XRIO 3G SETUP

SSH to the Management Server on 80.74.17.43

Username: root
Password: xr10p455w0rd

Linux vm DHCP Server :

SSH to the relevant IP, typically 172.31.3. Login with the following details :

Username: admin
Password: password

Firmware Upgrade :

You now need upgrade the firmware to the latest version.

1. Type “firmware update http://172.31.3.254/2.2/rc3/XrioUBM_2.2.110727.163001.bin“
2. If external use “firmware update http://80.74.17.43/2.2/rc3/XrioUBM_2.2.110727.163001.bin“
3. Once updated run – “firmware patch get http://172.31.3.254/2.2/rc3/ReplacementFiles.zip“
4. Once updated type Hard ‘reboot’ Device. “Unplug Power Cord”…

!

ENSURE THAT THE UBM HAS THE REQUIRED LINKS LICENCES TO SUPPORT
BOTH 3G and ADSL.

Requesting a License

We now have access to a licensing portal…see Matt for details.

Once the license is ready run…

license activate http://portal.xrio.com/licenses/

!

REQUIRED FOR 3G UNITS ONLY ——–

After reboot the device should have detected the mobile ports, you can check this as per below.

1. show mobile-port (This should show two ports connected)

You can now start configuring the unit as normal…

MOBILES

The mobile ports need their APN setting depending on which mobile operator is being used…

To configure do the following…

configure
edit mobile-port Mobile1
apn (enter the value from above)
exit
edit mobile-port Mobile2
apn (enter the value from above)
exit
commit
yes

MOBILE LINKS

add link mobile1 (make sure lower case)
type mobile
port Mobile1
username web
password web
healthcheck 8.8.8.8
download 1000
upload 1000
exit
add link mobile2
type mobile
port Mobile2
username web
password web
healthcheck 8.8.8.8
download 1000
upload 1000

3G TUNNELS

add tunnel siteref-3g1
type tcp
endpoint-remote <IP OF VBOND>
endpoint-local mobile1Endpoint
virtual-remote 10.X.1.1 – this value is determined by the next available IP on the VBond
virtual-local 10.X.1.2 – As above but using .2 as 4^th octet instead
download 1000
upload 1000
compress disable
encrypt disable
encrypt-key ABC123
exit
commit
yes

Repeat process for additional tunnel using siteref-3g2 as the second tunnel name and
incrementing the X value in the virtual tunnel by one.

ADSL PORTS

edit adsl-port ADSL1
encapsulation vcmux
protocol pppoa
vci 38
vpi 0
exit
edit adsl-port ADSL2
encapsulation vcmux
protocol pppoa
vci 38
vpi 0
exit
commit
yes

ADSL LINKS

add link adsl1
type adsl
port adsl-port1
healthcheck 80.74.16.173
username RADIUSUsername1@maxbond.co.uk
password password
download 8000
upload 1000
exit
add link adsl2
type adsl
port adsl-port2
healthcheck 80.74.16.173
username RADIUSUsername2@maxbond.co.uk
password password
download 8000
upload 1000
commit
yes

Repeat for further 2 links if an N4

ADSL TUNNELS

add tunnel siterefmaxbond1
type gre
endpoint-remote <IP OF VBOND>
endpoint-local adsl1Endpoint
virtual-remote 10.X.1.1 – this value is determined by the next available IP on the VBond
virtual-local 10.X.1.2 – As above but using .2 as 4^th octet instead
download 8000
upload 1000
exit
commit

Repeat process for additional tunnels

LAN

add lan-interface lan1
address 10.2.X.254/24
port Port1
exit
commit
yes

DHCP

edit system service dhcp
start address 10.2.X.50
end address 10.2.X.150
dns-primary 172.18.192.10
dns-secondary 172.16.0.11
wins-primary 172.18.192.10
wins-secondary 172.16.0.11
gateway 10.2.X.254
domain-name wates.co.uk
lease-time 43200
lan lan1
subnet 10.2.x.0/24
exit
commit
yes
enable system service dhcp

TEAM

3G Team

add team team1-3g
algorithm distribute
add member tunnel siteref-3g1
exit
add member tunnel siteref-3g2
exit
exit
commit

ADSL Team

add team team1-adsl
algorithm static_bonding
backup-team team1-3g
add member tunnel siterefmaxbond1
exit
add member tunnel siterefmaxbond2
exit
exit
commit

POLICY

add policy policy1
source lan1Subnet
destination any
team team1-adsl
exit
commit
yes

SNMP

edit system service snmp
public-community roca
exit
commit
enable system service snmp
commit

ADDRESS-ALIASES

add address-alias WWHQ
type source
address 80.74.17.9/32
exit
add address-alias WWHQDSL
type source
address 81.149.30.66/32
exit
add address-alias WWMGMT
type source
address 80.74.16.8/29
exit
add address-alias WWXRIOXE
type source
address 80.74.16.203/32
exit
add address-alias XRIODC
type source
address 84.21.143.0/24
exit
add address-alias XRIOOFFICE
type source
address 95.177.98.192/28
exit
add address-alias WatesMPLS
type source
address 172.16.0.0/11
exit
commit

ACCESS RULES

add access-rule WWHQ
source WWHQ
exit
add access-rule WWHQDSL
source WWHQDSL
exit
add access-rule WWMGMT
source WWMGMT
exit
add access-rule WWXRIOXE
source WWXRIOXE
exit
add access-rule XRIODC
source XRIODC
exit
add access-rule XRIOOFFICE
source XRIOOFFICE
exit
add access-rule WatesSNMP
source WatesMPLS
exit

remove access-rule AllowSSH
remove access-rule AllowHTTPS
remove access-rule AllowSNMP
commit
yes

config save