Siemens SpeedStream-5200 Router Manual PDF (Setup & Configuration Guide)

Page 86 / 129 Scroll up to view Page 81 - 85

SpeedStream Router User Guide

TCP Xmas Flags:

The TCP Xmas flag configuration is an invalid combination of the FIN, URG and PUSH flags. This

packet can cause some hosts to crash.

•

Fragmented TCP Packet:

As discussed in the Invalid IP Packet Fragment description, packets may be fragmented in transit.

While it is entirely valid to fragment a TCP packet, this is rarely done because of a process called

“MTU discovery” that occurs when two hosts begin communicating. The rarity of TCP packet

fragmentation makes its occurrence suspicious and could indicate a flawed network stack exploit

attempt.

Fragmented TCP Header:

This indicates that the TCP header in the packet was split into multiple IP fragments. This never

normally occurs and is most likely a flawed network stack exploit attempt.

Fragmented UDP Header:

This indicates that the IP header in the packet was split into multiple IP fragments. This never

normally occurs and is most likely a flawed network stack exploit attempt.

Fragmented ICMP Header:

This indicates that the ICMP header in the packet was split into multiple IP fragments. This never

normally occurs and is most likely a flawed network stack exploit attempt.

Inconsistent UDP/IP header lengths:

Also known as a “UDP bomb,” this indicates that a UDP length less than the IP length was received.

This does not occur normally and is most likely a flawed network stack exploit attempt.

Inconsistent IP header lengths:

This indicates that a length greater than the one indicated by the IP length in the header was received.

This does not occur normally and is most likely a flawed network stack exploit attempt.

When logging is selected for a particular

offending packet, the ADS will write an entry

to the firewall log once a minute for as long as

the attack persists. This allows one to tell that

a long-term attack is taking place without

completely filling up the firewall log with

entries for every single packet.

Enable ADS

•

On the main menu, click

Setup

, then click

Firewall

, and then click

ADS

.

The

Attack Detection System

Configuration

window displays.

76

Page 87 / 129

SpeedStream Router User Guide

Globally Enable ADS

To globally enable ADS without losing any of the individual packet types:

•

Select

Enable Attack Detection

.

Filter a Packet Type

To filter, or drop, a packet type:

•

Select

Filter

to the right of the desired option.

Log a Packet Type to the Firewall Event Log

•

Select

Log

to the right of the desired function.

Note

Filtering and logging are independent operations. You can select either, neither or both.

Save New Settings

•

Click

Apply

.

A confirmation window displays.

UPnP (Universal Plug and Play)

UPnP is an industry standard networking protocol that enables devices to discover and control each other

over a residential network. The SpeedStream router implements the UPnP networking forum specified

Internet Gateway Device (IGD) protocol version 1.0. Through UPnP, other devices on the LAN can

obtain access to the broadband Internet connection provided by the router.

For information about logging in with UPnP, please see page 16,

Logging in with UPnP

.

UPnP Configuration Options

Disable UPnP:

Shuts down UPnP support within the router.

•

Enable Discovery and Advertisement only (SSDP):

Puts the UPnP module in a mode that makes it possible for UPnP clients to discover the router and

bring up the router’s GUI within a browser, but does not allow the UPnP client to control the router

through the UPnP directly.

Enable full Internet Gateway Device (IGD) support:

Exposes the UPnP module features to all clients, including discovery and control.

Enable access logging:

Generates a system log message whenever a UPnP client accesses the router.

77

Page 88 / 129

SpeedStream Router User Guide

Read-only mode:

Restricts the kind of access a UPnP client

can have into the router. Only requests in

the UPnP protocol that query the status of

the router are allowed. Any requests that

could potentially modify the router’s

behavior are blocked.

•

Configure UPnP Settings

1.

Select the UPnP mode.

2.

Enable any options.

3.

Click

Apply

.

Bridge Mode

The router supports two fundamental modes of operation with respect to connectivity between the Local

Area Network (LAN) and the Wide-Area Network (WAN). Under the normal mode of operation, referred

to as "bridge/routing" mode, the router provides typical routing functionality between the WAN side and

the LAN side. However, all LAN-side interfaces are "bridged."

In the second mode of operation, the router provides only bridging functionality. This applies to WAN-to-

LAN connectivity as well as to all LAN-side interfaces. Point-to-Point (PPP) connections are not

available under the bridge mode of operation.

Important!

If you switch to Bridge mode, you will lose access to the Web management interface. To

return to router mode, you must reset the router to factory defaults.

Enable Bridge Mode

1.

From the main menu, click

Setup

, and

then click

Bridge Mode

.

The

Change to Bridge Mode

window

displays.

2. Click

Apply

.

A confirmation window displays notification that the new setting will not take effect until you reboot

the router. You may do so at this point or later.

RIP (Routing Information Protocol)

Under normal circumstances, the SpeedStream router does not support routing protocols. However,

support for the

Routing Information Protocol

(RIP), versions 1, 2 or 1 and 2, may be activated through the

RIP

page. This support may be configured for any WAN connection currently configured or for the LAN

in general.

Routers user RIP to automatically “learn” new routes to other places without human intervention. The

router uses a

route

to make decisions on how to forward Internet traffic. It will then use the

routing table

78

Page 89 / 129

SpeedStream Router User Guide

to decide which interface will carry the outbound IP packet. If all routes in the routing table fail, the

router will forward the IP packet to its

default route

. When the router boots up, it will

broadcast

its

routing table on configured interfaces; i.e., it shares its routing table with other routers that support RIP.

This broadcast occurs about every 30 seconds. A router can also “ask” another RIP router for its routing

table. If the SpeedStream router receives a valid request, it will respond with the SpeedStream router

routing table.

RIP Configuration Options

Interface

:

The system-generated list of LAN or WAN interfaces available for RIP enabling.

RIP Version 1:

Allows RIP version 1 to be transmitted/received on the selected interface. Currently, RIPv1 is seldom

used, but supported on the SpeedStream router.

Version 2:

Allows RIP version 2 to be transmitted/received on the selected interface. This would be the most

common choice.

Versions 1 and 2:

Simultaneously supports RIP versions 1 and 2 on the selected interface.

Active Mode:

If enabled, the router will receive routing updates on the selected interface and will broadcast regular

routing updates to other routers. If not enabled (default), the router will receive routing updates on this

interface, but will not broadcast routing tables.

Configure RIP Settings

1.

In the row of the interface for which you want to enable RIP, select the RIP version.

2.

If you want to enable routing update

broadcasts, click the checkbox under

Active Mode

.

3.

Click

Apply

.

A confirmation window displays

notification that the new setting will not

take effect until you reboot the router.

You may do so at this point or later.

Server Ports

HTTP, FTP and Telnet servers that reside within the router typically use their well-known port values for

communication (HTTP/80, FTP/21, and Telnet/23). Under some circumstances, it may be necessary or

desirable for these servers to use a port value other than their well-known port value. In these

circumstances, the router must be configured with the non-standard port values for each of the affected

servers.

79

Page 90 / 129

SpeedStream Router User Guide

Note

New port values that may be specified for these LAN servers are restricted. The new port value

must be in the range 1024-59999. Port values below 1024 are reserved for well-known port values, and

values above 60000 are used for port forwarding.

To specify server port numbers:

1.

From the main menu, click

Setup

, and

then click

Server Ports

.

2.

Enter the port number next to the server

type.

3.

Click

Apply

.

The window refreshes to display the new

port numbers.

Dynamic DNS

Dynamic DNS allows you to dynamically update a pre assigned domain name with the Internet IP address

learned by the DSL modem. The SpeedStream router supports client updates to DynDNS.org

(http://www.dyndns.org).

To use the Dynamic DNS service, you must first set up a free account at

www.dyndns.org.

When the account is successfully established, you will be provided a username and

password for your account.

You must also register any DNS host names you wish to use with the

DynDNS.org service. The client supports the updating of two host names. When configured correctly, the

DSL modem will automatically determine your Internet IP address and update the DNS server at

DynDNS.org.

After the update, you can use your host name to access services, such as a web or mail

server, by name instead of using the IP Address. All operation and errors are stored in the modem's

System Log.

Note

Access from the WAN to the LAN might be restricted by NAT/NAPT or the firewall. These

services need to be configured before attempting to access servers on your LAN side.

Dynamic DNS Configuration Options

Dynamic DNS Client (Enable/Disable):

Enable or disable the dynamic DNS update service.

•

Service Username:

The user name you selected to access the

DynDNS.org services and Web site.

Service Password:

The password you selected to access the

DynDNS.org services and Web site.

Host Name 1 & 2:

The host names (DNS names) registered to your

account via the DynDNS.org service.

Note

You must register the host name before the client will operate correctly.

80

Rate

Popular Siemens Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share