Avaya BSGX4e Uživatelská příručka

NN47928-502 WEB UI Operation GuideBSGX4eBusiness Services GatewayNN47928-502Software Release 2.1.1

10 NN47928-502

Switch 3 Data pages100 NN47928-502 Data > Switch > IEEE tabThis classification type is used with VLANs and relies on priority bits in the VL

NN47928-502 101 3 Data pages SwitchNOTE: To guarantee uninterrupted service for a critical application, such as VoIP, use fixed scheduling and assi

Switch 3 Data pages102 NN47928-502 z Static EntriesYou can add entries to the ARL table. The entries created are static entries; static entries ar

NN47928-502 103 3 Data pages SwitchData > Switch > VLANThis section describes the procedure for assigning the BSGX4e LAN ports to VLANs. This

Switch 3 Data pages104 NN47928-502 Configuration procedureThe following procedure creates a VLAN ID, assigns a port to that VLAN, and configures t

4 Quality pages IntroductionNN47928-502 1054 QUALITY PAGESThis chapter describes the configuration and status pages available from the Quality but

106 NN47928-502 Calls page 4 Quality pagesCalls pageThe Quality > Calls page has three tabs: Quality – Displays various quality statistics, in

4 Quality pages Calls pageNN47928-502 107Quality > Calls > Quality tabThe Quality tab page is display only and appears as shown above in Fig

108 NN47928-502 Calls page 4 Quality pagesThe Calls Analyser reports statistics for VoIP media streams that flow through the routing engine in the

4 Quality pages Calls pageNN47928-502 109Calls analyser configurationOpen the configuration page by clicking the Modify button. Change the default

List of figuresNN47928-502 11LIST OF FIGURESFigure 1 Components of the Web UI page . . . . . . . . . . . . . . . . . . . . . . . . . . . 22Figure

110 NN47928-502 Link page 4 Quality pagesLink pageThe Quality > Link page is where you specify the upstream bandwidth for the QoS link. This re

4 Quality pages Link pageNN47928-502 111Configure the QoS link as follows:1. Click New to open the configuration page.2. The appropriate Interface

112 NN47928-502 Group page 4 Quality pagesGroup pageThe Quality > Group page has three tabs: Group – Create and configure the quality groups u

4 Quality pages Group pageNN47928-502 113z SIP videoProtecting SIP video stream under QoS requires special considerations due to the characteristi

114 NN47928-502 Group page 4 Quality pagesConfiguring a new quality groupIf you need to create a new quality group, click New in the Group tab pag

4 Quality pages Group pageNN47928-502 115Using wizardsThe Initial Setup wizard can configure the QoS with common default settings. There is also a

116 NN47928-502 Group page 4 Quality pagesQoS defaultsIf the wizard was used with the Default button, the various pages under the Quality button i

4 Quality pages Group pageNN47928-502 117Quality > Group > LiveYou can view instantaneous performance statistics (one-second interval) for q

118 NN47928-502 Downstream QoS page 4 Quality pagesDownstream QoS pageAttention:Downstream QoS is not yet supported.Downstream QoS manages WAN lin

4 Quality pages Downstream QoS pageNN47928-502 119Figure 35 Downstream QoS page Quality > Downstream QoS > Link tabThe link tab is where you

List of figures12 NN47928-502 Figure 39 IDS page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140Figure 4

120 NN47928-502 Downstream QoS page 4 Quality pages Terminology:LLC = Logical Link ControlVC(MUX) = Virtual Circuit MultiplexingQuality > Down

4 Quality pages ARP/PPP pageNN47928-502 121ARP/PPP pageBoth ARP (address resolution protocol) and PPP (point-to-point protocol) use a control sign

122 NN47928-502 ARP/PPP page 4 Quality pagesConfigurationThis page is where you assign the ARP/PPP control signals to a quality group. However, yo

5 Security pagesNN47928-502 1235 SECURITY PAGESThis chapter describes the configuration and status pages available from the Security button on the

124 NN47928-502 Security overview 5 Security pagesSecurity overviewThe BSGX4e security features enabled: firewall, IDS, and NAT/ALG. These securit

5 Security pages PolicyNN47928-502 125PolicyThis page is where you configure new firewall security policies and view existing policies.As describe

126 NN47928-502 Policy 5 Security pagesDefault security policiesThis section describes the basic set of firewall security policies needed for the

5 Security pages PolicyNN47928-502 127Other elements that can be used to identify a data stream are destination IP, destination port, protocol, an

128 NN47928-502 Policy 5 Security pagesDHCP relay security policyIf you are using the DHCP relay rather than the default DHCP server for LAN devic

5 Security pages PolicyNN47928-502 129Relay security policiesIf you want to protect relay traffic (see Relays on page 78) with QoS, you must creat

List of tablesNN47928-502 13LIST OF TABLESTable 1 Web UI operation guide organization . . . . . . . . . . . . . . . . . . . . . . . . 16Table 2

130 NN47928-502 Policy 5 Security pagesSecurity > Policy pageThis page is where you view existing policies and configure new ones. The page has

5 Security pages PolicyNN47928-502 131Dynamic tab The firewall dynamically opens and closes ports for some data traffic. This page display these d

132 NN47928-502 NAT 5 Security pagesNATNetwork Address Translation (NAT) provides security by hiding the internal addresses of the LAN private net

5 Security pages NATNN47928-502 133z Default configurations:The WAN port is pre-configured with an Ethernet (eth0) interface. NAT is enabled and p

134 NN47928-502 NAT 5 Security pagesSecurity > NAT > Interfaces tab This tab page is where you enable NAT on the selected WAN interface. Thi

5 Security pages NATNN47928-502 135Security > NAT > Public tabThis tab page is where you assign public IP addresses to the WAN interface. Up

136 NN47928-502 NAT 5 Security pagesApplication scenariosThe following examples demonstrate how to configure common NAT application scenarios. See

5 Security pages NATNN47928-502 1372. Redirect port exampleThis example maps a Web server on the LAN to a port on the public WAN. A request sent f

138 NN47928-502 NAT 5 Security pages3. Static NAT example This policy maps an address on the LAN to an address on the WAN for outgoing traffic. Th

5 Security pages ALGNN47928-502 139ALG The Application Layer Gateway (ALG) allows FTP, TFTP, and PPTP through the firewall and NAT as trusted traf

14 NN47928-502 List of tables

140 NN47928-502 IDS 5 Security pagesQoS and PPTPIf you are planning to put the PPTP service under QoS management to give priority to VPN traffic,

5 Security pages IDSNN47928-502 141z Spoof – Protects the LAN network and the unit from intrusion. IDS spoof protection is applicable for all conf

142 NN47928-502 IDS 5 Security pagesSecurity > IDS > Protection tabThis page enables/disables protection against flood attacks, scans, and s

5 Security pages IDSNN47928-502 143z arpflood — In an ARP flood, 250 ARP request per second are accepted. Over this limit indicates a potential Do

144 NN47928-502 IDS 5 Security pagesIDS scanIDS scan protection is activated for ICMP pings, UDP port, and TCP SYN messages. A threshold value det

5 Security pages Voice ACLNN47928-502 145Security > IDS > Attacks tabThis is a display-only page that lists a count of the various attacks t

146 NN47928-502 Voice ACL 5 Security pagesConfigurationIn the display pane, click New to open the configuration page. Fill in the fields as shown

5 Security pages IPSec/IKE and VPNNN47928-502 147IPSec/IKE and VPNThe BSGX4e supports Virtual Private Networks (VPNs) using the IP security (IPsec

148 NN47928-502 IPSec/IKE and VPN 5 Security pagesSecurity > IPSec > Proposals tabAn IPsec proposal is a set of security parameters used whe

5 Security pages IPSec/IKE and VPNNN47928-502 149Security > IPSec > Parameters tabDefine the IPsec parameters for lifetimes of an IPsec secu

About this guide IntroductionNN47928-502 15ABOUT THIS GUIDEThis section provides information about the intended audience for this guide, how this

150 NN47928-502 IPSec/IKE and VPN 5 Security pagesIKEThe Internet Key Exchange (IKE) protocol provides utility services for IPSec. It defines how

5 Security pages IPSec/IKE and VPNNN47928-502 151Every IKE SA negotiation refers to a preshared key record to get the key value shared with the pe

152 NN47928-502 IPSec/IKE and VPN 5 Security pagesSecurity > IKE > SA tabThis tab page displays negotiated security associations.You can cle

5 Security pages IPSec/IKE and VPNNN47928-502 153You need the following network information to accomplish this task. The values shown are used in

154 NN47928-502 IPSec/IKE and VPN 5 Security pages3. Configure the vpn(n) interface as a WAN IP interface.Data > IP 4. Create firewall policies

5 Security pages IPSec/IKE and VPNNN47928-502 155Branch office 5. Create a route table entry for vpn0.Data > Routes Table BSGX4e-to-ISP example

156 NN47928-502 IPSec/IKE and VPN 5 Security pagesConfiguration: 1. Configure IPSec policy:Security > IPSec Note the Interface designator shown

5 Security pages IPSec/IKE and VPNNN47928-502 1575. Create firewall policies for: LAN → vpn(n) all traffic WAN → BSGX4e for security association

158 NN47928-502 IPSec/IKE and VPN 5 Security pages

6 Voice pagesNN47928-502 1596 VOICE PAGESThis chapter describes configuring the various settings for the SIP/MGCP servers and controllers, the Use

16 NN47928-502 About this guide OrganizationOrganizationThe following table describes the organization and content of this Web User Interface (UI)

6 Voice pages160 NN47928-502  SIP / MGCP statistics (page 171/page 174)Displays cumulative operational statistics for control signal messages and

6 Voice pages MediaNN47928-502 161Media Voice > Media > SettingsThis page configures various parameters for processing video and VoIP media

Media 6 Voice pages162 NN47928-502 Voice > Media > Gain The Gain page of the BSGX4e 2xx series models has two tabs: FXO Gain and FXS Gain. T

6 Voice pages MediaNN47928-502 163Stats tabThe following statistics are available on the Stats page:Port 1 – Phone (FXS)2 – Line (FXO) RxFrames Nu

Session control 6 Voice pages164 NN47928-502 Session control This sections is where you configure SIP and MGCP servers, the session controller, an

6 Voice pages Session controlNN47928-502 165Configuration tabClick New to open the configuration page. There are technical notes below the table d

Session control 6 Voice pages166 NN47928-502 Server failoverServer failover prevents VoIP service interruption by accessing backup proxy servers,

6 Voice pages Session controlNN47928-502 167Voice > Session Control > SIP Control The Session Control page contains configuration and displa

Session control 6 Voice pages168 NN47928-502 Multi-line/forkingMulti-line/forking is the capability to route an incoming SIP call to multiple phon

6 Voice pages Session controlNN47928-502 169Any incoming SIP call for a given user is then routed by the SIP server to all of that user's reg

About this guide Text conventionsNN47928-502 17Text conventionsThis guide uses the ftext font conventions described in the following table.Documen

Session control 6 Voice pages170 NN47928-502 Endpoints register with the SIP server through the session controller. To be able to be registered, t

6 Voice pages Session controlNN47928-502 171Voice > Session Control > SIP Statistics This page shows cumulative operational statistics for S

Session control 6 Voice pages172 NN47928-502 Configuration tabClick New to open the configuration page. The configuration parameters for the MGCP

6 Voice pages Session controlNN47928-502 173Click Modify to open the configuration page: Status tab This tab page displays the operational status

Session control 6 Voice pages174 NN47928-502 The fields are mostly self-explanatory. CA Port Port to which call signals are sent; extracted from t

6 Voice pages User agentNN47928-502 175User agentNOTE: The User agent applies to only the BSGX4e.The BSGX4e can act as a VoIP gateway allowing ana

User agent 6 Voice pages176 NN47928-502 SIP pageThe SIP User Agent window has three tabbed pages: Configuration – Parameters of the User Agent po

6 Voice pages User agentNN47928-502 177RFC2833 Enable/disable RFC 2833 for DTMF. Default is yes.RFC 2833 provides “out of band DTMF” event reports

User agent 6 Voice pages178 NN47928-502 Voice > User Agent > SIP > Settings tabThis page modifies the SIP protocol as it applies to the U

6 Voice pages User agentNN47928-502 179Voice > User Agent > SIP > Status tabThis page displays the status of the SIP User Agent.The field

18 NN47928-502 About this guide How to get helpHow to get helpThis section explains how to get help for Nortel products and services.Getting help

User agent 6 Voice pages180 NN47928-502 Fill in the fields as follows. Click Update when finished:Voice > User Agent > MGCP > Settings ta

6 Voice pages User agentNN47928-502 181Voice > User Agent > MGCP > Status tabThis page displays the status of the SIP User Agent.The Line

User agent 6 Voice pages182 NN47928-502 ConfigurationIn the display pane, click New to open the configuration page. Fill in the fields as shown be

6 Voice pages User agentNN47928-502 183Do not disturb This example configures two numbering plan entries to enable/disable use of the Do Not Distu

User agent 6 Voice pages184 NN47928-502 Forward no answerThis example configures two numbering plan entries to enable/disable use of the Call Forw

6 Voice pages Local call routingNN47928-502 185Local call routing The Local Call Routing page has three tabs: Account – Create an account that id

Local call routing 6 Voice pages186 NN47928-502 ConfigurationIn the display pane, click New to open the configuration page. Fill in the fields as

6 Voice pages Local call routingNN47928-502 187The following example defines the local numbering plan as follows:prefix for outbound calls (OBAcce

Local call routing 6 Voice pages188 NN47928-502

Appendix 12–Quality of service Configuration summaryNN47928-502 189APPENDIX 12–QUALITY OF SERVICEThis Appendix provides a technical description of

About this guide How to get helpNN47928-502 19Getting help through a Nortel distributor or resellerIf you purchased a service contract for your No

QoS overview Appendix 12–Quality of service190 NN47928-502 Other trafficThe configuration procedure for any other traffic stream to which you want

Appendix 12–Quality of service QoS overviewNN47928-502 191Quality of service – Layer 2Traffic contention on the LAN side of the BSGX4e is caused b

QoS overview Appendix 12–Quality of service192 NN47928-502  ToS (type of service)/DiffServ bitConfigure the LAN devices to set the appropriate To

Appendix 12–Quality of service QoS overviewNN47928-502 193Figure 44 Layer 2 QoS Application Scenarios Guarantee of service – Layer 3The BSGX4e imp

QoS overview Appendix 12–Quality of service194 NN47928-502 applications, and it uses a matrix of ten quality classes that combine different levels

Appendix 12–Quality of service QoS overviewNN47928-502 195Figure 46 GoS process flow Functional characteristicsFunctional characteristics of GoS i

QoS overview Appendix 12–Quality of service196 NN47928-502 Media and control signalsVarious devices and functions use both a media (payload) strea

Appendix 12–Quality of service QoS overviewNN47928-502 197Managing other trafficAny media stream can be placed under QoS management if the stream

Call capacity Appendix 12–Quality of service198 NN47928-502 Call capacityA common question is how many calls can be supported by a particular BSGX

Appendix 13–GlossaryNN47928-502 199APPENDIX 13–GLOSSARY3PCC 3rd Party Call ControlACL Access Control List–policies that determine which LAN endpo

NN47928-502 BSGX4e 1.2Business Services GatewayDocument Status: StandardDocument Version: 01.01Document Number: NN47928-502Date: July 2008Copyright ©

20 NN47928-502 About this guide How to get help

Appendix 13–Glossary200 NN47928-502 FQDN Fully Qualified Domain Name, consisting of host and domains, for example www.yahoo.com. The host is www,

Appendix 13–GlossaryNN47928-502 201PoE Power over Ethernet–transmission of DC power over an Ethernet cable by carrying power in the unused 4/5 and

Appendix 13–Glossary202 NN47928-502 Stateful Maintains the last-known or current status of an applicationTACACS+ Terminal Access Controller Access

IndexNN47928-502 203INDEXNumerics802.1p 191911 185Aaccess, user defaults 42ACL (Access Control List) 145alarms, call 106, 107ALG (Application Laye

Index204 NN47928-502 failover, MGCP 171failover, SIP 166fax 175, 177, 180firewallsecurity policies 125session controller 164timer 131Fixed Queuing

IndexNN47928-502 205Ppacket fragment attacks 141packet size, see MTUpassword 43authentication 44, 45PAT (port address translation) 132permissions

Index206 NN47928-502 Certificate Signing Request 61intro 59key 59, 60static IP address 25statistics, cumulativedownstream QoS 120IP interface 72Qo

1 Web UI introductionNN47928-502 211 WEB UI INTRODUCTIONThis chapter describes the layout, organization, and navigation features of the BSGX4e We

22 NN47928-502 Window components 1 Web UI introductionWindow componentsThis section describes the main components that are visible in the Web UI w

1 Web UI introduction Window componentsNN47928-502 23Menu paneClick a link in the menu pane to load a corresponding configuration page in the disp

24 NN47928-502 Window components 1 Web UI introductionOperations paneThe following links perform system operations for the current session:z Log O

1 Web UI introduction Usage notesNN47928-502 25Usage notes This section provides helpful notes on using the Web UI.Browser RequirementsThe BSGX4e

26 NN47928-502 Usage notes 1 Web UI introductionEntering numerical dataThe underlying architecture of the Web UI allows you enter numerical data i

2 System pagesNN47928-502 272 SYSTEM PAGESThis chapter describes the configuration and status pages available from the System button on the button

2 System pages28 NN47928-502 z SNMP (page 56)Configuration for remote monitoring of the system.z SSL (page 59)Configure key and certificates for S

2 System pages Status pageNN47928-502 29Status pageFigure 2 Status page The system status page is display-only, there are no configuration items.D

NN47928-502 3CONTENTSAbout this guide 15Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Status page 2 System pages30 NN47928-502 System > Status > System panelThis panel displays the information shown in the following table.Syst

2 System pages Overview pageNN47928-502 31Overview pageThe system overview page displays system information, and it contains the following configu

Overview page 2 System pages32 NN47928-502 System > Overview > System Information panelThe System Information panel shows various high-level

2 System pages Services pageNN47928-502 33Services pageThe services page is where you enable and configure various network services: Web server –

Services page 2 System pages34 NN47928-502 System > Services > Web Configuration panelThe Web server allows remote administration of the BSG

2 System pages Services pageNN47928-502 35System > Services > SNTP Configuration panelYou can use the SNTP client to automatically set the t

Services page 2 System pages36 NN47928-502 System > Services > DNS Configuration panelThe Domain Name Service (DNS) client in the BSGX4e sen

2 System pages Services pageNN47928-502 37The DNS client determines the DNS configuration to use based on the current value of its Source paramete

Services page 2 System pages38 NN47928-502 z If Source is set to user, you must enter an address into the DNS1 field. The DNS client does not perf

2 System pages Services pageNN47928-502 39System > Services > Dynamic DNS SettingsAttention:Dynamic DNS is not yet supported.The Dynamic DNS

4 NN47928-502 System > Overview > System Information panel . . . . . . . . . . . . . . . . . . . . 32System > Overview > Shell panel

Services page 2 System pages40 NN47928-502 When configured and enabled, the display panel appears, similar to the Dynamic DNS Settings panel in th

2 System pages User accounts pageNN47928-502 41User accounts pageThis page is where you manage the user account security features of the BSGX4e. T

User accounts page 2 System pages42 NN47928-502 Default configurationUser interface with the BSGX4e is managed with user accounts, user groups, an

2 System pages User accounts pageNN47928-502 43PasswordsPasswords are set in the User Account configuration page. You are advised to change the de

User accounts page 2 System pages44 NN47928-502 Fill in the fields as follows, click Update when finished:Name Log in name of new account being ad

2 System pages User accounts pageNN47928-502 45System > User Accounts > Groups tabWith the Groups tab active on the User Accounts page, clic

User accounts page 2 System pages46 NN47928-502 System > User Accounts > RightsNOTE: The two permissions (Access mode) allowed are read and

2 System pages DHCP serverNN47928-502 47DHCP serverThe DHCP server in the BSGX4e provides dynamic IP addresses to hosts connected to its LAN ports

DHCP server 2 System pages48 NN47928-502 Functional characteristicsThe DHCP server, as implemented in the BSGX4e, has the following characteristic

2 System pages DHCP serverNN47928-502 49(1) These fields are required. All remaining fields are populated with intelligent default values if left

NN47928-502 5System > SSL > Cert Reqs tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61System > SSL > Certificate

DHCP server 2 System pages50 NN47928-502 z A group cannot be deleted if it is referenced by another configuration entry on the Pool or Host pages.

2 System pages DHCP serverNN47928-502 513. Click Update when finished.ValueEnter an appropriate value for the selected code: bootfile-name Text.I

DHCP server 2 System pages52 NN47928-502 System > DHCP Server > Host tabThe configuration parameters on this page are optional. Use them to

2 System pages RADIUS and TACACS+NN47928-502 53 RADIUS and TACACS+ The BSGX4e includes both the Remote Authentication Dial-In User Service (RADIUS

RADIUS and TACACS+ 2 System pages54 NN47928-502 ConfigurationPerform the following steps to create a RADIUS or TACACS+ authentication record.NOTE:

2 System pages RADIUS and TACACS+NN47928-502 55System >TACACS+The TACACS+ page displays existing authentication records and contains the button

SNMP 2 System pages56 NN47928-502 SNMPThe BSGX4e contains an SNMP agent that allows for remote monitoring. The BSGX4e cannot be configured through

2 System pages SNMPNN47928-502 57ConfigurationThe SNMP agent is enabled by default but not configured. Traps are disabled by default, and no commu

SNMP 2 System pages58 NN47928-502 System > SNMP > Statistics tabThe statistic page is a read-only display of the SNMP agent performance. You

2 System pages SSLNN47928-502 59SSL This section describes configuring the Secure Socket Layer (SSL). SSL provides a secure connection to any devi

6 NN47928-502 Data > Routing > ARP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88ARP Table tab . . . .

SSL 2 System pages60 NN47928-502 During the time that a profile is being regenerated, a new SSL connections cannot be established. The Status fiel

2 System pages SSLNN47928-502 61System > SSL > Cert Reqs tabThis page is where you can create a new Certificate Signing Request (CSR), if ne

Upgrade 2 System pages62 NN47928-502 UpgradeFigure 9 Upgrade system image Use the Upgrade page to import new system software image files and bootl

2 System pages ConfigurationNN47928-502 63Configuration The Configuration page has two tabs: Tex t Ba se d shows a display of the current user co

License 2 System pages64 NN47928-502 LicenseThis is a display page that lists the copyrights of other companies’ products used in the BSGX4e.Loggi

2 System pages Logging informationNN47928-502 65System > Logging Info > Logging Destination panelThis panel is where you configure the exter

Logging information 2 System pages66 NN47928-502 System > Logging Info > Logging Map panelThis page is where you configure each message type

2 System pages Logging modulesNN47928-502 67Table 5 describes the message severity levels and shows the default destinations.Logging modulesThis p

Logging modules 2 System pages68 NN47928-502

NN47928-502 69 3 Data pages3 DATA PAGESThis chapter describes the configuration and status pages available from the Data button on the button bar.

NN47928-502 75 Security pages 123Security overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124Po

WAN 3 Data pages70 NN47928-502 WAN This section is where you configure the BSGX4e network (WAN) interface. Your choices are: Ethernet (eth0) [def

NN47928-502 71 3 Data pages InterfacesIP display paneThe display pane (Figure 12 above) shows the parameters of each WAN or LAN interface. This is

Interfaces 3 Data pages72 NN47928-502 DHCP clientThe DHCP client obtains a dynamic address from an external server for the interface on which the

NN47928-502 73 3 Data pages InterfacesVLAN configurationAs part of the VLAN configuration process, the Data > Interfaces > IP page is where y

Interfaces 3 Data pages74 NN47928-502 PPP configuration summaryYou must perform the following process to establish a functioning PPP link as the W

NN47928-502 75 3 Data pages InterfacesData > Interfaces > VLANThis section is where you assign the VLAN to an interface, thereby creating the

Interfaces 3 Data pages76 NN47928-502 Technical referenceThe VLAN function in the BSGX4e has the following characteristics:z The BSGX4e supports I

NN47928-502 77 3 Data pages InterfacesConfiguration procedure – Virtual interfacePerform the following procedure on the Data > Interfaces > V

Relays 3 Data pages78 NN47928-502 Relays This section describes using the BSGX4e as a relay for devices on its LAN that request DNS, TFTP, SNTP, o

NN47928-502 79 3 Data pages RelaysThe BSGX4e maintains a cache of successful DNS exchanges. If a DNS request is already in the cache, the BSGX4e ca

8 NN47928-502 6 Voice pages 159Media. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Relays 3 Data pages80 NN47928-502 Sessions and cache tabsThe Sessions tab shows current DNS sessions that are active in the BSGX4e.The Cache tab s

NN47928-502 81 3 Data pages RelaysFigure 16 Relay – TFTP page You can cache frequently requested files. If the requested file is in the cache, the

Relays 3 Data pages82 NN47928-502 Settings tabTo configure the TFTP relay, click Modify on the Settings tab page, fill in the fields as follows, a

NN47928-502 83 3 Data pages RelaysFiles tabAll files that you want to cache have to be named specifically. This page is where you specify the files

Relays 3 Data pages84 NN47928-502 Settings tabTo configure the DNS relay, click Modify on the Settings tab page, fill in the fields as follows, an

NN47928-502 85 3 Data pages RelaysData > Relays > DHCP pageFigure 18 Relay – DHCP page The DHCP relay proxies requests from devices on the BS

Routing 3 Data pages86 NN47928-502 RoutingThis section describes the routing configuration options in the BSGX4e, which consists of a routing prot

NN47928-502 87 3 Data pages RoutingData > Routing > Routes TableView dynamic routes and configure static routes in the routing table on this

Routing 3 Data pages88 NN47928-502 Data > Routing > ARPAddress Resolution Protocol (ARP) is a network layer protocol that automatically maps

NN47928-502 89 3 Data pages RoutingProxy ARP tabFigure 21 Proxy ARP page Proxy ARP enables the BSGX4e to transparently connect hosts that belong to

NN47928-502 9Appendix 12–Quality of service 189Configuration summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Routing 3 Data pages90 NN47928-502  Works with static or dynamic WAN IP address assignments, depending on the configuration. The more standard co

NN47928-502 91 3 Data pages RoutingConfiguration example 1The diagram in Figure 22 shows two proxies established (one in each direction) between a

Routing 3 Data pages92 NN47928-502 Configuration example 2The diagram in Figure 23 shows the scenario where a BSGX4e has been inserted into a exis

NN47928-502 93 3 Data pages RoutingFigure 23 Proxy ARP – Subnet with firewall STATUSWANETHERNET 10/1001234TECHNOLOGIESICAD4xBUSINESS GATEWAYINTERNE

Routing 3 Data pages94 NN47928-502 Data > Routing > RIPFigure 24 RIP page The BSGX4e executes dynamic routing by enabling RIP (Routing Infor

NN47928-502 95 3 Data pages SwitchOn the Daemon tab of the RIP page, click Modify to open the configuration page and change the settings as needed.

Switch 3 Data pages96 NN47928-502 Port page This page is where you configure the BSGX4e LAN ports and view port related statistics.Figure 26LAN po

NN47928-502 97 3 Data pages SwitchData > Switch > Mirror tabThis tab page configures port mirroring, which duplicates traffic from one port t

Switch 3 Data pages98 NN47928-502 QoS page The LAN switch in the BSGX4e unit provides a layer 2 Quality of Service (QoS) feature. This feature ena

NN47928-502 99 3 Data pages SwitchFigure 28 Layer 2 QoS functionality The configuration process consists of configuring a priority classification t