a window showing an XML file of the configuration settings.conf file with Wordpad (better formatting) or Notepad or Word.xml extension.1 Backup You can back up your ONT’s configurations to a file on your PC.

2 Update You can update your ONT’s setting using a saved settings file. You might wish to do this if you lose or corrupt your settings file. 2.2. A 111 .3 Restore Default Settings You are able to restore your ONT’s configuration settings to factory default settings. Click the Browse button to locate your settings file. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 8. Click the Update Settings button to update the settings file.2. Click Restore Default under Settings under Management to display the Tools—Restore Default Settings screen. Open the file and make your changes. Click Update under Settings under Management to display the Tools—Update Settings screen. 8. TM 87-10878 Rev. 1.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

Figure 16 Restore Default Settings

1. Click the Restore Default Settings button to restore your ONT’s configuration settings to factory
default settings. See Section 2.1, Factory Default Settings, for a description of the default settings.

8.3 System Log
You can view the System Log and configure System Log options. Click on the System Log menu item
under Management. The System Log screen displays.

1. View System Log: Click to view the information in the System Log.

112 TM 87-10878 Rev. A

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

a. Refresh: click to update the information in the system log.
2. Configure System Log: Click to configure options for the System Log.

a. Log: Select Disable or Enable to stop or start logging selected events.
b. Log Level: Select type of events to log—Debugging, Emergency, Alert, Critical,
Error, Warning, Notice, or Informational. All events above or equal to the selected
level are logged.

TM 87-10878 Rev. A 113

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide

c. Display Level: All logged events above or equal to the selected level are displayed.
The levels are: Debugging, Emergency, Alert, Critical, Error, Warning, Notice,
Informational.
d. Mode: Modes are Local, Remote, or Both.

• For Remote or Both mode: Events are sent to the
specified IP address and UDP port of the remote
syslog server.
Enter the server IP address and the server UDP port
number.

• For Local or Both mode: Events are recorded in the
local memory.
e. Apply/Save: Click to apply the change and save the configuration.

8.4 Security Log
You can view the Security Log and configure options for the Security Log. Click Security Log under
Management to display the Security Log screen.

1. View: Click to view the information in the Security Log.
2. Reset: Click to clear and reset the Security Log.
3. Right-click here: saves the Security Log to a file.

114 TM 87-10878 Rev. A

6 TR-069 Client Technical Report 069 (TR-069) is a Broadband Forum technical specification. provision. expose management data on the managed systems as variables. The protocol allows active management tasks. SNMP agents.5 SNMP Agent The Simple Network Management Protocol (SNMP) is used mostly in network management systems to monitor network-attached devices for conditions that require administrative attention. The bidirectional protocol provides the communication between customer premises equipment (CPE) and Auto Configuration Servers (ACS). You are able to configure options for TR-069 client to direct the ACS to perform auto-configuration. such as modifying and applying a new configuration through remote modification of these MIBs. collection. Apply/Save: Click to apply the change and save the configuration. 4. A 115 . Click on the SNMP Agent menu item under Management. TM 87-10878 Rev. It defines a protocol for remote management of end user devices. The SNMP—Configuration screen displays below. 3. and diagnostics to the ONT. Click TR-069 Client under Management to display the TR-060 client—Configuration screen. 8. You can enable the SNMP agent so that you can retrieve statistics and status on this ONT. SNMP Agent: click to enable or disable the SNMP agent. These variables are known as Management Information Bases (MIBs). which is the software that runs on managed devices. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 8.

The ACS requests a connection from the CPE by visiting a negotiated URL and performing HTTP authentication. When this box is checked. ACS URL: Enter the URL for the auto-configuration. you are asked to enter the following fields: Connection Request User Name: Enter the name of the user requesting the connection 116 TM 87-10878 Rev. 2. WAN Interface used by TR-069 client: Select a WAN interface. Inform: Click to disable or enable the start by the CPE of a provisioning session. Inform Interval: Enter the time in seconds between Inform sessions. ACS User Name: Enter the authorized user name. A . ACS Password: Enter a password to secure the transport channel and authenticate the CPE against the Auto-configuration Server (ACS). 8. 5. The session begins with transmission of an Inform message. 4.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. Display SOAP messages on serial console: Click to enable or disable the ability to display Simple Object Access Protocol (SOAP) messages on the serial console. Connection Request Authentication: Check to allow the Auto-configuration Server (ACS) to request a session start from the CPE. SOAP allows you to communicate with the same or a different operating system by using the World Wide Web's Hypertext Transfer Protocol (HTTP)and its Extensible Markup Language (XML) as a way to exchange information. 3. 6. 7.

9. Apply/Save: Click to apply the change and save the configuration. 8. 1. Automatically synchronize with Internet time servers: check to synchronize the ONT time clock with Internet time servers.8 Access Control You are able to configure three (3) user accounts or user names to control access to the ONT: • admin—The “admin” user name has unrestricted access to change and view the configuration of the ONT. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Connection Request Password: Enter the user’s password.7 Internet Time You can set the time configuration for the ONT. GetRPCMethods: Click to get remote procedure call (RPC) methods. A 117 . TM 87-10878 Rev. Apply/Save: Click to apply the change and save the configuration. 8. • support—The “support” user name allows an ISP technician to access your ONT for maintenance and to run diagnostics. Click Internet Time under Management to display the Time Settings screen. • user—The “user” user name allows a user to access the ONT. 10. and update the ONT’s software. view configuration settings and statistics. 2. Connection Request URL: Enter the URL negotiated between the CPE and the ACS.

you can perform an upgrade by following the steps in the Tools—Update Software screen. Confirm Password: Re-enter the new password. New Password: Create a new password of up to 16 characters. 8. 4. 3. A . User Name: Enter a user name of up to 16 characters.9 Update Software If your ISP releases new or updated software for this ONT. Old Password: Enter your old password. Passwords cannot contain a space. 1. 5. Click Update Software under Management to display the Tools—Update Software screen. Click on Access Control under Management to display the Access Control—Passwords screen. 118 TM 87-10878 Rev.ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide You can create or change a user name of up to 16 characters. Apply/Save: Click to apply the change and save the configuration. 2.

Update Software: Click once to upload the new or updated software image file to the ONT. The rebooting process takes about 2 minutes to complete. use the “Browse” option.10 Reboot You can reboot your ONT typically because you have made configuration changes and want to run the new configurations. 8. TM 87-10878 Rev. A 119 . The ONT saves the current configuration (as a backup) and then reboots itself using the new configuration. ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Browse: Click to browse to locate the new or updated software image file. Currently.

ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide 1. Once the reboot process is underway. 2. A . 120 TM 87-10878 Rev. Reboot: Click to start the reboot process on the ONT. you see the above screen warning you to close the configuration window and wait two (2) minutes.

................. ix Product support ............xi documentation.......................................... 13 optical network interface................ Aurora Web site .................... 8 DDNS ........................................ See related documentation firewall.... 13 virtual server ...................... 12 Mask........................................................................ side........ 8 user permissions ............... 8 DHCP addressing .......................................................................... ii Contact us ............. x telephone ports ................................................ 6 Password......................................................................................................................................................xi DHCP server ............. 5 DHCP ........................ 6 user guides .................................................................. x IEEE 802............................................................................................................................... 6 Port addresses ........................................................11b/g/n .................................................................... xi Technical support ................................................... 6 PC configuration ..... 7 backup power connector............................................... remotely................. 11 class of service ........... 8 SC/APC fiber optic network interface...................... 11 residential gateway ............ 11 GUI interface ....................................................................... 5 WAN information ............................... 6 backup power connector............................................................. 12 Audience ........................ 11 connecting . related ........................................................ 9 NAT/NAPT ....................................................................... rear panel .............................................................................................................................................................. xi RF overlay ....... 6 Organization of this guide ........... 16 Log out ........................................................... 11 wi-fi .................................................................................................. rear ......................................................... 9 username............................................................... 8 IP address and subnet mask ....... 5 upgrade software........................................................................ ii Trident7 Element Management Suite .............................. 5 web site..........................................................................ix Chapter descriptions ..................................................................................... 6 customer support area... 12 TM 87-10878 Rev................... ii Revision date.............................................. x password ............ 2 EMS provisioning ..................................... 3 Aurora contact information ....................... ii RF overlay ................ 6 ethernet connections......................................................... ONT-2-E4xxxi Multi-service Residential Gateway Series Operator Guide Index APC connector ....................................... Aurora Web site................................... 13 related documentation .................... 9 Username and password ..................... x option 82................... ix wireless access point password................................................................ 8 IP address and subnet mask .................................................................... 6 link length .......................................................................................................................................................................................... A 121 ....................................................... 12 technical manuals.................................................................................. 7 contact us .... subnet ....................................................................................................................xi Configuring ONT-2-E4xxxi Series provisioning of data........... xi POTS ports ................................................................................. IPTV.... security ....................... 13 Web GUI .......................................................................... 8 log out ...... ii....................................................... ix ports....................................................................................................................................... revision history ........................................................................................................................ 12 voice ports .......... 7 power adapter ........................................................ See related documentation Documentation feedback ............................................................................................................................................................................................................... 7 connecting .. 2 UPC connector......... 7 Preface ................................... ix RF video Copyright .............................................. Aurora Networks ..................................................... 11 QoS factory default settings ............................................................................................................... x rich packet filtering ........... virtual ...................... default ........................................................ 8 server................................ 2 before you start ...................................................... 11 remote software upgrade ............................................... 12 diffserv markings.......................... 9 fiber optic network interface ......................................................................................................................... 8 wireless ............................ 12 web GUI interface ............................................................................................................................................................................................ 12 Support........................................... 6 ECO number ........................................................................ VoIP .............................................................. 6 Conventions used in this guide .........

Wireless Gateway ONT-G4020iWn Operator Guide 122 TM 87-10878 Rev. A .