srp500 Admin

ADMINISTRATION
GUIDE
Cisco SRP500 Series Services Ready Platforms

(SRP520 Models)
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found
at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply
a partnership relationship between Cisco and any other company. (1005R)
© 2010 Cisco Systems, Inc. All rights reserved. OL-20474-04

Contents
Chapter 1: Introducing the SRP500 Series Services Ready Platform (SRP520

Models) 8
Feature Overview 8
Product Overview 9
Model Numbers 9
Front Panel 9
SRP521W Front Panel 9
SRP526W / SRP527W Front Panel 10
Front Panel Lights 10
Back Panel 11
SRP521W Back Panel 11
SRP526W / SRP527W Back Panel 11
Back Panel Descriptions 12
Side View 13
Top View 14
Default Settings 15
Chapter 2: Getting Started with the Configuration Utility 16

Logging In to the Configuration Utility 16
Using the Configuration Utility 17
Main Window Areas 17
Configuration Utility Icons 18
Chapter 3: The Quick Setup Menu 20

Basic Configuration Setup 20
WAN Setup (Ethernet) 20
WAN Setup (ADSL) 26
LAN Setup 28
Wireless Setup 31
Remote Provisioning 37
Advanced Configuration 39
Voice 39
Mobile Network Setup 39
Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 3

Contents
Firewall 40
NAT 40
Chapter 4: Setting up the Interfaces of the Services Ready Platform 41

Setting up the WAN Interface 41
Internet Setup 41
VC Setting 44
IPOA Settings / Static IP Setting 45
PPPoE Settings 45
PPPoA Settings 47
Mobile Network 47
Failover and Recovery (SRP521W) 51
Failover and Recovery (SRP526W, SRP527W) 54
Setting up the LAN Interface 57
DHCP Server 57
VLAN Setting 61
Port Setting 63
Setting up the Wireless LAN 64
Basic Wireless Settings 64
Wireless Protected Setup 67
WPS Method 1 67
WPS Method 2 67
WPS Method 3 68
Wireless MAC Filter 70
Advanced Wireless Settings 72
WMM Setting 76
Using the Management Interface 77
Chapter 5: Configuring the Network 79

Static Routing 79
RIP 81
Intervlan Routing 82
NAT 82

Contents
Setting 82
Port Forwarding 83
Port Range Triggering 85
QoS 87
Bandwidth Control 87
QoS Policy 88
QoS Settings 89
CoS To Queue 90
DSCP To Queue 91
Firewall 92
Firewall Filter 92
Internet Access Control 95
PPPoE Relay 97
DDNS 99
DMZ 103
IGMP 104
UPnP 106
CDP Setting 107
Chapter 6: Voice Settings 109

Info 109
System 110
SIP 111
Provisioning 112
Regional 118
Chapter 7: Configuring VPN 119

IKE Policy 119
IPSec Policy 121
GRE Tunnel 124
VPN Passthrough 126

Contents
Chapter 8: Administration Settings 129

Web Access Management 129
Settings 129
Remote Management 131
TR069 131
SNMP 133
Local TFTP 134
Time Setup 136
Setup Wizard 138
User List 138
User Privilege Control 139
Log 140
Factory Defaults 141
Firmware Upgrade 143
Backup & Restore 143
Backup Configuration 143
Restore Configuration 144
Reboot 145
Status 146
Switch Setting 147
Chapter 9: Using Services Ready Platform Diagnostics 149

Ping Test 149
Traceroute Test 150
Detect Active LAN Clients 151
Chapter 10: Viewing the Services Ready Platform Status 153

Router Settings 153
Firewall Status 155
Interface Information 157

Contents
Wireless Network 159

Wireless Client Information 160
Mobile Network 161
DHCP Server Information 164
QoS status 165
Routing table 166
ARP Table 167
RIP Status 168
IGMP Status 169
VPN Status 170
CDP Neighbor Information 170
Appendix A: Specifications 173
Appendix B: Where to Go From Here 175

1
Introducing the SRP500 Series Services
Ready Platform (SRP520 Models)
Thank you for choosing the Cisco SRP500 Series Services Ready Platforms
(SRP520 Models). The SRP500 Series are flexible devices that enable small
businesses to connect to a variety of services (high quality data, hosted voice, and
security services) offered by service providers.
This chapter provides information to familiarize you with the product. It consists of
these sections:
• Feature Overview
• Product Overview
For information about how to physically install the SRP and how to use the Setup
Wizard to initally configure it, see the Cisco SRP500 Series Services Ready
Platforms Quick Start Guide (SRP520 Models) at: www.cisco.com/go/srp500/
Feature Overview
Thank you for choosing the Cisco Services Ready Platform SRP 500 Series
(SRP520 Models).
The SRP 500 Series platforms includes these features:
• Intelligence to support voice, data, security, and application services.
• Industry-leading Session Initiation Protocol (SIP) stack to deliver clear, high-

quality voice service.
• Interoperability with popular soft switches and voice gateways.
• Integrated security, VPN capabilities, and an 802.11n wireless access point.
• Standards-based provisioning for streamlined deployments.

Introducing the SRP500 Series Services Ready Platform (SRP520 Models)
Product Overview 1
Product Overview
This section lists the available model numbers to help you become familiar with
your SRP, and shows the front panel, back panel, and side view of the unit.
Model Numbers
The following table describes the SRP520 Model numbers:
Model Description
SRP521W Fast Ethernet WAN
2 Phone (FXS) ports, 1 Line (FXO) port, 1 WAN (10/100) port,
4 LAN (10/100) ports, 1 USB 2.0 port, 802.11n, and WiFi Protected
Setup (WPS)
SRP526W ADSL2+ Annex B (ADSL over ISDN)
2 Phone (FXS) ports, 1 Line (FXO) port, 1 DSL port,
Setup (WPS)
SRP527W ADSL2+ Annex A/M (ADSL over POTS)
2 Phone (FXS) ports, 1 Line (FXO) port, 1 DSL port,

Setup (WPS)
Front Panel
SRP521W Front Panel
Cisco Small Business Pro

SRP 521W
1 2 3 4 1 2
276377
POWER/SYS LAN WLAN PHONE WLAN USB WPS

Product Overview 1
SRP526W / SRP527W Front Panel
Cisco Small Business Pro

SRP 526W
1 2 3 4 1 2
195210
POWER/SYS LAN PHONE CD Data WLAN USB WPS
DSL
Front Panel Lights

The following table describes the lights on the front panel of the SRP. These lights
are used for monitoring system activity.
Lights (Green) Description

POWER/SYS Lights when the SRP has successfully booted and is
ready to use. Flashes when the SRP is booting.
LAN ports (1–4) Lights when a link is established. Flashes when there is
activity on the LAN port.
WAN port Lights when a link established. Flashes when there is
(SRP521W only) activity on the WAN port.
Phone (FXS) ports (1– Lights when a link is established. Flashes when there is
2) activity on the Phone port.
DSL CD Flashes when a DSL service is detected. Lights solid
green when synchronized.
DSL Data Flashes when there is DSL activity on the line.
(SRP 526W/527W only)
WLAN Lights when the radio is powered on and operational.

Flashes when there is wireless activity on the WLAN port.
USB port Lights when the connected USB device is operational.
Flashes if there is a device failure or unsupported device.
WPS button Lights when WiFi Protected Setup (WPS) is operational.
A slow green flash indicates that the setup is in progress.

A fast green flash indicates a setup error.

Product Overview 1
Back Panel
The back panel is where you connect the network devices. The ports on the panel
vary depending on the model.
SRP521W Back Panel
Line
(FXO) WAN On/Off
Port Port Switch
2 1 4 3 2 1
236282
PHONE (FXS) LINE (FXO) WAN (10/100) LAN (10/100) 12VDC
Phone LAN 12 V DC
(FXS) Ports power
Ports
SRP526W / SRP527W Back Panel
Line
(FXO) On/Off
Port Switch
2 1 4 3 2 1
236278
DSL PHONE (FXS) LINE (FXO) LAN/WAN LAN (10/100)
DSL Phone LAN 12 V DC

Port (FXS) Ports power
Ports

Product Overview 1
Back Panel Descriptions
Feature Description
DSL port Connects the SRP to your DSL connection.
SRP526/SRP527W only
Phone (FXS) ports (1–2) Connect directly to an analog telephone, fax machine,
or similar device.
If your analog phone requires a separate bell line (as is

often the case in the UK), you might need to connect a
ring adapter between the SRP and your phone so that
the phone rings when calls are presented.
Line (FXO) port Connects to a PSTN, which is the analog telephone
service network that a traditional telephone service
uses.
WAN (10/100) port Connects the SRP to your Wide-Area-Network (WAN).
SRP521W only
LAN (10/100) ports (1–4) Connects to a wired computer and other network
devices.
On/Off Switch Powers the SRP on or off.
12 V DC power Connects to the provided power adapter.

Product Overview 1
Side View
Reset USB
Button Connector
236283
RESET
Antenna
236284
Feature Description
Reset button Press and hold for 5 seconds to reset the SRP. Press and
hold for 10 seconds to reset the SRP to its factory defaults.
To press the button, insert a paper clip or similar object into the opening.
USB port Connects to a compatible USB Modem.
For information about connecting the SRP to a USB see
Mobile Network, page 46.
Antenna The WiFi antenna.

Product Overview 1
Top View
276378
WPS Button
Feature Description
WPS Button Use to automatically configure wireless security for devices
that support WiFi Protected Setup (WPS).
To configure WPS, press and hold this button until the WPS light
flashes. Make sure that the device is located near the SRP during
setup.

Product Overview 1
Default Settings
Parameter Value
Device IP 192.168.15.1
Username cisco
Password cisco
Admin Username admin
Admin Password admin
DHCP Range 192.168.15.100 to 149
Data VLAN VLAN 1
Voice VLAN VLAN 100, published to the Cisco VOIP phones via CDP

2
Getting Started with the Configuration Utility
This chapter describes how to login and use the Services Ready Platform
Configuration Utility.
• Logging In to the Configuration Utility, page 16
• Using the Configuration Utility, page 17
Logging In to the Configuration Utility

This section describes how to log in to Services Ready Platform Configuration
Utility.
Before you begin to use the Configuration Utility, make sure that your computer is
running have a computer is running Adobe Flash Player with add-on version 10.0.0
or later.
STEP 1 Connect a computer to an available LAN port of your SRP.

By default, your PC will become a DHCP client of the SRP and will receive an IP
address in the 192.168.15.x range.
STEP 2 Start a web browser.
In the Address bar, enter http://192.168.15.1. This is the default address of the SRP.
STEP 3 When the login page appears, enter the username and password to login as the
administrator.
The default username is admin.

The default password is admin.
NOTE Passwords are case sensitive.

NOTE If you log in as cisco (with password of cisco), the Setup Wizard will automatically
begin. if you log in as admin, you can start the Setup Wizard by clicking
Administration > Setup Wizard.
STEP 4 Click Log In. The Services Ready Platform Configuration Utility opens.
Using the Configuration Utility
Main Window Areas

The Configuration Utility is a web-based device manager that is used to provision
the Services Ready Platform. You must have IP connectivity between the PC and
the Services Ready Platform to configure it.

2 Getting Started with the Configuration Utility
Using the Configuration Utility
Component Description
1 Tab The Tab bar contains major function categories. Click a

tab to change to another category.
2 Navigation Pane The navigation pane provides easy navigation through

the configurable device features.The main branches
expand to provide the subfeatures. Click on the triangle
next to the main branch title to expand or contract its
contents. Click on the title of a feature or subfeature to
open it.
3 Main Content The main content of the feature appears in this area.
Configuration Utility Icons

Various icons are used throughout the Configuration Utility. These icons are
defined below.
Icon Description
Edit Icon The Edit icon lets you edit an existing item from a list.
After making your changes, click the Submit button to
save your changes.
Add Item The Add Item icon lets you add an item to a list. After
Icon you have created a new item, click the Submit button to
save the new item.
Delete Item The Delete Item icon lets you delete an item from a list.
Icon After you have deleted an item, click the Submit button
to save your changes.
Increment The Increment and Decrement icons let you change

Decrement numeric values. Click the “+” icon to increment a value;
Icons click the “-” icon to decrement a value. Click the Submit
button to save your changes.
18 Cisco SRP500 Series Services Ready Platforms (SRP520 Models)


3
The Quick Setup Menu
This chapter describes how to use the Quick Setup features to setup your
Services Ready Platform.
• Basic Configuration Setup, page 20
• Advanced Configuration, page 39
Basic Configuration Setup

The features in Basic Configuration Setup lets you setup your WAN, LAN, Wireless,
and Remote Provisioning.
WAN Setup (Ethernet)

The WAN Setup page lets you quickly setup your Ethernet WAN interface.
STEP 1 Click Quick Setup on the tab and then click WAN Setup in the navigation pane. The
WAN Setup page appears.
STEP 2 Enter your Internet connection type and any optional WAN settings as necessary.
STEP 3 Click Submit to save your settings.

Field Description
WAN The WAN interface.
VLAN ID The VLAN ID.
Connection Type The type of Internet connection your ISP provides from
the drop-down menu.
Automatic Configuration - DHCP
By default, the Router's Internet Connection Type is set

to Automatic Configuration - DHCP, which should be
kept only if your ISP supports DHCP or you are
connecting through a dynamic IP address.

3 The Quick Setup Menu
Field Description
Static IP
If you are required to use a permanent IP address to

connect to the Internet, select Static IP.
• Internet IP Address and Subnet Mask
This is the Router's IP Address and Subnet Mask as seen

by external users on the Internet (including your ISP). If
your Internet connection requires a static IP address, then
your ISP will provide you with a Static IP Address and
Subnet Mask.
• Default Gateway
Your ISP will provide you with the Gateway IP Address.
• DNS 1-3
The Domain Name System (DNS) is how the Internet

translates domain or website names into Internet
addresses or URLs. Your ISP will provide you with at least
one DNS Server IP Address. If you wish to use another,
type that IP Address in one of these fields. You can type
up to three DNS Server IP Addresses here. The Router will
use these for quicker access to functioning DNS servers.

Field Description
PPPoE (For ADSL user)
Some DSL-based ISPs use PPPoE (Point-to-Point

Protocol over Ethernet) to establish Internet
Connections. If you are connected to the Internet
through a DSL line, check with your ISP to see if they
use PPPoE.
• User Name and Password
Enter the User Name and Password you use when logging
onto your ISP through a PPPoE connection.
• Service Name
If provided by your ISP, enter the Service Name.
• Connect on Demand
You can configure the Router to disconnect your Internet

connection after a specified period of inactivity (Max Idle
Time). If your Internet connection has been terminated due
to inactivity, Connect on Demand enables the Router to
automatically re-establish your connection as soon as you
attempt to access the Internet again. If you wish to
activate Connect on Demand, click the radio button. If you
want your Internet connection to remain active at all times.
Otherwise, enter the number of minutes you want to have
elapsed before your Internet connection terminates.
• Keep Alive
This option keeps you connected to the Internet

indefinitely, even when your connection sits idle. To use
this option, click the radio button next to Keep Alive. The
default Redial Period is 30 seconds (in other words, the
Router will check the Internet connection every 30
seconds).

Field Description
PPTP
Point-to-Point Tunneling Protocol (PPTP), is a service

that applies to tunneling connections.
The IP Address and Subnet Mask as seen by external

users on the Internet (including your ISP). If your Internet
connection requires a static IP address, then your ISP will
provide you with a Static IP Address and Subnet Mask.
• Gateway
• DNS 1-3
Your ISP will provide you with at least one DNS Server IP
Address. If you wish to use another, type that IP Address
in one of these fields. You can type up to three DNS
Server IP Addresses here. The Router will use these for
quicker access to functioning DNS servers.
• PPTP Server IP
This is the IP address of the PPTP Server. Enter the IP

address provided by your ISP.
Enter the User Name and Password you use when logging
onto your ISP through a PPTP connection.
• Connect on Demand
If your Internet connection has been terminated due to

inactivity, Connect on Demand enables the Router to
attempt to access the Internet again. If you wish to
activate Connect on Demand, click the radio button. If you
want your Internet connection to remain active at all times.
Otherwise, enter the number of minutes you want to have
elapsed before your Internet connection terminates.
• Keep Alive

indefinitely, even when your connection sits idle. Click the
radio button next to Keep Alive. The default Redial Period
is 30 seconds (in other words, the Router will check the
Internet connection every 30 seconds).

Field Description
L2TP
Layer Two Tunneling Protocol (L2TP) is a service that

applies to tunneling connections.
• DHCP
To Keep only if your ISP supports DHCP or you are

connecting through a dynamic IP address.
The IP Address and Subnet Mask as seen by external

users on the Internet (including your ISP). If your Internet
connection requires a static IP address, then your ISP will
provide you with a Static IP Address and Subnet Mask.
• Gateway
• DNS 1-3
Your ISP will provide you with at least one DNS Server IP
Address. If you wish to use another, type that IP Address
in one of these fields. You can type up to three DNS
Server IP Addresses here. The Router will use these for
quicker access to functioning DNS servers.
• Server IP Address
This is the IP address of the L2TP Server. Enter the IP

address provided by your ISP.
Enter the User Name and Password provided by your ISP.
• Connect on Demand: Max Idle Time
If your Internet connection has been terminated due to

inactivity, Connect on Demand enables the Router to
attempt to access the Internet again.
• Keep Alive

indefinitely, even when your connection sits idle. The
default Redial Period is 30 seconds (in other words, the
Router will check the Internet connection every 30
seconds).

Field Description
Host Name Your host name. This should be in the format of

name.dyndns.org.
Domain Name Your domain name. This should be in the format of

name.tzo.org.
MTU The Maximum Transmission Unit (MTU) size.
Static DNS 1 to 3 Static Domain Name System (DNS) entries 1 to 3. The

DNS is how the Internet translates domain or website
names into Internet addresses or URLs. Your ISP will
provide you with at least one DNS server IP address. If
you wish to use another, type that IP address.
WAN Setup (ADSL)

The WAN Setup page lets you quickly setup your ADSL WAN interface.
STEP 1 Click Quick Setup on the tab and then click WAN Setup in the navigation pane. The
WAN Setup page appears.
STEP 2 Enter your VC and IP settings as necessary.

Field Description
Encapsulation Encapsulation is the protocol used between your

broadband gateway and your ISP's servers. Most of the
encapsulations are defined in Internet standards called
Requests for Comments (RFCs). Two are derived from
the Point-to-Point Protocol (PPP): PPP over Ethernet
(PPPoE) and PPP over ATM (PPPoA).
Multiplexing Select the method used to route different kinds of data

through different virtual circuits (VCs) in the ATM
network: Logical Link Control (LLC) encapsulation (also
called LLC-SNAP) or Virtual Channel (VC) multiplexing
(also called VC-Mux).

Field Description
Qos Type Select the Quality of Service (QoS) method your ISP
uses on your line: Unspecified Bit Rate (UBR), Constant
Bit Rate (CBR), Real-Time Variable Bit Rate (RTVBR), or
Non-Real-Time Variable Bit Rate(NRTVBR). CBR
provides the best guarantee of low latency; UBR
provides none.
Pcr Rate—When QoS is set to CBR, VBR_RT,or

VBR_NRT, the Peak Cell Rate (PCR) in cells per second
must be entered here.
Scr Rate—When QoS is set to VBR_NRT or VBR_RT, the

Sustained Cell Rate (SCR) in cells per second must be
entered here.
MBS—When QoS is set to VBR_NRT or VBR_RT, the

MBS in cells per second must be entered here.
CDVT—When QoS is set to CBR, VBR_NRT or VBR_RT,

the CDVT in cells per second must be entered here.
VPI/VCI Auto Detect You can enable or disable automatic detection of the VPI
and VCI values (see next) that identify your line to the
ATM network.
Virtual Circuit The Virtual Path Identifier (VPI) and Virtual Channel
Identifier (VCI) are values used to identify your line to
your ISP's ATM network.
Static IP Setting Select this option if your ISP provides you with a static
IP address. Enter the following required information as
provided by your ISP: Internet IP Address, Subnet Mask,
and Default Gateway IP address. Optionally, you can
enter the IP addresses of up to three Domain Name
System (DNS) servers, or leave the fields blank to allow
a DNS server to be chosen dynamically.
LAN Setup
The LAN Setup page lets you quickly setup the LAN interface.

STEP 1 Click Quick Setup on the tab and then click LAN Setup in the navigation pane. The
LAN Setup page appears.
STEP 2 Enter your Internet connection type and any optional LAN settings as necessary.

Field Description
DHCP Name The DHCP Name.
Local IP Address / The DHCP IP address and subnet mask as seen by

Subnet Mask external users on the Internet (including your ISP).
DHCP Server The DHCP server settings. Click the Show DHCP
Reservation button to change DHCP server settings.
WAN Interface The WAN Interface.
Option 66 Option to user a TFTP server. Choices are None, Local

TFTP Server, or Remote TFTP Server. The default value
is None.
• The Local TFTP Server option indicates that the

Services Ready Platform is used as the TFTP
server for that LAN subnet.
• The Remote TFTP Server option indicates that

the TFTP server is obtained on the Services
Ready Platform WAN interface.
• The Manual TFTP Server option indicates an IP

address is entered manually for the TFTP server
(other than the Services Ready Platform).
Option 67 The name of the configuration file to be requested from

the TFTP server.
DNS Proxy The DNS proxy relays DNS requests to the current
public network DNS server for the proxy, and replies as
a DNS resolver to the client device on the network. To
enable the DNS Proxy feature, select Enabled. The
default setting is Disabled.
Starting IP Address Enter a value for the DHCP server to start with when
issuing IP addresses. Because the default IP address is
192.168.15.1, the starting IP address must be
192.168.15.2 or greater, but smaller than 192.168.15.149.
The default starting IP address is 192.168.15.100.
Maximum DHCP Enter the maximum number of PCs that you want the
Users DHCP server to assign IP addresses. This number
cannot be greater than 253. The default is 50.

Field Description
IP Address Range The range of DHCP addresses is displayed here.
Client Lease Time Amount of time a network user will be allowed

connection to the gateway with their current dynamic IP
address. Enter the amount of time, in minutes, that the
user will be “leased” this dynamic IP address. After the
time is up, the user will be automatically assigned a new
dynamic IP address. The default is 0 minutes, which
means one day.
Static DNS The Domain Name System (DNS) is how the Internet
addresses or URLs. Your ISP will provide you with at
least one DNS server IP address. If you wish to use
another, type that IP address.
WINS The Windows Internet Naming Service (WINS) manages

PCs interaction with the Internet. If you use a WINS
server, enter the IP address of the server here.
Otherwise, leave this field blank.
Wireless Setup
The Wireless Setup page lets you quickly setup the Wireless network.
STEP 1 Click Quick Setup on the tab and then click Wireless Setup in the navigation pane.
The Wireless Setup page appears.
STEP 2 In the Network Mode field, select a wireless network mode.
• If you have Wireless-N, Wireless-G, and Wireless-B devices in your

network, use the default setting, Mixed.
• If you have only Wireless-G and Wireless-B devices in your network,

select BG-Mixed. If you have only Wireless-N devices, select Wireless-N
Only.
• If you have only Wireless-G devices, select Wireless-G Only.
• If you have only Wireless-B devices, select Wireless-B Only.
• If you do not have any wireless devices in your network, select Disabled.

STEP 3 In the Radio Band field, select a bandwidth for the wireless network.
STEP 4 If necessary, select a channel that pertains to the type of bandwidth that you
selected in the previous step.
STEP 5 If necessary, add or edit the wireless network name (SSID).
STEP 6 Click Edit to enable security for the SSID. Cisco strongly recommends that you
enable security for each SSID.

Field Description
Network Mode The network mode. the default mode is Mixed.
Radio Band The bandwidth of the radio channel. The default is

Standard - 20MHz Channel.
Wide Channel If you selected Wide - 40MHz Channel for the Radio
Band setting, this setting will be available for your
primary Wireless-N channel. Select any channel from
the drop-down menu.
Standard Channel If you selected Wide - 40MHz Channel or Standard -

20MHz Channel for the Radio Band setting, then this
setting will be available. Select the channel for Wireless-
N, Wireless-G, and Wireless-B networking. If you
selected Wide - 40MHz Channel for the Radio Band
setting, then the Standard Channel will be a secondary
channel for Wireless-N. The default value is channel 11.
Wireless Network The first default wireless network uses the name
Name (SSID) “cisco_data” which is connected to the default VLAN.
The second default wireless network uses the name
“cisco_voice” which is connected to the voip VLAN. To
rename the default wireless network, enter a unique
Wireless Network Name, which is case-sensitive and
must not exceed 32 characters (use any of the
characters on the keyboard).
Broadcast Network When wireless clients survey the local area for wireless
Name networks to associate, they detect the SSID broadcast
by the gateway. If you want to broadcast the SSID, keep
the check box selected. If you do not want to broadcast
the SSID, deselect the check box.
Enabled Network To enable the wireless network, select the check box. To
disable the wireless network, deselect the check box.
WPS Hardware To enable the WPS hardware button on the top of

Button Services Ready Platform, select the check box.
Edit Click the Edit button to set the security mode for the
SSID. Each mode is described below.

Field Description
Edit (continued) • WEP—basic encryption method offering two

levels of encryption:128-bit is stronger than 64-
bit encryption.
- Authentication Type—The default is Auto,

which allows either Open System or Shared
Key authentication. With Open System
authentication, the sender and the recipient do
NOT use a WEP key for authentication. With
Shared Key authentication, the sender and
recipient use a WEP key for authentication.
Select Shared Key only use Shared Key
authentication.
- Encryption—Select the appropriate level of

encryption, 64-bit (10 hex digits) or 128-bit (26
hex digits).
- Passphrase—To automatically generate keys,

enter a passphrase and click the Generate
button.
- Key 1-4—If you want to manually enter the

WEP keys, then enter them in the Key 1-4
fields.
- TX Key—To indicate which WEP key to use,

select a transmit key number.

Field Description
Edit (continued) • WPA Personal—Wi-fi Protected Access (WPA) is

a newer security standard for securing wireless
communications.
- WPA Algorithms—Select the algorithm you

want to use, TKIP or AES. (AES is a stronger
encryption method than TKIP.)
- WPA Shared key—Enter the key shared by the

Router and your other network devices. It
must have 8-63 ASCII characters or 64 hex
characters.
- Group Key Renewal—Enter the Key Renewal

period, which tells the Router how often it
should change encryption keys.
Edit (continued) • WPA2 Personal
- WPA Algorithms—Select the algorithm(s) you

want to use, AES or TKIP + AES. (AES is a
stronger encryption method than TKIP.)
- WPA Shared Key—Enter the key shared by

the Router and your other network devices. It
must have 8-63 ASCII characters or 64 hex
characters.
- Group Key Renewal—Enter the Key Renewal

period, which tells the Router how often it
should change encryption keys.

Field Description
Edit (continued) • WPA Enterprise—This option features WPA used

in coordination with a RADIUS server. If you have
two RADIUS servers, select one to be the
primary server, and specify a secondary server
to use as a backup server. (This option should
only be used when a RADIUS server is reachable
from the Router.)

want to use, TKIP or AES. (AES is a stronger
encryption method than TKIP.)
- RADIUS Server Address (Primary and

Secondary)—Enter the IP address of your
RADIUS server.
- RADIUS Port—Enter the port number of your

RADIUS server.
- Shared Secret—Enter the key shared by the

Router and RADIUS server. The key can
include 8 to 63 ASCII characters or 64
hexadecimal characters.
- Key Renewal Timeout—Enter the Key

Renewal period, which tells the Router how
often it should change encryption keys.

Field Description
Edit (continued) • WPA2 Enterprise—This option features WPA2

used in coordination with a RADIUS server. (This
should only be used when a RADIUS server is
connected to the Router.)

want to use, AES or TKIP + AES. (AES is a
stronger encryption method than TKIP.)
- RADIUS Server Address (Primary and

Secondary)—Enter the IP address of your
RADIUS server.
- RADIUS Port—Enter the port number of your

RADIUS server.
- Shared Secret—Enter the key shared by the

Router and RADIUS server. The key can
include 8 to 63 ASCII characters or 64
hexadecimal characters.
- Key Renewal Timeout—Enter the Key

Renewal period, which tells the Router how
often it should change encryption keys.
Edit (continued) Disabled—No security is set for the SSID. This option is
not recommended by Cisco.
Remote Provisioning
This feature lets you configure communication with an Access Control Server
(ACS) via TR-069 CPE WAN Management Protocol (CWMP).
STEP 1 Click Quick Setup on the tab and then click Remote Provisioning in the navigation
pane. The Remote Provisioning page appears.
STEP 2 Click Enabled to enable remote provisioning.
STEP 3 Enter the URL for ACS. The format should be http(s)://xxx.xxx.xxx.xxx:port or
xxx.xxx.xxx.xxx:port. The xxx.xxx.xxx.xxx is domain name or IP of ACS server;
and after “:” is port. Both IP and port must be filled.
STEP 4 Enter the ACS username and password.

STEP 5 Optionally, enter the Connection request username and password.
STEP 6 Optionally, enter the periodic inform interval.
Field Description
Status Select an option to enable or disable remote

provisioning.
ACS URL The URL for ACS. The format should be http(s)://
xxx.xxx.xxx.xxx:port or xxx.xxx.xxx.xxx:port. The
xxx.xxx.xxx.xxx is domain name or IP of ACS server;

Advanced Configuration 3
Field Description
ACS Username The username for ACS. The default username is

OUISerial Number; this should be the same as
configured at ACS side and must be filled.
ACS Password The password for ACS. This should be the same as
Connection Request This field will be auto-filled and does not need to be
URL filled manually. The format is http://xxx.xxx.xxx.xxx:port.
The xxx.xxx.xxx.xxx is WAN IP of CPE.
Connection Request Connection request username. This should be the same

Username as configured at ACS side.
Connection Request Connection request password.This should be the same

Password as configured at ACS side.
Periodic Inform The periodic inform interval. The default value is 86400
Interval seconds.
Periodic Inform To enable or disable periodic inform.

Enable
Request Download If applied, ACS may call the Download RPC after it
receives the request from CPE.
Advanced Configuration
The features in Advanced Configuration Setup lets you configure advanced
settings with Voice, Mobile Network Setup, the Firewall, and NAT.
Voice
The Voice option lets you administer and view voice settings. For more details,
refer to Voice Settings, on page 109.
Mobile Network Setup

The Mobile Network Setup option lets you administer the mobile network settings.
For more details, refer to Mobile Network, on page 47.

Advanced Configuration
Firewall
The Firewall option lets you administer the firewall filter settings. For more details,
refer to Firewall, on page 92.
NAT
The NAT option lets you administer the NAT settings. For more details, refer to NAT,
on page 82.

4
Setting up the Interfaces of the Services
Ready Platform
You can use the Inteface Setup pages to setup the WAN, LAN, and Wireless LAN
interfaces.
• Setting up the WAN Interface, page 41
• Setting up the LAN Interface, page 57
• Setting up the Wireless LAN, page 64
• Using the Management Interface, page 77
Setting up the WAN Interface
Internet Setup
The settings for WAN networking are set on these pages. In most cases, you can
configure the Services Ready Platform and get it working properly by using only
the settings on these pages.
NOTE After you configure interfaces settings, you should set a new password for the
Services Ready Platform using the Adminstration > Access Setting page. This
precaution increases security, protecting the Services Ready Platform from
unauthorized changes. All users who try to access the web-based Configuration
Utility will be prompted for the password of the Services Ready Platform.
STEP 1 Click Interface Setup on the tab and then click WAN in the navigation pane. The
Internet Setup page appears.
STEP 2 To add or edit interfaces in the WAN Interface List, click the add or edit icons.

4 Setting up the Interfaces of the Services Ready Platform
STEP 3 Adjust Port Settings as necessary.
STEP 4 To clone a MAC address to the Services Ready Platform, click Enabled and then
enter a MAC address. To clone the MAC address of your computer, click the Clone
Your PC’s MAC button.

Setting up the Interfaces of the Services Ready Platform
Field Description
WAN Interface List The WAN Interface list which shows the physical link, its
protocol, and its IP address if one exists. In each entry,
you can create new sub-interface by clicking the Add
Subinterface button or the Edit button.
If you have more than one sub-interface, you can choose

ether one as the default routing interface by selecting
the Default Route radio button.
Flow Control WAN flow control. To set flow control for the WAN, select
Enabled and click Submit. The default setting is
Disabled.
Speed Duplex WAN Speed Duplex mode. Selections are Auto-

negotiate, 10 Half, 10 Full, 100 Half and 100 Full. To set
WAN speed duplex mode, choose the mode and click
Submit.The default setting is Auto-negotiate.
MAC Address A MAC address is a 12-digit code assigned to a unique

Clone piece of hardware for identification purposes. Some
ISPs require that you to register a MAC address in order
to access the Internet. If you do not wish to re-register
the MAC address with your ISP, you may assign the
MAC address that you have currently registered with
your ISP to the Services Ready Platform with the MAC
Address Clone feature. To clone your MAC address,
select Enabled, click Clone Your PC’s MAC, and click
Submit. The default value is Disabled.
WAN Interface The Details of WAN area shows information about your
Detail WAN.
When a new interface is chosen or edited using the Add or Edit icons, one of the
following options may be available.

VC Setting
Field Description
Encapsulation Encapsulation is the protocol used between your

broadband gateway and your ISP's servers. Most of the
encapsulations are defined in Internet standards called
Requests for Comments (RFCs). Two are derived from
the Point-to-Point Protocol (PPP): PPP over Ethernet
(PPPoE) and PPP over ATM (PPPoA).
Multiplexing Select the method used to route different kinds of data

through different virtual circuits (VCs) in the ATM
network: Logical Link Control (LLC) encapsulation (also
called LLC-SNAP) or Virtual Channel (VC) multiplexing
(also called VC-Mux).
QoS Type Select the Quality of Service (QoS) method your ISP
uses on your line: Unspecified Bit Rate (UBR), Constant
Bit Rate (CBR), Real-Time Variable Bit Rate (RTVBR), or
Non-Real-Time Variable Bit Rate(NRTVBR). CBR
provides the best guarantee of low latency; UBR
provides none.
• Pcr Rate—When QoS is set to CBR, VBR_RT, or

VBR_NRT, the Peak Cell Rate (PCR) in cells per
second must be entered here.
• Scr Rate—When QoS is set to VBR_NRT or

VBR_RT, the Sustained Cell Rate (SCR) in cells
per second must be entered here.
• MBS—When QoS is set to VBR_NRT or VBR_RT,

the MBS in cells per second must be entered
here.
• CDVT—When QoS is set to CBR, VBR_NRT or

VBR_RT, the CDVT in cells per second must be
entered here.
VPI/VCI Auto Detect You can enable or disable automatic detection of the VPI
and VCI values that identify your line to the ATM
network. The Virtual Path Identifier (VPI) and Virtual
Channel Identifier (VCI) are values used to identify your
line to your ISP's ATM network.

IPOA Settings / Static IP Setting
Select the IPOA Settings / Static IP Setting option if your ISP provides you with a
static IP address. Enter the required information as provided by your ISP: Internet
IP Address, Subnet Mask, and Default Gateway IP address. Optionally, you can
enter the IP addresses of up to three Domain Name System (DNS) servers, or
leave the fields blank to allow a DNS server to be chosen dynamically.
Field Description
Internet IP Address This is the Router's IP Address and Subnet Mask as

and Subnet Mask seen by external users on the Internet (including your
ISP). If your Internet connection requires a static IP
address, then your ISP will provide you with a Static IP
Address and Subnet Mask.
Default Gateway Your ISP will provide you with the Gateway IP Address.
Primay/Second The Domain Name System (DNS) is the method by

DNS which the Internet translates domain or website names
into Internet addresses or URLs. Your ISP will provide
you with at least one DNS Server IP Address. If you wish
to use another, type that IP Address in one of these
fields. You can enter up to three DNS Server IP
Addresses here. The Router will use these for quicker
access to functioning DNS servers.
PPPoE Settings
(RFC 1483 Bridged encapsulation only.) If your ISP indicates that you must use
PPPoE over RFC 1483 Bridged encapsulation, set this control to Enable. Additional
settings will appear. Service Name, User Name, and Password are explained
above, under PPPoE and PPPoA Settings. If your ISP requires a domain name,
enter it in the Match Domain Name box.
Field Description
Service Name (PPPoE only.) A Service Name is a string required by

some ISPs. Fill this in only if your ISP requires it.

Field Description
User name and Enter the strings that your ISP has instructed you to use.
Password The user name may be called a “username,” “login
name,” or “login.”
Connect on Click this option if you want your broadband gateway to

Demand connect to your ISP when a connection is needed, and
to disconnect when the line to your ISP has been idle for
a given amount of time. Connection and disconnection
are automatic. You can also adjust the maximum idle
time; the default setting is 20 minutes. The alternative to
Connect on Demand is Keep Alive (see next). In most
cases you can choose either option without consulting
your ISP.
Keep Alive Click this option if you want the gateway to maintain the
connnection to your ISP all the time. If the link goes
down for a given number of seconds (the “redial
period”), the gateway will automatically try to re-
establish it. The default redial period is 20 seconds.
Enable MTU/MRU Enable MTU/MRU greater than 1492.

greater than 1492

PPPoA Settings
Field Description
User name and Enter the strings that your ISP has instructed you to use.
Password The user name may be called a “username,” “login
name,” or “login.”
Connect on Click this option if you want your broadband gateway to

Demand connect to your ISP when a connection is needed, and
to disconnect when the line to your ISP has been idle for
a given amount of time. Connection and disconnection
are automatic. You can also adjust the maximum idle
time; the default setting is 20 minutes. The alternative to
Connect on Demand is Keep Alive (see next). In most
cases you can choose either option without consulting
your ISP.
Keep Alive Click this option if you want the gateway to maintain the
connnection to your ISP all the time. If the link goes
down for a given number of seconds (the “redial
period”), the gateway will automatically try to re-
establish it. The default redial period is 20 seconds.
Mobile Network
You can configure your SRP to connect to a USB modem that is connected to its
USB interface.See: www.cisco.com/go/srp500 for more details on compatible
USB modem devices.
The SRP allows you to set the connect mode. You can configure an automatic or
manual connection. You also can use this page to view the current connection
status.
STEP 1 Click Interface Setup on the tab and then click Mobile Network in the navigation
pane. The Mobile Network page appears.
STEP 2 If necessary, change any global settings in the Global Settings area. The Card
Status field shows the status of your mobile card.
STEP 3 If necessary, change any mobile network settings in the Mobile Network Setup
area.

NOTE You must click the Manual option in the Configure Mode field to manually setup your
mobile network card.

Field Description
Connect Mode Auto or manual connect mode. Select Auto to enable

your modem to establish a connection automatically or
select Manual to connect or disconnect your modem
connection manually.
NOTE On the SRP521W, the Ethernet Connection

Recovery and Interface Connection Failover
works only if the Connection Mode is set to Auto.
If you select Auto, you must select Connect on
Demand and Keep Alive. If you select Connect on
Demand option, you can configure the Services
Ready Platform to terminate the Internet
connection after it has been inactive for a
specified period of time (Max Idle Time).
Connect on Demand enables the modem to

automatically re-establish a terminated connection
when a user attempts to access the Internet again. In the
Max Idle Time field, enter the number of minutes of
inactivity that can elapse before your Internet
connection terminates. The default is 5 minutes. The
Services Ready Platform periodically checks your
Internet connection. If you are disconnected, then it will
automatically re-establish your connection. To use this
option, select Keep Alive. In the Redial Period field,
specify how often you want the Services Ready
Platform to check the Internet connection. The default is
30 seconds.

Field Description
Tunnel Protocol The Tunnel Protocol (PPTP/L2TP) is supported through

a USB modem by one of these methods.
• NONE. Select this option to disable the Tunnel

Protocol support.
• PPTP/L2TP. Select PPTP or L2TP depending on

the service you want to use. You will need to
provide the server IP address, user name, and
password.
• Follow Ethernet WAN configure. Select this option

to make the Tunnel Protocol follow the
configuration of the ethernet WAN.
Card Status The status of the card. If your Connect Mode is Manual,
there will be a button that you can click to connect or
disconnect your Modem.
Configure Mode Select Auto to allow the Services Ready Platform to

automatically detect which card model was inserted
and which carrier is available. Select Manual to set up
the connection manually. The default setting is Auto.
Card Model This field displays the data card model that is inserted in
the USB drive.
Carrier The mobile network service provider for the Internet

connection. This setting is required when you are using
HSDPA/UMTS/GPRS Internet service. Select the card
issue country from the first drop-down menu list, then
select the card issue provider from the second drop-
down list.
Access Point Name The Internet network to which the mobile device is
(APN) connecting to. Enter the access point name provided by
your mobile network service provider.
Dial Number The dial number for the Internet connection. Enter the
Dial Number provided by your mobile network service
provider.
User Name/ Enter the user name and password provided by your
Password mobile network service provider.

Field Description
SIM PIN The PIN code associated with your SIM card. Enter your
SIM PIN number here.
Server Name The name of the server for the Internet connection.
Authentication The type of authentication used by your service

provider. Select your authentication type, if you do not
know which type to use, use the default setting, Auto.
Service Type Select the most commonly available type of mobile data
service connection based on your area service signal. If
your location supports only one mobile data service,
you may set up for enhance build up connection. The
first selection will always search for HSPDA/3G/UMTS
service or switch to GPRS automatically only when it is
available.
Failover and Recovery (SRP521W)

An Internet connection can be established via the WAN port or a wireless modem
plugged into the USB port. Refer to www.cisco.com/go/srp500 for more details on
compatible USB modem devices.
While both Ethernet and USB modem may be connected, only one of them can be
used to establish a link at a time. Whenever the Internet connection fails, the
Services Ready Platform automatically attempts to bring up another connection
on another interface. This feature is called Failover. Whenever the Ethernet Internet
connection recovers, the Services Ready Platform automatically attempts to bring
back and recover the Internet connection. This feature is called Recovery.
STEP 1 Click Interface Setup on the tab and then click Failover & Recovery in the
navigation pane. The Failover & Recovery page appears.
STEP 2 If necessary, enable the Ethernet Connection Recovery feature by clicking

Enabled. When this option is enabled, the Services Ready Platform sets the
ethernet interface to the highest priority. Enabling this feature also enables the
Interface Connection Failover feature. Whenever the Internet connection fails, the
Services Ready Platform automatically attempts to bring up the mobile network
connection on the USB interface (if available). Whenever the Ethernet Internet
back and recover the Ethernet Internet connection.

NOTE Your Mobile Connection Mode must be set to Auto to use the Ethernet Connection
Recovery feature.
STEP 3 If necessary, enter an ethernet timeout value.
STEP 4 Choose a site on which to perform failover validation in the Failover Validation Site
area, either use the Services Ready Platform or enter the IP address for a custom
site.
STEP 5 If necessary, change the priority of the WAN interfaces by clicking the Up or Down
buttons.

Field Description
Ethernet This feature ensures that your Ethernet Internet

Connection connection is always connected when available.
Recovery

Field Description
Interface Failover detection works by detecting the physical

Connection Failover connection and/or presence of traffic on the Internet
link. If the link is idle, the Services Ready Platform
attempts to ping a destination. If the ping does not reply,
the Services Ready Platform assumes the link is down
and attempts to fail over to another interface.
Timeout The time interval at which the Services Ready Platform

detects the status of the Internet connection. The default
timeout interval is 60 seconds.
Connection A ping target for the Services Ready Platform to use to

Validation Site detect the status of the Internet connection. By default
the Services Ready Platform pings the Network Time
Protocol (NTP) servers. You may specify a different IP
address as a target here.
WAN Interfaces This area provides information on current status of the

Ethernet Internet connection and Mobile Network
connection. You can click the Status hyperlink to view
the details. You may also configure the interface priority
by clicking Up or Down. Note that the interface priority
setting is configurable only when Ethernet Connection
Recovery is disabled.
Failover and Recovery (SRP526W, SRP527W)

An Internet connection can be established via the DSL port or a wireless modem
plugged into the USB port. Refer to www.cisco.com/go/srp500 for more details on
compatible USB modem devices.
While both DSL and 3G USB modem may be connected, only one of them can be
used to establish a link at a time. Whenever the Internet connection fails, the
Services Ready Platform automatically attempts to bring up another connection
on another interface. This feature is called Failover. Whenever the DSL Internet
back and recover the Internet connection. This feature is called Recovery.

STEP 1 Click Interface Setup on the tab and then click Failover & Recovery in the
navigation pane. The Failover & Recovery page appears.
STEP 2 If necessary, enable the Ethernet Connection Recovery feature by clicking

Enabled. When this option is enabled, the Services Ready Platform sets the
ethernet interface to the highest priority. Enabling this feature also enables the
Interface Connection Failover feature. Whenever the Internet connection fails, the
Services Ready Platform automatically attempts to bring up the mobile network
connection on the USB interface (if available). Whenever the Ethernet Internet
back and recover the Ethernet Internet connection.
NOTE Your Mobile Connection Mode must be set to Auto to use the Ethernet Connection
Recovery feature.
STEP 3 If necessary, enter an ethernet timeout value.
STEP 4 Choose a site on which to perform failover validation in the Failover Validation Site
area, either use the Services Ready Platform or enter the IP address for a custom
site.
STEP 5 If necessary, change the priority of the WAN interfaces by clicking the Up or Down
buttons.

Field Description
Connection This feature ensures that your Internet connection is

Recovery always connected when available.
Interface Failover detection works by detecting the physical

Connection Failover connection and/or presence of traffic on the Internet
link. If the link is idle, the Services Ready Platform
attempts to ping a destination. If the ping does not reply,
the Services Ready Platform assumes the link is down
and attempts to fail over to another interface.
Timeout The time interval at which the Services Ready Platform

detects the status of the Internet connection. The default
timeout interval is 60 seconds.

Field Description
Connection A ping target for the Services Ready Platform to use to

Validation Site detect the status of the Internet connection. By default
the Services Ready Platform pings the Network Time
Protocol (NTP) servers. You may specify a different IP
address as a target here.
WAN Interfaces This area provides information on current status of the

Internet connection and Mobile Network connection.
You can click the Status hyperlink to view the details.
You may also configure the interface priority by clicking
Up or Down. Note that the interface priority setting is
configurable only when Connection Recovery is
disabled.
Setting up the LAN Interface
DHCP Server
DHCP Server settings are configured on this page. After clicking Add Entry button,
you can create another DHCP Server Pool.
STEP 1 Click Interface Setup on the tab and then click LAN in the navigation pane. The
DHCP Server page appears.
STEP 2 You can edit or delete a DHCP entry by clicking the edit or delete icon.
STEP 3 Click Add Entry to open the DHCP Add page. From this page you can add a DHCP
entry.

Click one of the items in the DHCP List. DHCP information displays in the DHCP
Details table.
When you click Add Entry, the DHCP Server page opens.

Field Description
DHCP Name The DHCP Name.
Local IP Address/ The DHCP IP address and subnet mask as seen by

Subnet Mask external users on the Internet (including your ISP).
DHCP Server The DHCP server status. DHCP is enabled by factory

default. If you already have a DHCP server, then select
Disable (no other DHCP features will be available).
Show DHCP Allows you to assign a fixed local IP address to a MAC

Reservation button address.

Field Description
WAN Interface The WAN Interface.
Option 66 None, Local TFTP Server, or Remote TFTP Server. The

default value is None.
DNS Proxy The DNS proxy relays DNS requests to the current
public network DNS server for the proxy, and replies as
a DNS resolver to the client device on the network. To
enable the DNS Proxy feature, select Enabled. The
default setting is Disabled.
Starting IP Address Enter a value for the DHCP server to start with when
issuing IP addresses. Because the default IP address is
192.168.15.1, the starting IP address must be
192.168.15.2 or greater, but smaller than 192.168.15.149.
The default starting IP address is 192.168.15.100.
Maximum DHCP Enter the maximum number of PCs that you want the
Users DHCP server to assign IP addresses. This number
cannot be greater than 253. The default is 50.
IP Address Range The range of DHCP addresses is displayed here.
Client Lease Time Amount of time a network user will be allowed

connection to the Services Ready Platform with their
current dynamic IP address. Enter the amount of time, in
minutes, that the user will be “leased” this dynamic IP
address. After the time is up, the user will be
automatically assigned a new dynamic IP address. The
default is 0 minutes, which means one day.
Static DNS The Domain Name System (DNS) is how the Internet
addresses or URLs. Your ISP will provide you with at
least one DNS server IP address. If you wish to use
another, type that IP address.
WINS The Windows Internet Naming Service (WINS) manages

PCs interaction with the Internet. If you use a WINS
server, enter the IP address of the server here.
Otherwise, leave this field blank.

VLAN Setting
VLAN settings are configured on this page. After clicking Add Entry, you can
create another VLAN.
STEP 1 Click Interface Setup on the tab and then click LAN in the navigation pane. Click
VLAN Setting. The VLAN Setting page appears.
STEP 2 You can edit or delete a VLAN entry by clicking the edit or delete icon.
STEP 3 Click Add Entry to open the VLAN Add page. From this page you can add a VLAN
entry.

Field Description
VLAN Name Bridge or VLAN name.
VLAN ID Bridge or VLAN ID.
Enable STP If you want to use Spanning Tree Protocol (STP), click
this box.
Voice VLAN Click this box if you want to use voice. Only use this
option in VLAN mode.
Address Type Address type. Choices are None, Static IP Address,

Dynamic IP Address, and DHCP Server Pool. The default
value is None.
Available Interface The interfaces that are available to you.
Added Interface The interfaces that are selected.

Port Setting
Port settings are configured on this page. You can also see details about the ports.
STEP 1 Click Interface Setup on the tab and then click LAN in the navigation pane. Click
Port Setting. The Port Setting page appears.
STEP 2 You can edit a port entry by clicking the edit icon. After you click the edit icon, the
Port Edit page opens. Make any necessary changes and click Submit to save your
settings.
STEP 3 If necessary, change the flow control or duplex speed settings for each interface.

Setting up the Wireless LAN
Field Description
Mode The Port Settings Mode is IP Phone + Desktop, the ports

in the VLAN are voice enabled.
Enabled Flow LAN Flow control. To enable flow control, click the
Control Enable Flow Control box for the LAN interface and click
Submit. Flow control is enabled by default.
Speed Duplex Network speed settings. The default setting is Auto-

negotiate.
Port Details The Port Details area shows information about your
ports.
Basic Wireless Settings

The basic settings for wireless networking are set on this page.
There are two ways to configure the wireless network(s) of the Services Ready
Platform, manual and Wi-Fi Protected Setup. To manually configure the wireless
settings, use the Basic Wireless Settings page.
If you have client devices, such as wireless adapters, that support Wi-Fi Protected
Setup, then you can use Wi-Fi Protected Setup to automatically configure wireless
security for your wireless network(s). To use Wi-Fi Protected Setup, refer to your
wireless adapter's documentation.
STEP 1 Click Interface Setup on the tab, and click WiFi Setting, and in the navigation pane.
Click Basic Wireless Settings. The Basic Wireless Settings page appears.
STEP 2 From the Network Mode menu, you can select the wireless standards running on
your network.
• If you have Wireless-N, Wireless-G, and Wireless-B devices in your network,

use the default setting, Mixed.
• If you have only Wireless-G and Wireless-B devices in your network, select
BG-Mixed. If you have only Wireless-N devices, select Wireless-N Only.

• If you have only Wireless-G devices, select Wireless-G Only.
• If you have only Wireless-B devices, select Wireless-B Only.
• If you do not have any wireless devices in your network, select Disabled.
STEP 3 From the Radio Band menu, you can select the wireless bandwidth on your
network. There are three options you can select: Auto, Standard - 20MHz Channel,
and Wide - 40MHz Channel.
Field Description
Network Mode The network mode. the default mode is Mixed.
Radio Band The bandwidth of the radio channel. The default is

Standard - 20MHz Channel.

Field Description
Wide Channel If you selected Wide - 40MHz Channel for the Radio
Band setting, this setting will be available for your
primary Wireless-N channel. Select any channel from
the drop-down menu.
Standard Channel If you selected Wide - 40MHz Channel or Standard -

20MHz Channel for the Radio Band setting, then this
setting will be available. Select the channel for Wireless-
N, Wireless-G, and Wireless-B networking. If you
selected Wide - 40MHz Channel for the Radio Band
setting, then the Standard Channel will be a secondary
channel for Wireless-N. The default value is channel 11.
SSID1-4 The SSID is the network name shared among all

devices in a wireless network. The Services Ready
Platform can support up to four wireless networks. By
default, first and second wireless network is enabled,
and you can create the other wireless network names.
Wireless Network The first default wireless network uses the name
Name (SSID) “cisco_data” which is connected to the default VLAN.
The second default wireless network uses the name
“cisco_voice” which is connected to the voip VLAN. To
rename the default wireless network, enter a unique
Wireless Network Name, which is case-sensitive and
must not exceed 32 characters (use any of the
characters on the keyboard).
Broadcast Network When wireless clients survey the local area for wireless
Name networks to associate, they detect the SSID broadcast
by the Services Ready Platform. If you want to
broadcast the SSID, keep the check box selected. If you
do not want to broadcast the SSID, deselect the check
box.
Enabled Network To enable the wireless network, select the check box. To
disable the wireless network, deselect the check box.

Wireless Protected Setup
Wi-Fi Protected Setup is a feature that makes it easy to set up your wireless
network. If you have client devices, such as wireless adapters, that support Wi-Fi
Protected Setup, then you can use Wi-Fi Protected Setup.
STEP 1 Click Interface Setup on the tab and then click WiFi Setting in the navigation pane.
Click Wireless Protected Setup. The Wireless Protected Setup page appears.
STEP 2 From Select a SSID menu, choose the SSID beacon interval and RTS threshold
settings you want to configure.
STEP 3 In the WPS field, select Disabled if you do not want to use the WiFi Protected
Setup.
NOTE There are three methods available to configure your WiFi settings using WPS. Use
the method below that applies to the client device you are configuring.
WPS Method 1
Use this method if your client device has a Wi-Fi Protected Setup button.
STEP 1 Click or press the Wi-Fi Protected Setup button on the client device.
STEP 2 Click the Wi-Fi Protected Setup button on this page.
STEP 3 After the client device has been configured, click OK. Then refer back to your
client device or its documentation for further instructions.
WPS Method 2
Use this method if your client device has a Wi-Fi Protected Setup PIN number.
STEP 1 Enter the PIN number in the field on this page.
STEP 2 Click Register.

STEP 3 After the client device has been configured, click OK. Then refer back to your
client device or its documentation for further instructions.
WPS Method 3
Use this method if your client device asks for the PIN number of the Services
Ready Platform.
STEP 1 Enter the PIN number listed on this page. (It is also listed on the label on the bottom
of the Services Ready Platform.)
STEP 2 After the client device has been configured, click OK. Then refer to your client
device or its documentation for further instructions.
The Wi-Fi Protected Setup Status, Network Name (SSID), Security, Encryption, and
Passphrase are displayed at the bottom of the page.

Field Description
Select a SSID Choose the SSID for the wireless network that you want
to configure. The default is SSID1.
Wi-Fi Protected WiFi Protected Setup (WPS) option. The default is

Setup Enabled.

Wireless MAC Filter

You can control access to your wireless network by specifying the MAC
addresses of the wireless devices that are permitted access or are blocked.
Click Wireless MAC Filter. The Wireless MAC Filter page appears.
STEP 2 From the Select a SSID menu, choose the MAC filter settings to apply to the SSID.
STEP 3 To filter wireless users by MAC Address, either permitting or blocking access,
select Enabled. If you do not wish to filter users by MAC Address, use the default
setting, Disabled.
STEP 4 In the Access Restriction area, select either Prevent or Permit.
STEP 5 If the Wireless MAC Filter option is enabled, you can click the Show Client List
button to open the Wireless Client List page. This page shows computers and
other devices on the wireless network. The list can be sorted by Client Name,
Interface, IP Address, MAC Address, and Status.
STEP 6 Select Save to MAC Address Filter List for any device you want to add to the list.
Then click Add. To retrieve the most up-to-date information, click Refresh. To exit
this page and return to the Wireless MAC Filter page, click Close.

Field Description
Select a SSID The MAC filter settings to apply to the SSID. The default
is SSID1.
Enabled/Disabled The option to filter wireless users by MAC Address.

Field Description
Access Restriction
Prevent Select this option to prevent devices with the MAC

address in the table from accessing the wireless
network. This button is selected by default.
Permit Select this option to allow devices with the MAC

address in the table to access the wireless network.
This button is not selected by default.
Show Client List This button give you access to the Wireless Client List
page. This page shows computers and other devices on
the wireless network. The list can be sorted by Client
Name, Interface, IP Address, MAC Address, and Status.
MAC Address Table
01-32 The MAC addresses of the devices whose wireless

access you want to block or allow.
Advanced Wireless Settings

This feature is used to set up the advanced wireless functions of the Services
Ready Platform. These settings should be adjusted only by an expert
administrator; incorrect settings can reduce wireless performance.
NOTE To change these settings, wireless must first be enabled.
Click Advanced Wireless Settings. The Advanced Wireless page appears.
STEP 2 From the Select a SSID menu, choose the beacon interval and RTS threshold
settings to apply to the SSID.
STEP 3 Enter a value in the RTS Threshold field. If you encounter inconsistent data flow,
enter only minor reductions. The default value of 2346 is recommended.

If a network packet is smaller than the preset RTS threshold size, the RTS/CTS
mechanism will not be enabled. The Services Ready Platform sends Request to
Send (RTS) frames to a particular receiving station and negotiates the sending of a
data frame. After receiving an RTS, the wireless station responds with a Clear to
Send (CTS) frame to acknowledge the right to begin transmission.
STEP 4 Change any settings in the Advanced Wireless for group SSID area.
Field Description
Advanced Wireless for separate SSID
Select a SSID The beacon interval and RTS threshold settings to apply
to the SSID. The default is SSID1.
RTS Threshold The RTS threshold value. The default value is 2346.

Field Description
Advanced Wireless for group SSID
AP Isolation This option isolates all wireless clients and wireless

devices on your network from each other. Wireless
devices can communicate with the Services Ready
Platform but not with each other. To use this function,
select Enabled. AP Isolation is disabled by default.
Basic Rate The Basic Rate setting is not actually one rate of
transmission but a series of rates at which the Services
Ready Platform can transmit. The Services Ready
Platform advertises its Basic Rate to the other wireless
devices in your network, so they know which rates will
be used. The Services Ready Platform will also
advertise that it will automatically select the best rate for
transmission. The default setting is Default, when the
Services Ready Platform can transmit at all standard
wireless rates (1-2 Mbps, 5.5 Mbps, 11 Mbps, 18 Mbps,
and 24 Mbps). Other options are 1-2 Mbps, for use with
older wireless technology, and All, when the Services
Ready Platform can transmit at all wireless rates. The
Basic Rate is not the actual rate of data transmission. If
you want to specify the Services Ready Platform's rate
of data transmission, configure the Transmission Rate
setting.
Transmission Rate The rate of data transmission should be set depending

on the speed of your wireless network. You can select
from a range of transmission speeds, or you can select
Auto to have the Services Ready Platform automatically
use the fastest possible data rate and enable the Auto-
Fallback feature. Auto-Fallback will negotiate the best
possible connection speed between the Services
Ready Platform and a wireless client. The default is
Auto.

Field Description
N Transmission Rate The rate of data transmission should be set depending

on the speed of your Wireless-N networking. You can
select from a range of transmission speeds, or you can
select Auto to have the Services Ready Platform
automatically use the fastest possible data rate and
enable the Auto-Fallback feature. Auto-Fallback will
negotiate the best possible connection speed between
the Services Ready Platform and a wireless client. The
default is Auto.
CTS Protection The Services Ready Platform will automatically use CTS
Mode (Clear-To-Send) Protection Mode when your Wireless-N
and Wireless-G products are experiencing severe
problems and are not able to transmit to the Services
Ready Platform in an environment with heavy 802.11b
traffic. This function boosts the Services Ready
Platform's ability to catch all Wireless-N and Wireless-G
transmissions but will severely decrease performance.
The default is Auto.
DTIM Interval This value, between 1 and 255, indicates the interval of
the Delivery Traffic Indication Message (DTIM). A DTIM
field is a countdown field informing clients of the next
window for listening to broadcast and multicast
messages. When the Services Ready Platform has
buffered broadcast or multicast messages for
associated clients, it sends the next DTIM with a DTIM
Interval value. Its clients hear the beacons and awaken
to receive the broadcast and multicast messages. The
default value is 1.
Fragmentation This value specifies the maximum size for a packet

Threshold before data is fragmented into multiple packets. If you
experience a high packet error rate, you may slightly
increase the Fragmentation Threshold. Setting the
Fragmentation Threshold too low may result in poor
network performance. Only minor reduction of the
default value is recommended. In most cases, it should
remain at its default value of 2344.

Field Description
Beacon Interval The Beacon Interval value indicates the frequency

interval of the beacon. A beacon is a packet broadcast
by the Services Ready Platform to synchronize the
wireless network. Enter a value between 20 and 65,535
milliseconds. The default value is 100.
Power Control The WiFi output power from the Services Ready
Platform. From this drop-down menu, choose High,
Middle, or Low value to cover a range of the wireless
network. The default is High.
WMM Setting
The Services Ready Platform features WMM Support. The No Acknowledgement
feature is available only when the WMM Support feature is enabled.
Click WMM Setting. The WMM Setting page appears.
STEP 2 If you have other devices on your network that support WMM Support, you can
select Enabled for the WMM Support option.
STEP 3 In the No Ackowledgement option, select Enabled to disable the

acknowledgement feature, so the Services Ready Platform will not resend data if
an error occurs.

Using the Management Interface 4
Field Description
WMM Support If you have other devices on your network that support
WMM Support, select Enabled.
No Select Enabled to disable the acknowledgement

Acknowledgement feature, so the Services Ready Platform will not resend
data if an error occurs. Otherwise, use the default
setting, Disabled.
Using the Management Interface

The Management Interface is set on this page. It allows two loopback interfaces.
STEP 1 Click Interface Setup on the tab and then click Management Interface in the
navigation pane. The Management Interface page appears.
STEP 2 Click on the loopback icon to change the IP address and subnet mask for each
loopback interface. The Management Interface page opens.
STEP 3 Enter the IP Address and Subnet Mask for each interface.

Using the Management Interface
Field Description
IP Address The IP address for the loopback interfaces.
NOTE The IP Address used for the loopback interface assumes a subnet mask of
255.255.255.255.

5
Configuring the Network
This chapter describes how to configure the network including static routing, NAT,
QoS, the firewall, PPPoE, DDNS, IGMP, UPnP, and CDP.
• Static Routing, page 79
• NAT, page 82
• QoS, page 87
• Firewall, page 92
• PPPoE Relay, page 97
• DDNS, page 99
• IGMP, page 104
• UPnP, page 106
• CDP Setting, page 107
Static Routing
These features are used to set up advanced functions of the Services Ready
Platform. Dynamic Routing automatically adjusts how packets travel on your
network. Static Routing sets up a fixed route to another network destination.
Static Routes
The settings for Static Routes are set on this page. It shows the current static
routing list and details of the selected route.
STEP 1 Click Network Setup on the tab and then click Routing in the navigation pane. The
Static Route Rule page appears.
STEP 2 Click Add Entry. The Static Routing Add page opens.

5 Configuring the Network
Static Routing
STEP 3 Enter a static route name, destination IP address/subnet mask, and Services
Ready Platform IP address.
After clicking the Add Entry button, the Static Routing Add page opens.

Static Routing 5
Field Description
Enter Route Name The Static Routing Name
Destination Subnet The address of the network or host to which you want to
assign a static route.
Subnet Mask The Subnet Mask. The Subnet Mask determines which
portion of an IP address is the network portion, and
which portion is the host portion.
Gateway The IP address of the gateway device that allows for

contact between the gateway and the network or host.
Interface Interface to use for static routing.
Show Routing Table Clicking this button shows the current routing table.
Click Hide Routing Table to hide the routing table.
RIP
Dynamic Routing (RIP) enables the Services Ready Platform to automatically
adjust to physical changes in the network layout and exchange routing tables with
other platforms. The Services Ready Platform determines the route of network
packets based on the fewest number of hops between the source and destination.
STEP 1 Click Network Setup on the tab and then click RIP in the navigation pane. The RIP
page appears.
STEP 2 To enable the Dynamic Routing feature for the Internet side, select Enabled. To
disable the Dynamic Routing feature for all data transmissions, use the default
setting, Disabled.
STEP 3 Select the RIP version.
STEP 4 Set RIP timer values.
STEP 5 In the RIP List, select the Interface that you want to enable the RIP function. Or you
can add the network address to join the RIP.

NAT
Intervlan Routing
This page allows you to enable or disable intervlan routing. When enabled, this
feature enables hosts that belong to different VLANs to route to each other. If
disabled, communications between hosts that belong to different VLAN are
blocked. Select either Enabled or Disabled and then Submit to enable or disable
Intervlan routing.
NAT
Setting
The Routing page allows you to enable or disable NAT routing, which allows the
Services Ready Platform to host your network connection to the Internet (Enabled
mode is recommended for most users).

NAT 5
STEP 1 Click Network Setup on the tab and then click NAT in the navigation pane. Click
Setting. The Routing page appears.
STEP 2 To enable NAT, select Enabled.
Port Forwarding
The settings for Port Forwarding are set on this page. It shows the current port
forwarding list and details of the selected route.
Port Forwarding enables the Services Ready Platform to route packets entering
the WAN for a specific application port, or port range, to an internal device on the
local area network. For example, if you have a web server on the Services Ready
Platform LAN, you can setup a port forward for all requests to port 80 to be sent to
the internal web server IP address.
STEP 1 Click Network Setup on the menu bar and then click NAT. Click Port Forwarding.
The Single Port Forwarding page appears.
STEP 2 Click Add Entry. The Port Forwarding page opens.
STEP 3 Select an application from the list.
STEP 4 Enter a name of the application.
STEP 5 Select a WAN interface.
STEP 6 Choose an external and internal port.
STEP 7 Select a protocol.
STEP 8 Enter the IP address of the server that should receive the requests.
STEP 9 Click Enabled to enable the applications you have defined.

NAT
Field Description
Port Forwarding Type of port forwarding: choices are Single Port

Type Forwarding or Port Range Forwarding.
Application Name A list of applications. Select an application from the list.
Enter a Name The name of the application.
Wan Interface Name The WAN Interface.
External Port The external port number used by the server or Internet
application. Check with the Internet application
documentation for more information.
Internal Port The internal port number used by the server or Internet
application. Check with the Internet application
documentation for more information.
Protocol Select the protocol TCP or UDP, or select Both.

NAT 5
Field Description
IP Address The IP address of the server that should receive the

requests.
Enabled Click Enabled to enable the applications you have

defined. This is disabled (unchecked) by default.
Port Range Triggering

The settings for Port Range Triggering are set on this page. It instructs the Router
to watch outgoing data for specific port numbers. The IP address of the computer
that sends the matching data is remembered by the Router, so that when the
requested data returns through the Router, the data is sent to the proper computer
by way of IP address and port mapping rules.
This page shows the current port range triggering list and details of the selected
port range.
STEP 1 Click Network Setup on the tab and then click NAT in the navigation pane. Click
Port Range Triggering. The Port Range Triggering page appears.
STEP 2 Click Add Entry. The Port Range Triggering page opens.
STEP 3 Enter a name of the application.
STEP 4 Select a WAN interface.
STEP 5 Select a LAN interface
STEP 6 Enter a triggered port range.
STEP 7 Enter a forwarded port range.
STEP 8 Click Enabled to enable the applications you have defined.

NAT
Field Description
Application Name The name of the application.
WAN The WAN interface.
LAN The LAN interface.
Triggered Range The starting and ending port numbers of the triggered
port range. Check with the Internet application
documentation for the port number(s) needed.
Forwarded Range Enter the starting and ending port numbers of the
forwarded port range. Check with the Internet
application documentation for the port number(s)
needed.
Enable Click Enabled to enable the applications you have

defined. This is disabled (unchecked) by default.

QoS 5
QoS
Bandwidth Control
Bandwidth control allows the Services Ready Platform to control the maximum
bandwidth for upstream data transmissions.
STEP 1 Click Network Setup on the tab and then click QoS in the navigation pane. Click
Bandwidth Control. The Bandwidth Control page appears.
STEP 2 Click Enabled to enable bandwidth control. Click Disabled to disable bandwidth
control. Bandwidth control is enabled by default at 100,000 Kbps.
STEP 3 If you enabled bandwidth control, enter the upstream bandwidth value in Kbps.

QoS
Field Description
Status The status for this feature: Enabled or Disabled. By

default, it is enabled..
Upstream Enter the maximum upstream bandwidth in the field

Bandwidth provided.
WAN Strict High Priority Queue. To adjust the priority

percentage rates of the QoS priority settings, click the
plus or minus icon for that priority level. See QoS Policy,
on page 88, for more details on setting up QoS
priorities.
QoS Policy
The settings for QoS Rule are set on this page. After clicking Add Entry button, it
can create another QoS Rule. The QoS Policy shows the current QoS list and
details of the selected QoS rule.
NOTE Bandwidth Shaping Control must be enabled to make changes to QoS policies.
STEP 1 Click Network Setup on the tab and then click QOS in the navigation pane. Click
QoS Policy. The QoS Policy page appears.
STEP 2 Click Add Entry. The QoS Setting page opens.
STEP 3 Enter a name of the application, device, or port name.
STEP 4 Choose a category type.
STEP 5 Select a LAN interface.
STEP 6 Enter a port range.
STEP 7 In the Priority menu, choose a QoS priority.

QoS 5
QoS Settings
Quality of Service (QoS) ensures better service to high-priority types of network
traffic.
Field Description
Category There are four categories available. Select one of the

following: Applications, MAC Address, Ethernet Port, or
VLAN.
Applications Application type for the QoS priority.
Enter a Name The name of the QoS priority.
LAN The LAN interface for this setting.

QoS
Field Description
Port Range The number or range of port(s) used by the server or

Internet application. Check with the Internet application
documentation for more information. Select the protocol
TCP or UDP, or Both.
Priority The priority of this QoS setting. Choices of bandwidth

priority are High, Medium, Normal, or Low.
CoS To Queue
The CoS To Queue feature lets you set priorities to specified VLANs.
CoS To Queue. The CoS To Queue page appears.
STEP 2 Change the priority settings for each VLAN CoS as necessary.

QoS 5
Field Description
VLAN CoS Specifies the VLAN (CoS) priority tag values, where
zero is the lowest and 7 is the highest.
Priority Defines the traffic forwarding queue to which the CoS

priority is mapped. Four traffic priority queues are
supported.
DSCP To Queue
The DSCP to Queue Page enables mapping DSCP (IP DiffServ) values to specific
queues.
DSCP To Queue. The DSCP To Queue page appears.
STEP 2 Change the priority settings for each IP DiffServ value as necessary.

Firewall
Field Description
DiffServ Indicates the Differentiated Services Code Point (DSCP)

value in the incoming packet.
Priority Defines the traffic forwarding queue to which the DSCP

priority is mapped.
Firewall
Firewall Filter
A firewall enhances network security and uses Stateful Packet Inspection (SPI) for
more detailed review of data packets entering your network.

Firewall 5
STEP 1 Click Network Setup on the tab and then click Firewall in the navigation pane. Click
Firewall Filter. The Firewall page appears.
STEP 2 Select Enabled to enable firewall protection.
STEP 3 Click the Filter Anonymous Internet Requests option to keep your network from
being “pinged,” or detected, by other Internet users.
STEP 4 Click Filter Internet NAT Redirection to block access to local servers from local
networked computers.
STEP 5 Click Filter IDENT (Port 113) to keep port 113 from being scanned by devices
outside of your local network.
STEP 6 Click any Web Filter options.

Firewall
Field Description
SPI Firewall Select Enabled to use a firewall, or Disabled to disable

Protection it.
Filter Anonymous When enabled, this feature keeps your network from
Internet Requests being “pinged,” or detected, by other Internet users. It
also hides your network ports. Both make it more
difficult for outside users to enter your network. This
filter is enabled by default. Select Disabled to allow
anonymous Internet requests.
Filter Internet NAT This feature uses port forwarding to block access to
Redirection local servers from local networked computers. Select
Enabled to filter Internet NAT redirection, or Disabled to
disable this feature.
Filter IDENT(Port This feature keeps port 113 from being scanned by
113) devices outside of your local network. Select Enabled to
filter port 113, or Disabled to disable this feature.
Filter DoS Attack This feature filters Denial of Service (DoS) attack
packets.
Proxy Use of WAN proxy servers may compromise the

security of the Services Ready Platform. Denying Filter
Proxy will disable access to any WAN proxy servers. To
enable proxy filtering, click the box.
Java Java is a programming language for websites. If you

deny Java, you run the risk of not having access to
Internet sites created using this programming language.
To enable Java filtering, click the box.
ActiveX ActiveX is a programming language for websites. If you

deny ActiveX, you run the risk of not having access to
Internet sites created using this programming language.
To enable ActiveX filtering, click the box.
Cookies A cookie is data stored on your computer and used by

Internet sites when you interact with them. To enable
cookie filtering, click the box.

Firewall 5
Internet Access Control
The settings for Internet Access Control are set on this page.
STEP 1 Click Network Setup on the tab and then click Firewall in the navigation pane. Click
Internet Access Control. The Internet Access Control page appears.
STEP 2 Click Add Entry. The Internet Access Control page opens.
STEP 3 Enter an Internet access policy name.
STEP 4 Click Enabled to activate Internet access control.
STEP 5 Choose a WAN interface.
STEP 6 Choose a LAN interface.
STEP 7 Optionally, click the Show Edit List button to specify MAC address, IP address, and
IP address policies.
STEP 8 Select other blocking options as necessary.

Firewall
Field Description
Enter Policy Name The Internet access control policy name.
Status Enable or disable this feature. The default is Disabled.
Days/Times You can specify the days and times when you want this
policy to be enforced. Select the individual days when
the policy will be in effect, or select Everyday. Then
enter a range of hours and minutes when the policy will
be in effect, or select 24 Hours.

PPPoE Relay 5
Field Description
Blocking Everything You can block all Internet traffic.
Blocking by URL You can block websites by specifying keywords in the

and Keyword URLs. Enter each keyword in a separate field next to
Website Blocking by Keyword.
Blocking by You can block websites by IP address. Click the

Destination IP Blocking by Destination IP Address check box to enter
Address IP addresses.
Blocked by You can filter access to various Internet services, such

Application as FTP or telnet. You can block up to three applications
per policy. From the Applications list, select the
application you want to block.
If the application you want to block is not listed or you

want to edit a service's settings, enter the application's
name in the Application Name field. Enter its range in the
Port Range fields. Select its protocol from the Protocol
drop-down menu. Then click the Add button. To modify
a service, select it from the Application list. Change its
name, port range, and/or protocol setting. Then click the
Modify button. To delete a service, select it from the
Application list. Then click the Delete button.
PPPoE Relay
The PPPoE Relay feature enables an L2TP Access Concentrator (LAC) to relay
active discovery and service selection functionality for PPP over Ethernet (PPPoE),
over a Layer 2 Tunneling Protocol (L2TP) control channel, to an L2TP network
server (LNS) or tunnel switch (multihop node). The relay functionality of this feature
allows the LNS or tunnel switch to advertise the services it offers to the client,
thereby providing end-to-end control of services between the LNS and a PPPoE
client.
The settings for PPPoE relay are set on this page. After clicking Add Entry button,
the PPPoE Relay page opens.

PPPoE Relay
STEP 1 Click Network Setup on the tab and then click PPPoE Relay in the navigation pane.
The PPPoE Relay page appears.
STEP 2 Click Add Entry. The PPPoE Relay page opens.
STEP 3 Choose a WAN option.
STEP 4 Choose a LAN option.
STEP 5 To enable the PPPoE Relay feature for the Internet side, click Enabled.
Field Description
WAN option The WAN interface option.
Lan option The LAN interface option.
PPPoE Relay Status To enable the PPPoE Relay feature for the Internet side,
select Enabled. The default setting is Disabled.

DDNS 5
DDNS
The Services Ready Platform offers a Dynamic Domain Name System (DDNS)
feature. DDNS lets you assign a fixed host and domain name to a dynamic Internet
IP address. It is useful when you are hosting your own website, FTP server, or
other server behind the Services Ready Platform. Before you can use this feature,
you need to sign up for DDNS service at www.dyndns.org or www.tzo.com, DDNS
service providers.
STEP 1 Click Network Setup on the tab and then click DDNS in the navigation pane. The
DDNS page appears.
STEP 2 Choose a DDNS service.
STEP 3 Enter the data for the service that you chose.
Field Description
DDNS Service The DDNS service that you want to use; you must sign
up for an account with DynDNS and TZO.org before you
can use this service. Click Submit to save your choice;
the DynDNS or TZO pages open. This feature is
disabled by default.

DDNS
Field Description
User Name The user name from DynDNS.org.
Password The password from DynDNS.org.
Host Name Your host name. This should be in the format of

name.dyndns.org.
System The DynDNS service you use: Dynamic, Static, or

Custom.
Mail Exchange The address of your mail exchange server, so the e-mail
(Optional) to your DynDNS address go to your mail server.

DDNS 5
Field Description
Mail Exchange This feature allows the mail exchange server to be a

(Backup MX) backup. To enable this feature, use the default setting,
Enabled. To disable this feature, select Disable. if you
are not sure, which seting to select, use the default
setting, Enabled.
Wildcard This setting enables or disables wildcard for your host.

For example, if your DDNS address is
myplace.dyndns.org and you enable wildcard, then the
x.myplace.dyndns.org will work as well (x is the
wildcard). To enable wildcards, use the default setting,
Enabled. To disable wildcard, select Disabled. If you are
not sure which to select, use the default setting,
Enabled.
Internet IP Address Your current IP address.
Status Your DDNS status.
Update To manually trigger an update, click this button.

DDNS
Field Description
E-mail Address The E-mail Addres from TZO account.
TZO Key The key from TZO account.
Domain Name Your host name. This should be in the format of

name.tzo.org.
Internet IP Address Your current IP address.
Status Your DDNS status.
Update To manually trigger an update, click this button.

DMZ 5
DMZ
DMZ allows one local user to be exposed to the Internet for use of a special-
purpose service such as Internet gaming and videoconferencing. DMZ hosting
forwards all the ports at the same time to one PC. The Port Range Forwarding is
more secure because it only opens the ports you want to have opened, while DMZ
hosting opens all the ports of one computer, exposing the computer to the Internet.
Any PC whose port is being forwarded must have its DHCP client function
disabled and should have a new static IP address assigned to it because its IP
address may change when using the DHCP function.
STEP 1 Click Network Setup on the tab and then click DMZ in the navigation pane. The
DMZ page appears.
STEP 2 If you want to allow DMZ hosting, use the default setting, Enabled. Otherwise,
select Disabled.
STEP 3 Specify the source IP addrress and the destination IP address or MAC address.

IGMP
Field Description
Status To use this feature, select Enabled. To disable DMZ

hosting, select Disabled.
Source IP Address If you want any IP address to be the source, select Any
IP Address. If you want to specify an IP address or range
of IP addresses as the designated source, click the
second radio button, and enter the IP address(es) in the
fields provided.
Destination If you want to specify the DMZ host by IP address,

select IP Address and complete the IP address in the
field provided. If you want to specify the DMZ host by
MAC address, select MAC Address and enter the MAC
address in the field provided. To retrieve this
information, click the DHCP Client Table button.
Show DHCP Client The DHCP Client Table lists computers and other
Table devices that have been assigned IP addresses by the
Router. The list can be sorted by Client Name, Interface,
IP Address, MAC Address, and Expired Time (how much
time is left for the current IP address). To select a DHCP
client, click the Select button. To retrieve the most up-to-
date information.
IGMP
Internet Group Multicast Protocol (IGMP) is used to establish membership in a
multicast group and is commonly used for multicast streaming applications. For
example, you may have Internet Protocol Television (IPTV) with multiple setup
boxes on the same local network. These setup boxes have different video streams
running simultaneously, so you should use the IGMP feature of the Services Ready
Platform.
STEP 1 Click Network Setup on the tab and then click IGMP in the navigation pane. The
IGMP page appears.
STEP 2 Select the version you want to support, IGMP v1, IGMP v2, or IGMP v3. If you are
not sure which version to select, use the default setting, IGMP v2.

IGMP 5
STEP 3 If you want to allow multicast traffic through the Services Ready Platform for your
multimedia application devices, use the default setting, Enabled. Otherwise, select
Disabled.
STEP 4 If you use IPTV applications and want to allow immediate channel swapping or
flipping without lag or delays, select Enabled . Otherwise, use the default setting,
Disabled.
Field Description
Support IGMP Select the version you want to support, IGMP v1, IGMP
Version v2, or IGMP v3. If you are not sure which version to
select, use the default setting, IGMP v2.
IGMP Proxy If you want to allow multicast traffic through the

Services Ready Platform for your multimedia
application devices, use the default setting, Enabled.
Otherwise, select Disabled.
Immediate Leave If you use IPTV applications and want to allow

immediate channel swapping or flipping without lag or
delays, select Enabled . Otherwise, use the default
setting, Disabled.

UPnP
UPnP
Universal Plug and Play (UPnP) allows computers to automatically configure the
Services Ready Platform for various Internet applications, such as gaming and
videoconferencing.
STEP 1 Click Network Setup on the tab and then click UPnP in the navigation pane. The
UPnP page appears.
STEP 2 If you want to use UPnP, use the default setting, Enabled. Otherwise, select
Disabled.
STEP 3 If you do not want to be able to make manual changes to the Services Ready
Platform while using the UPnP feature, select Disabled. Otherwise, use the default
setting, Enabled.
STEP 4 To keep UPnP configuration settings after system reboot, click Enabled.
STEP 5 To prohibit any and all Internet connections, click Enabled.

CDP Setting 5
Field Description
UPnP If you want to use UPnP, use the default setting, Enabled.
Otherwise, select Disabled.
Allow Users to If you do not want to be able to make manual changes to

Configure the Services Ready Platform while using the UPnP
feature, select Disabled. Otherwise, use the default
setting, Enabled.
Keep UPnP This choice will decide to save UPnP configuration after
Configurations After system reboot. The default is disabled.
System Reboot
Allow Users to If you want to be able to prohibit any and all Internet
Disable Internet connections, select Enabled. Otherwise, use the default
Access setting, Disabled.
CDP Setting
Cisco Discovery Protocol (CDP) is a feature that enables network administrators to
access a summary of protocol and address information about other devices that
are directly connected to the device initiating the command.
STEP 1 Click Network Setup on the tab and then click CDP Setting in the navigation pane.
The CDP Setting page appears.
STEP 2 Select CDP options.
STEP 3 Select CDP Setting per Ethernet port.

CDP Setting
Field Description
CDP CDP options. Enable All, Disabled All and Per Port. The
default is Per Port.
CDP Timer The CDP timer. The CDP timer range is 5-900.
CDP Hold Timer The CDP Hold timer. The CDP timer range is 10-255.
Interface List Check the enable check box to enable the interface.

6
Voice Settings
This chapter describes how to administer and view voice settings.
• Info, page 109
• System, page 110
Info
The Info page provides information about the product, system, and line status.

6 Voice Settings
System
System
The System page lets you set a password for system configuration for voice.
Field Description
Restricted Access Enter the domain names permitted to access the

Domains System.
Miscellaneous Settings
Syslog Server Enter the IP address of the syslog server, which logs
system information and critical events of the System.
Debug Server Enter the IP address of the debug server, which logs
debug information of the System.
Debug Level This determines the level of debug information that will
be generated. Select 0, 1, 2, 3 or 3+Router from the
drop-down menu. The higher the debug level, the more
debug information will be generated. The default is 0,
which indicates that no debug information will be
generated. Levels 1, 2 & 3 generate messages related to
the voice ports only.
When you have finished making changes, click Submit

to save the changes, or click Cancel to undo your
changes.

Voice Settings
SIP 6
SIP
The SIP page lets you configure numerous SIP parameters and values.

6 Voice Settings
Provisioning
Provisioning
The Provisioning page lets you configure various profiles and parameters.

Voice Settings
Provisioning 6
Field Description
Provision Enable Controls all resync actions independently of firmware

upgrade actions. Set to yes to enable remote
provisioning. The default is Yes.
Resync On Reset Triggers a resync after every reboot except for reboots
caused by parameter updates and firmware upgrades.
The default is Yes.
Resync Random The maximum value for a random time interval that the
Delay device waits before making its initial contact with the
provisioning server. This delay is effective only on the
initial configuration attempt following device power-on
or reset. The delay is a pseudo-random number
between zero and this value.
This parameter is in units of 20 seconds; the default

value of 2 represents 40 seconds. This feature is
disabled when this parameter is set to zero.
This feature can be used to prevent an overload of the

provisioning server when a large number of devices
power-on simultaneously.
The default is 2 (40 seconds).
Resync Periodic The time interval between periodic resyncs with the
provisioning server. The associated resync timer is
active only after the first successful sync with the server.
Set this parameter to zero to disable periodic resyncing.
The default is 3600 seconds.

6 Voice Settings
Provisioning
Field Description
Resync Error Retry Resync retry interval (in seconds) applied in case of
Delay resync failure.
The device has an error retry timer that activates if the

previous attempt to sync with the provisioning server
fails. The device waits to contact the server again until
the timer counts down to zero.
This parameter is the value that is initially loaded into the

error retry timer. If this parameter is set to zero, the
device immediately retries to sync with the provisioning
server following a failed attempt.
Forced Resync Maximum delay (in seconds) the SPA waits before
Delay performing a resync.
The device does not resync while one of its phone lines
is active. Because a resync can take several seconds, it
is desirable to wait until the device has been idle for an
extended period before resyncing. This allows a user to
make calls in succession without interruption.
The device has a timer that begins counting down when

all of its lines become idle. This parameter is the initial
value of the counter. Resync events are delayed until this
counter decrements to zero.
The default is 14,400 seconds.
Resync From SIP Enables a resync to be triggered via a SIP NOTIFY

message.
The default is Yes.
Resync After Triggers a resync after every firmware upgrade attempt.

Upgrade Attempt
The default is Yes.
Resync Trigger 1 Configurable resync trigger conditions. A resync is

triggered when the logic equation in these parameters
Resync Trigger 2 evaluates to TRUE.
The default is (empty).

Voice Settings
Provisioning 6
Field Description
Resync Fails On FNF Determines whether a file-not-found response from the

provisioning server constitutes a successful or a failed
resync. A failed resync activates the error resync timer.
The default is Yes.
Profile Rule This parameter is a profile script that evaluates to the

provisioning resync command. The command is a TCP/
IP operation and an associated URL. The TCP/IP
operation can be TFTP, HTTP, or HTTPS.
If the command is not specified, TFTP is assumed, and

the address of the TFTP server is obtained through
DHCP option 66. In the URL, either the IP address or the
FQDN of the server can be specified. The file name can
have macros, such as $MA, which expands to the device
MAC address.
The default is /spa$PSN.cfg.
Profile Rule B: Defines second, third, and fourth resync commands and
associated profile URLs. These profile scripts are
Profile Rule C: executed sequentially after the primary Profile Rule
Profile Rule D: resync operation has completed. If a resync is triggered
and Profile Rule is blank, Profile Rule B, C, and D are still
evaluated and executed.
Log Resync This parameter contains the message that is sent to the
Request Msg Syslog server at the start of a resync attempt.
The default is $PN $MAC – Requesting resync

$SCHEME://$SERVIP:$PORT$PATH.
Log Resync Syslog message issued upon successful completion of

Success Msg a resync attempt.
The default is $PN $MAC – Successful resync

$SCHEME://$SERVIP:$PORT$PATH -- $ERR.
Log Resync Failure Syslog message issued after a failed resync attempt.
Msg
The default is $PN $MAC – Resync failed: $ERR.

6 Voice Settings
Provisioning
Field Description
Report Rule The target URL to which configuration reports are sent.
This parameter has the same syntax as the Profile_Rule
parameter, and resolves to a TCP/IP command with an
associated URL.
A configuration report is generated in response to an

authenticated SIP NOTIFY message, with Event: report.
The report is an XML file containing the name and value
of all the device parameters.
This parameter may optionally contain an encryption

key.
For example:
[ --key $K ] tftp://ps.callhome.net/$MA/rep.xml.enc
Upgrade Enable Enables firmware upgrade operations independently of

resync actions.
The default is Yes.
Upgrade Error Retry The upgrade retry interval (in seconds) applied in case
Delay of upgrade failure. The device has a firmware upgrade
error timer that activates after a failed firmware upgrade
attempt. The timer is initialized with the value in this
parameter. The next firmware upgrade attempt occurs
when this timer counts down to zero.
Downgrade Rev Enforces a lower limit on the acceptable version number

Limit during a firmware upgrade or downgrade. The device
does not complete a firmware upgrade operation unless
the firmware version is greater than or equal to this
parameter.
Upgrade Rule This parameter is a firmware upgrade script with the

same syntax as Profile_Rule. Defines upgrade
conditions and associated firmware URLs.

Voice Settings
Provisioning 6
Field Description
Log Upgrade Syslog message issued at the start of a firmware

Request Msg upgrade attempt.
The default is $PN $MAC -- Requesting upgrade

$SCHEME://$SERVIP:$PORT$PATH.
Log Upgrade Syslog message issued after a firmware upgrade

Success Msg attempt completes successfully.
The default is $PN $MAC -- Successful upgrade

$SCHEME://$SERVIP:$PORT$PATH -- $ERR.
Log Upgrade Failure Syslog message issued after a failed firmware upgrade
Msg attempt.
The default is $PN $MAC -- Upgrade failed: $ERR.
License Keys This field is empty.
GPP A to GPP P General purpose provisioning parameters. These

parameter can be used as variables in provisioning and
upgrade rules. They are referenced by prepending the
variable name with a ‘$’ character, such as $GPP_A.
The default is (empty)

6 Voice Settings
Regional
Regional
The Regional page lets you configure various tones and patterns.

7
Configuring VPN
This chapter describes how to configure VPN policies and settings.
• IKE Policy, page 119
• IPSec Policy, page 121
• GRE Tunnel, page 124
• VPN Passthrough, page 126
IKE Policy
IKE policy contains the parameters for setting IKE rules. These IKE policies are
used in different VPN policies.
Clicking the Add Entry button opens the IKE Policy Configuration page.
STEP 1 Click VPN on the tab and then click Site to Site IPSec VPN in the navigation pane.
Click IKE Policy. The IKE Policies page appears.
STEP 2 Click Add Entry. The IKE Policy page opens.
STEP 3 In the Policy Name field, enter a unique name used for the VPN policy.
STEP 4 Select an Exchange mode.
STEP 5 Set IKE SA parameter as needed.
STEP 6 If connected to a XAUTH server, enter a username and password.

7 Configuring VPN
IKE Policy
Field Description
General
Policy Name Unique name used for the VPN policy.
Exchange Mode Main or Aggressive mode selection.
IKE SA Parameters
Encryption Encryption algorithms in IKE SA. Choices are DES, 3DES,

Algorithm AES128, AES192, or AES256.
Authentication Authentication algorithm in IKA SA. Choices are MD5

Algorithm and SHA1.

Configuring VPN
IPSec Policy 7
Field Description
Diffie-Hellman (DH) DH Group option. Choices are Group 1 (768 bits) or

Group Group 2 (1024bits).
Enable Dead Peer This function is not necessary for an IKE rule, but it will
(DPD) Detection help to keep connection alive during no traffic if it is
enabled.
DPD Interval DPD packet is send periodically in interval seconds

during no data traffic.
DPD Timeout The connection timeout, in seconds, if there is no DPD

response after DPD timeout.
Extended Authentication
XAUTH Client This function can only work if it is connected to a XAUTH

Enable server.
Username/ Used to authenticate user by XAUTH server.

Password
IPSec Policy
VPN policy contains IPSec SA parameters which let you set connection type and
KEY type.
Clicking the Add Entry button opens the VPN Policy Configuration page.
Click IPSec Policy. The IPSec Policy page appears.
STEP 2 Click Add Entry. The IPSec Policy page opens.
STEP 3 Select the policy index that you are going to configure.
STEP 4 In the Policy Name field, enter a unique name used for the VPN policy.
STEP 5 Select a policy type.
STEP 6 Enter the remote gateway information with which you are going to connect to
establish a IPSec VPN tunnel.
STEP 7 Choose an encryption algorithm.

7 Configuring VPN
IPSec Policy
STEP 8 Choose an integrity algorithm.
STEP 9 Enter auto policy parameters.
STEP 10 Enter local and remote traffic selection settings.

Configuring VPN
IPSec Policy 7
Field Description
General
Policy Number The policy index that you are going to configure.
Policy Name A unique name for bringing up a tunnel.
Policy Type There are two types, Auto Policy and Manual Policy. The
Auto Policy type will use IKE protocol to negotiate
random keys, therefore it first requires an IKE policy as
well. The Manual Policy type will NOT use IKE, which is
more simple, but less secure.
Remote Endpoint The remote gateway that you are going to connect to
establish a IPSec VPN tunnel. Your choices are IP
Address, Any, or FQDN. The Any option will only appear
in Auto Policy and is available to increase security level
for roaming users. The FQDN option requires a Full
Qualified Domain Name. Ensure that the domain name
can be resolved into IP address by a correct DNS server
if the VPN tunnel can not be established.
Encryption Encryption algorithm of IPSec SA. Choices are DES,

Algorithm 3DES, AES128, AES192, and AES256.
Integrity Algorithm Authentication algorithm for IPSec SA. Choices are MD5
and SHA1.
Auto Policy Parameters
PFS Perfect Forward Secrecy, if enabled, it can prevent a

new key from being predictable by previous one.
Pre Shared Key Used by IKE.
SA Lifetime IPSec SA life time in seconds.
Manual Policy Parameters
SPI Incoming A HEX value, range from 0x100 to 0xffffffff.
SPI Outgoing A HEX value, range from 0x100 to 0xffffffff.
Encryption A HEX value, the length depends on the key type of

Algorithm Key Encryption Algorithm above. For example, 3DES length
is 32.

7 Configuring VPN
GRE Tunnel
Field Description
Integrity Algorithm A HEX value, the length depends on the key type of
Key Integrity Algorithm above. For example, MD5 is 32, and
SHA1 is 40.
Local Traffic Selection
Local IP/IP Address/ Selecting a local group which is allowed to pass through
Subnet Mask this tunnel.
Remote Traffic Selection
Remote IP/IP Selecting a remote group which is allowed to pass

Address/Subnet through this tunnel. If the remote end point option is
Mask selected with Any, these inputs will be grayed and
ignored.
GRE Tunnel
Generic Routing Encapsulation (GRE) is a tunneling protocol developed by Cisco
that can encapsulate a wide variety of network layer protocol packet types inside
IP tunnels, creating a virtual point-to-point link to Cisco routers at remote points
over an IP internetwork.
Clicking the Add Entry button opens the GRE Configuration page.
STEP 1 Click VPN on the tab and then click GRE Tunnel in the navigation pane. The GRE
page appears.
STEP 2 Click Add Entry. The GRE Tunnel page opens.
STEP 3 Select the tunnel number that you are going to configure.
STEP 4 Enter a name for the tunnel.
STEP 5 Set the Checksum, Sequence, and Key parameters.
STEP 6 Enter destination IP address of the remote network or host to which you want to
build a tunnel.
STEP 7 Enter the IP address and subnet mask of the remote host. You can use the Add
button to add additional addresses.

Configuring VPN
GRE Tunnel 7
Field Description
Number The tunnel number that you are going to configure.
Status The status of the tunnel.
Tunnel Name The name of the tunnel.
Enable This field indicates whether you want to enable or

disable the tunnel.

7 Configuring VPN
VPN Passthrough
Field Description
Checksum From this drop-down menu, you can select None, Both,
Input or Output checksum values. Input requires that all
input packets have the correct checksum. Output
calculates checksums for outgoing packets. Both will do
both Input and Output checksums. The default is None.
Sequence From this drop-down menu, choose None, Both, Input

and Output sequence values. Output enables
sequencing of outgoing packets. Input requires that all
input packets are serialized. Both will do both Input and
Output sequencing. The default is None.
Key From this drop-down menu, choose None, Both, Input

and Output value. The Input parameter sets the key for
input. The Output parameter sets the key for output. The
Both parameter sets the key to use in both directions.
The default is None.
Key value The key value. The Key Value must be number is
between 0 and 4294967295.
WAN Interface The WAN subinterface on which you want to create a

Name tunnel with the remote site through this interface.
Destination IP or The destination IP address of the remote network or

HostName host to which you want to build a tunnel.
Remote IP Address/ The IP address and subnet mask of the remote host. You
Subnet Mask can use the Add button to add additional addresses.
Modify Remote IP You can modify the Remote IP Address and Subnet
Address/Subnet Mask in this field. Use the Add button to add it into the
Mask list of Remote IP Address/Subnet Mask. For example:
192.168.2.0/24 or 192.168.3.0/32.
VPN Passthrough
The VPN Passthrough page lets you enable or disable IPSec, PPTP, and L2TP
passthrough.

Configuring VPN
VPN Passthrough 7
Click VPN Passthrough. The VPN Passthrough page appears.
STEP 2 To enable IPSec passthrough, click Enabled.
STEP 3 To enable PPTP passthrough, click Enabled.
STEP 4 To enable L2TP passthrough, click Enabled.
Field Description
IPSec Passthrough Internet Protocol Security (IPSec) is a suite of protocols

used to implement secure exchange of packets at the IP
layer. IPSec Pass-Through is enabled by default. To
disable IPSec Passthrough, select Disabled.
PPTP Passthrough Point-to-Point Tunneling Protocol (PPTP) allows the

Point-to-Point Protocol (PPP) to be tunneled through an
IP network. PPTP Pass-Through is enabled by default.
To disable PPTP Passthrough, select Disabled.

7 Configuring VPN
VPN Passthrough
Field Description
L2TP Passthrough Layer 2 Tunneling Protocol is the method used to enable

Point-to-Point sessions via the Internet on the Layer 2
level. L2TP Pass-Through is enabled by default. To
disable L2TP Passthrough, select Disabled.

8
Administration Settings
This chapter describes the administration settings of the Services Ready Platform.
• Web Access Management, page 129
• Remote Management, page 131
• Time Setup, page 136
• User List, page 138
• User Privilege Control, page 139
• Log, page 140
• Factory Defaults, page 141
• Firmware Upgrade, page 143
• Backup & Restore, page 143
• Reboot, page 145
Web Access Management

You can configure access settings and remote acess rules from the Web access
management features.
Settings
This page allows you to change the access settings of the Services Ready
Platform.

8 Administration Settings
Web Access Management
STEP 1 Click Administration on the tab and then click Web Access Management in the
navigation pane. The Web Access Management page appears.
STEP 2 Select Web Access options.
STEP 3 Select Remote Access options.
Field Description
Web Access
Web Utility Access To access this web utility, you can have no security
HTTP or security HTTPS. For HTTPS, enter https://
xxx.xxx.xxx.xxx (the x’s represent the Services Ready
Platform’s Internet IP address) in your web browser's
Address field.

Remote Management 8
Field Description
Web Utility Access This option specifies whether an administrator can

via Wireless access the web utility from a wireless station.
Remote Access
Remote This feature allows you to manage your Services Ready

Management Platform from a remote location, via the Internet.
Web Utility Access To access this web utility, you can have no security
(HTTP) or security (HTTPS). For HTTPS, enter https://
xxx.xxx.xxx.xxx (the x’s represent the Services Ready
Platform’s Internet IP address) in your web browser's
Address field.
Remote Upgrade If enabled, the Services Ready Platform firmware can be

upgraded from Internet.
Allowed Remote IP If you want to be able to access the Router from any
Address external IP address, select Any IP Address. If you want
to specify an external IP address or range of IP
addresses, then select the second option and complete
the fields provided.
Remote Enter the port number that will be open to outside

Management Port access.
Remote Management
TR069
This feature lets you configure communication with an ACS server via TR-069
(CWMP).
STEP 1 Click Administration on the tab and then click Remote Management in the
navigation pane. Click TR-069. The TR-069 page appears.
STEP 2 Click Enabled to enable TR-069.

Remote Management
STEP 3 Enter the URL for ACS. The format should be http(s)://xxx.xxx.xxx.xxx:port or
xxx.xxx.xxx.xxx:port. The xxx.xxx.xxx.xxx is domain name or IP of ACS server;
STEP 4 Enter the ACS username and password.
STEP 5 Enter the Connection request username and password.
STEP 6 Enter the periodic inform interval.
Field Description
Status Select an option to enable or disable TR-069.

Remote Management 8
Field Description
ACS URL The URL for ACS. The format should be http(s)://
xxx.xxx.xxx.xxx:port or xxx.xxx.xxx.xxx:port. The
xxx.xxx.xxx.xxx is domain name or IP of ACS server;
ACS Username The username for ACS. The default username is OUI-
Serial Number; this should be the same as configured at
ACS side and must be filled.
ACS Password The password for ACS. This should be the same as
Connection Request This field will be auto-filled and does not need to be
URL filled manually. The format is http://xxx.xxx.xxx.xxx:port.
The xxx.xxx.xxx.xxx is the WAN IP of the CPE.
Connection Request Connection request username. This should be the same

Username as configured at ACS side.
Connection Request Connection request password.This should be the same

Password as configured at ACS side.
Periodic Inform The periodic inform interval. The default value is 86400
Interval seconds.
Periodic Inform To enable or disable periodic inform.

Enable
Request Download If applied, ACS may call the Download RPC after it
receives the request from the CPE.
SNMP
SNMP is a popular network monitoring and management protocol. The SRP 500
Series platform supports SNMPv2.
navigation pane. Click SNMP. The SNMP page appears.
STEP 2 Click Enabled to enable SNMP.
STEP 3 Choose a trusted IP setting.

Remote Management
Field Description
Enable/Disable To enable SNMP identification, click Enabled. To disable

SNMP, click Disabled.
Trusted IP Only trusted IP or IP range can access this Services

Ready Platform via SNMP.
Get Community Enter the password that allows read-only access to the
SNMP information of the Services Ready Platform.
Set Community Enter the password that allows read/write access to the
SNMP information of the Services Ready Platform.
Local TFTP
This feature lets you download files to the Services Ready Platform remotely and
then use it as a local TFTP server to serve files to hosts on the LAN such as IP
phones.

Remote Management 8
navigation pane. Click Local TFTP. The Local TFTP Control page appears.
STEP 2 Click Enabled to enable TFTP.

Time Setup
Field Description
TFTP Specify whether TFTP is enabled or disabled. The

default is Disabled.
Interface The interface can be used to get remote file.
URL The URL of the remote file.
File Filename of the remote file.
Save As Filename to be given to the saved file.
User Name Username required to access the remote file.
User Password Password required to access the remote file.
Port Port number required to access the remote file.
Timeout Timeout value interval.
Retry Retry count value.
Status Name and size of the remote file.
Time Setup
This feature allows you set parameters related to time for the Service Ready
Platfrom.
STEP 1 Click Administration on the tab and then click Time Setup in the navigation pane.
The Time Setup page appears.
STEP 2 Choose your timezone.
STEP 3 Select Adjust Clock for Daylight Saving Changes option if you want the Services
Ready Platform to automatically adjust for daylight saving time.
STEP 4 If you want to use the default Network Time Protocol (NTP) server, use the default
setting, Auto. If you want to specify the NTP server, select Manual, and enter the
URL or IP address of the NTP server you want to use.
STEP 5 The Resync timer controls how often the Services Ready Platform resyncs with
the NTP server. Enter the number of seconds you want the interval to be.

Time Setup 8
Field Description
Date Enter the current date to set the date manually.
Time Enter the current time to set the time manually.
Time Zone The timezone that the Services Ready Platform is set to.
Automatically adjust Select this option if you want the Services Ready
clock for daylight Platform to automatically adjust for daylight saving time.
saving changes This option is enabled by default.
Time Server If you want to use the default Network Time Protocol
Address (NTP) server, use the default setting, Auto. If you want to
specify the NTP server, select Manual, and enter the
URL or IP address of the NTP server you want to use.

Setup Wizard
Field Description
Resync Timer The timer controls how often the Services Ready
Platform resyncs with the NTP server. Enter the number
of seconds you want the interval to be. The default is
3600 seconds.
Setup Wizard
The Setup Wizard guides you through the basic steps required to configure your
SRP device.
To start the Setup Wizard, click Administration on the tab and then click Setup
Wizard in the navigation pane. The Setup Wizard will begin; follow the instructions
on the Setup Wizard to continue.
User List
The settings for User List page let you change the password for the Admin login
and the User login.
STEP 1 Click Administration on the tab and then click User List in the navigation pane. The
User List page appears.
STEP 2 Click on the edit icon of the username that you want to change.
STEP 3 Enter and confirm a new password.

User Privilege Control 8
Field Description
Username The current username.
Password To ensure the security of the Services Ready Platform,

you will be asked for your password when you access
the Web-based Utility. The default password is admin.
Confirm password It is recommended that you change the default

password to another one. Enter a new Services Ready
Platform password and then enter it again in the Re-
enter to Confirm field.
Level The level of the user.
User Privilege Control

The User Privilege Control screen lets the administrator to adjust the privileges
assigned to the user.
STEP 1 Click Administration on the tab and then click User Privilege Control in the
navigation pane. The User Privilege Control page opens.
STEP 2 Choose either an Read/Write, Read Only, or Hidden option for each feature.

Log
STEP 3 Click Apply to save your settings.
Log
The Services Ready Platform has the ability to record incoming, outgoing, and
DHCP logs. The Incoming Log will display a temporary log of the source IP
addresses and destination port numbers for the incoming Internet traffic. The
Outgoing Log will display a temporary log of the local IP addresses, destination
URLs/IP addresses, and service/port numbers for the outgoing Internet traffic.
STEP 1 Click Administration on the tab and then click Log in the navigation pane. The Log
page appears.
STEP 2 Click Enabled to enable logging.
STEP 3 Choose the log type from the Log List area.
STEP 4 Click Apply to save your settings.

Factory Defaults 8
Field Description
Status To access activity logs, select Enabled. With logging

enabled, you can view temporary logs. Click Disabled to
disable this function.
Log List The log type. To specify the log type, select Incoming
Log, Outgoing Log, or DHCP Client Log.
Factory Defaults
You can set the Services Ready Platform to its settings as it was when it was
shipped from the factory.
STEP 1 Click Administration on the tab and then click Factory Defaults in the navigation
pane. The Factory Defaults page appears.
STEP 2 Click Yes in the Restore Router Factory Defaults to restore the router to its factory
defaults.

Factory Defaults
STEP 3 Click Yes in the Restore Voice Factory Defaults to restore the voice settings to
factory defaults.
Field Description
Restore Router To reset the Services Ready Platform settings to the

Factory Defaults default values, select Yes. Then click Submit. Any
custom Services Ready Platform settings you have
saved will be lost when the default settings are restored.
Restore Voice To reset the voice settings to the default values, select
Factory Defaults Yes. Then click Submit. Any custom Voice settings you
have saved will be lost when the default settings are
restored.

Firmware Upgrade 8
Firmware Upgrade
You can upgrade the firmware on the Services Ready Platform from the Firmware
Upgrade page.
STEP 1 Click Administration on the tab and then click Firmware Upgrade in the navigation
pane. The Firmware Upgrade page appears.
STEP 2 Click Browse and select the location of the upgrade file.
STEP 3 Click Upgrade to upgrade the Services Ready Platform.
Backup & Restore
Backup Configuration
The Backup Configuration feature lets you to backup the configuration settings of
the Services Ready Platform to a file which you can use later to restore the
Services Ready Platform to the same settings.

Backup & Restore
STEP 1 Click Administration on the tab and then click Backup & Restore in the navigation
pane. Click Backup Configuration. The Backup Configuration page appears.
STEP 2 Click Backup to save the configuration of the Services Ready Platform.
Restore Configuration
The Restore Configuration feature lets you restore the Services Ready Platform to
configuration settings from a previous backup session.
STEP 1 Click Administration on the tab and then click Backup & Restore in the navigation
pane. Click Restore Configuration. The Restore Configuration page appears.
STEP 2 Click Browse and select previously backed up configuration file.
STEP 3 Click Restore to restore the configuration of the Services Ready Platform.

Reboot 8
Field Description
Restore To restore the configuration settings of the Services

Ready Platform, click Browse and locate a backup file
and click Restore.
NOTE You must have previously backed up the

configuration settings of the Services Ready
Platform.
Reboot
You can reboot the Services Ready Platform from the configuration utility.

Status
STEP 1 Click Administration on the tab and then click Reboot in the navigation pane. The
Reboot page appears.
STEP 2 Click Reboot to reboot the Services Ready Platform.
Field Description
Reboot Click Reboot to power cycle the Services Ready

Platform
Status
The Status page shows the CPU and Memory status of router. The status
information is displayed in real time.

Switch Setting 8
Switch Setting
On DSL models SRP526W and SRP527W, Ethernet port 4 can be configured as a
WAN port. You can also set the “jumbo mode” packet size on this screen.
NOTE When Ethernet port 4 is configured as a WAN port, the DSL port becomes inactive.
When the DSL port is active, the Ethernet port 4 operates only as a LAN port.
STEP 1 Click Administration on the tab and then click Switch Setting in the navigation
pane. The Switch Setting page appears.
STEP 2 Select Disable to configure Ethernet port 4 as a WAN port. Select Enable to enable
the DSL port.
STEP 3 Choose a Jumbo packet size.

Switch Setting
Field Description
DSL Interface Enable or disable the DSL port. When disabled, the LAN
port 4 can be used an Ethernet WAN port.
Jumbo Mode The size of the jumbo packet. Choices are 1522 or 2048
bytes.

9
Using Services Ready Platform Diagnostics
This chapter describes how to use diagnostic features of the Services Ready
Platform.
• Ping Test, page 149
• Traceroute Test, page 150
• Detect Active LAN Clients, page 151
Ping Test
You can perform a ping test from the configuration utility.
STEP 1 Click Diagnostics on the tab and then click Ping Test in the navigation pane. The
Ping Test page appears.
STEP 2 Enter an IP or URL address.
STEP 3 Enter a packet size in bytes.
STEP 4 Select the number of times to ping.
STEP 5 Click Start to Ping to start the test.

9 Using Services Ready Platform Diagnostics
Traceroute Test
Field Description
IP or URL Address The IP address or URL that you want to ping.
Packet Size The size of the packet you want to use. The range is 32
to 65500 bytes.
Times to Ping Select the number of times you wish to ping: 5, 10, or
Unlimited.
Start to Ping Click this button to begin the test. A new page appears
and displays the test results.
Traceroute Test
You can perform a traceroute test from the configuration utility.
STEP 1 Click Diagnostics on the tab and then click Traceroute Test in the navigation pane.
The Traceroute Test page appears.
STEP 2 Enter an IP or URL address.
STEP 3 Click Start to Traceroute to start the test.

Using Services Ready Platform Diagnostics
Detect Active LAN Clients 9
Field Description
IP or URL Address The IP address or URL that you want to do a trace route.
Start to Traceroute Click this button to begin the test. A new page appears
and displays the test results.
Detect Active LAN Clients

You can perform a search on the active LAN clients on your Services Ready
Platform.
STEP 1 Click Diagnostics on the tab and then click Detect Active LAN Client(s) in the
navigation pane. The Detect Active LAN Client(s) page appears.
STEP 2 Choose a LAN interface.
STEP 3 Select how many seconds you wish to perform this search: 5, 10, or 15 seconds.
STEP 4 Click Start to Search to start the test. Click Close to close the results and return to
the previous screen.

9 Using Services Ready Platform Diagnostics
Detect Active LAN Clients
Field Description
LAN Interface Interface to search.
Search Time Time to perform the search in seconds.

10
Viewing the Services Ready Platform Status
This chapter describes how to view the status of Services Ready Platform.
• Router Settings, page 153
• Firewall Status, page 155
• Interface Information, page 157
• Wireless Network, page 159
• Wireless Client Information, page 160
• Mobile Network, page 161
• DHCP Server Information, page 164
• QoS status, page 165
• Routing table, page 166
• ARP Table, page 167
• RIP Status, page 168
• IGMP Status, page 169
• VPN Status, page 170
• CDP Neighbor Information, page 170
Router Settings
You can view various status parameters of the Services Ready Platform from the
configuration utility.

10 Viewing the Services Ready Platform Status
Router Settings
STEP 1 Click Status on the tab and then click Router in the navigation pane. The Router
page appears.
Field Description
Model The product name of the Services Ready Platform.
Hardware Version The current hardware version number of the Services

Ready Platform.
Boot Version The current version number of the Services Ready

Platform.
Firmware Version The current firmware version number of the Services

Ready Platform.
Recovery Firmware The current recovery firmware version number of the

Services Ready Platform.

Firewall Status 10
Field Description
Setup Wizard The version number of the current Setup Wizard.

Version
WAN MAC Address The MAC address of the WAN.
Current Time The time set on the Services Ready Platform.
WAN The WAN interface type and level.
LAN The LAN interface and level.
Wireless The Wireless SSID and level.
Firewall Status
You can view firewall status from the configuration utility.
STEP 1 Click Status on the tab and then click Firewall Status in the navigation pane. The
Firewall page appears.

Firewall Status
Field Description
Internet Access Policy
No Policy Rule number associated with the Internet Access

Control.
Policy Name Policy name associated with the Internet Access

Control.
Status Enable or disable this policy rule.
Passed (pkts) Packet passed by this rule.
Passed (bytes) Traffic volume passed by this rule, in bytes.
Blocked (pkts) Packet blocked by this rule.
Blocked (bytes) Traffic volume blocked by this rule.
Port Forward
Protocol TCP, UDP, or Both (TCP and UDP).

Interface Information 10
Field Description
Port User specified port to forward.
Host LAN host IP address to forward to.
Packets Number of packets that are forwarded.
Traffic (bytes) Traffic volume that are forwarded, in bytes.
Statistics
Name Name associated with firewall chain.
Accept PKT Number of packets that are accepted by this firewall

chain.
Accept Volume Traffic volume accepted by this firewall chain.

(bytes)
Drop PKT Number of packets that dropped by this firewall chain.
Drop Volume (bytes) Traffic volume dropped by this firewall chain.
Interface Information
You can view interface information from the configuration utility.
STEP 1 Click Status on the tab and then click Interface Information in the navigation pane.
The Interface Information page appears.

Interface Information
Field Description
Interface List
Interface The current VLAN interface including the LAN and WAN
side. An Ethernet WAN interface is shown as “WAN” and
an ADSL WAN interface is shown as “PVC.”
Connect Type The kind of protocol to use/apply on this interface.
IP Address The IP address of the interface.
Subnet Mask The subnet mask of the interface.
MAC Address The MAC address of the interface.
Port List
Interface The current physical port. An Ethernet interface is

shown as “WAN” and an ADSL interface is shown as
“PVC.”
TX (pkts) The number of packets transmitted from this port.

Wireless Network 10
Field Description
RX (pkts) The number of packets received from this port.
Status The status of the physical connections on this port.
Clean TX & RX Click this button to reset to 0 the count of TX and RX

packets.
Wireless Network
The Wireless Network page displays information about your wireless networks.
STEP 1 Click Status on the tab and then click Wireless Network in the navigation pane. The
Wireless Network page appears.
Field Description
Network Mode The status of the wireless network.

Wireless Client Information
Field Description
Radio Band The bandwidth of the wireless network.
Channel The channel of the wireless network.
Wireless List The current settings of the wireless network.
Wireless Client Information

You can view wireless client information from the configuration utility.
STEP 1 Click Status on the tab and then click Wireless Client Information in the navigation
pane. The Wireless Client Information page appears.
Field Description
MAC Address The MAC address of the station.
Tx-Rate The current transmission data rate of the association.

Mobile Network 10
Field Description
Rx-Rate The current receive data rate of the association.
RSSI The signal strength of the last received packet. For

MIMO devices, this is an average value over all active
received chains.
IDLE The current setting of the station inactivity timer. This is

the time in milliseconds when the station will go into
power save if no activity occurs on the link.
Mobile Network
You can view mobile network information from the configuration utility.
STEP 1 Click Status on the tab and then click Mobile Network in the navigation pane. The
Mobile Network page appears.
If the USB 3G data card is UMTS:

Mobile Network
Field Description
IP Address IP address associated to this 3G connection.
Connection Up Time Time elapsed associated to this 3G connection.
Current session RX and TX traffic volume.

usage
Manufacturer Manufacturer of this 3G data card.
Card Model Model name of this 3G data card.
Card Firmware Firmware revision of this 3G data card.
SIM Status SIM card status. (SIM ready or pin code needed).
IMSI IMSI number of this 3G data card.
Service Type 3G service type.

Mobile Network 10
Field Description
Signal strength Signal strength.
Card status The status of the card: Connecting, Connected,

Disconnecting, Disconnected or Card is not activated.
If the USB 3G data card is CDMA2000 (EVDO)
Field Description
IP Address IP address associated to this 3G connection.
Connection Up Time Time elapsed associated to this 3G connection.
Current session RX and TX traffic volume.

usage
Manufacturer Manufacturer of this 3G data card.

DHCP Server Information
Field Description
Card Model Model name of this 3G data card.
Card Firmware Firmware revision of this 3G data card.
ESN ESN number of this 3G data card.
PRL Version PRL Version of this 3G data card.
Phone Number Phone Number associated with the account of 3G data

card.
Carrier Carrier name associated to the 3G service.
Signal Strength Signal strength.
Card Status The status of the card: Connecting, Connected,

Disconnecting, Disconnected or Card is not activated.
DHCP Server Information

You can view DHCP Server Information from the configuration utility.
STEP 1 Click Status on the tab and then click DHCP Server Information in the navigation
pane. The DHCP Server Information page appears.

QoS status 10
Field Description
Client Name The name of DHCP server.
IP Address The IP address of the DHCP server.
MAC Address The MAC address of the DHCP server.
Expires Time The expiry time of the DHCP server.
Interface The interface time of the DHCP server.
QoS status
You can view QoS status from the configuration utility. The Services Ready
Platform supports 5 queues, each of them has a different priority, constant rate,
and burst rate which are configurable.
STEP 1 Click Status on the tab and then click QoS Status in the navigation pane. The QoS
Status page appears.

Routing table
Field Description
Strict High Priority Status of the strict high priority queue.

Queue
High Status of the high priority queue.
Medium Status of the medium priority queue.
Normal Status of the normal priority queue.
Low Status of the low priority queue.
Routing table
You can view Routing Table information from the configuration utility.
STEP 1 Click Status on the tab and then click Routing Table in the navigation pane. The
Routing Table page appears.

ARP Table 10
Field Description
Destination LAN IP The Destination IP Address is the address of the

network or host to which the static route is assigned.
Subnet Mask The Subnet Mask determines which portion of an IP

address is the network portion, and which portion is the
host portion.
Gateway This is the IP address of the gateway device that allows

for contact between the gateway and the network or
host.
Interface This interface tells you whether the Destination IP

Address is on the LAN & Wireless (internal wired and
wireless networks), the Internet (WAN).
ARP Table
You can view ARP Table information from the configuration utility.

RIP Status
STEP 1 Click Status on the tab and then click ARP Table in the navigation pane. The ARP
Table page appears.
Field Description
IP address IP address of the device.
HW type Hardware type of the device.
Flags Flag type of the device.
HW address MAC address of the device.
Mask Mask of the device.
Device Device interface type.
RIP Status
You can view RIP status information from the configuration utility.

IGMP Status 10
STEP 1 Click Status on the tab and then click RIP Status in the navigation pane. The RIP
Status page appears.
IGMP Status
You can view IGMP staus information from the configuration utility.
STEP 1 Click Status on the tab and then click IGMP Status in the navigation pane. The
IGMP Status page appears.
Field Description
IP Address IP address of the device.
Port Port of the device.

VPN Status
VPN Status
You can view VPN status information from the configuration utility.
Field Description
Tunnel Name The name of the VPN tunnel.
Remote Policy The remote network policy.
Local Policy The local network policy.
IKE Algorithm The final result of IKE algorithm after ISAKMP. Only
applies to the “AUTO” mode.
IPSec Algorithm The IPSec algorithm this tunnel is now using.
TX Bytes The number of transmitted bytes of this tunnel.
RX Bytes The number of received bytes of this tunnel.
Connect Status Only applies to the “AUTO” mode.
CDP Neighbor Information

You can view Neighbor information from the configuration utility.
STEP 1 Click Status on the tab and then click CDP Neighbor Information in the navigation
pane. The CDP Neighbor Information page appears.

CDP Neighbor Information 10
Field Description
Device ID The device ID of the neighbor.
Local Interface The local Services Ready Platform name.
Hold Time The hold time before which CDP will throw away
packets.
Capability The class of the neighbor.
Port ID The port number of the neighbor.
IP Address The IP address of the neighbor.

CDP Neighbor Information

A
Specifications
Feature SRP521W
WAN Fast Ethernet
LAN 4 Fast Ethernet Ports
Wireless 802.11b/g/n
Operating 0° C to 40° C
Temperature
Storage -20° C to 70° C

Temperature
Operating 10% to 85% Non-Condensing

Humidity
Storage 5% to 90% Non-Condensing

Humidity
Voltage Range 100-240V 50/60Hz AC
Dimensions (W x D x H): 170mm (6.69 inches) x 170mm (6.69

inches) x 42mm (1.65 inches)
Weight 400g
Feature SRP526W
WAN ADSL2+ Annex B

Specifications
A
Feature SRP526W
Temperature

Temperature

Humidity

Humidity

Weight 440g
Feature SRP 527W
WAN ADSL2+ Annex A
Temperature

Temperature

Humidity

Humidity

Weight 440g

B
Where to Go From Here
Cisco provides a wide range of resources to help you and your customer obtain
the full benefits of the Services Ready Platforms.
Product Resources
Support
Cisco Small Business Support www.cisco.com/go/smallbizsupport
Community
Online Technical Support and www.cisco.com/support
Documentation (Login Required)
Phone Support Contacts www.cisco.com/en/US/support/
tsd_cisco_small_ business_support_
center_contacts.html
Firmware Upgrade (click the www.cisco.com/go/srp500
Download Software link)
Product Documentation
Cisco SRP500 Series Services www.cisco.com/go/srp500
Ready Platforms for Small Business
Cisco Small Business
Cisco Partner Central for Small www.cisco.com/web/partners/sell/smb
Business (Partner Login Required)
Cisco Small Business Home www.cisco.com/smb
Marketplace www.cisco.com/go/marketplace

srp500 Admin

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

srp500 Admin

Uploaded by

Copyright:

Available Formats

ADMINISTRATION

Cisco SRP500 Series Services Ready Platforms

© 2010 Cisco Systems, Inc. All rights reserved. OL-20474-04

Chapter 1: Introducing the SRP500 Series Services Ready Platform (SRP520

Chapter 2: Getting Started with the Configuration Utility 16

Chapter 3: The Quick Setup Menu 20

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 3

Chapter 4: Setting up the Interfaces of the Services Ready Platform 41

Chapter 5: Configuring the Network 79

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 4

Chapter 6: Voice Settings 109

Chapter 7: Configuring VPN 119

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 5

Chapter 8: Administration Settings 129

Chapter 9: Using Services Ready Platform Diagnostics 149

Chapter 10: Viewing the Services Ready Platform Status 153

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 6

Wireless Network 159

Appendix A: Specifications 173

Appendix B: Where to Go From Here 175

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 7

The SRP 500 Series platforms includes these features:

• Intelligence to support voice, data, security, and application services.

• Industry-leading Session Initiation Protocol (SIP) stack to deliver clear, high-

• Interoperability with popular soft switches and voice gateways.

• Integrated security, VPN capabilities, and an 802.11n wireless access point.

• Standards-based provisioning for streamlined deployments.

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 8

2 Phone (FXS) ports, 1 Line (FXO) port, 1 DSL port,

SRP521W Front Panel

Cisco Small Business Pro

POWER/SYS LAN WLAN PHONE WLAN USB WPS

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 9

Cisco Small Business Pro

Front Panel Lights

Lights (Green) Description

WLAN Lights when the radio is powered on and operational.

A slow green flash indicates that the setup is in progress.

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 10

SRP521W Back Panel

SRP526W / SRP527W Back Panel

DSL Phone LAN 12 V DC

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 11

If your analog phone requires a separate bell line (as is

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 12

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 13

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 14

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 15

• Logging In to the Configuration Utility, page 16

• Using the Configuration Utility, page 17

Logging In to the Configuration Utility

STEP 1 Connect a computer to an available LAN port of your SRP.

STEP 2 Start a web browser.

The default username is admin.

NOTE Passwords are case sensitive.

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 16

Using the Configuration Utility

Main Window Areas

Cisco SRP500 Series Services Ready Platforms (SRP520 Models) 17

1 Tab The Tab bar contains major function categories. Click a

2 Navigation Pane The navigation pane provides easy navigation through

Configuration Utility Icons