Presentation is loading. Please wait.

Presentation is loading. Please wait.

SpeedTouch: Basic Training

Similar presentations


Presentation on theme: "SpeedTouch: Basic Training"— Presentation transcript:

1

2 SpeedTouch: Basic Training

3 Agenda: DAY1 Company profile Product portfolio Software releases
Software structure Access Architecture Hands-on

4 Company Profile

5 Thomson along the value chain
Content creators CREATION DISTRIBUTION ACCESS End consumers Theatre Digital Content Solutions Traditional / Digital cinema Production / Post- production Media asset management Film print Electronic / physical distribution Industry & Consumer Solutions DVD replication DVD distribution Home Convergence PC, TV +…, phone Content management Capture Broadcast Network services Broadband Cable Satellite Terrestrial Telcos (internet, 3G, WIFI, VDSL) Out of home Mobility Office Professional solutions Video Network Solutions

6 Global Organisation…. with a local presence.
Paris France Hanover Germany Indianapolis USA Princeton/NY USA Beijing China Rennes France Burbank USA London UK with a local presence. employees world wide.

7 DSL Product portfolio

8 DSL Portfolio 2007 Price High end products Low end products Wired
TG628s ST620 & 620s TG787 VDSL TG797n High end products ST608 & 608 Wireless TG787n TG587n TG780 Business TG707n TG790 ST605 & 605s TG546 Fiber ST585 ST780 TG585n ST706 TG576 TG546 VDSL ST546 Low end products ST536 ST516 ST530 ST510 ST330 ST122g TG151 Wired Wireless Triple Play Business

9 Software releases

10 Release Timeline Concept Early Adopter Main 2008 2007 Demo build X
Dev. Feature A Dev. Feature X Dev. Feature Y Dev. Feature Z …. Demo build X Demo build X+Y Demo build X+Y+Z+A Concept wk729 7.2.0 .1 .2 wk750 8.1.0 .1 .2 8.3.0 wk825 .1 .2 wk850 9.1.0 .1 .2 …. Early Adopter Main wk730 6.2.T 7.4.1 7.4.2 7.4.3 8.2.0 8.2.1 8.2.2 8.4.1 8.4.2 8.4.3 9.2.1 9.2.2 wk738 wk746 wk804 wk812 wk820 wk830 wk838 wk846 wk904 wk912 wk920 2007 2008

11 Software / Firmware / Build Structure
archive (customization) .ini .tpl & .def Software physical layer security.cfg boot loader .bin file  local upgrade .www file local upgrade remote upgrade rescue bootp mode

12 File types user.ini saved config <file>.tpl
templates (Set-Up Wizard) <file>.def factory defaults <file>.cfg configuration files; physical layer, dial tones, security files <file>.sts SpeedTouch Script <file>.bin Software container, including bootloader <file>.www Software container, without bootloader

13 user.ini saved configuration saved in passive directory /dl
backup via FTP ftp:// cd dl get user.ini backup via GUI SpeedTouch – Configuration – task: Save and restore configuration backup-configuration save user.ini

14 user.ini content [ cac.ini ] config port=dsl0 state=enabled
config port=atm2 state=enabled config port=aal5 state=disabled config port=atm5 state=disabled overbooking rt=0 nrt=0 [ language.ini ] config language=fr complete=no [ script.ini ] [ fwlevel.ini ] add name=Standard index=1 readonly=enabled udptrackmode=loose service=enabled proxy=enabled text="Ce réglage autorise le trafic sortant mais bloque le trafic entrant susceptible de nuire." add name=Off index=2 readonly=enabled udptrackmode=loose service=enabled proxy=enabled text="Le firewall est désactivé, tout trafic entrant et sortant est autorisé." set name=Standard [ firewall.ini ] config state=enabled keep=disabled tcpchecks=exact udpchecks=enabled icmpchecks=enabled logdefault=disabled logthreshold=enabled tcpwindow=65536 debug traceconfig tcpchecks=disabled udpchecks=disabled icmpchecks=disabled sink=none forward=none source=none rule add chain=source_fire index=1 name=AnyTraffic log=disabled state=enabled action=accept rule add chain=forward_level_Standard index=1 name=FromLAN srcintf=lan log=disabled state=enabled action=accept rule add chain=forward_level_Off index=1 name=AnyTraffic log=disabled state=enabled action=accept [ endofarch ]

15 e.g. cwmp.def changed factory defaults
config state=disabled mode=full periodicInform=enabled periodicInfInt=43200 sessionTimeout=60 noIpTimeout=10 maxEnvelopes=2 connectionRequest=disabled connectionReqPath="" connectionReqUserName=$CWMPUSER connectionReqPsswd=$_WEPKEY_SERIAL connectionReqAuth=digest qos-class=12 bootdelayrange=0 server config url= username=$CWMPUSER password="" debug traceconfig level=0 runtimevar softwareVersion=Unknown bootstrap=disabled changed factory defaults $<name> is referring to local variable $_<name> is referring to local dynamic variable

16 The command line interface and system/software management

17 CLI access Through TELNET To any IP@ allocated to the CPE
TELNET system service should allow the access UserID should also have TELNET in it’s allowed zones

18 CLI Navigation Main login page
Any userID which is allowed to use the CLI

19 CLI Navigation TAB key will auto-complete any incomplete command
When unique Show a list of possible completions Help command (or ?) Works in every menu Shows the possible sub-menus Shows the possible commands Shows the us of a command when used in conjunction with that command

20 CLI Navigation Moving forward and back in the menu-structure
Use .. To move back Use <menu name> to move forward Use : in front of a command to execute it from the root menu Menu items and commands within these items can be used in one phrase. Using the : in front will execute the sequence from the root menu. : without a command or menu will move back to the root menu Exit : to exit the CLI

21 CLI basic tracing By default some traces are available from many modules : Press CTRL+Q to start showing tracings Press CTRL+S to stop showing tracings Press CTRL+T to interrupt showing historical tracings (all tracings since startup).

22 System management System menu
System debug stats : to show system performance/resource parameters Reboot Other : Settime, locale RA : Remote assistance configuration (WWW GUI)

23 System management System config Set UPnP, MDAP and other Reset
With or without ISP defaults

24 Upgrade wizard Upgrade
Upgrade wizard is a Thomson tool Allows binary flash upgrades for significant firmware changes (including filesystem) : bootp/tftp based Does not require ‘perfect’ IP connectivity Multicast (MDAP) based Provided for free on every product CD Easy to use Only for products with bootloader

25 Configuration upgrade
Configuration files can be uploaded through FTP In /dl dir When file is called “user.ini” it will be loaded TFTP up/download Web GUI Through speedtouch tab, configuration, backup or restore configuration Through expert, speedtouch tab, system update, upload files section Files need to be called user.ini in /dl to be taken into account by the bootloader

26 Configuration upgrade/backup : WWW based

27 More on access…

28 FTP access

29 MDAP MDAP ( IP Multicast Discovery and Access Protocol) is a Thomson proprietary protocol Main function: allowing discovery and communication between the modem and the host Communication between two hosts is possible as long as IP connectivity is present any valid IP address is OK for modem & host ( no subnet issue) Auto IP modem and host should be directly connected without router or firewall in between MDAP can (but shouldn’t) be disabled on the modem allows upload and download of ASCII files Supports authentication (login & password)

30 Reset to factory defaults
:system reset factory=yes proceed=yes This will reset the device to factory defaults When device running, push pinhole until reboot When device is booting, push pinhole until LED goes orange This will put the device in BOOTP

31 BOOTP BOOTP is the state where the hardware is booted, but the software is not initiated yet. In this state, you are able to upgrade the router In this state, no authentication is required since authentication is part of the software (which is not loaded yet)

32 Hierarchical module overview

33 Interface Architecture Modules
PPPoA IPoA iARP PPPoE IPoE / IPoEoA ARP PPPoE RELAY Multilink PPP EthoA IP Interface(s) IP Forwarding LoopBack Ethernet Interface(s) (Physical Ports, OBC Bridge Port, VLAN) Bridge VLAN ATM Bundle Layer 1 : Physical ATM Phonebook menu ATM menu => ATM interface - ATM interface with destination a phonebook entry Layer 2 : Datalink IP menu =>IPoA interface - IPoA with destination an ATM interface Eth menu => ETHoA interface - Ethoa with destination an ATM interface Eth bridge menu => bridge interfaces - Bridge with destination an ATM interface - Part of the bridge (also eth1, eth2, eth3 and eth4 and OBC) PPPoA and PPPoE Layer 3 : Network IP menu => IP interface - IP with destination IPoA, EthoA or LAN interface - IP routing NAT : NAT menu Streams : connection menu ALG : connection menu Layer 4/5 : Transport Firewall menu : stateful firewall Layer 6 : Presentation Not applicable Layer 7 : Application

34 Applicable encapsulations

35 Default configuration
:ip iplist :ip iflist :eth iflist :eth bridge iflist

36 Bridging: general Concept
End node End node L7 L7 L6 L6 L5 L5 Bridge L4 L4 L3 L3 L2 L2 L2 L2 MAC address L1 L1 L1 L1 A Bridge acts at the MAC layer (L2) Flooding and Forwarding Not aware of higher layers (IP packets) Self learning Traffic reduction Flooding If an Ethernet frame arrives, the destination MAC address is searched for in the filtering database. If the destination MAC address is not found (implying it is not yet learned), it is forwarded to all ports in the forwarding state, except the one the frame arrived on. Note that broadcast and multicast MAC addresses are always flooded. Forwarding If an Ethernet frame arrives with a destination MAC address that is found in the filtering database (implying it is already learned), it is forwarded to the port that is associated with that entry. In contrast to flooding, forwarding is more selective. Filtering If the destination MAC address is found to on the same port as the frame arrived on, it is filtered, silently discarded. Indeed it makes little sense to forward the frame on this port since the destination is directly connected to that source. Isolation Frames (including broadcasts) arriving via ADSL/ATM ports will never be forwarded/flooded to another ADSL/ATM port.

37 Bridged Ethernet : Protocol Stack

38 Bridged Ethernet : Interface mapping
LoopBack IP Forwarding IP Interface(s) ARP iARP IPoE / PPPoE PPPoE RELAY IPoA Multilink PPP IPoEoA Ethernet Interface(s) (Physical Ports, OBC Bridge Port, VLAN) PPPoA VLAN Bridge EthoA ATM Bundle

39 Bridged Ethernet : CLI Commands
Create an ATM phonebook entry :atm phonebook add name=BrEthoa_ph addr=8.35 type=any Create and configure an ATM interface :atm ifadd intf=BrEthoa_atm :atm ifconfig intf=BrEthoa_atm dest BrEthoa_ph ulp=mac :atm ifattach intf=BrEthoa_atm Create and configure an ETH interface :eth bridge ifadd intf=BrEthoa_br :eth bridge ifconfig intf=BrEthoa_br dest BrEthoa_atm :eth bridge ifattach intf=BrEthoa_br :saveall

40 The Bridge :eth bridge iflist

41 Bridged PPPoE : Protocol stack

42 Bridged PPPoE : Interface mapping
LoopBack IP Forwarding IP Interface(s) ARP iARP IPoE / PPPoE PPPoE RELAY IPoA Multilink PPP IPoEoA Ethernet Interface(s) (Physical Ports, OBC Bridge Port, VLAN) PPPoA VLAN Bridge EthoA ATM Bundle

43 Bridged PPPoE : CLI Commands
Create an ATM phonebook entry :atm phonebook add name=BrEthoa_ph addr=8.35 type=any Create and configure an ATM interface :atm ifadd intf=BrEthoa_atm :atm ifconfig intf=BrEthoa_atm dest BrEthoa_ph ulp=mac :atm ifattach intf=BrEthoa_atm Create and configure an ETH interface :eth bridge ifadd intf=BrEthoa_br :eth bridge ifconfig intf=BrEthoa_br dest BrEthoa_atm :eth bridge ifattach intf=BrEthoa_br

44 Routing : general Concept
Router End node IP address A Router acts at the Internet layer (L3) Routing based upon IP address Not aware of higher layers (TCP segments, applications) Self learning based upon routing protocols Traffic reduction

45 Routed IPoA : Protocol stack

46 Routed IPoA : Interface mapping
LoopBack IP Forwarding IP Interface(s) ARP iARP IPoE / PPPoE PPPoE RELAY IPoA Multilink PPP IPoEoA Ethernet Interface(s) (Physical Ports, OBC Bridge Port, VLAN) PPPoA VLAN Bridge EthoA ATM Bundle

47 Routed IPoA : CLI Commands
Create and configure an ATM interface :atm phonebook add name=RtIPoA_ph addr=8.35 type= any :atm ifadd intf=RtIPoA_atm :atm ifconfig intf=RtIPoA_atm dest=RtIPoA_ph ulp=ip :atm ifattach intf=RtIPoA_atm Create and configure an IP interface :ip ifadd intf=RtIPoA_ip :ip ifconfig intf=RtIPoA_ip dest=RtIPoA_atm :ip ifattach intf=RtIPoA_ip Configure the IP address :ip ipadd addr= /24 intf=RtIPoA_ip addroute=yes :saveall

48 Routed IPoEoA : Protocol stack

49 Routed IPoEoA : Interface mapping
LoopBack IP Forwarding IP Interface(s) ARP iARP IPoE / PPPoE PPPoE RELAY IPoA Multilink PPP IPoEoA Ethernet Interface(s) (Physical Ports, OBC Bridge Port, VLAN) PPPoA VLAN Bridge EthoA ATM Bundle

50 Routed IPoEoA : CLI Commands
Create and configure an ATM interface :atm phonebook add name=RtEthoa_ph addr=8.35 type= any :atm ifadd intf=RtEthoa_atm :atm ifconfig intf=RtEthoa_atm dest RtEthoa_ph ulp=mac :atm ifattach intf=RtEthoa_atm Create and configure an ETH interface :eth ifadd intf=RtEthoa_eth :eth ifconfig intf=RtEthoa_eth dest RtEthoa_atm :eth ifattach intf=RtEthoa_eth Create and configure an IP interface :ip ifadd intf=RtEthoa_ip :ip ifconfig intf=RtEthoa_ip dest RtEthoa_eth :ip ifattach intf=RtEthoa_ip In Case of DHCP client :dhcp client ifadd intf=RtEthoa_ip :dhcp client ifattach intf=RtEthoa_ip In Case of static IP :ip ipadd addr= /24 intf=RtEthoa_ip addroute=yes

51 Routed PPPoA : Protocol stack

52 Routed PPPoA : Interface mapping
LoopBack IP Forwarding IP Interface(s) ARP iARP IPoE / PPPoE PPPoE RELAY IPoA Multilink PPP IPoEoA Ethernet Interface(s) (Physical Ports, OBC Bridge Port, VLAN) PPPoA VLAN Bridge EthoA ATM Bundle

53 Routed PPPoA : CLI Commands
Create and configure an ATM interface :atm phonebook add name=RtPPPoA addr=8.35 type=any :atm ifadd intf=RtPPPoa_atm :atm ifconfig intf=RtPPPoa_atm dest=RtPPPoA ulp=ppp :atm ifattach intf=RtPPPoa_atm Create and configure a PPP interface :ppp ifadd intf=Rt_PPPoA :ppp rtadd intf=Rt_PPPoA dst=0/0 src= srcmsk=1 :ppp ifconfig intf=Rt_PPPoA dest=RtPPPoA_atm password=johndoe :nat ifconfig intf=Rt_PPPoA translation enabled :ppp ifattach intf=Rt_PPPoA :saveall

54 Routed PPPoE : Protocol stack

55 Routed PPPoE : Interface mapping
LoopBack IP Forwarding IP Interface(s) ARP iARP IPoE / PPPoE PPPoE RELAY IPoA Multilink PPP IPoEoA Ethernet Interface(s) (Physical Ports, OBC Bridge Port, VLAN) PPPoA VLAN Bridge EthoA ATM Bundle

56 Routed PPPoE : CLI Commands
Create and configure an ATM interface :atm phonebook add name=RtPPPoE_ph addr=8.35 type=any :atm ifadd intf=RtPPPoE_atm :atm ifconfig intf=RtPPPoE_atm dest=RtPPPoE_ph ulp=mac :atm ifattach intf=RtPPPoE_atm Create and configure an ETH interface :eth ifadd intf=RtPPPoE_eth :eth ifconfig intf=RtPPPoE_atm dest=RtPPPoE_atm :eth ifattach intf=RtPPPoE_eth Create and configure a PPP interface :ppp ifadd intf=RtPPPoE0 :ppp rtadd intf=RtPPPoE0 dst=0/0 src=  srcmsk=1 :nat ifconfig intf=RtPPPoE0 translation=enabled :ppp ifattach intf=RtPPPoE0 :saveall

57 PPPoE Relay : Protocol stack
Feature to allow the combination of Bridged and Routed PPPoE

58 PPPoE Relay : Interface mapping
LoopBack IP Forwarding IP Interface(s) ARP iARP IPoE / PPPoE PPPoE RELAY IPoA Multilink PPP IPoEoA Ethernet Interface(s) (Physical Ports, OBC Bridge Port, VLAN) PPPoA VLAN Bridge EthoA ATM Bundle

59 PPPoE relay Overview With CLI : first create an ETHoA interface WITHOUT IP address and add then an PPPoE interface To enable PPPoE RELAY, configure dest=RELAY in PPPoE configuration Add the the desired ports to the RELAY ALLOW filter :ppp relay ifadd

60 PPPoE relay overview Setting up pppoe sessions can happen in 2 ways :
By binding an ethernet encapsulated destination port (eth0 or ethoa) to a pppoe session – without relay By binding the pppoe session to the RELAY RELAY is a filter which contains a list of allowed ports Any ethernet encapsulated ports can be added (eth and ethoa ports) Consequences : Pppoe sessions can be setup over a real ethernet port (eth0) e.g. to another DSL gateway Multiple pppoe sessions can be setup through the same PVC (RELAY) Multiple pppoe sessions can be mixed with ethoa connections having static or dynamic ip addresses or bridges Embedded pppoe sessions can be mixed with pppoe sessions coming from the LAN

61 PPPoE Relay : CLI Commands
Create and configure an ATM interface :atm phonebook add name=RtPPPoE_ph addr=8.35 type=any :atm ifadd intf=RtPPPoE_atm :atm ifconfig intf=RtPPPoE_atm dest=RtPPPoE_ph ulp=mac :atm ifattach intf=RtPPPoE_atm Create and configure an ETH interface :eth ifadd intf=RtPPPoE_eth :eth ifconfig intf=RtPPPoE_atm dest=RtPPPoE_atm :eth ifattach intf=RtPPPoE_eth Add ETH to PPPoE Relay :ppp relay ifadd intf=RtPPPoE_eth :ppp relay ifadd intf=Bridge Create and configure a PPP interface :ppp ifadd intf=RtPPPoE0 :ppp rtadd intf=RtPPPoE0 dst=0/0 src=  srcmsk=1 :nat ifconfig intf=RtPPPoE0 translation=enabled :ppp ifattach intf=RtPPPoE0 :saveall

62 Hands-on!

63 Upgrade via upgrade-wizard to 7.4

64 Default configuration
:ip iplist :ip iflist :eth iflist :eth bridge iflist

65 Ethernet without bridge
… flush … :eth bridge ifdelete … :eth ifadd … :eth ifconfig … :eth ifattach … :ip ifadd … :ip ifconfig … :ip ifattach … :ip ipadd / :dhcp client ifadd (1,3,6,51,58,59) :nat interface …

66 Debug-tools ip debug traceconfig ctrl-q / ctrl-s / ctrl-t Wireshark
Set Capture port on switch :eth switch mirror capture port=3 :eth switch mirror ingress port=4 :eth switch mirror egress port=4

67 Mirroring from the WAN :eth switch mirror capture port=3
:eth switch mirror ingress port=4 :eth switch mirror egress port=4

68 Capture HTTP/FTP request!

69

70 Troubleshooting ADSL ATM OAM IP trace NAPT trace Connections

71 CLI Press CTRL+Q to start showing tracings
Press CTRL+S to stop showing tracings Press CTRL+T to interrupt showing historical tracings (all tracings since startup).

72 Advanced debugging Debug menu Only for exceptional tracing
Contains many low-level debugging possibilities “exec” command

73 ADSL To enable ADSL logging : Set ADSL training mode
:adsl config trace enabled Set ADSL training mode :adsl config opermode multimode : legacy ADSL multi_adsl2 multi_readsl2 : reach extended multi_adsl2plus :adsl config

74 ADSL traces

75 ATM statistics ATM debug menu Portstats AAL5stats : AAL5 errors
DSL0 = fast channel DSL1 = interleaved channel

76 ETH(oA) ports overview
Eth bridge iflist On Board CPU = routing engine

77 ETH statistics Learned MAC addresses ARP list IP interface list

78 IP TRACING IP Debug menu Traceconfig : to display routed packets
Input/output/forward : set filter none, -telnet or use a label Example : Then press CTRL+T to clear the log q Send traffic, e.g. ping Exclude TELNET traffic

79 IP TRACING Ip debug traceconfig Mode options Default = line
Alternative = dump

80 Special IP commands IP debug PING IP debug traceroute IP debug stats

81 Connections :connection list
To find active connections between 2 IP addresses.

82 Additional traces Many other menus have debug sections with trace commands Other menus have a config option to enable tracing : NAT : DHCP server :

83

84 Multi level user and password MLP

85 Multi User – Multi Role Management
telnet ftp http Serial MDAP Upnp TR-69 Channels Management Interactions Roles Origins Root Guest ASP NSP ISP LAN Local WAN All cli commands/options Web pages File access Role + Channel + Origin = Management Interaction Template Authentication based on either Username/password (MRMU protected) Ip realm (via firewall) Triggered by end user (u/p) Certificates (ssl/(ssh))


Download ppt "SpeedTouch: Basic Training"

Similar presentations


Ads by Google