Version 1.17 Last Updated: May 2017 2017 Verizon. All Rights Reserved. The Verizon name and logo and all other names, logos, and slogans identifying Verizon s products and services are trademarks and service marks or registered trademarks and service marks of Verizon Trademark Services LLC or its affiliates in the United States and/or other countries. Microsoft, windows, Internet Explorer, Excel, and Outlook are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks and service marks are the property of their respective owners.
Table of Contents Overview... 3 Getting Started... 4 Connect a Management PC... 4 Log in to the Web Interface... 5 Configure the WAN Interface... 6 Verify WAN Interface is Active... 6 Wireless WAN... 7 Change Password... 7 Customize the LAN... 8 Data LAN Settings... 8 IP Phone LAN Settings... 9 Diagnostic/Statistics... 10 Ping Test... 10 Detailed Statistics... 11 Advanced Configuration... 12 DMZ Settings... 12 Network Address Translation Service... 13 Static IP Translation... 13 Port Forwarding... 14 Protocol Forwarding... 15 Firewall... 16 Firewall Rules... 17 Administration... 19 System Update... 19 Reboot... 19 Restore Backup Configuration... 20 Additional Help & Resources... 21 Getting Started with Your Service... 21 Returning Equipment... 21 Contact Us... 21 2
Overview Interface Type Interface Identification Type Function Console CONSOLE RJ45 V.24 DTE Interface UTP UTP 1/0 RJ45 Gigabit Ethernet UTP port LAN ETH 0/0 0/3 RJ45 4-portEthernet switch with 10/100/1000 Base T ports FXS FXS 5/0 5/1 RJ11 ISDN PRI connection, NT pinout. Power 12VDC/2.2A DC input jack Power input Earth Stud Clinching stud Earth 4G/LTE Radio Main SMA 4G/LTE detachable Antenna 4G/LTE Radio Diversity SMA 4G/LTE detachable Antenna 3
Getting Started The Web interface on the ONE525 supports the following web browsers: Firefox 30.0 and above Google chrome 35 and above Internet Explorer 8 and above Connect a Management PC Connect the Management PC to port ETH 0/0. The ONE525 will provide an IP address to the PC using DHCP; if the PC is not configured to receive an address from a DHCP server then it should be configured with an IP address of 192.168.1.1, Subnet mask of 255.255.255.0 and a Default gateway of 192.168.1.254. 4
Log in to the Web Interface 1. Go to http://192.168.1.254/. The login page appears. 2. Enter your Username and Password. The default is webadmin for both the user name and password. 3. Click Submit. The OneAccess Overview screen appears. 5
Configure the WAN Interface Select Internet > WAN Settings on the menu on the left. Enter the information provided by your Internet Service Provider. Enter the upload bandwidth for the service in the Upstream Shaping Bandwidth (kbps) field. It is important to set this to the correct value to ensure that the voice traffic is correctly prioritized over the data traffic to guarantee the highest possible voice quality. The value is in kbps, e.g., for a 10Mbps service the value entered would be 10000. Verify WAN Interface is Active Select Overview > Status on the menu on the left. 6
Wireless WAN There are no configurable parameters for the Wireless WAN interface. The Wireless WANs purpose is to provide a fallback connection to the network in the event that the WAN interface is down. If the Wireless WAN is being used, then the Backup Status will be ON. Otherwise it will be OFF. Change Password The default password MUST be changed by the user via the Administration > Password screen to ensure the security of the device and prevent unauthorized users from modifying the configuration. 1. Select the webadmin user from the Username drop down list. 2. Enter a new password in the New Password and Confirm password fields. 3. Click Enter to change the password. 7
Customize the LAN The ONE525 is configured to use 192.168.1.254/24 for the data LAN, and for the IP Phones to use VLAN 100 on 192.192.100.254/24. You can change these values from the LAN menu. Data LAN Settings Select LAN > LAN Settings on the menu on the left. LAN Interface Parameters - you can change the IP network by entering new IP network information. Note: If you are connected via the LAN interface, you are disconnected and will need to reestablish communication to the device. The PC will need to have a static IP address configured as the DHCP will no longer be operational. The LAN has a DHCP server enabled by automatically assigning IP addresses to devices connected to the LAN. Addresses are assigned within the range 192.168.1.100 to 192.168.1.150. DHCP Parameters - The information provided by the DHCP server can be modified: o o o Dynamic - The ONE525 acts as a DNS Proxy for the devices attached to the LAN. Static - The IP addresses of the DNS servers are defined by the user and passed to the devices as part of the DHCP service. No DNS - No DNS information is provided to the attached devices. Reserved IP Address - The ONE525 supports the ability to use DHCP to assign a fixed IP address to a device on the LAN. Enter the IP address of the device on the LAN and the MAC address of the device. The MAC address must be colon separated, in the form xx:xx:xx:xx:xx:xx. 8
IP Phone LAN Settings Select Internet > Phone LAN from the menu on the left to change the IP address. Note: The DHCP Server configuration used to provide the IP address information to the IP Phones cannot be modified in the GUI. 9
Diagnostic/Statistics There are a number of tools available on the ONE525 to assist in troubleshooting network issues and provide detailed statistics on the interfaces and IP services. Click Diagnostics/Statistics on the menu on the left. Ping Test You can perform a simple ping and a traceroute. Example of Traceroute results: 10
Detailed Statistics The Detailed Statistics screen provides detailed information on four areas, as well as the system logs stored in memory. System - information on the software version installed, the current date and time, the status of the connectivity to the SNTP server, and information on the hardware. Logical IP Interfaces - detailed statistics on the WAN, LAN, IP Phone LAN, and the DMZ LAN (if configured). IP Statistics - information on the routing table, addresses allocated by the DHCP server, QoS statistics, the ARP cache, and Firewall (if configured). VoIP - information about the performance of the two FXS lines configured on the ONE525. This information is only available if the FXS ports have were activated on the device by the service provider. 11
Advanced Configuration DMZ Settings The ONE525 can provide a DMZ to allow you to provide external services, such as Web servers, FTP servers, etc., without compromising the security of the LAN. By default, the DMZ zone is disabled and is activated by configuring a VLAN ID and IP Address. 1. Select LAN > DMZ Settings on the menu on the left. 2. Enter any VLAN ID, with the exception of 100 which is reserved for the voice traffic, to identify the DMZ traffic on the LAN. 12
Network Address Translation Service Network Address Translation (NAT) is enabled on the WAN interface to translate the private IP address on the LAN to the public IP address of the WAN interface. Static IP Translation If the Internet Service Provider has provided multiple Public IP addresses, then it is possible to configure the ONE525 to forward traffic for a specific Public IP address to a private IP address. This is commonly used to support external services located on a DMZ. Select Internet > Static IP Translation to set up to five addresses. Note: The Static NAT can only be configured on GigabitEthernet 1/0 on the ONE525. 13
Port Forwarding If the Internet Service Provider only provided a single Public IP address, the Port mapping or Protocol forwarding can be used to forward specific ports or protocols to a private IP address either on the LAN or on the DMZ, if enabled. Select Internet > Port Forwarding. The ONE525 supports NAT on the Ethernet interface GigabitEthernet 1/0 and on the wireless network interface Virtual-Ethernet 1. In the Configuration section: IP Address field should contain the private IP address to which traffic is to be forwarded. Port can be configured to use the port numbers associated with common services, such as TFTP (69), HTTP (80), etc., by selecting the service from the drop-down menu. Or it can be set to other and the port range can be set manually. Active Table contains the Port Forwarding configured on the system. The NAT entries can be modified or deleted by selecting the NAT definition and then selecting the applicable action. 14
Protocol Forwarding Select Internet > Protocol Forwarding. The NAT interface is always GigabitEthernet 1/0 on the ONE525. In the Configuration section: IP Address should contain the private IP address to which the traffic is to be forwarded. Protocol Number is configured by selecting the applicable protocol from the drop-down menu. Active Table contains the Port Forwarding rules configured on the system. These entries can be modified or deleted by selecting the NAT definition, and then selecting the applicable action. 15
Firewall The ONE525 utilizes a Zone-Based Firewall where the policies are no longer configured on an interface, but are defined between zones associated with the interfaces defined on the device. Traffic will: Freely pass between two interfaces that are not attached to a zone. Not pass between an interface that is attached to a zone and an interface that is not. Freely pass between two interfaces that belong to the same security zone. Not pass from zone X to zone Y unless explicitly specified. The zones on the ONE525 are defined as: WAN to LAN LAN to WAN WAN to DMZ DMZ to WAN LAN to DMZ DMZ to LAN By default this firewall is disabled on the ONE525 and all traffic is allowed to flow freely between zones. 1. Select Overview > Internet on the menu on the left. 2. To configure firewall rules for a Zone pair, select the Zone Pair from the Rules drop down list. This will cause all data between the selected zones to be dropped until the rules are defined to allow traffic to pass. When the Firewall is enabled, the ONE525 applies the Zones to the interfaces and creates the Zone pairs. At this time traffic is still configured to flow freely between the zones. 3. To define a rule, click. The Edit Rules pop-up appears. Refer to Firewall Rules for a description of the other icons/actions. 16
4. Enter a Rule Name. It should contain the name of the rule being defined. 5. Rules can be based on Source network, Destination network, Services, or a combination. 6. The Action of the rule can be defined as: 7. Click Save. Inspect - traffic can pass and the reverse flow is also added. Pass - traffic can pass but no reverse flow is created, so if traffic has to return it needs to be explicitly configured in the reverse zone pair. Drop - traffic cannot pass. Firewall Rules You can perform the following actions in the Firewall Rules section: Icon Action Move rule up Move rule down Delete rule Modify rule Create rule 17
18
Administration System Update The ONE525 receives software and configuration updates automatically from the network. The ONE525 checks for updates whenever the WAN connection transitions, and it also performs a check between 1 a.m. and 4 a.m. daily. 1. Click Administration > System Update to request that ONE525 perform a system update, if necessary. 2. Click Start. Note: If ONE525 requires a firmware upgrade, it will reboot during this process. If only a configuration change is required then there will be no interruption to service. Reboot 1. Select Administration > Reboot to reboor ONE525. 2. Click Reboot. 19
Restore Backup Configuration The ONE525 enables you to create a copy of the running configuration to store it to an external device. 1. Click Get Config to create a backup configuration. An encrypted configuration file, using the MAC address and the Serial Number of the unit as the encryption key is created. 2. Click Click here to download configuration to download the file. The file will be named: bsastart-<date>-<time>.dwb, e.g., bsastart-3.9.2015-11h18.dwb. 3. Click Restore Config. The unit automatically reboot to activate the configuration. Note: You must know the MAC Address and Serial Number of the device used to create the configuration file. Go to Overview > System Information. 20
Additional Help & Resources Getting Started with Your Service To learn how to manage your user account settings and site service features, go to: https://customertraining.verizon.com/virtualcommtraining. Returning Equipment Should you require replacement equipment, please refer to the Return Merchandise Authorization (RMA) quick reference guide located at https://customertraining.verizon.com/virtualcommtraining. Contact Us Virtual Communications Express Support: 800 287 6235 Or visit https://customertraining.verizon.com/virtualcommtraining For questions on other Verizon products: 800 230 9800 21