ATT External Word Template

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Getting Started Guide For AT&T Managed Internet Service on Demand

This guide provides the basic steps and information you need to get started with AT&T Managed Internet Service on Demand. The guide is divided into three sections:

Quick Start walks you through setting up your initial Internet connection, which you ordered with an A&T sales agent. With this initial order you will need to activate your new Business Center account, test your new Internet connection and get started right away.

Manage Your Service shows how to locate important information such as assigned public IP addresses, increase or decrease bandwidth as well as how to make router/firewall configuration changes to your Internet connection.

Add New Internet Connection shows you how to order a new Internet connection for a new or existing site.

Quick Start ...... 3 Activate Your AT&T Business Center Account ...... 3 Your New Internet Connection...... 7 Test Your Internet Connection ...... 7 Locating Key Information ...... 7 Manage Your Service ...... 9 Edit Your L3 (LAN) Settings ...... 9 Router LAN Assignments ...... 10 Configure Your Firewall ...... 11 Change Your Internet Bandwidth ...... 12 Add a New Internet Connection ...... 14 Add a New Site ...... 14 Add a New Internet Connection ...... 15 Specifying the Internet Configuration ...... 16

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Completing the Order ...... 29 Your New Internet Connection ...... 29 Test Your Internet Connection ...... 30 Appendix ...... 31 Preparing Your Site ...... 31 Default Internet Settings...... 34 Frequently Asked Questions ...... 35

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Quick Start

After you order your Internet connection, the simple two-stage path to getting up and running is to activate your AT&T Business Center account (which gives you access to manage your AT&T Managed Internet Service on Demand services) and then connect a computer to your new Internet connection once available. After you activate your AT&T Business Center account, you can make changes to your Internet settings before or after your Internet connection is active.

Activate Your AT&T Business Center Account

After you complete your order with AT&T, you’ll receive a welcome email that contains a link to the AT&T Business Center where you can activate your AT&T Business Center account.

Figure 1 AT&T Business Center Network on Demand welcome email

To get started, click Activate Now. You’ll be redirected to AT&T Business Center, where you can complete your registration and set up your login and password.

Step 1: Provide Your User Information On the user information page, provide your contact information.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 2 User information

Step 2: Provide Account Information For account information, you’ll need to create a username and password the first time you access Business Center. This will be your ongoing access to AT&T Business Center and your AT&T Managed Internet Service on Demand.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 3 Account information

The security questions will help us to recover your password if you forget it. Be sure to use questions and answers that you will easily remember.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Step 3: Read and Agree to Your AT&T Business Center Agreement If you do not have a an existing AT&T Business account, please read through your AT&T Business Center Agreement and click I have read and agree to the AT&T Business Center agreement.

Figure 4 AT&T Business Center agreement

After you agree to the AT&T Business Center Agreement, click Complete Activation to activate your account. Once you do this, you’ll have access to your AT&T Managed Internet Service on Demand.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Your New Internet Connection

You’ll receive email notification when your AT&T Managed Internet Service on Demand order has completed. At this point, you may begin using your connection.

Figure 5 We’ve Completed Your Order

Test Your Internet Connection

You should test your Internet connection by connecting a device (host), such as a desktop or laptop computer, and attempting to reach an Internet address. If, for some reason, you can’t get an Internet connection after your AT&T Managed Internet Service on Demand connection has been activated, call 1-844-ATT-NOD3 (844-288-6633).

Locating Key Information

After you have successfully validated your Internet connection is active, you will want to locate key information about your new Internet connection such as IP Address information, Routing protocols, Firewall Rules, etc.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 6 Key Information

To get more information about your Internet connection locate the site you want more information on in your Inventory, click the expand icon ( ), Select Manage, and a series of options will be displayed:  Select Edit Bandwidth to view your current bandwidth and make a bandwidth increase or decrease.  Select Edit L3 (LAN) to view router IP information for your Internet connection.  Select Configure Firewall to view your firewall rules. By default the firewall will prevent all internet sourced traffic. To allow inbound “Internet source” traffic to your network, please refer to the Manage Your Service section in this User Guide.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Manage Your Service

To bring your environment and its applications online it may be necessary to make configuration changes to your Internet setting under Edit L3 (LAN) and Configure Firewall.

Edit Your L3 (LAN) Settings

When you first order your Internet connection, the settings will be set to AT&T defaults – See Appendix: AT&T Default Settings. You can change your LAN settings for any active Internet connection. You can do any of the following:  Add or edit LAN blocks for IPv4 and IPv6  Add or edit static routes for IPv4 and IPv6  Enable or edit Network Address Translation (NAT)  Enable or edit Port Address Translation (PAT)  Edit DHCP and firewall settings  Add or edit your SWIP contact information

To edit your L3 (LAN) settings: 1. Open https://www.att.com/ebiz/sdnom and enter your user ID and password. An inventory screen appears. 2. On the inventory page, next to the site you want, click the expand icon ( ). 3. Find the Internet connection you want, click Manage ( ), and then select Edit L3 (LAN).

Figure 7 Edit LAN settings

4. Find the feature you want to change, and then, in the upper right of the panel, click Edit. 5. Make the changes you want to your order, and then click Add to Cart. 6. On the Review Order tab, click Submit Order.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 8 Existing LAN settings

Router LAN Assignments

IPv4 Public LAN Block: This is the IP Gateway address. All IP traffic from the premise going out to the Internet must be directed to this address. Also known as the “next- hop,” or Default route. Note – The IP addressing connection between the cloud virtual router and the premise CPE is the following format. The virtual Router IP is: 10.192.1.254 and the premise CPE IP is: 10.192.1.253. The 10.192.1.0/24 network is just the example network used here to explain this. Additional Public IP addresses may be acquired by taking the following actions: 1. After you select Edit L3 (LAN), Find the IPv4 or IPv6 section you want to edit 2. Click Edit and select the IP block size you wish to add and then click Add to Cart. 3. On the Review Order tab, click Submit Order.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 9 Existing LAN settings

The virtual router performs Network Address Translation (NAT) to translate the premise Private IP subnet of /24 addresses to the one Public IP to then be used to access the Internet. Port Address Translation (PAT) is also performed by the virtual router’s built-in Firewall along with NAT to enable all the premise IP’s and associated internet activities to use the one Public Loopback IP on the router.

Configure Your Firewall

AT&T provides a stateful firewall by default. This means that all internet sourced traffic will be blocked. You can make changes to your firewall after your order is complete. Go to your inventory page, find the Internet connection whose firewall settings you want to configure, click the gear icon ( ) next to the order, and then select Configure Firewall.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 10 Select Configure Firewall

This action takes you to a site outside of AT&T Business Center where you can configure IPv4, IPv6, and MAC filter rules. You can configure your firewall filters as often as you need to add, remove, or change a filter rule.

Figure 11 Configure Stateful firewall

Change Your Internet Bandwidth

You can change your Internet bandwidth settings for any active Internet connection. You can do any of the following:  Increase or decrease the Internet bandwidth  Change your billing type  Change your minimum bandwidth commitment for usage-based billing To change your Internet bandwidth: 1. Open https://www.att.com/ebiz/sdnom and enter your user ID and password. An inventory screen appears.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

2. On the inventory page, next to the site you want, click the expand icon ( ). 3. Find the Internet connection you want, click the gear icon ( ), and then, from the menu, select Edit Bandwidth.

Figure 12 Edit bandwidth

The Internet settings open to the place where you can change your bandwidth settings.

Figure 13 Change Internet bandwidth settings

4. Make the changes you want, and then click Add to Cart. The Review opens showing the changes you made. 5. On the Review page, click Submit Order.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Add a New Internet Connection Add a New Site

Adding a new site lets you expand your network to a new location. Any new site you add will require a new Internet connection as well. 6. Go to https://www.att.com/ebiz/sdnom and enter your user ID and password. The inventory screen appears. 7. Click Add New Site.

Figure 14 Add new site

8. Enter the address information in the fields, and then click Verify Address.

Figure 15 Enter address information

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Our system verifies that the address is valid and that AT&T Managed Internet Service on demand capabilities are available for that location. If valid, you’ll see confirmation that you can add the site.

Figure 16 Validated site address

 If the address is not valid, or AT&T Managed Internet Service on demand capabilities are not available at the address, or if there is already an active site or a pending installation at the address, you’ll see an error message indicating the issue. You can cancel at this point or try to verify another address.  If the address you enter produces multiple matches, you’ll be able to select the correct address.

Add a New Internet Connection

If your network setup is simple, such as only a small number of computers connecting to the Internet, a single Internet connection is likely all you need. However, as your business or organization expands, you will need to add new locations.

9. Open https://www.att.com/ebiz/sdnom and enter your user ID and password, which you created the first time you logged in to AT&T Business Center. An inventory screen appears. 10. Select the site where you want to add internet service, and then click the gear icon ( ).

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 17 Select Add Internet

11. Select Add Internet. The AT&T Managed Internet Service page appears.

Figure 18 AT&T Managed Internet Service page

12. Configure your Internet connection by specifying the settings for the virtual router. There are five panels of settings, which are shown at the top of the page. After you’ve made your selections for each panel, click Continue to save the settings and continue to the next panel.

Specifying the Internet Configuration

Step 1: Set Up Your Port Configuration After you identify the technical requirements for the equipment you’ll use for the new service, you’ll need to indicate the type of port to be installed, based on your equipment’s Ethernet transmission medium.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Under Building Equipment Interface, choose one of the following:  100Mbps Electrical Ethernet  1Gbps Electrical  1Gbps Single-Mode Optical  1Gbps Multi-Mode Optical

Figure 19 Choose the building equipment interface

13. You’ll need to install any required inside wiring at your location. Inside wiring is the wiring that runs from your Ethernet connection point (usually a box on the outside of your building or in a telco room inside) to the telephone jacks or outlets inside your building.

Step 2: Identify Your Technical Contacts In order to ensure successful installation of your building equipment interface and wiring, we need you to provide on-site technical contact information.  The local technical contact provides access to the building and any help our technician needs to establish network connectivity.  The alternate local technical contact provides back-up as needed.  The building manager contact may be required to provide access to the equipment panel if the site has multiple tenants.

Step 3: Specify Your Internet Gateway Settings In the Internet Gateway Settings panel, you set up the basic settings for accessing the Internet. Many of these settings are configured to default values.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

14. The Router Location is set automatically based on your location.

Figure 20 Router location

15. Under Internet Bandwidth, select the bandwidth you want for the virtual router. The bandwidth is the Internet access speed, expressed in megabits per second (Mbps), that you want dedicated to this router. The maximum bandwidth is 150Mbps.

Figure 21 Internet bandwidth

16. Under Billing Type, select whether you want Fixed-Rate Billing or Usage-Based Billing.

Figure 22 Select billing type

 If you select fixed-rate billing, you’re charged the same amount each billing cycle based on the Internet bandwidth you selected in step 2. If you select usage-based billing, you can select a lower minimum bandwidth, but still use the higher bandwidth as needed.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

You’ll be charged for your minimum bandwidth and you may also incur usage-based billing if your average bandwidth use exceeds the minimum.

Figure 22 Usage-based billing

17. Under IP Address Versions, select Dual Stack or IPv6. If you select Dual Stack, you’ll be able to use IPv4 and IPv6 addresses together. If you select IPv6, all IPv4 settings will become unavailable.

Figure 23 Select IP address version

 Under Routing for IPv4 Addresses, Static is set by default.  Under Routing for IPv6 Addresses, Static is set by default.

Figure 24 IPv4 address routing

Note: Steps 4 through 8 are optional and are provided for advanced users. The default settings for these steps are sufficient for most Internet connections. You can

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

proceed to step 9 by clicking Confirm or Continue in each panel without making changes. You can always make changes later. For information about making changes, see the section Edit Your Internet Connection later in this document.

Step 4 (Optional): Specify Your Virtual Router LAN Assignments (Advanced) The virtual router Local Area Network (LAN) assignments should only be set by advanced users. If you leave the settings blank, AT&T will use default settings to provision your service. If you’re an advanced user, you can use this panel to specify the static IP addresses that identify your virtual router on the Internet. You’ll select the subnet prefixes for your IPv4 and, optionally, IPv6 IP addresses, and you’ll add any additional LAN blocks for your network. Set Your Router LAN Assignments Because the default setup for the virtual router is dual stack, you must assign a private IPv4 IP address and prefix length. However, assigning an IPv6 address and prefix is optional. This initial assignment sets the IP addresses for the virtual router and also sets up the initial IPv4 subnet for the hosts on your network. The number of available hosts is based on the prefix length you choose. 18. In the IPv4 IP address field, enter the private IPv4 IP address that identifies the virtual router for the devices at your site that access the Internet. 19. From the IPv4 IP subnet size menu, select the subnet prefix you want. 20. If you will use IPv6 IP addresses, in the IPv6 IP address field, enter the private IPv6 IP address that identifies the virtual router for the devices at your site that access the Internet. 21. From the IPv6 IP subnet size menu, select the subnet prefix you want that is associated with the IPv6 address. Note that if you assign an IPv6 address, these addresses are not routable from the Internet. Leave this field blank to have a routable IPv6 address assigned by AT&T.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 25 Router LAN assignments (advanced only)

Set Up Additional Public IP LAN Blocks If you want more available Internet routable host addresses than are provided in the initial LAN assignment, you can add additional public LAN blocks for IPv4 or IPv6.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 26 Add public LAN block

To add IPv4 or IPv6 public IP LAN blocks (optional): 22. From the Assignment type menu, select who will assign the IP addresses for the LAN block. Only IP addresses assigned by AT&T are currently supported. 23. From the Prefix size menu, select the prefix you want. To add multiple LAN blocks:  After you have assigned one LAN block, you can add additional blocks by clicking Add new IPv4 Block or Add new IPv6 Block. These options appear only if one or more LAN blocks have been added. To edit or remove LAN blocks: 24. To edit a LAN block you’ve added, click Edit ( ) next to the LAN block in the list of added LAN blocks that appears in the panel. Make the changes you want, and then click Save. If you don’t want to save the changes, click Cancel. 25. To remove a LAN block you’ve added, click Delete ( ) next to the LAN block in the list of added LAN blocks that appears in the panel.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 27 Add, edit, or remove LAN blocks

Step 5 (Optional): Specify Your IPv4 Network Address Translation Settings (Advanced) Specify whether you want to use network address translation (NAT) for IPv4 on your network. This option is only available if your network is set up for dual stack. 26. Under Do you want to enable NAT for IPv4?, select Yes or No to enable IPv4 NAT. It is not enabled by default. 27. In the Internal IP address field, enter the internal IPv4 address. 28. In the Next-hop address field, enter the next-hop address. Note that if validation determines that the internal address is within the IPv4 LAN block, you will need to remove the next-hop address you entered. 29. In the External IP address field, enter the public IP address that you previously obtained from a public LAN block. This address identifies your network on the Internet. 30. Click Add NAT. To add multiple NAT configurations:  Click Add another IPv4 NAT and configure it as above. This option appears only if at least one NAT configuration has been added. To edit or remove NAT configurations: 31. To edit an existing IPv4 NAT configuration, click Edit ( ).This option appears only if at least one NAT configuration has been added.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

32. To delete an existing IPv4 NAT address pool, click Delete ( ). This option appears only if at least one NAT configuration has been added.

Figure 28 Add NAT

Step 6 (Optional): Specify Your IPv4 Port Address Translation Settings (Advanced)

Specify whether you want to use port address translation (PAT) for private IPv4 addresses on your network. This option is only available if your network is set up for dual stack. You can specify up to 5 IPv4 PAT address pools. 33. Under Do you want to enable PAT for IPv4?, select Yes or No to enable IPv4 PAT. It is enabled by default. 34. If you enable PAT for hosts that are directly connected to the virtual router, select Use the default PAT for private IPv4 addresses on the same network as the virtual router. You can add up to 4 additional PAT pools. To add an IPv4 PAT address pool: 35. In the Next-hop address field, enter the next-hop address to use for the PAT address pool (or group of address pools). For each next-hop address you can add up to four address pools.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

36. In the IPv4 pool address field, enter the IPv4 address for the pool that will be used on the Internet. 37. From the IPv4 pool prefix list, select the subnet prefix you want. 38. To add another address pool, click Add a new PAT pool. Or, to add the PAT configuration, click Add PAT.

Figure 29 Add PAT

To add multiple IPv4 PAT address pools:  Click Add another IPv4 PAT and configure it as above. This option appears only if at least one IPv4 PAT address pool has been added. To edit or remove IPv4 PAT address pools:  To edit an existing IPv4 PAT address pool, click Edit ( ).This option appears only if at least one IPv4 PAT address pool has been added.  To delete an existing IPv4 PAT address pool, click Delete ( ).This option appears only if at least one IPv4 PAT address pool has been added.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Step 7 (Optional): Specify Your IPv4 or IPv6 DHCP Settings (Advanced) Specify whether you want to use DHCP for IPv4 (if dual stack) and IPv6. You can configure up to 5 DHCP address pools for IPv4 and IPv6.

Figure 30 Configure IPv4 DHCP

To configure Dynamic Host Configuration Protocol (DHCP) for IPv4 or IPv6: 39. Under IPv4 DHCP Pools (or IPv6 DHCP Pools), select Yes or No. DHCP is enabled by default. 40. If DHCP is enabled for hosts directly connected to the virtual router, select Use DHCP for IPv4 addresses on the same network as the virtual router (or Use DHCP for IPv6 addresses on the same network as the virtual router). 41. If you select this option, you can specify up to eight IP addresses that DHCP will not assign. To exclude an IP address from being dynamically assigned, enter it in the IPv4 DHCP excluded address pool (or IPv6 DHCP excluded address pool) field. The IP addresses you enter are validated for length and format. To add DHCP address pools: 42. In the IPv4 DHCP next-hop address (or IPv6 DHCP next-hop address) field, enter a next- hop address. You can add up to four DHCP address pools per next-hop address. This field is optional. If you enter a next-hop address, you can associate up to four DHCP address pools with it. 43. In the IPv4 DHCP pool address (or IPv6 DHCP pool address) field, enter the address that will identify the address pool on the Internet.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

44. From the IPv4 pool size (or IPv6 pool size) menu, select the subnet size for the address pool. 45. In the IPv4 DHCP relay gateway address (or IPv6 DHCP relay gateway address) field, enter the relay gateway address. This is the IP address of the router at your site, which is configured as the DHCP relay agent and is in the same subnet as the DHCP clients (hosts). 46. In the IPv4 DHCP excluded address pool (or IPv6 DHCP excluded address pool) field, enter up to eight IP addresses that you don’t want to be assigned dynamically. To add multiple DHCP address pools:  Click Add another IPv4 DHCP address pool (or Add another IPv6 DHCP address pool) and configure as above. To delete DHCP address pools:  To delete an existing DHCP address pool, click Delete ( ).This option appears only if at least one DHCP address pool has been added.

Step 8 (Optional): Firewall Settings AT&T provides a stateful firewall by default. You can’t configure your firewall settings while ordering the Internet connection. Instead, you’ll see a note stating that you can configure your firewall setting after you submit your order.

Figure 31 Stateful firewall notice

After your order is complete, go to your inventory page, find the Internet connection whose firewall settings you want to configure, click the gear icon ( ) next to the order, and then select Configure Firewall.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 32 Select Configure Firewall

Figure 33 Configure stateful firewall

Step 9: Specify Your SWIP Contact The Shared Whois Project (SWIP) maintains and updates information about who is using specific IP addresses, or a specific block of IP addresses, on the Internet. Because AT&T is allocating IP addresses to you, we need to have a contact in your organization for any SWIP related issues. 47. Enter the contact information in the available fields. The fields are required unless marked as optional. 48. To go to the summary page and complete the order, click Continue.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Completing the Order

The final step is to set the activation date for your router. You can choose to activate immediately or to schedule activation later. You can schedule an activation date up to 30 days from the time you submit your order. 49. Click the Date menu, and on the calendar that opens, select the date you want for activation. 50. Click the Time menu and click the time you want for activation. Note that the time zone is preset according to the time zone you selected when you provided your account information. 51. To add the virtual router to your order, click Continue.

Figure 34 Schedule activation date

Your New Internet Connection

You’ll receive email notification when your AT&T Managed Internet Service on Demand order has completed. At this point, you may begin using your connection.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Figure 35 We’ve Completed Your Order

Test Your Internet Connection

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Appendix

Preparing Your Site

AT&T Managed Internet Service on Demand uses a virtual router in the AT&T Integrated Cloud to access the Internet. You’ll need to provide equipment for your end of the connection, such as an Ethernet hub, switch, or router, and configure it to work with the AT&T virtual router in the AT&T Integrated Cloud. The AT&T virtual router is your dedicated service gateway to the Internet. Its default configuration is sufficient to provide secure “plug and play” access to the Internet for all your office workstations and laptops. The virtual router performs all the necessary Internet gateway functions, such as IP routing, dynamic IP address assignment, private IP address translation, and stateful firewall security. Your equipment and configuration needs depend on how you expect to use your Internet connection. We’ve defined three basic profiles and offer the following basic guidelines for your equipment and configuration needs for each profile. For each profile, we provide the following information:  Your equipment needs  Equipment installation and configuration  Virtual router configuration These are guidelines only. For more detailed information about equipment installation and configuration, you’ll need to contact the manufacturer of your equipment.

Profile 1: Basic Internet Access This profile describes a site where users access the Internet with a Web browser and a Web-based email program. This profile is the simplest and requires minimal equipment or configuration needs. Equipment – A simple Ethernet hub or switch is all that’s required for this profile. An Ethernet hub is a networking device that connects multiple Ethernet devices (such as computers and printers) into one domain. An Ethernet switch has more software features and configuration options than a hub. The essential software feature for a switch (or router) is traffic shaping, which helps you optimize performance and get the most out of your Internet bandwidth. Traffic shaping is needed if sending “bursty traffic” from your site. Typical “bursty traffic” includes file uploads, concurrent input from many active users, or testing to public speedtest sites. See the “Advanced Network” section of this Appendix for more information on shaping.

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Equipment installation and configuration – Follow the manufacturer’s instructions for installing the device you purchase and connect it to the AT&T Ethernet port using a CAT6 Ethernet cable. Connect all the wired devices to the Ethernet Hub using CAT6 cables. Make sure that the Ethernet hub or switch you purchase has enough interfaces to support all the cables for all your workstations and the Ethernet port. There’s no further configuration needed unless you need to employ traffic shaping (See the “Profile 3: Advanced Network” section). By default, your devices are enabled as DHCP clients and acquire a dynamic IP address from the virtual router, which is enabled as a dynamic host configuration protocol (DHCP) server. Virtual router configuration – The default virtual router configuration should meet all your needs for this profile without any further configuration. All your devices will access the Internet and use all the default IP functionality, such as dynamic IP address assignment, PAT, Internet routing, and stateful firewall.

Profile 2: Wireless Device Access This profile describes a site that is similar to profile 1, but also has users who access the Internet using wireless devices, such as tablets and smart phones. Equipment – You’ll need a wireless access point that connects your wireless devices with the wired Ethernet network. You can connect the wireless access point directly to the AT&T Ethernet port, or connect to an Ethernet hub or switch using a CAT6 Ethernet cable. Equipment installation and configuration – Follow the manufacturer’s instructions for setting up the wireless access point. The device should include setup software that allows you to provide a network name (SSID), password, radio band frequency, and channel for the wireless signal. Virtual router configuration – The virtual router works by default with a wireless access point, no further configuration is needed.

Profile 3: Advanced Network This profile describes a site whose business needs require advanced networking features that are maintained locally by a network administrator, such as voice over IP (VoIP), interactive or streaming video, hosting servers, maintaining a data center, or providing local dynamic host configuration protocol (DHCP) support. Equipment – You can install a router at your site to serve as the interface between your network and AT&T Managed Internet Service on Demand, which is accessed via the virtual router in the AT&T Integrated Cloud. The AT&T virtual router supports the advanced features you need, whether on a wired or wireless network. We recommend that you make sure the router you install at your site will support your

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Internet bandwidth and can perform traffic shaping to the AT&T virtual router at the same bandwidth. You need to be concerned about traffic shaping since the NIC (Network Interface Controller) cards employed by your computers and the network interface of your local device (switch or router) are faster than the Internet bandwidth you’ve subscribed to for your Internet connection. For example, most modern computers and network devices employ 1Gbps network interfaces. So, if your Internet bandwidth is 50Mbps, your local device can send 20 times faster than the network is programmed to receive resulting in dropped traffic (think of connecting a fire hose to a garden hose without also inserting a valve to control the flow rate from the fire hose). To ensure that you don’t lose data, you should set the traffic shaping rate to be the same as your Internet bandwidth. This is most important if you send “bursty traffic” such as file uploads, concurrent input from many active users, or testing to public speedtest sites. For example, shaping can be configured on most current Cisco router platforms as follows: interface service-policy output policy-map class class-default shape average

Example for 50 Mbps: interface GigabitEthernet0/0/1 service-policy output Shaping-Policy policy-map Shaping-Policy class class-default shape average 50000000

Equipment installation and configuration – Follow the manufacturer’s instructions for setting up your router. Use the following configuration values:  Configure the WAN interface on your router with the IP address 10.192.1.253/24.  Configure a default static route with the next-hop address 10.192.1.254.  Configure the traffic shaping speed to be equal to your Internet bandwidth setting. Virtual router configuration – The AT&T virtual router functions as the Internet gateway with or without a router at your site. The default IP address for the AT&T virtual router is 10.192.1.254/24 and the expected IP address for the router at your site is 10.192.1.253/24. You can change these default IP addresses on the AT&T Managed Internet Service on Demand web site. The AT&T virtual router will

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

continue to serve as the Internet gateway and be responsible for routing to the Internet, private address translation, and security. You can enable the DHCP Server function on either the AT&T virtual router or the router at your site. If you configure your onsite router as the DHCP server, the DHCP function of the AT&T virtual router is ignored. If you want to use the DHCP server function on the AT&T virtual router, you can configure your onsite router as a relay agent that routes the DHCP clients to the virtual router.

Default Internet Settings

Feature Default Settings Internet speed Up to 150 mbp/s

IP Version Dual Stack

Routing Protocol Static only

Routable IPv4 AT&T Provided only; set to a /32 address [PATed] blocks Routable IPv6 AT&T Provided only; set to a /64 block (vCE LAN Subnet) blocks vCE v4 LAN Highest address from the vCE v4 LAN Subnet provided by AT&T, address e.g., 10.192.1.254/24 vCE v6 LAN Highest address from the vCE v6 LAN Subnet v4 LAN Subnet address provided by AT&T. PAT 1 default pool provided (vCE v4 LAN Subnet)

NAT Not Enabled

V4 DHCP 1 default pool provided (vCE v4 LAN Subnet)

V6 HDCP 1 default pool provided (vCE v6 LAN Subnet)

Firewall options Stateful set to ‘Y’ – allows outbound traffic only

Figure 36 Default Internet Settings

AT&T Business Center – AT&T Managed Internet Service on Demand: Getting Started Guide

Frequently Asked Questions

The following are some frequently asked questions about AT&T Managed Internet Service on Demand. Do I need to do any extra configuration if I want to use a router on my premises? If you use a layer-2 switch, hub, or access point, any connected layer-3 devices (such as laptops, workstations, tablets) dynamically acquire an IP address from a DHCP server. The AT&T virtual router is configured by default as the DHCP Server and the layer-3 devices are configured as DHCP clients. If you use a router (whether wireline or wireless) at your premise, you need to manually configure the IP addresses, routing, DHCP settings, NAT, PAT, and firewall. Can I increase my Internet bandwidth above my minimum bandwidth commitment for usage-based billing? When you change your Internet bandwidth, you have available the whole range from 2Mbps to 150Mbps. The range of committed minimum bandwidth depends on your Internet bandwidth. When you change your Internet bandwidth, you’ll need to select a new minimum bandwidth commitment for your usage-based billing. Can I configure a separate firewall for my Internet connection? Not at this time. The firewall is provisioned at the virtual router as part of the virtual router configuration. To configure IPv4, IPv6, and MAC filter rules for the firewall, do the following: 52. Go to the AT&T Managed Internet on Demand web site (https://www.att.com/ebiz/sdnom). 53. Find the Internet connection. 54. Find the Internet connection you want, click the gear icon ( ), and then, from the menu, select Configure Firewall. You’ll go to a site outside of AT&T Business Center where you can add, remove, and edit your filter rules. Who provides the virtual firewall? The firewall capabilities are part of the virtual router software provided by Brocade Communications Systems.