iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
Allow SNMP Control and Diagnostic Requests Used to allow Simple Network Management
Protocol (SNMP) requests to remotely configure and monitor iPECS SBG-1000. For more
information, refer to Section 6.7.2.
Diagnostic Tools Used to allow the Ping and Traceroute utilities on a remote computer to
communicate with iPECS SBG-1000 in order to test its connectivity.
TR-069 TR-069 is a WAN management protocol intended for communication between Customer
Premise Equipment (CPE) and an Auto-Configuration Server (ACS). It defines a mechanism that
encompasses secure auto configuration of a CPE, and also incorporates other CPE management
functions into a common framework.
To allow remote access to iPECS SBG-1000’s administrative services:
1. Select the services that you would like to make available to computers on the Internet. The
following should be taken into consideration:
• Although the Telnet service is password-protected, it is not considered a secured protocol.
When allowing incoming access to a Telnet server, if port forwarding is configured to use
port 23, select port 8023 to avoid conflicts.
• When allowing incoming access to the WBM, if one of your port forwarding rules is
configured to use port 80, select port 8080 to avoid conflicts.
Note: A remote administration service will have precedence over the port forwarding
rule created for a local server, when both are configured to utilize the same port. For
example, when both the Web server (running on your LAN host) and a remote
administration service (utilized by the ISP) are configured to use port 80, iPECS
SBG-1000 will grant access to the remote administration traffic. The traffic destined
for your Web server will be blocked until you disable the remote administration
service or change its dedicated port. For more information about the port forwarding
rules created for local servers, refer to Section 5.2.3.
2. Click ‘OK’ to save the settings.
The encrypted remote administration over the Web, which is performed using a secure (SSL)
connection, requires an SSL certificate. When accessing iPECS SBG-1000 for the first time using
encrypted remote administration, you will encounter a warning message generated by your
browser regarding certificate authentication. This is due to the fact that iPECS SBG-1000’s SSL
certificate is self-generated. When encountering this message under these circumstances, ignore it
and continue.
It should be noted that even though this message appears, the self-generated certificate is safe,
and provides you with a secure SSL connection. It is also possible to assign a user-defined
certificate to iPECS SBG-1000. To learn about certificates, refer to Section 6.9.4.
If you wish to securely administrate iPECS SBG-1000 via its CLI, establish a Telnet over SSL
connection to the gateway by performing the following:
1. Select the ‘Using Secure Telnet over SSL Port’ check box (see Figure 6.284). By default,
307